From 5f66cfd57aeec39bb3337cbbbc2b7c3c8460df54 Mon Sep 17 00:00:00 2001
From: N0zoM1z0 <1705004398@qq.com>
Date: Thu, 16 Jul 2026 19:01:07 +0800
Subject: [PATCH] feat(dotnet): add managed runtime correlation planning
---
.github/pull_request_template.md | 2 +-
AGENTS.md | 6 +-
README.md | 30 +--
README_ar.md | 28 +--
README_ja.md | 28 +--
README_ko.md | 8 +-
README_zh.md | 8 +-
...ged-code-evidence-and-provider-boundary.md | 26 +-
docs/api/assets/hierarchy.js | 2 +-
docs/api/assets/navigation.js | 2 +-
docs/api/assets/search.js | 2 +-
...rmissionAuthority.PermissionPathError.html | 2 +-
...ocessCaptureError.ProcessCaptureError.html | 2 +-
...sionStore.ProjectPermissionStoreError.html | 2 +-
.../domain_errors.AnalysisCancelledError.html | 2 +-
...rs.AnalysisCapabilityUnavailableError.html | 2 +-
.../classes/domain_errors.AnalysisError.html | 2 +-
.../domain_errors.AnalysisInputError.html | 2 +-
.../domain_errors.AnalysisOutputError.html | 2 +-
.../domain_errors.AnalysisProtocolError.html | 2 +-
.../domain_errors.AnalysisTimeoutError.html | 2 +-
.../domain_errors.ArtifactOperationError.html | 2 +-
.../domain_errors.BinaryTargetError.html | 2 +-
...domain_errors.BrowserObservationError.html | 2 +-
.../domain_errors.ConfigurationError.html | 2 +-
.../domain_errors.EvidenceFileError.html | 2 +-
.../domain_errors.EvidenceIntegrityError.html | 2 +-
.../domain_errors.EvidenceLimitError.html | 2 +-
.../domain_errors.HopperCancelledError.html | 2 +-
.../classes/domain_errors.HopperError.html | 2 +-
.../domain_errors.HopperProcessError.html | 2 +-
.../domain_errors.HopperProtocolError.html | 2 +-
.../domain_errors.HopperRemoteError.html | 2 +-
.../domain_errors.HopperStartError.html | 2 +-
.../domain_errors.HopperTimeoutError.html | 2 +-
...in_errors.InvestigationWorkspaceError.html | 2 +-
.../domain_errors.NoBinaryOpenError.html | 2 +-
...domain_errors.PermissionRequiredError.html | 2 +-
.../domain_errors.ProviderAdapterError.html | 2 +-
.../domain_errors.ProviderSelectionError.html | 2 +-
.../domain_errors.ReplayPlanStaleError.html | 2 +-
.../domain_errors.UnknownRegistryError.html | 2 +-
...permissionPolicy.PermissionGrantError.html | 12 +-
...idra_GhidraLauncher.GhidraLaunchError.html | 2 +-
...GhidraSessionError.GhidraSessionError.html | 2 +-
.../ghidra_protocol.GhidraRemoteError.html | 2 +-
...ityInventory.buildCapabilityInventory.html | 6 +-
.../application_Doctor.runDoctor.html | 4 +-
...planManagedRuntimeCorrelationEvidence.html | 45 ++++
docs/api/functions/cli.createCli.html | 2 +-
docs/api/functions/config.parseConfig.html | 2 +-
...toolOutputSchemas.requireOutputSchema.html | 2 +-
...elation.planManagedRuntimeCorrelation.html | 46 ++++
...missionPolicy.clearSessionPermissions.html | 2 +-
...in_permissionPolicy.consumePermission.html | 2 +-
...rmissionPolicy.createPermissionPolicy.html | 2 +-
...n_permissionPolicy.evaluatePermission.html | 2 +-
...main_permissionPolicy.grantPermission.html | 2 +-
...main_permissionPolicy.isPathContained.html | 2 +-
...issionPolicy.reloadPermissionCeilings.html | 2 +-
...ain_permissionPolicy.revokePermission.html | 2 +-
docs/api/functions/main.runEntrypoint.html | 2 +-
.../server_createServer.createServer.html | 2 +-
...lowTools.registerManagedWorkflowTools.html | 2 +-
...nStatusTool.registerSessionStatusTool.html | 4 +-
...sterSessionTools.registerSessionTools.html | 2 +-
docs/api/hierarchy.html | 112 ++++-----
docs/api/index.html | 4 +-
...ation_AnalysisProvider.AnalysisClient.html | 2 +-
...nalysisProvider.AnalysisOperationPort.html | 2 +-
...ion_AnalysisProvider.AnalysisProvider.html | 2 +-
...sisProvider.AnalysisProviderCandidate.html | 2 +-
...n_BinarySessionPort.BinarySessionPort.html | 2 +-
...riptArtifactGraphContext.AstEdgeInput.html | 2 +-
...tifactGraphContext.InferenceEdgeInput.html | 2 +-
...ManagedRuntimeCorrelationDependencies.html | 61 +++++
...rrelationService.ManagedRuntimePolicy.html | 67 +++++
.../application_Setup.SetupHost.html | 6 +-
.../application_Setup.SetupResult.html | 4 +-
docs/api/interfaces/config.AppConfig.html | 18 +-
...domain_errors.AnalysisErrorProjection.html | 2 +-
...in_errors.ProviderAdapterErrorOptions.html | 2 +-
...rmissionPolicy.MissingPermissionScope.html | 14 +-
...main_permissionPolicy.PermissionGrant.html | 26 +-
...ain_permissionPolicy.PermissionPolicy.html | 10 +-
...in_permissionPolicy.PermissionRequest.html | 20 +-
...main_permissionPolicy.PermissionScope.html | 18 +-
...domain_webInventory.StableWebResource.html | 2 +-
...ebInventory.WebInventoryResourceInput.html | 2 +-
.../ghidra_GhidraLauncher.GhidraLaunch.html | 2 +-
...essionError.GhidraSessionErrorOptions.html | 2 +-
.../hopper_BridgeLauncher.BridgeLaunch.html | 2 +-
...ProviderProcess.ProviderProcessLaunch.html | 2 +-
...rver_createServer.CreateServerOptions.html | 40 +--
...gisterSessionTools.SessionToolOptions.html | 22 +-
...tion_ManagedRuntimeCorrelationService.html | 40 +++
.../contracts_managedWorkflowExamples.html | 4 +-
.../domain_managedRuntimeCorrelation.html | 44 ++++
...lation.ManagedRuntimeCorrelationInput.html | 33 +++
...ation.ManagedRuntimeCorrelationResult.html | 33 +++
...permissionPolicy.PermissionCapability.html | 2 +-
...in_permissionPolicy.PermissionCeiling.html | 2 +-
...n_permissionPolicy.PermissionDecision.html | 2 +-
...les.MANAGED_MEMBER_COMPARISON_EXAMPLE.html | 2 +-
...s.MANAGED_RUNTIME_CORRELATION_EXAMPLE.html | 48 ++++
...racts.MANAGED_WORKFLOW_TOOL_CONTRACTS.html | 4 +-
...ontracts_toolContracts.TOOL_CONTRACTS.html | 2 +-
...olOutputSchemas.artifactOutputSchemas.html | 2 +-
...olOutputSchemas.enhancedOutputSchemas.html | 2 +-
...oolOutputSchemas.managedOutputSchemas.html | 2 +-
...tSchemas.managedWorkflowOutputSchemas.html | 2 +-
...toolOutputSchemas.nativeOutputSchemas.html | 2 +-
...olOutputSchemas.officialOutputSchemas.html | 2 +-
...oolOutputSchemas.sessionOutputSchemas.html | 2 +-
....managedRuntimeCorrelationInputSchema.html | 33 +++
...managedRuntimeCorrelationResultSchema.html | 33 +++
docs/managed-code-analysis.md | 39 +--
docs/mcp-prompts.md | 2 +-
docs/product-catalog.json | 23 +-
scripts/verify-managed-conformance.mjs | 80 +++++-
scripts/verify-package.mjs | 52 +++-
skills/rea-analysis/SKILL.md | 2 +-
src/application/CapabilityInventory.ts | 13 +
.../ManagedRuntimeCorrelationService.ts | 171 +++++++++++++
src/cli.ts | 31 +++
src/cliCommandNames.ts | 1 +
src/config.ts | 42 ++++
src/contracts/managedWorkflowExamples.ts | 84 +++++++
src/contracts/managedWorkflowToolContracts.ts | 32 ++-
src/contracts/toolOutputSchemas.ts | 4 +
src/domain/managedRuntimeCorrelation.ts | 207 +++++++++++++++
src/domain/permissionPolicy.ts | 3 +-
src/main.ts | 10 +
src/server/createServer.ts | 11 +
src/server/registerManagedWorkflowTools.ts | 56 ++++-
src/server/registerSessionStatusTool.ts | 2 +
src/server/registerSessionTools.ts | 6 +
tests/browserMcp.test.ts | 2 +-
tests/config.test.ts | 44 ++++
tests/contractSnapshot.test.ts | 6 +-
tests/integration/serverIntegration.test.ts | 4 +-
tests/managedMcp.test.ts | 100 +++++++-
tests/managedRuntimeCorrelation.test.ts | 238 ++++++++++++++++++
tests/productCatalog.test.ts | 2 +-
tests/promptMcp.test.ts | 2 +-
tests/runtime.test.ts | 6 +-
tests/serverIdentity.test.ts | 10 +-
tests/sessionMcp.test.ts | 2 +-
tests/toolContracts.test.ts | 7 +-
149 files changed, 2034 insertions(+), 365 deletions(-)
create mode 100644 docs/api/functions/application_ManagedRuntimeCorrelationService.planManagedRuntimeCorrelationEvidence.html
create mode 100644 docs/api/functions/domain_managedRuntimeCorrelation.planManagedRuntimeCorrelation.html
create mode 100644 docs/api/interfaces/application_ManagedRuntimeCorrelationService.ManagedRuntimeCorrelationDependencies.html
create mode 100644 docs/api/interfaces/application_ManagedRuntimeCorrelationService.ManagedRuntimePolicy.html
create mode 100644 docs/api/modules/application_ManagedRuntimeCorrelationService.html
create mode 100644 docs/api/modules/domain_managedRuntimeCorrelation.html
create mode 100644 docs/api/types/domain_managedRuntimeCorrelation.ManagedRuntimeCorrelationInput.html
create mode 100644 docs/api/types/domain_managedRuntimeCorrelation.ManagedRuntimeCorrelationResult.html
create mode 100644 docs/api/variables/contracts_managedWorkflowExamples.MANAGED_RUNTIME_CORRELATION_EXAMPLE.html
create mode 100644 docs/api/variables/domain_managedRuntimeCorrelation.managedRuntimeCorrelationInputSchema.html
create mode 100644 docs/api/variables/domain_managedRuntimeCorrelation.managedRuntimeCorrelationResultSchema.html
create mode 100644 src/application/ManagedRuntimeCorrelationService.ts
create mode 100644 src/domain/managedRuntimeCorrelation.ts
create mode 100644 tests/managedRuntimeCorrelation.test.ts
diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
index 054728009..5fb1cbfdc 100644
--- a/.github/pull_request_template.md
+++ b/.github/pull_request_template.md
@@ -27,7 +27,7 @@
## Tool Contract Impact
-
+
## Related Issues
diff --git a/AGENTS.md b/AGENTS.md
index d00339e70..93880bdf2 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -26,7 +26,7 @@ See [docs/architecture.mermaid](docs/architecture.mermaid) for a visual architec
- `src/cli.ts`: one-shot CLI adapter for setup, diagnostics, analysis, and decompilation.
- `src/config.ts`: Zod-validated parsing of environment configuration into `AppConfig`.
- `src/domain/`: pure, side-effect-free modules. `errors.ts` owns the tagged error algebra; `result.ts` owns `Result`/`ok`/`err`; `hopperValues.ts` owns shared function-dossier values plus Hopper boundary parsers; `symbolAnalysis.ts` parses Swift/ObjC names; `javascriptApplicationGraph.ts` validates and canonically commits the provider-neutral JavaScript Application Graph; `javascriptStaticAnalysis.ts` performs bounded AST-only JavaScript structure recovery.
-- `src/contracts/`: caller-visible schemas for 33 direct, 10 enhanced, 5 native, 2 artifact, 4 managed, 8 browser, 4 Electron, 3 application, and 18 session tools; `enhancedInputs.ts` owns enhanced input parsing.
+- `src/contracts/`: caller-visible schemas for 33 direct, 10 enhanced, 5 native, 2 artifact, 5 managed, 8 browser, 4 Electron, 3 application, and 18 session tools; `enhancedInputs.ts` owns enhanced input parsing.
- `src/process/`: provider-neutral process ownership and lifecycle primitives. It owns private runtime roots, absolute startup deadlines, correlated request waits, bounded output capture, and TERM-to-KILL cleanup without defining any provider wire protocol.
- `src/replay/`: Linux x64 controlled-JavaScript-replay adapter. It owns exact runtime closure inspection, Bubblewrap/seccomp/cgroup admission, the disposable worker, strict parent/worker protocol validation, and complete cleanup observation.
- `src/browser/`: loopback CDP discovery, bounded WebSocket transport, exact-origin target authorization, and passive browser observation normalization.
@@ -62,7 +62,7 @@ See [docs/architecture.mermaid](docs/architecture.mermaid) for a visual architec
- `npm run verify:browser`: build and run the real Chrome verifier against `REA_BROWSER_EXECUTABLE` or a platform-default Chrome-family executable.
- `npm run verify:managed`: build and run the source-owned managed PE/CLI conformance verifier for artifact triage, member inspection, managed/native boundary declarations, token drift comparison, malformed metadata, and non-managed degradation.
- `npm run verify:replay`: build and run the real Linux Bubblewrap/seccomp/cgroup verifier against source-owned replay fixtures; set `REA_REPLAY_INPUT_PATH` to verify an operator-local manifest.
-- `npm run verify:package`: pack and test the CLI, setup transaction, skill, and 87-tool target-free MCP server in an isolated environment.
+- `npm run verify:package`: pack and test the CLI, setup transaction, skill, and 88-tool target-free MCP server in an isolated environment.
- `npm run docs:generate`: generate API documentation from JSDoc comments into `docs/api/` using TypeDoc.
- `npm run docs:check`: verify generated package metadata, the canonical product catalog, caller-visible documentation facts, TypeDoc output, and the error JSON schema without rewriting them.
- `npm run config:print -- /path/to/binary`: print an MCP server config with absolute paths.
@@ -96,7 +96,7 @@ Use ESM TypeScript, two-space indentation, and Prettier defaults. Keep compiler
## Testing Guidelines
-Name tests `*.test.ts`. Use Vitest and production seams (`tests/fixtures/`) rather than module mocks. Domain tests assert pure behavior; adapter tests use fake launcher/socket seams; MCP tests connect with the beta.3 client. Preserve the 33 direct, 10 enhanced, 5 native, 2 artifact, 4 managed, 8 browser, 4 Electron, 3 application, and 18 session tool inventory (87 total). Cover malformed input, cancellation, timeouts, process exit, concurrency, limits, and clean shutdown. Real Hopper, Ghidra, browser, JavaScript replay, managed conformance, and any real managed-tool claims cannot be replaced by mocks; use the corresponding `verify:*` command.
+Name tests `*.test.ts`. Use Vitest and production seams (`tests/fixtures/`) rather than module mocks. Domain tests assert pure behavior; adapter tests use fake launcher/socket seams; MCP tests connect with the beta.3 client. Preserve the 33 direct, 10 enhanced, 5 native, 2 artifact, 5 managed, 8 browser, 4 Electron, 3 application, and 18 session tool inventory (88 total). Cover malformed input, cancellation, timeouts, process exit, concurrency, limits, and clean shutdown. Real Hopper, Ghidra, browser, JavaScript replay, managed conformance, and any real managed-tool claims cannot be replaced by mocks; use the corresponding `verify:*` command.
## Commit & Pull Request Guidelines
diff --git a/README.md b/README.md
index 36ef61145..8cff2360f 100644
--- a/README.md
+++ b/README.md
@@ -10,11 +10,11 @@
[](https://www.npmjs.com/package/rea-agents)
[](https://github.com/morluto/rea/actions/workflows/ci.yml)
-[](#87-tools-for-investigation)
+[](#88-tools-for-investigation)
[](https://nodejs.org/)
[](LICENSE)
-[Quick start](#quick-start) · [Current status](#current-status) · [Investigation model](#the-investigation-model) · [87 tools](#87-tools-for-investigation) · [Roadmap](#roadmap) · [How it works](#how-it-works)
+[Quick start](#quick-start) · [Current status](#current-status) · [Investigation model](#the-investigation-model) · [88 tools](#88-tools-for-investigation) · [Roadmap](#roadmap) · [How it works](#how-it-works)
+
Hierarchy
Error
diff --git a/docs/api/classes/application_ProcessCaptureError.ProcessCaptureError.html b/docs/api/classes/application_ProcessCaptureError.ProcessCaptureError.html
index bd9f63844..ec2c47551 100644
--- a/docs/api/classes/application_ProcessCaptureError.ProcessCaptureError.html
+++ b/docs/api/classes/application_ProcessCaptureError.ProcessCaptureError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/application_ProjectPermissionStore.ProjectPermissionStoreError.html b/docs/api/classes/application_ProjectPermissionStore.ProjectPermissionStoreError.html
index c3b14d48e..b4bcba828 100644
--- a/docs/api/classes/application_ProjectPermissionStore.ProjectPermissionStoreError.html
+++ b/docs/api/classes/application_ProjectPermissionStore.ProjectPermissionStoreError.html
@@ -14,7 +14,7 @@
-
+
Hierarchy
Error
diff --git a/docs/api/classes/domain_errors.AnalysisCancelledError.html b/docs/api/classes/domain_errors.AnalysisCancelledError.html
index 61f949095..524baa9ca 100644
--- a/docs/api/classes/domain_errors.AnalysisCancelledError.html
+++ b/docs/api/classes/domain_errors.AnalysisCancelledError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.AnalysisCapabilityUnavailableError.html b/docs/api/classes/domain_errors.AnalysisCapabilityUnavailableError.html
index c7880f0dd..ce59b3536 100644
--- a/docs/api/classes/domain_errors.AnalysisCapabilityUnavailableError.html
+++ b/docs/api/classes/domain_errors.AnalysisCapabilityUnavailableError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.AnalysisError.html b/docs/api/classes/domain_errors.AnalysisError.html
index 9a0465dfd..8b409bc38 100644
--- a/docs/api/classes/domain_errors.AnalysisError.html
+++ b/docs/api/classes/domain_errors.AnalysisError.html
@@ -14,7 +14,7 @@
-
+
Error
diff --git a/docs/api/classes/domain_errors.AnalysisInputError.html b/docs/api/classes/domain_errors.AnalysisInputError.html
index 3efa2a96b..5fb9696cf 100644
--- a/docs/api/classes/domain_errors.AnalysisInputError.html
+++ b/docs/api/classes/domain_errors.AnalysisInputError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.AnalysisOutputError.html b/docs/api/classes/domain_errors.AnalysisOutputError.html
index 26f9f2bfb..cc8fdb390 100644
--- a/docs/api/classes/domain_errors.AnalysisOutputError.html
+++ b/docs/api/classes/domain_errors.AnalysisOutputError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.AnalysisProtocolError.html b/docs/api/classes/domain_errors.AnalysisProtocolError.html
index e060914ad..25c4cb7e9 100644
--- a/docs/api/classes/domain_errors.AnalysisProtocolError.html
+++ b/docs/api/classes/domain_errors.AnalysisProtocolError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.AnalysisTimeoutError.html b/docs/api/classes/domain_errors.AnalysisTimeoutError.html
index 64d2eaefb..21886f9a1 100644
--- a/docs/api/classes/domain_errors.AnalysisTimeoutError.html
+++ b/docs/api/classes/domain_errors.AnalysisTimeoutError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.ArtifactOperationError.html b/docs/api/classes/domain_errors.ArtifactOperationError.html
index cbe90ab2a..82434cb42 100644
--- a/docs/api/classes/domain_errors.ArtifactOperationError.html
+++ b/docs/api/classes/domain_errors.ArtifactOperationError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.BinaryTargetError.html b/docs/api/classes/domain_errors.BinaryTargetError.html
index 58eb1a1f0..010d373d7 100644
--- a/docs/api/classes/domain_errors.BinaryTargetError.html
+++ b/docs/api/classes/domain_errors.BinaryTargetError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.BrowserObservationError.html b/docs/api/classes/domain_errors.BrowserObservationError.html
index 535e52d85..e4f96cb99 100644
--- a/docs/api/classes/domain_errors.BrowserObservationError.html
+++ b/docs/api/classes/domain_errors.BrowserObservationError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.ConfigurationError.html b/docs/api/classes/domain_errors.ConfigurationError.html
index c99d121f4..0d3d8def8 100644
--- a/docs/api/classes/domain_errors.ConfigurationError.html
+++ b/docs/api/classes/domain_errors.ConfigurationError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.EvidenceFileError.html b/docs/api/classes/domain_errors.EvidenceFileError.html
index 341235e3e..a0f8be7a1 100644
--- a/docs/api/classes/domain_errors.EvidenceFileError.html
+++ b/docs/api/classes/domain_errors.EvidenceFileError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.EvidenceIntegrityError.html b/docs/api/classes/domain_errors.EvidenceIntegrityError.html
index a20f737b7..6d3292869 100644
--- a/docs/api/classes/domain_errors.EvidenceIntegrityError.html
+++ b/docs/api/classes/domain_errors.EvidenceIntegrityError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.EvidenceLimitError.html b/docs/api/classes/domain_errors.EvidenceLimitError.html
index 08a25cbf2..8b63bbdeb 100644
--- a/docs/api/classes/domain_errors.EvidenceLimitError.html
+++ b/docs/api/classes/domain_errors.EvidenceLimitError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.HopperCancelledError.html b/docs/api/classes/domain_errors.HopperCancelledError.html
index 609890e87..10c498f24 100644
--- a/docs/api/classes/domain_errors.HopperCancelledError.html
+++ b/docs/api/classes/domain_errors.HopperCancelledError.html
@@ -14,7 +14,7 @@
-
+
HopperError
diff --git a/docs/api/classes/domain_errors.HopperError.html b/docs/api/classes/domain_errors.HopperError.html
index 20949cac6..af67ada8c 100644
--- a/docs/api/classes/domain_errors.HopperError.html
+++ b/docs/api/classes/domain_errors.HopperError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.HopperProcessError.html b/docs/api/classes/domain_errors.HopperProcessError.html
index f2f37494b..c27b83966 100644
--- a/docs/api/classes/domain_errors.HopperProcessError.html
+++ b/docs/api/classes/domain_errors.HopperProcessError.html
@@ -14,7 +14,7 @@
-
+
HopperError
diff --git a/docs/api/classes/domain_errors.HopperProtocolError.html b/docs/api/classes/domain_errors.HopperProtocolError.html
index d9a24abe7..ecdfc34bc 100644
--- a/docs/api/classes/domain_errors.HopperProtocolError.html
+++ b/docs/api/classes/domain_errors.HopperProtocolError.html
@@ -14,7 +14,7 @@
-
+
HopperError
diff --git a/docs/api/classes/domain_errors.HopperRemoteError.html b/docs/api/classes/domain_errors.HopperRemoteError.html
index 4c4e6e130..824053e85 100644
--- a/docs/api/classes/domain_errors.HopperRemoteError.html
+++ b/docs/api/classes/domain_errors.HopperRemoteError.html
@@ -14,7 +14,7 @@
-
+
HopperError
diff --git a/docs/api/classes/domain_errors.HopperStartError.html b/docs/api/classes/domain_errors.HopperStartError.html
index c09db3e3c..971884afd 100644
--- a/docs/api/classes/domain_errors.HopperStartError.html
+++ b/docs/api/classes/domain_errors.HopperStartError.html
@@ -14,7 +14,7 @@
-
+
HopperError
diff --git a/docs/api/classes/domain_errors.HopperTimeoutError.html b/docs/api/classes/domain_errors.HopperTimeoutError.html
index 9ebaf536a..ab2eefb08 100644
--- a/docs/api/classes/domain_errors.HopperTimeoutError.html
+++ b/docs/api/classes/domain_errors.HopperTimeoutError.html
@@ -14,7 +14,7 @@
-
+
HopperError
diff --git a/docs/api/classes/domain_errors.InvestigationWorkspaceError.html b/docs/api/classes/domain_errors.InvestigationWorkspaceError.html
index 896336103..8453e4a8b 100644
--- a/docs/api/classes/domain_errors.InvestigationWorkspaceError.html
+++ b/docs/api/classes/domain_errors.InvestigationWorkspaceError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.NoBinaryOpenError.html b/docs/api/classes/domain_errors.NoBinaryOpenError.html
index 33a18e4ac..2f86f51ca 100644
--- a/docs/api/classes/domain_errors.NoBinaryOpenError.html
+++ b/docs/api/classes/domain_errors.NoBinaryOpenError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.PermissionRequiredError.html b/docs/api/classes/domain_errors.PermissionRequiredError.html
index 555c42104..60a02204d 100644
--- a/docs/api/classes/domain_errors.PermissionRequiredError.html
+++ b/docs/api/classes/domain_errors.PermissionRequiredError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.ProviderAdapterError.html b/docs/api/classes/domain_errors.ProviderAdapterError.html
index ccf6c2d90..e1c318ba3 100644
--- a/docs/api/classes/domain_errors.ProviderAdapterError.html
+++ b/docs/api/classes/domain_errors.ProviderAdapterError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.ProviderSelectionError.html b/docs/api/classes/domain_errors.ProviderSelectionError.html
index 75718cb95..b428ec31f 100644
--- a/docs/api/classes/domain_errors.ProviderSelectionError.html
+++ b/docs/api/classes/domain_errors.ProviderSelectionError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.ReplayPlanStaleError.html b/docs/api/classes/domain_errors.ReplayPlanStaleError.html
index a890c0009..f7b4e24a9 100644
--- a/docs/api/classes/domain_errors.ReplayPlanStaleError.html
+++ b/docs/api/classes/domain_errors.ReplayPlanStaleError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_errors.UnknownRegistryError.html b/docs/api/classes/domain_errors.UnknownRegistryError.html
index 7d7c73367..dc14bee3f 100644
--- a/docs/api/classes/domain_errors.UnknownRegistryError.html
+++ b/docs/api/classes/domain_errors.UnknownRegistryError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/domain_permissionPolicy.PermissionGrantError.html b/docs/api/classes/domain_permissionPolicy.PermissionGrantError.html
index d269909bf..4f502cde0 100644
--- a/docs/api/classes/domain_permissionPolicy.PermissionGrantError.html
+++ b/docs/api/classes/domain_permissionPolicy.PermissionGrantError.html
@@ -14,14 +14,14 @@
-
+Defined in src/domain/permissionPolicy.ts:75
Properties
@@ -62,17 +62,17 @@
Readonly_ _tag : "PermissionGrantError" = ...
+Defined in src/domain/permissionPolicy.ts:73
+Defined in src/domain/permissionPolicy.ts:77
Readonlyreason reason : "outside_administrator_ceiling" | "invalid_once_scope"
+Defined in src/domain/permissionPolicy.ts:76
Returns Cli < {} >
+Defined in src/cli.ts:53
+Defined in src/config.ts:312
+Defined in src/contracts/toolOutputSchemas.ts:55
+Defined in src/domain/permissionPolicy.ts:203
+Defined in src/domain/permissionPolicy.ts:179
+Defined in src/domain/permissionPolicy.ts:101
+Defined in src/domain/permissionPolicy.ts:128
+Defined in src/domain/permissionPolicy.ts:112
+Defined in src/domain/permissionPolicy.ts:298
+Defined in src/domain/permissionPolicy.ts:213
+Defined in src/domain/permissionPolicy.ts:194
+Defined in src/main.ts:286
+Defined in src/server/createServer.ts:63
+Defined in src/server/registerManagedWorkflowTools.ts:31
diff --git a/docs/api/functions/server_registerSessionTools.registerSessionTools.html b/docs/api/functions/server_registerSessionTools.registerSessionTools.html
index 44db6e629..4df92e2a4 100644
--- a/docs/api/functions/server_registerSessionTools.registerSessionTools.html
+++ b/docs/api/functions/server_registerSessionTools.registerSessionTools.html
@@ -25,7 +25,7 @@
options : SessionToolOptions = {} Returns void
+Defined in src/server/registerSessionTools.ts:616
-interface SetupResult { appliedActions : readonly string [] ; clients : Readonly < Record < string , ClientConfigurationResult > > ; code ?: SetupFailureCode ; doctor : { checks : readonly DoctorCheck [] ; healthy : boolean ; hopperPath ?: string ; identity ?: { catalog : { counts : { cli_commands : number ; mcp_prompts : number ; mcp_resource_templates : 7 ; mcp_resources : 2 ; mcp_tools : number ; } ; digests : { combined_sha256 : string ; prompts_sha256 : string ; resources_sha256 : string ; tools_sha256 : string ; } ; tools : { annotations : { destructive : boolean ; idempotent : boolean ; open_world : boolean ; read_only : boolean ; } ; name : | "open_binary" | "list_browser_targets" | "inspect_web_page" | "analyze_web_bundle" | "observe_web_session" | "discover_webmcp_tools" | "compare_web_captures" | "capture_web_screenshot" | "compare_web_screenshots" | "list_electron_targets" | "inspect_electron_page" | "inventory_artifact" | "extract_artifact" | "analyze_javascript_application" | "swift_classes" | "get_objc_classes" | "get_objc_protocols" | "batch_decompile" | "get_call_graph" | "analyze_swift_types" | "find_xrefs_to_name" | "binary_overview" | "analyze_function" | "trace_feature" | "comment" | "compare_artifacts" | "find_changed_behavior" | "compare_process_captures" | "compare_functions" | "capture_process_scenario" | "inspect_managed_members" | "address_name" | "current_address" | "current_procedure" | "current_document" | "goto_address" | "inline_comment" | "list_bookmarks" | "list_documents" | "list_names" | "list_procedures" | "list_segments" | "list_strings" | "next_address" | "prev_address" | "procedure_address" | "procedure_assembly" | "procedure_callees" | "procedure_callers" | "procedure_info" | "procedure_references" | "procedure_pseudo_code" | "resolve_containing_procedure" | "search_procedures" | "search_strings" | "set_address_name" | "set_addresses_names" | "set_bookmark" | "set_comment" | "set_current_document" | "set_inline_comment" | "unset_bookmark" | "xrefs" | "inspect_macho" | "inspect_signature" | "inspect_plist" | "list_architectures" | "demangle_swift" | "inspect_managed_artifact" | "inspect_managed_native_boundaries" | "compare_managed_members" | "close_binary" | "binary_session" | "export_evidence_bundle" | "import_evidence_bundle" | "compare_bundles" | "build_call_path" | "correlate_static_and_runtime" | "verify_reconstruction" | "list_unknowns" | "record_unknown" | "update_unknown" | "verify_unknown_resolution" | "reconcile_javascript_runtime" | "trace_application_feature" | "compare_application_versions" | "run_controlled_replay" ; surface : ToolKind ; } [] ; } ; cli_package_version : string ; expected_skill_version : string ; installations : { paths : readonly string [] ; state : "unknown" | "single" | "multiple" ; } ; live_server : { remediation : string ; state : "unknown" } ; registrations : readonly ClientRegistrationStatus [] ; sdk : { client_test : "2.0.0-beta.4" ; core : "2.0.0-beta.4" ; server : "2.0.0-beta.4" ; } ; skill : { installed_version : string | null ; remediation : string | null ; state : "unknown" | "aligned" | "stale" ; } ; } ; providerInspections ?: readonly DoctorProviderInspection [] ; } ; plannedActions : readonly SetupAction [] ; remediation ?: string ; status : "ready" | "planned" | "needs_confirmation" | "needs_human" ; }
+interface SetupResult { appliedActions : readonly string [] ; clients : Readonly < Record < string , ClientConfigurationResult > > ; code ?: SetupFailureCode ; doctor : { checks : readonly DoctorCheck [] ; healthy : boolean ; hopperPath ?: string ; identity ?: { catalog : { counts : { cli_commands : number ; mcp_prompts : number ; mcp_resource_templates : 7 ; mcp_resources : 2 ; mcp_tools : number ; } ; digests : { combined_sha256 : string ; prompts_sha256 : string ; resources_sha256 : string ; tools_sha256 : string ; } ; tools : { annotations : { destructive : boolean ; idempotent : boolean ; open_world : boolean ; read_only : boolean ; } ; name : | "open_binary" | "list_browser_targets" | "inspect_web_page" | "analyze_web_bundle" | "observe_web_session" | "discover_webmcp_tools" | "compare_web_captures" | "capture_web_screenshot" | "compare_web_screenshots" | "list_electron_targets" | "inspect_electron_page" | "inventory_artifact" | "extract_artifact" | "analyze_javascript_application" | "swift_classes" | "get_objc_classes" | "get_objc_protocols" | "batch_decompile" | "get_call_graph" | "analyze_swift_types" | "find_xrefs_to_name" | "binary_overview" | "analyze_function" | "trace_feature" | "comment" | "compare_artifacts" | "find_changed_behavior" | "compare_process_captures" | "compare_functions" | "capture_process_scenario" | "inspect_managed_members" | "address_name" | "current_address" | "current_procedure" | "current_document" | "goto_address" | "inline_comment" | "list_bookmarks" | "list_documents" | "list_names" | "list_procedures" | "list_segments" | "list_strings" | "next_address" | "prev_address" | "procedure_address" | "procedure_assembly" | "procedure_callees" | "procedure_callers" | "procedure_info" | "procedure_references" | "procedure_pseudo_code" | "resolve_containing_procedure" | "search_procedures" | "search_strings" | "set_address_name" | "set_addresses_names" | "set_bookmark" | "set_comment" | "set_current_document" | "set_inline_comment" | "unset_bookmark" | "xrefs" | "inspect_macho" | "inspect_signature" | "inspect_plist" | "list_architectures" | "demangle_swift" | "inspect_managed_artifact" | "inspect_managed_native_boundaries" | "compare_managed_members" | "plan_managed_runtime_correlation" | "close_binary" | "binary_session" | "export_evidence_bundle" | "import_evidence_bundle" | "compare_bundles" | "build_call_path" | "correlate_static_and_runtime" | "verify_reconstruction" | "list_unknowns" | "record_unknown" | "update_unknown" | "verify_unknown_resolution" | "reconcile_javascript_runtime" | "trace_application_feature" | "compare_application_versions" | "run_controlled_replay" ; surface : ToolKind ; } [] ; } ; cli_package_version : string ; expected_skill_version : string ; installations : { paths : readonly string [] ; state : "unknown" | "single" | "multiple" ; } ; live_server : { remediation : string ; state : "unknown" } ; registrations : readonly ClientRegistrationStatus [] ; sdk : { client_test : "2.0.0-beta.4" ; core : "2.0.0-beta.4" ; server : "2.0.0-beta.4" ; } ; skill : { installed_version : string | null ; remediation : string | null ; state : "unknown" | "aligned" | "stale" ; } ; } ; providerInspections ?: readonly DoctorProviderInspection [] ; } ; plannedActions : readonly SetupAction [] ; remediation ?: string ; status : "ready" | "planned" | "needs_confirmation" | "needs_human" ; }
Readonlydoctor doctor : { checks : readonly DoctorCheck [] ; healthy : boolean ; hopperPath ?: string ; identity ?: { catalog : { counts : { cli_commands : number ; mcp_prompts : number ; mcp_resource_templates : 7 ; mcp_resources : 2 ; mcp_tools : number ; } ; digests : { combined_sha256 : string ; prompts_sha256 : string ; resources_sha256 : string ; tools_sha256 : string ; } ; tools : { annotations : { destructive : boolean ; idempotent : boolean ; open_world : boolean ; read_only : boolean ; } ; name : | "open_binary" | "list_browser_targets" | "inspect_web_page" | "analyze_web_bundle" | "observe_web_session" | "discover_webmcp_tools" | "compare_web_captures" | "capture_web_screenshot" | "compare_web_screenshots" | "list_electron_targets" | "inspect_electron_page" | "inventory_artifact" | "extract_artifact" | "analyze_javascript_application" | "swift_classes" | "get_objc_classes" | "get_objc_protocols" | "batch_decompile" | "get_call_graph" | "analyze_swift_types" | "find_xrefs_to_name" | "binary_overview" | "analyze_function" | "trace_feature" | "comment" | "compare_artifacts" | "find_changed_behavior" | "compare_process_captures" | "compare_functions" | "capture_process_scenario" | "inspect_managed_members" | "address_name" | "current_address" | "current_procedure" | "current_document" | "goto_address" | "inline_comment" | "list_bookmarks" | "list_documents" | "list_names" | "list_procedures" | "list_segments" | "list_strings" | "next_address" | "prev_address" | "procedure_address" | "procedure_assembly" | "procedure_callees" | "procedure_callers" | "procedure_info" | "procedure_references" | "procedure_pseudo_code" | "resolve_containing_procedure" | "search_procedures" | "search_strings" | "set_address_name" | "set_addresses_names" | "set_bookmark" | "set_comment" | "set_current_document" | "set_inline_comment" | "unset_bookmark" | "xrefs" | "inspect_macho" | "inspect_signature" | "inspect_plist" | "list_architectures" | "demangle_swift" | "inspect_managed_artifact" | "inspect_managed_native_boundaries" | "compare_managed_members" | "close_binary" | "binary_session" | "export_evidence_bundle" | "import_evidence_bundle" | "compare_bundles" | "build_call_path" | "correlate_static_and_runtime" | "verify_reconstruction" | "list_unknowns" | "record_unknown" | "update_unknown" | "verify_unknown_resolution" | "reconcile_javascript_runtime" | "trace_application_feature" | "compare_application_versions" | "run_controlled_replay" ; surface : ToolKind ; } [] ; } ; cli_package_version : string ; expected_skill_version : string ; installations : { paths : readonly string [] ; state : "unknown" | "single" | "multiple" ; } ; live_server : { remediation : string ; state : "unknown" } ; registrations : readonly ClientRegistrationStatus [] ; sdk : { client_test : "2.0.0-beta.4" ; core : "2.0.0-beta.4" ; server : "2.0.0-beta.4" ; } ; skill : { installed_version : string | null ; remediation : string | null ; state : "unknown" | "aligned" | "stale" ; } ; } ; providerInspections ?: readonly DoctorProviderInspection [] ; }
+doctor : { checks : readonly DoctorCheck [] ; healthy : boolean ; hopperPath ?: string ; identity ?: { catalog : { counts : { cli_commands : number ; mcp_prompts : number ; mcp_resource_templates : 7 ; mcp_resources : 2 ; mcp_tools : number ; } ; digests : { combined_sha256 : string ; prompts_sha256 : string ; resources_sha256 : string ; tools_sha256 : string ; } ; tools : { annotations : { destructive : boolean ; idempotent : boolean ; open_world : boolean ; read_only : boolean ; } ; name : | "open_binary" | "list_browser_targets" | "inspect_web_page" | "analyze_web_bundle" | "observe_web_session" | "discover_webmcp_tools" | "compare_web_captures" | "capture_web_screenshot" | "compare_web_screenshots" | "list_electron_targets" | "inspect_electron_page" | "inventory_artifact" | "extract_artifact" | "analyze_javascript_application" | "swift_classes" | "get_objc_classes" | "get_objc_protocols" | "batch_decompile" | "get_call_graph" | "analyze_swift_types" | "find_xrefs_to_name" | "binary_overview" | "analyze_function" | "trace_feature" | "comment" | "compare_artifacts" | "find_changed_behavior" | "compare_process_captures" | "compare_functions" | "capture_process_scenario" | "inspect_managed_members" | "address_name" | "current_address" | "current_procedure" | "current_document" | "goto_address" | "inline_comment" | "list_bookmarks" | "list_documents" | "list_names" | "list_procedures" | "list_segments" | "list_strings" | "next_address" | "prev_address" | "procedure_address" | "procedure_assembly" | "procedure_callees" | "procedure_callers" | "procedure_info" | "procedure_references" | "procedure_pseudo_code" | "resolve_containing_procedure" | "search_procedures" | "search_strings" | "set_address_name" | "set_addresses_names" | "set_bookmark" | "set_comment" | "set_current_document" | "set_inline_comment" | "unset_bookmark" | "xrefs" | "inspect_macho" | "inspect_signature" | "inspect_plist" | "list_architectures" | "demangle_swift" | "inspect_managed_artifact" | "inspect_managed_native_boundaries" | "compare_managed_members" | "plan_managed_runtime_correlation" | "close_binary" | "binary_session" | "export_evidence_bundle" | "import_evidence_bundle" | "compare_bundles" | "build_call_path" | "correlate_static_and_runtime" | "verify_reconstruction" | "list_unknowns" | "record_unknown" | "update_unknown" | "verify_unknown_resolution" | "reconcile_javascript_runtime" | "trace_application_feature" | "compare_application_versions" | "run_controlled_replay" ; surface : ToolKind ; } [] ; } ; cli_package_version : string ; expected_skill_version : string ; installations : { paths : readonly string [] ; state : "unknown" | "single" | "multiple" ; } ; live_server : { remediation : string ; state : "unknown" } ; registrations : readonly ClientRegistrationStatus [] ; sdk : { client_test : "2.0.0-beta.4" ; core : "2.0.0-beta.4" ; server : "2.0.0-beta.4" ; } ; skill : { installed_version : string | null ; remediation : string | null ; state : "unknown" | "aligned" | "stale" ; } ; } ; providerInspections ?: readonly DoctorProviderInspection [] ; }
diff --git a/docs/api/interfaces/config.AppConfig.html b/docs/api/interfaces/config.AppConfig.html
index 2e06128ba..2e3f11fc6 100644
--- a/docs/api/interfaces/config.AppConfig.html
+++ b/docs/api/interfaces/config.AppConfig.html
@@ -11,7 +11,7 @@
config AppConfig Interface AppConfig
-
Readonlyanalysis analysisProvider : string
+Readonlymanaged managedRuntimePolicy : { enabled : boolean ; executablePath : string ; roots : readonly string [] ; }
+
Readonlypermission
+Defined in src/config.ts:68
Readonlypermission permissionProjectRoot : string | undefined
+Defined in src/config.ts:70
Readonlypermission permissionProjectStore : string | undefined
+Defined in src/config.ts:71
Readonlyprocess
@@ -196,7 +202,7 @@
On This Page
+
interface AnalysisErrorProjection { category : | "truncated" | "timeout" | "unavailable" | "permission_required" | "cancelled" | "execution_failure" | "invalid_input" | "unsupported_provider" | "integrity_mismatch" ; code : | "truncated" | "permission_required" | "cancelled" | "provider_unavailable" | "invalid_request" | "unreadable_output" | "capability_unavailable" | "provider_timeout" | "artifact_integrity_mismatch" | "artifact_operation_failed" | "evidence_integrity_mismatch" | "process_capture_failed" | "cleanup_incomplete" | "revision_conflict" | "outside_approved_root" | "configuration_invalid" | "target_unavailable" | "execution_failure" | "plan_stale" ; details ?: Readonly < Record < string , JSONType > > ; message : string ; remediation : Readonly < { action : string ; elicitation_supported ?: boolean ; restart_required : boolean ; } , > ; retryable : boolean ; readonly [ key : string ]: JSONType ; }
+
Hierarchy
Readonly < Record < string , JsonValue > >
diff --git a/docs/api/interfaces/domain_errors.ProviderAdapterErrorOptions.html b/docs/api/interfaces/domain_errors.ProviderAdapterErrorOptions.html
index aac23080a..0ca41fc64 100644
--- a/docs/api/interfaces/domain_errors.ProviderAdapterErrorOptions.html
+++ b/docs/api/interfaces/domain_errors.ProviderAdapterErrorOptions.html
@@ -15,7 +15,7 @@
interface ProviderAdapterErrorOptions { diagnostics ?: Readonly < Record < string , JSONType > > ; }
+
Hierarchy
ErrorOptions
diff --git a/docs/api/interfaces/domain_permissionPolicy.MissingPermissionScope.html b/docs/api/interfaces/domain_permissionPolicy.MissingPermissionScope.html
index 188a87574..193582593 100644
--- a/docs/api/interfaces/domain_permissionPolicy.MissingPermissionScope.html
+++ b/docs/api/interfaces/domain_permissionPolicy.MissingPermissionScope.html
@@ -16,7 +16,7 @@
+Defined in src/domain/permissionPolicy.ts:54
Optional Readonlyexecutables executables ?: readonly string []
+Defined in src/domain/permissionPolicy.ts:56
Optional Readonlymount mount ?: true
+Defined in src/domain/permissionPolicy.ts:60
Optional Readonlynetwork network ?: PermissionNetwork
+Defined in src/domain/permissionPolicy.ts:59
Optional Readonlyorigins origins ?: readonly string []
+Defined in src/domain/permissionPolicy.ts:58
Optional Readonlyroots roots ?: readonly string []
+Defined in src/domain/permissionPolicy.ts:55
+Defined in src/server/createServer.ts:36
+Defined in src/server/registerSessionTools.ts:603
-PermissionCapability : | "process_capture" | "browser_observe" | "electron_observe" | "evidence_read" | "evidence_write" | "investigation_input" | "investigation_workspace_read" | "investigation_workspace_write" | "snapshot_read" | "snapshot_write" | "artifact_extract" | "native_mount" | "reference_read" | "javascript_replay"
+PermissionCapability : | "process_capture" | "browser_observe" | "electron_observe" | "evidence_read" | "evidence_write" | "investigation_input" | "investigation_workspace_read" | "investigation_workspace_write" | "snapshot_read" | "snapshot_write" | "artifact_extract" | "native_mount" | "reference_read" | "javascript_replay" | "managed_runtime"
diff --git a/docs/api/types/domain_permissionPolicy.PermissionCeiling.html b/docs/api/types/domain_permissionPolicy.PermissionCeiling.html
index a86d0b393..bdf830217 100644
--- a/docs/api/types/domain_permissionPolicy.PermissionCeiling.html
+++ b/docs/api/types/domain_permissionPolicy.PermissionCeiling.html
@@ -15,7 +15,7 @@
+Defined in src/domain/permissionPolicy.ts:43
Failure to establish a filesystem object's canonical authorization identity.