rea-agents 6.2.0 → 6.3.0

package/dist/application/SetupPlan.js

@@ -1,7 +1,7 @@
 import { join } from "node:path";
-import { PRODUCT_IDENTITY } from "../identity.js";
 import { isOwnedClientRegistrationCommand } from "./ClientRegistrationIdentity.js";
 import { linuxHopperInstallDisclosure, } from "./LinuxHopper.js";
+import { skillDestinations } from "./SetupSkill.js";
 import { macHopperInstallDisclosure } from "./MacHopper.js";
 /** Discover supported clients and current registrations without mutation. */
 export const discoverSetupState = async (input) => {
@@ -20,10 +20,9 @@ export const discoverSetupState = async (input) => {
             input.proposeHopper &&
             (Object.keys(input.providerEnvironment).length === 0 ||
                 linuxHopperRepairNeeded));
-    const [clients, detectedClients, skillNeedsInstall] = await Promise.all([
+    const [clients, detectedClients] = await Promise.all([
         input.host.supportedClients(),
         input.host.detectedClients(),
-        input.host.skillNeedsInstall(),
     ]);
     const detectedIds = new Set(detectedClients.map(({ name }) => name));
     const registrations = initialDoctor.identity?.registrations ?? [];
@@ -56,7 +55,6 @@ export const discoverSetupState = async (input) => {
     return {
         initialDoctor,
         installHopper,
-        skillNeedsInstall,
         clients,
         detectedClientIds: [...detectedIds],
         defaultClientIds,
@@ -119,6 +117,8 @@ export const planSetupActions = async (input) => {
             homeDirectory: input.host.homeDirectory,
             installHopper: input.discovery.installHopper,
             installSkill: input.installSkill,
+            skillClientIds: input.skillClientIds,
+            claudeCodeSkillsDirectory: input.host.claudeCodeSkillsDirectory,
             clients: clientPlans,
             providerEnvironment: input.providerEnvironment,
             ...(input.discovery.linuxPackageFamily === undefined
@@ -170,17 +170,21 @@ const setupPlan = (input) => [
         ...(backupPath === undefined ? {} : { backupPath }),
     })),
     ...(input.installSkill
-        ? [
-            {
-                id: "install_skill",
-                kind: "install_skill",
-                label: "REA reverse-engineering skill",
-                target: join(input.homeDirectory, ".agents/skills", PRODUCT_IDENTITY.skillName),
-                detail: "Install or update the bundled REA reverse-engineering skill and on-demand references.",
-                external: false,
-                operation: "install",
-            },
-        ]
+        ? skillDestinations(input.homeDirectory, input.skillClientIds, input.claudeCodeSkillsDirectory).map(({ client, path }) => ({
+            id: client === "claude_code"
+                ? "install_skill:claude_code"
+                : "install_skill",
+            kind: "install_skill",
+            label: client === "claude_code"
+                ? "REA skill for Claude Code"
+                : "REA reverse-engineering skill",
+            target: path,
+            detail: client === "claude_code"
+                ? "Install or update the REA skill in Claude Code's personal skill directory."
+                : "Install or update the bundled REA reverse-engineering skill and on-demand references.",
+            external: false,
+            operation: "install",
+        }))
         : []),
 ];
 const linuxDisclosure = (family) => {

package/dist/application/SetupSkill.js

@@ -10,7 +10,33 @@ const SKILL_FILES = [
     "references/runtime-observation.md",
     "references/evidence-workflows.md",
 ];
-const skillRoot = (home) => join(home, ".agents/skills", PRODUCT_IDENTITY.skillName);
+/** Resolve Claude Code personal skills from the selected environment. */
+export const claudeCodeSkillsDirectory = (home, environment = {}) => join(environment.CLAUDE_CONFIG_DIR ?? join(home, ".claude"), "skills");
+/** Resolve the skill roots required by a client selection, or all owned roots. */
+export const skillDestinations = (home, clientIds, claudeSkillsDirectory = claudeCodeSkillsDirectory(home)) => {
+    const includeClaude = clientIds === undefined || clientIds.includes("claude_code");
+    const includeShared = clientIds === undefined ||
+        clientIds.length === 0 ||
+        clientIds.some((clientId) => clientId !== "claude_code");
+    return [
+        ...(includeShared
+            ? [
+                {
+                    client: "shared",
+                    path: join(home, ".agents/skills", PRODUCT_IDENTITY.skillName),
+                },
+            ]
+            : []),
+        ...(includeClaude
+            ? [
+                {
+                    client: "claude_code",
+                    path: join(claudeSkillsDirectory, PRODUCT_IDENTITY.skillName),
+                },
+            ]
+            : []),
+    ];
+};
 const readOptionalText = async (path) => {
     try {
         return await readFile(path, "utf8");
@@ -21,18 +47,18 @@ const readOptionalText = async (path) => {
         throw cause;
     }
 };
-const canonicalSkillFiles = async (home) => Promise.all(SKILL_FILES.map(async (relativePath) => {
-    const destination = join(skillRoot(home), relativePath);
+const canonicalSkillFiles = async (home, clientIds, claudeSkillsDirectory) => Promise.all(skillDestinations(home, clientIds, claudeSkillsDirectory).flatMap(({ path: root }) => SKILL_FILES.map(async (relativePath) => {
+    const destination = join(root, relativePath);
     return {
         destination,
         content: await readFile(new URL(`../../skills/${PRODUCT_IDENTITY.skillName}/${relativePath}`, import.meta.url), "utf8"),
         original: await readOptionalText(destination),
     };
-}));
+})));
 /** Report whether setup would change any file in the managed REA skill bundle. */
-export const canonicalSkillNeedsInstall = async (home) => {
+export const canonicalSkillNeedsInstall = async (home, clientIds = [], claudeSkillsDirectory) => {
     try {
-        return (await canonicalSkillFiles(home)).some(({ content, original }) => original !== content);
+        return (await canonicalSkillFiles(home, clientIds, claudeSkillsDirectory)).some(({ content, original }) => original !== content);
     }
     catch (cause) {
         // Unreadable skill state fails open to install so setup can repair it.
@@ -50,10 +76,10 @@ const restoreSkillFiles = async (changed) => {
     }
 };
 /** Transactionally install or upgrade the canonical REA skill and references. */
-export const installCanonicalSkill = async (home) => {
+export const installCanonicalSkill = async (home, clientIds = [], claudeSkillsDirectory) => {
     let changed = [];
     try {
-        const canonical = await canonicalSkillFiles(home);
+        const canonical = await canonicalSkillFiles(home, clientIds, claudeSkillsDirectory);
         changed = canonical.filter(({ content, original }) => original !== content);
         if (changed.length === 0)
             return "unchanged";
@@ -82,3 +108,26 @@ export const installCanonicalSkill = async (home) => {
         return "failed";
     }
 };
+/** Read installed skill metadata and compare every managed location. */
+export const readInstalledSkillIdentity = async (home, clientIds, claudeSkillsDirectory) => {
+    const destinations = skillDestinations(home, clientIds, claudeSkillsDirectory);
+    let content;
+    for (const destination of destinations) {
+        try {
+            content = await readFile(join(destination.path, "SKILL.md"), "utf8");
+            break;
+        }
+        catch {
+            // Another selected copy may provide metadata; canonical validation below
+            // still marks missing or unreadable copies as stale.
+        }
+    }
+    if (content === undefined)
+        return undefined;
+    const toolCount = /^\s{2}tool_count:\s*(\d+)\s*$/mu.exec(content)?.[1];
+    return {
+        canonical: !(await canonicalSkillNeedsInstall(home, clientIds, claudeSkillsDirectory)),
+        version: /^\s{2}version:\s*"([^"]+)"\s*$/mu.exec(content)?.[1] ?? null,
+        toolCount: toolCount === undefined ? null : Number.parseInt(toolCount, 10),
+    };
+};

package/dist/application/SupportedClients.js

@@ -34,6 +34,38 @@ export const GROK_BOT_MANUAL_REGISTRATION_REMEDIATION = "Grok Bot keeps connecto
 export const manualRegistrationRemediation = (clientName) => clientName === "grok_bot"
     ? GROK_BOT_MANUAL_REGISTRATION_REMEDIATION
     : undefined;
+const OMP_PROFILE_NAME = /^[a-z0-9][a-z0-9._-]{0,63}$/u;
+/**
+ * OMP's active named profile. OMP_PROFILE wins over the legacy PI_PROFILE even
+ * when empty; empty and "default" select the default profile. OMP refuses to
+ * start with an invalid name, so one leaves the default location in place.
+ */
+const ompProfile = ({ env }) => {
+    const name = (env.OMP_PROFILE ?? env.PI_PROFILE)?.trim();
+    return name === undefined ||
+        name === "" ||
+        name === "default" ||
+        name.endsWith(".") ||
+        !OMP_PROFILE_NAME.test(name)
+        ? undefined
+        : name;
+};
+/**
+ * The OMP agent directory whose `mcp.json` holds user-scope MCP servers. OMP
+ * joins PI_CONFIG_DIR to the home directory, and a named profile ignores
+ * PI_CODING_AGENT_DIR. OMP resolves a relative agent directory against each
+ * process's working directory, so only an absolute override names one file.
+ */
+const ompAgentDirectory = (context) => {
+    const root = join(context.home, context.env.PI_CONFIG_DIR || ".omp");
+    const profile = ompProfile(context);
+    if (profile !== undefined)
+        return join(root, "profiles", profile, "agent");
+    const override = context.env.PI_CODING_AGENT_DIR;
+    return override !== undefined && override !== "" && isAbsolute(override)
+        ? override
+        : join(root, "agent");
+};
 const copilotDirectory = ({ home, env }) => env.COPILOT_HOME ?? join(home, ".copilot");
 const commandCodeDirectory = ({ home }) => join(home, ".commandcode");
 const opencodeDirectory = ({ home, env }) => join(env.XDG_CONFIG_HOME ?? join(home, ".config"), "opencode");
@@ -157,6 +189,13 @@ export const SUPPORTED_CLIENT_DEFINITIONS = [
         markerPath: grokDirectory,
         format: "grok",
     },
+    {
+        name: "omp",
+        displayName: "OMP",
+        configPath: (context) => join(ompAgentDirectory(context), "mcp.json"),
+        markerPath: ompAgentDirectory,
+        format: "omp",
+    },
     {
         name: "grok_bot",
         displayName: "Grok Bot",
@@ -173,7 +212,11 @@ export const supportedClients = (home, platform = process.platform, env = {
     CODEX_HOME: process.env.CODEX_HOME,
     COPILOT_HOME: process.env.COPILOT_HOME,
     GROK_HOME: process.env.GROK_HOME,
+    OMP_PROFILE: process.env.OMP_PROFILE,
     OPENCODE_CONFIG: process.env.OPENCODE_CONFIG,
+    PI_CODING_AGENT_DIR: process.env.PI_CODING_AGENT_DIR,
+    PI_CONFIG_DIR: process.env.PI_CONFIG_DIR,
+    PI_PROFILE: process.env.PI_PROFILE,
     SAND_DATA_ROOT: process.env.SAND_DATA_ROOT,
     XDG_CONFIG_HOME: process.env.XDG_CONFIG_HOME,
 }) => {

package/dist/application/Uninstall.js

@@ -6,6 +6,7 @@ import { join } from "node:path";
 import writeFileAtomic from "write-file-atomic";
 import { z } from "zod";
 import { PRODUCT_IDENTITY } from "../identity.js";
+import { claudeCodeSkillsDirectory, skillDestinations } from "./SetupSkill.js";
 import { isOwnedClientRegistrationCommand } from "./ClientRegistrationIdentity.js";
 import { resolveClientConfigTransactionPath } from "./ClientConfigPath.js";
 import { manualRegistrationRemediation, supportedClients, } from "./SupportedClients.js";
@@ -95,7 +96,7 @@ export const systemUninstallHost = (selectedHome = undefined, fileSystem = syste
                 : undefined;
         },
         removeClient: (client) => removeClient(client, fileSystem),
-        removeSkill: () => removeManagedSkills(home, fileSystem),
+        removeSkill: () => removeManagedSkills(home, fileSystem, environment),
         purgeData: async () => [
             await removeManagedPath(join(home, ".rea/cache"), "cache", fileSystem),
             await removeManagedPath(join(home, ".rea/state"), "state", fileSystem),
@@ -224,7 +225,22 @@ const removeManagedPath = async (path, name, fileSystem) => {
             : item(name, "failed", "This item could not be removed. Check file permissions, then rerun uninstall.");
     }
 };
-const removeManagedSkills = async (home, fileSystem) => removeManagedPath(join(home, ".agents/skills", PRODUCT_IDENTITY.skillName), "skill", fileSystem);
+const removeManagedSkills = async (home, fileSystem, environment) => {
+    const results = await Promise.all(skillDestinations(home, undefined, claudeCodeSkillsDirectory(home, environment)).map(({ client, path }) => removeManagedPath(path, client === "claude_code" ? "Claude Code skill" : "skill", fileSystem)));
+    const failed = results.find(({ status }) => status === "failed");
+    if (failed !== undefined)
+        return item("skill", "failed", results
+            .map(({ name, status, detail }) => `${name}: ${status} (${detail})`)
+            .join(" "));
+    const status = results.some(({ status: resultStatus }) => resultStatus === "removed")
+        ? "removed"
+        : results.some(({ status: resultStatus }) => resultStatus === "retained")
+            ? "retained"
+            : "skipped";
+    return item("skill", status, results
+        .map(({ name, status: resultStatus, detail }) => `${name}: ${resultStatus} (${detail})`)
+        .join(" "));
+};
 const item = (name, status, detail) => ({ name, status, detail });
 const registrationSchema = z
     .object({ command: z.string(), args: z.array(z.string()) })

package/dist/application/UpdateMaintenance.js

@@ -4,7 +4,7 @@ import { z } from "zod";
 import { PRODUCT_IDENTITY } from "../identity.js";
 import { isOwnedClientRegistrationCommand } from "./ClientRegistrationIdentity.js";
 import { readClientRegistrationStatuses } from "./ClientRegistrationStatus.js";
-import { effectiveClientServer, parseClientConfiguration, } from "./ClientConfigurationDocument.js";
+import { clientServerForcedEnabled, clientServerListedDisabled, effectiveClientServer, parseClientConfiguration, } from "./ClientConfigurationDocument.js";
 import { supportedClients } from "./SupportedClients.js";
 const setupPlanSchema = z.object({
     status: z.literal("planned"),
@@ -41,7 +41,11 @@ export const existingMaintenanceScope = async (home, entryPoint, environment) =>
             disabled: z.boolean().optional(),
         })
             .parse(effectiveClientServer(parsed, PRODUCT_IDENTITY.mcpServerKey));
-        if (enabled.enabled !== false && enabled.disabled !== true)
+        // Root disable lists override enabled entries and OMP's force-on allowlist.
+        if ((enabled.enabled !== false ||
+            clientServerForcedEnabled(parsed, PRODUCT_IDENTITY.mcpServerKey)) &&
+            enabled.disabled !== true &&
+            !clientServerListedDisabled(parsed, PRODUCT_IDENTITY.mcpServerKey))
             clients.push(client.name);
     }
     let skill = false;

package/dist/application/Utf8JsonInput.js

@@ -0,0 +1,64 @@
+import { constants } from "node:buffer";
+import { AnalysisResourceConstraintError } from "../domain/analysisErrorCore.js";
+import { safeParseJson } from "../domain/safeJson.js";
+/** Recovery that preserves complete, authenticated Evidence workflow inputs. */
+export const JSON_INPUT_RESOURCE_REMEDIATION = "Provide a smaller valid JSON value. For Evidence workflows, re-analyze a smaller selection of the original target and use its complete Evidence; splitting JSON text or trimming Evidence fields does not produce valid workflow input.";
+/** Decode JSON bytes without confusing a runtime string limit with malformed input. */
+export const parseUtf8Json = (bytes, operation, path, boundary = "json-input") => {
+    const stringLimitFailure = (cause, decodedUnits) => new AnalysisResourceConstraintError(operation, "memory", "JSON input exceeds the runtime's maximum decoded string length", {
+        boundary,
+        input_path: path,
+        input_bytes: bytes.byteLength,
+        max_string_code_units: constants.MAX_STRING_LENGTH,
+        ...(decodedUnits === undefined
+            ? {}
+            : { decoded_string_code_units_at_least: decodedUnits }),
+    }, {
+        ...(cause === undefined ? {} : { cause }),
+        remediationAction: JSON_INPUT_RESOURCE_REMEDIATION,
+    });
+    let text;
+    try {
+        const decoder = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true });
+        if (bytes.byteLength <= constants.MAX_STRING_LENGTH) {
+            text = decoder.decode(bytes);
+        }
+        else {
+            // Node 22's UTF-8 fast path bounds encoded bytes before decoding. Decode
+            // large inputs in chunks so valid multibyte text is bounded by its actual
+            // UTF-16 length. Streaming also preserves characters spanning chunks.
+            const parts = [];
+            let decodedUnits = 0;
+            const append = (part) => {
+                decodedUnits += part.length;
+                if (decodedUnits > constants.MAX_STRING_LENGTH)
+                    throw stringLimitFailure(undefined, decodedUnits);
+                parts.push(part);
+            };
+            const chunkBytes = 1024 * 1024;
+            for (let offset = 0; offset < bytes.byteLength; offset += chunkBytes)
+                append(decoder.decode(bytes.subarray(offset, offset + chunkBytes), {
+                    stream: true,
+                }));
+            append(decoder.decode());
+            text = parts.join("");
+        }
+    }
+    catch (cause) {
+        if (cause instanceof AnalysisResourceConstraintError)
+            throw cause;
+        const code = typeof cause === "object" && cause !== null && "code" in cause
+            ? cause.code
+            : undefined;
+        if (code === "ERR_STRING_TOO_LONG")
+            throw stringLimitFailure(cause);
+        if (code !== "ERR_ENCODING_INVALID_ENCODED_DATA")
+            throw cause;
+        return {
+            ok: false,
+            error: "JSON input is not valid UTF-8",
+            cause,
+        };
+    }
+    return safeParseJson(text);
+};

package/dist/application/WebScriptExportService.js

@@ -1,5 +1,4 @@
 import { createHash } from "node:crypto";
-import { readFile } from "node:fs/promises";
 import { isAbsolute } from "node:path";
 import { z } from "zod";
 import { ArtifactReaderFailure } from "../artifacts/ArtifactReader.js";
@@ -15,6 +14,8 @@ import { safeParseJson } from "../domain/safeJson.js";
 import { exportWebScriptsInputSchema, } from "../domain/webScriptExport.js";
 import { WebScriptExportError } from "../domain/webScriptExportError.js";
 import { WEB_SCRIPT_EXPORT_PROVIDER as PROVIDER } from "./InvestigationProviders.js";
+import { readRegularFile } from "./RegularFileRead.js";
+import { NonRegularFileReadError } from "../filesystem/RegularFile.js";
 const OPERATION = "export_web_scripts";
 /** Export one local capture through the shared CLI/MCP application workflow. */
 export const exportWebScripts = async (rawInput, options = {}) => {
@@ -97,20 +98,26 @@ export const exportWebScriptsValidated = async (input, options = {}) => {
  */
 const readCapture = async (path, signal) => {
     try {
-        return ok(await readFile(path, { signal }));
+        return ok(await readRegularFile(path, signal));
     }
     catch (cause) {
         const code = cause instanceof Error && "code" in cause ? String(cause.code) : "";
         if (code === "EACCES" || code === "EPERM")
             return err(new AnalysisAccessDeniedError(OPERATION, path, code, { cause }));
-        if (code === "ENOENT" || code === "ENOTDIR" || code === "EISDIR")
+        if (cause instanceof NonRegularFileReadError ||
+            code === "ENOENT" ||
+            code === "ENOTDIR" ||
+            code === "EISDIR" ||
+            code === "ENXIO")
             return err(new AnalysisInputError(OPERATION, { cause }, [
                 {
                     path: ["capture_path"],
                     reason: "invalid_value",
-                    message: code === "EISDIR"
-                        ? `Selected capture is a directory, not a file: ${path}`
-                        : `Selected capture could not be read (${code}): ${path}`,
+                    message: cause instanceof NonRegularFileReadError && code !== "EISDIR"
+                        ? cause.message
+                        : code === "EISDIR"
+                            ? `Selected capture is a directory, not a file: ${path}`
+                            : `Selected capture could not be read (${code}): ${path}`,
                 },
             ]));
         throw cause;

package/dist/application/android/AndroidAnalysisService.js

@@ -17,7 +17,7 @@ export class AndroidAnalysisService {
         const request = androidRequestSchema.safeParse({ operation, input });
         if (!request.success)
             return err(new AnalysisInputError(operation, { cause: request.error }));
-        const target = await parseBinaryTarget(request.data.input.path);
+        const target = await parseBinaryTarget(request.data.input.path, options?.signal === undefined ? {} : { signal: options.signal });
         if (!target.ok)
             return target;
         const executed = await this.provider.execute(target.value, request.data, options);

package/dist/application/binary/AnalysisSnapshotCache.js

@@ -4,6 +4,7 @@ import {} from "../../domain/analysisErrorBase.js";
 import { err, ok } from "../../domain/result.js";
 import { analysisQueryId, createAnalysisSnapshotEntry, createAnalysisSnapshotWorkflowEntry, snapshotBinding, snapshotMatchesProfile, snapshotMatchesTarget, snapshotTarget, parseAnalysisSnapshot, } from "../../domain/analysisSnapshot.js";
 import { OFFICIAL_TOOL_CONTRACTS } from "../../contracts/officialToolContracts.js";
+import { compareUnicodeCodePoints } from "../../domain/unicodeCodePointOrder.js";
 const STATEFUL_OPERATIONS = new Set([
     "health",
     "current_address",
@@ -87,8 +88,8 @@ export class AnalysisSnapshotCache {
         try {
             const snapshotTargetIdentity = snapshotTarget(target);
             const binding = snapshotBinding(profile);
-            const entries = [...this.#entries.values()].sort((left, right) => left.query_id.localeCompare(right.query_id));
-            const workflows = [...this.#workflowEntries.values()].sort((left, right) => left.query_id.localeCompare(right.query_id));
+            const entries = [...this.#entries.values()].sort((left, right) => compareUnicodeCodePoints(left.query_id, right.query_id));
+            const workflows = [...this.#workflowEntries.values()].sort((left, right) => compareUnicodeCodePoints(left.query_id, right.query_id));
             // Parsing owns the returned JSON and metadata; pre-cloning the same
             // payloads here only adds another full materialization.
             return ok(parseAnalysisSnapshot({
@@ -126,13 +127,13 @@ export class AnalysisSnapshotCache {
     /** Return canonical entries for persistence. */
     entries() {
         return [...this.#entries.values()]
-            .sort((left, right) => left.query_id.localeCompare(right.query_id))
+            .sort((left, right) => compareUnicodeCodePoints(left.query_id, right.query_id))
             .map((entry) => structuredClone(entry));
     }
     /** Return canonical composed-workflow entries for persistence. */
     workflowEntries() {
         return [...this.#workflowEntries.values()]
-            .sort((left, right) => left.query_id.localeCompare(right.query_id))
+            .sort((left, right) => compareUnicodeCodePoints(left.query_id, right.query_id))
             .map((entry) => structuredClone(entry));
     }
     /** Record one exact derived workflow result unless the shared cache is full. */

package/dist/application/binary/BinarySession.js

@@ -314,6 +314,22 @@ export class BinarySession extends BinarySessionRecords {
         this.#calls.set(call, generation);
         return call.finally(() => this.#calls.delete(call));
     }
+    /** Admit one composed request until its result and session bookkeeping settle. */
+    withAdmittedAnalysis(operationName, signal, operation) {
+        const generation = this.#transitionGeneration;
+        const transition = this.#transition;
+        const call = (async () => {
+            const admission = await this.#waitForTransition(operationName, signal, transition);
+            if (!admission.ok)
+                return admission;
+            return ok(await operation({
+                execute: (name, arguments_, options) => this.#execute(name, arguments_, options, Promise.resolve()),
+            }));
+        })();
+        // Register synchronously before a lifecycle transition can snapshot calls.
+        this.#calls.set(call, generation);
+        return call.finally(() => this.#calls.delete(call));
+    }
     async #execute(name, arguments_, options, transition) {
         const transitioned = await this.#waitForTransition(name, options?.signal, transition);
         if (!transitioned.ok)

package/dist/application/binary/BinarySessionOpen.js

@@ -8,7 +8,15 @@ import { SessionProviderRouter } from "./SessionProviderRouter.js";
 /** Parse a target, resolve its provider route, and validate snapshot binding. */
 export const resolveSessionOpen = async (input) => {
     const { path, options } = input;
-    const parsed = await parseBinaryTarget(path, process.cwd(), process.arch, options.targetKind, options.formatHint);
+    const parsed = await parseBinaryTarget(path, {
+        ...(options.targetKind === undefined
+            ? {}
+            : { targetKind: options.targetKind }),
+        ...(options.formatHint === undefined
+            ? {}
+            : { formatHint: options.formatHint }),
+        ...(options.signal === undefined ? {} : { signal: options.signal }),
+    });
     if (!parsed.ok)
         return parsed;
     return resolveSessionTarget({ ...input, target: parsed.value });

package/dist/application/javascript/ElectronActiveEvidence.js

@@ -1,4 +1,4 @@
-import { canonicalDigest } from "../../domain/comparisonSemantics.js";
+import { digestCanonicalValue } from "../../domain/canonicalDigest.js";
 import { createEvidence } from "../../domain/evidence.js";
 import { jsonObjectSchema, jsonValueSchema } from "../../domain/jsonValue.js";
 /** Commit the selected Electron experiment and its observed result. */
@@ -24,6 +24,6 @@ const parameters = (input) => {
     const scenario = jsonObjectSchema.parse(input);
     return {
         ...scenario,
-        scenario_sha256: canonicalDigest(scenario, "Electron scenario"),
+        scenario_sha256: digestCanonicalValue(scenario, "Electron scenario"),
     };
 };

package/dist/application/javascript/ElectronBoundaryAnalysis.js

@@ -1,4 +1,4 @@
-import { compareCodePoints } from "../../domain/canonicalOrdering.js";
+import { compareUnicodeCodePoints } from "../../domain/unicodeCodePointOrder.js";
 import { resolveArtifactPathByContext } from "./JavaScriptArtifactPathResolution.js";
 /** Flatten all per-file IPC facts into deterministic application records. */
 export const collectElectronIpcRecords = (analysis) => analysis.files
@@ -7,7 +7,7 @@ export const collectElectronIpcRecords = (analysis) => analysis.files
     file,
     finding,
 })))
-    .sort((left, right) => compareCodePoints(left.key, right.key));
+    .sort((left, right) => compareUnicodeCodePoints(left.key, right.key));
 /** Match only exact literal channels and retain ambiguous matches separately. */
 export const classifyElectronIpcPairings = (records) => {
     const handlers = records.filter(isMainHandler);

package/dist/application/javascript/ElectronBoundaryGraphNative.js

@@ -1,5 +1,6 @@
 import { javascriptAnalysisCoverage, resolveArtifactPath, } from "./JavaScriptArtifactGraphContext.js";
 import { astObservationEvidence } from "./JavaScriptArtifactGraphEvidence.js";
+import { compositeKey } from "../../domain/unicodeCodePointOrder.js";
 import { addElectronInferenceEdge, electronFindingSourceNode, electronObservationIdentity, electronRangeKey, } from "./ElectronBoundaryGraphContext.js";
 /** Project JavaScript-requested native addon binding and re-export surfaces. */
 export const addElectronNativeBoundaries = (context) => {
@@ -21,7 +22,10 @@ const addNativeBinding = (input) => {
     const addon = resolved === null ? undefined : context.fileNodes.get(resolved);
     const binding = context.accumulator.addNode({
         kind: "native-export",
-        identity: electronObservationIdentity(context, "javascript-requested-native-export", `${file.path}:${value.specifier}:${value.binding_kind}:${value.members.join("\0")}:${electronRangeKey(value.location)}`),
+        identity: electronObservationIdentity(context, "javascript-requested-native-export", 
+        // Members are a variable-length source-derived list: compositeKey keeps
+        // ["a\0b"] distinct from ["a", "b"] inside the digested identity.
+        `${file.path}:${value.specifier}:${value.binding_kind}:${compositeKey(value.members)}:${electronRangeKey(value.location)}`),
         observations: [
             {
                 label: value.members.join(", "),

package/dist/application/javascript/JavaScriptApplicationEvidence.js

@@ -36,4 +36,5 @@ const applicationObservation = (input, result) => ({
 });
 const parameters = (input) => ({
     format: input.format,
+    integrity_policy: input.integrity_policy,
 });