rea-agents 3.1.0 → 3.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (590) hide show
  1. package/README.md +72 -95
  2. package/bridge/ghidra/ReaGhidraBridge.java +609 -841
  3. package/bridge/hopper_bridge.py +99 -344
  4. package/dist/application/AbortablePromise.js +6 -3
  5. package/dist/application/AnalysisSnapshotCache.js +0 -1
  6. package/dist/application/AnalysisSnapshotFiles.js +7 -7
  7. package/dist/application/AndroidApplicationService.js +1 -1
  8. package/dist/application/AppleApplicationService.js +1 -1
  9. package/dist/application/ArtifactExtraction.js +35 -54
  10. package/dist/application/ArtifactExtractionDestination.js +17 -0
  11. package/dist/application/ArtifactGraphConstruction.js +2 -17
  12. package/dist/application/ArtifactInventory/classify.js +2 -6
  13. package/dist/application/ArtifactInventory/hash.js +2 -20
  14. package/dist/application/ArtifactInventory/scanCanonical.js +8 -12
  15. package/dist/application/ArtifactInventory/scanReader.js +69 -51
  16. package/dist/application/ArtifactInventory.js +6 -14
  17. package/dist/application/AuthorizedArtifactInventory.js +3 -13
  18. package/dist/application/BinarySession.js +41 -13
  19. package/dist/application/BinarySessionComposition.js +0 -11
  20. package/dist/application/BinarySessionOpen.js +2 -1
  21. package/dist/application/BinarySessionRecords.js +5 -93
  22. package/dist/application/BinarySessionStatus.js +5 -16
  23. package/dist/application/BinaryTargetResolver.js +216 -0
  24. package/dist/application/BrowserEvidence.js +42 -58
  25. package/dist/application/BrowserObservationService.js +3 -6
  26. package/dist/application/BrowserScenarioCaptureService.js +3 -6
  27. package/dist/application/BrowserScenarioEvidence.js +3 -3
  28. package/dist/application/CallPathTracing.js +2 -36
  29. package/dist/application/CapabilityInventory.js +10 -15
  30. package/dist/application/ClientConfigurationDocument.js +27 -0
  31. package/dist/application/ClientRegistrationStatus.js +16 -13
  32. package/dist/application/CommandShimReplay.js +14 -1
  33. package/dist/application/DirectAnalysis.js +22 -46
  34. package/dist/application/DirectAnalysisStatus.js +5 -61
  35. package/dist/application/Doctor.js +11 -32
  36. package/dist/application/DoctorDiagnostics.js +1 -2
  37. package/dist/application/DoctorScope.js +1 -1
  38. package/dist/application/ElectronActiveEvidence.js +3 -8
  39. package/dist/application/ElectronActiveObservationService.js +3 -6
  40. package/dist/application/ElectronBoundaryAnalysis.js +7 -8
  41. package/dist/application/ElectronBoundaryGraphContext.js +1 -1
  42. package/dist/application/ElectronBoundaryGraphIpc.js +3 -3
  43. package/dist/application/ElectronBoundaryGraphNative.js +1 -2
  44. package/dist/application/ElectronBoundaryGraphWindows.js +6 -8
  45. package/dist/application/ElectronEvidence.js +4 -7
  46. package/dist/application/ElectronObservationService.js +5 -9
  47. package/dist/application/EnhancedLiteralTracing.js +42 -65
  48. package/dist/application/EnhancedTools.js +76 -44
  49. package/dist/application/EvidenceBundleCommands.js +11 -11
  50. package/dist/application/EvidenceBundleFiles.js +9 -15
  51. package/dist/application/EvidenceLedger.js +6 -41
  52. package/dist/application/FilesystemSnapshot.js +2 -3
  53. package/dist/application/InterfaceBuilderAnalysis.js +266 -0
  54. package/dist/application/InventoryProjectionEvidence.js +4 -2
  55. package/dist/application/InvestigationProviders.js +1 -1
  56. package/dist/application/JavaScriptApplicationEvidence.js +2 -5
  57. package/dist/application/JavaScriptApplicationEvidenceGraph.js +6 -10
  58. package/dist/application/JavaScriptApplicationService.js +6 -29
  59. package/dist/application/JavaScriptApplicationWorkflowEvidence.js +5 -5
  60. package/dist/application/JavaScriptApplicationWorkflowService.js +0 -8
  61. package/dist/application/JavaScriptArtifactAnalysis.js +38 -127
  62. package/dist/application/JavaScriptArtifactFiles.js +67 -107
  63. package/dist/application/JavaScriptArtifactGraphAccumulator.js +0 -7
  64. package/dist/application/JavaScriptArtifactGraphBuilder.js +7 -58
  65. package/dist/application/JavaScriptArtifactGraphBundlers.js +1 -6
  66. package/dist/application/JavaScriptArtifactGraphContext.js +12 -39
  67. package/dist/application/JavaScriptArtifactGraphDocuments.js +4 -11
  68. package/dist/application/JavaScriptArtifactGraphEvidence.js +0 -14
  69. package/dist/application/JavaScriptArtifactGraphFindings.js +3 -3
  70. package/dist/application/JavaScriptArtifactGraphStructure.js +16 -17
  71. package/dist/application/JavaScriptArtifactPathResolution.js +61 -49
  72. package/dist/application/JavaScriptArtifactReconstruction.js +5 -10
  73. package/dist/application/JavaScriptArtifactReconstructionInput.js +2 -14
  74. package/dist/application/JavaScriptJsonModules.js +2 -2
  75. package/dist/application/JavaScriptModuleRelationships.js +22 -27
  76. package/dist/application/JavaScriptReplayPlanning.js +9 -3
  77. package/dist/application/JavaScriptReplayService.js +6 -32
  78. package/dist/application/JavaScriptReturnShapeProjection.js +12 -42
  79. package/dist/application/JavaScriptRuntimeObservationEvidence.js +7 -8
  80. package/dist/application/JavaScriptRuntimeObservationService.js +4 -8
  81. package/dist/application/JavaScriptRuntimeReconciliationEvidence.js +2 -3
  82. package/dist/application/JavaScriptSemanticGraphBuilder.js +11 -41
  83. package/dist/application/JavaScriptSemanticGraphConstruction.js +5 -29
  84. package/dist/application/JavaScriptSemanticGraphEvidence.js +1 -1
  85. package/dist/application/JavaScriptSemanticGraphFingerprintProjection.js +1 -1
  86. package/dist/application/JavaScriptSemanticGraphFlowProjection.js +0 -13
  87. package/dist/application/JavaScriptSemanticGraphProjection.js +1 -3
  88. package/dist/application/JavaScriptSemanticTraceService.js +1 -10
  89. package/dist/application/JsonFiles.js +79 -0
  90. package/dist/application/LinuxHopper.js +11 -9
  91. package/dist/application/LoopbackReplay.js +26 -23
  92. package/dist/application/LoopbackReplayRecorder.js +29 -1
  93. package/dist/application/ManagedApplicationGraphService.js +1 -2
  94. package/dist/application/ManagedMemberComparisonService.js +11 -41
  95. package/dist/application/ManagedNativeVerificationService.js +1 -2
  96. package/dist/application/ManagedReconstructionService.js +1 -1
  97. package/dist/application/ManagedRuntimeCorrelationService.js +5 -8
  98. package/dist/application/NativeApiInspection.js +2 -7
  99. package/dist/application/NativeUiActionTrace.js +394 -0
  100. package/dist/application/NodeRuntimeCharacterizationService.js +3 -7
  101. package/dist/application/PermissionAuthority.js +15 -7
  102. package/dist/application/PermissionFailure.js +5 -0
  103. package/dist/application/ProcessCaptureAuthority.js +5 -7
  104. package/dist/application/ProcessCaptureJournal.js +3 -2
  105. package/dist/application/ProcessCaptureLifecycle.js +5 -12
  106. package/dist/application/ProcessCheckpoints.js +29 -11
  107. package/dist/application/ProcessCli.js +6 -16
  108. package/dist/application/ProcessEvidence.js +5 -7
  109. package/dist/application/ProcessHarness.js +52 -17
  110. package/dist/application/ProcessReactiveCoordinator.js +2 -4
  111. package/dist/application/ProcessReactiveEffects.js +9 -3
  112. package/dist/application/ProcessReactiveHarness.js +13 -7
  113. package/dist/application/ProcessSampling.js +2 -4
  114. package/dist/application/ProcessTimer.js +39 -0
  115. package/dist/application/ProjectPermissionStore.js +39 -96
  116. package/dist/application/RealHopperAssertions.js +20 -66
  117. package/dist/application/ReconstructionCoverageService.js +12 -58
  118. package/dist/application/ReconstructionObligationAuthority.js +2 -2
  119. package/dist/application/ReconstructionObligationCandidates.js +4 -4
  120. package/dist/application/ReconstructionObligationLedgerEvaluation.js +8 -15
  121. package/dist/application/ReconstructionObligationLedgerProjection.js +3 -7
  122. package/dist/application/ReconstructionObligationLedgerService.js +19 -38
  123. package/dist/application/ReferenceSourceImport.js +19 -45
  124. package/dist/application/ReferenceSourceImportEntries.js +2 -4
  125. package/dist/application/ReferenceSourceImportPolicy.js +5 -32
  126. package/dist/application/ReferenceSourceImportTypes.js +0 -16
  127. package/dist/application/RuntimeExecutableDiagnostics.js +55 -29
  128. package/dist/application/SessionProviderRouter.js +2 -2
  129. package/dist/application/Setup.js +1 -3
  130. package/dist/application/SetupClientConfiguration.js +22 -93
  131. package/dist/application/SetupRegistrationEnvironment.js +0 -7
  132. package/dist/application/StoreFileLock.js +119 -0
  133. package/dist/application/TerminalRenderer.js +2 -3
  134. package/dist/application/Uninstall.js +9 -14
  135. package/dist/application/UnknownEvidence.js +1 -1
  136. package/dist/artifacts/ArtifactPaths.js +2 -5
  137. package/dist/artifacts/ArtifactProvider.js +36 -58
  138. package/dist/artifacts/DirectoryArtifactReader.js +13 -8
  139. package/dist/artifacts/MachOSliceArtifactReader.js +1 -5
  140. package/dist/artifacts/NativeDmgArtifactReader.js +11 -11
  141. package/dist/artifacts/NibArchive.js +269 -0
  142. package/dist/artifacts/SafeOutputTree.js +15 -24
  143. package/dist/browser/BrowserProcessStartup.js +1 -2
  144. package/dist/browser/CdpAuthorizedMainFrame.js +16 -0
  145. package/dist/browser/CdpBrowserProvider.js +3 -13
  146. package/dist/browser/CdpCanonicalJsonDigest.js +9 -0
  147. package/dist/browser/CdpCaptureDocuments.js +28 -76
  148. package/dist/browser/CdpCaptureEventBodyShapes.js +13 -33
  149. package/dist/browser/CdpCaptureEventHandlers.js +22 -87
  150. package/dist/browser/CdpCaptureEvents.js +2 -8
  151. package/dist/browser/CdpCaptureStorage.js +9 -20
  152. package/dist/browser/CdpCaptureStorageFingerprints.js +85 -98
  153. package/dist/browser/CdpCaptureValues.js +21 -21
  154. package/dist/browser/CdpConnection.js +10 -25
  155. package/dist/browser/CdpElectronInspection.js +26 -50
  156. package/dist/browser/CdpElectronProvider.js +10 -35
  157. package/dist/browser/CdpElectronScriptEvents.js +8 -16
  158. package/dist/browser/CdpElectronScripts.js +6 -35
  159. package/dist/browser/CdpElectronWorkers.js +6 -10
  160. package/dist/browser/CdpEndpoint.js +25 -41
  161. package/dist/browser/CdpObservationSession.js +14 -26
  162. package/dist/browser/CdpPageCapture.js +34 -48
  163. package/dist/browser/CdpPageCaptureScripts.js +1 -19
  164. package/dist/browser/CdpPageCaptureWorkers.js +6 -10
  165. package/dist/browser/CdpSafeMetadata.js +19 -22
  166. package/dist/browser/CdpScreenshot.js +3 -5
  167. package/dist/browser/CdpTargetSession.js +1 -2
  168. package/dist/browser/CdpWebMcpDiscovery.js +13 -22
  169. package/dist/browser/ElectronFileScope.js +8 -19
  170. package/dist/browser/JavaScriptRuntimeScope.js +9 -14
  171. package/dist/browser/PlaywrightBrowserScenarioProvider.js +31 -64
  172. package/dist/browser/PlaywrightElectronActiveActions.js +54 -69
  173. package/dist/browser/PlaywrightElectronActiveProvider.js +14 -34
  174. package/dist/browser/PlaywrightExecutionBoundary.js +16 -5
  175. package/dist/browser/PlaywrightScenarioActions.js +3 -7
  176. package/dist/browser/PlaywrightScenarioArtifacts.js +23 -92
  177. package/dist/browser/PlaywrightScenarioBrowser.js +3 -5
  178. package/dist/browser/PlaywrightScenarioEvents.js +45 -94
  179. package/dist/browser/PlaywrightScenarioSession.js +14 -30
  180. package/dist/browser/PngVisualDiff.js +22 -14
  181. package/dist/browser/SensitiveTextCapture.js +0 -17
  182. package/dist/browser/V8InspectorCaptureProjection.js +7 -8
  183. package/dist/browser/V8InspectorEndpoint.js +12 -14
  184. package/dist/browser/V8InspectorProvider.js +20 -61
  185. package/dist/browser/WebSourceMapFetcher.js +56 -176
  186. package/dist/catalogIdentity.js +0 -54
  187. package/dist/cli/artifactCommands.js +49 -77
  188. package/dist/cli/coreAnalysisCommands.js +83 -133
  189. package/dist/cli/javascriptApplicationAnalysis.js +1 -9
  190. package/dist/cli/managedCommands.js +5 -270
  191. package/dist/cli/setupCommands.js +3 -12
  192. package/dist/cli/utilityCommands.js +7 -41
  193. package/dist/cli.js +0 -2
  194. package/dist/cliApplicationCommands.js +42 -112
  195. package/dist/cliBrowserAdvancedCommands.js +10 -106
  196. package/dist/cliBrowserCommands.js +15 -127
  197. package/dist/cliBrowserContext.js +30 -0
  198. package/dist/cliCommandNames.js +4 -5
  199. package/dist/cliElectronCommands.js +8 -72
  200. package/dist/cliEvidenceCommands.js +8 -77
  201. package/dist/cliJavaScriptRuntimeCommands.js +9 -91
  202. package/dist/cliJsonInput.js +4 -14
  203. package/dist/cliObservationOptions.js +11 -96
  204. package/dist/cliPolicyCommands.js +2 -17
  205. package/dist/cliProcessCommands.js +3 -3
  206. package/dist/cliSetup.js +0 -13
  207. package/dist/config/browserScenario.js +2 -2
  208. package/dist/config/environment.js +0 -9
  209. package/dist/config/parseConfig.js +1 -33
  210. package/dist/config/parsers.js +6 -27
  211. package/dist/config/passiveObservation.js +7 -77
  212. package/dist/config/permissions.js +0 -7
  213. package/dist/contracts/analysisSearchContract.js +2 -5
  214. package/dist/contracts/applicationToolContracts.js +56 -109
  215. package/dist/contracts/applicationWorkflowInputContracts.js +27 -102
  216. package/dist/contracts/artifactComparisonExample.js +58 -60
  217. package/dist/contracts/artifactToolContracts.js +20 -67
  218. package/dist/contracts/browserScenarioToolContracts.js +6 -51
  219. package/dist/contracts/browserToolContracts.js +8 -73
  220. package/dist/contracts/electronToolContracts.js +8 -108
  221. package/dist/contracts/enhancedInputs.js +23 -54
  222. package/dist/contracts/errorSchemas.js +0 -1
  223. package/dist/contracts/functionComparisonExample.js +10 -24
  224. package/dist/contracts/functionInstructionContract.js +1 -3
  225. package/dist/contracts/functionWorkflowToolContracts.js +2 -2
  226. package/dist/contracts/hopperMemoryContracts.js +3 -3
  227. package/dist/contracts/investigationExamples.js +14 -11
  228. package/dist/contracts/javascriptApplicationWorkflowExamples.js +12 -19
  229. package/dist/contracts/javascriptRuntimeObservationToolContracts.js +2 -20
  230. package/dist/contracts/javascriptRuntimeReconciliationExample.js +45 -12
  231. package/dist/contracts/managedToolContracts.js +6 -95
  232. package/dist/contracts/managedWorkflowExamples.js +77 -128
  233. package/dist/contracts/managedWorkflowToolContracts.js +51 -77
  234. package/dist/contracts/nativeToolContracts.js +7 -11
  235. package/dist/contracts/processCaptureExample.js +2 -69
  236. package/dist/contracts/promptContracts.js +49 -67
  237. package/dist/contracts/providerSelection.js +0 -1
  238. package/dist/contracts/reconstructionReadinessExample.js +1 -6
  239. package/dist/contracts/sessionStatusContract.js +1 -17
  240. package/dist/contracts/sessionToolSchemas.js +6 -15
  241. package/dist/contracts/toolContractExamples.js +11 -11
  242. package/dist/contracts/toolContractHelpers.js +0 -4
  243. package/dist/contracts/toolContracts.js +60 -71
  244. package/dist/contracts/toolEffects.js +5 -13
  245. package/dist/contracts/toolOutputSchemaGroups.js +37 -91
  246. package/dist/contracts/toolOutputSchemaPrimitives.js +16 -56
  247. package/dist/contracts/toolSchemaMetadata.js +8 -19
  248. package/dist/contracts/unknownContractExamples.js +0 -2
  249. package/dist/domain/analysisErrorPresentation.js +46 -54
  250. package/dist/domain/analysisErrorProjection.js +28 -37
  251. package/dist/domain/analysisProfile.js +3 -31
  252. package/dist/domain/analysisSnapshot.js +3 -12
  253. package/dist/domain/androidApplication.js +15 -54
  254. package/dist/domain/appleApplication.js +24 -67
  255. package/dist/domain/artifactComparison.js +11 -29
  256. package/dist/domain/artifactGraph.js +14 -44
  257. package/dist/domain/artifactInspection.js +38 -69
  258. package/dist/domain/artifactInventoryEvidence.js +27 -21
  259. package/dist/domain/binaryTarget.js +2 -221
  260. package/dist/domain/browserCaptureComparison.js +47 -24
  261. package/dist/domain/browserObservation.js +28 -193
  262. package/dist/domain/browserObservationSchemas.js +5 -23
  263. package/dist/domain/browserScenario.js +11 -14
  264. package/dist/domain/browserScenarioCapture.js +11 -12
  265. package/dist/domain/browserScenarioCaptureValues.js +146 -84
  266. package/dist/domain/browserScenarioDiff.js +2 -59
  267. package/dist/domain/browserScenarioDiffEvidence.js +51 -0
  268. package/dist/domain/browserScenarioDiffValues.js +21 -38
  269. package/dist/domain/browserScenarioValues.js +80 -109
  270. package/dist/domain/browserSession.js +4 -7
  271. package/dist/domain/bundleComparison.js +6 -32
  272. package/dist/domain/bytecodeProvider.js +20 -19
  273. package/dist/domain/callPath.js +47 -167
  274. package/dist/domain/callPathSchemas.js +79 -0
  275. package/dist/domain/changedBehavior.js +34 -60
  276. package/dist/domain/completionLedgerGeneration.js +8 -14
  277. package/dist/domain/conformancePackage.js +126 -97
  278. package/dist/domain/conformanceReplay.js +36 -8
  279. package/dist/domain/conformanceTrustGate.js +23 -14
  280. package/dist/domain/customProtocolCapture.js +1 -1
  281. package/dist/domain/electronActiveObservation.js +70 -103
  282. package/dist/domain/electronObservation.js +14 -80
  283. package/dist/domain/electronStaticAnalysisBrowser.js +36 -46
  284. package/dist/domain/electronStaticAnalysisIpc.js +38 -14
  285. package/dist/domain/electronStaticAnalysisNative.js +1 -8
  286. package/dist/domain/electronStaticAnalysisValues.js +10 -17
  287. package/dist/domain/errors.js +33 -54
  288. package/dist/domain/eventProcessTree.js +20 -12
  289. package/dist/domain/evidence.js +2 -10
  290. package/dist/domain/evidenceBundle.js +3 -5
  291. package/dist/domain/evidenceCompletionLedger.js +6 -8
  292. package/dist/domain/functionComparison.js +4 -14
  293. package/dist/domain/functionComparisonNormalization.js +4 -11
  294. package/dist/domain/functionComparisonResults.js +25 -15
  295. package/dist/domain/functionComparisonSchemas.js +49 -33
  296. package/dist/domain/functionDossierEvidence.js +31 -156
  297. package/dist/domain/hopperStartupFailure.js +1 -1
  298. package/dist/domain/hopperValues.js +15 -136
  299. package/dist/domain/interfaceBuilderGraph.js +654 -0
  300. package/dist/domain/javascriptApplicationAnalysis.js +8 -112
  301. package/dist/domain/javascriptApplicationChangeGraph.js +22 -82
  302. package/dist/domain/javascriptApplicationEvidenceSchemas.js +59 -47
  303. package/dist/domain/javascriptApplicationGraph.js +3 -13
  304. package/dist/domain/javascriptApplicationGraphSchemas.js +12 -34
  305. package/dist/domain/javascriptApplicationVersionComparison.js +26 -30
  306. package/dist/domain/javascriptApplicationVersionComparisonSchemas.js +123 -68
  307. package/dist/domain/javascriptApplicationVersionItems.js +120 -53
  308. package/dist/domain/javascriptApplicationVersionKeys.js +24 -11
  309. package/dist/domain/javascriptAstFingerprint.js +25 -58
  310. package/dist/domain/javascriptAstValues.js +9 -0
  311. package/dist/domain/javascriptExportInstrumentation.js +2 -4
  312. package/dist/domain/javascriptExportShapeComparison.js +6 -7
  313. package/dist/domain/javascriptExportShapeComparisonSchemas.js +68 -75
  314. package/dist/domain/javascriptExportShapeSelection.js +17 -19
  315. package/dist/domain/javascriptFeatureSeed.js +20 -12
  316. package/dist/domain/javascriptFeatureTrace.js +13 -67
  317. package/dist/domain/javascriptFeatureTraceSchemas.js +24 -52
  318. package/dist/domain/javascriptFeatureTraversal.js +1 -44
  319. package/dist/domain/javascriptNativeHandoff.js +1 -1
  320. package/dist/domain/javascriptReplay.js +24 -41
  321. package/dist/domain/javascriptRuntimeLoadState.js +3 -8
  322. package/dist/domain/javascriptRuntimeObservation.js +42 -103
  323. package/dist/domain/javascriptRuntimeReconciliation.js +1 -3
  324. package/dist/domain/javascriptRuntimeReconciliationActive.js +8 -17
  325. package/dist/domain/javascriptRuntimeReconciliationGraph.js +10 -23
  326. package/dist/domain/javascriptRuntimeReconciliationMatching.js +18 -12
  327. package/dist/domain/javascriptRuntimeReconciliationParsing.js +16 -45
  328. package/dist/domain/javascriptRuntimeReconciliationResult.js +4 -5
  329. package/dist/domain/javascriptRuntimeReconciliationRuntime.js +8 -12
  330. package/dist/domain/javascriptRuntimeReconciliationSchemas.js +33 -48
  331. package/dist/domain/javascriptRuntimeStaticCandidates.js +3 -3
  332. package/dist/domain/javascriptSemanticAnalysis.js +12 -45
  333. package/dist/domain/javascriptSemanticAsyncEffects.js +1 -9
  334. package/dist/domain/javascriptSemanticCallResolution.js +6 -16
  335. package/dist/domain/javascriptSemanticCalls.js +5 -32
  336. package/dist/domain/javascriptSemanticChildProcesses.js +1 -11
  337. package/dist/domain/javascriptSemanticCoverage.js +11 -0
  338. package/dist/domain/javascriptSemanticDataEffectHelpers.js +1 -8
  339. package/dist/domain/javascriptSemanticDataEffects.js +1 -11
  340. package/dist/domain/javascriptSemanticFingerprints.js +3 -5
  341. package/dist/domain/javascriptSemanticGraphSchemas.js +25 -51
  342. package/dist/domain/javascriptSemanticGraphSerialization.js +2 -13
  343. package/dist/domain/javascriptSemanticIr.js +1 -29
  344. package/dist/domain/javascriptSemanticObjects.js +1 -5
  345. package/dist/domain/javascriptSemanticPrimitives.js +2 -9
  346. package/dist/domain/javascriptSemanticProjection.js +0 -18
  347. package/dist/domain/javascriptSemanticPromises.js +9 -16
  348. package/dist/domain/javascriptSemanticProvenance.js +16 -19
  349. package/dist/domain/javascriptSemanticQuery.js +17 -139
  350. package/dist/domain/javascriptSemanticQueryAssessment.js +9 -37
  351. package/dist/domain/javascriptSemanticQueryIdentity.js +2 -23
  352. package/dist/domain/javascriptSemanticQuerySchemas.js +14 -107
  353. package/dist/domain/javascriptSemanticResources.js +1 -6
  354. package/dist/domain/javascriptSemanticReturns.js +10 -27
  355. package/dist/domain/javascriptSemanticValueTypes.js +1 -0
  356. package/dist/domain/javascriptSemanticValues.js +44 -62
  357. package/dist/domain/javascriptStaticAnalysis.js +21 -43
  358. package/dist/domain/javascriptStaticAnalysisBundler.js +34 -93
  359. package/dist/domain/javascriptStaticAnalysisCalls.js +17 -16
  360. package/dist/domain/javascriptStaticAnalysisFindings.js +3 -19
  361. package/dist/domain/javascriptStaticAnalysisHelpers.js +47 -88
  362. package/dist/domain/javascriptStaticAnalysisState.js +1 -5
  363. package/dist/domain/javascriptStaticAnalysisTypes.js +1 -0
  364. package/dist/domain/jsonShape.js +7 -33
  365. package/dist/domain/localPath.js +7 -0
  366. package/dist/domain/managedApplicationGraph.js +9 -41
  367. package/dist/domain/managedApplicationGraphCoverage.js +24 -156
  368. package/dist/domain/managedApplicationGraphNodes.js +10 -13
  369. package/dist/domain/managedArtifact.js +14 -27
  370. package/dist/domain/managedMemberComparison.js +90 -92
  371. package/dist/domain/managedMemberComparisonCoverage.js +11 -33
  372. package/dist/domain/managedMemberComparisonItems.js +221 -0
  373. package/dist/domain/managedMemberComparisonMatch.js +8 -208
  374. package/dist/domain/managedNativeVerification.js +3 -6
  375. package/dist/domain/managedNativeVerificationMatch.js +55 -59
  376. package/dist/domain/managedNativeVerificationSchemas.js +83 -47
  377. package/dist/domain/managedReconstruction.js +19 -23
  378. package/dist/domain/managedRuntimeCorrelation.js +6 -9
  379. package/dist/domain/nativeApiBoundary.js +2 -7
  380. package/dist/domain/nativeInspection.js +0 -2
  381. package/dist/domain/nativeInvestigationGraph.js +351 -0
  382. package/dist/domain/nativeValueFlow.js +61 -0
  383. package/dist/domain/nodeRuntimeCharacterization.js +1 -5
  384. package/dist/domain/objcSwiftMetadata.js +254 -0
  385. package/dist/domain/peInspection.js +1 -1
  386. package/dist/domain/permissionPolicy.js +13 -0
  387. package/dist/domain/processCapture.js +76 -113
  388. package/dist/domain/processCaptureExample.js +68 -0
  389. package/dist/domain/processCaptureParsing.js +21 -0
  390. package/dist/domain/processCaptureReactiveSchema.js +68 -0
  391. package/dist/domain/processCaptureValidation.js +1 -7
  392. package/dist/domain/processComparison.js +3 -12
  393. package/dist/domain/processReactiveMatching.js +29 -50
  394. package/dist/domain/processReactiveRuntime.js +4 -8
  395. package/dist/domain/processReactiveScenario.js +28 -94
  396. package/dist/domain/processReactiveScenarioPreflight.js +5 -30
  397. package/dist/domain/processReactiveTransition.js +33 -18
  398. package/dist/domain/processScenario.js +56 -90
  399. package/dist/domain/processTraceComparison.js +0 -8
  400. package/dist/domain/processTraceEvaluation.js +14 -4
  401. package/dist/domain/processTraceSpecification.js +11 -17
  402. package/dist/domain/protocolCapture.js +3 -3
  403. package/dist/domain/reconstructionCoverage.js +62 -129
  404. package/dist/domain/reconstructionCoverageEvaluation.js +17 -17
  405. package/dist/domain/reconstructionObligationLedgerSchemas.js +45 -72
  406. package/dist/domain/reconstructionReadiness.js +1 -2
  407. package/dist/domain/reconstructionReadinessSchemas.js +36 -38
  408. package/dist/domain/reconstructionUnknowns.js +3 -3
  409. package/dist/domain/reconstructionVerification.js +13 -47
  410. package/dist/domain/reconstructionVerificationSchemas.js +50 -38
  411. package/dist/domain/referenceSourceGraph.js +53 -61
  412. package/dist/domain/referenceSourceImportParsing.js +1 -5
  413. package/dist/domain/replayMachine.js +19 -31
  414. package/dist/domain/replayMachineRun.js +15 -63
  415. package/dist/domain/replayMachineRuntime.js +41 -41
  416. package/dist/domain/replayMachineValues.js +84 -0
  417. package/dist/domain/residualUnknown.js +25 -30
  418. package/dist/domain/runtimeCharacterization.js +15 -16
  419. package/dist/domain/runtimeIdentification.js +48 -47
  420. package/dist/domain/sourceToBundleComparison.js +9 -85
  421. package/dist/domain/sourceToBundleComparisonSchemas.js +17 -42
  422. package/dist/domain/sourceToBundleSignals.js +4 -15
  423. package/dist/domain/staticRuntimeCorrelation.js +37 -49
  424. package/dist/domain/symbolAnalysis.js +10 -19
  425. package/dist/domain/unicodeCodePointOrder.js +12 -0
  426. package/dist/domain/webBundleAnalysis.js +70 -99
  427. package/dist/domain/webBundleAnalyzer.js +2 -4
  428. package/dist/domain/webBundleAnalyzerAst.js +0 -13
  429. package/dist/domain/webBundleAnalyzerInspection.js +26 -52
  430. package/dist/domain/webBundleAnalyzerResult.js +7 -24
  431. package/dist/domain/webCaptureDiff.js +33 -73
  432. package/dist/domain/webCaptureDiffSchemas.js +86 -0
  433. package/dist/domain/webContentArtifact.js +1 -10
  434. package/dist/domain/webMcpDiscovery.js +3 -14
  435. package/dist/domain/webScreenshot.js +58 -34
  436. package/dist/domain/zipPackageFormat.js +7 -0
  437. package/dist/dotnet/ManagedArtifactInspector.js +17 -50
  438. package/dist/dotnet/ManagedMemberInspector.js +27 -58
  439. package/dist/dotnet/ManagedMemberInspectorCore.js +14 -51
  440. package/dist/dotnet/ManagedMemberInstructionDecoder.js +2 -2
  441. package/dist/dotnet/ManagedMemberRows.js +16 -16
  442. package/dist/dotnet/ManagedMetadataHeaps.js +26 -8
  443. package/dist/dotnet/ManagedMetadataInventory.js +21 -30
  444. package/dist/dotnet/ManagedMetadataInventoryRows.js +57 -63
  445. package/dist/dotnet/ManagedMetadataLayout.js +3 -5
  446. package/dist/dotnet/ManagedMethodBodyReader.js +5 -30
  447. package/dist/dotnet/ManagedNativeBoundaryHelpers.js +19 -49
  448. package/dist/dotnet/ManagedNativeBoundaryInspector.js +13 -41
  449. package/dist/dotnet/ManagedPeReader.js +2 -2
  450. package/dist/dotnet/ManagedStaticProvider.js +13 -71
  451. package/dist/generatedMcpToolCatalog.js +1 -1
  452. package/dist/generatedPackageMetadata.js +1 -1
  453. package/dist/ghidra/GhidraAnalysisProfile.js +3 -8
  454. package/dist/ghidra/GhidraClient.js +4 -12
  455. package/dist/ghidra/GhidraClientWire.js +9 -5
  456. package/dist/ghidra/GhidraDefaults.js +0 -18
  457. package/dist/ghidra/GhidraDiagnostics.js +0 -2
  458. package/dist/ghidra/GhidraDoctor.js +16 -12
  459. package/dist/ghidra/GhidraFunctionValues.js +65 -108
  460. package/dist/ghidra/GhidraInstallation.js +98 -42
  461. package/dist/ghidra/GhidraInventoryValues.js +16 -85
  462. package/dist/ghidra/GhidraLauncher.js +0 -8
  463. package/dist/ghidra/GhidraProvider.js +15 -22
  464. package/dist/ghidra/GhidraProviderCapabilities.js +6 -47
  465. package/dist/ghidra/GhidraRequestQueue.js +6 -30
  466. package/dist/ghidra/GhidraResponseBuffer.js +1 -7
  467. package/dist/ghidra/GhidraSessionValues.js +0 -2
  468. package/dist/ghidra/GhidraTransport.js +4 -7
  469. package/dist/ghidra/protocol.js +2 -2
  470. package/dist/hopper/BridgeLauncher.js +112 -36
  471. package/dist/hopper/HopperAnalysisProfile.js +1 -1
  472. package/dist/hopper/HopperCleanup.js +6 -3
  473. package/dist/hopper/HopperClient.js +4 -7
  474. package/dist/hopper/HopperProcessDiagnostic.js +2 -2
  475. package/dist/hopper/HopperProvider.js +0 -16
  476. package/dist/hopper/HopperRequestQueue.js +21 -40
  477. package/dist/hopper/HopperResponseStream.js +1 -9
  478. package/dist/hopper/HopperSessionValues.js +3 -2
  479. package/dist/hopper/HopperTargetLease.js +119 -0
  480. package/dist/hopper/LinuxPrivateDisplayDiagnostic.js +24 -31
  481. package/dist/hopper/LinuxPrivateDisplayProbe.js +5 -16
  482. package/dist/hopper/protocol.js +6 -4
  483. package/dist/main/reload.js +0 -3
  484. package/dist/main/shutdown.js +1 -1
  485. package/dist/main/state.js +0 -9
  486. package/dist/main/transport.js +0 -5
  487. package/dist/mcpDoctor.js +25 -45
  488. package/dist/native/CommandRunner.js +18 -25
  489. package/dist/native/NativeMacOSProvider.js +13 -38
  490. package/dist/native/NativeMachoInspection.js +1 -1
  491. package/dist/process/BoundedFileBytes.js +17 -0
  492. package/dist/process/ExecFileOutput.js +11 -0
  493. package/dist/process/PendingOperations.js +8 -6
  494. package/dist/process/ProcessOwnership.js +3 -2
  495. package/dist/process/ProcessOwnershipObservation.js +0 -1
  496. package/dist/process/ProviderProcess.js +7 -28
  497. package/dist/reference/ReferenceSourceReader.js +8 -24
  498. package/dist/reference/ReferenceSourceReaderEntries.js +11 -39
  499. package/dist/reference/ReferenceSourceReaderFile.js +13 -31
  500. package/dist/reference/ReferenceSourceReaderPaths.js +3 -18
  501. package/dist/reference/ReferenceSourceReaderValidate.js +3 -6
  502. package/dist/replay/JavaScriptReplayWorker.js +3 -5
  503. package/dist/replay/LinuxJavaScriptReplayRunner.js +33 -29
  504. package/dist/replay/LinuxJavaScriptReplaySandbox.js +0 -19
  505. package/dist/replay/LinuxRuntimeClosure.js +1 -3
  506. package/dist/replay/ReplayOutcome.js +1 -3
  507. package/dist/replay/ReplayProcessLifecycle.js +32 -7
  508. package/dist/replay/ReplaySeccompFile.js +29 -0
  509. package/dist/replay/ReplayWorkerProtocol.js +0 -2
  510. package/dist/replay/SystemJavaScriptReplayHost.js +45 -74
  511. package/dist/server/ProcessCaptureElicitation.js +4 -8
  512. package/dist/server/createServer.js +6 -44
  513. package/dist/server/promptCompletion.js +37 -61
  514. package/dist/server/recordDerivedEvidence.js +1 -1
  515. package/dist/server/registerApplicationTools/characterization.js +4 -8
  516. package/dist/server/registerApplicationTools/compareExportShapes.js +5 -10
  517. package/dist/server/registerApplicationTools/compareSourceToBundle.js +6 -10
  518. package/dist/server/registerApplicationTools/compareVersions.js +5 -10
  519. package/dist/server/registerApplicationTools/controlledReplay.js +3 -5
  520. package/dist/server/registerApplicationTools/coverage.js +6 -71
  521. package/dist/server/registerApplicationTools/helpers.js +1 -13
  522. package/dist/server/registerApplicationTools/obligationLedger.js +3 -2
  523. package/dist/server/registerApplicationTools/traceFeature.js +5 -9
  524. package/dist/server/registerApplicationTools/traceSemantics.js +5 -8
  525. package/dist/server/registerApplicationTools.js +0 -2
  526. package/dist/server/registerArtifactComparisonTool.js +23 -27
  527. package/dist/server/registerBrowserScenarioTool.js +4 -4
  528. package/dist/server/registerBrowserTools.js +5 -8
  529. package/dist/server/registerBundleComparisonTool.js +5 -7
  530. package/dist/server/registerCloseLifecycleTool.js +2 -16
  531. package/dist/server/registerElectronTools.js +10 -29
  532. package/dist/server/registerEnhancedTools.js +10 -11
  533. package/dist/server/registerEvidenceTools.js +15 -22
  534. package/dist/server/registerFunctionComparisonTool.js +30 -25
  535. package/dist/server/registerInvestigationTools/helpers.js +3 -32
  536. package/dist/server/registerInvestigationTools.js +20 -116
  537. package/dist/server/registerJavaScriptRuntimeObservationTools.js +6 -4
  538. package/dist/server/registerManagedWorkflowTools/compareManagedMembers.js +15 -17
  539. package/dist/server/registerManagedWorkflowTools/evidence.js +19 -35
  540. package/dist/server/registerManagedWorkflowTools/importManagedReconstruction.js +3 -8
  541. package/dist/server/registerManagedWorkflowTools/planManagedRuntimeCorrelation.js +3 -8
  542. package/dist/server/registerManagedWorkflowTools/projectManagedApplicationGraph.js +10 -14
  543. package/dist/server/registerManagedWorkflowTools/verifyManagedNativeBoundaries.js +9 -15
  544. package/dist/server/registerOfficialTools.js +1 -43
  545. package/dist/server/registerProcessComparisonTool.js +33 -23
  546. package/dist/server/registerPrompts.js +19 -17
  547. package/dist/server/registerSessionRecordTools.js +10 -156
  548. package/dist/server/registerSessionStatusTool.js +6 -69
  549. package/dist/server/registerSessionTools.js +10 -51
  550. package/dist/server/sessionAvailabilityPolicy.js +0 -2
  551. package/dist/server/sessionEvidence.js +9 -15
  552. package/dist/server/sessionToolPolicies.js +0 -8
  553. package/dist/server/toolResult.js +14 -50
  554. package/dist/serverIdentity.js +0 -20
  555. package/install.sh +1 -1
  556. package/package.json +11 -7
  557. package/scripts/electron-active-hook.cjs +23 -55
  558. package/scripts/hopper-demo-x11.py +13 -32
  559. package/skills/reverse-engineer-anything/SKILL.md +47 -12
  560. package/skills/reverse-engineer-anything/references/evidence-workflows.md +6 -4
  561. package/skills/reverse-engineer-anything/references/javascript-applications.md +13 -13
  562. package/skills/reverse-engineer-anything/references/native-and-artifacts.md +12 -8
  563. package/dist/application/ApplicationWorkflowEvidenceResolver.js +0 -188
  564. package/dist/application/BoundedJsonFiles.js +0 -86
  565. package/dist/application/CrossVersionInventory.js +0 -129
  566. package/dist/application/CrossVersionInvestigation.js +0 -301
  567. package/dist/application/CrossVersionInvestigationCollections.js +0 -23
  568. package/dist/application/CrossVersionInvestigationEvidence.js +0 -64
  569. package/dist/application/CrossVersionInvestigationReplay.js +0 -170
  570. package/dist/application/DeferredFileAuthorization.js +0 -61
  571. package/dist/application/DoctorProjection.js +0 -43
  572. package/dist/application/EnhancedToolPagination.js +0 -22
  573. package/dist/application/EvidenceReferenceResolver.js +0 -26
  574. package/dist/application/InvestigationWorkspaceStore.js +0 -204
  575. package/dist/application/ProcessPairedExperiment.js +0 -72
  576. package/dist/application/ReconstructionCoverageWorkspaceStore.js +0 -31
  577. package/dist/application/ReconstructionReadinessService.js +0 -48
  578. package/dist/cliInvestigationCommands.js +0 -173
  579. package/dist/domain/boundedCartesianProjection.js +0 -15
  580. package/dist/domain/investigationWorkspace.js +0 -347
  581. package/dist/domain/jsonLimits.js +0 -26
  582. package/dist/domain/knownPageCoverage.js +0 -29
  583. package/dist/domain/processPairedExperiment.js +0 -128
  584. package/dist/server/javascriptApplicationResult.js +0 -106
  585. package/dist/server/permissionFailure.js +0 -12
  586. package/dist/server/registerApplicationTools/readiness.js +0 -50
  587. package/dist/server/registerEvidenceResources.js +0 -315
  588. package/dist/server/registerJavaScriptApplicationGraphResource.js +0 -65
  589. package/dist/server/registerReconstructionObligationLedgerResource.js +0 -32
  590. package/dist/server/registerReconstructionReadinessResource.js +0 -32
@@ -1,347 +0,0 @@
1
- import { createHash } from "node:crypto";
2
- import canonicalize from "canonicalize";
3
- import { z } from "zod";
4
- import { evidenceBundleSchema, parseEvidenceBundle, } from "./evidenceBundle.js";
5
- const digestSchema = z.string().regex(/^[a-f0-9]{64}$/u);
6
- const evidenceIdSchema = z.string().regex(/^ev_[a-f0-9]{64}$/u);
7
- const artifactFormatSchema = evidenceBundleSchema.shape.artifacts.element.shape.format;
8
- /** Bounded controls for one automatic, provider-neutral artifact comparison. */
9
- const investigationRunOptionsSchema = z.object({
10
- max_entries: z.number().int().min(1).max(50_000).default(10_000),
11
- max_total_bytes: z
12
- .number()
13
- .int()
14
- .min(1)
15
- .max(Number.MAX_SAFE_INTEGER)
16
- .default(1_073_741_824),
17
- max_entry_bytes: z
18
- .number()
19
- .int()
20
- .min(1)
21
- .max(Number.MAX_SAFE_INTEGER)
22
- .default(268_435_456),
23
- max_compression_ratio: z.number().min(1).max(100_000).default(1_000),
24
- max_depth: z.number().int().min(0).max(100).default(20),
25
- max_path_bytes: z.number().int().min(1).max(65_535).default(4_096),
26
- page_size: z.number().int().min(1).max(500).default(500),
27
- change_limit: z.number().int().min(1).max(500).default(500),
28
- });
29
- const DEFAULT_INVESTIGATION_RUN_OPTIONS = {
30
- max_entries: 10_000,
31
- max_total_bytes: 1_073_741_824,
32
- max_entry_bytes: 268_435_456,
33
- max_compression_ratio: 1_000,
34
- max_depth: 20,
35
- max_path_bytes: 4_096,
36
- page_size: 500,
37
- change_limit: 500,
38
- };
39
- /** Explicit write approval and two local versions for an automatic run. */
40
- const crossVersionInvestigationFacts = {
41
- approved: z.literal(true),
42
- workspace_path: z.string().min(1).max(4_096),
43
- workspace_name: z.string().trim().min(1).max(200).default("default"),
44
- expected_workspace_revision: z.number().int().min(1).optional(),
45
- replay_run_id: z
46
- .string()
47
- .regex(/^run_[a-f0-9]{64}$/u)
48
- .optional(),
49
- left_path: z.string().min(1).max(4_096),
50
- right_path: z.string().min(1).max(4_096),
51
- options: investigationRunOptionsSchema.default(DEFAULT_INVESTIGATION_RUN_OPTIONS),
52
- };
53
- export const crossVersionInvestigationInputSchema = z.union([
54
- z.object({
55
- ...crossVersionInvestigationFacts,
56
- integrity_policy: z.literal("fail").default("fail"),
57
- integrity_continue_approved: z.literal(false).default(false),
58
- max_integrity_mismatches: z.number().int().min(1).max(100).default(10),
59
- }),
60
- z.object({
61
- ...crossVersionInvestigationFacts,
62
- integrity_policy: z.literal("record-and-continue"),
63
- integrity_continue_approved: z.literal(true),
64
- max_integrity_mismatches: z.number().int().min(1).max(100).default(10),
65
- }),
66
- ]);
67
- const targetSchema = z.object({
68
- root_sha256: digestSchema,
69
- graph_sha256: digestSchema,
70
- manifest_id: z.string().regex(/^agm_[a-f0-9]{64}$/u),
71
- format: artifactFormatSchema,
72
- });
73
- const stageSchema = z.enum([
74
- "inventory_left",
75
- "inventory_right",
76
- "compare_artifacts",
77
- "find_changed_behavior",
78
- ]);
79
- const investigationRunBaseSchema = z.object({
80
- schema_version: z.literal(1),
81
- run_id: z.string().regex(/^run_[a-f0-9]{64}$/u),
82
- request_sha256: digestSchema,
83
- left: targetSchema,
84
- right: targetSchema,
85
- options: investigationRunOptionsSchema,
86
- integrity_policy: z.enum(["fail", "record-and-continue"]),
87
- integrity_continue_approved: z.boolean(),
88
- max_integrity_mismatches: z.number().int().min(1).max(100),
89
- status: z.enum(["running", "complete"]),
90
- completed_stages: z.array(stageSchema).max(4),
91
- left_inventory_evidence_ids: z.array(evidenceIdSchema).min(1).max(100),
92
- right_inventory_evidence_ids: z.array(evidenceIdSchema).min(1).max(100),
93
- comparison_evidence_id: evidenceIdSchema.nullable(),
94
- result_evidence_id: evidenceIdSchema.nullable(),
95
- limitations: z.array(z.string().max(4_096)).max(100),
96
- });
97
- export const investigationRunSchema = z
98
- .union([
99
- investigationRunBaseSchema.extend({
100
- legacy_request_identity: z.literal(true),
101
- }),
102
- investigationRunBaseSchema,
103
- ])
104
- .superRefine((run, context) => {
105
- if (!("legacy_request_identity" in run))
106
- return;
107
- const legacyIdentity = createLegacyInvestigationRunIdentity(run);
108
- if (run.integrity_policy !== "fail" ||
109
- run.integrity_continue_approved ||
110
- run.max_integrity_mismatches !== 10 ||
111
- run.run_id !== legacyIdentity.runId ||
112
- run.request_sha256 !== legacyIdentity.requestSha256)
113
- context.addIssue({
114
- code: "custom",
115
- path: ["legacy_request_identity"],
116
- message: "Legacy request identity is valid only for migrated strict runs",
117
- });
118
- });
119
- export const investigationRunSummarySchema = z.object({
120
- schema_version: z.literal(1),
121
- workspace_id: z.string().regex(/^ws_[a-f0-9]{64}$/u),
122
- run_id: z.string().regex(/^run_[a-f0-9]{64}$/u),
123
- left_manifest_id: z.string().regex(/^agm_[a-f0-9]{64}$/u),
124
- right_manifest_id: z.string().regex(/^agm_[a-f0-9]{64}$/u),
125
- inventory_evidence_count: z.number().int().min(2).max(200),
126
- comparison_evidence_id: evidenceIdSchema,
127
- limitations: z.array(z.string().max(4_096)).max(100),
128
- });
129
- /** Durable schema for one revisioned cross-version investigation workspace. */
130
- export const investigationWorkspaceSchema = z.object({
131
- workspace_version: z.literal(1),
132
- workspace_id: z.string().regex(/^ws_[a-f0-9]{64}$/u),
133
- name: z.string().trim().min(1).max(200),
134
- revision: z.number().int().min(1),
135
- previous_revision_digest: z
136
- .string()
137
- .regex(/^wrev_[a-f0-9]{64}$/u)
138
- .nullable(),
139
- revision_digest: z.string().regex(/^wrev_[a-f0-9]{64}$/u),
140
- bundle: evidenceBundleSchema,
141
- runs: z.array(investigationRunSchema).max(1_000),
142
- });
143
- const legacyInvestigationRunSchema = investigationRunBaseSchema
144
- .omit({
145
- integrity_policy: true,
146
- integrity_continue_approved: true,
147
- max_integrity_mismatches: true,
148
- })
149
- .strict();
150
- const legacyInvestigationWorkspaceSchema = investigationWorkspaceSchema
151
- .extend({
152
- runs: z.array(legacyInvestigationRunSchema).max(1_000),
153
- })
154
- .strict();
155
- /** Derive a stable run identity from content commitments and bounded controls. */
156
- export const createInvestigationRunIdentity = (input) => {
157
- const requestSha256 = digestCanonical({
158
- schema: "rea.cross-version-investigation-request/v1",
159
- left: input.left,
160
- right: input.right,
161
- options: input.options,
162
- integrity: {
163
- policy: input.integrity_policy,
164
- approved: input.integrity_continue_approved,
165
- max_mismatches: input.max_integrity_mismatches,
166
- },
167
- });
168
- return { runId: `run_${requestSha256}`, requestSha256 };
169
- };
170
- /** Build the first canonical workspace revision. */
171
- export const createInvestigationWorkspace = (name, bundle, runs) => buildWorkspace({
172
- workspaceId: `ws_${digestCanonical({ schema: "rea.workspace/v1", name })}`,
173
- name,
174
- revision: 1,
175
- previousRevisionDigest: null,
176
- bundle,
177
- runs,
178
- });
179
- /** Create the next immutable workspace revision. */
180
- export const reviseInvestigationWorkspace = (current, bundle, runs) => buildWorkspace({
181
- workspaceId: current.workspace_id,
182
- name: current.name,
183
- revision: current.revision + 1,
184
- previousRevisionDigest: current.revision_digest,
185
- bundle,
186
- runs,
187
- });
188
- /** Parse a workspace and verify identities, revision digest, and references. */
189
- export const parseInvestigationWorkspace = (input) => {
190
- if (isLegacyWorkspace(input))
191
- return migrateLegacyWorkspace(input);
192
- const parsed = investigationWorkspaceSchema.parse(input);
193
- const bundle = parseEvidenceBundle(parsed.bundle);
194
- const canonical = buildWorkspace({
195
- workspaceId: parsed.workspace_id,
196
- name: parsed.name,
197
- revision: parsed.revision,
198
- previousRevisionDigest: parsed.previous_revision_digest,
199
- bundle,
200
- runs: parsed.runs,
201
- });
202
- if (parsed.workspace_id !== workspaceIdFor(parsed.name))
203
- throw new TypeError("Investigation workspace ID does not match its name");
204
- if (parsed.revision_digest !== canonical.revision_digest)
205
- throw new TypeError("Investigation workspace revision digest is invalid");
206
- if (JSON.stringify(parsed) !== JSON.stringify(canonical))
207
- throw new TypeError("Investigation workspace is not canonical");
208
- validateRunReferences(canonical);
209
- return canonical;
210
- };
211
- /** Encode a validated workspace as byte-stable canonical JSON. */
212
- export const serializeInvestigationWorkspace = (workspace) => canonicalJson(parseInvestigationWorkspace(workspace));
213
- const buildWorkspace = (input) => {
214
- const runs = [...input.runs]
215
- .map((run) => investigationRunSchema.parse(run))
216
- .sort((left, right) => left.run_id.localeCompare(right.run_id));
217
- assertUnique(runs.map(({ run_id: id }) => id), "investigation run ID");
218
- const semantic = {
219
- workspace_version: 1,
220
- workspace_id: input.workspaceId,
221
- name: input.name,
222
- revision: input.revision,
223
- previous_revision_digest: input.previousRevisionDigest,
224
- bundle: parseEvidenceBundle(input.bundle),
225
- runs,
226
- };
227
- return investigationWorkspaceSchema.parse({
228
- ...semantic,
229
- revision_digest: `wrev_${digestCanonical(semantic)}`,
230
- });
231
- };
232
- const validateRunReferences = (workspace) => {
233
- const evidenceIds = new Set(workspace.bundle.records.map(({ evidence_id: id }) => id));
234
- for (const run of workspace.runs) {
235
- const expectedIdentity = createInvestigationRunIdentity(run);
236
- const legacyIdentity = createLegacyInvestigationRunIdentity(run);
237
- if ((run.run_id !== expectedIdentity.runId ||
238
- run.request_sha256 !== expectedIdentity.requestSha256) &&
239
- (!("legacy_request_identity" in run) ||
240
- run.integrity_policy !== "fail" ||
241
- run.integrity_continue_approved ||
242
- run.max_integrity_mismatches !== 10 ||
243
- run.run_id !== legacyIdentity.runId ||
244
- run.request_sha256 !== legacyIdentity.requestSha256))
245
- throw new TypeError("Investigation run identity is invalid");
246
- validateRunStages(run);
247
- const references = [
248
- ...run.left_inventory_evidence_ids,
249
- ...run.right_inventory_evidence_ids,
250
- ...(run.comparison_evidence_id === null
251
- ? []
252
- : [run.comparison_evidence_id]),
253
- ...(run.result_evidence_id === null ? [] : [run.result_evidence_id]),
254
- ];
255
- if (references.some((evidenceId) => !evidenceIds.has(evidenceId)))
256
- throw new TypeError("Investigation run references missing Evidence");
257
- }
258
- };
259
- /** Derive the pre-integrity-policy run identity for strict workspace migration. */
260
- export const createLegacyInvestigationRunIdentity = (input) => {
261
- const requestSha256 = digestCanonical({
262
- schema: "rea.cross-version-investigation-request/v1",
263
- left: input.left,
264
- right: input.right,
265
- options: input.options,
266
- });
267
- return { runId: `run_${requestSha256}`, requestSha256 };
268
- };
269
- const isLegacyWorkspace = (input) => {
270
- if (typeof input !== "object" || input === null || !("runs" in input))
271
- return false;
272
- const runs = input.runs;
273
- return (Array.isArray(runs) &&
274
- runs.some((run) => typeof run === "object" && run !== null && !("integrity_policy" in run)));
275
- };
276
- const migrateLegacyWorkspace = (input) => {
277
- const parsed = legacyInvestigationWorkspaceSchema.parse(input);
278
- const bundle = parseEvidenceBundle(parsed.bundle);
279
- const runs = [...parsed.runs].sort((left, right) => left.run_id.localeCompare(right.run_id));
280
- const semantic = {
281
- workspace_version: 1,
282
- workspace_id: parsed.workspace_id,
283
- name: parsed.name,
284
- revision: parsed.revision,
285
- previous_revision_digest: parsed.previous_revision_digest,
286
- bundle,
287
- runs,
288
- };
289
- if (parsed.workspace_id !== workspaceIdFor(parsed.name))
290
- throw new TypeError("Investigation workspace ID does not match its name");
291
- if (parsed.revision_digest !== `wrev_${digestCanonical(semantic)}`)
292
- throw new TypeError("Investigation workspace revision digest is invalid");
293
- const canonical = legacyInvestigationWorkspaceSchema.parse({
294
- ...semantic,
295
- revision_digest: parsed.revision_digest,
296
- });
297
- if (JSON.stringify(parsed) !== JSON.stringify(canonical))
298
- throw new TypeError("Investigation workspace is not canonical");
299
- for (const run of runs) {
300
- const identity = createLegacyInvestigationRunIdentity(run);
301
- if (run.run_id !== identity.runId ||
302
- run.request_sha256 !== identity.requestSha256)
303
- throw new TypeError("Investigation run identity is invalid");
304
- }
305
- const migrated = buildWorkspace({
306
- workspaceId: parsed.workspace_id,
307
- name: parsed.name,
308
- revision: parsed.revision,
309
- previousRevisionDigest: parsed.previous_revision_digest,
310
- bundle,
311
- runs: runs.map((run) => ({
312
- ...run,
313
- legacy_request_identity: true,
314
- integrity_policy: "fail",
315
- integrity_continue_approved: false,
316
- max_integrity_mismatches: 10,
317
- })),
318
- });
319
- validateRunReferences(migrated);
320
- return migrated;
321
- };
322
- const validateRunStages = (run) => {
323
- const expected = [
324
- "inventory_left",
325
- "inventory_right",
326
- ...(run.comparison_evidence_id === null ? [] : ["compare_artifacts"]),
327
- ...(run.result_evidence_id === null ? [] : ["find_changed_behavior"]),
328
- ];
329
- if (JSON.stringify(run.completed_stages) !== JSON.stringify(expected))
330
- throw new TypeError("Investigation run stages are inconsistent");
331
- if (run.status === "complete" && run.result_evidence_id === null)
332
- throw new TypeError("Completed investigation run has no result Evidence");
333
- if (run.status === "running" && run.result_evidence_id !== null)
334
- throw new TypeError("Running investigation run has final result Evidence");
335
- };
336
- const workspaceIdFor = (name) => `ws_${digestCanonical({ schema: "rea.workspace/v1", name })}`;
337
- const digestCanonical = (value) => createHash("sha256").update(canonicalJson(value)).digest("hex");
338
- const canonicalJson = (value) => {
339
- const encoded = canonicalize(value);
340
- if (encoded === undefined)
341
- throw new TypeError("Investigation workspace could not canonicalize data");
342
- return encoded;
343
- };
344
- const assertUnique = (values, description) => {
345
- if (new Set(values).size !== values.length)
346
- throw new TypeError(`Duplicate ${description}`);
347
- };
@@ -1,26 +0,0 @@
1
- /** Return whether every node, key, and string fits within the supplied limits. */
2
- export const isJsonWithinLimits = (root, limits) => {
3
- const pending = [
4
- { value: root, depth: 0 },
5
- ];
6
- let nodes = 0;
7
- while (pending.length > 0) {
8
- const current = pending.pop();
9
- if (current === undefined)
10
- break;
11
- nodes += 1;
12
- if (nodes > limits.maxNodes || current.depth > limits.maxDepth)
13
- return false;
14
- if (typeof current.value === "string" &&
15
- current.value.length > limits.maxStringLength)
16
- return false;
17
- if (typeof current.value !== "object" || current.value === null)
18
- continue;
19
- for (const [key, value] of Object.entries(current.value)) {
20
- if (key.length > limits.maxStringLength)
21
- return false;
22
- pending.push({ value, depth: current.depth + 1 });
23
- }
24
- }
25
- return true;
26
- };
@@ -1,29 +0,0 @@
1
- /**
2
- * Assess source-page and downstream-projection completeness without treating an
3
- * unreturned row as absent. `includedCount` is the number retained downstream.
4
- */
5
- export const assessKnownPageCoverage = (page, includedCount = page.items.length) => {
6
- const observedCount = Math.min(page.total, page.returned, page.items.length);
7
- const retainedCount = Math.min(observedCount, Math.max(0, Math.floor(includedCount)));
8
- const sourceOmittedCount = Math.max(0, page.total - observedCount);
9
- const sourceComplete = page.complete &&
10
- page.offset === 0 &&
11
- page.returned === page.total &&
12
- sourceOmittedCount === 0;
13
- const omittedCount = Math.max(0, page.total - retainedCount);
14
- return sourceComplete && omittedCount === 0
15
- ? {
16
- complete: true,
17
- sourceComplete: true,
18
- includedCount: retainedCount,
19
- omittedCount: 0,
20
- sourceOmittedCount: 0,
21
- }
22
- : {
23
- complete: false,
24
- sourceComplete,
25
- includedCount: retainedCount,
26
- omittedCount,
27
- sourceOmittedCount,
28
- };
29
- };
@@ -1,128 +0,0 @@
1
- import { z } from "zod";
2
- import { PROCESS_COMPARISON_DIMENSIONS, compareProcessCaptures, processDimensionObservations, } from "./processComparison.js";
3
- import { digestProcessCommitment, processScenarioSchema, } from "./processScenario.js";
4
- const sideIdentifierSchema = z
5
- .string()
6
- .regex(/^[A-Za-z][A-Za-z0-9._-]{0,127}$/u);
7
- const environmentNameSchema = z.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/u);
8
- const processDimensionSchema = z.enum(PROCESS_COMPARISON_DIMENSIONS);
9
- const sideBindingSchema = z
10
- .object({
11
- id: sideIdentifierSchema,
12
- executable: z.string().startsWith("/"),
13
- arguments: z.array(z.string()).max(256).optional(),
14
- environment: z.record(environmentNameSchema, z.string()).default({}),
15
- })
16
- .strict();
17
- /** Boundary contract for one bounded authority/candidate process experiment. */
18
- export const processPairedExperimentSchema = z
19
- .object({
20
- approved: z.literal(true),
21
- shared_scenario: processScenarioSchema,
22
- authority: sideBindingSchema,
23
- candidate: sideBindingSchema,
24
- repeat_count: z.number().int().min(2).max(10).default(3),
25
- freshness_policy: z
26
- .object({
27
- max_capture_age_ms: z.number().int().positive().max(86_400_000),
28
- })
29
- .strict(),
30
- required_dimensions: z
31
- .array(processDimensionSchema)
32
- .min(1)
33
- .max(PROCESS_COMPARISON_DIMENSIONS.length)
34
- .default([...PROCESS_COMPARISON_DIMENSIONS]),
35
- })
36
- .strict()
37
- .superRefine((experiment, context) => {
38
- if (experiment.authority.id === experiment.candidate.id)
39
- context.addIssue({
40
- code: "custom",
41
- message: "authority and candidate identities must differ",
42
- path: ["candidate", "id"],
43
- });
44
- if (new Set(experiment.required_dimensions).size !==
45
- experiment.required_dimensions.length)
46
- context.addIssue({
47
- code: "custom",
48
- message: "required process dimensions must be unique",
49
- path: ["required_dimensions"],
50
- });
51
- });
52
- /** Apply a side binding without changing the shared observation contract. */
53
- export const bindProcessScenario = (shared, side) => processScenarioSchema.parse({
54
- ...shared,
55
- executable: side.executable,
56
- arguments: side.arguments ?? shared.arguments,
57
- environment: { ...shared.environment, ...side.environment },
58
- });
59
- const classifyInstability = (dimensions) => {
60
- if (dimensions.has("exit"))
61
- return "flaky_exit";
62
- if (dimensions.has("filesystem") || dimensions.has("process"))
63
- return "environmental_drift";
64
- return "nondeterministic_output";
65
- };
66
- const timingKeys = new Set([
67
- "at_ms",
68
- "scheduled_at_ms",
69
- "dispatched_at_ms",
70
- "elapsed_ms",
71
- ]);
72
- const withoutTiming = (value) => typeof value !== "object" || value === null || Array.isArray(value)
73
- ? value
74
- : Object.fromEntries(Object.entries(value).filter(([key]) => !timingKeys.has(key)));
75
- const observationsWithoutTiming = (capture, dimension) => dimension === "exit"
76
- ? [
77
- {
78
- ...capture.exit,
79
- settlement: {
80
- state: capture.settlement.state,
81
- cleanup_outcome: capture.settlement.cleanup_outcome,
82
- },
83
- },
84
- ]
85
- : processDimensionObservations(capture, dimension).map(withoutTiming);
86
- const hasOnlyTimingVariance = (captures, dimensions) => dimensions.every((dimension) => {
87
- const first = captures[0];
88
- if (first === undefined)
89
- return false;
90
- const baseline = JSON.stringify(observationsWithoutTiming(first, dimension));
91
- return captures
92
- .slice(1)
93
- .every((capture) => JSON.stringify(observationsWithoutTiming(capture, dimension)) ===
94
- baseline);
95
- });
96
- /** Compare same-side repeats before permitting a cross-side claim. */
97
- export const analyzeProcessRepeatability = (captures, requiredDimensions) => {
98
- if (captures.length < 2)
99
- return {
100
- classification: "insufficient_samples",
101
- stable: false,
102
- digest: digestProcessCommitment({ captures: [], requiredDimensions }),
103
- comparisons: [],
104
- unstable_dimensions: [],
105
- };
106
- const baseline = captures[0];
107
- if (baseline === undefined)
108
- throw new TypeError("Repeatability analysis lost its baseline capture");
109
- const comparisons = captures
110
- .slice(1)
111
- .map((capture) => compareProcessCaptures(baseline, capture));
112
- const unstable = new Set(requiredDimensions.filter((dimension) => comparisons.some((comparison) => comparison[dimension] !== "unchanged")));
113
- const unstableDimensions = PROCESS_COMPARISON_DIMENSIONS.filter((dimension) => unstable.has(dimension));
114
- return {
115
- classification: unstable.size === 0
116
- ? "stable"
117
- : hasOnlyTimingVariance(captures, unstableDimensions)
118
- ? "timing_variance"
119
- : classifyInstability(unstable),
120
- stable: unstable.size === 0,
121
- digest: digestProcessCommitment({
122
- requiredDimensions,
123
- comparisons,
124
- }),
125
- comparisons,
126
- unstable_dimensions: unstableDimensions,
127
- };
128
- };
@@ -1,106 +0,0 @@
1
- import { javascriptApplicationAnalysisResultSchema } from "../domain/javascriptApplicationAnalysis.js";
2
- import { compareCodePoints } from "../domain/javascriptApplicationGraph.js";
3
- import { javascriptApplicationAnalysisSummarySchema } from "../contracts/electronToolContracts.js";
4
- const DEFAULT_GRAPH_PAGE_LIMIT = 100;
5
- const ROOT_SAMPLE_LIMIT = 10;
6
- const TOP_FINDING_LIMIT = 20;
7
- const FINDING_PRIORITY = {
8
- "browser-window": 0,
9
- "electron-preload": 1,
10
- "context-bridge-api": 2,
11
- "ipc-channel": 3,
12
- "ipc-handler": 4,
13
- "electron-utility": 5,
14
- endpoint: 6,
15
- storage: 7,
16
- worker: 8,
17
- "service-worker": 9,
18
- "native-addon": 10,
19
- "native-export": 11,
20
- "source-map": 12,
21
- };
22
- /** Project complete JavaScript application Evidence into a bounded agent result. */
23
- export const summarizeJavaScriptApplicationEvidence = (evidence) => {
24
- const result = javascriptApplicationAnalysisResultSchema.parse(evidence.normalized_result);
25
- const nodeKinds = new Map();
26
- for (const node of result.graph.nodes)
27
- nodeKinds.set(node.kind, (nodeKinds.get(node.kind) ?? 0) + 1);
28
- const rootItems = result.graph.root_node_ids.slice(0, ROOT_SAMPLE_LIMIT);
29
- const pageRoot = `rea://evidence/${evidence.evidence_id}/application-graph`;
30
- const topFindings = [...result.graph.nodes]
31
- .sort((left, right) => (FINDING_PRIORITY[left.kind] ?? Number.MAX_SAFE_INTEGER) -
32
- (FINDING_PRIORITY[right.kind] ?? Number.MAX_SAFE_INTEGER) ||
33
- compareCodePoints(left.node_id, right.node_id))
34
- .slice(0, TOP_FINDING_LIMIT)
35
- .map((node) => {
36
- const observation = node.observations[0];
37
- if (observation === undefined)
38
- throw new TypeError("Application graph node has no observation");
39
- return {
40
- node_id: node.node_id,
41
- kind: node.kind,
42
- label: observation.label,
43
- authority: observation.evidence.authority,
44
- state: observation.evidence.state,
45
- confidence: observation.evidence.confidence,
46
- location: observation.evidence.location,
47
- };
48
- });
49
- const summary = result.schema_version === 1 ? omitGraph(result) : omitGraphs(result);
50
- const unknowns = new Set([
51
- ...result.limitations,
52
- ...result.graph.limitations,
53
- ]);
54
- if (result.statistics.parse_failures > 0)
55
- unknowns.add(`${String(result.statistics.parse_failures)} JavaScript file(s) could not be parsed.`);
56
- if (result.statistics.truncated_scopes > 0)
57
- unknowns.add(`${String(result.statistics.truncated_scopes)} analysis scope(s) were truncated.`);
58
- if (result.graph.coverage.status !== "complete")
59
- unknowns.add(`Application graph coverage is ${result.graph.coverage.status}; omitted facts remain unknown.`);
60
- return javascriptApplicationAnalysisSummarySchema.parse({
61
- ...summary,
62
- ...(result.schema_version === 1
63
- ? {}
64
- : {
65
- semantic_graph: {
66
- graph_id: result.semantic_graph.graph_id,
67
- nodes: result.semantic_graph.nodes.length,
68
- relations: result.semantic_graph.relations.length,
69
- unknown_frontiers: result.semantic_graph.unknowns.length,
70
- fingerprints: result.semantic_graph.fingerprints.length,
71
- coverage: result.semantic_graph.coverage.status,
72
- query_tool: "trace_javascript_semantics",
73
- },
74
- }),
75
- unknowns: [...unknowns],
76
- graph: {
77
- graph_id: result.graph.graph_id,
78
- node_count: result.graph.nodes.length,
79
- edge_count: result.graph.edges.length,
80
- roots: {
81
- items: rootItems,
82
- total: result.graph.root_node_ids.length,
83
- truncated: rootItems.length < result.graph.root_node_ids.length,
84
- },
85
- node_kinds: [...nodeKinds]
86
- .sort(([left], [right]) => compareCodePoints(left, right))
87
- .map(([kind, count]) => ({ kind, count })),
88
- top_findings: topFindings,
89
- coverage: result.graph.coverage,
90
- limitations: result.graph.limitations,
91
- pages: {
92
- nodes: `${pageRoot}/nodes/offset/0/limit/${String(DEFAULT_GRAPH_PAGE_LIMIT)}`,
93
- edges: `${pageRoot}/edges/offset/0/limit/${String(DEFAULT_GRAPH_PAGE_LIMIT)}`,
94
- page_limit: DEFAULT_GRAPH_PAGE_LIMIT,
95
- },
96
- },
97
- });
98
- };
99
- const omitGraph = (result) => {
100
- const { graph: _graph, ...summary } = result;
101
- return summary;
102
- };
103
- const omitGraphs = (result) => {
104
- const { graph: _graph, semantic_graph: _semanticGraph, ...summary } = result;
105
- return summary;
106
- };
@@ -1,12 +0,0 @@
1
- import { AnalysisProtocolError, PermissionRequiredError, } from "../domain/errors.js";
2
- import { err } from "../domain/result.js";
3
- /** Preserve a typed permission denial or contain an unexpected authority error. */
4
- export const permissionFailure = (failure) => {
5
- if (failure.ok)
6
- return err(new AnalysisProtocolError("Expected a denied permission"));
7
- return err(failure.error instanceof PermissionRequiredError
8
- ? failure.error
9
- : new AnalysisProtocolError(failure.error.message, {
10
- cause: failure.error,
11
- }));
12
- };