Variable APPLICATION_TOOL_CONTRACTSConst
APPLICATION_TOOL_CONTRACTS: readonly [
{
annotations: {
destructiveHint: false;
idempotentHint: true;
openWorldHint: false;
readOnlyHint: true;
};
description: "Trace a typed literal seed through an authenticated JavaScript Application Graph with explicit direction, depth, node, edge, and path bounds. Original static, native, passive-runtime, inferred, and unknown authorities remain distinct; native addon handoffs never open a provider or execute the application.";
examples: readonly [
{
input: {
application: | {
analysis_profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
| {
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
};
direction: "both";
seed: {
case_sensitive: boolean;
kind: "module";
match: "exact";
value: string;
};
};
title: "Trace one module seed through a retained application graph";
},
];
inputSchema: ZodObject<
{
application: ZodObject<
{
analysis_profile: ZodOptional<
ZodObject<
{
digest: ZodString;
parameters: ZodRecord<ZodString, ZodJSONSchema>;
provider: ZodObject<{ id: ...; name: ...; version: ... }, $strip>;
provider_profile_schema_version: ZodNumber;
schema_version: ZodLiteral<1>;
},
$strip,
>,
>;
authority: ZodEnum<
{
"analyst-inference": "analyst-inference";
"controlled-replay": "controlled-replay";
"external-service": "external-service";
"historical-reference": "historical-reference";
"shipped-artifact": "shipped-artifact";
},
>;
confidence: ZodEnum<
{ derived: "derived"; inferred: "inferred"; observed: "observed" },
>;
environment: ZodNullable<
ZodObject<
{
architecture: ZodString;
id: ZodString;
isolation: ZodEnum<
{
container: ...;
none: ...;
process: ...;
"virtual-machine": ...;
},
>;
platform: ZodString;
},
$strip,
>,
>;
evidence_id: ZodString;
evidence_links: ZodArray<ZodString>;
limitations: ZodArray<ZodString>;
locations: ZodArray<
ZodDiscriminatedUnion<
[
ZodObject<{ address: ...; kind: ... }, $strip>,
ZodObject<{ end: ...; kind: ...; start: ... }, $strip>,
ZodObject<{ kind: ...; path: ... }, $strip>,
ZodObject<{ kind: ...; offset: ... }, $strip>,
ZodObject<{ end: ...; kind: ...; start: ... }, $strip>,
],
"kind",
>,
>;
normalized_result: ZodJSONSchema;
operation: ZodString;
parameters: ZodRecord<ZodString, ZodJSONSchema>;
predicate_type: ZodString;
provider: ZodObject<
{
id: ZodString;
name: ZodString;
version: ZodNullable<ZodString>;
},
$strip,
>;
raw_result: ZodNullable<ZodJSONSchema>;
schema_version: ZodLiteral<2>;
subject: ZodNullable<
ZodObject<
{
architecture: ZodNullable<ZodEnum<(...)>>;
digest: ZodObject<{ sha256: ... }, $strip>;
format: ZodEnum<
{
"analysis-database": ...;
apk: ...;
asar: ...;
directory: ...;
dmg: ...;
elf: ...;
entitlements: ...;
file: ...;
hopper: ...;
ipa: ...;
javascript: ...;
"javascript-bundle": ...;
"mach-o": ...;
"mach-o-universal": ...;
pe: ...;
pkg: ...;
plist: ...;
"source-map": ...;
unknown: ...;
zip: ...;
},
>;
local_path: ZodString;
name: ZodString;
},
$strip,
>,
>;
},
$strict,
>;
direction: ZodDefault<
ZodEnum<
{ both: "both"; incoming: "incoming"; outgoing: "outgoing" },
>,
>;
limits: ZodDefault<
ZodObject<
{
max_depth: ZodDefault<ZodNumber>;
max_edges: ZodDefault<ZodNumber>;
max_nodes: ZodDefault<ZodNumber>;
max_paths: ZodDefault<ZodNumber>;
max_seed_matches: ZodDefault<ZodNumber>;
},
$strict,
>,
>;
native_observations: ZodDefault<
ZodArray<
ZodObject<
{
analysis_profile: ZodOptional<
ZodObject<
{
digest: ...;
parameters: ...;
provider: ...;
provider_profile_schema_version: ...;
schema_version: ...;
},
$strip,
>,
>;
authority: ZodEnum<
{
"analyst-inference": "analyst-inference";
"controlled-replay": "controlled-replay";
"external-service": "external-service";
"historical-reference": "historical-reference";
"shipped-artifact": "shipped-artifact";
},
>;
confidence: ZodEnum<
{
derived: "derived";
inferred: "inferred";
observed: "observed";
},
>;
environment: ZodNullable<
ZodObject<
{ architecture: ...; id: ...; isolation: ...; platform: ... },
$strip,
>,
>;
evidence_id: ZodString;
evidence_links: ZodArray<ZodString>;
limitations: ZodArray<ZodString>;
locations: ZodArray<
ZodDiscriminatedUnion<
[(...), (...), (...), (...), (...)],
"kind",
>,
>;
normalized_result: ZodJSONSchema;
operation: ZodString;
parameters: ZodRecord<ZodString, ZodJSONSchema>;
predicate_type: ZodString;
provider: ZodObject<
{ id: ZodString; name: ZodString; version: ZodNullable<(...)> },
$strip,
>;
raw_result: ZodNullable<ZodJSONSchema>;
schema_version: ZodLiteral<2>;
subject: ZodNullable<
ZodObject<
{
architecture: ...;
digest: ...;
format: ...;
local_path: ...;
name: ...;
},
$strip,
>,
>;
},
$strict,
>,
>,
>;
seed: ZodObject<
{
case_sensitive: ZodDefault<ZodBoolean>;
kind: ZodEnum<
{
api: "api";
channel: "channel";
module: "module";
"native-export": "native-export";
"node-id": "node-id";
route: "route";
string: "string";
},
>;
match: ZodDefault<
ZodNullable<ZodEnum<{ contains: "contains"; exact: "exact" }>>,
>;
value: ZodString;
},
$strict,
>;
},
$strict,
>;
kind: "application";
name: "trace_application_feature";
outputSchema: ZodObject<
{
analysis_profile: ZodOptional<
ZodObject<
{
digest: ZodString;
parameters: ZodRecord<ZodString, ZodJSONSchema>;
provider: ZodObject<
{ id: ZodString; name: ZodString; version: ZodString },
$strip,
>;
provider_profile_schema_version: ZodNumber;
schema_version: ZodLiteral<1>;
},
$strip,
>,
>;
authority: ZodEnum<
{
"analyst-inference": "analyst-inference";
"controlled-replay": "controlled-replay";
"external-service": "external-service";
"historical-reference": "historical-reference";
"shipped-artifact": "shipped-artifact";
},
>;
confidence: ZodEnum<
{ derived: "derived"; inferred: "inferred"; observed: "observed" },
>;
environment: ZodNullable<
ZodObject<
{
architecture: ZodString;
id: ZodString;
isolation: ZodEnum<
{
container: "container";
none: "none";
process: "process";
"virtual-machine": "virtual-machine";
},
>;
platform: ZodString;
},
$strip,
>,
>;
evidence_id: ZodString;
evidence_links: ZodArray<ZodString>;
limitations: ZodArray<ZodString>;
locations: ZodArray<
ZodDiscriminatedUnion<
[
ZodObject<
{ address: ZodString; kind: ZodLiteral<"address"> },
$strip,
>,
ZodObject<
{
end: ZodString;
kind: ZodLiteral<"address-range">;
start: ZodString;
},
$strip,
>,
ZodObject<
{ kind: ZodLiteral<"artifact-path">; path: ZodString },
$strip,
>,
ZodObject<
{ kind: ZodLiteral<"file-offset">; offset: ZodNumber },
$strip,
>,
ZodObject<
{
end: ZodNumber;
kind: ZodLiteral<"file-offset-range">;
start: ZodNumber;
},
$strip,
>,
],
"kind",
>,
>;
normalized_result: ZodObject<
{
coverage: ZodObject<
{
frontier_node_ids: ZodArray<ZodString>;
omitted_edges: ZodNumber;
omitted_nodes: ZodNumber;
omitted_paths: ZodNumber;
omitted_seed_matches: ZodNumber;
scanned_nodes: ZodNumber;
source_graph_status: ZodEnum<
{
complete: "complete";
partial: "partial";
unavailable: "unavailable";
unknown: "unknown";
},
>;
status: ZodEnum<
{
"complete-within-source": "complete-within-source";
"no-match": "no-match";
partial: "partial";
truncated: "truncated";
},
>;
total_seed_matches: ZodNumber;
},
$strict,
>;
direction: ZodEnum<
{ both: "both"; incoming: "incoming"; outgoing: "outgoing" },
>;
evidence_links: ZodArray<ZodString>;
graph: ZodNullable<
ZodObject<
{
coverage: ZodObject<
{
limits: ...;
omitted_count: ...;
status: ...;
truncated: ...;
},
$strict,
>;
edges: ZodArray<ZodObject<(...), (...)>>;
graph_id: ZodString;
limitations: ZodArray<ZodString>;
nodes: ZodArray<ZodObject<(...), (...)>>;
root_node_ids: ZodArray<ZodString>;
schema: ZodLiteral<"JavaScriptApplicationGraph">;
schema_version: ZodLiteral<1>;
},
$strict,
>,
>;
limitations: ZodArray<ZodString>;
native_handoffs: ZodArray<
ZodObject<
{
artifact_path: ZodNullable<ZodString>;
artifact_sha256: ZodString;
evidence_ids: ZodArray<ZodString>;
export_node_ids: ZodArray<ZodString>;
native_node_id: ZodString;
providers: ZodArray<ZodObject<(...), (...)>>;
recommended_tools: ZodArray<ZodEnum<(...)>>;
requested_exports: ZodArray<ZodString>;
status: ZodEnum<
{ "evidence-linked": ...; "requires-provider-analysis": ... },
>;
},
$strict,
>,
>;
paths: ZodArray<
ZodObject<
{
authorities: ZodArray<ZodString>;
contains_inference: ZodBoolean;
edge_ids: ZodArray<ZodString>;
end_kind: ZodString;
end_node_id: ZodString;
node_ids: ZodArray<ZodString>;
path_id: ZodString;
start_node_id: ZodString;
},
$strict,
>,
>;
schema_version: ZodLiteral<1>;
seed: ZodObject<
{
case_sensitive: ZodDefault<ZodBoolean>;
kind: ZodEnum<
{
api: "api";
channel: "channel";
module: "module";
"native-export": "native-export";
"node-id": "node-id";
route: "route";
string: "string";
},
>;
match: ZodDefault<ZodNullable<ZodEnum<(...)>>>;
value: ZodString;
},
$strict,
>;
seed_matches: ZodArray<
ZodObject<
{
basis: ZodEnum<
{ identity: ...; label: ...; "node-id": ...; property: ... },
>;
field: ZodString;
kind: ZodString;
node_id: ZodString;
},
$strict,
>,
>;
source_evidence_id: ZodString;
source_graph_id: ZodString;
summary: ZodObject<
{
inferred_facts: ZodNumber;
matched_seeds: ZodNumber;
native_handoffs: ZodNumber;
observed_facts: ZodNumber;
terminal_paths: ZodNumber;
traced_edges: ZodNumber;
traced_nodes: ZodNumber;
unavailable_facts: ZodNumber;
unknown_facts: ZodNumber;
},
$strict,
>;
trace_id: ZodString;
},
$strict,
>;
operation: ZodString;
parameters: ZodRecord<ZodString, ZodJSONSchema>;
predicate_type: ZodString;
provider: ZodObject<
{ id: ZodString; name: ZodString; version: ZodNullable<ZodString> },
$strip,
>;
raw_result: ZodNullable<ZodJSONSchema>;
schema_version: ZodLiteral<2>;
subject: ZodNullable<
ZodObject<
{
architecture: ZodNullable<
ZodEnum<
{ arm: "arm"; arm64: "arm64"; x86: "x86"; x86_64: "x86_64" },
>,
>;
digest: ZodObject<{ sha256: ZodString }, $strip>;
format: ZodEnum<
{
"analysis-database": "analysis-database";
apk: "apk";
asar: "asar";
directory: "directory";
dmg: "dmg";
elf: "elf";
entitlements: "entitlements";
file: "file";
hopper: "hopper";
ipa: "ipa";
javascript: "javascript";
"javascript-bundle": "javascript-bundle";
"mach-o": "mach-o";
"mach-o-universal": "mach-o-universal";
pe: "pe";
pkg: "pkg";
plist: "plist";
"source-map": "source-map";
unknown: "unknown";
zip: "zip";
},
>;
local_path: ZodString;
name: ZodString;
},
$strip,
>,
>;
},
$strict,
>;
},
{
annotations: {
destructiveHint: false;
idempotentHint: true;
openWorldHint: false;
readOnlyHint: true;
};
description: "Compare two authenticated JavaScript Application Graph versions using unique-only exact digest, module source digest, source-map identity, structural fingerprint, and non-module semantic-key tiers. Reports added, removed, changed, ambiguous, and unknown entities plus a bounded changed_from graph without fuzzy or module-ordinal pairing.";
examples: readonly [
{
input: {
left: | {
analysis_profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
| {
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
};
right: | {
analysis_profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
| {
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
};
};
title: "Compare authenticated static and reconciled application graphs";
},
];
inputSchema: ZodObject<
{
left: ZodObject<
{
analysis_profile: ZodOptional<
ZodObject<
{
digest: ZodString;
parameters: ZodRecord<ZodString, ZodJSONSchema>;
provider: ZodObject<{ id: ...; name: ...; version: ... }, $strip>;
provider_profile_schema_version: ZodNumber;
schema_version: ZodLiteral<1>;
},
$strip,
>,
>;
authority: ZodEnum<
{
"analyst-inference": "analyst-inference";
"controlled-replay": "controlled-replay";
"external-service": "external-service";
"historical-reference": "historical-reference";
"shipped-artifact": "shipped-artifact";
},
>;
confidence: ZodEnum<
{ derived: "derived"; inferred: "inferred"; observed: "observed" },
>;
environment: ZodNullable<
ZodObject<
{
architecture: ZodString;
id: ZodString;
isolation: ZodEnum<
{
container: ...;
none: ...;
process: ...;
"virtual-machine": ...;
},
>;
platform: ZodString;
},
$strip,
>,
>;
evidence_id: ZodString;
evidence_links: ZodArray<ZodString>;
limitations: ZodArray<ZodString>;
locations: ZodArray<
ZodDiscriminatedUnion<
[
ZodObject<{ address: ...; kind: ... }, $strip>,
ZodObject<{ end: ...; kind: ...; start: ... }, $strip>,
ZodObject<{ kind: ...; path: ... }, $strip>,
ZodObject<{ kind: ...; offset: ... }, $strip>,
ZodObject<{ end: ...; kind: ...; start: ... }, $strip>,
],
"kind",
>,
>;
normalized_result: ZodJSONSchema;
operation: ZodString;
parameters: ZodRecord<ZodString, ZodJSONSchema>;
predicate_type: ZodString;
provider: ZodObject<
{
id: ZodString;
name: ZodString;
version: ZodNullable<ZodString>;
},
$strip,
>;
raw_result: ZodNullable<ZodJSONSchema>;
schema_version: ZodLiteral<2>;
subject: ZodNullable<
ZodObject<
{
architecture: ZodNullable<ZodEnum<(...)>>;
digest: ZodObject<{ sha256: ... }, $strip>;
format: ZodEnum<
{
"analysis-database": ...;
apk: ...;
asar: ...;
directory: ...;
dmg: ...;
elf: ...;
entitlements: ...;
file: ...;
hopper: ...;
ipa: ...;
javascript: ...;
"javascript-bundle": ...;
"mach-o": ...;
"mach-o-universal": ...;
pe: ...;
pkg: ...;
plist: ...;
"source-map": ...;
unknown: ...;
zip: ...;
},
>;
local_path: ZodString;
name: ZodString;
},
$strip,
>,
>;
},
$strict,
>;
left_native_observations: ZodDefault<
ZodArray<
ZodObject<
{
analysis_profile: ZodOptional<
ZodObject<
{
digest: ...;
parameters: ...;
provider: ...;
provider_profile_schema_version: ...;
schema_version: ...;
},
$strip,
>,
>;
authority: ZodEnum<
{
"analyst-inference": "analyst-inference";
"controlled-replay": "controlled-replay";
"external-service": "external-service";
"historical-reference": "historical-reference";
"shipped-artifact": "shipped-artifact";
},
>;
confidence: ZodEnum<
{
derived: "derived";
inferred: "inferred";
observed: "observed";
},
>;
environment: ZodNullable<
ZodObject<
{ architecture: ...; id: ...; isolation: ...; platform: ... },
$strip,
>,
>;
evidence_id: ZodString;
evidence_links: ZodArray<ZodString>;
limitations: ZodArray<ZodString>;
locations: ZodArray<
ZodDiscriminatedUnion<
[(...), (...), (...), (...), (...)],
"kind",
>,
>;
normalized_result: ZodJSONSchema;
operation: ZodString;
parameters: ZodRecord<ZodString, ZodJSONSchema>;
predicate_type: ZodString;
provider: ZodObject<
{ id: ZodString; name: ZodString; version: ZodNullable<(...)> },
$strip,
>;
raw_result: ZodNullable<ZodJSONSchema>;
schema_version: ZodLiteral<2>;
subject: ZodNullable<
ZodObject<
{
architecture: ...;
digest: ...;
format: ...;
local_path: ...;
name: ...;
},
$strip,
>,
>;
},
$strict,
>,
>,
>;
limits: ZodDefault<
ZodObject<
{
max_candidate_nodes: ZodDefault<ZodNumber>;
max_comparison_items: ZodDefault<ZodNumber>;
max_graph_edges: ZodDefault<ZodNumber>;
max_graph_nodes: ZodDefault<ZodNumber>;
},
$strict,
>,
>;
right: ZodObject<
{
analysis_profile: ZodOptional<
ZodObject<
{
digest: ZodString;
parameters: ZodRecord<ZodString, ZodJSONSchema>;
provider: ZodObject<{ id: ...; name: ...; version: ... }, $strip>;
provider_profile_schema_version: ZodNumber;
schema_version: ZodLiteral<1>;
},
$strip,
>,
>;
authority: ZodEnum<
{
"analyst-inference": "analyst-inference";
"controlled-replay": "controlled-replay";
"external-service": "external-service";
"historical-reference": "historical-reference";
"shipped-artifact": "shipped-artifact";
},
>;
confidence: ZodEnum<
{ derived: "derived"; inferred: "inferred"; observed: "observed" },
>;
environment: ZodNullable<
ZodObject<
{
architecture: ZodString;
id: ZodString;
isolation: ZodEnum<
{
container: ...;
none: ...;
process: ...;
"virtual-machine": ...;
},
>;
platform: ZodString;
},
$strip,
>,
>;
evidence_id: ZodString;
evidence_links: ZodArray<ZodString>;
limitations: ZodArray<ZodString>;
locations: ZodArray<
ZodDiscriminatedUnion<
[
ZodObject<{ address: ...; kind: ... }, $strip>,
ZodObject<{ end: ...; kind: ...; start: ... }, $strip>,
ZodObject<{ kind: ...; path: ... }, $strip>,
ZodObject<{ kind: ...; offset: ... }, $strip>,
ZodObject<{ end: ...; kind: ...; start: ... }, $strip>,
],
"kind",
>,
>;
normalized_result: ZodJSONSchema;
operation: ZodString;
parameters: ZodRecord<ZodString, ZodJSONSchema>;
predicate_type: ZodString;
provider: ZodObject<
{
id: ZodString;
name: ZodString;
version: ZodNullable<ZodString>;
},
$strip,
>;
raw_result: ZodNullable<ZodJSONSchema>;
schema_version: ZodLiteral<2>;
subject: ZodNullable<
ZodObject<
{
architecture: ZodNullable<ZodEnum<(...)>>;
digest: ZodObject<{ sha256: ... }, $strip>;
format: ZodEnum<
{
"analysis-database": ...;
apk: ...;
asar: ...;
directory: ...;
dmg: ...;
elf: ...;
entitlements: ...;
file: ...;
hopper: ...;
ipa: ...;
javascript: ...;
"javascript-bundle": ...;
"mach-o": ...;
"mach-o-universal": ...;
pe: ...;
pkg: ...;
plist: ...;
"source-map": ...;
unknown: ...;
zip: ...;
},
>;
local_path: ZodString;
name: ZodString;
},
$strip,
>,
>;
},
$strict,
>;
right_native_observations: ZodDefault<
ZodArray<
ZodObject<
{
analysis_profile: ZodOptional<
ZodObject<
{
digest: ...;
parameters: ...;
provider: ...;
provider_profile_schema_version: ...;
schema_version: ...;
},
$strip,
>,
>;
authority: ZodEnum<
{
"analyst-inference": "analyst-inference";
"controlled-replay": "controlled-replay";
"external-service": "external-service";
"historical-reference": "historical-reference";
"shipped-artifact": "shipped-artifact";
},
>;
confidence: ZodEnum<
{
derived: "derived";
inferred: "inferred";
observed: "observed";
},
>;
environment: ZodNullable<
ZodObject<
{ architecture: ...; id: ...; isolation: ...; platform: ... },
$strip,
>,
>;
evidence_id: ZodString;
evidence_links: ZodArray<ZodString>;
limitations: ZodArray<ZodString>;
locations: ZodArray<
ZodDiscriminatedUnion<
[(...), (...), (...), (...), (...)],
"kind",
>,
>;
normalized_result: ZodJSONSchema;
operation: ZodString;
parameters: ZodRecord<ZodString, ZodJSONSchema>;
predicate_type: ZodString;
provider: ZodObject<
{ id: ZodString; name: ZodString; version: ZodNullable<(...)> },
$strip,
>;
raw_result: ZodNullable<ZodJSONSchema>;
schema_version: ZodLiteral<2>;
subject: ZodNullable<
ZodObject<
{
architecture: ...;
digest: ...;
format: ...;
local_path: ...;
name: ...;
},
$strip,
>,
>;
},
$strict,
>,
>,
>;
unknown_registry_approved: ZodOptional<ZodLiteral<true>>;
},
$strict,
>;
kind: "application";
name: "compare_application_versions";
outputSchema: ZodObject<
{
analysis_profile: ZodOptional<
ZodObject<
{
digest: ZodString;
parameters: ZodRecord<ZodString, ZodJSONSchema>;
provider: ZodObject<
{ id: ZodString; name: ZodString; version: ZodString },
$strip,
>;
provider_profile_schema_version: ZodNumber;
schema_version: ZodLiteral<1>;
},
$strip,
>,
>;
authority: ZodEnum<
{
"analyst-inference": "analyst-inference";
"controlled-replay": "controlled-replay";
"external-service": "external-service";
"historical-reference": "historical-reference";
"shipped-artifact": "shipped-artifact";
},
>;
confidence: ZodEnum<
{ derived: "derived"; inferred: "inferred"; observed: "observed" },
>;
environment: ZodNullable<
ZodObject<
{
architecture: ZodString;
id: ZodString;
isolation: ZodEnum<
{
container: "container";
none: "none";
process: "process";
"virtual-machine": "virtual-machine";
},
>;
platform: ZodString;
},
$strip,
>,
>;
evidence_id: ZodString;
evidence_links: ZodArray<ZodString>;
limitations: ZodArray<ZodString>;
locations: ZodArray<
ZodDiscriminatedUnion<
[
ZodObject<
{ address: ZodString; kind: ZodLiteral<"address"> },
$strip,
>,
ZodObject<
{
end: ZodString;
kind: ZodLiteral<"address-range">;
start: ZodString;
},
$strip,
>,
ZodObject<
{ kind: ZodLiteral<"artifact-path">; path: ZodString },
$strip,
>,
ZodObject<
{ kind: ZodLiteral<"file-offset">; offset: ZodNumber },
$strip,
>,
ZodObject<
{
end: ZodNumber;
kind: ZodLiteral<"file-offset-range">;
start: ZodNumber;
},
$strip,
>,
],
"kind",
>,
>;
normalized_result: ZodObject<
{
comparison_id: ZodString;
coverage: ZodObject<
{
left_graph_status: ZodEnum<
{
complete: "complete";
partial: "partial";
unavailable: "unavailable";
unknown: "unknown";
},
>;
omitted_candidate_references: ZodNumber;
omitted_comparison_items: ZodNumber;
omitted_graph_edges: ZodNumber;
omitted_graph_nodes: ZodNumber;
omitted_graph_observations: ZodNumber;
right_graph_status: ZodEnum<
{
complete: "complete";
partial: "partial";
unavailable: "unavailable";
unknown: "unknown";
},
>;
status: ZodEnum<
{
"complete-within-inputs": "complete-within-inputs";
partial: "partial";
truncated: "truncated";
},
>;
},
$strict,
>;
evidence_links: ZodArray<ZodString>;
graph: ZodObject<
{
coverage: ZodObject<
{
limits: ZodArray<(...)>;
omitted_count: ZodNullable<(...)>;
status: ZodEnum<(...)>;
truncated: ZodBoolean;
},
$strict,
>;
edges: ZodArray<
ZodObject<
{
edge_id: ...;
evidence: ...;
identifier_strategy: ...;
properties: ...;
relation: ...;
source_node_id: ...;
target_node_id: ...;
},
$strict,
>,
>;
graph_id: ZodString;
limitations: ZodArray<ZodString>;
nodes: ZodArray<
ZodObject<
{ identity: ...; kind: ...; node_id: ...; observations: ... },
$strict,
>,
>;
root_node_ids: ZodArray<ZodString>;
schema: ZodLiteral<"JavaScriptApplicationGraph">;
schema_version: ZodLiteral<1>;
},
$strict,
>;
items: ZodArray<
ZodObject<
{
dimensions: ZodArray<ZodEnum<(...)>>;
evidence_links: ZodArray<ZodString>;
item_id: ZodString;
left_node_id: ZodNullable<ZodString>;
limitations: ZodArray<ZodString>;
match: ZodObject<
{
basis: ...;
candidate_left_node_ids: ...;
candidate_right_node_ids: ...;
confidence: ...;
status: ...;
},
$strict,
>;
node_kind: ZodEnum<
{
artifact: ...;
"asar-entry": ...;
"browser-window": ...;
"context-bridge-api": ...;
"electron-main": ...;
"electron-preload": ...;
"electron-renderer": ...;
"electron-utility": ...;
endpoint: ...;
frame: ...;
installer: ...;
"ipc-channel": ...;
"ipc-handler": ...;
"javascript-asset": ...;
"javascript-chunk": ...;
"javascript-module": ...;
"native-addon": ...;
"native-export": ...;
package: ...;
"runtime-script-instance": ...;
"service-worker": ...;
"source-map": ...;
"source-module": ...;
storage: ...;
target: ...;
unknown: ...;
worker: ...;
},
>;
right_node_id: ZodNullable<ZodString>;
status: ZodEnum<
{
added: ...;
changed: ...;
removed: ...;
unchanged: ...;
unknown: ...;
},
>;
},
$strict,
>,
>;
left: ZodObject<
{
evidence_id: ZodString;
graph_id: ZodString;
root_artifact_sha256: ZodString;
},
$strict,
>;
limitations: ZodArray<ZodString>;
matching: ZodObject<
{
ambiguous: ZodNumber;
exact_content_digest: ZodNumber;
exact_module_source_digest: ZodNumber;
exact_node_identity: ZodNumber;
semantic_key: ZodNumber;
source_map_identity: ZodNumber;
structural_fingerprint: ZodNumber;
unmatched: ZodNumber;
},
$strict,
>;
right: ZodObject<
{
evidence_id: ZodString;
graph_id: ZodString;
root_artifact_sha256: ZodString;
},
$strict,
>;
schema_version: ZodLiteral<1>;
summary: ZodObject<
{
added: ZodNumber;
changed: ZodNumber;
removed: ZodNumber;
unchanged: ZodNumber;
unknown: ZodNumber;
},
$strict,
>;
},
$strict,
>;
operation: ZodString;
parameters: ZodRecord<ZodString, ZodJSONSchema>;
predicate_type: ZodString;
provider: ZodObject<
{ id: ZodString; name: ZodString; version: ZodNullable<ZodString> },
$strip,
>;
raw_result: ZodNullable<ZodJSONSchema>;
schema_version: ZodLiteral<2>;
subject: ZodNullable<
ZodObject<
{
architecture: ZodNullable<
ZodEnum<
{ arm: "arm"; arm64: "arm64"; x86: "x86"; x86_64: "x86_64" },
>,
>;
digest: ZodObject<{ sha256: ZodString }, $strip>;
format: ZodEnum<
{
"analysis-database": "analysis-database";
apk: "apk";
asar: "asar";
directory: "directory";
dmg: "dmg";
elf: "elf";
entitlements: "entitlements";
file: "file";
hopper: "hopper";
ipa: "ipa";
javascript: "javascript";
"javascript-bundle": "javascript-bundle";
"mach-o": "mach-o";
"mach-o-universal": "mach-o-universal";
pe: "pe";
pkg: "pkg";
plist: "plist";
"source-map": "source-map";
unknown: "unknown";
zip: "zip";
},
>;
local_path: ZodString;
name: ZodString;
},
$strip,
>,
>;
},
$strict,
>;
},
{
annotations: {
destructiveHint: true;
idempotentHint: true;
openWorldHint: false;
readOnlyHint: false;
};
description: "Plan or execute a content-bound extracted-module JavaScript replay inside the Linux Bubblewrap, seccomp, and cgroup boundary. Execution requires approved: true and the exact plan digest. Supports deterministic boundary cases and optional left/right differential comparison; observations have controlled-replay authority and do not claim real application runtime behavior.";
examples: readonly [
{
input: {
approved: false;
cases: [{ arguments: [""]; case_id: "empty" }];
determinism: {
clock_iso: "2000-01-01T00:00:00.000Z";
locale: "en-US";
platform: "linux";
random_seed: 0;
timezone: "UTC";
};
left: {
entry_alias: "parser";
entry_export: "default";
modules: [
{
alias: "parser";
dependencies: {};
format: "esm";
path: "/approved/parser.mjs";
role: "module";
},
];
};
limits: {
cpu_quota_percent: 50;
input_bytes: 262144;
memory_bytes: 134217728;
module_bytes: 4194304;
output_bytes: 524288;
protocol_bytes: 16777216;
result_depth: 16;
result_nodes: 10000;
stderr_bytes: 32768;
tasks: 8;
tmpfs_bytes: 16777216;
wall_time_ms: 3000;
};
mode: "plan";
};
title: "Plan one extracted ESM parser replay";
},
];
inputSchema: ZodObject<
{
approved: ZodDefault<ZodBoolean>;
cases: ZodDefault<
ZodArray<
ZodObject<
{ arguments: ZodArray<ZodJSONSchema>; case_id: ZodString },
$strict,
>,
>,
>;
determinism: ZodDefault<
ZodObject<
{
clock_iso: ZodDefault<ZodISODateTime>;
locale: ZodDefault<ZodLiteral<"en-US">>;
platform: ZodDefault<ZodLiteral<"linux">>;
random_seed: ZodDefault<ZodNumber>;
timezone: ZodDefault<ZodLiteral<"UTC">>;
},
$strict,
>,
>;
generator: ZodOptional<
ZodObject<
{
count: ZodNumber;
preset: ZodEnum<
{
"clipboard-boundaries": "clipboard-boundaries";
"parser-boundaries": "parser-boundaries";
"sanitizer-boundaries": "sanitizer-boundaries";
},
>;
seed: ZodNumber;
},
$strict,
>,
>;
left: ZodObject<
{
entry_alias: ZodString;
entry_export: ZodDefault<ZodString>;
modules: ZodArray<
ZodObject<
{
alias: ZodString;
dependencies: ZodDefault<ZodRecord<(...), (...)>>;
format: ZodEnum<{ "commonjs-factory": ...; esm: ... }>;
path: ZodString;
role: ZodDefault<ZodEnum<(...)>>;
},
$strict,
>,
>;
},
$strict,
>;
limits: ZodDefault<
ZodObject<
{
cpu_quota_percent: ZodDefault<ZodNumber>;
input_bytes: ZodDefault<ZodNumber>;
memory_bytes: ZodDefault<ZodNumber>;
module_bytes: ZodDefault<ZodNumber>;
output_bytes: ZodDefault<ZodNumber>;
protocol_bytes: ZodDefault<ZodNumber>;
result_depth: ZodDefault<ZodNumber>;
result_nodes: ZodDefault<ZodNumber>;
stderr_bytes: ZodDefault<ZodNumber>;
tasks: ZodDefault<ZodNumber>;
tmpfs_bytes: ZodDefault<ZodNumber>;
wall_time_ms: ZodDefault<ZodNumber>;
},
$strict,
>,
>;
mode: ZodEnum<{ execute: "execute"; plan: "plan" }>;
plan_digest: ZodOptional<ZodString>;
reproducer_export: ZodOptional<
ZodObject<
{
approved: ZodBoolean;
include_sources: ZodDefault<ZodBoolean>;
path: ZodString;
},
$strict,
>,
>;
right: ZodOptional<
ZodObject<
{
entry_alias: ZodString;
entry_export: ZodDefault<ZodString>;
modules: ZodArray<
ZodObject<
{
alias: ZodString;
dependencies: ZodDefault<(...)>;
format: ZodEnum<(...)>;
path: ZodString;
role: ZodDefault<(...)>;
},
$strict,
>,
>;
},
$strict,
>,
>;
},
$strict,
>;
kind: "application";
name: "run_controlled_replay";
outputSchema: ZodObject<
{
evidence: ZodNullable<
ZodObject<
{
analysis_profile: ZodOptional<
ZodObject<
{
digest: ZodString;
parameters: ZodRecord<(...), (...)>;
provider: ZodObject<(...), (...)>;
provider_profile_schema_version: ZodNumber;
schema_version: ZodLiteral<(...)>;
},
$strip,
>,
>;
authority: ZodEnum<
{
"analyst-inference": "analyst-inference";
"controlled-replay": "controlled-replay";
"external-service": "external-service";
"historical-reference": "historical-reference";
"shipped-artifact": "shipped-artifact";
},
>;
confidence: ZodEnum<
{
derived: "derived";
inferred: "inferred";
observed: "observed";
},
>;
environment: ZodNullable<
ZodObject<
{
architecture: ZodString;
id: ZodString;
isolation: ZodEnum<(...)>;
platform: ZodString;
},
$strip,
>,
>;
evidence_id: ZodString;
evidence_links: ZodArray<ZodString>;
limitations: ZodArray<ZodString>;
locations: ZodArray<
ZodDiscriminatedUnion<
[
ZodObject<(...), (...)>,
ZodObject<(...), (...)>,
ZodObject<(...), (...)>,
ZodObject<(...), (...)>,
ZodObject<(...), (...)>,
],
"kind",
>,
>;
normalized_result: ZodObject<
{
cleanup: ZodObject<
{ residual_resources: ...; state: ... },
$strict,
>;
comparison: ZodOptional<ZodArray<(...)>>;
limitations: ZodArray<ZodString>;
outcomes: ZodArray<ZodObject<(...), (...)>>;
plan_digest: ZodString;
reproducer: ZodNullable<ZodDiscriminatedUnion<(...), (...)>>;
schema_version: ZodLiteral<1>;
stderr: ZodString;
termination: ZodEnum<
{
cancelled: ...;
completed: ...;
crash: ...;
oom: ...;
protocol_error: ...;
timeout: ...;
},
>;
},
$strict,
>;
operation: ZodString;
parameters: ZodRecord<ZodString, ZodJSONSchema>;
predicate_type: ZodString;
provider: ZodObject<
{
id: ZodString;
name: ZodString;
version: ZodNullable<ZodString>;
},
$strip,
>;
raw_result: ZodNullable<ZodJSONSchema>;
schema_version: ZodLiteral<2>;
subject: ZodNullable<
ZodObject<
{
architecture: ZodNullable<(...)>;
digest: ZodObject<(...), (...)>;
format: ZodEnum<(...)>;
local_path: ZodString;
name: ZodString;
},
$strip,
>,
>;
},
$strict,
>,
>;
phase: ZodEnum<{ execute: "execute"; plan: "plan" }>;
plan: ZodNullable<
ZodObject<
{
cases: ZodArray<
ZodObject<
{
arguments: ZodArray<(...)>;
case_id: ZodString;
sha256: ZodString;
},
$strict,
>,
>;
determinism: ZodObject<
{
clock_iso: ZodDefault<ZodISODateTime>;
locale: ZodDefault<ZodLiteral<(...)>>;
platform: ZodDefault<ZodLiteral<(...)>>;
random_seed: ZodDefault<ZodNumber>;
timezone: ZodDefault<ZodLiteral<(...)>>;
},
$strict,
>;
effects: ZodArray<ZodString>;
filesystem: ZodObject<
{
host_writes: ZodLiteral<false>;
private_tmpfs_bytes: ZodNumber;
},
$strict,
>;
left: ZodObject<
{
entry_alias: ZodString;
entry_export: ZodString;
modules: ZodArray<ZodObject<(...), (...)>>;
},
$strict,
>;
limits: ZodObject<
{
cpu_quota_percent: ZodDefault<ZodNumber>;
input_bytes: ZodDefault<ZodNumber>;
memory_bytes: ZodDefault<ZodNumber>;
module_bytes: ZodDefault<ZodNumber>;
output_bytes: ZodDefault<ZodNumber>;
protocol_bytes: ZodDefault<ZodNumber>;
result_depth: ZodDefault<ZodNumber>;
result_nodes: ZodDefault<ZodNumber>;
stderr_bytes: ZodDefault<ZodNumber>;
tasks: ZodDefault<ZodNumber>;
tmpfs_bytes: ZodDefault<ZodNumber>;
wall_time_ms: ZodDefault<ZodNumber>;
},
$strict,
>;
network: ZodLiteral<"none">;
plan_digest: ZodString;
policy_sha256: ZodString;
policy_version: ZodLiteral<"linux-bwrap-systemd-v1">;
reproducer_export: ZodNullable<
ZodObject<
{
authority: ZodLiteral<(...)>;
include_sources: ZodBoolean;
path: ZodString;
},
$strict,
>,
>;
right: ZodOptional<
ZodObject<
{
entry_alias: ZodString;
entry_export: ZodString;
modules: ZodArray<(...)>;
},
$strict,
>,
>;
runtime: ZodObject<
{
executable: ZodObject<
{ path: ...; sha256: ...; version: ... },
$strict,
>;
read_only_files: ZodArray<ZodObject<(...), (...)>>;
worker: ZodObject<
{ path: ...; sha256: ...; version: ... },
$strict,
>;
},
$strict,
>;
sandbox: ZodObject<
{
bubblewrap: ZodObject<
{ path: ...; sha256: ...; version: ... },
$strict,
>;
seccomp_sha256: ZodString;
shell: ZodObject<{ path: ...; sha256: ...; version: ... }, $strict>;
systemctl: ZodObject<
{ path: ...; sha256: ...; version: ... },
$strict,
>;
systemd_run: ZodObject<
{ path: ...; sha256: ...; version: ... },
$strict,
>;
},
$strict,
>;
schema_version: ZodLiteral<1>;
},
$strict,
>,
>;
source_evidence: ZodArray<
ZodObject<
{
analysis_profile: ZodOptional<
ZodObject<
{
digest: ZodString;
parameters: ZodRecord<(...), (...)>;
provider: ZodObject<(...), (...)>;
provider_profile_schema_version: ZodNumber;
schema_version: ZodLiteral<(...)>;
},
$strip,
>,
>;
authority: ZodEnum<
{
"analyst-inference": "analyst-inference";
"controlled-replay": "controlled-replay";
"external-service": "external-service";
"historical-reference": "historical-reference";
"shipped-artifact": "shipped-artifact";
},
>;
confidence: ZodEnum<
{
derived: "derived";
inferred: "inferred";
observed: "observed";
},
>;
environment: ZodNullable<
ZodObject<
{
architecture: ZodString;
id: ZodString;
isolation: ZodEnum<(...)>;
platform: ZodString;
},
$strip,
>,
>;
evidence_id: ZodString;
evidence_links: ZodArray<ZodString>;
limitations: ZodArray<ZodString>;
locations: ZodArray<
ZodDiscriminatedUnion<
[
ZodObject<(...), (...)>,
ZodObject<(...), (...)>,
ZodObject<(...), (...)>,
ZodObject<(...), (...)>,
ZodObject<(...), (...)>,
],
"kind",
>,
>;
normalized_result: ZodObject<
{
cleanup: ZodObject<
{ residual_resources: ...; state: ... },
$strict,
>;
comparison: ZodOptional<ZodArray<(...)>>;
limitations: ZodArray<ZodString>;
outcomes: ZodArray<ZodObject<(...), (...)>>;
plan_digest: ZodString;
reproducer: ZodNullable<ZodDiscriminatedUnion<(...), (...)>>;
schema_version: ZodLiteral<1>;
stderr: ZodString;
termination: ZodEnum<
{
cancelled: ...;
completed: ...;
crash: ...;
oom: ...;
protocol_error: ...;
timeout: ...;
},
>;
},
$strict,
>;
operation: ZodString;
parameters: ZodRecord<ZodString, ZodJSONSchema>;
predicate_type: ZodString;
provider: ZodObject<
{
id: ZodString;
name: ZodString;
version: ZodNullable<ZodString>;
},
$strip,
>;
raw_result: ZodNullable<ZodJSONSchema>;
schema_version: ZodLiteral<2>;
subject: ZodNullable<
ZodObject<
{
architecture: ZodNullable<(...)>;
digest: ZodObject<(...), (...)>;
format: ZodEnum<(...)>;
local_path: ZodString;
name: ZodString;
},
$strip,
>,
>;
},
$strict,
>,
>;
},
$strict,
>;
},
] = ...
Provider-neutral graph workflow contracts shared by MCP and CLI adapters.