rea-agents 6.1.0 → 6.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +24 -24
- package/bridge/ghidra/ReaGhidraBridge.java +32 -4
- package/bridge/hopper_bridge.py +8 -1
- package/dist/android/JadxConfiguration.js +87 -7
- package/dist/android/JadxMcpTransport.js +14 -2
- package/dist/android/JadxProvider.js +64 -36
- package/dist/android/JadxSession.js +51 -9
- package/dist/application/BinaryTargetResolver.js +68 -20
- package/dist/application/BrowserEvidence.js +3 -8
- package/dist/application/BrowserScenarioEvidence.js +4 -20
- package/dist/application/CapabilityInventory.js +43 -9
- package/dist/application/ClientConfigurationDocument.js +97 -25
- package/dist/application/ClientRegistrationStatus.js +19 -6
- package/dist/application/DirectAnalysis.js +41 -20
- package/dist/application/DirectAnalysisCleanup.js +71 -0
- package/dist/application/DirectAnalysisStatus.js +3 -7
- package/dist/application/Doctor.js +40 -53
- package/dist/application/DoctorDiagnostics.js +2 -3
- package/dist/application/EnhancedTools.js +51 -6
- package/dist/application/EvidenceBundleFiles.js +8 -3
- package/dist/application/InvestigationProviders.js +13 -5
- package/dist/application/JsonFiles.js +56 -23
- package/dist/application/LinuxHopper.js +11 -7
- package/dist/application/MacHopper.js +15 -18
- package/dist/application/RealHopperAssertions.js +0 -11
- package/dist/application/ReconstructionObligationCandidates.js +10 -3
- package/dist/application/ReconstructionObligationLedgerProjection.js +3 -1
- package/dist/application/ReferenceSourceImportEntries.js +1 -1
- package/dist/application/RegularFileRead.js +17 -0
- package/dist/application/Setup.js +26 -23
- package/dist/application/SetupClientConfiguration.js +18 -7
- package/dist/application/SetupHost.js +20 -29
- package/dist/application/SetupPlan.js +24 -20
- package/dist/application/SetupSkill.js +57 -8
- package/dist/application/SupportedClients.js +43 -0
- package/dist/application/Uninstall.js +98 -30
- package/dist/application/UpdateMaintenance.js +13 -7
- package/dist/application/UpdateRuntime.js +12 -12
- package/dist/application/Utf8JsonInput.js +64 -0
- package/dist/application/WebScriptExportService.js +38 -5
- package/dist/application/WorkflowEvidence.js +25 -2
- package/dist/application/XrefsAddressResolution.js +45 -0
- package/dist/application/analysisView/AnalysisViewService.js +76 -0
- package/dist/application/android/AndroidAnalysisService.js +1 -1
- package/dist/application/binary/AnalysisClientCleanup.js +30 -5
- package/dist/application/binary/AnalysisProviderEvaluation.js +1 -2
- package/dist/application/binary/AnalysisProviderRegistry.js +2 -6
- package/dist/application/binary/AnalysisSnapshotCache.js +13 -10
- package/dist/application/binary/BinarySession.js +86 -29
- package/dist/application/binary/BinarySessionComposition.js +1 -3
- package/dist/application/binary/BinarySessionExecution.js +3 -5
- package/dist/application/binary/BinarySessionOpen.js +10 -2
- package/dist/application/binary/BinarySessionRecords.js +1 -1
- package/dist/application/binary/BinarySessionStatus.js +1 -6
- package/dist/application/binary/CompositeProvider.js +4 -18
- package/dist/application/binary/LazyAnalysisProvider.js +5 -5
- package/dist/application/binary/SessionProviderRouter.js +27 -135
- package/dist/application/homebrew.js +48 -0
- package/dist/application/javascript/ElectronActiveEvidence.js +10 -14
- package/dist/application/javascript/ElectronBoundaryAnalysis.js +2 -2
- package/dist/application/javascript/ElectronBoundaryGraphNative.js +5 -1
- package/dist/application/javascript/JavaScriptApplicationEvidence.js +3 -6
- package/dist/application/javascript/JavaScriptApplicationEvidenceGraph.js +107 -46
- package/dist/application/javascript/JavaScriptApplicationService.js +7 -1
- package/dist/application/javascript/JavaScriptApplicationWorkflowService.js +59 -45
- package/dist/application/javascript/JavaScriptArtifactAnalysis.js +5 -9
- package/dist/application/javascript/JavaScriptArtifactGraphBuilder.js +19 -27
- package/dist/application/javascript/JavaScriptArtifactGraphBundlers.js +11 -3
- package/dist/application/javascript/JavaScriptArtifactGraphContext.js +9 -0
- package/dist/application/javascript/JavaScriptArtifactGraphDocuments.js +8 -5
- package/dist/application/javascript/JavaScriptArtifactGraphFindings.js +46 -29
- package/dist/application/javascript/JavaScriptArtifactGraphStructure.js +0 -1
- package/dist/application/javascript/JavaScriptArtifactPathResolution.js +86 -27
- package/dist/application/javascript/JavaScriptArtifactReconstruction.js +52 -9
- package/dist/application/javascript/JavaScriptArtifactReconstructionInput.js +1 -0
- package/dist/application/javascript/JavaScriptJsonModules.js +2 -2
- package/dist/application/javascript/JavaScriptModuleRelationships.js +6 -18
- package/dist/application/javascript/JavaScriptRuntimeObservationService.js +3 -3
- package/dist/application/javascript/JavaScriptRuntimeReconciliationService.js +11 -27
- package/dist/application/javascript/JavaScriptSemanticGraphAsyncProjection.js +4 -5
- package/dist/application/javascript/JavaScriptSemanticGraphBuilder.js +8 -6
- package/dist/application/javascript/JavaScriptSemanticGraphChildProcessProjection.js +2 -3
- package/dist/application/javascript/JavaScriptSemanticGraphConstruction.js +7 -5
- package/dist/application/javascript/JavaScriptSemanticGraphDataProjection.js +3 -4
- package/dist/application/javascript/JavaScriptSemanticGraphEvidence.js +1 -1
- package/dist/application/javascript/JavaScriptSemanticGraphFingerprintProjection.js +2 -2
- package/dist/application/javascript/JavaScriptSemanticGraphFlowProjection.js +3 -7
- package/dist/application/javascript/JavaScriptSemanticGraphObjectProjection.js +76 -47
- package/dist/application/javascript/JavaScriptSemanticGraphProjection.js +4 -4
- package/dist/application/javascript/JavaScriptSemanticGraphResourceProjection.js +3 -4
- package/dist/application/javascript/JavaScriptSemanticGraphValueProjection.js +51 -25
- package/dist/application/javascript/JavaScriptSemanticTraceService.js +15 -10
- package/dist/application/managed/ManagedMemberComparisonService.js +2 -1
- package/dist/application/managed/ManagedNativeVerificationService.js +2 -1
- package/dist/application/native/NativeCallRoutes.js +2 -4
- package/dist/application/process/ProcessCli.js +11 -11
- package/dist/application/process/ProcessEvidence.js +0 -1
- package/dist/artifacts/ArtifactProvider.js +53 -30
- package/dist/artifacts/ArtifactProviderMetadata.js +1 -4
- package/dist/artifacts/ArtifactReader.js +31 -0
- package/dist/artifacts/AsarArtifactReader.js +81 -17
- package/dist/artifacts/DirectoryArtifactReader.js +2 -1
- package/dist/artifacts/MachOSliceArtifactReader.js +9 -2
- package/dist/artifacts/NativeDmgArtifactReader.js +207 -77
- package/dist/artifacts/NativeDmgOwnership.js +109 -0
- package/dist/artifacts/SafeOutputTree.js +16 -2
- package/dist/artifacts/ZipArtifactReader.js +11 -4
- package/dist/artifacts/apple/AppleAssetCatalogAnalysis.js +4 -2
- package/dist/artifacts/apple/DylibResolutionReader.js +17 -7
- package/dist/artifacts/apple/KeyedArchiveReader.js +68 -42
- package/dist/artifacts/apple/MachoLoadCommandReader.js +36 -6
- package/dist/artifacts/extraction/ArtifactExtraction.js +104 -29
- package/dist/artifacts/inventory/ArtifactGraphConstruction.js +71 -66
- package/dist/artifacts/inventory/ArtifactInventory.js +0 -1
- package/dist/artifacts/inventory/classify.js +33 -14
- package/dist/artifacts/inventory/hashStableRootArtifact.js +37 -0
- package/dist/artifacts/inventory/reader.js +3 -3
- package/dist/artifacts/inventory/scanCanonical.js +64 -34
- package/dist/artifacts/inventory/scanReader.js +12 -20
- package/dist/artifacts/javascript/JavaScriptArtifactFiles.js +65 -27
- package/dist/browser/BrowserScenarioPartialObservation.js +106 -0
- package/dist/browser/CdpBrowserProvider.js +6 -6
- package/dist/browser/CdpCaptureEventHandlers.js +2 -4
- package/dist/browser/CdpCaptureEvents.js +0 -1
- package/dist/browser/CdpCaptureStorageFingerprints.js +3 -3
- package/dist/browser/CdpCaptureValues.js +20 -0
- package/dist/browser/CdpElectronInspection.js +2 -2
- package/dist/browser/CdpElectronProvider.js +4 -5
- package/dist/browser/CdpElectronScriptEvents.js +2 -8
- package/dist/browser/CdpElectronScripts.js +4 -5
- package/dist/browser/CdpPageCaptureScripts.js +2 -3
- package/dist/browser/CdpSafeMetadata.js +10 -10
- package/dist/browser/CdpWebMcpDiscovery.js +16 -13
- package/dist/browser/PlaywrightBrowserScenarioProvider.js +64 -49
- package/dist/browser/PlaywrightElectronActiveActions.js +2 -56
- package/dist/browser/PlaywrightElectronActiveProvider.js +10 -6
- package/dist/browser/PlaywrightScenarioArtifacts.js +1 -1
- package/dist/browser/PlaywrightScenarioBrowser.js +269 -66
- package/dist/browser/PlaywrightScenarioEvents.js +1 -1
- package/dist/browser/PlaywrightScenarioSession.js +41 -32
- package/dist/browser/WebSourceMapFetcher.js +32 -6
- package/dist/browser/assets/ScenarioScriptCapture.js +8 -12
- package/dist/browser/assets/ScriptCaptureAdapters.js +1 -1
- package/dist/browser/history/CaptureFailures.js +6 -2
- package/dist/browser/history/MitmproxyCaptureAdapter.js +4 -2
- package/dist/catalogIdentity.js +0 -1
- package/dist/cli/analysisViewCommands.js +36 -0
- package/dist/cli/artifactCommands.js +11 -12
- package/dist/cli/coreAnalysisCommands.js +3 -3
- package/dist/cli/coreBinaryCommands.js +37 -28
- package/dist/cli/coreNativeCommands.js +9 -10
- package/dist/cli/electronCommands.js +12 -13
- package/dist/cli/interactiveSetup.js +6 -6
- package/dist/cli/javascriptApplicationAnalysis.js +2 -12
- package/dist/cli/jsonOutput.js +3 -2
- package/dist/cli/managedCommands.js +7 -8
- package/dist/cli/nativeCallCommands.js +1 -2
- package/dist/cli/omittableDefaults.js +50 -0
- package/dist/cli/processCommands.js +3 -2
- package/dist/cli/setupCommands.js +16 -15
- package/dist/cli/streamedJsonOutput.js +83 -4
- package/dist/cli/utilityCommands.js +10 -12
- package/dist/cli.js +19 -8
- package/dist/cliBrowserScenarioCommands.js +2 -2
- package/dist/cliCommandNames.js +1 -0
- package/dist/cliJsonFile.js +179 -0
- package/dist/cliJsonInput.js +60 -33
- package/dist/cliObservationOptions.js +4 -0
- package/dist/cliOutput.js +0 -38
- package/dist/composition/auxiliaryAnalysisProviders.js +30 -25
- package/dist/composition/binary.js +9 -9
- package/dist/composition/browserScenario.js +2 -1
- package/dist/composition/directAnalysis.js +20 -14
- package/dist/composition/electronScenario.js +1 -1
- package/dist/composition/optionalObservationProviders.js +12 -7
- package/dist/config/environment.js +6 -0
- package/dist/config/ghidraStartupTimeout.js +4 -9
- package/dist/config/homeDirectory.js +12 -0
- package/dist/config/mcpResponseBudget.js +9 -1
- package/dist/config/parseConfig.js +7 -3
- package/dist/config/parsers.js +19 -22
- package/dist/contracts/analysisViewToolContracts.js +56 -0
- package/dist/contracts/applicationToolContracts.js +5 -4
- package/dist/contracts/artifactComparisonExample.js +7 -7
- package/dist/contracts/artifactToolContracts.js +1 -1
- package/dist/contracts/browserScenarioToolContracts.js +1 -1
- package/dist/contracts/browserToolContracts.js +19 -15
- package/dist/contracts/enhancedInputs.js +2 -2
- package/dist/contracts/enhancedToolContracts.js +4 -3
- package/dist/contracts/errorSchemas.js +3 -1
- package/dist/contracts/evm/evmToolContracts.js +1 -1
- package/dist/contracts/functionComparisonExample.js +8 -0
- package/dist/contracts/functionWorkflowToolContracts.js +1 -1
- package/dist/contracts/inputSchemaPresentation.js +181 -0
- package/dist/contracts/investigationExamples.js +4 -3
- package/dist/contracts/javascript/electronToolContracts.js +3 -2
- package/dist/contracts/javascript/javascriptApplicationWorkflowExamples.js +3 -22
- package/dist/contracts/javascript/javascriptExportShapeComparisonExample.js +248 -0
- package/dist/contracts/javascript/javascriptRuntimeObservationToolContracts.js +1 -1
- package/dist/contracts/javascript/javascriptRuntimeReconciliationExample.js +8 -7
- package/dist/contracts/managed/managedToolContracts.js +8 -12
- package/dist/contracts/managed/managedWorkflowToolContracts.js +1 -1
- package/dist/contracts/mobileApplicationGraphExamples.js +8 -8
- package/dist/contracts/native/binaryDiagnosticsToolContracts.js +1 -1
- package/dist/contracts/native/nativeToolContracts.js +2 -2
- package/dist/contracts/officialToolContracts.js +2 -1
- package/dist/contracts/promptContracts.js +2 -2
- package/dist/contracts/providerSelection.js +1 -1
- package/dist/contracts/sessionLifecycleInputs.js +4 -3
- package/dist/contracts/sessionStatusContract.js +3 -2
- package/dist/contracts/sessionToolContracts.js +17 -4
- package/dist/contracts/sessionToolSchemas.js +4 -16
- package/dist/contracts/toolContracts.js +2 -0
- package/dist/contracts/toolEffects.js +1 -0
- package/dist/contracts/toolOutputSchemaGroups.js +138 -94
- package/dist/contracts/toolOutputSchemaPrimitives.js +13 -26
- package/dist/contracts/toolSchemaMetadata.js +18 -69
- package/dist/contracts/webNetworkCaptureToolContracts.js +1 -1
- package/dist/contracts/webRuntimeToolContracts.js +1 -1
- package/dist/contracts/webScriptToolContracts.js +1 -1
- package/dist/doctorRuntime.js +7 -5
- package/dist/domain/analysisErrorBase.js +5 -0
- package/dist/domain/analysisErrorCore.js +3 -0
- package/dist/domain/analysisErrorPresentation.js +22 -5
- package/dist/domain/analysisErrorProjection.js +24 -5
- package/dist/domain/analysisSnapshot.js +31 -31
- package/dist/domain/analysisView/analysisView.js +241 -0
- package/dist/domain/analysisView/analysisViewCoverage.js +19 -0
- package/dist/domain/analysisView/binaryLayoutView.js +159 -0
- package/dist/domain/analysisView/javascriptApplicationView.js +238 -0
- package/dist/domain/android/androidApplication.js +1 -1
- package/dist/domain/android/androidPartialObservation.js +36 -0
- package/dist/domain/apple/appleApplication.js +1 -1
- package/dist/domain/apple/dylibResolution.js +10 -3
- package/dist/domain/apple/interfaceBuilderGraph.js +0 -1
- package/dist/domain/apple/keyedArchive.js +26 -2
- package/dist/domain/artifactComparison.js +15 -6
- package/dist/domain/artifactGraph.js +17 -4
- package/dist/domain/artifactIdentity.js +8 -8
- package/dist/domain/artifactInspection.js +8 -8
- package/dist/domain/artifactInventoryEvidence.js +9 -16
- package/dist/domain/artifactOperationError.js +3 -3
- package/dist/domain/artifactPartialObservation.js +1 -0
- package/dist/domain/artifactPathSyntax.js +49 -0
- package/dist/domain/binaryTarget.js +39 -13
- package/dist/domain/browserCaptureComparison.js +13 -49
- package/dist/domain/browserCompleteness.js +3 -2
- package/dist/domain/browserNetworkEvidence.js +10 -4
- package/dist/domain/browserObservation.js +0 -1
- package/dist/domain/browserObservationSchemas.js +14 -3
- package/dist/domain/browserScenario.js +0 -1
- package/dist/domain/browserScenarioCapture.js +1 -2
- package/dist/domain/browserScenarioCaptureValues.js +2 -2
- package/dist/domain/browserScenarioDiff.js +0 -2
- package/dist/domain/browserScenarioDiffEvidence.js +0 -12
- package/dist/domain/browserScenarioDiffValues.js +2 -2
- package/dist/domain/browserScenarioNormalization.js +3 -3
- package/dist/domain/browserScenarioValues.js +6 -6
- package/dist/domain/callPath.js +15 -18
- package/dist/domain/callPathSchemas.js +2 -2
- package/dist/domain/canonicalDigest.js +7 -1
- package/dist/domain/canonicalOrdering.js +1 -13
- package/dist/domain/changedBehavior.js +5 -6
- package/dist/domain/comparisonSemantics.js +0 -5
- package/dist/domain/completionLedgerGeneration.js +2 -1
- package/dist/domain/configurationErrors.js +12 -0
- package/dist/domain/conformancePackage.js +4 -3
- package/dist/domain/digests.js +0 -3
- package/dist/domain/evidence.js +19 -40
- package/dist/domain/evidenceBundle.js +58 -42
- package/dist/domain/evidenceCompletionLedger.js +2 -1
- package/dist/domain/firmware/firmwareAnalysis.js +4 -3
- package/dist/domain/functionComparison.js +6 -6
- package/dist/domain/functionComparisonDimensions.js +120 -87
- package/dist/domain/functionComparisonNormalization.js +26 -36
- package/dist/domain/functionComparisonResults.js +3 -6
- package/dist/domain/functionComparisonSchemas.js +2 -8
- package/dist/domain/functionDossierEvidence.js +4 -38
- package/dist/domain/hopperValues.js +11 -15
- package/dist/domain/javascript/electronActiveObservation.js +29 -71
- package/dist/domain/javascript/electronObservation.js +14 -3
- package/dist/domain/javascript/electronStaticAnalysisBrowser.js +12 -11
- package/dist/domain/javascript/electronStaticAnalysisIpc.js +11 -2
- package/dist/domain/javascript/electronStaticAnalysisNative.js +7 -4
- package/dist/domain/javascript/electronStaticAnalysisValues.js +8 -4
- package/dist/domain/javascript/javascriptApplicationAnalysis.js +3 -1
- package/dist/domain/javascript/javascriptApplicationChangeGraph.js +12 -8
- package/dist/domain/javascript/javascriptApplicationEvidenceSchemas.js +6 -0
- package/dist/domain/javascript/javascriptApplicationGraph.js +41 -16
- package/dist/domain/javascript/javascriptApplicationGraphSchemas.js +9 -2
- package/dist/domain/javascript/javascriptApplicationVersionComparison.js +4 -4
- package/dist/domain/javascript/javascriptApplicationVersionComparisonSchemas.js +37 -22
- package/dist/domain/javascript/javascriptApplicationVersionItems.js +50 -36
- package/dist/domain/javascript/javascriptApplicationVersionKeys.js +9 -8
- package/dist/domain/javascript/javascriptAstFingerprint.js +2 -2
- package/dist/domain/javascript/javascriptAstValues.js +22 -0
- package/dist/{application/javascript/JavaScriptReturnShapeProjection.js → domain/javascript/javascriptExportReturnShapeProjection.js} +4 -4
- package/dist/domain/javascript/javascriptExportShapeComparison.js +10 -3
- package/dist/domain/javascript/javascriptExportShapeComparisonIdentity.js +6 -1
- package/dist/domain/javascript/javascriptExportShapeComparisonSchemas.js +58 -22
- package/dist/domain/javascript/javascriptExportShapeSelection.js +7 -7
- package/dist/domain/javascript/javascriptExportShapeVariants.js +70 -16
- package/dist/domain/javascript/javascriptFeatureSeed.js +25 -3
- package/dist/domain/javascript/javascriptFeatureTrace.js +7 -6
- package/dist/domain/javascript/javascriptFeatureTraceSchemas.js +17 -9
- package/dist/domain/javascript/javascriptFeatureTraversal.js +4 -5
- package/dist/domain/javascript/javascriptNativeHandoff.js +7 -7
- package/dist/domain/javascript/javascriptRuntimeLoadState.js +0 -1
- package/dist/domain/javascript/javascriptRuntimeObservation.js +18 -7
- package/dist/domain/javascript/javascriptRuntimeReconciliation.js +12 -6
- package/dist/domain/javascript/javascriptRuntimeReconciliationActive.js +9 -8
- package/dist/domain/javascript/javascriptRuntimeReconciliationCaptureParsing.js +212 -0
- package/dist/domain/javascript/javascriptRuntimeReconciliationGraph.js +5 -4
- package/dist/domain/javascript/javascriptRuntimeReconciliationInputValidation.js +28 -0
- package/dist/domain/javascript/javascriptRuntimeReconciliationMatching.js +6 -6
- package/dist/domain/javascript/javascriptRuntimeReconciliationParsing.js +12 -222
- package/dist/domain/javascript/javascriptRuntimeReconciliationResult.js +2 -2
- package/dist/domain/javascript/javascriptRuntimeReconciliationRuntime.js +15 -4
- package/dist/domain/javascript/javascriptRuntimeReconciliationSchemas.js +2 -2
- package/dist/domain/javascript/javascriptRuntimeStaticCandidates.js +7 -7
- package/dist/domain/javascript/javascriptSemanticAnalysis.js +209 -11
- package/dist/domain/javascript/javascriptSemanticAsyncEffects.js +2 -1
- package/dist/domain/javascript/javascriptSemanticCallResolution.js +9 -7
- package/dist/domain/javascript/javascriptSemanticCalls.js +2 -1
- package/dist/domain/javascript/javascriptSemanticChildProcesses.js +4 -3
- package/dist/domain/javascript/javascriptSemanticCoverage.js +20 -0
- package/dist/domain/javascript/javascriptSemanticDataEffectHelpers.js +7 -9
- package/dist/domain/javascript/javascriptSemanticDataEffects.js +4 -11
- package/dist/domain/javascript/javascriptSemanticFingerprints.js +2 -2
- package/dist/domain/javascript/javascriptSemanticGraph.js +220 -71
- package/dist/domain/javascript/javascriptSemanticGraphSchemas.js +19 -1
- package/dist/domain/javascript/javascriptSemanticIr.js +0 -4
- package/dist/domain/javascript/javascriptSemanticIterationSources.js +106 -0
- package/dist/domain/javascript/javascriptSemanticMemberMutations.js +515 -74
- package/dist/domain/javascript/javascriptSemanticMutationInitializers.js +190 -0
- package/dist/domain/javascript/javascriptSemanticMutationValues.js +44 -36
- package/dist/domain/javascript/javascriptSemanticObjects.js +79 -42
- package/dist/domain/javascript/javascriptSemanticPrimitives.js +8 -14
- package/dist/domain/javascript/javascriptSemanticProjection.js +21 -16
- package/dist/domain/javascript/javascriptSemanticPromises.js +16 -21
- package/dist/domain/javascript/javascriptSemanticPropertyPaths.js +23 -0
- package/dist/domain/javascript/javascriptSemanticProvenance.js +3 -3
- package/dist/domain/javascript/javascriptSemanticQuery.js +8 -2
- package/dist/domain/javascript/javascriptSemanticQueryIdentity.js +3 -2
- package/dist/domain/javascript/javascriptSemanticQuerySchemas.js +8 -9
- package/dist/domain/javascript/javascriptSemanticRequireOrigin.js +16 -10
- package/dist/domain/javascript/javascriptSemanticResourceLimits.js +1 -1
- package/dist/domain/javascript/javascriptSemanticResources.js +1 -1
- package/dist/domain/javascript/javascriptSemanticReturns.js +55 -44
- package/dist/domain/javascript/javascriptSemanticSlots.js +72 -0
- package/dist/domain/javascript/javascriptSemanticTraversal.js +6 -1
- package/dist/domain/javascript/javascriptSemanticValues.js +180 -76
- package/dist/domain/javascript/javascriptSourceMapPaths.js +114 -0
- package/dist/domain/javascript/javascriptSourceParser.js +34 -9
- package/dist/domain/javascript/javascriptStaticAnalysisBundler.js +5 -6
- package/dist/domain/javascript/javascriptStaticAnalysisCalls.js +2 -1
- package/dist/domain/javascript/javascriptStaticAnalysisHelpers.js +26 -16
- package/dist/domain/javascript/sourceToBundleComparison.js +19 -8
- package/dist/domain/javascript/sourceToBundleSignals.js +53 -25
- package/dist/domain/jsonSerialization.js +109 -55
- package/dist/domain/jsonShape.js +46 -19
- package/dist/domain/localPath.js +10 -4
- package/dist/domain/managed/managedApplicationGraph.js +10 -6
- package/dist/domain/managed/managedApplicationGraphNodes.js +82 -57
- package/dist/domain/managed/managedArtifact.js +6 -4
- package/dist/domain/managed/managedMemberComparison.js +2 -9
- package/dist/domain/managed/managedMemberComparisonMatch.js +6 -7
- package/dist/domain/managed/managedNativeVerification.js +0 -2
- package/dist/domain/managed/managedNativeVerificationMatch.js +9 -3
- package/dist/domain/native/binaryLayout.js +2 -3
- package/dist/domain/native/nativeApiBoundary.js +1 -1
- package/dist/domain/native/nativeCallObservation.js +3 -3
- package/dist/domain/native/nativeInstruction.js +7 -0
- package/dist/domain/native/nativeValueFlow.js +5 -11
- package/dist/domain/native/objcSwiftMetadata.js +15 -17
- package/dist/domain/native/recordedCrash.js +2 -3
- package/dist/domain/offsetDateTime.js +17 -0
- package/dist/domain/process/processCapture.js +22 -20
- package/dist/domain/process/processCaptureCoverage.js +70 -0
- package/dist/domain/process/processCaptureExample.js +45 -1
- package/dist/domain/process/processCaptureParsing.js +1 -34
- package/dist/domain/process/processCaptureValidation.js +82 -13
- package/dist/domain/process/processComparison.js +39 -43
- package/dist/domain/process/processObservation.js +10 -2
- package/dist/domain/process/processScenario.js +24 -2
- package/dist/domain/process/processTraceComparison.js +0 -2
- package/dist/domain/process/processTraceDimensionProjection.js +1 -1
- package/dist/domain/process/processTraceEvaluation.js +19 -15
- package/dist/domain/process/processTraceSpecification.js +4 -7
- package/dist/domain/providerAdapterError.js +2 -0
- package/dist/domain/providerCleanupError.js +6 -2
- package/dist/domain/reconstructionCoverage.js +7 -3
- package/dist/domain/reconstructionObligationLedgerSchemas.js +2 -1
- package/dist/domain/reconstructionReadinessSchemas.js +2 -1
- package/dist/domain/reconstructionUnknowns.js +4 -3
- package/dist/domain/reconstructionVerification.js +6 -5
- package/dist/domain/reconstructionVerificationSchemas.js +2 -1
- package/dist/domain/referenceSourceGraph.js +27 -28
- package/dist/domain/referenceSourceImportParsing.js +34 -45
- package/dist/domain/residualUnknown.js +3 -2
- package/dist/domain/staticRuntimeCorrelation.js +4 -3
- package/dist/domain/stringPatterns.js +6 -0
- package/dist/domain/swiftSymbolClassification.js +66 -0
- package/dist/domain/symbolAnalysis.js +83 -20
- package/dist/domain/unicodeCodePointOrder.js +6 -0
- package/dist/domain/webBundleAnalyzerInspection.js +9 -1
- package/dist/domain/webCaptureDiff.js +71 -30
- package/dist/domain/webCaptureDiffSchemas.js +8 -11
- package/dist/domain/webEventListeners.js +3 -2
- package/dist/domain/webExecution.js +3 -2
- package/dist/domain/webInventory.js +3 -2
- package/dist/domain/webMcpDiscovery.js +4 -3
- package/dist/domain/webRuntime.js +0 -2
- package/dist/domain/webScriptExport.js +2 -2
- package/dist/dotnet/ManagedArtifactInspector.js +2 -19
- package/dist/dotnet/ManagedMemberInspector.js +12 -18
- package/dist/dotnet/ManagedMemberInspectorCore.js +47 -44
- package/dist/dotnet/ManagedMemberInstructionDecoder.js +1 -2
- package/dist/dotnet/ManagedMemberRows.js +75 -62
- package/dist/dotnet/ManagedMetadataInventory.js +16 -22
- package/dist/dotnet/ManagedMethodBodyReader.js +4 -0
- package/dist/dotnet/ManagedNativeBoundaryHelpers.js +109 -94
- package/dist/dotnet/ManagedNativeBoundaryInspector.js +12 -21
- package/dist/dotnet/ManagedReaderFailure.js +16 -0
- package/dist/dotnet/ManagedStaticProvider.js +13 -12
- package/dist/dotnet/ManagedStaticProviderMetadata.js +1 -4
- package/dist/evaluation/AgentEvaluationFixtures.js +250 -0
- package/dist/evaluation/AgentEvaluationReport.js +28 -0
- package/dist/evaluation/CodexAgentEval.js +12 -8
- package/dist/evaluation/KnownAnswerEvaluation.js +281 -0
- package/dist/evm/EvmoleInterfaceProvider.js +2 -1
- package/dist/filesystem/RegularFile.js +41 -0
- package/dist/firmware/FirmwareCommand.js +9 -5
- package/dist/firmware/FirmwareProvider.js +4 -4
- package/dist/generatedPackageMetadata.js +2 -2
- package/dist/ghidra/GhidraAnalysisProfile.js +3 -6
- package/dist/ghidra/GhidraClient.js +105 -36
- package/dist/ghidra/GhidraClientStartup.js +0 -2
- package/dist/ghidra/GhidraDoctor.js +6 -5
- package/dist/ghidra/GhidraFunctionValues.js +3 -5
- package/dist/ghidra/GhidraInstallation.js +151 -22
- package/dist/ghidra/GhidraJavaLaunch.js +6 -2
- package/dist/ghidra/GhidraLauncher.js +58 -26
- package/dist/ghidra/GhidraProvider.js +6 -2
- package/dist/ghidra/GhidraProviderCapabilities.js +6 -0
- package/dist/ghidra/GhidraProviderClient.js +13 -3
- package/dist/ghidra/GhidraSessionError.js +2 -0
- package/dist/ghidra/GhidraSessionRoot.js +39 -0
- package/dist/ghidra/extensions/GhidraExtensions.js +17 -10
- package/dist/ghidra/extensions/nativeaot/NativeAotAdapter.js +8 -2
- package/dist/hopper/BridgeLauncher.js +34 -45
- package/dist/hopper/HopperAnalysisProfile.js +3 -8
- package/dist/hopper/HopperCleanup.js +56 -27
- package/dist/hopper/HopperClient.js +86 -65
- package/dist/hopper/HopperMachOImage.js +3 -2
- package/dist/hopper/HopperProvider.js +16 -18
- package/dist/hopper/HopperRegexSearch.js +3 -6
- package/dist/hopper/HopperTargetLease.js +132 -49
- package/dist/hopper/LinuxPrivateDisplayProbe.js +6 -0
- package/dist/ida/IdaConfiguration.js +8 -3
- package/dist/ida/IdaInput.js +1 -7
- package/dist/ida/IdaMcpConnection.js +8 -4
- package/dist/ida/IdaOperationRunner.js +5 -3
- package/dist/ida/IdaProvider.js +8 -12
- package/dist/ida/IdaSessionClient.js +24 -20
- package/dist/ida/IdaWorkspace.js +12 -13
- package/dist/inspector/JavaScriptRuntimeScope.js +9 -5
- package/dist/inspector/V8InspectorCaptureProjection.js +47 -14
- package/dist/inspector/V8InspectorProvider.js +97 -35
- package/dist/javascript/recovery/WakaruCommand.js +7 -2
- package/dist/javascript/recovery/WakaruExecution.js +5 -2
- package/dist/main/shutdown.js +81 -29
- package/dist/main/startup.js +9 -2
- package/dist/main/transport.js +23 -3
- package/dist/main.js +11 -18
- package/dist/native/AppleMachoSelection.js +16 -6
- package/dist/native/AppleObjcDispatchFacets.js +3 -3
- package/dist/native/AppleObjcProperties.js +17 -7
- package/dist/native/CommandRunner.js +9 -7
- package/dist/native/LldbCallTracer.js +249 -77
- package/dist/native/NativeMacOSProvider.js +32 -17
- package/dist/native/NativeMacOSProviderMetadata.js +1 -2
- package/dist/native/NativeUiHelperRuntime.js +11 -2
- package/dist/native/NativeUiObservation.js +2 -2
- package/dist/native/pwntools/PwntoolsDecoder.js +2 -1
- package/dist/process/DarwinProcessRunTokenReader.js +16 -2
- package/dist/process/ExecFileOutput.js +88 -6
- package/dist/process/PrivateRuntimeRoot.js +10 -5
- package/dist/process/ProcessOwnership.js +1 -4
- package/dist/process/ProcessOwnershipObservation.js +18 -16
- package/dist/process/ProviderProcess.js +1 -3
- package/dist/process/capture/FilesystemSnapshot.js +131 -24
- package/dist/process/capture/ProcessCaptureError.js +13 -0
- package/dist/process/capture/ProcessCaptureLifecycle.js +148 -74
- package/dist/process/capture/ProcessFilesystemEffects.js +51 -6
- package/dist/process/capture/ProcessHarness.js +16 -33
- package/dist/process/capture/ProcessNormalization.js +20 -2
- package/dist/process/capture/ProcessSampling.js +25 -2
- package/dist/process/capture/TerminalRenderer.js +14 -0
- package/dist/process/snapshotEnvironment.js +14 -0
- package/dist/server/EvidenceMcpServer.js +25 -14
- package/dist/server/analysisAdmission.js +8 -0
- package/dist/server/createServer.js +71 -59
- package/dist/server/mcpClientMetadata.js +12 -5
- package/dist/server/promptCompletion.js +3 -8
- package/dist/server/registerAnalysisViewTool.js +15 -0
- package/dist/server/registerAndroidTools.js +2 -3
- package/dist/server/registerApplicationTools/compareExportShapes.js +6 -6
- package/dist/server/registerApplicationTools/compareSourceToBundle.js +4 -5
- package/dist/server/registerApplicationTools/compareVersions.js +4 -5
- package/dist/server/registerApplicationTools/coverage.js +1 -2
- package/dist/server/registerApplicationTools/helpers.js +4 -4
- package/dist/server/registerApplicationTools/obligationLedger.js +4 -5
- package/dist/server/registerApplicationTools/projectMobileApplicationGraph.js +3 -4
- package/dist/server/registerApplicationTools/traceFeature.js +4 -5
- package/dist/server/registerApplicationTools/traceSemantics.js +4 -5
- package/dist/server/registerArtifactComparisonTool.js +4 -5
- package/dist/server/registerArtifactTools.js +2 -2
- package/dist/server/registerBinaryDiagnosticsTools.js +2 -3
- package/dist/server/registerBrowserScenarioTool.js +3 -4
- package/dist/server/registerBrowserTools.js +13 -16
- package/dist/server/registerBundleComparisonTool.js +5 -6
- package/dist/server/registerCloseLifecycleTool.js +8 -7
- package/dist/server/registerElectronTools.js +10 -13
- package/dist/server/registerEnhancedTools.js +82 -77
- package/dist/server/registerEvidenceTools.js +54 -47
- package/dist/server/registerEvmTools.js +2 -3
- package/dist/server/registerFirmwareTools.js +2 -3
- package/dist/server/registerFunctionComparisonTool.js +7 -8
- package/dist/server/registerInvestigationTools.js +14 -15
- package/dist/server/registerJavaScriptRecoveryTool.js +2 -3
- package/dist/server/registerJavaScriptRuntimeObservationTools.js +6 -6
- package/dist/server/registerManagedTools.js +7 -4
- package/dist/server/registerManagedWorkflowTools/compareManagedMembers.js +5 -6
- package/dist/server/registerManagedWorkflowTools/importManagedReconstruction.js +4 -5
- package/dist/server/registerManagedWorkflowTools/projectManagedApplicationGraph.js +6 -7
- package/dist/server/registerManagedWorkflowTools/verifyManagedNativeBoundaries.js +6 -7
- package/dist/server/registerOfficialTools.js +32 -41
- package/dist/server/registerProcessComparisonTool.js +8 -8
- package/dist/server/registerRecordedCrashTools.js +2 -3
- package/dist/server/registerSessionRecordTools.js +15 -19
- package/dist/server/registerSessionStatusTool.js +3 -4
- package/dist/server/registerSessionTools.js +19 -19
- package/dist/server/registerWebModuleTool.js +2 -3
- package/dist/server/registerWebNetworkCaptureTool.js +2 -3
- package/dist/server/registerWebRuntimeTools.js +4 -5
- package/dist/server/registerWebScriptTool.js +2 -3
- package/dist/server/registerWebSourceLocationTool.js +2 -3
- package/dist/server/toolResult.js +66 -94
- package/dist/server/toolResultEncoding.js +11 -10
- package/dist/windows/WindowsNativeLoader.js +1 -0
- package/dist/windows/WindowsOwnedProcess.js +60 -15
- package/dist/windows/WindowsPrivateRuntime.js +7 -8
- package/native/windows/README.md +3 -1
- package/native/windows/build/manifest.json +2 -2
- package/native/windows/build/rea-windows-x64.node +0 -0
- package/package.json +42 -30
- package/scripts/rea.mjs +3 -6
- package/skills/reverse-engineer-anything/SKILL.md +14 -13
- package/skills/reverse-engineer-anything/references/android-applications.md +6 -3
- package/skills/reverse-engineer-anything/references/evidence-workflows.md +8 -4
- package/skills/reverse-engineer-anything/references/javascript-applications.md +16 -6
- package/skills/reverse-engineer-anything/references/native-and-artifacts.md +18 -0
- package/dist/artifacts/inventory/policy.js +0 -2
- package/dist/config.js +0 -1
- package/dist/contracts/browserCaptureToolInputSchema.js +0 -43
- package/dist/contracts/process/processCaptureExample.js +0 -2
- package/dist/contracts/toolOutputSchemas.js +0 -2
- package/dist/domain/managed/managedApplicationGraphNodeCoverage.js +0 -6
- package/dist/main/reload.js +0 -12
- package/dist/main/state.js +0 -3
- package/dist/server/registerNativeTools.js +0 -6
- package/dist/server/sessionToolPolicies.js +0 -2
|
@@ -1,107 +1,408 @@
|
|
|
1
1
|
import * as t from "@babel/types";
|
|
2
2
|
import { resolveSemanticBindingState, } from "./javascriptSemanticState.js";
|
|
3
|
-
import { evaluateSemanticBinding } from "./javascriptSemanticValues.js";
|
|
3
|
+
import { clearSemanticPrimitiveBindingValues, evaluateSemanticBinding, evaluateSemanticExpression, } from "./javascriptSemanticValues.js";
|
|
4
|
+
import { semanticContainer, semanticSlotAtPath, } from "./javascriptSemanticSlots.js";
|
|
5
|
+
import { semanticIterationSources } from "./javascriptSemanticIterationSources.js";
|
|
6
|
+
import { semanticMutationInitializers } from "./javascriptSemanticMutationInitializers.js";
|
|
7
|
+
import { semanticArrayIndex, semanticPropertyPathKeyMatches, } from "./javascriptSemanticPropertyPaths.js";
|
|
8
|
+
import { compareUnicodeCodePoints } from "../unicodeCodePointOrder.js";
|
|
4
9
|
import { traverseJavaScriptAst } from "./javascriptSemanticTraversal.js";
|
|
5
|
-
import { semanticStaticPropertyKey,
|
|
6
|
-
/**
|
|
10
|
+
import { semanticStaticPropertyKey, unwrapJavaScriptExpression, } from "./javascriptAstValues.js";
|
|
11
|
+
/** Preserve uncertainty from property writes and references exposed to calls. */
|
|
7
12
|
export const collectSemanticMemberMutations = (program, state) => {
|
|
8
|
-
const
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
if (
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
13
|
+
const parents = state.parentsByNode;
|
|
14
|
+
traverseJavaScriptAst(program, {
|
|
15
|
+
enter: (node, parent) => {
|
|
16
|
+
if (parent !== null)
|
|
17
|
+
parents.set(node, parent);
|
|
18
|
+
},
|
|
19
|
+
});
|
|
20
|
+
const recordedEffects = new Set();
|
|
21
|
+
const selections = new Map();
|
|
22
|
+
let arrayIterationUnknown = false;
|
|
23
|
+
const pendingReferences = [];
|
|
24
|
+
const iterableReferences = [];
|
|
25
|
+
const iterableReferenceKeys = new WeakMap();
|
|
26
|
+
const deferIterable = (reference) => {
|
|
27
|
+
const keys = iterableReferenceKeys.get(reference.node) ?? new Set();
|
|
28
|
+
const key = JSON.stringify([
|
|
29
|
+
reference.projection,
|
|
30
|
+
reference.path,
|
|
31
|
+
reference.fallbackPath,
|
|
32
|
+
reference.effect,
|
|
33
|
+
reference.mutation?.start,
|
|
34
|
+
reference.mutation?.end,
|
|
35
|
+
reference.originAt?.start,
|
|
36
|
+
reference.originAt?.end,
|
|
37
|
+
reference.iterationOnly,
|
|
38
|
+
reference.requiredSources?.map((source) => [
|
|
39
|
+
source.node.start,
|
|
40
|
+
source.node.end,
|
|
41
|
+
source.projection,
|
|
42
|
+
]),
|
|
43
|
+
reference.fallbackSources?.map((source) => [
|
|
44
|
+
source.node.start,
|
|
45
|
+
source.node.end,
|
|
46
|
+
source.projection,
|
|
47
|
+
]),
|
|
48
|
+
[...reference.bindings].sort(compareUnicodeCodePoints),
|
|
49
|
+
]);
|
|
50
|
+
if (keys.has(key))
|
|
20
51
|
return;
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
52
|
+
keys.add(key);
|
|
53
|
+
iterableReferenceKeys.set(reference.node, keys);
|
|
54
|
+
iterableReferences.push(reference);
|
|
55
|
+
};
|
|
56
|
+
const markValue = (node, path, bindings, effect = "write", mutation, originAt = mutation) => {
|
|
57
|
+
const pending = [{ node, path, bindings, originAt }];
|
|
58
|
+
while (pending.length > 0) {
|
|
59
|
+
const current = pending.pop();
|
|
60
|
+
if (current === undefined)
|
|
61
|
+
break;
|
|
62
|
+
const expression = unwrapJavaScriptExpression(current.node).node;
|
|
63
|
+
if (t.isIdentifier(expression)) {
|
|
64
|
+
const binding = resolveSemanticBindingState(state, expression, expression.name);
|
|
65
|
+
if (binding === undefined) {
|
|
66
|
+
if ((expression.name === "Array" &&
|
|
67
|
+
(current.path[0] === "prototype" || current.path[0] === null)) ||
|
|
68
|
+
(["globalThis", "global", "window", "self"].includes(expression.name) &&
|
|
69
|
+
(current.path[0] === "Array" || current.path[0] === null) &&
|
|
70
|
+
(current.path[1] === "prototype" || current.path[1] === null)))
|
|
71
|
+
arrayIterationUnknown = true;
|
|
72
|
+
continue;
|
|
73
|
+
}
|
|
74
|
+
// An alias restored from a saved reference can revisit the same binding
|
|
75
|
+
// at an earlier capture. Only a repeated lifetime closes a cycle.
|
|
76
|
+
const lifetime = JSON.stringify([
|
|
77
|
+
binding.bindingId,
|
|
78
|
+
current.originAt?.start,
|
|
79
|
+
current.originAt?.end,
|
|
80
|
+
]);
|
|
81
|
+
if (current.bindings.has(lifetime))
|
|
82
|
+
continue;
|
|
83
|
+
// Union compatible copied-slot selections at each binding. Carrying every
|
|
84
|
+
// combination of exclusions through branch diamonds is exponential.
|
|
85
|
+
const selectorIndex = current.path.findIndex((key) => key !== null && typeof key === "object");
|
|
86
|
+
let path = current.path;
|
|
87
|
+
const selector = path[selectorIndex];
|
|
88
|
+
if (selector !== null && typeof selector === "object") {
|
|
89
|
+
const selectionIdentity = JSON.stringify([
|
|
90
|
+
binding.bindingId,
|
|
91
|
+
effect,
|
|
92
|
+
path.map((key, index) => index === selectorIndex
|
|
93
|
+
? { startIndex: selector.startIndex }
|
|
94
|
+
: key),
|
|
95
|
+
mutation?.start,
|
|
96
|
+
mutation?.end,
|
|
97
|
+
current.originAt?.start,
|
|
98
|
+
current.originAt?.end,
|
|
99
|
+
]);
|
|
100
|
+
const previous = selections.get(selectionIdentity);
|
|
101
|
+
const excludedKeys = previous === undefined
|
|
102
|
+
? selector.excludedKeys
|
|
103
|
+
: previous.filter((key) => selector.excludedKeys.includes(key));
|
|
104
|
+
if (previous !== undefined && excludedKeys.length === previous.length)
|
|
105
|
+
continue;
|
|
106
|
+
selections.set(selectionIdentity, excludedKeys);
|
|
107
|
+
path = path.map((key, index) => index === selectorIndex ? { ...selector, excludedKeys } : key);
|
|
108
|
+
}
|
|
109
|
+
const identity = JSON.stringify([
|
|
110
|
+
binding.bindingId,
|
|
111
|
+
effect,
|
|
112
|
+
path,
|
|
113
|
+
mutation?.start,
|
|
114
|
+
mutation?.end,
|
|
115
|
+
current.originAt?.start,
|
|
116
|
+
current.originAt?.end,
|
|
117
|
+
]);
|
|
118
|
+
if (recordedEffects.has(identity))
|
|
119
|
+
continue;
|
|
120
|
+
const value = effect === "write"
|
|
121
|
+
? evaluateSemanticBinding(binding, state)
|
|
122
|
+
: undefined;
|
|
123
|
+
const primitiveWrite = value?.status === "literal" || value?.status === "union";
|
|
124
|
+
recordedEffects.add(identity);
|
|
125
|
+
const nested = new Set([...current.bindings, lifetime]);
|
|
126
|
+
const origins = current.originAt === undefined
|
|
127
|
+
? binding
|
|
128
|
+
: semanticMutationInitializers(binding, current.originAt, parents);
|
|
129
|
+
if (!primitiveWrite) {
|
|
130
|
+
if (effect === "escape")
|
|
131
|
+
binding.escapedPaths.push({ path, node: mutation });
|
|
132
|
+
else
|
|
133
|
+
binding.mutatedPaths.push(path);
|
|
134
|
+
clearSemanticPrimitiveBindingValues(state);
|
|
135
|
+
for (const initializer of origins.initializers)
|
|
136
|
+
pending.push({
|
|
137
|
+
node: initializer.node,
|
|
138
|
+
path: [...initializer.projection, ...path],
|
|
139
|
+
bindings: nested,
|
|
140
|
+
originAt: initializer.node,
|
|
141
|
+
});
|
|
142
|
+
}
|
|
143
|
+
for (const initializer of origins.referenceInitializers) {
|
|
144
|
+
const copiedPath = copiedReferencePath(initializer, path, effect);
|
|
145
|
+
if (copiedPath === null)
|
|
146
|
+
continue;
|
|
147
|
+
pendingReferences.push({
|
|
148
|
+
initializer,
|
|
149
|
+
path: copiedPath,
|
|
150
|
+
bindings: nested,
|
|
151
|
+
effect,
|
|
152
|
+
originAt: initializer.node,
|
|
153
|
+
...(mutation === undefined ? {} : { mutation }),
|
|
154
|
+
});
|
|
155
|
+
}
|
|
156
|
+
}
|
|
157
|
+
else if (t.isMemberExpression(expression) ||
|
|
158
|
+
t.isOptionalMemberExpression(expression)) {
|
|
159
|
+
pending.push({
|
|
160
|
+
node: expression.object,
|
|
161
|
+
path: [
|
|
162
|
+
semanticStaticPropertyKey(expression.property, expression.computed),
|
|
163
|
+
...current.path,
|
|
164
|
+
],
|
|
165
|
+
bindings: current.bindings,
|
|
166
|
+
originAt: current.originAt,
|
|
167
|
+
});
|
|
168
|
+
}
|
|
169
|
+
else {
|
|
170
|
+
if (t.isArrayExpression(expression) &&
|
|
171
|
+
((current.path[0] === "__proto__" &&
|
|
172
|
+
(effect === "escape" || current.path.length > 1)) ||
|
|
173
|
+
(current.path[0] === "constructor" &&
|
|
174
|
+
current.path[1] === "prototype")))
|
|
175
|
+
arrayIterationUnknown = true;
|
|
176
|
+
for (const value of referencedValues(expression, current.path, effect)) {
|
|
177
|
+
if (value.iterableFallbackPath !== undefined)
|
|
178
|
+
deferIterable({
|
|
179
|
+
node: value.node,
|
|
180
|
+
projection: [],
|
|
181
|
+
path: value.path,
|
|
182
|
+
fallbackPath: value.iterableFallbackPath,
|
|
183
|
+
bindings: current.bindings,
|
|
184
|
+
effect,
|
|
185
|
+
originAt: current.originAt,
|
|
186
|
+
...(mutation === undefined ? {} : { mutation }),
|
|
187
|
+
});
|
|
188
|
+
else
|
|
189
|
+
pending.push({
|
|
190
|
+
...value,
|
|
191
|
+
bindings: current.bindings,
|
|
192
|
+
originAt: current.originAt,
|
|
193
|
+
});
|
|
194
|
+
}
|
|
29
195
|
}
|
|
30
|
-
markValue(current, [...members.reverse(), ...path], bindings);
|
|
31
|
-
return;
|
|
32
196
|
}
|
|
33
|
-
for (const value of referencedValues(node, path))
|
|
34
|
-
markValue(value.node, value.path, bindings);
|
|
35
197
|
};
|
|
36
|
-
const
|
|
198
|
+
const markEscaped = (node, mutation, path = []) => markValue(node, path, new Set(), "escape", mutation);
|
|
199
|
+
const markReceiver = (callee, mutation) => {
|
|
200
|
+
const expression = unwrapJavaScriptExpression(callee).node;
|
|
201
|
+
if (t.isMemberExpression(expression) ||
|
|
202
|
+
t.isOptionalMemberExpression(expression))
|
|
203
|
+
markEscaped(expression.object, mutation);
|
|
204
|
+
};
|
|
205
|
+
const markTarget = (node, mutation) => {
|
|
37
206
|
if (t.isMemberExpression(node) || t.isOptionalMemberExpression(node))
|
|
38
|
-
markValue(node.object, [semanticStaticPropertyKey(node.property, node.computed)], new Set());
|
|
207
|
+
markValue(node.object, [semanticStaticPropertyKey(node.property, node.computed)], new Set(), "write", mutation);
|
|
39
208
|
else if (t.isRestElement(node))
|
|
40
|
-
markTarget(node.argument);
|
|
209
|
+
markTarget(node.argument, mutation);
|
|
41
210
|
else if (t.isAssignmentPattern(node))
|
|
42
|
-
markTarget(node.left);
|
|
211
|
+
markTarget(node.left, mutation);
|
|
43
212
|
else if (t.isArrayPattern(node)) {
|
|
44
213
|
for (const element of node.elements)
|
|
45
214
|
if (element !== null)
|
|
46
|
-
markTarget(element);
|
|
215
|
+
markTarget(element, mutation);
|
|
47
216
|
}
|
|
48
217
|
else if (t.isObjectPattern(node)) {
|
|
49
218
|
for (const property of node.properties)
|
|
50
|
-
markTarget(t.isRestElement(property) ? property.argument : property.value);
|
|
219
|
+
markTarget(t.isRestElement(property) ? property.argument : property.value, mutation);
|
|
51
220
|
}
|
|
52
221
|
};
|
|
53
222
|
traverseJavaScriptAst(program, {
|
|
54
|
-
enter: (node) => {
|
|
223
|
+
enter: (node, parent) => {
|
|
224
|
+
for (const source of semanticIterationSources(node, parent))
|
|
225
|
+
deferIterable({
|
|
226
|
+
...source,
|
|
227
|
+
path: source.projection,
|
|
228
|
+
fallbackPath: source.projection,
|
|
229
|
+
bindings: new Set(),
|
|
230
|
+
effect: "escape",
|
|
231
|
+
originAt: source.mutation,
|
|
232
|
+
iterationOnly: true,
|
|
233
|
+
});
|
|
55
234
|
if (t.isAssignmentExpression(node))
|
|
56
|
-
markTarget(node.left);
|
|
235
|
+
markTarget(node.left, node);
|
|
57
236
|
else if (t.isUpdateExpression(node))
|
|
58
|
-
markTarget(node.argument);
|
|
237
|
+
markTarget(node.argument, node);
|
|
59
238
|
else if (t.isUnaryExpression(node, { operator: "delete" }))
|
|
60
|
-
markTarget(node.argument);
|
|
239
|
+
markTarget(node.argument, node);
|
|
61
240
|
else if (t.isForOfStatement(node) || t.isForInStatement(node))
|
|
62
|
-
markTarget(node.left);
|
|
241
|
+
markTarget(node.left, node);
|
|
242
|
+
else if (t.isCallExpression(node) ||
|
|
243
|
+
t.isOptionalCallExpression(node) ||
|
|
244
|
+
t.isNewExpression(node)) {
|
|
245
|
+
for (const argument of node.arguments)
|
|
246
|
+
if (t.isSpreadElement(argument))
|
|
247
|
+
deferIterable({
|
|
248
|
+
node: argument.argument,
|
|
249
|
+
projection: [],
|
|
250
|
+
path: [null],
|
|
251
|
+
fallbackPath: [],
|
|
252
|
+
bindings: new Set(),
|
|
253
|
+
effect: "escape",
|
|
254
|
+
mutation: node,
|
|
255
|
+
originAt: node,
|
|
256
|
+
});
|
|
257
|
+
else
|
|
258
|
+
markEscaped(argument, node);
|
|
259
|
+
// Constructing a member does not pass its container as `this`.
|
|
260
|
+
if (!t.isNewExpression(node))
|
|
261
|
+
markReceiver(node.callee, node);
|
|
262
|
+
}
|
|
263
|
+
else if (t.isTaggedTemplateExpression(node)) {
|
|
264
|
+
markReceiver(node.tag, node);
|
|
265
|
+
for (const expression of node.quasi.expressions)
|
|
266
|
+
markEscaped(expression, node);
|
|
267
|
+
}
|
|
63
268
|
},
|
|
64
269
|
});
|
|
270
|
+
// A later effect can make a previously defined destructuring source uncertain.
|
|
271
|
+
// Reconsider defaults and iterable origins until their effects are stable.
|
|
272
|
+
while (pendingReferences.length > 0 || iterableReferences.length > 0) {
|
|
273
|
+
const effectsBefore = recordedEffects.size;
|
|
274
|
+
const iterablesBefore = iterableReferences.length;
|
|
275
|
+
const iterationBefore = arrayIterationUnknown;
|
|
276
|
+
for (const reference of pendingReferences.splice(0)) {
|
|
277
|
+
const { initializer } = reference;
|
|
278
|
+
if (referenceSourcesInactive(initializer, state))
|
|
279
|
+
pendingReferences.push(reference);
|
|
280
|
+
else if (initializer.copyKind === "array-rest" &&
|
|
281
|
+
initializer.copyProjectionOffset !== undefined) {
|
|
282
|
+
const offset = initializer.copyProjectionOffset;
|
|
283
|
+
const projection = initializer.projection.slice(0, offset);
|
|
284
|
+
deferIterable({
|
|
285
|
+
node: initializer.node,
|
|
286
|
+
projection,
|
|
287
|
+
path: reference.path,
|
|
288
|
+
fallbackPath: projection,
|
|
289
|
+
bindings: reference.bindings,
|
|
290
|
+
effect: reference.effect,
|
|
291
|
+
originAt: reference.originAt,
|
|
292
|
+
...(reference.mutation === undefined
|
|
293
|
+
? {}
|
|
294
|
+
: { mutation: reference.mutation }),
|
|
295
|
+
});
|
|
296
|
+
}
|
|
297
|
+
else
|
|
298
|
+
markValue(initializer.node, reference.path, reference.bindings, reference.effect, reference.mutation, reference.originAt);
|
|
299
|
+
}
|
|
300
|
+
for (const reference of [...iterableReferences]) {
|
|
301
|
+
if (referenceSourcesInactive(reference, state))
|
|
302
|
+
continue;
|
|
303
|
+
if (reference.iterationOnly) {
|
|
304
|
+
const expanded = expandedIterationReferences(reference, state);
|
|
305
|
+
if (expanded !== null) {
|
|
306
|
+
for (const selected of expanded)
|
|
307
|
+
deferIterable(selected);
|
|
308
|
+
continue;
|
|
309
|
+
}
|
|
310
|
+
}
|
|
311
|
+
const slot = selectedReferenceSlot(reference, state);
|
|
312
|
+
// Custom iteration can yield the iterable itself as well as any child.
|
|
313
|
+
// Treat its root as escaped, including writes through yielded references.
|
|
314
|
+
const knownArray = !arrayIterationUnknown &&
|
|
315
|
+
slot?.value.status === "array" &&
|
|
316
|
+
slot.value.items.every((item) => semanticArrayIndex(item.name) !== null);
|
|
317
|
+
if (knownArray && reference.iterationOnly)
|
|
318
|
+
continue;
|
|
319
|
+
markValue(reference.node, knownArray ? reference.path : reference.fallbackPath, reference.bindings, knownArray ? reference.effect : "escape", reference.mutation, reference.originAt);
|
|
320
|
+
}
|
|
321
|
+
if (recordedEffects.size === effectsBefore &&
|
|
322
|
+
iterableReferences.length === iterablesBefore &&
|
|
323
|
+
arrayIterationUnknown === iterationBefore)
|
|
324
|
+
break;
|
|
325
|
+
}
|
|
326
|
+
// Gathering effects can evaluate a primitive projection before its object
|
|
327
|
+
// escapes. Final values must use the completed mutation state.
|
|
328
|
+
clearSemanticPrimitiveBindingValues(state);
|
|
329
|
+
};
|
|
330
|
+
const referenceSourcesInactive = (reference, state) => reference.requiredSources?.some((source) => selectedReferenceSlot(source, state, source.node)?.presence === "absent") === true ||
|
|
331
|
+
reference.fallbackSources?.some((source) => {
|
|
332
|
+
// Selection precedes effects through the chosen reference. A later escape
|
|
333
|
+
// cannot make a fallback that was excluded at destructuring reachable.
|
|
334
|
+
const slot = selectedReferenceSlot(source, state, source.node);
|
|
335
|
+
return (slot?.presence === "present" &&
|
|
336
|
+
(slot.value.status === "literal" ||
|
|
337
|
+
slot.value.status === "union" ||
|
|
338
|
+
slot.value.status === "object" ||
|
|
339
|
+
slot.value.status === "array"));
|
|
340
|
+
}) === true;
|
|
341
|
+
const expandedIterationReferences = (reference, state) => {
|
|
342
|
+
if (!t.isForOfStatement(reference.mutation))
|
|
343
|
+
return null;
|
|
344
|
+
const iterable = reference.mutation.right;
|
|
345
|
+
// Expand only the loop's yielded-item selector. Enumerating dynamic property
|
|
346
|
+
// selections would multiply paths through shared object aliases.
|
|
347
|
+
const source = [
|
|
348
|
+
reference,
|
|
349
|
+
...(reference.requiredSources ?? []),
|
|
350
|
+
...(reference.fallbackSources ?? []),
|
|
351
|
+
].find((source) => source.node === iterable && source.projection[0] === null);
|
|
352
|
+
if (source === undefined)
|
|
353
|
+
return null;
|
|
354
|
+
const slot = selectedReferenceSlot({ node: iterable, projection: [] }, state);
|
|
355
|
+
const container = slot === undefined ? null : semanticContainer(slot.value);
|
|
356
|
+
if (container?.coverage.status !== "complete")
|
|
357
|
+
return null;
|
|
358
|
+
const select = (candidate, name) => ({
|
|
359
|
+
...candidate,
|
|
360
|
+
projection: candidate.node === iterable && candidate.projection[0] === null
|
|
361
|
+
? [name, ...candidate.projection.slice(1)]
|
|
362
|
+
: candidate.projection,
|
|
363
|
+
});
|
|
364
|
+
return container.slots.map((slot) => {
|
|
365
|
+
const { projection } = select(reference, slot.name);
|
|
366
|
+
return {
|
|
367
|
+
...reference,
|
|
368
|
+
projection,
|
|
369
|
+
path: projection,
|
|
370
|
+
fallbackPath: projection,
|
|
371
|
+
...(reference.requiredSources === undefined
|
|
372
|
+
? {}
|
|
373
|
+
: {
|
|
374
|
+
requiredSources: reference.requiredSources.map((source) => select(source, slot.name)),
|
|
375
|
+
}),
|
|
376
|
+
...(reference.fallbackSources === undefined
|
|
377
|
+
? {}
|
|
378
|
+
: {
|
|
379
|
+
fallbackSources: reference.fallbackSources.map((source) => select(source, slot.name)),
|
|
380
|
+
}),
|
|
381
|
+
};
|
|
382
|
+
});
|
|
65
383
|
};
|
|
66
|
-
const referencedValues = (node, path) => {
|
|
67
|
-
const [key, ...remaining] = path;
|
|
384
|
+
const referencedValues = (node, path, effect) => {
|
|
68
385
|
// An initializer owns its slots; only deeper writes can affect shared children.
|
|
69
|
-
if (t.isObjectExpression(node))
|
|
70
|
-
|
|
71
|
-
? []
|
|
72
|
-
: node.properties.flatMap((property) => {
|
|
73
|
-
if (t.isSpreadElement(property))
|
|
74
|
-
return [{ node: property.argument, path }];
|
|
75
|
-
if (!t.isObjectProperty(property))
|
|
76
|
-
return [];
|
|
77
|
-
const name = semanticStaticPropertyName(property.key, property.computed);
|
|
78
|
-
return key === null ||
|
|
79
|
-
(name === "" && !t.isStringLiteral(property.key, { value: "" })) ||
|
|
80
|
-
String(key) === name
|
|
81
|
-
? [{ node: property.value, path: remaining }]
|
|
82
|
-
: [];
|
|
83
|
-
});
|
|
84
|
-
if (t.isArrayExpression(node)) {
|
|
85
|
-
if (path.length < 2)
|
|
386
|
+
if (t.isObjectExpression(node) || t.isArrayExpression(node)) {
|
|
387
|
+
if (effect === "write" && path.length < 2)
|
|
86
388
|
return [];
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
|
|
389
|
+
return t.isObjectExpression(node)
|
|
390
|
+
? objectReferencedValues(node, path)
|
|
391
|
+
: arrayReferencedValues(node, path);
|
|
392
|
+
}
|
|
393
|
+
if (t.isAssignmentExpression(node))
|
|
394
|
+
return node.operator === "||=" || node.operator === "??="
|
|
395
|
+
? [
|
|
396
|
+
{ node: node.left, path },
|
|
397
|
+
{ node: node.right, path },
|
|
398
|
+
]
|
|
399
|
+
: [{ node: node.right, path }];
|
|
400
|
+
if (t.isAwaitExpression(node))
|
|
401
|
+
return [{ node: node.argument, path }];
|
|
402
|
+
if (t.isSequenceExpression(node)) {
|
|
403
|
+
const last = node.expressions.at(-1);
|
|
404
|
+
return last === undefined ? [] : [{ node: last, path }];
|
|
99
405
|
}
|
|
100
|
-
if (t.isTSAsExpression(node) ||
|
|
101
|
-
t.isTSTypeAssertion(node) ||
|
|
102
|
-
t.isTSSatisfiesExpression(node) ||
|
|
103
|
-
t.isTSNonNullExpression(node))
|
|
104
|
-
return [{ node: node.expression, path }];
|
|
105
406
|
if (t.isConditionalExpression(node))
|
|
106
407
|
return [
|
|
107
408
|
{ node: node.consequent, path },
|
|
@@ -114,3 +415,143 @@ const referencedValues = (node, path) => {
|
|
|
114
415
|
];
|
|
115
416
|
return [];
|
|
116
417
|
};
|
|
418
|
+
const objectReferencedValues = (node, path) => {
|
|
419
|
+
const [key, ...remaining] = path;
|
|
420
|
+
const references = [];
|
|
421
|
+
const overwritten = new Set();
|
|
422
|
+
for (const property of [...node.properties].reverse()) {
|
|
423
|
+
if (t.isSpreadElement(property)) {
|
|
424
|
+
const selected = key ?? null;
|
|
425
|
+
if (typeof selected !== "object" && overwritten.has(String(selected)))
|
|
426
|
+
continue;
|
|
427
|
+
references.push({
|
|
428
|
+
node: property.argument,
|
|
429
|
+
path: [
|
|
430
|
+
typeof selected === "object"
|
|
431
|
+
? {
|
|
432
|
+
...selected,
|
|
433
|
+
excludedKeys: [
|
|
434
|
+
...new Set([
|
|
435
|
+
...(selected?.excludedKeys ?? []),
|
|
436
|
+
...overwritten,
|
|
437
|
+
]),
|
|
438
|
+
].sort(compareUnicodeCodePoints),
|
|
439
|
+
}
|
|
440
|
+
: selected,
|
|
441
|
+
...remaining,
|
|
442
|
+
],
|
|
443
|
+
});
|
|
444
|
+
continue;
|
|
445
|
+
}
|
|
446
|
+
const name = semanticStaticPropertyKey(property.key, property.computed);
|
|
447
|
+
if (name !== null && overwritten.has(name))
|
|
448
|
+
continue;
|
|
449
|
+
if (t.isObjectProperty(property) &&
|
|
450
|
+
(name === null || semanticPropertyPathKeyMatches(key ?? null, name)))
|
|
451
|
+
references.push({ node: property.value, path: remaining });
|
|
452
|
+
// A prototype setter does not replace an own property from a spread.
|
|
453
|
+
if (name !== null &&
|
|
454
|
+
!(t.isObjectMethod(property) && property.kind !== "method") &&
|
|
455
|
+
!(t.isObjectProperty(property) &&
|
|
456
|
+
!property.computed &&
|
|
457
|
+
!property.shorthand &&
|
|
458
|
+
name === "__proto__"))
|
|
459
|
+
overwritten.add(name);
|
|
460
|
+
}
|
|
461
|
+
return references;
|
|
462
|
+
};
|
|
463
|
+
const arrayReferencedValues = (node, path) => {
|
|
464
|
+
const [key, ...remaining] = path;
|
|
465
|
+
const selected = key ?? null;
|
|
466
|
+
const selectedIndex = typeof selected === "object" ? null : semanticArrayIndex(selected);
|
|
467
|
+
if (typeof selected !== "object" && selectedIndex === null)
|
|
468
|
+
return [];
|
|
469
|
+
const references = [];
|
|
470
|
+
let minimumIndex = 0;
|
|
471
|
+
let uncertainIndex = false;
|
|
472
|
+
for (const element of node.elements) {
|
|
473
|
+
if (t.isSpreadElement(element)) {
|
|
474
|
+
if (selectedIndex === null || selectedIndex >= minimumIndex) {
|
|
475
|
+
let sourceKey = null;
|
|
476
|
+
if (!uncertainIndex) {
|
|
477
|
+
if (selectedIndex !== null)
|
|
478
|
+
sourceKey = selectedIndex - minimumIndex;
|
|
479
|
+
else if (selected !== null && typeof selected === "object")
|
|
480
|
+
sourceKey = {
|
|
481
|
+
excludedKeys: selected.excludedKeys.flatMap((name) => {
|
|
482
|
+
const index = semanticArrayIndex(name);
|
|
483
|
+
return index === null || index < minimumIndex
|
|
484
|
+
? []
|
|
485
|
+
: [String(index - minimumIndex)];
|
|
486
|
+
}),
|
|
487
|
+
startIndex: Math.max(0, (selected.startIndex ?? 0) - minimumIndex),
|
|
488
|
+
};
|
|
489
|
+
}
|
|
490
|
+
references.push({
|
|
491
|
+
node: element.argument,
|
|
492
|
+
path: [sourceKey, ...remaining],
|
|
493
|
+
iterableFallbackPath: [],
|
|
494
|
+
});
|
|
495
|
+
}
|
|
496
|
+
uncertainIndex = true;
|
|
497
|
+
continue;
|
|
498
|
+
}
|
|
499
|
+
if (element !== null &&
|
|
500
|
+
(uncertainIndex
|
|
501
|
+
? selectedIndex === null || selectedIndex >= minimumIndex
|
|
502
|
+
: semanticPropertyPathKeyMatches(selected, String(minimumIndex))))
|
|
503
|
+
references.push({ node: element, path: remaining });
|
|
504
|
+
minimumIndex++;
|
|
505
|
+
}
|
|
506
|
+
return references;
|
|
507
|
+
};
|
|
508
|
+
const copiedReferencePath = (initializer, path, effect) => {
|
|
509
|
+
const offset = initializer.copyProjectionOffset;
|
|
510
|
+
if (offset === undefined)
|
|
511
|
+
return [...initializer.projection, ...path];
|
|
512
|
+
const copiedPath = [...initializer.projection.slice(offset + 1), ...path];
|
|
513
|
+
if (effect === "write" && copiedPath.length < 2)
|
|
514
|
+
return null;
|
|
515
|
+
let [key, ...remaining] = copiedPath;
|
|
516
|
+
if (initializer.copyKind === "array-rest") {
|
|
517
|
+
const startIndex = initializer.copyStartIndex ?? 0;
|
|
518
|
+
if (key === undefined || key === null)
|
|
519
|
+
key = { excludedKeys: [], startIndex };
|
|
520
|
+
else if (typeof key === "object")
|
|
521
|
+
key = {
|
|
522
|
+
excludedKeys: key.excludedKeys.flatMap((name) => {
|
|
523
|
+
const index = semanticArrayIndex(name);
|
|
524
|
+
return index === null ? [] : [String(index + startIndex)];
|
|
525
|
+
}),
|
|
526
|
+
startIndex: (key.startIndex ?? 0) + startIndex,
|
|
527
|
+
};
|
|
528
|
+
else {
|
|
529
|
+
const index = semanticArrayIndex(key);
|
|
530
|
+
if (index === null)
|
|
531
|
+
return null;
|
|
532
|
+
key = index + startIndex;
|
|
533
|
+
}
|
|
534
|
+
}
|
|
535
|
+
else {
|
|
536
|
+
const excludedKeys = initializer.copyExcludedKeys ?? [];
|
|
537
|
+
if (key === undefined || key === null)
|
|
538
|
+
key = { excludedKeys };
|
|
539
|
+
else if (typeof key === "object")
|
|
540
|
+
key = {
|
|
541
|
+
...key,
|
|
542
|
+
excludedKeys: [...new Set([...key.excludedKeys, ...excludedKeys])].sort(compareUnicodeCodePoints),
|
|
543
|
+
};
|
|
544
|
+
else if (excludedKeys.includes(String(key)))
|
|
545
|
+
return null;
|
|
546
|
+
}
|
|
547
|
+
return [...initializer.projection.slice(0, offset), key, ...remaining];
|
|
548
|
+
};
|
|
549
|
+
const selectedReferenceSlot = (source, state, capturePoint) => {
|
|
550
|
+
const path = [];
|
|
551
|
+
for (const key of source.projection) {
|
|
552
|
+
if (key === null || typeof key === "object")
|
|
553
|
+
return undefined;
|
|
554
|
+
path.push(String(key));
|
|
555
|
+
}
|
|
556
|
+
return semanticSlotAtPath(evaluateSemanticExpression(source.node, state, capturePoint), path);
|
|
557
|
+
};
|