rea-agents 3.2.1 → 4.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (434) hide show
  1. package/README.md +183 -332
  2. package/bridge/ghidra/ReaGhidraBridge.java +561 -74
  3. package/bridge/hopper_bridge.py +70 -27
  4. package/bridge/native/ReaNativeUI.swift +157 -0
  5. package/dist/application/AnalysisContextQueries.js +19 -5
  6. package/dist/application/AnalysisSnapshotCache.js +30 -11
  7. package/dist/application/AppleAssetCatalogAnalysis.js +171 -0
  8. package/dist/application/ArtifactExtractionDestination.js +0 -12
  9. package/dist/application/ArtifactGraphConstruction.js +44 -11
  10. package/dist/application/ArtifactInventory/classify.js +7 -15
  11. package/dist/application/ArtifactInventory/hash.js +4 -2
  12. package/dist/application/ArtifactInventory/policy.js +2 -17
  13. package/dist/application/ArtifactInventory/reader.js +3 -3
  14. package/dist/application/ArtifactInventory/scanCanonical.js +2 -2
  15. package/dist/application/ArtifactInventory/scanReader.js +12 -4
  16. package/dist/application/ArtifactInventory/types.js +0 -3
  17. package/dist/application/BinarySession.js +28 -43
  18. package/dist/application/BinarySessionExecution.js +37 -1
  19. package/dist/application/BinaryTargetResolver.js +50 -4
  20. package/dist/application/BrowserEvidence.js +36 -7
  21. package/dist/application/BrowserObservationService.js +17 -44
  22. package/dist/application/BrowserScenarioCaptureService.js +2 -35
  23. package/dist/application/BrowserScenarioEvidence.js +13 -9
  24. package/dist/application/CapabilityClientRequirements.js +2 -11
  25. package/dist/application/CapabilityInventory.js +21 -35
  26. package/dist/application/ClientConfigurationDocument.js +84 -7
  27. package/dist/application/ClientRegistrationIdentity.js +32 -0
  28. package/dist/application/ClientRegistrationStatus.js +59 -6
  29. package/dist/application/DirectAnalysis.js +37 -58
  30. package/dist/application/DirectAnalysisStatus.js +4 -4
  31. package/dist/application/Doctor.js +89 -80
  32. package/dist/application/DoctorDiagnostics.js +2 -26
  33. package/dist/application/DoctorScope.js +8 -14
  34. package/dist/application/ElectronActiveEvidence.js +10 -27
  35. package/dist/application/ElectronActiveObservationService.js +9 -36
  36. package/dist/application/ElectronBoundaryAnalysis.js +2 -0
  37. package/dist/application/ElectronBoundaryGraphNative.js +1 -1
  38. package/dist/application/ElectronEvidence.js +8 -3
  39. package/dist/application/ElectronObservationService.js +9 -25
  40. package/dist/application/EnhancedLiteralTracing.js +4 -8
  41. package/dist/application/EnhancedTools.js +15 -35
  42. package/dist/application/FilesystemSnapshot.js +7 -8
  43. package/dist/application/JavaScriptApplicationEvidenceGraph.js +2 -1
  44. package/dist/application/JavaScriptApplicationWorkflowService.js +31 -7
  45. package/dist/application/JavaScriptArtifactAnalysis.js +6 -4
  46. package/dist/application/JavaScriptArtifactFiles.js +5 -0
  47. package/dist/application/JavaScriptArtifactPathResolution.js +179 -47
  48. package/dist/application/JavaScriptRuntimeObservationEvidence.js +6 -3
  49. package/dist/application/JavaScriptRuntimeObservationService.js +9 -25
  50. package/dist/application/JavaScriptRuntimeReconciliationService.js +45 -4
  51. package/dist/application/JavaScriptSemanticGraphAsyncProjection.js +11 -0
  52. package/dist/application/JavaScriptSemanticGraphChildProcessProjection.js +11 -0
  53. package/dist/application/JavaScriptSemanticGraphDataProjection.js +11 -0
  54. package/dist/application/JavaScriptSemanticGraphFlowProjection.js +14 -5
  55. package/dist/application/JsonFiles.js +1 -1
  56. package/dist/application/LazyAnalysisProvider.js +27 -6
  57. package/dist/application/ManagedMemberComparisonService.js +19 -6
  58. package/dist/application/NativeApiInspection.js +2 -0
  59. package/dist/application/NativeCallRoutes.js +72 -0
  60. package/dist/application/NativeDispatchMetadataInspection.js +33 -0
  61. package/dist/application/NativeUiActionTrace.js +73 -49
  62. package/dist/application/NativeValueTrace.js +320 -0
  63. package/dist/application/ProcessCaptureCapability.js +32 -5
  64. package/dist/application/ProcessCaptureEnvironment.js +9 -26
  65. package/dist/application/ProcessCaptureError.js +1 -5
  66. package/dist/application/ProcessCaptureJournal.js +3 -40
  67. package/dist/application/ProcessCaptureLifecycle.js +102 -111
  68. package/dist/application/ProcessCli.js +18 -25
  69. package/dist/application/ProcessEvidence.js +5 -7
  70. package/dist/application/ProcessFilesystemEffects.js +36 -0
  71. package/dist/application/ProcessHarness.js +41 -120
  72. package/dist/application/ProcessNormalization.js +2 -17
  73. package/dist/application/ProcessScenarioRuntimeValidation.js +76 -0
  74. package/dist/application/ReferenceSourceImport.js +3 -4
  75. package/dist/application/Setup.js +236 -84
  76. package/dist/application/SetupClientConfiguration.js +14 -9
  77. package/dist/application/SetupPlan.js +138 -86
  78. package/dist/application/SetupSkill.js +0 -1
  79. package/dist/application/SupportedClients.js +102 -21
  80. package/dist/application/Uninstall.js +31 -20
  81. package/dist/application/Update.js +93 -0
  82. package/dist/application/UpdateMaintenance.js +108 -0
  83. package/dist/application/UpdateRuntime.js +126 -0
  84. package/dist/application/runtime.js +13 -2
  85. package/dist/artifacts/ArtifactPaths.js +6 -8
  86. package/dist/artifacts/ArtifactProvider.js +94 -41
  87. package/dist/artifacts/AsarArtifactReader.js +19 -4
  88. package/dist/artifacts/KeyedArchiveReader.js +110 -0
  89. package/dist/artifacts/MachOSliceArtifactReader.js +53 -5
  90. package/dist/artifacts/ZipArtifactReader.js +18 -1
  91. package/dist/browser/BrowserScenarioSecrets.js +28 -1
  92. package/dist/browser/CdpBrowserProvider.js +36 -15
  93. package/dist/browser/CdpCaptureDocuments.js +22 -8
  94. package/dist/browser/CdpCaptureEventHandlers.js +14 -5
  95. package/dist/browser/CdpCaptureEventHelpers.js +13 -0
  96. package/dist/browser/CdpCaptureEvents.js +10 -1
  97. package/dist/browser/CdpElectronInspection.js +5 -10
  98. package/dist/browser/CdpElectronProvider.js +1 -5
  99. package/dist/browser/CdpElectronScripts.js +1 -1
  100. package/dist/browser/CdpEndpoint.js +3 -2
  101. package/dist/browser/CdpObservationSession.js +14 -10
  102. package/dist/browser/CdpPageCapture.js +1 -1
  103. package/dist/browser/CdpPageCaptureScripts.js +1 -1
  104. package/dist/browser/CdpSafeMetadata.js +5 -4
  105. package/dist/browser/CdpScreenshot.js +16 -5
  106. package/dist/browser/CdpTargetSession.js +25 -4
  107. package/dist/browser/CdpWebMcpDiscovery.js +93 -20
  108. package/dist/browser/JavaScriptRuntimeScope.js +28 -2
  109. package/dist/browser/PlaywrightBrowserScenarioProvider.js +9 -8
  110. package/dist/browser/PlaywrightElectronActiveActions.js +3 -10
  111. package/dist/browser/PlaywrightElectronActiveProvider.js +5 -5
  112. package/dist/browser/PlaywrightScenarioActions.js +1 -1
  113. package/dist/browser/PlaywrightScenarioArtifacts.js +13 -25
  114. package/dist/browser/PlaywrightScenarioBrowser.js +28 -25
  115. package/dist/browser/PlaywrightScenarioEvents.js +82 -93
  116. package/dist/browser/PlaywrightScenarioSession.js +27 -123
  117. package/dist/browser/PngVisualDiff.js +22 -3
  118. package/dist/browser/V8InspectorCaptureProjection.js +7 -1
  119. package/dist/browser/V8InspectorProvider.js +60 -7
  120. package/dist/browser/WebSourceMapFetcher.js +99 -53
  121. package/dist/cli/artifactCommands.js +56 -12
  122. package/dist/cli/coreAnalysisCommands.js +110 -0
  123. package/dist/cli/managedCommands.js +1 -31
  124. package/dist/cli/setupCommands.js +16 -14
  125. package/dist/cli/utilityCommands.js +61 -4
  126. package/dist/cli.js +5 -7
  127. package/dist/cliApplicationCommands.js +0 -83
  128. package/dist/cliBrowserAdvancedCommands.js +7 -11
  129. package/dist/cliBrowserCommands.js +15 -23
  130. package/dist/cliBrowserContext.js +3 -24
  131. package/dist/cliBrowserScenarioCommands.js +2 -10
  132. package/dist/cliCommandNames.js +82 -7
  133. package/dist/cliElectronCommands.js +10 -36
  134. package/dist/cliJavaScriptRuntimeCommands.js +6 -30
  135. package/dist/cliJsonInput.js +4 -2
  136. package/dist/cliLogging.js +16 -7
  137. package/dist/cliObservationOptions.js +1 -1
  138. package/dist/cliOutput.js +2 -4
  139. package/dist/cliProcessCommands.js +6 -33
  140. package/dist/cliSetup.js +90 -160
  141. package/dist/config/environment.js +2 -78
  142. package/dist/config/parseConfig.js +18 -109
  143. package/dist/config/parsers.js +0 -23
  144. package/dist/contracts/applicationToolContracts.js +1 -118
  145. package/dist/contracts/artifactToolContracts.js +11 -19
  146. package/dist/contracts/browserScenarioToolContracts.js +1 -5
  147. package/dist/contracts/browserToolContracts.js +9 -16
  148. package/dist/contracts/electronToolContracts.js +5 -6
  149. package/dist/contracts/enhancedInputs.js +3 -2
  150. package/dist/contracts/errorSchemas.js +16 -40
  151. package/dist/contracts/functionWorkflowToolContracts.js +2 -2
  152. package/dist/contracts/javascriptApplicationWorkflowExamples.js +2 -2
  153. package/dist/contracts/javascriptRuntimeObservationToolContracts.js +4 -4
  154. package/dist/contracts/javascriptRuntimeReconciliationExample.js +1 -1
  155. package/dist/contracts/managedToolContracts.js +7 -4
  156. package/dist/contracts/managedWorkflowExamples.js +0 -22
  157. package/dist/contracts/managedWorkflowToolContracts.js +16 -31
  158. package/dist/contracts/nativeToolContracts.js +9 -0
  159. package/dist/contracts/promptContracts.js +6 -6
  160. package/dist/contracts/sessionToolSchemas.js +3 -3
  161. package/dist/contracts/toolContractExamples.js +4 -3
  162. package/dist/contracts/toolContracts.js +18 -7
  163. package/dist/contracts/toolEffects.js +34 -21
  164. package/dist/contracts/toolOutputSchemaGroups.js +18 -5
  165. package/dist/contracts/toolOutputSchemaPrimitives.js +9 -6
  166. package/dist/contracts/toolSchemaMetadata.js +5 -8
  167. package/dist/doctorRuntime.js +0 -41
  168. package/dist/domain/analysisErrorPresentation.js +4 -28
  169. package/dist/domain/analysisErrorProjection.js +33 -50
  170. package/dist/domain/analysisProfile.js +1 -1
  171. package/dist/domain/analysisSnapshot.js +77 -3
  172. package/dist/domain/androidApplication.js +5 -4
  173. package/dist/domain/appleApplication.js +5 -4
  174. package/dist/domain/appleAssetCatalog.js +127 -0
  175. package/dist/domain/artifactComparison.js +7 -11
  176. package/dist/domain/artifactGraph.js +8 -6
  177. package/dist/domain/artifactInspection.js +13 -12
  178. package/dist/domain/binaryTarget.js +23 -9
  179. package/dist/domain/browserObservation.js +43 -24
  180. package/dist/domain/browserObservationSchemas.js +2 -1
  181. package/dist/domain/browserScenario.js +7 -107
  182. package/dist/domain/browserScenarioCapture.js +0 -1
  183. package/dist/domain/browserScenarioCaptureValues.js +5 -4
  184. package/dist/domain/browserScenarioDiff.js +1 -3
  185. package/dist/domain/browserScenarioValues.js +16 -107
  186. package/dist/domain/bundleComparison.js +18 -17
  187. package/dist/domain/callPathSchemas.js +17 -7
  188. package/dist/domain/changedBehavior.js +2 -3
  189. package/dist/domain/comparisonSemantics.js +19 -0
  190. package/dist/domain/completionLedgerGeneration.js +3 -2
  191. package/dist/domain/conformancePackage.js +2 -1
  192. package/dist/domain/conformanceTrustGate.js +3 -5
  193. package/dist/domain/customProtocolCapture.js +2 -2
  194. package/dist/domain/digests.js +30 -0
  195. package/dist/domain/dosMz.js +83 -0
  196. package/dist/domain/electronActiveObservation.js +7 -5
  197. package/dist/domain/electronObservation.js +3 -2
  198. package/dist/domain/electronStaticAnalysisNative.js +15 -6
  199. package/dist/domain/emptyArraySchema.js +3 -0
  200. package/dist/domain/errors.js +10 -28
  201. package/dist/domain/evidence.js +5 -3
  202. package/dist/domain/evidenceCompletionLedger.js +3 -2
  203. package/dist/domain/functionComparisonNormalization.js +24 -18
  204. package/dist/domain/functionComparisonResults.js +3 -7
  205. package/dist/domain/functionComparisonSchemas.js +3 -2
  206. package/dist/domain/hopperValues.js +108 -8
  207. package/dist/domain/javascriptApplicationAnalysis.js +4 -7
  208. package/dist/domain/javascriptApplicationEvidenceSchemas.js +4 -3
  209. package/dist/domain/javascriptApplicationGraphSchemas.js +8 -7
  210. package/dist/domain/javascriptApplicationVersionComparisonSchemas.js +9 -7
  211. package/dist/domain/javascriptApplicationVersionItems.js +12 -18
  212. package/dist/domain/javascriptAstValues.js +4 -0
  213. package/dist/domain/javascriptExportShapeComparison.js +1 -6
  214. package/dist/domain/javascriptExportShapeComparisonSchemas.js +6 -10
  215. package/dist/domain/javascriptExportShapeVariants.js +15 -2
  216. package/dist/domain/javascriptFeatureTraceSchemas.js +8 -7
  217. package/dist/domain/javascriptRuntimeObservation.js +14 -2
  218. package/dist/domain/javascriptRuntimeReconciliationMatching.js +8 -0
  219. package/dist/domain/javascriptRuntimeReconciliationParsing.js +4 -2
  220. package/dist/domain/javascriptRuntimeReconciliationResult.js +6 -4
  221. package/dist/domain/javascriptRuntimeReconciliationRuntime.js +15 -4
  222. package/dist/domain/javascriptRuntimeReconciliationSchemas.js +19 -18
  223. package/dist/domain/javascriptRuntimeStaticCandidates.js +18 -6
  224. package/dist/domain/javascriptSemanticAnalysis.js +57 -19
  225. package/dist/domain/javascriptSemanticAsyncEffects.js +39 -40
  226. package/dist/domain/javascriptSemanticCalls.js +46 -27
  227. package/dist/domain/javascriptSemanticChildProcesses.js +43 -50
  228. package/dist/domain/javascriptSemanticDataEffectHelpers.js +91 -18
  229. package/dist/domain/javascriptSemanticDataEffects.js +22 -10
  230. package/dist/domain/javascriptSemanticGraphSchemas.js +8 -6
  231. package/dist/domain/javascriptSemanticObjects.js +13 -3
  232. package/dist/domain/javascriptSemanticProjection.js +144 -38
  233. package/dist/domain/javascriptSemanticPromises.js +14 -27
  234. package/dist/domain/javascriptSemanticQuerySchemas.js +6 -9
  235. package/dist/domain/javascriptSemanticResources.js +2 -5
  236. package/dist/domain/javascriptSemanticState.js +4 -0
  237. package/dist/domain/javascriptSemanticTraceSchemas.js +2 -1
  238. package/dist/domain/javascriptSemanticTraversal.js +13 -5
  239. package/dist/domain/javascriptSemanticValues.js +10 -9
  240. package/dist/domain/javascriptSourceParser.js +5 -1
  241. package/dist/domain/javascriptStaticAnalysisCalls.js +8 -5
  242. package/dist/domain/javascriptStaticAnalysisHelpers.js +16 -7
  243. package/dist/domain/keyedArchive.js +181 -0
  244. package/dist/domain/managedApplicationGraph.js +4 -3
  245. package/dist/domain/managedArtifact.js +2 -1
  246. package/dist/domain/managedMemberComparison.js +18 -13
  247. package/dist/domain/managedMemberComparisonCoverage.js +2 -1
  248. package/dist/domain/managedMemberComparisonItems.js +27 -7
  249. package/dist/domain/managedMemberComparisonMatch.js +22 -6
  250. package/dist/domain/managedNativeVerificationMatch.js +2 -2
  251. package/dist/domain/managedNativeVerificationSchemas.js +7 -5
  252. package/dist/domain/managedReconstruction.js +6 -5
  253. package/dist/domain/nativeApiBoundary.js +7 -0
  254. package/dist/domain/nativeDataType.js +51 -0
  255. package/dist/domain/nativeInspection.js +0 -1
  256. package/dist/domain/nativeInstruction.js +82 -0
  257. package/dist/domain/nativeInvestigationGraph.js +9 -5
  258. package/dist/domain/nativeUiObservation.js +123 -0
  259. package/dist/domain/nativeValueFlow.js +17 -0
  260. package/dist/domain/nativeValueTrace.js +64 -0
  261. package/dist/domain/objcSwiftMetadata.js +39 -0
  262. package/dist/domain/peInspection.js +1 -0
  263. package/dist/domain/processCapture.js +5 -55
  264. package/dist/domain/processCaptureExample.js +0 -9
  265. package/dist/domain/processCaptureValidation.js +13 -144
  266. package/dist/domain/processComparison.js +3 -25
  267. package/dist/domain/processObservation.js +0 -29
  268. package/dist/domain/processScenario.js +28 -228
  269. package/dist/domain/processTraceDimensionProjection.js +0 -15
  270. package/dist/domain/processTraceEvaluation.js +0 -6
  271. package/dist/domain/protocolCapture.js +8 -36
  272. package/dist/domain/reconstructionCoverage.js +3 -2
  273. package/dist/domain/reconstructionObligationLedgerSchemas.js +4 -12
  274. package/dist/domain/reconstructionReadinessSchemas.js +4 -3
  275. package/dist/domain/reconstructionVerification.js +2 -1
  276. package/dist/domain/reconstructionVerificationSchemas.js +6 -13
  277. package/dist/domain/referenceSourceClassification.js +0 -110
  278. package/dist/domain/referenceSourceGraph.js +15 -5
  279. package/dist/domain/residualUnknown.js +3 -2
  280. package/dist/domain/runtimeIdentification.js +6 -5
  281. package/dist/domain/sourceMapContents.js +5 -0
  282. package/dist/domain/sourceToBundleComparison.js +3 -10
  283. package/dist/domain/sourceToBundleComparisonSchemas.js +7 -6
  284. package/dist/domain/sourceToBundleSignals.js +9 -3
  285. package/dist/domain/staticRuntimeCorrelation.js +5 -11
  286. package/dist/domain/webBundleAnalysis.js +17 -9
  287. package/dist/domain/webBundleAnalyzer.js +1 -1
  288. package/dist/domain/webCaptureDiff.js +5 -11
  289. package/dist/domain/webCaptureDiffSchemas.js +2 -1
  290. package/dist/domain/webMcpDiscovery.js +2 -1
  291. package/dist/dotnet/ManagedMemberInspectorCore.js +15 -7
  292. package/dist/dotnet/ManagedMemberInstructionDecoder.js +57 -40
  293. package/dist/dotnet/ManagedMemberRows.js +2 -0
  294. package/dist/dotnet/ManagedMethodBodyReader.js +15 -8
  295. package/dist/dotnet/ManagedPeReader.js +2 -0
  296. package/dist/generatedMcpToolCatalog.js +1 -1
  297. package/dist/generatedPackageMetadata.js +2 -2
  298. package/dist/ghidra/GhidraAnalysisProfile.js +15 -5
  299. package/dist/ghidra/GhidraClient.js +38 -8
  300. package/dist/ghidra/GhidraFunctionValues.js +56 -20
  301. package/dist/ghidra/GhidraInstallation.js +7 -4
  302. package/dist/ghidra/GhidraInventoryValues.js +44 -9
  303. package/dist/ghidra/GhidraLauncher.js +18 -3
  304. package/dist/ghidra/GhidraProvider.js +23 -2
  305. package/dist/ghidra/GhidraRequestQueue.js +45 -4
  306. package/dist/ghidra/GhidraSessionValues.js +5 -0
  307. package/dist/hopper/HopperAnalysisProfile.js +2 -0
  308. package/dist/hopper/HopperProvider.js +29 -6
  309. package/dist/hopper/HopperTargetLease.js +18 -4
  310. package/dist/logger.js +0 -13
  311. package/dist/main/messages.js +0 -1
  312. package/dist/main/reload.js +3 -32
  313. package/dist/main/shutdown.js +1 -2
  314. package/dist/main/transport.js +0 -17
  315. package/dist/main.js +0 -10
  316. package/dist/native/AppleDispatchMetadata.js +582 -0
  317. package/dist/native/AppleObjcProtocols.js +88 -0
  318. package/dist/native/AppleSwiftVtables.js +86 -0
  319. package/dist/native/CommandRunner.js +1 -1
  320. package/dist/native/NativeHostCapabilities.js +23 -0
  321. package/dist/native/NativeMacOSProvider.js +61 -9
  322. package/dist/native/NativeMachoInspection.js +39 -6
  323. package/dist/native/NativeUiHelperRuntime.js +42 -0
  324. package/dist/native/NativeUiObservation.js +174 -0
  325. package/dist/native/parsers/codesign.js +4 -1
  326. package/dist/native/parsers/dyldInfo.js +51 -25
  327. package/dist/native/parsers/lipo.js +13 -4
  328. package/dist/native/parsers/otool.js +84 -39
  329. package/dist/native/parsers/plist.js +2 -1
  330. package/dist/process/ExecFileOutput.js +5 -1
  331. package/dist/process/ProcessOwnership.js +69 -33
  332. package/dist/process/ProcessOwnershipObservation.js +31 -12
  333. package/dist/process/ProviderProcess.js +4 -2
  334. package/dist/reference/ReferenceSourceReaderEntries.js +48 -31
  335. package/dist/reference/ReferenceSourceReaderErrors.js +24 -0
  336. package/dist/reference/ReferenceSourceReaderFile.js +11 -5
  337. package/dist/reference/ReferenceSourceReaderValidate.js +22 -8
  338. package/dist/server/createServer.js +7 -62
  339. package/dist/server/registerApplicationTools/helpers.js +2 -9
  340. package/dist/server/registerApplicationTools.js +0 -4
  341. package/dist/server/registerArtifactComparisonTool.js +1 -1
  342. package/dist/server/registerBrowserScenarioTool.js +4 -2
  343. package/dist/server/registerBrowserTools.js +7 -7
  344. package/dist/server/registerBundleComparisonTool.js +1 -1
  345. package/dist/server/registerCloseLifecycleTool.js +1 -1
  346. package/dist/server/registerElectronTools.js +10 -4
  347. package/dist/server/registerEnhancedTools.js +20 -12
  348. package/dist/server/registerEvidenceTools.js +4 -28
  349. package/dist/server/registerFunctionComparisonTool.js +1 -1
  350. package/dist/server/registerInvestigationTools.js +6 -6
  351. package/dist/server/registerJavaScriptRuntimeObservationTools.js +2 -2
  352. package/dist/server/registerManagedTools.js +28 -14
  353. package/dist/server/registerManagedWorkflowTools.js +0 -2
  354. package/dist/server/registerProcessComparisonTool.js +1 -3
  355. package/dist/server/registerSessionRecordTools.js +9 -9
  356. package/dist/server/registerSessionStatusTool.js +1 -1
  357. package/dist/server/registerSessionTools.js +28 -57
  358. package/dist/server/sessionAvailabilityPolicy.js +2 -3
  359. package/dist/server/sessionToolPolicies.js +0 -4
  360. package/dist/server/toolResult.js +8 -10
  361. package/package.json +32 -22
  362. package/skills/reverse-engineer-anything/SKILL.md +15 -11
  363. package/skills/reverse-engineer-anything/references/evidence-workflows.md +3 -2
  364. package/skills/reverse-engineer-anything/references/javascript-applications.md +3 -2
  365. package/skills/reverse-engineer-anything/references/native-and-artifacts.md +8 -6
  366. package/skills/reverse-engineer-anything/references/runtime-observation.md +15 -11
  367. package/dist/application/CommandShimReplay.js +0 -152
  368. package/dist/application/ConfiguredRoots.js +0 -19
  369. package/dist/application/InstrumentedJavaScriptReplayHost.js +0 -36
  370. package/dist/application/JavaScriptReplayPermission.js +0 -16
  371. package/dist/application/JavaScriptReplayPlanning.js +0 -207
  372. package/dist/application/JavaScriptReplayService.js +0 -274
  373. package/dist/application/LoopbackReplay.js +0 -389
  374. package/dist/application/LoopbackReplayRecorder.js +0 -129
  375. package/dist/application/ManagedRuntimeCorrelationService.js +0 -104
  376. package/dist/application/NodeRuntimeCharacterizationService.js +0 -191
  377. package/dist/application/PermissionAuthority.js +0 -268
  378. package/dist/application/PermissionConfiguration.js +0 -26
  379. package/dist/application/PermissionFailure.js +0 -5
  380. package/dist/application/ProcessCaptureAuthority.js +0 -24
  381. package/dist/application/ProcessCapturePermission.js +0 -13
  382. package/dist/application/ProcessCheckpoints.js +0 -178
  383. package/dist/application/ProcessReactiveCoordinator.js +0 -223
  384. package/dist/application/ProcessReactiveEffects.js +0 -153
  385. package/dist/application/ProcessReactiveHarness.js +0 -106
  386. package/dist/application/ProcessReactiveObservations.js +0 -105
  387. package/dist/application/ProjectPermissionStore.js +0 -199
  388. package/dist/application/RuntimeExecutableDiagnostics.js +0 -198
  389. package/dist/application/Upgrade.js +0 -134
  390. package/dist/browser/SensitiveTextCapture.js +0 -8
  391. package/dist/cliPolicyCommands.js +0 -185
  392. package/dist/config/browserScenario.js +0 -77
  393. package/dist/config/electronAutomation.js +0 -35
  394. package/dist/config/javascriptReplay.js +0 -41
  395. package/dist/config/managedRuntime.js +0 -25
  396. package/dist/config/passiveObservation.js +0 -87
  397. package/dist/config/permissions.js +0 -23
  398. package/dist/config/processCapture.js +0 -47
  399. package/dist/contracts/replayMachineExample.js +0 -37
  400. package/dist/domain/javascriptExportInstrumentation.js +0 -95
  401. package/dist/domain/javascriptReplay.js +0 -360
  402. package/dist/domain/managedRuntimeCorrelation.js +0 -181
  403. package/dist/domain/nodeRuntimeCharacterization.js +0 -63
  404. package/dist/domain/permissionPolicy.js +0 -176
  405. package/dist/domain/processCaptureReactiveSchema.js +0 -68
  406. package/dist/domain/processCaptureReactiveValidation.js +0 -180
  407. package/dist/domain/processReactiveCheckpointDataflow.js +0 -32
  408. package/dist/domain/processReactiveMatching.js +0 -196
  409. package/dist/domain/processReactiveRuntime.js +0 -116
  410. package/dist/domain/processReactiveScenario.js +0 -296
  411. package/dist/domain/processReactiveScenarioPreflight.js +0 -95
  412. package/dist/domain/processReactiveTransition.js +0 -187
  413. package/dist/domain/replayMachine.js +0 -320
  414. package/dist/domain/replayMachineRun.js +0 -168
  415. package/dist/domain/replayMachineRuntime.js +0 -296
  416. package/dist/domain/replayMachineValues.js +0 -84
  417. package/dist/domain/runtimeCharacterization.js +0 -84
  418. package/dist/replay/JavaScriptReplayWorker.js +0 -382
  419. package/dist/replay/JavaScriptReplayWorkerTypes.js +0 -1
  420. package/dist/replay/LinuxJavaScriptReplayRunner.js +0 -216
  421. package/dist/replay/LinuxJavaScriptReplaySandbox.js +0 -121
  422. package/dist/replay/LinuxRuntimeClosure.js +0 -44
  423. package/dist/replay/LinuxSeccompPolicy.js +0 -40
  424. package/dist/replay/ReplayOutcome.js +0 -104
  425. package/dist/replay/ReplayProcessLifecycle.js +0 -96
  426. package/dist/replay/ReplaySeccompFile.js +0 -29
  427. package/dist/replay/ReplayWorkerProtocol.js +0 -58
  428. package/dist/replay/SystemJavaScriptReplayHost.js +0 -153
  429. package/dist/server/ProcessCaptureElicitation.js +0 -153
  430. package/dist/server/registerApplicationTools/characterization.js +0 -46
  431. package/dist/server/registerApplicationTools/controlledReplay.js +0 -31
  432. package/dist/server/registerManagedWorkflowTools/planManagedRuntimeCorrelation.js +0 -29
  433. package/dist/server/registerReplayMachineTool.js +0 -14
  434. package/skills/reverse-engineer-anything/references/controlled-replay.md +0 -12
@@ -1,187 +0,0 @@
1
- const createTransitionRecord = (input) => {
2
- const state = {
3
- sequence: input.sequence,
4
- transition_id: input.transition.id,
5
- state_before: input.stateBefore,
6
- trigger_event_ids: input.triggerEventIds,
7
- action_event_ids: input.effectResults.map(({ observation }) => observation.event_id),
8
- action_types: input.transition.actions.map(({ type }) => type),
9
- };
10
- return input.transition.target.kind === "finish"
11
- ? {
12
- ...state,
13
- state_after: null,
14
- outcome: input.transition.target.outcome,
15
- }
16
- : {
17
- ...state,
18
- state_after: input.transition.target.state,
19
- outcome: null,
20
- };
21
- };
22
- const counterValue = (counters, id) => counters.find((counter) => counter.id === id)?.count ?? 0;
23
- const incrementCounter = (counters, id) => {
24
- let found = false;
25
- const updated = counters.map((counter) => {
26
- if (counter.id !== id)
27
- return counter;
28
- found = true;
29
- return { id, count: counter.count + 1 };
30
- });
31
- return found ? updated : [...updated, { id, count: 1 }];
32
- };
33
- /** Commit one uniquely selected transition after its declarative effects succeed. */
34
- const applyProcessReactiveTransition = (input) => {
35
- if (input.effectResults.length !== input.transition.actions.length)
36
- throw new TypeError("Reactive transition effects do not match the admitted actions");
37
- const record = createTransitionRecord({
38
- sequence: input.snapshot.transitions.length,
39
- stateBefore: input.snapshot.active_state,
40
- transition: input.transition,
41
- triggerEventIds: input.triggerEventIds,
42
- effectResults: input.effectResults,
43
- });
44
- const outcome = record.outcome;
45
- const stateAfter = record.state_after;
46
- const consumed = new Set(input.snapshot.consumed_event_ids);
47
- for (const eventId of input.consumeEventIds)
48
- consumed.add(eventId);
49
- const checkpoints = [...input.snapshot.checkpoints];
50
- for (const [index, action] of input.transition.actions.entries()) {
51
- const effect = input.effectResults[index];
52
- if (effect === undefined)
53
- throw new TypeError("Reactive transition effect is missing");
54
- if (action.type === "checkpoint")
55
- checkpoints.push({
56
- name: action.name,
57
- event_id: effect.observation.event_id,
58
- capture_order: effect.observation.capture_order,
59
- });
60
- }
61
- const completedCaptureOrder = Math.max(input.observation.capture_order, ...input.effectResults.map(({ observation }) => observation.capture_order));
62
- const nextState = {
63
- ...input.snapshot,
64
- active_state: stateAfter ?? input.snapshot.active_state,
65
- state_entry_capture_order: stateAfter === null
66
- ? input.snapshot.state_entry_capture_order
67
- : completedCaptureOrder + 1,
68
- consumed_event_ids: [...consumed],
69
- transition_uses: incrementCounter(input.snapshot.transition_uses, input.transition.id),
70
- state_visits: stateAfter === null
71
- ? input.snapshot.state_visits
72
- : incrementCounter(input.snapshot.state_visits, stateAfter),
73
- checkpoints,
74
- transitions: [...input.snapshot.transitions, record],
75
- };
76
- let next = outcome === null
77
- ? { ...nextState, status: "running", outcome: null }
78
- : { ...nextState, status: "finished", outcome };
79
- if (stateAfter !== null) {
80
- const nextState = input.scenario.states.find(({ id }) => id === stateAfter);
81
- if (nextState === undefined ||
82
- counterValue(next.state_visits, stateAfter) > nextState.max_visits)
83
- next = { ...next, status: "finished", outcome: "capture_incomplete" };
84
- }
85
- return next.outcome === "capture_incomplete"
86
- ? {
87
- kind: "finished",
88
- snapshot: next,
89
- evaluations: input.evaluations,
90
- outcome: next.outcome,
91
- }
92
- : {
93
- kind: "transition",
94
- snapshot: next,
95
- evaluations: input.evaluations,
96
- record,
97
- };
98
- };
99
- const terminalControlObservationMatches = (action, payload) => {
100
- if (action.type === "resize")
101
- return (payload["type"] === "resize" &&
102
- payload["data"] === `${String(action.columns)}x${String(action.rows)}`);
103
- if (action.type === "close_stdin")
104
- return payload["type"] === "stdin_close" && payload["data"] === "";
105
- return payload["type"] === "signal" && payload["data"] === action.signal;
106
- };
107
- const effectObservationMatchesAction = (action, observation, committedSensitiveInputs) => {
108
- const payload = typeof observation.payload === "object" &&
109
- observation.payload !== null &&
110
- !Array.isArray(observation.payload)
111
- ? observation.payload
112
- : null;
113
- const journalIdentityMatches = observation.source_sequence === observation.location.index &&
114
- observation.capture_order === observation.location.capture_order &&
115
- observation.event_id ===
116
- `obs.${observation.location.collection}.${String(observation.location.index)}`;
117
- if (!journalIdentityMatches || payload === null)
118
- return false;
119
- if (action.type === "checkpoint")
120
- return (observation.source === "filesystem" &&
121
- observation.location.collection === "filesystem_checkpoints" &&
122
- payload["name"] === action.name);
123
- if (observation.source !== "interaction" ||
124
- observation.location.collection !== "interaction_events" ||
125
- payload["outcome"] !== "dispatched")
126
- return false;
127
- if (action.type === "send_input")
128
- return (payload["type"] === "input" &&
129
- payload["data"] ===
130
- expectedInputEvidence(action.data, action.sensitive, committedSensitiveInputs));
131
- return terminalControlObservationMatches(action, payload);
132
- };
133
- const expectedInputEvidence = (data, sensitive, committedSensitiveInput) => !sensitive ||
134
- (committedSensitiveInput && /^<redacted-input:\d+-bytes>$/.test(data))
135
- ? data
136
- : `<redacted-input:${String(Buffer.byteLength(data))}-bytes>`;
137
- const failedProposal = (proposed, outcome) => ({
138
- kind: "finished",
139
- outcome,
140
- evaluations: proposed.evaluations,
141
- snapshot: { ...proposed.snapshot, status: "finished", outcome },
142
- });
143
- /** Commit a proposal only after the host reports every effect as successful. */
144
- export const commitProcessReactiveProposal = (scenario, proposed, results, options = {}) => {
145
- if (results.some(({ status }) => status === "target_lost"))
146
- return failedProposal(proposed, "target_lost");
147
- const state = scenario.states.find(({ id }) => id === proposed.snapshot.active_state);
148
- const transition = state?.on.find(({ id }) => id === proposed.proposal.transition_id);
149
- const observation = proposed.snapshot.observations.find(({ event_id }) => event_id === proposed.proposal.observation_event_id);
150
- if (transition === undefined ||
151
- observation === undefined ||
152
- canonicalize(transition) !== proposed.proposal.transition_identity ||
153
- canonicalize(proposed.effects) !== canonicalize(transition.actions))
154
- return failedProposal(proposed, "target_lost");
155
- if (results.length !== transition.actions.length ||
156
- results.some(({ status }) => status === "rejected"))
157
- return failedProposal(proposed, "action_rejected");
158
- const succeeded = results.filter((result) => result.status === "succeeded");
159
- let previousOrder = proposed.snapshot.observations.find(({ event_id }) => event_id === proposed.proposal.observation_event_id)?.capture_order ?? -1;
160
- const knownEventIds = new Set([
161
- ...proposed.snapshot.observations.map(({ event_id }) => event_id),
162
- ...proposed.snapshot.transitions.flatMap(({ action_event_ids }) => action_event_ids),
163
- ]);
164
- for (const [index, result] of succeeded.entries()) {
165
- const action = transition.actions[index];
166
- const effectObservation = result.observation;
167
- if (action === undefined ||
168
- !effectObservationMatchesAction(action, effectObservation, options.committedSensitiveInputs ?? false) ||
169
- !Number.isSafeInteger(effectObservation.capture_order) ||
170
- effectObservation.capture_order <= previousOrder ||
171
- knownEventIds.has(effectObservation.event_id))
172
- return failedProposal(proposed, "action_rejected");
173
- knownEventIds.add(effectObservation.event_id);
174
- previousOrder = effectObservation.capture_order;
175
- }
176
- return applyProcessReactiveTransition({
177
- scenario,
178
- snapshot: proposed.snapshot,
179
- observation,
180
- transition,
181
- triggerEventIds: proposed.proposal.trigger_event_ids,
182
- consumeEventIds: proposed.proposal.consume_event_ids,
183
- effectResults: succeeded,
184
- evaluations: proposed.evaluations,
185
- });
186
- };
187
- import canonicalize from "canonicalize";
@@ -1,320 +0,0 @@
1
- import { MultiDirectedGraph } from "graphology";
2
- import { singleSource } from "graphology-shortest-path";
3
- import canonicalize from "canonicalize";
4
- import { z } from "zod";
5
- const replayIdentifierSchema = z.string().regex(/^[A-Za-z][A-Za-z0-9_-]*$/u);
6
- const replayPathSchema = z.array(z.union([z.string(), z.number().int().nonnegative()]));
7
- const sensitiveHeaderNames = new Set([
8
- "authorization",
9
- "cookie",
10
- "proxy-authorization",
11
- "set-cookie",
12
- ]);
13
- const headerNameSchema = z
14
- .string()
15
- .min(1)
16
- .regex(/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u);
17
- const headerValueSchema = z.string().regex(/^[\t\x20-\x7e\x80-\xff]*$/u);
18
- const replayHeaderMatchersSchema = z
19
- .record(headerNameSchema, headerValueSchema)
20
- .superRefine((headers, context) => {
21
- const names = Object.keys(headers).map((name) => name.toLowerCase());
22
- if (new Set(names).size !== names.length)
23
- context.addIssue({
24
- code: "custom",
25
- message: "replay header matchers must be unique ignoring case",
26
- input: headers,
27
- });
28
- if (names.some((name) => sensitiveHeaderNames.has(name)))
29
- context.addIssue({
30
- code: "custom",
31
- message: "replay header matchers cannot persist authorization or cookie values; capture and guard through a secret alias instead",
32
- input: headers,
33
- });
34
- })
35
- .transform((headers) => Object.fromEntries(Object.entries(headers).map(([name, value]) => [
36
- name.toLowerCase(),
37
- value,
38
- ])));
39
- const replayValueSourceSchema = z.discriminatedUnion("source", [
40
- z.strictObject({
41
- source: z.literal("request_header"),
42
- name: z
43
- .string()
44
- .min(1)
45
- .transform((name) => name.toLowerCase()),
46
- }),
47
- z.strictObject({ source: z.literal("request_json"), path: replayPathSchema }),
48
- z.strictObject({
49
- source: z.literal("websocket_json"),
50
- path: replayPathSchema,
51
- }),
52
- z.strictObject({ source: z.literal("action_json"), path: replayPathSchema }),
53
- ]);
54
- const replayTriggerSchema = z.discriminatedUnion("protocol", [
55
- z.strictObject({
56
- protocol: z.literal("http"),
57
- method: z
58
- .string()
59
- .min(1)
60
- .transform((method) => method.toUpperCase()),
61
- path: z.string().startsWith("/"),
62
- headers: replayHeaderMatchersSchema.default({}),
63
- body: z.string().nullable().default(null),
64
- }),
65
- z.strictObject({
66
- protocol: z.literal("websocket_connect"),
67
- path: z.string().startsWith("/"),
68
- headers: replayHeaderMatchersSchema.default({}),
69
- }),
70
- z.strictObject({
71
- protocol: z.literal("websocket_message"),
72
- path: z.string().startsWith("/"),
73
- body: z.string().nullable().default(null),
74
- }),
75
- ]);
76
- const replayActionSchema = z.discriminatedUnion("type", [
77
- z.strictObject({
78
- type: z.literal("http_response"),
79
- status: z.number().int().min(100).max(599),
80
- headers: z.record(headerNameSchema, headerValueSchema).default({}),
81
- body: z.string(),
82
- }),
83
- z.strictObject({
84
- type: z.literal("websocket_send"),
85
- data: z.string(),
86
- }),
87
- z.strictObject({ type: z.literal("disconnect") }),
88
- z.strictObject({
89
- type: z.literal("delay"),
90
- duration_ms: z.number().int().safe().nonnegative(),
91
- }),
92
- ]);
93
- const replayTransitionSchema = z.strictObject({
94
- id: replayIdentifierSchema,
95
- from: replayIdentifierSchema,
96
- to: replayIdentifierSchema,
97
- priority: z.number().int().min(0).default(100),
98
- trigger: replayTriggerSchema,
99
- guards: z
100
- .array(z.strictObject({
101
- variable: replayIdentifierSchema,
102
- value: replayValueSourceSchema,
103
- }))
104
- .default([]),
105
- captures: z
106
- .array(z.strictObject({
107
- variable: replayIdentifierSchema,
108
- value: replayValueSourceSchema,
109
- sensitive: z.boolean().default(false),
110
- }))
111
- .default([]),
112
- actions: z.array(replayActionSchema).min(1),
113
- max_uses: z.number().int().min(1),
114
- });
115
- const transitionSignature = (transition) => {
116
- const signature = canonicalize({
117
- from: transition.from,
118
- priority: transition.priority,
119
- trigger: transition.trigger,
120
- });
121
- if (signature === undefined)
122
- throw new TypeError("Replay transition signature is not canonical JSON");
123
- return signature;
124
- };
125
- const replayMachineBaseSchema = z.strictObject({
126
- initial_state: replayIdentifierSchema,
127
- states: z
128
- .array(z.strictObject({
129
- name: replayIdentifierSchema,
130
- terminal: z.boolean().default(false),
131
- max_visits: z.number().int().min(1).default(100_000),
132
- }))
133
- .min(1),
134
- transitions: z.array(replayTransitionSchema).min(1),
135
- max_transitions: z.number().int().min(1),
136
- limits: z
137
- .strictObject({
138
- connections: z.number().int().min(1).default(100),
139
- messages: z.number().int().min(1).default(10_000),
140
- bytes: z.number().int().min(1).default(1_000_000),
141
- duration_ms: z.number().int().min(1).default(30_000),
142
- })
143
- .default({
144
- connections: 100,
145
- messages: 10_000,
146
- bytes: 1_000_000,
147
- duration_ms: 30_000,
148
- }),
149
- });
150
- const validateReplayIdentities = (machine, context) => {
151
- const names = machine.states.map(({ name }) => name);
152
- const nameSet = new Set(names);
153
- if (nameSet.size !== names.length)
154
- context.addIssue({
155
- code: "custom",
156
- message: "replay machine state names must be unique",
157
- path: ["states"],
158
- input: machine,
159
- });
160
- if (!nameSet.has(machine.initial_state))
161
- context.addIssue({
162
- code: "custom",
163
- message: "replay machine initial state is not declared",
164
- path: ["initial_state"],
165
- input: machine,
166
- });
167
- const transitionIds = machine.transitions.map(({ id }) => id);
168
- if (new Set(transitionIds).size !== transitionIds.length)
169
- context.addIssue({
170
- code: "custom",
171
- message: "replay machine transition IDs must be unique",
172
- path: ["transitions"],
173
- input: machine,
174
- });
175
- const signatures = machine.transitions.map(transitionSignature);
176
- if (new Set(signatures).size !== signatures.length)
177
- context.addIssue({
178
- code: "custom",
179
- message: "replay machine transitions with the same state, trigger, and priority are ambiguous",
180
- path: ["transitions"],
181
- input: machine,
182
- });
183
- return nameSet;
184
- };
185
- const validateReplayVariables = (machine, context) => {
186
- const capturedVariables = new Map();
187
- for (const [transitionIndex, transition] of machine.transitions.entries()) {
188
- for (const capture of transition.captures) {
189
- if (capture.sensitive && capture.value.source === "action_json")
190
- context.addIssue({
191
- code: "custom",
192
- message: "sensitive replay captures cannot read literal action JSON persisted in the replay plan",
193
- path: ["transitions", transitionIndex, "captures"],
194
- input: machine,
195
- });
196
- const sensitivity = capturedVariables.get(capture.variable);
197
- if (sensitivity !== undefined && sensitivity !== capture.sensitive)
198
- context.addIssue({
199
- code: "custom",
200
- message: "a replay variable cannot change secret classification between captures",
201
- path: ["transitions", transitionIndex, "captures"],
202
- input: machine,
203
- });
204
- capturedVariables.set(capture.variable, capture.sensitive);
205
- }
206
- }
207
- const availableByState = new Map([
208
- [machine.initial_state, new Set()],
209
- ]);
210
- let changed = true;
211
- while (changed) {
212
- changed = false;
213
- for (const transition of machine.transitions) {
214
- const available = availableByState.get(transition.from);
215
- if (available === undefined ||
216
- transition.guards.some(({ variable }) => !available.has(variable)))
217
- continue;
218
- const nextAvailable = new Set(available);
219
- for (const { variable } of transition.captures)
220
- nextAvailable.add(variable);
221
- const existing = availableByState.get(transition.to);
222
- if (existing === undefined) {
223
- availableByState.set(transition.to, nextAvailable);
224
- changed = true;
225
- continue;
226
- }
227
- for (const variable of nextAvailable)
228
- if (!existing.has(variable)) {
229
- existing.add(variable);
230
- changed = true;
231
- }
232
- }
233
- }
234
- for (const [transitionIndex, transition] of machine.transitions.entries())
235
- for (const [guardIndex, guard] of transition.guards.entries())
236
- if (!availableByState.get(transition.from)?.has(guard.variable))
237
- context.addIssue({
238
- code: "custom",
239
- message: "replay guard variable is not captured on an executable path before use",
240
- path: ["transitions", transitionIndex, "guards", guardIndex],
241
- input: machine,
242
- });
243
- };
244
- const validateReplayActions = (machine, context) => {
245
- for (const [index, transition] of machine.transitions.entries()) {
246
- const httpResponses = transition.actions.filter(({ type }) => type === "http_response").length;
247
- const websocketSends = transition.actions.some(({ type }) => type === "websocket_send");
248
- const invalid = transition.trigger.protocol === "http"
249
- ? httpResponses !== 1 || websocketSends
250
- : httpResponses !== 0;
251
- if (invalid)
252
- context.addIssue({
253
- code: "custom",
254
- message: "replay actions must match the transition protocol and HTTP transitions require exactly one response",
255
- path: ["transitions", index, "actions"],
256
- input: machine,
257
- });
258
- }
259
- };
260
- const validateReplayGraph = (machine, names, context) => {
261
- const graph = new MultiDirectedGraph();
262
- for (const name of names)
263
- graph.addNode(name);
264
- for (const [index, transition] of machine.transitions.entries()) {
265
- if (!names.has(transition.from) || !names.has(transition.to)) {
266
- context.addIssue({
267
- code: "custom",
268
- message: "replay machine transition references an unknown state",
269
- path: ["transitions", index],
270
- input: machine,
271
- });
272
- continue;
273
- }
274
- graph.addDirectedEdgeWithKey(`${transition.id}:${String(index)}`, transition.from, transition.to);
275
- }
276
- if (!graph.hasNode(machine.initial_state))
277
- return;
278
- if (!machine.states.some(({ terminal }) => terminal))
279
- context.addIssue({
280
- code: "custom",
281
- message: "replay machine must declare at least one terminal state",
282
- path: ["states"],
283
- input: machine,
284
- });
285
- const reachable = new Set(Object.keys(singleSource(graph, machine.initial_state)));
286
- reachable.add(machine.initial_state);
287
- for (const [index, state] of machine.states.entries()) {
288
- if (!reachable.has(state.name))
289
- context.addIssue({
290
- code: "custom",
291
- message: "replay machine state is unreachable from the initial state",
292
- path: ["states", index],
293
- input: machine,
294
- });
295
- if (state.terminal && graph.outDegree(state.name) > 0)
296
- context.addIssue({
297
- code: "custom",
298
- message: "terminal replay machine state cannot have outgoing transitions",
299
- path: ["states", index],
300
- input: machine,
301
- });
302
- if (!state.terminal && graph.outDegree(state.name) === 0)
303
- context.addIssue({
304
- code: "custom",
305
- message: "non-terminal replay machine state has no outgoing transition",
306
- path: ["states", index],
307
- input: machine,
308
- });
309
- }
310
- };
311
- /** Portable finite replay machine with no executable callbacks. */
312
- export const replayMachineSchema = z
313
- .object(replayMachineBaseSchema.shape)
314
- .strict()
315
- .superRefine((machine, context) => {
316
- const names = validateReplayIdentities(machine, context);
317
- validateReplayVariables(machine, context);
318
- validateReplayActions(machine, context);
319
- validateReplayGraph(machine, names, context);
320
- });
@@ -1,168 +0,0 @@
1
- import { z } from "zod";
2
- import { replayMachineSchema } from "./replayMachine.js";
3
- import { replayMachineEventSchema, ReplayMachineRuntime, } from "./replayMachineRuntime.js";
4
- const refusalOutcomeSchema = z.enum([
5
- "unmatched",
6
- "invalid_state",
7
- "guard_failed",
8
- "transition_exhausted",
9
- "invalid_capture",
10
- "unexpected_reconnect",
11
- "limit_exhausted",
12
- ]);
13
- /** Complete declarative input for one direct replay-machine run. */
14
- export const replayMachineRunInputSchema = z.strictObject({
15
- machine: replayMachineSchema,
16
- events: z.array(replayMachineEventSchema),
17
- });
18
- const replayMachineRunDecisionSchema = z.strictObject({
19
- event_sequence: z.number().int().nonnegative(),
20
- outcome: z.union([z.literal("matched"), refusalOutcomeSchema]),
21
- transition_sequence: z.number().int().nonnegative().nullable(),
22
- });
23
- const replayRunActionSchema = z.discriminatedUnion("type", [
24
- z.strictObject({
25
- type: z.literal("http_response"),
26
- status: z.number().int().min(100).max(599),
27
- headers: z.record(z
28
- .string()
29
- .min(1)
30
- .regex(/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u), z.string()),
31
- body: z.string(),
32
- }),
33
- z.strictObject({
34
- type: z.literal("websocket_send"),
35
- data: z.string(),
36
- }),
37
- z.strictObject({ type: z.literal("disconnect") }),
38
- z.strictObject({
39
- type: z.literal("delay"),
40
- duration_ms: z.number().int().nonnegative(),
41
- }),
42
- ]);
43
- const replayRunIdentifierSchema = z
44
- .string()
45
- .regex(/^[A-Za-z][A-Za-z0-9_-]{0,63}$/u);
46
- const replayMachineRunJournalEntrySchema = z.strictObject({
47
- sequence: z.number().int().nonnegative(),
48
- at_ms: z.number().int().nonnegative(),
49
- transition_id: replayRunIdentifierSchema,
50
- state_before: replayRunIdentifierSchema,
51
- state_after: replayRunIdentifierSchema,
52
- captured_aliases: z.array(z.strictObject({
53
- name: replayRunIdentifierSchema,
54
- sensitive: z.boolean(),
55
- })),
56
- });
57
- /** Capture-value-free result of directly evaluating a finite replay machine. */
58
- export const replayMachineRunOutputSchema = z.strictObject({
59
- initial_state: replayRunIdentifierSchema,
60
- final_state: replayRunIdentifierSchema,
61
- terminal: z.boolean(),
62
- decisions: z.array(replayMachineRunDecisionSchema),
63
- transition_journal: z.array(replayMachineRunJournalEntrySchema),
64
- transition_actions: z.array(z.strictObject({
65
- transition_id: replayRunIdentifierSchema,
66
- actions: z.array(replayRunActionSchema),
67
- })),
68
- limits: z.strictObject({
69
- configured: z.strictObject({
70
- transitions: z.number().int().positive(),
71
- connections: z.number().int().positive(),
72
- messages: z.number().int().positive(),
73
- bytes: z.number().int().positive(),
74
- duration_ms: z.number().int().positive(),
75
- }),
76
- usage: z.strictObject({
77
- offered_events: z.number().int().nonnegative(),
78
- admitted_events: z.number().int().nonnegative(),
79
- transitions: z.number().int().nonnegative(),
80
- connections: z.number().int().nonnegative(),
81
- messages: z.number().int().nonnegative(),
82
- bytes: z.number().int().nonnegative(),
83
- last_at_ms: z.number().int().nonnegative(),
84
- }),
85
- }),
86
- });
87
- const redactAction = (runtime, action) => {
88
- switch (action.type) {
89
- case "http_response":
90
- return {
91
- ...action,
92
- headers: Object.fromEntries(Object.entries(action.headers).map(([name, value]) => [
93
- name,
94
- runtime.redactField(value),
95
- ])),
96
- body: runtime.redactField(action.body),
97
- };
98
- case "websocket_send":
99
- return { ...action, data: runtime.redactField(action.data) };
100
- case "delay":
101
- case "disconnect":
102
- return action;
103
- }
104
- };
105
- /** Evaluate every supplied event in order without opening sockets or processes. */
106
- export const runReplayMachine = (input) => {
107
- const runtime = new ReplayMachineRuntime(input.machine);
108
- const decisions = [];
109
- const transitionJournal = [];
110
- const usedTransitionIds = new Set();
111
- const transitionById = new Map(input.machine.transitions.map((transition) => [transition.id, transition]));
112
- for (const [eventSequence, event] of input.events.entries()) {
113
- const decision = runtime.dispatch(event);
114
- decisions.push({
115
- event_sequence: eventSequence,
116
- outcome: decision.outcome,
117
- transition_sequence: decision.transition?.sequence ?? null,
118
- });
119
- if (decision.outcome !== "matched")
120
- continue;
121
- usedTransitionIds.add(decision.transition.transition_id);
122
- const definition = transitionById.get(decision.transition.transition_id);
123
- if (definition === undefined)
124
- throw new TypeError("Replay runtime selected an unknown transition");
125
- transitionJournal.push({
126
- sequence: decision.transition.sequence,
127
- at_ms: decision.transition.at_ms,
128
- transition_id: decision.transition.transition_id,
129
- state_before: decision.transition.state_before,
130
- state_after: decision.transition.state_after,
131
- captured_aliases: definition.captures.map(({ variable, sensitive }) => ({
132
- name: variable,
133
- sensitive,
134
- })),
135
- });
136
- }
137
- const usage = runtime.usage;
138
- const transitionActions = input.machine.transitions
139
- .filter(({ id }) => usedTransitionIds.has(id))
140
- .map(({ id, actions }) => ({
141
- transition_id: id,
142
- actions: actions.map((action) => redactAction(runtime, action)),
143
- }));
144
- return replayMachineRunOutputSchema.parse({
145
- initial_state: input.machine.initial_state,
146
- final_state: runtime.state,
147
- terminal: input.machine.states.find(({ name }) => name === runtime.state)
148
- ?.terminal ?? false,
149
- decisions,
150
- transition_journal: transitionJournal,
151
- transition_actions: transitionActions,
152
- limits: {
153
- configured: {
154
- transitions: input.machine.max_transitions,
155
- ...input.machine.limits,
156
- },
157
- usage: {
158
- offered_events: input.events.length,
159
- admitted_events: usage.events,
160
- transitions: usage.transitions,
161
- connections: usage.connections,
162
- messages: usage.messages,
163
- bytes: usage.bytes,
164
- last_at_ms: usage.last_at_ms,
165
- },
166
- },
167
- });
168
- };