rea-agents 4.1.0 → 5.0.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "rea-agents",
   "mcpName": "io.github.morluto/rea",
-  "version": "4.1.0",
+  "version": "5.0.0",
   "description": "Reverse engineer anything from your terminal or agent with one CLI and MCP server.",
   "license": "MIT",
   "repository": {
@@ -42,10 +42,12 @@
     "dist",
     "install.sh",
     "bridge/hopper_bridge.py",
+    "bridge/native/NativeUIChildren.swift",
     "bridge/native/ReaNativeUI.swift",
     "bridge/ghidra/ReaGhidraBridge.java",
     "bridge/ghidra/ReaGhidraExtensions.java",
     "bridge/ghidra/ReaGhidraPrepareCom.java",
+    "bridge/android/ReaJadxBridge.java",
     "scripts/rea.mjs",
     "scripts/electron-active-hook.cjs",
     "scripts/electron-active-hook-boundaries.cjs",
@@ -81,11 +83,11 @@
     "check:pr": "turbo run typecheck lint format:check knip metadata:check test:run && npm run docs:check && npm run jscpd && npm run scan:todos",
     "precheck:ci": "npm run deps:check",
     "check:ci": "turbo run typecheck lint format:check knip metadata:check jscpd scan:todos",
-    "build:cached": "turbo run build",
+    "build:cached": "node scripts/check-dependency-install.mjs && turbo run build",
     "format": "oxfmt .",
     "format:check": "oxfmt --check .",
-    "lint": "oxlint",
-    "lint:fix": "oxlint --fix",
+    "lint": "oxlint && npm run verify:module-boundaries",
+    "lint:fix": "oxlint --fix && npm run verify:module-boundaries",
     "knip": "knip",
     "jscpd": "jscpd src/ tests/",
     "scan:todos": "node scripts/scan-todos.mjs",
@@ -119,29 +121,32 @@
     "typecheck": "tsc --noEmit",
     "verify:test-temp-hygiene": "npm run build:cached && node scripts/verify-test-temp-hygiene.mjs",
     "verify:hopper": "npm run verify:fixtures && npm run build:cached && node scripts/verify-real-hopper.mjs",
-    "verify:apple-dispatch": "npm run build:cached && node scripts/verify-apple-dispatch.mjs",
+    "verify:apple-dispatch": "npm run build:cached && node scripts/verify/apple/dispatch.mjs",
     "verify:native-ui": "npm run build:cached && node scripts/verify-native-ui.mjs",
-    "verify:keyed-archive": "npm run build:cached && node scripts/verify-keyed-archive.mjs",
+    "verify:keyed-archive": "npm run build:cached && node scripts/verify/apple/keyed-archive.mjs",
+    "verify:macos-bundle": "npm run build:cached && node scripts/verify/apple/macos-bundle.mjs",
     "verify:ghidra": "npm run build:cached && node scripts/verify-real-ghidra.mjs",
     "verify:ida": "npm run build:cached && node scripts/verify-real-ida.mjs",
     "verify:ghidra:switch": "npm run build:cached && node scripts/verify-real-ghidra-switch.mjs",
     "verify:ghidra:dos": "npm run build:cached && node scripts/verify-real-ghidra-dos.mjs",
     "verify:ghidra:com": "npm run build:cached && node scripts/verify-real-ghidra-com.mjs",
     "verify:ghidra:aarch64-jump-table": "npm run build:cached && node scripts/verify-real-ghidra.mjs --aarch64-jump-table",
-    "verify:interface-builder": "npm run build:cached && node scripts/verify-interface-builder.mjs",
+    "verify:interface-builder": "npm run build:cached && node scripts/verify/apple/interface-builder.mjs",
     "verify:ghidra:cross-format": "npm run build:cached && node scripts/verify-real-ghidra.mjs --cross-format",
     "verify:ghidra:windows": "npm run build:cached && npm run build:ghidra-windows-fixture && node scripts/verify-real-ghidra-windows.mjs",
     "verify:browser": "npm run build:cached && node scripts/verify-real-browser.mjs",
+    "verify:browser:dom": "node scripts/verify-browser-dom-destinations.mjs",
+    "verify:browser:network": "npm run build:cached && node scripts/verify-browser-network.mjs",
     "verify:electron": "npm run build:cached && node scripts/verify-real-electron.mjs",
-    "verify:inspector": "npm run build:cached && node scripts/verify-real-javascript-runtime-observation.mjs",
-    "verify:javascript-runtime": "npm run build:cached && node scripts/verify-local-javascript-runtime.mjs",
-    "verify:javascript:digests": "npm run build:cached && node scripts/verify-large-javascript-digests.mjs",
-    "verify:application-workflows": "npm run build:cached && node scripts/verify-local-application-workflows.mjs",
-    "verify:managed": "npm run build:cached && node scripts/verify-managed-conformance.mjs",
-    "verify:firmware": "npm run build:cached && node scripts/verify-real-firmware.mjs",
-    "fixtures:firmware": "node scripts/generate-firmware-fixtures.mjs",
-    "verify:android": "npm run build:cached && node scripts/verify-real-android.mjs",
-    "fixtures:android": "node scripts/fetch-android-fixtures.mjs",
+    "verify:inspector": "npm run build:cached && node scripts/verify/inspector/runtime-observation.mjs",
+    "verify:javascript-runtime": "npm run build:cached && node scripts/verify/javascript/runtime-observation.mjs",
+    "verify:javascript:digests": "npm run build:cached && node scripts/verify/javascript/digests.mjs",
+    "verify:application-workflows": "npm run build:cached && node scripts/verify/javascript/application-workflows.mjs",
+    "verify:managed": "npm run build:cached && node scripts/verify/managed/conformance.mjs",
+    "verify:firmware": "npm run build:cached && node scripts/verify/firmware/analysis.mjs",
+    "fixtures:firmware": "node scripts/fixtures/firmware/generate.mjs",
+    "verify:android": "npm run build:cached && node scripts/verify/android/analysis.mjs",
+    "fixtures:android": "node scripts/fixtures/android/fetch.mjs",
     "verify:agent": "npm run build:cached && node scripts/verify-agent-experience.mjs",
     "verify:hopper:linux": "npm run verify:fixtures && npm run build:cached && node scripts/verify-real-hopper-linux.mjs",
     "verify:setup:linux": "npm run build:cached && node scripts/verify-linux-setup-e2e.mjs",
@@ -156,6 +161,9 @@
     "config:print": "node scripts/print-mcp-config.mjs",
     "evidence:generate": "npm run build:cached && node scripts/generate-completion-ledger.mjs",
     "evidence:check": "npm run build:cached && node scripts/generate-completion-ledger.mjs --check",
+    "docs:dev": "vitepress dev docs",
+    "docs:build": "vitepress build docs",
+    "docs:preview": "vitepress preview docs",
     "docs:generate": "node scripts/run-exclusive.mjs docs npm run docs:generate:unlocked",
     "docs:generate:unlocked": "npm run metadata:generate && npm run build:cached && node scripts/generate-mcp-tool-catalog.mjs && node scripts/generate-skill-metadata.mjs && node scripts/generate-product-catalog.mjs && node scripts/generate-completion-ledger.mjs && node scripts/generate-error-schema.mjs",
     "docs:check": "node scripts/run-exclusive.mjs docs turbo run docs:check:built",
@@ -163,7 +171,7 @@
     "docs:error-schema": "npm run build:cached && node scripts/generate-error-schema.mjs",
     "prepack": "node scripts/prepack.mjs",
     "prepare": "node scripts/prepare.mjs",
-    "verify:asset-catalog": "npm run build:cached && node scripts/verify-asset-catalog.mjs",
+    "verify:asset-catalog": "npm run build:cached && node scripts/verify/apple/asset-catalog.mjs",
     "verify:native-ui:permissions": "npm run build:cached && node scripts/verify-native-ui.mjs --allow-permission-denial",
     "test:focused": "node scripts/run-development-tests.mjs focused",
     "build:windows-native": "node scripts/build-windows-native.mjs",
@@ -173,7 +181,14 @@
     "verify:ghidra:windows:package": "node scripts/verify-packaged-ghidra-windows.mjs",
     "build:ghidra:nativeaot": "node scripts/build-ghidra-nativeaot.mjs",
     "build:fixtures:nativeaot": "node scripts/generate-nativeaot-fixtures.mjs",
-    "verify:ghidra:nativeaot": "npm run build:cached && node scripts/verify-real-ghidra-nativeaot.mjs"
+    "verify:ghidra:nativeaot": "npm run build:cached && node scripts/verify-real-ghidra-nativeaot.mjs",
+    "verify:browser:scripts": "npm run build:cached && node scripts/verify-browser-scripts.mjs",
+    "verify:browser:modules": "npm run build:cached && node scripts/verify-browser-modules.mjs",
+    "verify:test-discovery": "node scripts/verify-test-discovery.mjs",
+    "verify:javascript:recovery": "node scripts/verify/javascript/recovery.mjs",
+    "verify:module-boundaries": "node scripts/verify-module-boundaries.mjs",
+    "verify:browser:source-maps": "npm run build:cached && node scripts/verify-browser-source-maps.mjs",
+    "verify:browser:runtime": "npm run build:cached && node scripts/verify-browser-runtime.mjs"
   },
   "lint-staged": {
     "*.{cjs,cts,js,jsx,mjs,mts,ts,tsx}": [
@@ -205,11 +220,16 @@
     "playwright-core": "1.58.2",
     "plist": "5.0.0",
     "semver": "7.8.5",
-    "smol-toml": "1.7.0",
+    "smol-toml": "1.9.0",
     "write-file-atomic": "7.0.0",
     "ws": "8.21.0",
     "zod": "4.4.3"
   },
+  "overrides": {
+    "vitepress": {
+      "vite": "6.4.4"
+    }
+  },
   "devDependencies": {
     "@fast-check/vitest": "0.5.0",
     "@types/cross-spawn": "6.0.6",
@@ -227,6 +247,7 @@
     "oxlint": "1.87.0",
     "turbo": "2.11.7",
     "typescript": "7.0.2",
+    "vitepress": "1.6.4",
     "vitest": "5.0.3",
     "yaml": "2.9.0"
   }

package/scripts/hopper-demo-x11.py

@@ -20,11 +20,14 @@ import time
 # Keep this digest aligned with LinuxHopper.ts and rerun real-Hopper verification
 # before accepting another vendor build.
 SUPPORTED_HOPPER_SHA256 = {
-    "0294ced141cc373468ee22d8343e7dac41980cb05a937994ca81c9f09afe7ded"
+    "0294ced141cc373468ee22d8343e7dac41980cb05a937994ca81c9f09afe7ded",
+    "1339f9e58377442b0c6fcb0dfc3cec20d593cc557408521fad9a00dbc6b8da13",
 }
 EXPECTED_SCREEN = (1280, 1024)
-EXPECTED_DIALOG = (189, 370, 901, 284)
-DEMO_CLICK = (305, 632)
+DIALOG_TITLES = {"Registration", "Registration — Hopper Disassembler"}
+HOPPER_WINDOW_TITLE = "Hopper Disassembler"
+DEMO_CLICK_LEFT = 116
+DEMO_CLICK_BOTTOM = 22
 PRIVATE_DISPLAY_UNAVAILABLE = 70
 X11_AUTHORIZATION_FAILED = 71
 UNSUPPORTED_HOPPER_BUILD = 72
@@ -196,6 +199,47 @@ def windows(x11: ctypes.CDLL, display: int, root: int) -> list[tuple[int, int, i
     return found
 
 
+def window_title(x11: ctypes.CDLL, display: int, window: int) -> str | None:
+    title = ctypes.c_char_p()
+    if not x11.XFetchName(display, window, ctypes.byref(title)) or not title.value:
+        return None
+    try:
+        return title.value.decode("utf-8", "replace")
+    finally:
+        x11.XFree(ctypes.cast(title, ctypes.c_void_p))
+
+
+def window_transient_for(
+    x11: ctypes.CDLL, display: int, window: int
+) -> int | None:
+    parent = ctypes.c_ulong()
+    if not x11.XGetTransientForHint(display, window, ctypes.byref(parent)):
+        return None
+    return int(parent.value)
+
+
+def find_demo_dialog(
+    x11: ctypes.CDLL,
+    display: int,
+    observed: list[tuple[int, int, int, int, int]],
+) -> tuple[int, int, int, int, int] | None:
+    for candidate in observed:
+        window = candidate[0]
+        if window_title(x11, display, window) not in DIALOG_TITLES:
+            continue
+        parent = window_transient_for(x11, display, window)
+        if parent is None:
+            continue
+        if window_title(x11, display, parent) == HOPPER_WINDOW_TITLE:
+            return candidate
+    return None
+
+
+def demo_click(dialog: tuple[int, int, int, int, int]) -> tuple[int, int]:
+    _window, x, y, _width, height = dialog
+    return x + DEMO_CLICK_LEFT, y + height - DEMO_CLICK_BOTTOM
+
+
 def configure_x11(x11: ctypes.CDLL, xtst: ctypes.CDLL) -> None:
     window_pointer = ctypes.POINTER(ctypes.c_ulong)
     x11.XOpenDisplay.argtypes = [ctypes.c_char_p]
@@ -212,6 +256,18 @@ def configure_x11(x11: ctypes.CDLL, xtst: ctypes.CDLL) -> None:
         ctypes.POINTER(XWindowAttributes),
     ]
     x11.XGetWindowAttributes.restype = ctypes.c_int
+    x11.XFetchName.argtypes = [
+        ctypes.c_void_p,
+        ctypes.c_ulong,
+        ctypes.POINTER(ctypes.c_char_p),
+    ]
+    x11.XFetchName.restype = ctypes.c_int
+    x11.XGetTransientForHint.argtypes = [
+        ctypes.c_void_p,
+        ctypes.c_ulong,
+        ctypes.POINTER(ctypes.c_ulong),
+    ]
+    x11.XGetTransientForHint.restype = ctypes.c_int
     x11.XQueryTree.argtypes = [
         ctypes.c_void_p,
         ctypes.c_ulong,
@@ -644,6 +700,7 @@ def run_launch(args: argparse.Namespace) -> int:
 
         deadline = time.monotonic() + 10
         observed: list[tuple[int, int, int, int, int]] = []
+        dialog: tuple[int, int, int, int, int] | None = None
         while time.monotonic() < deadline:
             if socket.exists():
                 x11.XCloseDisplay(display)
@@ -659,7 +716,8 @@ def run_launch(args: argparse.Namespace) -> int:
                     "owned Hopper process exited",
                 )
             observed = windows(x11, display, root)
-            if any(window[1:] == EXPECTED_DIALOG for window in observed):
+            dialog = find_demo_dialog(x11, display, observed)
+            if dialog is not None:
                 break
             time.sleep(0.1)
         else:
@@ -675,8 +733,10 @@ def run_launch(args: argparse.Namespace) -> int:
                 "expected Hopper demo dialog not found",
             )
 
+        assert dialog is not None
+        click_x, click_y = demo_click(dialog)
         input_results = (
-            xtst.XTestFakeMotionEvent(display, -1, DEMO_CLICK[0], DEMO_CLICK[1], 0),
+            xtst.XTestFakeMotionEvent(display, -1, click_x, click_y, 0),
             xtst.XTestFakeButtonEvent(display, 1, True, 0),
             xtst.XTestFakeButtonEvent(display, 1, False, 0),
         )
@@ -695,9 +755,8 @@ def run_launch(args: argparse.Namespace) -> int:
     finally:
         if display is not None:
             x11.XCloseDisplay(display)
-        if child is not None and child.poll() is None:
-            child.terminate()
-            child.wait()
+        if child is not None:
+            stop_process(child)
         stop_process(xvfb)
         capture.close()
 

package/scripts/rea.mjs

@@ -41,6 +41,7 @@ if (!(await compiledRuntimeExists(runtimeFiles))) {
   const { createCli } = await import("../dist/cli.js");
   const {
     renderCliOutputArgumentError,
+    renderEmptyFilteredCliOutput,
     sanitizeCliOutput,
     validateCliOutputArguments,
   } = await import("../dist/cliOutput.js");
@@ -49,9 +50,16 @@ if (!(await compiledRuntimeExists(runtimeFiles))) {
     process.stdout.write(renderCliOutputArgumentError(outputArguments));
     process.exitCode = 1;
   } else {
+    let wroteOutput = false;
     await createCli().serve(args, {
-      stdout: (output) => process.stdout.write(sanitizeCliOutput(output)),
+      stdout: (output) => {
+        const sanitized = sanitizeCliOutput(output);
+        if (sanitized.length > 0) wroteOutput = true;
+        process.stdout.write(sanitized);
+      },
     });
+    if (!wroteOutput)
+      process.stdout.write(renderEmptyFilteredCliOutput(args) ?? "");
   }
 }
 

package/skills/reverse-engineer-anything/SKILL.md

@@ -2,9 +2,9 @@
 name: reverse-engineer-anything
 description: Reverse engineer native, managed, Electron/JavaScript, packaged, firmware, and browser targets with REA. Use shipped-artifact or requested runtime evidence to explain features, compare versions, decompile code, or guide a reconstruction. Skip REA for ordinary source-repository architecture analysis.
 metadata:
-  version: "26"
-  tool_count: 125
-  catalog_digest: "ed9c36900e9223561d38ba30a44921f4ff101d5eca989920f9edc9dc91df470b"
+  version: "27"
+  tool_count: 133
+  catalog_digest: "83b4c3445ed0ec003c0aeefa3188f123d9ae319484f8b1e2b611d2fe278c9c72"
 ---
 
 # REA

package/skills/reverse-engineer-anything/references/android-applications.md

@@ -1,7 +1,7 @@
 # Android application artifacts
 
-Use the connected server's advertised Android tools. Repository main includes
-this family; npm 4.0.1 does not. A skill installation alone cannot add it to an
+Use the connected server's advertised Android tools. Repository main and npm
+4.1.0 include this family. A skill installation alone cannot add it to an
 older server.
 
 Start with `inspect_android_package` on the caller's APK path for package

package/skills/reverse-engineer-anything/references/javascript-applications.md

@@ -44,7 +44,7 @@ When advertised by the connected server, application trace and compare tools
 accept complete inline Evidence or
 `{"kind":"retained-evidence","evidence_id":"ev_<64 lowercase hex characters>"}`
 for their application input (`application`, or `left`/`right`). This notation is
-a template: replace it with the actual returned ID. npm 4.0.1 accepts only full
+a template: replace it with the actual returned ID. Versions before 4.1.0 accept only full
 inline Evidence. Use the exact ID
 returned by the producer on the same MCP connection. Resolution does not run
 analysis or select a provider; findings remain inline. Native observation

package/skills/reverse-engineer-anything/references/native-and-artifacts.md

@@ -37,29 +37,30 @@ assembly. Keep managed/native boundaries and unavailable reconstruction facts
 explicit. A bring-your-own reconstruction oracle is separate from the canonical
 parser and must not become an implicit setup dependency.
 
-## .NET NativeAOT
-
-A NativeAOT PE/ELF contains native code. Absence of PE/CLI metadata does not mean
-analysis must stop at assembly. Use native function analysis for recovered
-pseudocode; it is not reconstructed original C#.
-
-With an explicitly configured NativeAOT Ghidra adapter, call
-`inspect_native_load_image` after opening the target. Its optional
-`observations.metadata_recovery` returns the format, positive header evidence,
-coverage, derived-memory identity and type addresses/category paths inline.
-Then inspect a reported type with `inspect_native_data_type`, follow its
-`metadata_recovery.related_type`, interfaces and virtual slot addresses, and use
-`analyze_function` plus string/xref searches for implementation evidence. Keep
-`not_applicable`, partial recovery and unsupported layouts explicit. Generated
-`Class_address` names and inferred System.Object/String identities are not
-original names; custom field layouts remain unknown.
-
-Recovery modifies an ephemeral analysis database and may replace loaded metadata
-bytes with derived content. Original executable files remain unchanged. Distinguish
-original file offsets from derived analysis memory. Windows x64 PE **targets**
-can be analyzed on a supported Linux host; Windows **host** P0 does not admit
-this database recovery. See the [NativeAOT guide](https://github.com/morluto/rea/blob/main/docs/ghidra-nativeaot.md)
-for the tested layout and optional bring-your-own adapter build.
+### .NET NativeAOT
+
+NativeAOT binaries contain native machine code, so ordinary CIL decompilers
+cannot recover the original method bodies. When managed metadata/CIL is absent,
+classify that as a native-analysis route rather than claiming source recovery.
+Open the native image with the selected deep provider and inspect functions,
+strings, calls, and references; describe decompiler output as pseudocode and
+inference.
+
+NativeAOT images can be PE/COFF, ELF, or Mach-O executables and shared
+libraries. Use file bytes and loader metadata rather than suffixes to identify
+them. For packaged apps, inventory/extract with REA's artifact tools and retain
+the exact contained image identity. PDB, ELF debug, or dSYM sidecars are
+additional evidence only when the provider accepts and matches them.
+
+For deeper type recovery, the optional third-party
+[Ghidra NativeAOT analyzer](https://github.com/Washi1337/ghidra-nativeaot)
+rehydrates ReadyToRun metadata and can recover method tables, type relationships,
+frozen objects, and strings. This is a Ghidra extension with its own install and
+interactive workflow; it is not currently part of REA's managed parser or
+headless Ghidra bridge. Treat its annotations as analysis evidence, retain the
+binary identity, and do not present recovered types as original source. Header
+discovery may require a symbol or analyst identification of the ReadyToRun
+header, depending on the binary and analyzer version.
 
 ## Packages and extraction
 
@@ -68,6 +69,14 @@ ASAR, or DMG inputs when the artifact graph and findings help answer the
 question. It returns the complete artifact graph inline. Cite graph manifest
 IDs when using them.
 
+For an IPA or a macOS `.app`, ZIP, or DMG, pass the inventory Evidence to
+`project_apple_application_graph`. It reports application roots and nested
+bundles by path convention: app extensions, XPC services, frameworks, login
+items, system and driver extensions, and plug-ins. It also lists privileged
+helpers, launchd plists, symlinks, and each bundle's `info_plist_path` and
+executable candidates. Roles are path conventions, not parsed plists; read the
+listed plists with `inspect_plist`.
+
 Use `extract_artifact` when materialized files are needed. It takes no arguments
 and materializes all regular files into a fresh temporary directory chosen by
 REA. Symlinks and encrypted entries are inventory facts, not extractable files.

package/dist/application/runtime.js

@@ -1,53 +0,0 @@
-import { HopperProvider } from "../hopper/HopperProvider.js";
-import { GhidraProvider } from "../ghidra/GhidraProvider.js";
-import { IdaProvider } from "../ida/IdaProvider.js";
-import { silentLogger } from "../logger.js";
-import { GENERATED_AUXILIARY_PROVIDERS } from "../generatedMcpToolCatalog.js";
-import { AnalysisProviderRegistry } from "./AnalysisProviderRegistry.js";
-import { composeBinarySession } from "./BinarySessionComposition.js";
-import { nativeHostCapabilities } from "../native/NativeHostCapabilities.js";
-import { LazyAnalysisProvider } from "./LazyAnalysisProvider.js";
-import { ManagedStaticProvider } from "../dotnet/ManagedStaticProvider.js";
-import { SessionProviderRouter } from "./SessionProviderRouter.js";
-/**
- * Compose the target-switching runtime shared directly by CLI and MCP adapters.
- * This is the sole production wiring point, so both adapters share identical
- * provider selection, profile, lifecycle, and Evidence semantics.
- */
-export const createBinarySession = (config, logger = silentLogger) => {
-    const hopper = new HopperProvider(config, logger);
-    const ghidra = new GhidraProvider(config, logger);
-    const ida = new IdaProvider(config);
-    const auxiliary = new Map(GENERATED_AUXILIARY_PROVIDERS.map((provider) => [
-        provider.identity.id,
-        provider,
-    ]));
-    const lazyProvider = (id, load) => {
-        const generated = auxiliary.get(id);
-        if (generated === undefined)
-            throw new TypeError(`Missing generated provider metadata for ${id}`);
-        return new LazyAnalysisProvider({
-            ...generated,
-            capabilities: nativeHostCapabilities(generated.capabilities),
-            load,
-        });
-    };
-    return composeBinarySession(new AnalysisProviderRegistry([hopper, ghidra, ida], config.analysisProvider), [
-        lazyProvider("rea-artifact-graph", async () => {
-            const { ArtifactProvider } = await import("../artifacts/ArtifactProvider.js");
-            return new ArtifactProvider();
-        }),
-        lazyProvider("native-macos", async () => {
-            const { NativeMacOSProvider } = await import("../native/NativeMacOSProvider.js");
-            return new NativeMacOSProvider();
-        }),
-        lazyProvider("rea-dotnet-static", async () => {
-            const { ManagedStaticProvider } = await import("../dotnet/ManagedStaticProvider.js");
-            return new ManagedStaticProvider();
-        }),
-    ]);
-};
-/** Compose an execution-free managed session without native provider selection. */
-export const createManagedBinarySession = () => composeBinarySession(SessionProviderRouter.selectable(new AnalysisProviderRegistry([]), [
-    new ManagedStaticProvider(),
-]));

package/dist/domain/appleApplication.js

@@ -1,181 +0,0 @@
-import { createHash } from "node:crypto";
-import canonicalize from "canonicalize";
-import { z } from "zod";
-import { parseArtifactInventoryEvidence } from "./artifactInventoryEvidence.js";
-import { evidenceSchema } from "./evidence.js";
-import { digestSchema } from "./../domain/digests.js";
-import { prefixedDigestSchema } from "./../domain/digests.js";
-const evidenceIdSchema = prefixedDigestSchema("ev");
-const pathSchema = z.string().min(1);
-const componentSchema = z.strictObject({
-    path: pathSchema,
-    artifact_id: prefixedDigestSchema("art"),
-    sha256: digestSchema,
-    format: z.string().min(1),
-});
-/** Authenticated artifact inventory pages projected as one Apple application. */
-export const appleApplicationProjectionInputSchema = z.strictObject({
-    inventory_evidence: z.array(evidenceSchema).min(1),
-});
-/** Deterministic, execution-free Apple application inventory projection. */
-export const appleApplicationProjectionResultSchema = z.strictObject({
-    projection_id: prefixedDigestSchema("aap"),
-    root_sha256: digestSchema,
-    root_format: z.literal("ipa"),
-    source_evidence_ids: z.array(evidenceIdSchema).min(1),
-    application_roots: z.array(pathSchema),
-    components: z.strictObject({
-        bundle_metadata: z.array(componentSchema),
-        executables: z.array(componentSchema),
-        frameworks: z.array(componentSchema),
-        native_libraries: z.array(componentSchema),
-        javascript: z.array(componentSchema),
-        signing: z.array(componentSchema),
-    }),
-    runtime_families: z.array(z.enum([
-        "native",
-        "swift-objective-c",
-        "javascript",
-        "react-native",
-        "flutter",
-        "unity",
-    ])),
-    bridge_candidates: z.array(z.strictObject({
-        source_path: pathSchema,
-        native_path: pathSchema,
-        basis: z.enum([
-            "javascript-and-native-content",
-            "react-native-convention",
-            "flutter-convention",
-            "unity-convention",
-        ]),
-    })),
-    coverage: z.strictObject({
-        status: z.enum(["complete-within-inventory", "partial"]),
-        inventory_complete: z.boolean(),
-    }),
-    limitations: z.array(z.string().min(1)),
-});
-/** Project exact IPA paths and hashes without parsing or executing target code. */
-export const projectAppleApplication = (input) => {
-    const parsed = appleApplicationProjectionInputSchema.parse(input);
-    const { evidence, inventory } = parseArtifactInventoryEvidence(parsed.inventory_evidence);
-    if (inventory.manifest.root_format !== "ipa")
-        throw new TypeError("Apple application projection requires IPA Evidence");
-    const nodes = new Map(inventory.nodes.map((node) => [node.artifact_id, node]));
-    const all = inventory.occurrences
-        .filter((occurrence) => occurrence.artifact_id !== null && occurrence.logical_path !== ".")
-        .map((occurrence) => {
-        const node = nodes.get(occurrence.artifact_id ?? "");
-        if (node === undefined)
-            throw new TypeError("Apple application occurrence has no artifact node");
-        return {
-            path: occurrence.logical_path,
-            artifact_id: node.artifact_id,
-            sha256: node.sha256,
-            format: node.format,
-        };
-    });
-    const roots = [
-        ...new Set(inventory.occurrences.flatMap(({ logical_path: path }) => {
-            const match = /^(Payload\/[^/]+\.app)(?:\/|$)/u.exec(path);
-            return match?.[1] === undefined ? [] : [match[1]];
-        })),
-    ].sort(compare);
-    const classified = classifyComponents(all, roots);
-    const runtimeFamilies = identifyRuntimeFamilies(all);
-    const bridgeProjection = identifyBridgeCandidates(classified.javascript, deduplicateComponents([
-        ...classified.executables,
-        ...classified.native_libraries,
-    ]));
-    const limitations = projectionLimitations(inventory.complete, roots);
-    const withoutId = {
-        root_sha256: inventory.manifest.root_sha256,
-        root_format: "ipa",
-        source_evidence_ids: evidence
-            .map(({ evidence_id: id }) => id)
-            .sort(compare),
-        application_roots: roots,
-        components: classified,
-        runtime_families: runtimeFamilies,
-        bridge_candidates: bridgeProjection.candidates,
-        coverage: {
-            status: inventory.complete
-                ? "complete-within-inventory"
-                : "partial",
-            inventory_complete: inventory.complete,
-        },
-        limitations,
-    };
-    return appleApplicationProjectionResultSchema.parse({
-        ...withoutId,
-        projection_id: `aap_${digest(withoutId)}`,
-    });
-};
-const classifyComponents = (all, roots) => {
-    const withinApp = (path) => roots.some((root) => path.startsWith(`${root}/`));
-    return {
-        bundle_metadata: all.filter(({ path }) => /(?:^|\/)Info\.plist$/u.test(path)),
-        executables: all.filter(({ path, format }) => withinApp(path) && ["mach-o", "mach-o-universal"].includes(format)),
-        frameworks: all.filter(({ path }) => /\.framework\//u.test(path)),
-        native_libraries: all.filter(({ path }) => /\.(?:dylib|so)$/iu.test(path)),
-        javascript: all.filter(({ format }) => format === "javascript-bundle"),
-        signing: all.filter(({ path }) => /(?:^|\/)(?:embedded\.mobileprovision|_CodeSignature\/CodeResources)$/u.test(path)),
-    };
-};
-const deduplicateComponents = (values) => [...new Map(values.map((value) => [value.path, value])).values()].sort((left, right) => compare(left.path, right.path));
-const identifyRuntimeFamilies = (all) => {
-    const paths = all.map(({ path }) => path.toLowerCase());
-    const families = new Set();
-    if (all.some(({ format }) => ["mach-o", "mach-o-universal"].includes(format)))
-        families.add("native");
-    if (paths.some((path) => /\.(?:dylib|framework\/[^/]+)$/u.test(path)))
-        families.add("swift-objective-c");
-    if (all.some(({ format }) => format === "javascript-bundle"))
-        families.add("javascript");
-    if (paths.some((path) => path.includes("reactnative") ||
-        path.includes("react.framework") ||
-        path.includes("hermes")))
-        families.add("react-native");
-    if (paths.some((path) => path.includes("flutter.framework") || path.includes("app.framework")))
-        families.add("flutter");
-    if (paths.some((path) => path.includes("unityframework.framework")))
-        families.add("unity");
-    return [...families].sort(compare);
-};
-const identifyBridgeCandidates = (scripts, native) => ({
-    candidates: scripts.flatMap((script) => native.map((item) => ({
-        source_path: script.path,
-        native_path: item.path,
-        basis: bridgeBasis(item.path),
-    }))),
-});
-const bridgeBasis = (path) => {
-    const lower = path.toLowerCase();
-    if (lower.includes("react"))
-        return "react-native-convention";
-    if (lower.includes("flutter") || lower.includes("app.framework"))
-        return "flutter-convention";
-    if (lower.includes("unity"))
-        return "unity-convention";
-    return "javascript-and-native-content";
-};
-const projectionLimitations = (complete, roots) => [
-    ...(!complete
-        ? ["Source inventory pages are incomplete; absence is unknown."]
-        : []),
-    ...(roots.length === 0
-        ? [
-            "No Payload/*.app directory was present in the supplied inventory pages.",
-        ]
-        : []),
-    "Bundle identifiers and signing claims require dedicated plist and CMS parsing; this projection reports only exact paths and hashes.",
-    "Bridge candidates are path-based hypotheses, not observed runtime calls.",
-];
-const compare = (left, right) => left < right ? -1 : left > right ? 1 : 0;
-const digest = (value) => {
-    const encoded = canonicalize(value);
-    if (encoded === undefined)
-        throw new TypeError("Apple application projection is not canonical JSON");
-    return createHash("sha256").update(encoded).digest("hex");
-};

package/dist/domain/javascriptAstValues.js

@@ -1,13 +0,0 @@
-import * as t from "@babel/types";
-/** Read an identifier or literal property name without evaluating syntax. */
-export const propertyName = (node) => {
-    if (t.isIdentifier(node))
-        return node.name;
-    if (t.isStringLiteral(node) || t.isNumericLiteral(node))
-        return String(node.value);
-    return "";
-};
-/** Read a property name only when its syntax commits to one exact key. */
-export const semanticStaticPropertyName = (property, computed) => computed && !t.isStringLiteral(property) && !t.isNumericLiteral(property)
-    ? ""
-    : propertyName(property);