rea-agents 5.0.0 → 6.1.0

package/dist/server/toolResultEncoding.js

@@ -0,0 +1,33 @@
+import { STDIO_DEFAULT_MAX_BUFFER_SIZE } from "@modelcontextprotocol/server";
+import { constants as bufferConstants } from "node:buffer";
+import { bufferedJsonParts, jsonParts } from "../domain/jsonSerialization.js";
+// Leave room for the SDK's JSON-RPC envelope and protocol metadata. This budget
+// follows the pinned client's actual default framing limit, not a result-row cap.
+export const MCP_RESULT_BUDGET_BYTES = STDIO_DEFAULT_MAX_BUFFER_SIZE - 1024;
+export const MCP_RESULT_STRING_LIMIT = bufferConstants.MAX_STRING_LENGTH - 1024;
+const RESULT_ENVELOPE_BYTES = Buffer.byteLength(JSON.stringify({
+    content: [{ type: "text", text: "" }],
+    structuredContent: null,
+})) - 4;
+/** Account for structured JSON and escaped text before allocating the complete text. */
+export const encodeToolResult = (value, budgetBytes = MCP_RESULT_BUDGET_BYTES) => {
+    const parts = [];
+    let bytes = RESULT_ENVELOPE_BYTES;
+    let codeUnits = RESULT_ENVELOPE_BYTES;
+    for (const part of bufferedJsonParts(jsonParts(value))) {
+        const escapedPart = JSON.stringify(part);
+        bytes += Buffer.byteLength(part) + Buffer.byteLength(escapedPart) - 2;
+        codeUnits += part.length + escapedPart.length - 2;
+        if (bytes > budgetBytes || codeUnits > MCP_RESULT_STRING_LIMIT)
+            return {
+                ok: false,
+                bytesAtLeast: bytes,
+                codeUnitsAtLeast: codeUnits,
+                constraint: codeUnits > MCP_RESULT_STRING_LIMIT
+                    ? "string-length"
+                    : "receive-buffer",
+            };
+        parts.push(part);
+    }
+    return { ok: true, text: parts.join(""), bytes };
+};

package/install.sh

@@ -107,7 +107,7 @@ if [[ "$dry_run" == true ]]; then
 fi
 
 printf 'Installing %s@%s...\n' "$PACKAGE" "$version"
-npm install --global "${prefix_args[@]}" "$PACKAGE@$version" || fail "npm could not install REA. Check registry access and npm permissions, then retry."
+npm install --global ${prefix_args[@]+"${prefix_args[@]}"} "$PACKAGE@$version" || fail "npm could not install REA. Check registry access and npm permissions, then retry."
 [[ -x "$install_bin" ]] || fail "npm completed without installing the rea command. Check the npm global bin directory and PATH, then retry."
 installed_version="$("$install_bin" --version 2>/dev/null | tr -d '[:space:]')" || fail "the installed REA version could not be read. Reinstall the requested version, then retry."
 [[ "$installed_version" == "$version" ]] || fail "installed version $installed_version does not match $version. Reinstall the requested version, then retry."

package/native/windows/build/manifest.json

@@ -1,9 +1,9 @@
 {
-  "packageVersion": "5.0.0",
+  "packageVersion": "6.1.0",
   "platform": "win32",
   "architecture": "x64",
   "abiVersion": 1,
   "nodeApiVersion": 8,
   "artifact": "rea-windows-x64.node",
-  "artifactSha256": "f9ae5fa99de3207da630f59be2450febd60c79ed1862abfcf90e9cf080c2c977"
+  "artifactSha256": "9914815706dcd4ef94d01543e31cb0b20035e98d5011d4b4e7f8e509823c8b1d"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "rea-agents",
   "mcpName": "io.github.morluto/rea",
-  "version": "5.0.0",
+  "version": "6.1.0",
   "description": "Reverse engineer anything from your terminal or agent with one CLI and MCP server.",
   "license": "MIT",
   "repository": {
@@ -44,10 +44,14 @@
     "bridge/hopper_bridge.py",
     "bridge/native/NativeUIChildren.swift",
     "bridge/native/ReaNativeUI.swift",
+    "bridge/native/rea_lldb_tracer.py",
+    "bridge/process/ProcessRunTokenReader.swift",
+    "bridge/process/ProcessRunTokenReaderMain.swift",
     "bridge/ghidra/ReaGhidraBridge.java",
     "bridge/ghidra/ReaGhidraExtensions.java",
     "bridge/ghidra/ReaGhidraPrepareCom.java",
     "bridge/android/ReaJadxBridge.java",
+    "bridge/mitmproxy/capture.py",
     "scripts/rea.mjs",
     "scripts/electron-active-hook.cjs",
     "scripts/electron-active-hook-boundaries.cjs",
@@ -59,18 +63,31 @@
     "LICENSE",
     "native/windows/build/manifest.json",
     "native/windows/build/rea-windows-x64.node",
-    "scripts/verify-windows-native-artifact.mjs"
+    "scripts/verify-windows-native-artifact.mjs",
+    "bridge/pwntools/layout.py",
+    "bridge/pwntools/layout_impl.py",
+    "third_party/pwntools/README.md",
+    "third_party/evmole/README.md",
+    "third_party/evmole/LICENSE",
+    "bridge/pwntools/decoder_runtime.py",
+    "bridge/pwntools/recorded_crash.py",
+    "bridge/pwntools/recorded_crash_impl.py",
+    "bridge/pwndbg/launch.py",
+    "bridge/pwndbg/launch_impl.py",
+    "bridge/pwndbg/core_context.py",
+    "third_party/pwndbg/README.md",
+    "third_party/pwndbg/LICENSE.md"
   ],
   "scripts": {
     "deps:check": "node scripts/check-dependency-install.mjs",
     "metadata:generate": "node scripts/generate-package-metadata.mjs",
     "metadata:check": "node scripts/generate-package-metadata.mjs --check",
     "mcp-registry:check": "node scripts/verify-mcp-registry-metadata.mjs",
-    "mcp-catalog:generate": "npm run build:cached && node scripts/generate-mcp-tool-catalog.mjs",
+    "mcp-catalog:generate": "npm run build:cached",
     "mcp-catalog:check": "node scripts/generate-mcp-tool-catalog.mjs --check",
     "prebuild": "npm run deps:check && npm run metadata:check",
     "build": "node scripts/run-exclusive.mjs build npm run build:unlocked",
-    "build:unlocked": "node scripts/clean-build-output.mjs && tsc -p tsconfig.build.json",
+    "build:unlocked": "node scripts/clean-build-output.mjs && tsc -p tsconfig.build.json && node scripts/generate-mcp-tool-catalog.mjs && node scripts/generate-skill-metadata.mjs && node scripts/generate-product-catalog.mjs && node scripts/generate-completion-ledger.mjs",
     "precheck": "npm run deps:check",
     "check": "turbo run typecheck lint format:check knip metadata:check",
     "precheck:fast": "npm run deps:check",
@@ -121,6 +138,9 @@
     "typecheck": "tsc --noEmit",
     "verify:test-temp-hygiene": "npm run build:cached && node scripts/verify-test-temp-hygiene.mjs",
     "verify:hopper": "npm run verify:fixtures && npm run build:cached && node scripts/verify-real-hopper.mjs",
+    "verify:hopper:deadlines": "npm run verify:fixtures && npm run build:cached && node scripts/verify-real-hopper-deadlines.mjs",
+    "verify:hopper:fat": "npm run build:cached && node scripts/verify-real-hopper-fat.mjs",
+    "verify:hopper:fat64": "npm run build:cached && node scripts/verify-real-hopper-fat.mjs --fat64",
     "verify:apple-dispatch": "npm run build:cached && node scripts/verify/apple/dispatch.mjs",
     "verify:native-ui": "npm run build:cached && node scripts/verify-native-ui.mjs",
     "verify:keyed-archive": "npm run build:cached && node scripts/verify/apple/keyed-archive.mjs",
@@ -141,6 +161,7 @@
     "verify:inspector": "npm run build:cached && node scripts/verify/inspector/runtime-observation.mjs",
     "verify:javascript-runtime": "npm run build:cached && node scripts/verify/javascript/runtime-observation.mjs",
     "verify:javascript:digests": "npm run build:cached && node scripts/verify/javascript/digests.mjs",
+    "verify:javascript:output": "npm run build:cached && node scripts/verify/javascript/output.mjs",
     "verify:application-workflows": "npm run build:cached && node scripts/verify/javascript/application-workflows.mjs",
     "verify:managed": "npm run build:cached && node scripts/verify/managed/conformance.mjs",
     "verify:firmware": "npm run build:cached && node scripts/verify/firmware/analysis.mjs",
@@ -161,17 +182,20 @@
     "config:print": "node scripts/print-mcp-config.mjs",
     "evidence:generate": "npm run build:cached && node scripts/generate-completion-ledger.mjs",
     "evidence:check": "npm run build:cached && node scripts/generate-completion-ledger.mjs --check",
+    "predocs:dev": "npm run docs:generate",
     "docs:dev": "vitepress dev docs",
+    "predocs:build": "npm run docs:generate",
     "docs:build": "vitepress build docs",
     "docs:preview": "vitepress preview docs",
     "docs:generate": "node scripts/run-exclusive.mjs docs npm run docs:generate:unlocked",
-    "docs:generate:unlocked": "npm run metadata:generate && npm run build:cached && node scripts/generate-mcp-tool-catalog.mjs && node scripts/generate-skill-metadata.mjs && node scripts/generate-product-catalog.mjs && node scripts/generate-completion-ledger.mjs && node scripts/generate-error-schema.mjs",
+    "docs:generate:unlocked": "npm run metadata:generate && npm run build:cached && node scripts/generate-error-schema.mjs",
     "docs:check": "node scripts/run-exclusive.mjs docs turbo run docs:check:built",
     "docs:check:built": "node scripts/generate-package-metadata.mjs --check && node scripts/generate-mcp-tool-catalog.mjs --check && node scripts/generate-skill-metadata.mjs --check && node scripts/generate-product-catalog.mjs --check && node scripts/generate-completion-ledger.mjs --check && node scripts/check-doc-facts.mjs && node scripts/generate-error-schema.mjs --check",
     "docs:error-schema": "npm run build:cached && node scripts/generate-error-schema.mjs",
     "prepack": "node scripts/prepack.mjs",
     "prepare": "node scripts/prepare.mjs",
     "verify:asset-catalog": "npm run build:cached && node scripts/verify/apple/asset-catalog.mjs",
+    "verify:native-calls": "npm run build:cached && node scripts/verify-native-calls.mjs",
     "verify:native-ui:permissions": "npm run build:cached && node scripts/verify-native-ui.mjs --allow-permission-denial",
     "test:focused": "node scripts/run-development-tests.mjs focused",
     "build:windows-native": "node scripts/build-windows-native.mjs",
@@ -188,7 +212,11 @@
     "verify:javascript:recovery": "node scripts/verify/javascript/recovery.mjs",
     "verify:module-boundaries": "node scripts/verify-module-boundaries.mjs",
     "verify:browser:source-maps": "npm run build:cached && node scripts/verify-browser-source-maps.mjs",
-    "verify:browser:runtime": "npm run build:cached && node scripts/verify-browser-runtime.mjs"
+    "verify:browser:runtime": "npm run build:cached && node scripts/verify-browser-runtime.mjs",
+    "verify:web:network-captures": "npm run build:cached && node scripts/verify-web-network-captures.mjs",
+    "verify:binary:layout": "npm run build:cached && node scripts/verify-binary-layout.mjs",
+    "verify:evm:interface": "npm run build:cached && node scripts/verify-evm-interface.mjs",
+    "verify:recorded:crash": "npm run build:cached && node scripts/verify-recorded-crash.mjs"
   },
   "lint-staged": {
     "*.{cjs,cts,js,jsx,mjs,mts,ts,tsx}": [
@@ -208,14 +236,19 @@
     "@modelcontextprotocol/server": "2.3.1",
     "@xterm/addon-serialize": "0.14.0",
     "@xterm/headless": "6.0.0",
-    "@zip.js/zip.js": "2.8.26",
+    "@zip.js/zip.js": "2.15.0",
+    "ajv": "8.20.0",
+    "ajv-formats": "3.0.1",
     "canonicalize": "3.0.0",
     "cross-spawn": "7.0.6",
     "diff": "9.0.0",
+    "har-schema": "2.0.0",
     "ignore": "7.0.6",
     "incur": "0.6.1",
     "isomorphic-git": "1.38.7",
     "jsonc-parser": "3.3.1",
+    "lossless-json": "4.3.1",
+    "parse5": "8.0.1",
     "pino": "10.4.0",
     "playwright-core": "1.58.2",
     "plist": "5.0.0",
@@ -223,7 +256,8 @@
     "smol-toml": "1.9.0",
     "write-file-atomic": "7.0.0",
     "ws": "8.21.0",
-    "zod": "4.4.3"
+    "zod": "4.4.3",
+    "evmole": "0.9.3"
   },
   "overrides": {
     "vitepress": {
@@ -238,7 +272,6 @@
     "@types/write-file-atomic": "4.0.3",
     "@types/ws": "8.18.1",
     "@vitest/coverage-v8": "5.0.3",
-    "ajv": "8.20.0",
     "husky": "9.1.7",
     "jscpd": "5.0.12",
     "knip": "6.39.0",

package/scripts/electron-active-hook-boundaries.cjs

@@ -61,7 +61,7 @@ const createElectronActiveBoundaryPatches = ({
         const target = typeof args[0] === "string" ? args[0] : null;
         recordRuntime("preload", "context-bridge-exposure", "attempted", {
           target,
-          argument_shapes: args.map((value) => shape(value)),
+          argument_shape_values: args,
           process_type: processType(),
         });
         try {
@@ -110,7 +110,7 @@ const createElectronActiveBoundaryPatches = ({
         event === "will-download" ? "blocked" : "observed",
         {
           target: identity(args[0], "webContents"),
-          argument_shapes: args.map((value) => shape(value)),
+          argument_shape_values: args,
           error: event === "will-download",
         },
       );
@@ -124,7 +124,7 @@ const createElectronActiveBoundaryPatches = ({
             (webContents, permission, callback) => {
               recordRuntime("permission", "permission-request", "blocked", {
                 target: identity(webContents, "webContents"),
-                argument_shapes: [shape(permission)],
+                argument_shape_values: [permission],
                 error: true,
               });
               if (typeof callback === "function") callback(false);
@@ -137,7 +137,7 @@ const createElectronActiveBoundaryPatches = ({
         return originalPermissionCheck.call(this, (webContents, permission) => {
           recordRuntime("permission", "permission-check", "blocked", {
             target: identity(webContents, "webContents"),
-            argument_shapes: [shape(permission)],
+            argument_shape_values: [permission],
             error: true,
           });
           return false;
@@ -148,7 +148,7 @@ const createElectronActiveBoundaryPatches = ({
       session.setCertificateVerifyProc = function blockedCertificate() {
         return originalCertificate.call(this, (request, callback) => {
           recordRuntime("permission", "certificate-error", "blocked", {
-            argument_shapes: [shape(request)],
+            argument_shape_values: [request],
             error: true,
           });
           if (typeof callback === "function") callback(-2);
@@ -168,14 +168,14 @@ const createElectronActiveBoundaryPatches = ({
         } catch {
           recordRuntime("popup-attempt", "window-open-handler", "failed", {
             target: contentsId,
-            argument_shapes: args.map((value) => shape(value)),
+            argument_shape_values: args,
             error: true,
           });
           return { action: "deny" };
         }
         recordRuntime("popup-attempt", "window-open-handler", "blocked", {
           target: contentsId,
-          argument_shapes: args.map((value) => shape(value)),
+          argument_shape_values: args,
           error: true,
         });
         return { action: "deny" };
@@ -195,9 +195,11 @@ const createElectronActiveBoundaryPatches = ({
     };
   };
 
-  const patchSessionManager = (sessionModule) => {
+  const patchSessionManager = (sessionModule, app) => {
     if (sessionModule === null || sessionModule === undefined) return;
-    patchSession(sessionModule.defaultSession);
+    if (app === undefined || app.isReady())
+      patchSession(sessionModule.defaultSession);
+    else app.once("ready", () => patchSession(sessionModule.defaultSession));
     for (const method of ["fromPartition", "fromPath"]) {
       const original = sessionModule[method];
       if (typeof original !== "function") continue;
@@ -223,7 +225,7 @@ const createElectronActiveBoundaryPatches = ({
           method === "relaunch" ? "updater" : "protocol",
           method,
           "blocked",
-          { argument_shapes: args.map((value) => shape(value)), error: true },
+          { argument_shape_values: args, error: true },
         );
         return method === "setAsDefaultProtocolClient" ? false : undefined;
       };
@@ -250,11 +252,7 @@ const createElectronActiveBoundaryPatches = ({
       recordRuntime("native-addon", "dlopen", "attempted", {
         artifact_path: typeof filename === "string" ? filename : null,
         artifact_sha256: digest,
-        argument_shapes: [
-          shape(module),
-          shape(filename),
-          ...args.map((value) => shape(value)),
-        ],
+        argument_shape_value_groups: [[module, filename], args],
       });
       try {
         const result = original.call(this, module, filename, ...args);
@@ -280,7 +278,7 @@ const createElectronActiveBoundaryPatches = ({
     if (typeof original !== "function") return;
     utilityProcess.fork = function patchedFork(...args) {
       recordRuntime("process-lifecycle", "utility-process-fork", "attempted", {
-        argument_shapes: args.map((value) => shape(value)),
+        argument_shape_values: args,
         process_type: "main",
       });
       const child = original.apply(this, args);
@@ -304,7 +302,7 @@ const createElectronActiveBoundaryPatches = ({
         recordRuntime("process-lifecycle", `utility.${event}`, "observed", {
           target: childId,
           process_type: "utility",
-          argument_shapes: eventArgs.map((value) => shape(value)),
+          argument_shape_values: eventArgs,
         });
       });
       if (child && typeof child.postMessage === "function") {
@@ -344,7 +342,7 @@ const createElectronActiveBoundaryPatches = ({
       if (typeof original !== "function") continue;
       shell[method] = function blockedShellCall(...args) {
         recordRuntime("shell-attempt", method, "blocked", {
-          argument_shapes: args.map((value) => shape(value)),
+          argument_shape_values: args,
           error: true,
         });
         return Promise.reject(new Error("External shell effects are blocked"));
@@ -359,7 +357,7 @@ const createElectronActiveBoundaryPatches = ({
       if (typeof original !== "function") continue;
       childProcess[method] = function patchedChildProcess(...args) {
         recordRuntime("process-lifecycle", `child.${method}`, "attempted", {
-          argument_shapes: args.map((value) => shape(value)),
+          argument_shape_values: args,
         });
         const child = original.apply(this, args);
         const childId = identity(child, "child");
@@ -369,7 +367,7 @@ const createElectronActiveBoundaryPatches = ({
         patchEmitter(child, (event, eventArgs) =>
           recordRuntime("process-lifecycle", `child.${event}`, "observed", {
             target: childId,
-            argument_shapes: eventArgs.map((value) => shape(value)),
+            argument_shape_values: eventArgs,
           }),
         );
         return child;