Function reviseInvestigationWorkspace

Parameters

• current: {
      bundle: {
          artifacts: {
              architecture: "x86" | "x86_64" | "arm" | "arm64" | null;
              digest: { sha256: string };
              format:
                  | "hopper"
                  | "mach-o"
                  | "elf"
                  | "pe"
                  | "zip"
                  | "ipa"
                  | "apk"
                  | "asar"
                  | "dmg"
                  | "pkg"
                  | "plist"
                  | "javascript"
                  | "source-map"
                  | "unknown"
                  | "file"
                  | "directory"
                  | "mach-o-universal"
                  | "javascript-bundle"
                  | "entitlements";
          }[];
          bundle_version: 2;
          captures: { evidence_id: string; predicate_type: string }[];
          environments: {
              architecture: string;
              id: string;
              isolation: "process" | "none" | "container" | "virtual-machine";
              platform: string;
          }[];
          providers: { id: string; name: string; version: string
          | null }[];
          records: {
              authority:
                  | "shipped-artifact"
                  | "controlled-replay"
                  | "historical-reference"
                  | "external-service"
                  | "analyst-inference";
              confidence: "observed"
              | "derived"
              | "inferred";
              environment:
                  | {
                      architecture: string;
                      id: string;
                      isolation: "process"
                      | "none"
                      | "container"
                      | "virtual-machine";
                      platform: string;
                  }
                  | null;
              evidence_id: string;
              evidence_links: string[];
              limitations: string[];
              locations: (
                  | { address: string; kind: "address" }
                  | { end: string; kind: "address-range"; start: string }
                  | { kind: "artifact-path"; path: string }
                  | { kind: "file-offset"; offset: number }
                  | { end: number; kind: "file-offset-range"; start: number }
              )[];
              normalized_result: JSONType;
              operation: string;
              parameters: Record<string, JSONType>;
              predicate_type: string;
              provider: { id: string; name: string; version: string | null };
              raw_result: JSONType;
              schema_version: 2;
              subject:
                  | {
                      architecture: "x86"
                      | "x86_64"
                      | "arm"
                      | "arm64"
                      | null;
                      digest: { sha256: string };
                      format:
                          | "hopper"
                          | "mach-o"
                          | "elf"
                          | "pe"
                          | "zip"
                          | "ipa"
                          | "apk"
                          | "asar"
                          | "dmg"
                          | "pkg"
                          | "plist"
                          | "javascript"
                          | "source-map"
                          | "unknown"
                          | "file"
                          | "directory"
                          | "mach-o-universal"
                          | "javascript-bundle"
                          | "entitlements";
                      local_path: string;
                      name: string;
                  }
                  | null;
          }[];
          scenarios: {
              authority: "controlled-replay";
              evidence_id: string;
              operation: string;
          }[];
          unknowns: {
              contradicting_evidence_ids: string[];
              domain: string;
              mutation_evidence_ids: string[];
              previous_revision_digest: string
              | null;
              question: string;
              recommended_probes: { operation: string; rationale: string }[];
              registry_version: 1;
              relationships: {
                  type: "depends-on" | "related-to" | "contradicts";
                  unknown_id: string;
              }[];
              required_authority: | "shipped-artifact"
              | "controlled-replay"
              | "historical-reference"
              | "external-service"
              | "analyst-inference"
              | null;
              required_confidence: "observed"
              | "derived"
              | "inferred";
              required_environment:
                  | {
                      architecture: string
                      | null;
                      id: string | null;
                      isolation: "process" | "none" | "container" | "virtual-machine" | null;
                      platform: string | null;
                  }
                  | null;
              resolution: | {
                  disposition: "verified";
                  evidence_ids: string[];
                  rationale: string;
              }
              | {
                  disposition: "withdrawn"
                  | "out-of-scope";
                  evidence_ids: string[];
                  rationale: string;
              }
              | null;
              revision: number;
              revision_digest: string;
              scope_digest: string
              | null;
              severity: "low" | "medium" | "high" | "critical";
              status:
                  | "open"
                  | "investigating"
                  | "blocked"
                  | "contradicted"
                  | "resolved";
              supporting_evidence_ids: string[];
              unknown_id: string;
          }[];
      };
      name: string;
      previous_revision_digest: string
      | null;
      revision: number;
      revision_digest: string;
      runs: {
          comparison_evidence_id: string | null;
          completed_stages: (
              | "inventory_left"
              | "inventory_right"
              | "compare_artifacts"
              | "find_changed_behavior"
          )[];
          left: {
              format: | "hopper"
              | "mach-o"
              | "elf"
              | "pe"
              | "zip"
              | "ipa"
              | "apk"
              | "asar"
              | "dmg"
              | "pkg"
              | "plist"
              | "javascript"
              | "source-map"
              | "unknown"
              | "file"
              | "directory"
              | "mach-o-universal"
              | "javascript-bundle"
              | "entitlements";
              graph_sha256: string;
              manifest_id: string;
              root_sha256: string;
          };
          left_inventory_evidence_ids: string[];
          limitations: string[];
          options: {
              change_limit: number;
              max_compression_ratio: number;
              max_depth: number;
              max_entries: number;
              max_entry_bytes: number;
              max_path_bytes: number;
              max_total_bytes: number;
              page_size: number;
          };
          request_sha256: string;
          result_evidence_id: string
          | null;
          right: {
              format:
                  | "hopper"
                  | "mach-o"
                  | "elf"
                  | "pe"
                  | "zip"
                  | "ipa"
                  | "apk"
                  | "asar"
                  | "dmg"
                  | "pkg"
                  | "plist"
                  | "javascript"
                  | "source-map"
                  | "unknown"
                  | "file"
                  | "directory"
                  | "mach-o-universal"
                  | "javascript-bundle"
                  | "entitlements";
              graph_sha256: string;
              manifest_id: string;
              root_sha256: string;
          };
          right_inventory_evidence_ids: string[];
          run_id: string;
          schema_version: 1;
          status: "complete"
          | "running";
      }[];
      workspace_id: string;
      workspace_version: 1;
  }
• bundle: {
      artifacts: {
          architecture: "x86" | "x86_64" | "arm" | "arm64" | null;
          digest: { sha256: string };
          format:
              | "hopper"
              | "mach-o"
              | "elf"
              | "pe"
              | "zip"
              | "ipa"
              | "apk"
              | "asar"
              | "dmg"
              | "pkg"
              | "plist"
              | "javascript"
              | "source-map"
              | "unknown"
              | "file"
              | "directory"
              | "mach-o-universal"
              | "javascript-bundle"
              | "entitlements";
      }[];
      bundle_version: 2;
      captures: { evidence_id: string; predicate_type: string }[];
      environments: {
          architecture: string;
          id: string;
          isolation: "process" | "none" | "container" | "virtual-machine";
          platform: string;
      }[];
      providers: { id: string; name: string; version: string
      | null }[];
      records: {
          authority:
              | "shipped-artifact"
              | "controlled-replay"
              | "historical-reference"
              | "external-service"
              | "analyst-inference";
          confidence: "observed"
          | "derived"
          | "inferred";
          environment:
              | {
                  architecture: string;
                  id: string;
                  isolation: "process"
                  | "none"
                  | "container"
                  | "virtual-machine";
                  platform: string;
              }
              | null;
          evidence_id: string;
          evidence_links: string[];
          limitations: string[];
          locations: (
              | { address: string; kind: "address" }
              | { end: string; kind: "address-range"; start: string }
              | { kind: "artifact-path"; path: string }
              | { kind: "file-offset"; offset: number }
              | { end: number; kind: "file-offset-range"; start: number }
          )[];
          normalized_result: JSONType;
          operation: string;
          parameters: Record<string, JSONType>;
          predicate_type: string;
          provider: { id: string; name: string; version: string | null };
          raw_result: JSONType;
          schema_version: 2;
          subject:
              | {
                  architecture: "x86"
                  | "x86_64"
                  | "arm"
                  | "arm64"
                  | null;
                  digest: { sha256: string };
                  format:
                      | "hopper"
                      | "mach-o"
                      | "elf"
                      | "pe"
                      | "zip"
                      | "ipa"
                      | "apk"
                      | "asar"
                      | "dmg"
                      | "pkg"
                      | "plist"
                      | "javascript"
                      | "source-map"
                      | "unknown"
                      | "file"
                      | "directory"
                      | "mach-o-universal"
                      | "javascript-bundle"
                      | "entitlements";
                  local_path: string;
                  name: string;
              }
              | null;
      }[];
      scenarios: {
          authority: "controlled-replay";
          evidence_id: string;
          operation: string;
      }[];
      unknowns: {
          contradicting_evidence_ids: string[];
          domain: string;
          mutation_evidence_ids: string[];
          previous_revision_digest: string
          | null;
          question: string;
          recommended_probes: { operation: string; rationale: string }[];
          registry_version: 1;
          relationships: {
              type: "depends-on" | "related-to" | "contradicts";
              unknown_id: string;
          }[];
          required_authority: | "shipped-artifact"
          | "controlled-replay"
          | "historical-reference"
          | "external-service"
          | "analyst-inference"
          | null;
          required_confidence: "observed"
          | "derived"
          | "inferred";
          required_environment:
              | {
                  architecture: string
                  | null;
                  id: string | null;
                  isolation: "process" | "none" | "container" | "virtual-machine" | null;
                  platform: string | null;
              }
              | null;
          resolution: | {
              disposition: "verified";
              evidence_ids: string[];
              rationale: string;
          }
          | {
              disposition: "withdrawn"
              | "out-of-scope";
              evidence_ids: string[];
              rationale: string;
          }
          | null;
          revision: number;
          revision_digest: string;
          scope_digest: string
          | null;
          severity: "low" | "medium" | "high" | "critical";
          status: "open" | "investigating" | "blocked" | "contradicted" | "resolved";
          supporting_evidence_ids: string[];
          unknown_id: string;
      }[];
  }
• runs: readonly {
      comparison_evidence_id: string | null;
      completed_stages: (
          | "inventory_left"
          | "inventory_right"
          | "compare_artifacts"
          | "find_changed_behavior"
      )[];
      left: {
          format: | "hopper"
          | "mach-o"
          | "elf"
          | "pe"
          | "zip"
          | "ipa"
          | "apk"
          | "asar"
          | "dmg"
          | "pkg"
          | "plist"
          | "javascript"
          | "source-map"
          | "unknown"
          | "file"
          | "directory"
          | "mach-o-universal"
          | "javascript-bundle"
          | "entitlements";
          graph_sha256: string;
          manifest_id: string;
          root_sha256: string;
      };
      left_inventory_evidence_ids: string[];
      limitations: string[];
      options: {
          change_limit: number;
          max_compression_ratio: number;
          max_depth: number;
          max_entries: number;
          max_entry_bytes: number;
          max_path_bytes: number;
          max_total_bytes: number;
          page_size: number;
      };
      request_sha256: string;
      result_evidence_id: string
      | null;
      right: {
          format:
              | "hopper"
              | "mach-o"
              | "elf"
              | "pe"
              | "zip"
              | "ipa"
              | "apk"
              | "asar"
              | "dmg"
              | "pkg"
              | "plist"
              | "javascript"
              | "source-map"
              | "unknown"
              | "file"
              | "directory"
              | "mach-o-universal"
              | "javascript-bundle"
              | "entitlements";
          graph_sha256: string;
          manifest_id: string;
          root_sha256: string;
      };
      right_inventory_evidence_ids: string[];
      run_id: string;
      schema_version: 1;
      status: "complete"
      | "running";
  }[]