rea-agents 6.1.0 → 6.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (573) hide show
  1. package/README.md +24 -24
  2. package/bridge/ghidra/ReaGhidraBridge.java +32 -4
  3. package/bridge/hopper_bridge.py +8 -1
  4. package/dist/android/JadxConfiguration.js +87 -7
  5. package/dist/android/JadxMcpTransport.js +14 -2
  6. package/dist/android/JadxProvider.js +64 -36
  7. package/dist/android/JadxSession.js +51 -9
  8. package/dist/application/BinaryTargetResolver.js +68 -20
  9. package/dist/application/BrowserEvidence.js +3 -8
  10. package/dist/application/BrowserScenarioEvidence.js +4 -20
  11. package/dist/application/CapabilityInventory.js +43 -9
  12. package/dist/application/ClientConfigurationDocument.js +97 -25
  13. package/dist/application/ClientRegistrationStatus.js +19 -6
  14. package/dist/application/DirectAnalysis.js +41 -20
  15. package/dist/application/DirectAnalysisCleanup.js +71 -0
  16. package/dist/application/DirectAnalysisStatus.js +3 -7
  17. package/dist/application/Doctor.js +40 -53
  18. package/dist/application/DoctorDiagnostics.js +2 -3
  19. package/dist/application/EnhancedTools.js +51 -6
  20. package/dist/application/EvidenceBundleFiles.js +8 -3
  21. package/dist/application/InvestigationProviders.js +13 -5
  22. package/dist/application/JsonFiles.js +56 -23
  23. package/dist/application/LinuxHopper.js +11 -7
  24. package/dist/application/MacHopper.js +15 -18
  25. package/dist/application/RealHopperAssertions.js +0 -11
  26. package/dist/application/ReconstructionObligationCandidates.js +10 -3
  27. package/dist/application/ReconstructionObligationLedgerProjection.js +3 -1
  28. package/dist/application/ReferenceSourceImportEntries.js +1 -1
  29. package/dist/application/RegularFileRead.js +17 -0
  30. package/dist/application/Setup.js +26 -23
  31. package/dist/application/SetupClientConfiguration.js +18 -7
  32. package/dist/application/SetupHost.js +20 -29
  33. package/dist/application/SetupPlan.js +24 -20
  34. package/dist/application/SetupSkill.js +57 -8
  35. package/dist/application/SupportedClients.js +43 -0
  36. package/dist/application/Uninstall.js +98 -30
  37. package/dist/application/UpdateMaintenance.js +13 -7
  38. package/dist/application/UpdateRuntime.js +12 -12
  39. package/dist/application/Utf8JsonInput.js +64 -0
  40. package/dist/application/WebScriptExportService.js +38 -5
  41. package/dist/application/WorkflowEvidence.js +25 -2
  42. package/dist/application/XrefsAddressResolution.js +45 -0
  43. package/dist/application/analysisView/AnalysisViewService.js +76 -0
  44. package/dist/application/android/AndroidAnalysisService.js +1 -1
  45. package/dist/application/binary/AnalysisClientCleanup.js +30 -5
  46. package/dist/application/binary/AnalysisProviderEvaluation.js +1 -2
  47. package/dist/application/binary/AnalysisProviderRegistry.js +2 -6
  48. package/dist/application/binary/AnalysisSnapshotCache.js +13 -10
  49. package/dist/application/binary/BinarySession.js +86 -29
  50. package/dist/application/binary/BinarySessionComposition.js +1 -3
  51. package/dist/application/binary/BinarySessionExecution.js +3 -5
  52. package/dist/application/binary/BinarySessionOpen.js +10 -2
  53. package/dist/application/binary/BinarySessionRecords.js +1 -1
  54. package/dist/application/binary/BinarySessionStatus.js +1 -6
  55. package/dist/application/binary/CompositeProvider.js +4 -18
  56. package/dist/application/binary/LazyAnalysisProvider.js +5 -5
  57. package/dist/application/binary/SessionProviderRouter.js +27 -135
  58. package/dist/application/homebrew.js +48 -0
  59. package/dist/application/javascript/ElectronActiveEvidence.js +10 -14
  60. package/dist/application/javascript/ElectronBoundaryAnalysis.js +2 -2
  61. package/dist/application/javascript/ElectronBoundaryGraphNative.js +5 -1
  62. package/dist/application/javascript/JavaScriptApplicationEvidence.js +3 -6
  63. package/dist/application/javascript/JavaScriptApplicationEvidenceGraph.js +107 -46
  64. package/dist/application/javascript/JavaScriptApplicationService.js +7 -1
  65. package/dist/application/javascript/JavaScriptApplicationWorkflowService.js +59 -45
  66. package/dist/application/javascript/JavaScriptArtifactAnalysis.js +5 -9
  67. package/dist/application/javascript/JavaScriptArtifactGraphBuilder.js +19 -27
  68. package/dist/application/javascript/JavaScriptArtifactGraphBundlers.js +11 -3
  69. package/dist/application/javascript/JavaScriptArtifactGraphContext.js +9 -0
  70. package/dist/application/javascript/JavaScriptArtifactGraphDocuments.js +8 -5
  71. package/dist/application/javascript/JavaScriptArtifactGraphFindings.js +46 -29
  72. package/dist/application/javascript/JavaScriptArtifactGraphStructure.js +0 -1
  73. package/dist/application/javascript/JavaScriptArtifactPathResolution.js +86 -27
  74. package/dist/application/javascript/JavaScriptArtifactReconstruction.js +52 -9
  75. package/dist/application/javascript/JavaScriptArtifactReconstructionInput.js +1 -0
  76. package/dist/application/javascript/JavaScriptJsonModules.js +2 -2
  77. package/dist/application/javascript/JavaScriptModuleRelationships.js +6 -18
  78. package/dist/application/javascript/JavaScriptRuntimeObservationService.js +3 -3
  79. package/dist/application/javascript/JavaScriptRuntimeReconciliationService.js +11 -27
  80. package/dist/application/javascript/JavaScriptSemanticGraphAsyncProjection.js +4 -5
  81. package/dist/application/javascript/JavaScriptSemanticGraphBuilder.js +8 -6
  82. package/dist/application/javascript/JavaScriptSemanticGraphChildProcessProjection.js +2 -3
  83. package/dist/application/javascript/JavaScriptSemanticGraphConstruction.js +7 -5
  84. package/dist/application/javascript/JavaScriptSemanticGraphDataProjection.js +3 -4
  85. package/dist/application/javascript/JavaScriptSemanticGraphEvidence.js +1 -1
  86. package/dist/application/javascript/JavaScriptSemanticGraphFingerprintProjection.js +2 -2
  87. package/dist/application/javascript/JavaScriptSemanticGraphFlowProjection.js +3 -7
  88. package/dist/application/javascript/JavaScriptSemanticGraphObjectProjection.js +76 -47
  89. package/dist/application/javascript/JavaScriptSemanticGraphProjection.js +4 -4
  90. package/dist/application/javascript/JavaScriptSemanticGraphResourceProjection.js +3 -4
  91. package/dist/application/javascript/JavaScriptSemanticGraphValueProjection.js +51 -25
  92. package/dist/application/javascript/JavaScriptSemanticTraceService.js +15 -10
  93. package/dist/application/managed/ManagedMemberComparisonService.js +2 -1
  94. package/dist/application/managed/ManagedNativeVerificationService.js +2 -1
  95. package/dist/application/native/NativeCallRoutes.js +2 -4
  96. package/dist/application/process/ProcessCli.js +11 -11
  97. package/dist/application/process/ProcessEvidence.js +0 -1
  98. package/dist/artifacts/ArtifactProvider.js +53 -30
  99. package/dist/artifacts/ArtifactProviderMetadata.js +1 -4
  100. package/dist/artifacts/ArtifactReader.js +31 -0
  101. package/dist/artifacts/AsarArtifactReader.js +81 -17
  102. package/dist/artifacts/DirectoryArtifactReader.js +2 -1
  103. package/dist/artifacts/MachOSliceArtifactReader.js +9 -2
  104. package/dist/artifacts/NativeDmgArtifactReader.js +207 -77
  105. package/dist/artifacts/NativeDmgOwnership.js +109 -0
  106. package/dist/artifacts/SafeOutputTree.js +16 -2
  107. package/dist/artifacts/ZipArtifactReader.js +11 -4
  108. package/dist/artifacts/apple/AppleAssetCatalogAnalysis.js +4 -2
  109. package/dist/artifacts/apple/DylibResolutionReader.js +17 -7
  110. package/dist/artifacts/apple/KeyedArchiveReader.js +68 -42
  111. package/dist/artifacts/apple/MachoLoadCommandReader.js +36 -6
  112. package/dist/artifacts/extraction/ArtifactExtraction.js +104 -29
  113. package/dist/artifacts/inventory/ArtifactGraphConstruction.js +71 -66
  114. package/dist/artifacts/inventory/ArtifactInventory.js +0 -1
  115. package/dist/artifacts/inventory/classify.js +33 -14
  116. package/dist/artifacts/inventory/hashStableRootArtifact.js +37 -0
  117. package/dist/artifacts/inventory/reader.js +3 -3
  118. package/dist/artifacts/inventory/scanCanonical.js +64 -34
  119. package/dist/artifacts/inventory/scanReader.js +12 -20
  120. package/dist/artifacts/javascript/JavaScriptArtifactFiles.js +65 -27
  121. package/dist/browser/BrowserScenarioPartialObservation.js +106 -0
  122. package/dist/browser/CdpBrowserProvider.js +6 -6
  123. package/dist/browser/CdpCaptureEventHandlers.js +2 -4
  124. package/dist/browser/CdpCaptureEvents.js +0 -1
  125. package/dist/browser/CdpCaptureStorageFingerprints.js +3 -3
  126. package/dist/browser/CdpCaptureValues.js +20 -0
  127. package/dist/browser/CdpElectronInspection.js +2 -2
  128. package/dist/browser/CdpElectronProvider.js +4 -5
  129. package/dist/browser/CdpElectronScriptEvents.js +2 -8
  130. package/dist/browser/CdpElectronScripts.js +4 -5
  131. package/dist/browser/CdpPageCaptureScripts.js +2 -3
  132. package/dist/browser/CdpSafeMetadata.js +10 -10
  133. package/dist/browser/CdpWebMcpDiscovery.js +16 -13
  134. package/dist/browser/PlaywrightBrowserScenarioProvider.js +64 -49
  135. package/dist/browser/PlaywrightElectronActiveActions.js +2 -56
  136. package/dist/browser/PlaywrightElectronActiveProvider.js +10 -6
  137. package/dist/browser/PlaywrightScenarioArtifacts.js +1 -1
  138. package/dist/browser/PlaywrightScenarioBrowser.js +269 -66
  139. package/dist/browser/PlaywrightScenarioEvents.js +1 -1
  140. package/dist/browser/PlaywrightScenarioSession.js +41 -32
  141. package/dist/browser/WebSourceMapFetcher.js +32 -6
  142. package/dist/browser/assets/ScenarioScriptCapture.js +8 -12
  143. package/dist/browser/assets/ScriptCaptureAdapters.js +1 -1
  144. package/dist/browser/history/CaptureFailures.js +6 -2
  145. package/dist/browser/history/MitmproxyCaptureAdapter.js +4 -2
  146. package/dist/catalogIdentity.js +0 -1
  147. package/dist/cli/analysisViewCommands.js +36 -0
  148. package/dist/cli/artifactCommands.js +11 -12
  149. package/dist/cli/coreAnalysisCommands.js +3 -3
  150. package/dist/cli/coreBinaryCommands.js +37 -28
  151. package/dist/cli/coreNativeCommands.js +9 -10
  152. package/dist/cli/electronCommands.js +12 -13
  153. package/dist/cli/interactiveSetup.js +6 -6
  154. package/dist/cli/javascriptApplicationAnalysis.js +2 -12
  155. package/dist/cli/jsonOutput.js +3 -2
  156. package/dist/cli/managedCommands.js +7 -8
  157. package/dist/cli/nativeCallCommands.js +1 -2
  158. package/dist/cli/omittableDefaults.js +50 -0
  159. package/dist/cli/processCommands.js +3 -2
  160. package/dist/cli/setupCommands.js +16 -15
  161. package/dist/cli/streamedJsonOutput.js +83 -4
  162. package/dist/cli/utilityCommands.js +10 -12
  163. package/dist/cli.js +19 -8
  164. package/dist/cliBrowserScenarioCommands.js +2 -2
  165. package/dist/cliCommandNames.js +1 -0
  166. package/dist/cliJsonFile.js +179 -0
  167. package/dist/cliJsonInput.js +60 -33
  168. package/dist/cliObservationOptions.js +4 -0
  169. package/dist/cliOutput.js +0 -38
  170. package/dist/composition/auxiliaryAnalysisProviders.js +30 -25
  171. package/dist/composition/binary.js +9 -9
  172. package/dist/composition/browserScenario.js +2 -1
  173. package/dist/composition/directAnalysis.js +20 -14
  174. package/dist/composition/electronScenario.js +1 -1
  175. package/dist/composition/optionalObservationProviders.js +12 -7
  176. package/dist/config/environment.js +6 -0
  177. package/dist/config/ghidraStartupTimeout.js +4 -9
  178. package/dist/config/homeDirectory.js +12 -0
  179. package/dist/config/mcpResponseBudget.js +9 -1
  180. package/dist/config/parseConfig.js +7 -3
  181. package/dist/config/parsers.js +19 -22
  182. package/dist/contracts/analysisViewToolContracts.js +56 -0
  183. package/dist/contracts/applicationToolContracts.js +5 -4
  184. package/dist/contracts/artifactComparisonExample.js +7 -7
  185. package/dist/contracts/artifactToolContracts.js +1 -1
  186. package/dist/contracts/browserScenarioToolContracts.js +1 -1
  187. package/dist/contracts/browserToolContracts.js +19 -15
  188. package/dist/contracts/enhancedInputs.js +2 -2
  189. package/dist/contracts/enhancedToolContracts.js +4 -3
  190. package/dist/contracts/errorSchemas.js +3 -1
  191. package/dist/contracts/evm/evmToolContracts.js +1 -1
  192. package/dist/contracts/functionComparisonExample.js +8 -0
  193. package/dist/contracts/functionWorkflowToolContracts.js +1 -1
  194. package/dist/contracts/inputSchemaPresentation.js +181 -0
  195. package/dist/contracts/investigationExamples.js +4 -3
  196. package/dist/contracts/javascript/electronToolContracts.js +3 -2
  197. package/dist/contracts/javascript/javascriptApplicationWorkflowExamples.js +3 -22
  198. package/dist/contracts/javascript/javascriptExportShapeComparisonExample.js +248 -0
  199. package/dist/contracts/javascript/javascriptRuntimeObservationToolContracts.js +1 -1
  200. package/dist/contracts/javascript/javascriptRuntimeReconciliationExample.js +8 -7
  201. package/dist/contracts/managed/managedToolContracts.js +8 -12
  202. package/dist/contracts/managed/managedWorkflowToolContracts.js +1 -1
  203. package/dist/contracts/mobileApplicationGraphExamples.js +8 -8
  204. package/dist/contracts/native/binaryDiagnosticsToolContracts.js +1 -1
  205. package/dist/contracts/native/nativeToolContracts.js +2 -2
  206. package/dist/contracts/officialToolContracts.js +2 -1
  207. package/dist/contracts/promptContracts.js +2 -2
  208. package/dist/contracts/providerSelection.js +1 -1
  209. package/dist/contracts/sessionLifecycleInputs.js +4 -3
  210. package/dist/contracts/sessionStatusContract.js +3 -2
  211. package/dist/contracts/sessionToolContracts.js +17 -4
  212. package/dist/contracts/sessionToolSchemas.js +4 -16
  213. package/dist/contracts/toolContracts.js +2 -0
  214. package/dist/contracts/toolEffects.js +1 -0
  215. package/dist/contracts/toolOutputSchemaGroups.js +138 -94
  216. package/dist/contracts/toolOutputSchemaPrimitives.js +13 -26
  217. package/dist/contracts/toolSchemaMetadata.js +18 -69
  218. package/dist/contracts/webNetworkCaptureToolContracts.js +1 -1
  219. package/dist/contracts/webRuntimeToolContracts.js +1 -1
  220. package/dist/contracts/webScriptToolContracts.js +1 -1
  221. package/dist/doctorRuntime.js +7 -5
  222. package/dist/domain/analysisErrorBase.js +5 -0
  223. package/dist/domain/analysisErrorCore.js +3 -0
  224. package/dist/domain/analysisErrorPresentation.js +22 -5
  225. package/dist/domain/analysisErrorProjection.js +24 -5
  226. package/dist/domain/analysisSnapshot.js +31 -31
  227. package/dist/domain/analysisView/analysisView.js +241 -0
  228. package/dist/domain/analysisView/analysisViewCoverage.js +19 -0
  229. package/dist/domain/analysisView/binaryLayoutView.js +159 -0
  230. package/dist/domain/analysisView/javascriptApplicationView.js +238 -0
  231. package/dist/domain/android/androidApplication.js +1 -1
  232. package/dist/domain/android/androidPartialObservation.js +36 -0
  233. package/dist/domain/apple/appleApplication.js +1 -1
  234. package/dist/domain/apple/dylibResolution.js +10 -3
  235. package/dist/domain/apple/interfaceBuilderGraph.js +0 -1
  236. package/dist/domain/apple/keyedArchive.js +26 -2
  237. package/dist/domain/artifactComparison.js +15 -6
  238. package/dist/domain/artifactGraph.js +17 -4
  239. package/dist/domain/artifactIdentity.js +8 -8
  240. package/dist/domain/artifactInspection.js +8 -8
  241. package/dist/domain/artifactInventoryEvidence.js +9 -16
  242. package/dist/domain/artifactOperationError.js +3 -3
  243. package/dist/domain/artifactPartialObservation.js +1 -0
  244. package/dist/domain/artifactPathSyntax.js +49 -0
  245. package/dist/domain/binaryTarget.js +39 -13
  246. package/dist/domain/browserCaptureComparison.js +13 -49
  247. package/dist/domain/browserCompleteness.js +3 -2
  248. package/dist/domain/browserNetworkEvidence.js +10 -4
  249. package/dist/domain/browserObservation.js +0 -1
  250. package/dist/domain/browserObservationSchemas.js +14 -3
  251. package/dist/domain/browserScenario.js +0 -1
  252. package/dist/domain/browserScenarioCapture.js +1 -2
  253. package/dist/domain/browserScenarioCaptureValues.js +2 -2
  254. package/dist/domain/browserScenarioDiff.js +0 -2
  255. package/dist/domain/browserScenarioDiffEvidence.js +0 -12
  256. package/dist/domain/browserScenarioDiffValues.js +2 -2
  257. package/dist/domain/browserScenarioNormalization.js +3 -3
  258. package/dist/domain/browserScenarioValues.js +6 -6
  259. package/dist/domain/callPath.js +15 -18
  260. package/dist/domain/callPathSchemas.js +2 -2
  261. package/dist/domain/canonicalDigest.js +7 -1
  262. package/dist/domain/canonicalOrdering.js +1 -13
  263. package/dist/domain/changedBehavior.js +5 -6
  264. package/dist/domain/comparisonSemantics.js +0 -5
  265. package/dist/domain/completionLedgerGeneration.js +2 -1
  266. package/dist/domain/configurationErrors.js +12 -0
  267. package/dist/domain/conformancePackage.js +4 -3
  268. package/dist/domain/digests.js +0 -3
  269. package/dist/domain/evidence.js +19 -40
  270. package/dist/domain/evidenceBundle.js +58 -42
  271. package/dist/domain/evidenceCompletionLedger.js +2 -1
  272. package/dist/domain/firmware/firmwareAnalysis.js +4 -3
  273. package/dist/domain/functionComparison.js +6 -6
  274. package/dist/domain/functionComparisonDimensions.js +120 -87
  275. package/dist/domain/functionComparisonNormalization.js +26 -36
  276. package/dist/domain/functionComparisonResults.js +3 -6
  277. package/dist/domain/functionComparisonSchemas.js +2 -8
  278. package/dist/domain/functionDossierEvidence.js +4 -38
  279. package/dist/domain/hopperValues.js +11 -15
  280. package/dist/domain/javascript/electronActiveObservation.js +29 -71
  281. package/dist/domain/javascript/electronObservation.js +14 -3
  282. package/dist/domain/javascript/electronStaticAnalysisBrowser.js +12 -11
  283. package/dist/domain/javascript/electronStaticAnalysisIpc.js +11 -2
  284. package/dist/domain/javascript/electronStaticAnalysisNative.js +7 -4
  285. package/dist/domain/javascript/electronStaticAnalysisValues.js +8 -4
  286. package/dist/domain/javascript/javascriptApplicationAnalysis.js +3 -1
  287. package/dist/domain/javascript/javascriptApplicationChangeGraph.js +12 -8
  288. package/dist/domain/javascript/javascriptApplicationEvidenceSchemas.js +6 -0
  289. package/dist/domain/javascript/javascriptApplicationGraph.js +41 -16
  290. package/dist/domain/javascript/javascriptApplicationGraphSchemas.js +9 -2
  291. package/dist/domain/javascript/javascriptApplicationVersionComparison.js +4 -4
  292. package/dist/domain/javascript/javascriptApplicationVersionComparisonSchemas.js +37 -22
  293. package/dist/domain/javascript/javascriptApplicationVersionItems.js +50 -36
  294. package/dist/domain/javascript/javascriptApplicationVersionKeys.js +9 -8
  295. package/dist/domain/javascript/javascriptAstFingerprint.js +2 -2
  296. package/dist/domain/javascript/javascriptAstValues.js +22 -0
  297. package/dist/{application/javascript/JavaScriptReturnShapeProjection.js → domain/javascript/javascriptExportReturnShapeProjection.js} +4 -4
  298. package/dist/domain/javascript/javascriptExportShapeComparison.js +10 -3
  299. package/dist/domain/javascript/javascriptExportShapeComparisonIdentity.js +6 -1
  300. package/dist/domain/javascript/javascriptExportShapeComparisonSchemas.js +58 -22
  301. package/dist/domain/javascript/javascriptExportShapeSelection.js +7 -7
  302. package/dist/domain/javascript/javascriptExportShapeVariants.js +70 -16
  303. package/dist/domain/javascript/javascriptFeatureSeed.js +25 -3
  304. package/dist/domain/javascript/javascriptFeatureTrace.js +7 -6
  305. package/dist/domain/javascript/javascriptFeatureTraceSchemas.js +17 -9
  306. package/dist/domain/javascript/javascriptFeatureTraversal.js +4 -5
  307. package/dist/domain/javascript/javascriptNativeHandoff.js +7 -7
  308. package/dist/domain/javascript/javascriptRuntimeLoadState.js +0 -1
  309. package/dist/domain/javascript/javascriptRuntimeObservation.js +18 -7
  310. package/dist/domain/javascript/javascriptRuntimeReconciliation.js +12 -6
  311. package/dist/domain/javascript/javascriptRuntimeReconciliationActive.js +9 -8
  312. package/dist/domain/javascript/javascriptRuntimeReconciliationCaptureParsing.js +212 -0
  313. package/dist/domain/javascript/javascriptRuntimeReconciliationGraph.js +5 -4
  314. package/dist/domain/javascript/javascriptRuntimeReconciliationInputValidation.js +28 -0
  315. package/dist/domain/javascript/javascriptRuntimeReconciliationMatching.js +6 -6
  316. package/dist/domain/javascript/javascriptRuntimeReconciliationParsing.js +12 -222
  317. package/dist/domain/javascript/javascriptRuntimeReconciliationResult.js +2 -2
  318. package/dist/domain/javascript/javascriptRuntimeReconciliationRuntime.js +15 -4
  319. package/dist/domain/javascript/javascriptRuntimeReconciliationSchemas.js +2 -2
  320. package/dist/domain/javascript/javascriptRuntimeStaticCandidates.js +7 -7
  321. package/dist/domain/javascript/javascriptSemanticAnalysis.js +209 -11
  322. package/dist/domain/javascript/javascriptSemanticAsyncEffects.js +2 -1
  323. package/dist/domain/javascript/javascriptSemanticCallResolution.js +9 -7
  324. package/dist/domain/javascript/javascriptSemanticCalls.js +2 -1
  325. package/dist/domain/javascript/javascriptSemanticChildProcesses.js +4 -3
  326. package/dist/domain/javascript/javascriptSemanticCoverage.js +20 -0
  327. package/dist/domain/javascript/javascriptSemanticDataEffectHelpers.js +7 -9
  328. package/dist/domain/javascript/javascriptSemanticDataEffects.js +4 -11
  329. package/dist/domain/javascript/javascriptSemanticFingerprints.js +2 -2
  330. package/dist/domain/javascript/javascriptSemanticGraph.js +220 -71
  331. package/dist/domain/javascript/javascriptSemanticGraphSchemas.js +19 -1
  332. package/dist/domain/javascript/javascriptSemanticIr.js +0 -4
  333. package/dist/domain/javascript/javascriptSemanticIterationSources.js +106 -0
  334. package/dist/domain/javascript/javascriptSemanticMemberMutations.js +515 -74
  335. package/dist/domain/javascript/javascriptSemanticMutationInitializers.js +190 -0
  336. package/dist/domain/javascript/javascriptSemanticMutationValues.js +44 -36
  337. package/dist/domain/javascript/javascriptSemanticObjects.js +79 -42
  338. package/dist/domain/javascript/javascriptSemanticPrimitives.js +8 -14
  339. package/dist/domain/javascript/javascriptSemanticProjection.js +21 -16
  340. package/dist/domain/javascript/javascriptSemanticPromises.js +16 -21
  341. package/dist/domain/javascript/javascriptSemanticPropertyPaths.js +23 -0
  342. package/dist/domain/javascript/javascriptSemanticProvenance.js +3 -3
  343. package/dist/domain/javascript/javascriptSemanticQuery.js +8 -2
  344. package/dist/domain/javascript/javascriptSemanticQueryIdentity.js +3 -2
  345. package/dist/domain/javascript/javascriptSemanticQuerySchemas.js +8 -9
  346. package/dist/domain/javascript/javascriptSemanticRequireOrigin.js +16 -10
  347. package/dist/domain/javascript/javascriptSemanticResourceLimits.js +1 -1
  348. package/dist/domain/javascript/javascriptSemanticResources.js +1 -1
  349. package/dist/domain/javascript/javascriptSemanticReturns.js +55 -44
  350. package/dist/domain/javascript/javascriptSemanticSlots.js +72 -0
  351. package/dist/domain/javascript/javascriptSemanticTraversal.js +6 -1
  352. package/dist/domain/javascript/javascriptSemanticValues.js +180 -76
  353. package/dist/domain/javascript/javascriptSourceMapPaths.js +114 -0
  354. package/dist/domain/javascript/javascriptSourceParser.js +34 -9
  355. package/dist/domain/javascript/javascriptStaticAnalysisBundler.js +5 -6
  356. package/dist/domain/javascript/javascriptStaticAnalysisCalls.js +2 -1
  357. package/dist/domain/javascript/javascriptStaticAnalysisHelpers.js +26 -16
  358. package/dist/domain/javascript/sourceToBundleComparison.js +19 -8
  359. package/dist/domain/javascript/sourceToBundleSignals.js +53 -25
  360. package/dist/domain/jsonSerialization.js +109 -55
  361. package/dist/domain/jsonShape.js +46 -19
  362. package/dist/domain/localPath.js +10 -4
  363. package/dist/domain/managed/managedApplicationGraph.js +10 -6
  364. package/dist/domain/managed/managedApplicationGraphNodes.js +82 -57
  365. package/dist/domain/managed/managedArtifact.js +6 -4
  366. package/dist/domain/managed/managedMemberComparison.js +2 -9
  367. package/dist/domain/managed/managedMemberComparisonMatch.js +6 -7
  368. package/dist/domain/managed/managedNativeVerification.js +0 -2
  369. package/dist/domain/managed/managedNativeVerificationMatch.js +9 -3
  370. package/dist/domain/native/binaryLayout.js +2 -3
  371. package/dist/domain/native/nativeApiBoundary.js +1 -1
  372. package/dist/domain/native/nativeCallObservation.js +3 -3
  373. package/dist/domain/native/nativeInstruction.js +7 -0
  374. package/dist/domain/native/nativeValueFlow.js +5 -11
  375. package/dist/domain/native/objcSwiftMetadata.js +15 -17
  376. package/dist/domain/native/recordedCrash.js +2 -3
  377. package/dist/domain/offsetDateTime.js +17 -0
  378. package/dist/domain/process/processCapture.js +22 -20
  379. package/dist/domain/process/processCaptureCoverage.js +70 -0
  380. package/dist/domain/process/processCaptureExample.js +45 -1
  381. package/dist/domain/process/processCaptureParsing.js +1 -34
  382. package/dist/domain/process/processCaptureValidation.js +82 -13
  383. package/dist/domain/process/processComparison.js +39 -43
  384. package/dist/domain/process/processObservation.js +10 -2
  385. package/dist/domain/process/processScenario.js +24 -2
  386. package/dist/domain/process/processTraceComparison.js +0 -2
  387. package/dist/domain/process/processTraceDimensionProjection.js +1 -1
  388. package/dist/domain/process/processTraceEvaluation.js +19 -15
  389. package/dist/domain/process/processTraceSpecification.js +4 -7
  390. package/dist/domain/providerAdapterError.js +2 -0
  391. package/dist/domain/providerCleanupError.js +6 -2
  392. package/dist/domain/reconstructionCoverage.js +7 -3
  393. package/dist/domain/reconstructionObligationLedgerSchemas.js +2 -1
  394. package/dist/domain/reconstructionReadinessSchemas.js +2 -1
  395. package/dist/domain/reconstructionUnknowns.js +4 -3
  396. package/dist/domain/reconstructionVerification.js +6 -5
  397. package/dist/domain/reconstructionVerificationSchemas.js +2 -1
  398. package/dist/domain/referenceSourceGraph.js +27 -28
  399. package/dist/domain/referenceSourceImportParsing.js +34 -45
  400. package/dist/domain/residualUnknown.js +3 -2
  401. package/dist/domain/staticRuntimeCorrelation.js +4 -3
  402. package/dist/domain/stringPatterns.js +6 -0
  403. package/dist/domain/swiftSymbolClassification.js +66 -0
  404. package/dist/domain/symbolAnalysis.js +83 -20
  405. package/dist/domain/unicodeCodePointOrder.js +6 -0
  406. package/dist/domain/webBundleAnalyzerInspection.js +9 -1
  407. package/dist/domain/webCaptureDiff.js +71 -30
  408. package/dist/domain/webCaptureDiffSchemas.js +8 -11
  409. package/dist/domain/webEventListeners.js +3 -2
  410. package/dist/domain/webExecution.js +3 -2
  411. package/dist/domain/webInventory.js +3 -2
  412. package/dist/domain/webMcpDiscovery.js +4 -3
  413. package/dist/domain/webRuntime.js +0 -2
  414. package/dist/domain/webScriptExport.js +2 -2
  415. package/dist/dotnet/ManagedArtifactInspector.js +2 -19
  416. package/dist/dotnet/ManagedMemberInspector.js +12 -18
  417. package/dist/dotnet/ManagedMemberInspectorCore.js +47 -44
  418. package/dist/dotnet/ManagedMemberInstructionDecoder.js +1 -2
  419. package/dist/dotnet/ManagedMemberRows.js +75 -62
  420. package/dist/dotnet/ManagedMetadataInventory.js +16 -22
  421. package/dist/dotnet/ManagedMethodBodyReader.js +4 -0
  422. package/dist/dotnet/ManagedNativeBoundaryHelpers.js +109 -94
  423. package/dist/dotnet/ManagedNativeBoundaryInspector.js +12 -21
  424. package/dist/dotnet/ManagedReaderFailure.js +16 -0
  425. package/dist/dotnet/ManagedStaticProvider.js +13 -12
  426. package/dist/dotnet/ManagedStaticProviderMetadata.js +1 -4
  427. package/dist/evaluation/AgentEvaluationFixtures.js +250 -0
  428. package/dist/evaluation/AgentEvaluationReport.js +28 -0
  429. package/dist/evaluation/CodexAgentEval.js +12 -8
  430. package/dist/evaluation/KnownAnswerEvaluation.js +281 -0
  431. package/dist/evm/EvmoleInterfaceProvider.js +2 -1
  432. package/dist/filesystem/RegularFile.js +41 -0
  433. package/dist/firmware/FirmwareCommand.js +9 -5
  434. package/dist/firmware/FirmwareProvider.js +4 -4
  435. package/dist/generatedPackageMetadata.js +2 -2
  436. package/dist/ghidra/GhidraAnalysisProfile.js +3 -6
  437. package/dist/ghidra/GhidraClient.js +105 -36
  438. package/dist/ghidra/GhidraClientStartup.js +0 -2
  439. package/dist/ghidra/GhidraDoctor.js +6 -5
  440. package/dist/ghidra/GhidraFunctionValues.js +3 -5
  441. package/dist/ghidra/GhidraInstallation.js +151 -22
  442. package/dist/ghidra/GhidraJavaLaunch.js +6 -2
  443. package/dist/ghidra/GhidraLauncher.js +58 -26
  444. package/dist/ghidra/GhidraProvider.js +6 -2
  445. package/dist/ghidra/GhidraProviderCapabilities.js +6 -0
  446. package/dist/ghidra/GhidraProviderClient.js +13 -3
  447. package/dist/ghidra/GhidraSessionError.js +2 -0
  448. package/dist/ghidra/GhidraSessionRoot.js +39 -0
  449. package/dist/ghidra/extensions/GhidraExtensions.js +17 -10
  450. package/dist/ghidra/extensions/nativeaot/NativeAotAdapter.js +8 -2
  451. package/dist/hopper/BridgeLauncher.js +34 -45
  452. package/dist/hopper/HopperAnalysisProfile.js +3 -8
  453. package/dist/hopper/HopperCleanup.js +56 -27
  454. package/dist/hopper/HopperClient.js +86 -65
  455. package/dist/hopper/HopperMachOImage.js +3 -2
  456. package/dist/hopper/HopperProvider.js +16 -18
  457. package/dist/hopper/HopperRegexSearch.js +3 -6
  458. package/dist/hopper/HopperTargetLease.js +132 -49
  459. package/dist/hopper/LinuxPrivateDisplayProbe.js +6 -0
  460. package/dist/ida/IdaConfiguration.js +8 -3
  461. package/dist/ida/IdaInput.js +1 -7
  462. package/dist/ida/IdaMcpConnection.js +8 -4
  463. package/dist/ida/IdaOperationRunner.js +5 -3
  464. package/dist/ida/IdaProvider.js +8 -12
  465. package/dist/ida/IdaSessionClient.js +24 -20
  466. package/dist/ida/IdaWorkspace.js +12 -13
  467. package/dist/inspector/JavaScriptRuntimeScope.js +9 -5
  468. package/dist/inspector/V8InspectorCaptureProjection.js +47 -14
  469. package/dist/inspector/V8InspectorProvider.js +97 -35
  470. package/dist/javascript/recovery/WakaruCommand.js +7 -2
  471. package/dist/javascript/recovery/WakaruExecution.js +5 -2
  472. package/dist/main/shutdown.js +81 -29
  473. package/dist/main/startup.js +9 -2
  474. package/dist/main/transport.js +23 -3
  475. package/dist/main.js +11 -18
  476. package/dist/native/AppleMachoSelection.js +16 -6
  477. package/dist/native/AppleObjcDispatchFacets.js +3 -3
  478. package/dist/native/AppleObjcProperties.js +17 -7
  479. package/dist/native/CommandRunner.js +9 -7
  480. package/dist/native/LldbCallTracer.js +249 -77
  481. package/dist/native/NativeMacOSProvider.js +32 -17
  482. package/dist/native/NativeMacOSProviderMetadata.js +1 -2
  483. package/dist/native/NativeUiHelperRuntime.js +11 -2
  484. package/dist/native/NativeUiObservation.js +2 -2
  485. package/dist/native/pwntools/PwntoolsDecoder.js +2 -1
  486. package/dist/process/DarwinProcessRunTokenReader.js +16 -2
  487. package/dist/process/ExecFileOutput.js +88 -6
  488. package/dist/process/PrivateRuntimeRoot.js +10 -5
  489. package/dist/process/ProcessOwnership.js +1 -4
  490. package/dist/process/ProcessOwnershipObservation.js +18 -16
  491. package/dist/process/ProviderProcess.js +1 -3
  492. package/dist/process/capture/FilesystemSnapshot.js +131 -24
  493. package/dist/process/capture/ProcessCaptureError.js +13 -0
  494. package/dist/process/capture/ProcessCaptureLifecycle.js +148 -74
  495. package/dist/process/capture/ProcessFilesystemEffects.js +51 -6
  496. package/dist/process/capture/ProcessHarness.js +16 -33
  497. package/dist/process/capture/ProcessNormalization.js +20 -2
  498. package/dist/process/capture/ProcessSampling.js +25 -2
  499. package/dist/process/capture/TerminalRenderer.js +14 -0
  500. package/dist/process/snapshotEnvironment.js +14 -0
  501. package/dist/server/EvidenceMcpServer.js +25 -14
  502. package/dist/server/analysisAdmission.js +8 -0
  503. package/dist/server/createServer.js +71 -59
  504. package/dist/server/mcpClientMetadata.js +12 -5
  505. package/dist/server/promptCompletion.js +3 -8
  506. package/dist/server/registerAnalysisViewTool.js +15 -0
  507. package/dist/server/registerAndroidTools.js +2 -3
  508. package/dist/server/registerApplicationTools/compareExportShapes.js +6 -6
  509. package/dist/server/registerApplicationTools/compareSourceToBundle.js +4 -5
  510. package/dist/server/registerApplicationTools/compareVersions.js +4 -5
  511. package/dist/server/registerApplicationTools/coverage.js +1 -2
  512. package/dist/server/registerApplicationTools/helpers.js +4 -4
  513. package/dist/server/registerApplicationTools/obligationLedger.js +4 -5
  514. package/dist/server/registerApplicationTools/projectMobileApplicationGraph.js +3 -4
  515. package/dist/server/registerApplicationTools/traceFeature.js +4 -5
  516. package/dist/server/registerApplicationTools/traceSemantics.js +4 -5
  517. package/dist/server/registerArtifactComparisonTool.js +4 -5
  518. package/dist/server/registerArtifactTools.js +2 -2
  519. package/dist/server/registerBinaryDiagnosticsTools.js +2 -3
  520. package/dist/server/registerBrowserScenarioTool.js +3 -4
  521. package/dist/server/registerBrowserTools.js +13 -16
  522. package/dist/server/registerBundleComparisonTool.js +5 -6
  523. package/dist/server/registerCloseLifecycleTool.js +8 -7
  524. package/dist/server/registerElectronTools.js +10 -13
  525. package/dist/server/registerEnhancedTools.js +82 -77
  526. package/dist/server/registerEvidenceTools.js +54 -47
  527. package/dist/server/registerEvmTools.js +2 -3
  528. package/dist/server/registerFirmwareTools.js +2 -3
  529. package/dist/server/registerFunctionComparisonTool.js +7 -8
  530. package/dist/server/registerInvestigationTools.js +14 -15
  531. package/dist/server/registerJavaScriptRecoveryTool.js +2 -3
  532. package/dist/server/registerJavaScriptRuntimeObservationTools.js +6 -6
  533. package/dist/server/registerManagedTools.js +7 -4
  534. package/dist/server/registerManagedWorkflowTools/compareManagedMembers.js +5 -6
  535. package/dist/server/registerManagedWorkflowTools/importManagedReconstruction.js +4 -5
  536. package/dist/server/registerManagedWorkflowTools/projectManagedApplicationGraph.js +6 -7
  537. package/dist/server/registerManagedWorkflowTools/verifyManagedNativeBoundaries.js +6 -7
  538. package/dist/server/registerOfficialTools.js +32 -41
  539. package/dist/server/registerProcessComparisonTool.js +8 -8
  540. package/dist/server/registerRecordedCrashTools.js +2 -3
  541. package/dist/server/registerSessionRecordTools.js +15 -19
  542. package/dist/server/registerSessionStatusTool.js +3 -4
  543. package/dist/server/registerSessionTools.js +19 -19
  544. package/dist/server/registerWebModuleTool.js +2 -3
  545. package/dist/server/registerWebNetworkCaptureTool.js +2 -3
  546. package/dist/server/registerWebRuntimeTools.js +4 -5
  547. package/dist/server/registerWebScriptTool.js +2 -3
  548. package/dist/server/registerWebSourceLocationTool.js +2 -3
  549. package/dist/server/toolResult.js +66 -94
  550. package/dist/server/toolResultEncoding.js +11 -10
  551. package/dist/windows/WindowsNativeLoader.js +1 -0
  552. package/dist/windows/WindowsOwnedProcess.js +60 -15
  553. package/dist/windows/WindowsPrivateRuntime.js +7 -8
  554. package/native/windows/README.md +3 -1
  555. package/native/windows/build/manifest.json +2 -2
  556. package/native/windows/build/rea-windows-x64.node +0 -0
  557. package/package.json +42 -30
  558. package/scripts/rea.mjs +3 -6
  559. package/skills/reverse-engineer-anything/SKILL.md +14 -13
  560. package/skills/reverse-engineer-anything/references/android-applications.md +6 -3
  561. package/skills/reverse-engineer-anything/references/evidence-workflows.md +8 -4
  562. package/skills/reverse-engineer-anything/references/javascript-applications.md +16 -6
  563. package/skills/reverse-engineer-anything/references/native-and-artifacts.md +18 -0
  564. package/dist/artifacts/inventory/policy.js +0 -2
  565. package/dist/config.js +0 -1
  566. package/dist/contracts/browserCaptureToolInputSchema.js +0 -43
  567. package/dist/contracts/process/processCaptureExample.js +0 -2
  568. package/dist/contracts/toolOutputSchemas.js +0 -2
  569. package/dist/domain/managed/managedApplicationGraphNodeCoverage.js +0 -6
  570. package/dist/main/reload.js +0 -12
  571. package/dist/main/state.js +0 -3
  572. package/dist/server/registerNativeTools.js +0 -6
  573. package/dist/server/sessionToolPolicies.js +0 -2
@@ -1,107 +1,408 @@
1
1
  import * as t from "@babel/types";
2
2
  import { resolveSemanticBindingState, } from "./javascriptSemanticState.js";
3
- import { evaluateSemanticBinding } from "./javascriptSemanticValues.js";
3
+ import { clearSemanticPrimitiveBindingValues, evaluateSemanticBinding, evaluateSemanticExpression, } from "./javascriptSemanticValues.js";
4
+ import { semanticContainer, semanticSlotAtPath, } from "./javascriptSemanticSlots.js";
5
+ import { semanticIterationSources } from "./javascriptSemanticIterationSources.js";
6
+ import { semanticMutationInitializers } from "./javascriptSemanticMutationInitializers.js";
7
+ import { semanticArrayIndex, semanticPropertyPathKeyMatches, } from "./javascriptSemanticPropertyPaths.js";
8
+ import { compareUnicodeCodePoints } from "../unicodeCodePointOrder.js";
4
9
  import { traverseJavaScriptAst } from "./javascriptSemanticTraversal.js";
5
- import { semanticStaticPropertyKey, semanticStaticPropertyName, } from "./javascriptAstValues.js";
6
- /** Keep explicit property mutations outside the initializer-only value lattice. */
10
+ import { semanticStaticPropertyKey, unwrapJavaScriptExpression, } from "./javascriptAstValues.js";
11
+ /** Preserve uncertainty from property writes and references exposed to calls. */
7
12
  export const collectSemanticMemberMutations = (program, state) => {
8
- const markValue = (node, path, bindings) => {
9
- if (t.isIdentifier(node)) {
10
- const binding = resolveSemanticBindingState(state, node, node.name);
11
- if (binding === undefined || bindings.has(binding.bindingId))
12
- return;
13
- const value = evaluateSemanticBinding(binding, state);
14
- if (value.status === "literal" || value.status === "union")
15
- return;
16
- binding.mutatedPaths.push(path);
17
- const nested = new Set([...bindings, binding.bindingId]);
18
- for (const initializer of binding.initializers)
19
- markValue(initializer.node, [...initializer.projection, ...path], nested);
13
+ const parents = state.parentsByNode;
14
+ traverseJavaScriptAst(program, {
15
+ enter: (node, parent) => {
16
+ if (parent !== null)
17
+ parents.set(node, parent);
18
+ },
19
+ });
20
+ const recordedEffects = new Set();
21
+ const selections = new Map();
22
+ let arrayIterationUnknown = false;
23
+ const pendingReferences = [];
24
+ const iterableReferences = [];
25
+ const iterableReferenceKeys = new WeakMap();
26
+ const deferIterable = (reference) => {
27
+ const keys = iterableReferenceKeys.get(reference.node) ?? new Set();
28
+ const key = JSON.stringify([
29
+ reference.projection,
30
+ reference.path,
31
+ reference.fallbackPath,
32
+ reference.effect,
33
+ reference.mutation?.start,
34
+ reference.mutation?.end,
35
+ reference.originAt?.start,
36
+ reference.originAt?.end,
37
+ reference.iterationOnly,
38
+ reference.requiredSources?.map((source) => [
39
+ source.node.start,
40
+ source.node.end,
41
+ source.projection,
42
+ ]),
43
+ reference.fallbackSources?.map((source) => [
44
+ source.node.start,
45
+ source.node.end,
46
+ source.projection,
47
+ ]),
48
+ [...reference.bindings].sort(compareUnicodeCodePoints),
49
+ ]);
50
+ if (keys.has(key))
20
51
  return;
21
- }
22
- if (t.isMemberExpression(node) || t.isOptionalMemberExpression(node)) {
23
- const members = [];
24
- let current = node;
25
- while (t.isMemberExpression(current) ||
26
- t.isOptionalMemberExpression(current)) {
27
- members.push(semanticStaticPropertyKey(current.property, current.computed));
28
- current = current.object;
52
+ keys.add(key);
53
+ iterableReferenceKeys.set(reference.node, keys);
54
+ iterableReferences.push(reference);
55
+ };
56
+ const markValue = (node, path, bindings, effect = "write", mutation, originAt = mutation) => {
57
+ const pending = [{ node, path, bindings, originAt }];
58
+ while (pending.length > 0) {
59
+ const current = pending.pop();
60
+ if (current === undefined)
61
+ break;
62
+ const expression = unwrapJavaScriptExpression(current.node).node;
63
+ if (t.isIdentifier(expression)) {
64
+ const binding = resolveSemanticBindingState(state, expression, expression.name);
65
+ if (binding === undefined) {
66
+ if ((expression.name === "Array" &&
67
+ (current.path[0] === "prototype" || current.path[0] === null)) ||
68
+ (["globalThis", "global", "window", "self"].includes(expression.name) &&
69
+ (current.path[0] === "Array" || current.path[0] === null) &&
70
+ (current.path[1] === "prototype" || current.path[1] === null)))
71
+ arrayIterationUnknown = true;
72
+ continue;
73
+ }
74
+ // An alias restored from a saved reference can revisit the same binding
75
+ // at an earlier capture. Only a repeated lifetime closes a cycle.
76
+ const lifetime = JSON.stringify([
77
+ binding.bindingId,
78
+ current.originAt?.start,
79
+ current.originAt?.end,
80
+ ]);
81
+ if (current.bindings.has(lifetime))
82
+ continue;
83
+ // Union compatible copied-slot selections at each binding. Carrying every
84
+ // combination of exclusions through branch diamonds is exponential.
85
+ const selectorIndex = current.path.findIndex((key) => key !== null && typeof key === "object");
86
+ let path = current.path;
87
+ const selector = path[selectorIndex];
88
+ if (selector !== null && typeof selector === "object") {
89
+ const selectionIdentity = JSON.stringify([
90
+ binding.bindingId,
91
+ effect,
92
+ path.map((key, index) => index === selectorIndex
93
+ ? { startIndex: selector.startIndex }
94
+ : key),
95
+ mutation?.start,
96
+ mutation?.end,
97
+ current.originAt?.start,
98
+ current.originAt?.end,
99
+ ]);
100
+ const previous = selections.get(selectionIdentity);
101
+ const excludedKeys = previous === undefined
102
+ ? selector.excludedKeys
103
+ : previous.filter((key) => selector.excludedKeys.includes(key));
104
+ if (previous !== undefined && excludedKeys.length === previous.length)
105
+ continue;
106
+ selections.set(selectionIdentity, excludedKeys);
107
+ path = path.map((key, index) => index === selectorIndex ? { ...selector, excludedKeys } : key);
108
+ }
109
+ const identity = JSON.stringify([
110
+ binding.bindingId,
111
+ effect,
112
+ path,
113
+ mutation?.start,
114
+ mutation?.end,
115
+ current.originAt?.start,
116
+ current.originAt?.end,
117
+ ]);
118
+ if (recordedEffects.has(identity))
119
+ continue;
120
+ const value = effect === "write"
121
+ ? evaluateSemanticBinding(binding, state)
122
+ : undefined;
123
+ const primitiveWrite = value?.status === "literal" || value?.status === "union";
124
+ recordedEffects.add(identity);
125
+ const nested = new Set([...current.bindings, lifetime]);
126
+ const origins = current.originAt === undefined
127
+ ? binding
128
+ : semanticMutationInitializers(binding, current.originAt, parents);
129
+ if (!primitiveWrite) {
130
+ if (effect === "escape")
131
+ binding.escapedPaths.push({ path, node: mutation });
132
+ else
133
+ binding.mutatedPaths.push(path);
134
+ clearSemanticPrimitiveBindingValues(state);
135
+ for (const initializer of origins.initializers)
136
+ pending.push({
137
+ node: initializer.node,
138
+ path: [...initializer.projection, ...path],
139
+ bindings: nested,
140
+ originAt: initializer.node,
141
+ });
142
+ }
143
+ for (const initializer of origins.referenceInitializers) {
144
+ const copiedPath = copiedReferencePath(initializer, path, effect);
145
+ if (copiedPath === null)
146
+ continue;
147
+ pendingReferences.push({
148
+ initializer,
149
+ path: copiedPath,
150
+ bindings: nested,
151
+ effect,
152
+ originAt: initializer.node,
153
+ ...(mutation === undefined ? {} : { mutation }),
154
+ });
155
+ }
156
+ }
157
+ else if (t.isMemberExpression(expression) ||
158
+ t.isOptionalMemberExpression(expression)) {
159
+ pending.push({
160
+ node: expression.object,
161
+ path: [
162
+ semanticStaticPropertyKey(expression.property, expression.computed),
163
+ ...current.path,
164
+ ],
165
+ bindings: current.bindings,
166
+ originAt: current.originAt,
167
+ });
168
+ }
169
+ else {
170
+ if (t.isArrayExpression(expression) &&
171
+ ((current.path[0] === "__proto__" &&
172
+ (effect === "escape" || current.path.length > 1)) ||
173
+ (current.path[0] === "constructor" &&
174
+ current.path[1] === "prototype")))
175
+ arrayIterationUnknown = true;
176
+ for (const value of referencedValues(expression, current.path, effect)) {
177
+ if (value.iterableFallbackPath !== undefined)
178
+ deferIterable({
179
+ node: value.node,
180
+ projection: [],
181
+ path: value.path,
182
+ fallbackPath: value.iterableFallbackPath,
183
+ bindings: current.bindings,
184
+ effect,
185
+ originAt: current.originAt,
186
+ ...(mutation === undefined ? {} : { mutation }),
187
+ });
188
+ else
189
+ pending.push({
190
+ ...value,
191
+ bindings: current.bindings,
192
+ originAt: current.originAt,
193
+ });
194
+ }
29
195
  }
30
- markValue(current, [...members.reverse(), ...path], bindings);
31
- return;
32
196
  }
33
- for (const value of referencedValues(node, path))
34
- markValue(value.node, value.path, bindings);
35
197
  };
36
- const markTarget = (node) => {
198
+ const markEscaped = (node, mutation, path = []) => markValue(node, path, new Set(), "escape", mutation);
199
+ const markReceiver = (callee, mutation) => {
200
+ const expression = unwrapJavaScriptExpression(callee).node;
201
+ if (t.isMemberExpression(expression) ||
202
+ t.isOptionalMemberExpression(expression))
203
+ markEscaped(expression.object, mutation);
204
+ };
205
+ const markTarget = (node, mutation) => {
37
206
  if (t.isMemberExpression(node) || t.isOptionalMemberExpression(node))
38
- markValue(node.object, [semanticStaticPropertyKey(node.property, node.computed)], new Set());
207
+ markValue(node.object, [semanticStaticPropertyKey(node.property, node.computed)], new Set(), "write", mutation);
39
208
  else if (t.isRestElement(node))
40
- markTarget(node.argument);
209
+ markTarget(node.argument, mutation);
41
210
  else if (t.isAssignmentPattern(node))
42
- markTarget(node.left);
211
+ markTarget(node.left, mutation);
43
212
  else if (t.isArrayPattern(node)) {
44
213
  for (const element of node.elements)
45
214
  if (element !== null)
46
- markTarget(element);
215
+ markTarget(element, mutation);
47
216
  }
48
217
  else if (t.isObjectPattern(node)) {
49
218
  for (const property of node.properties)
50
- markTarget(t.isRestElement(property) ? property.argument : property.value);
219
+ markTarget(t.isRestElement(property) ? property.argument : property.value, mutation);
51
220
  }
52
221
  };
53
222
  traverseJavaScriptAst(program, {
54
- enter: (node) => {
223
+ enter: (node, parent) => {
224
+ for (const source of semanticIterationSources(node, parent))
225
+ deferIterable({
226
+ ...source,
227
+ path: source.projection,
228
+ fallbackPath: source.projection,
229
+ bindings: new Set(),
230
+ effect: "escape",
231
+ originAt: source.mutation,
232
+ iterationOnly: true,
233
+ });
55
234
  if (t.isAssignmentExpression(node))
56
- markTarget(node.left);
235
+ markTarget(node.left, node);
57
236
  else if (t.isUpdateExpression(node))
58
- markTarget(node.argument);
237
+ markTarget(node.argument, node);
59
238
  else if (t.isUnaryExpression(node, { operator: "delete" }))
60
- markTarget(node.argument);
239
+ markTarget(node.argument, node);
61
240
  else if (t.isForOfStatement(node) || t.isForInStatement(node))
62
- markTarget(node.left);
241
+ markTarget(node.left, node);
242
+ else if (t.isCallExpression(node) ||
243
+ t.isOptionalCallExpression(node) ||
244
+ t.isNewExpression(node)) {
245
+ for (const argument of node.arguments)
246
+ if (t.isSpreadElement(argument))
247
+ deferIterable({
248
+ node: argument.argument,
249
+ projection: [],
250
+ path: [null],
251
+ fallbackPath: [],
252
+ bindings: new Set(),
253
+ effect: "escape",
254
+ mutation: node,
255
+ originAt: node,
256
+ });
257
+ else
258
+ markEscaped(argument, node);
259
+ // Constructing a member does not pass its container as `this`.
260
+ if (!t.isNewExpression(node))
261
+ markReceiver(node.callee, node);
262
+ }
263
+ else if (t.isTaggedTemplateExpression(node)) {
264
+ markReceiver(node.tag, node);
265
+ for (const expression of node.quasi.expressions)
266
+ markEscaped(expression, node);
267
+ }
63
268
  },
64
269
  });
270
+ // A later effect can make a previously defined destructuring source uncertain.
271
+ // Reconsider defaults and iterable origins until their effects are stable.
272
+ while (pendingReferences.length > 0 || iterableReferences.length > 0) {
273
+ const effectsBefore = recordedEffects.size;
274
+ const iterablesBefore = iterableReferences.length;
275
+ const iterationBefore = arrayIterationUnknown;
276
+ for (const reference of pendingReferences.splice(0)) {
277
+ const { initializer } = reference;
278
+ if (referenceSourcesInactive(initializer, state))
279
+ pendingReferences.push(reference);
280
+ else if (initializer.copyKind === "array-rest" &&
281
+ initializer.copyProjectionOffset !== undefined) {
282
+ const offset = initializer.copyProjectionOffset;
283
+ const projection = initializer.projection.slice(0, offset);
284
+ deferIterable({
285
+ node: initializer.node,
286
+ projection,
287
+ path: reference.path,
288
+ fallbackPath: projection,
289
+ bindings: reference.bindings,
290
+ effect: reference.effect,
291
+ originAt: reference.originAt,
292
+ ...(reference.mutation === undefined
293
+ ? {}
294
+ : { mutation: reference.mutation }),
295
+ });
296
+ }
297
+ else
298
+ markValue(initializer.node, reference.path, reference.bindings, reference.effect, reference.mutation, reference.originAt);
299
+ }
300
+ for (const reference of [...iterableReferences]) {
301
+ if (referenceSourcesInactive(reference, state))
302
+ continue;
303
+ if (reference.iterationOnly) {
304
+ const expanded = expandedIterationReferences(reference, state);
305
+ if (expanded !== null) {
306
+ for (const selected of expanded)
307
+ deferIterable(selected);
308
+ continue;
309
+ }
310
+ }
311
+ const slot = selectedReferenceSlot(reference, state);
312
+ // Custom iteration can yield the iterable itself as well as any child.
313
+ // Treat its root as escaped, including writes through yielded references.
314
+ const knownArray = !arrayIterationUnknown &&
315
+ slot?.value.status === "array" &&
316
+ slot.value.items.every((item) => semanticArrayIndex(item.name) !== null);
317
+ if (knownArray && reference.iterationOnly)
318
+ continue;
319
+ markValue(reference.node, knownArray ? reference.path : reference.fallbackPath, reference.bindings, knownArray ? reference.effect : "escape", reference.mutation, reference.originAt);
320
+ }
321
+ if (recordedEffects.size === effectsBefore &&
322
+ iterableReferences.length === iterablesBefore &&
323
+ arrayIterationUnknown === iterationBefore)
324
+ break;
325
+ }
326
+ // Gathering effects can evaluate a primitive projection before its object
327
+ // escapes. Final values must use the completed mutation state.
328
+ clearSemanticPrimitiveBindingValues(state);
329
+ };
330
+ const referenceSourcesInactive = (reference, state) => reference.requiredSources?.some((source) => selectedReferenceSlot(source, state, source.node)?.presence === "absent") === true ||
331
+ reference.fallbackSources?.some((source) => {
332
+ // Selection precedes effects through the chosen reference. A later escape
333
+ // cannot make a fallback that was excluded at destructuring reachable.
334
+ const slot = selectedReferenceSlot(source, state, source.node);
335
+ return (slot?.presence === "present" &&
336
+ (slot.value.status === "literal" ||
337
+ slot.value.status === "union" ||
338
+ slot.value.status === "object" ||
339
+ slot.value.status === "array"));
340
+ }) === true;
341
+ const expandedIterationReferences = (reference, state) => {
342
+ if (!t.isForOfStatement(reference.mutation))
343
+ return null;
344
+ const iterable = reference.mutation.right;
345
+ // Expand only the loop's yielded-item selector. Enumerating dynamic property
346
+ // selections would multiply paths through shared object aliases.
347
+ const source = [
348
+ reference,
349
+ ...(reference.requiredSources ?? []),
350
+ ...(reference.fallbackSources ?? []),
351
+ ].find((source) => source.node === iterable && source.projection[0] === null);
352
+ if (source === undefined)
353
+ return null;
354
+ const slot = selectedReferenceSlot({ node: iterable, projection: [] }, state);
355
+ const container = slot === undefined ? null : semanticContainer(slot.value);
356
+ if (container?.coverage.status !== "complete")
357
+ return null;
358
+ const select = (candidate, name) => ({
359
+ ...candidate,
360
+ projection: candidate.node === iterable && candidate.projection[0] === null
361
+ ? [name, ...candidate.projection.slice(1)]
362
+ : candidate.projection,
363
+ });
364
+ return container.slots.map((slot) => {
365
+ const { projection } = select(reference, slot.name);
366
+ return {
367
+ ...reference,
368
+ projection,
369
+ path: projection,
370
+ fallbackPath: projection,
371
+ ...(reference.requiredSources === undefined
372
+ ? {}
373
+ : {
374
+ requiredSources: reference.requiredSources.map((source) => select(source, slot.name)),
375
+ }),
376
+ ...(reference.fallbackSources === undefined
377
+ ? {}
378
+ : {
379
+ fallbackSources: reference.fallbackSources.map((source) => select(source, slot.name)),
380
+ }),
381
+ };
382
+ });
65
383
  };
66
- const referencedValues = (node, path) => {
67
- const [key, ...remaining] = path;
384
+ const referencedValues = (node, path, effect) => {
68
385
  // An initializer owns its slots; only deeper writes can affect shared children.
69
- if (t.isObjectExpression(node))
70
- return path.length < 2
71
- ? []
72
- : node.properties.flatMap((property) => {
73
- if (t.isSpreadElement(property))
74
- return [{ node: property.argument, path }];
75
- if (!t.isObjectProperty(property))
76
- return [];
77
- const name = semanticStaticPropertyName(property.key, property.computed);
78
- return key === null ||
79
- (name === "" && !t.isStringLiteral(property.key, { value: "" })) ||
80
- String(key) === name
81
- ? [{ node: property.value, path: remaining }]
82
- : [];
83
- });
84
- if (t.isArrayExpression(node)) {
85
- if (path.length < 2)
386
+ if (t.isObjectExpression(node) || t.isArrayExpression(node)) {
387
+ if (effect === "write" && path.length < 2)
86
388
  return [];
87
- let uncertainIndex = false;
88
- return node.elements.flatMap((element, index) => {
89
- if (element === null)
90
- return [];
91
- if (t.isSpreadElement(element)) {
92
- uncertainIndex = true;
93
- return [{ node: element.argument, path: [null, ...remaining] }];
94
- }
95
- return uncertainIndex || key === null || String(key) === String(index)
96
- ? [{ node: element, path: remaining }]
97
- : [];
98
- });
389
+ return t.isObjectExpression(node)
390
+ ? objectReferencedValues(node, path)
391
+ : arrayReferencedValues(node, path);
392
+ }
393
+ if (t.isAssignmentExpression(node))
394
+ return node.operator === "||=" || node.operator === "??="
395
+ ? [
396
+ { node: node.left, path },
397
+ { node: node.right, path },
398
+ ]
399
+ : [{ node: node.right, path }];
400
+ if (t.isAwaitExpression(node))
401
+ return [{ node: node.argument, path }];
402
+ if (t.isSequenceExpression(node)) {
403
+ const last = node.expressions.at(-1);
404
+ return last === undefined ? [] : [{ node: last, path }];
99
405
  }
100
- if (t.isTSAsExpression(node) ||
101
- t.isTSTypeAssertion(node) ||
102
- t.isTSSatisfiesExpression(node) ||
103
- t.isTSNonNullExpression(node))
104
- return [{ node: node.expression, path }];
105
406
  if (t.isConditionalExpression(node))
106
407
  return [
107
408
  { node: node.consequent, path },
@@ -114,3 +415,143 @@ const referencedValues = (node, path) => {
114
415
  ];
115
416
  return [];
116
417
  };
418
+ const objectReferencedValues = (node, path) => {
419
+ const [key, ...remaining] = path;
420
+ const references = [];
421
+ const overwritten = new Set();
422
+ for (const property of [...node.properties].reverse()) {
423
+ if (t.isSpreadElement(property)) {
424
+ const selected = key ?? null;
425
+ if (typeof selected !== "object" && overwritten.has(String(selected)))
426
+ continue;
427
+ references.push({
428
+ node: property.argument,
429
+ path: [
430
+ typeof selected === "object"
431
+ ? {
432
+ ...selected,
433
+ excludedKeys: [
434
+ ...new Set([
435
+ ...(selected?.excludedKeys ?? []),
436
+ ...overwritten,
437
+ ]),
438
+ ].sort(compareUnicodeCodePoints),
439
+ }
440
+ : selected,
441
+ ...remaining,
442
+ ],
443
+ });
444
+ continue;
445
+ }
446
+ const name = semanticStaticPropertyKey(property.key, property.computed);
447
+ if (name !== null && overwritten.has(name))
448
+ continue;
449
+ if (t.isObjectProperty(property) &&
450
+ (name === null || semanticPropertyPathKeyMatches(key ?? null, name)))
451
+ references.push({ node: property.value, path: remaining });
452
+ // A prototype setter does not replace an own property from a spread.
453
+ if (name !== null &&
454
+ !(t.isObjectMethod(property) && property.kind !== "method") &&
455
+ !(t.isObjectProperty(property) &&
456
+ !property.computed &&
457
+ !property.shorthand &&
458
+ name === "__proto__"))
459
+ overwritten.add(name);
460
+ }
461
+ return references;
462
+ };
463
+ const arrayReferencedValues = (node, path) => {
464
+ const [key, ...remaining] = path;
465
+ const selected = key ?? null;
466
+ const selectedIndex = typeof selected === "object" ? null : semanticArrayIndex(selected);
467
+ if (typeof selected !== "object" && selectedIndex === null)
468
+ return [];
469
+ const references = [];
470
+ let minimumIndex = 0;
471
+ let uncertainIndex = false;
472
+ for (const element of node.elements) {
473
+ if (t.isSpreadElement(element)) {
474
+ if (selectedIndex === null || selectedIndex >= minimumIndex) {
475
+ let sourceKey = null;
476
+ if (!uncertainIndex) {
477
+ if (selectedIndex !== null)
478
+ sourceKey = selectedIndex - minimumIndex;
479
+ else if (selected !== null && typeof selected === "object")
480
+ sourceKey = {
481
+ excludedKeys: selected.excludedKeys.flatMap((name) => {
482
+ const index = semanticArrayIndex(name);
483
+ return index === null || index < minimumIndex
484
+ ? []
485
+ : [String(index - minimumIndex)];
486
+ }),
487
+ startIndex: Math.max(0, (selected.startIndex ?? 0) - minimumIndex),
488
+ };
489
+ }
490
+ references.push({
491
+ node: element.argument,
492
+ path: [sourceKey, ...remaining],
493
+ iterableFallbackPath: [],
494
+ });
495
+ }
496
+ uncertainIndex = true;
497
+ continue;
498
+ }
499
+ if (element !== null &&
500
+ (uncertainIndex
501
+ ? selectedIndex === null || selectedIndex >= minimumIndex
502
+ : semanticPropertyPathKeyMatches(selected, String(minimumIndex))))
503
+ references.push({ node: element, path: remaining });
504
+ minimumIndex++;
505
+ }
506
+ return references;
507
+ };
508
+ const copiedReferencePath = (initializer, path, effect) => {
509
+ const offset = initializer.copyProjectionOffset;
510
+ if (offset === undefined)
511
+ return [...initializer.projection, ...path];
512
+ const copiedPath = [...initializer.projection.slice(offset + 1), ...path];
513
+ if (effect === "write" && copiedPath.length < 2)
514
+ return null;
515
+ let [key, ...remaining] = copiedPath;
516
+ if (initializer.copyKind === "array-rest") {
517
+ const startIndex = initializer.copyStartIndex ?? 0;
518
+ if (key === undefined || key === null)
519
+ key = { excludedKeys: [], startIndex };
520
+ else if (typeof key === "object")
521
+ key = {
522
+ excludedKeys: key.excludedKeys.flatMap((name) => {
523
+ const index = semanticArrayIndex(name);
524
+ return index === null ? [] : [String(index + startIndex)];
525
+ }),
526
+ startIndex: (key.startIndex ?? 0) + startIndex,
527
+ };
528
+ else {
529
+ const index = semanticArrayIndex(key);
530
+ if (index === null)
531
+ return null;
532
+ key = index + startIndex;
533
+ }
534
+ }
535
+ else {
536
+ const excludedKeys = initializer.copyExcludedKeys ?? [];
537
+ if (key === undefined || key === null)
538
+ key = { excludedKeys };
539
+ else if (typeof key === "object")
540
+ key = {
541
+ ...key,
542
+ excludedKeys: [...new Set([...key.excludedKeys, ...excludedKeys])].sort(compareUnicodeCodePoints),
543
+ };
544
+ else if (excludedKeys.includes(String(key)))
545
+ return null;
546
+ }
547
+ return [...initializer.projection.slice(0, offset), key, ...remaining];
548
+ };
549
+ const selectedReferenceSlot = (source, state, capturePoint) => {
550
+ const path = [];
551
+ for (const key of source.projection) {
552
+ if (key === null || typeof key === "object")
553
+ return undefined;
554
+ path.push(String(key));
555
+ }
556
+ return semanticSlotAtPath(evaluateSemanticExpression(source.node, state, capturePoint), path);
557
+ };