rea-agents 6.4.0 → 6.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (1420) hide show
  1. package/DISCLAIMER.md +136 -0
  2. package/README.md +76 -16
  3. package/THIRD_PARTY_NOTICES.md +135 -0
  4. package/bridge/android/ReaJadxBridge.java +281 -25
  5. package/bridge/cutter/rea_bridge.py +825 -0
  6. package/bridge/ghidra/ReaGhidraAnalysisOptions.java +38 -0
  7. package/bridge/ghidra/ReaGhidraBridge.java +1232 -142
  8. package/bridge/ghidra/ReaGhidraBundleActivator.java +14 -0
  9. package/bridge/ghidra/ReaGhidraMipsSoftFloat.java +176 -0
  10. package/bridge/ghidra/ReaGhidraPrepareRaw.java +49 -0
  11. package/bridge/hopper_bridge.py +111 -69
  12. package/bridge/mitmproxy/capture.py +189 -13
  13. package/bridge/native/rea_lldb_tracer.py +88 -10
  14. package/bridge/process/ProcessRunTokenReader.swift +76 -34
  15. package/bridge/pwndbg/core_context.py +15 -2
  16. package/bridge/pwntools/layout_impl.py +5 -0
  17. package/bridge/pwntools/recorded_crash_impl.py +31 -10
  18. package/dist/adb/AdbCommand.js +148 -0
  19. package/dist/adb/AdbConfiguration.js +41 -7
  20. package/dist/adb/AdbDeviceOutput.js +59 -37
  21. package/dist/adb/AdbDirectoryListing.js +80 -0
  22. package/dist/adb/AdbHostFileName.js +34 -0
  23. package/dist/adb/AdbInputSnapshot.js +126 -0
  24. package/dist/adb/AdbProvider.js +1106 -346
  25. package/dist/adb/AdbShellOutput.js +146 -77
  26. package/dist/android/AndroidTargetSnapshot.js +7 -7
  27. package/dist/android/JadxAnalysis.js +53 -33
  28. package/dist/android/JadxConfiguration.js +283 -145
  29. package/dist/android/JadxDoctor.js +123 -0
  30. package/dist/android/JadxFailure.js +154 -0
  31. package/dist/android/JadxInterruption.js +13 -0
  32. package/dist/android/JadxJavaProbe.js +246 -0
  33. package/dist/android/JadxMcpTransport.js +53 -18
  34. package/dist/android/JadxProtocol.js +43 -2
  35. package/dist/android/JadxProvider.js +183 -102
  36. package/dist/android/JadxRelease.js +17 -2
  37. package/dist/android/JadxSession.js +35 -14
  38. package/dist/android/JadxWorkspaceRoot.js +157 -0
  39. package/dist/apktool/ApktoolCommandCleanup.js +134 -0
  40. package/dist/apktool/ApktoolCommandOutput.js +22 -0
  41. package/dist/apktool/ApktoolConfiguration.js +306 -45
  42. package/dist/apktool/ApktoolDecodeOutput.js +131 -42
  43. package/dist/apktool/ApktoolDecodedInventory.js +52 -0
  44. package/dist/apktool/ApktoolProvider.js +296 -340
  45. package/dist/apktool/ApktoolStringTables.js +178 -0
  46. package/dist/apktool/ApktoolWorkspace.js +162 -0
  47. package/dist/application/AnalysisContextQueries.js +5 -8
  48. package/dist/application/AnalysisDocument.js +19 -4
  49. package/dist/application/AnalysisProvider.js +36 -18
  50. package/dist/application/AppBundleExecutable.js +16 -9
  51. package/dist/application/BinaryTargetResolver.js +204 -40
  52. package/dist/application/BrowserEvidence.js +1 -1
  53. package/dist/application/BrowserObservationService.js +54 -9
  54. package/dist/application/BrowserScenarioCaptureService.js +26 -7
  55. package/dist/application/CallPathTracing.js +52 -13
  56. package/dist/application/CapabilityInventory.js +182 -36
  57. package/dist/application/ClaudeDesktopConfigLocation.js +152 -0
  58. package/dist/application/ClientConfigurationCleanup.js +73 -0
  59. package/dist/application/ClientConfigurationDocument.js +270 -151
  60. package/dist/application/ClientConfigurationFiles.js +51 -14
  61. package/dist/application/ClientConfigurationPublication.js +167 -0
  62. package/dist/application/ClientRegistrationEnvironment.js +40 -4
  63. package/dist/application/ClientRegistrationIdentity.js +112 -32
  64. package/dist/application/ClientRegistrationStatus.js +280 -84
  65. package/dist/application/DirectAnalysis.js +98 -30
  66. package/dist/application/DirectAnalysisCleanup.js +5 -1
  67. package/dist/application/DirectAnalysisStatus.js +13 -1
  68. package/dist/application/Doctor.js +192 -37
  69. package/dist/application/DoctorDiagnostics.js +59 -16
  70. package/dist/application/DoctorProviderIds.js +8 -0
  71. package/dist/application/DoctorScope.js +11 -2
  72. package/dist/application/DshCordisPatch.js +355 -0
  73. package/dist/application/DshCordisYaml.js +155 -0
  74. package/dist/application/EnhancedLiteralTracing.js +30 -16
  75. package/dist/application/EnhancedToolTypes.js +0 -1
  76. package/dist/application/EnhancedTools.js +154 -56
  77. package/dist/application/EvidenceBundleCommands.js +30 -7
  78. package/dist/application/EvidenceBundleFiles.js +29 -7
  79. package/dist/application/FunctionAnalysisEvidence.js +3 -0
  80. package/dist/application/GeminiClientSettings.js +25 -13
  81. package/dist/application/HermesClientHome.js +20 -0
  82. package/dist/application/HermesConfigurationYaml.js +312 -0
  83. package/dist/application/HopperDownload.js +11 -3
  84. package/dist/application/HopperReleaseFeed.js +71 -0
  85. package/dist/application/InventoryProjectionEvidence.js +0 -1
  86. package/dist/application/InvestigationProviders.js +14 -3
  87. package/dist/application/JsonFiles.js +110 -20
  88. package/dist/application/JsonInputFile.js +220 -62
  89. package/dist/application/LinuxHopper.js +218 -115
  90. package/dist/application/LinuxHopperPublisher.js +656 -0
  91. package/dist/application/MacHopper.js +203 -83
  92. package/dist/application/MacHopperPaths.js +40 -0
  93. package/dist/application/{MipsElfAbiFlags.js → MipsElfMetadata.js} +71 -10
  94. package/dist/application/MipsElfSharedLoad.js +164 -0
  95. package/dist/application/MipsGnuAttributes.js +90 -0
  96. package/dist/application/MsixPackageStorage.js +140 -0
  97. package/dist/application/ProgressReporter.js +1 -1
  98. package/dist/application/ProviderOperationExecution.js +15 -14
  99. package/dist/application/ReconstructionCoverageService.js +0 -1
  100. package/dist/application/ReconstructionObligationCandidates.js +20 -4
  101. package/dist/application/ReconstructionObligationLedgerDiagnostics.js +2 -2
  102. package/dist/application/ReconstructionObligationLedgerEvaluation.js +19 -33
  103. package/dist/application/ReconstructionObligationLedgerProjection.js +3 -72
  104. package/dist/application/ReconstructionObligationLedgerService.js +6 -2
  105. package/dist/application/ReconstructionObligationOriginalCases.js +10 -1
  106. package/dist/application/ReferenceSourceImport.js +24 -8
  107. package/dist/application/ReferenceSourceImportEntries.js +180 -37
  108. package/dist/application/ReferenceSourceImportPolicy.js +5 -3
  109. package/dist/application/ReferenceSourceImportTypes.js +0 -1
  110. package/dist/application/ReferenceSourceVcsAdapter.js +36 -17
  111. package/dist/application/RegularFileRead.js +117 -70
  112. package/dist/application/Setup.js +59 -21
  113. package/dist/application/SetupClientConfiguration.js +301 -66
  114. package/dist/application/SetupClients.js +25 -10
  115. package/dist/application/SetupHost.js +149 -51
  116. package/dist/application/SetupInstallFailure.js +58 -3
  117. package/dist/application/SetupPlan.js +94 -55
  118. package/dist/application/SetupRecoveryBackup.js +93 -0
  119. package/dist/application/SetupRegistrationEnvironment.js +14 -1
  120. package/dist/application/SetupSkill.js +303 -76
  121. package/dist/application/SourceLimitations.js +35 -0
  122. package/dist/application/SupportedClients.js +166 -32
  123. package/dist/application/TypeScriptEmittedSourceCandidates.js +26 -0
  124. package/dist/application/Uninstall.js +356 -110
  125. package/dist/application/UninstallFailure.js +14 -0
  126. package/dist/application/Update.js +54 -25
  127. package/dist/application/UpdateCommandProgress.js +66 -0
  128. package/dist/application/UpdateFailure.js +17 -0
  129. package/dist/application/UpdateMaintenance.js +18 -31
  130. package/dist/application/UpdateRuntime.js +198 -54
  131. package/dist/application/WebModuleTraceService.js +42 -22
  132. package/dist/application/WebNetworkCaptureService.js +24 -12
  133. package/dist/application/WebRuntimeService.js +41 -8
  134. package/dist/application/WebScriptExportService.js +6 -4
  135. package/dist/application/WebSourceLocationService.js +23 -8
  136. package/dist/application/WindowsCapabilities.js +18 -15
  137. package/dist/application/WorkflowEvidence.js +31 -1
  138. package/dist/application/analysisView/AnalysisViewService.js +46 -11
  139. package/dist/application/android/AndroidAnalysisService.js +5 -4
  140. package/dist/application/android/AndroidPackageInspection.js +25 -0
  141. package/dist/application/android/AndroidSearchEvidenceSummary.js +98 -0
  142. package/dist/application/artifacts/ArtifactComparisonEvidence.js +32 -0
  143. package/dist/application/binary/AnalysisProviderEvaluation.js +14 -11
  144. package/dist/application/binary/AnalysisProviderRegistry.js +365 -60
  145. package/dist/application/binary/AnalysisSnapshotCache.js +41 -20
  146. package/dist/application/binary/AnalysisSnapshotFiles.js +75 -9
  147. package/dist/application/binary/BinarySession.js +308 -117
  148. package/dist/application/binary/BinarySessionExecution.js +5 -4
  149. package/dist/application/binary/BinarySessionOpen.js +13 -6
  150. package/dist/application/binary/BinarySessionRecords.js +36 -7
  151. package/dist/application/binary/BinarySessionStatus.js +96 -27
  152. package/dist/application/binary/BinaryTargetSummary.js +9 -0
  153. package/dist/application/binary/CompositeProvider.js +116 -28
  154. package/dist/application/binary/LazyAnalysisProvider.js +6 -66
  155. package/dist/application/binary/SessionProviderRouter.js +16 -4
  156. package/dist/application/binaryDiagnostics/BinaryLayoutService.js +14 -5
  157. package/dist/application/binaryDiagnostics/PeResourcesService.js +25 -5
  158. package/dist/application/binaryDiagnostics/RecordedCrashService.js +17 -7
  159. package/dist/application/captures/PacketCaptureService.js +84 -0
  160. package/dist/application/closeOwnedWebResources.js +37 -0
  161. package/dist/application/electron/ElectronFusePort.js +1 -0
  162. package/dist/application/electron/ElectronFuseService.js +45 -0
  163. package/dist/application/evm/EvmInterfaceEvidence.js +11 -0
  164. package/dist/application/evm/EvmInterfaceService.js +5 -15
  165. package/dist/application/firmware/FirmwareAnalysisService.js +4 -3
  166. package/dist/application/flutter/DartAotInspection.js +26 -0
  167. package/dist/application/flutter/FlutterBuildAnalysisPort.js +1 -0
  168. package/dist/application/flutter/FlutterBuildAnalysisService.js +13 -0
  169. package/dist/application/frida/FridaInstrumentationPort.js +8 -0
  170. package/dist/application/frida/FridaInstrumentationService.js +310 -0
  171. package/dist/application/frida/fridaInputErrors.js +17 -0
  172. package/dist/application/go/GoBinaryPort.js +1 -0
  173. package/dist/application/go/GoBinaryService.js +79 -0
  174. package/dist/application/harmony/HarmonyApplicationService.js +17 -0
  175. package/dist/application/investigation/EvidenceLedger.js +43 -18
  176. package/dist/application/investigation/InvestigationRecords.js +12 -21
  177. package/dist/application/investigation/UnknownEvidence.js +22 -18
  178. package/dist/application/javascript/ElectronActiveObservationService.js +55 -25
  179. package/dist/application/javascript/ElectronBoundaryAnalysis.js +17 -3
  180. package/dist/application/javascript/ElectronBoundaryGraph.js +2 -0
  181. package/dist/application/javascript/ElectronBoundaryGraphCallPaths.js +144 -0
  182. package/dist/application/javascript/ElectronBoundaryGraphIpc.js +26 -7
  183. package/dist/application/javascript/ElectronBoundaryGraphNative.js +1 -1
  184. package/dist/application/javascript/ElectronBoundaryGraphWindows.js +61 -11
  185. package/dist/application/javascript/ElectronEvidence.js +1 -2
  186. package/dist/application/javascript/ElectronObservationService.js +41 -8
  187. package/dist/application/javascript/JavaScriptApplicationEvidence.js +21 -0
  188. package/dist/application/javascript/JavaScriptApplicationService.js +29 -14
  189. package/dist/application/javascript/JavaScriptApplicationWorkflowService.js +0 -1
  190. package/dist/application/javascript/JavaScriptArtifactAnalysis.js +119 -49
  191. package/dist/application/javascript/JavaScriptArtifactAnalysisTypes.js +30 -1
  192. package/dist/application/javascript/JavaScriptArtifactGraphAccumulator.js +51 -21
  193. package/dist/application/javascript/JavaScriptArtifactGraphBuilder.js +31 -7
  194. package/dist/application/javascript/JavaScriptArtifactGraphContext.js +28 -6
  195. package/dist/application/javascript/JavaScriptArtifactGraphDocuments.js +25 -14
  196. package/dist/application/javascript/JavaScriptArtifactGraphEvidence.js +3 -3
  197. package/dist/application/javascript/JavaScriptArtifactGraphFindings.js +186 -50
  198. package/dist/application/javascript/JavaScriptArtifactGraphStructure.js +173 -14
  199. package/dist/application/javascript/JavaScriptArtifactPathResolution.js +959 -188
  200. package/dist/application/javascript/JavaScriptArtifactReconstruction.js +57 -32
  201. package/dist/application/javascript/JavaScriptArtifactReconstructionInput.js +2 -0
  202. package/dist/application/javascript/JavaScriptModuleRelationships.js +34 -12
  203. package/dist/application/javascript/JavaScriptRecoveryService.js +29 -9
  204. package/dist/application/javascript/JavaScriptRuntimeObservationEvidence.js +1 -2
  205. package/dist/application/javascript/JavaScriptRuntimeObservationService.js +33 -9
  206. package/dist/application/javascript/JavaScriptRuntimeReconciliationService.js +0 -1
  207. package/dist/application/javascript/JavaScriptSemanticGraphAsyncProjection.js +4 -5
  208. package/dist/application/javascript/JavaScriptSemanticGraphBuilder.js +138 -43
  209. package/dist/application/javascript/JavaScriptSemanticGraphChildProcessProjection.js +13 -4
  210. package/dist/application/javascript/JavaScriptSemanticGraphConstruction.js +23 -3
  211. package/dist/application/javascript/JavaScriptSemanticGraphDataProjection.js +18 -5
  212. package/dist/application/javascript/JavaScriptSemanticGraphElectronProjection.js +67 -0
  213. package/dist/application/javascript/JavaScriptSemanticGraphFlowProjection.js +4 -6
  214. package/dist/application/javascript/JavaScriptSemanticGraphObjectProjection.js +2 -3
  215. package/dist/application/javascript/JavaScriptSemanticGraphResourceProjection.js +2 -3
  216. package/dist/application/javascript/JavaScriptSemanticGraphValueProjection.js +5 -8
  217. package/dist/application/javascript/JavaScriptSemanticTraceService.js +0 -1
  218. package/dist/application/managed/ManagedApplicationGraphService.js +0 -1
  219. package/dist/application/managed/ManagedMemberComparisonService.js +72 -54
  220. package/dist/application/managed/ManagedNativeVerificationService.js +0 -1
  221. package/dist/application/managed/ManagedReconstructionService.js +0 -1
  222. package/dist/application/native/NativeCallRoutes.js +78 -41
  223. package/dist/application/native/NativeDispatchMetadataInspection.js +6 -2
  224. package/dist/application/native/NativeUiActionTrace.js +43 -22
  225. package/dist/application/native/NativeValueTrace.js +65 -23
  226. package/dist/application/pcap/PcapAnalysisPort.js +1 -0
  227. package/dist/application/pcap/PcapAnalysisService.js +24 -0
  228. package/dist/application/process/ProcessCli.js +33 -13
  229. package/dist/application/reverse/ReverseEngineeringCommandPort.js +1 -0
  230. package/dist/application/reverse/ReverseEngineeringService.js +688 -0
  231. package/dist/application/rust/RustBinaryPort.js +1 -0
  232. package/dist/application/rust/RustBinaryService.js +82 -0
  233. package/dist/application/signals/SignalRecordingService.js +84 -0
  234. package/dist/application/sqlite/SqliteDatabaseCapability.js +30 -0
  235. package/dist/application/sqlite/SqliteDatabasePort.js +1 -0
  236. package/dist/application/sqlite/SqliteDatabaseService.js +76 -0
  237. package/dist/application/wasm/WasmArtifactPort.js +1 -0
  238. package/dist/application/wasm/WasmArtifactService.js +76 -0
  239. package/dist/application/wasm/WasmInterfaceComparisonService.js +188 -0
  240. package/dist/artifacts/AnalysisCleanupLease.js +119 -0
  241. package/dist/artifacts/ArtifactFileOperation.js +150 -0
  242. package/dist/artifacts/ArtifactHash.js +15 -3
  243. package/dist/artifacts/ArtifactPaths.js +4 -7
  244. package/dist/artifacts/ArtifactProvider.js +24 -9
  245. package/dist/artifacts/ArtifactReader.js +63 -5
  246. package/dist/artifacts/ArtifactResourceScope.js +92 -9
  247. package/dist/artifacts/AsarArtifactReader.js +186 -120
  248. package/dist/artifacts/AsarEntryStream.js +49 -17
  249. package/dist/artifacts/AsarListing.js +78 -0
  250. package/dist/artifacts/DirectoryArtifactReader.js +119 -28
  251. package/dist/artifacts/MachOSliceArtifactReader.js +153 -23
  252. package/dist/artifacts/NativeDmgArtifactReader.js +264 -62
  253. package/dist/artifacts/OrderedReads.js +57 -0
  254. package/dist/artifacts/SafeOutputTree.js +24 -7
  255. package/dist/artifacts/SafeOutputTreeCreationFailure.js +1 -0
  256. package/dist/artifacts/SafeOutputTreeReadback.js +10 -16
  257. package/dist/artifacts/ZipArtifactReader.js +150 -25
  258. package/dist/artifacts/apple/AppleAssetCatalogAnalysis.js +79 -68
  259. package/dist/artifacts/apple/DylibFileAccess.js +106 -0
  260. package/dist/artifacts/apple/DylibResolutionReader.js +72 -157
  261. package/dist/artifacts/apple/InterfaceBuilderAnalysis.js +108 -29
  262. package/dist/artifacts/apple/InterfaceBuilderDecodeBudget.js +81 -28
  263. package/dist/artifacts/apple/KeyedArchiveReader.js +23 -13
  264. package/dist/artifacts/apple/MachoLoadCommandReader.js +77 -61
  265. package/dist/artifacts/apple/NibArchive.js +11 -4
  266. package/dist/artifacts/apple/PlistNumberLiterals.js +106 -118
  267. package/dist/artifacts/extraction/ArtifactExtraction.js +21 -19
  268. package/dist/artifacts/hostExecutableMarking.js +16 -0
  269. package/dist/artifacts/inventory/ArtifactGraphConstruction.js +139 -41
  270. package/dist/artifacts/inventory/classify.js +36 -17
  271. package/dist/artifacts/inventory/hashStableRootArtifact.js +14 -7
  272. package/dist/artifacts/inventory/reader.js +36 -21
  273. package/dist/artifacts/inventory/scanCanonical.js +27 -21
  274. package/dist/artifacts/inventory/scanReader.js +36 -10
  275. package/dist/artifacts/javascript/JavaScriptArtifactFiles.js +166 -8
  276. package/dist/artifacts/readArtifactFileChunks.js +9 -0
  277. package/dist/artifacts/readStableArtifact.js +13 -11
  278. package/dist/browser/BrowserProcessStartup.js +20 -9
  279. package/dist/browser/BrowserScenarioPartialObservation.js +74 -92
  280. package/dist/browser/BrowserScenarioSecrets.js +176 -46
  281. package/dist/browser/CdpBrowserProvider.js +124 -102
  282. package/dist/browser/CdpCaptureDocuments.js +232 -102
  283. package/dist/browser/CdpCaptureDomSvg.js +80 -76
  284. package/dist/browser/CdpCaptureEventBodyShapes.js +9 -5
  285. package/dist/browser/CdpCaptureEventHandlers.js +23 -12
  286. package/dist/browser/CdpCaptureEvents.js +49 -10
  287. package/dist/browser/CdpCaptureStorage.js +22 -5
  288. package/dist/browser/CdpCaptureStorageFingerprints.js +54 -11
  289. package/dist/browser/CdpCaptureValues.js +12 -1
  290. package/dist/browser/CdpConnection.js +135 -30
  291. package/dist/browser/CdpElectronInspection.js +74 -64
  292. package/dist/browser/CdpElectronProvider.js +63 -6
  293. package/dist/browser/CdpElectronScriptEvents.js +4 -1
  294. package/dist/browser/CdpElectronScripts.js +4 -6
  295. package/dist/browser/CdpElectronWorkers.js +20 -4
  296. package/dist/browser/CdpEndpoint.js +143 -17
  297. package/dist/browser/CdpObservationSession.js +24 -8
  298. package/dist/browser/CdpPageCapture.js +68 -17
  299. package/dist/browser/CdpPageCaptureScripts.js +18 -13
  300. package/dist/browser/CdpPageCaptureWorkers.js +46 -11
  301. package/dist/browser/CdpSafeMetadata.js +32 -24
  302. package/dist/browser/CdpScreenshot.js +5 -14
  303. package/dist/browser/CdpSnapshotNodes.js +103 -0
  304. package/dist/browser/CdpSnapshotStrings.js +15 -0
  305. package/dist/browser/CdpTargetSession.js +76 -7
  306. package/dist/browser/CdpTargetSessionOwner.js +198 -0
  307. package/dist/browser/CdpWebMcpDiscovery.js +23 -6
  308. package/dist/browser/ElectronCaptureCleanup.js +82 -0
  309. package/dist/browser/ElectronProcessCleanup.js +91 -0
  310. package/dist/browser/PlaywrightBrowserScenarioProvider.js +75 -20
  311. package/dist/browser/PlaywrightElectronActiveActions.js +57 -9
  312. package/dist/browser/PlaywrightElectronActiveFuses.js +86 -0
  313. package/dist/browser/PlaywrightElectronActiveProjection.js +21 -4
  314. package/dist/browser/PlaywrightElectronActiveProvider.js +237 -175
  315. package/dist/browser/PlaywrightExecutionBoundary.js +6 -4
  316. package/dist/browser/PlaywrightScenarioBrowser.js +240 -91
  317. package/dist/browser/PlaywrightScenarioEvents.js +287 -38
  318. package/dist/browser/PlaywrightScenarioServiceWorkers.js +336 -0
  319. package/dist/browser/PlaywrightScenarioSession.js +151 -46
  320. package/dist/browser/PlaywrightScenarioStorage.js +15 -7
  321. package/dist/browser/StructuredFieldToken.js +53 -0
  322. package/dist/browser/WebArtifactCleanup.js +53 -0
  323. package/dist/browser/WebSourceMapFetcher.js +181 -89
  324. package/dist/browser/assets/LocalWebScriptArtifacts.js +24 -3
  325. package/dist/browser/assets/PublishWebScripts.js +13 -2
  326. package/dist/browser/assets/ScenarioScriptCapture.js +2 -1
  327. package/dist/browser/assets/WebArtifactReads.js +15 -3
  328. package/dist/browser/assets/WebSourceLocationArtifacts.js +47 -3
  329. package/dist/browser/execution/CdpRuntimeSession.js +36 -7
  330. package/dist/browser/execution/CdpWebRuntimeProvider.js +22 -4
  331. package/dist/browser/history/CaptureFailures.js +29 -10
  332. package/dist/browser/history/CaptureFormatError.js +2 -2
  333. package/dist/browser/history/{HarJson.js → CaptureJson.js} +14 -4
  334. package/dist/browser/history/CaptureRedaction.js +16 -3
  335. package/dist/browser/history/CaptureRelease.js +20 -2
  336. package/dist/browser/history/HarCapture.js +54 -30
  337. package/dist/browser/history/HarSchema.js +36 -36
  338. package/dist/browser/history/HistoricalCaptureDecoder.js +93 -25
  339. package/dist/browser/history/NodeCaptureAdapter.js +48 -0
  340. package/dist/browser/history/{HarCaptureProcess.js → NodeCaptureProcess.js} +18 -9
  341. package/dist/browser/history/QlogCapture.js +385 -0
  342. package/dist/browser/history/SazCapture.js +130 -0
  343. package/dist/browser/history/SazHttp.js +61 -0
  344. package/dist/browser/history/SazMetadata.js +55 -0
  345. package/dist/browser/history/SazProjection.js +90 -0
  346. package/dist/browser/modules/NativeModuleResolver.js +248 -131
  347. package/dist/browser/modules/WebModuleArtifacts.js +49 -3
  348. package/dist/browser/network/PlaywrightNetworkContent.js +67 -9
  349. package/dist/browser/network/PlaywrightScenarioNetwork.js +249 -26
  350. package/dist/captures/TsharkCaptureProvider.js +377 -0
  351. package/dist/captures/parseFieldDiscovery.js +66 -0
  352. package/dist/captures/parsePacketOutput.js +21 -0
  353. package/dist/catalogIdentity.js +58 -42
  354. package/dist/cli/adbCommands.js +20 -21
  355. package/dist/cli/analysisViewCommands.js +1 -1
  356. package/dist/cli/androidCommands.js +13 -16
  357. package/dist/cli/apktoolCommands.js +14 -25
  358. package/dist/cli/applicationCommands.js +44 -17
  359. package/dist/cli/artifactCommands.js +1 -1
  360. package/dist/cli/binaryDiagnosticsCommands.js +17 -13
  361. package/dist/cli/browserAdvancedCommands.js +46 -26
  362. package/dist/cli/browserCommands.js +59 -33
  363. package/dist/cli/captureCommands.js +72 -0
  364. package/dist/cli/cliResultOutput.js +274 -0
  365. package/dist/cli/coreBinaryCommands.js +77 -30
  366. package/dist/cli/coreNativeCommands.js +53 -31
  367. package/dist/cli/cutterCommands.js +88 -0
  368. package/dist/cli/electronCommands.js +76 -13
  369. package/dist/cli/evmCommands.js +9 -19
  370. package/dist/cli/finishAnalysisCommand.js +52 -0
  371. package/dist/cli/firmwareCommands.js +20 -50
  372. package/dist/cli/flutterCommands.js +53 -0
  373. package/dist/cli/fridaCommands.js +219 -0
  374. package/dist/cli/goCommands.js +20 -0
  375. package/dist/cli/interactiveSetup.js +11 -1
  376. package/dist/cli/javascriptApplicationAnalysis.js +1 -1
  377. package/dist/cli/javascriptRecoveryCommands.js +18 -23
  378. package/dist/cli/jebCommands.js +2 -14
  379. package/dist/cli/jsonOutput.js +2 -2
  380. package/dist/cli/managedCommands.js +31 -3
  381. package/dist/cli/options.js +26 -2
  382. package/dist/cli/pcapCommands.js +29 -0
  383. package/dist/cli/processCommands.js +1 -1
  384. package/dist/cli/reverseEngineeringCommands.js +268 -0
  385. package/dist/cli/rustCommands.js +20 -0
  386. package/dist/cli/setupCommands.js +41 -12
  387. package/dist/cli/signalCommands.js +72 -0
  388. package/dist/cli/sqliteCommands.js +52 -0
  389. package/dist/cli/utilityCommands.js +116 -74
  390. package/dist/cli/wasmCommands.js +50 -0
  391. package/dist/cli/webModuleCommands.js +27 -38
  392. package/dist/cli/webNetworkCaptureCommands.js +10 -9
  393. package/dist/cli/webRuntimeCommands.js +15 -6
  394. package/dist/cli/webSourceLocationCommands.js +14 -33
  395. package/dist/cli-runtime/AnalysisCleanupLease-CWfTGYKd.js +103 -0
  396. package/dist/cli-runtime/AnalysisProvider-BGrYaMVo.js +38 -0
  397. package/dist/cli-runtime/AnalysisSnapshotCache-BjRlXeUS.js +711 -0
  398. package/dist/cli-runtime/ArtifactFileOperation-Dg4BcoEM.js +122 -0
  399. package/dist/cli-runtime/ArtifactReader-DMwm42bk.js +78 -0
  400. package/dist/cli-runtime/ArtifactResourceScope-CokZGcII.js +175 -0
  401. package/dist/cli-runtime/AsarHeader-BxwU17DJ.js +31 -0
  402. package/dist/cli-runtime/BinarySessionStatus-DRhjr7Vb.js +212 -0
  403. package/dist/cli-runtime/BinaryTargetResolver-tuCTjBlQ.js +1238 -0
  404. package/dist/cli-runtime/BoundedFileBytes-DRtiQNAQ.js +43 -0
  405. package/dist/cli-runtime/CdpTargetSession-CQ08KHbh.js +925 -0
  406. package/dist/cli-runtime/ClientConfigPath-Dn-V_GUf.js +255 -0
  407. package/dist/cli-runtime/ClientConfigurationDocument-C9T8MNGc.js +2021 -0
  408. package/dist/cli-runtime/ClientRegistrationStatus-PnD29RTX.js +585 -0
  409. package/dist/cli-runtime/CurrentEntrypointPath-m7QCIVN0.js +14 -0
  410. package/dist/cli-runtime/DirectAnalysis-C5NyUryV.js +581 -0
  411. package/dist/cli-runtime/DirectoryArtifactReader-CokAJ8vo.js +448 -0
  412. package/dist/cli-runtime/Doctor-DrkWsav4.js +668 -0
  413. package/dist/cli-runtime/ElectronFileScope-AP7VoVr7.js +1109 -0
  414. package/dist/cli-runtime/ElectronFuseFailures-DsjXR7Xp.js +609 -0
  415. package/dist/cli-runtime/ExecFileOutput-D6KLYTve.js +119 -0
  416. package/dist/cli-runtime/InterfaceBuilderDecodeBudget-CW1IO3dG.js +298 -0
  417. package/dist/cli-runtime/InventoryProjectionEvidence-DTH5QAqL.js +49 -0
  418. package/dist/cli-runtime/InvestigationProviders-CFh4a64d.js +118 -0
  419. package/dist/cli-runtime/JavaScriptApplicationEvidenceGraph-gOmPB2L6.js +160 -0
  420. package/dist/cli-runtime/JavaScriptApplicationWorkflowEvidence-WZgtK_Ok.js +75 -0
  421. package/dist/cli-runtime/JavaScriptWorkerMemoryLimit-B1bwMM1a.js +86 -0
  422. package/dist/cli-runtime/JebMcpEndpoint-BEalGZh9.js +710 -0
  423. package/dist/cli-runtime/JsonFiles-uvd6ZyQi.js +600 -0
  424. package/dist/cli-runtime/KunaInstallation-P0j3x851.js +1781 -0
  425. package/dist/cli-runtime/MacCodeSignature-MgYbRK_H.js +24 -0
  426. package/dist/cli-runtime/MacHopperPaths-bGzqjF1Z.js +34 -0
  427. package/dist/cli-runtime/MachoLoadCommandReader-CZm6N5vF.js +330 -0
  428. package/dist/cli-runtime/ManagedSnapshot-CPE9C3OD.js +4481 -0
  429. package/dist/cli-runtime/OwnedCommandCleanup-BN_V6Erc.js +187 -0
  430. package/dist/cli-runtime/OwnedRegularFile-D1f5nUCx.js +256 -0
  431. package/dist/cli-runtime/OwnedStagedOutput-D31dOozz.js +126 -0
  432. package/dist/cli-runtime/PrivateRuntimeRoot-Cd23u6jd.js +296 -0
  433. package/dist/cli-runtime/ProcessOwnership-CtrNr6ee.js +545 -0
  434. package/dist/cli-runtime/ProcessOwnershipObservation-C006iCtZ.js +920 -0
  435. package/dist/cli-runtime/ProviderDeadline-rSuH4Pm8.js +148 -0
  436. package/dist/cli-runtime/ProviderOperationExecution-CmU-XrQr.js +38 -0
  437. package/dist/cli-runtime/ProviderProcess-D87A7ctp.js +770 -0
  438. package/dist/cli-runtime/RegularFileRead-mbgGYtxe.js +125 -0
  439. package/dist/cli-runtime/SafeOutputTree-i904hd_2.js +525 -0
  440. package/dist/cli-runtime/SetupHost-CMPmPraB.js +1268 -0
  441. package/dist/cli-runtime/SharedStartupAttempt-BxKyf3Uv.js +1424 -0
  442. package/dist/cli-runtime/StableFileHash-Ame_h3lY.js +61 -0
  443. package/dist/cli-runtime/SupportedClients-DMafjitv.js +1066 -0
  444. package/dist/cli-runtime/UninstallFailure-1blyKXHE.js +22 -0
  445. package/dist/cli-runtime/Update-DAsASWlE.js +143 -0
  446. package/dist/cli-runtime/UpdateFailure-BcFNxEZZ.js +24 -0
  447. package/dist/cli-runtime/WindowsBatchCommand-Cx9kaVNf.js +97 -0
  448. package/dist/cli-runtime/WindowsNativeLoader-BqyZO0ZD.js +142 -0
  449. package/dist/cli-runtime/ZipArtifactReader-Jed69LEL.js +252 -0
  450. package/dist/cli-runtime/analysisErrorCleanup-COdAmDsb.js +33 -0
  451. package/dist/cli-runtime/appleArchiveFormat-Bb3G5CCI.js +269 -0
  452. package/dist/cli-runtime/application__DirectAnalysisStatus-F74bu9oy.js +150 -0
  453. package/dist/cli-runtime/application__EnhancedTools-Bg51b0Yp.js +1820 -0
  454. package/dist/cli-runtime/application__FunctionAnalysisEvidence-DBWIaYCh.js +41 -0
  455. package/dist/cli-runtime/application__ReconstructionCoverageService-AEPNpZqJ.js +32 -0
  456. package/dist/cli-runtime/application__ReconstructionObligationLedgerService-Cl9cPEZf.js +828 -0
  457. package/dist/cli-runtime/application__Setup-DwQzEewK.js +526 -0
  458. package/dist/cli-runtime/application__Uninstall-BOf9oyvQ.js +468 -0
  459. package/dist/cli-runtime/application__UpdateRuntime-CzWkRJHa.js +435 -0
  460. package/dist/cli-runtime/application__android__AndroidApplicationService-shW_aKlj.js +31 -0
  461. package/dist/cli-runtime/application__apple__AppleApplicationService-DIv6d3wB.js +31 -0
  462. package/dist/cli-runtime/application__harmony__HarmonyApplicationService-OIUFVQFV.js +31 -0
  463. package/dist/cli-runtime/application__javascript__ElectronActiveObservationService-wvCh72hK.js +118 -0
  464. package/dist/cli-runtime/application__javascript__ElectronObservationService-SydXPCwM.js +88 -0
  465. package/dist/cli-runtime/application__javascript__JavaScriptApplicationService-o0uEsjEc.js +12254 -0
  466. package/dist/cli-runtime/application__javascript__JavaScriptApplicationWorkflowService-BAheG_71.js +2336 -0
  467. package/dist/cli-runtime/application__javascript__JavaScriptRuntimeReconciliationService-Cnn4GP8q.js +88 -0
  468. package/dist/cli-runtime/application__javascript__JavaScriptSemanticTraceService-CmvLfV1A.js +299 -0
  469. package/dist/cli-runtime/artifacts__ArtifactProvider-wx2K0F2I.js +2205 -0
  470. package/dist/cli-runtime/binary-CWVNJhAC.js +19608 -0
  471. package/dist/cli-runtime/catalogIdentity-DAEEsOdX.js +1112 -0
  472. package/dist/cli-runtime/cli.js +44469 -0
  473. package/dist/cli-runtime/cliOutput-CgSuw782.js +163 -0
  474. package/dist/cli-runtime/cliOutput.js +5 -0
  475. package/dist/cli-runtime/cliResultOutput-10sd6xGx.js +1453 -0
  476. package/dist/cli-runtime/cliResultOutput.js +6 -0
  477. package/dist/cli-runtime/composition__browserScenario-BtPb1c1y.js +3414 -0
  478. package/dist/cli-runtime/composition__electronObservation-Bk8R6DJo.js +614 -0
  479. package/dist/cli-runtime/composition__electronScenario-BVF0qStH.js +916 -0
  480. package/dist/cli-runtime/cutterToolContracts-BQtG_Nzo.js +5267 -0
  481. package/dist/cli-runtime/doctorRuntime-B__SIpm-.js +478 -0
  482. package/dist/cli-runtime/dotnet__ManagedStaticProvider-DO5Yzcp4.js +5 -0
  483. package/dist/cli-runtime/errorSchemas-Ixz_q7qt.js +655 -0
  484. package/dist/cli-runtime/homeDirectory-DC_DeJIg.js +18 -0
  485. package/dist/cli-runtime/javascriptApplicationAnalysis-Dk6yBV8g.js +2088 -0
  486. package/dist/cli-runtime/javascriptExportReturnShapeProjection-CObOIiQ6.js +78 -0
  487. package/dist/cli-runtime/javascriptExportShapeComparisonSchemas-DpwuBenh.js +1244 -0
  488. package/dist/cli-runtime/javascriptRuntimeReconciliation-C6ZgWMys.js +1509 -0
  489. package/dist/cli-runtime/javascriptRuntimeReconciliationSchemas-D6tZKUQs.js +247 -0
  490. package/dist/cli-runtime/javascriptSemanticTraceSchemas-C7m0b6_w.js +126 -0
  491. package/dist/cli-runtime/lipo-DPQ6qurH.js +394 -0
  492. package/dist/cli-runtime/logger-BuDJ9xxO.js +48 -0
  493. package/dist/cli-runtime/machoContainer-Cy98bkFm.js +352 -0
  494. package/dist/cli-runtime/managedApplicationGraph-BazVqpJv.js +1136 -0
  495. package/dist/cli-runtime/managedToolContracts-BuFkMBH5.js +99 -0
  496. package/dist/cli-runtime/mcpDoctor.js +361 -0
  497. package/dist/cli-runtime/mcpStartupPolicy-imCbM3qo.js +28 -0
  498. package/dist/cli-runtime/native__NativeMacOSProvider-DTcRhuGA.js +5502 -0
  499. package/dist/cli-runtime/officialToolContracts-CzzVLx8I.js +1522 -0
  500. package/dist/cli-runtime/peMachine-B9ggfSJJ.js +95 -0
  501. package/dist/cli-runtime/propertyListKeys-D5dSASEy.js +355 -0
  502. package/dist/cli-runtime/providerCleanupError-BhsJyAhk.js +25 -0
  503. package/dist/cli-runtime/providerIdentities-Ao1XTvwx.js +31 -0
  504. package/dist/cli-runtime/providerStartupTimeout-B2tF2LtZ.js +17 -0
  505. package/dist/cli-runtime/readArtifactFileChunks-BbTL_PtB.js +129 -0
  506. package/dist/cli-runtime/reconstructionObligationLedgerSchemas-Bi6sect1.js +22156 -0
  507. package/dist/cli-runtime/rolldown-runtime-DXoylpqc.js +121 -0
  508. package/dist/cli-runtime/runtimeVersion-CMGd0bDu.js +23 -0
  509. package/dist/cli-runtime/safeJson-DKKACtdy.js +25 -0
  510. package/dist/cli-runtime/scanCanonical-CcDFUr-w.js +2594 -0
  511. package/dist/cli-runtime/snapshotEnvironment-Yvx5qwsl.js +196 -0
  512. package/dist/cli-runtime/toolContracts-CJzEyZ38.js +3795 -0
  513. package/dist/cli-runtime/toolOutputSchemaGroups-BqdSzySu.js +12249 -0
  514. package/dist/cli-runtime/workflowInputError-BP8z9Wxl.js +26 -0
  515. package/dist/cli.js +48 -5
  516. package/dist/cliBrowserScenarioCommands.js +41 -7
  517. package/dist/cliCommandNames.js +48 -0
  518. package/dist/cliEvidenceCommands.js +0 -1
  519. package/dist/cliJavaScriptRuntimeCommands.js +16 -14
  520. package/dist/cliJsonInput.js +12 -4
  521. package/dist/cliLogging.js +66 -15
  522. package/dist/cliObservationOptions.js +9 -0
  523. package/dist/cliOutput.js +105 -7
  524. package/dist/composition/binary.js +19 -2
  525. package/dist/composition/captures.js +3 -0
  526. package/dist/composition/directAnalysis.js +36 -11
  527. package/dist/composition/electronFuses.js +4 -0
  528. package/dist/composition/evm.js +12 -0
  529. package/dist/composition/flutter.js +3 -0
  530. package/dist/composition/go.js +4 -0
  531. package/dist/composition/javascriptAnalysisWorkerProcess.js +8 -8
  532. package/dist/composition/jeb.js +45 -5
  533. package/dist/composition/pcap.js +3 -0
  534. package/dist/composition/resolveWindowsProviderExecutable.js +61 -0
  535. package/dist/composition/reverseEngineering.js +29 -0
  536. package/dist/composition/rust.js +4 -0
  537. package/dist/composition/signals.js +3 -0
  538. package/dist/composition/sqlite.js +4 -0
  539. package/dist/composition/wasm.js +22 -0
  540. package/dist/composition/webNetworkCaptures.js +7 -2
  541. package/dist/config/environment.js +79 -4
  542. package/dist/config/ghidraDisabledAnalyzers.js +25 -0
  543. package/dist/config/homeDirectory.js +9 -6
  544. package/dist/config/mcpInputSchemaProfile.js +5 -1
  545. package/dist/config/mcpOutputSchemaProfile.js +22 -0
  546. package/dist/config/parseConfig.js +28 -34
  547. package/dist/config/parsers.js +4 -3
  548. package/dist/config/{ghidraStartupTimeout.js → providerStartupTimeout.js} +7 -3
  549. package/dist/contracts/adb/adbToolContracts.js +8 -8
  550. package/dist/contracts/analysisDetail.js +6 -3
  551. package/dist/contracts/analysisViewApiSurfaceExample.js +68 -0
  552. package/dist/contracts/analysisViewToolContracts.js +65 -3
  553. package/dist/contracts/android/androidToolContracts.js +17 -8
  554. package/dist/contracts/apktool/apktoolToolContracts.js +5 -1
  555. package/dist/contracts/applicationToolContracts.js +17 -2
  556. package/dist/contracts/artifactComparisonExample.js +18 -14
  557. package/dist/contracts/artifactToolContracts.js +16 -3
  558. package/dist/contracts/browserScenarioToolContracts.js +1 -1
  559. package/dist/contracts/browserToolContracts.js +13 -1
  560. package/dist/contracts/captures/captureToolContracts.js +42 -0
  561. package/dist/contracts/compactInputSchema.js +39 -12
  562. package/dist/contracts/cutterToolContracts.js +84 -0
  563. package/dist/contracts/enhancedToolContracts.js +2 -2
  564. package/dist/contracts/evm/evmToolContracts.js +30 -15
  565. package/dist/contracts/firmware/firmwareToolContracts.js +1 -1
  566. package/dist/contracts/flutter/flutterToolContracts.js +47 -0
  567. package/dist/contracts/fridaRemoteAddress.js +23 -0
  568. package/dist/contracts/fridaToolContracts.js +274 -0
  569. package/dist/contracts/functionComparisonExample.js +12 -1
  570. package/dist/contracts/gdbToolContracts.js +102 -0
  571. package/dist/contracts/go/goToolContracts.js +20 -0
  572. package/dist/contracts/hopperMemoryContracts.js +15 -0
  573. package/dist/contracts/inputSchemaPresentation.js +199 -38
  574. package/dist/contracts/investigationExamples.js +1 -0
  575. package/dist/contracts/javascript/electronToolContracts.js +27 -2
  576. package/dist/contracts/javascript/javascriptExportShapeComparisonExample.js +1 -0
  577. package/dist/contracts/javascript/javascriptRecoveryToolContracts.js +13 -1
  578. package/dist/contracts/javascript/javascriptRuntimeReconciliationExample.js +1 -0
  579. package/dist/contracts/jsonSchemaKeywords.js +29 -0
  580. package/dist/contracts/managed/managedToolContracts.js +43 -4
  581. package/dist/contracts/managed/managedWorkflowExamples.js +10 -1
  582. package/dist/contracts/managed/managedWorkflowToolContracts.js +4 -30
  583. package/dist/contracts/mobileApplicationGraphExamples.js +27 -12
  584. package/dist/contracts/native/binaryDiagnosticsToolContracts.js +3 -2
  585. package/dist/contracts/native/nativeToolContracts.js +10 -6
  586. package/dist/contracts/officialToolContracts.js +7 -7
  587. package/dist/contracts/pcap/pcapToolContracts.js +33 -0
  588. package/dist/contracts/providerSelection.js +1 -0
  589. package/dist/contracts/reconstructionReadinessExample.js +126 -119
  590. package/dist/contracts/reverseEngineeringToolContracts.js +52 -0
  591. package/dist/contracts/rizinDebugToolContracts.js +97 -0
  592. package/dist/contracts/rust/rustToolContracts.js +20 -0
  593. package/dist/contracts/sessionLifecycleInputs.js +34 -2
  594. package/dist/contracts/sessionToolContracts.js +4 -4
  595. package/dist/contracts/sessionToolSchemas.js +14 -0
  596. package/dist/contracts/signals/signalToolContracts.js +40 -0
  597. package/dist/contracts/sqlite/sqliteToolContracts.js +36 -0
  598. package/dist/contracts/toolContractExamples.js +29 -0
  599. package/dist/contracts/toolContractTypes.js +2 -0
  600. package/dist/contracts/toolContracts.js +26 -0
  601. package/dist/contracts/toolEffects.js +252 -9
  602. package/dist/contracts/toolOutputSchemaGroups.js +78 -32
  603. package/dist/contracts/toolOutputSchemaPrimitives.js +118 -10
  604. package/dist/contracts/toolSchemaMetadata.js +102 -16
  605. package/dist/contracts/unknownContractExamples.js +1 -1
  606. package/dist/contracts/wasm/wasmComparisonContracts.js +52 -0
  607. package/dist/contracts/wasm/wasmToolContracts.js +33 -0
  608. package/dist/contracts/webNetworkCaptureToolContracts.js +15 -4
  609. package/dist/cutter/CutterBridgeClient.js +760 -0
  610. package/dist/cutter/CutterBridgeService.js +187 -0
  611. package/dist/doctorRuntime.js +41 -8
  612. package/dist/domain/adb/adbDeviceAnalysis.js +45 -5
  613. package/dist/domain/analysisErrorBase.js +79 -2
  614. package/dist/domain/analysisErrorCleanup.js +4 -2
  615. package/dist/domain/analysisErrorCore.js +32 -0
  616. package/dist/domain/analysisErrorPresentation.js +80 -20
  617. package/dist/domain/analysisErrorProjection.js +72 -37
  618. package/dist/domain/analysisProfile.js +7 -3
  619. package/dist/domain/analysisSearch.js +26 -0
  620. package/dist/domain/analysisSnapshot.js +312 -185
  621. package/dist/domain/analysisView/WebNetworkApiSurfaceAccumulator.js +353 -0
  622. package/dist/domain/analysisView/analysisView.js +391 -44
  623. package/dist/domain/analysisView/analysisViewCoverage.js +32 -0
  624. package/dist/domain/analysisView/analysisViewDataAdmission.js +86 -0
  625. package/dist/domain/analysisView/analysisViewErrors.js +4 -0
  626. package/dist/domain/analysisView/analysisViewParent.js +12 -0
  627. package/dist/domain/analysisView/analysisViewText.js +29 -0
  628. package/dist/domain/analysisView/androidPackageView.js +102 -0
  629. package/dist/domain/analysisView/artifactInventoryView.js +126 -0
  630. package/dist/domain/analysisView/binaryLayoutView.js +11 -4
  631. package/dist/domain/analysisView/dartAotView.js +93 -0
  632. package/dist/domain/analysisView/evmInterfaceView.js +105 -0
  633. package/dist/domain/analysisView/interfaceBuilderView.js +182 -0
  634. package/dist/domain/analysisView/javascriptApplicationCoverage.js +27 -0
  635. package/dist/domain/analysisView/javascriptApplicationView.js +123 -49
  636. package/dist/domain/analysisView/javascriptFactsView.js +92 -0
  637. package/dist/domain/analysisView/javascriptModuleReferences.js +37 -0
  638. package/dist/domain/analysisView/machoView.js +186 -0
  639. package/dist/domain/analysisView/managedArtifactView.js +108 -0
  640. package/dist/domain/analysisView/managedMemberView.js +215 -0
  641. package/dist/domain/analysisView/nativeFunctionView.js +20 -25
  642. package/dist/domain/analysisView/pcapCaptureView.js +264 -0
  643. package/dist/domain/analysisView/qlogCaptureView.js +198 -0
  644. package/dist/domain/analysisView/wasmArtifactView.js +162 -0
  645. package/dist/domain/analysisView/webNetworkApiSurfaceView.js +123 -0
  646. package/dist/domain/analysisView/webNetworkCaptureView.js +388 -0
  647. package/dist/domain/android/androidAnalysis.js +36 -2
  648. package/dist/domain/android/androidApplication.js +37 -64
  649. package/dist/domain/apktool/apktoolResourceAnalysis.js +70 -8
  650. package/dist/domain/apple/appleApplication.js +70 -87
  651. package/dist/domain/apple/appleArchiveFormat.js +184 -0
  652. package/dist/domain/apple/appleAssetCatalog.js +15 -0
  653. package/dist/domain/apple/appleBundleAnatomy.js +57 -69
  654. package/dist/domain/apple/dyldPaths.js +9 -2
  655. package/dist/domain/apple/dylibResolution.js +24 -10
  656. package/dist/domain/apple/dylibResolutionFindings.js +8 -9
  657. package/dist/domain/apple/interfaceBuilderGraph.js +78 -33
  658. package/dist/domain/apple/interfaceBuilderKeyedArchive.js +39 -12
  659. package/dist/domain/apple/jvmClassFile.js +226 -0
  660. package/dist/domain/apple/keyedArchive.js +39 -17
  661. package/dist/domain/apple/machoContainer.js +123 -8
  662. package/dist/domain/apple/machoCpuIdentity.js +4 -0
  663. package/dist/domain/apple/plistNumbers.js +67 -5
  664. package/dist/domain/apple/plistValue.js +95 -19
  665. package/dist/domain/artifactComparison.js +116 -37
  666. package/dist/domain/artifactDecompressionBudget.js +26 -0
  667. package/dist/domain/artifactGraph.js +18 -9
  668. package/dist/domain/artifactIdentity.js +4 -1
  669. package/dist/domain/artifactInspection.js +34 -3
  670. package/dist/domain/artifactInventoryEvidence.js +146 -40
  671. package/dist/domain/binaryTarget.js +251 -109
  672. package/dist/domain/binaryTargetTypes.js +24 -1
  673. package/dist/domain/browserNetworkEvidence.js +24 -3
  674. package/dist/domain/browserObservation.js +92 -56
  675. package/dist/domain/browserObservationError.js +4 -4
  676. package/dist/domain/browserObservationSchemas.js +4 -1
  677. package/dist/domain/browserScenarioCapture.js +11 -1
  678. package/dist/domain/browserScenarioCaptureLimits.js +34 -0
  679. package/dist/domain/browserScenarioCaptureValues.js +76 -2
  680. package/dist/domain/browserScenarioDiff.js +120 -11
  681. package/dist/domain/browserScenarioDiffEvidence.js +44 -13
  682. package/dist/domain/browserScenarioDiffValues.js +10 -3
  683. package/dist/domain/browserScenarioNetworkComparison.js +158 -0
  684. package/dist/domain/browserScenarioNormalization.js +10 -13
  685. package/dist/domain/browserScenarioValues.js +7 -13
  686. package/dist/domain/browserSession.js +2 -2
  687. package/dist/domain/bundleComparison.js +1 -5
  688. package/dist/domain/callPath.js +40 -3
  689. package/dist/domain/captures/packetCapture.js +139 -0
  690. package/dist/domain/captures/packetFields.js +81 -0
  691. package/dist/domain/changedBehavior.js +43 -41
  692. package/dist/domain/comparisonSourceEvidence.js +6 -0
  693. package/dist/domain/dosCom.js +2 -2
  694. package/dist/domain/dosMz.js +66 -19
  695. package/dist/domain/electron/electronFuseEvidence.js +42 -0
  696. package/dist/domain/electron/electronFuses.js +360 -0
  697. package/dist/domain/elfFixedHeader.js +66 -0
  698. package/dist/domain/evidence.js +105 -39
  699. package/dist/domain/evidenceBundle.js +67 -22
  700. package/dist/domain/evidenceErrors.js +5 -0
  701. package/dist/domain/evm/evmInterface.js +18 -4
  702. package/dist/domain/evm/solidityMetadata.js +70 -0
  703. package/dist/domain/explicitSensitiveFailure.js +44 -23
  704. package/dist/domain/fileSnapshotObservation.js +25 -0
  705. package/dist/domain/firmware/firmwareAnalysis.js +29 -0
  706. package/dist/domain/fixedTupleSchema.js +9 -0
  707. package/dist/domain/flutter/flutterBuildAnalysis.js +141 -0
  708. package/dist/domain/functionCallCoverage.js +60 -0
  709. package/dist/domain/functionComparisonDimensions.js +136 -18
  710. package/dist/domain/functionComparisonNormalization.js +83 -19
  711. package/dist/domain/functionComparisonResults.js +7 -6
  712. package/dist/domain/functionComparisonSchemas.js +14 -3
  713. package/dist/domain/functionDossierEvidence.js +4 -0
  714. package/dist/domain/go/goBinary.js +96 -0
  715. package/dist/domain/harmony/harmonyApplication.js +156 -0
  716. package/dist/domain/hopperErrors.js +19 -18
  717. package/dist/domain/hopperPublisher.js +12 -0
  718. package/dist/domain/hopperValues.js +135 -34
  719. package/dist/domain/javascript/electronActiveObservation.js +1 -0
  720. package/dist/domain/javascript/electronObservation.js +4 -1
  721. package/dist/domain/javascript/electronStaticAnalysisBrowser.js +94 -33
  722. package/dist/domain/javascript/electronStaticAnalysisIpc.js +3 -1
  723. package/dist/domain/javascript/electronStaticAnalysisNative.js +19 -5
  724. package/dist/domain/javascript/electronStaticAnalysisValues.js +14 -28
  725. package/dist/domain/javascript/electronStaticOptionObjects.js +45 -0
  726. package/dist/domain/javascript/electronWrappedCallPaths.js +551 -0
  727. package/dist/domain/javascript/htmlArtifactReferences.js +94 -4
  728. package/dist/domain/javascript/javascriptAnalysisResourceControls.js +37 -1
  729. package/dist/domain/javascript/javascriptApplicationAnalysis.js +7 -0
  730. package/dist/domain/javascript/javascriptApplicationChangeGraph.js +10 -2
  731. package/dist/domain/javascript/javascriptApplicationEvidenceSchemas.js +1 -1
  732. package/dist/domain/javascript/javascriptApplicationGraph.js +17 -1
  733. package/dist/domain/javascript/javascriptApplicationGraphSchemas.js +1 -0
  734. package/dist/domain/javascript/javascriptApplicationProjectionResources.js +8 -0
  735. package/dist/domain/javascript/javascriptApplicationVersionComparisonSchemas.js +3 -1
  736. package/dist/domain/javascript/javascriptApplicationVersionItems.js +49 -21
  737. package/dist/domain/javascript/javascriptApplicationVersionKeys.js +31 -18
  738. package/dist/domain/javascript/javascriptArtifactFiles.js +2 -1
  739. package/dist/domain/javascript/javascriptAstFingerprint.js +89 -24
  740. package/dist/domain/javascript/javascriptAstValues.js +132 -5
  741. package/dist/domain/javascript/javascriptBootstrap.js +94 -0
  742. package/dist/domain/javascript/javascriptBootstrapIntegrity.js +372 -0
  743. package/dist/domain/javascript/javascriptBuiltinResourceMethods.js +8 -0
  744. package/dist/domain/javascript/javascriptBundledRequireOrigin.js +278 -0
  745. package/dist/domain/javascript/javascriptCommonJsExportReceivers.js +231 -0
  746. package/dist/domain/javascript/javascriptContextBridgeExposure.js +23 -0
  747. package/dist/domain/javascript/javascriptElectronMemberWrites.js +96 -22
  748. package/dist/domain/javascript/javascriptExportShapeComparisonSchemas.js +6 -5
  749. package/dist/domain/javascript/javascriptExportShapeVariants.js +1 -1
  750. package/dist/domain/javascript/javascriptFeatureSeed.js +34 -17
  751. package/dist/domain/javascript/javascriptFeatureTrace.js +9 -3
  752. package/dist/domain/javascript/javascriptFeatureTraceSchemas.js +42 -11
  753. package/dist/domain/javascript/javascriptGraphqlOperations.js +382 -0
  754. package/dist/domain/javascript/javascriptIntrinsicInvocation.js +132 -0
  755. package/dist/domain/javascript/javascriptModuleDeclaration.js +48 -0
  756. package/dist/domain/javascript/javascriptModuleInterop.js +618 -0
  757. package/dist/domain/javascript/javascriptModuleResolutionMode.js +18 -0
  758. package/dist/domain/javascript/javascriptModuleSpecifier.js +5 -0
  759. package/dist/domain/javascript/javascriptNativeHandoff.js +7 -12
  760. package/dist/domain/javascript/javascriptPackageImportAliases.js +58 -0
  761. package/dist/domain/javascript/javascriptRecovery.js +12 -5
  762. package/dist/domain/javascript/javascriptRpcEndpoints.js +7 -93
  763. package/dist/domain/javascript/javascriptRuntimeLoadState.js +16 -0
  764. package/dist/domain/javascript/javascriptRuntimeObservation.js +4 -1
  765. package/dist/domain/javascript/javascriptRuntimeReconciliationCaptureParsing.js +45 -16
  766. package/dist/domain/javascript/javascriptRuntimeReconciliationMatching.js +65 -47
  767. package/dist/domain/javascript/javascriptRuntimeReconciliationResult.js +0 -1
  768. package/dist/domain/javascript/javascriptRuntimeReconciliationSchemas.js +5 -4
  769. package/dist/domain/javascript/javascriptRuntimeStaticCandidates.js +113 -11
  770. package/dist/domain/javascript/javascriptSemanticAmbientWrites.js +511 -0
  771. package/dist/domain/javascript/javascriptSemanticAnalysis.js +706 -204
  772. package/dist/domain/javascript/javascriptSemanticAsyncEffects.js +54 -54
  773. package/dist/domain/javascript/javascriptSemanticCallResolution.js +59 -30
  774. package/dist/domain/javascript/javascriptSemanticCallableStack.js +52 -0
  775. package/dist/domain/javascript/javascriptSemanticCalls.js +10 -15
  776. package/dist/domain/javascript/javascriptSemanticChildProcesses.js +163 -92
  777. package/dist/domain/javascript/javascriptSemanticCoverage.js +5 -1
  778. package/dist/domain/javascript/javascriptSemanticDataEffectHelpers.js +435 -45
  779. package/dist/domain/javascript/javascriptSemanticDataEffects.js +46 -29
  780. package/dist/domain/javascript/javascriptSemanticDependencies.js +69 -0
  781. package/dist/domain/javascript/javascriptSemanticDerivedAnalysis.js +1 -1
  782. package/dist/domain/javascript/javascriptSemanticEvaluationOrder.js +126 -0
  783. package/dist/domain/javascript/javascriptSemanticExpressionShapes.js +111 -0
  784. package/dist/domain/javascript/javascriptSemanticFingerprints.js +11 -14
  785. package/dist/domain/javascript/javascriptSemanticGetterQueries.js +147 -0
  786. package/dist/domain/javascript/javascriptSemanticGetterResults.js +264 -0
  787. package/dist/domain/javascript/javascriptSemanticGraph.js +22 -1
  788. package/dist/domain/javascript/javascriptSemanticGraphSchemas.js +13 -1
  789. package/dist/domain/javascript/javascriptSemanticIterationSources.js +5 -4
  790. package/dist/domain/javascript/javascriptSemanticMapOperations.js +51 -0
  791. package/dist/domain/javascript/javascriptSemanticMemberMutations.js +421 -154
  792. package/dist/domain/javascript/javascriptSemanticMutationInitializers.js +500 -27
  793. package/dist/domain/javascript/javascriptSemanticObjectReferences.js +377 -174
  794. package/dist/domain/javascript/javascriptSemanticObjects.js +53 -43
  795. package/dist/domain/javascript/javascriptSemanticOpaqueEffects.js +163 -0
  796. package/dist/domain/javascript/javascriptSemanticPrimitives.js +11 -1
  797. package/dist/domain/javascript/javascriptSemanticProjection.js +180 -95
  798. package/dist/domain/javascript/javascriptSemanticPromises.js +6 -9
  799. package/dist/domain/javascript/javascriptSemanticProvenance.js +5 -1
  800. package/dist/domain/javascript/javascriptSemanticQuery.js +7 -2
  801. package/dist/domain/javascript/javascriptSemanticQueryIdentity.js +2 -1
  802. package/dist/domain/javascript/javascriptSemanticQuerySchemas.js +1 -1
  803. package/dist/domain/javascript/javascriptSemanticReferenceSources.js +25 -0
  804. package/dist/domain/javascript/javascriptSemanticRequireOrigin.js +369 -8
  805. package/dist/domain/javascript/javascriptSemanticResourceLimits.js +3 -19
  806. package/dist/domain/javascript/javascriptSemanticResources.js +33 -44
  807. package/dist/domain/javascript/javascriptSemanticReturnedReferences.js +81 -26
  808. package/dist/domain/javascript/javascriptSemanticReturns.js +37 -30
  809. package/dist/domain/javascript/javascriptSemanticState.js +225 -39
  810. package/dist/domain/javascript/javascriptSemanticTraversal.js +6 -4
  811. package/dist/domain/javascript/javascriptSemanticValues.js +379 -56
  812. package/dist/domain/javascript/javascriptSourceMapPaths.js +44 -17
  813. package/dist/domain/javascript/javascriptSourceParser.js +121 -7
  814. package/dist/domain/javascript/javascriptSourceSelection.js +11 -0
  815. package/dist/domain/javascript/javascriptStaticAnalysis.js +69 -24
  816. package/dist/domain/javascript/javascriptStaticAnalysisBundler.js +97 -23
  817. package/dist/domain/javascript/javascriptStaticAnalysisCalls.js +488 -48
  818. package/dist/domain/javascript/javascriptStaticAnalysisHelpers.js +196 -78
  819. package/dist/domain/javascript/javascriptStaticAnalysisState.js +4 -0
  820. package/dist/domain/javascript/javascriptStaticAnalysisTypes.js +2 -1
  821. package/dist/domain/javascript/javascriptSymbolicBindings.js +1118 -0
  822. package/dist/domain/javascript/javascriptSymbolicControlFlow.js +44 -0
  823. package/dist/domain/javascript/javascriptSymbolicValues.js +45 -0
  824. package/dist/domain/javascript/sourceToBundleComparison.js +3 -1
  825. package/dist/domain/javascript/sourceToBundleComparisonSchemas.js +2 -0
  826. package/dist/domain/javascript/sourceToBundleSignals.js +50 -13
  827. package/dist/domain/jsonValue.js +37 -12
  828. package/dist/domain/localPath.js +6 -3
  829. package/dist/domain/managed/managedApplicationGraph.js +5 -0
  830. package/dist/domain/managed/managedApplicationGraphCoverage.js +6 -2
  831. package/dist/domain/managed/managedApplicationGraphNodes.js +14 -10
  832. package/dist/domain/managed/managedArtifact.js +77 -1
  833. package/dist/domain/managed/managedInspectionEvidence.js +5 -6
  834. package/dist/domain/managed/managedMemberComparison.js +6 -0
  835. package/dist/domain/managed/managedMemberComparisonCoverage.js +36 -3
  836. package/dist/domain/managed/managedMemberComparisonItems.js +135 -59
  837. package/dist/domain/managed/managedMemberComparisonMatch.js +237 -42
  838. package/dist/domain/managed/managedMemberSignatureIdentity.js +40 -0
  839. package/dist/domain/managed/managedNativeVerificationMatch.js +54 -31
  840. package/dist/domain/managed/managedNativeVerificationSchemas.js +15 -4
  841. package/dist/domain/managed/managedReconstruction.js +5 -8
  842. package/dist/domain/mobileApplicationGraphProjection.js +95 -0
  843. package/dist/domain/native/addressCoordinate.js +11 -0
  844. package/dist/domain/native/binaryLayout.js +2 -4
  845. package/dist/domain/native/bytePattern.js +121 -0
  846. package/dist/domain/native/nativeAotPe.js +31 -4
  847. package/dist/domain/native/nativeAotSnapshotObservation.js +18 -0
  848. package/dist/domain/native/nativeCallPartialObservation.js +14 -12
  849. package/dist/domain/native/nativeInspection.js +38 -4
  850. package/dist/domain/native/nativeInstruction.js +17 -2
  851. package/dist/domain/native/nativeInvestigationGraph.js +9 -5
  852. package/dist/domain/native/nativeLoadImage.js +32 -1
  853. package/dist/domain/native/nativeUiObservation.js +5 -6
  854. package/dist/domain/native/objcSwiftMetadata.js +19 -9
  855. package/dist/domain/native/peResources.js +14 -4
  856. package/dist/domain/native/recordedCrash.js +79 -10
  857. package/dist/domain/offsetDateTime.js +60 -0
  858. package/dist/domain/pcap/pcapAnalysis.js +91 -0
  859. package/dist/domain/pcap/pcapEvidence.js +15 -0
  860. package/dist/domain/peMachine.js +38 -0
  861. package/dist/domain/pngHeader.js +18 -0
  862. package/dist/domain/process/processCaptureCoverage.js +26 -3
  863. package/dist/domain/process/processCaptureExample.js +2 -0
  864. package/dist/domain/process/processCaptureValidation.js +33 -8
  865. package/dist/domain/process/processComparison.js +41 -13
  866. package/dist/domain/process/processScenario.js +7 -0
  867. package/dist/domain/process/processTraceDimensionProjection.js +1 -1
  868. package/dist/domain/process/processTraceEvaluation.js +119 -74
  869. package/dist/domain/process/processTraceSpecification.js +243 -89
  870. package/dist/domain/propertyListKeys.js +238 -23
  871. package/dist/domain/propertyListXml.js +149 -0
  872. package/dist/domain/propertyListXmlText.js +20 -4
  873. package/dist/domain/providerAdapterError.js +2 -5
  874. package/dist/domain/providerCleanupError.js +2 -4
  875. package/dist/domain/providerConfigurationRefusal.js +12 -0
  876. package/dist/domain/providerSelectionError.js +2 -1
  877. package/dist/domain/qlogCapture.js +62 -0
  878. package/dist/domain/rawBinary.js +105 -0
  879. package/dist/domain/reconstructionCoverage.js +40 -24
  880. package/dist/domain/reconstructionCoverageEvaluation.js +50 -47
  881. package/dist/domain/reconstructionCoverageEvidence.js +26 -0
  882. package/dist/domain/reconstructionCoverageVerifierResults.js +35 -0
  883. package/dist/domain/reconstructionObligationLedgerIntegrity.js +114 -0
  884. package/dist/domain/reconstructionObligationLedgerSchemas.js +104 -1
  885. package/dist/domain/reconstructionReadiness.js +4 -8
  886. package/dist/domain/reconstructionReadinessJourneyFindings.js +4 -1
  887. package/dist/domain/reconstructionUnknowns.js +9 -1
  888. package/dist/domain/reconstructionVerification.js +86 -43
  889. package/dist/domain/recordedTransportUrl.js +59 -0
  890. package/dist/domain/referenceSourceClassification.js +27 -23
  891. package/dist/domain/referenceSourceGraph.js +51 -13
  892. package/dist/domain/referenceSourceImportParsing.js +27 -13
  893. package/dist/domain/referenceSourcePathIdentity.js +13 -1
  894. package/dist/domain/referenceSourceRequireBindings.js +40 -108
  895. package/dist/domain/referenceSourceSummary.js +92 -0
  896. package/dist/domain/relationshipCoverage.js +43 -0
  897. package/dist/domain/residualUnknown.js +93 -26
  898. package/dist/domain/reverseEngineering.js +31 -0
  899. package/dist/domain/runtimeVersion.js +8 -0
  900. package/dist/domain/rust/rustBinary.js +200 -0
  901. package/dist/domain/signals/annotationTextWindow.js +31 -0
  902. package/dist/domain/signals/signalDecoders.js +69 -0
  903. package/dist/domain/signals/signalRecording.js +115 -0
  904. package/dist/domain/sourceMapContents.js +10 -3
  905. package/dist/domain/sourceMapEnvelope.js +17 -11
  906. package/dist/domain/sqlite/sqliteDatabase.js +189 -0
  907. package/dist/domain/staticRuntimeCorrelation.js +7 -9
  908. package/dist/domain/swiftSymbolClassification.js +17 -0
  909. package/dist/domain/symbolAnalysis.js +20 -7
  910. package/dist/domain/urlComponents.js +6 -0
  911. package/dist/domain/wasm/wasmArtifact.js +119 -0
  912. package/dist/domain/wasm/wasmInterface.js +89 -0
  913. package/dist/domain/webBundleAnalysis.js +14 -3
  914. package/dist/domain/webBundleAnalyzerAst.js +7 -2
  915. package/dist/domain/webBundleAnalyzerInspection.js +113 -57
  916. package/dist/domain/webBundleAnalyzerResult.js +18 -6
  917. package/dist/domain/webCaptureDiff.js +235 -51
  918. package/dist/domain/webCaptureFrameComparison.js +49 -0
  919. package/dist/domain/webInventory.js +28 -14
  920. package/dist/domain/webMcpDiscovery.js +5 -2
  921. package/dist/domain/webModuleImports.js +22 -27
  922. package/dist/domain/webModuleTrace.js +25 -8
  923. package/dist/domain/webNetworkCapture.js +101 -39
  924. package/dist/domain/webNetworkCaptureCoordinates.js +21 -0
  925. package/dist/domain/webRuntime.js +0 -1
  926. package/dist/domain/webScreenshot.js +2 -2
  927. package/dist/domain/webScriptArtifacts.js +2 -4
  928. package/dist/domain/webScriptExport.js +6 -8
  929. package/dist/domain/webScriptExportError.js +2 -3
  930. package/dist/domain/webScriptExportPlan.js +2 -2
  931. package/dist/domain/webSourceLocation.js +20 -9
  932. package/dist/domain/xmlDocument.js +41 -0
  933. package/dist/domain/zipPackageFormat.js +25 -3
  934. package/dist/dotnet/ManagedArtifactInspector.js +25 -12
  935. package/dist/dotnet/ManagedDecodeBudget.js +87 -9
  936. package/dist/dotnet/ManagedMemberInspector.js +127 -22
  937. package/dist/dotnet/ManagedMemberInspectorCore.js +408 -141
  938. package/dist/dotnet/ManagedMemberInstructionDecoder.js +109 -37
  939. package/dist/dotnet/ManagedMemberOwnership.js +65 -0
  940. package/dist/dotnet/ManagedMemberPointers.js +69 -0
  941. package/dist/dotnet/ManagedMemberRows.js +181 -48
  942. package/dist/dotnet/ManagedMetadataHeaps.js +110 -25
  943. package/dist/dotnet/ManagedMetadataInventory.js +5 -5
  944. package/dist/dotnet/ManagedMetadataInventoryRows.js +36 -52
  945. package/dist/dotnet/ManagedMetadataLayout.js +26 -16
  946. package/dist/dotnet/ManagedMetadataRowSizes.js +1 -1
  947. package/dist/dotnet/ManagedMethodBodyReader.js +29 -11
  948. package/dist/dotnet/ManagedMethodSpecs.js +78 -0
  949. package/dist/dotnet/ManagedNativeBoundaryHelpers.js +20 -19
  950. package/dist/dotnet/ManagedNativeBoundaryInspector.js +13 -21
  951. package/dist/dotnet/ManagedPeReader.js +60 -27
  952. package/dist/dotnet/ManagedReaderFailure.js +9 -0
  953. package/dist/dotnet/ManagedSnapshot.js +93 -0
  954. package/dist/dotnet/ManagedStaticProvider.js +55 -64
  955. package/dist/dotnet/ManagedTypeMemberLists.js +105 -0
  956. package/dist/dotnet/ManagedTypeNameDigests.js +177 -0
  957. package/dist/dotnet/ManagedTypeNames.js +58 -0
  958. package/dist/dotnet/ManagedTypeNesting.js +25 -0
  959. package/dist/dotnet/ManagedTypeReferences.js +94 -0
  960. package/dist/dotnet/ManagedUserStrings.js +75 -0
  961. package/dist/electron/ElectronFuseFailures.js +105 -0
  962. package/dist/electron/ElectronFusePath.js +248 -0
  963. package/dist/electron/ElectronFuseProvider.js +88 -0
  964. package/dist/electron/ElectronFuseReader.js +333 -0
  965. package/dist/evaluation/AgentEvaluationFixtures.js +194 -11
  966. package/dist/evaluation/CodexAgentEval.js +19 -40
  967. package/dist/evaluation/KnownAnswerEvaluation.js +126 -57
  968. package/dist/evm/EvmoleFailures.js +20 -14
  969. package/dist/evm/EvmoleInterfaceAdapter.js +5 -1
  970. package/dist/evm/EvmoleInterfaceProvider.js +142 -35
  971. package/dist/evm/EvmoleInterfaceWorker.js +2 -0
  972. package/dist/evm/SolidityMetadata.js +139 -0
  973. package/dist/filesystem/OwnedRegularFile.js +116 -0
  974. package/dist/filesystem/OwnedStagedOutput.js +155 -0
  975. package/dist/filesystem/RegularFile.js +65 -9
  976. package/dist/filesystem/StableFileHash.js +56 -38
  977. package/dist/filesystem/callerPath.js +26 -0
  978. package/dist/filesystem/readFileHandleChunks.js +72 -13
  979. package/dist/filesystem/readStableFileBytes.js +85 -0
  980. package/dist/firmware/FirmwareCommand.js +15 -9
  981. package/dist/firmware/FirmwareFailures.js +56 -0
  982. package/dist/firmware/FirmwareFiles.js +136 -110
  983. package/dist/firmware/FirmwareProvider.js +122 -65
  984. package/dist/firmware/FirmwarePublication.js +244 -12
  985. package/dist/firmware/FirmwareReports.js +202 -12
  986. package/dist/flutter/DartElf.js +445 -0
  987. package/dist/flutter/ElfBuildId.js +137 -0
  988. package/dist/flutter/ElfLoadMap.js +91 -0
  989. package/dist/flutter/FlutterBuildProvider.js +866 -0
  990. package/dist/flutter/FlutterPayloadScan.js +180 -0
  991. package/dist/frida/FridaInstrumentationManager.js +1104 -0
  992. package/dist/gdb/GdbSessionManager.js +1639 -0
  993. package/dist/generatedPackageMetadata.js +2 -2
  994. package/dist/ghidra/GhidraAnalysisProfile.js +146 -14
  995. package/dist/ghidra/GhidraAnalysisSeeds.js +39 -55
  996. package/dist/ghidra/GhidraBridgeSources.js +12 -0
  997. package/dist/ghidra/GhidraClient.js +501 -180
  998. package/dist/ghidra/GhidraClientStartup.js +5 -3
  999. package/dist/ghidra/GhidraClientWire.js +5 -2
  1000. package/dist/ghidra/GhidraDiagnostics.js +23 -5
  1001. package/dist/ghidra/GhidraDoctor.js +60 -26
  1002. package/dist/ghidra/GhidraDosSnapshot.js +83 -0
  1003. package/dist/ghidra/GhidraExecutableHeader.js +54 -0
  1004. package/dist/ghidra/GhidraFileArtifacts.js +93 -0
  1005. package/dist/ghidra/GhidraFunctionValues.js +50 -2
  1006. package/dist/ghidra/GhidraInstallation.js +305 -108
  1007. package/dist/ghidra/GhidraInstallationPolicy.js +94 -103
  1008. package/dist/ghidra/GhidraInstallationProperties.js +57 -0
  1009. package/dist/ghidra/GhidraInventoryValues.js +52 -6
  1010. package/dist/ghidra/GhidraJavaLaunch.js +99 -11
  1011. package/dist/ghidra/GhidraJavaProbe.js +267 -0
  1012. package/dist/ghidra/GhidraJavaProperties.js +119 -0
  1013. package/dist/ghidra/GhidraLanguageCatalog.js +83 -8
  1014. package/dist/ghidra/GhidraLauncher.js +325 -85
  1015. package/dist/ghidra/GhidraLoadImageAttest.js +82 -65
  1016. package/dist/ghidra/GhidraLoadImageValues.js +109 -27
  1017. package/dist/ghidra/GhidraMipsProfile.js +258 -14
  1018. package/dist/ghidra/GhidraNativeAotSnapshotOwner.js +221 -0
  1019. package/dist/ghidra/GhidraPeProfile.js +91 -0
  1020. package/dist/ghidra/GhidraPowerPcProfile.js +51 -0
  1021. package/dist/ghidra/GhidraProvider.js +267 -42
  1022. package/dist/ghidra/GhidraProviderCapabilities.js +29 -15
  1023. package/dist/ghidra/GhidraProviderClient.js +439 -276
  1024. package/dist/ghidra/GhidraPspExtension.js +210 -0
  1025. package/dist/ghidra/GhidraPspProfile.js +62 -0
  1026. package/dist/ghidra/GhidraRawBinaryLanguage.js +49 -0
  1027. package/dist/ghidra/GhidraReleasePolicy.js +93 -0
  1028. package/dist/ghidra/GhidraRequestQueue.js +64 -40
  1029. package/dist/ghidra/GhidraRiscvProfile.js +100 -0
  1030. package/dist/ghidra/GhidraSessionError.js +301 -24
  1031. package/dist/ghidra/GhidraSessionValues.js +76 -0
  1032. package/dist/ghidra/GhidraSocketConnection.js +25 -11
  1033. package/dist/ghidra/GhidraTargetSnapshot.js +67 -50
  1034. package/dist/ghidra/GhidraTransport.js +86 -62
  1035. package/dist/ghidra/extensions/GhidraExtensions.js +30 -45
  1036. package/dist/go/GoBinaryContainer.js +140 -0
  1037. package/dist/go/GoBinaryImage.js +210 -0
  1038. package/dist/go/GoBinaryProvider.js +180 -0
  1039. package/dist/go/GoElfImage.js +211 -0
  1040. package/dist/go/GoMachoImage.js +164 -0
  1041. package/dist/go/GoModuleText.js +217 -0
  1042. package/dist/go/GoPeImage.js +124 -0
  1043. package/dist/hopper/BridgeLauncher.js +78 -6
  1044. package/dist/hopper/HopperAnalysisProfile.js +23 -11
  1045. package/dist/hopper/HopperCleanup.js +29 -4
  1046. package/dist/hopper/HopperClient.js +317 -93
  1047. package/dist/hopper/HopperMacPublisher.js +29 -0
  1048. package/dist/hopper/HopperMachOImage.js +61 -29
  1049. package/dist/hopper/HopperProcessDiagnostic.js +27 -0
  1050. package/dist/hopper/HopperProvider.js +57 -29
  1051. package/dist/hopper/HopperProviderCapabilities.js +9 -4
  1052. package/dist/hopper/HopperRegexSearch.js +21 -60
  1053. package/dist/hopper/HopperRequestQueue.js +17 -5
  1054. package/dist/hopper/HopperSessionValues.js +10 -1
  1055. package/dist/ida/IdaBusyHealth.js +78 -0
  1056. package/dist/ida/IdaCallGraph.js +134 -0
  1057. package/dist/ida/IdaConfiguration.js +7 -2
  1058. package/dist/ida/IdaDiagnosticRedactor.js +199 -0
  1059. package/dist/ida/IdaDiagnosticWriter.js +62 -0
  1060. package/dist/ida/IdaDoctor.js +7 -5
  1061. package/dist/ida/IdaJsonDiagnostic.js +138 -0
  1062. package/dist/ida/IdaMcpConnection.js +308 -32
  1063. package/dist/ida/IdaNativeProtocol.js +85 -0
  1064. package/dist/ida/IdaOperationRunner.js +246 -61
  1065. package/dist/ida/IdaProtocolValues.js +88 -5
  1066. package/dist/ida/IdaProvider.js +45 -10
  1067. package/dist/ida/IdaProviderCapabilities.js +37 -8
  1068. package/dist/ida/IdaSessionClient.js +379 -60
  1069. package/dist/ida/IdaWorkspace.js +54 -6
  1070. package/dist/inspector/V8InspectorCaptureProjection.js +14 -2
  1071. package/dist/inspector/V8InspectorEndpoint.js +15 -13
  1072. package/dist/inspector/V8InspectorProvider.js +43 -7
  1073. package/dist/javascript/analysis/JavaScriptAnalysisTransfer.js +44 -12
  1074. package/dist/javascript/analysis/JavaScriptAnalysisWorker.js +107 -32
  1075. package/dist/javascript/analysis/JavaScriptAnalysisWorkerProtocol.js +7 -4
  1076. package/dist/javascript/analysis/JavaScriptAnalysisWorkerSchemas.js +85 -10
  1077. package/dist/javascript/analysis/JavaScriptAnalysisWorkerServer.js +16 -6
  1078. package/dist/javascript/recovery/RecoveryFiles.js +107 -13
  1079. package/dist/javascript/recovery/WakaruExecution.js +19 -11
  1080. package/dist/javascript/recovery/WakaruProvider.js +12 -9
  1081. package/dist/javascript/recovery/WakaruPublication.js +24 -10
  1082. package/dist/javascript/recovery/WakaruRelease.js +1 -1
  1083. package/dist/javascript/recovery/WakaruReport.js +3 -2
  1084. package/dist/javascript/sourceMaps/DecodedSourceMap.js +2 -16
  1085. package/dist/javascript/sourceMaps/SourceMapCommand.js +22 -4
  1086. package/dist/javascript/sourceMaps/SourceMapDecoder.js +22 -4
  1087. package/dist/javascript/sourceMaps/SourceMapFormat.js +25 -38
  1088. package/dist/javascript/sourceMaps/TraceSourceMap.js +34 -6
  1089. package/dist/jeb/JebMcpConnection.js +148 -82
  1090. package/dist/jeb/JebMcpConnectionOwner.js +116 -0
  1091. package/dist/jeb/JebMcpDeadline.js +46 -0
  1092. package/dist/jeb/JebMcpEndpoint.js +6 -1
  1093. package/dist/jeb/JebProvider.js +82 -58
  1094. package/dist/kuna/KunaAddress.js +11 -0
  1095. package/dist/kuna/KunaCommand.js +217 -0
  1096. package/dist/kuna/KunaConfiguration.js +90 -0
  1097. package/dist/kuna/KunaDoctor.js +198 -0
  1098. package/dist/kuna/KunaInstallation.js +137 -0
  1099. package/dist/kuna/KunaJson.js +23 -0
  1100. package/dist/kuna/KunaJsonStream.js +433 -0
  1101. package/dist/kuna/KunaLimits.js +5 -0
  1102. package/dist/kuna/KunaProjectCache.js +804 -0
  1103. package/dist/kuna/KunaProjectExport.js +202 -0
  1104. package/dist/kuna/KunaProjectFiles.js +191 -0
  1105. package/dist/kuna/KunaProjectReader.js +115 -0
  1106. package/dist/kuna/KunaProvider.js +217 -0
  1107. package/dist/kuna/KunaProviderCapabilities.js +102 -0
  1108. package/dist/kuna/KunaQueryErrors.js +12 -0
  1109. package/dist/kuna/KunaQueryWork.js +113 -0
  1110. package/dist/kuna/KunaReferenceFiles.js +258 -0
  1111. package/dist/kuna/KunaReferenceQueries.js +211 -0
  1112. package/dist/kuna/KunaRelease.js +10 -0
  1113. package/dist/kuna/KunaRunSlots.js +56 -0
  1114. package/dist/kuna/KunaSessionClient.js +1162 -0
  1115. package/dist/kuna/KunaStringInventory.js +145 -0
  1116. package/dist/kuna/KunaStringQueries.js +133 -0
  1117. package/dist/kuna/KunaTargetCommands.js +205 -0
  1118. package/dist/kuna/KunaUnavailable.js +11 -0
  1119. package/dist/logger.js +14 -1
  1120. package/dist/main/processShutdown.js +17 -0
  1121. package/dist/main/shutdown.js +3 -0
  1122. package/dist/main/transport.js +68 -4
  1123. package/dist/main.js +16 -15
  1124. package/dist/mcp/AnalysisProvider-BABWbLoM.js +38 -0
  1125. package/dist/mcp/AnalysisSnapshotFiles-BXz0c37-.js +1423 -0
  1126. package/dist/mcp/ArtifactFileOperation-64cQKI7B.js +1704 -0
  1127. package/dist/mcp/ArtifactProvider-Dx6pmil1.js +2200 -0
  1128. package/dist/mcp/ArtifactProviderMetadata-UCJr2oZW.js +167 -0
  1129. package/dist/mcp/ArtifactReader-BrnwNaKY.js +78 -0
  1130. package/dist/mcp/ArtifactResourceScope-zi3Dkqzy.js +175 -0
  1131. package/dist/mcp/AsarHeader-B_IbppTz.js +31 -0
  1132. package/dist/mcp/BinarySessionStatus-CZ9nnXMt.js +213 -0
  1133. package/dist/mcp/BinaryTargetResolver-BUncASDP.js +1358 -0
  1134. package/dist/mcp/BoundedFileBytes-DYt5q9G2.js +43 -0
  1135. package/dist/mcp/CdpCaptureDocuments-Y2uFcBpl.js +795 -0
  1136. package/dist/mcp/CdpCaptureValues-tNIg-gQK.js +97 -0
  1137. package/dist/mcp/CdpEndpoint-BrhMhpSi.js +641 -0
  1138. package/dist/mcp/CdpOptionalCommand-PZZhlqxv.js +120 -0
  1139. package/dist/mcp/CdpTargetSession-BmmDC3XO.js +290 -0
  1140. package/dist/mcp/DirectAnalysis-B9KuCHTG.js +417 -0
  1141. package/dist/mcp/DirectAnalysisStatus-BgzopkIt.js +44 -0
  1142. package/dist/mcp/ElectronFileScope-FXtK0d6I.js +110 -0
  1143. package/dist/mcp/ElectronFuseFailures-uZ_wOV6T.js +610 -0
  1144. package/dist/mcp/MachoLoadCommandReader-C2VGgHA3.js +330 -0
  1145. package/dist/mcp/ManagedStaticProvider-CZuoPme2.js +5326 -0
  1146. package/dist/mcp/NativeMacOSProvider-CMguKrvN.js +5495 -0
  1147. package/dist/mcp/NativeMacOSProviderMetadata-B_RH4KXF.js +397 -0
  1148. package/dist/mcp/OwnedCommand-BW1jBSt9.js +1241 -0
  1149. package/dist/mcp/ProcedureAddressResolution-H6Qwpb_Y.js +59 -0
  1150. package/dist/mcp/WorkflowEvidence-CO4C7ALz.js +118 -0
  1151. package/dist/mcp/analysisErrorCleanup-Q344SnTO.js +34 -0
  1152. package/dist/mcp/analysisErrorCore-BIEP7tvF.js +509 -0
  1153. package/dist/mcp/analysisErrorProjection-B8teQwwD.js +942 -0
  1154. package/dist/mcp/artifactToolContracts-C9dRDo-D.js +74 -0
  1155. package/dist/mcp/browserObservation-DUraZs62.js +4633 -0
  1156. package/dist/mcp/browserObservationError-C5okJ5el.js +63 -0
  1157. package/dist/mcp/browserObservationSchemas-DwGGxBpu.js +573 -0
  1158. package/dist/mcp/browserScenario-BRUz7yN0.js +3415 -0
  1159. package/dist/mcp/browserScenarioCapture-CiMAsMx8.js +595 -0
  1160. package/dist/mcp/callerPath-CpPnMZyN.js +678 -0
  1161. package/dist/mcp/canonicalDigest-Bi_0_zGi.js +71 -0
  1162. package/dist/mcp/electronActiveObservation-DV0Ffy9X.js +227 -0
  1163. package/dist/mcp/electronFuses-D5SS7XXw.js +367 -0
  1164. package/dist/mcp/electronObservation-DsN-NqY1.js +621 -0
  1165. package/dist/mcp/electronObservation-wOYWwqgF.js +112 -0
  1166. package/dist/mcp/electronScenario-CYrt2zBK.js +913 -0
  1167. package/dist/mcp/emptyArraySchema-C0o2Sxwp.js +140 -0
  1168. package/dist/mcp/enhancedInputs-6CCgB3VB.js +56 -0
  1169. package/dist/mcp/javascriptRuntimeObservation-BVbhkO2-.js +693 -0
  1170. package/dist/mcp/javascriptRuntimeObservation-Cu0Yedqq.js +121 -0
  1171. package/dist/mcp/jsonSerialization-V-wWiFRE.js +152 -0
  1172. package/dist/mcp/lipo-DSTgUqL1.js +395 -0
  1173. package/dist/mcp/localPath-AxvW9aPe.js +19 -0
  1174. package/dist/mcp/logger-BGdGHadX.js +48 -0
  1175. package/dist/mcp/machoContainer-CMSxUBlK.js +605 -0
  1176. package/dist/mcp/main-Cx-Z7m_n.js +80276 -0
  1177. package/dist/mcp/main.js +6 -0
  1178. package/dist/mcp/managedToolContracts-CSlbKJP-.js +101 -0
  1179. package/dist/mcp/nativeValueTrace-BEZbDieM.js +3601 -0
  1180. package/dist/mcp/officialToolContracts-CauCcSsc.js +1432 -0
  1181. package/dist/mcp/peMachine-aP1iYnHq.js +95 -0
  1182. package/dist/mcp/pngHeader-DQ-ObyY2.js +147 -0
  1183. package/dist/mcp/propertyListKeys-BfCo0k4w.js +356 -0
  1184. package/dist/mcp/providerCleanupError-DIRHxzWo.js +125 -0
  1185. package/dist/mcp/providerIdentities--ptAh481.js +31 -0
  1186. package/dist/mcp/providerIdentity-BCQ5n5tw.js +16 -0
  1187. package/dist/mcp/providerOperationHealth-9DRSGM8N.js +71 -0
  1188. package/dist/mcp/rolldown-runtime-BjeaiXFo.js +121 -0
  1189. package/dist/mcp/safeJson-NeGfpkrI.js +25 -0
  1190. package/dist/mcp/scanCanonical-CF3ATd1V.js +3788 -0
  1191. package/dist/mcp/serverIdentity-BK0Ejd_Y.js +1507 -0
  1192. package/dist/mcp/sourceMapEnvelope-DAaRUIGj.js +94 -0
  1193. package/dist/mcp/toolContracts-BPoHQdlC.js +12414 -0
  1194. package/dist/mcp/toolOutputSchemaGroups-MJ_f-PMK.js +17730 -0
  1195. package/dist/mcp/webContentArtifact-DfGkgDcI.js +269 -0
  1196. package/dist/mcp/webRuntime-ccyhkRru.js +74 -0
  1197. package/dist/mcp/webSourceLocation-DKIum0vJ.js +13167 -0
  1198. package/dist/mcpDoctor.js +95 -70
  1199. package/dist/mcpStartupPolicy.js +20 -2
  1200. package/dist/native/AppleDispatchCoverage.js +57 -17
  1201. package/dist/native/AppleDispatchMetadata.js +82 -29
  1202. package/dist/native/AppleMachoFixups.js +208 -35
  1203. package/dist/native/AppleMachoSelection.js +30 -23
  1204. package/dist/native/AppleObjcCategories.js +13 -3
  1205. package/dist/native/AppleObjcDispatchFacets.js +95 -17
  1206. package/dist/native/AppleObjcProperties.js +61 -17
  1207. package/dist/native/AppleObjcProtocols.js +25 -7
  1208. package/dist/native/AppleSwiftVtables.js +2 -0
  1209. package/dist/native/CommandRunner.js +146 -32
  1210. package/dist/native/LldbCallTracer.js +235 -179
  1211. package/dist/native/LldbReadbackFiles.js +70 -0
  1212. package/dist/native/LldbRetainedObservations.js +28 -56
  1213. package/dist/native/MachoArchitectureSelection.js +50 -0
  1214. package/dist/native/NativeCallObservation.js +55 -53
  1215. package/dist/native/NativeCallTarget.js +95 -0
  1216. package/dist/native/NativeMacOSProvider.js +318 -188
  1217. package/dist/native/NativeMachoInspection.js +155 -81
  1218. package/dist/native/NativePlistSource.js +179 -0
  1219. package/dist/native/NativeUiCleanupError.js +30 -0
  1220. package/dist/native/NativeUiHelperRuntime.js +48 -35
  1221. package/dist/native/NativeUiObservation.js +69 -47
  1222. package/dist/native/SignatureTargetBinding.js +147 -65
  1223. package/dist/native/parsers/codesign.js +27 -10
  1224. package/dist/native/parsers/demangle.js +22 -12
  1225. package/dist/native/parsers/dyldInfo.js +73 -4
  1226. package/dist/native/parsers/lipo.js +53 -19
  1227. package/dist/native/parsers/machoUuid.js +150 -0
  1228. package/dist/native/parsers/otool.js +275 -32
  1229. package/dist/native/parsers/plist.js +40 -25
  1230. package/dist/native/pe/PeResourceLayout.js +22 -7
  1231. package/dist/native/pe/PeResourceParser.js +10 -9
  1232. package/dist/native/pe/PeResourcesProvider.js +76 -15
  1233. package/dist/native/pwndbg/CoreFileMappingAuthority.js +51 -0
  1234. package/dist/native/pwndbg/PwndbgCoreContext.js +39 -28
  1235. package/dist/native/pwntools/PwntoolsDecoder.js +339 -52
  1236. package/dist/native/pwntools/PwntoolsFailures.js +19 -4
  1237. package/dist/native/pwntools/PwntoolsInputLimit.js +27 -0
  1238. package/dist/native/pwntools/PwntoolsRecordedCrashProvider.js +38 -16
  1239. package/dist/native/pwntools/PwntoolsResourceLimits.js +3 -3
  1240. package/dist/native/pwntools/RecordedCrashSourceBindings.js +12 -8
  1241. package/dist/native/pwntools/RecordedCrashStructureBindings.js +3 -1
  1242. package/dist/objdump/ObjdumpCommand.js +24 -0
  1243. package/dist/pcap/PcapCommand.js +146 -0
  1244. package/dist/pcap/PcapConfiguration.js +93 -0
  1245. package/dist/pcap/PcapNativeBound.js +58 -0
  1246. package/dist/pcap/PcapOutput.js +276 -0
  1247. package/dist/pcap/PcapProvider.js +454 -0
  1248. package/dist/pcap/PcapSnapshot.js +191 -0
  1249. package/dist/process/ArtifactAnalysisResources.js +306 -0
  1250. package/dist/process/BoundedFileBytes.js +8 -3
  1251. package/dist/process/CurrentEntrypointPath.js +8 -0
  1252. package/dist/process/DarwinProcessRunTokenReader.js +276 -61
  1253. package/dist/process/DetachedPgpSignature.js +57 -0
  1254. package/dist/process/ExecFileBoundedOutput.js +44 -0
  1255. package/dist/process/ExecFileOutput.js +44 -17
  1256. package/dist/{hopper/HopperTargetLease.js → process/HopperLease.js} +76 -19
  1257. package/dist/process/JavaScriptWorkerMemoryLimit.js +25 -0
  1258. package/dist/process/LinuxResourceLimits.js +60 -0
  1259. package/dist/process/MacCodeSignature.js +3 -0
  1260. package/dist/process/OwnedCommand.js +144 -25
  1261. package/dist/process/PrivateRuntimeRoot.js +9 -19
  1262. package/dist/process/PrivateRuntimeRootUnavailableError.js +10 -0
  1263. package/dist/process/ProcessOwnership.js +70 -17
  1264. package/dist/process/ProcessOwnershipObservation.js +35 -4
  1265. package/dist/process/ProviderDeadline.js +58 -12
  1266. package/dist/process/ProviderProcess.js +233 -17
  1267. package/dist/process/RegexMatcher.js +96 -0
  1268. package/dist/process/SharedStartupAttempt.js +59 -0
  1269. package/dist/process/WindowsAuthority.js +48 -39
  1270. package/dist/process/WindowsBatchCommand.js +46 -0
  1271. package/dist/process/boundedUtf8Text.js +13 -0
  1272. package/dist/process/capture/FilesystemSnapshot.js +63 -11
  1273. package/dist/process/capture/ProcessCaptureClock.js +2 -0
  1274. package/dist/process/capture/ProcessCaptureError.js +64 -7
  1275. package/dist/process/capture/ProcessCaptureJournal.js +2 -1
  1276. package/dist/process/capture/ProcessCaptureLifecycle.js +104 -56
  1277. package/dist/process/capture/ProcessCaptureProgress.js +7 -4
  1278. package/dist/process/capture/ProcessHarness.js +34 -17
  1279. package/dist/process/capture/ProcessNormalization.js +278 -36
  1280. package/dist/process/capture/ProcessSampling.js +3 -2
  1281. package/dist/process/capture/ProcessScenarioRuntimeValidation.js +13 -13
  1282. package/dist/process/capture/TerminalRenderer.js +31 -10
  1283. package/dist/process/ownedDebuggerSession.js +203 -0
  1284. package/dist/process/snapshotEnvironment.js +8 -8
  1285. package/dist/{application/binary → providers}/AnalysisClientCleanup.js +3 -3
  1286. package/dist/providers/AnalysisClientCreation.js +193 -0
  1287. package/dist/providers/AnalysisClientFailure.js +191 -0
  1288. package/dist/providers/DeferredAnalysisClient.js +48 -0
  1289. package/dist/providers/OwnedCommandCleanup.js +65 -0
  1290. package/dist/providers/ProviderInspectionScope.js +10 -0
  1291. package/dist/recordedCatalogDigests.js +2 -0
  1292. package/dist/reference/ReferenceSourceReader.js +64 -1
  1293. package/dist/reference/ReferenceSourceReaderEntries.js +79 -56
  1294. package/dist/reference/ReferenceSourceReaderErrors.js +5 -1
  1295. package/dist/reference/ReferenceSourceReaderFile.js +2 -2
  1296. package/dist/reference/ReferenceSourceReaderTypes.js +1 -2
  1297. package/dist/reference/ReferenceSourceReaderValidate.js +0 -1
  1298. package/dist/rizin/RizinCommand.js +14 -0
  1299. package/dist/rizin/RizinDebugSessionManager.js +1111 -0
  1300. package/dist/rust/RustAuditableReader.js +309 -0
  1301. package/dist/rust/RustBinaryImage.js +116 -0
  1302. package/dist/rust/RustBinaryProvider.js +194 -0
  1303. package/dist/server/EvidenceMcpServer.js +160 -37
  1304. package/dist/server/admittedToolOperation.js +7 -2
  1305. package/dist/server/contractToolHandler.js +17 -4
  1306. package/dist/server/createServer.js +179 -30
  1307. package/dist/server/externalMutationAdmission.js +50 -0
  1308. package/dist/server/mcpProgress.js +4 -2
  1309. package/dist/server/promptCompletion.js +43 -28
  1310. package/dist/server/providerEnvironment.js +3 -0
  1311. package/dist/server/registerAnalysisViewTool.js +6 -2
  1312. package/dist/server/registerAndroidTools.js +22 -4
  1313. package/dist/server/registerApplicationTools/projectMobileApplicationGraph.js +8 -1
  1314. package/dist/server/registerArtifactComparisonTool.js +13 -2
  1315. package/dist/server/registerArtifactTools.js +21 -1
  1316. package/dist/server/registerBrowserScenarioTool.js +7 -5
  1317. package/dist/server/registerBrowserTools.js +4 -8
  1318. package/dist/server/registerBundleComparisonTool.js +4 -4
  1319. package/dist/server/registerCaptureTools.js +12 -0
  1320. package/dist/server/registerCutterTools.js +32 -0
  1321. package/dist/server/registerElectronTools.js +13 -21
  1322. package/dist/server/registerEnhancedTools.js +7 -6
  1323. package/dist/server/registerEvidenceTools.js +14 -10
  1324. package/dist/server/registerEvmTools.js +22 -4
  1325. package/dist/server/registerFlutterTools.js +17 -0
  1326. package/dist/server/registerFridaTools.js +201 -0
  1327. package/dist/server/registerFunctionComparisonTool.js +29 -9
  1328. package/dist/server/registerGdbTools.js +64 -0
  1329. package/dist/server/registerGoTools.js +9 -0
  1330. package/dist/server/registerInvestigationTools/helpers.js +2 -2
  1331. package/dist/server/registerInvestigationTools.js +31 -27
  1332. package/dist/server/registerJavaScriptRuntimeObservationTools.js +3 -9
  1333. package/dist/server/registerManagedTools.js +11 -1
  1334. package/dist/server/registerManagedWorkflowTools/evidence.js +14 -7
  1335. package/dist/server/registerNativeTools.js +14 -0
  1336. package/dist/server/registerOfficialTools.js +5 -0
  1337. package/dist/server/registerPcapTools.js +35 -0
  1338. package/dist/server/registerProcessComparisonTool.js +12 -2
  1339. package/dist/server/registerReverseEngineeringTools.js +86 -0
  1340. package/dist/server/registerRizinDebugTools.js +53 -0
  1341. package/dist/server/registerRustTools.js +9 -0
  1342. package/dist/server/registerSessionRecordTools.js +19 -13
  1343. package/dist/server/registerSessionStatusTool.js +33 -8
  1344. package/dist/server/registerSessionTools.js +31 -31
  1345. package/dist/server/registerSignalTools.js +12 -0
  1346. package/dist/server/registerSqliteTools.js +9 -0
  1347. package/dist/server/registerWasmTools.js +46 -0
  1348. package/dist/server/registerWebNetworkCaptureTool.js +24 -10
  1349. package/dist/server/retainedSummaryDelivery.js +28 -0
  1350. package/dist/server/runDerivedOperation.js +2 -0
  1351. package/dist/server/sessionAvailabilityPolicy.js +3 -0
  1352. package/dist/server/toolRegistrationOptions.js +8 -0
  1353. package/dist/server/toolResult.js +52 -19
  1354. package/dist/server/toolResultEncoding.js +36 -3
  1355. package/dist/serverIdentity.js +17 -8
  1356. package/dist/signals/SigrokRecordingProvider.js +346 -0
  1357. package/dist/signals/parseDecoderDiscovery.js +65 -0
  1358. package/dist/sqlite/SqliteDatabaseFailures.js +147 -0
  1359. package/dist/sqlite/SqliteDatabaseInspection.js +436 -0
  1360. package/dist/sqlite/SqliteDatabaseLimits.js +16 -0
  1361. package/dist/sqlite/SqliteDatabaseProvider.js +295 -0
  1362. package/dist/sqlite/SqliteDatabaseSnapshot.js +182 -0
  1363. package/dist/sqlite/SqliteDatabaseWorker.js +46 -0
  1364. package/dist/sqlite/SqliteDatabaseWorkerExecution.js +127 -0
  1365. package/dist/wasm/WabtArtifactProvider.js +358 -0
  1366. package/dist/wasm/WabtFailures.js +119 -0
  1367. package/dist/wasm/WabtInterface.js +309 -0
  1368. package/dist/wasm/WabtOutput.js +60 -0
  1369. package/dist/wasm/WabtRelease.js +12 -0
  1370. package/dist/wasm/WabtRuntime.js +58 -0
  1371. package/dist/wasm/WabtString.js +48 -0
  1372. package/dist/wasm/WabtWat.js +147 -0
  1373. package/dist/wasm/WasmGlueAdapter.js +66 -0
  1374. package/dist/wasm/WasmInterfaceBudget.js +11 -0
  1375. package/dist/windows/WindowsNativeLoader.js +53 -9
  1376. package/dist/windows/WindowsOwnedProcess.js +150 -17
  1377. package/dist/windows/WindowsPrivateRuntime.js +66 -2
  1378. package/install.sh +157 -98
  1379. package/licenses/Apache-2.0.txt +202 -0
  1380. package/licenses/GCC-Runtime-Library-Exception-3.1.txt +73 -0
  1381. package/licenses/GPL-3.0.txt +674 -0
  1382. package/licenses/LGPL-2.0.txt +480 -0
  1383. package/licenses/MIT-template.txt +18 -0
  1384. package/licenses/MinGW-w64-runtime.txt +240 -0
  1385. package/licenses/Node-22.19.0-LICENSE.txt +2666 -0
  1386. package/licenses/README.md +68 -0
  1387. package/licenses/cfworker-MIT.txt +21 -0
  1388. package/licenses/dotnet-runtime-MIT.txt +23 -0
  1389. package/licenses/frida-17.23.2-COPYING.txt +50 -0
  1390. package/licenses/ghidra-12.1.4-DISCLAIMER.txt +13 -0
  1391. package/licenses/ghidra-12.1.4-LICENSE.txt +201 -0
  1392. package/licenses/ghidra-12.1.4-NOTICE.txt +49 -0
  1393. package/licenses/npm-dependencies.txt +3757 -0
  1394. package/licenses/npm-runtime-notices.txt +8722 -0
  1395. package/licenses/upstream-sources.json +72 -0
  1396. package/licenses/xterm-MIT.txt +21 -0
  1397. package/native/windows/README.md +130 -12
  1398. package/native/windows/build/manifest.json +2 -2
  1399. package/native/windows/build/rea-windows-x64.node +0 -0
  1400. package/package.json +97 -22
  1401. package/scripts/electron-active-hook-boundaries.cjs +15 -2
  1402. package/scripts/electron-active-hook.cjs +412 -47
  1403. package/scripts/hopper-demo-x11.py +65 -13
  1404. package/scripts/prepack.mjs +5 -0
  1405. package/scripts/rea-android-workspace-guardian.mjs +46 -0
  1406. package/scripts/rea.mjs +89 -26
  1407. package/scripts/verify-windows-native-artifact.mjs +2 -2
  1408. package/skills/reverse-engineer-anything/SKILL.md +146 -11
  1409. package/skills/reverse-engineer-anything/references/android-applications.md +3 -1
  1410. package/skills/reverse-engineer-anything/references/connection-and-recovery.md +10 -10
  1411. package/skills/reverse-engineer-anything/references/evidence-workflows.md +23 -0
  1412. package/skills/reverse-engineer-anything/references/javascript-applications.md +72 -3
  1413. package/skills/reverse-engineer-anything/references/native-and-artifacts.md +149 -19
  1414. package/skills/reverse-engineer-anything/references/runtime-observation.md +57 -7
  1415. package/third_party/README.md +1 -1
  1416. package/third_party/wabt/README.md +24 -0
  1417. package/dist/browser/history/HarCaptureAdapter.js +0 -20
  1418. package/dist/cli/streamedJsonOutput.js +0 -135
  1419. package/dist/hopper/HopperRegexWorker.js +0 -27
  1420. /package/dist/{application/binary → process}/AbortablePromise.js +0 -0
@@ -0,0 +1,2336 @@
1
+ import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
2
+ import { absenceClaimable, analysisInputErrorFromIssues, canonicalJson, compareUnicodeCodePoints, compositeKey, digestCanonicalValue, err, init_canonicalDigest, init_canonicalOrdering, init_comparisonSemantics, init_digests, init_inputIssueProjection, init_result, init_unicodeCodePointOrder, isDigest, ok, uniqueSorted } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
3
+ import { AnalysisProtocolError, init_analysisErrorCore } from "./errorSchemas-Ixz_q7qt.js";
4
+ import { createImmutableJavaScriptApplicationGraphSteps, createJavaScriptApplicationEdge, createJavaScriptApplicationGraph, createJavaScriptApplicationNode, init_javascriptApplicationGraph } from "./javascriptApplicationAnalysis-Dk6yBV8g.js";
5
+ import { SOURCE_TO_BUNDLE_SIGNAL_WEIGHTS, applicationFeatureSeedSchema, applicationFeatureTraceResultSchema, applicationTraceIdentitiesSchema, applicationVersionIdentitiesSchema, compareApplicationVersionsInputSchema, compareJavaScriptExportShapesInputSchema, featureSeedMatchMode, init_javascriptApplicationVersionComparisonSchemas, init_javascriptExportShapeComparisonSchemas, init_javascriptFeatureTraceSchemas, init_sourceToBundleComparisonSchemas, javaScriptExportShapeComparisonResultSchema, javaScriptExportShapeIdentitiesSchema, ownedApplicationVersionComparisonResultSchema, projectedExportReturnShapesSchema, sourceToBundleComparisonResultSchema, traceApplicationFeatureInputSchema } from "./javascriptExportShapeComparisonSchemas-DpwuBenh.js";
6
+ import { applicationGraphEvidenceInputError, init_JavaScriptApplicationEvidenceGraph, parseApplicationGraphEvidence, parseNativeApplicationEvidence } from "./JavaScriptApplicationEvidenceGraph-gOmPB2L6.js";
7
+ import { createApplicationFeatureTraceEvidence, createApplicationVersionComparisonEvidence, createJavaScriptExportShapeComparisonEvidence, createSourceToBundleComparisonEvidence, init_JavaScriptApplicationWorkflowEvidence } from "./JavaScriptApplicationWorkflowEvidence-WZgtK_Ok.js";
8
+ import { z } from "zod";
9
+ import { posix } from "node:path";
10
+ import { createHash } from "node:crypto";
11
+ import canonicalize from "canonicalize";
12
+
13
+ //#region dist/domain/javascript/javascriptApplicationChangeGraph.js
14
+ var buildJavaScriptApplicationChangeGraph, nodeCandidates, changedFromEdge, comparisonEvidence, changeGraphCoverage, sourceCoverageLimits, combineOmittedCounts, mergeNodes, uniqueEdges;
15
+ function init_javascriptApplicationChangeGraph() {
16
+ return (init_javascriptApplicationChangeGraph = __esmMin((() => {
17
+ init_javascriptApplicationGraph();
18
+ init_canonicalOrdering();
19
+ init_unicodeCodePointOrder();
20
+ buildJavaScriptApplicationChangeGraph = (input) => {
21
+ const allNodes = nodeCandidates(input);
22
+ const preferredRoots = uniqueSorted([...input.right.root_node_ids, ...input.left.root_node_ids]).filter((nodeId) => allNodes.has(nodeId));
23
+ const orderedNodeIds = uniqueSorted([...preferredRoots, ...input.items.flatMap(({ left_node_id: left, right_node_id: right }) => [...right === null ? [] : [right], ...left === null ? [] : [left]])]);
24
+ const retained = new Set(orderedNodeIds);
25
+ const mergedNodes = mergeNodes(orderedNodeIds.flatMap((nodeId) => allNodes.get(nodeId) ?? []));
26
+ const sourceEdges = uniqueEdges([...input.left.edges, ...input.right.edges]).filter(({ source_node_id: source, target_node_id: target }) => retained.has(source) && retained.has(target));
27
+ const leftById = new Map(input.left.nodes.map((node) => [node.node_id, node]));
28
+ const rightById = new Map(input.right.nodes.map((node) => [node.node_id, node]));
29
+ const comparisonEdges = input.items.flatMap((item) => changedFromEdge(item, input, retained, leftById, rightById));
30
+ const candidateEdges = uniqueEdges([...sourceEdges, ...comparisonEdges]);
31
+ const rootNodeIds = preferredRoots.filter((nodeId) => retained.has(nodeId));
32
+ const fallbackRoot = mergedNodes[0]?.node_id;
33
+ const steps = createImmutableJavaScriptApplicationGraphSteps({
34
+ schema: "JavaScriptApplicationGraph",
35
+ root_node_ids: rootNodeIds.length > 0 ? rootNodeIds : fallbackRoot === undefined ? [] : [fallbackRoot],
36
+ nodes: mergedNodes,
37
+ edges: candidateEdges,
38
+ coverage: changeGraphCoverage(input),
39
+ limitations: uniqueSorted([
40
+ ...input.left.limitations.map((value) => `Left: ${value}`),
41
+ ...input.right.limitations.map((value) => `Right: ${value}`),
42
+ "changed_from edges are cross-version inferences and never promote structural or semantic matches to exact identity.",
43
+ "The change graph contains compared entities and their retained relationships; it is not an executable application."
44
+ ])
45
+ });
46
+ let next = steps.next();
47
+ while (!next.done) next = steps.next();
48
+ return { graph: next.value };
49
+ };
50
+ nodeCandidates = (input) => {
51
+ const required = new Set([
52
+ ...input.left.root_node_ids,
53
+ ...input.right.root_node_ids,
54
+ ...input.items.flatMap(({ left_node_id: left, right_node_id: right }) => [...left === null ? [] : [left], ...right === null ? [] : [right]])
55
+ ]);
56
+ const output = new Map();
57
+ for (const node of [...input.left.nodes, ...input.right.nodes]) if (required.has(node.node_id)) output.set(node.node_id, [...output.get(node.node_id) ?? [], node]);
58
+ return output;
59
+ };
60
+ changedFromEdge = (item, input, retained, leftById, rightById) => {
61
+ const left = item.left_node_id;
62
+ const right = item.right_node_id;
63
+ if (item.match.status !== "matched" || item.status === "unchanged" || item.status === "unknown" && !item.dimensions.some((dimension) => dimension !== "location" && dimension !== "coverage") || left === null || right === null || left === right || !retained.has(left) || !retained.has(right)) return [];
64
+ const evidence = comparisonEvidence(item, input, leftById.get(left), rightById.get(right));
65
+ return [createJavaScriptApplicationEdge({
66
+ source_node_id: right,
67
+ target_node_id: left,
68
+ relation: "changed_from",
69
+ properties: {
70
+ comparison_item_id: item.item_id,
71
+ status: item.status,
72
+ match_basis: item.match.basis,
73
+ match_confidence: item.match.confidence,
74
+ dimensions: item.dimensions
75
+ },
76
+ evidence
77
+ })];
78
+ };
79
+ comparisonEvidence = (item, input, left, right) => {
80
+ const source = right?.observations[0]?.evidence ?? left?.observations[0]?.evidence;
81
+ const complete = input.left.coverage.status === "complete" && input.right.coverage.status === "complete";
82
+ return {
83
+ authority: "cross-version-comparison",
84
+ state: "inferred",
85
+ confidence: item.match.confidence === "medium" ? "medium" : "high",
86
+ artifact: source?.artifact ?? {
87
+ available: false,
88
+ reason: "unresolved",
89
+ detail: "Compared node has no artifact-backed observation."
90
+ },
91
+ location: source?.location ?? {
92
+ available: false,
93
+ reason: "unresolved",
94
+ detail: "Compared node has no actionable source location."
95
+ },
96
+ extractor: {
97
+ name: "rea-application-version-comparison",
98
+ version: "1",
99
+ operation: "compare_application_versions",
100
+ executable_sha256: null
101
+ },
102
+ coverage: complete ? {
103
+ status: "complete",
104
+ truncated: false,
105
+ omitted_count: 0,
106
+ limits: sourceCoverageLimits(input)
107
+ } : {
108
+ status: "partial",
109
+ truncated: input.left.coverage.truncated || input.right.coverage.truncated,
110
+ omitted_count: combineOmittedCounts(input.left.coverage.omitted_count, input.right.coverage.omitted_count),
111
+ limits: sourceCoverageLimits(input)
112
+ },
113
+ limitations: ["Cross-version pairing is inferred from the stated match basis; changed_from does not prove runtime reachability.", ...item.limitations],
114
+ evidence_ids: [input.leftEvidenceId, input.rightEvidenceId]
115
+ };
116
+ };
117
+ changeGraphCoverage = (input) => {
118
+ if (input.left.coverage.status === "complete" && input.right.coverage.status === "complete") return {
119
+ status: "complete",
120
+ truncated: false,
121
+ omitted_count: 0,
122
+ limits: sourceCoverageLimits(input)
123
+ };
124
+ return {
125
+ status: "partial",
126
+ truncated: input.left.coverage.truncated || input.right.coverage.truncated,
127
+ omitted_count: combineOmittedCounts(input.left.coverage.omitted_count, input.right.coverage.omitted_count),
128
+ limits: sourceCoverageLimits(input)
129
+ };
130
+ };
131
+ sourceCoverageLimits = (input) => [...new Map([...input.left.coverage.limits, ...input.right.coverage.limits].map((limit) => [`${limit.name}\0${limit.value}\0${limit.unit}`, limit])).values()].sort((left, right) => compareUnicodeCodePoints(left.name, right.name));
132
+ combineOmittedCounts = (left, right) => left === null || right === null ? null : left + right;
133
+ mergeNodes = (nodes) => {
134
+ const groups = new Map();
135
+ for (const node of nodes) groups.set(node.node_id, [...groups.get(node.node_id) ?? [], node]);
136
+ const merged = [...groups.values()].map((group) => {
137
+ const first = group[0];
138
+ if (first === undefined) throw new TypeError("Empty change-graph node group");
139
+ const observations = [...new Map(group.flatMap(({ observations: values }) => values).map((observation) => [observation.observation_id, observation])).values()].sort((left, right) => compareUnicodeCodePoints(left.observation_id, right.observation_id));
140
+ return createJavaScriptApplicationNode({
141
+ kind: first.kind,
142
+ identity: first.identity,
143
+ observations: observations.map(({ observation_id: _id, identifier_strategy: _strategy, ...value }) => value)
144
+ });
145
+ });
146
+ return merged.sort((left, right) => compareUnicodeCodePoints(left.node_id, right.node_id));
147
+ };
148
+ uniqueEdges = (edges) => [...new Map(edges.map((edge) => [edge.edge_id, edge])).values()].sort((left, right) => compareUnicodeCodePoints(left.edge_id, right.edge_id));
149
+ })))();
150
+ }
151
+
152
+ //#endregion
153
+ //#region dist/domain/javascript/javascriptApplicationVersionItems.js
154
+ var classifyJavaScriptApplicationVersions, matchedItem, unmatchedItem, leftOnlyItem, rightOnlyItem, matchedMatch, unmatchedMatch, AMBIGUOUS_MATCH_LIMITATION, INCOMPLETE_GRAPH_LIMITATION, changedDimensions, contentIdentity, locations, properties, indexRelationships, compareRelationships, relationshipFacts, itemEvidenceLinks, nativeLinks, indexNativeEvidence, matchLimitations, itemWithId, stringProperty, graphsComplete;
155
+ function init_javascriptApplicationVersionItems() {
156
+ return (init_javascriptApplicationVersionItems = __esmMin((() => {
157
+ init_comparisonSemantics();
158
+ init_canonicalDigest();
159
+ init_unicodeCodePointOrder();
160
+ classifyJavaScriptApplicationVersions = (matching, context) => {
161
+ const pairByLeft = new Map(matching.pairs.map(({ left, right }) => [left.node_id, `pair:${left.node_id}:${right.node_id}`]));
162
+ const pairByRight = new Map(matching.pairs.map(({ left, right }) => [right.node_id, `pair:${left.node_id}:${right.node_id}`]));
163
+ const fullContext = {
164
+ leftGraph: context.leftGraph,
165
+ rightGraph: context.rightGraph,
166
+ leftEvidenceId: context.leftEvidenceId,
167
+ rightEvidenceId: context.rightEvidenceId,
168
+ leftNativeEvidenceByDigest: indexNativeEvidence(context.leftNativeEvidence),
169
+ rightNativeEvidenceByDigest: indexNativeEvidence(context.rightNativeEvidence),
170
+ pairByLeft,
171
+ pairByRight,
172
+ leftRelationships: indexRelationships(context.leftGraph),
173
+ rightRelationships: indexRelationships(context.rightGraph)
174
+ };
175
+ const leftItems = matching.unmatchedLeft.map((node) => {
176
+ const candidates = matching.candidatesForLeft.get(node.node_id) ?? [];
177
+ return unmatchedItem({
178
+ left: node,
179
+ candidateRightNodeIds: candidates
180
+ }, fullContext);
181
+ });
182
+ const rightItems = matching.unmatchedRight.map((node) => {
183
+ const candidates = matching.candidatesForRight.get(node.node_id) ?? [];
184
+ return unmatchedItem({
185
+ right: node,
186
+ candidateLeftNodeIds: candidates
187
+ }, fullContext);
188
+ });
189
+ return { items: [
190
+ ...matching.pairs.map((pair) => matchedItem(pair, fullContext)),
191
+ ...leftItems,
192
+ ...rightItems
193
+ ].sort((left, right) => compareUnicodeCodePoints(left.item_id, right.item_id)) };
194
+ };
195
+ matchedItem = (pair, context) => {
196
+ const relationships = compareRelationships(pair, context);
197
+ const dimensions = changedDimensions(pair, relationships);
198
+ const complete = graphsComplete(context);
199
+ const observedChange = dimensions.includes("content") || dimensions.includes("properties");
200
+ const completeChange = complete && dimensions.some((dimension) => dimension !== "location");
201
+ const status = observedChange || completeChange ? "changed" : complete && !relationships.unresolved ? "unchanged" : "unknown";
202
+ const finalDimensions = status === "unknown" && !complete ? [...dimensions, "coverage"] : dimensions;
203
+ const semantic = {
204
+ status,
205
+ node_kind: pair.left.kind,
206
+ left_node_id: pair.left.node_id,
207
+ right_node_id: pair.right.node_id,
208
+ match: matchedMatch(pair),
209
+ dimensions: finalDimensions,
210
+ evidence_links: itemEvidenceLinks(pair.left, pair.right, context),
211
+ limitations: [
212
+ ...matchLimitations(pair),
213
+ ...status === "unknown" && !complete ? ["Incomplete graph coverage prevents a complete node-level conclusion."] : [],
214
+ ...relationships.unresolved ? ["Relationship target identity remains unresolved; equal node kinds do not establish cross-version alignment."] : []
215
+ ]
216
+ };
217
+ return itemWithId(semantic);
218
+ };
219
+ unmatchedItem = (member, context) => member.left === undefined ? rightOnlyItem(member.right, member.candidateLeftNodeIds, context) : leftOnlyItem(member.left, member.candidateRightNodeIds, context);
220
+ leftOnlyItem = (node, candidateNodeIds, context) => {
221
+ const [firstCandidate, ...remainingCandidates] = candidateNodeIds;
222
+ const common = {
223
+ node_kind: node.kind,
224
+ evidence_links: itemEvidenceLinks(node, undefined, context)
225
+ };
226
+ if (firstCandidate !== undefined) return itemWithId({
227
+ ...common,
228
+ status: "unknown",
229
+ left_node_id: node.node_id,
230
+ right_node_id: null,
231
+ match: {
232
+ status: "ambiguous",
233
+ basis: "none",
234
+ confidence: "unknown",
235
+ candidate_left_node_ids: [],
236
+ candidate_right_node_ids: [firstCandidate, ...remainingCandidates]
237
+ },
238
+ dimensions: ["availability"],
239
+ limitations: [AMBIGUOUS_MATCH_LIMITATION]
240
+ });
241
+ const absenceObserved = absenceClaimable(context.rightGraph.coverage);
242
+ return itemWithId({
243
+ ...common,
244
+ status: absenceObserved ? "removed" : "unknown",
245
+ left_node_id: node.node_id,
246
+ right_node_id: null,
247
+ match: unmatchedMatch(),
248
+ dimensions: absenceObserved ? ["availability"] : ["availability", "coverage"],
249
+ limitations: absenceObserved ? [] : [INCOMPLETE_GRAPH_LIMITATION]
250
+ });
251
+ };
252
+ rightOnlyItem = (node, candidateNodeIds, context) => {
253
+ const [firstCandidate, ...remainingCandidates] = candidateNodeIds;
254
+ const common = {
255
+ node_kind: node.kind,
256
+ evidence_links: itemEvidenceLinks(undefined, node, context)
257
+ };
258
+ if (firstCandidate !== undefined) return itemWithId({
259
+ ...common,
260
+ status: "unknown",
261
+ left_node_id: null,
262
+ right_node_id: node.node_id,
263
+ match: {
264
+ status: "ambiguous",
265
+ basis: "none",
266
+ confidence: "unknown",
267
+ candidate_left_node_ids: [firstCandidate, ...remainingCandidates],
268
+ candidate_right_node_ids: []
269
+ },
270
+ dimensions: ["availability"],
271
+ limitations: [AMBIGUOUS_MATCH_LIMITATION]
272
+ });
273
+ const absenceObserved = absenceClaimable(context.leftGraph.coverage);
274
+ return itemWithId({
275
+ ...common,
276
+ status: absenceObserved ? "added" : "unknown",
277
+ left_node_id: null,
278
+ right_node_id: node.node_id,
279
+ match: unmatchedMatch(),
280
+ dimensions: absenceObserved ? ["availability"] : ["availability", "coverage"],
281
+ limitations: absenceObserved ? [] : [INCOMPLETE_GRAPH_LIMITATION]
282
+ });
283
+ };
284
+ matchedMatch = (pair) => {
285
+ const candidates = {
286
+ candidate_left_node_ids: [],
287
+ candidate_right_node_ids: []
288
+ };
289
+ switch (pair.basis) {
290
+ case "exact-node-identity":
291
+ case "exact-content-digest":
292
+ case "exact-module-source-digest": return {
293
+ status: "matched",
294
+ basis: pair.basis,
295
+ confidence: "exact",
296
+ ...candidates
297
+ };
298
+ case "source-map-identity": return {
299
+ status: "matched",
300
+ basis: pair.basis,
301
+ confidence: "high",
302
+ ...candidates
303
+ };
304
+ case "structural-fingerprint":
305
+ case "semantic-key": return {
306
+ status: "matched",
307
+ basis: pair.basis,
308
+ confidence: "medium",
309
+ ...candidates
310
+ };
311
+ }
312
+ };
313
+ unmatchedMatch = () => ({
314
+ status: "unmatched",
315
+ basis: "none",
316
+ confidence: "unknown",
317
+ candidate_left_node_ids: [],
318
+ candidate_right_node_ids: []
319
+ });
320
+ AMBIGUOUS_MATCH_LIMITATION = "Multiple nodes share the same permitted match key; no cross-version pair was selected.";
321
+ INCOMPLETE_GRAPH_LIMITATION = "The opposite graph is incomplete, so an unmatched node cannot be classified as added or removed.";
322
+ changedDimensions = (pair, relationships) => {
323
+ const dimensions = [];
324
+ const leftContent = contentIdentity(pair.left);
325
+ const rightContent = contentIdentity(pair.right);
326
+ if (leftContent !== null && rightContent !== null && leftContent !== rightContent) dimensions.push("content");
327
+ if (canonicalJson(locations(pair.left)) !== canonicalJson(locations(pair.right))) dimensions.push("location");
328
+ if (canonicalJson(properties(pair.left)) !== canonicalJson(properties(pair.right))) dimensions.push("properties");
329
+ if (relationships.different) dimensions.push("relationships");
330
+ return dimensions;
331
+ };
332
+ contentIdentity = (node) => {
333
+ if (node.identity.strategy === "content-digest") return `content:${node.identity.sha256}`;
334
+ if (node.kind === "javascript-module") return stringProperty(node, "source_sha256");
335
+ if (node.kind === "source-module" && node.identity.strategy === "source-map-original") return node.identity.source_sha256;
336
+ return null;
337
+ };
338
+ locations = (node) => node.observations.map(({ evidence }) => evidence.location.available ? evidence.location.value : evidence.location).sort((left, right) => compareUnicodeCodePoints(canonicalJson(left), canonicalJson(right)));
339
+ properties = (node) => node.observations.map(({ label, properties: values, source_map_reference }) => ({
340
+ label,
341
+ properties: values,
342
+ source_map_reference
343
+ })).sort((left, right) => compareUnicodeCodePoints(canonicalJson(left), canonicalJson(right)));
344
+ indexRelationships = (graph) => {
345
+ const adjacency = new Map();
346
+ const add = (nodeId, relationship) => {
347
+ const existing = adjacency.get(nodeId);
348
+ if (existing === undefined) adjacency.set(nodeId, [relationship]);
349
+ else existing.push(relationship);
350
+ };
351
+ for (const edge of graph.edges) {
352
+ add(edge.source_node_id, {
353
+ direction: "out",
354
+ relation: edge.relation,
355
+ neighborId: edge.target_node_id
356
+ });
357
+ if (edge.target_node_id !== edge.source_node_id) add(edge.target_node_id, {
358
+ direction: "in",
359
+ relation: edge.relation,
360
+ neighborId: edge.source_node_id
361
+ });
362
+ }
363
+ return {
364
+ nodeById: new Map(graph.nodes.map((value) => [value.node_id, value])),
365
+ adjacency
366
+ };
367
+ };
368
+ compareRelationships = (pair, context) => {
369
+ const left = relationshipFacts(pair.left, "left", context);
370
+ const right = relationshipFacts(pair.right, "right", context);
371
+ return {
372
+ different: left.paired !== right.paired || left.unpairedShape !== right.unpairedShape,
373
+ unresolved: left.unresolved || right.unresolved
374
+ };
375
+ };
376
+ relationshipFacts = (node, side, context) => {
377
+ const { nodeById, adjacency } = side === "left" ? context.leftRelationships : context.rightRelationships;
378
+ const paired = side === "left" ? context.pairByLeft : context.pairByRight;
379
+ const matched = [];
380
+ const unpaired = [];
381
+ for (const { direction, relation, neighborId } of adjacency.get(node.node_id) ?? []) {
382
+ const mapped = paired.get(neighborId);
383
+ if (mapped !== undefined) matched.push(`${direction}\0${relation}\0${mapped}`);
384
+ else unpaired.push(`${direction}\0${relation}\0${nodeById.get(neighborId)?.kind ?? "unknown"}`);
385
+ }
386
+ return {
387
+ paired: canonicalJson(matched.sort(compareUnicodeCodePoints)),
388
+ unpairedShape: canonicalJson(unpaired.sort(compareUnicodeCodePoints)),
389
+ unresolved: unpaired.length > 0
390
+ };
391
+ };
392
+ itemEvidenceLinks = (left, right, context) => [...new Set([
393
+ context.leftEvidenceId,
394
+ context.rightEvidenceId,
395
+ ...nativeLinks(left, context.leftNativeEvidenceByDigest),
396
+ ...nativeLinks(right, context.rightNativeEvidenceByDigest)
397
+ ])].sort(compareUnicodeCodePoints);
398
+ nativeLinks = (node, evidenceByDigest) => {
399
+ const identity = node === undefined ? null : contentIdentity(node);
400
+ if (identity === null) return [];
401
+ const digest = identity.replace(/^content:/u, "");
402
+ return evidenceByDigest.get(digest) ?? [];
403
+ };
404
+ indexNativeEvidence = (evidence) => {
405
+ const evidenceByDigest = new Map();
406
+ for (const { evidence_id: id, subject } of evidence) {
407
+ const digest = subject?.digest.sha256;
408
+ if (digest === undefined) continue;
409
+ const ids = evidenceByDigest.get(digest);
410
+ if (ids === undefined) evidenceByDigest.set(digest, [id]);
411
+ else ids.push(id);
412
+ }
413
+ return evidenceByDigest;
414
+ };
415
+ matchLimitations = (pair) => [
416
+ ...pair.basis === "structural-fingerprint" ? ["Structural fingerprint equality is rename-resistant inference; it is not byte identity or proof of semantic equivalence."] : [],
417
+ ...pair.basis === "source-map-identity" ? ["Source-map original names identify a candidate source lineage; changed or unavailable source content remains explicit."] : [],
418
+ ...pair.basis === "semantic-key" ? ["Semantic-key pairing is a deterministic inference and is never promoted to exact identity."] : []
419
+ ];
420
+ itemWithId = (semantic) => ({
421
+ ...semantic,
422
+ item_id: `javc_item_${digestCanonicalValue(semantic, "Application version item")}`
423
+ });
424
+ stringProperty = (node, key) => {
425
+ const values = [...new Set(node.observations.map(({ properties: values }) => values[key]).filter((value) => typeof value === "string"))];
426
+ return values.length === 1 ? values[0] ?? null : null;
427
+ };
428
+ graphsComplete = (context) => absenceClaimable(context.leftGraph.coverage) && absenceClaimable(context.rightGraph.coverage);
429
+ })))();
430
+ }
431
+
432
+ //#endregion
433
+ //#region dist/domain/javascript/javascriptApplicationVersionKeys.js
434
+ var matchTiers, matchJavaScriptApplicationVersions, applyTier, nodesByKey, recordCandidates, sortedCandidates, nodeIdentityKey, contentDigestKey, moduleSourceDigestKey, sourceMapKey, structuralFingerprintKey, semanticKey, semanticValue, canonicalPath, firstProperties, firstLabel, uniqueStringProperty, joined, nonEmptyString, exactString, stringList, sortedNodes;
435
+ function init_javascriptApplicationVersionKeys() {
436
+ return (init_javascriptApplicationVersionKeys = __esmMin((() => {
437
+ init_comparisonSemantics();
438
+ init_unicodeCodePointOrder();
439
+ matchTiers = () => [
440
+ {
441
+ match: {
442
+ basis: "exact-content-digest",
443
+ confidence: "exact"
444
+ },
445
+ key: contentDigestKey
446
+ },
447
+ {
448
+ match: {
449
+ basis: "exact-module-source-digest",
450
+ confidence: "exact"
451
+ },
452
+ key: moduleSourceDigestKey
453
+ },
454
+ {
455
+ match: {
456
+ basis: "exact-node-identity",
457
+ confidence: "exact"
458
+ },
459
+ key: nodeIdentityKey
460
+ },
461
+ {
462
+ match: {
463
+ basis: "source-map-identity",
464
+ confidence: "high"
465
+ },
466
+ key: sourceMapKey
467
+ },
468
+ {
469
+ match: {
470
+ basis: "structural-fingerprint",
471
+ confidence: "medium"
472
+ },
473
+ key: structuralFingerprintKey
474
+ },
475
+ {
476
+ match: {
477
+ basis: "semantic-key",
478
+ confidence: "medium"
479
+ },
480
+ key: semanticKey
481
+ }
482
+ ];
483
+ matchJavaScriptApplicationVersions = (leftNodes, rightNodes) => {
484
+ const left = new Map(leftNodes.map((node) => [node.node_id, node]));
485
+ const right = new Map(rightNodes.map((node) => [node.node_id, node]));
486
+ const pairs = [];
487
+ const ambiguousGroups = [];
488
+ for (const tier of matchTiers()) applyTier({
489
+ left,
490
+ right,
491
+ pairs,
492
+ ambiguousGroups,
493
+ tier
494
+ });
495
+ const remainingLeft = sortedNodes(left.values());
496
+ const remainingRight = sortedNodes(right.values());
497
+ const leftCandidates = new Map();
498
+ const rightCandidates = new Map();
499
+ for (const group of ambiguousGroups) {
500
+ const leftGroup = group.left.filter((node) => left.has(node.node_id));
501
+ if (leftGroup.length === 0) continue;
502
+ const rightGroup = group.right.filter((node) => right.has(node.node_id));
503
+ if (rightGroup.length === 0) continue;
504
+ recordCandidates(leftGroup, rightGroup, leftCandidates, rightCandidates);
505
+ }
506
+ return {
507
+ pairs: pairs.sort((a, b) => compareUnicodeCodePoints(`${a.left.node_id}\0${a.right.node_id}`, `${b.left.node_id}\0${b.right.node_id}`)),
508
+ unmatchedLeft: remainingLeft,
509
+ unmatchedRight: remainingRight,
510
+ candidatesForLeft: sortedCandidates(leftCandidates),
511
+ candidatesForRight: sortedCandidates(rightCandidates)
512
+ };
513
+ };
514
+ applyTier = (context) => {
515
+ const leftByKey = nodesByKey(context.left.values(), context.tier.key);
516
+ const rightByKey = nodesByKey(context.right.values(), context.tier.key);
517
+ for (const key of [...leftByKey.keys()].sort(compareUnicodeCodePoints)) {
518
+ const leftGroup = leftByKey.get(key) ?? [];
519
+ const rightGroup = rightByKey.get(key);
520
+ if (rightGroup === undefined) continue;
521
+ if (leftGroup.length !== 1 || rightGroup.length !== 1) {
522
+ context.ambiguousGroups.push({
523
+ left: leftGroup,
524
+ right: rightGroup
525
+ });
526
+ continue;
527
+ }
528
+ const leftNode = leftGroup[0];
529
+ const rightNode = rightGroup[0];
530
+ if (leftNode === undefined || rightNode === undefined) continue;
531
+ context.pairs.push({
532
+ left: leftNode,
533
+ right: rightNode,
534
+ ...context.tier.match
535
+ });
536
+ context.left.delete(leftNode.node_id);
537
+ context.right.delete(rightNode.node_id);
538
+ }
539
+ };
540
+ nodesByKey = (nodes, keyFor) => {
541
+ const output = new Map();
542
+ for (const node of nodes) {
543
+ const key = keyFor(node);
544
+ if (key === null) continue;
545
+ const group = output.get(key);
546
+ if (group === undefined) output.set(key, [node]);
547
+ else group.push(node);
548
+ }
549
+ return output;
550
+ };
551
+ recordCandidates = (left, right, leftCandidates, rightCandidates) => {
552
+ for (const leftNode of left) {
553
+ const candidates = leftCandidates.get(leftNode.node_id) ?? new Set();
554
+ for (const rightNode of right) candidates.add(rightNode.node_id);
555
+ leftCandidates.set(leftNode.node_id, candidates);
556
+ }
557
+ for (const rightNode of right) {
558
+ const candidates = rightCandidates.get(rightNode.node_id) ?? new Set();
559
+ for (const leftNode of left) candidates.add(leftNode.node_id);
560
+ rightCandidates.set(rightNode.node_id, candidates);
561
+ }
562
+ };
563
+ sortedCandidates = (candidates) => new Map([...candidates.entries()].map(([nodeId, values]) => [nodeId, [...values].sort(compareUnicodeCodePoints)]));
564
+ nodeIdentityKey = (node) => `node\0${node.kind}\0${node.node_id}`;
565
+ contentDigestKey = (node) => node.identity.strategy === "content-digest" ? `content\0${node.kind}\0${node.identity.sha256}` : null;
566
+ moduleSourceDigestKey = (node) => {
567
+ if (node.kind !== "javascript-module") return null;
568
+ const value = uniqueStringProperty(node, "source_sha256");
569
+ return value === null ? null : `module-source\0${node.kind}\0${value}`;
570
+ };
571
+ sourceMapKey = (node) => node.kind === "source-module" && node.identity.strategy === "source-map-original" ? `source-map\0${canonicalJson([node.identity.source_root, node.identity.original_source])}` : null;
572
+ structuralFingerprintKey = (node) => {
573
+ if (node.kind !== "javascript-module") return null;
574
+ const digest = uniqueStringProperty(node, "structural_fingerprint_sha256");
575
+ const algorithm = uniqueStringProperty(node, "structural_fingerprint_algorithm");
576
+ return digest === null || algorithm === null ? null : `structural\0${node.kind}\0${algorithm}\0${digest}`;
577
+ };
578
+ semanticKey = (node) => {
579
+ if ([
580
+ "javascript-module",
581
+ "javascript-chunk",
582
+ "runtime-script-instance",
583
+ "unknown"
584
+ ].includes(node.kind)) return null;
585
+ const properties = firstProperties(node);
586
+ const value = semanticValue(node, properties);
587
+ return value === null ? null : `semantic\0${node.kind}\0${value}`;
588
+ };
589
+ semanticValue = (node, properties) => {
590
+ if (node.kind === "endpoint") {
591
+ const kind = nonEmptyString(properties.endpoint_kind);
592
+ const value = exactString(properties.value);
593
+ return kind === null || value === null ? null : `${kind}\0${value}`;
594
+ }
595
+ if (node.kind === "storage") return joined(properties.storage_kind, properties.name ?? properties.mechanism);
596
+ if (node.kind === "ipc-channel") return properties.resolution === "dynamic" ? null : exactString(properties.channel) ?? firstLabel(node);
597
+ if (node.kind === "context-bridge-api") return firstLabel(node) ?? exactString(properties.api_key) ?? nonEmptyString(properties.api_name);
598
+ if (node.kind === "native-export") return joined(properties.specifier, compositeKey([
599
+ stringList(properties.requested_members),
600
+ typeof properties.namespace_access === "boolean" ? properties.namespace_access : null,
601
+ typeof properties.dynamic_member_access === "boolean" ? properties.dynamic_member_access : null
602
+ ])) ?? firstLabel(node);
603
+ if ([
604
+ "electron-main",
605
+ "electron-preload",
606
+ "electron-renderer",
607
+ "electron-utility"
608
+ ].includes(node.kind)) return joined(properties.declared_path, properties.resolved_path);
609
+ if (node.kind === "package") return nonEmptyString(properties.name);
610
+ return canonicalPath(node) ?? nonEmptyString(properties.path);
611
+ };
612
+ canonicalPath = (node) => node.identity.strategy === "canonical-path" ? node.identity.path : null;
613
+ firstProperties = (node) => node.observations[0]?.properties ?? {};
614
+ firstLabel = (node) => node.observations.find(({ label }) => label !== null)?.label ?? null;
615
+ uniqueStringProperty = (node, name) => {
616
+ const values = [...new Set(node.observations.map(({ properties }) => properties[name]).filter((value) => typeof value === "string"))];
617
+ return values.length === 1 ? values[0] ?? null : null;
618
+ };
619
+ joined = (...values) => {
620
+ const strings = values.map(nonEmptyString);
621
+ return strings.some((value) => value === null) ? null : compositeKey(strings);
622
+ };
623
+ nonEmptyString = (value) => typeof value === "string" && value !== "" ? value : null;
624
+ exactString = (value) => typeof value === "string" ? value : null;
625
+ stringList = (value) => Array.isArray(value) ? value.filter((item) => typeof item === "string").sort(compareUnicodeCodePoints) : [];
626
+ sortedNodes = (nodes) => [...nodes].sort((left, right) => compareUnicodeCodePoints(left.node_id, right.node_id));
627
+ })))();
628
+ }
629
+
630
+ //#endregion
631
+ //#region dist/domain/javascript/javascriptApplicationVersionComparison.js
632
+ var compareJavaScriptApplicationVersions, summary, countStatus$2, matchingSummary, countBasis, comparisonCoverage$2, comparisonLimitations$2;
633
+ function init_javascriptApplicationVersionComparison() {
634
+ return (init_javascriptApplicationVersionComparison = __esmMin((() => {
635
+ init_canonicalDigest();
636
+ init_canonicalOrdering();
637
+ init_javascriptApplicationChangeGraph();
638
+ init_javascriptApplicationVersionComparisonSchemas();
639
+ init_javascriptApplicationVersionItems();
640
+ init_javascriptApplicationVersionKeys();
641
+ compareJavaScriptApplicationVersions = (input) => {
642
+ const matching = matchJavaScriptApplicationVersions(input.left.graph.nodes, input.right.graph.nodes);
643
+ const projection = classifyJavaScriptApplicationVersions(matching, {
644
+ leftGraph: input.left.graph,
645
+ rightGraph: input.right.graph,
646
+ leftEvidenceId: input.left.evidenceId,
647
+ rightEvidenceId: input.right.evidenceId,
648
+ leftNativeEvidence: input.leftNativeEvidence,
649
+ rightNativeEvidence: input.rightNativeEvidence
650
+ });
651
+ const changeGraph = buildJavaScriptApplicationChangeGraph({
652
+ left: input.left.graph,
653
+ right: input.right.graph,
654
+ leftEvidenceId: input.left.evidenceId,
655
+ rightEvidenceId: input.right.evidenceId,
656
+ items: projection.items
657
+ });
658
+ const evidenceLinks = uniqueSorted(projection.items.flatMap(({ evidence_links: links }) => links));
659
+ const omissions = {
660
+ left_graph_omitted_count: input.left.graph.coverage.omitted_count,
661
+ right_graph_omitted_count: input.right.graph.coverage.omitted_count
662
+ };
663
+ const coverage = comparisonCoverage$2(input, omissions);
664
+ const semantic = {
665
+ left: {
666
+ evidence_id: input.left.evidenceId,
667
+ graph_id: input.left.graph.graph_id,
668
+ root_artifact_sha256: input.left.rootArtifactSha256
669
+ },
670
+ right: {
671
+ evidence_id: input.right.evidenceId,
672
+ graph_id: input.right.graph.graph_id,
673
+ root_artifact_sha256: input.right.rootArtifactSha256
674
+ },
675
+ summary: summary(projection.items),
676
+ matching: matchingSummary(projection.items),
677
+ items: projection.items,
678
+ graph: changeGraph.graph,
679
+ coverage,
680
+ evidence_links: evidenceLinks,
681
+ limitations: comparisonLimitations$2(input)
682
+ };
683
+ return ownedApplicationVersionComparisonResultSchema.parse({
684
+ ...semantic,
685
+ comparison_id: `javc_${digestCanonicalValue(semantic, "Application version comparison")}`
686
+ });
687
+ };
688
+ summary = (items) => ({
689
+ unchanged: countStatus$2(items, "unchanged"),
690
+ added: countStatus$2(items, "added"),
691
+ removed: countStatus$2(items, "removed"),
692
+ changed: countStatus$2(items, "changed"),
693
+ unknown: countStatus$2(items, "unknown")
694
+ });
695
+ countStatus$2 = (items, status) => items.filter((item) => item.status === status).length;
696
+ matchingSummary = (items) => ({
697
+ exact_node_identity: countBasis(items, "exact-node-identity"),
698
+ exact_content_digest: countBasis(items, "exact-content-digest"),
699
+ exact_module_source_digest: countBasis(items, "exact-module-source-digest"),
700
+ source_map_identity: countBasis(items, "source-map-identity"),
701
+ structural_fingerprint: countBasis(items, "structural-fingerprint"),
702
+ semantic_key: countBasis(items, "semantic-key"),
703
+ ambiguous: items.filter(({ match }) => match.status === "ambiguous").length,
704
+ unmatched: items.filter(({ match }) => match.status === "unmatched").length
705
+ });
706
+ countBasis = (items, basis) => items.filter(({ match }) => match.basis === basis).length;
707
+ comparisonCoverage$2 = (input, omissions) => {
708
+ const context = {
709
+ left_graph_status: input.left.graph.coverage.status,
710
+ right_graph_status: input.right.graph.coverage.status
711
+ };
712
+ const sourceGraphsComplete = input.left.graph.coverage.status === "complete" && input.right.graph.coverage.status === "complete";
713
+ const sourceGraphsTruncated = input.left.graph.coverage.truncated || input.right.graph.coverage.truncated;
714
+ return {
715
+ ...context,
716
+ ...omissions,
717
+ status: sourceGraphsComplete ? "complete-within-inputs" : sourceGraphsTruncated ? "truncated" : "partial"
718
+ };
719
+ };
720
+ comparisonLimitations$2 = (input) => uniqueSorted([
721
+ "Application comparison never uses bundler module ordinals as persistent identity and performs no fuzzy pairing.",
722
+ "Exact digest equality proves byte identity only; source-map, structural-fingerprint, and semantic-key matches retain inferred confidence.",
723
+ "Minified names and chunk locations are not assumed stable across versions.",
724
+ "The comparison reads retained graphs and Evidence only; it does not execute either application.",
725
+ "Native Evidence is linked only by exact subject digest; provider snapshot reuse remains target/provider/profile exact.",
726
+ ...input.left.graph.coverage.status === "complete" && input.right.graph.coverage.status === "complete" ? [] : ["At least one source graph is incomplete; unmatched entities on the opposite side remain unknown rather than added or removed."]
727
+ ]);
728
+ })))();
729
+ }
730
+
731
+ //#endregion
732
+ //#region dist/domain/javascript/javascriptExportShapeComparisonIdentity.js
733
+ var canonicalExportShapeValue, digestExportShapeValue;
734
+ function init_javascriptExportShapeComparisonIdentity() {
735
+ return (init_javascriptExportShapeComparisonIdentity = __esmMin((() => {
736
+ canonicalExportShapeValue = (value) => {
737
+ const encoded = canonicalize(value);
738
+ if (encoded === undefined) throw new TypeError("JavaScript export shape comparison could not canonicalize data");
739
+ return encoded;
740
+ };
741
+ digestExportShapeValue = (value) => createHash("sha256").update(canonicalExportShapeValue(value)).digest("hex");
742
+ })))();
743
+ }
744
+
745
+ //#endregion
746
+ //#region dist/domain/javascript/javascriptExportShapeSelection.js
747
+ var selectJavaScriptExport, retainJavaScriptExportShapes, selectorBase, unresolvedSelection, exportCandidates, candidateKey, returnShapeFor, unavailableReturnShape;
748
+ function init_javascriptExportShapeSelection() {
749
+ return (init_javascriptExportShapeSelection = __esmMin((() => {
750
+ init_javascriptExportShapeComparisonSchemas();
751
+ init_unicodeCodePointOrder();
752
+ selectJavaScriptExport = (side) => {
753
+ const candidates = exportCandidates(side.graph);
754
+ const exact = candidates.filter(({ modulePath, exportName }) => modulePath === side.modulePath && exportName === side.exportName);
755
+ const matchingOneSelector = candidates.filter(({ modulePath, exportName }) => modulePath === side.modulePath || exportName === side.exportName);
756
+ const diagnosticPool = exact.length > 0 ? exact : matchingOneSelector.length > 0 ? matchingOneSelector : candidates;
757
+ const base = selectorBase(side, diagnosticPool);
758
+ if (exact.length === 0) return unresolvedSelection(base, {
759
+ status: "missing",
760
+ selected_node_id: null
761
+ }, [`No exact export binding matched ${side.modulePath}:${side.exportName}.`]);
762
+ if (exact.length > 1) return unresolvedSelection(base, {
763
+ status: "ambiguous",
764
+ selected_node_id: null
765
+ }, [`Multiple exact export bindings matched ${side.modulePath}:${side.exportName}; none was selected.`]);
766
+ const selected = exact[0];
767
+ if (selected === undefined || !selected.trusted) return unresolvedSelection(base, {
768
+ status: "unavailable",
769
+ selected_node_id: selected?.node.node_id ?? null
770
+ }, ["The exact export binding lacks the expected static-analysis authority."]);
771
+ const returnShape = returnShapeFor(selected.node, side);
772
+ if (returnShape.projection === null) return unresolvedSelection(base, {
773
+ status: "unavailable",
774
+ selected_node_id: selected.node.node_id
775
+ }, [returnShape.reason]);
776
+ return {
777
+ selection: {
778
+ ...base,
779
+ status: "selected",
780
+ selected_node_id: selected.node.node_id
781
+ },
782
+ projection: returnShape.projection,
783
+ observationComplete: returnShape.observationComplete,
784
+ limitations: []
785
+ };
786
+ };
787
+ retainJavaScriptExportShapes = (selection) => ({
788
+ shapes: selection.projection?.static_return_shapes ?? [],
789
+ omitted: 0
790
+ });
791
+ selectorBase = (side, candidates) => ({
792
+ evidence_id: side.evidenceId,
793
+ graph_id: side.graph.graph_id,
794
+ requested_module_path: side.modulePath,
795
+ requested_export_name: side.exportName,
796
+ candidates: candidates.map((candidate) => ({
797
+ node_id: candidate.node.node_id,
798
+ module_path: candidate.modulePath,
799
+ export_name: candidate.exportName,
800
+ matches_requested_module: candidate.modulePath === side.modulePath,
801
+ matches_requested_export: candidate.exportName === side.exportName
802
+ })),
803
+ omitted_candidates: 0
804
+ });
805
+ unresolvedSelection = (base, resolution, limitations) => ({
806
+ selection: {
807
+ ...base,
808
+ ...resolution
809
+ },
810
+ projection: null,
811
+ observationComplete: false,
812
+ limitations
813
+ });
814
+ exportCandidates = (graph) => {
815
+ const candidates = new Map();
816
+ for (const node of graph.nodes) {
817
+ for (const observation of node.observations) {
818
+ const properties = observation.properties;
819
+ if (properties.semantic_role !== "export-binding") continue;
820
+ const modulePath = properties.module_path;
821
+ const exportName = properties.exported_name;
822
+ if (typeof modulePath !== "string" || typeof exportName !== "string") continue;
823
+ const key = `${node.node_id}\0${modulePath}\0${exportName}`;
824
+ const trusted = observation.evidence.authority === "ast-static-analysis" && observation.evidence.state === "observed" && observation.evidence.extractor.operation === "recover-module-export";
825
+ const existing = candidates.get(key);
826
+ candidates.set(key, {
827
+ node,
828
+ modulePath,
829
+ exportName,
830
+ trusted: trusted || existing?.trusted === true
831
+ });
832
+ }
833
+ }
834
+ return [...candidates.values()].sort((left, right) => compareUnicodeCodePoints(candidateKey(left), candidateKey(right)));
835
+ };
836
+ candidateKey = (candidate) => `${candidate.modulePath}\0${candidate.exportName}\0${candidate.node.node_id}`;
837
+ returnShapeFor = (node, side) => {
838
+ const roleObservations = node.observations.filter(({ properties }) => properties.semantic_role === "export-return-shapes");
839
+ const parsed = roleObservations.map((observation) => ({
840
+ observation,
841
+ result: projectedExportReturnShapesSchema.safeParse(observation.properties)
842
+ }));
843
+ if (parsed.some(({ result }) => !result.success)) return unavailableReturnShape("The export return-shape observation is malformed.");
844
+ const matching = parsed.filter(({ result }) => result.success && result.data.module_path === side.modulePath && result.data.exported_name === side.exportName);
845
+ if (matching.length !== 1) return unavailableReturnShape(matching.length === 0 ? "No exact static return-shape observation is available for the selected export." : "Multiple static return-shape observations matched the selected export.");
846
+ const selected = matching[0];
847
+ if (selected === undefined || !selected.result.success) return unavailableReturnShape("The selected return-shape observation could not be parsed.");
848
+ const { observation } = selected;
849
+ const trusted = observation.evidence.authority === "static-relationship-inference" && observation.evidence.state === "inferred" && observation.evidence.extractor.operation === "recover-export-return-shapes";
850
+ if (!trusted) return unavailableReturnShape("The return-shape observation lacks the expected static-inference authority.");
851
+ return {
852
+ projection: selected.result.data,
853
+ observationComplete: observation.evidence.coverage.status === "complete" && !observation.evidence.coverage.truncated
854
+ };
855
+ };
856
+ unavailableReturnShape = (reason) => ({
857
+ projection: null,
858
+ observationComplete: false,
859
+ reason
860
+ });
861
+ })))();
862
+ }
863
+
864
+ //#endregion
865
+ //#region dist/domain/javascript/javascriptExportShapeVariants.js
866
+ var UNKNOWN_COVERAGE_PRESENCE, pairJavaScriptExportShapeVariants, buildJavaScriptExportShapeChanges, buildJavaScriptExportShapeInventories, inventoryFor, hasPartialJavaScriptExportPropertyCoverage, discriminantOccurrences, reciprocalPairs, addTarget, indexesNotIn, compareDiscriminants, selectionUnknownChange, emptyShapeUnknownChange, diffPair, fieldAtPath, fieldChangeStatus, fieldPresence, propertyCoverageComplete, parentPointer, fieldAvailability, selectionAvailability, emptyShapeAvailability, unpairedChange, changeWithId, literalValue, primitiveArray, isPrimitive, capitalize;
867
+ function init_javascriptExportShapeVariants() {
868
+ return (init_javascriptExportShapeVariants = __esmMin((() => {
869
+ init_javascriptExportShapeComparisonIdentity();
870
+ init_canonicalOrdering();
871
+ init_unicodeCodePointOrder();
872
+ UNKNOWN_COVERAGE_PRESENCE = {
873
+ left: "unknown-coverage",
874
+ right: "unknown-coverage"
875
+ };
876
+ pairJavaScriptExportShapeVariants = (left, right) => {
877
+ const leftKeys = discriminantOccurrences(left);
878
+ const rightKeys = discriminantOccurrences(right);
879
+ const edges = new Map();
880
+ const leftTargets = new Map();
881
+ const rightTargets = new Map();
882
+ for (const [key, leftOccurrence] of leftKeys) {
883
+ const rightOccurrence = rightKeys.get(key);
884
+ if (leftOccurrence.indexes.length !== 1 || rightOccurrence?.indexes.length !== 1) continue;
885
+ const leftIndex = leftOccurrence.indexes[0];
886
+ const rightIndex = rightOccurrence.indexes[0];
887
+ if (leftIndex === undefined || rightIndex === undefined) continue;
888
+ const edgeKey = `${String(leftIndex)}:${String(rightIndex)}`;
889
+ edges.set(edgeKey, [...edges.get(edgeKey) ?? [], leftOccurrence.discriminant]);
890
+ addTarget(leftTargets, leftIndex, rightIndex);
891
+ addTarget(rightTargets, rightIndex, leftIndex);
892
+ }
893
+ const pairs = reciprocalPairs(leftTargets, rightTargets, edges);
894
+ const pairedLeft = new Set(pairs.map(({ leftIndex }) => leftIndex));
895
+ const pairedRight = new Set(pairs.map(({ rightIndex }) => rightIndex));
896
+ return {
897
+ pairs,
898
+ unpairedLeft: indexesNotIn(left, pairedLeft),
899
+ unpairedRight: indexesNotIn(right, pairedRight)
900
+ };
901
+ };
902
+ buildJavaScriptExportShapeChanges = (input) => {
903
+ if (input.leftSelection.selection.status !== "selected" || input.rightSelection.selection.status !== "selected") return [selectionUnknownChange(input)];
904
+ if (input.leftShapes.length === 0 && input.rightShapes.length === 0) return [emptyShapeUnknownChange(input)];
905
+ const paired = input.pairing.pairs.flatMap((pair) => {
906
+ const left = input.leftShapes[pair.leftIndex];
907
+ const right = input.rightShapes[pair.rightIndex];
908
+ return left === undefined || right === undefined ? [] : diffPair(left, right, pair.discriminant, input.evidenceLinks);
909
+ });
910
+ const unpairedLeft = input.pairing.unpairedLeft.flatMap((index) => {
911
+ const shape = input.leftShapes[index];
912
+ return shape === undefined ? [] : [unpairedChange("left", shape, input.evidenceLinks)];
913
+ });
914
+ const unpairedRight = input.pairing.unpairedRight.flatMap((index) => {
915
+ const shape = input.rightShapes[index];
916
+ return shape === undefined ? [] : [unpairedChange("right", shape, input.evidenceLinks)];
917
+ });
918
+ return [
919
+ ...paired,
920
+ ...unpairedLeft,
921
+ ...unpairedRight
922
+ ];
923
+ };
924
+ buildJavaScriptExportShapeInventories = (input) => {
925
+ const leftPairs = new Map(input.pairing.pairs.map((pair) => [pair.leftIndex, pair]));
926
+ const rightPairs = new Map(input.pairing.pairs.map((pair) => [pair.rightIndex, pair]));
927
+ return [...input.leftShapes.map((shape, index) => inventoryFor("left", index, shape, leftPairs.get(index))), ...input.rightShapes.map((shape, index) => inventoryFor("right", index, shape, rightPairs.get(index)))];
928
+ };
929
+ inventoryFor = (side, variantIndex, shape, pair) => ({
930
+ side,
931
+ variant_index: variantIndex,
932
+ discriminant: pair?.discriminant ?? null,
933
+ paired: pair !== undefined,
934
+ source_range: shape.source_range,
935
+ properties: uniqueSorted([...shape.fields.filter((field) => fieldPresence(shape, field, field.path) === "present").map(({ path }) => path), ...shape.property_coverage.map(({ path }) => path)]).filter((path) => path !== ""),
936
+ property_coverage: shape.property_coverage.map(({ path, status }) => ({
937
+ path,
938
+ status
939
+ }))
940
+ });
941
+ hasPartialJavaScriptExportPropertyCoverage = (shapes) => shapes.some((shape) => shape.property_coverage.some(({ status }) => status === "partial") || shape.fields.some((field) => fieldPresence(shape, field, field.path) === "unknown-coverage"));
942
+ discriminantOccurrences = (shapes) => {
943
+ const output = new Map();
944
+ shapes.forEach((shape, index) => {
945
+ for (const field of shape.fields) {
946
+ if (fieldPresence(shape, field, field.path) !== "present") continue;
947
+ const value = literalValue(field);
948
+ if (!value.found) continue;
949
+ const discriminant = {
950
+ path: field.path,
951
+ value: value.value
952
+ };
953
+ const key = canonicalExportShapeValue(discriminant);
954
+ const current = output.get(key);
955
+ output.set(key, {
956
+ discriminant,
957
+ indexes: [...current?.indexes ?? [], index]
958
+ });
959
+ }
960
+ });
961
+ return output;
962
+ };
963
+ reciprocalPairs = (leftTargets, rightTargets, edges) => {
964
+ const pairs = [];
965
+ for (const [leftIndex, targets] of leftTargets) {
966
+ if (targets.size !== 1) continue;
967
+ const rightIndex = [...targets][0];
968
+ if (rightIndex === undefined || rightTargets.get(rightIndex)?.size !== 1 || !rightTargets.get(rightIndex)?.has(leftIndex)) continue;
969
+ const discriminants = edges.get(`${String(leftIndex)}:${String(rightIndex)}`)?.toSorted(compareDiscriminants);
970
+ const discriminant = discriminants?.[0];
971
+ if (discriminant !== undefined) pairs.push({
972
+ leftIndex,
973
+ rightIndex,
974
+ discriminant
975
+ });
976
+ }
977
+ return pairs.sort((first, second) => compareDiscriminants(first.discriminant, second.discriminant));
978
+ };
979
+ addTarget = (map, source, target) => {
980
+ const values = map.get(source) ?? new Set();
981
+ values.add(target);
982
+ map.set(source, values);
983
+ };
984
+ indexesNotIn = (shapes, paired) => shapes.map((_, index) => index).filter((index) => !paired.has(index));
985
+ compareDiscriminants = (left, right) => compareUnicodeCodePoints(canonicalExportShapeValue(left), canonicalExportShapeValue(right));
986
+ selectionUnknownChange = (input) => changeWithId({
987
+ status: "unknown",
988
+ path: "",
989
+ discriminant: null,
990
+ presence: UNKNOWN_COVERAGE_PRESENCE,
991
+ left: selectionAvailability(input.leftSelection.selection, "left"),
992
+ right: selectionAvailability(input.rightSelection.selection, "right"),
993
+ left_source_range: null,
994
+ right_source_range: null,
995
+ evidence_links: input.evidenceLinks,
996
+ limitations: ["Both selectors must resolve one exact export with trusted static return shapes before comparison."]
997
+ });
998
+ emptyShapeUnknownChange = (input) => changeWithId({
999
+ status: "unknown",
1000
+ path: "",
1001
+ discriminant: null,
1002
+ presence: UNKNOWN_COVERAGE_PRESENCE,
1003
+ left: emptyShapeAvailability(input.leftShapes, "left"),
1004
+ right: emptyShapeAvailability(input.rightShapes, "right"),
1005
+ left_source_range: null,
1006
+ right_source_range: null,
1007
+ evidence_links: input.evidenceLinks,
1008
+ limitations: ["At least one selected export has no retained direct return shape."]
1009
+ });
1010
+ diffPair = (left, right, discriminant, evidenceLinks) => {
1011
+ const leftFields = new Map(left.fields.map((field) => [field.path, field]));
1012
+ const rightFields = new Map(right.fields.map((field) => [field.path, field]));
1013
+ const paths = uniqueSorted([
1014
+ ...leftFields.keys(),
1015
+ ...rightFields.keys(),
1016
+ ...left.property_coverage.map(({ path }) => path),
1017
+ ...right.property_coverage.map(({ path }) => path)
1018
+ ]);
1019
+ return paths.flatMap((path) => {
1020
+ const leftField = fieldAtPath(left, leftFields, path);
1021
+ const rightField = fieldAtPath(right, rightFields, path);
1022
+ const status = fieldChangeStatus({
1023
+ leftShape: left,
1024
+ rightShape: right,
1025
+ path,
1026
+ leftField,
1027
+ rightField
1028
+ });
1029
+ if (status === null) return [];
1030
+ return [changeWithId({
1031
+ status,
1032
+ path,
1033
+ discriminant,
1034
+ presence: {
1035
+ left: fieldPresence(left, leftField, path),
1036
+ right: fieldPresence(right, rightField, path)
1037
+ },
1038
+ left: fieldAvailability(leftField),
1039
+ right: fieldAvailability(rightField),
1040
+ left_source_range: left.source_range,
1041
+ right_source_range: right.source_range,
1042
+ evidence_links: evidenceLinks,
1043
+ limitations: status === "unknown" ? ["The static value or relevant parent-property coverage is incomplete."] : []
1044
+ })];
1045
+ });
1046
+ };
1047
+ fieldAtPath = (shape, fields, path) => {
1048
+ const field = fields.get(path);
1049
+ if (field !== undefined) return field;
1050
+ if (!shape.property_coverage.some((coverage) => coverage.path === path)) return undefined;
1051
+ return {
1052
+ path,
1053
+ presence: "present",
1054
+ state: "unknown",
1055
+ value: null,
1056
+ reason: "A static container is retained at this path, but no primitive field value is projected."
1057
+ };
1058
+ };
1059
+ fieldChangeStatus = ({ leftShape, rightShape, path, leftField, rightField }) => {
1060
+ const leftPresence = fieldPresence(leftShape, leftField, path);
1061
+ const rightPresence = fieldPresence(rightShape, rightField, path);
1062
+ if (leftField !== undefined && rightField !== undefined && canonicalExportShapeValue(leftField) === canonicalExportShapeValue(rightField)) return null;
1063
+ if (leftPresence === "absent" && rightPresence === "absent") return null;
1064
+ if (leftPresence === "unknown-coverage" || rightPresence === "unknown-coverage") return "unknown";
1065
+ if (leftPresence === "absent") return "added";
1066
+ if (rightPresence === "absent") return "removed";
1067
+ if (leftField !== undefined && rightField !== undefined) {
1068
+ return leftField.state === "unknown" || rightField.state === "unknown" ? "unknown" : "changed";
1069
+ }
1070
+ return null;
1071
+ };
1072
+ fieldPresence = (shape, field, path) => {
1073
+ if (field !== undefined) return field.presence;
1074
+ return propertyCoverageComplete(shape, parentPointer(path)) ? "absent" : "unknown-coverage";
1075
+ };
1076
+ propertyCoverageComplete = (shape, path) => path !== null && shape.property_coverage.some((coverage) => coverage.path === path && coverage.status === "complete");
1077
+ parentPointer = (path) => {
1078
+ if (path === "") return null;
1079
+ const separator = path.lastIndexOf("/");
1080
+ return separator < 0 ? null : path.slice(0, separator);
1081
+ };
1082
+ fieldAvailability = (field) => {
1083
+ if (field === undefined || field.presence === "absent") return { availability: "absent" };
1084
+ if (field.state === "unknown") return {
1085
+ availability: "unknown",
1086
+ reason: field.reason ?? "Static field value is unknown."
1087
+ };
1088
+ if (field.state === "union") return {
1089
+ availability: "union",
1090
+ values: primitiveArray(field.value)
1091
+ };
1092
+ const literal = literalValue(field);
1093
+ return literal.found ? {
1094
+ availability: "literal",
1095
+ value: literal.value
1096
+ } : {
1097
+ availability: "unknown",
1098
+ reason: "Static literal field failed its projection boundary."
1099
+ };
1100
+ };
1101
+ selectionAvailability = (selection, side) => ({
1102
+ availability: "unknown",
1103
+ reason: `${capitalize(side)} export selection is ${selection.status}.`
1104
+ });
1105
+ emptyShapeAvailability = (shapes, side) => ({
1106
+ availability: "unknown",
1107
+ reason: shapes.length === 0 ? `${capitalize(side)} export has no retained direct return shape.` : `${capitalize(side)} export return shape cannot be paired without an opposite variant.`
1108
+ });
1109
+ unpairedChange = (side, shape, evidenceLinks) => changeWithId({
1110
+ status: "unknown",
1111
+ path: "",
1112
+ discriminant: null,
1113
+ presence: UNKNOWN_COVERAGE_PRESENCE,
1114
+ left: {
1115
+ availability: "unknown",
1116
+ reason: side === "left" ? "Left return variant has no unique exact cross-version pairing." : "No left return variant was uniquely paired with this right variant."
1117
+ },
1118
+ right: {
1119
+ availability: "unknown",
1120
+ reason: side === "right" ? "Right return variant has no unique exact cross-version pairing." : "No right return variant was uniquely paired with this left variant."
1121
+ },
1122
+ left_source_range: side === "left" ? shape.source_range : null,
1123
+ right_source_range: side === "right" ? shape.source_range : null,
1124
+ evidence_links: evidenceLinks,
1125
+ limitations: ["The return variant was not paired because no reciprocal unique literal discriminant exists."]
1126
+ });
1127
+ changeWithId = (semantic) => ({
1128
+ ...semantic,
1129
+ change_id: `jesc_change_${digestExportShapeValue(semantic)}`
1130
+ });
1131
+ literalValue = (field) => field.state === "literal" && isPrimitive(field.value) ? {
1132
+ found: true,
1133
+ value: field.value
1134
+ } : { found: false };
1135
+ primitiveArray = (value) => Array.isArray(value) ? value.filter(isPrimitive) : [];
1136
+ isPrimitive = (value) => value === null || typeof value === "string" || typeof value === "number" || typeof value === "boolean";
1137
+ capitalize = (value) => `${value.slice(0, 1).toUpperCase()}${value.slice(1)}`;
1138
+ })))();
1139
+ }
1140
+
1141
+ //#endregion
1142
+ //#region dist/domain/javascript/javascriptExportShapeComparison.js
1143
+ var compareJavaScriptExportShapes, sortChanges, comparisonCoverage$1, comparisonTruncated, sourceProjectionTruncated, comparisonPartial, selectionPartial, comparisonLimitations$1, summarize, countStatus$1, evidencePair;
1144
+ function init_javascriptExportShapeComparison() {
1145
+ return (init_javascriptExportShapeComparison = __esmMin((() => {
1146
+ init_canonicalOrdering();
1147
+ init_unicodeCodePointOrder();
1148
+ init_javascriptExportShapeComparisonIdentity();
1149
+ init_javascriptExportShapeComparisonSchemas();
1150
+ init_javascriptExportShapeSelection();
1151
+ init_javascriptExportShapeVariants();
1152
+ compareJavaScriptExportShapes = (input) => {
1153
+ const left = selectJavaScriptExport(input.left);
1154
+ const right = selectJavaScriptExport(input.right);
1155
+ const leftRetained = retainJavaScriptExportShapes(left);
1156
+ const rightRetained = retainJavaScriptExportShapes(right);
1157
+ const pairing = pairJavaScriptExportShapeVariants(leftRetained.shapes, rightRetained.shapes);
1158
+ const evidenceLinks = evidencePair(input.left.evidenceId, input.right.evidenceId);
1159
+ const allChanges = sortChanges(buildJavaScriptExportShapeChanges({
1160
+ leftSelection: left,
1161
+ rightSelection: right,
1162
+ pairing,
1163
+ leftShapes: leftRetained.shapes,
1164
+ rightShapes: rightRetained.shapes,
1165
+ evidenceLinks
1166
+ }));
1167
+ const changes = allChanges;
1168
+ const omittedChanges = 0;
1169
+ const propertyInventories = buildJavaScriptExportShapeInventories({
1170
+ pairing,
1171
+ leftShapes: leftRetained.shapes,
1172
+ rightShapes: rightRetained.shapes
1173
+ });
1174
+ const coverage = comparisonCoverage$1({
1175
+ input,
1176
+ left,
1177
+ right,
1178
+ leftRetained,
1179
+ rightRetained,
1180
+ pairing,
1181
+ allChanges,
1182
+ omittedChanges
1183
+ });
1184
+ const limitations = comparisonLimitations$1(left, right, coverage.status);
1185
+ const semantic = {
1186
+ left: left.selection,
1187
+ right: right.selection,
1188
+ property_inventories: propertyInventories,
1189
+ summary: summarize(allChanges),
1190
+ changes,
1191
+ coverage,
1192
+ evidence_links: evidenceLinks,
1193
+ limitations
1194
+ };
1195
+ return javaScriptExportShapeComparisonResultSchema.parse({
1196
+ ...semantic,
1197
+ comparison_id: `jesc_${digestExportShapeValue(semantic)}`
1198
+ });
1199
+ };
1200
+ sortChanges = (changes) => changes.map((change, index) => ({
1201
+ change,
1202
+ index,
1203
+ sortKey: canonicalExportShapeValue({
1204
+ discriminant: change.discriminant,
1205
+ path: change.path,
1206
+ status: change.status,
1207
+ left_source_range: change.left_source_range,
1208
+ right_source_range: change.right_source_range,
1209
+ change_id: change.change_id
1210
+ })
1211
+ })).sort((left, right) => compareUnicodeCodePoints(left.sortKey, right.sortKey) || left.index - right.index).map(({ change }) => change);
1212
+ comparisonCoverage$1 = (context) => {
1213
+ const leftSource = context.left.projection?.return_shape_coverage;
1214
+ const rightSource = context.right.projection?.return_shape_coverage;
1215
+ const omittedCandidates = context.left.selection.omitted_candidates + context.right.selection.omitted_candidates;
1216
+ const truncated = comparisonTruncated(context, omittedCandidates);
1217
+ const partial = comparisonPartial(context);
1218
+ return {
1219
+ status: truncated ? "truncated" : partial ? "partial" : "complete-within-inputs",
1220
+ left_graph_status: context.input.left.graph.coverage.status,
1221
+ right_graph_status: context.input.right.graph.coverage.status,
1222
+ paired_variants: context.pairing.pairs.length,
1223
+ unpaired_left_variants: context.pairing.unpairedLeft.length,
1224
+ unpaired_right_variants: context.pairing.unpairedRight.length,
1225
+ omitted_left_variants: context.leftRetained.omitted,
1226
+ omitted_right_variants: context.rightRetained.omitted,
1227
+ left_source_omitted_variants: leftSource?.omitted_return_sites ?? null,
1228
+ right_source_omitted_variants: rightSource?.omitted_return_sites ?? null,
1229
+ left_omitted_fields: leftSource?.omitted_fields ?? 0,
1230
+ right_omitted_fields: rightSource?.omitted_fields ?? 0,
1231
+ left_omitted_property_coverage: leftSource?.omitted_property_coverage ?? 0,
1232
+ right_omitted_property_coverage: rightSource?.omitted_property_coverage ?? 0,
1233
+ omitted_candidates: omittedCandidates,
1234
+ omitted_changes: context.omittedChanges
1235
+ };
1236
+ };
1237
+ comparisonTruncated = (context, omittedCandidates) => context.leftRetained.omitted > 0 || context.rightRetained.omitted > 0 || omittedCandidates > 0 || context.omittedChanges > 0 || sourceProjectionTruncated(context.left) || sourceProjectionTruncated(context.right);
1238
+ sourceProjectionTruncated = (selection) => {
1239
+ const coverage = selection.projection?.return_shape_coverage;
1240
+ if (coverage === undefined) return false;
1241
+ return coverage.status === "truncated" || coverage.omitted_fields > 0 || coverage.omitted_property_coverage > 0 || coverage.projection_complete === false;
1242
+ };
1243
+ comparisonPartial = (context) => selectionPartial(context.left) || selectionPartial(context.right) || context.input.left.graph.coverage.status !== "complete" || context.input.right.graph.coverage.status !== "complete" || hasPartialJavaScriptExportPropertyCoverage(context.leftRetained.shapes) || hasPartialJavaScriptExportPropertyCoverage(context.rightRetained.shapes) || context.pairing.unpairedLeft.length > 0 || context.pairing.unpairedRight.length > 0 || context.allChanges.some(({ status }) => status === "unknown");
1244
+ selectionPartial = (selection) => {
1245
+ const coverage = selection.projection?.return_shape_coverage;
1246
+ return selection.selection.status !== "selected" || !selection.observationComplete || coverage?.status !== "complete" || coverage.projection_complete !== true;
1247
+ };
1248
+ comparisonLimitations$1 = (left, right, status) => uniqueSorted([
1249
+ "Return shapes are inferred from inert syntax and do not prove runtime behavior.",
1250
+ "Return variants are paired only by unique exact literal discriminants, never by source order.",
1251
+ "Dynamic values, incomplete object coverage, and ambiguous variants remain unknown.",
1252
+ "This static comparison cannot establish runtime semantics; run behavioral probes directly against the relevant application versions when that evidence is required.",
1253
+ ...left.limitations,
1254
+ ...right.limitations,
1255
+ ...status === "truncated" ? ["Comparison output or source return-shape recovery reached an explicit limit."] : [],
1256
+ ...status === "partial" ? ["At least one selector, graph, return shape, or property boundary is incomplete."] : []
1257
+ ]);
1258
+ summarize = (changes) => ({
1259
+ added: countStatus$1(changes, "added"),
1260
+ removed: countStatus$1(changes, "removed"),
1261
+ changed: countStatus$1(changes, "changed"),
1262
+ unknown: countStatus$1(changes, "unknown")
1263
+ });
1264
+ countStatus$1 = (changes, status) => changes.filter((change) => change.status === status).length;
1265
+ evidencePair = (left, right) => [left, right];
1266
+ })))();
1267
+ }
1268
+
1269
+ //#endregion
1270
+ //#region dist/domain/javascript/javascriptFeatureSeed.js
1271
+ var findApplicationFeatureSeeds, seedMatch, kindMatches, candidateFields, memberFieldSuffixes, relevantFields, identityFields, propertyFields, normalized;
1272
+ function init_javascriptFeatureSeed() {
1273
+ return (init_javascriptFeatureSeed = __esmMin((() => {
1274
+ init_unicodeCodePointOrder();
1275
+ init_javascriptFeatureTraceSchemas();
1276
+ findApplicationFeatureSeeds = (nodes, seed) => nodes.flatMap((node) => seedMatch(node, seed)).sort((left, right) => compareUnicodeCodePoints(`${left.node_id}\0${left.basis}\0${left.field}`, `${right.node_id}\0${right.basis}\0${right.field}`));
1277
+ seedMatch = (node, seed) => {
1278
+ const mode = featureSeedMatchMode(seed);
1279
+ const caseSensitive = seed.case_sensitive;
1280
+ const query = normalized(seed.value, caseSensitive);
1281
+ if (!kindMatches(node, seed.kind)) return [];
1282
+ const requestedEntryPath = seed.kind === "api" && "entry_path" in seed ? seed.entry_path : undefined;
1283
+ if (seed.kind === "api" && requestedEntryPath !== undefined && !node.observations.some(({ properties }) => {
1284
+ const entryPath = properties.entry_path;
1285
+ return Array.isArray(entryPath) && entryPath.length === requestedEntryPath.length && entryPath.every((segment, index) => segment === requestedEntryPath[index]);
1286
+ })) return [];
1287
+ const match = candidateFields(node, seed.kind).find((candidate) => {
1288
+ const value = normalized(candidate.value, caseSensitive);
1289
+ return mode === "exact" ? value === query : value.includes(query);
1290
+ });
1291
+ return match === undefined ? [] : [{
1292
+ node_id: node.node_id,
1293
+ kind: node.kind,
1294
+ basis: match.basis,
1295
+ field: match.field
1296
+ }];
1297
+ };
1298
+ kindMatches = (node, kind) => {
1299
+ if (kind === "string" || kind === "node-id") return true;
1300
+ if (kind === "route") return node.kind === "endpoint" && node.observations.some(({ properties }) => properties.endpoint_kind === "route");
1301
+ if (kind === "api") return node.kind === "context-bridge-api" || node.kind === "javascript-expression" && node.observations.some((o) => o.properties.step_kind === "exposure");
1302
+ if (kind === "channel") return node.kind === "ipc-channel";
1303
+ if (kind === "module") return [
1304
+ "javascript-asset",
1305
+ "javascript-module",
1306
+ "source-module"
1307
+ ].includes(node.kind);
1308
+ return node.kind === "native-export";
1309
+ };
1310
+ candidateFields = (node, seedKind) => {
1311
+ if (seedKind === "node-id") return [{
1312
+ basis: "node-id",
1313
+ field: "node_id",
1314
+ value: node.node_id
1315
+ }];
1316
+ if (seedKind === "route") return node.observations.flatMap((observation, index) => ["value", "path"].flatMap((key) => {
1317
+ const value = observation.properties[key];
1318
+ return typeof value === "string" ? [{
1319
+ basis: "property",
1320
+ field: `observations[${String(index)}].properties.${key}`,
1321
+ value
1322
+ }] : [];
1323
+ }));
1324
+ const fields = [...identityFields(node), ...node.observations.flatMap((observation, index) => [
1325
+ ...observation.label === null ? [] : [{
1326
+ basis: "label",
1327
+ field: `observations[${String(index)}].label`,
1328
+ value: observation.label
1329
+ }],
1330
+ ...observation.source_map_reference !== null && observation.source_map_reference.resolution.kind !== "unresolved" ? [{
1331
+ basis: "property",
1332
+ field: `observations[${String(index)}].source_map_reference.resolution.path`,
1333
+ value: observation.source_map_reference.resolution.path
1334
+ }] : [],
1335
+ ...propertyFields(observation.properties, `observations[${String(index)}].properties`)
1336
+ ])];
1337
+ if (seedKind === "string") return fields;
1338
+ const names = relevantFields[seedKind];
1339
+ return fields.filter(({ field, selectionPath = field }) => names.some((name) => {
1340
+ const path = memberFieldSuffixes.has(name) ? selectionPath : field;
1341
+ return path === "identity" || path.endsWith(name);
1342
+ }));
1343
+ };
1344
+ memberFieldSuffixes = new Set([
1345
+ ".members",
1346
+ ".methods",
1347
+ ".exports",
1348
+ ".requested_members"
1349
+ ]);
1350
+ relevantFields = {
1351
+ route: [
1352
+ ".label",
1353
+ ".value",
1354
+ ".path"
1355
+ ],
1356
+ api: [
1357
+ ".label",
1358
+ ".api_name",
1359
+ ".api_key",
1360
+ ".key",
1361
+ ".methods",
1362
+ ".members"
1363
+ ],
1364
+ channel: [
1365
+ ".label",
1366
+ ".channel",
1367
+ ".key"
1368
+ ],
1369
+ module: [
1370
+ ".label",
1371
+ ".module_key",
1372
+ ".path",
1373
+ ".source",
1374
+ ".original_source",
1375
+ ".source_root",
1376
+ ".exports"
1377
+ ],
1378
+ "native-export": [
1379
+ ".label",
1380
+ ".key",
1381
+ ".requested_members",
1382
+ ".members"
1383
+ ]
1384
+ };
1385
+ identityFields = (node) => {
1386
+ const identity = node.identity;
1387
+ if (identity.strategy === "content-digest") return [{
1388
+ basis: "identity",
1389
+ field: "identity",
1390
+ value: identity.sha256
1391
+ }];
1392
+ if (identity.strategy === "source-map-original") return [{
1393
+ basis: "identity",
1394
+ field: "identity.original_source",
1395
+ value: identity.original_source
1396
+ }, ...identity.source_root === null ? [] : [{
1397
+ basis: "identity",
1398
+ field: "identity.source_root",
1399
+ value: identity.source_root
1400
+ }]];
1401
+ if (identity.strategy === "canonical-path") return [{
1402
+ basis: "identity",
1403
+ field: "identity.path",
1404
+ value: identity.path
1405
+ }];
1406
+ if (identity.strategy === "artifact-local-key") return [{
1407
+ basis: "identity",
1408
+ field: "identity.key",
1409
+ value: identity.key
1410
+ }];
1411
+ if (identity.strategy === "runtime-instance") return [{
1412
+ basis: "identity",
1413
+ field: "identity.runtime_key",
1414
+ value: identity.runtime_key
1415
+ }];
1416
+ return [];
1417
+ };
1418
+ propertyFields = (value, prefix) => {
1419
+ const output = [];
1420
+ const pending = [{
1421
+ current: value,
1422
+ path: prefix,
1423
+ selectionPath: prefix
1424
+ }];
1425
+ while (pending.length > 0) {
1426
+ const next = pending.pop();
1427
+ if (next === undefined) continue;
1428
+ const { current, path, selectionPath } = next;
1429
+ if (typeof current === "string") {
1430
+ output.push({
1431
+ basis: "property",
1432
+ field: path,
1433
+ selectionPath,
1434
+ value: current
1435
+ });
1436
+ continue;
1437
+ }
1438
+ if (Array.isArray(current)) {
1439
+ for (let index = current.length - 1; index >= 0; index -= 1) {
1440
+ const item = current[index];
1441
+ if (item !== undefined) pending.push({
1442
+ current: item,
1443
+ path: `${path}[${String(index)}]`,
1444
+ selectionPath
1445
+ });
1446
+ }
1447
+ continue;
1448
+ }
1449
+ if (current !== null && typeof current === "object") {
1450
+ for (const key of Object.keys(current).sort(compareUnicodeCodePoints).reverse()) pending.push({
1451
+ current: current[key] ?? null,
1452
+ path: `${path}.${key}`,
1453
+ selectionPath: `${selectionPath}.${key}`
1454
+ });
1455
+ }
1456
+ }
1457
+ return output;
1458
+ };
1459
+ normalized = (value, caseSensitive) => {
1460
+ const normalizedValue = value.normalize(caseSensitive ? "NFC" : "NFKC");
1461
+ return caseSensitive ? normalizedValue : normalizedValue.toLocaleLowerCase("en-US");
1462
+ };
1463
+ })))();
1464
+ }
1465
+
1466
+ //#endregion
1467
+ //#region dist/domain/javascript/javascriptFeatureTraversal.js
1468
+ var traverseApplicationFeature, buildAdjacency, addAdjacency;
1469
+ function init_javascriptFeatureTraversal() {
1470
+ return (init_javascriptFeatureTraversal = __esmMin((() => {
1471
+ init_unicodeCodePointOrder();
1472
+ traverseApplicationFeature = (graph, seedNodeIds, direction) => {
1473
+ const nodeById = new Map(graph.nodes.map((node) => [node.node_id, node]));
1474
+ const adjacency = buildAdjacency(graph.edges, direction);
1475
+ const visited = new Set(seedNodeIds);
1476
+ const retainedEdges = new Map();
1477
+ const predecessors = new Map();
1478
+ const queue = [...seedNodeIds];
1479
+ for (let offset = 0; offset < queue.length; offset += 1) {
1480
+ const current = queue[offset];
1481
+ if (current === undefined) continue;
1482
+ for (const entry of adjacency.get(current) ?? []) {
1483
+ retainedEdges.set(entry.edge.edge_id, entry.edge);
1484
+ if (visited.has(entry.nextNodeId)) continue;
1485
+ if (!nodeById.has(entry.nextNodeId)) continue;
1486
+ visited.add(entry.nextNodeId);
1487
+ predecessors.set(entry.nextNodeId, {
1488
+ previousNodeId: current,
1489
+ edgeId: entry.edge.edge_id
1490
+ });
1491
+ queue.push(entry.nextNodeId);
1492
+ }
1493
+ }
1494
+ return {
1495
+ nodes: [...visited].map((nodeId) => nodeById.get(nodeId)).filter((node) => node !== undefined).sort((left, right) => compareUnicodeCodePoints(left.node_id, right.node_id)),
1496
+ edges: [...retainedEdges.values()].sort((left, right) => compareUnicodeCodePoints(left.edge_id, right.edge_id)),
1497
+ predecessors
1498
+ };
1499
+ };
1500
+ buildAdjacency = (edges, direction) => {
1501
+ const adjacency = new Map();
1502
+ for (const edge of edges) {
1503
+ if (direction !== "incoming") addAdjacency(adjacency, edge.source_node_id, {
1504
+ edge,
1505
+ nextNodeId: edge.target_node_id
1506
+ });
1507
+ if (direction !== "outgoing") addAdjacency(adjacency, edge.target_node_id, {
1508
+ edge,
1509
+ nextNodeId: edge.source_node_id
1510
+ });
1511
+ }
1512
+ for (const entries of adjacency.values()) entries.sort((left, right) => compareUnicodeCodePoints(`${left.edge.edge_id}\0${left.nextNodeId}`, `${right.edge.edge_id}\0${right.nextNodeId}`));
1513
+ return adjacency;
1514
+ };
1515
+ addAdjacency = (adjacency, nodeId, entry) => {
1516
+ const entries = adjacency.get(nodeId);
1517
+ if (entries === undefined) adjacency.set(nodeId, [entry]);
1518
+ else entries.push(entry);
1519
+ };
1520
+ })))();
1521
+ }
1522
+
1523
+ //#endregion
1524
+ //#region dist/domain/javascript/javascriptNativeHandoff.js
1525
+ var buildJavaScriptNativeHandoffs, artifactPath, nativeExportNodes, requestedExports, stringArray, uniqueProviders;
1526
+ function init_javascriptNativeHandoff() {
1527
+ return (init_javascriptNativeHandoff = __esmMin((() => {
1528
+ init_unicodeCodePointOrder();
1529
+ buildJavaScriptNativeHandoffs = (nodes, edges, nativeEvidence) => {
1530
+ let nodeById;
1531
+ return nodes.filter(({ kind }) => kind === "native-addon").flatMap((node) => {
1532
+ if (node.identity.strategy !== "content-digest") return [];
1533
+ const digest = node.identity.sha256;
1534
+ const linked = nativeEvidence.filter(({ subject }) => subject?.digest.sha256 === digest);
1535
+ nodeById ??= new Map(nodes.map((candidate) => [candidate.node_id, candidate]));
1536
+ const exportNodes = nativeExportNodes(node, edges, nodeById);
1537
+ return [{
1538
+ native_node_id: node.node_id,
1539
+ artifact_sha256: digest,
1540
+ artifact_path: artifactPath(node),
1541
+ export_node_ids: exportNodes.map(({ node_id: id }) => id),
1542
+ requested_exports: requestedExports(exportNodes),
1543
+ status: linked.length === 0 ? "requires-provider-analysis" : "evidence-linked",
1544
+ providers: uniqueProviders(linked),
1545
+ evidence_ids: linked.map(({ evidence_id: id }) => id).sort(compareUnicodeCodePoints),
1546
+ recommended_tools: [
1547
+ "open_binary",
1548
+ "binary_overview",
1549
+ "search_procedures",
1550
+ "analyze_function",
1551
+ "xrefs"
1552
+ ]
1553
+ }];
1554
+ }).sort((left, right) => compareUnicodeCodePoints(left.native_node_id, right.native_node_id));
1555
+ };
1556
+ artifactPath = (node) => {
1557
+ for (const { evidence } of node.observations) if (evidence.location.available && evidence.location.value.kind === "artifact-path") return evidence.location.value.path;
1558
+ return null;
1559
+ };
1560
+ nativeExportNodes = (addon, edges, nodeById) => {
1561
+ const ids = edges.flatMap((edge) => {
1562
+ if (edge.source_node_id === addon.node_id && ["contains", "exposes"].includes(edge.relation)) return [edge.target_node_id];
1563
+ if (edge.target_node_id === addon.node_id && ["imports", "loads"].includes(edge.relation)) return [edge.source_node_id];
1564
+ return [];
1565
+ });
1566
+ return [...new Set(ids)].map((id) => nodeById.get(id)).filter((node) => node?.kind === "native-export").sort((left, right) => compareUnicodeCodePoints(left.node_id, right.node_id));
1567
+ };
1568
+ requestedExports = (nodes) => {
1569
+ const values = nodes.flatMap((node) => node.observations.flatMap((observation) => [
1570
+ ...observation.label === null || Array.isArray(observation.properties.requested_members) ? [] : [observation.label],
1571
+ ...stringArray(observation.properties.requested_members),
1572
+ ...stringArray(observation.properties.members)
1573
+ ]));
1574
+ return [...new Set(values)].sort(compareUnicodeCodePoints);
1575
+ };
1576
+ stringArray = (value) => Array.isArray(value) ? value.filter((item) => typeof item === "string") : [];
1577
+ uniqueProviders = (evidence) => [...new Map(evidence.map(({ provider }) => [`${provider.id}\0${provider.name}\0${provider.version ?? ""}`, provider])).values()].sort((left, right) => compareUnicodeCodePoints(`${left.id}\0${left.name}\0${left.version ?? ""}`, `${right.id}\0${right.name}\0${right.version ?? ""}`));
1578
+ })))();
1579
+ }
1580
+
1581
+ //#endregion
1582
+ //#region dist/domain/javascript/javascriptFeatureTrace.js
1583
+ var traceApplicationFeature, noMatchResult, traceGraph, traceGraphCoverage, terminalPaths, pathTo, isTerminal, factSummary, traceCoverageStatus, traceLimitations, sourceCoverageLimitations;
1584
+ function init_javascriptFeatureTrace() {
1585
+ return (init_javascriptFeatureTrace = __esmMin((() => {
1586
+ init_canonicalDigest();
1587
+ init_canonicalOrdering();
1588
+ init_unicodeCodePointOrder();
1589
+ init_javascriptApplicationGraph();
1590
+ init_javascriptFeatureTraceSchemas();
1591
+ init_javascriptFeatureSeed();
1592
+ init_javascriptFeatureTraversal();
1593
+ init_javascriptNativeHandoff();
1594
+ traceApplicationFeature = (source) => {
1595
+ const input = {
1596
+ ...source,
1597
+ seed: applicationFeatureSeedSchema.parse(source.seed)
1598
+ };
1599
+ const allSeedMatches = findApplicationFeatureSeeds(input.graph.nodes, input.seed);
1600
+ const seedMatches = allSeedMatches;
1601
+ if (seedMatches.length === 0) return noMatchResult(input);
1602
+ const traversal = traverseApplicationFeature(input.graph, seedMatches.map(({ node_id: id }) => id), input.direction);
1603
+ const graph = traceGraph(input, seedMatches, traversal);
1604
+ const paths = terminalPaths(traversal, seedMatches);
1605
+ const nativeHandoffs = buildJavaScriptNativeHandoffs(traversal.nodes, traversal.edges, input.nativeEvidence);
1606
+ const evidenceLinks = uniqueSorted([input.sourceEvidenceId, ...nativeHandoffs.flatMap(({ evidence_ids: ids }) => ids)]);
1607
+ const semantic = {
1608
+ source_evidence_id: input.sourceEvidenceId,
1609
+ source_graph_id: input.graph.graph_id,
1610
+ seed: input.seed,
1611
+ direction: input.direction,
1612
+ seed_matches: seedMatches,
1613
+ graph,
1614
+ paths,
1615
+ native_handoffs: nativeHandoffs,
1616
+ summary: {
1617
+ matched_seeds: seedMatches.length,
1618
+ traced_nodes: traversal.nodes.length,
1619
+ traced_edges: traversal.edges.length,
1620
+ terminal_paths: paths.length,
1621
+ native_handoffs: nativeHandoffs.length,
1622
+ ...factSummary(traversal.nodes, traversal.edges)
1623
+ },
1624
+ coverage: {
1625
+ status: traceCoverageStatus(input.graph),
1626
+ source_graph_status: input.graph.coverage.status,
1627
+ total_seed_matches: allSeedMatches.length
1628
+ },
1629
+ evidence_links: evidenceLinks,
1630
+ limitations: traceLimitations(input.graph)
1631
+ };
1632
+ return applicationFeatureTraceResultSchema.parse({
1633
+ ...semantic,
1634
+ trace_id: `jatr_${digestCanonicalValue(semantic, "Feature trace")}`
1635
+ });
1636
+ };
1637
+ noMatchResult = (input) => {
1638
+ const semantic = {
1639
+ source_evidence_id: input.sourceEvidenceId,
1640
+ source_graph_id: input.graph.graph_id,
1641
+ seed: input.seed,
1642
+ direction: input.direction,
1643
+ seed_matches: [],
1644
+ graph: null,
1645
+ paths: [],
1646
+ native_handoffs: [],
1647
+ summary: {
1648
+ matched_seeds: 0,
1649
+ traced_nodes: 0,
1650
+ traced_edges: 0,
1651
+ terminal_paths: 0,
1652
+ native_handoffs: 0,
1653
+ observed_facts: 0,
1654
+ inferred_facts: 0,
1655
+ unknown_facts: 0,
1656
+ unavailable_facts: 0
1657
+ },
1658
+ coverage: {
1659
+ status: "no-match",
1660
+ source_graph_status: input.graph.coverage.status,
1661
+ total_seed_matches: 0
1662
+ },
1663
+ evidence_links: [input.sourceEvidenceId],
1664
+ limitations: uniqueSorted(["No graph entity matched the literal seed; this is not evidence that the feature is absent.", ...sourceCoverageLimitations(input.graph)])
1665
+ };
1666
+ return applicationFeatureTraceResultSchema.parse({
1667
+ ...semantic,
1668
+ trace_id: `jatr_${digestCanonicalValue(semantic, "Feature trace")}`
1669
+ });
1670
+ };
1671
+ traceGraph = (input, seedMatches, traversal) => {
1672
+ return createJavaScriptApplicationGraph({
1673
+ schema: "JavaScriptApplicationGraph",
1674
+ root_node_ids: uniqueSorted(seedMatches.map(({ node_id: id }) => id)),
1675
+ nodes: traversal.nodes,
1676
+ edges: traversal.edges,
1677
+ coverage: traceGraphCoverage(input.graph),
1678
+ limitations: uniqueSorted([...input.graph.limitations, "Trace edges retain their source authority; graph connectivity does not prove runtime execution or reachability."])
1679
+ });
1680
+ };
1681
+ traceGraphCoverage = (source) => {
1682
+ return source.coverage.status === "complete" ? {
1683
+ status: "complete",
1684
+ truncated: false,
1685
+ omitted_count: 0,
1686
+ limits: []
1687
+ } : source.coverage;
1688
+ };
1689
+ terminalPaths = (traversal, seeds) => {
1690
+ const seedIds = new Set(seeds.map(({ node_id: id }) => id));
1691
+ const edgeById = new Map(traversal.edges.map((edge) => [edge.edge_id, edge]));
1692
+ return traversal.nodes.filter((node) => isTerminal(node) && (!seedIds.has(node.node_id) || traversal.nodes.length === 1)).map((node) => pathTo(node, traversal.predecessors, edgeById)).filter((path) => path !== null).sort((left, right) => compareUnicodeCodePoints(left.path_id, right.path_id));
1693
+ };
1694
+ pathTo = (node, predecessors, edgeById) => {
1695
+ const nodeIds = [node.node_id];
1696
+ const edgeIds = [];
1697
+ let current = node.node_id;
1698
+ while (predecessors.has(current)) {
1699
+ const predecessor = predecessors.get(current);
1700
+ if (predecessor === undefined) break;
1701
+ nodeIds.push(predecessor.previousNodeId);
1702
+ edgeIds.push(predecessor.edgeId);
1703
+ current = predecessor.previousNodeId;
1704
+ }
1705
+ nodeIds.reverse();
1706
+ edgeIds.reverse();
1707
+ const edges = edgeIds.map((edgeId) => edgeById.get(edgeId)).filter((edge) => edge !== undefined);
1708
+ if (edges.length !== edgeIds.length) return null;
1709
+ const semantic = {
1710
+ start_node_id: nodeIds[0] ?? node.node_id,
1711
+ end_node_id: node.node_id,
1712
+ end_kind: node.kind,
1713
+ node_ids: nodeIds,
1714
+ edge_ids: edgeIds,
1715
+ authorities: uniqueSorted(edges.map(({ evidence }) => evidence.authority)),
1716
+ contains_inference: edges.some(({ evidence }) => evidence.state === "inferred")
1717
+ };
1718
+ return {
1719
+ ...semantic,
1720
+ path_id: `jatp_${digestCanonicalValue(semantic, "Feature trace")}`
1721
+ };
1722
+ };
1723
+ isTerminal = (node) => [
1724
+ "endpoint",
1725
+ "storage",
1726
+ "native-addon",
1727
+ "native-export",
1728
+ "unknown"
1729
+ ].includes(node.kind) || node.kind === "javascript-expression" && node.observations.some((o) => o.properties.step_kind === "terminal");
1730
+ factSummary = (nodes, edges) => {
1731
+ const states = [...nodes.flatMap(({ observations }) => observations.map(({ evidence }) => evidence.state)), ...edges.map(({ evidence }) => evidence.state)];
1732
+ return {
1733
+ observed_facts: states.filter((state) => state === "observed").length,
1734
+ inferred_facts: states.filter((state) => state === "inferred").length,
1735
+ unknown_facts: states.filter((state) => state === "unknown").length,
1736
+ unavailable_facts: states.filter((state) => state === "unavailable").length
1737
+ };
1738
+ };
1739
+ traceCoverageStatus = (graph) => graph.coverage.status === "complete" ? "complete-within-source" : "partial";
1740
+ traceLimitations = (graph) => uniqueSorted([
1741
+ "A trace reports graph relationships, not proof that code executed or that a feature is reachable in every state.",
1742
+ "Static, native, passive-runtime, inferred, and unknown facts retain their original authority in the returned graph.",
1743
+ "Native handoffs never open a binary or invoke a provider automatically; snapshot reuse remains provider/profile/target exact.",
1744
+ ...sourceCoverageLimitations(graph)
1745
+ ]);
1746
+ sourceCoverageLimitations = (graph) => graph.coverage.status === "complete" ? [] : ["The source application graph is incomplete; unmatched seeds and frontiers remain unknown."];
1747
+ })))();
1748
+ }
1749
+
1750
+ //#endregion
1751
+ //#region dist/domain/javascript/sourceToBundleSignals.js
1752
+ var RELEVANT_NODE_KINDS, PATH_PROPERTIES, signalWeight, sourceBearingNodes, historicalSourceFiles, buildSourceToBundleCandidateIndex, candidateIdsForSource, candidateHasDigest, scoreSourceToBundleCandidate, projectCurrentNode, candidateSignals, signal, candidateConfidence, matchingPaths, matchingUnicodePaths, addJsonPath, addPath, SCHEME_URL, SCHEME_URL_PREFIX, normalizeCurrentPath, uniquePaths, pathSuffixes, addIndexValue;
1753
+ function init_sourceToBundleSignals() {
1754
+ return (init_sourceToBundleSignals = __esmMin((() => {
1755
+ init_unicodeCodePointOrder();
1756
+ init_sourceToBundleComparisonSchemas();
1757
+ init_digests();
1758
+ RELEVANT_NODE_KINDS = new Set([
1759
+ "artifact",
1760
+ "javascript-asset",
1761
+ "javascript-module",
1762
+ "source-module"
1763
+ ]);
1764
+ PATH_PROPERTIES = [
1765
+ "path",
1766
+ "source",
1767
+ "original_source",
1768
+ "module_path",
1769
+ "resolved_path",
1770
+ "declared_path"
1771
+ ];
1772
+ signalWeight = (kind) => {
1773
+ const entry = SOURCE_TO_BUNDLE_SIGNAL_WEIGHTS.find(([signal]) => signal === kind);
1774
+ if (entry === undefined) throw new TypeError(`Missing source-to-bundle signal weight: ${kind}`);
1775
+ return entry[1];
1776
+ };
1777
+ sourceBearingNodes = (nodes) => nodes.filter(({ kind }) => RELEVANT_NODE_KINDS.has(kind)).sort((left, right) => compareUnicodeCodePoints(left.node_id, right.node_id));
1778
+ historicalSourceFiles = (graph) => graph.entries.filter((entry) => entry.kind === "file" && entry.classifications.includes("source")).sort((left, right) => compareUnicodeCodePoints(left.path, right.path));
1779
+ buildSourceToBundleCandidateIndex = (nodes) => {
1780
+ const projections = nodes.map(projectCurrentNode);
1781
+ const byDigest = new Map();
1782
+ const byPathSuffix = new Map();
1783
+ const byBasename = new Map();
1784
+ for (const projection of projections) {
1785
+ for (const digest of projection.digests) addIndexValue(byDigest, digest, projection.node.node_id);
1786
+ for (const path of projection.paths) {
1787
+ for (const suffix of path.allowSuffix ? pathSuffixes(path.value) : [path.value]) {
1788
+ addIndexValue(byPathSuffix, suffix, projection.node.node_id);
1789
+ const canonical = suffix.normalize("NFC");
1790
+ if (canonical !== suffix) addIndexValue(byPathSuffix, canonical, projection.node.node_id);
1791
+ }
1792
+ addIndexValue(byBasename, posix.basename(path.value), projection.node.node_id);
1793
+ }
1794
+ }
1795
+ return {
1796
+ nodes: new Map(projections.map((projection) => [projection.node.node_id, projection])),
1797
+ byDigest,
1798
+ byPathSuffix,
1799
+ byBasename
1800
+ };
1801
+ };
1802
+ candidateIdsForSource = (source, index) => {
1803
+ const canonicalPath = source.path.normalize("NFC");
1804
+ const groups = [
1805
+ source.sha256 === null ? undefined : index.byDigest.get(source.sha256),
1806
+ index.byPathSuffix.get(source.path),
1807
+ canonicalPath === source.path ? undefined : index.byPathSuffix.get(canonicalPath),
1808
+ index.byBasename.get(posix.basename(source.path))
1809
+ ];
1810
+ const seen = new Set();
1811
+ const output = [];
1812
+ for (const group of groups) {
1813
+ if (group === undefined) continue;
1814
+ for (const nodeId of [...group].sort(compareUnicodeCodePoints)) {
1815
+ if (seen.has(nodeId)) continue;
1816
+ seen.add(nodeId);
1817
+ output.push(nodeId);
1818
+ }
1819
+ }
1820
+ return output;
1821
+ };
1822
+ candidateHasDigest = (index, nodeId) => (index.nodes.get(nodeId)?.digests.size ?? 0) > 0;
1823
+ scoreSourceToBundleCandidate = (source, nodeId, index) => {
1824
+ const projection = index.nodes.get(nodeId);
1825
+ if (projection === undefined) return null;
1826
+ const signals = candidateSignals(source, projection);
1827
+ const score = signals.reduce((total, signal) => total + signal.weight, 0);
1828
+ if (score < 20) return null;
1829
+ return {
1830
+ current_node_id: projection.node.node_id,
1831
+ current_node_kind: projection.node.kind,
1832
+ score,
1833
+ confidence: candidateConfidence(signals),
1834
+ signals
1835
+ };
1836
+ };
1837
+ projectCurrentNode = (node) => {
1838
+ const digests = new Set();
1839
+ const paths = [];
1840
+ if (node.identity.strategy === "content-digest") digests.add(node.identity.sha256);
1841
+ if (node.identity.strategy === "source-map-original") {
1842
+ if (node.identity.source_sha256 !== null) digests.add(node.identity.source_sha256);
1843
+ }
1844
+ if (node.identity.strategy === "canonical-path") addPath(paths, "canonical-path", node.identity.path, "artifact");
1845
+ for (const observation of node.observations) {
1846
+ if (node.identity.strategy === "source-map-original") {
1847
+ const resolution = observation.source_map_reference?.resolution;
1848
+ if (resolution !== undefined && resolution.kind !== "unresolved") paths.push({
1849
+ kind: "source-map-original",
1850
+ value: resolution.path,
1851
+ allowSuffix: resolution.kind === "suffix"
1852
+ });
1853
+ } else {
1854
+ const sourceDigest = observation.properties.source_sha256;
1855
+ if (typeof sourceDigest === "string" && isDigest(sourceDigest)) digests.add(sourceDigest);
1856
+ for (const key of PATH_PROPERTIES) {
1857
+ if (key === "declared_path" && typeof observation.properties.resolved_path === "string") continue;
1858
+ addJsonPath(paths, observation.properties[key], key === "resolved_path" || (key === "path" || key === "module_path") && !(typeof observation.properties[key] === "string" && SCHEME_URL.test(observation.properties[key])) ? "artifact" : "reference");
1859
+ }
1860
+ }
1861
+ }
1862
+ return {
1863
+ node,
1864
+ digests,
1865
+ paths: uniquePaths(paths)
1866
+ };
1867
+ };
1868
+ candidateSignals = (source, current) => {
1869
+ const signals = [];
1870
+ if (source.sha256 !== null && current.digests.has(source.sha256)) signals.push(signal("exact-source-digest", source.sha256, [source.sha256]));
1871
+ const sourceMapPaths = matchingPaths(source.path, current.paths.filter(({ kind }) => kind === "source-map-original"));
1872
+ if (sourceMapPaths.length > 0) signals.push(signal("source-map-original-path", source.path, sourceMapPaths));
1873
+ const unicodeEquivalentPaths = matchingUnicodePaths(source.path, current.paths);
1874
+ if (unicodeEquivalentPaths.length > 0) signals.push(signal("unicode-equivalent-path", source.path, unicodeEquivalentPaths));
1875
+ const otherPaths = current.paths.filter(({ kind }) => kind !== "source-map-original");
1876
+ const exactPaths = otherPaths.filter(({ value }) => value === source.path).map(({ value }) => value);
1877
+ if (exactPaths.length > 0) signals.push(signal("current-path-exact", source.path, exactPaths));
1878
+ const suffixPaths = otherPaths.filter(({ value, allowSuffix }) => allowSuffix && value !== source.path && value.endsWith(`/${source.path}`)).map(({ value }) => value);
1879
+ if (suffixPaths.length > 0) signals.push(signal("current-path-suffix", source.path, suffixPaths));
1880
+ const basename = posix.basename(source.path);
1881
+ const basenamePaths = current.paths.filter(({ value }) => posix.basename(value) === basename).map(({ value }) => value);
1882
+ if (basenamePaths.length > 0) signals.push(signal("basename-match", basename, basenamePaths));
1883
+ const extension = posix.extname(source.path).toLowerCase();
1884
+ const extensionPaths = current.paths.filter(({ value }) => posix.extname(value).toLowerCase() === extension).map(({ value }) => value);
1885
+ if (extension !== "" && extensionPaths.length > 0) signals.push(signal("language-extension", extension, extensionPaths));
1886
+ return signals;
1887
+ };
1888
+ signal = (kind, sourceValue, currentValues) => ({
1889
+ kind,
1890
+ weight: signalWeight(kind),
1891
+ source_value: sourceValue,
1892
+ current_values: [...new Set(currentValues)].sort(compareUnicodeCodePoints)
1893
+ });
1894
+ candidateConfidence = (signals) => {
1895
+ const kinds = new Set(signals.map(({ kind }) => kind));
1896
+ if (kinds.has("exact-source-digest")) return "exact";
1897
+ if (kinds.has("source-map-original-path") || kinds.has("current-path-exact")) return "high";
1898
+ return kinds.has("current-path-suffix") ? "medium" : "low";
1899
+ };
1900
+ matchingPaths = (sourcePath, currentPaths) => currentPaths.filter(({ value, allowSuffix }) => value === sourcePath || allowSuffix && value.endsWith(`/${sourcePath}`)).map(({ value }) => value);
1901
+ matchingUnicodePaths = (sourcePath, currentPaths) => {
1902
+ const canonicalSource = sourcePath.normalize("NFC");
1903
+ return currentPaths.filter(({ value, allowSuffix }) => {
1904
+ if (value === sourcePath || allowSuffix && value.endsWith(`/${sourcePath}`)) return false;
1905
+ const canonicalValue = value.normalize("NFC");
1906
+ return canonicalValue === canonicalSource || allowSuffix && canonicalValue.endsWith(`/${canonicalSource}`);
1907
+ }).map(({ value }) => value);
1908
+ };
1909
+ addJsonPath = (paths, value, format) => {
1910
+ if (typeof value === "string") addPath(paths, "observation-path", value, format);
1911
+ };
1912
+ addPath = (paths, kind, raw, format) => {
1913
+ const value = normalizeCurrentPath(raw, format);
1914
+ if (value !== null) paths.push({
1915
+ kind,
1916
+ value,
1917
+ allowSuffix: true
1918
+ });
1919
+ };
1920
+ SCHEME_URL = /^[a-z][a-z0-9+.-]*:\/\//iu;
1921
+ SCHEME_URL_PREFIX = /^[a-z][a-z0-9+.-]*:\/\/+/iu;
1922
+ normalizeCurrentPath = (raw, format) => {
1923
+ const withoutQuery = format === "reference" && SCHEME_URL.test(raw) ? raw.split(/[?#]/u, 1)[0] ?? "" : raw;
1924
+ const portable = format === "artifact" ? withoutQuery : withoutQuery.replace(SCHEME_URL_PREFIX, "").replaceAll("\\", "/");
1925
+ const parts = [];
1926
+ for (const part of portable.split("/")) {
1927
+ if (part === "" || part === ".") continue;
1928
+ if (part === "..") {
1929
+ if (parts.length === 0) return null;
1930
+ parts.pop();
1931
+ } else parts.push(part);
1932
+ }
1933
+ if (parts.length === 0) return null;
1934
+ return parts.join("/");
1935
+ };
1936
+ uniquePaths = (paths) => [...new Map(paths.map((path) => [compositeKey([
1937
+ path.kind,
1938
+ path.value,
1939
+ String(path.allowSuffix)
1940
+ ]), path])).values()].sort((left, right) => compareUnicodeCodePoints(compositeKey([left.kind, left.value]), compositeKey([right.kind, right.value])));
1941
+ pathSuffixes = (path) => {
1942
+ const parts = path.split("/");
1943
+ return parts.map((_, index) => parts.slice(index).join("/"));
1944
+ };
1945
+ addIndexValue = (index, key, nodeId) => {
1946
+ const values = index.get(key) ?? new Set();
1947
+ values.add(nodeId);
1948
+ index.set(key, values);
1949
+ };
1950
+ })))();
1951
+ }
1952
+
1953
+ //#endregion
1954
+ //#region dist/domain/javascript/sourceToBundleComparison.js
1955
+ var compareSourceToBundle, projectComparison, compareMappings, comparisonCoverage, scoringModel, classifyMapping, markMergedMappings, mappingId, comparisonSummary, countStatus, coverageStatus, comparisonLimitations, hasSignal, compareCandidates;
1956
+ function init_sourceToBundleComparison() {
1957
+ return (init_sourceToBundleComparison = __esmMin((() => {
1958
+ init_canonicalOrdering();
1959
+ init_unicodeCodePointOrder();
1960
+ init_comparisonSemantics();
1961
+ init_canonicalDigest();
1962
+ init_sourceToBundleComparisonSchemas();
1963
+ init_sourceToBundleSignals();
1964
+ compareSourceToBundle = (input) => {
1965
+ const projection = projectComparison(input);
1966
+ const mappings = compareMappings(input, projection);
1967
+ const factors = { ...projection.factors };
1968
+ const mappedCurrentIds = new Set(mappings.items.flatMap(({ current_node_ids: nodeIds }) => nodeIds));
1969
+ const unmappedCurrentNodeIds = projection.currentNodes.map(({ node_id: nodeId }) => nodeId).filter((nodeId) => !mappedCurrentIds.has(nodeId));
1970
+ const semanticResult = {
1971
+ reference: {
1972
+ root_sha256: input.reference.root_sha256,
1973
+ inventory_state: input.reference.inventory_state
1974
+ },
1975
+ application: {
1976
+ evidence_id: input.application.evidenceId,
1977
+ graph_id: input.application.graph.graph_id,
1978
+ root_artifact_sha256: input.application.rootArtifactSha256
1979
+ },
1980
+ scoring: scoringModel(),
1981
+ summary: comparisonSummary(mappings.items),
1982
+ items: mappings.items,
1983
+ unmapped_current_node_ids: unmappedCurrentNodeIds,
1984
+ coverage: comparisonCoverage(projection, mappings, factors),
1985
+ evidence_links: [input.application.evidenceId],
1986
+ limitations: comparisonLimitations(factors)
1987
+ };
1988
+ return sourceToBundleComparisonResultSchema.parse({
1989
+ ...semanticResult,
1990
+ comparison_id: `stbc_${digestCanonicalValue(semanticResult, "Source-to-bundle comparison")}`
1991
+ });
1992
+ };
1993
+ projectComparison = (input) => {
1994
+ const allSources = historicalSourceFiles(input.reference);
1995
+ const allCurrentNodes = sourceBearingNodes(input.application.graph.nodes);
1996
+ const sources = allSources;
1997
+ const currentNodes = allCurrentNodes;
1998
+ const index = buildSourceToBundleCandidateIndex(currentNodes);
1999
+ return {
2000
+ sources,
2001
+ currentNodes,
2002
+ index,
2003
+ absenceComplete: input.reference.inventory_state === "complete" && absenceClaimable(input.application.graph.coverage),
2004
+ factors: { input }
2005
+ };
2006
+ };
2007
+ compareMappings = (input, projection) => {
2008
+ let candidateEvaluations = 0;
2009
+ const provisionalItems = [];
2010
+ for (const source of projection.sources) {
2011
+ const candidateIds = candidateIdsForSource(source, projection.index);
2012
+ candidateEvaluations += candidateIds.length;
2013
+ const scored = candidateIds.map((nodeId) => scoreSourceToBundleCandidate(source, nodeId, projection.index)).filter((candidate) => candidate !== null).sort(compareCandidates);
2014
+ const classification = classifyMapping(scored, projection.absenceComplete, (nodeId) => source.sha256 !== null && candidateHasDigest(projection.index, nodeId));
2015
+ const semantic = {
2016
+ source_path: source.path,
2017
+ source_sha256: source.sha256,
2018
+ source_language: source.language,
2019
+ status: classification.status,
2020
+ confidence: classification.confidence,
2021
+ current_node_ids: classification.currentNodeIds,
2022
+ candidates: scored,
2023
+ limitations: uniqueSorted([...source.limitations, ...classification.limitations])
2024
+ };
2025
+ provisionalItems.push({
2026
+ mapping_id: mappingId(input, semantic),
2027
+ ...semantic
2028
+ });
2029
+ }
2030
+ return {
2031
+ items: markMergedMappings(input, provisionalItems),
2032
+ candidateEvaluations
2033
+ };
2034
+ };
2035
+ comparisonCoverage = (projection, mappings, factors) => ({
2036
+ status: coverageStatus(factors),
2037
+ reference_inventory_state: factors.input.reference.inventory_state,
2038
+ application_graph_status: factors.input.application.graph.coverage.status,
2039
+ retained_source_files: projection.sources.length,
2040
+ retained_application_nodes: projection.currentNodes.length,
2041
+ candidate_evaluations: mappings.candidateEvaluations
2042
+ });
2043
+ scoringModel = () => ({
2044
+ algorithm: "rea-source-to-bundle-signals",
2045
+ minimum_candidate_score: 20,
2046
+ weights: SOURCE_TO_BUNDLE_SIGNAL_WEIGHTS.map(([signal, weight]) => ({
2047
+ signal,
2048
+ weight
2049
+ }))
2050
+ });
2051
+ classifyMapping = (candidates, absenceComplete, digestComparable) => {
2052
+ const exact = candidates.filter((candidate) => hasSignal(candidate, "exact-source-digest"));
2053
+ if (exact.length === 1) return {
2054
+ status: "unchanged",
2055
+ confidence: "exact",
2056
+ currentNodeIds: [exact[0]?.current_node_id ?? ""].filter(Boolean),
2057
+ limitations: ["Exact byte identity does not establish equivalent load context or runtime behavior."]
2058
+ };
2059
+ if (exact.length > 1) return {
2060
+ status: "duplicated",
2061
+ confidence: "exact",
2062
+ currentNodeIds: exact.map(({ current_node_id: nodeId }) => nodeId),
2063
+ limitations: ["The same historical source digest occurs in multiple current graph nodes."]
2064
+ };
2065
+ const pathCandidates = candidates.filter((candidate) => candidate.signals.some(({ kind }) => [
2066
+ "source-map-original-path",
2067
+ "current-path-exact",
2068
+ "current-path-suffix"
2069
+ ].includes(kind)));
2070
+ const topScore = pathCandidates[0]?.score;
2071
+ const topPathCandidates = topScore === undefined ? [] : pathCandidates.filter(({ score }) => score === topScore);
2072
+ if (topPathCandidates.length === 1) {
2073
+ const candidate = topPathCandidates[0];
2074
+ if (candidate !== undefined && digestComparable(candidate.current_node_id)) return {
2075
+ status: "modified",
2076
+ confidence: candidate.confidence === "high" ? "high" : "medium",
2077
+ currentNodeIds: [candidate.current_node_id],
2078
+ limitations: ["Location evidence links the source to the current node, but their source digests differ."]
2079
+ };
2080
+ return {
2081
+ status: "unknown",
2082
+ confidence: "unknown",
2083
+ currentNodeIds: candidate === undefined ? [] : [candidate.current_node_id],
2084
+ limitations: ["Location evidence links the source to the current node, but comparable source digests are unavailable."]
2085
+ };
2086
+ }
2087
+ if (topPathCandidates.length > 1) return {
2088
+ status: "split",
2089
+ confidence: "medium",
2090
+ currentNodeIds: topPathCandidates.map(({ current_node_id: nodeId }) => nodeId),
2091
+ limitations: ["Multiple equally scored current nodes retain the historical source path; this is a static split inference, not runtime proof."]
2092
+ };
2093
+ if (candidates.length > 0) return {
2094
+ status: "unknown",
2095
+ confidence: "unknown",
2096
+ currentNodeIds: [],
2097
+ limitations: [candidates.some((candidate) => hasSignal(candidate, "unicode-equivalent-path")) ? "Unicode-equivalent paths are inferred candidates only; filesystem paths with distinct Unicode spellings may identify different files, so no mapping was forced." : "Only weak basename or extension signals were available; no mapping was forced."]
2098
+ };
2099
+ return absenceComplete ? {
2100
+ status: "removed",
2101
+ confidence: "high",
2102
+ currentNodeIds: [],
2103
+ limitations: ["No retained current node matched exact digest or path signals within complete static inventories."]
2104
+ } : {
2105
+ status: "unknown",
2106
+ confidence: "unknown",
2107
+ currentNodeIds: [],
2108
+ limitations: ["No candidate was observed, but incomplete input or graph coverage prevents a removal claim."]
2109
+ };
2110
+ };
2111
+ markMergedMappings = (input, items) => {
2112
+ const sourcesByNode = new Map();
2113
+ for (const item of items) {
2114
+ if (item.status !== "unchanged" || item.current_node_ids.length !== 1) continue;
2115
+ const nodeId = item.current_node_ids[0];
2116
+ if (nodeId === undefined) continue;
2117
+ sourcesByNode.set(nodeId, [...sourcesByNode.get(nodeId) ?? [], item]);
2118
+ }
2119
+ const mergedSources = new Set([...sourcesByNode.values()].filter((group) => group.length > 1).flatMap((group) => group.map(({ source_path: path }) => path)));
2120
+ return items.map((item) => {
2121
+ if (!mergedSources.has(item.source_path)) return item;
2122
+ const { mapping_id: previousMappingId, ...base } = item;
2123
+ void previousMappingId;
2124
+ const semantic = {
2125
+ ...base,
2126
+ status: "merged",
2127
+ confidence: "exact",
2128
+ limitations: uniqueSorted([...item.limitations, "Multiple historical source paths have exact digest identity with the same current graph node."])
2129
+ };
2130
+ return {
2131
+ ...semantic,
2132
+ mapping_id: mappingId(input, semantic)
2133
+ };
2134
+ });
2135
+ };
2136
+ mappingId = (input, item) => `stbc_item_${digestCanonicalValue({
2137
+ reference_root_sha256: input.reference.root_sha256,
2138
+ application_graph_id: input.application.graph.graph_id,
2139
+ ...item
2140
+ }, "Source-to-bundle comparison")}`;
2141
+ comparisonSummary = (items) => ({
2142
+ unchanged: countStatus(items, "unchanged"),
2143
+ modified: countStatus(items, "modified"),
2144
+ removed: countStatus(items, "removed"),
2145
+ split: countStatus(items, "split"),
2146
+ merged: countStatus(items, "merged"),
2147
+ duplicated: countStatus(items, "duplicated"),
2148
+ unknown: countStatus(items, "unknown")
2149
+ });
2150
+ countStatus = (items, status) => items.filter((item) => item.status === status).length;
2151
+ coverageStatus = (factors) => {
2152
+ return factors.input.reference.inventory_state === "complete" && factors.input.application.graph.coverage.status === "complete" ? "complete-within-inputs" : "partial";
2153
+ };
2154
+ comparisonLimitations = (factors) => uniqueSorted([
2155
+ "Static digest and location signals do not establish runtime behavior, semantic equivalence, or absence of dynamically generated modules.",
2156
+ ...factors.input.reference.limitations,
2157
+ ...factors.input.application.graph.limitations,
2158
+ ...factors.input.reference.inventory_state === "complete" ? [] : [`Historical source inventory is ${factors.input.reference.inventory_state}; unmatched files remain unknown.`],
2159
+ ...factors.input.application.graph.coverage.status === "complete" ? [] : [`Application graph coverage is ${factors.input.application.graph.coverage.status}; unmatched files remain unknown.`]
2160
+ ]);
2161
+ hasSignal = (candidate, kind) => candidate.signals.some((signal) => signal.kind === kind);
2162
+ compareCandidates = (left, right) => right.score - left.score || compareUnicodeCodePoints(left.current_node_id, right.current_node_id);
2163
+ })))();
2164
+ }
2165
+
2166
+ //#endregion
2167
+ //#region dist/application/javascript/JavaScriptApplicationWorkflowService.js
2168
+ var traceApplicationFeatureEvidence, traceApplicationFeatureEvidenceValidated, compareApplicationVersionsEvidence, compareApplicationVersionsEvidenceValidated, compareSourceToBundleEvidenceValidated, compareJavaScriptExportShapesEvidence, compareJavaScriptExportShapesEvidenceValidated, workflowFailure;
2169
+ function init_JavaScriptApplicationWorkflowService() {
2170
+ return (init_JavaScriptApplicationWorkflowService = __esmMin((() => {
2171
+ init_analysisErrorCore();
2172
+ init_inputIssueProjection();
2173
+ init_javascriptApplicationVersionComparison();
2174
+ init_javascriptApplicationVersionComparisonSchemas();
2175
+ init_javascriptExportShapeComparison();
2176
+ init_javascriptExportShapeComparisonSchemas();
2177
+ init_javascriptFeatureTrace();
2178
+ init_javascriptFeatureTraceSchemas();
2179
+ init_result();
2180
+ init_sourceToBundleComparison();
2181
+ init_sourceToBundleComparisonSchemas();
2182
+ init_JavaScriptApplicationEvidenceGraph();
2183
+ init_JavaScriptApplicationWorkflowEvidence();
2184
+ traceApplicationFeatureEvidence = (rawInput) => {
2185
+ const operation = "trace_application_feature";
2186
+ const parsed = traceApplicationFeatureInputSchema.safeParse(rawInput);
2187
+ if (!parsed.success) return err(analysisInputErrorFromIssues(operation, parsed.error.issues, rawInput));
2188
+ return traceApplicationFeatureEvidenceValidated(parsed.data);
2189
+ };
2190
+ traceApplicationFeatureEvidenceValidated = (input) => {
2191
+ const operation = "trace_application_feature";
2192
+ const identities = applicationTraceIdentitiesSchema.safeParse(input);
2193
+ if (!identities.success) return err(analysisInputErrorFromIssues(operation, identities.error.issues, input));
2194
+ const sourceResult = parseApplicationGraphEvidence(input.application, ["application"]);
2195
+ if (!sourceResult.ok) return err(applicationGraphEvidenceInputError(operation, sourceResult.error));
2196
+ const nativeResult = parseNativeApplicationEvidence(input.native_observations, ["native_observations"]);
2197
+ if (!nativeResult.ok) return err(applicationGraphEvidenceInputError(operation, nativeResult.error));
2198
+ try {
2199
+ const source = sourceResult.value;
2200
+ const nativeEvidence = nativeResult.value;
2201
+ const result = traceApplicationFeature({
2202
+ sourceEvidenceId: source.evidence.evidence_id,
2203
+ graph: source.graph,
2204
+ nativeEvidence,
2205
+ seed: input.seed,
2206
+ direction: input.direction
2207
+ });
2208
+ return ok(createApplicationFeatureTraceEvidence({
2209
+ application_evidence_id: source.evidence.evidence_id,
2210
+ native_evidence_ids: nativeEvidence.map(({ evidence_id: id }) => id),
2211
+ seed: input.seed,
2212
+ direction: input.direction
2213
+ }, result));
2214
+ } catch (cause) {
2215
+ return workflowFailure(operation, cause);
2216
+ }
2217
+ };
2218
+ compareApplicationVersionsEvidence = (rawInput) => {
2219
+ const operation = "compare_application_versions";
2220
+ const parsed = compareApplicationVersionsInputSchema.safeParse(rawInput);
2221
+ if (!parsed.success) return err(analysisInputErrorFromIssues(operation, parsed.error.issues, rawInput));
2222
+ return compareApplicationVersionsEvidenceValidated(parsed.data);
2223
+ };
2224
+ compareApplicationVersionsEvidenceValidated = (input) => {
2225
+ const operation = "compare_application_versions";
2226
+ const identities = applicationVersionIdentitiesSchema.safeParse(input);
2227
+ if (!identities.success) return err(analysisInputErrorFromIssues(operation, identities.error.issues, input));
2228
+ const leftResult = parseApplicationGraphEvidence(input.left, ["left"]);
2229
+ if (!leftResult.ok) return err(applicationGraphEvidenceInputError(operation, leftResult.error));
2230
+ const rightResult = parseApplicationGraphEvidence(input.right, ["right"]);
2231
+ if (!rightResult.ok) return err(applicationGraphEvidenceInputError(operation, rightResult.error));
2232
+ const leftNativeResult = parseNativeApplicationEvidence(input.left_native_observations, ["left_native_observations"]);
2233
+ if (!leftNativeResult.ok) return err(applicationGraphEvidenceInputError(operation, leftNativeResult.error));
2234
+ const rightNativeResult = parseNativeApplicationEvidence(input.right_native_observations, ["right_native_observations"]);
2235
+ if (!rightNativeResult.ok) return err(applicationGraphEvidenceInputError(operation, rightNativeResult.error));
2236
+ try {
2237
+ const left = leftResult.value;
2238
+ const right = rightResult.value;
2239
+ const leftNative = leftNativeResult.value;
2240
+ const rightNative = rightNativeResult.value;
2241
+ const result = compareJavaScriptApplicationVersions({
2242
+ left: {
2243
+ evidenceId: left.evidence.evidence_id,
2244
+ rootArtifactSha256: left.rootArtifactSha256,
2245
+ graph: left.graph
2246
+ },
2247
+ right: {
2248
+ evidenceId: right.evidence.evidence_id,
2249
+ rootArtifactSha256: right.rootArtifactSha256,
2250
+ graph: right.graph
2251
+ },
2252
+ leftNativeEvidence: leftNative,
2253
+ rightNativeEvidence: rightNative
2254
+ });
2255
+ return ok(createApplicationVersionComparisonEvidence({
2256
+ left_evidence_id: left.evidence.evidence_id,
2257
+ right_evidence_id: right.evidence.evidence_id,
2258
+ left_native_evidence_ids: leftNative.map(({ evidence_id: id }) => id),
2259
+ right_native_evidence_ids: rightNative.map(({ evidence_id: id }) => id)
2260
+ }, result));
2261
+ } catch (cause) {
2262
+ return workflowFailure(operation, cause);
2263
+ }
2264
+ };
2265
+ compareSourceToBundleEvidenceValidated = (input) => {
2266
+ const operation = "compare_source_to_bundle";
2267
+ const applicationResult = parseApplicationGraphEvidence(input.application, ["application"]);
2268
+ if (!applicationResult.ok) return err(applicationGraphEvidenceInputError(operation, applicationResult.error));
2269
+ try {
2270
+ const application = applicationResult.value;
2271
+ const result = compareSourceToBundle({
2272
+ reference: input.reference,
2273
+ application: {
2274
+ evidenceId: application.evidence.evidence_id,
2275
+ rootArtifactSha256: application.rootArtifactSha256,
2276
+ graph: application.graph
2277
+ }
2278
+ });
2279
+ return ok(createSourceToBundleComparisonEvidence({
2280
+ reference_root_sha256: input.reference.root_sha256,
2281
+ application_evidence_id: application.evidence.evidence_id
2282
+ }, result));
2283
+ } catch (cause) {
2284
+ return workflowFailure(operation, cause);
2285
+ }
2286
+ };
2287
+ compareJavaScriptExportShapesEvidence = (rawInput) => {
2288
+ const operation = "compare_javascript_export_shapes";
2289
+ const parsed = compareJavaScriptExportShapesInputSchema.safeParse(rawInput);
2290
+ if (!parsed.success) return err(analysisInputErrorFromIssues(operation, parsed.error.issues, rawInput));
2291
+ return compareJavaScriptExportShapesEvidenceValidated(parsed.data);
2292
+ };
2293
+ compareJavaScriptExportShapesEvidenceValidated = (input) => {
2294
+ const operation = "compare_javascript_export_shapes";
2295
+ const identities = javaScriptExportShapeIdentitiesSchema.safeParse(input);
2296
+ if (!identities.success) return err(analysisInputErrorFromIssues(operation, identities.error.issues, input));
2297
+ const leftResult = parseApplicationGraphEvidence(input.left, ["left"]);
2298
+ if (!leftResult.ok) return err(applicationGraphEvidenceInputError(operation, leftResult.error));
2299
+ const rightResult = parseApplicationGraphEvidence(input.right, ["right"]);
2300
+ if (!rightResult.ok) return err(applicationGraphEvidenceInputError(operation, rightResult.error));
2301
+ try {
2302
+ const left = leftResult.value;
2303
+ const right = rightResult.value;
2304
+ const result = compareJavaScriptExportShapes({
2305
+ left: {
2306
+ evidenceId: left.evidence.evidence_id,
2307
+ graph: left.graph,
2308
+ modulePath: input.left_module_path,
2309
+ exportName: input.left_export_name
2310
+ },
2311
+ right: {
2312
+ evidenceId: right.evidence.evidence_id,
2313
+ graph: right.graph,
2314
+ modulePath: input.right_module_path,
2315
+ exportName: input.right_export_name
2316
+ }
2317
+ });
2318
+ return ok(createJavaScriptExportShapeComparisonEvidence({
2319
+ left_evidence_id: left.evidence.evidence_id,
2320
+ right_evidence_id: right.evidence.evidence_id,
2321
+ left_module_path: input.left_module_path,
2322
+ left_export_name: input.left_export_name,
2323
+ right_module_path: input.right_module_path,
2324
+ right_export_name: input.right_export_name
2325
+ }, result));
2326
+ } catch (cause) {
2327
+ return workflowFailure(operation, cause);
2328
+ }
2329
+ };
2330
+ workflowFailure = (operation, cause) => err(new AnalysisProtocolError(`JavaScript application workflow failed while producing ${operation}`, { cause }));
2331
+ })))();
2332
+ }
2333
+
2334
+ //#endregion
2335
+ init_JavaScriptApplicationWorkflowService();
2336
+ export { compareApplicationVersionsEvidenceValidated, compareJavaScriptExportShapesEvidenceValidated, compareSourceToBundleEvidenceValidated, traceApplicationFeatureEvidenceValidated };