rea-agents
Preparing search index...
server/registerManagedWorkflowTools/types
ManagedWorkflowToolRegistration
Interface ManagedWorkflowToolRegistration
Shared services for registering managed-code workflow tools.
interface
ManagedWorkflowToolRegistration
{
logger
:
Logger
;
recordEvidence
:
|
(
(
evidence
:
|
{
analysis_profile
:
{
digest
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
}
;
provider_profile_schema_version
:
number
;
schema_version
:
1
;
}
;
authority
:
|
"shipped-artifact"
|
"controlled-replay"
|
"historical-reference"
|
"external-service"
|
"analyst-inference"
;
confidence
:
"observed"
|
"derived"
|
"inferred"
;
environment
:
|
{
architecture
:
string
;
id
:
string
;
isolation
:
"process"
|
"none"
|
"container"
|
"virtual-machine"
;
platform
:
string
;
}
|
null
;
evidence_id
:
string
;
evidence_links
:
string
[]
;
limitations
:
string
[]
;
locations
:
(
|
{
address
:
string
;
kind
:
"address"
}
|
{
end
:
string
;
kind
:
"address-range"
;
start
:
string
}
|
{
kind
:
"artifact-path"
;
path
:
string
}
|
{
kind
:
"file-offset"
;
offset
:
number
}
|
{
end
:
number
;
kind
:
"file-offset-range"
;
start
:
number
}
)
[]
;
normalized_result
:
JSONType
;
operation
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
predicate_type
:
string
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
|
null
}
;
raw_result
:
JSONType
;
schema_version
:
2
;
subject
:
|
{
architecture
:
"x86"
|
"x86_64"
|
"arm"
|
"arm64"
|
null
;
digest
:
{
sha256
:
string
}
;
format
:
|
"unknown"
|
"file"
|
"directory"
|
"javascript"
|
"source-map"
|
"plist"
|
"entitlements"
|
"dmg"
|
"zip"
|
"pkg"
|
"asar"
|
"javascript-bundle"
|
"mach-o-universal"
|
"mach-o"
|
"elf"
|
"pe"
|
"hopper"
|
"analysis-database"
|
"ipa"
|
"apk"
;
local_path
:
string
;
name
:
string
;
}
|
null
;
}
|
{
authority
:
|
"shipped-artifact"
|
"controlled-replay"
|
"historical-reference"
|
"external-service"
|
"analyst-inference"
;
confidence
:
"observed"
|
"derived"
|
"inferred"
;
environment
:
|
{
architecture
:
string
;
id
:
string
;
isolation
:
"process"
|
"none"
|
"container"
|
"virtual-machine"
;
platform
:
string
;
}
|
null
;
evidence_id
:
string
;
evidence_links
:
string
[]
;
limitations
:
string
[]
;
locations
:
(
|
{
address
:
string
;
kind
:
"address"
}
|
{
end
:
string
;
kind
:
"address-range"
;
start
:
string
}
|
{
kind
:
"artifact-path"
;
path
:
string
}
|
{
kind
:
"file-offset"
;
offset
:
number
}
|
{
end
:
number
;
kind
:
"file-offset-range"
;
start
:
number
}
)
[]
;
normalized_result
:
JSONType
;
operation
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
predicate_type
:
string
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
|
null
}
;
raw_result
:
JSONType
;
schema_version
:
2
;
subject
:
|
{
architecture
:
"x86"
|
"x86_64"
|
"arm"
|
"arm64"
|
null
;
digest
:
{
sha256
:
string
}
;
format
:
|
"unknown"
|
"file"
|
"directory"
|
"javascript"
|
"source-map"
|
"plist"
|
"entitlements"
|
"dmg"
|
"zip"
|
"pkg"
|
"asar"
|
"javascript-bundle"
|
"mach-o-universal"
|
"mach-o"
|
"elf"
|
"pe"
|
"hopper"
|
"analysis-database"
|
"ipa"
|
"apk"
;
local_path
:
string
;
name
:
string
;
}
|
null
;
}
,
)
=>
Result
<
"added"
|
"duplicate"
,
EvidenceIntegrityError
|
EvidenceLimitError
,
>
)
|
undefined
;
recordEvidenceWithUnknown
:
|
(
(
evidence
:
|
{
analysis_profile
:
{
digest
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
}
;
provider_profile_schema_version
:
number
;
schema_version
:
1
;
}
;
authority
:
|
"shipped-artifact"
|
"controlled-replay"
|
"historical-reference"
|
"external-service"
|
"analyst-inference"
;
confidence
:
"observed"
|
"derived"
|
"inferred"
;
environment
:
|
{
architecture
:
string
;
id
:
string
;
isolation
:
"process"
|
"none"
|
"container"
|
"virtual-machine"
;
platform
:
string
;
}
|
null
;
evidence_id
:
string
;
evidence_links
:
string
[]
;
limitations
:
string
[]
;
locations
:
(
|
{
address
:
string
;
kind
:
"address"
}
|
{
end
:
string
;
kind
:
"address-range"
;
start
:
string
}
|
{
kind
:
"artifact-path"
;
path
:
string
}
|
{
kind
:
"file-offset"
;
offset
:
number
}
|
{
end
:
number
;
kind
:
"file-offset-range"
;
start
:
number
}
)
[]
;
normalized_result
:
JSONType
;
operation
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
predicate_type
:
string
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
|
null
}
;
raw_result
:
JSONType
;
schema_version
:
2
;
subject
:
|
{
architecture
:
"x86"
|
"x86_64"
|
"arm"
|
"arm64"
|
null
;
digest
:
{
sha256
:
string
}
;
format
:
|
"unknown"
|
"file"
|
"directory"
|
"javascript"
|
"source-map"
|
"plist"
|
"entitlements"
|
"dmg"
|
"zip"
|
"pkg"
|
"asar"
|
"javascript-bundle"
|
"mach-o-universal"
|
"mach-o"
|
"elf"
|
"pe"
|
"hopper"
|
"analysis-database"
|
"ipa"
|
"apk"
;
local_path
:
string
;
name
:
string
;
}
|
null
;
}
|
{
authority
:
|
"shipped-artifact"
|
"controlled-replay"
|
"historical-reference"
|
"external-service"
|
"analyst-inference"
;
confidence
:
"observed"
|
"derived"
|
"inferred"
;
environment
:
|
{
architecture
:
string
;
id
:
string
;
isolation
:
"process"
|
"none"
|
"container"
|
"virtual-machine"
;
platform
:
string
;
}
|
null
;
evidence_id
:
string
;
evidence_links
:
string
[]
;
limitations
:
string
[]
;
locations
:
(
|
{
address
:
string
;
kind
:
"address"
}
|
{
end
:
string
;
kind
:
"address-range"
;
start
:
string
}
|
{
kind
:
"artifact-path"
;
path
:
string
}
|
{
kind
:
"file-offset"
;
offset
:
number
}
|
{
end
:
number
;
kind
:
"file-offset-range"
;
start
:
number
}
)
[]
;
normalized_result
:
JSONType
;
operation
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
predicate_type
:
string
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
|
null
}
;
raw_result
:
JSONType
;
schema_version
:
2
;
subject
:
|
{
architecture
:
"x86"
|
"x86_64"
|
"arm"
|
"arm64"
|
null
;
digest
:
{
sha256
:
string
}
;
format
:
|
"unknown"
|
"file"
|
"directory"
|
"javascript"
|
"source-map"
|
"plist"
|
"entitlements"
|
"dmg"
|
"zip"
|
"pkg"
|
"asar"
|
"javascript-bundle"
|
"mach-o-universal"
|
"mach-o"
|
"elf"
|
"pe"
|
"hopper"
|
"analysis-database"
|
"ipa"
|
"apk"
;
local_path
:
string
;
name
:
string
;
}
|
null
;
}
,
input
:
{
approved
:
true
;
contradicting_evidence_ids
:
string
[]
;
domain
:
string
;
question
:
string
;
recommended_probes
:
{
operation
:
string
;
rationale
:
string
}
[]
;
relationships
:
{
type
:
"depends-on"
|
"related-to"
|
"contradicts"
;
unknown_id
:
string
;
}
[]
;
required_authority
:
|
"shipped-artifact"
|
"controlled-replay"
|
"historical-reference"
|
"external-service"
|
"analyst-inference"
|
null
;
required_confidence
:
"observed"
|
"derived"
|
"inferred"
;
required_environment
:
|
{
architecture
:
string
|
null
;
id
:
string
|
null
;
isolation
:
|
"process"
|
"none"
|
"container"
|
"virtual-machine"
|
null
;
platform
:
string
|
null
;
}
|
null
;
severity
:
"low"
|
"medium"
|
"high"
|
"critical"
;
supporting_evidence_ids
:
string
[]
;
}
,
)
=>
Result
<
|
{
contradicting_evidence_ids
:
string
[]
;
domain
:
string
;
mutation_evidence_ids
:
string
[]
;
previous_revision_digest
:
string
|
null
;
question
:
string
;
recommended_probes
:
{
operation
:
string
;
rationale
:
string
}
[]
;
registry_version
:
1
;
relationships
:
{
type
:
"depends-on"
|
"related-to"
|
"contradicts"
;
unknown_id
:
string
;
}
[]
;
required_authority
:
|
"shipped-artifact"
|
"controlled-replay"
|
"historical-reference"
|
"external-service"
|
"analyst-inference"
|
null
;
required_confidence
:
"observed"
|
"derived"
|
"inferred"
;
required_environment
:
|
{
architecture
:
string
|
null
;
id
:
string
|
null
;
isolation
:
|
"process"
|
"none"
|
"container"
|
"virtual-machine"
|
null
;
platform
:
string
|
null
;
}
|
null
;
resolution
:
|
{
disposition
:
"verified"
;
evidence_ids
:
string
[]
;
rationale
:
string
;
}
|
{
disposition
:
"withdrawn"
|
"out-of-scope"
;
evidence_ids
:
string
[]
;
rationale
:
string
;
}
|
null
;
revision
:
number
;
revision_digest
:
string
;
scope_digest
:
string
|
null
;
severity
:
"low"
|
"medium"
|
"high"
|
"critical"
;
status
:
|
"open"
|
"investigating"
|
"blocked"
|
"contradicted"
|
"resolved"
;
supporting_evidence_ids
:
string
[]
;
unknown_id
:
string
;
}
|
null
,
AnalysisError
,
>
)
|
undefined
;
runtime
:
ManagedRuntimeCorrelationDependencies
;
session
:
BinarySessionPort
;
}
Index
Properties
logger
record
Evidence
record
Evidence
With
Unknown
runtime
session
Properties
Readonly
logger
logger
:
Logger
Readonly
record
Evidence
recordEvidence
:
|
(
(
evidence
:
|
{
analysis_profile
:
{
digest
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
}
;
provider_profile_schema_version
:
number
;
schema_version
:
1
;
}
;
authority
:
|
"shipped-artifact"
|
"controlled-replay"
|
"historical-reference"
|
"external-service"
|
"analyst-inference"
;
confidence
:
"observed"
|
"derived"
|
"inferred"
;
environment
:
|
{
architecture
:
string
;
id
:
string
;
isolation
:
"process"
|
"none"
|
"container"
|
"virtual-machine"
;
platform
:
string
;
}
|
null
;
evidence_id
:
string
;
evidence_links
:
string
[]
;
limitations
:
string
[]
;
locations
:
(
|
{
address
:
string
;
kind
:
"address"
}
|
{
end
:
string
;
kind
:
"address-range"
;
start
:
string
}
|
{
kind
:
"artifact-path"
;
path
:
string
}
|
{
kind
:
"file-offset"
;
offset
:
number
}
|
{
end
:
number
;
kind
:
"file-offset-range"
;
start
:
number
}
)
[]
;
normalized_result
:
JSONType
;
operation
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
predicate_type
:
string
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
|
null
}
;
raw_result
:
JSONType
;
schema_version
:
2
;
subject
:
|
{
architecture
:
"x86"
|
"x86_64"
|
"arm"
|
"arm64"
|
null
;
digest
:
{
sha256
:
string
}
;
format
:
|
"unknown"
|
"file"
|
"directory"
|
"javascript"
|
"source-map"
|
"plist"
|
"entitlements"
|
"dmg"
|
"zip"
|
"pkg"
|
"asar"
|
"javascript-bundle"
|
"mach-o-universal"
|
"mach-o"
|
"elf"
|
"pe"
|
"hopper"
|
"analysis-database"
|
"ipa"
|
"apk"
;
local_path
:
string
;
name
:
string
;
}
|
null
;
}
|
{
authority
:
|
"shipped-artifact"
|
"controlled-replay"
|
"historical-reference"
|
"external-service"
|
"analyst-inference"
;
confidence
:
"observed"
|
"derived"
|
"inferred"
;
environment
:
|
{
architecture
:
string
;
id
:
string
;
isolation
:
"process"
|
"none"
|
"container"
|
"virtual-machine"
;
platform
:
string
;
}
|
null
;
evidence_id
:
string
;
evidence_links
:
string
[]
;
limitations
:
string
[]
;
locations
:
(
|
{
address
:
string
;
kind
:
"address"
}
|
{
end
:
string
;
kind
:
"address-range"
;
start
:
string
}
|
{
kind
:
"artifact-path"
;
path
:
string
}
|
{
kind
:
"file-offset"
;
offset
:
number
}
|
{
end
:
number
;
kind
:
"file-offset-range"
;
start
:
number
}
)
[]
;
normalized_result
:
JSONType
;
operation
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
predicate_type
:
string
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
|
null
}
;
raw_result
:
JSONType
;
schema_version
:
2
;
subject
:
|
{
architecture
:
"x86"
|
"x86_64"
|
"arm"
|
"arm64"
|
null
;
digest
:
{
sha256
:
string
}
;
format
:
|
"unknown"
|
"file"
|
"directory"
|
"javascript"
|
"source-map"
|
"plist"
|
"entitlements"
|
"dmg"
|
"zip"
|
"pkg"
|
"asar"
|
"javascript-bundle"
|
"mach-o-universal"
|
"mach-o"
|
"elf"
|
"pe"
|
"hopper"
|
"analysis-database"
|
"ipa"
|
"apk"
;
local_path
:
string
;
name
:
string
;
}
|
null
;
}
,
)
=>
Result
<
"added"
|
"duplicate"
,
EvidenceIntegrityError
|
EvidenceLimitError
,
>
)
|
undefined
Readonly
record
Evidence
With
Unknown
recordEvidenceWithUnknown
:
|
(
(
evidence
:
|
{
analysis_profile
:
{
digest
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
}
;
provider_profile_schema_version
:
number
;
schema_version
:
1
;
}
;
authority
:
|
"shipped-artifact"
|
"controlled-replay"
|
"historical-reference"
|
"external-service"
|
"analyst-inference"
;
confidence
:
"observed"
|
"derived"
|
"inferred"
;
environment
:
|
{
architecture
:
string
;
id
:
string
;
isolation
:
"process"
|
"none"
|
"container"
|
"virtual-machine"
;
platform
:
string
;
}
|
null
;
evidence_id
:
string
;
evidence_links
:
string
[]
;
limitations
:
string
[]
;
locations
:
(
|
{
address
:
string
;
kind
:
"address"
}
|
{
end
:
string
;
kind
:
"address-range"
;
start
:
string
}
|
{
kind
:
"artifact-path"
;
path
:
string
}
|
{
kind
:
"file-offset"
;
offset
:
number
}
|
{
end
:
number
;
kind
:
"file-offset-range"
;
start
:
number
}
)
[]
;
normalized_result
:
JSONType
;
operation
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
predicate_type
:
string
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
|
null
}
;
raw_result
:
JSONType
;
schema_version
:
2
;
subject
:
|
{
architecture
:
"x86"
|
"x86_64"
|
"arm"
|
"arm64"
|
null
;
digest
:
{
sha256
:
string
}
;
format
:
|
"unknown"
|
"file"
|
"directory"
|
"javascript"
|
"source-map"
|
"plist"
|
"entitlements"
|
"dmg"
|
"zip"
|
"pkg"
|
"asar"
|
"javascript-bundle"
|
"mach-o-universal"
|
"mach-o"
|
"elf"
|
"pe"
|
"hopper"
|
"analysis-database"
|
"ipa"
|
"apk"
;
local_path
:
string
;
name
:
string
;
}
|
null
;
}
|
{
authority
:
|
"shipped-artifact"
|
"controlled-replay"
|
"historical-reference"
|
"external-service"
|
"analyst-inference"
;
confidence
:
"observed"
|
"derived"
|
"inferred"
;
environment
:
|
{
architecture
:
string
;
id
:
string
;
isolation
:
"process"
|
"none"
|
"container"
|
"virtual-machine"
;
platform
:
string
;
}
|
null
;
evidence_id
:
string
;
evidence_links
:
string
[]
;
limitations
:
string
[]
;
locations
:
(
|
{
address
:
string
;
kind
:
"address"
}
|
{
end
:
string
;
kind
:
"address-range"
;
start
:
string
}
|
{
kind
:
"artifact-path"
;
path
:
string
}
|
{
kind
:
"file-offset"
;
offset
:
number
}
|
{
end
:
number
;
kind
:
"file-offset-range"
;
start
:
number
}
)
[]
;
normalized_result
:
JSONType
;
operation
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
predicate_type
:
string
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
|
null
}
;
raw_result
:
JSONType
;
schema_version
:
2
;
subject
:
|
{
architecture
:
"x86"
|
"x86_64"
|
"arm"
|
"arm64"
|
null
;
digest
:
{
sha256
:
string
}
;
format
:
|
"unknown"
|
"file"
|
"directory"
|
"javascript"
|
"source-map"
|
"plist"
|
"entitlements"
|
"dmg"
|
"zip"
|
"pkg"
|
"asar"
|
"javascript-bundle"
|
"mach-o-universal"
|
"mach-o"
|
"elf"
|
"pe"
|
"hopper"
|
"analysis-database"
|
"ipa"
|
"apk"
;
local_path
:
string
;
name
:
string
;
}
|
null
;
}
,
input
:
{
approved
:
true
;
contradicting_evidence_ids
:
string
[]
;
domain
:
string
;
question
:
string
;
recommended_probes
:
{
operation
:
string
;
rationale
:
string
}
[]
;
relationships
:
{
type
:
"depends-on"
|
"related-to"
|
"contradicts"
;
unknown_id
:
string
;
}
[]
;
required_authority
:
|
"shipped-artifact"
|
"controlled-replay"
|
"historical-reference"
|
"external-service"
|
"analyst-inference"
|
null
;
required_confidence
:
"observed"
|
"derived"
|
"inferred"
;
required_environment
:
|
{
architecture
:
string
|
null
;
id
:
string
|
null
;
isolation
:
"process"
|
"none"
|
"container"
|
"virtual-machine"
|
null
;
platform
:
string
|
null
;
}
|
null
;
severity
:
"low"
|
"medium"
|
"high"
|
"critical"
;
supporting_evidence_ids
:
string
[]
;
}
,
)
=>
Result
<
|
{
contradicting_evidence_ids
:
string
[]
;
domain
:
string
;
mutation_evidence_ids
:
string
[]
;
previous_revision_digest
:
string
|
null
;
question
:
string
;
recommended_probes
:
{
operation
:
string
;
rationale
:
string
}
[]
;
registry_version
:
1
;
relationships
:
{
type
:
"depends-on"
|
"related-to"
|
"contradicts"
;
unknown_id
:
string
;
}
[]
;
required_authority
:
|
"shipped-artifact"
|
"controlled-replay"
|
"historical-reference"
|
"external-service"
|
"analyst-inference"
|
null
;
required_confidence
:
"observed"
|
"derived"
|
"inferred"
;
required_environment
:
|
{
architecture
:
string
|
null
;
id
:
string
|
null
;
isolation
:
"process"
|
"none"
|
"container"
|
"virtual-machine"
|
null
;
platform
:
string
|
null
;
}
|
null
;
resolution
:
|
{
disposition
:
"verified"
;
evidence_ids
:
string
[]
;
rationale
:
string
;
}
|
{
disposition
:
"withdrawn"
|
"out-of-scope"
;
evidence_ids
:
string
[]
;
rationale
:
string
;
}
|
null
;
revision
:
number
;
revision_digest
:
string
;
scope_digest
:
string
|
null
;
severity
:
"low"
|
"medium"
|
"high"
|
"critical"
;
status
:
|
"open"
|
"investigating"
|
"blocked"
|
"contradicted"
|
"resolved"
;
supporting_evidence_ids
:
string
[]
;
unknown_id
:
string
;
}
|
null
,
AnalysisError
,
>
)
|
undefined
Readonly
runtime
runtime
:
ManagedRuntimeCorrelationDependencies
Readonly
session
session
:
BinarySessionPort
Settings
Member Visibility
Protected
Inherited
Theme
OS
Light
Dark
On This Page
Properties
logger
record
Evidence
record
Evidence
With
Unknown
runtime
session
rea-agents
Loading...
Shared services for registering managed-code workflow tools.