rea-agents 6.0.0 → 6.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (611) hide show
  1. package/README.md +26 -18
  2. package/bridge/android/ReaJadxBridge.java +14 -5
  3. package/bridge/ghidra/ReaGhidraBridge.java +205 -51
  4. package/bridge/hopper_bridge.py +314 -127
  5. package/bridge/mitmproxy/capture.py +0 -2
  6. package/bridge/native/rea_lldb_tracer.py +630 -94
  7. package/bridge/process/ProcessRunTokenReader.swift +39 -5
  8. package/bridge/pwntools/recorded_crash_impl.py +4 -0
  9. package/dist/android/JadxConfiguration.js +274 -31
  10. package/dist/android/JadxMcpTransport.js +18 -2
  11. package/dist/android/JadxProtocol.js +6 -0
  12. package/dist/android/JadxProvider.js +76 -37
  13. package/dist/android/JadxSession.js +23 -4
  14. package/dist/application/AnalysisContextQueries.js +8 -35
  15. package/dist/application/AnalysisDocument.js +32 -0
  16. package/dist/application/AppBundleExecutable.js +67 -21
  17. package/dist/application/BinaryTargetResolver.js +5 -3
  18. package/dist/application/BrowserEvidence.js +3 -8
  19. package/dist/application/BrowserScenarioEvidence.js +2 -18
  20. package/dist/application/CallPathTracing.js +19 -3
  21. package/dist/application/CapabilityInventory.js +48 -11
  22. package/dist/application/ClientConfigurationDocument.js +917 -8
  23. package/dist/application/ClientRegistrationIdentity.js +26 -5
  24. package/dist/application/ClientRegistrationStatus.js +29 -14
  25. package/dist/application/DirectAnalysis.js +56 -51
  26. package/dist/application/DirectAnalysisCleanup.js +72 -0
  27. package/dist/application/DirectAnalysisStatus.js +4 -5
  28. package/dist/application/Doctor.js +19 -21
  29. package/dist/application/DoctorDiagnostics.js +1 -2
  30. package/dist/application/DoctorScope.js +25 -13
  31. package/dist/application/EnhancedLiteralTracing.js +22 -25
  32. package/dist/application/EnhancedTools.js +64 -17
  33. package/dist/application/EvidenceBundleFiles.js +30 -13
  34. package/dist/application/FunctionAnalysisEvidence.js +2 -3
  35. package/dist/application/InventoryProjectionEvidence.js +4 -3
  36. package/dist/application/InvestigationProviders.js +11 -2
  37. package/dist/application/JsonFiles.js +83 -28
  38. package/dist/application/LinuxHopper.js +9 -6
  39. package/dist/application/MacHopper.js +15 -18
  40. package/dist/application/ProcedureAddressResolution.js +11 -0
  41. package/dist/application/RealHopperAssertions.js +0 -11
  42. package/dist/application/ReconstructionCoverageService.js +7 -4
  43. package/dist/application/ReconstructionObligationCandidates.js +1 -1
  44. package/dist/application/ReconstructionObligationLedgerService.js +4 -3
  45. package/dist/application/ReferenceSourceImportEntries.js +1 -1
  46. package/dist/application/Setup.js +21 -17
  47. package/dist/application/SetupClientConfiguration.js +10 -15
  48. package/dist/application/SetupHost.js +21 -29
  49. package/dist/application/SetupPlan.js +11 -9
  50. package/dist/application/SupportedClients.js +34 -1
  51. package/dist/application/Uninstall.js +82 -29
  52. package/dist/application/Update.js +18 -3
  53. package/dist/application/UpdateMaintenance.js +7 -5
  54. package/dist/application/UpdateRuntime.js +57 -36
  55. package/dist/application/WebModuleTraceService.js +4 -2
  56. package/dist/application/WebNetworkCaptureService.js +4 -2
  57. package/dist/application/WebRuntimeService.js +5 -3
  58. package/dist/application/WebScriptExportService.js +32 -6
  59. package/dist/application/WebSourceLocationService.js +4 -2
  60. package/dist/application/WorkflowEvidence.js +105 -0
  61. package/dist/application/XrefsAddressResolution.js +45 -0
  62. package/dist/application/analysisView/AnalysisViewService.js +76 -0
  63. package/dist/application/binary/AnalysisClientCleanup.js +30 -5
  64. package/dist/application/binary/AnalysisProviderEvaluation.js +22 -7
  65. package/dist/application/binary/AnalysisProviderRegistry.js +4 -6
  66. package/dist/application/binary/AnalysisSnapshotCache.js +13 -14
  67. package/dist/application/binary/BinarySession.js +161 -93
  68. package/dist/application/binary/BinarySessionComposition.js +1 -3
  69. package/dist/application/binary/BinarySessionExecution.js +3 -5
  70. package/dist/application/binary/BinarySessionOpen.js +4 -4
  71. package/dist/application/binary/BinarySessionRecords.js +26 -4
  72. package/dist/application/binary/BinarySessionStatus.js +18 -7
  73. package/dist/application/binary/CompositeProvider.js +16 -17
  74. package/dist/application/binary/LazyAnalysisProvider.js +8 -5
  75. package/dist/application/binary/SessionProviderRouter.js +27 -135
  76. package/dist/application/binaryDiagnostics/BinaryLayoutService.js +4 -2
  77. package/dist/application/binaryDiagnostics/RecordedCrashService.js +4 -2
  78. package/dist/application/evm/EvmInterfaceService.js +4 -2
  79. package/dist/application/homebrew.js +48 -0
  80. package/dist/application/investigation/EvidenceLedger.js +21 -7
  81. package/dist/application/investigation/InvestigationRecords.js +8 -0
  82. package/dist/application/javascript/ElectronActiveEvidence.js +9 -13
  83. package/dist/application/javascript/JavaScriptAnalysisControl.js +34 -0
  84. package/dist/application/javascript/JavaScriptApplicationEvidence.js +21 -4
  85. package/dist/application/javascript/JavaScriptApplicationEvidenceGraph.js +19 -2
  86. package/dist/application/javascript/JavaScriptApplicationService.js +27 -15
  87. package/dist/application/javascript/JavaScriptApplicationWorkflowService.js +5 -5
  88. package/dist/application/javascript/JavaScriptArtifactAnalysis.js +10 -7
  89. package/dist/application/javascript/JavaScriptArtifactGraphBuilder.js +44 -10
  90. package/dist/application/javascript/JavaScriptArtifactGraphBundlers.js +11 -3
  91. package/dist/application/javascript/JavaScriptArtifactGraphContext.js +9 -0
  92. package/dist/application/javascript/JavaScriptArtifactGraphDocuments.js +8 -5
  93. package/dist/application/javascript/JavaScriptArtifactGraphFindings.js +12 -3
  94. package/dist/application/javascript/JavaScriptArtifactGraphStructure.js +0 -1
  95. package/dist/application/javascript/JavaScriptArtifactPathResolution.js +49 -19
  96. package/dist/application/javascript/JavaScriptArtifactReconstruction.js +56 -8
  97. package/dist/application/javascript/JavaScriptModuleRelationships.js +38 -9
  98. package/dist/application/javascript/JavaScriptRecoveryService.js +4 -2
  99. package/dist/application/javascript/JavaScriptRuntimeObservationService.js +6 -4
  100. package/dist/application/javascript/JavaScriptRuntimeReconciliationService.js +3 -3
  101. package/dist/application/javascript/JavaScriptSemanticGraphAsyncProjection.js +2 -3
  102. package/dist/application/javascript/JavaScriptSemanticGraphBuilder.js +63 -61
  103. package/dist/application/javascript/JavaScriptSemanticGraphChildProcessProjection.js +1 -2
  104. package/dist/application/javascript/JavaScriptSemanticGraphDataProjection.js +2 -3
  105. package/dist/application/javascript/JavaScriptSemanticGraphFlowProjection.js +1 -5
  106. package/dist/application/javascript/JavaScriptSemanticGraphObjectProjection.js +75 -46
  107. package/dist/application/javascript/JavaScriptSemanticGraphResourceProjection.js +2 -3
  108. package/dist/application/javascript/JavaScriptSemanticGraphValueProjection.js +64 -19
  109. package/dist/application/managed/ManagedApplicationGraphService.js +4 -3
  110. package/dist/application/managed/ManagedMemberComparisonService.js +9 -5
  111. package/dist/application/managed/ManagedNativeVerificationService.js +6 -4
  112. package/dist/application/managed/ManagedReconstructionService.js +4 -3
  113. package/dist/application/process/ProcessCli.js +25 -17
  114. package/dist/application/process/ProcessEvidence.js +4 -4
  115. package/dist/application/workflowInputError.js +18 -0
  116. package/dist/artifacts/ArtifactProvider.js +48 -13
  117. package/dist/artifacts/ArtifactReader.js +31 -0
  118. package/dist/artifacts/DirectoryArtifactReader.js +2 -1
  119. package/dist/artifacts/MachOSliceArtifactReader.js +106 -15
  120. package/dist/artifacts/NativeDmgArtifactReader.js +73 -21
  121. package/dist/artifacts/SafeOutputTree.js +16 -2
  122. package/dist/artifacts/ZipArtifactReader.js +11 -4
  123. package/dist/artifacts/apple/AppleAssetCatalogAnalysis.js +26 -5
  124. package/dist/artifacts/apple/DylibResolutionReader.js +17 -7
  125. package/dist/artifacts/apple/InterfaceBuilderAnalysis.js +176 -56
  126. package/dist/artifacts/apple/InterfaceBuilderDecodeBudget.js +195 -0
  127. package/dist/artifacts/apple/KeyedArchiveReader.js +55 -23
  128. package/dist/artifacts/apple/MachoLoadCommandReader.js +92 -31
  129. package/dist/artifacts/apple/NibArchive.js +81 -14
  130. package/dist/artifacts/apple/NibViewHierarchy.js +10 -3
  131. package/dist/artifacts/apple/PlistNumberLiterals.js +164 -0
  132. package/dist/artifacts/extraction/ArtifactExtraction.js +78 -21
  133. package/dist/artifacts/inventory/ArtifactGraphConstruction.js +79 -68
  134. package/dist/artifacts/inventory/ArtifactInventory.js +0 -1
  135. package/dist/artifacts/inventory/reader.js +3 -3
  136. package/dist/artifacts/inventory/scanCanonical.js +59 -38
  137. package/dist/artifacts/inventory/scanReader.js +5 -9
  138. package/dist/artifacts/javascript/JavaScriptArtifactFiles.js +6 -2
  139. package/dist/browser/BrowserScenarioPartialObservation.js +106 -0
  140. package/dist/browser/CdpBrowserProvider.js +2 -3
  141. package/dist/browser/CdpCaptureCompleteness.js +2 -0
  142. package/dist/browser/CdpCaptureEventHandlers.js +78 -15
  143. package/dist/browser/CdpCaptureEventTypes.js +5 -1
  144. package/dist/browser/CdpCaptureEvents.js +25 -1
  145. package/dist/browser/CdpCaptureValues.js +20 -0
  146. package/dist/browser/CdpConnection.js +30 -11
  147. package/dist/browser/CdpElectronProvider.js +0 -2
  148. package/dist/browser/CdpElectronScriptEvents.js +2 -8
  149. package/dist/browser/CdpElectronScripts.js +2 -3
  150. package/dist/browser/CdpOptionalCommand.js +2 -3
  151. package/dist/browser/CdpPageCapture.js +23 -1
  152. package/dist/browser/CdpPageCaptureScripts.js +2 -3
  153. package/dist/browser/CdpSafeMetadata.js +10 -10
  154. package/dist/browser/PlaywrightBrowserScenarioProvider.js +59 -44
  155. package/dist/browser/PlaywrightElectronActiveActions.js +34 -79
  156. package/dist/browser/PlaywrightElectronActiveProjection.js +141 -0
  157. package/dist/browser/PlaywrightElectronActiveProvider.js +133 -130
  158. package/dist/browser/PlaywrightScenarioArtifacts.js +1 -1
  159. package/dist/browser/PlaywrightScenarioBrowser.js +139 -39
  160. package/dist/browser/PlaywrightScenarioEvents.js +1 -1
  161. package/dist/browser/PlaywrightScenarioSession.js +39 -22
  162. package/dist/browser/WebSourceMapFetcher.js +426 -72
  163. package/dist/browser/assets/LocalWebScriptArtifacts.js +2 -2
  164. package/dist/browser/assets/ScriptCaptureAdapters.js +1 -1
  165. package/dist/browser/history/CaptureFailures.js +41 -1
  166. package/dist/browser/history/CaptureRelease.js +5 -0
  167. package/dist/browser/history/HarCaptureAdapter.js +3 -3
  168. package/dist/browser/history/HarJson.js +3 -2
  169. package/dist/browser/history/HistoricalCaptureDecoder.js +4 -2
  170. package/dist/browser/history/MitmproxyCaptureAdapter.js +4 -2
  171. package/dist/catalogIdentity.js +0 -1
  172. package/dist/cli/analysisSelector.js +23 -0
  173. package/dist/cli/analysisViewCommands.js +36 -0
  174. package/dist/cli/applicationCommands.js +2 -3
  175. package/dist/cli/artifactCommands.js +11 -12
  176. package/dist/cli/coreAnalysisCommands.js +3 -3
  177. package/dist/cli/coreBinaryCommands.js +100 -37
  178. package/dist/cli/coreNativeCommands.js +9 -10
  179. package/dist/cli/electronCommands.js +10 -9
  180. package/dist/cli/interactiveSetup.js +6 -6
  181. package/dist/cli/javascriptApplicationAnalysis.js +7 -3
  182. package/dist/cli/jsonOutput.js +4 -99
  183. package/dist/cli/managedCommands.js +7 -8
  184. package/dist/cli/nativeCallCommands.js +3 -5
  185. package/dist/cli/omittableDefaults.js +50 -0
  186. package/dist/cli/processCommands.js +3 -2
  187. package/dist/cli/setupCommands.js +16 -15
  188. package/dist/cli/utilityCommands.js +9 -9
  189. package/dist/cli/webRuntimeCommands.js +8 -8
  190. package/dist/cli.js +18 -9
  191. package/dist/cliBrowserScenarioCommands.js +2 -2
  192. package/dist/cliCommandNames.js +1 -1
  193. package/dist/cliJsonInput.js +24 -5
  194. package/dist/cliOutput.js +0 -38
  195. package/dist/composition/auxiliaryAnalysisProviders.js +27 -23
  196. package/dist/composition/binary.js +9 -9
  197. package/dist/composition/browserScenario.js +2 -1
  198. package/dist/composition/directAnalysis.js +20 -13
  199. package/dist/composition/electronScenario.js +1 -1
  200. package/dist/composition/optionalObservationProviders.js +12 -7
  201. package/dist/config/environment.js +10 -0
  202. package/dist/config/ghidraStartupTimeout.js +12 -0
  203. package/dist/config/homeDirectory.js +12 -0
  204. package/dist/config/mcpResponseBudget.js +30 -0
  205. package/dist/config/parseConfig.js +8 -3
  206. package/dist/config/parsers.js +19 -22
  207. package/dist/contracts/analysisViewToolContracts.js +56 -0
  208. package/dist/contracts/applicationToolContracts.js +5 -4
  209. package/dist/contracts/artifactComparisonExample.js +2 -2
  210. package/dist/contracts/artifactToolContracts.js +1 -1
  211. package/dist/contracts/browserScenarioToolContracts.js +1 -1
  212. package/dist/contracts/browserToolContracts.js +19 -15
  213. package/dist/contracts/enhancedInputs.js +7 -5
  214. package/dist/contracts/enhancedToolContracts.js +7 -6
  215. package/dist/contracts/evm/evmToolContracts.js +1 -1
  216. package/dist/contracts/functionWorkflowToolContracts.js +1 -1
  217. package/dist/contracts/hopperMemoryContracts.js +2 -5
  218. package/dist/contracts/inputSchemaPresentation.js +90 -0
  219. package/dist/contracts/investigationExamples.js +4 -3
  220. package/dist/contracts/javascript/electronToolContracts.js +2 -2
  221. package/dist/contracts/javascript/javascriptApplicationWorkflowExamples.js +0 -20
  222. package/dist/contracts/javascript/javascriptExportShapeComparisonExample.js +245 -0
  223. package/dist/contracts/javascript/javascriptRuntimeObservationToolContracts.js +1 -1
  224. package/dist/contracts/managed/managedToolContracts.js +7 -14
  225. package/dist/contracts/managed/managedWorkflowToolContracts.js +1 -1
  226. package/dist/contracts/mobileApplicationGraphExamples.js +3 -3
  227. package/dist/contracts/native/binaryDiagnosticsToolContracts.js +1 -1
  228. package/dist/contracts/native/nativeToolContracts.js +5 -3
  229. package/dist/contracts/officialToolContracts.js +16 -16
  230. package/dist/contracts/promptContracts.js +5 -5
  231. package/dist/contracts/providerSelection.js +1 -1
  232. package/dist/contracts/sessionLifecycleInputs.js +3 -7
  233. package/dist/contracts/sessionStatusContract.js +2 -4
  234. package/dist/contracts/sessionToolContracts.js +18 -8
  235. package/dist/contracts/sessionToolSchemas.js +3 -19
  236. package/dist/contracts/toolContractExamples.js +0 -1
  237. package/dist/contracts/toolContractHelpers.js +4 -1
  238. package/dist/contracts/toolContracts.js +2 -0
  239. package/dist/contracts/toolEffects.js +1 -1
  240. package/dist/contracts/toolOutputSchemaGroups.js +160 -115
  241. package/dist/contracts/toolOutputSchemaPrimitives.js +28 -20
  242. package/dist/contracts/toolSchemaMetadata.js +41 -33
  243. package/dist/contracts/webNetworkCaptureToolContracts.js +2 -2
  244. package/dist/contracts/webRuntimeToolContracts.js +1 -1
  245. package/dist/contracts/webScriptToolContracts.js +1 -1
  246. package/dist/doctorRuntime.js +7 -5
  247. package/dist/domain/analysisErrorBase.js +8 -3
  248. package/dist/domain/analysisErrorCore.js +6 -1
  249. package/dist/domain/analysisErrorPresentation.js +90 -20
  250. package/dist/domain/analysisErrorProjection.js +130 -32
  251. package/dist/domain/analysisSnapshot.js +29 -31
  252. package/dist/domain/analysisView/analysisView.js +243 -0
  253. package/dist/domain/analysisView/analysisViewCoverage.js +19 -0
  254. package/dist/domain/analysisView/binaryLayoutView.js +159 -0
  255. package/dist/domain/analysisView/javascriptApplicationView.js +238 -0
  256. package/dist/domain/android/androidAnalysis.js +2 -4
  257. package/dist/domain/android/androidApplication.js +18 -10
  258. package/dist/domain/apple/appleApplication.js +42 -15
  259. package/dist/domain/apple/dyldEnvironment.js +73 -0
  260. package/dist/domain/apple/dylibResolution.js +130 -12
  261. package/dist/domain/apple/dylibResolutionFindings.js +9 -7
  262. package/dist/domain/apple/interfaceBuilderGraph.js +25 -14
  263. package/dist/domain/apple/interfaceBuilderKeyedArchive.js +13 -3
  264. package/dist/domain/apple/keyedArchive.js +35 -3
  265. package/dist/domain/apple/machoContainer.js +54 -0
  266. package/dist/domain/apple/plistNumbers.js +76 -0
  267. package/dist/domain/artifactComparison.js +15 -6
  268. package/dist/domain/artifactGraph.js +16 -3
  269. package/dist/domain/artifactIdentity.js +29 -0
  270. package/dist/domain/artifactInventoryEvidence.js +28 -40
  271. package/dist/domain/artifactOperationError.js +3 -3
  272. package/dist/domain/artifactPartialObservation.js +1 -0
  273. package/dist/domain/artifactPathSyntax.js +49 -0
  274. package/dist/domain/binaryTarget.js +39 -13
  275. package/dist/domain/bridgeCandidateProjection.js +71 -0
  276. package/dist/domain/browserCaptureComparison.js +13 -49
  277. package/dist/domain/browserCompleteness.js +1 -0
  278. package/dist/domain/browserNetworkEvidence.js +10 -4
  279. package/dist/domain/browserObservation.js +0 -1
  280. package/dist/domain/browserObservationError.js +24 -5
  281. package/dist/domain/browserObservationSchemas.js +14 -3
  282. package/dist/domain/browserScenario.js +0 -1
  283. package/dist/domain/browserScenarioCapture.js +1 -2
  284. package/dist/domain/browserScenarioDiff.js +0 -2
  285. package/dist/domain/browserScenarioDiffEvidence.js +0 -12
  286. package/dist/domain/browserScenarioDiffValues.js +2 -2
  287. package/dist/domain/browserScenarioValues.js +5 -10
  288. package/dist/domain/bundleComparison.js +3 -2
  289. package/dist/domain/callPath.js +8 -9
  290. package/dist/domain/callPathSchemas.js +2 -2
  291. package/dist/domain/canonicalJsonDigestSteps.js +133 -0
  292. package/dist/domain/canonicalOrdering.js +9 -5
  293. package/dist/domain/changedBehavior.js +9 -9
  294. package/dist/domain/comparisonSourceEvidence.js +40 -0
  295. package/dist/domain/completionLedgerGeneration.js +2 -1
  296. package/dist/domain/configurationErrors.js +13 -1
  297. package/dist/domain/conformancePackage.js +4 -3
  298. package/dist/domain/evidence.js +65 -36
  299. package/dist/domain/evidenceBundle.js +47 -8
  300. package/dist/domain/evidenceCompletionLedger.js +2 -1
  301. package/dist/domain/evidenceErrors.js +12 -1
  302. package/dist/domain/explicitSensitiveFailure.js +17 -1
  303. package/dist/domain/firmware/firmwareAnalysis.js +6 -7
  304. package/dist/domain/functionComparison.js +4 -5
  305. package/dist/domain/functionComparisonDimensions.js +120 -87
  306. package/dist/domain/functionComparisonNormalization.js +23 -34
  307. package/dist/domain/functionComparisonResults.js +1 -4
  308. package/dist/domain/functionComparisonSchemas.js +2 -8
  309. package/dist/domain/functionDossierEvidence.js +2 -37
  310. package/dist/domain/hopperErrors.js +23 -2
  311. package/dist/domain/hopperValues.js +51 -8
  312. package/dist/domain/immutableJson.js +114 -0
  313. package/dist/domain/inputIssueProjection.js +3 -0
  314. package/dist/domain/javascript/electronActiveObservation.js +47 -64
  315. package/dist/domain/javascript/electronObservation.js +14 -3
  316. package/dist/domain/javascript/electronStaticAnalysisBrowser.js +10 -9
  317. package/dist/domain/javascript/electronStaticAnalysisIpc.js +2 -1
  318. package/dist/domain/javascript/electronStaticAnalysisNative.js +2 -1
  319. package/dist/domain/javascript/electronStaticAnalysisValues.js +6 -12
  320. package/dist/domain/javascript/javascriptApplicationAnalysis.js +71 -23
  321. package/dist/domain/javascript/javascriptApplicationEvidenceSchemas.js +2 -0
  322. package/dist/domain/javascript/javascriptApplicationGraph.js +39 -3
  323. package/dist/domain/javascript/javascriptApplicationGraphSchemas.js +9 -2
  324. package/dist/domain/javascript/javascriptApplicationVersionItems.js +5 -2
  325. package/dist/domain/javascript/javascriptApplicationVersionKeys.js +2 -1
  326. package/dist/domain/javascript/javascriptAstValues.js +20 -0
  327. package/dist/{application/javascript/JavaScriptReturnShapeProjection.js → domain/javascript/javascriptExportReturnShapeProjection.js} +4 -4
  328. package/dist/domain/javascript/javascriptExportShapeComparison.js +7 -1
  329. package/dist/domain/javascript/javascriptExportShapeComparisonIdentity.js +6 -1
  330. package/dist/domain/javascript/javascriptExportShapeComparisonSchemas.js +29 -1
  331. package/dist/domain/javascript/javascriptExportShapeSelection.js +5 -5
  332. package/dist/domain/javascript/javascriptExportShapeVariants.js +67 -14
  333. package/dist/domain/javascript/javascriptFeatureSeed.js +20 -0
  334. package/dist/domain/javascript/javascriptFeatureTraversal.js +0 -1
  335. package/dist/domain/javascript/javascriptNativeHandoff.js +1 -1
  336. package/dist/domain/javascript/javascriptRecovery.js +3 -8
  337. package/dist/domain/javascript/javascriptRuntimeLoadState.js +0 -1
  338. package/dist/domain/javascript/javascriptRuntimeObservation.js +10 -2
  339. package/dist/domain/javascript/javascriptRuntimeReconciliationMatching.js +1 -1
  340. package/dist/domain/javascript/javascriptRuntimeReconciliationParsing.js +3 -2
  341. package/dist/domain/javascript/javascriptRuntimeStaticCandidates.js +0 -1
  342. package/dist/domain/javascript/javascriptSemanticAnalysis.js +106 -5
  343. package/dist/domain/javascript/javascriptSemanticAsyncEffects.js +2 -1
  344. package/dist/domain/javascript/javascriptSemanticCalls.js +2 -1
  345. package/dist/domain/javascript/javascriptSemanticChildProcesses.js +2 -1
  346. package/dist/domain/javascript/javascriptSemanticCoverage.js +6 -5
  347. package/dist/domain/javascript/javascriptSemanticDataEffectHelpers.js +9 -17
  348. package/dist/domain/javascript/javascriptSemanticDataEffects.js +23 -6
  349. package/dist/domain/javascript/javascriptSemanticGraph.js +98 -43
  350. package/dist/domain/javascript/javascriptSemanticGraphSchemas.js +1 -0
  351. package/dist/domain/javascript/javascriptSemanticMemberMutations.js +77 -20
  352. package/dist/domain/javascript/javascriptSemanticMutationValues.js +21 -27
  353. package/dist/domain/javascript/javascriptSemanticObjects.js +83 -42
  354. package/dist/domain/javascript/javascriptSemanticPrimitives.js +18 -21
  355. package/dist/domain/javascript/javascriptSemanticProjection.js +2 -3
  356. package/dist/domain/javascript/javascriptSemanticPromises.js +2 -1
  357. package/dist/domain/javascript/javascriptSemanticQuerySchemas.js +8 -4
  358. package/dist/domain/javascript/javascriptSemanticResourceLimits.js +77 -0
  359. package/dist/domain/javascript/javascriptSemanticResources.js +1 -1
  360. package/dist/domain/javascript/javascriptSemanticReturns.js +32 -17
  361. package/dist/domain/javascript/javascriptSemanticSlots.js +72 -0
  362. package/dist/domain/javascript/javascriptSemanticValues.js +126 -61
  363. package/dist/domain/javascript/javascriptSourceMapPaths.js +104 -0
  364. package/dist/domain/javascript/javascriptSourceParser.js +6 -2
  365. package/dist/domain/javascript/javascriptStaticAnalysis.js +22 -17
  366. package/dist/domain/javascript/javascriptStaticAnalysisBundler.js +5 -3
  367. package/dist/domain/javascript/javascriptStaticAnalysisCalls.js +16 -5
  368. package/dist/domain/javascript/javascriptStaticAnalysisFindings.js +66 -7
  369. package/dist/domain/javascript/javascriptStaticAnalysisHelpers.js +28 -17
  370. package/dist/domain/javascript/javascriptStaticAnalysisState.js +3 -2
  371. package/dist/domain/javascript/sourceToBundleComparison.js +12 -3
  372. package/dist/domain/javascript/sourceToBundleSignals.js +47 -19
  373. package/dist/domain/jsonSerialization.js +109 -0
  374. package/dist/domain/jsonValue.js +90 -6
  375. package/dist/domain/localPath.js +6 -0
  376. package/dist/domain/managed/managedApplicationGraph.js +10 -10
  377. package/dist/domain/managed/managedArtifact.js +6 -4
  378. package/dist/domain/managed/managedInspectionEvidence.js +16 -0
  379. package/dist/domain/managed/managedMemberComparison.js +2 -9
  380. package/dist/domain/managed/managedMemberComparisonMatch.js +5 -9
  381. package/dist/domain/managed/managedNativeVerification.js +3 -11
  382. package/dist/domain/managed/managedNativeVerificationMatch.js +9 -3
  383. package/dist/domain/native/binaryLayout.js +2 -3
  384. package/dist/domain/native/fileOffsetPartialObservation.js +1 -0
  385. package/dist/domain/native/nativeApiBoundary.js +1 -1
  386. package/dist/domain/native/nativeCallObservation.js +37 -13
  387. package/dist/domain/native/nativeCallPartialObservation.js +33 -0
  388. package/dist/domain/native/nativeInstruction.js +7 -0
  389. package/dist/domain/native/recordedCrash.js +2 -3
  390. package/dist/domain/offsetDateTime.js +17 -0
  391. package/dist/domain/process/processCapture.js +21 -16
  392. package/dist/domain/process/processCaptureCoverage.js +67 -0
  393. package/dist/domain/process/processCaptureExample.js +2 -1
  394. package/dist/domain/process/processCaptureParsing.js +1 -34
  395. package/dist/domain/process/processCaptureValidation.js +81 -13
  396. package/dist/domain/process/processComparison.js +79 -26
  397. package/dist/domain/process/processObservation.js +10 -2
  398. package/dist/domain/process/processScenario.js +35 -12
  399. package/dist/domain/process/processTraceComparison.js +0 -2
  400. package/dist/domain/process/processTraceDimensionProjection.js +1 -1
  401. package/dist/domain/process/processTraceEvaluation.js +15 -11
  402. package/dist/domain/process/processTraceSpecification.js +3 -4
  403. package/dist/domain/propertyListKeys.js +1 -1
  404. package/dist/domain/propertyListXmlText.js +19 -0
  405. package/dist/domain/providerAdapterError.js +3 -1
  406. package/dist/domain/providerOperationHealth.js +54 -0
  407. package/dist/domain/reconstructionCoverage.js +5 -2
  408. package/dist/domain/reconstructionObligationLedgerSchemas.js +2 -1
  409. package/dist/domain/reconstructionReadinessSchemas.js +2 -1
  410. package/dist/domain/reconstructionVerification.js +9 -46
  411. package/dist/domain/reconstructionVerificationSchemas.js +4 -3
  412. package/dist/domain/referenceSourceGraph.js +20 -21
  413. package/dist/domain/staticRuntimeCorrelation.js +8 -45
  414. package/dist/domain/stringPatterns.js +6 -0
  415. package/dist/domain/swiftSymbolClassification.js +61 -0
  416. package/dist/domain/symbolAnalysis.js +66 -18
  417. package/dist/domain/webBundleAnalysis.js +20 -8
  418. package/dist/domain/webBundleAnalyzerInspection.js +13 -8
  419. package/dist/domain/webBundleAnalyzerResult.js +41 -2
  420. package/dist/domain/webCaptureDiff.js +0 -1
  421. package/dist/domain/webCaptureDiffSchemas.js +6 -3
  422. package/dist/domain/webEventListeners.js +3 -2
  423. package/dist/domain/webExecution.js +3 -2
  424. package/dist/domain/webRuntime.js +19 -7
  425. package/dist/domain/webScriptExport.js +1 -1
  426. package/dist/domain/webSourceLocation.js +1 -0
  427. package/dist/dotnet/ManagedArtifactInspector.js +2 -19
  428. package/dist/dotnet/ManagedMemberInspector.js +12 -18
  429. package/dist/dotnet/ManagedMemberInspectorCore.js +47 -44
  430. package/dist/dotnet/ManagedMemberRows.js +75 -62
  431. package/dist/dotnet/ManagedMetadataInventory.js +16 -22
  432. package/dist/dotnet/ManagedMethodBodyReader.js +4 -0
  433. package/dist/dotnet/ManagedNativeBoundaryHelpers.js +109 -94
  434. package/dist/dotnet/ManagedNativeBoundaryInspector.js +12 -21
  435. package/dist/dotnet/ManagedReaderFailure.js +16 -0
  436. package/dist/dotnet/ManagedStaticProvider.js +3 -5
  437. package/dist/evaluation/AgentEvaluationFixtures.js +250 -0
  438. package/dist/evaluation/AgentEvaluationReport.js +28 -0
  439. package/dist/evaluation/CodexAgentEval.js +12 -8
  440. package/dist/evaluation/KnownAnswerEvaluation.js +281 -0
  441. package/dist/evm/EvmoleInterfaceProvider.js +2 -1
  442. package/dist/firmware/FirmwareCommand.js +9 -5
  443. package/dist/firmware/FirmwareFiles.js +1 -1
  444. package/dist/firmware/FirmwareProvider.js +4 -4
  445. package/dist/generatedPackageMetadata.js +2 -2
  446. package/dist/ghidra/GhidraAnalysisProfile.js +7 -5
  447. package/dist/ghidra/GhidraClient.js +126 -34
  448. package/dist/ghidra/GhidraClientStartup.js +0 -2
  449. package/dist/ghidra/GhidraDiagnostics.js +7 -7
  450. package/dist/ghidra/GhidraDoctor.js +6 -5
  451. package/dist/ghidra/GhidraFunctionValues.js +13 -12
  452. package/dist/ghidra/GhidraInstallation.js +58 -33
  453. package/dist/ghidra/GhidraInventoryValues.js +14 -4
  454. package/dist/ghidra/GhidraJavaLaunch.js +66 -0
  455. package/dist/ghidra/GhidraLauncher.js +47 -22
  456. package/dist/ghidra/GhidraProvider.js +6 -2
  457. package/dist/ghidra/GhidraProviderCapabilities.js +20 -2
  458. package/dist/ghidra/GhidraProviderClient.js +36 -15
  459. package/dist/ghidra/GhidraSessionError.js +13 -7
  460. package/dist/ghidra/GhidraSessionRoot.js +39 -0
  461. package/dist/ghidra/GhidraTargetSnapshot.js +47 -12
  462. package/dist/ghidra/GhidraTransport.js +20 -0
  463. package/dist/ghidra/extensions/GhidraExtensions.js +17 -10
  464. package/dist/ghidra/extensions/nativeaot/NativeAotAdapter.js +8 -2
  465. package/dist/hopper/BridgeLauncher.js +65 -56
  466. package/dist/hopper/HopperAnalysisProfile.js +65 -12
  467. package/dist/hopper/HopperCleanup.js +63 -22
  468. package/dist/hopper/HopperClient.js +288 -59
  469. package/dist/hopper/HopperFileOffset.js +237 -0
  470. package/dist/hopper/HopperMachOImage.js +197 -0
  471. package/dist/hopper/HopperOperationStage.js +6 -0
  472. package/dist/hopper/HopperProvider.js +71 -19
  473. package/dist/hopper/HopperProviderCapabilities.js +19 -1
  474. package/dist/hopper/HopperRegexSearch.js +134 -0
  475. package/dist/hopper/HopperRegexWorker.js +27 -0
  476. package/dist/hopper/HopperRequestQueue.js +68 -19
  477. package/dist/hopper/HopperTargetLease.js +133 -49
  478. package/dist/hopper/LinuxPrivateDisplayProbe.js +6 -0
  479. package/dist/ida/IdaConfiguration.js +8 -3
  480. package/dist/ida/IdaInput.js +1 -7
  481. package/dist/ida/IdaMcpConnection.js +8 -4
  482. package/dist/ida/IdaOperationRunner.js +3 -3
  483. package/dist/ida/IdaProvider.js +8 -12
  484. package/dist/ida/IdaSessionClient.js +20 -18
  485. package/dist/ida/IdaWorkspace.js +12 -13
  486. package/dist/inspector/JavaScriptRuntimeScope.js +9 -1
  487. package/dist/inspector/V8InspectorCaptureProjection.js +9 -4
  488. package/dist/inspector/V8InspectorProvider.js +82 -36
  489. package/dist/javascript/recovery/WakaruCommand.js +7 -2
  490. package/dist/javascript/recovery/WakaruExecution.js +5 -2
  491. package/dist/javascript/sourceMaps/DecodedSourceMap.js +47 -0
  492. package/dist/javascript/sourceMaps/SourceMapCommand.js +16 -0
  493. package/dist/javascript/sourceMaps/SourceMapFormat.js +79 -31
  494. package/dist/javascript/sourceMaps/TraceSourceMap.js +14 -28
  495. package/dist/main/shutdown.js +11 -3
  496. package/dist/main/startup.js +9 -2
  497. package/dist/main/transport.js +22 -2
  498. package/dist/main.js +11 -18
  499. package/dist/mcpDoctor.js +62 -2
  500. package/dist/native/AppleDispatchCoverage.js +47 -6
  501. package/dist/native/AppleDispatchDecodeFacts.js +6 -0
  502. package/dist/native/AppleDispatchMetadata.js +6 -3
  503. package/dist/native/AppleMachoFixups.js +48 -24
  504. package/dist/native/AppleMachoSelection.js +48 -22
  505. package/dist/native/AppleObjcCategories.js +6 -2
  506. package/dist/native/AppleObjcDispatchFacets.js +5 -2
  507. package/dist/native/AppleObjcProperties.js +2 -1
  508. package/dist/native/AppleSwiftDispatchFacets.js +27 -21
  509. package/dist/native/AppleSwiftVtables.js +21 -15
  510. package/dist/native/CommandRunner.js +87 -88
  511. package/dist/native/LldbCallTracer.js +372 -103
  512. package/dist/native/LldbRetainedObservations.js +178 -0
  513. package/dist/native/NativeCallObservation.js +62 -3
  514. package/dist/native/NativeMacOSProvider.js +122 -31
  515. package/dist/native/NativeUiHelperRuntime.js +11 -2
  516. package/dist/native/NativeUiObservation.js +2 -2
  517. package/dist/native/SignatureTargetBinding.js +155 -0
  518. package/dist/native/parsers/lipo.js +71 -1
  519. package/dist/native/pwndbg/PwndbgCoreContext.js +25 -5
  520. package/dist/native/pwntools/PwntoolsDecoder.js +2 -1
  521. package/dist/native/pwntools/RecordedCrashStructureBindings.js +2 -0
  522. package/dist/process/DarwinProcessRunTokenReader.js +23 -10
  523. package/dist/process/ExecFileOutput.js +108 -6
  524. package/dist/process/OwnedCommand.js +7 -2
  525. package/dist/process/PrivateRuntimeRoot.js +10 -5
  526. package/dist/process/ProcessOwnership.js +204 -57
  527. package/dist/process/ProcessOwnershipObservation.js +60 -9
  528. package/dist/process/ProviderProcess.js +39 -10
  529. package/dist/process/capture/FilesystemSnapshot.js +50 -13
  530. package/dist/process/capture/ProcessCaptureError.js +15 -2
  531. package/dist/process/capture/ProcessCaptureLifecycle.js +235 -81
  532. package/dist/process/capture/ProcessFilesystemEffects.js +33 -3
  533. package/dist/process/capture/ProcessHarness.js +21 -25
  534. package/dist/process/capture/ProcessNormalization.js +20 -2
  535. package/dist/process/capture/ProcessSampling.js +25 -2
  536. package/dist/process/capture/TerminalRenderer.js +14 -0
  537. package/dist/process/snapshotEnvironment.js +14 -0
  538. package/dist/server/EvidenceMcpServer.js +157 -0
  539. package/dist/server/createServer.js +61 -41
  540. package/dist/server/mcpClientMetadata.js +12 -5
  541. package/dist/server/promptCompletion.js +3 -8
  542. package/dist/server/registerAnalysisViewTool.js +15 -0
  543. package/dist/server/registerAndroidTools.js +2 -5
  544. package/dist/server/registerApplicationTools/compareExportShapes.js +4 -5
  545. package/dist/server/registerApplicationTools/compareSourceToBundle.js +4 -5
  546. package/dist/server/registerApplicationTools/compareVersions.js +4 -5
  547. package/dist/server/registerApplicationTools/coverage.js +1 -2
  548. package/dist/server/registerApplicationTools/helpers.js +1 -4
  549. package/dist/server/registerApplicationTools/obligationLedger.js +4 -5
  550. package/dist/server/registerApplicationTools/projectMobileApplicationGraph.js +3 -4
  551. package/dist/server/registerApplicationTools/traceFeature.js +4 -5
  552. package/dist/server/registerApplicationTools/traceSemantics.js +4 -5
  553. package/dist/server/registerArtifactComparisonTool.js +13 -10
  554. package/dist/server/registerBinaryDiagnosticsTools.js +2 -5
  555. package/dist/server/registerBrowserScenarioTool.js +3 -6
  556. package/dist/server/registerBrowserTools.js +13 -18
  557. package/dist/server/registerBundleComparisonTool.js +5 -7
  558. package/dist/server/registerCloseLifecycleTool.js +9 -20
  559. package/dist/server/registerElectronTools.js +10 -15
  560. package/dist/server/registerEnhancedTools.js +36 -77
  561. package/dist/server/registerEvidenceTools.js +3 -6
  562. package/dist/server/registerEvmTools.js +2 -5
  563. package/dist/server/registerFirmwareTools.js +2 -5
  564. package/dist/server/registerFunctionComparisonTool.js +15 -12
  565. package/dist/server/registerInvestigationTools.js +16 -17
  566. package/dist/server/registerJavaScriptRecoveryTool.js +2 -5
  567. package/dist/server/registerJavaScriptRuntimeObservationTools.js +6 -8
  568. package/dist/server/registerManagedWorkflowTools/compareManagedMembers.js +5 -8
  569. package/dist/server/registerManagedWorkflowTools/importManagedReconstruction.js +4 -7
  570. package/dist/server/registerManagedWorkflowTools/projectManagedApplicationGraph.js +6 -9
  571. package/dist/server/registerManagedWorkflowTools/verifyManagedNativeBoundaries.js +6 -9
  572. package/dist/server/registerOfficialTools.js +4 -21
  573. package/dist/server/registerProcessComparisonTool.js +74 -48
  574. package/dist/server/registerRecordedCrashTools.js +2 -5
  575. package/dist/server/registerSessionRecordTools.js +19 -24
  576. package/dist/server/registerSessionStatusTool.js +19 -6
  577. package/dist/server/registerSessionTools.js +20 -18
  578. package/dist/server/registerWebModuleTool.js +2 -5
  579. package/dist/server/registerWebNetworkCaptureTool.js +2 -5
  580. package/dist/server/registerWebRuntimeTools.js +4 -9
  581. package/dist/server/registerWebScriptTool.js +2 -5
  582. package/dist/server/registerWebSourceLocationTool.js +2 -5
  583. package/dist/server/runDerivedOperation.js +15 -3
  584. package/dist/server/sessionAvailabilityPolicy.js +0 -1
  585. package/dist/server/toolRegistrationOptions.js +2 -2
  586. package/dist/server/toolResult.js +75 -51
  587. package/dist/server/toolResultEncoding.js +34 -0
  588. package/dist/windows/WindowsNativeLoader.js +1 -0
  589. package/dist/windows/WindowsOwnedProcess.js +60 -15
  590. package/dist/windows/WindowsPrivateRuntime.js +7 -8
  591. package/install.sh +1 -1
  592. package/native/windows/README.md +3 -1
  593. package/native/windows/build/manifest.json +2 -2
  594. package/native/windows/build/rea-windows-x64.node +0 -0
  595. package/package.json +44 -30
  596. package/scripts/electron-active-hook-boundaries.cjs +18 -20
  597. package/scripts/electron-active-hook.cjs +241 -37
  598. package/scripts/rea.mjs +3 -6
  599. package/skills/reverse-engineer-anything/SKILL.md +12 -3
  600. package/skills/reverse-engineer-anything/references/android-applications.md +6 -3
  601. package/skills/reverse-engineer-anything/references/evidence-workflows.md +8 -4
  602. package/skills/reverse-engineer-anything/references/javascript-applications.md +20 -3
  603. package/skills/reverse-engineer-anything/references/native-and-artifacts.md +9 -0
  604. package/dist/config.js +0 -1
  605. package/dist/contracts/browserCaptureToolInputSchema.js +0 -43
  606. package/dist/contracts/process/processCaptureExample.js +0 -2
  607. package/dist/contracts/toolOutputSchemas.js +0 -2
  608. package/dist/ghidra/GhidraDefaults.js +0 -2
  609. package/dist/main/reload.js +0 -12
  610. package/dist/main/state.js +0 -3
  611. package/dist/server/sessionToolPolicies.js +0 -2
@@ -1,17 +1,16 @@
1
1
  import { METADATA_TABLE_NAMES, } from "./ManagedMetadataLayout.js";
2
2
  import { readAssembly, readAssemblyReference, readCustomAttribute, readModule, readResource, } from "./ManagedMetadataInventoryRows.js";
3
3
  import { metadataToken } from "./ManagedMetadataHeaps.js";
4
- import { ManagedReaderFailure } from "./ManagedReaderFailure.js";
5
- const safeRead = (operation, issues) => {
6
- try {
7
- return operation();
8
- }
9
- catch (cause) {
10
- if (!(cause instanceof ManagedReaderFailure))
11
- throw cause;
12
- issues.push(cause.issue);
13
- return undefined;
14
- }
4
+ import { readManagedValue, uniqueManagedParseIssues, } from "./ManagedReaderFailure.js";
5
+ /** Map optional embedded resources without discarding admitted CLI metadata. */
6
+ export const readManagedResourceDirectory = (pe, issues) => {
7
+ const resources = pe.cli?.resources;
8
+ if (resources === undefined || (resources.rva === 0 && resources.size === 0))
9
+ return null;
10
+ return (readManagedValue(() => ({
11
+ offset: pe.rvaToOffset(resources.rva, resources.size, "cli.resources"),
12
+ size: resources.size,
13
+ }), issues) ?? null);
15
14
  };
16
15
  const readRows = (descriptor, read) => {
17
16
  const total = descriptor?.rowCount ?? 0;
@@ -23,9 +22,6 @@ const readRows = (descriptor, read) => {
23
22
  }
24
23
  return items;
25
24
  };
26
- const uniqueIssues = (issues) => [
27
- ...new Map(issues.map((issue) => [JSON.stringify(issue), issue])).values(),
28
- ];
29
25
  const heapExtent = (layout) => Math.max(layout.strings.size, layout.blob.size);
30
26
  const validateIdentityTableCounts = (layout, issues) => {
31
27
  const moduleRows = layout.table(0)?.rowCount ?? 0;
@@ -46,13 +42,13 @@ const validateIdentityTableCounts = (layout, issues) => {
46
42
  });
47
43
  };
48
44
  const readReferences = (bytes, layout, issues) => {
49
- const references = readRows(layout.table(35), (row) => safeRead(() => readAssemblyReference(bytes, layout, row, heapExtent(layout)), issues));
45
+ const references = readRows(layout.table(35), (row) => readManagedValue(() => readAssemblyReference(bytes, layout, row, heapExtent(layout)), issues));
50
46
  return {
51
47
  references,
52
48
  referenceNames: [...new Set(references.map(({ name }) => name))].sort(),
53
49
  };
54
50
  };
55
- const readResources = ({ bytes, layout, resourceDirectory, issues, }) => readRows(layout.table(40), (row) => safeRead(() => readResource({
51
+ const readResources = ({ bytes, layout, resourceDirectory, issues, }) => readRows(layout.table(40), (row) => readManagedValue(() => readResource({
56
52
  bytes,
57
53
  layout,
58
54
  row,
@@ -60,7 +56,7 @@ const readResources = ({ bytes, layout, resourceDirectory, issues, }) => readRow
60
56
  issues,
61
57
  }), issues));
62
58
  const readAttributes = (bytes, layout, issues) => {
63
- const attributes = readRows(layout.table(12), (row) => safeRead(() => readCustomAttribute(bytes, layout, row, heapExtent(layout)), issues));
59
+ const attributes = readRows(layout.table(12), (row) => readManagedValue(() => readCustomAttribute(bytes, layout, row, heapExtent(layout)), issues));
64
60
  const targetFrameworks = new Set();
65
61
  for (const attribute of attributes) {
66
62
  if (attribute.parent_token === metadataToken(32, 1) &&
@@ -75,10 +71,8 @@ const readAttributes = (bytes, layout, issues) => {
75
71
  export const readManagedMetadataInventory = (bytes, layout, resourceDirectory) => {
76
72
  const issues = [];
77
73
  validateIdentityTableCounts(layout, issues);
78
- const module = safeRead(() => readModule(bytes, layout, heapExtent(layout)), issues) ??
79
- null;
80
- const assembly = safeRead(() => readAssembly(bytes, layout, heapExtent(layout)), issues) ??
81
- null;
74
+ const module = readManagedValue(() => readModule(bytes, layout, heapExtent(layout)), issues) ?? null;
75
+ const assembly = readManagedValue(() => readAssembly(bytes, layout, heapExtent(layout)), issues) ?? null;
82
76
  const { references, referenceNames } = readReferences(bytes, layout, issues);
83
77
  const resources = readResources({
84
78
  bytes,
@@ -95,7 +89,7 @@ export const readManagedMetadataInventory = (bytes, layout, resourceDirectory) =
95
89
  references,
96
90
  resources,
97
91
  attributes,
98
- issues: uniqueIssues(issues),
92
+ issues: uniqueManagedParseIssues(issues),
99
93
  };
100
94
  };
101
95
  /** Stable table-name/count projection for caller-visible coverage. */
@@ -1,6 +1,7 @@
1
1
  import { decodeInstructions, parseExceptionRegions, } from "./ManagedMemberInstructionDecoder.js";
2
2
  import { validateExceptionRegionRanges } from "./ManagedExceptionRegionValidation.js";
3
3
  import { sha256Bytes } from "./ManagedMetadataHeaps.js";
4
+ import { ManagedReaderFailure } from "./ManagedReaderFailure.js";
4
5
  const bodyStatus = (decodedIssue, truncatedInstructions, exceptionRegions) => {
5
6
  if (decodedIssue !== null || exceptionRegions?.status === "malformed")
6
7
  return "malformed";
@@ -114,6 +115,9 @@ export const methodBody = (bytes, pe, rva, implementation = {
114
115
  };
115
116
  }
116
117
  catch (cause) {
118
+ if (!(cause instanceof ManagedReaderFailure) &&
119
+ !(cause instanceof RangeError))
120
+ throw cause;
117
121
  return emptyMethodBody(rva, "malformed", cause instanceof Error ? cause.message : "Method body parse failed");
118
122
  }
119
123
  };
@@ -2,62 +2,69 @@ import { managedNativeBoundaryInspectionSchema, } from "../domain/managed/manage
2
2
  import {} from "./ManagedMetadataLayout.js";
3
3
  import { metadataRowCursor, metadataCodedToken, metadataCodedTokenInvalidReason, metadataToken, readMetadataString, } from "./ManagedMetadataHeaps.js";
4
4
  import { managedTableRowCounts } from "./ManagedMetadataInventory.js";
5
+ import { readManagedValue } from "./ManagedReaderFailure.js";
5
6
  const flagsHex = (value) => `0x${value.toString(16).padStart(4, "0")}`;
6
- export const parseModuleRefs = (bytes, layout, heapExtent) => {
7
+ export const parseModuleRefs = (bytes, layout, heapExtent, issues) => {
7
8
  const refs = [];
8
9
  const table = layout.table(26);
9
10
  for (let row = 1; row <= (table?.rowCount ?? 0); row += 1) {
10
- const cursor = metadataRowCursor(bytes, layout, 26, row);
11
- refs.push({
12
- token: metadataToken(26, row),
13
- row_offset: cursor.start,
14
- name: readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), heapExtent),
15
- });
11
+ readManagedValue(() => {
12
+ const cursor = metadataRowCursor(bytes, layout, 26, row);
13
+ refs.push({
14
+ token: metadataToken(26, row),
15
+ row_offset: cursor.start,
16
+ name: readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), heapExtent),
17
+ });
18
+ }, issues);
16
19
  }
17
20
  return refs;
18
21
  };
19
- export const parseFields = (bytes, layout, heapExtent) => {
22
+ export const parseFields = (bytes, layout, heapExtent, issues) => {
20
23
  const fields = new Map();
21
24
  const table = layout.table(4);
22
25
  for (let row = 1; row <= (table?.rowCount ?? 0); row += 1) {
23
- const cursor = metadataRowCursor(bytes, layout, 4, row);
24
- const flags = cursor.readUInt16();
25
- const name = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), heapExtent);
26
- cursor.readIndex(layout.blobIndexSize);
27
- const token = metadataToken(4, row);
28
- fields.set(token, {
29
- token,
30
- rowOffset: cursor.start,
31
- kind: "field",
32
- name,
33
- flags,
34
- implFlags: null,
35
- rva: null,
36
- });
26
+ readManagedValue(() => {
27
+ const cursor = metadataRowCursor(bytes, layout, 4, row);
28
+ const flags = cursor.readUInt16();
29
+ const name = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), heapExtent);
30
+ cursor.readIndex(layout.blobIndexSize);
31
+ const token = metadataToken(4, row);
32
+ fields.set(token, {
33
+ token,
34
+ rowOffset: cursor.start,
35
+ kind: "field",
36
+ name,
37
+ flags,
38
+ implFlags: null,
39
+ rva: null,
40
+ });
41
+ }, issues);
37
42
  }
38
43
  return fields;
39
44
  };
40
- export const parseMethods = (bytes, layout, heapExtent) => {
45
+ export const parseMethods = (bytes, layout, heapExtent, issues) => {
41
46
  const methods = new Map();
42
47
  const table = layout.table(6);
43
48
  for (let row = 1; row <= (table?.rowCount ?? 0); row += 1) {
44
- const cursor = metadataRowCursor(bytes, layout, 6, row);
45
- const rva = cursor.readUInt32();
46
- const implFlags = cursor.readUInt16();
47
- const flags = cursor.readUInt16();
48
- const name = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), heapExtent);
49
- cursor.readIndex(layout.blobIndexSize);
50
- cursor.readIndex(layout.tableIndexSize(8));
51
- const token = metadataToken(6, row);
52
- methods.set(token, {
53
- token,
54
- rowOffset: cursor.start,
55
- kind: "method",
56
- name,
57
- flags,
58
- implFlags,
59
- rva,
60
- });
49
+ readManagedValue(() => {
50
+ const cursor = metadataRowCursor(bytes, layout, 6, row);
51
+ const rva = cursor.readUInt32();
52
+ const implFlags = cursor.readUInt16();
53
+ const flags = cursor.readUInt16();
54
+ const name = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), heapExtent);
55
+ cursor.readIndex(layout.blobIndexSize);
56
+ cursor.readIndex(layout.tableIndexSize(8));
57
+ const token = metadataToken(6, row);
58
+ methods.set(token, {
59
+ token,
60
+ rowOffset: cursor.start,
61
+ kind: "method",
62
+ name,
63
+ flags,
64
+ implFlags,
65
+ rva,
66
+ });
67
+ }, issues);
61
68
  }
62
69
  return methods;
63
70
  };
@@ -66,46 +73,60 @@ export const parseImplMaps = ({ bytes, layout, heapExtent, modules, members, iss
66
73
  const imports = [];
67
74
  const table = layout.table(28);
68
75
  for (let row = 1; row <= (table?.rowCount ?? 0); row += 1) {
69
- const cursor = metadataRowCursor(bytes, layout, 28, row);
70
- const mappingFlags = cursor.readUInt16();
71
- const memberForwardedOffset = cursor.offset;
72
- const memberForwardedRaw = cursor.readIndex(layout.codedIndexSize("MemberForwarded"));
73
- const memberForwardedReason = metadataCodedTokenInvalidReason(memberForwardedRaw, 1, [4, 6], layout.rowCounts);
74
- if (memberForwardedReason !== null || memberForwardedRaw === 0)
75
- issues.push({
76
- code: "invalid-row",
77
- scope: `metadata.ImplMap:${metadataToken(28, row)}`,
78
- offset: memberForwardedOffset,
79
- detail: memberForwardedReason === null
80
- ? "ImplMap MemberForwarded coded index 0x0 is null, but the column must reference a Field or MethodDef row"
81
- : `ImplMap MemberForwarded coded index 0x${memberForwardedRaw.toString(16)} is invalid: ${memberForwardedReason}`,
76
+ readManagedValue(() => {
77
+ const cursor = metadataRowCursor(bytes, layout, 28, row);
78
+ const mappingFlags = cursor.readUInt16();
79
+ const memberForwardedOffset = cursor.offset;
80
+ const memberForwardedRaw = cursor.readIndex(layout.codedIndexSize("MemberForwarded"));
81
+ const memberForwardedReason = metadataCodedTokenInvalidReason(memberForwardedRaw, 1, [4, 6], layout.rowCounts);
82
+ if (memberForwardedReason !== null || memberForwardedRaw === 0)
83
+ issues.push({
84
+ code: "invalid-row",
85
+ scope: `metadata.ImplMap:${metadataToken(28, row)}`,
86
+ offset: memberForwardedOffset,
87
+ detail: memberForwardedReason === null
88
+ ? "ImplMap MemberForwarded coded index 0x0 is null, but the column must reference a Field or MethodDef row"
89
+ : `ImplMap MemberForwarded coded index 0x${memberForwardedRaw.toString(16)} is invalid: ${memberForwardedReason}`,
90
+ });
91
+ const memberToken = metadataCodedToken(memberForwardedRaw, 1, [4, 6], layout.rowCounts);
92
+ const importName = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), heapExtent);
93
+ const importScopeOffset = cursor.offset;
94
+ const importScopeRow = cursor.readIndex(layout.tableIndexSize(26));
95
+ const moduleCount = layout.table(26)?.rowCount ?? 0;
96
+ const validImportScope = importScopeRow > 0 && importScopeRow <= moduleCount;
97
+ if (!validImportScope)
98
+ issues.push({
99
+ code: "invalid-row",
100
+ scope: `metadata.ImplMap:${metadataToken(28, row)}`,
101
+ offset: importScopeOffset,
102
+ detail: `ImplMap ImportScope row ${String(importScopeRow)} must reference a ModuleRef row between 1 and ${String(moduleCount)}`,
103
+ });
104
+ const importScopeToken = validImportScope
105
+ ? metadataToken(26, importScopeRow)
106
+ : null;
107
+ const member = memberToken === null ? undefined : members.get(memberToken);
108
+ imports.push({
109
+ token: metadataToken(28, row),
110
+ row_offset: cursor.start,
111
+ mapping_flags: mappingFlags,
112
+ mapping_flags_hex: flagsHex(mappingFlags),
113
+ member_token: memberToken,
114
+ member_kind: member?.kind ?? "unknown",
115
+ member_name: member?.name ?? null,
116
+ import_name: importName,
117
+ import_scope_token: importScopeToken,
118
+ import_scope_name: importScopeToken === null
119
+ ? null
120
+ : (moduleNames.get(importScopeToken)?.name ?? null),
121
+ no_mangle: (mappingFlags & 0x0001) !== 0,
122
+ char_set: charSet(mappingFlags),
123
+ call_convention: callConvention(mappingFlags),
124
+ supports_last_error: (mappingFlags & 0x0040) !== 0,
125
+ best_fit: bestFit(mappingFlags),
126
+ throw_on_unmappable_char: throwOnUnmappable(mappingFlags),
127
+ verification: "managed-declaration-only",
82
128
  });
83
- const memberToken = metadataCodedToken(memberForwardedRaw, 1, [4, 6], layout.rowCounts);
84
- const importName = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), heapExtent);
85
- const importScopeRow = cursor.readIndex(layout.tableIndexSize(26));
86
- const importScopeToken = importScopeRow === 0 ? null : metadataToken(26, importScopeRow);
87
- const member = memberToken === null ? undefined : members.get(memberToken);
88
- imports.push({
89
- token: metadataToken(28, row),
90
- row_offset: cursor.start,
91
- mapping_flags: mappingFlags,
92
- mapping_flags_hex: flagsHex(mappingFlags),
93
- member_token: memberToken,
94
- member_kind: member?.kind ?? "unknown",
95
- member_name: member?.name ?? null,
96
- import_name: importName,
97
- import_scope_token: importScopeToken,
98
- import_scope_name: importScopeToken === null
99
- ? null
100
- : (moduleNames.get(importScopeToken)?.name ?? null),
101
- no_mangle: (mappingFlags & 0x0001) !== 0,
102
- char_set: charSet(mappingFlags),
103
- call_convention: callConvention(mappingFlags),
104
- supports_last_error: (mappingFlags & 0x0040) !== 0,
105
- best_fit: bestFit(mappingFlags),
106
- throw_on_unmappable_char: throwOnUnmappable(mappingFlags),
107
- verification: "managed-declaration-only",
108
- });
129
+ }, issues);
109
130
  }
110
131
  return imports;
111
132
  };
@@ -168,6 +189,8 @@ const throwOnUnmappable = (flags) => {
168
189
  export const nativeImplementations = (methods, pinvokeTokens) => {
169
190
  const implementations = [];
170
191
  for (const method of methods) {
192
+ if (method.kind !== "method")
193
+ continue;
171
194
  const implFlags = method.implFlags ?? 0;
172
195
  const codeType = codeTypeFor(implFlags);
173
196
  const managedKind = managedKindFor(implFlags);
@@ -229,19 +252,9 @@ const boundaryKind = (pinvokeDeclared, codeType, managedKind) => {
229
252
  return "unmanaged-method";
230
253
  return "mixed-or-unknown";
231
254
  };
232
- /** CLI header facets of a PE without an admitted CLI header. */
233
- export const NO_CLI_NATIVE = {
234
- il_only: false,
235
- requires_32bit: false,
236
- strong_name_signed: false,
237
- native_entry_point: false,
238
- ready_to_run_signature: false,
239
- managed_native_header_rva: 0,
240
- managed_native_header_size: 0,
241
- };
242
255
  export const cliNative = (pe) => {
243
256
  if (pe.cli === null)
244
- return NO_CLI_NATIVE;
257
+ return null;
245
258
  return {
246
259
  il_only: (pe.cli.flags & 0x0000_0001) !== 0,
247
260
  requires_32bit: (pe.cli.flags & 0x0000_0002) !== 0,
@@ -255,10 +268,12 @@ export const cliNative = (pe) => {
255
268
  /** Summarize declaration counts with the native facets of the CLI header. */
256
269
  export const nativeBoundarySummary = (native, counts) => ({
257
270
  ...counts,
258
- ready_to_run: native.ready_to_run_signature,
259
- mixed_mode_or_native_header: native.managed_native_header_rva !== 0 ||
260
- native.managed_native_header_size !== 0 ||
261
- native.native_entry_point,
271
+ ready_to_run: native?.ready_to_run_signature ?? null,
272
+ mixed_mode_or_native_header: native === null
273
+ ? null
274
+ : native.managed_native_header_rva !== 0 ||
275
+ native.managed_native_header_size !== 0 ||
276
+ native.native_entry_point,
262
277
  });
263
278
  export const buildNativeBoundaryInspection = ({ target, bytes, layout, inventory, moduleRefs, imports, implementations, native, issues, }) => managedNativeBoundaryInspectionSchema.parse({
264
279
  artifact: {
@@ -1,16 +1,15 @@
1
1
  import { managedNativeBoundaryInspectionSchema, } from "../domain/managed/managedArtifact.js";
2
- import { readManagedMetadataInventory, } from "./ManagedMetadataInventory.js";
2
+ import { readManagedMetadataInventory, readManagedResourceDirectory, } from "./ManagedMetadataInventory.js";
3
3
  import { readManagedMetadataLayout, } from "./ManagedMetadataLayout.js";
4
4
  import { readManagedPeLayout, } from "./ManagedPeReader.js";
5
5
  import { ManagedReaderFailure } from "./ManagedReaderFailure.js";
6
- import { buildNativeBoundaryInspection, cliNative, NO_CLI_NATIVE, nativeBoundarySummary, nativeImplementations, parseFields, parseImplMaps, parseMethods, parseModuleRefs, } from "./ManagedNativeBoundaryHelpers.js";
6
+ import { buildNativeBoundaryInspection, cliNative, nativeBoundarySummary, nativeImplementations, parseFields, parseImplMaps, parseMethods, parseModuleRefs, } from "./ManagedNativeBoundaryHelpers.js";
7
7
  /**
8
8
  * Report a PE whose CLI metadata is absent or cannot be admitted. `native`
9
9
  * holds the CLI header facts when the header itself was admitted; otherwise
10
10
  * the header is absent (`not-managed`) or unreadable (`malformed`).
11
11
  */
12
12
  const emptyInspection = (target, bytes, classification, { native = null, issues = [], } = {}) => {
13
- const header = native ?? NO_CLI_NATIVE;
14
13
  return managedNativeBoundaryInspectionSchema.parse({
15
14
  artifact: {
16
15
  path: target.path,
@@ -29,11 +28,11 @@ const emptyInspection = (target, bytes, classification, { native = null, issues
29
28
  requires_artifact_sha256: target.sha256,
30
29
  requires_mvid: null,
31
30
  },
32
- cli_native: header,
31
+ cli_native: native,
33
32
  module_refs: [],
34
33
  pinvoke_imports: [],
35
34
  native_implementations: [],
36
- summary: nativeBoundarySummary(header, {
35
+ summary: nativeBoundarySummary(native, {
37
36
  module_ref_count: 0,
38
37
  pinvoke_import_count: 0,
39
38
  native_implementation_count: 0,
@@ -41,23 +40,14 @@ const emptyInspection = (target, bytes, classification, { native = null, issues
41
40
  coverage: { state: "unavailable", issues },
42
41
  limitations: [
43
42
  "No CLI metadata was admitted; native boundary declarations are unavailable.",
44
- ...(native === null && classification === "malformed"
45
- ? [
46
- "The CLI header was not admitted, so cli_native and the summary's ready_to_run and mixed_mode_or_native_header values are defaults, not observations.",
47
- ]
48
- : []),
49
43
  "Static inspection does not load or execute target code, so native export resolution is not performed.",
50
44
  ],
51
45
  });
52
46
  };
53
- const readBoundaryInventory = (bytes, pe, cli) => {
47
+ const readBoundaryInventory = (bytes, pe, cli, issues) => {
54
48
  const metadataOffset = pe.rvaToOffset(cli.metadata.rva, cli.metadata.size, "cli.metadata");
55
49
  const layout = readManagedMetadataLayout(bytes, metadataOffset, cli.metadata.size);
56
- const resourceDirectory = {
57
- offset: pe.rvaToOffset(cli.resources.rva, cli.resources.size, "cli.resources"),
58
- size: cli.resources.size,
59
- };
60
- const inventory = readManagedMetadataInventory(bytes, layout, resourceDirectory);
50
+ const inventory = readManagedMetadataInventory(bytes, layout, readManagedResourceDirectory(pe, issues));
61
51
  return { layout, inventory };
62
52
  };
63
53
  /** Inspect managed/native boundary declarations from PE metadata without execution. */
@@ -75,10 +65,11 @@ export const inspectManagedNativeBoundariesBytes = (bytes, target) => {
75
65
  }
76
66
  if (pe.cli === null)
77
67
  return emptyInspection(target, bytes, pe.cliDirectoryPresent ? "malformed" : "not-managed", { issues: pe.cliIssue === null ? [] : [pe.cliIssue] });
68
+ const issues = [];
78
69
  let layout;
79
70
  let inventory;
80
71
  try {
81
- ({ layout, inventory } = readBoundaryInventory(bytes, pe, pe.cli));
72
+ ({ layout, inventory } = readBoundaryInventory(bytes, pe, pe.cli, issues));
82
73
  }
83
74
  catch (cause) {
84
75
  if (!(cause instanceof ManagedReaderFailure))
@@ -89,11 +80,11 @@ export const inspectManagedNativeBoundariesBytes = (bytes, target) => {
89
80
  });
90
81
  }
91
82
  const heapExtent = Math.max(layout.strings.size, layout.blob.size);
92
- const issues = [...inventory.issues];
93
- const moduleRefs = parseModuleRefs(bytes, layout, heapExtent);
83
+ issues.push(...inventory.issues);
84
+ const moduleRefs = parseModuleRefs(bytes, layout, heapExtent, issues);
94
85
  const members = new Map([
95
- ...parseFields(bytes, layout, heapExtent),
96
- ...parseMethods(bytes, layout, heapExtent),
86
+ ...parseFields(bytes, layout, heapExtent, issues),
87
+ ...parseMethods(bytes, layout, heapExtent, issues),
97
88
  ]);
98
89
  const imports = parseImplMaps({
99
90
  bytes,
@@ -8,3 +8,19 @@ export class ManagedReaderFailure extends Error {
8
8
  }
9
9
  /** Construct a typed managed parse failure at an exact byte location. */
10
10
  export const managedFailure = (code, scope, detail, offset = null) => new ManagedReaderFailure({ code, scope, offset, detail });
11
+ /** Retain one malformed item's location while allowing independent items to be read. */
12
+ export const readManagedValue = (operation, issues) => {
13
+ try {
14
+ return operation();
15
+ }
16
+ catch (cause) {
17
+ if (!(cause instanceof ManagedReaderFailure))
18
+ throw cause;
19
+ issues.push(cause.issue);
20
+ return undefined;
21
+ }
22
+ };
23
+ /** Preserve issue order while collapsing the same malformed producer fact across facets. */
24
+ export const uniqueManagedParseIssues = (issues) => [
25
+ ...new Map(issues.map((issue) => [JSON.stringify(issue), issue])).values(),
26
+ ];
@@ -3,7 +3,7 @@ import { createReadStream } from "node:fs";
3
3
  import { readFile } from "node:fs/promises";
4
4
  import { createAnalysisExecution, } from "../application/AnalysisProvider.js";
5
5
  import { MANAGED_STATIC_PROVIDER_IDENTITY as IDENTITY, managedStaticCapabilities, } from "./ManagedStaticProviderMetadata.js";
6
- import { MANAGED_TOOL_CONTRACTS, managedArtifactInputSchema, managedMemberInputSchema, managedNativeBoundaryInputSchema, } from "../contracts/managed/managedToolContracts.js";
6
+ import { MANAGED_TOOL_CONTRACTS, managedTargetInputSchema, } from "../contracts/managed/managedToolContracts.js";
7
7
  import { AnalysisCancelledError, AnalysisCapabilityUnavailableError, } from "../domain/analysisErrorCore.js";
8
8
  import { EvidenceIntegrityError } from "../domain/evidenceErrors.js";
9
9
  import { ProviderAdapterError } from "../domain/providerAdapterError.js";
@@ -66,7 +66,7 @@ class ManagedStaticClient {
66
66
  }
67
67
  close() {
68
68
  this.#snapshotBytes = undefined;
69
- return Promise.resolve();
69
+ return Promise.resolve(ok(null));
70
70
  }
71
71
  }
72
72
  const readManagedSnapshot = async (path, signal) => {
@@ -93,15 +93,13 @@ const hashManagedSource = async (path, signal) => {
93
93
  };
94
94
  const isManagedOperation = (operation) => MANAGED_TOOL_CONTRACTS.some(({ name }) => name === operation);
95
95
  const inspectManagedOperation = (operation, parameters, bytes, target) => {
96
+ managedTargetInputSchema.parse(parameters);
96
97
  if (operation === "inspect_managed_artifact") {
97
- managedArtifactInputSchema.parse(parameters);
98
98
  return inspectManagedArtifactBytes(bytes, target);
99
99
  }
100
100
  if (operation === "inspect_managed_native_boundaries") {
101
- managedNativeBoundaryInputSchema.parse(parameters);
102
101
  return inspectManagedNativeBoundariesBytes(bytes, target);
103
102
  }
104
- managedMemberInputSchema.parse(parameters);
105
103
  return inspectManagedMembersBytes(bytes, target);
106
104
  };
107
105
  const managedLocations = (result) => {