rea-agents 3.1.0 → 3.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (590) hide show
  1. package/README.md +72 -95
  2. package/bridge/ghidra/ReaGhidraBridge.java +609 -841
  3. package/bridge/hopper_bridge.py +99 -344
  4. package/dist/application/AbortablePromise.js +6 -3
  5. package/dist/application/AnalysisSnapshotCache.js +0 -1
  6. package/dist/application/AnalysisSnapshotFiles.js +7 -7
  7. package/dist/application/AndroidApplicationService.js +1 -1
  8. package/dist/application/AppleApplicationService.js +1 -1
  9. package/dist/application/ArtifactExtraction.js +35 -54
  10. package/dist/application/ArtifactExtractionDestination.js +17 -0
  11. package/dist/application/ArtifactGraphConstruction.js +2 -17
  12. package/dist/application/ArtifactInventory/classify.js +2 -6
  13. package/dist/application/ArtifactInventory/hash.js +2 -20
  14. package/dist/application/ArtifactInventory/scanCanonical.js +8 -12
  15. package/dist/application/ArtifactInventory/scanReader.js +69 -51
  16. package/dist/application/ArtifactInventory.js +6 -14
  17. package/dist/application/AuthorizedArtifactInventory.js +3 -13
  18. package/dist/application/BinarySession.js +41 -13
  19. package/dist/application/BinarySessionComposition.js +0 -11
  20. package/dist/application/BinarySessionOpen.js +2 -1
  21. package/dist/application/BinarySessionRecords.js +5 -93
  22. package/dist/application/BinarySessionStatus.js +5 -16
  23. package/dist/application/BinaryTargetResolver.js +216 -0
  24. package/dist/application/BrowserEvidence.js +42 -58
  25. package/dist/application/BrowserObservationService.js +3 -6
  26. package/dist/application/BrowserScenarioCaptureService.js +3 -6
  27. package/dist/application/BrowserScenarioEvidence.js +3 -3
  28. package/dist/application/CallPathTracing.js +2 -36
  29. package/dist/application/CapabilityInventory.js +10 -15
  30. package/dist/application/ClientConfigurationDocument.js +27 -0
  31. package/dist/application/ClientRegistrationStatus.js +16 -13
  32. package/dist/application/CommandShimReplay.js +14 -1
  33. package/dist/application/DirectAnalysis.js +22 -46
  34. package/dist/application/DirectAnalysisStatus.js +5 -61
  35. package/dist/application/Doctor.js +11 -32
  36. package/dist/application/DoctorDiagnostics.js +1 -2
  37. package/dist/application/DoctorScope.js +1 -1
  38. package/dist/application/ElectronActiveEvidence.js +3 -8
  39. package/dist/application/ElectronActiveObservationService.js +3 -6
  40. package/dist/application/ElectronBoundaryAnalysis.js +7 -8
  41. package/dist/application/ElectronBoundaryGraphContext.js +1 -1
  42. package/dist/application/ElectronBoundaryGraphIpc.js +3 -3
  43. package/dist/application/ElectronBoundaryGraphNative.js +1 -2
  44. package/dist/application/ElectronBoundaryGraphWindows.js +6 -8
  45. package/dist/application/ElectronEvidence.js +4 -7
  46. package/dist/application/ElectronObservationService.js +5 -9
  47. package/dist/application/EnhancedLiteralTracing.js +42 -65
  48. package/dist/application/EnhancedTools.js +76 -44
  49. package/dist/application/EvidenceBundleCommands.js +11 -11
  50. package/dist/application/EvidenceBundleFiles.js +9 -15
  51. package/dist/application/EvidenceLedger.js +6 -41
  52. package/dist/application/FilesystemSnapshot.js +2 -3
  53. package/dist/application/InterfaceBuilderAnalysis.js +266 -0
  54. package/dist/application/InventoryProjectionEvidence.js +4 -2
  55. package/dist/application/InvestigationProviders.js +1 -1
  56. package/dist/application/JavaScriptApplicationEvidence.js +2 -5
  57. package/dist/application/JavaScriptApplicationEvidenceGraph.js +6 -10
  58. package/dist/application/JavaScriptApplicationService.js +6 -29
  59. package/dist/application/JavaScriptApplicationWorkflowEvidence.js +5 -5
  60. package/dist/application/JavaScriptApplicationWorkflowService.js +0 -8
  61. package/dist/application/JavaScriptArtifactAnalysis.js +38 -127
  62. package/dist/application/JavaScriptArtifactFiles.js +67 -107
  63. package/dist/application/JavaScriptArtifactGraphAccumulator.js +0 -7
  64. package/dist/application/JavaScriptArtifactGraphBuilder.js +7 -58
  65. package/dist/application/JavaScriptArtifactGraphBundlers.js +1 -6
  66. package/dist/application/JavaScriptArtifactGraphContext.js +12 -39
  67. package/dist/application/JavaScriptArtifactGraphDocuments.js +4 -11
  68. package/dist/application/JavaScriptArtifactGraphEvidence.js +0 -14
  69. package/dist/application/JavaScriptArtifactGraphFindings.js +3 -3
  70. package/dist/application/JavaScriptArtifactGraphStructure.js +16 -17
  71. package/dist/application/JavaScriptArtifactPathResolution.js +61 -49
  72. package/dist/application/JavaScriptArtifactReconstruction.js +5 -10
  73. package/dist/application/JavaScriptArtifactReconstructionInput.js +2 -14
  74. package/dist/application/JavaScriptJsonModules.js +2 -2
  75. package/dist/application/JavaScriptModuleRelationships.js +22 -27
  76. package/dist/application/JavaScriptReplayPlanning.js +9 -3
  77. package/dist/application/JavaScriptReplayService.js +6 -32
  78. package/dist/application/JavaScriptReturnShapeProjection.js +12 -42
  79. package/dist/application/JavaScriptRuntimeObservationEvidence.js +7 -8
  80. package/dist/application/JavaScriptRuntimeObservationService.js +4 -8
  81. package/dist/application/JavaScriptRuntimeReconciliationEvidence.js +2 -3
  82. package/dist/application/JavaScriptSemanticGraphBuilder.js +11 -41
  83. package/dist/application/JavaScriptSemanticGraphConstruction.js +5 -29
  84. package/dist/application/JavaScriptSemanticGraphEvidence.js +1 -1
  85. package/dist/application/JavaScriptSemanticGraphFingerprintProjection.js +1 -1
  86. package/dist/application/JavaScriptSemanticGraphFlowProjection.js +0 -13
  87. package/dist/application/JavaScriptSemanticGraphProjection.js +1 -3
  88. package/dist/application/JavaScriptSemanticTraceService.js +1 -10
  89. package/dist/application/JsonFiles.js +79 -0
  90. package/dist/application/LinuxHopper.js +11 -9
  91. package/dist/application/LoopbackReplay.js +26 -23
  92. package/dist/application/LoopbackReplayRecorder.js +29 -1
  93. package/dist/application/ManagedApplicationGraphService.js +1 -2
  94. package/dist/application/ManagedMemberComparisonService.js +11 -41
  95. package/dist/application/ManagedNativeVerificationService.js +1 -2
  96. package/dist/application/ManagedReconstructionService.js +1 -1
  97. package/dist/application/ManagedRuntimeCorrelationService.js +5 -8
  98. package/dist/application/NativeApiInspection.js +2 -7
  99. package/dist/application/NativeUiActionTrace.js +394 -0
  100. package/dist/application/NodeRuntimeCharacterizationService.js +3 -7
  101. package/dist/application/PermissionAuthority.js +15 -7
  102. package/dist/application/PermissionFailure.js +5 -0
  103. package/dist/application/ProcessCaptureAuthority.js +5 -7
  104. package/dist/application/ProcessCaptureJournal.js +3 -2
  105. package/dist/application/ProcessCaptureLifecycle.js +5 -12
  106. package/dist/application/ProcessCheckpoints.js +29 -11
  107. package/dist/application/ProcessCli.js +6 -16
  108. package/dist/application/ProcessEvidence.js +5 -7
  109. package/dist/application/ProcessHarness.js +52 -17
  110. package/dist/application/ProcessReactiveCoordinator.js +2 -4
  111. package/dist/application/ProcessReactiveEffects.js +9 -3
  112. package/dist/application/ProcessReactiveHarness.js +13 -7
  113. package/dist/application/ProcessSampling.js +2 -4
  114. package/dist/application/ProcessTimer.js +39 -0
  115. package/dist/application/ProjectPermissionStore.js +39 -96
  116. package/dist/application/RealHopperAssertions.js +20 -66
  117. package/dist/application/ReconstructionCoverageService.js +12 -58
  118. package/dist/application/ReconstructionObligationAuthority.js +2 -2
  119. package/dist/application/ReconstructionObligationCandidates.js +4 -4
  120. package/dist/application/ReconstructionObligationLedgerEvaluation.js +8 -15
  121. package/dist/application/ReconstructionObligationLedgerProjection.js +3 -7
  122. package/dist/application/ReconstructionObligationLedgerService.js +19 -38
  123. package/dist/application/ReferenceSourceImport.js +19 -45
  124. package/dist/application/ReferenceSourceImportEntries.js +2 -4
  125. package/dist/application/ReferenceSourceImportPolicy.js +5 -32
  126. package/dist/application/ReferenceSourceImportTypes.js +0 -16
  127. package/dist/application/RuntimeExecutableDiagnostics.js +55 -29
  128. package/dist/application/SessionProviderRouter.js +2 -2
  129. package/dist/application/Setup.js +1 -3
  130. package/dist/application/SetupClientConfiguration.js +22 -93
  131. package/dist/application/SetupRegistrationEnvironment.js +0 -7
  132. package/dist/application/StoreFileLock.js +119 -0
  133. package/dist/application/TerminalRenderer.js +2 -3
  134. package/dist/application/Uninstall.js +9 -14
  135. package/dist/application/UnknownEvidence.js +1 -1
  136. package/dist/artifacts/ArtifactPaths.js +2 -5
  137. package/dist/artifacts/ArtifactProvider.js +36 -58
  138. package/dist/artifacts/DirectoryArtifactReader.js +13 -8
  139. package/dist/artifacts/MachOSliceArtifactReader.js +1 -5
  140. package/dist/artifacts/NativeDmgArtifactReader.js +11 -11
  141. package/dist/artifacts/NibArchive.js +269 -0
  142. package/dist/artifacts/SafeOutputTree.js +15 -24
  143. package/dist/browser/BrowserProcessStartup.js +1 -2
  144. package/dist/browser/CdpAuthorizedMainFrame.js +16 -0
  145. package/dist/browser/CdpBrowserProvider.js +3 -13
  146. package/dist/browser/CdpCanonicalJsonDigest.js +9 -0
  147. package/dist/browser/CdpCaptureDocuments.js +28 -76
  148. package/dist/browser/CdpCaptureEventBodyShapes.js +13 -33
  149. package/dist/browser/CdpCaptureEventHandlers.js +22 -87
  150. package/dist/browser/CdpCaptureEvents.js +2 -8
  151. package/dist/browser/CdpCaptureStorage.js +9 -20
  152. package/dist/browser/CdpCaptureStorageFingerprints.js +85 -98
  153. package/dist/browser/CdpCaptureValues.js +21 -21
  154. package/dist/browser/CdpConnection.js +10 -25
  155. package/dist/browser/CdpElectronInspection.js +26 -50
  156. package/dist/browser/CdpElectronProvider.js +10 -35
  157. package/dist/browser/CdpElectronScriptEvents.js +8 -16
  158. package/dist/browser/CdpElectronScripts.js +6 -35
  159. package/dist/browser/CdpElectronWorkers.js +6 -10
  160. package/dist/browser/CdpEndpoint.js +25 -41
  161. package/dist/browser/CdpObservationSession.js +14 -26
  162. package/dist/browser/CdpPageCapture.js +34 -48
  163. package/dist/browser/CdpPageCaptureScripts.js +1 -19
  164. package/dist/browser/CdpPageCaptureWorkers.js +6 -10
  165. package/dist/browser/CdpSafeMetadata.js +19 -22
  166. package/dist/browser/CdpScreenshot.js +3 -5
  167. package/dist/browser/CdpTargetSession.js +1 -2
  168. package/dist/browser/CdpWebMcpDiscovery.js +13 -22
  169. package/dist/browser/ElectronFileScope.js +8 -19
  170. package/dist/browser/JavaScriptRuntimeScope.js +9 -14
  171. package/dist/browser/PlaywrightBrowserScenarioProvider.js +31 -64
  172. package/dist/browser/PlaywrightElectronActiveActions.js +54 -69
  173. package/dist/browser/PlaywrightElectronActiveProvider.js +14 -34
  174. package/dist/browser/PlaywrightExecutionBoundary.js +16 -5
  175. package/dist/browser/PlaywrightScenarioActions.js +3 -7
  176. package/dist/browser/PlaywrightScenarioArtifacts.js +23 -92
  177. package/dist/browser/PlaywrightScenarioBrowser.js +3 -5
  178. package/dist/browser/PlaywrightScenarioEvents.js +45 -94
  179. package/dist/browser/PlaywrightScenarioSession.js +14 -30
  180. package/dist/browser/PngVisualDiff.js +22 -14
  181. package/dist/browser/SensitiveTextCapture.js +0 -17
  182. package/dist/browser/V8InspectorCaptureProjection.js +7 -8
  183. package/dist/browser/V8InspectorEndpoint.js +12 -14
  184. package/dist/browser/V8InspectorProvider.js +20 -61
  185. package/dist/browser/WebSourceMapFetcher.js +56 -176
  186. package/dist/catalogIdentity.js +0 -54
  187. package/dist/cli/artifactCommands.js +49 -77
  188. package/dist/cli/coreAnalysisCommands.js +83 -133
  189. package/dist/cli/javascriptApplicationAnalysis.js +1 -9
  190. package/dist/cli/managedCommands.js +5 -270
  191. package/dist/cli/setupCommands.js +3 -12
  192. package/dist/cli/utilityCommands.js +7 -41
  193. package/dist/cli.js +0 -2
  194. package/dist/cliApplicationCommands.js +42 -112
  195. package/dist/cliBrowserAdvancedCommands.js +10 -106
  196. package/dist/cliBrowserCommands.js +15 -127
  197. package/dist/cliBrowserContext.js +30 -0
  198. package/dist/cliCommandNames.js +4 -5
  199. package/dist/cliElectronCommands.js +8 -72
  200. package/dist/cliEvidenceCommands.js +8 -77
  201. package/dist/cliJavaScriptRuntimeCommands.js +9 -91
  202. package/dist/cliJsonInput.js +4 -14
  203. package/dist/cliObservationOptions.js +11 -96
  204. package/dist/cliPolicyCommands.js +2 -17
  205. package/dist/cliProcessCommands.js +3 -3
  206. package/dist/cliSetup.js +0 -13
  207. package/dist/config/browserScenario.js +2 -2
  208. package/dist/config/environment.js +0 -9
  209. package/dist/config/parseConfig.js +1 -33
  210. package/dist/config/parsers.js +6 -27
  211. package/dist/config/passiveObservation.js +7 -77
  212. package/dist/config/permissions.js +0 -7
  213. package/dist/contracts/analysisSearchContract.js +2 -5
  214. package/dist/contracts/applicationToolContracts.js +56 -109
  215. package/dist/contracts/applicationWorkflowInputContracts.js +27 -102
  216. package/dist/contracts/artifactComparisonExample.js +58 -60
  217. package/dist/contracts/artifactToolContracts.js +20 -67
  218. package/dist/contracts/browserScenarioToolContracts.js +6 -51
  219. package/dist/contracts/browserToolContracts.js +8 -73
  220. package/dist/contracts/electronToolContracts.js +8 -108
  221. package/dist/contracts/enhancedInputs.js +23 -54
  222. package/dist/contracts/errorSchemas.js +0 -1
  223. package/dist/contracts/functionComparisonExample.js +10 -24
  224. package/dist/contracts/functionInstructionContract.js +1 -3
  225. package/dist/contracts/functionWorkflowToolContracts.js +2 -2
  226. package/dist/contracts/hopperMemoryContracts.js +3 -3
  227. package/dist/contracts/investigationExamples.js +14 -11
  228. package/dist/contracts/javascriptApplicationWorkflowExamples.js +12 -19
  229. package/dist/contracts/javascriptRuntimeObservationToolContracts.js +2 -20
  230. package/dist/contracts/javascriptRuntimeReconciliationExample.js +45 -12
  231. package/dist/contracts/managedToolContracts.js +6 -95
  232. package/dist/contracts/managedWorkflowExamples.js +77 -128
  233. package/dist/contracts/managedWorkflowToolContracts.js +51 -77
  234. package/dist/contracts/nativeToolContracts.js +7 -11
  235. package/dist/contracts/processCaptureExample.js +2 -69
  236. package/dist/contracts/promptContracts.js +49 -67
  237. package/dist/contracts/providerSelection.js +0 -1
  238. package/dist/contracts/reconstructionReadinessExample.js +1 -6
  239. package/dist/contracts/sessionStatusContract.js +1 -17
  240. package/dist/contracts/sessionToolSchemas.js +6 -15
  241. package/dist/contracts/toolContractExamples.js +11 -11
  242. package/dist/contracts/toolContractHelpers.js +0 -4
  243. package/dist/contracts/toolContracts.js +60 -71
  244. package/dist/contracts/toolEffects.js +5 -13
  245. package/dist/contracts/toolOutputSchemaGroups.js +37 -91
  246. package/dist/contracts/toolOutputSchemaPrimitives.js +16 -56
  247. package/dist/contracts/toolSchemaMetadata.js +8 -19
  248. package/dist/contracts/unknownContractExamples.js +0 -2
  249. package/dist/domain/analysisErrorPresentation.js +46 -54
  250. package/dist/domain/analysisErrorProjection.js +28 -37
  251. package/dist/domain/analysisProfile.js +3 -31
  252. package/dist/domain/analysisSnapshot.js +3 -12
  253. package/dist/domain/androidApplication.js +15 -54
  254. package/dist/domain/appleApplication.js +24 -67
  255. package/dist/domain/artifactComparison.js +11 -29
  256. package/dist/domain/artifactGraph.js +14 -44
  257. package/dist/domain/artifactInspection.js +38 -69
  258. package/dist/domain/artifactInventoryEvidence.js +27 -21
  259. package/dist/domain/binaryTarget.js +2 -221
  260. package/dist/domain/browserCaptureComparison.js +47 -24
  261. package/dist/domain/browserObservation.js +28 -193
  262. package/dist/domain/browserObservationSchemas.js +5 -23
  263. package/dist/domain/browserScenario.js +11 -14
  264. package/dist/domain/browserScenarioCapture.js +11 -12
  265. package/dist/domain/browserScenarioCaptureValues.js +146 -84
  266. package/dist/domain/browserScenarioDiff.js +2 -59
  267. package/dist/domain/browserScenarioDiffEvidence.js +51 -0
  268. package/dist/domain/browserScenarioDiffValues.js +21 -38
  269. package/dist/domain/browserScenarioValues.js +80 -109
  270. package/dist/domain/browserSession.js +4 -7
  271. package/dist/domain/bundleComparison.js +6 -32
  272. package/dist/domain/bytecodeProvider.js +20 -19
  273. package/dist/domain/callPath.js +47 -167
  274. package/dist/domain/callPathSchemas.js +79 -0
  275. package/dist/domain/changedBehavior.js +34 -60
  276. package/dist/domain/completionLedgerGeneration.js +8 -14
  277. package/dist/domain/conformancePackage.js +126 -97
  278. package/dist/domain/conformanceReplay.js +36 -8
  279. package/dist/domain/conformanceTrustGate.js +23 -14
  280. package/dist/domain/customProtocolCapture.js +1 -1
  281. package/dist/domain/electronActiveObservation.js +70 -103
  282. package/dist/domain/electronObservation.js +14 -80
  283. package/dist/domain/electronStaticAnalysisBrowser.js +36 -46
  284. package/dist/domain/electronStaticAnalysisIpc.js +38 -14
  285. package/dist/domain/electronStaticAnalysisNative.js +1 -8
  286. package/dist/domain/electronStaticAnalysisValues.js +10 -17
  287. package/dist/domain/errors.js +33 -54
  288. package/dist/domain/eventProcessTree.js +20 -12
  289. package/dist/domain/evidence.js +2 -10
  290. package/dist/domain/evidenceBundle.js +3 -5
  291. package/dist/domain/evidenceCompletionLedger.js +6 -8
  292. package/dist/domain/functionComparison.js +4 -14
  293. package/dist/domain/functionComparisonNormalization.js +4 -11
  294. package/dist/domain/functionComparisonResults.js +25 -15
  295. package/dist/domain/functionComparisonSchemas.js +49 -33
  296. package/dist/domain/functionDossierEvidence.js +31 -156
  297. package/dist/domain/hopperStartupFailure.js +1 -1
  298. package/dist/domain/hopperValues.js +15 -136
  299. package/dist/domain/interfaceBuilderGraph.js +654 -0
  300. package/dist/domain/javascriptApplicationAnalysis.js +8 -112
  301. package/dist/domain/javascriptApplicationChangeGraph.js +22 -82
  302. package/dist/domain/javascriptApplicationEvidenceSchemas.js +59 -47
  303. package/dist/domain/javascriptApplicationGraph.js +3 -13
  304. package/dist/domain/javascriptApplicationGraphSchemas.js +12 -34
  305. package/dist/domain/javascriptApplicationVersionComparison.js +26 -30
  306. package/dist/domain/javascriptApplicationVersionComparisonSchemas.js +123 -68
  307. package/dist/domain/javascriptApplicationVersionItems.js +120 -53
  308. package/dist/domain/javascriptApplicationVersionKeys.js +24 -11
  309. package/dist/domain/javascriptAstFingerprint.js +25 -58
  310. package/dist/domain/javascriptAstValues.js +9 -0
  311. package/dist/domain/javascriptExportInstrumentation.js +2 -4
  312. package/dist/domain/javascriptExportShapeComparison.js +6 -7
  313. package/dist/domain/javascriptExportShapeComparisonSchemas.js +68 -75
  314. package/dist/domain/javascriptExportShapeSelection.js +17 -19
  315. package/dist/domain/javascriptFeatureSeed.js +20 -12
  316. package/dist/domain/javascriptFeatureTrace.js +13 -67
  317. package/dist/domain/javascriptFeatureTraceSchemas.js +24 -52
  318. package/dist/domain/javascriptFeatureTraversal.js +1 -44
  319. package/dist/domain/javascriptNativeHandoff.js +1 -1
  320. package/dist/domain/javascriptReplay.js +24 -41
  321. package/dist/domain/javascriptRuntimeLoadState.js +3 -8
  322. package/dist/domain/javascriptRuntimeObservation.js +42 -103
  323. package/dist/domain/javascriptRuntimeReconciliation.js +1 -3
  324. package/dist/domain/javascriptRuntimeReconciliationActive.js +8 -17
  325. package/dist/domain/javascriptRuntimeReconciliationGraph.js +10 -23
  326. package/dist/domain/javascriptRuntimeReconciliationMatching.js +18 -12
  327. package/dist/domain/javascriptRuntimeReconciliationParsing.js +16 -45
  328. package/dist/domain/javascriptRuntimeReconciliationResult.js +4 -5
  329. package/dist/domain/javascriptRuntimeReconciliationRuntime.js +8 -12
  330. package/dist/domain/javascriptRuntimeReconciliationSchemas.js +33 -48
  331. package/dist/domain/javascriptRuntimeStaticCandidates.js +3 -3
  332. package/dist/domain/javascriptSemanticAnalysis.js +12 -45
  333. package/dist/domain/javascriptSemanticAsyncEffects.js +1 -9
  334. package/dist/domain/javascriptSemanticCallResolution.js +6 -16
  335. package/dist/domain/javascriptSemanticCalls.js +5 -32
  336. package/dist/domain/javascriptSemanticChildProcesses.js +1 -11
  337. package/dist/domain/javascriptSemanticCoverage.js +11 -0
  338. package/dist/domain/javascriptSemanticDataEffectHelpers.js +1 -8
  339. package/dist/domain/javascriptSemanticDataEffects.js +1 -11
  340. package/dist/domain/javascriptSemanticFingerprints.js +3 -5
  341. package/dist/domain/javascriptSemanticGraphSchemas.js +25 -51
  342. package/dist/domain/javascriptSemanticGraphSerialization.js +2 -13
  343. package/dist/domain/javascriptSemanticIr.js +1 -29
  344. package/dist/domain/javascriptSemanticObjects.js +1 -5
  345. package/dist/domain/javascriptSemanticPrimitives.js +2 -9
  346. package/dist/domain/javascriptSemanticProjection.js +0 -18
  347. package/dist/domain/javascriptSemanticPromises.js +9 -16
  348. package/dist/domain/javascriptSemanticProvenance.js +16 -19
  349. package/dist/domain/javascriptSemanticQuery.js +17 -139
  350. package/dist/domain/javascriptSemanticQueryAssessment.js +9 -37
  351. package/dist/domain/javascriptSemanticQueryIdentity.js +2 -23
  352. package/dist/domain/javascriptSemanticQuerySchemas.js +14 -107
  353. package/dist/domain/javascriptSemanticResources.js +1 -6
  354. package/dist/domain/javascriptSemanticReturns.js +10 -27
  355. package/dist/domain/javascriptSemanticValueTypes.js +1 -0
  356. package/dist/domain/javascriptSemanticValues.js +44 -62
  357. package/dist/domain/javascriptStaticAnalysis.js +21 -43
  358. package/dist/domain/javascriptStaticAnalysisBundler.js +34 -93
  359. package/dist/domain/javascriptStaticAnalysisCalls.js +17 -16
  360. package/dist/domain/javascriptStaticAnalysisFindings.js +3 -19
  361. package/dist/domain/javascriptStaticAnalysisHelpers.js +47 -88
  362. package/dist/domain/javascriptStaticAnalysisState.js +1 -5
  363. package/dist/domain/javascriptStaticAnalysisTypes.js +1 -0
  364. package/dist/domain/jsonShape.js +7 -33
  365. package/dist/domain/localPath.js +7 -0
  366. package/dist/domain/managedApplicationGraph.js +9 -41
  367. package/dist/domain/managedApplicationGraphCoverage.js +24 -156
  368. package/dist/domain/managedApplicationGraphNodes.js +10 -13
  369. package/dist/domain/managedArtifact.js +14 -27
  370. package/dist/domain/managedMemberComparison.js +90 -92
  371. package/dist/domain/managedMemberComparisonCoverage.js +11 -33
  372. package/dist/domain/managedMemberComparisonItems.js +221 -0
  373. package/dist/domain/managedMemberComparisonMatch.js +8 -208
  374. package/dist/domain/managedNativeVerification.js +3 -6
  375. package/dist/domain/managedNativeVerificationMatch.js +55 -59
  376. package/dist/domain/managedNativeVerificationSchemas.js +83 -47
  377. package/dist/domain/managedReconstruction.js +19 -23
  378. package/dist/domain/managedRuntimeCorrelation.js +6 -9
  379. package/dist/domain/nativeApiBoundary.js +2 -7
  380. package/dist/domain/nativeInspection.js +0 -2
  381. package/dist/domain/nativeInvestigationGraph.js +351 -0
  382. package/dist/domain/nativeValueFlow.js +61 -0
  383. package/dist/domain/nodeRuntimeCharacterization.js +1 -5
  384. package/dist/domain/objcSwiftMetadata.js +254 -0
  385. package/dist/domain/peInspection.js +1 -1
  386. package/dist/domain/permissionPolicy.js +13 -0
  387. package/dist/domain/processCapture.js +76 -113
  388. package/dist/domain/processCaptureExample.js +68 -0
  389. package/dist/domain/processCaptureParsing.js +21 -0
  390. package/dist/domain/processCaptureReactiveSchema.js +68 -0
  391. package/dist/domain/processCaptureValidation.js +1 -7
  392. package/dist/domain/processComparison.js +3 -12
  393. package/dist/domain/processReactiveMatching.js +29 -50
  394. package/dist/domain/processReactiveRuntime.js +4 -8
  395. package/dist/domain/processReactiveScenario.js +28 -94
  396. package/dist/domain/processReactiveScenarioPreflight.js +5 -30
  397. package/dist/domain/processReactiveTransition.js +33 -18
  398. package/dist/domain/processScenario.js +56 -90
  399. package/dist/domain/processTraceComparison.js +0 -8
  400. package/dist/domain/processTraceEvaluation.js +14 -4
  401. package/dist/domain/processTraceSpecification.js +11 -17
  402. package/dist/domain/protocolCapture.js +3 -3
  403. package/dist/domain/reconstructionCoverage.js +62 -129
  404. package/dist/domain/reconstructionCoverageEvaluation.js +17 -17
  405. package/dist/domain/reconstructionObligationLedgerSchemas.js +45 -72
  406. package/dist/domain/reconstructionReadiness.js +1 -2
  407. package/dist/domain/reconstructionReadinessSchemas.js +36 -38
  408. package/dist/domain/reconstructionUnknowns.js +3 -3
  409. package/dist/domain/reconstructionVerification.js +13 -47
  410. package/dist/domain/reconstructionVerificationSchemas.js +50 -38
  411. package/dist/domain/referenceSourceGraph.js +53 -61
  412. package/dist/domain/referenceSourceImportParsing.js +1 -5
  413. package/dist/domain/replayMachine.js +19 -31
  414. package/dist/domain/replayMachineRun.js +15 -63
  415. package/dist/domain/replayMachineRuntime.js +41 -41
  416. package/dist/domain/replayMachineValues.js +84 -0
  417. package/dist/domain/residualUnknown.js +25 -30
  418. package/dist/domain/runtimeCharacterization.js +15 -16
  419. package/dist/domain/runtimeIdentification.js +48 -47
  420. package/dist/domain/sourceToBundleComparison.js +9 -85
  421. package/dist/domain/sourceToBundleComparisonSchemas.js +17 -42
  422. package/dist/domain/sourceToBundleSignals.js +4 -15
  423. package/dist/domain/staticRuntimeCorrelation.js +37 -49
  424. package/dist/domain/symbolAnalysis.js +10 -19
  425. package/dist/domain/unicodeCodePointOrder.js +12 -0
  426. package/dist/domain/webBundleAnalysis.js +70 -99
  427. package/dist/domain/webBundleAnalyzer.js +2 -4
  428. package/dist/domain/webBundleAnalyzerAst.js +0 -13
  429. package/dist/domain/webBundleAnalyzerInspection.js +26 -52
  430. package/dist/domain/webBundleAnalyzerResult.js +7 -24
  431. package/dist/domain/webCaptureDiff.js +33 -73
  432. package/dist/domain/webCaptureDiffSchemas.js +86 -0
  433. package/dist/domain/webContentArtifact.js +1 -10
  434. package/dist/domain/webMcpDiscovery.js +3 -14
  435. package/dist/domain/webScreenshot.js +58 -34
  436. package/dist/domain/zipPackageFormat.js +7 -0
  437. package/dist/dotnet/ManagedArtifactInspector.js +17 -50
  438. package/dist/dotnet/ManagedMemberInspector.js +27 -58
  439. package/dist/dotnet/ManagedMemberInspectorCore.js +14 -51
  440. package/dist/dotnet/ManagedMemberInstructionDecoder.js +2 -2
  441. package/dist/dotnet/ManagedMemberRows.js +16 -16
  442. package/dist/dotnet/ManagedMetadataHeaps.js +26 -8
  443. package/dist/dotnet/ManagedMetadataInventory.js +21 -30
  444. package/dist/dotnet/ManagedMetadataInventoryRows.js +57 -63
  445. package/dist/dotnet/ManagedMetadataLayout.js +3 -5
  446. package/dist/dotnet/ManagedMethodBodyReader.js +5 -30
  447. package/dist/dotnet/ManagedNativeBoundaryHelpers.js +19 -49
  448. package/dist/dotnet/ManagedNativeBoundaryInspector.js +13 -41
  449. package/dist/dotnet/ManagedPeReader.js +2 -2
  450. package/dist/dotnet/ManagedStaticProvider.js +13 -71
  451. package/dist/generatedMcpToolCatalog.js +1 -1
  452. package/dist/generatedPackageMetadata.js +1 -1
  453. package/dist/ghidra/GhidraAnalysisProfile.js +3 -8
  454. package/dist/ghidra/GhidraClient.js +4 -12
  455. package/dist/ghidra/GhidraClientWire.js +9 -5
  456. package/dist/ghidra/GhidraDefaults.js +0 -18
  457. package/dist/ghidra/GhidraDiagnostics.js +0 -2
  458. package/dist/ghidra/GhidraDoctor.js +16 -12
  459. package/dist/ghidra/GhidraFunctionValues.js +65 -108
  460. package/dist/ghidra/GhidraInstallation.js +98 -42
  461. package/dist/ghidra/GhidraInventoryValues.js +16 -85
  462. package/dist/ghidra/GhidraLauncher.js +0 -8
  463. package/dist/ghidra/GhidraProvider.js +15 -22
  464. package/dist/ghidra/GhidraProviderCapabilities.js +6 -47
  465. package/dist/ghidra/GhidraRequestQueue.js +6 -30
  466. package/dist/ghidra/GhidraResponseBuffer.js +1 -7
  467. package/dist/ghidra/GhidraSessionValues.js +0 -2
  468. package/dist/ghidra/GhidraTransport.js +4 -7
  469. package/dist/ghidra/protocol.js +2 -2
  470. package/dist/hopper/BridgeLauncher.js +112 -36
  471. package/dist/hopper/HopperAnalysisProfile.js +1 -1
  472. package/dist/hopper/HopperCleanup.js +6 -3
  473. package/dist/hopper/HopperClient.js +4 -7
  474. package/dist/hopper/HopperProcessDiagnostic.js +2 -2
  475. package/dist/hopper/HopperProvider.js +0 -16
  476. package/dist/hopper/HopperRequestQueue.js +21 -40
  477. package/dist/hopper/HopperResponseStream.js +1 -9
  478. package/dist/hopper/HopperSessionValues.js +3 -2
  479. package/dist/hopper/HopperTargetLease.js +119 -0
  480. package/dist/hopper/LinuxPrivateDisplayDiagnostic.js +24 -31
  481. package/dist/hopper/LinuxPrivateDisplayProbe.js +5 -16
  482. package/dist/hopper/protocol.js +6 -4
  483. package/dist/main/reload.js +0 -3
  484. package/dist/main/shutdown.js +1 -1
  485. package/dist/main/state.js +0 -9
  486. package/dist/main/transport.js +0 -5
  487. package/dist/mcpDoctor.js +25 -45
  488. package/dist/native/CommandRunner.js +18 -25
  489. package/dist/native/NativeMacOSProvider.js +13 -38
  490. package/dist/native/NativeMachoInspection.js +1 -1
  491. package/dist/process/BoundedFileBytes.js +17 -0
  492. package/dist/process/ExecFileOutput.js +11 -0
  493. package/dist/process/PendingOperations.js +8 -6
  494. package/dist/process/ProcessOwnership.js +3 -2
  495. package/dist/process/ProcessOwnershipObservation.js +0 -1
  496. package/dist/process/ProviderProcess.js +7 -28
  497. package/dist/reference/ReferenceSourceReader.js +8 -24
  498. package/dist/reference/ReferenceSourceReaderEntries.js +11 -39
  499. package/dist/reference/ReferenceSourceReaderFile.js +13 -31
  500. package/dist/reference/ReferenceSourceReaderPaths.js +3 -18
  501. package/dist/reference/ReferenceSourceReaderValidate.js +3 -6
  502. package/dist/replay/JavaScriptReplayWorker.js +3 -5
  503. package/dist/replay/LinuxJavaScriptReplayRunner.js +33 -29
  504. package/dist/replay/LinuxJavaScriptReplaySandbox.js +0 -19
  505. package/dist/replay/LinuxRuntimeClosure.js +1 -3
  506. package/dist/replay/ReplayOutcome.js +1 -3
  507. package/dist/replay/ReplayProcessLifecycle.js +32 -7
  508. package/dist/replay/ReplaySeccompFile.js +29 -0
  509. package/dist/replay/ReplayWorkerProtocol.js +0 -2
  510. package/dist/replay/SystemJavaScriptReplayHost.js +45 -74
  511. package/dist/server/ProcessCaptureElicitation.js +4 -8
  512. package/dist/server/createServer.js +6 -44
  513. package/dist/server/promptCompletion.js +37 -61
  514. package/dist/server/recordDerivedEvidence.js +1 -1
  515. package/dist/server/registerApplicationTools/characterization.js +4 -8
  516. package/dist/server/registerApplicationTools/compareExportShapes.js +5 -10
  517. package/dist/server/registerApplicationTools/compareSourceToBundle.js +6 -10
  518. package/dist/server/registerApplicationTools/compareVersions.js +5 -10
  519. package/dist/server/registerApplicationTools/controlledReplay.js +3 -5
  520. package/dist/server/registerApplicationTools/coverage.js +6 -71
  521. package/dist/server/registerApplicationTools/helpers.js +1 -13
  522. package/dist/server/registerApplicationTools/obligationLedger.js +3 -2
  523. package/dist/server/registerApplicationTools/traceFeature.js +5 -9
  524. package/dist/server/registerApplicationTools/traceSemantics.js +5 -8
  525. package/dist/server/registerApplicationTools.js +0 -2
  526. package/dist/server/registerArtifactComparisonTool.js +23 -27
  527. package/dist/server/registerBrowserScenarioTool.js +4 -4
  528. package/dist/server/registerBrowserTools.js +5 -8
  529. package/dist/server/registerBundleComparisonTool.js +5 -7
  530. package/dist/server/registerCloseLifecycleTool.js +2 -16
  531. package/dist/server/registerElectronTools.js +10 -29
  532. package/dist/server/registerEnhancedTools.js +10 -11
  533. package/dist/server/registerEvidenceTools.js +15 -22
  534. package/dist/server/registerFunctionComparisonTool.js +30 -25
  535. package/dist/server/registerInvestigationTools/helpers.js +3 -32
  536. package/dist/server/registerInvestigationTools.js +20 -116
  537. package/dist/server/registerJavaScriptRuntimeObservationTools.js +6 -4
  538. package/dist/server/registerManagedWorkflowTools/compareManagedMembers.js +15 -17
  539. package/dist/server/registerManagedWorkflowTools/evidence.js +19 -35
  540. package/dist/server/registerManagedWorkflowTools/importManagedReconstruction.js +3 -8
  541. package/dist/server/registerManagedWorkflowTools/planManagedRuntimeCorrelation.js +3 -8
  542. package/dist/server/registerManagedWorkflowTools/projectManagedApplicationGraph.js +10 -14
  543. package/dist/server/registerManagedWorkflowTools/verifyManagedNativeBoundaries.js +9 -15
  544. package/dist/server/registerOfficialTools.js +1 -43
  545. package/dist/server/registerProcessComparisonTool.js +33 -23
  546. package/dist/server/registerPrompts.js +19 -17
  547. package/dist/server/registerSessionRecordTools.js +10 -156
  548. package/dist/server/registerSessionStatusTool.js +6 -69
  549. package/dist/server/registerSessionTools.js +10 -51
  550. package/dist/server/sessionAvailabilityPolicy.js +0 -2
  551. package/dist/server/sessionEvidence.js +9 -15
  552. package/dist/server/sessionToolPolicies.js +0 -8
  553. package/dist/server/toolResult.js +14 -50
  554. package/dist/serverIdentity.js +0 -20
  555. package/install.sh +1 -1
  556. package/package.json +11 -7
  557. package/scripts/electron-active-hook.cjs +23 -55
  558. package/scripts/hopper-demo-x11.py +13 -32
  559. package/skills/reverse-engineer-anything/SKILL.md +47 -12
  560. package/skills/reverse-engineer-anything/references/evidence-workflows.md +6 -4
  561. package/skills/reverse-engineer-anything/references/javascript-applications.md +13 -13
  562. package/skills/reverse-engineer-anything/references/native-and-artifacts.md +12 -8
  563. package/dist/application/ApplicationWorkflowEvidenceResolver.js +0 -188
  564. package/dist/application/BoundedJsonFiles.js +0 -86
  565. package/dist/application/CrossVersionInventory.js +0 -129
  566. package/dist/application/CrossVersionInvestigation.js +0 -301
  567. package/dist/application/CrossVersionInvestigationCollections.js +0 -23
  568. package/dist/application/CrossVersionInvestigationEvidence.js +0 -64
  569. package/dist/application/CrossVersionInvestigationReplay.js +0 -170
  570. package/dist/application/DeferredFileAuthorization.js +0 -61
  571. package/dist/application/DoctorProjection.js +0 -43
  572. package/dist/application/EnhancedToolPagination.js +0 -22
  573. package/dist/application/EvidenceReferenceResolver.js +0 -26
  574. package/dist/application/InvestigationWorkspaceStore.js +0 -204
  575. package/dist/application/ProcessPairedExperiment.js +0 -72
  576. package/dist/application/ReconstructionCoverageWorkspaceStore.js +0 -31
  577. package/dist/application/ReconstructionReadinessService.js +0 -48
  578. package/dist/cliInvestigationCommands.js +0 -173
  579. package/dist/domain/boundedCartesianProjection.js +0 -15
  580. package/dist/domain/investigationWorkspace.js +0 -347
  581. package/dist/domain/jsonLimits.js +0 -26
  582. package/dist/domain/knownPageCoverage.js +0 -29
  583. package/dist/domain/processPairedExperiment.js +0 -128
  584. package/dist/server/javascriptApplicationResult.js +0 -106
  585. package/dist/server/permissionFailure.js +0 -12
  586. package/dist/server/registerApplicationTools/readiness.js +0 -50
  587. package/dist/server/registerEvidenceResources.js +0 -315
  588. package/dist/server/registerJavaScriptApplicationGraphResource.js +0 -65
  589. package/dist/server/registerReconstructionObligationLedgerResource.js +0 -32
  590. package/dist/server/registerReconstructionReadinessResource.js +0 -32
@@ -5,24 +5,21 @@ import { applicationFeatureTraceResultSchema, } from "./javascriptFeatureTraceSc
5
5
  import { findApplicationFeatureSeeds, } from "./javascriptFeatureSeed.js";
6
6
  import { traverseApplicationFeature, } from "./javascriptFeatureTraversal.js";
7
7
  import { buildJavaScriptNativeHandoffs } from "./javascriptNativeHandoff.js";
8
- /** Trace a literal feature through a bounded, authority-preserving JAG. */
8
+ /** Trace a literal feature through its complete reachable, authority-preserving JAG. */
9
9
  export const traceApplicationFeature = (input) => {
10
10
  const allSeedMatches = findApplicationFeatureSeeds(input.graph.nodes, input.seed);
11
- const seedMatches = allSeedMatches.slice(0, input.limits.max_seed_matches);
11
+ const seedMatches = allSeedMatches;
12
12
  if (seedMatches.length === 0)
13
13
  return noMatchResult(input);
14
- const traversal = traverseApplicationFeature(input.graph, seedMatches.map(({ node_id: id }) => id), input.direction, input.limits);
15
- const graph = traceGraph(input, seedMatches, traversal, allSeedMatches.length);
16
- const allPaths = terminalPaths(traversal, seedMatches);
17
- const paths = allPaths.slice(0, input.limits.max_paths);
14
+ const traversal = traverseApplicationFeature(input.graph, seedMatches.map(({ node_id: id }) => id), input.direction);
15
+ const graph = traceGraph(input, seedMatches, traversal);
16
+ const paths = terminalPaths(traversal, seedMatches);
18
17
  const nativeHandoffs = buildJavaScriptNativeHandoffs(traversal.nodes, traversal.edges, input.nativeEvidence);
19
18
  const evidenceLinks = uniqueSorted([
20
19
  input.sourceEvidenceId,
21
20
  ...nativeHandoffs.flatMap(({ evidence_ids: ids }) => ids),
22
21
  ]);
23
- const omissions = traceOmissions(input, traversal, allSeedMatches.length, allPaths.length);
24
22
  const semantic = {
25
- schema_version: 1,
26
23
  source_evidence_id: input.sourceEvidenceId,
27
24
  source_graph_id: input.graph.graph_id,
28
25
  seed: input.seed,
@@ -40,15 +37,12 @@ export const traceApplicationFeature = (input) => {
40
37
  ...factSummary(traversal.nodes, traversal.edges),
41
38
  },
42
39
  coverage: {
43
- status: traceCoverageStatus(input.graph, omissions),
40
+ status: traceCoverageStatus(input.graph),
44
41
  source_graph_status: input.graph.coverage.status,
45
- scanned_nodes: input.graph.nodes.length,
46
42
  total_seed_matches: allSeedMatches.length,
47
- ...omissions,
48
- frontier_node_ids: traversal.frontierNodeIds,
49
43
  },
50
44
  evidence_links: evidenceLinks,
51
- limitations: traceLimitations(input.graph, omissions),
45
+ limitations: traceLimitations(input.graph),
52
46
  };
53
47
  return applicationFeatureTraceResultSchema.parse({
54
48
  ...semantic,
@@ -57,7 +51,6 @@ export const traceApplicationFeature = (input) => {
57
51
  };
58
52
  const noMatchResult = (input) => {
59
53
  const semantic = {
60
- schema_version: 1,
61
54
  source_evidence_id: input.sourceEvidenceId,
62
55
  source_graph_id: input.graph.graph_id,
63
56
  seed: input.seed,
@@ -80,13 +73,7 @@ const noMatchResult = (input) => {
80
73
  coverage: {
81
74
  status: "no-match",
82
75
  source_graph_status: input.graph.coverage.status,
83
- scanned_nodes: input.graph.nodes.length,
84
76
  total_seed_matches: 0,
85
- omitted_seed_matches: 0,
86
- omitted_nodes: 0,
87
- omitted_edges: 0,
88
- omitted_paths: 0,
89
- frontier_node_ids: [],
90
77
  },
91
78
  evidence_links: [input.sourceEvidenceId],
92
79
  limitations: uniqueSorted([
@@ -99,51 +86,23 @@ const noMatchResult = (input) => {
99
86
  trace_id: `jatr_${digestCanonical(semantic)}`,
100
87
  });
101
88
  };
102
- const traceGraph = (input, seedMatches, traversal, totalSeedMatches) => {
103
- const omitted = traversal.omittedNodeCount +
104
- traversal.omittedEdgeCount +
105
- (totalSeedMatches - seedMatches.length);
89
+ const traceGraph = (input, seedMatches, traversal) => {
106
90
  return createJavaScriptApplicationGraph({
107
91
  schema: "JavaScriptApplicationGraph",
108
- schema_version: 1,
109
92
  root_node_ids: uniqueSorted(seedMatches.map(({ node_id: id }) => id)),
110
93
  nodes: traversal.nodes,
111
94
  edges: traversal.edges,
112
- coverage: traceGraphCoverage(input.graph, input.limits, omitted),
95
+ coverage: traceGraphCoverage(input.graph),
113
96
  limitations: uniqueSorted([
114
97
  ...input.graph.limitations,
115
98
  "Trace edges retain their source authority; graph connectivity does not prove runtime execution or reachability.",
116
- ...(omitted === 0
117
- ? []
118
- : ["Trace output stopped at explicit caller bounds."]),
119
99
  ]),
120
100
  });
121
101
  };
122
- const traceGraphCoverage = (source, limits, omitted) => {
123
- if (omitted > 0)
124
- return {
125
- status: "partial",
126
- truncated: true,
127
- omitted_count: omitted,
128
- limits: [
129
- {
130
- name: "max-seed-matches",
131
- value: limits.max_seed_matches,
132
- unit: "items",
133
- },
134
- { name: "max-depth", value: limits.max_depth, unit: "depth" },
135
- { name: "max-nodes", value: limits.max_nodes, unit: "items" },
136
- { name: "max-edges", value: limits.max_edges, unit: "items" },
137
- ],
138
- };
102
+ const traceGraphCoverage = (source) => {
139
103
  return source.coverage.status === "complete"
140
104
  ? { status: "complete", truncated: false, omitted_count: 0, limits: [] }
141
- : {
142
- status: source.coverage.status,
143
- truncated: source.coverage.truncated,
144
- omitted_count: source.coverage.omitted_count,
145
- limits: source.coverage.limits,
146
- };
105
+ : source.coverage;
147
106
  };
148
107
  const terminalPaths = (traversal, seeds) => {
149
108
  const seedIds = new Set(seeds.map(({ node_id: id }) => id));
@@ -198,25 +157,12 @@ const factSummary = (nodes, edges) => {
198
157
  unavailable_facts: states.filter((state) => state === "unavailable").length,
199
158
  };
200
159
  };
201
- const traceOmissions = (input, traversal, seedMatches, paths) => ({
202
- omitted_seed_matches: Math.max(0, seedMatches - input.limits.max_seed_matches),
203
- omitted_nodes: traversal.omittedNodeCount,
204
- omitted_edges: traversal.omittedEdgeCount,
205
- omitted_paths: Math.max(0, paths - input.limits.max_paths),
206
- });
207
- const traceCoverageStatus = (graph, omissions) => Object.values(omissions).some((value) => value > 0)
208
- ? "truncated"
209
- : graph.coverage.status === "complete"
210
- ? "complete-within-source"
211
- : "partial";
212
- const traceLimitations = (graph, omissions) => uniqueSorted([
160
+ const traceCoverageStatus = (graph) => graph.coverage.status === "complete" ? "complete-within-source" : "partial";
161
+ const traceLimitations = (graph) => uniqueSorted([
213
162
  "A trace reports graph relationships, not proof that code executed or that a feature is reachable in every state.",
214
163
  "Static, native, passive-runtime, inferred, and unknown facts retain their original authority in the returned graph.",
215
164
  "Native handoffs never open a binary or invoke a provider automatically; snapshot reuse remains provider/profile/target exact.",
216
165
  ...sourceCoverageLimitations(graph),
217
- ...(Object.values(omissions).some((value) => value > 0)
218
- ? ["Trace results were truncated at explicit caller limits."]
219
- : []),
220
166
  ]);
221
167
  const sourceCoverageLimitations = (graph) => graph.coverage.status === "complete"
222
168
  ? []
@@ -5,8 +5,8 @@ const digestSchema = z.string().regex(/^[a-f0-9]{64}$/u);
5
5
  const evidenceIdSchema = z.string().regex(/^ev_[a-f0-9]{64}$/u);
6
6
  const nodeIdSchema = z.string().regex(/^jag_node_[a-f0-9]{64}$/u);
7
7
  const edgeIdSchema = z.string().regex(/^jag_edge_[a-f0-9]{64}$/u);
8
- const boundedTextSchema = z.string().min(1).max(4_096);
9
- /** Literal starting point for one bounded application trace. */
8
+ const boundedTextSchema = z.string().min(1);
9
+ /** Literal starting point for one application feature trace. */
10
10
  const applicationFeatureSeedSchema = z.strictObject({
11
11
  kind: z.enum([
12
12
  "node-id",
@@ -21,27 +21,13 @@ const applicationFeatureSeedSchema = z.strictObject({
21
21
  match: z.enum(["exact", "contains"]).nullable().default(null),
22
22
  case_sensitive: z.boolean().default(false),
23
23
  });
24
- const featureTraceLimitsSchema = z.strictObject({
25
- max_seed_matches: z.number().int().min(1).max(1_000).default(25),
26
- max_depth: z.number().int().min(0).max(64).default(12),
27
- max_nodes: z.number().int().min(1).max(50_000).default(2_000),
28
- max_edges: z.number().int().min(1).max(100_000).default(4_000),
29
- max_paths: z.number().int().min(1).max(1_000).default(100),
30
- });
31
- /** Evidence-backed application graph and explicit trace bounds. */
24
+ /** Evidence-backed application graph and feature seed. */
32
25
  export const traceApplicationFeatureInputSchema = z
33
26
  .strictObject({
34
27
  application: evidenceSchema,
35
- native_observations: z.array(evidenceSchema).max(64).default([]),
28
+ native_observations: z.array(evidenceSchema).default([]),
36
29
  seed: applicationFeatureSeedSchema,
37
30
  direction: z.enum(["outgoing", "incoming", "both"]).default("both"),
38
- limits: featureTraceLimitsSchema.default({
39
- max_seed_matches: 25,
40
- max_depth: 12,
41
- max_nodes: 2_000,
42
- max_edges: 4_000,
43
- max_paths: 100,
44
- }),
45
31
  })
46
32
  .superRefine((input, context) => {
47
33
  const ids = input.native_observations.map(({ evidence_id: id }) => id);
@@ -54,51 +40,48 @@ export const traceApplicationFeatureInputSchema = z
54
40
  });
55
41
  const seedMatchSchema = z.strictObject({
56
42
  node_id: nodeIdSchema,
57
- kind: z.string().min(1).max(128),
43
+ kind: z.string().min(1),
58
44
  basis: z.enum(["node-id", "label", "identity", "property"]),
59
- field: z.string().min(1).max(256),
45
+ field: z.string().min(1),
60
46
  });
61
47
  const tracePathSchema = z.strictObject({
62
48
  path_id: z.string().regex(/^jatp_[a-f0-9]{64}$/u),
63
49
  start_node_id: nodeIdSchema,
64
50
  end_node_id: nodeIdSchema,
65
- end_kind: z.string().min(1).max(128),
66
- node_ids: z.array(nodeIdSchema).min(1).max(65),
67
- edge_ids: z.array(edgeIdSchema).max(64),
68
- authorities: z.array(z.string().min(1).max(128)).max(16),
51
+ end_kind: z.string().min(1),
52
+ node_ids: z.array(nodeIdSchema).min(1),
53
+ edge_ids: z.array(edgeIdSchema),
54
+ authorities: z.array(z.string().min(1)),
69
55
  contains_inference: z.boolean(),
70
56
  });
71
57
  const nativeHandoffSchema = z.strictObject({
72
58
  native_node_id: nodeIdSchema,
73
59
  artifact_sha256: digestSchema,
74
- artifact_path: z.string().min(1).max(4_096).nullable(),
75
- export_node_ids: z.array(nodeIdSchema).max(1_000),
76
- requested_exports: z.array(boundedTextSchema).max(1_000),
60
+ artifact_path: z.string().min(1).nullable(),
61
+ export_node_ids: z.array(nodeIdSchema),
62
+ requested_exports: z.array(boundedTextSchema),
77
63
  status: z.enum(["evidence-linked", "requires-provider-analysis"]),
78
- providers: z.array(providerSchema).max(64),
79
- evidence_ids: z.array(evidenceIdSchema).max(64),
80
- recommended_tools: z
81
- .array(z.enum([
64
+ providers: z.array(providerSchema),
65
+ evidence_ids: z.array(evidenceIdSchema),
66
+ recommended_tools: z.array(z.enum([
82
67
  "open_binary",
83
68
  "binary_overview",
84
69
  "search_procedures",
85
70
  "analyze_function",
86
71
  "xrefs",
87
- ]))
88
- .max(5),
72
+ ])),
89
73
  });
90
- /** Evidence-preserving bounded subgraph and native-analysis frontiers. */
74
+ /** Evidence-preserving complete reachable subgraph and native-analysis handoffs. */
91
75
  export const applicationFeatureTraceResultSchema = z.strictObject({
92
- schema_version: z.literal(1),
93
76
  trace_id: z.string().regex(/^jatr_[a-f0-9]{64}$/u),
94
77
  source_evidence_id: evidenceIdSchema,
95
78
  source_graph_id: z.string().regex(/^jag_[a-f0-9]{64}$/u),
96
79
  seed: applicationFeatureSeedSchema,
97
80
  direction: z.enum(["outgoing", "incoming", "both"]),
98
- seed_matches: z.array(seedMatchSchema).max(1_000),
81
+ seed_matches: z.array(seedMatchSchema),
99
82
  graph: javascriptApplicationGraphSchema.nullable(),
100
- paths: z.array(tracePathSchema).max(1_000),
101
- native_handoffs: z.array(nativeHandoffSchema).max(10_000),
83
+ paths: z.array(tracePathSchema),
84
+ native_handoffs: z.array(nativeHandoffSchema),
102
85
  summary: z.strictObject({
103
86
  matched_seeds: z.number().int().min(0),
104
87
  traced_nodes: z.number().int().min(0),
@@ -111,26 +94,15 @@ export const applicationFeatureTraceResultSchema = z.strictObject({
111
94
  unavailable_facts: z.number().int().min(0),
112
95
  }),
113
96
  coverage: z.strictObject({
114
- status: z.enum([
115
- "complete-within-source",
116
- "partial",
117
- "truncated",
118
- "no-match",
119
- ]),
97
+ status: z.enum(["complete-within-source", "partial", "no-match"]),
120
98
  source_graph_status: z.enum([
121
99
  "complete",
122
100
  "partial",
123
101
  "unknown",
124
102
  "unavailable",
125
103
  ]),
126
- scanned_nodes: z.number().int().min(0),
127
104
  total_seed_matches: z.number().int().min(0),
128
- omitted_seed_matches: z.number().int().min(0),
129
- omitted_nodes: z.number().int().min(0),
130
- omitted_edges: z.number().int().min(0),
131
- omitted_paths: z.number().int().min(0),
132
- frontier_node_ids: z.array(nodeIdSchema).max(50_000),
133
105
  }),
134
- evidence_links: z.array(evidenceIdSchema).min(1).max(65),
135
- limitations: z.array(boundedTextSchema).max(1_000),
106
+ evidence_links: z.array(evidenceIdSchema).min(1),
107
+ limitations: z.array(boundedTextSchema),
136
108
  });
@@ -1,56 +1,23 @@
1
1
  import { compareCodePoints, } from "./javascriptApplicationGraph.js";
2
2
  /** Traverse a JAG without treating edge inference as observed reachability. */
3
- export const traverseApplicationFeature = (graph, seedNodeIds, direction, limits) => {
3
+ export const traverseApplicationFeature = (graph, seedNodeIds, direction) => {
4
4
  const nodeById = new Map(graph.nodes.map((node) => [node.node_id, node]));
5
5
  const adjacency = buildAdjacency(graph.edges, direction);
6
6
  const visited = new Set(seedNodeIds);
7
7
  const retainedEdges = new Map();
8
- const omittedNodes = new Set();
9
- const omittedEdges = new Set();
10
- const frontier = new Set();
11
- const depths = new Map(seedNodeIds.map((nodeId) => [nodeId, 0]));
12
8
  const predecessors = new Map();
13
9
  const queue = [...seedNodeIds];
14
10
  for (let offset = 0; offset < queue.length; offset += 1) {
15
11
  const current = queue[offset];
16
12
  if (current === undefined)
17
13
  continue;
18
- const depth = depths.get(current) ?? 0;
19
14
  for (const entry of adjacency.get(current) ?? []) {
20
- if (depth >= limits.max_depth) {
21
- recordOmission({
22
- entry,
23
- current,
24
- omittedNodes,
25
- omittedEdges,
26
- frontier,
27
- });
28
- continue;
29
- }
30
- if (!visited.has(entry.nextNodeId) && visited.size >= limits.max_nodes) {
31
- recordOmission({
32
- entry,
33
- current,
34
- omittedNodes,
35
- omittedEdges,
36
- frontier,
37
- });
38
- continue;
39
- }
40
- if (!retainedEdges.has(entry.edge.edge_id) &&
41
- retainedEdges.size >= limits.max_edges) {
42
- omittedEdges.add(entry.edge.edge_id);
43
- frontier.add(current);
44
- frontier.add(entry.nextNodeId);
45
- continue;
46
- }
47
15
  retainedEdges.set(entry.edge.edge_id, entry.edge);
48
16
  if (visited.has(entry.nextNodeId))
49
17
  continue;
50
18
  if (!nodeById.has(entry.nextNodeId))
51
19
  continue;
52
20
  visited.add(entry.nextNodeId);
53
- depths.set(entry.nextNodeId, depth + 1);
54
21
  predecessors.set(entry.nextNodeId, {
55
22
  previousNodeId: current,
56
23
  edgeId: entry.edge.edge_id,
@@ -64,11 +31,7 @@ export const traverseApplicationFeature = (graph, seedNodeIds, direction, limits
64
31
  .filter((node) => node !== undefined)
65
32
  .sort((left, right) => compareCodePoints(left.node_id, right.node_id)),
66
33
  edges: [...retainedEdges.values()].sort((left, right) => compareCodePoints(left.edge_id, right.edge_id)),
67
- depths,
68
34
  predecessors,
69
- frontierNodeIds: [...frontier].sort(compareCodePoints),
70
- omittedNodeCount: omittedNodes.size,
71
- omittedEdgeCount: omittedEdges.size,
72
35
  };
73
36
  };
74
37
  const buildAdjacency = (edges, direction) => {
@@ -92,9 +55,3 @@ const buildAdjacency = (edges, direction) => {
92
55
  const addAdjacency = (adjacency, nodeId, entry) => {
93
56
  adjacency.set(nodeId, [...(adjacency.get(nodeId) ?? []), entry]);
94
57
  };
95
- const recordOmission = (context) => {
96
- context.omittedNodes.add(context.entry.nextNodeId);
97
- context.omittedEdges.add(context.entry.edge.edge_id);
98
- context.frontier.add(context.current);
99
- context.frontier.add(context.entry.nextNodeId);
100
- };
@@ -72,7 +72,7 @@ const requestedExports = (nodes) => {
72
72
  ...stringArray(observation.properties.requested_members),
73
73
  ...stringArray(observation.properties.members),
74
74
  ]));
75
- return [...new Set(values)].sort(compareCodePoints).slice(0, 1_000);
75
+ return [...new Set(values)].sort(compareCodePoints);
76
76
  };
77
77
  const stringArray = (value) => Array.isArray(value)
78
78
  ? value.filter((item) => typeof item === "string")
@@ -1,11 +1,10 @@
1
1
  import { z } from "zod";
2
2
  import { evidenceEnvelopeSchema } from "./evidence.js";
3
3
  const digestSchema = z.string().regex(/^[a-f0-9]{64}$/u);
4
- const absolutePathSchema = z.string().startsWith("/").max(4096);
4
+ const absolutePathSchema = z.string().startsWith("/");
5
5
  const aliasSchema = z
6
6
  .string()
7
7
  .min(1)
8
- .max(256)
9
8
  .regex(/^[A-Za-z0-9_./:@-]+$/u);
10
9
  const replayModuleSchema = z
11
10
  .object({
@@ -13,25 +12,20 @@ const replayModuleSchema = z
13
12
  path: absolutePathSchema,
14
13
  format: z.enum(["esm", "commonjs-factory"]),
15
14
  role: z.enum(["module", "stub"]).default("module"),
16
- dependencies: z
17
- .record(z.string().min(1).max(256), aliasSchema)
18
- .refine((value) => Object.keys(value).length <= 128, {
19
- message: "Replay modules may declare at most 128 dependencies",
20
- })
21
- .default({}),
15
+ dependencies: z.record(z.string().min(1), aliasSchema).default({}),
22
16
  })
23
17
  .strict();
24
18
  const replaySideSchema = z
25
19
  .object({
26
- modules: z.array(replayModuleSchema).min(1).max(128),
20
+ modules: z.array(replayModuleSchema).min(1),
27
21
  entry_alias: aliasSchema,
28
- entry_export: z.string().min(1).max(256).default("default"),
22
+ entry_export: z.string().min(1).default("default"),
29
23
  })
30
24
  .strict();
31
25
  const explicitCaseSchema = z
32
26
  .object({
33
- case_id: z.string().min(1).max(128),
34
- arguments: z.array(z.json()).max(16),
27
+ case_id: z.string().min(1),
28
+ arguments: z.array(z.json()),
35
29
  })
36
30
  .strict();
37
31
  const generatorSchema = z
@@ -42,58 +36,58 @@ const generatorSchema = z
42
36
  "clipboard-boundaries",
43
37
  ]),
44
38
  seed: z.number().int().min(0).max(0xffff_ffff),
45
- count: z.number().int().min(1).max(64),
39
+ count: z.number().int().safe().min(1),
46
40
  })
47
41
  .strict();
48
42
  const replayLimitsSchema = z
49
43
  .object({
50
- wall_time_ms: z.number().int().min(100).max(10_000).default(3_000),
44
+ wall_time_ms: z.number().int().safe().min(1).default(3_000),
51
45
  memory_bytes: z
52
46
  .number()
53
47
  .int()
54
- .min(16 * 1024 * 1024)
55
- .max(512 * 1024 * 1024)
48
+ .safe()
49
+ .positive()
56
50
  .default(128 * 1024 * 1024),
57
- tasks: z.number().int().min(1).max(32).default(8),
58
- cpu_quota_percent: z.number().int().min(1).max(100).default(50),
51
+ tasks: z.number().int().safe().min(1).default(8),
52
+ cpu_quota_percent: z.number().int().safe().min(1).default(50),
59
53
  tmpfs_bytes: z
60
54
  .number()
61
55
  .int()
62
- .min(1024 * 1024)
63
- .max(64 * 1024 * 1024)
56
+ .safe()
57
+ .min(1)
64
58
  .default(16 * 1024 * 1024),
65
59
  module_bytes: z
66
60
  .number()
67
61
  .int()
62
+ .safe()
68
63
  .min(1)
69
- .max(16 * 1024 * 1024)
70
64
  .default(4 * 1024 * 1024),
71
65
  input_bytes: z
72
66
  .number()
73
67
  .int()
68
+ .safe()
74
69
  .min(1)
75
- .max(1024 * 1024)
76
70
  .default(256 * 1024),
77
71
  protocol_bytes: z
78
72
  .number()
79
73
  .int()
80
- .min(1024 * 1024)
81
- .max(64 * 1024 * 1024)
74
+ .safe()
75
+ .min(1)
82
76
  .default(16 * 1024 * 1024),
83
77
  output_bytes: z
84
78
  .number()
85
79
  .int()
80
+ .safe()
86
81
  .min(1)
87
- .max(4 * 1024 * 1024)
88
82
  .default(512 * 1024),
89
83
  stderr_bytes: z
90
84
  .number()
91
85
  .int()
86
+ .safe()
92
87
  .min(0)
93
- .max(256 * 1024)
94
88
  .default(32 * 1024),
95
- result_depth: z.number().int().min(1).max(64).default(16),
96
- result_nodes: z.number().int().min(1).max(100_000).default(10_000),
89
+ result_depth: z.number().int().safe().min(1).default(16),
90
+ result_nodes: z.number().int().safe().min(1).default(10_000),
97
91
  })
98
92
  .strict();
99
93
  const determinismSchema = z
@@ -108,7 +102,7 @@ const determinismSchema = z
108
102
  const controlledReplayInputShape = {
109
103
  left: replaySideSchema,
110
104
  right: replaySideSchema.optional(),
111
- cases: z.array(explicitCaseSchema).max(128).default([]),
105
+ cases: z.array(explicitCaseSchema).default([]),
112
106
  generator: generatorSchema.optional(),
113
107
  determinism: determinismSchema.default({
114
108
  clock_iso: "2000-01-01T00:00:00.000Z",
@@ -134,7 +128,6 @@ const controlledReplayInputShape = {
134
128
  reproducer_export: z
135
129
  .strictObject({
136
130
  path: absolutePathSchema,
137
- approved: z.literal(true),
138
131
  include_sources: z.boolean().default(false),
139
132
  })
140
133
  .optional(),
@@ -144,11 +137,10 @@ export const controlledReplayPlanInputSchema = z.strictObject({
144
137
  ...controlledReplayInputShape,
145
138
  mode: z.literal("plan"),
146
139
  });
147
- /** Parse a replay request carrying literal approval for one exact plan. */
140
+ /** Parse a replay request carrying the digest for one exact plan. */
148
141
  export const controlledReplayExecutionInputSchema = z.strictObject({
149
142
  ...controlledReplayInputShape,
150
143
  mode: z.literal("execute"),
151
- approved: z.literal(true),
152
144
  plan_digest: digestSchema,
153
145
  });
154
146
  /** Parse a controlled replay request into its legal plan or execution state. */
@@ -164,12 +156,6 @@ export const controlledReplayInputSchema = z
164
156
  path: ["cases"],
165
157
  message: "At least one explicit or generated case is required",
166
158
  });
167
- if (value.cases.length + (value.generator?.count ?? 0) > 128)
168
- context.addIssue({
169
- code: "custom",
170
- path: ["generator", "count"],
171
- message: "Explicit and generated replay cases must total at most 128",
172
- });
173
159
  });
174
160
  const moduleCommitmentSchema = z
175
161
  .object({
@@ -198,7 +184,6 @@ const runtimeFileIdentitySchema = z
198
184
  .strict();
199
185
  const replayPlanSchema = z
200
186
  .object({
201
- schema_version: z.literal(1),
202
187
  plan_digest: digestSchema,
203
188
  policy_version: z.literal("linux-bwrap-systemd-v1"),
204
189
  policy_sha256: digestSchema,
@@ -254,7 +239,6 @@ const replayPlanSchema = z
254
239
  .object({
255
240
  path: z.string().min(1),
256
241
  include_sources: z.boolean(),
257
- authority: z.literal("evidence_write"),
258
242
  })
259
243
  .strict()
260
244
  .nullable(),
@@ -301,7 +285,6 @@ const replayOutcomeSchema = z.discriminatedUnion("outcome", [
301
285
  ]);
302
286
  export const replayExecutionResultSchema = z
303
287
  .object({
304
- schema_version: z.literal(1),
305
288
  plan_digest: digestSchema,
306
289
  outcomes: z.array(replayOutcomeSchema),
307
290
  comparison: z
@@ -3,21 +3,16 @@ import { createStaticRuntimeScope, mappedRuntimePaths, staticNodeWithinRuntimeSc
3
3
  /** Classify static code presence without claiming bundled module execution. */
4
4
  export const classifyStaticLoadStates = (layers, runtimeEntities, matches, options) => {
5
5
  const states = [];
6
- let totalStates = 0;
7
6
  for (const layer of layers) {
8
7
  const projection = classifyLayer(layer, runtimeEntities, matches, {
9
8
  reconciliationComplete: options.reconciliationComplete,
10
- maximumStates: Math.max(0, options.maximumStates - states.length),
11
9
  });
12
- totalStates += projection.total;
13
10
  states.push(...projection.states);
14
11
  }
15
- return { states, omittedStates: totalStates - states.length };
12
+ return { states, omittedStates: 0 };
16
13
  };
17
14
  const classifyLayer = (layer, runtimeEntities, matches, options) => {
18
15
  const nodes = layer.graph.nodes.filter(isLoadStateNode);
19
- if (options.maximumStates === 0)
20
- return { states: [], total: nodes.length };
21
16
  const direct = new Map();
22
17
  for (const match of matches)
23
18
  if (match.status === "matched" &&
@@ -31,7 +26,7 @@ const classifyLayer = (layer, runtimeEntities, matches, options) => {
31
26
  layer.graph.coverage.status === "complete" &&
32
27
  scopedEntities.length > 0 &&
33
28
  scopedEntities.every(({ capture }) => captureScriptsComplete(capture.evidence.evidence_id, runtimeEntities));
34
- const states = nodes.slice(0, options.maximumStates).map((node) => {
29
+ const states = nodes.map((node) => {
35
30
  const runtimeNodeIds = uniqueSorted(direct.get(node.node_id) ?? []);
36
31
  if (runtimeNodeIds.length > 0)
37
32
  return state(layer, node, {
@@ -60,7 +55,7 @@ const classifyLayer = (layer, runtimeEntities, matches, options) => {
60
55
  : "static-or-runtime-coverage-incomplete",
61
56
  });
62
57
  });
63
- return { states, total: nodes.length };
58
+ return { states };
64
59
  };
65
60
  const residentNodes = (layer, directlyLoaded) => {
66
61
  const nodeKinds = new Map(layer.graph.nodes.map(({ node_id: id, kind }) => [id, kind]));