rea-agents 1.7.0 → 2.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (333) hide show
  1. package/README.md +112 -59
  2. package/bridge/ghidra/ReaGhidraBridge.java +96 -11
  3. package/dist/application/ArtifactExtraction.js +1 -1
  4. package/dist/application/ArtifactInventory/classify.js +42 -0
  5. package/dist/application/ArtifactInventory/hash.js +43 -0
  6. package/dist/application/ArtifactInventory/reader.js +41 -0
  7. package/dist/application/ArtifactInventory/scanCanonical.js +155 -0
  8. package/dist/application/ArtifactInventory/scanReader.js +124 -0
  9. package/dist/application/ArtifactInventory/types.js +10 -0
  10. package/dist/application/ArtifactInventory.js +9 -351
  11. package/dist/application/AuthorizedArtifactInventory.js +2 -2
  12. package/dist/application/BinarySession.js +47 -270
  13. package/dist/application/BinarySessionExecution.js +28 -0
  14. package/dist/application/BinarySessionOpen.js +39 -0
  15. package/dist/application/BinarySessionRecords.js +149 -0
  16. package/dist/application/BinarySessionStatus.js +75 -0
  17. package/dist/application/CapabilityInventory.js +42 -2
  18. package/dist/application/ClientRegistrationStatus.js +1 -1
  19. package/dist/application/CrossVersionInventory.js +8 -2
  20. package/dist/application/CrossVersionInvestigation.js +11 -29
  21. package/dist/application/CrossVersionInvestigationCollections.js +23 -0
  22. package/dist/application/DirectAnalysis.js +47 -44
  23. package/dist/application/Doctor.js +165 -197
  24. package/dist/application/DoctorDiagnostics.js +180 -0
  25. package/dist/application/ElectronBoundaryAnalysis.js +112 -0
  26. package/dist/application/ElectronBoundaryGraph.js +9 -0
  27. package/dist/application/ElectronBoundaryGraphContext.js +62 -0
  28. package/dist/application/ElectronBoundaryGraphIpc.js +242 -0
  29. package/dist/application/ElectronBoundaryGraphNative.js +86 -0
  30. package/dist/application/ElectronBoundaryGraphWindows.js +223 -0
  31. package/dist/application/EnhancedToolPagination.js +22 -0
  32. package/dist/application/EnhancedToolTypes.js +4 -0
  33. package/dist/application/EnhancedTools.js +58 -50
  34. package/dist/application/InstrumentedJavaScriptReplayHost.js +36 -0
  35. package/dist/application/InvestigationProviders.js +30 -0
  36. package/dist/application/InvestigationWorkspaceStore.js +24 -10
  37. package/dist/application/JavaScriptApplicationEvidence.js +26 -0
  38. package/dist/application/JavaScriptApplicationEvidenceGraph.js +89 -0
  39. package/dist/application/JavaScriptApplicationService.js +74 -0
  40. package/dist/application/JavaScriptApplicationWorkflowEvidence.js +29 -0
  41. package/dist/application/JavaScriptApplicationWorkflowService.js +90 -0
  42. package/dist/application/JavaScriptArtifactAnalysis.js +52 -7
  43. package/dist/application/JavaScriptArtifactFiles.js +6 -2
  44. package/dist/application/JavaScriptArtifactGraphBuilder.js +82 -17
  45. package/dist/application/JavaScriptArtifactGraphBundlers.js +225 -0
  46. package/dist/application/JavaScriptArtifactGraphContext.js +37 -36
  47. package/dist/application/JavaScriptArtifactGraphDocuments.js +27 -4
  48. package/dist/application/JavaScriptArtifactGraphEvidence.js +24 -14
  49. package/dist/application/JavaScriptArtifactGraphFindings.js +54 -8
  50. package/dist/application/JavaScriptArtifactGraphStructure.js +29 -101
  51. package/dist/application/JavaScriptArtifactPathResolution.js +269 -0
  52. package/dist/application/JavaScriptArtifactReconstruction.js +4 -1
  53. package/dist/application/JavaScriptArtifactReconstructionInput.js +2 -83
  54. package/dist/application/JavaScriptJsonModules.js +39 -0
  55. package/dist/application/JavaScriptModuleRelationships.js +262 -0
  56. package/dist/application/JavaScriptReplayPermission.js +16 -0
  57. package/dist/application/JavaScriptReplayPlanning.js +201 -0
  58. package/dist/application/JavaScriptReplayService.js +292 -0
  59. package/dist/application/JavaScriptRuntimeReconciliationEvidence.js +25 -0
  60. package/dist/application/JavaScriptRuntimeReconciliationService.js +27 -0
  61. package/dist/application/LinuxHopper.js +10 -0
  62. package/dist/application/MacHopper.js +22 -11
  63. package/dist/application/ManagedApplicationGraphService.js +55 -0
  64. package/dist/application/ManagedMemberComparisonService.js +122 -0
  65. package/dist/application/ManagedNativeVerificationService.js +39 -0
  66. package/dist/application/ManagedReconstructionService.js +58 -0
  67. package/dist/application/ManagedRuntimeCorrelationService.js +103 -0
  68. package/dist/application/NodeRuntimeCharacterizationService.js +196 -0
  69. package/dist/application/PermissionAuthority.js +106 -63
  70. package/dist/application/ProcessCaptureCapability.js +1 -1
  71. package/dist/application/ProcessCapturePermission.js +13 -0
  72. package/dist/application/ProcessCli.js +2 -12
  73. package/dist/application/ProcessHarness.js +1 -1
  74. package/dist/application/ProcessSampling.js +15 -11
  75. package/dist/application/ProjectPermissionStore.js +49 -9
  76. package/dist/application/RealHopperAssertions.js +76 -0
  77. package/dist/application/ReconstructionCoverageService.js +69 -0
  78. package/dist/application/ReconstructionCoverageWorkspaceStore.js +31 -0
  79. package/dist/application/RuntimeExecutableDiagnostics.js +172 -0
  80. package/dist/application/Setup.js +147 -259
  81. package/dist/application/SetupClientConfiguration.js +220 -0
  82. package/dist/application/SetupClients.js +24 -2
  83. package/dist/application/SetupPlan.js +123 -12
  84. package/dist/application/SetupSkill.js +26 -12
  85. package/dist/application/SupportedClients.js +1 -0
  86. package/dist/application/Uninstall.js +6 -3
  87. package/dist/application/WindowsCapabilities.js +86 -0
  88. package/dist/application/runtime.js +2 -0
  89. package/dist/artifacts/AsarArtifactReader.js +11 -0
  90. package/dist/browser/BrowserProcessStartup.js +88 -0
  91. package/dist/browser/CdpCaptureDocuments.js +12 -8
  92. package/dist/browser/CdpCaptureEventBodyShapes.js +75 -0
  93. package/dist/browser/CdpCaptureEventHandlers.js +336 -0
  94. package/dist/browser/CdpCaptureEventHelpers.js +71 -0
  95. package/dist/browser/CdpCaptureEventState.js +1 -0
  96. package/dist/browser/CdpCaptureEventTypes.js +1 -0
  97. package/dist/browser/CdpCaptureEvents.js +46 -464
  98. package/dist/browser/CdpElectronInspection.js +106 -162
  99. package/dist/browser/CdpElectronProvider.js +5 -1
  100. package/dist/browser/CdpElectronScriptEvents.js +69 -0
  101. package/dist/browser/CdpElectronScripts.js +94 -0
  102. package/dist/browser/CdpElectronWorkers.js +56 -0
  103. package/dist/browser/CdpObservationSession.js +51 -8
  104. package/dist/browser/CdpPageCapture.js +12 -129
  105. package/dist/browser/CdpPageCaptureScripts.js +97 -0
  106. package/dist/browser/CdpPageCaptureWorkers.js +46 -0
  107. package/dist/browser/CdpWebMcpDiscovery.js +38 -14
  108. package/dist/browser/PngVisualDiff.js +9 -2
  109. package/dist/catalogIdentity.js +8 -1
  110. package/dist/cli/artifactCommands.js +82 -0
  111. package/dist/cli/coreAnalysisCommands.js +232 -0
  112. package/dist/cli/managedCommands.js +397 -0
  113. package/dist/cli/managedProjectGraphCommand.js +24 -0
  114. package/dist/cli/options.js +9 -0
  115. package/dist/cli/setupCommands.js +108 -0
  116. package/dist/cli/types.js +1 -0
  117. package/dist/cli/utilityCommands.js +122 -0
  118. package/dist/cli.js +13 -383
  119. package/dist/cliApplicationCommands.js +176 -0
  120. package/dist/cliBrowserAdvancedCommands.js +73 -16
  121. package/dist/cliBrowserCommands.js +39 -115
  122. package/dist/cliCommandNames.js +17 -0
  123. package/dist/cliElectronCommands.js +100 -27
  124. package/dist/cliEvidenceCommands.js +13 -2
  125. package/dist/cliInvestigationCommands.js +53 -10
  126. package/dist/cliJsonInput.js +54 -0
  127. package/dist/cliObservationOptions.js +137 -0
  128. package/dist/cliPolicyCommands.js +80 -46
  129. package/dist/cliSetup.js +289 -0
  130. package/dist/config/environment.js +107 -0
  131. package/dist/config/parseConfig.js +228 -0
  132. package/dist/config/parsers.js +68 -0
  133. package/dist/config/permissions.js +30 -0
  134. package/dist/config/types.js +1 -0
  135. package/dist/config.js +1 -292
  136. package/dist/contracts/applicationToolContracts.js +225 -0
  137. package/dist/contracts/artifactToolContracts.js +5 -9
  138. package/dist/contracts/browserToolContracts.js +14 -62
  139. package/dist/contracts/electronToolContracts.js +45 -19
  140. package/dist/contracts/errorSchemas.js +1 -0
  141. package/dist/contracts/investigationExamples.js +0 -6
  142. package/dist/contracts/javascriptApplicationWorkflowExamples.js +46 -0
  143. package/dist/contracts/javascriptRuntimeReconciliationExample.js +208 -0
  144. package/dist/contracts/managedToolContracts.js +153 -0
  145. package/dist/contracts/managedWorkflowExamples.js +346 -0
  146. package/dist/contracts/managedWorkflowToolContracts.js +203 -0
  147. package/dist/contracts/nativeToolContracts.js +2 -6
  148. package/dist/contracts/promptContracts.js +18 -2
  149. package/dist/contracts/providerSelection.js +2 -0
  150. package/dist/contracts/toolContractExamples.js +10 -25
  151. package/dist/contracts/toolContracts.js +49 -47
  152. package/dist/contracts/toolEffects.js +174 -0
  153. package/dist/contracts/toolOutputSchemaGroups.js +232 -0
  154. package/dist/contracts/toolOutputSchemaPrimitives.js +327 -0
  155. package/dist/contracts/toolOutputSchemas.js +2 -535
  156. package/dist/doctorRuntime.js +42 -1
  157. package/dist/domain/analysisErrorPresentation.js +234 -0
  158. package/dist/domain/analysisErrorProjection.js +284 -0
  159. package/dist/domain/artifactComparison.js +37 -19
  160. package/dist/domain/binaryTarget.js +87 -37
  161. package/dist/domain/browserObservation.js +1 -282
  162. package/dist/domain/browserObservationSchemas.js +286 -0
  163. package/dist/domain/bundleComparison.js +4 -4
  164. package/dist/domain/electronObservation.js +13 -0
  165. package/dist/domain/electronStaticAnalysis.js +9 -0
  166. package/dist/domain/electronStaticAnalysisBrowser.js +206 -0
  167. package/dist/domain/electronStaticAnalysisIpc.js +171 -0
  168. package/dist/domain/electronStaticAnalysisNative.js +164 -0
  169. package/dist/domain/electronStaticAnalysisTypes.js +1 -0
  170. package/dist/domain/electronStaticAnalysisValues.js +103 -0
  171. package/dist/domain/errors.js +32 -448
  172. package/dist/domain/functionComparison.js +4 -165
  173. package/dist/domain/functionComparisonDimensions.js +164 -0
  174. package/dist/domain/functionComparisonSchemas.js +3 -8
  175. package/dist/domain/inputIssueProjection.js +52 -0
  176. package/dist/domain/javascriptApplicationAnalysis.js +155 -0
  177. package/dist/domain/javascriptApplicationChangeGraph.js +231 -0
  178. package/dist/domain/javascriptApplicationEvidenceSchemas.js +18 -0
  179. package/dist/domain/javascriptApplicationGraph.js +2 -1
  180. package/dist/domain/javascriptApplicationGraphSchemas.js +7 -0
  181. package/dist/domain/javascriptApplicationVersionComparison.js +116 -0
  182. package/dist/domain/javascriptApplicationVersionComparisonSchemas.js +139 -0
  183. package/dist/domain/javascriptApplicationVersionItems.js +233 -0
  184. package/dist/domain/javascriptApplicationVersionKeys.js +170 -0
  185. package/dist/domain/javascriptExportInstrumentation.js +97 -0
  186. package/dist/domain/javascriptFeatureSeed.js +140 -0
  187. package/dist/domain/javascriptFeatureTrace.js +232 -0
  188. package/dist/domain/javascriptFeatureTraceSchemas.js +136 -0
  189. package/dist/domain/javascriptFeatureTraversal.js +100 -0
  190. package/dist/domain/javascriptNativeHandoff.js +85 -0
  191. package/dist/domain/javascriptReplay.js +361 -0
  192. package/dist/domain/javascriptRuntimeLoadState.js +106 -0
  193. package/dist/domain/javascriptRuntimeReconciliation.js +42 -0
  194. package/dist/domain/javascriptRuntimeReconciliationGraph.js +169 -0
  195. package/dist/domain/javascriptRuntimeReconciliationMatching.js +247 -0
  196. package/dist/domain/javascriptRuntimeReconciliationParsing.js +160 -0
  197. package/dist/domain/javascriptRuntimeReconciliationResult.js +119 -0
  198. package/dist/domain/javascriptRuntimeReconciliationRuntime.js +316 -0
  199. package/dist/domain/javascriptRuntimeReconciliationSchemas.js +245 -0
  200. package/dist/domain/javascriptRuntimeStaticCandidates.js +193 -0
  201. package/dist/domain/javascriptSemanticAnalysis.js +386 -0
  202. package/dist/domain/javascriptSemanticIr.js +30 -0
  203. package/dist/domain/javascriptSemanticProjection.js +366 -0
  204. package/dist/domain/javascriptSemanticState.js +40 -0
  205. package/dist/domain/javascriptSemanticTraversal.js +22 -0
  206. package/dist/domain/javascriptSemanticValues.js +352 -0
  207. package/dist/domain/javascriptStaticAnalysis.js +26 -254
  208. package/dist/domain/javascriptStaticAnalysisBundler.js +209 -0
  209. package/dist/domain/javascriptStaticAnalysisCalls.js +180 -0
  210. package/dist/domain/javascriptStaticAnalysisFindings.js +39 -0
  211. package/dist/domain/javascriptStaticAnalysisHelpers.js +81 -2
  212. package/dist/domain/javascriptStaticAnalysisState.js +6 -0
  213. package/dist/domain/knownPageCoverage.js +21 -0
  214. package/dist/domain/managedApplicationGraph.js +206 -0
  215. package/dist/domain/managedApplicationGraphCoverage.js +170 -0
  216. package/dist/domain/managedApplicationGraphNodeCoverage.js +6 -0
  217. package/dist/domain/managedApplicationGraphNodes.js +336 -0
  218. package/dist/domain/managedArtifact.js +452 -0
  219. package/dist/domain/managedMemberComparison.js +211 -0
  220. package/dist/domain/managedMemberComparisonCoverage.js +72 -0
  221. package/dist/domain/managedMemberComparisonMatch.js +356 -0
  222. package/dist/domain/managedNativeVerification.js +46 -0
  223. package/dist/domain/managedNativeVerificationMatch.js +272 -0
  224. package/dist/domain/managedNativeVerificationSchemas.js +141 -0
  225. package/dist/domain/managedReconstruction.js +196 -0
  226. package/dist/domain/managedRuntimeCorrelation.js +184 -0
  227. package/dist/domain/nodeRuntimeCharacterization.js +66 -0
  228. package/dist/domain/permissionPolicy.js +2 -0
  229. package/dist/domain/reconstructionCoverage.js +387 -0
  230. package/dist/domain/reconstructionCoverageEvaluation.js +212 -0
  231. package/dist/domain/reconstructionVerificationSchemas.js +9 -3
  232. package/dist/domain/runtimeCharacterization.js +85 -0
  233. package/dist/domain/webBundleAnalyzer.js +3 -409
  234. package/dist/domain/webBundleAnalyzerAst.js +77 -0
  235. package/dist/domain/webBundleAnalyzerInspection.js +307 -0
  236. package/dist/domain/webBundleAnalyzerResult.js +120 -0
  237. package/dist/dotnet/ManagedArtifactInspector.js +339 -0
  238. package/dist/dotnet/ManagedMemberInspector.js +153 -0
  239. package/dist/dotnet/ManagedMemberInspectorCore.js +297 -0
  240. package/dist/dotnet/ManagedMemberInstructionDecoder.js +427 -0
  241. package/dist/dotnet/ManagedMemberRows.js +120 -0
  242. package/dist/dotnet/ManagedMetadataHeaps.js +131 -0
  243. package/dist/dotnet/ManagedMetadataInventory.js +104 -0
  244. package/dist/dotnet/ManagedMetadataInventoryRows.js +292 -0
  245. package/dist/dotnet/ManagedMetadataLayout.js +259 -0
  246. package/dist/dotnet/ManagedMetadataRowSizes.js +54 -0
  247. package/dist/dotnet/ManagedMethodBodyReader.js +143 -0
  248. package/dist/dotnet/ManagedNativeBoundaryHelpers.js +311 -0
  249. package/dist/dotnet/ManagedNativeBoundaryInspector.js +143 -0
  250. package/dist/dotnet/ManagedPeReader.js +188 -0
  251. package/dist/dotnet/ManagedReaderFailure.js +10 -0
  252. package/dist/dotnet/ManagedStaticProvider.js +203 -0
  253. package/dist/generatedPackageMetadata.js +2 -2
  254. package/dist/ghidra/GhidraClient.js +76 -91
  255. package/dist/ghidra/GhidraClientStartup.js +29 -0
  256. package/dist/ghidra/GhidraClientWire.js +34 -0
  257. package/dist/ghidra/GhidraDefaults.js +1 -1
  258. package/dist/ghidra/GhidraDiagnostics.js +6 -1
  259. package/dist/ghidra/GhidraInstallation.js +20 -15
  260. package/dist/ghidra/GhidraLauncher.js +93 -29
  261. package/dist/ghidra/GhidraProvider.js +67 -161
  262. package/dist/ghidra/GhidraProviderCapabilities.js +173 -0
  263. package/dist/ghidra/GhidraSessionValues.js +2 -0
  264. package/dist/ghidra/GhidraSocketConnection.js +44 -7
  265. package/dist/ghidra/GhidraTargetSnapshot.js +30 -0
  266. package/dist/ghidra/GhidraTransport.js +71 -0
  267. package/dist/identity.js +3 -2
  268. package/dist/main/messages.js +5 -0
  269. package/dist/main/reload.js +49 -0
  270. package/dist/main/shutdown.js +25 -0
  271. package/dist/main/startup.js +14 -0
  272. package/dist/main/state.js +26 -0
  273. package/dist/main/transport.js +61 -0
  274. package/dist/main/types.js +1 -0
  275. package/dist/main.js +35 -132
  276. package/dist/process/PrivateRuntimeRoot.js +3 -2
  277. package/dist/process/ProcessOwnership.js +35 -0
  278. package/dist/process/ProviderProcess.js +2 -0
  279. package/dist/replay/JavaScriptReplayWorker.js +300 -0
  280. package/dist/replay/LinuxJavaScriptReplayRunner.js +217 -0
  281. package/dist/replay/LinuxJavaScriptReplaySandbox.js +140 -0
  282. package/dist/replay/LinuxRuntimeClosure.js +46 -0
  283. package/dist/replay/LinuxSeccompPolicy.js +40 -0
  284. package/dist/replay/ReplayOutcome.js +95 -0
  285. package/dist/replay/ReplayProcessLifecycle.js +71 -0
  286. package/dist/replay/ReplayWorkerProtocol.js +55 -0
  287. package/dist/replay/SystemJavaScriptReplayHost.js +182 -0
  288. package/dist/server/ProcessCaptureElicitation.js +157 -0
  289. package/dist/server/createServer.js +158 -41
  290. package/dist/server/registerApplicationTools/characterization.js +57 -0
  291. package/dist/server/registerApplicationTools/compareVersions.js +34 -0
  292. package/dist/server/registerApplicationTools/controlledReplay.js +38 -0
  293. package/dist/server/registerApplicationTools/coverage.js +84 -0
  294. package/dist/server/registerApplicationTools/helpers.js +42 -0
  295. package/dist/server/registerApplicationTools/traceFeature.js +26 -0
  296. package/dist/server/registerApplicationTools/types.js +1 -0
  297. package/dist/server/registerApplicationTools.js +13 -0
  298. package/dist/server/registerArtifactComparisonTool.js +16 -9
  299. package/dist/server/registerBrowserTools.js +61 -60
  300. package/dist/server/registerBundleComparisonTool.js +17 -20
  301. package/dist/server/registerElectronTools.js +39 -12
  302. package/dist/server/registerEnhancedTools.js +52 -15
  303. package/dist/server/registerEvidenceResources.js +54 -0
  304. package/dist/server/registerEvidenceTools.js +5 -1
  305. package/dist/server/registerFunctionComparisonTool.js +14 -7
  306. package/dist/server/registerInvestigationTools/helpers.js +74 -0
  307. package/dist/server/registerInvestigationTools/types.js +1 -0
  308. package/dist/server/registerInvestigationTools.js +103 -132
  309. package/dist/server/registerManagedTools.js +6 -0
  310. package/dist/server/registerManagedWorkflowTools/compareManagedMembers.js +65 -0
  311. package/dist/server/registerManagedWorkflowTools/contract.js +8 -0
  312. package/dist/server/registerManagedWorkflowTools/evidence.js +43 -0
  313. package/dist/server/registerManagedWorkflowTools/importManagedReconstruction.js +39 -0
  314. package/dist/server/registerManagedWorkflowTools/planManagedRuntimeCorrelation.js +39 -0
  315. package/dist/server/registerManagedWorkflowTools/projectManagedApplicationGraph.js +52 -0
  316. package/dist/server/registerManagedWorkflowTools/types.js +1 -0
  317. package/dist/server/registerManagedWorkflowTools/verifyManagedNativeBoundaries.js +75 -0
  318. package/dist/server/registerManagedWorkflowTools.js +13 -0
  319. package/dist/server/registerOfficialTools.js +81 -67
  320. package/dist/server/registerProcessComparisonTool.js +25 -47
  321. package/dist/server/registerSessionRecordTools.js +137 -0
  322. package/dist/server/registerSessionStatusTool.js +9 -8
  323. package/dist/server/registerSessionTools.js +77 -216
  324. package/dist/server/sessionAvailabilityPolicy.js +10 -0
  325. package/dist/server/sessionEvidence.js +14 -19
  326. package/dist/server/toolInputValidation.js +77 -0
  327. package/dist/server/toolRegistrationOptions.js +177 -2
  328. package/dist/server/toolResult.js +30 -17
  329. package/package.json +21 -14
  330. package/scripts/rea.mjs +1 -1
  331. package/skills/{rea-analysis → reverse-engineer-anything}/SKILL.md +75 -6
  332. package/scripts/prepare-node-pty.mjs +0 -35
  333. package/scripts/rebuild-native.mjs +0 -22
@@ -1,13 +1,13 @@
1
- import { inferJsonShape } from "../domain/jsonShape.js";
2
1
  import { CdpCaptureCompleteness } from "./CdpCaptureCompleteness.js";
3
- import { safeResponseMetadata } from "./CdpSafeMetadata.js";
4
- import { boundedSensitiveText } from "./SensitiveTextCapture.js";
5
- import { allowedSanitizedUrl, boundedText, isHttpUrl, numberValue, recordValue, recordsValue, stringValue, } from "./CdpCaptureValues.js";
2
+ import * as bodyShapes from "./CdpCaptureEventBodyShapes.js";
3
+ import * as handlers from "./CdpCaptureEventHandlers.js";
4
+ import { isJsonMediaType } from "./CdpCaptureEventHelpers.js";
5
+ import { recordValue } from "./CdpCaptureValues.js";
6
+ export {} from "./CdpCaptureEventTypes.js";
6
7
  /** Bounded event accumulator that drops payload values at ingestion time. */
7
8
  export class CdpCaptureEvents {
8
- input;
9
- allowedOrigins;
10
9
  scripts = new Map();
10
+ executionContextFrames = new Map();
11
11
  network = new Map();
12
12
  allowedWebSockets = new Set();
13
13
  console = [];
@@ -23,28 +23,31 @@ export class CdpCaptureEvents {
23
23
  ]);
24
24
  originViolation = false;
25
25
  navigationDuringCapture = false;
26
- #mainFrameId;
27
- #consoleTextBytes = 0;
28
- #jsonBodyBytes = 0;
29
- #websocketShapeBytes = 0;
26
+ mainFrameId = undefined;
27
+ consoleTextBytes = 0;
28
+ jsonBodyBytes = 0;
29
+ websocketShapeBytes = 0;
30
+ input;
31
+ allowedOrigins;
30
32
  constructor(input, allowedOrigins) {
31
33
  this.input = input;
32
34
  this.allowedOrigins = allowedOrigins;
33
35
  }
34
36
  beginAuthorizedFrame(frameId) {
35
- this.#mainFrameId = frameId;
37
+ this.mainFrameId = frameId;
36
38
  this.originViolation = false;
37
39
  this.navigationDuringCapture = false;
38
40
  this.scripts.clear();
41
+ this.executionContextFrames.clear();
39
42
  this.network.clear();
40
43
  this.allowedWebSockets.clear();
41
44
  this.console.length = 0;
42
45
  this.websockets.length = 0;
43
46
  this.responseMetadata.length = 0;
44
47
  this.agentHints.length = 0;
45
- this.#consoleTextBytes = 0;
46
- this.#jsonBodyBytes = 0;
47
- this.#websocketShapeBytes = 0;
48
+ this.consoleTextBytes = 0;
49
+ this.jsonBodyBytes = 0;
50
+ this.websocketShapeBytes = 0;
48
51
  this.completeness.reset();
49
52
  if (!this.input.include_console_text)
50
53
  this.completeness.exclude("console_text", "not_approved", null);
@@ -54,7 +57,7 @@ export class CdpCaptureEvents {
54
57
  this.completeness.exclude("websocket_shapes", "not_approved", null);
55
58
  }
56
59
  beginFinalCapture(frameId) {
57
- this.#mainFrameId = frameId;
60
+ this.mainFrameId = frameId;
58
61
  this.navigationDuringCapture = false;
59
62
  }
60
63
  ingest(event) {
@@ -62,225 +65,52 @@ export class CdpCaptureEvents {
62
65
  if (params === undefined)
63
66
  return;
64
67
  switch (event.method) {
68
+ case "Runtime.executionContextCreated":
69
+ handlers.handleExecutionContextCreated(this, params);
70
+ break;
71
+ case "Runtime.executionContextDestroyed":
72
+ handlers.handleExecutionContextDestroyed(this, params);
73
+ break;
74
+ case "Runtime.executionContextsCleared":
75
+ this.executionContextFrames.clear();
76
+ break;
65
77
  case "Debugger.scriptParsed":
66
- this.#script(params);
78
+ handlers.handleScriptParsed(this, params);
67
79
  break;
68
80
  case "Network.requestWillBeSent":
69
- this.#request(params);
81
+ handlers.handleRequestWillBeSent(this, params);
70
82
  break;
71
83
  case "Network.responseReceived":
72
- this.#response(params);
84
+ handlers.handleResponseReceived(this, params);
73
85
  break;
74
86
  case "Network.loadingFinished":
75
- this.#finished(params);
87
+ handlers.handleLoadingFinished(this, params);
76
88
  break;
77
89
  case "Runtime.consoleAPICalled":
78
- this.#console(params);
90
+ handlers.handleConsoleAPICalled(this, params);
79
91
  break;
80
92
  case "Page.frameNavigated":
81
- this.#frameNavigated(params);
93
+ handlers.handleFrameNavigated(this, params);
82
94
  break;
83
95
  case "Network.webSocketCreated":
84
- this.#websocketCreated(params);
96
+ handlers.handleWebSocketCreated(this, params);
85
97
  break;
86
98
  case "Network.webSocketFrameSent":
87
- this.#websocket(params, "sent");
99
+ handlers.handleWebSocketFrame(this, params, "sent");
88
100
  break;
89
101
  case "Network.webSocketFrameReceived":
90
- this.#websocket(params, "received");
102
+ handlers.handleWebSocketFrame(this, params, "received");
91
103
  break;
92
104
  }
93
105
  }
94
- #script(params) {
95
- const scriptId = stringValue(params.scriptId);
96
- const rawUrl = stringValue(params.url) ?? "";
97
- const sanitized = allowedSanitizedUrl(rawUrl, this.allowedOrigins);
98
- if (scriptId === undefined || scriptId.length > 256) {
99
- this.completeness.exclude("scripts", "invalid_protocol_value");
100
- return;
101
- }
102
- if (sanitized === undefined) {
103
- this.completeness.exclude("scripts", exclusionReasonForUrl(rawUrl));
104
- return;
105
- }
106
- if (this.scripts.size >= this.input.limits.max_scripts &&
107
- !this.scripts.has(scriptId)) {
108
- this.completeness.drop("scripts");
109
- return;
110
- }
111
- const sourceMap = this.#sourceMap(params.sourceMapURL, rawUrl);
112
- this.scripts.set(scriptId, {
113
- scriptId,
114
- rawUrl,
115
- url: sanitized.url,
116
- origin: sanitized.origin,
117
- hash: (stringValue(params.hash) ?? "").slice(0, 512),
118
- length: Math.max(0, Math.min(Number.MAX_SAFE_INTEGER, Math.trunc(numberValue(params.length) ?? 0))),
119
- isModule: params.isModule === true,
120
- language: boundedText(params.scriptLanguage, 100),
121
- sourceMapUrl: sourceMap.sanitized,
122
- sourceMapRawUrl: sourceMap.raw,
123
- });
124
- }
125
- #sourceMap(value, scriptUrl) {
126
- const declaredUrl = stringValue(value);
127
- if (declaredUrl === undefined || declaredUrl === "")
128
- return { sanitized: null, raw: null };
129
- let rawUrl;
130
- try {
131
- rawUrl = new URL(declaredUrl, scriptUrl).href;
132
- }
133
- catch {
134
- this.completeness.exclude("source_maps", "unsupported_url");
135
- return { sanitized: null, raw: null };
136
- }
137
- const sanitized = allowedSanitizedUrl(rawUrl, this.allowedOrigins);
138
- if (sanitized !== undefined)
139
- return { sanitized: sanitized.url, raw: rawUrl };
140
- this.completeness.exclude("source_maps", exclusionReasonForUrl(rawUrl));
141
- return { sanitized: null, raw: null };
142
- }
143
- #request(params) {
144
- const requestId = stringValue(params.requestId);
145
- const request = recordValue(params.request);
146
- if (requestId === undefined || requestId.length > 256) {
147
- this.completeness.exclude("network_requests", "invalid_protocol_value");
148
- return;
149
- }
150
- if (request === undefined) {
151
- this.completeness.exclude("network_requests", "invalid_protocol_value");
152
- this.network.delete(requestId);
153
- return;
154
- }
155
- const sanitized = allowedSanitizedUrl(request.url, this.allowedOrigins);
156
- if (sanitized === undefined) {
157
- this.completeness.exclude("network_requests", exclusionReasonForUrl(stringValue(request.url)));
158
- this.network.delete(requestId);
159
- return;
160
- }
161
- if (this.network.size >= this.input.limits.max_network_events &&
162
- !this.network.has(requestId)) {
163
- this.completeness.drop("network_requests");
164
- return;
165
- }
166
- const initiator = recordValue(params.initiator);
167
- const initiatorFrame = initiatorLocation(initiator);
168
- const rawInitiatorUrl = stringValue(initiatorFrame?.url);
169
- const initiatorUrl = allowedSanitizedUrl(rawInitiatorUrl, this.allowedOrigins);
170
- if (rawInitiatorUrl !== undefined && initiatorUrl === undefined)
171
- this.completeness.exclude("network_initiators", exclusionReasonForUrl(rawInitiatorUrl));
172
- this.network.set(requestId, {
173
- request_id: requestId,
174
- url: sanitized.url,
175
- origin: sanitized.origin ?? "",
176
- method: (stringValue(request.method) ?? "GET").slice(0, 32),
177
- resource_type: boundedText(params.type, 100),
178
- status: null,
179
- mime_type: null,
180
- encoded_data_length: null,
181
- initiator: {
182
- type: (stringValue(initiator?.type) ?? "other").slice(0, 100),
183
- url: initiatorUrl?.url ?? null,
184
- line: integerOrNull(initiatorFrame?.lineNumber),
185
- column: integerOrNull(initiatorFrame?.columnNumber),
186
- },
187
- body_shapes: this.#requestBodyShape(request),
188
- });
189
- }
190
- #response(params) {
191
- const requestId = stringValue(params.requestId);
192
- if (requestId === undefined || requestId.length > 256) {
193
- this.completeness.exclude("network_requests", "invalid_protocol_value");
194
- return;
195
- }
196
- const current = this.network.get(requestId);
197
- const response = recordValue(params.response);
198
- if (current === undefined)
199
- return;
200
- const sanitized = allowedSanitizedUrl(response?.url, this.allowedOrigins);
201
- if (response === undefined || sanitized === undefined) {
202
- this.completeness.exclude("network_requests", response === undefined
203
- ? "invalid_protocol_value"
204
- : exclusionReasonForUrl(stringValue(response.url)));
205
- this.network.delete(requestId);
206
- return;
207
- }
208
- this.network.set(requestId, {
209
- ...current,
210
- status: numberValue(response.status) ?? null,
211
- mime_type: boundedText(response.mimeType, 256),
212
- });
213
- if (this.responseMetadata.length >= this.input.limits.max_network_events) {
214
- this.completeness.truncate("metadata");
215
- return;
216
- }
217
- const metadata = safeResponseMetadata(requestId, sanitized.url, response, this.allowedOrigins);
218
- this.responseMetadata.push(metadata.response);
219
- this.agentHints.push(...metadata.agentHints);
220
- }
221
- #finished(params) {
222
- const requestId = stringValue(params.requestId);
223
- if (requestId === undefined || requestId.length > 256)
224
- return;
225
- const current = this.network.get(requestId);
226
- if (current === undefined)
227
- return;
228
- this.network.set(requestId, {
229
- ...current,
230
- encoded_data_length: Math.max(0, numberValue(params.encodedDataLength) ?? 0),
231
- });
232
- }
233
- #console(params) {
234
- const frame = firstCallFrame(recordValue(params.stackTrace));
235
- if (frame === undefined) {
236
- this.completeness.exclude("console_events", "unattributed_origin");
237
- return;
238
- }
239
- const source = allowedSanitizedUrl(frame.url, this.allowedOrigins);
240
- if (source === undefined) {
241
- this.completeness.exclude("console_events", exclusionReasonForUrl(stringValue(frame.url)));
242
- return;
243
- }
244
- if (this.console.length >= this.input.limits.max_console_events) {
245
- this.completeness.drop("console_events");
246
- return;
247
- }
248
- const arguments_ = recordsValue(params.args);
249
- this.console.push({
250
- type: (stringValue(params.type) ?? "unknown").slice(0, 100),
251
- timestamp: numberValue(params.timestamp) ?? 0,
252
- argument_types: arguments_
253
- .map((argument) => (stringValue(argument.type) ?? "unknown").slice(0, 100))
254
- .slice(0, 100),
255
- url: source.url,
256
- line: integerOrNull(frame.lineNumber),
257
- column: integerOrNull(frame.columnNumber),
258
- text_capture: this.#consoleText(arguments_),
259
- });
260
- }
261
- #websocket(params, direction) {
262
- const requestId = stringValue(params.requestId);
263
- if (requestId === undefined ||
264
- requestId.length > 256 ||
265
- (!this.network.has(requestId) && !this.allowedWebSockets.has(requestId)))
266
- return;
267
- if (this.websockets.length >= this.input.limits.max_websocket_events) {
268
- this.completeness.drop("websocket_frames");
269
- return;
270
- }
271
- const response = recordValue(params.response);
272
- const payload = stringValue(response?.payloadData) ?? "";
273
- const opcode = Math.max(0, Math.trunc(numberValue(response?.opcode) ?? 0));
274
- const decoded = opcode === 1 ? undefined : decodeBase64(payload);
275
- if (opcode !== 1 && decoded === undefined)
276
- this.completeness.exclude("websocket_frames", "invalid_protocol_value");
277
- this.websockets.push({
278
- request_id: requestId,
279
- direction,
280
- opcode,
281
- payload_bytes: opcode === 1 ? Buffer.byteLength(payload) : (decoded?.byteLength ?? 0),
282
- payload_shape: this.#websocketShape(payload, opcode),
283
- });
106
+ /** Resolve a transient execution context to one already authorized frame. */
107
+ frameForScript(script, allowedFrameIds) {
108
+ if (script.executionContextKey === null)
109
+ return null;
110
+ const frameId = this.executionContextFrames.get(script.executionContextKey);
111
+ return frameId !== undefined && allowedFrameIds.has(frameId)
112
+ ? frameId
113
+ : null;
284
114
  }
285
115
  responseBodyRequestIds() {
286
116
  if (!this.input.include_json_body_shapes)
@@ -290,258 +120,10 @@ export class CdpCaptureEvents {
290
120
  .map((request) => request.request_id);
291
121
  }
292
122
  responseBodyUnavailable(requestId) {
293
- this.#updateResponseShape(requestId, null, false);
123
+ bodyShapes.updateResponseBodyShape(this, requestId, null, false);
294
124
  this.completeness.unavailable("json_body_shapes");
295
125
  }
296
126
  ingestResponseBody(requestId, value) {
297
- const result = recordValue(value);
298
- const body = stringValue(result?.body);
299
- if (body === undefined) {
300
- this.#invalidResponseBody(requestId);
301
- return;
302
- }
303
- const decoded = result?.base64Encoded === true
304
- ? decodeBase64(body)?.toString("utf8")
305
- : body;
306
- if (decoded === undefined) {
307
- this.#invalidResponseBody(requestId);
308
- return;
309
- }
310
- const inferred = this.#inferBodyShape(decoded);
311
- this.#updateResponseShape(requestId, inferred.shape, inferred.truncated);
312
- }
313
- #invalidResponseBody(requestId) {
314
- this.#updateResponseShape(requestId, null, false);
315
- this.completeness.exclude("json_body_shapes", "invalid_protocol_value");
316
- }
317
- #requestBodyShape(request) {
318
- if (!this.input.include_json_body_shapes)
319
- return { status: "not_approved", request: null, response: null };
320
- const body = stringValue(request.postData);
321
- if (!isJsonContentType(recordValue(request.headers)) || body === undefined)
322
- return { status: "unavailable", request: null, response: null };
323
- const inferred = this.#inferBodyShape(body);
324
- return {
325
- status: inferred.truncated
326
- ? "truncated"
327
- : inferred.shape === null
328
- ? "unavailable"
329
- : "included",
330
- request: inferred.shape,
331
- response: null,
332
- };
333
- }
334
- #inferBodyShape(text) {
335
- const bytes = Buffer.byteLength(text);
336
- const remaining = this.input.limits.max_total_json_body_bytes - this.#jsonBodyBytes;
337
- if (bytes > this.input.limits.max_json_body_bytes || bytes > remaining) {
338
- this.completeness.truncate("json_body_shapes");
339
- return { shape: null, truncated: true };
340
- }
341
- this.#jsonBodyBytes += bytes;
342
- const shape = inferJsonShape(text, {
343
- maximumBytes: this.input.limits.max_json_body_bytes,
344
- maximumNodes: this.input.limits.max_json_shape_nodes,
345
- maximumDepth: this.input.limits.max_json_shape_depth,
346
- });
347
- if (shape?.truncated === true)
348
- this.completeness.truncate("json_body_shapes");
349
- return { shape, truncated: shape?.truncated === true };
350
- }
351
- #updateResponseShape(requestId, response, truncated) {
352
- const current = this.network.get(requestId);
353
- if (current === undefined)
354
- return;
355
- const request = current.body_shapes.request;
356
- const status = truncated || current.body_shapes.status === "truncated"
357
- ? "truncated"
358
- : response !== null
359
- ? "included"
360
- : request !== null
361
- ? "partial"
362
- : "unavailable";
363
- this.network.set(requestId, {
364
- ...current,
365
- body_shapes: { status, request, response },
366
- });
367
- }
368
- #consoleText(arguments_) {
369
- if (!this.input.include_console_text)
370
- return {
371
- status: "not_approved",
372
- values: [],
373
- retained_bytes: 0,
374
- truncated_values: 0,
375
- };
376
- const values = [];
377
- let retainedBytes = 0;
378
- let truncatedValues = 0;
379
- for (const [argumentIndex, argument] of arguments_.entries()) {
380
- const primitive = consolePrimitive(argument);
381
- if (primitive === undefined)
382
- continue;
383
- const remaining = this.input.limits.max_total_console_text_bytes - this.#consoleTextBytes;
384
- if (remaining <= 0) {
385
- truncatedValues += 1;
386
- continue;
387
- }
388
- const bounded = boundedSensitiveText(primitive.text, Math.min(this.input.limits.max_console_text_field_bytes, remaining));
389
- values.push({
390
- argument_index: argumentIndex,
391
- type: primitive.type,
392
- text: bounded.text,
393
- });
394
- retainedBytes += bounded.bytes;
395
- this.#consoleTextBytes += bounded.bytes;
396
- if (bounded.truncated)
397
- truncatedValues += 1;
398
- }
399
- if (truncatedValues > 0)
400
- this.completeness.truncate("console_text");
401
- return {
402
- status: truncatedValues > 0 ? "truncated" : "included",
403
- values,
404
- retained_bytes: retainedBytes,
405
- truncated_values: truncatedValues,
406
- };
407
- }
408
- #websocketShape(payload, opcode) {
409
- if (!this.input.include_websocket_shapes)
410
- return null;
411
- if (opcode !== 1)
412
- return { format: "binary", json_shape: null, truncated: false };
413
- const bytes = Buffer.byteLength(payload);
414
- const remaining = this.input.limits.max_total_websocket_shape_bytes -
415
- this.#websocketShapeBytes;
416
- if (bytes > this.input.limits.max_websocket_shape_bytes ||
417
- bytes > remaining) {
418
- this.completeness.truncate("websocket_shapes");
419
- return { format: "text", json_shape: null, truncated: true };
420
- }
421
- this.#websocketShapeBytes += bytes;
422
- const shape = inferJsonShape(payload, {
423
- maximumBytes: this.input.limits.max_websocket_shape_bytes,
424
- maximumNodes: this.input.limits.max_json_shape_nodes,
425
- maximumDepth: this.input.limits.max_json_shape_depth,
426
- });
427
- if (shape?.truncated === true)
428
- this.completeness.truncate("websocket_shapes");
429
- return {
430
- format: shape === null ? "text" : "json",
431
- json_shape: shape,
432
- truncated: shape?.truncated === true,
433
- };
434
- }
435
- #websocketCreated(params) {
436
- const requestId = stringValue(params.requestId);
437
- const rawUrl = stringValue(params.url);
438
- if (requestId === undefined || requestId.length > 256) {
439
- this.completeness.exclude("websocket_connections", "invalid_protocol_value");
440
- return;
441
- }
442
- if (rawUrl === undefined) {
443
- this.completeness.exclude("websocket_connections", "invalid_protocol_value");
444
- return;
445
- }
446
- let parsed;
447
- try {
448
- parsed = new URL(rawUrl);
449
- }
450
- catch {
451
- this.completeness.exclude("websocket_connections", "unsupported_url");
452
- return;
453
- }
454
- if (parsed.protocol === "ws:")
455
- parsed.protocol = "http:";
456
- else if (parsed.protocol === "wss:")
457
- parsed.protocol = "https:";
458
- else {
459
- this.completeness.exclude("websocket_connections", "unsupported_url");
460
- return;
461
- }
462
- if (!this.allowedOrigins.has(parsed.origin)) {
463
- this.completeness.exclude("websocket_connections", "disallowed_origin");
464
- return;
465
- }
466
- if (!this.allowedWebSockets.has(requestId) &&
467
- this.allowedWebSockets.size >= this.input.limits.max_websocket_events) {
468
- this.completeness.drop("websocket_connections");
469
- return;
470
- }
471
- this.allowedWebSockets.add(requestId);
472
- }
473
- #frameNavigated(params) {
474
- const frame = recordValue(params.frame);
475
- if (stringValue(frame?.id) !== this.#mainFrameId)
476
- return;
477
- this.navigationDuringCapture = true;
478
- const rawUrl = stringValue(frame?.url);
479
- if (isHttpUrl(rawUrl) &&
480
- allowedSanitizedUrl(rawUrl, this.allowedOrigins) === undefined)
481
- this.originViolation = true;
127
+ bodyShapes.ingestResponseBodyShape(this, requestId, value);
482
128
  }
483
129
  }
484
- const firstCallFrame = (value) => recordsValue(value?.callFrames)[0];
485
- const initiatorLocation = (initiator) => {
486
- let stack = recordValue(initiator?.stack);
487
- for (let depth = 0; depth < 32 && stack !== undefined; depth += 1) {
488
- const frame = firstCallFrame(stack);
489
- if (frame !== undefined)
490
- return frame;
491
- stack = recordValue(stack.parent);
492
- }
493
- return stringValue(initiator?.url) === undefined ? undefined : initiator;
494
- };
495
- const exclusionReasonForUrl = (value) => value === undefined || value === ""
496
- ? "unattributed_origin"
497
- : isHttpUrl(value)
498
- ? "disallowed_origin"
499
- : "unsupported_url";
500
- const integerOrNull = (value) => {
501
- const number = numberValue(value);
502
- return number === undefined ? null : Math.max(0, Math.trunc(number));
503
- };
504
- const isJsonContentType = (headers) => {
505
- if (headers === undefined)
506
- return false;
507
- for (const [name, value] of Object.entries(headers))
508
- if (name.toLowerCase() === "content-type" &&
509
- isJsonMediaType(stringValue(value)))
510
- return true;
511
- return false;
512
- };
513
- const isJsonMediaType = (value) => {
514
- const mediaType = value?.split(";", 1)[0]?.trim().toLowerCase();
515
- return (mediaType === "application/json" || mediaType?.endsWith("+json") === true);
516
- };
517
- const consolePrimitive = (value) => {
518
- const type = stringValue(value.type);
519
- switch (type) {
520
- case "string":
521
- return typeof value.value === "string"
522
- ? { type, text: value.value }
523
- : undefined;
524
- case "boolean":
525
- return typeof value.value === "boolean"
526
- ? { type, text: String(value.value) }
527
- : undefined;
528
- case "number":
529
- return typeof value.value === "number"
530
- ? { type, text: String(value.value) }
531
- : typeof value.unserializableValue === "string"
532
- ? { type, text: value.unserializableValue }
533
- : undefined;
534
- case "bigint":
535
- return typeof value.unserializableValue === "string"
536
- ? { type, text: value.unserializableValue }
537
- : undefined;
538
- case "undefined":
539
- return { type, text: "undefined" };
540
- default:
541
- return undefined;
542
- }
543
- };
544
- const BASE64 = /^(?:[A-Za-z\d+/]{4})*(?:[A-Za-z\d+/]{2}==|[A-Za-z\d+/]{3}=)?$/u;
545
- const decodeBase64 = (value) => value.length % 4 === 0 && BASE64.test(value)
546
- ? Buffer.from(value, "base64")
547
- : undefined;