@zhuixin/engine 0.2.1 → 0.2.3

package/dist/engine-main.js

@@ -363,25 +363,25 @@ var require_utils = __commonJS({
       }
       mkdirSync(folder);
     };
-    Utils.prototype.writeFileTo = function(path8, content, overwrite, attr) {
+    Utils.prototype.writeFileTo = function(path9, content, overwrite, attr) {
       const self = this;
-      if (self.fs.existsSync(path8)) {
+      if (self.fs.existsSync(path9)) {
         if (!overwrite) return false;
-        var stat = self.fs.statSync(path8);
+        var stat = self.fs.statSync(path9);
         if (stat.isDirectory()) {
           return false;
         }
       }
-      var folder = pth.dirname(path8);
+      var folder = pth.dirname(path9);
       if (!self.fs.existsSync(folder)) {
         self.makeDir(folder);
       }
       var fd;
       try {
-        fd = self.fs.openSync(path8, "w", 438);
+        fd = self.fs.openSync(path9, "w", 438);
       } catch (e) {
-        self.fs.chmodSync(path8, 438);
-        fd = self.fs.openSync(path8, "w", 438);
+        self.fs.chmodSync(path9, 438);
+        fd = self.fs.openSync(path9, "w", 438);
       }
       if (fd) {
         try {
@@ -390,31 +390,31 @@ var require_utils = __commonJS({
           self.fs.closeSync(fd);
         }
       }
-      self.fs.chmodSync(path8, attr || 438);
+      self.fs.chmodSync(path9, attr || 438);
       return true;
     };
-    Utils.prototype.writeFileToAsync = function(path8, content, overwrite, attr, callback) {
+    Utils.prototype.writeFileToAsync = function(path9, content, overwrite, attr, callback) {
       if (typeof attr === "function") {
         callback = attr;
         attr = void 0;
       }
       const self = this;
-      self.fs.exists(path8, function(exist) {
+      self.fs.exists(path9, function(exist) {
         if (exist && !overwrite) return callback(false);
-        self.fs.stat(path8, function(err, stat) {
+        self.fs.stat(path9, function(err, stat) {
           if (exist && stat.isDirectory()) {
             return callback(false);
           }
-          var folder = pth.dirname(path8);
+          var folder = pth.dirname(path9);
           self.fs.exists(folder, function(exists) {
             if (!exists) self.makeDir(folder);
-            self.fs.open(path8, "w", 438, function(err2, fd) {
+            self.fs.open(path9, "w", 438, function(err2, fd) {
               if (err2) {
-                self.fs.chmod(path8, 438, function() {
-                  self.fs.open(path8, "w", 438, function(err3, fd2) {
+                self.fs.chmod(path9, 438, function() {
+                  self.fs.open(path9, "w", 438, function(err3, fd2) {
                     self.fs.write(fd2, content, 0, content.length, 0, function() {
                       self.fs.close(fd2, function() {
-                        self.fs.chmod(path8, attr || 438, function() {
+                        self.fs.chmod(path9, attr || 438, function() {
                           callback(true);
                         });
                       });
@@ -424,13 +424,13 @@ var require_utils = __commonJS({
               } else if (fd) {
                 self.fs.write(fd, content, 0, content.length, 0, function() {
                   self.fs.close(fd, function() {
-                    self.fs.chmod(path8, attr || 438, function() {
+                    self.fs.chmod(path9, attr || 438, function() {
                       callback(true);
                     });
                   });
                 });
               } else {
-                self.fs.chmod(path8, attr || 438, function() {
+                self.fs.chmod(path9, attr || 438, function() {
                   callback(true);
                 });
               }
@@ -439,7 +439,7 @@ var require_utils = __commonJS({
         });
       });
     };
-    Utils.prototype.findFiles = function(path8) {
+    Utils.prototype.findFiles = function(path9) {
       const self = this;
       function findSync(dir, pattern, recursive) {
         if (typeof pattern === "boolean") {
@@ -448,16 +448,16 @@ var require_utils = __commonJS({
         }
         let files = [];
         self.fs.readdirSync(dir).forEach(function(file) {
-          const path9 = pth.join(dir, file);
-          const stat = self.fs.statSync(path9);
-          if (!pattern || pattern.test(path9)) {
-            files.push(pth.normalize(path9) + (stat.isDirectory() ? self.sep : ""));
+          const path10 = pth.join(dir, file);
+          const stat = self.fs.statSync(path10);
+          if (!pattern || pattern.test(path10)) {
+            files.push(pth.normalize(path10) + (stat.isDirectory() ? self.sep : ""));
           }
-          if (stat.isDirectory() && recursive) files = files.concat(findSync(path9, pattern, recursive));
+          if (stat.isDirectory() && recursive) files = files.concat(findSync(path10, pattern, recursive));
         });
         return files;
       }
-      return findSync(path8, void 0, true);
+      return findSync(path9, void 0, true);
     };
     Utils.prototype.findFilesAsync = function(dir, cb) {
       const self = this;
@@ -512,14 +512,14 @@ var require_utils = __commonJS({
           return "UNSUPPORTED (" + method + ")";
       }
     };
-    Utils.canonical = function(path8) {
-      if (!path8) return "";
-      const safeSuffix = pth.posix.normalize("/" + path8.split("\\").join("/"));
+    Utils.canonical = function(path9) {
+      if (!path9) return "";
+      const safeSuffix = pth.posix.normalize("/" + path9.split("\\").join("/"));
       return pth.join(".", safeSuffix);
     };
-    Utils.zipnamefix = function(path8) {
-      if (!path8) return "";
-      const safeSuffix = pth.posix.normalize("/" + path8.split("\\").join("/"));
+    Utils.zipnamefix = function(path9) {
+      if (!path9) return "";
+      const safeSuffix = pth.posix.normalize("/" + path9.split("\\").join("/"));
       return pth.posix.join(".", safeSuffix);
     };
     Utils.findLast = function(arr, callback) {
@@ -536,9 +536,9 @@ var require_utils = __commonJS({
       prefix = pth.resolve(pth.normalize(prefix));
       var parts = name.split("/");
       for (var i = 0, l = parts.length; i < l; i++) {
-        var path8 = pth.normalize(pth.join(prefix, parts.slice(i, l).join(pth.sep)));
-        if (path8 === prefix || path8.startsWith(prefix + pth.sep)) {
-          return path8;
+        var path9 = pth.normalize(pth.join(prefix, parts.slice(i, l).join(pth.sep)));
+        if (path9 === prefix || path9.startsWith(prefix + pth.sep)) {
+          return path9;
         }
       }
       return pth.normalize(pth.join(prefix, pth.basename(name)));
@@ -585,8 +585,8 @@ var require_fattr = __commonJS({
   "node_modules/.pnpm/adm-zip@0.5.18/node_modules/adm-zip/util/fattr.js"(exports2, module2) {
     "use strict";
     var pth = require("path");
-    module2.exports = function(path8, { fs: fs9 }) {
-      var _path = path8 || "", _obj = newAttr(), _stat = null;
+    module2.exports = function(path9, { fs: fs10 }) {
+      var _path = path9 || "", _obj = newAttr(), _stat = null;
       function newAttr() {
         return {
           directory: false,
@@ -597,8 +597,8 @@ var require_fattr = __commonJS({
           atime: 0
         };
       }
-      if (_path && fs9.existsSync(_path)) {
-        _stat = fs9.statSync(_path);
+      if (_path && fs10.existsSync(_path)) {
+        _stat = fs10.statSync(_path);
         _obj.directory = _stat.isDirectory();
         _obj.mtime = _stat.mtime;
         _obj.atime = _stat.atime;
@@ -5406,23 +5406,23 @@ var require_dom = __commonJS({
       substringData: function(offset, count) {
         return this.data.substring(offset, offset + count);
       },
-      appendData: function(text) {
-        text = this.data + text;
-        this.nodeValue = this.data = text;
-        this.length = text.length;
+      appendData: function(text2) {
+        text2 = this.data + text2;
+        this.nodeValue = this.data = text2;
+        this.length = text2.length;
       },
-      insertData: function(offset, text) {
-        this.replaceData(offset, 0, text);
+      insertData: function(offset, text2) {
+        this.replaceData(offset, 0, text2);
       },
       deleteData: function(offset, count) {
         this.replaceData(offset, count, "");
       },
-      replaceData: function(offset, count, text) {
+      replaceData: function(offset, count, text2) {
         var start = this.data.substring(0, offset);
         var end = this.data.substring(offset + count);
-        text = start + text + end;
-        this.nodeValue = this.data = text;
-        this.length = text.length;
+        text2 = start + text2 + end;
+        this.nodeValue = this.data = text2;
+        this.length = text2.length;
       }
     };
     _extends(CharacterData, Node);
@@ -5433,11 +5433,11 @@ var require_dom = __commonJS({
       nodeName: "#text",
       nodeType: TEXT_NODE,
       splitText: function(offset) {
-        var text = this.data;
-        var newText = text.substring(offset);
-        text = text.substring(0, offset);
-        this.data = this.nodeValue = text;
-        this.length = text.length;
+        var text2 = this.data;
+        var newText = text2.substring(offset);
+        text2 = text2.substring(0, offset);
+        this.data = this.nodeValue = text2;
+        this.length = text2.length;
         var newNode = this.ownerDocument.createTextNode(newText);
         if (this.parentNode) {
           this.parentNode.insertBefore(newNode, this.nextSibling);
@@ -8232,12 +8232,12 @@ var require_sax = __commonJS({
             }
             if (!source.substring(start).match(/^\s*$/)) {
               var doc = domBuilder.doc;
-              var text = doc.createTextNode(source.substring(start));
+              var text2 = doc.createTextNode(source.substring(start));
               if (doc.documentElement) {
                 return errorHandler.error("Extra content at the end of the document");
               }
-              doc.appendChild(text);
-              domBuilder.currentElement = text;
+              doc.appendChild(text2);
+              domBuilder.currentElement = text2;
             }
             return;
           }
@@ -8622,11 +8622,11 @@ var require_sax = __commonJS({
         if (elEndStart < 0) {
           return elStartEnd + 1;
         }
-        var text = source.substring(elStartEnd + 1, elEndStart);
+        var text2 = source.substring(elStartEnd + 1, elEndStart);
         if (isEscapableRaw) {
-          text = text.replace(ENTITY_REG, entityReplacer);
+          text2 = text2.replace(ENTITY_REG, entityReplacer);
         }
-        domBuilder.characters(text, 0, text.length);
+        domBuilder.characters(text2, 0, text2.length);
         return elEndStart;
       }
       return elStartEnd + 1;
@@ -8663,11 +8663,11 @@ var require_sax = __commonJS({
       function substringFromIndex() {
         return source.substring(index);
       }
-      function substringStartsWith(text) {
-        return source.substring(index, index + text.length) === text;
+      function substringStartsWith(text2) {
+        return source.substring(index, index + text2.length) === text2;
       }
-      function substringStartsWithCaseInsensitive(text) {
-        return source.substring(index, index + text.length).toUpperCase() === text.toUpperCase();
+      function substringStartsWithCaseInsensitive(text2) {
+        return source.substring(index, index + text2.length).toUpperCase() === text2.toUpperCase();
       }
       function getMatch(args) {
         var expr = g.reg("^", args);
@@ -9255,9 +9255,9 @@ var require_parse = __commonJS({
         doc.documentElement.nodeName === "plist",
         "malformed document. First element should be <plist>"
       );
-      var plist2 = parsePlistXML(doc.documentElement);
-      if (plist2.length == 1) plist2 = plist2[0];
-      return plist2;
+      var plist3 = parsePlistXML(doc.documentElement);
+      if (plist3.length == 1) plist3 = plist3[0];
+      return plist3;
     }
     function parsePlistXML(node) {
       var i, new_obj, key, val, new_arr, res, counter, type;
@@ -10288,14 +10288,14 @@ var require_XMLCData = __commonJS({
       module2.exports = XMLCData = class XMLCData extends XMLCharacterData {
         // Initializes a new instance of `XMLCData`
         // `text` CDATA text
-        constructor(parent, text) {
+        constructor(parent, text2) {
           super(parent);
-          if (text == null) {
+          if (text2 == null) {
             throw new Error("Missing CDATA text. " + this.debugInfo());
           }
           this.name = "#cdata-section";
           this.type = NodeType.CData;
-          this.value = this.stringify.cdata(text);
+          this.value = this.stringify.cdata(text2);
         }
         // Creates and returns a deep clone of `this`
         clone() {
@@ -10325,14 +10325,14 @@ var require_XMLComment = __commonJS({
       module2.exports = XMLComment = class XMLComment extends XMLCharacterData {
         // Initializes a new instance of `XMLComment`
         // `text` comment text
-        constructor(parent, text) {
+        constructor(parent, text2) {
           super(parent);
-          if (text == null) {
+          if (text2 == null) {
             throw new Error("Missing comment text. " + this.debugInfo());
           }
           this.name = "#comment";
           this.type = NodeType.Comment;
-          this.value = this.stringify.comment(text);
+          this.value = this.stringify.comment(text2);
         }
         // Creates and returns a deep clone of `this`
         clone() {
@@ -10870,13 +10870,13 @@ var require_XMLRaw = __commonJS({
       module2.exports = XMLRaw = class XMLRaw extends XMLNode {
         // Initializes a new instance of `XMLRaw`
         // `text` raw text
-        constructor(parent, text) {
+        constructor(parent, text2) {
           super(parent);
-          if (text == null) {
+          if (text2 == null) {
             throw new Error("Missing raw text. " + this.debugInfo());
           }
           this.type = NodeType.Raw;
-          this.value = this.stringify.raw(text);
+          this.value = this.stringify.raw(text2);
         }
         // Creates and returns a deep clone of `this`
         clone() {
@@ -10907,14 +10907,14 @@ var require_XMLText = __commonJS({
         class XMLText2 extends XMLCharacterData {
           // Initializes a new instance of `XMLText`
           // `text` element text
-          constructor(parent, text) {
+          constructor(parent, text2) {
             super(parent);
-            if (text == null) {
+            if (text2 == null) {
               throw new Error("Missing element text. " + this.debugInfo());
             }
             this.name = "#text";
             this.type = NodeType.Text;
-            this.value = this.stringify.text(text);
+            this.value = this.stringify.text(text2);
           }
           // Creates and returns a deep clone of `this`
           clone() {
@@ -11176,18 +11176,18 @@ var require_XMLNode = __commonJS({
           // `name` node name or an object describing the XML tree
           // `attributes` an object containing name/value pairs of attributes
           // `text` element text
-          element(name, attributes, text) {
+          element(name, attributes, text2) {
             var childNode, item, j, k, key, lastChild, len, len1, val;
             lastChild = null;
-            if (attributes === null && text == null) {
-              [attributes, text] = [{}, null];
+            if (attributes === null && text2 == null) {
+              [attributes, text2] = [{}, null];
             }
             if (attributes == null) {
               attributes = {};
             }
             attributes = getValue(attributes);
             if (!isObject(attributes)) {
-              [text, attributes] = [attributes, text];
+              [text2, attributes] = [attributes, text2];
             }
             if (name != null) {
               name = getValue(name);
@@ -11232,21 +11232,21 @@ var require_XMLNode = __commonJS({
                   lastChild = this.element(key, val);
                 }
               }
-            } else if (!this.options.keepNullNodes && text === null) {
+            } else if (!this.options.keepNullNodes && text2 === null) {
               lastChild = this.dummy();
             } else {
               if (!this.options.ignoreDecorators && this.stringify.convertTextKey && name.indexOf(this.stringify.convertTextKey) === 0) {
-                lastChild = this.text(text);
+                lastChild = this.text(text2);
               } else if (!this.options.ignoreDecorators && this.stringify.convertCDataKey && name.indexOf(this.stringify.convertCDataKey) === 0) {
-                lastChild = this.cdata(text);
+                lastChild = this.cdata(text2);
               } else if (!this.options.ignoreDecorators && this.stringify.convertCommentKey && name.indexOf(this.stringify.convertCommentKey) === 0) {
-                lastChild = this.comment(text);
+                lastChild = this.comment(text2);
               } else if (!this.options.ignoreDecorators && this.stringify.convertRawKey && name.indexOf(this.stringify.convertRawKey) === 0) {
-                lastChild = this.raw(text);
+                lastChild = this.raw(text2);
               } else if (!this.options.ignoreDecorators && this.stringify.convertPIKey && name.indexOf(this.stringify.convertPIKey) === 0) {
-                lastChild = this.instruction(name.substr(this.stringify.convertPIKey.length), text);
+                lastChild = this.instruction(name.substr(this.stringify.convertPIKey.length), text2);
               } else {
-                lastChild = this.node(name, attributes, text);
+                lastChild = this.node(name, attributes, text2);
               }
             }
             if (lastChild == null) {
@@ -11258,7 +11258,7 @@ var require_XMLNode = __commonJS({
           // `name` node name or an object describing the XML tree
           // `attributes` an object containing name/value pairs of attributes
           // `text` element text
-          insertBefore(name, attributes, text) {
+          insertBefore(name, attributes, text2) {
             var child, i, newChild, refChild, removed;
             if (name != null ? name.type : void 0) {
               newChild = name;
@@ -11279,7 +11279,7 @@ var require_XMLNode = __commonJS({
               }
               i = this.parent.children.indexOf(this);
               removed = this.parent.children.splice(i);
-              child = this.parent.element(name, attributes, text);
+              child = this.parent.element(name, attributes, text2);
               Array.prototype.push.apply(this.parent.children, removed);
               return child;
             }
@@ -11288,14 +11288,14 @@ var require_XMLNode = __commonJS({
           // `name` node name or an object describing the XML tree
           // `attributes` an object containing name/value pairs of attributes
           // `text` element text
-          insertAfter(name, attributes, text) {
+          insertAfter(name, attributes, text2) {
             var child, i, removed;
             if (this.isRoot) {
               throw new Error("Cannot insert elements at root level. " + this.debugInfo(name));
             }
             i = this.parent.children.indexOf(this);
             removed = this.parent.children.splice(i + 1);
-            child = this.parent.element(name, attributes, text);
+            child = this.parent.element(name, attributes, text2);
             Array.prototype.push.apply(this.parent.children, removed);
             return child;
           }
@@ -11313,7 +11313,7 @@ var require_XMLNode = __commonJS({
           // `name` name of the node
           // `attributes` an object containing name/value pairs of attributes
           // `text` element text
-          node(name, attributes, text) {
+          node(name, attributes, text2) {
             var child;
             if (name != null) {
               name = getValue(name);
@@ -11321,11 +11321,11 @@ var require_XMLNode = __commonJS({
             attributes || (attributes = {});
             attributes = getValue(attributes);
             if (!isObject(attributes)) {
-              [text, attributes] = [attributes, text];
+              [text2, attributes] = [attributes, text2];
             }
             child = new XMLElement(this, name, attributes);
-            if (text != null) {
-              child.text(text);
+            if (text2 != null) {
+              child.text(text2);
             }
             this.children.push(child);
             return child;
@@ -11582,11 +11582,11 @@ var require_XMLNode = __commonJS({
             }
           }
           // Aliases
-          ele(name, attributes, text) {
-            return this.element(name, attributes, text);
+          ele(name, attributes, text2) {
+            return this.element(name, attributes, text2);
           }
-          nod(name, attributes, text) {
-            return this.node(name, attributes, text);
+          nod(name, attributes, text2) {
+            return this.node(name, attributes, text2);
           }
           txt(value) {
             return this.text(value);
@@ -11606,11 +11606,11 @@ var require_XMLNode = __commonJS({
           dec(version, encoding, standalone) {
             return this.declaration(version, encoding, standalone);
           }
-          e(name, attributes, text) {
-            return this.element(name, attributes, text);
+          e(name, attributes, text2) {
+            return this.element(name, attributes, text2);
           }
-          n(name, attributes, text) {
-            return this.node(name, attributes, text);
+          n(name, attributes, text2) {
+            return this.node(name, attributes, text2);
           }
           t(value) {
             return this.text(value);
@@ -12995,7 +12995,7 @@ var require_XMLDocumentCB = __commonJS({
         // `name` name of the node
         // `attributes` an object containing name/value pairs of attributes
         // `text` element text
-        node(name, attributes, text) {
+        node(name, attributes, text2) {
           if (name == null) {
             throw new Error("Missing node name.");
           }
@@ -13009,14 +13009,14 @@ var require_XMLDocumentCB = __commonJS({
           }
           attributes = getValue(attributes);
           if (!isObject(attributes)) {
-            [text, attributes] = [attributes, text];
+            [text2, attributes] = [attributes, text2];
           }
           this.currentNode = new XMLElement(this, name, attributes);
           this.currentNode.children = false;
           this.currentLevel++;
           this.openTags[this.currentLevel] = this.currentNode;
-          if (text != null) {
-            this.text(text);
+          if (text2 != null) {
+            this.text(text2);
           }
           return this;
         }
@@ -13025,7 +13025,7 @@ var require_XMLDocumentCB = __commonJS({
         // `name` name of the node
         // `attributes` an object containing name/value pairs of attributes
         // `text` element text
-        element(name, attributes, text) {
+        element(name, attributes, text2) {
           var child, i, len, oldValidationFlag, ref, root;
           if (this.currentNode && this.currentNode.type === NodeType.DocType) {
             this.dtdElement(...arguments);
@@ -13045,7 +13045,7 @@ var require_XMLDocumentCB = __commonJS({
                 }
               }
             } else {
-              this.node(name, attributes, text);
+              this.node(name, attributes, text2);
             }
           }
           return this;
@@ -13356,8 +13356,8 @@ var require_XMLDocumentCB = __commonJS({
         ele() {
           return this.element(...arguments);
         }
-        nod(name, attributes, text) {
-          return this.node(name, attributes, text);
+        nod(name, attributes, text2) {
+          return this.node(name, attributes, text2);
         }
         txt(value) {
           return this.text(value);
@@ -13377,11 +13377,11 @@ var require_XMLDocumentCB = __commonJS({
         dtd(root, pubID, sysID) {
           return this.doctype(root, pubID, sysID);
         }
-        e(name, attributes, text) {
-          return this.element(name, attributes, text);
+        e(name, attributes, text2) {
+          return this.element(name, attributes, text2);
         }
-        n(name, attributes, text) {
-          return this.node(name, attributes, text);
+        n(name, attributes, text2) {
+          return this.node(name, attributes, text2);
         }
         t(value) {
           return this.text(value);
@@ -14770,14 +14770,14 @@ var require_BigInteger = __commonJS({
         }
         return low.add(Integer.fromArray(result, BASE, false));
       }
-      var parseBase = function(text, base, alphabet, caseSensitive) {
+      var parseBase = function(text2, base, alphabet, caseSensitive) {
         alphabet = alphabet || DEFAULT_ALPHABET;
-        text = String(text);
+        text2 = String(text2);
         if (!caseSensitive) {
-          text = text.toLowerCase();
+          text2 = text2.toLowerCase();
           alphabet = alphabet.toLowerCase();
         }
-        var length = text.length;
+        var length = text2.length;
         var i2;
         var absBase = Math.abs(base);
         var alphabetValues = {};
@@ -14785,7 +14785,7 @@ var require_BigInteger = __commonJS({
           alphabetValues[alphabet[i2]] = i2;
         }
         for (i2 = 0; i2 < length; i2++) {
-          var c = text[i2];
+          var c = text2[i2];
           if (c === "-") continue;
           if (c in alphabetValues) {
             if (alphabetValues[c] >= absBase) {
@@ -14796,16 +14796,16 @@ var require_BigInteger = __commonJS({
         }
         base = parseValue(base);
         var digits = [];
-        var isNegative = text[0] === "-";
-        for (i2 = isNegative ? 1 : 0; i2 < text.length; i2++) {
-          var c = text[i2];
+        var isNegative = text2[0] === "-";
+        for (i2 = isNegative ? 1 : 0; i2 < text2.length; i2++) {
+          var c = text2[i2];
           if (c in alphabetValues) digits.push(parseValue(alphabetValues[c]));
           else if (c === "<") {
             var start = i2;
             do {
               i2++;
-            } while (text[i2] !== ">" && i2 < text.length);
-            digits.push(parseValue(text.slice(start + 1, i2)));
+            } while (text2[i2] !== ">" && i2 < text2.length);
+            digits.push(parseValue(text2.slice(start + 1, i2)));
           } else throw new Error(c + " is not a valid character");
         }
         return parseBaseFromArray(digits, base, isNegative);
@@ -14937,15 +14937,15 @@ var require_BigInteger = __commonJS({
           if (exp[0] === "+") exp = exp.slice(1);
           exp = +exp;
           if (exp !== truncate(exp) || !isPrecise(exp)) throw new Error("Invalid integer: " + exp + " is not a valid exponent.");
-          var text = split[0];
-          var decimalPlace = text.indexOf(".");
+          var text2 = split[0];
+          var decimalPlace = text2.indexOf(".");
           if (decimalPlace >= 0) {
-            exp -= text.length - decimalPlace - 1;
-            text = text.slice(0, decimalPlace) + text.slice(decimalPlace + 1);
+            exp -= text2.length - decimalPlace - 1;
+            text2 = text2.slice(0, decimalPlace) + text2.slice(decimalPlace + 1);
           }
           if (exp < 0) throw new Error("Cannot include negative exponent part for integers");
-          text += new Array(exp + 1).join("0");
-          v = text;
+          text2 += new Array(exp + 1).join("0");
+          v = text2;
         }
         var isValid2 = /^([0-9][0-9]*)$/.test(v);
         if (!isValid2) throw new Error("Invalid integer: " + v);
@@ -15019,7 +15019,7 @@ var require_BigInteger = __commonJS({
 var require_bplistParser = __commonJS({
   "node_modules/.pnpm/bplist-parser@0.3.2/node_modules/bplist-parser/bplistParser.js"(exports2) {
     "use strict";
-    var fs9 = require("fs");
+    var fs10 = require("fs");
     var bigInt = require_BigInteger();
     var debug = false;
     exports2.maxObjectSize = 100 * 1e3 * 1e3;
@@ -15034,7 +15034,7 @@ var require_bplistParser = __commonJS({
           let err = null;
           let result;
           try {
-            result = parseBuffer(buffer);
+            result = parseBuffer2(buffer);
             resolve(result);
           } catch (ex) {
             err = ex;
@@ -15046,7 +15046,7 @@ var require_bplistParser = __commonJS({
         if (Buffer.isBuffer(fileNameOrBuffer)) {
           return tryParseBuffer(fileNameOrBuffer);
         }
-        fs9.readFile(fileNameOrBuffer, function(err, data) {
+        fs10.readFile(fileNameOrBuffer, function(err, data) {
           if (err) {
             reject(err);
             return callback(err);
@@ -15057,11 +15057,11 @@ var require_bplistParser = __commonJS({
     };
     exports2.parseFileSync = function(fileNameOrBuffer) {
       if (!Buffer.isBuffer(fileNameOrBuffer)) {
-        fileNameOrBuffer = fs9.readFileSync(fileNameOrBuffer);
+        fileNameOrBuffer = fs10.readFileSync(fileNameOrBuffer);
       }
-      return parseBuffer(fileNameOrBuffer);
+      return parseBuffer2(fileNameOrBuffer);
     };
-    var parseBuffer = exports2.parseBuffer = function(buffer) {
+    var parseBuffer2 = exports2.parseBuffer = function(buffer) {
       const header = buffer.slice(0, "bplist".length).toString("utf8");
       if (header !== "bplist") {
         throw new Error("Invalid binary plist. Expected 'bplist' at offset 0.");
@@ -15347,8 +15347,8 @@ var require_bplistParser = __commonJS({
 });
 
 // src/engine-main.ts
-var import_node_fs8 = __toESM(require("fs"));
-var import_node_path7 = __toESM(require("path"));
+var import_node_fs9 = __toESM(require("fs"));
+var import_node_path8 = __toESM(require("path"));
 var import_node_readline = __toESM(require("readline"));
 
 // node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
@@ -15829,8 +15829,8 @@ function getErrorMap() {
 
 // node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path: path8, errorMaps, issueData } = params;
-  const fullPath = [...path8, ...issueData.path || []];
+  const { data, path: path9, errorMaps, issueData } = params;
+  const fullPath = [...path9, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -15946,11 +15946,11 @@ var errorUtil;
 
 // node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value, path8, key) {
+  constructor(parent, value, path9, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path8;
+    this._path = path9;
     this._key = key;
   }
   get path() {
@@ -19392,10 +19392,11 @@ var coerce = {
 };
 var NEVER = INVALID;
 
-// node_modules/.pnpm/@zhuixin+protocol@0.1.2/node_modules/@zhuixin/protocol/dist/index.js
+// node_modules/.pnpm/@zhuixin+protocol@0.2.4/node_modules/@zhuixin/protocol/dist/index.js
 var PROTOCOL_VERSION = "1";
 var engineCapabilities = [
   "inspect:ipa",
+  "inspect:mac-app",
   "extract:app",
   "javascript:analyze",
   "native:inspect",
@@ -19449,6 +19450,15 @@ var DEFINITIONS = [
     requiresArtifact: true,
     builtIn: true
   },
+  {
+    id: "inspect:mac-app",
+    label: "Inspect macOS app",
+    description: "Contents/Info.plist, bundle layout, architectures, signature and entitlements.",
+    targetPlatforms: ["macos"],
+    packageFormats: ["app"],
+    requiresArtifact: true,
+    builtIn: true
+  },
   {
     id: "extract:app",
     label: "Extract app",
@@ -19462,8 +19472,8 @@ var DEFINITIONS = [
     id: "javascript:analyze",
     label: "Analyze JS",
     description: "\u5BF9\u89E3\u5305\u5E94\u7528\u4E2D\u7684 uni-app / WebView \u4E1A\u52A1\u811A\u672C\u505A\u9759\u6001\u5206\u6790\u3002",
-    targetPlatforms: ["ios"],
-    packageFormats: ["ipa"],
+    targetPlatforms: ["ios", "macos"],
+    packageFormats: ["ipa", "app"],
     requiresArtifact: true,
     requiresRea: true
   },
@@ -19678,8 +19688,8 @@ function defaultWorkspaceRoot(hostPlatform, env) {
 
 // src/jobs/capability.ts
 var import_node_crypto = require("crypto");
-var import_node_fs4 = __toESM(require("fs"));
-var import_node_path4 = __toESM(require("path"));
+var import_node_fs5 = __toESM(require("fs"));
+var import_node_path5 = __toESM(require("path"));
 
 // src/errors.ts
 var CoreFailure = class extends Error {
@@ -19914,6 +19924,156 @@ async function inspectIpaFile(ipaPath) {
   };
 }
 
+// src/inspectors/macApp.ts
+var import_node_child_process = require("child_process");
+var import_node_fs4 = __toESM(require("fs"));
+var import_node_path3 = __toESM(require("path"));
+var import_node_util = require("util");
+var bplist = __toESM(require_bplistParser());
+var import_plist2 = __toESM(require_plist());
+var execFileAsync = (0, import_node_util.promisify)(import_node_child_process.execFile);
+function readPlist(filePath) {
+  const buffer = import_node_fs4.default.readFileSync(filePath);
+  if (buffer.subarray(0, 6).toString("utf8") === "bplist") {
+    const [parsed] = bplist.parseBuffer(buffer);
+    return parsed ?? {};
+  }
+  return import_plist2.default.parse(buffer.toString("utf8"));
+}
+function text(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function archName2(cpu, subtype) {
+  if (cpu === 7) return "i386";
+  if (cpu === 16777223) return "x86_64";
+  if (cpu === 12) return "arm";
+  if (cpu === 16777228) return (subtype & 16777215) === 2 ? "arm64e" : "arm64";
+  return `cpu-${cpu.toString(16)}`;
+}
+function machOArchitectures(filePath) {
+  const fd = import_node_fs4.default.openSync(filePath, "r");
+  try {
+    const head = Buffer.alloc(16);
+    const read = import_node_fs4.default.readSync(fd, head, 0, head.length, 0);
+    if (read < 12) return [];
+    const be = head.readUInt32BE(0);
+    if (be === 3405691582 || be === 3405691583) {
+      const count = head.readUInt32BE(4);
+      if (count <= 0 || count > 64) return [];
+      const entrySize = be === 3405691583 ? 32 : 20;
+      const table = Buffer.alloc(count * entrySize);
+      import_node_fs4.default.readSync(fd, table, 0, table.length, 8);
+      const result = [];
+      for (let index = 0; index < count; index += 1) {
+        const offset = index * entrySize;
+        result.push(
+          archName2(table.readUInt32BE(offset), table.readUInt32BE(offset + 4))
+        );
+      }
+      return result;
+    }
+    const le = head.readUInt32LE(0);
+    if (le === 4277009103 || le === 4277009102) {
+      return [archName2(head.readUInt32LE(4), head.readUInt32LE(8))];
+    }
+    return [];
+  } finally {
+    import_node_fs4.default.closeSync(fd);
+  }
+}
+async function readSignature(bundlePath, warnings) {
+  if (process.platform !== "darwin") {
+    warnings.push("Signature details require a macOS host.");
+    return void 0;
+  }
+  try {
+    const { stdout, stderr } = await execFileAsync(
+      "codesign",
+      ["-dv", "--entitlements", ":-", bundlePath],
+      { timeout: 3e4, maxBuffer: 4 * 1024 * 1024 }
+    );
+    const details = `${stderr}`;
+    const authority = [...details.matchAll(/^Authority=(.+)$/gm)].map(
+      (match) => match[1].trim()
+    );
+    const team = /^TeamIdentifier=(.+)$/m.exec(details)?.[1]?.trim();
+    const signed = /^CodeDirectory|^Signature=/m.test(details) || authority.length > 0;
+    return {
+      signed,
+      authority: authority.length ? authority : void 0,
+      teamIdentifier: team,
+      entitlements: stdout.trim() || void 0
+    };
+  } catch (error) {
+    const stderr = error.stderr ?? "";
+    const signed = /^Signature=/m.test(stderr);
+    if (!signed) warnings.push("No code signature could be read.");
+    return { signed };
+  }
+}
+async function inspectMacApp(bundlePath) {
+  const warnings = [];
+  const contents = import_node_path3.default.join(bundlePath, "Contents");
+  const infoPath = import_node_path3.default.join(contents, "Info.plist");
+  if (!import_node_fs4.default.existsSync(infoPath)) {
+    throw new Error("Contents/Info.plist is missing.");
+  }
+  const info = readPlist(infoPath);
+  const executableName = text(info.CFBundleExecutable);
+  const macOsDir = import_node_path3.default.join(contents, "MacOS");
+  const candidates = import_node_fs4.default.existsSync(macOsDir) ? import_node_fs4.default.readdirSync(macOsDir, { withFileTypes: true }).filter((entry) => entry.isFile()).map((entry) => entry.name) : [];
+  const mainBinary = executableName && candidates.find((name) => name === executableName) || candidates[0];
+  let mainExecutable;
+  if (mainBinary) {
+    const binaryPath = import_node_path3.default.join(macOsDir, mainBinary);
+    const architectures = machOArchitectures(binaryPath);
+    if (!architectures.length) warnings.push("Main executable is not a Mach-O binary.");
+    mainExecutable = {
+      path: import_node_path3.default.join("Contents", "MacOS", mainBinary),
+      architectures,
+      sizeBytes: import_node_fs4.default.statSync(binaryPath).size
+    };
+  } else {
+    warnings.push("No executable found under Contents/MacOS.");
+  }
+  const topLevel = import_node_fs4.default.existsSync(contents) ? import_node_fs4.default.readdirSync(contents, { withFileTypes: true }).map((entry) => entry.name) : [];
+  const frameworksDir = import_node_path3.default.join(contents, "Frameworks");
+  const pluginsDir = import_node_path3.default.join(contents, "PlugIns");
+  const resourcesDir = import_node_path3.default.join(contents, "Resources");
+  const list = (dir) => import_node_fs4.default.existsSync(dir) ? import_node_fs4.default.readdirSync(dir, { withFileTypes: true }).filter((entry) => entry.isDirectory() || entry.name.endsWith(".framework")).map((entry) => entry.name) : [];
+  const countResources = (dir) => {
+    if (!import_node_fs4.default.existsSync(dir)) return 0;
+    let total = 0;
+    for (const entry of import_node_fs4.default.readdirSync(dir, { withFileTypes: true })) {
+      const full = import_node_path3.default.join(dir, entry.name);
+      if (entry.isDirectory()) total += countResources(full);
+      else total += 1;
+    }
+    return total;
+  };
+  return {
+    kind: "mac-app",
+    bundle: {
+      path: bundlePath,
+      identifier: text(info.CFBundleIdentifier),
+      name: text(info.CFBundleDisplayName) ?? text(info.CFBundleName) ?? import_node_path3.default.basename(bundlePath, ".app"),
+      version: text(info.CFBundleShortVersionString),
+      build: text(info.CFBundleVersion),
+      executable: executableName,
+      minimumSystemVersion: text(info.LSMinimumSystemVersion)
+    },
+    layout: {
+      topLevel,
+      frameworks: list(frameworksDir),
+      plugins: list(pluginsDir),
+      resourceCount: countResources(resourcesDir)
+    },
+    mainExecutable,
+    signature: await readSignature(bundlePath, warnings),
+    warnings
+  };
+}
+
 // src/inspectors/report.ts
 function cell(value) {
   return String(value ?? "\u2014").replace(/\|/g, "\\|").replace(/\r?\n/g, " ");
@@ -19921,6 +20081,9 @@ function cell(value) {
 function inspectionValue(inspection, key) {
   return inspection && key in inspection ? inspection[key] : void 0;
 }
+function record(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
 function collectEvidencePaths(jobs) {
   const paths = /* @__PURE__ */ new Set();
   for (const job of jobs) {
@@ -19932,6 +20095,72 @@ function collectEvidencePaths(jobs) {
   }
   return [...paths];
 }
+function renderMacAppInspection(lines, inspection, warnings) {
+  const bundle = record(inspection.bundle) ?? {};
+  const layout = record(inspection.layout) ?? {};
+  const main = record(inspection.mainExecutable);
+  const signature = record(inspection.signature);
+  lines.push(
+    "| Field | Value |",
+    "| --- | --- |",
+    `| Bundle ID | ${cell(bundle.identifier)} |`,
+    `| Version | ${cell(bundle.version)} |`,
+    `| Build | ${cell(bundle.build)} |`,
+    `| Minimum system | ${cell(bundle.minimumSystemVersion)} |`,
+    `| Bundle executable | ${cell(bundle.executable)} |`,
+    `| Architectures | ${cell(
+      Array.isArray(main?.architectures) ? main?.architectures.join(", ") : void 0
+    )} |`,
+    `| Frameworks | ${cell(
+      Array.isArray(layout.frameworks) ? layout.frameworks.length : 0
+    )} |`,
+    `| Plug-ins | ${cell(Array.isArray(layout.plugins) ? layout.plugins.length : 0)} |`,
+    `| Resources | ${cell(layout.resourceCount ?? 0)} files |`,
+    `| Signed | ${cell(signature?.signed)} |`,
+    `| Authority | ${cell(
+      Array.isArray(signature?.authority) ? signature?.authority.join(", ") : void 0
+    )} |`,
+    ""
+  );
+  if (warnings.length > 0) {
+    lines.push("### Inspection warnings", "");
+    for (const warning of warnings) lines.push(`- ${warning}`);
+    lines.push("");
+  }
+}
+function renderIpaInspection(lines, inspection, warnings) {
+  lines.push(
+    "| Field | Value |",
+    "| --- | --- |",
+    `| Bundle ID | ${cell(inspectionValue(inspection, "bundleId"))} |`,
+    `| Version | ${cell(inspectionValue(inspection, "version"))} |`,
+    `| Build | ${cell(inspectionValue(inspection, "build"))} |`,
+    `| Minimum OS | ${cell(inspectionValue(inspection, "minimumOs"))} |`,
+    `| Bundle executable | ${cell(inspectionValue(inspection, "executable"))} |`,
+    ""
+  );
+  const main = inspection.mainExecutable;
+  if (main && typeof main === "object") {
+    const record3 = main;
+    const slices = Array.isArray(record3.slices) ? record3.slices : [];
+    lines.push(
+      "| Architecture | File type | cryptid | cryptoff | cryptsize |",
+      "| --- | --- | --- | --- | --- |"
+    );
+    for (const item of slices) {
+      const slice = item && typeof item === "object" ? item : {};
+      lines.push(
+        `| ${cell(slice.arch)} | ${cell(slice.filetype)} | ${cell(slice.cryptid)} | ${cell(slice.cryptoff)} | ${cell(slice.cryptsize)} |`
+      );
+    }
+    lines.push("");
+  }
+  if (warnings.length > 0) {
+    lines.push("### Inspection warnings", "");
+    for (const warning of warnings) lines.push(`- ${warning}`);
+    lines.push("");
+  }
+}
 function renderReportMarkdown(input2) {
   const {
     target,
@@ -19946,19 +20175,19 @@ function renderReportMarkdown(input2) {
   const warnings = Array.isArray(inspection?.warnings) ? inspection.warnings.map(String) : [];
   const evidencePaths = collectEvidencePaths(jobs);
   const lines = [
-    `# ${target.name} \xB7 \u5206\u6790\u62A5\u544A`,
+    `# ${target.name} \xB7 Analysis report`,
     "",
-    `- \u751F\u6210\u65F6\u95F4\uFF1A${generatedAt}`,
-    `- Host\uFF1A${hostPlatform}`,
-    `- Target \u5E73\u53F0\uFF1A${target.targetRef.platform}`,
-    `- \u6765\u6E90\uFF1A${target.targetRef.sourceId} / ${target.targetRef.sourceRef}`,
-    `- \u5206\u6790\u8FB9\u754C\uFF1A\u53EA\u6C47\u603B\u672C\u5730 artifact\u3001\u9759\u6001\u68C0\u67E5\u548C\u5DE5\u4F5C\u53F0\u4EFB\u52A1\u8BB0\u5F55\uFF1B\u4E0D\u4EE3\u8868\u76EE\u6807\u5E94\u7528\u7684\u5B9E\u9645\u8FD0\u884C\u884C\u4E3A\u3002`,
+    `- Generated: ${generatedAt}`,
+    `- Host: ${hostPlatform}`,
+    `- Target platform: ${target.targetRef.platform}`,
+    `- Source: ${target.targetRef.sourceId} / ${target.targetRef.sourceRef}`,
+    "- Scope: this report summarizes the local artifact, static inspection and job records. It does not describe runtime behavior.",
     "",
     "## Target",
     "",
-    "| \u5B57\u6BB5 | \u503C |",
+    "| Field | Value |",
     "| --- | --- |",
-    `| \u540D\u79F0 | ${cell(target.name)} |`,
+    `| Name | ${cell(target.name)} |`,
     `| Publisher | ${cell(target.publisher)} |`,
     `| Bundle ID | ${cell(target.bundleId)} |`,
     `| Package ID | ${cell(target.packageId)} |`,
@@ -19969,62 +20198,37 @@ function renderReportMarkdown(input2) {
     ""
   ];
   if (!artifact) {
-    lines.push("\u5C1A\u672A\u767B\u8BB0 artifact\u3002", "");
+    lines.push("No artifact has been registered yet.", "");
   } else {
     lines.push(
-      "| \u5B57\u6BB5 | \u503C |",
+      "| Field | Value |",
       "| --- | --- |",
-      `| \u6587\u4EF6 | ${cell(artifact.path)} |`,
-      `| \u5305\u683C\u5F0F | ${cell(artifact.packageFormat.toUpperCase())} |`,
-      `| \u5927\u5C0F | ${cell(`${artifact.sizeBytes} bytes`)} |`,
+      `| File | ${cell(artifact.path)} |`,
+      `| Package format | ${cell(artifact.packageFormat.toUpperCase())} |`,
+      `| Size | ${cell(`${artifact.sizeBytes} bytes`)} |`,
       `| SHA-256 | ${cell(artifact.sha256)} |`,
       `| Version / Build | ${cell(`${artifact.version ?? "unknown"} / ${artifact.buildNumber ?? "unknown"}`)} |`,
-      `| \u4E0B\u8F7D\u65F6\u95F4 | ${cell(artifact.downloadedAt)} |`,
+      `| Acquired | ${cell(artifact.downloadedAt)} |`,
       "",
-      "### \u5305\u68C0\u67E5",
+      "### Bundle inspection",
       ""
     );
     if (!inspection) {
-      lines.push("artifact \u5C1A\u672A\u5B8C\u6210\u5305\u68C0\u67E5\u3002", "");
+      lines.push("The artifact has not been inspected yet.", "");
     } else if (typeof inspection.error === "string") {
-      lines.push(`\u68C0\u67E5\u5931\u8D25\uFF1A${cell(inspection.error)}`, "");
+      lines.push(`Inspection failed: ${cell(inspection.error)}`, "");
+    } else if (inspection.kind === "mac-app") {
+      renderMacAppInspection(lines, inspection, warnings);
     } else {
-      lines.push(
-        "| \u5B57\u6BB5 | \u503C |",
-        "| --- | --- |",
-        `| Bundle ID | ${cell(inspectionValue(inspection, "bundleId"))} |`,
-        `| Version | ${cell(inspectionValue(inspection, "version"))} |`,
-        `| Build | ${cell(inspectionValue(inspection, "build"))} |`,
-        `| \u6700\u4F4E\u7CFB\u7EDF | ${cell(inspectionValue(inspection, "minimumOs"))} |`,
-        `| Bundle executable | ${cell(inspectionValue(inspection, "executable"))} |`,
-        ""
-      );
-      const main = inspection.mainExecutable;
-      if (main && typeof main === "object") {
-        const record2 = main;
-        const slices = Array.isArray(record2.slices) ? record2.slices : [];
-        lines.push("| \u67B6\u6784 | \u6587\u4EF6\u7C7B\u578B | cryptid | cryptoff | cryptsize |", "| --- | --- | --- | --- | --- |");
-        for (const item of slices) {
-          const slice = item && typeof item === "object" ? item : {};
-          lines.push(
-            `| ${cell(slice.arch)} | ${cell(slice.filetype)} | ${cell(slice.cryptid)} | ${cell(slice.cryptoff)} | ${cell(slice.cryptsize)} |`
-          );
-        }
-        lines.push("");
-      }
-      if (warnings.length > 0) {
-        lines.push("### \u68C0\u67E5\u8B66\u544A", "");
-        for (const warning of warnings) lines.push(`- ${warning}`);
-        lines.push("");
-      }
+      renderIpaInspection(lines, inspection, warnings);
     }
   }
   lines.push(
-    "## \u7ED3\u6784\u5316\u53D1\u73B0",
+    "## Structured findings",
     "",
-    `\u5171\u767B\u8BB0 ${findingTotal} \u6761 Finding\uFF1B\u62A5\u544A\u8F7D\u5165 ${findings.length} \u6761\u3002`,
+    `${findingTotal} finding(s) registered; ${findings.length} included in this report.`,
     "",
-    "| \u7C7B\u578B | \u6570\u91CF |",
+    "| Type | Count |",
     "| --- | --- |"
   );
   const byType = /* @__PURE__ */ new Map();
@@ -20042,29 +20246,35 @@ function renderReportMarkdown(input2) {
   }
   lines.push("");
   for (const [type, title] of [
-    ["route", "\u9875\u9762\u8DEF\u7531"],
-    ["network_endpoint", "\u7F51\u7EDC\u63A5\u53E3\u5019\u9009"],
-    ["module", "JavaScript \u6A21\u5757"],
-    ["native_procedure", "\u539F\u751F\u7B26\u53F7"],
-    ["risk", "\u98CE\u9669\u4E0E\u9650\u5236"]
+    ["route", "Routes"],
+    ["network_endpoint", "Network endpoint candidates"],
+    ["module", "JavaScript modules"],
+    ["native_procedure", "Native symbols"],
+    ["risk", "Risks and limitations"]
   ]) {
     const items = findings.filter((finding) => finding.type === type).slice(0, 20);
     if (items.length === 0) continue;
     lines.push(`### ${title}`, "");
     for (const item of items) {
       const location = item.sourcePath ? ` \u2014 \`${item.sourcePath}\`${item.start ? `:${item.start.line}:${item.start.column}` : ""}` : "";
-      lines.push(`- ${item.value}${location}\uFF08Evidence: \`${item.evidenceId}\`\uFF09`);
+      lines.push(`- ${item.value}${location} (Evidence: \`${item.evidenceId}\`)`);
     }
     lines.push("");
   }
+  const analysisGaps = findings.filter((finding) => finding.type === "limitation").slice(0, 20);
+  if (analysisGaps.length > 0) {
+    lines.push("### Analysis gaps", "");
+    for (const gap of analysisGaps) lines.push(`- ${gap.value}`);
+    lines.push("");
+  }
   lines.push(
-    "## \u4EFB\u52A1\u4E0E\u8BC1\u636E",
+    "## Jobs and evidence",
     "",
-    "| \u80FD\u529B | \u72B6\u6001 | \u5F00\u59CB | \u5B8C\u6210 | \u7ED3\u679C / \u9519\u8BEF |",
+    "| Capability | Status | Started | Finished | Result / error |",
     "| --- | --- | --- | --- | --- |"
   );
   if (jobs.length === 0) {
-    lines.push("| \u2014 | \u2014 | \u2014 | \u2014 | \u5C1A\u65E0\u4EFB\u52A1 |");
+    lines.push("| \u2014 | \u2014 | \u2014 | \u2014 | No jobs yet |");
   } else {
     for (const job of jobs) {
       lines.push(
@@ -20074,19 +20284,19 @@ function renderReportMarkdown(input2) {
       );
     }
   }
-  lines.push("", "### Evidence \u8DEF\u5F84", "");
+  lines.push("", "### Evidence paths", "");
   if (evidencePaths.length === 0) {
-    lines.push("\u5C1A\u65E0\u5DF2\u767B\u8BB0\u7684\u5206\u6790\u8BC1\u636E\u6587\u4EF6\u3002");
+    lines.push("No evidence files have been registered yet.");
   } else {
     for (const evidencePath of evidencePaths) lines.push(`- \`${evidencePath}\``);
   }
   lines.push(
     "",
-    "## \u7ED3\u8BBA\u8FB9\u754C",
+    "## Limitations",
     "",
-    "- \u9759\u6001\u5206\u6790\u7ED3\u679C\u5C5E\u4E8E\u89C2\u5BDF\u548C\u63A8\u65AD\uFF0C\u4E0D\u80FD\u8BC1\u660E\u672A\u8986\u76D6\u4EE3\u7801\u6216\u670D\u52A1\u5668\u7AEF\u884C\u4E3A\u3002",
-    "- `cryptid != 0` \u7684 Mach-O \u5207\u7247\u5904\u4E8E\u58F0\u660E\u52A0\u5BC6\u533A\uFF1B\u5176\u53CD\u7F16\u8BD1\u7ED3\u679C\u4E0D\u80FD\u89C6\u4E3A\u53EF\u4FE1\u539F\u59CB\u5B9E\u73B0\u3002",
-    "- \u62A5\u544A\u6CA1\u6709\u6267\u884C\u76EE\u6807 App\uFF0C\u4E5F\u6CA1\u6709\u8BBF\u95EE\u76EE\u6807\u540E\u53F0\u670D\u52A1\u3002",
+    "- Static analysis is observation and inference; it cannot prove the absence of uncovered code or server-side behavior.",
+    "- A Mach-O slice with `cryptid != 0` is declared encrypted; its decompilation must not be treated as trustworthy original code.",
+    "- The target app was not executed and no backend service was contacted.",
     ""
   );
   return lines.join("\n");
@@ -20101,8 +20311,8 @@ function describeResult(result) {
 }
 
 // src/process/run.ts
-var import_node_child_process = require("child_process");
-var import_node_path3 = __toESM(require("path"));
+var import_node_child_process2 = require("child_process");
+var import_node_path4 = __toESM(require("path"));
 function quoteWindowsArgument(value) {
   if (value.length === 0) return '""';
   if (!/[\s"&|<>^()%!]/.test(value)) return value;
@@ -20112,7 +20322,7 @@ function windowsCommandLine(command, args) {
   return [command, ...args].map(quoteWindowsArgument).join(" ");
 }
 function windowsSpawnSpec(command, args) {
-  const extension = import_node_path3.default.extname(command).toLowerCase();
+  const extension = import_node_path4.default.extname(command).toLowerCase();
   if (extension !== ".cmd" && extension !== ".bat") {
     return { command, args, verbatim: false };
   }
@@ -20130,7 +20340,7 @@ function runCommand(command, args, options = {}) {
     let child;
     try {
       const spec = process.platform === "win32" ? windowsSpawnSpec(command, args) : { command, args, verbatim: false };
-      child = (0, import_node_child_process.spawn)(spec.command, spec.args, {
+      child = (0, import_node_child_process2.spawn)(spec.command, spec.args, {
         env: options.env ?? process.env,
         cwd: options.cwd,
         stdio: ["ignore", "pipe", "pipe"],
@@ -20190,8 +20400,8 @@ function now() {
 function isCancelled(job) {
   return String(job.status) === "cancelled";
 }
-function parseJsonDocument(text) {
-  const trimmed = text.trim();
+function parseJsonDocument(text2) {
+  const trimmed = text2.trim();
   if (!trimmed) return null;
   try {
     const parsed = JSON.parse(trimmed);
@@ -20208,7 +20418,7 @@ function parseJsonDocument(text) {
     }
   }
 }
-function record(value) {
+function record2(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
 function compactCounts(source) {
@@ -20222,20 +20432,20 @@ function compactCounts(source) {
   return result;
 }
 function observationProperties(node) {
-  const item = record(node);
+  const item = record2(node);
   const observations = Array.isArray(item?.observations) ? item.observations : [];
-  return record(record(observations[0])?.properties) ?? {};
+  return record2(record2(observations[0])?.properties) ?? {};
 }
 function observationSource(node) {
-  const item = record(node);
+  const item = record2(node);
   const observations = Array.isArray(item?.observations) ? item.observations : [];
-  const evidence = record(record(observations[0])?.evidence);
-  const location = record(record(evidence?.location)?.value);
+  const evidence = record2(record2(observations[0])?.evidence);
+  const location = record2(record2(evidence?.location)?.value);
   if (typeof location?.path === "string") {
     return { sourcePath: location.path };
   }
   if (typeof location?.source === "string") {
-    const start = record(location.start);
+    const start = record2(location.start);
     return {
       sourcePath: location.source,
       line: typeof start?.line === "number" ? start.line : void 0,
@@ -20255,16 +20465,16 @@ function isNetworkEndpointValue(value) {
   return /^(?:https?|wss?):\/\//i.test(value) || /^\/\//.test(value) || /^[a-z0-9.-]+\.[a-z]{2,}(?:[/:?#]|$)/i.test(value) || /^\/[a-z0-9._~!$&'()*+,;=:@%/-]+$/i.test(value);
 }
 function detectTechnology(subjectName, modulePaths, assetPaths) {
-  const text = [subjectName, ...modulePaths, ...assetPaths].filter((value) => typeof value === "string").join("\n").toLowerCase();
+  const text2 = [subjectName, ...modulePaths, ...assetPaths].filter((value) => typeof value === "string").join("\n").toLowerCase();
   const hints = [];
-  if (/__uni__|uni-app|uni-jsframework|hbuilder/.test(text)) {
+  if (/__uni__|uni-app|uni-jsframework|hbuilder/.test(text2)) {
     hints.push("uni-app");
   }
-  if (/hbuilder/.test(text)) hints.push("HBuilder");
-  if (/react-native|main\.jsbundle/.test(text)) hints.push("React Native");
-  if (/flutter/.test(text)) hints.push("Flutter");
-  if (/capacitor/.test(text)) hints.push("Capacitor");
-  if (/cordova/.test(text)) hints.push("Cordova");
+  if (/hbuilder/.test(text2)) hints.push("HBuilder");
+  if (/react-native|main\.jsbundle/.test(text2)) hints.push("React Native");
+  if (/flutter/.test(text2)) hints.push("Flutter");
+  if (/capacitor/.test(text2)) hints.push("Capacitor");
+  if (/cordova/.test(text2)) hints.push("Cordova");
   return hints;
 }
 function hashText(value) {
@@ -20294,7 +20504,7 @@ function javascriptFindings(job, artifact, evidenceId, parsed, summary) {
       createdAt
     });
   };
-  const technology = record(summary.technology);
+  const technology = record2(summary.technology);
   if (Array.isArray(technology?.hints)) {
     for (const hint of technology.hints) {
       if (typeof hint === "string") {
@@ -20306,14 +20516,21 @@ function javascriptFindings(job, artifact, evidenceId, parsed, summary) {
       }
     }
   }
-  const normalized = record(parsed.normalized_result);
-  const graph = record(normalized?.graph);
+  if (artifact.packageFormat === "app") {
+    push("technology", "Electron", {
+      group: "technology",
+      confidence: "high",
+      metadata: { basis: "electron-bundle" }
+    });
+  }
+  const normalized = record2(parsed.normalized_result);
+  const graph = record2(normalized?.graph);
   const nodes = Array.isArray(graph?.nodes) ? graph.nodes : [];
   const modulePaths = /* @__PURE__ */ new Set();
   const assetPaths = /* @__PURE__ */ new Set();
   const storageValues = /* @__PURE__ */ new Set();
   for (const node of nodes) {
-    const item = record(node);
+    const item = record2(node);
     const kind = item?.kind;
     const properties = observationProperties(node);
     const location = observationSource(node);
@@ -20366,21 +20583,51 @@ function javascriptFindings(job, artifact, evidenceId, parsed, summary) {
     }
   }
   const limitations = Array.isArray(parsed.limitations) ? parsed.limitations : [];
+  const seenLimitations = /* @__PURE__ */ new Set();
+  const LIMITATION_CAP = 50;
+  let kept = 0;
   for (const limitation of limitations) {
-    if (typeof limitation === "string") {
-      push("limitation", limitation, {
+    if (typeof limitation !== "string") continue;
+    const normalized2 = limitation.replace(/\s+/g, " ").trim();
+    if (!normalized2 || seenLimitations.has(normalized2)) continue;
+    if (kept >= LIMITATION_CAP) break;
+    seenLimitations.add(normalized2);
+    kept += 1;
+    push("limitation", normalized2, {
+      group: "analysis-limitation",
+      confidence: "exact",
+      metadata: { evidenceId }
+    });
+  }
+  if (limitations.length > kept) {
+    push(
+      "limitation",
+      `${limitations.length - kept} additional per-file limitations were omitted from this summary.`,
+      {
         group: "analysis-limitation",
         confidence: "exact",
-        metadata: { evidenceId }
-      });
-    }
+        metadata: { evidenceId, omitted: limitations.length - kept }
+      }
+    );
   }
   return findings;
 }
+function findElectronJavascriptRoot(appPath) {
+  const asar = import_node_path5.default.join(appPath, "Contents", "Resources", "app.asar");
+  if (import_node_fs5.default.existsSync(asar)) return asar;
+  const unpacked = import_node_path5.default.join(appPath, "Contents", "Resources", "app");
+  if (import_node_fs5.default.existsSync(unpacked) && import_node_fs5.default.statSync(unpacked).isDirectory()) {
+    return unpacked;
+  }
+  fail(
+    "CAPABILITY_UNAVAILABLE",
+    "No Electron JavaScript bundle (app.asar or Resources/app) was found in this app."
+  );
+}
 function nativeSearchFindings(job, artifact, evidenceId, parsed, kind) {
   const values2 = Array.isArray(parsed.normalized_result) ? parsed.normalized_result : Array.isArray(parsed.raw_result) ? parsed.raw_result : [];
   const createdAt = now();
-  return values2.map((value) => record(value)).filter((value) => Boolean(value?.value)).map((value) => ({
+  return values2.map((value) => record2(value)).filter((value) => Boolean(value?.value)).map((value) => ({
     id: (0, import_node_crypto.randomUUID)(),
     targetId: artifact.targetId,
     artifactId: artifact.id,
@@ -20415,16 +20662,16 @@ function nativeRiskFindings(job, artifact, evidenceId, encryption) {
   ];
 }
 function summarizeRea(parsed) {
-  const normalized = record(parsed.normalized_result);
-  const graph = record(normalized?.graph);
-  const semantic = record(normalized?.semantic_graph);
+  const normalized = record2(parsed.normalized_result);
+  const graph = record2(normalized?.graph);
+  const semantic = record2(normalized?.semantic_graph);
   const limitations = Array.isArray(parsed.limitations) ? parsed.limitations.slice(0, 12) : [];
-  const subject = record(parsed.subject);
-  const provider = record(parsed.provider);
-  const pseudocode = typeof record(parsed.raw_result)?.value === "string" ? String(record(parsed.raw_result)?.value) : void 0;
+  const subject = record2(parsed.subject);
+  const provider = record2(parsed.provider);
+  const pseudocode = typeof record2(parsed.raw_result)?.value === "string" ? String(record2(parsed.raw_result)?.value) : void 0;
   const graphNodes = Array.isArray(graph?.nodes) ? graph.nodes : [];
   const endpointNodes = graphNodes.filter(
-    (node) => record(node)?.kind === "endpoint"
+    (node) => record2(node)?.kind === "endpoint"
   );
   const routeItems = endpointNodes.filter((node) => observationProperties(node).endpoint_kind === "route").map((node) => {
     const properties = observationProperties(node);
@@ -20444,15 +20691,15 @@ function summarizeRea(parsed) {
     (item) => typeof item.value === "string" && isNetworkEndpointValue(item.value)
   );
   const modulePaths = uniqueStrings(
-    graphNodes.filter((node) => record(node)?.kind === "javascript-module").map((node) => observationProperties(node).path),
+    graphNodes.filter((node) => record2(node)?.kind === "javascript-module").map((node) => observationProperties(node).path),
     200
   );
   const assetPaths = uniqueStrings(
-    graphNodes.filter((node) => record(node)?.kind === "javascript-asset").map((node) => observationProperties(node).path),
+    graphNodes.filter((node) => record2(node)?.kind === "javascript-asset").map((node) => observationProperties(node).path),
     200
   );
   const storageItems = uniqueStrings(
-    graphNodes.filter((node) => record(node)?.kind === "storage").map((node) => {
+    graphNodes.filter((node) => record2(node)?.kind === "storage").map((node) => {
       const properties = observationProperties(node);
       return `${String(properties.storage_kind ?? "storage")}:${String(
         properties.mechanism ?? properties.name ?? "unknown"
@@ -20471,11 +20718,11 @@ function summarizeRea(parsed) {
       name: subject.name,
       format: subject.format,
       architecture: subject.architecture,
-      sha256: record(subject.digest)?.sha256
+      sha256: record2(subject.digest)?.sha256
     } : void 0,
     provider: provider ? { id: provider.id, name: provider.name, version: provider.version } : void 0,
     counts: {
-      ...compactCounts(record(normalized?.statistics) ?? normalized),
+      ...compactCounts(record2(normalized?.statistics) ?? normalized),
       graphNodes: Array.isArray(graph?.nodes) ? graph.nodes.length : void 0,
       graphEdges: Array.isArray(graph?.edges) ? graph.edges.length : void 0,
       semanticNodes: Array.isArray(semantic?.nodes) ? semantic.nodes.length : void 0,
@@ -20518,15 +20765,15 @@ function encryptionState(inspection) {
   };
 }
 function shortFailure(stderr, stdout) {
-  const text = `${stderr}
+  const text2 = `${stderr}
 ${stdout}`.split(/\r?\n/).map((line) => line.trim()).filter(Boolean).join("\n");
-  return text.slice(-1200) || "\u5206\u6790\u5F15\u64CE\u6CA1\u6709\u8FD4\u56DE\u9519\u8BEF\u8BE6\u60C5\u3002";
+  return text2.slice(-1200) || "\u5206\u6790\u5F15\u64CE\u6CA1\u6709\u8FD4\u56DE\u9519\u8BEF\u8BE6\u60C5\u3002";
 }
 function reaErrorMessage(parsed) {
   if (!parsed) return void 0;
-  const details = record(parsed.details);
-  const diagnostics = record(details?.diagnostics);
-  const failureCause = record(details?.failure_cause);
+  const details = record2(parsed.details);
+  const diagnostics = record2(details?.diagnostics);
+  const failureCause = record2(details?.failure_cause);
   for (const value of [
     diagnostics?.message,
     details?.failure_message,
@@ -20635,6 +20882,9 @@ var CapabilityJobRunner = class {
         case "inspect:ipa":
           await this.runInspect(job, target, artifact);
           return;
+        case "inspect:mac-app":
+          await this.runInspectMacApp(job, target, artifact);
+          return;
         case "extract:app":
           await this.runExtract(job, target, artifact);
           return;
@@ -20699,10 +20949,36 @@ var CapabilityJobRunner = class {
       warnings: inspection.warnings.length
     });
   }
+  async runInspectMacApp(job, target, artifact) {
+    if (!artifact) fail("ARTIFACT_REQUIRED", "Acquire an artifact first.");
+    this.log(job, "info", "Inspecting the macOS app bundle.");
+    this.patch(job, { progress: 25 });
+    const inspection = await inspectMacApp(
+      this.workspace.resolveStoredPath(artifact.path)
+    );
+    const updated = {
+      ...artifact,
+      version: inspection.bundle.version ?? artifact.version,
+      buildNumber: inspection.bundle.build ?? artifact.buildNumber,
+      architecture: inspection.mainExecutable?.architectures.join(",") || artifact.architecture,
+      inspection
+    };
+    this.store.insertArtifact(updated);
+    this.workspace.saveArtifactMetadata(target, updated);
+    this.patch(job, {
+      status: "analyzed",
+      progress: 100,
+      result: { inspection },
+      finishedAt: now()
+    });
+    this.log(job, "info", "macOS bundle inspection complete.", {
+      warnings: inspection.warnings.length
+    });
+  }
   async runExtract(job, target, artifact) {
     if (!artifact) fail("ARTIFACT_REQUIRED", "\u8BF7\u5148\u83B7\u53D6 artifact\u3002");
     this.log(job, "info", "\u5F00\u59CB\u89E3\u5305 .app\u3002");
-    const outputDir = import_node_path4.default.join(
+    const outputDir = import_node_path5.default.join(
       this.workspace.analysisDir(target),
       "extract-app",
       job.id
@@ -20716,7 +20992,7 @@ var CapabilityJobRunner = class {
       progress: 100,
       result: {
         ...extracted,
-        outputDir: import_node_path4.default.relative(this.workspace.root, extracted.outputDir)
+        outputDir: import_node_path5.default.relative(this.workspace.root, extracted.outputDir)
       },
       finishedAt: now()
     });
@@ -20726,31 +21002,52 @@ var CapabilityJobRunner = class {
   }
   async runReaJavascript(job, target, artifact) {
     if (!artifact) fail("ARTIFACT_REQUIRED", "\u8BF7\u5148\u83B7\u53D6 artifact\u3002");
-    const extraction = await this.ensureExtraction(job, target, artifact);
-    this.log(job, "info", "\u5BF9\u89E3\u5305\u76EE\u5F55\u8FD0\u884C JavaScript \u9759\u6001\u5206\u6790\u3002", {
-      path: import_node_path4.default.relative(this.workspace.root, extraction.appRoot)
-    });
-    this.patch(job, { progress: 25 });
+    let javascriptRoot;
+    if (artifact.packageFormat === "app") {
+      javascriptRoot = findElectronJavascriptRoot(
+        this.workspace.resolveStoredPath(artifact.path)
+      );
+      this.log(job, "info", "Running static analysis on the macOS JavaScript bundle.", {
+        path: import_node_path5.default.relative(this.workspace.root, javascriptRoot)
+      });
+      this.patch(job, { progress: 25 });
+    } else {
+      const extraction = await this.ensureExtraction(job, target, artifact);
+      javascriptRoot = extraction.appRoot;
+      this.log(job, "info", "\u5BF9\u89E3\u5305\u76EE\u5F55\u8FD0\u884C JavaScript \u9759\u6001\u5206\u6790\u3002", {
+        path: import_node_path5.default.relative(this.workspace.root, javascriptRoot)
+      });
+      this.patch(job, { progress: 25 });
+    }
     const rea = await this.runReaJson(
       job,
       target,
       "javascript-analyze",
       [
         "analyze-javascript-application",
-        extraction.appRoot,
+        javascriptRoot,
         "--analysis-timeout-ms",
         "300000"
       ],
-      10 * 6e4
+      // Electron bundles are much larger than iOS web bundles; a 136 MB asar
+      // takes several minutes on its own.
+      15 * 6e4
     );
     const evidenceId = this.reaEvidenceId(rea);
+    const summary = { ...rea.summary };
+    if (artifact.packageFormat === "app") {
+      const technology = record2(summary.technology) ?? {};
+      const hints = Array.isArray(technology.hints) ? [...technology.hints] : [];
+      if (!hints.includes("Electron")) hints.unshift("Electron");
+      summary.technology = { ...technology, hints };
+    }
     this.persistEvidence(
       job,
       artifact,
       "javascript-analysis",
       rea,
       evidenceId,
-      javascriptFindings(job, artifact, evidenceId, rea.parsed, rea.summary),
+      javascriptFindings(job, artifact, evidenceId, rea.parsed, summary),
       [
         "technology",
         "route",
@@ -20765,9 +21062,9 @@ var CapabilityJobRunner = class {
       status: "analyzed",
       progress: 100,
       result: {
-        ...rea.summary,
+        ...summary,
         evidenceId,
-        outputDir: import_node_path4.default.relative(this.workspace.root, extraction.appRoot),
+        outputDir: import_node_path5.default.relative(this.workspace.root, javascriptRoot),
         evidencePath: rea.rawPath
       },
       finishedAt: now()
@@ -20811,7 +21108,7 @@ var CapabilityJobRunner = class {
       result: {
         ...rea.summary,
         evidenceId,
-        binaryPath: import_node_path4.default.relative(this.workspace.root, prepared.binaryPath),
+        binaryPath: import_node_path5.default.relative(this.workspace.root, prepared.binaryPath),
         evidencePath: rea.rawPath,
         encryption,
         warning: encryption.encryptedSlices > 0 ? "\u4E3B\u7A0B\u5E8F\u5305\u542B\u58F0\u660E\u52A0\u5BC6\u7684\u5207\u7247\uFF1B\u4E0D\u8981\u628A\u52A0\u5BC6\u533A\u53CD\u7F16\u8BD1\u7ED3\u679C\u5F53\u4F5C\u53EF\u4FE1\u539F\u59CB\u5B9E\u73B0\u3002" : void 0
@@ -20862,7 +21159,7 @@ var CapabilityJobRunner = class {
     );
     this.persistEvidence(job, artifact, "native-search", rea, evidenceId, findings);
     const rawMatches = Array.isArray(rea.parsed.normalized_result) ? rea.parsed.normalized_result : Array.isArray(rea.parsed.raw_result) ? rea.parsed.raw_result : [];
-    const matches = rawMatches.map((item) => record(item)).filter((item) => Boolean(item?.value)).slice(0, 100);
+    const matches = rawMatches.map((item) => record2(item)).filter((item) => Boolean(item?.value)).slice(0, 100);
     this.patch(job, {
       status: "analyzed",
       progress: 100,
@@ -20874,7 +21171,7 @@ var CapabilityJobRunner = class {
         mode,
         matchCount: rawMatches.length,
         matches,
-        binaryPath: import_node_path4.default.relative(this.workspace.root, prepared.binaryPath),
+        binaryPath: import_node_path5.default.relative(this.workspace.root, prepared.binaryPath),
         evidencePath: rea.rawPath,
         limitations: Array.isArray(rea.parsed.limitations) ? rea.parsed.limitations : [],
         encryption: encryptionState(prepared.inspection)
@@ -20919,7 +21216,7 @@ var CapabilityJobRunner = class {
       result: {
         ...rea.summary,
         functionName: input2.functionName,
-        binaryPath: import_node_path4.default.relative(this.workspace.root, prepared.binaryPath),
+        binaryPath: import_node_path5.default.relative(this.workspace.root, prepared.binaryPath),
         evidencePath: rea.rawPath,
         encryption
       },
@@ -20934,26 +21231,44 @@ var CapabilityJobRunner = class {
     this.log(job, "info", "\u6C47\u603B Target\u3001artifact \u548C\u4EFB\u52A1\u8BC1\u636E\u3002");
     this.patch(job, { progress: 35 });
     const generatedAt = now();
-    const reportPath = import_node_path4.default.join(
+    const reportPath = import_node_path5.default.join(
       this.workspace.targetDir(target),
       "reports",
       `${job.id}.md`
     );
-    const findingResult = this.store.searchFindings({
+    const findingTypes = [
+      "technology",
+      "route",
+      "network_endpoint",
+      "module",
+      "asset",
+      "storage",
+      "native_procedure",
+      "risk",
+      "limitation"
+    ];
+    const findings = findingTypes.flatMap(
+      (type) => this.store.searchFindings({
+        targetId: target.id,
+        types: [type],
+        limit: 20
+      }).items
+    );
+    const findingTotal = this.store.searchFindings({
       targetId: target.id,
-      limit: 1e3
-    });
+      limit: 1
+    }).total;
     const markdown = renderReportMarkdown({
       target,
       artifact,
       jobs: this.store.listJobs(target.id).filter((item) => item.id !== job.id).slice(0, 20),
-      findings: findingResult.items,
-      findingTotal: findingResult.total,
+      findings,
+      findingTotal,
       hostPlatform: this.config.hostPlatform,
       generatedAt
     });
     this.workspace.writeText(reportPath, markdown);
-    const relativePath = import_node_path4.default.relative(this.workspace.root, reportPath);
+    const relativePath = import_node_path5.default.relative(this.workspace.root, reportPath);
     this.patch(job, {
       status: "analyzed",
       progress: 100,
@@ -20985,12 +21300,12 @@ var CapabilityJobRunner = class {
       fail("MAIN_EXECUTABLE_NOT_FOUND", "IPA \u68C0\u67E5\u7ED3\u679C\u4E2D\u6CA1\u6709\u4E3B\u7A0B\u5E8F\u8DEF\u5F84\u3002");
     }
     const extraction = await this.ensureExtraction(job, target, current);
-    const binaryPath = import_node_path4.default.resolve(extraction.outputDir, executable);
-    const root = import_node_path4.default.resolve(extraction.outputDir);
-    if (binaryPath !== root && !binaryPath.startsWith(root + import_node_path4.default.sep)) {
+    const binaryPath = import_node_path5.default.resolve(extraction.outputDir, executable);
+    const root = import_node_path5.default.resolve(extraction.outputDir);
+    if (binaryPath !== root && !binaryPath.startsWith(root + import_node_path5.default.sep)) {
       fail("UNSAFE_ARTIFACT_PATH", "\u4E3B\u7A0B\u5E8F\u8DEF\u5F84\u8D8A\u51FA\u89E3\u5305\u76EE\u5F55\uFF0C\u5DF2\u62D2\u7EDD\u6267\u884C\u3002");
     }
-    if (!import_node_fs4.default.existsSync(binaryPath)) {
+    if (!import_node_fs5.default.existsSync(binaryPath)) {
       fail("MAIN_EXECUTABLE_NOT_FOUND", `\u89E3\u5305\u76EE\u5F55\u4E2D\u6CA1\u6709\u4E3B\u7A0B\u5E8F\uFF1A${executable}`);
     }
     return { inspection, binaryPath };
@@ -20999,24 +21314,24 @@ var CapabilityJobRunner = class {
     const previous = this.findExtraction(target.id, artifact.id);
     if (previous) {
       this.log(job, "info", "\u590D\u7528\u5DF2\u6709\u89E3\u5305\u76EE\u5F55\u3002", {
-        path: import_node_path4.default.relative(this.workspace.root, previous.outputDir)
+        path: import_node_path5.default.relative(this.workspace.root, previous.outputDir)
       });
       return previous;
     }
-    const outputDir = import_node_path4.default.join(
+    const outputDir = import_node_path5.default.join(
       this.workspace.analysisDir(target),
       "extracted",
       artifact.id
     );
-    const existingApp = import_node_fs4.default.existsSync(outputDir) ? findAppPrefix(outputDir) : void 0;
+    const existingApp = import_node_fs5.default.existsSync(outputDir) ? findAppPrefix(outputDir) : void 0;
     if (existingApp) {
       const location = {
         outputDir,
         prefix: existingApp,
-        appRoot: import_node_path4.default.join(outputDir, existingApp)
+        appRoot: import_node_path5.default.join(outputDir, existingApp)
       };
       this.log(job, "info", "\u590D\u7528\u6309 artifact \u54C8\u5E0C\u5F52\u6863\u7684\u89E3\u5305\u76EE\u5F55\u3002", {
-        path: import_node_path4.default.relative(this.workspace.root, outputDir)
+        path: import_node_path5.default.relative(this.workspace.root, outputDir)
       });
       return location;
     }
@@ -21026,8 +21341,8 @@ var CapabilityJobRunner = class {
       this.workspace.resolveStoredPath(artifact.path),
       outputDir
     );
-    const appRoot = import_node_path4.default.resolve(outputDir, extracted.prefix);
-    if (appRoot !== outputDir && !appRoot.startsWith(outputDir + import_node_path4.default.sep)) {
+    const appRoot = import_node_path5.default.resolve(outputDir, extracted.prefix);
+    if (appRoot !== outputDir && !appRoot.startsWith(outputDir + import_node_path5.default.sep)) {
       fail("UNSAFE_ARTIFACT_PATH", "\u89E3\u5305\u524D\u7F00\u8D8A\u51FA\u8F93\u51FA\u76EE\u5F55\uFF0C\u5DF2\u62D2\u7EDD\u7EE7\u7EED\u3002");
     }
     return { outputDir, appRoot, prefix: extracted.prefix };
@@ -21042,8 +21357,8 @@ var CapabilityJobRunner = class {
       if (typeof output !== "string" || typeof prefix !== "string") continue;
       try {
         const outputDir = this.workspace.resolveStoredPath(output);
-        const appRoot = import_node_path4.default.resolve(outputDir, prefix);
-        if (import_node_fs4.default.existsSync(appRoot) && (appRoot === outputDir || appRoot.startsWith(outputDir + import_node_path4.default.sep))) {
+        const appRoot = import_node_path5.default.resolve(outputDir, prefix);
+        if (import_node_fs5.default.existsSync(appRoot) && (appRoot === outputDir || appRoot.startsWith(outputDir + import_node_path5.default.sep))) {
           return { outputDir, appRoot, prefix };
         }
       } catch {
@@ -21052,11 +21367,11 @@ var CapabilityJobRunner = class {
     return void 0;
   }
   async runReaJson(job, target, folder, args, timeoutMs) {
-    const dir = import_node_path4.default.join(this.workspace.analysisDir(target), folder, job.id);
-    const rawPath = import_node_path4.default.join(dir, "result.json");
-    const stderrPath = import_node_path4.default.join(dir, "stderr.log");
-    const commandPath = import_node_path4.default.join(dir, "command.json");
-    import_node_fs4.default.mkdirSync(dir, { recursive: true, mode: 448 });
+    const dir = import_node_path5.default.join(this.workspace.analysisDir(target), folder, job.id);
+    const rawPath = import_node_path5.default.join(dir, "result.json");
+    const stderrPath = import_node_path5.default.join(dir, "stderr.log");
+    const commandPath = import_node_path5.default.join(dir, "command.json");
+    import_node_fs5.default.mkdirSync(dir, { recursive: true, mode: 448 });
     this.workspace.writeJson(commandPath, {
       command: this.config.reaPath,
       args,
@@ -21075,7 +21390,7 @@ var CapabilityJobRunner = class {
     });
     this.workspace.writeText(rawPath, result.stdout);
     this.workspace.writeText(stderrPath, result.stderr);
-    this.workspace.writeJson(import_node_path4.default.join(dir, "status.json"), {
+    this.workspace.writeJson(import_node_path5.default.join(dir, "status.json"), {
       code: result.code,
       timedOut: result.timedOut,
       finishedAt: now()
@@ -21089,7 +21404,7 @@ var CapabilityJobRunner = class {
     if (result.code !== 0) {
       const parsed2 = parseJsonDocument(result.stdout);
       this.log(job, "warn", "\u5206\u6790\u5F15\u64CE\u672A\u6210\u529F\u5B8C\u6210\uFF0C\u539F\u59CB\u8F93\u51FA\u5DF2\u4FDD\u7559\u3002", {
-        evidencePath: import_node_path4.default.relative(this.workspace.root, rawPath)
+        evidencePath: import_node_path5.default.relative(this.workspace.root, rawPath)
       });
       const message = reaErrorMessage(parsed2) ?? shortFailure(result.stderr, result.stdout);
       fail("ENGINE_FAILED", message);
@@ -21103,7 +21418,7 @@ var CapabilityJobRunner = class {
     }
     return {
       parsed,
-      rawPath: import_node_path4.default.relative(this.workspace.root, rawPath),
+      rawPath: import_node_path5.default.relative(this.workspace.root, rawPath),
       sha256: hashText(result.stdout),
       summary: summarizeRea(parsed)
     };
@@ -21151,10 +21466,10 @@ var CapabilityJobRunner = class {
   }
 };
 function findAppPrefix(outputDir) {
-  const payload = import_node_path4.default.join(outputDir, "Payload");
-  if (!import_node_fs4.default.existsSync(payload)) return void 0;
+  const payload = import_node_path5.default.join(outputDir, "Payload");
+  if (!import_node_fs5.default.existsSync(payload)) return void 0;
   try {
-    const app = import_node_fs4.default.readdirSync(payload, { withFileTypes: true }).find((entry) => entry.isDirectory() && entry.name.endsWith(".app"));
+    const app = import_node_fs5.default.readdirSync(payload, { withFileTypes: true }).find((entry) => entry.isDirectory() && entry.name.endsWith(".app"));
     return app ? `Payload/${app.name}/` : void 0;
   } catch {
     return void 0;
@@ -21162,10 +21477,11 @@ function findAppPrefix(outputDir) {
 }
 
 // src/license.ts
-var import_node_fs5 = __toESM(require("fs"));
+var import_node_fs6 = __toESM(require("fs"));
 var import_node_crypto2 = __toESM(require("crypto"));
 var FREE_FEATURES = /* @__PURE__ */ new Set([
   "inspect:ipa",
+  "inspect:mac-app",
   "extract:app",
   "javascript:analyze",
   "generate:report"
@@ -21181,7 +21497,7 @@ function verifyLicense(token) {
   if (!encodedPayload || !encodedSignature) {
     throw new Error("Invalid license token.");
   }
-  const publicKeyValue = process.env.APPTRACE_LICENSE_PUBLIC_KEY || (process.env.APPTRACE_LICENSE_PUBLIC_KEY_FILE ? import_node_fs5.default.readFileSync(process.env.APPTRACE_LICENSE_PUBLIC_KEY_FILE, "utf8") : void 0);
+  const publicKeyValue = process.env.APPTRACE_LICENSE_PUBLIC_KEY || (process.env.APPTRACE_LICENSE_PUBLIC_KEY_FILE ? import_node_fs6.default.readFileSync(process.env.APPTRACE_LICENSE_PUBLIC_KEY_FILE, "utf8") : void 0);
   if (!publicKeyValue) {
     throw new Error("APPTRACE_LICENSE_PUBLIC_KEY is not configured.");
   }
@@ -21238,8 +21554,8 @@ function compareVersionData(input2) {
 }
 
 // src/store.ts
-var import_node_fs6 = __toESM(require("fs"));
-var import_node_path5 = __toESM(require("path"));
+var import_node_fs7 = __toESM(require("fs"));
+var import_node_path6 = __toESM(require("path"));
 var import_node_module = require("module");
 var import_meta = {};
 function openSqlite(databasePath) {
@@ -21492,7 +21808,7 @@ var SqliteStore = class {
   kind = "sqlite";
   db;
   constructor(databasePath) {
-    import_node_fs6.default.mkdirSync(import_node_path5.default.dirname(databasePath), { recursive: true, mode: 448 });
+    import_node_fs7.default.mkdirSync(import_node_path6.default.dirname(databasePath), { recursive: true, mode: 448 });
     const db = openSqlite(databasePath);
     if (!db) throw new Error("node:sqlite is not available");
     this.db = db;
@@ -21825,11 +22141,11 @@ var JsonStore = class {
   data;
   constructor(databasePath) {
     this.filePath = databasePath.replace(/\.sqlite$/i, "") + ".json";
-    import_node_fs6.default.mkdirSync(import_node_path5.default.dirname(this.filePath), { recursive: true, mode: 448 });
+    import_node_fs7.default.mkdirSync(import_node_path6.default.dirname(this.filePath), { recursive: true, mode: 448 });
     this.data = this.load();
   }
   load() {
-    if (!import_node_fs6.default.existsSync(this.filePath)) {
+    if (!import_node_fs7.default.existsSync(this.filePath)) {
       return {
         targets: [],
         artifacts: [],
@@ -21841,7 +22157,7 @@ var JsonStore = class {
       };
     }
     try {
-      const parsed = JSON.parse(import_node_fs6.default.readFileSync(this.filePath, "utf8"));
+      const parsed = JSON.parse(import_node_fs7.default.readFileSync(this.filePath, "utf8"));
       return {
         targets: parsed.targets ?? [],
         artifacts: parsed.artifacts ?? [],
@@ -21865,8 +22181,8 @@ var JsonStore = class {
   }
   save() {
     const temp = `${this.filePath}.${process.pid}.tmp`;
-    import_node_fs6.default.writeFileSync(temp, JSON.stringify(this.data, null, 2), { mode: 384 });
-    import_node_fs6.default.renameSync(temp, this.filePath);
+    import_node_fs7.default.writeFileSync(temp, JSON.stringify(this.data, null, 2), { mode: 384 });
+    import_node_fs7.default.renameSync(temp, this.filePath);
   }
   listTargets() {
     return [...this.data.targets].sort((a, b) => b.updatedAt.localeCompare(a.updatedAt));
@@ -22007,44 +22323,44 @@ function createStore(databasePath) {
 }
 
 // src/workspace.ts
-var import_node_fs7 = __toESM(require("fs"));
-var import_node_path6 = __toESM(require("path"));
+var import_node_fs8 = __toESM(require("fs"));
+var import_node_path7 = __toESM(require("path"));
 var WorkspaceService = class {
   root;
   constructor(root) {
-    this.root = import_node_path6.default.resolve(root);
-    import_node_fs7.default.mkdirSync(this.root, { recursive: true, mode: 448 });
-    import_node_fs7.default.mkdirSync(import_node_path6.default.join(this.root, "targets"), { recursive: true, mode: 448 });
-    import_node_fs7.default.mkdirSync(import_node_path6.default.join(this.root, "tmp"), { recursive: true, mode: 448 });
+    this.root = import_node_path7.default.resolve(root);
+    import_node_fs8.default.mkdirSync(this.root, { recursive: true, mode: 448 });
+    import_node_fs8.default.mkdirSync(import_node_path7.default.join(this.root, "targets"), { recursive: true, mode: 448 });
+    import_node_fs8.default.mkdirSync(import_node_path7.default.join(this.root, "tmp"), { recursive: true, mode: 448 });
   }
   targetDir(target) {
-    return import_node_path6.default.join(
+    return import_node_path7.default.join(
       this.root,
       "targets",
       `${target.targetRef.platform}-${target.targetRef.sourceId}-${target.slug}-${target.id.slice(0, 8)}`
     );
   }
   artifactDir(target) {
-    return import_node_path6.default.join(this.targetDir(target), "artifacts");
+    return import_node_path7.default.join(this.targetDir(target), "artifacts");
   }
   analysisDir(target) {
-    return import_node_path6.default.join(this.targetDir(target), "analysis");
+    return import_node_path7.default.join(this.targetDir(target), "analysis");
   }
   ensureTarget(target) {
     const dir = this.targetDir(target);
     for (const subdir of ["", "artifacts", "analysis", "reports"]) {
-      import_node_fs7.default.mkdirSync(import_node_path6.default.join(dir, subdir), { recursive: true, mode: 448 });
+      import_node_fs8.default.mkdirSync(import_node_path7.default.join(dir, subdir), { recursive: true, mode: 448 });
     }
   }
   saveResolvedTarget(target, rawSource) {
     this.ensureTarget(target);
     const dir = this.targetDir(target);
-    this.writeJson(import_node_path6.default.join(dir, "meta.json"), target);
-    this.writeJson(import_node_path6.default.join(dir, "source.json"), rawSource);
+    this.writeJson(import_node_path7.default.join(dir, "meta.json"), target);
+    this.writeJson(import_node_path7.default.join(dir, "source.json"), rawSource);
   }
   saveArtifactMetadata(target, artifact, extra = {}) {
     const dir = this.targetDir(target);
-    this.writeJson(import_node_path6.default.join(dir, "artifact.json"), {
+    this.writeJson(import_node_path7.default.join(dir, "artifact.json"), {
       schemaVersion: 1,
       target: {
         id: target.id,
@@ -22068,7 +22384,7 @@ var WorkspaceService = class {
       },
       ...extra
     });
-    this.writeJson(import_node_path6.default.join(dir, "current.json"), {
+    this.writeJson(import_node_path7.default.join(dir, "current.json"), {
       artifactId: artifact.id,
       path: artifact.path,
       sha256: artifact.sha256,
@@ -22076,11 +22392,11 @@ var WorkspaceService = class {
     });
   }
   artifactRelativePath(target, filePath) {
-    return import_node_path6.default.relative(this.root, filePath);
+    return import_node_path7.default.relative(this.root, filePath);
   }
   resolveStoredPath(relativePath) {
-    const resolved = import_node_path6.default.resolve(this.root, relativePath);
-    if (resolved !== this.root && !resolved.startsWith(this.root + import_node_path6.default.sep)) {
+    const resolved = import_node_path7.default.resolve(this.root, relativePath);
+    if (resolved !== this.root && !resolved.startsWith(this.root + import_node_path7.default.sep)) {
       throw new Error(`Path escapes workspace: ${relativePath}`);
     }
     return resolved;
@@ -22090,10 +22406,10 @@ var WorkspaceService = class {
 `);
   }
   writeText(filePath, value) {
-    import_node_fs7.default.mkdirSync(import_node_path6.default.dirname(filePath), { recursive: true, mode: 448 });
+    import_node_fs8.default.mkdirSync(import_node_path7.default.dirname(filePath), { recursive: true, mode: 448 });
     const temp = `${filePath}.${process.pid}.${Date.now()}.tmp`;
-    import_node_fs7.default.writeFileSync(temp, value, { mode: 384 });
-    import_node_fs7.default.renameSync(temp, filePath);
+    import_node_fs8.default.writeFileSync(temp, value, { mode: 384 });
+    import_node_fs8.default.renameSync(temp, filePath);
   }
 };
 
@@ -22159,12 +22475,12 @@ async function handle(line) {
     });
     return;
   }
-  const workspaceRoot = import_node_path7.default.resolve(request.workspacePath);
-  if (!import_node_fs8.default.existsSync(workspaceRoot)) {
+  const workspaceRoot = import_node_path8.default.resolve(request.workspacePath);
+  if (!import_node_fs9.default.existsSync(workspaceRoot)) {
     send({ id: request.id, ok: false, error: { code: "WORKSPACE_NOT_FOUND", message: workspaceRoot } });
     return;
   }
-  const store = createStore(import_node_path7.default.join(workspaceRoot, "workbench.sqlite"));
+  const store = createStore(import_node_path8.default.join(workspaceRoot, "workbench.sqlite"));
   try {
     if (request.capability === "compare:versions") {
       send({