diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
index 4e78c57c4..b980963c6 100644
--- a/.github/pull_request_template.md
+++ b/.github/pull_request_template.md
@@ -27,7 +27,7 @@
## Tool Contract Impact
-
+
## Related Issues
diff --git a/AGENTS.md b/AGENTS.md
index 0df6cffd8..144d47570 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -26,7 +26,7 @@ See [docs/architecture.mermaid](docs/architecture.mermaid) for a visual architec
- `src/cli.ts`: one-shot CLI adapter for setup, diagnostics, analysis, and decompilation.
- `src/config.ts`: Zod-validated parsing of environment configuration into `AppConfig`.
- `src/domain/`: pure, side-effect-free modules. `errors.ts` owns the tagged error algebra; `result.ts` owns `Result`/`ok`/`err`; `hopperValues.ts` owns shared function-dossier values plus Hopper boundary parsers; `symbolAnalysis.ts` parses Swift/ObjC names; `javascriptApplicationGraph.ts` validates and canonically commits the provider-neutral JavaScript Application Graph; `javascriptStaticAnalysis.ts` performs bounded AST-only JavaScript structure recovery.
-- `src/contracts/`: caller-visible schemas for 33 direct, 10 enhanced, 5 native, 2 artifact, 1 managed, 8 browser, 4 Electron, 3 application, and 18 session tools; `enhancedInputs.ts` owns enhanced input parsing.
+- `src/contracts/`: caller-visible schemas for 33 direct, 10 enhanced, 5 native, 2 artifact, 2 managed, 8 browser, 4 Electron, 3 application, and 18 session tools; `enhancedInputs.ts` owns enhanced input parsing.
- `src/process/`: provider-neutral process ownership and lifecycle primitives. It owns private runtime roots, absolute startup deadlines, correlated request waits, bounded output capture, and TERM-to-KILL cleanup without defining any provider wire protocol.
- `src/replay/`: Linux x64 controlled-JavaScript-replay adapter. It owns exact runtime closure inspection, Bubblewrap/seccomp/cgroup admission, the disposable worker, strict parent/worker protocol validation, and complete cleanup observation.
- `src/browser/`: loopback CDP discovery, bounded WebSocket transport, exact-origin target authorization, and passive browser observation normalization.
@@ -61,7 +61,7 @@ See [docs/architecture.mermaid](docs/architecture.mermaid) for a visual architec
- `npm run verify:ghidra`: build and run the real-Ghidra verifier against `GHIDRA_INSTALL_DIR` and optional `GHIDRA_TARGET_PATH`.
- `npm run verify:browser`: build and run the real Chrome verifier against `REA_BROWSER_EXECUTABLE` or a platform-default Chrome-family executable.
- `npm run verify:replay`: build and run the real Linux Bubblewrap/seccomp/cgroup verifier against source-owned replay fixtures; set `REA_REPLAY_INPUT_PATH` to verify an operator-local manifest.
-- `npm run verify:package`: pack and test the CLI, setup transaction, skill, and 84-tool target-free MCP server in an isolated environment.
+- `npm run verify:package`: pack and test the CLI, setup transaction, skill, and 85-tool target-free MCP server in an isolated environment.
- `npm run docs:generate`: generate API documentation from JSDoc comments into `docs/api/` using TypeDoc.
- `npm run docs:check`: verify generated package metadata, the canonical product catalog, caller-visible documentation facts, TypeDoc output, and the error JSON schema without rewriting them.
- `npm run config:print -- /path/to/binary`: print an MCP server config with absolute paths.
@@ -95,7 +95,7 @@ Use ESM TypeScript, two-space indentation, and Prettier defaults. Keep compiler
## Testing Guidelines
-Name tests `*.test.ts`. Use Vitest and production seams (`tests/fixtures/`) rather than module mocks. Domain tests assert pure behavior; adapter tests use fake launcher/socket seams; MCP tests connect with the beta.3 client. Preserve the 33 direct, 10 enhanced, 5 native, 2 artifact, 1 managed, 8 browser, 4 Electron, 3 application, and 18 session tool inventory (84 total). Cover malformed input, cancellation, timeouts, process exit, concurrency, limits, and clean shutdown. Real Hopper, Ghidra, browser, JavaScript replay, and any real managed-tool claims cannot be replaced by mocks; use the corresponding `verify:*` command.
+Name tests `*.test.ts`. Use Vitest and production seams (`tests/fixtures/`) rather than module mocks. Domain tests assert pure behavior; adapter tests use fake launcher/socket seams; MCP tests connect with the beta.3 client. Preserve the 33 direct, 10 enhanced, 5 native, 2 artifact, 2 managed, 8 browser, 4 Electron, 3 application, and 18 session tool inventory (85 total). Cover malformed input, cancellation, timeouts, process exit, concurrency, limits, and clean shutdown. Real Hopper, Ghidra, browser, JavaScript replay, and any real managed-tool claims cannot be replaced by mocks; use the corresponding `verify:*` command.
## Commit & Pull Request Guidelines
diff --git a/README.md b/README.md
index 064424373..3b51a16d6 100644
--- a/README.md
+++ b/README.md
@@ -10,11 +10,11 @@
[](https://www.npmjs.com/package/rea-agents)
[](https://github.com/morluto/rea/actions/workflows/ci.yml)
-[](#84-tools-for-investigation)
+[](#85-tools-for-investigation)
[](https://nodejs.org/)
[](LICENSE)
-[Quick start](#quick-start) · [Current status](#current-status) · [Investigation model](#the-investigation-model) · [84 tools](#84-tools-for-investigation) · [Roadmap](#roadmap) · [How it works](#how-it-works)
+[Quick start](#quick-start) · [Current status](#current-status) · [Investigation model](#the-investigation-model) · [85 tools](#85-tools-for-investigation) · [Roadmap](#roadmap) · [How it works](#how-it-works)
+
Hierarchy
Error
diff --git a/docs/api/classes/application_ProcessCaptureError.ProcessCaptureError.html b/docs/api/classes/application_ProcessCaptureError.ProcessCaptureError.html
index a1ef3b5da..5e39081f1 100644
--- a/docs/api/classes/application_ProcessCaptureError.ProcessCaptureError.html
+++ b/docs/api/classes/application_ProcessCaptureError.ProcessCaptureError.html
@@ -14,7 +14,7 @@
-
+
AnalysisError
diff --git a/docs/api/classes/application_ProjectPermissionStore.ProjectPermissionStoreError.html b/docs/api/classes/application_ProjectPermissionStore.ProjectPermissionStoreError.html
index 22739c806..09744d4d3 100644
--- a/docs/api/classes/application_ProjectPermissionStore.ProjectPermissionStoreError.html
+++ b/docs/api/classes/application_ProjectPermissionStore.ProjectPermissionStoreError.html
@@ -14,7 +14,7 @@
-
+
Hierarchy
Error
diff --git a/docs/api/classes/domain_permissionPolicy.PermissionGrantError.html b/docs/api/classes/domain_permissionPolicy.PermissionGrantError.html
index 42b598e81..244d90636 100644
--- a/docs/api/classes/domain_permissionPolicy.PermissionGrantError.html
+++ b/docs/api/classes/domain_permissionPolicy.PermissionGrantError.html
@@ -14,7 +14,7 @@
-
+
Hierarchy
Error
diff --git a/docs/api/classes/ghidra_GhidraLauncher.GhidraLaunchError.html b/docs/api/classes/ghidra_GhidraLauncher.GhidraLaunchError.html
index 67baa934c..cfd8f5557 100644
--- a/docs/api/classes/ghidra_GhidraLauncher.GhidraLaunchError.html
+++ b/docs/api/classes/ghidra_GhidraLauncher.GhidraLaunchError.html
@@ -14,7 +14,7 @@
-
+
Hierarchy
Error
diff --git a/docs/api/classes/ghidra_GhidraSessionError.GhidraSessionError.html b/docs/api/classes/ghidra_GhidraSessionError.GhidraSessionError.html
index 2d4cf5cb6..f375fbdc4 100644
--- a/docs/api/classes/ghidra_GhidraSessionError.GhidraSessionError.html
+++ b/docs/api/classes/ghidra_GhidraSessionError.GhidraSessionError.html
@@ -14,7 +14,7 @@
-
+
Hierarchy
Error
diff --git a/docs/api/classes/ghidra_protocol.GhidraRemoteError.html b/docs/api/classes/ghidra_protocol.GhidraRemoteError.html
index ee523c7d0..182a9ba35 100644
--- a/docs/api/classes/ghidra_protocol.GhidraRemoteError.html
+++ b/docs/api/classes/ghidra_protocol.GhidraRemoteError.html
@@ -14,7 +14,7 @@
-
+
Hierarchy
Error
diff --git a/docs/api/functions/application_CapabilityInventory.buildCapabilityInventory.html b/docs/api/functions/application_CapabilityInventory.buildCapabilityInventory.html
index df37ab72d..853630c5a 100644
--- a/docs/api/functions/application_CapabilityInventory.buildCapabilityInventory.html
+++ b/docs/api/functions/application_CapabilityInventory.buildCapabilityInventory.html
@@ -14,7 +14,7 @@
-buildCapabilityInventory ( sessionStatus : JSONType , policy : { browserObservationEnabled ?: boolean ; electronObservationEnabled ?: boolean ; evidenceFileRoots : number ; javascriptReplayEnabled ?: boolean ; processCaptureEnabled : boolean ; } , ) : { annotations : { destructive : boolean ; idempotent : boolean ; open_world : boolean ; read_only : boolean ; } ; available : boolean ; name : | "open_binary" | "list_browser_targets" | "inspect_web_page" | "analyze_web_bundle" | "observe_web_session" | "discover_webmcp_tools" | "compare_web_captures" | "capture_web_screenshot" | "compare_web_screenshots" | "list_electron_targets" | "inspect_electron_page" | "inventory_artifact" | "extract_artifact" | "analyze_javascript_application" | "swift_classes" | "get_objc_classes" | "get_objc_protocols" | "batch_decompile" | "get_call_graph" | "analyze_swift_types" | "find_xrefs_to_name" | "binary_overview" | "analyze_function" | "trace_feature" | "comment" | "compare_artifacts" | "find_changed_behavior" | "compare_process_captures" | "compare_functions" | "capture_process_scenario" | "address_name" | "current_address" | "current_procedure" | "current_document" | "goto_address" | "inline_comment" | "list_bookmarks" | "list_documents" | "list_names" | "list_procedures" | "list_segments" | "list_strings" | "next_address" | "prev_address" | "procedure_address" | "procedure_assembly" | "procedure_callees" | "procedure_callers" | "procedure_info" | "procedure_references" | "procedure_pseudo_code" | "resolve_containing_procedure" | "search_procedures" | "search_strings" | "set_address_name" | "set_addresses_names" | "set_bookmark" | "set_comment" | "set_current_document" | "set_inline_comment" | "unset_bookmark" | "xrefs" | "inspect_macho" | "inspect_signature" | "inspect_plist" | "list_architectures" | "demangle_swift" | "inspect_managed_artifact" | "close_binary" | "binary_session" | "export_evidence_bundle" | "import_evidence_bundle" | "compare_bundles" | "build_call_path" | "correlate_static_and_runtime" | "verify_reconstruction" | "list_unknowns" | "record_unknown" | "update_unknown" | "verify_unknown_resolution" | "reconcile_javascript_runtime" | "trace_application_feature" | "compare_application_versions" | "run_controlled_replay" ; reason : ToolAvailabilityReason ; remediation : string | null ; surface : ToolKind ; } [] buildCapabilityInventory ( sessionStatus : JSONType , policy : { browserObservationEnabled ?: boolean ; electronObservationEnabled ?: boolean ; evidenceFileRoots : number ; javascriptReplayEnabled ?: boolean ; processCaptureEnabled : boolean ; } , ) : { annotations : { destructive : boolean ; idempotent : boolean ; open_world : boolean ; read_only : boolean ; } ; available : boolean ; name : | "open_binary" | "list_browser_targets" | "inspect_web_page" | "analyze_web_bundle" | "observe_web_session" | "discover_webmcp_tools" | "compare_web_captures" | "capture_web_screenshot" | "compare_web_screenshots" | "list_electron_targets" | "inspect_electron_page" | "inventory_artifact" | "extract_artifact" | "analyze_javascript_application" | "swift_classes" | "get_objc_classes" | "get_objc_protocols" | "batch_decompile" | "get_call_graph" | "analyze_swift_types" | "find_xrefs_to_name" | "binary_overview" | "analyze_function" | "trace_feature" | "comment" | "compare_artifacts" | "find_changed_behavior" | "compare_process_captures" | "compare_functions" | "capture_process_scenario" | "address_name" | "current_address" | "current_procedure" | "current_document" | "goto_address" | "inline_comment" | "list_bookmarks" | "list_documents" | "list_names" | "list_procedures" | "list_segments" | "list_strings" | "next_address" | "prev_address" | "procedure_address" | "procedure_assembly" | "procedure_callees" | "procedure_callers" | "procedure_info" | "procedure_references" | "procedure_pseudo_code" | "resolve_containing_procedure" | "search_procedures" | "search_strings" | "set_address_name" | "set_addresses_names" | "set_bookmark" | "set_comment" | "set_current_document" | "set_inline_comment" | "unset_bookmark" | "xrefs" | "inspect_macho" | "inspect_signature" | "inspect_plist" | "list_architectures" | "demangle_swift" | "inspect_managed_artifact" | "inspect_managed_members" | "close_binary" | "binary_session" | "export_evidence_bundle" | "import_evidence_bundle" | "compare_bundles" | "build_call_path" | "correlate_static_and_runtime" | "verify_reconstruction" | "list_unknowns" | "record_unknown" | "update_unknown" | "verify_unknown_resolution" | "reconcile_javascript_runtime" | "trace_application_feature" | "compare_application_versions" | "run_controlled_replay" ; reason : ToolAvailabilityReason ; remediation : string | null ; surface : ToolKind ; } []
@@ -23,7 +23,7 @@
sessionStatus : JSONType policy : { browserObservationEnabled ?: boolean ; electronObservationEnabled ?: boolean ; evidenceFileRoots : number ; javascriptReplayEnabled ?: boolean ; processCaptureEnabled : boolean ; } Returns { annotations : { destructive : boolean ; idempotent : boolean ; open_world : boolean ; read_only : boolean ; } ; available : boolean ; name : | "open_binary" | "list_browser_targets" | "inspect_web_page" | "analyze_web_bundle" | "observe_web_session" | "discover_webmcp_tools" | "compare_web_captures" | "capture_web_screenshot" | "compare_web_screenshots" | "list_electron_targets" | "inspect_electron_page" | "inventory_artifact" | "extract_artifact" | "analyze_javascript_application" | "swift_classes" | "get_objc_classes" | "get_objc_protocols" | "batch_decompile" | "get_call_graph" | "analyze_swift_types" | "find_xrefs_to_name" | "binary_overview" | "analyze_function" | "trace_feature" | "comment" | "compare_artifacts" | "find_changed_behavior" | "compare_process_captures" | "compare_functions" | "capture_process_scenario" | "address_name" | "current_address" | "current_procedure" | "current_document" | "goto_address" | "inline_comment" | "list_bookmarks" | "list_documents" | "list_names" | "list_procedures" | "list_segments" | "list_strings" | "next_address" | "prev_address" | "procedure_address" | "procedure_assembly" | "procedure_callees" | "procedure_callers" | "procedure_info" | "procedure_references" | "procedure_pseudo_code" | "resolve_containing_procedure" | "search_procedures" | "search_strings" | "set_address_name" | "set_addresses_names" | "set_bookmark" | "set_comment" | "set_current_document" | "set_inline_comment" | "unset_bookmark" | "xrefs" | "inspect_macho" | "inspect_signature" | "inspect_plist" | "list_architectures" | "demangle_swift" | "inspect_managed_artifact" | "close_binary" | "binary_session" | "export_evidence_bundle" | "import_evidence_bundle" | "compare_bundles" | "build_call_path" | "correlate_static_and_runtime" | "verify_reconstruction" | "list_unknowns" | "record_unknown" | "update_unknown" | "verify_unknown_resolution" | "reconcile_javascript_runtime" | "trace_application_feature" | "compare_application_versions" | "run_controlled_replay" ; reason : ToolAvailabilityReason ; remediation : string | null ; surface : ToolKind ; } []
+Returns { annotations : { destructive : boolean ; idempotent : boolean ; open_world : boolean ; read_only : boolean ; } ; available : boolean ; name : | "open_binary" | "list_browser_targets" | "inspect_web_page" | "analyze_web_bundle" | "observe_web_session" | "discover_webmcp_tools" | "compare_web_captures" | "capture_web_screenshot" | "compare_web_screenshots" | "list_electron_targets" | "inspect_electron_page" | "inventory_artifact" | "extract_artifact" | "analyze_javascript_application" | "swift_classes" | "get_objc_classes" | "get_objc_protocols" | "batch_decompile" | "get_call_graph" | "analyze_swift_types" | "find_xrefs_to_name" | "binary_overview" | "analyze_function" | "trace_feature" | "comment" | "compare_artifacts" | "find_changed_behavior" | "compare_process_captures" | "compare_functions" | "capture_process_scenario" | "address_name" | "current_address" | "current_procedure" | "current_document" | "goto_address" | "inline_comment" | "list_bookmarks" | "list_documents" | "list_names" | "list_procedures" | "list_segments" | "list_strings" | "next_address" | "prev_address" | "procedure_address" | "procedure_assembly" | "procedure_callees" | "procedure_callers" | "procedure_info" | "procedure_references" | "procedure_pseudo_code" | "resolve_containing_procedure" | "search_procedures" | "search_strings" | "set_address_name" | "set_addresses_names" | "set_bookmark" | "set_comment" | "set_current_document" | "set_inline_comment" | "unset_bookmark" | "xrefs" | "inspect_macho" | "inspect_signature" | "inspect_plist" | "list_architectures" | "demangle_swift" | "inspect_managed_artifact" | "inspect_managed_members" | "close_binary" | "binary_session" | "export_evidence_bundle" | "import_evidence_bundle" | "compare_bundles" | "build_call_path" | "correlate_static_and_runtime" | "verify_reconstruction" | "list_unknowns" | "record_unknown" | "update_unknown" | "verify_unknown_resolution" | "reconcile_javascript_runtime" | "trace_application_feature" | "compare_application_versions" | "run_controlled_replay" ; reason : ToolAvailabilityReason ; remediation : string | null ; surface : ToolKind ; } []
Returns ZodObject
+Defined in src/contracts/toolOutputSchemas.ts:52
-
+
WebInventoryResourceInput
diff --git a/docs/api/interfaces/ghidra_GhidraLauncher.GhidraLaunch.html b/docs/api/interfaces/ghidra_GhidraLauncher.GhidraLaunch.html
index e3ab9a4a8..70258f528 100644
--- a/docs/api/interfaces/ghidra_GhidraLauncher.GhidraLaunch.html
+++ b/docs/api/interfaces/ghidra_GhidraLauncher.GhidraLaunch.html
@@ -15,7 +15,7 @@
-
+
ProviderProcessLaunch
diff --git a/docs/api/interfaces/ghidra_GhidraSessionError.GhidraSessionErrorOptions.html b/docs/api/interfaces/ghidra_GhidraSessionError.GhidraSessionErrorOptions.html
index f7607cfca..626ca20dc 100644
--- a/docs/api/interfaces/ghidra_GhidraSessionError.GhidraSessionErrorOptions.html
+++ b/docs/api/interfaces/ghidra_GhidraSessionError.GhidraSessionErrorOptions.html
@@ -15,7 +15,7 @@
-
+
Hierarchy
ErrorOptions
diff --git a/docs/api/interfaces/hopper_BridgeLauncher.BridgeLaunch.html b/docs/api/interfaces/hopper_BridgeLauncher.BridgeLaunch.html
index bfbf032c9..785bc6521 100644
--- a/docs/api/interfaces/hopper_BridgeLauncher.BridgeLaunch.html
+++ b/docs/api/interfaces/hopper_BridgeLauncher.BridgeLaunch.html
@@ -15,7 +15,7 @@
-
+
ProviderProcessLaunch
diff --git a/docs/api/interfaces/process_ProviderProcess.ProviderProcessLaunch.html b/docs/api/interfaces/process_ProviderProcess.ProviderProcessLaunch.html
index f986cc511..25a40184b 100644
--- a/docs/api/interfaces/process_ProviderProcess.ProviderProcessLaunch.html
+++ b/docs/api/interfaces/process_ProviderProcess.ProviderProcessLaunch.html
@@ -15,7 +15,7 @@
-
Failure to establish a filesystem object's canonical authorization identity.