Identify the provider producing evidence for this session.
+Optionaloperation: AnalysisOperationAdd one successful public observation to the session ledger.
+Atomically record derived Evidence and its approved residual unknown.
+Create an approved residual unknown and immutable mutation evidence.
+Describe the active binary session.
Update one unknown using compare-and-swap revision semantics.
+Check whether current head is a bundle-valid resolved state.
+Deterministically route disjoint operations without eagerly starting children.
+Parse inputs again at the direct-call boundary, then dispatch exhaustively.
Optionalsignal: AbortSignalBounded, session-owned set of immutable evidence records.
+Clear records when the owning session closes.
+Export records in deterministic, semantically irrelevant ID order.
+Return a detached immutable Evidence value by semantic ID.
+Check whether one immutable Evidence ID is present in this ledger.
+Validate an entire bundle before atomically merging its records.
+Query current heads in stable ID order.
+Record evidence idempotently; conflicting content is rejected.
+Create one approved unknown and atomically append its mutation evidence.
+Atomically record derived Evidence and an approved residual unknown.
+Apply one approved full-state update using optimistic revision matching.
+Return current resolution validity; imported invalid states are rejected.
+Expected refusal or runtime failure from the process capture adapter.
+Optionalmessage: stringOptionalmessage: stringOptionaloptions: ErrorOptionsReadonlyoperationSelected provider cannot execute a declared analysis operation.
+AbstractBase class for expected analysis, provider, and session failures.
+Optionalmessage: stringOptionalmessage: stringOptionaloptions: ErrorOptionsAbstract Readonly_Caller input failed provider-neutral application parsing.
+Optionaloptions: ErrorOptionsProvider output failed provider-neutral application parsing.
+Optionaloptions: ErrorOptionsProvider-neutral invalid analysis input or output at an application boundary.
+Optionalmessage: stringOptionalmessage: stringOptionaloptions: ErrorOptionsProvider-neutral operation exceeded its declared execution deadline.
+Artifact inventory or extraction failed a typed safety boundary.
+Readonly_ReadonlypathEvidence bundle filesystem access failed within the configured policy.
+Optionaloptions: ErrorOptionsEvidence identity, schema, or bundle manifests failed integrity checks.
+Optionalmessage: stringOptionalmessage: stringOptionaloptions: ErrorOptionsA bounded evidence ledger cannot accept more records or serialized bytes.
+Optionalmessage: stringOptionaloptions: ErrorOptionsReadonlycodeReadonlydiagnosticReadonlysafeA provider adapter failed outside its more precise typed variants.
+Optionaloptions: ErrorOptionsNo configured provider can satisfy a requested operation.
+Residual-unknown mutation failed a lifecycle, reference, or CAS invariant.
+Optionaloptions: ErrorOptionsReadonlyoptionsOptionalsignal: AbortSignalConcrete analysis provider backed by REA's private Hopper bridge.
+Build a validated atomic provider observation at an adapter boundary.
+Extract selected inventory occurrences into an exclusively owned absent root.
+Optionalsignal: AbortSignalClassify executable formats from bytes while retaining path-specific roles.
+Optionalproducer: {Inventory one local artifact without extracting or mounting it.
+Optionalsignal: AbortSignalProject independently paged graph collections from one inventory snapshot.
+Scan an artifact once and retain the complete immutable graph for projection.
+Optionalsignal: AbortSignalExecute one provider-native semantic operation with atomic provenance.
+Compare two validated canonical Evidence v2 bundles without session state.
+Validate a source bundle and atomically export canonical bytes.
+Validate and merge one bundle using the same bounded ledger as MCP.
+Read and validate a bounded evidence bundle inside an approved root.
+Atomically write deterministic evidence JSON inside an approved root.
+Capture bounded, root-aliased filesystem state without following symlinks.
+Optionalsignal: AbortSignalDownload, verify, install, and read back the official Hopper Linux package.
+Select the native package manager and authorization boundary without shell evaluation.
+Interpret ldd output conservatively so a present but broken launcher is unhealthy.
+Parse an os-release document without executing its shell syntax.
+Read and classify the current Linux distribution.
+Start bounded HTTP and WebSocket replay endpoints on IPv4 loopback only.
+Download, verify, and install Hopper into the current user's Applications directory.
+Execute one scenario through a typed expected-failure channel.
+Optionalsignal: AbortSignalProbe the actual native PTY seam instead of inferring support from the OS name.
+Normalize and redact one terminal/protocol payload under scenario rules.
+Verify run-token ownership before signaling a POSIX process group.
+Start bounded process-tree sampling and expose an awaited stop.
+Import a reference source directory into a committed historical source graph.
+The import is deterministic, parallel-safe, and never executes source, hooks, +git subprocesses, or network requests. Secret-like paths are redacted before +they are committed to the graph.
+Convert bounded reader observations into graph entries and parsed edges.
+Optionalsignal: AbortSignalValidate limits, authorize root, and build non-executing path filters.
+Read Git metadata for a directory using isomorphic-git.
+No git subprocess or network is used; only the local .git object store is read.
Optionalsignal: AbortSignalBack up, atomically update, and semantically read back Codex TOML configuration.
+OptionalhopperPath: stringDetect supported coding agents from stable per-user installation markers.
+Describe every client location that setup or uninstall may own.
+Remove only REA-owned registrations and managed files, optionally including local state.
+Identify the npm prefix only when it owns the running package.
+Check the npm registry and update the same global REA installation.
+Create the npm registry and subprocess effects for a production upgrade.
+Resolve a required named output schema or reject contract drift.
+Compare complete inventory pages without treating missing evidence as equality.
+Compare canonical bundle membership and only explicitly paired observations.
+Reconstruct bounded direct-callee paths from explicit analyze_function Evidence.
+Find observed runtime changes and separately report static change candidates.
+Project expected failures into exhaustive, secret-safe caller fields.
+Build deterministic Evidence v2 from an immutable artifact subject.
+Parse evidence and reject a syntactically valid but tampered semantic ID.
+Project records into a deterministic bundle whose order has no semantics.
+Parse records, verify semantic IDs, and reject inconsistent manifests.
+Encode a validated bundle as byte-stable RFC 8785 canonical JSON.
+Compare two explicit function Evidence page sets without fuzzy matching.
+Parse and assemble up to 100 mutually consistent analyze_function pages.
+Parse page entries and continuation metadata returned by list operations.
+Strictly parse a complete Hopper function dossier at the provider boundary.
+Evaluate scenario authority before any process or filesystem side effect occurs.
+Parse untrusted process scenario input and apply safe default budgets.
+Compare bounded captures without equating missing or incompatible evidence.
+Find active unknowns that affect a comparison or one of its sources.
+Aggregate and bound deterministic probes for unresolved claims.
+Select the latest revision of each residual unknown.
+Verify only explicitly declared claims; no global equivalence is inferred.
+Classify a reference source path deterministically.
+Build and internally commit a normalized historical source graph.
+Build a deterministic, relocation-independent manifest for a source graph.
+Parse a graph and reject stale or caller-invented root commitments.
+Parse and verify a historical source manifest's semantic identifier.
+Parse ESM/CommonJS imports and dynamic imports from source bytes.
+Create stable identity from immutable question and domain fields.
+Apply a complete, revision-guarded replacement while preserving identity.
+Correlate only caller-declared static/runtime hypotheses.
+Atomically record derived Evidence with an optional approved unknown.
+Register Evidence-backed deterministic artifact comparison.
+Register deterministic artifact inventory and safe extraction operations.
+Register canonical Evidence bundle comparison.
+Register provider-backed contracts that return atomic Evidence v2 observations.
+Register explicit Evidence-backed function comparison.
+Register Evidence-composed differential investigation workflows.
+Register provider-neutral static inspection operations.
+Register deterministic process-capture comparison and contradiction tracking.
+Check exact ownership for a single Evidence record.
+Resolve caller-supplied records to their immutable session-owned values.
+Project the public contract fields accepted by MCP tool registration.
+Provider session bound to exactly one parsed artifact.
+Optionaloptions: ExecutionOptionsAtomic successful provider observation with exact producing provenance.
+ReadonlylimitationsReadonlylocationsReadonlyproviderReadonlyrawReadonlyresultReadonlysubjectProvider-neutral application capability for one analysis operation.
+Optionaloptions: ExecutionOptionsFactory and capability declaration for an analysis implementation.
+Already-approved extraction request from a caller-owned policy boundary.
+ReadonlyinputReadonlyinputReadonlylimitReadonlylimitsReadonlyoccurrenceReadonlyoffsetReadonlyoutputMutable internal occurrence used until root-bound IDs are known.
+Immutable inventory produced by one complete artifact scan.
+ReadonlyedgesReadonlylimitationsReadonlylimitsReadonlymanifestReadonlynodesReadonlyoccurrencesReadonlyprovenanceA closeable Hopper port created for exactly one parsed target.
-Invoke a declared bridge operation with JSON-safe arguments. -Implementations return expected Hopper, timeout, and cancellation failures -as values and must honor an already-aborted signal.
-Optionaloptions: { signal?: AbortSignal }Target lifecycle used by CLI and MCP without exposing a concrete provider.
+Optionaloptions: ExecutionOptionsOptionalfilters: {Optionaloptions: {Optionaloperation: AnalysisOperationApplication-owned capability for invoking one official Hopper tool.
-Invoke a declared bridge operation with JSON-safe arguments. -Implementations return expected Hopper, timeout, and cancellation failures -as values and must honor an already-aborted signal.
-Optionaloptions: { signal?: AbortSignal }Parsed Linux distribution information used for support and package selection.
+Download response kept independent of Node's global fetch implementation.
+External effects required to install the official Linux package.
+Owned loopback replay endpoints and their bounded protocol observations.
+External effects used by the bounded macOS Hopper installer.
+Optional ReadonlyexpectedExpected launcher identity, checked only while the leader exists.
+Optional ReadonlyexpectedExpected launcher parent, checked only while the leader exists.
+ReadonlyleaderReadonlyprocessReadonlyrunReadonlyentriesReadonlylimitationsReadonlyparseReadonlyrelationshipsTyped expected failure returned by historical-source imports.
+Bounded import request paired with mandatory operator policy.
+ReadonlycallerOptional ReadonlyexcludeOptional ReadonlyimporterOptional ReadonlyimporterOptional ReadonlylimitsReadonlypolicyReadonlyrootOptional ReadonlysignalFilesystem boundary used by the contained uninstall workflow.
+npm filesystem queries used to identify the installation being updated.
+Effects required to inspect and update the installed CLI.
+Complete or partially assembled inventory used by comparison workflows.
+ReadonlycompleteReadonlyedgesReadonlylimitationsReadonlymanifestReadonlynodesReadonlyoccurrencesOptional ReadonlyarchitectureOptional ReadonlyavailableReadonlyformatReadonlykindReadonlyloaderReadonlypathReadonlysha256Optional ReadonlysourceReadonlydetailsReadonlymessageReadonlytagOptional ReadonlyauthorityOptional ReadonlyconfidenceOptional ReadonlyenvironmentOptional ReadonlyevidenceOptional ReadonlylimitationsOptional ReadonlylocationsReadonlyoperationReadonlyparametersOptional ReadonlypredicateOptional ReadonlyrawReadonlyresultMinimal immutable local artifact identity accepted by Evidence v2.
+Optional ReadonlyarchitectureReadonlyformatReadonlypathReadonlysha256ReadonlydimensionReadonlyleftReadonlyleftReadonlylimitationsReadonlylinksReadonlyprovidersReadonlyrightReadonlyrightReadonlystatusReadonlytextVerified, bounded function observation assembled from Evidence pages.
+ReadonlycollectionsReadonlyevidenceReadonlyinstructionReadonlylimitationsReadonlyprocedureReadonlyproviderReadonlypseudocodeReadonlysubjectReadonlywritableA bounded process observation with explicit incompleteness metadata.
+ReadonlycleanupReadonlyexitReadonlyfiles_Readonlyfiles_Readonlyfilesystem_ReadonlyframesReadonlylimitationsReadonlynormalizationReadonlyprocess_Readonlyprotocol_Readonlyresidual_Readonlyschema_ReadonlytruncatedOperator-owned policy for process capture.
+ReadonlyallowedReadonlyallowReadonlyenabledReadonlyexecutableReadonlyworkingA bounded loopback replay observation.
+Readonlyat_ReadonlydataReadonlydirectionReadonlymethodReadonlyoutcomeReadonlypathReadonlyprotocolReadonlysequenceOne bounded terminal observation.
+Operator-approved roots, exclusions, and hard caps for source imports.
+Optional session services used by enhanced tool registration.
+ReadonlyactiveReadonlyloggerReadonlyrecordReadonlyrecordOptional session services used by direct tool registration.
+ReadonlyactiveReadonlyloggerReadonlyrecordReadonlyrecordRegister MCP-only target lifecycle operations on a long-lived session.
+Closed operations accepted by provider-backed analysis sessions.
+Structured outcome for every expected Linux installation failure.
+Result of installing the official Hopper macOS application.
+Runtime availability of the native PTY adapter on this host.
+Adapter-owned interactive confirmation for a fully discovered setup plan.
+Output channel policy for the package manager subprocess.
+Caller-visible outcome of checking and updating the REA CLI.
+Closed provider operation names exposed by direct analysis adapters.
+Parsed artifact derivation edge.
+Parsed paginated extraction result.
+Parsed deterministic artifact graph manifest.
+Parsed paginated inventory result.
+Parsed artifact graph node.
+Parsed artifact occurrence.
+Stable tag for an expected analysis failure.
+Strict analyzed-function dossier shared by provider and comparison boundaries.
+A safe, caller-visible process-policy decision.
+A parsed, bounded dynamic process observation scenario.
+ConstConstConstConstCanonical complete inputs used to advertise artifact comparison.
+Readonlyleft: {Readonlyright: {ConstArtifact-graph inventory and explicitly approved safe extraction contracts.
+ConstExact caller boundary for approved artifact extraction.
+ConstExact caller boundary for deterministic artifact inventory.
+ConstCanonical explicit function pair used in public contract examples.
+Readonlyleft: {Readonlyright: {ConstConstCanonical inputs for comparison-composed investigation contracts.
+ConstConstConstConstProvider-neutral semantic operations backed initially by macOS utilities.
+ConstMinimal valid process capture used only in public contract examples.
+ConstCanonical examples for contracts whose required inputs have no defaults.
+ConstExact Evidence v2 schemas for provider-neutral artifact graph operations.
+ConstExact structured-content schemas for composed analysis workflows.
+ConstExact Evidence v2 schemas for provider-neutral native inspection.
+ConstExact structured-content schemas for the direct Hopper operations.
+ConstExact structured-content schemas for target lifecycle operations.
+ConstExact example inputs for residual-unknown lifecycle contracts.
+ConstStrict Evidence-backed input for deterministic artifact comparison.
+ConstBounded deterministic artifact comparison with an independently paged delta.
+ConstSafe extraction observation with containment and cleanup verification.
+ConstInventory observation containing stable manifest identity and bounded pages.
+ConstStrict bounded input for canonical Evidence bundle comparison.
+ConstDeterministic classified delta between two canonical Evidence bundles.
+ConstStrict, bounded input for explicit call-path reconstruction.
+ConstEvidence-cited, bounded directed call-path result.
+ConstStrict bounded input for aggregating existing comparison Evidence.
+ConstTruthful aggregate: runtime observations remain separate from static candidates.
+ConstStable tags exposed by safe analysis-error projections.
+ConstStrict, provider-neutral record for one successful public observation.
+ConstConstStrict bounded input for explicit function-to-function comparison.
+ConstDeterministic dimension-classified function comparison Evidence payload.
+ConstConstConstConstConstConstConstExact serialized shape of a bounded process capture.
+ConstExact boundary schema for bounded dynamic process scenarios.
+ConstComparison classification that never equates incomplete evidence.
+ConstPure normalized comparison between two captures.
+ConstConstFinite, typed behavioral and structural specification.
+ConstBounded reconstruction-verification input.
+ConstEvidence-cited result over every declared claim, independently paged.
+ConstConstInput for deterministic creation of one residual unknown.
+ConstConstExplicit optimistic-concurrency update command for one unknown.
+ConstStrict bounded input for explicit static/runtime hypothesis correlation.
+ConstDeterministic, paginated static/runtime correlation payload.
+ConstProvider identity for deterministic cross-artifact comparisons.
+Readonlyid: "rea-artifact-comparison"Readonlyname: "REA artifact comparison"Readonlyversion: "1"ConstProvider identity for deterministic Evidence bundle comparisons.
+Readonlyid: "rea-bundle-comparison"Readonlyname: "REA Evidence bundle comparison"Readonlyversion: "1"ConstProvider identity for Evidence-backed call-path reconstruction.
+Readonlyid: "rea-call-path"Readonlyname: "REA call path reconstruction"Readonlyversion: "1"ConstProvider identity for comparison-Evidence behavior aggregation.
+Readonlyid: "rea-changed-behavior"Readonlyname: "REA changed behavior investigation"Readonlyversion: "1"ConstFail-closed evidence filesystem policy used without approved roots.
+ConstFail-closed process policy used when operator configuration is absent.
+ConstProvider identity for deterministic cross-function comparisons.
+Readonlyid: "rea-function-comparison"Readonlyname: "REA function comparison"Readonlyversion: "1"ConstProvider identity for controlled process-capture evidence.
+Readonlyid: "rea-process"Readonlyname: "REA deterministic process harness"Readonlyversion: "1"ConstProvider identity for finite reconstruction specification verification.
+Readonlyid: "rea-reconstruction-verifier"Readonlyname: "REA reconstruction verifier"Readonlyversion: "1"ConstProvider identity for explicit static/runtime hypothesis correlation.
+Readonlyid: "rea-static-runtime-correlation"Readonlyname: "REA static/runtime correlation"Readonlyversion: "1"
Return the immutable artifact identity captured before Hopper launched.
+