rea-agents 6.1.0 → 6.3.0

package/dist/domain/analysisErrorPresentation.js

@@ -13,7 +13,8 @@ export const analysisErrorRemediationAction = (error) => {
     if (error instanceof AnalysisSnapshotMismatchError)
         return "Run analysis without this snapshot, then save a fresh snapshot using the intended artifact, provider, and analysis profile.";
     if (error instanceof AnalysisUnsupportedTargetError)
-        return "Select a target supported by this operation or choose an operation supporting the reported target format.";
+        return (error.remediationAction ??
+            "Select a target supported by this operation or choose an operation supporting the reported target format.");
     if (error instanceof AnalysisResourceConstraintError)
         return (error.remediationAction ??
             (error.resource === "transport"
@@ -44,10 +45,13 @@ export const analysisErrorRemediationAction = (error) => {
     if (error instanceof BinaryTargetError &&
         error.constraint === "directory_requires_file")
         return "For a JavaScript/Electron application directory, call analyze_javascript_application with input_path or run `rea analyze <directory>`. For binary analysis, select its executable file.";
-    if (error instanceof AnalysisAccessDeniedError)
+    if (error instanceof AnalysisAccessDeniedError ||
+        (error instanceof BinaryTargetError && error.systemCode !== undefined))
         return "Check the current process's read access to the selected path. Retry with a readable local file.";
     if (error instanceof AnalysisArtifactChangedError)
         return "Wait until the selected file is stable. For an active binary session, reopen the target with open_binary before retrying so REA acquires its current identity; for a CLI command or target-free tool, rerun the operation.";
+    if (error instanceof ConfigurationError && error.settings.length > 0)
+        return `Correct ${[...new Set(error.settings.map(({ setting }) => setting))].join(", ")} in the environment that starts REA (your shell or the MCP client's registration), then rerun.`;
     if (error instanceof AnalysisInputError)
         return "Correct the listed arguments and retry.";
     if (error instanceof UnknownRegistryError && error.reason === "not-found")
@@ -72,6 +76,11 @@ export const analysisErrorCategory = (error) => {
         return "unavailable";
     if (error instanceof ArtifactOperationError)
         return artifactErrorCategory(error.reason);
+    if (error instanceof EvidenceFileError &&
+        (error.reason === "missing" ||
+            error.reason === "not-file" ||
+            error.reason === "exists"))
+        return "invalid_input";
     return STATIC_ERROR_CATEGORIES[error._tag] ?? "execution_failure";
 };
 const browserErrorCategory = (reason) => {
@@ -138,7 +147,7 @@ export const analysisErrorUserMessage = (error) => {
     if (standardMessage !== undefined)
         return standardMessage;
     if (error instanceof ArtifactOperationError)
-        return artifactMessage(error.reason);
+        return artifactMessage(error.operation, error.reason);
     if (error instanceof EvidenceReferenceError)
         return error.reason === "missing"
             ? `Evidence ${error.evidenceId} is not retained in this session. Supply complete inline Evidence, re-run its producer, or import its bundle before using this reference.`
@@ -152,7 +161,13 @@ export const analysisErrorUserMessage = (error) => {
     if (error instanceof UnknownRegistryError)
         return "Evidence state changed before the update completed. Refresh the current state and try again.";
     if (error instanceof ConfigurationError)
-        return "REA configuration is invalid. Run `rea doctor` and fix the reported setting.";
+        return error.settings.length === 0
+            ? "REA configuration is invalid. Run `rea doctor` and fix the reported setting."
+            : `REA configuration is invalid: ${error.settings
+                .map(({ setting, constraint }) => constraint.includes(setting)
+                ? constraint.replace(/\.$/u, "")
+                : `${setting}: ${constraint}`)
+                .join("; ")}.`;
     if (error instanceof NoBinaryOpenError)
         return error.message;
     if (error instanceof BinaryTargetError)
@@ -252,7 +267,7 @@ const START_FAILURE_TAGS = new Set([
     "HopperProcessError",
     "HopperStartError",
 ]);
-const artifactMessage = (reason) => {
+const artifactMessage = (operation, reason) => {
     if (reason === "cancelled")
         return "Artifact operation was cancelled. Start it again when ready.";
     if (reason === "limit")
@@ -261,6 +276,8 @@ const artifactMessage = (reason) => {
         return "Artifact contains an unsafe or conflicting internal path. Inspect the reported path and correct the artifact before retrying.";
     if (reason === "unavailable")
         return "Artifact processing is unavailable for the current target or host. Check artifact support and required tools.";
+    if (reason === "integrity" && operation === "analyze_javascript_application")
+        return "Artifact bytes contradict declared integrity. If expected, rerun analyze_javascript_application with integrity_policy=record-and-continue (CLI: --integrity-policy record-and-continue) to retain observed bytes as untrusted; otherwise get a fresh copy.";
     if (reason === "format" || reason === "integrity")
         return "Artifact is invalid or has changed. Get a fresh copy and try again.";
     return "Artifact could not be read or written. Check file access and try again.";

package/dist/domain/analysisErrorProjection.js

@@ -2,7 +2,7 @@ import { jsonValueSchema } from "./jsonValue.js";
 import { analysisErrorCategory, analysisErrorRemediationAction, analysisErrorUserMessage, assertKnownAnalysisErrorTag, } from "./analysisErrorPresentation.js";
 import { AnalysisAccessDeniedError, AnalysisArtifactChangedError, AnalysisCancelledError, AnalysisCapabilityUnavailableError, AnalysisUnsupportedTargetError, AnalysisInputError, AnalysisOutputError, AnalysisTimeoutError, AnalysisResourceConstraintError, } from "./analysisErrorCore.js";
 import { ArtifactOperationError } from "./artifactOperationError.js";
-import { BinaryTargetError } from "./configurationErrors.js";
+import { BinaryTargetError, ConfigurationError, } from "./configurationErrors.js";
 import { BrowserObservationError } from "./browserObservationError.js";
 import { EvidenceFileError, EvidenceIntegrityError, EvidenceReferenceError, } from "./evidenceErrors.js";
 import { HopperCancelledError, HopperProcessError, HopperRemoteError, HopperStartError, HopperTimeoutError, } from "./hopperErrors.js";
@@ -63,6 +63,10 @@ const underlyingErrorCode = (error) => {
             : browserErrorCode(error.reason);
     if (error instanceof ArtifactOperationError)
         return artifactOperationCode(error);
+    if (error instanceof BinaryTargetError)
+        return error.systemCode === undefined
+            ? "target_unavailable"
+            : "access_denied";
     if (error instanceof EvidenceFileError)
         return evidenceFileCode(error.reason);
     if (error instanceof UnknownRegistryError)
@@ -95,9 +99,14 @@ const artifactOperationCode = (error) => {
         return "cancelled";
     return "artifact_operation_failed";
 };
-const evidenceFileCode = (reason) => reason === "invalid-json"
-    ? "evidence_integrity_mismatch"
-    : "execution_failure";
+const evidenceFileCode = (reason) => {
+    if (reason === "invalid-json")
+        return "evidence_integrity_mismatch";
+    // A missing, non-file or already-existing path is the caller's selection.
+    if (reason === "io")
+        return "execution_failure";
+    return "invalid_request";
+};
 const unknownRegistryCode = (reason) => {
     if (reason === "revision-conflict" || reason === "already-exists")
         return "revision_conflict";
@@ -132,7 +141,6 @@ const STATIC_ERROR_CODES = {
     HopperStartError: "provider_unavailable",
     ConfigurationError: "configuration_invalid",
     NoBinaryOpenError: "target_unavailable",
-    BinaryTargetError: "target_unavailable",
     EvidenceIntegrityError: "evidence_integrity_mismatch",
     ProviderAdapterError: "execution_failure",
     HopperRemoteError: "execution_failure",
@@ -140,6 +148,7 @@ const STATIC_ERROR_CODES = {
 const staticErrorCode = (tag) => {
     switch (tag) {
         case "ArtifactOperationError":
+        case "BinaryTargetError":
         case "BrowserObservationError":
         case "EvidenceFileError":
         case "ProcessCaptureError":
@@ -404,6 +413,13 @@ const lifecycleErrorDetails = (error) => {
         };
         return Object.keys(details).length === 0 ? undefined : details;
     }
+    if (error instanceof ConfigurationError && error.settings.length > 0)
+        return {
+            settings: error.settings.map(({ setting, constraint }) => ({
+                setting,
+                constraint,
+            })),
+        };
     if (error instanceof BinaryTargetError)
         return {
             path: error.path,
@@ -411,6 +427,9 @@ const lifecycleErrorDetails = (error) => {
             ...(error.constraint === undefined
                 ? {}
                 : { constraint: error.constraint }),
+            ...(error.systemCode === undefined
+                ? {}
+                : { system_code: error.systemCode, boundary: "filesystem-read" }),
         };
     return undefined;
 };

package/dist/domain/analysisSnapshot.js

@@ -1,6 +1,7 @@
 import { createHash } from "node:crypto";
 import canonicalize from "canonicalize";
 import { z } from "zod";
+import { compareUnicodeCodePoints } from "./unicodeCodePointOrder.js";
 import { analysisProfileSchema, analysisProfilesEqual, committedProviderSchema, } from "./analysisProfile.js";
 import { evidenceBundleForTarget, evidenceBundleSchema, parseEvidenceBundle, } from "./evidenceBundle.js";
 import { evidenceLocationSchema, } from "./evidence.js";
@@ -96,7 +97,7 @@ export const analysisSnapshotSchema = z.object({
     target: targetSchema,
     binding: bindingSchema,
     entries: z.array(entrySchema),
-    workflow_entries: z.array(workflowEntrySchema).optional(),
+    workflow_entries: z.array(workflowEntrySchema),
     evidence_bundle: evidenceBundleSchema,
 });
 const canonicalJson = (value) => {
@@ -139,7 +140,7 @@ export const snapshotEvidenceForQuery = (snapshot, query) => {
     const encodedParameters = canonicalJson(parameters);
     const queryId = analysisQueryId(snapshot.target, snapshot.binding, operation, parameters);
     const entry = snapshot.entries.find((candidate) => candidate.query_id === queryId);
-    const workflowEntry = snapshot.workflow_entries?.find((candidate) => candidate.query_id === queryId);
+    const workflowEntry = snapshot.workflow_entries.find((candidate) => candidate.query_id === queryId);
     if (entry === undefined && workflowEntry === undefined)
         return undefined;
     return snapshot.evidence_bundle.records.find((record) => record.subject?.digest.sha256 === target.sha256 &&
@@ -147,7 +148,7 @@ export const snapshotEvidenceForQuery = (snapshot, query) => {
         record.provider.id === provider.id &&
         record.provider.name === provider.name &&
         record.provider.version === provider.version &&
-        "analysis_profile" in record &&
+        record.analysis_profile !== null &&
         analysisProfilesEqual(record.analysis_profile, evidenceProfile) &&
         canonicalJson(record.parameters) === encodedParameters &&
         ((entry !== undefined && evidenceMatchesEntry(record, entry, snapshot)) ||
@@ -233,11 +234,17 @@ export const createAnalysisSnapshotEntry = (input) => {
 export const parseAnalysisSnapshot = (input) => {
     const parsed = analysisSnapshotSchema.parse(input);
     parseEvidenceBundle(parsed.evidence_bundle);
-    if (JSON.stringify(evidenceBundleForTarget(parsed.evidence_bundle, parsed.target.sha256)) !== JSON.stringify(parsed.evidence_bundle))
+    const scopedEvidence = evidenceBundleForTarget(parsed.evidence_bundle, parsed.target.sha256);
+    // The validated canonical bundle is filtered, never extended. Equal counts
+    // establish that no record or unknown was removed without serializing results.
+    if (scopedEvidence.records.length !== parsed.evidence_bundle.records.length ||
+        scopedEvidence.unknowns.length !== parsed.evidence_bundle.unknowns.length)
         throw new TypeError("Analysis snapshot evidence contains records for another target");
+    if (!hasCanonicalQueryOrder(parsed.entries))
+        throw new TypeError("Analysis snapshot entries are not canonical");
+    if (!hasCanonicalQueryOrder(parsed.workflow_entries))
+        throw new TypeError("Analysis snapshot workflow entries are not canonical");
     const ids = new Set();
-    const boundEntries = [];
-    const boundWorkflowEntries = [];
     const index = createEvidenceIndex(parsed);
     const workflowIndex = createWorkflowEvidenceIndex(parsed);
     for (const entry of parsed.entries) {
@@ -254,13 +261,10 @@ export const parseAnalysisSnapshot = (input) => {
         if (!entryHasMatchingEvidence(entry, parsed, index)) {
             if (entryHasCorrespondingEvidence(entry, parsed, index))
                 throw new TypeError(`Analysis snapshot entry ${entry.operation} differs from its Evidence record`);
-            // Older snapshots may contain cache entries without profile-bound Evidence.
-            // Keep their Evidence bundle, but never replay those unbound values.
-            continue;
+            throw new TypeError(`Analysis snapshot entry ${entry.operation} has no profile-bound Evidence record`);
         }
-        boundEntries.push(entry);
     }
-    for (const entry of parsed.workflow_entries ?? []) {
+    for (const entry of parsed.workflow_entries) {
         if (entry.execution.provider.id !==
             entry.execution.analysis_profile.provider.id ||
             entry.execution.provider.name !==
@@ -277,24 +281,20 @@ export const parseAnalysisSnapshot = (input) => {
         if (!workflowEntryHasMatchingEvidence(entry, workflowIndex)) {
             if (workflowEntryHasCorrespondingEvidence(entry, workflowIndex))
                 throw new TypeError(`Analysis snapshot workflow entry ${entry.operation} differs from its Evidence record`);
-            continue;
+            throw new TypeError(`Analysis snapshot workflow entry ${entry.operation} has no profile-bound Evidence record`);
         }
-        boundWorkflowEntries.push(entry);
     }
-    const sorted = [...parsed.entries].sort((left, right) => left.query_id.localeCompare(right.query_id));
-    if (JSON.stringify(parsed.entries) !== JSON.stringify(sorted))
-        throw new TypeError("Analysis snapshot entries are not canonical");
-    const sortedWorkflows = [...(parsed.workflow_entries ?? [])].sort((left, right) => left.query_id.localeCompare(right.query_id));
-    if (parsed.workflow_entries !== undefined &&
-        JSON.stringify(parsed.workflow_entries) !== JSON.stringify(sortedWorkflows))
-        throw new TypeError("Analysis snapshot workflow entries are not canonical");
-    return {
-        ...parsed,
-        entries: boundEntries,
-        ...(parsed.workflow_entries === undefined
-            ? {}
-            : { workflow_entries: boundWorkflowEntries }),
-    };
+    return parsed;
+};
+const hasCanonicalQueryOrder = (entries) => {
+    let previous;
+    for (const { query_id: queryId } of entries) {
+        if (previous !== undefined &&
+            compareUnicodeCodePoints(previous, queryId) > 0)
+            return false;
+        previous = queryId;
+    }
+    return true;
 };
 const createEvidenceIndex = (snapshot) => {
     const matching = new Set();
@@ -329,13 +329,13 @@ const isCorrespondingEvidence = (evidence, snapshot) => evidence.predicate_type
     evidence.confidence === "observed" &&
     evidence.authority === "shipped-artifact" &&
     evidence.subject?.digest.sha256 === snapshot.target.sha256 &&
-    "analysis_profile" in evidence &&
+    evidence.analysis_profile !== null &&
     analysisProfilesEqual(evidence.analysis_profile, snapshot.binding.analysis_profile);
 const evidenceQueryKey = (evidence) => canonicalJson({
     operation: evidence.operation,
     parameters: evidence.parameters,
     provider: evidence.provider,
-    analysis_profile: "analysis_profile" in evidence ? evidence.analysis_profile : null,
+    analysis_profile: evidence.analysis_profile,
 });
 const entryQueryKey = (entry, binding) => canonicalJson({
     operation: entry.operation,
@@ -383,7 +383,7 @@ const isWorkflowEvidence = (evidence, snapshot, entry) => evidence.predicate_typ
     evidence.confidence === "derived" &&
     evidence.authority === "shipped-artifact" &&
     evidence.subject?.digest.sha256 === snapshot.target.sha256 &&
-    "analysis_profile" in evidence &&
+    evidence.analysis_profile !== null &&
     analysisProfilesEqual(evidence.analysis_profile, entry.execution.analysis_profile) &&
     evidence.provider.id === entry.execution.provider.id &&
     evidence.provider.name === entry.execution.provider.name &&
@@ -396,7 +396,7 @@ const createWorkflowEvidenceIndex = (snapshot) => {
             evidence.confidence !== "derived" ||
             evidence.authority !== "shipped-artifact" ||
             evidence.subject?.digest.sha256 !== snapshot.target.sha256 ||
-            !("analysis_profile" in evidence))
+            evidence.analysis_profile === null)
             continue;
         corresponding.add(evidenceQueryKey(evidence));
         matching.add(canonicalJson(evidenceContentProjection(evidence)));

package/dist/domain/analysisView/analysisView.js

@@ -0,0 +1,241 @@
+import { z } from "zod";
+import { AnalysisInputError, AnalysisUnsupportedTargetError, } from "../analysisErrorCore.js";
+import { digestCanonicalValue } from "../canonicalDigest.js";
+import { digestSchema, prefixedDigestSchema } from "../digests.js";
+import { evidenceSchema } from "../evidence.js";
+import { jsonObjectSchema, jsonValueSchema } from "../jsonValue.js";
+import { err, ok } from "../result.js";
+import { binaryLayoutSchema } from "../native/binaryLayout.js";
+import { parseOwnedJavaScriptApplicationAnalysisSteps, } from "../javascript/javascriptApplicationAnalysis.js";
+import { analysisInputErrorFromIssues } from "../inputIssueProjection.js";
+import { projectBinaryLayoutView } from "./binaryLayoutView.js";
+import { projectJavaScriptApplicationView } from "./javascriptApplicationView.js";
+/** Public name of the selected-view workflow. */
+export const INSPECT_ANALYSIS_VIEW_OPERATION = "inspect_analysis_view";
+const summaryViewSchema = z.strictObject({ kind: z.literal("summary") });
+const facetViewSchema = z.strictObject({
+    kind: z.literal("facet"),
+    facet: z.enum(["mitigations", "linkage"]),
+});
+const itemSelectorSchema = z.union([
+    z.strictObject({ index: z.number().int().nonnegative() }),
+    z.strictObject({ name: z.string() }),
+    z.strictObject({
+        path: z
+            .string()
+            .describe("Exact observed module path or original source-map reference from a module page; an empty reference is valid."),
+    }),
+    z.strictObject({ node_id: prefixedDigestSchema("jag_node") }),
+]);
+const itemViewSchema = z
+    .strictObject({
+    kind: z.literal("item"),
+    collection: z.enum(["sections", "symbols", "modules"]),
+    selector: itemSelectorSchema,
+})
+    .superRefine((value, context) => {
+    const selector = value.selector;
+    if (value.collection === "modules") {
+        if (!("path" in selector) && !("node_id" in selector))
+            context.addIssue({
+                code: "custom",
+                path: ["selector"],
+                message: "Module items are selected by exact path or node_id, not index or name.",
+            });
+        return;
+    }
+    if (!("index" in selector) && !("name" in selector))
+        context.addIssue({
+            code: "custom",
+            path: ["selector"],
+            message: "Section and symbol items are selected by index or exact name, not path or node_id.",
+        });
+});
+const pageViewSchema = z.strictObject({
+    kind: z.literal("page"),
+    collection: z.enum(["sections", "symbols", "modules"]),
+    offset: z.number().int().nonnegative(),
+    limit: z.number().int().positive(),
+});
+/** Caller-selected projection of already completed analysis Evidence. */
+export const analysisViewRequestSchema = z.discriminatedUnion("kind", [
+    summaryViewSchema,
+    facetViewSchema,
+    itemViewSchema,
+    pageViewSchema,
+]);
+/** Inline Evidence or an exact same-session retained reference. */
+export const analysisViewSourceSchema = z.discriminatedUnion("kind", [
+    z.strictObject({
+        kind: z.literal("retained-evidence"),
+        evidence_id: prefixedDigestSchema("ev"),
+    }),
+    z.strictObject({
+        kind: z.literal("inline"),
+        evidence: evidenceSchema,
+    }),
+]);
+/** Public inspect_analysis_view input. */
+export const inspectAnalysisViewInputSchema = z.strictObject({
+    source: analysisViewSourceSchema,
+    view: analysisViewRequestSchema,
+});
+const coverageSchema = z.strictObject({
+    status: z.enum(["complete-within-view", "page", "empty"]),
+    examined: z.number().int().nonnegative(),
+    total: z.number().int().nonnegative(),
+    next_offset: z.number().int().nonnegative().nullable(),
+    exhausted: z.boolean(),
+});
+const artifactSchema = z.strictObject({
+    path: z.string().min(1),
+    sha256: digestSchema,
+});
+const layoutSummarySchema = z.strictObject({
+    bytes: z.number().int().nonnegative(),
+    format: z.literal("elf"),
+    architecture: z.strictObject({
+        machine: z.literal("EM_X86_64"),
+        bits: z.literal(64),
+        byte_order: z.literal("little"),
+    }),
+    image_type: z.enum(["ET_EXEC", "ET_DYN", "ET_REL"]),
+    entry: z.strictObject({
+        reported_value: z.string().min(1),
+        meaning: z.enum(["linked-virtual-address", "not-applicable", "absent"]),
+        execution_status: z.literal("unknown"),
+    }),
+    counts: z.strictObject({
+        sections: z.number().int().nonnegative(),
+        segments: z.number().int().nonnegative(),
+        symbols: z.number().int().nonnegative(),
+        relocations: z.number().int().nonnegative(),
+    }),
+    limitation_count: z.number().int().nonnegative(),
+});
+const javascriptSummarySchema = z.strictObject({
+    input_path: z.string().min(1),
+    format: z.enum(["asar", "directory"]),
+    root_artifact_sha256: digestSchema,
+    statistics: jsonObjectSchema,
+    electron: jsonObjectSchema,
+    coverage: jsonObjectSchema,
+    limitation_count: z.number().int().nonnegative(),
+});
+const viewResultBase = {
+    parent_evidence_id: prefixedDigestSchema("ev"),
+    parent_operation: z.enum([
+        "inspect_binary_layout",
+        "analyze_javascript_application",
+    ]),
+    parent_digest: digestSchema,
+    view_digest: digestSchema,
+    artifact: artifactSchema,
+    coverage: coverageSchema,
+    limitations: z.array(z.string()),
+    unknowns: z.array(z.string()),
+};
+/** Projected facts for one selected view of retained analysis Evidence. */
+export const analysisViewResultSchema = z.discriminatedUnion("kind", [
+    z.strictObject({
+        kind: z.literal("summary"),
+        view: summaryViewSchema,
+        summary: z.union([layoutSummarySchema, javascriptSummarySchema]),
+        ...viewResultBase,
+    }),
+    z.strictObject({
+        kind: z.literal("facet"),
+        view: facetViewSchema,
+        facet: jsonValueSchema,
+        ...viewResultBase,
+    }),
+    z.strictObject({
+        kind: z.literal("item"),
+        view: itemViewSchema,
+        item: jsonValueSchema,
+        ...viewResultBase,
+    }),
+    z.strictObject({
+        kind: z.literal("page"),
+        view: pageViewSchema,
+        items: z.array(jsonValueSchema),
+        ...viewResultBase,
+    }),
+]);
+/** Construct a typed input failure for one selected-view constraint. */
+export const analysisViewInputError = (issues) => new AnalysisInputError(INSPECT_ANALYSIS_VIEW_OPERATION, undefined, issues);
+/** Attach the content digest that must change when projected bytes change. */
+export const sealAnalysisView = (projection) => analysisViewResultSchema.parse({
+    ...projection,
+    view_digest: digestCanonicalValue(projection, "Analysis view"),
+});
+const parentDigest = (evidenceId) => evidenceId.slice(3);
+const parseJavaScriptParent = (input) => {
+    try {
+        // Only the existing realm-private graph proofs permit reuse. Imported or
+        // merely frozen graphs still receive full canonical validation.
+        const steps = parseOwnedJavaScriptApplicationAnalysisSteps(input);
+        let step = steps.next();
+        while (!step.done)
+            step = steps.next();
+        return ok(step.value);
+    }
+    catch (cause) {
+        if (!(cause instanceof z.ZodError))
+            throw cause;
+        return err(analysisInputErrorFromIssues(INSPECT_ANALYSIS_VIEW_OPERATION, cause.issues.map((issue) => ({
+            ...issue,
+            path: ["source", "normalized_result", ...issue.path],
+        })), { source: { normalized_result: input } }, { cause }));
+    }
+};
+const unsupportedParent = (parent) => new AnalysisUnsupportedTargetError(INSPECT_ANALYSIS_VIEW_OPERATION, parentArtifactPath(parent), `Parent Evidence operation ${JSON.stringify(parent.operation)} is not inspect_binary_layout or analyze_javascript_application.`);
+const parentArtifactPath = (parent) => {
+    if (typeof parent.normalizedResult === "object" &&
+        parent.normalizedResult !== null &&
+        "artifact" in parent.normalizedResult &&
+        typeof parent.normalizedResult.artifact === "object" &&
+        parent.normalizedResult.artifact !== null &&
+        "path" in parent.normalizedResult.artifact &&
+        typeof parent.normalizedResult.artifact.path === "string")
+        return parent.normalizedResult.artifact.path;
+    if (typeof parent.normalizedResult === "object" &&
+        parent.normalizedResult !== null &&
+        "input_path" in parent.normalizedResult &&
+        typeof parent.normalizedResult.input_path === "string")
+        return parent.normalizedResult.input_path;
+    return parent.evidenceId;
+};
+/** Project one selected view from authenticated parent analysis Evidence. */
+export const projectAnalysisView = (parent, view) => {
+    const digest = parentDigest(parent.evidenceId);
+    if (!digestSchema.safeParse(digest).success)
+        return err(analysisViewInputError([
+            {
+                path: ["source"],
+                reason: "invalid_format",
+                message: "Parent Evidence ID is not a digest-backed identifier.",
+            },
+        ]));
+    if (parent.operation === "inspect_binary_layout") {
+        const layout = binaryLayoutSchema.safeParse(parent.normalizedResult);
+        if (!layout.success)
+            return err(analysisViewInputError([
+                {
+                    path: ["source"],
+                    reason: "invalid_value",
+                    message: "Parent Evidence result does not match inspect_binary_layout.",
+                },
+            ]));
+        const projected = projectBinaryLayoutView(parent, layout.data, view);
+        return projected.ok ? ok(sealAnalysisView(projected.value)) : projected;
+    }
+    if (parent.operation === "analyze_javascript_application") {
+        const analysis = parseJavaScriptParent(parent.normalizedResult);
+        if (!analysis.ok)
+            return analysis;
+        const projected = projectJavaScriptApplicationView(parent, analysis.value, view);
+        return projected.ok ? ok(sealAnalysisView(projected.value)) : projected;
+    }
+    return err(unsupportedParent(parent));
+};

package/dist/domain/analysisView/analysisViewCoverage.js

@@ -0,0 +1,19 @@
+/** Coverage for a summary, facet, or single selected object. */
+export const completeWithinViewCoverage = (examined, total) => ({
+    status: "complete-within-view",
+    examined,
+    total,
+    next_offset: null,
+    exhausted: true,
+});
+/** Coverage for a stable page, including an offset past the collection. */
+export const pageViewCoverage = (offset, examined, total) => {
+    const exhausted = offset >= total || offset + examined >= total;
+    return {
+        status: examined === 0 ? "empty" : "page",
+        examined,
+        total,
+        next_offset: exhausted ? null : offset + examined,
+        exhausted,
+    };
+};