rea-agents 6.2.0 → 6.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (636) hide show
  1. package/README.md +24 -23
  2. package/bridge/ghidra/ReaGhidraApplySeeds.java +151 -0
  3. package/bridge/ghidra/ReaGhidraBridge.java +597 -209
  4. package/bridge/ghidra/ReaGhidraNoReturnFix.java +123 -0
  5. package/bridge/hopper_bridge.py +2 -0
  6. package/dist/adb/AdbConfiguration.js +88 -0
  7. package/dist/adb/AdbDeviceOutput.js +186 -0
  8. package/dist/adb/AdbProvider.js +1190 -0
  9. package/dist/adb/AdbShellOutput.js +309 -0
  10. package/dist/android/AndroidTargetSnapshot.js +104 -22
  11. package/dist/android/JadxConfiguration.js +44 -24
  12. package/dist/android/JadxProvider.js +59 -21
  13. package/dist/android/JadxSession.js +51 -9
  14. package/dist/apktool/ApktoolConfiguration.js +84 -0
  15. package/dist/apktool/ApktoolDecodeOutput.js +59 -0
  16. package/dist/apktool/ApktoolProvider.js +506 -0
  17. package/dist/application/AnalysisProvider.js +8 -2
  18. package/dist/application/AppBundleExecutable.js +27 -22
  19. package/dist/application/BinaryTargetResolver.js +85 -19
  20. package/dist/application/BrowserScenarioEvidence.js +2 -2
  21. package/dist/application/CapabilityInventory.js +11 -1
  22. package/dist/application/ClientConfigurationDocument.js +98 -0
  23. package/dist/application/ClientConfigurationFiles.js +91 -0
  24. package/dist/application/ClientRegistrationEnvironment.js +35 -0
  25. package/dist/application/ClientRegistrationStatus.js +75 -27
  26. package/dist/application/DirectAnalysis.js +14 -8
  27. package/dist/application/DirectAnalysisCleanup.js +1 -2
  28. package/dist/application/DirectAnalysisStatus.js +3 -6
  29. package/dist/application/Doctor.js +27 -34
  30. package/dist/application/DoctorDiagnostics.js +1 -1
  31. package/dist/application/EvidenceBundleCommands.js +6 -12
  32. package/dist/application/EvidenceBundleFiles.js +1 -1
  33. package/dist/application/GeminiClientSettings.js +139 -0
  34. package/dist/application/HermesClientHome.js +115 -0
  35. package/dist/application/HopperDownload.js +39 -0
  36. package/dist/application/InvestigationProviders.js +10 -4
  37. package/dist/application/JsonFiles.js +16 -15
  38. package/dist/application/JsonInputFile.js +252 -0
  39. package/dist/application/LinuxHopper.js +6 -13
  40. package/dist/application/MacHopper.js +172 -149
  41. package/dist/application/MipsElfAbiFlags.js +140 -0
  42. package/dist/application/ProviderOperationExecution.js +31 -0
  43. package/dist/application/ReconstructionObligationCandidates.js +16 -3
  44. package/dist/application/ReconstructionObligationLedgerProjection.js +3 -1
  45. package/dist/application/ReferenceSourceImport.js +76 -29
  46. package/dist/application/ReferenceSourceImportEntries.js +18 -9
  47. package/dist/application/ReferenceSourceImportPolicy.js +99 -23
  48. package/dist/application/ReferenceSourceImportTypes.js +30 -22
  49. package/dist/application/ReferenceSourceVcsAdapter.js +145 -30
  50. package/dist/application/RegularFileRead.js +103 -0
  51. package/dist/application/Setup.js +69 -10
  52. package/dist/application/SetupClientConfiguration.js +134 -23
  53. package/dist/application/SetupHost.js +102 -22
  54. package/dist/application/SetupPlan.js +18 -17
  55. package/dist/application/SetupSkill.js +81 -13
  56. package/dist/application/SupportedClients.js +305 -37
  57. package/dist/application/Uninstall.js +172 -8
  58. package/dist/application/UpdateMaintenance.js +23 -23
  59. package/dist/application/Utf8JsonInput.js +71 -0
  60. package/dist/application/WebScriptExportService.js +130 -57
  61. package/dist/application/WebSourceLocationService.js +3 -0
  62. package/dist/application/adb/AdbDeviceAnalysisPort.js +1 -0
  63. package/dist/application/adb/AdbDeviceAnalysisService.js +13 -0
  64. package/dist/application/analysisView/AnalysisViewService.js +40 -2
  65. package/dist/application/android/AndroidAnalysisService.js +1 -1
  66. package/dist/application/apktool/ApktoolResourceAnalysisPort.js +1 -0
  67. package/dist/application/apktool/ApktoolResourceAnalysisService.js +13 -0
  68. package/dist/application/binary/AnalysisClientCleanup.js +0 -24
  69. package/dist/application/binary/AnalysisSnapshotCache.js +5 -4
  70. package/dist/application/binary/BinarySession.js +18 -1
  71. package/dist/application/binary/BinarySessionOpen.js +9 -1
  72. package/dist/application/binaryDiagnostics/BinaryLayoutService.js +2 -1
  73. package/dist/application/binaryDiagnostics/PeResourcesPort.js +1 -0
  74. package/dist/application/binaryDiagnostics/PeResourcesService.js +111 -0
  75. package/dist/application/binaryDiagnostics/RecordedCrashService.js +2 -1
  76. package/dist/application/evm/EvmInterfaceService.js +3 -0
  77. package/dist/application/firmware/FirmwareAnalysisService.js +3 -0
  78. package/dist/application/investigation/InspectEvidenceBundle.js +18 -0
  79. package/dist/application/javascript/ElectronActiveEvidence.js +2 -2
  80. package/dist/application/javascript/ElectronBoundaryAnalysis.js +2 -2
  81. package/dist/application/javascript/ElectronBoundaryGraphContext.js +3 -2
  82. package/dist/application/javascript/ElectronBoundaryGraphIpc.js +2 -2
  83. package/dist/application/javascript/ElectronBoundaryGraphNative.js +20 -3
  84. package/dist/application/javascript/ElectronBoundaryGraphWindows.js +3 -3
  85. package/dist/application/javascript/JavaScriptApplicationEvidence.js +1 -0
  86. package/dist/application/javascript/JavaScriptApplicationEvidenceGraph.js +107 -46
  87. package/dist/application/javascript/JavaScriptApplicationService.js +23 -11
  88. package/dist/application/javascript/JavaScriptApplicationWorkflowEvidence.js +5 -6
  89. package/dist/application/javascript/JavaScriptApplicationWorkflowService.js +59 -45
  90. package/dist/application/javascript/JavaScriptArtifactAnalysis.js +171 -36
  91. package/dist/application/javascript/JavaScriptArtifactGraphAccumulator.js +14 -16
  92. package/dist/application/javascript/JavaScriptArtifactGraphBuilder.js +74 -36
  93. package/dist/application/javascript/JavaScriptArtifactGraphBundlers.js +4 -3
  94. package/dist/application/javascript/JavaScriptArtifactGraphContext.js +11 -5
  95. package/dist/application/javascript/JavaScriptArtifactGraphFindings.js +53 -42
  96. package/dist/application/javascript/JavaScriptArtifactGraphStructure.js +92 -10
  97. package/dist/application/javascript/JavaScriptArtifactPathResolution.js +293 -238
  98. package/dist/application/javascript/JavaScriptArtifactReconstruction.js +120 -28
  99. package/dist/application/javascript/JavaScriptArtifactReconstructionInput.js +4 -0
  100. package/dist/application/javascript/JavaScriptJsonModules.js +2 -2
  101. package/dist/application/javascript/JavaScriptModuleRelationships.js +10 -20
  102. package/dist/application/javascript/JavaScriptRecoveryService.js +3 -0
  103. package/dist/application/javascript/JavaScriptRuntimeReconciliationService.js +11 -27
  104. package/dist/application/javascript/JavaScriptSemanticGraphAsyncProjection.js +11 -5
  105. package/dist/application/javascript/JavaScriptSemanticGraphBuilder.js +206 -66
  106. package/dist/application/javascript/JavaScriptSemanticGraphChildProcessProjection.js +1 -1
  107. package/dist/application/javascript/JavaScriptSemanticGraphConstruction.js +18 -23
  108. package/dist/application/javascript/JavaScriptSemanticGraphDataProjection.js +5 -2
  109. package/dist/application/javascript/JavaScriptSemanticGraphEvidence.js +1 -1
  110. package/dist/application/javascript/JavaScriptSemanticGraphFingerprintProjection.js +2 -2
  111. package/dist/application/javascript/JavaScriptSemanticGraphFlowProjection.js +7 -5
  112. package/dist/application/javascript/JavaScriptSemanticGraphObjectProjection.js +6 -4
  113. package/dist/application/javascript/JavaScriptSemanticGraphProjection.js +4 -4
  114. package/dist/application/javascript/JavaScriptSemanticGraphResourceProjection.js +1 -1
  115. package/dist/application/javascript/JavaScriptSemanticGraphValueProjection.js +29 -15
  116. package/dist/application/javascript/JavaScriptSemanticTraceService.js +15 -10
  117. package/dist/application/jeb/JebAnalysisPort.js +1 -0
  118. package/dist/application/jeb/JebAnalysisService.js +13 -0
  119. package/dist/application/managed/ManagedApplicationGraphService.js +1 -1
  120. package/dist/application/native/NativeCallRoutes.js +2 -4
  121. package/dist/application/native/NativeUiActionTrace.js +16 -8
  122. package/dist/application/native/NativeValueTrace.js +23 -6
  123. package/dist/application/process/ProcessCli.js +25 -20
  124. package/dist/artifacts/ArtifactPaths.js +129 -8
  125. package/dist/artifacts/ArtifactProvider.js +34 -31
  126. package/dist/artifacts/ArtifactProviderMetadata.js +1 -4
  127. package/dist/artifacts/ArtifactReader.js +23 -0
  128. package/dist/artifacts/ArtifactResourceScope.js +100 -0
  129. package/dist/artifacts/AsarArtifactReader.js +218 -80
  130. package/dist/artifacts/AsarHeader.js +24 -0
  131. package/dist/artifacts/DirectoryArtifactReader.js +168 -65
  132. package/dist/artifacts/MachOSliceArtifactReader.js +116 -39
  133. package/dist/artifacts/NativeDmgArtifactReader.js +179 -87
  134. package/dist/artifacts/NativeDmgOwnership.js +109 -0
  135. package/dist/artifacts/SafeOutputTree.js +245 -70
  136. package/dist/artifacts/SafeOutputTreeCleanup.js +45 -0
  137. package/dist/artifacts/SafeOutputTreeCreationFailure.js +20 -0
  138. package/dist/artifacts/SafeOutputTreeIdentity.js +42 -0
  139. package/dist/artifacts/SafeOutputTreeReadback.js +33 -0
  140. package/dist/artifacts/ZipArtifactReader.js +77 -27
  141. package/dist/artifacts/apple/InterfaceBuilderAnalysis.js +58 -18
  142. package/dist/artifacts/apple/InterfaceBuilderDecodeBudget.js +62 -24
  143. package/dist/artifacts/apple/KeyedArchiveReader.js +76 -49
  144. package/dist/artifacts/apple/MachoLoadCommandReader.js +36 -6
  145. package/dist/artifacts/extraction/ArtifactExtraction.js +134 -92
  146. package/dist/artifacts/inventory/ArtifactGraphConstruction.js +116 -50
  147. package/dist/artifacts/inventory/ArtifactInventory.js +5 -4
  148. package/dist/artifacts/inventory/classify.js +87 -25
  149. package/dist/artifacts/inventory/hashStableRootArtifact.js +70 -0
  150. package/dist/artifacts/inventory/reader.js +13 -5
  151. package/dist/artifacts/inventory/scanCanonical.js +73 -30
  152. package/dist/artifacts/inventory/scanReader.js +43 -20
  153. package/dist/artifacts/javascript/JavaScriptArtifactFiles.js +72 -28
  154. package/dist/artifacts/javascript/JavaScriptSourceAnalysis.js +3 -0
  155. package/dist/browser/BrowserScenarioPartialObservation.js +8 -2
  156. package/dist/browser/BrowserScenarioSecrets.js +52 -37
  157. package/dist/browser/CdpBrowserProvider.js +9 -3
  158. package/dist/browser/CdpCaptureDocuments.js +40 -6
  159. package/dist/browser/CdpCaptureDomSvg.js +210 -0
  160. package/dist/browser/CdpCaptureEventBodyShapes.js +4 -8
  161. package/dist/browser/CdpCaptureEventHandlers.js +26 -9
  162. package/dist/browser/CdpCaptureEvents.js +4 -9
  163. package/dist/browser/CdpCaptureStorageFingerprints.js +3 -3
  164. package/dist/browser/CdpConnection.js +22 -5
  165. package/dist/browser/CdpElectronInspection.js +2 -2
  166. package/dist/browser/CdpElectronProvider.js +4 -3
  167. package/dist/browser/CdpElectronScripts.js +2 -2
  168. package/dist/browser/CdpPageCapture.js +1 -1
  169. package/dist/browser/CdpTargetSession.js +30 -34
  170. package/dist/browser/CdpWebMcpDiscovery.js +48 -23
  171. package/dist/browser/ElectronFileScope.js +99 -9
  172. package/dist/browser/PlaywrightBrowserScenarioProvider.js +63 -7
  173. package/dist/browser/PlaywrightElectronActiveProvider.js +11 -6
  174. package/dist/browser/PlaywrightScenarioArtifacts.js +5 -5
  175. package/dist/browser/PlaywrightScenarioBrowser.js +208 -43
  176. package/dist/browser/PlaywrightScenarioSession.js +130 -65
  177. package/dist/browser/PlaywrightScenarioStorage.js +507 -0
  178. package/dist/browser/PngVisualDiff.js +198 -29
  179. package/dist/browser/WebSourceMapFetcher.js +35 -9
  180. package/dist/browser/assets/LocalWebScriptArtifacts.js +3 -1
  181. package/dist/browser/assets/PublishWebScripts.js +75 -20
  182. package/dist/browser/assets/ScenarioScriptCapture.js +8 -12
  183. package/dist/browser/assets/WebArtifactReads.js +23 -1
  184. package/dist/browser/assets/WebSourceLocationArtifacts.js +1 -0
  185. package/dist/browser/execution/CdpExecutionCapture.js +3 -3
  186. package/dist/browser/execution/CdpPreciseCoverage.js +5 -8
  187. package/dist/browser/history/HarCapture.js +14 -0
  188. package/dist/browser/history/HarCaptureProcess.js +2 -10
  189. package/dist/browser/history/MitmproxyCaptureAdapter.js +3 -1
  190. package/dist/browser/modules/WebModuleArtifacts.js +1 -0
  191. package/dist/cli/adbCommands.js +337 -0
  192. package/dist/cli/analysisViewCommands.js +39 -1
  193. package/dist/cli/apktoolCommands.js +53 -0
  194. package/dist/cli/artifactCommands.js +8 -11
  195. package/dist/cli/binaryDiagnosticsCommands.js +19 -1
  196. package/dist/cli/browserAdvancedCommands.js +65 -36
  197. package/dist/cli/coreAnalysisCommands.js +2 -2
  198. package/dist/cli/coreBinaryCommands.js +12 -13
  199. package/dist/cli/coreNativeCommands.js +1 -14
  200. package/dist/cli/electronCommands.js +14 -10
  201. package/dist/cli/evmCommands.js +13 -4
  202. package/dist/cli/firmwareCommands.js +7 -2
  203. package/dist/cli/javascriptApplicationAnalysis.js +19 -13
  204. package/dist/cli/javascriptRecoveryCommands.js +22 -15
  205. package/dist/cli/jebCommands.js +99 -0
  206. package/dist/cli/jsonOutput.js +12 -4
  207. package/dist/cli/referenceSourceImportStatus.js +7 -0
  208. package/dist/cli/setupCommands.js +15 -3
  209. package/dist/cli/streamedJsonOutput.js +83 -4
  210. package/dist/cli/utilityCommands.js +68 -22
  211. package/dist/cli/webScriptCommands.js +20 -1
  212. package/dist/cli/webSourceLocationCommands.js +21 -9
  213. package/dist/cli.js +11 -2
  214. package/dist/cliBrowserScenarioCommands.js +2 -1
  215. package/dist/cliCommandNames.js +32 -0
  216. package/dist/cliJsonInput.js +47 -34
  217. package/dist/cliObservationOptions.js +7 -0
  218. package/dist/composition/adb.js +3 -0
  219. package/dist/composition/apktool.js +3 -0
  220. package/dist/composition/auxiliaryAnalysisProviders.js +5 -4
  221. package/dist/composition/binaryDiagnostics.js +4 -0
  222. package/dist/composition/browserScenario.js +2 -2
  223. package/dist/composition/directAnalysis.js +14 -7
  224. package/dist/composition/javascriptAnalysisWorkerProcess.js +48 -0
  225. package/dist/composition/jeb.js +6 -0
  226. package/dist/config/environment.js +10 -0
  227. package/dist/config/ghidraLanguageOverride.js +9 -0
  228. package/dist/config/mcpInputSchemaProfile.js +27 -0
  229. package/dist/config/parseConfig.js +28 -1
  230. package/dist/contracts/adb/adbToolContracts.js +353 -0
  231. package/dist/contracts/advertisedInputExamples.js +48 -0
  232. package/dist/contracts/analysisDetail.js +10 -0
  233. package/dist/contracts/analysisViewToolContracts.js +17 -2
  234. package/dist/contracts/apktool/apktoolToolContracts.js +33 -0
  235. package/dist/contracts/artifactComparisonExample.js +5 -5
  236. package/dist/contracts/artifactToolContracts.js +8 -5
  237. package/dist/contracts/browserToolContracts.js +1 -1
  238. package/dist/contracts/compactInputSchema.js +256 -0
  239. package/dist/contracts/errorSchemas.js +3 -1
  240. package/dist/contracts/functionComparisonExample.js +8 -0
  241. package/dist/contracts/functionWorkflowToolContracts.js +1 -1
  242. package/dist/contracts/inputSchemaPresentation.js +104 -13
  243. package/dist/contracts/javascript/electronToolContracts.js +16 -3
  244. package/dist/contracts/javascript/javascriptApplicationWorkflowExamples.js +3 -2
  245. package/dist/contracts/javascript/javascriptExportShapeComparisonExample.js +6 -3
  246. package/dist/contracts/javascript/javascriptRecoveryToolContracts.js +1 -1
  247. package/dist/contracts/javascript/javascriptRuntimeReconciliationExample.js +8 -7
  248. package/dist/contracts/jeb/jebToolContracts.js +64 -0
  249. package/dist/contracts/managed/managedToolContracts.js +3 -2
  250. package/dist/contracts/mobileApplicationGraphExamples.js +5 -5
  251. package/dist/contracts/native/binaryDiagnosticsToolContracts.js +25 -3
  252. package/dist/contracts/native/nativeToolContracts.js +1 -1
  253. package/dist/contracts/officialToolContracts.js +5 -5
  254. package/dist/contracts/sessionLifecycleInputs.js +4 -3
  255. package/dist/contracts/sessionStatusContract.js +3 -2
  256. package/dist/contracts/sessionToolContracts.js +5 -4
  257. package/dist/contracts/sessionToolSchemas.js +9 -4
  258. package/dist/contracts/toolContractExamples.js +6 -0
  259. package/dist/contracts/toolContractTypes.js +3 -0
  260. package/dist/contracts/toolContracts.js +6 -0
  261. package/dist/contracts/toolEffects.js +167 -0
  262. package/dist/contracts/toolOutputSchemaGroups.js +7 -5
  263. package/dist/contracts/toolOutputSchemaPrimitives.js +2 -5
  264. package/dist/contracts/toolSchemaMetadata.js +82 -7
  265. package/dist/domain/adb/adbDeviceAnalysis.js +583 -0
  266. package/dist/domain/analysisErrorBase.js +5 -0
  267. package/dist/domain/analysisErrorCleanup.js +29 -0
  268. package/dist/domain/analysisErrorPresentation.js +18 -4
  269. package/dist/domain/analysisErrorProjection.js +4 -1
  270. package/dist/domain/analysisSnapshot.js +5 -2
  271. package/dist/domain/analysisView/analysisView.js +53 -5
  272. package/dist/domain/analysisView/binaryLayoutView.js +2 -0
  273. package/dist/domain/analysisView/javascriptApplicationView.js +2 -0
  274. package/dist/domain/analysisView/nativeFunctionView.js +155 -0
  275. package/dist/domain/android/androidApplication.js +25 -20
  276. package/dist/domain/android/androidPartialObservation.js +36 -0
  277. package/dist/domain/apktool/apktoolResourceAnalysis.js +77 -0
  278. package/dist/domain/apple/appleApplication.js +40 -23
  279. package/dist/domain/apple/appleBundleAnatomy.js +95 -28
  280. package/dist/domain/apple/dyldPaths.js +9 -1
  281. package/dist/domain/apple/dylibResolution.js +3 -3
  282. package/dist/domain/apple/interfaceBuilderGraph.js +22 -19
  283. package/dist/domain/apple/interfaceBuilderKeyedArchive.js +10 -1
  284. package/dist/domain/artifactComparison.js +39 -11
  285. package/dist/domain/artifactGraph.js +6 -4
  286. package/dist/domain/artifactIdentity.js +37 -9
  287. package/dist/domain/artifactInspection.js +10 -50
  288. package/dist/domain/artifactIntegrityPolicy.js +10 -0
  289. package/dist/domain/artifactInventoryEvidence.js +16 -17
  290. package/dist/domain/artifactPathSyntax.js +1 -1
  291. package/dist/domain/binaryTarget.js +16 -0
  292. package/dist/domain/binaryTargetTypes.js +8 -1
  293. package/dist/domain/browserCompleteness.js +3 -2
  294. package/dist/domain/browserObservationSchemas.js +8 -4
  295. package/dist/domain/browserScenarioCaptureValues.js +2 -2
  296. package/dist/domain/browserScenarioNormalization.js +3 -3
  297. package/dist/domain/browserScenarioValues.js +3 -2
  298. package/dist/domain/callPath.js +8 -10
  299. package/dist/domain/canonicalDigest.js +7 -1
  300. package/dist/domain/canonicalJsonDigestSteps.js +34 -12
  301. package/dist/domain/canonicalOrdering.js +1 -13
  302. package/dist/domain/changedBehavior.js +2 -3
  303. package/dist/domain/compactStringIdentity.js +9 -0
  304. package/dist/domain/comparisonSemantics.js +0 -5
  305. package/dist/domain/digests.js +0 -3
  306. package/dist/domain/evidence.js +12 -6
  307. package/dist/domain/evidenceBundle.js +51 -33
  308. package/dist/domain/evidenceRecordSummary.js +144 -0
  309. package/dist/domain/firmware/firmwareAnalysis.js +4 -3
  310. package/dist/domain/functionComparison.js +2 -1
  311. package/dist/domain/functionComparisonNormalization.js +4 -3
  312. package/dist/domain/functionComparisonResults.js +2 -2
  313. package/dist/domain/functionDossierEvidence.js +2 -1
  314. package/dist/domain/hopperValues.js +11 -15
  315. package/dist/domain/inputIssueProjection.js +16 -1
  316. package/dist/domain/javascript/electronActiveObservation.js +4 -3
  317. package/dist/domain/javascript/electronStaticAnalysisBrowser.js +14 -15
  318. package/dist/domain/javascript/electronStaticAnalysisIpc.js +20 -21
  319. package/dist/domain/javascript/electronStaticAnalysisNative.js +73 -41
  320. package/dist/domain/javascript/electronStaticAnalysisValues.js +24 -4
  321. package/dist/domain/javascript/javascriptAnalysisResourceControls.js +45 -0
  322. package/dist/domain/javascript/javascriptApplicationAnalysis.js +6 -1
  323. package/dist/domain/javascript/javascriptApplicationChangeGraph.js +18 -14
  324. package/dist/domain/javascript/javascriptApplicationEvidenceSchemas.js +4 -0
  325. package/dist/domain/javascript/javascriptApplicationGraph.js +91 -28
  326. package/dist/domain/javascript/javascriptApplicationProjectionResources.js +35 -0
  327. package/dist/domain/javascript/javascriptApplicationVersionComparison.js +4 -4
  328. package/dist/domain/javascript/javascriptApplicationVersionComparisonSchemas.js +37 -22
  329. package/dist/domain/javascript/javascriptApplicationVersionItems.js +72 -45
  330. package/dist/domain/javascript/javascriptApplicationVersionKeys.js +16 -8
  331. package/dist/domain/javascript/javascriptAstFingerprint.js +60 -33
  332. package/dist/domain/javascript/javascriptAstValues.js +54 -0
  333. package/dist/domain/javascript/javascriptElectronMemberWrites.js +50 -0
  334. package/dist/domain/javascript/javascriptExportShapeComparison.js +3 -2
  335. package/dist/domain/javascript/javascriptExportShapeComparisonSchemas.js +31 -23
  336. package/dist/domain/javascript/javascriptExportShapeSelection.js +2 -2
  337. package/dist/domain/javascript/javascriptExportShapeVariants.js +3 -2
  338. package/dist/domain/javascript/javascriptFeatureSeed.js +5 -3
  339. package/dist/domain/javascript/javascriptFeatureTrace.js +7 -6
  340. package/dist/domain/javascript/javascriptFeatureTraceSchemas.js +17 -9
  341. package/dist/domain/javascript/javascriptFeatureTraversal.js +4 -4
  342. package/dist/domain/javascript/javascriptModuleSemanticIr.js +15 -0
  343. package/dist/domain/javascript/javascriptNativeHandoff.js +12 -7
  344. package/dist/domain/javascript/javascriptRpcEndpoints.js +253 -0
  345. package/dist/domain/javascript/javascriptRuntimeLoadState.js +1 -3
  346. package/dist/domain/javascript/javascriptRuntimeObservation.js +8 -5
  347. package/dist/domain/javascript/javascriptRuntimeReconciliation.js +12 -6
  348. package/dist/domain/javascript/javascriptRuntimeReconciliationActive.js +9 -8
  349. package/dist/domain/javascript/javascriptRuntimeReconciliationCaptureParsing.js +212 -0
  350. package/dist/domain/javascript/javascriptRuntimeReconciliationGraph.js +12 -6
  351. package/dist/domain/javascript/javascriptRuntimeReconciliationInputValidation.js +28 -0
  352. package/dist/domain/javascript/javascriptRuntimeReconciliationMatching.js +5 -5
  353. package/dist/domain/javascript/javascriptRuntimeReconciliationParsing.js +12 -223
  354. package/dist/domain/javascript/javascriptRuntimeReconciliationResult.js +2 -2
  355. package/dist/domain/javascript/javascriptRuntimeReconciliationRuntime.js +15 -4
  356. package/dist/domain/javascript/javascriptRuntimeReconciliationSchemas.js +2 -2
  357. package/dist/domain/javascript/javascriptRuntimeStaticCandidates.js +15 -17
  358. package/dist/domain/javascript/javascriptSemanticAnalysis.js +379 -30
  359. package/dist/domain/javascript/javascriptSemanticCallResolution.js +9 -7
  360. package/dist/domain/javascript/javascriptSemanticCallableResults.js +42 -0
  361. package/dist/domain/javascript/javascriptSemanticCalls.js +8 -1
  362. package/dist/domain/javascript/javascriptSemanticChildProcesses.js +2 -2
  363. package/dist/domain/javascript/javascriptSemanticCoverage.js +20 -0
  364. package/dist/domain/javascript/javascriptSemanticDataEffectHelpers.js +7 -9
  365. package/dist/domain/javascript/javascriptSemanticDataEffects.js +4 -11
  366. package/dist/domain/javascript/javascriptSemanticDerivedAnalysis.js +15 -4
  367. package/dist/domain/javascript/javascriptSemanticFileProjection.js +1 -0
  368. package/dist/domain/javascript/javascriptSemanticFingerprints.js +43 -42
  369. package/dist/domain/javascript/javascriptSemanticGraph.js +205 -52
  370. package/dist/domain/javascript/javascriptSemanticGraphSchemas.js +21 -11
  371. package/dist/domain/javascript/javascriptSemanticIr.js +0 -4
  372. package/dist/domain/javascript/javascriptSemanticIterationSources.js +139 -0
  373. package/dist/domain/javascript/javascriptSemanticMemberMutations.js +774 -136
  374. package/dist/domain/javascript/javascriptSemanticMutationInitializers.js +190 -0
  375. package/dist/domain/javascript/javascriptSemanticMutationValues.js +98 -41
  376. package/dist/domain/javascript/javascriptSemanticObjectReferences.js +381 -0
  377. package/dist/domain/javascript/javascriptSemanticObjects.js +9 -7
  378. package/dist/domain/javascript/javascriptSemanticPrimitives.js +7 -2
  379. package/dist/domain/javascript/javascriptSemanticProjection.js +72 -28
  380. package/dist/domain/javascript/javascriptSemanticPromises.js +15 -21
  381. package/dist/domain/javascript/javascriptSemanticPropertyPaths.js +100 -0
  382. package/dist/domain/javascript/javascriptSemanticProvenance.js +3 -3
  383. package/dist/domain/javascript/javascriptSemanticQuery.js +33 -29
  384. package/dist/domain/javascript/javascriptSemanticQueryIdentity.js +4 -5
  385. package/dist/domain/javascript/javascriptSemanticQuerySchemas.js +8 -9
  386. package/dist/domain/javascript/javascriptSemanticRequireOrigin.js +16 -10
  387. package/dist/domain/javascript/javascriptSemanticReturnedReferences.js +219 -0
  388. package/dist/domain/javascript/javascriptSemanticReturns.js +34 -48
  389. package/dist/domain/javascript/javascriptSemanticState.js +22 -2
  390. package/dist/domain/javascript/javascriptSemanticTraversal.js +25 -2
  391. package/dist/domain/javascript/javascriptSemanticValues.js +169 -30
  392. package/dist/domain/javascript/javascriptSourceAnalysis.js +1 -0
  393. package/dist/domain/javascript/javascriptSourceMapPaths.js +11 -1
  394. package/dist/domain/javascript/javascriptSourceParser.js +34 -9
  395. package/dist/domain/javascript/javascriptStaticAnalysis.js +29 -17
  396. package/dist/domain/javascript/javascriptStaticAnalysisBundler.js +13 -12
  397. package/dist/domain/javascript/javascriptStaticAnalysisCalls.js +49 -5
  398. package/dist/domain/javascript/javascriptStaticAnalysisFindings.js +8 -4
  399. package/dist/domain/javascript/javascriptStaticAnalysisHelpers.js +26 -15
  400. package/dist/domain/javascript/javascriptStaticAnalysisState.js +1 -0
  401. package/dist/domain/javascript/sourceToBundleComparison.js +7 -5
  402. package/dist/domain/javascript/sourceToBundleSignals.js +7 -7
  403. package/dist/domain/jeb/jebAnalysis.js +114 -0
  404. package/dist/domain/jsonSerialization.js +109 -55
  405. package/dist/domain/jsonShape.js +69 -31
  406. package/dist/domain/jsonValue.js +3 -0
  407. package/dist/domain/localPath.js +10 -4
  408. package/dist/domain/managed/managedApplicationGraph.js +47 -6
  409. package/dist/domain/managed/managedApplicationGraphCoverage.js +8 -2
  410. package/dist/domain/managed/managedApplicationGraphNodes.js +94 -59
  411. package/dist/domain/managed/managedArtifact.js +1 -0
  412. package/dist/domain/managed/managedInspectionEvidence.js +13 -0
  413. package/dist/domain/managed/managedMemberComparisonMatch.js +6 -7
  414. package/dist/domain/native/nativeAotPe.js +1408 -0
  415. package/dist/domain/native/nativeCallObservation.js +2 -4
  416. package/dist/domain/native/nativeInstruction.js +21 -0
  417. package/dist/domain/native/nativeMetadataRecovery.js +79 -6
  418. package/dist/domain/native/nativeValueFlow.js +5 -11
  419. package/dist/domain/native/objcSwiftMetadata.js +15 -17
  420. package/dist/domain/native/peResources.js +94 -0
  421. package/dist/domain/nativeConvention.js +33 -0
  422. package/dist/domain/process/processCapture.js +102 -11
  423. package/dist/domain/process/processCaptureCoverage.js +8 -5
  424. package/dist/domain/process/processCaptureExample.js +67 -0
  425. package/dist/domain/process/processCaptureValidation.js +83 -3
  426. package/dist/domain/process/processComparison.js +0 -23
  427. package/dist/domain/process/processScenario.js +62 -10
  428. package/dist/domain/process/processTraceEvaluation.js +4 -4
  429. package/dist/domain/process/processTraceSpecification.js +1 -3
  430. package/dist/domain/propertyListKeys.js +3 -1
  431. package/dist/domain/providerCleanupError.js +6 -2
  432. package/dist/domain/reconstructionCoverage.js +2 -1
  433. package/dist/domain/reconstructionUnknowns.js +4 -3
  434. package/dist/domain/reconstructionVerification.js +3 -2
  435. package/dist/domain/referenceSourceGraph.js +32 -23
  436. package/dist/domain/referenceSourceImportParsing.js +40 -48
  437. package/dist/domain/referenceSourcePathIdentity.js +22 -0
  438. package/dist/domain/referenceSourceRequireBindings.js +137 -0
  439. package/dist/domain/residualUnknown.js +3 -2
  440. package/dist/domain/staticRuntimeCorrelation.js +2 -1
  441. package/dist/domain/swiftSymbolClassification.js +6 -1
  442. package/dist/domain/symbolAnalysis.js +17 -2
  443. package/dist/domain/unicodeCodePointOrder.js +6 -0
  444. package/dist/domain/webBundleAnalyzerInspection.js +23 -3
  445. package/dist/domain/webCaptureDiff.js +170 -30
  446. package/dist/domain/webCaptureDiffSchemas.js +2 -8
  447. package/dist/domain/webInventory.js +3 -2
  448. package/dist/domain/webMcpDiscovery.js +4 -3
  449. package/dist/domain/webScriptExport.js +1 -1
  450. package/dist/domain/webScriptExportError.js +10 -4
  451. package/dist/domain/webScriptExportPlan.js +7 -13
  452. package/dist/domain/zipPackageFormat.js +4 -1
  453. package/dist/domain/zodCollectionSteps.js +24 -0
  454. package/dist/dotnet/ManagedArtifactInspector.js +55 -43
  455. package/dist/dotnet/ManagedDecodeBudget.js +80 -0
  456. package/dist/dotnet/ManagedMemberInspector.js +13 -6
  457. package/dist/dotnet/ManagedMemberInspectorCore.js +2 -2
  458. package/dist/dotnet/ManagedMemberInstructionDecoder.js +5 -4
  459. package/dist/dotnet/ManagedMemberRows.js +9 -4
  460. package/dist/dotnet/ManagedMetadataHeaps.js +15 -5
  461. package/dist/dotnet/ManagedMetadataInventoryRows.js +20 -11
  462. package/dist/dotnet/ManagedMetadataLayout.js +10 -4
  463. package/dist/dotnet/ManagedMethodBodyReader.js +8 -3
  464. package/dist/dotnet/ManagedNativeBoundaryHelpers.js +3 -2
  465. package/dist/dotnet/ManagedNativeBoundaryInspector.js +49 -34
  466. package/dist/dotnet/ManagedPeReader.js +41 -25
  467. package/dist/dotnet/ManagedReaderFailure.js +2 -1
  468. package/dist/dotnet/ManagedStaticProvider.js +65 -31
  469. package/dist/dotnet/ManagedStaticProviderMetadata.js +1 -4
  470. package/dist/evaluation/AgentEvaluationReport.js +9 -5
  471. package/dist/evaluation/CodexAgentEval.js +43 -13
  472. package/dist/evm/EvmoleFailures.js +0 -2
  473. package/dist/evm/EvmoleInterfaceProvider.js +67 -2
  474. package/dist/filesystem/OwnedDirectoryHandle.js +29 -0
  475. package/dist/filesystem/OwnedFileHandle.js +36 -0
  476. package/dist/filesystem/RegularFile.js +73 -0
  477. package/dist/filesystem/StableFileHash.js +46 -0
  478. package/dist/filesystem/readFileHandleChunks.js +26 -0
  479. package/dist/firmware/FirmwareCommand.js +25 -3
  480. package/dist/firmware/FirmwareFiles.js +23 -8
  481. package/dist/firmware/FirmwareProvider.js +156 -32
  482. package/dist/firmware/FirmwarePublication.js +24 -3
  483. package/dist/firmware/FirmwareRelease.js +1 -0
  484. package/dist/generatedPackageMetadata.js +2 -2
  485. package/dist/ghidra/GhidraAnalysisProfile.js +55 -4
  486. package/dist/ghidra/GhidraAnalysisSeeds.js +211 -0
  487. package/dist/ghidra/GhidraClient.js +90 -8
  488. package/dist/ghidra/GhidraDiagnostics.js +11 -8
  489. package/dist/ghidra/GhidraFunctionValues.js +26 -2
  490. package/dist/ghidra/GhidraInstallation.js +111 -10
  491. package/dist/ghidra/GhidraInventoryValues.js +23 -1
  492. package/dist/ghidra/GhidraLanguageCatalog.js +99 -0
  493. package/dist/ghidra/GhidraLauncher.js +123 -58
  494. package/dist/ghidra/GhidraLoadImageAttest.js +49 -2
  495. package/dist/ghidra/GhidraMipsProfile.js +79 -0
  496. package/dist/ghidra/GhidraProvider.js +57 -9
  497. package/dist/ghidra/GhidraProviderCapabilities.js +18 -8
  498. package/dist/ghidra/GhidraProviderClient.js +282 -21
  499. package/dist/ghidra/GhidraSessionValues.js +9 -2
  500. package/dist/hopper/HopperAnalysisProfile.js +2 -0
  501. package/dist/hopper/HopperCleanup.js +1 -1
  502. package/dist/hopper/HopperClient.js +15 -6
  503. package/dist/hopper/HopperMachOImage.js +2 -0
  504. package/dist/hopper/HopperProvider.js +13 -2
  505. package/dist/ida/IdaOperationRunner.js +10 -2
  506. package/dist/ida/IdaProvider.js +7 -0
  507. package/dist/ida/IdaSessionClient.js +7 -3
  508. package/dist/ida/IdaWorkspace.js +4 -2
  509. package/dist/inspector/JavaScriptRuntimeScope.js +9 -5
  510. package/dist/inspector/V8InspectorCaptureProjection.js +46 -13
  511. package/dist/inspector/V8InspectorProvider.js +60 -8
  512. package/dist/javascript/analysis/JavaScriptAnalysisTransfer.js +326 -0
  513. package/dist/javascript/analysis/JavaScriptAnalysisWorker.js +520 -0
  514. package/dist/javascript/analysis/JavaScriptAnalysisWorkerProtocol.js +63 -0
  515. package/dist/javascript/analysis/JavaScriptAnalysisWorkerSchemas.js +521 -0
  516. package/dist/javascript/analysis/JavaScriptAnalysisWorkerServer.js +116 -0
  517. package/dist/javascript/recovery/RecoveryFiles.js +18 -7
  518. package/dist/javascript/recovery/WakaruCommand.js +22 -9
  519. package/dist/javascript/recovery/WakaruExecution.js +11 -7
  520. package/dist/javascript/recovery/WakaruProvider.js +139 -16
  521. package/dist/javascript/recovery/WakaruPublication.js +14 -4
  522. package/dist/javascript/recovery/WakaruRelease.js +10 -3
  523. package/dist/javascript/recovery/WakaruReport.js +12 -7
  524. package/dist/javascript/recovery/WakaruVersion.js +24 -0
  525. package/dist/javascript/sourceMaps/SourceMapCommand.js +16 -3
  526. package/dist/javascript/sourceMaps/SourceMapDecoder.js +63 -7
  527. package/dist/javascript/sourceMaps/SourceMapFormat.js +15 -4
  528. package/dist/jeb/JebMcpConnection.js +179 -0
  529. package/dist/jeb/JebMcpEndpoint.js +40 -0
  530. package/dist/jeb/JebProvider.js +299 -0
  531. package/dist/main/shutdown.js +76 -32
  532. package/dist/main/transport.js +1 -1
  533. package/dist/mcpDoctor.js +15 -6
  534. package/dist/native/AppleDispatchCoverage.js +25 -12
  535. package/dist/native/AppleDispatchMetadata.js +14 -7
  536. package/dist/native/AppleMachoFixups.js +71 -15
  537. package/dist/native/AppleMachoSelection.js +23 -3
  538. package/dist/native/AppleObjcDispatchFacets.js +3 -3
  539. package/dist/native/AppleObjcProperties.js +17 -7
  540. package/dist/native/LldbCallTracer.js +241 -75
  541. package/dist/native/NativeMacOSProvider.js +100 -20
  542. package/dist/native/NativeMacOSProviderMetadata.js +1 -2
  543. package/dist/native/NativeMachoInspection.js +11 -7
  544. package/dist/native/NativeUiHelperRuntime.js +6 -1
  545. package/dist/native/NativeUiObservation.js +4 -3
  546. package/dist/native/pe/PeResourceLayout.js +120 -0
  547. package/dist/native/pe/PeResourceParser.js +286 -0
  548. package/dist/native/pe/PeResourcesProvider.js +63 -0
  549. package/dist/process/BoundedFileBytes.js +30 -7
  550. package/dist/process/DarwinProcessRunTokenReader.js +8 -3
  551. package/dist/process/OwnedCommand.js +4 -3
  552. package/dist/process/ProcessOwnership.js +104 -112
  553. package/dist/process/ProcessOwnershipObservation.js +104 -51
  554. package/dist/process/ProcessOwnershipProcessTree.js +4 -4
  555. package/dist/process/ProcessRunTokenObservations.js +48 -0
  556. package/dist/process/ProviderDiagnosticRedaction.js +17 -0
  557. package/dist/process/ProviderProcess.js +4 -3
  558. package/dist/process/capture/FilesystemSnapshot.js +116 -22
  559. package/dist/process/capture/ProcessCaptureLifecycle.js +363 -86
  560. package/dist/process/capture/ProcessCaptureProgress.js +62 -0
  561. package/dist/process/capture/ProcessFilesystemEffects.js +19 -4
  562. package/dist/process/capture/ProcessHarness.js +202 -47
  563. package/dist/process/capture/ProcessNormalization.js +3 -1
  564. package/dist/process/capture/ProcessScenarioRuntimeValidation.js +5 -2
  565. package/dist/process/capture/TerminalRenderer.js +24 -7
  566. package/dist/reference/ReferenceSourceReader.js +22 -5
  567. package/dist/reference/ReferenceSourceReaderEntries.js +114 -51
  568. package/dist/reference/ReferenceSourceReaderErrors.js +12 -0
  569. package/dist/reference/ReferenceSourceReaderFile.js +50 -10
  570. package/dist/reference/ReferenceSourceReaderValidate.js +4 -4
  571. package/dist/server/EvidenceMcpServer.js +36 -1
  572. package/dist/server/admittedToolOperation.js +9 -0
  573. package/dist/server/analysisAdmission.js +8 -0
  574. package/dist/server/contractToolHandler.js +21 -0
  575. package/dist/server/createServer.js +118 -47
  576. package/dist/server/registerAdbTools.js +36 -0
  577. package/dist/server/registerAnalysisViewTool.js +4 -9
  578. package/dist/server/registerAndroidTools.js +3 -12
  579. package/dist/server/registerApktoolTools.js +14 -0
  580. package/dist/server/registerApplicationTools/compareExportShapes.js +6 -7
  581. package/dist/server/registerApplicationTools/compareSourceToBundle.js +4 -5
  582. package/dist/server/registerApplicationTools/compareVersions.js +3 -2
  583. package/dist/server/registerApplicationTools/coverage.js +3 -2
  584. package/dist/server/registerApplicationTools/helpers.js +3 -2
  585. package/dist/server/registerApplicationTools/obligationLedger.js +3 -2
  586. package/dist/server/registerApplicationTools/projectMobileApplicationGraph.js +3 -2
  587. package/dist/server/registerApplicationTools/traceFeature.js +3 -2
  588. package/dist/server/registerApplicationTools/traceSemantics.js +4 -5
  589. package/dist/server/registerArtifactComparisonTool.js +5 -2
  590. package/dist/server/registerArtifactTools.js +2 -2
  591. package/dist/server/registerBinaryDiagnosticsTools.js +16 -4
  592. package/dist/server/registerBrowserScenarioTool.js +10 -7
  593. package/dist/server/registerBrowserTools.js +12 -9
  594. package/dist/server/registerBundleComparisonTool.js +16 -2
  595. package/dist/server/registerCloseLifecycleTool.js +36 -5
  596. package/dist/server/registerElectronTools.js +28 -10
  597. package/dist/server/registerEnhancedTools.js +78 -73
  598. package/dist/server/registerEvidenceTools.js +54 -46
  599. package/dist/server/registerEvmTools.js +4 -9
  600. package/dist/server/registerFirmwareTools.js +3 -11
  601. package/dist/server/registerFunctionComparisonTool.js +5 -2
  602. package/dist/server/registerJavaScriptRecoveryTool.js +4 -9
  603. package/dist/server/registerJavaScriptRuntimeObservationTools.js +9 -6
  604. package/dist/server/registerJebTools.js +16 -0
  605. package/dist/server/registerManagedTools.js +7 -4
  606. package/dist/server/registerManagedWorkflowTools/compareManagedMembers.js +4 -6
  607. package/dist/server/registerManagedWorkflowTools/importManagedReconstruction.js +3 -2
  608. package/dist/server/registerManagedWorkflowTools/projectManagedApplicationGraph.js +3 -2
  609. package/dist/server/registerManagedWorkflowTools/verifyManagedNativeBoundaries.js +3 -2
  610. package/dist/server/registerOfficialTools.js +31 -25
  611. package/dist/server/registerPeResourcesTool.js +9 -0
  612. package/dist/server/registerProcessComparisonTool.js +5 -2
  613. package/dist/server/registerRecordedCrashTools.js +4 -9
  614. package/dist/server/registerSessionRecordTools.js +2 -1
  615. package/dist/server/registerSessionTools.js +58 -21
  616. package/dist/server/registerWebModuleTool.js +4 -9
  617. package/dist/server/registerWebNetworkCaptureTool.js +4 -9
  618. package/dist/server/registerWebRuntimeTools.js +6 -5
  619. package/dist/server/registerWebScriptTool.js +6 -3
  620. package/dist/server/registerWebSourceLocationTool.js +4 -9
  621. package/dist/server/toolResult.js +21 -2
  622. package/dist/windows/WindowsPrivateRuntime.js +12 -5
  623. package/install.sh +7 -4
  624. package/licenses/nativeaot-parser-MIT.txt +28 -0
  625. package/native/windows/build/manifest.json +2 -2
  626. package/native/windows/build/rea-windows-x64.node +0 -0
  627. package/package.json +38 -7
  628. package/scripts/rea.mjs +16 -1
  629. package/skills/reverse-engineer-anything/SKILL.md +52 -51
  630. package/skills/reverse-engineer-anything/references/connection-and-recovery.md +127 -0
  631. package/skills/reverse-engineer-anything/references/evidence-workflows.md +8 -0
  632. package/skills/reverse-engineer-anything/references/javascript-applications.md +92 -13
  633. package/skills/reverse-engineer-anything/references/native-and-artifacts.md +31 -1
  634. package/dist/artifacts/inventory/policy.js +0 -2
  635. package/dist/domain/managed/managedApplicationGraphNodeCoverage.js +0 -6
  636. package/dist/server/registerNativeTools.js +0 -6
@@ -3,7 +3,7 @@ import { localPathStringSchema } from "../localPath.js";
3
3
  const hexSchema = z.string().regex(/^0x[0-9a-f]+$/u);
4
4
  const nativeString = z
5
5
  .string()
6
- .regex(/^[^\u0000]*$/u, "Native launch and breakpoint strings cannot contain NUL");
6
+ .regex(/^[^\x00]*$/u, "Native launch and breakpoint strings cannot contain NUL");
7
7
  /** Objective-C class names and selectors never contain spaces or brackets. */
8
8
  const objcName = nativeString
9
9
  .min(1)
@@ -46,9 +46,7 @@ export const nativeCallObservationInputSchema = z.strictObject({
46
46
  .record(z
47
47
  .string()
48
48
  .min(1)
49
- .regex(/^[^=\u0000]+$/u, "Environment names cannot contain '=' or NUL"), z
50
- .string()
51
- .regex(/^[^\u0000]*$/u, "Environment values cannot contain NUL"))
49
+ .regex(/^[^=\x00]+$/u, "Environment names cannot contain '=' or NUL"), z.string().regex(/^[^\x00]*$/u, "Environment values cannot contain NUL"))
52
50
  .default({})
53
51
  .describe("Overrides on top of the environment REA runs with."),
54
52
  working_directory: localPathStringSchema.optional(),
@@ -12,6 +12,27 @@ const reference = z.strictObject({
12
12
  indirect: z.boolean(),
13
13
  computed: z.boolean(),
14
14
  operand_index: z.number().int(),
15
+ source_address: z.string().min(1).nullable().optional(),
16
+ data: z.boolean().nullable().optional(),
17
+ read: z.boolean().nullable().optional(),
18
+ write: z.boolean().nullable().optional(),
19
+ primary: z
20
+ .boolean()
21
+ .nullable()
22
+ .optional()
23
+ .describe("Provider primary-reference status, not proof of literal addressing or a runtime access. Null or omission means unavailable."),
24
+ provenance: z
25
+ .string()
26
+ .min(1)
27
+ .nullable()
28
+ .optional()
29
+ .describe("Provider subsystem reporting this reference; null or omission means unavailable."),
30
+ source: z
31
+ .string()
32
+ .min(1)
33
+ .nullable()
34
+ .optional()
35
+ .describe("Provider reference origin, such as analysis, default, imported or user_defined; null or omission means unavailable."),
15
36
  });
16
37
  /** Provider-decoded facts for one instruction; operand tokens preserve their native ordering. */
17
38
  export const nativeInstructionSchema = z.strictObject({
@@ -4,6 +4,8 @@ const relatedType = z.strictObject({ address, type: z.string().nullable() });
4
4
  /** Runtime-format metadata recovered in an analysis image, with explicit inference boundaries. */
5
5
  export const nativeMetadataRecoverySchema = z.strictObject({
6
6
  format: z.literal("dotnet-nativeaot"),
7
+ /** Identifies parser-only facts without claiming Ghidra defined a DataType. */
8
+ source: z.enum(["analysis-database", "read-only-derived-overlay"]).optional(),
7
9
  status: z.enum(["complete", "partial"]),
8
10
  header_address: address,
9
11
  format_major: z.number().int().nonnegative(),
@@ -21,18 +23,25 @@ export const nativeMetadataRecoverySchema = z.strictObject({
21
23
  procedure_name: z.string().nullable(),
22
24
  basis: z.literal("method-table-pointer"),
23
25
  })),
24
- derived_memory: z.strictObject({
26
+ derived_memory: z
27
+ .strictObject({
25
28
  address,
26
29
  size_bytes: z.number().int().nonnegative(),
27
30
  sha256: z.string().regex(/^[a-f0-9]{64}$/u),
28
31
  file_offset: z.null(),
29
- }),
32
+ })
33
+ .nullable(),
34
+ truncated: z.boolean().optional(),
35
+ virtual_slots_omitted: z.number().int().nonnegative().optional(),
36
+ interfaces_omitted: z.number().int().nonnegative().optional(),
37
+ output_budget_bytes: z.number().int().nonnegative().optional(),
30
38
  diagnostics: z.array(z.string()),
31
39
  limitations: z.array(z.string()),
32
40
  });
33
41
  /** Discover a recovered runtime format and reusable type identities from the loaded image. */
34
42
  export const nativeMetadataRecoverySummarySchema = z.strictObject({
35
43
  format: z.literal("dotnet-nativeaot"),
44
+ analysis_mode: z.literal("read-only-derived-overlay").optional(),
36
45
  status: z.enum(["complete", "partial", "not_applicable"]),
37
46
  reason: z.string().nullable(),
38
47
  analysis_artifact_sha256: z.string().regex(/^[a-f0-9]{64}$/u),
@@ -42,12 +51,76 @@ export const nativeMetadataRecoverySummarySchema = z.strictObject({
42
51
  format_minor: z.number().int().nonnegative().nullable(),
43
52
  method_tables: z.number().int().nonnegative(),
44
53
  types: z.array(relatedType),
45
- derived_memory: nativeMetadataRecoverySchema.shape.derived_memory.nullable(),
54
+ frozen_strings: z
55
+ .array(z.strictObject({ address, value: z.string() }))
56
+ .optional(),
57
+ truncated: z.boolean().optional(),
58
+ types_omitted: z.number().int().nonnegative().optional(),
59
+ frozen_strings_omitted: z.number().int().nonnegative().optional(),
60
+ output_budget_bytes: z.number().int().nonnegative().optional(),
61
+ derived_overlay: z
62
+ .strictObject({
63
+ address,
64
+ size_bytes: z.number().int().nonnegative(),
65
+ sha256: z.string().regex(/^[a-f0-9]{64}$/u),
66
+ })
67
+ .nullable()
68
+ .optional(),
69
+ derived_memory: nativeMetadataRecoverySchema.shape.derived_memory,
46
70
  coverage: z
47
71
  .strictObject({
48
- frozen_object_candidates: z.number().int().nonnegative(),
49
- frozen_objects_annotated: z.number().int().nonnegative(),
50
- basis: z.literal("rehydrated-pointer-candidates-and-committed-instance-types"),
72
+ frozen_object_candidates: z.number().int().nonnegative().optional(),
73
+ frozen_objects_annotated: z.number().int().nonnegative().optional(),
74
+ pointer_candidates_examined: z.number().int().nonnegative().optional(),
75
+ pointer_slots_examined: z.number().int().nonnegative().optional(),
76
+ scan_bytes_examined: z.number().int().nonnegative().optional(),
77
+ scan_bytes_omitted: z.number().int().nonnegative().optional(),
78
+ rtr_signature_scan_bytes_examined: z
79
+ .number()
80
+ .int()
81
+ .nonnegative()
82
+ .optional(),
83
+ rtr_signature_scan_bytes_omitted: z
84
+ .number()
85
+ .int()
86
+ .nonnegative()
87
+ .optional(),
88
+ method_table_validation_items_examined: z
89
+ .number()
90
+ .int()
91
+ .nonnegative()
92
+ .optional(),
93
+ work_units_examined: z.number().int().nonnegative().optional(),
94
+ method_tables_recovered: z.number().int().nonnegative().optional(),
95
+ frozen_string_candidates: z.number().int().nonnegative().optional(),
96
+ frozen_scan_bytes_examined: z.number().int().nonnegative().optional(),
97
+ frozen_scan_bytes_omitted: z.number().int().nonnegative().optional(),
98
+ frozen_string_data_bytes_examined: z
99
+ .number()
100
+ .int()
101
+ .nonnegative()
102
+ .optional(),
103
+ source_bytes_examined: z.number().int().nonnegative().optional(),
104
+ source_bytes_omitted: z.number().int().nonnegative().optional(),
105
+ source_byte_budget_bytes: z.number().int().nonnegative().optional(),
106
+ work_budget_units: z.number().int().nonnegative().optional(),
107
+ working_memory_budget_bytes: z.number().int().nonnegative().optional(),
108
+ working_memory_bytes_peak: z.number().int().nonnegative().optional(),
109
+ truncation_reason: z
110
+ .enum([
111
+ "source-byte-budget",
112
+ "work-unit-budget",
113
+ "working-memory-budget",
114
+ "response-budget",
115
+ ])
116
+ .optional(),
117
+ basis: z.enum([
118
+ "rehydrated-pointer-candidates-and-committed-instance-types",
119
+ "raw-image-pointer-scan",
120
+ "raw-image-and-rehydrated-pointer-scan",
121
+ "unsupported-layout",
122
+ "no-rtr-header",
123
+ ]),
51
124
  })
52
125
  .nullable(),
53
126
  diagnostics: z.array(z.string()),
@@ -16,9 +16,7 @@ export const nativePcodeOperationSchema = z.strictObject({
16
16
  sequence: z.number().int().nonnegative(),
17
17
  opcode: z.string().min(1),
18
18
  is_dead: z.boolean(),
19
- block_membership: z
20
- .enum(["member", "detached", "unavailable"])
21
- .default("unavailable"),
19
+ block_membership: z.enum(["member", "detached", "unavailable"]),
22
20
  inputs: z.array(nativeVarnodeSchema),
23
21
  output: nativeVarnodeSchema.nullable(),
24
22
  });
@@ -50,20 +48,16 @@ export const nativeValueFlowSchema = z.discriminatedUnion("available", [
50
48
  operations: z.array(nativePcodeOperationSchema),
51
49
  def_use: z.array(nativePcodeDefUseSchema),
52
50
  effects: z.array(nativePcodeEffectSchema),
53
- parameters: z
54
- .array(z.strictObject({
51
+ parameters: z.array(z.strictObject({
55
52
  ordinal: z.number().int().nonnegative(),
56
53
  name: z.string(),
57
54
  data_type: z.string(),
58
- }))
59
- .default([]),
60
- parameter_uses: z
61
- .array(z.strictObject({
55
+ })),
56
+ parameter_uses: z.array(z.strictObject({
62
57
  ordinal: z.number().int().nonnegative(),
63
58
  use: z.string(),
64
59
  input_index: z.number().int().nonnegative(),
65
- }))
66
- .default([]),
60
+ })),
67
61
  truncated: z.boolean(),
68
62
  omitted_operations_lower_bound: z.number().int().nonnegative(),
69
63
  known_omitted_inputs: z.number().int().nonnegative(),
@@ -1,4 +1,5 @@
1
1
  import { z } from "zod";
2
+ import { compareUnicodeCodePoints, compositeKey, } from "../unicodeCodePointOrder.js";
2
3
  /** Objective-C method type. */
3
4
  export const objcMethodTypeSchema = z.enum([
4
5
  "instance",
@@ -10,25 +11,22 @@ export const objcMethodTypeSchema = z.enum([
10
11
  export const objcPropertyAttributeSchema = z.strictObject({
11
12
  name: z.string().min(1),
12
13
  value: z.string(),
13
- is_weak: z.boolean().default(false),
14
- is_atomic: z.boolean().default(false),
15
- is_copy: z.boolean().default(false),
16
- is_strong: z.boolean().default(false),
17
14
  });
18
15
  /** Objective-C method metadata. */
19
16
  export const objcMethodSchema = z.strictObject({
20
17
  selector: z.string().min(1),
21
18
  method_type: objcMethodTypeSchema,
22
19
  address: z.number().int().nullable(),
23
- is_required: z.boolean().default(false),
24
- is_optional: z.boolean().default(false),
20
+ is_required: z.boolean().nullable(),
21
+ is_optional: z.boolean().nullable(),
25
22
  });
26
23
  /** Objective-C property metadata. */
27
24
  export const objcPropertySchema = z.strictObject({
28
25
  name: z.string().min(1),
29
26
  type_encoding: z.string().nullable(),
30
- attributes: z.array(objcPropertyAttributeSchema).default([]),
31
- is_readonly: z.boolean().default(false),
27
+ attributes: z.array(objcPropertyAttributeSchema),
28
+ atomicity: z.enum(["atomic", "nonatomic"]).nullable(),
29
+ is_readonly: z.boolean().nullable(),
32
30
  getter: z.string().nullable(),
33
31
  setter: z.string().nullable(),
34
32
  });
@@ -43,12 +41,12 @@ export const objcProtocolSchema = z.strictObject({
43
41
  export const objcClassSchema = z.strictObject({
44
42
  name: z.string().min(1),
45
43
  super_class: z.string().nullable(),
46
- is_meta_class: z.boolean().default(false),
47
- is_root_class: z.boolean().default(false),
44
+ is_meta_class: z.boolean().nullable(),
45
+ is_root_class: z.boolean().nullable(),
48
46
  methods: z.array(objcMethodSchema).default([]),
49
47
  properties: z.array(objcPropertySchema).default([]),
50
48
  protocols: z.array(z.string()).default([]),
51
- ivar_count: z.number().int().nonnegative().default(0),
49
+ ivar_count: z.number().int().nonnegative().nullable(),
52
50
  instance_size: z.number().int().nonnegative().nullable(),
53
51
  location: z
54
52
  .object({
@@ -333,23 +331,23 @@ export const inspectNativeDispatchMetadata = (names, maxRecords = 5_000) => {
333
331
  selector: implementation.selector,
334
332
  method_type: implementation.method_type,
335
333
  address: parseMetadataAddress(implementation.implementation_address),
336
- is_required: false,
337
- is_optional: false,
334
+ is_required: null,
335
+ is_optional: null,
338
336
  });
339
337
  methodsByClass.set(implementation.class_name, methods);
340
338
  }
341
339
  const classes = [...classNames].sort().map((name) => ({
342
340
  name,
343
341
  super_class: null,
344
- is_meta_class: false,
345
- is_root_class: false,
342
+ is_meta_class: null,
343
+ is_root_class: null,
346
344
  methods: methodsByClass.get(name) ?? [],
347
345
  properties: [],
348
346
  protocols: [],
349
- ivar_count: 0,
347
+ ivar_count: null,
350
348
  instance_size: null,
351
349
  }));
352
- const decodedImplementations = [...implementations.values()].sort((left, right) => `${left.class_name}:${left.selector}`.localeCompare(`${right.class_name}:${right.selector}`));
350
+ const decodedImplementations = [...implementations.values()].sort((left, right) => compareUnicodeCodePoints(compositeKey([left.class_name, left.selector]), compositeKey([right.class_name, right.selector])));
353
351
  const swift = swiftSymbols.length > 0;
354
352
  return objcSwiftMetadataSchema.parse({
355
353
  objc_classes: classes,
@@ -0,0 +1,94 @@
1
+ import { z } from "zod";
2
+ const uint = z.number().int().min(0).max(0xffffffff);
3
+ const range = z.strictObject({ offset: uint, bytes: uint });
4
+ const identity = z.discriminatedUnion("kind", [
5
+ z.strictObject({ kind: z.literal("id"), id: uint }),
6
+ z.strictObject({
7
+ kind: z.literal("name"),
8
+ name: z.string(),
9
+ utf16le_hex: z.string().regex(/^(?:[0-9a-f]{4})*$/),
10
+ location: range,
11
+ }),
12
+ ]);
13
+ /** Complete bounded inspection of a caller-selected PE image, without execution. */
14
+ export const inspectPeResourcesInputSchema = z.strictObject({
15
+ path: z.string().min(1).describe("Absolute filesystem path to a PE image"),
16
+ max_file_bytes: z
17
+ .number()
18
+ .int()
19
+ .min(64)
20
+ .max(536870912)
21
+ .default(67108864)
22
+ .describe("Maximum stable artifact bytes to read (default 64 MiB)"),
23
+ max_entries: z
24
+ .number()
25
+ .int()
26
+ .min(1)
27
+ .max(65536)
28
+ .default(4096)
29
+ .describe("Maximum resource directory entries to examine; exceeding the budget fails without partial success"),
30
+ });
31
+ /** Original file/RVA locations and resource identities; icon edges are static relationships. */
32
+ export const peResourcesSchema = z.strictObject({
33
+ artifact: z.strictObject({
34
+ path: z.string().min(1),
35
+ sha256: z.string().regex(/^[a-f0-9]{64}$/),
36
+ bytes: uint,
37
+ }),
38
+ format: z.enum(["pe32", "pe32-plus"]),
39
+ machine: uint,
40
+ directory: z
41
+ .strictObject({
42
+ rva: uint,
43
+ location: range,
44
+ data_directory_location: range,
45
+ })
46
+ .nullable(),
47
+ directories: z.array(z.strictObject({
48
+ location: range,
49
+ characteristics: uint,
50
+ timestamp: uint,
51
+ major_version: uint,
52
+ minor_version: uint,
53
+ named_entries: uint,
54
+ id_entries: uint,
55
+ })),
56
+ resources: z.array(z.strictObject({
57
+ index: uint,
58
+ type: identity,
59
+ name: identity,
60
+ language: identity,
61
+ entry_locations: z.array(range).length(3),
62
+ data_entry_location: range,
63
+ code_page: uint,
64
+ reserved: uint,
65
+ payload: z.strictObject({
66
+ rva: uint,
67
+ location: range,
68
+ sha256: z.string().regex(/^[a-f0-9]{64}$/),
69
+ }),
70
+ })),
71
+ icon_groups: z.array(z.strictObject({
72
+ resource_index: uint,
73
+ images: z.array(z.strictObject({
74
+ location: range,
75
+ width: uint,
76
+ height: uint,
77
+ color_count: uint,
78
+ reserved: uint,
79
+ planes: uint,
80
+ bit_count: uint,
81
+ declared_bytes: uint,
82
+ resource_id: uint,
83
+ candidate_resource_indices: z.array(uint),
84
+ same_language_resource_index: uint.nullable(),
85
+ size_matches: z.boolean().nullable(),
86
+ })),
87
+ })),
88
+ coverage: z.strictObject({
89
+ status: z.literal("complete"),
90
+ examined_entries: uint,
91
+ resources: uint,
92
+ }),
93
+ limitations: z.array(z.string()),
94
+ });
@@ -0,0 +1,33 @@
1
+ /** Path-segment conventions. These are inferences, not observations of runtime behavior. */
2
+ const foldSegment = (segment) => segment.toLocaleLowerCase("en-US");
3
+ const REACT_NATIVE_SEGMENTS = new Set([
4
+ "react.framework",
5
+ "reactnative.framework",
6
+ "libreactnative.so",
7
+ "libreactnativejni.so",
8
+ "libhermes_executor.so",
9
+ "libhermes.so",
10
+ "hermes.framework",
11
+ ]);
12
+ const FLUTTER_SEGMENTS = new Set(["libflutter.so", "flutter.framework"]);
13
+ const UNITY_SEGMENTS = new Set(["libunity.so", "unityframework.framework"]);
14
+ /**
15
+ * A runtime family named by one filename or directory segment.
16
+ * Only recognized complete library and framework names establish a convention.
17
+ */
18
+ export const nativeRuntimeConvention = (path) => {
19
+ for (const segment of path.split("/")) {
20
+ const folded = foldSegment(segment);
21
+ if (REACT_NATIVE_SEGMENTS.has(folded))
22
+ return "react-native";
23
+ if (FLUTTER_SEGMENTS.has(folded))
24
+ return "flutter";
25
+ if (UNITY_SEGMENTS.has(folded))
26
+ return "unity";
27
+ }
28
+ return null;
29
+ };
30
+ /** Swift runtime libraries are `libswift*.dylib` segments, not every dynamic library. */
31
+ export const isSwiftRuntimeLibrary = (path) => path
32
+ .split("/")
33
+ .some((segment) => /^libswift.+\.dylib$/u.test(foldSegment(segment)));
@@ -1,8 +1,8 @@
1
1
  import { z } from "zod";
2
2
  import { jsonValueSchema } from "../jsonValue.js";
3
3
  import { normalizationSchema } from "./processScenario.js";
4
- import { collectProcessCaptureIssues } from "./processCaptureValidation.js";
5
- import { processCaptureTruncationDetailsSchema, } from "./processCaptureCoverage.js";
4
+ import { collectProcessCaptureIssues, finalizationAgreementIssue, finalizationConsistencyIssue, finalizationManifestIssue, } from "./processCaptureValidation.js";
5
+ import { filesystemCoverageSchema, processCaptureTruncationDetailsSchema, } from "./processCaptureCoverage.js";
6
6
  /** Capture collection whose members participate in global observation order. */
7
7
  export const PROCESS_CAPTURE_EVENT_COLLECTIONS = [
8
8
  "frames",
@@ -40,6 +40,13 @@ const fileStateSchema = z.discriminatedUnion("type", [
40
40
  symlink_target: z.null(),
41
41
  }),
42
42
  ]);
43
+ /** Canonical checkpoint facts retained even when capture completion fails. */
44
+ export const processFilesystemSnapshotSchema = z.strictObject({
45
+ files: z.array(fileStateSchema),
46
+ truncated: z.boolean(),
47
+ completeRoots: z.array(z.string()),
48
+ coverage: filesystemCoverageSchema,
49
+ });
43
50
  const fileEffectSchema = z.discriminatedUnion("status", [
44
51
  z.object({
45
52
  path: z.string(),
@@ -81,6 +88,40 @@ const processSettlementSchema = z.discriminatedUnion("state", [
81
88
  }),
82
89
  ]);
83
90
  const unverifiedCleanupProcessesSchema = z.array(z.strictObject({ pid: z.number().int().positive(), reason: z.string() }));
91
+ const processCaptureFinalizationSchema = z
92
+ .strictObject({
93
+ requested_ms: z.number().int().safe().positive(),
94
+ elapsed_ms: z.number().int().nonnegative().nullable(),
95
+ exit_code: z.number().int().nonnegative().nullable(),
96
+ signals: z
97
+ .array(z.strictObject({
98
+ signal: z.enum(["SIGTERM", "SIGKILL"]),
99
+ sent_at_ms: z.number().int().nonnegative(),
100
+ delivery: z.enum([
101
+ "signaled",
102
+ "gone",
103
+ "identity-changed",
104
+ "unverified",
105
+ ]),
106
+ reason: z.string().min(1).optional(),
107
+ }))
108
+ .min(1),
109
+ })
110
+ .superRefine((finalization, context) => {
111
+ if (finalization.exit_code !== null && finalization.elapsed_ms === null)
112
+ context.addIssue({
113
+ code: "custom",
114
+ path: ["exit_code"],
115
+ message: "finalization exit_code requires an observed exit",
116
+ });
117
+ for (const [index, attempt] of finalization.signals.entries())
118
+ if (attempt.reason !== undefined && attempt.delivery !== "unverified")
119
+ context.addIssue({
120
+ code: "custom",
121
+ path: ["signals", index, "reason"],
122
+ message: "finalization reason is only allowed for an unverified delivery",
123
+ });
124
+ });
84
125
  const processCaptureShapeSchema = z.strictObject({
85
126
  manifest: z.strictObject({
86
127
  rea_version: z.string().min(1),
@@ -138,6 +179,7 @@ const processCaptureShapeSchema = z.strictObject({
138
179
  code: z.number().int().nullable(),
139
180
  signal: z.number().int().nullable(),
140
181
  reason: z.enum(["exited", "timeout", "idle_timeout"]),
182
+ finalization: processCaptureFinalizationSchema.optional(),
141
183
  }),
142
184
  settlement: z.discriminatedUnion("state", [
143
185
  z.object({
@@ -175,7 +217,7 @@ const processCaptureShapeSchema = z.strictObject({
175
217
  files_after: z.array(fileStateSchema),
176
218
  filesystem_effects: z.array(fileEffectSchema),
177
219
  truncated: z.boolean(),
178
- truncation_details: processCaptureTruncationDetailsSchema.optional(),
220
+ truncation_details: processCaptureTruncationDetailsSchema,
179
221
  limitations: z.array(z.string()),
180
222
  residual_unknowns: z.array(z.object({
181
223
  scope: z.enum([
@@ -214,21 +256,17 @@ const incompleteProcessCaptureObservationsSchema = z.strictObject({
214
256
  code: z.number().int().nullable(),
215
257
  signal: z.number().int().nullable(),
216
258
  reason: z.enum(["exited", "timeout", "idle_timeout", "cancelled"]),
259
+ finalization: processCaptureFinalizationSchema.optional(),
217
260
  })),
261
+ finalization: partialObservationFieldSchema(processCaptureFinalizationSchema).optional(),
218
262
  settlement: partialObservationFieldSchema(z.strictObject({
219
263
  state: z.enum(["quiesced", "alive_at_deadline", "unverifiable"]),
220
264
  elapsed_ms: z.number().int().nonnegative(),
221
265
  })),
222
266
  process_samples: partialObservationFieldSchema(processCaptureShapeSchema.shape.process_samples),
223
267
  filesystem_snapshots: z.strictObject({
224
- before: partialObservationFieldSchema(z.strictObject({
225
- files: z.array(fileStateSchema),
226
- truncated: z.boolean(),
227
- })),
228
- after: partialObservationFieldSchema(z.strictObject({
229
- files: z.array(fileStateSchema),
230
- truncated: z.boolean(),
231
- })),
268
+ before: partialObservationFieldSchema(processFilesystemSnapshotSchema),
269
+ after: partialObservationFieldSchema(processFilesystemSnapshotSchema),
232
270
  }),
233
271
  event_journal: partialObservationFieldSchema(processCaptureShapeSchema.shape.event_journal),
234
272
  manifest: partialObservationFieldSchema(processCaptureShapeSchema.shape.manifest),
@@ -264,6 +302,59 @@ export const partialProcessCaptureObservationSchema = z
264
302
  path: ["execution_failure"],
265
303
  message: "partial observations require incomplete cleanup or an execution failure",
266
304
  });
305
+ const observedExit = "capture" in partial
306
+ ? partial.capture.exit
307
+ : partial.observations.exit.state === "available"
308
+ ? partial.observations.exit.value
309
+ : undefined;
310
+ const observedFinalization = "observations" in partial &&
311
+ partial.observations.finalization?.state === "available"
312
+ ? partial.observations.finalization.value
313
+ : undefined;
314
+ const committedManifest = "capture" in partial
315
+ ? partial.capture.manifest
316
+ : partial.observations.manifest.state === "available"
317
+ ? partial.observations.manifest.value
318
+ : undefined;
319
+ const manifestFinalizationIssue = finalizationManifestIssue(committedManifest?.scenario, committedManifest?.comparison_contract);
320
+ const exitFinalizationIssue = manifestFinalizationIssue ??
321
+ (observedExit === undefined
322
+ ? undefined
323
+ : finalizationConsistencyIssue(observedExit, committedManifest?.scenario, committedManifest?.comparison_contract));
324
+ const incompleteFinalizationIssue = manifestFinalizationIssue ??
325
+ (observedFinalization === undefined
326
+ ? undefined
327
+ : finalizationConsistencyIssue(observedExit === undefined
328
+ ? undefined
329
+ : { reason: observedExit.reason, signal: observedExit.signal }, committedManifest?.scenario, committedManifest?.comparison_contract, { finalization: observedFinalization, allowNullElapsedMs: true }));
330
+ if (exitFinalizationIssue !== undefined)
331
+ context.addIssue({
332
+ code: "custom",
333
+ path: ["exit"],
334
+ message: exitFinalizationIssue,
335
+ });
336
+ if (incompleteFinalizationIssue !== undefined)
337
+ context.addIssue({
338
+ code: "custom",
339
+ path: ["finalization"],
340
+ message: incompleteFinalizationIssue,
341
+ });
342
+ const agreementIssue = finalizationAgreementIssue(observedExit?.finalization, observedFinalization);
343
+ if (agreementIssue !== undefined)
344
+ context.addIssue({
345
+ code: "custom",
346
+ path: ["finalization"],
347
+ message: agreementIssue,
348
+ });
349
+ if ("observations" in partial &&
350
+ partial.observations.exit.state === "unavailable" &&
351
+ observedFinalization !== undefined &&
352
+ observedFinalization?.elapsed_ms !== null)
353
+ context.addIssue({
354
+ code: "custom",
355
+ path: ["finalization"],
356
+ message: "finalization elapsed_ms must be null when the exit observation is unavailable",
357
+ });
267
358
  if ("observations" in partial) {
268
359
  const { observations } = partial;
269
360
  if (![
@@ -18,7 +18,12 @@ export const filesystemCoverageSchema = z.strictObject({
18
18
  path: z.string(),
19
19
  size_bytes: z.number().int().nonnegative(),
20
20
  remaining_budget_bytes: z.number().int().nonnegative(),
21
- reason: z.enum(["file_bytes_budget", "file_changed_or_short_read"]),
21
+ reason: z.enum([
22
+ "file_bytes_budget",
23
+ "file_changed_or_short_read",
24
+ "file_unavailable",
25
+ ]),
26
+ system_code: z.string().nullable(),
22
27
  })),
23
28
  });
24
29
  /** Actual budget accounting; rendered bytes count state and visible lines, not JSON. */
@@ -39,17 +44,15 @@ export const processCaptureTruncationDetailsSchema = z.strictObject({
39
44
  });
40
45
  const omitted = (retention) => retention.observed_frames > retention.retained_frames;
41
46
  const filesystemTruncated = (coverage) => coverage.enumeration_truncated || coverage.hash_omissions.length > 0;
42
- /** Derive the legacy aggregate flag from independent producer observations. */
47
+ /** Derive the aggregate truncation flag from independent producer observations. */
43
48
  export const hasCaptureTruncation = (details) => omitted(details.raw_terminal) ||
44
49
  omitted(details.rendered_terminal) ||
45
50
  filesystemTruncated(details.filesystem_before) ||
46
51
  filesystemTruncated(details.filesystem_after) ||
47
52
  details.process.sampling_partial;
48
- /** Older truncated captures lack enough information to localize missing observations. */
53
+ /** Whether producer accounting reports a gap in the selected observation source. */
49
54
  export const processSourceTruncated = (capture, source) => {
50
55
  const details = capture.truncation_details;
51
- if (details === undefined)
52
- return capture.truncated;
53
56
  switch (source) {
54
57
  case "terminal_raw":
55
58
  return omitted(details.raw_terminal);