rea-agents 6.4.0 → 6.5.0

package/dist/contracts/toolContractExamples.js

@@ -18,6 +18,7 @@ export const TOOL_EXAMPLE_OVERRIDES = {
     resolve_native_call_targets: { address: "0x1000" },
     read_function_instructions: { procedure: "main" },
     read_bytes: { address: "0x1000", length: 16 },
+    search_bytes: { pattern: "48 8B ?? ?? 89" },
     address_to_file_offset: { address: "0x1000" },
     procedure_references: { procedure: "main" },
     procedure_pseudo_code: { procedure: "main" },
@@ -73,4 +74,32 @@ export const TOOL_EXAMPLE_OVERRIDES = {
         left_bundle_path: "/tmp/left-evidence.json",
         right_bundle_path: "/tmp/right-evidence.json",
     },
+    inspect_with_objdump: {
+        path: "/tmp/program",
+        operation: "disassemble",
+    },
+    execute_rizin_command: { path: "/tmp/program", command: "iI" },
+    list_frida_devices: {},
+    list_frida_processes: { device_id: "local" },
+    start_frida_session: { mode: "attach", device_id: "local", pid: 1234 },
+    load_frida_script: {
+        session_id: "00000000-0000-4000-8000-000000000001",
+        source_kind: "inline",
+        source: "send(Process.id);",
+    },
+    resume_frida_session: { session_id: "00000000-0000-4000-8000-000000000001" },
+    unload_frida_script: {
+        session_id: "00000000-0000-4000-8000-000000000001",
+        script_id: "00000000-0000-4000-8000-000000000002",
+    },
+    frida_session_status: { session_id: "00000000-0000-4000-8000-000000000001" },
+    close_frida_session: { session_id: "00000000-0000-4000-8000-000000000001" },
+    instrument_with_frida: {
+        mode: "attach",
+        device_id: "local",
+        pid: 1234,
+        source_kind: "inline",
+        source: "send(Process.id);",
+        duration_ms: 1_000,
+    },
 };

package/dist/contracts/toolContractTypes.js

@@ -7,12 +7,14 @@ export const TOOL_KINDS = [
     "managed-provider",
     "android-provider",
     "apktool-provider",
+    "flutter-provider",
     "jeb-provider",
     "adb-provider",
     "firmware-provider",
     "browser-provider",
     "electron-provider",
     "runtime-provider",
+    "pcap-provider",
     "application",
     "session",
 ];

package/dist/contracts/toolContracts.js

@@ -1,4 +1,10 @@
+import { CAPTURE_TOOL_CONTRACTS } from "./captures/captureToolContracts.js";
+import { SIGNAL_TOOL_CONTRACTS } from "./signals/signalToolContracts.js";
+import { WASM_TOOL_CONTRACTS } from "./wasm/wasmToolContracts.js";
 import { EVM_TOOL_CONTRACTS } from "./evm/evmToolContracts.js";
+import { GO_TOOL_CONTRACTS } from "./go/goToolContracts.js";
+import { RUST_TOOL_CONTRACTS } from "./rust/rustToolContracts.js";
+import { SQLITE_TOOL_CONTRACTS } from "./sqlite/sqliteToolContracts.js";
 import { ANALYSIS_VIEW_TOOL_CONTRACTS } from "./analysisViewToolContracts.js";
 import { BINARY_DIAGNOSTICS_TOOL_CONTRACTS } from "./native/binaryDiagnosticsToolContracts.js";
 import { NATIVE_TOOL_CONTRACTS } from "./native/nativeToolContracts.js";
@@ -7,6 +13,8 @@ import { MANAGED_TOOL_CONTRACTS } from "./managed/managedToolContracts.js";
 import { FIRMWARE_TOOL_CONTRACTS } from "./firmware/firmwareToolContracts.js";
 import { ANDROID_TOOL_CONTRACTS } from "./android/androidToolContracts.js";
 import { APKTOOL_TOOL_CONTRACTS } from "./apktool/apktoolToolContracts.js";
+import { PCAP_TOOL_CONTRACTS } from "./pcap/pcapToolContracts.js";
+import { FLUTTER_TOOL_CONTRACTS } from "./flutter/flutterToolContracts.js";
 import { JEB_TOOL_CONTRACTS } from "./jeb/jebToolContracts.js";
 import { ADB_TOOL_CONTRACTS } from "./adb/adbToolContracts.js";
 import { MANAGED_WORKFLOW_TOOL_CONTRACTS } from "./managed/managedWorkflowToolContracts.js";
@@ -21,6 +29,11 @@ import { JAVASCRIPT_RECOVERY_TOOL_CONTRACTS } from "./javascript/javascriptRecov
 import { OFFICIAL_TOOL_CONTRACTS } from "./officialToolContracts.js";
 import { ENHANCED_TOOL_CONTRACTS } from "./enhancedToolContracts.js";
 import { SESSION_TOOL_CONTRACTS } from "./sessionToolContracts.js";
+import { CUTTER_TOOL_CONTRACTS } from "./cutterToolContracts.js";
+import { REVERSE_ENGINEERING_TOOL_CONTRACTS } from "./reverseEngineeringToolContracts.js";
+import { GDB_TOOL_CONTRACTS } from "./gdbToolContracts.js";
+import { RIZIN_DEBUG_TOOL_CONTRACTS } from "./rizinDebugToolContracts.js";
+import { FRIDA_TOOL_CONTRACTS } from "./fridaToolContracts.js";
 /** Complete ordered public inventory used by registration and verification. */
 export const TOOL_CONTRACTS = [
     ...OFFICIAL_TOOL_CONTRACTS,
@@ -30,9 +43,17 @@ export const TOOL_CONTRACTS = [
     ...ANALYSIS_VIEW_TOOL_CONTRACTS,
     ...ARTIFACT_TOOL_CONTRACTS,
     ...EVM_TOOL_CONTRACTS,
+    ...GO_TOOL_CONTRACTS,
+    ...RUST_TOOL_CONTRACTS,
+    ...WASM_TOOL_CONTRACTS,
+    ...SQLITE_TOOL_CONTRACTS,
+    ...CAPTURE_TOOL_CONTRACTS,
+    ...SIGNAL_TOOL_CONTRACTS,
     ...MANAGED_TOOL_CONTRACTS,
     ...ANDROID_TOOL_CONTRACTS,
     ...APKTOOL_TOOL_CONTRACTS,
+    ...PCAP_TOOL_CONTRACTS,
+    ...FLUTTER_TOOL_CONTRACTS,
     ...JEB_TOOL_CONTRACTS,
     ...ADB_TOOL_CONTRACTS,
     ...FIRMWARE_TOOL_CONTRACTS,
@@ -46,6 +67,11 @@ export const TOOL_CONTRACTS = [
     ...WEB_NETWORK_CAPTURE_TOOL_CONTRACTS,
     ...JAVASCRIPT_RECOVERY_TOOL_CONTRACTS,
     ...SESSION_TOOL_CONTRACTS,
+    ...CUTTER_TOOL_CONTRACTS,
+    ...REVERSE_ENGINEERING_TOOL_CONTRACTS,
+    ...GDB_TOOL_CONTRACTS,
+    ...RIZIN_DEBUG_TOOL_CONTRACTS,
+    ...FRIDA_TOOL_CONTRACTS,
 ];
 /** Resolve a public contract by name while retaining its exact schema types. */
 export const toolContract = (name) => {

package/dist/contracts/toolEffects.js

@@ -6,6 +6,8 @@ const effects = (overrides = {}) => ({
     accessesNetwork: false,
     changesUiState: false,
     mayDiscardData: false,
+    executesForeignCode: false,
+    mutatesDevice: false,
     idempotent: true,
     ...overrides,
 });
@@ -18,6 +20,110 @@ const browserEvidence = effects({
 const sessionEvidence = effects({ mutatesSession: true });
 /** Explicit effect audit for every public tool. */
 export const TOOL_EFFECTS = {
+    list_cutter_sessions: effects({ accessesNetwork: true }),
+    cutter_command: effects({
+        mutatesTarget: true,
+        executesForeignCode: true,
+        mutatesSession: true,
+        writesFilesystem: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        changesUiState: true,
+        idempotent: false,
+    }),
+    inspect_with_objdump: effects({
+        mutatesSession: true,
+        launchesProcess: true,
+    }),
+    start_gdb_session: effects({
+        launchesProcess: true,
+        mutatesSession: true,
+        idempotent: false,
+    }),
+    gdb_console: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        writesFilesystem: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        executesForeignCode: true,
+        idempotent: false,
+    }),
+    gdb_session_status: effects(),
+    start_rizin_debug_session: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        launchesProcess: true,
+        executesForeignCode: true,
+        idempotent: false,
+    }),
+    rizin_debug_command: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        executesForeignCode: true,
+        writesFilesystem: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        changesUiState: true,
+        mayDiscardData: true,
+        idempotent: false,
+    }),
+    rizin_debug_session_status: effects({ mutatesSession: true }),
+    close_rizin_debug_session: effects({
+        mutatesSession: true,
+        launchesProcess: true,
+        mutatesTarget: true,
+        executesForeignCode: true,
+    }),
+    close_gdb_session: effects({
+        launchesProcess: true,
+        mutatesSession: true,
+        mutatesTarget: true,
+        executesForeignCode: true,
+        idempotent: false,
+    }),
+    execute_rizin_command: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        writesFilesystem: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        mayDiscardData: true,
+        executesForeignCode: true,
+        idempotent: false,
+    }),
+    inspect_go_binary: evidence,
+    inspect_rust_binary: evidence,
+    inspect_sqlite_database: effects({
+        mutatesSession: true,
+        writesFilesystem: true,
+        launchesProcess: true,
+    }),
+    inspect_packet_fields: effects({
+        mutatesSession: true,
+        launchesProcess: true,
+        writesFilesystem: true,
+    }),
+    inspect_packet_capture: effects({
+        mutatesSession: true,
+        launchesProcess: true,
+        writesFilesystem: true,
+    }),
+    inspect_signal_decoders: effects({
+        mutatesSession: true,
+        launchesProcess: true,
+        writesFilesystem: true,
+    }),
+    decode_signal_recording: effects({
+        mutatesSession: true,
+        launchesProcess: true,
+        writesFilesystem: true,
+    }),
+    inspect_wasm_artifact: effects({
+        mutatesSession: true,
+        writesFilesystem: true,
+        launchesProcess: true,
+    }),
     inspect_evm_interface: effects({
         mutatesSession: true,
         writesFilesystem: true,
@@ -57,6 +163,57 @@ export const TOOL_EFFECTS = {
         writesFilesystem: true,
         launchesProcess: true,
     }),
+    list_frida_devices: effects({ launchesProcess: true, accessesNetwork: true }),
+    list_frida_processes: effects({
+        launchesProcess: true,
+        accessesNetwork: true,
+    }),
+    start_frida_session: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        idempotent: false,
+    }),
+    load_frida_script: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        executesForeignCode: true,
+        idempotent: false,
+    }),
+    resume_frida_session: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        executesForeignCode: true,
+        idempotent: false,
+    }),
+    unload_frida_script: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        idempotent: false,
+    }),
+    frida_session_status: effects(),
+    close_frida_session: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        idempotent: false,
+    }),
+    instrument_with_frida: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        executesForeignCode: true,
+        idempotent: false,
+    }),
     inspect_pe_resources: evidence,
     inspect_analysis_view: evidence,
     inspect_firmware_regions: effects({
@@ -75,6 +232,24 @@ export const TOOL_EFFECTS = {
         launchesProcess: true,
         writesFilesystem: true,
     }),
+    inspect_pcap_client: effects({
+        mutatesSession: true,
+        launchesProcess: true,
+        writesFilesystem: true,
+    }),
+    inspect_pcap_capture: effects({
+        mutatesSession: true,
+        launchesProcess: true,
+        writesFilesystem: true,
+    }),
+    identify_flutter_build: effects({
+        mutatesSession: true,
+        writesFilesystem: true,
+    }),
+    inspect_dart_aot: effects({
+        mutatesSession: true,
+        writesFilesystem: true,
+    }),
     inspect_apktool_client: effects({
         mutatesSession: true,
         launchesProcess: true,
@@ -150,6 +325,7 @@ export const TOOL_EFFECTS = {
         launchesProcess: true,
         writesFilesystem: true,
         accessesNetwork: true,
+        mutatesDevice: true,
         idempotent: false,
     }),
     capture_adb_screen: effects({
@@ -211,6 +387,7 @@ export const TOOL_EFFECTS = {
         mutatesSession: true,
         launchesProcess: true,
         accessesNetwork: true,
+        mutatesDevice: true,
         idempotent: false,
     }),
     uninstall_adb_package: effects({
@@ -218,6 +395,7 @@ export const TOOL_EFFECTS = {
         mutatesSession: true,
         launchesProcess: true,
         accessesNetwork: true,
+        mutatesDevice: true,
         idempotent: false,
     }),
     start_adb_app: effects({
@@ -225,6 +403,7 @@ export const TOOL_EFFECTS = {
         mutatesSession: true,
         launchesProcess: true,
         accessesNetwork: true,
+        mutatesDevice: true,
         idempotent: false,
     }),
     start_adb_activity: effects({
@@ -232,6 +411,7 @@ export const TOOL_EFFECTS = {
         mutatesSession: true,
         launchesProcess: true,
         accessesNetwork: true,
+        mutatesDevice: true,
         idempotent: false,
     }),
     stop_adb_app: effects({
@@ -239,6 +419,7 @@ export const TOOL_EFFECTS = {
         mutatesSession: true,
         launchesProcess: true,
         accessesNetwork: true,
+        mutatesDevice: true,
         idempotent: false,
     }),
     search_android_classes: effects({
@@ -266,6 +447,7 @@ export const TOOL_EFFECTS = {
         mutatesSession: true,
         launchesProcess: true,
         writesFilesystem: true,
+        mayDiscardData: true,
     }),
     inspect_native_load_image: evidence,
     inspect_native_dispatch_metadata: evidence,
@@ -296,17 +478,38 @@ export const TOOL_EFFECTS = {
     inspect_native_data_type: evidence,
     resolve_native_call_targets: evidence,
     read_bytes: evidence,
+    search_bytes: evidence,
     address_to_file_offset: evidence,
     procedure_references: evidence,
     procedure_pseudo_code: evidence,
     resolve_containing_procedure: evidence,
     search_procedures: evidence,
     search_strings: evidence,
-    set_address_name: effects({ mutatesTarget: true, mutatesSession: true }),
-    set_addresses_names: effects({ mutatesTarget: true, mutatesSession: true }),
-    set_bookmark: effects({ mutatesTarget: true, mutatesSession: true }),
-    set_comment: effects({ mutatesTarget: true, mutatesSession: true }),
-    set_inline_comment: effects({ mutatesTarget: true, mutatesSession: true }),
+    set_address_name: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        mayDiscardData: true,
+    }),
+    set_addresses_names: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        mayDiscardData: true,
+    }),
+    set_bookmark: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        mayDiscardData: true,
+    }),
+    set_comment: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        mayDiscardData: true,
+    }),
+    set_inline_comment: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        mayDiscardData: true,
+    }),
     unset_bookmark: effects({
         mutatesTarget: true,
         mutatesSession: true,
@@ -337,6 +540,7 @@ export const TOOL_EFFECTS = {
         accessesNetwork: true,
         changesUiState: true,
         mayDiscardData: true,
+        executesForeignCode: true,
         idempotent: false,
     }),
     // The owned process can change files, show UI and use the network.
@@ -346,6 +550,7 @@ export const TOOL_EFFECTS = {
         launchesProcess: true,
         accessesNetwork: true,
         changesUiState: true,
+        executesForeignCode: true,
         idempotent: false,
     }),
     inspect_macho: nativeEvidence,
@@ -391,6 +596,7 @@ export const TOOL_EFFECTS = {
         accessesNetwork: true,
         changesUiState: true,
         mayDiscardData: true,
+        executesForeignCode: true,
         idempotent: false,
     }),
     list_electron_targets: browserEvidence,
@@ -403,11 +609,13 @@ export const TOOL_EFFECTS = {
         accessesNetwork: true,
         changesUiState: true,
         mayDiscardData: true,
+        executesForeignCode: true,
         idempotent: false,
     }),
     list_javascript_runtime_targets: browserEvidence,
     observe_javascript_runtime: browserEvidence,
     analyze_javascript_application: evidence,
+    inspect_electron_fuses: evidence,
     export_web_scripts: effects({
         mutatesSession: true,
         writesFilesystem: true,
@@ -429,6 +637,7 @@ export const TOOL_EFFECTS = {
     evaluate_reconstruction_coverage: effects(),
     project_android_application_graph: evidence,
     project_apple_application_graph: evidence,
+    project_harmony_application_graph: evidence,
     open_binary: effects({ mutatesSession: true, launchesProcess: true }),
     close_binary: effects({
         mutatesSession: true,
@@ -436,7 +645,7 @@ export const TOOL_EFFECTS = {
         mayDiscardData: true,
         idempotent: false,
     }),
-    binary_session: effects(),
+    binary_session: effects({ launchesProcess: true }),
     export_evidence_bundle: effects({
         writesFilesystem: true,
         mayDiscardData: true,
@@ -450,10 +659,12 @@ export const TOOL_EFFECTS = {
         writesFilesystem: true,
         launchesProcess: true,
         accessesNetwork: true,
+        executesForeignCode: true,
         idempotent: false,
     }),
     compare_process_captures: sessionEvidence,
     compare_artifacts: sessionEvidence,
+    compare_wasm_interfaces: sessionEvidence,
     compare_functions: sessionEvidence,
     compare_bundles: effects({ mutatesSession: true }),
     find_changed_behavior: sessionEvidence,
@@ -473,11 +684,38 @@ export const annotationsFromEffects = (value) => ({
         value.launchesProcess ||
         value.accessesNetwork ||
         value.changesUiState ||
-        value.mayDiscardData),
-    destructiveHint: value.mayDiscardData,
+        value.mayDiscardData ||
+        value.executesForeignCode ||
+        value.mutatesDevice),
+    // MCP defines destructive as possibly non-additive changes to the
+    // environment. Running foreign code or changing a device cannot be bounded
+    // to additive effects, so either one is destructive even without data loss.
+    destructiveHint: value.mayDiscardData || value.executesForeignCode || value.mutatesDevice,
     idempotentHint: value.idempotent,
     openWorldHint: value.launchesProcess || value.accessesNetwork,
 });
+/**
+ * Tools whose results, successful or failed, carry only REA-authored session
+ * state or caller-supplied values, never text originating from an analysis
+ * target, a provider, a launcher or a device. Every other tool can return
+ * such text (strings, symbols, code, page text, scripts, captures, logs, file
+ * listings, provider diagnostics or captured process output), so a newly
+ * added tool is marked untrusted until it is audited into this set. A tool
+ * stays out when any error path can project external process output, as
+ * close_binary (provider cleanup diagnostics), binary_session (provider
+ * failure reasons and availability diagnostics) and the adb and apktool
+ * client probes (version output and stderr excerpts) can.
+ */
+export const TARGET_CONTENT_FREE_TOOLS = new Set([
+    "export_evidence_bundle",
+    "record_unknown",
+]);
+/**
+ * Whether results of the named tool, successful or failed, can carry text that
+ * originates from the analysis target. Unknown names are treated as target
+ * content so an unaudited path never loses the untrusted marker.
+ */
+export const toolReturnsTargetContent = (name) => !TARGET_CONTENT_FREE_TOOLS.has(name);
 /** Resolve the audited metadata for one public tool. */
 export const toolContractMetadata = (name) => {
     const audited = TOOL_EFFECTS[name];
@@ -490,5 +728,6 @@ export const toolContractMetadata = (name) => {
             .join(" "),
         effects: audited,
         annotations: annotationsFromEffects(audited),
+        returnsTargetContent: toolReturnsTargetContent(name),
     };
 };