rea-agents 3.0.0 → 3.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +83 -108
- package/bridge/ghidra/ReaGhidraBridge.java +609 -841
- package/bridge/hopper_bridge.py +99 -344
- package/dist/application/AbortablePromise.js +6 -3
- package/dist/application/AnalysisContextQueries.js +21 -9
- package/dist/application/AnalysisSnapshotCache.js +0 -1
- package/dist/application/AnalysisSnapshotFiles.js +7 -7
- package/dist/application/AndroidApplicationService.js +1 -1
- package/dist/application/AppleApplicationService.js +1 -1
- package/dist/application/ArtifactExtraction.js +35 -54
- package/dist/application/ArtifactExtractionDestination.js +17 -0
- package/dist/application/ArtifactGraphConstruction.js +2 -17
- package/dist/application/ArtifactInventory/classify.js +2 -6
- package/dist/application/ArtifactInventory/hash.js +2 -20
- package/dist/application/ArtifactInventory/policy.js +17 -0
- package/dist/application/ArtifactInventory/reader.js +1 -4
- package/dist/application/ArtifactInventory/scanCanonical.js +8 -15
- package/dist/application/ArtifactInventory/scanReader.js +76 -58
- package/dist/application/ArtifactInventory/types.js +1 -5
- package/dist/application/ArtifactInventory.js +6 -14
- package/dist/application/AuthorizedArtifactInventory.js +3 -13
- package/dist/application/BinarySession.js +54 -28
- package/dist/application/BinarySessionComposition.js +0 -11
- package/dist/application/BinarySessionOpen.js +2 -1
- package/dist/application/BinarySessionRecords.js +24 -86
- package/dist/application/BinarySessionStatus.js +16 -21
- package/dist/application/BinaryTargetResolver.js +216 -0
- package/dist/application/BrowserEvidence.js +39 -57
- package/dist/application/BrowserObservationService.js +3 -6
- package/dist/application/BrowserScenarioCaptureService.js +3 -6
- package/dist/application/BrowserScenarioEvidence.js +3 -3
- package/dist/application/CallPathTracing.js +2 -36
- package/dist/application/CapabilityClientRequirements.js +26 -0
- package/dist/application/CapabilityInventory.js +143 -77
- package/dist/application/ClientConfigurationDocument.js +27 -0
- package/dist/application/ClientRegistrationStatus.js +16 -13
- package/dist/application/CommandShimReplay.js +14 -1
- package/dist/application/DirectAnalysis.js +22 -46
- package/dist/application/DirectAnalysisStatus.js +5 -61
- package/dist/application/Doctor.js +11 -32
- package/dist/application/DoctorDiagnostics.js +1 -2
- package/dist/application/DoctorScope.js +1 -1
- package/dist/application/ElectronActiveEvidence.js +50 -0
- package/dist/application/ElectronActiveObservationPort.js +1 -0
- package/dist/application/ElectronActiveObservationService.js +78 -0
- package/dist/application/ElectronBoundaryAnalysis.js +7 -8
- package/dist/application/ElectronBoundaryGraphContext.js +1 -1
- package/dist/application/ElectronBoundaryGraphIpc.js +3 -3
- package/dist/application/ElectronBoundaryGraphNative.js +1 -2
- package/dist/application/ElectronBoundaryGraphWindows.js +6 -8
- package/dist/application/ElectronEvidence.js +4 -7
- package/dist/application/ElectronObservationService.js +5 -9
- package/dist/application/EnhancedLiteralTracing.js +42 -65
- package/dist/application/EnhancedTools.js +98 -64
- package/dist/application/EvidenceBundleCommands.js +16 -12
- package/dist/application/EvidenceBundleFiles.js +9 -15
- package/dist/application/EvidenceLedger.js +14 -42
- package/dist/application/FilesystemSnapshot.js +2 -3
- package/dist/application/InterfaceBuilderAnalysis.js +266 -0
- package/dist/application/InventoryProjectionEvidence.js +4 -2
- package/dist/application/InvestigationProviders.js +1 -1
- package/dist/application/JavaScriptApplicationEvidence.js +2 -5
- package/dist/application/JavaScriptApplicationEvidenceGraph.js +6 -10
- package/dist/application/JavaScriptApplicationService.js +6 -29
- package/dist/application/JavaScriptApplicationWorkflowEvidence.js +5 -5
- package/dist/application/JavaScriptApplicationWorkflowService.js +0 -8
- package/dist/application/JavaScriptArtifactAnalysis.js +38 -127
- package/dist/application/JavaScriptArtifactFiles.js +67 -107
- package/dist/application/JavaScriptArtifactGraphAccumulator.js +0 -7
- package/dist/application/JavaScriptArtifactGraphBuilder.js +7 -58
- package/dist/application/JavaScriptArtifactGraphBundlers.js +1 -6
- package/dist/application/JavaScriptArtifactGraphContext.js +12 -39
- package/dist/application/JavaScriptArtifactGraphDocuments.js +4 -11
- package/dist/application/JavaScriptArtifactGraphEvidence.js +0 -14
- package/dist/application/JavaScriptArtifactGraphFindings.js +3 -3
- package/dist/application/JavaScriptArtifactGraphStructure.js +16 -17
- package/dist/application/JavaScriptArtifactPathResolution.js +61 -49
- package/dist/application/JavaScriptArtifactReconstruction.js +5 -10
- package/dist/application/JavaScriptArtifactReconstructionInput.js +2 -14
- package/dist/application/JavaScriptJsonModules.js +2 -2
- package/dist/application/JavaScriptModuleRelationships.js +22 -27
- package/dist/application/JavaScriptReplayPermission.js +1 -1
- package/dist/application/JavaScriptReplayPlanning.js +9 -3
- package/dist/application/JavaScriptReplayService.js +29 -47
- package/dist/application/JavaScriptReturnShapeProjection.js +12 -42
- package/dist/application/JavaScriptRuntimeObservationEvidence.js +7 -8
- package/dist/application/JavaScriptRuntimeObservationService.js +4 -8
- package/dist/application/JavaScriptRuntimeReconciliationEvidence.js +2 -3
- package/dist/application/JavaScriptSemanticGraphBuilder.js +11 -41
- package/dist/application/JavaScriptSemanticGraphConstruction.js +5 -29
- package/dist/application/JavaScriptSemanticGraphEvidence.js +1 -1
- package/dist/application/JavaScriptSemanticGraphFingerprintProjection.js +1 -1
- package/dist/application/JavaScriptSemanticGraphFlowProjection.js +0 -13
- package/dist/application/JavaScriptSemanticGraphProjection.js +1 -3
- package/dist/application/JavaScriptSemanticTraceService.js +1 -10
- package/dist/application/JsonFiles.js +79 -0
- package/dist/application/LinuxHopper.js +11 -9
- package/dist/application/LoopbackReplay.js +26 -23
- package/dist/application/LoopbackReplayRecorder.js +29 -1
- package/dist/application/ManagedApplicationGraphService.js +1 -2
- package/dist/application/ManagedMemberComparisonService.js +11 -41
- package/dist/application/ManagedNativeVerificationService.js +1 -2
- package/dist/application/ManagedReconstructionService.js +1 -1
- package/dist/application/ManagedRuntimeCorrelationService.js +14 -13
- package/dist/application/NativeApiInspection.js +2 -7
- package/dist/application/NativeUiActionTrace.js +394 -0
- package/dist/application/NodeRuntimeCharacterizationService.js +11 -16
- package/dist/application/PermissionAuthority.js +15 -7
- package/dist/application/PermissionFailure.js +5 -0
- package/dist/application/ProcessCaptureAuthority.js +5 -7
- package/dist/application/ProcessCaptureJournal.js +3 -2
- package/dist/application/ProcessCaptureLifecycle.js +10 -12
- package/dist/application/ProcessCheckpoints.js +29 -11
- package/dist/application/ProcessCli.js +8 -17
- package/dist/application/ProcessEvidence.js +5 -7
- package/dist/application/ProcessHarness.js +60 -20
- package/dist/application/ProcessNormalization.js +2 -1
- package/dist/application/ProcessReactiveCoordinator.js +2 -4
- package/dist/application/ProcessReactiveEffects.js +9 -3
- package/dist/application/ProcessReactiveHarness.js +13 -7
- package/dist/application/ProcessSampling.js +2 -4
- package/dist/application/ProcessTimer.js +39 -0
- package/dist/application/ProjectPermissionStore.js +39 -95
- package/dist/application/RealHopperAssertions.js +20 -66
- package/dist/application/ReconstructionCoverageService.js +12 -58
- package/dist/application/ReconstructionObligationAuthority.js +2 -2
- package/dist/application/ReconstructionObligationCandidates.js +4 -4
- package/dist/application/ReconstructionObligationLedgerEvaluation.js +8 -15
- package/dist/application/ReconstructionObligationLedgerProjection.js +3 -7
- package/dist/application/ReconstructionObligationLedgerService.js +19 -38
- package/dist/application/ReferenceSourceImport.js +21 -47
- package/dist/application/ReferenceSourceImportEntries.js +2 -4
- package/dist/application/ReferenceSourceImportPolicy.js +5 -32
- package/dist/application/ReferenceSourceImportTypes.js +0 -16
- package/dist/application/RuntimeExecutableDiagnostics.js +55 -29
- package/dist/application/SessionProviderRouter.js +2 -2
- package/dist/application/Setup.js +1 -3
- package/dist/application/SetupClientConfiguration.js +22 -88
- package/dist/application/SetupRegistrationEnvironment.js +0 -7
- package/dist/application/StoreFileLock.js +119 -0
- package/dist/application/TerminalRenderer.js +2 -3
- package/dist/application/Uninstall.js +9 -14
- package/dist/application/UnknownEvidence.js +1 -1
- package/dist/application/WindowsCapabilities.js +5 -4
- package/dist/artifacts/ArtifactPaths.js +2 -5
- package/dist/artifacts/ArtifactProvider.js +43 -67
- package/dist/artifacts/DirectoryArtifactReader.js +13 -8
- package/dist/artifacts/MachOSliceArtifactReader.js +1 -5
- package/dist/artifacts/NativeDmgArtifactReader.js +11 -11
- package/dist/artifacts/NibArchive.js +269 -0
- package/dist/artifacts/SafeOutputTree.js +21 -31
- package/dist/browser/BrowserProcessStartup.js +1 -2
- package/dist/browser/CdpAuthorizedMainFrame.js +16 -0
- package/dist/browser/CdpBrowserProvider.js +3 -13
- package/dist/browser/CdpCanonicalJsonDigest.js +9 -0
- package/dist/browser/CdpCaptureDocuments.js +28 -76
- package/dist/browser/CdpCaptureEventBodyShapes.js +13 -33
- package/dist/browser/CdpCaptureEventHandlers.js +22 -87
- package/dist/browser/CdpCaptureEvents.js +2 -8
- package/dist/browser/CdpCaptureStorage.js +9 -20
- package/dist/browser/CdpCaptureStorageFingerprints.js +85 -95
- package/dist/browser/CdpCaptureValues.js +21 -21
- package/dist/browser/CdpConnection.js +10 -25
- package/dist/browser/CdpElectronInspection.js +29 -51
- package/dist/browser/CdpElectronProvider.js +10 -35
- package/dist/browser/CdpElectronScriptEvents.js +8 -16
- package/dist/browser/CdpElectronScripts.js +6 -35
- package/dist/browser/CdpElectronWorkers.js +6 -10
- package/dist/browser/CdpEndpoint.js +25 -41
- package/dist/browser/CdpObservationSession.js +14 -26
- package/dist/browser/CdpPageCapture.js +34 -48
- package/dist/browser/CdpPageCaptureScripts.js +1 -19
- package/dist/browser/CdpPageCaptureWorkers.js +6 -10
- package/dist/browser/CdpSafeMetadata.js +19 -22
- package/dist/browser/CdpScreenshot.js +3 -5
- package/dist/browser/CdpTargetSession.js +1 -2
- package/dist/browser/CdpWebMcpDiscovery.js +13 -22
- package/dist/browser/ElectronFileScope.js +8 -19
- package/dist/browser/JavaScriptRuntimeScope.js +10 -10
- package/dist/browser/PlaywrightBrowserScenarioProvider.js +31 -64
- package/dist/browser/PlaywrightElectronActiveActions.js +309 -0
- package/dist/browser/PlaywrightElectronActiveProvider.js +274 -0
- package/dist/browser/PlaywrightExecutionBoundary.js +16 -5
- package/dist/browser/PlaywrightScenarioActions.js +3 -7
- package/dist/browser/PlaywrightScenarioArtifacts.js +23 -92
- package/dist/browser/PlaywrightScenarioBrowser.js +7 -9
- package/dist/browser/PlaywrightScenarioEvents.js +45 -94
- package/dist/browser/PlaywrightScenarioSession.js +18 -34
- package/dist/browser/PngVisualDiff.js +22 -14
- package/dist/browser/SensitiveTextCapture.js +1 -18
- package/dist/browser/V8InspectorCaptureProjection.js +7 -7
- package/dist/browser/V8InspectorEndpoint.js +12 -14
- package/dist/browser/V8InspectorProvider.js +20 -61
- package/dist/browser/WebSourceMapFetcher.js +56 -176
- package/dist/catalogIdentity.js +12 -60
- package/dist/cli/artifactCommands.js +49 -77
- package/dist/cli/coreAnalysisCommands.js +83 -133
- package/dist/cli/javascriptApplicationAnalysis.js +1 -9
- package/dist/cli/managedCommands.js +6 -271
- package/dist/cli/setupCommands.js +3 -12
- package/dist/cli/utilityCommands.js +7 -41
- package/dist/cli.js +0 -2
- package/dist/cliApplicationCommands.js +44 -114
- package/dist/cliBrowserAdvancedCommands.js +12 -102
- package/dist/cliBrowserCommands.js +19 -124
- package/dist/cliBrowserContext.js +30 -0
- package/dist/cliCommandNames.js +5 -5
- package/dist/cliElectronCommands.js +49 -71
- package/dist/cliEvidenceCommands.js +8 -77
- package/dist/cliJavaScriptRuntimeCommands.js +18 -92
- package/dist/cliJsonInput.js +4 -14
- package/dist/cliObservationOptions.js +11 -92
- package/dist/cliPolicyCommands.js +2 -16
- package/dist/cliProcessCommands.js +3 -3
- package/dist/cliSetup.js +0 -13
- package/dist/config/browserScenario.js +77 -0
- package/dist/config/electronAutomation.js +35 -0
- package/dist/config/environment.js +6 -9
- package/dist/config/javascriptReplay.js +41 -0
- package/dist/config/managedRuntime.js +25 -0
- package/dist/config/parseConfig.js +56 -232
- package/dist/config/parsers.js +16 -28
- package/dist/config/passiveObservation.js +87 -0
- package/dist/config/permissions.js +0 -7
- package/dist/config/processCapture.js +47 -0
- package/dist/contracts/analysisSearchContract.js +2 -5
- package/dist/contracts/applicationToolContracts.js +58 -114
- package/dist/contracts/applicationWorkflowInputContracts.js +29 -114
- package/dist/contracts/artifactComparisonExample.js +58 -60
- package/dist/contracts/artifactToolContracts.js +37 -91
- package/dist/contracts/browserScenarioToolContracts.js +6 -51
- package/dist/contracts/browserToolContracts.js +10 -75
- package/dist/contracts/electronToolContracts.js +27 -98
- package/dist/contracts/enhancedInputs.js +31 -78
- package/dist/contracts/errorSchemas.js +0 -1
- package/dist/contracts/functionComparisonExample.js +10 -24
- package/dist/contracts/functionInstructionContract.js +1 -3
- package/dist/contracts/functionWorkflowToolContracts.js +4 -5
- package/dist/contracts/hopperMemoryContracts.js +3 -3
- package/dist/contracts/investigationExamples.js +14 -11
- package/dist/contracts/javascriptApplicationWorkflowExamples.js +12 -19
- package/dist/contracts/javascriptRuntimeObservationToolContracts.js +2 -20
- package/dist/contracts/javascriptRuntimeReconciliationExample.js +45 -12
- package/dist/contracts/managedToolContracts.js +10 -104
- package/dist/contracts/managedWorkflowExamples.js +77 -125
- package/dist/contracts/managedWorkflowToolContracts.js +51 -74
- package/dist/contracts/nativeToolContracts.js +9 -14
- package/dist/contracts/processCaptureExample.js +2 -69
- package/dist/contracts/promptContracts.js +49 -67
- package/dist/contracts/providerSelection.js +0 -1
- package/dist/contracts/reconstructionReadinessExample.js +1 -6
- package/dist/contracts/sessionStatusContract.js +1 -17
- package/dist/contracts/sessionToolSchemas.js +52 -0
- package/dist/contracts/toolContractExamples.js +11 -10
- package/dist/contracts/toolContractHelpers.js +19 -0
- package/dist/contracts/toolContracts.js +60 -143
- package/dist/contracts/toolEffects.js +16 -9
- package/dist/contracts/toolOutputSchemaGroups.js +47 -86
- package/dist/contracts/toolOutputSchemaPrimitives.js +72 -62
- package/dist/contracts/toolSchemaMetadata.js +117 -0
- package/dist/contracts/unknownContractExamples.js +0 -2
- package/dist/doctorRuntime.js +1 -1
- package/dist/domain/analysisErrorPresentation.js +46 -54
- package/dist/domain/analysisErrorProjection.js +28 -37
- package/dist/domain/analysisProfile.js +3 -31
- package/dist/domain/analysisSnapshot.js +3 -12
- package/dist/domain/androidApplication.js +15 -52
- package/dist/domain/appleApplication.js +24 -65
- package/dist/domain/artifactComparison.js +11 -29
- package/dist/domain/artifactGraph.js +14 -44
- package/dist/domain/artifactInspection.js +38 -69
- package/dist/domain/artifactInventoryEvidence.js +27 -21
- package/dist/domain/binaryTarget.js +2 -219
- package/dist/domain/binaryTargetTypes.js +1 -0
- package/dist/domain/browserCaptureComparison.js +35 -60
- package/dist/domain/browserObservation.js +45 -197
- package/dist/domain/browserObservationSchemas.js +5 -23
- package/dist/domain/browserScenario.js +11 -14
- package/dist/domain/browserScenarioCapture.js +11 -12
- package/dist/domain/browserScenarioCaptureValues.js +146 -84
- package/dist/domain/browserScenarioDiff.js +2 -59
- package/dist/domain/browserScenarioDiffEvidence.js +51 -0
- package/dist/domain/browserScenarioDiffValues.js +21 -38
- package/dist/domain/browserScenarioValues.js +80 -109
- package/dist/domain/browserSession.js +4 -7
- package/dist/domain/bundleComparison.js +6 -32
- package/dist/domain/bytecodeProvider.js +53 -54
- package/dist/domain/callPath.js +50 -169
- package/dist/domain/callPathSchemas.js +79 -0
- package/dist/domain/changedBehavior.js +34 -60
- package/dist/domain/completionLedgerGeneration.js +8 -14
- package/dist/domain/conformancePackage.js +126 -97
- package/dist/domain/conformanceReplay.js +39 -11
- package/dist/domain/conformanceTrustGate.js +174 -30
- package/dist/domain/customProtocolCapture.js +4 -4
- package/dist/domain/electronActiveObservation.js +244 -0
- package/dist/domain/electronObservation.js +21 -83
- package/dist/domain/electronStaticAnalysisBrowser.js +36 -46
- package/dist/domain/electronStaticAnalysisIpc.js +38 -14
- package/dist/domain/electronStaticAnalysisNative.js +1 -8
- package/dist/domain/electronStaticAnalysisValues.js +14 -18
- package/dist/domain/errors.js +33 -54
- package/dist/domain/eventProcessTree.js +101 -90
- package/dist/domain/evidence.js +2 -10
- package/dist/domain/evidenceBundle.js +3 -5
- package/dist/domain/evidenceCompletionLedger.js +6 -8
- package/dist/domain/functionComparison.js +4 -14
- package/dist/domain/functionComparisonNormalization.js +8 -8
- package/dist/domain/functionComparisonResults.js +25 -15
- package/dist/domain/functionComparisonSchemas.js +49 -33
- package/dist/domain/functionDossierEvidence.js +31 -151
- package/dist/domain/hopperStartupFailure.js +1 -1
- package/dist/domain/hopperValues.js +17 -141
- package/dist/domain/inputIssueProjection.js +4 -1
- package/dist/domain/interfaceBuilderGraph.js +654 -0
- package/dist/domain/javascriptApplicationAnalysis.js +8 -112
- package/dist/domain/javascriptApplicationChangeGraph.js +22 -82
- package/dist/domain/javascriptApplicationEvidenceSchemas.js +59 -47
- package/dist/domain/javascriptApplicationGraph.js +3 -13
- package/dist/domain/javascriptApplicationGraphSchemas.js +12 -34
- package/dist/domain/javascriptApplicationVersionComparison.js +26 -30
- package/dist/domain/javascriptApplicationVersionComparisonSchemas.js +123 -68
- package/dist/domain/javascriptApplicationVersionItems.js +120 -53
- package/dist/domain/javascriptApplicationVersionKeys.js +24 -11
- package/dist/domain/javascriptAstFingerprint.js +25 -58
- package/dist/domain/javascriptAstValues.js +9 -0
- package/dist/domain/javascriptExportInstrumentation.js +2 -4
- package/dist/domain/javascriptExportShapeComparison.js +6 -7
- package/dist/domain/javascriptExportShapeComparisonSchemas.js +70 -77
- package/dist/domain/javascriptExportShapeSelection.js +17 -19
- package/dist/domain/javascriptFeatureSeed.js +20 -12
- package/dist/domain/javascriptFeatureTrace.js +13 -67
- package/dist/domain/javascriptFeatureTraceSchemas.js +24 -52
- package/dist/domain/javascriptFeatureTraversal.js +1 -44
- package/dist/domain/javascriptNativeHandoff.js +1 -1
- package/dist/domain/javascriptReplay.js +100 -101
- package/dist/domain/javascriptRuntimeLoadState.js +3 -8
- package/dist/domain/javascriptRuntimeObservation.js +43 -103
- package/dist/domain/javascriptRuntimeReconciliation.js +1 -3
- package/dist/domain/javascriptRuntimeReconciliationActive.js +80 -0
- package/dist/domain/javascriptRuntimeReconciliationGraph.js +21 -33
- package/dist/domain/javascriptRuntimeReconciliationMatching.js +75 -61
- package/dist/domain/javascriptRuntimeReconciliationParsing.js +21 -46
- package/dist/domain/javascriptRuntimeReconciliationResult.js +25 -19
- package/dist/domain/javascriptRuntimeReconciliationRuntime.js +8 -12
- package/dist/domain/javascriptRuntimeReconciliationSchemas.js +34 -49
- package/dist/domain/javascriptRuntimeStaticCandidates.js +3 -3
- package/dist/domain/javascriptSemanticAnalysis.js +12 -45
- package/dist/domain/javascriptSemanticAsyncEffects.js +1 -9
- package/dist/domain/javascriptSemanticCallResolution.js +6 -16
- package/dist/domain/javascriptSemanticCalls.js +5 -32
- package/dist/domain/javascriptSemanticChildProcesses.js +1 -11
- package/dist/domain/javascriptSemanticCoverage.js +11 -0
- package/dist/domain/javascriptSemanticDataEffectHelpers.js +1 -8
- package/dist/domain/javascriptSemanticDataEffects.js +1 -11
- package/dist/domain/javascriptSemanticFingerprints.js +3 -5
- package/dist/domain/javascriptSemanticGraphSchemas.js +25 -51
- package/dist/domain/javascriptSemanticGraphSerialization.js +2 -13
- package/dist/domain/javascriptSemanticIr.js +1 -29
- package/dist/domain/javascriptSemanticObjects.js +1 -5
- package/dist/domain/javascriptSemanticPrimitives.js +2 -9
- package/dist/domain/javascriptSemanticProjection.js +0 -18
- package/dist/domain/javascriptSemanticPromises.js +9 -16
- package/dist/domain/javascriptSemanticProvenance.js +16 -19
- package/dist/domain/javascriptSemanticQuery.js +17 -139
- package/dist/domain/javascriptSemanticQueryAssessment.js +9 -37
- package/dist/domain/javascriptSemanticQueryIdentity.js +2 -23
- package/dist/domain/javascriptSemanticQuerySchemas.js +14 -107
- package/dist/domain/javascriptSemanticResources.js +1 -6
- package/dist/domain/javascriptSemanticReturns.js +10 -27
- package/dist/domain/javascriptSemanticValueTypes.js +1 -0
- package/dist/domain/javascriptSemanticValues.js +44 -62
- package/dist/domain/javascriptStaticAnalysis.js +21 -43
- package/dist/domain/javascriptStaticAnalysisBundler.js +34 -93
- package/dist/domain/javascriptStaticAnalysisCalls.js +17 -16
- package/dist/domain/javascriptStaticAnalysisFindings.js +3 -19
- package/dist/domain/javascriptStaticAnalysisHelpers.js +47 -88
- package/dist/domain/javascriptStaticAnalysisState.js +1 -5
- package/dist/domain/javascriptStaticAnalysisTypes.js +1 -0
- package/dist/domain/jsonShape.js +7 -33
- package/dist/domain/localPath.js +7 -0
- package/dist/domain/managedApplicationGraph.js +9 -41
- package/dist/domain/managedApplicationGraphCoverage.js +24 -156
- package/dist/domain/managedApplicationGraphNodes.js +10 -13
- package/dist/domain/managedArtifact.js +14 -27
- package/dist/domain/managedMemberComparison.js +90 -92
- package/dist/domain/managedMemberComparisonCoverage.js +11 -33
- package/dist/domain/managedMemberComparisonItems.js +221 -0
- package/dist/domain/managedMemberComparisonMatch.js +8 -208
- package/dist/domain/managedNativeVerification.js +3 -6
- package/dist/domain/managedNativeVerificationMatch.js +55 -59
- package/dist/domain/managedNativeVerificationSchemas.js +83 -47
- package/dist/domain/managedReconstruction.js +19 -23
- package/dist/domain/managedRuntimeCorrelation.js +6 -9
- package/dist/domain/nativeApiBoundary.js +17 -14
- package/dist/domain/nativeInspection.js +0 -2
- package/dist/domain/nativeInvestigationGraph.js +351 -0
- package/dist/domain/nativeValueFlow.js +61 -0
- package/dist/domain/nodeRuntimeCharacterization.js +15 -18
- package/dist/domain/objcSwiftMetadata.js +254 -0
- package/dist/domain/peInspection.js +1 -1
- package/dist/domain/permissionPolicy.js +13 -0
- package/dist/domain/processCapture.js +76 -113
- package/dist/domain/processCaptureExample.js +68 -0
- package/dist/domain/processCaptureParsing.js +21 -0
- package/dist/domain/processCaptureReactiveSchema.js +68 -0
- package/dist/domain/processCaptureReactiveValidation.js +8 -3
- package/dist/domain/processCaptureValidation.js +8 -10
- package/dist/domain/processComparison.js +12 -16
- package/dist/domain/processObservation.js +5 -6
- package/dist/domain/processReactiveMatching.js +32 -46
- package/dist/domain/processReactiveRuntime.js +4 -8
- package/dist/domain/processReactiveScenario.js +28 -94
- package/dist/domain/processReactiveScenarioPreflight.js +5 -30
- package/dist/domain/processReactiveTransition.js +42 -21
- package/dist/domain/processScenario.js +62 -93
- package/dist/domain/processTraceComparison.js +0 -7
- package/dist/domain/processTraceEvaluation.js +14 -4
- package/dist/domain/processTraceSpecification.js +11 -17
- package/dist/domain/protocolCapture.js +11 -9
- package/dist/domain/reconstructionCoverage.js +62 -129
- package/dist/domain/reconstructionCoverageEvaluation.js +17 -17
- package/dist/domain/reconstructionObligationLedgerSchemas.js +45 -72
- package/dist/domain/reconstructionReadiness.js +1 -2
- package/dist/domain/reconstructionReadinessSchemas.js +66 -40
- package/dist/domain/reconstructionUnknowns.js +3 -3
- package/dist/domain/reconstructionVerification.js +13 -47
- package/dist/domain/reconstructionVerificationSchemas.js +50 -38
- package/dist/domain/referenceSourceGraph.js +53 -61
- package/dist/domain/referenceSourceImportParsing.js +3 -7
- package/dist/domain/replayMachine.js +19 -31
- package/dist/domain/replayMachineRun.js +15 -63
- package/dist/domain/replayMachineRuntime.js +46 -44
- package/dist/domain/replayMachineValues.js +84 -0
- package/dist/domain/residualUnknown.js +25 -30
- package/dist/domain/runtimeCharacterization.js +15 -16
- package/dist/domain/runtimeIdentification.js +48 -47
- package/dist/domain/sourceToBundleComparison.js +11 -87
- package/dist/domain/sourceToBundleComparisonSchemas.js +25 -50
- package/dist/domain/sourceToBundleSignals.js +11 -16
- package/dist/domain/staticRuntimeCorrelation.js +44 -54
- package/dist/domain/symbolAnalysis.js +10 -19
- package/dist/domain/unicodeCodePointOrder.js +12 -0
- package/dist/domain/webBundleAnalysis.js +70 -99
- package/dist/domain/webBundleAnalyzer.js +2 -4
- package/dist/domain/webBundleAnalyzerAst.js +0 -13
- package/dist/domain/webBundleAnalyzerInspection.js +26 -52
- package/dist/domain/webBundleAnalyzerResult.js +7 -24
- package/dist/domain/webCaptureDiff.js +48 -85
- package/dist/domain/webCaptureDiffSchemas.js +86 -0
- package/dist/domain/webContentArtifact.js +1 -10
- package/dist/domain/webMcpDiscovery.js +3 -14
- package/dist/domain/webScreenshot.js +58 -34
- package/dist/domain/zipPackageFormat.js +7 -0
- package/dist/dotnet/ManagedArtifactInspector.js +17 -50
- package/dist/dotnet/ManagedMemberInspector.js +27 -58
- package/dist/dotnet/ManagedMemberInspectorCore.js +14 -51
- package/dist/dotnet/ManagedMemberInstructionDecoder.js +2 -2
- package/dist/dotnet/ManagedMemberRows.js +16 -16
- package/dist/dotnet/ManagedMetadataHeaps.js +26 -8
- package/dist/dotnet/ManagedMetadataInventory.js +21 -30
- package/dist/dotnet/ManagedMetadataInventoryRows.js +57 -63
- package/dist/dotnet/ManagedMetadataLayout.js +3 -5
- package/dist/dotnet/ManagedMethodBodyReader.js +5 -30
- package/dist/dotnet/ManagedNativeBoundaryHelpers.js +19 -49
- package/dist/dotnet/ManagedNativeBoundaryInspector.js +13 -42
- package/dist/dotnet/ManagedPeReader.js +2 -2
- package/dist/dotnet/ManagedStaticProvider.js +13 -71
- package/dist/generatedMcpToolCatalog.js +1 -1
- package/dist/generatedPackageMetadata.js +1 -1
- package/dist/ghidra/GhidraAnalysisProfile.js +3 -8
- package/dist/ghidra/GhidraClient.js +5 -13
- package/dist/ghidra/GhidraClientStartup.js +1 -1
- package/dist/ghidra/GhidraClientWire.js +9 -5
- package/dist/ghidra/GhidraDefaults.js +0 -18
- package/dist/ghidra/GhidraDiagnostics.js +0 -2
- package/dist/ghidra/GhidraDoctor.js +16 -12
- package/dist/ghidra/GhidraFunctionValues.js +67 -108
- package/dist/ghidra/GhidraInstallation.js +98 -42
- package/dist/ghidra/GhidraInventoryValues.js +18 -77
- package/dist/ghidra/GhidraLauncher.js +0 -8
- package/dist/ghidra/GhidraProvider.js +32 -31
- package/dist/ghidra/GhidraProviderCapabilities.js +11 -48
- package/dist/ghidra/GhidraRequestQueue.js +6 -30
- package/dist/ghidra/GhidraResponseBuffer.js +1 -7
- package/dist/ghidra/GhidraSessionValues.js +0 -2
- package/dist/ghidra/GhidraSocketConnection.js +1 -1
- package/dist/ghidra/GhidraTransport.js +4 -7
- package/dist/ghidra/protocol.js +19 -42
- package/dist/hopper/BridgeLauncher.js +115 -37
- package/dist/hopper/HopperAnalysisProfile.js +3 -5
- package/dist/hopper/HopperCleanup.js +11 -9
- package/dist/hopper/HopperClient.js +5 -8
- package/dist/hopper/HopperProcessDiagnostic.js +2 -2
- package/dist/hopper/HopperProvider.js +0 -30
- package/dist/hopper/HopperRequestQueue.js +21 -40
- package/dist/hopper/HopperResponseStream.js +1 -9
- package/dist/hopper/HopperSessionValues.js +3 -2
- package/dist/hopper/HopperTargetLease.js +119 -0
- package/dist/hopper/LinuxPrivateDisplayDiagnostic.js +24 -31
- package/dist/hopper/LinuxPrivateDisplayProbe.js +21 -26
- package/dist/hopper/protocol.js +6 -4
- package/dist/main/reload.js +1 -9
- package/dist/main/shutdown.js +1 -1
- package/dist/main/state.js +0 -23
- package/dist/main/transport.js +27 -39
- package/dist/main.js +17 -15
- package/dist/mcpDoctor.js +27 -69
- package/dist/native/CommandRunner.js +18 -25
- package/dist/native/NativeMacOSProvider.js +13 -38
- package/dist/native/NativeMachoInspection.js +1 -1
- package/dist/process/BoundedFileBytes.js +17 -0
- package/dist/process/ExecFileOutput.js +11 -0
- package/dist/process/PendingOperations.js +8 -6
- package/dist/process/PrivateRuntimeRoot.js +17 -0
- package/dist/process/ProcessOwnership.js +67 -130
- package/dist/process/ProcessOwnershipIdentity.js +13 -0
- package/dist/process/ProcessOwnershipObservation.js +87 -0
- package/dist/process/ProcessOwnershipProcessTree.js +22 -0
- package/dist/process/ProviderDeadline.js +8 -12
- package/dist/process/ProviderProcess.js +7 -28
- package/dist/process/WindowsAuthority.js +32 -0
- package/dist/reference/ReferenceSourceReader.js +8 -24
- package/dist/reference/ReferenceSourceReaderEntries.js +11 -39
- package/dist/reference/ReferenceSourceReaderFile.js +13 -31
- package/dist/reference/ReferenceSourceReaderPaths.js +3 -18
- package/dist/reference/ReferenceSourceReaderValidate.js +3 -6
- package/dist/replay/JavaScriptReplayWorker.js +95 -13
- package/dist/replay/JavaScriptReplayWorkerTypes.js +1 -0
- package/dist/replay/LinuxJavaScriptReplayRunner.js +42 -43
- package/dist/replay/LinuxJavaScriptReplaySandbox.js +0 -19
- package/dist/replay/LinuxRuntimeClosure.js +1 -3
- package/dist/replay/ReplayOutcome.js +27 -18
- package/dist/replay/ReplayProcessLifecycle.js +32 -7
- package/dist/replay/ReplaySeccompFile.js +29 -0
- package/dist/replay/ReplayWorkerProtocol.js +33 -30
- package/dist/replay/SystemJavaScriptReplayHost.js +45 -74
- package/dist/server/ProcessCaptureElicitation.js +4 -8
- package/dist/server/createServer.js +145 -119
- package/dist/server/mcpClientMetadata.js +32 -0
- package/dist/server/promptCompletion.js +37 -61
- package/dist/server/recordDerivedEvidence.js +1 -1
- package/dist/server/registerApplicationTools/characterization.js +10 -21
- package/dist/server/registerApplicationTools/compareExportShapes.js +6 -16
- package/dist/server/registerApplicationTools/compareSourceToBundle.js +6 -15
- package/dist/server/registerApplicationTools/compareVersions.js +6 -16
- package/dist/server/registerApplicationTools/controlledReplay.js +8 -15
- package/dist/server/registerApplicationTools/coverage.js +7 -78
- package/dist/server/registerApplicationTools/helpers.js +1 -13
- package/dist/server/registerApplicationTools/obligationLedger.js +4 -8
- package/dist/server/registerApplicationTools/traceFeature.js +6 -15
- package/dist/server/registerApplicationTools/traceSemantics.js +5 -13
- package/dist/server/registerApplicationTools.js +0 -2
- package/dist/server/registerArtifactComparisonTool.js +27 -35
- package/dist/server/registerBrowserScenarioTool.js +3 -8
- package/dist/server/registerBrowserTools.js +36 -81
- package/dist/server/registerBundleComparisonTool.js +10 -16
- package/dist/server/registerCloseLifecycleTool.js +5 -27
- package/dist/server/registerElectronTools.js +29 -65
- package/dist/server/registerEnhancedTools.js +118 -127
- package/dist/server/registerEvidenceTools.js +19 -30
- package/dist/server/registerFunctionComparisonTool.js +35 -34
- package/dist/server/registerInvestigationTools/helpers.js +3 -32
- package/dist/server/registerInvestigationTools.js +36 -148
- package/dist/server/registerJavaScriptRuntimeObservationTools.js +15 -27
- package/dist/server/registerManagedWorkflowTools/compareManagedMembers.js +16 -23
- package/dist/server/registerManagedWorkflowTools/contract.js +2 -3
- package/dist/server/registerManagedWorkflowTools/evidence.js +19 -35
- package/dist/server/registerManagedWorkflowTools/importManagedReconstruction.js +4 -14
- package/dist/server/registerManagedWorkflowTools/planManagedRuntimeCorrelation.js +4 -14
- package/dist/server/registerManagedWorkflowTools/projectManagedApplicationGraph.js +11 -20
- package/dist/server/registerManagedWorkflowTools/verifyManagedNativeBoundaries.js +10 -21
- package/dist/server/registerOfficialTools.js +8 -51
- package/dist/server/registerProcessComparisonTool.js +43 -38
- package/dist/server/registerPrompts.js +19 -17
- package/dist/server/registerReplayMachineTool.js +4 -10
- package/dist/server/registerSessionRecordTools.js +36 -153
- package/dist/server/registerSessionStatusTool.js +18 -96
- package/dist/server/registerSessionTools.js +34 -91
- package/dist/server/sessionAvailabilityPolicy.js +2 -3
- package/dist/server/sessionEvidence.js +9 -15
- package/dist/server/sessionToolPolicies.js +1 -13
- package/dist/server/toolRegistrationOptions.js +4 -192
- package/dist/server/toolResult.js +15 -67
- package/dist/serverIdentity.js +0 -20
- package/install.sh +1 -1
- package/package.json +27 -15
- package/scripts/electron-active-hook-boundaries.cjs +394 -0
- package/scripts/electron-active-hook.cjs +469 -0
- package/scripts/hopper-demo-x11.py +13 -32
- package/scripts/rea.mjs +1 -11
- package/skills/reverse-engineer-anything/SKILL.md +46 -11
- package/skills/reverse-engineer-anything/references/evidence-workflows.md +6 -4
- package/skills/reverse-engineer-anything/references/javascript-applications.md +13 -13
- package/skills/reverse-engineer-anything/references/native-and-artifacts.md +12 -8
- package/dist/application/ApplicationWorkflowEvidenceResolver.js +0 -180
- package/dist/application/BoundedJsonFiles.js +0 -86
- package/dist/application/CrossVersionInventory.js +0 -128
- package/dist/application/CrossVersionInvestigation.js +0 -301
- package/dist/application/CrossVersionInvestigationCollections.js +0 -23
- package/dist/application/CrossVersionInvestigationEvidence.js +0 -64
- package/dist/application/CrossVersionInvestigationReplay.js +0 -170
- package/dist/application/DeferredFileAuthorization.js +0 -61
- package/dist/application/DoctorProjection.js +0 -43
- package/dist/application/EnhancedToolPagination.js +0 -22
- package/dist/application/EvidenceReferenceResolver.js +0 -26
- package/dist/application/InvestigationWorkspaceStore.js +0 -204
- package/dist/application/ProcessPairedExperiment.js +0 -72
- package/dist/application/ReconstructionCoverageWorkspaceStore.js +0 -31
- package/dist/application/ReconstructionReadinessService.js +0 -48
- package/dist/cliInvestigationCommands.js +0 -173
- package/dist/domain/boundedCartesianProjection.js +0 -15
- package/dist/domain/investigationWorkspace.js +0 -346
- package/dist/domain/jsonLimits.js +0 -26
- package/dist/domain/knownPageCoverage.js +0 -21
- package/dist/domain/processPairedExperiment.js +0 -128
- package/dist/server/DynamicToolAvailability.js +0 -70
- package/dist/server/LazyToolCatalog.js +0 -134
- package/dist/server/hydrateServerTools.js +0 -191
- package/dist/server/javascriptApplicationResult.js +0 -106
- package/dist/server/permissionFailure.js +0 -12
- package/dist/server/registerApplicationTools/readiness.js +0 -55
- package/dist/server/registerEvidenceResources.js +0 -315
- package/dist/server/registerJavaScriptApplicationGraphResource.js +0 -65
- package/dist/server/registerReconstructionObligationLedgerResource.js +0 -32
- package/dist/server/registerReconstructionReadinessResource.js +0 -32
- package/dist/server/toolInputValidation.js +0 -77
- package/scripts/package-runner-bootstrap.mjs +0 -72
|
@@ -2,34 +2,27 @@ import { createHash } from "node:crypto";
|
|
|
2
2
|
import canonicalize from "canonicalize";
|
|
3
3
|
import { z } from "zod";
|
|
4
4
|
import { parseArtifactInventoryEvidence } from "./artifactInventoryEvidence.js";
|
|
5
|
-
import { projectBoundedCartesian } from "./boundedCartesianProjection.js";
|
|
6
5
|
import { evidenceSchema } from "./evidence.js";
|
|
7
6
|
const digestSchema = z.string().regex(/^[a-f0-9]{64}$/u);
|
|
8
7
|
const evidenceIdSchema = z.string().regex(/^ev_[a-f0-9]{64}$/u);
|
|
9
|
-
const
|
|
8
|
+
const pathSchema = z.string().min(1);
|
|
10
9
|
const componentSchema = z.strictObject({
|
|
11
|
-
path:
|
|
10
|
+
path: pathSchema,
|
|
12
11
|
artifact_id: z.string().regex(/^art_[a-f0-9]{64}$/u),
|
|
13
12
|
sha256: digestSchema,
|
|
14
|
-
format: z.string().min(1)
|
|
13
|
+
format: z.string().min(1),
|
|
15
14
|
});
|
|
16
15
|
/** Authenticated artifact inventory pages projected as one Apple application. */
|
|
17
16
|
export const appleApplicationProjectionInputSchema = z.strictObject({
|
|
18
|
-
inventory_evidence: z.array(evidenceSchema).min(1)
|
|
19
|
-
limits: z
|
|
20
|
-
.strictObject({
|
|
21
|
-
max_components: z.number().int().min(1).max(10_000).default(1_000),
|
|
22
|
-
})
|
|
23
|
-
.default({ max_components: 1_000 }),
|
|
17
|
+
inventory_evidence: z.array(evidenceSchema).min(1),
|
|
24
18
|
});
|
|
25
19
|
/** Deterministic, execution-free Apple application inventory projection. */
|
|
26
20
|
export const appleApplicationProjectionResultSchema = z.strictObject({
|
|
27
|
-
schema_version: z.literal(1),
|
|
28
21
|
projection_id: z.string().regex(/^aap_[a-f0-9]{64}$/u),
|
|
29
22
|
root_sha256: digestSchema,
|
|
30
23
|
root_format: z.literal("ipa"),
|
|
31
|
-
source_evidence_ids: z.array(evidenceIdSchema).min(1)
|
|
32
|
-
application_roots: z.array(
|
|
24
|
+
source_evidence_ids: z.array(evidenceIdSchema).min(1),
|
|
25
|
+
application_roots: z.array(pathSchema),
|
|
33
26
|
components: z.strictObject({
|
|
34
27
|
bundle_metadata: z.array(componentSchema),
|
|
35
28
|
executables: z.array(componentSchema),
|
|
@@ -47,8 +40,8 @@ export const appleApplicationProjectionResultSchema = z.strictObject({
|
|
|
47
40
|
"unity",
|
|
48
41
|
])),
|
|
49
42
|
bridge_candidates: z.array(z.strictObject({
|
|
50
|
-
source_path:
|
|
51
|
-
native_path:
|
|
43
|
+
source_path: pathSchema,
|
|
44
|
+
native_path: pathSchema,
|
|
52
45
|
basis: z.enum([
|
|
53
46
|
"javascript-and-native-content",
|
|
54
47
|
"react-native-convention",
|
|
@@ -57,12 +50,10 @@ export const appleApplicationProjectionResultSchema = z.strictObject({
|
|
|
57
50
|
]),
|
|
58
51
|
})),
|
|
59
52
|
coverage: z.strictObject({
|
|
60
|
-
status: z.enum(["complete-within-inventory", "partial"
|
|
53
|
+
status: z.enum(["complete-within-inventory", "partial"]),
|
|
61
54
|
inventory_complete: z.boolean(),
|
|
62
|
-
omitted_components: z.number().int().min(0),
|
|
63
|
-
omitted_bridge_candidates: z.number().int().min(0),
|
|
64
55
|
}),
|
|
65
|
-
limitations: z.array(z.string().min(1)
|
|
56
|
+
limitations: z.array(z.string().min(1)),
|
|
66
57
|
});
|
|
67
58
|
/** Project exact IPA paths and hashes without parsing or executing target code. */
|
|
68
59
|
export const projectAppleApplication = (input) => {
|
|
@@ -91,34 +82,27 @@ export const projectAppleApplication = (input) => {
|
|
|
91
82
|
})),
|
|
92
83
|
].sort(compare);
|
|
93
84
|
const classified = classifyComponents(all, roots);
|
|
94
|
-
const retained = retainComponents(classified, parsed.limits.max_components);
|
|
95
|
-
const omitted = componentCount(classified) - componentCount(retained);
|
|
96
85
|
const runtimeFamilies = identifyRuntimeFamilies(all);
|
|
97
|
-
const bridgeProjection = identifyBridgeCandidates(
|
|
98
|
-
...
|
|
99
|
-
...
|
|
100
|
-
])
|
|
101
|
-
const limitations = projectionLimitations(inventory.complete,
|
|
86
|
+
const bridgeProjection = identifyBridgeCandidates(classified.javascript, deduplicateComponents([
|
|
87
|
+
...classified.executables,
|
|
88
|
+
...classified.native_libraries,
|
|
89
|
+
]));
|
|
90
|
+
const limitations = projectionLimitations(inventory.complete, roots);
|
|
102
91
|
const withoutId = {
|
|
103
|
-
schema_version: 1,
|
|
104
92
|
root_sha256: inventory.manifest.root_sha256,
|
|
105
93
|
root_format: "ipa",
|
|
106
94
|
source_evidence_ids: evidence
|
|
107
95
|
.map(({ evidence_id: id }) => id)
|
|
108
96
|
.sort(compare),
|
|
109
97
|
application_roots: roots,
|
|
110
|
-
components:
|
|
98
|
+
components: classified,
|
|
111
99
|
runtime_families: runtimeFamilies,
|
|
112
100
|
bridge_candidates: bridgeProjection.candidates,
|
|
113
101
|
coverage: {
|
|
114
|
-
status:
|
|
115
|
-
? "
|
|
116
|
-
:
|
|
117
|
-
? "complete-within-inventory"
|
|
118
|
-
: "partial",
|
|
102
|
+
status: inventory.complete
|
|
103
|
+
? "complete-within-inventory"
|
|
104
|
+
: "partial",
|
|
119
105
|
inventory_complete: inventory.complete,
|
|
120
|
-
omitted_components: omitted,
|
|
121
|
-
omitted_bridge_candidates: bridgeProjection.omitted,
|
|
122
106
|
},
|
|
123
107
|
limitations,
|
|
124
108
|
};
|
|
@@ -138,17 +122,6 @@ const classifyComponents = (all, roots) => {
|
|
|
138
122
|
signing: all.filter(({ path }) => /(?:^|\/)(?:embedded\.mobileprovision|_CodeSignature\/CodeResources)$/u.test(path)),
|
|
139
123
|
};
|
|
140
124
|
};
|
|
141
|
-
const retainComponents = (groups, maximum) => {
|
|
142
|
-
let remaining = maximum;
|
|
143
|
-
return Object.fromEntries(Object.entries(groups).map(([key, values]) => {
|
|
144
|
-
const retained = [...values]
|
|
145
|
-
.sort((left, right) => compare(left.path, right.path))
|
|
146
|
-
.slice(0, remaining);
|
|
147
|
-
remaining -= retained.length;
|
|
148
|
-
return [key, retained];
|
|
149
|
-
}));
|
|
150
|
-
};
|
|
151
|
-
const componentCount = (groups) => Object.values(groups).reduce((total, values) => total + values.length, 0);
|
|
152
125
|
const deduplicateComponents = (values) => [...new Map(values.map((value) => [value.path, value])).values()].sort((left, right) => compare(left.path, right.path));
|
|
153
126
|
const identifyRuntimeFamilies = (all) => {
|
|
154
127
|
const paths = all.map(({ path }) => path.toLowerCase());
|
|
@@ -169,17 +142,13 @@ const identifyRuntimeFamilies = (all) => {
|
|
|
169
142
|
families.add("unity");
|
|
170
143
|
return [...families].sort(compare);
|
|
171
144
|
};
|
|
172
|
-
const identifyBridgeCandidates = (scripts, native
|
|
173
|
-
|
|
145
|
+
const identifyBridgeCandidates = (scripts, native) => ({
|
|
146
|
+
candidates: scripts.flatMap((script) => native.map((item) => ({
|
|
174
147
|
source_path: script.path,
|
|
175
148
|
native_path: item.path,
|
|
176
149
|
basis: bridgeBasis(item.path),
|
|
177
|
-
}))
|
|
178
|
-
|
|
179
|
-
candidates: projection.values,
|
|
180
|
-
omitted: projection.omitted,
|
|
181
|
-
};
|
|
182
|
-
};
|
|
150
|
+
}))),
|
|
151
|
+
});
|
|
183
152
|
const bridgeBasis = (path) => {
|
|
184
153
|
const lower = path.toLowerCase();
|
|
185
154
|
if (lower.includes("react"))
|
|
@@ -190,20 +159,10 @@ const bridgeBasis = (path) => {
|
|
|
190
159
|
return "unity-convention";
|
|
191
160
|
return "javascript-and-native-content";
|
|
192
161
|
};
|
|
193
|
-
const projectionLimitations = (complete,
|
|
162
|
+
const projectionLimitations = (complete, roots) => [
|
|
194
163
|
...(!complete
|
|
195
164
|
? ["Source inventory pages are incomplete; absence is unknown."]
|
|
196
165
|
: []),
|
|
197
|
-
...(omitted > 0
|
|
198
|
-
? [
|
|
199
|
-
`${String(omitted)} component observations were omitted by the projection limit.`,
|
|
200
|
-
]
|
|
201
|
-
: []),
|
|
202
|
-
...(omittedBridges > 0
|
|
203
|
-
? [
|
|
204
|
-
`${String(omittedBridges)} bridge hypotheses were omitted by the projection limit.`,
|
|
205
|
-
]
|
|
206
|
-
: []),
|
|
207
166
|
...(roots.length === 0
|
|
208
167
|
? [
|
|
209
168
|
"No Payload/*.app directory was present in the supplied inventory pages.",
|
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
import canonicalize from "canonicalize";
|
|
2
2
|
import { z } from "zod";
|
|
3
3
|
import {} from "./artifactGraph.js";
|
|
4
|
+
import { evidenceSchema } from "./evidence.js";
|
|
4
5
|
import { parseArtifactInventoryEvidence, } from "./artifactInventoryEvidence.js";
|
|
5
6
|
const evidenceIdSchema = z.string().regex(/^ev_[a-f0-9]{64}$/u);
|
|
6
7
|
const comparisonStatusSchema = z.enum([
|
|
@@ -32,20 +33,14 @@ const comparisonDimensionSchema = z.enum([
|
|
|
32
33
|
]);
|
|
33
34
|
/** Strict Evidence-backed input for deterministic artifact comparison. */
|
|
34
35
|
export const artifactComparisonInputSchema = z.strictObject({
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
offset: z.number().int().min(0).default(0),
|
|
38
|
-
limit: z.number().int().min(1).max(500).default(100),
|
|
39
|
-
unknown_registry_approved: z
|
|
40
|
-
.literal(true)
|
|
41
|
-
.optional()
|
|
42
|
-
.describe("Explicit approval to record incomplete or differing evidence"),
|
|
36
|
+
left: evidenceSchema,
|
|
37
|
+
right: evidenceSchema,
|
|
43
38
|
});
|
|
44
39
|
/** One path-classified artifact change with citations to both observations. */
|
|
45
40
|
const artifactChangeSchema = z.object({
|
|
46
41
|
classification: changeKindSchema,
|
|
47
|
-
logical_path: z.string().min(1)
|
|
48
|
-
dimensions: z.array(comparisonDimensionSchema).min(1)
|
|
42
|
+
logical_path: z.string().min(1),
|
|
43
|
+
dimensions: z.array(comparisonDimensionSchema).min(1),
|
|
49
44
|
left_occurrence_id: z
|
|
50
45
|
.string()
|
|
51
46
|
.regex(/^occ_[a-f0-9]{64}$/u)
|
|
@@ -62,9 +57,9 @@ const artifactChangeSchema = z.object({
|
|
|
62
57
|
.string()
|
|
63
58
|
.regex(/^art_[a-f0-9]{64}$/u)
|
|
64
59
|
.nullable(),
|
|
65
|
-
evidence_links: z.array(evidenceIdSchema).min(2)
|
|
60
|
+
evidence_links: z.array(evidenceIdSchema).min(2),
|
|
66
61
|
});
|
|
67
|
-
/**
|
|
62
|
+
/** Deterministic artifact comparison with every change returned inline. */
|
|
68
63
|
export const artifactComparisonResultSchema = z.object({
|
|
69
64
|
status: comparisonStatusSchema,
|
|
70
65
|
left_manifest_id: z.string().regex(/^agm_[a-f0-9]{64}$/u),
|
|
@@ -77,17 +72,11 @@ export const artifactComparisonResultSchema = z.object({
|
|
|
77
72
|
unknown: z.number().int().min(0),
|
|
78
73
|
contradiction: z.number().int().min(0).default(0),
|
|
79
74
|
}),
|
|
80
|
-
changes: z.
|
|
81
|
-
items: z.array(artifactChangeSchema).max(500),
|
|
82
|
-
offset: z.number().int().min(0),
|
|
83
|
-
limit: z.number().int().min(1).max(500),
|
|
84
|
-
total: z.number().int().min(0),
|
|
85
|
-
next_offset: z.number().int().min(0).nullable(),
|
|
86
|
-
}),
|
|
75
|
+
changes: z.array(artifactChangeSchema),
|
|
87
76
|
limitations: z.array(z.string()),
|
|
88
77
|
});
|
|
89
|
-
/** Compare complete inventory
|
|
90
|
-
export const compareArtifacts = (leftEvidence, rightEvidence
|
|
78
|
+
/** Compare complete inventory evidence without treating missing evidence as equality. */
|
|
79
|
+
export const compareArtifacts = (leftEvidence, rightEvidence) => {
|
|
91
80
|
const left = parseArtifactInventoryEvidence(leftEvidence);
|
|
92
81
|
const right = parseArtifactInventoryEvidence(rightEvidence);
|
|
93
82
|
const leftComplete = left.inventory.complete;
|
|
@@ -105,7 +94,6 @@ export const compareArtifacts = (leftEvidence, rightEvidence, offset, limit) =>
|
|
|
105
94
|
...right.evidence.map(({ evidence_id: id }) => id),
|
|
106
95
|
], leftCovered && rightCovered);
|
|
107
96
|
const summary = summarize(left.inventory, right.inventory, changes, leftCovered && rightCovered);
|
|
108
|
-
const page = changes.slice(offset, offset + limit);
|
|
109
97
|
return artifactComparisonResultSchema.parse({
|
|
110
98
|
status: !leftComplete || !rightComplete
|
|
111
99
|
? "truncated"
|
|
@@ -121,13 +109,7 @@ export const compareArtifacts = (leftEvidence, rightEvidence, offset, limit) =>
|
|
|
121
109
|
left_manifest_id: left.inventory.manifest.manifest_id,
|
|
122
110
|
right_manifest_id: right.inventory.manifest.manifest_id,
|
|
123
111
|
summary,
|
|
124
|
-
changes
|
|
125
|
-
items: page,
|
|
126
|
-
offset,
|
|
127
|
-
limit,
|
|
128
|
-
total: changes.length,
|
|
129
|
-
next_offset: offset + page.length < changes.length ? offset + page.length : null,
|
|
130
|
-
},
|
|
112
|
+
changes,
|
|
131
113
|
limitations: [...new Set(limitations)].sort((a, b) => a.localeCompare(b)),
|
|
132
114
|
});
|
|
133
115
|
};
|
|
@@ -9,7 +9,6 @@ const contradictionIdSchema = z.string().regex(/^ic_[a-f0-9]{64}$/u);
|
|
|
9
9
|
const boundedRelativePathSchema = z
|
|
10
10
|
.string()
|
|
11
11
|
.min(1)
|
|
12
|
-
.max(4_096)
|
|
13
12
|
.refine((path) => !path.startsWith("/") &&
|
|
14
13
|
!path.includes("\\") &&
|
|
15
14
|
path.split("/").every((part) => part !== "" && part !== ".."), "Expected a normalized relative POSIX path without traversal");
|
|
@@ -53,28 +52,19 @@ const artifactFormatSchema = z.enum([
|
|
|
53
52
|
"file",
|
|
54
53
|
"unknown",
|
|
55
54
|
]);
|
|
56
|
-
/** Exact bounded policy applied while discovering or extracting artifacts. */
|
|
57
|
-
const artifactTraversalLimitsSchema = z.object({
|
|
58
|
-
max_entries: z.number().int().min(1).max(1_000_000),
|
|
59
|
-
max_total_bytes: z.number().int().min(1).max(Number.MAX_SAFE_INTEGER),
|
|
60
|
-
max_entry_bytes: z.number().int().min(1).max(Number.MAX_SAFE_INTEGER),
|
|
61
|
-
max_compression_ratio: z.number().min(1).max(100_000),
|
|
62
|
-
max_depth: z.number().int().min(0).max(100),
|
|
63
|
-
max_path_bytes: z.number().int().min(1).max(65_535),
|
|
64
|
-
});
|
|
65
55
|
/** File byte interval for an artifact derived without writing it to disk. */
|
|
66
56
|
const artifactByteRangeSchema = z.object({
|
|
67
57
|
offset: z.number().int().min(0),
|
|
68
58
|
length: z.number().int().min(0),
|
|
69
59
|
});
|
|
70
|
-
/**
|
|
60
|
+
/** External command provenance, including observable side effects. */
|
|
71
61
|
const artifactCommandSchema = z.object({
|
|
72
62
|
tool: z.string().min(1),
|
|
73
|
-
arguments: z.array(z.string()
|
|
63
|
+
arguments: z.array(z.string()),
|
|
74
64
|
tool_version: z.string().nullable(),
|
|
75
65
|
executable_sha256: sha256Schema.nullable(),
|
|
76
66
|
exit_code: z.number().int().nullable(),
|
|
77
|
-
effects: z.array(z.enum(["read", "write", "mount"]))
|
|
67
|
+
effects: z.array(z.enum(["read", "write", "mount"])),
|
|
78
68
|
});
|
|
79
69
|
/** One content-addressed application artifact in deterministic manifest order. */
|
|
80
70
|
const artifactNodeSchema = z.object({
|
|
@@ -110,12 +100,7 @@ const artifactOccurrenceSchema = z.object({
|
|
|
110
100
|
.nullable(),
|
|
111
101
|
executable: z.boolean(),
|
|
112
102
|
encrypted: z.boolean(),
|
|
113
|
-
hash_status: z.enum([
|
|
114
|
-
"verified",
|
|
115
|
-
"mismatched",
|
|
116
|
-
"not-hashed-limit",
|
|
117
|
-
"unavailable",
|
|
118
|
-
]),
|
|
103
|
+
hash_status: z.enum(["verified", "mismatched", "not-hashed", "unavailable"]),
|
|
119
104
|
source_location: artifactByteRangeSchema.nullable(),
|
|
120
105
|
limitations: z.array(z.string()),
|
|
121
106
|
});
|
|
@@ -154,7 +139,6 @@ const artifactEdgeSchema = z.object({
|
|
|
154
139
|
});
|
|
155
140
|
/** Stable cryptographic commitment and counts for a complete artifact graph. */
|
|
156
141
|
const artifactGraphManifestSchema = z.object({
|
|
157
|
-
schema_version: z.literal(1),
|
|
158
142
|
manifest_id: manifestIdSchema,
|
|
159
143
|
root_artifact_id: artifactIdSchema,
|
|
160
144
|
root_sha256: sha256Schema,
|
|
@@ -164,26 +148,14 @@ const artifactGraphManifestSchema = z.object({
|
|
|
164
148
|
occurrence_count: z.number().int().min(1),
|
|
165
149
|
edge_count: z.number().int().min(0),
|
|
166
150
|
});
|
|
167
|
-
/**
|
|
168
|
-
const artifactPageSchema = (item) => z.object({
|
|
169
|
-
items: z.array(item).max(500),
|
|
170
|
-
offset: z.number().int().min(0),
|
|
171
|
-
limit: z.number().int().min(1).max(500),
|
|
172
|
-
total: z.number().int().min(0),
|
|
173
|
-
next_offset: z.number().int().min(0).nullable(),
|
|
174
|
-
});
|
|
175
|
-
/** Inventory observation containing stable manifest identity and bounded pages. */
|
|
151
|
+
/** Complete inventory observation containing the stable artifact graph. */
|
|
176
152
|
export const artifactInventoryResultSchema = z.object({
|
|
177
153
|
manifest: artifactGraphManifestSchema,
|
|
178
|
-
nodes:
|
|
179
|
-
occurrences:
|
|
180
|
-
edges:
|
|
181
|
-
|
|
182
|
-
|
|
183
|
-
integrity_contradictions: z
|
|
184
|
-
.array(integrityContradictionSchema)
|
|
185
|
-
.max(100)
|
|
186
|
-
.default([]),
|
|
154
|
+
nodes: z.array(artifactNodeSchema),
|
|
155
|
+
occurrences: z.array(artifactOccurrenceSchema),
|
|
156
|
+
edges: z.array(artifactEdgeSchema),
|
|
157
|
+
provenance: z.array(artifactCommandSchema),
|
|
158
|
+
integrity_contradictions: z.array(integrityContradictionSchema).default([]),
|
|
187
159
|
limitations: z.array(z.string()),
|
|
188
160
|
});
|
|
189
161
|
/** One safely materialized artifact beneath caller-approved output root. */
|
|
@@ -196,10 +168,9 @@ const extractedArtifactSchema = z.object({
|
|
|
196
168
|
});
|
|
197
169
|
/** Path-independent commitment to one selected extraction operation. */
|
|
198
170
|
const artifactExtractionManifestSchema = z.object({
|
|
199
|
-
schema_version: z.literal(1),
|
|
200
171
|
extraction_id: extractionIdSchema,
|
|
201
172
|
source_manifest_id: manifestIdSchema,
|
|
202
|
-
selected_occurrence_ids: z.array(occurrenceIdSchema).min(1)
|
|
173
|
+
selected_occurrence_ids: z.array(occurrenceIdSchema).min(1),
|
|
203
174
|
files_sha256: sha256Schema,
|
|
204
175
|
output_root_alias: z.literal("$OUTPUT_ROOT"),
|
|
205
176
|
});
|
|
@@ -208,14 +179,13 @@ export const artifactExtractionResultSchema = z.object({
|
|
|
208
179
|
manifest: artifactGraphManifestSchema,
|
|
209
180
|
extraction_manifest: artifactExtractionManifestSchema,
|
|
210
181
|
output_root: z.string().min(1),
|
|
211
|
-
artifacts:
|
|
182
|
+
artifacts: z.array(extractedArtifactSchema),
|
|
212
183
|
containment_verified: z.boolean(),
|
|
213
184
|
cleanup: z.object({
|
|
214
185
|
attempted: z.boolean(),
|
|
215
186
|
verified: z.boolean(),
|
|
216
|
-
residual_paths: z.array(boundedRelativePathSchema)
|
|
187
|
+
residual_paths: z.array(boundedRelativePathSchema),
|
|
217
188
|
}),
|
|
218
|
-
|
|
219
|
-
provenance: z.array(artifactCommandSchema).max(256),
|
|
189
|
+
provenance: z.array(artifactCommandSchema),
|
|
220
190
|
limitations: z.array(z.string()),
|
|
221
191
|
});
|
|
@@ -4,22 +4,13 @@ import { z } from "zod";
|
|
|
4
4
|
import { artifactInventoryResultSchema, } from "./artifactGraph.js";
|
|
5
5
|
import { evidenceSchema, parseEvidence } from "./evidence.js";
|
|
6
6
|
import { jsonValueSchema } from "./jsonValue.js";
|
|
7
|
-
const
|
|
7
|
+
const textSchema = z.string().min(1);
|
|
8
8
|
const evidenceIdSchema = z.string().regex(/^ev_[a-f0-9]{64}$/u);
|
|
9
9
|
const artifactIdSchema = z.string().regex(/^art_[a-f0-9]{64}$/u);
|
|
10
|
-
const inspectionLimitsSchema = z.strictObject({
|
|
11
|
-
max_observations: z.number().int().min(1).max(500).default(100),
|
|
12
|
-
max_relationships: z.number().int().min(1).max(500).default(100),
|
|
13
|
-
max_hypotheses: z.number().int().min(1).max(100).default(20),
|
|
14
|
-
max_unexplored_branches: z.number().int().min(1).max(100).default(20),
|
|
15
|
-
max_next_probes: z.number().int().min(1).max(50).default(20),
|
|
16
|
-
max_substeps: z.literal(1).default(1),
|
|
17
|
-
});
|
|
18
|
-
export const artifactInspectionLimitsSchema = inspectionLimitsSchema;
|
|
19
10
|
const inspectionObservationSchema = z.strictObject({
|
|
20
11
|
observation_id: z.string().regex(/^aio_[a-f0-9]{64}$/u),
|
|
21
12
|
kind: z.enum(["root-manifest", "artifact", "occurrence", "integrity"]),
|
|
22
|
-
subject:
|
|
13
|
+
subject: textSchema,
|
|
23
14
|
value: jsonValueSchema,
|
|
24
15
|
evidence_id: evidenceIdSchema,
|
|
25
16
|
});
|
|
@@ -37,27 +28,27 @@ const inspectionRelationshipSchema = z.strictObject({
|
|
|
37
28
|
source_artifact_id: artifactIdSchema,
|
|
38
29
|
target_artifact_id: artifactIdSchema,
|
|
39
30
|
occurrence_id: z.string().regex(/^occ_[a-f0-9]{64}$/u),
|
|
40
|
-
logical_path:
|
|
31
|
+
logical_path: textSchema.nullable(),
|
|
41
32
|
evidence_id: evidenceIdSchema,
|
|
42
33
|
});
|
|
43
34
|
const inspectionHypothesisSchema = z.strictObject({
|
|
44
35
|
hypothesis_id: z.string().regex(/^aih_[a-f0-9]{64}$/u),
|
|
45
|
-
statement:
|
|
36
|
+
statement: textSchema,
|
|
46
37
|
confidence: z.enum(["medium", "low"]),
|
|
47
|
-
basis_evidence_ids: z.array(evidenceIdSchema).min(1)
|
|
48
|
-
limitation:
|
|
38
|
+
basis_evidence_ids: z.array(evidenceIdSchema).min(1),
|
|
39
|
+
limitation: textSchema,
|
|
49
40
|
});
|
|
50
41
|
const inspectionContradictionSchema = z.strictObject({
|
|
51
42
|
contradiction_id: z.string().regex(/^aic_[a-f0-9]{64}$/u),
|
|
52
|
-
statement:
|
|
43
|
+
statement: textSchema,
|
|
53
44
|
occurrence_id: z.string().regex(/^occ_[a-f0-9]{64}$/u),
|
|
54
45
|
declared_sha256: z.string().regex(/^[a-f0-9]{64}$/u),
|
|
55
46
|
observed_sha256: z.string().regex(/^[a-f0-9]{64}$/u),
|
|
56
47
|
evidence_id: evidenceIdSchema,
|
|
57
48
|
});
|
|
58
49
|
const nextProbeSchema = z.strictObject({
|
|
59
|
-
operation:
|
|
60
|
-
rationale:
|
|
50
|
+
operation: textSchema,
|
|
51
|
+
rationale: textSchema,
|
|
61
52
|
authority: z.enum([
|
|
62
53
|
"artifact-bytes",
|
|
63
54
|
"managed-static-analysis",
|
|
@@ -67,24 +58,19 @@ const nextProbeSchema = z.strictObject({
|
|
|
67
58
|
});
|
|
68
59
|
const unexploredBranchSchema = z.strictObject({
|
|
69
60
|
branch_id: z.string().regex(/^aib_[a-f0-9]{64}$/u),
|
|
70
|
-
reason: z.enum([
|
|
71
|
-
|
|
72
|
-
"format-specific-analysis-required",
|
|
73
|
-
"unknown-format",
|
|
74
|
-
]),
|
|
75
|
-
detail: boundedTextSchema,
|
|
61
|
+
reason: z.enum(["format-specific-analysis-required", "unknown-format"]),
|
|
62
|
+
detail: textSchema,
|
|
76
63
|
next_probe: nextProbeSchema.nullable(),
|
|
77
64
|
evidence_id: evidenceIdSchema,
|
|
78
65
|
});
|
|
79
66
|
/** Provider-neutral inspection result with its atomic source Evidence. */
|
|
80
67
|
export const artifactInspectionResultSchema = z.strictObject({
|
|
81
|
-
schema_version: z.literal(1),
|
|
82
68
|
inspection_id: z.string().regex(/^ai_[a-f0-9]{64}$/u),
|
|
83
69
|
subject: z.strictObject({
|
|
84
70
|
manifest_id: z.string().regex(/^agm_[a-f0-9]{64}$/u),
|
|
85
71
|
root_artifact_id: artifactIdSchema,
|
|
86
72
|
root_sha256: z.string().regex(/^[a-f0-9]{64}$/u),
|
|
87
|
-
root_format:
|
|
73
|
+
root_format: textSchema,
|
|
88
74
|
}),
|
|
89
75
|
substeps: z
|
|
90
76
|
.array(z.strictObject({
|
|
@@ -94,14 +80,13 @@ export const artifactInspectionResultSchema = z.strictObject({
|
|
|
94
80
|
evidence_id: evidenceIdSchema,
|
|
95
81
|
evidence: evidenceSchema,
|
|
96
82
|
}))
|
|
97
|
-
.min(1)
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
next_probes: z.array(nextProbeSchema).max(50),
|
|
83
|
+
.min(1),
|
|
84
|
+
observations: z.array(inspectionObservationSchema),
|
|
85
|
+
derived_relationships: z.array(inspectionRelationshipSchema),
|
|
86
|
+
hypotheses: z.array(inspectionHypothesisSchema),
|
|
87
|
+
contradictions: z.array(inspectionContradictionSchema),
|
|
88
|
+
unexplored_branches: z.array(unexploredBranchSchema),
|
|
89
|
+
next_probes: z.array(nextProbeSchema),
|
|
105
90
|
coverage: z.strictObject({
|
|
106
91
|
status: z.enum(["complete-within-substeps", "partial", "truncated"]),
|
|
107
92
|
substeps_completed: z.literal(1),
|
|
@@ -116,11 +101,11 @@ export const artifactInspectionResultSchema = z.strictObject({
|
|
|
116
101
|
next_probes_retained: z.number().int().min(0),
|
|
117
102
|
next_probes_omitted: z.number().int().min(0),
|
|
118
103
|
}),
|
|
119
|
-
evidence_links: z.array(evidenceIdSchema).min(1)
|
|
120
|
-
limitations: z.array(
|
|
104
|
+
evidence_links: z.array(evidenceIdSchema).min(1),
|
|
105
|
+
limitations: z.array(textSchema),
|
|
121
106
|
});
|
|
122
107
|
/** Project one successful inventory Evidence record into an inspection report. */
|
|
123
|
-
export const createArtifactInspection = (inventoryInput
|
|
108
|
+
export const createArtifactInspection = (inventoryInput) => {
|
|
124
109
|
const inventoryEvidence = parseInventoryEvidence(inventoryInput);
|
|
125
110
|
const inventory = artifactInventoryResultSchema.parse(inventoryEvidence.normalized_result);
|
|
126
111
|
const observations = allObservations(inventory, inventoryEvidence.evidence_id);
|
|
@@ -129,21 +114,20 @@ export const createArtifactInspection = (inventoryInput, limits) => {
|
|
|
129
114
|
const nextProbes = probesFor(inventory);
|
|
130
115
|
const branches = allUnexploredBranches(inventory, inventoryEvidence.evidence_id, nextProbes);
|
|
131
116
|
const retained = {
|
|
132
|
-
observations
|
|
133
|
-
relationships
|
|
134
|
-
hypotheses
|
|
135
|
-
branches
|
|
136
|
-
probes: nextProbes
|
|
117
|
+
observations,
|
|
118
|
+
relationships,
|
|
119
|
+
hypotheses,
|
|
120
|
+
branches,
|
|
121
|
+
probes: nextProbes,
|
|
137
122
|
};
|
|
138
123
|
const omissions = {
|
|
139
|
-
observations:
|
|
140
|
-
relationships:
|
|
141
|
-
hypotheses:
|
|
142
|
-
branches:
|
|
143
|
-
probes:
|
|
124
|
+
observations: 0,
|
|
125
|
+
relationships: 0,
|
|
126
|
+
hypotheses: 0,
|
|
127
|
+
branches: 0,
|
|
128
|
+
probes: 0,
|
|
144
129
|
};
|
|
145
130
|
const semantic = {
|
|
146
|
-
schema_version: 1,
|
|
147
131
|
subject: {
|
|
148
132
|
manifest_id: inventory.manifest.manifest_id,
|
|
149
133
|
root_artifact_id: inventory.manifest.root_artifact_id,
|
|
@@ -201,8 +185,8 @@ const parseInventoryEvidence = (input) => {
|
|
|
201
185
|
};
|
|
202
186
|
const allObservations = (inventory, evidenceId) => [
|
|
203
187
|
observation("root-manifest", inventory.manifest.root_artifact_id, inventory.manifest, evidenceId),
|
|
204
|
-
...inventory.nodes.
|
|
205
|
-
...inventory.occurrences.
|
|
188
|
+
...inventory.nodes.map((node) => observation("artifact", node.artifact_id, node, evidenceId)),
|
|
189
|
+
...inventory.occurrences.map((occurrence) => observation("occurrence", occurrence.occurrence_id, occurrence, evidenceId)),
|
|
206
190
|
...inventory.integrity_contradictions.map((value) => observation("integrity", value.contradiction_id, value, evidenceId)),
|
|
207
191
|
];
|
|
208
192
|
const observation = (kind, subject, value, evidenceId) => {
|
|
@@ -214,7 +198,7 @@ const observation = (kind, subject, value, evidenceId) => {
|
|
|
214
198
|
};
|
|
215
199
|
return { observation_id: `aio_${digestCanonical(semantic)}`, ...semantic };
|
|
216
200
|
};
|
|
217
|
-
const allRelationships = (inventory, evidenceId) => inventory.edges.
|
|
201
|
+
const allRelationships = (inventory, evidenceId) => inventory.edges.map((edge) => {
|
|
218
202
|
const semantic = {
|
|
219
203
|
relation: edge.relation,
|
|
220
204
|
source_artifact_id: edge.parent_artifact_id,
|
|
@@ -303,16 +287,7 @@ const probesFor = (inventory) => {
|
|
|
303
287
|
return [];
|
|
304
288
|
};
|
|
305
289
|
const allUnexploredBranches = (inventory, evidenceId, nextProbes) => {
|
|
306
|
-
const
|
|
307
|
-
["nodes", inventory.nodes.next_offset],
|
|
308
|
-
["occurrences", inventory.occurrences.next_offset],
|
|
309
|
-
["relationships", inventory.edges.next_offset],
|
|
310
|
-
];
|
|
311
|
-
const branches = pages.flatMap(([collection, nextOffset]) => nextOffset === null
|
|
312
|
-
? []
|
|
313
|
-
: [
|
|
314
|
-
branch("page-limit", `${collection} continue at offset ${String(nextOffset)}.`, null, evidenceId),
|
|
315
|
-
]);
|
|
290
|
+
const branches = [];
|
|
316
291
|
branches.push(...nextProbes.map((probe) => branch("format-specific-analysis-required", `${probe.operation} was not run by provider-neutral artifact inspection.`, probe, evidenceId)));
|
|
317
292
|
if (inventory.manifest.root_format === "unknown")
|
|
318
293
|
branches.push(branch("unknown-format", "Artifact bytes did not match an admitted format classifier.", null, evidenceId));
|
|
@@ -327,16 +302,10 @@ const branch = (reason, detail, nextProbe, evidenceId) => {
|
|
|
327
302
|
};
|
|
328
303
|
return { branch_id: `aib_${digestCanonical(semantic)}`, ...semantic };
|
|
329
304
|
};
|
|
330
|
-
const inspectionCoverage = (
|
|
305
|
+
const inspectionCoverage = (_inventory, omissions) => {
|
|
331
306
|
if (Object.values(omissions).some((count) => count > 0))
|
|
332
307
|
return "truncated";
|
|
333
|
-
return
|
|
334
|
-
inventory.nodes.next_offset,
|
|
335
|
-
inventory.occurrences.next_offset,
|
|
336
|
-
inventory.edges.next_offset,
|
|
337
|
-
].some((offset) => offset !== null)
|
|
338
|
-
? "partial"
|
|
339
|
-
: "complete-within-substeps";
|
|
308
|
+
return "complete-within-substeps";
|
|
340
309
|
};
|
|
341
310
|
const digestCanonical = (value) => {
|
|
342
311
|
const encoded = canonicalize(value);
|