rea-agents 0.3.0 → 0.5.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rea-agents",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "Reverse engineer anything from your terminal or coding agent with one CLI and MCP server.",
   "license": "MIT",
   "repository": {
@@ -39,6 +39,7 @@
   "packageManager": "npm@11.16.0",
   "files": [
     "dist",
+    "install.sh",
     "bridge/hopper_bridge.py",
     "scripts/rea.mjs",
     "scripts/rebuild-native.mjs",
@@ -66,9 +67,11 @@
     "test:watch": "vitest",
     "typecheck": "tsc --noEmit",
     "verify:hopper": "npm run build && node scripts/verify-real-hopper.mjs",
+    "verify:hopper:linux": "npm run build && node scripts/verify-real-hopper-linux.mjs",
     "build:fixtures": "node scripts/build-conformance-fixtures.mjs",
     "verify:fixtures": "npm run build:fixtures && node scripts/verify-conformance-fixtures.mjs",
     "verify:package": "npm run build && node scripts/verify-package.mjs",
+    "verify:published": "node scripts/verify-published-package.mjs",
     "config:print": "node scripts/print-mcp-config.mjs",
     "docs:generate": "typedoc",
     "prepack": "npm run build",
@@ -80,17 +83,31 @@
     "*.ts": "oxlint --fix"
   },
   "dependencies": {
+    "@babel/parser": "8.0.4",
+    "@babel/types": "8.0.4",
+    "@electron/asar": "4.2.0",
     "@modelcontextprotocol/server": "2.0.0-beta.3",
+    "@zip.js/zip.js": "2.8.26",
     "canonicalize": "3.0.0",
+    "diff": "9.0.0",
+    "graphology": "0.26.0",
+    "graphology-shortest-path": "2.1.0",
+    "ignore": "7.0.6",
     "incur": "0.4.13",
+    "isomorphic-git": "1.38.7",
     "node-pty": "1.1.0",
     "pino": "9.14.0",
+    "plist": "5.0.0",
+    "smol-toml": "^1.7.0",
+    "write-file-atomic": "8.0.0",
     "ws": "8.21.0",
     "zod": "4.4.3"
   },
   "devDependencies": {
+    "@fast-check/vitest": "0.4.1",
     "@modelcontextprotocol/client": "2.0.0-beta.3",
     "@types/node": "24.10.1",
+    "@types/write-file-atomic": "4.0.3",
     "@types/ws": "8.18.1",
     "@vitest/coverage-v8": "4.1.10",
     "husky": "9.1.7",

package/scripts/rea.mjs

@@ -1,8 +1,12 @@
 #!/usr/bin/env node
 
 // Route production MCP before importing Incur. Incur owns registration helpers
-// such as `mcp add`, while only dist/main.js may serve the 50-tool stdio server.
+// such as `mcp add`, while only dist/main.js may serve the 68-tool stdio server.
 const args = process.argv.slice(2);
+const { default: packageJson } = await import("../package.json", {
+  with: { type: "json" },
+});
+process.env.REA_PACKAGE_VERSION = packageJson.version;
 const isMcpMode =
   args[0] === "--mcp" || (args.length === 1 && args[0] === "mcp");
 

package/skills/rea-analysis/SKILL.md

@@ -1,6 +1,9 @@
 ---
 name: rea-analysis
 description: Reverse engineer apps with REA. Explore how features work, then build a version tailored to your project.
+metadata:
+  version: "10"
+  tool_count: 68
 ---
 
 # REA
@@ -18,8 +21,8 @@ Notes is only a documentation example. Never select an app unless the user names
 ## Ensure REA is ready
 
 1. Run `npx -y rea-agents doctor`.
-2. If setup is needed, explain that REA may install Homebrew and Hopper. Hopper is separate software and requires its own license.
-3. Obtain approval before installing external software, then run `npx -y rea-agents setup --yes`.
+2. If setup is needed, tell the user REA needs to install its local binary-analysis tools. Do not lead with implementation details or assume the user knows reverse-engineering products.
+3. Before installing external software, obtain approval and identify what will be installed. If deeper analysis needs Hopper, describe it as REA's local analysis engine and note that it is a separate Mac app with its own license. Then run `npx -y rea-agents setup --yes`.
 4. If macOS or an installer requests human input, tell the user exactly what needs attention. After they finish, rerun setup and doctor.
 5. If setup registers a new MCP server, tell the user to restart their coding agent to load all REA tools. Direct CLI commands remain available before restart.
 
@@ -33,8 +36,80 @@ REA accepts a `.app` bundle directly. Do not expose its internal `Contents/MacOS
 
 Briefly tell the user what you will investigate. Open the app with `open_binary`, begin with `binary_overview`, and narrow the investigation around the requested feature. Use decompilation, strings, names, callers, callees, and cross-references as needed.
 
+For applications, ZIP/APK/IPA packages, or Electron ASAR archives, call
+`inventory_artifact` before extraction. Follow its deterministic occurrence
+pages and cite graph manifest IDs. `extract_artifact` requires explicit user
+approval, an absent absolute output root, and selected occurrence IDs; never
+extract every entry implicitly. Symlinks and encrypted entries are inventory
+facts, not extractable files. Nested containers require a separate deliberate
+inventory step.
+
 Explain conclusions in plain language. Point to the relevant decompiled code, strings, names, and connections so the user can see how the explanation was reached. Do not claim to recover original source code or automatically clone an application.
 
+Search uses bounded deterministic pages. Prefer literal mode; use regex mode only
+when regex semantics are needed, and continue from `next_offset` while
+`has_more` is true. Treat nullable permissions and explicit unavailable metadata
+as unknown, never as `false`.
+
+Every successful analysis result is Evidence v2. Cite evidence IDs and preserve
+limitations and residual unknowns. Process capture is disabled by default,
+requires per-call approval plus operator policy, and uses host networking only
+when the operator explicitly permits it. It is behavioral evidence, not a
+security sandbox.
+
+Do not let unanswered questions disappear. Use `record_unknown` only with
+explicit approval, attach supporting and contradicting evidence IDs, and record
+the authority/environment still required. Use `update_unknown` with the current
+`expected_revision`; stale updates must be re-read, not retried blindly. A
+verified resolution needs qualifying observed evidence. Inference, withdrawn,
+and out-of-scope dispositions are never substitutes for observed behavior.
+Set `unknown_registry_approved: true` on `trace_feature` or
+`capture_process_scenario` only when the user approves durable automatic
+recording of their bounded residuals. The same flag on a direct operation
+records typed provider unavailability, and on `compare_process_captures`
+records an observed disagreement as a contradiction.
+
+Use `compare_artifacts` with one record or bounded arrays of
+`inventory_artifact` Evidence pages per side. Pages must share one manifest;
+collect all node, occurrence, and edge pages for exhaustive comparison. It
+compares stable occurrence paths, content, metadata, and graph relations,
+cites both evidence sets on every delta, and paginates changes. Incomplete
+inventories are truncated or unknown, never equivalent. Set
+`unknown_registry_approved: true` only with approval to preserve the
+disagreement or missing evidence as a residual unknown.
+
+Use `compare_functions` with explicit `analyze_function` Evidence page sets;
+it does not perform fuzzy whole-binary matching. Collect every pseudocode,
+assembly, collection, and CFG page when exhaustive comparison matters.
+Absolute addresses are volatile only in CFG topology; pseudocode constants are
+never stripped. Omitted assembly, truncated scans, unavailable reference kinds,
+and cross-provider text remain unknown rather than equal.
+
+Use `compare_bundles` for canonical Evidence v2 bundle membership and
+residual-unknown history changes. Pair cross-version observations explicitly;
+the tool never guesses record identity. One-sided records prove only bundle
+inclusion or omission, not behavioral absence. Use the returned canonical
+bundle digests to anchor paginated reports.
+
+Use `find_changed_behavior` to combine existing comparison Evidence. Runtime
+process differences are observed changes; artifact and function differences
+remain static candidates, not causal proof. Supply complete comparison pages.
+
+Use `build_call_path` with explicit `analyze_function` Evidence groups from one
+artifact and provider. Select endpoints by exact address. Missing dossiers,
+incomplete callee pages, or a depth frontier make absence unknown; found paths
+remain valid and cite each contributing dossier.
+
+Use `correlate_static_and_runtime` only with explicit mappings between exact
+static and runtime comparison findings. A matching pattern is a hypothesis,
+never proof of causality. Declare side alignment; unmapped similarities are not
+correlated.
+
+Use `verify_reconstruction` with a finite typed specification and canonical
+Evidence bundle. Pass means all declared claims passed with comparable
+authority, not global implementation equivalence. Missing, limited, active-
+unknown, or incompatible evidence stays unknown; observed differences fail.
+
 ## Build
 
 When requested, use normal coding tools to build a version suited to the user's project, stack, interface, and requirements. Keep the implementation tied to what the investigation established, and distinguish observed behavior from assumptions or design choices.