Variable APPLICATION_TOOL_CONTRACTS`Const`

APPLICATION_TOOL_CONTRACTS: readonly [
    {
        annotations: DerivedToolAnnotations;
        description: "Trace a typed literal seed through an authenticated JavaScript Application Graph with explicit direction, depth, node, edge, and path bounds. Original static, native, passive-runtime, inferred, and unknown authorities remain distinct; native addon handoffs never open a provider or execute the application.";
        effects: ToolEffects;
        examples: readonly [
            {
                input: {
                    application: | {
                        analysis_profile: {
                            digest: string;
                            parameters: Record<string, JSONType>;
                            provider: { id: string; name: string; version: string };
                            provider_profile_schema_version: number;
                            schema_version: 1;
                        };
                        authority: | "shipped-artifact"
                        | "controlled-replay"
                        | "historical-reference"
                        | "external-service"
                        | "analyst-inference";
                        confidence: "observed"
                        | "derived"
                        | "inferred";
                        environment:
                            | {
                                architecture: string;
                                id: string;
                                isolation: "process"
                                | "none"
                                | "container"
                                | "virtual-machine";
                                platform: string;
                            }
                            | null;
                        evidence_id: string;
                        evidence_links: string[];
                        limitations: string[];
                        locations: (
                            | { address: string; kind: "address" }
                            | { end: string; kind: "address-range"; start: string }
                            | { kind: "artifact-path"; path: string }
                            | { kind: "file-offset"; offset: number }
                            | { end: number; kind: "file-offset-range"; start: number }
                        )[];
                        normalized_result: JSONType;
                        operation: string;
                        parameters: Record<string, JSONType>;
                        predicate_type: string;
                        provider: { id: string; name: string; version: string | null };
                        raw_result: JSONType;
                        schema_version: 2;
                        subject:
                            | {
                                architecture: "x86"
                                | "x86_64"
                                | "arm"
                                | "arm64"
                                | null;
                                digest: { sha256: string };
                                format:
                                    | "unknown"
                                    | "file"
                                    | "directory"
                                    | "javascript"
                                    | "source-map"
                                    | "plist"
                                    | "entitlements"
                                    | "dmg"
                                    | "zip"
                                    | "pkg"
                                    | "asar"
                                    | "javascript-bundle"
                                    | "mach-o-universal"
                                    | "mach-o"
                                    | "elf"
                                    | "pe"
                                    | "hopper"
                                    | "analysis-database"
                                    | "ipa"
                                    | "apk";
                                local_path: string;
                                name: string;
                            }
                            | null;
                    }
                    | {
                        authority: | "shipped-artifact"
                        | "controlled-replay"
                        | "historical-reference"
                        | "external-service"
                        | "analyst-inference";
                        confidence: "observed"
                        | "derived"
                        | "inferred";
                        environment:
                            | {
                                architecture: string;
                                id: string;
                                isolation: "process"
                                | "none"
                                | "container"
                                | "virtual-machine";
                                platform: string;
                            }
                            | null;
                        evidence_id: string;
                        evidence_links: string[];
                        limitations: string[];
                        locations: (
                            | { address: string; kind: "address" }
                            | { end: string; kind: "address-range"; start: string }
                            | { kind: "artifact-path"; path: string }
                            | { kind: "file-offset"; offset: number }
                            | { end: number; kind: "file-offset-range"; start: number }
                        )[];
                        normalized_result: JSONType;
                        operation: string;
                        parameters: Record<string, JSONType>;
                        predicate_type: string;
                        provider: { id: string; name: string; version: string | null };
                        raw_result: JSONType;
                        schema_version: 2;
                        subject:
                            | {
                                architecture: "x86"
                                | "x86_64"
                                | "arm"
                                | "arm64"
                                | null;
                                digest: { sha256: string };
                                format:
                                    | "unknown"
                                    | "file"
                                    | "directory"
                                    | "javascript"
                                    | "source-map"
                                    | "plist"
                                    | "entitlements"
                                    | "dmg"
                                    | "zip"
                                    | "pkg"
                                    | "asar"
                                    | "javascript-bundle"
                                    | "mach-o-universal"
                                    | "mach-o"
                                    | "elf"
                                    | "pe"
                                    | "hopper"
                                    | "analysis-database"
                                    | "ipa"
                                    | "apk";
                                local_path: string;
                                name: string;
                            }
                            | null;
                    };
                    direction: "both";
                    seed: {
                        case_sensitive: boolean;
                        kind: "module";
                        match: "exact";
                        value: string;
                    };
                };
                title: "Trace one module seed through a retained application graph";
            },
        ];
        inputSchema: ZodObject<
            {
                application: ZodObject<
                    {
                        analysis_profile: ZodOptional<
                            ZodObject<
                                {
                                    digest: ZodString;
                                    parameters: ZodRecord<ZodString, ZodJSONSchema>;
                                    provider: ZodObject<{ id: ...; name: ...; version: ... }, $strip>;
                                    provider_profile_schema_version: ZodNumber;
                                    schema_version: ZodLiteral<1>;
                                },
                                $strip,
                            >,
                        >;
                        authority: ZodEnum<
                            {
                                "analyst-inference": "analyst-inference";
                                "controlled-replay": "controlled-replay";
                                "external-service": "external-service";
                                "historical-reference": "historical-reference";
                                "shipped-artifact": "shipped-artifact";
                            },
                        >;
                        confidence: ZodEnum<
                            { derived: "derived"; inferred: "inferred"; observed: "observed" },
                        >;
                        environment: ZodNullable<
                            ZodObject<
                                {
                                    architecture: ZodString;
                                    id: ZodString;
                                    isolation: ZodEnum<
                                        {
                                            container: ...;
                                            none: ...;
                                            process: ...;
                                            "virtual-machine": ...;
                                        },
                                    >;
                                    platform: ZodString;
                                },
                                $strip,
                            >,
                        >;
                        evidence_id: ZodString;
                        evidence_links: ZodArray<ZodString>;
                        limitations: ZodArray<ZodString>;
                        locations: ZodArray<
                            ZodDiscriminatedUnion<
                                [
                                    ZodObject<{ address: ...; kind: ... }, $strip>,
                                    ZodObject<{ end: ...; kind: ...; start: ... }, $strip>,
                                    ZodObject<{ kind: ...; path: ... }, $strip>,
                                    ZodObject<{ kind: ...; offset: ... }, $strip>,
                                    ZodObject<{ end: ...; kind: ...; start: ... }, $strip>,
                                ],
                                "kind",
                            >,
                        >;
                        normalized_result: ZodJSONSchema;
                        operation: ZodString;
                        parameters: ZodRecord<ZodString, ZodJSONSchema>;
                        predicate_type: ZodString;
                        provider: ZodObject<
                            {
                                id: ZodString;
                                name: ZodString;
                                version: ZodNullable<ZodString>;
                            },
                            $strip,
                        >;
                        raw_result: ZodNullable<ZodJSONSchema>;
                        schema_version: ZodLiteral<2>;
                        subject: ZodNullable<
                            ZodObject<
                                {
                                    architecture: ZodNullable<ZodEnum<(...)>>;
                                    digest: ZodObject<{ sha256: ... }, $strip>;
                                    format: ZodEnum<
                                        {
                                            "analysis-database": ...;
                                            apk: ...;
                                            asar: ...;
                                            directory: ...;
                                            dmg: ...;
                                            elf: ...;
                                            entitlements: ...;
                                            file: ...;
                                            hopper: ...;
                                            ipa: ...;
                                            javascript: ...;
                                            "javascript-bundle": ...;
                                            "mach-o": ...;
                                            "mach-o-universal": ...;
                                            pe: ...;
                                            pkg: ...;
                                            plist: ...;
                                            "source-map": ...;
                                            unknown: ...;
                                            zip: ...;
                                        },
                                    >;
                                    local_path: ZodString;
                                    name: ZodString;
                                },
                                $strip,
                            >,
                        >;
                    },
                    $strict,
                >;
                direction: ZodDefault<
                    ZodEnum<
                        { both: "both"; incoming: "incoming"; outgoing: "outgoing" },
                    >,
                >;
                limits: ZodDefault<
                    ZodObject<
                        {
                            max_depth: ZodDefault<ZodNumber>;
                            max_edges: ZodDefault<ZodNumber>;
                            max_nodes: ZodDefault<ZodNumber>;
                            max_paths: ZodDefault<ZodNumber>;
                            max_seed_matches: ZodDefault<ZodNumber>;
                        },
                        $strict,
                    >,
                >;
                native_observations: ZodDefault<
                    ZodArray<
                        ZodObject<
                            {
                                analysis_profile: ZodOptional<
                                    ZodObject<
                                        {
                                            digest: ...;
                                            parameters: ...;
                                            provider: ...;
                                            provider_profile_schema_version: ...;
                                            schema_version: ...;
                                        },
                                        $strip,
                                    >,
                                >;
                                authority: ZodEnum<
                                    {
                                        "analyst-inference": "analyst-inference";
                                        "controlled-replay": "controlled-replay";
                                        "external-service": "external-service";
                                        "historical-reference": "historical-reference";
                                        "shipped-artifact": "shipped-artifact";
                                    },
                                >;
                                confidence: ZodEnum<
                                    {
                                        derived: "derived";
                                        inferred: "inferred";
                                        observed: "observed";
                                    },
                                >;
                                environment: ZodNullable<
                                    ZodObject<
                                        { architecture: ...; id: ...; isolation: ...; platform: ... },
                                        $strip,
                                    >,
                                >;
                                evidence_id: ZodString;
                                evidence_links: ZodArray<ZodString>;
                                limitations: ZodArray<ZodString>;
                                locations: ZodArray<
                                    ZodDiscriminatedUnion<
                                        [(...), (...), (...), (...), (...)],
                                        "kind",
                                    >,
                                >;
                                normalized_result: ZodJSONSchema;
                                operation: ZodString;
                                parameters: ZodRecord<ZodString, ZodJSONSchema>;
                                predicate_type: ZodString;
                                provider: ZodObject<
                                    { id: ZodString; name: ZodString; version: ZodNullable<(...)> },
                                    $strip,
                                >;
                                raw_result: ZodNullable<ZodJSONSchema>;
                                schema_version: ZodLiteral<2>;
                                subject: ZodNullable<
                                    ZodObject<
                                        {
                                            architecture: ...;
                                            digest: ...;
                                            format: ...;
                                            local_path: ...;
                                            name: ...;
                                        },
                                        $strip,
                                    >,
                                >;
                            },
                            $strict,
                        >,
                    >,
                >;
                seed: ZodObject<
                    {
                        case_sensitive: ZodDefault<ZodBoolean>;
                        kind: ZodEnum<
                            {
                                api: "api";
                                channel: "channel";
                                module: "module";
                                "native-export": "native-export";
                                "node-id": "node-id";
                                route: "route";
                                string: "string";
                            },
                        >;
                        match: ZodDefault<
                            ZodNullable<ZodEnum<{ contains: "contains"; exact: "exact" }>>,
                        >;
                        value: ZodString;
                    },
                    $strict,
                >;
            },
            $strict,
        >;
        kind: "application";
        name: "trace_application_feature";
        outputSchema: ZodObject<
            {
                evidence_id: ZodString;
                evidence_uri: ZodString;
                result: ZodType<unknown, unknown, $ZodTypeInternals<unknown, unknown>>;
            },
            $strict,
        >;
        title: string;
    },
    {
        annotations: DerivedToolAnnotations;
        description: "Compare two authenticated JavaScript Application Graph versions using unique-only exact digest, module source digest, source-map identity, structural fingerprint, and non-module semantic-key tiers. Reports added, removed, changed, ambiguous, and unknown entities plus a bounded changed_from graph without fuzzy or module-ordinal pairing.";
        effects: ToolEffects;
        examples: readonly [
            {
                input: {
                    left: | {
                        analysis_profile: {
                            digest: string;
                            parameters: Record<string, JSONType>;
                            provider: { id: string; name: string; version: string };
                            provider_profile_schema_version: number;
                            schema_version: 1;
                        };
                        authority: | "shipped-artifact"
                        | "controlled-replay"
                        | "historical-reference"
                        | "external-service"
                        | "analyst-inference";
                        confidence: "observed"
                        | "derived"
                        | "inferred";
                        environment:
                            | {
                                architecture: string;
                                id: string;
                                isolation: "process"
                                | "none"
                                | "container"
                                | "virtual-machine";
                                platform: string;
                            }
                            | null;
                        evidence_id: string;
                        evidence_links: string[];
                        limitations: string[];
                        locations: (
                            | { address: string; kind: "address" }
                            | { end: string; kind: "address-range"; start: string }
                            | { kind: "artifact-path"; path: string }
                            | { kind: "file-offset"; offset: number }
                            | { end: number; kind: "file-offset-range"; start: number }
                        )[];
                        normalized_result: JSONType;
                        operation: string;
                        parameters: Record<string, JSONType>;
                        predicate_type: string;
                        provider: { id: string; name: string; version: string | null };
                        raw_result: JSONType;
                        schema_version: 2;
                        subject:
                            | {
                                architecture: "x86"
                                | "x86_64"
                                | "arm"
                                | "arm64"
                                | null;
                                digest: { sha256: string };
                                format:
                                    | "unknown"
                                    | "file"
                                    | "directory"
                                    | "javascript"
                                    | "source-map"
                                    | "plist"
                                    | "entitlements"
                                    | "dmg"
                                    | "zip"
                                    | "pkg"
                                    | "asar"
                                    | "javascript-bundle"
                                    | "mach-o-universal"
                                    | "mach-o"
                                    | "elf"
                                    | "pe"
                                    | "hopper"
                                    | "analysis-database"
                                    | "ipa"
                                    | "apk";
                                local_path: string;
                                name: string;
                            }
                            | null;
                    }
                    | {
                        authority: | "shipped-artifact"
                        | "controlled-replay"
                        | "historical-reference"
                        | "external-service"
                        | "analyst-inference";
                        confidence: "observed"
                        | "derived"
                        | "inferred";
                        environment:
                            | {
                                architecture: string;
                                id: string;
                                isolation: "process"
                                | "none"
                                | "container"
                                | "virtual-machine";
                                platform: string;
                            }
                            | null;
                        evidence_id: string;
                        evidence_links: string[];
                        limitations: string[];
                        locations: (
                            | { address: string; kind: "address" }
                            | { end: string; kind: "address-range"; start: string }
                            | { kind: "artifact-path"; path: string }
                            | { kind: "file-offset"; offset: number }
                            | { end: number; kind: "file-offset-range"; start: number }
                        )[];
                        normalized_result: JSONType;
                        operation: string;
                        parameters: Record<string, JSONType>;
                        predicate_type: string;
                        provider: { id: string; name: string; version: string | null };
                        raw_result: JSONType;
                        schema_version: 2;
                        subject:
                            | {
                                architecture: "x86"
                                | "x86_64"
                                | "arm"
                                | "arm64"
                                | null;
                                digest: { sha256: string };
                                format:
                                    | "unknown"
                                    | "file"
                                    | "directory"
                                    | "javascript"
                                    | "source-map"
                                    | "plist"
                                    | "entitlements"
                                    | "dmg"
                                    | "zip"
                                    | "pkg"
                                    | "asar"
                                    | "javascript-bundle"
                                    | "mach-o-universal"
                                    | "mach-o"
                                    | "elf"
                                    | "pe"
                                    | "hopper"
                                    | "analysis-database"
                                    | "ipa"
                                    | "apk";
                                local_path: string;
                                name: string;
                            }
                            | null;
                    };
                    right: | {
                        analysis_profile: {
                            digest: string;
                            parameters: Record<string, JSONType>;
                            provider: { id: string; name: string; version: string };
                            provider_profile_schema_version: number;
                            schema_version: 1;
                        };
                        authority: | "shipped-artifact"
                        | "controlled-replay"
                        | "historical-reference"
                        | "external-service"
                        | "analyst-inference";
                        confidence: "observed"
                        | "derived"
                        | "inferred";
                        environment:
                            | {
                                architecture: string;
                                id: string;
                                isolation: "process"
                                | "none"
                                | "container"
                                | "virtual-machine";
                                platform: string;
                            }
                            | null;
                        evidence_id: string;
                        evidence_links: string[];
                        limitations: string[];
                        locations: (
                            | { address: string; kind: "address" }
                            | { end: string; kind: "address-range"; start: string }
                            | { kind: "artifact-path"; path: string }
                            | { kind: "file-offset"; offset: number }
                            | { end: number; kind: "file-offset-range"; start: number }
                        )[];
                        normalized_result: JSONType;
                        operation: string;
                        parameters: Record<string, JSONType>;
                        predicate_type: string;
                        provider: { id: string; name: string; version: string | null };
                        raw_result: JSONType;
                        schema_version: 2;
                        subject:
                            | {
                                architecture: "x86"
                                | "x86_64"
                                | "arm"
                                | "arm64"
                                | null;
                                digest: { sha256: string };
                                format:
                                    | "unknown"
                                    | "file"
                                    | "directory"
                                    | "javascript"
                                    | "source-map"
                                    | "plist"
                                    | "entitlements"
                                    | "dmg"
                                    | "zip"
                                    | "pkg"
                                    | "asar"
                                    | "javascript-bundle"
                                    | "mach-o-universal"
                                    | "mach-o"
                                    | "elf"
                                    | "pe"
                                    | "hopper"
                                    | "analysis-database"
                                    | "ipa"
                                    | "apk";
                                local_path: string;
                                name: string;
                            }
                            | null;
                    }
                    | {
                        authority: | "shipped-artifact"
                        | "controlled-replay"
                        | "historical-reference"
                        | "external-service"
                        | "analyst-inference";
                        confidence: "observed"
                        | "derived"
                        | "inferred";
                        environment:
                            | {
                                architecture: string;
                                id: string;
                                isolation: "process"
                                | "none"
                                | "container"
                                | "virtual-machine";
                                platform: string;
                            }
                            | null;
                        evidence_id: string;
                        evidence_links: string[];
                        limitations: string[];
                        locations: (
                            | { address: string; kind: "address" }
                            | { end: string; kind: "address-range"; start: string }
                            | { kind: "artifact-path"; path: string }
                            | { kind: "file-offset"; offset: number }
                            | { end: number; kind: "file-offset-range"; start: number }
                        )[];
                        normalized_result: JSONType;
                        operation: string;
                        parameters: Record<string, JSONType>;
                        predicate_type: string;
                        provider: { id: string; name: string; version: string | null };
                        raw_result: JSONType;
                        schema_version: 2;
                        subject:
                            | {
                                architecture: "x86"
                                | "x86_64"
                                | "arm"
                                | "arm64"
                                | null;
                                digest: { sha256: string };
                                format:
                                    | "unknown"
                                    | "file"
                                    | "directory"
                                    | "javascript"
                                    | "source-map"
                                    | "plist"
                                    | "entitlements"
                                    | "dmg"
                                    | "zip"
                                    | "pkg"
                                    | "asar"
                                    | "javascript-bundle"
                                    | "mach-o-universal"
                                    | "mach-o"
                                    | "elf"
                                    | "pe"
                                    | "hopper"
                                    | "analysis-database"
                                    | "ipa"
                                    | "apk";
                                local_path: string;
                                name: string;
                            }
                            | null;
                    };
                };
                title: "Compare authenticated static and reconciled application graphs";
            },
        ];
        inputSchema: ZodObject<
            {
                left: ZodObject<
                    {
                        analysis_profile: ZodOptional<
                            ZodObject<
                                {
                                    digest: ZodString;
                                    parameters: ZodRecord<ZodString, ZodJSONSchema>;
                                    provider: ZodObject<{ id: ...; name: ...; version: ... }, $strip>;
                                    provider_profile_schema_version: ZodNumber;
                                    schema_version: ZodLiteral<1>;
                                },
                                $strip,
                            >,
                        >;
                        authority: ZodEnum<
                            {
                                "analyst-inference": "analyst-inference";
                                "controlled-replay": "controlled-replay";
                                "external-service": "external-service";
                                "historical-reference": "historical-reference";
                                "shipped-artifact": "shipped-artifact";
                            },
                        >;
                        confidence: ZodEnum<
                            { derived: "derived"; inferred: "inferred"; observed: "observed" },
                        >;
                        environment: ZodNullable<
                            ZodObject<
                                {
                                    architecture: ZodString;
                                    id: ZodString;
                                    isolation: ZodEnum<
                                        {
                                            container: ...;
                                            none: ...;
                                            process: ...;
                                            "virtual-machine": ...;
                                        },
                                    >;
                                    platform: ZodString;
                                },
                                $strip,
                            >,
                        >;
                        evidence_id: ZodString;
                        evidence_links: ZodArray<ZodString>;
                        limitations: ZodArray<ZodString>;
                        locations: ZodArray<
                            ZodDiscriminatedUnion<
                                [
                                    ZodObject<{ address: ...; kind: ... }, $strip>,
                                    ZodObject<{ end: ...; kind: ...; start: ... }, $strip>,
                                    ZodObject<{ kind: ...; path: ... }, $strip>,
                                    ZodObject<{ kind: ...; offset: ... }, $strip>,
                                    ZodObject<{ end: ...; kind: ...; start: ... }, $strip>,
                                ],
                                "kind",
                            >,
                        >;
                        normalized_result: ZodJSONSchema;
                        operation: ZodString;
                        parameters: ZodRecord<ZodString, ZodJSONSchema>;
                        predicate_type: ZodString;
                        provider: ZodObject<
                            {
                                id: ZodString;
                                name: ZodString;
                                version: ZodNullable<ZodString>;
                            },
                            $strip,
                        >;
                        raw_result: ZodNullable<ZodJSONSchema>;
                        schema_version: ZodLiteral<2>;
                        subject: ZodNullable<
                            ZodObject<
                                {
                                    architecture: ZodNullable<ZodEnum<(...)>>;
                                    digest: ZodObject<{ sha256: ... }, $strip>;
                                    format: ZodEnum<
                                        {
                                            "analysis-database": ...;
                                            apk: ...;
                                            asar: ...;
                                            directory: ...;
                                            dmg: ...;
                                            elf: ...;
                                            entitlements: ...;
                                            file: ...;
                                            hopper: ...;
                                            ipa: ...;
                                            javascript: ...;
                                            "javascript-bundle": ...;
                                            "mach-o": ...;
                                            "mach-o-universal": ...;
                                            pe: ...;
                                            pkg: ...;
                                            plist: ...;
                                            "source-map": ...;
                                            unknown: ...;
                                            zip: ...;
                                        },
                                    >;
                                    local_path: ZodString;
                                    name: ZodString;
                                },
                                $strip,
                            >,
                        >;
                    },
                    $strict,
                >;
                left_native_observations: ZodDefault<
                    ZodArray<
                        ZodObject<
                            {
                                analysis_profile: ZodOptional<
                                    ZodObject<
                                        {
                                            digest: ...;
                                            parameters: ...;
                                            provider: ...;
                                            provider_profile_schema_version: ...;
                                            schema_version: ...;
                                        },
                                        $strip,
                                    >,
                                >;
                                authority: ZodEnum<
                                    {
                                        "analyst-inference": "analyst-inference";
                                        "controlled-replay": "controlled-replay";
                                        "external-service": "external-service";
                                        "historical-reference": "historical-reference";
                                        "shipped-artifact": "shipped-artifact";
                                    },
                                >;
                                confidence: ZodEnum<
                                    {
                                        derived: "derived";
                                        inferred: "inferred";
                                        observed: "observed";
                                    },
                                >;
                                environment: ZodNullable<
                                    ZodObject<
                                        { architecture: ...; id: ...; isolation: ...; platform: ... },
                                        $strip,
                                    >,
                                >;
                                evidence_id: ZodString;
                                evidence_links: ZodArray<ZodString>;
                                limitations: ZodArray<ZodString>;
                                locations: ZodArray<
                                    ZodDiscriminatedUnion<
                                        [(...), (...), (...), (...), (...)],
                                        "kind",
                                    >,
                                >;
                                normalized_result: ZodJSONSchema;
                                operation: ZodString;
                                parameters: ZodRecord<ZodString, ZodJSONSchema>;
                                predicate_type: ZodString;
                                provider: ZodObject<
                                    { id: ZodString; name: ZodString; version: ZodNullable<(...)> },
                                    $strip,
                                >;
                                raw_result: ZodNullable<ZodJSONSchema>;
                                schema_version: ZodLiteral<2>;
                                subject: ZodNullable<
                                    ZodObject<
                                        {
                                            architecture: ...;
                                            digest: ...;
                                            format: ...;
                                            local_path: ...;
                                            name: ...;
                                        },
                                        $strip,
                                    >,
                                >;
                            },
                            $strict,
                        >,
                    >,
                >;
                limits: ZodDefault<
                    ZodObject<
                        {
                            max_candidate_nodes: ZodDefault<ZodNumber>;
                            max_comparison_items: ZodDefault<ZodNumber>;
                            max_graph_edges: ZodDefault<ZodNumber>;
                            max_graph_nodes: ZodDefault<ZodNumber>;
                        },
                        $strict,
                    >,
                >;
                right: ZodObject<
                    {
                        analysis_profile: ZodOptional<
                            ZodObject<
                                {
                                    digest: ZodString;
                                    parameters: ZodRecord<ZodString, ZodJSONSchema>;
                                    provider: ZodObject<{ id: ...; name: ...; version: ... }, $strip>;
                                    provider_profile_schema_version: ZodNumber;
                                    schema_version: ZodLiteral<1>;
                                },
                                $strip,
                            >,
                        >;
                        authority: ZodEnum<
                            {
                                "analyst-inference": "analyst-inference";
                                "controlled-replay": "controlled-replay";
                                "external-service": "external-service";
                                "historical-reference": "historical-reference";
                                "shipped-artifact": "shipped-artifact";
                            },
                        >;
                        confidence: ZodEnum<
                            { derived: "derived"; inferred: "inferred"; observed: "observed" },
                        >;
                        environment: ZodNullable<
                            ZodObject<
                                {
                                    architecture: ZodString;
                                    id: ZodString;
                                    isolation: ZodEnum<
                                        {
                                            container: ...;
                                            none: ...;
                                            process: ...;
                                            "virtual-machine": ...;
                                        },
                                    >;
                                    platform: ZodString;
                                },
                                $strip,
                            >,
                        >;
                        evidence_id: ZodString;
                        evidence_links: ZodArray<ZodString>;
                        limitations: ZodArray<ZodString>;
                        locations: ZodArray<
                            ZodDiscriminatedUnion<
                                [
                                    ZodObject<{ address: ...; kind: ... }, $strip>,
                                    ZodObject<{ end: ...; kind: ...; start: ... }, $strip>,
                                    ZodObject<{ kind: ...; path: ... }, $strip>,
                                    ZodObject<{ kind: ...; offset: ... }, $strip>,
                                    ZodObject<{ end: ...; kind: ...; start: ... }, $strip>,
                                ],
                                "kind",
                            >,
                        >;
                        normalized_result: ZodJSONSchema;
                        operation: ZodString;
                        parameters: ZodRecord<ZodString, ZodJSONSchema>;
                        predicate_type: ZodString;
                        provider: ZodObject<
                            {
                                id: ZodString;
                                name: ZodString;
                                version: ZodNullable<ZodString>;
                            },
                            $strip,
                        >;
                        raw_result: ZodNullable<ZodJSONSchema>;
                        schema_version: ZodLiteral<2>;
                        subject: ZodNullable<
                            ZodObject<
                                {
                                    architecture: ZodNullable<ZodEnum<(...)>>;
                                    digest: ZodObject<{ sha256: ... }, $strip>;
                                    format: ZodEnum<
                                        {
                                            "analysis-database": ...;
                                            apk: ...;
                                            asar: ...;
                                            directory: ...;
                                            dmg: ...;
                                            elf: ...;
                                            entitlements: ...;
                                            file: ...;
                                            hopper: ...;
                                            ipa: ...;
                                            javascript: ...;
                                            "javascript-bundle": ...;
                                            "mach-o": ...;
                                            "mach-o-universal": ...;
                                            pe: ...;
                                            pkg: ...;
                                            plist: ...;
                                            "source-map": ...;
                                            unknown: ...;
                                            zip: ...;
                                        },
                                    >;
                                    local_path: ZodString;
                                    name: ZodString;
                                },
                                $strip,
                            >,
                        >;
                    },
                    $strict,
                >;
                right_native_observations: ZodDefault<
                    ZodArray<
                        ZodObject<
                            {
                                analysis_profile: ZodOptional<
                                    ZodObject<
                                        {
                                            digest: ...;
                                            parameters: ...;
                                            provider: ...;
                                            provider_profile_schema_version: ...;
                                            schema_version: ...;
                                        },
                                        $strip,
                                    >,
                                >;
                                authority: ZodEnum<
                                    {
                                        "analyst-inference": "analyst-inference";
                                        "controlled-replay": "controlled-replay";
                                        "external-service": "external-service";
                                        "historical-reference": "historical-reference";
                                        "shipped-artifact": "shipped-artifact";
                                    },
                                >;
                                confidence: ZodEnum<
                                    {
                                        derived: "derived";
                                        inferred: "inferred";
                                        observed: "observed";
                                    },
                                >;
                                environment: ZodNullable<
                                    ZodObject<
                                        { architecture: ...; id: ...; isolation: ...; platform: ... },
                                        $strip,
                                    >,
                                >;
                                evidence_id: ZodString;
                                evidence_links: ZodArray<ZodString>;
                                limitations: ZodArray<ZodString>;
                                locations: ZodArray<
                                    ZodDiscriminatedUnion<
                                        [(...), (...), (...), (...), (...)],
                                        "kind",
                                    >,
                                >;
                                normalized_result: ZodJSONSchema;
                                operation: ZodString;
                                parameters: ZodRecord<ZodString, ZodJSONSchema>;
                                predicate_type: ZodString;
                                provider: ZodObject<
                                    { id: ZodString; name: ZodString; version: ZodNullable<(...)> },
                                    $strip,
                                >;
                                raw_result: ZodNullable<ZodJSONSchema>;
                                schema_version: ZodLiteral<2>;
                                subject: ZodNullable<
                                    ZodObject<
                                        {
                                            architecture: ...;
                                            digest: ...;
                                            format: ...;
                                            local_path: ...;
                                            name: ...;
                                        },
                                        $strip,
                                    >,
                                >;
                            },
                            $strict,
                        >,
                    >,
                >;
                unknown_registry_approved: ZodOptional<ZodLiteral<true>>;
            },
            $strict,
        >;
        kind: "application";
        name: "compare_application_versions";
        outputSchema: ZodObject<
            {
                evidence_id: ZodString;
                evidence_uri: ZodString;
                result: ZodType<unknown, unknown, $ZodTypeInternals<unknown, unknown>>;
            },
            $strict,
        >;
        title: string;
    },
    {
        annotations: DerivedToolAnnotations;
        description: "Plan or execute a content-bound extracted-module JavaScript replay inside the Linux Bubblewrap, seccomp, and cgroup boundary. Execution requires approved: true and the exact plan digest. Supports deterministic boundary cases and optional left/right differential comparison; observations have controlled-replay authority and do not claim real application runtime behavior.";
        effects: ToolEffects;
        examples: readonly [
            {
                input: {
                    approved: false;
                    cases: [{ arguments: [""]; case_id: "empty" }];
                    determinism: {
                        clock_iso: "2000-01-01T00:00:00.000Z";
                        locale: "en-US";
                        platform: "linux";
                        random_seed: 0;
                        timezone: "UTC";
                    };
                    left: {
                        entry_alias: "parser";
                        entry_export: "default";
                        modules: [
                            {
                                alias: "parser";
                                dependencies: {};
                                format: "esm";
                                path: "/approved/parser.mjs";
                                role: "module";
                            },
                        ];
                    };
                    limits: {
                        cpu_quota_percent: 50;
                        input_bytes: 262144;
                        memory_bytes: 134217728;
                        module_bytes: 4194304;
                        output_bytes: 524288;
                        protocol_bytes: 16777216;
                        result_depth: 16;
                        result_nodes: 10000;
                        stderr_bytes: 32768;
                        tasks: 8;
                        tmpfs_bytes: 16777216;
                        wall_time_ms: 3000;
                    };
                    mode: "plan";
                };
                title: "Plan one extracted ESM parser replay";
            },
        ];
        inputSchema: ZodObject<
            {
                approved: ZodDefault<ZodBoolean>;
                cases: ZodDefault<
                    ZodArray<
                        ZodObject<
                            { arguments: ZodArray<ZodJSONSchema>; case_id: ZodString },
                            $strict,
                        >,
                    >,
                >;
                determinism: ZodDefault<
                    ZodObject<
                        {
                            clock_iso: ZodDefault<ZodISODateTime>;
                            locale: ZodDefault<ZodLiteral<"en-US">>;
                            platform: ZodDefault<ZodLiteral<"linux">>;
                            random_seed: ZodDefault<ZodNumber>;
                            timezone: ZodDefault<ZodLiteral<"UTC">>;
                        },
                        $strict,
                    >,
                >;
                generator: ZodOptional<
                    ZodObject<
                        {
                            count: ZodNumber;
                            preset: ZodEnum<
                                {
                                    "clipboard-boundaries": "clipboard-boundaries";
                                    "parser-boundaries": "parser-boundaries";
                                    "sanitizer-boundaries": "sanitizer-boundaries";
                                },
                            >;
                            seed: ZodNumber;
                        },
                        $strict,
                    >,
                >;
                left: ZodObject<
                    {
                        entry_alias: ZodString;
                        entry_export: ZodDefault<ZodString>;
                        modules: ZodArray<
                            ZodObject<
                                {
                                    alias: ZodString;
                                    dependencies: ZodDefault<ZodRecord<(...), (...)>>;
                                    format: ZodEnum<{ "commonjs-factory": ...; esm: ... }>;
                                    path: ZodString;
                                    role: ZodDefault<ZodEnum<(...)>>;
                                },
                                $strict,
                            >,
                        >;
                    },
                    $strict,
                >;
                limits: ZodDefault<
                    ZodObject<
                        {
                            cpu_quota_percent: ZodDefault<ZodNumber>;
                            input_bytes: ZodDefault<ZodNumber>;
                            memory_bytes: ZodDefault<ZodNumber>;
                            module_bytes: ZodDefault<ZodNumber>;
                            output_bytes: ZodDefault<ZodNumber>;
                            protocol_bytes: ZodDefault<ZodNumber>;
                            result_depth: ZodDefault<ZodNumber>;
                            result_nodes: ZodDefault<ZodNumber>;
                            stderr_bytes: ZodDefault<ZodNumber>;
                            tasks: ZodDefault<ZodNumber>;
                            tmpfs_bytes: ZodDefault<ZodNumber>;
                            wall_time_ms: ZodDefault<ZodNumber>;
                        },
                        $strict,
                    >,
                >;
                mode: ZodEnum<{ execute: "execute"; plan: "plan" }>;
                plan_digest: ZodOptional<ZodString>;
                reproducer_export: ZodOptional<
                    ZodObject<
                        {
                            approved: ZodBoolean;
                            include_sources: ZodDefault<ZodBoolean>;
                            path: ZodString;
                        },
                        $strict,
                    >,
                >;
                right: ZodOptional<
                    ZodObject<
                        {
                            entry_alias: ZodString;
                            entry_export: ZodDefault<ZodString>;
                            modules: ZodArray<
                                ZodObject<
                                    {
                                        alias: ZodString;
                                        dependencies: ZodDefault<(...)>;
                                        format: ZodEnum<(...)>;
                                        path: ZodString;
                                        role: ZodDefault<(...)>;
                                    },
                                    $strict,
                                >,
                            >;
                        },
                        $strict,
                    >,
                >;
            },
            $strict,
        >;
        kind: "application";
        name: "run_controlled_replay";
        outputSchema: ZodObject<
            {
                evidence: ZodNullable<
                    ZodObject<
                        {
                            analysis_profile: ZodOptional<
                                ZodObject<
                                    {
                                        digest: ZodString;
                                        parameters: ZodRecord<(...), (...)>;
                                        provider: ZodObject<(...), (...)>;
                                        provider_profile_schema_version: ZodNumber;
                                        schema_version: ZodLiteral<(...)>;
                                    },
                                    $strip,
                                >,
                            >;
                            authority: ZodEnum<
                                {
                                    "analyst-inference": "analyst-inference";
                                    "controlled-replay": "controlled-replay";
                                    "external-service": "external-service";
                                    "historical-reference": "historical-reference";
                                    "shipped-artifact": "shipped-artifact";
                                },
                            >;
                            confidence: ZodEnum<
                                {
                                    derived: "derived";
                                    inferred: "inferred";
                                    observed: "observed";
                                },
                            >;
                            environment: ZodNullable<
                                ZodObject<
                                    {
                                        architecture: ZodString;
                                        id: ZodString;
                                        isolation: ZodEnum<(...)>;
                                        platform: ZodString;
                                    },
                                    $strip,
                                >,
                            >;
                            evidence_id: ZodString;
                            evidence_links: ZodArray<ZodString>;
                            limitations: ZodArray<ZodString>;
                            locations: ZodArray<
                                ZodDiscriminatedUnion<
                                    [
                                        ZodObject<(...), (...)>,
                                        ZodObject<(...), (...)>,
                                        ZodObject<(...), (...)>,
                                        ZodObject<(...), (...)>,
                                        ZodObject<(...), (...)>,
                                    ],
                                    "kind",
                                >,
                            >;
                            normalized_result: ZodObject<
                                {
                                    cleanup: ZodObject<
                                        { residual_resources: ...; state: ... },
                                        $strict,
                                    >;
                                    comparison: ZodOptional<ZodArray<(...)>>;
                                    limitations: ZodArray<ZodString>;
                                    outcomes: ZodArray<ZodObject<(...), (...)>>;
                                    plan_digest: ZodString;
                                    reproducer: ZodNullable<ZodDiscriminatedUnion<(...), (...)>>;
                                    schema_version: ZodLiteral<1>;
                                    stderr: ZodString;
                                    termination: ZodEnum<
                                        {
                                            cancelled: ...;
                                            completed: ...;
                                            crash: ...;
                                            oom: ...;
                                            protocol_error: ...;
                                            timeout: ...;
                                        },
                                    >;
                                },
                                $strict,
                            >;
                            operation: ZodString;
                            parameters: ZodRecord<ZodString, ZodJSONSchema>;
                            predicate_type: ZodString;
                            provider: ZodObject<
                                {
                                    id: ZodString;
                                    name: ZodString;
                                    version: ZodNullable<ZodString>;
                                },
                                $strip,
                            >;
                            raw_result: ZodNullable<ZodJSONSchema>;
                            schema_version: ZodLiteral<2>;
                            subject: ZodNullable<
                                ZodObject<
                                    {
                                        architecture: ZodNullable<(...)>;
                                        digest: ZodObject<(...), (...)>;
                                        format: ZodEnum<(...)>;
                                        local_path: ZodString;
                                        name: ZodString;
                                    },
                                    $strip,
                                >,
                            >;
                        },
                        $strict,
                    >,
                >;
                phase: ZodEnum<{ execute: "execute"; plan: "plan" }>;
                plan: ZodNullable<
                    ZodObject<
                        {
                            cases: ZodArray<
                                ZodObject<
                                    {
                                        arguments: ZodArray<(...)>;
                                        case_id: ZodString;
                                        sha256: ZodString;
                                    },
                                    $strict,
                                >,
                            >;
                            determinism: ZodObject<
                                {
                                    clock_iso: ZodDefault<ZodISODateTime>;
                                    locale: ZodDefault<ZodLiteral<(...)>>;
                                    platform: ZodDefault<ZodLiteral<(...)>>;
                                    random_seed: ZodDefault<ZodNumber>;
                                    timezone: ZodDefault<ZodLiteral<(...)>>;
                                },
                                $strict,
                            >;
                            effects: ZodArray<ZodString>;
                            filesystem: ZodObject<
                                {
                                    host_writes: ZodLiteral<false>;
                                    private_tmpfs_bytes: ZodNumber;
                                },
                                $strict,
                            >;
                            left: ZodObject<
                                {
                                    entry_alias: ZodString;
                                    entry_export: ZodString;
                                    modules: ZodArray<ZodObject<(...), (...)>>;
                                },
                                $strict,
                            >;
                            limits: ZodObject<
                                {
                                    cpu_quota_percent: ZodDefault<ZodNumber>;
                                    input_bytes: ZodDefault<ZodNumber>;
                                    memory_bytes: ZodDefault<ZodNumber>;
                                    module_bytes: ZodDefault<ZodNumber>;
                                    output_bytes: ZodDefault<ZodNumber>;
                                    protocol_bytes: ZodDefault<ZodNumber>;
                                    result_depth: ZodDefault<ZodNumber>;
                                    result_nodes: ZodDefault<ZodNumber>;
                                    stderr_bytes: ZodDefault<ZodNumber>;
                                    tasks: ZodDefault<ZodNumber>;
                                    tmpfs_bytes: ZodDefault<ZodNumber>;
                                    wall_time_ms: ZodDefault<ZodNumber>;
                                },
                                $strict,
                            >;
                            network: ZodLiteral<"none">;
                            plan_digest: ZodString;
                            policy_sha256: ZodString;
                            policy_version: ZodLiteral<"linux-bwrap-systemd-v1">;
                            reproducer_export: ZodNullable<
                                ZodObject<
                                    {
                                        authority: ZodLiteral<(...)>;
                                        include_sources: ZodBoolean;
                                        path: ZodString;
                                    },
                                    $strict,
                                >,
                            >;
                            right: ZodOptional<
                                ZodObject<
                                    {
                                        entry_alias: ZodString;
                                        entry_export: ZodString;
                                        modules: ZodArray<(...)>;
                                    },
                                    $strict,
                                >,
                            >;
                            runtime: ZodObject<
                                {
                                    executable: ZodObject<
                                        { path: ...; sha256: ...; version: ... },
                                        $strict,
                                    >;
                                    read_only_files: ZodArray<ZodObject<(...), (...)>>;
                                    worker: ZodObject<
                                        { path: ...; sha256: ...; version: ... },
                                        $strict,
                                    >;
                                },
                                $strict,
                            >;
                            sandbox: ZodObject<
                                {
                                    bubblewrap: ZodObject<
                                        { path: ...; sha256: ...; version: ... },
                                        $strict,
                                    >;
                                    seccomp_sha256: ZodString;
                                    shell: ZodObject<{ path: ...; sha256: ...; version: ... }, $strict>;
                                    systemctl: ZodObject<
                                        { path: ...; sha256: ...; version: ... },
                                        $strict,
                                    >;
                                    systemd_run: ZodObject<
                                        { path: ...; sha256: ...; version: ... },
                                        $strict,
                                    >;
                                },
                                $strict,
                            >;
                            schema_version: ZodLiteral<1>;
                        },
                        $strict,
                    >,
                >;
                source_evidence: ZodArray<
                    ZodObject<
                        {
                            analysis_profile: ZodOptional<
                                ZodObject<
                                    {
                                        digest: ZodString;
                                        parameters: ZodRecord<(...), (...)>;
                                        provider: ZodObject<(...), (...)>;
                                        provider_profile_schema_version: ZodNumber;
                                        schema_version: ZodLiteral<(...)>;
                                    },
                                    $strip,
                                >,
                            >;
                            authority: ZodEnum<
                                {
                                    "analyst-inference": "analyst-inference";
                                    "controlled-replay": "controlled-replay";
                                    "external-service": "external-service";
                                    "historical-reference": "historical-reference";
                                    "shipped-artifact": "shipped-artifact";
                                },
                            >;
                            confidence: ZodEnum<
                                {
                                    derived: "derived";
                                    inferred: "inferred";
                                    observed: "observed";
                                },
                            >;
                            environment: ZodNullable<
                                ZodObject<
                                    {
                                        architecture: ZodString;
                                        id: ZodString;
                                        isolation: ZodEnum<(...)>;
                                        platform: ZodString;
                                    },
                                    $strip,
                                >,
                            >;
                            evidence_id: ZodString;
                            evidence_links: ZodArray<ZodString>;
                            limitations: ZodArray<ZodString>;
                            locations: ZodArray<
                                ZodDiscriminatedUnion<
                                    [
                                        ZodObject<(...), (...)>,
                                        ZodObject<(...), (...)>,
                                        ZodObject<(...), (...)>,
                                        ZodObject<(...), (...)>,
                                        ZodObject<(...), (...)>,
                                    ],
                                    "kind",
                                >,
                            >;
                            normalized_result: ZodObject<
                                {
                                    cleanup: ZodObject<
                                        { residual_resources: ...; state: ... },
                                        $strict,
                                    >;
                                    comparison: ZodOptional<ZodArray<(...)>>;
                                    limitations: ZodArray<ZodString>;
                                    outcomes: ZodArray<ZodObject<(...), (...)>>;
                                    plan_digest: ZodString;
                                    reproducer: ZodNullable<ZodDiscriminatedUnion<(...), (...)>>;
                                    schema_version: ZodLiteral<1>;
                                    stderr: ZodString;
                                    termination: ZodEnum<
                                        {
                                            cancelled: ...;
                                            completed: ...;
                                            crash: ...;
                                            oom: ...;
                                            protocol_error: ...;
                                            timeout: ...;
                                        },
                                    >;
                                },
                                $strict,
                            >;
                            operation: ZodString;
                            parameters: ZodRecord<ZodString, ZodJSONSchema>;
                            predicate_type: ZodString;
                            provider: ZodObject<
                                {
                                    id: ZodString;
                                    name: ZodString;
                                    version: ZodNullable<ZodString>;
                                },
                                $strip,
                            >;
                            raw_result: ZodNullable<ZodJSONSchema>;
                            schema_version: ZodLiteral<2>;
                            subject: ZodNullable<
                                ZodObject<
                                    {
                                        architecture: ZodNullable<(...)>;
                                        digest: ZodObject<(...), (...)>;
                                        format: ZodEnum<(...)>;
                                        local_path: ZodString;
                                        name: ZodString;
                                    },
                                    $strip,
                                >,
                            >;
                        },
                        $strict,
                    >,
                >;
            },
            $strict,
        >;
        title: string;
    },
] = ...

Provider-neutral graph workflow contracts shared by MCP and CLI adapters.

Variable APPLICATION_TOOL_CONTRACTSConst

Settings

Variable APPLICATION_TOOL_CONTRACTS`Const`