rea-agents 6.5.0 → 6.7.0

package/dist/contracts/analysisViewToolContracts.js

@@ -9,7 +9,7 @@ export const ANALYSIS_VIEW_TOOL_CONTRACTS = [
         name: "inspect_analysis_view",
         ...toolContractMetadata("inspect_analysis_view"),
         kind: "application",
-        description: 'Inspect selected views of completed binary-layout, JavaScript application, native analyze_function, inspect_artifact, inventory_artifact, inspect_wasm_artifact, inspect_macho, decode_interface_builder, inspect_evm_interface, inspect_managed_artifact, inspect_managed_members, inspect_android_package, inspect_dart_aot or inspect_web_network_capture Evidence without repeating analysis. Historical capture summaries return identity and counts without bodies or archive inventories. Capture views page retained records: view {kind: "capture", detail: "preview" | "complete", offset: 0, limit: 20}; preview selects recorded headline fields and binary descriptors, complete returns exact records with all sidecars. Offsets follow the selected parent record order, preserving original producer ordinals. Paging never reopens the source or reruns the decoder. For inspect_pcap_capture parents, kind pcap pages endpoints, dns-queries, tls-sni, protocols, http-uris or unattributed-addresses. Select an exact query for dns-addresses, or a tshark/capinfos stream for UTF-16 diagnostics text. Page totals count retained facts; source coverage remains explicit. Qlog summaries keep profile/scope and counts; kind qlog pages traces, streams, loss-declarations, incomplete-records, contributions, ranges or final-sizes. Except traces, select trace_index; stream-specific facets also require exact stream_id and direction. Facts retain all-recorded-events-before-selection scope, and interval overlap or endpoint loss declarations do not prove retransmission or network loss. The api-surface view groups retained HAR requests by method, origin and format-rule path template; templated segments are inferences. It reads no headers or bodies and reports no query values. For a retained record use source: {kind: "retained-evidence", evidence_id: "<parent_evidence_id>"}. Use normalized_result.parent_evidence_id from a summary receipt. Source kind is required. Portable source uses {kind: "inline", evidence: <complete Evidence>}. For layout, JavaScript, inventory, WASM, Mach-O, Interface Builder, EVM, managed artifact, Android package and Dart AOT sources, request a summary with view: {kind: "summary"}; summary is a view kind and has no facet. The WASM summary gives validation, counts, WAT digest/length, tool profile and execution/network states without reading WAT text. Select a layout mitigations/linkage facet, one section/symbol/module, or a stable page. Module pages include assets, bundled and source modules; use node_id for ambiguous or unavailable paths. Inventory uses view: {kind: "inventory", collection: "occurrences", logical_paths: ["package.json"], offset: 0, limit: 64}. Inventory views page nodes, occurrences, edges or integrity contradictions; occurrence logical_paths matches exact recorded strings (omitted means all available, [] means none). source_complete distinguishes complete inventories from partial source records; page exhaustion does not prove absence in a partial source. WASM views use kind wasm and facet sections/imports/exports/candidates/glue/wat/headers/details/tool_profile; text facets use UTF-16 code units and source forms remain exact. Mach-O views use kind macho and facet entrypoints/architectures/build_metadata/load_commands/dependencies/imports/exports/segments/provenance; source_exhaustive false means unreturned rows may exist. Interface Builder views use kind interface-builder and collection documents/nodes/edges/coverage; nodes and edges accept an exact document relative_path. EVM summary returns all inferred interface candidates, carrier/decoded identities and explicit unknowns without hex or duplicate stdout. EVM views use kind evm and facet functions/bytecode_hex/stdout/stderr; function pages preserve the original candidate rows, and text offsets/limits count UTF-16 code units (hex has two characters per decoded byte). Exhausting candidate pages does not establish global interface completeness. Managed artifact summaries preserve complete identity/classification, metadata status, module/MVID, frameworks, coverage and limitations without unrelated inventories. Managed pages use kind managed and collection references/resources/attributes, retaining source coverage and build-local token scope; page exhaustion does not establish complete metadata. Managed member summaries keep identity, selection with unmatched names, coverage and per-collection counts; managed-members pages use collection types/exported_types/fields/methods/member_refs/call_edges/field_accesses/user_strings and carry the source selection and coverage. Android package summaries retain all declarations, engine identity and counts without decoded manifest text. Android manifest pages use kind android, facet manifest, offset and limit in UTF-16 code units; source_status preserves partial decoded coverage even when the retained text page is exhausted. Dart AOT summary preserves target/ABI/library identity, snapshot headers and pool lower bounds. String pages use kind dart-aot, collection package_uris/dart_uris/class_like_tokens; source coverage remains partial when the producer says partial. Native function Evidence requires kind native: view: {kind: "native", facet: "procedure"}. Facets select procedure, pseudocode, assembly, basic blocks, comments, callers/callees, references, unresolved calls, referenced strings/names, native API and high-pcode. Use nonnegative offset and a positive caller-selected limit (defaults 0 and 64); pseudocode uses UTF-16 code units, other native pages use rows. Returns artifact identity, parent Evidence ID, a distinct view digest, coverage, limitations and unknowns. Actual serialized size determines MCP transport admission; choose a smaller page or export the complete retained Evidence if needed.',
+        description: 'Inspect selected views of completed binary-layout, JavaScript application, native analyze_function, inspect_artifact, inventory_artifact, inspect_wasm_artifact, inspect_macho, decode_interface_builder, inspect_evm_interface, inspect_managed_artifact, inspect_managed_members, inspect_android_package, inspect_dart_aot or inspect_web_network_capture Evidence without repeating analysis. Historical capture summaries return identity and counts without bodies or archive inventories. Capture views page retained records: view {kind: "capture", detail: "preview" | "complete", offset: 0, limit: 20}; preview selects recorded headline fields and binary descriptors, complete returns exact records with all sidecars. Offsets follow the selected parent record order, preserving original producer ordinals. Paging never reopens the source or reruns the decoder. For inspect_pcap_capture parents, kind pcap pages endpoints, dns-queries, tls-sni, protocols, http-uris or unattributed-addresses. Select an exact query for dns-addresses, or a tshark/capinfos stream for UTF-16 diagnostics text. Page totals count retained facts; source coverage remains explicit. Qlog summaries keep profile/scope and counts; kind qlog pages traces, streams, loss-declarations, incomplete-records, contributions, ranges or final-sizes. Except traces, select trace_index; stream-specific facets also require exact stream_id and direction. Facts retain all-recorded-events-before-selection scope, and interval overlap or endpoint loss declarations do not prove retransmission or network loss. The api-surface view groups retained HAR requests by method, origin and format-rule path template; templated segments are inferences. It reads no headers or bodies and reports no query values. For a retained record use source: {kind: "retained-evidence", evidence_id: "<parent_evidence_id>"}. Use normalized_result.parent_evidence_id from a summary receipt. Source kind is required. Portable source uses {kind: "inline", evidence: <complete Evidence>}. For layout, JavaScript, inventory, WASM, Mach-O, Interface Builder, EVM, managed artifact, Android package and Dart AOT sources, request a summary with view: {kind: "summary"}; summary is a view kind and has no facet. The WASM summary gives validation, counts, WAT digest/length, tool profile and execution/network states without reading WAT text. Select a layout mitigations/linkage facet, one section/symbol/module, or a stable page. Module pages include assets, bundled and source modules; use node_id for ambiguous or unavailable paths. Typed module references use view {kind: "javascript", collection: "modules", projection: "references", where: {path: "main.js", kind: "javascript-module"}, offset: 0, limit: 64}; where matches exact retained strings (null selects unavailable paths). Rows include canonical identity, retained source-range count and observation support states. Source coverage and selection remain explicit; exhausting matching rows does not prove runtime loading or complete analysis. For exact file/native facts and processing gaps, use view {kind: "javascript-facts", where: {paths: ["package.json"]}, property_keys: ["name", "operation", "analysis_status"]}. Rows page original observations with canonical identities and Evidence; missing properties remain omitted. Paths match recorded artifact-path/source-range locations; optional kinds filter nodes. To discover field names without values, opt into include_available_property_keys: true with property_keys: []. Canonical identity and Evidence are separate from properties; keep each node_id/observation_id pair together when composing results. Inventory uses view: {kind: "inventory", collection: "occurrences", logical_paths: ["package.json"], offset: 0, limit: 64}. Inventory views page nodes, occurrences, edges or integrity contradictions; occurrence logical_paths matches exact recorded strings (omitted means all available, [] means none). source_complete distinguishes complete inventories from partial source records; page exhaustion does not prove absence in a partial source. WASM views use kind wasm and facet sections/imports/exports/candidates/glue/wat/headers/details/tool_profile; text facets use UTF-16 code units and source forms remain exact. Mach-O views use kind macho and facet entrypoints/architectures/build_metadata/load_commands/dependencies/imports/exports/segments/provenance; source_exhaustive false means unreturned rows may exist. Interface Builder views use kind interface-builder and collection documents/nodes/edges/coverage; nodes and edges accept an exact document relative_path. EVM summary returns all inferred interface candidates, carrier/decoded identities and explicit unknowns without hex or duplicate stdout. EVM views use kind evm and facet functions/bytecode_hex/stdout/stderr; function pages preserve the original candidate rows, and text offsets/limits count UTF-16 code units (hex has two characters per decoded byte). Exhausting candidate pages does not establish global interface completeness. Managed artifact summaries preserve complete identity/classification, metadata status, module/MVID, frameworks, coverage and limitations without unrelated inventories. Managed pages use kind managed and collection references/resources/attributes, retaining source coverage and build-local token scope; page exhaustion does not establish complete metadata. Managed member summaries keep identity, selection with unmatched names, coverage and per-collection counts; managed-members pages use collection types/exported_types/fields/methods/member_refs/call_edges/field_accesses/user_strings and carry the source selection and coverage. Android package summaries retain all declarations, engine identity and counts without decoded manifest text. Android manifest pages use kind android, facet manifest, offset and limit in UTF-16 code units; source_status preserves partial decoded coverage even when the retained text page is exhausted. Dart AOT summary preserves target/ABI/library identity, snapshot headers and pool lower bounds. String pages use kind dart-aot, collection package_uris/dart_uris/class_like_tokens; source coverage remains partial when the producer says partial. Native function Evidence requires kind native: view: {kind: "native", facet: "procedure"}. Facets select procedure, pseudocode, assembly, basic blocks, comments, callers/callees, references, unresolved calls, referenced strings/names, native API and high-pcode. Use nonnegative offset and a positive caller-selected limit (defaults 0 and 64); pseudocode uses UTF-16 code units, other native pages use rows. Returns artifact identity, parent Evidence ID, a distinct view digest, coverage, limitations and unknowns. Actual serialized size determines MCP transport admission; choose a smaller page or export the complete retained Evidence if needed.',
         inputSchema: inspectAnalysisViewInputSchema,
         outputSchema: evidenceResultOf(analysisViewResultSchema),
         examples: [
@@ -87,6 +87,47 @@ export const ANALYSIS_VIEW_TOOL_CONTRACTS = [
                     },
                 },
             },
+            {
+                title: "Read selected metadata and native facts by exact retained paths",
+                input: {
+                    source: {
+                        kind: "retained-evidence",
+                        evidence_id: RETAINED_EXAMPLE_ID,
+                    },
+                    view: {
+                        kind: "javascript-facts",
+                        where: { paths: ["package.json", "build/Release/addon.node"] },
+                        property_keys: [
+                            "name",
+                            "version",
+                            "bytes",
+                            "availability",
+                            "operation",
+                            "analysis_status",
+                        ],
+                        include_available_property_keys: true,
+                        offset: 0,
+                        limit: 32,
+                    },
+                },
+            },
+            {
+                title: "Read typed module reference facts from retained application Evidence",
+                input: {
+                    source: {
+                        kind: "retained-evidence",
+                        evidence_id: RETAINED_EXAMPLE_ID,
+                    },
+                    view: {
+                        kind: "javascript",
+                        collection: "modules",
+                        projection: "references",
+                        where: { path: "main.js", kind: "javascript-module" },
+                        offset: 0,
+                        limit: 64,
+                    },
+                },
+            },
         ],
     },
 ];

package/dist/contracts/android/androidToolContracts.js

@@ -26,7 +26,7 @@ export const ANDROID_TOOL_CONTRACTS = [
     {
         name: "search_android_classes",
         ...toolContractMetadata("search_android_classes"),
-        description: "Search complete decompiler class-name rows in an explicit local APK by case-sensitive substring. Empty query inventories all rows. Repeated names remain repeated and appear in duplicate_names; the provider accepts only class names for lookup, so these rows do not identify which same-name class node a later lookup selects. Retains artifact and engine identity; no APK execution.",
+        description: "Search complete top-level decompiler class-name rows in an explicit local APK by case-sensitive substring. Empty query inventories all rows. Repeated names remain repeated and appear in duplicate_names; the provider accepts only class names for lookup, so these rows do not identify which same-name class node a later lookup selects. Retains artifact and engine identity; no APK execution.",
         kind: "android-provider",
         inputSchema: androidInputSchemas.search_android_classes,
         outputSchema: evidenceResultOf(androidResultSchemas.search_android_classes),

package/dist/contracts/apktool/apktoolToolContracts.js

@@ -15,7 +15,7 @@ export const APKTOOL_TOOL_CONTRACTS = [
     {
         name: "decode_android_resources",
         ...toolContractMetadata("decode_android_resources"),
-        description: "Decode one local APK's resources with `apktool d --no-src` in a provider-owned workspace that is removed after projection: the readable AndroidManifest.xml, apktool.yml version and SDK facts, the app's string resources (default or one locale, bounded to 2000 entries), available string locales, and the decoded file count. The target APK is digest with SHA-256 before decoding; smali is skipped because Java-source recovery belongs to the JADX family.",
+        description: "Decode one local APK's resources with `apktool d --no-src` in a provider-owned workspace that is removed after projection: the readable AndroidManifest.xml, apktool.yml version and SDK facts, the app's string resources (default or selected locales, bounded to 2000 entries per table), selectable string locales, and the decoded file count. The target APK is digest with SHA-256 before decoding; smali is skipped because Java-source recovery belongs to the JADX family.",
         kind: "apktool-provider",
         inputSchema: apktoolInputSchemas.decode_android_resources,
         outputSchema: evidenceResultOf(apktoolResultSchemas.decode_android_resources),
@@ -28,6 +28,10 @@ export const APKTOOL_TOOL_CONTRACTS = [
                 title: "Decode one locale's strings",
                 input: { path: "/targets/Example.apk", locale: "de" },
             },
+            {
+                title: "Decode multiple locale string tables in one pass",
+                input: { path: "/targets/Example.apk", locales: ["de", "fr"] },
+            },
         ],
     },
 ];

package/dist/contracts/artifactComparisonExample.js

@@ -1,10 +1,9 @@
-import { digestCanonicalValue } from "../domain/canonicalDigest.js";
+import { artifactGraphDigest, artifactIdForContent, artifactManifestId, occurrenceIdForLocation, } from "../domain/artifactIdentity.js";
 import { createEvidence } from "../domain/evidence.js";
 import { jsonValueSchema } from "../domain/jsonValue.js";
 const inventory = (digit) => {
     const sha = digit.repeat(64);
-    const artifactId = `art_${digestCanonicalValue({ sha256: sha }, "Artifact example")}`;
-    const occurrenceId = `occ_${digestCanonicalValue({ root: artifactId }, "Artifact example")}`;
+    const artifactId = artifactIdForContent(sha);
     const nodes = [
         {
             artifact_id: artifactId,
@@ -19,7 +18,11 @@ const inventory = (digit) => {
     ];
     const occurrences = [
         {
-            occurrence_id: occurrenceId,
+            occurrence_id: occurrenceIdForLocation({
+                rootArtifactId: artifactId,
+                logicalPath: ".",
+                entryKind: "file",
+            }),
             artifact_id: artifactId,
             parent_occurrence_id: null,
             logical_path: ".",
@@ -35,30 +38,31 @@ const inventory = (digit) => {
             limitations: [],
         },
     ];
-    const graphSha256 = digestCanonicalValue({
+    const edges = [];
+    const integrityContradictions = [];
+    const graphSha256 = artifactGraphDigest({
         nodes,
         occurrences,
-        edges: [],
-        integrity_contradictions: [],
-    }, "Artifact example");
+        edges,
+        contradictions: integrityContradictions,
+    });
     return jsonValueSchema.parse({
         manifest: {
-            manifest_id: `agm_${digestCanonicalValue({
-                root_artifact_id: artifactId,
-                graph_sha256: graphSha256,
-            }, "Artifact example")}`,
+            manifest_id: artifactManifestId(artifactId, graphSha256),
             root_artifact_id: artifactId,
             root_sha256: sha,
             root_format: "file",
             graph_sha256: graphSha256,
             node_count: nodes.length,
             occurrence_count: occurrences.length,
-            edge_count: 0,
+            edge_count: edges.length,
         },
         nodes,
         occurrences,
-        edges: [],
+        edges,
         provenance: [],
+        integrity_contradictions: integrityContradictions,
+        coverage: { scope: "root", status: "complete" },
         limitations: [],
     });
 };

package/dist/contracts/artifactToolContracts.js

@@ -7,6 +7,7 @@ import { requireOutputSchema } from "./toolOutputSchemaPrimitives.js";
 import { appleAssetCatalogInputSchema } from "../domain/apple/appleAssetCatalog.js";
 import { dylibResolutionInputSchema } from "../domain/apple/dylibResolution.js";
 import { keyedArchiveInputSchema } from "../domain/apple/keyedArchive.js";
+import { localPathStringSchema } from "../domain/localPath.js";
 import { analysisDetailSchema } from "./analysisDetail.js";
 /** Exact caller boundary for deterministic artifact inventory. */
 export const artifactInventoryInputSchema = z.strictObject({
@@ -25,7 +26,7 @@ export const artifactExtractionInputSchema = z.strictObject({
 });
 /** Provider input containing the destination chosen by the local adapter. */
 export const artifactExtractionExecutionSchema = artifactExtractionInputSchema.extend({
-    output_root: z.string().min(1),
+    output_root: localPathStringSchema,
 });
 const exampleInputSchema = z.record(z.string(), jsonValueSchema);
 const examples = {

package/dist/contracts/browserScenarioToolContracts.js

@@ -21,7 +21,7 @@ export const BROWSER_SCENARIO_TOOL_CONTRACTS = [
     {
         name: "capture_browser_scenario",
         ...toolContractMetadata("capture_browser_scenario"),
-        description: "Run a controlled browser scenario when passive observation cannot exercise the application. Launch the selected executable or connect to a loopback CDP target, provide a start URL and actions, and select storage or artifacts when needed. Environment, empty storage, and a URL-only final capture are defaults. capture.network selects request_body, response_body, and header_values independently; selected content is returned inline with transaction and event references, byte digests, and explicit unavailable states. Credentials and declared secrets are redacted. Agents can run their own local fixture servers to control application responses. Actions run until completion or cancellation unless timeout_ms is set. Results are returned inline.",
+        description: "Run a controlled browser scenario when passive observation cannot exercise the application. Launch the selected executable or connect to a loopback CDP target, provide a start URL and actions, and select storage or artifacts when needed. Environment, empty storage, a URL-only final capture, and measured event-retention budgets are defaults. capture.network selects request_body, response_body, and header_values independently; capture.limits lets callers raise or lower the event count, retained-allocation estimates, network transaction count, and network content budgets. Selected content is returned inline with transaction and event references, byte digests, and explicit unavailable states. Budget omissions identify affected event kinds and network transactions. Credentials and declared secrets are redacted. Agents can run their own local fixture servers to control application responses. Actions run until completion or cancellation unless timeout_ms is set. Results are returned inline.",
         kind: "browser-provider",
         inputSchema: browserScenarioInputSchema,
         outputSchema: evidenceResultOf(browserScenarioCaptureSchema),

package/dist/contracts/browserToolContracts.js

@@ -4,6 +4,7 @@ import { analyzeWebBundleInputSchema, webBundleAnalysisSchema, } from "../domain
 import { observeWebSessionInputSchema, webObservationSessionSchema, } from "../domain/browserSession.js";
 import { discoverWebMcpToolsInputSchema, webMcpDiscoverySchema, } from "../domain/webMcpDiscovery.js";
 import { browserCaptureComparisonInputSchema, browserCaptureComparisonSchema, } from "../domain/browserCaptureComparison.js";
+import { DEFAULT_BROWSER_SCENARIO_CAPTURE_LIMITS } from "../domain/browserScenarioCaptureLimits.js";
 import { captureWebScreenshotInputSchema, compareWebScreenshotsInputSchema, webScreenshotDiffSchema, webScreenshotSchema, } from "../domain/webScreenshot.js";
 import { toolContractMetadata } from "./toolEffects.js";
 import { evidenceResultOf } from "./toolOutputSchemaPrimitives.js";
@@ -55,6 +56,7 @@ const exampleScenarioCapture = () => ({
             header_values: false,
         },
         event_families: [],
+        limits: DEFAULT_BROWSER_SCENARIO_CAPTURE_LIMITS,
     },
     duration_ms: 10,
     steps: [
@@ -87,7 +89,16 @@ const exampleScenarioCapture = () => ({
             completeness: scenarioCompleteness,
         },
     ],
-    events: { retained: 0, dropped: 0, items: [] },
+    events: {
+        retained: 0,
+        dropped: 0,
+        items: [],
+        omissions: {
+            by_kind: [],
+            network_transactions: [],
+            network_transaction_range: null,
+        },
+    },
     completeness: scenarioCompleteness,
     limitations: [],
 });

package/dist/contracts/compactInputSchema.js

@@ -1,11 +1,9 @@
-import { schemaArrays, schemaChildren, schemaMaps, } from "./inputSchemaPresentation.js";
+import { schemaArrays, schemaChildren, schemaMaps, schemaLiteralValues, } from "./jsonSchemaKeywords.js";
 // Kimi expands schema-local references before sending tools to Moonshot.
 // Compact advertisements must fit after expansion, independently of client
 // reference handling. Canonical server-side validation remains unchanged.
 /** Annotation keys that carry guidance but no validation semantics. */
 const annotationKeys = new Set(["description", "examples", "default", "title"]);
-/** Keys whose values are literal data, never nested schemas to rewrite. */
-const dataKeys = new Set(["const", "enum", "examples", "default"]);
 const definitionKeys = new Set(["$defs", "definitions"]);
 // An empty schema accepts every JSON value. Kimi otherwise infers string.
 const jsonValueTypes = [
@@ -16,6 +14,9 @@ const jsonValueTypes = [
     "number",
     "string",
 ];
+// An empty item schema accepts every JSON value, including arbitrarily nested
+// arrays, while satisfying clients that require `items` for array types.
+const jsonValueSchema = () => ({ type: [...jsonValueTypes], items: {} });
 const isSchemaObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const serializedBytes = (value) => Buffer.byteLength(JSON.stringify(value), "utf8");
 const schemaDepth = (value, depth = 0) => {
@@ -35,7 +36,7 @@ const rebuildSchemaPositions = (node, rebuild) => {
         return node;
     const out = {};
     for (const [key, value] of Object.entries(node)) {
-        if (dataKeys.has(key)) {
+        if (schemaLiteralValues.has(key)) {
             out[key] = value;
             continue;
         }
@@ -112,7 +113,7 @@ const inlineWithinBudget = (root, budgetBytes) => {
         }
         else if (isSchemaObject(value)) {
             if (position === "schema" && Object.keys(value).length === 0) {
-                yield JSON.stringify({ type: jsonValueTypes });
+                yield JSON.stringify(jsonValueSchema());
                 return;
             }
             if (position === "schema" && typeof value.$ref === "string") {
@@ -224,7 +225,13 @@ const reduceToShallowProperties = (schema) => {
             : {};
         return [
             name,
-            { ...(type === undefined ? {} : { type }), ...description },
+            {
+                ...(type === undefined ? {} : { type }),
+                // Reduced inputs intentionally omit nested validation, but clients
+                // still require an item schema to accept an array declaration.
+                ...(types?.includes("array") ? { items: jsonValueSchema() } : {}),
+                ...description,
+            },
         ];
     }));
     return {

package/dist/contracts/fridaToolContracts.js

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import { localPathStringSchema } from "../domain/localPath.js";
 import { evidenceResultOf } from "./toolOutputSchemaPrimitives.js";
 import { toolContractMetadata } from "./toolEffects.js";
 import { isValidFridaRemoteAddress } from "./fridaRemoteAddress.js";
@@ -94,7 +95,7 @@ export const FRIDA_TOOL_CONTRACTS = [
             mode: z.enum(["attach", "spawn"]),
             ...deviceSelector.shape,
             pid: z.number().int().positive().optional(),
-            program: z.string().min(1).optional(),
+            program: localPathStringSchema.optional(),
             argv: z.array(z.string()).optional(),
         })
             .refine((value) => ((value.mode === "attach" &&
@@ -123,7 +124,7 @@ export const FRIDA_TOOL_CONTRACTS = [
             session_id: sessionId,
             source_kind: z.enum(["inline", "file"]),
             source: z.string().optional(),
-            path: z.string().min(1).optional(),
+            path: localPathStringSchema.optional(),
         })
             .refine((value) => (value.source_kind === "inline" &&
             value.source !== undefined &&
@@ -225,11 +226,11 @@ export const FRIDA_TOOL_CONTRACTS = [
             mode: z.enum(["attach", "spawn"]),
             ...deviceSelector.shape,
             pid: z.number().int().positive().optional(),
-            program: z.string().min(1).optional(),
+            program: localPathStringSchema.optional(),
             argv: z.array(z.string()).optional(),
             source_kind: z.enum(["inline", "file"]),
             source: z.string().optional(),
-            path: z.string().min(1).optional(),
+            path: localPathStringSchema.optional(),
             duration_ms: z.number().int().min(0).max(60_000).default(1_000),
         })
             .refine((value) => !(value.device_id !== undefined && value.remote !== undefined) &&

package/dist/contracts/gdbToolContracts.js

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import { localPathStringSchema } from "../domain/localPath.js";
 import { evidenceResultOf } from "./toolOutputSchemaPrimitives.js";
 import { toolContractMetadata } from "./toolEffects.js";
 const sessionId = z.string().uuid();
@@ -24,9 +25,7 @@ export const GDB_TOOL_CONTRACTS = [
         kind: "native-provider",
         description: "Start a BYO GDB process in MI3 mode when available, suppress startup files, and disable auto-loading. Persistent GDB sessions are available only on Linux, where REA can verify live inferior output descriptors through /proc before detaching; macOS descriptor verification is not implemented, and Windows Job Object cleanup can terminate debugger inferiors. Optionally set inferior_tty to a caller-selected terminal for future inferior runs; REA verifies the setting through GDB/MI before the session becomes ready. The selected terminal must remain available after GDB exits. A live inferior can be detached during close only while this durable output sink remains verified. The session persists in this REA MCP server process and receives an explicit session ID.",
         inputSchema: z.strictObject({
-            inferior_tty: z
-                .string()
-                .min(1)
+            inferior_tty: localPathStringSchema
                 .optional()
                 .describe("Caller-selected terminal path for future inferior runs. GDB must report the exact configured path before the session is ready."),
         }),

package/dist/contracts/inputSchemaPresentation.js

@@ -1,26 +1,5 @@
 import { isDeepStrictEqual } from "node:util";
-export const schemaMaps = new Set([
-    "$defs",
-    "definitions",
-    "properties",
-    "patternProperties",
-    "dependentSchemas",
-    "dependencies",
-]);
-export const schemaArrays = new Set(["allOf", "anyOf", "oneOf", "prefixItems"]);
-export const schemaChildren = new Set([
-    "items",
-    "additionalItems",
-    "contains",
-    "additionalProperties",
-    "unevaluatedProperties",
-    "unevaluatedItems",
-    "propertyNames",
-    "not",
-    "if",
-    "then",
-    "else",
-]);
+import { schemaArrays, schemaChildren, schemaMaps, } from "./jsonSchemaKeywords.js";
 const isObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const resolveReference = (root, reference) => {
     if (reference === "#")
@@ -114,6 +93,170 @@ const inputGroup = (branch) => {
         .map((name) => `[${name}]`);
     return [...required, ...optional].join(" + ");
 };
+const isBooleanLiteralSchema = (schema) => isObject(schema) &&
+    (typeof schema.const === "boolean" ||
+        (Array.isArray(schema.enum) &&
+            schema.enum.length > 0 &&
+            schema.enum.every((value) => typeof value === "boolean")));
+const isBooleanSchema = (schema) => isObject(schema) &&
+    (schema.type === "boolean" || isBooleanLiteralSchema(schema));
+const preserveSharedDefault = (schema, branches) => {
+    if (schema.default !== undefined)
+        return;
+    const defaults = branches
+        .filter(isObject)
+        .map((branch) => branch.default)
+        .filter((value) => value !== undefined);
+    if (defaults.length > 0 &&
+        defaults.every((value) => isDeepStrictEqual(value, defaults[0])))
+        schema.default = defaults[0];
+};
+const normalizeAdvertisedSchema = (value) => {
+    if (!isObject(value))
+        return { schema: value, changed: false };
+    const node = { ...value };
+    let changed = false;
+    const normalizeMap = (map) => Object.fromEntries(Object.entries(map).map(([name, child]) => {
+        const result = normalizeAdvertisedSchema(child);
+        changed ||= result.changed;
+        return [name, result.schema];
+    }));
+    const normalizeList = (list) => list.map((child) => {
+        const result = normalizeAdvertisedSchema(child);
+        changed ||= result.changed;
+        return result;
+    });
+    for (const [key, child] of Object.entries(value)) {
+        if (schemaMaps.has(key) && isObject(child)) {
+            node[key] = normalizeMap(child);
+        }
+        else if (schemaArrays.has(key) &&
+            key !== "anyOf" &&
+            key !== "oneOf" &&
+            Array.isArray(child)) {
+            node[key] = normalizeList(child).map((result) => result.schema);
+        }
+        else if (schemaChildren.has(key) &&
+            key !== "not" &&
+            key !== "if" &&
+            key !== "then" &&
+            key !== "else") {
+            const results = Array.isArray(child)
+                ? normalizeList(child)
+                : [normalizeAdvertisedSchema(child)];
+            const nestedChanged = results.some((result) => result.changed);
+            if (key === "contains" &&
+                nestedChanged &&
+                value.maxContains !== undefined) {
+                delete node.contains;
+                delete node.minContains;
+                delete node.maxContains;
+                changed = true;
+            }
+            else {
+                node[key] = Array.isArray(child)
+                    ? results.map((result) => result.schema)
+                    : results[0]?.schema;
+                changed ||= nestedChanged;
+            }
+        }
+    }
+    if (typeof node.const === "boolean") {
+        delete node.const;
+        if (node.type === undefined)
+            node.type = "boolean";
+        changed = true;
+    }
+    if (Array.isArray(node.enum) &&
+        node.enum.length > 0 &&
+        node.enum.every((item) => typeof item === "boolean")) {
+        delete node.enum;
+        if (node.type === undefined)
+            node.type = "boolean";
+        changed = true;
+    }
+    const negated = Object.hasOwn(value, "not")
+        ? normalizeAdvertisedSchema(value.not)
+        : undefined;
+    if (negated?.changed) {
+        // Widening a predicate under `not` narrows the containing schema.
+        changed = true;
+        delete node.not;
+    }
+    else if (negated !== undefined) {
+        node.not = negated.schema;
+    }
+    const conditional = Object.hasOwn(value, "if")
+        ? normalizeAdvertisedSchema(value.if)
+        : undefined;
+    const thenBranch = Object.hasOwn(value, "then")
+        ? normalizeAdvertisedSchema(value.then)
+        : undefined;
+    const elseBranch = Object.hasOwn(value, "else")
+        ? normalizeAdvertisedSchema(value.else)
+        : undefined;
+    if (conditional?.changed) {
+        // Changing the predicate can route canonical-valid inputs into a rejecting branch.
+        changed = true;
+        delete node.if;
+        delete node.then;
+        delete node.else;
+    }
+    else {
+        if (conditional !== undefined)
+            node.if = conditional.schema;
+        if (thenBranch !== undefined) {
+            node.then = thenBranch.schema;
+            changed ||= thenBranch.changed;
+        }
+        if (elseBranch !== undefined) {
+            node.else = elseBranch.schema;
+            changed ||= elseBranch.changed;
+        }
+    }
+    for (const combinator of ["anyOf", "oneOf"]) {
+        const branches = value[combinator];
+        if (!Array.isArray(branches))
+            continue;
+        const normalized = normalizeList(branches);
+        const schemas = normalized.map((result) => result.schema);
+        const branchesChanged = normalized.some((result) => result.changed);
+        if (combinator === "oneOf" && branchesChanged) {
+            const booleanLiteralsOnly = branches.every(isBooleanLiteralSchema);
+            if (booleanLiteralsOnly) {
+                node.type = "boolean";
+                preserveSharedDefault(node, schemas);
+                delete node.oneOf;
+                changed = true;
+                continue;
+            }
+            // `anyOf` retains branch guidance without allowing widened branches to
+            // reject inputs that were accepted by exactly one canonical branch.
+            delete node.oneOf;
+            if (Array.isArray(node.anyOf)) {
+                const existingAllOf = Array.isArray(node.allOf) ? node.allOf : [];
+                node.allOf = [...existingAllOf, { anyOf: schemas }];
+            }
+            else {
+                node.anyOf = schemas;
+            }
+            changed = true;
+            continue;
+        }
+        if (branchesChanged &&
+            schemas.length > 0 &&
+            schemas.every(isBooleanSchema)) {
+            node.type = "boolean";
+            preserveSharedDefault(node, schemas);
+            delete node[combinator];
+            changed = true;
+            continue;
+        }
+        node[combinator] = schemas;
+        changed ||= branchesChanged;
+    }
+    return { schema: node, changed };
+};
 // Anthropic tool input schemas reject anyOf, oneOf, and allOf at the root, and
 // clients then drop the tool or advertise it without parameters. Present a
 // root union of strict object groups as one object whose properties are the
@@ -137,8 +280,8 @@ const flattenRootObjectUnion = (root) => {
             variants.set(name, known);
         }
     const required = sharedRequiredProperties(branches);
-    // A field unique to a group still needs that group's required partners.
-    // Counting properties alone would let optional fields pad an incomplete pair.
+    // A coarse property minimum rejects underspecified objects. Partner fields
+    // and exact group membership remain enforced by the canonical runtime parser.
     const fewestRequired = Math.min(...branches.map((branch) => requiredProperties(branch).length));
     // Groups that differ only in property values add no caller guidance.
     const groups = [...new Set(branches.map(inputGroup))];
@@ -169,7 +312,7 @@ export const presentInputJsonSchema = (root, describeProperty) => {
     const flattened = flattenRootObjectUnion(root);
     const described = describeSchema(flattened, flattened, describeProperty);
     if (!isObject(described))
-        return flattened;
+        return normalizeAdvertisedSchema(flattened).schema;
     const { dependencies: _dependencies, dependentRequired: _dependentRequired, ...presentation } = described;
     const rootDependencies = isObject(described.dependentRequired)
         ? described.dependentRequired
@@ -185,64 +328,15 @@ export const presentInputJsonSchema = (root, describeProperty) => {
             ]
             : []);
     if (dependencyGuidance.length === 0)
-        return presentation;
+        return normalizeAdvertisedSchema(presentation).schema;
     const description = [
         typeof presentation.description === "string"
             ? presentation.description
             : undefined,
         ...dependencyGuidance,
     ].filter((text) => text !== undefined);
-    return { ...presentation, description: description.join(" ") };
-};
-/**
- * Clients that render advertised inputs into SDK declarations expand
- * schema-local references with a shared per-input budget: Pi 1.1.0 code-mode
- * allows 32 expansions and degrades every later reference to `unknown`
- * (morluto/rea#1632), hiding the fields those references describe. The budget
- * counts conservatively — every resolvable, non-cyclic reference occurrence
- * in every schema position — so any reference-resolving client stays within
- * its measured limit.
- */
-export const advertisedReferenceExpansionBudget = 32;
-const definitionKeys = new Set(["$defs", "definitions"]);
-const countReferenceExpansions = (node, root, active, count) => {
-    if (Array.isArray(node)) {
-        node.forEach((child) => countReferenceExpansions(child, root, active, count));
-        return;
-    }
-    if (!isObject(node))
-        return;
-    if (typeof node.$ref === "string" && !active.has(node.$ref)) {
-        const target = resolveReference(root, node.$ref);
-        if (target !== undefined) {
-            count.value += 1;
-            countReferenceExpansions(target, root, new Set([...active, node.$ref]), count);
-            return;
-        }
-    }
-    for (const [key, value] of Object.entries(node)) {
-        if (definitionKeys.has(key))
-            continue;
-        if (schemaMaps.has(key) && isObject(value)) {
-            for (const child of Object.values(value))
-                countReferenceExpansions(child, root, active, count);
-        }
-        else if (schemaArrays.has(key) || schemaChildren.has(key)) {
-            countReferenceExpansions(value, root, active, count);
-        }
-    }
-};
-/** Conservative client expansion count over every schema position. */
-export const countLocalReferenceExpansions = (schema) => {
-    const count = { value: 0 };
-    countReferenceExpansions(schema, schema, new Set(), count);
-    return count.value;
+    return normalizeAdvertisedSchema({
+        ...presentation,
+        description: description.join(" "),
+    }).schema;
 };
-/**
- * Keep the shared-definition form of an advertised input while clients can
- * still resolve it. Once rendering would exhaust the reference budget, fall
- * back to the inline projection, which carries no shared definitions for the
- * nonrecursive schemas this repository advertises, so every field renders
- * with complete structure in every reference-resolving client.
- */
-export const inputSchemaWithinReferenceExpansionBudget = (shared, inline, budget) => countLocalReferenceExpansions(shared) <= budget ? shared : inline();

package/dist/contracts/javascript/javascriptExportShapeComparisonExample.js

@@ -54,6 +54,7 @@ const statistics = {
     text_bytes_read: 60,
     invalid_utf8_files: 0,
     parsed_javascript_files: 1,
+    skipped_javascript_files: 0,
     visited_ast_nodes: 12,
     findings: 1,
     modules: 0,