rea-agents 6.5.0 → 6.7.0

package/dist/cli-runtime/{analysisErrorCleanup-Do6YeeoD.js → analysisErrorCleanup-COdAmDsb.js}

@@ -1,6 +1,5 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { ProviderAdapterError, init_providerAdapterError } from "./providerAdapterError-DAjhICdr.js";
-import { init_analysisErrorProjection, projectAnalysisError } from "./cliResultOutput-DsRMI8CJ.js";
+import { ProviderAdapterError, init_analysisErrorProjection, init_providerAdapterError, projectAnalysisError } from "./cliResultOutput-10sd6xGx.js";
 
 //#region dist/domain/analysisErrorCleanup.js
 var analysisErrorWithCleanupFailure;
@@ -11,13 +10,15 @@ function init_analysisErrorCleanup() {
 		analysisErrorWithCleanupFailure = (primary, cleanup, operation = "close_binary") => {
 			const projected = projectAnalysisError(cleanup);
 			return new ProviderAdapterError(cleanup instanceof ProviderAdapterError ? cleanup.providerId : "rea", operation, {
+				cleanupPrimary: primary,
 				cause: new AggregateError([primary, cleanup], "Analysis failed and cleanup remains incomplete.", { cause: primary }),
 				userMessage: projectAnalysisError(primary).message,
+				remediationAction: projected.remediation.action,
 				...primary.capturedOutput === undefined ? {} : { capturedOutput: primary.capturedOutput },
 				...primary.partialObservation === undefined ? {} : { partialObservation: primary.partialObservation },
 				cleanup: {
 					reason: projected.message,
-					resources: [...new Set([...primary.cleanupResources, ...cleanup.cleanupResources])]
+					resources: [...new Set([...primary.cleanupIncomplete ? primary.cleanupResources : [], ...cleanup.cleanupResources])]
 				},
 				diagnostics: {
 					primary_error: projectAnalysisError(primary),

package/dist/cli-runtime/{appleArchiveFormat-tVoI2ykA.js → appleArchiveFormat-Bb3G5CCI.js}

@@ -1,11 +1,18 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { err, init_result, ok } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
+import { err, init_result, ok } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
 
 //#region dist/domain/dosMz.js
-var observeMzWindowsHeader, windowsHeaderSignature, parseDosMzHeader, validateRelocations;
+var dosMzImageByteLength, observeMzWindowsHeader, windowsHeaderSignature, parseDosMzHeader, validateRelocations;
 function init_dosMz() {
 	return (init_dosMz = __esmMin((() => {
 		init_result();
+		dosMzImageByteLength = (bytes) => {
+			if (bytes.length < 28 || bytes.toString("latin1", 0, 2) !== "MZ") return err("invalid or truncated DOS MZ header");
+			const lastPageBytes = bytes.readUInt16LE(2);
+			const pages = bytes.readUInt16LE(4);
+			if (pages === 0 || lastPageBytes > 511) return err("invalid DOS MZ page count or final-page size");
+			return ok((pages - 1) * 512 + (lastPageBytes === 0 ? 512 : lastPageBytes));
+		};
 		observeMzWindowsHeader = (bytes, fileSize = bytes.length, signatureAtOffset) => {
 			if (bytes.length < 64) return fileSize >= 64 ? { state: "header-needed" } : { state: "absent" };
 			const headerBytes = bytes.readUInt16LE(8) * 16;
@@ -52,10 +59,9 @@ function init_dosMz() {
 			const windowsHeader = observeMzWindowsHeader(bytes, fileSize, signatureAtOffset);
 			if (windowsHeader.state === "declared") return err("MZ declares a Windows new header; it is not a DOS-only image");
 			if (windowsHeader.state === "signature-needed") return err("MZ Windows new-header signature is outside the bounded prefix");
-			const lastPageBytes = bytes.readUInt16LE(2);
-			const pages = bytes.readUInt16LE(4);
-			if (pages === 0 || lastPageBytes > 511) return err("invalid DOS MZ page count or final-page size");
-			const imageBytes = (pages - 1) * 512 + (lastPageBytes === 0 ? 512 : lastPageBytes);
+			const extent = dosMzImageByteLength(bytes);
+			if (!extent.ok) return extent;
+			const imageBytes = extent.value;
 			const headerBytes = bytes.readUInt16LE(8) * 16;
 			if (headerBytes < 28 || headerBytes >= imageBytes) return err("invalid DOS MZ header size or empty load module");
 			if (imageBytes > fileSize) return err("truncated DOS MZ load module");
@@ -260,4 +266,4 @@ function init_appleArchiveFormat() {
 }
 
 //#endregion
-export { MAX_XML_PLIST_PROBE_BYTES, createXmlPlistSignatureProbe, hasBinaryPlistSignature, hasNibArchiveSignature, hasXmlPlistSignature, init_appleArchiveFormat, init_dosMz, observeMzWindowsHeader, parseDosMzHeader };
+export { MAX_XML_PLIST_PROBE_BYTES, createXmlPlistSignatureProbe, dosMzImageByteLength, hasBinaryPlistSignature, hasNibArchiveSignature, hasXmlPlistSignature, init_appleArchiveFormat, init_dosMz, observeMzWindowsHeader, parseDosMzHeader };

package/dist/cli-runtime/{application__DirectAnalysisStatus-DpOejOf0.js → application__DirectAnalysisStatus-F74bu9oy.js}

@@ -1,13 +1,13 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { PRODUCT_IDENTITY, SDK_IDENTITY, init_identity, init_toolOutputSchemaPrimitives, providerCapabilitySet } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { SQLITE_PROVIDER_IDENTITY, init_sqliteDatabase } from "./cutterToolContracts-TZH9EHr5.js";
-import { init_jsonValue, jsonObjectSchema } from "./errorSchemas-CTRmvMl3.js";
-import { init_analysisErrorProjection, projectAnalysisError } from "./cliResultOutput-DsRMI8CJ.js";
-import { init_logger, silentLogger } from "./logger-CQQCI4a2.js";
-import { CATALOG_IDENTITY, init_catalogIdentity } from "./catalogIdentity-DLoXgfIR.js";
-import { init_toolContracts, toolContract } from "./toolContracts-D2FOG_Nb.js";
-import { init_BinarySessionStatus, providerCapabilitySets } from "./BinarySessionStatus-DnMxMk-r.js";
-import { CURRENT_ENTRYPOINT_PATH, init_CurrentEntrypointPath } from "./CurrentEntrypointPath-D5FRNdkq.js";
+import { PRODUCT_IDENTITY, SDK_IDENTITY, init_identity, init_toolOutputSchemaPrimitives, providerCapabilitySet } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { SQLITE_PROVIDER_IDENTITY, init_sqliteDatabase } from "./cutterToolContracts-BQtG_Nzo.js";
+import { init_jsonValue, jsonObjectSchema } from "./errorSchemas-Ixz_q7qt.js";
+import { init_analysisErrorProjection, projectAnalysisError } from "./cliResultOutput-10sd6xGx.js";
+import { init_logger, silentLogger } from "./logger-BuDJ9xxO.js";
+import { CURRENT_ENTRYPOINT_PATH, init_CurrentEntrypointPath } from "./CurrentEntrypointPath-m7QCIVN0.js";
+import { CATALOG_IDENTITY, init_catalogIdentity } from "./catalogIdentity-DAEEsOdX.js";
+import { init_toolContracts, toolContract } from "./toolContracts-CJzEyZ38.js";
+import { init_BinarySessionStatus, providerCapabilitySets } from "./BinarySessionStatus-DRhjr7Vb.js";
 import { basename, dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { satisfies } from "semver";
@@ -129,7 +129,7 @@ function init_DirectAnalysisStatus() {
 			if (!config.ok) return { error: projectAnalysisError(config.error) };
 			const session = await dependencies.createBinarySession(config.value, logger);
 			try {
-				const status = jsonObjectSchema.parse(session.status());
+				const status = jsonObjectSchema.parse(await session.status());
 				return {
 					...status,
 					capabilities: [...providerCapabilitySet.array().parse(status.capabilities), ...providerCapabilitySets([sqliteDatabaseCapability(process.versions.node)])],

package/dist/cli-runtime/{application__EnhancedTools-oFE2bOjs.js → application__EnhancedTools-Bg51b0Yp.js}

@@ -1,9 +1,10 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { addressDistance, addressedValue, classifySwiftSymbol, compareUnicodeCodePoints, createEvidence, err, functionDossierSchema, init_evidence, init_hopperValues, init_interfaceBuilderGraph, init_nativeApiBoundary, init_nativeInstruction, init_nativeInvestigationGraph, init_nativeValueTrace, init_objcSwiftMetadata, init_result, init_swiftSymbolClassification, init_toolOutputSchemaPrimitives, init_unicodeCodePointOrder, inspectNativeDispatchMetadata, interfaceBuilderAnalysisSchema, isSwiftMangledSymbolName, joinInterfaceBuilderDispatch, nativeApiInspectionResultSchema, nativeCallTargetsSchema, nativeDispatchMetadataResultSchema, nativeInvestigationGraphSchema, nativeInvestigationTraceSchema, nativeValueTraceInputSchema, nativeValueTraceSchema, ok, parseDocuments, parseFunctionDossier, parseListCount, parseRelatedAddresses, parseSegmentImageBase, parseSegments, referenceKindSchema, traceNativeInvestigationGraph } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { AnalysisCancelledError, AnalysisCapabilityUnavailableError, AnalysisInputError, AnalysisOutputError, init_analysisErrorCore, init_jsonValue, jsonValueSchema } from "./errorSchemas-CTRmvMl3.js";
-import { init_analysisErrorProjection, init_jsonSerialization, jsonParts, projectAnalysisError } from "./cliResultOutput-DsRMI8CJ.js";
-import { enhancedInputSchemas, init_enhancedInputs } from "./officialToolContracts-CCFF0an9.js";
-import { init_ProcedureAddressResolution, resolveProcedureAddress } from "./DirectAnalysis-BgvAtpN3.js";
+import { addressedValue, classifySwiftSymbol, compareUnicodeCodePoints, createEvidence, err, functionDossierSchema, init_evidence, init_hopperValues, init_interfaceBuilderGraph, init_nativeApiBoundary, init_nativeInstruction, init_nativeInvestigationGraph, init_nativeValueTrace, init_objcSwiftMetadata, init_result, init_swiftSymbolClassification, init_toolOutputSchemaPrimitives, init_unicodeCodePointOrder, inspectNativeDispatchMetadata, interfaceBuilderAnalysisSchema, isSwiftMangledSymbolName, joinInterfaceBuilderDispatch, nativeApiInspectionResultSchema, nativeCallTargetsSchema, nativeDispatchMetadataResultSchema, nativeInvestigationGraphSchema, nativeInvestigationTraceSchema, nativeValueTraceInputSchema, nativeValueTraceSchema, ok, parseDocuments, parseFunctionDossier, parseListCount, parseRelatedAddresses, parseSegments, projectBinaryOverview, referenceKindSchema, traceNativeInvestigationGraph } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { AnalysisCancelledError, AnalysisCapabilityUnavailableError, AnalysisInputError, AnalysisOutputError, init_analysisErrorCore, init_jsonValue, jsonValueSchema } from "./errorSchemas-Ixz_q7qt.js";
+import { createAnalysisExecutionEvidence, init_AnalysisProvider } from "./AnalysisProvider-BGrYaMVo.js";
+import { init_analysisErrorProjection, init_jsonSerialization, jsonParts, projectAnalysisError } from "./cliResultOutput-10sd6xGx.js";
+import { enhancedInputSchemas, init_enhancedInputs } from "./officialToolContracts-CzzVLx8I.js";
+import { init_ProcedureAddressResolution, init_SourceLimitations, renderSourceLimitations, resolveProcedureAddress } from "./DirectAnalysis-C5NyUryV.js";
 import { z } from "zod";
 
 //#region dist/domain/symbolAnalysis.js
@@ -48,7 +49,11 @@ function init_symbolAnalysis() {
 				const mangledNames = [...new Set([...isSwiftSymbolName(entry.name) ? [entry.name] : [], ...aliases.get(entry.address) ?? []])];
 				if (mangledNames.length === 0) continue;
 				if (pattern !== undefined && ![entry.name, ...mangledNames].some((name) => name.includes(pattern))) continue;
-				const kinds = new Set(mangledNames.filter((name) => classifySwiftSymbol(name) !== undefined).map((name) => classifySwiftSymbol(name)?.category ?? null));
+				const kinds = new Set();
+				for (const name of mangledNames) {
+					const decoded = classifySwiftSymbol(name)?.category;
+					if (decoded !== undefined && decoded !== null) kinds.add(decoded);
+				}
 				const category = kinds.size === 1 ? [...kinds][0] ?? null : null;
 				const item = {
 					address: entry.address,
@@ -59,7 +64,7 @@ function init_symbolAnalysis() {
 					unclassifiedNames.add(entry.name);
 					unclassified.push({
 						...item,
-						reason: kinds.size > 1 && !kinds.has(null) ? "conflicting_categories" : "category_not_decoded"
+						reason: kinds.size > 1 ? "conflicting_categories" : "category_not_decoded"
 					});
 				}
 				const bucket = category ?? "other";
@@ -147,6 +152,7 @@ function init_NativeValueTrace() {
 		init_analysisErrorCore();
 		init_result();
 		init_jsonSerialization();
+		init_SourceLimitations();
 		NODE_PAYLOAD_BYTES = 8 * 1024 * 1024;
 		traceNativeValues = async (analysis, parameters, signal) => {
 			const input = nativeValueTraceInputSchema.parse(parameters);
@@ -154,6 +160,7 @@ function init_NativeValueTrace() {
 			const edges = [];
 			const procedures = [];
 			const unknowns = [];
+			const sourceLimitations = [];
 			const callBindings = [];
 			const pending = [{
 				procedure: input.procedure,
@@ -345,6 +352,11 @@ function init_NativeValueTrace() {
 					}
 					const targets = nativeCallTargetsSchema.safeParse(resolved.value.result);
 					if (!targets.success) return err(new AnalysisOutputError("resolve_native_call_targets", "Invalid static call resolution"));
+					sourceLimitations.push(...targets.data.limitations.map((limitation) => ({
+						provider: resolved.value.provider,
+						operation: "resolve_native_call_targets",
+						limitation
+					})));
 					if (targets.data.targets.length === 0) unknowns.push({
 						procedure: address,
 						address: operation.address,
@@ -464,7 +476,8 @@ function init_NativeValueTrace() {
 				limitations: [
 					"Static decompiler def-use graphs cover recovered block members; when membership is unavailable they exclude operations marked dead. Logical CALL argument positions bind to recovered HighParam ordinals and RETURN values bind to recovered CALL outputs; these are decompiler-derived dependencies, not original source or runtime observations. Missing parameters, variadic arguments and alias dependencies remain unknown.",
 					"LOAD and STORE are memory operations; object fields, persistent state and RNG semantics are not inferred from names or pseudocode.",
-					"Traversal caps depth, decompilations, call-site resolutions, nodes, edges and node payloads (8 MiB). Complete serialized output is bounded to 32 MiB. Pagination reruns analysis and returns edges whose source is on the node page; endpoints outside the page retain stable identities."
+					"Traversal caps depth, decompilations, call-site resolutions, nodes, edges and node payloads (8 MiB). Complete serialized output is bounded to 32 MiB. Pagination reruns analysis and returns edges whose source is on the node page; endpoints outside the page retain stable identities.",
+					...renderSourceLimitations(sourceLimitations)
 				]
 			});
 			if (Buffer.byteLength(JSON.stringify(result)) > 32 * 1024 * 1024) return err(new AnalysisOutputError("trace_native_values", "Graph output exceeds 32 MiB; lower max_nodes, max_edges or page limit"));
@@ -475,11 +488,16 @@ function init_NativeValueTrace() {
 
 //#endregion
 //#region dist/application/native/NativeCallRoutes.js
-var referencesSchema, readNativeCallRoutes;
+var limitationsFrom, referencesSchema, typedCallRoutes, readNativeCallRoutes;
 function init_NativeCallRoutes() {
 	return (init_NativeCallRoutes = __esmMin((() => {
 		init_hopperValues();
 		init_analysisErrorCore();
+		limitationsFrom = (operation, provider, limitations) => limitations.map((limitation) => ({
+			provider,
+			operation,
+			limitation
+		}));
 		referencesSchema = z.object({
 			reference_kinds_available: z.boolean(),
 			references: z.array(z.object({
@@ -493,6 +511,21 @@ function init_NativeCallRoutes() {
 				reason: z.string()
 			}))
 		});
+		typedCallRoutes = (references) => {
+			const calls = references.filter(({ kind }) => kind.available && kind.call);
+			const countBySite = new Map();
+			for (const call of calls) {
+				const targets = countBySite.get(call.source_address) ?? new Set();
+				targets.add(call.target_address);
+				countBySite.set(call.source_address, targets);
+			}
+			return calls.map((call) => ({
+				address: call.target_procedure?.address ?? call.target_address,
+				site: call.source_address,
+				relation: call.kind.available && (call.kind.computed || call.kind.indirect) ? "indirect_call" : "direct_call",
+				resolution: (countBySite.get(call.source_address)?.size ?? 0) > 1 ? "ambiguous" : call.kind.available && (call.kind.computed || call.kind.indirect) ? "resolved" : "observed"
+			}));
+		};
 		readNativeCallRoutes = async (analysis, procedure, signal, selectorOrigin) => {
 			const options = {
 				...signal === undefined ? {} : { signal },
@@ -503,12 +536,15 @@ function init_NativeCallRoutes() {
 				direction: "outgoing"
 			}, options);
 			let unknowns = [];
+			let limitations = [];
 			if (execution.ok) {
+				limitations = limitationsFrom("procedure_references", execution.value.provider, execution.value.limitations);
 				const parsed = referencesSchema.safeParse(execution.value.result);
 				if (!parsed.success) return {
 					ok: false,
 					error: new AnalysisOutputError("procedure_references", "Invalid typed call references"),
-					unknowns
+					unknowns,
+					limitations
 				};
 				unknowns = parsed.data.unresolved_calls.map((call) => ({
 					...call,
@@ -516,38 +552,30 @@ function init_NativeCallRoutes() {
 				}));
 				const references = parsed.data.references;
 				if (parsed.data.reference_kinds_available === true || references.length > 0 && references.every(({ kind }) => kind.available)) {
-					const calls = references.filter(({ kind }) => kind.available && kind.call);
-					const countBySite = new Map();
-					for (const call of calls) {
-						const targets = countBySite.get(call.source_address) ?? new Set();
-						targets.add(call.target_address);
-						countBySite.set(call.source_address, targets);
-					}
 					return {
 						ok: true,
 						value: {
 							provider: execution.value.provider,
-							routes: calls.map((call) => ({
-								address: call.target_procedure?.address ?? call.target_address,
-								site: call.source_address,
-								relation: call.kind.available && (call.kind.computed || call.kind.indirect) ? "indirect_call" : "direct_call",
-								resolution: (countBySite.get(call.source_address)?.size ?? 0) > 1 ? "ambiguous" : call.kind.available && (call.kind.computed || call.kind.indirect) ? "resolved" : "observed"
-							})),
-							unknowns
+							routes: typedCallRoutes(references),
+							unknowns,
+							limitations
 						}
 					};
 				}
 			} else if (execution.error._tag !== "AnalysisCapabilityUnavailableError") return {
 				ok: false,
 				error: execution.error,
-				unknowns
+				unknowns,
+				limitations
 			};
 			const callees = await analysis.execute("procedure_callees", { procedure }, options);
 			if (!callees.ok) return {
 				ok: false,
 				error: callees.error,
-				unknowns
+				unknowns,
+				limitations
 			};
+			limitations = [...limitations, ...limitationsFrom("procedure_callees", callees.value.provider, callees.value.limitations)];
 			const parsed = parseRelatedAddresses(callees.value.result, "callees");
 			return parsed.ok ? {
 				ok: true,
@@ -559,12 +587,14 @@ function init_NativeCallRoutes() {
 						relation: "provider_call",
 						resolution: "inferred"
 					})),
-					unknowns
+					unknowns,
+					limitations
 				}
 			} : {
 				ok: false,
 				error: parsed.error,
-				unknowns
+				unknowns,
+				limitations
 			};
 		};
 	})))();
@@ -581,6 +611,7 @@ function init_NativeUiActionTrace() {
 		init_NativeDispatchMetadataInspection();
 		init_jsonValue();
 		init_NativeCallRoutes();
+		init_SourceLimitations();
 		init_result();
 		init_analysisErrorCore();
 		init_analysisErrorProjection();
@@ -734,7 +765,8 @@ function init_NativeUiActionTrace() {
 			return ok(jsonValueSchema.parse(nativeInvestigationTraceSchema.parse({
 				...trace,
 				truncated: trace.truncated || expanded.truncated || graph.truncated,
-				reason: expanded.truncated && trace.reason === null ? "native_call_traversal_bound_reached" : graph.truncated && trace.reason === null ? "native_trace_output_bound_reached" : trace.reason
+				reason: expanded.truncated && trace.reason === null ? "native_call_traversal_bound_reached" : graph.truncated && trace.reason === null ? "native_trace_output_bound_reached" : trace.reason,
+				limitations: [...trace.limitations, ...renderSourceLimitations(expanded.limitations)]
 			})));
 		};
 		emptyGraph = (targetSha256, provider) => nativeInvestigationGraphSchema.parse({
@@ -826,6 +858,7 @@ function init_NativeUiActionTrace() {
 			let examined = 0;
 			let omitted = 0;
 			let truncated = false;
+			const sourceLimitations = [];
 			while (queueIndex < queue.length) {
 				const current = queue[queueIndex++];
 				if (current === undefined || visited.has(current.address)) continue;
@@ -842,6 +875,7 @@ function init_NativeUiActionTrace() {
 				}
 				const execution = await readNativeCallRoutes(input.analysis, current.address, input.signal, "provider");
 				examined += 1;
+				sourceLimitations.push(...execution.ok ? execution.value.limitations : execution.limitations);
 				if (!execution.ok && execution.error._tag === "AnalysisCancelledError") return { error: execution.error };
 				const unknowns = execution.ok ? execution.value.unknowns : execution.unknowns;
 				for (const [index, unknown] of unknowns.entries()) {
@@ -963,7 +997,8 @@ function init_NativeUiActionTrace() {
 				edges: [...edges.values()],
 				examined,
 				omitted,
-				truncated
+				truncated,
+				limitations: sourceLimitations
 			};
 		};
 		graphNodeDepths = (start, nodes, edges) => {
@@ -999,19 +1034,21 @@ function init_EnhancedToolTypes() {
 
 //#endregion
 //#region dist/application/AnalysisDocument.js
-var executionOptions, resolveAnalysisDocument;
+var executionOptions, resolveAnalysisDocument, completeSelection;
 function init_AnalysisDocument() {
 	return (init_AnalysisDocument = __esmMin((() => {
+		init_AnalysisProvider();
 		init_analysisErrorCore();
 		init_hopperValues();
 		init_result();
 		executionOptions = (signal) => signal === undefined ? undefined : { signal };
 		resolveAnalysisDocument = async (analysis, document, signal) => {
 			if (document !== undefined) return ok(document);
-			if (signal?.aborted === true) return err(new AnalysisCancelledError("current_document"));
+			if (signal?.aborted === true) return err(new AnalysisCancelledError("current_document", { cause: signal.reason }));
 			const current = await analysis.execute("current_document", {}, executionOptions(signal));
 			if (!current.ok) {
-				if (!(current.error instanceof AnalysisCapabilityUnavailableError)) return current;
+				if (!(current.error instanceof AnalysisCapabilityUnavailableError) || current.error.cleanupIncomplete) return current;
+				if (signal?.aborted) return err(new AnalysisCancelledError("current_document", { cause: signal.reason }));
 				const listed = await analysis.execute("list_documents", {}, executionOptions(signal));
 				if (!listed.ok) return listed;
 				const parsed = parseDocuments(listed.value.result);
@@ -1019,9 +1056,16 @@ function init_AnalysisDocument() {
 				if (parsed.value.length !== 1) return err(new AnalysisOutputError("list_documents", `expected exactly one document identity for a provider without current-document selection, received ${parsed.value.length}`));
 				const [documentName] = parsed.value;
 				if (documentName === undefined || documentName.length === 0) return err(new AnalysisOutputError("list_documents", "provider returned no document identity"));
-				return ok(documentName);
+				return completeSelection(documentName, "list_documents", listed.value, signal);
 			}
-			return typeof current.value.result === "string" && current.value.result.length > 0 ? ok(current.value.result) : err(new AnalysisOutputError("current_document", "expected a nonempty document identity string"));
+			return typeof current.value.result === "string" && current.value.result.length > 0 ? completeSelection(current.value.result, "current_document", current.value, signal) : err(new AnalysisOutputError("current_document", "expected a nonempty document identity string"));
+		};
+		completeSelection = (document, operation, execution, signal) => {
+			if (signal?.aborted) return err(new AnalysisCancelledError(operation, {
+				cause: signal.reason,
+				partialObservation: createAnalysisExecutionEvidence(operation, {}, execution, "observed")
+			}));
+			return ok(document);
 		};
 	})))();
 }
@@ -1715,6 +1759,8 @@ function init_EnhancedTools() {
 				});
 			}
 			async #binaryOverview(signal) {
+				const direct = await this.#call("read_binary_inventory_summary", {}, signal);
+				if (direct.ok || !(direct.error instanceof AnalysisCapabilityUnavailableError) || direct.error.cleanupIncomplete) return direct;
 				const document = await resolveAnalysisDocument(this.analysis, undefined, signal);
 				if (!document.ok) return document;
 				const [segmentsResult, proceduresResult, stringsResult] = await Promise.all([
@@ -1731,25 +1777,12 @@ function init_EnhancedTools() {
 				if (!procedureCount.ok) return procedureCount;
 				const stringCount = parseListCount(stringsResult.value, "strings");
 				if (!stringCount.ok) return stringCount;
-				const observedSegments = segments?.ok ? segments.value : undefined;
-				const imageBase = observedSegments === undefined ? undefined : parseSegmentImageBase(observedSegments);
-				return ok({
+				return ok(projectBinaryOverview({
 					document: document.value,
-					...imageBase === undefined ? {} : { image_base: imageBase },
-					...observedSegments === undefined ? {} : {
-						segments: observedSegments.map(({ name, start, end, image_base, address_space }) => ({
-							name,
-							start,
-							end,
-							length: addressDistance(start, end),
-							...image_base === undefined ? {} : { image_base },
-							...address_space === undefined ? {} : { address_space }
-						})),
-						segment_count: observedSegments.length
-					},
+					...segments?.ok ? { segments: segments.value } : {},
 					procedure_count: procedureCount.value,
 					string_count: stringCount.value
-				});
+				}));
 			}
 			async #allAddressed(tool, signal) {
 				const result = await this.#call(tool, {}, signal);

package/dist/cli-runtime/{application__FunctionAnalysisEvidence-B6osuhvW.js → application__FunctionAnalysisEvidence-DBWIaYCh.js}

@@ -1,7 +1,7 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { analysisInputErrorFromIssues, createEvidence, err, init_evidence, init_hopperValues, init_inputIssueProjection, init_result, ok, parseFunctionDossier } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { init_jsonValue, jsonObjectSchema } from "./errorSchemas-CTRmvMl3.js";
-import { init_toolContracts, toolContract } from "./toolContracts-D2FOG_Nb.js";
+import { analysisInputErrorFromIssues, createEvidence, err, init_evidence, init_hopperValues, init_inputIssueProjection, init_result, ok, parseFunctionDossier } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { init_jsonValue, jsonObjectSchema } from "./errorSchemas-Ixz_q7qt.js";
+import { init_toolContracts, toolContract } from "./toolContracts-CJzEyZ38.js";
 
 //#region dist/application/FunctionAnalysisEvidence.js
 var executeFunctionAnalysisEvidence;

package/dist/cli-runtime/{application__ReconstructionCoverageService-DN3wTFQj.js → application__ReconstructionCoverageService-AEPNpZqJ.js}

@@ -1,7 +1,7 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { err, evaluateReconstructionClosure, init_reconstructionCoverage, init_reconstructionCoverageInput, init_result, ok, reconstructionCoverageEvaluationInputSchema } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { AnalysisInputError, init_analysisErrorCore, init_jsonValue, jsonValueSchema } from "./errorSchemas-CTRmvMl3.js";
-import { init_workflowInputError, requestInputError, workflowInputError } from "./workflowInputError-n8Oo-bLA.js";
+import { err, evaluateReconstructionClosure, init_reconstructionCoverage, init_reconstructionCoverageInput, init_result, ok, reconstructionCoverageEvaluationInputSchema } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { AnalysisInputError, init_analysisErrorCore, init_jsonValue, jsonValueSchema } from "./errorSchemas-Ixz_q7qt.js";
+import { init_workflowInputError, requestInputError, workflowInputError } from "./workflowInputError-BP8z9Wxl.js";
 import { z } from "zod";
 
 //#region dist/application/ReconstructionCoverageService.js

package/dist/cli-runtime/{application__ReconstructionObligationLedgerService-CKcTppX9.js → application__ReconstructionObligationLedgerService-Cl9cPEZf.js}

@@ -1,9 +1,9 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { NonCanonicalEvidenceBundleError, compareUnicodeCodePoints, createEvidence, digestCanonicalValue, err, hasReconstructionObligationDiagnostic, init_canonicalDigest, init_evidence, init_evidenceBundle, init_processCaptureParsing, init_reconstructionObligationLedgerIntegrity, init_reconstructionObligationLedgerSchemas, init_result, init_unicodeCodePointOrder, ok, parseEvidenceBundle, parseProcessCapture, reconstructionObligationCoverage, reconstructionObligationDependencyGraph, reconstructionObligationEvidenceIds, reconstructionObligationLedgerClosureDigest, reconstructionObligationLedgerInputSchema, reconstructionObligationLedgerSchema, reconstructionObligationLedgerStatus, reconstructionObligationOwnershipGraph, reconstructionObligationReports, summarizeReconstructionObligations } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { AnalysisProtocolError, init_analysisErrorCore, init_jsonValue, jsonObjectSchema, jsonValueSchema } from "./errorSchemas-CTRmvMl3.js";
-import { JAVASCRIPT_APPLICATION_WORKFLOW_PROVIDER, init_InvestigationProviders } from "./InvestigationProviders-DoQRIHii.js";
-import { init_workflowInputError, requestInputError, workflowInputError } from "./workflowInputError-n8Oo-bLA.js";
-import { init_JavaScriptApplicationEvidenceGraph, parseApplicationGraphEvidence } from "./JavaScriptApplicationEvidenceGraph-D5aI_FSJ.js";
+import { DuplicateEvidenceRecordError, NonCanonicalEvidenceBundleError, compareUnicodeCodePoints, createEvidence, digestCanonicalValue, err, hasReconstructionObligationDiagnostic, init_canonicalDigest, init_evidence, init_evidenceBundle, init_processCaptureParsing, init_reconstructionObligationLedgerIntegrity, init_reconstructionObligationLedgerSchemas, init_result, init_unicodeCodePointOrder, ok, parseEvidenceBundle, parseProcessCapture, reconstructionObligationCoverage, reconstructionObligationDependencyGraph, reconstructionObligationEvidenceIds, reconstructionObligationLedgerClosureDigest, reconstructionObligationLedgerInputSchema, reconstructionObligationLedgerSchema, reconstructionObligationLedgerStatus, reconstructionObligationOwnershipGraph, reconstructionObligationReports, summarizeReconstructionObligations } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { AnalysisProtocolError, init_analysisErrorCore, init_jsonValue, jsonObjectSchema, jsonValueSchema } from "./errorSchemas-Ixz_q7qt.js";
+import { JAVASCRIPT_APPLICATION_WORKFLOW_PROVIDER, init_InvestigationProviders } from "./InvestigationProviders-CFh4a64d.js";
+import { init_workflowInputError, requestInputError, workflowInputError } from "./workflowInputError-BP8z9Wxl.js";
+import { init_JavaScriptApplicationEvidenceGraph, parseApplicationGraphEvidence } from "./JavaScriptApplicationEvidenceGraph-gOmPB2L6.js";
 import { z } from "zod";
 import { createHash } from "node:crypto";
 import canonicalize from "canonicalize";
@@ -149,7 +149,7 @@ function init_ReconstructionObligationPolicies() {
 
 //#endregion
 //#region dist/application/ReconstructionObligationCandidates.js
-var deriveReconstructionObligationCandidates, deriveApplicationCandidates, deriveProcessCandidate, generatedCandidate, reviewedCandidate, graphReference, reviewedEvidenceState, addCandidate, sourceState, uniqueBy, obligationId, digest, errorMessage;
+var MissingReviewEvidenceError, deriveReconstructionObligationCandidates, deriveApplicationCandidates, deriveProcessCandidate, generatedCandidate, reviewedCandidate, graphReference, reviewedEvidenceState, addCandidate, sourceState, uniqueBy, obligationId, digest, errorMessage;
 function init_ReconstructionObligationCandidates() {
 	return (init_ReconstructionObligationCandidates = __esmMin((() => {
 		init_evidenceBundle();
@@ -157,6 +157,12 @@ function init_ReconstructionObligationCandidates() {
 		init_JavaScriptApplicationEvidenceGraph();
 		init_ReconstructionObligationPolicies();
 		init_unicodeCodePointOrder();
+		MissingReviewEvidenceError = class extends TypeError {
+			constructor(evidenceId) {
+				super(`Reviewed obligation Evidence is missing: ${evidenceId}`);
+				this.name = "MissingReviewEvidenceError";
+			}
+		};
 		deriveReconstructionObligationCandidates = (bundleInput, reviewed) => {
 			const bundle = parseEvidenceBundle(bundleInput);
 			const records = new Map(bundle.records.map((record) => [record.evidence_id, record]));
@@ -332,7 +338,7 @@ function init_ReconstructionObligationCandidates() {
 				origin: "reviewed",
 				authority_references: reviewEvidenceIds.map((evidenceId) => {
 					const evidence = records.get(evidenceId);
-					if (evidence === undefined) throw new TypeError(`Reviewed obligation Evidence is missing: ${evidenceId}`);
+					if (evidence === undefined) throw new MissingReviewEvidenceError(evidenceId);
 					return {
 						evidence_id: evidenceId,
 						authority: evidence.authority,
@@ -374,7 +380,9 @@ function init_ReconstructionObligationCandidates() {
 				authority_references: uniqueBy([...current.authority_references, ...candidate.authority_references], (reference) => `${reference.evidence_id}:${reference.state}:${reference.location}`),
 				observed_cases: uniqueBy([...current.observed_cases, ...candidate.observed_cases], (item) => `${item.kind}:${item.evidence_id}:${item.location}`),
 				source_state: sourceState([...current.authority_references, ...candidate.authority_references]),
-				definitionCount: current.definitionCount + candidate.definitionCount
+				unavailable_authority: uniqueBy([...current.unavailable_authority, ...candidate.unavailable_authority], (item) => item),
+				required_next_evidence: uniqueBy([...current.required_next_evidence, ...candidate.required_next_evidence], (item) => item),
+				definitionCount: current.origin === "generated" && candidate.origin === "generated" ? current.definitionCount : current.definitionCount + candidate.definitionCount
 			});
 		};
 		sourceState = (references) => {
@@ -524,6 +532,10 @@ function init_ReconstructionObligationOriginalCases() {
 					});
 					continue;
 				}
+				for (const { evidence_id: evidenceId } of cases) if (!evidenceById.has(evidenceId)) diagnostics.push({
+					code: "missing-original-case",
+					detail: `Original ${caseKind} case references Evidence ${evidenceId}, which is absent from the bundle.`
+				});
 				if (!cases.some(({ evidence_id: evidenceId }) => {
 					const evidence = evidenceById.get(evidenceId);
 					return evidence !== undefined && evidenceSupportsOriginalAuthority(evidence, candidate.required_original_authority);
@@ -673,6 +685,7 @@ function init_ReconstructionObligationLedgerEvaluation() {
 					addObligationDiagnostic(diagnostics, "missing-case", `Required ${caseKind} fixture is missing.`);
 					continue;
 				}
+				for (const fixture of fixtures) for (const evidenceId of fixture.evidence_ids) if (!context.evidence.has(evidenceId)) addObligationDiagnostic(diagnostics, "missing-case", `${caseKind} fixture ${fixture.fixture_id} references Evidence ${evidenceId}, which is absent from the bundle.`);
 				if (!fixtures.some((fixture) => proofAuthoritySatisfies(fixture.authority, candidate.required_fixture_authority) && fixture.evidence_ids.every((id) => {
 					const evidence = context.evidence.get(id);
 					return evidence !== undefined && evidenceAuthoritySupportsProof(evidence, fixture.authority, {
@@ -784,7 +797,7 @@ function init_ReconstructionObligationLedgerService() {
 				});
 				return ok(createLedgerEvidence(input, ledger));
 			} catch (cause) {
-				if (cause instanceof NonCanonicalEvidenceBundleError) return err(workflowInputError(OPERATION, cause));
+				if (cause instanceof NonCanonicalEvidenceBundleError || cause instanceof DuplicateEvidenceRecordError || cause instanceof MissingReviewEvidenceError) return err(workflowInputError(OPERATION, cause));
 				if (cause instanceof z.ZodError) return err(workflowInputError(OPERATION, cause));
 				return err(new AnalysisProtocolError("Reconstruction obligation ledger generation failed", { cause }));
 			}