rea-agents 6.0.0 → 6.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (611) hide show
  1. package/README.md +26 -18
  2. package/bridge/android/ReaJadxBridge.java +14 -5
  3. package/bridge/ghidra/ReaGhidraBridge.java +205 -51
  4. package/bridge/hopper_bridge.py +314 -127
  5. package/bridge/mitmproxy/capture.py +0 -2
  6. package/bridge/native/rea_lldb_tracer.py +630 -94
  7. package/bridge/process/ProcessRunTokenReader.swift +39 -5
  8. package/bridge/pwntools/recorded_crash_impl.py +4 -0
  9. package/dist/android/JadxConfiguration.js +274 -31
  10. package/dist/android/JadxMcpTransport.js +18 -2
  11. package/dist/android/JadxProtocol.js +6 -0
  12. package/dist/android/JadxProvider.js +76 -37
  13. package/dist/android/JadxSession.js +23 -4
  14. package/dist/application/AnalysisContextQueries.js +8 -35
  15. package/dist/application/AnalysisDocument.js +32 -0
  16. package/dist/application/AppBundleExecutable.js +67 -21
  17. package/dist/application/BinaryTargetResolver.js +5 -3
  18. package/dist/application/BrowserEvidence.js +3 -8
  19. package/dist/application/BrowserScenarioEvidence.js +2 -18
  20. package/dist/application/CallPathTracing.js +19 -3
  21. package/dist/application/CapabilityInventory.js +48 -11
  22. package/dist/application/ClientConfigurationDocument.js +917 -8
  23. package/dist/application/ClientRegistrationIdentity.js +26 -5
  24. package/dist/application/ClientRegistrationStatus.js +29 -14
  25. package/dist/application/DirectAnalysis.js +56 -51
  26. package/dist/application/DirectAnalysisCleanup.js +72 -0
  27. package/dist/application/DirectAnalysisStatus.js +4 -5
  28. package/dist/application/Doctor.js +19 -21
  29. package/dist/application/DoctorDiagnostics.js +1 -2
  30. package/dist/application/DoctorScope.js +25 -13
  31. package/dist/application/EnhancedLiteralTracing.js +22 -25
  32. package/dist/application/EnhancedTools.js +64 -17
  33. package/dist/application/EvidenceBundleFiles.js +30 -13
  34. package/dist/application/FunctionAnalysisEvidence.js +2 -3
  35. package/dist/application/InventoryProjectionEvidence.js +4 -3
  36. package/dist/application/InvestigationProviders.js +11 -2
  37. package/dist/application/JsonFiles.js +83 -28
  38. package/dist/application/LinuxHopper.js +9 -6
  39. package/dist/application/MacHopper.js +15 -18
  40. package/dist/application/ProcedureAddressResolution.js +11 -0
  41. package/dist/application/RealHopperAssertions.js +0 -11
  42. package/dist/application/ReconstructionCoverageService.js +7 -4
  43. package/dist/application/ReconstructionObligationCandidates.js +1 -1
  44. package/dist/application/ReconstructionObligationLedgerService.js +4 -3
  45. package/dist/application/ReferenceSourceImportEntries.js +1 -1
  46. package/dist/application/Setup.js +21 -17
  47. package/dist/application/SetupClientConfiguration.js +10 -15
  48. package/dist/application/SetupHost.js +21 -29
  49. package/dist/application/SetupPlan.js +11 -9
  50. package/dist/application/SupportedClients.js +34 -1
  51. package/dist/application/Uninstall.js +82 -29
  52. package/dist/application/Update.js +18 -3
  53. package/dist/application/UpdateMaintenance.js +7 -5
  54. package/dist/application/UpdateRuntime.js +57 -36
  55. package/dist/application/WebModuleTraceService.js +4 -2
  56. package/dist/application/WebNetworkCaptureService.js +4 -2
  57. package/dist/application/WebRuntimeService.js +5 -3
  58. package/dist/application/WebScriptExportService.js +32 -6
  59. package/dist/application/WebSourceLocationService.js +4 -2
  60. package/dist/application/WorkflowEvidence.js +105 -0
  61. package/dist/application/XrefsAddressResolution.js +45 -0
  62. package/dist/application/analysisView/AnalysisViewService.js +76 -0
  63. package/dist/application/binary/AnalysisClientCleanup.js +30 -5
  64. package/dist/application/binary/AnalysisProviderEvaluation.js +22 -7
  65. package/dist/application/binary/AnalysisProviderRegistry.js +4 -6
  66. package/dist/application/binary/AnalysisSnapshotCache.js +13 -14
  67. package/dist/application/binary/BinarySession.js +161 -93
  68. package/dist/application/binary/BinarySessionComposition.js +1 -3
  69. package/dist/application/binary/BinarySessionExecution.js +3 -5
  70. package/dist/application/binary/BinarySessionOpen.js +4 -4
  71. package/dist/application/binary/BinarySessionRecords.js +26 -4
  72. package/dist/application/binary/BinarySessionStatus.js +18 -7
  73. package/dist/application/binary/CompositeProvider.js +16 -17
  74. package/dist/application/binary/LazyAnalysisProvider.js +8 -5
  75. package/dist/application/binary/SessionProviderRouter.js +27 -135
  76. package/dist/application/binaryDiagnostics/BinaryLayoutService.js +4 -2
  77. package/dist/application/binaryDiagnostics/RecordedCrashService.js +4 -2
  78. package/dist/application/evm/EvmInterfaceService.js +4 -2
  79. package/dist/application/homebrew.js +48 -0
  80. package/dist/application/investigation/EvidenceLedger.js +21 -7
  81. package/dist/application/investigation/InvestigationRecords.js +8 -0
  82. package/dist/application/javascript/ElectronActiveEvidence.js +9 -13
  83. package/dist/application/javascript/JavaScriptAnalysisControl.js +34 -0
  84. package/dist/application/javascript/JavaScriptApplicationEvidence.js +21 -4
  85. package/dist/application/javascript/JavaScriptApplicationEvidenceGraph.js +19 -2
  86. package/dist/application/javascript/JavaScriptApplicationService.js +27 -15
  87. package/dist/application/javascript/JavaScriptApplicationWorkflowService.js +5 -5
  88. package/dist/application/javascript/JavaScriptArtifactAnalysis.js +10 -7
  89. package/dist/application/javascript/JavaScriptArtifactGraphBuilder.js +44 -10
  90. package/dist/application/javascript/JavaScriptArtifactGraphBundlers.js +11 -3
  91. package/dist/application/javascript/JavaScriptArtifactGraphContext.js +9 -0
  92. package/dist/application/javascript/JavaScriptArtifactGraphDocuments.js +8 -5
  93. package/dist/application/javascript/JavaScriptArtifactGraphFindings.js +12 -3
  94. package/dist/application/javascript/JavaScriptArtifactGraphStructure.js +0 -1
  95. package/dist/application/javascript/JavaScriptArtifactPathResolution.js +49 -19
  96. package/dist/application/javascript/JavaScriptArtifactReconstruction.js +56 -8
  97. package/dist/application/javascript/JavaScriptModuleRelationships.js +38 -9
  98. package/dist/application/javascript/JavaScriptRecoveryService.js +4 -2
  99. package/dist/application/javascript/JavaScriptRuntimeObservationService.js +6 -4
  100. package/dist/application/javascript/JavaScriptRuntimeReconciliationService.js +3 -3
  101. package/dist/application/javascript/JavaScriptSemanticGraphAsyncProjection.js +2 -3
  102. package/dist/application/javascript/JavaScriptSemanticGraphBuilder.js +63 -61
  103. package/dist/application/javascript/JavaScriptSemanticGraphChildProcessProjection.js +1 -2
  104. package/dist/application/javascript/JavaScriptSemanticGraphDataProjection.js +2 -3
  105. package/dist/application/javascript/JavaScriptSemanticGraphFlowProjection.js +1 -5
  106. package/dist/application/javascript/JavaScriptSemanticGraphObjectProjection.js +75 -46
  107. package/dist/application/javascript/JavaScriptSemanticGraphResourceProjection.js +2 -3
  108. package/dist/application/javascript/JavaScriptSemanticGraphValueProjection.js +64 -19
  109. package/dist/application/managed/ManagedApplicationGraphService.js +4 -3
  110. package/dist/application/managed/ManagedMemberComparisonService.js +9 -5
  111. package/dist/application/managed/ManagedNativeVerificationService.js +6 -4
  112. package/dist/application/managed/ManagedReconstructionService.js +4 -3
  113. package/dist/application/process/ProcessCli.js +25 -17
  114. package/dist/application/process/ProcessEvidence.js +4 -4
  115. package/dist/application/workflowInputError.js +18 -0
  116. package/dist/artifacts/ArtifactProvider.js +48 -13
  117. package/dist/artifacts/ArtifactReader.js +31 -0
  118. package/dist/artifacts/DirectoryArtifactReader.js +2 -1
  119. package/dist/artifacts/MachOSliceArtifactReader.js +106 -15
  120. package/dist/artifacts/NativeDmgArtifactReader.js +73 -21
  121. package/dist/artifacts/SafeOutputTree.js +16 -2
  122. package/dist/artifacts/ZipArtifactReader.js +11 -4
  123. package/dist/artifacts/apple/AppleAssetCatalogAnalysis.js +26 -5
  124. package/dist/artifacts/apple/DylibResolutionReader.js +17 -7
  125. package/dist/artifacts/apple/InterfaceBuilderAnalysis.js +176 -56
  126. package/dist/artifacts/apple/InterfaceBuilderDecodeBudget.js +195 -0
  127. package/dist/artifacts/apple/KeyedArchiveReader.js +55 -23
  128. package/dist/artifacts/apple/MachoLoadCommandReader.js +92 -31
  129. package/dist/artifacts/apple/NibArchive.js +81 -14
  130. package/dist/artifacts/apple/NibViewHierarchy.js +10 -3
  131. package/dist/artifacts/apple/PlistNumberLiterals.js +164 -0
  132. package/dist/artifacts/extraction/ArtifactExtraction.js +78 -21
  133. package/dist/artifacts/inventory/ArtifactGraphConstruction.js +79 -68
  134. package/dist/artifacts/inventory/ArtifactInventory.js +0 -1
  135. package/dist/artifacts/inventory/reader.js +3 -3
  136. package/dist/artifacts/inventory/scanCanonical.js +59 -38
  137. package/dist/artifacts/inventory/scanReader.js +5 -9
  138. package/dist/artifacts/javascript/JavaScriptArtifactFiles.js +6 -2
  139. package/dist/browser/BrowserScenarioPartialObservation.js +106 -0
  140. package/dist/browser/CdpBrowserProvider.js +2 -3
  141. package/dist/browser/CdpCaptureCompleteness.js +2 -0
  142. package/dist/browser/CdpCaptureEventHandlers.js +78 -15
  143. package/dist/browser/CdpCaptureEventTypes.js +5 -1
  144. package/dist/browser/CdpCaptureEvents.js +25 -1
  145. package/dist/browser/CdpCaptureValues.js +20 -0
  146. package/dist/browser/CdpConnection.js +30 -11
  147. package/dist/browser/CdpElectronProvider.js +0 -2
  148. package/dist/browser/CdpElectronScriptEvents.js +2 -8
  149. package/dist/browser/CdpElectronScripts.js +2 -3
  150. package/dist/browser/CdpOptionalCommand.js +2 -3
  151. package/dist/browser/CdpPageCapture.js +23 -1
  152. package/dist/browser/CdpPageCaptureScripts.js +2 -3
  153. package/dist/browser/CdpSafeMetadata.js +10 -10
  154. package/dist/browser/PlaywrightBrowserScenarioProvider.js +59 -44
  155. package/dist/browser/PlaywrightElectronActiveActions.js +34 -79
  156. package/dist/browser/PlaywrightElectronActiveProjection.js +141 -0
  157. package/dist/browser/PlaywrightElectronActiveProvider.js +133 -130
  158. package/dist/browser/PlaywrightScenarioArtifacts.js +1 -1
  159. package/dist/browser/PlaywrightScenarioBrowser.js +139 -39
  160. package/dist/browser/PlaywrightScenarioEvents.js +1 -1
  161. package/dist/browser/PlaywrightScenarioSession.js +39 -22
  162. package/dist/browser/WebSourceMapFetcher.js +426 -72
  163. package/dist/browser/assets/LocalWebScriptArtifacts.js +2 -2
  164. package/dist/browser/assets/ScriptCaptureAdapters.js +1 -1
  165. package/dist/browser/history/CaptureFailures.js +41 -1
  166. package/dist/browser/history/CaptureRelease.js +5 -0
  167. package/dist/browser/history/HarCaptureAdapter.js +3 -3
  168. package/dist/browser/history/HarJson.js +3 -2
  169. package/dist/browser/history/HistoricalCaptureDecoder.js +4 -2
  170. package/dist/browser/history/MitmproxyCaptureAdapter.js +4 -2
  171. package/dist/catalogIdentity.js +0 -1
  172. package/dist/cli/analysisSelector.js +23 -0
  173. package/dist/cli/analysisViewCommands.js +36 -0
  174. package/dist/cli/applicationCommands.js +2 -3
  175. package/dist/cli/artifactCommands.js +11 -12
  176. package/dist/cli/coreAnalysisCommands.js +3 -3
  177. package/dist/cli/coreBinaryCommands.js +100 -37
  178. package/dist/cli/coreNativeCommands.js +9 -10
  179. package/dist/cli/electronCommands.js +10 -9
  180. package/dist/cli/interactiveSetup.js +6 -6
  181. package/dist/cli/javascriptApplicationAnalysis.js +7 -3
  182. package/dist/cli/jsonOutput.js +4 -99
  183. package/dist/cli/managedCommands.js +7 -8
  184. package/dist/cli/nativeCallCommands.js +3 -5
  185. package/dist/cli/omittableDefaults.js +50 -0
  186. package/dist/cli/processCommands.js +3 -2
  187. package/dist/cli/setupCommands.js +16 -15
  188. package/dist/cli/utilityCommands.js +9 -9
  189. package/dist/cli/webRuntimeCommands.js +8 -8
  190. package/dist/cli.js +18 -9
  191. package/dist/cliBrowserScenarioCommands.js +2 -2
  192. package/dist/cliCommandNames.js +1 -1
  193. package/dist/cliJsonInput.js +24 -5
  194. package/dist/cliOutput.js +0 -38
  195. package/dist/composition/auxiliaryAnalysisProviders.js +27 -23
  196. package/dist/composition/binary.js +9 -9
  197. package/dist/composition/browserScenario.js +2 -1
  198. package/dist/composition/directAnalysis.js +20 -13
  199. package/dist/composition/electronScenario.js +1 -1
  200. package/dist/composition/optionalObservationProviders.js +12 -7
  201. package/dist/config/environment.js +10 -0
  202. package/dist/config/ghidraStartupTimeout.js +12 -0
  203. package/dist/config/homeDirectory.js +12 -0
  204. package/dist/config/mcpResponseBudget.js +30 -0
  205. package/dist/config/parseConfig.js +8 -3
  206. package/dist/config/parsers.js +19 -22
  207. package/dist/contracts/analysisViewToolContracts.js +56 -0
  208. package/dist/contracts/applicationToolContracts.js +5 -4
  209. package/dist/contracts/artifactComparisonExample.js +2 -2
  210. package/dist/contracts/artifactToolContracts.js +1 -1
  211. package/dist/contracts/browserScenarioToolContracts.js +1 -1
  212. package/dist/contracts/browserToolContracts.js +19 -15
  213. package/dist/contracts/enhancedInputs.js +7 -5
  214. package/dist/contracts/enhancedToolContracts.js +7 -6
  215. package/dist/contracts/evm/evmToolContracts.js +1 -1
  216. package/dist/contracts/functionWorkflowToolContracts.js +1 -1
  217. package/dist/contracts/hopperMemoryContracts.js +2 -5
  218. package/dist/contracts/inputSchemaPresentation.js +90 -0
  219. package/dist/contracts/investigationExamples.js +4 -3
  220. package/dist/contracts/javascript/electronToolContracts.js +2 -2
  221. package/dist/contracts/javascript/javascriptApplicationWorkflowExamples.js +0 -20
  222. package/dist/contracts/javascript/javascriptExportShapeComparisonExample.js +245 -0
  223. package/dist/contracts/javascript/javascriptRuntimeObservationToolContracts.js +1 -1
  224. package/dist/contracts/managed/managedToolContracts.js +7 -14
  225. package/dist/contracts/managed/managedWorkflowToolContracts.js +1 -1
  226. package/dist/contracts/mobileApplicationGraphExamples.js +3 -3
  227. package/dist/contracts/native/binaryDiagnosticsToolContracts.js +1 -1
  228. package/dist/contracts/native/nativeToolContracts.js +5 -3
  229. package/dist/contracts/officialToolContracts.js +16 -16
  230. package/dist/contracts/promptContracts.js +5 -5
  231. package/dist/contracts/providerSelection.js +1 -1
  232. package/dist/contracts/sessionLifecycleInputs.js +3 -7
  233. package/dist/contracts/sessionStatusContract.js +2 -4
  234. package/dist/contracts/sessionToolContracts.js +18 -8
  235. package/dist/contracts/sessionToolSchemas.js +3 -19
  236. package/dist/contracts/toolContractExamples.js +0 -1
  237. package/dist/contracts/toolContractHelpers.js +4 -1
  238. package/dist/contracts/toolContracts.js +2 -0
  239. package/dist/contracts/toolEffects.js +1 -1
  240. package/dist/contracts/toolOutputSchemaGroups.js +160 -115
  241. package/dist/contracts/toolOutputSchemaPrimitives.js +28 -20
  242. package/dist/contracts/toolSchemaMetadata.js +41 -33
  243. package/dist/contracts/webNetworkCaptureToolContracts.js +2 -2
  244. package/dist/contracts/webRuntimeToolContracts.js +1 -1
  245. package/dist/contracts/webScriptToolContracts.js +1 -1
  246. package/dist/doctorRuntime.js +7 -5
  247. package/dist/domain/analysisErrorBase.js +8 -3
  248. package/dist/domain/analysisErrorCore.js +6 -1
  249. package/dist/domain/analysisErrorPresentation.js +90 -20
  250. package/dist/domain/analysisErrorProjection.js +130 -32
  251. package/dist/domain/analysisSnapshot.js +29 -31
  252. package/dist/domain/analysisView/analysisView.js +243 -0
  253. package/dist/domain/analysisView/analysisViewCoverage.js +19 -0
  254. package/dist/domain/analysisView/binaryLayoutView.js +159 -0
  255. package/dist/domain/analysisView/javascriptApplicationView.js +238 -0
  256. package/dist/domain/android/androidAnalysis.js +2 -4
  257. package/dist/domain/android/androidApplication.js +18 -10
  258. package/dist/domain/apple/appleApplication.js +42 -15
  259. package/dist/domain/apple/dyldEnvironment.js +73 -0
  260. package/dist/domain/apple/dylibResolution.js +130 -12
  261. package/dist/domain/apple/dylibResolutionFindings.js +9 -7
  262. package/dist/domain/apple/interfaceBuilderGraph.js +25 -14
  263. package/dist/domain/apple/interfaceBuilderKeyedArchive.js +13 -3
  264. package/dist/domain/apple/keyedArchive.js +35 -3
  265. package/dist/domain/apple/machoContainer.js +54 -0
  266. package/dist/domain/apple/plistNumbers.js +76 -0
  267. package/dist/domain/artifactComparison.js +15 -6
  268. package/dist/domain/artifactGraph.js +16 -3
  269. package/dist/domain/artifactIdentity.js +29 -0
  270. package/dist/domain/artifactInventoryEvidence.js +28 -40
  271. package/dist/domain/artifactOperationError.js +3 -3
  272. package/dist/domain/artifactPartialObservation.js +1 -0
  273. package/dist/domain/artifactPathSyntax.js +49 -0
  274. package/dist/domain/binaryTarget.js +39 -13
  275. package/dist/domain/bridgeCandidateProjection.js +71 -0
  276. package/dist/domain/browserCaptureComparison.js +13 -49
  277. package/dist/domain/browserCompleteness.js +1 -0
  278. package/dist/domain/browserNetworkEvidence.js +10 -4
  279. package/dist/domain/browserObservation.js +0 -1
  280. package/dist/domain/browserObservationError.js +24 -5
  281. package/dist/domain/browserObservationSchemas.js +14 -3
  282. package/dist/domain/browserScenario.js +0 -1
  283. package/dist/domain/browserScenarioCapture.js +1 -2
  284. package/dist/domain/browserScenarioDiff.js +0 -2
  285. package/dist/domain/browserScenarioDiffEvidence.js +0 -12
  286. package/dist/domain/browserScenarioDiffValues.js +2 -2
  287. package/dist/domain/browserScenarioValues.js +5 -10
  288. package/dist/domain/bundleComparison.js +3 -2
  289. package/dist/domain/callPath.js +8 -9
  290. package/dist/domain/callPathSchemas.js +2 -2
  291. package/dist/domain/canonicalJsonDigestSteps.js +133 -0
  292. package/dist/domain/canonicalOrdering.js +9 -5
  293. package/dist/domain/changedBehavior.js +9 -9
  294. package/dist/domain/comparisonSourceEvidence.js +40 -0
  295. package/dist/domain/completionLedgerGeneration.js +2 -1
  296. package/dist/domain/configurationErrors.js +13 -1
  297. package/dist/domain/conformancePackage.js +4 -3
  298. package/dist/domain/evidence.js +65 -36
  299. package/dist/domain/evidenceBundle.js +47 -8
  300. package/dist/domain/evidenceCompletionLedger.js +2 -1
  301. package/dist/domain/evidenceErrors.js +12 -1
  302. package/dist/domain/explicitSensitiveFailure.js +17 -1
  303. package/dist/domain/firmware/firmwareAnalysis.js +6 -7
  304. package/dist/domain/functionComparison.js +4 -5
  305. package/dist/domain/functionComparisonDimensions.js +120 -87
  306. package/dist/domain/functionComparisonNormalization.js +23 -34
  307. package/dist/domain/functionComparisonResults.js +1 -4
  308. package/dist/domain/functionComparisonSchemas.js +2 -8
  309. package/dist/domain/functionDossierEvidence.js +2 -37
  310. package/dist/domain/hopperErrors.js +23 -2
  311. package/dist/domain/hopperValues.js +51 -8
  312. package/dist/domain/immutableJson.js +114 -0
  313. package/dist/domain/inputIssueProjection.js +3 -0
  314. package/dist/domain/javascript/electronActiveObservation.js +47 -64
  315. package/dist/domain/javascript/electronObservation.js +14 -3
  316. package/dist/domain/javascript/electronStaticAnalysisBrowser.js +10 -9
  317. package/dist/domain/javascript/electronStaticAnalysisIpc.js +2 -1
  318. package/dist/domain/javascript/electronStaticAnalysisNative.js +2 -1
  319. package/dist/domain/javascript/electronStaticAnalysisValues.js +6 -12
  320. package/dist/domain/javascript/javascriptApplicationAnalysis.js +71 -23
  321. package/dist/domain/javascript/javascriptApplicationEvidenceSchemas.js +2 -0
  322. package/dist/domain/javascript/javascriptApplicationGraph.js +39 -3
  323. package/dist/domain/javascript/javascriptApplicationGraphSchemas.js +9 -2
  324. package/dist/domain/javascript/javascriptApplicationVersionItems.js +5 -2
  325. package/dist/domain/javascript/javascriptApplicationVersionKeys.js +2 -1
  326. package/dist/domain/javascript/javascriptAstValues.js +20 -0
  327. package/dist/{application/javascript/JavaScriptReturnShapeProjection.js → domain/javascript/javascriptExportReturnShapeProjection.js} +4 -4
  328. package/dist/domain/javascript/javascriptExportShapeComparison.js +7 -1
  329. package/dist/domain/javascript/javascriptExportShapeComparisonIdentity.js +6 -1
  330. package/dist/domain/javascript/javascriptExportShapeComparisonSchemas.js +29 -1
  331. package/dist/domain/javascript/javascriptExportShapeSelection.js +5 -5
  332. package/dist/domain/javascript/javascriptExportShapeVariants.js +67 -14
  333. package/dist/domain/javascript/javascriptFeatureSeed.js +20 -0
  334. package/dist/domain/javascript/javascriptFeatureTraversal.js +0 -1
  335. package/dist/domain/javascript/javascriptNativeHandoff.js +1 -1
  336. package/dist/domain/javascript/javascriptRecovery.js +3 -8
  337. package/dist/domain/javascript/javascriptRuntimeLoadState.js +0 -1
  338. package/dist/domain/javascript/javascriptRuntimeObservation.js +10 -2
  339. package/dist/domain/javascript/javascriptRuntimeReconciliationMatching.js +1 -1
  340. package/dist/domain/javascript/javascriptRuntimeReconciliationParsing.js +3 -2
  341. package/dist/domain/javascript/javascriptRuntimeStaticCandidates.js +0 -1
  342. package/dist/domain/javascript/javascriptSemanticAnalysis.js +106 -5
  343. package/dist/domain/javascript/javascriptSemanticAsyncEffects.js +2 -1
  344. package/dist/domain/javascript/javascriptSemanticCalls.js +2 -1
  345. package/dist/domain/javascript/javascriptSemanticChildProcesses.js +2 -1
  346. package/dist/domain/javascript/javascriptSemanticCoverage.js +6 -5
  347. package/dist/domain/javascript/javascriptSemanticDataEffectHelpers.js +9 -17
  348. package/dist/domain/javascript/javascriptSemanticDataEffects.js +23 -6
  349. package/dist/domain/javascript/javascriptSemanticGraph.js +98 -43
  350. package/dist/domain/javascript/javascriptSemanticGraphSchemas.js +1 -0
  351. package/dist/domain/javascript/javascriptSemanticMemberMutations.js +77 -20
  352. package/dist/domain/javascript/javascriptSemanticMutationValues.js +21 -27
  353. package/dist/domain/javascript/javascriptSemanticObjects.js +83 -42
  354. package/dist/domain/javascript/javascriptSemanticPrimitives.js +18 -21
  355. package/dist/domain/javascript/javascriptSemanticProjection.js +2 -3
  356. package/dist/domain/javascript/javascriptSemanticPromises.js +2 -1
  357. package/dist/domain/javascript/javascriptSemanticQuerySchemas.js +8 -4
  358. package/dist/domain/javascript/javascriptSemanticResourceLimits.js +77 -0
  359. package/dist/domain/javascript/javascriptSemanticResources.js +1 -1
  360. package/dist/domain/javascript/javascriptSemanticReturns.js +32 -17
  361. package/dist/domain/javascript/javascriptSemanticSlots.js +72 -0
  362. package/dist/domain/javascript/javascriptSemanticValues.js +126 -61
  363. package/dist/domain/javascript/javascriptSourceMapPaths.js +104 -0
  364. package/dist/domain/javascript/javascriptSourceParser.js +6 -2
  365. package/dist/domain/javascript/javascriptStaticAnalysis.js +22 -17
  366. package/dist/domain/javascript/javascriptStaticAnalysisBundler.js +5 -3
  367. package/dist/domain/javascript/javascriptStaticAnalysisCalls.js +16 -5
  368. package/dist/domain/javascript/javascriptStaticAnalysisFindings.js +66 -7
  369. package/dist/domain/javascript/javascriptStaticAnalysisHelpers.js +28 -17
  370. package/dist/domain/javascript/javascriptStaticAnalysisState.js +3 -2
  371. package/dist/domain/javascript/sourceToBundleComparison.js +12 -3
  372. package/dist/domain/javascript/sourceToBundleSignals.js +47 -19
  373. package/dist/domain/jsonSerialization.js +109 -0
  374. package/dist/domain/jsonValue.js +90 -6
  375. package/dist/domain/localPath.js +6 -0
  376. package/dist/domain/managed/managedApplicationGraph.js +10 -10
  377. package/dist/domain/managed/managedArtifact.js +6 -4
  378. package/dist/domain/managed/managedInspectionEvidence.js +16 -0
  379. package/dist/domain/managed/managedMemberComparison.js +2 -9
  380. package/dist/domain/managed/managedMemberComparisonMatch.js +5 -9
  381. package/dist/domain/managed/managedNativeVerification.js +3 -11
  382. package/dist/domain/managed/managedNativeVerificationMatch.js +9 -3
  383. package/dist/domain/native/binaryLayout.js +2 -3
  384. package/dist/domain/native/fileOffsetPartialObservation.js +1 -0
  385. package/dist/domain/native/nativeApiBoundary.js +1 -1
  386. package/dist/domain/native/nativeCallObservation.js +37 -13
  387. package/dist/domain/native/nativeCallPartialObservation.js +33 -0
  388. package/dist/domain/native/nativeInstruction.js +7 -0
  389. package/dist/domain/native/recordedCrash.js +2 -3
  390. package/dist/domain/offsetDateTime.js +17 -0
  391. package/dist/domain/process/processCapture.js +21 -16
  392. package/dist/domain/process/processCaptureCoverage.js +67 -0
  393. package/dist/domain/process/processCaptureExample.js +2 -1
  394. package/dist/domain/process/processCaptureParsing.js +1 -34
  395. package/dist/domain/process/processCaptureValidation.js +81 -13
  396. package/dist/domain/process/processComparison.js +79 -26
  397. package/dist/domain/process/processObservation.js +10 -2
  398. package/dist/domain/process/processScenario.js +35 -12
  399. package/dist/domain/process/processTraceComparison.js +0 -2
  400. package/dist/domain/process/processTraceDimensionProjection.js +1 -1
  401. package/dist/domain/process/processTraceEvaluation.js +15 -11
  402. package/dist/domain/process/processTraceSpecification.js +3 -4
  403. package/dist/domain/propertyListKeys.js +1 -1
  404. package/dist/domain/propertyListXmlText.js +19 -0
  405. package/dist/domain/providerAdapterError.js +3 -1
  406. package/dist/domain/providerOperationHealth.js +54 -0
  407. package/dist/domain/reconstructionCoverage.js +5 -2
  408. package/dist/domain/reconstructionObligationLedgerSchemas.js +2 -1
  409. package/dist/domain/reconstructionReadinessSchemas.js +2 -1
  410. package/dist/domain/reconstructionVerification.js +9 -46
  411. package/dist/domain/reconstructionVerificationSchemas.js +4 -3
  412. package/dist/domain/referenceSourceGraph.js +20 -21
  413. package/dist/domain/staticRuntimeCorrelation.js +8 -45
  414. package/dist/domain/stringPatterns.js +6 -0
  415. package/dist/domain/swiftSymbolClassification.js +61 -0
  416. package/dist/domain/symbolAnalysis.js +66 -18
  417. package/dist/domain/webBundleAnalysis.js +20 -8
  418. package/dist/domain/webBundleAnalyzerInspection.js +13 -8
  419. package/dist/domain/webBundleAnalyzerResult.js +41 -2
  420. package/dist/domain/webCaptureDiff.js +0 -1
  421. package/dist/domain/webCaptureDiffSchemas.js +6 -3
  422. package/dist/domain/webEventListeners.js +3 -2
  423. package/dist/domain/webExecution.js +3 -2
  424. package/dist/domain/webRuntime.js +19 -7
  425. package/dist/domain/webScriptExport.js +1 -1
  426. package/dist/domain/webSourceLocation.js +1 -0
  427. package/dist/dotnet/ManagedArtifactInspector.js +2 -19
  428. package/dist/dotnet/ManagedMemberInspector.js +12 -18
  429. package/dist/dotnet/ManagedMemberInspectorCore.js +47 -44
  430. package/dist/dotnet/ManagedMemberRows.js +75 -62
  431. package/dist/dotnet/ManagedMetadataInventory.js +16 -22
  432. package/dist/dotnet/ManagedMethodBodyReader.js +4 -0
  433. package/dist/dotnet/ManagedNativeBoundaryHelpers.js +109 -94
  434. package/dist/dotnet/ManagedNativeBoundaryInspector.js +12 -21
  435. package/dist/dotnet/ManagedReaderFailure.js +16 -0
  436. package/dist/dotnet/ManagedStaticProvider.js +3 -5
  437. package/dist/evaluation/AgentEvaluationFixtures.js +250 -0
  438. package/dist/evaluation/AgentEvaluationReport.js +28 -0
  439. package/dist/evaluation/CodexAgentEval.js +12 -8
  440. package/dist/evaluation/KnownAnswerEvaluation.js +281 -0
  441. package/dist/evm/EvmoleInterfaceProvider.js +2 -1
  442. package/dist/firmware/FirmwareCommand.js +9 -5
  443. package/dist/firmware/FirmwareFiles.js +1 -1
  444. package/dist/firmware/FirmwareProvider.js +4 -4
  445. package/dist/generatedPackageMetadata.js +2 -2
  446. package/dist/ghidra/GhidraAnalysisProfile.js +7 -5
  447. package/dist/ghidra/GhidraClient.js +126 -34
  448. package/dist/ghidra/GhidraClientStartup.js +0 -2
  449. package/dist/ghidra/GhidraDiagnostics.js +7 -7
  450. package/dist/ghidra/GhidraDoctor.js +6 -5
  451. package/dist/ghidra/GhidraFunctionValues.js +13 -12
  452. package/dist/ghidra/GhidraInstallation.js +58 -33
  453. package/dist/ghidra/GhidraInventoryValues.js +14 -4
  454. package/dist/ghidra/GhidraJavaLaunch.js +66 -0
  455. package/dist/ghidra/GhidraLauncher.js +47 -22
  456. package/dist/ghidra/GhidraProvider.js +6 -2
  457. package/dist/ghidra/GhidraProviderCapabilities.js +20 -2
  458. package/dist/ghidra/GhidraProviderClient.js +36 -15
  459. package/dist/ghidra/GhidraSessionError.js +13 -7
  460. package/dist/ghidra/GhidraSessionRoot.js +39 -0
  461. package/dist/ghidra/GhidraTargetSnapshot.js +47 -12
  462. package/dist/ghidra/GhidraTransport.js +20 -0
  463. package/dist/ghidra/extensions/GhidraExtensions.js +17 -10
  464. package/dist/ghidra/extensions/nativeaot/NativeAotAdapter.js +8 -2
  465. package/dist/hopper/BridgeLauncher.js +65 -56
  466. package/dist/hopper/HopperAnalysisProfile.js +65 -12
  467. package/dist/hopper/HopperCleanup.js +63 -22
  468. package/dist/hopper/HopperClient.js +288 -59
  469. package/dist/hopper/HopperFileOffset.js +237 -0
  470. package/dist/hopper/HopperMachOImage.js +197 -0
  471. package/dist/hopper/HopperOperationStage.js +6 -0
  472. package/dist/hopper/HopperProvider.js +71 -19
  473. package/dist/hopper/HopperProviderCapabilities.js +19 -1
  474. package/dist/hopper/HopperRegexSearch.js +134 -0
  475. package/dist/hopper/HopperRegexWorker.js +27 -0
  476. package/dist/hopper/HopperRequestQueue.js +68 -19
  477. package/dist/hopper/HopperTargetLease.js +133 -49
  478. package/dist/hopper/LinuxPrivateDisplayProbe.js +6 -0
  479. package/dist/ida/IdaConfiguration.js +8 -3
  480. package/dist/ida/IdaInput.js +1 -7
  481. package/dist/ida/IdaMcpConnection.js +8 -4
  482. package/dist/ida/IdaOperationRunner.js +3 -3
  483. package/dist/ida/IdaProvider.js +8 -12
  484. package/dist/ida/IdaSessionClient.js +20 -18
  485. package/dist/ida/IdaWorkspace.js +12 -13
  486. package/dist/inspector/JavaScriptRuntimeScope.js +9 -1
  487. package/dist/inspector/V8InspectorCaptureProjection.js +9 -4
  488. package/dist/inspector/V8InspectorProvider.js +82 -36
  489. package/dist/javascript/recovery/WakaruCommand.js +7 -2
  490. package/dist/javascript/recovery/WakaruExecution.js +5 -2
  491. package/dist/javascript/sourceMaps/DecodedSourceMap.js +47 -0
  492. package/dist/javascript/sourceMaps/SourceMapCommand.js +16 -0
  493. package/dist/javascript/sourceMaps/SourceMapFormat.js +79 -31
  494. package/dist/javascript/sourceMaps/TraceSourceMap.js +14 -28
  495. package/dist/main/shutdown.js +11 -3
  496. package/dist/main/startup.js +9 -2
  497. package/dist/main/transport.js +22 -2
  498. package/dist/main.js +11 -18
  499. package/dist/mcpDoctor.js +62 -2
  500. package/dist/native/AppleDispatchCoverage.js +47 -6
  501. package/dist/native/AppleDispatchDecodeFacts.js +6 -0
  502. package/dist/native/AppleDispatchMetadata.js +6 -3
  503. package/dist/native/AppleMachoFixups.js +48 -24
  504. package/dist/native/AppleMachoSelection.js +48 -22
  505. package/dist/native/AppleObjcCategories.js +6 -2
  506. package/dist/native/AppleObjcDispatchFacets.js +5 -2
  507. package/dist/native/AppleObjcProperties.js +2 -1
  508. package/dist/native/AppleSwiftDispatchFacets.js +27 -21
  509. package/dist/native/AppleSwiftVtables.js +21 -15
  510. package/dist/native/CommandRunner.js +87 -88
  511. package/dist/native/LldbCallTracer.js +372 -103
  512. package/dist/native/LldbRetainedObservations.js +178 -0
  513. package/dist/native/NativeCallObservation.js +62 -3
  514. package/dist/native/NativeMacOSProvider.js +122 -31
  515. package/dist/native/NativeUiHelperRuntime.js +11 -2
  516. package/dist/native/NativeUiObservation.js +2 -2
  517. package/dist/native/SignatureTargetBinding.js +155 -0
  518. package/dist/native/parsers/lipo.js +71 -1
  519. package/dist/native/pwndbg/PwndbgCoreContext.js +25 -5
  520. package/dist/native/pwntools/PwntoolsDecoder.js +2 -1
  521. package/dist/native/pwntools/RecordedCrashStructureBindings.js +2 -0
  522. package/dist/process/DarwinProcessRunTokenReader.js +23 -10
  523. package/dist/process/ExecFileOutput.js +108 -6
  524. package/dist/process/OwnedCommand.js +7 -2
  525. package/dist/process/PrivateRuntimeRoot.js +10 -5
  526. package/dist/process/ProcessOwnership.js +204 -57
  527. package/dist/process/ProcessOwnershipObservation.js +60 -9
  528. package/dist/process/ProviderProcess.js +39 -10
  529. package/dist/process/capture/FilesystemSnapshot.js +50 -13
  530. package/dist/process/capture/ProcessCaptureError.js +15 -2
  531. package/dist/process/capture/ProcessCaptureLifecycle.js +235 -81
  532. package/dist/process/capture/ProcessFilesystemEffects.js +33 -3
  533. package/dist/process/capture/ProcessHarness.js +21 -25
  534. package/dist/process/capture/ProcessNormalization.js +20 -2
  535. package/dist/process/capture/ProcessSampling.js +25 -2
  536. package/dist/process/capture/TerminalRenderer.js +14 -0
  537. package/dist/process/snapshotEnvironment.js +14 -0
  538. package/dist/server/EvidenceMcpServer.js +157 -0
  539. package/dist/server/createServer.js +61 -41
  540. package/dist/server/mcpClientMetadata.js +12 -5
  541. package/dist/server/promptCompletion.js +3 -8
  542. package/dist/server/registerAnalysisViewTool.js +15 -0
  543. package/dist/server/registerAndroidTools.js +2 -5
  544. package/dist/server/registerApplicationTools/compareExportShapes.js +4 -5
  545. package/dist/server/registerApplicationTools/compareSourceToBundle.js +4 -5
  546. package/dist/server/registerApplicationTools/compareVersions.js +4 -5
  547. package/dist/server/registerApplicationTools/coverage.js +1 -2
  548. package/dist/server/registerApplicationTools/helpers.js +1 -4
  549. package/dist/server/registerApplicationTools/obligationLedger.js +4 -5
  550. package/dist/server/registerApplicationTools/projectMobileApplicationGraph.js +3 -4
  551. package/dist/server/registerApplicationTools/traceFeature.js +4 -5
  552. package/dist/server/registerApplicationTools/traceSemantics.js +4 -5
  553. package/dist/server/registerArtifactComparisonTool.js +13 -10
  554. package/dist/server/registerBinaryDiagnosticsTools.js +2 -5
  555. package/dist/server/registerBrowserScenarioTool.js +3 -6
  556. package/dist/server/registerBrowserTools.js +13 -18
  557. package/dist/server/registerBundleComparisonTool.js +5 -7
  558. package/dist/server/registerCloseLifecycleTool.js +9 -20
  559. package/dist/server/registerElectronTools.js +10 -15
  560. package/dist/server/registerEnhancedTools.js +36 -77
  561. package/dist/server/registerEvidenceTools.js +3 -6
  562. package/dist/server/registerEvmTools.js +2 -5
  563. package/dist/server/registerFirmwareTools.js +2 -5
  564. package/dist/server/registerFunctionComparisonTool.js +15 -12
  565. package/dist/server/registerInvestigationTools.js +16 -17
  566. package/dist/server/registerJavaScriptRecoveryTool.js +2 -5
  567. package/dist/server/registerJavaScriptRuntimeObservationTools.js +6 -8
  568. package/dist/server/registerManagedWorkflowTools/compareManagedMembers.js +5 -8
  569. package/dist/server/registerManagedWorkflowTools/importManagedReconstruction.js +4 -7
  570. package/dist/server/registerManagedWorkflowTools/projectManagedApplicationGraph.js +6 -9
  571. package/dist/server/registerManagedWorkflowTools/verifyManagedNativeBoundaries.js +6 -9
  572. package/dist/server/registerOfficialTools.js +4 -21
  573. package/dist/server/registerProcessComparisonTool.js +74 -48
  574. package/dist/server/registerRecordedCrashTools.js +2 -5
  575. package/dist/server/registerSessionRecordTools.js +19 -24
  576. package/dist/server/registerSessionStatusTool.js +19 -6
  577. package/dist/server/registerSessionTools.js +20 -18
  578. package/dist/server/registerWebModuleTool.js +2 -5
  579. package/dist/server/registerWebNetworkCaptureTool.js +2 -5
  580. package/dist/server/registerWebRuntimeTools.js +4 -9
  581. package/dist/server/registerWebScriptTool.js +2 -5
  582. package/dist/server/registerWebSourceLocationTool.js +2 -5
  583. package/dist/server/runDerivedOperation.js +15 -3
  584. package/dist/server/sessionAvailabilityPolicy.js +0 -1
  585. package/dist/server/toolRegistrationOptions.js +2 -2
  586. package/dist/server/toolResult.js +75 -51
  587. package/dist/server/toolResultEncoding.js +34 -0
  588. package/dist/windows/WindowsNativeLoader.js +1 -0
  589. package/dist/windows/WindowsOwnedProcess.js +60 -15
  590. package/dist/windows/WindowsPrivateRuntime.js +7 -8
  591. package/install.sh +1 -1
  592. package/native/windows/README.md +3 -1
  593. package/native/windows/build/manifest.json +2 -2
  594. package/native/windows/build/rea-windows-x64.node +0 -0
  595. package/package.json +44 -30
  596. package/scripts/electron-active-hook-boundaries.cjs +18 -20
  597. package/scripts/electron-active-hook.cjs +241 -37
  598. package/scripts/rea.mjs +3 -6
  599. package/skills/reverse-engineer-anything/SKILL.md +12 -3
  600. package/skills/reverse-engineer-anything/references/android-applications.md +6 -3
  601. package/skills/reverse-engineer-anything/references/evidence-workflows.md +8 -4
  602. package/skills/reverse-engineer-anything/references/javascript-applications.md +20 -3
  603. package/skills/reverse-engineer-anything/references/native-and-artifacts.md +9 -0
  604. package/dist/config.js +0 -1
  605. package/dist/contracts/browserCaptureToolInputSchema.js +0 -43
  606. package/dist/contracts/process/processCaptureExample.js +0 -2
  607. package/dist/contracts/toolOutputSchemas.js +0 -2
  608. package/dist/ghidra/GhidraDefaults.js +0 -2
  609. package/dist/main/reload.js +0 -12
  610. package/dist/main/state.js +0 -3
  611. package/dist/server/sessionToolPolicies.js +0 -2
@@ -2,10 +2,17 @@ import * as t from "@babel/types";
2
2
  import { resolveSemanticBindingState, } from "./javascriptSemanticState.js";
3
3
  import { evaluateSemanticBinding } from "./javascriptSemanticValues.js";
4
4
  import { traverseJavaScriptAst } from "./javascriptSemanticTraversal.js";
5
- import { semanticStaticPropertyKey, semanticStaticPropertyName, } from "./javascriptAstValues.js";
5
+ import { semanticStaticPropertyKey } from "./javascriptAstValues.js";
6
6
  /** Keep explicit property mutations outside the initializer-only value lattice. */
7
7
  export const collectSemanticMemberMutations = (program, state) => {
8
- const markValue = (node, path, bindings) => {
8
+ const parents = new WeakMap();
9
+ traverseJavaScriptAst(program, {
10
+ enter: (node, parent) => {
11
+ if (parent !== null)
12
+ parents.set(node, parent);
13
+ },
14
+ });
15
+ const markValue = (node, path, bindings, mutation) => {
9
16
  if (t.isIdentifier(node)) {
10
17
  const binding = resolveSemanticBindingState(state, node, node.name);
11
18
  if (binding === undefined || bindings.has(binding.bindingId))
@@ -15,8 +22,8 @@ export const collectSemanticMemberMutations = (program, state) => {
15
22
  return;
16
23
  binding.mutatedPaths.push(path);
17
24
  const nested = new Set([...bindings, binding.bindingId]);
18
- for (const initializer of binding.initializers)
19
- markValue(initializer.node, [...initializer.projection, ...path], nested);
25
+ for (const initializer of mutationInitializers(binding, mutation, parents))
26
+ markValue(initializer.node, [...initializer.projection, ...path], nested, mutation);
20
27
  return;
21
28
  }
22
29
  if (t.isMemberExpression(node) || t.isOptionalMemberExpression(node)) {
@@ -27,42 +34,92 @@ export const collectSemanticMemberMutations = (program, state) => {
27
34
  members.push(semanticStaticPropertyKey(current.property, current.computed));
28
35
  current = current.object;
29
36
  }
30
- markValue(current, [...members.reverse(), ...path], bindings);
37
+ markValue(current, [...members.reverse(), ...path], bindings, mutation);
31
38
  return;
32
39
  }
33
40
  for (const value of referencedValues(node, path))
34
- markValue(value.node, value.path, bindings);
41
+ markValue(value.node, value.path, bindings, mutation);
35
42
  };
36
- const markTarget = (node) => {
43
+ const markTarget = (node, mutation) => {
37
44
  if (t.isMemberExpression(node) || t.isOptionalMemberExpression(node))
38
- markValue(node.object, [semanticStaticPropertyKey(node.property, node.computed)], new Set());
45
+ markValue(node.object, [semanticStaticPropertyKey(node.property, node.computed)], new Set(), mutation);
39
46
  else if (t.isRestElement(node))
40
- markTarget(node.argument);
47
+ markTarget(node.argument, mutation);
41
48
  else if (t.isAssignmentPattern(node))
42
- markTarget(node.left);
49
+ markTarget(node.left, mutation);
43
50
  else if (t.isArrayPattern(node)) {
44
51
  for (const element of node.elements)
45
52
  if (element !== null)
46
- markTarget(element);
53
+ markTarget(element, mutation);
47
54
  }
48
55
  else if (t.isObjectPattern(node)) {
49
56
  for (const property of node.properties)
50
- markTarget(t.isRestElement(property) ? property.argument : property.value);
57
+ markTarget(t.isRestElement(property) ? property.argument : property.value, mutation);
51
58
  }
52
59
  };
53
60
  traverseJavaScriptAst(program, {
54
61
  enter: (node) => {
55
62
  if (t.isAssignmentExpression(node))
56
- markTarget(node.left);
63
+ markTarget(node.left, node);
57
64
  else if (t.isUpdateExpression(node))
58
- markTarget(node.argument);
65
+ markTarget(node.argument, node);
59
66
  else if (t.isUnaryExpression(node, { operator: "delete" }))
60
- markTarget(node.argument);
67
+ markTarget(node.argument, node);
61
68
  else if (t.isForOfStatement(node) || t.isForInStatement(node))
62
- markTarget(node.left);
69
+ markTarget(node.left, node);
63
70
  },
64
71
  });
65
72
  };
73
+ const statementPosition = (statement, parents) => {
74
+ const parent = parents.get(statement);
75
+ if (!t.isProgram(parent) && !t.isBlockStatement(parent))
76
+ return null;
77
+ const index = parent.body.indexOf(statement);
78
+ return index < 0 ? null : { body: parent.body, index };
79
+ };
80
+ const directInitializerPosition = (node, parents) => {
81
+ const parent = parents.get(node);
82
+ if (t.isVariableDeclarator(parent) && parent.init === node) {
83
+ const declaration = parents.get(parent);
84
+ return t.isVariableDeclaration(declaration)
85
+ ? statementPosition(declaration, parents)
86
+ : null;
87
+ }
88
+ if (t.isAssignmentExpression(parent) &&
89
+ parent.operator === "=" &&
90
+ parent.right === node &&
91
+ t.isIdentifier(parent.left)) {
92
+ const statement = parents.get(parent);
93
+ return t.isExpressionStatement(statement) && statement.expression === parent
94
+ ? statementPosition(statement, parents)
95
+ : null;
96
+ }
97
+ return null;
98
+ };
99
+ const directMutationPosition = (node, parents) => {
100
+ if (!t.isAssignmentExpression(node) &&
101
+ !t.isUpdateExpression(node) &&
102
+ !t.isUnaryExpression(node, { operator: "delete" }))
103
+ return null;
104
+ const statement = parents.get(node);
105
+ return t.isExpressionStatement(statement) && statement.expression === node
106
+ ? statementPosition(statement, parents)
107
+ : null;
108
+ };
109
+ const mutationInitializers = (binding, mutation, parents) => {
110
+ if (binding.initializers.length < 2)
111
+ return binding.initializers;
112
+ const mutationPosition = directMutationPosition(mutation, parents);
113
+ if (mutationPosition === null)
114
+ return binding.initializers;
115
+ const positions = binding.initializers.map(({ node }) => directInitializerPosition(node, parents));
116
+ if (positions.some((position) => position === null ||
117
+ position.body !== mutationPosition.body ||
118
+ position.index >= mutationPosition.index))
119
+ return binding.initializers;
120
+ const latestIndex = positions.reduce((latest, position) => Math.max(latest, position?.index ?? -1), -1);
121
+ return binding.initializers.filter((_, index) => positions[index]?.index === latestIndex);
122
+ };
66
123
  const referencedValues = (node, path) => {
67
124
  const [key, ...remaining] = path;
68
125
  // An initializer owns its slots; only deeper writes can affect shared children.
@@ -74,10 +131,8 @@ const referencedValues = (node, path) => {
74
131
  return [{ node: property.argument, path }];
75
132
  if (!t.isObjectProperty(property))
76
133
  return [];
77
- const name = semanticStaticPropertyName(property.key, property.computed);
78
- return key === null ||
79
- (name === "" && !t.isStringLiteral(property.key, { value: "" })) ||
80
- String(key) === name
134
+ const name = semanticStaticPropertyKey(property.key, property.computed);
135
+ return key === null || name === null || String(key) === name
81
136
  ? [{ node: property.value, path: remaining }]
82
137
  : [];
83
138
  });
@@ -112,5 +167,7 @@ const referencedValues = (node, path) => {
112
167
  { node: node.left, path },
113
168
  { node: node.right, path },
114
169
  ];
170
+ if (t.isAssignmentExpression(node, { operator: "&&=" }))
171
+ return [{ node: node.right, path }];
115
172
  return [];
116
173
  };
@@ -13,41 +13,35 @@ export const invalidateSemanticMutationPath = (value, path) => {
13
13
  const properties = value.properties.map((property) => property.name === name
14
14
  ? {
15
15
  ...property,
16
+ ...(remaining.length === 0
17
+ ? { presence: "unknown-coverage" }
18
+ : {}),
16
19
  value: invalidateSemanticMutationPath(property.value, remaining),
17
20
  }
18
21
  : property);
19
- return value.unknownProperties || !observed
20
- ? {
21
- status: "object",
22
- properties,
23
- unknownProperties: true,
24
- omittedProperties: observed ? value.omittedProperties : null,
25
- }
26
- : {
27
- status: "object",
28
- properties,
29
- unknownProperties: false,
30
- omittedProperties: 0,
31
- };
22
+ if (!observed)
23
+ properties.push({ name, value: unknown, presence: "unknown-coverage" });
24
+ return { ...value, properties };
32
25
  }
33
26
  if (value.status === "array") {
34
- const index = typeof key === "number" ? key : Number(key);
35
- if (!Number.isSafeInteger(index) ||
36
- index < 0 ||
37
- String(index) !== String(key))
27
+ const name = String(key);
28
+ // Array length writes can remove every index; ordinary named properties
29
+ // and sparse indices affect only their own slot.
30
+ if (name === "length")
38
31
  return unknown;
39
- const observed = value.items[index] !== undefined;
40
- const items = value.items.map((item, position) => position === index
41
- ? invalidateSemanticMutationPath(item, remaining)
42
- : item);
43
- return value.unknownItems || !observed
32
+ const observed = value.items.some((item) => item.name === name);
33
+ const items = value.items.map((item) => item.name === name
44
34
  ? {
45
- status: "array",
46
- items,
47
- unknownItems: true,
48
- omittedItems: observed ? value.omittedItems : null,
35
+ ...item,
36
+ presence: remaining.length === 0
37
+ ? "unknown-coverage"
38
+ : item.presence,
39
+ value: invalidateSemanticMutationPath(item.value, remaining),
49
40
  }
50
- : { status: "array", items, unknownItems: false, omittedItems: 0 };
41
+ : item);
42
+ if (!observed)
43
+ items.push({ name, presence: "unknown-coverage", value: unknown });
44
+ return { ...value, items };
51
45
  }
52
46
  return unknown;
53
47
  };
@@ -1,5 +1,6 @@
1
1
  import * as t from "@babel/types";
2
- import { semanticCallableIdForNode, semanticReadsBeforeWrite, semanticStaticPropertyKey, } from "./javascriptSemanticProjection.js";
2
+ import { semanticCallableIdForNode, semanticReadsBeforeWrite, } from "./javascriptSemanticProjection.js";
3
+ import { semanticStaticPropertyKey } from "./javascriptAstValues.js";
3
4
  import { resolveSemanticBindingState, } from "./javascriptSemanticState.js";
4
5
  import { traverseJavaScriptAst } from "./javascriptSemanticTraversal.js";
5
6
  import { range } from "./javascriptStaticAnalysisHelpers.js";
@@ -19,16 +20,19 @@ export const collectJavaScriptSemanticObjects = (program, state, callables) => {
19
20
  collectMember(node, parent, ownerCallableId, context);
20
21
  else if (t.isSpreadElement(node) &&
21
22
  parent !== null &&
22
- t.isObjectExpression(parent))
23
+ t.isObjectExpression(parent)) {
24
+ const identity = expressionObjectIdentity(node.argument, state);
23
25
  addObjectOperation({
24
26
  node,
25
27
  kind: "spread",
26
28
  ownerCallableId,
27
- objectBindingId: expressionBindingId(node.argument, state),
29
+ objectBindingId: identity.bindingId,
28
30
  targetBindingId: null,
29
- propertyName: null,
31
+ propertyPath: identity.path,
30
32
  }, state, output);
31
- else if (t.isVariableDeclarator(node) && t.isObjectPattern(node.id))
33
+ }
34
+ else if (t.isVariableDeclarator(node) &&
35
+ (t.isObjectPattern(node.id) || t.isArrayPattern(node.id)))
32
36
  collectDestructuring(node, ownerCallableId, state, output);
33
37
  },
34
38
  exit: (node) => {
@@ -41,9 +45,12 @@ export const collectJavaScriptSemanticObjects = (program, state, callables) => {
41
45
  };
42
46
  const collectMember = (node, parent, ownerCallableId, context) => {
43
47
  const { state, output } = context;
44
- const name = semanticStaticPropertyKey(node.property, node.computed);
45
- if (name === null)
48
+ // A chain is one property access; retaining every prefix duplicates work and
49
+ // would make full paths quadratic in deeply nested producer expressions.
50
+ if ((t.isMemberExpression(parent) || t.isOptionalMemberExpression(parent)) &&
51
+ parent.object === node)
46
52
  return;
53
+ const identity = expressionObjectIdentity(node, state);
47
54
  const write = (t.isAssignmentExpression(parent) && parent.left === node) ||
48
55
  (t.isUpdateExpression(parent) && parent.argument === node);
49
56
  const readsBeforeWrite = write && semanticReadsBeforeWrite(node, parent);
@@ -52,42 +59,53 @@ const collectMember = (node, parent, ownerCallableId, context) => {
52
59
  node,
53
60
  kind: "read",
54
61
  ownerCallableId,
55
- objectBindingId: expressionBindingId(node.object, state),
62
+ objectBindingId: identity.bindingId,
56
63
  targetBindingId: null,
57
- propertyName: name,
64
+ propertyPath: identity.path,
58
65
  }, state, output);
59
66
  addObjectOperation({
60
67
  node,
61
68
  kind: write ? "write" : "read",
62
69
  ownerCallableId,
63
- objectBindingId: expressionBindingId(node.object, state),
70
+ objectBindingId: identity.bindingId,
64
71
  targetBindingId: null,
65
- propertyName: name,
72
+ propertyPath: identity.path,
66
73
  }, state, output);
67
74
  };
68
75
  const collectDestructuring = (node, ownerCallableId, state, output) => {
69
- if (!t.isObjectPattern(node.id))
70
- return;
71
- const objectBindingId = expressionBindingId(node.init, state);
72
- for (const property of node.id.properties) {
73
- if (!t.isObjectProperty(property))
74
- continue;
75
- const name = semanticStaticPropertyKey(property.key, property.computed);
76
- if (name === null)
77
- continue;
78
- const target = bindingIdentifier(property.value);
76
+ const source = expressionObjectIdentity(node.init, state);
77
+ const visit = (pattern, path) => {
78
+ if (t.isObjectPattern(pattern)) {
79
+ for (const property of pattern.properties) {
80
+ if (!t.isObjectProperty(property))
81
+ continue;
82
+ const name = semanticStaticPropertyKey(property.key, property.computed);
83
+ if (name !== null)
84
+ visit(property.value, [...path, name]);
85
+ }
86
+ return;
87
+ }
88
+ if (t.isArrayPattern(pattern)) {
89
+ pattern.elements.forEach((element, index) => {
90
+ if (element !== null && !t.isRestElement(element))
91
+ visit(element, [...path, String(index)]);
92
+ });
93
+ return;
94
+ }
95
+ const target = bindingIdentifier(pattern);
96
+ if (target === null)
97
+ return;
79
98
  addObjectOperation({
80
- node: property,
99
+ node: pattern,
81
100
  kind: "destructure",
82
101
  ownerCallableId,
83
- objectBindingId,
84
- targetBindingId: target === null
85
- ? null
86
- : (resolveSemanticBindingState(state, target, target.name)
87
- ?.bindingId ?? null),
88
- propertyName: name,
102
+ objectBindingId: source.bindingId,
103
+ targetBindingId: resolveSemanticBindingState(state, target, target.name)?.bindingId ??
104
+ null,
105
+ propertyPath: source.path === null ? null : [...source.path, ...path],
89
106
  }, state, output);
90
- }
107
+ };
108
+ visit(node.id, []);
91
109
  };
92
110
  const addObjectOperation = (input, state, output) => {
93
111
  output.push({
@@ -97,21 +115,44 @@ const addObjectOperation = (input, state, output) => {
97
115
  ownerCallableId: input.ownerCallableId,
98
116
  objectBindingId: input.objectBindingId,
99
117
  targetBindingId: input.targetBindingId,
100
- propertyName: input.propertyName,
101
- resolution: input.kind === "spread"
102
- ? input.objectBindingId === null
103
- ? "partial"
104
- : "complete"
105
- : input.objectBindingId === null ||
106
- input.propertyName === null ||
107
- (input.kind === "destructure" && input.targetBindingId === null)
108
- ? "partial"
109
- : "complete",
118
+ propertyPath: input.propertyPath,
119
+ resolution: input.objectBindingId === null ||
120
+ input.propertyPath === null ||
121
+ (input.kind === "destructure" && input.targetBindingId === null)
122
+ ? "partial"
123
+ : "complete",
110
124
  });
111
125
  };
112
- const expressionBindingId = (node, state) => t.isIdentifier(node)
113
- ? (resolveSemanticBindingState(state, node, node.name)?.bindingId ?? null)
114
- : null;
126
+ const expressionObjectIdentity = (node, state) => {
127
+ const path = [];
128
+ let current = node;
129
+ let staticPath = true;
130
+ while (current !== null && current !== undefined) {
131
+ if (t.isMemberExpression(current) ||
132
+ t.isOptionalMemberExpression(current)) {
133
+ const name = semanticStaticPropertyKey(current.property, current.computed);
134
+ if (name === null)
135
+ staticPath = false;
136
+ else
137
+ path.push(name);
138
+ current = current.object;
139
+ }
140
+ else if (t.isTSAsExpression(current) ||
141
+ t.isTSTypeAssertion(current) ||
142
+ t.isTSNonNullExpression(current) ||
143
+ t.isTSSatisfiesExpression(current))
144
+ current = current.expression;
145
+ else
146
+ break;
147
+ }
148
+ return {
149
+ bindingId: t.isIdentifier(current)
150
+ ? (resolveSemanticBindingState(state, current, current.name)?.bindingId ??
151
+ null)
152
+ : null,
153
+ path: staticPath ? path.reverse() : null,
154
+ };
155
+ };
115
156
  const bindingIdentifier = (node) => {
116
157
  if (t.isIdentifier(node))
117
158
  return node;
@@ -1,16 +1,25 @@
1
- import * as t from "@babel/types";
2
1
  import { compareCodePoints } from "../canonicalOrdering.js";
3
2
  import { semanticPrimitiveKey } from "./javascriptSemanticProvenance.js";
3
+ import { SEMANTIC_PRIMITIVE_CANDIDATE_LIMIT, exceedsSemanticPrimitiveStringByteBudget, semanticResourceLimitUnknown, } from "./javascriptSemanticResourceLimits.js";
4
4
  /** Normalize one bounded collection of possible primitive values. */
5
5
  export const semanticPrimitiveSet = (values) => {
6
- if (values.some((value) => typeof value === "number" && !Number.isFinite(value)))
7
- return {
8
- status: "unknown",
9
- reason: "Nonfinite numbers are outside the JSON primitive lattice.",
10
- };
11
- const unique = [
12
- ...new Map(values.map((value) => [semanticPrimitiveKey(value), value])).values(),
13
- ].sort((left, right) => compareCodePoints(semanticPrimitiveKey(left), semanticPrimitiveKey(right)));
6
+ const uniqueValues = new Set();
7
+ for (const value of values) {
8
+ if (typeof value === "number" && !Number.isFinite(value))
9
+ return {
10
+ status: "unknown",
11
+ reason: "Nonfinite numbers are outside the JSON primitive lattice.",
12
+ };
13
+ uniqueValues.add(value);
14
+ if (uniqueValues.size > SEMANTIC_PRIMITIVE_CANDIDATE_LIMIT)
15
+ return semanticResourceLimitUnknown("primitive-candidates");
16
+ }
17
+ if (exceedsSemanticPrimitiveStringByteBudget([...uniqueValues].flatMap((value) => typeof value === "string" ? [value] : [])))
18
+ return semanticResourceLimitUnknown("primitive-bytes");
19
+ const unique = [...uniqueValues]
20
+ .map((value) => ({ key: semanticPrimitiveKey(value), value }))
21
+ .sort((left, right) => compareCodePoints(left.key, right.key))
22
+ .map(({ value }) => value);
14
23
  const only = unique[0];
15
24
  return unique.length === 1 && only !== undefined
16
25
  ? { status: "literal", value: only }
@@ -22,15 +31,3 @@ export const semanticPrimitiveCandidates = (value) => value.status === "literal"
22
31
  : value.status === "union"
23
32
  ? value.values
24
33
  : null;
25
- /** Parse one Babel primitive literal without evaluating code. */
26
- export const semanticPrimitiveValue = (node) => {
27
- if (t.isStringLiteral(node))
28
- return { found: true, value: node.value };
29
- if (t.isNumericLiteral(node) && Number.isFinite(node.value))
30
- return { found: true, value: node.value };
31
- if (t.isBooleanLiteral(node))
32
- return { found: true, value: node.value };
33
- if (t.isNullLiteral(node))
34
- return { found: true, value: null };
35
- return { found: false };
36
- };
@@ -4,8 +4,8 @@ import { semanticRequireOrigin } from "./javascriptSemanticRequireOrigin.js";
4
4
  import { compareCodePoints } from "../canonicalOrdering.js";
5
5
  import { traverseJavaScriptAst } from "./javascriptSemanticTraversal.js";
6
6
  import { evaluateSemanticBinding, evaluateSemanticProvenance, } from "./javascriptSemanticValues.js";
7
- import { propertyName, range, stringValue, } from "./javascriptStaticAnalysisHelpers.js";
8
- import { semanticStaticPropertyKey } from "./javascriptAstValues.js";
7
+ import { range, stringValue } from "./javascriptStaticAnalysisHelpers.js";
8
+ import { propertyName, semanticStaticPropertyKey, } from "./javascriptAstValues.js";
9
9
  /** Retain callable identity without polluting lexical bindings. */
10
10
  export const collectSemanticCallable = (input) => {
11
11
  const { node, parent, containerScope, bodyScope, state } = input;
@@ -136,7 +136,6 @@ export const immutableSemanticBindings = (state) => [...state.bindingsById.value
136
136
  provenance: evaluateSemanticProvenance(binding, state),
137
137
  }))
138
138
  .sort((left, right) => compareCodePoints(left.bindingId, right.bindingId));
139
- export { semanticStaticPropertyKey, semanticStaticPropertyName, } from "./javascriptAstValues.js";
140
139
  const callableKind = (node) => {
141
140
  if (t.isClassMethod(node) ||
142
141
  t.isClassPrivateMethod(node) ||
@@ -1,5 +1,6 @@
1
1
  import * as t from "@babel/types";
2
- import { semanticCallableIdForNode, semanticStaticPropertyName, } from "./javascriptSemanticProjection.js";
2
+ import { semanticCallableIdForNode } from "./javascriptSemanticProjection.js";
3
+ import { semanticStaticPropertyName } from "./javascriptAstValues.js";
3
4
  import { resolveSemanticBindingState, semanticResolutionBlocked, } from "./javascriptSemanticState.js";
4
5
  import { compareCodePoints } from "../canonicalOrdering.js";
5
6
  import { traverseJavaScriptAst } from "./javascriptSemanticTraversal.js";
@@ -4,12 +4,16 @@ import { jsonValueSchema } from "../jsonValue.js";
4
4
  import { digestSchema } from "../digests.js";
5
5
  import { prefixedDigestSchema } from "../digests.js";
6
6
  const semanticNodeIdSchema = prefixedDigestSchema("jsrg_node");
7
+ const literalValueSchema = jsonValueSchema.refine((value) => value === null ||
8
+ typeof value === "string" ||
9
+ typeof value === "number" ||
10
+ typeof value === "boolean", "Literal seeds accept only JSON primitive values");
11
+ // Zod derivations drop the shared schema's JSON Schema projection override;
12
+ // re-apply it so MCP catalog generation keeps projecting `{}`.
13
+ literalValueSchema._zod.toJSONSchema = () => ({});
7
14
  const literalSeedSchema = z.strictObject({
8
15
  kind: z.literal("literal"),
9
- value: jsonValueSchema.refine((value) => value === null ||
10
- typeof value === "string" ||
11
- typeof value === "number" ||
12
- typeof value === "boolean", "Literal seeds accept only JSON primitive values"),
16
+ value: literalValueSchema,
13
17
  });
14
18
  /** Authenticated starting points accepted by semantic tracing. */
15
19
  export const javaScriptSemanticQuerySeedSchema = z.discriminatedUnion("kind", [
@@ -0,0 +1,77 @@
1
+ /** Maximum distinct alternatives retained in one normalized primitive value. */
2
+ export const SEMANTIC_PRIMITIVE_CANDIDATE_LIMIT = 256;
3
+ /** Maximum active expression nesting during inert semantic evaluation. */
4
+ export const SEMANTIC_EXPRESSION_DEPTH_LIMIT = 256;
5
+ /** Bound normalized strings and transient keys independently of transport limits. */
6
+ export const SEMANTIC_PRIMITIVE_JSON_BYTES_LIMIT = 1_048_576;
7
+ const RESOURCE_LIMIT_REASON = {
8
+ "primitive-candidates": "Primitive candidate budget exceeded (maximum 256 alternatives).",
9
+ "primitive-bytes": "Primitive string-byte budget exceeded (maximum 1048576 estimated JSON bytes).",
10
+ "expression-depth": "Semantic expression depth budget exceeded (maximum 256 nested expressions).",
11
+ };
12
+ /** Check UTF-16 length against worst-case JSON escaping without flattening. */
13
+ const jsonStringBytesFromLength = (codeUnits) => codeUnits * 6 + 2;
14
+ /** Bound string payload before JSON key serialization or candidate creation. */
15
+ export const exceedsSemanticPrimitiveStringByteBudget = (strings) => {
16
+ let total = 0;
17
+ for (const value of strings) {
18
+ total += jsonStringBytesFromLength(value.length);
19
+ if (total > SEMANTIC_PRIMITIVE_JSON_BYTES_LIMIT)
20
+ return true;
21
+ }
22
+ return false;
23
+ };
24
+ /** Bound all outputs of a primitive addition before concatenating any. */
25
+ export const exceedsSemanticPrimitiveAdditionByteBudget = (left, right) => {
26
+ let total = 0;
27
+ for (const leftValue of left) {
28
+ for (const rightValue of right) {
29
+ if (typeof leftValue !== "string" && typeof rightValue !== "string")
30
+ continue;
31
+ const length = String(leftValue).length + String(rightValue).length;
32
+ total += jsonStringBytesFromLength(length);
33
+ if (total > SEMANTIC_PRIMITIVE_JSON_BYTES_LIMIT)
34
+ return true;
35
+ }
36
+ }
37
+ return false;
38
+ };
39
+ /** Bound template interpolation outputs before creating concatenated strings. */
40
+ export const exceedsSemanticTemplateByteBudget = (prefixes, suffixes) => {
41
+ let total = 0;
42
+ for (const prefix of prefixes) {
43
+ for (const suffix of suffixes) {
44
+ total += jsonStringBytesFromLength(prefix.length + suffix.length);
45
+ if (total > SEMANTIC_PRIMITIVE_JSON_BYTES_LIMIT)
46
+ return true;
47
+ }
48
+ }
49
+ return false;
50
+ };
51
+ /** Make an explicit unknown value tagged with the semantic resource bound. */
52
+ export const semanticResourceLimitUnknown = (resourceLimit) => ({
53
+ status: "unknown",
54
+ reason: RESOURCE_LIMIT_REASON[resourceLimit],
55
+ resourceLimit,
56
+ });
57
+ /** Collect resource-limit classifications from nested semantic values. */
58
+ export const semanticResourceLimitsIn = (values) => {
59
+ const found = new Set();
60
+ const pending = [...values];
61
+ while (pending.length > 0) {
62
+ const value = pending.pop();
63
+ if (value === undefined)
64
+ continue;
65
+ if (value.status === "unknown" && value.resourceLimit !== undefined)
66
+ found.add(value.resourceLimit);
67
+ else if (value.status === "object")
68
+ for (const property of value.properties)
69
+ pending.push(property.value);
70
+ else if (value.status === "array")
71
+ for (const item of value.items)
72
+ pending.push(item.value);
73
+ }
74
+ return [...found].sort();
75
+ };
76
+ /** Display label for one stable resource classification. */
77
+ export const semanticResourceLimitReason = (resourceLimit) => RESOURCE_LIMIT_REASON[resourceLimit];
@@ -1,6 +1,6 @@
1
1
  import * as t from "@babel/types";
2
2
  import { semanticBuiltinNamespacePath } from "./javascriptSemanticProvenance.js";
3
- import { semanticStaticPropertyName } from "./javascriptSemanticProjection.js";
3
+ import { semanticStaticPropertyName } from "./javascriptAstValues.js";
4
4
  import { resolveSemanticBindingState, } from "./javascriptSemanticState.js";
5
5
  import { dataEffectMemberCallee, outerDataEffectBinding, traverseDataEffects, } from "./javascriptSemanticDataEffectHelpers.js";
6
6
  import { range } from "./javascriptStaticAnalysisHelpers.js";