rea-agents 6.4.0 → 6.7.0

package/dist/contracts/toolEffects.js

@@ -6,6 +6,8 @@ const effects = (overrides = {}) => ({
     accessesNetwork: false,
     changesUiState: false,
     mayDiscardData: false,
+    executesForeignCode: false,
+    mutatesDevice: false,
     idempotent: true,
     ...overrides,
 });
@@ -18,6 +20,110 @@ const browserEvidence = effects({
 const sessionEvidence = effects({ mutatesSession: true });
 /** Explicit effect audit for every public tool. */
 export const TOOL_EFFECTS = {
+    list_cutter_sessions: effects({ accessesNetwork: true }),
+    cutter_command: effects({
+        mutatesTarget: true,
+        executesForeignCode: true,
+        mutatesSession: true,
+        writesFilesystem: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        changesUiState: true,
+        idempotent: false,
+    }),
+    inspect_with_objdump: effects({
+        mutatesSession: true,
+        launchesProcess: true,
+    }),
+    start_gdb_session: effects({
+        launchesProcess: true,
+        mutatesSession: true,
+        idempotent: false,
+    }),
+    gdb_console: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        writesFilesystem: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        executesForeignCode: true,
+        idempotent: false,
+    }),
+    gdb_session_status: effects(),
+    start_rizin_debug_session: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        launchesProcess: true,
+        executesForeignCode: true,
+        idempotent: false,
+    }),
+    rizin_debug_command: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        executesForeignCode: true,
+        writesFilesystem: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        changesUiState: true,
+        mayDiscardData: true,
+        idempotent: false,
+    }),
+    rizin_debug_session_status: effects({ mutatesSession: true }),
+    close_rizin_debug_session: effects({
+        mutatesSession: true,
+        launchesProcess: true,
+        mutatesTarget: true,
+        executesForeignCode: true,
+    }),
+    close_gdb_session: effects({
+        launchesProcess: true,
+        mutatesSession: true,
+        mutatesTarget: true,
+        executesForeignCode: true,
+        idempotent: false,
+    }),
+    execute_rizin_command: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        writesFilesystem: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        mayDiscardData: true,
+        executesForeignCode: true,
+        idempotent: false,
+    }),
+    inspect_go_binary: evidence,
+    inspect_rust_binary: evidence,
+    inspect_sqlite_database: effects({
+        mutatesSession: true,
+        writesFilesystem: true,
+        launchesProcess: true,
+    }),
+    inspect_packet_fields: effects({
+        mutatesSession: true,
+        launchesProcess: true,
+        writesFilesystem: true,
+    }),
+    inspect_packet_capture: effects({
+        mutatesSession: true,
+        launchesProcess: true,
+        writesFilesystem: true,
+    }),
+    inspect_signal_decoders: effects({
+        mutatesSession: true,
+        launchesProcess: true,
+        writesFilesystem: true,
+    }),
+    decode_signal_recording: effects({
+        mutatesSession: true,
+        launchesProcess: true,
+        writesFilesystem: true,
+    }),
+    inspect_wasm_artifact: effects({
+        mutatesSession: true,
+        writesFilesystem: true,
+        launchesProcess: true,
+    }),
     inspect_evm_interface: effects({
         mutatesSession: true,
         writesFilesystem: true,
@@ -57,6 +163,57 @@ export const TOOL_EFFECTS = {
         writesFilesystem: true,
         launchesProcess: true,
     }),
+    list_frida_devices: effects({ launchesProcess: true, accessesNetwork: true }),
+    list_frida_processes: effects({
+        launchesProcess: true,
+        accessesNetwork: true,
+    }),
+    start_frida_session: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        idempotent: false,
+    }),
+    load_frida_script: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        executesForeignCode: true,
+        idempotent: false,
+    }),
+    resume_frida_session: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        executesForeignCode: true,
+        idempotent: false,
+    }),
+    unload_frida_script: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        idempotent: false,
+    }),
+    frida_session_status: evidence,
+    close_frida_session: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        idempotent: false,
+    }),
+    instrument_with_frida: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        launchesProcess: true,
+        accessesNetwork: true,
+        executesForeignCode: true,
+        idempotent: false,
+    }),
     inspect_pe_resources: evidence,
     inspect_analysis_view: evidence,
     inspect_firmware_regions: effects({
@@ -75,6 +232,24 @@ export const TOOL_EFFECTS = {
         launchesProcess: true,
         writesFilesystem: true,
     }),
+    inspect_pcap_client: effects({
+        mutatesSession: true,
+        launchesProcess: true,
+        writesFilesystem: true,
+    }),
+    inspect_pcap_capture: effects({
+        mutatesSession: true,
+        launchesProcess: true,
+        writesFilesystem: true,
+    }),
+    identify_flutter_build: effects({
+        mutatesSession: true,
+        writesFilesystem: true,
+    }),
+    inspect_dart_aot: effects({
+        mutatesSession: true,
+        writesFilesystem: true,
+    }),
     inspect_apktool_client: effects({
         mutatesSession: true,
         launchesProcess: true,
@@ -150,6 +325,7 @@ export const TOOL_EFFECTS = {
         launchesProcess: true,
         writesFilesystem: true,
         accessesNetwork: true,
+        mutatesDevice: true,
         idempotent: false,
     }),
     capture_adb_screen: effects({
@@ -211,6 +387,7 @@ export const TOOL_EFFECTS = {
         mutatesSession: true,
         launchesProcess: true,
         accessesNetwork: true,
+        mutatesDevice: true,
         idempotent: false,
     }),
     uninstall_adb_package: effects({
@@ -218,6 +395,7 @@ export const TOOL_EFFECTS = {
         mutatesSession: true,
         launchesProcess: true,
         accessesNetwork: true,
+        mutatesDevice: true,
         idempotent: false,
     }),
     start_adb_app: effects({
@@ -225,6 +403,7 @@ export const TOOL_EFFECTS = {
         mutatesSession: true,
         launchesProcess: true,
         accessesNetwork: true,
+        mutatesDevice: true,
         idempotent: false,
     }),
     start_adb_activity: effects({
@@ -232,6 +411,7 @@ export const TOOL_EFFECTS = {
         mutatesSession: true,
         launchesProcess: true,
         accessesNetwork: true,
+        mutatesDevice: true,
         idempotent: false,
     }),
     stop_adb_app: effects({
@@ -239,6 +419,7 @@ export const TOOL_EFFECTS = {
         mutatesSession: true,
         launchesProcess: true,
         accessesNetwork: true,
+        mutatesDevice: true,
         idempotent: false,
     }),
     search_android_classes: effects({
@@ -266,6 +447,7 @@ export const TOOL_EFFECTS = {
         mutatesSession: true,
         launchesProcess: true,
         writesFilesystem: true,
+        mayDiscardData: true,
     }),
     inspect_native_load_image: evidence,
     inspect_native_dispatch_metadata: evidence,
@@ -296,17 +478,38 @@ export const TOOL_EFFECTS = {
     inspect_native_data_type: evidence,
     resolve_native_call_targets: evidence,
     read_bytes: evidence,
+    search_bytes: evidence,
     address_to_file_offset: evidence,
     procedure_references: evidence,
     procedure_pseudo_code: evidence,
     resolve_containing_procedure: evidence,
     search_procedures: evidence,
     search_strings: evidence,
-    set_address_name: effects({ mutatesTarget: true, mutatesSession: true }),
-    set_addresses_names: effects({ mutatesTarget: true, mutatesSession: true }),
-    set_bookmark: effects({ mutatesTarget: true, mutatesSession: true }),
-    set_comment: effects({ mutatesTarget: true, mutatesSession: true }),
-    set_inline_comment: effects({ mutatesTarget: true, mutatesSession: true }),
+    set_address_name: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        mayDiscardData: true,
+    }),
+    set_addresses_names: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        mayDiscardData: true,
+    }),
+    set_bookmark: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        mayDiscardData: true,
+    }),
+    set_comment: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        mayDiscardData: true,
+    }),
+    set_inline_comment: effects({
+        mutatesTarget: true,
+        mutatesSession: true,
+        mayDiscardData: true,
+    }),
     unset_bookmark: effects({
         mutatesTarget: true,
         mutatesSession: true,
@@ -337,6 +540,7 @@ export const TOOL_EFFECTS = {
         accessesNetwork: true,
         changesUiState: true,
         mayDiscardData: true,
+        executesForeignCode: true,
         idempotent: false,
     }),
     // The owned process can change files, show UI and use the network.
@@ -346,6 +550,7 @@ export const TOOL_EFFECTS = {
         launchesProcess: true,
         accessesNetwork: true,
         changesUiState: true,
+        executesForeignCode: true,
         idempotent: false,
     }),
     inspect_macho: nativeEvidence,
@@ -391,6 +596,7 @@ export const TOOL_EFFECTS = {
         accessesNetwork: true,
         changesUiState: true,
         mayDiscardData: true,
+        executesForeignCode: true,
         idempotent: false,
     }),
     list_electron_targets: browserEvidence,
@@ -403,11 +609,17 @@ export const TOOL_EFFECTS = {
         accessesNetwork: true,
         changesUiState: true,
         mayDiscardData: true,
+        executesForeignCode: true,
         idempotent: false,
     }),
     list_javascript_runtime_targets: browserEvidence,
     observe_javascript_runtime: browserEvidence,
-    analyze_javascript_application: evidence,
+    analyze_javascript_application: effects({
+        mutatesSession: true,
+        writesFilesystem: true,
+        launchesProcess: true,
+    }),
+    inspect_electron_fuses: evidence,
     export_web_scripts: effects({
         mutatesSession: true,
         writesFilesystem: true,
@@ -429,6 +641,7 @@ export const TOOL_EFFECTS = {
     evaluate_reconstruction_coverage: effects(),
     project_android_application_graph: evidence,
     project_apple_application_graph: evidence,
+    project_harmony_application_graph: evidence,
     open_binary: effects({ mutatesSession: true, launchesProcess: true }),
     close_binary: effects({
         mutatesSession: true,
@@ -436,7 +649,7 @@ export const TOOL_EFFECTS = {
         mayDiscardData: true,
         idempotent: false,
     }),
-    binary_session: effects(),
+    binary_session: effects({ launchesProcess: true }),
     export_evidence_bundle: effects({
         writesFilesystem: true,
         mayDiscardData: true,
@@ -450,10 +663,12 @@ export const TOOL_EFFECTS = {
         writesFilesystem: true,
         launchesProcess: true,
         accessesNetwork: true,
+        executesForeignCode: true,
         idempotent: false,
     }),
     compare_process_captures: sessionEvidence,
     compare_artifacts: sessionEvidence,
+    compare_wasm_interfaces: sessionEvidence,
     compare_functions: sessionEvidence,
     compare_bundles: effects({ mutatesSession: true }),
     find_changed_behavior: sessionEvidence,
@@ -473,11 +688,38 @@ export const annotationsFromEffects = (value) => ({
         value.launchesProcess ||
         value.accessesNetwork ||
         value.changesUiState ||
-        value.mayDiscardData),
-    destructiveHint: value.mayDiscardData,
+        value.mayDiscardData ||
+        value.executesForeignCode ||
+        value.mutatesDevice),
+    // MCP defines destructive as possibly non-additive changes to the
+    // environment. Running foreign code or changing a device cannot be bounded
+    // to additive effects, so either one is destructive even without data loss.
+    destructiveHint: value.mayDiscardData || value.executesForeignCode || value.mutatesDevice,
     idempotentHint: value.idempotent,
     openWorldHint: value.launchesProcess || value.accessesNetwork,
 });
+/**
+ * Tools whose results, successful or failed, carry only REA-authored session
+ * state or caller-supplied values, never text originating from an analysis
+ * target, a provider, a launcher or a device. Every other tool can return
+ * such text (strings, symbols, code, page text, scripts, captures, logs, file
+ * listings, provider diagnostics or captured process output), so a newly
+ * added tool is marked untrusted until it is audited into this set. A tool
+ * stays out when any error path can project external process output, as
+ * close_binary (provider cleanup diagnostics), binary_session (provider
+ * failure reasons and availability diagnostics) and the adb and apktool
+ * client probes (version output and stderr excerpts) can.
+ */
+export const TARGET_CONTENT_FREE_TOOLS = new Set([
+    "export_evidence_bundle",
+    "record_unknown",
+]);
+/**
+ * Whether results of the named tool, successful or failed, can carry text that
+ * originates from the analysis target. Unknown names are treated as target
+ * content so an unaudited path never loses the untrusted marker.
+ */
+export const toolReturnsTargetContent = (name) => !TARGET_CONTENT_FREE_TOOLS.has(name);
 /** Resolve the audited metadata for one public tool. */
 export const toolContractMetadata = (name) => {
     const audited = TOOL_EFFECTS[name];
@@ -490,5 +732,6 @@ export const toolContractMetadata = (name) => {
             .join(" "),
         effects: audited,
         annotations: annotationsFromEffects(audited),
+        returnsTargetContent: toolReturnsTargetContent(name),
     };
 };

package/dist/contracts/toolOutputSchemaGroups.js

@@ -1,6 +1,9 @@
 import { z } from "zod";
+import { byteSearchResultSchema } from "../domain/native/bytePattern.js";
+import { artifactInventorySummaryViewResultSchema, interfaceBuilderSummaryViewResultSchema, machoSummaryViewResultSchema, managedArtifactSummaryViewResultSchema, managedMemberSummaryViewResultSchema, } from "../domain/analysisView/analysisView.js";
 import { evidenceBundleSummarySchema } from "../domain/evidenceRecordSummary.js";
-import { BINARY_ARCHITECTURES } from "../domain/binaryTargetTypes.js";
+import { BINARY_ARCHITECTURES, RAW_ONLY_ARCHITECTURES, } from "../domain/binaryTargetTypes.js";
+import { binaryArchitectureSchema, rawBinaryEntryPointSchema, } from "../domain/rawBinary.js";
 import { nativeFunctionAnnotationsSchema } from "../domain/native/nativeFunctionAnnotations.js";
 import { nativeLoadImageSchema } from "../domain/native/nativeLoadImage.js";
 import { nativeUiResultSchema } from "../domain/native/nativeUiObservation.js";
@@ -34,10 +37,12 @@ import { callPathResultSchema } from "../domain/callPathSchemas.js";
 import { staticRuntimeCorrelationResultSchema } from "../domain/staticRuntimeCorrelation.js";
 import { reconstructionVerificationResultSchema } from "../domain/reconstructionVerificationSchemas.js";
 import { analysisErrorProjectionSchema } from "./errorSchemas.js";
+import { relationshipCoverageSchema } from "../domain/relationshipCoverage.js";
 import { nativeDispatchMetadataResultSchema } from "../domain/native/objcSwiftMetadata.js";
 import { nativeInvestigationTraceSchema } from "../domain/native/nativeInvestigationGraph.js";
 import { addressList, addressedValue, addressedEntry, containingProcedureResolution, functionDossierOutput, graphNode, lifecycleResultOf, nullableText, procedureInfoOutput, evidenceResultOf, segmentOutput, sessionProvider, symbolDiscoveryOutput, targetFormatSchema, targetKindSchema, } from "./toolOutputSchemaPrimitives.js";
 import { processCaptureSchema } from "../domain/process/processCapture.js";
+import { electronFuseReportSchema } from "../domain/electron/electronFuses.js";
 const contextFacetSchema = z.discriminatedUnion("state", [
     z.object({ state: z.literal("available"), value: jsonValueSchema }),
     z.object({
@@ -59,6 +64,7 @@ const bookmarkFacetSchema = z.discriminatedUnion("state", [
 ]);
 /** Exact structured-content schemas shared by direct analysis providers. */
 export const officialOutputSchemas = {
+    search_bytes: evidenceResultOf(byteSearchResultSchema),
     annotate_native_function: evidenceResultOf(nativeFunctionAnnotationsSchema),
     inspect_native_load_image: evidenceResultOf(nativeLoadImageSchema),
     inspect_native_data_type: evidenceResultOf(nativeDataTypeSchema),
@@ -153,7 +159,7 @@ const callPathTraceOutput = evidenceResultOf(z.object({
     start: z.string(),
     goal: z.string().nullable(),
     direction: z.enum(["forward", "backward"]),
-    goal_status: z.enum(["not_requested", "reached", "not_reached"]),
+    goal_status: z.enum(["not_requested", "reached", "not_reached", "unknown"]),
     nodes: z.array(z.object({
         address: z.string(),
         depth: z.number().int().min(0),
@@ -168,6 +174,7 @@ const callPathTraceOutput = evidenceResultOf(z.object({
         address: z.string(),
         error: analysisErrorProjectionSchema,
     })),
+    relationship_coverage: z.record(z.string(), relationshipCoverageSchema),
     traversal: z.object({
         nodes_visited: z.number().int().min(1),
     }),
@@ -221,7 +228,10 @@ export const enhancedOutputSchemas = {
         succeeded: z.number().int().min(0),
         failed: z.number().int().min(0),
     })),
-    get_call_graph: evidenceResultOf(z.record(z.string(), z.array(graphNode))),
+    get_call_graph: evidenceResultOf(z.strictObject({
+        graph: z.record(z.string(), z.array(graphNode)),
+        limitations: z.array(z.string()),
+    })),
     analyze_swift_types: evidenceResultOf(z.object({
         total: z.number().int().min(0),
         categories: z.record(z.string(), z.object({
@@ -252,13 +262,18 @@ export const enhancedOutputSchemas = {
     ])),
     binary_overview: evidenceResultOf(z.object({
         document: z.string(),
-        segments: z.array(z.object({
+        image_base: z.string().min(1).optional(),
+        segments: z
+            .array(z.object({
             name: z.string(),
             start: z.string(),
             end: z.string(),
-            length: z.number().min(0),
-        })),
-        segment_count: z.number().int().min(0),
+            length: z.number().min(0).nullable(),
+            image_base: z.string().exactOptional(),
+            address_space: z.string().exactOptional(),
+        }))
+            .optional(),
+        segment_count: z.number().int().min(0).optional(),
         procedure_count: z.number().int().min(0),
         string_count: z.number().int().min(0),
     })),
@@ -272,7 +287,7 @@ export const nativeOutputSchemas = {
     observe_native_ui: evidenceResultOf(nativeUiResultSchema),
     capture_native_ui_scenario: evidenceResultOf(nativeUiResultSchema),
     observe_native_calls: evidenceResultOf(nativeCallObservationResultSchema),
-    inspect_macho: evidenceResultOf(inspectMachoSchema),
+    inspect_macho: evidenceResultOf(z.union([inspectMachoSchema, machoSummaryViewResultSchema])),
     inspect_signature: evidenceResultOf(inspectSignatureSchema),
     inspect_plist: evidenceResultOf(inspectPlistSchema),
     list_architectures: evidenceResultOf(listArchitecturesSchema),
@@ -280,17 +295,29 @@ export const nativeOutputSchemas = {
 };
 /** Exact Evidence schemas for provider-neutral artifact graph operations. */
 export const artifactOutputSchemas = {
-    inspect_artifact: evidenceResultOf(artifactInspectionResultSchema),
+    inspect_artifact: evidenceResultOf(z.union([
+        artifactInspectionResultSchema,
+        artifactInventorySummaryViewResultSchema,
+    ])),
     extract_artifact: evidenceResultOf(artifactExtractionResultSchema),
-    decode_interface_builder: evidenceResultOf(interfaceBuilderAnalysisSchema),
+    decode_interface_builder: evidenceResultOf(z.union([
+        interfaceBuilderAnalysisSchema,
+        interfaceBuilderSummaryViewResultSchema,
+    ])),
     inspect_keyed_archive: evidenceResultOf(keyedArchiveResultSchema),
     inspect_asset_catalog: evidenceResultOf(appleAssetCatalogResultSchema),
     trace_dylib_resolution: evidenceResultOf(dylibResolutionResultSchema),
 };
 /** Exact Evidence schema for execution-free managed static analysis. */
 export const managedOutputSchemas = {
-    inspect_managed_artifact: evidenceResultOf(managedArtifactInspectionSchema),
-    inspect_managed_members: evidenceResultOf(managedMemberInspectionSchema),
+    inspect_managed_artifact: evidenceResultOf(z.union([
+        managedArtifactInspectionSchema,
+        managedArtifactSummaryViewResultSchema,
+    ])),
+    inspect_managed_members: evidenceResultOf(z.union([
+        managedMemberInspectionSchema,
+        managedMemberSummaryViewResultSchema,
+    ])),
     inspect_managed_native_boundaries: evidenceResultOf(managedNativeBoundaryInspectionSchema),
 };
 /** Exact Evidence schema for provider-neutral managed workflows. */
@@ -300,15 +327,32 @@ export const managedWorkflowOutputSchemas = {
     import_managed_reconstruction: evidenceResultOf(managedReconstructionImportResultSchema),
     project_managed_application_graph: evidenceResultOf(managedApplicationGraphResultSchema),
 };
+const lifecycleTargetFields = {
+    path: z.string(),
+    kind: targetKindSchema,
+    sha256: z.string().regex(/^[a-f0-9]{64}$/u),
+};
+const detectedLifecycleTargetSchema = z.object({
+    ...lifecycleTargetFields,
+    format: targetFormatSchema.exclude(["raw-binary"]),
+    architecture: z
+        .enum(BINARY_ARCHITECTURES)
+        .exclude([...RAW_ONLY_ARCHITECTURES])
+        .nullable(),
+});
+const rawLifecycleTargetSchema = z.object({
+    ...lifecycleTargetFields,
+    format: z.literal("raw-binary"),
+    kind: z.literal("executable"),
+    architecture: binaryArchitectureSchema,
+    entry_point: rawBinaryEntryPointSchema.describe("Canonical caller-selected address where raw file offset 0 is mapped and execution is seeded."),
+});
 /** Exact structured-content schemas for target lifecycle operations. */
 export const sessionOutputSchemas = {
-    open_binary: lifecycleResultOf(z.object({
-        path: z.string(),
-        format: targetFormatSchema,
-        kind: targetKindSchema,
-        sha256: z.string().regex(/^[a-f0-9]{64}$/u),
-        architecture: z.enum(BINARY_ARCHITECTURES).nullable(),
-    })),
+    open_binary: lifecycleResultOf(z.discriminatedUnion("format", [
+        detectedLifecycleTargetSchema,
+        rawLifecycleTargetSchema,
+    ])),
     close_binary: lifecycleResultOf(z.union([
         z.null(),
         z.object({
@@ -332,19 +376,15 @@ export const sessionOutputSchemas = {
         }),
     ])),
     binary_session: lifecycleResultOf(z.union([
-        z.union([
-            sessionProvider.extend({
-                open: z.literal(false),
-            }),
-            sessionProvider.extend({
-                open: z.literal(true),
-                path: z.string(),
-                format: targetFormatSchema,
-                kind: targetKindSchema,
-                sha256: z.string().regex(/^[a-f0-9]{64}$/u),
-                architecture: z.enum(BINARY_ARCHITECTURES).nullable(),
-            }),
-        ]),
+        sessionProvider.extend({ open: z.literal(false) }),
+        sessionProvider.extend({
+            open: z.literal(true),
+            ...detectedLifecycleTargetSchema.shape,
+        }),
+        sessionProvider.extend({
+            open: z.literal(true),
+            ...rawLifecycleTargetSchema.shape,
+        }),
     ])),
     export_evidence_bundle: lifecycleResultOf(z.object({
         path: z.string(),
@@ -384,6 +424,8 @@ export const sessionOutputSchemas = {
     list_unknowns: lifecycleResultOf(z.object({
         items: z.array(residualUnknownSchema),
         total: z.number().int().min(0),
+        offset: z.number().int().min(0),
+        next_offset: z.number().int().min(0).nullable(),
     })),
     record_unknown: lifecycleResultOf(residualUnknownSchema),
     update_unknown: lifecycleResultOf(residualUnknownSchema),
@@ -393,3 +435,7 @@ export const sessionOutputSchemas = {
         unknown: residualUnknownSchema,
     })),
 };
+/** Exact Evidence schema for read-only Electron fuse inspection. */
+export const electronFuseOutputSchemas = {
+    inspect_electron_fuses: evidenceResultOf(electronFuseReportSchema),
+};