rea-agents 3.0.0 → 3.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (628) hide show
  1. package/README.md +83 -108
  2. package/bridge/ghidra/ReaGhidraBridge.java +609 -841
  3. package/bridge/hopper_bridge.py +99 -344
  4. package/dist/application/AbortablePromise.js +6 -3
  5. package/dist/application/AnalysisContextQueries.js +21 -9
  6. package/dist/application/AnalysisSnapshotCache.js +0 -1
  7. package/dist/application/AnalysisSnapshotFiles.js +7 -7
  8. package/dist/application/AndroidApplicationService.js +1 -1
  9. package/dist/application/AppleApplicationService.js +1 -1
  10. package/dist/application/ArtifactExtraction.js +35 -54
  11. package/dist/application/ArtifactExtractionDestination.js +17 -0
  12. package/dist/application/ArtifactGraphConstruction.js +2 -17
  13. package/dist/application/ArtifactInventory/classify.js +2 -6
  14. package/dist/application/ArtifactInventory/hash.js +2 -20
  15. package/dist/application/ArtifactInventory/policy.js +17 -0
  16. package/dist/application/ArtifactInventory/reader.js +1 -4
  17. package/dist/application/ArtifactInventory/scanCanonical.js +8 -15
  18. package/dist/application/ArtifactInventory/scanReader.js +76 -58
  19. package/dist/application/ArtifactInventory/types.js +1 -5
  20. package/dist/application/ArtifactInventory.js +6 -14
  21. package/dist/application/AuthorizedArtifactInventory.js +3 -13
  22. package/dist/application/BinarySession.js +54 -28
  23. package/dist/application/BinarySessionComposition.js +0 -11
  24. package/dist/application/BinarySessionOpen.js +2 -1
  25. package/dist/application/BinarySessionRecords.js +24 -86
  26. package/dist/application/BinarySessionStatus.js +16 -21
  27. package/dist/application/BinaryTargetResolver.js +216 -0
  28. package/dist/application/BrowserEvidence.js +39 -57
  29. package/dist/application/BrowserObservationService.js +3 -6
  30. package/dist/application/BrowserScenarioCaptureService.js +3 -6
  31. package/dist/application/BrowserScenarioEvidence.js +3 -3
  32. package/dist/application/CallPathTracing.js +2 -36
  33. package/dist/application/CapabilityClientRequirements.js +26 -0
  34. package/dist/application/CapabilityInventory.js +143 -77
  35. package/dist/application/ClientConfigurationDocument.js +27 -0
  36. package/dist/application/ClientRegistrationStatus.js +16 -13
  37. package/dist/application/CommandShimReplay.js +14 -1
  38. package/dist/application/DirectAnalysis.js +22 -46
  39. package/dist/application/DirectAnalysisStatus.js +5 -61
  40. package/dist/application/Doctor.js +11 -32
  41. package/dist/application/DoctorDiagnostics.js +1 -2
  42. package/dist/application/DoctorScope.js +1 -1
  43. package/dist/application/ElectronActiveEvidence.js +50 -0
  44. package/dist/application/ElectronActiveObservationPort.js +1 -0
  45. package/dist/application/ElectronActiveObservationService.js +78 -0
  46. package/dist/application/ElectronBoundaryAnalysis.js +7 -8
  47. package/dist/application/ElectronBoundaryGraphContext.js +1 -1
  48. package/dist/application/ElectronBoundaryGraphIpc.js +3 -3
  49. package/dist/application/ElectronBoundaryGraphNative.js +1 -2
  50. package/dist/application/ElectronBoundaryGraphWindows.js +6 -8
  51. package/dist/application/ElectronEvidence.js +4 -7
  52. package/dist/application/ElectronObservationService.js +5 -9
  53. package/dist/application/EnhancedLiteralTracing.js +42 -65
  54. package/dist/application/EnhancedTools.js +98 -64
  55. package/dist/application/EvidenceBundleCommands.js +16 -12
  56. package/dist/application/EvidenceBundleFiles.js +9 -15
  57. package/dist/application/EvidenceLedger.js +14 -42
  58. package/dist/application/FilesystemSnapshot.js +2 -3
  59. package/dist/application/InterfaceBuilderAnalysis.js +266 -0
  60. package/dist/application/InventoryProjectionEvidence.js +4 -2
  61. package/dist/application/InvestigationProviders.js +1 -1
  62. package/dist/application/JavaScriptApplicationEvidence.js +2 -5
  63. package/dist/application/JavaScriptApplicationEvidenceGraph.js +6 -10
  64. package/dist/application/JavaScriptApplicationService.js +6 -29
  65. package/dist/application/JavaScriptApplicationWorkflowEvidence.js +5 -5
  66. package/dist/application/JavaScriptApplicationWorkflowService.js +0 -8
  67. package/dist/application/JavaScriptArtifactAnalysis.js +38 -127
  68. package/dist/application/JavaScriptArtifactFiles.js +67 -107
  69. package/dist/application/JavaScriptArtifactGraphAccumulator.js +0 -7
  70. package/dist/application/JavaScriptArtifactGraphBuilder.js +7 -58
  71. package/dist/application/JavaScriptArtifactGraphBundlers.js +1 -6
  72. package/dist/application/JavaScriptArtifactGraphContext.js +12 -39
  73. package/dist/application/JavaScriptArtifactGraphDocuments.js +4 -11
  74. package/dist/application/JavaScriptArtifactGraphEvidence.js +0 -14
  75. package/dist/application/JavaScriptArtifactGraphFindings.js +3 -3
  76. package/dist/application/JavaScriptArtifactGraphStructure.js +16 -17
  77. package/dist/application/JavaScriptArtifactPathResolution.js +61 -49
  78. package/dist/application/JavaScriptArtifactReconstruction.js +5 -10
  79. package/dist/application/JavaScriptArtifactReconstructionInput.js +2 -14
  80. package/dist/application/JavaScriptJsonModules.js +2 -2
  81. package/dist/application/JavaScriptModuleRelationships.js +22 -27
  82. package/dist/application/JavaScriptReplayPermission.js +1 -1
  83. package/dist/application/JavaScriptReplayPlanning.js +9 -3
  84. package/dist/application/JavaScriptReplayService.js +29 -47
  85. package/dist/application/JavaScriptReturnShapeProjection.js +12 -42
  86. package/dist/application/JavaScriptRuntimeObservationEvidence.js +7 -8
  87. package/dist/application/JavaScriptRuntimeObservationService.js +4 -8
  88. package/dist/application/JavaScriptRuntimeReconciliationEvidence.js +2 -3
  89. package/dist/application/JavaScriptSemanticGraphBuilder.js +11 -41
  90. package/dist/application/JavaScriptSemanticGraphConstruction.js +5 -29
  91. package/dist/application/JavaScriptSemanticGraphEvidence.js +1 -1
  92. package/dist/application/JavaScriptSemanticGraphFingerprintProjection.js +1 -1
  93. package/dist/application/JavaScriptSemanticGraphFlowProjection.js +0 -13
  94. package/dist/application/JavaScriptSemanticGraphProjection.js +1 -3
  95. package/dist/application/JavaScriptSemanticTraceService.js +1 -10
  96. package/dist/application/JsonFiles.js +79 -0
  97. package/dist/application/LinuxHopper.js +11 -9
  98. package/dist/application/LoopbackReplay.js +26 -23
  99. package/dist/application/LoopbackReplayRecorder.js +29 -1
  100. package/dist/application/ManagedApplicationGraphService.js +1 -2
  101. package/dist/application/ManagedMemberComparisonService.js +11 -41
  102. package/dist/application/ManagedNativeVerificationService.js +1 -2
  103. package/dist/application/ManagedReconstructionService.js +1 -1
  104. package/dist/application/ManagedRuntimeCorrelationService.js +14 -13
  105. package/dist/application/NativeApiInspection.js +2 -7
  106. package/dist/application/NativeUiActionTrace.js +394 -0
  107. package/dist/application/NodeRuntimeCharacterizationService.js +11 -16
  108. package/dist/application/PermissionAuthority.js +15 -7
  109. package/dist/application/PermissionFailure.js +5 -0
  110. package/dist/application/ProcessCaptureAuthority.js +5 -7
  111. package/dist/application/ProcessCaptureJournal.js +3 -2
  112. package/dist/application/ProcessCaptureLifecycle.js +10 -12
  113. package/dist/application/ProcessCheckpoints.js +29 -11
  114. package/dist/application/ProcessCli.js +8 -17
  115. package/dist/application/ProcessEvidence.js +5 -7
  116. package/dist/application/ProcessHarness.js +60 -20
  117. package/dist/application/ProcessNormalization.js +2 -1
  118. package/dist/application/ProcessReactiveCoordinator.js +2 -4
  119. package/dist/application/ProcessReactiveEffects.js +9 -3
  120. package/dist/application/ProcessReactiveHarness.js +13 -7
  121. package/dist/application/ProcessSampling.js +2 -4
  122. package/dist/application/ProcessTimer.js +39 -0
  123. package/dist/application/ProjectPermissionStore.js +39 -95
  124. package/dist/application/RealHopperAssertions.js +20 -66
  125. package/dist/application/ReconstructionCoverageService.js +12 -58
  126. package/dist/application/ReconstructionObligationAuthority.js +2 -2
  127. package/dist/application/ReconstructionObligationCandidates.js +4 -4
  128. package/dist/application/ReconstructionObligationLedgerEvaluation.js +8 -15
  129. package/dist/application/ReconstructionObligationLedgerProjection.js +3 -7
  130. package/dist/application/ReconstructionObligationLedgerService.js +19 -38
  131. package/dist/application/ReferenceSourceImport.js +21 -47
  132. package/dist/application/ReferenceSourceImportEntries.js +2 -4
  133. package/dist/application/ReferenceSourceImportPolicy.js +5 -32
  134. package/dist/application/ReferenceSourceImportTypes.js +0 -16
  135. package/dist/application/RuntimeExecutableDiagnostics.js +55 -29
  136. package/dist/application/SessionProviderRouter.js +2 -2
  137. package/dist/application/Setup.js +1 -3
  138. package/dist/application/SetupClientConfiguration.js +22 -88
  139. package/dist/application/SetupRegistrationEnvironment.js +0 -7
  140. package/dist/application/StoreFileLock.js +119 -0
  141. package/dist/application/TerminalRenderer.js +2 -3
  142. package/dist/application/Uninstall.js +9 -14
  143. package/dist/application/UnknownEvidence.js +1 -1
  144. package/dist/application/WindowsCapabilities.js +5 -4
  145. package/dist/artifacts/ArtifactPaths.js +2 -5
  146. package/dist/artifacts/ArtifactProvider.js +43 -67
  147. package/dist/artifacts/DirectoryArtifactReader.js +13 -8
  148. package/dist/artifacts/MachOSliceArtifactReader.js +1 -5
  149. package/dist/artifacts/NativeDmgArtifactReader.js +11 -11
  150. package/dist/artifacts/NibArchive.js +269 -0
  151. package/dist/artifacts/SafeOutputTree.js +21 -31
  152. package/dist/browser/BrowserProcessStartup.js +1 -2
  153. package/dist/browser/CdpAuthorizedMainFrame.js +16 -0
  154. package/dist/browser/CdpBrowserProvider.js +3 -13
  155. package/dist/browser/CdpCanonicalJsonDigest.js +9 -0
  156. package/dist/browser/CdpCaptureDocuments.js +28 -76
  157. package/dist/browser/CdpCaptureEventBodyShapes.js +13 -33
  158. package/dist/browser/CdpCaptureEventHandlers.js +22 -87
  159. package/dist/browser/CdpCaptureEvents.js +2 -8
  160. package/dist/browser/CdpCaptureStorage.js +9 -20
  161. package/dist/browser/CdpCaptureStorageFingerprints.js +85 -95
  162. package/dist/browser/CdpCaptureValues.js +21 -21
  163. package/dist/browser/CdpConnection.js +10 -25
  164. package/dist/browser/CdpElectronInspection.js +29 -51
  165. package/dist/browser/CdpElectronProvider.js +10 -35
  166. package/dist/browser/CdpElectronScriptEvents.js +8 -16
  167. package/dist/browser/CdpElectronScripts.js +6 -35
  168. package/dist/browser/CdpElectronWorkers.js +6 -10
  169. package/dist/browser/CdpEndpoint.js +25 -41
  170. package/dist/browser/CdpObservationSession.js +14 -26
  171. package/dist/browser/CdpPageCapture.js +34 -48
  172. package/dist/browser/CdpPageCaptureScripts.js +1 -19
  173. package/dist/browser/CdpPageCaptureWorkers.js +6 -10
  174. package/dist/browser/CdpSafeMetadata.js +19 -22
  175. package/dist/browser/CdpScreenshot.js +3 -5
  176. package/dist/browser/CdpTargetSession.js +1 -2
  177. package/dist/browser/CdpWebMcpDiscovery.js +13 -22
  178. package/dist/browser/ElectronFileScope.js +8 -19
  179. package/dist/browser/JavaScriptRuntimeScope.js +10 -10
  180. package/dist/browser/PlaywrightBrowserScenarioProvider.js +31 -64
  181. package/dist/browser/PlaywrightElectronActiveActions.js +309 -0
  182. package/dist/browser/PlaywrightElectronActiveProvider.js +274 -0
  183. package/dist/browser/PlaywrightExecutionBoundary.js +16 -5
  184. package/dist/browser/PlaywrightScenarioActions.js +3 -7
  185. package/dist/browser/PlaywrightScenarioArtifacts.js +23 -92
  186. package/dist/browser/PlaywrightScenarioBrowser.js +7 -9
  187. package/dist/browser/PlaywrightScenarioEvents.js +45 -94
  188. package/dist/browser/PlaywrightScenarioSession.js +18 -34
  189. package/dist/browser/PngVisualDiff.js +22 -14
  190. package/dist/browser/SensitiveTextCapture.js +1 -18
  191. package/dist/browser/V8InspectorCaptureProjection.js +7 -7
  192. package/dist/browser/V8InspectorEndpoint.js +12 -14
  193. package/dist/browser/V8InspectorProvider.js +20 -61
  194. package/dist/browser/WebSourceMapFetcher.js +56 -176
  195. package/dist/catalogIdentity.js +12 -60
  196. package/dist/cli/artifactCommands.js +49 -77
  197. package/dist/cli/coreAnalysisCommands.js +83 -133
  198. package/dist/cli/javascriptApplicationAnalysis.js +1 -9
  199. package/dist/cli/managedCommands.js +6 -271
  200. package/dist/cli/setupCommands.js +3 -12
  201. package/dist/cli/utilityCommands.js +7 -41
  202. package/dist/cli.js +0 -2
  203. package/dist/cliApplicationCommands.js +44 -114
  204. package/dist/cliBrowserAdvancedCommands.js +12 -102
  205. package/dist/cliBrowserCommands.js +19 -124
  206. package/dist/cliBrowserContext.js +30 -0
  207. package/dist/cliCommandNames.js +5 -5
  208. package/dist/cliElectronCommands.js +49 -71
  209. package/dist/cliEvidenceCommands.js +8 -77
  210. package/dist/cliJavaScriptRuntimeCommands.js +18 -92
  211. package/dist/cliJsonInput.js +4 -14
  212. package/dist/cliObservationOptions.js +11 -92
  213. package/dist/cliPolicyCommands.js +2 -16
  214. package/dist/cliProcessCommands.js +3 -3
  215. package/dist/cliSetup.js +0 -13
  216. package/dist/config/browserScenario.js +77 -0
  217. package/dist/config/electronAutomation.js +35 -0
  218. package/dist/config/environment.js +6 -9
  219. package/dist/config/javascriptReplay.js +41 -0
  220. package/dist/config/managedRuntime.js +25 -0
  221. package/dist/config/parseConfig.js +56 -232
  222. package/dist/config/parsers.js +16 -28
  223. package/dist/config/passiveObservation.js +87 -0
  224. package/dist/config/permissions.js +0 -7
  225. package/dist/config/processCapture.js +47 -0
  226. package/dist/contracts/analysisSearchContract.js +2 -5
  227. package/dist/contracts/applicationToolContracts.js +58 -114
  228. package/dist/contracts/applicationWorkflowInputContracts.js +29 -114
  229. package/dist/contracts/artifactComparisonExample.js +58 -60
  230. package/dist/contracts/artifactToolContracts.js +37 -91
  231. package/dist/contracts/browserScenarioToolContracts.js +6 -51
  232. package/dist/contracts/browserToolContracts.js +10 -75
  233. package/dist/contracts/electronToolContracts.js +27 -98
  234. package/dist/contracts/enhancedInputs.js +31 -78
  235. package/dist/contracts/errorSchemas.js +0 -1
  236. package/dist/contracts/functionComparisonExample.js +10 -24
  237. package/dist/contracts/functionInstructionContract.js +1 -3
  238. package/dist/contracts/functionWorkflowToolContracts.js +4 -5
  239. package/dist/contracts/hopperMemoryContracts.js +3 -3
  240. package/dist/contracts/investigationExamples.js +14 -11
  241. package/dist/contracts/javascriptApplicationWorkflowExamples.js +12 -19
  242. package/dist/contracts/javascriptRuntimeObservationToolContracts.js +2 -20
  243. package/dist/contracts/javascriptRuntimeReconciliationExample.js +45 -12
  244. package/dist/contracts/managedToolContracts.js +10 -104
  245. package/dist/contracts/managedWorkflowExamples.js +77 -125
  246. package/dist/contracts/managedWorkflowToolContracts.js +51 -74
  247. package/dist/contracts/nativeToolContracts.js +9 -14
  248. package/dist/contracts/processCaptureExample.js +2 -69
  249. package/dist/contracts/promptContracts.js +49 -67
  250. package/dist/contracts/providerSelection.js +0 -1
  251. package/dist/contracts/reconstructionReadinessExample.js +1 -6
  252. package/dist/contracts/sessionStatusContract.js +1 -17
  253. package/dist/contracts/sessionToolSchemas.js +52 -0
  254. package/dist/contracts/toolContractExamples.js +11 -10
  255. package/dist/contracts/toolContractHelpers.js +19 -0
  256. package/dist/contracts/toolContracts.js +60 -143
  257. package/dist/contracts/toolEffects.js +16 -9
  258. package/dist/contracts/toolOutputSchemaGroups.js +47 -86
  259. package/dist/contracts/toolOutputSchemaPrimitives.js +72 -62
  260. package/dist/contracts/toolSchemaMetadata.js +117 -0
  261. package/dist/contracts/unknownContractExamples.js +0 -2
  262. package/dist/doctorRuntime.js +1 -1
  263. package/dist/domain/analysisErrorPresentation.js +46 -54
  264. package/dist/domain/analysisErrorProjection.js +28 -37
  265. package/dist/domain/analysisProfile.js +3 -31
  266. package/dist/domain/analysisSnapshot.js +3 -12
  267. package/dist/domain/androidApplication.js +15 -52
  268. package/dist/domain/appleApplication.js +24 -65
  269. package/dist/domain/artifactComparison.js +11 -29
  270. package/dist/domain/artifactGraph.js +14 -44
  271. package/dist/domain/artifactInspection.js +38 -69
  272. package/dist/domain/artifactInventoryEvidence.js +27 -21
  273. package/dist/domain/binaryTarget.js +2 -219
  274. package/dist/domain/binaryTargetTypes.js +1 -0
  275. package/dist/domain/browserCaptureComparison.js +35 -60
  276. package/dist/domain/browserObservation.js +45 -197
  277. package/dist/domain/browserObservationSchemas.js +5 -23
  278. package/dist/domain/browserScenario.js +11 -14
  279. package/dist/domain/browserScenarioCapture.js +11 -12
  280. package/dist/domain/browserScenarioCaptureValues.js +146 -84
  281. package/dist/domain/browserScenarioDiff.js +2 -59
  282. package/dist/domain/browserScenarioDiffEvidence.js +51 -0
  283. package/dist/domain/browserScenarioDiffValues.js +21 -38
  284. package/dist/domain/browserScenarioValues.js +80 -109
  285. package/dist/domain/browserSession.js +4 -7
  286. package/dist/domain/bundleComparison.js +6 -32
  287. package/dist/domain/bytecodeProvider.js +53 -54
  288. package/dist/domain/callPath.js +50 -169
  289. package/dist/domain/callPathSchemas.js +79 -0
  290. package/dist/domain/changedBehavior.js +34 -60
  291. package/dist/domain/completionLedgerGeneration.js +8 -14
  292. package/dist/domain/conformancePackage.js +126 -97
  293. package/dist/domain/conformanceReplay.js +39 -11
  294. package/dist/domain/conformanceTrustGate.js +174 -30
  295. package/dist/domain/customProtocolCapture.js +4 -4
  296. package/dist/domain/electronActiveObservation.js +244 -0
  297. package/dist/domain/electronObservation.js +21 -83
  298. package/dist/domain/electronStaticAnalysisBrowser.js +36 -46
  299. package/dist/domain/electronStaticAnalysisIpc.js +38 -14
  300. package/dist/domain/electronStaticAnalysisNative.js +1 -8
  301. package/dist/domain/electronStaticAnalysisValues.js +14 -18
  302. package/dist/domain/errors.js +33 -54
  303. package/dist/domain/eventProcessTree.js +101 -90
  304. package/dist/domain/evidence.js +2 -10
  305. package/dist/domain/evidenceBundle.js +3 -5
  306. package/dist/domain/evidenceCompletionLedger.js +6 -8
  307. package/dist/domain/functionComparison.js +4 -14
  308. package/dist/domain/functionComparisonNormalization.js +8 -8
  309. package/dist/domain/functionComparisonResults.js +25 -15
  310. package/dist/domain/functionComparisonSchemas.js +49 -33
  311. package/dist/domain/functionDossierEvidence.js +31 -151
  312. package/dist/domain/hopperStartupFailure.js +1 -1
  313. package/dist/domain/hopperValues.js +17 -141
  314. package/dist/domain/inputIssueProjection.js +4 -1
  315. package/dist/domain/interfaceBuilderGraph.js +654 -0
  316. package/dist/domain/javascriptApplicationAnalysis.js +8 -112
  317. package/dist/domain/javascriptApplicationChangeGraph.js +22 -82
  318. package/dist/domain/javascriptApplicationEvidenceSchemas.js +59 -47
  319. package/dist/domain/javascriptApplicationGraph.js +3 -13
  320. package/dist/domain/javascriptApplicationGraphSchemas.js +12 -34
  321. package/dist/domain/javascriptApplicationVersionComparison.js +26 -30
  322. package/dist/domain/javascriptApplicationVersionComparisonSchemas.js +123 -68
  323. package/dist/domain/javascriptApplicationVersionItems.js +120 -53
  324. package/dist/domain/javascriptApplicationVersionKeys.js +24 -11
  325. package/dist/domain/javascriptAstFingerprint.js +25 -58
  326. package/dist/domain/javascriptAstValues.js +9 -0
  327. package/dist/domain/javascriptExportInstrumentation.js +2 -4
  328. package/dist/domain/javascriptExportShapeComparison.js +6 -7
  329. package/dist/domain/javascriptExportShapeComparisonSchemas.js +70 -77
  330. package/dist/domain/javascriptExportShapeSelection.js +17 -19
  331. package/dist/domain/javascriptFeatureSeed.js +20 -12
  332. package/dist/domain/javascriptFeatureTrace.js +13 -67
  333. package/dist/domain/javascriptFeatureTraceSchemas.js +24 -52
  334. package/dist/domain/javascriptFeatureTraversal.js +1 -44
  335. package/dist/domain/javascriptNativeHandoff.js +1 -1
  336. package/dist/domain/javascriptReplay.js +100 -101
  337. package/dist/domain/javascriptRuntimeLoadState.js +3 -8
  338. package/dist/domain/javascriptRuntimeObservation.js +43 -103
  339. package/dist/domain/javascriptRuntimeReconciliation.js +1 -3
  340. package/dist/domain/javascriptRuntimeReconciliationActive.js +80 -0
  341. package/dist/domain/javascriptRuntimeReconciliationGraph.js +21 -33
  342. package/dist/domain/javascriptRuntimeReconciliationMatching.js +75 -61
  343. package/dist/domain/javascriptRuntimeReconciliationParsing.js +21 -46
  344. package/dist/domain/javascriptRuntimeReconciliationResult.js +25 -19
  345. package/dist/domain/javascriptRuntimeReconciliationRuntime.js +8 -12
  346. package/dist/domain/javascriptRuntimeReconciliationSchemas.js +34 -49
  347. package/dist/domain/javascriptRuntimeStaticCandidates.js +3 -3
  348. package/dist/domain/javascriptSemanticAnalysis.js +12 -45
  349. package/dist/domain/javascriptSemanticAsyncEffects.js +1 -9
  350. package/dist/domain/javascriptSemanticCallResolution.js +6 -16
  351. package/dist/domain/javascriptSemanticCalls.js +5 -32
  352. package/dist/domain/javascriptSemanticChildProcesses.js +1 -11
  353. package/dist/domain/javascriptSemanticCoverage.js +11 -0
  354. package/dist/domain/javascriptSemanticDataEffectHelpers.js +1 -8
  355. package/dist/domain/javascriptSemanticDataEffects.js +1 -11
  356. package/dist/domain/javascriptSemanticFingerprints.js +3 -5
  357. package/dist/domain/javascriptSemanticGraphSchemas.js +25 -51
  358. package/dist/domain/javascriptSemanticGraphSerialization.js +2 -13
  359. package/dist/domain/javascriptSemanticIr.js +1 -29
  360. package/dist/domain/javascriptSemanticObjects.js +1 -5
  361. package/dist/domain/javascriptSemanticPrimitives.js +2 -9
  362. package/dist/domain/javascriptSemanticProjection.js +0 -18
  363. package/dist/domain/javascriptSemanticPromises.js +9 -16
  364. package/dist/domain/javascriptSemanticProvenance.js +16 -19
  365. package/dist/domain/javascriptSemanticQuery.js +17 -139
  366. package/dist/domain/javascriptSemanticQueryAssessment.js +9 -37
  367. package/dist/domain/javascriptSemanticQueryIdentity.js +2 -23
  368. package/dist/domain/javascriptSemanticQuerySchemas.js +14 -107
  369. package/dist/domain/javascriptSemanticResources.js +1 -6
  370. package/dist/domain/javascriptSemanticReturns.js +10 -27
  371. package/dist/domain/javascriptSemanticValueTypes.js +1 -0
  372. package/dist/domain/javascriptSemanticValues.js +44 -62
  373. package/dist/domain/javascriptStaticAnalysis.js +21 -43
  374. package/dist/domain/javascriptStaticAnalysisBundler.js +34 -93
  375. package/dist/domain/javascriptStaticAnalysisCalls.js +17 -16
  376. package/dist/domain/javascriptStaticAnalysisFindings.js +3 -19
  377. package/dist/domain/javascriptStaticAnalysisHelpers.js +47 -88
  378. package/dist/domain/javascriptStaticAnalysisState.js +1 -5
  379. package/dist/domain/javascriptStaticAnalysisTypes.js +1 -0
  380. package/dist/domain/jsonShape.js +7 -33
  381. package/dist/domain/localPath.js +7 -0
  382. package/dist/domain/managedApplicationGraph.js +9 -41
  383. package/dist/domain/managedApplicationGraphCoverage.js +24 -156
  384. package/dist/domain/managedApplicationGraphNodes.js +10 -13
  385. package/dist/domain/managedArtifact.js +14 -27
  386. package/dist/domain/managedMemberComparison.js +90 -92
  387. package/dist/domain/managedMemberComparisonCoverage.js +11 -33
  388. package/dist/domain/managedMemberComparisonItems.js +221 -0
  389. package/dist/domain/managedMemberComparisonMatch.js +8 -208
  390. package/dist/domain/managedNativeVerification.js +3 -6
  391. package/dist/domain/managedNativeVerificationMatch.js +55 -59
  392. package/dist/domain/managedNativeVerificationSchemas.js +83 -47
  393. package/dist/domain/managedReconstruction.js +19 -23
  394. package/dist/domain/managedRuntimeCorrelation.js +6 -9
  395. package/dist/domain/nativeApiBoundary.js +17 -14
  396. package/dist/domain/nativeInspection.js +0 -2
  397. package/dist/domain/nativeInvestigationGraph.js +351 -0
  398. package/dist/domain/nativeValueFlow.js +61 -0
  399. package/dist/domain/nodeRuntimeCharacterization.js +15 -18
  400. package/dist/domain/objcSwiftMetadata.js +254 -0
  401. package/dist/domain/peInspection.js +1 -1
  402. package/dist/domain/permissionPolicy.js +13 -0
  403. package/dist/domain/processCapture.js +76 -113
  404. package/dist/domain/processCaptureExample.js +68 -0
  405. package/dist/domain/processCaptureParsing.js +21 -0
  406. package/dist/domain/processCaptureReactiveSchema.js +68 -0
  407. package/dist/domain/processCaptureReactiveValidation.js +8 -3
  408. package/dist/domain/processCaptureValidation.js +8 -10
  409. package/dist/domain/processComparison.js +12 -16
  410. package/dist/domain/processObservation.js +5 -6
  411. package/dist/domain/processReactiveMatching.js +32 -46
  412. package/dist/domain/processReactiveRuntime.js +4 -8
  413. package/dist/domain/processReactiveScenario.js +28 -94
  414. package/dist/domain/processReactiveScenarioPreflight.js +5 -30
  415. package/dist/domain/processReactiveTransition.js +42 -21
  416. package/dist/domain/processScenario.js +62 -93
  417. package/dist/domain/processTraceComparison.js +0 -7
  418. package/dist/domain/processTraceEvaluation.js +14 -4
  419. package/dist/domain/processTraceSpecification.js +11 -17
  420. package/dist/domain/protocolCapture.js +11 -9
  421. package/dist/domain/reconstructionCoverage.js +62 -129
  422. package/dist/domain/reconstructionCoverageEvaluation.js +17 -17
  423. package/dist/domain/reconstructionObligationLedgerSchemas.js +45 -72
  424. package/dist/domain/reconstructionReadiness.js +1 -2
  425. package/dist/domain/reconstructionReadinessSchemas.js +66 -40
  426. package/dist/domain/reconstructionUnknowns.js +3 -3
  427. package/dist/domain/reconstructionVerification.js +13 -47
  428. package/dist/domain/reconstructionVerificationSchemas.js +50 -38
  429. package/dist/domain/referenceSourceGraph.js +53 -61
  430. package/dist/domain/referenceSourceImportParsing.js +3 -7
  431. package/dist/domain/replayMachine.js +19 -31
  432. package/dist/domain/replayMachineRun.js +15 -63
  433. package/dist/domain/replayMachineRuntime.js +46 -44
  434. package/dist/domain/replayMachineValues.js +84 -0
  435. package/dist/domain/residualUnknown.js +25 -30
  436. package/dist/domain/runtimeCharacterization.js +15 -16
  437. package/dist/domain/runtimeIdentification.js +48 -47
  438. package/dist/domain/sourceToBundleComparison.js +11 -87
  439. package/dist/domain/sourceToBundleComparisonSchemas.js +25 -50
  440. package/dist/domain/sourceToBundleSignals.js +11 -16
  441. package/dist/domain/staticRuntimeCorrelation.js +44 -54
  442. package/dist/domain/symbolAnalysis.js +10 -19
  443. package/dist/domain/unicodeCodePointOrder.js +12 -0
  444. package/dist/domain/webBundleAnalysis.js +70 -99
  445. package/dist/domain/webBundleAnalyzer.js +2 -4
  446. package/dist/domain/webBundleAnalyzerAst.js +0 -13
  447. package/dist/domain/webBundleAnalyzerInspection.js +26 -52
  448. package/dist/domain/webBundleAnalyzerResult.js +7 -24
  449. package/dist/domain/webCaptureDiff.js +48 -85
  450. package/dist/domain/webCaptureDiffSchemas.js +86 -0
  451. package/dist/domain/webContentArtifact.js +1 -10
  452. package/dist/domain/webMcpDiscovery.js +3 -14
  453. package/dist/domain/webScreenshot.js +58 -34
  454. package/dist/domain/zipPackageFormat.js +7 -0
  455. package/dist/dotnet/ManagedArtifactInspector.js +17 -50
  456. package/dist/dotnet/ManagedMemberInspector.js +27 -58
  457. package/dist/dotnet/ManagedMemberInspectorCore.js +14 -51
  458. package/dist/dotnet/ManagedMemberInstructionDecoder.js +2 -2
  459. package/dist/dotnet/ManagedMemberRows.js +16 -16
  460. package/dist/dotnet/ManagedMetadataHeaps.js +26 -8
  461. package/dist/dotnet/ManagedMetadataInventory.js +21 -30
  462. package/dist/dotnet/ManagedMetadataInventoryRows.js +57 -63
  463. package/dist/dotnet/ManagedMetadataLayout.js +3 -5
  464. package/dist/dotnet/ManagedMethodBodyReader.js +5 -30
  465. package/dist/dotnet/ManagedNativeBoundaryHelpers.js +19 -49
  466. package/dist/dotnet/ManagedNativeBoundaryInspector.js +13 -42
  467. package/dist/dotnet/ManagedPeReader.js +2 -2
  468. package/dist/dotnet/ManagedStaticProvider.js +13 -71
  469. package/dist/generatedMcpToolCatalog.js +1 -1
  470. package/dist/generatedPackageMetadata.js +1 -1
  471. package/dist/ghidra/GhidraAnalysisProfile.js +3 -8
  472. package/dist/ghidra/GhidraClient.js +5 -13
  473. package/dist/ghidra/GhidraClientStartup.js +1 -1
  474. package/dist/ghidra/GhidraClientWire.js +9 -5
  475. package/dist/ghidra/GhidraDefaults.js +0 -18
  476. package/dist/ghidra/GhidraDiagnostics.js +0 -2
  477. package/dist/ghidra/GhidraDoctor.js +16 -12
  478. package/dist/ghidra/GhidraFunctionValues.js +67 -108
  479. package/dist/ghidra/GhidraInstallation.js +98 -42
  480. package/dist/ghidra/GhidraInventoryValues.js +18 -77
  481. package/dist/ghidra/GhidraLauncher.js +0 -8
  482. package/dist/ghidra/GhidraProvider.js +32 -31
  483. package/dist/ghidra/GhidraProviderCapabilities.js +11 -48
  484. package/dist/ghidra/GhidraRequestQueue.js +6 -30
  485. package/dist/ghidra/GhidraResponseBuffer.js +1 -7
  486. package/dist/ghidra/GhidraSessionValues.js +0 -2
  487. package/dist/ghidra/GhidraSocketConnection.js +1 -1
  488. package/dist/ghidra/GhidraTransport.js +4 -7
  489. package/dist/ghidra/protocol.js +19 -42
  490. package/dist/hopper/BridgeLauncher.js +115 -37
  491. package/dist/hopper/HopperAnalysisProfile.js +3 -5
  492. package/dist/hopper/HopperCleanup.js +11 -9
  493. package/dist/hopper/HopperClient.js +5 -8
  494. package/dist/hopper/HopperProcessDiagnostic.js +2 -2
  495. package/dist/hopper/HopperProvider.js +0 -30
  496. package/dist/hopper/HopperRequestQueue.js +21 -40
  497. package/dist/hopper/HopperResponseStream.js +1 -9
  498. package/dist/hopper/HopperSessionValues.js +3 -2
  499. package/dist/hopper/HopperTargetLease.js +119 -0
  500. package/dist/hopper/LinuxPrivateDisplayDiagnostic.js +24 -31
  501. package/dist/hopper/LinuxPrivateDisplayProbe.js +21 -26
  502. package/dist/hopper/protocol.js +6 -4
  503. package/dist/main/reload.js +1 -9
  504. package/dist/main/shutdown.js +1 -1
  505. package/dist/main/state.js +0 -23
  506. package/dist/main/transport.js +27 -39
  507. package/dist/main.js +17 -15
  508. package/dist/mcpDoctor.js +27 -69
  509. package/dist/native/CommandRunner.js +18 -25
  510. package/dist/native/NativeMacOSProvider.js +13 -38
  511. package/dist/native/NativeMachoInspection.js +1 -1
  512. package/dist/process/BoundedFileBytes.js +17 -0
  513. package/dist/process/ExecFileOutput.js +11 -0
  514. package/dist/process/PendingOperations.js +8 -6
  515. package/dist/process/PrivateRuntimeRoot.js +17 -0
  516. package/dist/process/ProcessOwnership.js +67 -130
  517. package/dist/process/ProcessOwnershipIdentity.js +13 -0
  518. package/dist/process/ProcessOwnershipObservation.js +87 -0
  519. package/dist/process/ProcessOwnershipProcessTree.js +22 -0
  520. package/dist/process/ProviderDeadline.js +8 -12
  521. package/dist/process/ProviderProcess.js +7 -28
  522. package/dist/process/WindowsAuthority.js +32 -0
  523. package/dist/reference/ReferenceSourceReader.js +8 -24
  524. package/dist/reference/ReferenceSourceReaderEntries.js +11 -39
  525. package/dist/reference/ReferenceSourceReaderFile.js +13 -31
  526. package/dist/reference/ReferenceSourceReaderPaths.js +3 -18
  527. package/dist/reference/ReferenceSourceReaderValidate.js +3 -6
  528. package/dist/replay/JavaScriptReplayWorker.js +95 -13
  529. package/dist/replay/JavaScriptReplayWorkerTypes.js +1 -0
  530. package/dist/replay/LinuxJavaScriptReplayRunner.js +42 -43
  531. package/dist/replay/LinuxJavaScriptReplaySandbox.js +0 -19
  532. package/dist/replay/LinuxRuntimeClosure.js +1 -3
  533. package/dist/replay/ReplayOutcome.js +27 -18
  534. package/dist/replay/ReplayProcessLifecycle.js +32 -7
  535. package/dist/replay/ReplaySeccompFile.js +29 -0
  536. package/dist/replay/ReplayWorkerProtocol.js +33 -30
  537. package/dist/replay/SystemJavaScriptReplayHost.js +45 -74
  538. package/dist/server/ProcessCaptureElicitation.js +4 -8
  539. package/dist/server/createServer.js +145 -119
  540. package/dist/server/mcpClientMetadata.js +32 -0
  541. package/dist/server/promptCompletion.js +37 -61
  542. package/dist/server/recordDerivedEvidence.js +1 -1
  543. package/dist/server/registerApplicationTools/characterization.js +10 -21
  544. package/dist/server/registerApplicationTools/compareExportShapes.js +6 -16
  545. package/dist/server/registerApplicationTools/compareSourceToBundle.js +6 -15
  546. package/dist/server/registerApplicationTools/compareVersions.js +6 -16
  547. package/dist/server/registerApplicationTools/controlledReplay.js +8 -15
  548. package/dist/server/registerApplicationTools/coverage.js +7 -78
  549. package/dist/server/registerApplicationTools/helpers.js +1 -13
  550. package/dist/server/registerApplicationTools/obligationLedger.js +4 -8
  551. package/dist/server/registerApplicationTools/traceFeature.js +6 -15
  552. package/dist/server/registerApplicationTools/traceSemantics.js +5 -13
  553. package/dist/server/registerApplicationTools.js +0 -2
  554. package/dist/server/registerArtifactComparisonTool.js +27 -35
  555. package/dist/server/registerBrowserScenarioTool.js +3 -8
  556. package/dist/server/registerBrowserTools.js +36 -81
  557. package/dist/server/registerBundleComparisonTool.js +10 -16
  558. package/dist/server/registerCloseLifecycleTool.js +5 -27
  559. package/dist/server/registerElectronTools.js +29 -65
  560. package/dist/server/registerEnhancedTools.js +118 -127
  561. package/dist/server/registerEvidenceTools.js +19 -30
  562. package/dist/server/registerFunctionComparisonTool.js +35 -34
  563. package/dist/server/registerInvestigationTools/helpers.js +3 -32
  564. package/dist/server/registerInvestigationTools.js +36 -148
  565. package/dist/server/registerJavaScriptRuntimeObservationTools.js +15 -27
  566. package/dist/server/registerManagedWorkflowTools/compareManagedMembers.js +16 -23
  567. package/dist/server/registerManagedWorkflowTools/contract.js +2 -3
  568. package/dist/server/registerManagedWorkflowTools/evidence.js +19 -35
  569. package/dist/server/registerManagedWorkflowTools/importManagedReconstruction.js +4 -14
  570. package/dist/server/registerManagedWorkflowTools/planManagedRuntimeCorrelation.js +4 -14
  571. package/dist/server/registerManagedWorkflowTools/projectManagedApplicationGraph.js +11 -20
  572. package/dist/server/registerManagedWorkflowTools/verifyManagedNativeBoundaries.js +10 -21
  573. package/dist/server/registerOfficialTools.js +8 -51
  574. package/dist/server/registerProcessComparisonTool.js +43 -38
  575. package/dist/server/registerPrompts.js +19 -17
  576. package/dist/server/registerReplayMachineTool.js +4 -10
  577. package/dist/server/registerSessionRecordTools.js +36 -153
  578. package/dist/server/registerSessionStatusTool.js +18 -96
  579. package/dist/server/registerSessionTools.js +34 -91
  580. package/dist/server/sessionAvailabilityPolicy.js +2 -3
  581. package/dist/server/sessionEvidence.js +9 -15
  582. package/dist/server/sessionToolPolicies.js +1 -13
  583. package/dist/server/toolRegistrationOptions.js +4 -192
  584. package/dist/server/toolResult.js +15 -67
  585. package/dist/serverIdentity.js +0 -20
  586. package/install.sh +1 -1
  587. package/package.json +27 -15
  588. package/scripts/electron-active-hook-boundaries.cjs +394 -0
  589. package/scripts/electron-active-hook.cjs +469 -0
  590. package/scripts/hopper-demo-x11.py +13 -32
  591. package/scripts/rea.mjs +1 -11
  592. package/skills/reverse-engineer-anything/SKILL.md +46 -11
  593. package/skills/reverse-engineer-anything/references/evidence-workflows.md +6 -4
  594. package/skills/reverse-engineer-anything/references/javascript-applications.md +13 -13
  595. package/skills/reverse-engineer-anything/references/native-and-artifacts.md +12 -8
  596. package/dist/application/ApplicationWorkflowEvidenceResolver.js +0 -180
  597. package/dist/application/BoundedJsonFiles.js +0 -86
  598. package/dist/application/CrossVersionInventory.js +0 -128
  599. package/dist/application/CrossVersionInvestigation.js +0 -301
  600. package/dist/application/CrossVersionInvestigationCollections.js +0 -23
  601. package/dist/application/CrossVersionInvestigationEvidence.js +0 -64
  602. package/dist/application/CrossVersionInvestigationReplay.js +0 -170
  603. package/dist/application/DeferredFileAuthorization.js +0 -61
  604. package/dist/application/DoctorProjection.js +0 -43
  605. package/dist/application/EnhancedToolPagination.js +0 -22
  606. package/dist/application/EvidenceReferenceResolver.js +0 -26
  607. package/dist/application/InvestigationWorkspaceStore.js +0 -204
  608. package/dist/application/ProcessPairedExperiment.js +0 -72
  609. package/dist/application/ReconstructionCoverageWorkspaceStore.js +0 -31
  610. package/dist/application/ReconstructionReadinessService.js +0 -48
  611. package/dist/cliInvestigationCommands.js +0 -173
  612. package/dist/domain/boundedCartesianProjection.js +0 -15
  613. package/dist/domain/investigationWorkspace.js +0 -346
  614. package/dist/domain/jsonLimits.js +0 -26
  615. package/dist/domain/knownPageCoverage.js +0 -21
  616. package/dist/domain/processPairedExperiment.js +0 -128
  617. package/dist/server/DynamicToolAvailability.js +0 -70
  618. package/dist/server/LazyToolCatalog.js +0 -134
  619. package/dist/server/hydrateServerTools.js +0 -191
  620. package/dist/server/javascriptApplicationResult.js +0 -106
  621. package/dist/server/permissionFailure.js +0 -12
  622. package/dist/server/registerApplicationTools/readiness.js +0 -55
  623. package/dist/server/registerEvidenceResources.js +0 -315
  624. package/dist/server/registerJavaScriptApplicationGraphResource.js +0 -65
  625. package/dist/server/registerReconstructionObligationLedgerResource.js +0 -32
  626. package/dist/server/registerReconstructionReadinessResource.js +0 -32
  627. package/dist/server/toolInputValidation.js +0 -77
  628. package/scripts/package-runner-bootstrap.mjs +0 -72
@@ -3,16 +3,11 @@ import { z } from "zod";
3
3
  import { sanitizedBrowserUrlSchema } from "./browserObservation.js";
4
4
  import { webScreenshotArtifactSchema } from "./webScreenshot.js";
5
5
  const digestSchema = z.string().regex(/^[a-f0-9]{64}$/u);
6
- const boundedTextSchema = z.string().max(1_048_576);
7
6
  const textArtifactSchema = z
8
7
  .strictObject({
9
8
  sha256: digestSchema,
10
- bytes: z
11
- .number()
12
- .int()
13
- .min(0)
14
- .max(16 * 1_024 * 1_024),
15
- text: boundedTextSchema,
9
+ bytes: z.number().int().min(0),
10
+ text: z.string(),
16
11
  })
17
12
  .superRefine((artifact, context) => {
18
13
  const bytes = Buffer.from(artifact.text);
@@ -30,20 +25,19 @@ export const captureStateSchema = (value) => z.discriminatedUnion("state", [
30
25
  }),
31
26
  z.strictObject({
32
27
  state: z.literal("missing"),
33
- reason: z.string().min(1).max(1_024),
28
+ reason: z.string().min(1),
34
29
  }),
35
30
  z.strictObject({
36
31
  state: z.literal("truncated"),
37
32
  observed: z.number().int().min(0),
38
33
  retained: z.number().int().min(0),
39
- reason: z.string().min(1).max(1_024),
34
+ reason: z.string().min(1),
40
35
  }),
41
36
  ]);
42
37
  const historySchema = z.strictObject({
43
38
  length: z.number().int().min(0),
44
39
  current_url: sanitizedBrowserUrlSchema,
45
- navigation_entries: z
46
- .array(z.strictObject({
40
+ navigation_entries: z.array(z.strictObject({
47
41
  type: z.enum([
48
42
  "navigate",
49
43
  "reload",
@@ -52,29 +46,45 @@ const historySchema = z.strictObject({
52
46
  "unknown",
53
47
  ]),
54
48
  name: sanitizedBrowserUrlSchema,
55
- }))
56
- .max(256),
57
- });
58
- const storageValueSchema = z.strictObject({
59
- name: z.string().max(1_024),
60
- value_state: z.enum(["hashed", "redacted-secret"]),
61
- value_sha256: digestSchema.nullable(),
49
+ })),
62
50
  });
51
+ const hashedStorageValueShape = {
52
+ value_state: z.literal("hashed"),
53
+ value_sha256: digestSchema,
54
+ };
55
+ const redactedStorageValueShape = {
56
+ value_state: z.literal("redacted-secret"),
57
+ value_sha256: z.null(),
58
+ };
59
+ const storageValueFingerprintSchema = z.discriminatedUnion("value_state", [
60
+ z.strictObject(hashedStorageValueShape),
61
+ z.strictObject(redactedStorageValueShape),
62
+ ]);
63
+ const storageValueSchema = z.discriminatedUnion("value_state", [
64
+ z.strictObject({
65
+ name: z.string(),
66
+ ...hashedStorageValueShape,
67
+ }),
68
+ z.strictObject({
69
+ name: z.string(),
70
+ ...redactedStorageValueShape,
71
+ }),
72
+ ]);
73
+ const cookieShape = {
74
+ name: z.string(),
75
+ domain: z.string(),
76
+ path: z.string(),
77
+ secure: z.boolean(),
78
+ http_only: z.boolean(),
79
+ same_site: z.enum(["Strict", "Lax", "None"]),
80
+ };
63
81
  const storageSnapshotSchema = z.strictObject({
64
- cookies: z
65
- .array(z.strictObject({
66
- name: z.string().max(1_024),
67
- domain: z.string().max(2_048),
68
- path: z.string().max(4_096),
69
- secure: z.boolean(),
70
- http_only: z.boolean(),
71
- same_site: z.enum(["Strict", "Lax", "None"]),
72
- value_state: z.enum(["hashed", "redacted-secret"]),
73
- value_sha256: digestSchema.nullable(),
74
- }))
75
- .max(512),
76
- local_storage: z.array(storageValueSchema).max(512),
77
- session_storage: z.array(storageValueSchema).max(512),
82
+ cookies: z.array(z.discriminatedUnion("value_state", [
83
+ z.strictObject({ ...cookieShape, ...hashedStorageValueShape }),
84
+ z.strictObject({ ...cookieShape, ...redactedStorageValueShape }),
85
+ ])),
86
+ local_storage: z.array(storageValueSchema),
87
+ session_storage: z.array(storageValueSchema),
78
88
  });
79
89
  export const browserStepArtifactsSchema = z.strictObject({
80
90
  screenshot: captureStateSchema(webScreenshotArtifactSchema),
@@ -89,29 +99,51 @@ const eventBase = {
89
99
  step_index: z.number().int().min(0),
90
100
  };
91
101
  const eventUrl = sanitizedBrowserUrlSchema.nullable();
92
- export const browserScenarioEventSchema = z.discriminatedUnion("kind", [
102
+ const networkEventShape = {
103
+ ...eventBase,
104
+ method: z.string().min(1),
105
+ url: sanitizedBrowserUrlSchema,
106
+ resource_type: z.string().min(1),
107
+ header_names: z.array(z.string()),
108
+ };
109
+ const webSocketFrameShape = {
110
+ ...eventBase,
111
+ kind: z.enum(["websocket-frame-sent", "websocket-frame-received"]),
112
+ url: sanitizedBrowserUrlSchema,
113
+ payload_bytes: z.number().int().min(0),
114
+ truncated: z.boolean(),
115
+ };
116
+ export const browserScenarioEventSchema = z.union([
93
117
  z.strictObject({
94
118
  ...eventBase,
95
119
  kind: z.literal("console"),
96
- level: z.string().min(1).max(64),
97
- text: z.string().max(65_536),
120
+ level: z.string().min(1),
121
+ text: z.string(),
98
122
  url: eventUrl,
99
123
  }),
100
124
  z.strictObject({
101
125
  ...eventBase,
102
126
  kind: z.literal("page-error"),
103
- message: z.string().max(65_536),
104
- stack: z.string().max(262_144).nullable(),
127
+ message: z.string(),
128
+ stack: z.string().nullable(),
105
129
  }),
106
130
  z.strictObject({
107
- ...eventBase,
108
- kind: z.enum(["request", "response", "request-failed"]),
109
- method: z.string().min(1).max(32),
110
- url: sanitizedBrowserUrlSchema,
111
- resource_type: z.string().min(1).max(64),
112
- status: z.number().int().min(100).max(599).nullable(),
113
- header_names: z.array(z.string().max(256)).max(256),
114
- failure: z.string().max(1_024).nullable(),
131
+ ...networkEventShape,
132
+ kind: z.literal("request"),
133
+ status: z.null(),
134
+ failure: z.null(),
135
+ }),
136
+ z.strictObject({
137
+ ...networkEventShape,
138
+ kind: z.literal("response"),
139
+ status: z.number().int().min(100).max(599),
140
+ failure: z.null(),
141
+ }),
142
+ z.strictObject({
143
+ ...networkEventShape,
144
+ kind: z.literal("request-failed"),
145
+ status: z.null(),
146
+ failure: z.string().min(1),
115
147
  }),
116
148
  z.strictObject({
117
149
  ...eventBase,
@@ -119,13 +151,14 @@ export const browserScenarioEventSchema = z.discriminatedUnion("kind", [
119
151
  url: sanitizedBrowserUrlSchema,
120
152
  }),
121
153
  z.strictObject({
122
- ...eventBase,
123
- kind: z.enum(["websocket-frame-sent", "websocket-frame-received"]),
124
- url: sanitizedBrowserUrlSchema,
125
- payload_type: z.enum(["text", "binary"]),
126
- payload_bytes: z.number().int().min(0),
127
- payload_text: z.string().max(65_536).nullable(),
128
- truncated: z.boolean(),
154
+ ...webSocketFrameShape,
155
+ payload_type: z.literal("text"),
156
+ payload_text: z.string(),
157
+ }),
158
+ z.strictObject({
159
+ ...webSocketFrameShape,
160
+ payload_type: z.literal("binary"),
161
+ payload_text: z.null(),
129
162
  }),
130
163
  z.strictObject({
131
164
  ...eventBase,
@@ -139,12 +172,12 @@ export const browserScenarioEventSchema = z.discriminatedUnion("kind", [
139
172
  "popup-closed",
140
173
  ]),
141
174
  url: eventUrl,
142
- name: z.string().max(1_024).nullable(),
175
+ name: z.string().nullable(),
143
176
  }),
144
177
  z.strictObject({
145
178
  ...eventBase,
146
179
  kind: z.literal("download-cancelled"),
147
- suggested_filename: z.string().max(1_024),
180
+ suggested_filename: z.string(),
148
181
  url: sanitizedBrowserUrlSchema,
149
182
  }),
150
183
  ]);
@@ -162,43 +195,72 @@ const completenessSectionSchema = z.enum([
162
195
  "popups",
163
196
  "websockets",
164
197
  ]);
165
- export const browserScenarioCompletenessSchema = z
166
- .strictObject({
167
- status: z.enum(["complete", "incomplete", "truncated"]),
168
- equality_eligible: z.boolean(),
169
- missing_sections: z.array(completenessSectionSchema),
170
- truncated_sections: z.array(completenessSectionSchema),
171
- })
172
- .superRefine((value, context) => {
173
- const expectedStatus = value.truncated_sections.length > 0
174
- ? "truncated"
175
- : value.missing_sections.length > 0
176
- ? "incomplete"
177
- : "complete";
178
- if (value.status !== expectedStatus)
179
- context.addIssue({
180
- code: "custom",
181
- path: ["status"],
182
- message: "Completeness status does not match section accounting",
198
+ export const browserScenarioCompletenessSchema = z.discriminatedUnion("status", [
199
+ z.strictObject({
200
+ status: z.literal("complete"),
201
+ equality_eligible: z.literal(true),
202
+ missing_sections: z.tuple([]),
203
+ truncated_sections: z.tuple([]),
204
+ }),
205
+ z.strictObject({
206
+ status: z.literal("incomplete"),
207
+ equality_eligible: z.literal(false),
208
+ missing_sections: z.array(completenessSectionSchema).min(1),
209
+ truncated_sections: z.tuple([]),
210
+ }),
211
+ z.strictObject({
212
+ status: z.literal("truncated"),
213
+ equality_eligible: z.literal(false),
214
+ missing_sections: z.array(completenessSectionSchema),
215
+ truncated_sections: z.array(completenessSectionSchema).min(1),
216
+ }),
217
+ ]);
218
+ /** Classify canonical browser-scenario completeness from section accounting. */
219
+ export const classifyBrowserScenarioCompleteness = (missing, truncated) => {
220
+ const missingSections = [...new Set(missing)].sort();
221
+ const truncatedSections = [...new Set(truncated)].sort();
222
+ if (truncatedSections.length > 0)
223
+ return browserScenarioCompletenessSchema.parse({
224
+ status: "truncated",
225
+ equality_eligible: false,
226
+ missing_sections: missingSections,
227
+ truncated_sections: truncatedSections,
183
228
  });
184
- if (value.equality_eligible !== (expectedStatus === "complete"))
185
- context.addIssue({
186
- code: "custom",
187
- path: ["equality_eligible"],
188
- message: "Missing or truncated evidence is never equality-eligible",
229
+ if (missingSections.length > 0)
230
+ return browserScenarioCompletenessSchema.parse({
231
+ status: "incomplete",
232
+ equality_eligible: false,
233
+ missing_sections: missingSections,
234
+ truncated_sections: [],
189
235
  });
190
- });
191
- export const browserScenarioStepSchema = z.strictObject({
236
+ return {
237
+ status: "complete",
238
+ equality_eligible: true,
239
+ missing_sections: [],
240
+ truncated_sections: [],
241
+ };
242
+ };
243
+ const browserScenarioStepShape = {
192
244
  step_index: z.number().int().min(0),
193
- step_id: z.string().min(1).max(64),
194
- action: z.string().min(1).max(64),
195
- status: z.enum(["completed", "failed", "cancelled"]),
245
+ step_id: z.string().min(1),
246
+ action: z.string().min(1),
196
247
  elapsed_ms: z.number().int().min(0),
197
248
  before_url: sanitizedBrowserUrlSchema,
198
249
  after_url: sanitizedBrowserUrlSchema,
199
- error: z.string().max(4_096).nullable(),
200
250
  event_sequence_start: z.number().int().min(1),
201
251
  event_sequence_end: z.number().int().min(0),
202
252
  artifacts: browserStepArtifactsSchema,
203
253
  completeness: browserScenarioCompletenessSchema,
204
- });
254
+ };
255
+ export const browserScenarioStepSchema = z.union([
256
+ z.strictObject({
257
+ ...browserScenarioStepShape,
258
+ status: z.literal("completed"),
259
+ error: z.null(),
260
+ }),
261
+ z.strictObject({
262
+ ...browserScenarioStepShape,
263
+ status: z.enum(["failed", "cancelled"]),
264
+ error: z.string(),
265
+ }),
266
+ ]);
@@ -1,4 +1,5 @@
1
1
  import {} from "./browserScenarioCapture.js";
2
+ import { actionState, artifactEvidenceState, captured, eventEvidenceState, eventsFor, screenshotProjection, } from "./browserScenarioDiffEvidence.js";
2
3
  import { browserScenarioDiffSchema, } from "./browserScenarioDiffValues.js";
3
4
  import { commitBrowserScenarioNormalization, digestCanonicalJson, digestNormalizedScenarioValue, } from "./browserScenarioNormalization.js";
4
5
  export { browserScenarioDiffSchema, compareBrowserScenariosInputSchema, } from "./browserScenarioDiffValues.js";
@@ -11,7 +12,6 @@ export const compareBrowserScenarios = (input) => {
11
12
  afterCapture: input.after_scenario,
12
13
  alignment,
13
14
  rules: normalization.rules,
14
- maxChanges: input.max_changes,
15
15
  });
16
16
  const failures = [...alignment.failures, ...compared.failures];
17
17
  const alignmentStatus = failures.length === 0
@@ -29,7 +29,6 @@ export const compareBrowserScenarios = (input) => {
29
29
  ? "unknown"
30
30
  : "unchanged";
31
31
  return browserScenarioDiffSchema.parse({
32
- schema_version: 1,
33
32
  comparison_kind: "browser_scenario",
34
33
  overall_status: overallStatus,
35
34
  normalization,
@@ -43,20 +42,12 @@ export const compareBrowserScenarios = (input) => {
43
42
  steps: compared.steps,
44
43
  artifact_diffs: {
45
44
  total: compared.totalArtifactDiffs,
46
- retained: compared.totalArtifactDiffs -
47
- Math.max(0, compared.totalArtifactDiffs - input.max_changes),
48
- omitted: Math.max(0, compared.totalArtifactDiffs - input.max_changes),
49
45
  },
50
46
  limitations: [
51
47
  "Steps align only by exact, unique step_id; missing, duplicate, or action-mismatched steps are reported and prevent an unchanged claim.",
52
48
  "Only declared literal normalization rules are applied, in canonical rule_id order, to already-redacted durable capture fields.",
53
49
  "Elapsed time and event sequence/index values are excluded as volatile; screenshot bytes are compared by content digest.",
54
50
  "A changed status proves an observed normalized difference. Missing or truncated evidence, incompatible capture context, or alignment failure prevents an unchanged claim.",
55
- ...(compared.totalArtifactDiffs > input.max_changes
56
- ? [
57
- `${String(compared.totalArtifactDiffs - input.max_changes)} artifact difference record(s) were omitted by max_changes.`,
58
- ]
59
- : []),
60
51
  ],
61
52
  });
62
53
  };
@@ -97,7 +88,6 @@ const alignScenarioSteps = (beforeCapture, afterCapture) => {
97
88
  };
98
89
  };
99
90
  const compareAlignedSteps = (input) => {
100
- const remaining = { value: input.maxChanges };
101
91
  let totalArtifactDiffs = 0;
102
92
  const steps = [];
103
93
  const failures = [];
@@ -121,8 +111,6 @@ const compareAlignedSteps = (input) => {
121
111
  });
122
112
  const reportable = artifacts.flatMap(({ diff }) => diff === null ? [] : [diff]);
123
113
  totalArtifactDiffs += reportable.length;
124
- const retained = reportable.slice(0, remaining.value);
125
- remaining.value -= retained.length;
126
114
  const statuses = artifacts.map(({ status }) => status);
127
115
  steps.push({
128
116
  step_id: stepId,
@@ -135,8 +123,7 @@ const compareAlignedSteps = (input) => {
135
123
  : statuses.includes("unknown")
136
124
  ? "unknown"
137
125
  : "unchanged",
138
- artifact_diffs: retained,
139
- omitted_artifact_diffs: reportable.length - retained.length,
126
+ artifact_diffs: reportable,
140
127
  });
141
128
  }
142
129
  return { steps, failures, totalArtifactDiffs };
@@ -278,47 +265,3 @@ const compareCapturedValues = (input) => {
278
265
  },
279
266
  };
280
267
  };
281
- const artifactEvidenceState = (artifact, state, step) => {
282
- if (state.state !== "captured")
283
- return state.state;
284
- const section = artifact === "action_state" ? "action" : artifact;
285
- if (step.completeness.truncated_sections.includes(section))
286
- return "truncated";
287
- if (step.completeness.missing_sections.includes(section))
288
- return "missing";
289
- return "captured";
290
- };
291
- const eventEvidenceState = (capture, step) => {
292
- const sections = [
293
- "events",
294
- "frames",
295
- "workers",
296
- "popups",
297
- "websockets",
298
- ];
299
- if (capture.events.dropped > 0 ||
300
- sections.some((section) => capture.completeness.truncated_sections.includes(section) ||
301
- step.completeness.truncated_sections.includes(section)))
302
- return "truncated";
303
- if (sections.some((section) => capture.completeness.missing_sections.includes(section) ||
304
- step.completeness.missing_sections.includes(section)))
305
- return "missing";
306
- return "captured";
307
- };
308
- const actionState = (step) => ({
309
- action: step.action,
310
- status: step.status,
311
- before_url: step.before_url,
312
- after_url: step.after_url,
313
- error: step.error,
314
- });
315
- const eventsFor = (capture, stepIndex) => capture.events.items.flatMap(({ sequence: _sequence, step_index: eventStepIndex, ...event }) => eventStepIndex === stepIndex ? [event] : []);
316
- const captured = (value) => ({
317
- state: "captured",
318
- value,
319
- });
320
- const screenshotProjection = (screenshot) => ({
321
- sha256: screenshot.sha256,
322
- bytes: screenshot.bytes,
323
- media_type: screenshot.media_type,
324
- });
@@ -0,0 +1,51 @@
1
+ const includesCompletenessSection = (completeness, collection, section) => {
2
+ const sections = completeness[collection];
3
+ return sections.includes(section);
4
+ };
5
+ /** Project one captured artifact through its step-level completeness ledger. */
6
+ export const artifactEvidenceState = (artifact, state, step) => {
7
+ if (state.state !== "captured")
8
+ return state.state;
9
+ const section = artifact === "action_state" ? "action" : artifact;
10
+ if (includesCompletenessSection(step.completeness, "truncated_sections", section))
11
+ return "truncated";
12
+ return includesCompletenessSection(step.completeness, "missing_sections", section)
13
+ ? "missing"
14
+ : "captured";
15
+ };
16
+ const EVENT_SECTIONS = [
17
+ "events",
18
+ "frames",
19
+ "workers",
20
+ "popups",
21
+ "websockets",
22
+ ];
23
+ /** Project event evidence through capture- and step-level completeness. */
24
+ export const eventEvidenceState = (capture, step) => {
25
+ const listed = (collection) => EVENT_SECTIONS.some((section) => includesCompletenessSection(capture.completeness, collection, section) ||
26
+ includesCompletenessSection(step.completeness, collection, section));
27
+ if (capture.events.dropped > 0 || listed("truncated_sections"))
28
+ return "truncated";
29
+ return listed("missing_sections") ? "missing" : "captured";
30
+ };
31
+ /** Select stable action fields for normalized comparison. */
32
+ export const actionState = (step) => ({
33
+ action: step.action,
34
+ status: step.status,
35
+ before_url: step.before_url,
36
+ after_url: step.after_url,
37
+ error: step.error,
38
+ });
39
+ /** Select events attributed to one scenario step without sequence metadata. */
40
+ export const eventsFor = (capture, stepIndex) => capture.events.items.flatMap(({ sequence: _sequence, step_index: eventStepIndex, ...event }) => eventStepIndex === stepIndex ? [event] : []);
41
+ /** Wrap one value as captured comparison evidence. */
42
+ export const captured = (value) => ({
43
+ state: "captured",
44
+ value,
45
+ });
46
+ /** Retain stable screenshot identity without embedding image bytes. */
47
+ export const screenshotProjection = (screenshot) => ({
48
+ sha256: screenshot.sha256,
49
+ bytes: screenshot.bytes,
50
+ media_type: screenshot.media_type,
51
+ });
@@ -25,26 +25,22 @@ const normalizationRuleSchema = z.strictObject({
25
25
  .string()
26
26
  .trim()
27
27
  .min(1)
28
- .max(64)
29
28
  .describe("Stable rule identity; rules execute in rule_id order."),
30
29
  artifacts: z
31
30
  .array(normalizableArtifactKindSchema)
32
31
  .min(1)
33
- .max(7)
34
32
  .describe("Artifact families whose durable string fields use this rule."),
35
33
  match: z
36
34
  .string()
37
35
  .min(1)
38
- .max(4_096)
39
36
  .describe("Exact public literal to replace; regular expressions are not used."),
40
37
  replacement: z
41
38
  .string()
42
- .max(4_096)
43
39
  .describe("Recorded replacement text used in normalized comparison."),
44
40
  });
45
41
  const normalizationInputSchema = z
46
42
  .strictObject({
47
- rules: z.array(normalizationRuleSchema).max(128).default([]),
43
+ rules: z.array(normalizationRuleSchema).default([]),
48
44
  })
49
45
  .superRefine((normalization, context) => {
50
46
  const ruleIds = new Set();
@@ -70,14 +66,7 @@ export const compareBrowserScenariosInputSchema = z.strictObject({
70
66
  after_scenario: browserScenarioCaptureSchema.describe("Later complete capture_browser_scenario result."),
71
67
  normalization: normalizationInputSchema
72
68
  .default({ rules: [] })
73
- .describe("Bounded exact-literal rules committed in the comparison result."),
74
- max_changes: z
75
- .number()
76
- .int()
77
- .min(1)
78
- .max(20_000)
79
- .default(2_000)
80
- .describe("Maximum changed or unknown artifact records to retain."),
69
+ .describe("Exact-literal rules committed in the comparison result."),
81
70
  });
82
71
  const evidenceStateSchema = z.enum([
83
72
  "captured",
@@ -98,7 +87,7 @@ const artifactDiffSchema = z.strictObject({
98
87
  .string()
99
88
  .regex(/^[a-f0-9]{64}$/u)
100
89
  .nullable(),
101
- reason: z.string().min(1).max(2_048).nullable(),
90
+ reason: z.string().min(1).nullable(),
102
91
  });
103
92
  const alignmentFailureSchema = z.strictObject({
104
93
  code: z.enum([
@@ -109,8 +98,8 @@ const alignmentFailureSchema = z.strictObject({
109
98
  "action_mismatch",
110
99
  "capture_context_mismatch",
111
100
  ]),
112
- step_id: z.string().min(1).max(64).nullable(),
113
- reason: z.string().min(1).max(2_048),
101
+ step_id: z.string().min(1).nullable(),
102
+ reason: z.string().min(1),
114
103
  });
115
104
  const builtInNormalizationSchema = z.enum([
116
105
  "ignore_step_elapsed_ms",
@@ -119,39 +108,33 @@ const builtInNormalizationSchema = z.enum([
119
108
  "compare_screenshot_content_digest",
120
109
  "compare_normalized_text_content",
121
110
  ]);
122
- /** Step alignment, recorded normalization, and bounded artifact differences. */
111
+ /** Step alignment, recorded normalization, and inline artifact differences. */
123
112
  export const browserScenarioDiffSchema = z.strictObject({
124
- schema_version: z.literal(1),
125
113
  comparison_kind: z.literal("browser_scenario"),
126
114
  overall_status: z.enum(["changed", "unchanged", "unknown"]),
127
115
  normalization: z.strictObject({
128
116
  built_in_rules: z.array(builtInNormalizationSchema).length(5),
129
- rules: z.array(normalizationRuleSchema).max(128),
117
+ rules: z.array(normalizationRuleSchema),
130
118
  sha256: z.string().regex(/^[a-f0-9]{64}$/u),
131
119
  }),
132
120
  alignment: z.strictObject({
133
121
  status: z.enum(["aligned", "partial", "failed"]),
134
- aligned_steps: z.number().int().min(0).max(129),
135
- before_only: z.array(z.string().min(1).max(64)).max(129),
136
- after_only: z.array(z.string().min(1).max(64)).max(129),
137
- failures: z.array(alignmentFailureSchema).max(520),
122
+ aligned_steps: z.number().int().min(0),
123
+ before_only: z.array(z.string().min(1)),
124
+ after_only: z.array(z.string().min(1)),
125
+ failures: z.array(alignmentFailureSchema),
138
126
  }),
139
- steps: z
140
- .array(z.strictObject({
141
- step_id: z.string().min(1).max(64),
142
- before_step_index: z.number().int().min(0).max(128),
143
- after_step_index: z.number().int().min(0).max(128),
144
- before_action: z.string().min(1).max(64),
145
- after_action: z.string().min(1).max(64),
127
+ steps: z.array(z.strictObject({
128
+ step_id: z.string().min(1),
129
+ before_step_index: z.number().int().min(0),
130
+ after_step_index: z.number().int().min(0),
131
+ before_action: z.string().min(1),
132
+ after_action: z.string().min(1),
146
133
  status: z.enum(["changed", "unchanged", "unknown"]),
147
- artifact_diffs: z.array(artifactDiffSchema).max(8),
148
- omitted_artifact_diffs: z.number().int().min(0).max(8),
149
- }))
150
- .max(129),
134
+ artifact_diffs: z.array(artifactDiffSchema),
135
+ })),
151
136
  artifact_diffs: z.strictObject({
152
- total: z.number().int().min(0).max(1_032),
153
- retained: z.number().int().min(0).max(1_032),
154
- omitted: z.number().int().min(0).max(1_032),
137
+ total: z.number().int().min(0),
155
138
  }),
156
- limitations: z.array(z.string().min(1).max(2_048)).max(64),
139
+ limitations: z.array(z.string().min(1)),
157
140
  });