From dae6807c4a4aad7a20c4b9da085e39dcfb58430a Mon Sep 17 00:00:00 2001 From: N0zoM1z0 <1705004398@qq.com> Date: Fri, 17 Jul 2026 20:26:22 +0800 Subject: [PATCH] fix(dotnet): downgrade truncated CIL identity and coverage --- docs/api/assets/hierarchy.js | 2 +- ...rmissionAuthority.PermissionPathError.html | 2 +- ...ocessCaptureError.ProcessCaptureError.html | 2 +- ...sionStore.ProjectPermissionStoreError.html | 2 +- ...serProcessStartup.BrowserStartupError.html | 2 +- ...permissionPolicy.PermissionGrantError.html | 2 +- ...idra_GhidraLauncher.GhidraLaunchError.html | 2 +- ...GhidraSessionError.GhidraSessionError.html | 2 +- .../ghidra_protocol.GhidraRemoteError.html | 2 +- ...Comparison.parseManagedMemberEvidence.html | 6 +- ...elation.planManagedRuntimeCorrelation.html | 6 +- docs/api/hierarchy.html | 60 +++++++++---------- ...ation_AnalysisProvider.AnalysisClient.html | 2 +- ...nalysisProvider.AnalysisOperationPort.html | 2 +- ...ion_AnalysisProvider.AnalysisProvider.html | 2 +- ...sisProvider.AnalysisProviderCandidate.html | 2 +- ...n_BinarySessionPort.BinarySessionPort.html | 2 +- ...riptArtifactGraphContext.AstEdgeInput.html | 2 +- ...tifactGraphContext.InferenceEdgeInput.html | 2 +- ...omparison.ManagedMemberComparisonSide.html | 4 +- ...main_permissionPolicy.PermissionGrant.html | 2 +- ...in_permissionPolicy.PermissionRequest.html | 2 +- ...main_permissionPolicy.PermissionScope.html | 2 +- ...domain_webInventory.StableWebResource.html | 2 +- ...ebInventory.WebInventoryResourceInput.html | 2 +- .../ghidra_GhidraLauncher.GhidraLaunch.html | 2 +- ...essionError.GhidraSessionErrorOptions.html | 2 +- .../hopper_BridgeLauncher.BridgeLaunch.html | 2 +- ...ProviderProcess.ProviderProcessLaunch.html | 2 +- ...lation.ManagedRuntimeCorrelationInput.html | 2 +- ...ation.ManagedRuntimeCorrelationResult.html | 2 +- ...rtifact.managedMemberInspectionSchema.html | 2 +- ...managedRuntimeCorrelationResultSchema.html | 2 +- docs/product-catalog.json | 4 +- skills/reverse-engineer-anything/SKILL.md | 2 +- src/domain/managedArtifact.ts | 2 +- src/domain/managedMemberComparison.ts | 55 +++++++++-------- src/domain/managedReconstruction.ts | 3 + src/domain/managedRuntimeCorrelation.ts | 11 +++- src/dotnet/ManagedMemberInspector.ts | 42 +++++++++++-- tests/managedArtifactProvider.test.ts | 38 ++++++++++++ tests/managedMemberComparison.test.ts | 35 ++++++++++- tests/managedReconstruction.test.ts | 54 +++++++++++++++++ tests/managedRuntimeCorrelation.test.ts | 37 +++++++++++- 44 files changed, 312 insertions(+), 105 deletions(-) diff --git a/docs/api/assets/hierarchy.js b/docs/api/assets/hierarchy.js index 9d4b6138f..d7934cf34 100644 --- a/docs/api/assets/hierarchy.js +++ b/docs/api/assets/hierarchy.js @@ -1 +1 @@ -window.hierarchyData = "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" \ No newline at end of file +window.hierarchyData = "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" \ No newline at end of file diff --git a/docs/api/classes/application_PermissionAuthority.PermissionPathError.html b/docs/api/classes/application_PermissionAuthority.PermissionPathError.html index 9befda3e2..c5928c649 100644 --- a/docs/api/classes/application_PermissionAuthority.PermissionPathError.html +++ b/docs/api/classes/application_PermissionAuthority.PermissionPathError.html @@ -14,7 +14,7 @@

Failure to establish a filesystem object's canonical authorization identity.

-
+

Hierarchy

+
  • BinarySession
    • +
  • GhidraProvider
    • +
  • HopperProvider
    • +
  • InferenceEdgeInput
    • +
  • HopperApplicationLauncher
    • +
  • CdpBrowserProvider
    • +
  • CdpElectronProvider
    • +
  • GhidraHeadlessLauncher
    • +
  • InstrumentedJavaScriptReplayHost
    • +
  • PermissionRequest
    • +
  • PermissionGrant
    • +
  • BridgeLaunch
    • +
  • GhidraLaunch
    • +
  • StableWebResource
    • diff --git a/docs/api/interfaces/application_AnalysisProvider.AnalysisClient.html b/docs/api/interfaces/application_AnalysisProvider.AnalysisClient.html index f923024ce..8147d1c4a 100644 --- a/docs/api/interfaces/application_AnalysisProvider.AnalysisClient.html +++ b/docs/api/interfaces/application_AnalysisProvider.AnalysisClient.html @@ -15,7 +15,7 @@

    Provider session bound to exactly one parsed artifact.

    interface AnalysisClient {
        close(): Promise<void>;
        execute(
            operation: AnalysisOperation,
            parameters: Readonly<Record<string, JsonValue>>,
            options?: ExecutionOptions,
        ): Promise<Result<AnalysisExecution, AnalysisError>>;
    }
    -
    +

    Hierarchy (View Summary)

    • AnalysisOperationPort diff --git a/docs/api/interfaces/application_AnalysisProvider.AnalysisOperationPort.html b/docs/api/interfaces/application_AnalysisProvider.AnalysisOperationPort.html index acced1661..40367ffaa 100644 --- a/docs/api/interfaces/application_AnalysisProvider.AnalysisOperationPort.html +++ b/docs/api/interfaces/application_AnalysisProvider.AnalysisOperationPort.html @@ -15,7 +15,7 @@

      Provider-neutral application capability for one analysis operation.

    interface AnalysisOperationPort {
        execute(
            operation: AnalysisOperation,
            parameters: Readonly<Record<string, JsonValue>>,
            options?: ExecutionOptions,
        ): Promise<Result<AnalysisExecution, AnalysisError>>;
    }
    -
    +

    Hierarchy (View Summary)

    • AnalysisOperationPort diff --git a/docs/api/interfaces/application_AnalysisProvider.AnalysisProvider.html b/docs/api/interfaces/application_AnalysisProvider.AnalysisProvider.html index 44a3e1ac1..a226e3cf7 100644 --- a/docs/api/interfaces/application_AnalysisProvider.AnalysisProvider.html +++ b/docs/api/interfaces/application_AnalysisProvider.AnalysisProvider.html @@ -15,7 +15,7 @@

      Factory and capability declaration for an analysis implementation.

    interface AnalysisProvider {
        capabilities(): readonly CapabilityDescriptor[];
        createClient(
            target: BinaryTarget,
            profile?: {
                digest: string;
                parameters: Record<string, JSONType>;
                provider: { id: string; name: string; version: string };
                provider_profile_schema_version: number;
                schema_version: 1;
            },
        ): AnalysisClient;
        identity(): ProviderIdentity;
        resolveAnalysisProfile?(
            target: BinaryTarget,
            options?: AnalysisProfileResolutionOptions,
        ): Promise<Result<AnalysisProfileResolution, AnalysisError>>;
    }
    -
    +

    Hierarchy (View Summary)

    • AnalysisProvider diff --git a/docs/api/interfaces/application_AnalysisProvider.AnalysisProviderCandidate.html b/docs/api/interfaces/application_AnalysisProvider.AnalysisProviderCandidate.html index 56128635f..9aa4b3f0b 100644 --- a/docs/api/interfaces/application_AnalysisProvider.AnalysisProviderCandidate.html +++ b/docs/api/interfaces/application_AnalysisProvider.AnalysisProviderCandidate.html @@ -15,7 +15,7 @@

      Deep provider candidate discoverable before one target-bound route is chosen.

    interface AnalysisProviderCandidate {
        capabilities(): readonly CapabilityDescriptor[];
        createClient(
            target: BinaryTarget,
            profile?: {
                digest: string;
                parameters: Record<string, JSONType>;
                provider: { id: string; name: string; version: string };
                provider_profile_schema_version: number;
                schema_version: 1;
            },
        ): AnalysisClient;
        identity(): ProviderIdentity;
        inspectAvailability(): ProviderAvailability;
        inspectTargetSupport(target: BinaryTarget): ProviderTargetSupport;
        resolveAnalysisProfile(
            target: BinaryTarget,
            options?: AnalysisProfileResolutionOptions,
        ): Promise<Result<AnalysisProfileResolution, AnalysisError>>;
    }
    -
    +

    Hierarchy (View Summary)

    • AnalysisProvider diff --git a/docs/api/interfaces/application_BinarySessionPort.BinarySessionPort.html b/docs/api/interfaces/application_BinarySessionPort.BinarySessionPort.html index a8b6316c2..1114a4acf 100644 --- a/docs/api/interfaces/application_BinarySessionPort.BinarySessionPort.html +++ b/docs/api/interfaces/application_BinarySessionPort.BinarySessionPort.html @@ -15,7 +15,7 @@

      Target lifecycle used by CLI and MCP without exposing a concrete provider.

    interface BinarySessionPort {
        activeTarget(): BinaryTarget | undefined;
        analysisProfile(
            operation?: AnalysisOperation,
        ):
            | {
                digest: string;
                parameters: Record<string, JSONType>;
                provider: { id: string; name: string; version: string };
                provider_profile_schema_version: number;
                schema_version: 1;
            }
            | undefined;
        close(): Promise<Result<null, AnalysisError>>;
        evidenceById(
            evidenceId: string,
        ):
            | {
                analysis_profile: {
                    digest: string;
                    parameters: Record<string, JSONType>;
                    provider: { id: string; name: string; version: string };
                    provider_profile_schema_version: number;
                    schema_version: 1;
                };
                authority: | "shipped-artifact"
                | "controlled-replay"
                | "historical-reference"
                | "external-service"
                | "analyst-inference";
                confidence: "observed"
                | "derived"
                | "inferred";
                environment:
                    | {
                        architecture: string;
                        id: string;
                        isolation: "process"
                        | "none"
                        | "container"
                        | "virtual-machine";
                        platform: string;
                    }
                    | null;
                evidence_id: string;
                evidence_links: string[];
                limitations: string[];
                locations: (
                    | { address: string; kind: "address" }
                    | { end: string; kind: "address-range"; start: string }
                    | { kind: "artifact-path"; path: string }
                    | { kind: "file-offset"; offset: number }
                    | { end: number; kind: "file-offset-range"; start: number }
                )[];
                normalized_result: JSONType;
                operation: string;
                parameters: Record<string, JSONType>;
                predicate_type: string;
                provider: { id: string; name: string; version: string | null };
                raw_result: JSONType;
                schema_version: 2;
                subject:
                    | {
                        architecture: "x86"
                        | "x86_64"
                        | "arm"
                        | "arm64"
                        | null;
                        digest: { sha256: string };
                        format:
                            | "unknown"
                            | "file"
                            | "directory"
                            | "javascript"
                            | "source-map"
                            | "plist"
                            | "entitlements"
                            | "dmg"
                            | "zip"
                            | "pkg"
                            | "asar"
                            | "javascript-bundle"
                            | "mach-o-universal"
                            | "mach-o"
                            | "elf"
                            | "pe"
                            | "hopper"
                            | "analysis-database"
                            | "ipa"
                            | "apk";
                        local_path: string;
                        name: string;
                    }
                    | null;
            }
            | {
                authority: | "shipped-artifact"
                | "controlled-replay"
                | "historical-reference"
                | "external-service"
                | "analyst-inference";
                confidence: "observed"
                | "derived"
                | "inferred";
                environment:
                    | {
                        architecture: string;
                        id: string;
                        isolation: "process"
                        | "none"
                        | "container"
                        | "virtual-machine";
                        platform: string;
                    }
                    | null;
                evidence_id: string;
                evidence_links: string[];
                limitations: string[];
                locations: (
                    | { address: string; kind: "address" }
                    | { end: string; kind: "address-range"; start: string }
                    | { kind: "artifact-path"; path: string }
                    | { kind: "file-offset"; offset: number }
                    | { end: number; kind: "file-offset-range"; start: number }
                )[];
                normalized_result: JSONType;
                operation: string;
                parameters: Record<string, JSONType>;
                predicate_type: string;
                provider: { id: string; name: string; version: string | null };
                raw_result: JSONType;
                schema_version: 2;
                subject:
                    | {
                        architecture: "x86"
                        | "x86_64"
                        | "arm"
                        | "arm64"
                        | null;
                        digest: { sha256: string };
                        format:
                            | "unknown"
                            | "file"
                            | "directory"
                            | "javascript"
                            | "source-map"
                            | "plist"
                            | "entitlements"
                            | "dmg"
                            | "zip"
                            | "pkg"
                            | "asar"
                            | "javascript-bundle"
                            | "mach-o-universal"
                            | "mach-o"
                            | "elf"
                            | "pe"
                            | "hopper"
                            | "analysis-database"
                            | "ipa"
                            | "apk";
                        local_path: string;
                        name: string;
                    }
                    | null;
            }
            | undefined;
        execute(
            operation: AnalysisOperation,
            parameters: Readonly<Record<string, JsonValue>>,
            options?: ExecutionOptions,
        ): Promise<Result<AnalysisExecution, AnalysisError>>;
        exportAnalysisSnapshot(): Result<
            {
                binding: {
                    analysis_profile: {
                        digest: string;
                        parameters: Record<string, JSONType>;
                        provider: { id: string; name: string; version: string };
                        provider_profile_schema_version: number;
                        schema_version: 1;
                    };
                    provider: { id: string; name: string; version: string };
                };
                entries: {
                    execution: {
                        limitations: string[];
                        locations: (
                            | { address: string; kind: "address" }
                            | { end: string; kind: "address-range"; start: string }
                            | { kind: "artifact-path"; path: string }
                            | { kind: "file-offset"; offset: number }
                            | { end: number; kind: "file-offset-range"; start: number }
                        )[];
                        provider: { id: string; name: string; version: string };
                        raw_result: JSONType;
                        result: JSONType;
                        subject:
                            | {
                                architecture: "x86"
                                | "x86_64"
                                | "arm"
                                | "arm64"
                                | null;
                                format:
                                    | "unknown"
                                    | "file"
                                    | "directory"
                                    | "javascript"
                                    | "source-map"
                                    | "plist"
                                    | "entitlements"
                                    | "dmg"
                                    | "zip"
                                    | "pkg"
                                    | "asar"
                                    | "javascript-bundle"
                                    | "mach-o-universal"
                                    | "mach-o"
                                    | "elf"
                                    | "pe"
                                    | "hopper"
                                    | "analysis-database"
                                    | "ipa"
                                    | "apk";
                                path: string;
                                sha256: string;
                            }
                            | null;
                    };
                    operation: string;
                    parameters: Record<string, JSONType>;
                    query_id: string;
                }[];
                evidence_bundle: {
                    artifacts: {
                        architecture: "x86"
                        | "x86_64"
                        | "arm"
                        | "arm64"
                        | null;
                        digest: { sha256: string };
                        format:
                            | "unknown"
                            | "file"
                            | "directory"
                            | "javascript"
                            | "source-map"
                            | "plist"
                            | "entitlements"
                            | "dmg"
                            | "zip"
                            | "pkg"
                            | "asar"
                            | "javascript-bundle"
                            | "mach-o-universal"
                            | "mach-o"
                            | "elf"
                            | "pe"
                            | "hopper"
                            | "analysis-database"
                            | "ipa"
                            | "apk";
                    }[];
                    bundle_version: 2;
                    captures: { evidence_id: string; predicate_type: string }[];
                    environments: {
                        architecture: string;
                        id: string;
                        isolation: "process" | "none" | "container" | "virtual-machine";
                        platform: string;
                    }[];
                    providers: { id: string; name: string; version: string
                    | null }[];
                    records: (
                        | {
                            analysis_profile: {
                                digest: string;
                                parameters: Record<string, JSONType>;
                                provider: { id: string; name: string; version: string };
                                provider_profile_schema_version: number;
                                schema_version: 1;
                            };
                            authority: | "shipped-artifact"
                            | "controlled-replay"
                            | "historical-reference"
                            | "external-service"
                            | "analyst-inference";
                            confidence: "observed"
                            | "derived"
                            | "inferred";
                            environment:
                                | {
                                    architecture: string;
                                    id: string;
                                    isolation: "process"
                                    | "none"
                                    | "container"
                                    | "virtual-machine";
                                    platform: string;
                                }
                                | null;
                            evidence_id: string;
                            evidence_links: string[];
                            limitations: string[];
                            locations: (
                                | { address: string; kind: "address" }
                                | { end: string; kind: "address-range"; start: string }
                                | { kind: "artifact-path"; path: string }
                                | { kind: "file-offset"; offset: number }
                                | { end: number; kind: "file-offset-range"; start: number }
                            )[];
                            normalized_result: JSONType;
                            operation: string;
                            parameters: Record<string, JSONType>;
                            predicate_type: string;
                            provider: { id: string; name: string; version: string | null };
                            raw_result: JSONType;
                            schema_version: 2;
                            subject:
                                | {
                                    architecture: "x86"
                                    | "x86_64"
                                    | "arm"
                                    | "arm64"
                                    | null;
                                    digest: { sha256: string };
                                    format:
                                        | "unknown"
                                        | "file"
                                        | "directory"
                                        | "javascript"
                                        | "source-map"
                                        | "plist"
                                        | "entitlements"
                                        | "dmg"
                                        | "zip"
                                        | "pkg"
                                        | "asar"
                                        | "javascript-bundle"
                                        | "mach-o-universal"
                                        | "mach-o"
                                        | "elf"
                                        | "pe"
                                        | "hopper"
                                        | "analysis-database"
                                        | "ipa"
                                        | "apk";
                                    local_path: string;
                                    name: string;
                                }
                                | null;
                        }
                        | {
                            authority: | "shipped-artifact"
                            | "controlled-replay"
                            | "historical-reference"
                            | "external-service"
                            | "analyst-inference";
                            confidence: "observed"
                            | "derived"
                            | "inferred";
                            environment:
                                | {
                                    architecture: string;
                                    id: string;
                                    isolation: "process"
                                    | "none"
                                    | "container"
                                    | "virtual-machine";
                                    platform: string;
                                }
                                | null;
                            evidence_id: string;
                            evidence_links: string[];
                            limitations: string[];
                            locations: (
                                | { address: string; kind: "address" }
                                | { end: string; kind: "address-range"; start: string }
                                | { kind: "artifact-path"; path: string }
                                | { kind: "file-offset"; offset: number }
                                | { end: number; kind: "file-offset-range"; start: number }
                            )[];
                            normalized_result: JSONType;
                            operation: string;
                            parameters: Record<string, JSONType>;
                            predicate_type: string;
                            provider: { id: string; name: string; version: string | null };
                            raw_result: JSONType;
                            schema_version: 2;
                            subject:
                                | {
                                    architecture: "x86"
                                    | "x86_64"
                                    | "arm"
                                    | "arm64"
                                    | null;
                                    digest: { sha256: string };
                                    format:
                                        | "unknown"
                                        | "file"
                                        | "directory"
                                        | "javascript"
                                        | "source-map"
                                        | "plist"
                                        | "entitlements"
                                        | "dmg"
                                        | "zip"
                                        | "pkg"
                                        | "asar"
                                        | "javascript-bundle"
                                        | "mach-o-universal"
                                        | "mach-o"
                                        | "elf"
                                        | "pe"
                                        | "hopper"
                                        | "analysis-database"
                                        | "ipa"
                                        | "apk";
                                    local_path: string;
                                    name: string;
                                }
                                | null;
                        }
                    )[];
                    scenarios: {
                        authority: "controlled-replay";
                        evidence_id: string;
                        operation: string;
                    }[];
                    unknowns: {
                        contradicting_evidence_ids: string[];
                        domain: string;
                        mutation_evidence_ids: string[];
                        previous_revision_digest: string
                        | null;
                        question: string;
                        recommended_probes: { operation: string; rationale: string }[];
                        registry_version: 1;
                        relationships: {
                            type: "depends-on" | "related-to" | "contradicts";
                            unknown_id: string;
                        }[];
                        required_authority: | "shipped-artifact"
                        | "controlled-replay"
                        | "historical-reference"
                        | "external-service"
                        | "analyst-inference"
                        | null;
                        required_confidence: "observed"
                        | "derived"
                        | "inferred";
                        required_environment:
                            | {
                                architecture: string
                                | null;
                                id: string | null;
                                isolation:
                                    | "process"
                                    | "none"
                                    | "container"
                                    | "virtual-machine"
                                    | null;
                                platform: string
                                | null;
                            }
                            | null;
                        resolution: | {
                            disposition: "verified";
                            evidence_ids: string[];
                            rationale: string;
                        }
                        | {
                            disposition: "withdrawn"
                            | "out-of-scope";
                            evidence_ids: string[];
                            rationale: string;
                        }
                        | null;
                        revision: number;
                        revision_digest: string;
                        scope_digest: string
                        | null;
                        severity: "low" | "medium" | "high" | "critical";
                        status:
                            | "open"
                            | "investigating"
                            | "blocked"
                            | "contradicted"
                            | "resolved";
                        supporting_evidence_ids: string[];
                        unknown_id: string;
                    }[];
                };
                snapshot_version: 2;
                target: {
                    architecture: "x86"
                    | "x86_64"
                    | "arm"
                    | "arm64"
                    | null;
                    format:
                        | "javascript"
                        | "source-map"
                        | "plist"
                        | "dmg"
                        | "zip"
                        | "pkg"
                        | "asar"
                        | "mach-o"
                        | "elf"
                        | "pe"
                        | "analysis-database"
                        | "ipa"
                        | "apk";
                    kind: "executable"
                    | "database"
                    | "archive"
                    | "artifact";
                    sha256: string;
                };
            },
            AnalysisError,
        >;
        exportEvidenceBundle(): {
            artifacts: {
                architecture: "x86"
                | "x86_64"
                | "arm"
                | "arm64"
                | null;
                digest: { sha256: string };
                format:
                    | "unknown"
                    | "file"
                    | "directory"
                    | "javascript"
                    | "source-map"
                    | "plist"
                    | "entitlements"
                    | "dmg"
                    | "zip"
                    | "pkg"
                    | "asar"
                    | "javascript-bundle"
                    | "mach-o-universal"
                    | "mach-o"
                    | "elf"
                    | "pe"
                    | "hopper"
                    | "analysis-database"
                    | "ipa"
                    | "apk";
            }[];
            bundle_version: 2;
            captures: { evidence_id: string; predicate_type: string }[];
            environments: {
                architecture: string;
                id: string;
                isolation: "process" | "none" | "container" | "virtual-machine";
                platform: string;
            }[];
            providers: { id: string; name: string; version: string
            | null }[];
            records: (
                | {
                    analysis_profile: {
                        digest: string;
                        parameters: Record<string, JSONType>;
                        provider: { id: string; name: string; version: string };
                        provider_profile_schema_version: number;
                        schema_version: 1;
                    };
                    authority: | "shipped-artifact"
                    | "controlled-replay"
                    | "historical-reference"
                    | "external-service"
                    | "analyst-inference";
                    confidence: "observed"
                    | "derived"
                    | "inferred";
                    environment:
                        | {
                            architecture: string;
                            id: string;
                            isolation: "process"
                            | "none"
                            | "container"
                            | "virtual-machine";
                            platform: string;
                        }
                        | null;
                    evidence_id: string;
                    evidence_links: string[];
                    limitations: string[];
                    locations: (
                        | { address: string; kind: "address" }
                        | { end: string; kind: "address-range"; start: string }
                        | { kind: "artifact-path"; path: string }
                        | { kind: "file-offset"; offset: number }
                        | { end: number; kind: "file-offset-range"; start: number }
                    )[];
                    normalized_result: JSONType;
                    operation: string;
                    parameters: Record<string, JSONType>;
                    predicate_type: string;
                    provider: { id: string; name: string; version: string | null };
                    raw_result: JSONType;
                    schema_version: 2;
                    subject:
                        | {
                            architecture: "x86"
                            | "x86_64"
                            | "arm"
                            | "arm64"
                            | null;
                            digest: { sha256: string };
                            format:
                                | "unknown"
                                | "file"
                                | "directory"
                                | "javascript"
                                | "source-map"
                                | "plist"
                                | "entitlements"
                                | "dmg"
                                | "zip"
                                | "pkg"
                                | "asar"
                                | "javascript-bundle"
                                | "mach-o-universal"
                                | "mach-o"
                                | "elf"
                                | "pe"
                                | "hopper"
                                | "analysis-database"
                                | "ipa"
                                | "apk";
                            local_path: string;
                            name: string;
                        }
                        | null;
                }
                | {
                    authority: | "shipped-artifact"
                    | "controlled-replay"
                    | "historical-reference"
                    | "external-service"
                    | "analyst-inference";
                    confidence: "observed"
                    | "derived"
                    | "inferred";
                    environment:
                        | {
                            architecture: string;
                            id: string;
                            isolation: "process"
                            | "none"
                            | "container"
                            | "virtual-machine";
                            platform: string;
                        }
                        | null;
                    evidence_id: string;
                    evidence_links: string[];
                    limitations: string[];
                    locations: (
                        | { address: string; kind: "address" }
                        | { end: string; kind: "address-range"; start: string }
                        | { kind: "artifact-path"; path: string }
                        | { kind: "file-offset"; offset: number }
                        | { end: number; kind: "file-offset-range"; start: number }
                    )[];
                    normalized_result: JSONType;
                    operation: string;
                    parameters: Record<string, JSONType>;
                    predicate_type: string;
                    provider: { id: string; name: string; version: string | null };
                    raw_result: JSONType;
                    schema_version: 2;
                    subject:
                        | {
                            architecture: "x86"
                            | "x86_64"
                            | "arm"
                            | "arm64"
                            | null;
                            digest: { sha256: string };
                            format:
                                | "unknown"
                                | "file"
                                | "directory"
                                | "javascript"
                                | "source-map"
                                | "plist"
                                | "entitlements"
                                | "dmg"
                                | "zip"
                                | "pkg"
                                | "asar"
                                | "javascript-bundle"
                                | "mach-o-universal"
                                | "mach-o"
                                | "elf"
                                | "pe"
                                | "hopper"
                                | "analysis-database"
                                | "ipa"
                                | "apk";
                            local_path: string;
                            name: string;
                        }
                        | null;
                }
            )[];
            scenarios: {
                authority: "controlled-replay";
                evidence_id: string;
                operation: string;
            }[];
            unknowns: {
                contradicting_evidence_ids: string[];
                domain: string;
                mutation_evidence_ids: string[];
                previous_revision_digest: string
                | null;
                question: string;
                recommended_probes: { operation: string; rationale: string }[];
                registry_version: 1;
                relationships: {
                    type: "depends-on" | "related-to" | "contradicts";
                    unknown_id: string;
                }[];
                required_authority: | "shipped-artifact"
                | "controlled-replay"
                | "historical-reference"
                | "external-service"
                | "analyst-inference"
                | null;
                required_confidence: "observed"
                | "derived"
                | "inferred";
                required_environment:
                    | {
                        architecture: string
                        | null;
                        id: string | null;
                        isolation: "process" | "none" | "container" | "virtual-machine" | null;
                        platform: string | null;
                    }
                    | null;
                resolution: | {
                    disposition: "verified";
                    evidence_ids: string[];
                    rationale: string;
                }
                | {
                    disposition: "withdrawn"
                    | "out-of-scope";
                    evidence_ids: string[];
                    rationale: string;
                }
                | null;
                revision: number;
                revision_digest: string;
                scope_digest: string
                | null;
                severity: "low" | "medium" | "high" | "critical";
                status:
                    | "open"
                    | "investigating"
                    | "blocked"
                    | "contradicted"
                    | "resolved";
                supporting_evidence_ids: string[];
                unknown_id: string;
            }[];
        };
        hasEvidence(evidenceId: string): boolean;
        importAnalysisSnapshot(
            snapshot: {
                binding: {
                    analysis_profile: {
                        digest: string;
                        parameters: Record<string, JSONType>;
                        provider: { id: string; name: string; version: string };
                        provider_profile_schema_version: number;
                        schema_version: 1;
                    };
                    provider: { id: string; name: string; version: string };
                };
                entries: {
                    execution: {
                        limitations: string[];
                        locations: (
                            | { address: string; kind: "address" }
                            | { end: string; kind: "address-range"; start: string }
                            | { kind: "artifact-path"; path: string }
                            | { kind: "file-offset"; offset: number }
                            | { end: number; kind: "file-offset-range"; start: number }
                        )[];
                        provider: { id: string; name: string; version: string };
                        raw_result: JSONType;
                        result: JSONType;
                        subject:
                            | {
                                architecture: "x86"
                                | "x86_64"
                                | "arm"
                                | "arm64"
                                | null;
                                format:
                                    | "unknown"
                                    | "file"
                                    | "directory"
                                    | "javascript"
                                    | "source-map"
                                    | "plist"
                                    | "entitlements"
                                    | "dmg"
                                    | "zip"
                                    | "pkg"
                                    | "asar"
                                    | "javascript-bundle"
                                    | "mach-o-universal"
                                    | "mach-o"
                                    | "elf"
                                    | "pe"
                                    | "hopper"
                                    | "analysis-database"
                                    | "ipa"
                                    | "apk";
                                path: string;
                                sha256: string;
                            }
                            | null;
                    };
                    operation: string;
                    parameters: Record<string, JSONType>;
                    query_id: string;
                }[];
                evidence_bundle: {
                    artifacts: {
                        architecture: "x86"
                        | "x86_64"
                        | "arm"
                        | "arm64"
                        | null;
                        digest: { sha256: string };
                        format:
                            | "unknown"
                            | "file"
                            | "directory"
                            | "javascript"
                            | "source-map"
                            | "plist"
                            | "entitlements"
                            | "dmg"
                            | "zip"
                            | "pkg"
                            | "asar"
                            | "javascript-bundle"
                            | "mach-o-universal"
                            | "mach-o"
                            | "elf"
                            | "pe"
                            | "hopper"
                            | "analysis-database"
                            | "ipa"
                            | "apk";
                    }[];
                    bundle_version: 2;
                    captures: { evidence_id: string; predicate_type: string }[];
                    environments: {
                        architecture: string;
                        id: string;
                        isolation: "process" | "none" | "container" | "virtual-machine";
                        platform: string;
                    }[];
                    providers: { id: string; name: string; version: string
                    | null }[];
                    records: (
                        | {
                            analysis_profile: {
                                digest: string;
                                parameters: Record<string, JSONType>;
                                provider: { id: string; name: string; version: string };
                                provider_profile_schema_version: number;
                                schema_version: 1;
                            };
                            authority: | "shipped-artifact"
                            | "controlled-replay"
                            | "historical-reference"
                            | "external-service"
                            | "analyst-inference";
                            confidence: "observed"
                            | "derived"
                            | "inferred";
                            environment:
                                | {
                                    architecture: string;
                                    id: string;
                                    isolation: "process"
                                    | "none"
                                    | "container"
                                    | "virtual-machine";
                                    platform: string;
                                }
                                | null;
                            evidence_id: string;
                            evidence_links: string[];
                            limitations: string[];
                            locations: (
                                | { address: string; kind: "address" }
                                | { end: string; kind: "address-range"; start: string }
                                | { kind: "artifact-path"; path: string }
                                | { kind: "file-offset"; offset: number }
                                | { end: number; kind: "file-offset-range"; start: number }
                            )[];
                            normalized_result: JSONType;
                            operation: string;
                            parameters: Record<string, JSONType>;
                            predicate_type: string;
                            provider: { id: string; name: string; version: string | null };
                            raw_result: JSONType;
                            schema_version: 2;
                            subject:
                                | {
                                    architecture: "x86"
                                    | "x86_64"
                                    | "arm"
                                    | "arm64"
                                    | null;
                                    digest: { sha256: string };
                                    format:
                                        | "unknown"
                                        | "file"
                                        | "directory"
                                        | "javascript"
                                        | "source-map"
                                        | "plist"
                                        | "entitlements"
                                        | "dmg"
                                        | "zip"
                                        | "pkg"
                                        | "asar"
                                        | "javascript-bundle"
                                        | "mach-o-universal"
                                        | "mach-o"
                                        | "elf"
                                        | "pe"
                                        | "hopper"
                                        | "analysis-database"
                                        | "ipa"
                                        | "apk";
                                    local_path: string;
                                    name: string;
                                }
                                | null;
                        }
                        | {
                            authority: | "shipped-artifact"
                            | "controlled-replay"
                            | "historical-reference"
                            | "external-service"
                            | "analyst-inference";
                            confidence: "observed"
                            | "derived"
                            | "inferred";
                            environment:
                                | {
                                    architecture: string;
                                    id: string;
                                    isolation: "process"
                                    | "none"
                                    | "container"
                                    | "virtual-machine";
                                    platform: string;
                                }
                                | null;
                            evidence_id: string;
                            evidence_links: string[];
                            limitations: string[];
                            locations: (
                                | { address: string; kind: "address" }
                                | { end: string; kind: "address-range"; start: string }
                                | { kind: "artifact-path"; path: string }
                                | { kind: "file-offset"; offset: number }
                                | { end: number; kind: "file-offset-range"; start: number }
                            )[];
                            normalized_result: JSONType;
                            operation: string;
                            parameters: Record<string, JSONType>;
                            predicate_type: string;
                            provider: { id: string; name: string; version: string | null };
                            raw_result: JSONType;
                            schema_version: 2;
                            subject:
                                | {
                                    architecture: "x86"
                                    | "x86_64"
                                    | "arm"
                                    | "arm64"
                                    | null;
                                    digest: { sha256: string };
                                    format:
                                        | "unknown"
                                        | "file"
                                        | "directory"
                                        | "javascript"
                                        | "source-map"
                                        | "plist"
                                        | "entitlements"
                                        | "dmg"
                                        | "zip"
                                        | "pkg"
                                        | "asar"
                                        | "javascript-bundle"
                                        | "mach-o-universal"
                                        | "mach-o"
                                        | "elf"
                                        | "pe"
                                        | "hopper"
                                        | "analysis-database"
                                        | "ipa"
                                        | "apk";
                                    local_path: string;
                                    name: string;
                                }
                                | null;
                        }
                    )[];
                    scenarios: {
                        authority: "controlled-replay";
                        evidence_id: string;
                        operation: string;
                    }[];
                    unknowns: {
                        contradicting_evidence_ids: string[];
                        domain: string;
                        mutation_evidence_ids: string[];
                        previous_revision_digest: string
                        | null;
                        question: string;
                        recommended_probes: { operation: string; rationale: string }[];
                        registry_version: 1;
                        relationships: {
                            type: "depends-on" | "related-to" | "contradicts";
                            unknown_id: string;
                        }[];
                        required_authority: | "shipped-artifact"
                        | "controlled-replay"
                        | "historical-reference"
                        | "external-service"
                        | "analyst-inference"
                        | null;
                        required_confidence: "observed"
                        | "derived"
                        | "inferred";
                        required_environment:
                            | {
                                architecture: string
                                | null;
                                id: string | null;
                                isolation:
                                    | "process"
                                    | "none"
                                    | "container"
                                    | "virtual-machine"
                                    | null;
                                platform: string
                                | null;
                            }
                            | null;
                        resolution: | {
                            disposition: "verified";
                            evidence_ids: string[];
                            rationale: string;
                        }
                        | {
                            disposition: "withdrawn"
                            | "out-of-scope";
                            evidence_ids: string[];
                            rationale: string;
                        }
                        | null;
                        revision: number;
                        revision_digest: string;
                        scope_digest: string
                        | null;
                        severity: "low" | "medium" | "high" | "critical";
                        status:
                            | "open"
                            | "investigating"
                            | "blocked"
                            | "contradicted"
                            | "resolved";
                        supporting_evidence_ids: string[];
                        unknown_id: string;
                    }[];
                };
                snapshot_version: 2;
                target: {
                    architecture: "x86"
                    | "x86_64"
                    | "arm"
                    | "arm64"
                    | null;
                    format:
                        | "javascript"
                        | "source-map"
                        | "plist"
                        | "dmg"
                        | "zip"
                        | "pkg"
                        | "asar"
                        | "mach-o"
                        | "elf"
                        | "pe"
                        | "analysis-database"
                        | "ipa"
                        | "apk";
                    kind: "executable"
                    | "database"
                    | "archive"
                    | "artifact";
                    sha256: string;
                };
            },
        ): Result<number, AnalysisError>;
        importEvidenceBundle(
            bundle: unknown,
        ): Result<number, EvidenceIntegrityError | EvidenceLimitError>;
        investigationWorkspace(
            workspaceId: string,
            revision: number,
        ):
            | {
                bundle: {
                    artifacts: {
                        architecture: "x86"
                        | "x86_64"
                        | "arm"
                        | "arm64"
                        | null;
                        digest: { sha256: string };
                        format:
                            | "unknown"
                            | "file"
                            | "directory"
                            | "javascript"
                            | "source-map"
                            | "plist"
                            | "entitlements"
                            | "dmg"
                            | "zip"
                            | "pkg"
                            | "asar"
                            | "javascript-bundle"
                            | "mach-o-universal"
                            | "mach-o"
                            | "elf"
                            | "pe"
                            | "hopper"
                            | "analysis-database"
                            | "ipa"
                            | "apk";
                    }[];
                    bundle_version: 2;
                    captures: { evidence_id: string; predicate_type: string }[];
                    environments: {
                        architecture: string;
                        id: string;
                        isolation: "process" | "none" | "container" | "virtual-machine";
                        platform: string;
                    }[];
                    providers: { id: string; name: string; version: string
                    | null }[];
                    records: (
                        | {
                            analysis_profile: {
                                digest: string;
                                parameters: Record<string, JSONType>;
                                provider: { id: string; name: string; version: string };
                                provider_profile_schema_version: number;
                                schema_version: 1;
                            };
                            authority: | "shipped-artifact"
                            | "controlled-replay"
                            | "historical-reference"
                            | "external-service"
                            | "analyst-inference";
                            confidence: "observed"
                            | "derived"
                            | "inferred";
                            environment:
                                | {
                                    architecture: string;
                                    id: string;
                                    isolation: "process"
                                    | "none"
                                    | "container"
                                    | "virtual-machine";
                                    platform: string;
                                }
                                | null;
                            evidence_id: string;
                            evidence_links: string[];
                            limitations: string[];
                            locations: (
                                | { address: string; kind: "address" }
                                | { end: string; kind: "address-range"; start: string }
                                | { kind: "artifact-path"; path: string }
                                | { kind: "file-offset"; offset: number }
                                | { end: number; kind: "file-offset-range"; start: number }
                            )[];
                            normalized_result: JSONType;
                            operation: string;
                            parameters: Record<string, JSONType>;
                            predicate_type: string;
                            provider: { id: string; name: string; version: string | null };
                            raw_result: JSONType;
                            schema_version: 2;
                            subject:
                                | {
                                    architecture: "x86"
                                    | "x86_64"
                                    | "arm"
                                    | "arm64"
                                    | null;
                                    digest: { sha256: string };
                                    format:
                                        | "unknown"
                                        | "file"
                                        | "directory"
                                        | "javascript"
                                        | "source-map"
                                        | "plist"
                                        | "entitlements"
                                        | "dmg"
                                        | "zip"
                                        | "pkg"
                                        | "asar"
                                        | "javascript-bundle"
                                        | "mach-o-universal"
                                        | "mach-o"
                                        | "elf"
                                        | "pe"
                                        | "hopper"
                                        | "analysis-database"
                                        | "ipa"
                                        | "apk";
                                    local_path: string;
                                    name: string;
                                }
                                | null;
                        }
                        | {
                            authority: | "shipped-artifact"
                            | "controlled-replay"
                            | "historical-reference"
                            | "external-service"
                            | "analyst-inference";
                            confidence: "observed"
                            | "derived"
                            | "inferred";
                            environment:
                                | {
                                    architecture: string;
                                    id: string;
                                    isolation: "process"
                                    | "none"
                                    | "container"
                                    | "virtual-machine";
                                    platform: string;
                                }
                                | null;
                            evidence_id: string;
                            evidence_links: string[];
                            limitations: string[];
                            locations: (
                                | { address: string; kind: "address" }
                                | { end: string; kind: "address-range"; start: string }
                                | { kind: "artifact-path"; path: string }
                                | { kind: "file-offset"; offset: number }
                                | { end: number; kind: "file-offset-range"; start: number }
                            )[];
                            normalized_result: JSONType;
                            operation: string;
                            parameters: Record<string, JSONType>;
                            predicate_type: string;
                            provider: { id: string; name: string; version: string | null };
                            raw_result: JSONType;
                            schema_version: 2;
                            subject:
                                | {
                                    architecture: "x86"
                                    | "x86_64"
                                    | "arm"
                                    | "arm64"
                                    | null;
                                    digest: { sha256: string };
                                    format:
                                        | "unknown"
                                        | "file"
                                        | "directory"
                                        | "javascript"
                                        | "source-map"
                                        | "plist"
                                        | "entitlements"
                                        | "dmg"
                                        | "zip"
                                        | "pkg"
                                        | "asar"
                                        | "javascript-bundle"
                                        | "mach-o-universal"
                                        | "mach-o"
                                        | "elf"
                                        | "pe"
                                        | "hopper"
                                        | "analysis-database"
                                        | "ipa"
                                        | "apk";
                                    local_path: string;
                                    name: string;
                                }
                                | null;
                        }
                    )[];
                    scenarios: {
                        authority: "controlled-replay";
                        evidence_id: string;
                        operation: string;
                    }[];
                    unknowns: {
                        contradicting_evidence_ids: string[];
                        domain: string;
                        mutation_evidence_ids: string[];
                        previous_revision_digest: string
                        | null;
                        question: string;
                        recommended_probes: { operation: string; rationale: string }[];
                        registry_version: 1;
                        relationships: {
                            type: "depends-on" | "related-to" | "contradicts";
                            unknown_id: string;
                        }[];
                        required_authority: | "shipped-artifact"
                        | "controlled-replay"
                        | "historical-reference"
                        | "external-service"
                        | "analyst-inference"
                        | null;
                        required_confidence: "observed"
                        | "derived"
                        | "inferred";
                        required_environment:
                            | {
                                architecture: string
                                | null;
                                id: string | null;
                                isolation:
                                    | "process"
                                    | "none"
                                    | "container"
                                    | "virtual-machine"
                                    | null;
                                platform: string
                                | null;
                            }
                            | null;
                        resolution: | {
                            disposition: "verified";
                            evidence_ids: string[];
                            rationale: string;
                        }
                        | {
                            disposition: "withdrawn"
                            | "out-of-scope";
                            evidence_ids: string[];
                            rationale: string;
                        }
                        | null;
                        revision: number;
                        revision_digest: string;
                        scope_digest: string
                        | null;
                        severity: "low" | "medium" | "high" | "critical";
                        status:
                            | "open"
                            | "investigating"
                            | "blocked"
                            | "contradicted"
                            | "resolved";
                        supporting_evidence_ids: string[];
                        unknown_id: string;
                    }[];
                };
                name: string;
                previous_revision_digest: string
                | null;
                revision: number;
                revision_digest: string;
                runs: (
                    | {
                        comparison_evidence_id: string
                        | null;
                        completed_stages: (
                            | "inventory_left"
                            | "inventory_right"
                            | "compare_artifacts"
                            | "find_changed_behavior"
                        )[];
                        integrity_continue_approved: boolean;
                        integrity_policy: "fail"
                        | "record-and-continue";
                        left: {
                            format:
                                | "unknown"
                                | "file"
                                | "directory"
                                | "javascript"
                                | "source-map"
                                | "plist"
                                | "entitlements"
                                | "dmg"
                                | "zip"
                                | "pkg"
                                | "asar"
                                | "javascript-bundle"
                                | "mach-o-universal"
                                | "mach-o"
                                | "elf"
                                | "pe"
                                | "hopper"
                                | "analysis-database"
                                | "ipa"
                                | "apk";
                            graph_sha256: string;
                            manifest_id: string;
                            root_sha256: string;
                        };
                        left_inventory_evidence_ids: string[];
                        limitations: string[];
                        max_integrity_mismatches: number;
                        options: {
                            change_limit: number;
                            max_compression_ratio: number;
                            max_depth: number;
                            max_entries: number;
                            max_entry_bytes: number;
                            max_path_bytes: number;
                            max_total_bytes: number;
                            page_size: number;
                        };
                        request_sha256: string;
                        result_evidence_id: string
                        | null;
                        right: {
                            format:
                                | "unknown"
                                | "file"
                                | "directory"
                                | "javascript"
                                | "source-map"
                                | "plist"
                                | "entitlements"
                                | "dmg"
                                | "zip"
                                | "pkg"
                                | "asar"
                                | "javascript-bundle"
                                | "mach-o-universal"
                                | "mach-o"
                                | "elf"
                                | "pe"
                                | "hopper"
                                | "analysis-database"
                                | "ipa"
                                | "apk";
                            graph_sha256: string;
                            manifest_id: string;
                            root_sha256: string;
                        };
                        right_inventory_evidence_ids: string[];
                        run_id: string;
                        schema_version: 1;
                        status: "complete"
                        | "running";
                    }
                    | {
                        comparison_evidence_id: string
                        | null;
                        completed_stages: (
                            | "inventory_left"
                            | "inventory_right"
                            | "compare_artifacts"
                            | "find_changed_behavior"
                        )[];
                        integrity_continue_approved: boolean;
                        integrity_policy: "fail"
                        | "record-and-continue";
                        left: {
                            format:
                                | "unknown"
                                | "file"
                                | "directory"
                                | "javascript"
                                | "source-map"
                                | "plist"
                                | "entitlements"
                                | "dmg"
                                | "zip"
                                | "pkg"
                                | "asar"
                                | "javascript-bundle"
                                | "mach-o-universal"
                                | "mach-o"
                                | "elf"
                                | "pe"
                                | "hopper"
                                | "analysis-database"
                                | "ipa"
                                | "apk";
                            graph_sha256: string;
                            manifest_id: string;
                            root_sha256: string;
                        };
                        left_inventory_evidence_ids: string[];
                        legacy_request_identity: true;
                        limitations: string[];
                        max_integrity_mismatches: number;
                        options: {
                            change_limit: number;
                            max_compression_ratio: number;
                            max_depth: number;
                            max_entries: number;
                            max_entry_bytes: number;
                            max_path_bytes: number;
                            max_total_bytes: number;
                            page_size: number;
                        };
                        request_sha256: string;
                        result_evidence_id: string
                        | null;
                        right: {
                            format:
                                | "unknown"
                                | "file"
                                | "directory"
                                | "javascript"
                                | "source-map"
                                | "plist"
                                | "entitlements"
                                | "dmg"
                                | "zip"
                                | "pkg"
                                | "asar"
                                | "javascript-bundle"
                                | "mach-o-universal"
                                | "mach-o"
                                | "elf"
                                | "pe"
                                | "hopper"
                                | "analysis-database"
                                | "ipa"
                                | "apk";
                            graph_sha256: string;
                            manifest_id: string;
                            root_sha256: string;
                        };
                        right_inventory_evidence_ids: string[];
                        run_id: string;
                        schema_version: 1;
                        status: "complete"
                        | "running";
                    }
                )[];
                workspace_id: string;
                workspace_version: 1;
            }
            | undefined;
        investigationWorkspaces(): readonly {
            bundle: {
                artifacts: {
                    architecture: "x86"
                    | "x86_64"
                    | "arm"
                    | "arm64"
                    | null;
                    digest: { sha256: string };
                    format:
                        | "unknown"
                        | "file"
                        | "directory"
                        | "javascript"
                        | "source-map"
                        | "plist"
                        | "entitlements"
                        | "dmg"
                        | "zip"
                        | "pkg"
                        | "asar"
                        | "javascript-bundle"
                        | "mach-o-universal"
                        | "mach-o"
                        | "elf"
                        | "pe"
                        | "hopper"
                        | "analysis-database"
                        | "ipa"
                        | "apk";
                }[];
                bundle_version: 2;
                captures: { evidence_id: string; predicate_type: string }[];
                environments: {
                    architecture: string;
                    id: string;
                    isolation: "process" | "none" | "container" | "virtual-machine";
                    platform: string;
                }[];
                providers: { id: string; name: string; version: string
                | null }[];
                records: (
                    | {
                        analysis_profile: {
                            digest: string;
                            parameters: Record<string, JSONType>;
                            provider: { id: string; name: string; version: string };
                            provider_profile_schema_version: number;
                            schema_version: 1;
                        };
                        authority: | "shipped-artifact"
                        | "controlled-replay"
                        | "historical-reference"
                        | "external-service"
                        | "analyst-inference";
                        confidence: "observed"
                        | "derived"
                        | "inferred";
                        environment:
                            | {
                                architecture: string;
                                id: string;
                                isolation: "process"
                                | "none"
                                | "container"
                                | "virtual-machine";
                                platform: string;
                            }
                            | null;
                        evidence_id: string;
                        evidence_links: string[];
                        limitations: string[];
                        locations: (
                            | { address: string; kind: "address" }
                            | { end: string; kind: "address-range"; start: string }
                            | { kind: "artifact-path"; path: string }
                            | { kind: "file-offset"; offset: number }
                            | { end: number; kind: "file-offset-range"; start: number }
                        )[];
                        normalized_result: JSONType;
                        operation: string;
                        parameters: Record<string, JSONType>;
                        predicate_type: string;
                        provider: { id: string; name: string; version: string | null };
                        raw_result: JSONType;
                        schema_version: 2;
                        subject:
                            | {
                                architecture: "x86"
                                | "x86_64"
                                | "arm"
                                | "arm64"
                                | null;
                                digest: { sha256: string };
                                format:
                                    | "unknown"
                                    | "file"
                                    | "directory"
                                    | "javascript"
                                    | "source-map"
                                    | "plist"
                                    | "entitlements"
                                    | "dmg"
                                    | "zip"
                                    | "pkg"
                                    | "asar"
                                    | "javascript-bundle"
                                    | "mach-o-universal"
                                    | "mach-o"
                                    | "elf"
                                    | "pe"
                                    | "hopper"
                                    | "analysis-database"
                                    | "ipa"
                                    | "apk";
                                local_path: string;
                                name: string;
                            }
                            | null;
                    }
                    | {
                        authority: | "shipped-artifact"
                        | "controlled-replay"
                        | "historical-reference"
                        | "external-service"
                        | "analyst-inference";
                        confidence: "observed"
                        | "derived"
                        | "inferred";
                        environment:
                            | {
                                architecture: string;
                                id: string;
                                isolation: "process"
                                | "none"
                                | "container"
                                | "virtual-machine";
                                platform: string;
                            }
                            | null;
                        evidence_id: string;
                        evidence_links: string[];
                        limitations: string[];
                        locations: (
                            | { address: string; kind: "address" }
                            | { end: string; kind: "address-range"; start: string }
                            | { kind: "artifact-path"; path: string }
                            | { kind: "file-offset"; offset: number }
                            | { end: number; kind: "file-offset-range"; start: number }
                        )[];
                        normalized_result: JSONType;
                        operation: string;
                        parameters: Record<string, JSONType>;
                        predicate_type: string;
                        provider: { id: string; name: string; version: string | null };
                        raw_result: JSONType;
                        schema_version: 2;
                        subject:
                            | {
                                architecture: "x86"
                                | "x86_64"
                                | "arm"
                                | "arm64"
                                | null;
                                digest: { sha256: string };
                                format:
                                    | "unknown"
                                    | "file"
                                    | "directory"
                                    | "javascript"
                                    | "source-map"
                                    | "plist"
                                    | "entitlements"
                                    | "dmg"
                                    | "zip"
                                    | "pkg"
                                    | "asar"
                                    | "javascript-bundle"
                                    | "mach-o-universal"
                                    | "mach-o"
                                    | "elf"
                                    | "pe"
                                    | "hopper"
                                    | "analysis-database"
                                    | "ipa"
                                    | "apk";
                                local_path: string;
                                name: string;
                            }
                            | null;
                    }
                )[];
                scenarios: {
                    authority: "controlled-replay";
                    evidence_id: string;
                    operation: string;
                }[];
                unknowns: {
                    contradicting_evidence_ids: string[];
                    domain: string;
                    mutation_evidence_ids: string[];
                    previous_revision_digest: string
                    | null;
                    question: string;
                    recommended_probes: { operation: string; rationale: string }[];
                    registry_version: 1;
                    relationships: {
                        type: "depends-on" | "related-to" | "contradicts";
                        unknown_id: string;
                    }[];
                    required_authority: | "shipped-artifact"
                    | "controlled-replay"
                    | "historical-reference"
                    | "external-service"
                    | "analyst-inference"
                    | null;
                    required_confidence: "observed"
                    | "derived"
                    | "inferred";
                    required_environment:
                        | {
                            architecture: string
                            | null;
                            id: string | null;
                            isolation: "process" | "none" | "container" | "virtual-machine" | null;
                            platform: string | null;
                        }
                        | null;
                    resolution: | {
                        disposition: "verified";
                        evidence_ids: string[];
                        rationale: string;
                    }
                    | {
                        disposition: "withdrawn"
                        | "out-of-scope";
                        evidence_ids: string[];
                        rationale: string;
                    }
                    | null;
                    revision: number;
                    revision_digest: string;
                    scope_digest: string
                    | null;
                    severity: "low" | "medium" | "high" | "critical";
                    status:
                        | "open"
                        | "investigating"
                        | "blocked"
                        | "contradicted"
                        | "resolved";
                    supporting_evidence_ids: string[];
                    unknown_id: string;
                }[];
            };
            name: string;
            previous_revision_digest: string
            | null;
            revision: number;
            revision_digest: string;
            runs: (
                | {
                    comparison_evidence_id: string
                    | null;
                    completed_stages: (
                        | "inventory_left"
                        | "inventory_right"
                        | "compare_artifacts"
                        | "find_changed_behavior"
                    )[];
                    integrity_continue_approved: boolean;
                    integrity_policy: "fail"
                    | "record-and-continue";
                    left: {
                        format:
                            | "unknown"
                            | "file"
                            | "directory"
                            | "javascript"
                            | "source-map"
                            | "plist"
                            | "entitlements"
                            | "dmg"
                            | "zip"
                            | "pkg"
                            | "asar"
                            | "javascript-bundle"
                            | "mach-o-universal"
                            | "mach-o"
                            | "elf"
                            | "pe"
                            | "hopper"
                            | "analysis-database"
                            | "ipa"
                            | "apk";
                        graph_sha256: string;
                        manifest_id: string;
                        root_sha256: string;
                    };
                    left_inventory_evidence_ids: string[];
                    limitations: string[];
                    max_integrity_mismatches: number;
                    options: {
                        change_limit: number;
                        max_compression_ratio: number;
                        max_depth: number;
                        max_entries: number;
                        max_entry_bytes: number;
                        max_path_bytes: number;
                        max_total_bytes: number;
                        page_size: number;
                    };
                    request_sha256: string;
                    result_evidence_id: string
                    | null;
                    right: {
                        format:
                            | "unknown"
                            | "file"
                            | "directory"
                            | "javascript"
                            | "source-map"
                            | "plist"
                            | "entitlements"
                            | "dmg"
                            | "zip"
                            | "pkg"
                            | "asar"
                            | "javascript-bundle"
                            | "mach-o-universal"
                            | "mach-o"
                            | "elf"
                            | "pe"
                            | "hopper"
                            | "analysis-database"
                            | "ipa"
                            | "apk";
                        graph_sha256: string;
                        manifest_id: string;
                        root_sha256: string;
                    };
                    right_inventory_evidence_ids: string[];
                    run_id: string;
                    schema_version: 1;
                    status: "complete"
                    | "running";
                }
                | {
                    comparison_evidence_id: string
                    | null;
                    completed_stages: (
                        | "inventory_left"
                        | "inventory_right"
                        | "compare_artifacts"
                        | "find_changed_behavior"
                    )[];
                    integrity_continue_approved: boolean;
                    integrity_policy: "fail"
                    | "record-and-continue";
                    left: {
                        format:
                            | "unknown"
                            | "file"
                            | "directory"
                            | "javascript"
                            | "source-map"
                            | "plist"
                            | "entitlements"
                            | "dmg"
                            | "zip"
                            | "pkg"
                            | "asar"
                            | "javascript-bundle"
                            | "mach-o-universal"
                            | "mach-o"
                            | "elf"
                            | "pe"
                            | "hopper"
                            | "analysis-database"
                            | "ipa"
                            | "apk";
                        graph_sha256: string;
                        manifest_id: string;
                        root_sha256: string;
                    };
                    left_inventory_evidence_ids: string[];
                    legacy_request_identity: true;
                    limitations: string[];
                    max_integrity_mismatches: number;
                    options: {
                        change_limit: number;
                        max_compression_ratio: number;
                        max_depth: number;
                        max_entries: number;
                        max_entry_bytes: number;
                        max_path_bytes: number;
                        max_total_bytes: number;
                        page_size: number;
                    };
                    request_sha256: string;
                    result_evidence_id: string
                    | null;
                    right: {
                        format:
                            | "unknown"
                            | "file"
                            | "directory"
                            | "javascript"
                            | "source-map"
                            | "plist"
                            | "entitlements"
                            | "dmg"
                            | "zip"
                            | "pkg"
                            | "asar"
                            | "javascript-bundle"
                            | "mach-o-universal"
                            | "mach-o"
                            | "elf"
                            | "pe"
                            | "hopper"
                            | "analysis-database"
                            | "ipa"
                            | "apk";
                        graph_sha256: string;
                        manifest_id: string;
                        root_sha256: string;
                    };
                    right_inventory_evidence_ids: string[];
                    run_id: string;
                    schema_version: 1;
                    status: "complete"
                    | "running";
                }
            )[];
            workspace_id: string;
            workspace_version: 1;
        }[];
        listUnknowns(
            filters?: {
                domain?: string;
                severity?: "low" | "medium" | "high" | "critical";
                status?:
                    | "open"
                    | "investigating"
                    | "blocked"
                    | "contradicted"
                    | "resolved";
            },
        ): {
            contradicting_evidence_ids: string[];
            domain: string;
            mutation_evidence_ids: string[];
            previous_revision_digest: string
            | null;
            question: string;
            recommended_probes: { operation: string; rationale: string }[];
            registry_version: 1;
            relationships: {
                type: "depends-on" | "related-to" | "contradicts";
                unknown_id: string;
            }[];
            required_authority: | "shipped-artifact"
            | "controlled-replay"
            | "historical-reference"
            | "external-service"
            | "analyst-inference"
            | null;
            required_confidence: "observed"
            | "derived"
            | "inferred";
            required_environment:
                | {
                    architecture: string
                    | null;
                    id: string | null;
                    isolation: "process" | "none" | "container" | "virtual-machine" | null;
                    platform: string | null;
                }
                | null;
            resolution: | {
                disposition: "verified";
                evidence_ids: string[];
                rationale: string;
            }
            | {
                disposition: "withdrawn"
                | "out-of-scope";
                evidence_ids: string[];
                rationale: string;
            }
            | null;
            revision: number;
            revision_digest: string;
            scope_digest: string
            | null;
            severity: "low" | "medium" | "high" | "critical";
            status: "open" | "investigating" | "blocked" | "contradicted" | "resolved";
            supporting_evidence_ids: string[];
            unknown_id: string;
        }[];
        onAvailabilityChanged?(listener: () => void | Promise<void>): () => void;
        open(
            path: string,
            options?: {
                providerId?: string;
                signal?: AbortSignal;
                snapshot?: {
                    binding: {
                        analysis_profile: {
                            digest: string;
                            parameters: Record<string, JSONType>;
                            provider: { id: string; name: string; version: string };
                            provider_profile_schema_version: number;
                            schema_version: 1;
                        };
                        provider: { id: string; name: string; version: string };
                    };
                    entries: {
                        execution: {
                            limitations: string[];
                            locations: (
                                | { address: string; kind: "address" }
                                | { end: string; kind: "address-range"; start: string }
                                | { kind: "artifact-path"; path: string }
                                | { kind: "file-offset"; offset: number }
                                | { end: number; kind: "file-offset-range"; start: number }
                            )[];
                            provider: { id: string; name: string; version: string };
                            raw_result: JSONType;
                            result: JSONType;
                            subject:
                                | {
                                    architecture: "x86"
                                    | "x86_64"
                                    | "arm"
                                    | "arm64"
                                    | null;
                                    format:
                                        | "unknown"
                                        | "file"
                                        | "directory"
                                        | "javascript"
                                        | "source-map"
                                        | "plist"
                                        | "entitlements"
                                        | "dmg"
                                        | "zip"
                                        | "pkg"
                                        | "asar"
                                        | "javascript-bundle"
                                        | "mach-o-universal"
                                        | "mach-o"
                                        | "elf"
                                        | "pe"
                                        | "hopper"
                                        | "analysis-database"
                                        | "ipa"
                                        | "apk";
                                    path: string;
                                    sha256: string;
                                }
                                | null;
                        };
                        operation: string;
                        parameters: Record<string, JSONType>;
                        query_id: string;
                    }[];
                    evidence_bundle: {
                        artifacts: {
                            architecture: "x86"
                            | "x86_64"
                            | "arm"
                            | "arm64"
                            | null;
                            digest: { sha256: string };
                            format:
                                | "unknown"
                                | "file"
                                | "directory"
                                | "javascript"
                                | "source-map"
                                | "plist"
                                | "entitlements"
                                | "dmg"
                                | "zip"
                                | "pkg"
                                | "asar"
                                | "javascript-bundle"
                                | "mach-o-universal"
                                | "mach-o"
                                | "elf"
                                | "pe"
                                | "hopper"
                                | "analysis-database"
                                | "ipa"
                                | "apk";
                        }[];
                        bundle_version: 2;
                        captures: { evidence_id: string; predicate_type: string }[];
                        environments: {
                            architecture: string;
                            id: string;
                            isolation: "process" | "none" | "container" | "virtual-machine";
                            platform: string;
                        }[];
                        providers: { id: string; name: string; version: string
                        | null }[];
                        records: (
                            | {
                                analysis_profile: {
                                    digest: string;
                                    parameters: Record<string, JSONType>;
                                    provider: { id: string; name: string; version: string };
                                    provider_profile_schema_version: number;
                                    schema_version: 1;
                                };
                                authority: | "shipped-artifact"
                                | "controlled-replay"
                                | "historical-reference"
                                | "external-service"
                                | "analyst-inference";
                                confidence: "observed"
                                | "derived"
                                | "inferred";
                                environment:
                                    | {
                                        architecture: string;
                                        id: string;
                                        isolation: (...)
                                        | (...)
                                        | (...)
                                        | (...);
                                        platform: string;
                                    }
                                    | null;
                                evidence_id: string;
                                evidence_links: string[];
                                limitations: string[];
                                locations: (
                                    | { address: ...; kind: ... }
                                    | { end: ...; kind: ...; start: ... }
                                    | { kind: ...; path: ... }
                                    | { kind: ...; offset: ... }
                                    | { end: ...; kind: ...; start: ... }
                                )[];
                                normalized_result: JSONType;
                                operation: string;
                                parameters: Record<string, JSONType>;
                                predicate_type: string;
                                provider: { id: string; name: string; version: string | null };
                                raw_result: JSONType;
                                schema_version: 2;
                                subject:
                                    | {
                                        architecture: (...)
                                        | (...)
                                        | (...)
                                        | (...)
                                        | (...);
                                        digest: { sha256: ... };
                                        format:
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...);
                                        local_path: string;
                                        name: string;
                                    }
                                    | null;
                            }
                            | {
                                authority: | "shipped-artifact"
                                | "controlled-replay"
                                | "historical-reference"
                                | "external-service"
                                | "analyst-inference";
                                confidence: "observed"
                                | "derived"
                                | "inferred";
                                environment:
                                    | {
                                        architecture: string;
                                        id: string;
                                        isolation: (...)
                                        | (...)
                                        | (...)
                                        | (...);
                                        platform: string;
                                    }
                                    | null;
                                evidence_id: string;
                                evidence_links: string[];
                                limitations: string[];
                                locations: (
                                    | { address: ...; kind: ... }
                                    | { end: ...; kind: ...; start: ... }
                                    | { kind: ...; path: ... }
                                    | { kind: ...; offset: ... }
                                    | { end: ...; kind: ...; start: ... }
                                )[];
                                normalized_result: JSONType;
                                operation: string;
                                parameters: Record<string, JSONType>;
                                predicate_type: string;
                                provider: { id: string; name: string; version: string | null };
                                raw_result: JSONType;
                                schema_version: 2;
                                subject:
                                    | {
                                        architecture: (...)
                                        | (...)
                                        | (...)
                                        | (...)
                                        | (...);
                                        digest: { sha256: ... };
                                        format:
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...)
                                            | (...);
                                        local_path: string;
                                        name: string;
                                    }
                                    | null;
                            }
                        )[];
                        scenarios: {
                            authority: "controlled-replay";
                            evidence_id: string;
                            operation: string;
                        }[];
                        unknowns: {
                            contradicting_evidence_ids: string[];
                            domain: string;
                            mutation_evidence_ids: string[];
                            previous_revision_digest: string
                            | null;
                            question: string;
                            recommended_probes: { operation: string; rationale: string }[];
                            registry_version: 1;
                            relationships: {
                                type: "depends-on" | "related-to" | "contradicts";
                                unknown_id: string;
                            }[];
                            required_authority: | "shipped-artifact"
                            | "controlled-replay"
                            | "historical-reference"
                            | "external-service"
                            | "analyst-inference"
                            | null;
                            required_confidence: "observed"
                            | "derived"
                            | "inferred";
                            required_environment:
                                | {
                                    architecture: string
                                    | null;
                                    id: string | null;
                                    isolation:
                                        | "process"
                                        | "none"
                                        | "container"
                                        | "virtual-machine"
                                        | null;
                                    platform: string
                                    | null;
                                }
                                | null;
                            resolution: | {
                                disposition: "verified";
                                evidence_ids: string[];
                                rationale: string;
                            }
                            | {
                                disposition: "withdrawn"
                                | "out-of-scope";
                                evidence_ids: string[];
                                rationale: string;
                            }
                            | null;
                            revision: number;
                            revision_digest: string;
                            scope_digest: string
                            | null;
                            severity: "low" | "medium" | "high" | "critical";
                            status:
                                | "open"
                                | "investigating"
                                | "blocked"
                                | "contradicted"
                                | "resolved";
                            supporting_evidence_ids: string[];
                            unknown_id: string;
                        }[];
                    };
                    snapshot_version: 2;
                    target: {
                        architecture: "x86"
                        | "x86_64"
                        | "arm"
                        | "arm64"
                        | null;
                        format:
                            | "javascript"
                            | "source-map"
                            | "plist"
                            | "dmg"
                            | "zip"
                            | "pkg"
                            | "asar"
                            | "mach-o"
                            | "elf"
                            | "pe"
                            | "analysis-database"
                            | "ipa"
                            | "apk";
                        kind: "executable"
                        | "database"
                        | "archive"
                        | "artifact";
                        sha256: string;
                    };
                };
                targetKind?: "executable"
                | "database"
                | "archive"
                | "artifact";
            },
        ): Promise<Result<BinaryTarget, AnalysisError>>;
        openCompatibility(): Readonly<Record<string, JsonValue>>;
        providerIdentity(operation?: AnalysisOperation): ProviderIdentity;
        reconstructionCoverageWorkspace(
            workspaceId: string,
            revision: number,
        ):
            | {
                artifacts: {
                    artifact_id: string;
                    artifact_sha256: string;
                    environment_sha256: string;
                    evidence_ids: string[];
                    version: string;
                }[];
                boundaries: {
                    allowed_dispositions: ("external" | "non-goal")[];
                    allowed_unknown_ids: string[];
                    boundary_id: string;
                    required_claim_ids: string[];
                    required_package_proof_kinds: (
                        | "build"
                        | "clean-install"
                        | "package-contents"
                        | "runtime-routing"
                        | "authority-independence"
                    )[];
                    required_surface_ids: string[];
                    title: string;
                }[];
                claims: {
                    claim_id: string;
                    kind: string;
                    required_authority: | "external"
                    | "shipped-artifact"
                    | "controlled-replay"
                    | "live-observation";
                    required_dimensions: string[];
                    surface_ids: string[];
                    title: string;
                }[];
                contradictions: {
                    claim_ids: string[];
                    contradiction_id: string;
                    evidence_ids: string[];
                    status: "resolved"
                    | "active";
                    surface_ids: string[];
                }[];
                evidence_bundle: {
                    artifacts: {
                        architecture: "x86"
                        | "x86_64"
                        | "arm"
                        | "arm64"
                        | null;
                        digest: { sha256: string };
                        format:
                            | "unknown"
                            | "file"
                            | "directory"
                            | "javascript"
                            | "source-map"
                            | "plist"
                            | "entitlements"
                            | "dmg"
                            | "zip"
                            | "pkg"
                            | "asar"
                            | "javascript-bundle"
                            | "mach-o-universal"
                            | "mach-o"
                            | "elf"
                            | "pe"
                            | "hopper"
                            | "analysis-database"
                            | "ipa"
                            | "apk";
                    }[];
                    bundle_version: 2;
                    captures: { evidence_id: string; predicate_type: string }[];
                    environments: {
                        architecture: string;
                        id: string;
                        isolation: "process" | "none" | "container" | "virtual-machine";
                        platform: string;
                    }[];
                    providers: { id: string; name: string; version: string
                    | null }[];
                    records: (
                        | {
                            analysis_profile: {
                                digest: string;
                                parameters: Record<string, JSONType>;
                                provider: { id: string; name: string; version: string };
                                provider_profile_schema_version: number;
                                schema_version: 1;
                            };
                            authority: | "shipped-artifact"
                            | "controlled-replay"
                            | "historical-reference"
                            | "external-service"
                            | "analyst-inference";
                            confidence: "observed"
                            | "derived"
                            | "inferred";
                            environment:
                                | {
                                    architecture: string;
                                    id: string;
                                    isolation: "process"
                                    | "none"
                                    | "container"
                                    | "virtual-machine";
                                    platform: string;
                                }
                                | null;
                            evidence_id: string;
                            evidence_links: string[];
                            limitations: string[];
                            locations: (
                                | { address: string; kind: "address" }
                                | { end: string; kind: "address-range"; start: string }
                                | { kind: "artifact-path"; path: string }
                                | { kind: "file-offset"; offset: number }
                                | { end: number; kind: "file-offset-range"; start: number }
                            )[];
                            normalized_result: JSONType;
                            operation: string;
                            parameters: Record<string, JSONType>;
                            predicate_type: string;
                            provider: { id: string; name: string; version: string | null };
                            raw_result: JSONType;
                            schema_version: 2;
                            subject:
                                | {
                                    architecture: "x86"
                                    | "x86_64"
                                    | "arm"
                                    | "arm64"
                                    | null;
                                    digest: { sha256: string };
                                    format:
                                        | "unknown"
                                        | "file"
                                        | "directory"
                                        | "javascript"
                                        | "source-map"
                                        | "plist"
                                        | "entitlements"
                                        | "dmg"
                                        | "zip"
                                        | "pkg"
                                        | "asar"
                                        | "javascript-bundle"
                                        | "mach-o-universal"
                                        | "mach-o"
                                        | "elf"
                                        | "pe"
                                        | "hopper"
                                        | "analysis-database"
                                        | "ipa"
                                        | "apk";
                                    local_path: string;
                                    name: string;
                                }
                                | null;
                        }
                        | {
                            authority: | "shipped-artifact"
                            | "controlled-replay"
                            | "historical-reference"
                            | "external-service"
                            | "analyst-inference";
                            confidence: "observed"
                            | "derived"
                            | "inferred";
                            environment:
                                | {
                                    architecture: string;
                                    id: string;
                                    isolation: "process"
                                    | "none"
                                    | "container"
                                    | "virtual-machine";
                                    platform: string;
                                }
                                | null;
                            evidence_id: string;
                            evidence_links: string[];
                            limitations: string[];
                            locations: (
                                | { address: string; kind: "address" }
                                | { end: string; kind: "address-range"; start: string }
                                | { kind: "artifact-path"; path: string }
                                | { kind: "file-offset"; offset: number }
                                | { end: number; kind: "file-offset-range"; start: number }
                            )[];
                            normalized_result: JSONType;
                            operation: string;
                            parameters: Record<string, JSONType>;
                            predicate_type: string;
                            provider: { id: string; name: string; version: string | null };
                            raw_result: JSONType;
                            schema_version: 2;
                            subject:
                                | {
                                    architecture: "x86"
                                    | "x86_64"
                                    | "arm"
                                    | "arm64"
                                    | null;
                                    digest: { sha256: string };
                                    format:
                                        | "unknown"
                                        | "file"
                                        | "directory"
                                        | "javascript"
                                        | "source-map"
                                        | "plist"
                                        | "entitlements"
                                        | "dmg"
                                        | "zip"
                                        | "pkg"
                                        | "asar"
                                        | "javascript-bundle"
                                        | "mach-o-universal"
                                        | "mach-o"
                                        | "elf"
                                        | "pe"
                                        | "hopper"
                                        | "analysis-database"
                                        | "ipa"
                                        | "apk";
                                    local_path: string;
                                    name: string;
                                }
                                | null;
                        }
                    )[];
                    scenarios: {
                        authority: "controlled-replay";
                        evidence_id: string;
                        operation: string;
                    }[];
                    unknowns: {
                        contradicting_evidence_ids: string[];
                        domain: string;
                        mutation_evidence_ids: string[];
                        previous_revision_digest: string
                        | null;
                        question: string;
                        recommended_probes: { operation: string; rationale: string }[];
                        registry_version: 1;
                        relationships: {
                            type: "depends-on" | "related-to" | "contradicts";
                            unknown_id: string;
                        }[];
                        required_authority: | "shipped-artifact"
                        | "controlled-replay"
                        | "historical-reference"
                        | "external-service"
                        | "analyst-inference"
                        | null;
                        required_confidence: "observed"
                        | "derived"
                        | "inferred";
                        required_environment:
                            | {
                                architecture: string
                                | null;
                                id: string | null;
                                isolation:
                                    | "process"
                                    | "none"
                                    | "container"
                                    | "virtual-machine"
                                    | null;
                                platform: string
                                | null;
                            }
                            | null;
                        resolution: | {
                            disposition: "verified";
                            evidence_ids: string[];
                            rationale: string;
                        }
                        | {
                            disposition: "withdrawn"
                            | "out-of-scope";
                            evidence_ids: string[];
                            rationale: string;
                        }
                        | null;
                        revision: number;
                        revision_digest: string;
                        scope_digest: string
                        | null;
                        severity: "low" | "medium" | "high" | "critical";
                        status:
                            | "open"
                            | "investigating"
                            | "blocked"
                            | "contradicted"
                            | "resolved";
                        supporting_evidence_ids: string[];
                        unknown_id: string;
                    }[];
                };
                name: string;
                owners: {
                    ownership: | {
                        authority_route: "unknown"
                        | "none"
                        | "detected";
                        disposition: "implemented";
                        owner_export: string | null;
                        owner_path: string;
                        owner_sha256: string;
                        package_state: "unknown" | "missing" | "distributed";
                        path_state: "unknown" | "missing" | "present";
                    }
                    | { disposition: "external"
                    | "non-goal"; rationale: string };
                    surface_id: string;
                }[];
                package_proofs: {
                    artifact_sha256s: string[];
                    evidence_ids: string[];
                    kind: | "build"
                    | "clean-install"
                    | "package-contents"
                    | "runtime-routing"
                    | "authority-independence";
                    proof_id: string;
                    status: "unknown"
                    | "fail"
                    | "pass"
                    | "unsupported"
                    | "skipped";
                }[];
                previous_revision_sha256: string
                | null;
                residual_unknown_ids: string[];
                revision: number;
                revision_sha256: string;
                schema_version: 1;
                surfaces: {
                    artifact_id: string;
                    authority:
                        | "external"
                        | "observed"
                        | "derived"
                        | "inferred"
                        | "historical";
                    dependency_surface_ids: string[];
                    evidence_ids: string[];
                    family: string;
                    location: string;
                    occurrence_id: string
                    | null;
                    surface_id: string;
                }[];
                verifier_contracts: {
                    authority: | "external"
                    | "shipped-artifact"
                    | "controlled-replay"
                    | "live-observation";
                    claim_ids: string[];
                    contract_sha256: string;
                    dimensions: string[];
                    max_age_ms: number;
                    minimum_repeats: number;
                    normalization_removes_dimensions: false;
                    normalization_sha256: string;
                    verifier_id: string;
                }[];
                verifier_results: {
                    artifact_sha256s: string[];
                    contract_sha256: string;
                    covered_claim_ids: string[];
                    covered_dimensions: string[];
                    evidence_ids: string[];
                    normalization_sha256: string;
                    observed_at: string;
                    owner_sha256s: string[];
                    repeats: number;
                    status: | "unknown"
                    | "truncated"
                    | "fail"
                    | "pass"
                    | "unsupported"
                    | "skipped";
                    verifier_id: string;
                }[];
                workspace_id: string;
            }
            | undefined;
        reconstructionCoverageWorkspaces(): readonly {
            artifacts: {
                artifact_id: string;
                artifact_sha256: string;
                environment_sha256: string;
                evidence_ids: string[];
                version: string;
            }[];
            boundaries: {
                allowed_dispositions: ("external" | "non-goal")[];
                allowed_unknown_ids: string[];
                boundary_id: string;
                required_claim_ids: string[];
                required_package_proof_kinds: (
                    | "build"
                    | "clean-install"
                    | "package-contents"
                    | "runtime-routing"
                    | "authority-independence"
                )[];
                required_surface_ids: string[];
                title: string;
            }[];
            claims: {
                claim_id: string;
                kind: string;
                required_authority: | "external"
                | "shipped-artifact"
                | "controlled-replay"
                | "live-observation";
                required_dimensions: string[];
                surface_ids: string[];
                title: string;
            }[];
            contradictions: {
                claim_ids: string[];
                contradiction_id: string;
                evidence_ids: string[];
                status: "resolved"
                | "active";
                surface_ids: string[];
            }[];
            evidence_bundle: {
                artifacts: {
                    architecture: "x86"
                    | "x86_64"
                    | "arm"
                    | "arm64"
                    | null;
                    digest: { sha256: string };
                    format:
                        | "unknown"
                        | "file"
                        | "directory"
                        | "javascript"
                        | "source-map"
                        | "plist"
                        | "entitlements"
                        | "dmg"
                        | "zip"
                        | "pkg"
                        | "asar"
                        | "javascript-bundle"
                        | "mach-o-universal"
                        | "mach-o"
                        | "elf"
                        | "pe"
                        | "hopper"
                        | "analysis-database"
                        | "ipa"
                        | "apk";
                }[];
                bundle_version: 2;
                captures: { evidence_id: string; predicate_type: string }[];
                environments: {
                    architecture: string;
                    id: string;
                    isolation: "process" | "none" | "container" | "virtual-machine";
                    platform: string;
                }[];
                providers: { id: string; name: string; version: string
                | null }[];
                records: (
                    | {
                        analysis_profile: {
                            digest: string;
                            parameters: Record<string, JSONType>;
                            provider: { id: string; name: string; version: string };
                            provider_profile_schema_version: number;
                            schema_version: 1;
                        };
                        authority: | "shipped-artifact"
                        | "controlled-replay"
                        | "historical-reference"
                        | "external-service"
                        | "analyst-inference";
                        confidence: "observed"
                        | "derived"
                        | "inferred";
                        environment:
                            | {
                                architecture: string;
                                id: string;
                                isolation: "process"
                                | "none"
                                | "container"
                                | "virtual-machine";
                                platform: string;
                            }
                            | null;
                        evidence_id: string;
                        evidence_links: string[];
                        limitations: string[];
                        locations: (
                            | { address: string; kind: "address" }
                            | { end: string; kind: "address-range"; start: string }
                            | { kind: "artifact-path"; path: string }
                            | { kind: "file-offset"; offset: number }
                            | { end: number; kind: "file-offset-range"; start: number }
                        )[];
                        normalized_result: JSONType;
                        operation: string;
                        parameters: Record<string, JSONType>;
                        predicate_type: string;
                        provider: { id: string; name: string; version: string | null };
                        raw_result: JSONType;
                        schema_version: 2;
                        subject:
                            | {
                                architecture: "x86"
                                | "x86_64"
                                | "arm"
                                | "arm64"
                                | null;
                                digest: { sha256: string };
                                format:
                                    | "unknown"
                                    | "file"
                                    | "directory"
                                    | "javascript"
                                    | "source-map"
                                    | "plist"
                                    | "entitlements"
                                    | "dmg"
                                    | "zip"
                                    | "pkg"
                                    | "asar"
                                    | "javascript-bundle"
                                    | "mach-o-universal"
                                    | "mach-o"
                                    | "elf"
                                    | "pe"
                                    | "hopper"
                                    | "analysis-database"
                                    | "ipa"
                                    | "apk";
                                local_path: string;
                                name: string;
                            }
                            | null;
                    }
                    | {
                        authority: | "shipped-artifact"
                        | "controlled-replay"
                        | "historical-reference"
                        | "external-service"
                        | "analyst-inference";
                        confidence: "observed"
                        | "derived"
                        | "inferred";
                        environment:
                            | {
                                architecture: string;
                                id: string;
                                isolation: "process"
                                | "none"
                                | "container"
                                | "virtual-machine";
                                platform: string;
                            }
                            | null;
                        evidence_id: string;
                        evidence_links: string[];
                        limitations: string[];
                        locations: (
                            | { address: string; kind: "address" }
                            | { end: string; kind: "address-range"; start: string }
                            | { kind: "artifact-path"; path: string }
                            | { kind: "file-offset"; offset: number }
                            | { end: number; kind: "file-offset-range"; start: number }
                        )[];
                        normalized_result: JSONType;
                        operation: string;
                        parameters: Record<string, JSONType>;
                        predicate_type: string;
                        provider: { id: string; name: string; version: string | null };
                        raw_result: JSONType;
                        schema_version: 2;
                        subject:
                            | {
                                architecture: "x86"
                                | "x86_64"
                                | "arm"
                                | "arm64"
                                | null;
                                digest: { sha256: string };
                                format:
                                    | "unknown"
                                    | "file"
                                    | "directory"
                                    | "javascript"
                                    | "source-map"
                                    | "plist"
                                    | "entitlements"
                                    | "dmg"
                                    | "zip"
                                    | "pkg"
                                    | "asar"
                                    | "javascript-bundle"
                                    | "mach-o-universal"
                                    | "mach-o"
                                    | "elf"
                                    | "pe"
                                    | "hopper"
                                    | "analysis-database"
                                    | "ipa"
                                    | "apk";
                                local_path: string;
                                name: string;
                            }
                            | null;
                    }
                )[];
                scenarios: {
                    authority: "controlled-replay";
                    evidence_id: string;
                    operation: string;
                }[];
                unknowns: {
                    contradicting_evidence_ids: string[];
                    domain: string;
                    mutation_evidence_ids: string[];
                    previous_revision_digest: string
                    | null;
                    question: string;
                    recommended_probes: { operation: string; rationale: string }[];
                    registry_version: 1;
                    relationships: {
                        type: "depends-on" | "related-to" | "contradicts";
                        unknown_id: string;
                    }[];
                    required_authority: | "shipped-artifact"
                    | "controlled-replay"
                    | "historical-reference"
                    | "external-service"
                    | "analyst-inference"
                    | null;
                    required_confidence: "observed"
                    | "derived"
                    | "inferred";
                    required_environment:
                        | {
                            architecture: string
                            | null;
                            id: string | null;
                            isolation: "process" | "none" | "container" | "virtual-machine" | null;
                            platform: string | null;
                        }
                        | null;
                    resolution: | {
                        disposition: "verified";
                        evidence_ids: string[];
                        rationale: string;
                    }
                    | {
                        disposition: "withdrawn"
                        | "out-of-scope";
                        evidence_ids: string[];
                        rationale: string;
                    }
                    | null;
                    revision: number;
                    revision_digest: string;
                    scope_digest: string
                    | null;
                    severity: "low" | "medium" | "high" | "critical";
                    status:
                        | "open"
                        | "investigating"
                        | "blocked"
                        | "contradicted"
                        | "resolved";
                    supporting_evidence_ids: string[];
                    unknown_id: string;
                }[];
            };
            name: string;
            owners: {
                ownership: | {
                    authority_route: "unknown"
                    | "none"
                    | "detected";
                    disposition: "implemented";
                    owner_export: string | null;
                    owner_path: string;
                    owner_sha256: string;
                    package_state: "unknown" | "missing" | "distributed";
                    path_state: "unknown" | "missing" | "present";
                }
                | { disposition: "external"
                | "non-goal"; rationale: string };
                surface_id: string;
            }[];
            package_proofs: {
                artifact_sha256s: string[];
                evidence_ids: string[];
                kind: | "build"
                | "clean-install"
                | "package-contents"
                | "runtime-routing"
                | "authority-independence";
                proof_id: string;
                status: "unknown"
                | "fail"
                | "pass"
                | "unsupported"
                | "skipped";
            }[];
            previous_revision_sha256: string
            | null;
            residual_unknown_ids: string[];
            revision: number;
            revision_sha256: string;
            schema_version: 1;
            surfaces: {
                artifact_id: string;
                authority:
                    | "external"
                    | "observed"
                    | "derived"
                    | "inferred"
                    | "historical";
                dependency_surface_ids: string[];
                evidence_ids: string[];
                family: string;
                location: string;
                occurrence_id: string
                | null;
                surface_id: string;
            }[];
            verifier_contracts: {
                authority: | "external"
                | "shipped-artifact"
                | "controlled-replay"
                | "live-observation";
                claim_ids: string[];
                contract_sha256: string;
                dimensions: string[];
                max_age_ms: number;
                minimum_repeats: number;
                normalization_removes_dimensions: false;
                normalization_sha256: string;
                verifier_id: string;
            }[];
            verifier_results: {
                artifact_sha256s: string[];
                contract_sha256: string;
                covered_claim_ids: string[];
                covered_dimensions: string[];
                evidence_ids: string[];
                normalization_sha256: string;
                observed_at: string;
                owner_sha256s: string[];
                repeats: number;
                status: | "unknown"
                | "truncated"
                | "fail"
                | "pass"
                | "unsupported"
                | "skipped";
                verifier_id: string;
            }[];
            workspace_id: string;
        }[];
        recordEvidence(
            evidence:
                | {
                    analysis_profile: {
                        digest: string;
                        parameters: Record<string, JSONType>;
                        provider: { id: string; name: string; version: string };
                        provider_profile_schema_version: number;
                        schema_version: 1;
                    };
                    authority: | "shipped-artifact"
                    | "controlled-replay"
                    | "historical-reference"
                    | "external-service"
                    | "analyst-inference";
                    confidence: "observed"
                    | "derived"
                    | "inferred";
                    environment:
                        | {
                            architecture: string;
                            id: string;
                            isolation: "process"
                            | "none"
                            | "container"
                            | "virtual-machine";
                            platform: string;
                        }
                        | null;
                    evidence_id: string;
                    evidence_links: string[];
                    limitations: string[];
                    locations: (
                        | { address: string; kind: "address" }
                        | { end: string; kind: "address-range"; start: string }
                        | { kind: "artifact-path"; path: string }
                        | { kind: "file-offset"; offset: number }
                        | { end: number; kind: "file-offset-range"; start: number }
                    )[];
                    normalized_result: JSONType;
                    operation: string;
                    parameters: Record<string, JSONType>;
                    predicate_type: string;
                    provider: { id: string; name: string; version: string | null };
                    raw_result: JSONType;
                    schema_version: 2;
                    subject:
                        | {
                            architecture: "x86"
                            | "x86_64"
                            | "arm"
                            | "arm64"
                            | null;
                            digest: { sha256: string };
                            format:
                                | "unknown"
                                | "file"
                                | "directory"
                                | "javascript"
                                | "source-map"
                                | "plist"
                                | "entitlements"
                                | "dmg"
                                | "zip"
                                | "pkg"
                                | "asar"
                                | "javascript-bundle"
                                | "mach-o-universal"
                                | "mach-o"
                                | "elf"
                                | "pe"
                                | "hopper"
                                | "analysis-database"
                                | "ipa"
                                | "apk";
                            local_path: string;
                            name: string;
                        }
                        | null;
                }
                | {
                    authority: | "shipped-artifact"
                    | "controlled-replay"
                    | "historical-reference"
                    | "external-service"
                    | "analyst-inference";
                    confidence: "observed"
                    | "derived"
                    | "inferred";
                    environment:
                        | {
                            architecture: string;
                            id: string;
                            isolation: "process"
                            | "none"
                            | "container"
                            | "virtual-machine";
                            platform: string;
                        }
                        | null;
                    evidence_id: string;
                    evidence_links: string[];
                    limitations: string[];
                    locations: (
                        | { address: string; kind: "address" }
                        | { end: string; kind: "address-range"; start: string }
                        | { kind: "artifact-path"; path: string }
                        | { kind: "file-offset"; offset: number }
                        | { end: number; kind: "file-offset-range"; start: number }
                    )[];
                    normalized_result: JSONType;
                    operation: string;
                    parameters: Record<string, JSONType>;
                    predicate_type: string;
                    provider: { id: string; name: string; version: string | null };
                    raw_result: JSONType;
                    schema_version: 2;
                    subject:
                        | {
                            architecture: "x86"
                            | "x86_64"
                            | "arm"
                            | "arm64"
                            | null;
                            digest: { sha256: string };
                            format:
                                | "unknown"
                                | "file"
                                | "directory"
                                | "javascript"
                                | "source-map"
                                | "plist"
                                | "entitlements"
                                | "dmg"
                                | "zip"
                                | "pkg"
                                | "asar"
                                | "javascript-bundle"
                                | "mach-o-universal"
                                | "mach-o"
                                | "elf"
                                | "pe"
                                | "hopper"
                                | "analysis-database"
                                | "ipa"
                                | "apk";
                            local_path: string;
                            name: string;
                        }
                        | null;
                },
        ): Result<
            "added"
            | "duplicate",
            EvidenceIntegrityError | EvidenceLimitError,
        >;
        recordEvidenceWithUnknown(
            evidence:
                | {
                    analysis_profile: {
                        digest: string;
                        parameters: Record<string, JSONType>;
                        provider: { id: string; name: string; version: string };
                        provider_profile_schema_version: number;
                        schema_version: 1;
                    };
                    authority: | "shipped-artifact"
                    | "controlled-replay"
                    | "historical-reference"
                    | "external-service"
                    | "analyst-inference";
                    confidence: "observed"
                    | "derived"
                    | "inferred";
                    environment:
                        | {
                            architecture: string;
                            id: string;
                            isolation: "process"
                            | "none"
                            | "container"
                            | "virtual-machine";
                            platform: string;
                        }
                        | null;
                    evidence_id: string;
                    evidence_links: string[];
                    limitations: string[];
                    locations: (
                        | { address: string; kind: "address" }
                        | { end: string; kind: "address-range"; start: string }
                        | { kind: "artifact-path"; path: string }
                        | { kind: "file-offset"; offset: number }
                        | { end: number; kind: "file-offset-range"; start: number }
                    )[];
                    normalized_result: JSONType;
                    operation: string;
                    parameters: Record<string, JSONType>;
                    predicate_type: string;
                    provider: { id: string; name: string; version: string | null };
                    raw_result: JSONType;
                    schema_version: 2;
                    subject:
                        | {
                            architecture: "x86"
                            | "x86_64"
                            | "arm"
                            | "arm64"
                            | null;
                            digest: { sha256: string };
                            format:
                                | "unknown"
                                | "file"
                                | "directory"
                                | "javascript"
                                | "source-map"
                                | "plist"
                                | "entitlements"
                                | "dmg"
                                | "zip"
                                | "pkg"
                                | "asar"
                                | "javascript-bundle"
                                | "mach-o-universal"
                                | "mach-o"
                                | "elf"
                                | "pe"
                                | "hopper"
                                | "analysis-database"
                                | "ipa"
                                | "apk";
                            local_path: string;
                            name: string;
                        }
                        | null;
                }
                | {
                    authority: | "shipped-artifact"
                    | "controlled-replay"
                    | "historical-reference"
                    | "external-service"
                    | "analyst-inference";
                    confidence: "observed"
                    | "derived"
                    | "inferred";
                    environment:
                        | {
                            architecture: string;
                            id: string;
                            isolation: "process"
                            | "none"
                            | "container"
                            | "virtual-machine";
                            platform: string;
                        }
                        | null;
                    evidence_id: string;
                    evidence_links: string[];
                    limitations: string[];
                    locations: (
                        | { address: string; kind: "address" }
                        | { end: string; kind: "address-range"; start: string }
                        | { kind: "artifact-path"; path: string }
                        | { kind: "file-offset"; offset: number }
                        | { end: number; kind: "file-offset-range"; start: number }
                    )[];
                    normalized_result: JSONType;
                    operation: string;
                    parameters: Record<string, JSONType>;
                    predicate_type: string;
                    provider: { id: string; name: string; version: string | null };
                    raw_result: JSONType;
                    schema_version: 2;
                    subject:
                        | {
                            architecture: "x86"
                            | "x86_64"
                            | "arm"
                            | "arm64"
                            | null;
                            digest: { sha256: string };
                            format:
                                | "unknown"
                                | "file"
                                | "directory"
                                | "javascript"
                                | "source-map"
                                | "plist"
                                | "entitlements"
                                | "dmg"
                                | "zip"
                                | "pkg"
                                | "asar"
                                | "javascript-bundle"
                                | "mach-o-universal"
                                | "mach-o"
                                | "elf"
                                | "pe"
                                | "hopper"
                                | "analysis-database"
                                | "ipa"
                                | "apk";
                            local_path: string;
                            name: string;
                        }
                        | null;
                },
            input: {
                approved: true;
                contradicting_evidence_ids: string[];
                domain: string;
                question: string;
                recommended_probes: { operation: string; rationale: string }[];
                relationships: {
                    type: "depends-on" | "related-to" | "contradicts";
                    unknown_id: string;
                }[];
                required_authority: | "shipped-artifact"
                | "controlled-replay"
                | "historical-reference"
                | "external-service"
                | "analyst-inference"
                | null;
                required_confidence: "observed"
                | "derived"
                | "inferred";
                required_environment:
                    | {
                        architecture: string
                        | null;
                        id: string | null;
                        isolation: "process" | "none" | "container" | "virtual-machine" | null;
                        platform: string | null;
                    }
                    | null;
                severity: "low"
                | "medium"
                | "high"
                | "critical";
                supporting_evidence_ids: string[];
            },
        ): Result<
            | {
                contradicting_evidence_ids: string[];
                domain: string;
                mutation_evidence_ids: string[];
                previous_revision_digest: string
                | null;
                question: string;
                recommended_probes: { operation: string; rationale: string }[];
                registry_version: 1;
                relationships: {
                    type: "depends-on" | "related-to" | "contradicts";
                    unknown_id: string;
                }[];
                required_authority: | "shipped-artifact"
                | "controlled-replay"
                | "historical-reference"
                | "external-service"
                | "analyst-inference"
                | null;
                required_confidence: "observed"
                | "derived"
                | "inferred";
                required_environment:
                    | {
                        architecture: string
                        | null;
                        id: string | null;
                        isolation: "process" | "none" | "container" | "virtual-machine" | null;
                        platform: string | null;
                    }
                    | null;
                resolution: | {
                    disposition: "verified";
                    evidence_ids: string[];
                    rationale: string;
                }
                | {
                    disposition: "withdrawn"
                    | "out-of-scope";
                    evidence_ids: string[];
                    rationale: string;
                }
                | null;
                revision: number;
                revision_digest: string;
                scope_digest: string
                | null;
                severity: "low" | "medium" | "high" | "critical";
                status:
                    | "open"
                    | "investigating"
                    | "blocked"
                    | "contradicted"
                    | "resolved";
                supporting_evidence_ids: string[];
                unknown_id: string;
            }
            | null,
            AnalysisError,
        >;
        recordUnknown(
            input: {
                approved: true;
                contradicting_evidence_ids: string[];
                domain: string;
                question: string;
                recommended_probes: { operation: string; rationale: string }[];
                relationships: {
                    type: "depends-on" | "related-to" | "contradicts";
                    unknown_id: string;
                }[];
                required_authority: | "shipped-artifact"
                | "controlled-replay"
                | "historical-reference"
                | "external-service"
                | "analyst-inference"
                | null;
                required_confidence: "observed"
                | "derived"
                | "inferred";
                required_environment:
                    | {
                        architecture: string
                        | null;
                        id: string | null;
                        isolation: "process" | "none" | "container" | "virtual-machine" | null;
                        platform: string | null;
                    }
                    | null;
                severity: "low"
                | "medium"
                | "high"
                | "critical";
                supporting_evidence_ids: string[];
            },
        ): Result<
            {
                contradicting_evidence_ids: string[];
                domain: string;
                mutation_evidence_ids: string[];
                previous_revision_digest: string
                | null;
                question: string;
                recommended_probes: { operation: string; rationale: string }[];
                registry_version: 1;
                relationships: {
                    type: "depends-on" | "related-to" | "contradicts";
                    unknown_id: string;
                }[];
                required_authority: | "shipped-artifact"
                | "controlled-replay"
                | "historical-reference"
                | "external-service"
                | "analyst-inference"
                | null;
                required_confidence: "observed"
                | "derived"
                | "inferred";
                required_environment:
                    | {
                        architecture: string
                        | null;
                        id: string | null;
                        isolation: "process" | "none" | "container" | "virtual-machine" | null;
                        platform: string | null;
                    }
                    | null;
                resolution: | {
                    disposition: "verified";
                    evidence_ids: string[];
                    rationale: string;
                }
                | {
                    disposition: "withdrawn"
                    | "out-of-scope";
                    evidence_ids: string[];
                    rationale: string;
                }
                | null;
                revision: number;
                revision_digest: string;
                scope_digest: string
                | null;
                severity: "low" | "medium" | "high" | "critical";
                status:
                    | "open"
                    | "investigating"
                    | "blocked"
                    | "contradicted"
                    | "resolved";
                supporting_evidence_ids: string[];
                unknown_id: string;
            },
            AnalysisError,
        >;
        retainInvestigationWorkspace(
            workspace: {
                bundle: {
                    artifacts: {
                        architecture: "x86" | "x86_64" | "arm" | "arm64" | null;
                        digest: { sha256: string };
                        format:
                            | "unknown"
                            | "file"
                            | "directory"
                            | "javascript"
                            | "source-map"
                            | "plist"
                            | "entitlements"
                            | "dmg"
                            | "zip"
                            | "pkg"
                            | "asar"
                            | "javascript-bundle"
                            | "mach-o-universal"
                            | "mach-o"
                            | "elf"
                            | "pe"
                            | "hopper"
                            | "analysis-database"
                            | "ipa"
                            | "apk";
                    }[];
                    bundle_version: 2;
                    captures: { evidence_id: string; predicate_type: string }[];
                    environments: {
                        architecture: string;
                        id: string;
                        isolation: "process" | "none" | "container" | "virtual-machine";
                        platform: string;
                    }[];
                    providers: { id: string; name: string; version: string
                    | null }[];
                    records: (
                        | {
                            analysis_profile: {
                                digest: string;
                                parameters: Record<string, JSONType>;
                                provider: { id: string; name: string; version: string };
                                provider_profile_schema_version: number;
                                schema_version: 1;
                            };
                            authority: | "shipped-artifact"
                            | "controlled-replay"
                            | "historical-reference"
                            | "external-service"
                            | "analyst-inference";
                            confidence: "observed"
                            | "derived"
                            | "inferred";
                            environment:
                                | {
                                    architecture: string;
                                    id: string;
                                    isolation: "process"
                                    | "none"
                                    | "container"
                                    | "virtual-machine";
                                    platform: string;
                                }
                                | null;
                            evidence_id: string;
                            evidence_links: string[];
                            limitations: string[];
                            locations: (
                                | { address: string; kind: "address" }
                                | { end: string; kind: "address-range"; start: string }
                                | { kind: "artifact-path"; path: string }
                                | { kind: "file-offset"; offset: number }
                                | { end: number; kind: "file-offset-range"; start: number }
                            )[];
                            normalized_result: JSONType;
                            operation: string;
                            parameters: Record<string, JSONType>;
                            predicate_type: string;
                            provider: { id: string; name: string; version: string | null };
                            raw_result: JSONType;
                            schema_version: 2;
                            subject:
                                | {
                                    architecture: "x86"
                                    | "x86_64"
                                    | "arm"
                                    | "arm64"
                                    | null;
                                    digest: { sha256: string };
                                    format:
                                        | "unknown"
                                        | "file"
                                        | "directory"
                                        | "javascript"
                                        | "source-map"
                                        | "plist"
                                        | "entitlements"
                                        | "dmg"
                                        | "zip"
                                        | "pkg"
                                        | "asar"
                                        | "javascript-bundle"
                                        | "mach-o-universal"
                                        | "mach-o"
                                        | "elf"
                                        | "pe"
                                        | "hopper"
                                        | "analysis-database"
                                        | "ipa"
                                        | "apk";
                                    local_path: string;
                                    name: string;
                                }
                                | null;
                        }
                        | {
                            authority: | "shipped-artifact"
                            | "controlled-replay"
                            | "historical-reference"
                            | "external-service"
                            | "analyst-inference";
                            confidence: "observed"
                            | "derived"
                            | "inferred";
                            environment:
                                | {
                                    architecture: string;
                                    id: string;
                                    isolation: "process"
                                    | "none"
                                    | "container"
                                    | "virtual-machine";
                                    platform: string;
                                }
                                | null;
                            evidence_id: string;
                            evidence_links: string[];
                            limitations: string[];
                            locations: (
                                | { address: string; kind: "address" }
                                | { end: string; kind: "address-range"; start: string }
                                | { kind: "artifact-path"; path: string }
                                | { kind: "file-offset"; offset: number }
                                | { end: number; kind: "file-offset-range"; start: number }
                            )[];
                            normalized_result: JSONType;
                            operation: string;
                            parameters: Record<string, JSONType>;
                            predicate_type: string;
                            provider: { id: string; name: string; version: string | null };
                            raw_result: JSONType;
                            schema_version: 2;
                            subject:
                                | {
                                    architecture: "x86"
                                    | "x86_64"
                                    | "arm"
                                    | "arm64"
                                    | null;
                                    digest: { sha256: string };
                                    format:
                                        | "unknown"
                                        | "file"
                                        | "directory"
                                        | "javascript"
                                        | "source-map"
                                        | "plist"
                                        | "entitlements"
                                        | "dmg"
                                        | "zip"
                                        | "pkg"
                                        | "asar"
                                        | "javascript-bundle"
                                        | "mach-o-universal"
                                        | "mach-o"
                                        | "elf"
                                        | "pe"
                                        | "hopper"
                                        | "analysis-database"
                                        | "ipa"
                                        | "apk";
                                    local_path: string;
                                    name: string;
                                }
                                | null;
                        }
                    )[];
                    scenarios: {
                        authority: "controlled-replay";
                        evidence_id: string;
                        operation: string;
                    }[];
                    unknowns: {
                        contradicting_evidence_ids: string[];
                        domain: string;
                        mutation_evidence_ids: string[];
                        previous_revision_digest: string
                        | null;
                        question: string;
                        recommended_probes: { operation: string; rationale: string }[];
                        registry_version: 1;
                        relationships: {
                            type: "depends-on" | "related-to" | "contradicts";
                            unknown_id: string;
                        }[];
                        required_authority: | "shipped-artifact"
                        | "controlled-replay"
                        | "historical-reference"
                        | "external-service"
                        | "analyst-inference"
                        | null;
                        required_confidence: "observed"
                        | "derived"
                        | "inferred";
                        required_environment:
                            | {
                                architecture: string
                                | null;
                                id: string | null;
                                isolation:
                                    | "process"
                                    | "none"
                                    | "container"
                                    | "virtual-machine"
                                    | null;
                                platform: string
                                | null;
                            }
                            | null;
                        resolution: | {
                            disposition: "verified";
                            evidence_ids: string[];
                            rationale: string;
                        }
                        | {
                            disposition: "withdrawn"
                            | "out-of-scope";
                            evidence_ids: string[];
                            rationale: string;
                        }
                        | null;
                        revision: number;
                        revision_digest: string;
                        scope_digest: string
                        | null;
                        severity: "low" | "medium" | "high" | "critical";
                        status:
                            | "open"
                            | "investigating"
                            | "blocked"
                            | "contradicted"
                            | "resolved";
                        supporting_evidence_ids: string[];
                        unknown_id: string;
                    }[];
                };
                name: string;
                previous_revision_digest: string
                | null;
                revision: number;
                revision_digest: string;
                runs: (
                    | {
                        comparison_evidence_id: string
                        | null;
                        completed_stages: (
                            | "inventory_left"
                            | "inventory_right"
                            | "compare_artifacts"
                            | "find_changed_behavior"
                        )[];
                        integrity_continue_approved: boolean;
                        integrity_policy: "fail"
                        | "record-and-continue";
                        left: {
                            format:
                                | "unknown"
                                | "file"
                                | "directory"
                                | "javascript"
                                | "source-map"
                                | "plist"
                                | "entitlements"
                                | "dmg"
                                | "zip"
                                | "pkg"
                                | "asar"
                                | "javascript-bundle"
                                | "mach-o-universal"
                                | "mach-o"
                                | "elf"
                                | "pe"
                                | "hopper"
                                | "analysis-database"
                                | "ipa"
                                | "apk";
                            graph_sha256: string;
                            manifest_id: string;
                            root_sha256: string;
                        };
                        left_inventory_evidence_ids: string[];
                        limitations: string[];
                        max_integrity_mismatches: number;
                        options: {
                            change_limit: number;
                            max_compression_ratio: number;
                            max_depth: number;
                            max_entries: number;
                            max_entry_bytes: number;
                            max_path_bytes: number;
                            max_total_bytes: number;
                            page_size: number;
                        };
                        request_sha256: string;
                        result_evidence_id: string
                        | null;
                        right: {
                            format:
                                | "unknown"
                                | "file"
                                | "directory"
                                | "javascript"
                                | "source-map"
                                | "plist"
                                | "entitlements"
                                | "dmg"
                                | "zip"
                                | "pkg"
                                | "asar"
                                | "javascript-bundle"
                                | "mach-o-universal"
                                | "mach-o"
                                | "elf"
                                | "pe"
                                | "hopper"
                                | "analysis-database"
                                | "ipa"
                                | "apk";
                            graph_sha256: string;
                            manifest_id: string;
                            root_sha256: string;
                        };
                        right_inventory_evidence_ids: string[];
                        run_id: string;
                        schema_version: 1;
                        status: "complete"
                        | "running";
                    }
                    | {
                        comparison_evidence_id: string
                        | null;
                        completed_stages: (
                            | "inventory_left"
                            | "inventory_right"
                            | "compare_artifacts"
                            | "find_changed_behavior"
                        )[];
                        integrity_continue_approved: boolean;
                        integrity_policy: "fail"
                        | "record-and-continue";
                        left: {
                            format:
                                | "unknown"
                                | "file"
                                | "directory"
                                | "javascript"
                                | "source-map"
                                | "plist"
                                | "entitlements"
                                | "dmg"
                                | "zip"
                                | "pkg"
                                | "asar"
                                | "javascript-bundle"
                                | "mach-o-universal"
                                | "mach-o"
                                | "elf"
                                | "pe"
                                | "hopper"
                                | "analysis-database"
                                | "ipa"
                                | "apk";
                            graph_sha256: string;
                            manifest_id: string;
                            root_sha256: string;
                        };
                        left_inventory_evidence_ids: string[];
                        legacy_request_identity: true;
                        limitations: string[];
                        max_integrity_mismatches: number;
                        options: {
                            change_limit: number;
                            max_compression_ratio: number;
                            max_depth: number;
                            max_entries: number;
                            max_entry_bytes: number;
                            max_path_bytes: number;
                            max_total_bytes: number;
                            page_size: number;
                        };
                        request_sha256: string;
                        result_evidence_id: string
                        | null;
                        right: {
                            format:
                                | "unknown"
                                | "file"
                                | "directory"
                                | "javascript"
                                | "source-map"
                                | "plist"
                                | "entitlements"
                                | "dmg"
                                | "zip"
                                | "pkg"
                                | "asar"
                                | "javascript-bundle"
                                | "mach-o-universal"
                                | "mach-o"
                                | "elf"
                                | "pe"
                                | "hopper"
                                | "analysis-database"
                                | "ipa"
                                | "apk";
                            graph_sha256: string;
                            manifest_id: string;
                            root_sha256: string;
                        };
                        right_inventory_evidence_ids: string[];
                        run_id: string;
                        schema_version: 1;
                        status: "complete"
                        | "running";
                    }
                )[];
                workspace_id: string;
                workspace_version: 1;
            },
        ): "added"
        | "duplicate";
        retainReconstructionCoverageWorkspace(
            workspace: {
                artifacts: {
                    artifact_id: string;
                    artifact_sha256: string;
                    environment_sha256: string;
                    evidence_ids: string[];
                    version: string;
                }[];
                boundaries: {
                    allowed_dispositions: ("external" | "non-goal")[];
                    allowed_unknown_ids: string[];
                    boundary_id: string;
                    required_claim_ids: string[];
                    required_package_proof_kinds: (
                        | "build"
                        | "clean-install"
                        | "package-contents"
                        | "runtime-routing"
                        | "authority-independence"
                    )[];
                    required_surface_ids: string[];
                    title: string;
                }[];
                claims: {
                    claim_id: string;
                    kind: string;
                    required_authority: | "external"
                    | "shipped-artifact"
                    | "controlled-replay"
                    | "live-observation";
                    required_dimensions: string[];
                    surface_ids: string[];
                    title: string;
                }[];
                contradictions: {
                    claim_ids: string[];
                    contradiction_id: string;
                    evidence_ids: string[];
                    status: "resolved"
                    | "active";
                    surface_ids: string[];
                }[];
                evidence_bundle: {
                    artifacts: {
                        architecture: "x86"
                        | "x86_64"
                        | "arm"
                        | "arm64"
                        | null;
                        digest: { sha256: string };
                        format:
                            | "unknown"
                            | "file"
                            | "directory"
                            | "javascript"
                            | "source-map"
                            | "plist"
                            | "entitlements"
                            | "dmg"
                            | "zip"
                            | "pkg"
                            | "asar"
                            | "javascript-bundle"
                            | "mach-o-universal"
                            | "mach-o"
                            | "elf"
                            | "pe"
                            | "hopper"
                            | "analysis-database"
                            | "ipa"
                            | "apk";
                    }[];
                    bundle_version: 2;
                    captures: { evidence_id: string; predicate_type: string }[];
                    environments: {
                        architecture: string;
                        id: string;
                        isolation: "process" | "none" | "container" | "virtual-machine";
                        platform: string;
                    }[];
                    providers: { id: string; name: string; version: string
                    | null }[];
                    records: (
                        | {
                            analysis_profile: {
                                digest: string;
                                parameters: Record<string, JSONType>;
                                provider: { id: string; name: string; version: string };
                                provider_profile_schema_version: number;
                                schema_version: 1;
                            };
                            authority: | "shipped-artifact"
                            | "controlled-replay"
                            | "historical-reference"
                            | "external-service"
                            | "analyst-inference";
                            confidence: "observed"
                            | "derived"
                            | "inferred";
                            environment:
                                | {
                                    architecture: string;
                                    id: string;
                                    isolation: "process"
                                    | "none"
                                    | "container"
                                    | "virtual-machine";
                                    platform: string;
                                }
                                | null;
                            evidence_id: string;
                            evidence_links: string[];
                            limitations: string[];
                            locations: (
                                | { address: string; kind: "address" }
                                | { end: string; kind: "address-range"; start: string }
                                | { kind: "artifact-path"; path: string }
                                | { kind: "file-offset"; offset: number }
                                | { end: number; kind: "file-offset-range"; start: number }
                            )[];
                            normalized_result: JSONType;
                            operation: string;
                            parameters: Record<string, JSONType>;
                            predicate_type: string;
                            provider: { id: string; name: string; version: string | null };
                            raw_result: JSONType;
                            schema_version: 2;
                            subject:
                                | {
                                    architecture: "x86"
                                    | "x86_64"
                                    | "arm"
                                    | "arm64"
                                    | null;
                                    digest: { sha256: string };
                                    format:
                                        | "unknown"
                                        | "file"
                                        | "directory"
                                        | "javascript"
                                        | "source-map"
                                        | "plist"
                                        | "entitlements"
                                        | "dmg"
                                        | "zip"
                                        | "pkg"
                                        | "asar"
                                        | "javascript-bundle"
                                        | "mach-o-universal"
                                        | "mach-o"
                                        | "elf"
                                        | "pe"
                                        | "hopper"
                                        | "analysis-database"
                                        | "ipa"
                                        | "apk";
                                    local_path: string;
                                    name: string;
                                }
                                | null;
                        }
                        | {
                            authority: | "shipped-artifact"
                            | "controlled-replay"
                            | "historical-reference"
                            | "external-service"
                            | "analyst-inference";
                            confidence: "observed"
                            | "derived"
                            | "inferred";
                            environment:
                                | {
                                    architecture: string;
                                    id: string;
                                    isolation: "process"
                                    | "none"
                                    | "container"
                                    | "virtual-machine";
                                    platform: string;
                                }
                                | null;
                            evidence_id: string;
                            evidence_links: string[];
                            limitations: string[];
                            locations: (
                                | { address: string; kind: "address" }
                                | { end: string; kind: "address-range"; start: string }
                                | { kind: "artifact-path"; path: string }
                                | { kind: "file-offset"; offset: number }
                                | { end: number; kind: "file-offset-range"; start: number }
                            )[];
                            normalized_result: JSONType;
                            operation: string;
                            parameters: Record<string, JSONType>;
                            predicate_type: string;
                            provider: { id: string; name: string; version: string | null };
                            raw_result: JSONType;
                            schema_version: 2;
                            subject:
                                | {
                                    architecture: "x86"
                                    | "x86_64"
                                    | "arm"
                                    | "arm64"
                                    | null;
                                    digest: { sha256: string };
                                    format:
                                        | "unknown"
                                        | "file"
                                        | "directory"
                                        | "javascript"
                                        | "source-map"
                                        | "plist"
                                        | "entitlements"
                                        | "dmg"
                                        | "zip"
                                        | "pkg"
                                        | "asar"
                                        | "javascript-bundle"
                                        | "mach-o-universal"
                                        | "mach-o"
                                        | "elf"
                                        | "pe"
                                        | "hopper"
                                        | "analysis-database"
                                        | "ipa"
                                        | "apk";
                                    local_path: string;
                                    name: string;
                                }
                                | null;
                        }
                    )[];
                    scenarios: {
                        authority: "controlled-replay";
                        evidence_id: string;
                        operation: string;
                    }[];
                    unknowns: {
                        contradicting_evidence_ids: string[];
                        domain: string;
                        mutation_evidence_ids: string[];
                        previous_revision_digest: string
                        | null;
                        question: string;
                        recommended_probes: { operation: string; rationale: string }[];
                        registry_version: 1;
                        relationships: {
                            type: "depends-on" | "related-to" | "contradicts";
                            unknown_id: string;
                        }[];
                        required_authority: | "shipped-artifact"
                        | "controlled-replay"
                        | "historical-reference"
                        | "external-service"
                        | "analyst-inference"
                        | null;
                        required_confidence: "observed"
                        | "derived"
                        | "inferred";
                        required_environment:
                            | {
                                architecture: string
                                | null;
                                id: string | null;
                                isolation:
                                    | "process"
                                    | "none"
                                    | "container"
                                    | "virtual-machine"
                                    | null;
                                platform: string
                                | null;
                            }
                            | null;
                        resolution: | {
                            disposition: "verified";
                            evidence_ids: string[];
                            rationale: string;
                        }
                        | {
                            disposition: "withdrawn"
                            | "out-of-scope";
                            evidence_ids: string[];
                            rationale: string;
                        }
                        | null;
                        revision: number;
                        revision_digest: string;
                        scope_digest: string
                        | null;
                        severity: "low" | "medium" | "high" | "critical";
                        status:
                            | "open"
                            | "investigating"
                            | "blocked"
                            | "contradicted"
                            | "resolved";
                        supporting_evidence_ids: string[];
                        unknown_id: string;
                    }[];
                };
                name: string;
                owners: {
                    ownership: | {
                        authority_route: "unknown"
                        | "none"
                        | "detected";
                        disposition: "implemented";
                        owner_export: string | null;
                        owner_path: string;
                        owner_sha256: string;
                        package_state: "unknown" | "missing" | "distributed";
                        path_state: "unknown" | "missing" | "present";
                    }
                    | { disposition: "external"
                    | "non-goal"; rationale: string };
                    surface_id: string;
                }[];
                package_proofs: {
                    artifact_sha256s: string[];
                    evidence_ids: string[];
                    kind: | "build"
                    | "clean-install"
                    | "package-contents"
                    | "runtime-routing"
                    | "authority-independence";
                    proof_id: string;
                    status: "unknown"
                    | "fail"
                    | "pass"
                    | "unsupported"
                    | "skipped";
                }[];
                previous_revision_sha256: string
                | null;
                residual_unknown_ids: string[];
                revision: number;
                revision_sha256: string;
                schema_version: 1;
                surfaces: {
                    artifact_id: string;
                    authority:
                        | "external"
                        | "observed"
                        | "derived"
                        | "inferred"
                        | "historical";
                    dependency_surface_ids: string[];
                    evidence_ids: string[];
                    family: string;
                    location: string;
                    occurrence_id: string
                    | null;
                    surface_id: string;
                }[];
                verifier_contracts: {
                    authority: | "external"
                    | "shipped-artifact"
                    | "controlled-replay"
                    | "live-observation";
                    claim_ids: string[];
                    contract_sha256: string;
                    dimensions: string[];
                    max_age_ms: number;
                    minimum_repeats: number;
                    normalization_removes_dimensions: false;
                    normalization_sha256: string;
                    verifier_id: string;
                }[];
                verifier_results: {
                    artifact_sha256s: string[];
                    contract_sha256: string;
                    covered_claim_ids: string[];
                    covered_dimensions: string[];
                    evidence_ids: string[];
                    normalization_sha256: string;
                    observed_at: string;
                    owner_sha256s: string[];
                    repeats: number;
                    status: | "unknown"
                    | "truncated"
                    | "fail"
                    | "pass"
                    | "unsupported"
                    | "skipped";
                    verifier_id: string;
                }[];
                workspace_id: string;
            },
        ): "added"
        | "duplicate";
        status(): JSONType;
        updateUnknown(
            input: {
                approved: true;
                contradicting_evidence_ids: string[];
                expected_revision: number;
                recommended_probes: { operation: string; rationale: string }[];
                relationships: {
                    type: "depends-on" | "related-to" | "contradicts";
                    unknown_id: string;
                }[];
                required_authority: | "shipped-artifact"
                | "controlled-replay"
                | "historical-reference"
                | "external-service"
                | "analyst-inference"
                | null;
                required_confidence: "observed"
                | "derived"
                | "inferred";
                required_environment:
                    | {
                        architecture: string
                        | null;
                        id: string | null;
                        isolation: "process" | "none" | "container" | "virtual-machine" | null;
                        platform: string | null;
                    }
                    | null;
                resolution: | {
                    disposition: "verified";
                    evidence_ids: string[];
                    rationale: string;
                }
                | {
                    disposition: "withdrawn"
                    | "out-of-scope";
                    evidence_ids: string[];
                    rationale: string;
                }
                | null;
                severity: "low"
                | "medium"
                | "high"
                | "critical";
                status:
                    | "open"
                    | "investigating"
                    | "blocked"
                    | "contradicted"
                    | "resolved";
                supporting_evidence_ids: string[];
                unknown_id: string;
            },
        ): Result<
            {
                contradicting_evidence_ids: string[];
                domain: string;
                mutation_evidence_ids: string[];
                previous_revision_digest: string
                | null;
                question: string;
                recommended_probes: { operation: string; rationale: string }[];
                registry_version: 1;
                relationships: {
                    type: "depends-on" | "related-to" | "contradicts";
                    unknown_id: string;
                }[];
                required_authority: | "shipped-artifact"
                | "controlled-replay"
                | "historical-reference"
                | "external-service"
                | "analyst-inference"
                | null;
                required_confidence: "observed"
                | "derived"
                | "inferred";
                required_environment:
                    | {
                        architecture: string
                        | null;
                        id: string | null;
                        isolation: "process" | "none" | "container" | "virtual-machine" | null;
                        platform: string | null;
                    }
                    | null;
                resolution: | {
                    disposition: "verified";
                    evidence_ids: string[];
                    rationale: string;
                }
                | {
                    disposition: "withdrawn"
                    | "out-of-scope";
                    evidence_ids: string[];
                    rationale: string;
                }
                | null;
                revision: number;
                revision_digest: string;
                scope_digest: string
                | null;
                severity: "low" | "medium" | "high" | "critical";
                status:
                    | "open"
                    | "investigating"
                    | "blocked"
                    | "contradicted"
                    | "resolved";
                supporting_evidence_ids: string[];
                unknown_id: string;
            },
            AnalysisError,
        >;
        verifyUnknownResolution(
            unknownId: string,
        ): Result<
            {
                truthVerified: boolean;
                unknown: {
                    contradicting_evidence_ids: string[];
                    domain: string;
                    mutation_evidence_ids: string[];
                    previous_revision_digest: string
                    | null;
                    question: string;
                    recommended_probes: { operation: string; rationale: string }[];
                    registry_version: 1;
                    relationships: {
                        type: "depends-on" | "related-to" | "contradicts";
                        unknown_id: string;
                    }[];
                    required_authority: | "shipped-artifact"
                    | "controlled-replay"
                    | "historical-reference"
                    | "external-service"
                    | "analyst-inference"
                    | null;
                    required_confidence: "observed"
                    | "derived"
                    | "inferred";
                    required_environment:
                        | {
                            architecture: string
                            | null;
                            id: string | null;
                            isolation: "process" | "none" | "container" | "virtual-machine" | null;
                            platform: string | null;
                        }
                        | null;
                    resolution: | {
                        disposition: "verified";
                        evidence_ids: string[];
                        rationale: string;
                    }
                    | {
                        disposition: "withdrawn"
                        | "out-of-scope";
                        evidence_ids: string[];
                        rationale: string;
                    }
                    | null;
                    revision: number;
                    revision_digest: string;
                    scope_digest: string
                    | null;
                    severity: "low" | "medium" | "high" | "critical";
                    status:
                        | "open"
                        | "investigating"
                        | "blocked"
                        | "contradicted"
                        | "resolved";
                    supporting_evidence_ids: string[];
                    unknown_id: string;
                };
                valid: boolean;
            },
            UnknownRegistryError,
        >;
    }
    -
    +

    Hierarchy (View Summary)

    • AnalysisOperationPort diff --git a/docs/api/interfaces/application_JavaScriptArtifactGraphContext.AstEdgeInput.html b/docs/api/interfaces/application_JavaScriptArtifactGraphContext.AstEdgeInput.html index 4c070eba3..afeada159 100644 --- a/docs/api/interfaces/application_JavaScriptArtifactGraphContext.AstEdgeInput.html +++ b/docs/api/interfaces/application_JavaScriptArtifactGraphContext.AstEdgeInput.html @@ -15,7 +15,7 @@

      Exact AST containment edge values.

    interface AstEdgeInput {
        coverage: {
            limits: {
                name: string;
                unit:
                    | "other"
                    | "items"
                    | "bytes"
                    | "depth"
                    | "milliseconds"
                    | "characters"
                    | "instructions";
                value: number;
            }[];
            omitted_count: number
            | null;
            status: "unknown" | "unavailable" | "complete" | "partial";
            truncated: boolean;
        };
        file: JavaScriptArtifactFile;
        properties: Readonly<Record<string, unknown>>;
        range: JavaScriptSourceRange;
        source: {
            identity:
                | {
                    sha256: string;
                    stability: "global-exact";
                    strategy: "content-digest";
                }
                | {
                    original_source: string;
                    source_map_sha256: string;
                    source_sha256: string
                    | null;
                    stability: "source-map-exact";
                    strategy: "source-map-original";
                }
                | {
                    artifact_sha256: string;
                    path: string;
                    stability: "artifact-version";
                    strategy: "canonical-path";
                }
                | {
                    algorithm: string;
                    basis: (
                        | "imports"
                        | "exports"
                        | "syntax-tree"
                        | "control-flow"
                        | "literals"
                        | "api-usage"
                    )[];
                    fingerprint_sha256: string;
                    stability: "cross-version-inference";
                    strategy: "structural-fingerprint";
                }
                | {
                    artifact_sha256: string;
                    key: string;
                    namespace: string;
                    stability: "artifact-version";
                    strategy: "artifact-local-key";
                }
                | {
                    capture_sha256: string;
                    runtime_key: string;
                    stability: "capture-only";
                    strategy: "runtime-instance";
                }
                | {
                    observation_sha256: string;
                    scope: string;
                    stability: "observation-only";
                    strategy: "observation-fingerprint";
                };
            kind: | "unknown"
            | "target"
            | "native-addon"
            | "source-map"
            | "artifact"
            | "package"
            | "installer"
            | "asar-entry"
            | "electron-main"
            | "electron-preload"
            | "electron-renderer"
            | "electron-utility"
            | "javascript-asset"
            | "javascript-chunk"
            | "javascript-module"
            | "source-module"
            | "browser-window"
            | "frame"
            | "context-bridge-api"
            | "ipc-channel"
            | "ipc-handler"
            | "worker"
            | "service-worker"
            | "endpoint"
            | "storage"
            | "native-export"
            | "managed-assembly"
            | "managed-module"
            | "managed-type"
            | "managed-method"
            | "managed-field"
            | "managed-pinvoke-import"
            | "managed-native-implementation"
            | "runtime-script-instance";
            node_id: string;
            observations: {
                evidence: {
                    artifact: | { artifact_id: string; available: true; sha256: string }
                    | {
                        available: false;
                        detail: string;
                        reason:
                            | "unknown"
                            | "truncated"
                            | "unresolved"
                            | "not-applicable"
                            | "not-observed"
                            | "not-approved"
                            | "provider-unavailable";
                    };
                    authority: | "unknown"
                    | "controlled-replay"
                    | "historical-reference"
                    | "artifact-bytes"
                    | "ast-static-analysis"
                    | "static-relationship-inference"
                    | "passive-cdp-runtime"
                    | "cross-layer-reconciliation"
                    | "cross-version-comparison"
                    | "native-analysis-provider"
                    | "managed-static-analysis"
                    | "user-assertion";
                    confidence: "unknown"
                    | "exact"
                    | "low"
                    | "medium"
                    | "high";
                    coverage: {
                        limits: {
                            name: string;
                            unit:
                                | "other"
                                | "items"
                                | "bytes"
                                | "depth"
                                | "milliseconds"
                                | "characters"
                                | "instructions";
                            value: number;
                        }[];
                        omitted_count: number
                        | null;
                        status: "unknown" | "unavailable" | "complete" | "partial";
                        truncated: boolean;
                    };
                    evidence_ids: string[];
                    extractor: {
                        executable_sha256: string
                        | null;
                        name: string;
                        operation: string;
                        version: string;
                    };
                    limitations: string[];
                    location: | {
                        available: false;
                        detail: string;
                        reason: | "unknown"
                        | "truncated"
                        | "unresolved"
                        | "not-applicable"
                        | "not-observed"
                        | "not-approved"
                        | "provider-unavailable";
                    }
                    | {
                        available: true;
                        value: | {
                            end: { column: number; line: number };
                            kind: "source-range";
                            source: string;
                            start: { column: number; line: number };
                        }
                        | { end: number; kind: "file-offset-range"; start: number }
                        | { kind: "artifact-path"; path: string }
                        | { kind: "url"; url: string }
                        | {
                            capture_sha256: string;
                            frame_key: string | null;
                            kind: "runtime";
                            script_key: string | null;
                            target_key: string;
                        }
                        | { address: string; kind: "native-address"; symbol: string
                        | null }
                        | { export_path: string; kind: "package-export"; package_name: string };
                    };
                    state: "unknown"
                    | "observed"
                    | "inferred"
                    | "unavailable";
                };
                identifier_strategy: {
                    stability: "observation-exact";
                    strategy: "semantic-content-sha256";
                };
                label: string
                | null;
                observation_id: string;
                properties: Record<string, JSONType>;
            }[];
        };
        target: {
            identity: | {
                sha256: string;
                stability: "global-exact";
                strategy: "content-digest";
            }
            | {
                original_source: string;
                source_map_sha256: string;
                source_sha256: string
                | null;
                stability: "source-map-exact";
                strategy: "source-map-original";
            }
            | {
                artifact_sha256: string;
                path: string;
                stability: "artifact-version";
                strategy: "canonical-path";
            }
            | {
                algorithm: string;
                basis: (
                    | "imports"
                    | "exports"
                    | "syntax-tree"
                    | "control-flow"
                    | "literals"
                    | "api-usage"
                )[];
                fingerprint_sha256: string;
                stability: "cross-version-inference";
                strategy: "structural-fingerprint";
            }
            | {
                artifact_sha256: string;
                key: string;
                namespace: string;
                stability: "artifact-version";
                strategy: "artifact-local-key";
            }
            | {
                capture_sha256: string;
                runtime_key: string;
                stability: "capture-only";
                strategy: "runtime-instance";
            }
            | {
                observation_sha256: string;
                scope: string;
                stability: "observation-only";
                strategy: "observation-fingerprint";
            };
            kind: | "unknown"
            | "target"
            | "native-addon"
            | "source-map"
            | "artifact"
            | "package"
            | "installer"
            | "asar-entry"
            | "electron-main"
            | "electron-preload"
            | "electron-renderer"
            | "electron-utility"
            | "javascript-asset"
            | "javascript-chunk"
            | "javascript-module"
            | "source-module"
            | "browser-window"
            | "frame"
            | "context-bridge-api"
            | "ipc-channel"
            | "ipc-handler"
            | "worker"
            | "service-worker"
            | "endpoint"
            | "storage"
            | "native-export"
            | "managed-assembly"
            | "managed-module"
            | "managed-type"
            | "managed-method"
            | "managed-field"
            | "managed-pinvoke-import"
            | "managed-native-implementation"
            | "runtime-script-instance";
            node_id: string;
            observations: {
                evidence: {
                    artifact: | { artifact_id: string; available: true; sha256: string }
                    | {
                        available: false;
                        detail: string;
                        reason:
                            | "unknown"
                            | "truncated"
                            | "unresolved"
                            | "not-applicable"
                            | "not-observed"
                            | "not-approved"
                            | "provider-unavailable";
                    };
                    authority: | "unknown"
                    | "controlled-replay"
                    | "historical-reference"
                    | "artifact-bytes"
                    | "ast-static-analysis"
                    | "static-relationship-inference"
                    | "passive-cdp-runtime"
                    | "cross-layer-reconciliation"
                    | "cross-version-comparison"
                    | "native-analysis-provider"
                    | "managed-static-analysis"
                    | "user-assertion";
                    confidence: "unknown"
                    | "exact"
                    | "low"
                    | "medium"
                    | "high";
                    coverage: {
                        limits: {
                            name: string;
                            unit:
                                | "other"
                                | "items"
                                | "bytes"
                                | "depth"
                                | "milliseconds"
                                | "characters"
                                | "instructions";
                            value: number;
                        }[];
                        omitted_count: number
                        | null;
                        status: "unknown" | "unavailable" | "complete" | "partial";
                        truncated: boolean;
                    };
                    evidence_ids: string[];
                    extractor: {
                        executable_sha256: string
                        | null;
                        name: string;
                        operation: string;
                        version: string;
                    };
                    limitations: string[];
                    location: | {
                        available: false;
                        detail: string;
                        reason: | "unknown"
                        | "truncated"
                        | "unresolved"
                        | "not-applicable"
                        | "not-observed"
                        | "not-approved"
                        | "provider-unavailable";
                    }
                    | {
                        available: true;
                        value: | {
                            end: { column: number; line: number };
                            kind: "source-range";
                            source: string;
                            start: { column: number; line: number };
                        }
                        | { end: number; kind: "file-offset-range"; start: number }
                        | { kind: "artifact-path"; path: string }
                        | { kind: "url"; url: string }
                        | {
                            capture_sha256: string;
                            frame_key: string | null;
                            kind: "runtime";
                            script_key: string | null;
                            target_key: string;
                        }
                        | { address: string; kind: "native-address"; symbol: string
                        | null }
                        | { export_path: string; kind: "package-export"; package_name: string };
                    };
                    state: "unknown"
                    | "observed"
                    | "inferred"
                    | "unavailable";
                };
                identifier_strategy: {
                    stability: "observation-exact";
                    strategy: "semantic-content-sha256";
                };
                label: string
                | null;
                observation_id: string;
                properties: Record<string, JSONType>;
            }[];
        };
    }
    -
    +

    Hierarchy (View Summary)

    • AstEdgeInput diff --git a/docs/api/interfaces/application_JavaScriptArtifactGraphContext.InferenceEdgeInput.html b/docs/api/interfaces/application_JavaScriptArtifactGraphContext.InferenceEdgeInput.html index 594896631..26fd7aa72 100644 --- a/docs/api/interfaces/application_JavaScriptArtifactGraphContext.InferenceEdgeInput.html +++ b/docs/api/interfaces/application_JavaScriptArtifactGraphContext.InferenceEdgeInput.html @@ -15,7 +15,7 @@

      Inferred static relationship edge values.

    interface InferenceEdgeInput {
        coverage: {
            limits: {
                name: string;
                unit:
                    | "other"
                    | "items"
                    | "bytes"
                    | "depth"
                    | "milliseconds"
                    | "characters"
                    | "instructions";
                value: number;
            }[];
            omitted_count: number
            | null;
            status: "unknown" | "unavailable" | "complete" | "partial";
            truncated: boolean;
        };
        file: JavaScriptArtifactFile;
        properties: Readonly<Record<string, unknown>>;
        range: JavaScriptSourceRange;
        relation:
            | "loads"
            | "calls"
            | "imports"
            | "maps_to"
            | "exposes"
            | "persists_to";
        source: {
            identity: | {
                sha256: string;
                stability: "global-exact";
                strategy: "content-digest";
            }
            | {
                original_source: string;
                source_map_sha256: string;
                source_sha256: string
                | null;
                stability: "source-map-exact";
                strategy: "source-map-original";
            }
            | {
                artifact_sha256: string;
                path: string;
                stability: "artifact-version";
                strategy: "canonical-path";
            }
            | {
                algorithm: string;
                basis: (
                    | "imports"
                    | "exports"
                    | "syntax-tree"
                    | "control-flow"
                    | "literals"
                    | "api-usage"
                )[];
                fingerprint_sha256: string;
                stability: "cross-version-inference";
                strategy: "structural-fingerprint";
            }
            | {
                artifact_sha256: string;
                key: string;
                namespace: string;
                stability: "artifact-version";
                strategy: "artifact-local-key";
            }
            | {
                capture_sha256: string;
                runtime_key: string;
                stability: "capture-only";
                strategy: "runtime-instance";
            }
            | {
                observation_sha256: string;
                scope: string;
                stability: "observation-only";
                strategy: "observation-fingerprint";
            };
            kind: | "unknown"
            | "target"
            | "native-addon"
            | "source-map"
            | "artifact"
            | "package"
            | "installer"
            | "asar-entry"
            | "electron-main"
            | "electron-preload"
            | "electron-renderer"
            | "electron-utility"
            | "javascript-asset"
            | "javascript-chunk"
            | "javascript-module"
            | "source-module"
            | "browser-window"
            | "frame"
            | "context-bridge-api"
            | "ipc-channel"
            | "ipc-handler"
            | "worker"
            | "service-worker"
            | "endpoint"
            | "storage"
            | "native-export"
            | "managed-assembly"
            | "managed-module"
            | "managed-type"
            | "managed-method"
            | "managed-field"
            | "managed-pinvoke-import"
            | "managed-native-implementation"
            | "runtime-script-instance";
            node_id: string;
            observations: {
                evidence: {
                    artifact: | { artifact_id: string; available: true; sha256: string }
                    | {
                        available: false;
                        detail: string;
                        reason:
                            | "unknown"
                            | "truncated"
                            | "unresolved"
                            | "not-applicable"
                            | "not-observed"
                            | "not-approved"
                            | "provider-unavailable";
                    };
                    authority: | "unknown"
                    | "controlled-replay"
                    | "historical-reference"
                    | "artifact-bytes"
                    | "ast-static-analysis"
                    | "static-relationship-inference"
                    | "passive-cdp-runtime"
                    | "cross-layer-reconciliation"
                    | "cross-version-comparison"
                    | "native-analysis-provider"
                    | "managed-static-analysis"
                    | "user-assertion";
                    confidence: "unknown"
                    | "exact"
                    | "low"
                    | "medium"
                    | "high";
                    coverage: {
                        limits: {
                            name: string;
                            unit:
                                | "other"
                                | "items"
                                | "bytes"
                                | "depth"
                                | "milliseconds"
                                | "characters"
                                | "instructions";
                            value: number;
                        }[];
                        omitted_count: number
                        | null;
                        status: "unknown" | "unavailable" | "complete" | "partial";
                        truncated: boolean;
                    };
                    evidence_ids: string[];
                    extractor: {
                        executable_sha256: string
                        | null;
                        name: string;
                        operation: string;
                        version: string;
                    };
                    limitations: string[];
                    location: | {
                        available: false;
                        detail: string;
                        reason: | "unknown"
                        | "truncated"
                        | "unresolved"
                        | "not-applicable"
                        | "not-observed"
                        | "not-approved"
                        | "provider-unavailable";
                    }
                    | {
                        available: true;
                        value: | {
                            end: { column: number; line: number };
                            kind: "source-range";
                            source: string;
                            start: { column: number; line: number };
                        }
                        | { end: number; kind: "file-offset-range"; start: number }
                        | { kind: "artifact-path"; path: string }
                        | { kind: "url"; url: string }
                        | {
                            capture_sha256: string;
                            frame_key: string | null;
                            kind: "runtime";
                            script_key: string | null;
                            target_key: string;
                        }
                        | { address: string; kind: "native-address"; symbol: string
                        | null }
                        | { export_path: string; kind: "package-export"; package_name: string };
                    };
                    state: "unknown"
                    | "observed"
                    | "inferred"
                    | "unavailable";
                };
                identifier_strategy: {
                    stability: "observation-exact";
                    strategy: "semantic-content-sha256";
                };
                label: string
                | null;
                observation_id: string;
                properties: Record<string, JSONType>;
            }[];
        };
        target: {
            identity: | {
                sha256: string;
                stability: "global-exact";
                strategy: "content-digest";
            }
            | {
                original_source: string;
                source_map_sha256: string;
                source_sha256: string
                | null;
                stability: "source-map-exact";
                strategy: "source-map-original";
            }
            | {
                artifact_sha256: string;
                path: string;
                stability: "artifact-version";
                strategy: "canonical-path";
            }
            | {
                algorithm: string;
                basis: (
                    | "imports"
                    | "exports"
                    | "syntax-tree"
                    | "control-flow"
                    | "literals"
                    | "api-usage"
                )[];
                fingerprint_sha256: string;
                stability: "cross-version-inference";
                strategy: "structural-fingerprint";
            }
            | {
                artifact_sha256: string;
                key: string;
                namespace: string;
                stability: "artifact-version";
                strategy: "artifact-local-key";
            }
            | {
                capture_sha256: string;
                runtime_key: string;
                stability: "capture-only";
                strategy: "runtime-instance";
            }
            | {
                observation_sha256: string;
                scope: string;
                stability: "observation-only";
                strategy: "observation-fingerprint";
            };
            kind: | "unknown"
            | "target"
            | "native-addon"
            | "source-map"
            | "artifact"
            | "package"
            | "installer"
            | "asar-entry"
            | "electron-main"
            | "electron-preload"
            | "electron-renderer"
            | "electron-utility"
            | "javascript-asset"
            | "javascript-chunk"
            | "javascript-module"
            | "source-module"
            | "browser-window"
            | "frame"
            | "context-bridge-api"
            | "ipc-channel"
            | "ipc-handler"
            | "worker"
            | "service-worker"
            | "endpoint"
            | "storage"
            | "native-export"
            | "managed-assembly"
            | "managed-module"
            | "managed-type"
            | "managed-method"
            | "managed-field"
            | "managed-pinvoke-import"
            | "managed-native-implementation"
            | "runtime-script-instance";
            node_id: string;
            observations: {
                evidence: {
                    artifact: | { artifact_id: string; available: true; sha256: string }
                    | {
                        available: false;
                        detail: string;
                        reason:
                            | "unknown"
                            | "truncated"
                            | "unresolved"
                            | "not-applicable"
                            | "not-observed"
                            | "not-approved"
                            | "provider-unavailable";
                    };
                    authority: | "unknown"
                    | "controlled-replay"
                    | "historical-reference"
                    | "artifact-bytes"
                    | "ast-static-analysis"
                    | "static-relationship-inference"
                    | "passive-cdp-runtime"
                    | "cross-layer-reconciliation"
                    | "cross-version-comparison"
                    | "native-analysis-provider"
                    | "managed-static-analysis"
                    | "user-assertion";
                    confidence: "unknown"
                    | "exact"
                    | "low"
                    | "medium"
                    | "high";
                    coverage: {
                        limits: {
                            name: string;
                            unit:
                                | "other"
                                | "items"
                                | "bytes"
                                | "depth"
                                | "milliseconds"
                                | "characters"
                                | "instructions";
                            value: number;
                        }[];
                        omitted_count: number
                        | null;
                        status: "unknown" | "unavailable" | "complete" | "partial";
                        truncated: boolean;
                    };
                    evidence_ids: string[];
                    extractor: {
                        executable_sha256: string
                        | null;
                        name: string;
                        operation: string;
                        version: string;
                    };
                    limitations: string[];
                    location: | {
                        available: false;
                        detail: string;
                        reason: | "unknown"
                        | "truncated"
                        | "unresolved"
                        | "not-applicable"
                        | "not-observed"
                        | "not-approved"
                        | "provider-unavailable";
                    }
                    | {
                        available: true;
                        value: | {
                            end: { column: number; line: number };
                            kind: "source-range";
                            source: string;
                            start: { column: number; line: number };
                        }
                        | { end: number; kind: "file-offset-range"; start: number }
                        | { kind: "artifact-path"; path: string }
                        | { kind: "url"; url: string }
                        | {
                            capture_sha256: string;
                            frame_key: string | null;
                            kind: "runtime";
                            script_key: string | null;
                            target_key: string;
                        }
                        | { address: string; kind: "native-address"; symbol: string
                        | null }
                        | { export_path: string; kind: "package-export"; package_name: string };
                    };
                    state: "unknown"
                    | "observed"
                    | "inferred"
                    | "unavailable";
                };
                identifier_strategy: {
                    stability: "observation-exact";
                    strategy: "semantic-content-sha256";
                };
                label: string
                | null;
                observation_id: string;
                properties: Record<string, JSONType>;
            }[];
        };
    }
    -
    +

    Hierarchy (View Summary)

    • AstEdgeInput diff --git a/docs/api/interfaces/domain_managedMemberComparison.ManagedMemberComparisonSide.html b/docs/api/interfaces/domain_managedMemberComparison.ManagedMemberComparisonSide.html index c51ff0488..510ce6b20 100644 --- a/docs/api/interfaces/domain_managedMemberComparison.ManagedMemberComparisonSide.html +++ b/docs/api/interfaces/domain_managedMemberComparison.ManagedMemberComparisonSide.html @@ -14,7 +14,7 @@

      One authenticated side of a managed member comparison.

      -
      interface ManagedMemberComparisonSide {
          evidenceId: string;
          result: {
              artifact: {
                  byte_length: number;
                  format: "pe";
                  path: string;
                  sha256: string;
              };
              call_edges: {
                  complete: boolean;
                  dropped: number;
                  items: {
                      caller: string
                      | null;
                      caller_token: string;
                      opcode: string;
                      target_kind: "unknown" | "method-def" | "member-ref" | "method-spec";
                      target_name: string | null;
                      target_token: string;
                  }[];
                  limit: number;
                  offset: number;
                  returned: number;
                  total: number;
              };
              coverage: {
                  issues: {
                      code: | "invalid-cli-header"
                      | "invalid-directory"
                      | "invalid-metadata-root"
                      | "invalid-stream"
                      | "missing-stream"
                      | "invalid-tables"
                      | "invalid-row"
                      | "invalid-heap-index"
                      | "invalid-string"
                      | "invalid-blob"
                      | "invalid-guid"
                      | "invalid-resource"
                      | "limit-exceeded";
                      detail: string;
                      offset: number
                      | null;
                      scope: string;
                  }[];
                  state: "unavailable"
                  | "complete"
                  | "partial";
              };
              field_accesses: {
                  complete: boolean;
                  dropped: number;
                  items: {
                      field_name: string
                      | null;
                      field_token: string;
                      method: string | null;
                      method_token: string;
                      opcode: string;
                  }[];
                  limit: number;
                  offset: number;
                  returned: number;
                  total: number;
              };
              fields: {
                  complete: boolean;
                  dropped: number;
                  items: {
                      declaring_type: string
                      | null;
                      declaring_type_token: string | null;
                      flags: number;
                      name: string;
                      row_offset: number;
                      signature: {
                          calling_convention: string | null;
                          field_type: string | null;
                          generic_parameter_count: number | null;
                          issue: string | null;
                          kind: "unknown" | "method" | "field";
                          parameter_count: number | null;
                          parameter_types: string[];
                          parse_status: "decoded" | "partial" | "unsupported" | "malformed";
                          raw_length: number;
                          raw_sha256: string;
                          return_type: string | null;
                      };
                      token: string;
                  }[];
                  limit: number;
                  offset: number;
                  returned: number;
                  total: number;
              };
              identity_scope: {
                  requires_artifact_sha256: string;
                  requires_mvid: string
                  | null;
                  token_identity: "build-local";
              };
              limitations: string[];
              member_refs: {
                  complete: boolean;
                  dropped: number;
                  items: {
                      name: string;
                      parent_token: string
                      | null;
                      row_offset: number;
                      signature: {
                          calling_convention: string | null;
                          field_type: string | null;
                          generic_parameter_count: number | null;
                          issue: string | null;
                          kind: "unknown" | "method" | "field";
                          parameter_count: number | null;
                          parameter_types: string[];
                          parse_status: "decoded" | "partial" | "unsupported" | "malformed";
                          raw_length: number;
                          raw_sha256: string;
                          return_type: string | null;
                      };
                      token: string;
                  }[];
                  limit: number;
                  offset: number;
                  returned: number;
                  total: number;
              };
              metadata: {
                  status: "complete"
                  | "partial"
                  | "malformed"
                  | "absent";
                  table_row_counts: Record<string, number>;
                  version: string | null;
              };
              methods: {
                  complete: boolean;
                  dropped: number;
                  items: {
                      body: {
                          anchors: {
                              il_offset: number;
                              opcode: string;
                              operand: string
                              | null;
                              operand_kind:
                                  | "string"
                                  | "unknown"
                                  | "type"
                                  | "method"
                                  | "field"
                                  | "none"
                                  | "signature"
                                  | "token"
                                  | "branch"
                                  | "constant"
                                  | "switch"
                                  | "variable";
                          }[];
                          decoded_instruction_count: number;
                          exception_regions: {
                              class_token: string
                              | null;
                              filter_offset: number | null;
                              flags: number;
                              handler_length: number;
                              handler_offset: number;
                              try_length: number;
                              try_offset: number;
                          }[];
                          file_offset: number
                          | null;
                          header_format: "unknown" | "none" | "tiny" | "fat";
                          il_sha256: string | null;
                          il_size: number;
                          init_locals: boolean | null;
                          instruction_count: number;
                          issue: string | null;
                          local_var_sig_token: string | null;
                          max_stack: number | null;
                          normalized_il_sha256: string | null;
                          opcode_counts: Record<string, number>;
                          rva: number;
                          status: "too-large" | "malformed" | "present" | "absent";
                          truncated_instructions: number;
                      };
                      declaring_type: string
                      | null;
                      declaring_type_token: string | null;
                      flags: number;
                      impl_flags: number;
                      name: string;
                      row_offset: number;
                      rva: number;
                      signature: {
                          calling_convention: string | null;
                          field_type: string | null;
                          generic_parameter_count: number | null;
                          issue: string | null;
                          kind: "unknown" | "method" | "field";
                          parameter_count: number | null;
                          parameter_types: string[];
                          parse_status: "decoded" | "partial" | "unsupported" | "malformed";
                          raw_length: number;
                          raw_sha256: string;
                          return_type: string | null;
                      };
                      token: string;
                  }[];
                  limit: number;
                  offset: number;
                  returned: number;
                  total: number;
              };
              module: | {
                  enc_base_id: string
                  | null;
                  enc_id: string | null;
                  generation: number;
                  mvid: string | null;
                  name: string;
                  row_offset: number;
                  token: string;
              }
              | null;
              schema_version: 1;
              types: {
                  complete: boolean;
                  dropped: number;
                  items: {
                      extends_token: string
                      | null;
                      field_list: {
                          count: number;
                          first_row: number | null;
                          last_row: number | null;
                      };
                      flags: number;
                      full_name: string;
                      method_list: {
                          count: number;
                          first_row: number
                          | null;
                          last_row: number | null;
                      };
                      name: string;
                      namespace: string;
                      row_offset: number;
                      token: string;
                  }[];
                  limit: number;
                  offset: number;
                  returned: number;
                  total: number;
              };
          };
      }
    -
    result: {
        artifact: {
            byte_length: number;
            format: "pe";
            path: string;
            sha256: string;
        };
        call_edges: {
            complete: boolean;
            dropped: number;
            items: {
                caller: string
                | null;
                caller_token: string;
                opcode: string;
                target_kind: "unknown" | "method-def" | "member-ref" | "method-spec";
                target_name: string | null;
                target_token: string;
            }[];
            limit: number;
            offset: number;
            returned: number;
            total: number;
        };
        coverage: {
            issues: {
                code: | "invalid-cli-header"
                | "invalid-directory"
                | "invalid-metadata-root"
                | "invalid-stream"
                | "missing-stream"
                | "invalid-tables"
                | "invalid-row"
                | "invalid-heap-index"
                | "invalid-string"
                | "invalid-blob"
                | "invalid-guid"
                | "invalid-resource"
                | "limit-exceeded";
                detail: string;
                offset: number
                | null;
                scope: string;
            }[];
            state: "unavailable"
            | "complete"
            | "partial";
        };
        field_accesses: {
            complete: boolean;
            dropped: number;
            items: {
                field_name: string
                | null;
                field_token: string;
                method: string | null;
                method_token: string;
                opcode: string;
            }[];
            limit: number;
            offset: number;
            returned: number;
            total: number;
        };
        fields: {
            complete: boolean;
            dropped: number;
            items: {
                declaring_type: string
                | null;
                declaring_type_token: string | null;
                flags: number;
                name: string;
                row_offset: number;
                signature: {
                    calling_convention: string | null;
                    field_type: string | null;
                    generic_parameter_count: number | null;
                    issue: string | null;
                    kind: "unknown" | "method" | "field";
                    parameter_count: number | null;
                    parameter_types: string[];
                    parse_status: "decoded" | "partial" | "unsupported" | "malformed";
                    raw_length: number;
                    raw_sha256: string;
                    return_type: string | null;
                };
                token: string;
            }[];
            limit: number;
            offset: number;
            returned: number;
            total: number;
        };
        identity_scope: {
            requires_artifact_sha256: string;
            requires_mvid: string
            | null;
            token_identity: "build-local";
        };
        limitations: string[];
        member_refs: {
            complete: boolean;
            dropped: number;
            items: {
                name: string;
                parent_token: string
                | null;
                row_offset: number;
                signature: {
                    calling_convention: string | null;
                    field_type: string | null;
                    generic_parameter_count: number | null;
                    issue: string | null;
                    kind: "unknown" | "method" | "field";
                    parameter_count: number | null;
                    parameter_types: string[];
                    parse_status: "decoded" | "partial" | "unsupported" | "malformed";
                    raw_length: number;
                    raw_sha256: string;
                    return_type: string | null;
                };
                token: string;
            }[];
            limit: number;
            offset: number;
            returned: number;
            total: number;
        };
        metadata: {
            status: "complete"
            | "partial"
            | "malformed"
            | "absent";
            table_row_counts: Record<string, number>;
            version: string | null;
        };
        methods: {
            complete: boolean;
            dropped: number;
            items: {
                body: {
                    anchors: {
                        il_offset: number;
                        opcode: string;
                        operand: string
                        | null;
                        operand_kind:
                            | "string"
                            | "unknown"
                            | "type"
                            | "method"
                            | "field"
                            | "none"
                            | "signature"
                            | "token"
                            | "branch"
                            | "constant"
                            | "switch"
                            | "variable";
                    }[];
                    decoded_instruction_count: number;
                    exception_regions: {
                        class_token: string
                        | null;
                        filter_offset: number | null;
                        flags: number;
                        handler_length: number;
                        handler_offset: number;
                        try_length: number;
                        try_offset: number;
                    }[];
                    file_offset: number
                    | null;
                    header_format: "unknown" | "none" | "tiny" | "fat";
                    il_sha256: string | null;
                    il_size: number;
                    init_locals: boolean | null;
                    instruction_count: number;
                    issue: string | null;
                    local_var_sig_token: string | null;
                    max_stack: number | null;
                    normalized_il_sha256: string | null;
                    opcode_counts: Record<string, number>;
                    rva: number;
                    status: "too-large" | "malformed" | "present" | "absent";
                    truncated_instructions: number;
                };
                declaring_type: string
                | null;
                declaring_type_token: string | null;
                flags: number;
                impl_flags: number;
                name: string;
                row_offset: number;
                rva: number;
                signature: {
                    calling_convention: string | null;
                    field_type: string | null;
                    generic_parameter_count: number | null;
                    issue: string | null;
                    kind: "unknown" | "method" | "field";
                    parameter_count: number | null;
                    parameter_types: string[];
                    parse_status: "decoded" | "partial" | "unsupported" | "malformed";
                    raw_length: number;
                    raw_sha256: string;
                    return_type: string | null;
                };
                token: string;
            }[];
            limit: number;
            offset: number;
            returned: number;
            total: number;
        };
        module: | {
            enc_base_id: string
            | null;
            enc_id: string | null;
            generation: number;
            mvid: string | null;
            name: string;
            row_offset: number;
            token: string;
        }
        | null;
        schema_version: 1;
        types: {
            complete: boolean;
            dropped: number;
            items: {
                extends_token: string
                | null;
                field_list: {
                    count: number;
                    first_row: number | null;
                    last_row: number | null;
                };
                flags: number;
                full_name: string;
                method_list: {
                    count: number;
                    first_row: number
                    | null;
                    last_row: number | null;
                };
                name: string;
                namespace: string;
                row_offset: number;
                token: string;
            }[];
            limit: number;
            offset: number;
            returned: number;
            total: number;
        };
    }
    diff --git a/docs/api/interfaces/domain_permissionPolicy.PermissionGrant.html b/docs/api/interfaces/domain_permissionPolicy.PermissionGrant.html index ebe45338d..1ea1ca1d7 100644 --- a/docs/api/interfaces/domain_permissionPolicy.PermissionGrant.html +++ b/docs/api/interfaces/domain_permissionPolicy.PermissionGrant.html @@ -15,7 +15,7 @@

    Authority issued beneath the administrator ceiling.

    interface PermissionGrant {
        capability: PermissionCapability;
        environment_names: readonly string[];
        executables: readonly string[];
        expires_at: string | null;
        grant_id: string;
        lifetime: "once" | "session" | "project" | "administrator";
        mount: boolean;
        network: PermissionNetwork;
        operation_identity: string | null;
        origins?: readonly string[];
        roots: readonly string[];
    }
    -
    +

    Hierarchy (View Summary)

    • PermissionScope diff --git a/docs/api/interfaces/domain_permissionPolicy.PermissionRequest.html b/docs/api/interfaces/domain_permissionPolicy.PermissionRequest.html index f2bd3215d..1500aba2c 100644 --- a/docs/api/interfaces/domain_permissionPolicy.PermissionRequest.html +++ b/docs/api/interfaces/domain_permissionPolicy.PermissionRequest.html @@ -15,7 +15,7 @@

      A request identity associates one-shot grants with exactly one operation.

    interface PermissionRequest {
        capability: PermissionCapability;
        environment_names: readonly string[];
        executables: readonly string[];
        mount: boolean;
        network: PermissionNetwork;
        operation_identity: string;
        origins?: readonly string[];
        roots: readonly string[];
    }
    -
    +

    Hierarchy (View Summary)

    • PermissionScope diff --git a/docs/api/interfaces/domain_permissionPolicy.PermissionScope.html b/docs/api/interfaces/domain_permissionPolicy.PermissionScope.html index 88c47fc2a..e26ab0f57 100644 --- a/docs/api/interfaces/domain_permissionPolicy.PermissionScope.html +++ b/docs/api/interfaces/domain_permissionPolicy.PermissionScope.html @@ -15,7 +15,7 @@

      Exact normalized scope requested by one local operation.

    interface PermissionScope {
        capability: PermissionCapability;
        environment_names: readonly string[];
        executables: readonly string[];
        mount: boolean;
        network: PermissionNetwork;
        origins?: readonly string[];
        roots: readonly string[];
    }
    -
    +

    Hierarchy (View Summary)

    • PermissionScope diff --git a/docs/api/interfaces/domain_webInventory.StableWebResource.html b/docs/api/interfaces/domain_webInventory.StableWebResource.html index 22b9b44b4..4e6199460 100644 --- a/docs/api/interfaces/domain_webInventory.StableWebResource.html +++ b/docs/api/interfaces/domain_webInventory.StableWebResource.html @@ -12,7 +12,7 @@
    • StableWebResource

    Interface StableWebResource

    interface StableWebResource {
        content_size: number | null;
        mime_type: string;
        origin: string | null;
        resource_key: string;
        type: string;
        url: string;
    }
    -
    +

    Hierarchy (View Summary)

    • WebInventoryResourceInput diff --git a/docs/api/interfaces/domain_webInventory.WebInventoryResourceInput.html b/docs/api/interfaces/domain_webInventory.WebInventoryResourceInput.html index 307b72718..d28693eef 100644 --- a/docs/api/interfaces/domain_webInventory.WebInventoryResourceInput.html +++ b/docs/api/interfaces/domain_webInventory.WebInventoryResourceInput.html @@ -12,7 +12,7 @@
    • WebInventoryResourceInput

    Interface WebInventoryResourceInput

    interface WebInventoryResourceInput {
        content_size: number | null;
        mime_type: string;
        origin: string | null;
        type: string;
        url: string;
    }
    -
    +

    Hierarchy (View Summary)

    • WebInventoryResourceInput diff --git a/docs/api/interfaces/ghidra_GhidraLauncher.GhidraLaunch.html b/docs/api/interfaces/ghidra_GhidraLauncher.GhidraLaunch.html index f5f71df80..621c5a134 100644 --- a/docs/api/interfaces/ghidra_GhidraLauncher.GhidraLaunch.html +++ b/docs/api/interfaces/ghidra_GhidraLauncher.GhidraLaunch.html @@ -15,7 +15,7 @@

      Process plus private log coordinates returned by a Ghidra launcher.

    interface GhidraLaunch {
        cleanup?: () => Promise<ProcessCleanupResult>;
        ghidraLogPath: string;
        ownsProcessLifetime: boolean;
        process: ChildProcess;
        projectRoot: string;
        scriptLogPath: string;
    }
    -
    +

    Hierarchy (View Summary)

    • ProviderProcessLaunch diff --git a/docs/api/interfaces/ghidra_GhidraSessionError.GhidraSessionErrorOptions.html b/docs/api/interfaces/ghidra_GhidraSessionError.GhidraSessionErrorOptions.html index fdab611b1..a5eacdfe2 100644 --- a/docs/api/interfaces/ghidra_GhidraSessionError.GhidraSessionErrorOptions.html +++ b/docs/api/interfaces/ghidra_GhidraSessionError.GhidraSessionErrorOptions.html @@ -15,7 +15,7 @@

      Additional structured context for a Ghidra session failure.

    interface GhidraSessionErrorOptions {
        remoteCode?: string;
        timeoutMs?: number;
    }
    -
    +

    Hierarchy

    • ErrorOptions diff --git a/docs/api/interfaces/hopper_BridgeLauncher.BridgeLaunch.html b/docs/api/interfaces/hopper_BridgeLauncher.BridgeLaunch.html index 4e3937046..b156e5111 100644 --- a/docs/api/interfaces/hopper_BridgeLauncher.BridgeLaunch.html +++ b/docs/api/interfaces/hopper_BridgeLauncher.BridgeLaunch.html @@ -15,7 +15,7 @@

      Process handle returned by a bridge launcher.

    interface BridgeLaunch {
        cleanup?: () => Promise<ProcessCleanupResult>;
        ownsProcessLifetime: boolean;
        process: ChildProcess;
        shutdownByCleanup?: boolean;
    }
    -
    +

    Hierarchy (View Summary)

    • ProviderProcessLaunch diff --git a/docs/api/interfaces/process_ProviderProcess.ProviderProcessLaunch.html b/docs/api/interfaces/process_ProviderProcess.ProviderProcessLaunch.html index 72517c3ec..fa860359f 100644 --- a/docs/api/interfaces/process_ProviderProcess.ProviderProcessLaunch.html +++ b/docs/api/interfaces/process_ProviderProcess.ProviderProcessLaunch.html @@ -15,7 +15,7 @@

      Process handle returned by a provider-specific launcher.

    interface ProviderProcessLaunch {
        cleanup?: () => Promise<ProcessCleanupResult>;
        ownsProcessLifetime: boolean;
        process: ChildProcess;
    }
    -
    +

    Hierarchy (View Summary)

    • ProviderProcessLaunch diff --git a/docs/api/types/domain_managedRuntimeCorrelation.ManagedRuntimeCorrelationInput.html b/docs/api/types/domain_managedRuntimeCorrelation.ManagedRuntimeCorrelationInput.html index ddb3547b8..6e47416db 100644 --- a/docs/api/types/domain_managedRuntimeCorrelation.ManagedRuntimeCorrelationInput.html +++ b/docs/api/types/domain_managedRuntimeCorrelation.ManagedRuntimeCorrelationInput.html @@ -13,7 +13,7 @@

      Type Alias ManagedRuntimeCorrelationInput

      ManagedRuntimeCorrelationInput: z.infer<
          typeof managedRuntimeCorrelationInputSchema,
      >
      +
    • Defined in src/domain/managedRuntimeCorrelation.ts:117
    diff --git a/docs/api/types/domain_managedRuntimeCorrelation.ManagedRuntimeCorrelationResult.html b/docs/api/types/domain_managedRuntimeCorrelation.ManagedRuntimeCorrelationResult.html index 573c4480a..d2e081b95 100644 --- a/docs/api/types/domain_managedRuntimeCorrelation.ManagedRuntimeCorrelationResult.html +++ b/docs/api/types/domain_managedRuntimeCorrelation.ManagedRuntimeCorrelationResult.html @@ -13,7 +13,7 @@

    Type Alias ManagedRuntimeCorrelationResult

    ManagedRuntimeCorrelationResult: z.infer<
        typeof managedRuntimeCorrelationResultSchema,
    >
    +
  • Defined in src/domain/managedRuntimeCorrelation.ts:120
    • diff --git a/docs/api/variables/domain_managedArtifact.managedMemberInspectionSchema.html b/docs/api/variables/domain_managedArtifact.managedMemberInspectionSchema.html index fe3085ce4..12a195789 100644 --- a/docs/api/variables/domain_managedArtifact.managedMemberInspectionSchema.html +++ b/docs/api/variables/domain_managedArtifact.managedMemberInspectionSchema.html @@ -11,7 +11,7 @@
  • domain/managedArtifact
  • managedMemberInspectionSchema

    • Variable managedMemberInspectionSchemaConst

    -
    managedMemberInspectionSchema: ZodObject<
        {
            artifact: ZodObject<
                {
                    byte_length: ZodNumber;
                    format: ZodLiteral<"pe">;
                    path: ZodString;
                    sha256: ZodString;
                },
                $strip,
            >;
            call_edges: ZodObject<
                {
                    complete: ZodBoolean;
                    dropped: ZodNumber;
                    items: ZodArray<
                        ZodObject<
                            {
                                caller: ZodNullable<ZodString>;
                                caller_token: ZodString;
                                opcode: ZodString;
                                target_kind: ZodEnum<
                                    {
                                        "member-ref": "member-ref";
                                        "method-def": "method-def";
                                        "method-spec": "method-spec";
                                        unknown: "unknown";
                                    },
                                >;
                                target_name: ZodNullable<ZodString>;
                                target_token: ZodString;
                            },
                            $strip,
                        >,
                    >;
                    limit: ZodNumber;
                    offset: ZodNumber;
                    returned: ZodNumber;
                    total: ZodNumber;
                },
                $strip,
            >;
            coverage: ZodObject<
                {
                    issues: ZodArray<
                        ZodObject<
                            {
                                code: ZodEnum<
                                    {
                                        "invalid-blob": "invalid-blob";
                                        "invalid-cli-header": "invalid-cli-header";
                                        "invalid-directory": "invalid-directory";
                                        "invalid-guid": "invalid-guid";
                                        "invalid-heap-index": "invalid-heap-index";
                                        "invalid-metadata-root": "invalid-metadata-root";
                                        "invalid-resource": "invalid-resource";
                                        "invalid-row": "invalid-row";
                                        "invalid-stream": "invalid-stream";
                                        "invalid-string": "invalid-string";
                                        "invalid-tables": "invalid-tables";
                                        "limit-exceeded": "limit-exceeded";
                                        "missing-stream": "missing-stream";
                                    },
                                >;
                                detail: ZodString;
                                offset: ZodNullable<ZodNumber>;
                                scope: ZodString;
                            },
                            $strip,
                        >,
                    >;
                    state: ZodEnum<
                        {
                            complete: "complete";
                            partial: "partial";
                            unavailable: "unavailable";
                        },
                    >;
                },
                $strip,
            >;
            field_accesses: ZodObject<
                {
                    complete: ZodBoolean;
                    dropped: ZodNumber;
                    items: ZodArray<
                        ZodObject<
                            {
                                field_name: ZodNullable<ZodString>;
                                field_token: ZodString;
                                method: ZodNullable<ZodString>;
                                method_token: ZodString;
                                opcode: ZodString;
                            },
                            $strip,
                        >,
                    >;
                    limit: ZodNumber;
                    offset: ZodNumber;
                    returned: ZodNumber;
                    total: ZodNumber;
                },
                $strip,
            >;
            fields: ZodObject<
                {
                    complete: ZodBoolean;
                    dropped: ZodNumber;
                    items: ZodArray<
                        ZodObject<
                            {
                                declaring_type: ZodNullable<ZodString>;
                                declaring_type_token: ZodNullable<ZodString>;
                                flags: ZodNumber;
                                name: ZodString;
                                row_offset: ZodNumber;
                                signature: ZodObject<
                                    {
                                        calling_convention: ZodNullable<ZodString>;
                                        field_type: ZodNullable<ZodString>;
                                        generic_parameter_count: ZodNullable<ZodNumber>;
                                        issue: ZodNullable<ZodString>;
                                        kind: ZodEnum<{ field: ...; method: ...; unknown: ... }>;
                                        parameter_count: ZodNullable<ZodNumber>;
                                        parameter_types: ZodArray<ZodString>;
                                        parse_status: ZodEnum<
                                            {
                                                decoded: ...;
                                                malformed: ...;
                                                partial: ...;
                                                unsupported: ...;
                                            },
                                        >;
                                        raw_length: ZodNumber;
                                        raw_sha256: ZodString;
                                        return_type: ZodNullable<ZodString>;
                                    },
                                    $strip,
                                >;
                                token: ZodString;
                            },
                            $strip,
                        >,
                    >;
                    limit: ZodNumber;
                    offset: ZodNumber;
                    returned: ZodNumber;
                    total: ZodNumber;
                },
                $strip,
            >;
            identity_scope: ZodObject<
                {
                    requires_artifact_sha256: ZodString;
                    requires_mvid: ZodNullable<ZodString>;
                    token_identity: ZodLiteral<"build-local">;
                },
                $strip,
            >;
            limitations: ZodArray<ZodString>;
            member_refs: ZodObject<
                {
                    complete: ZodBoolean;
                    dropped: ZodNumber;
                    items: ZodArray<
                        ZodObject<
                            {
                                name: ZodString;
                                parent_token: ZodNullable<ZodString>;
                                row_offset: ZodNumber;
                                signature: ZodObject<
                                    {
                                        calling_convention: ZodNullable<ZodString>;
                                        field_type: ZodNullable<ZodString>;
                                        generic_parameter_count: ZodNullable<ZodNumber>;
                                        issue: ZodNullable<ZodString>;
                                        kind: ZodEnum<{ field: ...; method: ...; unknown: ... }>;
                                        parameter_count: ZodNullable<ZodNumber>;
                                        parameter_types: ZodArray<ZodString>;
                                        parse_status: ZodEnum<
                                            {
                                                decoded: ...;
                                                malformed: ...;
                                                partial: ...;
                                                unsupported: ...;
                                            },
                                        >;
                                        raw_length: ZodNumber;
                                        raw_sha256: ZodString;
                                        return_type: ZodNullable<ZodString>;
                                    },
                                    $strip,
                                >;
                                token: ZodString;
                            },
                            $strip,
                        >,
                    >;
                    limit: ZodNumber;
                    offset: ZodNumber;
                    returned: ZodNumber;
                    total: ZodNumber;
                },
                $strip,
            >;
            metadata: ZodObject<
                {
                    status: ZodEnum<
                        {
                            absent: "absent";
                            complete: "complete";
                            malformed: "malformed";
                            partial: "partial";
                        },
                    >;
                    table_row_counts: ZodRecord<ZodString, ZodNumber>;
                    version: ZodNullable<ZodString>;
                },
                $strip,
            >;
            methods: ZodObject<
                {
                    complete: ZodBoolean;
                    dropped: ZodNumber;
                    items: ZodArray<
                        ZodObject<
                            {
                                body: ZodObject<
                                    {
                                        anchors: ZodArray<ZodObject<(...), (...)>>;
                                        decoded_instruction_count: ZodNumber;
                                        exception_regions: ZodArray<ZodObject<(...), (...)>>;
                                        file_offset: ZodNullable<ZodNumber>;
                                        header_format: ZodEnum<
                                            { fat: ...; none: ...; tiny: ...; unknown: ... },
                                        >;
                                        il_sha256: ZodNullable<ZodString>;
                                        il_size: ZodNumber;
                                        init_locals: ZodNullable<ZodBoolean>;
                                        instruction_count: ZodNumber;
                                        issue: ZodNullable<ZodString>;
                                        local_var_sig_token: ZodNullable<ZodString>;
                                        max_stack: ZodNullable<ZodNumber>;
                                        normalized_il_sha256: ZodNullable<ZodString>;
                                        opcode_counts: ZodRecord<ZodString, ZodNumber>;
                                        rva: ZodNumber;
                                        status: ZodEnum<
                                            { absent: ...; malformed: ...; present: ...; "too-large": ... },
                                        >;
                                        truncated_instructions: ZodNumber;
                                    },
                                    $strip,
                                >;
                                declaring_type: ZodNullable<ZodString>;
                                declaring_type_token: ZodNullable<ZodString>;
                                flags: ZodNumber;
                                impl_flags: ZodNumber;
                                name: ZodString;
                                row_offset: ZodNumber;
                                rva: ZodNumber;
                                signature: ZodObject<
                                    {
                                        calling_convention: ZodNullable<ZodString>;
                                        field_type: ZodNullable<ZodString>;
                                        generic_parameter_count: ZodNullable<ZodNumber>;
                                        issue: ZodNullable<ZodString>;
                                        kind: ZodEnum<{ field: ...; method: ...; unknown: ... }>;
                                        parameter_count: ZodNullable<ZodNumber>;
                                        parameter_types: ZodArray<ZodString>;
                                        parse_status: ZodEnum<
                                            {
                                                decoded: ...;
                                                malformed: ...;
                                                partial: ...;
                                                unsupported: ...;
                                            },
                                        >;
                                        raw_length: ZodNumber;
                                        raw_sha256: ZodString;
                                        return_type: ZodNullable<ZodString>;
                                    },
                                    $strip,
                                >;
                                token: ZodString;
                            },
                            $strip,
                        >,
                    >;
                    limit: ZodNumber;
                    offset: ZodNumber;
                    returned: ZodNumber;
                    total: ZodNumber;
                },
                $strip,
            >;
            module: ZodNullable<
                ZodObject<
                    {
                        enc_base_id: ZodNullable<ZodString>;
                        enc_id: ZodNullable<ZodString>;
                        generation: ZodNumber;
                        mvid: ZodNullable<ZodString>;
                        name: ZodString;
                        row_offset: ZodNumber;
                        token: ZodString;
                    },
                    $strip,
                >,
            >;
            schema_version: ZodLiteral<1>;
            types: ZodObject<
                {
                    complete: ZodBoolean;
                    dropped: ZodNumber;
                    items: ZodArray<
                        ZodObject<
                            {
                                extends_token: ZodNullable<ZodString>;
                                field_list: ZodObject<
                                    {
                                        count: ZodNumber;
                                        first_row: ZodNullable<ZodNumber>;
                                        last_row: ZodNullable<ZodNumber>;
                                    },
                                    $strip,
                                >;
                                flags: ZodNumber;
                                full_name: ZodString;
                                method_list: ZodObject<
                                    {
                                        count: ZodNumber;
                                        first_row: ZodNullable<ZodNumber>;
                                        last_row: ZodNullable<ZodNumber>;
                                    },
                                    $strip,
                                >;
                                name: ZodString;
                                namespace: ZodString;
                                row_offset: ZodNumber;
                                token: ZodString;
                            },
                            $strip,
                        >,
                    >;
                    limit: ZodNumber;
                    offset: ZodNumber;
                    returned: ZodNumber;
                    total: ZodNumber;
                },
                $strip,
            >;
        },
        $strip,
    > = ...
    +
    managedMemberInspectionSchema: ZodObject<
        {
            artifact: ZodObject<
                {
                    byte_length: ZodNumber;
                    format: ZodLiteral<"pe">;
                    path: ZodString;
                    sha256: ZodString;
                },
                $strip,
            >;
            call_edges: ZodObject<
                {
                    complete: ZodBoolean;
                    dropped: ZodNumber;
                    items: ZodArray<
                        ZodObject<
                            {
                                caller: ZodNullable<ZodString>;
                                caller_token: ZodString;
                                opcode: ZodString;
                                target_kind: ZodEnum<
                                    {
                                        "member-ref": "member-ref";
                                        "method-def": "method-def";
                                        "method-spec": "method-spec";
                                        unknown: "unknown";
                                    },
                                >;
                                target_name: ZodNullable<ZodString>;
                                target_token: ZodString;
                            },
                            $strip,
                        >,
                    >;
                    limit: ZodNumber;
                    offset: ZodNumber;
                    returned: ZodNumber;
                    total: ZodNumber;
                },
                $strip,
            >;
            coverage: ZodObject<
                {
                    issues: ZodArray<
                        ZodObject<
                            {
                                code: ZodEnum<
                                    {
                                        "invalid-blob": "invalid-blob";
                                        "invalid-cli-header": "invalid-cli-header";
                                        "invalid-directory": "invalid-directory";
                                        "invalid-guid": "invalid-guid";
                                        "invalid-heap-index": "invalid-heap-index";
                                        "invalid-metadata-root": "invalid-metadata-root";
                                        "invalid-resource": "invalid-resource";
                                        "invalid-row": "invalid-row";
                                        "invalid-stream": "invalid-stream";
                                        "invalid-string": "invalid-string";
                                        "invalid-tables": "invalid-tables";
                                        "limit-exceeded": "limit-exceeded";
                                        "missing-stream": "missing-stream";
                                    },
                                >;
                                detail: ZodString;
                                offset: ZodNullable<ZodNumber>;
                                scope: ZodString;
                            },
                            $strip,
                        >,
                    >;
                    state: ZodEnum<
                        {
                            complete: "complete";
                            partial: "partial";
                            unavailable: "unavailable";
                        },
                    >;
                },
                $strip,
            >;
            field_accesses: ZodObject<
                {
                    complete: ZodBoolean;
                    dropped: ZodNumber;
                    items: ZodArray<
                        ZodObject<
                            {
                                field_name: ZodNullable<ZodString>;
                                field_token: ZodString;
                                method: ZodNullable<ZodString>;
                                method_token: ZodString;
                                opcode: ZodString;
                            },
                            $strip,
                        >,
                    >;
                    limit: ZodNumber;
                    offset: ZodNumber;
                    returned: ZodNumber;
                    total: ZodNumber;
                },
                $strip,
            >;
            fields: ZodObject<
                {
                    complete: ZodBoolean;
                    dropped: ZodNumber;
                    items: ZodArray<
                        ZodObject<
                            {
                                declaring_type: ZodNullable<ZodString>;
                                declaring_type_token: ZodNullable<ZodString>;
                                flags: ZodNumber;
                                name: ZodString;
                                row_offset: ZodNumber;
                                signature: ZodObject<
                                    {
                                        calling_convention: ZodNullable<ZodString>;
                                        field_type: ZodNullable<ZodString>;
                                        generic_parameter_count: ZodNullable<ZodNumber>;
                                        issue: ZodNullable<ZodString>;
                                        kind: ZodEnum<{ field: ...; method: ...; unknown: ... }>;
                                        parameter_count: ZodNullable<ZodNumber>;
                                        parameter_types: ZodArray<ZodString>;
                                        parse_status: ZodEnum<
                                            {
                                                decoded: ...;
                                                malformed: ...;
                                                partial: ...;
                                                unsupported: ...;
                                            },
                                        >;
                                        raw_length: ZodNumber;
                                        raw_sha256: ZodString;
                                        return_type: ZodNullable<ZodString>;
                                    },
                                    $strip,
                                >;
                                token: ZodString;
                            },
                            $strip,
                        >,
                    >;
                    limit: ZodNumber;
                    offset: ZodNumber;
                    returned: ZodNumber;
                    total: ZodNumber;
                },
                $strip,
            >;
            identity_scope: ZodObject<
                {
                    requires_artifact_sha256: ZodString;
                    requires_mvid: ZodNullable<ZodString>;
                    token_identity: ZodLiteral<"build-local">;
                },
                $strip,
            >;
            limitations: ZodArray<ZodString>;
            member_refs: ZodObject<
                {
                    complete: ZodBoolean;
                    dropped: ZodNumber;
                    items: ZodArray<
                        ZodObject<
                            {
                                name: ZodString;
                                parent_token: ZodNullable<ZodString>;
                                row_offset: ZodNumber;
                                signature: ZodObject<
                                    {
                                        calling_convention: ZodNullable<ZodString>;
                                        field_type: ZodNullable<ZodString>;
                                        generic_parameter_count: ZodNullable<ZodNumber>;
                                        issue: ZodNullable<ZodString>;
                                        kind: ZodEnum<{ field: ...; method: ...; unknown: ... }>;
                                        parameter_count: ZodNullable<ZodNumber>;
                                        parameter_types: ZodArray<ZodString>;
                                        parse_status: ZodEnum<
                                            {
                                                decoded: ...;
                                                malformed: ...;
                                                partial: ...;
                                                unsupported: ...;
                                            },
                                        >;
                                        raw_length: ZodNumber;
                                        raw_sha256: ZodString;
                                        return_type: ZodNullable<ZodString>;
                                    },
                                    $strip,
                                >;
                                token: ZodString;
                            },
                            $strip,
                        >,
                    >;
                    limit: ZodNumber;
                    offset: ZodNumber;
                    returned: ZodNumber;
                    total: ZodNumber;
                },
                $strip,
            >;
            metadata: ZodObject<
                {
                    status: ZodEnum<
                        {
                            absent: "absent";
                            complete: "complete";
                            malformed: "malformed";
                            partial: "partial";
                        },
                    >;
                    table_row_counts: ZodRecord<ZodString, ZodNumber>;
                    version: ZodNullable<ZodString>;
                },
                $strip,
            >;
            methods: ZodObject<
                {
                    complete: ZodBoolean;
                    dropped: ZodNumber;
                    items: ZodArray<
                        ZodObject<
                            {
                                body: ZodObject<
                                    {
                                        anchors: ZodArray<ZodObject<(...), (...)>>;
                                        decoded_instruction_count: ZodNumber;
                                        exception_regions: ZodArray<ZodObject<(...), (...)>>;
                                        file_offset: ZodNullable<ZodNumber>;
                                        header_format: ZodEnum<
                                            { fat: ...; none: ...; tiny: ...; unknown: ... },
                                        >;
                                        il_sha256: ZodNullable<ZodString>;
                                        il_size: ZodNumber;
                                        init_locals: ZodNullable<ZodBoolean>;
                                        instruction_count: ZodNumber;
                                        issue: ZodNullable<ZodString>;
                                        local_var_sig_token: ZodNullable<ZodString>;
                                        max_stack: ZodNullable<ZodNumber>;
                                        normalized_il_sha256: ZodNullable<ZodString>;
                                        opcode_counts: ZodRecord<ZodString, ZodNumber>;
                                        rva: ZodNumber;
                                        status: ZodEnum<
                                            {
                                                absent: ...;
                                                malformed: ...;
                                                partial: ...;
                                                present: ...;
                                                "too-large": ...;
                                            },
                                        >;
                                        truncated_instructions: ZodNumber;
                                    },
                                    $strip,
                                >;
                                declaring_type: ZodNullable<ZodString>;
                                declaring_type_token: ZodNullable<ZodString>;
                                flags: ZodNumber;
                                impl_flags: ZodNumber;
                                name: ZodString;
                                row_offset: ZodNumber;
                                rva: ZodNumber;
                                signature: ZodObject<
                                    {
                                        calling_convention: ZodNullable<ZodString>;
                                        field_type: ZodNullable<ZodString>;
                                        generic_parameter_count: ZodNullable<ZodNumber>;
                                        issue: ZodNullable<ZodString>;
                                        kind: ZodEnum<{ field: ...; method: ...; unknown: ... }>;
                                        parameter_count: ZodNullable<ZodNumber>;
                                        parameter_types: ZodArray<ZodString>;
                                        parse_status: ZodEnum<
                                            {
                                                decoded: ...;
                                                malformed: ...;
                                                partial: ...;
                                                unsupported: ...;
                                            },
                                        >;
                                        raw_length: ZodNumber;
                                        raw_sha256: ZodString;
                                        return_type: ZodNullable<ZodString>;
                                    },
                                    $strip,
                                >;
                                token: ZodString;
                            },
                            $strip,
                        >,
                    >;
                    limit: ZodNumber;
                    offset: ZodNumber;
                    returned: ZodNumber;
                    total: ZodNumber;
                },
                $strip,
            >;
            module: ZodNullable<
                ZodObject<
                    {
                        enc_base_id: ZodNullable<ZodString>;
                        enc_id: ZodNullable<ZodString>;
                        generation: ZodNumber;
                        mvid: ZodNullable<ZodString>;
                        name: ZodString;
                        row_offset: ZodNumber;
                        token: ZodString;
                    },
                    $strip,
                >,
            >;
            schema_version: ZodLiteral<1>;
            types: ZodObject<
                {
                    complete: ZodBoolean;
                    dropped: ZodNumber;
                    items: ZodArray<
                        ZodObject<
                            {
                                extends_token: ZodNullable<ZodString>;
                                field_list: ZodObject<
                                    {
                                        count: ZodNumber;
                                        first_row: ZodNullable<ZodNumber>;
                                        last_row: ZodNullable<ZodNumber>;
                                    },
                                    $strip,
                                >;
                                flags: ZodNumber;
                                full_name: ZodString;
                                method_list: ZodObject<
                                    {
                                        count: ZodNumber;
                                        first_row: ZodNullable<ZodNumber>;
                                        last_row: ZodNullable<ZodNumber>;
                                    },
                                    $strip,
                                >;
                                name: ZodString;
                                namespace: ZodString;
                                row_offset: ZodNumber;
                                token: ZodString;
                            },
                            $strip,
                        >,
                    >;
                    limit: ZodNumber;
                    offset: ZodNumber;
                    returned: ZodNumber;
                    total: ZodNumber;
                },
                $strip,
            >;
        },
        $strip,
    > = ...

    Provider-neutral, execution-free metadata/signature/IL member inspection.

    -
    managedRuntimeCorrelationResultSchema: ZodObject<
        {
            authority_model: ZodObject<
                {
                    capability: ZodLiteral<"managed_runtime">;
                    default_enabled: ZodLiteral<false>;
                    per_call_approval_required: ZodLiteral<true>;
                    permission_grant_id: ZodString;
                },
                $strict,
            >;
            bounds: ZodObject<
                {
                    allow_network: ZodDefault<ZodLiteral<false>>;
                    allow_ui: ZodDefault<ZodLiteral<false>>;
                    max_output_bytes: ZodDefault<ZodNumber>;
                    max_threads: ZodDefault<ZodNumber>;
                    timeout_ms: ZodDefault<ZodNumber>;
                },
                $strict,
            >;
            correlation_id: ZodString;
            effect_taxonomy: ZodObject<
                {
                    attaches_process: ZodBoolean;
                    instruments_code: ZodBoolean;
                    invokes_target_code: ZodLiteral<false>;
                    loads_target: ZodBoolean;
                    uses_debugger: ZodBoolean;
                    uses_reflection: ZodBoolean;
                },
                $strict,
            >;
            evidence_links: ZodArray<ZodString>;
            executed: ZodLiteral<false>;
            limitations: ZodArray<ZodString>;
            method_lock: ZodObject<
                {
                    body_sha256: ZodNullable<ZodString>;
                    body_status: ZodEnum<
                        {
                            absent: "absent";
                            malformed: "malformed";
                            present: "present";
                            "too-large": "too-large";
                        },
                    >;
                    declaring_type: ZodNullable<ZodString>;
                    exact_build_required: ZodLiteral<true>;
                    il_size: ZodNumber;
                    name: ZodString;
                    normalized_il_sha256: ZodNullable<ZodString>;
                    signature_sha256: ZodString;
                    token: ZodString;
                },
                $strict,
            >;
            phase: ZodLiteral<"admission-plan">;
            requested_runtime: ZodObject<
                {
                    effect: ZodEnum<
                        {
                            attach: "attach";
                            debugger: "debugger";
                            instrumentation: "instrumentation";
                            load: "load";
                            reflection: "reflection";
                        },
                    >;
                    executable_path: ZodString;
                    filesystem: ZodLiteral<"owned-artifacts-only">;
                    host: ZodObject<
                        {
                            architecture: ZodEnum<
                                { arm: "arm"; arm64: "arm64"; x86: "x86"; x86_64: "x86_64" },
                            >;
                            clr_family: ZodEnum<
                                {
                                    dotnet: "dotnet";
                                    "dotnet-framework": "dotnet-framework";
                                    mono: "mono";
                                    unknown: "unknown";
                                },
                            >;
                            os: ZodEnum<{ linux: "linux"; macos: "macos"; windows: "windows" }>;
                        },
                        $strict,
                    >;
                    network: ZodLiteral<"none">;
                },
                $strict,
            >;
            schema_version: ZodLiteral<1>;
            static_observation: ZodObject<
                {
                    artifact_path: ZodString;
                    artifact_sha256: ZodString;
                    byte_length: ZodNumber;
                    evidence_id: ZodString;
                    metadata_status: ZodEnum<
                        {
                            absent: "absent";
                            complete: "complete";
                            malformed: "malformed";
                            partial: "partial";
                        },
                    >;
                    module_name: ZodNullable<ZodString>;
                    mvid: ZodNullable<ZodString>;
                },
                $strict,
            >;
            unsupported_until_executor_exists: ZodLiteral<true>;
        },
        $strict,
    > = ...
    diff --git a/docs/product-catalog.json b/docs/product-catalog.json index 165991e84..7ea89d9b1 100644 --- a/docs/product-catalog.json +++ b/docs/product-catalog.json @@ -566,10 +566,10 @@ "mcp_resource_templates": 8 }, "digests": { - "tools_sha256": "3c503c53210ae6700e8afdf7cadd206ad3ee11ddf9524647cea3bda2e311ba77", + "tools_sha256": "b9cea5c401d28e7f2bbd32a058dab8cf5c1b044a60fb5b2ec90584dcd2c781bb", "prompts_sha256": "f6da3ad38a1000c11364d1710f122ac4990551f04efd8c53ffb2e819b5cf5707", "resources_sha256": "5dca0fcdad3e78d71a1b6ef7b4f0c12bdcd8e3ec11fcbdd9ccd3a68edadf5c80", - "combined_sha256": "b3db06bedadc1ad21a6cfe76f58a9c6cebbf9bce4f9663733b6bab07a57203c3" + "combined_sha256": "d0e2eae4dbc245ff58042a075276a501872a5bf7405a18d1b4e0163cbdf138f9" } } } diff --git a/skills/reverse-engineer-anything/SKILL.md b/skills/reverse-engineer-anything/SKILL.md index 6eff4e5f3..d384bba8b 100644 --- a/skills/reverse-engineer-anything/SKILL.md +++ b/skills/reverse-engineer-anything/SKILL.md @@ -4,7 +4,7 @@ description: Reverse engineer native, Electron/JavaScript, and web applications metadata: version: "21" tool_count: 95 - catalog_digest: "b3db06bedadc1ad21a6cfe76f58a9c6cebbf9bce4f9663733b6bab07a57203c3" + catalog_digest: "d0e2eae4dbc245ff58042a075276a501872a5bf7405a18d1b4e0163cbdf138f9" --- # REA diff --git a/src/domain/managedArtifact.ts b/src/domain/managedArtifact.ts index b9d517190..99363d60f 100644 --- a/src/domain/managedArtifact.ts +++ b/src/domain/managedArtifact.ts @@ -162,7 +162,7 @@ const managedInstructionAnchorSchema = z.object({ }); const managedMethodBodySchema = z.object({ - status: z.enum(["present", "absent", "malformed", "too-large"]), + status: z.enum(["present", "partial", "absent", "malformed", "too-large"]), header_format: z.enum(["tiny", "fat", "none", "unknown"]), rva: z.number().int().min(0).max(0xffff_ffff), file_offset: offsetSchema.nullable(), diff --git a/src/domain/managedMemberComparison.ts b/src/domain/managedMemberComparison.ts index d22ad948d..c276b39bd 100644 --- a/src/domain/managedMemberComparison.ts +++ b/src/domain/managedMemberComparison.ts @@ -190,7 +190,7 @@ export interface ManagedMemberComparisonSide { interface Keyed { readonly item: Item; readonly exactKey: string | null; - readonly structuralKey: string; + readonly structuralKey: string | null; } interface MatchedPair { @@ -335,6 +335,7 @@ const keyMethod = (item: Method): Keyed => ({ item, exactKey: item.signature.parse_status === "decoded" && + item.body.status === "present" && item.body.normalized_il_sha256 !== null ? stableKey([ "method-exact", @@ -342,29 +343,35 @@ const keyMethod = (item: Method): Keyed => ({ item.body.normalized_il_sha256, ]) : null, - structuralKey: stableKey([ - "method-structural", - item.signature.kind, - item.signature.calling_convention, - item.signature.generic_parameter_count, - item.signature.parameter_count, - item.signature.return_type, - item.signature.parameter_types, - item.body.status, - item.body.header_format, - item.body.il_size, - item.body.max_stack, - item.body.init_locals, - item.body.opcode_counts, - item.body.anchors.map(({ opcode, operand_kind }) => [opcode, operand_kind]), - item.body.exception_regions.map((region) => [ - region.flags, - region.try_length, - region.handler_length, - region.class_token === null ? null : "type-token", - region.filter_offset === null ? null : "filter", - ]), - ]), + structuralKey: + item.body.status === "present" + ? stableKey([ + "method-structural", + item.signature.kind, + item.signature.calling_convention, + item.signature.generic_parameter_count, + item.signature.parameter_count, + item.signature.return_type, + item.signature.parameter_types, + item.body.status, + item.body.header_format, + item.body.il_size, + item.body.max_stack, + item.body.init_locals, + item.body.opcode_counts, + item.body.anchors.map(({ opcode, operand_kind }) => [ + opcode, + operand_kind, + ]), + item.body.exception_regions.map((region) => [ + region.flags, + region.try_length, + region.handler_length, + region.class_token === null ? null : "type-token", + region.filter_offset === null ? null : "filter", + ]), + ]) + : null, }); const keyField = (item: Field): Keyed => ({ diff --git a/src/domain/managedReconstruction.ts b/src/domain/managedReconstruction.ts index 5ca2fef99..d501e67e6 100644 --- a/src/domain/managedReconstruction.ts +++ b/src/domain/managedReconstruction.ts @@ -136,6 +136,9 @@ export const importManagedReconstruction = ( (item) => item.token === candidate.token && item.signature.raw_sha256 === candidate.signature_sha256 && + item.body.status === "present" && + item.body.normalized_il_sha256 !== null && + candidate.normalized_il_sha256 !== null && item.body.normalized_il_sha256 === candidate.normalized_il_sha256, ); if (observed === undefined) diff --git a/src/domain/managedRuntimeCorrelation.ts b/src/domain/managedRuntimeCorrelation.ts index 536699f10..881c09912 100644 --- a/src/domain/managedRuntimeCorrelation.ts +++ b/src/domain/managedRuntimeCorrelation.ts @@ -84,7 +84,13 @@ export const managedRuntimeCorrelationResultSchema = z.strictObject({ normalized_il_sha256: digestSchema.nullable(), body_sha256: digestSchema.nullable(), il_size: z.number().int().min(0), - body_status: z.enum(["present", "absent", "malformed", "too-large"]), + body_status: z.enum([ + "present", + "partial", + "absent", + "malformed", + "too-large", + ]), exact_build_required: z.literal(true), }), requested_runtime: z.strictObject({ @@ -138,6 +144,9 @@ export const planManagedRuntimeCorrelation = ( (item) => item.token === input.method.token && item.signature.raw_sha256 === input.method.signature_sha256 && + item.body.status === "present" && + item.body.normalized_il_sha256 !== null && + input.method.normalized_il_sha256 !== null && item.body.normalized_il_sha256 === input.method.normalized_il_sha256, ); if (method === undefined) diff --git a/src/dotnet/ManagedMemberInspector.ts b/src/dotnet/ManagedMemberInspector.ts index f18d4ec5c..167d07f41 100644 --- a/src/dotnet/ManagedMemberInspector.ts +++ b/src/dotnet/ManagedMemberInspector.ts @@ -1080,8 +1080,14 @@ const methodBody = ( ); const methodEnd = ilOffset + header.ilSize; const sectionOffset = (methodEnd + 3) & ~3; + const status = + decoded.issue !== null + ? "malformed" + : decoded.truncated > 0 + ? "partial" + : "present"; return { - status: decoded.issue === null ? "present" : "malformed", + status, header_format: header.format, rva, file_offset: offset, @@ -1093,7 +1099,8 @@ const methodBody = ( : `0x${header.localSig.toString(16).padStart(8, "0")}`, il_size: header.ilSize, il_sha256: sha256Bytes(il), - normalized_il_sha256: sha256Bytes(normalized), + normalized_il_sha256: + status === "present" ? sha256Bytes(normalized) : null, instruction_count: decoded.count, decoded_instruction_count: decoded.parsed.length, truncated_instructions: decoded.truncated, @@ -1103,7 +1110,11 @@ const methodBody = ( header.format === "fat" && (header.flags & 8) !== 0 ? parseExceptionRegions(bytes, sectionOffset, bytes.length) : [], - issue: decoded.issue, + issue: + decoded.issue ?? + (decoded.truncated > 0 + ? `Instruction decode reached max_method_instructions ${String(limits.maxMethodInstructions)} before the end of the method body` + : null), }; } catch (cause: unknown) { return { @@ -1436,6 +1447,22 @@ export const inspectManagedMembersBytes = ( limits.maxHeapItemBytes, limits, ); + const methodBodyIssues: ManagedParseIssue[] = methods.methods.flatMap( + (method) => + method.body.status === "partial" + ? [ + { + code: "limit-exceeded" as const, + scope: `method.${method.token}.body.instructions`, + offset: method.body.file_offset, + detail: + method.body.issue ?? + `Instruction decode reached max_method_instructions ${String(limits.maxMethodInstructions)}`, + }, + ] + : [], + ); + const coverageIssues = [...issues, ...methodBodyIssues]; const related = edges( methods.methods, methods.core, @@ -1476,13 +1503,18 @@ export const inspectManagedMembersBytes = ( limits.edgeLimit, ), coverage: { - state: issues.length === 0 ? "complete" : "partial", - issues, + state: coverageIssues.length === 0 ? "complete" : "partial", + issues: coverageIssues, }, limitations: [ "Metadata tokens are build-local coordinates and are only meaningful with the reported artifact SHA-256 and MVID.", "CIL instruction anchors are decoded from file-backed method bodies only; no target assembly is loaded or executed.", "Signatures are decoded for common ECMA-335 primitive, class, valuetype, pointer, byref, array, and generic variable forms; unsupported forms retain raw signature hashes.", + ...(methodBodyIssues.length > 0 + ? [ + "At least one CIL method body reached max_method_instructions; its decoded prefix is partial and has no normalized CIL identity.", + ] + : []), ], }); } catch (cause: unknown) { diff --git a/tests/managedArtifactProvider.test.ts b/tests/managedArtifactProvider.test.ts index c305f6142..9bb574c9e 100644 --- a/tests/managedArtifactProvider.test.ts +++ b/tests/managedArtifactProvider.test.ts @@ -226,11 +226,49 @@ describe("managed PE/CLI static provider", () => { expect(result.methods.items[0]?.body).toMatchObject({ status: "malformed", il_size: 2, + normalized_il_sha256: null, decoded_instruction_count: 0, issue: "Unsupported CIL opcode 0x24 at IL offset 0", }); }); + it("marks instruction-limited CIL as partial without assigning normalized identity", () => { + const bytes = buildManagedPeFixture(); + const result = inspectManagedMembersBytes(bytes, target(bytes), { + ...memberLimits, + maxMethodInstructions: 1, + }); + const il = bytes.subarray(0x0a01, 0x0a0d); + + expect(result.metadata.status).toBe("complete"); + expect(result.methods.items[0]?.body).toMatchObject({ + status: "partial", + il_size: 12, + il_sha256: createHash("sha256").update(il).digest("hex"), + normalized_il_sha256: null, + instruction_count: 1, + decoded_instruction_count: 1, + truncated_instructions: 1, + issue: + "Instruction decode reached max_method_instructions 1 before the end of the method body", + }); + expect(result.coverage).toEqual({ + state: "partial", + issues: [ + { + code: "limit-exceeded", + scope: "method.0x06000001.body.instructions", + offset: 0x0a00, + detail: + "Instruction decode reached max_method_instructions 1 before the end of the method body", + }, + ], + }); + expect(result.limitations.join(" ")).toContain( + "has no normalized CIL identity", + ); + }); + it("inspects metadata members, signatures, CIL hashes, call edges, and field anchors", () => { const bytes = buildManagedPeFixture(); const result = inspectManagedMembersBytes( diff --git a/tests/managedMemberComparison.test.ts b/tests/managedMemberComparison.test.ts index 5e8c87672..47fa4dc5d 100644 --- a/tests/managedMemberComparison.test.ts +++ b/tests/managedMemberComparison.test.ts @@ -111,6 +111,33 @@ describe("managed member comparison", () => { }); }); + it("does not match identical instruction-limited method prefixes", () => { + const limited = { ...memberLimits, maxMethodInstructions: 1 }; + const left = inspect( + buildManagedPeFixture(), + "/tmp/left-partial.dll", + limited, + ); + const right = inspect( + buildManagedPeFixture(), + "/tmp/right-partial.dll", + limited, + ); + const result = compareManagedMembers( + { evidenceId: left.evidence.evidence_id, result: left.result }, + { evidenceId: right.evidence.evidence_id, result: right.result }, + comparisonLimits, + ); + + expect(result.matching.exact_il_signature).toBe(0); + expect(result.matching.structural_method_shape).toBe(0); + expect(result.coverage).toMatchObject({ + status: "partial", + left_status: "partial", + right_status: "partial", + }); + }); + it("does not guess ambiguous field signature matches", () => { const left = inspect(buildManagedPeFixture(), "/tmp/left.dll"); const leftField = left.result.fields.items[0]; @@ -201,7 +228,11 @@ describe("managed member comparison", () => { }); }); -const inspect = (bytes: Buffer, path: string) => { +const inspect = ( + bytes: Buffer, + path: string, + limits: typeof memberLimits = memberLimits, +) => { const target: BinaryTarget = { path, sha256: hash(bytes), @@ -209,7 +240,7 @@ const inspect = (bytes: Buffer, path: string) => { format: "pe", architecture: "x86", }; - const result = inspectManagedMembersBytes(bytes, target, memberLimits); + const result = inspectManagedMembersBytes(bytes, target, limits); return { result, evidence: createEvidence(target, MANAGED_STATIC_PROVIDER, { diff --git a/tests/managedReconstruction.test.ts b/tests/managedReconstruction.test.ts index 7e8b71045..463964346 100644 --- a/tests/managedReconstruction.test.ts +++ b/tests/managedReconstruction.test.ts @@ -8,6 +8,8 @@ import { importManagedReconstruction, managedReconstructionImportInputSchema, } from "../src/domain/managedReconstruction.js"; +import { managedMemberInspectionSchema } from "../src/domain/managedArtifact.js"; +import { createEvidence } from "../src/domain/evidence.js"; const exampleInput = () => managedReconstructionImportInputSchema.parse( @@ -97,6 +99,58 @@ describe("managed decompiler reconstruction import", () => { ).toThrow(/does not match/u); }); + it("rejects reconstruction locks for partial CIL without normalized identity", () => { + const input = exampleInput(); + const observed = managedMemberInspectionSchema.parse( + input.static_members.normalized_result, + ); + const method = observed.methods.items[0]; + if (method === undefined) throw new Error("missing observed method"); + const partial = { + ...observed, + methods: { + ...observed.methods, + items: [ + { + ...method, + body: { + ...method.body, + status: "partial" as const, + normalized_il_sha256: null, + truncated_instructions: 1, + issue: "instruction limit reached", + }, + }, + ], + }, + coverage: { state: "partial" as const, issues: [] }, + }; + const partialEvidence = createEvidence( + undefined, + input.static_members.provider, + { + operation: "inspect_managed_members", + parameters: {}, + result: partial, + rawResult: null, + limitations: partial.limitations, + }, + ); + + expect(() => + importManagedReconstruction({ + ...input, + static_members: partialEvidence, + methods: [ + { + ...exampleMethod(), + normalized_il_sha256: null, + }, + ], + }), + ).toThrow(/does not match/u); + }); + it("wraps imported reconstruction in Evidence v2", () => { const evidence = importManagedReconstructionEvidence(exampleInput()); diff --git a/tests/managedRuntimeCorrelation.test.ts b/tests/managedRuntimeCorrelation.test.ts index 74dc2e6f9..36bab763d 100644 --- a/tests/managedRuntimeCorrelation.test.ts +++ b/tests/managedRuntimeCorrelation.test.ts @@ -146,6 +146,35 @@ describe("managed runtime correlation planning", () => { if (result.ok) return; expect(result.error._tag).toBe("AnalysisInputError"); }); + + it("rejects a runtime lock for instruction-limited CIL", async () => { + const directory = await mkdtemp(join(tmpdir(), "rea-managed-runtime-")); + const artifactPath = join(directory, "fixture.dll"); + const executablePath = join(directory, "dotnet"); + const bytes = buildManagedPeFixture(); + await writeFile(artifactPath, bytes); + await writeFile(executablePath, "#!/bin/sh\n"); + const fixture = inspect(bytes, artifactPath, { + ...memberLimits, + maxMethodInstructions: 1, + }); + const authority = await authorityFor(directory, executablePath, true); + const result = await planManagedRuntimeCorrelationEvidence( + { + policy: { enabled: true, roots: [directory], executablePath }, + authority, + }, + inputFor(fixture.evidence, fixture.method), + ); + + expect(fixture.method.body).toMatchObject({ + status: "partial", + normalized_il_sha256: null, + }); + expect(result.ok).toBe(false); + if (result.ok) return; + expect(result.error._tag).toBe("AnalysisInputError"); + }); }); const disabledPolicy: ManagedRuntimePolicy = { @@ -210,7 +239,11 @@ const inputFor = ( }, }); -const inspect = (bytes: Buffer, path: string) => { +const inspect = ( + bytes: Buffer, + path: string, + limits: typeof memberLimits = memberLimits, +) => { const target: BinaryTarget = { path, sha256: hash(bytes), @@ -218,7 +251,7 @@ const inspect = (bytes: Buffer, path: string) => { format: "pe", architecture: "x86", }; - const result = inspectManagedMembersBytes(bytes, target, memberLimits); + const result = inspectManagedMembersBytes(bytes, target, limits); const method = result.methods.items[0]; if (method === undefined) throw new Error("fixture has no method"); return {