rea-agents 6.5.0 → 6.7.0

package/dist/domain/apple/appleApplication.js

@@ -1,12 +1,12 @@
 import { z } from "zod";
-import { anatomyNameIs, anatomyTailMatches, appleBundleSchema, appleComponentSchema, applicationRoots, detectBundles, isMachOFormat, isSidecar, isWithin, platformsOf, } from "./appleBundleAnatomy.js";
+import { anatomyNameIs, anatomyTailMatches, appleBundleSchema, projectAppleBundleAnatomy, isMachOFormat, isSidecar, isWithin, platformsOf, } from "./appleBundleAnatomy.js";
 import { isSwiftRuntimeLibrary, nativeRuntimeConvention, } from "../nativeConvention.js";
 import { hasCompleteInventoryCoverage, parseArtifactInventoryEvidence, } from "../artifactInventoryEvidence.js";
 import { evidenceSchema } from "../evidence.js";
 import { digestSchema } from "../digests.js";
 import { prefixedDigestSchema } from "../digests.js";
 import { bridgeCandidateCoverageSchema, projectCartesianCandidates, } from "../bridgeCandidateProjection.js";
-import { projectionDigest } from "../mobileApplicationGraphProjection.js";
+import { projectedComponentSchema, projectedInventoryEntries, projectedFileComponents, projectionDigest, unavailableComponentSchema, } from "../mobileApplicationGraphProjection.js";
 import { compareUnicodeCodePoints as compare } from "../unicodeCodePointOrder.js";
 const evidenceIdSchema = prefixedDigestSchema("ev");
 const pathSchema = z.string().min(1);
@@ -25,16 +25,17 @@ export const appleApplicationProjectionResultSchema = z.strictObject({
     application_roots: z.array(pathSchema),
     bundles: z.array(appleBundleSchema),
     components: z.strictObject({
-        bundle_metadata: z.array(appleComponentSchema),
-        executables: z.array(appleComponentSchema),
-        frameworks: z.array(appleComponentSchema),
-        native_libraries: z.array(appleComponentSchema),
-        javascript: z.array(appleComponentSchema),
-        signing: z.array(appleComponentSchema),
-        privileged_helpers: z.array(appleComponentSchema),
-        launchd_plists: z.array(appleComponentSchema.extend({ domain: z.enum(["agent", "daemon"]) })),
-        helpers: z.array(appleComponentSchema),
+        bundle_metadata: z.array(projectedComponentSchema),
+        executables: z.array(projectedComponentSchema),
+        frameworks: z.array(projectedComponentSchema),
+        native_libraries: z.array(projectedComponentSchema),
+        javascript: z.array(projectedComponentSchema),
+        signing: z.array(projectedComponentSchema),
+        privileged_helpers: z.array(projectedComponentSchema),
+        launchd_plists: z.array(projectedComponentSchema.extend({ domain: z.enum(["agent", "daemon"]) })),
+        helpers: z.array(projectedComponentSchema),
     }),
+    unavailable_components: z.array(unavailableComponentSchema),
     symlinks: z.array(pathSchema),
     runtime_families: z.array(z.enum([
         "native",
@@ -67,37 +68,17 @@ export const projectAppleApplication = (input) => {
     const parsed = appleApplicationProjectionInputSchema.parse(input);
     const { evidence, inventory } = parseArtifactInventoryEvidence(parsed.inventory_evidence);
     const rootFormat = appleRootFormat(inventory.manifest.root_format);
-    const nodes = new Map(inventory.nodes.map((node) => [node.artifact_id, node]));
-    const entries = inventory.occurrences
-        .filter(({ logical_path: path }) => path !== ".")
-        .map((occurrence) => {
-        if (occurrence.artifact_id === null)
-            return {
-                path: occurrence.logical_path,
-                kind: occurrence.entry_kind,
-                component: undefined,
-            };
-        const node = nodes.get(occurrence.artifact_id);
-        if (node === undefined)
-            throw new TypeError("Apple application occurrence has no artifact node");
-        return {
-            path: occurrence.logical_path,
-            kind: occurrence.entry_kind,
-            component: {
-                path: occurrence.logical_path,
-                artifact_id: node.artifact_id,
-                sha256: node.sha256,
-                format: occurrence.artifact_format,
-            },
-        };
-    });
-    const inventoried = entries.flatMap(({ component }) => component === undefined ? [] : [component]);
-    const roots = applicationRoots(entries, {
+    const entries = projectedInventoryEntries(inventory);
+    const inventoried = projectedFileComponents(entries);
+    const { roots, bundles } = projectAppleBundleAnatomy(entries, {
         name: evidence[0]?.subject?.name ?? "",
         format: rootFormat,
     });
     const { all, unattributed } = attributeComponents(inventoried, roots, rootFormat);
-    const bundles = detectBundles(entries, roots);
+    // Directories have no file bytes; symlinks already have their own path-only output.
+    const unavailable = attributeComponents(entries.flatMap(({ kind, unavailable }) => (kind === "file" || kind === "slice") && unavailable !== undefined
+        ? [unavailable]
+        : []), roots, rootFormat);
     const classified = classifyComponents(entries, all, roots);
     const runtimeFamilies = identifyRuntimeFamilies(all);
     const bridgeProjection = identifyBridgeCandidates(classified.javascript, deduplicateComponents([
@@ -116,7 +97,8 @@ export const projectAppleApplication = (input) => {
             bundles,
             sidecars: entries.some(({ path }) => isSidecar(path)),
             symlinks: entries.some(({ kind }) => kind === "symlink"),
-            unattributed,
+            unattributed: unattributed + unavailable.unattributed,
+            unavailable: unavailable.all.length > 0,
             bridgeCandidateCoverage: bridgeProjection.coverage,
         }),
     ];
@@ -130,6 +112,7 @@ export const projectAppleApplication = (input) => {
         application_roots: roots,
         bundles,
         components: classified,
+        unavailable_components: unavailable.all,
         symlinks: entries
             .filter(({ kind }) => kind === "symlink")
             .map(({ path }) => path)
@@ -138,7 +121,9 @@ export const projectAppleApplication = (input) => {
         bridge_candidates: bridgeProjection.candidates,
         bridge_candidate_coverage: bridgeProjection.coverage,
         coverage: {
-            status: complete && bridgeProjection.coverage.status === "complete"
+            status: complete &&
+                unavailable.all.length === 0 &&
+                bridgeProjection.coverage.status === "complete"
                 ? "complete-within-inventory"
                 : "partial",
             inventory_complete: inventory.complete,
@@ -172,6 +157,13 @@ const appleRootFormat = (format) => {
     return root;
 };
 const isNativeLibrary = (path) => /\.(?:dylib|so)$/iu.test(path);
+const launchdDomain = (path) => {
+    if (anatomyTailMatches(path, ["Contents", "Library", "LaunchAgents", "*"]))
+        return "agent";
+    if (anatomyTailMatches(path, ["Contents", "Library", "LaunchDaemons", "*"]))
+        return "daemon";
+    return undefined;
+};
 const classifyComponents = (entries, all, roots) => {
     const withinApp = (path) => roots.some((root) => isWithin(path, root));
     const matching = (predicate) => entries.flatMap(({ path, kind, component }) => kind === "file" &&
@@ -193,26 +185,10 @@ const classifyComponents = (entries, all, roots) => {
             anatomyNameIs(lastSegment(path), "embedded.mobileprovision") ||
             anatomyNameIs(lastSegment(path), "embedded.provisionprofile")),
         privileged_helpers: matching((path) => anatomyTailMatches(path, ["Contents", "Library", "LaunchServices", "*"])),
-        launchd_plists: matching((path) => path.endsWith(".plist") &&
-            (anatomyTailMatches(path, [
-                "Contents",
-                "Library",
-                "LaunchAgents",
-                "*",
-            ]) ||
-                anatomyTailMatches(path, [
-                    "Contents",
-                    "Library",
-                    "LaunchDaemons",
-                    "*",
-                ]))).map((component) => ({
-            ...component,
-            domain: component.path
-                .split("/")
-                .some((segment) => anatomyNameIs(segment, "LaunchDaemons"))
-                ? "daemon"
-                : "agent",
-        })),
+        launchd_plists: matching((path) => path.endsWith(".plist")).flatMap((component) => {
+            const domain = launchdDomain(component.path);
+            return domain === undefined ? [] : [{ ...component, domain }];
+        }),
         helpers: matching((path) => anatomyTailMatches(path, ["Contents", "Helpers", "*"])),
     };
 };
@@ -313,6 +289,11 @@ const projectionLimitations = (facts) => [
             `Bridge candidate pairs exceeded the projection safety budget; ${facts.bridgeCandidateCoverage.omitted_candidates} hypotheses are omitted. Component arrays still include every component from the supplied inventory pages.`,
         ]
         : []),
+    ...(facts.unavailable
+        ? [
+            "Some inventoried files have no authenticated content identity. Their paths and limitations are retained in unavailable_components; component absence is unknown.",
+        ]
+        : []),
     "Bundle roles follow path conventions. Read each info_plist_path with inspect_plist for CFBundleExecutable, identifiers, and declared services.",
     "Bundle identifiers and signing claims require dedicated plist and CMS parsing; this projection reports only exact paths and hashes.",
     "Runtime families are inferred from inventory formats and bounded framework path conventions, not observed runtime loading.",

package/dist/domain/apple/appleBundleAnatomy.js

@@ -1,16 +1,8 @@
 import { z } from "zod";
-import { digestSchema, prefixedDigestSchema } from "../digests.js";
 import { compareUnicodeCodePoints as compare } from "../unicodeCodePointOrder.js";
 const pathSchema = z.string().min(1);
 const BUNDLE_EXTENSION = /\.(?:app|appex|xpc|framework|systemextension|dext|bundle|plugin|qlgenerator|mdimporter)$/iu;
 const MACH_O_FORMATS = ["mach-o", "mach-o-universal"];
-/** One inventoried file or directory with its content identity. */
-export const appleComponentSchema = z.strictObject({
-    path: pathSchema,
-    artifact_id: prefixedDigestSchema("art"),
-    sha256: digestSchema,
-    format: z.string().min(1),
-});
 /** One application root or nested bundle classified by path convention. */
 export const appleBundleSchema = z.strictObject({
     path: pathSchema,
@@ -79,19 +71,23 @@ export const anatomyTailMatches = (path, expected) => {
         return name === "*" || anatomyNameIs(segment, name);
     });
 };
+/** Interpret bundle roots and anatomy from the same directory and file indexes. */
+export const projectAppleBundleAnatomy = (entries, subject) => {
+    const tree = indexTree(entries);
+    const roots = applicationRoots(tree, subject);
+    return { roots, bundles: detectBundles(tree, roots) };
+};
 /**
  * Outermost iOS (`Payload/X.app`) and macOS (`X.app/Contents/…`) applications.
  * An inventoried `.app` directory is its own root, `.`.
  */
-export const applicationRoots = (entries, subject) => {
+const applicationRoots = (tree, subject) => {
     // A selected `.app` directory is the application, even when its inventory
     // is partial or lacks Contents/; coverage and limitations describe that.
     if (subject.format === "directory" && /\.app$/iu.test(subject.name))
         return ["."];
     const found = new Set();
-    for (const { path } of entries) {
-        if (isSidecar(path))
-            continue;
+    for (const path of directoryPaths(tree)) {
         const segments = path.split("/");
         const app = segments[1];
         if (anatomyNameIs(segments[0] ?? "", "Payload") &&
@@ -110,25 +106,13 @@ export const applicationRoots = (entries, subject) => {
         .filter((root) => !roots.some((other) => other !== root && isWithin(root, other)))
         .sort(compare);
 };
-export const detectBundles = (entries, roots) => {
+const detectBundles = (tree, roots) => {
     const paths = new Set(roots);
-    for (const { path, kind } of entries) {
-        if (isSidecar(path))
-            continue;
-        const root = roots.find((candidate) => isWithin(path, candidate));
-        if (root === undefined)
-            continue;
-        const segments = path.split("/");
-        const start = root === "." ? 0 : root.split("/").length;
-        for (let index = start; index < segments.length; index++) {
-            const segment = segments[index] ?? "";
-            const leaf = index === segments.length - 1;
-            // A symlink or file named like a bundle has no observed contents.
-            if (BUNDLE_EXTENSION.test(segment) && (!leaf || kind === "directory"))
-                paths.add(segments.slice(0, index + 1).join("/"));
-        }
+    for (const path of directoryPaths(tree)) {
+        if (BUNDLE_EXTENSION.test(path.split("/").at(-1) ?? "") &&
+            roots.some((root) => isWithin(path, root)))
+            paths.add(path);
     }
-    const tree = indexTree(entries);
     return [...paths].sort(compare).map((path) => {
         const layout = bundleLayout(path, tree);
         return {
@@ -144,29 +128,35 @@ export const detectBundles = (entries, roots) => {
     });
 };
 const indexTree = (entries) => {
-    const children = new Map();
+    const directories = new Map();
     const files = new Map();
-    const directories = new Set();
     for (const { path, kind, component } of entries) {
         if (isSidecar(path))
             continue;
-        if (kind === "file" && component !== undefined)
-            files.set(path, component);
-        if (kind === "directory")
-            directories.add(path);
         const segments = path.split("/");
         let parent = "";
-        for (const segment of segments) {
-            const names = children.get(parent) ?? new Set();
-            names.add(segment);
-            children.set(parent, names);
+        for (const [index, segment] of segments.entries()) {
+            const leaf = index === segments.length - 1;
+            if (!leaf || kind === "directory") {
+                const names = directories.get(parent) ?? new Set();
+                names.add(segment);
+                directories.set(parent, names);
+            }
+            else if (kind === "file" && component !== undefined) {
+                const children = files.get(parent) ?? new Map();
+                children.set(segment, component);
+                files.set(parent, children);
+            }
             parent = joinPath(parent, segment);
-            if (parent !== path)
-                directories.add(parent);
         }
     }
-    return { children, files, directories };
+    return { directories, files };
 };
+function* directoryPaths(tree) {
+    for (const [parent, names] of tree.directories)
+        for (const name of names)
+            yield joinPath(parent, name);
+}
 const joinPath = (directory, name) => directory === "" ? name : `${directory}/${name}`;
 const directoryOf = (bundle) => (bundle === "." ? "" : bundle);
 const enclosingBundle = (path, bundles) => {
@@ -181,10 +171,10 @@ const enclosingBundle = (path, bundles) => {
     return bundles.has(".") ? "." : null;
 };
 const bundleLayout = (bundle, tree) => {
-    const names = tree.children.get(directoryOf(bundle));
-    if (anatomyChild(names, "Contents") !== null)
+    const directory = directoryOf(bundle);
+    if (namedDirectory(tree, directory, "Contents") !== null)
         return "macos-deep";
-    if (anatomyChild(names, "Versions") !== null)
+    if (namedDirectory(tree, directory, "Versions") !== null)
         return "versioned-framework";
     return "shallow";
 };
@@ -219,33 +209,33 @@ const bundleRole = (bundle) => {
     return "nested-application";
 };
 /** Files directly inside one directory; nested bundles are deeper paths. */
-const directFiles = (directory, tree) => [...(tree.children.get(directory) ?? [])]
-    .map((name) => joinPath(directory, name))
-    .filter((path) => tree.files.has(path))
-    .sort(compare);
+const directFiles = (directory, tree) => [...(tree.files.get(directory)?.values() ?? [])].sort((left, right) => compare(left.path, right.path));
 /** Content directories; `Versions/Current` is a symlink outside the inventory. */
 const contentDirectories = (bundle, layout, tree) => {
     const directory = directoryOf(bundle);
     if (layout === "macos-deep") {
-        const contents = namedChild(tree, directory, "Contents");
+        const contents = namedDirectory(tree, directory, "Contents");
         return contents === null ? [] : [contents];
     }
     if (layout === "shallow")
         return [directory];
-    const versions = namedChild(tree, directory, "Versions");
+    const versions = namedDirectory(tree, directory, "Versions");
     if (versions === null)
         return [];
     // Only real version directories count: Current is a symlink, and files
     // such as .DS_Store are not versions.
-    return [...(tree.children.get(versions) ?? [])]
+    return [...(tree.directories.get(versions) ?? [])]
         .filter((version) => !anatomyNameIs(version, "Current"))
         .map((version) => joinPath(versions, version))
-        .filter((version) => tree.directories.has(version))
         .sort(compare);
 };
-/** Child path using the archive's spelling of one anatomy name. */
-const namedChild = (tree, directory, expected) => {
-    const name = anatomyChild(tree.children.get(directory), expected);
+/** Select applicable entry kinds before applying Apple's case preference. */
+const namedDirectory = (tree, directory, expected) => {
+    const name = anatomyChild(tree.directories.get(directory), expected);
+    return name === null ? null : joinPath(directory, name);
+};
+const namedFile = (tree, directory, expected) => {
+    const name = anatomyChild(tree.files.get(directory)?.keys(), expected);
     return name === null ? null : joinPath(directory, name);
 };
 const infoPlistPath = (bundle, layout, tree) => {
@@ -258,35 +248,33 @@ const infoPlistPath = (bundle, layout, tree) => {
     if (directory === undefined)
         return null;
     const parent = layout === "versioned-framework"
-        ? namedChild(tree, directory, "Resources")
+        ? namedDirectory(tree, directory, "Resources")
         : directory;
     if (parent === null)
         return null;
-    const info = namedChild(tree, parent, "Info.plist");
-    return info !== null && tree.files.has(info) ? info : null;
+    return namedFile(tree, parent, "Info.plist");
 };
 const executableCandidates = (bundle, layout, tree) => contentDirectories(bundle, layout, tree)
     .flatMap((directory) => {
     const executableDirectory = layout === "macos-deep"
-        ? namedChild(tree, directory, "MacOS")
+        ? namedDirectory(tree, directory, "MacOS")
         : directory;
     return executableDirectory === null
         ? []
         : directFiles(executableDirectory, tree);
 })
-    .filter((path) => MACH_O_FORMATS.includes(tree.files.get(path)?.format ?? ""));
+    .filter(({ format }) => isMachOFormat(format))
+    .map(({ path }) => path);
 const signingPaths = (bundle, layout, tree) => contentDirectories(bundle, layout, tree)
     .flatMap((directory) => {
-    const signature = namedChild(tree, directory, "_CodeSignature");
+    const signature = namedDirectory(tree, directory, "_CodeSignature");
     return [
-        signature === null
-            ? null
-            : namedChild(tree, signature, "CodeResources"),
-        namedChild(tree, directory, "embedded.provisionprofile"),
-        namedChild(tree, directory, "embedded.mobileprovision"),
+        signature === null ? null : namedFile(tree, signature, "CodeResources"),
+        namedFile(tree, directory, "embedded.provisionprofile"),
+        namedFile(tree, directory, "embedded.mobileprovision"),
     ];
 })
-    .filter((path) => path !== null && tree.files.has(path))
+    .filter((path) => path !== null)
     .sort(compare);
 /** Platforms of application roots whose layout was observed, not assumed. */
 export const platformsOf = (bundles) => [

package/dist/domain/apple/dylibResolution.js

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import { AnalysisCancelledError } from "../analysisErrorCore.js";
 import { compatibleSlice, directoryOf, expandPrefix, resolveTreePath, } from "./dyldPaths.js";
 import { digestSchema } from "../digests.js";
 import { hasApplicableDyldOverrides, embeddedDyldOverrides, } from "./dyldEnvironment.js";
@@ -352,7 +353,10 @@ const traceProcess = async (context, rootSlice, signal) => {
         context.byInstallName.set(rootSlice.install_name, context.root);
     const pending = [context.root];
     while (pending.length > 0) {
-        signal?.throwIfAborted();
+        if (signal?.aborted)
+            throw new AnalysisCancelledError("trace_dylib_resolution", {
+                cause: signal.reason,
+            });
         const loader = pending.pop() ?? "";
         const current = context.loaded.get(loader);
         if (current === undefined)

package/dist/domain/apple/interfaceBuilderGraph.js

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import { createPlistNumberProjection, } from "./plistNumbers.js";
 import { firstString, parseInterfaceBuilderRecords, record, } from "./interfaceBuilderKeyedArchive.js";
 import { nativeInvestigationEdgeSchema, nativeInvestigationGraphSchema, nativeInvestigationNodeSchema, nativeInvestigationTraceLimitsSchema, } from "../native/nativeInvestigationGraph.js";
 /** One compiled Interface Builder document projected from ibtool output. */
@@ -23,6 +24,7 @@ export const buildInterfaceBuilderAnalysis = (input) => {
     const edges = [];
     const coverage = [];
     const summaries = [];
+    const numberLimitations = [];
     let truncated = false;
     let omittedObjects = 0;
     let omittedConnections = 0;
@@ -30,6 +32,9 @@ export const buildInterfaceBuilderAnalysis = (input) => {
     let omittedHierarchyReferences = 0;
     for (const document of input.documents.slice(0, input.limits.max_documents)) {
         const parsed = parseInterfaceBuilderRecords(document.raw);
+        const numbers = document.numberLiterals === undefined
+            ? undefined
+            : createPlistNumberProjection(document.numberLiterals);
         const prefix = `ib:${JSON.stringify(document.relativePath)}:`;
         const graphId = (kind, parts = []) => `${prefix}${kind}:${JSON.stringify(parts)}`;
         const rootId = `${prefix}root`;
@@ -53,7 +58,17 @@ export const buildInterfaceBuilderAnalysis = (input) => {
                 omittedGraphNodes += 1;
                 return false;
             }
-            nodes.set(node.id, node);
+            // Resolve graph structure first; exact integer representation affects only
+            // serialized attributes, never object identity or UID-derived links.
+            nodes.set(node.id, numbers === undefined
+                ? node
+                : {
+                    ...node,
+                    attributes: Object.fromEntries(Object.entries(node.attributes).map(([key, value]) => [
+                        key,
+                        numbers.project(value),
+                    ])),
+                });
             return true;
         };
         const rootNode = {
@@ -161,14 +176,10 @@ export const buildInterfaceBuilderAnalysis = (input) => {
                 }, isHierarchy);
         };
         let hierarchyCount = 0;
+        let documentOmittedHierarchyNodes = 0;
         const visitHierarchy = (initial, initialParentId) => {
             const pending = [{ value: initial, parentId: initialParentId }];
             while (pending.length > 0) {
-                if (hierarchyCount >= input.limits.max_objects) {
-                    truncated = true;
-                    hierarchyTruncated = true;
-                    return;
-                }
                 const entry = pending.pop();
                 if (entry === undefined)
                     break;
@@ -186,7 +197,14 @@ export const buildInterfaceBuilderAnalysis = (input) => {
                 const item = record(value);
                 const objectId = firstString(item.objectID, item["object-id"], item.id, typeof item.archiveUID === "number" ? String(item.archiveUID) : null);
                 let nextParent = parentId;
-                if (objectId !== null) {
+                if (objectId !== null && hierarchyCount >= input.limits.max_objects) {
+                    // The walk continues over the decoded records so the omission is
+                    // counted rather than reported as an unknown remainder.
+                    truncated = true;
+                    hierarchyTruncated = true;
+                    documentOmittedHierarchyNodes += 1;
+                }
+                else if (objectId !== null) {
                     const known = objectIds.has(objectId);
                     const childId = known
                         ? objectNodeId(objectId)
@@ -311,6 +329,7 @@ export const buildInterfaceBuilderAnalysis = (input) => {
                 : hierarchyTruncated
                     ? "partial"
                     : "complete";
+        numberLimitations.push(...(numbers?.limitations() ?? []).map((note) => `${document.relativePath}: ${note}`));
         summaries.push({
             relative_path: document.relativePath,
             archive_sha256: document.archiveSha256,
@@ -358,7 +377,8 @@ export const buildInterfaceBuilderAnalysis = (input) => {
                             ? "graph_limit_reached"
                             : null,
             examined: hierarchyCount,
-            omitted: documentOmittedHierarchyEdges +
+            omitted: documentOmittedHierarchyNodes +
+                documentOmittedHierarchyEdges +
                 parserOmittedHierarchyReferences +
                 omittedSerializedHierarchyReferences,
         }, {
@@ -408,6 +428,7 @@ export const buildInterfaceBuilderAnalysis = (input) => {
                 omittedHierarchyReferences > 0,
         },
         limitations: [
+            ...numberLimitations,
             "The graph reflects recognized Interface Builder archive fields and connections; omitted private or unrecognized archive fields remain unknown.",
             "A target-action selector is an Interface Builder observation and does not prove that the binary contains a matching implementation.",
             "Decoded constraints, runtime visibility, dynamic UI creation, and pixel geometry are not inferred from these archives.",

package/dist/domain/apple/interfaceBuilderKeyedArchive.js

@@ -92,7 +92,7 @@ export const parseInterfaceBuilderRecords = (value) => {
     return {
         objects,
         connections,
-        hierarchy: Array.isArray(hierarchyRaw) ? hierarchyRaw.slice(0, 20_000) : [],
+        hierarchy: Array.isArray(hierarchyRaw) ? hierarchyRaw : [],
         classes: classesRaw,
         objectCount: objectEntries.length,
         omittedObjects: Math.max(0, objectEntries.length - 20_000),
@@ -282,10 +282,16 @@ const parseKeyedArchive = (root) => {
             continue;
         const resolved = record(resolve(raw));
         const className = firstString(resolved.className);
-        if (className === null)
+        // An archived object names its class with its own `$class` reference;
+        // when that reference cannot be resolved the object is still observed,
+        // with an unknown class. Scalars and class descriptors are not objects.
+        if (className === null && !Object.hasOwn(record(raw), "$class"))
             continue;
         objectCount += 1;
         const fields = Object.fromEntries(Object.entries(resolved).filter(([key]) => key !== "className"));
+        // Keep the unresolvable class reference itself, e.g. a dangling UID.
+        if (className === null)
+            fields.$class = record(raw).$class;
         const authoredId = firstString(fields.objectID, fields["object-id"]);
         const objectId = authoredId ??
             (typeof fields.archiveUID === "number"
@@ -300,7 +306,8 @@ const parseKeyedArchive = (root) => {
                 name: firstString(fields.label, fields.title, fields.identifier, fields.accessibilityLabel, className) ?? `object ${String(index)}`,
                 attributes: jsonSafeRecord(fields),
             }));
-        if (/(?:Outlet|Connection|Segue|ActionConnection|ControlConnector)/iu.test(className)) {
+        if (className !== null &&
+            /(?:Outlet|Connection|Segue|ActionConnection|ControlConnector)/iu.test(className)) {
             const controlAction = /ControlConnector/iu.test(className);
             const uiKit = isUIKitRuntimeConnectionClass(className);
             // AppKit and UIKit archive the same endpoint roles under their own
@@ -428,7 +435,7 @@ const classifyConnection = (type) => {
     const value = type.toLowerCase();
     if (value.includes("outlet"))
         return "outlet";
-    if (value.includes("action"))
+    if (value.includes("action") || value.includes("eventconnection"))
         return "action";
     if (value.includes("segue"))
         return "segue";