rea-agents 2.2.0 → 2.4.0

package/scripts/prepare.mjs

@@ -0,0 +1,28 @@
+import { access } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const root = join(dirname(fileURLToPath(import.meta.url)), "..");
+
+const sourceHuskyIsAvailable = async () => {
+  try {
+    await access(join(root, "src"));
+    await access(join(root, "node_modules", "husky", "index.js"));
+    return true;
+  } catch (cause) {
+    if (
+      typeof cause === "object" &&
+      cause !== null &&
+      "code" in cause &&
+      cause.code === "ENOENT"
+    )
+      return false;
+    throw cause;
+  }
+};
+
+if (process.env.HUSKY !== "0" && (await sourceHuskyIsAvailable())) {
+  const { default: installHusky } = await import("husky");
+  const message = installHusky();
+  if (message.length > 0) process.stdout.write(`${message}\n`);
+}

package/scripts/rea.mjs

@@ -13,10 +13,13 @@ const { default: packageJson } = await import("../package.json", {
 process.env.REA_PACKAGE_VERSION = packageJson.version;
 const isMcpMode =
   args.length === 1 && (args[0] === "--mcp" || args[0] === "mcp");
+const isMcpDoctorMode = args[0] === "mcp" && args[1] === "doctor";
 const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
 const runtimeFiles = isMcpMode
   ? ["dist/main.js"]
-  : ["dist/cli.js", "dist/cliOutput.js"];
+  : isMcpDoctorMode
+    ? ["dist/main.js", "dist/mcpDoctor.js"]
+    : ["dist/cli.js", "dist/cliOutput.js"];
 
 if (!(await compiledRuntimeExists(runtimeFiles))) {
   process.stderr.write(
@@ -26,12 +29,30 @@ if (!(await compiledRuntimeExists(runtimeFiles))) {
 } else if (isMcpMode) {
   const { runEntrypoint } = await import("../dist/main.js");
   await runEntrypoint();
+} else if (isMcpDoctorMode) {
+  const { runProductionMcpDoctorCli } = await import("../dist/mcpDoctor.js");
+  const result = await runProductionMcpDoctorCli(args.slice(2), {
+    dispatcherPath: fileURLToPath(import.meta.url),
+    packageRoot,
+  });
+  process.stdout.write(result.output);
+  process.exitCode = result.exitCode;
 } else {
   const { createCli } = await import("../dist/cli.js");
-  const { sanitizeCliOutput } = await import("../dist/cliOutput.js");
-  await createCli().serve(args, {
-    stdout: (output) => process.stdout.write(sanitizeCliOutput(output)),
-  });
+  const {
+    renderCliOutputArgumentError,
+    sanitizeCliOutput,
+    validateCliOutputArguments,
+  } = await import("../dist/cliOutput.js");
+  const outputArguments = validateCliOutputArguments(args);
+  if (!outputArguments.ok) {
+    process.stdout.write(renderCliOutputArgumentError(outputArguments));
+    process.exitCode = 1;
+  } else {
+    await createCli().serve(args, {
+      stdout: (output) => process.stdout.write(sanitizeCliOutput(output)),
+    });
+  }
 }
 
 async function compiledRuntimeExists(paths) {

package/skills/reverse-engineer-anything/SKILL.md

@@ -3,8 +3,8 @@ name: reverse-engineer-anything
 description: Reverse engineer native, managed, Electron/JavaScript, packaged, and browser applications with REA. Use shipped-artifact or approved runtime evidence to explain features, compare versions, decompile code, or guide a reconstruction. Skip REA for ordinary source-repository architecture analysis.
 metadata:
   version: "23"
-  tool_count: 95
-  catalog_digest: "f8a4a8392f73780686234656e3e4555539a828e021c72754e4131c83df349b9f"
+  tool_count: 98
+  catalog_digest: "aa413204625f3aeb62732d0f732b9b8b24832eea4520214b1e6bd204e599bcd6"
 ---
 
 # REA
@@ -22,7 +22,8 @@ Choose the first tool from the target the user supplied. Do not call
 
 - ASAR or extracted JavaScript/Electron tree:
   `analyze_javascript_application`.
-- Archive, application package, ZIP/APK/IPA, or DMG: `inventory_artifact`.
+- Archive, application package, ZIP/APK/IPA/MSIX/AppX, or DMG:
+  `inventory_artifact`.
 - Managed PE/CLI assembly: `inspect_managed_artifact`.
 - User-owned browser page already open: `list_browser_targets`.
 - User-owned Electron runtime already open: `list_electron_targets`.

package/skills/reverse-engineer-anything/references/javascript-applications.md

@@ -23,3 +23,13 @@ For version comparison, analyze each version once, then call
 fingerprint, or non-module semantic matches. Module ordinals and minified names
 are not persistent identity. Report added or removed only with complete
 opposite-side coverage; otherwise report unknown.
+
+When the question asks how one exact exported callable's returned object shape
+changed, analyze each version once and then call
+`compare_javascript_export_shapes` with explicit module paths and export names.
+Use the Evidence IDs returned by the two analysis calls. Accept variant pairing
+only through the tool's unique exact literal discriminant. Cite the comparison
+Evidence and report JSON Pointer changes; dynamic values, ambiguous variants,
+and incomplete parent-property coverage stay unknown. This is static inference,
+not runtime behavior. Use `run_controlled_replay` separately only when the user
+needs approved runtime semantics.

package/skills/reverse-engineer-anything/references/native-and-artifacts.md

@@ -24,8 +24,8 @@ parser and must not become an implicit setup dependency.
 ## Packages and extraction
 
 Call `inventory_artifact` before extraction for application bundles, archives,
-ZIP/APK/IPA, ASAR, or DMG inputs. Continue deterministic occurrence pages from
-the returned offset only when needed. Cite graph manifest IDs.
+ZIP/APK/IPA/MSIX/AppX, ASAR, or DMG inputs. Continue deterministic occurrence
+pages from the returned offset only when needed. Cite graph manifest IDs.
 
 `extract_artifact` requires explicit approval, an absent absolute output root,
 and selected occurrence IDs. Never extract every entry implicitly. Symlinks and