rea-agents 3.1.0 → 3.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (590) hide show
  1. package/README.md +72 -95
  2. package/bridge/ghidra/ReaGhidraBridge.java +609 -841
  3. package/bridge/hopper_bridge.py +99 -344
  4. package/dist/application/AbortablePromise.js +6 -3
  5. package/dist/application/AnalysisSnapshotCache.js +0 -1
  6. package/dist/application/AnalysisSnapshotFiles.js +7 -7
  7. package/dist/application/AndroidApplicationService.js +1 -1
  8. package/dist/application/AppleApplicationService.js +1 -1
  9. package/dist/application/ArtifactExtraction.js +35 -54
  10. package/dist/application/ArtifactExtractionDestination.js +17 -0
  11. package/dist/application/ArtifactGraphConstruction.js +2 -17
  12. package/dist/application/ArtifactInventory/classify.js +2 -6
  13. package/dist/application/ArtifactInventory/hash.js +2 -20
  14. package/dist/application/ArtifactInventory/scanCanonical.js +8 -12
  15. package/dist/application/ArtifactInventory/scanReader.js +69 -51
  16. package/dist/application/ArtifactInventory.js +6 -14
  17. package/dist/application/AuthorizedArtifactInventory.js +3 -13
  18. package/dist/application/BinarySession.js +41 -13
  19. package/dist/application/BinarySessionComposition.js +0 -11
  20. package/dist/application/BinarySessionOpen.js +2 -1
  21. package/dist/application/BinarySessionRecords.js +5 -93
  22. package/dist/application/BinarySessionStatus.js +5 -16
  23. package/dist/application/BinaryTargetResolver.js +216 -0
  24. package/dist/application/BrowserEvidence.js +42 -58
  25. package/dist/application/BrowserObservationService.js +3 -6
  26. package/dist/application/BrowserScenarioCaptureService.js +3 -6
  27. package/dist/application/BrowserScenarioEvidence.js +3 -3
  28. package/dist/application/CallPathTracing.js +2 -36
  29. package/dist/application/CapabilityInventory.js +10 -15
  30. package/dist/application/ClientConfigurationDocument.js +27 -0
  31. package/dist/application/ClientRegistrationStatus.js +16 -13
  32. package/dist/application/CommandShimReplay.js +14 -1
  33. package/dist/application/DirectAnalysis.js +22 -46
  34. package/dist/application/DirectAnalysisStatus.js +5 -61
  35. package/dist/application/Doctor.js +11 -32
  36. package/dist/application/DoctorDiagnostics.js +1 -2
  37. package/dist/application/DoctorScope.js +1 -1
  38. package/dist/application/ElectronActiveEvidence.js +3 -8
  39. package/dist/application/ElectronActiveObservationService.js +3 -6
  40. package/dist/application/ElectronBoundaryAnalysis.js +7 -8
  41. package/dist/application/ElectronBoundaryGraphContext.js +1 -1
  42. package/dist/application/ElectronBoundaryGraphIpc.js +3 -3
  43. package/dist/application/ElectronBoundaryGraphNative.js +1 -2
  44. package/dist/application/ElectronBoundaryGraphWindows.js +6 -8
  45. package/dist/application/ElectronEvidence.js +4 -7
  46. package/dist/application/ElectronObservationService.js +5 -9
  47. package/dist/application/EnhancedLiteralTracing.js +42 -65
  48. package/dist/application/EnhancedTools.js +76 -44
  49. package/dist/application/EvidenceBundleCommands.js +11 -11
  50. package/dist/application/EvidenceBundleFiles.js +9 -15
  51. package/dist/application/EvidenceLedger.js +6 -41
  52. package/dist/application/FilesystemSnapshot.js +2 -3
  53. package/dist/application/InterfaceBuilderAnalysis.js +266 -0
  54. package/dist/application/InventoryProjectionEvidence.js +4 -2
  55. package/dist/application/InvestigationProviders.js +1 -1
  56. package/dist/application/JavaScriptApplicationEvidence.js +2 -5
  57. package/dist/application/JavaScriptApplicationEvidenceGraph.js +6 -10
  58. package/dist/application/JavaScriptApplicationService.js +6 -29
  59. package/dist/application/JavaScriptApplicationWorkflowEvidence.js +5 -5
  60. package/dist/application/JavaScriptApplicationWorkflowService.js +0 -8
  61. package/dist/application/JavaScriptArtifactAnalysis.js +38 -127
  62. package/dist/application/JavaScriptArtifactFiles.js +67 -107
  63. package/dist/application/JavaScriptArtifactGraphAccumulator.js +0 -7
  64. package/dist/application/JavaScriptArtifactGraphBuilder.js +7 -58
  65. package/dist/application/JavaScriptArtifactGraphBundlers.js +1 -6
  66. package/dist/application/JavaScriptArtifactGraphContext.js +12 -39
  67. package/dist/application/JavaScriptArtifactGraphDocuments.js +4 -11
  68. package/dist/application/JavaScriptArtifactGraphEvidence.js +0 -14
  69. package/dist/application/JavaScriptArtifactGraphFindings.js +3 -3
  70. package/dist/application/JavaScriptArtifactGraphStructure.js +16 -17
  71. package/dist/application/JavaScriptArtifactPathResolution.js +61 -49
  72. package/dist/application/JavaScriptArtifactReconstruction.js +5 -10
  73. package/dist/application/JavaScriptArtifactReconstructionInput.js +2 -14
  74. package/dist/application/JavaScriptJsonModules.js +2 -2
  75. package/dist/application/JavaScriptModuleRelationships.js +22 -27
  76. package/dist/application/JavaScriptReplayPlanning.js +9 -3
  77. package/dist/application/JavaScriptReplayService.js +6 -32
  78. package/dist/application/JavaScriptReturnShapeProjection.js +12 -42
  79. package/dist/application/JavaScriptRuntimeObservationEvidence.js +7 -8
  80. package/dist/application/JavaScriptRuntimeObservationService.js +4 -8
  81. package/dist/application/JavaScriptRuntimeReconciliationEvidence.js +2 -3
  82. package/dist/application/JavaScriptSemanticGraphBuilder.js +11 -41
  83. package/dist/application/JavaScriptSemanticGraphConstruction.js +5 -29
  84. package/dist/application/JavaScriptSemanticGraphEvidence.js +1 -1
  85. package/dist/application/JavaScriptSemanticGraphFingerprintProjection.js +1 -1
  86. package/dist/application/JavaScriptSemanticGraphFlowProjection.js +0 -13
  87. package/dist/application/JavaScriptSemanticGraphProjection.js +1 -3
  88. package/dist/application/JavaScriptSemanticTraceService.js +1 -10
  89. package/dist/application/JsonFiles.js +79 -0
  90. package/dist/application/LinuxHopper.js +11 -9
  91. package/dist/application/LoopbackReplay.js +26 -23
  92. package/dist/application/LoopbackReplayRecorder.js +29 -1
  93. package/dist/application/ManagedApplicationGraphService.js +1 -2
  94. package/dist/application/ManagedMemberComparisonService.js +11 -41
  95. package/dist/application/ManagedNativeVerificationService.js +1 -2
  96. package/dist/application/ManagedReconstructionService.js +1 -1
  97. package/dist/application/ManagedRuntimeCorrelationService.js +5 -8
  98. package/dist/application/NativeApiInspection.js +2 -7
  99. package/dist/application/NativeUiActionTrace.js +394 -0
  100. package/dist/application/NodeRuntimeCharacterizationService.js +3 -7
  101. package/dist/application/PermissionAuthority.js +15 -7
  102. package/dist/application/PermissionFailure.js +5 -0
  103. package/dist/application/ProcessCaptureAuthority.js +5 -7
  104. package/dist/application/ProcessCaptureJournal.js +3 -2
  105. package/dist/application/ProcessCaptureLifecycle.js +5 -12
  106. package/dist/application/ProcessCheckpoints.js +29 -11
  107. package/dist/application/ProcessCli.js +6 -16
  108. package/dist/application/ProcessEvidence.js +5 -7
  109. package/dist/application/ProcessHarness.js +52 -17
  110. package/dist/application/ProcessReactiveCoordinator.js +2 -4
  111. package/dist/application/ProcessReactiveEffects.js +9 -3
  112. package/dist/application/ProcessReactiveHarness.js +13 -7
  113. package/dist/application/ProcessSampling.js +2 -4
  114. package/dist/application/ProcessTimer.js +39 -0
  115. package/dist/application/ProjectPermissionStore.js +39 -96
  116. package/dist/application/RealHopperAssertions.js +20 -66
  117. package/dist/application/ReconstructionCoverageService.js +12 -58
  118. package/dist/application/ReconstructionObligationAuthority.js +2 -2
  119. package/dist/application/ReconstructionObligationCandidates.js +4 -4
  120. package/dist/application/ReconstructionObligationLedgerEvaluation.js +8 -15
  121. package/dist/application/ReconstructionObligationLedgerProjection.js +3 -7
  122. package/dist/application/ReconstructionObligationLedgerService.js +19 -38
  123. package/dist/application/ReferenceSourceImport.js +19 -45
  124. package/dist/application/ReferenceSourceImportEntries.js +2 -4
  125. package/dist/application/ReferenceSourceImportPolicy.js +5 -32
  126. package/dist/application/ReferenceSourceImportTypes.js +0 -16
  127. package/dist/application/RuntimeExecutableDiagnostics.js +55 -29
  128. package/dist/application/SessionProviderRouter.js +2 -2
  129. package/dist/application/Setup.js +1 -3
  130. package/dist/application/SetupClientConfiguration.js +22 -93
  131. package/dist/application/SetupRegistrationEnvironment.js +0 -7
  132. package/dist/application/StoreFileLock.js +119 -0
  133. package/dist/application/TerminalRenderer.js +2 -3
  134. package/dist/application/Uninstall.js +9 -14
  135. package/dist/application/UnknownEvidence.js +1 -1
  136. package/dist/artifacts/ArtifactPaths.js +2 -5
  137. package/dist/artifacts/ArtifactProvider.js +36 -58
  138. package/dist/artifacts/DirectoryArtifactReader.js +13 -8
  139. package/dist/artifacts/MachOSliceArtifactReader.js +1 -5
  140. package/dist/artifacts/NativeDmgArtifactReader.js +11 -11
  141. package/dist/artifacts/NibArchive.js +269 -0
  142. package/dist/artifacts/SafeOutputTree.js +15 -24
  143. package/dist/browser/BrowserProcessStartup.js +1 -2
  144. package/dist/browser/CdpAuthorizedMainFrame.js +16 -0
  145. package/dist/browser/CdpBrowserProvider.js +3 -13
  146. package/dist/browser/CdpCanonicalJsonDigest.js +9 -0
  147. package/dist/browser/CdpCaptureDocuments.js +28 -76
  148. package/dist/browser/CdpCaptureEventBodyShapes.js +13 -33
  149. package/dist/browser/CdpCaptureEventHandlers.js +22 -87
  150. package/dist/browser/CdpCaptureEvents.js +2 -8
  151. package/dist/browser/CdpCaptureStorage.js +9 -20
  152. package/dist/browser/CdpCaptureStorageFingerprints.js +85 -98
  153. package/dist/browser/CdpCaptureValues.js +21 -21
  154. package/dist/browser/CdpConnection.js +10 -25
  155. package/dist/browser/CdpElectronInspection.js +26 -50
  156. package/dist/browser/CdpElectronProvider.js +10 -35
  157. package/dist/browser/CdpElectronScriptEvents.js +8 -16
  158. package/dist/browser/CdpElectronScripts.js +6 -35
  159. package/dist/browser/CdpElectronWorkers.js +6 -10
  160. package/dist/browser/CdpEndpoint.js +25 -41
  161. package/dist/browser/CdpObservationSession.js +14 -26
  162. package/dist/browser/CdpPageCapture.js +34 -48
  163. package/dist/browser/CdpPageCaptureScripts.js +1 -19
  164. package/dist/browser/CdpPageCaptureWorkers.js +6 -10
  165. package/dist/browser/CdpSafeMetadata.js +19 -22
  166. package/dist/browser/CdpScreenshot.js +3 -5
  167. package/dist/browser/CdpTargetSession.js +1 -2
  168. package/dist/browser/CdpWebMcpDiscovery.js +13 -22
  169. package/dist/browser/ElectronFileScope.js +8 -19
  170. package/dist/browser/JavaScriptRuntimeScope.js +9 -14
  171. package/dist/browser/PlaywrightBrowserScenarioProvider.js +31 -64
  172. package/dist/browser/PlaywrightElectronActiveActions.js +54 -69
  173. package/dist/browser/PlaywrightElectronActiveProvider.js +14 -34
  174. package/dist/browser/PlaywrightExecutionBoundary.js +16 -5
  175. package/dist/browser/PlaywrightScenarioActions.js +3 -7
  176. package/dist/browser/PlaywrightScenarioArtifacts.js +23 -92
  177. package/dist/browser/PlaywrightScenarioBrowser.js +3 -5
  178. package/dist/browser/PlaywrightScenarioEvents.js +45 -94
  179. package/dist/browser/PlaywrightScenarioSession.js +14 -30
  180. package/dist/browser/PngVisualDiff.js +22 -14
  181. package/dist/browser/SensitiveTextCapture.js +0 -17
  182. package/dist/browser/V8InspectorCaptureProjection.js +7 -8
  183. package/dist/browser/V8InspectorEndpoint.js +12 -14
  184. package/dist/browser/V8InspectorProvider.js +20 -61
  185. package/dist/browser/WebSourceMapFetcher.js +56 -176
  186. package/dist/catalogIdentity.js +0 -54
  187. package/dist/cli/artifactCommands.js +49 -77
  188. package/dist/cli/coreAnalysisCommands.js +83 -133
  189. package/dist/cli/javascriptApplicationAnalysis.js +1 -9
  190. package/dist/cli/managedCommands.js +5 -270
  191. package/dist/cli/setupCommands.js +3 -12
  192. package/dist/cli/utilityCommands.js +7 -41
  193. package/dist/cli.js +0 -2
  194. package/dist/cliApplicationCommands.js +42 -112
  195. package/dist/cliBrowserAdvancedCommands.js +10 -106
  196. package/dist/cliBrowserCommands.js +15 -127
  197. package/dist/cliBrowserContext.js +30 -0
  198. package/dist/cliCommandNames.js +4 -5
  199. package/dist/cliElectronCommands.js +8 -72
  200. package/dist/cliEvidenceCommands.js +8 -77
  201. package/dist/cliJavaScriptRuntimeCommands.js +9 -91
  202. package/dist/cliJsonInput.js +4 -14
  203. package/dist/cliObservationOptions.js +11 -96
  204. package/dist/cliPolicyCommands.js +2 -17
  205. package/dist/cliProcessCommands.js +3 -3
  206. package/dist/cliSetup.js +0 -13
  207. package/dist/config/browserScenario.js +2 -2
  208. package/dist/config/environment.js +0 -9
  209. package/dist/config/parseConfig.js +1 -33
  210. package/dist/config/parsers.js +6 -27
  211. package/dist/config/passiveObservation.js +7 -77
  212. package/dist/config/permissions.js +0 -7
  213. package/dist/contracts/analysisSearchContract.js +2 -5
  214. package/dist/contracts/applicationToolContracts.js +56 -109
  215. package/dist/contracts/applicationWorkflowInputContracts.js +27 -102
  216. package/dist/contracts/artifactComparisonExample.js +58 -60
  217. package/dist/contracts/artifactToolContracts.js +20 -67
  218. package/dist/contracts/browserScenarioToolContracts.js +6 -51
  219. package/dist/contracts/browserToolContracts.js +8 -73
  220. package/dist/contracts/electronToolContracts.js +8 -108
  221. package/dist/contracts/enhancedInputs.js +23 -54
  222. package/dist/contracts/errorSchemas.js +0 -1
  223. package/dist/contracts/functionComparisonExample.js +10 -24
  224. package/dist/contracts/functionInstructionContract.js +1 -3
  225. package/dist/contracts/functionWorkflowToolContracts.js +2 -2
  226. package/dist/contracts/hopperMemoryContracts.js +3 -3
  227. package/dist/contracts/investigationExamples.js +14 -11
  228. package/dist/contracts/javascriptApplicationWorkflowExamples.js +12 -19
  229. package/dist/contracts/javascriptRuntimeObservationToolContracts.js +2 -20
  230. package/dist/contracts/javascriptRuntimeReconciliationExample.js +45 -12
  231. package/dist/contracts/managedToolContracts.js +6 -95
  232. package/dist/contracts/managedWorkflowExamples.js +77 -128
  233. package/dist/contracts/managedWorkflowToolContracts.js +51 -77
  234. package/dist/contracts/nativeToolContracts.js +7 -11
  235. package/dist/contracts/processCaptureExample.js +2 -69
  236. package/dist/contracts/promptContracts.js +49 -67
  237. package/dist/contracts/providerSelection.js +0 -1
  238. package/dist/contracts/reconstructionReadinessExample.js +1 -6
  239. package/dist/contracts/sessionStatusContract.js +1 -17
  240. package/dist/contracts/sessionToolSchemas.js +6 -15
  241. package/dist/contracts/toolContractExamples.js +11 -11
  242. package/dist/contracts/toolContractHelpers.js +0 -4
  243. package/dist/contracts/toolContracts.js +60 -71
  244. package/dist/contracts/toolEffects.js +5 -13
  245. package/dist/contracts/toolOutputSchemaGroups.js +37 -91
  246. package/dist/contracts/toolOutputSchemaPrimitives.js +16 -56
  247. package/dist/contracts/toolSchemaMetadata.js +8 -19
  248. package/dist/contracts/unknownContractExamples.js +0 -2
  249. package/dist/domain/analysisErrorPresentation.js +46 -54
  250. package/dist/domain/analysisErrorProjection.js +28 -37
  251. package/dist/domain/analysisProfile.js +3 -31
  252. package/dist/domain/analysisSnapshot.js +3 -12
  253. package/dist/domain/androidApplication.js +15 -54
  254. package/dist/domain/appleApplication.js +24 -67
  255. package/dist/domain/artifactComparison.js +11 -29
  256. package/dist/domain/artifactGraph.js +14 -44
  257. package/dist/domain/artifactInspection.js +38 -69
  258. package/dist/domain/artifactInventoryEvidence.js +27 -21
  259. package/dist/domain/binaryTarget.js +2 -221
  260. package/dist/domain/browserCaptureComparison.js +47 -24
  261. package/dist/domain/browserObservation.js +28 -193
  262. package/dist/domain/browserObservationSchemas.js +5 -23
  263. package/dist/domain/browserScenario.js +11 -14
  264. package/dist/domain/browserScenarioCapture.js +11 -12
  265. package/dist/domain/browserScenarioCaptureValues.js +146 -84
  266. package/dist/domain/browserScenarioDiff.js +2 -59
  267. package/dist/domain/browserScenarioDiffEvidence.js +51 -0
  268. package/dist/domain/browserScenarioDiffValues.js +21 -38
  269. package/dist/domain/browserScenarioValues.js +80 -109
  270. package/dist/domain/browserSession.js +4 -7
  271. package/dist/domain/bundleComparison.js +6 -32
  272. package/dist/domain/bytecodeProvider.js +20 -19
  273. package/dist/domain/callPath.js +47 -167
  274. package/dist/domain/callPathSchemas.js +79 -0
  275. package/dist/domain/changedBehavior.js +34 -60
  276. package/dist/domain/completionLedgerGeneration.js +8 -14
  277. package/dist/domain/conformancePackage.js +126 -97
  278. package/dist/domain/conformanceReplay.js +36 -8
  279. package/dist/domain/conformanceTrustGate.js +23 -14
  280. package/dist/domain/customProtocolCapture.js +1 -1
  281. package/dist/domain/electronActiveObservation.js +70 -103
  282. package/dist/domain/electronObservation.js +14 -80
  283. package/dist/domain/electronStaticAnalysisBrowser.js +36 -46
  284. package/dist/domain/electronStaticAnalysisIpc.js +38 -14
  285. package/dist/domain/electronStaticAnalysisNative.js +1 -8
  286. package/dist/domain/electronStaticAnalysisValues.js +10 -17
  287. package/dist/domain/errors.js +33 -54
  288. package/dist/domain/eventProcessTree.js +20 -12
  289. package/dist/domain/evidence.js +2 -10
  290. package/dist/domain/evidenceBundle.js +3 -5
  291. package/dist/domain/evidenceCompletionLedger.js +6 -8
  292. package/dist/domain/functionComparison.js +4 -14
  293. package/dist/domain/functionComparisonNormalization.js +4 -11
  294. package/dist/domain/functionComparisonResults.js +25 -15
  295. package/dist/domain/functionComparisonSchemas.js +49 -33
  296. package/dist/domain/functionDossierEvidence.js +31 -156
  297. package/dist/domain/hopperStartupFailure.js +1 -1
  298. package/dist/domain/hopperValues.js +15 -136
  299. package/dist/domain/interfaceBuilderGraph.js +654 -0
  300. package/dist/domain/javascriptApplicationAnalysis.js +8 -112
  301. package/dist/domain/javascriptApplicationChangeGraph.js +22 -82
  302. package/dist/domain/javascriptApplicationEvidenceSchemas.js +59 -47
  303. package/dist/domain/javascriptApplicationGraph.js +3 -13
  304. package/dist/domain/javascriptApplicationGraphSchemas.js +12 -34
  305. package/dist/domain/javascriptApplicationVersionComparison.js +26 -30
  306. package/dist/domain/javascriptApplicationVersionComparisonSchemas.js +123 -68
  307. package/dist/domain/javascriptApplicationVersionItems.js +120 -53
  308. package/dist/domain/javascriptApplicationVersionKeys.js +24 -11
  309. package/dist/domain/javascriptAstFingerprint.js +25 -58
  310. package/dist/domain/javascriptAstValues.js +9 -0
  311. package/dist/domain/javascriptExportInstrumentation.js +2 -4
  312. package/dist/domain/javascriptExportShapeComparison.js +6 -7
  313. package/dist/domain/javascriptExportShapeComparisonSchemas.js +68 -75
  314. package/dist/domain/javascriptExportShapeSelection.js +17 -19
  315. package/dist/domain/javascriptFeatureSeed.js +20 -12
  316. package/dist/domain/javascriptFeatureTrace.js +13 -67
  317. package/dist/domain/javascriptFeatureTraceSchemas.js +24 -52
  318. package/dist/domain/javascriptFeatureTraversal.js +1 -44
  319. package/dist/domain/javascriptNativeHandoff.js +1 -1
  320. package/dist/domain/javascriptReplay.js +24 -41
  321. package/dist/domain/javascriptRuntimeLoadState.js +3 -8
  322. package/dist/domain/javascriptRuntimeObservation.js +42 -103
  323. package/dist/domain/javascriptRuntimeReconciliation.js +1 -3
  324. package/dist/domain/javascriptRuntimeReconciliationActive.js +8 -17
  325. package/dist/domain/javascriptRuntimeReconciliationGraph.js +10 -23
  326. package/dist/domain/javascriptRuntimeReconciliationMatching.js +18 -12
  327. package/dist/domain/javascriptRuntimeReconciliationParsing.js +16 -45
  328. package/dist/domain/javascriptRuntimeReconciliationResult.js +4 -5
  329. package/dist/domain/javascriptRuntimeReconciliationRuntime.js +8 -12
  330. package/dist/domain/javascriptRuntimeReconciliationSchemas.js +33 -48
  331. package/dist/domain/javascriptRuntimeStaticCandidates.js +3 -3
  332. package/dist/domain/javascriptSemanticAnalysis.js +12 -45
  333. package/dist/domain/javascriptSemanticAsyncEffects.js +1 -9
  334. package/dist/domain/javascriptSemanticCallResolution.js +6 -16
  335. package/dist/domain/javascriptSemanticCalls.js +5 -32
  336. package/dist/domain/javascriptSemanticChildProcesses.js +1 -11
  337. package/dist/domain/javascriptSemanticCoverage.js +11 -0
  338. package/dist/domain/javascriptSemanticDataEffectHelpers.js +1 -8
  339. package/dist/domain/javascriptSemanticDataEffects.js +1 -11
  340. package/dist/domain/javascriptSemanticFingerprints.js +3 -5
  341. package/dist/domain/javascriptSemanticGraphSchemas.js +25 -51
  342. package/dist/domain/javascriptSemanticGraphSerialization.js +2 -13
  343. package/dist/domain/javascriptSemanticIr.js +1 -29
  344. package/dist/domain/javascriptSemanticObjects.js +1 -5
  345. package/dist/domain/javascriptSemanticPrimitives.js +2 -9
  346. package/dist/domain/javascriptSemanticProjection.js +0 -18
  347. package/dist/domain/javascriptSemanticPromises.js +9 -16
  348. package/dist/domain/javascriptSemanticProvenance.js +16 -19
  349. package/dist/domain/javascriptSemanticQuery.js +17 -139
  350. package/dist/domain/javascriptSemanticQueryAssessment.js +9 -37
  351. package/dist/domain/javascriptSemanticQueryIdentity.js +2 -23
  352. package/dist/domain/javascriptSemanticQuerySchemas.js +14 -107
  353. package/dist/domain/javascriptSemanticResources.js +1 -6
  354. package/dist/domain/javascriptSemanticReturns.js +10 -27
  355. package/dist/domain/javascriptSemanticValueTypes.js +1 -0
  356. package/dist/domain/javascriptSemanticValues.js +44 -62
  357. package/dist/domain/javascriptStaticAnalysis.js +21 -43
  358. package/dist/domain/javascriptStaticAnalysisBundler.js +34 -93
  359. package/dist/domain/javascriptStaticAnalysisCalls.js +17 -16
  360. package/dist/domain/javascriptStaticAnalysisFindings.js +3 -19
  361. package/dist/domain/javascriptStaticAnalysisHelpers.js +47 -88
  362. package/dist/domain/javascriptStaticAnalysisState.js +1 -5
  363. package/dist/domain/javascriptStaticAnalysisTypes.js +1 -0
  364. package/dist/domain/jsonShape.js +7 -33
  365. package/dist/domain/localPath.js +7 -0
  366. package/dist/domain/managedApplicationGraph.js +9 -41
  367. package/dist/domain/managedApplicationGraphCoverage.js +24 -156
  368. package/dist/domain/managedApplicationGraphNodes.js +10 -13
  369. package/dist/domain/managedArtifact.js +14 -27
  370. package/dist/domain/managedMemberComparison.js +90 -92
  371. package/dist/domain/managedMemberComparisonCoverage.js +11 -33
  372. package/dist/domain/managedMemberComparisonItems.js +221 -0
  373. package/dist/domain/managedMemberComparisonMatch.js +8 -208
  374. package/dist/domain/managedNativeVerification.js +3 -6
  375. package/dist/domain/managedNativeVerificationMatch.js +55 -59
  376. package/dist/domain/managedNativeVerificationSchemas.js +83 -47
  377. package/dist/domain/managedReconstruction.js +19 -23
  378. package/dist/domain/managedRuntimeCorrelation.js +6 -9
  379. package/dist/domain/nativeApiBoundary.js +2 -7
  380. package/dist/domain/nativeInspection.js +0 -2
  381. package/dist/domain/nativeInvestigationGraph.js +351 -0
  382. package/dist/domain/nativeValueFlow.js +61 -0
  383. package/dist/domain/nodeRuntimeCharacterization.js +1 -5
  384. package/dist/domain/objcSwiftMetadata.js +254 -0
  385. package/dist/domain/peInspection.js +1 -1
  386. package/dist/domain/permissionPolicy.js +13 -0
  387. package/dist/domain/processCapture.js +76 -113
  388. package/dist/domain/processCaptureExample.js +68 -0
  389. package/dist/domain/processCaptureParsing.js +21 -0
  390. package/dist/domain/processCaptureReactiveSchema.js +68 -0
  391. package/dist/domain/processCaptureValidation.js +1 -7
  392. package/dist/domain/processComparison.js +3 -12
  393. package/dist/domain/processReactiveMatching.js +29 -50
  394. package/dist/domain/processReactiveRuntime.js +4 -8
  395. package/dist/domain/processReactiveScenario.js +28 -94
  396. package/dist/domain/processReactiveScenarioPreflight.js +5 -30
  397. package/dist/domain/processReactiveTransition.js +33 -18
  398. package/dist/domain/processScenario.js +56 -90
  399. package/dist/domain/processTraceComparison.js +0 -8
  400. package/dist/domain/processTraceEvaluation.js +14 -4
  401. package/dist/domain/processTraceSpecification.js +11 -17
  402. package/dist/domain/protocolCapture.js +3 -3
  403. package/dist/domain/reconstructionCoverage.js +62 -129
  404. package/dist/domain/reconstructionCoverageEvaluation.js +17 -17
  405. package/dist/domain/reconstructionObligationLedgerSchemas.js +45 -72
  406. package/dist/domain/reconstructionReadiness.js +1 -2
  407. package/dist/domain/reconstructionReadinessSchemas.js +36 -38
  408. package/dist/domain/reconstructionUnknowns.js +3 -3
  409. package/dist/domain/reconstructionVerification.js +13 -47
  410. package/dist/domain/reconstructionVerificationSchemas.js +50 -38
  411. package/dist/domain/referenceSourceGraph.js +53 -61
  412. package/dist/domain/referenceSourceImportParsing.js +1 -5
  413. package/dist/domain/replayMachine.js +19 -31
  414. package/dist/domain/replayMachineRun.js +15 -63
  415. package/dist/domain/replayMachineRuntime.js +41 -41
  416. package/dist/domain/replayMachineValues.js +84 -0
  417. package/dist/domain/residualUnknown.js +25 -30
  418. package/dist/domain/runtimeCharacterization.js +15 -16
  419. package/dist/domain/runtimeIdentification.js +48 -47
  420. package/dist/domain/sourceToBundleComparison.js +9 -85
  421. package/dist/domain/sourceToBundleComparisonSchemas.js +17 -42
  422. package/dist/domain/sourceToBundleSignals.js +4 -15
  423. package/dist/domain/staticRuntimeCorrelation.js +37 -49
  424. package/dist/domain/symbolAnalysis.js +10 -19
  425. package/dist/domain/unicodeCodePointOrder.js +12 -0
  426. package/dist/domain/webBundleAnalysis.js +70 -99
  427. package/dist/domain/webBundleAnalyzer.js +2 -4
  428. package/dist/domain/webBundleAnalyzerAst.js +0 -13
  429. package/dist/domain/webBundleAnalyzerInspection.js +26 -52
  430. package/dist/domain/webBundleAnalyzerResult.js +7 -24
  431. package/dist/domain/webCaptureDiff.js +33 -73
  432. package/dist/domain/webCaptureDiffSchemas.js +86 -0
  433. package/dist/domain/webContentArtifact.js +1 -10
  434. package/dist/domain/webMcpDiscovery.js +3 -14
  435. package/dist/domain/webScreenshot.js +58 -34
  436. package/dist/domain/zipPackageFormat.js +7 -0
  437. package/dist/dotnet/ManagedArtifactInspector.js +17 -50
  438. package/dist/dotnet/ManagedMemberInspector.js +27 -58
  439. package/dist/dotnet/ManagedMemberInspectorCore.js +14 -51
  440. package/dist/dotnet/ManagedMemberInstructionDecoder.js +2 -2
  441. package/dist/dotnet/ManagedMemberRows.js +16 -16
  442. package/dist/dotnet/ManagedMetadataHeaps.js +26 -8
  443. package/dist/dotnet/ManagedMetadataInventory.js +21 -30
  444. package/dist/dotnet/ManagedMetadataInventoryRows.js +57 -63
  445. package/dist/dotnet/ManagedMetadataLayout.js +3 -5
  446. package/dist/dotnet/ManagedMethodBodyReader.js +5 -30
  447. package/dist/dotnet/ManagedNativeBoundaryHelpers.js +19 -49
  448. package/dist/dotnet/ManagedNativeBoundaryInspector.js +13 -41
  449. package/dist/dotnet/ManagedPeReader.js +2 -2
  450. package/dist/dotnet/ManagedStaticProvider.js +13 -71
  451. package/dist/generatedMcpToolCatalog.js +1 -1
  452. package/dist/generatedPackageMetadata.js +1 -1
  453. package/dist/ghidra/GhidraAnalysisProfile.js +3 -8
  454. package/dist/ghidra/GhidraClient.js +4 -12
  455. package/dist/ghidra/GhidraClientWire.js +9 -5
  456. package/dist/ghidra/GhidraDefaults.js +0 -18
  457. package/dist/ghidra/GhidraDiagnostics.js +0 -2
  458. package/dist/ghidra/GhidraDoctor.js +16 -12
  459. package/dist/ghidra/GhidraFunctionValues.js +65 -108
  460. package/dist/ghidra/GhidraInstallation.js +98 -42
  461. package/dist/ghidra/GhidraInventoryValues.js +16 -85
  462. package/dist/ghidra/GhidraLauncher.js +0 -8
  463. package/dist/ghidra/GhidraProvider.js +15 -22
  464. package/dist/ghidra/GhidraProviderCapabilities.js +6 -47
  465. package/dist/ghidra/GhidraRequestQueue.js +6 -30
  466. package/dist/ghidra/GhidraResponseBuffer.js +1 -7
  467. package/dist/ghidra/GhidraSessionValues.js +0 -2
  468. package/dist/ghidra/GhidraTransport.js +4 -7
  469. package/dist/ghidra/protocol.js +2 -2
  470. package/dist/hopper/BridgeLauncher.js +112 -36
  471. package/dist/hopper/HopperAnalysisProfile.js +1 -1
  472. package/dist/hopper/HopperCleanup.js +6 -3
  473. package/dist/hopper/HopperClient.js +4 -7
  474. package/dist/hopper/HopperProcessDiagnostic.js +2 -2
  475. package/dist/hopper/HopperProvider.js +0 -16
  476. package/dist/hopper/HopperRequestQueue.js +21 -40
  477. package/dist/hopper/HopperResponseStream.js +1 -9
  478. package/dist/hopper/HopperSessionValues.js +3 -2
  479. package/dist/hopper/HopperTargetLease.js +119 -0
  480. package/dist/hopper/LinuxPrivateDisplayDiagnostic.js +24 -31
  481. package/dist/hopper/LinuxPrivateDisplayProbe.js +5 -16
  482. package/dist/hopper/protocol.js +6 -4
  483. package/dist/main/reload.js +0 -3
  484. package/dist/main/shutdown.js +1 -1
  485. package/dist/main/state.js +0 -9
  486. package/dist/main/transport.js +0 -5
  487. package/dist/mcpDoctor.js +25 -45
  488. package/dist/native/CommandRunner.js +18 -25
  489. package/dist/native/NativeMacOSProvider.js +13 -38
  490. package/dist/native/NativeMachoInspection.js +1 -1
  491. package/dist/process/BoundedFileBytes.js +17 -0
  492. package/dist/process/ExecFileOutput.js +11 -0
  493. package/dist/process/PendingOperations.js +8 -6
  494. package/dist/process/ProcessOwnership.js +3 -2
  495. package/dist/process/ProcessOwnershipObservation.js +0 -1
  496. package/dist/process/ProviderProcess.js +7 -28
  497. package/dist/reference/ReferenceSourceReader.js +8 -24
  498. package/dist/reference/ReferenceSourceReaderEntries.js +11 -39
  499. package/dist/reference/ReferenceSourceReaderFile.js +13 -31
  500. package/dist/reference/ReferenceSourceReaderPaths.js +3 -18
  501. package/dist/reference/ReferenceSourceReaderValidate.js +3 -6
  502. package/dist/replay/JavaScriptReplayWorker.js +3 -5
  503. package/dist/replay/LinuxJavaScriptReplayRunner.js +33 -29
  504. package/dist/replay/LinuxJavaScriptReplaySandbox.js +0 -19
  505. package/dist/replay/LinuxRuntimeClosure.js +1 -3
  506. package/dist/replay/ReplayOutcome.js +1 -3
  507. package/dist/replay/ReplayProcessLifecycle.js +32 -7
  508. package/dist/replay/ReplaySeccompFile.js +29 -0
  509. package/dist/replay/ReplayWorkerProtocol.js +0 -2
  510. package/dist/replay/SystemJavaScriptReplayHost.js +45 -74
  511. package/dist/server/ProcessCaptureElicitation.js +4 -8
  512. package/dist/server/createServer.js +6 -44
  513. package/dist/server/promptCompletion.js +37 -61
  514. package/dist/server/recordDerivedEvidence.js +1 -1
  515. package/dist/server/registerApplicationTools/characterization.js +4 -8
  516. package/dist/server/registerApplicationTools/compareExportShapes.js +5 -10
  517. package/dist/server/registerApplicationTools/compareSourceToBundle.js +6 -10
  518. package/dist/server/registerApplicationTools/compareVersions.js +5 -10
  519. package/dist/server/registerApplicationTools/controlledReplay.js +3 -5
  520. package/dist/server/registerApplicationTools/coverage.js +6 -71
  521. package/dist/server/registerApplicationTools/helpers.js +1 -13
  522. package/dist/server/registerApplicationTools/obligationLedger.js +3 -2
  523. package/dist/server/registerApplicationTools/traceFeature.js +5 -9
  524. package/dist/server/registerApplicationTools/traceSemantics.js +5 -8
  525. package/dist/server/registerApplicationTools.js +0 -2
  526. package/dist/server/registerArtifactComparisonTool.js +23 -27
  527. package/dist/server/registerBrowserScenarioTool.js +4 -4
  528. package/dist/server/registerBrowserTools.js +5 -8
  529. package/dist/server/registerBundleComparisonTool.js +5 -7
  530. package/dist/server/registerCloseLifecycleTool.js +2 -16
  531. package/dist/server/registerElectronTools.js +10 -29
  532. package/dist/server/registerEnhancedTools.js +10 -11
  533. package/dist/server/registerEvidenceTools.js +15 -22
  534. package/dist/server/registerFunctionComparisonTool.js +30 -25
  535. package/dist/server/registerInvestigationTools/helpers.js +3 -32
  536. package/dist/server/registerInvestigationTools.js +20 -116
  537. package/dist/server/registerJavaScriptRuntimeObservationTools.js +6 -4
  538. package/dist/server/registerManagedWorkflowTools/compareManagedMembers.js +15 -17
  539. package/dist/server/registerManagedWorkflowTools/evidence.js +19 -35
  540. package/dist/server/registerManagedWorkflowTools/importManagedReconstruction.js +3 -8
  541. package/dist/server/registerManagedWorkflowTools/planManagedRuntimeCorrelation.js +3 -8
  542. package/dist/server/registerManagedWorkflowTools/projectManagedApplicationGraph.js +10 -14
  543. package/dist/server/registerManagedWorkflowTools/verifyManagedNativeBoundaries.js +9 -15
  544. package/dist/server/registerOfficialTools.js +1 -43
  545. package/dist/server/registerProcessComparisonTool.js +33 -23
  546. package/dist/server/registerPrompts.js +19 -17
  547. package/dist/server/registerSessionRecordTools.js +10 -156
  548. package/dist/server/registerSessionStatusTool.js +6 -69
  549. package/dist/server/registerSessionTools.js +10 -51
  550. package/dist/server/sessionAvailabilityPolicy.js +0 -2
  551. package/dist/server/sessionEvidence.js +9 -15
  552. package/dist/server/sessionToolPolicies.js +0 -8
  553. package/dist/server/toolResult.js +14 -50
  554. package/dist/serverIdentity.js +0 -20
  555. package/install.sh +1 -1
  556. package/package.json +11 -7
  557. package/scripts/electron-active-hook.cjs +23 -55
  558. package/scripts/hopper-demo-x11.py +13 -32
  559. package/skills/reverse-engineer-anything/SKILL.md +47 -12
  560. package/skills/reverse-engineer-anything/references/evidence-workflows.md +6 -4
  561. package/skills/reverse-engineer-anything/references/javascript-applications.md +13 -13
  562. package/skills/reverse-engineer-anything/references/native-and-artifacts.md +12 -8
  563. package/dist/application/ApplicationWorkflowEvidenceResolver.js +0 -188
  564. package/dist/application/BoundedJsonFiles.js +0 -86
  565. package/dist/application/CrossVersionInventory.js +0 -129
  566. package/dist/application/CrossVersionInvestigation.js +0 -301
  567. package/dist/application/CrossVersionInvestigationCollections.js +0 -23
  568. package/dist/application/CrossVersionInvestigationEvidence.js +0 -64
  569. package/dist/application/CrossVersionInvestigationReplay.js +0 -170
  570. package/dist/application/DeferredFileAuthorization.js +0 -61
  571. package/dist/application/DoctorProjection.js +0 -43
  572. package/dist/application/EnhancedToolPagination.js +0 -22
  573. package/dist/application/EvidenceReferenceResolver.js +0 -26
  574. package/dist/application/InvestigationWorkspaceStore.js +0 -204
  575. package/dist/application/ProcessPairedExperiment.js +0 -72
  576. package/dist/application/ReconstructionCoverageWorkspaceStore.js +0 -31
  577. package/dist/application/ReconstructionReadinessService.js +0 -48
  578. package/dist/cliInvestigationCommands.js +0 -173
  579. package/dist/domain/boundedCartesianProjection.js +0 -15
  580. package/dist/domain/investigationWorkspace.js +0 -347
  581. package/dist/domain/jsonLimits.js +0 -26
  582. package/dist/domain/knownPageCoverage.js +0 -29
  583. package/dist/domain/processPairedExperiment.js +0 -128
  584. package/dist/server/javascriptApplicationResult.js +0 -106
  585. package/dist/server/permissionFailure.js +0 -12
  586. package/dist/server/registerApplicationTools/readiness.js +0 -50
  587. package/dist/server/registerEvidenceResources.js +0 -315
  588. package/dist/server/registerJavaScriptApplicationGraphResource.js +0 -65
  589. package/dist/server/registerReconstructionObligationLedgerResource.js +0 -32
  590. package/dist/server/registerReconstructionReadinessResource.js +0 -32
@@ -0,0 +1,394 @@
1
+ import { z } from "zod";
2
+ import { interfaceBuilderAnalysisSchema } from "../domain/interfaceBuilderGraph.js";
3
+ import { nativeInvestigationGraphSchema, nativeInvestigationTraceSchema, traceNativeInvestigationGraph, joinInterfaceBuilderDispatch, } from "../domain/nativeInvestigationGraph.js";
4
+ import { inspectNativeDispatchMetadata, nativeDispatchMetadataResultSchema, } from "../domain/objcSwiftMetadata.js";
5
+ import { jsonValueSchema } from "../domain/jsonValue.js";
6
+ import { parseRelatedAddresses } from "../domain/hopperValues.js";
7
+ import { err, ok } from "../domain/result.js";
8
+ import { AnalysisCancelledError, AnalysisOutputError, projectAnalysisError, } from "../domain/errors.js";
9
+ const nativeNameSchema = z.array(z.union([
10
+ z.strictObject({ address: z.string(), name: z.string() }),
11
+ z.strictObject({ address: z.string(), value: z.string() }),
12
+ ]));
13
+ /** Build a UI-to-code trace from the active app and selected native provider. */
14
+ export const traceNativeUiAction = async (analysis, input, signal) => {
15
+ const [uiExecution, namesExecution] = await Promise.all([
16
+ analysis.execute("decode_interface_builder", {
17
+ max_documents: 64,
18
+ max_objects: input.max_nodes,
19
+ max_connections: input.max_edges,
20
+ }, signal === undefined ? {} : { signal }),
21
+ analysis.execute("list_names", {}, signal === undefined ? {} : { signal }),
22
+ ]);
23
+ if (!uiExecution.ok && uiExecution.error._tag === "AnalysisCancelledError")
24
+ return err(new AnalysisCancelledError("decode_interface_builder"));
25
+ if (!namesExecution.ok)
26
+ return err(namesExecution.error);
27
+ const parsedNames = nativeNameSchema.safeParse(namesExecution.value.result);
28
+ if (!parsedNames.success)
29
+ return err(new AnalysisOutputError("list_names", "provider returned an invalid name inventory"));
30
+ const targetSha256 = namesExecution.value.subject?.sha256;
31
+ if (targetSha256 === undefined)
32
+ return err(new AnalysisOutputError("list_names", "provider did not bind the name inventory to a target SHA-256"));
33
+ const metadata = nativeDispatchMetadataResultSchema.parse({
34
+ target_sha256: targetSha256,
35
+ provider: namesExecution.value.provider,
36
+ analysis_profile_digest: namesExecution.value.analysisProfile?.digest ?? null,
37
+ result: inspectNativeDispatchMetadata(parsedNames.data.map((entry) => ({
38
+ address: entry.address,
39
+ name: "name" in entry ? entry.name : entry.value,
40
+ })), parsedNames.data.length),
41
+ });
42
+ let graph = emptyGraph(targetSha256, namesExecution.value.provider);
43
+ const coverage = [];
44
+ if (uiExecution.ok) {
45
+ const decoded = interfaceBuilderAnalysisSchema.safeParse(uiExecution.value.result);
46
+ if (!decoded.success)
47
+ return err(new AnalysisOutputError("decode_interface_builder", "artifact provider returned an invalid interface graph"));
48
+ if (decoded.data.target_sha256 !== targetSha256)
49
+ return err(new AnalysisOutputError("decode_interface_builder", "UI and native provider results refer to different target SHA-256 values"));
50
+ graph = joinInterfaceBuilderDispatch(decoded.data.graph, metadata.result);
51
+ coverage.push({
52
+ facet: "interface_builder_archives",
53
+ status: decoded.data.documents.length > 0 ? "complete" : "unsupported",
54
+ reason: decoded.data.documents.length > 0
55
+ ? null
56
+ : "no_compiled_interface_builder_archives_found",
57
+ examined: decoded.data.documents.length,
58
+ omitted: 0,
59
+ });
60
+ const bounded = boundUiGraph(graph, input.max_nodes, input.max_edges);
61
+ graph = bounded.graph;
62
+ if (bounded.truncated)
63
+ coverage.push({
64
+ facet: "interface_builder_graph",
65
+ status: "partial",
66
+ reason: "native_trace_output_bounds_reached",
67
+ examined: decoded.data.graph.nodes.length + decoded.data.graph.edges.length,
68
+ omitted: bounded.omitted,
69
+ });
70
+ }
71
+ else {
72
+ coverage.push({
73
+ facet: "interface_builder_archives",
74
+ status: "unsupported",
75
+ reason: projectAnalysisError(uiExecution.error).message,
76
+ examined: 0,
77
+ omitted: 0,
78
+ });
79
+ }
80
+ const selected = resolveUiAction(graph, input.action);
81
+ if (selected.nodeId === null) {
82
+ coverage.push(...graph.coverage);
83
+ const trace = {
84
+ target_sha256: graph.target_sha256,
85
+ provider: graph.provider,
86
+ start: input.action,
87
+ direction: "forward",
88
+ nodes: selected.candidates,
89
+ edges: [],
90
+ unresolved: [],
91
+ reached_depth: 0,
92
+ truncated: graph.truncated,
93
+ reason: selected.reason,
94
+ coverage,
95
+ limitations: [
96
+ "The query did not identify one unique authored UI action; no handler path was inferred.",
97
+ ],
98
+ };
99
+ return ok(jsonValueSchema.parse(nativeInvestigationTraceSchema.parse(trace)));
100
+ }
101
+ const initial = traceNativeInvestigationGraph(graph, {
102
+ start: selected.nodeId,
103
+ direction: "forward",
104
+ limits: {
105
+ max_depth: input.max_depth,
106
+ max_nodes: input.max_nodes,
107
+ max_edges: input.max_edges,
108
+ },
109
+ });
110
+ const expanded = await addDirectCallees({
111
+ analysis,
112
+ graph,
113
+ initial,
114
+ input,
115
+ targetSha256,
116
+ signal,
117
+ });
118
+ if (expanded.error !== undefined)
119
+ return err(expanded.error);
120
+ coverage.push({
121
+ facet: "direct_native_calls",
122
+ status: "partial",
123
+ reason: "resolved_direct_calls_do_not_cover_all_indirect_dispatch",
124
+ examined: expanded.examined,
125
+ omitted: expanded.omitted,
126
+ });
127
+ coverage.push({
128
+ facet: "cross_function_value_flow",
129
+ status: "unsupported",
130
+ reason: "call edges identify control-flow candidates but do not recover argument, return, or shared-memory value relationships",
131
+ examined: 0,
132
+ omitted: 0,
133
+ });
134
+ const finalGraph = nativeInvestigationGraphSchema.parse({
135
+ ...graph,
136
+ nodes: expanded.nodes,
137
+ edges: expanded.edges,
138
+ coverage: [...graph.coverage, ...coverage],
139
+ truncated: graph.truncated || expanded.truncated,
140
+ });
141
+ const trace = traceNativeInvestigationGraph(finalGraph, {
142
+ start: selected.nodeId,
143
+ direction: "forward",
144
+ limits: {
145
+ max_depth: input.max_depth,
146
+ max_nodes: input.max_nodes,
147
+ max_edges: input.max_edges,
148
+ },
149
+ });
150
+ return ok(jsonValueSchema.parse(nativeInvestigationTraceSchema.parse({
151
+ ...trace,
152
+ truncated: trace.truncated || expanded.truncated || graph.truncated,
153
+ reason: expanded.truncated && trace.reason === null
154
+ ? "native_call_traversal_bound_reached"
155
+ : graph.truncated && trace.reason === null
156
+ ? "native_trace_output_bound_reached"
157
+ : trace.reason,
158
+ })));
159
+ };
160
+ const emptyGraph = (targetSha256, provider) => nativeInvestigationGraphSchema.parse({
161
+ target_sha256: targetSha256,
162
+ provider: {
163
+ id: provider.id,
164
+ version: provider.version,
165
+ tool_version: "rea-native-ui-trace/1",
166
+ },
167
+ nodes: [],
168
+ edges: [],
169
+ coverage: [],
170
+ truncated: false,
171
+ });
172
+ const boundUiGraph = (graph, maxNodes, maxEdges) => {
173
+ const nodes = graph.nodes.slice(0, maxNodes);
174
+ const nodeIds = new Set(nodes.map(({ id }) => id));
175
+ const eligibleEdges = graph.edges.filter((edge) => nodeIds.has(edge.from) && (edge.to === null || nodeIds.has(edge.to)));
176
+ const edges = eligibleEdges.slice(0, maxEdges);
177
+ const omitted = graph.nodes.length - nodes.length + graph.edges.length - edges.length;
178
+ const truncated = omitted > 0;
179
+ return {
180
+ graph: nativeInvestigationGraphSchema.parse({
181
+ ...graph,
182
+ nodes,
183
+ edges,
184
+ truncated: graph.truncated || truncated,
185
+ }),
186
+ truncated,
187
+ omitted,
188
+ };
189
+ };
190
+ const resolveUiAction = (graph, query) => {
191
+ const exactId = graph.nodes.find((node) => node.id === query);
192
+ if (exactId?.kind === "action")
193
+ return { nodeId: exactId.id, candidates: [], reason: null };
194
+ const actions = graph.nodes.filter((node) => node.kind === "action" &&
195
+ (node.name === query || node.attributes.selector === query));
196
+ if (actions.length === 1)
197
+ return { nodeId: actions[0]?.id ?? null, candidates: [], reason: null };
198
+ if (actions.length > 1)
199
+ return {
200
+ nodeId: null,
201
+ candidates: actions,
202
+ reason: "action_selector_matches_multiple_ui_connections",
203
+ };
204
+ const objectMatches = graph.nodes.filter((node) => ["control", "view", "view_controller", "scene"].includes(node.kind) &&
205
+ (node.id === query ||
206
+ node.attributes.interface_builder_object_id === query ||
207
+ node.id.endsWith(`:object:${query}`)));
208
+ const actionIds = new Set(graph.edges.flatMap((edge) => edge.resolution === "observed" &&
209
+ edge.relation === "target_action" &&
210
+ objectMatches.some(({ id }) => edge.from === id) &&
211
+ graph.nodes.some(({ id, kind }) => id === edge.to && kind === "action")
212
+ ? [edge.to]
213
+ : []));
214
+ if (actionIds.size === 1)
215
+ return { nodeId: [...actionIds][0] ?? null, candidates: [], reason: null };
216
+ if (actionIds.size > 1)
217
+ return {
218
+ nodeId: null,
219
+ candidates: graph.nodes.filter(({ id }) => actionIds.has(id)),
220
+ reason: "interface_object_has_multiple_action_connections",
221
+ };
222
+ return {
223
+ nodeId: null,
224
+ candidates: [],
225
+ reason: "ui_action_or_object_not_found",
226
+ };
227
+ };
228
+ const addDirectCallees = async (input) => {
229
+ const nodes = new Map(input.initial.nodes.map((node) => [node.id, node]));
230
+ const edges = new Map([...input.initial.edges, ...input.initial.unresolved].map((edge) => [
231
+ edge.id,
232
+ edge,
233
+ ]));
234
+ const addressNames = new Map();
235
+ const depthByNode = graphNodeDepths(input.initial.start, input.initial.nodes, input.initial.edges);
236
+ for (const node of nodes.values()) {
237
+ if (node.kind === "function" && node.location?.address !== null)
238
+ addressNames.set(node.location?.address ?? "", node.name);
239
+ }
240
+ const queue = input.initial.nodes.flatMap((node) => node.kind === "function" && node.location?.address != null
241
+ ? [
242
+ {
243
+ node,
244
+ address: node.location.address,
245
+ depth: depthByNode.get(node.id) ?? input.initial.reached_depth,
246
+ },
247
+ ]
248
+ : []);
249
+ const visited = new Set();
250
+ let queueIndex = 0;
251
+ let examined = 0;
252
+ let omitted = 0;
253
+ let truncated = false;
254
+ while (queueIndex < queue.length) {
255
+ const current = queue[queueIndex++];
256
+ if (current === undefined || visited.has(current.address))
257
+ continue;
258
+ visited.add(current.address);
259
+ if (current.depth >= input.input.max_depth) {
260
+ truncated = true;
261
+ omitted += 1;
262
+ continue;
263
+ }
264
+ if (nodes.size >= input.input.max_nodes) {
265
+ truncated = true;
266
+ omitted += queue.length - queueIndex + 1;
267
+ break;
268
+ }
269
+ const execution = await input.analysis.execute("procedure_callees", { procedure: current.address }, input.signal === undefined ? {} : { signal: input.signal });
270
+ examined += 1;
271
+ if (!execution.ok) {
272
+ if (execution.error._tag === "AnalysisCancelledError")
273
+ return { error: execution.error };
274
+ const id = `unknown-callees:${current.address}`;
275
+ edges.set(id, {
276
+ id,
277
+ from: current.node.id,
278
+ to: null,
279
+ relation: "direct_call",
280
+ resolution: "unresolved",
281
+ reason: projectAnalysisError(execution.error).message,
282
+ evidence: [],
283
+ limitations: [
284
+ "The provider could not enumerate resolved direct callees.",
285
+ ],
286
+ });
287
+ continue;
288
+ }
289
+ const related = parseRelatedAddresses(execution.value.result, "callees");
290
+ if (!related.ok) {
291
+ const id = `unknown-callees:${current.address}`;
292
+ edges.set(id, {
293
+ id,
294
+ from: current.node.id,
295
+ to: null,
296
+ relation: "direct_call",
297
+ resolution: "unresolved",
298
+ reason: "provider_returned_unreadable_callee_relationships",
299
+ evidence: [],
300
+ limitations: [
301
+ "The provider result could not be normalized into callee addresses.",
302
+ ],
303
+ });
304
+ continue;
305
+ }
306
+ for (const [index, address] of related.value.entries()) {
307
+ if (edges.size >= input.input.max_edges) {
308
+ truncated = true;
309
+ omitted += related.value.length - index;
310
+ break;
311
+ }
312
+ const targetId = `native:function:${address}`;
313
+ const evidence = [
314
+ {
315
+ kind: "reference",
316
+ description: `${execution.value.provider.name} resolved a direct callee from ${current.address} to ${address}`,
317
+ location: { address: current.address, file_offset: null },
318
+ artifact_path: null,
319
+ artifact_sha256: input.targetSha256,
320
+ },
321
+ ];
322
+ if (!nodes.has(targetId)) {
323
+ if (nodes.size >= input.input.max_nodes) {
324
+ truncated = true;
325
+ omitted += 1;
326
+ const id = `unknown-node-bound:${current.address}:${address}`;
327
+ edges.set(id, {
328
+ id,
329
+ from: current.node.id,
330
+ to: null,
331
+ relation: "direct_call",
332
+ resolution: "unresolved",
333
+ reason: "native_trace_node_bound_reached",
334
+ evidence,
335
+ limitations: [],
336
+ });
337
+ continue;
338
+ }
339
+ const name = addressNames.get(address) ?? address;
340
+ const node = {
341
+ id: targetId,
342
+ kind: "function",
343
+ name,
344
+ location: { address, file_offset: null },
345
+ attributes: { resolved_by: execution.value.provider.id },
346
+ evidence,
347
+ };
348
+ nodes.set(targetId, node);
349
+ queue.push({ node, address, depth: current.depth + 1 });
350
+ }
351
+ const edgeId = `call:${current.address}:${address}`;
352
+ edges.set(edgeId, {
353
+ id: edgeId,
354
+ from: current.node.id,
355
+ to: targetId,
356
+ relation: "direct_call",
357
+ resolution: "observed",
358
+ evidence,
359
+ limitations: [
360
+ "A resolved static call edge does not establish runtime reachability.",
361
+ ],
362
+ });
363
+ }
364
+ }
365
+ return {
366
+ nodes: [...nodes.values()],
367
+ edges: [...edges.values()],
368
+ examined,
369
+ omitted,
370
+ truncated,
371
+ };
372
+ };
373
+ const graphNodeDepths = (start, nodes, edges) => {
374
+ const known = new Set(nodes.map(({ id }) => id));
375
+ const depths = new Map([[start, 0]]);
376
+ const queue = [start];
377
+ for (let index = 0; index < queue.length; index += 1) {
378
+ const current = queue[index];
379
+ if (current === undefined)
380
+ continue;
381
+ const depth = depths.get(current) ?? 0;
382
+ for (const edge of edges) {
383
+ if (edge.resolution === "unresolved" ||
384
+ edge.from !== current ||
385
+ edge.to === null ||
386
+ !known.has(edge.to) ||
387
+ depths.has(edge.to))
388
+ continue;
389
+ depths.set(edge.to, depth + 1);
390
+ queue.push(edge.to);
391
+ }
392
+ }
393
+ return depths;
394
+ };
@@ -43,7 +43,6 @@ export const executeNodeCharacterization = async (dependencies, rawInput, option
43
43
  const executed = await runControlledReplayValidated({ ...dependencies, host }, {
44
44
  ...parsed.data.preparation.replay,
45
45
  mode: "execute",
46
- approved: true,
47
46
  plan_digest: plannedReplay.plan.plan_digest,
48
47
  }, options);
49
48
  if (!executed.ok)
@@ -54,7 +53,6 @@ export const executeNodeCharacterization = async (dependencies, rawInput, option
54
53
  if (host.instrumentation === null)
55
54
  return err(new AnalysisProtocolError("Node characterization execution omitted instrumentation evidence"));
56
55
  return ok(jsonValueSchema.parse(nodeCharacterizationExecutionOutputSchema.parse({
57
- schema_version: 1,
58
56
  phase: "execution",
59
57
  plan: prepared.value.plan,
60
58
  transformation: host.instrumentation.manifest,
@@ -76,7 +74,6 @@ const prepareValidated = async (dependencies, input, options) => {
76
74
  return err(new AnalysisProtocolError("Node characterization replay plan omitted selected module"));
77
75
  const plan = createCharacterizationPlan(input, host.instrumentation, output.plan);
78
76
  return ok({
79
- schema_version: 1,
80
77
  phase: "preparation",
81
78
  plan,
82
79
  transformation: host.instrumentation.manifest,
@@ -89,7 +86,7 @@ const createTransformationEvidence = (input, instrumentation) => createEvidence(
89
86
  sha256: input.instrumentation.artifact_sha256,
90
87
  format: "javascript-bundle",
91
88
  }, PROVIDER, {
92
- predicateType: "rea.javascript-export-transformation/v1",
89
+ predicateType: "rea.javascript-export-transformation",
93
90
  operation: PREPARE_OPERATION,
94
91
  parameters: {
95
92
  selected_alias: input.selected_alias,
@@ -115,7 +112,7 @@ const createCharacterizationEvidence = (prepared, replay) => {
115
112
  sha256: prepared.plan.artifact.sha256,
116
113
  format: "javascript-bundle",
117
114
  }, PROVIDER, {
118
- predicateType: "rea.runtime-characterization/v1",
115
+ predicateType: "rea.runtime-characterization",
119
116
  operation: EXECUTE_OPERATION,
120
117
  parameters: {
121
118
  plan_sha256: prepared.plan.plan_sha256,
@@ -141,7 +138,6 @@ const createCharacterizationEvidence = (prepared, replay) => {
141
138
  });
142
139
  };
143
140
  const createCharacterizationPlan = (input, instrumentation, replayPlan) => createRuntimeCharacterizationPlan({
144
- schema_version: 1,
145
141
  preparation_sha256: digestPreparation(instrumentation.manifest.instrumented_sha256, replayPlan.plan_digest),
146
142
  artifact: {
147
143
  path: input.instrumentation.artifact_path,
@@ -190,6 +186,6 @@ const createCharacterizationPlan = (input, instrumentation, replayPlan) => creat
190
186
  },
191
187
  });
192
188
  const digestPreparation = (instrumentedSha256, replayPlanDigest) => createHash("sha256")
193
- .update(`rea.node-characterization-preparation/v1\0${instrumentedSha256}\0${replayPlanDigest}`)
189
+ .update(`rea.node-characterization-preparation\0${instrumentedSha256}\0${replayPlanDigest}`)
194
190
  .digest("hex");
195
191
  const stableModuleId = (alias) => `module/${createHash("sha256").update(alias).digest("hex")}`;
@@ -1,7 +1,7 @@
1
1
  import { realpath } from "node:fs/promises";
2
2
  import { basename, dirname, join, resolve } from "node:path";
3
3
  import { consumePermission, clearSessionPermissions, createPermissionPolicy, evaluatePermission, grantPermission, reloadPermissionCeilings, revokePermission, } from "../domain/permissionPolicy.js";
4
- import { PermissionRequiredError } from "../domain/errors.js";
4
+ import { PermissionRequiredError, } from "../domain/errors.js";
5
5
  import { err, ok } from "../domain/result.js";
6
6
  /** Failure to establish a filesystem object's canonical authorization identity. */
7
7
  export class PermissionPathError extends Error {
@@ -74,15 +74,15 @@ const errorReason = (error) => isNotFound(error) ? "not_found" : "io";
74
74
  export class PermissionAuthority {
75
75
  policy;
76
76
  configuredAuthority;
77
- outsideCeilingRestartRequired;
78
- constructor(policy, configuredAuthority, outsideCeilingRestartRequired = false) {
77
+ outsideCeilingRemediation;
78
+ constructor(policy, configuredAuthority, outsideCeilingRemediation = "configure") {
79
79
  this.policy = policy;
80
80
  this.configuredAuthority = configuredAuthority;
81
- this.outsideCeilingRestartRequired = outsideCeilingRestartRequired;
81
+ this.outsideCeilingRemediation = outsideCeilingRemediation;
82
82
  }
83
83
  /** Create a connection-owned overlay for once and session grants. */
84
84
  createConnectionAuthority() {
85
- return new PermissionAuthority(createPermissionPolicy([]), this.configuredAuthority ?? this, true);
85
+ return new PermissionAuthority(createPermissionPolicy([]), this.configuredAuthority ?? this, "restart");
86
86
  }
87
87
  /** Canonicalize and authorize one exact operation before its side effect. */
88
88
  async authorize(request, access, options = {}) {
@@ -168,8 +168,16 @@ export class PermissionAuthority {
168
168
  if (denied.allowed)
169
169
  return ok({ decision: denied, owner: this });
170
170
  const outsideAdministratorCeiling = denied.reason === "outside_administrator_ceiling";
171
- return err(new PermissionRequiredError(request, denied.missing, ceilingFor(effective, request.capability), !outsideAdministratorCeiling && (options.elicitationSupported ?? false), options.restartRequired ??
172
- (outsideAdministratorCeiling && this.outsideCeilingRestartRequired)));
171
+ const requestedRemediation = options.remediation ?? "configure";
172
+ const remediation = outsideAdministratorCeiling && requestedRemediation !== "restart"
173
+ ? this.outsideCeilingRemediation
174
+ : requestedRemediation;
175
+ return err(new PermissionRequiredError({
176
+ requested: request,
177
+ missing: denied.missing,
178
+ ceiling: ceilingFor(effective, request.capability),
179
+ remediation,
180
+ }));
173
181
  }
174
182
  /** Atomically replace optional persisted project grants. */
175
183
  async replaceProjectGrants(grants) {
@@ -0,0 +1,5 @@
1
+ import { AnalysisProtocolError, PermissionRequiredError, } from "../domain/errors.js";
2
+ /** Preserve permission denials and project failed path resolution for callers. */
3
+ export const projectPermissionFailure = (error) => error instanceof PermissionRequiredError
4
+ ? error
5
+ : new AnalysisProtocolError(error.message, { cause: error });
@@ -1,26 +1,24 @@
1
1
  import { realpath } from "node:fs/promises";
2
+ import { isPathWithinRoot } from "../domain/localPath.js";
2
3
  import { ProcessCaptureError, processCaptureCancelled, } from "./ProcessCaptureError.js";
3
4
  import { canonicalizeConfiguredRoots } from "./ConfiguredRoots.js";
4
- const isWithin = (candidate, root) => candidate === root ||
5
- candidate.startsWith(`${root.endsWith("/") ? root.slice(0, -1) : root}/`);
6
5
  export const assertRealPathAuthority = async (scenario, policy) => {
7
6
  const executable = await realpath(scenario.executable);
8
7
  const executableRoots = await canonicalizeConfiguredRoots(policy.executableRoots);
9
- if (!executableRoots.some((root) => isWithin(executable, root)))
8
+ if (!executableRoots.some((root) => isPathWithinRoot(root, executable)))
10
9
  throw new ProcessCaptureError("resolved executable is outside approved roots");
11
10
  const workingDirectory = await realpath(scenario.working_directory);
12
11
  const workingRoots = await canonicalizeConfiguredRoots(policy.workingRoots);
13
- if (!workingRoots.some((root) => isWithin(workingDirectory, root)))
12
+ if (!workingRoots.some((root) => isPathWithinRoot(root, workingDirectory)))
14
13
  throw new ProcessCaptureError("resolved working directory is outside approved roots");
15
14
  for (const root of scenario.filesystem_roots) {
16
15
  const resolvedRoot = await realpath(root);
17
- if (!workingRoots.some((approved) => isWithin(resolvedRoot, approved)))
16
+ if (!workingRoots.some((approved) => isPathWithinRoot(approved, resolvedRoot)))
18
17
  throw new ProcessCaptureError("resolved filesystem root is outside approved roots");
19
18
  }
20
19
  };
21
- /** Expected refusal or runtime failure from the process capture adapter. */
20
+ /** Reject cancellation before a process capture operation begins. */
22
21
  export const assertNotCancelled = (signal) => {
23
22
  if (signal?.aborted === true)
24
23
  throw processCaptureCancelled();
25
24
  };
26
- /** Runtime availability of the native PTY adapter on this host. */
@@ -1,4 +1,5 @@
1
1
  import { normalizeProcessElapsedTime, normalizeProcessText, } from "./ProcessNormalization.js";
2
+ import { scheduleProcessDelay } from "./ProcessTimer.js";
2
3
  /** Create one monotonic event journal for a process capture. */
3
4
  export const createProcessCaptureJournal = () => {
4
5
  const entries = [];
@@ -51,7 +52,7 @@ export const createProcessCaptureJournal = () => {
51
52
  export const scheduleScenarioInteractions = (options) => {
52
53
  const { scenario, getTerminal, timers, interactions, renderer, started } = options;
53
54
  for (const [eventIndex, event] of scenario.events.entries()) {
54
- const timer = setTimeout(() => {
55
+ const timer = scheduleProcessDelay(event.at_ms, () => {
55
56
  options.dispatchedEventIndexes.add(eventIndex);
56
57
  const terminal = getTerminal();
57
58
  const dispatchedAt = Math.max(0, Date.now() - started);
@@ -89,7 +90,7 @@ export const scheduleScenarioInteractions = (options) => {
89
90
  outcome,
90
91
  });
91
92
  options.recordEvent("interaction_events", sequence);
92
- }, event.at_ms);
93
+ });
93
94
  timers.add(timer);
94
95
  }
95
96
  };
@@ -13,8 +13,8 @@ import { assertNotCancelled, assertRealPathAuthority, } from "./ProcessCaptureAu
13
13
  import { normalizeProcessElapsedTime, normalizeProcessSamples, normalizeProcessText, redactProtocolEvents, } from "./ProcessNormalization.js";
14
14
  import { PROCESS_PROVIDER } from "./ProcessEvidence.js";
15
15
  import { TerminalRenderer } from "./TerminalRenderer.js";
16
+ import { scheduleProcessInterval } from "./ProcessTimer.js";
16
17
  export const buildCaptureResult = (options) => ({
17
- schema_version: 4,
18
18
  manifest: options.manifest,
19
19
  normalization: options.scenario.normalization,
20
20
  frames: options.frames,
@@ -33,7 +33,6 @@ export const buildCaptureResult = (options) => ({
33
33
  shim_events: options.shimEvents,
34
34
  protocol_events: redactProtocolEvents(options.replay.events, options.scenario),
35
35
  replay_transitions: options.replay.transitions,
36
- reactive_run: options.reactiveRun,
37
36
  event_journal: options.eventJournal,
38
37
  files_before: options.before.files,
39
38
  files_after: options.after.files,
@@ -57,10 +56,6 @@ export const buildCaptureResult = (options) => ({
57
56
  reason: "External network isolation is not enforced by this adapter.",
58
57
  },
59
58
  ],
60
- cleanup: {
61
- owned_process_group: "verified",
62
- temporary_root: "removed",
63
- },
64
59
  });
65
60
  const hashFile = async (path) => {
66
61
  const hash = createHash("sha256");
@@ -153,13 +148,12 @@ export const awaitTerminalExit = async ({ terminal, scenario, started, lastOutpu
153
148
  recordEvent("interaction_events", sequence);
154
149
  }
155
150
  for (const timer of timers) {
156
- clearTimeout(timer);
157
- clearInterval(timer);
151
+ timer.cancel();
158
152
  }
159
153
  timers.clear();
160
154
  resolveExit({ ...exit, reason });
161
155
  });
162
- const timeout = setInterval(() => {
156
+ const timeout = scheduleProcessInterval(() => {
163
157
  if (signal?.aborted === true) {
164
158
  reason = "cancelled";
165
159
  terminal.kill("SIGKILL");
@@ -177,7 +171,7 @@ export const awaitTerminalExit = async ({ terminal, scenario, started, lastOutpu
177
171
  });
178
172
  export const releaseProcessResources = async (options) => {
179
173
  for (const timer of options.timers)
180
- clearTimeout(timer);
174
+ timer.cancel();
181
175
  let failure;
182
176
  try {
183
177
  await options.replay?.close();
@@ -228,8 +222,7 @@ export const captureTerminalFrames = (options) => {
228
222
  options.terminal.onData((data) => {
229
223
  options.onOutput();
230
224
  const bytes = Buffer.byteLength(data);
231
- if (options.frames.length >= options.scenario.limits.frames ||
232
- outputBytes + bytes > options.scenario.limits.output_bytes) {
225
+ if (outputBytes + bytes > options.scenario.limits.output_bytes) {
233
226
  truncated = true;
234
227
  return;
235
228
  }