rea-agents 4.1.0 → 5.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (577) hide show
  1. package/README.md +184 -86
  2. package/bridge/android/ReaJadxBridge.java +247 -0
  3. package/bridge/native/NativeUIChildren.swift +27 -0
  4. package/bridge/native/ReaNativeUI.swift +30 -16
  5. package/dist/android/AndroidTargetSnapshot.js +5 -3
  6. package/dist/android/JadxAnalysis.js +8 -6
  7. package/dist/android/JadxConfiguration.js +19 -3
  8. package/dist/android/JadxMcpTransport.js +43 -16
  9. package/dist/android/JadxProtocol.js +8 -0
  10. package/dist/android/JadxProvider.js +117 -28
  11. package/dist/android/JadxRelease.js +8 -0
  12. package/dist/android/JadxSession.js +32 -18
  13. package/dist/application/AppBundleExecutable.js +141 -0
  14. package/dist/application/ArtifactInventory/classify.js +1 -1
  15. package/dist/application/ArtifactInventory/scanCanonical.js +1 -1
  16. package/dist/application/ArtifactInventory/scanReader.js +1 -1
  17. package/dist/application/ArtifactInventory.js +1 -1
  18. package/dist/application/BinaryTargetResolver.js +9 -64
  19. package/dist/application/CapabilityInventory.js +61 -3
  20. package/dist/application/ClientConfigurationDocument.js +72 -12
  21. package/dist/application/ClientRegistrationStatus.js +7 -8
  22. package/dist/application/DirectAnalysis.js +12 -14
  23. package/dist/application/DirectAnalysisStatus.js +4 -5
  24. package/dist/application/DoctorDiagnostics.js +3 -3
  25. package/dist/application/EnhancedTools.js +4 -4
  26. package/dist/application/EvidenceBundleCommands.js +1 -1
  27. package/dist/application/FilesystemSnapshot.js +20 -5
  28. package/dist/application/InvestigationProviders.js +6 -0
  29. package/dist/application/LinuxHopper.js +8 -2
  30. package/dist/application/OptionalObservationProviders.js +3 -0
  31. package/dist/application/ProcessCaptureCapability.js +1 -1
  32. package/dist/application/ProcessCaptureLifecycle.js +2 -2
  33. package/dist/application/ProcessCli.js +5 -1
  34. package/dist/application/ProcessHarness.js +20 -9
  35. package/dist/application/ReconstructionCoverageService.js +2 -6
  36. package/dist/application/ReconstructionObligationCandidates.js +5 -2
  37. package/dist/application/ReferenceSourceImport.js +2 -0
  38. package/dist/application/ReferenceSourceImportEntries.js +20 -3
  39. package/dist/application/ReferenceSourceImportTypes.js +5 -0
  40. package/dist/application/Setup.js +10 -2
  41. package/dist/application/SetupClientConfiguration.js +19 -16
  42. package/dist/application/SetupHost.js +18 -3
  43. package/dist/application/SetupPlan.js +1 -1
  44. package/dist/application/Uninstall.js +23 -17
  45. package/dist/application/UpdateMaintenance.js +3 -3
  46. package/dist/application/ValidateSelectedWebScript.js +27 -0
  47. package/dist/application/WebModuleTraceService.js +209 -0
  48. package/dist/application/WebRuntimeService.js +73 -0
  49. package/dist/application/WebScriptExportService.js +115 -0
  50. package/dist/application/WebSourceLocationService.js +160 -0
  51. package/dist/application/{AndroidAnalysisService.js → android/AndroidAnalysisService.js} +6 -6
  52. package/dist/application/{AndroidApplicationService.js → android/AndroidApplicationService.js} +3 -3
  53. package/dist/application/{AppleApplicationService.js → apple/AppleApplicationService.js} +5 -5
  54. package/dist/application/{AnalysisClientCleanup.js → binary/AnalysisClientCleanup.js} +2 -2
  55. package/dist/application/{AnalysisProviderEvaluation.js → binary/AnalysisProviderEvaluation.js} +4 -4
  56. package/dist/application/{AnalysisProviderRegistry.js → binary/AnalysisProviderRegistry.js} +5 -5
  57. package/dist/application/{AnalysisSnapshotCache.js → binary/AnalysisSnapshotCache.js} +7 -9
  58. package/dist/application/{AnalysisSnapshotFiles.js → binary/AnalysisSnapshotFiles.js} +4 -4
  59. package/dist/application/{BinarySession.js → binary/BinarySession.js} +12 -10
  60. package/dist/application/{BinarySessionComposition.js → binary/BinarySessionComposition.js} +2 -1
  61. package/dist/application/{BinarySessionExecution.js → binary/BinarySessionExecution.js} +9 -7
  62. package/dist/application/{BinarySessionOpen.js → binary/BinarySessionOpen.js} +6 -6
  63. package/dist/application/{BinarySessionRecords.js → binary/BinarySessionRecords.js} +28 -40
  64. package/dist/application/{CompositeProvider.js → binary/CompositeProvider.js} +2 -2
  65. package/dist/application/{LazyAnalysisProvider.js → binary/LazyAnalysisProvider.js} +6 -6
  66. package/dist/application/{SessionProviderRouter.js → binary/SessionProviderRouter.js} +7 -7
  67. package/dist/application/{FirmwareAnalysisService.js → firmware/FirmwareAnalysisService.js} +5 -5
  68. package/dist/application/{EvidenceLedger.js → investigation/EvidenceLedger.js} +44 -7
  69. package/dist/application/investigation/InvestigationRecords.js +69 -0
  70. package/dist/application/{UnknownEvidence.js → investigation/UnknownEvidence.js} +1 -1
  71. package/dist/application/{ElectronActiveEvidence.js → javascript/ElectronActiveEvidence.js} +3 -3
  72. package/dist/application/javascript/ElectronActiveObservationPort.js +1 -0
  73. package/dist/application/{ElectronActiveObservationService.js → javascript/ElectronActiveObservationService.js} +3 -3
  74. package/dist/application/{ElectronBoundaryAnalysis.js → javascript/ElectronBoundaryAnalysis.js} +1 -1
  75. package/dist/application/{ElectronBoundaryGraphContext.js → javascript/ElectronBoundaryGraphContext.js} +1 -1
  76. package/dist/application/{ElectronEvidence.js → javascript/ElectronEvidence.js} +2 -2
  77. package/dist/application/javascript/ElectronObservationPort.js +1 -0
  78. package/dist/application/{ElectronObservationService.js → javascript/ElectronObservationService.js} +3 -3
  79. package/dist/application/{JavaScriptApplicationEvidence.js → javascript/JavaScriptApplicationEvidence.js} +3 -3
  80. package/dist/application/{JavaScriptApplicationEvidenceGraph.js → javascript/JavaScriptApplicationEvidenceGraph.js} +5 -5
  81. package/dist/application/{JavaScriptApplicationService.js → javascript/JavaScriptApplicationService.js} +10 -10
  82. package/dist/application/{JavaScriptApplicationWorkflowEvidence.js → javascript/JavaScriptApplicationWorkflowEvidence.js} +3 -3
  83. package/dist/application/{JavaScriptApplicationWorkflowService.js → javascript/JavaScriptApplicationWorkflowService.js} +12 -12
  84. package/dist/application/{JavaScriptArtifactAnalysis.js → javascript/JavaScriptArtifactAnalysis.js} +8 -24
  85. package/dist/application/javascript/JavaScriptArtifactAnalysisTypes.js +1 -0
  86. package/dist/application/{JavaScriptArtifactGraphAccumulator.js → javascript/JavaScriptArtifactGraphAccumulator.js} +16 -2
  87. package/dist/application/{JavaScriptArtifactGraphBuilder.js → javascript/JavaScriptArtifactGraphBuilder.js} +2 -2
  88. package/dist/application/{JavaScriptArtifactGraphContext.js → javascript/JavaScriptArtifactGraphContext.js} +1 -1
  89. package/dist/application/{JavaScriptArtifactGraphDocuments.js → javascript/JavaScriptArtifactGraphDocuments.js} +1 -1
  90. package/dist/application/{JavaScriptArtifactGraphFindings.js → javascript/JavaScriptArtifactGraphFindings.js} +20 -7
  91. package/dist/application/{JavaScriptArtifactGraphStructure.js → javascript/JavaScriptArtifactGraphStructure.js} +1 -1
  92. package/dist/application/{JavaScriptArtifactPathResolution.js → javascript/JavaScriptArtifactPathResolution.js} +6 -12
  93. package/dist/application/{JavaScriptArtifactReconstruction.js → javascript/JavaScriptArtifactReconstruction.js} +4 -8
  94. package/dist/application/{JavaScriptJsonModules.js → javascript/JavaScriptJsonModules.js} +1 -1
  95. package/dist/application/{JavaScriptModuleRelationships.js → javascript/JavaScriptModuleRelationships.js} +2 -2
  96. package/dist/application/javascript/JavaScriptRecoveryPort.js +1 -0
  97. package/dist/application/javascript/JavaScriptRecoveryService.js +52 -0
  98. package/dist/application/{JavaScriptReturnShapeProjection.js → javascript/JavaScriptReturnShapeProjection.js} +3 -3
  99. package/dist/application/{JavaScriptRuntimeObservationEvidence.js → javascript/JavaScriptRuntimeObservationEvidence.js} +2 -2
  100. package/dist/application/javascript/JavaScriptRuntimeObservationPort.js +1 -0
  101. package/dist/application/{JavaScriptRuntimeObservationService.js → javascript/JavaScriptRuntimeObservationService.js} +3 -3
  102. package/dist/application/{JavaScriptRuntimeReconciliationEvidence.js → javascript/JavaScriptRuntimeReconciliationEvidence.js} +3 -3
  103. package/dist/application/{JavaScriptRuntimeReconciliationService.js → javascript/JavaScriptRuntimeReconciliationService.js} +6 -6
  104. package/dist/application/{JavaScriptSemanticGraphAsyncProjection.js → javascript/JavaScriptSemanticGraphAsyncProjection.js} +1 -1
  105. package/dist/application/{JavaScriptSemanticGraphBuilder.js → javascript/JavaScriptSemanticGraphBuilder.js} +5 -3
  106. package/dist/application/{JavaScriptSemanticGraphChildProcessProjection.js → javascript/JavaScriptSemanticGraphChildProcessProjection.js} +1 -1
  107. package/dist/application/{JavaScriptSemanticGraphConstruction.js → javascript/JavaScriptSemanticGraphConstruction.js} +3 -2
  108. package/dist/application/{JavaScriptSemanticGraphDataProjection.js → javascript/JavaScriptSemanticGraphDataProjection.js} +1 -1
  109. package/dist/application/{JavaScriptSemanticGraphFingerprintProjection.js → javascript/JavaScriptSemanticGraphFingerprintProjection.js} +1 -1
  110. package/dist/application/{JavaScriptSemanticGraphFlowProjection.js → javascript/JavaScriptSemanticGraphFlowProjection.js} +2 -2
  111. package/dist/application/{JavaScriptSemanticGraphObjectProjection.js → javascript/JavaScriptSemanticGraphObjectProjection.js} +1 -1
  112. package/dist/application/{JavaScriptSemanticGraphProjection.js → javascript/JavaScriptSemanticGraphProjection.js} +2 -2
  113. package/dist/application/{JavaScriptSemanticGraphResourceProjection.js → javascript/JavaScriptSemanticGraphResourceProjection.js} +1 -1
  114. package/dist/application/{JavaScriptSemanticTraceService.js → javascript/JavaScriptSemanticTraceService.js} +6 -6
  115. package/dist/application/{ManagedApplicationGraphService.js → managed/ManagedApplicationGraphService.js} +7 -7
  116. package/dist/application/{ManagedMemberComparisonService.js → managed/ManagedMemberComparisonService.js} +10 -10
  117. package/dist/application/{ManagedNativeVerificationService.js → managed/ManagedNativeVerificationService.js} +7 -7
  118. package/dist/application/{ManagedReconstructionService.js → managed/ManagedReconstructionService.js} +7 -7
  119. package/dist/application/{NativeApiInspection.js → native/NativeApiInspection.js} +1 -1
  120. package/dist/application/{NativeCallRoutes.js → native/NativeCallRoutes.js} +3 -3
  121. package/dist/application/{NativeDispatchMetadataInspection.js → native/NativeDispatchMetadataInspection.js} +4 -4
  122. package/dist/application/{NativeUiActionTrace.js → native/NativeUiActionTrace.js} +7 -7
  123. package/dist/application/{NativeValueTrace.js → native/NativeValueTrace.js} +6 -6
  124. package/dist/{application/ArtifactInventory/hash.js → artifacts/ArtifactHash.js} +4 -2
  125. package/dist/artifacts/ArtifactPaths.js +3 -3
  126. package/dist/artifacts/ArtifactProvider.js +7 -37
  127. package/dist/artifacts/ArtifactProviderMetadata.js +36 -0
  128. package/dist/artifacts/AsarArtifactReader.js +195 -23
  129. package/dist/artifacts/AsarEntryStream.js +76 -0
  130. package/dist/artifacts/DirectoryArtifactReader.js +41 -7
  131. package/dist/artifacts/NativeDmgArtifactReader.js +161 -9
  132. package/dist/{application → artifacts/apple}/AppleAssetCatalogAnalysis.js +4 -4
  133. package/dist/{application → artifacts/apple}/InterfaceBuilderAnalysis.js +125 -51
  134. package/dist/artifacts/{KeyedArchiveReader.js → apple/KeyedArchiveReader.js} +21 -27
  135. package/dist/artifacts/apple/NibViewHierarchy.js +150 -0
  136. package/dist/{application → artifacts/javascript}/JavaScriptArtifactFiles.js +27 -6
  137. package/dist/artifacts/javascript/JavaScriptArtifactReader.js +6 -0
  138. package/dist/artifacts/readStableArtifact.js +52 -0
  139. package/dist/browser/BrowserScenarioSecrets.js +50 -8
  140. package/dist/browser/CdpAuthorizedMainFrame.js +4 -4
  141. package/dist/browser/CdpAuthorizedTarget.js +22 -0
  142. package/dist/browser/CdpBrowserProvider.js +4 -15
  143. package/dist/browser/CdpCaptureDocuments.js +33 -21
  144. package/dist/browser/CdpCaptureEventBodyShapes.js +3 -3
  145. package/dist/browser/CdpCaptureEventHandlers.js +26 -26
  146. package/dist/browser/CdpCaptureEventHelpers.js +6 -6
  147. package/dist/browser/CdpCaptureStorage.js +10 -8
  148. package/dist/browser/CdpCaptureStorageFingerprints.js +24 -22
  149. package/dist/browser/CdpCaptureValues.js +2 -2
  150. package/dist/browser/CdpCommandRejection.js +17 -0
  151. package/dist/browser/CdpConnection.js +51 -11
  152. package/dist/browser/CdpElectronInspection.js +10 -10
  153. package/dist/browser/CdpElectronProvider.js +3 -6
  154. package/dist/browser/CdpElectronScriptEvents.js +6 -6
  155. package/dist/browser/CdpElectronScripts.js +2 -2
  156. package/dist/browser/CdpElectronWorkers.js +4 -4
  157. package/dist/browser/CdpObservationSession.js +18 -23
  158. package/dist/browser/CdpPageCapture.js +4 -4
  159. package/dist/browser/CdpPageCaptureScripts.js +2 -2
  160. package/dist/browser/CdpPageCaptureWorkers.js +9 -9
  161. package/dist/browser/CdpSafeMetadata.js +48 -10
  162. package/dist/browser/CdpScreenshot.js +5 -5
  163. package/dist/browser/CdpTargetEvents.js +8 -0
  164. package/dist/browser/CdpTargetSession.js +2 -2
  165. package/dist/browser/CdpWebMcpDiscovery.js +22 -16
  166. package/dist/browser/PlaywrightBrowserScenarioProvider.js +7 -6
  167. package/dist/browser/PlaywrightElectronActiveProvider.js +3 -6
  168. package/dist/browser/PlaywrightScenarioEvents.js +59 -51
  169. package/dist/browser/PlaywrightScenarioSession.js +8 -1
  170. package/dist/browser/WebSourceMapFetcher.js +37 -53
  171. package/dist/browser/assets/LocalWebScriptArtifacts.js +87 -0
  172. package/dist/browser/assets/PageScriptCapture.js +32 -0
  173. package/dist/browser/assets/PublishWebScripts.js +74 -0
  174. package/dist/browser/assets/ScenarioScriptCapture.js +76 -0
  175. package/dist/browser/assets/ScriptCaptureAdapters.js +57 -0
  176. package/dist/browser/assets/WebArtifactReads.js +56 -0
  177. package/dist/browser/assets/WebSourceLocationArtifacts.js +40 -0
  178. package/dist/browser/execution/CdpEventListeners.js +79 -0
  179. package/dist/browser/execution/CdpExecutionCapture.js +135 -0
  180. package/dist/browser/execution/CdpExecutionCollection.js +57 -0
  181. package/dist/browser/execution/CdpExecutionWindow.js +100 -0
  182. package/dist/browser/execution/CdpListenerSelector.js +22 -0
  183. package/dist/browser/execution/CdpPreciseCoverage.js +48 -0
  184. package/dist/browser/execution/CdpRuntimeInitiator.js +18 -0
  185. package/dist/browser/execution/CdpRuntimeProtocol.js +106 -0
  186. package/dist/browser/execution/CdpRuntimeRequests.js +81 -0
  187. package/dist/browser/execution/CdpRuntimeSession.js +163 -0
  188. package/dist/browser/execution/CdpRuntimeSources.js +223 -0
  189. package/dist/browser/execution/CdpWebRuntimeProvider.js +51 -0
  190. package/dist/browser/modules/NativeModuleResolver.js +210 -0
  191. package/dist/browser/modules/WebModuleArtifacts.js +40 -0
  192. package/dist/browser/network/PlaywrightNetworkContent.js +71 -0
  193. package/dist/browser/network/PlaywrightScenarioNetwork.js +180 -0
  194. package/dist/browser/providerIdentities.js +24 -0
  195. package/dist/catalogIdentity.js +23 -15
  196. package/dist/cli/androidCommands.js +13 -3
  197. package/dist/cli/applicationCommands.js +39 -8
  198. package/dist/cli/artifactCommands.js +1 -1
  199. package/dist/cli/browserAdvancedCommands.js +27 -9
  200. package/dist/cli/coreAnalysisCommands.js +5 -493
  201. package/dist/cli/coreBinaryCommands.js +211 -0
  202. package/dist/cli/coreNativeCommands.js +293 -0
  203. package/dist/cli/electronCommands.js +13 -18
  204. package/dist/cli/firmwareCommands.js +3 -3
  205. package/dist/cli/javascriptApplicationAnalysis.js +1 -1
  206. package/dist/cli/javascriptRecoveryCommands.js +45 -0
  207. package/dist/cli/managedCommands.js +4 -4
  208. package/dist/cli/managedProjectGraphCommand.js +1 -1
  209. package/dist/cli/referenceSourceImportStatus.js +6 -1
  210. package/dist/cli/utilityCommands.js +47 -23
  211. package/dist/cli/webModuleCommands.js +56 -0
  212. package/dist/cli/webRuntimeCommands.js +60 -0
  213. package/dist/cli/webScriptCommands.js +31 -0
  214. package/dist/cli/webSourceLocationCommands.js +42 -0
  215. package/dist/cli.js +10 -0
  216. package/dist/cliBrowserContext.js +4 -2
  217. package/dist/cliBrowserScenarioCommands.js +4 -3
  218. package/dist/cliCommandNames.js +8 -0
  219. package/dist/cliJavaScriptRuntimeCommands.js +6 -4
  220. package/dist/cliJsonInput.js +9 -2
  221. package/dist/cliOutput.js +37 -11
  222. package/dist/composition/android.js +3 -0
  223. package/dist/composition/auxiliaryAnalysisProviders.js +30 -0
  224. package/dist/composition/binary.js +25 -0
  225. package/dist/composition/browserObservation.js +3 -0
  226. package/dist/composition/browserScenario.js +3 -0
  227. package/dist/composition/directAnalysis.js +17 -0
  228. package/dist/composition/electronObservation.js +3 -0
  229. package/dist/composition/electronScenario.js +3 -0
  230. package/dist/composition/firmware.js +3 -0
  231. package/dist/composition/javascriptRecovery.js +3 -0
  232. package/dist/composition/javascriptRuntimeObservation.js +3 -0
  233. package/dist/composition/optionalObservationProviders.js +49 -0
  234. package/dist/composition/webModules.js +5 -0
  235. package/dist/composition/webRuntime.js +4 -0
  236. package/dist/composition/webSourceLocations.js +5 -0
  237. package/dist/config/parseConfig.js +22 -3
  238. package/dist/contracts/{androidToolContracts.js → android/androidToolContracts.js} +5 -5
  239. package/dist/contracts/applicationToolContracts.js +43 -8
  240. package/dist/contracts/artifactToolContracts.js +2 -2
  241. package/dist/contracts/browserScenarioToolContracts.js +1 -1
  242. package/dist/contracts/enhancedInputs.js +1 -1
  243. package/dist/contracts/{firmwareToolContracts.js → firmware/firmwareToolContracts.js} +5 -5
  244. package/dist/contracts/{applicationWorkflowInputContracts.js → javascript/applicationWorkflowInputContracts.js} +6 -6
  245. package/dist/contracts/{electronToolContracts.js → javascript/electronToolContracts.js} +6 -6
  246. package/dist/contracts/{javascriptApplicationWorkflowExamples.js → javascript/javascriptApplicationWorkflowExamples.js} +3 -3
  247. package/dist/contracts/javascript/javascriptRecoveryToolContracts.js +23 -0
  248. package/dist/contracts/{javascriptRuntimeObservationToolContracts.js → javascript/javascriptRuntimeObservationToolContracts.js} +3 -3
  249. package/dist/contracts/{javascriptRuntimeReconciliationExample.js → javascript/javascriptRuntimeReconciliationExample.js} +5 -5
  250. package/dist/contracts/{managedToolContracts.js → managed/managedToolContracts.js} +3 -3
  251. package/dist/contracts/{managedWorkflowExamples.js → managed/managedWorkflowExamples.js} +1 -1
  252. package/dist/contracts/{managedWorkflowToolContracts.js → managed/managedWorkflowToolContracts.js} +6 -6
  253. package/dist/contracts/mobileApplicationGraphExamples.js +105 -0
  254. package/dist/contracts/{nativeToolContracts.js → native/nativeToolContracts.js} +14 -7
  255. package/dist/contracts/officialToolContracts.js +3 -3
  256. package/dist/contracts/sessionToolContracts.js +1 -1
  257. package/dist/contracts/toolContracts.js +13 -7
  258. package/dist/contracts/toolEffects.js +32 -0
  259. package/dist/contracts/toolOutputSchemaGroups.js +18 -18
  260. package/dist/contracts/webRuntimeToolContracts.js +43 -0
  261. package/dist/contracts/webScriptToolContracts.js +68 -0
  262. package/dist/domain/analysisErrorCore.js +4 -2
  263. package/dist/domain/analysisErrorProjection.js +1 -0
  264. package/dist/domain/{androidApplication.js → android/androidApplication.js} +7 -6
  265. package/dist/domain/apple/appleApplication.js +277 -0
  266. package/dist/domain/{appleAssetCatalog.js → apple/appleAssetCatalog.js} +2 -2
  267. package/dist/domain/apple/appleBundleAnatomy.js +236 -0
  268. package/dist/domain/{interfaceBuilderGraph.js → apple/interfaceBuilderGraph.js} +47 -314
  269. package/dist/domain/apple/interfaceBuilderKeyedArchive.js +411 -0
  270. package/dist/domain/{keyedArchive.js → apple/keyedArchive.js} +10 -9
  271. package/dist/domain/apple/plistValue.js +35 -0
  272. package/dist/domain/artifactInventoryEvidence.js +12 -2
  273. package/dist/domain/artifactInventorySnapshot.js +1 -0
  274. package/dist/domain/artifactOperationError.js +5 -1
  275. package/dist/domain/artifactPathSyntax.js +26 -0
  276. package/dist/domain/browserNetworkEvidence.js +82 -0
  277. package/dist/domain/browserObservationError.js +2 -0
  278. package/dist/domain/browserObservationSchemas.js +2 -1
  279. package/dist/domain/browserScenarioCapture.js +22 -0
  280. package/dist/domain/browserScenarioCaptureValues.js +25 -0
  281. package/dist/domain/browserScenarioDiff.js +6 -3
  282. package/dist/domain/browserScenarioDiffEvidence.js +35 -1
  283. package/dist/domain/browserScenarioValues.js +12 -1
  284. package/dist/domain/browserSession.js +2 -7
  285. package/dist/domain/bundleComparison.js +2 -1
  286. package/dist/domain/callPath.js +52 -44
  287. package/dist/domain/comparisonStatus.js +39 -0
  288. package/dist/domain/evidenceBundle.js +98 -35
  289. package/dist/domain/{firmwareAnalysis.js → firmware/firmwareAnalysis.js} +2 -2
  290. package/dist/domain/functionComparisonNormalization.js +11 -13
  291. package/dist/domain/hopperValues.js +2 -2
  292. package/dist/domain/inputIssueProjection.js +17 -2
  293. package/dist/domain/{electronObservation.js → javascript/electronObservation.js} +5 -11
  294. package/dist/domain/{electronStaticAnalysisBrowser.js → javascript/electronStaticAnalysisBrowser.js} +4 -3
  295. package/dist/domain/{electronStaticAnalysisIpc.js → javascript/electronStaticAnalysisIpc.js} +2 -2
  296. package/dist/domain/{electronStaticAnalysisNative.js → javascript/electronStaticAnalysisNative.js} +12 -13
  297. package/dist/domain/javascript/electronStaticAnalysisTypes.js +1 -0
  298. package/dist/domain/{electronStaticAnalysisValues.js → javascript/electronStaticAnalysisValues.js} +3 -3
  299. package/dist/domain/{javascriptApplicationAnalysis.js → javascript/javascriptApplicationAnalysis.js} +2 -2
  300. package/dist/domain/{javascriptApplicationChangeGraph.js → javascript/javascriptApplicationChangeGraph.js} +1 -1
  301. package/dist/domain/{javascriptApplicationEvidenceSchemas.js → javascript/javascriptApplicationEvidenceSchemas.js} +6 -4
  302. package/dist/domain/{javascriptApplicationGraph.js → javascript/javascriptApplicationGraph.js} +2 -2
  303. package/dist/domain/{javascriptApplicationGraphSchemas.js → javascript/javascriptApplicationGraphSchemas.js} +2 -2
  304. package/dist/domain/{javascriptApplicationVersionComparison.js → javascript/javascriptApplicationVersionComparison.js} +2 -2
  305. package/dist/domain/{javascriptApplicationVersionComparisonSchemas.js → javascript/javascriptApplicationVersionComparisonSchemas.js} +3 -3
  306. package/dist/domain/{javascriptApplicationVersionItems.js → javascript/javascriptApplicationVersionItems.js} +2 -2
  307. package/dist/domain/{javascriptApplicationVersionKeys.js → javascript/javascriptApplicationVersionKeys.js} +16 -9
  308. package/dist/domain/javascript/javascriptArtifactFiles.js +1 -0
  309. package/dist/domain/{javascriptAstFingerprint.js → javascript/javascriptAstFingerprint.js} +38 -22
  310. package/dist/domain/javascript/javascriptAstValues.js +23 -0
  311. package/dist/domain/{javascriptExportShapeComparison.js → javascript/javascriptExportShapeComparison.js} +1 -1
  312. package/dist/domain/{javascriptExportShapeComparisonSchemas.js → javascript/javascriptExportShapeComparisonSchemas.js} +2 -2
  313. package/dist/domain/{javascriptExportShapeSelection.js → javascript/javascriptExportShapeSelection.js} +1 -1
  314. package/dist/domain/{javascriptExportShapeVariants.js → javascript/javascriptExportShapeVariants.js} +1 -1
  315. package/dist/domain/{javascriptFeatureSeed.js → javascript/javascriptFeatureSeed.js} +4 -3
  316. package/dist/domain/{javascriptFeatureTrace.js → javascript/javascriptFeatureTrace.js} +2 -2
  317. package/dist/domain/{javascriptFeatureTraceSchemas.js → javascript/javascriptFeatureTraceSchemas.js} +32 -18
  318. package/dist/domain/{javascriptFeatureTraversal.js → javascript/javascriptFeatureTraversal.js} +6 -2
  319. package/dist/domain/{javascriptNativeHandoff.js → javascript/javascriptNativeHandoff.js} +1 -1
  320. package/dist/domain/javascript/javascriptRecovery.js +88 -0
  321. package/dist/domain/{javascriptRuntimeLoadState.js → javascript/javascriptRuntimeLoadState.js} +1 -1
  322. package/dist/domain/{javascriptRuntimeObservation.js → javascript/javascriptRuntimeObservation.js} +2 -2
  323. package/dist/domain/{javascriptRuntimeReconciliationActive.js → javascript/javascriptRuntimeReconciliationActive.js} +3 -3
  324. package/dist/domain/{javascriptRuntimeReconciliationGraph.js → javascript/javascriptRuntimeReconciliationGraph.js} +1 -1
  325. package/dist/domain/{javascriptRuntimeReconciliationMatching.js → javascript/javascriptRuntimeReconciliationMatching.js} +2 -2
  326. package/dist/domain/{javascriptRuntimeReconciliationParsing.js → javascript/javascriptRuntimeReconciliationParsing.js} +5 -5
  327. package/dist/domain/{javascriptRuntimeReconciliationResult.js → javascript/javascriptRuntimeReconciliationResult.js} +2 -2
  328. package/dist/domain/{javascriptRuntimeReconciliationSchemas.js → javascript/javascriptRuntimeReconciliationSchemas.js} +4 -4
  329. package/dist/domain/{javascriptRuntimeStaticCandidates.js → javascript/javascriptRuntimeStaticCandidates.js} +1 -1
  330. package/dist/domain/{javascriptSemanticAnalysis.js → javascript/javascriptSemanticAnalysis.js} +40 -14
  331. package/dist/domain/{javascriptSemanticAsyncEffects.js → javascript/javascriptSemanticAsyncEffects.js} +2 -1
  332. package/dist/domain/{javascriptSemanticCallResolution.js → javascript/javascriptSemanticCallResolution.js} +10 -5
  333. package/dist/domain/{javascriptSemanticCalls.js → javascript/javascriptSemanticCalls.js} +7 -4
  334. package/dist/domain/{javascriptSemanticChildProcesses.js → javascript/javascriptSemanticChildProcesses.js} +4 -2
  335. package/dist/domain/{javascriptSemanticDataEffectHelpers.js → javascript/javascriptSemanticDataEffectHelpers.js} +7 -6
  336. package/dist/domain/{javascriptSemanticDataEffects.js → javascript/javascriptSemanticDataEffects.js} +8 -6
  337. package/dist/domain/{javascriptSemanticFingerprints.js → javascript/javascriptSemanticFingerprints.js} +40 -16
  338. package/dist/domain/{javascriptSemanticGraph.js → javascript/javascriptSemanticGraph.js} +2 -2
  339. package/dist/domain/{javascriptSemanticGraphSchemas.js → javascript/javascriptSemanticGraphSchemas.js} +3 -3
  340. package/dist/domain/javascript/javascriptSemanticMemberMutations.js +116 -0
  341. package/dist/domain/javascript/javascriptSemanticMutationValues.js +53 -0
  342. package/dist/domain/{javascriptSemanticObjects.js → javascript/javascriptSemanticObjects.js} +5 -5
  343. package/dist/domain/{javascriptSemanticPrimitives.js → javascript/javascriptSemanticPrimitives.js} +1 -1
  344. package/dist/domain/{javascriptSemanticProjection.js → javascript/javascriptSemanticProjection.js} +31 -44
  345. package/dist/domain/{javascriptSemanticPromises.js → javascript/javascriptSemanticPromises.js} +77 -22
  346. package/dist/domain/{javascriptSemanticProvenance.js → javascript/javascriptSemanticProvenance.js} +4 -1
  347. package/dist/domain/{javascriptSemanticQuery.js → javascript/javascriptSemanticQuery.js} +1 -1
  348. package/dist/domain/{javascriptSemanticQueryAssessment.js → javascript/javascriptSemanticQueryAssessment.js} +1 -1
  349. package/dist/domain/{javascriptSemanticQueryIdentity.js → javascript/javascriptSemanticQueryIdentity.js} +1 -1
  350. package/dist/domain/{javascriptSemanticQuerySchemas.js → javascript/javascriptSemanticQuerySchemas.js} +3 -3
  351. package/dist/domain/javascript/javascriptSemanticRequireOrigin.js +25 -0
  352. package/dist/domain/{javascriptSemanticResources.js → javascript/javascriptSemanticResources.js} +2 -1
  353. package/dist/domain/{javascriptSemanticReturns.js → javascript/javascriptSemanticReturns.js} +1 -1
  354. package/dist/domain/{javascriptSemanticTraceSchemas.js → javascript/javascriptSemanticTraceSchemas.js} +2 -2
  355. package/dist/domain/javascript/javascriptSemanticTraversal.js +55 -0
  356. package/dist/domain/javascript/javascriptSemanticValueTypes.js +1 -0
  357. package/dist/domain/{javascriptSemanticValues.js → javascript/javascriptSemanticValues.js} +72 -48
  358. package/dist/domain/{javascriptStaticAnalysis.js → javascript/javascriptStaticAnalysis.js} +7 -4
  359. package/dist/domain/{javascriptStaticAnalysisBundler.js → javascript/javascriptStaticAnalysisBundler.js} +14 -11
  360. package/dist/domain/{javascriptStaticAnalysisCalls.js → javascript/javascriptStaticAnalysisCalls.js} +2 -2
  361. package/dist/domain/{javascriptStaticAnalysisHelpers.js → javascript/javascriptStaticAnalysisHelpers.js} +231 -40
  362. package/dist/domain/{sourceToBundleComparison.js → javascript/sourceToBundleComparison.js} +2 -2
  363. package/dist/domain/{sourceToBundleComparisonSchemas.js → javascript/sourceToBundleComparisonSchemas.js} +4 -4
  364. package/dist/domain/{sourceToBundleSignals.js → javascript/sourceToBundleSignals.js} +2 -2
  365. package/dist/domain/{managedApplicationGraph.js → managed/managedApplicationGraph.js} +4 -4
  366. package/dist/domain/{managedApplicationGraphNodes.js → managed/managedApplicationGraphNodes.js} +1 -1
  367. package/dist/domain/{managedArtifact.js → managed/managedArtifact.js} +1 -1
  368. package/dist/domain/{managedMemberComparison.js → managed/managedMemberComparison.js} +4 -4
  369. package/dist/domain/{managedMemberComparisonCoverage.js → managed/managedMemberComparisonCoverage.js} +2 -1
  370. package/dist/domain/{managedMemberComparisonItems.js → managed/managedMemberComparisonItems.js} +97 -40
  371. package/dist/domain/{managedMemberComparisonMatch.js → managed/managedMemberComparisonMatch.js} +22 -11
  372. package/dist/domain/{managedNativeVerification.js → managed/managedNativeVerification.js} +1 -1
  373. package/dist/domain/{managedNativeVerificationMatch.js → managed/managedNativeVerificationMatch.js} +3 -3
  374. package/dist/domain/{managedNativeVerificationSchemas.js → managed/managedNativeVerificationSchemas.js} +6 -5
  375. package/dist/domain/{managedReconstruction.js → managed/managedReconstruction.js} +3 -3
  376. package/dist/domain/{nativeFunctionAnnotations.js → native/nativeFunctionAnnotations.js} +1 -1
  377. package/dist/domain/{nativeInspection.js → native/nativeInspection.js} +1 -1
  378. package/dist/domain/{nativeInvestigationGraph.js → native/nativeInvestigationGraph.js} +13 -4
  379. package/dist/domain/{nativeLoadImage.js → native/nativeLoadImage.js} +1 -1
  380. package/dist/domain/{nativeUiObservation.js → native/nativeUiObservation.js} +20 -6
  381. package/dist/domain/{objcSwiftMetadata.js → native/objcSwiftMetadata.js} +17 -0
  382. package/dist/domain/processCapture.js +4 -2
  383. package/dist/domain/processScenario.js +17 -17
  384. package/dist/domain/propertyListKeys.js +69 -0
  385. package/dist/domain/providerCleanupError.js +5 -2
  386. package/dist/domain/reconstructionCoverageEvaluation.js +46 -24
  387. package/dist/domain/reconstructionCoverageInput.js +7 -0
  388. package/dist/domain/runtimeVersion.js +2 -0
  389. package/dist/domain/sourceMapEnvelope.js +38 -0
  390. package/dist/domain/unicodeCodePointOrder.js +11 -6
  391. package/dist/domain/webBundleAnalyzerAst.js +2 -34
  392. package/dist/domain/webBundleAnalyzerInspection.js +12 -9
  393. package/dist/domain/webEventListeners.js +28 -0
  394. package/dist/domain/webExecution.js +74 -0
  395. package/dist/domain/webMcpDiscovery.js +1 -7
  396. package/dist/domain/webModuleImports.js +104 -0
  397. package/dist/domain/webModuleTrace.js +106 -0
  398. package/dist/domain/webRuntime.js +69 -0
  399. package/dist/domain/webScreenshot.js +1 -7
  400. package/dist/domain/webScriptArtifacts.js +39 -0
  401. package/dist/domain/webScriptExport.js +86 -0
  402. package/dist/domain/webScriptExportError.js +13 -0
  403. package/dist/domain/webScriptExportPlan.js +108 -0
  404. package/dist/domain/webSourceLocation.js +106 -0
  405. package/dist/domain/webSourcePosition.js +21 -0
  406. package/dist/dotnet/ManagedArtifactInspector.js +1 -1
  407. package/dist/dotnet/ManagedMemberInspector.js +1 -1
  408. package/dist/dotnet/ManagedMemberInspectorCore.js +34 -0
  409. package/dist/dotnet/ManagedMemberRows.js +5 -3
  410. package/dist/dotnet/ManagedNativeBoundaryHelpers.js +22 -16
  411. package/dist/dotnet/ManagedNativeBoundaryInspector.js +56 -50
  412. package/dist/dotnet/ManagedStaticProvider.js +3 -33
  413. package/dist/dotnet/ManagedStaticProviderMetadata.js +36 -0
  414. package/dist/evaluation/CodexAgentEval.js +2 -1
  415. package/dist/firmware/FirmwareProvider.js +18 -12
  416. package/dist/firmware/FirmwarePublication.js +1 -1
  417. package/dist/firmware/FirmwareRelease.js +1 -1
  418. package/dist/firmware/FirmwareReports.js +12 -0
  419. package/dist/firmware/FirmwareVersion.js +80 -0
  420. package/dist/generatedMcpToolCatalog.js +1 -1
  421. package/dist/generatedPackageMetadata.js +2 -2
  422. package/dist/ghidra/GhidraFunctionValues.js +5 -5
  423. package/dist/ghidra/GhidraInstallation.js +38 -34
  424. package/dist/ghidra/GhidraInstallationPolicy.js +140 -0
  425. package/dist/ghidra/GhidraInventoryValues.js +1 -1
  426. package/dist/ghidra/GhidraLauncher.js +12 -4
  427. package/dist/ghidra/GhidraLoadImageAttest.js +36 -0
  428. package/dist/ghidra/GhidraLoadImageValues.js +1 -1
  429. package/dist/ghidra/GhidraProvider.js +15 -233
  430. package/dist/ghidra/GhidraProviderCapabilities.js +7 -14
  431. package/dist/ghidra/GhidraProviderClient.js +209 -0
  432. package/dist/ghidra/GhidraResponseBuffer.js +7 -1
  433. package/dist/ghidra/extensions/nativeaot/NativeAotReport.js +17 -1
  434. package/dist/hopper/HopperProvider.js +2 -48
  435. package/dist/hopper/HopperProviderCapabilities.js +73 -0
  436. package/dist/hopper/HopperResponseStream.js +7 -1
  437. package/dist/hopper/LinuxPrivateDisplayProbe.js +4 -4
  438. package/dist/ida/IdaProviderCapabilities.js +3 -11
  439. package/dist/ida/IdaSessionClient.js +12 -0
  440. package/dist/{browser → inspector}/JavaScriptRuntimeScope.js +16 -5
  441. package/dist/{browser → inspector}/V8InspectorCaptureProjection.js +46 -8
  442. package/dist/{browser → inspector}/V8InspectorEndpoint.js +1 -1
  443. package/dist/{browser → inspector}/V8InspectorProvider.js +10 -13
  444. package/dist/inspector/providerIdentity.js +6 -0
  445. package/dist/javascript/recovery/RecoveryFiles.js +122 -0
  446. package/dist/javascript/recovery/WakaruCommand.js +116 -0
  447. package/dist/javascript/recovery/WakaruExecution.js +100 -0
  448. package/dist/javascript/recovery/WakaruProvider.js +96 -0
  449. package/dist/javascript/recovery/WakaruPublication.js +102 -0
  450. package/dist/javascript/recovery/WakaruRelease.js +29 -0
  451. package/dist/javascript/recovery/WakaruReport.js +134 -0
  452. package/dist/javascript/sourceMaps/SourceMapCodecProcess.js +37 -0
  453. package/dist/javascript/sourceMaps/SourceMapCodecProtocol.js +20 -0
  454. package/dist/javascript/sourceMaps/SourceMapCommand.js +176 -0
  455. package/dist/javascript/sourceMaps/SourceMapDecoder.js +61 -0
  456. package/dist/javascript/sourceMaps/SourceMapFormat.js +185 -0
  457. package/dist/javascript/sourceMaps/TraceSourceMap.js +138 -0
  458. package/dist/main/shutdown.js +8 -2
  459. package/dist/main/transport.js +24 -7
  460. package/dist/main.js +4 -18
  461. package/dist/native/AppleDispatchCoverage.js +58 -0
  462. package/dist/native/AppleDispatchMetadata.js +71 -509
  463. package/dist/native/AppleMachoFixups.js +292 -0
  464. package/dist/native/AppleMachoSelection.js +188 -0
  465. package/dist/native/AppleObjcCategories.js +59 -0
  466. package/dist/native/AppleObjcDispatchFacets.js +257 -0
  467. package/dist/native/AppleObjcProperties.js +68 -0
  468. package/dist/native/AppleObjcProtocols.js +2 -1
  469. package/dist/native/AppleSwiftDispatchFacets.js +150 -0
  470. package/dist/native/NativeMacOSProvider.js +132 -72
  471. package/dist/native/NativeMacOSProviderMetadata.js +42 -0
  472. package/dist/native/NativeMachoInspection.js +45 -14
  473. package/dist/native/NativeUiHelperRuntime.js +7 -3
  474. package/dist/native/NativeUiObservation.js +8 -4
  475. package/dist/native/NativeUiOutputBudget.js +8 -0
  476. package/dist/native/parsers/codesign.js +40 -5
  477. package/dist/native/parsers/demangle.js +6 -2
  478. package/dist/native/parsers/dyldInfo.js +13 -4
  479. package/dist/native/parsers/echoedPath.js +14 -0
  480. package/dist/native/parsers/lipo.js +14 -0
  481. package/dist/native/parsers/otool.js +1 -1
  482. package/dist/native/parsers/plist.js +174 -19
  483. package/dist/process/ExecFileOutput.js +2 -0
  484. package/dist/process/ProviderProcess.js +38 -17
  485. package/dist/reference/ReferenceSourceReaderEntries.js +6 -1
  486. package/dist/server/createServer.js +48 -6
  487. package/dist/server/mcpClientMetadata.js +6 -3
  488. package/dist/server/registerAndroidTools.js +1 -1
  489. package/dist/server/registerApplicationTools/compareExportShapes.js +2 -2
  490. package/dist/server/registerApplicationTools/compareSourceToBundle.js +2 -2
  491. package/dist/server/registerApplicationTools/compareVersions.js +2 -2
  492. package/dist/server/registerApplicationTools/projectMobileApplicationGraph.js +43 -0
  493. package/dist/server/registerApplicationTools/traceFeature.js +1 -1
  494. package/dist/server/registerApplicationTools/traceSemantics.js +1 -1
  495. package/dist/server/registerApplicationTools.js +2 -0
  496. package/dist/server/registerBrowserScenarioTool.js +6 -2
  497. package/dist/server/registerBrowserTools.js +13 -2
  498. package/dist/server/registerCloseLifecycleTool.js +1 -1
  499. package/dist/server/registerElectronTools.js +21 -7
  500. package/dist/server/registerJavaScriptRecoveryTool.js +17 -0
  501. package/dist/server/registerJavaScriptRuntimeObservationTools.js +9 -4
  502. package/dist/server/registerManagedTools.js +3 -3
  503. package/dist/server/registerManagedWorkflowTools/compareManagedMembers.js +2 -2
  504. package/dist/server/registerManagedWorkflowTools/contract.js +1 -1
  505. package/dist/server/registerManagedWorkflowTools/importManagedReconstruction.js +1 -1
  506. package/dist/server/registerManagedWorkflowTools/projectManagedApplicationGraph.js +1 -1
  507. package/dist/server/registerManagedWorkflowTools/verifyManagedNativeBoundaries.js +2 -2
  508. package/dist/server/registerNativeTools.js +1 -1
  509. package/dist/server/registerPrompts.js +5 -1
  510. package/dist/server/registerSessionTools.js +1 -1
  511. package/dist/server/registerWebModuleTool.js +17 -0
  512. package/dist/server/registerWebRuntimeTools.js +31 -0
  513. package/dist/server/registerWebScriptTool.js +18 -0
  514. package/dist/server/registerWebSourceLocationTool.js +17 -0
  515. package/dist/server/sessionAvailabilityPolicy.js +24 -12
  516. package/dist/windows/WindowsOwnedProcess.js +3 -1
  517. package/install.sh +12 -2
  518. package/native/windows/README.md +5 -0
  519. package/native/windows/build/manifest.json +2 -2
  520. package/native/windows/build/rea-windows-x64.node +0 -0
  521. package/package.json +40 -19
  522. package/scripts/hopper-demo-x11.py +67 -8
  523. package/scripts/rea.mjs +9 -1
  524. package/skills/reverse-engineer-anything/SKILL.md +3 -3
  525. package/skills/reverse-engineer-anything/references/android-applications.md +2 -2
  526. package/skills/reverse-engineer-anything/references/javascript-applications.md +1 -1
  527. package/skills/reverse-engineer-anything/references/native-and-artifacts.md +32 -23
  528. package/dist/application/runtime.js +0 -53
  529. package/dist/domain/appleApplication.js +0 -181
  530. package/dist/domain/javascriptAstValues.js +0 -13
  531. package/dist/domain/javascriptSemanticTraversal.js +0 -30
  532. package/dist/native/NativeHostCapabilities.js +0 -23
  533. /package/dist/application/{AndroidAnalysisPort.js → DirectAnalysisDependencies.js} +0 -0
  534. /package/dist/application/{BinarySessionPort.js → WebModulePorts.js} +0 -0
  535. /package/dist/application/{ElectronActiveObservationPort.js → WebRuntimePort.js} +0 -0
  536. /package/dist/application/{ElectronObservationPort.js → WebScriptArtifactPort.js} +0 -0
  537. /package/dist/application/{FirmwareAnalysisPort.js → WebSourceLocationPorts.js} +0 -0
  538. /package/dist/application/{JavaScriptArtifactAnalysisTypes.js → android/AndroidAnalysisPort.js} +0 -0
  539. /package/dist/application/{AbortablePromise.js → binary/AbortablePromise.js} +0 -0
  540. /package/dist/application/{JavaScriptRuntimeObservationPort.js → binary/BinarySessionPort.js} +0 -0
  541. /package/dist/application/{BinarySessionStatus.js → binary/BinarySessionStatus.js} +0 -0
  542. /package/dist/{domain/electronStaticAnalysisTypes.js → application/firmware/FirmwareAnalysisPort.js} +0 -0
  543. /package/dist/{domain/javascriptSemanticValueTypes.js → application/investigation/InvestigationRecordPort.js} +0 -0
  544. /package/dist/application/{ElectronBoundaryGraph.js → javascript/ElectronBoundaryGraph.js} +0 -0
  545. /package/dist/application/{ElectronBoundaryGraphIpc.js → javascript/ElectronBoundaryGraphIpc.js} +0 -0
  546. /package/dist/application/{ElectronBoundaryGraphNative.js → javascript/ElectronBoundaryGraphNative.js} +0 -0
  547. /package/dist/application/{ElectronBoundaryGraphWindows.js → javascript/ElectronBoundaryGraphWindows.js} +0 -0
  548. /package/dist/application/{JavaScriptArtifactGraphBundlers.js → javascript/JavaScriptArtifactGraphBundlers.js} +0 -0
  549. /package/dist/application/{JavaScriptArtifactGraphEvidence.js → javascript/JavaScriptArtifactGraphEvidence.js} +0 -0
  550. /package/dist/application/{JavaScriptArtifactReconstructionInput.js → javascript/JavaScriptArtifactReconstructionInput.js} +0 -0
  551. /package/dist/application/{JavaScriptSemanticGraphEvidence.js → javascript/JavaScriptSemanticGraphEvidence.js} +0 -0
  552. /package/dist/application/{JavaScriptSemanticGraphValueProjection.js → javascript/JavaScriptSemanticGraphValueProjection.js} +0 -0
  553. /package/dist/artifacts/{NibArchive.js → apple/NibArchive.js} +0 -0
  554. /package/dist/domain/{androidAnalysis.js → android/androidAnalysis.js} +0 -0
  555. /package/dist/domain/{electronActiveObservation.js → javascript/electronActiveObservation.js} +0 -0
  556. /package/dist/domain/{electronStaticAnalysis.js → javascript/electronStaticAnalysis.js} +0 -0
  557. /package/dist/domain/{javascriptExportShapeComparisonIdentity.js → javascript/javascriptExportShapeComparisonIdentity.js} +0 -0
  558. /package/dist/domain/{javascriptRuntimeReconciliation.js → javascript/javascriptRuntimeReconciliation.js} +0 -0
  559. /package/dist/domain/{javascriptRuntimeReconciliationRuntime.js → javascript/javascriptRuntimeReconciliationRuntime.js} +0 -0
  560. /package/dist/domain/{javascriptSemanticCoverage.js → javascript/javascriptSemanticCoverage.js} +0 -0
  561. /package/dist/domain/{javascriptSemanticDerivedAnalysis.js → javascript/javascriptSemanticDerivedAnalysis.js} +0 -0
  562. /package/dist/domain/{javascriptSemanticGraphSerialization.js → javascript/javascriptSemanticGraphSerialization.js} +0 -0
  563. /package/dist/domain/{javascriptSemanticIr.js → javascript/javascriptSemanticIr.js} +0 -0
  564. /package/dist/domain/{javascriptSemanticQueryRelations.js → javascript/javascriptSemanticQueryRelations.js} +0 -0
  565. /package/dist/domain/{javascriptSemanticState.js → javascript/javascriptSemanticState.js} +0 -0
  566. /package/dist/domain/{javascriptSourceParser.js → javascript/javascriptSourceParser.js} +0 -0
  567. /package/dist/domain/{javascriptStaticAnalysisFindings.js → javascript/javascriptStaticAnalysisFindings.js} +0 -0
  568. /package/dist/domain/{javascriptStaticAnalysisState.js → javascript/javascriptStaticAnalysisState.js} +0 -0
  569. /package/dist/domain/{javascriptStaticAnalysisTypes.js → javascript/javascriptStaticAnalysisTypes.js} +0 -0
  570. /package/dist/domain/{managedApplicationGraphCoverage.js → managed/managedApplicationGraphCoverage.js} +0 -0
  571. /package/dist/domain/{managedApplicationGraphNodeCoverage.js → managed/managedApplicationGraphNodeCoverage.js} +0 -0
  572. /package/dist/domain/{nativeApiBoundary.js → native/nativeApiBoundary.js} +0 -0
  573. /package/dist/domain/{nativeDataType.js → native/nativeDataType.js} +0 -0
  574. /package/dist/domain/{nativeInstruction.js → native/nativeInstruction.js} +0 -0
  575. /package/dist/domain/{nativeMetadataRecovery.js → native/nativeMetadataRecovery.js} +0 -0
  576. /package/dist/domain/{nativeValueFlow.js → native/nativeValueFlow.js} +0 -0
  577. /package/dist/domain/{nativeValueTrace.js → native/nativeValueTrace.js} +0 -0
@@ -0,0 +1,106 @@
1
+ import { z } from "zod";
2
+ import { digestSchema } from "./digests.js";
3
+ import { exportedWebScriptSchema, webScriptExportManifestSchema, } from "./webScriptExport.js";
4
+ /** Inspect one captured script's native ES module relationships. */
5
+ export const webModuleTraceInputSchema = z.strictObject({
6
+ manifest_path: z
7
+ .string()
8
+ .min(1)
9
+ .describe("Absolute path to an export_web_scripts manifest"),
10
+ script_index: z
11
+ .number()
12
+ .int()
13
+ .min(0)
14
+ .describe("Zero-based index in manifest.scripts"),
15
+ importer_url: z
16
+ .string()
17
+ .min(1)
18
+ .optional()
19
+ .describe("Explicit HTTP(S) module URL; useful when captured inline/base context is unknown"),
20
+ import_map: z
21
+ .strictObject({
22
+ path: z
23
+ .string()
24
+ .min(1)
25
+ .describe("Absolute local import-map JSON path; no fetch"),
26
+ base_url: z
27
+ .string()
28
+ .min(1)
29
+ .describe("Explicit HTTP(S) base for the selected map"),
30
+ })
31
+ .optional(),
32
+ });
33
+ /** Byte identity of one selected local artifact. */
34
+ export const webModuleFileSchema = z.strictObject({
35
+ path: z.string().min(1),
36
+ sha256: digestSchema,
37
+ bytes: z.number().int().min(0),
38
+ });
39
+ const positionSchema = z.strictObject({
40
+ offset: z.number().int().min(0),
41
+ line: z.number().int().min(1),
42
+ column: z.number().int().min(0),
43
+ });
44
+ /** Parser observations do not assert that a dependency was loaded. */
45
+ export const webModuleImportSchema = z.strictObject({
46
+ kind: z.enum(["static-import", "re-export", "dynamic-import"]),
47
+ specifier: z.string().nullable(),
48
+ expression: z.string(),
49
+ start: positionSchema,
50
+ end: positionSchema,
51
+ });
52
+ /** Native resolver output, including the engine's exact failure text. */
53
+ export const webModuleResolutionSchema = z.discriminatedUnion("state", [
54
+ z.strictObject({ state: z.literal("resolved"), url: z.string().min(1) }),
55
+ z.strictObject({ state: z.literal("rejected"), message: z.string() }),
56
+ ]);
57
+ const candidateSchema = z.strictObject({
58
+ script_index: z.number().int().min(0),
59
+ match: z.enum(["exact-reported-url", "response-url-without-fragment"]),
60
+ script: exportedWebScriptSchema,
61
+ });
62
+ /** Complete outgoing imports with captured candidates and explicit unknowns. */
63
+ export const webModuleTraceResultSchema = z.strictObject({
64
+ manifest: webModuleFileSchema.extend({
65
+ reported_output_directory: z.string(),
66
+ ...webScriptExportManifestSchema.pick({
67
+ capture_path: true,
68
+ capture_sha256: true,
69
+ capture_kind: true,
70
+ capture_completeness: true,
71
+ source_evidence_id: true,
72
+ }).shape,
73
+ }),
74
+ source: webModuleFileSchema.extend({
75
+ script_index: z.number().int().min(0),
76
+ script: exportedWebScriptSchema,
77
+ }),
78
+ importer: z.strictObject({
79
+ url: z.string().min(1),
80
+ basis: z.enum(["caller-selected", "reported-source-url"]),
81
+ }),
82
+ import_map: webModuleFileSchema
83
+ .extend({ base_url: z.string().min(1) })
84
+ .nullable(),
85
+ parser: z.strictObject({
86
+ state: z.enum(["parsed", "unparseable"]),
87
+ diagnostics: z.array(z.string()),
88
+ location_units: z.literal("UTF-16 offsets and columns; one-based lines"),
89
+ }),
90
+ engine: z
91
+ .strictObject({ id: z.string().min(1), version: z.string().min(1) })
92
+ .nullable(),
93
+ imports: z.array(webModuleImportSchema.extend({
94
+ resolution: z.union([
95
+ webModuleResolutionSchema,
96
+ z.strictObject({
97
+ state: z.literal("unknown"),
98
+ reason: z.literal("computed-specifier"),
99
+ }),
100
+ ]),
101
+ captured_candidates: z.array(candidateSchema),
102
+ execution: z.literal("unknown"),
103
+ })),
104
+ diagnostics: z.array(z.string()),
105
+ limitations: z.array(z.string()),
106
+ });
@@ -0,0 +1,69 @@
1
+ import { z } from "zod";
2
+ import { browserAllowedOriginsSchema, browserEndpointSchema, } from "./browserObservation.js";
3
+ import { browserVersionSchema } from "./browserObservationSchemas.js";
4
+ import { jsonObjectSchema } from "./jsonValue.js";
5
+ /** Scope for one externally owned page; omitted origins select its current origin. */
6
+ export const webRuntimeScopeSchema = z.strictObject({
7
+ cdp_endpoint: browserEndpointSchema,
8
+ allowed_origins: browserAllowedOriginsSchema,
9
+ target_id: z.string().min(1),
10
+ });
11
+ /** Source evidence is bound by the selected CDP session's script ID, never URL equality. */
12
+ export const webRuntimeSourceSchema = z.object({
13
+ script_id: z.string().min(1),
14
+ url: z.string(),
15
+ execution_context_id: z.number().int().nullable(),
16
+ reported_execution_context: jsonObjectSchema.nullable(),
17
+ reported_script_context_aux_data: jsonObjectSchema.nullable(),
18
+ frame_id: z.string().nullable(),
19
+ producer_hash: z.string().nullable(),
20
+ source_map_url: z.string().nullable(),
21
+ has_source_url: z.boolean().nullable(),
22
+ language: z.string().nullable(),
23
+ resource_start: z
24
+ .object({
25
+ line_number: z.number().int().min(0),
26
+ column_number: z.number().int().min(0),
27
+ })
28
+ .nullable(),
29
+ source: z.discriminatedUnion("state", [
30
+ z.object({
31
+ state: z.literal("captured"),
32
+ text: z.string(),
33
+ sha256: z.string().regex(/^[a-f0-9]{64}$/u),
34
+ utf8_bytes: z.number().int().min(0),
35
+ utf16_units: z.number().int().min(0),
36
+ }),
37
+ z.object({
38
+ state: z.enum(["unavailable", "excluded"]),
39
+ reason: z.string().min(1),
40
+ }),
41
+ ]),
42
+ });
43
+ /** Producer callsite coordinates are zero-based resource lines and UTF-16 columns. */
44
+ export const webRuntimeLocationSchema = z.object({
45
+ script_id: z.string(),
46
+ url: z.string().nullable(),
47
+ line_number: z.number().int().min(0),
48
+ column_number: z.number().int().min(0).nullable(),
49
+ function_name: z.string().nullable(),
50
+ source_association: z.enum(["script_id", "unknown"]),
51
+ });
52
+ /** Common identity for a selected live page document. */
53
+ export const webRuntimeTargetSchema = z.object({
54
+ target_id: z.string().min(1),
55
+ origin: z.string().min(1),
56
+ initial_url: z.string(),
57
+ frame_id: z.string().min(1),
58
+ loader_id: z.string().nullable(),
59
+ });
60
+ /** Producer product identity is observed separately from the unknown host platform. */
61
+ export const webRuntimeBrowserSchema = browserVersionSchema;
62
+ /** Complete runtime evidence has explicit byte budgets rather than silent item truncation. */
63
+ export const WEB_RUNTIME_LIMITS = {
64
+ protocolBytes: 64 * 1024 * 1024,
65
+ retainedEventBytes: 8 * 1024 * 1024,
66
+ sourceBytes: 32 * 1024 * 1024,
67
+ commandTimeoutMs: 20_000,
68
+ cleanupTimeoutMs: 5_000,
69
+ };
@@ -2,6 +2,7 @@ import { createHash } from "node:crypto";
2
2
  import { z } from "zod";
3
3
  import { browserCompletenessSchema } from "./browserCompleteness.js";
4
4
  import { browserAllowedOriginsSchema, browserEndpointSchema, } from "./browserObservation.js";
5
+ import { browserVersionSchema } from "./browserObservationSchemas.js";
5
6
  /** Self-verifying inline PNG artifact for CLI/MCP parity. */
6
7
  export const webScreenshotArtifactSchema = z
7
8
  .object({
@@ -29,13 +30,6 @@ export const captureWebScreenshotInputSchema = z.strictObject({
29
30
  allowed_origins: browserAllowedOriginsSchema,
30
31
  target_id: z.string().trim().min(1),
31
32
  });
32
- const browserVersionSchema = z.object({
33
- product: z.string(),
34
- protocol_version: z.string(),
35
- revision: z.string(),
36
- user_agent: z.string(),
37
- js_version: z.string(),
38
- });
39
33
  /** Screenshot observation with embedded immutable artifact bytes. */
40
34
  export const webScreenshotSchema = z.object({
41
35
  browser: browserVersionSchema,
@@ -0,0 +1,39 @@
1
+ import { z } from "zod";
2
+ import { digestSchema } from "./digests.js";
3
+ import { webScriptExportManifestSchema } from "./webScriptExport.js";
4
+ /** Select one source from an existing captured-script export. */
5
+ export const selectedWebScriptInputSchema = z.strictObject({
6
+ manifest_path: z
7
+ .string()
8
+ .min(1)
9
+ .describe("Absolute export_web_scripts manifest path"),
10
+ script_index: z
11
+ .number()
12
+ .int()
13
+ .min(0)
14
+ .describe("Zero-based index in manifest.scripts"),
15
+ });
16
+ /** Exact identity of one local file, independently read as bytes. */
17
+ export const webArtifactFileSchema = z.strictObject({
18
+ path: z.string().min(1),
19
+ sha256: digestSchema,
20
+ bytes: z.number().int().min(0),
21
+ });
22
+ /** Artifact-port report shared by capture-derived analyses. */
23
+ export const selectedWebScriptArtifactsSchema = z.strictObject({
24
+ manifest: webScriptExportManifestSchema,
25
+ manifestFile: webArtifactFileSchema,
26
+ sourceFile: webArtifactFileSchema,
27
+ source: z.string(),
28
+ });
29
+ /** Preserve original capture authority and completeness alongside the actual manifest identity. */
30
+ export const capturedWebManifestIdentitySchema = webArtifactFileSchema.extend({
31
+ reported_output_directory: z.string(),
32
+ ...webScriptExportManifestSchema.pick({
33
+ capture_path: true,
34
+ capture_sha256: true,
35
+ capture_kind: true,
36
+ capture_completeness: true,
37
+ source_evidence_id: true,
38
+ }).shape,
39
+ });
@@ -0,0 +1,86 @@
1
+ import { z } from "zod";
2
+ import { browserCompletenessSchema } from "./browserCompleteness.js";
3
+ import { browserScenarioCompletenessSchema } from "./browserScenarioCaptureValues.js";
4
+ import { digestSchema, prefixedDigestSchema } from "./digests.js";
5
+ /** Export already captured scripts into one absent, caller-selected directory. */
6
+ export const exportWebScriptsInputSchema = z.strictObject({
7
+ capture_path: z
8
+ .string()
9
+ .min(1)
10
+ .describe("Absolute filesystem path to saved inspect_web_page or capture_browser_scenario JSON, normalized result or complete Evidence"),
11
+ output_directory: z
12
+ .string()
13
+ .min(1)
14
+ .describe("Absolute absent filesystem directory for verified scripts and manifest; parent directory must exist"),
15
+ });
16
+ const sourceSchema = z.discriminatedUnion("kind", [
17
+ z.strictObject({
18
+ kind: z.literal("page-script"),
19
+ script_key: z.string().min(1),
20
+ frame_id: z.string().nullable(),
21
+ is_module: z.boolean(),
22
+ language: z.string().nullable(),
23
+ source_map_url: z.string().nullable(),
24
+ }),
25
+ z.strictObject({
26
+ kind: z.literal("scenario-response"),
27
+ transaction_id: z.string().nullable(),
28
+ request_sequence: z.number().int().min(1),
29
+ response_sequence: z.number().int().min(1).nullable(),
30
+ status: z.number().nullable(),
31
+ }),
32
+ ]);
33
+ /** Exact retained-source identity and publication outcome. */
34
+ export const exportedWebScriptSchema = z.strictObject({
35
+ source: sourceSchema,
36
+ url: z.string(),
37
+ content: z.discriminatedUnion("state", [
38
+ z.strictObject({
39
+ state: z.literal("exported"),
40
+ relative_path: z.string().min(1),
41
+ layout: z.enum(["url-path", "isolated"]),
42
+ layout_reason: z.string().nullable(),
43
+ sha256: digestSchema,
44
+ bytes: z.number().int().min(0),
45
+ media_type: z.string().nullable(),
46
+ redacted: z.boolean().nullable(),
47
+ representation: z.enum([
48
+ "debugger-source-utf8",
49
+ "browser-decoded-response-bytes",
50
+ ]),
51
+ }),
52
+ z.strictObject({
53
+ state: z.literal("unavailable"),
54
+ reason: z.string().min(1),
55
+ message: z.string().min(1),
56
+ }),
57
+ ]),
58
+ });
59
+ /** Persisted manifest, also returned inline without duplicating script bytes. */
60
+ export const webScriptExportManifestSchema = z.strictObject({
61
+ capture_path: z.string().min(1),
62
+ capture_sha256: digestSchema,
63
+ capture_kind: z.enum(["page-inspection", "browser-scenario"]),
64
+ source_evidence_id: prefixedDigestSchema("ev").nullable(),
65
+ capture_completeness: z.union([
66
+ browserCompletenessSchema,
67
+ browserScenarioCompletenessSchema,
68
+ ]),
69
+ output_directory: z.string().min(1),
70
+ analysis_input: z
71
+ .strictObject({
72
+ input_path: z.string().min(1),
73
+ format: z.literal("directory"),
74
+ })
75
+ .nullable(),
76
+ scripts: z.array(exportedWebScriptSchema),
77
+ limitations: z.array(z.string()),
78
+ });
79
+ /** Verified publication including the digest of the persisted manifest. */
80
+ export const webScriptExportResultSchema = webScriptExportManifestSchema.extend({
81
+ manifest: z.strictObject({
82
+ path: z.string().min(1),
83
+ sha256: digestSchema,
84
+ bytes: z.number().int().min(0),
85
+ }),
86
+ });
@@ -0,0 +1,13 @@
1
+ import { ArtifactOperationError } from "./artifactOperationError.js";
2
+ /** Publication failure retaining its input/output target and cleanup state. */
3
+ export class WebScriptExportError extends ArtifactOperationError {
4
+ userMessage;
5
+ cleanupIncomplete;
6
+ cleanupResources;
7
+ constructor(reason, target, diagnostic, residualPaths = []) {
8
+ super("export_web_scripts", reason);
9
+ this.userMessage = `Script export failed for ${target}: ${diagnostic}`;
10
+ this.cleanupResources = residualPaths;
11
+ this.cleanupIncomplete = residualPaths.length > 0;
12
+ }
13
+ }
@@ -0,0 +1,108 @@
1
+ import { createHash } from "node:crypto";
2
+ const hash = (text) => createHash("sha256").update(text).digest("hex");
3
+ const PORTABLE_SEGMENT = /^[A-Za-z0-9_~.-]+$/u;
4
+ const RESERVED_SEGMENT = /^(?:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\.|$)/iu;
5
+ /** Preserve safe URL layouts only when every captured path is unambiguous. */
6
+ export const planWebScriptExport = (scripts) => {
7
+ const candidates = scripts.map(candidatePath);
8
+ const conflicts = conflictingPaths(candidates);
9
+ return scripts.map((script, index) => {
10
+ if (script.content.state === "unavailable")
11
+ return {
12
+ script,
13
+ record: {
14
+ source: script.source,
15
+ url: script.url,
16
+ content: script.content,
17
+ },
18
+ };
19
+ const candidate = candidates[index];
20
+ const reason = conflicts.has(index)
21
+ ? "Captured paths collide by content version, case, or file/directory prefix."
22
+ : (candidate?.reason ?? null);
23
+ const path = reason === null ? candidate?.path : undefined;
24
+ return {
25
+ script,
26
+ record: {
27
+ source: script.source,
28
+ url: script.url,
29
+ content: {
30
+ state: "exported",
31
+ relative_path: path ??
32
+ `isolated/source-${index + 1}-${hash(JSON.stringify(script.source))}.js`,
33
+ layout: path === undefined ? "isolated" : "url-path",
34
+ layout_reason: reason,
35
+ sha256: script.content.sha256,
36
+ bytes: script.content.bytes.length,
37
+ media_type: script.content.media_type,
38
+ redacted: script.content.redacted,
39
+ representation: script.content.representation,
40
+ },
41
+ },
42
+ };
43
+ });
44
+ };
45
+ const candidatePath = (script) => {
46
+ let url;
47
+ try {
48
+ url = new URL(script.url);
49
+ }
50
+ catch {
51
+ return {
52
+ reason: "Source has no absolute HTTP URL (for example an inline script).",
53
+ };
54
+ }
55
+ if (url.protocol !== "http:" && url.protocol !== "https:")
56
+ return { reason: "Source URL scheme has no local module layout mapping." };
57
+ const parts = url.pathname.slice(1).split("/");
58
+ if (!/\.(?:js|mjs|cjs)$/u.test(url.pathname) ||
59
+ parts.some((part) => !PORTABLE_SEGMENT.test(part) ||
60
+ part === "." ||
61
+ part === ".." ||
62
+ part.endsWith(".") ||
63
+ RESERVED_SEGMENT.test(part)))
64
+ return {
65
+ reason: "URL path is not an ordinary portable JavaScript module path.",
66
+ };
67
+ return {
68
+ path: `origins/${hash(url.origin)}/${parts.join("/")}`,
69
+ reason: url.search !== "" ||
70
+ url.hash !== "" ||
71
+ url.username !== "" ||
72
+ url.password !== ""
73
+ ? "URL query, fragment, or credentials cannot select a canonical local module."
74
+ : null,
75
+ };
76
+ };
77
+ // Register every prefix so case collisions in parent directories and a file
78
+ // conflicting with a directory isolate all affected sources, not just the last.
79
+ const conflictingPaths = (candidates) => {
80
+ const prefixes = new Map();
81
+ candidates.forEach(({ path }, index) => {
82
+ if (path === undefined)
83
+ return;
84
+ const parts = path.split("/");
85
+ parts.forEach((_, position) => {
86
+ const spelling = parts.slice(0, position + 1).join("/");
87
+ const key = spelling.toLowerCase();
88
+ const entry = prefixes.get(key) ?? {
89
+ spellings: new Set(),
90
+ indices: [],
91
+ files: [],
92
+ };
93
+ entry.spellings.add(spelling);
94
+ entry.indices.push(index);
95
+ if (position === parts.length - 1)
96
+ entry.files.push(index);
97
+ prefixes.set(key, entry);
98
+ });
99
+ });
100
+ const conflicts = new Set();
101
+ for (const entry of prefixes.values())
102
+ if (entry.spellings.size > 1 ||
103
+ entry.files.length > 1 ||
104
+ (entry.files.length > 0 && entry.indices.length > entry.files.length))
105
+ for (const index of entry.indices)
106
+ conflicts.add(index);
107
+ return conflicts;
108
+ };
@@ -0,0 +1,106 @@
1
+ import { z } from "zod";
2
+ import { digestSchema } from "./digests.js";
3
+ import { exportedWebScriptSchema } from "./webScriptExport.js";
4
+ import { capturedWebManifestIdentitySchema, selectedWebScriptInputSchema, webArtifactFileSchema, } from "./webScriptArtifacts.js";
5
+ /** JavaScript source-map positions use UTF-16 columns and one-based lines. */
6
+ export const webSourcePositionSchema = z.strictObject({
7
+ line: z.number().int().min(1),
8
+ column: z.number().int().min(0),
9
+ });
10
+ /** Trace one explicit generated position through an explicitly paired local map. */
11
+ export const webSourceLocationInputSchema = selectedWebScriptInputSchema.extend({
12
+ source_map: z.strictObject({
13
+ path: z
14
+ .string()
15
+ .min(1)
16
+ .describe("Absolute local source-map path; no fetch"),
17
+ url: z
18
+ .string()
19
+ .min(1)
20
+ .describe("Explicit source-map URL context used to resolve original source names"),
21
+ }),
22
+ generated_position: webSourcePositionSchema,
23
+ });
24
+ const originalContentSchema = z.discriminatedUnion("state", [
25
+ z.strictObject({
26
+ state: z.literal("embedded"),
27
+ text: z.string(),
28
+ utf8_sha256: digestSchema,
29
+ utf8_bytes: z.number().int().min(0),
30
+ representation: z.literal("UTF-8 encoding of decoded sourcesContent text"),
31
+ }),
32
+ z.strictObject({
33
+ state: z.literal("unavailable"),
34
+ reason: z.literal("sourcesContent-not-retained"),
35
+ }),
36
+ ]);
37
+ /** Keep every matching segment, including anonymous mappings and duplicate URLs. */
38
+ export const webSourceMapMatchSchema = z.discriminatedUnion("state", [
39
+ z.strictObject({ state: z.literal("generated-only") }),
40
+ z.strictObject({
41
+ state: z.literal("mapped"),
42
+ flattened_source_index: z.number().int().min(0),
43
+ section_path: z.array(z.number().int().min(0)),
44
+ source_index: z.number().int().min(0),
45
+ reported_source: z.string().nullable(),
46
+ reported_source_root: z.string().nullable(),
47
+ resolved_url: z.string().nullable(),
48
+ ignored: z.boolean(),
49
+ content: originalContentSchema,
50
+ original_position: webSourcePositionSchema.extend({
51
+ offset: z.number().int().min(0).nullable(),
52
+ content_position: z.enum([
53
+ "verified-in-embedded-text",
54
+ "outside-embedded-text",
55
+ "content-unavailable",
56
+ ]),
57
+ }),
58
+ name: z.string().nullable(),
59
+ }),
60
+ ]);
61
+ /** Codec observations; map association and deployment authenticity remain selected context. */
62
+ export const webSourceMapReportSchema = z.strictObject({
63
+ source_map_sha256: digestSchema,
64
+ url_context: z.string().min(1),
65
+ engine: z.strictObject({ id: z.string().min(1), version: z.string().min(1) }),
66
+ runtime: z.strictObject({
67
+ id: z.string().min(1),
68
+ version: z.string().min(1),
69
+ v8_heap_limit_bytes: z.number().int().min(1),
70
+ }),
71
+ format: z.enum(["regular", "indexed"]),
72
+ reported_file: z.string().nullable(),
73
+ lookup: z.strictObject({
74
+ requested: webSourcePositionSchema,
75
+ matched_generated_position: webSourcePositionSchema.nullable(),
76
+ semantics: z.literal("greatest generated position <= requested, across lines; all equal-position segments"),
77
+ location_units: z.literal("one-based lines; zero-based UTF-16 columns"),
78
+ }),
79
+ matches: z.array(webSourceMapMatchSchema),
80
+ diagnostics: z.array(z.string()),
81
+ });
82
+ /** Bounds for complete source-map evidence and upstream decoded layouts. */
83
+ export const WEB_SOURCE_MAP_LIMITS = {
84
+ mapBytes: 4 * 1024 * 1024,
85
+ outputBytes: 32 * 1024 * 1024,
86
+ decodedRows: 262144,
87
+ decodedSegments: 262144,
88
+ sectionDepth: 64,
89
+ decodeTimeoutMs: 20000,
90
+ };
91
+ /** Selected capture/map byte identities and complete point attribution inline. */
92
+ export const webSourceLocationResultSchema = webSourceMapReportSchema.extend({
93
+ manifest: capturedWebManifestIdentitySchema,
94
+ source: webArtifactFileSchema.extend({
95
+ script_index: z.number().int().min(0),
96
+ script: exportedWebScriptSchema,
97
+ }),
98
+ source_map: webArtifactFileSchema.extend({
99
+ url: z.string().min(1),
100
+ association: z.literal("caller-selected"),
101
+ }),
102
+ generated_offset: z.number().int().min(0),
103
+ source_authenticity: z.literal("unknown"),
104
+ execution: z.literal("unknown"),
105
+ limitations: z.array(z.string()),
106
+ });
@@ -0,0 +1,21 @@
1
+ /** Verify a selected position against actual text without splitting the whole source. */
2
+ export const webSourceOffset = (text, position) => {
3
+ if (!Number.isSafeInteger(position.line) ||
4
+ position.line < 1 ||
5
+ !Number.isSafeInteger(position.column) ||
6
+ position.column < 0)
7
+ return undefined;
8
+ let line = 1;
9
+ let start = 0;
10
+ for (const boundary of text.matchAll(/\r\n?|\n|\u2028|\u2029/gu)) {
11
+ if (line === position.line)
12
+ return position.column <= boundary.index - start
13
+ ? start + position.column
14
+ : undefined;
15
+ line += 1;
16
+ start = boundary.index + boundary[0].length;
17
+ }
18
+ return line === position.line && position.column <= text.length - start
19
+ ? start + position.column
20
+ : undefined;
21
+ };
@@ -1,4 +1,4 @@
1
- import { managedArtifactInspectionSchema, } from "../domain/managedArtifact.js";
1
+ import { managedArtifactInspectionSchema, } from "../domain/managed/managedArtifact.js";
2
2
  import { readManagedPeLayout, } from "./ManagedPeReader.js";
3
3
  import { managedTableRowCounts, readManagedMetadataInventory, } from "./ManagedMetadataInventory.js";
4
4
  import { readManagedMetadataLayout, } from "./ManagedMetadataLayout.js";
@@ -1,4 +1,4 @@
1
- import { managedMemberInspectionSchema, } from "../domain/managedArtifact.js";
1
+ import { managedMemberInspectionSchema, } from "../domain/managed/managedArtifact.js";
2
2
  import { readManagedPeLayout, } from "./ManagedPeReader.js";
3
3
  import { managedTableRowCounts, readManagedMetadataInventory, } from "./ManagedMetadataInventory.js";
4
4
  import { readManagedMetadataLayout } from "./ManagedMetadataLayout.js";
@@ -58,6 +58,40 @@ export const declaringType = (ranges, table, row) => {
58
58
  }
59
59
  return null;
60
60
  };
61
+ /** Resolve member ownership without rescanning ordered type ranges per row. */
62
+ export const createDeclaringTypeLookup = (ranges, table) => {
63
+ const entries = ranges.map((range) => ({
64
+ range,
65
+ start: table === "field" ? range.fieldStart : range.methodStart,
66
+ end: table === "field" ? range.fieldEnd : range.methodEnd,
67
+ }));
68
+ const ordered = entries.every((entry, index) => {
69
+ const previous = entries[index - 1];
70
+ return (entry.start <= entry.end &&
71
+ (previous === undefined || previous.end <= entry.start));
72
+ });
73
+ // Malformed metadata can overlap or reverse ranges. Retain the original
74
+ // first-match interpretation rather than guessing a different owner.
75
+ if (!ordered)
76
+ return (row) => declaringType(ranges, table, row);
77
+ return (row) => {
78
+ let first = 0;
79
+ let end = entries.length;
80
+ while (first < end) {
81
+ const middle = first + Math.floor((end - first) / 2);
82
+ const entry = entries[middle];
83
+ if (entry === undefined)
84
+ return null;
85
+ if (row >= entry.start && row < entry.end)
86
+ return { token: entry.range.token, fullName: entry.range.fullName };
87
+ if (row < entry.start)
88
+ end = middle;
89
+ else
90
+ first = middle + 1;
91
+ }
92
+ return null;
93
+ };
94
+ };
61
95
  export const parseTypes = (bytes, layout, ranges) => {
62
96
  const typeTable = layout.table(2);
63
97
  const fields = layout.table(4);
@@ -1,16 +1,17 @@
1
- import { declaringType, signature, } from "./ManagedMemberInspectorCore.js";
1
+ import { createDeclaringTypeLookup, signature, } from "./ManagedMemberInspectorCore.js";
2
2
  import { metadataToken, metadataRowCursor, metadataCodedToken, readMetadataBlob, readMetadataString, } from "./ManagedMetadataHeaps.js";
3
3
  import { methodBody } from "./ManagedMethodBodyReader.js";
4
4
  export const parseFields = (bytes, layout, ranges) => {
5
5
  const fields = [];
6
6
  const core = new Map();
7
7
  const table = layout.table(4);
8
+ const declaringType = createDeclaringTypeLookup(ranges, "field");
8
9
  for (let row = 1; row <= (table?.rowCount ?? 0); row += 1) {
9
10
  const cursor = metadataRowCursor(bytes, layout, 4, row);
10
11
  const flags = cursor.readUInt16();
11
12
  const name = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), layout.strings.size);
12
13
  const sig = readMetadataBlob(bytes, layout, cursor.readIndex(layout.blobIndexSize), layout.blob.size);
13
- const declared = declaringType(ranges, "field", row);
14
+ const declared = declaringType(row);
14
15
  const token = metadataToken(4, row);
15
16
  fields.push({
16
17
  token,
@@ -50,6 +51,7 @@ export const parseMethods = ({ bytes, layout, pe, ranges, }) => {
50
51
  const methods = [];
51
52
  const core = new Map();
52
53
  const table = layout.table(6);
54
+ const declaringType = createDeclaringTypeLookup(ranges, "method");
53
55
  for (let row = 1; row <= (table?.rowCount ?? 0); row += 1) {
54
56
  const cursor = metadataRowCursor(bytes, layout, 6, row);
55
57
  const rva = cursor.readUInt32();
@@ -58,7 +60,7 @@ export const parseMethods = ({ bytes, layout, pe, ranges, }) => {
58
60
  const name = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), layout.strings.size);
59
61
  const sig = readMetadataBlob(bytes, layout, cursor.readIndex(layout.blobIndexSize), layout.blob.size);
60
62
  cursor.readIndex(layout.tableIndexSize(8));
61
- const declared = declaringType(ranges, "method", row);
63
+ const declared = declaringType(row);
62
64
  const token = metadataToken(6, row);
63
65
  methods.push({
64
66
  token,