rea-agents 3.0.0 → 3.2.0

package/dist/domain/analysisErrorPresentation.js

@@ -1,17 +1,33 @@
-import { AnalysisInputError, ArtifactOperationError, BinaryTargetError, BrowserObservationError, ConfigurationError, EvidenceFileError, EvidenceIntegrityError, EvidenceLimitError, HopperRemoteError, InvestigationWorkspaceError, NoBinaryOpenError, PermissionRequiredError, ProviderSelectionError, ReplayPlanStaleError, UnknownRegistryError, } from "./errors.js";
+import { AnalysisInputError, ArtifactOperationError, BinaryTargetError, BrowserObservationError, ConfigurationError, EvidenceFileError, EvidenceIntegrityError, HopperRemoteError, HopperProcessError, HopperStartError, HopperTimeoutError, NoBinaryOpenError, PermissionRequiredError, ProviderSelectionError, ReplayPlanStaleError, UnknownRegistryError, } from "./errors.js";
 export const analysisErrorRemediationAction = (error) => {
+    if (error instanceof HopperTimeoutError)
+        return error.providerState === "busy"
+            ? "Check binary_session.analysis_activity, wait for the active Hopper request to finish, then retry."
+            : "Check binary_session for Hopper health, then retry the operation.";
+    if (error instanceof HopperProcessError)
+        return "Check binary_session provider health. Restart the owned Hopper process only when it has stopped.";
+    if (error instanceof HopperStartError)
+        return error.ownerRunId === undefined
+            ? "Check the Hopper launcher and target details, then retry opening the target."
+            : `Use the active REA session ${error.ownerRunId} or close it before opening this target again.`;
+    if (error instanceof HopperRemoteError)
+        return "Review the Hopper diagnostic details; correct the request or retry if the failure was transient.";
     if (error instanceof AnalysisInputError)
         return "Correct the listed arguments and retry.";
     if (error instanceof UnknownRegistryError && error.reason === "not-found")
         return "Check that the unknown_id belongs to this session, then retry.";
     if (error instanceof ReplayPlanStaleError)
         return "Review the rebuilt replay plan and explicitly approve its new digest.";
-    if (error instanceof PermissionRequiredError)
-        return error.restartRequired
-            ? "Add the exact missing scope to the administrator configuration, then restart the registered MCP server or client."
-            : error.elicitationSupported
-                ? "Approve the exact missing scope, then retry the operation."
-                : "Add the exact missing scope beneath the administrator ceiling, then retry.";
+    if (error instanceof PermissionRequiredError) {
+        switch (error.remediation) {
+            case "configure":
+                return "Add the exact missing scope beneath the administrator ceiling, then retry.";
+            case "elicit":
+                return "Approve the exact missing scope, then retry the operation.";
+            case "restart":
+                return "Add the exact missing scope to the administrator configuration, then restart the registered MCP server or client.";
+        }
+    }
     return analysisErrorUserMessage(error);
 };
 export const analysisErrorCategory = (error) => {
@@ -29,12 +45,10 @@ export const analysisErrorCategory = (error) => {
     if (error instanceof HopperRemoteError &&
         error.diagnosticType === "authorization")
         return "permission_required";
+    if (error instanceof HopperProcessError || error instanceof HopperStartError)
+        return "unavailable";
     if (error instanceof ArtifactOperationError)
         return artifactErrorCategory(error.reason);
-    if (error instanceof EvidenceFileError && error.reason === "disabled")
-        return "unavailable";
-    if (error instanceof InvestigationWorkspaceError)
-        return investigationWorkspaceCategory(error.reason);
     return STATIC_ERROR_CATEGORIES[error._tag] ?? "execution_failure";
 };
 const browserErrorCategory = (reason) => {
@@ -48,17 +62,6 @@ const browserErrorCategory = (reason) => {
         return "unavailable";
     return "execution_failure";
 };
-const investigationWorkspaceCategory = (reason) => {
-    if (reason === "disabled" ||
-        reason === "outside-root" ||
-        reason === "not-file")
-        return "unavailable";
-    if (reason === "too-large")
-        return "truncated";
-    if (reason === "invalid-json" || reason === "integrity")
-        return "integrity_mismatch";
-    return "execution_failure";
-};
 const artifactErrorCategory = (reason) => {
     if (reason === "integrity")
         return "integrity_mismatch";
@@ -75,7 +78,6 @@ const STATIC_ERROR_CATEGORIES = {
     AnalysisCapabilityUnavailableError: "unsupported_provider",
     ProviderSelectionError: "unsupported_provider",
     EvidenceIntegrityError: "integrity_mismatch",
-    EvidenceLimitError: "truncated",
     AnalysisCancelledError: "cancelled",
     HopperCancelledError: "cancelled",
     AnalysisTimeoutError: "timeout",
@@ -90,6 +92,9 @@ export const analysisErrorUserMessage = (error) => {
         return "This operation needs additional local permission. Review the requested scope and remediation.";
     if (error instanceof AnalysisInputError)
         return "Analysis input is invalid. Check the arguments and try again.";
+    const hopperMessage = hopperErrorUserMessage(error);
+    if (hopperMessage !== undefined)
+        return hopperMessage;
     if (error.userMessage !== undefined)
         return error.userMessage;
     const standardMessage = standardErrorMessage(error._tag);
@@ -99,12 +104,8 @@ export const analysisErrorUserMessage = (error) => {
         return artifactMessage(error.reason);
     if (error instanceof EvidenceIntegrityError)
         return "Evidence is invalid or has changed. Recreate or re-import it, then try again.";
-    if (error instanceof EvidenceLimitError)
-        return "Evidence is too large for this session. Reduce the evidence set and try again.";
     if (error instanceof EvidenceFileError)
         return evidenceFileMessage(error.reason);
-    if (error instanceof InvestigationWorkspaceError)
-        return investigationWorkspaceMessage(error.reason);
     if (error instanceof UnknownRegistryError && error.reason === "not-found")
         return "The requested residual unknown does not exist in this session. Check the unknown_id and try again.";
     if (error instanceof UnknownRegistryError)
@@ -120,6 +121,22 @@ export const analysisErrorUserMessage = (error) => {
             "Process capture could not complete. Run `rea doctor`, then review capture policy and try again.");
     return "Analysis could not complete. Run `rea doctor`, then try again.";
 };
+const hopperErrorUserMessage = (error) => {
+    if (error instanceof HopperTimeoutError) {
+        const request = error.operation ?? "startup";
+        return error.providerState === "busy"
+            ? `Hopper timed out during ${request} while the provider remained busy. Check binary_session.analysis_activity, wait for the active request to finish, then retry.`
+            : `Hopper timed out during ${request} before it started. Check binary_session for provider health, then retry.`;
+    }
+    if (error instanceof HopperProcessError)
+        return `Hopper stopped during ${error.operation ?? "connection"}${error.exitCode === null ? "; its exit was not observed" : ` with exit code ${String(error.exitCode)}`}.${error.userMessage === undefined ? "" : ` ${error.userMessage}`} Check binary_session provider health before retrying.`;
+    if (error instanceof HopperStartError)
+        return (error.userMessage ??
+            "Hopper could not start. Check the launcher and target details, then retry opening the target.");
+    if (error instanceof HopperRemoteError)
+        return `Hopper ${error.operation ?? "analysis"} failed (${String(error.code)}, ${error.diagnosticType}): ${error.safeMessage}`;
+    return undefined;
+};
 const standardErrorMessage = (tag) => {
     if (UNREADABLE_OUTPUT_TAGS.has(tag))
         return "Analysis returned an unreadable result. Retry once; if it continues, run `rea doctor`.";
@@ -166,7 +183,7 @@ const artifactMessage = (reason) => {
     if (reason === "limit")
         return "Artifact is too large to process safely. Narrow the requested path or use a smaller artifact.";
     if (reason === "path")
-        return "Artifact path is not allowed. Choose a path inside the artifact and try again.";
+        return "Artifact contains an unsafe or conflicting internal path. Inspect the reported path and correct the artifact before retrying.";
     if (reason === "policy")
         return "Artifact integrity continuation is disabled by policy. Configure REA_ARTIFACT_INTEGRITY_CONTINUE_ENABLED=true and retry only if continuing after mismatches is approved.";
     if (reason === "unavailable")
@@ -176,37 +193,14 @@ const artifactMessage = (reason) => {
     return "Artifact could not be read or written. Check file access and try again.";
 };
 const evidenceFileMessage = (reason) => {
-    if (reason === "disabled")
-        return "Evidence file access is disabled. Enable an evidence directory or use inline evidence.";
-    if (reason === "outside-root")
-        return "Evidence path is outside the allowed directory. Choose a path inside the configured evidence directory.";
     if (reason === "not-file")
-        return "Evidence path does not point to a file. Choose an evidence file and try again.";
-    if (reason === "too-large")
-        return "Evidence file is too large. Reduce its size and try again.";
+        return "Evidence path does not point to a regular file. Choose a file and try again.";
     if (reason === "exists")
         return "Evidence file already exists. Choose another path or allow overwrite.";
     if (reason === "invalid-json")
         return "Evidence file is not valid JSON. Repair or recreate the file and try again.";
     return "Evidence file could not be accessed. Check file permissions and try again.";
 };
-const investigationWorkspaceMessage = (reason) => {
-    if (reason === "disabled")
-        return "Investigation workspace access is disabled. Configure a workspace directory and try again.";
-    if (reason === "outside-root")
-        return "Investigation workspace is outside the allowed directory. Choose a configured workspace directory and try again.";
-    if (reason === "not-file")
-        return "Investigation workspace path is not a file. Choose a workspace file and try again.";
-    if (reason === "too-large")
-        return "Investigation workspace is too large. Reduce its size and try again.";
-    if (reason === "invalid-json" || reason === "integrity")
-        return "Investigation workspace is invalid or has changed. Recreate or repair it, then try again.";
-    if (reason === "locked")
-        return "Another investigation update is in progress. Try again when it finishes.";
-    if (reason === "revision-conflict" || reason === "name-conflict")
-        return "Investigation workspace state changed. Refresh the current state and try again.";
-    return "Investigation workspace could not be accessed. Check file permissions and try again.";
-};
 const KNOWN_ERROR_TAGS = {
     AnalysisProtocolError: true,
     AnalysisInputError: true,
@@ -220,9 +214,7 @@ const KNOWN_ERROR_TAGS = {
     ArtifactOperationError: true,
     ProcessCaptureError: true,
     EvidenceIntegrityError: true,
-    EvidenceLimitError: true,
     EvidenceFileError: true,
-    InvestigationWorkspaceError: true,
     UnknownRegistryError: true,
     HopperTimeoutError: true,
     HopperCancelledError: true,

package/dist/domain/analysisErrorProjection.js

@@ -1,4 +1,4 @@
-import { AnalysisCancelledError, AnalysisCapabilityUnavailableError, AnalysisInputError, AnalysisTimeoutError, ArtifactOperationError, BinaryTargetError, BrowserObservationError, EvidenceFileError, EvidenceLimitError, EvidenceReferenceError, HopperCancelledError, HopperProcessError, HopperRemoteError, HopperTimeoutError, InvestigationWorkspaceError, PermissionRequiredError, ProviderAdapterError, ProviderSelectionError, ReplayPlanStaleError, UnknownRegistryError, } from "./errors.js";
+import { AnalysisCancelledError, AnalysisCapabilityUnavailableError, AnalysisInputError, AnalysisTimeoutError, ArtifactOperationError, BinaryTargetError, BrowserObservationError, EvidenceFileError, EvidenceReferenceError, HopperCancelledError, HopperProcessError, HopperRemoteError, HopperTimeoutError, PermissionRequiredError, ProviderAdapterError, ProviderSelectionError, ReplayPlanStaleError, UnknownRegistryError, } from "./errors.js";
 import { analysisErrorCategory, analysisErrorRemediationAction, analysisErrorUserMessage, assertKnownAnalysisErrorTag, } from "./analysisErrorPresentation.js";
 /** Project expected failures into exhaustive, secret-safe caller fields. */
 export const projectAnalysisError = (error) => {
@@ -12,9 +12,10 @@ export const projectAnalysisError = (error) => {
         retryable: RETRYABLE_CODES.has(code),
         remediation: {
             action: analysisErrorRemediationAction(error),
-            restart_required: error instanceof PermissionRequiredError && error.restartRequired,
+            restart_required: error instanceof PermissionRequiredError &&
+                error.remediation === "restart",
             ...(error instanceof PermissionRequiredError
-                ? { elicitation_supported: error.elicitationSupported }
+                ? { elicitation_supported: error.remediation === "elicit" }
                 : {}),
         },
         ...(details === undefined ? {} : { details }),
@@ -37,8 +38,6 @@ const errorCode = (error) => {
         return artifactOperationCode(error);
     if (error instanceof EvidenceFileError)
         return evidenceFileCode(error.reason);
-    if (error instanceof InvestigationWorkspaceError)
-        return investigationWorkspaceCode(error.reason);
     if (error instanceof UnknownRegistryError)
         return unknownRegistryCode(error.reason);
     if (error._tag === "ProcessCaptureError")
@@ -65,28 +64,9 @@ const artifactOperationCode = (error) => {
         return "cancelled";
     return "artifact_operation_failed";
 };
-const evidenceFileCode = (reason) => {
-    if (reason === "outside-root")
-        return "outside_approved_root";
-    if (reason === "too-large")
-        return "truncated";
-    if (reason === "disabled")
-        return "capability_unavailable";
-    return "execution_failure";
-};
-const investigationWorkspaceCode = (reason) => {
-    if (reason === "revision-conflict" || reason === "name-conflict")
-        return "revision_conflict";
-    if (reason === "too-large")
-        return "truncated";
-    if (reason === "disabled")
-        return "capability_unavailable";
-    if (reason === "outside-root")
-        return "outside_approved_root";
-    if (reason === "integrity" || reason === "invalid-json")
-        return "evidence_integrity_mismatch";
-    return "execution_failure";
-};
+const evidenceFileCode = (reason) => reason === "invalid-json"
+    ? "evidence_integrity_mismatch"
+    : "execution_failure";
 const unknownRegistryCode = (reason) => {
     if (reason === "revision-conflict" || reason === "already-exists")
         return "revision_conflict";
@@ -121,7 +101,6 @@ const STATIC_ERROR_CODES = {
     NoBinaryOpenError: "target_unavailable",
     BinaryTargetError: "target_unavailable",
     EvidenceIntegrityError: "evidence_integrity_mismatch",
-    EvidenceLimitError: "truncated",
     ProviderAdapterError: "execution_failure",
     HopperRemoteError: "execution_failure",
 };
@@ -130,7 +109,6 @@ const staticErrorCode = (tag) => {
         case "ArtifactOperationError":
         case "BrowserObservationError":
         case "EvidenceFileError":
-        case "InvestigationWorkspaceError":
         case "PermissionRequiredError":
         case "ProcessCaptureError":
         case "ProviderSelectionError":
@@ -194,10 +172,6 @@ const artifactStateErrorDetails = (error) => {
             reason: error.reason,
             ...(error.reason === "limit" ? { truncated: true } : {}),
         };
-    if (error instanceof EvidenceLimitError)
-        return { limit: error.limit, maximum: error.maximum, truncated: true };
-    if (error instanceof InvestigationWorkspaceError)
-        return { operation: error.operation, reason: error.reason };
     if (error instanceof UnknownRegistryError)
         return { reason: error.reason };
     if (error instanceof EvidenceFileError)
@@ -237,11 +211,22 @@ const providerErrorDetails = (error) => {
     if (error instanceof BrowserObservationError)
         return { operation: error.operation, reason: error.reason };
     if (error instanceof HopperRemoteError)
-        return { provider_code: error.code, diagnostic_type: error.diagnosticType };
-    if (error instanceof HopperProcessError && error.failureCode !== undefined)
         return {
-            failure_code: error.failureCode,
+            stage: "analysis",
+            provider_code: error.code,
+            diagnostic_type: error.diagnosticType,
+            ...(error.operation === undefined ? {} : { operation: error.operation }),
+            ...(error.requestId === undefined ? {} : { request_id: error.requestId }),
+        };
+    if (error instanceof HopperProcessError)
+        return {
             exit_code: error.exitCode,
+            stage: error.operation === undefined ? "connection" : "analysis",
+            ...(error.failureCode === undefined
+                ? {}
+                : { failure_code: error.failureCode }),
+            ...(error.operation === undefined ? {} : { operation: error.operation }),
+            ...(error.requestId === undefined ? {} : { request_id: error.requestId }),
             ...(error.diagnostic === undefined
                 ? {}
                 : { diagnostics: { ...error.diagnostic } }),
@@ -256,7 +241,13 @@ const lifecycleErrorDetails = (error) => {
     if (error instanceof AnalysisTimeoutError)
         return { operation: error.operation, timeout_ms: error.timeoutMs };
     if (error instanceof HopperTimeoutError)
-        return { operation: "hopper", timeout_ms: error.timeoutMs };
+        return {
+            stage: error.operation === undefined ? "startup" : "analysis",
+            timeout_ms: error.timeoutMs,
+            provider_state: error.providerState,
+            ...(error.operation === undefined ? {} : { operation: error.operation }),
+            ...(error.requestId === undefined ? {} : { request_id: error.requestId }),
+        };
     if (error._tag === "ProcessCaptureError" && error.cleanupIncomplete)
         return {
             cleanup: "incomplete",

package/dist/domain/analysisProfile.js

@@ -1,14 +1,7 @@
 import { createHash } from "node:crypto";
 import canonicalize from "canonicalize";
 import { z } from "zod";
-import { isJsonWithinLimits } from "./jsonLimits.js";
 import { jsonObjectSchema } from "./jsonValue.js";
-const PROFILE_MAX_BYTES = 64 * 1024;
-const PROFILE_JSON_LIMITS = Object.freeze({
-    maxDepth: 16,
-    maxStringLength: 16 * 1024,
-    maxNodes: 4_096,
-});
 const digestSchema = z.string().regex(/^[a-f0-9]{64}$/u);
 /** Concrete provider identity committed by an analysis profile. */
 export const committedProviderSchema = z.object({
@@ -16,25 +9,9 @@ export const committedProviderSchema = z.object({
     name: z.string().min(1),
     version: z.string().min(1),
 });
-const boundedParametersSchema = jsonObjectSchema.superRefine((parameters, context) => {
-    if (!isJsonWithinLimits(parameters, PROFILE_JSON_LIMITS)) {
-        context.addIssue({
-            code: "custom",
-            message: "Analysis profile parameters exceed structural limits",
-        });
-        return;
-    }
-    if (Buffer.byteLength(canonicalJson(parameters), "utf8") > PROFILE_MAX_BYTES)
-        context.addIssue({
-            code: "custom",
-            message: "Analysis profile parameters exceed the byte limit",
-        });
-});
 const unsignedAnalysisProfileSchema = z.object({
-    schema_version: z.literal(1),
     provider: committedProviderSchema,
-    provider_profile_schema_version: z.number().int().min(1),
-    parameters: boundedParametersSchema,
+    parameters: jsonObjectSchema,
 });
 /** Canonical, provider-neutral commitment to analysis-affecting semantics. */
 export const analysisProfileSchema = unsignedAnalysisProfileSchema
@@ -49,11 +26,9 @@ export const analysisProfileSchema = unsignedAnalysisProfileSchema
         });
 });
 /** Create a validated RFC 8785 profile commitment at a provider boundary. */
-export const createAnalysisProfile = (provider, providerProfileSchemaVersion, parameters) => {
+export const createAnalysisProfile = (provider, parameters) => {
     const unsigned = unsignedAnalysisProfileSchema.parse({
-        schema_version: 1,
         provider,
-        provider_profile_schema_version: providerProfileSchemaVersion,
         parameters,
     });
     return analysisProfileSchema.parse({
@@ -65,10 +40,7 @@ export const createAnalysisProfile = (provider, providerProfileSchemaVersion, pa
 export const analysisProfilesEqual = (left, right) => left.digest === right.digest &&
     left.provider.id === right.provider.id &&
     left.provider.name === right.provider.name &&
-    left.provider.version === right.provider.version &&
-    left.schema_version === right.schema_version &&
-    left.provider_profile_schema_version ===
-        right.provider_profile_schema_version;
+    left.provider.version === right.provider.version;
 const profileDigest = (profile) => createHash("sha256").update(canonicalJson(profile)).digest("hex");
 const canonicalJson = (value) => {
     const encoded = canonicalize(value);

package/dist/domain/analysisSnapshot.js

@@ -76,10 +76,9 @@ const entrySchema = z.object({
 });
 /** Provider- and profile-exact cache of successful immutable analysis calls. */
 export const analysisSnapshotSchema = z.object({
-    snapshot_version: z.literal(2),
     target: targetSchema,
     binding: bindingSchema,
-    entries: z.array(entrySchema).max(10_000),
+    entries: z.array(entrySchema),
     evidence_bundle: evidenceBundleSchema,
 });
 const canonicalJson = (value) => {
@@ -96,7 +95,7 @@ export const snapshotTarget = (target) => ({
     format: target.format,
     architecture: target.architecture ?? null,
 });
-/** Build the immutable provider/profile binding used by snapshot v2. */
+/** Build the immutable provider/profile binding used by a cached snapshot. */
 export const snapshotBinding = (profile) => bindingSchema.parse({
     provider: profile.provider,
     analysis_profile: profile,
@@ -161,9 +160,8 @@ export const createAnalysisSnapshotEntry = (input) => {
         },
     };
 };
-/** Parse v2 and reject legacy snapshots, altered query IDs, or non-canonical order. */
+/** Parse a provider/profile-exact snapshot and verify its entries and evidence. */
 export const parseAnalysisSnapshot = (input) => {
-    rejectLegacySnapshot(input);
     const parsed = analysisSnapshotSchema.parse(input);
     parseEvidenceBundle(parsed.evidence_bundle);
     if (JSON.stringify(evidenceBundleForTarget(parsed.evidence_bundle, parsed.target.sha256)) !== JSON.stringify(parsed.evidence_bundle))
@@ -188,10 +186,3 @@ export const parseAnalysisSnapshot = (input) => {
 };
 /** Serialize a validated snapshot with byte-stable canonical entry ordering. */
 export const serializeAnalysisSnapshot = (snapshot) => `${canonicalJson(parseAnalysisSnapshot(snapshot))}\n`;
-const rejectLegacySnapshot = (input) => {
-    if (typeof input === "object" &&
-        input !== null &&
-        "snapshot_version" in input &&
-        input.snapshot_version === 1)
-        throw new TypeError("Analysis snapshot v1 is incompatible with profile-exact replay; recapture it as snapshot v2. Its Evidence bundle may be imported separately.");
-};

package/dist/domain/androidApplication.js

@@ -2,33 +2,26 @@ import { createHash } from "node:crypto";
 import canonicalize from "canonicalize";
 import { z } from "zod";
 import { parseArtifactInventoryEvidence } from "./artifactInventoryEvidence.js";
-import { projectBoundedCartesian } from "./boundedCartesianProjection.js";
 import { evidenceSchema } from "./evidence.js";
 const digestSchema = z.string().regex(/^[a-f0-9]{64}$/u);
 const evidenceIdSchema = z.string().regex(/^ev_[a-f0-9]{64}$/u);
-const pathSchema = z.string().min(1).max(4_096);
+const pathSchema = z.string().min(1);
 const componentSchema = z.strictObject({
     path: pathSchema,
     artifact_id: z.string().regex(/^art_[a-f0-9]{64}$/u),
     sha256: digestSchema,
-    format: z.string().min(1).max(100),
+    format: z.string().min(1),
 });
 /** Authenticated APK inventory pages projected as one Android application. */
 export const androidApplicationProjectionInputSchema = z.strictObject({
-    inventory_evidence: z.array(evidenceSchema).min(1).max(100),
-    limits: z
-        .strictObject({
-        max_components: z.number().int().min(1).max(10_000).default(1_000),
-    })
-        .default({ max_components: 1_000 }),
+    inventory_evidence: z.array(evidenceSchema).min(1),
 });
 /** Deterministic, execution-free Android application inventory projection. */
 export const androidApplicationProjectionResultSchema = z.strictObject({
-    schema_version: z.literal(1),
     projection_id: z.string().regex(/^adp_[a-f0-9]{64}$/u),
     root_sha256: digestSchema,
     root_format: z.literal("apk"),
-    source_evidence_ids: z.array(evidenceIdSchema).min(1).max(100),
+    source_evidence_ids: z.array(evidenceIdSchema).min(1),
     components: z.strictObject({
         manifests: z.array(componentSchema),
         resources: z.array(componentSchema),
@@ -59,12 +52,10 @@ export const androidApplicationProjectionResultSchema = z.strictObject({
         ]),
     })),
     coverage: z.strictObject({
-        status: z.enum(["complete-within-inventory", "partial", "truncated"]),
+        status: z.enum(["complete-within-inventory", "partial"]),
         inventory_complete: z.boolean(),
-        omitted_components: z.number().int().min(0),
-        omitted_bridge_candidates: z.number().int().min(0),
     }),
-    limitations: z.array(z.string().min(1).max(4_096)).max(100),
+    limitations: z.array(z.string().min(1)),
 });
 /** Project exact APK paths and hashes without decoding or executing target code. */
 export const projectAndroidApplication = (input) => {
@@ -87,28 +78,16 @@ export const projectAndroidApplication = (input) => {
         };
     });
     const classified = classify(all);
-    const components = retain(classified, parsed.limits.max_components);
-    const omittedComponents = count(classified) - count(components);
-    const bridgeProjection = bridgeCandidates([...components.dex, ...components.jvm_classes], components.native_libraries, parsed.limits.max_components);
+    const bridgeProjection = bridgeCandidates([...classified.dex, ...classified.jvm_classes], classified.native_libraries);
+    const components = classified;
     const limitations = [
         ...(!inventory.complete
             ? ["Source inventory pages are incomplete; absence is unknown."]
             : []),
-        ...(omittedComponents > 0
-            ? [
-                `${String(omittedComponents)} component observations were omitted by the projection limit.`,
-            ]
-            : []),
-        ...(bridgeProjection.omitted > 0
-            ? [
-                `${String(bridgeProjection.omitted)} bridge hypotheses were omitted by the projection limit.`,
-            ]
-            : []),
         "Manifest, resource, signing, and bytecode semantics require a dedicated Android provider; this projection reports exact inventory paths and hashes only.",
         "Bridge candidates are path-based hypotheses, not decoded JNI declarations or observed runtime calls.",
     ];
     const withoutId = {
-        schema_version: 1,
         root_sha256: inventory.manifest.root_sha256,
         root_format: "apk",
         source_evidence_ids: evidence
@@ -118,14 +97,10 @@ export const projectAndroidApplication = (input) => {
         runtime_families: runtimeFamilies(all),
         bridge_candidates: bridgeProjection.candidates,
         coverage: {
-            status: omittedComponents > 0 || bridgeProjection.omitted > 0
-                ? "truncated"
-                : inventory.complete
-                    ? "complete-within-inventory"
-                    : "partial",
+            status: inventory.complete
+                ? "complete-within-inventory"
+                : "partial",
             inventory_complete: inventory.complete,
-            omitted_components: omittedComponents,
-            omitted_bridge_candidates: bridgeProjection.omitted,
         },
         limitations,
     };
@@ -144,17 +119,6 @@ const classify = (all) => ({
     javascript: all.filter(({ format }) => format === "javascript-bundle"),
     signing: all.filter(({ path }) => /^META-INF\/[^/]+\.(?:MF|RSA|DSA|EC|SF)$/iu.test(path)),
 });
-const retain = (groups, maximum) => {
-    let remaining = maximum;
-    return Object.fromEntries(Object.entries(groups).map(([key, values]) => {
-        const selected = [...values]
-            .sort((left, right) => compare(left.path, right.path))
-            .slice(0, remaining);
-        remaining -= selected.length;
-        return [key, selected];
-    }));
-};
-const count = (groups) => Object.values(groups).reduce((total, values) => total + values.length, 0);
 const runtimeFamilies = (all) => {
     const paths = all.map(({ path }) => path.toLowerCase());
     const families = new Set();
@@ -174,15 +138,14 @@ const runtimeFamilies = (all) => {
         families.add("unity");
     return [...families].sort(compare);
 };
-const bridgeCandidates = (managed, native, maximum) => {
-    const projection = projectBoundedCartesian(managed, native, maximum, (source, target) => ({
+const bridgeCandidates = (managed, native) => {
+    const candidates = managed.flatMap((source) => native.map((target) => ({
         managed_path: source.path,
         native_path: target.path,
         basis: bridgeBasis(target.path),
-    }));
+    })));
     return {
-        candidates: projection.values,
-        omitted: projection.omitted,
+        candidates,
     };
 };
 const bridgeBasis = (path) => {