rea-agents 6.5.0 → 6.7.0

package/dist/cli-runtime/{toolContracts-D2FOG_Nb.js → toolContracts-CJzEyZ38.js}

@@ -1,16 +1,16 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { analysisProviderSelectorSchema, analyzeJavaScriptSemantics, androidApplicationProjectionInputSchema, androidApplicationProjectionResultSchema, appleApplicationProjectionInputSchema, appleApplicationProjectionResultSchema, browserScenarioCaptureSchema, browserTargetListSchema, captureWebScreenshotInputSchema, compareWebScreenshotsInputSchema, createEvidence, createWebTextArtifact, digestCanonicalValue, electronActiveObservationInputSchema, electronActiveObservationResultSchema, electronPageInspectionSchema, electronTargetListSchema, evidenceResultOf, evidenceSchema, functionComparisonInputSchema, harmonyApplicationProjectionInputSchema, harmonyApplicationProjectionResultSchema, init_androidApplication, init_appleApplication, init_browserObservation, init_browserObservationSchemas, init_browserScenarioCapture, init_canonicalDigest, init_electronActiveObservation, init_electronObservation, init_evidence, init_functionComparisonSchemas, init_harmonyApplication, init_javascriptRuntimeObservation, init_javascriptSemanticAnalysis, init_localPath, init_processScenario, init_providerSelection, init_reconstructionCoverage, init_reconstructionCoverageInput, init_reconstructionObligationLedgerSchemas, init_residualUnknown, init_toolOutputSchemaPrimitives, init_webContentArtifact, init_webScreenshot, inspectElectronPageInputSchema, inspectWebPageInputSchema, javascriptRuntimeObservationSchema, javascriptRuntimeTargetListSchema, listBrowserTargetsInputSchema, listElectronTargetsInputSchema, listJavaScriptRuntimeTargetsInputSchema, localPathStringSchema, observeJavaScriptRuntimeInputSchema, processScenarioSchema, reconstructionClosureResultSchema, reconstructionCoverageEvaluationInputSchema, reconstructionObligationLedgerInputSchema, reconstructionObligationLedgerSchema, recordUnknownInputSchema, requireOutputSchema, updateUnknownInputSchema, webPageInspectionSchema, webScreenshotDiffSchema, webScreenshotSchema } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { CUTTER_TOOL_CONTRACTS, EVM_TOOL_CONTRACTS, FRIDA_TOOL_CONTRACTS, NATIVE_TOOL_CONTRACTS, WASM_TOOL_CONTRACTS, adbInputSchemas, adbResultSchemas, addressContextInputSchema, analyzeWebBundleInputSchema, apktoolInputSchemas, apktoolResultSchemas, browserCaptureComparisonInputSchema, browserCaptureComparisonSchema, browserScenarioInputSchema, decodeSignalRecordingInputSchema, discoverWebMcpToolsInputSchema, evidenceInputSchema, exportWebScriptsInputSchema, firmwareInputSchemas, firmwareResultSchemas, getEvidenceBundleInputSchema, goBinarySchema, importEvidenceBundleInputSchema, init_adbDeviceAnalysis, init_apktoolResourceAnalysis, init_browserCaptureComparison, init_browserScenario, init_browserSession, init_cutterToolContracts, init_evidenceInputContracts, init_evmToolContracts, init_firmwareAnalysis, init_fridaToolContracts, init_goBinary, init_javascriptRecovery, init_jebAnalysis, init_nativeToolContracts, init_packetCapture, init_packetFields, init_peResources, init_recordedCrash, init_reverseEngineering, init_rustBinary, init_sessionToolSchemas, init_signalDecoders, init_signalRecording, init_sqliteDatabase, init_wasmToolContracts, init_webBundleAnalysis, init_webEventListeners, init_webExecution, init_webMcpDiscovery, init_webModuleTrace, init_webScriptExport, init_webSourceLocation, inspectGoBinaryInputSchema, inspectPacketCaptureInputSchema, inspectPacketFieldsInputSchema, inspectPeResourcesInputSchema, inspectRecordedCrashInputSchema, inspectRustBinaryInputSchema, inspectSignalDecodersInputSchema, inspectSqliteDatabaseInputSchema, inspectWebEventListenersInputSchema, javascriptRecoveryInputSchema, javascriptRecoveryResultSchema, jebInputSchemas, jebResultSchemas, listUnknownsInputSchema, navigationContextInputSchema, objdumpInputSchema, observeWebExecutionInputSchema, observeWebSessionInputSchema, packetCaptureSchema, packetFieldsCatalogSchema, peResourcesSchema, processComparisonInputSchema, recordedCrashSchema, rizinInputSchema, rustBinarySchema, signalDecodersSchema, signalRecordingSchema, sqliteDatabaseSchema, verifyUnknownResolutionInputSchema, webBundleAnalysisSchema, webEventListenersSchema, webExecutionSchema, webMcpDiscoverySchema, webModuleTraceInputSchema, webModuleTraceResultSchema, webObservationSessionSchema, webScriptExportResultSchema, webSourceLocationInputSchema, webSourceLocationResultSchema } from "./cutterToolContracts-TZH9EHr5.js";
-import { init_jsonValue, jsonObjectSchema, jsonValueSchema } from "./errorSchemas-CTRmvMl3.js";
-import { analysisDetailOutputSchemaOf, analysisDetailSchema, analysisViewResultSchema, androidInputSchemas, androidPackageInspectionInputSchema, androidPackageSummaryViewResultSchema, androidResultSchemas, artifactComparisonInputSchema, binaryArchitectureSchema, binaryLayoutSchema, binaryLayoutSummaryViewResultSchema, bundleComparisonInputSchema, callPathInputSchema, changedBehaviorInputSchema, dartAotInspectionInputSchema, dartAotSummaryViewResultSchema, electronFuseOutputSchemas, enhancedOutputSchemas, flutterInputSchemas, flutterResultSchemas, init_analysisDetail, init_analysisView, init_androidAnalysis, init_artifactComparison, init_binaryLayout, init_bundleComparison, init_callPathSchemas, init_changedBehavior, init_electronFuses, init_flutterBuildAnalysis, init_managedNativeVerificationSchemas, init_managedReconstruction, init_pcapAnalysis, init_rawBinary, init_reconstructionVerificationSchemas, init_staticRuntimeCorrelation, init_toolEffects, init_toolOutputSchemaGroups, init_webNetworkCapture, inspectAnalysisViewInputSchema, inspectBinaryLayoutInputSchema, inspectElectronFusesInputSchema, inspectWebNetworkCaptureInputSchema, javascriptApplicationSummaryViewResultSchema, managedNativeVerificationInputSchema, managedReconstructionImportInputSchema, managedWorkflowOutputSchemas, pcapCaptureSummaryViewResultSchema, pcapInputSchemas, pcapResultSchemas, rawBinaryEntryPointSchema, rawBinarySelectionError, reconstructionVerificationInputSchema, sessionOutputSchemas, staticRuntimeCorrelationInputSchema, toolContractMetadata, webNetworkCaptureSchema, webNetworkCaptureSummaryViewResultSchema } from "./toolOutputSchemaGroups-DRiYs1je.js";
-import { JAVASCRIPT_SEMANTIC_RELATION_FAMILIES, JavaScriptSemanticEvidenceContextRegistry, analyzeJavaScriptApplicationInputSchema, completeApplicationCoverage, createJavaScriptApplicationGraph, createJavaScriptApplicationNode, createJavaScriptSemanticGraph, createJavaScriptSemanticGraphNode, init_javascriptApplicationAnalysis, init_javascriptApplicationEvidenceSchemas, init_javascriptApplicationGraph, init_javascriptSemanticGraph, init_javascriptSemanticGraphSchemas, javascriptApplicationAnalysisResultSchema, partialApplicationCoverage } from "./javascriptApplicationAnalysis-HgMzVMQw.js";
-import { MANAGED_TOOL_CONTRACTS, executableFormatHintSchema, init_dosCom, init_managedToolContracts } from "./managedToolContracts-D60QmIYj.js";
-import { applicationFeatureTraceResultSchema, applicationVersionComparisonResultSchema, compareApplicationVersionsInputSchema, compareJavaScriptExportShapesInputSchema, compareSourceToBundleInputSchema, createHistoricalSourceGraph, init_javascriptApplicationVersionComparisonSchemas, init_javascriptExportShapeComparisonSchemas, init_javascriptFeatureTraceSchemas, init_referenceSourceGraph, init_sourceToBundleComparisonSchemas, javaScriptExportShapeComparisonResultSchema, sourceToBundleComparisonResultSchema, traceApplicationFeatureInputSchema } from "./javascriptExportShapeComparisonSchemas-BYnoIqIk.js";
-import { init_javascriptSemanticQuerySchemas, init_javascriptSemanticTraceSchemas, javaScriptSemanticQueryInputSchema, javaScriptSemanticTraceResultSchema } from "./javascriptSemanticTraceSchemas-BTCNcvbc.js";
-import { ARTIFACT_TOOL_CONTRACTS, OFFICIAL_TOOL_CONTRACTS, TOOL_EXAMPLE_OVERRIDES, enhancedInputSchemas, examplesFor, init_artifactToolContracts, init_enhancedInputs, init_officialToolContracts, init_toolContractExamples, init_toolContractHelpers } from "./officialToolContracts-CCFF0an9.js";
-import { init_javascriptRuntimeReconciliationSchemas, javascriptRuntimeReconciliationResultSchema, reconcileJavaScriptRuntimeInputSchema } from "./javascriptRuntimeReconciliationSchemas-BWpGWNcI.js";
-import { init_javascriptRuntimeReconciliation, parseRuntimeReconciliationInput, reconcileJavaScriptRuntime } from "./javascriptRuntimeReconciliation-DNjDoL3S.js";
-import { init_javascriptExportReturnShapeProjection, projectJavaScriptExportReturnShapes } from "./javascriptExportReturnShapeProjection-Dg00g35t.js";
+import { DEFAULT_BROWSER_SCENARIO_CAPTURE_LIMITS, analysisProviderSelectorSchema, analyzeJavaScriptSemantics, androidApplicationProjectionInputSchema, androidApplicationProjectionResultSchema, appleApplicationProjectionInputSchema, appleApplicationProjectionResultSchema, artifactGraphDigest, artifactIdForContent, artifactInventoryResultSchema, artifactManifestId, browserScenarioCaptureSchema, browserTargetListSchema, captureWebScreenshotInputSchema, compareWebScreenshotsInputSchema, createEvidence, createWebTextArtifact, electronActiveObservationInputSchema, electronActiveObservationResultSchema, electronPageInspectionSchema, electronTargetListSchema, evidenceResultOf, evidenceSchema, functionComparisonInputSchema, harmonyApplicationProjectionInputSchema, harmonyApplicationProjectionResultSchema, init_androidApplication, init_appleApplication, init_artifactGraph, init_artifactIdentity, init_browserObservation, init_browserObservationSchemas, init_browserScenarioCapture, init_browserScenarioCaptureLimits, init_electronActiveObservation, init_electronFuses, init_electronObservation, init_evidence, init_functionComparisonSchemas, init_harmonyApplication, init_javascriptRuntimeObservation, init_javascriptSemanticAnalysis, init_localPath, init_processScenario, init_providerSelection, init_reconstructionCoverage, init_reconstructionCoverageInput, init_reconstructionObligationLedgerSchemas, init_residualUnknown, init_toolOutputSchemaPrimitives, init_webContentArtifact, init_webScreenshot, inspectElectronFusesInputSchema, inspectElectronPageInputSchema, inspectWebPageInputSchema, javascriptRuntimeObservationSchema, javascriptRuntimeTargetListSchema, listBrowserTargetsInputSchema, listElectronTargetsInputSchema, listJavaScriptRuntimeTargetsInputSchema, localPathStringSchema, observeJavaScriptRuntimeInputSchema, occurrenceIdForLocation, processScenarioSchema, reconstructionClosureResultSchema, reconstructionCoverageEvaluationInputSchema, reconstructionObligationLedgerInputSchema, reconstructionObligationLedgerSchema, recordUnknownInputSchema, requireOutputSchema, updateUnknownInputSchema, webPageInspectionSchema, webScreenshotDiffSchema, webScreenshotSchema } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { CUTTER_TOOL_CONTRACTS, EVM_TOOL_CONTRACTS, FRIDA_TOOL_CONTRACTS, NATIVE_TOOL_CONTRACTS, WASM_TOOL_CONTRACTS, adbInputSchemas, adbResultSchemas, addressContextInputSchema, analyzeWebBundleInputSchema, apktoolInputSchemas, apktoolResultSchemas, browserCaptureComparisonInputSchema, browserCaptureComparisonSchema, browserScenarioInputSchema, decodeSignalRecordingInputSchema, discoverWebMcpToolsInputSchema, evidenceInputSchema, exportWebScriptsInputSchema, firmwareInputSchemas, firmwareResultSchemas, getEvidenceBundleInputSchema, goBinarySchema, importEvidenceBundleInputSchema, init_adbDeviceAnalysis, init_apktoolResourceAnalysis, init_browserCaptureComparison, init_browserScenario, init_browserSession, init_cutterToolContracts, init_evidenceInputContracts, init_evmToolContracts, init_firmwareAnalysis, init_fridaToolContracts, init_goBinary, init_javascriptRecovery, init_jebAnalysis, init_nativeToolContracts, init_packetCapture, init_packetFields, init_peResources, init_recordedCrash, init_reverseEngineering, init_rustBinary, init_sessionToolSchemas, init_signalDecoders, init_signalRecording, init_sqliteDatabase, init_wasmToolContracts, init_webBundleAnalysis, init_webEventListeners, init_webExecution, init_webMcpDiscovery, init_webModuleTrace, init_webScriptExport, init_webSourceLocation, inspectGoBinaryInputSchema, inspectPacketCaptureInputSchema, inspectPacketFieldsInputSchema, inspectPeResourcesInputSchema, inspectRecordedCrashInputSchema, inspectRustBinaryInputSchema, inspectSignalDecodersInputSchema, inspectSqliteDatabaseInputSchema, inspectWebEventListenersInputSchema, javascriptRecoveryInputSchema, javascriptRecoveryResultSchema, jebInputSchemas, jebResultSchemas, listUnknownsInputSchema, navigationContextInputSchema, objdumpInputSchema, observeWebExecutionInputSchema, observeWebSessionInputSchema, packetCaptureSchema, packetFieldsCatalogSchema, peResourcesSchema, processComparisonInputSchema, recordedCrashSchema, rizinInputSchema, rustBinarySchema, signalDecodersSchema, signalRecordingSchema, sqliteDatabaseSchema, verifyUnknownResolutionInputSchema, webBundleAnalysisSchema, webEventListenersSchema, webExecutionSchema, webMcpDiscoverySchema, webModuleTraceInputSchema, webModuleTraceResultSchema, webObservationSessionSchema, webScriptExportResultSchema, webSourceLocationInputSchema, webSourceLocationResultSchema } from "./cutterToolContracts-BQtG_Nzo.js";
+import { init_jsonValue, jsonObjectSchema } from "./errorSchemas-Ixz_q7qt.js";
+import { analysisDetailOutputSchemaOf, analysisDetailSchema, analysisViewResultSchema, androidInputSchemas, androidPackageInspectionInputSchema, androidPackageSummaryViewResultSchema, androidResultSchemas, artifactComparisonInputSchema, binaryArchitectureSchema, binaryLayoutSchema, binaryLayoutSummaryViewResultSchema, bundleComparisonInputSchema, callPathInputSchema, changedBehaviorInputSchema, dartAotInspectionInputSchema, dartAotSummaryViewResultSchema, electronFuseOutputSchemas, enhancedOutputSchemas, flutterInputSchemas, flutterResultSchemas, init_analysisDetail, init_analysisView, init_androidAnalysis, init_artifactComparison, init_binaryLayout, init_bundleComparison, init_callPathSchemas, init_changedBehavior, init_flutterBuildAnalysis, init_managedNativeVerificationSchemas, init_managedReconstruction, init_pcapAnalysis, init_rawBinary, init_reconstructionVerificationSchemas, init_staticRuntimeCorrelation, init_toolEffects, init_toolOutputSchemaGroups, init_webNetworkCapture, inspectAnalysisViewInputSchema, inspectBinaryLayoutInputSchema, inspectWebNetworkCaptureInputSchema, javascriptApplicationSummaryViewResultSchema, managedNativeVerificationInputSchema, managedReconstructionImportInputSchema, managedWorkflowOutputSchemas, pcapCaptureSummaryViewResultSchema, pcapInputSchemas, pcapResultSchemas, rawBinaryEntryPointSchema, rawBinarySelectionError, reconstructionVerificationInputSchema, sessionOutputSchemas, staticRuntimeCorrelationInputSchema, toolContractMetadata, webNetworkCaptureSchema, webNetworkCaptureSummaryViewResultSchema } from "./toolOutputSchemaGroups-BqdSzySu.js";
+import { JAVASCRIPT_SEMANTIC_RELATION_FAMILIES, JavaScriptSemanticEvidenceContextRegistry, analyzeJavaScriptApplicationInputSchema, completeApplicationCoverage, createJavaScriptApplicationGraph, createJavaScriptApplicationNode, createJavaScriptSemanticGraph, createJavaScriptSemanticGraphNode, init_javascriptApplicationAnalysis, init_javascriptApplicationEvidenceSchemas, init_javascriptApplicationGraph, init_javascriptSemanticGraph, init_javascriptSemanticGraphSchemas, javascriptApplicationAnalysisResultSchema, partialApplicationCoverage } from "./javascriptApplicationAnalysis-Dk6yBV8g.js";
+import { MANAGED_TOOL_CONTRACTS, executableFormatHintSchema, init_dosCom, init_managedToolContracts } from "./managedToolContracts-BuFkMBH5.js";
+import { applicationFeatureTraceResultSchema, applicationVersionComparisonResultSchema, compareApplicationVersionsInputSchema, compareJavaScriptExportShapesInputSchema, compareSourceToBundleInputSchema, createHistoricalSourceGraph, init_javascriptApplicationVersionComparisonSchemas, init_javascriptExportShapeComparisonSchemas, init_javascriptFeatureTraceSchemas, init_referenceSourceGraph, init_sourceToBundleComparisonSchemas, javaScriptExportShapeComparisonResultSchema, sourceToBundleComparisonResultSchema, traceApplicationFeatureInputSchema } from "./javascriptExportShapeComparisonSchemas-DpwuBenh.js";
+import { init_javascriptSemanticQuerySchemas, init_javascriptSemanticTraceSchemas, javaScriptSemanticQueryInputSchema, javaScriptSemanticTraceResultSchema } from "./javascriptSemanticTraceSchemas-C7m0b6_w.js";
+import { ARTIFACT_TOOL_CONTRACTS, OFFICIAL_TOOL_CONTRACTS, TOOL_EXAMPLE_OVERRIDES, enhancedInputSchemas, examplesFor, init_artifactToolContracts, init_enhancedInputs, init_officialToolContracts, init_toolContractExamples, init_toolContractHelpers } from "./officialToolContracts-CzzVLx8I.js";
+import { init_javascriptRuntimeReconciliationSchemas, javascriptRuntimeReconciliationResultSchema, reconcileJavaScriptRuntimeInputSchema } from "./javascriptRuntimeReconciliationSchemas-D6tZKUQs.js";
+import { init_javascriptRuntimeReconciliation, parseRuntimeReconciliationInput, reconcileJavaScriptRuntime } from "./javascriptRuntimeReconciliation-C6ZgWMys.js";
+import { init_javascriptExportReturnShapeProjection, projectJavaScriptExportReturnShapes } from "./javascriptExportReturnShapeProjection-CObOIiQ6.js";
 import { z } from "zod";
 import { isAbsolute } from "node:path";
 
@@ -208,7 +208,7 @@ function init_analysisViewApiSurfaceExample() {
 			input: {
 				source: {
 					kind: "retained-evidence",
-					evidence_id: "ev_9e218c18bc6159ec9c8492a9130c286496fb1b6d9f03ec2f4ea3321ce2b15097"
+					evidence_id: "ev_90073e9478eada1e2cc351b523e6ba9231c9b4bc9708773567b880094db9d4c7"
 				},
 				view: {
 					kind: "api-surface",
@@ -217,10 +217,10 @@ function init_analysisViewApiSurfaceExample() {
 				}
 			},
 			output: {
-				parent_evidence_id: "ev_9e218c18bc6159ec9c8492a9130c286496fb1b6d9f03ec2f4ea3321ce2b15097",
+				parent_evidence_id: "ev_90073e9478eada1e2cc351b523e6ba9231c9b4bc9708773567b880094db9d4c7",
 				parent_operation: "inspect_web_network_capture",
-				parent_digest: "9e218c18bc6159ec9c8492a9130c286496fb1b6d9f03ec2f4ea3321ce2b15097",
-				view_digest: "47c1859b7a86dd10770061767300bdb6ec177a9254e8dc7863d5ea8603343da6",
+				parent_digest: "90073e9478eada1e2cc351b523e6ba9231c9b4bc9708773567b880094db9d4c7",
+				view_digest: "c9494341920dc4cff6ecc6d8ed2c5e3abf15976642c253248e220d45f290ca7b",
 				artifact: {
 					path: "/fixtures/api-surface.har",
 					sha256: "bf58e2c06e55bfe7e0628157c4ad027ce0aeb81a10e8edef8a7f95b8e5f14225"
@@ -281,7 +281,7 @@ function init_analysisViewToolContracts() {
 			name: "inspect_analysis_view",
 			...toolContractMetadata("inspect_analysis_view"),
 			kind: "application",
-			description: "Inspect selected views of completed binary-layout, JavaScript application, native analyze_function, inspect_artifact, inventory_artifact, inspect_wasm_artifact, inspect_macho, decode_interface_builder, inspect_evm_interface, inspect_managed_artifact, inspect_managed_members, inspect_android_package, inspect_dart_aot or inspect_web_network_capture Evidence without repeating analysis. Historical capture summaries return identity and counts without bodies or archive inventories. Capture views page retained records: view {kind: \"capture\", detail: \"preview\" | \"complete\", offset: 0, limit: 20}; preview selects recorded headline fields and binary descriptors, complete returns exact records with all sidecars. Offsets follow the selected parent record order, preserving original producer ordinals. Paging never reopens the source or reruns the decoder. For inspect_pcap_capture parents, kind pcap pages endpoints, dns-queries, tls-sni, protocols, http-uris or unattributed-addresses. Select an exact query for dns-addresses, or a tshark/capinfos stream for UTF-16 diagnostics text. Page totals count retained facts; source coverage remains explicit. Qlog summaries keep profile/scope and counts; kind qlog pages traces, streams, loss-declarations, incomplete-records, contributions, ranges or final-sizes. Except traces, select trace_index; stream-specific facets also require exact stream_id and direction. Facts retain all-recorded-events-before-selection scope, and interval overlap or endpoint loss declarations do not prove retransmission or network loss. The api-surface view groups retained HAR requests by method, origin and format-rule path template; templated segments are inferences. It reads no headers or bodies and reports no query values. For a retained record use source: {kind: \"retained-evidence\", evidence_id: \"<parent_evidence_id>\"}. Use normalized_result.parent_evidence_id from a summary receipt. Source kind is required. Portable source uses {kind: \"inline\", evidence: <complete Evidence>}. For layout, JavaScript, inventory, WASM, Mach-O, Interface Builder, EVM, managed artifact, Android package and Dart AOT sources, request a summary with view: {kind: \"summary\"}; summary is a view kind and has no facet. The WASM summary gives validation, counts, WAT digest/length, tool profile and execution/network states without reading WAT text. Select a layout mitigations/linkage facet, one section/symbol/module, or a stable page. Module pages include assets, bundled and source modules; use node_id for ambiguous or unavailable paths. Inventory uses view: {kind: \"inventory\", collection: \"occurrences\", logical_paths: [\"package.json\"], offset: 0, limit: 64}. Inventory views page nodes, occurrences, edges or integrity contradictions; occurrence logical_paths matches exact recorded strings (omitted means all available, [] means none). source_complete distinguishes complete inventories from partial source records; page exhaustion does not prove absence in a partial source. WASM views use kind wasm and facet sections/imports/exports/candidates/glue/wat/headers/details/tool_profile; text facets use UTF-16 code units and source forms remain exact. Mach-O views use kind macho and facet entrypoints/architectures/build_metadata/load_commands/dependencies/imports/exports/segments/provenance; source_exhaustive false means unreturned rows may exist. Interface Builder views use kind interface-builder and collection documents/nodes/edges/coverage; nodes and edges accept an exact document relative_path. EVM summary returns all inferred interface candidates, carrier/decoded identities and explicit unknowns without hex or duplicate stdout. EVM views use kind evm and facet functions/bytecode_hex/stdout/stderr; function pages preserve the original candidate rows, and text offsets/limits count UTF-16 code units (hex has two characters per decoded byte). Exhausting candidate pages does not establish global interface completeness. Managed artifact summaries preserve complete identity/classification, metadata status, module/MVID, frameworks, coverage and limitations without unrelated inventories. Managed pages use kind managed and collection references/resources/attributes, retaining source coverage and build-local token scope; page exhaustion does not establish complete metadata. Managed member summaries keep identity, selection with unmatched names, coverage and per-collection counts; managed-members pages use collection types/exported_types/fields/methods/member_refs/call_edges/field_accesses/user_strings and carry the source selection and coverage. Android package summaries retain all declarations, engine identity and counts without decoded manifest text. Android manifest pages use kind android, facet manifest, offset and limit in UTF-16 code units; source_status preserves partial decoded coverage even when the retained text page is exhausted. Dart AOT summary preserves target/ABI/library identity, snapshot headers and pool lower bounds. String pages use kind dart-aot, collection package_uris/dart_uris/class_like_tokens; source coverage remains partial when the producer says partial. Native function Evidence requires kind native: view: {kind: \"native\", facet: \"procedure\"}. Facets select procedure, pseudocode, assembly, basic blocks, comments, callers/callees, references, unresolved calls, referenced strings/names, native API and high-pcode. Use nonnegative offset and a positive caller-selected limit (defaults 0 and 64); pseudocode uses UTF-16 code units, other native pages use rows. Returns artifact identity, parent Evidence ID, a distinct view digest, coverage, limitations and unknowns. Actual serialized size determines MCP transport admission; choose a smaller page or export the complete retained Evidence if needed.",
+			description: "Inspect selected views of completed binary-layout, JavaScript application, native analyze_function, inspect_artifact, inventory_artifact, inspect_wasm_artifact, inspect_macho, decode_interface_builder, inspect_evm_interface, inspect_managed_artifact, inspect_managed_members, inspect_android_package, inspect_dart_aot or inspect_web_network_capture Evidence without repeating analysis. Historical capture summaries return identity and counts without bodies or archive inventories. Capture views page retained records: view {kind: \"capture\", detail: \"preview\" | \"complete\", offset: 0, limit: 20}; preview selects recorded headline fields and binary descriptors, complete returns exact records with all sidecars. Offsets follow the selected parent record order, preserving original producer ordinals. Paging never reopens the source or reruns the decoder. For inspect_pcap_capture parents, kind pcap pages endpoints, dns-queries, tls-sni, protocols, http-uris or unattributed-addresses. Select an exact query for dns-addresses, or a tshark/capinfos stream for UTF-16 diagnostics text. Page totals count retained facts; source coverage remains explicit. Qlog summaries keep profile/scope and counts; kind qlog pages traces, streams, loss-declarations, incomplete-records, contributions, ranges or final-sizes. Except traces, select trace_index; stream-specific facets also require exact stream_id and direction. Facts retain all-recorded-events-before-selection scope, and interval overlap or endpoint loss declarations do not prove retransmission or network loss. The api-surface view groups retained HAR requests by method, origin and format-rule path template; templated segments are inferences. It reads no headers or bodies and reports no query values. For a retained record use source: {kind: \"retained-evidence\", evidence_id: \"<parent_evidence_id>\"}. Use normalized_result.parent_evidence_id from a summary receipt. Source kind is required. Portable source uses {kind: \"inline\", evidence: <complete Evidence>}. For layout, JavaScript, inventory, WASM, Mach-O, Interface Builder, EVM, managed artifact, Android package and Dart AOT sources, request a summary with view: {kind: \"summary\"}; summary is a view kind and has no facet. The WASM summary gives validation, counts, WAT digest/length, tool profile and execution/network states without reading WAT text. Select a layout mitigations/linkage facet, one section/symbol/module, or a stable page. Module pages include assets, bundled and source modules; use node_id for ambiguous or unavailable paths. Typed module references use view {kind: \"javascript\", collection: \"modules\", projection: \"references\", where: {path: \"main.js\", kind: \"javascript-module\"}, offset: 0, limit: 64}; where matches exact retained strings (null selects unavailable paths). Rows include canonical identity, retained source-range count and observation support states. Source coverage and selection remain explicit; exhausting matching rows does not prove runtime loading or complete analysis. For exact file/native facts and processing gaps, use view {kind: \"javascript-facts\", where: {paths: [\"package.json\"]}, property_keys: [\"name\", \"operation\", \"analysis_status\"]}. Rows page original observations with canonical identities and Evidence; missing properties remain omitted. Paths match recorded artifact-path/source-range locations; optional kinds filter nodes. To discover field names without values, opt into include_available_property_keys: true with property_keys: []. Canonical identity and Evidence are separate from properties; keep each node_id/observation_id pair together when composing results. Inventory uses view: {kind: \"inventory\", collection: \"occurrences\", logical_paths: [\"package.json\"], offset: 0, limit: 64}. Inventory views page nodes, occurrences, edges or integrity contradictions; occurrence logical_paths matches exact recorded strings (omitted means all available, [] means none). source_complete distinguishes complete inventories from partial source records; page exhaustion does not prove absence in a partial source. WASM views use kind wasm and facet sections/imports/exports/candidates/glue/wat/headers/details/tool_profile; text facets use UTF-16 code units and source forms remain exact. Mach-O views use kind macho and facet entrypoints/architectures/build_metadata/load_commands/dependencies/imports/exports/segments/provenance; source_exhaustive false means unreturned rows may exist. Interface Builder views use kind interface-builder and collection documents/nodes/edges/coverage; nodes and edges accept an exact document relative_path. EVM summary returns all inferred interface candidates, carrier/decoded identities and explicit unknowns without hex or duplicate stdout. EVM views use kind evm and facet functions/bytecode_hex/stdout/stderr; function pages preserve the original candidate rows, and text offsets/limits count UTF-16 code units (hex has two characters per decoded byte). Exhausting candidate pages does not establish global interface completeness. Managed artifact summaries preserve complete identity/classification, metadata status, module/MVID, frameworks, coverage and limitations without unrelated inventories. Managed pages use kind managed and collection references/resources/attributes, retaining source coverage and build-local token scope; page exhaustion does not establish complete metadata. Managed member summaries keep identity, selection with unmatched names, coverage and per-collection counts; managed-members pages use collection types/exported_types/fields/methods/member_refs/call_edges/field_accesses/user_strings and carry the source selection and coverage. Android package summaries retain all declarations, engine identity and counts without decoded manifest text. Android manifest pages use kind android, facet manifest, offset and limit in UTF-16 code units; source_status preserves partial decoded coverage even when the retained text page is exhausted. Dart AOT summary preserves target/ABI/library identity, snapshot headers and pool lower bounds. String pages use kind dart-aot, collection package_uris/dart_uris/class_like_tokens; source coverage remains partial when the producer says partial. Native function Evidence requires kind native: view: {kind: \"native\", facet: \"procedure\"}. Facets select procedure, pseudocode, assembly, basic blocks, comments, callers/callees, references, unresolved calls, referenced strings/names, native API and high-pcode. Use nonnegative offset and a positive caller-selected limit (defaults 0 and 64); pseudocode uses UTF-16 code units, other native pages use rows. Returns artifact identity, parent Evidence ID, a distinct view digest, coverage, limitations and unknowns. Actual serialized size determines MCP transport admission; choose a smaller page or export the complete retained Evidence if needed.",
 			inputSchema: inspectAnalysisViewInputSchema,
 			outputSchema: evidenceResultOf(analysisViewResultSchema),
 			examples: [
@@ -358,6 +358,50 @@ function init_analysisViewToolContracts() {
 							limit: 32
 						}
 					}
+				},
+				{
+					title: "Read selected metadata and native facts by exact retained paths",
+					input: {
+						source: {
+							kind: "retained-evidence",
+							evidence_id: RETAINED_EXAMPLE_ID
+						},
+						view: {
+							kind: "javascript-facts",
+							where: { paths: ["package.json", "build/Release/addon.node"] },
+							property_keys: [
+								"name",
+								"version",
+								"bytes",
+								"availability",
+								"operation",
+								"analysis_status"
+							],
+							include_available_property_keys: true,
+							offset: 0,
+							limit: 32
+						}
+					}
+				},
+				{
+					title: "Read typed module reference facts from retained application Evidence",
+					input: {
+						source: {
+							kind: "retained-evidence",
+							evidence_id: RETAINED_EXAMPLE_ID
+						},
+						view: {
+							kind: "javascript",
+							collection: "modules",
+							projection: "references",
+							where: {
+								path: "main.js",
+								kind: "javascript-module"
+							},
+							offset: 0,
+							limit: 64
+						}
+					}
 				}
 			]
 		}];
@@ -502,7 +546,7 @@ function init_androidToolContracts() {
 			{
 				name: "search_android_classes",
 				...toolContractMetadata("search_android_classes"),
-				description: "Search complete decompiler class-name rows in an explicit local APK by case-sensitive substring. Empty query inventories all rows. Repeated names remain repeated and appear in duplicate_names; the provider accepts only class names for lookup, so these rows do not identify which same-name class node a later lookup selects. Retains artifact and engine identity; no APK execution.",
+				description: "Search complete top-level decompiler class-name rows in an explicit local APK by case-sensitive substring. Empty query inventories all rows. Repeated names remain repeated and appear in duplicate_names; the provider accepts only class names for lookup, so these rows do not identify which same-name class node a later lookup selects. Retains artifact and engine identity; no APK execution.",
 				kind: "android-provider",
 				inputSchema: androidInputSchemas.search_android_classes,
 				outputSchema: evidenceResultOf(androidResultSchemas.search_android_classes),
@@ -586,20 +630,30 @@ function init_apktoolToolContracts() {
 		}, {
 			name: "decode_android_resources",
 			...toolContractMetadata("decode_android_resources"),
-			description: "Decode one local APK's resources with `apktool d --no-src` in a provider-owned workspace that is removed after projection: the readable AndroidManifest.xml, apktool.yml version and SDK facts, the app's string resources (default or one locale, bounded to 2000 entries), available string locales, and the decoded file count. The target APK is digest with SHA-256 before decoding; smali is skipped because Java-source recovery belongs to the JADX family.",
+			description: "Decode one local APK's resources with `apktool d --no-src` in a provider-owned workspace that is removed after projection: the readable AndroidManifest.xml, apktool.yml version and SDK facts, the app's string resources (default or selected locales, bounded to 2000 entries per table), selectable string locales, and the decoded file count. The target APK is digest with SHA-256 before decoding; smali is skipped because Java-source recovery belongs to the JADX family.",
 			kind: "apktool-provider",
 			inputSchema: apktoolInputSchemas.decode_android_resources,
 			outputSchema: evidenceResultOf(apktoolResultSchemas.decode_android_resources),
-			examples: [{
-				title: "Decode an APK's resources",
-				input: { path: "/targets/Example.apk" }
-			}, {
-				title: "Decode one locale's strings",
-				input: {
-					path: "/targets/Example.apk",
-					locale: "de"
+			examples: [
+				{
+					title: "Decode an APK's resources",
+					input: { path: "/targets/Example.apk" }
+				},
+				{
+					title: "Decode one locale's strings",
+					input: {
+						path: "/targets/Example.apk",
+						locale: "de"
+					}
+				},
+				{
+					title: "Decode multiple locale string tables in one pass",
+					input: {
+						path: "/targets/Example.apk",
+						locales: ["de", "fr"]
+					}
 				}
-			}]
+			]
 		}];
 	})))();
 }
@@ -978,7 +1032,7 @@ function init_adbToolContracts() {
 			{
 				name: "inspect_adb_window",
 				...toolContractMetadata("inspect_adb_window"),
-				description: "Report the window manager's current focus declarations (mCurrentFocus and mFocusedApp from `dumpsys window windows`, or from `dumpsys window displays` when the windows section declares neither, as on Android 16) — what is on screen at read time without any interaction. Read-only.",
+				description: "Report the window manager's focus declarations with display context, original lines and explicit summary status. Reads `dumpsys window windows`, falling back to `displays` only when no focus field is declared. Singular fields are unknown for multiple contexts or repeated declarations; inspect focus_contexts for every observation. Read-only; no interaction occurs.",
 				kind: "adb-provider",
 				inputSchema: adbInputSchemas.inspect_adb_window,
 				outputSchema: evidenceResultOf(adbResultSchemas.inspect_adb_window),
@@ -1058,7 +1112,7 @@ function init_adbToolContracts() {
 			{
 				name: "uninstall_adb_package",
 				...toolContractMetadata("uninstall_adb_package"),
-				description: "Uninstall one package from the device (`adb uninstall`), removing its data for user 0. A device-mutating tool; absent packages report the device's own refusal reason.",
+				description: "Request package removal for user 0 (`adb shell pm uninstall --user 0`) without data retention. A device-mutating tool; absent packages report the device's own refusal reason.",
 				kind: "adb-provider",
 				inputSchema: adbInputSchemas.uninstall_adb_package,
 				outputSchema: evidenceResultOf(adbResultSchemas.uninstall_adb_package),
@@ -1148,6 +1202,7 @@ function init_managedWorkflowExamples() {
 			version: "1"
 		};
 		emptyManagedMembers = (sha256, mvid) => ({
+			signature_resolution: null,
 			artifact: {
 				path: `/examples/${sha256.slice(0, 8)}.dll`,
 				sha256,
@@ -1174,6 +1229,7 @@ function init_managedWorkflowExamples() {
 				requires_mvid: mvid
 			},
 			types: [],
+			nesting_read: true,
 			exported_types: [],
 			fields: [],
 			methods: [],
@@ -1215,6 +1271,7 @@ function init_managedWorkflowExamples() {
 					signature: {
 						raw_length: 3,
 						raw_sha256: "3".repeat(64),
+						resolved_sha256: "3".repeat(64),
 						kind: "method",
 						parse_status: "decoded",
 						calling_convention: "default",
@@ -1475,7 +1532,7 @@ function init_managedWorkflowToolContracts() {
 			{
 				name: "compare_managed_members",
 				...toolContractMetadata("compare_managed_members"),
-				description: "Compare two authenticated inspect_managed_members Evidence records using unique-only tiers: exact declared type, name, and CIL/signature; exact declared type, name, and raw signature (decoded or not); exact declared type, name, and decoded structural method shape; then exact CIL/signature or decoded structural method shape alone, which never takes a member whose own declared type and name remain unpaired on the other side or whose declaring type is unresolved. Names alone are never a matching basis; a member whose signature was not decoded, or whose same-named counterpart's was not, stays unknown rather than added or removed. Metadata tokens remain build-local coordinates bound to each artifact SHA-256 and MVID, and the tuple digest does not itself remap them.",
+				description: "Compare two authenticated inspect_managed_members Evidence records using unique-only tiers: exact declared type, name, and CIL/signature; exact declared type, name, and signature (decoded or not); exact declared type, name, and decoded structural method shape; then exact CIL/signature or decoded structural method shape alone, which never takes a member whose own declared type and name remain unpaired on the other side or whose declaring type is unresolved. Signatures compare type operands by name, not by build-local metadata row. Names alone are never a matching basis; a member whose signature was not decoded, or whose same-named counterpart's was not, stays unknown rather than added or removed. Metadata tokens remain build-local coordinates bound to each artifact SHA-256 and MVID, and the tuple digest does not itself remap them.",
 				kind: "application",
 				inputSchema: compareManagedMembersReferenceInputSchema,
 				outputSchema: comparisonOutputSchema$1,
@@ -1562,7 +1619,7 @@ function init_browserScenarioToolContracts() {
 		BROWSER_SCENARIO_TOOL_CONTRACTS = [{
 			name: "capture_browser_scenario",
 			...toolContractMetadata("capture_browser_scenario"),
-			description: "Run a controlled browser scenario when passive observation cannot exercise the application. Launch the selected executable or connect to a loopback CDP target, provide a start URL and actions, and select storage or artifacts when needed. Environment, empty storage, and a URL-only final capture are defaults. capture.network selects request_body, response_body, and header_values independently; selected content is returned inline with transaction and event references, byte digests, and explicit unavailable states. Credentials and declared secrets are redacted. Agents can run their own local fixture servers to control application responses. Actions run until completion or cancellation unless timeout_ms is set. Results are returned inline.",
+			description: "Run a controlled browser scenario when passive observation cannot exercise the application. Launch the selected executable or connect to a loopback CDP target, provide a start URL and actions, and select storage or artifacts when needed. Environment, empty storage, a URL-only final capture, and measured event-retention budgets are defaults. capture.network selects request_body, response_body, and header_values independently; capture.limits lets callers raise or lower the event count, retained-allocation estimates, network transaction count, and network content budgets. Selected content is returned inline with transaction and event references, byte digests, and explicit unavailable states. Budget omissions identify affected event kinds and network transactions. Credentials and declared secrets are redacted. Agents can run their own local fixture servers to control application responses. Actions run until completion or cancellation unless timeout_ms is set. Results are returned inline.",
 			kind: "browser-provider",
 			inputSchema: browserScenarioInputSchema,
 			outputSchema: evidenceResultOf(browserScenarioCaptureSchema),
@@ -1593,6 +1650,7 @@ function init_browserToolContracts() {
 		init_browserSession();
 		init_webMcpDiscovery();
 		init_browserCaptureComparison();
+		init_browserScenarioCaptureLimits();
 		init_webScreenshot();
 		init_toolEffects();
 		init_toolOutputSchemaPrimitives();
@@ -1643,7 +1701,8 @@ function init_browserToolContracts() {
 					response_body: false,
 					header_values: false
 				},
-				event_families: []
+				event_families: [],
+				limits: DEFAULT_BROWSER_SCENARIO_CAPTURE_LIMITS
 			},
 			duration_ms: 10,
 			steps: [{
@@ -1676,7 +1735,12 @@ function init_browserToolContracts() {
 			events: {
 				retained: 0,
 				dropped: 0,
-				items: []
+				items: [],
+				omissions: {
+					by_kind: [],
+					network_transactions: [],
+					network_transaction_range: null
+				}
 			},
 			completeness: scenarioCompleteness,
 			limitations: []
@@ -2010,6 +2074,7 @@ function init_javascriptRuntimeReconciliationExample() {
 					text_bytes_read: script.bytes,
 					invalid_utf8_files: 0,
 					parsed_javascript_files: 1,
+					skipped_javascript_files: 0,
 					visited_ast_nodes: 1,
 					findings: 0,
 					modules: 0,
@@ -2465,6 +2530,7 @@ function init_javascriptExportShapeComparisonExample() {
 			text_bytes_read: 60,
 			invalid_utf8_files: 0,
 			parsed_javascript_files: 1,
+			skipped_javascript_files: 0,
 			visited_ast_nodes: 12,
 			findings: 1,
 			modules: 0,
@@ -2659,13 +2725,17 @@ function init_javascriptExportShapeComparisonExample() {
 var inventory, provider, ANDROID_APPLICATION_GRAPH_EXAMPLE, APPLE_APPLICATION_GRAPH_EXAMPLE, MACOS_APPLICATION_GRAPH_EXAMPLE, HARMONY_APPLICATION_GRAPH_EXAMPLE;
 function init_mobileApplicationGraphExamples() {
 	return (init_mobileApplicationGraphExamples = __esmMin((() => {
-		init_canonicalDigest();
 		init_evidence();
-		init_jsonValue();
+		init_artifactGraph();
+		init_artifactIdentity();
 		inventory = (format, digit) => {
 			const sha = digit.repeat(64);
-			const artifactId = `art_${digestCanonicalValue({ sha256: sha }, "Artifact inventory")}`;
-			const occurrenceId = `occ_${digestCanonicalValue({ root: artifactId }, "Artifact inventory")}`;
+			const artifactId = artifactIdForContent(sha);
+			const occurrenceId = occurrenceIdForLocation({
+				rootArtifactId: artifactId,
+				logicalPath: ".",
+				entryKind: "file"
+			});
 			const nodes = [{
 				artifact_id: artifactId,
 				format: format === "directory" ? "directory" : "zip",
@@ -2692,18 +2762,15 @@ function init_mobileApplicationGraphExamples() {
 				source_location: null,
 				limitations: []
 			}];
-			const graphSha256 = digestCanonicalValue({
+			const graphSha256 = artifactGraphDigest({
 				nodes,
 				occurrences,
 				edges: [],
-				integrity_contradictions: []
-			}, "Artifact inventory");
-			return jsonValueSchema.parse({
+				contradictions: []
+			});
+			return artifactInventoryResultSchema.parse({
 				manifest: {
-					manifest_id: `agm_${digestCanonicalValue({
-						root_artifact_id: artifactId,
-						graph_sha256: graphSha256
-					}, "Artifact inventory")}`,
+					manifest_id: artifactManifestId(artifactId, graphSha256),
 					root_artifact_id: artifactId,
 					root_sha256: sha,
 					root_format: format,
@@ -2716,6 +2783,11 @@ function init_mobileApplicationGraphExamples() {
 				occurrences,
 				edges: [],
 				provenance: [],
+				integrity_contradictions: [],
+				coverage: {
+					scope: "root",
+					status: "complete"
+				},
 				limitations: []
 			});
 		};
@@ -3356,14 +3428,14 @@ function init_sessionToolContracts() {
 			overwrite: z.boolean().default(false)
 		});
 		SESSION_TOOL_CONTRACTS = [
-			session("open_binary", "Open a local executable, application bundle, archive, JavaScript, source map, plist, or analysis database after validation. format=dos-com explicitly interprets 1..65280 headerless bytes as a DOS COM analysis image. format=raw-binary interprets headerless bytes with a required architecture and entry_point; file offset 0 maps at that address. Omission preserves header-based detection. provider_id selects one deep provider or deterministic auto selection; the binding remains stable until close or an explicit switch, with no failure fallback. Reopening the same target and profile retains its active database and metadata edits. An optional analysis snapshot is imported atomically and must match the binary identity, concrete provider, and canonical analysis profile exactly; importing into a session with metadata mutations requires closing and reopening it first.", openBinaryInputSchema),
-			session("close_binary", "Drain earlier provider requests, optionally write a provider-neutral analysis snapshot atomically to the caller-supplied path, then close the active target and every provider resource started for it. Later provider requests wait until this lifecycle operation finishes. Existing files require explicit overwrite; a failed save leaves the session open so cached analysis is not lost. Metadata edits prevent immutable snapshot saves until the session is recreated; export_evidence_bundle preserves mutable observations before closing without a snapshot.", closeBinaryInputSchema),
+			session("open_binary", "Open a local executable, application bundle, archive, JavaScript, source map, plist, or analysis database after validation. format=dos-com explicitly interprets 1..65280 headerless bytes as a DOS COM analysis image. format=raw-binary interprets headerless bytes with a required architecture and entry_point; file offset 0 maps at that address. Omission preserves header-based detection. provider_id selects one deep provider or deterministic auto selection; the binding remains stable until close or an explicit switch, with no failure fallback. Reopening the same target and profile retains its active database and metadata edits. An optional analysis snapshot is imported atomically and must match the binary identity, concrete provider, and canonical analysis profile exactly; importing into a session with metadata mutations requires closing and reopening it first. Call close_binary when the investigation is finished.", openBinaryInputSchema),
+			session("close_binary", "When the investigation is finished, drain earlier provider requests, optionally write a provider-neutral analysis snapshot atomically to the caller-supplied path, then close the active target and every provider resource started for it. Later provider requests wait until this lifecycle operation finishes. Existing files require explicit overwrite; a failed save leaves the session open so cached analysis is not lost. Metadata edits prevent immutable snapshot saves until the session is recreated; export_evidence_bundle preserves mutable observations before closing without a snapshot.", closeBinaryInputSchema),
 			session("binary_session", "Report the complete current target, provider, capability availability, client-feature, analysis, and server-identity status without starting analysis.", binarySessionInputSchema),
 			session("export_evidence_bundle", "Atomically write the session's deterministic Evidence bundle to the requested local path. Existing files require overwrite: true; records and manifests use canonical byte-stable ordering.", exportEvidenceBundleInputSchema),
 			session("import_evidence_bundle", "Read the JSON bundle at the supplied local path, validate every Evidence ID and canonical manifest, then atomically merge it. Imported content is data only and is never executed.", importEvidenceBundleInputSchema),
 			session("capture_process_scenario", "Run one caller-selected command under a PTY and return process capture Evidence with residual unknowns. The renderer admits at most 1,000,000 combined terminal cells, computed as columns × (rows + scrollback); every resize uses the selected scrollback and must fit the same budget. Supply a smaller terminal shape when that product is too large; dimensions are never clamped. A command name resolves through the inherited PATH; the working directory defaults to the caller's current directory; host environment variables are inherited with scenario overrides. Environment keys cannot contain '=' or NUL, and REA_PROCESS_RUN_ID is reserved for process ownership. Filesystem snapshots are opt-in through filesystem_observation_paths. A positive finalization_ms makes a timeout or idle deadline send SIGTERM to the captured root through its start identity, keep observing, and send SIGKILL once after the interval; exit.finalization records each attempt with its delivery result and the observed exit, and cancellation still ends the run at once. The target runs with the current user's permissions; this is not a security sandbox.", processScenarioSchema),
 			session("compare_process_captures", "Compare two compatible process capture observations across terminal, interaction, lifecycle, process, filesystem, command-shim, HTTP, and WebSocket evidence. Optional trace_spec validates exact events against an explicit partial order or finite trace language; concurrency is never inferred from timestamps or broad sorting. Missing, journal-free, or truncated observations are never treated as equivalent.", processComparisonInputSchema),
-			session("compare_artifacts", "Compare complete artifact inventories by logical occurrence path, content identity, metadata, and graph relations. Pass the inventory Evidence nested in each inspect_artifact result as left and right. Every delta cites both inputs, and gaps yield truncated or unknown, never equivalence. Returns every change inline.", artifactComparisonInputSchema),
+			session("compare_artifacts", "Compare complete artifact inventories by logical occurrence path, content identity, metadata, and graph relations. Pass the inventory Evidence nested in each inspect_artifact result as left and right, or pass its inspect_analysis_view summary while the complete parent Evidence remains retained in this session. Summary facts are not treated as a complete inventory; comparison resolves the exact retained parent. Every delta cites both complete inputs, and gaps yield truncated or unknown, never equivalence. Returns every change inline.", artifactComparisonInputSchema),
 			session("compare_functions", "Compare two explicit sets of analyze_function Evidence across identity, exact provider text, calls, references, strings, and address-normalized CFG topology. Missing or provider-incompatible facets remain truncated or unknown; every conclusion cites both Evidence sets.", functionComparisonInputSchema),
 			session("compare_bundles", "Compare two canonical Evidence bundles by exact record membership, explicit one-to-one observation pairs, and complete residual-unknown revision histories. Missing bundle members describe omission only, never behavioral equivalence; output is digest-anchored and returns every change inline.", bundleComparisonInputSchema),
 			session("find_changed_behavior", "Aggregate validated process and artifact comparison Evidence. Runtime observations remain distinct from static behavior candidates; missing or incomplete comparisons produce unresolved findings, never causal claims. Returns every finding inline.", changedBehaviorInputSchema),
@@ -3443,6 +3515,7 @@ function init_reverseEngineeringToolContracts() {
 var sessionId$1, gdbCommandResult, GDB_TOOL_CONTRACTS;
 function init_gdbToolContracts() {
 	return (init_gdbToolContracts = __esmMin((() => {
+		init_localPath();
 		init_toolOutputSchemaPrimitives();
 		init_toolEffects();
 		sessionId$1 = z.string().uuid();
@@ -3466,7 +3539,7 @@ function init_gdbToolContracts() {
 				...toolContractMetadata("start_gdb_session"),
 				kind: "native-provider",
 				description: "Start a BYO GDB process in MI3 mode when available, suppress startup files, and disable auto-loading. Persistent GDB sessions are available only on Linux, where REA can verify live inferior output descriptors through /proc before detaching; macOS descriptor verification is not implemented, and Windows Job Object cleanup can terminate debugger inferiors. Optionally set inferior_tty to a caller-selected terminal for future inferior runs; REA verifies the setting through GDB/MI before the session becomes ready. The selected terminal must remain available after GDB exits. A live inferior can be detached during close only while this durable output sink remains verified. The session persists in this REA MCP server process and receives an explicit session ID.",
-				inputSchema: z.strictObject({ inferior_tty: z.string().min(1).optional().describe("Caller-selected terminal path for future inferior runs. GDB must report the exact configured path before the session is ready.") }),
+				inputSchema: z.strictObject({ inferior_tty: localPathStringSchema.optional().describe("Caller-selected terminal path for future inferior runs. GDB must report the exact configured path before the session is ready.") }),
 				outputSchema: z.strictObject({
 					session_id: sessionId$1,
 					mi_version: z.enum(["mi3", "mi2"])
@@ -3541,6 +3614,7 @@ function init_gdbToolContracts() {
 var sessionId, commandResult, RIZIN_DEBUG_TOOL_CONTRACTS;
 function init_rizinDebugToolContracts() {
 	return (init_rizinDebugToolContracts = __esmMin((() => {
+		init_localPath();
 		init_toolOutputSchemaPrimitives();
 		init_toolEffects();
 		sessionId = z.string().uuid();
@@ -3560,8 +3634,8 @@ function init_rizinDebugToolContracts() {
 				kind: "native-provider",
 				description: "Start a persistent Rizin debugger session using `-N` to suppress user settings and scripts while retaining plugins, `-0` for NUL framing, and `-d` with an optional caller-selected IO debugger backend. Requires a caller-selected Linux TTY for inferior stdout and stderr; the target may write directly to that terminal while running and after detach. REA verifies both destinations and `dbg.exitkills=false` before detaching. Backend and target capabilities depend on the installed build. The session lives in this REA MCP process. Persistent sessions require Linux `/proc` descriptor readback. In a shared MCP server, starting this session retires any active binary-analysis session; after target effects have settled, call open_binary before further analysis. Close an active Ghidra session explicitly first.",
 				inputSchema: z.strictObject({
-					path: z.string().min(1),
-					inferior_tty: z.string().min(1),
+					path: localPathStringSchema,
+					inferior_tty: localPathStringSchema,
 					backend: z.string().min(1).optional()
 				}),
 				outputSchema: z.strictObject({