rea-agents 3.1.0 → 3.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (590) hide show
  1. package/README.md +72 -95
  2. package/bridge/ghidra/ReaGhidraBridge.java +609 -841
  3. package/bridge/hopper_bridge.py +99 -344
  4. package/dist/application/AbortablePromise.js +6 -3
  5. package/dist/application/AnalysisSnapshotCache.js +0 -1
  6. package/dist/application/AnalysisSnapshotFiles.js +7 -7
  7. package/dist/application/AndroidApplicationService.js +1 -1
  8. package/dist/application/AppleApplicationService.js +1 -1
  9. package/dist/application/ArtifactExtraction.js +35 -54
  10. package/dist/application/ArtifactExtractionDestination.js +17 -0
  11. package/dist/application/ArtifactGraphConstruction.js +2 -17
  12. package/dist/application/ArtifactInventory/classify.js +2 -6
  13. package/dist/application/ArtifactInventory/hash.js +2 -20
  14. package/dist/application/ArtifactInventory/scanCanonical.js +8 -12
  15. package/dist/application/ArtifactInventory/scanReader.js +69 -51
  16. package/dist/application/ArtifactInventory.js +6 -14
  17. package/dist/application/AuthorizedArtifactInventory.js +3 -13
  18. package/dist/application/BinarySession.js +41 -13
  19. package/dist/application/BinarySessionComposition.js +0 -11
  20. package/dist/application/BinarySessionOpen.js +2 -1
  21. package/dist/application/BinarySessionRecords.js +5 -93
  22. package/dist/application/BinarySessionStatus.js +5 -16
  23. package/dist/application/BinaryTargetResolver.js +216 -0
  24. package/dist/application/BrowserEvidence.js +42 -58
  25. package/dist/application/BrowserObservationService.js +3 -6
  26. package/dist/application/BrowserScenarioCaptureService.js +3 -6
  27. package/dist/application/BrowserScenarioEvidence.js +3 -3
  28. package/dist/application/CallPathTracing.js +2 -36
  29. package/dist/application/CapabilityInventory.js +10 -15
  30. package/dist/application/ClientConfigurationDocument.js +27 -0
  31. package/dist/application/ClientRegistrationStatus.js +16 -13
  32. package/dist/application/CommandShimReplay.js +14 -1
  33. package/dist/application/DirectAnalysis.js +22 -46
  34. package/dist/application/DirectAnalysisStatus.js +5 -61
  35. package/dist/application/Doctor.js +11 -32
  36. package/dist/application/DoctorDiagnostics.js +1 -2
  37. package/dist/application/DoctorScope.js +1 -1
  38. package/dist/application/ElectronActiveEvidence.js +3 -8
  39. package/dist/application/ElectronActiveObservationService.js +3 -6
  40. package/dist/application/ElectronBoundaryAnalysis.js +7 -8
  41. package/dist/application/ElectronBoundaryGraphContext.js +1 -1
  42. package/dist/application/ElectronBoundaryGraphIpc.js +3 -3
  43. package/dist/application/ElectronBoundaryGraphNative.js +1 -2
  44. package/dist/application/ElectronBoundaryGraphWindows.js +6 -8
  45. package/dist/application/ElectronEvidence.js +4 -7
  46. package/dist/application/ElectronObservationService.js +5 -9
  47. package/dist/application/EnhancedLiteralTracing.js +42 -65
  48. package/dist/application/EnhancedTools.js +76 -44
  49. package/dist/application/EvidenceBundleCommands.js +11 -11
  50. package/dist/application/EvidenceBundleFiles.js +9 -15
  51. package/dist/application/EvidenceLedger.js +6 -41
  52. package/dist/application/FilesystemSnapshot.js +2 -3
  53. package/dist/application/InterfaceBuilderAnalysis.js +266 -0
  54. package/dist/application/InventoryProjectionEvidence.js +4 -2
  55. package/dist/application/InvestigationProviders.js +1 -1
  56. package/dist/application/JavaScriptApplicationEvidence.js +2 -5
  57. package/dist/application/JavaScriptApplicationEvidenceGraph.js +6 -10
  58. package/dist/application/JavaScriptApplicationService.js +6 -29
  59. package/dist/application/JavaScriptApplicationWorkflowEvidence.js +5 -5
  60. package/dist/application/JavaScriptApplicationWorkflowService.js +0 -8
  61. package/dist/application/JavaScriptArtifactAnalysis.js +38 -127
  62. package/dist/application/JavaScriptArtifactFiles.js +67 -107
  63. package/dist/application/JavaScriptArtifactGraphAccumulator.js +0 -7
  64. package/dist/application/JavaScriptArtifactGraphBuilder.js +7 -58
  65. package/dist/application/JavaScriptArtifactGraphBundlers.js +1 -6
  66. package/dist/application/JavaScriptArtifactGraphContext.js +12 -39
  67. package/dist/application/JavaScriptArtifactGraphDocuments.js +4 -11
  68. package/dist/application/JavaScriptArtifactGraphEvidence.js +0 -14
  69. package/dist/application/JavaScriptArtifactGraphFindings.js +3 -3
  70. package/dist/application/JavaScriptArtifactGraphStructure.js +16 -17
  71. package/dist/application/JavaScriptArtifactPathResolution.js +61 -49
  72. package/dist/application/JavaScriptArtifactReconstruction.js +5 -10
  73. package/dist/application/JavaScriptArtifactReconstructionInput.js +2 -14
  74. package/dist/application/JavaScriptJsonModules.js +2 -2
  75. package/dist/application/JavaScriptModuleRelationships.js +22 -27
  76. package/dist/application/JavaScriptReplayPlanning.js +9 -3
  77. package/dist/application/JavaScriptReplayService.js +6 -32
  78. package/dist/application/JavaScriptReturnShapeProjection.js +12 -42
  79. package/dist/application/JavaScriptRuntimeObservationEvidence.js +7 -8
  80. package/dist/application/JavaScriptRuntimeObservationService.js +4 -8
  81. package/dist/application/JavaScriptRuntimeReconciliationEvidence.js +2 -3
  82. package/dist/application/JavaScriptSemanticGraphBuilder.js +11 -41
  83. package/dist/application/JavaScriptSemanticGraphConstruction.js +5 -29
  84. package/dist/application/JavaScriptSemanticGraphEvidence.js +1 -1
  85. package/dist/application/JavaScriptSemanticGraphFingerprintProjection.js +1 -1
  86. package/dist/application/JavaScriptSemanticGraphFlowProjection.js +0 -13
  87. package/dist/application/JavaScriptSemanticGraphProjection.js +1 -3
  88. package/dist/application/JavaScriptSemanticTraceService.js +1 -10
  89. package/dist/application/JsonFiles.js +79 -0
  90. package/dist/application/LinuxHopper.js +11 -9
  91. package/dist/application/LoopbackReplay.js +26 -23
  92. package/dist/application/LoopbackReplayRecorder.js +29 -1
  93. package/dist/application/ManagedApplicationGraphService.js +1 -2
  94. package/dist/application/ManagedMemberComparisonService.js +11 -41
  95. package/dist/application/ManagedNativeVerificationService.js +1 -2
  96. package/dist/application/ManagedReconstructionService.js +1 -1
  97. package/dist/application/ManagedRuntimeCorrelationService.js +5 -8
  98. package/dist/application/NativeApiInspection.js +2 -7
  99. package/dist/application/NativeUiActionTrace.js +394 -0
  100. package/dist/application/NodeRuntimeCharacterizationService.js +3 -7
  101. package/dist/application/PermissionAuthority.js +15 -7
  102. package/dist/application/PermissionFailure.js +5 -0
  103. package/dist/application/ProcessCaptureAuthority.js +5 -7
  104. package/dist/application/ProcessCaptureJournal.js +3 -2
  105. package/dist/application/ProcessCaptureLifecycle.js +5 -12
  106. package/dist/application/ProcessCheckpoints.js +29 -11
  107. package/dist/application/ProcessCli.js +6 -16
  108. package/dist/application/ProcessEvidence.js +5 -7
  109. package/dist/application/ProcessHarness.js +52 -17
  110. package/dist/application/ProcessReactiveCoordinator.js +2 -4
  111. package/dist/application/ProcessReactiveEffects.js +9 -3
  112. package/dist/application/ProcessReactiveHarness.js +13 -7
  113. package/dist/application/ProcessSampling.js +2 -4
  114. package/dist/application/ProcessTimer.js +39 -0
  115. package/dist/application/ProjectPermissionStore.js +39 -96
  116. package/dist/application/RealHopperAssertions.js +20 -66
  117. package/dist/application/ReconstructionCoverageService.js +12 -58
  118. package/dist/application/ReconstructionObligationAuthority.js +2 -2
  119. package/dist/application/ReconstructionObligationCandidates.js +4 -4
  120. package/dist/application/ReconstructionObligationLedgerEvaluation.js +8 -15
  121. package/dist/application/ReconstructionObligationLedgerProjection.js +3 -7
  122. package/dist/application/ReconstructionObligationLedgerService.js +19 -38
  123. package/dist/application/ReferenceSourceImport.js +19 -45
  124. package/dist/application/ReferenceSourceImportEntries.js +2 -4
  125. package/dist/application/ReferenceSourceImportPolicy.js +5 -32
  126. package/dist/application/ReferenceSourceImportTypes.js +0 -16
  127. package/dist/application/RuntimeExecutableDiagnostics.js +55 -29
  128. package/dist/application/SessionProviderRouter.js +2 -2
  129. package/dist/application/Setup.js +1 -3
  130. package/dist/application/SetupClientConfiguration.js +22 -93
  131. package/dist/application/SetupRegistrationEnvironment.js +0 -7
  132. package/dist/application/StoreFileLock.js +119 -0
  133. package/dist/application/TerminalRenderer.js +2 -3
  134. package/dist/application/Uninstall.js +9 -14
  135. package/dist/application/UnknownEvidence.js +1 -1
  136. package/dist/artifacts/ArtifactPaths.js +2 -5
  137. package/dist/artifacts/ArtifactProvider.js +36 -58
  138. package/dist/artifacts/DirectoryArtifactReader.js +13 -8
  139. package/dist/artifacts/MachOSliceArtifactReader.js +1 -5
  140. package/dist/artifacts/NativeDmgArtifactReader.js +11 -11
  141. package/dist/artifacts/NibArchive.js +269 -0
  142. package/dist/artifacts/SafeOutputTree.js +15 -24
  143. package/dist/browser/BrowserProcessStartup.js +1 -2
  144. package/dist/browser/CdpAuthorizedMainFrame.js +16 -0
  145. package/dist/browser/CdpBrowserProvider.js +3 -13
  146. package/dist/browser/CdpCanonicalJsonDigest.js +9 -0
  147. package/dist/browser/CdpCaptureDocuments.js +28 -76
  148. package/dist/browser/CdpCaptureEventBodyShapes.js +13 -33
  149. package/dist/browser/CdpCaptureEventHandlers.js +22 -87
  150. package/dist/browser/CdpCaptureEvents.js +2 -8
  151. package/dist/browser/CdpCaptureStorage.js +9 -20
  152. package/dist/browser/CdpCaptureStorageFingerprints.js +85 -98
  153. package/dist/browser/CdpCaptureValues.js +21 -21
  154. package/dist/browser/CdpConnection.js +10 -25
  155. package/dist/browser/CdpElectronInspection.js +26 -50
  156. package/dist/browser/CdpElectronProvider.js +10 -35
  157. package/dist/browser/CdpElectronScriptEvents.js +8 -16
  158. package/dist/browser/CdpElectronScripts.js +6 -35
  159. package/dist/browser/CdpElectronWorkers.js +6 -10
  160. package/dist/browser/CdpEndpoint.js +25 -41
  161. package/dist/browser/CdpObservationSession.js +14 -26
  162. package/dist/browser/CdpPageCapture.js +34 -48
  163. package/dist/browser/CdpPageCaptureScripts.js +1 -19
  164. package/dist/browser/CdpPageCaptureWorkers.js +6 -10
  165. package/dist/browser/CdpSafeMetadata.js +19 -22
  166. package/dist/browser/CdpScreenshot.js +3 -5
  167. package/dist/browser/CdpTargetSession.js +1 -2
  168. package/dist/browser/CdpWebMcpDiscovery.js +13 -22
  169. package/dist/browser/ElectronFileScope.js +8 -19
  170. package/dist/browser/JavaScriptRuntimeScope.js +9 -14
  171. package/dist/browser/PlaywrightBrowserScenarioProvider.js +31 -64
  172. package/dist/browser/PlaywrightElectronActiveActions.js +54 -69
  173. package/dist/browser/PlaywrightElectronActiveProvider.js +14 -34
  174. package/dist/browser/PlaywrightExecutionBoundary.js +16 -5
  175. package/dist/browser/PlaywrightScenarioActions.js +3 -7
  176. package/dist/browser/PlaywrightScenarioArtifacts.js +23 -92
  177. package/dist/browser/PlaywrightScenarioBrowser.js +3 -5
  178. package/dist/browser/PlaywrightScenarioEvents.js +45 -94
  179. package/dist/browser/PlaywrightScenarioSession.js +14 -30
  180. package/dist/browser/PngVisualDiff.js +22 -14
  181. package/dist/browser/SensitiveTextCapture.js +0 -17
  182. package/dist/browser/V8InspectorCaptureProjection.js +7 -8
  183. package/dist/browser/V8InspectorEndpoint.js +12 -14
  184. package/dist/browser/V8InspectorProvider.js +20 -61
  185. package/dist/browser/WebSourceMapFetcher.js +56 -176
  186. package/dist/catalogIdentity.js +0 -54
  187. package/dist/cli/artifactCommands.js +49 -77
  188. package/dist/cli/coreAnalysisCommands.js +83 -133
  189. package/dist/cli/javascriptApplicationAnalysis.js +1 -9
  190. package/dist/cli/managedCommands.js +5 -270
  191. package/dist/cli/setupCommands.js +3 -12
  192. package/dist/cli/utilityCommands.js +7 -41
  193. package/dist/cli.js +0 -2
  194. package/dist/cliApplicationCommands.js +42 -112
  195. package/dist/cliBrowserAdvancedCommands.js +10 -106
  196. package/dist/cliBrowserCommands.js +15 -127
  197. package/dist/cliBrowserContext.js +30 -0
  198. package/dist/cliCommandNames.js +4 -5
  199. package/dist/cliElectronCommands.js +8 -72
  200. package/dist/cliEvidenceCommands.js +8 -77
  201. package/dist/cliJavaScriptRuntimeCommands.js +9 -91
  202. package/dist/cliJsonInput.js +4 -14
  203. package/dist/cliObservationOptions.js +11 -96
  204. package/dist/cliPolicyCommands.js +2 -17
  205. package/dist/cliProcessCommands.js +3 -3
  206. package/dist/cliSetup.js +0 -13
  207. package/dist/config/browserScenario.js +2 -2
  208. package/dist/config/environment.js +0 -9
  209. package/dist/config/parseConfig.js +1 -33
  210. package/dist/config/parsers.js +6 -27
  211. package/dist/config/passiveObservation.js +7 -77
  212. package/dist/config/permissions.js +0 -7
  213. package/dist/contracts/analysisSearchContract.js +2 -5
  214. package/dist/contracts/applicationToolContracts.js +56 -109
  215. package/dist/contracts/applicationWorkflowInputContracts.js +27 -102
  216. package/dist/contracts/artifactComparisonExample.js +58 -60
  217. package/dist/contracts/artifactToolContracts.js +20 -67
  218. package/dist/contracts/browserScenarioToolContracts.js +6 -51
  219. package/dist/contracts/browserToolContracts.js +8 -73
  220. package/dist/contracts/electronToolContracts.js +8 -108
  221. package/dist/contracts/enhancedInputs.js +23 -54
  222. package/dist/contracts/errorSchemas.js +0 -1
  223. package/dist/contracts/functionComparisonExample.js +10 -24
  224. package/dist/contracts/functionInstructionContract.js +1 -3
  225. package/dist/contracts/functionWorkflowToolContracts.js +2 -2
  226. package/dist/contracts/hopperMemoryContracts.js +3 -3
  227. package/dist/contracts/investigationExamples.js +14 -11
  228. package/dist/contracts/javascriptApplicationWorkflowExamples.js +12 -19
  229. package/dist/contracts/javascriptRuntimeObservationToolContracts.js +2 -20
  230. package/dist/contracts/javascriptRuntimeReconciliationExample.js +45 -12
  231. package/dist/contracts/managedToolContracts.js +6 -95
  232. package/dist/contracts/managedWorkflowExamples.js +77 -128
  233. package/dist/contracts/managedWorkflowToolContracts.js +51 -77
  234. package/dist/contracts/nativeToolContracts.js +7 -11
  235. package/dist/contracts/processCaptureExample.js +2 -69
  236. package/dist/contracts/promptContracts.js +49 -67
  237. package/dist/contracts/providerSelection.js +0 -1
  238. package/dist/contracts/reconstructionReadinessExample.js +1 -6
  239. package/dist/contracts/sessionStatusContract.js +1 -17
  240. package/dist/contracts/sessionToolSchemas.js +6 -15
  241. package/dist/contracts/toolContractExamples.js +11 -11
  242. package/dist/contracts/toolContractHelpers.js +0 -4
  243. package/dist/contracts/toolContracts.js +60 -71
  244. package/dist/contracts/toolEffects.js +5 -13
  245. package/dist/contracts/toolOutputSchemaGroups.js +37 -91
  246. package/dist/contracts/toolOutputSchemaPrimitives.js +16 -56
  247. package/dist/contracts/toolSchemaMetadata.js +8 -19
  248. package/dist/contracts/unknownContractExamples.js +0 -2
  249. package/dist/domain/analysisErrorPresentation.js +46 -54
  250. package/dist/domain/analysisErrorProjection.js +28 -37
  251. package/dist/domain/analysisProfile.js +3 -31
  252. package/dist/domain/analysisSnapshot.js +3 -12
  253. package/dist/domain/androidApplication.js +15 -54
  254. package/dist/domain/appleApplication.js +24 -67
  255. package/dist/domain/artifactComparison.js +11 -29
  256. package/dist/domain/artifactGraph.js +14 -44
  257. package/dist/domain/artifactInspection.js +38 -69
  258. package/dist/domain/artifactInventoryEvidence.js +27 -21
  259. package/dist/domain/binaryTarget.js +2 -221
  260. package/dist/domain/browserCaptureComparison.js +47 -24
  261. package/dist/domain/browserObservation.js +28 -193
  262. package/dist/domain/browserObservationSchemas.js +5 -23
  263. package/dist/domain/browserScenario.js +11 -14
  264. package/dist/domain/browserScenarioCapture.js +11 -12
  265. package/dist/domain/browserScenarioCaptureValues.js +146 -84
  266. package/dist/domain/browserScenarioDiff.js +2 -59
  267. package/dist/domain/browserScenarioDiffEvidence.js +51 -0
  268. package/dist/domain/browserScenarioDiffValues.js +21 -38
  269. package/dist/domain/browserScenarioValues.js +80 -109
  270. package/dist/domain/browserSession.js +4 -7
  271. package/dist/domain/bundleComparison.js +6 -32
  272. package/dist/domain/bytecodeProvider.js +20 -19
  273. package/dist/domain/callPath.js +47 -167
  274. package/dist/domain/callPathSchemas.js +79 -0
  275. package/dist/domain/changedBehavior.js +34 -60
  276. package/dist/domain/completionLedgerGeneration.js +8 -14
  277. package/dist/domain/conformancePackage.js +126 -97
  278. package/dist/domain/conformanceReplay.js +36 -8
  279. package/dist/domain/conformanceTrustGate.js +23 -14
  280. package/dist/domain/customProtocolCapture.js +1 -1
  281. package/dist/domain/electronActiveObservation.js +70 -103
  282. package/dist/domain/electronObservation.js +14 -80
  283. package/dist/domain/electronStaticAnalysisBrowser.js +36 -46
  284. package/dist/domain/electronStaticAnalysisIpc.js +38 -14
  285. package/dist/domain/electronStaticAnalysisNative.js +1 -8
  286. package/dist/domain/electronStaticAnalysisValues.js +10 -17
  287. package/dist/domain/errors.js +33 -54
  288. package/dist/domain/eventProcessTree.js +20 -12
  289. package/dist/domain/evidence.js +2 -10
  290. package/dist/domain/evidenceBundle.js +3 -5
  291. package/dist/domain/evidenceCompletionLedger.js +6 -8
  292. package/dist/domain/functionComparison.js +4 -14
  293. package/dist/domain/functionComparisonNormalization.js +4 -11
  294. package/dist/domain/functionComparisonResults.js +25 -15
  295. package/dist/domain/functionComparisonSchemas.js +49 -33
  296. package/dist/domain/functionDossierEvidence.js +31 -156
  297. package/dist/domain/hopperStartupFailure.js +1 -1
  298. package/dist/domain/hopperValues.js +15 -136
  299. package/dist/domain/interfaceBuilderGraph.js +654 -0
  300. package/dist/domain/javascriptApplicationAnalysis.js +8 -112
  301. package/dist/domain/javascriptApplicationChangeGraph.js +22 -82
  302. package/dist/domain/javascriptApplicationEvidenceSchemas.js +59 -47
  303. package/dist/domain/javascriptApplicationGraph.js +3 -13
  304. package/dist/domain/javascriptApplicationGraphSchemas.js +12 -34
  305. package/dist/domain/javascriptApplicationVersionComparison.js +26 -30
  306. package/dist/domain/javascriptApplicationVersionComparisonSchemas.js +123 -68
  307. package/dist/domain/javascriptApplicationVersionItems.js +120 -53
  308. package/dist/domain/javascriptApplicationVersionKeys.js +24 -11
  309. package/dist/domain/javascriptAstFingerprint.js +25 -58
  310. package/dist/domain/javascriptAstValues.js +9 -0
  311. package/dist/domain/javascriptExportInstrumentation.js +2 -4
  312. package/dist/domain/javascriptExportShapeComparison.js +6 -7
  313. package/dist/domain/javascriptExportShapeComparisonSchemas.js +68 -75
  314. package/dist/domain/javascriptExportShapeSelection.js +17 -19
  315. package/dist/domain/javascriptFeatureSeed.js +20 -12
  316. package/dist/domain/javascriptFeatureTrace.js +13 -67
  317. package/dist/domain/javascriptFeatureTraceSchemas.js +24 -52
  318. package/dist/domain/javascriptFeatureTraversal.js +1 -44
  319. package/dist/domain/javascriptNativeHandoff.js +1 -1
  320. package/dist/domain/javascriptReplay.js +24 -41
  321. package/dist/domain/javascriptRuntimeLoadState.js +3 -8
  322. package/dist/domain/javascriptRuntimeObservation.js +42 -103
  323. package/dist/domain/javascriptRuntimeReconciliation.js +1 -3
  324. package/dist/domain/javascriptRuntimeReconciliationActive.js +8 -17
  325. package/dist/domain/javascriptRuntimeReconciliationGraph.js +10 -23
  326. package/dist/domain/javascriptRuntimeReconciliationMatching.js +18 -12
  327. package/dist/domain/javascriptRuntimeReconciliationParsing.js +16 -45
  328. package/dist/domain/javascriptRuntimeReconciliationResult.js +4 -5
  329. package/dist/domain/javascriptRuntimeReconciliationRuntime.js +8 -12
  330. package/dist/domain/javascriptRuntimeReconciliationSchemas.js +33 -48
  331. package/dist/domain/javascriptRuntimeStaticCandidates.js +3 -3
  332. package/dist/domain/javascriptSemanticAnalysis.js +12 -45
  333. package/dist/domain/javascriptSemanticAsyncEffects.js +1 -9
  334. package/dist/domain/javascriptSemanticCallResolution.js +6 -16
  335. package/dist/domain/javascriptSemanticCalls.js +5 -32
  336. package/dist/domain/javascriptSemanticChildProcesses.js +1 -11
  337. package/dist/domain/javascriptSemanticCoverage.js +11 -0
  338. package/dist/domain/javascriptSemanticDataEffectHelpers.js +1 -8
  339. package/dist/domain/javascriptSemanticDataEffects.js +1 -11
  340. package/dist/domain/javascriptSemanticFingerprints.js +3 -5
  341. package/dist/domain/javascriptSemanticGraphSchemas.js +25 -51
  342. package/dist/domain/javascriptSemanticGraphSerialization.js +2 -13
  343. package/dist/domain/javascriptSemanticIr.js +1 -29
  344. package/dist/domain/javascriptSemanticObjects.js +1 -5
  345. package/dist/domain/javascriptSemanticPrimitives.js +2 -9
  346. package/dist/domain/javascriptSemanticProjection.js +0 -18
  347. package/dist/domain/javascriptSemanticPromises.js +9 -16
  348. package/dist/domain/javascriptSemanticProvenance.js +16 -19
  349. package/dist/domain/javascriptSemanticQuery.js +17 -139
  350. package/dist/domain/javascriptSemanticQueryAssessment.js +9 -37
  351. package/dist/domain/javascriptSemanticQueryIdentity.js +2 -23
  352. package/dist/domain/javascriptSemanticQuerySchemas.js +14 -107
  353. package/dist/domain/javascriptSemanticResources.js +1 -6
  354. package/dist/domain/javascriptSemanticReturns.js +10 -27
  355. package/dist/domain/javascriptSemanticValueTypes.js +1 -0
  356. package/dist/domain/javascriptSemanticValues.js +44 -62
  357. package/dist/domain/javascriptStaticAnalysis.js +21 -43
  358. package/dist/domain/javascriptStaticAnalysisBundler.js +34 -93
  359. package/dist/domain/javascriptStaticAnalysisCalls.js +17 -16
  360. package/dist/domain/javascriptStaticAnalysisFindings.js +3 -19
  361. package/dist/domain/javascriptStaticAnalysisHelpers.js +47 -88
  362. package/dist/domain/javascriptStaticAnalysisState.js +1 -5
  363. package/dist/domain/javascriptStaticAnalysisTypes.js +1 -0
  364. package/dist/domain/jsonShape.js +7 -33
  365. package/dist/domain/localPath.js +7 -0
  366. package/dist/domain/managedApplicationGraph.js +9 -41
  367. package/dist/domain/managedApplicationGraphCoverage.js +24 -156
  368. package/dist/domain/managedApplicationGraphNodes.js +10 -13
  369. package/dist/domain/managedArtifact.js +14 -27
  370. package/dist/domain/managedMemberComparison.js +90 -92
  371. package/dist/domain/managedMemberComparisonCoverage.js +11 -33
  372. package/dist/domain/managedMemberComparisonItems.js +221 -0
  373. package/dist/domain/managedMemberComparisonMatch.js +8 -208
  374. package/dist/domain/managedNativeVerification.js +3 -6
  375. package/dist/domain/managedNativeVerificationMatch.js +55 -59
  376. package/dist/domain/managedNativeVerificationSchemas.js +83 -47
  377. package/dist/domain/managedReconstruction.js +19 -23
  378. package/dist/domain/managedRuntimeCorrelation.js +6 -9
  379. package/dist/domain/nativeApiBoundary.js +2 -7
  380. package/dist/domain/nativeInspection.js +0 -2
  381. package/dist/domain/nativeInvestigationGraph.js +351 -0
  382. package/dist/domain/nativeValueFlow.js +61 -0
  383. package/dist/domain/nodeRuntimeCharacterization.js +1 -5
  384. package/dist/domain/objcSwiftMetadata.js +254 -0
  385. package/dist/domain/peInspection.js +1 -1
  386. package/dist/domain/permissionPolicy.js +13 -0
  387. package/dist/domain/processCapture.js +76 -113
  388. package/dist/domain/processCaptureExample.js +68 -0
  389. package/dist/domain/processCaptureParsing.js +21 -0
  390. package/dist/domain/processCaptureReactiveSchema.js +68 -0
  391. package/dist/domain/processCaptureValidation.js +1 -7
  392. package/dist/domain/processComparison.js +3 -12
  393. package/dist/domain/processReactiveMatching.js +29 -50
  394. package/dist/domain/processReactiveRuntime.js +4 -8
  395. package/dist/domain/processReactiveScenario.js +28 -94
  396. package/dist/domain/processReactiveScenarioPreflight.js +5 -30
  397. package/dist/domain/processReactiveTransition.js +33 -18
  398. package/dist/domain/processScenario.js +56 -90
  399. package/dist/domain/processTraceComparison.js +0 -8
  400. package/dist/domain/processTraceEvaluation.js +14 -4
  401. package/dist/domain/processTraceSpecification.js +11 -17
  402. package/dist/domain/protocolCapture.js +3 -3
  403. package/dist/domain/reconstructionCoverage.js +62 -129
  404. package/dist/domain/reconstructionCoverageEvaluation.js +17 -17
  405. package/dist/domain/reconstructionObligationLedgerSchemas.js +45 -72
  406. package/dist/domain/reconstructionReadiness.js +1 -2
  407. package/dist/domain/reconstructionReadinessSchemas.js +36 -38
  408. package/dist/domain/reconstructionUnknowns.js +3 -3
  409. package/dist/domain/reconstructionVerification.js +13 -47
  410. package/dist/domain/reconstructionVerificationSchemas.js +50 -38
  411. package/dist/domain/referenceSourceGraph.js +53 -61
  412. package/dist/domain/referenceSourceImportParsing.js +1 -5
  413. package/dist/domain/replayMachine.js +19 -31
  414. package/dist/domain/replayMachineRun.js +15 -63
  415. package/dist/domain/replayMachineRuntime.js +41 -41
  416. package/dist/domain/replayMachineValues.js +84 -0
  417. package/dist/domain/residualUnknown.js +25 -30
  418. package/dist/domain/runtimeCharacterization.js +15 -16
  419. package/dist/domain/runtimeIdentification.js +48 -47
  420. package/dist/domain/sourceToBundleComparison.js +9 -85
  421. package/dist/domain/sourceToBundleComparisonSchemas.js +17 -42
  422. package/dist/domain/sourceToBundleSignals.js +4 -15
  423. package/dist/domain/staticRuntimeCorrelation.js +37 -49
  424. package/dist/domain/symbolAnalysis.js +10 -19
  425. package/dist/domain/unicodeCodePointOrder.js +12 -0
  426. package/dist/domain/webBundleAnalysis.js +70 -99
  427. package/dist/domain/webBundleAnalyzer.js +2 -4
  428. package/dist/domain/webBundleAnalyzerAst.js +0 -13
  429. package/dist/domain/webBundleAnalyzerInspection.js +26 -52
  430. package/dist/domain/webBundleAnalyzerResult.js +7 -24
  431. package/dist/domain/webCaptureDiff.js +33 -73
  432. package/dist/domain/webCaptureDiffSchemas.js +86 -0
  433. package/dist/domain/webContentArtifact.js +1 -10
  434. package/dist/domain/webMcpDiscovery.js +3 -14
  435. package/dist/domain/webScreenshot.js +58 -34
  436. package/dist/domain/zipPackageFormat.js +7 -0
  437. package/dist/dotnet/ManagedArtifactInspector.js +17 -50
  438. package/dist/dotnet/ManagedMemberInspector.js +27 -58
  439. package/dist/dotnet/ManagedMemberInspectorCore.js +14 -51
  440. package/dist/dotnet/ManagedMemberInstructionDecoder.js +2 -2
  441. package/dist/dotnet/ManagedMemberRows.js +16 -16
  442. package/dist/dotnet/ManagedMetadataHeaps.js +26 -8
  443. package/dist/dotnet/ManagedMetadataInventory.js +21 -30
  444. package/dist/dotnet/ManagedMetadataInventoryRows.js +57 -63
  445. package/dist/dotnet/ManagedMetadataLayout.js +3 -5
  446. package/dist/dotnet/ManagedMethodBodyReader.js +5 -30
  447. package/dist/dotnet/ManagedNativeBoundaryHelpers.js +19 -49
  448. package/dist/dotnet/ManagedNativeBoundaryInspector.js +13 -41
  449. package/dist/dotnet/ManagedPeReader.js +2 -2
  450. package/dist/dotnet/ManagedStaticProvider.js +13 -71
  451. package/dist/generatedMcpToolCatalog.js +1 -1
  452. package/dist/generatedPackageMetadata.js +1 -1
  453. package/dist/ghidra/GhidraAnalysisProfile.js +3 -8
  454. package/dist/ghidra/GhidraClient.js +4 -12
  455. package/dist/ghidra/GhidraClientWire.js +9 -5
  456. package/dist/ghidra/GhidraDefaults.js +0 -18
  457. package/dist/ghidra/GhidraDiagnostics.js +0 -2
  458. package/dist/ghidra/GhidraDoctor.js +16 -12
  459. package/dist/ghidra/GhidraFunctionValues.js +65 -108
  460. package/dist/ghidra/GhidraInstallation.js +98 -42
  461. package/dist/ghidra/GhidraInventoryValues.js +16 -85
  462. package/dist/ghidra/GhidraLauncher.js +0 -8
  463. package/dist/ghidra/GhidraProvider.js +15 -22
  464. package/dist/ghidra/GhidraProviderCapabilities.js +6 -47
  465. package/dist/ghidra/GhidraRequestQueue.js +6 -30
  466. package/dist/ghidra/GhidraResponseBuffer.js +1 -7
  467. package/dist/ghidra/GhidraSessionValues.js +0 -2
  468. package/dist/ghidra/GhidraTransport.js +4 -7
  469. package/dist/ghidra/protocol.js +2 -2
  470. package/dist/hopper/BridgeLauncher.js +112 -36
  471. package/dist/hopper/HopperAnalysisProfile.js +1 -1
  472. package/dist/hopper/HopperCleanup.js +6 -3
  473. package/dist/hopper/HopperClient.js +4 -7
  474. package/dist/hopper/HopperProcessDiagnostic.js +2 -2
  475. package/dist/hopper/HopperProvider.js +0 -16
  476. package/dist/hopper/HopperRequestQueue.js +21 -40
  477. package/dist/hopper/HopperResponseStream.js +1 -9
  478. package/dist/hopper/HopperSessionValues.js +3 -2
  479. package/dist/hopper/HopperTargetLease.js +119 -0
  480. package/dist/hopper/LinuxPrivateDisplayDiagnostic.js +24 -31
  481. package/dist/hopper/LinuxPrivateDisplayProbe.js +5 -16
  482. package/dist/hopper/protocol.js +6 -4
  483. package/dist/main/reload.js +0 -3
  484. package/dist/main/shutdown.js +1 -1
  485. package/dist/main/state.js +0 -9
  486. package/dist/main/transport.js +0 -5
  487. package/dist/mcpDoctor.js +25 -45
  488. package/dist/native/CommandRunner.js +18 -25
  489. package/dist/native/NativeMacOSProvider.js +13 -38
  490. package/dist/native/NativeMachoInspection.js +1 -1
  491. package/dist/process/BoundedFileBytes.js +17 -0
  492. package/dist/process/ExecFileOutput.js +11 -0
  493. package/dist/process/PendingOperations.js +8 -6
  494. package/dist/process/ProcessOwnership.js +3 -2
  495. package/dist/process/ProcessOwnershipObservation.js +0 -1
  496. package/dist/process/ProviderProcess.js +7 -28
  497. package/dist/reference/ReferenceSourceReader.js +8 -24
  498. package/dist/reference/ReferenceSourceReaderEntries.js +11 -39
  499. package/dist/reference/ReferenceSourceReaderFile.js +13 -31
  500. package/dist/reference/ReferenceSourceReaderPaths.js +3 -18
  501. package/dist/reference/ReferenceSourceReaderValidate.js +3 -6
  502. package/dist/replay/JavaScriptReplayWorker.js +3 -5
  503. package/dist/replay/LinuxJavaScriptReplayRunner.js +33 -29
  504. package/dist/replay/LinuxJavaScriptReplaySandbox.js +0 -19
  505. package/dist/replay/LinuxRuntimeClosure.js +1 -3
  506. package/dist/replay/ReplayOutcome.js +1 -3
  507. package/dist/replay/ReplayProcessLifecycle.js +32 -7
  508. package/dist/replay/ReplaySeccompFile.js +29 -0
  509. package/dist/replay/ReplayWorkerProtocol.js +0 -2
  510. package/dist/replay/SystemJavaScriptReplayHost.js +45 -74
  511. package/dist/server/ProcessCaptureElicitation.js +4 -8
  512. package/dist/server/createServer.js +6 -44
  513. package/dist/server/promptCompletion.js +37 -61
  514. package/dist/server/recordDerivedEvidence.js +1 -1
  515. package/dist/server/registerApplicationTools/characterization.js +4 -8
  516. package/dist/server/registerApplicationTools/compareExportShapes.js +5 -10
  517. package/dist/server/registerApplicationTools/compareSourceToBundle.js +6 -10
  518. package/dist/server/registerApplicationTools/compareVersions.js +5 -10
  519. package/dist/server/registerApplicationTools/controlledReplay.js +3 -5
  520. package/dist/server/registerApplicationTools/coverage.js +6 -71
  521. package/dist/server/registerApplicationTools/helpers.js +1 -13
  522. package/dist/server/registerApplicationTools/obligationLedger.js +3 -2
  523. package/dist/server/registerApplicationTools/traceFeature.js +5 -9
  524. package/dist/server/registerApplicationTools/traceSemantics.js +5 -8
  525. package/dist/server/registerApplicationTools.js +0 -2
  526. package/dist/server/registerArtifactComparisonTool.js +23 -27
  527. package/dist/server/registerBrowserScenarioTool.js +4 -4
  528. package/dist/server/registerBrowserTools.js +5 -8
  529. package/dist/server/registerBundleComparisonTool.js +5 -7
  530. package/dist/server/registerCloseLifecycleTool.js +2 -16
  531. package/dist/server/registerElectronTools.js +10 -29
  532. package/dist/server/registerEnhancedTools.js +10 -11
  533. package/dist/server/registerEvidenceTools.js +15 -22
  534. package/dist/server/registerFunctionComparisonTool.js +30 -25
  535. package/dist/server/registerInvestigationTools/helpers.js +3 -32
  536. package/dist/server/registerInvestigationTools.js +20 -116
  537. package/dist/server/registerJavaScriptRuntimeObservationTools.js +6 -4
  538. package/dist/server/registerManagedWorkflowTools/compareManagedMembers.js +15 -17
  539. package/dist/server/registerManagedWorkflowTools/evidence.js +19 -35
  540. package/dist/server/registerManagedWorkflowTools/importManagedReconstruction.js +3 -8
  541. package/dist/server/registerManagedWorkflowTools/planManagedRuntimeCorrelation.js +3 -8
  542. package/dist/server/registerManagedWorkflowTools/projectManagedApplicationGraph.js +10 -14
  543. package/dist/server/registerManagedWorkflowTools/verifyManagedNativeBoundaries.js +9 -15
  544. package/dist/server/registerOfficialTools.js +1 -43
  545. package/dist/server/registerProcessComparisonTool.js +33 -23
  546. package/dist/server/registerPrompts.js +19 -17
  547. package/dist/server/registerSessionRecordTools.js +10 -156
  548. package/dist/server/registerSessionStatusTool.js +6 -69
  549. package/dist/server/registerSessionTools.js +10 -51
  550. package/dist/server/sessionAvailabilityPolicy.js +0 -2
  551. package/dist/server/sessionEvidence.js +9 -15
  552. package/dist/server/sessionToolPolicies.js +0 -8
  553. package/dist/server/toolResult.js +14 -50
  554. package/dist/serverIdentity.js +0 -20
  555. package/install.sh +1 -1
  556. package/package.json +11 -7
  557. package/scripts/electron-active-hook.cjs +23 -55
  558. package/scripts/hopper-demo-x11.py +13 -32
  559. package/skills/reverse-engineer-anything/SKILL.md +47 -12
  560. package/skills/reverse-engineer-anything/references/evidence-workflows.md +6 -4
  561. package/skills/reverse-engineer-anything/references/javascript-applications.md +13 -13
  562. package/skills/reverse-engineer-anything/references/native-and-artifacts.md +12 -8
  563. package/dist/application/ApplicationWorkflowEvidenceResolver.js +0 -188
  564. package/dist/application/BoundedJsonFiles.js +0 -86
  565. package/dist/application/CrossVersionInventory.js +0 -129
  566. package/dist/application/CrossVersionInvestigation.js +0 -301
  567. package/dist/application/CrossVersionInvestigationCollections.js +0 -23
  568. package/dist/application/CrossVersionInvestigationEvidence.js +0 -64
  569. package/dist/application/CrossVersionInvestigationReplay.js +0 -170
  570. package/dist/application/DeferredFileAuthorization.js +0 -61
  571. package/dist/application/DoctorProjection.js +0 -43
  572. package/dist/application/EnhancedToolPagination.js +0 -22
  573. package/dist/application/EvidenceReferenceResolver.js +0 -26
  574. package/dist/application/InvestigationWorkspaceStore.js +0 -204
  575. package/dist/application/ProcessPairedExperiment.js +0 -72
  576. package/dist/application/ReconstructionCoverageWorkspaceStore.js +0 -31
  577. package/dist/application/ReconstructionReadinessService.js +0 -48
  578. package/dist/cliInvestigationCommands.js +0 -173
  579. package/dist/domain/boundedCartesianProjection.js +0 -15
  580. package/dist/domain/investigationWorkspace.js +0 -347
  581. package/dist/domain/jsonLimits.js +0 -26
  582. package/dist/domain/knownPageCoverage.js +0 -29
  583. package/dist/domain/processPairedExperiment.js +0 -128
  584. package/dist/server/javascriptApplicationResult.js +0 -106
  585. package/dist/server/permissionFailure.js +0 -12
  586. package/dist/server/registerApplicationTools/readiness.js +0 -50
  587. package/dist/server/registerEvidenceResources.js +0 -315
  588. package/dist/server/registerJavaScriptApplicationGraphResource.js +0 -65
  589. package/dist/server/registerReconstructionObligationLedgerResource.js +0 -32
  590. package/dist/server/registerReconstructionReadinessResource.js +0 -32
@@ -0,0 +1,654 @@
1
+ import { z } from "zod";
2
+ import { nativeInvestigationGraphSchema, nativeInvestigationTraceLimitsSchema, } from "./nativeInvestigationGraph.js";
3
+ import { jsonValueSchema } from "./jsonValue.js";
4
+ const recordSchema = z.record(z.string(), z.unknown());
5
+ const objectNode = z.strictObject({
6
+ id: z.string().min(1),
7
+ kind: z.enum([
8
+ "view_controller",
9
+ "view",
10
+ "control",
11
+ "constraint",
12
+ "layout_guide",
13
+ "resource",
14
+ "placeholder",
15
+ "external_object",
16
+ "other",
17
+ ]),
18
+ class_name: z.string().nullable(),
19
+ name: z.string().min(1),
20
+ attributes: z.record(z.string(), jsonValueSchema),
21
+ });
22
+ const connection = z.strictObject({
23
+ id: z.string().min(1),
24
+ kind: z.enum(["outlet", "action", "segue", "other"]),
25
+ source_id: z.string().min(1),
26
+ destination_id: z.string().nullable(),
27
+ label: z.string().nullable(),
28
+ attributes: z.record(z.string(), jsonValueSchema),
29
+ });
30
+ /** One compiled Interface Builder document projected from ibtool output. */
31
+ export const interfaceBuilderDocumentSchema = z.strictObject({
32
+ relative_path: z.string().min(1),
33
+ archive_sha256: z.string().regex(/^[a-f0-9]{64}$/u),
34
+ document_kind: z.enum(["nib", "storyboard_scene"]),
35
+ object_count: z.number().int().nonnegative(),
36
+ connection_count: z.number().int().nonnegative(),
37
+ hierarchy_complete: z.boolean(),
38
+ });
39
+ /** Normalized read-only Interface Builder graph with archive provenance. */
40
+ export const interfaceBuilderAnalysisSchema = z.strictObject({
41
+ target_sha256: z.string().regex(/^[a-f0-9]{64}$/u),
42
+ documents: z.array(interfaceBuilderDocumentSchema).max(64),
43
+ graph: nativeInvestigationGraphSchema,
44
+ limitations: z.array(z.string()),
45
+ });
46
+ /** Parse ibtool dictionaries or compiled keyed archives into typed records. */
47
+ export const parseInterfaceBuilderRecords = (value) => {
48
+ const root = record(value);
49
+ const keyed = parseKeyedArchive(root);
50
+ if (keyed !== null)
51
+ return keyed;
52
+ const objectsRaw = record(root["com.apple.ibtool.document.objects"]);
53
+ const connectionsRaw = record(root["com.apple.ibtool.document.connections"]);
54
+ const hierarchyRaw = root["com.apple.ibtool.document.hierarchy"];
55
+ const classesRaw = record(root["com.apple.ibtool.document.classes"]);
56
+ const objects = [];
57
+ const connections = [];
58
+ let omittedConnections = 0;
59
+ const objectEntries = Object.entries(objectsRaw);
60
+ for (const [id, raw] of objectEntries.slice(0, 20_000)) {
61
+ const attributes = record(raw);
62
+ const className = firstString(attributes["customClass"], attributes["class"], attributes["isa"]);
63
+ const label = firstString(attributes["label"], attributes["title"], attributes["name"], className);
64
+ objects.push(objectNode.parse({
65
+ id,
66
+ kind: classifyObject(className),
67
+ class_name: className,
68
+ name: label ?? id,
69
+ attributes: jsonSafeRecord(attributes),
70
+ }));
71
+ }
72
+ for (const [sourceId, rawConnections] of Object.entries(connectionsRaw)) {
73
+ if (!Array.isArray(rawConnections))
74
+ continue;
75
+ for (const [index, raw] of rawConnections.entries()) {
76
+ if (connections.length >= 40_000) {
77
+ omittedConnections += rawConnections.length - index;
78
+ break;
79
+ }
80
+ const item = record(raw);
81
+ const type = firstString(item.type, item.connectionType) ?? "unknown";
82
+ const destination = firstString(item["destination-id"], item.destinationId);
83
+ const label = firstString(item.label, item.selector, item.identifier);
84
+ connections.push(connection.parse({
85
+ id: `${sourceId}:connection:${index}`,
86
+ kind: classifyConnection(type),
87
+ source_id: sourceId,
88
+ destination_id: destination,
89
+ label,
90
+ attributes: jsonSafeRecord(item),
91
+ }));
92
+ }
93
+ }
94
+ return {
95
+ objects,
96
+ connections,
97
+ hierarchy: Array.isArray(hierarchyRaw) ? hierarchyRaw.slice(0, 20_000) : [],
98
+ classes: classesRaw,
99
+ objectCount: objectEntries.length,
100
+ omittedObjects: Math.max(0, objectEntries.length - 20_000),
101
+ omittedConnections,
102
+ };
103
+ };
104
+ /** Project class and connection objects from an NSKeyedArchiver object table. */
105
+ const parseKeyedArchive = (root) => {
106
+ if (root.$archiver !== "NSKeyedArchiver" || !Array.isArray(root.$objects))
107
+ return null;
108
+ const objectTable = root.$objects;
109
+ const resolve = (value, depth = 0) => {
110
+ if (depth > 16)
111
+ return null;
112
+ const uid = record(value).UID;
113
+ if (typeof uid === "number") {
114
+ const target = objectTable[uid];
115
+ const resolved = target === undefined ? null : resolve(target, depth + 1);
116
+ return typeof resolved === "object" &&
117
+ resolved !== null &&
118
+ !Array.isArray(resolved)
119
+ ? { ...resolved, archiveUID: uid }
120
+ : resolved;
121
+ }
122
+ if (Array.isArray(value))
123
+ return value.map((item) => resolve(item, depth + 1));
124
+ if (typeof value !== "object" || value === null)
125
+ return value;
126
+ const output = {};
127
+ for (const [key, child] of Object.entries(value)) {
128
+ if (key === "$class") {
129
+ const classObject = record(typeof record(child).UID === "number"
130
+ ? objectTable[record(child).UID]
131
+ : child);
132
+ output.className = firstString(classObject.$classname);
133
+ }
134
+ else
135
+ output[key] = resolve(child, depth + 1);
136
+ }
137
+ return output;
138
+ };
139
+ const toHierarchy = (value, depth = 0) => {
140
+ if (depth > 32)
141
+ return [];
142
+ if (Array.isArray(value))
143
+ return value.flatMap((item) => toHierarchy(item, depth + 1));
144
+ if (typeof value !== "object" || value === null)
145
+ return [];
146
+ const item = record(value);
147
+ const objectId = firstString(item.objectID, item["object-id"], item.id, typeof item.archiveUID === "number" ? String(item.archiveUID) : null);
148
+ const children = Object.entries(item)
149
+ .filter(([key]) => /(?:subviews|contentview|childviewcontrollers|children|views)$/iu.test(key))
150
+ .flatMap(([, child]) => toHierarchy(child, depth + 1));
151
+ return objectId === null ? children : [{ objectID: objectId, children }];
152
+ };
153
+ const objects = [];
154
+ const connections = [];
155
+ let objectCount = 0;
156
+ let omittedConnections = 0;
157
+ for (const [index, raw] of objectTable.entries()) {
158
+ if (index === 0)
159
+ continue;
160
+ const resolved = record(resolve(raw));
161
+ const className = firstString(resolved.className);
162
+ if (className === null)
163
+ continue;
164
+ objectCount += 1;
165
+ const fields = Object.fromEntries(Object.entries(resolved).filter(([key]) => key !== "className"));
166
+ const authoredId = firstString(fields.objectID, fields["object-id"]);
167
+ const objectId = authoredId ??
168
+ (typeof fields.archiveUID === "number"
169
+ ? String(fields.archiveUID)
170
+ : String(index));
171
+ const kind = classifyObject(className);
172
+ if (objects.length < 20_000)
173
+ objects.push(objectNode.parse({
174
+ id: objectId,
175
+ kind,
176
+ class_name: className,
177
+ name: firstString(fields.label, fields.title, fields.identifier, fields.accessibilityLabel, className) ?? `object ${String(index)}`,
178
+ attributes: jsonSafeRecord(fields),
179
+ }));
180
+ if (/(?:Outlet|Connection|Segue|ActionConnection|ControlConnector)/iu.test(className)) {
181
+ const controlAction = /ControlConnector/iu.test(className);
182
+ const source = firstObjectReference(controlAction ? fields.destination : fields.source, controlAction ? fields.to : fields.from, controlAction ? fields.target : fields.owner);
183
+ if (source === null)
184
+ continue;
185
+ const kind = controlAction ? "action" : classifyConnection(className);
186
+ const parsedConnection = connection.parse({
187
+ id: `archive:${objectId}`,
188
+ kind,
189
+ source_id: source,
190
+ destination_id: firstObjectReference(controlAction ? fields.source : fields.destination, controlAction ? fields.from : fields.to, controlAction ? fields.owner : fields.target),
191
+ label: firstString(fields.label, fields.selector, fields.identifier, fields.action),
192
+ attributes: jsonSafeRecord(fields),
193
+ });
194
+ if (connections.length < 40_000)
195
+ connections.push(parsedConnection);
196
+ else
197
+ omittedConnections += 1;
198
+ }
199
+ }
200
+ const top = record(root.$top);
201
+ const topObject = resolve(top.root ?? top.UITopLevelObjectsKey);
202
+ const hierarchy = toHierarchy(topObject);
203
+ const classes = Object.fromEntries(objectTable.flatMap((raw) => {
204
+ const item = record(raw);
205
+ const name = firstString(item.$classname);
206
+ return name === null
207
+ ? []
208
+ : [
209
+ [
210
+ name,
211
+ {
212
+ superclasses: Array.isArray(item.$classes) ? item.$classes : [],
213
+ },
214
+ ],
215
+ ];
216
+ }));
217
+ return {
218
+ objects,
219
+ connections,
220
+ hierarchy,
221
+ classes,
222
+ objectCount,
223
+ omittedObjects: Math.max(0, objectCount - 20_000),
224
+ omittedConnections,
225
+ };
226
+ };
227
+ /** Build the graph returned by the static Interface Builder archive decoder. */
228
+ export const buildInterfaceBuilderAnalysis = (input) => {
229
+ const nodes = new Map();
230
+ const edges = [];
231
+ const coverage = [];
232
+ const summaries = [];
233
+ let truncated = false;
234
+ let omittedObjects = 0;
235
+ let omittedConnections = 0;
236
+ let omittedGraphNodes = 0;
237
+ for (const document of input.documents.slice(0, input.limits.max_documents)) {
238
+ const parsed = parseInterfaceBuilderRecords(document.raw);
239
+ const prefix = `ib:${document.relativePath}:`;
240
+ const rootId = `${prefix}root`;
241
+ const objectIds = new Set(parsed.objects.map(({ id }) => id));
242
+ const evidenceFor = (description) => [
243
+ {
244
+ kind: "interface_builder_resource",
245
+ description: `${document.relativePath}: ${description}`,
246
+ location: { address: null, file_offset: null },
247
+ artifact_path: document.relativePath,
248
+ artifact_sha256: document.archiveSha256,
249
+ },
250
+ ];
251
+ const addNode = (node) => {
252
+ if (nodes.has(node.id))
253
+ return true;
254
+ if (nodes.size >= input.limits.max_objects) {
255
+ truncated = true;
256
+ omittedGraphNodes += 1;
257
+ return false;
258
+ }
259
+ nodes.set(node.id, node);
260
+ return true;
261
+ };
262
+ const rootNode = {
263
+ id: rootId,
264
+ kind: document.documentKind === "nib"
265
+ ? "scene"
266
+ : "storyboard",
267
+ name: document.relativePath,
268
+ location: null,
269
+ attributes: { document_kind: document.documentKind },
270
+ evidence: evidenceFor("compiled document"),
271
+ };
272
+ addNode(rootNode);
273
+ let documentObjectCount = 0;
274
+ for (const object of parsed.objects.slice(0, input.limits.max_objects)) {
275
+ const id = `${prefix}object:${object.id}`;
276
+ const kind = object.kind === "other" ? "unknown" : object.kind;
277
+ if (!addNode({
278
+ id,
279
+ kind,
280
+ name: object.name,
281
+ location: null,
282
+ attributes: {
283
+ ...object.attributes,
284
+ interface_builder_object_id: object.id,
285
+ class_name: object.class_name,
286
+ },
287
+ evidence: evidenceFor(`object ${object.id}`),
288
+ })) {
289
+ break;
290
+ }
291
+ documentObjectCount += 1;
292
+ }
293
+ let connectionEdgeCount = 0;
294
+ let hierarchyEdgeCount = 0;
295
+ let documentOmittedConnections = 0;
296
+ let documentOmittedHierarchyEdges = 0;
297
+ const objectNodeId = (objectId) => `${prefix}object:${objectId}`;
298
+ const addEdge = (edge, isHierarchy) => {
299
+ if (isHierarchy
300
+ ? hierarchyEdgeCount >= input.limits.max_objects
301
+ : connectionEdgeCount >= input.limits.max_connections * 3) {
302
+ truncated = true;
303
+ if (isHierarchy) {
304
+ documentOmittedHierarchyEdges += 1;
305
+ }
306
+ else {
307
+ omittedConnections += 1;
308
+ documentOmittedConnections += 1;
309
+ }
310
+ return;
311
+ }
312
+ edges.push(edge);
313
+ if (isHierarchy)
314
+ hierarchyEdgeCount += 1;
315
+ else
316
+ connectionEdgeCount += 1;
317
+ };
318
+ const connect = (id, from, to, relation, description, reason) => {
319
+ if (!nodes.has(from)) {
320
+ truncated = true;
321
+ if (relation === "contains" && id.includes(":hierarchy:")) {
322
+ documentOmittedHierarchyEdges += 1;
323
+ }
324
+ else {
325
+ omittedConnections += 1;
326
+ documentOmittedConnections += 1;
327
+ }
328
+ return;
329
+ }
330
+ const evidence = evidenceFor(description);
331
+ const unresolvedEndpoint = to !== null && !nodes.has(to);
332
+ if (unresolvedEndpoint)
333
+ truncated = true;
334
+ const edgeTo = unresolvedEndpoint ? null : to;
335
+ const edgeReason = unresolvedEndpoint
336
+ ? "endpoint_omitted_by_object_limit"
337
+ : (reason ?? "destination_unresolved");
338
+ addEdge(edgeTo === null
339
+ ? {
340
+ id,
341
+ from,
342
+ to: null,
343
+ relation,
344
+ resolution: "unresolved",
345
+ reason: edgeReason,
346
+ evidence,
347
+ limitations: [],
348
+ }
349
+ : {
350
+ id,
351
+ from,
352
+ to: edgeTo,
353
+ relation,
354
+ resolution: "observed",
355
+ evidence,
356
+ limitations: [],
357
+ }, relation === "contains" && id.includes(":hierarchy:"));
358
+ };
359
+ let hierarchyCount = 0;
360
+ let hierarchyTruncated = false;
361
+ const visitHierarchy = (value, parentId) => {
362
+ if (hierarchyCount >= input.limits.max_objects) {
363
+ truncated = true;
364
+ hierarchyTruncated = true;
365
+ return;
366
+ }
367
+ if (Array.isArray(value)) {
368
+ for (const child of value)
369
+ visitHierarchy(child, parentId);
370
+ return;
371
+ }
372
+ if (typeof value !== "object" || value === null)
373
+ return;
374
+ const item = record(value);
375
+ const objectId = firstString(item.objectID, item["object-id"], item.id, typeof item.archiveUID === "number" ? String(item.archiveUID) : null);
376
+ let nextParent = parentId;
377
+ if (objectId !== null) {
378
+ const known = objectIds.has(objectId);
379
+ const childId = known
380
+ ? objectNodeId(objectId)
381
+ : `${prefix}unknown:${objectId}`;
382
+ if (!known &&
383
+ !addNode({
384
+ id: childId,
385
+ kind: "unknown",
386
+ name: firstString(item.label, item.name) ?? objectId,
387
+ location: null,
388
+ attributes: { interface_builder_object_id: objectId },
389
+ evidence: evidenceFor(`hierarchy item ${objectId}`),
390
+ }))
391
+ hierarchyTruncated = true;
392
+ connect(`${prefix}hierarchy:${parentId}:${childId}`, parentId, childId, "contains", `hierarchy ${objectId}`);
393
+ nextParent = childId;
394
+ hierarchyCount += 1;
395
+ }
396
+ visitHierarchy(item.children, nextParent);
397
+ };
398
+ for (const hierarchy of parsed.hierarchy)
399
+ visitHierarchy(hierarchy, rootId);
400
+ for (const [index, item] of parsed.connections
401
+ .slice(0, input.limits.max_connections)
402
+ .entries()) {
403
+ const sourceId = objectNodeId(item.source_id);
404
+ if (!nodes.has(sourceId))
405
+ addNode({
406
+ id: sourceId,
407
+ kind: "unknown",
408
+ name: item.source_id,
409
+ location: null,
410
+ attributes: { interface_builder_object_id: item.source_id },
411
+ evidence: evidenceFor(`connection source ${item.source_id}`),
412
+ });
413
+ const destinationId = item.destination_id === null ? null : objectNodeId(item.destination_id);
414
+ if (item.kind === "action") {
415
+ const actionId = `${prefix}action:${item.id}`;
416
+ const selectorId = item.label === null
417
+ ? null
418
+ : `${prefix}selector:${item.destination_id ?? "unknown"}:${item.label}`;
419
+ addNode({
420
+ id: actionId,
421
+ kind: "action",
422
+ name: item.label ?? "unlabeled action",
423
+ location: null,
424
+ attributes: {
425
+ selector: item.label,
426
+ destination_id: item.destination_id,
427
+ ...item.attributes,
428
+ },
429
+ evidence: evidenceFor(`action ${item.id}`),
430
+ });
431
+ connect(`${actionId}:source`, sourceId, actionId, "target_action", `action source ${item.source_id}`);
432
+ if (selectorId !== null) {
433
+ addNode({
434
+ id: selectorId,
435
+ kind: "objc_selector",
436
+ name: item.label ?? "unknown selector",
437
+ location: null,
438
+ attributes: { destination_id: item.destination_id },
439
+ evidence: evidenceFor(`selector ${item.label}`),
440
+ });
441
+ connect(`${actionId}:selector`, actionId, selectorId, "target_action", `selector ${item.label}`);
442
+ }
443
+ if (destinationId === null || !nodes.has(destinationId))
444
+ connect(`${actionId}:destination`, actionId, null, "target_action", `action destination ${item.destination_id ?? "missing"}`, "destination_object_missing_or_external");
445
+ else
446
+ connect(`${actionId}:destination`, actionId, destinationId, "target_action", `action destination ${item.destination_id}`);
447
+ }
448
+ else if (item.kind === "outlet") {
449
+ const outletId = `${prefix}outlet:${item.id}`;
450
+ addNode({
451
+ id: outletId,
452
+ kind: "outlet",
453
+ name: item.label ?? item.id,
454
+ location: null,
455
+ attributes: item.attributes,
456
+ evidence: evidenceFor(`outlet ${item.id}`),
457
+ });
458
+ connect(`${outletId}:source`, sourceId, outletId, "contains", `outlet source ${item.source_id}`);
459
+ if (destinationId === null || !nodes.has(destinationId))
460
+ connect(`${outletId}:destination`, outletId, null, "outlet_to", `outlet ${item.label ?? item.id}`, "destination_object_missing_or_external");
461
+ else
462
+ connect(`${outletId}:destination`, outletId, destinationId, "outlet_to", `outlet ${item.label ?? item.id}`);
463
+ }
464
+ else if (item.kind === "segue") {
465
+ if (destinationId === null || !nodes.has(destinationId))
466
+ connect(`${prefix}segue:${index}`, sourceId, null, "segue_to", `segue ${item.label ?? item.id}`, "destination_scene_missing");
467
+ else
468
+ connect(`${prefix}segue:${index}`, sourceId, destinationId, "segue_to", `segue ${item.label ?? item.id}`);
469
+ }
470
+ else {
471
+ connect(`${prefix}unknown-connection:${index}`, sourceId, null, "contains", `connection type ${item.kind}`, "unsupported_connection_type");
472
+ }
473
+ }
474
+ const objectsTruncated = parsed.omittedObjects > 0 || parsed.objects.length > documentObjectCount;
475
+ const parserOmittedConnections = parsed.omittedConnections;
476
+ const connectionsTruncated = parserOmittedConnections > 0 ||
477
+ parsed.connections.length > input.limits.max_connections;
478
+ omittedObjects +=
479
+ parsed.omittedObjects +
480
+ Math.max(0, parsed.objects.length - documentObjectCount);
481
+ omittedConnections +=
482
+ Math.max(0, parsed.connections.length - input.limits.max_connections) +
483
+ parserOmittedConnections;
484
+ summaries.push({
485
+ relative_path: document.relativePath,
486
+ archive_sha256: document.archiveSha256,
487
+ document_kind: document.documentKind,
488
+ object_count: parsed.objectCount,
489
+ connection_count: parsed.connections.length + parserOmittedConnections,
490
+ hierarchy_complete: parsed.hierarchy.length > 0 && !truncated,
491
+ });
492
+ coverage.push({
493
+ facet: `objects:${document.relativePath}`,
494
+ status: objectsTruncated ? "partial" : "complete",
495
+ reason: objectsTruncated ? "object_limit_reached" : null,
496
+ examined: documentObjectCount,
497
+ omitted: parsed.omittedObjects +
498
+ Math.max(0, parsed.objects.length - documentObjectCount),
499
+ }, {
500
+ facet: `connections:${document.relativePath}`,
501
+ status: connectionsTruncated || documentOmittedConnections > 0
502
+ ? "partial"
503
+ : "complete",
504
+ reason: connectionsTruncated || documentOmittedConnections > 0
505
+ ? "connection_limit_reached"
506
+ : null,
507
+ examined: Math.min(parsed.connections.length, input.limits.max_connections),
508
+ omitted: Math.max(0, parsed.connections.length - input.limits.max_connections) +
509
+ documentOmittedConnections +
510
+ parserOmittedConnections,
511
+ }, {
512
+ facet: `hierarchy:${document.relativePath}`,
513
+ status: parsed.hierarchy.length === 0
514
+ ? "unsupported"
515
+ : hierarchyTruncated || documentOmittedHierarchyEdges > 0
516
+ ? "partial"
517
+ : "complete",
518
+ reason: parsed.hierarchy.length === 0
519
+ ? "archive_hierarchy_not_decoded"
520
+ : hierarchyTruncated || documentOmittedHierarchyEdges > 0
521
+ ? "graph_limit_reached"
522
+ : null,
523
+ examined: hierarchyCount,
524
+ omitted: documentOmittedHierarchyEdges,
525
+ }, {
526
+ facet: `classes:${document.relativePath}`,
527
+ status: Object.keys(parsed.classes).length > 0 ? "complete" : "unsupported",
528
+ reason: Object.keys(parsed.classes).length > 0
529
+ ? null
530
+ : "archive_class_table_not_decoded",
531
+ examined: Object.keys(parsed.classes).length,
532
+ omitted: 0,
533
+ });
534
+ }
535
+ if (input.documents.length > input.limits.max_documents) {
536
+ truncated = true;
537
+ coverage.push({
538
+ facet: "documents",
539
+ status: "partial",
540
+ reason: "document_limit_reached",
541
+ examined: input.limits.max_documents,
542
+ omitted: input.documents.length - input.limits.max_documents,
543
+ });
544
+ }
545
+ if (omittedGraphNodes > 0)
546
+ coverage.push({
547
+ facet: "graph_nodes",
548
+ status: "partial",
549
+ reason: "max_objects_reached",
550
+ examined: nodes.size,
551
+ omitted: omittedGraphNodes,
552
+ });
553
+ return interfaceBuilderAnalysisSchema.parse({
554
+ target_sha256: input.targetSha256,
555
+ documents: summaries,
556
+ graph: {
557
+ target_sha256: input.targetSha256,
558
+ provider: {
559
+ id: "rea-artifact-graph",
560
+ version: "1",
561
+ tool_version: input.toolVersion,
562
+ },
563
+ nodes: [...nodes.values()],
564
+ edges,
565
+ coverage,
566
+ truncated: truncated || omittedObjects > 0 || omittedConnections > 0,
567
+ },
568
+ limitations: [
569
+ "The graph reflects recognized Interface Builder archive fields and connections; omitted private or unrecognized archive fields remain unknown.",
570
+ "A target-action selector is an Interface Builder observation and does not prove that the binary contains a matching implementation.",
571
+ "Decoded constraints, runtime visibility, dynamic UI creation, and pixel geometry are not inferred from these archives.",
572
+ ],
573
+ });
574
+ };
575
+ const record = (value) => recordSchema.safeParse(value).data ?? {};
576
+ const firstString = (...values) => {
577
+ for (const value of values)
578
+ if (typeof value === "string" && value.length > 0)
579
+ return value;
580
+ return null;
581
+ };
582
+ const firstObjectReference = (...values) => {
583
+ for (const value of values) {
584
+ const direct = firstString(value);
585
+ if (direct !== null)
586
+ return direct;
587
+ const item = record(value);
588
+ const objectId = firstString(item.objectID, item["object-id"], item.id, item.identifier, typeof item.archiveUID === "number" ? String(item.archiveUID) : null);
589
+ if (objectId !== null)
590
+ return objectId;
591
+ }
592
+ return null;
593
+ };
594
+ const classifyObject = (className) => {
595
+ const value = className?.toLowerCase() ?? "";
596
+ if (value.includes("constraint"))
597
+ return "constraint";
598
+ if (value.includes("layoutguide"))
599
+ return "layout_guide";
600
+ if (value.includes("placeholder") || value.includes("firstresponder"))
601
+ return "placeholder";
602
+ if (value.includes("image") ||
603
+ value.includes("color") ||
604
+ value.includes("font"))
605
+ return "resource";
606
+ if (value.includes("external"))
607
+ return "external_object";
608
+ if (value.includes("viewcontroller") || value.includes("windowcontroller"))
609
+ return "view_controller";
610
+ if (value.includes("button") ||
611
+ value.includes("control") ||
612
+ value.includes("textfield") ||
613
+ value.includes("slider") ||
614
+ value.includes("menuitem"))
615
+ return "control";
616
+ if (value.includes("view") ||
617
+ value.includes("window") ||
618
+ value.includes("cell"))
619
+ return "view";
620
+ return "other";
621
+ };
622
+ const classifyConnection = (type) => {
623
+ const value = type.toLowerCase();
624
+ if (value.includes("outlet"))
625
+ return "outlet";
626
+ if (value.includes("action"))
627
+ return "action";
628
+ if (value.includes("segue"))
629
+ return "segue";
630
+ return "other";
631
+ };
632
+ const jsonSafeRecord = (value) => Object.fromEntries(Object.entries(value).flatMap(([key, item]) => {
633
+ try {
634
+ const serialized = JSON.stringify(item);
635
+ if (serialized === undefined)
636
+ return [];
637
+ const parsed = jsonValueSchema.safeParse(JSON.parse(serialized));
638
+ return parsed.success ? [[key, parsed.data]] : [];
639
+ }
640
+ catch {
641
+ return [];
642
+ }
643
+ }));
644
+ /** Hard limits shared by Interface Builder archive aggregation and tracing. */
645
+ export const interfaceBuilderLimitsSchema = z.strictObject({
646
+ max_documents: z.number().int().min(1).max(64).default(64),
647
+ max_objects: z.number().int().min(1).max(20_000).default(20_000),
648
+ max_connections: z.number().int().min(1).max(40_000).default(40_000),
649
+ trace: nativeInvestigationTraceLimitsSchema.default({
650
+ max_depth: 8,
651
+ max_nodes: 250,
652
+ max_edges: 500,
653
+ }),
654
+ });