rea-agents 3.0.0 → 3.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (628) hide show
  1. package/README.md +83 -108
  2. package/bridge/ghidra/ReaGhidraBridge.java +609 -841
  3. package/bridge/hopper_bridge.py +99 -344
  4. package/dist/application/AbortablePromise.js +6 -3
  5. package/dist/application/AnalysisContextQueries.js +21 -9
  6. package/dist/application/AnalysisSnapshotCache.js +0 -1
  7. package/dist/application/AnalysisSnapshotFiles.js +7 -7
  8. package/dist/application/AndroidApplicationService.js +1 -1
  9. package/dist/application/AppleApplicationService.js +1 -1
  10. package/dist/application/ArtifactExtraction.js +35 -54
  11. package/dist/application/ArtifactExtractionDestination.js +17 -0
  12. package/dist/application/ArtifactGraphConstruction.js +2 -17
  13. package/dist/application/ArtifactInventory/classify.js +2 -6
  14. package/dist/application/ArtifactInventory/hash.js +2 -20
  15. package/dist/application/ArtifactInventory/policy.js +17 -0
  16. package/dist/application/ArtifactInventory/reader.js +1 -4
  17. package/dist/application/ArtifactInventory/scanCanonical.js +8 -15
  18. package/dist/application/ArtifactInventory/scanReader.js +76 -58
  19. package/dist/application/ArtifactInventory/types.js +1 -5
  20. package/dist/application/ArtifactInventory.js +6 -14
  21. package/dist/application/AuthorizedArtifactInventory.js +3 -13
  22. package/dist/application/BinarySession.js +54 -28
  23. package/dist/application/BinarySessionComposition.js +0 -11
  24. package/dist/application/BinarySessionOpen.js +2 -1
  25. package/dist/application/BinarySessionRecords.js +24 -86
  26. package/dist/application/BinarySessionStatus.js +16 -21
  27. package/dist/application/BinaryTargetResolver.js +216 -0
  28. package/dist/application/BrowserEvidence.js +39 -57
  29. package/dist/application/BrowserObservationService.js +3 -6
  30. package/dist/application/BrowserScenarioCaptureService.js +3 -6
  31. package/dist/application/BrowserScenarioEvidence.js +3 -3
  32. package/dist/application/CallPathTracing.js +2 -36
  33. package/dist/application/CapabilityClientRequirements.js +26 -0
  34. package/dist/application/CapabilityInventory.js +143 -77
  35. package/dist/application/ClientConfigurationDocument.js +27 -0
  36. package/dist/application/ClientRegistrationStatus.js +16 -13
  37. package/dist/application/CommandShimReplay.js +14 -1
  38. package/dist/application/DirectAnalysis.js +22 -46
  39. package/dist/application/DirectAnalysisStatus.js +5 -61
  40. package/dist/application/Doctor.js +11 -32
  41. package/dist/application/DoctorDiagnostics.js +1 -2
  42. package/dist/application/DoctorScope.js +1 -1
  43. package/dist/application/ElectronActiveEvidence.js +50 -0
  44. package/dist/application/ElectronActiveObservationPort.js +1 -0
  45. package/dist/application/ElectronActiveObservationService.js +78 -0
  46. package/dist/application/ElectronBoundaryAnalysis.js +7 -8
  47. package/dist/application/ElectronBoundaryGraphContext.js +1 -1
  48. package/dist/application/ElectronBoundaryGraphIpc.js +3 -3
  49. package/dist/application/ElectronBoundaryGraphNative.js +1 -2
  50. package/dist/application/ElectronBoundaryGraphWindows.js +6 -8
  51. package/dist/application/ElectronEvidence.js +4 -7
  52. package/dist/application/ElectronObservationService.js +5 -9
  53. package/dist/application/EnhancedLiteralTracing.js +42 -65
  54. package/dist/application/EnhancedTools.js +98 -64
  55. package/dist/application/EvidenceBundleCommands.js +16 -12
  56. package/dist/application/EvidenceBundleFiles.js +9 -15
  57. package/dist/application/EvidenceLedger.js +14 -42
  58. package/dist/application/FilesystemSnapshot.js +2 -3
  59. package/dist/application/InterfaceBuilderAnalysis.js +266 -0
  60. package/dist/application/InventoryProjectionEvidence.js +4 -2
  61. package/dist/application/InvestigationProviders.js +1 -1
  62. package/dist/application/JavaScriptApplicationEvidence.js +2 -5
  63. package/dist/application/JavaScriptApplicationEvidenceGraph.js +6 -10
  64. package/dist/application/JavaScriptApplicationService.js +6 -29
  65. package/dist/application/JavaScriptApplicationWorkflowEvidence.js +5 -5
  66. package/dist/application/JavaScriptApplicationWorkflowService.js +0 -8
  67. package/dist/application/JavaScriptArtifactAnalysis.js +38 -127
  68. package/dist/application/JavaScriptArtifactFiles.js +67 -107
  69. package/dist/application/JavaScriptArtifactGraphAccumulator.js +0 -7
  70. package/dist/application/JavaScriptArtifactGraphBuilder.js +7 -58
  71. package/dist/application/JavaScriptArtifactGraphBundlers.js +1 -6
  72. package/dist/application/JavaScriptArtifactGraphContext.js +12 -39
  73. package/dist/application/JavaScriptArtifactGraphDocuments.js +4 -11
  74. package/dist/application/JavaScriptArtifactGraphEvidence.js +0 -14
  75. package/dist/application/JavaScriptArtifactGraphFindings.js +3 -3
  76. package/dist/application/JavaScriptArtifactGraphStructure.js +16 -17
  77. package/dist/application/JavaScriptArtifactPathResolution.js +61 -49
  78. package/dist/application/JavaScriptArtifactReconstruction.js +5 -10
  79. package/dist/application/JavaScriptArtifactReconstructionInput.js +2 -14
  80. package/dist/application/JavaScriptJsonModules.js +2 -2
  81. package/dist/application/JavaScriptModuleRelationships.js +22 -27
  82. package/dist/application/JavaScriptReplayPermission.js +1 -1
  83. package/dist/application/JavaScriptReplayPlanning.js +9 -3
  84. package/dist/application/JavaScriptReplayService.js +29 -47
  85. package/dist/application/JavaScriptReturnShapeProjection.js +12 -42
  86. package/dist/application/JavaScriptRuntimeObservationEvidence.js +7 -8
  87. package/dist/application/JavaScriptRuntimeObservationService.js +4 -8
  88. package/dist/application/JavaScriptRuntimeReconciliationEvidence.js +2 -3
  89. package/dist/application/JavaScriptSemanticGraphBuilder.js +11 -41
  90. package/dist/application/JavaScriptSemanticGraphConstruction.js +5 -29
  91. package/dist/application/JavaScriptSemanticGraphEvidence.js +1 -1
  92. package/dist/application/JavaScriptSemanticGraphFingerprintProjection.js +1 -1
  93. package/dist/application/JavaScriptSemanticGraphFlowProjection.js +0 -13
  94. package/dist/application/JavaScriptSemanticGraphProjection.js +1 -3
  95. package/dist/application/JavaScriptSemanticTraceService.js +1 -10
  96. package/dist/application/JsonFiles.js +79 -0
  97. package/dist/application/LinuxHopper.js +11 -9
  98. package/dist/application/LoopbackReplay.js +26 -23
  99. package/dist/application/LoopbackReplayRecorder.js +29 -1
  100. package/dist/application/ManagedApplicationGraphService.js +1 -2
  101. package/dist/application/ManagedMemberComparisonService.js +11 -41
  102. package/dist/application/ManagedNativeVerificationService.js +1 -2
  103. package/dist/application/ManagedReconstructionService.js +1 -1
  104. package/dist/application/ManagedRuntimeCorrelationService.js +14 -13
  105. package/dist/application/NativeApiInspection.js +2 -7
  106. package/dist/application/NativeUiActionTrace.js +394 -0
  107. package/dist/application/NodeRuntimeCharacterizationService.js +11 -16
  108. package/dist/application/PermissionAuthority.js +15 -7
  109. package/dist/application/PermissionFailure.js +5 -0
  110. package/dist/application/ProcessCaptureAuthority.js +5 -7
  111. package/dist/application/ProcessCaptureJournal.js +3 -2
  112. package/dist/application/ProcessCaptureLifecycle.js +10 -12
  113. package/dist/application/ProcessCheckpoints.js +29 -11
  114. package/dist/application/ProcessCli.js +8 -17
  115. package/dist/application/ProcessEvidence.js +5 -7
  116. package/dist/application/ProcessHarness.js +60 -20
  117. package/dist/application/ProcessNormalization.js +2 -1
  118. package/dist/application/ProcessReactiveCoordinator.js +2 -4
  119. package/dist/application/ProcessReactiveEffects.js +9 -3
  120. package/dist/application/ProcessReactiveHarness.js +13 -7
  121. package/dist/application/ProcessSampling.js +2 -4
  122. package/dist/application/ProcessTimer.js +39 -0
  123. package/dist/application/ProjectPermissionStore.js +39 -95
  124. package/dist/application/RealHopperAssertions.js +20 -66
  125. package/dist/application/ReconstructionCoverageService.js +12 -58
  126. package/dist/application/ReconstructionObligationAuthority.js +2 -2
  127. package/dist/application/ReconstructionObligationCandidates.js +4 -4
  128. package/dist/application/ReconstructionObligationLedgerEvaluation.js +8 -15
  129. package/dist/application/ReconstructionObligationLedgerProjection.js +3 -7
  130. package/dist/application/ReconstructionObligationLedgerService.js +19 -38
  131. package/dist/application/ReferenceSourceImport.js +21 -47
  132. package/dist/application/ReferenceSourceImportEntries.js +2 -4
  133. package/dist/application/ReferenceSourceImportPolicy.js +5 -32
  134. package/dist/application/ReferenceSourceImportTypes.js +0 -16
  135. package/dist/application/RuntimeExecutableDiagnostics.js +55 -29
  136. package/dist/application/SessionProviderRouter.js +2 -2
  137. package/dist/application/Setup.js +1 -3
  138. package/dist/application/SetupClientConfiguration.js +22 -88
  139. package/dist/application/SetupRegistrationEnvironment.js +0 -7
  140. package/dist/application/StoreFileLock.js +119 -0
  141. package/dist/application/TerminalRenderer.js +2 -3
  142. package/dist/application/Uninstall.js +9 -14
  143. package/dist/application/UnknownEvidence.js +1 -1
  144. package/dist/application/WindowsCapabilities.js +5 -4
  145. package/dist/artifacts/ArtifactPaths.js +2 -5
  146. package/dist/artifacts/ArtifactProvider.js +43 -67
  147. package/dist/artifacts/DirectoryArtifactReader.js +13 -8
  148. package/dist/artifacts/MachOSliceArtifactReader.js +1 -5
  149. package/dist/artifacts/NativeDmgArtifactReader.js +11 -11
  150. package/dist/artifacts/NibArchive.js +269 -0
  151. package/dist/artifacts/SafeOutputTree.js +21 -31
  152. package/dist/browser/BrowserProcessStartup.js +1 -2
  153. package/dist/browser/CdpAuthorizedMainFrame.js +16 -0
  154. package/dist/browser/CdpBrowserProvider.js +3 -13
  155. package/dist/browser/CdpCanonicalJsonDigest.js +9 -0
  156. package/dist/browser/CdpCaptureDocuments.js +28 -76
  157. package/dist/browser/CdpCaptureEventBodyShapes.js +13 -33
  158. package/dist/browser/CdpCaptureEventHandlers.js +22 -87
  159. package/dist/browser/CdpCaptureEvents.js +2 -8
  160. package/dist/browser/CdpCaptureStorage.js +9 -20
  161. package/dist/browser/CdpCaptureStorageFingerprints.js +85 -95
  162. package/dist/browser/CdpCaptureValues.js +21 -21
  163. package/dist/browser/CdpConnection.js +10 -25
  164. package/dist/browser/CdpElectronInspection.js +29 -51
  165. package/dist/browser/CdpElectronProvider.js +10 -35
  166. package/dist/browser/CdpElectronScriptEvents.js +8 -16
  167. package/dist/browser/CdpElectronScripts.js +6 -35
  168. package/dist/browser/CdpElectronWorkers.js +6 -10
  169. package/dist/browser/CdpEndpoint.js +25 -41
  170. package/dist/browser/CdpObservationSession.js +14 -26
  171. package/dist/browser/CdpPageCapture.js +34 -48
  172. package/dist/browser/CdpPageCaptureScripts.js +1 -19
  173. package/dist/browser/CdpPageCaptureWorkers.js +6 -10
  174. package/dist/browser/CdpSafeMetadata.js +19 -22
  175. package/dist/browser/CdpScreenshot.js +3 -5
  176. package/dist/browser/CdpTargetSession.js +1 -2
  177. package/dist/browser/CdpWebMcpDiscovery.js +13 -22
  178. package/dist/browser/ElectronFileScope.js +8 -19
  179. package/dist/browser/JavaScriptRuntimeScope.js +10 -10
  180. package/dist/browser/PlaywrightBrowserScenarioProvider.js +31 -64
  181. package/dist/browser/PlaywrightElectronActiveActions.js +309 -0
  182. package/dist/browser/PlaywrightElectronActiveProvider.js +274 -0
  183. package/dist/browser/PlaywrightExecutionBoundary.js +16 -5
  184. package/dist/browser/PlaywrightScenarioActions.js +3 -7
  185. package/dist/browser/PlaywrightScenarioArtifacts.js +23 -92
  186. package/dist/browser/PlaywrightScenarioBrowser.js +7 -9
  187. package/dist/browser/PlaywrightScenarioEvents.js +45 -94
  188. package/dist/browser/PlaywrightScenarioSession.js +18 -34
  189. package/dist/browser/PngVisualDiff.js +22 -14
  190. package/dist/browser/SensitiveTextCapture.js +1 -18
  191. package/dist/browser/V8InspectorCaptureProjection.js +7 -7
  192. package/dist/browser/V8InspectorEndpoint.js +12 -14
  193. package/dist/browser/V8InspectorProvider.js +20 -61
  194. package/dist/browser/WebSourceMapFetcher.js +56 -176
  195. package/dist/catalogIdentity.js +12 -60
  196. package/dist/cli/artifactCommands.js +49 -77
  197. package/dist/cli/coreAnalysisCommands.js +83 -133
  198. package/dist/cli/javascriptApplicationAnalysis.js +1 -9
  199. package/dist/cli/managedCommands.js +6 -271
  200. package/dist/cli/setupCommands.js +3 -12
  201. package/dist/cli/utilityCommands.js +7 -41
  202. package/dist/cli.js +0 -2
  203. package/dist/cliApplicationCommands.js +44 -114
  204. package/dist/cliBrowserAdvancedCommands.js +12 -102
  205. package/dist/cliBrowserCommands.js +19 -124
  206. package/dist/cliBrowserContext.js +30 -0
  207. package/dist/cliCommandNames.js +5 -5
  208. package/dist/cliElectronCommands.js +49 -71
  209. package/dist/cliEvidenceCommands.js +8 -77
  210. package/dist/cliJavaScriptRuntimeCommands.js +18 -92
  211. package/dist/cliJsonInput.js +4 -14
  212. package/dist/cliObservationOptions.js +11 -92
  213. package/dist/cliPolicyCommands.js +2 -16
  214. package/dist/cliProcessCommands.js +3 -3
  215. package/dist/cliSetup.js +0 -13
  216. package/dist/config/browserScenario.js +77 -0
  217. package/dist/config/electronAutomation.js +35 -0
  218. package/dist/config/environment.js +6 -9
  219. package/dist/config/javascriptReplay.js +41 -0
  220. package/dist/config/managedRuntime.js +25 -0
  221. package/dist/config/parseConfig.js +56 -232
  222. package/dist/config/parsers.js +16 -28
  223. package/dist/config/passiveObservation.js +87 -0
  224. package/dist/config/permissions.js +0 -7
  225. package/dist/config/processCapture.js +47 -0
  226. package/dist/contracts/analysisSearchContract.js +2 -5
  227. package/dist/contracts/applicationToolContracts.js +58 -114
  228. package/dist/contracts/applicationWorkflowInputContracts.js +29 -114
  229. package/dist/contracts/artifactComparisonExample.js +58 -60
  230. package/dist/contracts/artifactToolContracts.js +37 -91
  231. package/dist/contracts/browserScenarioToolContracts.js +6 -51
  232. package/dist/contracts/browserToolContracts.js +10 -75
  233. package/dist/contracts/electronToolContracts.js +27 -98
  234. package/dist/contracts/enhancedInputs.js +31 -78
  235. package/dist/contracts/errorSchemas.js +0 -1
  236. package/dist/contracts/functionComparisonExample.js +10 -24
  237. package/dist/contracts/functionInstructionContract.js +1 -3
  238. package/dist/contracts/functionWorkflowToolContracts.js +4 -5
  239. package/dist/contracts/hopperMemoryContracts.js +3 -3
  240. package/dist/contracts/investigationExamples.js +14 -11
  241. package/dist/contracts/javascriptApplicationWorkflowExamples.js +12 -19
  242. package/dist/contracts/javascriptRuntimeObservationToolContracts.js +2 -20
  243. package/dist/contracts/javascriptRuntimeReconciliationExample.js +45 -12
  244. package/dist/contracts/managedToolContracts.js +10 -104
  245. package/dist/contracts/managedWorkflowExamples.js +77 -125
  246. package/dist/contracts/managedWorkflowToolContracts.js +51 -74
  247. package/dist/contracts/nativeToolContracts.js +9 -14
  248. package/dist/contracts/processCaptureExample.js +2 -69
  249. package/dist/contracts/promptContracts.js +49 -67
  250. package/dist/contracts/providerSelection.js +0 -1
  251. package/dist/contracts/reconstructionReadinessExample.js +1 -6
  252. package/dist/contracts/sessionStatusContract.js +1 -17
  253. package/dist/contracts/sessionToolSchemas.js +52 -0
  254. package/dist/contracts/toolContractExamples.js +11 -10
  255. package/dist/contracts/toolContractHelpers.js +19 -0
  256. package/dist/contracts/toolContracts.js +60 -143
  257. package/dist/contracts/toolEffects.js +16 -9
  258. package/dist/contracts/toolOutputSchemaGroups.js +47 -86
  259. package/dist/contracts/toolOutputSchemaPrimitives.js +72 -62
  260. package/dist/contracts/toolSchemaMetadata.js +117 -0
  261. package/dist/contracts/unknownContractExamples.js +0 -2
  262. package/dist/doctorRuntime.js +1 -1
  263. package/dist/domain/analysisErrorPresentation.js +46 -54
  264. package/dist/domain/analysisErrorProjection.js +28 -37
  265. package/dist/domain/analysisProfile.js +3 -31
  266. package/dist/domain/analysisSnapshot.js +3 -12
  267. package/dist/domain/androidApplication.js +15 -52
  268. package/dist/domain/appleApplication.js +24 -65
  269. package/dist/domain/artifactComparison.js +11 -29
  270. package/dist/domain/artifactGraph.js +14 -44
  271. package/dist/domain/artifactInspection.js +38 -69
  272. package/dist/domain/artifactInventoryEvidence.js +27 -21
  273. package/dist/domain/binaryTarget.js +2 -219
  274. package/dist/domain/binaryTargetTypes.js +1 -0
  275. package/dist/domain/browserCaptureComparison.js +35 -60
  276. package/dist/domain/browserObservation.js +45 -197
  277. package/dist/domain/browserObservationSchemas.js +5 -23
  278. package/dist/domain/browserScenario.js +11 -14
  279. package/dist/domain/browserScenarioCapture.js +11 -12
  280. package/dist/domain/browserScenarioCaptureValues.js +146 -84
  281. package/dist/domain/browserScenarioDiff.js +2 -59
  282. package/dist/domain/browserScenarioDiffEvidence.js +51 -0
  283. package/dist/domain/browserScenarioDiffValues.js +21 -38
  284. package/dist/domain/browserScenarioValues.js +80 -109
  285. package/dist/domain/browserSession.js +4 -7
  286. package/dist/domain/bundleComparison.js +6 -32
  287. package/dist/domain/bytecodeProvider.js +53 -54
  288. package/dist/domain/callPath.js +50 -169
  289. package/dist/domain/callPathSchemas.js +79 -0
  290. package/dist/domain/changedBehavior.js +34 -60
  291. package/dist/domain/completionLedgerGeneration.js +8 -14
  292. package/dist/domain/conformancePackage.js +126 -97
  293. package/dist/domain/conformanceReplay.js +39 -11
  294. package/dist/domain/conformanceTrustGate.js +174 -30
  295. package/dist/domain/customProtocolCapture.js +4 -4
  296. package/dist/domain/electronActiveObservation.js +244 -0
  297. package/dist/domain/electronObservation.js +21 -83
  298. package/dist/domain/electronStaticAnalysisBrowser.js +36 -46
  299. package/dist/domain/electronStaticAnalysisIpc.js +38 -14
  300. package/dist/domain/electronStaticAnalysisNative.js +1 -8
  301. package/dist/domain/electronStaticAnalysisValues.js +14 -18
  302. package/dist/domain/errors.js +33 -54
  303. package/dist/domain/eventProcessTree.js +101 -90
  304. package/dist/domain/evidence.js +2 -10
  305. package/dist/domain/evidenceBundle.js +3 -5
  306. package/dist/domain/evidenceCompletionLedger.js +6 -8
  307. package/dist/domain/functionComparison.js +4 -14
  308. package/dist/domain/functionComparisonNormalization.js +8 -8
  309. package/dist/domain/functionComparisonResults.js +25 -15
  310. package/dist/domain/functionComparisonSchemas.js +49 -33
  311. package/dist/domain/functionDossierEvidence.js +31 -151
  312. package/dist/domain/hopperStartupFailure.js +1 -1
  313. package/dist/domain/hopperValues.js +17 -141
  314. package/dist/domain/inputIssueProjection.js +4 -1
  315. package/dist/domain/interfaceBuilderGraph.js +654 -0
  316. package/dist/domain/javascriptApplicationAnalysis.js +8 -112
  317. package/dist/domain/javascriptApplicationChangeGraph.js +22 -82
  318. package/dist/domain/javascriptApplicationEvidenceSchemas.js +59 -47
  319. package/dist/domain/javascriptApplicationGraph.js +3 -13
  320. package/dist/domain/javascriptApplicationGraphSchemas.js +12 -34
  321. package/dist/domain/javascriptApplicationVersionComparison.js +26 -30
  322. package/dist/domain/javascriptApplicationVersionComparisonSchemas.js +123 -68
  323. package/dist/domain/javascriptApplicationVersionItems.js +120 -53
  324. package/dist/domain/javascriptApplicationVersionKeys.js +24 -11
  325. package/dist/domain/javascriptAstFingerprint.js +25 -58
  326. package/dist/domain/javascriptAstValues.js +9 -0
  327. package/dist/domain/javascriptExportInstrumentation.js +2 -4
  328. package/dist/domain/javascriptExportShapeComparison.js +6 -7
  329. package/dist/domain/javascriptExportShapeComparisonSchemas.js +70 -77
  330. package/dist/domain/javascriptExportShapeSelection.js +17 -19
  331. package/dist/domain/javascriptFeatureSeed.js +20 -12
  332. package/dist/domain/javascriptFeatureTrace.js +13 -67
  333. package/dist/domain/javascriptFeatureTraceSchemas.js +24 -52
  334. package/dist/domain/javascriptFeatureTraversal.js +1 -44
  335. package/dist/domain/javascriptNativeHandoff.js +1 -1
  336. package/dist/domain/javascriptReplay.js +100 -101
  337. package/dist/domain/javascriptRuntimeLoadState.js +3 -8
  338. package/dist/domain/javascriptRuntimeObservation.js +43 -103
  339. package/dist/domain/javascriptRuntimeReconciliation.js +1 -3
  340. package/dist/domain/javascriptRuntimeReconciliationActive.js +80 -0
  341. package/dist/domain/javascriptRuntimeReconciliationGraph.js +21 -33
  342. package/dist/domain/javascriptRuntimeReconciliationMatching.js +75 -61
  343. package/dist/domain/javascriptRuntimeReconciliationParsing.js +21 -46
  344. package/dist/domain/javascriptRuntimeReconciliationResult.js +25 -19
  345. package/dist/domain/javascriptRuntimeReconciliationRuntime.js +8 -12
  346. package/dist/domain/javascriptRuntimeReconciliationSchemas.js +34 -49
  347. package/dist/domain/javascriptRuntimeStaticCandidates.js +3 -3
  348. package/dist/domain/javascriptSemanticAnalysis.js +12 -45
  349. package/dist/domain/javascriptSemanticAsyncEffects.js +1 -9
  350. package/dist/domain/javascriptSemanticCallResolution.js +6 -16
  351. package/dist/domain/javascriptSemanticCalls.js +5 -32
  352. package/dist/domain/javascriptSemanticChildProcesses.js +1 -11
  353. package/dist/domain/javascriptSemanticCoverage.js +11 -0
  354. package/dist/domain/javascriptSemanticDataEffectHelpers.js +1 -8
  355. package/dist/domain/javascriptSemanticDataEffects.js +1 -11
  356. package/dist/domain/javascriptSemanticFingerprints.js +3 -5
  357. package/dist/domain/javascriptSemanticGraphSchemas.js +25 -51
  358. package/dist/domain/javascriptSemanticGraphSerialization.js +2 -13
  359. package/dist/domain/javascriptSemanticIr.js +1 -29
  360. package/dist/domain/javascriptSemanticObjects.js +1 -5
  361. package/dist/domain/javascriptSemanticPrimitives.js +2 -9
  362. package/dist/domain/javascriptSemanticProjection.js +0 -18
  363. package/dist/domain/javascriptSemanticPromises.js +9 -16
  364. package/dist/domain/javascriptSemanticProvenance.js +16 -19
  365. package/dist/domain/javascriptSemanticQuery.js +17 -139
  366. package/dist/domain/javascriptSemanticQueryAssessment.js +9 -37
  367. package/dist/domain/javascriptSemanticQueryIdentity.js +2 -23
  368. package/dist/domain/javascriptSemanticQuerySchemas.js +14 -107
  369. package/dist/domain/javascriptSemanticResources.js +1 -6
  370. package/dist/domain/javascriptSemanticReturns.js +10 -27
  371. package/dist/domain/javascriptSemanticValueTypes.js +1 -0
  372. package/dist/domain/javascriptSemanticValues.js +44 -62
  373. package/dist/domain/javascriptStaticAnalysis.js +21 -43
  374. package/dist/domain/javascriptStaticAnalysisBundler.js +34 -93
  375. package/dist/domain/javascriptStaticAnalysisCalls.js +17 -16
  376. package/dist/domain/javascriptStaticAnalysisFindings.js +3 -19
  377. package/dist/domain/javascriptStaticAnalysisHelpers.js +47 -88
  378. package/dist/domain/javascriptStaticAnalysisState.js +1 -5
  379. package/dist/domain/javascriptStaticAnalysisTypes.js +1 -0
  380. package/dist/domain/jsonShape.js +7 -33
  381. package/dist/domain/localPath.js +7 -0
  382. package/dist/domain/managedApplicationGraph.js +9 -41
  383. package/dist/domain/managedApplicationGraphCoverage.js +24 -156
  384. package/dist/domain/managedApplicationGraphNodes.js +10 -13
  385. package/dist/domain/managedArtifact.js +14 -27
  386. package/dist/domain/managedMemberComparison.js +90 -92
  387. package/dist/domain/managedMemberComparisonCoverage.js +11 -33
  388. package/dist/domain/managedMemberComparisonItems.js +221 -0
  389. package/dist/domain/managedMemberComparisonMatch.js +8 -208
  390. package/dist/domain/managedNativeVerification.js +3 -6
  391. package/dist/domain/managedNativeVerificationMatch.js +55 -59
  392. package/dist/domain/managedNativeVerificationSchemas.js +83 -47
  393. package/dist/domain/managedReconstruction.js +19 -23
  394. package/dist/domain/managedRuntimeCorrelation.js +6 -9
  395. package/dist/domain/nativeApiBoundary.js +17 -14
  396. package/dist/domain/nativeInspection.js +0 -2
  397. package/dist/domain/nativeInvestigationGraph.js +351 -0
  398. package/dist/domain/nativeValueFlow.js +61 -0
  399. package/dist/domain/nodeRuntimeCharacterization.js +15 -18
  400. package/dist/domain/objcSwiftMetadata.js +254 -0
  401. package/dist/domain/peInspection.js +1 -1
  402. package/dist/domain/permissionPolicy.js +13 -0
  403. package/dist/domain/processCapture.js +76 -113
  404. package/dist/domain/processCaptureExample.js +68 -0
  405. package/dist/domain/processCaptureParsing.js +21 -0
  406. package/dist/domain/processCaptureReactiveSchema.js +68 -0
  407. package/dist/domain/processCaptureReactiveValidation.js +8 -3
  408. package/dist/domain/processCaptureValidation.js +8 -10
  409. package/dist/domain/processComparison.js +12 -16
  410. package/dist/domain/processObservation.js +5 -6
  411. package/dist/domain/processReactiveMatching.js +32 -46
  412. package/dist/domain/processReactiveRuntime.js +4 -8
  413. package/dist/domain/processReactiveScenario.js +28 -94
  414. package/dist/domain/processReactiveScenarioPreflight.js +5 -30
  415. package/dist/domain/processReactiveTransition.js +42 -21
  416. package/dist/domain/processScenario.js +62 -93
  417. package/dist/domain/processTraceComparison.js +0 -7
  418. package/dist/domain/processTraceEvaluation.js +14 -4
  419. package/dist/domain/processTraceSpecification.js +11 -17
  420. package/dist/domain/protocolCapture.js +11 -9
  421. package/dist/domain/reconstructionCoverage.js +62 -129
  422. package/dist/domain/reconstructionCoverageEvaluation.js +17 -17
  423. package/dist/domain/reconstructionObligationLedgerSchemas.js +45 -72
  424. package/dist/domain/reconstructionReadiness.js +1 -2
  425. package/dist/domain/reconstructionReadinessSchemas.js +66 -40
  426. package/dist/domain/reconstructionUnknowns.js +3 -3
  427. package/dist/domain/reconstructionVerification.js +13 -47
  428. package/dist/domain/reconstructionVerificationSchemas.js +50 -38
  429. package/dist/domain/referenceSourceGraph.js +53 -61
  430. package/dist/domain/referenceSourceImportParsing.js +3 -7
  431. package/dist/domain/replayMachine.js +19 -31
  432. package/dist/domain/replayMachineRun.js +15 -63
  433. package/dist/domain/replayMachineRuntime.js +46 -44
  434. package/dist/domain/replayMachineValues.js +84 -0
  435. package/dist/domain/residualUnknown.js +25 -30
  436. package/dist/domain/runtimeCharacterization.js +15 -16
  437. package/dist/domain/runtimeIdentification.js +48 -47
  438. package/dist/domain/sourceToBundleComparison.js +11 -87
  439. package/dist/domain/sourceToBundleComparisonSchemas.js +25 -50
  440. package/dist/domain/sourceToBundleSignals.js +11 -16
  441. package/dist/domain/staticRuntimeCorrelation.js +44 -54
  442. package/dist/domain/symbolAnalysis.js +10 -19
  443. package/dist/domain/unicodeCodePointOrder.js +12 -0
  444. package/dist/domain/webBundleAnalysis.js +70 -99
  445. package/dist/domain/webBundleAnalyzer.js +2 -4
  446. package/dist/domain/webBundleAnalyzerAst.js +0 -13
  447. package/dist/domain/webBundleAnalyzerInspection.js +26 -52
  448. package/dist/domain/webBundleAnalyzerResult.js +7 -24
  449. package/dist/domain/webCaptureDiff.js +48 -85
  450. package/dist/domain/webCaptureDiffSchemas.js +86 -0
  451. package/dist/domain/webContentArtifact.js +1 -10
  452. package/dist/domain/webMcpDiscovery.js +3 -14
  453. package/dist/domain/webScreenshot.js +58 -34
  454. package/dist/domain/zipPackageFormat.js +7 -0
  455. package/dist/dotnet/ManagedArtifactInspector.js +17 -50
  456. package/dist/dotnet/ManagedMemberInspector.js +27 -58
  457. package/dist/dotnet/ManagedMemberInspectorCore.js +14 -51
  458. package/dist/dotnet/ManagedMemberInstructionDecoder.js +2 -2
  459. package/dist/dotnet/ManagedMemberRows.js +16 -16
  460. package/dist/dotnet/ManagedMetadataHeaps.js +26 -8
  461. package/dist/dotnet/ManagedMetadataInventory.js +21 -30
  462. package/dist/dotnet/ManagedMetadataInventoryRows.js +57 -63
  463. package/dist/dotnet/ManagedMetadataLayout.js +3 -5
  464. package/dist/dotnet/ManagedMethodBodyReader.js +5 -30
  465. package/dist/dotnet/ManagedNativeBoundaryHelpers.js +19 -49
  466. package/dist/dotnet/ManagedNativeBoundaryInspector.js +13 -42
  467. package/dist/dotnet/ManagedPeReader.js +2 -2
  468. package/dist/dotnet/ManagedStaticProvider.js +13 -71
  469. package/dist/generatedMcpToolCatalog.js +1 -1
  470. package/dist/generatedPackageMetadata.js +1 -1
  471. package/dist/ghidra/GhidraAnalysisProfile.js +3 -8
  472. package/dist/ghidra/GhidraClient.js +5 -13
  473. package/dist/ghidra/GhidraClientStartup.js +1 -1
  474. package/dist/ghidra/GhidraClientWire.js +9 -5
  475. package/dist/ghidra/GhidraDefaults.js +0 -18
  476. package/dist/ghidra/GhidraDiagnostics.js +0 -2
  477. package/dist/ghidra/GhidraDoctor.js +16 -12
  478. package/dist/ghidra/GhidraFunctionValues.js +67 -108
  479. package/dist/ghidra/GhidraInstallation.js +98 -42
  480. package/dist/ghidra/GhidraInventoryValues.js +18 -77
  481. package/dist/ghidra/GhidraLauncher.js +0 -8
  482. package/dist/ghidra/GhidraProvider.js +32 -31
  483. package/dist/ghidra/GhidraProviderCapabilities.js +11 -48
  484. package/dist/ghidra/GhidraRequestQueue.js +6 -30
  485. package/dist/ghidra/GhidraResponseBuffer.js +1 -7
  486. package/dist/ghidra/GhidraSessionValues.js +0 -2
  487. package/dist/ghidra/GhidraSocketConnection.js +1 -1
  488. package/dist/ghidra/GhidraTransport.js +4 -7
  489. package/dist/ghidra/protocol.js +19 -42
  490. package/dist/hopper/BridgeLauncher.js +115 -37
  491. package/dist/hopper/HopperAnalysisProfile.js +3 -5
  492. package/dist/hopper/HopperCleanup.js +11 -9
  493. package/dist/hopper/HopperClient.js +5 -8
  494. package/dist/hopper/HopperProcessDiagnostic.js +2 -2
  495. package/dist/hopper/HopperProvider.js +0 -30
  496. package/dist/hopper/HopperRequestQueue.js +21 -40
  497. package/dist/hopper/HopperResponseStream.js +1 -9
  498. package/dist/hopper/HopperSessionValues.js +3 -2
  499. package/dist/hopper/HopperTargetLease.js +119 -0
  500. package/dist/hopper/LinuxPrivateDisplayDiagnostic.js +24 -31
  501. package/dist/hopper/LinuxPrivateDisplayProbe.js +21 -26
  502. package/dist/hopper/protocol.js +6 -4
  503. package/dist/main/reload.js +1 -9
  504. package/dist/main/shutdown.js +1 -1
  505. package/dist/main/state.js +0 -23
  506. package/dist/main/transport.js +27 -39
  507. package/dist/main.js +17 -15
  508. package/dist/mcpDoctor.js +27 -69
  509. package/dist/native/CommandRunner.js +18 -25
  510. package/dist/native/NativeMacOSProvider.js +13 -38
  511. package/dist/native/NativeMachoInspection.js +1 -1
  512. package/dist/process/BoundedFileBytes.js +17 -0
  513. package/dist/process/ExecFileOutput.js +11 -0
  514. package/dist/process/PendingOperations.js +8 -6
  515. package/dist/process/PrivateRuntimeRoot.js +17 -0
  516. package/dist/process/ProcessOwnership.js +67 -130
  517. package/dist/process/ProcessOwnershipIdentity.js +13 -0
  518. package/dist/process/ProcessOwnershipObservation.js +87 -0
  519. package/dist/process/ProcessOwnershipProcessTree.js +22 -0
  520. package/dist/process/ProviderDeadline.js +8 -12
  521. package/dist/process/ProviderProcess.js +7 -28
  522. package/dist/process/WindowsAuthority.js +32 -0
  523. package/dist/reference/ReferenceSourceReader.js +8 -24
  524. package/dist/reference/ReferenceSourceReaderEntries.js +11 -39
  525. package/dist/reference/ReferenceSourceReaderFile.js +13 -31
  526. package/dist/reference/ReferenceSourceReaderPaths.js +3 -18
  527. package/dist/reference/ReferenceSourceReaderValidate.js +3 -6
  528. package/dist/replay/JavaScriptReplayWorker.js +95 -13
  529. package/dist/replay/JavaScriptReplayWorkerTypes.js +1 -0
  530. package/dist/replay/LinuxJavaScriptReplayRunner.js +42 -43
  531. package/dist/replay/LinuxJavaScriptReplaySandbox.js +0 -19
  532. package/dist/replay/LinuxRuntimeClosure.js +1 -3
  533. package/dist/replay/ReplayOutcome.js +27 -18
  534. package/dist/replay/ReplayProcessLifecycle.js +32 -7
  535. package/dist/replay/ReplaySeccompFile.js +29 -0
  536. package/dist/replay/ReplayWorkerProtocol.js +33 -30
  537. package/dist/replay/SystemJavaScriptReplayHost.js +45 -74
  538. package/dist/server/ProcessCaptureElicitation.js +4 -8
  539. package/dist/server/createServer.js +145 -119
  540. package/dist/server/mcpClientMetadata.js +32 -0
  541. package/dist/server/promptCompletion.js +37 -61
  542. package/dist/server/recordDerivedEvidence.js +1 -1
  543. package/dist/server/registerApplicationTools/characterization.js +10 -21
  544. package/dist/server/registerApplicationTools/compareExportShapes.js +6 -16
  545. package/dist/server/registerApplicationTools/compareSourceToBundle.js +6 -15
  546. package/dist/server/registerApplicationTools/compareVersions.js +6 -16
  547. package/dist/server/registerApplicationTools/controlledReplay.js +8 -15
  548. package/dist/server/registerApplicationTools/coverage.js +7 -78
  549. package/dist/server/registerApplicationTools/helpers.js +1 -13
  550. package/dist/server/registerApplicationTools/obligationLedger.js +4 -8
  551. package/dist/server/registerApplicationTools/traceFeature.js +6 -15
  552. package/dist/server/registerApplicationTools/traceSemantics.js +5 -13
  553. package/dist/server/registerApplicationTools.js +0 -2
  554. package/dist/server/registerArtifactComparisonTool.js +27 -35
  555. package/dist/server/registerBrowserScenarioTool.js +3 -8
  556. package/dist/server/registerBrowserTools.js +36 -81
  557. package/dist/server/registerBundleComparisonTool.js +10 -16
  558. package/dist/server/registerCloseLifecycleTool.js +5 -27
  559. package/dist/server/registerElectronTools.js +29 -65
  560. package/dist/server/registerEnhancedTools.js +118 -127
  561. package/dist/server/registerEvidenceTools.js +19 -30
  562. package/dist/server/registerFunctionComparisonTool.js +35 -34
  563. package/dist/server/registerInvestigationTools/helpers.js +3 -32
  564. package/dist/server/registerInvestigationTools.js +36 -148
  565. package/dist/server/registerJavaScriptRuntimeObservationTools.js +15 -27
  566. package/dist/server/registerManagedWorkflowTools/compareManagedMembers.js +16 -23
  567. package/dist/server/registerManagedWorkflowTools/contract.js +2 -3
  568. package/dist/server/registerManagedWorkflowTools/evidence.js +19 -35
  569. package/dist/server/registerManagedWorkflowTools/importManagedReconstruction.js +4 -14
  570. package/dist/server/registerManagedWorkflowTools/planManagedRuntimeCorrelation.js +4 -14
  571. package/dist/server/registerManagedWorkflowTools/projectManagedApplicationGraph.js +11 -20
  572. package/dist/server/registerManagedWorkflowTools/verifyManagedNativeBoundaries.js +10 -21
  573. package/dist/server/registerOfficialTools.js +8 -51
  574. package/dist/server/registerProcessComparisonTool.js +43 -38
  575. package/dist/server/registerPrompts.js +19 -17
  576. package/dist/server/registerReplayMachineTool.js +4 -10
  577. package/dist/server/registerSessionRecordTools.js +36 -153
  578. package/dist/server/registerSessionStatusTool.js +18 -96
  579. package/dist/server/registerSessionTools.js +34 -91
  580. package/dist/server/sessionAvailabilityPolicy.js +2 -3
  581. package/dist/server/sessionEvidence.js +9 -15
  582. package/dist/server/sessionToolPolicies.js +1 -13
  583. package/dist/server/toolRegistrationOptions.js +4 -192
  584. package/dist/server/toolResult.js +15 -67
  585. package/dist/serverIdentity.js +0 -20
  586. package/install.sh +1 -1
  587. package/package.json +27 -15
  588. package/scripts/electron-active-hook-boundaries.cjs +394 -0
  589. package/scripts/electron-active-hook.cjs +469 -0
  590. package/scripts/hopper-demo-x11.py +13 -32
  591. package/scripts/rea.mjs +1 -11
  592. package/skills/reverse-engineer-anything/SKILL.md +46 -11
  593. package/skills/reverse-engineer-anything/references/evidence-workflows.md +6 -4
  594. package/skills/reverse-engineer-anything/references/javascript-applications.md +13 -13
  595. package/skills/reverse-engineer-anything/references/native-and-artifacts.md +12 -8
  596. package/dist/application/ApplicationWorkflowEvidenceResolver.js +0 -180
  597. package/dist/application/BoundedJsonFiles.js +0 -86
  598. package/dist/application/CrossVersionInventory.js +0 -128
  599. package/dist/application/CrossVersionInvestigation.js +0 -301
  600. package/dist/application/CrossVersionInvestigationCollections.js +0 -23
  601. package/dist/application/CrossVersionInvestigationEvidence.js +0 -64
  602. package/dist/application/CrossVersionInvestigationReplay.js +0 -170
  603. package/dist/application/DeferredFileAuthorization.js +0 -61
  604. package/dist/application/DoctorProjection.js +0 -43
  605. package/dist/application/EnhancedToolPagination.js +0 -22
  606. package/dist/application/EvidenceReferenceResolver.js +0 -26
  607. package/dist/application/InvestigationWorkspaceStore.js +0 -204
  608. package/dist/application/ProcessPairedExperiment.js +0 -72
  609. package/dist/application/ReconstructionCoverageWorkspaceStore.js +0 -31
  610. package/dist/application/ReconstructionReadinessService.js +0 -48
  611. package/dist/cliInvestigationCommands.js +0 -173
  612. package/dist/domain/boundedCartesianProjection.js +0 -15
  613. package/dist/domain/investigationWorkspace.js +0 -346
  614. package/dist/domain/jsonLimits.js +0 -26
  615. package/dist/domain/knownPageCoverage.js +0 -21
  616. package/dist/domain/processPairedExperiment.js +0 -128
  617. package/dist/server/DynamicToolAvailability.js +0 -70
  618. package/dist/server/LazyToolCatalog.js +0 -134
  619. package/dist/server/hydrateServerTools.js +0 -191
  620. package/dist/server/javascriptApplicationResult.js +0 -106
  621. package/dist/server/permissionFailure.js +0 -12
  622. package/dist/server/registerApplicationTools/readiness.js +0 -55
  623. package/dist/server/registerEvidenceResources.js +0 -315
  624. package/dist/server/registerJavaScriptApplicationGraphResource.js +0 -65
  625. package/dist/server/registerReconstructionObligationLedgerResource.js +0 -32
  626. package/dist/server/registerReconstructionReadinessResource.js +0 -32
  627. package/dist/server/toolInputValidation.js +0 -77
  628. package/scripts/package-runner-bootstrap.mjs +0 -72
@@ -15,29 +15,21 @@ export const compareJavaScriptApplicationVersions = (input) => {
15
15
  rightEvidenceId: input.right.evidenceId,
16
16
  leftNativeEvidence: input.leftNativeEvidence,
17
17
  rightNativeEvidence: input.rightNativeEvidence,
18
- maxCandidates: input.limits.max_candidate_nodes,
19
18
  });
20
- const items = projection.items.slice(0, input.limits.max_comparison_items);
21
- const omittedComparisonItems = projection.items.length - items.length;
22
19
  const changeGraph = buildJavaScriptApplicationChangeGraph({
23
20
  left: input.left.graph,
24
21
  right: input.right.graph,
25
22
  leftEvidenceId: input.left.evidenceId,
26
23
  rightEvidenceId: input.right.evidenceId,
27
- items,
28
- omittedComparisonItems,
29
- limits: input.limits,
24
+ items: projection.items,
30
25
  });
31
26
  const evidenceLinks = uniqueSorted(projection.items.flatMap(({ evidence_links: links }) => links));
32
27
  const omissions = {
33
- omitted_comparison_items: omittedComparisonItems,
34
- omitted_candidate_references: projection.omittedCandidateReferences,
35
- omitted_graph_nodes: changeGraph.omittedNodes,
36
- omitted_graph_edges: changeGraph.omittedEdges,
37
- omitted_graph_observations: changeGraph.omittedObservations,
28
+ left_graph_omitted_count: input.left.graph.coverage.omitted_count,
29
+ right_graph_omitted_count: input.right.graph.coverage.omitted_count,
38
30
  };
31
+ const coverage = comparisonCoverage(input, omissions);
39
32
  const semantic = {
40
- schema_version: 1,
41
33
  left: {
42
34
  evidence_id: input.left.evidenceId,
43
35
  graph_id: input.left.graph.graph_id,
@@ -50,16 +42,11 @@ export const compareJavaScriptApplicationVersions = (input) => {
50
42
  },
51
43
  summary: summary(projection.items),
52
44
  matching: matchingSummary(projection.items),
53
- items,
45
+ items: projection.items,
54
46
  graph: changeGraph.graph,
55
- coverage: {
56
- status: comparisonCoverageStatus(input, omissions),
57
- left_graph_status: input.left.graph.coverage.status,
58
- right_graph_status: input.right.graph.coverage.status,
59
- ...omissions,
60
- },
47
+ coverage,
61
48
  evidence_links: evidenceLinks,
62
- limitations: comparisonLimitations(input, omissions),
49
+ limitations: comparisonLimitations(input),
63
50
  };
64
51
  return applicationVersionComparisonResultSchema.parse({
65
52
  ...semantic,
@@ -85,13 +72,25 @@ const matchingSummary = (items) => ({
85
72
  unmatched: items.filter(({ match }) => match.status === "unmatched").length,
86
73
  });
87
74
  const countBasis = (items, basis) => items.filter(({ match }) => match.basis === basis).length;
88
- const comparisonCoverageStatus = (input, omissions) => Object.values(omissions).some((value) => value > 0)
89
- ? "truncated"
90
- : input.left.graph.coverage.status === "complete" &&
91
- input.right.graph.coverage.status === "complete"
92
- ? "complete-within-inputs"
93
- : "partial";
94
- const comparisonLimitations = (input, omissions) => uniqueSorted([
75
+ const comparisonCoverage = (input, omissions) => {
76
+ const context = {
77
+ left_graph_status: input.left.graph.coverage.status,
78
+ right_graph_status: input.right.graph.coverage.status,
79
+ };
80
+ const sourceGraphsComplete = input.left.graph.coverage.status === "complete" &&
81
+ input.right.graph.coverage.status === "complete";
82
+ const sourceGraphsTruncated = input.left.graph.coverage.truncated || input.right.graph.coverage.truncated;
83
+ return {
84
+ ...context,
85
+ ...omissions,
86
+ status: sourceGraphsComplete
87
+ ? "complete-within-inputs"
88
+ : sourceGraphsTruncated
89
+ ? "truncated"
90
+ : "partial",
91
+ };
92
+ };
93
+ const comparisonLimitations = (input) => uniqueSorted([
95
94
  "Application comparison never uses bundler module ordinals as persistent identity and performs no fuzzy pairing.",
96
95
  "Exact digest equality proves byte identity only; source-map, structural-fingerprint, and semantic-key matches retain inferred confidence.",
97
96
  "Minified names and chunk locations are not assumed stable across versions.",
@@ -103,9 +102,6 @@ const comparisonLimitations = (input, omissions) => uniqueSorted([
103
102
  : [
104
103
  "At least one source graph is incomplete; unmatched entities on the opposite side remain unknown rather than added or removed.",
105
104
  ]),
106
- ...(Object.values(omissions).some((value) => value > 0)
107
- ? ["Comparison output was truncated at explicit caller limits."]
108
- : []),
109
105
  ]);
110
106
  const digestCanonical = (value) => {
111
107
  const encoded = canonicalize(value);
@@ -4,27 +4,14 @@ import { javascriptApplicationGraphSchema } from "./javascriptApplicationGraph.j
4
4
  import { JAVASCRIPT_APPLICATION_NODE_KINDS } from "./javascriptApplicationGraphSchemas.js";
5
5
  const evidenceIdSchema = z.string().regex(/^ev_[a-f0-9]{64}$/u);
6
6
  const nodeIdSchema = z.string().regex(/^jag_node_[a-f0-9]{64}$/u);
7
- const boundedTextSchema = z.string().min(1).max(4_096);
8
- const comparisonLimitsSchema = z.strictObject({
9
- max_comparison_items: z.number().int().min(1).max(50_000).default(20_000),
10
- max_candidate_nodes: z.number().int().min(1).max(1_000).default(100),
11
- max_graph_nodes: z.number().int().min(1).max(100_000).default(20_000),
12
- max_graph_edges: z.number().int().min(1).max(200_000).default(40_000),
13
- });
14
- /** Two authenticated application versions and deterministic output bounds. */
7
+ const textSchema = z.string().min(1);
8
+ /** Two authenticated application versions and their native observations. */
15
9
  export const compareApplicationVersionsInputSchema = z
16
10
  .strictObject({
17
11
  left: evidenceSchema,
18
12
  right: evidenceSchema,
19
- left_native_observations: z.array(evidenceSchema).max(64).default([]),
20
- right_native_observations: z.array(evidenceSchema).max(64).default([]),
21
- limits: comparisonLimitsSchema.default({
22
- max_comparison_items: 20_000,
23
- max_candidate_nodes: 100,
24
- max_graph_nodes: 20_000,
25
- max_graph_edges: 40_000,
26
- }),
27
- unknown_registry_approved: z.literal(true).optional(),
13
+ left_native_observations: z.array(evidenceSchema).default([]),
14
+ right_native_observations: z.array(evidenceSchema).default([]),
28
15
  })
29
16
  .superRefine((input, context) => {
30
17
  if (input.left.evidence_id === input.right.evidence_id)
@@ -46,44 +33,120 @@ export const compareApplicationVersionsInputSchema = z
46
33
  });
47
34
  }
48
35
  });
49
- const applicationVersionMatchBasisSchema = z.enum([
50
- "exact-node-identity",
51
- "exact-content-digest",
52
- "exact-module-source-digest",
53
- "source-map-identity",
54
- "structural-fingerprint",
55
- "semantic-key",
56
- "none",
36
+ const emptyCandidateNodesSchema = z.tuple([]);
37
+ const candidateNodesSchema = z.tuple([nodeIdSchema]).rest(nodeIdSchema);
38
+ const exactMatchSchema = z.strictObject({
39
+ status: z.literal("matched"),
40
+ basis: z.enum([
41
+ "exact-node-identity",
42
+ "exact-content-digest",
43
+ "exact-module-source-digest",
44
+ ]),
45
+ confidence: z.literal("exact"),
46
+ candidate_left_node_ids: emptyCandidateNodesSchema,
47
+ candidate_right_node_ids: emptyCandidateNodesSchema,
48
+ });
49
+ const sourceMapMatchSchema = z.strictObject({
50
+ status: z.literal("matched"),
51
+ basis: z.literal("source-map-identity"),
52
+ confidence: z.literal("high"),
53
+ candidate_left_node_ids: emptyCandidateNodesSchema,
54
+ candidate_right_node_ids: emptyCandidateNodesSchema,
55
+ });
56
+ const inferredMatchSchema = z.strictObject({
57
+ status: z.literal("matched"),
58
+ basis: z.enum(["structural-fingerprint", "semantic-key"]),
59
+ confidence: z.literal("medium"),
60
+ candidate_left_node_ids: emptyCandidateNodesSchema,
61
+ candidate_right_node_ids: emptyCandidateNodesSchema,
62
+ });
63
+ const matchedItemMatchSchema = z.union([
64
+ exactMatchSchema,
65
+ sourceMapMatchSchema,
66
+ inferredMatchSchema,
57
67
  ]);
58
- const comparisonItemSchema = z.strictObject({
68
+ const unmatchedItemMatchSchema = z.strictObject({
69
+ status: z.literal("unmatched"),
70
+ basis: z.literal("none"),
71
+ confidence: z.literal("unknown"),
72
+ candidate_left_node_ids: emptyCandidateNodesSchema,
73
+ candidate_right_node_ids: emptyCandidateNodesSchema,
74
+ });
75
+ const leftAmbiguousMatchSchema = z.strictObject({
76
+ status: z.literal("ambiguous"),
77
+ basis: z.literal("none"),
78
+ confidence: z.literal("unknown"),
79
+ candidate_left_node_ids: emptyCandidateNodesSchema,
80
+ candidate_right_node_ids: candidateNodesSchema,
81
+ });
82
+ const rightAmbiguousMatchSchema = z.strictObject({
83
+ status: z.literal("ambiguous"),
84
+ basis: z.literal("none"),
85
+ confidence: z.literal("unknown"),
86
+ candidate_left_node_ids: candidateNodesSchema,
87
+ candidate_right_node_ids: emptyCandidateNodesSchema,
88
+ });
89
+ const comparisonItemContextShape = {
59
90
  item_id: z.string().regex(/^javc_item_[a-f0-9]{64}$/u),
60
- status: z.enum(["unchanged", "added", "removed", "changed", "unknown"]),
61
91
  node_kind: z.enum(JAVASCRIPT_APPLICATION_NODE_KINDS),
62
- left_node_id: nodeIdSchema.nullable(),
63
- right_node_id: nodeIdSchema.nullable(),
64
- match: z.strictObject({
65
- status: z.enum(["matched", "unmatched", "ambiguous"]),
66
- basis: applicationVersionMatchBasisSchema,
67
- confidence: z.enum(["exact", "high", "medium", "unknown"]),
68
- candidate_left_node_ids: z.array(nodeIdSchema).max(1_000),
69
- candidate_right_node_ids: z.array(nodeIdSchema).max(1_000),
70
- }),
71
- dimensions: z
72
- .array(z.enum([
92
+ dimensions: z.array(z.enum([
73
93
  "content",
74
94
  "location",
75
95
  "properties",
76
96
  "relationships",
77
97
  "availability",
78
98
  "coverage",
79
- ]))
80
- .max(6),
81
- evidence_links: z.array(evidenceIdSchema).min(2).max(130),
82
- limitations: z.array(boundedTextSchema).max(100),
99
+ ])),
100
+ evidence_links: z.array(evidenceIdSchema).min(2),
101
+ limitations: z.array(textSchema),
102
+ };
103
+ const comparisonItemSchema = z.union([
104
+ z.strictObject({
105
+ ...comparisonItemContextShape,
106
+ status: z.enum(["unchanged", "changed", "unknown"]),
107
+ left_node_id: nodeIdSchema,
108
+ right_node_id: nodeIdSchema,
109
+ match: matchedItemMatchSchema,
110
+ }),
111
+ z.strictObject({
112
+ ...comparisonItemContextShape,
113
+ status: z.enum(["removed", "unknown"]),
114
+ left_node_id: nodeIdSchema,
115
+ right_node_id: z.null(),
116
+ match: unmatchedItemMatchSchema,
117
+ }),
118
+ z.strictObject({
119
+ ...comparisonItemContextShape,
120
+ status: z.enum(["added", "unknown"]),
121
+ left_node_id: z.null(),
122
+ right_node_id: nodeIdSchema,
123
+ match: unmatchedItemMatchSchema,
124
+ }),
125
+ z.strictObject({
126
+ ...comparisonItemContextShape,
127
+ status: z.literal("unknown"),
128
+ left_node_id: nodeIdSchema,
129
+ right_node_id: z.null(),
130
+ match: leftAmbiguousMatchSchema,
131
+ }),
132
+ z.strictObject({
133
+ ...comparisonItemContextShape,
134
+ status: z.literal("unknown"),
135
+ left_node_id: z.null(),
136
+ right_node_id: nodeIdSchema,
137
+ match: rightAmbiguousMatchSchema,
138
+ }),
139
+ ]);
140
+ const comparisonCoverageSchema = z.strictObject({
141
+ left_graph_status: z.enum(["complete", "partial", "unknown", "unavailable"]),
142
+ right_graph_status: z.enum(["complete", "partial", "unknown", "unavailable"]),
143
+ left_graph_omitted_count: z.number().int().min(0).nullable(),
144
+ right_graph_omitted_count: z.number().int().min(0).nullable(),
145
+ status: z.enum(["complete-within-inputs", "partial", "truncated"]),
83
146
  });
84
- /** Tiered module/entity matching plus a bounded cross-version change graph. */
85
- export const applicationVersionComparisonResultSchema = z.strictObject({
86
- schema_version: z.literal(1),
147
+ /** Tiered module/entity matching plus its complete cross-version change graph. */
148
+ export const applicationVersionComparisonResultSchema = z
149
+ .strictObject({
87
150
  comparison_id: z.string().regex(/^javc_[a-f0-9]{64}$/u),
88
151
  left: z.strictObject({
89
152
  evidence_id: evidenceIdSchema,
@@ -112,28 +175,20 @@ export const applicationVersionComparisonResultSchema = z.strictObject({
112
175
  ambiguous: z.number().int().min(0),
113
176
  unmatched: z.number().int().min(0),
114
177
  }),
115
- items: z.array(comparisonItemSchema).max(50_000),
178
+ items: z.array(comparisonItemSchema),
116
179
  graph: javascriptApplicationGraphSchema,
117
- coverage: z.strictObject({
118
- status: z.enum(["complete-within-inputs", "partial", "truncated"]),
119
- left_graph_status: z.enum([
120
- "complete",
121
- "partial",
122
- "unknown",
123
- "unavailable",
124
- ]),
125
- right_graph_status: z.enum([
126
- "complete",
127
- "partial",
128
- "unknown",
129
- "unavailable",
130
- ]),
131
- omitted_comparison_items: z.number().int().min(0),
132
- omitted_candidate_references: z.number().int().min(0),
133
- omitted_graph_nodes: z.number().int().min(0),
134
- omitted_graph_edges: z.number().int().min(0),
135
- omitted_graph_observations: z.number().int().min(0),
136
- }),
137
- evidence_links: z.array(evidenceIdSchema).min(2).max(130),
138
- limitations: z.array(boundedTextSchema).max(1_000),
180
+ coverage: comparisonCoverageSchema,
181
+ evidence_links: z.array(evidenceIdSchema).min(2),
182
+ limitations: z.array(textSchema),
183
+ })
184
+ .superRefine((result, context) => {
185
+ const sourceGraphsComplete = result.coverage.left_graph_status === "complete" &&
186
+ result.coverage.right_graph_status === "complete";
187
+ if ((result.coverage.status === "complete-within-inputs") !==
188
+ sourceGraphsComplete)
189
+ context.addIssue({
190
+ code: "custom",
191
+ path: ["coverage", "status"],
192
+ message: "Comparison coverage must match source graph completeness",
193
+ });
139
194
  });
@@ -12,16 +12,19 @@ export const classifyJavaScriptApplicationVersions = (matching, context) => {
12
12
  `pair:${left.node_id}:${right.node_id}`,
13
13
  ]));
14
14
  const fullContext = { ...context, pairByLeft, pairByRight };
15
- let omittedCandidateReferences = 0;
16
15
  const leftItems = matching.unmatchedLeft.map((node) => {
17
16
  const candidates = matching.candidatesForLeft.get(node.node_id) ?? [];
18
- omittedCandidateReferences += Math.max(0, candidates.length - context.maxCandidates);
19
- return unmatchedItem(node, "left", candidates.slice(0, context.maxCandidates), fullContext);
17
+ return unmatchedItem({
18
+ left: node,
19
+ candidateRightNodeIds: candidates,
20
+ }, fullContext);
20
21
  });
21
22
  const rightItems = matching.unmatchedRight.map((node) => {
22
23
  const candidates = matching.candidatesForRight.get(node.node_id) ?? [];
23
- omittedCandidateReferences += Math.max(0, candidates.length - context.maxCandidates);
24
- return unmatchedItem(node, "right", candidates.slice(0, context.maxCandidates), fullContext);
24
+ return unmatchedItem({
25
+ right: node,
26
+ candidateLeftNodeIds: candidates,
27
+ }, fullContext);
25
28
  });
26
29
  return {
27
30
  items: [
@@ -29,7 +32,6 @@ export const classifyJavaScriptApplicationVersions = (matching, context) => {
29
32
  ...leftItems,
30
33
  ...rightItems,
31
34
  ].sort((left, right) => compareCodePoints(left.item_id, right.item_id)),
32
- omittedCandidateReferences,
33
35
  };
34
36
  };
35
37
  const matchedItem = (pair, context) => {
@@ -49,62 +51,127 @@ const matchedItem = (pair, context) => {
49
51
  node_kind: pair.left.kind,
50
52
  left_node_id: pair.left.node_id,
51
53
  right_node_id: pair.right.node_id,
52
- match: {
53
- status: "matched",
54
- basis: pair.basis,
55
- confidence: pair.confidence,
56
- candidate_left_node_ids: [],
57
- candidate_right_node_ids: [],
58
- },
54
+ match: matchedMatch(pair),
59
55
  dimensions: finalDimensions,
60
56
  evidence_links: itemEvidenceLinks(pair.left, pair.right, context),
61
57
  limitations: pairLimitations(pair, status),
62
58
  };
63
59
  return itemWithId(semantic);
64
60
  };
65
- const unmatchedItem = (node, side, candidates, context) => {
66
- const ambiguous = candidates.length > 0;
67
- const oppositeComplete = (side === "left" ? context.rightGraph : context.leftGraph).coverage
68
- .status === "complete";
69
- const status = ambiguous
70
- ? "unknown"
71
- : oppositeComplete
72
- ? side === "left"
73
- ? "removed"
74
- : "added"
75
- : "unknown";
76
- const semantic = {
77
- status,
61
+ const unmatchedItem = (member, context) => member.left === undefined
62
+ ? rightOnlyItem(member.right, member.candidateLeftNodeIds, context)
63
+ : leftOnlyItem(member.left, member.candidateRightNodeIds, context);
64
+ const leftOnlyItem = (node, candidateNodeIds, context) => {
65
+ const [firstCandidate, ...remainingCandidates] = candidateNodeIds;
66
+ const common = {
78
67
  node_kind: node.kind,
79
- left_node_id: side === "left" ? node.node_id : null,
80
- right_node_id: side === "right" ? node.node_id : null,
81
- match: {
82
- status: ambiguous ? "ambiguous" : "unmatched",
83
- basis: "none",
84
- confidence: "unknown",
85
- candidate_left_node_ids: side === "right" ? [...candidates] : [],
86
- candidate_right_node_ids: side === "left" ? [...candidates] : [],
87
- },
88
- dimensions: [
89
- "availability",
90
- ...(status === "unknown" && !ambiguous ? ["coverage"] : []),
91
- ],
92
- evidence_links: itemEvidenceLinks(side === "left" ? node : undefined, side === "right" ? node : undefined, context),
93
- limitations: [
94
- ...(ambiguous
95
- ? [
96
- "Multiple nodes share the same permitted match key; no cross-version pair was selected.",
97
- ]
98
- : []),
99
- ...(status === "unknown" && !ambiguous
100
- ? [
101
- "The opposite graph is incomplete, so an unmatched node cannot be classified as added or removed.",
102
- ]
103
- : []),
104
- ],
68
+ evidence_links: itemEvidenceLinks(node, undefined, context),
105
69
  };
106
- return itemWithId(semantic);
70
+ if (firstCandidate !== undefined)
71
+ return itemWithId({
72
+ ...common,
73
+ status: "unknown",
74
+ left_node_id: node.node_id,
75
+ right_node_id: null,
76
+ match: {
77
+ status: "ambiguous",
78
+ basis: "none",
79
+ confidence: "unknown",
80
+ candidate_left_node_ids: [],
81
+ candidate_right_node_ids: [firstCandidate, ...remainingCandidates],
82
+ },
83
+ dimensions: ["availability"],
84
+ limitations: [AMBIGUOUS_MATCH_LIMITATION],
85
+ });
86
+ const absenceObserved = context.rightGraph.coverage.status === "complete";
87
+ return itemWithId({
88
+ ...common,
89
+ status: absenceObserved ? "removed" : "unknown",
90
+ left_node_id: node.node_id,
91
+ right_node_id: null,
92
+ match: unmatchedMatch(),
93
+ dimensions: absenceObserved
94
+ ? ["availability"]
95
+ : ["availability", "coverage"],
96
+ limitations: absenceObserved ? [] : [INCOMPLETE_GRAPH_LIMITATION],
97
+ });
98
+ };
99
+ const rightOnlyItem = (node, candidateNodeIds, context) => {
100
+ const [firstCandidate, ...remainingCandidates] = candidateNodeIds;
101
+ const common = {
102
+ node_kind: node.kind,
103
+ evidence_links: itemEvidenceLinks(undefined, node, context),
104
+ };
105
+ if (firstCandidate !== undefined)
106
+ return itemWithId({
107
+ ...common,
108
+ status: "unknown",
109
+ left_node_id: null,
110
+ right_node_id: node.node_id,
111
+ match: {
112
+ status: "ambiguous",
113
+ basis: "none",
114
+ confidence: "unknown",
115
+ candidate_left_node_ids: [firstCandidate, ...remainingCandidates],
116
+ candidate_right_node_ids: [],
117
+ },
118
+ dimensions: ["availability"],
119
+ limitations: [AMBIGUOUS_MATCH_LIMITATION],
120
+ });
121
+ const absenceObserved = context.leftGraph.coverage.status === "complete";
122
+ return itemWithId({
123
+ ...common,
124
+ status: absenceObserved ? "added" : "unknown",
125
+ left_node_id: null,
126
+ right_node_id: node.node_id,
127
+ match: unmatchedMatch(),
128
+ dimensions: absenceObserved
129
+ ? ["availability"]
130
+ : ["availability", "coverage"],
131
+ limitations: absenceObserved ? [] : [INCOMPLETE_GRAPH_LIMITATION],
132
+ });
107
133
  };
134
+ const matchedMatch = (pair) => {
135
+ const candidates = {
136
+ candidate_left_node_ids: [],
137
+ candidate_right_node_ids: [],
138
+ };
139
+ switch (pair.basis) {
140
+ case "exact-node-identity":
141
+ case "exact-content-digest":
142
+ case "exact-module-source-digest":
143
+ return {
144
+ status: "matched",
145
+ basis: pair.basis,
146
+ confidence: "exact",
147
+ ...candidates,
148
+ };
149
+ case "source-map-identity":
150
+ return {
151
+ status: "matched",
152
+ basis: pair.basis,
153
+ confidence: "high",
154
+ ...candidates,
155
+ };
156
+ case "structural-fingerprint":
157
+ case "semantic-key":
158
+ return {
159
+ status: "matched",
160
+ basis: pair.basis,
161
+ confidence: "medium",
162
+ ...candidates,
163
+ };
164
+ }
165
+ };
166
+ const unmatchedMatch = () => ({
167
+ status: "unmatched",
168
+ basis: "none",
169
+ confidence: "unknown",
170
+ candidate_left_node_ids: [],
171
+ candidate_right_node_ids: [],
172
+ });
173
+ const AMBIGUOUS_MATCH_LIMITATION = "Multiple nodes share the same permitted match key; no cross-version pair was selected.";
174
+ const INCOMPLETE_GRAPH_LIMITATION = "The opposite graph is incomplete, so an unmatched node cannot be classified as added or removed.";
108
175
  const changedDimensions = (pair, context) => {
109
176
  const dimensions = [];
110
177
  const leftContent = contentIdentity(pair.left);
@@ -1,19 +1,29 @@
1
1
  import { compareCodePoints } from "./javascriptApplicationGraph.js";
2
2
  const matchTiers = () => [
3
- { basis: "exact-content-digest", confidence: "exact", key: contentDigestKey },
4
3
  {
5
- basis: "exact-module-source-digest",
6
- confidence: "exact",
4
+ match: { basis: "exact-content-digest", confidence: "exact" },
5
+ key: contentDigestKey,
6
+ },
7
+ {
8
+ match: { basis: "exact-module-source-digest", confidence: "exact" },
7
9
  key: moduleSourceDigestKey,
8
10
  },
9
- { basis: "exact-node-identity", confidence: "exact", key: nodeIdentityKey },
10
- { basis: "source-map-identity", confidence: "high", key: sourceMapKey },
11
11
  {
12
- basis: "structural-fingerprint",
13
- confidence: "medium",
12
+ match: { basis: "exact-node-identity", confidence: "exact" },
13
+ key: nodeIdentityKey,
14
+ },
15
+ {
16
+ match: { basis: "source-map-identity", confidence: "high" },
17
+ key: sourceMapKey,
18
+ },
19
+ {
20
+ match: { basis: "structural-fingerprint", confidence: "medium" },
14
21
  key: structuralFingerprintKey,
15
22
  },
16
- { basis: "semantic-key", confidence: "medium", key: semanticKey },
23
+ {
24
+ match: { basis: "semantic-key", confidence: "medium" },
25
+ key: semanticKey,
26
+ },
17
27
  ];
18
28
  /** Apply ordered, unique-only matching tiers without fuzzy pairing. */
19
29
  export const matchJavaScriptApplicationVersions = (leftNodes, rightNodes) => {
@@ -51,7 +61,11 @@ const applyTier = (context) => {
51
61
  const rightNode = rightGroup[0];
52
62
  if (leftNode === undefined || rightNode === undefined)
53
63
  continue;
54
- context.pairs.push({ left: leftNode, right: rightNode, ...context.tier });
64
+ context.pairs.push({
65
+ left: leftNode,
66
+ right: rightNode,
67
+ ...context.tier.match,
68
+ });
55
69
  context.left.delete(leftNode.node_id);
56
70
  context.right.delete(rightNode.node_id);
57
71
  }
@@ -105,8 +119,7 @@ const structuralFingerprintKey = (node) => {
105
119
  return null;
106
120
  const digest = uniqueStringProperty(node, "structural_fingerprint_sha256");
107
121
  const algorithm = uniqueStringProperty(node, "structural_fingerprint_algorithm");
108
- const status = uniqueStringProperty(node, "structural_fingerprint_status");
109
- return digest === null || algorithm === null || status !== "complete"
122
+ return digest === null || algorithm === null
110
123
  ? null
111
124
  : `structural\0${node.kind}\0${algorithm}\0${digest}`;
112
125
  };