rea-agents 3.1.0 → 3.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (590) hide show
  1. package/README.md +72 -95
  2. package/bridge/ghidra/ReaGhidraBridge.java +609 -841
  3. package/bridge/hopper_bridge.py +99 -344
  4. package/dist/application/AbortablePromise.js +6 -3
  5. package/dist/application/AnalysisSnapshotCache.js +0 -1
  6. package/dist/application/AnalysisSnapshotFiles.js +7 -7
  7. package/dist/application/AndroidApplicationService.js +1 -1
  8. package/dist/application/AppleApplicationService.js +1 -1
  9. package/dist/application/ArtifactExtraction.js +35 -54
  10. package/dist/application/ArtifactExtractionDestination.js +17 -0
  11. package/dist/application/ArtifactGraphConstruction.js +2 -17
  12. package/dist/application/ArtifactInventory/classify.js +2 -6
  13. package/dist/application/ArtifactInventory/hash.js +2 -20
  14. package/dist/application/ArtifactInventory/scanCanonical.js +8 -12
  15. package/dist/application/ArtifactInventory/scanReader.js +69 -51
  16. package/dist/application/ArtifactInventory.js +6 -14
  17. package/dist/application/AuthorizedArtifactInventory.js +3 -13
  18. package/dist/application/BinarySession.js +41 -13
  19. package/dist/application/BinarySessionComposition.js +0 -11
  20. package/dist/application/BinarySessionOpen.js +2 -1
  21. package/dist/application/BinarySessionRecords.js +5 -93
  22. package/dist/application/BinarySessionStatus.js +5 -16
  23. package/dist/application/BinaryTargetResolver.js +216 -0
  24. package/dist/application/BrowserEvidence.js +42 -58
  25. package/dist/application/BrowserObservationService.js +3 -6
  26. package/dist/application/BrowserScenarioCaptureService.js +3 -6
  27. package/dist/application/BrowserScenarioEvidence.js +3 -3
  28. package/dist/application/CallPathTracing.js +2 -36
  29. package/dist/application/CapabilityInventory.js +10 -15
  30. package/dist/application/ClientConfigurationDocument.js +27 -0
  31. package/dist/application/ClientRegistrationStatus.js +16 -13
  32. package/dist/application/CommandShimReplay.js +14 -1
  33. package/dist/application/DirectAnalysis.js +22 -46
  34. package/dist/application/DirectAnalysisStatus.js +5 -61
  35. package/dist/application/Doctor.js +11 -32
  36. package/dist/application/DoctorDiagnostics.js +1 -2
  37. package/dist/application/DoctorScope.js +1 -1
  38. package/dist/application/ElectronActiveEvidence.js +3 -8
  39. package/dist/application/ElectronActiveObservationService.js +3 -6
  40. package/dist/application/ElectronBoundaryAnalysis.js +7 -8
  41. package/dist/application/ElectronBoundaryGraphContext.js +1 -1
  42. package/dist/application/ElectronBoundaryGraphIpc.js +3 -3
  43. package/dist/application/ElectronBoundaryGraphNative.js +1 -2
  44. package/dist/application/ElectronBoundaryGraphWindows.js +6 -8
  45. package/dist/application/ElectronEvidence.js +4 -7
  46. package/dist/application/ElectronObservationService.js +5 -9
  47. package/dist/application/EnhancedLiteralTracing.js +42 -65
  48. package/dist/application/EnhancedTools.js +76 -44
  49. package/dist/application/EvidenceBundleCommands.js +11 -11
  50. package/dist/application/EvidenceBundleFiles.js +9 -15
  51. package/dist/application/EvidenceLedger.js +6 -41
  52. package/dist/application/FilesystemSnapshot.js +2 -3
  53. package/dist/application/InterfaceBuilderAnalysis.js +266 -0
  54. package/dist/application/InventoryProjectionEvidence.js +4 -2
  55. package/dist/application/InvestigationProviders.js +1 -1
  56. package/dist/application/JavaScriptApplicationEvidence.js +2 -5
  57. package/dist/application/JavaScriptApplicationEvidenceGraph.js +6 -10
  58. package/dist/application/JavaScriptApplicationService.js +6 -29
  59. package/dist/application/JavaScriptApplicationWorkflowEvidence.js +5 -5
  60. package/dist/application/JavaScriptApplicationWorkflowService.js +0 -8
  61. package/dist/application/JavaScriptArtifactAnalysis.js +38 -127
  62. package/dist/application/JavaScriptArtifactFiles.js +67 -107
  63. package/dist/application/JavaScriptArtifactGraphAccumulator.js +0 -7
  64. package/dist/application/JavaScriptArtifactGraphBuilder.js +7 -58
  65. package/dist/application/JavaScriptArtifactGraphBundlers.js +1 -6
  66. package/dist/application/JavaScriptArtifactGraphContext.js +12 -39
  67. package/dist/application/JavaScriptArtifactGraphDocuments.js +4 -11
  68. package/dist/application/JavaScriptArtifactGraphEvidence.js +0 -14
  69. package/dist/application/JavaScriptArtifactGraphFindings.js +3 -3
  70. package/dist/application/JavaScriptArtifactGraphStructure.js +16 -17
  71. package/dist/application/JavaScriptArtifactPathResolution.js +61 -49
  72. package/dist/application/JavaScriptArtifactReconstruction.js +5 -10
  73. package/dist/application/JavaScriptArtifactReconstructionInput.js +2 -14
  74. package/dist/application/JavaScriptJsonModules.js +2 -2
  75. package/dist/application/JavaScriptModuleRelationships.js +22 -27
  76. package/dist/application/JavaScriptReplayPlanning.js +9 -3
  77. package/dist/application/JavaScriptReplayService.js +6 -32
  78. package/dist/application/JavaScriptReturnShapeProjection.js +12 -42
  79. package/dist/application/JavaScriptRuntimeObservationEvidence.js +7 -8
  80. package/dist/application/JavaScriptRuntimeObservationService.js +4 -8
  81. package/dist/application/JavaScriptRuntimeReconciliationEvidence.js +2 -3
  82. package/dist/application/JavaScriptSemanticGraphBuilder.js +11 -41
  83. package/dist/application/JavaScriptSemanticGraphConstruction.js +5 -29
  84. package/dist/application/JavaScriptSemanticGraphEvidence.js +1 -1
  85. package/dist/application/JavaScriptSemanticGraphFingerprintProjection.js +1 -1
  86. package/dist/application/JavaScriptSemanticGraphFlowProjection.js +0 -13
  87. package/dist/application/JavaScriptSemanticGraphProjection.js +1 -3
  88. package/dist/application/JavaScriptSemanticTraceService.js +1 -10
  89. package/dist/application/JsonFiles.js +79 -0
  90. package/dist/application/LinuxHopper.js +11 -9
  91. package/dist/application/LoopbackReplay.js +26 -23
  92. package/dist/application/LoopbackReplayRecorder.js +29 -1
  93. package/dist/application/ManagedApplicationGraphService.js +1 -2
  94. package/dist/application/ManagedMemberComparisonService.js +11 -41
  95. package/dist/application/ManagedNativeVerificationService.js +1 -2
  96. package/dist/application/ManagedReconstructionService.js +1 -1
  97. package/dist/application/ManagedRuntimeCorrelationService.js +5 -8
  98. package/dist/application/NativeApiInspection.js +2 -7
  99. package/dist/application/NativeUiActionTrace.js +394 -0
  100. package/dist/application/NodeRuntimeCharacterizationService.js +3 -7
  101. package/dist/application/PermissionAuthority.js +15 -7
  102. package/dist/application/PermissionFailure.js +5 -0
  103. package/dist/application/ProcessCaptureAuthority.js +5 -7
  104. package/dist/application/ProcessCaptureJournal.js +3 -2
  105. package/dist/application/ProcessCaptureLifecycle.js +5 -12
  106. package/dist/application/ProcessCheckpoints.js +29 -11
  107. package/dist/application/ProcessCli.js +6 -16
  108. package/dist/application/ProcessEvidence.js +5 -7
  109. package/dist/application/ProcessHarness.js +52 -17
  110. package/dist/application/ProcessReactiveCoordinator.js +2 -4
  111. package/dist/application/ProcessReactiveEffects.js +9 -3
  112. package/dist/application/ProcessReactiveHarness.js +13 -7
  113. package/dist/application/ProcessSampling.js +2 -4
  114. package/dist/application/ProcessTimer.js +39 -0
  115. package/dist/application/ProjectPermissionStore.js +39 -96
  116. package/dist/application/RealHopperAssertions.js +20 -66
  117. package/dist/application/ReconstructionCoverageService.js +12 -58
  118. package/dist/application/ReconstructionObligationAuthority.js +2 -2
  119. package/dist/application/ReconstructionObligationCandidates.js +4 -4
  120. package/dist/application/ReconstructionObligationLedgerEvaluation.js +8 -15
  121. package/dist/application/ReconstructionObligationLedgerProjection.js +3 -7
  122. package/dist/application/ReconstructionObligationLedgerService.js +19 -38
  123. package/dist/application/ReferenceSourceImport.js +19 -45
  124. package/dist/application/ReferenceSourceImportEntries.js +2 -4
  125. package/dist/application/ReferenceSourceImportPolicy.js +5 -32
  126. package/dist/application/ReferenceSourceImportTypes.js +0 -16
  127. package/dist/application/RuntimeExecutableDiagnostics.js +55 -29
  128. package/dist/application/SessionProviderRouter.js +2 -2
  129. package/dist/application/Setup.js +1 -3
  130. package/dist/application/SetupClientConfiguration.js +22 -93
  131. package/dist/application/SetupRegistrationEnvironment.js +0 -7
  132. package/dist/application/StoreFileLock.js +119 -0
  133. package/dist/application/TerminalRenderer.js +2 -3
  134. package/dist/application/Uninstall.js +9 -14
  135. package/dist/application/UnknownEvidence.js +1 -1
  136. package/dist/artifacts/ArtifactPaths.js +2 -5
  137. package/dist/artifacts/ArtifactProvider.js +36 -58
  138. package/dist/artifacts/DirectoryArtifactReader.js +13 -8
  139. package/dist/artifacts/MachOSliceArtifactReader.js +1 -5
  140. package/dist/artifacts/NativeDmgArtifactReader.js +11 -11
  141. package/dist/artifacts/NibArchive.js +269 -0
  142. package/dist/artifacts/SafeOutputTree.js +15 -24
  143. package/dist/browser/BrowserProcessStartup.js +1 -2
  144. package/dist/browser/CdpAuthorizedMainFrame.js +16 -0
  145. package/dist/browser/CdpBrowserProvider.js +3 -13
  146. package/dist/browser/CdpCanonicalJsonDigest.js +9 -0
  147. package/dist/browser/CdpCaptureDocuments.js +28 -76
  148. package/dist/browser/CdpCaptureEventBodyShapes.js +13 -33
  149. package/dist/browser/CdpCaptureEventHandlers.js +22 -87
  150. package/dist/browser/CdpCaptureEvents.js +2 -8
  151. package/dist/browser/CdpCaptureStorage.js +9 -20
  152. package/dist/browser/CdpCaptureStorageFingerprints.js +85 -98
  153. package/dist/browser/CdpCaptureValues.js +21 -21
  154. package/dist/browser/CdpConnection.js +10 -25
  155. package/dist/browser/CdpElectronInspection.js +26 -50
  156. package/dist/browser/CdpElectronProvider.js +10 -35
  157. package/dist/browser/CdpElectronScriptEvents.js +8 -16
  158. package/dist/browser/CdpElectronScripts.js +6 -35
  159. package/dist/browser/CdpElectronWorkers.js +6 -10
  160. package/dist/browser/CdpEndpoint.js +25 -41
  161. package/dist/browser/CdpObservationSession.js +14 -26
  162. package/dist/browser/CdpPageCapture.js +34 -48
  163. package/dist/browser/CdpPageCaptureScripts.js +1 -19
  164. package/dist/browser/CdpPageCaptureWorkers.js +6 -10
  165. package/dist/browser/CdpSafeMetadata.js +19 -22
  166. package/dist/browser/CdpScreenshot.js +3 -5
  167. package/dist/browser/CdpTargetSession.js +1 -2
  168. package/dist/browser/CdpWebMcpDiscovery.js +13 -22
  169. package/dist/browser/ElectronFileScope.js +8 -19
  170. package/dist/browser/JavaScriptRuntimeScope.js +9 -14
  171. package/dist/browser/PlaywrightBrowserScenarioProvider.js +31 -64
  172. package/dist/browser/PlaywrightElectronActiveActions.js +54 -69
  173. package/dist/browser/PlaywrightElectronActiveProvider.js +14 -34
  174. package/dist/browser/PlaywrightExecutionBoundary.js +16 -5
  175. package/dist/browser/PlaywrightScenarioActions.js +3 -7
  176. package/dist/browser/PlaywrightScenarioArtifacts.js +23 -92
  177. package/dist/browser/PlaywrightScenarioBrowser.js +3 -5
  178. package/dist/browser/PlaywrightScenarioEvents.js +45 -94
  179. package/dist/browser/PlaywrightScenarioSession.js +14 -30
  180. package/dist/browser/PngVisualDiff.js +22 -14
  181. package/dist/browser/SensitiveTextCapture.js +0 -17
  182. package/dist/browser/V8InspectorCaptureProjection.js +7 -8
  183. package/dist/browser/V8InspectorEndpoint.js +12 -14
  184. package/dist/browser/V8InspectorProvider.js +20 -61
  185. package/dist/browser/WebSourceMapFetcher.js +56 -176
  186. package/dist/catalogIdentity.js +0 -54
  187. package/dist/cli/artifactCommands.js +49 -77
  188. package/dist/cli/coreAnalysisCommands.js +83 -133
  189. package/dist/cli/javascriptApplicationAnalysis.js +1 -9
  190. package/dist/cli/managedCommands.js +5 -270
  191. package/dist/cli/setupCommands.js +3 -12
  192. package/dist/cli/utilityCommands.js +7 -41
  193. package/dist/cli.js +0 -2
  194. package/dist/cliApplicationCommands.js +42 -112
  195. package/dist/cliBrowserAdvancedCommands.js +10 -106
  196. package/dist/cliBrowserCommands.js +15 -127
  197. package/dist/cliBrowserContext.js +30 -0
  198. package/dist/cliCommandNames.js +4 -5
  199. package/dist/cliElectronCommands.js +8 -72
  200. package/dist/cliEvidenceCommands.js +8 -77
  201. package/dist/cliJavaScriptRuntimeCommands.js +9 -91
  202. package/dist/cliJsonInput.js +4 -14
  203. package/dist/cliObservationOptions.js +11 -96
  204. package/dist/cliPolicyCommands.js +2 -17
  205. package/dist/cliProcessCommands.js +3 -3
  206. package/dist/cliSetup.js +0 -13
  207. package/dist/config/browserScenario.js +2 -2
  208. package/dist/config/environment.js +0 -9
  209. package/dist/config/parseConfig.js +1 -33
  210. package/dist/config/parsers.js +6 -27
  211. package/dist/config/passiveObservation.js +7 -77
  212. package/dist/config/permissions.js +0 -7
  213. package/dist/contracts/analysisSearchContract.js +2 -5
  214. package/dist/contracts/applicationToolContracts.js +56 -109
  215. package/dist/contracts/applicationWorkflowInputContracts.js +27 -102
  216. package/dist/contracts/artifactComparisonExample.js +58 -60
  217. package/dist/contracts/artifactToolContracts.js +20 -67
  218. package/dist/contracts/browserScenarioToolContracts.js +6 -51
  219. package/dist/contracts/browserToolContracts.js +8 -73
  220. package/dist/contracts/electronToolContracts.js +8 -108
  221. package/dist/contracts/enhancedInputs.js +23 -54
  222. package/dist/contracts/errorSchemas.js +0 -1
  223. package/dist/contracts/functionComparisonExample.js +10 -24
  224. package/dist/contracts/functionInstructionContract.js +1 -3
  225. package/dist/contracts/functionWorkflowToolContracts.js +2 -2
  226. package/dist/contracts/hopperMemoryContracts.js +3 -3
  227. package/dist/contracts/investigationExamples.js +14 -11
  228. package/dist/contracts/javascriptApplicationWorkflowExamples.js +12 -19
  229. package/dist/contracts/javascriptRuntimeObservationToolContracts.js +2 -20
  230. package/dist/contracts/javascriptRuntimeReconciliationExample.js +45 -12
  231. package/dist/contracts/managedToolContracts.js +6 -95
  232. package/dist/contracts/managedWorkflowExamples.js +77 -128
  233. package/dist/contracts/managedWorkflowToolContracts.js +51 -77
  234. package/dist/contracts/nativeToolContracts.js +7 -11
  235. package/dist/contracts/processCaptureExample.js +2 -69
  236. package/dist/contracts/promptContracts.js +49 -67
  237. package/dist/contracts/providerSelection.js +0 -1
  238. package/dist/contracts/reconstructionReadinessExample.js +1 -6
  239. package/dist/contracts/sessionStatusContract.js +1 -17
  240. package/dist/contracts/sessionToolSchemas.js +6 -15
  241. package/dist/contracts/toolContractExamples.js +11 -11
  242. package/dist/contracts/toolContractHelpers.js +0 -4
  243. package/dist/contracts/toolContracts.js +60 -71
  244. package/dist/contracts/toolEffects.js +5 -13
  245. package/dist/contracts/toolOutputSchemaGroups.js +37 -91
  246. package/dist/contracts/toolOutputSchemaPrimitives.js +16 -56
  247. package/dist/contracts/toolSchemaMetadata.js +8 -19
  248. package/dist/contracts/unknownContractExamples.js +0 -2
  249. package/dist/domain/analysisErrorPresentation.js +46 -54
  250. package/dist/domain/analysisErrorProjection.js +28 -37
  251. package/dist/domain/analysisProfile.js +3 -31
  252. package/dist/domain/analysisSnapshot.js +3 -12
  253. package/dist/domain/androidApplication.js +15 -54
  254. package/dist/domain/appleApplication.js +24 -67
  255. package/dist/domain/artifactComparison.js +11 -29
  256. package/dist/domain/artifactGraph.js +14 -44
  257. package/dist/domain/artifactInspection.js +38 -69
  258. package/dist/domain/artifactInventoryEvidence.js +27 -21
  259. package/dist/domain/binaryTarget.js +2 -221
  260. package/dist/domain/browserCaptureComparison.js +47 -24
  261. package/dist/domain/browserObservation.js +28 -193
  262. package/dist/domain/browserObservationSchemas.js +5 -23
  263. package/dist/domain/browserScenario.js +11 -14
  264. package/dist/domain/browserScenarioCapture.js +11 -12
  265. package/dist/domain/browserScenarioCaptureValues.js +146 -84
  266. package/dist/domain/browserScenarioDiff.js +2 -59
  267. package/dist/domain/browserScenarioDiffEvidence.js +51 -0
  268. package/dist/domain/browserScenarioDiffValues.js +21 -38
  269. package/dist/domain/browserScenarioValues.js +80 -109
  270. package/dist/domain/browserSession.js +4 -7
  271. package/dist/domain/bundleComparison.js +6 -32
  272. package/dist/domain/bytecodeProvider.js +20 -19
  273. package/dist/domain/callPath.js +47 -167
  274. package/dist/domain/callPathSchemas.js +79 -0
  275. package/dist/domain/changedBehavior.js +34 -60
  276. package/dist/domain/completionLedgerGeneration.js +8 -14
  277. package/dist/domain/conformancePackage.js +126 -97
  278. package/dist/domain/conformanceReplay.js +36 -8
  279. package/dist/domain/conformanceTrustGate.js +23 -14
  280. package/dist/domain/customProtocolCapture.js +1 -1
  281. package/dist/domain/electronActiveObservation.js +70 -103
  282. package/dist/domain/electronObservation.js +14 -80
  283. package/dist/domain/electronStaticAnalysisBrowser.js +36 -46
  284. package/dist/domain/electronStaticAnalysisIpc.js +38 -14
  285. package/dist/domain/electronStaticAnalysisNative.js +1 -8
  286. package/dist/domain/electronStaticAnalysisValues.js +10 -17
  287. package/dist/domain/errors.js +33 -54
  288. package/dist/domain/eventProcessTree.js +20 -12
  289. package/dist/domain/evidence.js +2 -10
  290. package/dist/domain/evidenceBundle.js +3 -5
  291. package/dist/domain/evidenceCompletionLedger.js +6 -8
  292. package/dist/domain/functionComparison.js +4 -14
  293. package/dist/domain/functionComparisonNormalization.js +4 -11
  294. package/dist/domain/functionComparisonResults.js +25 -15
  295. package/dist/domain/functionComparisonSchemas.js +49 -33
  296. package/dist/domain/functionDossierEvidence.js +31 -156
  297. package/dist/domain/hopperStartupFailure.js +1 -1
  298. package/dist/domain/hopperValues.js +15 -136
  299. package/dist/domain/interfaceBuilderGraph.js +654 -0
  300. package/dist/domain/javascriptApplicationAnalysis.js +8 -112
  301. package/dist/domain/javascriptApplicationChangeGraph.js +22 -82
  302. package/dist/domain/javascriptApplicationEvidenceSchemas.js +59 -47
  303. package/dist/domain/javascriptApplicationGraph.js +3 -13
  304. package/dist/domain/javascriptApplicationGraphSchemas.js +12 -34
  305. package/dist/domain/javascriptApplicationVersionComparison.js +26 -30
  306. package/dist/domain/javascriptApplicationVersionComparisonSchemas.js +123 -68
  307. package/dist/domain/javascriptApplicationVersionItems.js +120 -53
  308. package/dist/domain/javascriptApplicationVersionKeys.js +24 -11
  309. package/dist/domain/javascriptAstFingerprint.js +25 -58
  310. package/dist/domain/javascriptAstValues.js +9 -0
  311. package/dist/domain/javascriptExportInstrumentation.js +2 -4
  312. package/dist/domain/javascriptExportShapeComparison.js +6 -7
  313. package/dist/domain/javascriptExportShapeComparisonSchemas.js +68 -75
  314. package/dist/domain/javascriptExportShapeSelection.js +17 -19
  315. package/dist/domain/javascriptFeatureSeed.js +20 -12
  316. package/dist/domain/javascriptFeatureTrace.js +13 -67
  317. package/dist/domain/javascriptFeatureTraceSchemas.js +24 -52
  318. package/dist/domain/javascriptFeatureTraversal.js +1 -44
  319. package/dist/domain/javascriptNativeHandoff.js +1 -1
  320. package/dist/domain/javascriptReplay.js +24 -41
  321. package/dist/domain/javascriptRuntimeLoadState.js +3 -8
  322. package/dist/domain/javascriptRuntimeObservation.js +42 -103
  323. package/dist/domain/javascriptRuntimeReconciliation.js +1 -3
  324. package/dist/domain/javascriptRuntimeReconciliationActive.js +8 -17
  325. package/dist/domain/javascriptRuntimeReconciliationGraph.js +10 -23
  326. package/dist/domain/javascriptRuntimeReconciliationMatching.js +18 -12
  327. package/dist/domain/javascriptRuntimeReconciliationParsing.js +16 -45
  328. package/dist/domain/javascriptRuntimeReconciliationResult.js +4 -5
  329. package/dist/domain/javascriptRuntimeReconciliationRuntime.js +8 -12
  330. package/dist/domain/javascriptRuntimeReconciliationSchemas.js +33 -48
  331. package/dist/domain/javascriptRuntimeStaticCandidates.js +3 -3
  332. package/dist/domain/javascriptSemanticAnalysis.js +12 -45
  333. package/dist/domain/javascriptSemanticAsyncEffects.js +1 -9
  334. package/dist/domain/javascriptSemanticCallResolution.js +6 -16
  335. package/dist/domain/javascriptSemanticCalls.js +5 -32
  336. package/dist/domain/javascriptSemanticChildProcesses.js +1 -11
  337. package/dist/domain/javascriptSemanticCoverage.js +11 -0
  338. package/dist/domain/javascriptSemanticDataEffectHelpers.js +1 -8
  339. package/dist/domain/javascriptSemanticDataEffects.js +1 -11
  340. package/dist/domain/javascriptSemanticFingerprints.js +3 -5
  341. package/dist/domain/javascriptSemanticGraphSchemas.js +25 -51
  342. package/dist/domain/javascriptSemanticGraphSerialization.js +2 -13
  343. package/dist/domain/javascriptSemanticIr.js +1 -29
  344. package/dist/domain/javascriptSemanticObjects.js +1 -5
  345. package/dist/domain/javascriptSemanticPrimitives.js +2 -9
  346. package/dist/domain/javascriptSemanticProjection.js +0 -18
  347. package/dist/domain/javascriptSemanticPromises.js +9 -16
  348. package/dist/domain/javascriptSemanticProvenance.js +16 -19
  349. package/dist/domain/javascriptSemanticQuery.js +17 -139
  350. package/dist/domain/javascriptSemanticQueryAssessment.js +9 -37
  351. package/dist/domain/javascriptSemanticQueryIdentity.js +2 -23
  352. package/dist/domain/javascriptSemanticQuerySchemas.js +14 -107
  353. package/dist/domain/javascriptSemanticResources.js +1 -6
  354. package/dist/domain/javascriptSemanticReturns.js +10 -27
  355. package/dist/domain/javascriptSemanticValueTypes.js +1 -0
  356. package/dist/domain/javascriptSemanticValues.js +44 -62
  357. package/dist/domain/javascriptStaticAnalysis.js +21 -43
  358. package/dist/domain/javascriptStaticAnalysisBundler.js +34 -93
  359. package/dist/domain/javascriptStaticAnalysisCalls.js +17 -16
  360. package/dist/domain/javascriptStaticAnalysisFindings.js +3 -19
  361. package/dist/domain/javascriptStaticAnalysisHelpers.js +47 -88
  362. package/dist/domain/javascriptStaticAnalysisState.js +1 -5
  363. package/dist/domain/javascriptStaticAnalysisTypes.js +1 -0
  364. package/dist/domain/jsonShape.js +7 -33
  365. package/dist/domain/localPath.js +7 -0
  366. package/dist/domain/managedApplicationGraph.js +9 -41
  367. package/dist/domain/managedApplicationGraphCoverage.js +24 -156
  368. package/dist/domain/managedApplicationGraphNodes.js +10 -13
  369. package/dist/domain/managedArtifact.js +14 -27
  370. package/dist/domain/managedMemberComparison.js +90 -92
  371. package/dist/domain/managedMemberComparisonCoverage.js +11 -33
  372. package/dist/domain/managedMemberComparisonItems.js +221 -0
  373. package/dist/domain/managedMemberComparisonMatch.js +8 -208
  374. package/dist/domain/managedNativeVerification.js +3 -6
  375. package/dist/domain/managedNativeVerificationMatch.js +55 -59
  376. package/dist/domain/managedNativeVerificationSchemas.js +83 -47
  377. package/dist/domain/managedReconstruction.js +19 -23
  378. package/dist/domain/managedRuntimeCorrelation.js +6 -9
  379. package/dist/domain/nativeApiBoundary.js +2 -7
  380. package/dist/domain/nativeInspection.js +0 -2
  381. package/dist/domain/nativeInvestigationGraph.js +351 -0
  382. package/dist/domain/nativeValueFlow.js +61 -0
  383. package/dist/domain/nodeRuntimeCharacterization.js +1 -5
  384. package/dist/domain/objcSwiftMetadata.js +254 -0
  385. package/dist/domain/peInspection.js +1 -1
  386. package/dist/domain/permissionPolicy.js +13 -0
  387. package/dist/domain/processCapture.js +76 -113
  388. package/dist/domain/processCaptureExample.js +68 -0
  389. package/dist/domain/processCaptureParsing.js +21 -0
  390. package/dist/domain/processCaptureReactiveSchema.js +68 -0
  391. package/dist/domain/processCaptureValidation.js +1 -7
  392. package/dist/domain/processComparison.js +3 -12
  393. package/dist/domain/processReactiveMatching.js +29 -50
  394. package/dist/domain/processReactiveRuntime.js +4 -8
  395. package/dist/domain/processReactiveScenario.js +28 -94
  396. package/dist/domain/processReactiveScenarioPreflight.js +5 -30
  397. package/dist/domain/processReactiveTransition.js +33 -18
  398. package/dist/domain/processScenario.js +56 -90
  399. package/dist/domain/processTraceComparison.js +0 -8
  400. package/dist/domain/processTraceEvaluation.js +14 -4
  401. package/dist/domain/processTraceSpecification.js +11 -17
  402. package/dist/domain/protocolCapture.js +3 -3
  403. package/dist/domain/reconstructionCoverage.js +62 -129
  404. package/dist/domain/reconstructionCoverageEvaluation.js +17 -17
  405. package/dist/domain/reconstructionObligationLedgerSchemas.js +45 -72
  406. package/dist/domain/reconstructionReadiness.js +1 -2
  407. package/dist/domain/reconstructionReadinessSchemas.js +36 -38
  408. package/dist/domain/reconstructionUnknowns.js +3 -3
  409. package/dist/domain/reconstructionVerification.js +13 -47
  410. package/dist/domain/reconstructionVerificationSchemas.js +50 -38
  411. package/dist/domain/referenceSourceGraph.js +53 -61
  412. package/dist/domain/referenceSourceImportParsing.js +1 -5
  413. package/dist/domain/replayMachine.js +19 -31
  414. package/dist/domain/replayMachineRun.js +15 -63
  415. package/dist/domain/replayMachineRuntime.js +41 -41
  416. package/dist/domain/replayMachineValues.js +84 -0
  417. package/dist/domain/residualUnknown.js +25 -30
  418. package/dist/domain/runtimeCharacterization.js +15 -16
  419. package/dist/domain/runtimeIdentification.js +48 -47
  420. package/dist/domain/sourceToBundleComparison.js +9 -85
  421. package/dist/domain/sourceToBundleComparisonSchemas.js +17 -42
  422. package/dist/domain/sourceToBundleSignals.js +4 -15
  423. package/dist/domain/staticRuntimeCorrelation.js +37 -49
  424. package/dist/domain/symbolAnalysis.js +10 -19
  425. package/dist/domain/unicodeCodePointOrder.js +12 -0
  426. package/dist/domain/webBundleAnalysis.js +70 -99
  427. package/dist/domain/webBundleAnalyzer.js +2 -4
  428. package/dist/domain/webBundleAnalyzerAst.js +0 -13
  429. package/dist/domain/webBundleAnalyzerInspection.js +26 -52
  430. package/dist/domain/webBundleAnalyzerResult.js +7 -24
  431. package/dist/domain/webCaptureDiff.js +33 -73
  432. package/dist/domain/webCaptureDiffSchemas.js +86 -0
  433. package/dist/domain/webContentArtifact.js +1 -10
  434. package/dist/domain/webMcpDiscovery.js +3 -14
  435. package/dist/domain/webScreenshot.js +58 -34
  436. package/dist/domain/zipPackageFormat.js +7 -0
  437. package/dist/dotnet/ManagedArtifactInspector.js +17 -50
  438. package/dist/dotnet/ManagedMemberInspector.js +27 -58
  439. package/dist/dotnet/ManagedMemberInspectorCore.js +14 -51
  440. package/dist/dotnet/ManagedMemberInstructionDecoder.js +2 -2
  441. package/dist/dotnet/ManagedMemberRows.js +16 -16
  442. package/dist/dotnet/ManagedMetadataHeaps.js +26 -8
  443. package/dist/dotnet/ManagedMetadataInventory.js +21 -30
  444. package/dist/dotnet/ManagedMetadataInventoryRows.js +57 -63
  445. package/dist/dotnet/ManagedMetadataLayout.js +3 -5
  446. package/dist/dotnet/ManagedMethodBodyReader.js +5 -30
  447. package/dist/dotnet/ManagedNativeBoundaryHelpers.js +19 -49
  448. package/dist/dotnet/ManagedNativeBoundaryInspector.js +13 -41
  449. package/dist/dotnet/ManagedPeReader.js +2 -2
  450. package/dist/dotnet/ManagedStaticProvider.js +13 -71
  451. package/dist/generatedMcpToolCatalog.js +1 -1
  452. package/dist/generatedPackageMetadata.js +1 -1
  453. package/dist/ghidra/GhidraAnalysisProfile.js +3 -8
  454. package/dist/ghidra/GhidraClient.js +4 -12
  455. package/dist/ghidra/GhidraClientWire.js +9 -5
  456. package/dist/ghidra/GhidraDefaults.js +0 -18
  457. package/dist/ghidra/GhidraDiagnostics.js +0 -2
  458. package/dist/ghidra/GhidraDoctor.js +16 -12
  459. package/dist/ghidra/GhidraFunctionValues.js +65 -108
  460. package/dist/ghidra/GhidraInstallation.js +98 -42
  461. package/dist/ghidra/GhidraInventoryValues.js +16 -85
  462. package/dist/ghidra/GhidraLauncher.js +0 -8
  463. package/dist/ghidra/GhidraProvider.js +15 -22
  464. package/dist/ghidra/GhidraProviderCapabilities.js +6 -47
  465. package/dist/ghidra/GhidraRequestQueue.js +6 -30
  466. package/dist/ghidra/GhidraResponseBuffer.js +1 -7
  467. package/dist/ghidra/GhidraSessionValues.js +0 -2
  468. package/dist/ghidra/GhidraTransport.js +4 -7
  469. package/dist/ghidra/protocol.js +2 -2
  470. package/dist/hopper/BridgeLauncher.js +112 -36
  471. package/dist/hopper/HopperAnalysisProfile.js +1 -1
  472. package/dist/hopper/HopperCleanup.js +6 -3
  473. package/dist/hopper/HopperClient.js +4 -7
  474. package/dist/hopper/HopperProcessDiagnostic.js +2 -2
  475. package/dist/hopper/HopperProvider.js +0 -16
  476. package/dist/hopper/HopperRequestQueue.js +21 -40
  477. package/dist/hopper/HopperResponseStream.js +1 -9
  478. package/dist/hopper/HopperSessionValues.js +3 -2
  479. package/dist/hopper/HopperTargetLease.js +119 -0
  480. package/dist/hopper/LinuxPrivateDisplayDiagnostic.js +24 -31
  481. package/dist/hopper/LinuxPrivateDisplayProbe.js +5 -16
  482. package/dist/hopper/protocol.js +6 -4
  483. package/dist/main/reload.js +0 -3
  484. package/dist/main/shutdown.js +1 -1
  485. package/dist/main/state.js +0 -9
  486. package/dist/main/transport.js +0 -5
  487. package/dist/mcpDoctor.js +25 -45
  488. package/dist/native/CommandRunner.js +18 -25
  489. package/dist/native/NativeMacOSProvider.js +13 -38
  490. package/dist/native/NativeMachoInspection.js +1 -1
  491. package/dist/process/BoundedFileBytes.js +17 -0
  492. package/dist/process/ExecFileOutput.js +11 -0
  493. package/dist/process/PendingOperations.js +8 -6
  494. package/dist/process/ProcessOwnership.js +3 -2
  495. package/dist/process/ProcessOwnershipObservation.js +0 -1
  496. package/dist/process/ProviderProcess.js +7 -28
  497. package/dist/reference/ReferenceSourceReader.js +8 -24
  498. package/dist/reference/ReferenceSourceReaderEntries.js +11 -39
  499. package/dist/reference/ReferenceSourceReaderFile.js +13 -31
  500. package/dist/reference/ReferenceSourceReaderPaths.js +3 -18
  501. package/dist/reference/ReferenceSourceReaderValidate.js +3 -6
  502. package/dist/replay/JavaScriptReplayWorker.js +3 -5
  503. package/dist/replay/LinuxJavaScriptReplayRunner.js +33 -29
  504. package/dist/replay/LinuxJavaScriptReplaySandbox.js +0 -19
  505. package/dist/replay/LinuxRuntimeClosure.js +1 -3
  506. package/dist/replay/ReplayOutcome.js +1 -3
  507. package/dist/replay/ReplayProcessLifecycle.js +32 -7
  508. package/dist/replay/ReplaySeccompFile.js +29 -0
  509. package/dist/replay/ReplayWorkerProtocol.js +0 -2
  510. package/dist/replay/SystemJavaScriptReplayHost.js +45 -74
  511. package/dist/server/ProcessCaptureElicitation.js +4 -8
  512. package/dist/server/createServer.js +6 -44
  513. package/dist/server/promptCompletion.js +37 -61
  514. package/dist/server/recordDerivedEvidence.js +1 -1
  515. package/dist/server/registerApplicationTools/characterization.js +4 -8
  516. package/dist/server/registerApplicationTools/compareExportShapes.js +5 -10
  517. package/dist/server/registerApplicationTools/compareSourceToBundle.js +6 -10
  518. package/dist/server/registerApplicationTools/compareVersions.js +5 -10
  519. package/dist/server/registerApplicationTools/controlledReplay.js +3 -5
  520. package/dist/server/registerApplicationTools/coverage.js +6 -71
  521. package/dist/server/registerApplicationTools/helpers.js +1 -13
  522. package/dist/server/registerApplicationTools/obligationLedger.js +3 -2
  523. package/dist/server/registerApplicationTools/traceFeature.js +5 -9
  524. package/dist/server/registerApplicationTools/traceSemantics.js +5 -8
  525. package/dist/server/registerApplicationTools.js +0 -2
  526. package/dist/server/registerArtifactComparisonTool.js +23 -27
  527. package/dist/server/registerBrowserScenarioTool.js +4 -4
  528. package/dist/server/registerBrowserTools.js +5 -8
  529. package/dist/server/registerBundleComparisonTool.js +5 -7
  530. package/dist/server/registerCloseLifecycleTool.js +2 -16
  531. package/dist/server/registerElectronTools.js +10 -29
  532. package/dist/server/registerEnhancedTools.js +10 -11
  533. package/dist/server/registerEvidenceTools.js +15 -22
  534. package/dist/server/registerFunctionComparisonTool.js +30 -25
  535. package/dist/server/registerInvestigationTools/helpers.js +3 -32
  536. package/dist/server/registerInvestigationTools.js +20 -116
  537. package/dist/server/registerJavaScriptRuntimeObservationTools.js +6 -4
  538. package/dist/server/registerManagedWorkflowTools/compareManagedMembers.js +15 -17
  539. package/dist/server/registerManagedWorkflowTools/evidence.js +19 -35
  540. package/dist/server/registerManagedWorkflowTools/importManagedReconstruction.js +3 -8
  541. package/dist/server/registerManagedWorkflowTools/planManagedRuntimeCorrelation.js +3 -8
  542. package/dist/server/registerManagedWorkflowTools/projectManagedApplicationGraph.js +10 -14
  543. package/dist/server/registerManagedWorkflowTools/verifyManagedNativeBoundaries.js +9 -15
  544. package/dist/server/registerOfficialTools.js +1 -43
  545. package/dist/server/registerProcessComparisonTool.js +33 -23
  546. package/dist/server/registerPrompts.js +19 -17
  547. package/dist/server/registerSessionRecordTools.js +10 -156
  548. package/dist/server/registerSessionStatusTool.js +6 -69
  549. package/dist/server/registerSessionTools.js +10 -51
  550. package/dist/server/sessionAvailabilityPolicy.js +0 -2
  551. package/dist/server/sessionEvidence.js +9 -15
  552. package/dist/server/sessionToolPolicies.js +0 -8
  553. package/dist/server/toolResult.js +14 -50
  554. package/dist/serverIdentity.js +0 -20
  555. package/install.sh +1 -1
  556. package/package.json +11 -7
  557. package/scripts/electron-active-hook.cjs +23 -55
  558. package/scripts/hopper-demo-x11.py +13 -32
  559. package/skills/reverse-engineer-anything/SKILL.md +47 -12
  560. package/skills/reverse-engineer-anything/references/evidence-workflows.md +6 -4
  561. package/skills/reverse-engineer-anything/references/javascript-applications.md +13 -13
  562. package/skills/reverse-engineer-anything/references/native-and-artifacts.md +12 -8
  563. package/dist/application/ApplicationWorkflowEvidenceResolver.js +0 -188
  564. package/dist/application/BoundedJsonFiles.js +0 -86
  565. package/dist/application/CrossVersionInventory.js +0 -129
  566. package/dist/application/CrossVersionInvestigation.js +0 -301
  567. package/dist/application/CrossVersionInvestigationCollections.js +0 -23
  568. package/dist/application/CrossVersionInvestigationEvidence.js +0 -64
  569. package/dist/application/CrossVersionInvestigationReplay.js +0 -170
  570. package/dist/application/DeferredFileAuthorization.js +0 -61
  571. package/dist/application/DoctorProjection.js +0 -43
  572. package/dist/application/EnhancedToolPagination.js +0 -22
  573. package/dist/application/EvidenceReferenceResolver.js +0 -26
  574. package/dist/application/InvestigationWorkspaceStore.js +0 -204
  575. package/dist/application/ProcessPairedExperiment.js +0 -72
  576. package/dist/application/ReconstructionCoverageWorkspaceStore.js +0 -31
  577. package/dist/application/ReconstructionReadinessService.js +0 -48
  578. package/dist/cliInvestigationCommands.js +0 -173
  579. package/dist/domain/boundedCartesianProjection.js +0 -15
  580. package/dist/domain/investigationWorkspace.js +0 -347
  581. package/dist/domain/jsonLimits.js +0 -26
  582. package/dist/domain/knownPageCoverage.js +0 -29
  583. package/dist/domain/processPairedExperiment.js +0 -128
  584. package/dist/server/javascriptApplicationResult.js +0 -106
  585. package/dist/server/permissionFailure.js +0 -12
  586. package/dist/server/registerApplicationTools/readiness.js +0 -50
  587. package/dist/server/registerEvidenceResources.js +0 -315
  588. package/dist/server/registerJavaScriptApplicationGraphResource.js +0 -65
  589. package/dist/server/registerReconstructionObligationLedgerResource.js +0 -32
  590. package/dist/server/registerReconstructionReadinessResource.js +0 -32
@@ -1,32 +1,18 @@
1
- export const buildComparisonCoverage = ({ left, right, leftMethodPage, rightMethodPage, leftFieldPage, rightFieldPage, omittedMethodItems, omittedFieldItems, omittedCandidates, }) => {
2
- const omittedMethods = omittedMethodItems +
3
- leftMethodPage.sourceOmittedCount +
4
- rightMethodPage.sourceOmittedCount;
5
- const omittedFields = omittedFieldItems +
6
- leftFieldPage.sourceOmittedCount +
7
- rightFieldPage.sourceOmittedCount;
8
- const leftStatus = sideCoverageStatus(left, leftMethodPage.sourceComplete && leftFieldPage.sourceComplete);
9
- const rightStatus = sideCoverageStatus(right, rightMethodPage.sourceComplete && rightFieldPage.sourceComplete);
1
+ export const buildComparisonCoverage = ({ left, right, }) => {
2
+ const leftStatus = sideCoverageStatus(left);
3
+ const rightStatus = sideCoverageStatus(right);
10
4
  const unknownInput = left.coverage.state !== "complete" || right.coverage.state !== "complete";
11
- const truncated = omittedMethods + omittedFields + omittedCandidates > 0;
12
5
  return {
13
- status: unknownInput
14
- ? "partial"
15
- : truncated
16
- ? "truncated"
17
- : leftStatus === "complete" && rightStatus === "complete"
18
- ? "complete-within-inputs"
19
- : "partial",
6
+ status: !unknownInput && leftStatus === "complete" && rightStatus === "complete"
7
+ ? "complete-within-inputs"
8
+ : "partial",
20
9
  left_status: leftStatus,
21
10
  right_status: rightStatus,
22
- omitted_methods: omittedMethods,
23
- omitted_fields: omittedFields,
24
- omitted_candidates: omittedCandidates,
25
11
  };
26
12
  };
27
- const sideCoverageStatus = (result, pagesComplete) => result.coverage.state === "unavailable"
13
+ const sideCoverageStatus = (result) => result.coverage.state === "unavailable"
28
14
  ? "unavailable"
29
- : result.coverage.state === "complete" && pagesComplete
15
+ : result.coverage.state === "complete"
30
16
  ? "complete"
31
17
  : "partial";
32
18
  export const sideManifest = (side) => ({
@@ -35,8 +21,8 @@ export const sideManifest = (side) => ({
35
21
  mvid: side.result.module?.mvid ?? null,
36
22
  module_name: side.result.module?.name ?? null,
37
23
  metadata_status: side.result.metadata.status,
38
- methods_total: side.result.methods.total,
39
- fields_total: side.result.fields.total,
24
+ methods_total: side.result.methods.length,
25
+ fields_total: side.result.fields.length,
40
26
  });
41
27
  export const buildComparisonSummary = (items) => ({
42
28
  unchanged: items.filter(({ status }) => status === "unchanged").length,
@@ -53,20 +39,12 @@ export const buildComparisonMatching = (methodItems, fieldItems) => ({
53
39
  fieldItems.filter(({ match }) => match.status === "ambiguous").length,
54
40
  unmatched: [...methodItems, ...fieldItems].filter(({ match }) => match.status === "unmatched").length,
55
41
  });
56
- export const comparisonLimitations = (left, right, omittedItems, omittedCandidates) => {
42
+ export const comparisonLimitations = (left, right) => {
57
43
  const limitations = [
58
44
  "Metadata tokens are build-local coordinates; matched pairs are remaps, not persistent identities.",
59
45
  "Names are reported as observations but are not used as a matching basis.",
60
46
  ];
61
- if (!left.methods.complete || !right.methods.complete)
62
- limitations.push("At least one method page is incomplete.");
63
- if (!left.fields.complete || !right.fields.complete)
64
- limitations.push("At least one field page is incomplete.");
65
47
  if (left.coverage.state !== "complete" || right.coverage.state !== "complete")
66
48
  limitations.push("At least one managed member observation is partial.");
67
- if (omittedItems > 0)
68
- limitations.push(`${String(omittedItems)} comparison items were omitted by output limits.`);
69
- if (omittedCandidates > 0)
70
- limitations.push(`${String(omittedCandidates)} ambiguous candidates were omitted by candidate limits.`);
71
49
  return limitations;
72
50
  };
@@ -0,0 +1,221 @@
1
+ import canonicalize from "canonicalize";
2
+ import { sha256, } from "./managedMemberComparisonMatch.js";
3
+ const changedMethodDimensions = (left, right) => {
4
+ const dimensions = [];
5
+ if (left.signature.raw_sha256 !== right.signature.raw_sha256)
6
+ dimensions.push("signature");
7
+ if (left.body.normalized_il_sha256 !== right.body.normalized_il_sha256)
8
+ dimensions.push("cil");
9
+ if (canonicalize(left.body.opcode_counts) !==
10
+ canonicalize(right.body.opcode_counts))
11
+ dimensions.push("opcode-shape");
12
+ if (callShape(left.body.anchors) !== callShape(right.body.anchors))
13
+ dimensions.push("call-shape");
14
+ if (fieldShape(left.body.anchors) !== fieldShape(right.body.anchors))
15
+ dimensions.push("field-shape");
16
+ if (canonicalize(left.body.exception_regions) !==
17
+ canonicalize(right.body.exception_regions))
18
+ dimensions.push("exception-shape");
19
+ if (left.body.status !== right.body.status)
20
+ dimensions.push("availability");
21
+ return dimensions;
22
+ };
23
+ const callShape = (anchors) => JSON.stringify(anchors
24
+ .filter(({ operand_kind }) => operand_kind === "method")
25
+ .map(({ opcode, operand_kind }) => [opcode, operand_kind]));
26
+ const fieldShape = (anchors) => JSON.stringify(anchors
27
+ .filter(({ operand_kind }) => operand_kind === "field")
28
+ .map(({ opcode, operand_kind }) => [opcode, operand_kind]));
29
+ const methodIdentity = (item) => ({
30
+ token: item.token,
31
+ declaring_type: item.declaring_type,
32
+ name: item.name,
33
+ signature_sha256: item.signature.raw_sha256,
34
+ normalized_il_sha256: item.body.normalized_il_sha256,
35
+ });
36
+ const fieldIdentity = (item) => ({
37
+ token: item.token,
38
+ declaring_type: item.declaring_type,
39
+ name: item.name,
40
+ signature_sha256: item.signature.raw_sha256,
41
+ });
42
+ const unmatchedComparison = () => ({
43
+ status: "unmatched",
44
+ basis: "none",
45
+ confidence: "unknown",
46
+ candidate_left_tokens: [],
47
+ candidate_right_tokens: [],
48
+ });
49
+ const methodOnlyItem = (member, context) => {
50
+ if (member.left !== undefined) {
51
+ const absenceObserved = context.rightComplete;
52
+ return {
53
+ item_id: `mmc_method_${sha256({ token: member.left.token, side: "left" })}`,
54
+ status: absenceObserved ? "removed" : "unknown",
55
+ left: methodIdentity(member.left),
56
+ right: null,
57
+ match: unmatchedComparison(),
58
+ dimensions: ["availability"],
59
+ evidence_links: [context.leftEvidenceId, context.rightEvidenceId],
60
+ limitations: absenceObserved
61
+ ? []
62
+ : [
63
+ "unknown-within-incomplete-metadata: The right method inventory is incomplete, so absence was not observed.",
64
+ ],
65
+ };
66
+ }
67
+ const absenceObserved = context.leftComplete;
68
+ return {
69
+ item_id: `mmc_method_${sha256({ token: member.right.token, side: "right" })}`,
70
+ status: absenceObserved ? "added" : "unknown",
71
+ left: null,
72
+ right: methodIdentity(member.right),
73
+ match: unmatchedComparison(),
74
+ dimensions: ["availability"],
75
+ evidence_links: [context.leftEvidenceId, context.rightEvidenceId],
76
+ limitations: absenceObserved
77
+ ? []
78
+ : [
79
+ "unknown-within-incomplete-metadata: The left method inventory is incomplete, so absence was not observed.",
80
+ ],
81
+ };
82
+ };
83
+ const fieldOnlyItem = (member, context) => {
84
+ if (member.left !== undefined) {
85
+ const absenceObserved = context.rightComplete;
86
+ return {
87
+ item_id: `mmc_field_${sha256({ token: member.left.token, side: "left" })}`,
88
+ status: absenceObserved ? "removed" : "unknown",
89
+ left: fieldIdentity(member.left),
90
+ right: null,
91
+ match: unmatchedComparison(),
92
+ evidence_links: [context.leftEvidenceId, context.rightEvidenceId],
93
+ limitations: absenceObserved
94
+ ? []
95
+ : [
96
+ "unknown-within-incomplete-metadata: The right field inventory is incomplete, so absence was not observed.",
97
+ ],
98
+ };
99
+ }
100
+ const absenceObserved = context.leftComplete;
101
+ return {
102
+ item_id: `mmc_field_${sha256({ token: member.right.token, side: "right" })}`,
103
+ status: absenceObserved ? "added" : "unknown",
104
+ left: null,
105
+ right: fieldIdentity(member.right),
106
+ match: unmatchedComparison(),
107
+ evidence_links: [context.leftEvidenceId, context.rightEvidenceId],
108
+ limitations: absenceObserved
109
+ ? []
110
+ : [
111
+ "unknown-within-incomplete-metadata: The left field inventory is incomplete, so absence was not observed.",
112
+ ],
113
+ };
114
+ };
115
+ export const buildMethodItems = (matches, context) => {
116
+ const items = [];
117
+ for (const pair of matches.pairs) {
118
+ const dimensions = changedMethodDimensions(pair.left.item, pair.right.item);
119
+ items.push({
120
+ item_id: `mmc_method_${sha256({
121
+ left: pair.left.item.token,
122
+ right: pair.right.item.token,
123
+ basis: pair.basis,
124
+ })}`,
125
+ status: dimensions.length === 0 ? "unchanged" : "changed",
126
+ left: methodIdentity(pair.left.item),
127
+ right: methodIdentity(pair.right.item),
128
+ match: {
129
+ status: "matched",
130
+ basis: pair.basis,
131
+ confidence: pair.confidence,
132
+ candidate_left_tokens: [],
133
+ candidate_right_tokens: [],
134
+ },
135
+ dimensions,
136
+ evidence_links: [context.leftEvidenceId, context.rightEvidenceId],
137
+ limitations: [],
138
+ });
139
+ }
140
+ for (const ambiguous of matches.ambiguous) {
141
+ items.push({
142
+ item_id: `mmc_method_${sha256({
143
+ left: ambiguous.left.map(({ item }) => item.token),
144
+ right: ambiguous.right.map(({ item }) => item.token),
145
+ basis: ambiguous.basis,
146
+ })}`,
147
+ status: "unknown",
148
+ left: null,
149
+ right: null,
150
+ match: {
151
+ status: "ambiguous",
152
+ basis: ambiguous.basis,
153
+ confidence: "unknown",
154
+ candidate_left_tokens: ambiguous.left.map(({ item }) => item.token),
155
+ candidate_right_tokens: ambiguous.right.map(({ item }) => item.token),
156
+ },
157
+ dimensions: ["availability"],
158
+ evidence_links: [context.leftEvidenceId, context.rightEvidenceId],
159
+ limitations: [
160
+ "Multiple managed methods share the same non-name identity key; REA did not guess a token remap.",
161
+ ],
162
+ });
163
+ }
164
+ for (const item of matches.leftOnly)
165
+ items.push(methodOnlyItem({ left: item.item }, context));
166
+ for (const item of matches.rightOnly)
167
+ items.push(methodOnlyItem({ right: item.item }, context));
168
+ return items;
169
+ };
170
+ export const buildFieldItems = (matches, context) => {
171
+ const items = [];
172
+ for (const pair of matches.pairs) {
173
+ const changed = pair.left.item.signature.raw_sha256 !==
174
+ pair.right.item.signature.raw_sha256 ||
175
+ pair.left.item.flags !== pair.right.item.flags;
176
+ items.push({
177
+ item_id: `mmc_field_${sha256({
178
+ left: pair.left.item.token,
179
+ right: pair.right.item.token,
180
+ })}`,
181
+ status: changed ? "changed" : "unchanged",
182
+ left: fieldIdentity(pair.left.item),
183
+ right: fieldIdentity(pair.right.item),
184
+ match: {
185
+ status: "matched",
186
+ basis: pair.basis,
187
+ confidence: pair.confidence,
188
+ candidate_left_tokens: [],
189
+ candidate_right_tokens: [],
190
+ },
191
+ evidence_links: [context.leftEvidenceId, context.rightEvidenceId],
192
+ limitations: [],
193
+ });
194
+ }
195
+ for (const ambiguous of matches.ambiguous)
196
+ items.push({
197
+ item_id: `mmc_field_${sha256({
198
+ left: ambiguous.left.map(({ item }) => item.token),
199
+ right: ambiguous.right.map(({ item }) => item.token),
200
+ })}`,
201
+ status: "unknown",
202
+ left: null,
203
+ right: null,
204
+ match: {
205
+ status: "ambiguous",
206
+ basis: ambiguous.basis,
207
+ confidence: "unknown",
208
+ candidate_left_tokens: ambiguous.left.map(({ item }) => item.token),
209
+ candidate_right_tokens: ambiguous.right.map(({ item }) => item.token),
210
+ },
211
+ evidence_links: [context.leftEvidenceId, context.rightEvidenceId],
212
+ limitations: [
213
+ "Multiple managed fields share the same signature; REA did not guess a token remap from names.",
214
+ ],
215
+ });
216
+ for (const item of matches.leftOnly)
217
+ items.push(fieldOnlyItem({ left: item.item }, context));
218
+ for (const item of matches.rightOnly)
219
+ items.push(fieldOnlyItem({ right: item.item }, context));
220
+ return items;
221
+ };
@@ -61,26 +61,23 @@ const keyField = (item) => ({
61
61
  ]),
62
62
  });
63
63
  const stableKey = (value) => sha256(value);
64
- const matchMethods = (left, right, maxCandidates) => matchByKeys({
64
+ const matchMethods = (left, right) => matchByKeys({
65
65
  left,
66
66
  right,
67
- maxCandidates,
68
67
  exactBasis: "exact-il-signature",
69
68
  fallbackBases: ["structural-method-shape"],
70
69
  });
71
- const matchFields = (left, right, maxCandidates) => matchByKeys({
70
+ const matchFields = (left, right) => matchByKeys({
72
71
  left,
73
72
  right,
74
- maxCandidates,
75
73
  exactBasis: "field-signature",
76
74
  fallbackBases: [],
77
75
  });
78
- const matchByKeys = ({ left, right, maxCandidates, exactBasis, fallbackBases, }) => {
76
+ const matchByKeys = ({ left, right, exactBasis, fallbackBases, }) => {
79
77
  const usedLeft = new Set();
80
78
  const usedRight = new Set();
81
79
  const pairs = [];
82
80
  const ambiguous = [];
83
- let omittedCandidates = 0;
84
81
  const rounds = [
85
82
  { basis: exactBasis, key: ({ exactKey }) => exactKey },
86
83
  ...fallbackBases.map((basis) => ({
@@ -117,10 +114,9 @@ const matchByKeys = ({ left, right, maxCandidates, exactBasis, fallbackBases, })
117
114
  usedLeft.add(item);
118
115
  for (const item of rightItems)
119
116
  usedRight.add(item);
120
- omittedCandidates += Math.max(0, leftItems.length + rightItems.length - maxCandidates * 2);
121
117
  ambiguous.push({
122
- left: leftItems.slice(0, maxCandidates),
123
- right: rightItems.slice(0, maxCandidates),
118
+ left: leftItems,
119
+ right: rightItems,
124
120
  basis: round.basis,
125
121
  });
126
122
  }
@@ -131,7 +127,6 @@ const matchByKeys = ({ left, right, maxCandidates, exactBasis, fallbackBases, })
131
127
  ambiguous,
132
128
  leftOnly: left.filter((item) => !usedLeft.has(item)),
133
129
  rightOnly: right.filter((item) => !usedRight.has(item)),
134
- omittedCandidates,
135
130
  };
136
131
  };
137
132
  const groupBy = (items, keyOf) => {
@@ -146,204 +141,9 @@ const groupBy = (items, keyOf) => {
146
141
  }
147
142
  return grouped;
148
143
  };
149
- const changedMethodDimensions = (left, right) => {
150
- const dimensions = [];
151
- if (left.signature.raw_sha256 !== right.signature.raw_sha256)
152
- dimensions.push("signature");
153
- if (left.body.normalized_il_sha256 !== right.body.normalized_il_sha256)
154
- dimensions.push("cil");
155
- if (canonicalize(left.body.opcode_counts) !==
156
- canonicalize(right.body.opcode_counts))
157
- dimensions.push("opcode-shape");
158
- if (callShape(left.body.anchors) !== callShape(right.body.anchors))
159
- dimensions.push("call-shape");
160
- if (fieldShape(left.body.anchors) !== fieldShape(right.body.anchors))
161
- dimensions.push("field-shape");
162
- if (canonicalize(left.body.exception_regions) !==
163
- canonicalize(right.body.exception_regions))
164
- dimensions.push("exception-shape");
165
- if (left.body.status !== right.body.status)
166
- dimensions.push("availability");
167
- return dimensions;
168
- };
169
- const callShape = (anchors) => JSON.stringify(anchors
170
- .filter(({ operand_kind }) => operand_kind === "method")
171
- .map(({ opcode, operand_kind }) => [opcode, operand_kind]));
172
- const fieldShape = (anchors) => JSON.stringify(anchors
173
- .filter(({ operand_kind }) => operand_kind === "field")
174
- .map(({ opcode, operand_kind }) => [opcode, operand_kind]));
175
- const methodIdentity = (item) => ({
176
- token: item.token,
177
- declaring_type: item.declaring_type,
178
- name: item.name,
179
- signature_sha256: item.signature.raw_sha256,
180
- normalized_il_sha256: item.body.normalized_il_sha256,
181
- });
182
- const fieldIdentity = (item) => ({
183
- token: item.token,
184
- declaring_type: item.declaring_type,
185
- name: item.name,
186
- signature_sha256: item.signature.raw_sha256,
187
- });
188
- const methodOnlyItem = (item, context, left) => {
189
- const absenceObserved = left ? context.rightComplete : context.leftComplete;
190
- return {
191
- item_id: `mmc_method_${sha256({ token: item.token, side: left ? "left" : "right" })}`,
192
- status: absenceObserved ? (left ? "removed" : "added") : "unknown",
193
- left: left ? methodIdentity(item) : null,
194
- right: left ? null : methodIdentity(item),
195
- match: {
196
- status: "unmatched",
197
- basis: "none",
198
- confidence: "unknown",
199
- candidate_left_tokens: [],
200
- candidate_right_tokens: [],
201
- },
202
- dimensions: ["availability"],
203
- evidence_links: [context.leftEvidenceId, context.rightEvidenceId],
204
- limitations: absenceObserved
205
- ? []
206
- : [
207
- `unknown-within-unobserved-page: The ${left ? "right" : "left"} method page is incomplete, so absence was not observed.`,
208
- ],
209
- };
210
- };
211
- const fieldOnlyItem = (item, context, left) => {
212
- const absenceObserved = left ? context.rightComplete : context.leftComplete;
213
- return {
214
- item_id: `mmc_field_${sha256({ token: item.token, side: left ? "left" : "right" })}`,
215
- status: absenceObserved ? (left ? "removed" : "added") : "unknown",
216
- left: left ? fieldIdentity(item) : null,
217
- right: left ? null : fieldIdentity(item),
218
- match: {
219
- status: "unmatched",
220
- basis: "none",
221
- confidence: "unknown",
222
- candidate_left_tokens: [],
223
- candidate_right_tokens: [],
224
- },
225
- evidence_links: [context.leftEvidenceId, context.rightEvidenceId],
226
- limitations: absenceObserved
227
- ? []
228
- : [
229
- `unknown-within-unobserved-page: The ${left ? "right" : "left"} field page is incomplete, so absence was not observed.`,
230
- ],
231
- };
232
- };
233
- export const buildMethodItems = (matches, context) => {
234
- const items = [];
235
- for (const pair of matches.pairs) {
236
- const dimensions = changedMethodDimensions(pair.left.item, pair.right.item);
237
- items.push({
238
- item_id: `mmc_method_${sha256({
239
- left: pair.left.item.token,
240
- right: pair.right.item.token,
241
- basis: pair.basis,
242
- })}`,
243
- status: dimensions.length === 0 ? "unchanged" : "changed",
244
- left: methodIdentity(pair.left.item),
245
- right: methodIdentity(pair.right.item),
246
- match: {
247
- status: "matched",
248
- basis: pair.basis,
249
- confidence: pair.confidence,
250
- candidate_left_tokens: [],
251
- candidate_right_tokens: [],
252
- },
253
- dimensions,
254
- evidence_links: [context.leftEvidenceId, context.rightEvidenceId],
255
- limitations: [],
256
- });
257
- }
258
- for (const ambiguous of matches.ambiguous) {
259
- items.push({
260
- item_id: `mmc_method_${sha256({
261
- left: ambiguous.left.map(({ item }) => item.token),
262
- right: ambiguous.right.map(({ item }) => item.token),
263
- basis: ambiguous.basis,
264
- })}`,
265
- status: "unknown",
266
- left: null,
267
- right: null,
268
- match: {
269
- status: "ambiguous",
270
- basis: ambiguous.basis,
271
- confidence: "unknown",
272
- candidate_left_tokens: ambiguous.left.map(({ item }) => item.token),
273
- candidate_right_tokens: ambiguous.right.map(({ item }) => item.token),
274
- },
275
- dimensions: ["availability"],
276
- evidence_links: [context.leftEvidenceId, context.rightEvidenceId],
277
- limitations: [
278
- "Multiple managed methods share the same non-name identity key; REA did not guess a token remap.",
279
- ],
280
- });
281
- }
282
- for (const item of matches.leftOnly)
283
- items.push(methodOnlyItem(item.item, context, true));
284
- for (const item of matches.rightOnly)
285
- items.push(methodOnlyItem(item.item, context, false));
286
- return limitItems(items, context.limits.max_method_matches);
287
- };
288
- export const buildFieldItems = (matches, context) => {
289
- const items = [];
290
- for (const pair of matches.pairs) {
291
- const changed = pair.left.item.signature.raw_sha256 !==
292
- pair.right.item.signature.raw_sha256 ||
293
- pair.left.item.flags !== pair.right.item.flags;
294
- items.push({
295
- item_id: `mmc_field_${sha256({
296
- left: pair.left.item.token,
297
- right: pair.right.item.token,
298
- })}`,
299
- status: changed ? "changed" : "unchanged",
300
- left: fieldIdentity(pair.left.item),
301
- right: fieldIdentity(pair.right.item),
302
- match: {
303
- status: "matched",
304
- basis: pair.basis,
305
- confidence: pair.confidence,
306
- candidate_left_tokens: [],
307
- candidate_right_tokens: [],
308
- },
309
- evidence_links: [context.leftEvidenceId, context.rightEvidenceId],
310
- limitations: [],
311
- });
312
- }
313
- for (const ambiguous of matches.ambiguous)
314
- items.push({
315
- item_id: `mmc_field_${sha256({
316
- left: ambiguous.left.map(({ item }) => item.token),
317
- right: ambiguous.right.map(({ item }) => item.token),
318
- })}`,
319
- status: "unknown",
320
- left: null,
321
- right: null,
322
- match: {
323
- status: "ambiguous",
324
- basis: ambiguous.basis,
325
- confidence: "unknown",
326
- candidate_left_tokens: ambiguous.left.map(({ item }) => item.token),
327
- candidate_right_tokens: ambiguous.right.map(({ item }) => item.token),
328
- },
329
- evidence_links: [context.leftEvidenceId, context.rightEvidenceId],
330
- limitations: [
331
- "Multiple managed fields share the same signature; REA did not guess a token remap from names.",
332
- ],
333
- });
334
- for (const item of matches.leftOnly)
335
- items.push(fieldOnlyItem(item.item, context, true));
336
- for (const item of matches.rightOnly)
337
- items.push(fieldOnlyItem(item.item, context, false));
338
- return limitItems(items, context.limits.max_field_matches);
339
- };
340
- const limitItems = (items, limit) => ({
341
- items: items.slice(0, limit),
342
- omitted: Math.max(0, items.length - limit),
343
- });
344
- export const keyMembers = (left, right, maxCandidates) => ({
345
- methodMatches: matchMethods(left.result.methods.items.map(keyMethod), right.result.methods.items.map(keyMethod), maxCandidates),
346
- fieldMatches: matchFields(left.result.fields.items.map(keyField), right.result.fields.items.map(keyField), maxCandidates),
144
+ export const keyMembers = (left, right) => ({
145
+ methodMatches: matchMethods(left.result.methods.map(keyMethod), right.result.methods.map(keyMethod)),
146
+ fieldMatches: matchFields(left.result.fields.map(keyField), right.result.fields.map(keyField)),
347
147
  });
348
148
  export const parseManagedMemberEvidence = (evidence) => {
349
149
  const parsed = parseEvidence(evidence);
@@ -22,13 +22,11 @@ const managedBoundaryFromInput = (input) => {
22
22
  export const verifyManagedNativeBoundaries = (input) => {
23
23
  const managed = managedBoundaryFromInput(input);
24
24
  const managedEvidence = parseEvidence(input.managed_boundaries);
25
- const native = collectNativeSymbols(input.native_observations.slice(0, input.limits.max_native_observations));
26
- const verifiedPinvokes = managed.pinvoke_imports.items.map((item) => verifyPinvoke({
25
+ const native = collectNativeSymbols(input.native_observations);
26
+ const verifiedPinvokes = managed.pinvoke_imports.map((item) => verifyPinvoke({
27
27
  item,
28
28
  managedEvidenceId: managedEvidence.evidence_id,
29
- symbols: native.symbols,
30
- hasSupportedNativeEvidence: native.accepted > 0,
31
- input,
29
+ native,
32
30
  }));
33
31
  const pinvokeImports = verifiedPinvokes.map(({ verification }) => verification);
34
32
  const withoutId = buildVerificationResult({
@@ -36,7 +34,6 @@ export const verifyManagedNativeBoundaries = (input) => {
36
34
  managed,
37
35
  native,
38
36
  pinvokeImports,
39
- verifiedPinvokes,
40
37
  input,
41
38
  });
42
39
  return managedNativeVerificationResultSchema.parse({