rea-agents 1.7.0 → 2.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (333) hide show
  1. package/README.md +112 -59
  2. package/bridge/ghidra/ReaGhidraBridge.java +96 -11
  3. package/dist/application/ArtifactExtraction.js +1 -1
  4. package/dist/application/ArtifactInventory/classify.js +42 -0
  5. package/dist/application/ArtifactInventory/hash.js +43 -0
  6. package/dist/application/ArtifactInventory/reader.js +41 -0
  7. package/dist/application/ArtifactInventory/scanCanonical.js +155 -0
  8. package/dist/application/ArtifactInventory/scanReader.js +124 -0
  9. package/dist/application/ArtifactInventory/types.js +10 -0
  10. package/dist/application/ArtifactInventory.js +9 -351
  11. package/dist/application/AuthorizedArtifactInventory.js +2 -2
  12. package/dist/application/BinarySession.js +47 -270
  13. package/dist/application/BinarySessionExecution.js +28 -0
  14. package/dist/application/BinarySessionOpen.js +39 -0
  15. package/dist/application/BinarySessionRecords.js +149 -0
  16. package/dist/application/BinarySessionStatus.js +75 -0
  17. package/dist/application/CapabilityInventory.js +42 -2
  18. package/dist/application/ClientRegistrationStatus.js +1 -1
  19. package/dist/application/CrossVersionInventory.js +8 -2
  20. package/dist/application/CrossVersionInvestigation.js +11 -29
  21. package/dist/application/CrossVersionInvestigationCollections.js +23 -0
  22. package/dist/application/DirectAnalysis.js +47 -44
  23. package/dist/application/Doctor.js +165 -197
  24. package/dist/application/DoctorDiagnostics.js +180 -0
  25. package/dist/application/ElectronBoundaryAnalysis.js +112 -0
  26. package/dist/application/ElectronBoundaryGraph.js +9 -0
  27. package/dist/application/ElectronBoundaryGraphContext.js +62 -0
  28. package/dist/application/ElectronBoundaryGraphIpc.js +242 -0
  29. package/dist/application/ElectronBoundaryGraphNative.js +86 -0
  30. package/dist/application/ElectronBoundaryGraphWindows.js +223 -0
  31. package/dist/application/EnhancedToolPagination.js +22 -0
  32. package/dist/application/EnhancedToolTypes.js +4 -0
  33. package/dist/application/EnhancedTools.js +58 -50
  34. package/dist/application/InstrumentedJavaScriptReplayHost.js +36 -0
  35. package/dist/application/InvestigationProviders.js +30 -0
  36. package/dist/application/InvestigationWorkspaceStore.js +24 -10
  37. package/dist/application/JavaScriptApplicationEvidence.js +26 -0
  38. package/dist/application/JavaScriptApplicationEvidenceGraph.js +89 -0
  39. package/dist/application/JavaScriptApplicationService.js +74 -0
  40. package/dist/application/JavaScriptApplicationWorkflowEvidence.js +29 -0
  41. package/dist/application/JavaScriptApplicationWorkflowService.js +90 -0
  42. package/dist/application/JavaScriptArtifactAnalysis.js +52 -7
  43. package/dist/application/JavaScriptArtifactFiles.js +6 -2
  44. package/dist/application/JavaScriptArtifactGraphBuilder.js +82 -17
  45. package/dist/application/JavaScriptArtifactGraphBundlers.js +225 -0
  46. package/dist/application/JavaScriptArtifactGraphContext.js +37 -36
  47. package/dist/application/JavaScriptArtifactGraphDocuments.js +27 -4
  48. package/dist/application/JavaScriptArtifactGraphEvidence.js +24 -14
  49. package/dist/application/JavaScriptArtifactGraphFindings.js +54 -8
  50. package/dist/application/JavaScriptArtifactGraphStructure.js +29 -101
  51. package/dist/application/JavaScriptArtifactPathResolution.js +269 -0
  52. package/dist/application/JavaScriptArtifactReconstruction.js +4 -1
  53. package/dist/application/JavaScriptArtifactReconstructionInput.js +2 -83
  54. package/dist/application/JavaScriptJsonModules.js +39 -0
  55. package/dist/application/JavaScriptModuleRelationships.js +262 -0
  56. package/dist/application/JavaScriptReplayPermission.js +16 -0
  57. package/dist/application/JavaScriptReplayPlanning.js +201 -0
  58. package/dist/application/JavaScriptReplayService.js +292 -0
  59. package/dist/application/JavaScriptRuntimeReconciliationEvidence.js +25 -0
  60. package/dist/application/JavaScriptRuntimeReconciliationService.js +27 -0
  61. package/dist/application/LinuxHopper.js +10 -0
  62. package/dist/application/MacHopper.js +22 -11
  63. package/dist/application/ManagedApplicationGraphService.js +55 -0
  64. package/dist/application/ManagedMemberComparisonService.js +122 -0
  65. package/dist/application/ManagedNativeVerificationService.js +39 -0
  66. package/dist/application/ManagedReconstructionService.js +58 -0
  67. package/dist/application/ManagedRuntimeCorrelationService.js +103 -0
  68. package/dist/application/NodeRuntimeCharacterizationService.js +196 -0
  69. package/dist/application/PermissionAuthority.js +106 -63
  70. package/dist/application/ProcessCaptureCapability.js +1 -1
  71. package/dist/application/ProcessCapturePermission.js +13 -0
  72. package/dist/application/ProcessCli.js +2 -12
  73. package/dist/application/ProcessHarness.js +1 -1
  74. package/dist/application/ProcessSampling.js +15 -11
  75. package/dist/application/ProjectPermissionStore.js +49 -9
  76. package/dist/application/RealHopperAssertions.js +76 -0
  77. package/dist/application/ReconstructionCoverageService.js +69 -0
  78. package/dist/application/ReconstructionCoverageWorkspaceStore.js +31 -0
  79. package/dist/application/RuntimeExecutableDiagnostics.js +172 -0
  80. package/dist/application/Setup.js +147 -259
  81. package/dist/application/SetupClientConfiguration.js +220 -0
  82. package/dist/application/SetupClients.js +24 -2
  83. package/dist/application/SetupPlan.js +123 -12
  84. package/dist/application/SetupSkill.js +26 -12
  85. package/dist/application/SupportedClients.js +1 -0
  86. package/dist/application/Uninstall.js +6 -3
  87. package/dist/application/WindowsCapabilities.js +86 -0
  88. package/dist/application/runtime.js +2 -0
  89. package/dist/artifacts/AsarArtifactReader.js +11 -0
  90. package/dist/browser/BrowserProcessStartup.js +88 -0
  91. package/dist/browser/CdpCaptureDocuments.js +12 -8
  92. package/dist/browser/CdpCaptureEventBodyShapes.js +75 -0
  93. package/dist/browser/CdpCaptureEventHandlers.js +336 -0
  94. package/dist/browser/CdpCaptureEventHelpers.js +71 -0
  95. package/dist/browser/CdpCaptureEventState.js +1 -0
  96. package/dist/browser/CdpCaptureEventTypes.js +1 -0
  97. package/dist/browser/CdpCaptureEvents.js +46 -464
  98. package/dist/browser/CdpElectronInspection.js +106 -162
  99. package/dist/browser/CdpElectronProvider.js +5 -1
  100. package/dist/browser/CdpElectronScriptEvents.js +69 -0
  101. package/dist/browser/CdpElectronScripts.js +94 -0
  102. package/dist/browser/CdpElectronWorkers.js +56 -0
  103. package/dist/browser/CdpObservationSession.js +51 -8
  104. package/dist/browser/CdpPageCapture.js +12 -129
  105. package/dist/browser/CdpPageCaptureScripts.js +97 -0
  106. package/dist/browser/CdpPageCaptureWorkers.js +46 -0
  107. package/dist/browser/CdpWebMcpDiscovery.js +38 -14
  108. package/dist/browser/PngVisualDiff.js +9 -2
  109. package/dist/catalogIdentity.js +8 -1
  110. package/dist/cli/artifactCommands.js +82 -0
  111. package/dist/cli/coreAnalysisCommands.js +232 -0
  112. package/dist/cli/managedCommands.js +397 -0
  113. package/dist/cli/managedProjectGraphCommand.js +24 -0
  114. package/dist/cli/options.js +9 -0
  115. package/dist/cli/setupCommands.js +108 -0
  116. package/dist/cli/types.js +1 -0
  117. package/dist/cli/utilityCommands.js +122 -0
  118. package/dist/cli.js +13 -383
  119. package/dist/cliApplicationCommands.js +176 -0
  120. package/dist/cliBrowserAdvancedCommands.js +73 -16
  121. package/dist/cliBrowserCommands.js +39 -115
  122. package/dist/cliCommandNames.js +17 -0
  123. package/dist/cliElectronCommands.js +100 -27
  124. package/dist/cliEvidenceCommands.js +13 -2
  125. package/dist/cliInvestigationCommands.js +53 -10
  126. package/dist/cliJsonInput.js +54 -0
  127. package/dist/cliObservationOptions.js +137 -0
  128. package/dist/cliPolicyCommands.js +80 -46
  129. package/dist/cliSetup.js +289 -0
  130. package/dist/config/environment.js +107 -0
  131. package/dist/config/parseConfig.js +228 -0
  132. package/dist/config/parsers.js +68 -0
  133. package/dist/config/permissions.js +30 -0
  134. package/dist/config/types.js +1 -0
  135. package/dist/config.js +1 -292
  136. package/dist/contracts/applicationToolContracts.js +225 -0
  137. package/dist/contracts/artifactToolContracts.js +5 -9
  138. package/dist/contracts/browserToolContracts.js +14 -62
  139. package/dist/contracts/electronToolContracts.js +45 -19
  140. package/dist/contracts/errorSchemas.js +1 -0
  141. package/dist/contracts/investigationExamples.js +0 -6
  142. package/dist/contracts/javascriptApplicationWorkflowExamples.js +46 -0
  143. package/dist/contracts/javascriptRuntimeReconciliationExample.js +208 -0
  144. package/dist/contracts/managedToolContracts.js +153 -0
  145. package/dist/contracts/managedWorkflowExamples.js +346 -0
  146. package/dist/contracts/managedWorkflowToolContracts.js +203 -0
  147. package/dist/contracts/nativeToolContracts.js +2 -6
  148. package/dist/contracts/promptContracts.js +18 -2
  149. package/dist/contracts/providerSelection.js +2 -0
  150. package/dist/contracts/toolContractExamples.js +10 -25
  151. package/dist/contracts/toolContracts.js +49 -47
  152. package/dist/contracts/toolEffects.js +174 -0
  153. package/dist/contracts/toolOutputSchemaGroups.js +232 -0
  154. package/dist/contracts/toolOutputSchemaPrimitives.js +327 -0
  155. package/dist/contracts/toolOutputSchemas.js +2 -535
  156. package/dist/doctorRuntime.js +42 -1
  157. package/dist/domain/analysisErrorPresentation.js +234 -0
  158. package/dist/domain/analysisErrorProjection.js +284 -0
  159. package/dist/domain/artifactComparison.js +37 -19
  160. package/dist/domain/binaryTarget.js +87 -37
  161. package/dist/domain/browserObservation.js +1 -282
  162. package/dist/domain/browserObservationSchemas.js +286 -0
  163. package/dist/domain/bundleComparison.js +4 -4
  164. package/dist/domain/electronObservation.js +13 -0
  165. package/dist/domain/electronStaticAnalysis.js +9 -0
  166. package/dist/domain/electronStaticAnalysisBrowser.js +206 -0
  167. package/dist/domain/electronStaticAnalysisIpc.js +171 -0
  168. package/dist/domain/electronStaticAnalysisNative.js +164 -0
  169. package/dist/domain/electronStaticAnalysisTypes.js +1 -0
  170. package/dist/domain/electronStaticAnalysisValues.js +103 -0
  171. package/dist/domain/errors.js +32 -448
  172. package/dist/domain/functionComparison.js +4 -165
  173. package/dist/domain/functionComparisonDimensions.js +164 -0
  174. package/dist/domain/functionComparisonSchemas.js +3 -8
  175. package/dist/domain/inputIssueProjection.js +52 -0
  176. package/dist/domain/javascriptApplicationAnalysis.js +155 -0
  177. package/dist/domain/javascriptApplicationChangeGraph.js +231 -0
  178. package/dist/domain/javascriptApplicationEvidenceSchemas.js +18 -0
  179. package/dist/domain/javascriptApplicationGraph.js +2 -1
  180. package/dist/domain/javascriptApplicationGraphSchemas.js +7 -0
  181. package/dist/domain/javascriptApplicationVersionComparison.js +116 -0
  182. package/dist/domain/javascriptApplicationVersionComparisonSchemas.js +139 -0
  183. package/dist/domain/javascriptApplicationVersionItems.js +233 -0
  184. package/dist/domain/javascriptApplicationVersionKeys.js +170 -0
  185. package/dist/domain/javascriptExportInstrumentation.js +97 -0
  186. package/dist/domain/javascriptFeatureSeed.js +140 -0
  187. package/dist/domain/javascriptFeatureTrace.js +232 -0
  188. package/dist/domain/javascriptFeatureTraceSchemas.js +136 -0
  189. package/dist/domain/javascriptFeatureTraversal.js +100 -0
  190. package/dist/domain/javascriptNativeHandoff.js +85 -0
  191. package/dist/domain/javascriptReplay.js +361 -0
  192. package/dist/domain/javascriptRuntimeLoadState.js +106 -0
  193. package/dist/domain/javascriptRuntimeReconciliation.js +42 -0
  194. package/dist/domain/javascriptRuntimeReconciliationGraph.js +169 -0
  195. package/dist/domain/javascriptRuntimeReconciliationMatching.js +247 -0
  196. package/dist/domain/javascriptRuntimeReconciliationParsing.js +160 -0
  197. package/dist/domain/javascriptRuntimeReconciliationResult.js +119 -0
  198. package/dist/domain/javascriptRuntimeReconciliationRuntime.js +316 -0
  199. package/dist/domain/javascriptRuntimeReconciliationSchemas.js +245 -0
  200. package/dist/domain/javascriptRuntimeStaticCandidates.js +193 -0
  201. package/dist/domain/javascriptSemanticAnalysis.js +386 -0
  202. package/dist/domain/javascriptSemanticIr.js +30 -0
  203. package/dist/domain/javascriptSemanticProjection.js +366 -0
  204. package/dist/domain/javascriptSemanticState.js +40 -0
  205. package/dist/domain/javascriptSemanticTraversal.js +22 -0
  206. package/dist/domain/javascriptSemanticValues.js +352 -0
  207. package/dist/domain/javascriptStaticAnalysis.js +26 -254
  208. package/dist/domain/javascriptStaticAnalysisBundler.js +209 -0
  209. package/dist/domain/javascriptStaticAnalysisCalls.js +180 -0
  210. package/dist/domain/javascriptStaticAnalysisFindings.js +39 -0
  211. package/dist/domain/javascriptStaticAnalysisHelpers.js +81 -2
  212. package/dist/domain/javascriptStaticAnalysisState.js +6 -0
  213. package/dist/domain/knownPageCoverage.js +21 -0
  214. package/dist/domain/managedApplicationGraph.js +206 -0
  215. package/dist/domain/managedApplicationGraphCoverage.js +170 -0
  216. package/dist/domain/managedApplicationGraphNodeCoverage.js +6 -0
  217. package/dist/domain/managedApplicationGraphNodes.js +336 -0
  218. package/dist/domain/managedArtifact.js +452 -0
  219. package/dist/domain/managedMemberComparison.js +211 -0
  220. package/dist/domain/managedMemberComparisonCoverage.js +72 -0
  221. package/dist/domain/managedMemberComparisonMatch.js +356 -0
  222. package/dist/domain/managedNativeVerification.js +46 -0
  223. package/dist/domain/managedNativeVerificationMatch.js +272 -0
  224. package/dist/domain/managedNativeVerificationSchemas.js +141 -0
  225. package/dist/domain/managedReconstruction.js +196 -0
  226. package/dist/domain/managedRuntimeCorrelation.js +184 -0
  227. package/dist/domain/nodeRuntimeCharacterization.js +66 -0
  228. package/dist/domain/permissionPolicy.js +2 -0
  229. package/dist/domain/reconstructionCoverage.js +387 -0
  230. package/dist/domain/reconstructionCoverageEvaluation.js +212 -0
  231. package/dist/domain/reconstructionVerificationSchemas.js +9 -3
  232. package/dist/domain/runtimeCharacterization.js +85 -0
  233. package/dist/domain/webBundleAnalyzer.js +3 -409
  234. package/dist/domain/webBundleAnalyzerAst.js +77 -0
  235. package/dist/domain/webBundleAnalyzerInspection.js +307 -0
  236. package/dist/domain/webBundleAnalyzerResult.js +120 -0
  237. package/dist/dotnet/ManagedArtifactInspector.js +339 -0
  238. package/dist/dotnet/ManagedMemberInspector.js +153 -0
  239. package/dist/dotnet/ManagedMemberInspectorCore.js +297 -0
  240. package/dist/dotnet/ManagedMemberInstructionDecoder.js +427 -0
  241. package/dist/dotnet/ManagedMemberRows.js +120 -0
  242. package/dist/dotnet/ManagedMetadataHeaps.js +131 -0
  243. package/dist/dotnet/ManagedMetadataInventory.js +104 -0
  244. package/dist/dotnet/ManagedMetadataInventoryRows.js +292 -0
  245. package/dist/dotnet/ManagedMetadataLayout.js +259 -0
  246. package/dist/dotnet/ManagedMetadataRowSizes.js +54 -0
  247. package/dist/dotnet/ManagedMethodBodyReader.js +143 -0
  248. package/dist/dotnet/ManagedNativeBoundaryHelpers.js +311 -0
  249. package/dist/dotnet/ManagedNativeBoundaryInspector.js +143 -0
  250. package/dist/dotnet/ManagedPeReader.js +188 -0
  251. package/dist/dotnet/ManagedReaderFailure.js +10 -0
  252. package/dist/dotnet/ManagedStaticProvider.js +203 -0
  253. package/dist/generatedPackageMetadata.js +2 -2
  254. package/dist/ghidra/GhidraClient.js +76 -91
  255. package/dist/ghidra/GhidraClientStartup.js +29 -0
  256. package/dist/ghidra/GhidraClientWire.js +34 -0
  257. package/dist/ghidra/GhidraDefaults.js +1 -1
  258. package/dist/ghidra/GhidraDiagnostics.js +6 -1
  259. package/dist/ghidra/GhidraInstallation.js +20 -15
  260. package/dist/ghidra/GhidraLauncher.js +93 -29
  261. package/dist/ghidra/GhidraProvider.js +67 -161
  262. package/dist/ghidra/GhidraProviderCapabilities.js +173 -0
  263. package/dist/ghidra/GhidraSessionValues.js +2 -0
  264. package/dist/ghidra/GhidraSocketConnection.js +44 -7
  265. package/dist/ghidra/GhidraTargetSnapshot.js +30 -0
  266. package/dist/ghidra/GhidraTransport.js +71 -0
  267. package/dist/identity.js +3 -2
  268. package/dist/main/messages.js +5 -0
  269. package/dist/main/reload.js +49 -0
  270. package/dist/main/shutdown.js +25 -0
  271. package/dist/main/startup.js +14 -0
  272. package/dist/main/state.js +26 -0
  273. package/dist/main/transport.js +61 -0
  274. package/dist/main/types.js +1 -0
  275. package/dist/main.js +35 -132
  276. package/dist/process/PrivateRuntimeRoot.js +3 -2
  277. package/dist/process/ProcessOwnership.js +35 -0
  278. package/dist/process/ProviderProcess.js +2 -0
  279. package/dist/replay/JavaScriptReplayWorker.js +300 -0
  280. package/dist/replay/LinuxJavaScriptReplayRunner.js +217 -0
  281. package/dist/replay/LinuxJavaScriptReplaySandbox.js +140 -0
  282. package/dist/replay/LinuxRuntimeClosure.js +46 -0
  283. package/dist/replay/LinuxSeccompPolicy.js +40 -0
  284. package/dist/replay/ReplayOutcome.js +95 -0
  285. package/dist/replay/ReplayProcessLifecycle.js +71 -0
  286. package/dist/replay/ReplayWorkerProtocol.js +55 -0
  287. package/dist/replay/SystemJavaScriptReplayHost.js +182 -0
  288. package/dist/server/ProcessCaptureElicitation.js +157 -0
  289. package/dist/server/createServer.js +158 -41
  290. package/dist/server/registerApplicationTools/characterization.js +57 -0
  291. package/dist/server/registerApplicationTools/compareVersions.js +34 -0
  292. package/dist/server/registerApplicationTools/controlledReplay.js +38 -0
  293. package/dist/server/registerApplicationTools/coverage.js +84 -0
  294. package/dist/server/registerApplicationTools/helpers.js +42 -0
  295. package/dist/server/registerApplicationTools/traceFeature.js +26 -0
  296. package/dist/server/registerApplicationTools/types.js +1 -0
  297. package/dist/server/registerApplicationTools.js +13 -0
  298. package/dist/server/registerArtifactComparisonTool.js +16 -9
  299. package/dist/server/registerBrowserTools.js +61 -60
  300. package/dist/server/registerBundleComparisonTool.js +17 -20
  301. package/dist/server/registerElectronTools.js +39 -12
  302. package/dist/server/registerEnhancedTools.js +52 -15
  303. package/dist/server/registerEvidenceResources.js +54 -0
  304. package/dist/server/registerEvidenceTools.js +5 -1
  305. package/dist/server/registerFunctionComparisonTool.js +14 -7
  306. package/dist/server/registerInvestigationTools/helpers.js +74 -0
  307. package/dist/server/registerInvestigationTools/types.js +1 -0
  308. package/dist/server/registerInvestigationTools.js +103 -132
  309. package/dist/server/registerManagedTools.js +6 -0
  310. package/dist/server/registerManagedWorkflowTools/compareManagedMembers.js +65 -0
  311. package/dist/server/registerManagedWorkflowTools/contract.js +8 -0
  312. package/dist/server/registerManagedWorkflowTools/evidence.js +43 -0
  313. package/dist/server/registerManagedWorkflowTools/importManagedReconstruction.js +39 -0
  314. package/dist/server/registerManagedWorkflowTools/planManagedRuntimeCorrelation.js +39 -0
  315. package/dist/server/registerManagedWorkflowTools/projectManagedApplicationGraph.js +52 -0
  316. package/dist/server/registerManagedWorkflowTools/types.js +1 -0
  317. package/dist/server/registerManagedWorkflowTools/verifyManagedNativeBoundaries.js +75 -0
  318. package/dist/server/registerManagedWorkflowTools.js +13 -0
  319. package/dist/server/registerOfficialTools.js +81 -67
  320. package/dist/server/registerProcessComparisonTool.js +25 -47
  321. package/dist/server/registerSessionRecordTools.js +137 -0
  322. package/dist/server/registerSessionStatusTool.js +9 -8
  323. package/dist/server/registerSessionTools.js +77 -216
  324. package/dist/server/sessionAvailabilityPolicy.js +10 -0
  325. package/dist/server/sessionEvidence.js +14 -19
  326. package/dist/server/toolInputValidation.js +77 -0
  327. package/dist/server/toolRegistrationOptions.js +177 -2
  328. package/dist/server/toolResult.js +30 -17
  329. package/package.json +21 -14
  330. package/scripts/rea.mjs +1 -1
  331. package/skills/{rea-analysis → reverse-engineer-anything}/SKILL.md +75 -6
  332. package/scripts/prepare-node-pty.mjs +0 -35
  333. package/scripts/rebuild-native.mjs +0 -22
@@ -0,0 +1,193 @@
1
+ import { isAbsolute, posix, relative } from "node:path";
2
+ import { compareCodePoints, } from "./javascriptApplicationGraph.js";
3
+ /** Index statically reconstructed entities that can receive runtime matches. */
4
+ export const collectStaticRuntimeCandidates = (layers) => layers
5
+ .flatMap((layer) => candidatesForLayer(layer))
6
+ .sort((left, right) => compareCodePoints(left.layer.layerId, right.layer.layerId) ||
7
+ compareCodePoints(left.node.node_id, right.node.node_id));
8
+ /** Translate one already-authorized runtime location into artifact paths. */
9
+ export const mappedRuntimePaths = (layer, entity) => {
10
+ const paths = [];
11
+ if (entity.location.kind === "file" && layer.result.format === "directory") {
12
+ const path = pathBelowRoot(layer.result.input_path, entity.location.value);
13
+ if (path !== null)
14
+ paths.push({ path, basis: "artifact-path" });
15
+ }
16
+ for (const mapping of layer.runtimeMappings) {
17
+ const suffix = mapping.kind === "file-root" && entity.location.kind === "file"
18
+ ? pathBelowRoot(mapping.root, entity.location.value)
19
+ : mapping.kind === "url-prefix" && entity.location.kind === "url"
20
+ ? pathBelowUrlPrefix(mapping.prefix, entity.location.value)
21
+ : null;
22
+ if (suffix === null)
23
+ continue;
24
+ const path = safeArtifactPath(mapping.artifact_prefix, suffix);
25
+ if (path === null)
26
+ continue;
27
+ paths.push({
28
+ path,
29
+ basis: mapping.kind === "file-root"
30
+ ? "operator-file-mapping"
31
+ : "operator-url-mapping",
32
+ });
33
+ }
34
+ return uniqueMappedPaths(paths);
35
+ };
36
+ /** Precompute the artifact prefixes exercised by a bounded runtime set. */
37
+ export const createStaticRuntimeScope = (layer, entities) => ({
38
+ artifactPrefixes: activeArtifactPrefixes(layer, entities),
39
+ pathsByNodeId: indexStaticPaths(layer.graph),
40
+ });
41
+ /** Whether one static node falls under a mapping exercised by this runtime set. */
42
+ export const staticNodeWithinRuntimeScope = (node, scope) => (scope.pathsByNodeId.get(node.node_id) ?? []).some((path) => scope.artifactPrefixes.some((prefix) => pathWithinPrefix(path, prefix)));
43
+ const candidatesForLayer = (layer) => {
44
+ const graph = layer.graph;
45
+ const pathsByNodeId = indexStaticPaths(graph);
46
+ return graph.nodes.flatMap((node) => {
47
+ const category = candidateCategory(node);
48
+ if (category === null)
49
+ return [];
50
+ return [
51
+ {
52
+ layer,
53
+ node,
54
+ category,
55
+ paths: pathsByNodeId.get(node.node_id) ?? [],
56
+ digests: candidateDigests(node),
57
+ },
58
+ ];
59
+ });
60
+ };
61
+ const candidateCategory = (node) => {
62
+ if (node.kind === "electron-renderer")
63
+ return "renderer";
64
+ if (node.kind === "javascript-asset" ||
65
+ (node.kind === "javascript-module" && !isStaticSourceModule(node)))
66
+ return "javascript";
67
+ if (node.kind === "worker")
68
+ return "worker";
69
+ if (node.kind === "service-worker")
70
+ return "service-worker";
71
+ return null;
72
+ };
73
+ const isStaticSourceModule = (node) => node.observations.some(({ properties }) => properties.semantic_role === "source-module");
74
+ const indexStaticPaths = (graph) => {
75
+ const nodes = new Map(graph.nodes.map((candidate) => [candidate.node_id, candidate]));
76
+ const relatedBySource = new Map();
77
+ for (const edge of graph.edges) {
78
+ if (edge.relation !== "maps_to")
79
+ continue;
80
+ const target = nodes.get(edge.target_node_id);
81
+ if (target === undefined)
82
+ continue;
83
+ const related = relatedBySource.get(edge.source_node_id);
84
+ if (related === undefined)
85
+ relatedBySource.set(edge.source_node_id, [target]);
86
+ else
87
+ related.push(target);
88
+ }
89
+ return new Map(graph.nodes.map((node) => [
90
+ node.node_id,
91
+ uniqueSorted([
92
+ ...nodePaths(node),
93
+ ...(relatedBySource.get(node.node_id) ?? []).flatMap(nodePaths),
94
+ ]),
95
+ ]));
96
+ };
97
+ const nodePaths = (node) => {
98
+ const paths = [];
99
+ if (node.identity.strategy === "canonical-path")
100
+ paths.push(node.identity.path);
101
+ for (const observation of node.observations) {
102
+ for (const property of ["path", "resolved_path", "declared_path"])
103
+ if (typeof observation.properties[property] === "string")
104
+ paths.push(observation.properties[property]);
105
+ if (observation.evidence.location.available &&
106
+ observation.evidence.location.value.kind === "artifact-path")
107
+ paths.push(observation.evidence.location.value.path);
108
+ }
109
+ return paths
110
+ .map(normalizeArtifactPath)
111
+ .filter((path) => path !== null && path !== "artifact-root");
112
+ };
113
+ const candidateDigests = (node) => {
114
+ const values = [];
115
+ if (node.kind === "javascript-asset" &&
116
+ node.identity.strategy === "content-digest")
117
+ values.push({
118
+ sha256: node.identity.sha256,
119
+ basis: "content-sha256",
120
+ });
121
+ if (node.kind === "javascript-module")
122
+ for (const observation of node.observations) {
123
+ const digest = observation.properties.source_sha256;
124
+ if (typeof digest === "string" && /^[a-f0-9]{64}$/u.test(digest))
125
+ values.push({ sha256: digest, basis: "module-source-sha256" });
126
+ }
127
+ return [
128
+ ...new Map(values.map((value) => [`${value.basis}:${value.sha256}`, value])).values(),
129
+ ];
130
+ };
131
+ const pathBelowRoot = (root, value) => {
132
+ const remainder = relative(root, value);
133
+ if (remainder === "" ||
134
+ remainder.startsWith("..") ||
135
+ isAbsolute(remainder) ||
136
+ remainder.includes("\\"))
137
+ return null;
138
+ return normalizeArtifactPath(remainder);
139
+ };
140
+ const pathBelowUrlPrefix = (prefix, value) => {
141
+ let base;
142
+ let candidate;
143
+ try {
144
+ base = new URL(prefix);
145
+ candidate = new URL(value);
146
+ }
147
+ catch {
148
+ return null;
149
+ }
150
+ if (base.origin !== candidate.origin ||
151
+ !candidate.pathname.startsWith(base.pathname))
152
+ return null;
153
+ try {
154
+ return normalizeArtifactPath(decodeURIComponent(candidate.pathname.slice(base.pathname.length)));
155
+ }
156
+ catch {
157
+ return null;
158
+ }
159
+ };
160
+ const activeArtifactPrefixes = (layer, entities) => {
161
+ const prefixes = new Set();
162
+ if (layer.result.format === "directory" &&
163
+ entities.some(({ location }) => location.kind === "file" &&
164
+ pathBelowRoot(layer.result.input_path, location.value) !== null))
165
+ prefixes.add("");
166
+ for (const mapping of layer.runtimeMappings)
167
+ if (entities.some(({ location }) => mapping.kind === "file-root" && location.kind === "file"
168
+ ? pathBelowRoot(mapping.root, location.value) !== null
169
+ : mapping.kind === "url-prefix" && location.kind === "url"
170
+ ? pathBelowUrlPrefix(mapping.prefix, location.value) !== null
171
+ : false))
172
+ prefixes.add(mapping.artifact_prefix);
173
+ return [...prefixes].sort(compareCodePoints);
174
+ };
175
+ const pathWithinPrefix = (path, prefix) => prefix === "" || path === prefix || path.startsWith(`${prefix}/`);
176
+ const safeArtifactPath = (prefix, suffix) => normalizeArtifactPath(prefix === "" ? suffix : posix.join(prefix, suffix));
177
+ const normalizeArtifactPath = (value) => {
178
+ const normalized = posix
179
+ .normalize(value.replaceAll("\\", "/"))
180
+ .replace(/^\.\//u, "");
181
+ return normalized !== "" &&
182
+ normalized !== "." &&
183
+ normalized !== ".." &&
184
+ !normalized.startsWith("/") &&
185
+ !normalized.startsWith("../")
186
+ ? normalized
187
+ : null;
188
+ };
189
+ const uniqueMappedPaths = (values) => [
190
+ ...new Map(values.map((value) => [`${value.basis}:${value.path}`, value])).values(),
191
+ ].sort((left, right) => compareCodePoints(left.path, right.path) ||
192
+ compareCodePoints(left.basis, right.basis));
193
+ const uniqueSorted = (values) => [...new Set(values)].sort(compareCodePoints);
@@ -0,0 +1,386 @@
1
+ import { parse } from "@babel/parser";
2
+ import * as t from "@babel/types";
3
+ import { DEFAULT_JAVASCRIPT_SEMANTIC_LIMITS, failedJavaScriptSemanticIr, } from "./javascriptSemanticIr.js";
4
+ import { collectSemanticModuleLink, collectSemanticCallable, collectSemanticReferences, immutableSemanticBindings, immutableSemanticScopes, reachSemanticLimit, semanticModuleOrigin, semanticStaticPropertyName, } from "./javascriptSemanticProjection.js";
5
+ import { currentSemanticScope, semanticScopeId, } from "./javascriptSemanticState.js";
6
+ import { traverseJavaScriptAst } from "./javascriptSemanticTraversal.js";
7
+ import { compareCodePoints, propertyName, range, } from "./javascriptStaticAnalysisHelpers.js";
8
+ /** Recover bounded lexical bindings, aliases, constants, and module links. */
9
+ export const analyzeJavaScriptSemantics = (source, inputLimits = {}) => {
10
+ const limits = { ...DEFAULT_JAVASCRIPT_SEMANTIC_LIMITS, ...inputLimits };
11
+ let file;
12
+ try {
13
+ file = parse(source, {
14
+ sourceType: "unambiguous",
15
+ errorRecovery: true,
16
+ plugins: ["jsx", "typescript"],
17
+ });
18
+ }
19
+ catch {
20
+ return failedJavaScriptSemanticIr();
21
+ }
22
+ const state = createState(file.program, limits);
23
+ collectDefinitions(file.program, state);
24
+ const references = collectSemanticReferences(file.program, state);
25
+ const parserPartial = file.errors.length > 0;
26
+ return {
27
+ schema: "JavaScriptSemanticIR",
28
+ schemaVersion: 1,
29
+ scopes: immutableSemanticScopes(state),
30
+ bindings: immutableSemanticBindings(state),
31
+ callables: [...state.callables],
32
+ references,
33
+ moduleLinks: [...state.moduleLinks],
34
+ coverage: {
35
+ status: state.limitsReached.size > 0
36
+ ? "truncated"
37
+ : parserPartial
38
+ ? "partial"
39
+ : "complete",
40
+ omittedCount: state.limitsReached.size > 0 ? state.omittedCount : 0,
41
+ limitsReached: [...state.limitsReached].sort(compareCodePoints),
42
+ },
43
+ limitations: [
44
+ ...(parserPartial
45
+ ? [
46
+ "The parser recovered from syntax errors; affected bindings are partial.",
47
+ ]
48
+ : []),
49
+ ...(state.limitsReached.size === 0
50
+ ? []
51
+ : ["Semantic recovery stopped retaining facts at explicit limits."]),
52
+ "Values and aliases were recovered from inert syntax only; no JavaScript was executed.",
53
+ "Cross-function mutation and dynamic property resolution remain unknown.",
54
+ ],
55
+ };
56
+ };
57
+ const createState = (program, limits) => {
58
+ const root = {
59
+ scopeId: semanticScopeId("program", program),
60
+ parentScopeId: null,
61
+ kind: "program",
62
+ location: range(program),
63
+ bindingsComplete: true,
64
+ bindings: new Map(),
65
+ };
66
+ return {
67
+ limits,
68
+ scopes: [root],
69
+ scopesById: new Map([[root.scopeId, root]]),
70
+ scopeByNode: new WeakMap([[program, root]]),
71
+ bindingsById: new Map(),
72
+ callables: [],
73
+ moduleLinks: [],
74
+ limitsReached: new Set(),
75
+ omittedCount: 0,
76
+ };
77
+ };
78
+ const collectDefinitions = (program, state) => {
79
+ const stack = [
80
+ currentSemanticScope(state.scopes),
81
+ ];
82
+ const openedScopes = new WeakSet();
83
+ traverseJavaScriptAst(program, {
84
+ enter: (node, parent) => {
85
+ const parentScope = currentSemanticScope(stack);
86
+ bindOuterDeclaration(node, parentScope, state);
87
+ const nested = nestedScope(node, parent, parentScope, state);
88
+ if (nested !== undefined) {
89
+ stack.push(nested);
90
+ openedScopes.add(node);
91
+ }
92
+ const scope = currentSemanticScope(stack);
93
+ state.scopeByNode.set(node, scope);
94
+ collectSemanticCallable({
95
+ node,
96
+ parent,
97
+ containerScope: parentScope,
98
+ bodyScope: nested,
99
+ state,
100
+ });
101
+ bindInnerDeclaration(node, parent, scope, state);
102
+ collectSemanticModuleLink(node, state);
103
+ },
104
+ exit: (node) => {
105
+ if (openedScopes.has(node))
106
+ stack.pop();
107
+ },
108
+ });
109
+ };
110
+ const bindOuterDeclaration = (node, scope, state) => {
111
+ if (t.isFunctionDeclaration(node) && t.isIdentifier(node.id))
112
+ addBinding({
113
+ state,
114
+ scope,
115
+ name: node.id.name,
116
+ kind: "function",
117
+ mutable: false,
118
+ definitionNode: node.id,
119
+ initializer: node,
120
+ });
121
+ else if (t.isClassDeclaration(node) && t.isIdentifier(node.id))
122
+ addBinding({
123
+ state,
124
+ scope,
125
+ name: node.id.name,
126
+ kind: "class",
127
+ mutable: false,
128
+ definitionNode: node.id,
129
+ initializer: node,
130
+ });
131
+ };
132
+ const bindInnerDeclaration = (node, parent, scope, state) => {
133
+ if (t.isImportDeclaration(node))
134
+ bindImports(node, scope, state);
135
+ else if (t.isVariableDeclarator(node))
136
+ bindPattern({
137
+ pattern: node.id,
138
+ initializer: node.init ?? null,
139
+ scope: variableScope(scope, parent, state),
140
+ state,
141
+ mutable: parent !== null && t.isVariableDeclaration(parent)
142
+ ? parent.kind !== "const"
143
+ : true,
144
+ });
145
+ else if (t.isFunction(node))
146
+ bindFunctionLocals(node, scope, state);
147
+ else if (t.isCatchClause(node) && node.param != null)
148
+ bindPattern({
149
+ pattern: node.param,
150
+ initializer: null,
151
+ scope,
152
+ state,
153
+ mutable: true,
154
+ kind: "catch",
155
+ });
156
+ else if (t.isAssignmentExpression(node) && t.isIdentifier(node.left))
157
+ addAssignment(node.left, node.right, scope, state);
158
+ };
159
+ const nestedScope = (node, parent, parentScope, state) => {
160
+ const kind = scopeKind(node, parent);
161
+ if (kind === undefined)
162
+ return undefined;
163
+ if (state.scopes.length >= state.limits.maxScopes) {
164
+ reachSemanticLimit(state, "maxScopes");
165
+ return {
166
+ scopeId: `${semanticScopeId(kind, node)}:omitted`,
167
+ parentScopeId: parentScope.scopeId,
168
+ kind,
169
+ location: range(node),
170
+ bindingsComplete: false,
171
+ bindings: new Map(),
172
+ };
173
+ }
174
+ const scope = {
175
+ scopeId: semanticScopeId(kind, node),
176
+ parentScopeId: parentScope.scopeId,
177
+ kind,
178
+ location: range(node),
179
+ bindingsComplete: true,
180
+ bindings: new Map(),
181
+ };
182
+ state.scopes.push(scope);
183
+ state.scopesById.set(scope.scopeId, scope);
184
+ return scope;
185
+ };
186
+ const scopeKind = (node, parent) => {
187
+ if (t.isFunction(node))
188
+ return "function";
189
+ if (t.isClass(node))
190
+ return "class";
191
+ if (t.isCatchClause(node))
192
+ return "catch";
193
+ if (t.isBlockStatement(node) &&
194
+ !(parent !== null && t.isFunction(parent) && parent.body === node))
195
+ return "block";
196
+ return undefined;
197
+ };
198
+ const bindImports = (node, scope, state) => {
199
+ for (const specifier of node.specifiers) {
200
+ const importedPath = t.isImportDefaultSpecifier(specifier)
201
+ ? ["default"]
202
+ : t.isImportNamespaceSpecifier(specifier)
203
+ ? []
204
+ : [propertyName(specifier.imported) || "[dynamic]"];
205
+ addBinding({
206
+ state,
207
+ scope,
208
+ name: specifier.local.name,
209
+ kind: "import",
210
+ mutable: false,
211
+ definitionNode: specifier.local,
212
+ initializer: null,
213
+ directOrigin: { specifier: node.source.value, importedPath },
214
+ });
215
+ }
216
+ };
217
+ const bindFunctionLocals = (node, scope, state) => {
218
+ if (t.isFunctionExpression(node) && t.isIdentifier(node.id))
219
+ addBinding({
220
+ state,
221
+ scope,
222
+ name: node.id.name,
223
+ kind: "function",
224
+ mutable: false,
225
+ definitionNode: node.id,
226
+ initializer: node,
227
+ });
228
+ for (const parameter of node.params)
229
+ bindPattern({
230
+ pattern: t.isTSParameterProperty(parameter)
231
+ ? parameter.parameter
232
+ : parameter,
233
+ initializer: null,
234
+ scope,
235
+ state,
236
+ mutable: true,
237
+ kind: "parameter",
238
+ });
239
+ };
240
+ const bindPattern = (input) => {
241
+ const { pattern, initializer, scope, state, mutable, kind = "variable", projection = [], } = input;
242
+ if (t.isTSParameterProperty(pattern)) {
243
+ bindPattern({ ...input, pattern: pattern.parameter });
244
+ return;
245
+ }
246
+ if (t.isIdentifier(pattern)) {
247
+ const baseOrigin = semanticModuleOrigin(initializer, []);
248
+ const directOrigin = baseOrigin === undefined || projection.includes(null)
249
+ ? undefined
250
+ : {
251
+ ...baseOrigin,
252
+ importedPath: [
253
+ ...baseOrigin.importedPath,
254
+ ...projection.map((segment) => String(segment)),
255
+ ],
256
+ };
257
+ addBinding({
258
+ state,
259
+ scope,
260
+ name: pattern.name,
261
+ kind,
262
+ mutable,
263
+ definitionNode: pattern,
264
+ initializer,
265
+ ...(directOrigin === undefined ? {} : { directOrigin }),
266
+ projection,
267
+ });
268
+ return;
269
+ }
270
+ if (t.isAssignmentPattern(pattern)) {
271
+ bindPattern({
272
+ ...input,
273
+ pattern: pattern.left,
274
+ initializer: initializer ?? pattern.right,
275
+ });
276
+ return;
277
+ }
278
+ if (t.isRestElement(pattern)) {
279
+ bindPattern({
280
+ ...input,
281
+ pattern: pattern.argument,
282
+ initializer: null,
283
+ mutable: true,
284
+ });
285
+ return;
286
+ }
287
+ if (t.isObjectPattern(pattern))
288
+ for (const property of pattern.properties) {
289
+ if (t.isRestElement(property))
290
+ bindPattern({
291
+ ...input,
292
+ pattern: property.argument,
293
+ initializer: null,
294
+ mutable: true,
295
+ projection: [],
296
+ });
297
+ else {
298
+ const name = semanticStaticPropertyName(property.key, property.computed);
299
+ bindPattern({
300
+ ...input,
301
+ pattern: property.value,
302
+ projection: [...projection, name === "" ? null : name],
303
+ });
304
+ }
305
+ }
306
+ else if (t.isArrayPattern(pattern))
307
+ pattern.elements.forEach((element, index) => {
308
+ if (element !== null)
309
+ bindPattern({
310
+ ...input,
311
+ pattern: element,
312
+ projection: [...projection, index],
313
+ });
314
+ });
315
+ };
316
+ const addBinding = (input) => {
317
+ const { state, scope, name, kind, mutable, definitionNode, initializer, directOrigin, projection = [], } = input;
318
+ let binding = scope.bindings.get(name);
319
+ if (binding === undefined) {
320
+ if (!scope.bindingsComplete) {
321
+ state.omittedCount += 1;
322
+ return;
323
+ }
324
+ if (state.bindingsById.size >= state.limits.maxBindings) {
325
+ scope.bindingsComplete = false;
326
+ reachSemanticLimit(state, "maxBindings");
327
+ return;
328
+ }
329
+ binding = createBinding(scope, name, kind, mutable);
330
+ scope.bindings.set(name, binding);
331
+ state.bindingsById.set(binding.bindingId, binding);
332
+ }
333
+ binding.mutable ||= mutable;
334
+ binding.definitions.push({ kind, location: range(definitionNode) });
335
+ if (initializer !== null)
336
+ binding.initializers.push({ node: initializer, projection });
337
+ if (directOrigin !== undefined)
338
+ binding.directOrigins.push(directOrigin);
339
+ };
340
+ const createBinding = (scope, name, kind, mutable) => ({
341
+ bindingId: `${scope.scopeId}:binding:${encodeURIComponent(name)}`,
342
+ scopeId: scope.scopeId,
343
+ name,
344
+ kind,
345
+ mutable,
346
+ definitions: [],
347
+ initializers: [],
348
+ directOrigins: [],
349
+ });
350
+ const addAssignment = (identifier, initializer, scope, state) => {
351
+ const binding = resolveFromScope(scope, identifier.name, state);
352
+ if (binding === undefined)
353
+ return;
354
+ binding.mutable = true;
355
+ binding.definitions.push({ kind: "assignment", location: range(identifier) });
356
+ binding.initializers.push({ node: initializer, projection: [] });
357
+ };
358
+ const resolveFromScope = (scope, name, state) => {
359
+ let candidate = scope;
360
+ while (candidate !== undefined) {
361
+ const binding = candidate.bindings.get(name);
362
+ if (binding !== undefined)
363
+ return binding;
364
+ if (!candidate.bindingsComplete)
365
+ return undefined;
366
+ candidate =
367
+ candidate.parentScopeId === null
368
+ ? undefined
369
+ : state.scopesById.get(candidate.parentScopeId);
370
+ }
371
+ return undefined;
372
+ };
373
+ const variableScope = (scope, parent, state) => {
374
+ if (!(parent !== null && t.isVariableDeclaration(parent, { kind: "var" })))
375
+ return scope;
376
+ let candidate = scope;
377
+ while (candidate.kind === "block" || candidate.kind === "catch") {
378
+ const outer = candidate.parentScopeId === null
379
+ ? undefined
380
+ : state.scopesById.get(candidate.parentScopeId);
381
+ if (outer === undefined)
382
+ break;
383
+ candidate = outer;
384
+ }
385
+ return candidate;
386
+ };
@@ -0,0 +1,30 @@
1
+ /** Conservative defaults for one source file. */
2
+ export const DEFAULT_JAVASCRIPT_SEMANTIC_LIMITS = {
3
+ maxScopes: 4_096,
4
+ maxBindings: 20_000,
5
+ maxCallables: 20_000,
6
+ maxReferences: 100_000,
7
+ maxModuleLinks: 20_000,
8
+ maxValueDepth: 16,
9
+ maxUnionValues: 32,
10
+ maxObjectProperties: 256,
11
+ };
12
+ /** Find the innermost resolved reference at one source coordinate. */
13
+ export const semanticReferenceAt = (ir, line, column) => ir.references.find(({ location }) => location.start.line === line && location.start.column === column);
14
+ /** Read one binding by its deterministic semantic identifier. */
15
+ export const semanticBinding = (ir, bindingId) => ir.bindings.find(({ bindingId: candidate }) => candidate === bindingId);
16
+ /** Fail-closed result when Babel cannot produce an inert syntax tree. */
17
+ export const failedJavaScriptSemanticIr = () => ({
18
+ schema: "JavaScriptSemanticIR",
19
+ schemaVersion: 1,
20
+ scopes: [],
21
+ bindings: [],
22
+ callables: [],
23
+ references: [],
24
+ moduleLinks: [],
25
+ coverage: { status: "failed", omittedCount: null, limitsReached: [] },
26
+ limitations: [
27
+ "JavaScript parsing failed; no semantic absence claim is available.",
28
+ "No JavaScript was executed.",
29
+ ],
30
+ });