rea-agents 6.4.0 → 6.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (1211) hide show
  1. package/DISCLAIMER.md +136 -0
  2. package/README.md +67 -16
  3. package/THIRD_PARTY_NOTICES.md +134 -0
  4. package/bridge/android/ReaJadxBridge.java +123 -11
  5. package/bridge/cutter/rea_bridge.py +816 -0
  6. package/bridge/ghidra/ReaGhidraAnalysisOptions.java +38 -0
  7. package/bridge/ghidra/ReaGhidraBridge.java +1181 -123
  8. package/bridge/ghidra/ReaGhidraBundleActivator.java +14 -0
  9. package/bridge/ghidra/ReaGhidraMipsSoftFloat.java +176 -0
  10. package/bridge/ghidra/ReaGhidraPrepareRaw.java +49 -0
  11. package/bridge/hopper_bridge.py +103 -69
  12. package/bridge/mitmproxy/capture.py +189 -13
  13. package/bridge/native/rea_lldb_tracer.py +40 -6
  14. package/bridge/process/ProcessRunTokenReader.swift +76 -34
  15. package/bridge/pwntools/layout_impl.py +5 -0
  16. package/bridge/pwntools/recorded_crash_impl.py +31 -10
  17. package/dist/adb/AdbConfiguration.js +15 -3
  18. package/dist/adb/AdbDeviceOutput.js +59 -37
  19. package/dist/adb/AdbDirectoryListing.js +80 -0
  20. package/dist/adb/AdbHostFileName.js +34 -0
  21. package/dist/adb/AdbProvider.js +416 -173
  22. package/dist/adb/AdbShellOutput.js +55 -57
  23. package/dist/android/JadxAnalysis.js +32 -7
  24. package/dist/android/JadxConfiguration.js +119 -29
  25. package/dist/android/JadxDoctor.js +115 -0
  26. package/dist/android/JadxMcpTransport.js +5 -3
  27. package/dist/android/JadxProtocol.js +14 -0
  28. package/dist/android/JadxProvider.js +15 -9
  29. package/dist/android/JadxRelease.js +12 -1
  30. package/dist/android/JadxWorkspaceRoot.js +157 -0
  31. package/dist/apktool/ApktoolConfiguration.js +165 -22
  32. package/dist/apktool/ApktoolDecodeOutput.js +124 -41
  33. package/dist/apktool/ApktoolProvider.js +70 -33
  34. package/dist/application/AnalysisContextQueries.js +5 -8
  35. package/dist/application/AnalysisProvider.js +24 -20
  36. package/dist/application/AppBundleExecutable.js +5 -5
  37. package/dist/application/BinaryTargetResolver.js +195 -38
  38. package/dist/application/BrowserEvidence.js +1 -1
  39. package/dist/application/BrowserObservationService.js +13 -2
  40. package/dist/application/BrowserScenarioCaptureService.js +0 -1
  41. package/dist/application/CallPathTracing.js +52 -13
  42. package/dist/application/CapabilityInventory.js +168 -28
  43. package/dist/application/ClaudeDesktopConfigLocation.js +152 -0
  44. package/dist/application/ClientConfigurationDocument.js +102 -25
  45. package/dist/application/ClientConfigurationFiles.js +51 -14
  46. package/dist/application/ClientRegistrationEnvironment.js +10 -4
  47. package/dist/application/ClientRegistrationIdentity.js +94 -29
  48. package/dist/application/ClientRegistrationStatus.js +180 -59
  49. package/dist/application/DirectAnalysis.js +85 -30
  50. package/dist/application/DirectAnalysisStatus.js +13 -1
  51. package/dist/application/Doctor.js +113 -32
  52. package/dist/application/DoctorDiagnostics.js +34 -12
  53. package/dist/application/DoctorProviderIds.js +2 -0
  54. package/dist/application/DoctorScope.js +11 -2
  55. package/dist/application/DshCordisPatch.js +355 -0
  56. package/dist/application/DshCordisYaml.js +155 -0
  57. package/dist/application/EnhancedLiteralTracing.js +30 -16
  58. package/dist/application/EnhancedToolTypes.js +0 -1
  59. package/dist/application/EnhancedTools.js +164 -54
  60. package/dist/application/EvidenceBundleCommands.js +30 -7
  61. package/dist/application/EvidenceBundleFiles.js +29 -7
  62. package/dist/application/FunctionAnalysisEvidence.js +3 -0
  63. package/dist/application/GeminiClientSettings.js +25 -13
  64. package/dist/application/HermesConfigurationYaml.js +272 -0
  65. package/dist/application/InventoryProjectionEvidence.js +0 -1
  66. package/dist/application/InvestigationProviders.js +13 -3
  67. package/dist/application/JsonFiles.js +110 -20
  68. package/dist/application/JsonInputFile.js +220 -62
  69. package/dist/application/LinuxHopper.js +126 -48
  70. package/dist/application/MacHopper.js +21 -17
  71. package/dist/application/MacHopperPaths.js +40 -0
  72. package/dist/application/{MipsElfAbiFlags.js → MipsElfMetadata.js} +70 -9
  73. package/dist/application/MipsElfSharedLoad.js +164 -0
  74. package/dist/application/MipsGnuAttributes.js +90 -0
  75. package/dist/application/MsixPackageStorage.js +133 -0
  76. package/dist/application/ProgressReporter.js +1 -1
  77. package/dist/application/ProviderOperationExecution.js +11 -3
  78. package/dist/application/ReconstructionCoverageService.js +0 -1
  79. package/dist/application/ReconstructionObligationCandidates.js +3 -2
  80. package/dist/application/ReconstructionObligationLedgerDiagnostics.js +2 -2
  81. package/dist/application/ReconstructionObligationLedgerEvaluation.js +15 -33
  82. package/dist/application/ReconstructionObligationLedgerProjection.js +3 -72
  83. package/dist/application/ReconstructionObligationLedgerService.js +3 -1
  84. package/dist/application/ReconstructionObligationOriginalCases.js +2 -1
  85. package/dist/application/ReferenceSourceImport.js +24 -8
  86. package/dist/application/ReferenceSourceImportEntries.js +22 -21
  87. package/dist/application/ReferenceSourceImportTypes.js +0 -1
  88. package/dist/application/ReferenceSourceVcsAdapter.js +33 -16
  89. package/dist/application/RegularFileRead.js +46 -18
  90. package/dist/application/Setup.js +36 -10
  91. package/dist/application/SetupClientConfiguration.js +206 -37
  92. package/dist/application/SetupClients.js +12 -6
  93. package/dist/application/SetupHost.js +66 -24
  94. package/dist/application/SetupInstallFailure.js +42 -2
  95. package/dist/application/SetupPlan.js +79 -50
  96. package/dist/application/SetupRecoveryBackup.js +66 -0
  97. package/dist/application/SetupRegistrationEnvironment.js +2 -1
  98. package/dist/application/SetupSkill.js +323 -76
  99. package/dist/application/SupportedClients.js +162 -28
  100. package/dist/application/TypeScriptEmittedSourceCandidates.js +26 -0
  101. package/dist/application/Uninstall.js +273 -82
  102. package/dist/application/UninstallFailure.js +14 -0
  103. package/dist/application/Update.js +54 -25
  104. package/dist/application/UpdateFailure.js +17 -0
  105. package/dist/application/UpdateMaintenance.js +11 -29
  106. package/dist/application/UpdateRuntime.js +141 -27
  107. package/dist/application/WebModuleTraceService.js +7 -0
  108. package/dist/application/WebNetworkCaptureService.js +16 -7
  109. package/dist/application/WebSourceLocationService.js +20 -4
  110. package/dist/application/WindowsCapabilities.js +18 -15
  111. package/dist/application/WorkflowEvidence.js +24 -1
  112. package/dist/application/analysisView/AnalysisViewService.js +90 -12
  113. package/dist/application/android/AndroidPackageInspection.js +25 -0
  114. package/dist/application/android/AndroidSearchEvidenceSummary.js +100 -0
  115. package/dist/application/binary/AnalysisProviderEvaluation.js +1 -1
  116. package/dist/application/binary/AnalysisProviderRegistry.js +36 -21
  117. package/dist/application/binary/AnalysisSnapshotCache.js +41 -20
  118. package/dist/application/binary/AnalysisSnapshotFiles.js +75 -9
  119. package/dist/application/binary/BinarySession.js +248 -96
  120. package/dist/application/binary/BinarySessionExecution.js +5 -4
  121. package/dist/application/binary/BinarySessionOpen.js +13 -6
  122. package/dist/application/binary/BinarySessionRecords.js +33 -7
  123. package/dist/application/binary/BinarySessionStatus.js +93 -23
  124. package/dist/application/binary/BinaryTargetSummary.js +9 -0
  125. package/dist/application/binary/CompositeProvider.js +71 -28
  126. package/dist/application/binary/LazyAnalysisProvider.js +3 -1
  127. package/dist/application/binary/SessionProviderRouter.js +5 -2
  128. package/dist/application/binaryDiagnostics/BinaryLayoutService.js +11 -1
  129. package/dist/application/binaryDiagnostics/PeResourcesService.js +3 -0
  130. package/dist/application/binaryDiagnostics/RecordedCrashService.js +14 -3
  131. package/dist/application/captures/PacketCaptureService.js +83 -0
  132. package/dist/application/closeOwnedWebResources.js +7 -0
  133. package/dist/application/electron/ElectronFusePort.js +1 -0
  134. package/dist/application/electron/ElectronFuseService.js +80 -0
  135. package/dist/application/evm/EvmInterfaceService.js +1 -0
  136. package/dist/application/flutter/DartAotInspection.js +26 -0
  137. package/dist/application/flutter/FlutterBuildAnalysisPort.js +1 -0
  138. package/dist/application/flutter/FlutterBuildAnalysisService.js +13 -0
  139. package/dist/application/frida/FridaInstrumentationPort.js +8 -0
  140. package/dist/application/frida/FridaInstrumentationService.js +310 -0
  141. package/dist/application/frida/fridaInputErrors.js +17 -0
  142. package/dist/application/go/GoBinaryPort.js +1 -0
  143. package/dist/application/go/GoBinaryService.js +80 -0
  144. package/dist/application/harmony/HarmonyApplicationService.js +17 -0
  145. package/dist/application/investigation/EvidenceLedger.js +40 -14
  146. package/dist/application/investigation/InvestigationRecords.js +12 -21
  147. package/dist/application/investigation/UnknownEvidence.js +22 -18
  148. package/dist/application/javascript/ElectronActiveObservationService.js +55 -25
  149. package/dist/application/javascript/ElectronBoundaryAnalysis.js +17 -3
  150. package/dist/application/javascript/ElectronBoundaryGraph.js +2 -0
  151. package/dist/application/javascript/ElectronBoundaryGraphCallPaths.js +144 -0
  152. package/dist/application/javascript/ElectronBoundaryGraphIpc.js +26 -7
  153. package/dist/application/javascript/ElectronBoundaryGraphNative.js +1 -1
  154. package/dist/application/javascript/ElectronBoundaryGraphWindows.js +47 -9
  155. package/dist/application/javascript/ElectronObservationService.js +0 -1
  156. package/dist/application/javascript/JavaScriptApplicationEvidence.js +15 -0
  157. package/dist/application/javascript/JavaScriptApplicationService.js +29 -14
  158. package/dist/application/javascript/JavaScriptApplicationWorkflowService.js +0 -1
  159. package/dist/application/javascript/JavaScriptArtifactAnalysis.js +86 -34
  160. package/dist/application/javascript/JavaScriptArtifactGraphAccumulator.js +51 -21
  161. package/dist/application/javascript/JavaScriptArtifactGraphBuilder.js +31 -7
  162. package/dist/application/javascript/JavaScriptArtifactGraphContext.js +25 -4
  163. package/dist/application/javascript/JavaScriptArtifactGraphDocuments.js +25 -14
  164. package/dist/application/javascript/JavaScriptArtifactGraphFindings.js +147 -41
  165. package/dist/application/javascript/JavaScriptArtifactGraphStructure.js +156 -7
  166. package/dist/application/javascript/JavaScriptArtifactPathResolution.js +892 -181
  167. package/dist/application/javascript/JavaScriptArtifactReconstruction.js +43 -30
  168. package/dist/application/javascript/JavaScriptArtifactReconstructionInput.js +2 -0
  169. package/dist/application/javascript/JavaScriptModuleRelationships.js +33 -11
  170. package/dist/application/javascript/JavaScriptRecoveryService.js +29 -9
  171. package/dist/application/javascript/JavaScriptRuntimeObservationService.js +2 -1
  172. package/dist/application/javascript/JavaScriptRuntimeReconciliationService.js +0 -1
  173. package/dist/application/javascript/JavaScriptSemanticGraphBuilder.js +42 -26
  174. package/dist/application/javascript/JavaScriptSemanticGraphElectronProjection.js +67 -0
  175. package/dist/application/javascript/JavaScriptSemanticTraceService.js +0 -1
  176. package/dist/application/managed/ManagedApplicationGraphService.js +0 -1
  177. package/dist/application/managed/ManagedMemberComparisonService.js +72 -54
  178. package/dist/application/managed/ManagedNativeVerificationService.js +0 -1
  179. package/dist/application/managed/ManagedReconstructionService.js +0 -1
  180. package/dist/application/native/NativeCallRoutes.js +54 -34
  181. package/dist/application/native/NativeDispatchMetadataInspection.js +6 -2
  182. package/dist/application/native/NativeUiActionTrace.js +35 -22
  183. package/dist/application/native/NativeValueTrace.js +57 -23
  184. package/dist/application/pcap/PcapAnalysisPort.js +1 -0
  185. package/dist/application/pcap/PcapAnalysisService.js +24 -0
  186. package/dist/application/process/ProcessCli.js +33 -13
  187. package/dist/application/reverse/ReverseEngineeringCommandPort.js +1 -0
  188. package/dist/application/reverse/ReverseEngineeringService.js +688 -0
  189. package/dist/application/rust/RustBinaryPort.js +1 -0
  190. package/dist/application/rust/RustBinaryService.js +80 -0
  191. package/dist/application/signals/SignalRecordingService.js +83 -0
  192. package/dist/application/sqlite/SqliteDatabaseCapability.js +30 -0
  193. package/dist/application/sqlite/SqliteDatabasePort.js +1 -0
  194. package/dist/application/sqlite/SqliteDatabaseService.js +76 -0
  195. package/dist/application/wasm/WasmArtifactPort.js +1 -0
  196. package/dist/application/wasm/WasmArtifactService.js +77 -0
  197. package/dist/application/wasm/WasmInterfaceComparisonService.js +188 -0
  198. package/dist/artifacts/ArtifactHash.js +13 -2
  199. package/dist/artifacts/ArtifactPaths.js +4 -7
  200. package/dist/artifacts/ArtifactProvider.js +8 -4
  201. package/dist/artifacts/ArtifactReader.js +13 -1
  202. package/dist/artifacts/ArtifactResourceScope.js +12 -3
  203. package/dist/artifacts/AsarArtifactReader.js +177 -112
  204. package/dist/artifacts/AsarListing.js +78 -0
  205. package/dist/artifacts/DirectoryArtifactReader.js +94 -24
  206. package/dist/artifacts/MachOSliceArtifactReader.js +83 -10
  207. package/dist/artifacts/NativeDmgArtifactReader.js +161 -58
  208. package/dist/artifacts/OrderedReads.js +57 -0
  209. package/dist/artifacts/SafeOutputTree.js +19 -4
  210. package/dist/artifacts/ZipArtifactReader.js +117 -12
  211. package/dist/artifacts/apple/AppleAssetCatalogAnalysis.js +77 -68
  212. package/dist/artifacts/apple/DylibResolutionReader.js +11 -5
  213. package/dist/artifacts/apple/InterfaceBuilderAnalysis.js +57 -21
  214. package/dist/artifacts/apple/InterfaceBuilderDecodeBudget.js +64 -12
  215. package/dist/artifacts/apple/KeyedArchiveReader.js +3 -2
  216. package/dist/artifacts/apple/MachoLoadCommandReader.js +62 -61
  217. package/dist/artifacts/apple/NibArchive.js +11 -4
  218. package/dist/artifacts/apple/PlistNumberLiterals.js +2 -2
  219. package/dist/artifacts/extraction/ArtifactExtraction.js +6 -7
  220. package/dist/artifacts/hostExecutableMarking.js +16 -0
  221. package/dist/artifacts/inventory/ArtifactGraphConstruction.js +134 -34
  222. package/dist/artifacts/inventory/ArtifactInventory.js +2 -2
  223. package/dist/artifacts/inventory/classify.js +32 -15
  224. package/dist/artifacts/inventory/reader.js +36 -21
  225. package/dist/artifacts/inventory/scanCanonical.js +25 -18
  226. package/dist/artifacts/inventory/scanReader.js +36 -10
  227. package/dist/artifacts/javascript/JavaScriptArtifactFiles.js +163 -7
  228. package/dist/artifacts/readStableArtifact.js +28 -4
  229. package/dist/browser/BrowserProcessStartup.js +20 -9
  230. package/dist/browser/BrowserScenarioPartialObservation.js +60 -44
  231. package/dist/browser/BrowserScenarioSecrets.js +176 -46
  232. package/dist/browser/CdpBrowserProvider.js +70 -99
  233. package/dist/browser/CdpCaptureDocuments.js +231 -69
  234. package/dist/browser/CdpCaptureDomSvg.js +94 -61
  235. package/dist/browser/CdpCaptureEventBodyShapes.js +9 -5
  236. package/dist/browser/CdpCaptureEventHandlers.js +23 -12
  237. package/dist/browser/CdpCaptureEvents.js +49 -10
  238. package/dist/browser/CdpCaptureStorage.js +22 -5
  239. package/dist/browser/CdpCaptureStorageFingerprints.js +54 -11
  240. package/dist/browser/CdpCaptureValues.js +0 -1
  241. package/dist/browser/CdpConnection.js +3 -4
  242. package/dist/browser/CdpElectronInspection.js +14 -4
  243. package/dist/browser/CdpElectronProvider.js +7 -2
  244. package/dist/browser/CdpElectronScripts.js +2 -1
  245. package/dist/browser/CdpElectronWorkers.js +7 -2
  246. package/dist/browser/CdpEndpoint.js +143 -17
  247. package/dist/browser/CdpObservationSession.js +24 -8
  248. package/dist/browser/CdpPageCapture.js +66 -16
  249. package/dist/browser/CdpPageCaptureScripts.js +4 -3
  250. package/dist/browser/CdpPageCaptureWorkers.js +5 -1
  251. package/dist/browser/CdpSafeMetadata.js +9 -5
  252. package/dist/browser/CdpScreenshot.js +5 -14
  253. package/dist/browser/CdpSnapshotStrings.js +21 -0
  254. package/dist/browser/CdpTargetSession.js +29 -2
  255. package/dist/browser/CdpWebMcpDiscovery.js +23 -6
  256. package/dist/browser/PlaywrightBrowserScenarioProvider.js +4 -4
  257. package/dist/browser/PlaywrightElectronActiveActions.js +4 -4
  258. package/dist/browser/PlaywrightElectronActiveProjection.js +16 -4
  259. package/dist/browser/PlaywrightElectronActiveProvider.js +103 -30
  260. package/dist/browser/PlaywrightExecutionBoundary.js +2 -2
  261. package/dist/browser/PlaywrightScenarioBrowser.js +9 -6
  262. package/dist/browser/PlaywrightScenarioEvents.js +198 -36
  263. package/dist/browser/PlaywrightScenarioServiceWorkers.js +249 -0
  264. package/dist/browser/PlaywrightScenarioSession.js +61 -29
  265. package/dist/browser/WebSourceMapFetcher.js +163 -80
  266. package/dist/browser/assets/LocalWebScriptArtifacts.js +24 -3
  267. package/dist/browser/assets/PublishWebScripts.js +13 -2
  268. package/dist/browser/assets/ScenarioScriptCapture.js +2 -1
  269. package/dist/browser/assets/WebArtifactReads.js +11 -3
  270. package/dist/browser/assets/WebSourceLocationArtifacts.js +38 -3
  271. package/dist/browser/history/CaptureFailures.js +22 -8
  272. package/dist/browser/history/CaptureFormatError.js +2 -2
  273. package/dist/browser/history/{HarJson.js → CaptureJson.js} +14 -4
  274. package/dist/browser/history/CaptureRedaction.js +16 -3
  275. package/dist/browser/history/CaptureRelease.js +20 -2
  276. package/dist/browser/history/HarCapture.js +16 -23
  277. package/dist/browser/history/HarSchema.js +36 -36
  278. package/dist/browser/history/HistoricalCaptureDecoder.js +93 -25
  279. package/dist/browser/history/NodeCaptureAdapter.js +48 -0
  280. package/dist/browser/history/{HarCaptureProcess.js → NodeCaptureProcess.js} +18 -9
  281. package/dist/browser/history/QlogCapture.js +385 -0
  282. package/dist/browser/history/SazCapture.js +130 -0
  283. package/dist/browser/history/SazHttp.js +61 -0
  284. package/dist/browser/history/SazMetadata.js +92 -0
  285. package/dist/browser/history/SazProjection.js +90 -0
  286. package/dist/browser/modules/NativeModuleResolver.js +177 -110
  287. package/dist/browser/modules/WebModuleArtifacts.js +40 -3
  288. package/dist/browser/network/PlaywrightNetworkContent.js +40 -5
  289. package/dist/browser/network/PlaywrightScenarioNetwork.js +125 -11
  290. package/dist/captures/TsharkCaptureProvider.js +370 -0
  291. package/dist/captures/parseFieldDiscovery.js +66 -0
  292. package/dist/captures/parsePacketOutput.js +21 -0
  293. package/dist/catalogIdentity.js +46 -35
  294. package/dist/cli/adbCommands.js +2 -2
  295. package/dist/cli/analysisViewCommands.js +1 -1
  296. package/dist/cli/androidCommands.js +11 -2
  297. package/dist/cli/apktoolCommands.js +10 -11
  298. package/dist/cli/applicationCommands.js +44 -17
  299. package/dist/cli/artifactCommands.js +1 -1
  300. package/dist/cli/binaryDiagnosticsCommands.js +14 -10
  301. package/dist/cli/browserAdvancedCommands.js +37 -24
  302. package/dist/cli/browserCommands.js +46 -29
  303. package/dist/cli/captureCommands.js +72 -0
  304. package/dist/cli/cliResultOutput.js +188 -0
  305. package/dist/cli/coreBinaryCommands.js +73 -27
  306. package/dist/cli/coreNativeCommands.js +53 -31
  307. package/dist/cli/cutterCommands.js +50 -0
  308. package/dist/cli/electronCommands.js +45 -3
  309. package/dist/cli/evmCommands.js +4 -5
  310. package/dist/cli/finishAnalysisCommand.js +44 -0
  311. package/dist/cli/firmwareCommands.js +14 -36
  312. package/dist/cli/flutterCommands.js +69 -0
  313. package/dist/cli/fridaCommands.js +211 -0
  314. package/dist/cli/goCommands.js +20 -0
  315. package/dist/cli/interactiveSetup.js +11 -1
  316. package/dist/cli/javascriptApplicationAnalysis.js +1 -1
  317. package/dist/cli/javascriptRecoveryCommands.js +7 -0
  318. package/dist/cli/jsonOutput.js +2 -2
  319. package/dist/cli/managedCommands.js +31 -3
  320. package/dist/cli/options.js +20 -2
  321. package/dist/cli/pcapCommands.js +47 -0
  322. package/dist/cli/processCommands.js +1 -1
  323. package/dist/cli/reverseEngineeringCommands.js +268 -0
  324. package/dist/cli/rustCommands.js +21 -0
  325. package/dist/cli/setupCommands.js +40 -12
  326. package/dist/cli/signalCommands.js +72 -0
  327. package/dist/cli/sqliteCommands.js +79 -0
  328. package/dist/cli/utilityCommands.js +116 -74
  329. package/dist/cli/wasmCommands.js +61 -0
  330. package/dist/cli/webModuleCommands.js +36 -32
  331. package/dist/cli/webNetworkCaptureCommands.js +8 -8
  332. package/dist/cli-runtime/AbortablePromise-BVBemxbD.js +123 -0
  333. package/dist/cli-runtime/AnalysisProvider-D0Us2OTk.js +27 -0
  334. package/dist/cli-runtime/AnalysisSnapshotCache-BXS0wRd2.js +710 -0
  335. package/dist/cli-runtime/ArtifactReader-BXkffc1D.js +55 -0
  336. package/dist/cli-runtime/ArtifactResourceScope-DQWTcUwE.js +114 -0
  337. package/dist/cli-runtime/AsarHeader-CnzOzYEH.js +31 -0
  338. package/dist/cli-runtime/BinarySessionStatus-DnMxMk-r.js +211 -0
  339. package/dist/cli-runtime/BinaryTargetResolver-CVIJ_s1A.js +1308 -0
  340. package/dist/cli-runtime/BoundedFileBytes-BU30odTm.js +39 -0
  341. package/dist/cli-runtime/CdpTargetSession-DGX5pV9w.js +650 -0
  342. package/dist/cli-runtime/ClientConfigPath-c6jr6INc.js +36 -0
  343. package/dist/cli-runtime/ClientConfigurationDocument-ffQ9X0Se.js +1957 -0
  344. package/dist/cli-runtime/ClientRegistrationStatus-DszCyPEU.js +509 -0
  345. package/dist/cli-runtime/CurrentEntrypointPath-D5FRNdkq.js +14 -0
  346. package/dist/cli-runtime/DirectAnalysis-BgvAtpN3.js +528 -0
  347. package/dist/cli-runtime/Doctor-DIpf_I7N.js +588 -0
  348. package/dist/cli-runtime/ElectronFileScope-dpHm2nrS.js +1054 -0
  349. package/dist/cli-runtime/ExecFileOutput-BEQs-lDD.js +117 -0
  350. package/dist/cli-runtime/IdaConfiguration-CtGP7EKo.js +1094 -0
  351. package/dist/cli-runtime/InterfaceBuilderDecodeBudget-D4omRUe4.js +279 -0
  352. package/dist/cli-runtime/InventoryProjectionEvidence-DIsI4DJ6.js +49 -0
  353. package/dist/cli-runtime/InvestigationProviders-DoQRIHii.js +117 -0
  354. package/dist/cli-runtime/JavaScriptApplicationEvidenceGraph-D5aI_FSJ.js +160 -0
  355. package/dist/cli-runtime/JavaScriptApplicationWorkflowEvidence-Bz4-V0Ct.js +75 -0
  356. package/dist/cli-runtime/JavaScriptWorkerMemoryLimit-B1bwMM1a.js +86 -0
  357. package/dist/cli-runtime/JebMcpEndpoint-DUytrn5G.js +428 -0
  358. package/dist/cli-runtime/JsonFiles-DQa1PRKy.js +708 -0
  359. package/dist/cli-runtime/MacCodeSignature-MgYbRK_H.js +24 -0
  360. package/dist/cli-runtime/MacHopperPaths-CwL5lYPX.js +434 -0
  361. package/dist/cli-runtime/MachoLoadCommandReader-C7e074Ze.js +510 -0
  362. package/dist/cli-runtime/ManagedSnapshot-rqyBHcdL.js +4185 -0
  363. package/dist/cli-runtime/OwnedCommand-Cj9GhmPR.js +112 -0
  364. package/dist/cli-runtime/PrivateRuntimeRoot-DAy0PiBM.js +263 -0
  365. package/dist/cli-runtime/ProcessOwnership-DXC5-UWt.js +1378 -0
  366. package/dist/cli-runtime/ProviderDeadline-8m2pFRDc.js +122 -0
  367. package/dist/cli-runtime/RegularFile-B_6KPCNQ.js +139 -0
  368. package/dist/cli-runtime/RegularFileRead-DVlC5faM.js +125 -0
  369. package/dist/cli-runtime/SafeOutputTree-D6U15GXd.js +524 -0
  370. package/dist/cli-runtime/SetupHost-FkYWswsq.js +1098 -0
  371. package/dist/cli-runtime/SupportedClients-DaX6Lt2d.js +1049 -0
  372. package/dist/cli-runtime/UninstallFailure-1blyKXHE.js +22 -0
  373. package/dist/cli-runtime/Update-CbTC_eg1.js +143 -0
  374. package/dist/cli-runtime/UpdateFailure-BcFNxEZZ.js +24 -0
  375. package/dist/cli-runtime/ZipArtifactReader-B8ZgNe4D.js +248 -0
  376. package/dist/cli-runtime/analysisErrorCleanup-Do6YeeoD.js +32 -0
  377. package/dist/cli-runtime/analysisErrorPresentation-DGt7TdsH.js +497 -0
  378. package/dist/cli-runtime/appleArchiveFormat-tVoI2ykA.js +263 -0
  379. package/dist/cli-runtime/application__DirectAnalysisStatus-DpOejOf0.js +150 -0
  380. package/dist/cli-runtime/application__EnhancedTools-oFE2bOjs.js +1787 -0
  381. package/dist/cli-runtime/application__FunctionAnalysisEvidence-B6osuhvW.js +41 -0
  382. package/dist/cli-runtime/application__ReconstructionCoverageService-DN3wTFQj.js +32 -0
  383. package/dist/cli-runtime/application__ReconstructionObligationLedgerService-CKcTppX9.js +815 -0
  384. package/dist/cli-runtime/application__Setup-XpMaRNjy.js +514 -0
  385. package/dist/cli-runtime/application__Uninstall-_23pU2yB.js +427 -0
  386. package/dist/cli-runtime/application__UpdateRuntime-DPvY8ohd.js +345 -0
  387. package/dist/cli-runtime/application__android__AndroidApplicationService-CFgIFPM4.js +31 -0
  388. package/dist/cli-runtime/application__apple__AppleApplicationService-Db6QCsun.js +31 -0
  389. package/dist/cli-runtime/application__harmony__HarmonyApplicationService-CFjocHoK.js +31 -0
  390. package/dist/cli-runtime/application__javascript__ElectronActiveObservationService-CmVDUI_Z.js +118 -0
  391. package/dist/cli-runtime/application__javascript__ElectronObservationService-DEsR8KDN.js +63 -0
  392. package/dist/cli-runtime/application__javascript__JavaScriptApplicationService-CCkp8KBh.js +11450 -0
  393. package/dist/cli-runtime/application__javascript__JavaScriptApplicationWorkflowService-lPy0tzr3.js +2329 -0
  394. package/dist/cli-runtime/application__javascript__JavaScriptRuntimeReconciliationService-DWleA8K9.js +88 -0
  395. package/dist/cli-runtime/application__javascript__JavaScriptSemanticTraceService-DkALH4rL.js +299 -0
  396. package/dist/cli-runtime/artifactOperationError-B7n03FbD.js +27 -0
  397. package/dist/cli-runtime/artifacts__ArtifactProvider-zXI0QjSL.js +2187 -0
  398. package/dist/cli-runtime/binary-BVOr2mgE.js +14206 -0
  399. package/dist/cli-runtime/browserObservationError-Dx6xRTjb.js +40 -0
  400. package/dist/cli-runtime/catalogIdentity-DLoXgfIR.js +933 -0
  401. package/dist/cli-runtime/cli.js +41848 -0
  402. package/dist/cli-runtime/cliOutput-BC1BdAcB.js +122 -0
  403. package/dist/cli-runtime/cliOutput.js +5 -0
  404. package/dist/cli-runtime/cliResultOutput-DsRMI8CJ.js +780 -0
  405. package/dist/cli-runtime/cliResultOutput.js +5 -0
  406. package/dist/cli-runtime/composition__browserScenario-DHXC1a8n.js +2927 -0
  407. package/dist/cli-runtime/composition__electronObservation-GecK2EID.js +555 -0
  408. package/dist/cli-runtime/composition__electronScenario-CEZnVrAL.js +653 -0
  409. package/dist/cli-runtime/cutterToolContracts-TZH9EHr5.js +5134 -0
  410. package/dist/cli-runtime/doctorRuntime-BE5ZX8it.js +258 -0
  411. package/dist/cli-runtime/dotnet__ManagedStaticProvider-C8_yZCDc.js +5 -0
  412. package/dist/cli-runtime/errorSchemas-CTRmvMl3.js +601 -0
  413. package/dist/cli-runtime/javascriptApplicationAnalysis-HgMzVMQw.js +2068 -0
  414. package/dist/cli-runtime/javascriptExportReturnShapeProjection-Dg00g35t.js +78 -0
  415. package/dist/cli-runtime/javascriptExportShapeComparisonSchemas-BYnoIqIk.js +1242 -0
  416. package/dist/cli-runtime/javascriptRuntimeReconciliation-DNjDoL3S.js +1507 -0
  417. package/dist/cli-runtime/javascriptRuntimeReconciliationSchemas-BWpGWNcI.js +247 -0
  418. package/dist/cli-runtime/javascriptSemanticTraceSchemas-BTCNcvbc.js +126 -0
  419. package/dist/cli-runtime/lipo-DSWP6fv-.js +396 -0
  420. package/dist/cli-runtime/logger-CQQCI4a2.js +48 -0
  421. package/dist/cli-runtime/machoContainer-C8BIkkq3.js +172 -0
  422. package/dist/cli-runtime/managedApplicationGraph-B08jb3jq.js +1130 -0
  423. package/dist/cli-runtime/managedToolContracts-D60QmIYj.js +99 -0
  424. package/dist/cli-runtime/mcpDoctor.js +359 -0
  425. package/dist/cli-runtime/mcpStartupPolicy-CVVSOmRc.js +21 -0
  426. package/dist/cli-runtime/native__NativeMacOSProvider-YBTvUeJO.js +4875 -0
  427. package/dist/cli-runtime/officialToolContracts-CCFF0an9.js +1501 -0
  428. package/dist/cli-runtime/propertyListKeys-G8e74YWb.js +248 -0
  429. package/dist/cli-runtime/providerAdapterError-DAjhICdr.js +25 -0
  430. package/dist/cli-runtime/providerCleanupError-Ceq8f0wK.js +27 -0
  431. package/dist/cli-runtime/providerIdentities-Ao1XTvwx.js +31 -0
  432. package/dist/cli-runtime/providerStartupTimeout-B2tF2LtZ.js +17 -0
  433. package/dist/cli-runtime/readFileHandleChunks-dp60iZ6v.js +38 -0
  434. package/dist/cli-runtime/reconstructionObligationLedgerSchemas-Bao0xMr-.js +19478 -0
  435. package/dist/cli-runtime/rolldown-runtime-DXoylpqc.js +121 -0
  436. package/dist/cli-runtime/runtimeVersion-CMGd0bDu.js +23 -0
  437. package/dist/cli-runtime/safeJson-DKKACtdy.js +25 -0
  438. package/dist/cli-runtime/scanCanonical-KP4T9jSl.js +2724 -0
  439. package/dist/cli-runtime/snapshotEnvironment-D_tWyOub.js +813 -0
  440. package/dist/cli-runtime/toolContracts-D2FOG_Nb.js +3721 -0
  441. package/dist/cli-runtime/toolOutputSchemaGroups-DRiYs1je.js +12070 -0
  442. package/dist/cli-runtime/workflowInputError-n8Oo-bLA.js +26 -0
  443. package/dist/cli.js +38 -5
  444. package/dist/cliBrowserScenarioCommands.js +39 -4
  445. package/dist/cliCommandNames.js +48 -0
  446. package/dist/cliEvidenceCommands.js +0 -1
  447. package/dist/cliJavaScriptRuntimeCommands.js +16 -14
  448. package/dist/cliJsonInput.js +12 -4
  449. package/dist/cliLogging.js +50 -14
  450. package/dist/cliObservationOptions.js +6 -0
  451. package/dist/cliOutput.js +38 -5
  452. package/dist/composition/binary.js +4 -0
  453. package/dist/composition/captures.js +3 -0
  454. package/dist/composition/directAnalysis.js +28 -11
  455. package/dist/composition/electronFuses.js +4 -0
  456. package/dist/composition/evm.js +12 -0
  457. package/dist/composition/flutter.js +3 -0
  458. package/dist/composition/go.js +4 -0
  459. package/dist/composition/javascriptAnalysisWorkerProcess.js +5 -4
  460. package/dist/composition/jeb.js +33 -4
  461. package/dist/composition/pcap.js +3 -0
  462. package/dist/composition/resolveWindowsProviderExecutable.js +61 -0
  463. package/dist/composition/reverseEngineering.js +29 -0
  464. package/dist/composition/rust.js +4 -0
  465. package/dist/composition/signals.js +3 -0
  466. package/dist/composition/sqlite.js +4 -0
  467. package/dist/composition/wasm.js +22 -0
  468. package/dist/composition/webNetworkCaptures.js +7 -2
  469. package/dist/config/environment.js +45 -4
  470. package/dist/config/ghidraDisabledAnalyzers.js +25 -0
  471. package/dist/config/homeDirectory.js +9 -6
  472. package/dist/config/mcpInputSchemaProfile.js +4 -0
  473. package/dist/config/mcpOutputSchemaProfile.js +22 -0
  474. package/dist/config/parseConfig.js +21 -31
  475. package/dist/config/parsers.js +4 -3
  476. package/dist/config/{ghidraStartupTimeout.js → providerStartupTimeout.js} +7 -3
  477. package/dist/contracts/adb/adbToolContracts.js +7 -7
  478. package/dist/contracts/analysisDetail.js +6 -3
  479. package/dist/contracts/analysisViewApiSurfaceExample.js +68 -0
  480. package/dist/contracts/analysisViewToolContracts.js +24 -3
  481. package/dist/contracts/android/androidToolContracts.js +17 -8
  482. package/dist/contracts/applicationToolContracts.js +17 -2
  483. package/dist/contracts/artifactToolContracts.js +14 -2
  484. package/dist/contracts/browserToolContracts.js +1 -0
  485. package/dist/contracts/captures/captureToolContracts.js +42 -0
  486. package/dist/contracts/compactInputSchema.js +26 -6
  487. package/dist/contracts/cutterToolContracts.js +84 -0
  488. package/dist/contracts/enhancedToolContracts.js +2 -2
  489. package/dist/contracts/evm/evmToolContracts.js +30 -15
  490. package/dist/contracts/firmware/firmwareToolContracts.js +1 -1
  491. package/dist/contracts/flutter/flutterToolContracts.js +47 -0
  492. package/dist/contracts/fridaRemoteAddress.js +23 -0
  493. package/dist/contracts/fridaToolContracts.js +273 -0
  494. package/dist/contracts/functionComparisonExample.js +12 -1
  495. package/dist/contracts/gdbToolContracts.js +103 -0
  496. package/dist/contracts/go/goToolContracts.js +20 -0
  497. package/dist/contracts/hopperMemoryContracts.js +15 -0
  498. package/dist/contracts/inputSchemaPresentation.js +81 -14
  499. package/dist/contracts/investigationExamples.js +1 -0
  500. package/dist/contracts/javascript/electronToolContracts.js +27 -2
  501. package/dist/contracts/javascript/javascriptRecoveryToolContracts.js +13 -1
  502. package/dist/contracts/managed/managedToolContracts.js +43 -4
  503. package/dist/contracts/managed/managedWorkflowExamples.js +7 -1
  504. package/dist/contracts/managed/managedWorkflowToolContracts.js +4 -30
  505. package/dist/contracts/mobileApplicationGraphExamples.js +12 -0
  506. package/dist/contracts/native/binaryDiagnosticsToolContracts.js +3 -2
  507. package/dist/contracts/native/nativeToolContracts.js +10 -6
  508. package/dist/contracts/officialToolContracts.js +5 -5
  509. package/dist/contracts/pcap/pcapToolContracts.js +33 -0
  510. package/dist/contracts/providerSelection.js +1 -0
  511. package/dist/contracts/reconstructionReadinessExample.js +126 -119
  512. package/dist/contracts/reverseEngineeringToolContracts.js +52 -0
  513. package/dist/contracts/rizinDebugToolContracts.js +96 -0
  514. package/dist/contracts/rust/rustToolContracts.js +20 -0
  515. package/dist/contracts/sessionLifecycleInputs.js +34 -2
  516. package/dist/contracts/sessionToolContracts.js +2 -2
  517. package/dist/contracts/sessionToolSchemas.js +14 -0
  518. package/dist/contracts/signals/signalToolContracts.js +40 -0
  519. package/dist/contracts/sqlite/sqliteToolContracts.js +36 -0
  520. package/dist/contracts/toolContractExamples.js +29 -0
  521. package/dist/contracts/toolContractTypes.js +2 -0
  522. package/dist/contracts/toolContracts.js +26 -0
  523. package/dist/contracts/toolEffects.js +247 -8
  524. package/dist/contracts/toolOutputSchemaGroups.js +75 -32
  525. package/dist/contracts/toolOutputSchemaPrimitives.js +111 -10
  526. package/dist/contracts/toolSchemaMetadata.js +16 -2
  527. package/dist/contracts/unknownContractExamples.js +1 -1
  528. package/dist/contracts/wasm/wasmComparisonContracts.js +52 -0
  529. package/dist/contracts/wasm/wasmToolContracts.js +33 -0
  530. package/dist/contracts/webNetworkCaptureToolContracts.js +15 -4
  531. package/dist/cutter/CutterBridgeClient.js +621 -0
  532. package/dist/cutter/CutterBridgeService.js +139 -0
  533. package/dist/doctorRuntime.js +20 -8
  534. package/dist/domain/adb/adbDeviceAnalysis.js +26 -4
  535. package/dist/domain/analysisErrorBase.js +20 -0
  536. package/dist/domain/analysisErrorCleanup.js +1 -1
  537. package/dist/domain/analysisErrorCore.js +19 -0
  538. package/dist/domain/analysisErrorPresentation.js +58 -17
  539. package/dist/domain/analysisErrorProjection.js +31 -12
  540. package/dist/domain/analysisProfile.js +7 -3
  541. package/dist/domain/analysisSnapshot.js +311 -184
  542. package/dist/domain/analysisView/WebNetworkApiSurfaceAccumulator.js +414 -0
  543. package/dist/domain/analysisView/analysisView.js +366 -44
  544. package/dist/domain/analysisView/analysisViewCoverage.js +32 -0
  545. package/dist/domain/analysisView/analysisViewErrors.js +4 -0
  546. package/dist/domain/analysisView/analysisViewParent.js +12 -0
  547. package/dist/domain/analysisView/analysisViewText.js +29 -0
  548. package/dist/domain/analysisView/androidPackageView.js +102 -0
  549. package/dist/domain/analysisView/artifactInventoryView.js +140 -0
  550. package/dist/domain/analysisView/binaryLayoutView.js +11 -4
  551. package/dist/domain/analysisView/dartAotView.js +93 -0
  552. package/dist/domain/analysisView/evmInterfaceView.js +105 -0
  553. package/dist/domain/analysisView/interfaceBuilderView.js +182 -0
  554. package/dist/domain/analysisView/javascriptApplicationView.js +29 -28
  555. package/dist/domain/analysisView/machoView.js +186 -0
  556. package/dist/domain/analysisView/managedArtifactView.js +108 -0
  557. package/dist/domain/analysisView/managedMemberView.js +209 -0
  558. package/dist/domain/analysisView/nativeFunctionView.js +20 -25
  559. package/dist/domain/analysisView/pcapCaptureView.js +264 -0
  560. package/dist/domain/analysisView/qlogCaptureView.js +198 -0
  561. package/dist/domain/analysisView/wasmArtifactView.js +162 -0
  562. package/dist/domain/analysisView/webNetworkApiSurfaceView.js +123 -0
  563. package/dist/domain/analysisView/webNetworkCaptureView.js +388 -0
  564. package/dist/domain/android/androidAnalysis.js +36 -2
  565. package/dist/domain/android/androidApplication.js +32 -60
  566. package/dist/domain/apktool/apktoolResourceAnalysis.js +19 -7
  567. package/dist/domain/apple/appleApplication.js +31 -29
  568. package/dist/domain/apple/appleArchiveFormat.js +184 -0
  569. package/dist/domain/apple/appleAssetCatalog.js +15 -0
  570. package/dist/domain/apple/appleBundleAnatomy.js +1 -1
  571. package/dist/domain/apple/dyldPaths.js +9 -2
  572. package/dist/domain/apple/dylibResolution.js +19 -9
  573. package/dist/domain/apple/dylibResolutionFindings.js +8 -9
  574. package/dist/domain/apple/interfaceBuilderGraph.js +50 -26
  575. package/dist/domain/apple/interfaceBuilderKeyedArchive.js +28 -8
  576. package/dist/domain/apple/machoContainer.js +120 -8
  577. package/dist/domain/apple/machoCpuIdentity.js +4 -0
  578. package/dist/domain/apple/plistValue.js +6 -1
  579. package/dist/domain/artifactComparison.js +109 -32
  580. package/dist/domain/artifactDecompressionBudget.js +26 -0
  581. package/dist/domain/artifactGraph.js +23 -6
  582. package/dist/domain/artifactIdentity.js +4 -1
  583. package/dist/domain/artifactInspection.js +44 -2
  584. package/dist/domain/artifactInventoryEvidence.js +137 -39
  585. package/dist/domain/binaryTarget.js +251 -94
  586. package/dist/domain/binaryTargetTypes.js +14 -1
  587. package/dist/domain/browserNetworkEvidence.js +4 -0
  588. package/dist/domain/browserObservation.js +88 -29
  589. package/dist/domain/browserObservationSchemas.js +4 -1
  590. package/dist/domain/browserScenarioCapture.js +2 -1
  591. package/dist/domain/browserScenarioCaptureValues.js +26 -2
  592. package/dist/domain/browserScenarioDiff.js +120 -11
  593. package/dist/domain/browserScenarioDiffEvidence.js +46 -13
  594. package/dist/domain/browserScenarioDiffValues.js +10 -3
  595. package/dist/domain/browserScenarioNetworkComparison.js +158 -0
  596. package/dist/domain/browserScenarioNormalization.js +10 -13
  597. package/dist/domain/browserScenarioValues.js +2 -12
  598. package/dist/domain/browserSession.js +2 -2
  599. package/dist/domain/bundleComparison.js +1 -5
  600. package/dist/domain/callPath.js +40 -3
  601. package/dist/domain/captures/packetCapture.js +138 -0
  602. package/dist/domain/captures/packetFields.js +81 -0
  603. package/dist/domain/changedBehavior.js +43 -41
  604. package/dist/domain/comparisonSourceEvidence.js +6 -0
  605. package/dist/domain/dosCom.js +2 -2
  606. package/dist/domain/dosMz.js +52 -14
  607. package/dist/domain/electron/electronFuses.js +360 -0
  608. package/dist/domain/elfFixedHeader.js +42 -0
  609. package/dist/domain/evidence.js +103 -38
  610. package/dist/domain/evidenceBundle.js +58 -20
  611. package/dist/domain/evidenceErrors.js +5 -0
  612. package/dist/domain/evm/evmInterface.js +18 -4
  613. package/dist/domain/evm/solidityMetadata.js +70 -0
  614. package/dist/domain/explicitSensitiveFailure.js +42 -24
  615. package/dist/domain/firmware/firmwareAnalysis.js +29 -0
  616. package/dist/domain/flutter/flutterBuildAnalysis.js +141 -0
  617. package/dist/domain/functionCallCoverage.js +60 -0
  618. package/dist/domain/functionComparisonDimensions.js +101 -10
  619. package/dist/domain/functionComparisonNormalization.js +66 -10
  620. package/dist/domain/functionComparisonResults.js +7 -6
  621. package/dist/domain/functionComparisonSchemas.js +14 -3
  622. package/dist/domain/functionDossierEvidence.js +3 -0
  623. package/dist/domain/go/goBinary.js +96 -0
  624. package/dist/domain/harmony/harmonyApplication.js +156 -0
  625. package/dist/domain/hopperErrors.js +15 -16
  626. package/dist/domain/hopperPublisher.js +12 -0
  627. package/dist/domain/hopperValues.js +112 -34
  628. package/dist/domain/javascript/electronObservation.js +4 -1
  629. package/dist/domain/javascript/electronStaticAnalysisBrowser.js +15 -14
  630. package/dist/domain/javascript/electronStaticAnalysisIpc.js +3 -1
  631. package/dist/domain/javascript/electronStaticAnalysisNative.js +19 -5
  632. package/dist/domain/javascript/electronStaticAnalysisValues.js +14 -8
  633. package/dist/domain/javascript/electronWrappedCallPaths.js +498 -0
  634. package/dist/domain/javascript/htmlArtifactReferences.js +94 -4
  635. package/dist/domain/javascript/javascriptAnalysisResourceControls.js +21 -1
  636. package/dist/domain/javascript/javascriptApplicationAnalysis.js +3 -0
  637. package/dist/domain/javascript/javascriptApplicationChangeGraph.js +7 -2
  638. package/dist/domain/javascript/javascriptApplicationEvidenceSchemas.js +1 -1
  639. package/dist/domain/javascript/javascriptApplicationGraph.js +17 -1
  640. package/dist/domain/javascript/javascriptApplicationGraphSchemas.js +1 -0
  641. package/dist/domain/javascript/javascriptApplicationProjectionResources.js +8 -0
  642. package/dist/domain/javascript/javascriptApplicationVersionKeys.js +31 -18
  643. package/dist/domain/javascript/javascriptArtifactFiles.js +2 -1
  644. package/dist/domain/javascript/javascriptAstFingerprint.js +51 -17
  645. package/dist/domain/javascript/javascriptAstValues.js +52 -3
  646. package/dist/domain/javascript/javascriptBootstrap.js +94 -0
  647. package/dist/domain/javascript/javascriptBootstrapIntegrity.js +372 -0
  648. package/dist/domain/javascript/javascriptBuiltinResourceMethods.js +8 -0
  649. package/dist/domain/javascript/javascriptBundledRequireOrigin.js +291 -0
  650. package/dist/domain/javascript/javascriptContextBridgeExposure.js +23 -0
  651. package/dist/domain/javascript/javascriptElectronMemberWrites.js +86 -22
  652. package/dist/domain/javascript/javascriptExportShapeComparisonSchemas.js +6 -5
  653. package/dist/domain/javascript/javascriptExportShapeVariants.js +1 -1
  654. package/dist/domain/javascript/javascriptFeatureSeed.js +33 -16
  655. package/dist/domain/javascript/javascriptFeatureTrace.js +9 -3
  656. package/dist/domain/javascript/javascriptFeatureTraceSchemas.js +42 -11
  657. package/dist/domain/javascript/javascriptIntrinsicInvocation.js +132 -0
  658. package/dist/domain/javascript/javascriptModuleDeclaration.js +28 -0
  659. package/dist/domain/javascript/javascriptModuleInterop.js +618 -0
  660. package/dist/domain/javascript/javascriptModuleResolutionMode.js +18 -0
  661. package/dist/domain/javascript/javascriptModuleSpecifier.js +5 -0
  662. package/dist/domain/javascript/javascriptNativeHandoff.js +0 -1
  663. package/dist/domain/javascript/javascriptPackageImportAliases.js +58 -0
  664. package/dist/domain/javascript/javascriptRecovery.js +12 -5
  665. package/dist/domain/javascript/javascriptRpcEndpoints.js +119 -41
  666. package/dist/domain/javascript/javascriptRuntimeLoadState.js +11 -0
  667. package/dist/domain/javascript/javascriptRuntimeObservation.js +4 -1
  668. package/dist/domain/javascript/javascriptRuntimeReconciliationCaptureParsing.js +10 -4
  669. package/dist/domain/javascript/javascriptRuntimeReconciliationMatching.js +15 -2
  670. package/dist/domain/javascript/javascriptRuntimeReconciliationResult.js +0 -1
  671. package/dist/domain/javascript/javascriptRuntimeReconciliationSchemas.js +5 -4
  672. package/dist/domain/javascript/javascriptRuntimeStaticCandidates.js +113 -11
  673. package/dist/domain/javascript/javascriptSemanticAmbientWrites.js +251 -0
  674. package/dist/domain/javascript/javascriptSemanticAnalysis.js +340 -108
  675. package/dist/domain/javascript/javascriptSemanticAsyncEffects.js +17 -34
  676. package/dist/domain/javascript/javascriptSemanticCallResolution.js +4 -3
  677. package/dist/domain/javascript/javascriptSemanticCallableStack.js +52 -0
  678. package/dist/domain/javascript/javascriptSemanticCalls.js +6 -11
  679. package/dist/domain/javascript/javascriptSemanticChildProcesses.js +42 -55
  680. package/dist/domain/javascript/javascriptSemanticDataEffectHelpers.js +428 -32
  681. package/dist/domain/javascript/javascriptSemanticDataEffects.js +14 -20
  682. package/dist/domain/javascript/javascriptSemanticDependencies.js +69 -0
  683. package/dist/domain/javascript/javascriptSemanticFingerprints.js +11 -14
  684. package/dist/domain/javascript/javascriptSemanticGraph.js +5 -1
  685. package/dist/domain/javascript/javascriptSemanticGraphSchemas.js +0 -1
  686. package/dist/domain/javascript/javascriptSemanticIterationSources.js +2 -2
  687. package/dist/domain/javascript/javascriptSemanticMemberMutations.js +224 -91
  688. package/dist/domain/javascript/javascriptSemanticMutationInitializers.js +199 -3
  689. package/dist/domain/javascript/javascriptSemanticObjectReferences.js +333 -43
  690. package/dist/domain/javascript/javascriptSemanticObjects.js +20 -16
  691. package/dist/domain/javascript/javascriptSemanticProjection.js +151 -43
  692. package/dist/domain/javascript/javascriptSemanticPromises.js +6 -9
  693. package/dist/domain/javascript/javascriptSemanticProvenance.js +5 -1
  694. package/dist/domain/javascript/javascriptSemanticQuery.js +7 -2
  695. package/dist/domain/javascript/javascriptSemanticReferenceSources.js +25 -0
  696. package/dist/domain/javascript/javascriptSemanticRequireOrigin.js +331 -8
  697. package/dist/domain/javascript/javascriptSemanticResources.js +6 -40
  698. package/dist/domain/javascript/javascriptSemanticReturnedReferences.js +14 -0
  699. package/dist/domain/javascript/javascriptSemanticReturns.js +37 -30
  700. package/dist/domain/javascript/javascriptSemanticState.js +39 -2
  701. package/dist/domain/javascript/javascriptSemanticTraversal.js +6 -4
  702. package/dist/domain/javascript/javascriptSemanticValues.js +227 -30
  703. package/dist/domain/javascript/javascriptSourceMapPaths.js +44 -17
  704. package/dist/domain/javascript/javascriptSourceParser.js +72 -3
  705. package/dist/domain/javascript/javascriptSourceSelection.js +11 -0
  706. package/dist/domain/javascript/javascriptStaticAnalysis.js +51 -17
  707. package/dist/domain/javascript/javascriptStaticAnalysisBundler.js +97 -23
  708. package/dist/domain/javascript/javascriptStaticAnalysisCalls.js +224 -44
  709. package/dist/domain/javascript/javascriptStaticAnalysisHelpers.js +166 -56
  710. package/dist/domain/javascript/javascriptStaticAnalysisState.js +1 -0
  711. package/dist/domain/javascript/javascriptStaticAnalysisTypes.js +2 -1
  712. package/dist/domain/javascript/javascriptSymbolicBindings.js +836 -0
  713. package/dist/domain/javascript/javascriptSymbolicControlFlow.js +40 -0
  714. package/dist/domain/javascript/javascriptSymbolicValues.js +34 -0
  715. package/dist/domain/javascript/sourceToBundleComparison.js +3 -1
  716. package/dist/domain/javascript/sourceToBundleComparisonSchemas.js +2 -0
  717. package/dist/domain/javascript/sourceToBundleSignals.js +47 -13
  718. package/dist/domain/jsonValue.js +37 -12
  719. package/dist/domain/localPath.js +6 -3
  720. package/dist/domain/managed/managedApplicationGraph.js +5 -0
  721. package/dist/domain/managed/managedApplicationGraphCoverage.js +6 -2
  722. package/dist/domain/managed/managedApplicationGraphNodes.js +0 -1
  723. package/dist/domain/managed/managedArtifact.js +51 -1
  724. package/dist/domain/managed/managedInspectionEvidence.js +5 -6
  725. package/dist/domain/managed/managedMemberComparison.js +3 -0
  726. package/dist/domain/managed/managedMemberComparisonCoverage.js +23 -3
  727. package/dist/domain/managed/managedMemberComparisonItems.js +23 -19
  728. package/dist/domain/managed/managedMemberComparisonMatch.js +209 -18
  729. package/dist/domain/managed/managedNativeVerificationMatch.js +49 -26
  730. package/dist/domain/managed/managedNativeVerificationSchemas.js +13 -2
  731. package/dist/domain/managed/managedReconstruction.js +5 -8
  732. package/dist/domain/mobileApplicationGraphProjection.js +80 -0
  733. package/dist/domain/native/addressCoordinate.js +11 -0
  734. package/dist/domain/native/binaryLayout.js +2 -4
  735. package/dist/domain/native/bytePattern.js +100 -0
  736. package/dist/domain/native/nativeAotPe.js +2 -2
  737. package/dist/domain/native/nativeInspection.js +38 -4
  738. package/dist/domain/native/nativeInstruction.js +17 -2
  739. package/dist/domain/native/nativeInvestigationGraph.js +9 -5
  740. package/dist/domain/native/nativeLoadImage.js +19 -1
  741. package/dist/domain/native/nativeUiObservation.js +5 -6
  742. package/dist/domain/native/objcSwiftMetadata.js +4 -1
  743. package/dist/domain/native/peResources.js +8 -2
  744. package/dist/domain/native/recordedCrash.js +79 -10
  745. package/dist/domain/offsetDateTime.js +60 -0
  746. package/dist/domain/pcap/pcapAnalysis.js +91 -0
  747. package/dist/domain/pcap/pcapEvidence.js +15 -0
  748. package/dist/domain/peMachine.js +36 -0
  749. package/dist/domain/pngHeader.js +18 -0
  750. package/dist/domain/process/processCaptureCoverage.js +26 -3
  751. package/dist/domain/process/processCaptureExample.js +2 -0
  752. package/dist/domain/process/processCaptureValidation.js +33 -8
  753. package/dist/domain/process/processComparison.js +41 -13
  754. package/dist/domain/process/processScenario.js +7 -0
  755. package/dist/domain/process/processTraceEvaluation.js +54 -50
  756. package/dist/domain/process/processTraceSpecification.js +243 -89
  757. package/dist/domain/propertyListKeys.js +211 -11
  758. package/dist/domain/propertyListXmlText.js +20 -4
  759. package/dist/domain/providerAdapterError.js +0 -5
  760. package/dist/domain/providerConfigurationRefusal.js +12 -0
  761. package/dist/domain/providerSelectionError.js +2 -1
  762. package/dist/domain/qlogCapture.js +62 -0
  763. package/dist/domain/rawBinary.js +96 -0
  764. package/dist/domain/reconstructionCoverage.js +5 -1
  765. package/dist/domain/reconstructionCoverageEvaluation.js +18 -15
  766. package/dist/domain/reconstructionCoverageVerifierResults.js +35 -0
  767. package/dist/domain/reconstructionObligationLedgerIntegrity.js +114 -0
  768. package/dist/domain/reconstructionObligationLedgerSchemas.js +104 -1
  769. package/dist/domain/reconstructionReadiness.js +4 -8
  770. package/dist/domain/reconstructionReadinessJourneyFindings.js +4 -1
  771. package/dist/domain/reconstructionUnknowns.js +9 -1
  772. package/dist/domain/reconstructionVerification.js +54 -25
  773. package/dist/domain/recordedTransportUrl.js +59 -0
  774. package/dist/domain/referenceSourceClassification.js +27 -23
  775. package/dist/domain/referenceSourceGraph.js +51 -13
  776. package/dist/domain/referenceSourceImportParsing.js +23 -13
  777. package/dist/domain/referenceSourcePathIdentity.js +11 -1
  778. package/dist/domain/referenceSourceRequireBindings.js +5 -12
  779. package/dist/domain/referenceSourceSummary.js +92 -0
  780. package/dist/domain/relationshipCoverage.js +44 -0
  781. package/dist/domain/residualUnknown.js +93 -26
  782. package/dist/domain/reverseEngineering.js +31 -0
  783. package/dist/domain/runtimeVersion.js +8 -0
  784. package/dist/domain/rust/rustBinary.js +200 -0
  785. package/dist/domain/signals/annotationTextWindow.js +31 -0
  786. package/dist/domain/signals/signalDecoders.js +69 -0
  787. package/dist/domain/signals/signalRecording.js +115 -0
  788. package/dist/domain/sourceMapContents.js +10 -3
  789. package/dist/domain/sourceMapEnvelope.js +17 -11
  790. package/dist/domain/sqlite/sqliteDatabase.js +188 -0
  791. package/dist/domain/staticRuntimeCorrelation.js +7 -9
  792. package/dist/domain/swiftSymbolClassification.js +17 -0
  793. package/dist/domain/symbolAnalysis.js +16 -4
  794. package/dist/domain/urlComponents.js +6 -0
  795. package/dist/domain/wasm/wasmArtifact.js +119 -0
  796. package/dist/domain/wasm/wasmInterface.js +89 -0
  797. package/dist/domain/webBundleAnalysis.js +14 -3
  798. package/dist/domain/webBundleAnalyzerAst.js +7 -2
  799. package/dist/domain/webBundleAnalyzerInspection.js +54 -38
  800. package/dist/domain/webBundleAnalyzerResult.js +18 -6
  801. package/dist/domain/webCaptureDiff.js +140 -39
  802. package/dist/domain/webCaptureFrameComparison.js +49 -0
  803. package/dist/domain/webMcpDiscovery.js +5 -2
  804. package/dist/domain/webModuleImports.js +22 -27
  805. package/dist/domain/webModuleTrace.js +3 -8
  806. package/dist/domain/webNetworkCapture.js +101 -39
  807. package/dist/domain/webNetworkCaptureCoordinates.js +21 -0
  808. package/dist/domain/webRuntime.js +0 -1
  809. package/dist/domain/webScreenshot.js +2 -2
  810. package/dist/domain/webScriptArtifacts.js +2 -4
  811. package/dist/domain/webScriptExport.js +6 -8
  812. package/dist/domain/webScriptExportPlan.js +2 -2
  813. package/dist/domain/webSourceLocation.js +20 -9
  814. package/dist/domain/zipPackageFormat.js +29 -3
  815. package/dist/dotnet/ManagedArtifactInspector.js +27 -12
  816. package/dist/dotnet/ManagedDecodeBudget.js +66 -8
  817. package/dist/dotnet/ManagedMemberInspector.js +101 -21
  818. package/dist/dotnet/ManagedMemberInspectorCore.js +356 -140
  819. package/dist/dotnet/ManagedMemberInstructionDecoder.js +109 -37
  820. package/dist/dotnet/ManagedMemberOwnership.js +65 -0
  821. package/dist/dotnet/ManagedMemberPointers.js +69 -0
  822. package/dist/dotnet/ManagedMemberRows.js +179 -46
  823. package/dist/dotnet/ManagedMetadataHeaps.js +110 -24
  824. package/dist/dotnet/ManagedMetadataInventory.js +5 -5
  825. package/dist/dotnet/ManagedMetadataInventoryRows.js +36 -52
  826. package/dist/dotnet/ManagedMetadataLayout.js +9 -1
  827. package/dist/dotnet/ManagedMetadataRowSizes.js +1 -1
  828. package/dist/dotnet/ManagedMethodBodyReader.js +29 -11
  829. package/dist/dotnet/ManagedMethodSpecs.js +78 -0
  830. package/dist/dotnet/ManagedNativeBoundaryHelpers.js +2 -2
  831. package/dist/dotnet/ManagedNativeBoundaryInspector.js +6 -13
  832. package/dist/dotnet/ManagedPeReader.js +55 -27
  833. package/dist/dotnet/ManagedReaderFailure.js +9 -0
  834. package/dist/dotnet/ManagedSnapshot.js +88 -0
  835. package/dist/dotnet/ManagedStaticProvider.js +55 -64
  836. package/dist/dotnet/ManagedTypeMemberLists.js +105 -0
  837. package/dist/dotnet/ManagedTypeNames.js +98 -0
  838. package/dist/dotnet/ManagedUserStrings.js +75 -0
  839. package/dist/electron/ElectronFusePath.js +247 -0
  840. package/dist/electron/ElectronFuseProvider.js +113 -0
  841. package/dist/electron/ElectronFuseReader.js +317 -0
  842. package/dist/evaluation/AgentEvaluationFixtures.js +194 -11
  843. package/dist/evaluation/CodexAgentEval.js +19 -40
  844. package/dist/evaluation/KnownAnswerEvaluation.js +126 -57
  845. package/dist/evm/EvmoleFailures.js +19 -14
  846. package/dist/evm/EvmoleInterfaceAdapter.js +5 -1
  847. package/dist/evm/EvmoleInterfaceProvider.js +141 -31
  848. package/dist/evm/EvmoleInterfaceWorker.js +2 -0
  849. package/dist/evm/SolidityMetadata.js +139 -0
  850. package/dist/filesystem/OwnedStagedOutput.js +138 -0
  851. package/dist/filesystem/RegularFile.js +48 -4
  852. package/dist/filesystem/readFileHandleChunks.js +17 -8
  853. package/dist/firmware/FirmwareCommand.js +2 -2
  854. package/dist/firmware/FirmwareFiles.js +8 -12
  855. package/dist/firmware/FirmwareProvider.js +2 -0
  856. package/dist/firmware/FirmwarePublication.js +218 -1
  857. package/dist/firmware/FirmwareReports.js +202 -12
  858. package/dist/flutter/DartElf.js +418 -0
  859. package/dist/flutter/ElfBuildId.js +137 -0
  860. package/dist/flutter/ElfLoadMap.js +91 -0
  861. package/dist/flutter/FlutterBuildProvider.js +826 -0
  862. package/dist/flutter/FlutterPayloadScan.js +180 -0
  863. package/dist/frida/FridaInstrumentationManager.js +1104 -0
  864. package/dist/gdb/GdbSessionManager.js +1451 -0
  865. package/dist/generatedPackageMetadata.js +2 -2
  866. package/dist/ghidra/GhidraAnalysisProfile.js +130 -12
  867. package/dist/ghidra/GhidraClient.js +195 -88
  868. package/dist/ghidra/GhidraDiagnostics.js +7 -0
  869. package/dist/ghidra/GhidraDoctor.js +15 -12
  870. package/dist/ghidra/GhidraFunctionValues.js +49 -2
  871. package/dist/ghidra/GhidraInstallation.js +215 -19
  872. package/dist/ghidra/GhidraInstallationPolicy.js +79 -29
  873. package/dist/ghidra/GhidraInventoryValues.js +30 -0
  874. package/dist/ghidra/GhidraJavaLaunch.js +91 -10
  875. package/dist/ghidra/GhidraJavaProperties.js +117 -0
  876. package/dist/ghidra/GhidraLanguageCatalog.js +74 -4
  877. package/dist/ghidra/GhidraLauncher.js +234 -57
  878. package/dist/ghidra/GhidraLoadImageAttest.js +28 -8
  879. package/dist/ghidra/GhidraLoadImageValues.js +72 -0
  880. package/dist/ghidra/GhidraMipsProfile.js +250 -14
  881. package/dist/ghidra/GhidraPeProfile.js +21 -0
  882. package/dist/ghidra/GhidraPowerPcProfile.js +51 -0
  883. package/dist/ghidra/GhidraProvider.js +54 -16
  884. package/dist/ghidra/GhidraProviderCapabilities.js +13 -12
  885. package/dist/ghidra/GhidraProviderClient.js +260 -57
  886. package/dist/ghidra/GhidraPspExtension.js +140 -0
  887. package/dist/ghidra/GhidraPspProfile.js +59 -0
  888. package/dist/ghidra/GhidraRawBinaryLanguage.js +40 -0
  889. package/dist/ghidra/GhidraRiscvProfile.js +100 -0
  890. package/dist/ghidra/GhidraSessionError.js +155 -11
  891. package/dist/ghidra/GhidraSessionValues.js +66 -0
  892. package/dist/ghidra/GhidraTransport.js +2 -1
  893. package/dist/go/GoBinaryContainer.js +140 -0
  894. package/dist/go/GoBinaryImage.js +210 -0
  895. package/dist/go/GoBinaryProvider.js +151 -0
  896. package/dist/go/GoElfImage.js +211 -0
  897. package/dist/go/GoMachoImage.js +164 -0
  898. package/dist/go/GoModuleText.js +217 -0
  899. package/dist/go/GoPeImage.js +124 -0
  900. package/dist/hopper/BridgeLauncher.js +35 -2
  901. package/dist/hopper/HopperAnalysisProfile.js +21 -11
  902. package/dist/hopper/HopperCleanup.js +15 -3
  903. package/dist/hopper/HopperClient.js +188 -36
  904. package/dist/hopper/HopperMacPublisher.js +29 -0
  905. package/dist/hopper/HopperMachOImage.js +61 -29
  906. package/dist/hopper/HopperProcessDiagnostic.js +27 -0
  907. package/dist/hopper/HopperProvider.js +59 -28
  908. package/dist/hopper/HopperProviderCapabilities.js +7 -3
  909. package/dist/hopper/HopperRequestQueue.js +17 -5
  910. package/dist/hopper/HopperSessionValues.js +10 -1
  911. package/dist/hopper/HopperTargetLease.js +66 -19
  912. package/dist/ida/IdaBusyHealth.js +44 -0
  913. package/dist/ida/IdaCallGraph.js +134 -0
  914. package/dist/ida/IdaConfiguration.js +7 -2
  915. package/dist/ida/IdaDiagnosticRedactor.js +199 -0
  916. package/dist/ida/IdaDiagnosticWriter.js +62 -0
  917. package/dist/ida/IdaDoctor.js +7 -5
  918. package/dist/ida/IdaJsonDiagnostic.js +138 -0
  919. package/dist/ida/IdaMcpConnection.js +297 -27
  920. package/dist/ida/IdaNativeProtocol.js +93 -0
  921. package/dist/ida/IdaOperationRunner.js +246 -43
  922. package/dist/ida/IdaProtocolValues.js +86 -4
  923. package/dist/ida/IdaProvider.js +29 -10
  924. package/dist/ida/IdaProviderCapabilities.js +37 -8
  925. package/dist/ida/IdaSessionClient.js +331 -54
  926. package/dist/ida/IdaWorkspace.js +54 -6
  927. package/dist/inspector/V8InspectorCaptureProjection.js +7 -2
  928. package/dist/inspector/V8InspectorEndpoint.js +15 -13
  929. package/dist/inspector/V8InspectorProvider.js +41 -7
  930. package/dist/javascript/analysis/JavaScriptAnalysisTransfer.js +19 -8
  931. package/dist/javascript/analysis/JavaScriptAnalysisWorker.js +103 -29
  932. package/dist/javascript/analysis/JavaScriptAnalysisWorkerProtocol.js +6 -4
  933. package/dist/javascript/analysis/JavaScriptAnalysisWorkerSchemas.js +78 -9
  934. package/dist/javascript/analysis/JavaScriptAnalysisWorkerServer.js +15 -5
  935. package/dist/javascript/recovery/RecoveryFiles.js +51 -6
  936. package/dist/javascript/recovery/WakaruExecution.js +19 -11
  937. package/dist/javascript/recovery/WakaruProvider.js +12 -9
  938. package/dist/javascript/recovery/WakaruPublication.js +24 -10
  939. package/dist/javascript/recovery/WakaruRelease.js +1 -1
  940. package/dist/javascript/recovery/WakaruReport.js +3 -2
  941. package/dist/javascript/sourceMaps/DecodedSourceMap.js +2 -16
  942. package/dist/javascript/sourceMaps/SourceMapCommand.js +22 -4
  943. package/dist/javascript/sourceMaps/SourceMapDecoder.js +22 -4
  944. package/dist/javascript/sourceMaps/SourceMapFormat.js +25 -38
  945. package/dist/javascript/sourceMaps/TraceSourceMap.js +34 -6
  946. package/dist/jeb/JebMcpConnection.js +19 -12
  947. package/dist/jeb/JebMcpEndpoint.js +6 -1
  948. package/dist/jeb/JebProvider.js +5 -7
  949. package/dist/logger.js +14 -1
  950. package/dist/main/shutdown.js +3 -0
  951. package/dist/main/transport.js +48 -4
  952. package/dist/main.js +14 -3
  953. package/dist/mcp/AnalysisSnapshotFiles-BAbiJQOc.js +1412 -0
  954. package/dist/mcp/ArtifactProvider-DViCU_rn.js +2183 -0
  955. package/dist/mcp/ArtifactProviderMetadata-b7pOK5_t.js +76 -0
  956. package/dist/mcp/ArtifactReader-OyM03Gjn.js +55 -0
  957. package/dist/mcp/ArtifactResourceScope-P3tq5z8Z.js +162 -0
  958. package/dist/mcp/AsarHeader-WsPgoooH.js +31 -0
  959. package/dist/mcp/BinarySessionStatus-B4P9gf-S.js +212 -0
  960. package/dist/mcp/BinaryTargetResolver-BMaE_0H1.js +1427 -0
  961. package/dist/mcp/BoundedFileBytes-DuczXiQZ.js +68 -0
  962. package/dist/mcp/CdpCaptureDocuments-HDiF2O7k.js +746 -0
  963. package/dist/mcp/CdpCaptureValues-M-j6CIh1.js +90 -0
  964. package/dist/mcp/CdpConnection-BpDfz4MK.js +570 -0
  965. package/dist/mcp/CdpOptionalCommand-BPjRD9Kz.js +120 -0
  966. package/dist/mcp/CdpTargetSession-BsPoKhEU.js +86 -0
  967. package/dist/mcp/DirectAnalysis-DrafbXke.js +409 -0
  968. package/dist/mcp/DirectAnalysisStatus-CjjeDLzW.js +44 -0
  969. package/dist/mcp/ElectronFileScope-BPG_YoyU.js +110 -0
  970. package/dist/mcp/InterfaceBuilderDecodeBudget-5F2AkxJT.js +652 -0
  971. package/dist/mcp/ManagedStaticProvider-BthZbKyZ.js +5028 -0
  972. package/dist/mcp/NativeMacOSProvider-Bh79k8dI.js +4867 -0
  973. package/dist/mcp/NativeMacOSProviderMetadata-N1lPOaY_.js +307 -0
  974. package/dist/mcp/ProcedureAddressResolution-CQpuwm1h.js +19 -0
  975. package/dist/mcp/ProcessOwnership-Bl_3ejLe.js +1502 -0
  976. package/dist/mcp/ProviderDeadline-DskQ94YD.js +932 -0
  977. package/dist/mcp/WorkflowEvidence-umWrB_wm.js +111 -0
  978. package/dist/mcp/analysisErrorCore-DXRTvF_m.js +235 -0
  979. package/dist/mcp/analysisErrorProjection-BN0EPM-3.js +892 -0
  980. package/dist/mcp/artifactOperationError-CkHMMaf7.js +27 -0
  981. package/dist/mcp/artifactToolContracts-Di4qZlEt.js +72 -0
  982. package/dist/mcp/browserObservation-C0s4i8UI.js +4468 -0
  983. package/dist/mcp/browserObservationError-CyLugqX4.js +40 -0
  984. package/dist/mcp/browserObservationSchemas-tgqjH7aA.js +573 -0
  985. package/dist/mcp/browserScenario-CAQ8Fns9.js +2929 -0
  986. package/dist/mcp/browserScenarioCapture-CTNFN-FI.js +479 -0
  987. package/dist/mcp/canonicalDigest-Bi_0_zGi.js +71 -0
  988. package/dist/mcp/digests-BFoWUT_-.js +223 -0
  989. package/dist/mcp/electronActiveObservation-lDvQTMR0.js +226 -0
  990. package/dist/mcp/electronObservation-DFOFEood.js +112 -0
  991. package/dist/mcp/electronObservation-i7LcILQ-.js +562 -0
  992. package/dist/mcp/electronScenario-nCzE6IfJ.js +653 -0
  993. package/dist/mcp/emptyArraySchema-tL6Qymyd.js +140 -0
  994. package/dist/mcp/enhancedInputs-DgdEnzHy.js +56 -0
  995. package/dist/mcp/javascriptRuntimeObservation-61NhCf7H.js +690 -0
  996. package/dist/mcp/javascriptRuntimeObservation-PIUoLfX6.js +121 -0
  997. package/dist/mcp/jsonSerialization-V-wWiFRE.js +152 -0
  998. package/dist/mcp/lipo-Bnkoq_6W.js +502 -0
  999. package/dist/mcp/localPath-AxvW9aPe.js +19 -0
  1000. package/dist/mcp/logger-BQY5ulYv.js +48 -0
  1001. package/dist/mcp/main-kBXHZ8S5.js +69390 -0
  1002. package/dist/mcp/main.js +6 -0
  1003. package/dist/mcp/managedToolContracts-CK--I_s7.js +101 -0
  1004. package/dist/mcp/nativeValueTrace-DR9UE62L.js +3439 -0
  1005. package/dist/mcp/officialToolContracts-B67NJ2tC.js +1413 -0
  1006. package/dist/mcp/pngHeader-DQ-ObyY2.js +147 -0
  1007. package/dist/mcp/propertyListKeys-DD25WsjI.js +553 -0
  1008. package/dist/mcp/providerAdapterError-sDxToNal.js +25 -0
  1009. package/dist/mcp/providerIdentities--ptAh481.js +31 -0
  1010. package/dist/mcp/providerIdentity-BCQ5n5tw.js +16 -0
  1011. package/dist/mcp/providerOperationHealth-CTYa3iLf.js +48 -0
  1012. package/dist/mcp/rolldown-runtime-BjeaiXFo.js +121 -0
  1013. package/dist/mcp/safeJson-NeGfpkrI.js +25 -0
  1014. package/dist/mcp/scanCanonical-CRXSpule.js +3982 -0
  1015. package/dist/mcp/serverIdentity-Cio4iFV3.js +1328 -0
  1016. package/dist/mcp/sourceMapEnvelope-C0uJlrOh.js +94 -0
  1017. package/dist/mcp/toolContracts-BW05wpcr.js +12200 -0
  1018. package/dist/mcp/toolOutputSchemaGroups-ColvNZ1r.js +17533 -0
  1019. package/dist/mcp/unicodeCodePointOrder-BezCbTpg.js +26 -0
  1020. package/dist/mcp/webContentArtifact-Dzjc1z-R.js +284 -0
  1021. package/dist/mcp/webRuntime-K__NYzXm.js +74 -0
  1022. package/dist/mcp/webSourceLocation-DbMAT2J9.js +11130 -0
  1023. package/dist/mcpDoctor.js +93 -70
  1024. package/dist/mcpStartupPolicy.js +3 -0
  1025. package/dist/native/AppleDispatchCoverage.js +57 -17
  1026. package/dist/native/AppleDispatchMetadata.js +6 -2
  1027. package/dist/native/AppleMachoFixups.js +188 -25
  1028. package/dist/native/AppleMachoSelection.js +30 -23
  1029. package/dist/native/AppleObjcCategories.js +1 -2
  1030. package/dist/native/AppleObjcDispatchFacets.js +76 -7
  1031. package/dist/native/CommandRunner.js +142 -32
  1032. package/dist/native/LldbCallTracer.js +5 -3
  1033. package/dist/native/MachoArchitectureSelection.js +50 -0
  1034. package/dist/native/NativeCallObservation.js +2 -1
  1035. package/dist/native/NativeMacOSProvider.js +90 -29
  1036. package/dist/native/NativeMachoInspection.js +136 -76
  1037. package/dist/native/NativeUiObservation.js +2 -2
  1038. package/dist/native/SignatureTargetBinding.js +118 -55
  1039. package/dist/native/parsers/codesign.js +27 -10
  1040. package/dist/native/parsers/demangle.js +7 -1
  1041. package/dist/native/parsers/dyldInfo.js +73 -4
  1042. package/dist/native/parsers/lipo.js +53 -19
  1043. package/dist/native/parsers/machoUuid.js +150 -0
  1044. package/dist/native/parsers/otool.js +232 -29
  1045. package/dist/native/pe/PeResourcesProvider.js +20 -6
  1046. package/dist/native/pwndbg/PwndbgCoreContext.js +20 -20
  1047. package/dist/native/pwntools/PwntoolsDecoder.js +264 -40
  1048. package/dist/native/pwntools/PwntoolsFailures.js +2 -1
  1049. package/dist/native/pwntools/PwntoolsInputLimit.js +27 -0
  1050. package/dist/native/pwntools/PwntoolsRecordedCrashProvider.js +27 -15
  1051. package/dist/native/pwntools/PwntoolsResourceLimits.js +3 -3
  1052. package/dist/native/pwntools/RecordedCrashSourceBindings.js +12 -8
  1053. package/dist/native/pwntools/RecordedCrashStructureBindings.js +3 -1
  1054. package/dist/objdump/ObjdumpCommand.js +21 -0
  1055. package/dist/pcap/PcapCommand.js +146 -0
  1056. package/dist/pcap/PcapConfiguration.js +93 -0
  1057. package/dist/pcap/PcapNativeBound.js +58 -0
  1058. package/dist/pcap/PcapOutput.js +240 -0
  1059. package/dist/pcap/PcapProvider.js +424 -0
  1060. package/dist/pcap/PcapSnapshot.js +171 -0
  1061. package/dist/process/ArtifactAnalysisResources.js +213 -0
  1062. package/dist/process/CurrentEntrypointPath.js +6 -0
  1063. package/dist/process/DarwinProcessRunTokenReader.js +117 -13
  1064. package/dist/process/ExecFileBoundedOutput.js +44 -0
  1065. package/dist/process/ExecFileOutput.js +30 -6
  1066. package/dist/process/JavaScriptWorkerMemoryLimit.js +25 -0
  1067. package/dist/process/LinuxResourceLimits.js +80 -0
  1068. package/dist/process/MacCodeSignature.js +3 -0
  1069. package/dist/process/OwnedCommand.js +37 -13
  1070. package/dist/process/PrivateRuntimeRoot.js +9 -19
  1071. package/dist/process/PrivateRuntimeRootUnavailableError.js +10 -0
  1072. package/dist/process/ProcessOwnership.js +70 -17
  1073. package/dist/process/ProcessOwnershipObservation.js +35 -4
  1074. package/dist/process/ProviderDeadline.js +58 -12
  1075. package/dist/process/ProviderProcess.js +108 -11
  1076. package/dist/process/WindowsAuthority.js +48 -39
  1077. package/dist/process/WindowsBatchCommand.js +46 -0
  1078. package/dist/process/boundedUtf8Text.js +13 -0
  1079. package/dist/process/capture/FilesystemSnapshot.js +60 -9
  1080. package/dist/process/capture/ProcessCaptureClock.js +2 -0
  1081. package/dist/process/capture/ProcessCaptureError.js +22 -3
  1082. package/dist/process/capture/ProcessCaptureJournal.js +2 -1
  1083. package/dist/process/capture/ProcessCaptureLifecycle.js +87 -36
  1084. package/dist/process/capture/ProcessCaptureProgress.js +2 -1
  1085. package/dist/process/capture/ProcessHarness.js +17 -14
  1086. package/dist/process/capture/ProcessNormalization.js +278 -36
  1087. package/dist/process/capture/ProcessSampling.js +3 -2
  1088. package/dist/process/capture/ProcessScenarioRuntimeValidation.js +13 -13
  1089. package/dist/process/capture/TerminalRenderer.js +31 -10
  1090. package/dist/process/ownedDebuggerSession.js +203 -0
  1091. package/dist/reference/ReferenceSourceReader.js +0 -1
  1092. package/dist/reference/ReferenceSourceReaderEntries.js +68 -54
  1093. package/dist/reference/ReferenceSourceReaderErrors.js +5 -1
  1094. package/dist/reference/ReferenceSourceReaderFile.js +0 -1
  1095. package/dist/reference/ReferenceSourceReaderTypes.js +1 -2
  1096. package/dist/reference/ReferenceSourceReaderValidate.js +0 -1
  1097. package/dist/rizin/RizinCommand.js +14 -0
  1098. package/dist/rizin/RizinDebugSessionManager.js +1072 -0
  1099. package/dist/rust/RustAuditableReader.js +309 -0
  1100. package/dist/rust/RustBinaryImage.js +116 -0
  1101. package/dist/rust/RustBinaryProvider.js +162 -0
  1102. package/dist/server/EvidenceMcpServer.js +160 -37
  1103. package/dist/server/admittedToolOperation.js +7 -2
  1104. package/dist/server/contractToolHandler.js +8 -1
  1105. package/dist/server/createServer.js +157 -27
  1106. package/dist/server/externalMutationAdmission.js +50 -0
  1107. package/dist/server/mcpProgress.js +4 -2
  1108. package/dist/server/promptCompletion.js +19 -6
  1109. package/dist/server/providerEnvironment.js +3 -0
  1110. package/dist/server/registerAnalysisViewTool.js +6 -2
  1111. package/dist/server/registerAndroidTools.js +22 -4
  1112. package/dist/server/registerApplicationTools/projectMobileApplicationGraph.js +8 -1
  1113. package/dist/server/registerArtifactTools.js +21 -1
  1114. package/dist/server/registerBrowserTools.js +2 -4
  1115. package/dist/server/registerBundleComparisonTool.js +4 -4
  1116. package/dist/server/registerCaptureTools.js +12 -0
  1117. package/dist/server/registerCutterTools.js +33 -0
  1118. package/dist/server/registerElectronTools.js +12 -9
  1119. package/dist/server/registerEnhancedTools.js +7 -6
  1120. package/dist/server/registerEvidenceTools.js +14 -10
  1121. package/dist/server/registerEvmTools.js +22 -4
  1122. package/dist/server/registerFlutterTools.js +17 -0
  1123. package/dist/server/registerFridaTools.js +205 -0
  1124. package/dist/server/registerFunctionComparisonTool.js +29 -9
  1125. package/dist/server/registerGdbTools.js +64 -0
  1126. package/dist/server/registerGoTools.js +9 -0
  1127. package/dist/server/registerInvestigationTools/helpers.js +2 -2
  1128. package/dist/server/registerInvestigationTools.js +12 -8
  1129. package/dist/server/registerJavaScriptRuntimeObservationTools.js +1 -5
  1130. package/dist/server/registerManagedTools.js +11 -1
  1131. package/dist/server/registerNativeTools.js +14 -0
  1132. package/dist/server/registerOfficialTools.js +5 -0
  1133. package/dist/server/registerPcapTools.js +35 -0
  1134. package/dist/server/registerProcessComparisonTool.js +9 -2
  1135. package/dist/server/registerReverseEngineeringTools.js +86 -0
  1136. package/dist/server/registerRizinDebugTools.js +53 -0
  1137. package/dist/server/registerRustTools.js +9 -0
  1138. package/dist/server/registerSessionRecordTools.js +19 -13
  1139. package/dist/server/registerSessionStatusTool.js +22 -4
  1140. package/dist/server/registerSessionTools.js +29 -16
  1141. package/dist/server/registerSignalTools.js +12 -0
  1142. package/dist/server/registerSqliteTools.js +9 -0
  1143. package/dist/server/registerWasmTools.js +46 -0
  1144. package/dist/server/registerWebNetworkCaptureTool.js +24 -10
  1145. package/dist/server/retainedSummaryDelivery.js +28 -0
  1146. package/dist/server/sessionAvailabilityPolicy.js +3 -0
  1147. package/dist/server/toolRegistrationOptions.js +8 -0
  1148. package/dist/server/toolResult.js +52 -19
  1149. package/dist/server/toolResultEncoding.js +36 -3
  1150. package/dist/serverIdentity.js +17 -8
  1151. package/dist/signals/SigrokRecordingProvider.js +339 -0
  1152. package/dist/signals/parseDecoderDiscovery.js +65 -0
  1153. package/dist/sqlite/SqliteDatabaseFailures.js +134 -0
  1154. package/dist/sqlite/SqliteDatabaseInspection.js +421 -0
  1155. package/dist/sqlite/SqliteDatabaseLimits.js +16 -0
  1156. package/dist/sqlite/SqliteDatabaseProvider.js +295 -0
  1157. package/dist/sqlite/SqliteDatabaseSnapshot.js +156 -0
  1158. package/dist/sqlite/SqliteDatabaseWorker.js +46 -0
  1159. package/dist/sqlite/SqliteDatabaseWorkerExecution.js +112 -0
  1160. package/dist/wasm/WabtArtifactProvider.js +336 -0
  1161. package/dist/wasm/WabtFailures.js +101 -0
  1162. package/dist/wasm/WabtInterface.js +309 -0
  1163. package/dist/wasm/WabtOutput.js +60 -0
  1164. package/dist/wasm/WabtRelease.js +12 -0
  1165. package/dist/wasm/WabtString.js +48 -0
  1166. package/dist/wasm/WabtWat.js +147 -0
  1167. package/dist/wasm/WasmGlueAdapter.js +53 -0
  1168. package/dist/wasm/WasmInterfaceBudget.js +11 -0
  1169. package/dist/windows/WindowsNativeLoader.js +37 -7
  1170. package/dist/windows/WindowsOwnedProcess.js +150 -17
  1171. package/dist/windows/WindowsPrivateRuntime.js +22 -1
  1172. package/install.sh +157 -98
  1173. package/licenses/Apache-2.0.txt +202 -0
  1174. package/licenses/GCC-Runtime-Library-Exception-3.1.txt +73 -0
  1175. package/licenses/GPL-3.0.txt +674 -0
  1176. package/licenses/LGPL-2.0.txt +480 -0
  1177. package/licenses/MIT-template.txt +18 -0
  1178. package/licenses/MinGW-w64-runtime.txt +240 -0
  1179. package/licenses/Node-22.19.0-LICENSE.txt +2666 -0
  1180. package/licenses/README.md +68 -0
  1181. package/licenses/cfworker-MIT.txt +21 -0
  1182. package/licenses/dotnet-runtime-MIT.txt +23 -0
  1183. package/licenses/frida-17.23.2-COPYING.txt +50 -0
  1184. package/licenses/ghidra-12.1.4-DISCLAIMER.txt +13 -0
  1185. package/licenses/ghidra-12.1.4-LICENSE.txt +201 -0
  1186. package/licenses/ghidra-12.1.4-NOTICE.txt +49 -0
  1187. package/licenses/npm-dependencies.txt +3612 -0
  1188. package/licenses/npm-runtime-notices.txt +8548 -0
  1189. package/licenses/upstream-sources.json +72 -0
  1190. package/licenses/xterm-MIT.txt +21 -0
  1191. package/native/windows/README.md +92 -11
  1192. package/native/windows/build/manifest.json +2 -2
  1193. package/native/windows/build/rea-windows-x64.node +0 -0
  1194. package/package.json +89 -22
  1195. package/scripts/electron-active-hook.cjs +4 -1
  1196. package/scripts/hopper-demo-x11.py +53 -3
  1197. package/scripts/prepack.mjs +5 -0
  1198. package/scripts/rea-android-workspace-guardian.mjs +46 -0
  1199. package/scripts/rea.mjs +28 -12
  1200. package/scripts/verify-windows-native-artifact.mjs +2 -2
  1201. package/skills/reverse-engineer-anything/SKILL.md +131 -10
  1202. package/skills/reverse-engineer-anything/references/connection-and-recovery.md +10 -10
  1203. package/skills/reverse-engineer-anything/references/evidence-workflows.md +23 -0
  1204. package/skills/reverse-engineer-anything/references/javascript-applications.md +28 -2
  1205. package/skills/reverse-engineer-anything/references/native-and-artifacts.md +125 -15
  1206. package/skills/reverse-engineer-anything/references/runtime-observation.md +57 -7
  1207. package/third_party/README.md +1 -1
  1208. package/third_party/wabt/README.md +24 -0
  1209. package/dist/browser/history/HarCaptureAdapter.js +0 -20
  1210. package/dist/cli/streamedJsonOutput.js +0 -135
  1211. /package/dist/{application/binary → process}/AbortablePromise.js +0 -0
@@ -0,0 +1,2329 @@
1
+ import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
2
+ import { absenceClaimable, analysisInputErrorFromIssues, canonicalJson, compareUnicodeCodePoints, compositeKey, digestCanonicalValue, err, init_canonicalDigest, init_canonicalOrdering, init_comparisonSemantics, init_digests, init_inputIssueProjection, init_result, init_unicodeCodePointOrder, isDigest, ok, uniqueSorted } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
3
+ import { AnalysisProtocolError, init_analysisErrorCore } from "./errorSchemas-CTRmvMl3.js";
4
+ import { createImmutableJavaScriptApplicationGraphSteps, createJavaScriptApplicationEdge, createJavaScriptApplicationGraph, createJavaScriptApplicationNode, init_javascriptApplicationGraph } from "./javascriptApplicationAnalysis-HgMzVMQw.js";
5
+ import { SOURCE_TO_BUNDLE_SIGNAL_WEIGHTS, applicationFeatureSeedSchema, applicationFeatureTraceResultSchema, applicationTraceIdentitiesSchema, applicationVersionIdentitiesSchema, compareApplicationVersionsInputSchema, compareJavaScriptExportShapesInputSchema, featureSeedMatchMode, init_javascriptApplicationVersionComparisonSchemas, init_javascriptExportShapeComparisonSchemas, init_javascriptFeatureTraceSchemas, init_sourceToBundleComparisonSchemas, javaScriptExportShapeComparisonResultSchema, javaScriptExportShapeIdentitiesSchema, ownedApplicationVersionComparisonResultSchema, projectedExportReturnShapesSchema, sourceToBundleComparisonResultSchema, traceApplicationFeatureInputSchema } from "./javascriptExportShapeComparisonSchemas-BYnoIqIk.js";
6
+ import { applicationGraphEvidenceInputError, init_JavaScriptApplicationEvidenceGraph, parseApplicationGraphEvidence, parseNativeApplicationEvidence } from "./JavaScriptApplicationEvidenceGraph-D5aI_FSJ.js";
7
+ import { createApplicationFeatureTraceEvidence, createApplicationVersionComparisonEvidence, createJavaScriptExportShapeComparisonEvidence, createSourceToBundleComparisonEvidence, init_JavaScriptApplicationWorkflowEvidence } from "./JavaScriptApplicationWorkflowEvidence-Bz4-V0Ct.js";
8
+ import { z } from "zod";
9
+ import { posix } from "node:path";
10
+ import { createHash } from "node:crypto";
11
+ import canonicalize from "canonicalize";
12
+
13
+ //#region dist/domain/javascript/javascriptApplicationChangeGraph.js
14
+ var buildJavaScriptApplicationChangeGraph, nodeCandidates, changedFromEdge, comparisonEvidence, changeGraphCoverage, sourceCoverageLimits, combineOmittedCounts, mergeNodes, uniqueEdges;
15
+ function init_javascriptApplicationChangeGraph() {
16
+ return (init_javascriptApplicationChangeGraph = __esmMin((() => {
17
+ init_javascriptApplicationGraph();
18
+ init_canonicalOrdering();
19
+ init_unicodeCodePointOrder();
20
+ buildJavaScriptApplicationChangeGraph = (input) => {
21
+ const allNodes = nodeCandidates(input);
22
+ const preferredRoots = uniqueSorted([...input.right.root_node_ids, ...input.left.root_node_ids]).filter((nodeId) => allNodes.has(nodeId));
23
+ const orderedNodeIds = uniqueSorted([...preferredRoots, ...input.items.flatMap(({ left_node_id: left, right_node_id: right }) => [...right === null ? [] : [right], ...left === null ? [] : [left]])]);
24
+ const retained = new Set(orderedNodeIds);
25
+ const mergedNodes = mergeNodes(orderedNodeIds.flatMap((nodeId) => allNodes.get(nodeId) ?? []));
26
+ const sourceEdges = uniqueEdges([...input.left.edges, ...input.right.edges]).filter(({ source_node_id: source, target_node_id: target }) => retained.has(source) && retained.has(target));
27
+ const leftById = new Map(input.left.nodes.map((node) => [node.node_id, node]));
28
+ const rightById = new Map(input.right.nodes.map((node) => [node.node_id, node]));
29
+ const comparisonEdges = input.items.flatMap((item) => changedFromEdge(item, input, retained, leftById, rightById));
30
+ const candidateEdges = uniqueEdges([...sourceEdges, ...comparisonEdges]);
31
+ const rootNodeIds = preferredRoots.filter((nodeId) => retained.has(nodeId));
32
+ const fallbackRoot = mergedNodes[0]?.node_id;
33
+ const steps = createImmutableJavaScriptApplicationGraphSteps({
34
+ schema: "JavaScriptApplicationGraph",
35
+ root_node_ids: rootNodeIds.length > 0 ? rootNodeIds : fallbackRoot === undefined ? [] : [fallbackRoot],
36
+ nodes: mergedNodes,
37
+ edges: candidateEdges,
38
+ coverage: changeGraphCoverage(input),
39
+ limitations: uniqueSorted([
40
+ ...input.left.limitations.map((value) => `Left: ${value}`),
41
+ ...input.right.limitations.map((value) => `Right: ${value}`),
42
+ "changed_from edges are cross-version inferences and never promote structural or semantic matches to exact identity.",
43
+ "The change graph contains compared entities and their retained relationships; it is not an executable application."
44
+ ])
45
+ });
46
+ let next = steps.next();
47
+ while (!next.done) next = steps.next();
48
+ return { graph: next.value };
49
+ };
50
+ nodeCandidates = (input) => {
51
+ const required = new Set([
52
+ ...input.left.root_node_ids,
53
+ ...input.right.root_node_ids,
54
+ ...input.items.flatMap(({ left_node_id: left, right_node_id: right }) => [...left === null ? [] : [left], ...right === null ? [] : [right]])
55
+ ]);
56
+ const output = new Map();
57
+ for (const node of [...input.left.nodes, ...input.right.nodes]) if (required.has(node.node_id)) output.set(node.node_id, [...output.get(node.node_id) ?? [], node]);
58
+ return output;
59
+ };
60
+ changedFromEdge = (item, input, retained, leftById, rightById) => {
61
+ const left = item.left_node_id;
62
+ const right = item.right_node_id;
63
+ if (item.match.status !== "matched" || item.status === "unchanged" || left === null || right === null || left === right || !retained.has(left) || !retained.has(right)) return [];
64
+ const evidence = comparisonEvidence(item, input, leftById.get(left), rightById.get(right));
65
+ return [createJavaScriptApplicationEdge({
66
+ source_node_id: right,
67
+ target_node_id: left,
68
+ relation: "changed_from",
69
+ properties: {
70
+ comparison_item_id: item.item_id,
71
+ status: item.status,
72
+ match_basis: item.match.basis,
73
+ match_confidence: item.match.confidence,
74
+ dimensions: item.dimensions
75
+ },
76
+ evidence
77
+ })];
78
+ };
79
+ comparisonEvidence = (item, input, left, right) => {
80
+ const source = right?.observations[0]?.evidence ?? left?.observations[0]?.evidence;
81
+ const complete = input.left.coverage.status === "complete" && input.right.coverage.status === "complete";
82
+ return {
83
+ authority: "cross-version-comparison",
84
+ state: "inferred",
85
+ confidence: item.match.confidence === "medium" ? "medium" : "high",
86
+ artifact: source?.artifact ?? {
87
+ available: false,
88
+ reason: "unresolved",
89
+ detail: "Compared node has no artifact-backed observation."
90
+ },
91
+ location: source?.location ?? {
92
+ available: false,
93
+ reason: "unresolved",
94
+ detail: "Compared node has no actionable source location."
95
+ },
96
+ extractor: {
97
+ name: "rea-application-version-comparison",
98
+ version: "1",
99
+ operation: "compare_application_versions",
100
+ executable_sha256: null
101
+ },
102
+ coverage: complete ? {
103
+ status: "complete",
104
+ truncated: false,
105
+ omitted_count: 0,
106
+ limits: sourceCoverageLimits(input)
107
+ } : {
108
+ status: "partial",
109
+ truncated: input.left.coverage.truncated || input.right.coverage.truncated,
110
+ omitted_count: combineOmittedCounts(input.left.coverage.omitted_count, input.right.coverage.omitted_count),
111
+ limits: sourceCoverageLimits(input)
112
+ },
113
+ limitations: ["Cross-version pairing is inferred from the stated match basis; changed_from does not prove runtime reachability.", ...item.limitations],
114
+ evidence_ids: [input.leftEvidenceId, input.rightEvidenceId]
115
+ };
116
+ };
117
+ changeGraphCoverage = (input) => {
118
+ if (input.left.coverage.status === "complete" && input.right.coverage.status === "complete") return {
119
+ status: "complete",
120
+ truncated: false,
121
+ omitted_count: 0,
122
+ limits: sourceCoverageLimits(input)
123
+ };
124
+ return {
125
+ status: "partial",
126
+ truncated: input.left.coverage.truncated || input.right.coverage.truncated,
127
+ omitted_count: combineOmittedCounts(input.left.coverage.omitted_count, input.right.coverage.omitted_count),
128
+ limits: sourceCoverageLimits(input)
129
+ };
130
+ };
131
+ sourceCoverageLimits = (input) => [...new Map([...input.left.coverage.limits, ...input.right.coverage.limits].map((limit) => [`${limit.name}\0${limit.value}\0${limit.unit}`, limit])).values()].sort((left, right) => compareUnicodeCodePoints(left.name, right.name));
132
+ combineOmittedCounts = (left, right) => left === null || right === null ? null : left + right;
133
+ mergeNodes = (nodes) => {
134
+ const groups = new Map();
135
+ for (const node of nodes) groups.set(node.node_id, [...groups.get(node.node_id) ?? [], node]);
136
+ const merged = [...groups.values()].map((group) => {
137
+ const first = group[0];
138
+ if (first === undefined) throw new TypeError("Empty change-graph node group");
139
+ const observations = [...new Map(group.flatMap(({ observations: values }) => values).map((observation) => [observation.observation_id, observation])).values()].sort((left, right) => compareUnicodeCodePoints(left.observation_id, right.observation_id));
140
+ return createJavaScriptApplicationNode({
141
+ kind: first.kind,
142
+ identity: first.identity,
143
+ observations: observations.map(({ observation_id: _id, identifier_strategy: _strategy, ...value }) => value)
144
+ });
145
+ });
146
+ return merged.sort((left, right) => compareUnicodeCodePoints(left.node_id, right.node_id));
147
+ };
148
+ uniqueEdges = (edges) => [...new Map(edges.map((edge) => [edge.edge_id, edge])).values()].sort((left, right) => compareUnicodeCodePoints(left.edge_id, right.edge_id));
149
+ })))();
150
+ }
151
+
152
+ //#endregion
153
+ //#region dist/domain/javascript/javascriptApplicationVersionItems.js
154
+ var classifyJavaScriptApplicationVersions, matchedItem, unmatchedItem, leftOnlyItem, rightOnlyItem, matchedMatch, unmatchedMatch, AMBIGUOUS_MATCH_LIMITATION, INCOMPLETE_GRAPH_LIMITATION, changedDimensions, contentIdentity, locations, properties, indexRelationships, relationshipSignature, edgeSignature, itemEvidenceLinks, nativeLinks, indexNativeEvidence, pairLimitations, itemWithId, stringProperty, graphsComplete;
155
+ function init_javascriptApplicationVersionItems() {
156
+ return (init_javascriptApplicationVersionItems = __esmMin((() => {
157
+ init_comparisonSemantics();
158
+ init_canonicalDigest();
159
+ init_unicodeCodePointOrder();
160
+ classifyJavaScriptApplicationVersions = (matching, context) => {
161
+ const pairByLeft = new Map(matching.pairs.map(({ left, right }) => [left.node_id, `pair:${left.node_id}:${right.node_id}`]));
162
+ const pairByRight = new Map(matching.pairs.map(({ left, right }) => [right.node_id, `pair:${left.node_id}:${right.node_id}`]));
163
+ const fullContext = {
164
+ leftGraph: context.leftGraph,
165
+ rightGraph: context.rightGraph,
166
+ leftEvidenceId: context.leftEvidenceId,
167
+ rightEvidenceId: context.rightEvidenceId,
168
+ leftNativeEvidenceByDigest: indexNativeEvidence(context.leftNativeEvidence),
169
+ rightNativeEvidenceByDigest: indexNativeEvidence(context.rightNativeEvidence),
170
+ pairByLeft,
171
+ pairByRight,
172
+ leftRelationships: indexRelationships(context.leftGraph),
173
+ rightRelationships: indexRelationships(context.rightGraph)
174
+ };
175
+ const leftItems = matching.unmatchedLeft.map((node) => {
176
+ const candidates = matching.candidatesForLeft.get(node.node_id) ?? [];
177
+ return unmatchedItem({
178
+ left: node,
179
+ candidateRightNodeIds: candidates
180
+ }, fullContext);
181
+ });
182
+ const rightItems = matching.unmatchedRight.map((node) => {
183
+ const candidates = matching.candidatesForRight.get(node.node_id) ?? [];
184
+ return unmatchedItem({
185
+ right: node,
186
+ candidateLeftNodeIds: candidates
187
+ }, fullContext);
188
+ });
189
+ return { items: [
190
+ ...matching.pairs.map((pair) => matchedItem(pair, fullContext)),
191
+ ...leftItems,
192
+ ...rightItems
193
+ ].sort((left, right) => compareUnicodeCodePoints(left.item_id, right.item_id)) };
194
+ };
195
+ matchedItem = (pair, context) => {
196
+ const dimensions = changedDimensions(pair, context);
197
+ const complete = graphsComplete(context);
198
+ const observedChange = dimensions.some((dimension) => [
199
+ "content",
200
+ "location",
201
+ "properties"
202
+ ].includes(dimension));
203
+ const status = observedChange || complete && dimensions.length > 0 ? "changed" : complete ? "unchanged" : "unknown";
204
+ const finalDimensions = status === "unknown" && !dimensions.includes("coverage") ? [...dimensions, "coverage"] : dimensions;
205
+ const semantic = {
206
+ status,
207
+ node_kind: pair.left.kind,
208
+ left_node_id: pair.left.node_id,
209
+ right_node_id: pair.right.node_id,
210
+ match: matchedMatch(pair),
211
+ dimensions: finalDimensions,
212
+ evidence_links: itemEvidenceLinks(pair.left, pair.right, context),
213
+ limitations: pairLimitations(pair, status)
214
+ };
215
+ return itemWithId(semantic);
216
+ };
217
+ unmatchedItem = (member, context) => member.left === undefined ? rightOnlyItem(member.right, member.candidateLeftNodeIds, context) : leftOnlyItem(member.left, member.candidateRightNodeIds, context);
218
+ leftOnlyItem = (node, candidateNodeIds, context) => {
219
+ const [firstCandidate, ...remainingCandidates] = candidateNodeIds;
220
+ const common = {
221
+ node_kind: node.kind,
222
+ evidence_links: itemEvidenceLinks(node, undefined, context)
223
+ };
224
+ if (firstCandidate !== undefined) return itemWithId({
225
+ ...common,
226
+ status: "unknown",
227
+ left_node_id: node.node_id,
228
+ right_node_id: null,
229
+ match: {
230
+ status: "ambiguous",
231
+ basis: "none",
232
+ confidence: "unknown",
233
+ candidate_left_node_ids: [],
234
+ candidate_right_node_ids: [firstCandidate, ...remainingCandidates]
235
+ },
236
+ dimensions: ["availability"],
237
+ limitations: [AMBIGUOUS_MATCH_LIMITATION]
238
+ });
239
+ const absenceObserved = absenceClaimable(context.rightGraph.coverage);
240
+ return itemWithId({
241
+ ...common,
242
+ status: absenceObserved ? "removed" : "unknown",
243
+ left_node_id: node.node_id,
244
+ right_node_id: null,
245
+ match: unmatchedMatch(),
246
+ dimensions: absenceObserved ? ["availability"] : ["availability", "coverage"],
247
+ limitations: absenceObserved ? [] : [INCOMPLETE_GRAPH_LIMITATION]
248
+ });
249
+ };
250
+ rightOnlyItem = (node, candidateNodeIds, context) => {
251
+ const [firstCandidate, ...remainingCandidates] = candidateNodeIds;
252
+ const common = {
253
+ node_kind: node.kind,
254
+ evidence_links: itemEvidenceLinks(undefined, node, context)
255
+ };
256
+ if (firstCandidate !== undefined) return itemWithId({
257
+ ...common,
258
+ status: "unknown",
259
+ left_node_id: null,
260
+ right_node_id: node.node_id,
261
+ match: {
262
+ status: "ambiguous",
263
+ basis: "none",
264
+ confidence: "unknown",
265
+ candidate_left_node_ids: [firstCandidate, ...remainingCandidates],
266
+ candidate_right_node_ids: []
267
+ },
268
+ dimensions: ["availability"],
269
+ limitations: [AMBIGUOUS_MATCH_LIMITATION]
270
+ });
271
+ const absenceObserved = absenceClaimable(context.leftGraph.coverage);
272
+ return itemWithId({
273
+ ...common,
274
+ status: absenceObserved ? "added" : "unknown",
275
+ left_node_id: null,
276
+ right_node_id: node.node_id,
277
+ match: unmatchedMatch(),
278
+ dimensions: absenceObserved ? ["availability"] : ["availability", "coverage"],
279
+ limitations: absenceObserved ? [] : [INCOMPLETE_GRAPH_LIMITATION]
280
+ });
281
+ };
282
+ matchedMatch = (pair) => {
283
+ const candidates = {
284
+ candidate_left_node_ids: [],
285
+ candidate_right_node_ids: []
286
+ };
287
+ switch (pair.basis) {
288
+ case "exact-node-identity":
289
+ case "exact-content-digest":
290
+ case "exact-module-source-digest": return {
291
+ status: "matched",
292
+ basis: pair.basis,
293
+ confidence: "exact",
294
+ ...candidates
295
+ };
296
+ case "source-map-identity": return {
297
+ status: "matched",
298
+ basis: pair.basis,
299
+ confidence: "high",
300
+ ...candidates
301
+ };
302
+ case "structural-fingerprint":
303
+ case "semantic-key": return {
304
+ status: "matched",
305
+ basis: pair.basis,
306
+ confidence: "medium",
307
+ ...candidates
308
+ };
309
+ }
310
+ };
311
+ unmatchedMatch = () => ({
312
+ status: "unmatched",
313
+ basis: "none",
314
+ confidence: "unknown",
315
+ candidate_left_node_ids: [],
316
+ candidate_right_node_ids: []
317
+ });
318
+ AMBIGUOUS_MATCH_LIMITATION = "Multiple nodes share the same permitted match key; no cross-version pair was selected.";
319
+ INCOMPLETE_GRAPH_LIMITATION = "The opposite graph is incomplete, so an unmatched node cannot be classified as added or removed.";
320
+ changedDimensions = (pair, context) => {
321
+ const dimensions = [];
322
+ const leftContent = contentIdentity(pair.left);
323
+ const rightContent = contentIdentity(pair.right);
324
+ if (leftContent !== null && rightContent !== null && leftContent !== rightContent) dimensions.push("content");
325
+ if (canonicalJson(locations(pair.left)) !== canonicalJson(locations(pair.right))) dimensions.push("location");
326
+ if (canonicalJson(properties(pair.left)) !== canonicalJson(properties(pair.right))) dimensions.push("properties");
327
+ if (relationshipSignature(pair.left, "left", context) !== relationshipSignature(pair.right, "right", context)) dimensions.push("relationships");
328
+ return dimensions;
329
+ };
330
+ contentIdentity = (node) => {
331
+ if (node.identity.strategy === "content-digest") return `content:${node.identity.sha256}`;
332
+ if (node.kind === "javascript-module") return stringProperty(node, "source_sha256");
333
+ if (node.kind === "source-module" && node.identity.strategy === "source-map-original") return node.identity.source_sha256;
334
+ return null;
335
+ };
336
+ locations = (node) => node.observations.map(({ evidence }) => evidence.location.available ? evidence.location.value : evidence.location).sort((left, right) => compareUnicodeCodePoints(canonicalJson(left), canonicalJson(right)));
337
+ properties = (node) => node.observations.map(({ label, properties: values, source_map_reference }) => ({
338
+ label,
339
+ properties: values,
340
+ source_map_reference
341
+ })).sort((left, right) => compareUnicodeCodePoints(canonicalJson(left), canonicalJson(right)));
342
+ indexRelationships = (graph) => {
343
+ const adjacency = new Map();
344
+ const add = (nodeId, relationship) => {
345
+ const existing = adjacency.get(nodeId);
346
+ if (existing === undefined) adjacency.set(nodeId, [relationship]);
347
+ else existing.push(relationship);
348
+ };
349
+ for (const edge of graph.edges) {
350
+ add(edge.source_node_id, {
351
+ direction: "out",
352
+ relation: edge.relation,
353
+ neighborId: edge.target_node_id
354
+ });
355
+ if (edge.target_node_id !== edge.source_node_id) add(edge.target_node_id, {
356
+ direction: "in",
357
+ relation: edge.relation,
358
+ neighborId: edge.source_node_id
359
+ });
360
+ }
361
+ return {
362
+ nodeById: new Map(graph.nodes.map((value) => [value.node_id, value])),
363
+ adjacency
364
+ };
365
+ };
366
+ relationshipSignature = (node, side, context) => {
367
+ const { nodeById, adjacency } = side === "left" ? context.leftRelationships : context.rightRelationships;
368
+ const paired = side === "left" ? context.pairByLeft : context.pairByRight;
369
+ const signatures = (adjacency.get(node.node_id) ?? []).map((relationship) => edgeSignature({
370
+ ...relationship,
371
+ paired,
372
+ nodeById
373
+ }));
374
+ return canonicalJson(signatures.sort(compareUnicodeCodePoints));
375
+ };
376
+ edgeSignature = (context) => {
377
+ const mapped = context.paired.get(context.neighborId);
378
+ const neighbor = context.nodeById.get(context.neighborId);
379
+ return `${context.direction}\0${context.relation}\0${mapped ?? `unmatched:${neighbor?.kind ?? "unknown"}`}`;
380
+ };
381
+ itemEvidenceLinks = (left, right, context) => [...new Set([
382
+ context.leftEvidenceId,
383
+ context.rightEvidenceId,
384
+ ...nativeLinks(left, context.leftNativeEvidenceByDigest),
385
+ ...nativeLinks(right, context.rightNativeEvidenceByDigest)
386
+ ])].sort(compareUnicodeCodePoints);
387
+ nativeLinks = (node, evidenceByDigest) => {
388
+ const identity = node === undefined ? null : contentIdentity(node);
389
+ if (identity === null) return [];
390
+ const digest = identity.replace(/^content:/u, "");
391
+ return evidenceByDigest.get(digest) ?? [];
392
+ };
393
+ indexNativeEvidence = (evidence) => {
394
+ const evidenceByDigest = new Map();
395
+ for (const { evidence_id: id, subject } of evidence) {
396
+ const digest = subject?.digest.sha256;
397
+ if (digest === undefined) continue;
398
+ const ids = evidenceByDigest.get(digest);
399
+ if (ids === undefined) evidenceByDigest.set(digest, [id]);
400
+ else ids.push(id);
401
+ }
402
+ return evidenceByDigest;
403
+ };
404
+ pairLimitations = (pair, status) => [
405
+ ...pair.basis === "structural-fingerprint" ? ["Structural fingerprint equality is rename-resistant inference; it is not byte identity or proof of semantic equivalence."] : [],
406
+ ...pair.basis === "source-map-identity" ? ["Source-map original names identify a candidate source lineage; changed or unavailable source content remains explicit."] : [],
407
+ ...pair.basis === "semantic-key" ? ["Semantic-key pairing is a deterministic inference and is never promoted to exact identity."] : [],
408
+ ...status === "unknown" ? ["Incomplete graph coverage prevents a complete node-level conclusion."] : []
409
+ ];
410
+ itemWithId = (semantic) => ({
411
+ ...semantic,
412
+ item_id: `javc_item_${digestCanonicalValue(semantic, "Application version item")}`
413
+ });
414
+ stringProperty = (node, key) => {
415
+ const values = [...new Set(node.observations.map(({ properties: values }) => values[key]).filter((value) => typeof value === "string"))];
416
+ return values.length === 1 ? values[0] ?? null : null;
417
+ };
418
+ graphsComplete = (context) => absenceClaimable(context.leftGraph.coverage) && absenceClaimable(context.rightGraph.coverage);
419
+ })))();
420
+ }
421
+
422
+ //#endregion
423
+ //#region dist/domain/javascript/javascriptApplicationVersionKeys.js
424
+ var matchTiers, matchJavaScriptApplicationVersions, applyTier, nodesByKey, recordCandidates, sortedCandidates, nodeIdentityKey, contentDigestKey, moduleSourceDigestKey, sourceMapKey, structuralFingerprintKey, semanticKey, semanticValue, canonicalPath, firstProperties, firstLabel, uniqueStringProperty, joined, nonEmptyString, exactString, stringList, sortedNodes;
425
+ function init_javascriptApplicationVersionKeys() {
426
+ return (init_javascriptApplicationVersionKeys = __esmMin((() => {
427
+ init_comparisonSemantics();
428
+ init_unicodeCodePointOrder();
429
+ matchTiers = () => [
430
+ {
431
+ match: {
432
+ basis: "exact-content-digest",
433
+ confidence: "exact"
434
+ },
435
+ key: contentDigestKey
436
+ },
437
+ {
438
+ match: {
439
+ basis: "exact-module-source-digest",
440
+ confidence: "exact"
441
+ },
442
+ key: moduleSourceDigestKey
443
+ },
444
+ {
445
+ match: {
446
+ basis: "exact-node-identity",
447
+ confidence: "exact"
448
+ },
449
+ key: nodeIdentityKey
450
+ },
451
+ {
452
+ match: {
453
+ basis: "source-map-identity",
454
+ confidence: "high"
455
+ },
456
+ key: sourceMapKey
457
+ },
458
+ {
459
+ match: {
460
+ basis: "structural-fingerprint",
461
+ confidence: "medium"
462
+ },
463
+ key: structuralFingerprintKey
464
+ },
465
+ {
466
+ match: {
467
+ basis: "semantic-key",
468
+ confidence: "medium"
469
+ },
470
+ key: semanticKey
471
+ }
472
+ ];
473
+ matchJavaScriptApplicationVersions = (leftNodes, rightNodes) => {
474
+ const left = new Map(leftNodes.map((node) => [node.node_id, node]));
475
+ const right = new Map(rightNodes.map((node) => [node.node_id, node]));
476
+ const pairs = [];
477
+ const ambiguousGroups = [];
478
+ for (const tier of matchTiers()) applyTier({
479
+ left,
480
+ right,
481
+ pairs,
482
+ ambiguousGroups,
483
+ tier
484
+ });
485
+ const remainingLeft = sortedNodes(left.values());
486
+ const remainingRight = sortedNodes(right.values());
487
+ const leftCandidates = new Map();
488
+ const rightCandidates = new Map();
489
+ for (const group of ambiguousGroups) {
490
+ const leftGroup = group.left.filter((node) => left.has(node.node_id));
491
+ if (leftGroup.length === 0) continue;
492
+ const rightGroup = group.right.filter((node) => right.has(node.node_id));
493
+ if (rightGroup.length === 0) continue;
494
+ recordCandidates(leftGroup, rightGroup, leftCandidates, rightCandidates);
495
+ }
496
+ return {
497
+ pairs: pairs.sort((a, b) => compareUnicodeCodePoints(`${a.left.node_id}\0${a.right.node_id}`, `${b.left.node_id}\0${b.right.node_id}`)),
498
+ unmatchedLeft: remainingLeft,
499
+ unmatchedRight: remainingRight,
500
+ candidatesForLeft: sortedCandidates(leftCandidates),
501
+ candidatesForRight: sortedCandidates(rightCandidates)
502
+ };
503
+ };
504
+ applyTier = (context) => {
505
+ const leftByKey = nodesByKey(context.left.values(), context.tier.key);
506
+ const rightByKey = nodesByKey(context.right.values(), context.tier.key);
507
+ for (const key of [...leftByKey.keys()].sort(compareUnicodeCodePoints)) {
508
+ const leftGroup = leftByKey.get(key) ?? [];
509
+ const rightGroup = rightByKey.get(key);
510
+ if (rightGroup === undefined) continue;
511
+ if (leftGroup.length !== 1 || rightGroup.length !== 1) {
512
+ context.ambiguousGroups.push({
513
+ left: leftGroup,
514
+ right: rightGroup
515
+ });
516
+ continue;
517
+ }
518
+ const leftNode = leftGroup[0];
519
+ const rightNode = rightGroup[0];
520
+ if (leftNode === undefined || rightNode === undefined) continue;
521
+ context.pairs.push({
522
+ left: leftNode,
523
+ right: rightNode,
524
+ ...context.tier.match
525
+ });
526
+ context.left.delete(leftNode.node_id);
527
+ context.right.delete(rightNode.node_id);
528
+ }
529
+ };
530
+ nodesByKey = (nodes, keyFor) => {
531
+ const output = new Map();
532
+ for (const node of nodes) {
533
+ const key = keyFor(node);
534
+ if (key === null) continue;
535
+ const group = output.get(key);
536
+ if (group === undefined) output.set(key, [node]);
537
+ else group.push(node);
538
+ }
539
+ return output;
540
+ };
541
+ recordCandidates = (left, right, leftCandidates, rightCandidates) => {
542
+ for (const leftNode of left) {
543
+ const candidates = leftCandidates.get(leftNode.node_id) ?? new Set();
544
+ for (const rightNode of right) candidates.add(rightNode.node_id);
545
+ leftCandidates.set(leftNode.node_id, candidates);
546
+ }
547
+ for (const rightNode of right) {
548
+ const candidates = rightCandidates.get(rightNode.node_id) ?? new Set();
549
+ for (const leftNode of left) candidates.add(leftNode.node_id);
550
+ rightCandidates.set(rightNode.node_id, candidates);
551
+ }
552
+ };
553
+ sortedCandidates = (candidates) => new Map([...candidates.entries()].map(([nodeId, values]) => [nodeId, [...values].sort(compareUnicodeCodePoints)]));
554
+ nodeIdentityKey = (node) => `node\0${node.kind}\0${node.node_id}`;
555
+ contentDigestKey = (node) => node.identity.strategy === "content-digest" ? `content\0${node.kind}\0${node.identity.sha256}` : null;
556
+ moduleSourceDigestKey = (node) => {
557
+ if (node.kind !== "javascript-module") return null;
558
+ const value = uniqueStringProperty(node, "source_sha256");
559
+ return value === null ? null : `module-source\0${node.kind}\0${value}`;
560
+ };
561
+ sourceMapKey = (node) => node.kind === "source-module" && node.identity.strategy === "source-map-original" ? `source-map\0${canonicalJson([node.identity.source_root, node.identity.original_source])}` : null;
562
+ structuralFingerprintKey = (node) => {
563
+ if (node.kind !== "javascript-module") return null;
564
+ const digest = uniqueStringProperty(node, "structural_fingerprint_sha256");
565
+ const algorithm = uniqueStringProperty(node, "structural_fingerprint_algorithm");
566
+ return digest === null || algorithm === null ? null : `structural\0${node.kind}\0${algorithm}\0${digest}`;
567
+ };
568
+ semanticKey = (node) => {
569
+ if ([
570
+ "javascript-module",
571
+ "javascript-chunk",
572
+ "runtime-script-instance",
573
+ "unknown"
574
+ ].includes(node.kind)) return null;
575
+ const properties = firstProperties(node);
576
+ const value = semanticValue(node, properties);
577
+ return value === null ? null : `semantic\0${node.kind}\0${value}`;
578
+ };
579
+ semanticValue = (node, properties) => {
580
+ if (node.kind === "endpoint") {
581
+ const kind = nonEmptyString(properties.endpoint_kind);
582
+ const value = exactString(properties.value);
583
+ return kind === null || value === null ? null : `${kind}\0${value}`;
584
+ }
585
+ if (node.kind === "storage") return joined(properties.storage_kind, properties.name ?? properties.mechanism);
586
+ if (node.kind === "ipc-channel") return properties.resolution === "dynamic" ? null : exactString(properties.channel) ?? firstLabel(node);
587
+ if (node.kind === "context-bridge-api") return firstLabel(node) ?? exactString(properties.api_key) ?? nonEmptyString(properties.api_name);
588
+ if (node.kind === "native-export") return joined(properties.specifier, compositeKey([
589
+ stringList(properties.requested_members),
590
+ typeof properties.namespace_access === "boolean" ? properties.namespace_access : null,
591
+ typeof properties.dynamic_member_access === "boolean" ? properties.dynamic_member_access : null
592
+ ])) ?? firstLabel(node);
593
+ if ([
594
+ "electron-main",
595
+ "electron-preload",
596
+ "electron-renderer",
597
+ "electron-utility"
598
+ ].includes(node.kind)) return joined(properties.declared_path, properties.resolved_path);
599
+ if (node.kind === "package") return nonEmptyString(properties.name);
600
+ return canonicalPath(node) ?? nonEmptyString(properties.path);
601
+ };
602
+ canonicalPath = (node) => node.identity.strategy === "canonical-path" ? node.identity.path : null;
603
+ firstProperties = (node) => node.observations[0]?.properties ?? {};
604
+ firstLabel = (node) => node.observations.find(({ label }) => label !== null)?.label ?? null;
605
+ uniqueStringProperty = (node, name) => {
606
+ const values = [...new Set(node.observations.map(({ properties }) => properties[name]).filter((value) => typeof value === "string"))];
607
+ return values.length === 1 ? values[0] ?? null : null;
608
+ };
609
+ joined = (...values) => {
610
+ const strings = values.map(nonEmptyString);
611
+ return strings.some((value) => value === null) ? null : compositeKey(strings);
612
+ };
613
+ nonEmptyString = (value) => typeof value === "string" && value !== "" ? value : null;
614
+ exactString = (value) => typeof value === "string" ? value : null;
615
+ stringList = (value) => Array.isArray(value) ? value.filter((item) => typeof item === "string").sort(compareUnicodeCodePoints) : [];
616
+ sortedNodes = (nodes) => [...nodes].sort((left, right) => compareUnicodeCodePoints(left.node_id, right.node_id));
617
+ })))();
618
+ }
619
+
620
+ //#endregion
621
+ //#region dist/domain/javascript/javascriptApplicationVersionComparison.js
622
+ var compareJavaScriptApplicationVersions, summary, countStatus$2, matchingSummary, countBasis, comparisonCoverage$2, comparisonLimitations$2;
623
+ function init_javascriptApplicationVersionComparison() {
624
+ return (init_javascriptApplicationVersionComparison = __esmMin((() => {
625
+ init_canonicalDigest();
626
+ init_canonicalOrdering();
627
+ init_javascriptApplicationChangeGraph();
628
+ init_javascriptApplicationVersionComparisonSchemas();
629
+ init_javascriptApplicationVersionItems();
630
+ init_javascriptApplicationVersionKeys();
631
+ compareJavaScriptApplicationVersions = (input) => {
632
+ const matching = matchJavaScriptApplicationVersions(input.left.graph.nodes, input.right.graph.nodes);
633
+ const projection = classifyJavaScriptApplicationVersions(matching, {
634
+ leftGraph: input.left.graph,
635
+ rightGraph: input.right.graph,
636
+ leftEvidenceId: input.left.evidenceId,
637
+ rightEvidenceId: input.right.evidenceId,
638
+ leftNativeEvidence: input.leftNativeEvidence,
639
+ rightNativeEvidence: input.rightNativeEvidence
640
+ });
641
+ const changeGraph = buildJavaScriptApplicationChangeGraph({
642
+ left: input.left.graph,
643
+ right: input.right.graph,
644
+ leftEvidenceId: input.left.evidenceId,
645
+ rightEvidenceId: input.right.evidenceId,
646
+ items: projection.items
647
+ });
648
+ const evidenceLinks = uniqueSorted(projection.items.flatMap(({ evidence_links: links }) => links));
649
+ const omissions = {
650
+ left_graph_omitted_count: input.left.graph.coverage.omitted_count,
651
+ right_graph_omitted_count: input.right.graph.coverage.omitted_count
652
+ };
653
+ const coverage = comparisonCoverage$2(input, omissions);
654
+ const semantic = {
655
+ left: {
656
+ evidence_id: input.left.evidenceId,
657
+ graph_id: input.left.graph.graph_id,
658
+ root_artifact_sha256: input.left.rootArtifactSha256
659
+ },
660
+ right: {
661
+ evidence_id: input.right.evidenceId,
662
+ graph_id: input.right.graph.graph_id,
663
+ root_artifact_sha256: input.right.rootArtifactSha256
664
+ },
665
+ summary: summary(projection.items),
666
+ matching: matchingSummary(projection.items),
667
+ items: projection.items,
668
+ graph: changeGraph.graph,
669
+ coverage,
670
+ evidence_links: evidenceLinks,
671
+ limitations: comparisonLimitations$2(input)
672
+ };
673
+ return ownedApplicationVersionComparisonResultSchema.parse({
674
+ ...semantic,
675
+ comparison_id: `javc_${digestCanonicalValue(semantic, "Application version comparison")}`
676
+ });
677
+ };
678
+ summary = (items) => ({
679
+ unchanged: countStatus$2(items, "unchanged"),
680
+ added: countStatus$2(items, "added"),
681
+ removed: countStatus$2(items, "removed"),
682
+ changed: countStatus$2(items, "changed"),
683
+ unknown: countStatus$2(items, "unknown")
684
+ });
685
+ countStatus$2 = (items, status) => items.filter((item) => item.status === status).length;
686
+ matchingSummary = (items) => ({
687
+ exact_node_identity: countBasis(items, "exact-node-identity"),
688
+ exact_content_digest: countBasis(items, "exact-content-digest"),
689
+ exact_module_source_digest: countBasis(items, "exact-module-source-digest"),
690
+ source_map_identity: countBasis(items, "source-map-identity"),
691
+ structural_fingerprint: countBasis(items, "structural-fingerprint"),
692
+ semantic_key: countBasis(items, "semantic-key"),
693
+ ambiguous: items.filter(({ match }) => match.status === "ambiguous").length,
694
+ unmatched: items.filter(({ match }) => match.status === "unmatched").length
695
+ });
696
+ countBasis = (items, basis) => items.filter(({ match }) => match.basis === basis).length;
697
+ comparisonCoverage$2 = (input, omissions) => {
698
+ const context = {
699
+ left_graph_status: input.left.graph.coverage.status,
700
+ right_graph_status: input.right.graph.coverage.status
701
+ };
702
+ const sourceGraphsComplete = input.left.graph.coverage.status === "complete" && input.right.graph.coverage.status === "complete";
703
+ const sourceGraphsTruncated = input.left.graph.coverage.truncated || input.right.graph.coverage.truncated;
704
+ return {
705
+ ...context,
706
+ ...omissions,
707
+ status: sourceGraphsComplete ? "complete-within-inputs" : sourceGraphsTruncated ? "truncated" : "partial"
708
+ };
709
+ };
710
+ comparisonLimitations$2 = (input) => uniqueSorted([
711
+ "Application comparison never uses bundler module ordinals as persistent identity and performs no fuzzy pairing.",
712
+ "Exact digest equality proves byte identity only; source-map, structural-fingerprint, and semantic-key matches retain inferred confidence.",
713
+ "Minified names and chunk locations are not assumed stable across versions.",
714
+ "The comparison reads retained graphs and Evidence only; it does not execute either application.",
715
+ "Native Evidence is linked only by exact subject digest; provider snapshot reuse remains target/provider/profile exact.",
716
+ ...input.left.graph.coverage.status === "complete" && input.right.graph.coverage.status === "complete" ? [] : ["At least one source graph is incomplete; unmatched entities on the opposite side remain unknown rather than added or removed."]
717
+ ]);
718
+ })))();
719
+ }
720
+
721
+ //#endregion
722
+ //#region dist/domain/javascript/javascriptExportShapeComparisonIdentity.js
723
+ var canonicalExportShapeValue, digestExportShapeValue;
724
+ function init_javascriptExportShapeComparisonIdentity() {
725
+ return (init_javascriptExportShapeComparisonIdentity = __esmMin((() => {
726
+ canonicalExportShapeValue = (value) => {
727
+ const encoded = canonicalize(value);
728
+ if (encoded === undefined) throw new TypeError("JavaScript export shape comparison could not canonicalize data");
729
+ return encoded;
730
+ };
731
+ digestExportShapeValue = (value) => createHash("sha256").update(canonicalExportShapeValue(value)).digest("hex");
732
+ })))();
733
+ }
734
+
735
+ //#endregion
736
+ //#region dist/domain/javascript/javascriptExportShapeSelection.js
737
+ var selectJavaScriptExport, retainJavaScriptExportShapes, selectorBase, unresolvedSelection, exportCandidates, candidateKey, returnShapeFor, unavailableReturnShape;
738
+ function init_javascriptExportShapeSelection() {
739
+ return (init_javascriptExportShapeSelection = __esmMin((() => {
740
+ init_javascriptExportShapeComparisonSchemas();
741
+ init_unicodeCodePointOrder();
742
+ selectJavaScriptExport = (side) => {
743
+ const candidates = exportCandidates(side.graph);
744
+ const exact = candidates.filter(({ modulePath, exportName }) => modulePath === side.modulePath && exportName === side.exportName);
745
+ const matchingOneSelector = candidates.filter(({ modulePath, exportName }) => modulePath === side.modulePath || exportName === side.exportName);
746
+ const diagnosticPool = exact.length > 0 ? exact : matchingOneSelector.length > 0 ? matchingOneSelector : candidates;
747
+ const base = selectorBase(side, diagnosticPool);
748
+ if (exact.length === 0) return unresolvedSelection(base, {
749
+ status: "missing",
750
+ selected_node_id: null
751
+ }, [`No exact export binding matched ${side.modulePath}:${side.exportName}.`]);
752
+ if (exact.length > 1) return unresolvedSelection(base, {
753
+ status: "ambiguous",
754
+ selected_node_id: null
755
+ }, [`Multiple exact export bindings matched ${side.modulePath}:${side.exportName}; none was selected.`]);
756
+ const selected = exact[0];
757
+ if (selected === undefined || !selected.trusted) return unresolvedSelection(base, {
758
+ status: "unavailable",
759
+ selected_node_id: selected?.node.node_id ?? null
760
+ }, ["The exact export binding lacks the expected static-analysis authority."]);
761
+ const returnShape = returnShapeFor(selected.node, side);
762
+ if (returnShape.projection === null) return unresolvedSelection(base, {
763
+ status: "unavailable",
764
+ selected_node_id: selected.node.node_id
765
+ }, [returnShape.reason]);
766
+ return {
767
+ selection: {
768
+ ...base,
769
+ status: "selected",
770
+ selected_node_id: selected.node.node_id
771
+ },
772
+ projection: returnShape.projection,
773
+ observationComplete: returnShape.observationComplete,
774
+ limitations: []
775
+ };
776
+ };
777
+ retainJavaScriptExportShapes = (selection) => ({
778
+ shapes: selection.projection?.static_return_shapes ?? [],
779
+ omitted: 0
780
+ });
781
+ selectorBase = (side, candidates) => ({
782
+ evidence_id: side.evidenceId,
783
+ graph_id: side.graph.graph_id,
784
+ requested_module_path: side.modulePath,
785
+ requested_export_name: side.exportName,
786
+ candidates: candidates.map((candidate) => ({
787
+ node_id: candidate.node.node_id,
788
+ module_path: candidate.modulePath,
789
+ export_name: candidate.exportName,
790
+ matches_requested_module: candidate.modulePath === side.modulePath,
791
+ matches_requested_export: candidate.exportName === side.exportName
792
+ })),
793
+ omitted_candidates: 0
794
+ });
795
+ unresolvedSelection = (base, resolution, limitations) => ({
796
+ selection: {
797
+ ...base,
798
+ ...resolution
799
+ },
800
+ projection: null,
801
+ observationComplete: false,
802
+ limitations
803
+ });
804
+ exportCandidates = (graph) => {
805
+ const candidates = new Map();
806
+ for (const node of graph.nodes) {
807
+ for (const observation of node.observations) {
808
+ const properties = observation.properties;
809
+ if (properties.semantic_role !== "export-binding") continue;
810
+ const modulePath = properties.module_path;
811
+ const exportName = properties.exported_name;
812
+ if (typeof modulePath !== "string" || typeof exportName !== "string") continue;
813
+ const key = `${node.node_id}\0${modulePath}\0${exportName}`;
814
+ const trusted = observation.evidence.authority === "ast-static-analysis" && observation.evidence.state === "observed" && observation.evidence.extractor.operation === "recover-module-export";
815
+ const existing = candidates.get(key);
816
+ candidates.set(key, {
817
+ node,
818
+ modulePath,
819
+ exportName,
820
+ trusted: trusted || existing?.trusted === true
821
+ });
822
+ }
823
+ }
824
+ return [...candidates.values()].sort((left, right) => compareUnicodeCodePoints(candidateKey(left), candidateKey(right)));
825
+ };
826
+ candidateKey = (candidate) => `${candidate.modulePath}\0${candidate.exportName}\0${candidate.node.node_id}`;
827
+ returnShapeFor = (node, side) => {
828
+ const roleObservations = node.observations.filter(({ properties }) => properties.semantic_role === "export-return-shapes");
829
+ const parsed = roleObservations.map((observation) => ({
830
+ observation,
831
+ result: projectedExportReturnShapesSchema.safeParse(observation.properties)
832
+ }));
833
+ if (parsed.some(({ result }) => !result.success)) return unavailableReturnShape("The export return-shape observation is malformed.");
834
+ const matching = parsed.filter(({ result }) => result.success && result.data.module_path === side.modulePath && result.data.exported_name === side.exportName);
835
+ if (matching.length !== 1) return unavailableReturnShape(matching.length === 0 ? "No exact static return-shape observation is available for the selected export." : "Multiple static return-shape observations matched the selected export.");
836
+ const selected = matching[0];
837
+ if (selected === undefined || !selected.result.success) return unavailableReturnShape("The selected return-shape observation could not be parsed.");
838
+ const { observation } = selected;
839
+ const trusted = observation.evidence.authority === "static-relationship-inference" && observation.evidence.state === "inferred" && observation.evidence.extractor.operation === "recover-export-return-shapes";
840
+ if (!trusted) return unavailableReturnShape("The return-shape observation lacks the expected static-inference authority.");
841
+ return {
842
+ projection: selected.result.data,
843
+ observationComplete: observation.evidence.coverage.status === "complete" && !observation.evidence.coverage.truncated
844
+ };
845
+ };
846
+ unavailableReturnShape = (reason) => ({
847
+ projection: null,
848
+ observationComplete: false,
849
+ reason
850
+ });
851
+ })))();
852
+ }
853
+
854
+ //#endregion
855
+ //#region dist/domain/javascript/javascriptExportShapeVariants.js
856
+ var UNKNOWN_COVERAGE_PRESENCE, pairJavaScriptExportShapeVariants, buildJavaScriptExportShapeChanges, buildJavaScriptExportShapeInventories, inventoryFor, hasPartialJavaScriptExportPropertyCoverage, discriminantOccurrences, reciprocalPairs, addTarget, indexesNotIn, compareDiscriminants, selectionUnknownChange, emptyShapeUnknownChange, diffPair, fieldAtPath, fieldChangeStatus, fieldPresence, propertyCoverageComplete, parentPointer, fieldAvailability, selectionAvailability, emptyShapeAvailability, unpairedChange, changeWithId, literalValue, primitiveArray, isPrimitive, capitalize;
857
+ function init_javascriptExportShapeVariants() {
858
+ return (init_javascriptExportShapeVariants = __esmMin((() => {
859
+ init_javascriptExportShapeComparisonIdentity();
860
+ init_canonicalOrdering();
861
+ init_unicodeCodePointOrder();
862
+ UNKNOWN_COVERAGE_PRESENCE = {
863
+ left: "unknown-coverage",
864
+ right: "unknown-coverage"
865
+ };
866
+ pairJavaScriptExportShapeVariants = (left, right) => {
867
+ const leftKeys = discriminantOccurrences(left);
868
+ const rightKeys = discriminantOccurrences(right);
869
+ const edges = new Map();
870
+ const leftTargets = new Map();
871
+ const rightTargets = new Map();
872
+ for (const [key, leftOccurrence] of leftKeys) {
873
+ const rightOccurrence = rightKeys.get(key);
874
+ if (leftOccurrence.indexes.length !== 1 || rightOccurrence?.indexes.length !== 1) continue;
875
+ const leftIndex = leftOccurrence.indexes[0];
876
+ const rightIndex = rightOccurrence.indexes[0];
877
+ if (leftIndex === undefined || rightIndex === undefined) continue;
878
+ const edgeKey = `${String(leftIndex)}:${String(rightIndex)}`;
879
+ edges.set(edgeKey, [...edges.get(edgeKey) ?? [], leftOccurrence.discriminant]);
880
+ addTarget(leftTargets, leftIndex, rightIndex);
881
+ addTarget(rightTargets, rightIndex, leftIndex);
882
+ }
883
+ const pairs = reciprocalPairs(leftTargets, rightTargets, edges);
884
+ const pairedLeft = new Set(pairs.map(({ leftIndex }) => leftIndex));
885
+ const pairedRight = new Set(pairs.map(({ rightIndex }) => rightIndex));
886
+ return {
887
+ pairs,
888
+ unpairedLeft: indexesNotIn(left, pairedLeft),
889
+ unpairedRight: indexesNotIn(right, pairedRight)
890
+ };
891
+ };
892
+ buildJavaScriptExportShapeChanges = (input) => {
893
+ if (input.leftSelection.selection.status !== "selected" || input.rightSelection.selection.status !== "selected") return [selectionUnknownChange(input)];
894
+ if (input.leftShapes.length === 0 && input.rightShapes.length === 0) return [emptyShapeUnknownChange(input)];
895
+ const paired = input.pairing.pairs.flatMap((pair) => {
896
+ const left = input.leftShapes[pair.leftIndex];
897
+ const right = input.rightShapes[pair.rightIndex];
898
+ return left === undefined || right === undefined ? [] : diffPair(left, right, pair.discriminant, input.evidenceLinks);
899
+ });
900
+ const unpairedLeft = input.pairing.unpairedLeft.flatMap((index) => {
901
+ const shape = input.leftShapes[index];
902
+ return shape === undefined ? [] : [unpairedChange("left", shape, input.evidenceLinks)];
903
+ });
904
+ const unpairedRight = input.pairing.unpairedRight.flatMap((index) => {
905
+ const shape = input.rightShapes[index];
906
+ return shape === undefined ? [] : [unpairedChange("right", shape, input.evidenceLinks)];
907
+ });
908
+ return [
909
+ ...paired,
910
+ ...unpairedLeft,
911
+ ...unpairedRight
912
+ ];
913
+ };
914
+ buildJavaScriptExportShapeInventories = (input) => {
915
+ const leftPairs = new Map(input.pairing.pairs.map((pair) => [pair.leftIndex, pair]));
916
+ const rightPairs = new Map(input.pairing.pairs.map((pair) => [pair.rightIndex, pair]));
917
+ return [...input.leftShapes.map((shape, index) => inventoryFor("left", index, shape, leftPairs.get(index))), ...input.rightShapes.map((shape, index) => inventoryFor("right", index, shape, rightPairs.get(index)))];
918
+ };
919
+ inventoryFor = (side, variantIndex, shape, pair) => ({
920
+ side,
921
+ variant_index: variantIndex,
922
+ discriminant: pair?.discriminant ?? null,
923
+ paired: pair !== undefined,
924
+ source_range: shape.source_range,
925
+ properties: uniqueSorted([...shape.fields.filter((field) => fieldPresence(shape, field, field.path) === "present").map(({ path }) => path), ...shape.property_coverage.map(({ path }) => path)]).filter((path) => path !== ""),
926
+ property_coverage: shape.property_coverage.map(({ path, status }) => ({
927
+ path,
928
+ status
929
+ }))
930
+ });
931
+ hasPartialJavaScriptExportPropertyCoverage = (shapes) => shapes.some((shape) => shape.property_coverage.some(({ status }) => status === "partial") || shape.fields.some((field) => fieldPresence(shape, field, field.path) === "unknown-coverage"));
932
+ discriminantOccurrences = (shapes) => {
933
+ const output = new Map();
934
+ shapes.forEach((shape, index) => {
935
+ for (const field of shape.fields) {
936
+ if (fieldPresence(shape, field, field.path) !== "present") continue;
937
+ const value = literalValue(field);
938
+ if (!value.found) continue;
939
+ const discriminant = {
940
+ path: field.path,
941
+ value: value.value
942
+ };
943
+ const key = canonicalExportShapeValue(discriminant);
944
+ const current = output.get(key);
945
+ output.set(key, {
946
+ discriminant,
947
+ indexes: [...current?.indexes ?? [], index]
948
+ });
949
+ }
950
+ });
951
+ return output;
952
+ };
953
+ reciprocalPairs = (leftTargets, rightTargets, edges) => {
954
+ const pairs = [];
955
+ for (const [leftIndex, targets] of leftTargets) {
956
+ if (targets.size !== 1) continue;
957
+ const rightIndex = [...targets][0];
958
+ if (rightIndex === undefined || rightTargets.get(rightIndex)?.size !== 1 || !rightTargets.get(rightIndex)?.has(leftIndex)) continue;
959
+ const discriminants = edges.get(`${String(leftIndex)}:${String(rightIndex)}`)?.toSorted(compareDiscriminants);
960
+ const discriminant = discriminants?.[0];
961
+ if (discriminant !== undefined) pairs.push({
962
+ leftIndex,
963
+ rightIndex,
964
+ discriminant
965
+ });
966
+ }
967
+ return pairs.sort((first, second) => compareDiscriminants(first.discriminant, second.discriminant));
968
+ };
969
+ addTarget = (map, source, target) => {
970
+ const values = map.get(source) ?? new Set();
971
+ values.add(target);
972
+ map.set(source, values);
973
+ };
974
+ indexesNotIn = (shapes, paired) => shapes.map((_, index) => index).filter((index) => !paired.has(index));
975
+ compareDiscriminants = (left, right) => compareUnicodeCodePoints(canonicalExportShapeValue(left), canonicalExportShapeValue(right));
976
+ selectionUnknownChange = (input) => changeWithId({
977
+ status: "unknown",
978
+ path: "",
979
+ discriminant: null,
980
+ presence: UNKNOWN_COVERAGE_PRESENCE,
981
+ left: selectionAvailability(input.leftSelection.selection, "left"),
982
+ right: selectionAvailability(input.rightSelection.selection, "right"),
983
+ left_source_range: null,
984
+ right_source_range: null,
985
+ evidence_links: input.evidenceLinks,
986
+ limitations: ["Both selectors must resolve one exact export with trusted static return shapes before comparison."]
987
+ });
988
+ emptyShapeUnknownChange = (input) => changeWithId({
989
+ status: "unknown",
990
+ path: "",
991
+ discriminant: null,
992
+ presence: UNKNOWN_COVERAGE_PRESENCE,
993
+ left: emptyShapeAvailability(input.leftShapes, "left"),
994
+ right: emptyShapeAvailability(input.rightShapes, "right"),
995
+ left_source_range: null,
996
+ right_source_range: null,
997
+ evidence_links: input.evidenceLinks,
998
+ limitations: ["At least one selected export has no retained direct return shape."]
999
+ });
1000
+ diffPair = (left, right, discriminant, evidenceLinks) => {
1001
+ const leftFields = new Map(left.fields.map((field) => [field.path, field]));
1002
+ const rightFields = new Map(right.fields.map((field) => [field.path, field]));
1003
+ const paths = uniqueSorted([
1004
+ ...leftFields.keys(),
1005
+ ...rightFields.keys(),
1006
+ ...left.property_coverage.map(({ path }) => path),
1007
+ ...right.property_coverage.map(({ path }) => path)
1008
+ ]);
1009
+ return paths.flatMap((path) => {
1010
+ const leftField = fieldAtPath(left, leftFields, path);
1011
+ const rightField = fieldAtPath(right, rightFields, path);
1012
+ const status = fieldChangeStatus({
1013
+ leftShape: left,
1014
+ rightShape: right,
1015
+ path,
1016
+ leftField,
1017
+ rightField
1018
+ });
1019
+ if (status === null) return [];
1020
+ return [changeWithId({
1021
+ status,
1022
+ path,
1023
+ discriminant,
1024
+ presence: {
1025
+ left: fieldPresence(left, leftField, path),
1026
+ right: fieldPresence(right, rightField, path)
1027
+ },
1028
+ left: fieldAvailability(leftField),
1029
+ right: fieldAvailability(rightField),
1030
+ left_source_range: left.source_range,
1031
+ right_source_range: right.source_range,
1032
+ evidence_links: evidenceLinks,
1033
+ limitations: status === "unknown" ? ["The static value or relevant parent-property coverage is incomplete."] : []
1034
+ })];
1035
+ });
1036
+ };
1037
+ fieldAtPath = (shape, fields, path) => {
1038
+ const field = fields.get(path);
1039
+ if (field !== undefined) return field;
1040
+ if (!shape.property_coverage.some((coverage) => coverage.path === path)) return undefined;
1041
+ return {
1042
+ path,
1043
+ presence: "present",
1044
+ state: "unknown",
1045
+ value: null,
1046
+ reason: "A static container is retained at this path, but no primitive field value is projected."
1047
+ };
1048
+ };
1049
+ fieldChangeStatus = ({ leftShape, rightShape, path, leftField, rightField }) => {
1050
+ const leftPresence = fieldPresence(leftShape, leftField, path);
1051
+ const rightPresence = fieldPresence(rightShape, rightField, path);
1052
+ if (leftField !== undefined && rightField !== undefined && canonicalExportShapeValue(leftField) === canonicalExportShapeValue(rightField)) return null;
1053
+ if (leftPresence === "absent" && rightPresence === "absent") return null;
1054
+ if (leftPresence === "unknown-coverage" || rightPresence === "unknown-coverage") return "unknown";
1055
+ if (leftPresence === "absent") return "added";
1056
+ if (rightPresence === "absent") return "removed";
1057
+ if (leftField !== undefined && rightField !== undefined) {
1058
+ return leftField.state === "unknown" || rightField.state === "unknown" ? "unknown" : "changed";
1059
+ }
1060
+ return null;
1061
+ };
1062
+ fieldPresence = (shape, field, path) => {
1063
+ if (field !== undefined) return field.presence;
1064
+ return propertyCoverageComplete(shape, parentPointer(path)) ? "absent" : "unknown-coverage";
1065
+ };
1066
+ propertyCoverageComplete = (shape, path) => path !== null && shape.property_coverage.some((coverage) => coverage.path === path && coverage.status === "complete");
1067
+ parentPointer = (path) => {
1068
+ if (path === "") return null;
1069
+ const separator = path.lastIndexOf("/");
1070
+ return separator < 0 ? null : path.slice(0, separator);
1071
+ };
1072
+ fieldAvailability = (field) => {
1073
+ if (field === undefined || field.presence === "absent") return { availability: "absent" };
1074
+ if (field.state === "unknown") return {
1075
+ availability: "unknown",
1076
+ reason: field.reason ?? "Static field value is unknown."
1077
+ };
1078
+ if (field.state === "union") return {
1079
+ availability: "union",
1080
+ values: primitiveArray(field.value)
1081
+ };
1082
+ const literal = literalValue(field);
1083
+ return literal.found ? {
1084
+ availability: "literal",
1085
+ value: literal.value
1086
+ } : {
1087
+ availability: "unknown",
1088
+ reason: "Static literal field failed its projection boundary."
1089
+ };
1090
+ };
1091
+ selectionAvailability = (selection, side) => ({
1092
+ availability: "unknown",
1093
+ reason: `${capitalize(side)} export selection is ${selection.status}.`
1094
+ });
1095
+ emptyShapeAvailability = (shapes, side) => ({
1096
+ availability: "unknown",
1097
+ reason: shapes.length === 0 ? `${capitalize(side)} export has no retained direct return shape.` : `${capitalize(side)} export return shape cannot be paired without an opposite variant.`
1098
+ });
1099
+ unpairedChange = (side, shape, evidenceLinks) => changeWithId({
1100
+ status: "unknown",
1101
+ path: "",
1102
+ discriminant: null,
1103
+ presence: UNKNOWN_COVERAGE_PRESENCE,
1104
+ left: {
1105
+ availability: "unknown",
1106
+ reason: side === "left" ? "Left return variant has no unique exact cross-version pairing." : "No left return variant was uniquely paired with this right variant."
1107
+ },
1108
+ right: {
1109
+ availability: "unknown",
1110
+ reason: side === "right" ? "Right return variant has no unique exact cross-version pairing." : "No right return variant was uniquely paired with this left variant."
1111
+ },
1112
+ left_source_range: side === "left" ? shape.source_range : null,
1113
+ right_source_range: side === "right" ? shape.source_range : null,
1114
+ evidence_links: evidenceLinks,
1115
+ limitations: ["The return variant was not paired because no reciprocal unique literal discriminant exists."]
1116
+ });
1117
+ changeWithId = (semantic) => ({
1118
+ ...semantic,
1119
+ change_id: `jesc_change_${digestExportShapeValue(semantic)}`
1120
+ });
1121
+ literalValue = (field) => field.state === "literal" && isPrimitive(field.value) ? {
1122
+ found: true,
1123
+ value: field.value
1124
+ } : { found: false };
1125
+ primitiveArray = (value) => Array.isArray(value) ? value.filter(isPrimitive) : [];
1126
+ isPrimitive = (value) => value === null || typeof value === "string" || typeof value === "number" || typeof value === "boolean";
1127
+ capitalize = (value) => `${value.slice(0, 1).toUpperCase()}${value.slice(1)}`;
1128
+ })))();
1129
+ }
1130
+
1131
+ //#endregion
1132
+ //#region dist/domain/javascript/javascriptExportShapeComparison.js
1133
+ var compareJavaScriptExportShapes, sortChanges, comparisonCoverage$1, comparisonTruncated, sourceProjectionTruncated, comparisonPartial, selectionPartial, comparisonLimitations$1, summarize, countStatus$1, evidencePair;
1134
+ function init_javascriptExportShapeComparison() {
1135
+ return (init_javascriptExportShapeComparison = __esmMin((() => {
1136
+ init_canonicalOrdering();
1137
+ init_unicodeCodePointOrder();
1138
+ init_javascriptExportShapeComparisonIdentity();
1139
+ init_javascriptExportShapeComparisonSchemas();
1140
+ init_javascriptExportShapeSelection();
1141
+ init_javascriptExportShapeVariants();
1142
+ compareJavaScriptExportShapes = (input) => {
1143
+ const left = selectJavaScriptExport(input.left);
1144
+ const right = selectJavaScriptExport(input.right);
1145
+ const leftRetained = retainJavaScriptExportShapes(left);
1146
+ const rightRetained = retainJavaScriptExportShapes(right);
1147
+ const pairing = pairJavaScriptExportShapeVariants(leftRetained.shapes, rightRetained.shapes);
1148
+ const evidenceLinks = evidencePair(input.left.evidenceId, input.right.evidenceId);
1149
+ const allChanges = sortChanges(buildJavaScriptExportShapeChanges({
1150
+ leftSelection: left,
1151
+ rightSelection: right,
1152
+ pairing,
1153
+ leftShapes: leftRetained.shapes,
1154
+ rightShapes: rightRetained.shapes,
1155
+ evidenceLinks
1156
+ }));
1157
+ const changes = allChanges;
1158
+ const omittedChanges = 0;
1159
+ const propertyInventories = buildJavaScriptExportShapeInventories({
1160
+ pairing,
1161
+ leftShapes: leftRetained.shapes,
1162
+ rightShapes: rightRetained.shapes
1163
+ });
1164
+ const coverage = comparisonCoverage$1({
1165
+ input,
1166
+ left,
1167
+ right,
1168
+ leftRetained,
1169
+ rightRetained,
1170
+ pairing,
1171
+ allChanges,
1172
+ omittedChanges
1173
+ });
1174
+ const limitations = comparisonLimitations$1(left, right, coverage.status);
1175
+ const semantic = {
1176
+ left: left.selection,
1177
+ right: right.selection,
1178
+ property_inventories: propertyInventories,
1179
+ summary: summarize(allChanges),
1180
+ changes,
1181
+ coverage,
1182
+ evidence_links: evidenceLinks,
1183
+ limitations
1184
+ };
1185
+ return javaScriptExportShapeComparisonResultSchema.parse({
1186
+ ...semantic,
1187
+ comparison_id: `jesc_${digestExportShapeValue(semantic)}`
1188
+ });
1189
+ };
1190
+ sortChanges = (changes) => changes.map((change, index) => ({
1191
+ change,
1192
+ index,
1193
+ sortKey: canonicalExportShapeValue({
1194
+ discriminant: change.discriminant,
1195
+ path: change.path,
1196
+ status: change.status,
1197
+ left_source_range: change.left_source_range,
1198
+ right_source_range: change.right_source_range,
1199
+ change_id: change.change_id
1200
+ })
1201
+ })).sort((left, right) => compareUnicodeCodePoints(left.sortKey, right.sortKey) || left.index - right.index).map(({ change }) => change);
1202
+ comparisonCoverage$1 = (context) => {
1203
+ const leftSource = context.left.projection?.return_shape_coverage;
1204
+ const rightSource = context.right.projection?.return_shape_coverage;
1205
+ const omittedCandidates = context.left.selection.omitted_candidates + context.right.selection.omitted_candidates;
1206
+ const truncated = comparisonTruncated(context, omittedCandidates);
1207
+ const partial = comparisonPartial(context);
1208
+ return {
1209
+ status: truncated ? "truncated" : partial ? "partial" : "complete-within-inputs",
1210
+ left_graph_status: context.input.left.graph.coverage.status,
1211
+ right_graph_status: context.input.right.graph.coverage.status,
1212
+ paired_variants: context.pairing.pairs.length,
1213
+ unpaired_left_variants: context.pairing.unpairedLeft.length,
1214
+ unpaired_right_variants: context.pairing.unpairedRight.length,
1215
+ omitted_left_variants: context.leftRetained.omitted,
1216
+ omitted_right_variants: context.rightRetained.omitted,
1217
+ left_source_omitted_variants: leftSource?.omitted_return_sites ?? null,
1218
+ right_source_omitted_variants: rightSource?.omitted_return_sites ?? null,
1219
+ left_omitted_fields: leftSource?.omitted_fields ?? 0,
1220
+ right_omitted_fields: rightSource?.omitted_fields ?? 0,
1221
+ left_omitted_property_coverage: leftSource?.omitted_property_coverage ?? 0,
1222
+ right_omitted_property_coverage: rightSource?.omitted_property_coverage ?? 0,
1223
+ omitted_candidates: omittedCandidates,
1224
+ omitted_changes: context.omittedChanges
1225
+ };
1226
+ };
1227
+ comparisonTruncated = (context, omittedCandidates) => context.leftRetained.omitted > 0 || context.rightRetained.omitted > 0 || omittedCandidates > 0 || context.omittedChanges > 0 || sourceProjectionTruncated(context.left) || sourceProjectionTruncated(context.right);
1228
+ sourceProjectionTruncated = (selection) => {
1229
+ const coverage = selection.projection?.return_shape_coverage;
1230
+ if (coverage === undefined) return false;
1231
+ return coverage.status === "truncated" || coverage.omitted_fields > 0 || coverage.omitted_property_coverage > 0 || coverage.projection_complete === false;
1232
+ };
1233
+ comparisonPartial = (context) => selectionPartial(context.left) || selectionPartial(context.right) || context.input.left.graph.coverage.status !== "complete" || context.input.right.graph.coverage.status !== "complete" || hasPartialJavaScriptExportPropertyCoverage(context.leftRetained.shapes) || hasPartialJavaScriptExportPropertyCoverage(context.rightRetained.shapes) || context.pairing.unpairedLeft.length > 0 || context.pairing.unpairedRight.length > 0 || context.allChanges.some(({ status }) => status === "unknown");
1234
+ selectionPartial = (selection) => {
1235
+ const coverage = selection.projection?.return_shape_coverage;
1236
+ return selection.selection.status !== "selected" || !selection.observationComplete || coverage?.status !== "complete" || coverage.projection_complete !== true;
1237
+ };
1238
+ comparisonLimitations$1 = (left, right, status) => uniqueSorted([
1239
+ "Return shapes are inferred from inert syntax and do not prove runtime behavior.",
1240
+ "Return variants are paired only by unique exact literal discriminants, never by source order.",
1241
+ "Dynamic values, incomplete object coverage, and ambiguous variants remain unknown.",
1242
+ "This static comparison cannot establish runtime semantics; run behavioral probes directly against the relevant application versions when that evidence is required.",
1243
+ ...left.limitations,
1244
+ ...right.limitations,
1245
+ ...status === "truncated" ? ["Comparison output or source return-shape recovery reached an explicit limit."] : [],
1246
+ ...status === "partial" ? ["At least one selector, graph, return shape, or property boundary is incomplete."] : []
1247
+ ]);
1248
+ summarize = (changes) => ({
1249
+ added: countStatus$1(changes, "added"),
1250
+ removed: countStatus$1(changes, "removed"),
1251
+ changed: countStatus$1(changes, "changed"),
1252
+ unknown: countStatus$1(changes, "unknown")
1253
+ });
1254
+ countStatus$1 = (changes, status) => changes.filter((change) => change.status === status).length;
1255
+ evidencePair = (left, right) => [left, right];
1256
+ })))();
1257
+ }
1258
+
1259
+ //#endregion
1260
+ //#region dist/domain/javascript/javascriptFeatureSeed.js
1261
+ var findApplicationFeatureSeeds, seedMatch, kindMatches, candidateFields, memberFieldSuffixes, relevantFields, identityFields, propertyFields, normalized;
1262
+ function init_javascriptFeatureSeed() {
1263
+ return (init_javascriptFeatureSeed = __esmMin((() => {
1264
+ init_unicodeCodePointOrder();
1265
+ init_javascriptFeatureTraceSchemas();
1266
+ findApplicationFeatureSeeds = (nodes, seed) => nodes.flatMap((node) => seedMatch(node, seed)).sort((left, right) => compareUnicodeCodePoints(`${left.node_id}\0${left.basis}\0${left.field}`, `${right.node_id}\0${right.basis}\0${right.field}`));
1267
+ seedMatch = (node, seed) => {
1268
+ const mode = featureSeedMatchMode(seed);
1269
+ const caseSensitive = seed.case_sensitive;
1270
+ const query = normalized(seed.value, caseSensitive);
1271
+ if (!kindMatches(node, seed.kind)) return [];
1272
+ const requestedEntryPath = seed.kind === "api" && "entry_path" in seed ? seed.entry_path : undefined;
1273
+ if (seed.kind === "api" && requestedEntryPath !== undefined && !node.observations.some(({ properties }) => {
1274
+ const entryPath = properties.entry_path;
1275
+ return Array.isArray(entryPath) && entryPath.length === requestedEntryPath.length && entryPath.every((segment, index) => segment === requestedEntryPath[index]);
1276
+ })) return [];
1277
+ const match = candidateFields(node, seed.kind).find((candidate) => {
1278
+ const value = normalized(candidate.value, caseSensitive);
1279
+ return mode === "exact" ? value === query : value.includes(query);
1280
+ });
1281
+ return match === undefined ? [] : [{
1282
+ node_id: node.node_id,
1283
+ kind: node.kind,
1284
+ basis: match.basis,
1285
+ field: match.field
1286
+ }];
1287
+ };
1288
+ kindMatches = (node, kind) => {
1289
+ if (kind === "string" || kind === "node-id") return true;
1290
+ if (kind === "route") return node.kind === "endpoint" && node.observations.some(({ properties }) => properties.endpoint_kind === "route");
1291
+ if (kind === "api") return node.kind === "context-bridge-api" || node.kind === "javascript-expression" && node.observations.some((o) => o.properties.step_kind === "exposure");
1292
+ if (kind === "channel") return node.kind === "ipc-channel";
1293
+ if (kind === "module") return [
1294
+ "javascript-asset",
1295
+ "javascript-module",
1296
+ "source-module"
1297
+ ].includes(node.kind);
1298
+ return node.kind === "native-export";
1299
+ };
1300
+ candidateFields = (node, seedKind) => {
1301
+ if (seedKind === "node-id") return [{
1302
+ basis: "node-id",
1303
+ field: "node_id",
1304
+ value: node.node_id
1305
+ }];
1306
+ if (seedKind === "route") return node.observations.flatMap((observation, index) => ["value", "path"].flatMap((key) => {
1307
+ const value = observation.properties[key];
1308
+ return typeof value === "string" ? [{
1309
+ basis: "property",
1310
+ field: `observations[${String(index)}].properties.${key}`,
1311
+ value
1312
+ }] : [];
1313
+ }));
1314
+ const fields = [...identityFields(node), ...node.observations.flatMap((observation, index) => [
1315
+ ...observation.label === null ? [] : [{
1316
+ basis: "label",
1317
+ field: `observations[${String(index)}].label`,
1318
+ value: observation.label
1319
+ }],
1320
+ ...observation.source_map_reference !== null && observation.source_map_reference.resolution.kind !== "unresolved" ? [{
1321
+ basis: "property",
1322
+ field: `observations[${String(index)}].source_map_reference.resolution.path`,
1323
+ value: observation.source_map_reference.resolution.path
1324
+ }] : [],
1325
+ ...propertyFields(observation.properties, `observations[${String(index)}].properties`)
1326
+ ])];
1327
+ if (seedKind === "string") return fields;
1328
+ const names = relevantFields[seedKind];
1329
+ return fields.filter(({ field, selectionPath = field }) => names.some((name) => {
1330
+ const path = memberFieldSuffixes.has(name) ? selectionPath : field;
1331
+ return path === "identity" || path.endsWith(name);
1332
+ }));
1333
+ };
1334
+ memberFieldSuffixes = new Set([
1335
+ ".members",
1336
+ ".methods",
1337
+ ".exports",
1338
+ ".requested_members"
1339
+ ]);
1340
+ relevantFields = {
1341
+ route: [
1342
+ ".label",
1343
+ ".value",
1344
+ ".path"
1345
+ ],
1346
+ api: [
1347
+ ".label",
1348
+ ".api_name",
1349
+ ".api_key",
1350
+ ".key",
1351
+ ".methods",
1352
+ ".members"
1353
+ ],
1354
+ channel: [
1355
+ ".label",
1356
+ ".channel",
1357
+ ".key"
1358
+ ],
1359
+ module: [
1360
+ ".label",
1361
+ ".module_key",
1362
+ ".path",
1363
+ ".source",
1364
+ ".original_source",
1365
+ ".source_root",
1366
+ ".exports"
1367
+ ],
1368
+ "native-export": [
1369
+ ".label",
1370
+ ".key",
1371
+ ".requested_members",
1372
+ ".members"
1373
+ ]
1374
+ };
1375
+ identityFields = (node) => {
1376
+ const identity = node.identity;
1377
+ if (identity.strategy === "content-digest") return [{
1378
+ basis: "identity",
1379
+ field: "identity",
1380
+ value: identity.sha256
1381
+ }];
1382
+ if (identity.strategy === "source-map-original") return [{
1383
+ basis: "identity",
1384
+ field: "identity.original_source",
1385
+ value: identity.original_source
1386
+ }, ...identity.source_root === null ? [] : [{
1387
+ basis: "identity",
1388
+ field: "identity.source_root",
1389
+ value: identity.source_root
1390
+ }]];
1391
+ if (identity.strategy === "canonical-path") return [{
1392
+ basis: "identity",
1393
+ field: "identity.path",
1394
+ value: identity.path
1395
+ }];
1396
+ if (identity.strategy === "artifact-local-key") return [{
1397
+ basis: "identity",
1398
+ field: "identity.key",
1399
+ value: identity.key
1400
+ }];
1401
+ if (identity.strategy === "runtime-instance") return [{
1402
+ basis: "identity",
1403
+ field: "identity.runtime_key",
1404
+ value: identity.runtime_key
1405
+ }];
1406
+ return [];
1407
+ };
1408
+ propertyFields = (value, prefix) => {
1409
+ const output = [];
1410
+ const pending = [{
1411
+ current: value,
1412
+ path: prefix,
1413
+ selectionPath: prefix
1414
+ }];
1415
+ while (pending.length > 0) {
1416
+ const next = pending.pop();
1417
+ if (next === undefined) continue;
1418
+ const { current, path, selectionPath } = next;
1419
+ if (typeof current === "string") {
1420
+ output.push({
1421
+ basis: "property",
1422
+ field: path,
1423
+ selectionPath,
1424
+ value: current
1425
+ });
1426
+ continue;
1427
+ }
1428
+ if (Array.isArray(current)) {
1429
+ for (let index = current.length - 1; index >= 0; index -= 1) {
1430
+ const item = current[index];
1431
+ if (item !== undefined) pending.push({
1432
+ current: item,
1433
+ path: `${path}[${String(index)}]`,
1434
+ selectionPath
1435
+ });
1436
+ }
1437
+ continue;
1438
+ }
1439
+ if (current !== null && typeof current === "object") {
1440
+ for (const key of Object.keys(current).sort(compareUnicodeCodePoints).reverse()) pending.push({
1441
+ current: current[key] ?? null,
1442
+ path: `${path}.${key}`,
1443
+ selectionPath: `${selectionPath}.${key}`
1444
+ });
1445
+ }
1446
+ }
1447
+ return output;
1448
+ };
1449
+ normalized = (value, caseSensitive) => {
1450
+ const normalizedValue = value.normalize("NFKC");
1451
+ return caseSensitive ? normalizedValue : normalizedValue.toLocaleLowerCase("en-US");
1452
+ };
1453
+ })))();
1454
+ }
1455
+
1456
+ //#endregion
1457
+ //#region dist/domain/javascript/javascriptFeatureTraversal.js
1458
+ var traverseApplicationFeature, buildAdjacency, addAdjacency;
1459
+ function init_javascriptFeatureTraversal() {
1460
+ return (init_javascriptFeatureTraversal = __esmMin((() => {
1461
+ init_unicodeCodePointOrder();
1462
+ traverseApplicationFeature = (graph, seedNodeIds, direction) => {
1463
+ const nodeById = new Map(graph.nodes.map((node) => [node.node_id, node]));
1464
+ const adjacency = buildAdjacency(graph.edges, direction);
1465
+ const visited = new Set(seedNodeIds);
1466
+ const retainedEdges = new Map();
1467
+ const predecessors = new Map();
1468
+ const queue = [...seedNodeIds];
1469
+ for (let offset = 0; offset < queue.length; offset += 1) {
1470
+ const current = queue[offset];
1471
+ if (current === undefined) continue;
1472
+ for (const entry of adjacency.get(current) ?? []) {
1473
+ retainedEdges.set(entry.edge.edge_id, entry.edge);
1474
+ if (visited.has(entry.nextNodeId)) continue;
1475
+ if (!nodeById.has(entry.nextNodeId)) continue;
1476
+ visited.add(entry.nextNodeId);
1477
+ predecessors.set(entry.nextNodeId, {
1478
+ previousNodeId: current,
1479
+ edgeId: entry.edge.edge_id
1480
+ });
1481
+ queue.push(entry.nextNodeId);
1482
+ }
1483
+ }
1484
+ return {
1485
+ nodes: [...visited].map((nodeId) => nodeById.get(nodeId)).filter((node) => node !== undefined).sort((left, right) => compareUnicodeCodePoints(left.node_id, right.node_id)),
1486
+ edges: [...retainedEdges.values()].sort((left, right) => compareUnicodeCodePoints(left.edge_id, right.edge_id)),
1487
+ predecessors
1488
+ };
1489
+ };
1490
+ buildAdjacency = (edges, direction) => {
1491
+ const adjacency = new Map();
1492
+ for (const edge of edges) {
1493
+ if (direction !== "incoming") addAdjacency(adjacency, edge.source_node_id, {
1494
+ edge,
1495
+ nextNodeId: edge.target_node_id
1496
+ });
1497
+ if (direction !== "outgoing") addAdjacency(adjacency, edge.target_node_id, {
1498
+ edge,
1499
+ nextNodeId: edge.source_node_id
1500
+ });
1501
+ }
1502
+ for (const entries of adjacency.values()) entries.sort((left, right) => compareUnicodeCodePoints(`${left.edge.edge_id}\0${left.nextNodeId}`, `${right.edge.edge_id}\0${right.nextNodeId}`));
1503
+ return adjacency;
1504
+ };
1505
+ addAdjacency = (adjacency, nodeId, entry) => {
1506
+ const entries = adjacency.get(nodeId);
1507
+ if (entries === undefined) adjacency.set(nodeId, [entry]);
1508
+ else entries.push(entry);
1509
+ };
1510
+ })))();
1511
+ }
1512
+
1513
+ //#endregion
1514
+ //#region dist/domain/javascript/javascriptNativeHandoff.js
1515
+ var buildJavaScriptNativeHandoffs, artifactDigest, artifactPath, nativeExportNodes, requestedExports, stringArray, uniqueProviders;
1516
+ function init_javascriptNativeHandoff() {
1517
+ return (init_javascriptNativeHandoff = __esmMin((() => {
1518
+ init_unicodeCodePointOrder();
1519
+ buildJavaScriptNativeHandoffs = (nodes, edges, nativeEvidence) => {
1520
+ const nodeById = new Map(nodes.map((node) => [node.node_id, node]));
1521
+ return nodes.filter(({ kind }) => kind === "native-addon").flatMap((node) => {
1522
+ const digest = artifactDigest(node);
1523
+ if (digest === null) return [];
1524
+ const linked = nativeEvidence.filter(({ subject }) => subject?.digest.sha256 === digest);
1525
+ const exportNodes = nativeExportNodes(node, edges, nodeById);
1526
+ return [{
1527
+ native_node_id: node.node_id,
1528
+ artifact_sha256: digest,
1529
+ artifact_path: artifactPath(node),
1530
+ export_node_ids: exportNodes.map(({ node_id: id }) => id),
1531
+ requested_exports: requestedExports(exportNodes),
1532
+ status: linked.length === 0 ? "requires-provider-analysis" : "evidence-linked",
1533
+ providers: uniqueProviders(linked),
1534
+ evidence_ids: linked.map(({ evidence_id: id }) => id).sort(compareUnicodeCodePoints),
1535
+ recommended_tools: [
1536
+ "open_binary",
1537
+ "binary_overview",
1538
+ "search_procedures",
1539
+ "analyze_function",
1540
+ "xrefs"
1541
+ ]
1542
+ }];
1543
+ }).sort((left, right) => compareUnicodeCodePoints(left.native_node_id, right.native_node_id));
1544
+ };
1545
+ artifactDigest = (node) => {
1546
+ if (node.identity.strategy === "content-digest") return node.identity.sha256;
1547
+ const observation = node.observations.find(({ evidence }) => evidence.artifact.available);
1548
+ return observation?.evidence.artifact.available === true ? observation.evidence.artifact.sha256 : null;
1549
+ };
1550
+ artifactPath = (node) => {
1551
+ for (const { evidence } of node.observations) if (evidence.location.available && evidence.location.value.kind === "artifact-path") return evidence.location.value.path;
1552
+ return null;
1553
+ };
1554
+ nativeExportNodes = (addon, edges, nodeById) => {
1555
+ const ids = edges.flatMap((edge) => {
1556
+ if (edge.source_node_id === addon.node_id && ["contains", "exposes"].includes(edge.relation)) return [edge.target_node_id];
1557
+ if (edge.target_node_id === addon.node_id && ["imports", "loads"].includes(edge.relation)) return [edge.source_node_id];
1558
+ return [];
1559
+ });
1560
+ return [...new Set(ids)].map((id) => nodeById.get(id)).filter((node) => node?.kind === "native-export").sort((left, right) => compareUnicodeCodePoints(left.node_id, right.node_id));
1561
+ };
1562
+ requestedExports = (nodes) => {
1563
+ const values = nodes.flatMap((node) => node.observations.flatMap((observation) => [
1564
+ ...observation.label === null || Array.isArray(observation.properties.requested_members) ? [] : [observation.label],
1565
+ ...stringArray(observation.properties.requested_members),
1566
+ ...stringArray(observation.properties.members)
1567
+ ]));
1568
+ return [...new Set(values)].sort(compareUnicodeCodePoints);
1569
+ };
1570
+ stringArray = (value) => Array.isArray(value) ? value.filter((item) => typeof item === "string") : [];
1571
+ uniqueProviders = (evidence) => [...new Map(evidence.map(({ provider }) => [`${provider.id}\0${provider.name}\0${provider.version ?? ""}`, provider])).values()].sort((left, right) => compareUnicodeCodePoints(`${left.id}\0${left.name}\0${left.version ?? ""}`, `${right.id}\0${right.name}\0${right.version ?? ""}`));
1572
+ })))();
1573
+ }
1574
+
1575
+ //#endregion
1576
+ //#region dist/domain/javascript/javascriptFeatureTrace.js
1577
+ var traceApplicationFeature, noMatchResult, traceGraph, traceGraphCoverage, terminalPaths, pathTo, isTerminal, factSummary, traceCoverageStatus, traceLimitations, sourceCoverageLimitations;
1578
+ function init_javascriptFeatureTrace() {
1579
+ return (init_javascriptFeatureTrace = __esmMin((() => {
1580
+ init_canonicalDigest();
1581
+ init_canonicalOrdering();
1582
+ init_unicodeCodePointOrder();
1583
+ init_javascriptApplicationGraph();
1584
+ init_javascriptFeatureTraceSchemas();
1585
+ init_javascriptFeatureSeed();
1586
+ init_javascriptFeatureTraversal();
1587
+ init_javascriptNativeHandoff();
1588
+ traceApplicationFeature = (source) => {
1589
+ const input = {
1590
+ ...source,
1591
+ seed: applicationFeatureSeedSchema.parse(source.seed)
1592
+ };
1593
+ const allSeedMatches = findApplicationFeatureSeeds(input.graph.nodes, input.seed);
1594
+ const seedMatches = allSeedMatches;
1595
+ if (seedMatches.length === 0) return noMatchResult(input);
1596
+ const traversal = traverseApplicationFeature(input.graph, seedMatches.map(({ node_id: id }) => id), input.direction);
1597
+ const graph = traceGraph(input, seedMatches, traversal);
1598
+ const paths = terminalPaths(traversal, seedMatches);
1599
+ const nativeHandoffs = buildJavaScriptNativeHandoffs(traversal.nodes, traversal.edges, input.nativeEvidence);
1600
+ const evidenceLinks = uniqueSorted([input.sourceEvidenceId, ...nativeHandoffs.flatMap(({ evidence_ids: ids }) => ids)]);
1601
+ const semantic = {
1602
+ source_evidence_id: input.sourceEvidenceId,
1603
+ source_graph_id: input.graph.graph_id,
1604
+ seed: input.seed,
1605
+ direction: input.direction,
1606
+ seed_matches: seedMatches,
1607
+ graph,
1608
+ paths,
1609
+ native_handoffs: nativeHandoffs,
1610
+ summary: {
1611
+ matched_seeds: seedMatches.length,
1612
+ traced_nodes: traversal.nodes.length,
1613
+ traced_edges: traversal.edges.length,
1614
+ terminal_paths: paths.length,
1615
+ native_handoffs: nativeHandoffs.length,
1616
+ ...factSummary(traversal.nodes, traversal.edges)
1617
+ },
1618
+ coverage: {
1619
+ status: traceCoverageStatus(input.graph),
1620
+ source_graph_status: input.graph.coverage.status,
1621
+ total_seed_matches: allSeedMatches.length
1622
+ },
1623
+ evidence_links: evidenceLinks,
1624
+ limitations: traceLimitations(input.graph)
1625
+ };
1626
+ return applicationFeatureTraceResultSchema.parse({
1627
+ ...semantic,
1628
+ trace_id: `jatr_${digestCanonicalValue(semantic, "Feature trace")}`
1629
+ });
1630
+ };
1631
+ noMatchResult = (input) => {
1632
+ const semantic = {
1633
+ source_evidence_id: input.sourceEvidenceId,
1634
+ source_graph_id: input.graph.graph_id,
1635
+ seed: input.seed,
1636
+ direction: input.direction,
1637
+ seed_matches: [],
1638
+ graph: null,
1639
+ paths: [],
1640
+ native_handoffs: [],
1641
+ summary: {
1642
+ matched_seeds: 0,
1643
+ traced_nodes: 0,
1644
+ traced_edges: 0,
1645
+ terminal_paths: 0,
1646
+ native_handoffs: 0,
1647
+ observed_facts: 0,
1648
+ inferred_facts: 0,
1649
+ unknown_facts: 0,
1650
+ unavailable_facts: 0
1651
+ },
1652
+ coverage: {
1653
+ status: "no-match",
1654
+ source_graph_status: input.graph.coverage.status,
1655
+ total_seed_matches: 0
1656
+ },
1657
+ evidence_links: [input.sourceEvidenceId],
1658
+ limitations: uniqueSorted(["No graph entity matched the literal seed; this is not evidence that the feature is absent.", ...sourceCoverageLimitations(input.graph)])
1659
+ };
1660
+ return applicationFeatureTraceResultSchema.parse({
1661
+ ...semantic,
1662
+ trace_id: `jatr_${digestCanonicalValue(semantic, "Feature trace")}`
1663
+ });
1664
+ };
1665
+ traceGraph = (input, seedMatches, traversal) => {
1666
+ return createJavaScriptApplicationGraph({
1667
+ schema: "JavaScriptApplicationGraph",
1668
+ root_node_ids: uniqueSorted(seedMatches.map(({ node_id: id }) => id)),
1669
+ nodes: traversal.nodes,
1670
+ edges: traversal.edges,
1671
+ coverage: traceGraphCoverage(input.graph),
1672
+ limitations: uniqueSorted([...input.graph.limitations, "Trace edges retain their source authority; graph connectivity does not prove runtime execution or reachability."])
1673
+ });
1674
+ };
1675
+ traceGraphCoverage = (source) => {
1676
+ return source.coverage.status === "complete" ? {
1677
+ status: "complete",
1678
+ truncated: false,
1679
+ omitted_count: 0,
1680
+ limits: []
1681
+ } : source.coverage;
1682
+ };
1683
+ terminalPaths = (traversal, seeds) => {
1684
+ const seedIds = new Set(seeds.map(({ node_id: id }) => id));
1685
+ const edgeById = new Map(traversal.edges.map((edge) => [edge.edge_id, edge]));
1686
+ return traversal.nodes.filter((node) => isTerminal(node) && (!seedIds.has(node.node_id) || traversal.nodes.length === 1)).map((node) => pathTo(node, traversal.predecessors, edgeById)).filter((path) => path !== null).sort((left, right) => compareUnicodeCodePoints(left.path_id, right.path_id));
1687
+ };
1688
+ pathTo = (node, predecessors, edgeById) => {
1689
+ const nodeIds = [node.node_id];
1690
+ const edgeIds = [];
1691
+ let current = node.node_id;
1692
+ while (predecessors.has(current)) {
1693
+ const predecessor = predecessors.get(current);
1694
+ if (predecessor === undefined) break;
1695
+ nodeIds.push(predecessor.previousNodeId);
1696
+ edgeIds.push(predecessor.edgeId);
1697
+ current = predecessor.previousNodeId;
1698
+ }
1699
+ nodeIds.reverse();
1700
+ edgeIds.reverse();
1701
+ const edges = edgeIds.map((edgeId) => edgeById.get(edgeId)).filter((edge) => edge !== undefined);
1702
+ if (edges.length !== edgeIds.length) return null;
1703
+ const semantic = {
1704
+ start_node_id: nodeIds[0] ?? node.node_id,
1705
+ end_node_id: node.node_id,
1706
+ end_kind: node.kind,
1707
+ node_ids: nodeIds,
1708
+ edge_ids: edgeIds,
1709
+ authorities: uniqueSorted(edges.map(({ evidence }) => evidence.authority)),
1710
+ contains_inference: edges.some(({ evidence }) => evidence.state === "inferred")
1711
+ };
1712
+ return {
1713
+ ...semantic,
1714
+ path_id: `jatp_${digestCanonicalValue(semantic, "Feature trace")}`
1715
+ };
1716
+ };
1717
+ isTerminal = (node) => [
1718
+ "endpoint",
1719
+ "storage",
1720
+ "native-addon",
1721
+ "native-export",
1722
+ "unknown"
1723
+ ].includes(node.kind) || node.kind === "javascript-expression" && node.observations.some((o) => o.properties.step_kind === "terminal");
1724
+ factSummary = (nodes, edges) => {
1725
+ const states = [...nodes.flatMap(({ observations }) => observations.map(({ evidence }) => evidence.state)), ...edges.map(({ evidence }) => evidence.state)];
1726
+ return {
1727
+ observed_facts: states.filter((state) => state === "observed").length,
1728
+ inferred_facts: states.filter((state) => state === "inferred").length,
1729
+ unknown_facts: states.filter((state) => state === "unknown").length,
1730
+ unavailable_facts: states.filter((state) => state === "unavailable").length
1731
+ };
1732
+ };
1733
+ traceCoverageStatus = (graph) => graph.coverage.status === "complete" ? "complete-within-source" : "partial";
1734
+ traceLimitations = (graph) => uniqueSorted([
1735
+ "A trace reports graph relationships, not proof that code executed or that a feature is reachable in every state.",
1736
+ "Static, native, passive-runtime, inferred, and unknown facts retain their original authority in the returned graph.",
1737
+ "Native handoffs never open a binary or invoke a provider automatically; snapshot reuse remains provider/profile/target exact.",
1738
+ ...sourceCoverageLimitations(graph)
1739
+ ]);
1740
+ sourceCoverageLimitations = (graph) => graph.coverage.status === "complete" ? [] : ["The source application graph is incomplete; unmatched seeds and frontiers remain unknown."];
1741
+ })))();
1742
+ }
1743
+
1744
+ //#endregion
1745
+ //#region dist/domain/javascript/sourceToBundleSignals.js
1746
+ var RELEVANT_NODE_KINDS, PATH_PROPERTIES, signalWeight, sourceBearingNodes, historicalSourceFiles, buildSourceToBundleCandidateIndex, candidateIdsForSource, candidateHasDigest, scoreSourceToBundleCandidate, projectCurrentNode, candidateSignals, signal, candidateConfidence, matchingPaths, matchingUnicodePaths, addJsonPath, addPath, SCHEME_URL, SCHEME_URL_PREFIX, normalizeCurrentPath, uniquePaths, pathSuffixes, addIndexValue;
1747
+ function init_sourceToBundleSignals() {
1748
+ return (init_sourceToBundleSignals = __esmMin((() => {
1749
+ init_unicodeCodePointOrder();
1750
+ init_sourceToBundleComparisonSchemas();
1751
+ init_digests();
1752
+ RELEVANT_NODE_KINDS = new Set([
1753
+ "javascript-asset",
1754
+ "javascript-module",
1755
+ "source-module"
1756
+ ]);
1757
+ PATH_PROPERTIES = [
1758
+ "path",
1759
+ "source",
1760
+ "original_source",
1761
+ "module_path",
1762
+ "resolved_path",
1763
+ "declared_path"
1764
+ ];
1765
+ signalWeight = (kind) => {
1766
+ const entry = SOURCE_TO_BUNDLE_SIGNAL_WEIGHTS.find(([signal]) => signal === kind);
1767
+ if (entry === undefined) throw new TypeError(`Missing source-to-bundle signal weight: ${kind}`);
1768
+ return entry[1];
1769
+ };
1770
+ sourceBearingNodes = (nodes) => nodes.filter(({ kind }) => RELEVANT_NODE_KINDS.has(kind)).sort((left, right) => compareUnicodeCodePoints(left.node_id, right.node_id));
1771
+ historicalSourceFiles = (graph) => graph.entries.filter((entry) => entry.kind === "file" && entry.classifications.includes("source")).sort((left, right) => compareUnicodeCodePoints(left.path, right.path));
1772
+ buildSourceToBundleCandidateIndex = (nodes) => {
1773
+ const projections = nodes.map(projectCurrentNode);
1774
+ const byDigest = new Map();
1775
+ const byPathSuffix = new Map();
1776
+ const byBasename = new Map();
1777
+ for (const projection of projections) {
1778
+ for (const digest of projection.digests) addIndexValue(byDigest, digest, projection.node.node_id);
1779
+ for (const path of projection.paths) {
1780
+ for (const suffix of path.allowSuffix ? pathSuffixes(path.value) : [path.value]) {
1781
+ addIndexValue(byPathSuffix, suffix, projection.node.node_id);
1782
+ const canonical = suffix.normalize("NFC");
1783
+ if (canonical !== suffix) addIndexValue(byPathSuffix, canonical, projection.node.node_id);
1784
+ }
1785
+ addIndexValue(byBasename, posix.basename(path.value), projection.node.node_id);
1786
+ }
1787
+ }
1788
+ return {
1789
+ nodes: new Map(projections.map((projection) => [projection.node.node_id, projection])),
1790
+ byDigest,
1791
+ byPathSuffix,
1792
+ byBasename
1793
+ };
1794
+ };
1795
+ candidateIdsForSource = (source, index) => {
1796
+ const canonicalPath = source.path.normalize("NFC");
1797
+ const groups = [
1798
+ source.sha256 === null ? undefined : index.byDigest.get(source.sha256),
1799
+ index.byPathSuffix.get(source.path),
1800
+ canonicalPath === source.path ? undefined : index.byPathSuffix.get(canonicalPath),
1801
+ index.byBasename.get(posix.basename(source.path))
1802
+ ];
1803
+ const seen = new Set();
1804
+ const output = [];
1805
+ for (const group of groups) {
1806
+ if (group === undefined) continue;
1807
+ for (const nodeId of [...group].sort(compareUnicodeCodePoints)) {
1808
+ if (seen.has(nodeId)) continue;
1809
+ seen.add(nodeId);
1810
+ output.push(nodeId);
1811
+ }
1812
+ }
1813
+ return output;
1814
+ };
1815
+ candidateHasDigest = (index, nodeId) => (index.nodes.get(nodeId)?.digests.size ?? 0) > 0;
1816
+ scoreSourceToBundleCandidate = (source, nodeId, index) => {
1817
+ const projection = index.nodes.get(nodeId);
1818
+ if (projection === undefined) return null;
1819
+ const signals = candidateSignals(source, projection);
1820
+ const score = signals.reduce((total, signal) => total + signal.weight, 0);
1821
+ if (score < 20) return null;
1822
+ return {
1823
+ current_node_id: projection.node.node_id,
1824
+ current_node_kind: projection.node.kind,
1825
+ score,
1826
+ confidence: candidateConfidence(signals),
1827
+ signals
1828
+ };
1829
+ };
1830
+ projectCurrentNode = (node) => {
1831
+ const digests = new Set();
1832
+ const paths = [];
1833
+ if (node.identity.strategy === "content-digest") digests.add(node.identity.sha256);
1834
+ if (node.identity.strategy === "source-map-original") {
1835
+ if (node.identity.source_sha256 !== null) digests.add(node.identity.source_sha256);
1836
+ }
1837
+ if (node.identity.strategy === "canonical-path") addPath(paths, "canonical-path", node.identity.path, "artifact");
1838
+ for (const observation of node.observations) {
1839
+ if (node.identity.strategy === "source-map-original") {
1840
+ const resolution = observation.source_map_reference?.resolution;
1841
+ if (resolution !== undefined && resolution.kind !== "unresolved") paths.push({
1842
+ kind: "source-map-original",
1843
+ value: resolution.path,
1844
+ allowSuffix: resolution.kind === "suffix"
1845
+ });
1846
+ } else {
1847
+ const sourceDigest = observation.properties.source_sha256;
1848
+ if (typeof sourceDigest === "string" && isDigest(sourceDigest)) digests.add(sourceDigest);
1849
+ for (const key of PATH_PROPERTIES) {
1850
+ if (key === "declared_path" && typeof observation.properties.resolved_path === "string") continue;
1851
+ addJsonPath(paths, observation.properties[key], key === "resolved_path" || (key === "path" || key === "module_path") && !(typeof observation.properties[key] === "string" && SCHEME_URL.test(observation.properties[key])) ? "artifact" : "reference");
1852
+ }
1853
+ }
1854
+ }
1855
+ return {
1856
+ node,
1857
+ digests,
1858
+ paths: uniquePaths(paths)
1859
+ };
1860
+ };
1861
+ candidateSignals = (source, current) => {
1862
+ const signals = [];
1863
+ if (source.sha256 !== null && current.digests.has(source.sha256)) signals.push(signal("exact-source-digest", source.sha256, [source.sha256]));
1864
+ const sourceMapPaths = matchingPaths(source.path, current.paths.filter(({ kind }) => kind === "source-map-original"));
1865
+ if (sourceMapPaths.length > 0) signals.push(signal("source-map-original-path", source.path, sourceMapPaths));
1866
+ const unicodeEquivalentPaths = matchingUnicodePaths(source.path, current.paths);
1867
+ if (unicodeEquivalentPaths.length > 0) signals.push(signal("unicode-equivalent-path", source.path, unicodeEquivalentPaths));
1868
+ const otherPaths = current.paths.filter(({ kind }) => kind !== "source-map-original");
1869
+ const exactPaths = otherPaths.filter(({ value }) => value === source.path).map(({ value }) => value);
1870
+ if (exactPaths.length > 0) signals.push(signal("current-path-exact", source.path, exactPaths));
1871
+ const suffixPaths = otherPaths.filter(({ value, allowSuffix }) => allowSuffix && value !== source.path && value.endsWith(`/${source.path}`)).map(({ value }) => value);
1872
+ if (suffixPaths.length > 0) signals.push(signal("current-path-suffix", source.path, suffixPaths));
1873
+ const basename = posix.basename(source.path);
1874
+ const basenamePaths = current.paths.filter(({ value }) => posix.basename(value) === basename).map(({ value }) => value);
1875
+ if (basenamePaths.length > 0) signals.push(signal("basename-match", basename, basenamePaths));
1876
+ const extension = posix.extname(source.path).toLowerCase();
1877
+ const extensionPaths = current.paths.filter(({ value }) => posix.extname(value).toLowerCase() === extension).map(({ value }) => value);
1878
+ if (extension !== "" && extensionPaths.length > 0) signals.push(signal("language-extension", extension, extensionPaths));
1879
+ return signals;
1880
+ };
1881
+ signal = (kind, sourceValue, currentValues) => ({
1882
+ kind,
1883
+ weight: signalWeight(kind),
1884
+ source_value: sourceValue,
1885
+ current_values: [...new Set(currentValues)].sort(compareUnicodeCodePoints)
1886
+ });
1887
+ candidateConfidence = (signals) => {
1888
+ const kinds = new Set(signals.map(({ kind }) => kind));
1889
+ if (kinds.has("exact-source-digest")) return "exact";
1890
+ if (kinds.has("source-map-original-path") || kinds.has("current-path-exact")) return "high";
1891
+ return kinds.has("current-path-suffix") ? "medium" : "low";
1892
+ };
1893
+ matchingPaths = (sourcePath, currentPaths) => currentPaths.filter(({ value, allowSuffix }) => value === sourcePath || allowSuffix && value.endsWith(`/${sourcePath}`)).map(({ value }) => value);
1894
+ matchingUnicodePaths = (sourcePath, currentPaths) => {
1895
+ const canonicalSource = sourcePath.normalize("NFC");
1896
+ return currentPaths.filter(({ value, allowSuffix }) => {
1897
+ if (value === sourcePath || allowSuffix && value.endsWith(`/${sourcePath}`)) return false;
1898
+ const canonicalValue = value.normalize("NFC");
1899
+ return canonicalValue === canonicalSource || allowSuffix && canonicalValue.endsWith(`/${canonicalSource}`);
1900
+ }).map(({ value }) => value);
1901
+ };
1902
+ addJsonPath = (paths, value, format) => {
1903
+ if (typeof value === "string") addPath(paths, "observation-path", value, format);
1904
+ };
1905
+ addPath = (paths, kind, raw, format) => {
1906
+ const value = normalizeCurrentPath(raw, format);
1907
+ if (value !== null) paths.push({
1908
+ kind,
1909
+ value,
1910
+ allowSuffix: true
1911
+ });
1912
+ };
1913
+ SCHEME_URL = /^[a-z][a-z0-9+.-]*:\/\//iu;
1914
+ SCHEME_URL_PREFIX = /^[a-z][a-z0-9+.-]*:\/\/+/iu;
1915
+ normalizeCurrentPath = (raw, format) => {
1916
+ const withoutQuery = format === "reference" && SCHEME_URL.test(raw) ? raw.split(/[?#]/u, 1)[0] ?? "" : raw;
1917
+ const portable = format === "artifact" ? withoutQuery : withoutQuery.replace(SCHEME_URL_PREFIX, "").replaceAll("\\", "/");
1918
+ const parts = [];
1919
+ for (const part of portable.split("/")) {
1920
+ if (part === "" || part === ".") continue;
1921
+ if (part === "..") {
1922
+ if (parts.length === 0) return null;
1923
+ parts.pop();
1924
+ } else parts.push(part);
1925
+ }
1926
+ if (parts.length === 0) return null;
1927
+ return parts.join("/");
1928
+ };
1929
+ uniquePaths = (paths) => [...new Map(paths.map((path) => [compositeKey([
1930
+ path.kind,
1931
+ path.value,
1932
+ String(path.allowSuffix)
1933
+ ]), path])).values()].sort((left, right) => compareUnicodeCodePoints(compositeKey([left.kind, left.value]), compositeKey([right.kind, right.value])));
1934
+ pathSuffixes = (path) => {
1935
+ const parts = path.split("/");
1936
+ return parts.map((_, index) => parts.slice(index).join("/"));
1937
+ };
1938
+ addIndexValue = (index, key, nodeId) => {
1939
+ const values = index.get(key) ?? new Set();
1940
+ values.add(nodeId);
1941
+ index.set(key, values);
1942
+ };
1943
+ })))();
1944
+ }
1945
+
1946
+ //#endregion
1947
+ //#region dist/domain/javascript/sourceToBundleComparison.js
1948
+ var compareSourceToBundle, projectComparison, compareMappings, comparisonCoverage, scoringModel, classifyMapping, markMergedMappings, mappingId, comparisonSummary, countStatus, coverageStatus, comparisonLimitations, hasSignal, compareCandidates;
1949
+ function init_sourceToBundleComparison() {
1950
+ return (init_sourceToBundleComparison = __esmMin((() => {
1951
+ init_canonicalOrdering();
1952
+ init_unicodeCodePointOrder();
1953
+ init_comparisonSemantics();
1954
+ init_canonicalDigest();
1955
+ init_sourceToBundleComparisonSchemas();
1956
+ init_sourceToBundleSignals();
1957
+ compareSourceToBundle = (input) => {
1958
+ const projection = projectComparison(input);
1959
+ const mappings = compareMappings(input, projection);
1960
+ const factors = { ...projection.factors };
1961
+ const mappedCurrentIds = new Set(mappings.items.flatMap(({ current_node_ids: nodeIds }) => nodeIds));
1962
+ const unmappedCurrentNodeIds = projection.currentNodes.map(({ node_id: nodeId }) => nodeId).filter((nodeId) => !mappedCurrentIds.has(nodeId));
1963
+ const semanticResult = {
1964
+ reference: {
1965
+ root_sha256: input.reference.root_sha256,
1966
+ inventory_state: input.reference.inventory_state
1967
+ },
1968
+ application: {
1969
+ evidence_id: input.application.evidenceId,
1970
+ graph_id: input.application.graph.graph_id,
1971
+ root_artifact_sha256: input.application.rootArtifactSha256
1972
+ },
1973
+ scoring: scoringModel(),
1974
+ summary: comparisonSummary(mappings.items),
1975
+ items: mappings.items,
1976
+ unmapped_current_node_ids: unmappedCurrentNodeIds,
1977
+ coverage: comparisonCoverage(projection, mappings, factors),
1978
+ evidence_links: [input.application.evidenceId],
1979
+ limitations: comparisonLimitations(factors)
1980
+ };
1981
+ return sourceToBundleComparisonResultSchema.parse({
1982
+ ...semanticResult,
1983
+ comparison_id: `stbc_${digestCanonicalValue(semanticResult, "Source-to-bundle comparison")}`
1984
+ });
1985
+ };
1986
+ projectComparison = (input) => {
1987
+ const allSources = historicalSourceFiles(input.reference);
1988
+ const allCurrentNodes = sourceBearingNodes(input.application.graph.nodes);
1989
+ const sources = allSources;
1990
+ const currentNodes = allCurrentNodes;
1991
+ const index = buildSourceToBundleCandidateIndex(currentNodes);
1992
+ return {
1993
+ sources,
1994
+ currentNodes,
1995
+ index,
1996
+ absenceComplete: input.reference.inventory_state === "complete" && absenceClaimable(input.application.graph.coverage),
1997
+ factors: { input }
1998
+ };
1999
+ };
2000
+ compareMappings = (input, projection) => {
2001
+ let candidateEvaluations = 0;
2002
+ const provisionalItems = [];
2003
+ for (const source of projection.sources) {
2004
+ const candidateIds = candidateIdsForSource(source, projection.index);
2005
+ candidateEvaluations += candidateIds.length;
2006
+ const scored = candidateIds.map((nodeId) => scoreSourceToBundleCandidate(source, nodeId, projection.index)).filter((candidate) => candidate !== null).sort(compareCandidates);
2007
+ const classification = classifyMapping(scored, projection.absenceComplete, (nodeId) => source.sha256 !== null && candidateHasDigest(projection.index, nodeId));
2008
+ const semantic = {
2009
+ source_path: source.path,
2010
+ source_sha256: source.sha256,
2011
+ source_language: source.language,
2012
+ status: classification.status,
2013
+ confidence: classification.confidence,
2014
+ current_node_ids: classification.currentNodeIds,
2015
+ candidates: scored,
2016
+ limitations: uniqueSorted([...source.limitations, ...classification.limitations])
2017
+ };
2018
+ provisionalItems.push({
2019
+ mapping_id: mappingId(input, semantic),
2020
+ ...semantic
2021
+ });
2022
+ }
2023
+ return {
2024
+ items: markMergedMappings(input, provisionalItems),
2025
+ candidateEvaluations
2026
+ };
2027
+ };
2028
+ comparisonCoverage = (projection, mappings, factors) => ({
2029
+ status: coverageStatus(factors),
2030
+ reference_inventory_state: factors.input.reference.inventory_state,
2031
+ application_graph_status: factors.input.application.graph.coverage.status,
2032
+ retained_source_files: projection.sources.length,
2033
+ retained_application_nodes: projection.currentNodes.length,
2034
+ candidate_evaluations: mappings.candidateEvaluations
2035
+ });
2036
+ scoringModel = () => ({
2037
+ algorithm: "rea-source-to-bundle-signals",
2038
+ minimum_candidate_score: 20,
2039
+ weights: SOURCE_TO_BUNDLE_SIGNAL_WEIGHTS.map(([signal, weight]) => ({
2040
+ signal,
2041
+ weight
2042
+ }))
2043
+ });
2044
+ classifyMapping = (candidates, absenceComplete, digestComparable) => {
2045
+ const exact = candidates.filter((candidate) => hasSignal(candidate, "exact-source-digest"));
2046
+ if (exact.length === 1) return {
2047
+ status: "unchanged",
2048
+ confidence: "exact",
2049
+ currentNodeIds: [exact[0]?.current_node_id ?? ""].filter(Boolean),
2050
+ limitations: ["Exact byte identity does not establish equivalent load context or runtime behavior."]
2051
+ };
2052
+ if (exact.length > 1) return {
2053
+ status: "duplicated",
2054
+ confidence: "exact",
2055
+ currentNodeIds: exact.map(({ current_node_id: nodeId }) => nodeId),
2056
+ limitations: ["The same historical source digest occurs in multiple current graph nodes."]
2057
+ };
2058
+ const pathCandidates = candidates.filter((candidate) => candidate.signals.some(({ kind }) => [
2059
+ "source-map-original-path",
2060
+ "current-path-exact",
2061
+ "current-path-suffix"
2062
+ ].includes(kind)));
2063
+ const topScore = pathCandidates[0]?.score;
2064
+ const topPathCandidates = topScore === undefined ? [] : pathCandidates.filter(({ score }) => score === topScore);
2065
+ if (topPathCandidates.length === 1) {
2066
+ const candidate = topPathCandidates[0];
2067
+ if (candidate !== undefined && digestComparable(candidate.current_node_id)) return {
2068
+ status: "modified",
2069
+ confidence: candidate.confidence === "high" ? "high" : "medium",
2070
+ currentNodeIds: [candidate.current_node_id],
2071
+ limitations: ["Location evidence links the source to the current node, but their source digests differ."]
2072
+ };
2073
+ return {
2074
+ status: "unknown",
2075
+ confidence: "unknown",
2076
+ currentNodeIds: candidate === undefined ? [] : [candidate.current_node_id],
2077
+ limitations: ["Location evidence links the source to the current node, but comparable source digests are unavailable."]
2078
+ };
2079
+ }
2080
+ if (topPathCandidates.length > 1) return {
2081
+ status: "split",
2082
+ confidence: "medium",
2083
+ currentNodeIds: topPathCandidates.map(({ current_node_id: nodeId }) => nodeId),
2084
+ limitations: ["Multiple equally scored current nodes retain the historical source path; this is a static split inference, not runtime proof."]
2085
+ };
2086
+ if (candidates.length > 0) return {
2087
+ status: "unknown",
2088
+ confidence: "unknown",
2089
+ currentNodeIds: [],
2090
+ limitations: [candidates.some((candidate) => hasSignal(candidate, "unicode-equivalent-path")) ? "Unicode-equivalent paths are inferred candidates only; filesystem paths with distinct Unicode spellings may identify different files, so no mapping was forced." : "Only weak basename or extension signals were available; no mapping was forced."]
2091
+ };
2092
+ return absenceComplete ? {
2093
+ status: "removed",
2094
+ confidence: "high",
2095
+ currentNodeIds: [],
2096
+ limitations: ["No retained current node matched exact digest or path signals within complete static inventories."]
2097
+ } : {
2098
+ status: "unknown",
2099
+ confidence: "unknown",
2100
+ currentNodeIds: [],
2101
+ limitations: ["No candidate was observed, but incomplete input or graph coverage prevents a removal claim."]
2102
+ };
2103
+ };
2104
+ markMergedMappings = (input, items) => {
2105
+ const sourcesByNode = new Map();
2106
+ for (const item of items) {
2107
+ if (item.status !== "unchanged" || item.current_node_ids.length !== 1) continue;
2108
+ const nodeId = item.current_node_ids[0];
2109
+ if (nodeId === undefined) continue;
2110
+ sourcesByNode.set(nodeId, [...sourcesByNode.get(nodeId) ?? [], item]);
2111
+ }
2112
+ const mergedSources = new Set([...sourcesByNode.values()].filter((group) => group.length > 1).flatMap((group) => group.map(({ source_path: path }) => path)));
2113
+ return items.map((item) => {
2114
+ if (!mergedSources.has(item.source_path)) return item;
2115
+ const { mapping_id: previousMappingId, ...base } = item;
2116
+ void previousMappingId;
2117
+ const semantic = {
2118
+ ...base,
2119
+ status: "merged",
2120
+ confidence: "exact",
2121
+ limitations: uniqueSorted([...item.limitations, "Multiple historical source paths have exact digest identity with the same current graph node."])
2122
+ };
2123
+ return {
2124
+ ...semantic,
2125
+ mapping_id: mappingId(input, semantic)
2126
+ };
2127
+ });
2128
+ };
2129
+ mappingId = (input, item) => `stbc_item_${digestCanonicalValue({
2130
+ reference_root_sha256: input.reference.root_sha256,
2131
+ application_graph_id: input.application.graph.graph_id,
2132
+ ...item
2133
+ }, "Source-to-bundle comparison")}`;
2134
+ comparisonSummary = (items) => ({
2135
+ unchanged: countStatus(items, "unchanged"),
2136
+ modified: countStatus(items, "modified"),
2137
+ removed: countStatus(items, "removed"),
2138
+ split: countStatus(items, "split"),
2139
+ merged: countStatus(items, "merged"),
2140
+ duplicated: countStatus(items, "duplicated"),
2141
+ unknown: countStatus(items, "unknown")
2142
+ });
2143
+ countStatus = (items, status) => items.filter((item) => item.status === status).length;
2144
+ coverageStatus = (factors) => {
2145
+ return factors.input.reference.inventory_state === "complete" && factors.input.application.graph.coverage.status === "complete" ? "complete-within-inputs" : "partial";
2146
+ };
2147
+ comparisonLimitations = (factors) => uniqueSorted([
2148
+ "Static digest and location signals do not establish runtime behavior, semantic equivalence, or absence of dynamically generated modules.",
2149
+ ...factors.input.reference.limitations,
2150
+ ...factors.input.application.graph.limitations,
2151
+ ...factors.input.reference.inventory_state === "complete" ? [] : [`Historical source inventory is ${factors.input.reference.inventory_state}; unmatched files remain unknown.`],
2152
+ ...factors.input.application.graph.coverage.status === "complete" ? [] : [`Application graph coverage is ${factors.input.application.graph.coverage.status}; unmatched files remain unknown.`]
2153
+ ]);
2154
+ hasSignal = (candidate, kind) => candidate.signals.some((signal) => signal.kind === kind);
2155
+ compareCandidates = (left, right) => right.score - left.score || compareUnicodeCodePoints(left.current_node_id, right.current_node_id);
2156
+ })))();
2157
+ }
2158
+
2159
+ //#endregion
2160
+ //#region dist/application/javascript/JavaScriptApplicationWorkflowService.js
2161
+ var traceApplicationFeatureEvidence, traceApplicationFeatureEvidenceValidated, compareApplicationVersionsEvidence, compareApplicationVersionsEvidenceValidated, compareSourceToBundleEvidenceValidated, compareJavaScriptExportShapesEvidence, compareJavaScriptExportShapesEvidenceValidated, workflowFailure;
2162
+ function init_JavaScriptApplicationWorkflowService() {
2163
+ return (init_JavaScriptApplicationWorkflowService = __esmMin((() => {
2164
+ init_analysisErrorCore();
2165
+ init_inputIssueProjection();
2166
+ init_javascriptApplicationVersionComparison();
2167
+ init_javascriptApplicationVersionComparisonSchemas();
2168
+ init_javascriptExportShapeComparison();
2169
+ init_javascriptExportShapeComparisonSchemas();
2170
+ init_javascriptFeatureTrace();
2171
+ init_javascriptFeatureTraceSchemas();
2172
+ init_result();
2173
+ init_sourceToBundleComparison();
2174
+ init_sourceToBundleComparisonSchemas();
2175
+ init_JavaScriptApplicationEvidenceGraph();
2176
+ init_JavaScriptApplicationWorkflowEvidence();
2177
+ traceApplicationFeatureEvidence = (rawInput) => {
2178
+ const operation = "trace_application_feature";
2179
+ const parsed = traceApplicationFeatureInputSchema.safeParse(rawInput);
2180
+ if (!parsed.success) return err(analysisInputErrorFromIssues(operation, parsed.error.issues, rawInput));
2181
+ return traceApplicationFeatureEvidenceValidated(parsed.data);
2182
+ };
2183
+ traceApplicationFeatureEvidenceValidated = (input) => {
2184
+ const operation = "trace_application_feature";
2185
+ const identities = applicationTraceIdentitiesSchema.safeParse(input);
2186
+ if (!identities.success) return err(analysisInputErrorFromIssues(operation, identities.error.issues, input));
2187
+ const sourceResult = parseApplicationGraphEvidence(input.application, ["application"]);
2188
+ if (!sourceResult.ok) return err(applicationGraphEvidenceInputError(operation, sourceResult.error));
2189
+ const nativeResult = parseNativeApplicationEvidence(input.native_observations, ["native_observations"]);
2190
+ if (!nativeResult.ok) return err(applicationGraphEvidenceInputError(operation, nativeResult.error));
2191
+ try {
2192
+ const source = sourceResult.value;
2193
+ const nativeEvidence = nativeResult.value;
2194
+ const result = traceApplicationFeature({
2195
+ sourceEvidenceId: source.evidence.evidence_id,
2196
+ graph: source.graph,
2197
+ nativeEvidence,
2198
+ seed: input.seed,
2199
+ direction: input.direction
2200
+ });
2201
+ return ok(createApplicationFeatureTraceEvidence({
2202
+ application_evidence_id: source.evidence.evidence_id,
2203
+ native_evidence_ids: nativeEvidence.map(({ evidence_id: id }) => id),
2204
+ seed: input.seed,
2205
+ direction: input.direction
2206
+ }, result));
2207
+ } catch (cause) {
2208
+ return workflowFailure(operation, cause);
2209
+ }
2210
+ };
2211
+ compareApplicationVersionsEvidence = (rawInput) => {
2212
+ const operation = "compare_application_versions";
2213
+ const parsed = compareApplicationVersionsInputSchema.safeParse(rawInput);
2214
+ if (!parsed.success) return err(analysisInputErrorFromIssues(operation, parsed.error.issues, rawInput));
2215
+ return compareApplicationVersionsEvidenceValidated(parsed.data);
2216
+ };
2217
+ compareApplicationVersionsEvidenceValidated = (input) => {
2218
+ const operation = "compare_application_versions";
2219
+ const identities = applicationVersionIdentitiesSchema.safeParse(input);
2220
+ if (!identities.success) return err(analysisInputErrorFromIssues(operation, identities.error.issues, input));
2221
+ const leftResult = parseApplicationGraphEvidence(input.left, ["left"]);
2222
+ if (!leftResult.ok) return err(applicationGraphEvidenceInputError(operation, leftResult.error));
2223
+ const rightResult = parseApplicationGraphEvidence(input.right, ["right"]);
2224
+ if (!rightResult.ok) return err(applicationGraphEvidenceInputError(operation, rightResult.error));
2225
+ const leftNativeResult = parseNativeApplicationEvidence(input.left_native_observations, ["left_native_observations"]);
2226
+ if (!leftNativeResult.ok) return err(applicationGraphEvidenceInputError(operation, leftNativeResult.error));
2227
+ const rightNativeResult = parseNativeApplicationEvidence(input.right_native_observations, ["right_native_observations"]);
2228
+ if (!rightNativeResult.ok) return err(applicationGraphEvidenceInputError(operation, rightNativeResult.error));
2229
+ try {
2230
+ const left = leftResult.value;
2231
+ const right = rightResult.value;
2232
+ const leftNative = leftNativeResult.value;
2233
+ const rightNative = rightNativeResult.value;
2234
+ const result = compareJavaScriptApplicationVersions({
2235
+ left: {
2236
+ evidenceId: left.evidence.evidence_id,
2237
+ rootArtifactSha256: left.rootArtifactSha256,
2238
+ graph: left.graph
2239
+ },
2240
+ right: {
2241
+ evidenceId: right.evidence.evidence_id,
2242
+ rootArtifactSha256: right.rootArtifactSha256,
2243
+ graph: right.graph
2244
+ },
2245
+ leftNativeEvidence: leftNative,
2246
+ rightNativeEvidence: rightNative
2247
+ });
2248
+ return ok(createApplicationVersionComparisonEvidence({
2249
+ left_evidence_id: left.evidence.evidence_id,
2250
+ right_evidence_id: right.evidence.evidence_id,
2251
+ left_native_evidence_ids: leftNative.map(({ evidence_id: id }) => id),
2252
+ right_native_evidence_ids: rightNative.map(({ evidence_id: id }) => id)
2253
+ }, result));
2254
+ } catch (cause) {
2255
+ return workflowFailure(operation, cause);
2256
+ }
2257
+ };
2258
+ compareSourceToBundleEvidenceValidated = (input) => {
2259
+ const operation = "compare_source_to_bundle";
2260
+ const applicationResult = parseApplicationGraphEvidence(input.application, ["application"]);
2261
+ if (!applicationResult.ok) return err(applicationGraphEvidenceInputError(operation, applicationResult.error));
2262
+ try {
2263
+ const application = applicationResult.value;
2264
+ const result = compareSourceToBundle({
2265
+ reference: input.reference,
2266
+ application: {
2267
+ evidenceId: application.evidence.evidence_id,
2268
+ rootArtifactSha256: application.rootArtifactSha256,
2269
+ graph: application.graph
2270
+ }
2271
+ });
2272
+ return ok(createSourceToBundleComparisonEvidence({
2273
+ reference_root_sha256: input.reference.root_sha256,
2274
+ application_evidence_id: application.evidence.evidence_id
2275
+ }, result));
2276
+ } catch (cause) {
2277
+ return workflowFailure(operation, cause);
2278
+ }
2279
+ };
2280
+ compareJavaScriptExportShapesEvidence = (rawInput) => {
2281
+ const operation = "compare_javascript_export_shapes";
2282
+ const parsed = compareJavaScriptExportShapesInputSchema.safeParse(rawInput);
2283
+ if (!parsed.success) return err(analysisInputErrorFromIssues(operation, parsed.error.issues, rawInput));
2284
+ return compareJavaScriptExportShapesEvidenceValidated(parsed.data);
2285
+ };
2286
+ compareJavaScriptExportShapesEvidenceValidated = (input) => {
2287
+ const operation = "compare_javascript_export_shapes";
2288
+ const identities = javaScriptExportShapeIdentitiesSchema.safeParse(input);
2289
+ if (!identities.success) return err(analysisInputErrorFromIssues(operation, identities.error.issues, input));
2290
+ const leftResult = parseApplicationGraphEvidence(input.left, ["left"]);
2291
+ if (!leftResult.ok) return err(applicationGraphEvidenceInputError(operation, leftResult.error));
2292
+ const rightResult = parseApplicationGraphEvidence(input.right, ["right"]);
2293
+ if (!rightResult.ok) return err(applicationGraphEvidenceInputError(operation, rightResult.error));
2294
+ try {
2295
+ const left = leftResult.value;
2296
+ const right = rightResult.value;
2297
+ const result = compareJavaScriptExportShapes({
2298
+ left: {
2299
+ evidenceId: left.evidence.evidence_id,
2300
+ graph: left.graph,
2301
+ modulePath: input.left_module_path,
2302
+ exportName: input.left_export_name
2303
+ },
2304
+ right: {
2305
+ evidenceId: right.evidence.evidence_id,
2306
+ graph: right.graph,
2307
+ modulePath: input.right_module_path,
2308
+ exportName: input.right_export_name
2309
+ }
2310
+ });
2311
+ return ok(createJavaScriptExportShapeComparisonEvidence({
2312
+ left_evidence_id: left.evidence.evidence_id,
2313
+ right_evidence_id: right.evidence.evidence_id,
2314
+ left_module_path: input.left_module_path,
2315
+ left_export_name: input.left_export_name,
2316
+ right_module_path: input.right_module_path,
2317
+ right_export_name: input.right_export_name
2318
+ }, result));
2319
+ } catch (cause) {
2320
+ return workflowFailure(operation, cause);
2321
+ }
2322
+ };
2323
+ workflowFailure = (operation, cause) => err(new AnalysisProtocolError(`JavaScript application workflow failed while producing ${operation}`, { cause }));
2324
+ })))();
2325
+ }
2326
+
2327
+ //#endregion
2328
+ init_JavaScriptApplicationWorkflowService();
2329
+ export { compareApplicationVersionsEvidenceValidated, compareJavaScriptExportShapesEvidenceValidated, compareSourceToBundleEvidenceValidated, traceApplicationFeatureEvidenceValidated };