rea-agents 6.5.0 → 6.7.0

package/dist/cli-runtime/{javascriptExportReturnShapeProjection-Dg00g35t.js → javascriptExportReturnShapeProjection-CObOIiQ6.js}

@@ -1,7 +1,7 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { flattenSemanticReturnValue, init_javascriptSemanticReturns } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { init_jsonValue, jsonObjectSchema, jsonValueSchema } from "./errorSchemas-CTRmvMl3.js";
-import { init_javascriptApplicationEvidenceSchemas, partialApplicationCoverage, truncatedApplicationCoverage } from "./javascriptApplicationAnalysis-HgMzVMQw.js";
+import { flattenSemanticReturnValue, init_javascriptSemanticReturns } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { init_jsonValue, jsonObjectSchema, jsonValueSchema } from "./errorSchemas-Ixz_q7qt.js";
+import { init_javascriptApplicationEvidenceSchemas, partialApplicationCoverage, truncatedApplicationCoverage } from "./javascriptApplicationAnalysis-Dk6yBV8g.js";
 
 //#region dist/domain/javascript/javascriptExportReturnShapeProjection.js
 var projectJavaScriptExportReturnShapes, projectReturnSites;

package/dist/cli-runtime/{javascriptExportShapeComparisonSchemas-BYnoIqIk.js → javascriptExportShapeComparisonSchemas-DpwuBenh.js}

@@ -1,6 +1,6 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { canonicalJson, compareUnicodeCodePoints, digestCanonicalValue, digestSchema, emptyArraySchema, evidenceSchema, init_canonicalDigest, init_comparisonSemantics, init_digests, init_emptyArraySchema, init_evidence, init_unicodeCodePointOrder, prefixedDigestSchema, providerSchema } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { JAVASCRIPT_APPLICATION_NODE_KINDS, init_javascriptApplicationGraph, init_javascriptApplicationGraphSchemas, isValidatedImmutableJavaScriptApplicationGraph, javascriptApplicationGraphSchema } from "./javascriptApplicationAnalysis-HgMzVMQw.js";
+import { canonicalJson, compareUnicodeCodePoints, digestCanonicalValue, digestSchema, emptyArraySchema, evidenceSchema, init_canonicalDigest, init_comparisonSemantics, init_digests, init_emptyArraySchema, init_evidence, init_unicodeCodePointOrder, prefixedDigestSchema, providerSchema } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { JAVASCRIPT_APPLICATION_NODE_KINDS, init_javascriptApplicationGraph, init_javascriptApplicationGraphSchemas, isValidatedImmutableJavaScriptApplicationGraph, javascriptApplicationGraphSchema } from "./javascriptApplicationAnalysis-Dk6yBV8g.js";
 import { z } from "zod";
 import { posix } from "node:path";
 
@@ -16,8 +16,10 @@ function init_referenceSourcePathIdentity() {
 				canonical.set(key, canonical.has(key) ? null : path);
 			}
 			const equivalent = (path) => canonical.get(path.normalize("NFC")) ?? undefined;
+			const has = (path) => exact.has(path) || canonical.has(path.normalize("NFC"));
 			const resolve = (path) => exact.has(path) ? path : equivalent(path);
 			return {
+				has,
 				resolve,
 				resolveCandidates: (candidates) => candidates.find((path) => exact.has(path)) ?? candidates.map(equivalent).find((path) => path !== undefined),
 				resolveAncestor: (path) => {
@@ -633,7 +635,7 @@ function init_javascriptApplicationVersionComparisonSchemas() {
 			left_native_observations: z.array(evidenceSchema).default([]),
 			right_native_observations: z.array(evidenceSchema).default([])
 		}).superRefine(validateApplicationVersionIdentities);
-		candidateNodesSchema = z.tuple([nodeIdSchema$2]).rest(nodeIdSchema$2);
+		candidateNodesSchema = z.tuple([nodeIdSchema$2], nodeIdSchema$2).check(z.minLength(1));
 		exactMatchSchema = z.strictObject({
 			status: z.literal("matched"),
 			basis: z.enum([

package/dist/cli-runtime/{javascriptRuntimeReconciliation-DNjDoL3S.js → javascriptRuntimeReconciliation-C6ZgWMys.js}

@@ -1,7 +1,7 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { browserAllowedOriginsSchema, browserEndpointSchema, classifyBrowserCompleteness, compareUnicodeCodePoints, digestCanonicalValue, electronActiveObservationResultSchema, electronPageInspectionSchema, init_artifactIdentity, init_browserCompleteness, init_browserObservation, init_browserObservationSchemas, init_canonicalDigest, init_canonicalOrdering, init_electronActiveObservation, init_electronObservation, init_evidence, init_javascriptRuntimeObservation, init_localPath, init_unicodeCodePointOrder, isPathWithinRoot, javascriptRuntimeKindSchema, javascriptRuntimeObservationSchema, logicalPathEscapesRoot, normalizeJoinedLogicalPath, parseEvidence, recordedBrowserObservationEndpointSchema, uniqueSorted, webPageInspectionSchema } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { createJavaScriptApplicationEdge, createJavaScriptApplicationGraph, createJavaScriptApplicationNode, init_javascriptApplicationAnalysis, init_javascriptApplicationGraph, javascriptApplicationAnalysisResultSchema } from "./javascriptApplicationAnalysis-HgMzVMQw.js";
-import { init_javascriptRuntimeReconciliationSchemas, javascriptRuntimeReconciliationResultSchema } from "./javascriptRuntimeReconciliationSchemas-BWpGWNcI.js";
+import { browserAllowedOriginsSchema, browserEndpointSchema, classifyBrowserCompleteness, compareUnicodeCodePoints, digestCanonicalValue, electronActiveObservationResultSchema, electronPageInspectionSchema, init_artifactIdentity, init_browserCompleteness, init_browserObservation, init_browserObservationSchemas, init_canonicalDigest, init_canonicalOrdering, init_electronActiveObservation, init_electronObservation, init_evidence, init_javascriptRuntimeObservation, init_localPath, init_unicodeCodePointOrder, isPathWithinRoot, javascriptRuntimeKindSchema, javascriptRuntimeObservationSchema, logicalPathEscapesRoot, normalizeJoinedLogicalPath, parseEvidence, recordedBrowserObservationEndpointSchema, uniqueSorted, webPageInspectionSchema } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { createJavaScriptApplicationEdge, createJavaScriptApplicationGraph, createJavaScriptApplicationNode, init_javascriptApplicationAnalysis, init_javascriptApplicationGraph, javascriptApplicationAnalysisResultSchema } from "./javascriptApplicationAnalysis-Dk6yBV8g.js";
+import { init_javascriptRuntimeReconciliationSchemas, javascriptRuntimeReconciliationResultSchema } from "./javascriptRuntimeReconciliationSchemas-D6tZKUQs.js";
 import { z } from "zod";
 import { isAbsolute, posix, win32 } from "node:path";
 
@@ -224,9 +224,11 @@ function init_javascriptRuntimeLoadState() {
 			const nodes = layer.graph.nodes.filter(isLoadStateNode);
 			const direct = new Map();
 			const ambiguous = new Set();
+			const incomplete = new Set();
 			for (const match of matches) if (match.status === "matched" && match.static_layer_id === layer.layerId && match.static_node_id !== null) append(direct, match.static_node_id, match.runtime_node_id);
-			else if (match.status === "ambiguous") {
-				for (const candidate of match.candidate_static_nodes) if (candidate.static_layer_id === layer.layerId) ambiguous.add(candidate.static_node_id);
+			else if (match.status === "ambiguous" || match.status === "unknown") {
+				const uncertain = match.status === "ambiguous" ? ambiguous : incomplete;
+				for (const candidate of match.candidate_static_nodes) if (candidate.static_layer_id === layer.layerId) uncertain.add(candidate.static_node_id);
 			}
 			const resident = residentNodes(layer, new Set(direct.keys()));
 			const runtimeScope = createStaticRuntimeScope(layer, runtimeEntities);
@@ -244,10 +246,10 @@ function init_javascriptRuntimeLoadState() {
 					runtimeNodeIds: [],
 					reason: "containing-asset-was-loaded"
 				});
-				if (ambiguous.has(node.node_id)) return state(layer, node, {
+				if (incomplete.has(node.node_id) || ambiguous.has(node.node_id)) return state(layer, node, {
 					status: "unknown",
 					runtimeNodeIds: [],
-					reason: "ambiguous-runtime-candidate"
+					reason: incomplete.has(node.node_id) ? "static-or-runtime-coverage-incomplete" : "ambiguous-runtime-candidate"
 				});
 				const nodeWithinScope = staticNodeWithinRuntimeScope(node, runtimeScope);
 				if (layerComplete && nodeWithinScope) return state(layer, node, {
@@ -425,7 +427,7 @@ function init_javascriptRuntimeReconciliationGraph() {
 
 //#endregion
 //#region dist/domain/javascript/javascriptRuntimeReconciliationMatching.js
-var reconcileRuntimeEntities, reconcileEntity, candidatesWithLocation, indexCandidates, appendIndex, categoryDigestKey, layerCategoryPathKey, matched, unresolved, createItem, reconciliationEvidence, strongestLocationBasis, candidateKey, uniqueCandidateReferences;
+var reconcileRuntimeEntities, reconcileEntity, reconcileCapturedSource, candidatesWithLocation, indexCandidates, appendIndex, categoryDigestKey, layerCategoryPathKey, matched, unresolved, createItem, reconciliationEvidence, strongestLocationBasis, candidateKey, uniqueCandidateReferences;
 function init_javascriptRuntimeReconciliationMatching() {
 	return (init_javascriptRuntimeReconciliationMatching = __esmMin((() => {
 		init_javascriptApplicationGraph();
@@ -451,48 +453,7 @@ function init_javascriptRuntimeReconciliationMatching() {
 				candidates: []
 			});
 			const locations = candidatesWithLocation(entity, index, layers);
-			if (entity.sourceSha256 !== null) {
-				const content = index.byCategoryDigest.get(categoryDigestKey(entity.staticKind, entity.sourceSha256)) ?? [];
-				const locatedKeys = new Set(locations.map(({ candidate }) => candidateKey(candidate)));
-				const combined = content.filter((candidate) => locatedKeys.has(candidateKey(candidate)));
-				const combinedCandidate = combined.at(0);
-				if (combined.length === 1 && combinedCandidate !== undefined) return matched(entity, combinedCandidate, {
-					basis: "content-and-location",
-					confidence: "high",
-					reason: "content-and-location-match"
-				});
-				const contentCandidate = content.at(0);
-				if (content.length === 1 && contentCandidate !== undefined) {
-					const candidate = contentCandidate;
-					const digestBasis = candidate.digests.find(({ sha256 }) => sha256 === entity.sourceSha256)?.basis;
-					return matched(entity, candidate, {
-						basis: digestBasis ?? "content-sha256",
-						confidence: "high",
-						reason: "unique-content-match"
-					});
-				}
-				if (content.length > 1) return unresolved(entity, {
-					status: "ambiguous",
-					basis: "none",
-					confidence: "unknown",
-					reason: "ambiguous-static-candidates",
-					candidates: content
-				});
-				if (locations.length > 0) return unresolved(entity, {
-					status: "unmatched",
-					basis: strongestLocationBasis(locations),
-					confidence: "high",
-					reason: "captured-content-disagrees-with-static-location",
-					candidates: locations.map(({ candidate }) => candidate)
-				});
-				return unresolved(entity, {
-					status: "unmatched",
-					basis: "none",
-					confidence: "high",
-					reason: "no-static-content-match",
-					candidates: []
-				});
-			}
+			if (entity.sourceSha256 !== null) return reconcileCapturedSource(entity, entity.sourceSha256, locations, index);
 			const location = locations.at(0);
 			if (locations.length === 1 && location !== undefined) {
 				const located = location;
@@ -518,6 +479,39 @@ function init_javascriptRuntimeReconciliationMatching() {
 				candidates: []
 			});
 		};
+		reconcileCapturedSource = (entity, sourceSha256, locations, index) => {
+			const content = locations.length > 0 ? locations.map(({ candidate }) => candidate).filter(({ digests }) => digests.some(({ sha256 }) => sha256 === sourceSha256)) : index.byCategoryDigest.get(categoryDigestKey(entity.staticKind, sourceSha256)) ?? [];
+			const candidate = content.at(0);
+			if (content.length === 1 && candidate !== undefined) return matched(entity, candidate, {
+				basis: locations.length > 0 ? "content-and-location" : candidate.digests.find(({ sha256 }) => sha256 === sourceSha256)?.basis ?? "content-sha256",
+				confidence: "high",
+				reason: locations.length > 0 ? "content-and-location-match" : "unique-content-match"
+			});
+			if (content.length > 1) return unresolved(entity, {
+				status: "ambiguous",
+				basis: locations.length > 0 ? "content-and-location" : "none",
+				confidence: "unknown",
+				reason: "ambiguous-static-candidates",
+				candidates: content
+			});
+			if (locations.length > 0) {
+				const digestUnavailable = locations.some(({ candidate: { digests } }) => digests.length === 0);
+				return unresolved(entity, {
+					status: digestUnavailable ? "unknown" : "unmatched",
+					basis: strongestLocationBasis(locations),
+					confidence: digestUnavailable ? "unknown" : "high",
+					reason: digestUnavailable ? "static-or-runtime-coverage-incomplete" : "captured-content-disagrees-with-static-location",
+					candidates: locations.map(({ candidate: located }) => located)
+				});
+			}
+			return unresolved(entity, {
+				status: "unmatched",
+				basis: "none",
+				confidence: "high",
+				reason: "no-static-content-match",
+				candidates: []
+			});
+		};
 		candidatesWithLocation = (entity, index, layers) => {
 			const located = new Map();
 			for (const layer of layers) for (const mapping of mappedRuntimePaths(layer, entity)) for (const candidate of [...index.byLayerCategoryPath.get(layerCategoryPathKey(layer.layerId, entity.staticKind, mapping.path)) ?? [], ...mapping.fileStyle === null || mapping.nativeRelativePath === null ? [] : (index.byNativeDeclarationPath.get(`${mapping.fileStyle}\0${layerCategoryPathKey(layer.layerId, entity.staticKind, mapping.nativeRelativePath)}`) ?? []).filter(({ sourcePath }) => mapping.artifactPrefix === "" || sourcePath !== null && sourcePath.startsWith(`${mapping.artifactPrefix}/`)).map(({ candidate }) => candidate)]) {
@@ -828,7 +822,7 @@ function init_javascriptRuntimeReconciliationActive() {
 
 //#endregion
 //#region dist/domain/javascript/javascriptRuntimeReconciliationCaptureParsing.js
-var parseRuntimeCaptures, parseRuntimeCapture, parseBrowserCapture, parseElectronCapture, parseV8Capture, assertV8RuntimeParameters, normalizeV8Inspection, runtimeLocation, excludedV8Scripts, assertRuntimeParameters, scriptsComplete;
+var parseRuntimeCaptures, parseRuntimeCapture, parseBrowserCapture, parseElectronCapture, parseV8Capture, assertV8RuntimeParameters, normalizeV8Inspection, runtimeLocation, v8ScriptExclusions, assertRuntimeParameters, scriptsComplete;
 function init_javascriptRuntimeReconciliationCaptureParsing() {
 	return (init_javascriptRuntimeReconciliationCaptureParsing = __esmMin((() => {
 		init_browserObservation();
@@ -971,7 +965,7 @@ function init_javascriptRuntimeReconciliationCaptureParsing() {
 			})) },
 			workers: [],
 			completeness: classifyBrowserCompleteness({
-				policyFilteredSections: new Set(excludedV8Scripts(result) > 0 ? ["scripts"] : []),
+				policyFilteredSections: new Set(result.scripts.excluded.unsupported_location > 0 ? ["scripts"] : []),
 				attachLimitedSections: new Set([
 					"frames",
 					"scripts",
@@ -982,13 +976,10 @@ function init_javascriptRuntimeReconciliationCaptureParsing() {
 				unavailableSections: new Set([
 					"frames",
 					"script_sources",
-					"workers"
+					"workers",
+					...result.scripts.excluded.invalid_protocol_value > 0 ? ["scripts"] : []
 				]),
-				excluded: excludedV8Scripts(result) === 0 ? [] : [{
-					section: "scripts",
-					reason: "out_of_target_scope",
-					count: excludedV8Scripts(result)
-				}],
+				excluded: v8ScriptExclusions(result),
 				droppedEvents: {
 					scripts: result.capture.events_dropped,
 					network_requests: 0,
@@ -1006,7 +997,18 @@ function init_javascriptRuntimeReconciliationCaptureParsing() {
 			if (location.kind === "url") return { url: location.sanitized_url };
 			return { url: location.specifier };
 		};
-		excludedV8Scripts = (result) => Object.values(result.scripts.excluded).reduce((total, count) => total + count, 0);
+		v8ScriptExclusions = (result) => {
+			const { unsupported_location, invalid_protocol_value } = result.scripts.excluded;
+			return [...unsupported_location > 0 ? [{
+				section: "scripts",
+				reason: "out_of_target_scope",
+				count: unsupported_location
+			}] : [], ...invalid_protocol_value > 0 ? [{
+				section: "scripts",
+				reason: "invalid_protocol_value",
+				count: invalid_protocol_value
+			}] : []];
+		};
 		assertRuntimeParameters = (evidence, expected, path) => {
 			const common = {
 				target_id: z.string().trim().min(1),

package/dist/cli-runtime/{javascriptRuntimeReconciliationSchemas-BWpGWNcI.js → javascriptRuntimeReconciliationSchemas-D6tZKUQs.js}

@@ -1,6 +1,6 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { compareUnicodeCodePoints, digestSchema, evidenceSchema, init_artifactIdentity, init_digests, init_evidence, init_javascriptRuntimeObservation, init_unicodeCodePointOrder, init_urlComponents, javascriptRuntimeUnresolvedLocationSchema, logicalPathEscapesRoot, prefixedDigestSchema, urlDeclaresQueryOrFragment } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { init_javascriptApplicationGraph, javascriptApplicationGraphSchema } from "./javascriptApplicationAnalysis-HgMzVMQw.js";
+import { compareUnicodeCodePoints, digestSchema, evidenceSchema, init_artifactIdentity, init_digests, init_evidence, init_javascriptRuntimeObservation, init_unicodeCodePointOrder, init_urlComponents, javascriptRuntimeUnresolvedLocationSchema, logicalPathEscapesRoot, prefixedDigestSchema, urlDeclaresQueryOrFragment } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { init_javascriptApplicationGraph, javascriptApplicationGraphSchema } from "./javascriptApplicationAnalysis-Dk6yBV8g.js";
 import { z } from "zod";
 
 //#region dist/domain/javascript/javascriptRuntimeReconciliationSchemas.js

package/dist/cli-runtime/{javascriptSemanticTraceSchemas-BTCNcvbc.js → javascriptSemanticTraceSchemas-C7m0b6_w.js}

@@ -1,6 +1,6 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { digestSchema, evidenceSchema, init_digests, init_evidence, prefixedDigestSchema } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { JAVASCRIPT_SEMANTIC_NODE_KINDS, JAVASCRIPT_SEMANTIC_RELATIONS, init_javascriptSemanticGraphSchemas, javaScriptSemanticEvidenceContextSchema, javaScriptSemanticNodeSchema, javaScriptSemanticRelationSchema, javaScriptSemanticUnknownSchema } from "./javascriptApplicationAnalysis-HgMzVMQw.js";
+import { digestSchema, evidenceSchema, init_digests, init_evidence, prefixedDigestSchema } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { JAVASCRIPT_SEMANTIC_NODE_KINDS, JAVASCRIPT_SEMANTIC_RELATIONS, init_javascriptSemanticGraphSchemas, javaScriptSemanticEvidenceContextSchema, javaScriptSemanticNodeSchema, javaScriptSemanticRelationSchema, javaScriptSemanticUnknownSchema } from "./javascriptApplicationAnalysis-Dk6yBV8g.js";
 import { z } from "zod";
 
 //#region dist/domain/javascript/javascriptSemanticQuerySchemas.js
@@ -36,7 +36,7 @@ function init_javascriptSemanticQuerySchemas() {
 			}),
 			z.strictObject({
 				kind: z.literal("property"),
-				name: z.string().min(1)
+				name: z.string()
 			}),
 			z.strictObject({
 				kind: z.literal("endpoint"),

package/dist/cli-runtime/{lipo-DSWP6fv-.js → lipo-DPQ6qurH.js}

@@ -1,12 +1,11 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { err, init_machoCpuIdentity, init_result, machoCpuSubtypeBase, ok } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { init_snapshotEnvironment, snapshotEnvironment } from "./snapshotEnvironment-D_tWyOub.js";
-import { DarwinProcessOwnershipInspectionError, boundedUtf8Text, init_DarwinProcessRunTokenReader, init_boundedUtf8Text } from "./ProcessOwnership-DXC5-UWt.js";
-import { OwnedCommandFailure, init_OwnedCommand, runOwnedCommand } from "./OwnedCommand-Cj9GhmPR.js";
+import { err, init_machoCpuIdentity, init_result, machoCpuSubtypeBase, ok } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { DarwinProcessOwnershipInspectionError, boundedUtf8Text, init_DarwinProcessRunTokenReader, init_boundedUtf8Text } from "./ProcessOwnershipObservation-C006iCtZ.js";
+import { OwnedCommandFailure, init_OwnedCommand, init_snapshotEnvironment, runOwnedCommand, snapshotEnvironment } from "./snapshotEnvironment-Yvx5qwsl.js";
 import { z } from "zod";
 import { createHash, randomUUID } from "node:crypto";
-import { realpath } from "node:fs/promises";
 import { createReadStream } from "node:fs";
+import { realpath } from "node:fs/promises";
 
 //#region dist/native/CommandRunner.js
 var NATIVE_COMMAND_TIMEOUT_MS, NATIVE_COMMAND_OUTPUT_BUDGET_BYTES, NATIVE_FAILURE_DIAGNOSTIC_BYTES, NativeCommandFailure, XcrunCommandRunner, commandProcessResources, commandCleanupFailure, ALLOWED_TOOLS, resolveXcrunTool, failureCapture, captureProcess, processFailureReason, processCaptureFromSnapshot, hashFile;
@@ -20,7 +19,7 @@ function init_CommandRunner() {
 		NATIVE_COMMAND_TIMEOUT_MS = 6e4;
 		NATIVE_COMMAND_OUTPUT_BUDGET_BYTES = 64 * 1024 * 1024;
 		NATIVE_FAILURE_DIAGNOSTIC_BYTES = 64 * 1024;
-		NativeCommandFailure = class extends Error {
+		NativeCommandFailure = class NativeCommandFailure extends Error {
 			tool;
 			reason;
 			exitCode;
@@ -30,6 +29,7 @@ function init_CommandRunner() {
 			cleanupOwner;
 			cleanupFailures;
 			detail;
+			preparationFailure;
 			constructor(tool, reason, exitCode = null, options, capture = null, cleanupFailure = null, cleanupResources = []) {
 				super(`Native command ${tool} failed: ${reason}`, options);
 				this.tool = tool;
@@ -40,7 +40,8 @@ function init_CommandRunner() {
 				this.cleanupResources = cleanupResources;
 				this.cleanupOwner = options?.cleanupOwner;
 				this.cleanupFailures = options?.cleanupFailures ?? [];
-				this.detail = options?.detail ?? null;
+				this.preparationFailure = options?.cause instanceof DarwinProcessOwnershipInspectionError ? options.cause : options?.cause instanceof NativeCommandFailure || options?.cause instanceof OwnedCommandFailure ? options.cause.preparationFailure : undefined;
+				this.detail = options?.detail ?? this.preparationFailure?.message ?? null;
 			}
 		};
 		XcrunCommandRunner = class {
@@ -200,10 +201,7 @@ function init_CommandRunner() {
 						...cause.cleanupOwner === undefined ? {} : { cleanupOwner: cause.cleanupOwner }
 					}, capture, cause.cleanupFailure, cause.resources));
 				}
-				return err(new NativeCommandFailure(tool, "io", null, {
-					cause,
-					...cause instanceof DarwinProcessOwnershipInspectionError ? { detail: cause.message } : {}
-				}));
+				return err(new NativeCommandFailure(tool, cause instanceof DarwinProcessOwnershipInspectionError && cause.cancellation !== undefined ? "cancelled" : "io", null, { cause }));
 			}
 		};
 		processFailureReason = (capture) => capture !== null && (capture.signal !== null || capture.exitCode !== null && capture.exitCode !== 0) ? "nonzero-exit" : "io";

package/dist/cli-runtime/{logger-CQQCI4a2.js → logger-BuDJ9xxO.js}

@@ -1,6 +1,6 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { err, init_result, ok } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { ConfigurationError, init_configurationErrors } from "./errorSchemas-CTRmvMl3.js";
+import { err, init_result, ok } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { ConfigurationError, init_configurationErrors } from "./errorSchemas-Ixz_q7qt.js";
 import { z } from "zod";
 import pino from "pino";
 

package/dist/cli-runtime/{machoContainer-C8BIkkq3.js → machoContainer-Cy98bkFm.js}

@@ -1,9 +1,188 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
 
+//#region dist/domain/apple/jvmClassFile.js
+var ClassFileCursor, readConstantPool, readConstant, poolHasTag, hasValidPoolReferences, validMethodHandle, readAttributes, readMembers, isJvmClassFile;
+function init_jvmClassFile() {
+	return (init_jvmClassFile = __esmMin((() => {
+		ClassFileCursor = class {
+			bytes;
+			offset = 0;
+			view;
+			constructor(bytes) {
+				this.bytes = bytes;
+				this.view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+			}
+			get atEnd() {
+				return this.offset === this.bytes.byteLength;
+			}
+			u1() {
+				if (!this.has(1)) return null;
+				return this.bytes[this.offset++];
+			}
+			u2() {
+				if (!this.has(2)) return null;
+				const value = this.view.getUint16(this.offset, false);
+				this.offset += 2;
+				return value;
+			}
+			u4() {
+				if (!this.has(4)) return null;
+				const value = this.view.getUint32(this.offset, false);
+				this.offset += 4;
+				return value;
+			}
+			skip(length) {
+				if (!Number.isSafeInteger(length) || length < 0 || !this.has(length)) return false;
+				this.offset += length;
+				return true;
+			}
+			has(length) {
+				return this.offset <= this.bytes.byteLength - length;
+			}
+		};
+		readConstantPool = (cursor, count) => {
+			const pool = {
+				tags: Array.from({ length: count }, () => null),
+				first: Array.from({ length: count }, () => null),
+				second: Array.from({ length: count }, () => null)
+			};
+			for (let index = 1; index < count; index += 1) {
+				const tag = cursor.u1();
+				if (tag === null) return null;
+				if (!readConstant(cursor, tag, index, pool)) return null;
+				if (tag === 5 || tag === 6) index += 1;
+			}
+			return pool;
+		};
+		readConstant = (cursor, tag, index, pool) => {
+			switch (tag) {
+				case 1: {
+					const length = cursor.u2();
+					if (length === null || !cursor.skip(length)) return false;
+					break;
+				}
+				case 3:
+				case 4:
+					if (cursor.u4() === null) return false;
+					break;
+				case 5:
+				case 6:
+					if (index + 1 >= pool.tags.length || !cursor.skip(8)) return false;
+					break;
+				case 7:
+				case 8:
+				case 16:
+				case 19:
+				case 20:
+					pool.first[index] = cursor.u2();
+					if (pool.first[index] === null) return false;
+					break;
+				case 9:
+				case 10:
+				case 11:
+				case 12:
+				case 17:
+				case 18:
+					pool.first[index] = cursor.u2();
+					pool.second[index] = cursor.u2();
+					if (pool.first[index] === null || pool.second[index] === null) return false;
+					break;
+				case 15:
+					pool.first[index] = cursor.u1();
+					pool.second[index] = cursor.u2();
+					if (pool.first[index] === null || pool.second[index] === null) return false;
+					break;
+				default: return false;
+			}
+			pool.tags[index] = tag;
+			return true;
+		};
+		poolHasTag = (pool, index, ...tags) => Number.isInteger(index) && index > 0 && tags.includes(pool.tags[index] ?? -1);
+		hasValidPoolReferences = (pool, major) => {
+			for (let index = 1; index < pool.tags.length; index += 1) {
+				const tag = pool.tags[index] ?? null;
+				const first = pool.first[index] ?? null;
+				const second = pool.second[index] ?? null;
+				if ([
+					7,
+					8,
+					16,
+					19,
+					20
+				].includes(tag ?? -1)) {
+					if (first === null || !poolHasTag(pool, first, 1)) return false;
+					if (tag === 16 && major < 51 || (tag === 19 || tag === 20) && major < 53) return false;
+				} else if ([
+					9,
+					10,
+					11
+				].includes(tag ?? -1)) {
+					if (first === null || second === null || !poolHasTag(pool, first, 7) || !poolHasTag(pool, second, 12)) return false;
+				} else if (tag === 12) {
+					if (first === null || second === null || !poolHasTag(pool, first, 1) || !poolHasTag(pool, second, 1)) return false;
+				} else if (tag === 15 && !validMethodHandle(pool, first, second, major)) {
+					return false;
+				} else if (tag === 17 || tag === 18) {
+					if (second === null || !poolHasTag(pool, second, 12) || major < (tag === 17 ? 55 : 51)) return false;
+				}
+			}
+			return true;
+		};
+		validMethodHandle = (pool, kind, reference, major) => {
+			if (kind === null || reference === null || kind < 1 || kind > 9 || major < 51) return false;
+			if (kind <= 4) return poolHasTag(pool, reference, 9);
+			if (kind === 5 || kind === 8) return poolHasTag(pool, reference, 10);
+			if (kind === 6 || kind === 7) return poolHasTag(pool, reference, ...major >= 52 ? [10, 11] : [10]);
+			return poolHasTag(pool, reference, 11);
+		};
+		readAttributes = (cursor, pool, count) => {
+			for (let index = 0; index < count; index += 1) {
+				const name = cursor.u2();
+				const length = cursor.u4();
+				if (name === null || !poolHasTag(pool, name, 1) || length === null || !cursor.skip(length)) return false;
+			}
+			return true;
+		};
+		readMembers = (cursor, pool) => {
+			const count = cursor.u2();
+			if (count === null) return false;
+			for (let index = 0; index < count; index += 1) {
+				if (cursor.u2() === null) return false;
+				const name = cursor.u2();
+				const descriptor = cursor.u2();
+				const attributes = cursor.u2();
+				if (name === null || descriptor === null || !poolHasTag(pool, name, 1) || !poolHasTag(pool, descriptor, 1) || attributes === null || !readAttributes(cursor, pool, attributes)) return false;
+			}
+			return true;
+		};
+		isJvmClassFile = (bytes) => {
+			const cursor = new ClassFileCursor(bytes);
+			if (cursor.u4() !== 3405691582) return false;
+			const minor = cursor.u2();
+			const major = cursor.u2();
+			const poolCount = cursor.u2();
+			if (minor === null || major === null || major < 45 || poolCount === null || poolCount === 0) return false;
+			const pool = readConstantPool(cursor, poolCount);
+			if (pool === null || !hasValidPoolReferences(pool, major)) return false;
+			if (cursor.u2() === null) return false;
+			const thisClass = cursor.u2();
+			const superClass = cursor.u2();
+			if (thisClass === null || !poolHasTag(pool, thisClass, 7) || superClass === null || superClass !== 0 && !poolHasTag(pool, superClass, 7)) return false;
+			const interfaces = cursor.u2();
+			if (interfaces === null || !cursor.skip(interfaces * 2)) return false;
+			if (!readMembers(cursor, pool) || !readMembers(cursor, pool)) return false;
+			const attributes = cursor.u2();
+			return attributes !== null && readAttributes(cursor, pool, attributes) && cursor.atEnd;
+		};
+	})))();
+}
+
+//#endregion
 //#region dist/domain/apple/machoContainer.js
 var FAT_MAGIC, FAT_MAGIC_64, FAT_CIGAM, FAT_CIGAM_64, MAX_FAT_ARCHITECTURES, KNOWN_MACHO_CPU_TYPES, MACHO_HEADER_MAGICS, readFatContainerHeader, classifyFatContainerIdentity, readFatSliceDeclarations, validateFatSlice, inspectFatSliceRange, validateFatSliceIdentity, safeNumber;
 function init_machoContainer() {
 	return (init_machoContainer = __esmMin((() => {
+		init_jvmClassFile();
 		FAT_MAGIC = 3405691582;
 		FAT_MAGIC_64 = 3405691583;
 		FAT_CIGAM = 3199925962;
@@ -38,6 +217,7 @@ function init_machoContainer() {
 				state: "malformed",
 				reason: "FAT file size is invalid or contradicts retained bytes"
 			};
+			if (bytes.byteLength === fileSize && isJvmClassFile(bytes)) return { state: "not-fat" };
 			if (bytes.byteLength < 8) {
 				return fileSize < 8 ? {
 					state: "malformed",

package/dist/cli-runtime/{managedApplicationGraph-B08jb3jq.js → managedApplicationGraph-BazVqpJv.js}

@@ -1,6 +1,6 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { digestSchema, evidenceSchema, init_digests, init_evidence, parseEvidence, prefixedDigestSchema } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { createJavaScriptApplicationEdge, createJavaScriptApplicationGraph, createJavaScriptApplicationNode, init_javascriptApplicationGraph, javascriptApplicationGraphSchema } from "./javascriptApplicationAnalysis-HgMzVMQw.js";
+import { digestSchema, evidenceSchema, init_digests, init_evidence, parseEvidence, prefixedDigestSchema } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { createJavaScriptApplicationEdge, createJavaScriptApplicationGraph, createJavaScriptApplicationNode, init_javascriptApplicationGraph, javascriptApplicationGraphSchema } from "./javascriptApplicationAnalysis-Dk6yBV8g.js";
 import { z } from "zod";
 import { basename } from "node:path";
 import { createHash } from "node:crypto";
@@ -83,6 +83,7 @@ function init_managedArtifact() {
 		managedSignatureSchema = z.object({
 			raw_length: z.number().int().min(0),
 			raw_sha256: digestSchema,
+			resolved_sha256: digestSchema.nullable().default(null).describe("SHA-256 of the raw signature with each TypeDef or TypeRef operand replaced by that type's namespace-qualified name; equals raw_sha256 when the signature names no types. Unlike raw_sha256 it does not depend on build-local metadata rows. Null when the signature could not be decoded or names a type REA could not resolve, such as a TypeSpec."),
 			kind: z.enum([
 				"method",
 				"field",
@@ -108,8 +109,10 @@ function init_managedArtifact() {
 			namespace: z.string(),
 			name: z.string(),
 			full_name: z.string(),
+			name_sha256: digestSchema.nullable().default(null).describe("Framed nominal namespace/name/enclosing-name digest, independent of build-local rows. Null for historical Evidence or unresolved nesting; defining assemblies and CLR runtime identity are not established."),
 			flags: z.number().int().min(0).max(4294967295),
 			extends_token: tokenSchema.nullable(),
+			enclosing_type_token: tokenSchema.nullable().default(null).describe("Observed enclosing TypeDef from NestedClass; null when no enclosing entry was available, which alone does not establish top-level identity."),
 			field_list: z.object({
 				first_row: z.number().int().min(1).nullable(),
 				last_row: z.number().int().min(0).nullable(),
@@ -461,6 +464,7 @@ function init_managedArtifact() {
 			limitations: z.array(z.string())
 		});
 		managedMemberInspectionSchema = z.object({
+			signature_resolution: z.literal("type-names-v1").nullable().default(null).describe("Signature type-name resolution was examined, including unresolved operands; null means historical Evidence without this attestation."),
 			artifact: z.object({
 				path: z.string().min(1),
 				sha256: digestSchema,
@@ -484,6 +488,7 @@ function init_managedArtifact() {
 				requires_mvid: cliMetadataGuidSchema.nullable()
 			}),
 			types: z.array(managedTypeSchema),
+			nesting_read: z.boolean().nullable().default(null).describe("Whether all NestedClass rows were read and valid. Null for historical Evidence; false means current nesting is incomplete. Individual name digests can remain unresolved for missing, cyclic or over-deep enclosing chains."),
 			exported_types: z.array(managedExportedTypeSchema).nullable().default(null),
 			fields: z.array(managedFieldSchema),
 			methods: z.array(managedMethodSchema),
@@ -632,12 +637,13 @@ function init_managedApplicationGraphCoverage() {
 
 //#endregion
 //#region dist/domain/managed/managedApplicationGraphNodes.js
-var addArtifactNode, addArtifactIdentityNodes, selectModuleSource, addMemberNodes, typeNode, methodNode, fieldNode, addBoundaryNodes, pinvokeNode, nativeImplementationNode, addContainsEdge, artifactLocalIdentity, sourceManagedEvidence, projectedManagedEvidence, pinvokeAssociationEvidence, createManagedEvidence, graphArtifactPath;
+var metadataLabel, addArtifactNode, addArtifactIdentityNodes, selectModuleSource, addMemberNodes, typeNode, methodNode, fieldNode, addBoundaryNodes, pinvokeNode, nativeImplementationNode, addContainsEdge, artifactLocalIdentity, sourceManagedEvidence, projectedManagedEvidence, pinvokeAssociationEvidence, createManagedEvidence, graphArtifactPath;
 function init_managedApplicationGraphNodes() {
 	return (init_managedApplicationGraphNodes = __esmMin((() => {
 		init_javascriptApplicationGraph();
 		init_managedApplicationGraphCoverage();
 		init_managedInspectionEvidence();
+		metadataLabel = (name) => name === "" ? null : name;
 		addArtifactNode = (state) => {
 			const node = createJavaScriptApplicationNode({
 				kind: "artifact",
@@ -667,7 +673,7 @@ function init_managedApplicationGraphNodes() {
 					kind: "managed-assembly",
 					identity: artifactLocalIdentity(state.artifactSha256, "managed-assembly", assemblyFacts.token),
 					observations: [{
-						label: assemblyFacts.name,
+						label: metadataLabel(assemblyFacts.name),
 						properties: {
 							name: assemblyFacts.name,
 							version: assemblyFacts.version,
@@ -691,7 +697,7 @@ function init_managedApplicationGraphNodes() {
 					kind: "managed-module",
 					identity: artifactLocalIdentity(state.artifactSha256, "managed-module", module.mvid?.toLowerCase() ?? module.token),
 					observations: [{
-						label: module.name,
+						label: metadataLabel(module.name),
 						properties: {
 							name: module.name,
 							mvid: module.mvid,
@@ -771,7 +777,7 @@ function init_managedApplicationGraphNodes() {
 			kind: "managed-type",
 			identity: artifactLocalIdentity(state.artifactSha256, "managed-type-token", type.token),
 			observations: [{
-				label: type.full_name,
+				label: metadataLabel(type.full_name),
 				properties: {
 					token: type.token,
 					namespace: type.namespace,
@@ -787,7 +793,7 @@ function init_managedApplicationGraphNodes() {
 			kind: "managed-method",
 			identity: artifactLocalIdentity(state.artifactSha256, "managed-method-token", method.token),
 			observations: [{
-				label: method.declaring_type === null ? method.name : `${method.declaring_type}.${method.name}`,
+				label: metadataLabel(method.declaring_type === null ? method.name : `${method.declaring_type}.${method.name}`),
 				properties: {
 					token: method.token,
 					declaring_type_token: method.declaring_type_token,
@@ -807,7 +813,7 @@ function init_managedApplicationGraphNodes() {
 			kind: "managed-field",
 			identity: artifactLocalIdentity(state.artifactSha256, "managed-field-token", field.token),
 			observations: [{
-				label: field.declaring_type === null ? field.name : `${field.declaring_type}.${field.name}`,
+				label: metadataLabel(field.declaring_type === null ? field.name : `${field.declaring_type}.${field.name}`),
 				properties: {
 					token: field.token,
 					declaring_type_token: field.declaring_type_token,
@@ -861,7 +867,7 @@ function init_managedApplicationGraphNodes() {
 			kind: "managed-pinvoke-import",
 			identity: artifactLocalIdentity(state.artifactSha256, "managed-pinvoke-token", pinvoke.token),
 			observations: [{
-				label: pinvoke.import_name,
+				label: metadataLabel(pinvoke.import_name),
 				properties: {
 					token: pinvoke.token,
 					member_token: pinvoke.member_token,
@@ -879,7 +885,7 @@ function init_managedApplicationGraphNodes() {
 			kind: "managed-native-implementation",
 			identity: artifactLocalIdentity(state.artifactSha256, "managed-native-implementation-token", implementation.token),
 			observations: [{
-				label: implementation.name,
+				label: metadataLabel(implementation.name),
 				properties: {
 					token: implementation.token,
 					name: implementation.name,