rea-agents 6.0.0 → 6.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +26 -18
- package/bridge/android/ReaJadxBridge.java +14 -5
- package/bridge/ghidra/ReaGhidraBridge.java +205 -51
- package/bridge/hopper_bridge.py +314 -127
- package/bridge/mitmproxy/capture.py +0 -2
- package/bridge/native/rea_lldb_tracer.py +630 -94
- package/bridge/process/ProcessRunTokenReader.swift +39 -5
- package/bridge/pwntools/recorded_crash_impl.py +4 -0
- package/dist/android/JadxConfiguration.js +274 -31
- package/dist/android/JadxMcpTransport.js +18 -2
- package/dist/android/JadxProtocol.js +6 -0
- package/dist/android/JadxProvider.js +76 -37
- package/dist/android/JadxSession.js +23 -4
- package/dist/application/AnalysisContextQueries.js +8 -35
- package/dist/application/AnalysisDocument.js +32 -0
- package/dist/application/AppBundleExecutable.js +67 -21
- package/dist/application/BinaryTargetResolver.js +5 -3
- package/dist/application/BrowserEvidence.js +3 -8
- package/dist/application/BrowserScenarioEvidence.js +2 -18
- package/dist/application/CallPathTracing.js +19 -3
- package/dist/application/CapabilityInventory.js +48 -11
- package/dist/application/ClientConfigurationDocument.js +917 -8
- package/dist/application/ClientRegistrationIdentity.js +26 -5
- package/dist/application/ClientRegistrationStatus.js +29 -14
- package/dist/application/DirectAnalysis.js +56 -51
- package/dist/application/DirectAnalysisCleanup.js +72 -0
- package/dist/application/DirectAnalysisStatus.js +4 -5
- package/dist/application/Doctor.js +19 -21
- package/dist/application/DoctorDiagnostics.js +1 -2
- package/dist/application/DoctorScope.js +25 -13
- package/dist/application/EnhancedLiteralTracing.js +22 -25
- package/dist/application/EnhancedTools.js +64 -17
- package/dist/application/EvidenceBundleFiles.js +30 -13
- package/dist/application/FunctionAnalysisEvidence.js +2 -3
- package/dist/application/InventoryProjectionEvidence.js +4 -3
- package/dist/application/InvestigationProviders.js +11 -2
- package/dist/application/JsonFiles.js +83 -28
- package/dist/application/LinuxHopper.js +9 -6
- package/dist/application/MacHopper.js +15 -18
- package/dist/application/ProcedureAddressResolution.js +11 -0
- package/dist/application/RealHopperAssertions.js +0 -11
- package/dist/application/ReconstructionCoverageService.js +7 -4
- package/dist/application/ReconstructionObligationCandidates.js +1 -1
- package/dist/application/ReconstructionObligationLedgerService.js +4 -3
- package/dist/application/ReferenceSourceImportEntries.js +1 -1
- package/dist/application/Setup.js +21 -17
- package/dist/application/SetupClientConfiguration.js +10 -15
- package/dist/application/SetupHost.js +21 -29
- package/dist/application/SetupPlan.js +11 -9
- package/dist/application/SupportedClients.js +34 -1
- package/dist/application/Uninstall.js +82 -29
- package/dist/application/Update.js +18 -3
- package/dist/application/UpdateMaintenance.js +7 -5
- package/dist/application/UpdateRuntime.js +57 -36
- package/dist/application/WebModuleTraceService.js +4 -2
- package/dist/application/WebNetworkCaptureService.js +4 -2
- package/dist/application/WebRuntimeService.js +5 -3
- package/dist/application/WebScriptExportService.js +32 -6
- package/dist/application/WebSourceLocationService.js +4 -2
- package/dist/application/WorkflowEvidence.js +105 -0
- package/dist/application/XrefsAddressResolution.js +45 -0
- package/dist/application/analysisView/AnalysisViewService.js +76 -0
- package/dist/application/binary/AnalysisClientCleanup.js +30 -5
- package/dist/application/binary/AnalysisProviderEvaluation.js +22 -7
- package/dist/application/binary/AnalysisProviderRegistry.js +4 -6
- package/dist/application/binary/AnalysisSnapshotCache.js +13 -14
- package/dist/application/binary/BinarySession.js +161 -93
- package/dist/application/binary/BinarySessionComposition.js +1 -3
- package/dist/application/binary/BinarySessionExecution.js +3 -5
- package/dist/application/binary/BinarySessionOpen.js +4 -4
- package/dist/application/binary/BinarySessionRecords.js +26 -4
- package/dist/application/binary/BinarySessionStatus.js +18 -7
- package/dist/application/binary/CompositeProvider.js +16 -17
- package/dist/application/binary/LazyAnalysisProvider.js +8 -5
- package/dist/application/binary/SessionProviderRouter.js +27 -135
- package/dist/application/binaryDiagnostics/BinaryLayoutService.js +4 -2
- package/dist/application/binaryDiagnostics/RecordedCrashService.js +4 -2
- package/dist/application/evm/EvmInterfaceService.js +4 -2
- package/dist/application/homebrew.js +48 -0
- package/dist/application/investigation/EvidenceLedger.js +21 -7
- package/dist/application/investigation/InvestigationRecords.js +8 -0
- package/dist/application/javascript/ElectronActiveEvidence.js +9 -13
- package/dist/application/javascript/JavaScriptAnalysisControl.js +34 -0
- package/dist/application/javascript/JavaScriptApplicationEvidence.js +21 -4
- package/dist/application/javascript/JavaScriptApplicationEvidenceGraph.js +19 -2
- package/dist/application/javascript/JavaScriptApplicationService.js +27 -15
- package/dist/application/javascript/JavaScriptApplicationWorkflowService.js +5 -5
- package/dist/application/javascript/JavaScriptArtifactAnalysis.js +10 -7
- package/dist/application/javascript/JavaScriptArtifactGraphBuilder.js +44 -10
- package/dist/application/javascript/JavaScriptArtifactGraphBundlers.js +11 -3
- package/dist/application/javascript/JavaScriptArtifactGraphContext.js +9 -0
- package/dist/application/javascript/JavaScriptArtifactGraphDocuments.js +8 -5
- package/dist/application/javascript/JavaScriptArtifactGraphFindings.js +12 -3
- package/dist/application/javascript/JavaScriptArtifactGraphStructure.js +0 -1
- package/dist/application/javascript/JavaScriptArtifactPathResolution.js +49 -19
- package/dist/application/javascript/JavaScriptArtifactReconstruction.js +56 -8
- package/dist/application/javascript/JavaScriptModuleRelationships.js +38 -9
- package/dist/application/javascript/JavaScriptRecoveryService.js +4 -2
- package/dist/application/javascript/JavaScriptRuntimeObservationService.js +6 -4
- package/dist/application/javascript/JavaScriptRuntimeReconciliationService.js +3 -3
- package/dist/application/javascript/JavaScriptSemanticGraphAsyncProjection.js +2 -3
- package/dist/application/javascript/JavaScriptSemanticGraphBuilder.js +63 -61
- package/dist/application/javascript/JavaScriptSemanticGraphChildProcessProjection.js +1 -2
- package/dist/application/javascript/JavaScriptSemanticGraphDataProjection.js +2 -3
- package/dist/application/javascript/JavaScriptSemanticGraphFlowProjection.js +1 -5
- package/dist/application/javascript/JavaScriptSemanticGraphObjectProjection.js +75 -46
- package/dist/application/javascript/JavaScriptSemanticGraphResourceProjection.js +2 -3
- package/dist/application/javascript/JavaScriptSemanticGraphValueProjection.js +64 -19
- package/dist/application/managed/ManagedApplicationGraphService.js +4 -3
- package/dist/application/managed/ManagedMemberComparisonService.js +9 -5
- package/dist/application/managed/ManagedNativeVerificationService.js +6 -4
- package/dist/application/managed/ManagedReconstructionService.js +4 -3
- package/dist/application/process/ProcessCli.js +25 -17
- package/dist/application/process/ProcessEvidence.js +4 -4
- package/dist/application/workflowInputError.js +18 -0
- package/dist/artifacts/ArtifactProvider.js +48 -13
- package/dist/artifacts/ArtifactReader.js +31 -0
- package/dist/artifacts/DirectoryArtifactReader.js +2 -1
- package/dist/artifacts/MachOSliceArtifactReader.js +106 -15
- package/dist/artifacts/NativeDmgArtifactReader.js +73 -21
- package/dist/artifacts/SafeOutputTree.js +16 -2
- package/dist/artifacts/ZipArtifactReader.js +11 -4
- package/dist/artifacts/apple/AppleAssetCatalogAnalysis.js +26 -5
- package/dist/artifacts/apple/DylibResolutionReader.js +17 -7
- package/dist/artifacts/apple/InterfaceBuilderAnalysis.js +176 -56
- package/dist/artifacts/apple/InterfaceBuilderDecodeBudget.js +195 -0
- package/dist/artifacts/apple/KeyedArchiveReader.js +55 -23
- package/dist/artifacts/apple/MachoLoadCommandReader.js +92 -31
- package/dist/artifacts/apple/NibArchive.js +81 -14
- package/dist/artifacts/apple/NibViewHierarchy.js +10 -3
- package/dist/artifacts/apple/PlistNumberLiterals.js +164 -0
- package/dist/artifacts/extraction/ArtifactExtraction.js +78 -21
- package/dist/artifacts/inventory/ArtifactGraphConstruction.js +79 -68
- package/dist/artifacts/inventory/ArtifactInventory.js +0 -1
- package/dist/artifacts/inventory/reader.js +3 -3
- package/dist/artifacts/inventory/scanCanonical.js +59 -38
- package/dist/artifacts/inventory/scanReader.js +5 -9
- package/dist/artifacts/javascript/JavaScriptArtifactFiles.js +6 -2
- package/dist/browser/BrowserScenarioPartialObservation.js +106 -0
- package/dist/browser/CdpBrowserProvider.js +2 -3
- package/dist/browser/CdpCaptureCompleteness.js +2 -0
- package/dist/browser/CdpCaptureEventHandlers.js +78 -15
- package/dist/browser/CdpCaptureEventTypes.js +5 -1
- package/dist/browser/CdpCaptureEvents.js +25 -1
- package/dist/browser/CdpCaptureValues.js +20 -0
- package/dist/browser/CdpConnection.js +30 -11
- package/dist/browser/CdpElectronProvider.js +0 -2
- package/dist/browser/CdpElectronScriptEvents.js +2 -8
- package/dist/browser/CdpElectronScripts.js +2 -3
- package/dist/browser/CdpOptionalCommand.js +2 -3
- package/dist/browser/CdpPageCapture.js +23 -1
- package/dist/browser/CdpPageCaptureScripts.js +2 -3
- package/dist/browser/CdpSafeMetadata.js +10 -10
- package/dist/browser/PlaywrightBrowserScenarioProvider.js +59 -44
- package/dist/browser/PlaywrightElectronActiveActions.js +34 -79
- package/dist/browser/PlaywrightElectronActiveProjection.js +141 -0
- package/dist/browser/PlaywrightElectronActiveProvider.js +133 -130
- package/dist/browser/PlaywrightScenarioArtifacts.js +1 -1
- package/dist/browser/PlaywrightScenarioBrowser.js +139 -39
- package/dist/browser/PlaywrightScenarioEvents.js +1 -1
- package/dist/browser/PlaywrightScenarioSession.js +39 -22
- package/dist/browser/WebSourceMapFetcher.js +426 -72
- package/dist/browser/assets/LocalWebScriptArtifacts.js +2 -2
- package/dist/browser/assets/ScriptCaptureAdapters.js +1 -1
- package/dist/browser/history/CaptureFailures.js +41 -1
- package/dist/browser/history/CaptureRelease.js +5 -0
- package/dist/browser/history/HarCaptureAdapter.js +3 -3
- package/dist/browser/history/HarJson.js +3 -2
- package/dist/browser/history/HistoricalCaptureDecoder.js +4 -2
- package/dist/browser/history/MitmproxyCaptureAdapter.js +4 -2
- package/dist/catalogIdentity.js +0 -1
- package/dist/cli/analysisSelector.js +23 -0
- package/dist/cli/analysisViewCommands.js +36 -0
- package/dist/cli/applicationCommands.js +2 -3
- package/dist/cli/artifactCommands.js +11 -12
- package/dist/cli/coreAnalysisCommands.js +3 -3
- package/dist/cli/coreBinaryCommands.js +100 -37
- package/dist/cli/coreNativeCommands.js +9 -10
- package/dist/cli/electronCommands.js +10 -9
- package/dist/cli/interactiveSetup.js +6 -6
- package/dist/cli/javascriptApplicationAnalysis.js +7 -3
- package/dist/cli/jsonOutput.js +4 -99
- package/dist/cli/managedCommands.js +7 -8
- package/dist/cli/nativeCallCommands.js +3 -5
- package/dist/cli/omittableDefaults.js +50 -0
- package/dist/cli/processCommands.js +3 -2
- package/dist/cli/setupCommands.js +16 -15
- package/dist/cli/utilityCommands.js +9 -9
- package/dist/cli/webRuntimeCommands.js +8 -8
- package/dist/cli.js +18 -9
- package/dist/cliBrowserScenarioCommands.js +2 -2
- package/dist/cliCommandNames.js +1 -1
- package/dist/cliJsonInput.js +24 -5
- package/dist/cliOutput.js +0 -38
- package/dist/composition/auxiliaryAnalysisProviders.js +27 -23
- package/dist/composition/binary.js +9 -9
- package/dist/composition/browserScenario.js +2 -1
- package/dist/composition/directAnalysis.js +20 -13
- package/dist/composition/electronScenario.js +1 -1
- package/dist/composition/optionalObservationProviders.js +12 -7
- package/dist/config/environment.js +10 -0
- package/dist/config/ghidraStartupTimeout.js +12 -0
- package/dist/config/homeDirectory.js +12 -0
- package/dist/config/mcpResponseBudget.js +30 -0
- package/dist/config/parseConfig.js +8 -3
- package/dist/config/parsers.js +19 -22
- package/dist/contracts/analysisViewToolContracts.js +56 -0
- package/dist/contracts/applicationToolContracts.js +5 -4
- package/dist/contracts/artifactComparisonExample.js +2 -2
- package/dist/contracts/artifactToolContracts.js +1 -1
- package/dist/contracts/browserScenarioToolContracts.js +1 -1
- package/dist/contracts/browserToolContracts.js +19 -15
- package/dist/contracts/enhancedInputs.js +7 -5
- package/dist/contracts/enhancedToolContracts.js +7 -6
- package/dist/contracts/evm/evmToolContracts.js +1 -1
- package/dist/contracts/functionWorkflowToolContracts.js +1 -1
- package/dist/contracts/hopperMemoryContracts.js +2 -5
- package/dist/contracts/inputSchemaPresentation.js +90 -0
- package/dist/contracts/investigationExamples.js +4 -3
- package/dist/contracts/javascript/electronToolContracts.js +2 -2
- package/dist/contracts/javascript/javascriptApplicationWorkflowExamples.js +0 -20
- package/dist/contracts/javascript/javascriptExportShapeComparisonExample.js +245 -0
- package/dist/contracts/javascript/javascriptRuntimeObservationToolContracts.js +1 -1
- package/dist/contracts/managed/managedToolContracts.js +7 -14
- package/dist/contracts/managed/managedWorkflowToolContracts.js +1 -1
- package/dist/contracts/mobileApplicationGraphExamples.js +3 -3
- package/dist/contracts/native/binaryDiagnosticsToolContracts.js +1 -1
- package/dist/contracts/native/nativeToolContracts.js +5 -3
- package/dist/contracts/officialToolContracts.js +16 -16
- package/dist/contracts/promptContracts.js +5 -5
- package/dist/contracts/providerSelection.js +1 -1
- package/dist/contracts/sessionLifecycleInputs.js +3 -7
- package/dist/contracts/sessionStatusContract.js +2 -4
- package/dist/contracts/sessionToolContracts.js +18 -8
- package/dist/contracts/sessionToolSchemas.js +3 -19
- package/dist/contracts/toolContractExamples.js +0 -1
- package/dist/contracts/toolContractHelpers.js +4 -1
- package/dist/contracts/toolContracts.js +2 -0
- package/dist/contracts/toolEffects.js +1 -1
- package/dist/contracts/toolOutputSchemaGroups.js +160 -115
- package/dist/contracts/toolOutputSchemaPrimitives.js +28 -20
- package/dist/contracts/toolSchemaMetadata.js +41 -33
- package/dist/contracts/webNetworkCaptureToolContracts.js +2 -2
- package/dist/contracts/webRuntimeToolContracts.js +1 -1
- package/dist/contracts/webScriptToolContracts.js +1 -1
- package/dist/doctorRuntime.js +7 -5
- package/dist/domain/analysisErrorBase.js +8 -3
- package/dist/domain/analysisErrorCore.js +6 -1
- package/dist/domain/analysisErrorPresentation.js +90 -20
- package/dist/domain/analysisErrorProjection.js +130 -32
- package/dist/domain/analysisSnapshot.js +29 -31
- package/dist/domain/analysisView/analysisView.js +243 -0
- package/dist/domain/analysisView/analysisViewCoverage.js +19 -0
- package/dist/domain/analysisView/binaryLayoutView.js +159 -0
- package/dist/domain/analysisView/javascriptApplicationView.js +238 -0
- package/dist/domain/android/androidAnalysis.js +2 -4
- package/dist/domain/android/androidApplication.js +18 -10
- package/dist/domain/apple/appleApplication.js +42 -15
- package/dist/domain/apple/dyldEnvironment.js +73 -0
- package/dist/domain/apple/dylibResolution.js +130 -12
- package/dist/domain/apple/dylibResolutionFindings.js +9 -7
- package/dist/domain/apple/interfaceBuilderGraph.js +25 -14
- package/dist/domain/apple/interfaceBuilderKeyedArchive.js +13 -3
- package/dist/domain/apple/keyedArchive.js +35 -3
- package/dist/domain/apple/machoContainer.js +54 -0
- package/dist/domain/apple/plistNumbers.js +76 -0
- package/dist/domain/artifactComparison.js +15 -6
- package/dist/domain/artifactGraph.js +16 -3
- package/dist/domain/artifactIdentity.js +29 -0
- package/dist/domain/artifactInventoryEvidence.js +28 -40
- package/dist/domain/artifactOperationError.js +3 -3
- package/dist/domain/artifactPartialObservation.js +1 -0
- package/dist/domain/artifactPathSyntax.js +49 -0
- package/dist/domain/binaryTarget.js +39 -13
- package/dist/domain/bridgeCandidateProjection.js +71 -0
- package/dist/domain/browserCaptureComparison.js +13 -49
- package/dist/domain/browserCompleteness.js +1 -0
- package/dist/domain/browserNetworkEvidence.js +10 -4
- package/dist/domain/browserObservation.js +0 -1
- package/dist/domain/browserObservationError.js +24 -5
- package/dist/domain/browserObservationSchemas.js +14 -3
- package/dist/domain/browserScenario.js +0 -1
- package/dist/domain/browserScenarioCapture.js +1 -2
- package/dist/domain/browserScenarioDiff.js +0 -2
- package/dist/domain/browserScenarioDiffEvidence.js +0 -12
- package/dist/domain/browserScenarioDiffValues.js +2 -2
- package/dist/domain/browserScenarioValues.js +5 -10
- package/dist/domain/bundleComparison.js +3 -2
- package/dist/domain/callPath.js +8 -9
- package/dist/domain/callPathSchemas.js +2 -2
- package/dist/domain/canonicalJsonDigestSteps.js +133 -0
- package/dist/domain/canonicalOrdering.js +9 -5
- package/dist/domain/changedBehavior.js +9 -9
- package/dist/domain/comparisonSourceEvidence.js +40 -0
- package/dist/domain/completionLedgerGeneration.js +2 -1
- package/dist/domain/configurationErrors.js +13 -1
- package/dist/domain/conformancePackage.js +4 -3
- package/dist/domain/evidence.js +65 -36
- package/dist/domain/evidenceBundle.js +47 -8
- package/dist/domain/evidenceCompletionLedger.js +2 -1
- package/dist/domain/evidenceErrors.js +12 -1
- package/dist/domain/explicitSensitiveFailure.js +17 -1
- package/dist/domain/firmware/firmwareAnalysis.js +6 -7
- package/dist/domain/functionComparison.js +4 -5
- package/dist/domain/functionComparisonDimensions.js +120 -87
- package/dist/domain/functionComparisonNormalization.js +23 -34
- package/dist/domain/functionComparisonResults.js +1 -4
- package/dist/domain/functionComparisonSchemas.js +2 -8
- package/dist/domain/functionDossierEvidence.js +2 -37
- package/dist/domain/hopperErrors.js +23 -2
- package/dist/domain/hopperValues.js +51 -8
- package/dist/domain/immutableJson.js +114 -0
- package/dist/domain/inputIssueProjection.js +3 -0
- package/dist/domain/javascript/electronActiveObservation.js +47 -64
- package/dist/domain/javascript/electronObservation.js +14 -3
- package/dist/domain/javascript/electronStaticAnalysisBrowser.js +10 -9
- package/dist/domain/javascript/electronStaticAnalysisIpc.js +2 -1
- package/dist/domain/javascript/electronStaticAnalysisNative.js +2 -1
- package/dist/domain/javascript/electronStaticAnalysisValues.js +6 -12
- package/dist/domain/javascript/javascriptApplicationAnalysis.js +71 -23
- package/dist/domain/javascript/javascriptApplicationEvidenceSchemas.js +2 -0
- package/dist/domain/javascript/javascriptApplicationGraph.js +39 -3
- package/dist/domain/javascript/javascriptApplicationGraphSchemas.js +9 -2
- package/dist/domain/javascript/javascriptApplicationVersionItems.js +5 -2
- package/dist/domain/javascript/javascriptApplicationVersionKeys.js +2 -1
- package/dist/domain/javascript/javascriptAstValues.js +20 -0
- package/dist/{application/javascript/JavaScriptReturnShapeProjection.js → domain/javascript/javascriptExportReturnShapeProjection.js} +4 -4
- package/dist/domain/javascript/javascriptExportShapeComparison.js +7 -1
- package/dist/domain/javascript/javascriptExportShapeComparisonIdentity.js +6 -1
- package/dist/domain/javascript/javascriptExportShapeComparisonSchemas.js +29 -1
- package/dist/domain/javascript/javascriptExportShapeSelection.js +5 -5
- package/dist/domain/javascript/javascriptExportShapeVariants.js +67 -14
- package/dist/domain/javascript/javascriptFeatureSeed.js +20 -0
- package/dist/domain/javascript/javascriptFeatureTraversal.js +0 -1
- package/dist/domain/javascript/javascriptNativeHandoff.js +1 -1
- package/dist/domain/javascript/javascriptRecovery.js +3 -8
- package/dist/domain/javascript/javascriptRuntimeLoadState.js +0 -1
- package/dist/domain/javascript/javascriptRuntimeObservation.js +10 -2
- package/dist/domain/javascript/javascriptRuntimeReconciliationMatching.js +1 -1
- package/dist/domain/javascript/javascriptRuntimeReconciliationParsing.js +3 -2
- package/dist/domain/javascript/javascriptRuntimeStaticCandidates.js +0 -1
- package/dist/domain/javascript/javascriptSemanticAnalysis.js +106 -5
- package/dist/domain/javascript/javascriptSemanticAsyncEffects.js +2 -1
- package/dist/domain/javascript/javascriptSemanticCalls.js +2 -1
- package/dist/domain/javascript/javascriptSemanticChildProcesses.js +2 -1
- package/dist/domain/javascript/javascriptSemanticCoverage.js +6 -5
- package/dist/domain/javascript/javascriptSemanticDataEffectHelpers.js +9 -17
- package/dist/domain/javascript/javascriptSemanticDataEffects.js +23 -6
- package/dist/domain/javascript/javascriptSemanticGraph.js +98 -43
- package/dist/domain/javascript/javascriptSemanticGraphSchemas.js +1 -0
- package/dist/domain/javascript/javascriptSemanticMemberMutations.js +77 -20
- package/dist/domain/javascript/javascriptSemanticMutationValues.js +21 -27
- package/dist/domain/javascript/javascriptSemanticObjects.js +83 -42
- package/dist/domain/javascript/javascriptSemanticPrimitives.js +18 -21
- package/dist/domain/javascript/javascriptSemanticProjection.js +2 -3
- package/dist/domain/javascript/javascriptSemanticPromises.js +2 -1
- package/dist/domain/javascript/javascriptSemanticQuerySchemas.js +8 -4
- package/dist/domain/javascript/javascriptSemanticResourceLimits.js +77 -0
- package/dist/domain/javascript/javascriptSemanticResources.js +1 -1
- package/dist/domain/javascript/javascriptSemanticReturns.js +32 -17
- package/dist/domain/javascript/javascriptSemanticSlots.js +72 -0
- package/dist/domain/javascript/javascriptSemanticValues.js +126 -61
- package/dist/domain/javascript/javascriptSourceMapPaths.js +104 -0
- package/dist/domain/javascript/javascriptSourceParser.js +6 -2
- package/dist/domain/javascript/javascriptStaticAnalysis.js +22 -17
- package/dist/domain/javascript/javascriptStaticAnalysisBundler.js +5 -3
- package/dist/domain/javascript/javascriptStaticAnalysisCalls.js +16 -5
- package/dist/domain/javascript/javascriptStaticAnalysisFindings.js +66 -7
- package/dist/domain/javascript/javascriptStaticAnalysisHelpers.js +28 -17
- package/dist/domain/javascript/javascriptStaticAnalysisState.js +3 -2
- package/dist/domain/javascript/sourceToBundleComparison.js +12 -3
- package/dist/domain/javascript/sourceToBundleSignals.js +47 -19
- package/dist/domain/jsonSerialization.js +109 -0
- package/dist/domain/jsonValue.js +90 -6
- package/dist/domain/localPath.js +6 -0
- package/dist/domain/managed/managedApplicationGraph.js +10 -10
- package/dist/domain/managed/managedArtifact.js +6 -4
- package/dist/domain/managed/managedInspectionEvidence.js +16 -0
- package/dist/domain/managed/managedMemberComparison.js +2 -9
- package/dist/domain/managed/managedMemberComparisonMatch.js +5 -9
- package/dist/domain/managed/managedNativeVerification.js +3 -11
- package/dist/domain/managed/managedNativeVerificationMatch.js +9 -3
- package/dist/domain/native/binaryLayout.js +2 -3
- package/dist/domain/native/fileOffsetPartialObservation.js +1 -0
- package/dist/domain/native/nativeApiBoundary.js +1 -1
- package/dist/domain/native/nativeCallObservation.js +37 -13
- package/dist/domain/native/nativeCallPartialObservation.js +33 -0
- package/dist/domain/native/nativeInstruction.js +7 -0
- package/dist/domain/native/recordedCrash.js +2 -3
- package/dist/domain/offsetDateTime.js +17 -0
- package/dist/domain/process/processCapture.js +21 -16
- package/dist/domain/process/processCaptureCoverage.js +67 -0
- package/dist/domain/process/processCaptureExample.js +2 -1
- package/dist/domain/process/processCaptureParsing.js +1 -34
- package/dist/domain/process/processCaptureValidation.js +81 -13
- package/dist/domain/process/processComparison.js +79 -26
- package/dist/domain/process/processObservation.js +10 -2
- package/dist/domain/process/processScenario.js +35 -12
- package/dist/domain/process/processTraceComparison.js +0 -2
- package/dist/domain/process/processTraceDimensionProjection.js +1 -1
- package/dist/domain/process/processTraceEvaluation.js +15 -11
- package/dist/domain/process/processTraceSpecification.js +3 -4
- package/dist/domain/propertyListKeys.js +1 -1
- package/dist/domain/propertyListXmlText.js +19 -0
- package/dist/domain/providerAdapterError.js +3 -1
- package/dist/domain/providerOperationHealth.js +54 -0
- package/dist/domain/reconstructionCoverage.js +5 -2
- package/dist/domain/reconstructionObligationLedgerSchemas.js +2 -1
- package/dist/domain/reconstructionReadinessSchemas.js +2 -1
- package/dist/domain/reconstructionVerification.js +9 -46
- package/dist/domain/reconstructionVerificationSchemas.js +4 -3
- package/dist/domain/referenceSourceGraph.js +20 -21
- package/dist/domain/staticRuntimeCorrelation.js +8 -45
- package/dist/domain/stringPatterns.js +6 -0
- package/dist/domain/swiftSymbolClassification.js +61 -0
- package/dist/domain/symbolAnalysis.js +66 -18
- package/dist/domain/webBundleAnalysis.js +20 -8
- package/dist/domain/webBundleAnalyzerInspection.js +13 -8
- package/dist/domain/webBundleAnalyzerResult.js +41 -2
- package/dist/domain/webCaptureDiff.js +0 -1
- package/dist/domain/webCaptureDiffSchemas.js +6 -3
- package/dist/domain/webEventListeners.js +3 -2
- package/dist/domain/webExecution.js +3 -2
- package/dist/domain/webRuntime.js +19 -7
- package/dist/domain/webScriptExport.js +1 -1
- package/dist/domain/webSourceLocation.js +1 -0
- package/dist/dotnet/ManagedArtifactInspector.js +2 -19
- package/dist/dotnet/ManagedMemberInspector.js +12 -18
- package/dist/dotnet/ManagedMemberInspectorCore.js +47 -44
- package/dist/dotnet/ManagedMemberRows.js +75 -62
- package/dist/dotnet/ManagedMetadataInventory.js +16 -22
- package/dist/dotnet/ManagedMethodBodyReader.js +4 -0
- package/dist/dotnet/ManagedNativeBoundaryHelpers.js +109 -94
- package/dist/dotnet/ManagedNativeBoundaryInspector.js +12 -21
- package/dist/dotnet/ManagedReaderFailure.js +16 -0
- package/dist/dotnet/ManagedStaticProvider.js +3 -5
- package/dist/evaluation/AgentEvaluationFixtures.js +250 -0
- package/dist/evaluation/AgentEvaluationReport.js +28 -0
- package/dist/evaluation/CodexAgentEval.js +12 -8
- package/dist/evaluation/KnownAnswerEvaluation.js +281 -0
- package/dist/evm/EvmoleInterfaceProvider.js +2 -1
- package/dist/firmware/FirmwareCommand.js +9 -5
- package/dist/firmware/FirmwareFiles.js +1 -1
- package/dist/firmware/FirmwareProvider.js +4 -4
- package/dist/generatedPackageMetadata.js +2 -2
- package/dist/ghidra/GhidraAnalysisProfile.js +7 -5
- package/dist/ghidra/GhidraClient.js +126 -34
- package/dist/ghidra/GhidraClientStartup.js +0 -2
- package/dist/ghidra/GhidraDiagnostics.js +7 -7
- package/dist/ghidra/GhidraDoctor.js +6 -5
- package/dist/ghidra/GhidraFunctionValues.js +13 -12
- package/dist/ghidra/GhidraInstallation.js +58 -33
- package/dist/ghidra/GhidraInventoryValues.js +14 -4
- package/dist/ghidra/GhidraJavaLaunch.js +66 -0
- package/dist/ghidra/GhidraLauncher.js +47 -22
- package/dist/ghidra/GhidraProvider.js +6 -2
- package/dist/ghidra/GhidraProviderCapabilities.js +20 -2
- package/dist/ghidra/GhidraProviderClient.js +36 -15
- package/dist/ghidra/GhidraSessionError.js +13 -7
- package/dist/ghidra/GhidraSessionRoot.js +39 -0
- package/dist/ghidra/GhidraTargetSnapshot.js +47 -12
- package/dist/ghidra/GhidraTransport.js +20 -0
- package/dist/ghidra/extensions/GhidraExtensions.js +17 -10
- package/dist/ghidra/extensions/nativeaot/NativeAotAdapter.js +8 -2
- package/dist/hopper/BridgeLauncher.js +65 -56
- package/dist/hopper/HopperAnalysisProfile.js +65 -12
- package/dist/hopper/HopperCleanup.js +63 -22
- package/dist/hopper/HopperClient.js +288 -59
- package/dist/hopper/HopperFileOffset.js +237 -0
- package/dist/hopper/HopperMachOImage.js +197 -0
- package/dist/hopper/HopperOperationStage.js +6 -0
- package/dist/hopper/HopperProvider.js +71 -19
- package/dist/hopper/HopperProviderCapabilities.js +19 -1
- package/dist/hopper/HopperRegexSearch.js +134 -0
- package/dist/hopper/HopperRegexWorker.js +27 -0
- package/dist/hopper/HopperRequestQueue.js +68 -19
- package/dist/hopper/HopperTargetLease.js +133 -49
- package/dist/hopper/LinuxPrivateDisplayProbe.js +6 -0
- package/dist/ida/IdaConfiguration.js +8 -3
- package/dist/ida/IdaInput.js +1 -7
- package/dist/ida/IdaMcpConnection.js +8 -4
- package/dist/ida/IdaOperationRunner.js +3 -3
- package/dist/ida/IdaProvider.js +8 -12
- package/dist/ida/IdaSessionClient.js +20 -18
- package/dist/ida/IdaWorkspace.js +12 -13
- package/dist/inspector/JavaScriptRuntimeScope.js +9 -1
- package/dist/inspector/V8InspectorCaptureProjection.js +9 -4
- package/dist/inspector/V8InspectorProvider.js +82 -36
- package/dist/javascript/recovery/WakaruCommand.js +7 -2
- package/dist/javascript/recovery/WakaruExecution.js +5 -2
- package/dist/javascript/sourceMaps/DecodedSourceMap.js +47 -0
- package/dist/javascript/sourceMaps/SourceMapCommand.js +16 -0
- package/dist/javascript/sourceMaps/SourceMapFormat.js +79 -31
- package/dist/javascript/sourceMaps/TraceSourceMap.js +14 -28
- package/dist/main/shutdown.js +11 -3
- package/dist/main/startup.js +9 -2
- package/dist/main/transport.js +22 -2
- package/dist/main.js +11 -18
- package/dist/mcpDoctor.js +62 -2
- package/dist/native/AppleDispatchCoverage.js +47 -6
- package/dist/native/AppleDispatchDecodeFacts.js +6 -0
- package/dist/native/AppleDispatchMetadata.js +6 -3
- package/dist/native/AppleMachoFixups.js +48 -24
- package/dist/native/AppleMachoSelection.js +48 -22
- package/dist/native/AppleObjcCategories.js +6 -2
- package/dist/native/AppleObjcDispatchFacets.js +5 -2
- package/dist/native/AppleObjcProperties.js +2 -1
- package/dist/native/AppleSwiftDispatchFacets.js +27 -21
- package/dist/native/AppleSwiftVtables.js +21 -15
- package/dist/native/CommandRunner.js +87 -88
- package/dist/native/LldbCallTracer.js +372 -103
- package/dist/native/LldbRetainedObservations.js +178 -0
- package/dist/native/NativeCallObservation.js +62 -3
- package/dist/native/NativeMacOSProvider.js +122 -31
- package/dist/native/NativeUiHelperRuntime.js +11 -2
- package/dist/native/NativeUiObservation.js +2 -2
- package/dist/native/SignatureTargetBinding.js +155 -0
- package/dist/native/parsers/lipo.js +71 -1
- package/dist/native/pwndbg/PwndbgCoreContext.js +25 -5
- package/dist/native/pwntools/PwntoolsDecoder.js +2 -1
- package/dist/native/pwntools/RecordedCrashStructureBindings.js +2 -0
- package/dist/process/DarwinProcessRunTokenReader.js +23 -10
- package/dist/process/ExecFileOutput.js +108 -6
- package/dist/process/OwnedCommand.js +7 -2
- package/dist/process/PrivateRuntimeRoot.js +10 -5
- package/dist/process/ProcessOwnership.js +204 -57
- package/dist/process/ProcessOwnershipObservation.js +60 -9
- package/dist/process/ProviderProcess.js +39 -10
- package/dist/process/capture/FilesystemSnapshot.js +50 -13
- package/dist/process/capture/ProcessCaptureError.js +15 -2
- package/dist/process/capture/ProcessCaptureLifecycle.js +235 -81
- package/dist/process/capture/ProcessFilesystemEffects.js +33 -3
- package/dist/process/capture/ProcessHarness.js +21 -25
- package/dist/process/capture/ProcessNormalization.js +20 -2
- package/dist/process/capture/ProcessSampling.js +25 -2
- package/dist/process/capture/TerminalRenderer.js +14 -0
- package/dist/process/snapshotEnvironment.js +14 -0
- package/dist/server/EvidenceMcpServer.js +157 -0
- package/dist/server/createServer.js +61 -41
- package/dist/server/mcpClientMetadata.js +12 -5
- package/dist/server/promptCompletion.js +3 -8
- package/dist/server/registerAnalysisViewTool.js +15 -0
- package/dist/server/registerAndroidTools.js +2 -5
- package/dist/server/registerApplicationTools/compareExportShapes.js +4 -5
- package/dist/server/registerApplicationTools/compareSourceToBundle.js +4 -5
- package/dist/server/registerApplicationTools/compareVersions.js +4 -5
- package/dist/server/registerApplicationTools/coverage.js +1 -2
- package/dist/server/registerApplicationTools/helpers.js +1 -4
- package/dist/server/registerApplicationTools/obligationLedger.js +4 -5
- package/dist/server/registerApplicationTools/projectMobileApplicationGraph.js +3 -4
- package/dist/server/registerApplicationTools/traceFeature.js +4 -5
- package/dist/server/registerApplicationTools/traceSemantics.js +4 -5
- package/dist/server/registerArtifactComparisonTool.js +13 -10
- package/dist/server/registerBinaryDiagnosticsTools.js +2 -5
- package/dist/server/registerBrowserScenarioTool.js +3 -6
- package/dist/server/registerBrowserTools.js +13 -18
- package/dist/server/registerBundleComparisonTool.js +5 -7
- package/dist/server/registerCloseLifecycleTool.js +9 -20
- package/dist/server/registerElectronTools.js +10 -15
- package/dist/server/registerEnhancedTools.js +36 -77
- package/dist/server/registerEvidenceTools.js +3 -6
- package/dist/server/registerEvmTools.js +2 -5
- package/dist/server/registerFirmwareTools.js +2 -5
- package/dist/server/registerFunctionComparisonTool.js +15 -12
- package/dist/server/registerInvestigationTools.js +16 -17
- package/dist/server/registerJavaScriptRecoveryTool.js +2 -5
- package/dist/server/registerJavaScriptRuntimeObservationTools.js +6 -8
- package/dist/server/registerManagedWorkflowTools/compareManagedMembers.js +5 -8
- package/dist/server/registerManagedWorkflowTools/importManagedReconstruction.js +4 -7
- package/dist/server/registerManagedWorkflowTools/projectManagedApplicationGraph.js +6 -9
- package/dist/server/registerManagedWorkflowTools/verifyManagedNativeBoundaries.js +6 -9
- package/dist/server/registerOfficialTools.js +4 -21
- package/dist/server/registerProcessComparisonTool.js +74 -48
- package/dist/server/registerRecordedCrashTools.js +2 -5
- package/dist/server/registerSessionRecordTools.js +19 -24
- package/dist/server/registerSessionStatusTool.js +19 -6
- package/dist/server/registerSessionTools.js +20 -18
- package/dist/server/registerWebModuleTool.js +2 -5
- package/dist/server/registerWebNetworkCaptureTool.js +2 -5
- package/dist/server/registerWebRuntimeTools.js +4 -9
- package/dist/server/registerWebScriptTool.js +2 -5
- package/dist/server/registerWebSourceLocationTool.js +2 -5
- package/dist/server/runDerivedOperation.js +15 -3
- package/dist/server/sessionAvailabilityPolicy.js +0 -1
- package/dist/server/toolRegistrationOptions.js +2 -2
- package/dist/server/toolResult.js +75 -51
- package/dist/server/toolResultEncoding.js +34 -0
- package/dist/windows/WindowsNativeLoader.js +1 -0
- package/dist/windows/WindowsOwnedProcess.js +60 -15
- package/dist/windows/WindowsPrivateRuntime.js +7 -8
- package/install.sh +1 -1
- package/native/windows/README.md +3 -1
- package/native/windows/build/manifest.json +2 -2
- package/native/windows/build/rea-windows-x64.node +0 -0
- package/package.json +44 -30
- package/scripts/electron-active-hook-boundaries.cjs +18 -20
- package/scripts/electron-active-hook.cjs +241 -37
- package/scripts/rea.mjs +3 -6
- package/skills/reverse-engineer-anything/SKILL.md +12 -3
- package/skills/reverse-engineer-anything/references/android-applications.md +6 -3
- package/skills/reverse-engineer-anything/references/evidence-workflows.md +8 -4
- package/skills/reverse-engineer-anything/references/javascript-applications.md +20 -3
- package/skills/reverse-engineer-anything/references/native-and-artifacts.md +9 -0
- package/dist/config.js +0 -1
- package/dist/contracts/browserCaptureToolInputSchema.js +0 -43
- package/dist/contracts/process/processCaptureExample.js +0 -2
- package/dist/contracts/toolOutputSchemas.js +0 -2
- package/dist/ghidra/GhidraDefaults.js +0 -2
- package/dist/main/reload.js +0 -12
- package/dist/main/state.js +0 -3
- package/dist/server/sessionToolPolicies.js +0 -2
|
@@ -1,17 +1,16 @@
|
|
|
1
1
|
import { METADATA_TABLE_NAMES, } from "./ManagedMetadataLayout.js";
|
|
2
2
|
import { readAssembly, readAssemblyReference, readCustomAttribute, readModule, readResource, } from "./ManagedMetadataInventoryRows.js";
|
|
3
3
|
import { metadataToken } from "./ManagedMetadataHeaps.js";
|
|
4
|
-
import {
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
}
|
|
4
|
+
import { readManagedValue, uniqueManagedParseIssues, } from "./ManagedReaderFailure.js";
|
|
5
|
+
/** Map optional embedded resources without discarding admitted CLI metadata. */
|
|
6
|
+
export const readManagedResourceDirectory = (pe, issues) => {
|
|
7
|
+
const resources = pe.cli?.resources;
|
|
8
|
+
if (resources === undefined || (resources.rva === 0 && resources.size === 0))
|
|
9
|
+
return null;
|
|
10
|
+
return (readManagedValue(() => ({
|
|
11
|
+
offset: pe.rvaToOffset(resources.rva, resources.size, "cli.resources"),
|
|
12
|
+
size: resources.size,
|
|
13
|
+
}), issues) ?? null);
|
|
15
14
|
};
|
|
16
15
|
const readRows = (descriptor, read) => {
|
|
17
16
|
const total = descriptor?.rowCount ?? 0;
|
|
@@ -23,9 +22,6 @@ const readRows = (descriptor, read) => {
|
|
|
23
22
|
}
|
|
24
23
|
return items;
|
|
25
24
|
};
|
|
26
|
-
const uniqueIssues = (issues) => [
|
|
27
|
-
...new Map(issues.map((issue) => [JSON.stringify(issue), issue])).values(),
|
|
28
|
-
];
|
|
29
25
|
const heapExtent = (layout) => Math.max(layout.strings.size, layout.blob.size);
|
|
30
26
|
const validateIdentityTableCounts = (layout, issues) => {
|
|
31
27
|
const moduleRows = layout.table(0)?.rowCount ?? 0;
|
|
@@ -46,13 +42,13 @@ const validateIdentityTableCounts = (layout, issues) => {
|
|
|
46
42
|
});
|
|
47
43
|
};
|
|
48
44
|
const readReferences = (bytes, layout, issues) => {
|
|
49
|
-
const references = readRows(layout.table(35), (row) =>
|
|
45
|
+
const references = readRows(layout.table(35), (row) => readManagedValue(() => readAssemblyReference(bytes, layout, row, heapExtent(layout)), issues));
|
|
50
46
|
return {
|
|
51
47
|
references,
|
|
52
48
|
referenceNames: [...new Set(references.map(({ name }) => name))].sort(),
|
|
53
49
|
};
|
|
54
50
|
};
|
|
55
|
-
const readResources = ({ bytes, layout, resourceDirectory, issues, }) => readRows(layout.table(40), (row) =>
|
|
51
|
+
const readResources = ({ bytes, layout, resourceDirectory, issues, }) => readRows(layout.table(40), (row) => readManagedValue(() => readResource({
|
|
56
52
|
bytes,
|
|
57
53
|
layout,
|
|
58
54
|
row,
|
|
@@ -60,7 +56,7 @@ const readResources = ({ bytes, layout, resourceDirectory, issues, }) => readRow
|
|
|
60
56
|
issues,
|
|
61
57
|
}), issues));
|
|
62
58
|
const readAttributes = (bytes, layout, issues) => {
|
|
63
|
-
const attributes = readRows(layout.table(12), (row) =>
|
|
59
|
+
const attributes = readRows(layout.table(12), (row) => readManagedValue(() => readCustomAttribute(bytes, layout, row, heapExtent(layout)), issues));
|
|
64
60
|
const targetFrameworks = new Set();
|
|
65
61
|
for (const attribute of attributes) {
|
|
66
62
|
if (attribute.parent_token === metadataToken(32, 1) &&
|
|
@@ -75,10 +71,8 @@ const readAttributes = (bytes, layout, issues) => {
|
|
|
75
71
|
export const readManagedMetadataInventory = (bytes, layout, resourceDirectory) => {
|
|
76
72
|
const issues = [];
|
|
77
73
|
validateIdentityTableCounts(layout, issues);
|
|
78
|
-
const module =
|
|
79
|
-
|
|
80
|
-
const assembly = safeRead(() => readAssembly(bytes, layout, heapExtent(layout)), issues) ??
|
|
81
|
-
null;
|
|
74
|
+
const module = readManagedValue(() => readModule(bytes, layout, heapExtent(layout)), issues) ?? null;
|
|
75
|
+
const assembly = readManagedValue(() => readAssembly(bytes, layout, heapExtent(layout)), issues) ?? null;
|
|
82
76
|
const { references, referenceNames } = readReferences(bytes, layout, issues);
|
|
83
77
|
const resources = readResources({
|
|
84
78
|
bytes,
|
|
@@ -95,7 +89,7 @@ export const readManagedMetadataInventory = (bytes, layout, resourceDirectory) =
|
|
|
95
89
|
references,
|
|
96
90
|
resources,
|
|
97
91
|
attributes,
|
|
98
|
-
issues:
|
|
92
|
+
issues: uniqueManagedParseIssues(issues),
|
|
99
93
|
};
|
|
100
94
|
};
|
|
101
95
|
/** Stable table-name/count projection for caller-visible coverage. */
|
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
import { decodeInstructions, parseExceptionRegions, } from "./ManagedMemberInstructionDecoder.js";
|
|
2
2
|
import { validateExceptionRegionRanges } from "./ManagedExceptionRegionValidation.js";
|
|
3
3
|
import { sha256Bytes } from "./ManagedMetadataHeaps.js";
|
|
4
|
+
import { ManagedReaderFailure } from "./ManagedReaderFailure.js";
|
|
4
5
|
const bodyStatus = (decodedIssue, truncatedInstructions, exceptionRegions) => {
|
|
5
6
|
if (decodedIssue !== null || exceptionRegions?.status === "malformed")
|
|
6
7
|
return "malformed";
|
|
@@ -114,6 +115,9 @@ export const methodBody = (bytes, pe, rva, implementation = {
|
|
|
114
115
|
};
|
|
115
116
|
}
|
|
116
117
|
catch (cause) {
|
|
118
|
+
if (!(cause instanceof ManagedReaderFailure) &&
|
|
119
|
+
!(cause instanceof RangeError))
|
|
120
|
+
throw cause;
|
|
117
121
|
return emptyMethodBody(rva, "malformed", cause instanceof Error ? cause.message : "Method body parse failed");
|
|
118
122
|
}
|
|
119
123
|
};
|
|
@@ -2,62 +2,69 @@ import { managedNativeBoundaryInspectionSchema, } from "../domain/managed/manage
|
|
|
2
2
|
import {} from "./ManagedMetadataLayout.js";
|
|
3
3
|
import { metadataRowCursor, metadataCodedToken, metadataCodedTokenInvalidReason, metadataToken, readMetadataString, } from "./ManagedMetadataHeaps.js";
|
|
4
4
|
import { managedTableRowCounts } from "./ManagedMetadataInventory.js";
|
|
5
|
+
import { readManagedValue } from "./ManagedReaderFailure.js";
|
|
5
6
|
const flagsHex = (value) => `0x${value.toString(16).padStart(4, "0")}`;
|
|
6
|
-
export const parseModuleRefs = (bytes, layout, heapExtent) => {
|
|
7
|
+
export const parseModuleRefs = (bytes, layout, heapExtent, issues) => {
|
|
7
8
|
const refs = [];
|
|
8
9
|
const table = layout.table(26);
|
|
9
10
|
for (let row = 1; row <= (table?.rowCount ?? 0); row += 1) {
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
11
|
+
readManagedValue(() => {
|
|
12
|
+
const cursor = metadataRowCursor(bytes, layout, 26, row);
|
|
13
|
+
refs.push({
|
|
14
|
+
token: metadataToken(26, row),
|
|
15
|
+
row_offset: cursor.start,
|
|
16
|
+
name: readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), heapExtent),
|
|
17
|
+
});
|
|
18
|
+
}, issues);
|
|
16
19
|
}
|
|
17
20
|
return refs;
|
|
18
21
|
};
|
|
19
|
-
export const parseFields = (bytes, layout, heapExtent) => {
|
|
22
|
+
export const parseFields = (bytes, layout, heapExtent, issues) => {
|
|
20
23
|
const fields = new Map();
|
|
21
24
|
const table = layout.table(4);
|
|
22
25
|
for (let row = 1; row <= (table?.rowCount ?? 0); row += 1) {
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
token,
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
26
|
+
readManagedValue(() => {
|
|
27
|
+
const cursor = metadataRowCursor(bytes, layout, 4, row);
|
|
28
|
+
const flags = cursor.readUInt16();
|
|
29
|
+
const name = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), heapExtent);
|
|
30
|
+
cursor.readIndex(layout.blobIndexSize);
|
|
31
|
+
const token = metadataToken(4, row);
|
|
32
|
+
fields.set(token, {
|
|
33
|
+
token,
|
|
34
|
+
rowOffset: cursor.start,
|
|
35
|
+
kind: "field",
|
|
36
|
+
name,
|
|
37
|
+
flags,
|
|
38
|
+
implFlags: null,
|
|
39
|
+
rva: null,
|
|
40
|
+
});
|
|
41
|
+
}, issues);
|
|
37
42
|
}
|
|
38
43
|
return fields;
|
|
39
44
|
};
|
|
40
|
-
export const parseMethods = (bytes, layout, heapExtent) => {
|
|
45
|
+
export const parseMethods = (bytes, layout, heapExtent, issues) => {
|
|
41
46
|
const methods = new Map();
|
|
42
47
|
const table = layout.table(6);
|
|
43
48
|
for (let row = 1; row <= (table?.rowCount ?? 0); row += 1) {
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
token,
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
49
|
+
readManagedValue(() => {
|
|
50
|
+
const cursor = metadataRowCursor(bytes, layout, 6, row);
|
|
51
|
+
const rva = cursor.readUInt32();
|
|
52
|
+
const implFlags = cursor.readUInt16();
|
|
53
|
+
const flags = cursor.readUInt16();
|
|
54
|
+
const name = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), heapExtent);
|
|
55
|
+
cursor.readIndex(layout.blobIndexSize);
|
|
56
|
+
cursor.readIndex(layout.tableIndexSize(8));
|
|
57
|
+
const token = metadataToken(6, row);
|
|
58
|
+
methods.set(token, {
|
|
59
|
+
token,
|
|
60
|
+
rowOffset: cursor.start,
|
|
61
|
+
kind: "method",
|
|
62
|
+
name,
|
|
63
|
+
flags,
|
|
64
|
+
implFlags,
|
|
65
|
+
rva,
|
|
66
|
+
});
|
|
67
|
+
}, issues);
|
|
61
68
|
}
|
|
62
69
|
return methods;
|
|
63
70
|
};
|
|
@@ -66,46 +73,60 @@ export const parseImplMaps = ({ bytes, layout, heapExtent, modules, members, iss
|
|
|
66
73
|
const imports = [];
|
|
67
74
|
const table = layout.table(28);
|
|
68
75
|
for (let row = 1; row <= (table?.rowCount ?? 0); row += 1) {
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
76
|
+
readManagedValue(() => {
|
|
77
|
+
const cursor = metadataRowCursor(bytes, layout, 28, row);
|
|
78
|
+
const mappingFlags = cursor.readUInt16();
|
|
79
|
+
const memberForwardedOffset = cursor.offset;
|
|
80
|
+
const memberForwardedRaw = cursor.readIndex(layout.codedIndexSize("MemberForwarded"));
|
|
81
|
+
const memberForwardedReason = metadataCodedTokenInvalidReason(memberForwardedRaw, 1, [4, 6], layout.rowCounts);
|
|
82
|
+
if (memberForwardedReason !== null || memberForwardedRaw === 0)
|
|
83
|
+
issues.push({
|
|
84
|
+
code: "invalid-row",
|
|
85
|
+
scope: `metadata.ImplMap:${metadataToken(28, row)}`,
|
|
86
|
+
offset: memberForwardedOffset,
|
|
87
|
+
detail: memberForwardedReason === null
|
|
88
|
+
? "ImplMap MemberForwarded coded index 0x0 is null, but the column must reference a Field or MethodDef row"
|
|
89
|
+
: `ImplMap MemberForwarded coded index 0x${memberForwardedRaw.toString(16)} is invalid: ${memberForwardedReason}`,
|
|
90
|
+
});
|
|
91
|
+
const memberToken = metadataCodedToken(memberForwardedRaw, 1, [4, 6], layout.rowCounts);
|
|
92
|
+
const importName = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), heapExtent);
|
|
93
|
+
const importScopeOffset = cursor.offset;
|
|
94
|
+
const importScopeRow = cursor.readIndex(layout.tableIndexSize(26));
|
|
95
|
+
const moduleCount = layout.table(26)?.rowCount ?? 0;
|
|
96
|
+
const validImportScope = importScopeRow > 0 && importScopeRow <= moduleCount;
|
|
97
|
+
if (!validImportScope)
|
|
98
|
+
issues.push({
|
|
99
|
+
code: "invalid-row",
|
|
100
|
+
scope: `metadata.ImplMap:${metadataToken(28, row)}`,
|
|
101
|
+
offset: importScopeOffset,
|
|
102
|
+
detail: `ImplMap ImportScope row ${String(importScopeRow)} must reference a ModuleRef row between 1 and ${String(moduleCount)}`,
|
|
103
|
+
});
|
|
104
|
+
const importScopeToken = validImportScope
|
|
105
|
+
? metadataToken(26, importScopeRow)
|
|
106
|
+
: null;
|
|
107
|
+
const member = memberToken === null ? undefined : members.get(memberToken);
|
|
108
|
+
imports.push({
|
|
109
|
+
token: metadataToken(28, row),
|
|
110
|
+
row_offset: cursor.start,
|
|
111
|
+
mapping_flags: mappingFlags,
|
|
112
|
+
mapping_flags_hex: flagsHex(mappingFlags),
|
|
113
|
+
member_token: memberToken,
|
|
114
|
+
member_kind: member?.kind ?? "unknown",
|
|
115
|
+
member_name: member?.name ?? null,
|
|
116
|
+
import_name: importName,
|
|
117
|
+
import_scope_token: importScopeToken,
|
|
118
|
+
import_scope_name: importScopeToken === null
|
|
119
|
+
? null
|
|
120
|
+
: (moduleNames.get(importScopeToken)?.name ?? null),
|
|
121
|
+
no_mangle: (mappingFlags & 0x0001) !== 0,
|
|
122
|
+
char_set: charSet(mappingFlags),
|
|
123
|
+
call_convention: callConvention(mappingFlags),
|
|
124
|
+
supports_last_error: (mappingFlags & 0x0040) !== 0,
|
|
125
|
+
best_fit: bestFit(mappingFlags),
|
|
126
|
+
throw_on_unmappable_char: throwOnUnmappable(mappingFlags),
|
|
127
|
+
verification: "managed-declaration-only",
|
|
82
128
|
});
|
|
83
|
-
|
|
84
|
-
const importName = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), heapExtent);
|
|
85
|
-
const importScopeRow = cursor.readIndex(layout.tableIndexSize(26));
|
|
86
|
-
const importScopeToken = importScopeRow === 0 ? null : metadataToken(26, importScopeRow);
|
|
87
|
-
const member = memberToken === null ? undefined : members.get(memberToken);
|
|
88
|
-
imports.push({
|
|
89
|
-
token: metadataToken(28, row),
|
|
90
|
-
row_offset: cursor.start,
|
|
91
|
-
mapping_flags: mappingFlags,
|
|
92
|
-
mapping_flags_hex: flagsHex(mappingFlags),
|
|
93
|
-
member_token: memberToken,
|
|
94
|
-
member_kind: member?.kind ?? "unknown",
|
|
95
|
-
member_name: member?.name ?? null,
|
|
96
|
-
import_name: importName,
|
|
97
|
-
import_scope_token: importScopeToken,
|
|
98
|
-
import_scope_name: importScopeToken === null
|
|
99
|
-
? null
|
|
100
|
-
: (moduleNames.get(importScopeToken)?.name ?? null),
|
|
101
|
-
no_mangle: (mappingFlags & 0x0001) !== 0,
|
|
102
|
-
char_set: charSet(mappingFlags),
|
|
103
|
-
call_convention: callConvention(mappingFlags),
|
|
104
|
-
supports_last_error: (mappingFlags & 0x0040) !== 0,
|
|
105
|
-
best_fit: bestFit(mappingFlags),
|
|
106
|
-
throw_on_unmappable_char: throwOnUnmappable(mappingFlags),
|
|
107
|
-
verification: "managed-declaration-only",
|
|
108
|
-
});
|
|
129
|
+
}, issues);
|
|
109
130
|
}
|
|
110
131
|
return imports;
|
|
111
132
|
};
|
|
@@ -168,6 +189,8 @@ const throwOnUnmappable = (flags) => {
|
|
|
168
189
|
export const nativeImplementations = (methods, pinvokeTokens) => {
|
|
169
190
|
const implementations = [];
|
|
170
191
|
for (const method of methods) {
|
|
192
|
+
if (method.kind !== "method")
|
|
193
|
+
continue;
|
|
171
194
|
const implFlags = method.implFlags ?? 0;
|
|
172
195
|
const codeType = codeTypeFor(implFlags);
|
|
173
196
|
const managedKind = managedKindFor(implFlags);
|
|
@@ -229,19 +252,9 @@ const boundaryKind = (pinvokeDeclared, codeType, managedKind) => {
|
|
|
229
252
|
return "unmanaged-method";
|
|
230
253
|
return "mixed-or-unknown";
|
|
231
254
|
};
|
|
232
|
-
/** CLI header facets of a PE without an admitted CLI header. */
|
|
233
|
-
export const NO_CLI_NATIVE = {
|
|
234
|
-
il_only: false,
|
|
235
|
-
requires_32bit: false,
|
|
236
|
-
strong_name_signed: false,
|
|
237
|
-
native_entry_point: false,
|
|
238
|
-
ready_to_run_signature: false,
|
|
239
|
-
managed_native_header_rva: 0,
|
|
240
|
-
managed_native_header_size: 0,
|
|
241
|
-
};
|
|
242
255
|
export const cliNative = (pe) => {
|
|
243
256
|
if (pe.cli === null)
|
|
244
|
-
return
|
|
257
|
+
return null;
|
|
245
258
|
return {
|
|
246
259
|
il_only: (pe.cli.flags & 0x0000_0001) !== 0,
|
|
247
260
|
requires_32bit: (pe.cli.flags & 0x0000_0002) !== 0,
|
|
@@ -255,10 +268,12 @@ export const cliNative = (pe) => {
|
|
|
255
268
|
/** Summarize declaration counts with the native facets of the CLI header. */
|
|
256
269
|
export const nativeBoundarySummary = (native, counts) => ({
|
|
257
270
|
...counts,
|
|
258
|
-
ready_to_run: native
|
|
259
|
-
mixed_mode_or_native_header: native
|
|
260
|
-
|
|
261
|
-
native.
|
|
271
|
+
ready_to_run: native?.ready_to_run_signature ?? null,
|
|
272
|
+
mixed_mode_or_native_header: native === null
|
|
273
|
+
? null
|
|
274
|
+
: native.managed_native_header_rva !== 0 ||
|
|
275
|
+
native.managed_native_header_size !== 0 ||
|
|
276
|
+
native.native_entry_point,
|
|
262
277
|
});
|
|
263
278
|
export const buildNativeBoundaryInspection = ({ target, bytes, layout, inventory, moduleRefs, imports, implementations, native, issues, }) => managedNativeBoundaryInspectionSchema.parse({
|
|
264
279
|
artifact: {
|
|
@@ -1,16 +1,15 @@
|
|
|
1
1
|
import { managedNativeBoundaryInspectionSchema, } from "../domain/managed/managedArtifact.js";
|
|
2
|
-
import { readManagedMetadataInventory, } from "./ManagedMetadataInventory.js";
|
|
2
|
+
import { readManagedMetadataInventory, readManagedResourceDirectory, } from "./ManagedMetadataInventory.js";
|
|
3
3
|
import { readManagedMetadataLayout, } from "./ManagedMetadataLayout.js";
|
|
4
4
|
import { readManagedPeLayout, } from "./ManagedPeReader.js";
|
|
5
5
|
import { ManagedReaderFailure } from "./ManagedReaderFailure.js";
|
|
6
|
-
import { buildNativeBoundaryInspection, cliNative,
|
|
6
|
+
import { buildNativeBoundaryInspection, cliNative, nativeBoundarySummary, nativeImplementations, parseFields, parseImplMaps, parseMethods, parseModuleRefs, } from "./ManagedNativeBoundaryHelpers.js";
|
|
7
7
|
/**
|
|
8
8
|
* Report a PE whose CLI metadata is absent or cannot be admitted. `native`
|
|
9
9
|
* holds the CLI header facts when the header itself was admitted; otherwise
|
|
10
10
|
* the header is absent (`not-managed`) or unreadable (`malformed`).
|
|
11
11
|
*/
|
|
12
12
|
const emptyInspection = (target, bytes, classification, { native = null, issues = [], } = {}) => {
|
|
13
|
-
const header = native ?? NO_CLI_NATIVE;
|
|
14
13
|
return managedNativeBoundaryInspectionSchema.parse({
|
|
15
14
|
artifact: {
|
|
16
15
|
path: target.path,
|
|
@@ -29,11 +28,11 @@ const emptyInspection = (target, bytes, classification, { native = null, issues
|
|
|
29
28
|
requires_artifact_sha256: target.sha256,
|
|
30
29
|
requires_mvid: null,
|
|
31
30
|
},
|
|
32
|
-
cli_native:
|
|
31
|
+
cli_native: native,
|
|
33
32
|
module_refs: [],
|
|
34
33
|
pinvoke_imports: [],
|
|
35
34
|
native_implementations: [],
|
|
36
|
-
summary: nativeBoundarySummary(
|
|
35
|
+
summary: nativeBoundarySummary(native, {
|
|
37
36
|
module_ref_count: 0,
|
|
38
37
|
pinvoke_import_count: 0,
|
|
39
38
|
native_implementation_count: 0,
|
|
@@ -41,23 +40,14 @@ const emptyInspection = (target, bytes, classification, { native = null, issues
|
|
|
41
40
|
coverage: { state: "unavailable", issues },
|
|
42
41
|
limitations: [
|
|
43
42
|
"No CLI metadata was admitted; native boundary declarations are unavailable.",
|
|
44
|
-
...(native === null && classification === "malformed"
|
|
45
|
-
? [
|
|
46
|
-
"The CLI header was not admitted, so cli_native and the summary's ready_to_run and mixed_mode_or_native_header values are defaults, not observations.",
|
|
47
|
-
]
|
|
48
|
-
: []),
|
|
49
43
|
"Static inspection does not load or execute target code, so native export resolution is not performed.",
|
|
50
44
|
],
|
|
51
45
|
});
|
|
52
46
|
};
|
|
53
|
-
const readBoundaryInventory = (bytes, pe, cli) => {
|
|
47
|
+
const readBoundaryInventory = (bytes, pe, cli, issues) => {
|
|
54
48
|
const metadataOffset = pe.rvaToOffset(cli.metadata.rva, cli.metadata.size, "cli.metadata");
|
|
55
49
|
const layout = readManagedMetadataLayout(bytes, metadataOffset, cli.metadata.size);
|
|
56
|
-
const
|
|
57
|
-
offset: pe.rvaToOffset(cli.resources.rva, cli.resources.size, "cli.resources"),
|
|
58
|
-
size: cli.resources.size,
|
|
59
|
-
};
|
|
60
|
-
const inventory = readManagedMetadataInventory(bytes, layout, resourceDirectory);
|
|
50
|
+
const inventory = readManagedMetadataInventory(bytes, layout, readManagedResourceDirectory(pe, issues));
|
|
61
51
|
return { layout, inventory };
|
|
62
52
|
};
|
|
63
53
|
/** Inspect managed/native boundary declarations from PE metadata without execution. */
|
|
@@ -75,10 +65,11 @@ export const inspectManagedNativeBoundariesBytes = (bytes, target) => {
|
|
|
75
65
|
}
|
|
76
66
|
if (pe.cli === null)
|
|
77
67
|
return emptyInspection(target, bytes, pe.cliDirectoryPresent ? "malformed" : "not-managed", { issues: pe.cliIssue === null ? [] : [pe.cliIssue] });
|
|
68
|
+
const issues = [];
|
|
78
69
|
let layout;
|
|
79
70
|
let inventory;
|
|
80
71
|
try {
|
|
81
|
-
({ layout, inventory } = readBoundaryInventory(bytes, pe, pe.cli));
|
|
72
|
+
({ layout, inventory } = readBoundaryInventory(bytes, pe, pe.cli, issues));
|
|
82
73
|
}
|
|
83
74
|
catch (cause) {
|
|
84
75
|
if (!(cause instanceof ManagedReaderFailure))
|
|
@@ -89,11 +80,11 @@ export const inspectManagedNativeBoundariesBytes = (bytes, target) => {
|
|
|
89
80
|
});
|
|
90
81
|
}
|
|
91
82
|
const heapExtent = Math.max(layout.strings.size, layout.blob.size);
|
|
92
|
-
|
|
93
|
-
const moduleRefs = parseModuleRefs(bytes, layout, heapExtent);
|
|
83
|
+
issues.push(...inventory.issues);
|
|
84
|
+
const moduleRefs = parseModuleRefs(bytes, layout, heapExtent, issues);
|
|
94
85
|
const members = new Map([
|
|
95
|
-
...parseFields(bytes, layout, heapExtent),
|
|
96
|
-
...parseMethods(bytes, layout, heapExtent),
|
|
86
|
+
...parseFields(bytes, layout, heapExtent, issues),
|
|
87
|
+
...parseMethods(bytes, layout, heapExtent, issues),
|
|
97
88
|
]);
|
|
98
89
|
const imports = parseImplMaps({
|
|
99
90
|
bytes,
|
|
@@ -8,3 +8,19 @@ export class ManagedReaderFailure extends Error {
|
|
|
8
8
|
}
|
|
9
9
|
/** Construct a typed managed parse failure at an exact byte location. */
|
|
10
10
|
export const managedFailure = (code, scope, detail, offset = null) => new ManagedReaderFailure({ code, scope, offset, detail });
|
|
11
|
+
/** Retain one malformed item's location while allowing independent items to be read. */
|
|
12
|
+
export const readManagedValue = (operation, issues) => {
|
|
13
|
+
try {
|
|
14
|
+
return operation();
|
|
15
|
+
}
|
|
16
|
+
catch (cause) {
|
|
17
|
+
if (!(cause instanceof ManagedReaderFailure))
|
|
18
|
+
throw cause;
|
|
19
|
+
issues.push(cause.issue);
|
|
20
|
+
return undefined;
|
|
21
|
+
}
|
|
22
|
+
};
|
|
23
|
+
/** Preserve issue order while collapsing the same malformed producer fact across facets. */
|
|
24
|
+
export const uniqueManagedParseIssues = (issues) => [
|
|
25
|
+
...new Map(issues.map((issue) => [JSON.stringify(issue), issue])).values(),
|
|
26
|
+
];
|
|
@@ -3,7 +3,7 @@ import { createReadStream } from "node:fs";
|
|
|
3
3
|
import { readFile } from "node:fs/promises";
|
|
4
4
|
import { createAnalysisExecution, } from "../application/AnalysisProvider.js";
|
|
5
5
|
import { MANAGED_STATIC_PROVIDER_IDENTITY as IDENTITY, managedStaticCapabilities, } from "./ManagedStaticProviderMetadata.js";
|
|
6
|
-
import { MANAGED_TOOL_CONTRACTS,
|
|
6
|
+
import { MANAGED_TOOL_CONTRACTS, managedTargetInputSchema, } from "../contracts/managed/managedToolContracts.js";
|
|
7
7
|
import { AnalysisCancelledError, AnalysisCapabilityUnavailableError, } from "../domain/analysisErrorCore.js";
|
|
8
8
|
import { EvidenceIntegrityError } from "../domain/evidenceErrors.js";
|
|
9
9
|
import { ProviderAdapterError } from "../domain/providerAdapterError.js";
|
|
@@ -66,7 +66,7 @@ class ManagedStaticClient {
|
|
|
66
66
|
}
|
|
67
67
|
close() {
|
|
68
68
|
this.#snapshotBytes = undefined;
|
|
69
|
-
return Promise.resolve();
|
|
69
|
+
return Promise.resolve(ok(null));
|
|
70
70
|
}
|
|
71
71
|
}
|
|
72
72
|
const readManagedSnapshot = async (path, signal) => {
|
|
@@ -93,15 +93,13 @@ const hashManagedSource = async (path, signal) => {
|
|
|
93
93
|
};
|
|
94
94
|
const isManagedOperation = (operation) => MANAGED_TOOL_CONTRACTS.some(({ name }) => name === operation);
|
|
95
95
|
const inspectManagedOperation = (operation, parameters, bytes, target) => {
|
|
96
|
+
managedTargetInputSchema.parse(parameters);
|
|
96
97
|
if (operation === "inspect_managed_artifact") {
|
|
97
|
-
managedArtifactInputSchema.parse(parameters);
|
|
98
98
|
return inspectManagedArtifactBytes(bytes, target);
|
|
99
99
|
}
|
|
100
100
|
if (operation === "inspect_managed_native_boundaries") {
|
|
101
|
-
managedNativeBoundaryInputSchema.parse(parameters);
|
|
102
101
|
return inspectManagedNativeBoundariesBytes(bytes, target);
|
|
103
102
|
}
|
|
104
|
-
managedMemberInputSchema.parse(parameters);
|
|
105
103
|
return inspectManagedMembersBytes(bytes, target);
|
|
106
104
|
};
|
|
107
105
|
const managedLocations = (result) => {
|