rea-agents 6.3.0 → 6.4.0

package/dist/server/registerSessionTools.js

@@ -2,10 +2,12 @@ import { getNavigationContext, inspectAddressContext, } from "../application/Ana
 import { readAnalysisSnapshot } from "../application/binary/AnalysisSnapshotFiles.js";
 import { createProcessCaptureEvidence } from "../application/process/ProcessEvidence.js";
 import { captureProcessScenario } from "../process/capture/ProcessHarness.js";
+import { ProcessCaptureResourceScope } from "../process/capture/ProcessCaptureLifecycle.js";
+import { ProcessCaptureError } from "../process/capture/ProcessCaptureError.js";
 import { toolContract } from "../contracts/toolContracts.js";
 import { UnknownRegistryError } from "../domain/unknownRegistryError.js";
 import {} from "../domain/analysisErrorBase.js";
-import { ok } from "../domain/result.js";
+import { err, ok } from "../domain/result.js";
 import { mcpProgressReporter } from "./mcpProgress.js";
 import { registerArtifactComparisonTool } from "./registerArtifactComparisonTool.js";
 import { registerBundleComparisonTool } from "./registerBundleComparisonTool.js";
@@ -18,6 +20,8 @@ import { registerSessionStatusTool } from "./registerSessionStatusTool.js";
 import { sessionAvailabilityPolicy } from "./sessionAvailabilityPolicy.js";
 import { logToolExecution } from "./toolLogging.js";
 import { toolRegistrationOptions } from "./toolRegistrationOptions.js";
+import { withAdmittedAnalysis } from "./analysisAdmission.js";
+import { runAdmittedToolOperation } from "./admittedToolOperation.js";
 const recordProcessResidualUnknowns = (session, evidence, residuals) => {
     for (const residual of residuals) {
         const unknown = session.recordUnknown({
@@ -44,23 +48,11 @@ const recordProcessResidualUnknowns = (session, evidence, residuals) => {
     }
     return ok(null);
 };
-const registerProcessTools = ({ server, session, logger, captureContract, }) => {
-    server.registerTool(captureContract.name, toolRegistrationOptions(captureContract), async (input, context) => {
+const registerProcessTools = ({ server, session, logger, captureContract, resourceScope, }) => {
+    const admission = withAdmittedAnalysis({ kind: "session", session });
+    server.registerTool(captureContract.name, toolRegistrationOptions(captureContract), async (input, context) => runAdmittedToolOperation(server, admission, captureContract.name, context.mcpReq.signal, async () => {
         const progress = mcpProgressReporter(context);
-        await progress.report({
-            phase: captureContract.name,
-            completed: 0,
-            total: 1,
-            message: "started",
-        });
-        const captured = await logToolExecution(logger, captureContract.name, () => captureProcessScenario(input, context.mcpReq.signal));
-        await progress.report({
-            phase: captureContract.name,
-            completed: 1,
-            total: 1,
-            message: captured.ok ? "completed" : "failed",
-            terminal: true,
-        });
+        const captured = await logToolExecution(logger, captureContract.name, () => captureProcessScenario(input, context.mcpReq.signal, process.platform, process.env, undefined, undefined, progress, resourceScope));
         if (!captured.ok)
             return server.delivery.toCallToolResult(captured, captureContract);
         const evidence = createProcessCaptureEvidence(input, captured.value);
@@ -71,7 +63,7 @@ const registerProcessTools = ({ server, session, logger, captureContract, }) =>
         if (!unknowns.ok)
             return server.delivery.toCallToolResult(unknowns, captureContract);
         return server.delivery.toEvidenceToolResult(evidence, captureContract, recorded);
-    });
+    }));
 };
 const registerLifecycleTools = (registration) => {
     const { server, session, statusContract, startedAt, availabilityPolicy, androidAnalysisAvailability, } = registration;
@@ -145,6 +137,7 @@ export const registerSessionTools = (server, session, logger, options = {}) => {
     const compareFunctionsContract = toolContract("compare_functions");
     const compareBundlesContract = toolContract("compare_bundles");
     const snapshotContract = toolContract("get_evidence_bundle");
+    const processResources = new ProcessCaptureResourceScope();
     registerLifecycleTools({
         server,
         session,
@@ -155,6 +148,22 @@ export const registerSessionTools = (server, session, logger, options = {}) => {
         startedAt: options.startedAt ?? new Date().toISOString(),
         availabilityPolicy: sessionAvailabilityPolicy(options.availabilityPolicy, {}),
         androidAnalysisAvailability: options.androidAnalysisAvailability ?? missingAndroidAvailability,
+        closeProcessResources: async () => {
+            try {
+                await processResources.retryCleanup();
+                return ok(null);
+            }
+            catch (cause) {
+                return err(new ProcessCaptureError("process capture cleanup remains incomplete", {
+                    cause,
+                    reason: "cleanup_incomplete",
+                    cleanupResources: ["process_capture_resources"],
+                    executionFailure: cause instanceof Error
+                        ? cause.message || cause.name
+                        : String(cause),
+                }));
+            }
+        },
     });
     registerEvidenceTools({
         server,
@@ -168,7 +177,29 @@ export const registerSessionTools = (server, session, logger, options = {}) => {
         session,
         logger,
         captureContract,
+        resourceScope: processResources,
     });
+    const closeServer = server.close.bind(server);
+    server.close = async () => {
+        const results = await Promise.allSettled([
+            closeServer(),
+            processResources.close(),
+        ]);
+        const failures = results.flatMap((result) => result.status === "rejected" ? [result.reason] : []);
+        if (failures.length > 0)
+            throw new AggregateError(failures, "REA session cleanup failed");
+    };
+    const previousOnclose = server.server.onclose;
+    server.server.onclose = () => {
+        try {
+            previousOnclose?.();
+        }
+        finally {
+            void processResources.close().catch((cause) => {
+                logger.error({ error: cause instanceof Error ? cause.message : String(cause) }, "Process capture cleanup failed during server shutdown");
+            });
+        }
+    };
     registerProcessComparisonTool(server, session, compareContract);
     registerArtifactComparisonTool(server, session, compareArtifactsContract);
     registerFunctionComparisonTool(server, session, compareFunctionsContract);

package/dist/server/registerWebModuleTool.js

@@ -1,14 +1,9 @@
 import { toolContract } from "../contracts/toolContracts.js";
-import { logToolExecution } from "./toolLogging.js";
+import { createEvidenceToolHandler } from "./contractToolHandler.js";
 import { toolRegistrationOptions } from "./toolRegistrationOptions.js";
 /** Bind the module relationship workflow to its exact canonical contract. */
-export const registerWebModuleTool = (server, service, logger, recordEvidence) => {
+export const registerWebModuleTool = (server, service, logger, recordEvidence, withAdmittedAnalysis) => {
     const contract = toolContract("trace_web_module_imports");
-    server.registerTool(contract.name, toolRegistrationOptions(contract), async (input, context) => {
-        const result = await logToolExecution(logger, contract.name, () => service.trace(input, { signal: context.mcpReq.signal }));
-        if (!result.ok)
-            return server.delivery.toCallToolResult(result, contract);
-        const recorded = recordEvidence?.(result.value);
-        return server.delivery.toEvidenceToolResult(result.value, contract, recorded);
-    });
+    const handler = createEvidenceToolHandler(server, (input, options) => service.trace(input, options), logger, recordEvidence, withAdmittedAnalysis);
+    server.registerTool(contract.name, toolRegistrationOptions(contract), handler(contract));
 };

package/dist/server/registerWebNetworkCaptureTool.js

@@ -1,8 +1,8 @@
 import { toolContract } from "../contracts/toolContracts.js";
-import { logToolExecution } from "./toolLogging.js";
+import { createEvidenceToolHandler } from "./contractToolHandler.js";
 import { toolRegistrationOptions } from "./toolRegistrationOptions.js";
 /** Bind historical inspection to its named contract and caller-owned Evidence writer. */
-export const registerWebNetworkCaptureTool = (server, service, logger, recordEvidence) => {
+export const registerWebNetworkCaptureTool = (server, service, logger, recordEvidence, withAdmittedAnalysis) => {
     const contract = toolContract("inspect_web_network_capture");
     const registration = toolRegistrationOptions(contract);
     // Keep the exact advertised contract; the shared service validates raw input
@@ -15,11 +15,6 @@ export const registerWebNetworkCaptureTool = (server, service, logger, recordEvi
             validate: (value) => ({ value }),
         },
     };
-    server.registerTool(contract.name, { ...registration, inputSchema }, async (input, context) => {
-        const result = await logToolExecution(logger, contract.name, () => service.inspect(input, { signal: context.mcpReq.signal }));
-        if (!result.ok)
-            return server.delivery.toCallToolResult(result, contract);
-        const recorded = recordEvidence?.(result.value);
-        return server.delivery.toEvidenceToolResult(result.value, contract, recorded);
-    });
+    const handler = createEvidenceToolHandler(server, (input, options) => service.inspect(input, options), logger, recordEvidence, withAdmittedAnalysis);
+    server.registerTool(contract.name, { ...registration, inputSchema }, handler(contract));
 };

package/dist/server/registerWebRuntimeTools.js

@@ -2,11 +2,12 @@ import { toolContract } from "../contracts/toolContracts.js";
 import { mcpProgressReporter } from "./mcpProgress.js";
 import { logToolExecution } from "./toolLogging.js";
 import { toolRegistrationOptions } from "./toolRegistrationOptions.js";
+import { runAdmittedToolOperation } from "./admittedToolOperation.js";
 /** Bind distinct runtime operations to named contracts and the session's Evidence owner. */
-export const registerWebRuntimeTools = (server, service, logger, recordEvidence) => {
+export const registerWebRuntimeTools = (server, service, logger, recordEvidence, withAdmittedAnalysis) => {
     const execution = toolContract("observe_web_execution");
     const listeners = toolContract("inspect_web_event_listeners");
-    server.registerTool(execution.name, toolRegistrationOptions(execution), async (input, context) => {
+    server.registerTool(execution.name, toolRegistrationOptions(execution), async (input, context) => runAdmittedToolOperation(server, withAdmittedAnalysis, execution.name, context.mcpReq.signal, async () => {
         const result = await logToolExecution(logger, execution.name, () => service.observe(input, {
             signal: context.mcpReq.signal,
             progress: mcpProgressReporter(context),
@@ -15,12 +16,12 @@ export const registerWebRuntimeTools = (server, service, logger, recordEvidence)
             return server.delivery.toCallToolResult(result, execution);
         const recorded = recordEvidence?.(result.value);
         return server.delivery.toEvidenceToolResult(result.value, execution, recorded);
-    });
-    server.registerTool(listeners.name, toolRegistrationOptions(listeners), async (input, context) => {
+    }));
+    server.registerTool(listeners.name, toolRegistrationOptions(listeners), async (input, context) => runAdmittedToolOperation(server, withAdmittedAnalysis, listeners.name, context.mcpReq.signal, async () => {
         const result = await logToolExecution(logger, listeners.name, () => service.inspect(input, { signal: context.mcpReq.signal }));
         if (!result.ok)
             return server.delivery.toCallToolResult(result, listeners);
         const recorded = recordEvidence?.(result.value);
         return server.delivery.toEvidenceToolResult(result.value, listeners, recorded);
-    });
+    }));
 };

package/dist/server/registerWebScriptTool.js

@@ -2,14 +2,17 @@ import { exportWebScriptsValidated } from "../application/WebScriptExportService
 import { toolContract } from "../contracts/toolContracts.js";
 import { logToolExecution } from "./toolLogging.js";
 import { toolRegistrationOptions } from "./toolRegistrationOptions.js";
+import { runAdmittedToolOperation } from "./admittedToolOperation.js";
 /** Register local script export without requiring a live browser provider. */
 export const registerWebScriptTool = (server, options) => {
     const contract = toolContract("export_web_scripts");
-    server.registerTool(contract.name, toolRegistrationOptions(contract), async (input, context) => {
-        const result = await logToolExecution(options.logger, contract.name, () => exportWebScriptsValidated(input, { signal: context.mcpReq.signal }));
+    server.registerTool(contract.name, toolRegistrationOptions(contract), async (input, context) => runAdmittedToolOperation(server, options.withAdmittedAnalysis, contract.name, context.mcpReq.signal, async () => {
+        const result = await logToolExecution(options.logger, contract.name, () => exportWebScriptsValidated(input, options.artifactResources, {
+            signal: context.mcpReq.signal,
+        }));
         if (!result.ok)
             return server.delivery.toCallToolResult(result, contract);
         const recorded = options.recordEvidence?.(result.value);
         return server.delivery.toEvidenceToolResult(result.value, contract, recorded);
-    });
+    }));
 };

package/dist/server/registerWebSourceLocationTool.js

@@ -1,14 +1,9 @@
 import { toolContract } from "../contracts/toolContracts.js";
-import { logToolExecution } from "./toolLogging.js";
+import { createEvidenceToolHandler } from "./contractToolHandler.js";
 import { toolRegistrationOptions } from "./toolRegistrationOptions.js";
 /** Bind source point tracing to its exact named contract and session Evidence owner. */
-export const registerWebSourceLocationTool = (server, service, logger, recordEvidence) => {
+export const registerWebSourceLocationTool = (server, service, logger, recordEvidence, withAdmittedAnalysis) => {
     const contract = toolContract("trace_web_source_location");
-    server.registerTool(contract.name, toolRegistrationOptions(contract), async (input, context) => {
-        const result = await logToolExecution(logger, contract.name, () => service.trace(input, { signal: context.mcpReq.signal }));
-        if (!result.ok)
-            return server.delivery.toCallToolResult(result, contract);
-        const recorded = recordEvidence?.(result.value);
-        return server.delivery.toEvidenceToolResult(result.value, contract, recorded);
-    });
+    const handler = createEvidenceToolHandler(server, (input, options) => service.trace(input, options), logger, recordEvidence, withAdmittedAnalysis);
+    server.registerTool(contract.name, toolRegistrationOptions(contract), handler(contract));
 };

package/dist/server/toolResult.js

@@ -1,5 +1,5 @@
 import { STDIO_DEFAULT_MAX_BUFFER_SIZE } from "@modelcontextprotocol/server";
-import { projectAnalysisError } from "../domain/analysisErrorProjection.js";
+import { projectAnalysisError, } from "../domain/analysisErrorProjection.js";
 import {} from "../domain/analysisErrorBase.js";
 import { AnalysisResourceConstraintError } from "../domain/analysisErrorCore.js";
 import { encodeToolResult, MCP_RESULT_STRING_LIMIT, } from "./toolResultEncoding.js";
@@ -36,7 +36,26 @@ export class ToolResultDelivery {
     }
     /** Project an error without allocating oversized repeated MCP text. */
     toErrorToolResult(error) {
-        const structuredContent = { error: projectAnalysisError(error) };
+        return this.projectedErrorResult(projectAnalysisError(error));
+    }
+    /** Deliver the original failure with the producer-acknowledged partial Evidence reference. */
+    toRecordedPartialErrorToolResult(error, evidenceId, recorded) {
+        if (!recorded.ok)
+            return this.toErrorToolResult(error);
+        const projected = projectAnalysisError(error);
+        return this.projectedErrorResult({
+            ...projected,
+            details: {
+                ...projected.details,
+                partial_observation: {
+                    kind: "retained-evidence",
+                    evidence_id: evidenceId,
+                },
+            },
+        });
+    }
+    projectedErrorResult(projected) {
+        const structuredContent = { error: projected };
         // Errors reach the wire as text only; the structured copy is a private
         // carrier the transport removes after its own budget check.
         const encoded = encodeToolResult(structuredContent, this.resultBudgetBytes, "text");

package/dist/windows/WindowsPrivateRuntime.js

@@ -34,7 +34,7 @@ export class WindowsPrivateRuntime {
         const authority = requireWindowsNativeAuthority();
         const observation = runtimeSchema.parse(authority.call("runtime_create", [parent, prefix]));
         const runtime = new WindowsPrivateRuntime(observation, authority);
-        runtimes.set(observation.path.toLowerCase(), runtime);
+        runtimes.set(windowsRuntimeIdentityKey(observation), runtime);
         return runtime;
     }
     /** Open a private child directory through retained, verified parent handles. */
@@ -119,13 +119,20 @@ export class WindowsPrivateRuntime {
         await this.#pending?.catch(() => undefined);
         this.authority.call("runtime_close", [this.observation.handle]);
         this.#closed = true;
-        runtimes.delete(this.observation.path.toLowerCase());
+        runtimes.delete(windowsRuntimeIdentityKey(this.observation));
     }
 }
-/** Select an already-owned runtime; an arbitrary pathname cannot grant authority. */
+/** File id returned by the OS. Path spelling is not part of the lease key. */
+const windowsRuntimeIdentityKey = (identity) => `${identity.volumeSerial}:${identity.fileId}`;
+/**
+ * Select an already-owned runtime. Only the observed `path` or `finalPath`
+ * matches, character for character. A case variant fails closed.
+ */
 export const windowsPrivateRuntime = (rootPath) => {
-    const runtime = runtimes.get(rootPath.toLowerCase());
-    if (runtime === undefined)
+    const matches = [...runtimes.values()].filter((runtime) => runtime.observation.finalPath === rootPath ||
+        runtime.observation.path === rootPath);
+    const runtime = matches[0];
+    if (matches.length !== 1 || runtime === undefined)
         throw new Error(`No native private runtime owns ${rootPath}`);
     return runtime;
 };

package/install.sh

@@ -85,19 +85,22 @@ if [[ "$version" =~ \+ ]]; then
   fail "npm cannot install an exact version with build metadata. Pass a version without build metadata, then retry."
 fi
 
-prefix_args=()
+install_args=(install --global)
 if [[ "$platform" == "Linux" ]]; then
-  prefix_args=(--prefix "$HOME/.local")
+  install_args+=(--prefix "$HOME/.local")
   install_bin="$HOME/.local/bin/rea"
 else
   npm_prefix="$(npm prefix --global)" || fail "the npm global prefix could not be read. Repair the npm configuration, then retry."
   install_bin="$npm_prefix/bin/rea"
 fi
+install_args+=("$PACKAGE@$version")
 
 printf 'REA install plan\n'
 printf '  Version: %s\n' "$version"
 printf '  Runtime: Node.js %s\n' "$node_version"
-printf '  Command: npm install --global %s@%s\n' "$PACKAGE" "$version"
+printf '  Command:'
+printf ' %q' npm "${install_args[@]}"
+printf '\n'
 printf '  Binary:  %s\n' "$install_bin"
 printf '  Setup:   %s\n' "$([[ "$start_setup" == true ]] && printf 'start when a terminal is available' || printf 'skipped')"
 
@@ -107,7 +110,7 @@ if [[ "$dry_run" == true ]]; then
 fi
 
 printf 'Installing %s@%s...\n' "$PACKAGE" "$version"
-npm install --global ${prefix_args[@]+"${prefix_args[@]}"} "$PACKAGE@$version" || fail "npm could not install REA. Check registry access and npm permissions, then retry."
+npm "${install_args[@]}" || fail "npm could not install REA. Check registry access and npm permissions, then retry."
 [[ -x "$install_bin" ]] || fail "npm completed without installing the rea command. Check the npm global bin directory and PATH, then retry."
 installed_version="$("$install_bin" --version 2>/dev/null | tr -d '[:space:]')" || fail "the installed REA version could not be read. Reinstall the requested version, then retry."
 [[ "$installed_version" == "$version" ]] || fail "installed version $installed_version does not match $version. Reinstall the requested version, then retry."

package/licenses/nativeaot-parser-MIT.txt

@@ -0,0 +1,28 @@
+The MIT License (MIT)
+=====================
+
+Copyright © 2023-2025 Washi
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the “Software”), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+The read-only NativeAOT parser adapts format and hydration semantics from
+Washi1337/ghidra-nativeaot commit
+effeb734fc570c32650f88b159608979dc7b423e (MIT). MethodTable field layout was
+cross-checked against .NET runtime src/coreclr/nativeaot/Runtime/inc/MethodTable.h
+at dotnet/runtime commit a3b2d40328be0be3f8dd43f0e5cc925b8827b044 (MIT).

package/native/windows/build/manifest.json

@@ -1,9 +1,9 @@
 {
-  "packageVersion": "6.3.0",
+  "packageVersion": "6.4.0",
   "platform": "win32",
   "architecture": "x64",
   "abiVersion": 1,
   "nodeApiVersion": 8,
   "artifact": "rea-windows-x64.node",
-  "artifactSha256": "fedfd4ce8b3e15784d1a6ef7e9ba7eb9052e8335a1c75b6d69cd7e94f29ab1f8"
+  "artifactSha256": "c4fd9f377e567bcf15ba3fec3e0b0ed965d82b765a2adcdac49e46f14524b6d5"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "rea-agents",
   "mcpName": "io.github.morluto/rea",
-  "version": "6.3.0",
+  "version": "6.4.0",
   "description": "Reverse engineer anything from your terminal or agent with one CLI and MCP server.",
   "license": "MIT",
   "repository": {
@@ -30,6 +30,9 @@
     "access": "public"
   },
   "type": "module",
+  "imports": {
+    "#javascript-analysis-worker": "./dist/composition/javascriptAnalysisWorkerProcess.js"
+  },
   "bin": {
     "rea": "scripts/rea.mjs",
     "rea-agents": "scripts/rea.mjs"
@@ -50,6 +53,8 @@
     "bridge/ghidra/ReaGhidraBridge.java",
     "bridge/ghidra/ReaGhidraExtensions.java",
     "bridge/ghidra/ReaGhidraPrepareCom.java",
+    "bridge/ghidra/ReaGhidraApplySeeds.java",
+    "bridge/ghidra/ReaGhidraNoReturnFix.java",
     "bridge/android/ReaJadxBridge.java",
     "bridge/mitmproxy/capture.py",
     "scripts/rea.mjs",
@@ -76,9 +81,11 @@
     "bridge/pwndbg/launch_impl.py",
     "bridge/pwndbg/core_context.py",
     "third_party/pwndbg/README.md",
-    "third_party/pwndbg/LICENSE.md"
+    "third_party/pwndbg/LICENSE.md",
+    "licenses/nativeaot-parser-MIT.txt"
   ],
   "scripts": {
+    "release:notes": "node scripts/release-notes.mjs",
     "deps:check": "node scripts/check-dependency-install.mjs",
     "metadata:generate": "node scripts/run-exclusive.mjs artifacts node scripts/generate-package-metadata.mjs",
     "metadata:check": "node scripts/generate-package-metadata.mjs --check",
@@ -100,6 +107,8 @@
     "precheck:ci": "npm run deps:check",
     "check:ci": "node scripts/run-exclusive.mjs artifacts turbo run typecheck lint format:check knip metadata:check jscpd scan:todos && npm run verify:architecture-guards",
     "build:cached": "node scripts/check-dependency-install.mjs && node scripts/run-exclusive.mjs artifacts turbo run artifacts:skills",
+    "build:termux": "node scripts/run-exclusive.mjs artifacts npm run build:termux:run",
+    "build:termux:run": "npm run compile:termux && npm run artifacts:skills",
     "format": "oxfmt .",
     "format:check": "oxfmt --check .",
     "lint": "oxlint && npm run verify:module-boundaries",
@@ -146,7 +155,11 @@
     "verify:macos-bundle": "npm run build:cached && node scripts/verify/apple/macos-bundle.mjs",
     "verify:legacy-simulator": "npm run build:cached && node scripts/verify/apple/legacy-simulator.mjs",
     "verify:architecture-guards": "node scripts/verify/architecture-guards.mjs",
+    "verify:apktool": "npm run build:cached && node scripts/verify-apktool.mjs",
+    "verify:adb": "npm run build:cached && node scripts/verify-adb.mjs",
     "verify:ghidra": "npm run build:cached && node scripts/verify-real-ghidra.mjs",
+    "verify:ghidra:seeds": "npm run build:cached && node scripts/verify/ghidra/seeds.mjs",
+    "verify:ghidra:mips": "npm run build:cached && node scripts/verify-real-ghidra-mips.mjs",
     "verify:ghidra:swift": "npm run build:cached && node scripts/verify-real-ghidra-swift.mjs",
     "verify:ida": "npm run build:cached && node scripts/verify-real-ida.mjs",
     "verify:ghidra:switch": "npm run build:cached && node scripts/verify-real-ghidra-switch.mjs",
@@ -169,6 +182,7 @@
     "verify:firmware": "npm run build:cached && node scripts/verify/firmware/analysis.mjs",
     "fixtures:firmware": "node scripts/fixtures/firmware/generate.mjs",
     "verify:android": "npm run build:cached && node scripts/verify/android/analysis.mjs",
+    "verify:jeb": "npm run build:cached && node scripts/verify-jeb.mjs",
     "fixtures:android": "node scripts/fixtures/android/fetch.mjs",
     "verify:agent": "npm run build:cached && node scripts/verify-agent-experience.mjs",
     "verify:hopper:linux": "npm run verify:fixtures && npm run build:cached && node scripts/verify-real-hopper-linux.mjs",
@@ -179,6 +193,17 @@
     "verify:readiness": "npm run build:cached && npm run verify:fixtures && node scripts/verify-reconstruction-readiness.mjs",
     "verify:package": "npm run build:cached && node scripts/verify-package.mjs",
     "verify:package:windows": "npm run build:cached && node scripts/verify-windows-package.mjs",
+    "verify:qwen-client": "npm run build:cached && node scripts/verify-qwen-client.mjs",
+    "verify:gemini-client": "npm run build:cached && node scripts/verify-gemini-client.mjs",
+    "verify:opencode-client": "npm run build:cached && node scripts/verify-opencode-client.mjs",
+    "verify:grok-client": "npm run build:cached && node scripts/verify-grok-client.mjs",
+    "verify:commandcode-client": "npm run build:cached && node scripts/verify-commandcode-client.mjs",
+    "verify:omp-client": "npm run build:cached && node scripts/verify-omp-client.mjs",
+    "verify:copilot-client": "npm run build:cached && node scripts/verify-copilot-client.mjs",
+    "verify:claude-client": "npm run build:cached && node scripts/verify-claude-client.mjs",
+    "verify:pi-client": "npm run build:cached && node scripts/verify-native-agent-client.mjs pi",
+    "verify:hermes-client": "npm run build:cached && node scripts/verify-native-agent-client.mjs hermes",
+    "verify:deepseek-client": "npm run build:cached && node scripts/verify-deepseek-client.mjs",
     "probe:windows-capabilities": "npm run build:cached && node scripts/windows-capabilities.mjs",
     "verify:published": "node scripts/verify-published-package.mjs",
     "config:print": "node scripts/print-mcp-config.mjs",
@@ -220,6 +245,7 @@
     "verify:recorded:crash": "npm run build:cached && node scripts/verify-recorded-crash.mjs",
     "mcp-catalog:check:built": "node scripts/generate-mcp-tool-catalog.mjs --check",
     "compile": "node scripts/clean-build-output.mjs && tsc -p tsconfig.build.json",
+    "compile:termux": "node scripts/clean-build-output.mjs && node --max-old-space-size=3072 node_modules/typescript-termux/lib/tsc.js -p tsconfig.build.json",
     "artifacts:mcp-catalog": "node scripts/generate-mcp-tool-catalog.mjs",
     "artifacts:skills": "node scripts/generate-skill-metadata.mjs",
     "artifacts:product-catalog": "node scripts/generate-product-catalog.mjs",
@@ -245,6 +271,7 @@
     "@lydell/node-pty": "1.1.0",
     "@modelcontextprotocol/client": "2.3.1",
     "@modelcontextprotocol/server": "2.3.1",
+    "@xmldom/xmldom": "0.9.12",
     "@xterm/addon-serialize": "0.14.0",
     "@xterm/headless": "6.0.0",
     "@zip.js/zip.js": "2.15.0",
@@ -269,7 +296,8 @@
     "write-file-atomic": "7.0.0",
     "ws": "8.21.0",
     "zod": "4.4.3",
-    "evmole": "0.9.3"
+    "evmole": "0.9.3",
+    "yaml": "2.9.0"
   },
   "overrides": {
     "vitepress": {
@@ -292,8 +320,8 @@
     "oxlint": "1.87.0",
     "turbo": "2.11.7",
     "typescript": "7.0.2",
+    "typescript-termux": "npm:typescript@5.9.3",
     "vitepress": "1.6.4",
-    "vitest": "5.0.3",
-    "yaml": "2.9.0"
+    "vitest": "5.0.3"
   }
 }

package/scripts/rea.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { access } from "node:fs/promises";
-import { dirname, resolve } from "node:path";
+import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
 // Route production MCP before importing Incur. Incur owns registration helpers
@@ -15,6 +15,21 @@ const isMcpMode =
   args.length === 1 && (args[0] === "--mcp" || args[0] === "mcp");
 const isMcpDoctorMode = args[0] === "mcp" && args[1] === "doctor";
 const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
+
+// Playwright's registry assumes one of its three desktop host platforms when
+// it chooses the browser cache directory. Termux reports `android`, although
+// its Node runtime and filesystem are POSIX-compatible. Keep the cache path
+// explicit so REA can start on Termux. Browser launch still requires a
+// caller-supplied Android-compatible Chromium executable.
+if (
+  process.platform === "android" &&
+  process.env.PLAYWRIGHT_BROWSERS_PATH === undefined
+) {
+  const cacheRoot =
+    process.env.XDG_CACHE_HOME ?? join(process.env.HOME ?? ".", ".cache");
+  process.env.PLAYWRIGHT_BROWSERS_PATH = join(cacheRoot, "ms-playwright");
+}
+
 const runtimeFiles = isMcpMode
   ? ["dist/main.js"]
   : isMcpDoctorMode