From f0e625d7ee5a3f79158514aa93f89fca81a2da6a Mon Sep 17 00:00:00 2001 From: N0zoM1z0 <1705004398@qq.com> Date: Thu, 16 Jul 2026 00:02:49 +0800 Subject: [PATCH] feat(ghidra): add private headless provider session --- AGENTS.md | 16 +- README.md | 43 +- README_ar.md | 13 +- README_ja.md | 8 +- README_ko.md | 8 +- README_zh.md | 10 +- SECURITY.md | 34 +- bridge/ghidra/ReaGhidraBridge.java | 282 ++++++++++ ...rovider-selection-and-analysis-profiles.md | 32 +- docs/adr/README.md | 6 +- docs/api/assets/hierarchy.js | 2 +- docs/api/assets/navigation.js | 2 +- docs/api/assets/search.js | 2 +- ...rmissionAuthority.PermissionPathError.html | 2 +- ...ocessCaptureError.ProcessCaptureError.html | 2 +- ...sionStore.ProjectPermissionStoreError.html | 2 +- .../domain_errors.AnalysisCancelledError.html | 2 +- ...rs.AnalysisCapabilityUnavailableError.html | 2 +- .../classes/domain_errors.AnalysisError.html | 2 +- .../domain_errors.AnalysisInputError.html | 2 +- .../domain_errors.AnalysisOutputError.html | 2 +- .../domain_errors.AnalysisProtocolError.html | 2 +- .../domain_errors.AnalysisTimeoutError.html | 2 +- .../domain_errors.ArtifactOperationError.html | 14 +- .../domain_errors.BinaryTargetError.html | 10 +- ...domain_errors.BrowserObservationError.html | 12 +- .../domain_errors.ConfigurationError.html | 6 +- .../domain_errors.EvidenceFileError.html | 12 +- .../domain_errors.EvidenceIntegrityError.html | 6 +- .../domain_errors.EvidenceLimitError.html | 12 +- .../domain_errors.HopperCancelledError.html | 8 +- .../classes/domain_errors.HopperError.html | 2 +- .../domain_errors.HopperProcessError.html | 14 +- .../domain_errors.HopperProtocolError.html | 6 +- .../domain_errors.HopperRemoteError.html | 14 +- .../domain_errors.HopperStartError.html | 8 +- .../domain_errors.HopperTimeoutError.html | 10 +- ...in_errors.InvestigationWorkspaceError.html | 12 +- .../domain_errors.NoBinaryOpenError.html | 8 +- ...domain_errors.PermissionRequiredError.html | 18 +- .../domain_errors.ProviderAdapterError.html | 24 +- .../domain_errors.ProviderSelectionError.html | 2 +- .../domain_errors.UnknownRegistryError.html | 10 +- ...permissionPolicy.PermissionGrantError.html | 2 +- .../ghidra_GhidraClient.GhidraClient.html | 129 +++++ ...GhidraLauncher.GhidraHeadlessLauncher.html | 107 ++++ ...idra_GhidraLauncher.GhidraLaunchError.html | 73 +++ .../ghidra_GhidraProvider.GhidraProvider.html | 159 ++++++ ...raResponseBuffer.GhidraResponseBuffer.html | 101 ++++ ...raResponseRouter.GhidraResponseRouter.html | 89 +++ ...GhidraSessionError.GhidraSessionError.html | 101 ++++ ...iderProcess.ProviderProcessSupervisor.html | 14 +- .../application_Doctor.runDoctor.html | 6 +- .../application_Doctor.systemDoctorHost.html | 8 +- ...nceSourceImport.importReferenceSource.html | 4 +- ...application_Setup.configureJsonClient.html | 6 +- ...application_Setup.configureTomlClient.html | 6 +- .../application_Setup.detectClients.html | 2 +- .../functions/application_Setup.runSetup.html | 2 +- .../application_Setup.systemSetupHost.html | 44 ++ ...SetupClients.configureDetectedClients.html | 6 +- .../application_SetupPlan.setupPlan.html | 7 +- ...plication_runtime.createBinarySession.html | 2 +- ...rowser_CdpEndpoint.cdpTargetWebSocket.html | 2 +- ...owser_CdpEndpoint.discoverCdpEndpoint.html | 2 +- ...ser_CdpEndpoint.hasCdpTargetWebSocket.html | 2 +- docs/api/functions/cli.createCli.html | 2 +- docs/api/functions/config.parseConfig.html | 4 +- .../domain_errors.projectAnalysisError.html | 2 +- ...ification.classifyReferenceSourcePath.html | 4 +- ...urceGraph.createHistoricalSourceGraph.html | 4 +- ...ourceGraph.parseHistoricalSourceGraph.html | 4 +- ...sProfile.resolveGhidraAnalysisProfile.html | 47 ++ ...raDiagnostics.createGhidraDiagnostics.html | 44 ++ ...draDoctor.inspectSystemGhidraProvider.html | 40 ++ ...aDoctor.projectGhidraDoctorInspection.html | 44 ++ ...llation.ghidraInstallationDiagnostics.html | 44 ++ ...draInstallation.ghidraJavaEnvironment.html | 45 ++ ...nstallation.inspectGhidraInstallation.html | 45 ++ ...hidraLauncher.ghidraHeadlessArguments.html | 44 ++ ...alues.isGhidraShutdownAcknowledgement.html | 44 ++ ...aSessionValues.parseGhidraSessionInfo.html | 45 ++ ...raSocketConnection.attachGhidraSocket.html | 45 ++ ...ketConnection.connectGhidraSocketOnce.html | 45 ++ .../ghidra_protocol.ghidraResponseResult.html | 44 ++ ...idra_protocol.parseGhidraResponseLine.html | 44 ++ ...iderProcess.spawnOwnedProviderProcess.html | 2 +- docs/api/hierarchy.html | 104 ++-- docs/api/index.html | 4 +- ...ation_AnalysisProvider.AnalysisClient.html | 2 +- ...nalysisProvider.AnalysisOperationPort.html | 2 +- ...ion_AnalysisProvider.AnalysisProvider.html | 2 +- ...sisProvider.AnalysisProviderCandidate.html | 3 +- ...n_BinarySessionPort.BinarySessionPort.html | 2 +- .../application_Doctor.DoctorHost.html | 44 +- ...pplication_Doctor.DoctorProviderCheck.html | 88 +++ ...ation_Doctor.DoctorProviderInspection.html | 90 +++ ...cation_Doctor.SystemDoctorHostOptions.html | 58 ++ ...tEntries.ParsedReferenceSourceEntries.html | 4 +- .../application_Setup.SetupAction.html | 10 +- .../application_Setup.SetupHost.html | 52 +- .../application_Setup.SetupOptions.html | 8 +- .../application_Setup.SetupResult.html | 20 +- ...wser_CdpEndpoint.CdpEndpointDiscovery.html | 8 +- ...browser_CdpEndpoint.CdpEndpointTarget.html | 14 +- docs/api/interfaces/config.AppConfig.html | 64 ++- ...domain_errors.AnalysisErrorProjection.html | 16 +- ...in_errors.ProviderAdapterErrorOptions.html | 64 +++ ...main_permissionPolicy.PermissionGrant.html | 2 +- ...in_permissionPolicy.PermissionRequest.html | 2 +- ...main_permissionPolicy.PermissionScope.html | 2 +- ...domain_webInventory.StableWebResource.html | 2 +- ...ebInventory.WebInventoryResourceInput.html | 2 +- ...GhidraClientTypes.GhidraClientOptions.html | 100 ++++ ...aDiagnostics.GhidraDiagnosticsOptions.html | 100 ++++ ...aInstallation.GhidraInstallationCheck.html | 82 +++ ...raInstallation.GhidraInstallationHost.html | 95 ++++ ...allation.GhidraInstallationInspection.html | 130 +++++ ...nstallation.GhidraInstallationOptions.html | 76 +++ ...draInstallation.GhidraJavaObservation.html | 82 +++ ...auncher.GhidraHeadlessArgumentOptions.html | 88 +++ ...auncher.GhidraHeadlessLauncherOptions.html | 70 +++ .../ghidra_GhidraLauncher.GhidraLaunch.html | 97 ++++ ...ra_GhidraLauncher.GhidraLaunchSession.html | 94 ++++ .../ghidra_GhidraLauncher.GhidraLauncher.html | 71 +++ ...nseBuffer.GhidraResponseBufferOptions.html | 70 +++ ...nseRouter.GhidraResponseRouterOptions.html | 76 +++ ...essionError.GhidraSessionErrorOptions.html | 64 +++ ...SocketConnection.GhidraSocketHandlers.html | 70 +++ .../hopper_BridgeLauncher.BridgeLaunch.html | 8 +- ...cess.OwnedProviderProcessSpawnOptions.html | 12 +- ...ProviderProcess.ProviderProcessLaunch.html | 13 +- ...oviderProcess.ProviderProcessSnapshot.html | 10 +- ...derProcess.ProviderProcessStopOptions.html | 8 +- ...cess.ProviderProcessSupervisorOptions.html | 6 +- ...erProcess.SpawnedOwnedProviderProcess.html | 6 +- docs/api/modules/application_Doctor.html | 4 +- docs/api/modules/application_Setup.html | 8 +- docs/api/modules/domain_errors.html | 4 +- .../modules/ghidra_GhidraAnalysisProfile.html | 36 ++ docs/api/modules/ghidra_GhidraClient.html | 40 ++ .../api/modules/ghidra_GhidraClientTypes.html | 40 ++ docs/api/modules/ghidra_GhidraDefaults.html | 36 ++ .../api/modules/ghidra_GhidraDiagnostics.html | 40 ++ docs/api/modules/ghidra_GhidraDoctor.html | 36 ++ .../modules/ghidra_GhidraInstallation.html | 44 ++ docs/api/modules/ghidra_GhidraLauncher.html | 44 ++ docs/api/modules/ghidra_GhidraProvider.html | 40 ++ .../modules/ghidra_GhidraResponseBuffer.html | 40 ++ .../modules/ghidra_GhidraResponseRouter.html | 40 ++ .../modules/ghidra_GhidraSessionError.html | 44 ++ .../modules/ghidra_GhidraSessionValues.html | 40 ++ .../ghidra_GhidraSocketConnection.html | 40 ++ docs/api/modules/ghidra_protocol.html | 40 ++ ...ation_Setup.ClientConfigurationResult.html | 2 +- .../application_Setup.SetupConfirmation.html | 2 +- ...cation_Setup.SetupProviderEnvironment.html | 35 ++ ...wser_CdpEndpoint.CdpWebSocketEndpoint.html | 2 +- ...in_errors.BrowserObservationOperation.html | 2 +- .../domain_errors.HopperDiagnosticType.html | 2 +- ...ra_GhidraClientTypes.GhidraDiagnostic.html | 35 ++ ...a_GhidraClientTypes.GhidraStartResult.html | 35 ++ ...SessionError.GhidraSessionFailureKind.html | 35 ++ ...GhidraSessionValues.GhidraSessionInfo.html | 35 ++ .../ghidra_protocol.GhidraBridgeResponse.html | 35 ++ ...iderProcess.ProviderProcessDiagnostic.html | 2 +- ...iderProcess.ProviderProcessStopResult.html | 2 +- ...aults.GHIDRA_ANALYSIS_TIMEOUT_SECONDS.html | 35 ++ ..._GhidraDefaults.GHIDRA_BRIDGE_VERSION.html | 35 ++ .../ghidra_GhidraDefaults.GHIDRA_MAX_CPU.html | 35 ++ ...ghidra_GhidraDefaults.GHIDRA_MAX_HEAP.html | 35 ++ ..._GhidraDefaults.GHIDRA_MAX_LINE_BYTES.html | 35 ++ ...draDefaults.GHIDRA_REQUEST_TIMEOUT_MS.html | 35 ++ ...draDefaults.GHIDRA_STARTUP_TIMEOUT_MS.html | 35 ++ ...tallation.SUPPORTED_GHIDRA_JAVA_MAJOR.html | 35 ++ ...Installation.SUPPORTED_GHIDRA_VERSION.html | 35 ++ ...idraProvider.GHIDRA_PROVIDER_IDENTITY.html | 35 ++ ...ovider.GHIDRA_PROVIDER_TOOL_CONTRACTS.html | 35 ++ docs/architecture.mermaid | 11 +- docs/installation.md | 32 +- docs/product-catalog.json | 6 + docs/provider-evaluation.md | 53 +- docs/roadmap.md | 26 +- package.json | 2 + scripts/lib/product-catalog.mjs | 5 + scripts/scan-todos.mjs | 8 +- scripts/verify-packed-bridge.mjs | 23 +- scripts/verify-real-ghidra.mjs | 141 +++++ src/application/Doctor.ts | 118 +++- src/application/Setup.ts | 156 ++++-- src/application/SetupClients.ts | 5 +- src/application/SetupPlan.ts | 21 +- src/application/runtime.ts | 4 +- src/browser/CdpEndpoint.ts | 15 +- src/cli.ts | 13 +- src/config.ts | 17 +- src/doctorRuntime.ts | 8 + src/domain/errors.ts | 20 +- src/ghidra/GhidraAnalysisProfile.ts | 61 ++ src/ghidra/GhidraClient.ts | 528 ++++++++++++++++++ src/ghidra/GhidraClientTypes.ts | 36 ++ src/ghidra/GhidraDefaults.ts | 14 + src/ghidra/GhidraDiagnostics.ts | 68 +++ src/ghidra/GhidraDoctor.ts | 90 +++ src/ghidra/GhidraInstallation.ts | 378 +++++++++++++ src/ghidra/GhidraLauncher.ts | 217 +++++++ src/ghidra/GhidraProvider.ts | 275 +++++++++ src/ghidra/GhidraResponseBuffer.ts | 42 ++ src/ghidra/GhidraResponseRouter.ts | 46 ++ src/ghidra/GhidraSessionError.ts | 34 ++ src/ghidra/GhidraSessionValues.ts | 66 +++ src/ghidra/GhidraSocketConnection.ts | 74 +++ src/ghidra/protocol.ts | 77 +++ src/process/ProviderProcess.ts | 7 +- tests/cdpBrowserProvider.test.ts | 30 + tests/config.test.ts | 19 + tests/directAnalysisPermissions.test.ts | 2 +- tests/errors.test.ts | 20 + tests/fixtures/captureGhidraLaunch.mjs | 36 ++ tests/fixtures/fakeCdpBrowser.ts | 6 +- tests/fixtures/fakeGhidra.mjs | 128 +++++ tests/ghidraClient.test.ts | 243 ++++++++ tests/ghidraDoctor.test.ts | 152 +++++ tests/ghidraInstallation.test.ts | 174 ++++++ tests/ghidraLauncher.test.ts | 133 +++++ tests/ghidraProvider.test.ts | 149 +++++ tests/productCatalog.test.ts | 8 +- tests/providerArchitecture.test.ts | 18 +- tests/providerProcess.test.ts | 18 + tests/runtime.test.ts | 2 +- tests/setup.test.ts | 80 ++- tests/setupConfig.test.ts | 27 + tests/setupLifecycle.test.ts | 14 +- typedoc.json | 1 + 234 files changed, 8968 insertions(+), 513 deletions(-) create mode 100644 bridge/ghidra/ReaGhidraBridge.java create mode 100644 docs/api/classes/ghidra_GhidraClient.GhidraClient.html create mode 100644 docs/api/classes/ghidra_GhidraLauncher.GhidraHeadlessLauncher.html create mode 100644 docs/api/classes/ghidra_GhidraLauncher.GhidraLaunchError.html create mode 100644 docs/api/classes/ghidra_GhidraProvider.GhidraProvider.html create mode 100644 docs/api/classes/ghidra_GhidraResponseBuffer.GhidraResponseBuffer.html create mode 100644 docs/api/classes/ghidra_GhidraResponseRouter.GhidraResponseRouter.html create mode 100644 docs/api/classes/ghidra_GhidraSessionError.GhidraSessionError.html create mode 100644 docs/api/functions/application_Setup.systemSetupHost.html create mode 100644 docs/api/functions/ghidra_GhidraAnalysisProfile.resolveGhidraAnalysisProfile.html create mode 100644 docs/api/functions/ghidra_GhidraDiagnostics.createGhidraDiagnostics.html create mode 100644 docs/api/functions/ghidra_GhidraDoctor.inspectSystemGhidraProvider.html create mode 100644 docs/api/functions/ghidra_GhidraDoctor.projectGhidraDoctorInspection.html create mode 100644 docs/api/functions/ghidra_GhidraInstallation.ghidraInstallationDiagnostics.html create mode 100644 docs/api/functions/ghidra_GhidraInstallation.ghidraJavaEnvironment.html create mode 100644 docs/api/functions/ghidra_GhidraInstallation.inspectGhidraInstallation.html create mode 100644 docs/api/functions/ghidra_GhidraLauncher.ghidraHeadlessArguments.html create mode 100644 docs/api/functions/ghidra_GhidraSessionValues.isGhidraShutdownAcknowledgement.html create mode 100644 docs/api/functions/ghidra_GhidraSessionValues.parseGhidraSessionInfo.html create mode 100644 docs/api/functions/ghidra_GhidraSocketConnection.attachGhidraSocket.html create mode 100644 docs/api/functions/ghidra_GhidraSocketConnection.connectGhidraSocketOnce.html create mode 100644 docs/api/functions/ghidra_protocol.ghidraResponseResult.html create mode 100644 docs/api/functions/ghidra_protocol.parseGhidraResponseLine.html create mode 100644 docs/api/interfaces/application_Doctor.DoctorProviderCheck.html create mode 100644 docs/api/interfaces/application_Doctor.DoctorProviderInspection.html create mode 100644 docs/api/interfaces/application_Doctor.SystemDoctorHostOptions.html create mode 100644 docs/api/interfaces/domain_errors.ProviderAdapterErrorOptions.html create mode 100644 docs/api/interfaces/ghidra_GhidraClientTypes.GhidraClientOptions.html create mode 100644 docs/api/interfaces/ghidra_GhidraDiagnostics.GhidraDiagnosticsOptions.html create mode 100644 docs/api/interfaces/ghidra_GhidraInstallation.GhidraInstallationCheck.html create mode 100644 docs/api/interfaces/ghidra_GhidraInstallation.GhidraInstallationHost.html create mode 100644 docs/api/interfaces/ghidra_GhidraInstallation.GhidraInstallationInspection.html create mode 100644 docs/api/interfaces/ghidra_GhidraInstallation.GhidraInstallationOptions.html create mode 100644 docs/api/interfaces/ghidra_GhidraInstallation.GhidraJavaObservation.html create mode 100644 docs/api/interfaces/ghidra_GhidraLauncher.GhidraHeadlessArgumentOptions.html create mode 100644 docs/api/interfaces/ghidra_GhidraLauncher.GhidraHeadlessLauncherOptions.html create mode 100644 docs/api/interfaces/ghidra_GhidraLauncher.GhidraLaunch.html create mode 100644 docs/api/interfaces/ghidra_GhidraLauncher.GhidraLaunchSession.html create mode 100644 docs/api/interfaces/ghidra_GhidraLauncher.GhidraLauncher.html create mode 100644 docs/api/interfaces/ghidra_GhidraResponseBuffer.GhidraResponseBufferOptions.html create mode 100644 docs/api/interfaces/ghidra_GhidraResponseRouter.GhidraResponseRouterOptions.html create mode 100644 docs/api/interfaces/ghidra_GhidraSessionError.GhidraSessionErrorOptions.html create mode 100644 docs/api/interfaces/ghidra_GhidraSocketConnection.GhidraSocketHandlers.html create mode 100644 docs/api/modules/ghidra_GhidraAnalysisProfile.html create mode 100644 docs/api/modules/ghidra_GhidraClient.html create mode 100644 docs/api/modules/ghidra_GhidraClientTypes.html create mode 100644 docs/api/modules/ghidra_GhidraDefaults.html create mode 100644 docs/api/modules/ghidra_GhidraDiagnostics.html create mode 100644 docs/api/modules/ghidra_GhidraDoctor.html create mode 100644 docs/api/modules/ghidra_GhidraInstallation.html create mode 100644 docs/api/modules/ghidra_GhidraLauncher.html create mode 100644 docs/api/modules/ghidra_GhidraProvider.html create mode 100644 docs/api/modules/ghidra_GhidraResponseBuffer.html create mode 100644 docs/api/modules/ghidra_GhidraResponseRouter.html create mode 100644 docs/api/modules/ghidra_GhidraSessionError.html create mode 100644 docs/api/modules/ghidra_GhidraSessionValues.html create mode 100644 docs/api/modules/ghidra_GhidraSocketConnection.html create mode 100644 docs/api/modules/ghidra_protocol.html create mode 100644 docs/api/types/application_Setup.SetupProviderEnvironment.html create mode 100644 docs/api/types/ghidra_GhidraClientTypes.GhidraDiagnostic.html create mode 100644 docs/api/types/ghidra_GhidraClientTypes.GhidraStartResult.html create mode 100644 docs/api/types/ghidra_GhidraSessionError.GhidraSessionFailureKind.html create mode 100644 docs/api/types/ghidra_GhidraSessionValues.GhidraSessionInfo.html create mode 100644 docs/api/types/ghidra_protocol.GhidraBridgeResponse.html create mode 100644 docs/api/variables/ghidra_GhidraDefaults.GHIDRA_ANALYSIS_TIMEOUT_SECONDS.html create mode 100644 docs/api/variables/ghidra_GhidraDefaults.GHIDRA_BRIDGE_VERSION.html create mode 100644 docs/api/variables/ghidra_GhidraDefaults.GHIDRA_MAX_CPU.html create mode 100644 docs/api/variables/ghidra_GhidraDefaults.GHIDRA_MAX_HEAP.html create mode 100644 docs/api/variables/ghidra_GhidraDefaults.GHIDRA_MAX_LINE_BYTES.html create mode 100644 docs/api/variables/ghidra_GhidraDefaults.GHIDRA_REQUEST_TIMEOUT_MS.html create mode 100644 docs/api/variables/ghidra_GhidraDefaults.GHIDRA_STARTUP_TIMEOUT_MS.html create mode 100644 docs/api/variables/ghidra_GhidraInstallation.SUPPORTED_GHIDRA_JAVA_MAJOR.html create mode 100644 docs/api/variables/ghidra_GhidraInstallation.SUPPORTED_GHIDRA_VERSION.html create mode 100644 docs/api/variables/ghidra_GhidraProvider.GHIDRA_PROVIDER_IDENTITY.html create mode 100644 docs/api/variables/ghidra_GhidraProvider.GHIDRA_PROVIDER_TOOL_CONTRACTS.html create mode 100644 scripts/verify-real-ghidra.mjs create mode 100644 src/doctorRuntime.ts create mode 100644 src/ghidra/GhidraAnalysisProfile.ts create mode 100644 src/ghidra/GhidraClient.ts create mode 100644 src/ghidra/GhidraClientTypes.ts create mode 100644 src/ghidra/GhidraDefaults.ts create mode 100644 src/ghidra/GhidraDiagnostics.ts create mode 100644 src/ghidra/GhidraDoctor.ts create mode 100644 src/ghidra/GhidraInstallation.ts create mode 100644 src/ghidra/GhidraLauncher.ts create mode 100644 src/ghidra/GhidraProvider.ts create mode 100644 src/ghidra/GhidraResponseBuffer.ts create mode 100644 src/ghidra/GhidraResponseRouter.ts create mode 100644 src/ghidra/GhidraSessionError.ts create mode 100644 src/ghidra/GhidraSessionValues.ts create mode 100644 src/ghidra/GhidraSocketConnection.ts create mode 100644 src/ghidra/protocol.ts create mode 100755 tests/fixtures/captureGhidraLaunch.mjs create mode 100644 tests/fixtures/fakeGhidra.mjs create mode 100644 tests/ghidraClient.test.ts create mode 100644 tests/ghidraDoctor.test.ts create mode 100644 tests/ghidraInstallation.test.ts create mode 100644 tests/ghidraLauncher.test.ts create mode 100644 tests/ghidraProvider.test.ts diff --git a/AGENTS.md b/AGENTS.md index cd179affe..92fee9485 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -2,16 +2,16 @@ ## Product Direction -REA exposes reverse-engineering tools through a CLI and MCP server. Hopper is its current binary-analysis provider; keep provider-specific code out of the domain and application layers. +REA exposes reverse-engineering tools through a CLI and MCP server. Hopper is the current operation-capable deep binary-analysis provider. The Linux x64 Ghidra provider currently supplies discovery, exact profile commitment, and a private read-only headless session but intentionally declares no binary operations. Keep provider-specific code out of the domain and application layers. Prioritize: - tool results that distinguish observations, inferences, and unknowns; - equivalent behavior through the CLI and MCP; - additive, idempotent configuration with backups; -- end-to-end tests for packaged artifacts and real Hopper claims. +- end-to-end tests for packaged artifacts and real Hopper/Ghidra claims. -Installers must not install or upgrade Homebrew, Node.js, npm, or other unrelated software. `rea setup` must print its planned changes and require approval before writing files or installing Hopper. +Installers must not install or upgrade Homebrew, Node.js, npm, Java, Ghidra, or other unrelated software. Ghidra is bring-your-own. `rea setup` must print its planned changes and require approval before writing files or installing Hopper. REA is a local-only tool; do not sanitize actionable local diagnostics such as artifact paths, digests, mismatch locations, or analysis metadata, while continuing to redact genuine secrets such as credentials and authorization headers. @@ -31,11 +31,14 @@ See [docs/architecture.mermaid](docs/architecture.mermaid) for a visual architec - `src/browser/`: loopback CDP discovery, bounded WebSocket transport, exact-origin target authorization, and passive browser observation normalization. - `src/hopper/`: Hopper launch and Unix-socket protocol mechanics. `BridgeLauncher.ts` spawns the Hopper app with the in-process bridge, `HopperClient.ts` correlates request/response over the socket with timeouts and cancellation, `protocol.ts` frames bridge messages. - `bridge/hopper_bridge.py`: runs inside Hopper and adapts declared operations to Hopper's public Python API. Hopper's bundled MCP server is not used. +- `src/ghidra/`: exact Ghidra 12.1.2/JDK 21 installation inspection, analysis-profile commitment, isolated `analyzeHeadless` launch, authenticated Unix-socket client, and the intentionally capability-empty provider foundation. +- `bridge/ghidra/ReaGhidraBridge.java`: packaged `HeadlessScript` loaded through Ghidra's `scriptPath`; it reports post-analysis identity and supports only authenticated `ping`/`shutdown` in the foundation release. - `src/application/`: shared CLI/MCP session composition, setup and diagnostics, and enhanced workflows. `AnalysisProviderRegistry` discovers overlapping deep candidates without starting them; `SessionProviderRouter` binds one candidate per target and composes it with disjoint auxiliary providers. - `src/server/`: MCP request translation. `createServer.ts` assembles the MCP server, `registerOfficialTools.ts`/`registerEnhancedTools.ts` register each tool set, `toolResult.ts` maps `Result` values to MCP content. - `docs/product-catalog.json`: generated package, tool-family, provider, setup-client, schema-version, and CLI facts. Regenerate it from source; do not edit it by hand. - `tests/`: Vitest suite. `tests/fixtures/` holds reusable provider-process fixtures plus the fake launcher, Hopper bridge, and CDP seams. - `scripts/verify-real-hopper.mjs`: real-Hopper end-to-end verifier. +- `scripts/verify-real-ghidra.mjs`: real Linux Ghidra verifier for one isolated read-only import, handshake, and complete cleanup. - `scripts/verify-real-browser.mjs`: real Chrome end-to-end verifier for the passive CDP provider. - `scripts/print-mcp-config.mjs`: prints an MCP server config with absolute paths filled in (`npm run config:print -- /path/to/binary`). @@ -53,6 +56,7 @@ See [docs/architecture.mermaid](docs/architecture.mermaid) for a visual architec - `npm run jscpd`: detect duplicate code blocks. - `npm run scan:todos`: scan for TODO, FIXME, and HACK markers. - `npm run verify:hopper`: build and run the real-Hopper verifier with two distinct binaries. +- `npm run verify:ghidra`: build and run the real-Ghidra verifier against `GHIDRA_INSTALL_DIR` and optional `GHIDRA_TARGET_PATH`. - `npm run verify:browser`: build and run the real Chrome verifier against `REA_BROWSER_EXECUTABLE` or a platform-default Chrome-family executable. - `npm run verify:package`: pack and test the CLI, setup transaction, skill, and 78-tool target-free MCP server in an isolated environment. - `npm run docs:generate`: generate API documentation from JSDoc comments into `docs/api/` using TypeDoc. @@ -65,6 +69,8 @@ Pre-commit hooks via Husky run `oxlint` on staged files before every commit. Use ## Configuration & Environment Variables - `REA_ANALYSIS_PROVIDER` (optional, default `auto`): require one deep-analysis provider ID for startup and one-shot commands, or use deterministic automatic selection. A request-level `provider_id`/`--provider` takes precedence. +- `GHIDRA_INSTALL_DIR` (optional): absolute root of an extracted official Ghidra 12.1.2 distribution. The current adapter supports Linux x64 only. +- `JAVA_HOME` (optional): absolute 64-bit full JDK 21 root used by Ghidra. When absent, doctor probes `java`/`javac` from `PATH`. - `HOPPER_TARGET_PATH` (optional): absolute initial binary or `.hop` target. Target-free MCP sessions use `open_binary` instead. - `HOPPER_LAUNCHER_PATH` (optional): override the Hopper executable path (defaults to `/Applications/Hopper Disassembler.app/Contents/MacOS/hopper`). - `HOPPER_TARGET_KIND` (optional, default `executable`): startup kind for `HOPPER_TARGET_PATH`; dynamic targets are classified from their paths and headers. @@ -79,8 +85,8 @@ Use ESM TypeScript, two-space indentation, and Prettier defaults. Keep compiler ## Testing Guidelines -Name tests `*.test.ts`. Use Vitest and production seams (`tests/fixtures/`) rather than module mocks. Domain tests assert pure behavior; adapter tests use the fake launcher/socket; MCP tests connect with the beta.3 client. Preserve the 33 direct, 10 enhanced, 5 native, 2 artifact, 8 browser, 2 Electron, and 18 session tool inventory (78 total). Cover malformed input, cancellation, timeouts, process exit, concurrency, limits, and clean shutdown. Real Hopper and browser claims cannot be replaced by mocks; use `npm run verify:hopper` with two distinct binaries and `npm run verify:browser` with Chrome. +Name tests `*.test.ts`. Use Vitest and production seams (`tests/fixtures/`) rather than module mocks. Domain tests assert pure behavior; adapter tests use fake launcher/socket seams; MCP tests connect with the beta.3 client. Preserve the 33 direct, 10 enhanced, 5 native, 2 artifact, 8 browser, 2 Electron, and 18 session tool inventory (78 total). Cover malformed input, cancellation, timeouts, process exit, concurrency, limits, and clean shutdown. Real Hopper, Ghidra, and browser claims cannot be replaced by mocks; use `npm run verify:hopper` with two distinct binaries, `npm run verify:ghidra` with the exact supported BYO installation, and `npm run verify:browser` with Chrome. ## Commit & Pull Request Guidelines -Use Conventional Commit subjects because Release Please derives versions and changelogs from them. Examples: `feat: add historical source import`, `fix(process): stop timers after exit`, and `docs: update architecture`. Use `!` or a `BREAKING CHANGE:` footer for breaking changes. Pull request titles must follow the same format because squash merges use the title as the release commit. Pull requests should describe contract or behavior changes, list verification commands, link issues, and include sanitized MCP examples when schemas change. State whether real Hopper verification was performed. Never commit binaries, Hopper documents, credentials, `dist/`, `node_modules/`, or local planning artifacts (e.g. `.codex/`). +Use Conventional Commit subjects because Release Please derives versions and changelogs from them. Examples: `feat: add historical source import`, `fix(process): stop timers after exit`, and `docs: update architecture`. Use `!` or a `BREAKING CHANGE:` footer for breaking changes. Pull request titles must follow the same format because squash merges use the title as the release commit. Pull requests should describe contract or behavior changes, list verification commands, link issues, and include sanitized MCP examples when schemas change. State whether real Hopper/Ghidra verification was performed. Never commit binaries, Hopper or Ghidra project documents, credentials, `dist/`, `node_modules/`, or local planning artifacts (e.g. `.codex/`). diff --git a/README.md b/README.md index 091f21b83..3f82d6071 100644 --- a/README.md +++ b/README.md @@ -30,7 +30,7 @@ See a feature in an app that you want in your own product? Give the app to your agent—even without its source code. With REA, the agent can investigate the feature, explain how it works, show its evidence, and build a version adapted to your stack and requirements. -REA gives agents one consistent way to investigate software. Today that includes deep native analysis through Hopper, complete function dossiers, reproducible Evidence v2 records, controlled process capture, passive website and Electron observation, and bounded JavaScript/source-map reconstruction. The longer-term toolkit extends the same agent workflow to APIs, protocols, mobile artifacts, firmware, richer runtime behavior, and differences between versions. +REA gives agents one consistent way to investigate software. Today that includes deep native analysis through Hopper, a bring-your-own Ghidra headless-session foundation on Linux, complete function dossiers, reproducible Evidence v2 records, controlled process capture, passive website and Electron observation, and bounded JavaScript/source-map reconstruction. The Ghidra foundation deliberately exposes no binary operations yet; Hopper remains the operation-capable deep provider. The longer-term toolkit extends the same agent workflow to APIs, protocols, mobile artifacts, firmware, richer runtime behavior, and differences between versions. Reverse engineering normally makes the operator choose a tool, learn its API, move evidence between programs, and decide what to inspect next. REA gives that work to the agent through commands, skills, structured results, and repeatable investigation workflows. @@ -153,7 +153,7 @@ Choose either the no-install commands or the global installation. You do not nee - Node.js 22.19+ or 24.11+ (including newer releases) - npm; REA does not require or install a particular npm version -Deep binary analysis currently uses [Hopper](https://www.hopperapp.com/), a separate desktop application with its own license. REA discovers it through the provider registry and binds it explicitly to each deep-analysis target; Ghidra is planned but is not shipped yet. Setup reuses an existing Hopper installation. If Hopper is missing, interactive setup proposes the official package and includes it in the confirmation plan. Unattended installation requires `rea setup --yes --install-hopper`. +Deep binary operations currently use [Hopper](https://www.hopperapp.com/), a separate desktop application with its own license. REA also ships the first Ghidra provider layer: Linux x64 discovery, exact Ghidra 12.1.2/JDK 21 validation, deterministic target/profile binding, and a private read-only `analyzeHeadless` session. That layer intentionally declares no binary operations until their semantic contracts and real-provider conformance land. Setup reuses an existing Hopper installation or an operator-supplied Ghidra installation. It never downloads Ghidra or installs Java. If neither provider is ready, interactive setup proposes Hopper; unattended Hopper installation requires `rea setup --yes --install-hopper`. If something is not working, run: @@ -186,6 +186,22 @@ Install the missing distribution packages and rerun `rea setup`. Linux demo auto REA defaults `HOPPER_LAUNCHER_PATH` to `/Applications/Hopper Disassembler.app/Contents/MacOS/hopper` on macOS and `/opt/hopper/bin/Hopper` on Linux. Explicit configuration always takes precedence. +### Ghidra headless-session foundation + +The current Ghidra adapter supports the exact official Ghidra 12.1.2 release on Linux x64 with a 64-bit full JDK 21. Download and extract those projects yourself, then configure absolute paths: + +```bash +export GHIDRA_INSTALL_DIR=/absolute/path/to/ghidra_12.1.2_PUBLIC +export JAVA_HOME=/absolute/path/to/jdk-21 # optional when java and javac resolve from PATH +rea doctor --json +rea setup +rea providers --json +``` + +Doctor distinguishes missing configuration, a bad installation root, the wrong Ghidra or Java version, a JRE without `javac`, a missing `support/analyzeHeadless`, and an unsupported platform or architecture. Approved setup only copies the verified non-secret paths into detected MCP registrations; it does not modify the Ghidra installation or install/download Ghidra or Java. + +REA loads its packaged Java `HeadlessScript` with `-scriptPath`, imports the target into a mode-0700 temporary project, enables `-readOnly` and `-deleteProject`, caps auto-analysis at 300 seconds with two CPUs and a 2 GiB Java heap, and authenticates `ping`/`shutdown` over a mode-0600 Unix socket. It isolates Ghidra home/cache/config/temp paths and removes the owned project, socket, process group, and runtime root on close, cancellation, timeout, or process exit. This proves the provider lifecycle and analysis-profile commitment; it does **not** make `decompile`, inventory, xref, or function operations available through Ghidra in this release. + To remove only REA-owned MCP registrations and the managed skill: ```bash @@ -362,7 +378,7 @@ REA is growing into a toolkit for understanding software across static artifacts ### Now 1. **Maintain truthful product metadata** — extend the shipped canonical catalog and drift checks whenever versions, tools, providers, schemas, setup clients, or CLI capabilities change. -2. **A second deep-analysis provider** — build the read-only Ghidra adapter on the shipped registry, target-binding, and bounded provider-process lifecycle foundations for free, open-source Linux analysis without pretending Hopper and Ghidra results are textually identical. +2. **Ghidra read-only operations** — extend the shipped discovery/profile/headless-session foundation with individually admitted inventory, decompilation, call, and xref capabilities, verified on real source-owned binaries without pretending Hopper and Ghidra results are textually identical. 3. **JavaScript application reconstruction** — connect packages, ASAR entries, main/preload/renderer bundles, source maps, Electron IPC boundaries, service-worker assets, and native add-ons in one evidence-bearing application graph. ### Next @@ -379,7 +395,7 @@ REA is growing into a toolkit for understanding software across static artifacts New providers must produce the same evidence and safety metadata as existing capabilities before they become part of the public workflow. Once REA has multiple optional toolchains, setup can become capability-selective; the consent rules for that future work are recorded in the [installation roadmap](docs/roadmap.md). -See the [static-analysis provider evaluation](docs/provider-evaluation.md) for the accepted Ghidra direction and provider comparison matrix, and [ADR-0001](docs/adr/0001-provider-selection-and-analysis-profiles.md) for the binding, selection, profile, snapshot, and compatibility decisions that gate implementation. +See the [static-analysis provider evaluation](docs/provider-evaluation.md) for the shipped Ghidra foundation, remaining admission gates, and provider comparison matrix, and [ADR-0001](docs/adr/0001-provider-selection-and-analysis-profiles.md) for the binding, selection, profile, snapshot, and compatibility decisions. ## Using REA with other agents @@ -413,9 +429,9 @@ flowchart LR REA --> Session["Target-bound session router"] Session --> Registry["Deep-provider registry
deterministic selection"] Registry --> Hopper["Hopper provider"] - Registry -. planned, not shipped .-> Ghidra["Ghidra provider"] + Registry --> Ghidra["Ghidra provider
headless foundation; no binary ops"] Hopper --> Runtime["Owned provider runtime
deadline + bounded diagnostics + cleanup"] - Ghidra -. planned .-> Runtime + Ghidra --> Runtime Session --> Native["Native macOS provider"] Session --> Artifact["Artifact graph provider"] REA --> Browser["Browser CDP provider"] @@ -491,6 +507,10 @@ diagnostics. `binary_session`, `rea providers`, and `rea capabilities` expose the authoritative `analysis_provider_candidates` and `analysis_provider_binding` fields. Reopening the same target without a selector keeps its binding; runtime failure never selects another provider silently. +Ghidra can appear as an available, target-compatible candidate after doctor +validates its exact installation, but its capability list is empty in this +foundation release. Selecting it does not make Hopper-backed operations +available and never triggers a silent fallback. ### CLI exit status @@ -554,7 +574,7 @@ unpacked; REA does not silently accept the mismatched artifact. ## Security model -REA does not provide a hosted analysis service. Hopper communication uses an authenticated private local socket. Dynamic capabilities are disabled by default and require both operator policy and explicit per-call approval. REA is not a security sandbox: providers and launched targets run with the current user's permissions, and each capability reports its side effects and limitations. Report vulnerabilities through the private process in [SECURITY.md](SECURITY.md). +REA does not provide a hosted analysis service. Hopper and Ghidra bridge communication uses authenticated private local sockets. Dynamic capabilities are disabled by default and require both operator policy and explicit per-call approval. REA is not a security sandbox: providers and launched targets run with the current user's permissions, and each capability reports its side effects and limitations. Report vulnerabilities through the private process in [SECURITY.md](SECURITY.md). ## FAQ @@ -579,6 +599,13 @@ No. Setup can install Hopper for you, but Hopper remains separate software with +
+Does REA install or include Ghidra or Java? + +No. Ghidra support is bring-your-own. REA packages only its Java bridge source, validates the exact supported Ghidra 12.1.2 and 64-bit JDK 21 installation, and loads that bridge through Ghidra's external script path after setup approval records the paths. + +
+
Does REA upload the app? @@ -606,7 +633,7 @@ See [CONTRIBUTING.md](CONTRIBUTING.md) for setup, architecture, tests, and relea ## Project links -[npm](https://www.npmjs.com/package/rea-agents) · [Issues](https://github.com/morluto/rea/issues) · [Security](SECURITY.md) · [Contributing](CONTRIBUTING.md) · [Hopper](https://www.hopperapp.com/) +[npm](https://www.npmjs.com/package/rea-agents) · [Issues](https://github.com/morluto/rea/issues) · [Security](SECURITY.md) · [Contributing](CONTRIBUTING.md) · [Hopper](https://www.hopperapp.com/) · [Ghidra](https://github.com/NationalSecurityAgency/ghidra) ## License diff --git a/README_ar.md b/README_ar.md index a3b24886f..c0d4b70c8 100644 --- a/README_ar.md +++ b/README_ar.md @@ -78,6 +78,8 @@ npx skills add morluto/rea يعرض `rea setup` خطة التغييرات كاملة ويطلب التأكيد قبل تطبيقها. لا يثبت أو يحدّث Homebrew أو Node.js أو npm. إذا كان [Hopper](https://www.hopperapp.com/) مفقودًا، يقترح Setup الحزمة الرسمية. Hopper برنامج منفصل يحتاج إلى ترخيص خاص به. +إذا كان Ghidra 12.1.2 PUBLIC وJDK 21 الكامل بنواة 64 بت مثبتين مسبقًا على Linux ‏64 بت، فيمكن لـ Setup أيضًا تسجيل `GHIDRA_INSTALL_DIR` و`JAVA_HOME` الاختياري بعد الموافقة. لا ينزّل REA أو يثبت أو يعدّل Ghidra أو Java. يقدّم هذا الإصدار أساس جلسة headless خاصة ومعزولة فقط، ولا يعرض بعد عمليات تحليل الملفات الثنائية عبر Ghidra؛ لذلك تستمر مسارات التحليل العميق الحالية باستخدام Hopper. + #### التثبيت على Linux واستكشاف الأخطاء على Ubuntu 24.04+ وFedora 41+ وArch Linux ‏64 بت، ينزّل REA حزمة DEB أو RPM أو Arch الرسمية، ويتحقق من الحجم وقيمة التحقق المنشورين، ثم يستخدم `apt-get` أو `dnf` أو `pacman` لحل الاعتماديات. عند التشغيل دون root يعرض `pkexec` طلب تفويض النظام. لا يستدعي REA الأمر `sudo`. @@ -189,8 +191,10 @@ flowchart LR Human[المستخدم] --> Agent[وكيل البرمجة] Agent --> REA[REA] Human -->|CLI| REA - REA --> Hopper[محرك التحليل] + REA --> Hopper[عمليات تحليل Hopper] Hopper --> App[تطبيقك] + REA -.-> Ghidra[أساس Ghidra headless
دون عمليات ثنائية] + Ghidra -.-> App ``` يستخدم CLI وخادم MCP محرك التحليل نفسه. تغلق أوامر الطرفية التطبيق عند انتهائها، بينما تبقيه جلسة الوكيل مفتوحًا أثناء الاستقصاء. @@ -215,15 +219,16 @@ npx -y rea-agents compare /absolute/path/to/left-evidence.json /absolute/path/to لتجنب مربع اختيار معمارية ملف شامل، حدد معطيات المحمل مسبقًا: ```bash -export HOPPER_LOADER_ARGS_JSON='["-l", "Mach-O", "--aarch68"]' +export HOPPER_LOADER_ARGS_JSON='["-l", "Mach-O", "--aarch64"]' ``` يدير REA دورة حياة Hopper ويحاول إغلاق العمليات التي بدأها عند انتهاء الأمر أو جلسة MCP. ## الأمان والخصوصية -- يبقى تحليل الملف التنفيذي محليًا بين REA وHopper. +- يبقى تحليل الملف التنفيذي محليًا بين REA ومزوّد التحليل المختار. - لا يرفع REA الأهداف إلى خدمة مستضافة. +- تستخدم جلسات Ghidra مشروعًا مؤقتًا معزولًا ولا تفتح مشاريع Ghidra التي يملكها المستخدم أو تعدّلها. - راجع الملفات التنفيذية غير الموثوقة واعزلها كما تفعل مع أي مدخل أصلي قد يكون ضارًا. - أبلغ عن الثغرات وفق [سياسة الأمان](SECURITY.md)، وليس عبر قضية عامة. @@ -246,7 +251,7 @@ export HOPPER_LOADER_ARGS_JSON='["-l", "Mach-O", "--aarch68"]'
هل يعمل REA على Linux أو Windows؟ -نعم، يعمل REA على macOS 12+ وUbuntu 24.04+ وFedora 41+ وArch Linux ‏64 بت؛ Windows غير مدعوم حاليًا. يعتمد التحليل العميق على تطبيق Hopper وواجهة Python الخاصة به. +نعم، يعمل REA على macOS 12+ وUbuntu 24.04+ وFedora 41+ وArch Linux ‏64 بت؛ Windows غير مدعوم حاليًا. تعتمد عمليات التحليل العميق الحالية على تطبيق Hopper وواجهة Python الخاصة به، بينما لا يقدّم أساس Ghidra الجديد عمليات تحليل ثنائية بعد.
diff --git a/README_ja.md b/README_ja.md index 8d4bff97c..c5b516329 100644 --- a/README_ja.md +++ b/README_ja.md @@ -80,6 +80,8 @@ npx skills add morluto/rea `rea setup` は変更計画を表示し、確認後に適用します。Homebrew、Node.js、npm をインストールまたは更新しません。[Hopper](https://www.hopperapp.com/) がない場合は公式パッケージを提案します。Hopper は別製品で、ライセンスは別途必要です。 +64 ビット Linux に Ghidra 12.1.2 PUBLIC と完全な 64 ビット JDK 21 がすでにある場合、Setup は承認後に `GHIDRA_INSTALL_DIR` と任意の `JAVA_HOME` も登録できます。REA は Ghidra や Java をダウンロード、インストール、変更しません。このリリースが提供するのは隔離されたプライベート headless セッションの基盤であり、Ghidra のバイナリ解析操作はまだ公開されていないため、既存の深い解析ワークフローは引き続き Hopper を使用します。 + #### Linux のインストールとトラブルシューティング Ubuntu 24.04+、Fedora 41+、64 ビット Arch Linux では、REA が公式の DEB、RPM、または Arch パッケージを取得し、公開されたサイズとチェックサムを検証してから `apt-get`、`dnf`、または `pacman` で依存関係を解決します。root 以外では `pkexec` がシステム承認を表示します。REA は `sudo` を呼び出しません。 @@ -178,8 +180,10 @@ Setup は Claude Code、Claude Desktop、Codex、Cursor、Gemini CLI、Windsurf flowchart LR Agent["コーディングエージェント"] --> REA["REA
CLI + MCP"] Terminal["ターミナル"] --> REA - REA --> Hopper["解析エンジン"] + REA --> Hopper["Hopper 解析操作"] Hopper --> App["あなたのアプリ"] + REA -.-> Ghidra["Ghidra headless 基盤
バイナリ操作は未提供"] + Ghidra -.-> App ``` CLI と MCP サーバーは同じ解析エンジンを使います。ターミナルのコマンドは終了時にアプリを閉じ、エージェントのセッションは調査中アプリを開いたままにします。 @@ -212,7 +216,7 @@ REA は必要なときに Hopper を起動します。Hopper のランチャー ## セキュリティモデル -各セッションはランダムな capability token と現在のユーザーだけが使える Unix ソケットを使用します。これはサンドボックスではなく、同じユーザー権限で動作する悪意あるプロセスを防御しません。信頼できないバイナリの解析は、現在の macOS ユーザー権限で Hopper に委譲されます。脆弱性は [SECURITY.md](SECURITY.md) の非公開手順で報告してください。 +各セッションはランダムな capability token と現在のユーザーだけが使える Unix ソケットを使用します。Ghidra セッションは隔離された一時プロジェクトも使用し、ユーザー所有の Ghidra プロジェクトを開いたり変更したりしません。これはサンドボックスではなく、同じ OS ユーザー権限で動作する悪意あるプロセスを防御しません。信頼できないバイナリの解析は、現在のユーザー権限で選択されたローカルプロバイダーに委譲されます。脆弱性は [SECURITY.md](SECURITY.md) の非公開手順で報告してください。 ## FAQ diff --git a/README_ko.md b/README_ko.md index 9c7c0f9f1..f2ef6ba18 100644 --- a/README_ko.md +++ b/README_ko.md @@ -80,6 +80,8 @@ npx skills add morluto/rea `rea setup`은 전체 변경 계획을 표시하고 확인 후 적용합니다. Homebrew, Node.js 또는 npm을 설치하거나 업데이트하지 않습니다. [Hopper](https://www.hopperapp.com/)가 없으면 공식 패키지 설치를 제안합니다. Hopper는 별도 라이선스가 필요한 독립 소프트웨어입니다. +64비트 Linux에 Ghidra 12.1.2 PUBLIC과 완전한 64비트 JDK 21이 이미 설치되어 있다면 Setup은 승인 후 `GHIDRA_INSTALL_DIR`과 선택 사항인 `JAVA_HOME`도 등록할 수 있습니다. REA는 Ghidra나 Java를 다운로드, 설치 또는 수정하지 않습니다. 이 릴리스는 격리된 비공개 headless 세션 기반만 제공하며 Ghidra 바이너리 분석 작업은 아직 노출하지 않으므로, 기존 심층 분석 워크플로는 계속 Hopper를 사용합니다. + #### Linux 설치 및 문제 해결 Ubuntu 24.04+, Fedora 41+, 64비트 Arch Linux에서 REA는 공식 DEB, RPM 또는 Arch 패키지를 내려받아 게시된 크기와 체크섬을 검증한 뒤 `apt-get`, `dnf` 또는 `pacman`으로 의존성을 설치합니다. root가 아니면 `pkexec`가 시스템 승인 창을 표시합니다. REA는 `sudo`를 호출하지 않습니다. @@ -178,8 +180,10 @@ Setup은 Claude Code, Claude Desktop, Codex, Cursor, Gemini CLI, Windsurf, Devin flowchart LR Agent["코딩 에이전트"] --> REA["REA
CLI + MCP"] Terminal["터미널"] --> REA - REA --> Hopper["분석 엔진"] + REA --> Hopper["Hopper 분석 작업"] Hopper --> App["사용자의 앱"] + REA -.-> Ghidra["Ghidra headless 기반
바이너리 작업 미제공"] + Ghidra -.-> App ``` CLI와 MCP 서버는 같은 분석 엔진을 사용합니다. 터미널 명령은 끝날 때 앱을 닫고, 에이전트 세션은 조사하는 동안 앱을 열어 둡니다. @@ -212,7 +216,7 @@ REA는 필요할 때 Hopper를 시작합니다. Hopper 런처는 내부적으로 ## 보안 모델 -각 세션은 무작위 capability token과 현재 사용자 전용 Unix 소켓을 사용합니다. 이는 샌드박스가 아니며 같은 사용자로 실행되는 악성 프로세스를 방어하지 않습니다. 신뢰할 수 없는 바이너리를 열면 현재 macOS 사용자 권한으로 Hopper가 분석합니다. 취약점은 [SECURITY.md](SECURITY.md)의 비공개 절차로 신고하세요. +각 세션은 무작위 capability token과 현재 사용자 전용 Unix 소켓을 사용합니다. Ghidra 세션은 격리된 임시 프로젝트도 사용하며 사용자 소유 Ghidra 프로젝트를 열거나 수정하지 않습니다. 이는 샌드박스가 아니며 같은 운영 체제 사용자로 실행되는 악성 프로세스를 방어하지 않습니다. 신뢰할 수 없는 바이너리를 열면 선택한 로컬 공급자가 현재 사용자 권한으로 분석합니다. 취약점은 [SECURITY.md](SECURITY.md)의 비공개 절차로 신고하세요. ## FAQ diff --git a/README_zh.md b/README_zh.md index a6d743447..b90746402 100644 --- a/README_zh.md +++ b/README_zh.md @@ -80,6 +80,8 @@ npx skills add morluto/rea `rea setup` 会先显示完整变更计划并请求确认。它不会安装或更新 Homebrew、Node.js 或 npm。缺少 [Hopper](https://www.hopperapp.com/) 时，Setup 会提议安装官方软件包；Hopper 是需要单独许可证的独立软件。 +如果你已在 64 位 Linux 上安装 Ghidra 12.1.2 PUBLIC 和完整的 64 位 JDK 21，Setup 也可以在批准后登记 `GHIDRA_INSTALL_DIR` 和可选的 `JAVA_HOME`。REA 不会下载、安装或修改 Ghidra 或 Java。本版本交付的是隔离的私有 headless 会话基础，尚未开放 Ghidra 二进制分析操作，因此现有的深度分析工作流仍使用 Hopper。 + #### Linux 安装与故障排除 在 Ubuntu 24.04+、Fedora 41+ 和 64 位 Arch Linux 上，REA 会下载 Hopper 官方的 DEB、RPM 或 Arch 软件包，验证发布方提供的大小和校验和，然后通过 `apt-get`、`dnf` 或 `pacman` 安装依赖。非 root 运行时，`pkexec` 会显示系统授权提示；REA 不调用 `sudo`。 @@ -178,8 +180,10 @@ Setup 会检测 Claude Code、Claude Desktop、Codex、Cursor、Gemini CLI、Win flowchart LR Agent["编程智能体"] --> REA["REA
CLI + MCP"] Terminal["终端"] --> REA - REA --> Hopper["分析引擎"] + REA --> Hopper["Hopper 分析操作"] Hopper --> App["你的应用"] + REA -.-> Ghidra["Ghidra headless 基础
暂无二进制操作"] + Ghidra -.-> App ``` CLI 与 MCP 服务器使用相同的分析引擎。终端命令完成后会关闭应用；智能体会话则会在调查期间保持应用打开。 @@ -212,9 +216,9 @@ REA 会推导明确的格式和架构参数，以避免常见的 FAT 与 ARM 选 ## 安全模型 -每个桥会话都使用随机能力令牌和仅限当前用户的 Unix 套接字。协议消息有大小限制，面向调用者的错误不会暴露启动器 stderr 或内部异常原因。 +每个桥会话都使用随机能力令牌和仅限当前用户的 Unix 套接字。协议消息有大小限制，面向调用者的错误不会暴露启动器 stderr 或内部异常原因。Ghidra 会话还使用隔离的临时项目，不会打开或修改用户自己的 Ghidra 项目。 -这不是沙箱，也无法防御以同一 macOS 用户身份运行的恶意进程。打开不可信二进制文件会让 Hopper 以当前用户权限进行解析和分析。请按照 [SECURITY.md](SECURITY.md) 中的私密流程报告漏洞。 +这不是沙箱，也无法防御以同一操作系统用户身份运行的恶意进程。打开不可信二进制文件会让所选本地提供商以当前用户权限进行解析和分析。请按照 [SECURITY.md](SECURITY.md) 中的私密流程报告漏洞。 ## 常见问题 diff --git a/SECURITY.md b/SECURITY.md index ccdadcdf3..56d9ca784 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -6,16 +6,42 @@ Security fixes are provided for the latest published version of REA. Upgrade to ## Reporting a vulnerability -Do not disclose vulnerabilities, proof-of-concept exploits, credentials, private binaries, or Hopper documents in a public issue. +Do not disclose vulnerabilities, proof-of-concept exploits, credentials, +private binaries, Hopper documents, or private Ghidra projects in a public +issue. Use **Report a vulnerability** in the repository's **Security** tab to submit the report privately. Do not open a public issue to request a private contact channel. -Include the affected REA version, operating system/distribution, Hopper version, impact, reproduction conditions, and any suggested mitigation in the private report. Remove credentials, proprietary binaries, Hopper documents, socket capability tokens, and unrelated local paths from logs or examples. +Include the affected REA version, operating system/distribution, selected +provider and version, impact, reproduction conditions, and any suggested +mitigation in the private report. Remove credentials, proprietary binaries, +Hopper documents, Ghidra project contents, socket capability tokens, and +unrelated local paths from logs or examples. -The maintainer will acknowledge the report, assess its scope, and coordinate remediation and disclosure timing with the reporter. Please allow time for Hopper-dependent behavior to be reproduced safely. +The maintainer will acknowledge the report, assess its scope, and coordinate +remediation and disclosure timing with the reporter. Please allow time for +provider-dependent behavior to be reproduced safely. ## Security boundary -REA authenticates each local bridge session with a random capability token and a current-user Unix socket. This is not a sandbox and does not protect against malicious processes already running as the same operating-system user. Opening an untrusted binary delegates parsing and analysis to Hopper with that user's permissions. +REA authenticates each local provider bridge session with a random capability +token and a current-user Unix socket. Tokens are transferred through private +session descriptors rather than process arguments or environment variables. +This is not a sandbox and does not protect against malicious processes already +running as the same operating-system user. Opening an untrusted binary +delegates parsing and analysis to the selected local provider with that user's +permissions. + +Ghidra sessions use a packaged Java `HeadlessScript`, an isolated temporary +project, and private home, cache, and runtime directories. REA imports only the +requested target, bounds startup and protocol messages, requests bounded CPU +and heap settings, and deletes the temporary project when the session closes. +These controls limit accidental persistence and resource use; they do not make +Ghidra a sandbox. REA does not open or modify user-owned Ghidra projects. + +`GHIDRA_INSTALL_DIR` and optional `JAVA_HOME` identify user-managed +installations. Setup can add those values to detected client configuration only +after showing its plan and receiving approval. REA does not download, install, +upgrade, or modify Ghidra or Java. On Linux, REA accepts release metadata only from Hopper's HTTPS endpoint, restricts package URLs to Hopper's public download origin, bounds the package size, and compares the downloaded bytes with Hopper's published checksum before requesting installation. The published SHA-1 value is a corruption check, not a modern package signature; HTTPS origin validation remains part of the trust boundary. Dependency installation is delegated without shell evaluation to `apt-get`, `dnf`, or `pacman`, directly as root or through `pkexec`. REA never invokes `sudo`. diff --git a/bridge/ghidra/ReaGhidraBridge.java b/bridge/ghidra/ReaGhidraBridge.java new file mode 100644 index 000000000..42abe3e39 --- /dev/null +++ b/bridge/ghidra/ReaGhidraBridge.java @@ -0,0 +1,282 @@ +// REA's packaged, read-only Ghidra headless bridge. +// @category REA + +import java.io.BufferedReader; +import java.io.BufferedWriter; +import java.io.IOException; +import java.io.Reader; +import java.net.StandardProtocolFamily; +import java.net.UnixDomainSocketAddress; +import java.nio.channels.Channels; +import java.nio.channels.ServerSocketChannel; +import java.nio.channels.SocketChannel; +import java.nio.charset.StandardCharsets; +import java.nio.file.Files; +import java.nio.file.LinkOption; +import java.nio.file.Path; +import java.nio.file.attribute.PosixFilePermissions; +import java.security.MessageDigest; +import java.util.Set; + +import com.google.gson.Gson; +import com.google.gson.JsonElement; +import com.google.gson.JsonObject; +import com.google.gson.JsonParser; + +import ghidra.app.util.headless.HeadlessScript; +import ghidra.framework.Application; + +public final class ReaGhidraBridge extends HeadlessScript { + private static final int BRIDGE_VERSION = 1; + private static final int MAX_DESCRIPTOR_BYTES = 16 * 1024; + // A Java character occupies at most three UTF-8 bytes in this Reader, so + // this also keeps the decoded request below the 1 MiB wire budget. + private static final int MAX_REQUEST_CHARACTERS = 256 * 1024; + private static final Gson GSON = new Gson(); + private static final Set DESCRIPTOR_KEYS = Set.of( + "schema_version", + "socket_path", + "token", + "run_id", + "provider_version", + "profile_digest" + ); + private static final Set REQUEST_KEYS = Set.of( + "id", + "token", + "method", + "params" + ); + + @Override + public void run() throws Exception { + String[] arguments = getScriptArgs(); + if (arguments.length != 1) { + throw new IllegalArgumentException("REA bridge requires one session descriptor"); + } + Path descriptorPath = Path.of(arguments[0]); + SessionDescriptor descriptor = readDescriptor(descriptorPath); + Files.deleteIfExists(descriptorPath); + if (currentProgram == null) { + throw new IllegalStateException("REA bridge requires an imported program"); + } + if (!Application.getApplicationVersion().equals(descriptor.providerVersion)) { + throw new IllegalStateException("Ghidra provider version does not match the session"); + } + serve(descriptor); + } + + private void serve(SessionDescriptor descriptor) throws Exception { + Path socketPath = Path.of(descriptor.socketPath); + Files.deleteIfExists(socketPath); + try (ServerSocketChannel server = ServerSocketChannel.open(StandardProtocolFamily.UNIX)) { + server.bind(UnixDomainSocketAddress.of(socketPath)); + Files.setPosixFilePermissions(socketPath, PosixFilePermissions.fromString("rw-------")); + try (SocketChannel client = server.accept(); + BufferedReader reader = new BufferedReader(Channels.newReader(client, StandardCharsets.UTF_8)); + BufferedWriter writer = new BufferedWriter(Channels.newWriter(client, StandardCharsets.UTF_8))) { + serveClient(descriptor, reader, writer); + } + } + finally { + Files.deleteIfExists(socketPath); + } + } + + private void serveClient( + SessionDescriptor descriptor, + BufferedReader reader, + BufferedWriter writer) throws Exception { + while (true) { + String line = readBoundedLine(reader, MAX_REQUEST_CHARACTERS); + if (line == null) { + return; + } + Request request; + try { + request = parseRequest(line, descriptor.token); + } + catch (RuntimeException exception) { + writeFailure(writer, 1, "invalid_request", "Bridge request is invalid"); + return; + } + if (request.method.equals("ping")) { + writeSuccess(writer, request.id, sessionInfo(descriptor)); + continue; + } + if (request.method.equals("shutdown")) { + JsonObject result = new JsonObject(); + result.addProperty("shutdown", true); + result.addProperty("project_ephemeral", true); + writeSuccess(writer, request.id, result); + return; + } + writeFailure(writer, request.id, "method_unavailable", "Bridge method is unavailable"); + } + } + + private JsonObject sessionInfo(SessionDescriptor descriptor) throws Exception { + boolean timedOut = analysisTimeoutOccurred(); + JsonObject provider = new JsonObject(); + provider.addProperty("id", "ghidra"); + provider.addProperty("version", Application.getApplicationVersion()); + + JsonObject target = new JsonObject(); + target.addProperty("name", currentProgram.getName()); + target.addProperty("language_id", currentProgram.getLanguageID().getIdAsString()); + target.addProperty( + "compiler_spec_id", + currentProgram.getCompilerSpec().getCompilerSpecID().getIdAsString() + ); + + JsonObject result = new JsonObject(); + result.addProperty("name", "REA Ghidra bridge"); + result.addProperty("bridge_version", BRIDGE_VERSION); + result.addProperty("run_id", descriptor.runId); + result.addProperty("profile_digest", descriptor.profileDigest); + result.add("provider", provider); + result.addProperty("read_only", true); + result.addProperty("analysis_complete", !timedOut); + result.addProperty("analysis_timed_out", timedOut); + result.add("capabilities", GSON.toJsonTree(new String[] { "ping", "shutdown" })); + result.add("target", target); + return result; + } + + private static SessionDescriptor readDescriptor(Path path) throws IOException { + if (!Files.isRegularFile(path, LinkOption.NOFOLLOW_LINKS) || + Files.size(path) > MAX_DESCRIPTOR_BYTES) { + throw new IllegalArgumentException("REA session descriptor is invalid"); + } + JsonObject object = requireObject( + JsonParser.parseString(Files.readString(path, StandardCharsets.UTF_8)), + DESCRIPTOR_KEYS + ); + if (requireInteger(object, "schema_version") != 1) { + throw new IllegalArgumentException("REA session descriptor version is invalid"); + } + return new SessionDescriptor( + requireString(object, "socket_path"), + requireString(object, "token"), + requireString(object, "run_id"), + requireString(object, "provider_version"), + requireString(object, "profile_digest") + ); + } + + private static Request parseRequest(String line, String expectedToken) { + JsonObject object = requireObject(JsonParser.parseString(line), REQUEST_KEYS); + int id = requireInteger(object, "id"); + if (id <= 0 || !constantTimeEquals(requireString(object, "token"), expectedToken)) { + throw new IllegalArgumentException("Bridge request authentication failed"); + } + JsonElement params = object.get("params"); + if (params == null || + !params.isJsonObject() || + params.getAsJsonObject().size() != 0) { + throw new IllegalArgumentException("Bridge request parameters are invalid"); + } + return new Request(id, requireString(object, "method")); + } + + private static JsonObject requireObject(JsonElement element, Set keys) { + if (!element.isJsonObject()) { + throw new IllegalArgumentException("JSON object required"); + } + JsonObject object = element.getAsJsonObject(); + if (!object.keySet().equals(keys)) { + throw new IllegalArgumentException("JSON object fields are invalid"); + } + return object; + } + + private static String requireString(JsonObject object, String name) { + JsonElement value = object.get(name); + if (value == null || !value.isJsonPrimitive() || !value.getAsJsonPrimitive().isString()) { + throw new IllegalArgumentException("JSON string required"); + } + String result = value.getAsString(); + if (result.isEmpty()) { + throw new IllegalArgumentException("JSON string cannot be empty"); + } + return result; + } + + private static int requireInteger(JsonObject object, String name) { + JsonElement value = object.get(name); + if (value == null || !value.isJsonPrimitive() || !value.getAsJsonPrimitive().isNumber()) { + throw new IllegalArgumentException("JSON integer required"); + } + int result = value.getAsInt(); + if (value.getAsDouble() != result) { + throw new IllegalArgumentException("JSON integer required"); + } + return result; + } + + private static boolean constantTimeEquals(String provided, String expected) { + return MessageDigest.isEqual( + provided.getBytes(StandardCharsets.UTF_8), + expected.getBytes(StandardCharsets.UTF_8) + ); + } + + private static String readBoundedLine(Reader reader, int maximumCharacters) throws IOException { + StringBuilder line = new StringBuilder(); + while (true) { + int character = reader.read(); + if (character < 0) { + return line.isEmpty() ? null : line.toString(); + } + if (character == '\n') { + return line.toString(); + } + if (character != '\r') { + if (line.length() >= maximumCharacters) { + throw new IOException("Bridge request exceeded the maximum line size"); + } + line.append((char) character); + } + } + } + + private static void writeSuccess(BufferedWriter writer, int id, JsonElement result) + throws IOException { + JsonObject response = new JsonObject(); + response.addProperty("id", id); + response.addProperty("ok", true); + response.add("result", result); + writeResponse(writer, response); + } + + private static void writeFailure( + BufferedWriter writer, + int id, + String code, + String message) throws IOException { + JsonObject error = new JsonObject(); + error.addProperty("code", code); + error.addProperty("message", message); + JsonObject response = new JsonObject(); + response.addProperty("id", id); + response.addProperty("ok", false); + response.add("error", error); + writeResponse(writer, response); + } + + private static void writeResponse(BufferedWriter writer, JsonObject response) throws IOException { + writer.write(GSON.toJson(response)); + writer.newLine(); + writer.flush(); + } + + private record SessionDescriptor( + String socketPath, + String token, + String runId, + String providerVersion, + String profileDigest + ) {} + + private record Request(int id, String method) {} +} diff --git a/docs/adr/0001-provider-selection-and-analysis-profiles.md b/docs/adr/0001-provider-selection-and-analysis-profiles.md index 956eb5fad..8ec99d073 100644 --- a/docs/adr/0001-provider-selection-and-analysis-profiles.md +++ b/docs/adr/0001-provider-selection-and-analysis-profiles.md @@ -4,7 +4,10 @@ - Date: 2026-07-15 - Implementation status: The provider registry, deterministic selection, target binding, analysis-profile commitment, and snapshot/Evidence migration - are implemented. Ghidra support is not yet shipped. + are implemented. Ghidra discovery, target/profile resolution, doctor checks, + and the private headless-session foundation are implemented; Ghidra analysis + capabilities remain intentionally undeclared pending operation-level + conformance work. ## Context @@ -533,17 +536,20 @@ The missing engine version and analysis settings cannot be reconstructed from Hopper loader arguments. A fabricated profile would turn unknown provenance into false certainty. -## Implementation sequence +## Implementation progress -1. Remove provider-specific target state and introduce the generic profile and - snapshot v2 commitments while preserving Hopper execution behavior. -2. Add the registry, selectors, candidate status, binding lifecycle, and - overlapping-provider production seams. -3. Extract only proven shared process-lifecycle primitives. -4. Admit Ghidra availability and target/profile resolution before adding - analysis operations. -5. Add Ghidra capabilities individually and verify real semantic claims across - the shared source-owned conformance corpus. +The first four implementation stages are shipped: -Until those implementation changes merge, the shipped runtime remains the -single-route Hopper composition described by the current architecture diagram. +1. Provider-specific target state was replaced by generic profile and snapshot + v2 commitments while preserving Hopper execution behavior. +2. The registry, selectors, candidate status, binding lifecycle, and + overlapping-provider production seams were added. +3. Proven process-lifecycle primitives were extracted for shared use. +4. Ghidra availability, target/profile resolution, doctor checks, and a private + read-only headless session were admitted without declaring operations. + +The remaining stage is to add Ghidra capabilities individually and verify each +real semantic claim across the shared source-owned conformance corpus. Until +that happens, Hopper remains the only deep provider with callable analysis +operations; Ghidra's empty capability set prevents accidental routing to an +unverified implementation. diff --git a/docs/adr/README.md b/docs/adr/README.md index 8529599b1..cb72d19c9 100644 --- a/docs/adr/README.md +++ b/docs/adr/README.md @@ -4,6 +4,6 @@ Accepted decisions describe the architecture that implementation PRs must follow. Acceptance does not by itself mean the behavior is shipped; each record states its implementation status separately. -| ADR | Status | Implementation | -| -------------------------------------------------------------------------------------------------- | -------- | -------------- | -| [0001: Provider selection and analysis profiles](0001-provider-selection-and-analysis-profiles.md) | Accepted | Planned | +| ADR | Status | Implementation | +| -------------------------------------------------------------------------------------------------- | -------- | --------------------------------------------- | +| [0001: Provider selection and analysis profiles](0001-provider-selection-and-analysis-profiles.md) | Accepted | Foundation shipped; capability work continues | diff --git a/docs/api/assets/hierarchy.js b/docs/api/assets/hierarchy.js index 656c6a1e6..1c209cdc8 100644 --- a/docs/api/assets/hierarchy.js +++ b/docs/api/assets/hierarchy.js @@ -1 +1 @@ -window.hierarchyData = "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" \ No newline at end of file +window.hierarchyData = "eJylmd9vozgQx/8Xnr0cP2yD89aNeruVVteo3VUfTlHkgJtaJZgzpFW02v/9ZEhaE5ti6EtaEN+ZD+Px2B5+e1KIpvYW/0KIIhClJIzVL45ABGGcgBinKAUwDtV9SOIIhAGOEhChOApAiDAO1sCT7LFgWcNFWXuL356ypf6WdM+8hXdV0uJY8/paSiE94D3zMvcWYZQC7yALb+FlBa1rVv+Viz3l5Yap52q/J/Ofmn3hge5Rb+E1df5F2fnS3QBe9sSLXLKyfRUMAYQJBhCmKYCQEABRGAGIIgwgitUPDgBE6hFEQgBxAAHEUQoghgGAGEUAYowAxEkKYIIggAnGACaJ+k/ZSwIC13+Ap5xp7/pdVBWTE99UE016T5wSAHFHkwCYRAGASawIIerYEmwZh5UUjchEMXM8evIR3hYiTS0QN2V1aGYSvGtd3BNicX97aOb718QOACi0TYYlreiWF7w5/irpC+UF3RZsJs+wLRe8yJYjS1pmrChYPhtJ17tgxDaMn3zPxOxx0tUuCDjQEFZSvPCcyXt2Km0TIex6F4zepD2bucpp1UyuLDa1CwIJNYSvUrzWTN5uayZf6IxQDBhwAMGBXlyvZMMfadbcVkzO4bDrXTAivYRdq5CWGbspG7aTvDlOxLDrXTBgYMH4wfd86gwxtS7ue6v62cTffHLdMqQuzjHSnN+UL6xu+K4dxQchn+uKZlMxPjDiApToOfGrfC7Fa3nHdrxu5NSMsKldEFJibD3mVUxT6+KemO7nrhs2tQNCEiQGwsztjUXsAhAFBsAd24tmajIaUhfnsbn1XEmRsXrqXtvUuriHyHB/31A5L/nelS6ukf7mS1E+8t1h1ppgal3cY32J/kd85SWVx9uKTfVuSF2cJ/q7d/qfVO7Y1LgbUhfnvTm/YnLP65qL8o79d+By8rQfMDAO0p5CrST3majYG0GE8JmAlw2TjzR7h6jeRCtR8OzoX1gZxHgz1T+QhQGOkTogd8ev9nIwWqxuPk15suPA2eFAO843ScvPw7RWHFFU30BDeWBbtRiXjZDHO1aLg1S7o+rgCPWqyf1BW5NHE+EkXne0SazR3jfqfPXAtmfzMygNG26BU02ZoLc15/mO/aCHMnsaoXhqq+xGVzDp65fuCMkAApOfhmDDk39gnCIIUbjuyFBorEhXVVXwrC3vBqSlPtkJB02NV6oIotTcI5wPZg4ofYF/cengn0R69n574rmkTimzax/d6Aomff3SNWVIHA0gjKbMOMSclCEw7VKGwNQg+85oXrC6dsmXj/Au7TgNVmJGyiVZehxv2XFxOe5ftXUt3YfTztApa6ru2c2F1rfamjHZ4wC0Od2OH4K9NW2ZV6dmg0vMtt2jG1PlW26NBy8hIenDXKvejxTlRJpLmW+7N86juvm23ue5/bEScmyFpe8lb6M1gDsCq8HJI5qSkIAYxgFZn6BtDdtlwdnoJsWJtrPkWLnUpxB7C70/np/gGR3QgcDBICYxiEgQJG3g1D8foC5pmfOcNmO7lUnMb0ZnVOBEfWNCaaDg4xDFxDjV3LN2Y/nRpNFpeyK/fzU6WdoEHCKYOFEMrW/emRivNkBtpNQHuQ+bs1NhrQYsPdtZk1vV5/ZTlErW3pF9X4maN8ylMuq4htA374wfY9X3TL2Xeaqt86M4YMEfuj81jmppWXcdLwL7C7RaTJe0ag5yvOekI1ukvu3eSDT//Pkf4OlXYw==" \ No newline at end of file diff --git a/docs/api/assets/navigation.js b/docs/api/assets/navigation.js index b7880674c..78d5a7613 100644 --- a/docs/api/assets/navigation.js +++ b/docs/api/assets/navigation.js @@ -1 +1 @@ -window.navigationData = "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" \ No newline at end of file +window.navigationData = "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" \ No newline at end of file diff --git a/docs/api/assets/search.js b/docs/api/assets/search.js index 832a72f49..9cadacb87 100644 --- a/docs/api/assets/search.js +++ b/docs/api/assets/search.js @@ -1 +1 @@ -window.searchData = "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"; \ No newline at end of file +window.searchData = "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"; \ No newline at end of file diff --git a/docs/api/classes/application_PermissionAuthority.PermissionPathError.html b/docs/api/classes/application_PermissionAuthority.PermissionPathError.html index d573d3155..5db7b8951 100644 --- a/docs/api/classes/application_PermissionAuthority.PermissionPathError.html +++ b/docs/api/classes/application_PermissionAuthority.PermissionPathError.html @@ -14,7 +14,7 @@

Failure to establish a filesystem object's canonical authorization identity.

-
+

Hierarchy

  • Error diff --git a/docs/api/classes/application_ProcessCaptureError.ProcessCaptureError.html b/docs/api/classes/application_ProcessCaptureError.ProcessCaptureError.html index 19bc803c0..3c7b3c476 100644 --- a/docs/api/classes/application_ProcessCaptureError.ProcessCaptureError.html +++ b/docs/api/classes/application_ProcessCaptureError.ProcessCaptureError.html @@ -14,7 +14,7 @@

    Typed application failure produced by controlled process capture.

    -
    +

    Hierarchy (View Summary)

    • AnalysisError diff --git a/docs/api/classes/application_ProjectPermissionStore.ProjectPermissionStoreError.html b/docs/api/classes/application_ProjectPermissionStore.ProjectPermissionStoreError.html index f32662bbd..487720ed4 100644 --- a/docs/api/classes/application_ProjectPermissionStore.ProjectPermissionStoreError.html +++ b/docs/api/classes/application_ProjectPermissionStore.ProjectPermissionStoreError.html @@ -14,7 +14,7 @@

      Owner-only project policy persistence failure.

      -
      +

      Hierarchy

      • Error diff --git a/docs/api/classes/domain_errors.AnalysisCancelledError.html b/docs/api/classes/domain_errors.AnalysisCancelledError.html index bc637875d..26eb9d387 100644 --- a/docs/api/classes/domain_errors.AnalysisCancelledError.html +++ b/docs/api/classes/domain_errors.AnalysisCancelledError.html @@ -14,7 +14,7 @@

        Caller cancellation won before provider-neutral work completed.

        -
        +

        Hierarchy (View Summary)

        • AnalysisError diff --git a/docs/api/classes/domain_errors.AnalysisCapabilityUnavailableError.html b/docs/api/classes/domain_errors.AnalysisCapabilityUnavailableError.html index 20fa2d80b..697f4aee6 100644 --- a/docs/api/classes/domain_errors.AnalysisCapabilityUnavailableError.html +++ b/docs/api/classes/domain_errors.AnalysisCapabilityUnavailableError.html @@ -14,7 +14,7 @@

          Selected provider cannot execute a declared analysis operation.

          -
          +

          Hierarchy (View Summary)

          • AnalysisError diff --git a/docs/api/classes/domain_errors.AnalysisError.html b/docs/api/classes/domain_errors.AnalysisError.html index 1f318041a..8fc67d488 100644 --- a/docs/api/classes/domain_errors.AnalysisError.html +++ b/docs/api/classes/domain_errors.AnalysisError.html @@ -14,7 +14,7 @@

            Base class for expected analysis, provider, and session failures.

            -
            +

            Hierarchy (View Summary)

            • Error diff --git a/docs/api/classes/domain_errors.AnalysisInputError.html b/docs/api/classes/domain_errors.AnalysisInputError.html index 4da195ba7..d476bd435 100644 --- a/docs/api/classes/domain_errors.AnalysisInputError.html +++ b/docs/api/classes/domain_errors.AnalysisInputError.html @@ -14,7 +14,7 @@

              Caller input failed provider-neutral application parsing.

              -
              +

              Hierarchy (View Summary)

              • AnalysisError diff --git a/docs/api/classes/domain_errors.AnalysisOutputError.html b/docs/api/classes/domain_errors.AnalysisOutputError.html index 52a2cb23a..2d844d7e7 100644 --- a/docs/api/classes/domain_errors.AnalysisOutputError.html +++ b/docs/api/classes/domain_errors.AnalysisOutputError.html @@ -14,7 +14,7 @@

                Provider output failed provider-neutral application parsing.

                -
                +

                Hierarchy (View Summary)

                • AnalysisError diff --git a/docs/api/classes/domain_errors.AnalysisProtocolError.html b/docs/api/classes/domain_errors.AnalysisProtocolError.html index 78353ba41..fb26c55e2 100644 --- a/docs/api/classes/domain_errors.AnalysisProtocolError.html +++ b/docs/api/classes/domain_errors.AnalysisProtocolError.html @@ -14,7 +14,7 @@

                  Provider-neutral invalid analysis input or output at an application boundary.

                  -
                  +

                  Hierarchy (View Summary)

                  • AnalysisError diff --git a/docs/api/classes/domain_errors.AnalysisTimeoutError.html b/docs/api/classes/domain_errors.AnalysisTimeoutError.html index a8366e3f7..8ff2a6fd4 100644 --- a/docs/api/classes/domain_errors.AnalysisTimeoutError.html +++ b/docs/api/classes/domain_errors.AnalysisTimeoutError.html @@ -14,7 +14,7 @@

                    Provider-neutral operation exceeded its declared execution deadline.

                    -
                    +

                    Hierarchy (View Summary)

                    • AnalysisError diff --git a/docs/api/classes/domain_errors.ArtifactOperationError.html b/docs/api/classes/domain_errors.ArtifactOperationError.html index e8fd0d683..5b6f70ba7 100644 --- a/docs/api/classes/domain_errors.ArtifactOperationError.html +++ b/docs/api/classes/domain_errors.ArtifactOperationError.html @@ -14,14 +14,14 @@

                      Artifact inventory or extraction failed a typed safety boundary.

                      -
                      +

                      Hierarchy (View Summary)

                      +
                    • Defined in src/domain/errors.ts:273
                    @@ -60,7 +60,7 @@

                    Returns ArtifactOperationError

+
  • Defined in src/domain/errors.ts:276
    • @@ -69,12 +69,12 @@
    _tag: "ArtifactOperationError"
    +
  • Defined in src/domain/errors.ts:274
    • artifactDetails?: Readonly<
        {
            calculatedSha256: string
            | null;
            declaredSha256: string | null;
            logicalPath: string;
            unpacked: boolean;
        },
    >
    +
  • Defined in src/domain/errors.ts:286
    • cleanupIncomplete: boolean = false
    +
  • Defined in src/domain/errors.ts:277
    • reason:
        | "format"
        | "path"
        | "io"
        | "unavailable"
        | "limit"
        | "cancelled"
        | "integrity"
    +
  • Defined in src/domain/errors.ts:278
    • userCategory: "permission_required" | "cancelled" | undefined = undefined
    @@ -58,7 +58,7 @@

    Returns BinaryTargetError

    +
  • Defined in src/domain/errors.ts:462
    • @@ -67,7 +67,7 @@
    _tag: "BinaryTargetError"
    +
  • Defined in src/domain/errors.ts:461
    • cleanupIncomplete: boolean = false
    +
  • Defined in src/domain/errors.ts:463
    • userCategory: "permission_required" | "cancelled" | undefined = undefined
    @@ -59,7 +59,7 @@

    Returns BrowserObservationError

    +
  • Defined in src/domain/errors.ts:255
    • @@ -68,7 +68,7 @@
    _tag: "BrowserObservationError"
    +
  • Defined in src/domain/errors.ts:253
    • cleanupIncomplete: boolean = false
    +
  • Defined in src/domain/errors.ts:256
    • reason:
        | "disconnected"
        | "endpoint_unreachable"
        | "invalid_endpoint_response"
        | "target_not_found"
        | "target_not_allowed"
        | "target_changed"
        | "protocol_error"
        | "payload_limit"
    +
  • Defined in src/domain/errors.ts:257
    • userCategory: "permission_required" | "cancelled" | undefined = undefined
    @@ -76,7 +76,7 @@
    _tag: "ConfigurationError"
    +
  • Defined in src/domain/errors.ts:446
    • cleanupIncomplete: boolean = false
    @@ -59,7 +59,7 @@

    Returns EvidenceFileError

    +
  • Defined in src/domain/errors.ts:322
    • @@ -68,7 +68,7 @@
    _tag: "EvidenceFileError"
    +
  • Defined in src/domain/errors.ts:320
    • cleanupIncomplete: boolean = false
    +
  • Defined in src/domain/errors.ts:323
    • reason:
        | "io"
        | "disabled"
        | "outside-root"
        | "not-file"
        | "too-large"
        | "exists"
        | "invalid-json"
    +
  • Defined in src/domain/errors.ts:324
    • userCategory: "permission_required" | "cancelled" | undefined = undefined
    @@ -76,7 +76,7 @@
    _tag: "EvidenceIntegrityError"
    +
  • Defined in src/domain/errors.ts:303
    • cleanupIncomplete: boolean = false
    @@ -58,7 +58,7 @@

    Returns EvidenceLimitError

    +
  • Defined in src/domain/errors.ts:310
    • @@ -67,7 +67,7 @@
    _tag: "EvidenceLimitError"
    +
  • Defined in src/domain/errors.ts:308
    • cleanupIncomplete: boolean = false
    +
  • Defined in src/domain/errors.ts:311
    • maximum: number
    +
  • Defined in src/domain/errors.ts:312
    • userCategory: "permission_required" | "cancelled" | undefined = undefined
    @@ -51,7 +51,7 @@

    Returns HopperCancelledError

    +
  • Defined in src/domain/errors.ts:392
    • @@ -60,7 +60,7 @@
    _tag: "HopperCancelledError"
    +
  • Defined in src/domain/errors.ts:390
    • cleanupIncomplete: boolean = false
    @@ -57,7 +57,7 @@

    Returns HopperProcessError

    +
  • Defined in src/domain/errors.ts:427
    • @@ -66,7 +66,7 @@
    _tag: "HopperProcessError"
    +
  • Defined in src/domain/errors.ts:423
    • cleanupIncomplete: boolean = false
    +
  • Defined in src/domain/errors.ts:427
    • failureCode: HopperStartupFailureCode | undefined
    +
  • Defined in src/domain/errors.ts:424
    • userCategory: "permission_required" | "cancelled" | undefined = undefined
    +
  • Defined in src/domain/errors.ts:425
    • diff --git a/docs/api/classes/domain_errors.HopperProtocolError.html b/docs/api/classes/domain_errors.HopperProtocolError.html index 33d60f776..3afbc2e9c 100644 --- a/docs/api/classes/domain_errors.HopperProtocolError.html +++ b/docs/api/classes/domain_errors.HopperProtocolError.html @@ -14,14 +14,14 @@

    Hopper returned bytes or JSON that do not satisfy the NDJSON RPC contract.

    -
    +

    Hierarchy (View Summary)

    +
  • Defined in src/domain/errors.ts:398
    • @@ -76,7 +76,7 @@
    _tag: "HopperProtocolError"
    +
  • Defined in src/domain/errors.ts:399
    • cleanupIncomplete: boolean = false
    @@ -60,7 +60,7 @@

    Returns HopperRemoteError

    +
  • Defined in src/domain/errors.ts:412
    • @@ -69,7 +69,7 @@
    _tag: "HopperRemoteError"
    +
  • Defined in src/domain/errors.ts:410
    • cleanupIncomplete: boolean = false
    +
  • Defined in src/domain/errors.ts:413
    • diagnosticType: HopperDiagnosticType = "remote"
    +
  • Defined in src/domain/errors.ts:415
    • safeMessage: string
    +
  • Defined in src/domain/errors.ts:414
    • userCategory: "permission_required" | "cancelled" | undefined = undefined
    @@ -55,7 +55,7 @@

    Returns HopperStartError

    +
  • Defined in src/domain/errors.ts:439
    • @@ -64,7 +64,7 @@
    _tag: "HopperStartError"
    +
  • Defined in src/domain/errors.ts:437
    • cleanupIncomplete: boolean = false
    @@ -56,7 +56,7 @@

    Returns HopperTimeoutError

    +
  • Defined in src/domain/errors.ts:383
    • @@ -65,7 +65,7 @@
    _tag: "HopperTimeoutError"
    +
  • Defined in src/domain/errors.ts:381
    • cleanupIncomplete: boolean = false
    +
  • Defined in src/domain/errors.ts:383
    • userCategory: "permission_required" | "cancelled" | undefined = undefined
    @@ -59,7 +59,7 @@

    Returns InvestigationWorkspaceError

    +
  • Defined in src/domain/errors.ts:342
    • @@ -68,7 +68,7 @@
    _tag: "InvestigationWorkspaceError"
    +
  • Defined in src/domain/errors.ts:340
    • cleanupIncomplete: boolean = false
    +
  • Defined in src/domain/errors.ts:343
    • reason:
        | "io"
        | "integrity"
        | "disabled"
        | "outside-root"
        | "not-file"
        | "too-large"
        | "invalid-json"
        | "locked"
        | "revision-conflict"
        | "name-conflict"
    +
  • Defined in src/domain/errors.ts:344
    • userCategory: "permission_required" | "cancelled" | undefined = undefined
    @@ -51,7 +51,7 @@

    Returns NoBinaryOpenError

    +
  • Defined in src/domain/errors.ts:452
    • @@ -60,7 +60,7 @@
    _tag: "NoBinaryOpenError"
    +
  • Defined in src/domain/errors.ts:451
    • cleanupIncomplete: boolean = false
    @@ -64,7 +64,7 @@

    Returns PermissionRequiredError

    +
  • Defined in src/domain/errors.ts:516
    • @@ -73,12 +73,12 @@
    _tag: "PermissionRequiredError" = ...
    +
  • Defined in src/domain/errors.ts:514
    • ceiling: PermissionScope | null
    +
  • Defined in src/domain/errors.ts:519
    • cleanupIncomplete: boolean = false
    +
  • Defined in src/domain/errors.ts:520
    • missing: MissingPermissionScope
    +
  • Defined in src/domain/errors.ts:518
    • requested: PermissionRequest
    +
  • Defined in src/domain/errors.ts:517
    • restartRequired: boolean
    +
  • Defined in src/domain/errors.ts:521
    • userCategory: "permission_required" | "cancelled" | undefined = undefined
    @@ -36,6 +36,7 @@
    _tag cleanupIncomplete cleanupResources +diagnostics operation providerId userCategory @@ -48,18 +49,18 @@

    Returns ProviderAdapterError

    +
  • Defined in src/domain/errors.ts:225
    • @@ -68,7 +69,7 @@
    _tag: "ProviderAdapterError"
    +
  • Defined in src/domain/errors.ts:222
    • cleanupIncomplete: boolean = false
    + +
    diagnostics: Readonly<Record<string, JSONType>> | undefined
    +
    operation: string
    +
  • Defined in src/domain/errors.ts:227
    • providerId: string
    +
  • Defined in src/domain/errors.ts:226
    • userCategory: "permission_required" | "cancelled" | undefined = undefined
    +
    _tagcleanupIncompletecleanupResourcesdiagnosticsoperationproviderIduserCategoryuserMessage
    +
  • Defined in src/domain/errors.ts:365
    • @@ -66,7 +66,7 @@
    _tag: "UnknownRegistryError"
    +
  • Defined in src/domain/errors.ts:363
    • cleanupIncomplete: boolean = false
    +
  • Defined in src/domain/errors.ts:366
    • userCategory: "permission_required" | "cancelled" | undefined = undefined
    @@ -55,7 +55,7 @@ bounded TERM-to-KILL escalation for a directly owned child.

  • options: ProviderProcessSupervisorOptions = {}

    • Returns ProviderProcessSupervisor

    +
  • Defined in src/process/ProviderProcess.ts:174
    • @@ -63,7 +63,7 @@ bounded TERM-to-KILL escalation for a directly owned child.

    launch: ProviderProcessLaunch
    +
  • Defined in src/process/ProviderProcess.ts:175
    • @@ -77,7 +77,7 @@ bounded TERM-to-KILL escalation for a directly owned child.

    Returns void

    +
  • Defined in src/process/ProviderProcess.ts:228
    • +
  • Defined in src/process/ProviderProcess.ts:194

    • Returns Promise<ProviderProcessStopResult>

    +
  • Defined in src/process/ProviderProcess.ts:220

    • Returns Promise<boolean>

    +
  • Defined in src/process/ProviderProcess.ts:204
    • diff --git a/docs/api/functions/application_Doctor.runDoctor.html b/docs/api/functions/application_Doctor.runDoctor.html index 4b0ddb667..5299e9fef 100644 --- a/docs/api/functions/application_Doctor.runDoctor.html +++ b/docs/api/functions/application_Doctor.runDoctor.html @@ -14,7 +14,7 @@
    • - +

      Check requirements and an optional target without mutating the host. Every failed check includes remediation suitable for either the one-shot CLI @@ -25,9 +25,9 @@ or an agent consuming the structured result.

      -

      Returns Promise<
          {
              checks: readonly DoctorCheck[];
              healthy: boolean;
              hopperPath?: string;
              identity?: {
                  catalog: {
                      counts: {
                          cli_commands: number;
                          mcp_prompts: number;
                          mcp_resource_templates: 7;
                          mcp_resources: 2;
                          mcp_tools: number;
                      };
                      digests: {
                          combined_sha256: string;
                          prompts_sha256: string;
                          resources_sha256: string;
                          tools_sha256: string;
                      };
                      tools: {
                          annotations: {
                              destructive: boolean;
                              idempotent: boolean;
                              open_world: boolean;
                              read_only: boolean;
                          };
                          name: | "open_binary"
                          | "list_browser_targets"
                          | "inspect_web_page"
                          | "analyze_web_bundle"
                          | "observe_web_session"
                          | "discover_webmcp_tools"
                          | "compare_web_captures"
                          | "capture_web_screenshot"
                          | "compare_web_screenshots"
                          | "list_electron_targets"
                          | "inspect_electron_page"
                          | "inventory_artifact"
                          | "extract_artifact"
                          | "swift_classes"
                          | "get_objc_classes"
                          | "get_objc_protocols"
                          | "batch_decompile"
                          | "get_call_graph"
                          | "analyze_swift_types"
                          | "find_xrefs_to_name"
                          | "binary_overview"
                          | "analyze_function"
                          | "trace_feature"
                          | "comment"
                          | "compare_artifacts"
                          | "find_changed_behavior"
                          | "compare_process_captures"
                          | "compare_functions"
                          | "capture_process_scenario"
                          | "address_name"
                          | "current_address"
                          | "current_procedure"
                          | "current_document"
                          | "goto_address"
                          | "inline_comment"
                          | "list_bookmarks"
                          | "list_documents"
                          | "list_names"
                          | "list_procedures"
                          | "list_segments"
                          | "list_strings"
                          | "next_address"
                          | "prev_address"
                          | "procedure_address"
                          | "procedure_assembly"
                          | "procedure_callees"
                          | "procedure_callers"
                          | "procedure_info"
                          | "procedure_references"
                          | "procedure_pseudo_code"
                          | "resolve_containing_procedure"
                          | "search_procedures"
                          | "search_strings"
                          | "set_address_name"
                          | "set_addresses_names"
                          | "set_bookmark"
                          | "set_comment"
                          | "set_current_document"
                          | "set_inline_comment"
                          | "unset_bookmark"
                          | "xrefs"
                          | "inspect_macho"
                          | "inspect_signature"
                          | "inspect_plist"
                          | "list_architectures"
                          | "demangle_swift"
                          | "close_binary"
                          | "binary_session"
                          | "export_evidence_bundle"
                          | "import_evidence_bundle"
                          | "compare_bundles"
                          | "build_call_path"
                          | "correlate_static_and_runtime"
                          | "verify_reconstruction"
                          | "list_unknowns"
                          | "record_unknown"
                          | "update_unknown"
                          | "verify_unknown_resolution";
                          surface: ToolKind;
                      }[];
                  };
                  cli_package_version: string;
                  expected_skill_version: string;
                  installations: {
                      paths: readonly string[];
                      state: "unknown"
                      | "single"
                      | "multiple";
                  };
                  live_server: { remediation: string; state: "unknown" };
                  registrations: readonly ClientRegistrationStatus[];
                  sdk: {
                      client_test: "2.0.0-beta.4";
                      core: "2.0.0-beta.4";
                      server: "2.0.0-beta.4";
                  };
                  skill: {
                      installed_version: string
                      | null;
                      remediation: string | null;
                      state: "unknown" | "aligned" | "stale";
                  };
              };
          },
      >

    +
  • Defined in src/application/Doctor.ts:88
    • diff --git a/docs/api/functions/application_Doctor.systemDoctorHost.html b/docs/api/functions/application_Doctor.systemDoctorHost.html index a942d6f58..df5d5a485 100644 --- a/docs/api/functions/application_Doctor.systemDoctorHost.html +++ b/docs/api/functions/application_Doctor.systemDoctorHost.html @@ -14,13 +14,17 @@
    +
  • Defined in src/application/Doctor.ts:293
    • diff --git a/docs/api/functions/application_ReferenceSourceImport.importReferenceSource.html b/docs/api/functions/application_ReferenceSourceImport.importReferenceSource.html index a2abbb5f3..efe635a45 100644 --- a/docs/api/functions/application_ReferenceSourceImport.importReferenceSource.html +++ b/docs/api/functions/application_ReferenceSourceImport.importReferenceSource.html @@ -14,7 +14,7 @@
    • - +

      Import a reference source directory into a committed historical source graph.

      The import is deterministic, parallel-safe, and never executes source, hooks, @@ -25,7 +25,7 @@ they are committed to the graph.

      Parameters

      -

      Returns Promise<
          Result<
              {
                  authority: "historical-reference";
                  entries: (
                      | {
                          classifications: (
                              | "unknown"
                              | "manifest"
                              | "source"
                              | "test"
                              | "config"
                              | "generated"
                              | "vendor"
                              | "documentation"
                          )[];
                          content_state: | "unknown"
                          | "too-large"
                          | "excluded"
                          | "hashed"
                          | "redacted-secret"
                          | "unreadable";
                          kind: "file";
                          language: string
                          | null;
                          limitations: string[];
                          path: string;
                          sha256: string | null;
                          size: number | null;
                      }
                      | {
                          classifications: (
                              | "unknown"
                              | "manifest"
                              | "source"
                              | "test"
                              | "config"
                              | "generated"
                              | "vendor"
                              | "documentation"
                          )[];
                          kind: "directory";
                          limitations: string[];
                          path: string;
                          tree_state: | "unknown"
                          | "excluded"
                          | "partial"
                          | "unreadable"
                          | "enumerated";
                      }
                      | {
                          classifications: (
                              | "unknown"
                              | "manifest"
                              | "source"
                              | "test"
                              | "config"
                              | "generated"
                              | "vendor"
                              | "documentation"
                          )[];
                          kind: "symlink";
                          limitations: string[];
                          path: string;
                          target: string;
                          target_state: | "unknown"
                          | "external"
                          | "missing"
                          | "unreadable"
                          | "internal";
                      }
                  )[];
                  exclusions: {
                      path: string;
                      reason: | "unreadable"
                      | "configured-secret"
                      | "symlink-escape"
                      | "size-limit"
                      | "inventory-limit"
                      | "caller-excluded";
                  }[];
                  inventory_state: "unknown"
                  | "complete"
                  | "partial";
                  languages: string[];
                  limitations: string[];
                  manifests: string[];
                  parse_failures: { parser: string; path: string; reason: string }[];
                  provenance: {
                      caller: string;
                      importer: string;
                      importer_version: string | null;
                  };
                  relationships: {
                      from_path: string;
                      kind: "references"
                      | "imports"
                      | "requires"
                      | "declares-module";
                      parse_state: "unknown" | "partial" | "parsed";
                      resolution: "unknown" | "external" | "unresolved" | "internal";
                      to: string;
                  }[];
                  root_alias: "$REFERENCE_ROOT";
                  root_sha256: string;
                  schema: "HistoricalSourceGraph/v1";
                  vcs: | { dirty: boolean
                  | null; head: string; kind: "git" }
                  | { dirty: null; head: null; kind: "none" }
                  | { dirty: null; head: null; kind: "unknown" }
                  | null;
              },
              ReferenceSourceImportError,
          >,
      >

    diff --git a/docs/api/functions/application_Setup.configureJsonClient.html b/docs/api/functions/application_Setup.configureJsonClient.html index 587475951..19ddb5cdb 100644 --- a/docs/api/functions/application_Setup.configureJsonClient.html +++ b/docs/api/functions/application_Setup.configureJsonClient.html @@ -14,7 +14,7 @@
    +
  • Defined in src/application/Setup.ts:402
    • diff --git a/docs/api/functions/application_Setup.configureTomlClient.html b/docs/api/functions/application_Setup.configureTomlClient.html index 5a99514fe..984473c29 100644 --- a/docs/api/functions/application_Setup.configureTomlClient.html +++ b/docs/api/functions/application_Setup.configureTomlClient.html @@ -14,7 +14,7 @@
    +
  • Defined in src/application/Setup.ts:480
    • diff --git a/docs/api/functions/application_Setup.detectClients.html b/docs/api/functions/application_Setup.detectClients.html index 69f38a990..f02ee2de3 100644 --- a/docs/api/functions/application_Setup.detectClients.html +++ b/docs/api/functions/application_Setup.detectClients.html @@ -24,7 +24,7 @@
  • home: string

    • Returns Promise<readonly SetupClient[]>

    +
  • Defined in src/application/Setup.ts:391
    • diff --git a/docs/api/functions/application_Setup.runSetup.html b/docs/api/functions/application_Setup.runSetup.html index 0670b994b..e72635cc7 100644 --- a/docs/api/functions/application_Setup.runSetup.html +++ b/docs/api/functions/application_Setup.runSetup.html @@ -28,7 +28,7 @@ unattended options authorize only the actions represented in the result.

  • Optionalconfirm: SetupConfirmation

    • Returns Promise<SetupResult>

    +
  • Defined in src/application/Setup.ts:137
    • diff --git a/docs/api/functions/application_Setup.systemSetupHost.html b/docs/api/functions/application_Setup.systemSetupHost.html new file mode 100644 index 000000000..4734f71b1 --- /dev/null +++ b/docs/api/functions/application_Setup.systemSetupHost.html @@ -0,0 +1,44 @@ +systemSetupHost | rea-agents - v1.6.0
    +
    rea-agents - v1.6.0 + +
      +
      +
      Preparing search index...
      +
      +
      +
      + +

      Function systemSetupHost

      +
      +
      +
      +
      +
      +
      +

      Settings

       +
      +
      Member Visibility +
        +
        • +
      +
      +
      +
      +
      diff --git a/docs/api/functions/application_SetupClients.configureDetectedClients.html b/docs/api/functions/application_SetupClients.configureDetectedClients.html index 86c2db6d2..818544590 100644 --- a/docs/api/functions/application_SetupClients.configureDetectedClients.html +++ b/docs/api/functions/application_SetupClients.configureDetectedClients.html @@ -14,17 +14,17 @@
      • - +

        Configure every detected agent and report the first failed transaction.

        Parameters

          -
        • options: {
              appliedActions: string[];
              clients: Record<string, ClientConfigurationResult>;
              command: readonly string[];
              detectedClients: readonly SetupClient[];
              hopperPath: string | undefined;
              host: SetupHost;
          }
        +
      • options: {
            appliedActions: string[];
            clients: Record<string, ClientConfigurationResult>;
            command: readonly string[];
            detectedClients: readonly SetupClient[];
            host: SetupHost;
            providerEnvironment: SetupProviderEnvironment;
        }

      Returns Promise<string | undefined>

      +
    • Defined in src/application/SetupClients.ts:21
      • diff --git a/docs/api/functions/application_SetupPlan.setupPlan.html b/docs/api/functions/application_SetupPlan.setupPlan.html index 0df0c27cb..bde7cc280 100644 --- a/docs/api/functions/application_SetupPlan.setupPlan.html +++ b/docs/api/functions/application_SetupPlan.setupPlan.html @@ -14,7 +14,7 @@
      • - +

        Build the complete setup mutation plan before approval.

        @@ -24,10 +24,11 @@
      • platform: Platform
      • installHopper: boolean
      • installSkill: boolean
        • -
      • clients: readonly SetupClient[]
      +
    • clients: readonly SetupClient[]
      • +
    • providerEnvironment: SetupProviderEnvironment

      • Returns readonly SetupAction[]

      +
    • Defined in src/application/SetupPlan.ts:8
      • diff --git a/docs/api/functions/application_runtime.createBinarySession.html b/docs/api/functions/application_runtime.createBinarySession.html index 8698fe3f2..4229452be 100644 --- a/docs/api/functions/application_runtime.createBinarySession.html +++ b/docs/api/functions/application_runtime.createBinarySession.html @@ -27,7 +27,7 @@ provider selection, profile, lifecycle, and Evidence semantics.

    • logger: Logger = silentLogger

      • Returns BinarySession

      +
    • Defined in src/application/runtime.ts:16
      • diff --git a/docs/api/functions/browser_CdpEndpoint.cdpTargetWebSocket.html b/docs/api/functions/browser_CdpEndpoint.cdpTargetWebSocket.html index 04267d257..23437f223 100644 --- a/docs/api/functions/browser_CdpEndpoint.cdpTargetWebSocket.html +++ b/docs/api/functions/browser_CdpEndpoint.cdpTargetWebSocket.html @@ -26,7 +26,7 @@
    • operation: BrowserObservationOperation

      • Returns CdpWebSocketEndpoint

      +
    • Defined in src/browser/CdpEndpoint.ts:136
      • diff --git a/docs/api/functions/browser_CdpEndpoint.discoverCdpEndpoint.html b/docs/api/functions/browser_CdpEndpoint.discoverCdpEndpoint.html index b6dda41bd..22a99f038 100644 --- a/docs/api/functions/browser_CdpEndpoint.discoverCdpEndpoint.html +++ b/docs/api/functions/browser_CdpEndpoint.discoverCdpEndpoint.html @@ -26,7 +26,7 @@
    • Optionalsignal: AbortSignal

      • Returns Promise<CdpEndpointDiscovery>

      +
    • Defined in src/browser/CdpEndpoint.ts:72
      • diff --git a/docs/api/functions/browser_CdpEndpoint.hasCdpTargetWebSocket.html b/docs/api/functions/browser_CdpEndpoint.hasCdpTargetWebSocket.html index 4140da8ee..d48d34a13 100644 --- a/docs/api/functions/browser_CdpEndpoint.hasCdpTargetWebSocket.html +++ b/docs/api/functions/browser_CdpEndpoint.hasCdpTargetWebSocket.html @@ -25,7 +25,7 @@
    • target: CdpEndpointTarget

      • Returns boolean

      +
    • Defined in src/browser/CdpEndpoint.ts:147
      • diff --git a/docs/api/functions/cli.createCli.html b/docs/api/functions/cli.createCli.html index 96c953522..76a90fb24 100644 --- a/docs/api/functions/cli.createCli.html +++ b/docs/api/functions/cli.createCli.html @@ -22,7 +22,7 @@ Analysis commands acquire and close their own sessions; bare mcp an

      Returns Cli<{}>

      +
    • Defined in src/cli.ts:49
      • diff --git a/docs/api/functions/config.parseConfig.html b/docs/api/functions/config.parseConfig.html index dbf2434a5..2206ffa46 100644 --- a/docs/api/functions/config.parseConfig.html +++ b/docs/api/functions/config.parseConfig.html @@ -16,7 +16,7 @@
    • -

      Parse Hopper launcher configuration once at the composition root. +

      Parse provider and authority configuration once at the composition root. Explicit loader arguments override REA's header-derived defaults for a supported target, allowing callers to refine Hopper's loader behavior without bypassing REA's path and executable-header checks.

      @@ -27,7 +27,7 @@ bypassing REA's path and executable-header checks.

    • environment: Readonly<Record<string, string | undefined>>

      • Returns Result<AppConfig, ConfigurationError>

      +
    • Defined in src/config.ts:255
      • diff --git a/docs/api/functions/domain_errors.projectAnalysisError.html b/docs/api/functions/domain_errors.projectAnalysisError.html index 7dd0858b5..fc92a67db 100644 --- a/docs/api/functions/domain_errors.projectAnalysisError.html +++ b/docs/api/functions/domain_errors.projectAnalysisError.html @@ -24,7 +24,7 @@
    • error: AnalysisError

      • Returns AnalysisErrorProjection

      +
    • Defined in src/domain/errors.ts:528
      • diff --git a/docs/api/functions/domain_referenceSourceClassification.classifyReferenceSourcePath.html b/docs/api/functions/domain_referenceSourceClassification.classifyReferenceSourcePath.html index 6f1b07b8b..23eb2a490 100644 --- a/docs/api/functions/domain_referenceSourceClassification.classifyReferenceSourcePath.html +++ b/docs/api/functions/domain_referenceSourceClassification.classifyReferenceSourcePath.html @@ -14,7 +14,7 @@
      • - +

        Classify a reference source path deterministically.

        @@ -22,7 +22,7 @@

        Parameters

        • path: string
        -

        Returns (
            | "unknown"
            | "manifest"
            | "source"
            | "test"
            | "config"
            | "generated"
            | "vendor"
            | "documentation"
        )[]

      diff --git a/docs/api/functions/domain_referenceSourceGraph.createHistoricalSourceGraph.html b/docs/api/functions/domain_referenceSourceGraph.createHistoricalSourceGraph.html index 802084bb6..d35347709 100644 --- a/docs/api/functions/domain_referenceSourceGraph.createHistoricalSourceGraph.html +++ b/docs/api/functions/domain_referenceSourceGraph.createHistoricalSourceGraph.html @@ -14,7 +14,7 @@
      • - +

        Build and internally commit a normalized historical source graph.

        @@ -22,7 +22,7 @@

        Parameters

        • input: unknown
        -

        Returns {
            authority: "historical-reference";
            entries: (
                | {
                    classifications: (
                        | "unknown"
                        | "manifest"
                        | "source"
                        | "test"
                        | "config"
                        | "generated"
                        | "vendor"
                        | "documentation"
                    )[];
                    content_state: | "unknown"
                    | "too-large"
                    | "excluded"
                    | "hashed"
                    | "redacted-secret"
                    | "unreadable";
                    kind: "file";
                    language: string
                    | null;
                    limitations: string[];
                    path: string;
                    sha256: string | null;
                    size: number | null;
                }
                | {
                    classifications: (
                        | "unknown"
                        | "manifest"
                        | "source"
                        | "test"
                        | "config"
                        | "generated"
                        | "vendor"
                        | "documentation"
                    )[];
                    kind: "directory";
                    limitations: string[];
                    path: string;
                    tree_state: | "unknown"
                    | "excluded"
                    | "partial"
                    | "unreadable"
                    | "enumerated";
                }
                | {
                    classifications: (
                        | "unknown"
                        | "manifest"
                        | "source"
                        | "test"
                        | "config"
                        | "generated"
                        | "vendor"
                        | "documentation"
                    )[];
                    kind: "symlink";
                    limitations: string[];
                    path: string;
                    target: string;
                    target_state: | "unknown"
                    | "external"
                    | "missing"
                    | "unreadable"
                    | "internal";
                }
            )[];
            exclusions: {
                path: string;
                reason: | "unreadable"
                | "configured-secret"
                | "symlink-escape"
                | "size-limit"
                | "inventory-limit"
                | "caller-excluded";
            }[];
            inventory_state: "unknown"
            | "complete"
            | "partial";
            languages: string[];
            limitations: string[];
            manifests: string[];
            parse_failures: { parser: string; path: string; reason: string }[];
            provenance: {
                caller: string;
                importer: string;
                importer_version: string | null;
            };
            relationships: {
                from_path: string;
                kind: "references"
                | "imports"
                | "requires"
                | "declares-module";
                parse_state: "unknown" | "partial" | "parsed";
                resolution: "unknown" | "external" | "unresolved" | "internal";
                to: string;
            }[];
            root_alias: "$REFERENCE_ROOT";
            root_sha256: string;
            schema: "HistoricalSourceGraph/v1";
            vcs: | { dirty: boolean
            | null; head: string; kind: "git" }
            | { dirty: null; head: null; kind: "none" }
            | { dirty: null; head: null; kind: "unknown" }
            | null;
        }

      diff --git a/docs/api/functions/domain_referenceSourceGraph.parseHistoricalSourceGraph.html b/docs/api/functions/domain_referenceSourceGraph.parseHistoricalSourceGraph.html index d244981b4..2952006f5 100644 --- a/docs/api/functions/domain_referenceSourceGraph.parseHistoricalSourceGraph.html +++ b/docs/api/functions/domain_referenceSourceGraph.parseHistoricalSourceGraph.html @@ -14,7 +14,7 @@
      diff --git a/docs/api/functions/ghidra_GhidraAnalysisProfile.resolveGhidraAnalysisProfile.html b/docs/api/functions/ghidra_GhidraAnalysisProfile.resolveGhidraAnalysisProfile.html new file mode 100644 index 000000000..dd0afcdb5 --- /dev/null +++ b/docs/api/functions/ghidra_GhidraAnalysisProfile.resolveGhidraAnalysisProfile.html @@ -0,0 +1,47 @@ +resolveGhidraAnalysisProfile | rea-agents - v1.6.0
      +
      rea-agents - v1.6.0 + +
        +
        +
        Preparing search index...
        +
        +
        +
        + +

        Function resolveGhidraAnalysisProfile

        +
        +
        +
        +
        +
        +
        +

        Settings

         +
        +
        Member Visibility +
          +
          • +
        +
        +
        +
        +
        diff --git a/docs/api/functions/ghidra_GhidraDiagnostics.createGhidraDiagnostics.html b/docs/api/functions/ghidra_GhidraDiagnostics.createGhidraDiagnostics.html new file mode 100644 index 000000000..e1f2de2ce --- /dev/null +++ b/docs/api/functions/ghidra_GhidraDiagnostics.createGhidraDiagnostics.html @@ -0,0 +1,44 @@ +createGhidraDiagnostics | rea-agents - v1.6.0
        +
        rea-agents - v1.6.0 + +
          +
          +
          Preparing search index...
          +
          +
          +
          + +

          Function createGhidraDiagnostics

          +
          +
          +
          +
          +
          +
          +

          Settings

           +
          +
          Member Visibility +
            +
            • +
          +
          +
          +
          +
          diff --git a/docs/api/functions/ghidra_GhidraDoctor.inspectSystemGhidraProvider.html b/docs/api/functions/ghidra_GhidraDoctor.inspectSystemGhidraProvider.html new file mode 100644 index 000000000..8bb57cfab --- /dev/null +++ b/docs/api/functions/ghidra_GhidraDoctor.inspectSystemGhidraProvider.html @@ -0,0 +1,40 @@ +inspectSystemGhidraProvider | rea-agents - v1.6.0
          +
          rea-agents - v1.6.0 + +
            +
            +
            Preparing search index...
            +
            +
            +
            + +

            Function inspectSystemGhidraProvider

            +
            +
            +
            +
            +
            +
            +

            Settings

             +
            +
            Member Visibility +
              +
              • +
            +
            +
            +
            +
            diff --git a/docs/api/functions/ghidra_GhidraDoctor.projectGhidraDoctorInspection.html b/docs/api/functions/ghidra_GhidraDoctor.projectGhidraDoctorInspection.html new file mode 100644 index 000000000..11be013a6 --- /dev/null +++ b/docs/api/functions/ghidra_GhidraDoctor.projectGhidraDoctorInspection.html @@ -0,0 +1,44 @@ +projectGhidraDoctorInspection | rea-agents - v1.6.0
            +
            rea-agents - v1.6.0 + +
              +
              +
              Preparing search index...
              +
              +
              +
              + +

              Function projectGhidraDoctorInspection

              +
              +
              +
              +
              +
              +
              +

              Settings

               +
              +
              Member Visibility +
                +
                • +
              +
              +
              +
              +
              diff --git a/docs/api/functions/ghidra_GhidraInstallation.ghidraInstallationDiagnostics.html b/docs/api/functions/ghidra_GhidraInstallation.ghidraInstallationDiagnostics.html new file mode 100644 index 000000000..9d371222f --- /dev/null +++ b/docs/api/functions/ghidra_GhidraInstallation.ghidraInstallationDiagnostics.html @@ -0,0 +1,44 @@ +ghidraInstallationDiagnostics | rea-agents - v1.6.0
              +
              rea-agents - v1.6.0 + +
                +
                +
                Preparing search index...
                +
                +
                +
                + +

                Function ghidraInstallationDiagnostics

                +
                +
                +
                +
                +
                +
                +

                Settings

                 +
                +
                Member Visibility +
                  +
                  • +
                +
                +
                +
                +
                diff --git a/docs/api/functions/ghidra_GhidraInstallation.ghidraJavaEnvironment.html b/docs/api/functions/ghidra_GhidraInstallation.ghidraJavaEnvironment.html new file mode 100644 index 000000000..889dff890 --- /dev/null +++ b/docs/api/functions/ghidra_GhidraInstallation.ghidraJavaEnvironment.html @@ -0,0 +1,45 @@ +ghidraJavaEnvironment | rea-agents - v1.6.0
                +
                rea-agents - v1.6.0 + +
                  +
                  +
                  Preparing search index...
                  +
                  +
                  +
                  + +

                  Function ghidraJavaEnvironment

                  +
                  +
                    +
                  • + +
                    +

                    Environment that makes an explicitly selected JDK win over PATH discovery.

                    +
                    +
                    +

                    Parameters

                    +
                      +
                    • javaHome: string | undefined
                      • +
                    • environment: ProcessEnv = process.env
                    +

                    Returns ProcessEnv

                  +
                  +
                  +
                  +
                  +

                  Settings

                   +
                  +
                  Member Visibility +
                    +
                    • +
                  +
                  +
                  +
                  +
                  diff --git a/docs/api/functions/ghidra_GhidraInstallation.inspectGhidraInstallation.html b/docs/api/functions/ghidra_GhidraInstallation.inspectGhidraInstallation.html new file mode 100644 index 000000000..739d87276 --- /dev/null +++ b/docs/api/functions/ghidra_GhidraInstallation.inspectGhidraInstallation.html @@ -0,0 +1,45 @@ +inspectGhidraInstallation | rea-agents - v1.6.0
                  +
                  rea-agents - v1.6.0 + +
                    +
                    +
                    Preparing search index...
                    +
                    +
                    +
                    + +

                    Function inspectGhidraInstallation

                    +
                    +
                    +
                    +
                    +
                    +
                    +

                    Settings

                     +
                    +
                    Member Visibility +
                      +
                      • +
                    +
                    +
                    +
                    +
                    diff --git a/docs/api/functions/ghidra_GhidraLauncher.ghidraHeadlessArguments.html b/docs/api/functions/ghidra_GhidraLauncher.ghidraHeadlessArguments.html new file mode 100644 index 000000000..70b5fe1c0 --- /dev/null +++ b/docs/api/functions/ghidra_GhidraLauncher.ghidraHeadlessArguments.html @@ -0,0 +1,44 @@ +ghidraHeadlessArguments | rea-agents - v1.6.0
                    +
                    rea-agents - v1.6.0 + +
                      +
                      +
                      Preparing search index...
                      +
                      +
                      +
                      + +

                      Function ghidraHeadlessArguments

                      +
                      +
                      +
                      +
                      +
                      +
                      +

                      Settings

                       +
                      +
                      Member Visibility +
                        +
                        • +
                      +
                      +
                      +
                      +
                      diff --git a/docs/api/functions/ghidra_GhidraSessionValues.isGhidraShutdownAcknowledgement.html b/docs/api/functions/ghidra_GhidraSessionValues.isGhidraShutdownAcknowledgement.html new file mode 100644 index 000000000..44e3b5b21 --- /dev/null +++ b/docs/api/functions/ghidra_GhidraSessionValues.isGhidraShutdownAcknowledgement.html @@ -0,0 +1,44 @@ +isGhidraShutdownAcknowledgement | rea-agents - v1.6.0
                      +
                      rea-agents - v1.6.0 + +
                        +
                        +
                        Preparing search index...
                        +
                        +
                        +
                        + +

                        Function isGhidraShutdownAcknowledgement

                        +
                        +
                          +
                        • + +
                          +

                          Require acknowledgement that the private bridge loop has ended.

                          +
                          +
                          +

                          Parameters

                          +
                            +
                          • value: JSONType
                          +

                          Returns boolean

                        +
                        +
                        +
                        +
                        +

                        Settings

                         +
                        +
                        Member Visibility +
                          +
                          • +
                        +
                        +
                        +
                        +
                        diff --git a/docs/api/functions/ghidra_GhidraSessionValues.parseGhidraSessionInfo.html b/docs/api/functions/ghidra_GhidraSessionValues.parseGhidraSessionInfo.html new file mode 100644 index 000000000..fbd760434 --- /dev/null +++ b/docs/api/functions/ghidra_GhidraSessionValues.parseGhidraSessionInfo.html @@ -0,0 +1,45 @@ +parseGhidraSessionInfo | rea-agents - v1.6.0
                        +
                        rea-agents - v1.6.0 + +
                          +
                          +
                          Preparing search index...
                          +
                          +
                          +
                          + +

                          Function parseGhidraSessionInfo

                          +
                          +
                            +
                          • + +
                            +

                            Require exact run, provider, and profile identity from the Java bridge.

                            +
                            +
                            +

                            Parameters

                            +
                              +
                            • value: JSONType
                              • +
                            • expected: { profileDigest: string; providerVersion: string; runId: string }
                            +

                            Returns Result<
                                {
                                    analysis_complete: boolean;
                                    analysis_timed_out: boolean;
                                    bridge_version: 1;
                                    capabilities: ("shutdown" | "ping")[];
                                    name: "REA Ghidra bridge";
                                    profile_digest: string;
                                    provider: { id: "ghidra"; version: string };
                                    read_only: true;
                                    run_id: string;
                                    target: { compiler_spec_id: string; language_id: string; name: string };
                                },
                                Error,
                            >

                          +
                          +
                          +
                          +
                          +

                          Settings

                           +
                          +
                          Member Visibility +
                            +
                            • +
                          +
                          +
                          +
                          +
                          diff --git a/docs/api/functions/ghidra_GhidraSocketConnection.attachGhidraSocket.html b/docs/api/functions/ghidra_GhidraSocketConnection.attachGhidraSocket.html new file mode 100644 index 000000000..59e9e7034 --- /dev/null +++ b/docs/api/functions/ghidra_GhidraSocketConnection.attachGhidraSocket.html @@ -0,0 +1,45 @@ +attachGhidraSocket | rea-agents - v1.6.0
                          +
                          rea-agents - v1.6.0 + +
                            +
                            +
                            Preparing search index...
                            +
                            +
                            +
                            + +

                            Function attachGhidraSocket

                            +
                            +
                            +
                            +
                            +
                            +
                            +

                            Settings

                             +
                            +
                            Member Visibility +
                              +
                              • +
                            +
                            +
                            +
                            +
                            diff --git a/docs/api/functions/ghidra_GhidraSocketConnection.connectGhidraSocketOnce.html b/docs/api/functions/ghidra_GhidraSocketConnection.connectGhidraSocketOnce.html new file mode 100644 index 000000000..87fa977aa --- /dev/null +++ b/docs/api/functions/ghidra_GhidraSocketConnection.connectGhidraSocketOnce.html @@ -0,0 +1,45 @@ +connectGhidraSocketOnce | rea-agents - v1.6.0
                            +
                            rea-agents - v1.6.0 + +
                              +
                              +
                              Preparing search index...
                              +
                              +
                              +
                              + +

                              Function connectGhidraSocketOnce

                              +
                              +
                              +
                              +
                              +
                              +
                              +

                              Settings

                               +
                              +
                              Member Visibility +
                                +
                                • +
                              +
                              +
                              +
                              +
                              diff --git a/docs/api/functions/ghidra_protocol.ghidraResponseResult.html b/docs/api/functions/ghidra_protocol.ghidraResponseResult.html new file mode 100644 index 000000000..96c60aeea --- /dev/null +++ b/docs/api/functions/ghidra_protocol.ghidraResponseResult.html @@ -0,0 +1,44 @@ +ghidraResponseResult | rea-agents - v1.6.0
                              +
                              rea-agents - v1.6.0 + +
                                +
                                +
                                Preparing search index...
                                +
                                +
                                +
                                + +

                                Function ghidraResponseResult

                                +
                                +
                                  +
                                • + +
                                  +

                                  Project one validated response into its result or remote failure.

                                  +
                                  +
                                  +

                                  Parameters

                                  +
                                    +
                                  • response: {
                                        error?: { code: string; message: string };
                                        id: number;
                                        ok: boolean;
                                        result?: JSONType;
                                    }
                                  +

                                  Returns Result<JSONType, Error>

                                +
                                +
                                +
                                +
                                +

                                Settings

                                 +
                                +
                                Member Visibility +
                                  +
                                  • +
                                +
                                +
                                +
                                +
                                diff --git a/docs/api/functions/ghidra_protocol.parseGhidraResponseLine.html b/docs/api/functions/ghidra_protocol.parseGhidraResponseLine.html new file mode 100644 index 000000000..a14010a09 --- /dev/null +++ b/docs/api/functions/ghidra_protocol.parseGhidraResponseLine.html @@ -0,0 +1,44 @@ +parseGhidraResponseLine | rea-agents - v1.6.0
                                +
                                rea-agents - v1.6.0 + +
                                  +
                                  +
                                  Preparing search index...
                                  +
                                  +
                                  +
                                  + +

                                  Function parseGhidraResponseLine

                                  +
                                  +
                                    +
                                  • + +
                                    +

                                    Parse one complete Java-bridge response without accepting extra fields.

                                    +
                                    +
                                    +

                                    Parameters

                                    +
                                      +
                                    • line: string
                                    +

                                    Returns Result<
                                        {
                                            error?: { code: string; message: string };
                                            id: number;
                                            ok: boolean;
                                            result?: JSONType;
                                        },
                                        Error,
                                    >

                                  +
                                  +
                                  +
                                  +
                                  +

                                  Settings

                                   +
                                  +
                                  Member Visibility +
                                    +
                                    • +
                                  +
                                  +
                                  +
                                  +
                                  diff --git a/docs/api/functions/process_ProviderProcess.spawnOwnedProviderProcess.html b/docs/api/functions/process_ProviderProcess.spawnOwnedProviderProcess.html index f2c257729..ded82b181 100644 --- a/docs/api/functions/process_ProviderProcess.spawnOwnedProviderProcess.html +++ b/docs/api/functions/process_ProviderProcess.spawnOwnedProviderProcess.html @@ -26,7 +26,7 @@ selecting provider-specific command arguments or environment values.

                                • options: OwnedProviderProcessSpawnOptions

                                  • Returns Promise<SpawnedOwnedProviderProcess>

                                  +
                                • Defined in src/process/ProviderProcess.ts:103
                                  • diff --git a/docs/api/hierarchy.html b/docs/api/hierarchy.html index b1c8d5cb9..744a3e58a 100644 --- a/docs/api/hierarchy.html +++ b/docs/api/hierarchy.html @@ -10,75 +10,81 @@

                                  rea-agents - v1.6.0

                                  Hierarchy Summary

                                  +
                                • HopperTimeoutError
                                  • +
                                • HopperCancelledError
                                  • +
                                • HopperProtocolError
                                  • +
                                • HopperRemoteError
                                  • +
                                • HopperProcessError
                                  • +
                                • HopperStartError
                                  • +
                                • AnalysisProtocolError
                                  • +
                                • AnalysisInputError
                                  • +
                                • AnalysisOutputError
                                  • +
                                • AnalysisCapabilityUnavailableError
                                  • +
                                • AnalysisCancelledError
                                  • +
                                • AnalysisTimeoutError
                                  • +
                                • ProviderSelectionError
                                  • +
                                • ProviderAdapterError
                                  • +
                                • BrowserObservationError
                                  • +
                                • ArtifactOperationError
                                  • +
                                • EvidenceIntegrityError
                                  • +
                                • EvidenceLimitError
                                  • +
                                • EvidenceFileError
                                  • +
                                • InvestigationWorkspaceError
                                  • +
                                • UnknownRegistryError
                                  • +
                                • ConfigurationError
                                  • +
                                • NoBinaryOpenError
                                  • +
                                • BinaryTargetError
                                  • +
                                • PermissionRequiredError
                                  • +
                                • ProcessCaptureError
                                  • +
                                • BinarySession
                                  • +
                                • GhidraProvider
                                  • +
                                • HopperProvider
                                  • +
                                • HopperApplicationLauncher
                                  • +
                                • CdpBrowserProvider
                                  • +
                                • CdpElectronProvider
                                  • +
                                • GhidraHeadlessLauncher
                                  • +
                                • PermissionRequest
                                  • +
                                • PermissionGrant
                                  • +
                                • BridgeLaunch
                                  • +
                                • GhidraLaunch
                                  • +
                                  diff --git a/docs/api/index.html b/docs/api/index.html index a54d1562b..9e0da0190 100644 --- a/docs/api/index.html +++ b/docs/api/index.html @@ -9,7 +9,7 @@

                                  rea-agents - v1.6.0

                                  -
                                  application/AbortablePromise
                                  application/AnalysisProvider
                                  application/AnalysisProviderEvaluation
                                  application/AnalysisProviderRegistry
                                  application/AnalysisSnapshotCache
                                  application/AnalysisSnapshotFiles
                                  application/ArtifactExtraction
                                  application/ArtifactGraphConstruction
                                  application/ArtifactInventory
                                  application/AuthorizedArtifactInventory
                                  application/BinarySession
                                  application/BinarySessionPort
                                  application/BoundedJsonFiles
                                  application/BrowserEvidence
                                  application/BrowserObservationPort
                                  application/BrowserObservationService
                                  application/CapabilityInventory
                                  application/ClientConfigPath
                                  application/ClientRegistrationStatus
                                  application/CommandShimReplay
                                  application/CompositeProvider
                                  application/ConfiguredRoots
                                  application/CrossVersionInventory
                                  application/CrossVersionInvestigation
                                  application/CrossVersionInvestigationEvidence
                                  application/CrossVersionInvestigationReplay
                                  application/DeferredFileAuthorization
                                  application/DirectAnalysis
                                  application/Doctor
                                  application/ElectronEvidence
                                  application/ElectronObservationPort
                                  application/ElectronObservationService
                                  application/EnhancedTools
                                  application/EvidenceBundleCommands
                                  application/EvidenceBundleFiles
                                  application/EvidenceLedger
                                  application/FilesystemSnapshot
                                  application/homebrew
                                  application/InvestigationProviders
                                  application/InvestigationWorkspaceStore
                                  application/LinuxHopper
                                  application/LoopbackReplay
                                  application/MacHopper
                                  application/PermissionAuthority
                                  application/PermissionConfiguration
                                  application/ProcessCaptureAuthority
                                  application/ProcessCaptureCapability
                                  application/ProcessCaptureError
                                  application/ProcessCaptureLifecycle
                                  application/ProcessCheckpoints
                                  application/ProcessCli
                                  application/ProcessEvidence
                                  application/ProcessHarness
                                  application/ProcessNormalization
                                  application/ProcessSampling
                                  application/ProgressReporter
                                  application/ProjectPermissionStore
                                  application/RealHopperAssertions
                                  application/ReferenceSourceImport
                                  application/ReferenceSourceImportEntries
                                  application/ReferenceSourceImportPolicy
                                  application/ReferenceSourceImportTypes
                                  application/ReferenceSourceVcsAdapter
                                  application/runtime
                                  application/SessionProviderRouter
                                  application/Setup
                                  application/SetupClients
                                  application/SetupInstallFailure
                                  application/SetupPlan
                                  application/SetupSkill
                                  application/SupportedClients
                                  application/TerminalRenderer
                                  application/Uninstall
                                  application/UnknownEvidence
                                  application/Upgrade
                                  browser/CdpBrowserProvider
                                  browser/CdpCaptureCompleteness
                                  browser/CdpCaptureDocuments
                                  browser/CdpCaptureEvents
                                  browser/CdpCaptureStorage
                                  browser/CdpCaptureValues
                                  browser/CdpConnection
                                  browser/CdpElectronInspection
                                  browser/CdpElectronProvider
                                  browser/CdpEndpoint
                                  browser/CdpObservationSession
                                  browser/CdpOptionalCommand
                                  browser/CdpPageCapture
                                  browser/CdpSafeMetadata
                                  browser/CdpScreenshot
                                  browser/CdpTargetSession
                                  browser/CdpWebMcpDiscovery
                                  browser/ElectronFileScope
                                  browser/PngVisualDiff
                                  browser/SensitiveTextCapture
                                  browser/WebSourceMapFetcher
                                  cli
                                  config
                                  contracts/artifactComparisonExample
                                  contracts/artifactToolContracts
                                  contracts/browserToolContracts
                                  contracts/electronToolContracts
                                  contracts/enhancedInputs
                                  contracts/errorSchemas
                                  contracts/functionComparisonExample
                                  contracts/investigationExamples
                                  contracts/nativeToolContracts
                                  contracts/processCaptureExample
                                  contracts/promptContracts
                                  contracts/providerSelection
                                  contracts/sessionLifecycleInputs
                                  contracts/toolContractExamples
                                  contracts/toolContracts
                                  contracts/toolContractTypes
                                  contracts/toolOutputSchemas
                                  contracts/unknownContractExamples
                                  domain/analysisProfile
                                  domain/analysisSnapshot
                                  domain/artifactComparison
                                  domain/artifactGraph
                                  domain/artifactInventoryEvidence
                                  domain/binaryTarget
                                  domain/browserCompleteness
                                  domain/browserObservation
                                  domain/browserSession
                                  domain/bundleComparison
                                  domain/callPath
                                  domain/changedBehavior
                                  domain/electronObservation
                                  domain/errors
                                  domain/evidence
                                  domain/evidenceBundle
                                  domain/functionComparison
                                  domain/functionComparisonNormalization
                                  domain/functionComparisonResults
                                  domain/functionComparisonSchemas
                                  domain/functionDossierEvidence
                                  domain/hopperStartupFailure
                                  domain/hopperValues
                                  domain/investigationWorkspace
                                  domain/jsonLimits
                                  domain/jsonShape
                                  domain/jsonValue
                                  domain/nativeInspection
                                  domain/permissionPolicy
                                  domain/processCapture
                                  domain/processCaptureValidation
                                  domain/processComparison
                                  domain/processScenario
                                  domain/reconstructionUnknowns
                                  domain/reconstructionVerification
                                  domain/reconstructionVerificationSchemas
                                  domain/referenceSourceClassification
                                  domain/referenceSourceGraph
                                  domain/referenceSourceImportParsing
                                  domain/referenceSourcePolicy
                                  domain/residualUnknown
                                  domain/result
                                  domain/runtimeVersion
                                  domain/staticRuntimeCorrelation
                                  domain/symbolAnalysis
                                  domain/webBundleAnalysis
                                  domain/webBundleAnalyzer
                                  domain/webCaptureDiff
                                  domain/webContentArtifact
                                  domain/webInventory
                                  domain/webMcpDiscovery
                                  domain/webScreenshot
                                  hopper/BridgeLauncher
                                  hopper/HopperAnalysisProfile
                                  hopper/HopperClient
                                  hopper/HopperProvider
                                  hopper/HopperSessionValues
                                  hopper/HopperSocketConnection
                                  hopper/protocol
                                  main
                                  process/PendingOperations
                                  process/PrivateRuntimeRoot
                                  process/ProcessOwnership
                                  process/ProviderDeadline
                                  process/ProviderProcess
                                  server/createServer
                                  server/mcpProgress
                                  server/promptCompletion
                                  server/recordDerivedEvidence
                                  server/registerArtifactComparisonTool
                                  server/registerArtifactTools
                                  server/registerBrowserTools
                                  server/registerBundleComparisonTool
                                  server/registerElectronTools
                                  server/registerEnhancedTools
                                  server/registerEvidenceResources
                                  server/registerEvidenceTools
                                  server/registerFunctionComparisonTool
                                  server/registerInvestigationTools
                                  server/registerNativeTools
                                  server/registerOfficialTools
                                  server/registerProcessComparisonTool
                                  server/registerPrompts
                                  server/registerSessionStatusTool
                                  server/registerSessionTools
                                  server/runDerivedOperation
                                  server/sessionEvidence
                                  server/sessionToolPolicies
                                  server/toolLogging
                                  server/toolRegistrationOptions
                                  server/toolResult
                                  +
                                  application/AbortablePromise
                                  application/AnalysisProvider
                                  application/AnalysisProviderEvaluation
                                  application/AnalysisProviderRegistry
                                  application/AnalysisSnapshotCache
                                  application/AnalysisSnapshotFiles
                                  application/ArtifactExtraction
                                  application/ArtifactGraphConstruction
                                  application/ArtifactInventory
                                  application/AuthorizedArtifactInventory
                                  application/BinarySession
                                  application/BinarySessionPort
                                  application/BoundedJsonFiles
                                  application/BrowserEvidence
                                  application/BrowserObservationPort
                                  application/BrowserObservationService
                                  application/CapabilityInventory
                                  application/ClientConfigPath
                                  application/ClientRegistrationStatus
                                  application/CommandShimReplay
                                  application/CompositeProvider
                                  application/ConfiguredRoots
                                  application/CrossVersionInventory
                                  application/CrossVersionInvestigation
                                  application/CrossVersionInvestigationEvidence
                                  application/CrossVersionInvestigationReplay
                                  application/DeferredFileAuthorization
                                  application/DirectAnalysis
                                  application/Doctor
                                  application/ElectronEvidence
                                  application/ElectronObservationPort
                                  application/ElectronObservationService
                                  application/EnhancedTools
                                  application/EvidenceBundleCommands
                                  application/EvidenceBundleFiles
                                  application/EvidenceLedger
                                  application/FilesystemSnapshot
                                  application/homebrew
                                  application/InvestigationProviders
                                  application/InvestigationWorkspaceStore
                                  application/LinuxHopper
                                  application/LoopbackReplay
                                  application/MacHopper
                                  application/PermissionAuthority
                                  application/PermissionConfiguration
                                  application/ProcessCaptureAuthority
                                  application/ProcessCaptureCapability
                                  application/ProcessCaptureError
                                  application/ProcessCaptureLifecycle
                                  application/ProcessCheckpoints
                                  application/ProcessCli
                                  application/ProcessEvidence
                                  application/ProcessHarness
                                  application/ProcessNormalization
                                  application/ProcessSampling
                                  application/ProgressReporter
                                  application/ProjectPermissionStore
                                  application/RealHopperAssertions
                                  application/ReferenceSourceImport
                                  application/ReferenceSourceImportEntries
                                  application/ReferenceSourceImportPolicy
                                  application/ReferenceSourceImportTypes
                                  application/ReferenceSourceVcsAdapter
                                  application/runtime
                                  application/SessionProviderRouter
                                  application/Setup
                                  application/SetupClients
                                  application/SetupInstallFailure
                                  application/SetupPlan
                                  application/SetupSkill
                                  application/SupportedClients
                                  application/TerminalRenderer
                                  application/Uninstall
                                  application/UnknownEvidence
                                  application/Upgrade
                                  browser/CdpBrowserProvider
                                  browser/CdpCaptureCompleteness
                                  browser/CdpCaptureDocuments
                                  browser/CdpCaptureEvents
                                  browser/CdpCaptureStorage
                                  browser/CdpCaptureValues
                                  browser/CdpConnection
                                  browser/CdpElectronInspection
                                  browser/CdpElectronProvider
                                  browser/CdpEndpoint
                                  browser/CdpObservationSession
                                  browser/CdpOptionalCommand
                                  browser/CdpPageCapture
                                  browser/CdpSafeMetadata
                                  browser/CdpScreenshot
                                  browser/CdpTargetSession
                                  browser/CdpWebMcpDiscovery
                                  browser/ElectronFileScope
                                  browser/PngVisualDiff
                                  browser/SensitiveTextCapture
                                  browser/WebSourceMapFetcher
                                  cli
                                  config
                                  contracts/artifactComparisonExample
                                  contracts/artifactToolContracts
                                  contracts/browserToolContracts
                                  contracts/electronToolContracts
                                  contracts/enhancedInputs
                                  contracts/errorSchemas
                                  contracts/functionComparisonExample
                                  contracts/investigationExamples
                                  contracts/nativeToolContracts
                                  contracts/processCaptureExample
                                  contracts/promptContracts
                                  contracts/providerSelection
                                  contracts/sessionLifecycleInputs
                                  contracts/toolContractExamples
                                  contracts/toolContracts
                                  contracts/toolContractTypes
                                  contracts/toolOutputSchemas
                                  contracts/unknownContractExamples
                                  domain/analysisProfile
                                  domain/analysisSnapshot
                                  domain/artifactComparison
                                  domain/artifactGraph
                                  domain/artifactInventoryEvidence
                                  domain/binaryTarget
                                  domain/browserCompleteness
                                  domain/browserObservation
                                  domain/browserSession
                                  domain/bundleComparison
                                  domain/callPath
                                  domain/changedBehavior
                                  domain/electronObservation
                                  domain/errors
                                  domain/evidence
                                  domain/evidenceBundle
                                  domain/functionComparison
                                  domain/functionComparisonNormalization
                                  domain/functionComparisonResults
                                  domain/functionComparisonSchemas
                                  domain/functionDossierEvidence
                                  domain/hopperStartupFailure
                                  domain/hopperValues
                                  domain/investigationWorkspace
                                  domain/jsonLimits
                                  domain/jsonShape
                                  domain/jsonValue
                                  domain/nativeInspection
                                  domain/permissionPolicy
                                  domain/processCapture
                                  domain/processCaptureValidation
                                  domain/processComparison
                                  domain/processScenario
                                  domain/reconstructionUnknowns
                                  domain/reconstructionVerification
                                  domain/reconstructionVerificationSchemas
                                  domain/referenceSourceClassification
                                  domain/referenceSourceGraph
                                  domain/referenceSourceImportParsing
                                  domain/referenceSourcePolicy
                                  domain/residualUnknown
                                  domain/result
                                  domain/runtimeVersion
                                  domain/staticRuntimeCorrelation
                                  domain/symbolAnalysis
                                  domain/webBundleAnalysis
                                  domain/webBundleAnalyzer
                                  domain/webCaptureDiff
                                  domain/webContentArtifact
                                  domain/webInventory
                                  domain/webMcpDiscovery
                                  domain/webScreenshot
                                  ghidra/GhidraAnalysisProfile
                                  ghidra/GhidraClient
                                  ghidra/GhidraClientTypes
                                  ghidra/GhidraDefaults
                                  ghidra/GhidraDiagnostics
                                  ghidra/GhidraDoctor
                                  ghidra/GhidraInstallation
                                  ghidra/GhidraLauncher
                                  ghidra/GhidraProvider
                                  ghidra/GhidraResponseBuffer
                                  ghidra/GhidraResponseRouter
                                  ghidra/GhidraSessionError
                                  ghidra/GhidraSessionValues
                                  ghidra/GhidraSocketConnection
                                  ghidra/protocol
                                  hopper/BridgeLauncher
                                  hopper/HopperAnalysisProfile
                                  hopper/HopperClient
                                  hopper/HopperProvider
                                  hopper/HopperSessionValues
                                  hopper/HopperSocketConnection
                                  hopper/protocol
                                  main
                                  process/PendingOperations
                                  process/PrivateRuntimeRoot
                                  process/ProcessOwnership
                                  process/ProviderDeadline
                                  process/ProviderProcess
                                  server/createServer
                                  server/mcpProgress
                                  server/promptCompletion
                                  server/recordDerivedEvidence
                                  server/registerArtifactComparisonTool
                                  server/registerArtifactTools
                                  server/registerBrowserTools
                                  server/registerBundleComparisonTool
                                  server/registerElectronTools
                                  server/registerEnhancedTools
                                  server/registerEvidenceResources
                                  server/registerEvidenceTools
                                  server/registerFunctionComparisonTool
                                  server/registerInvestigationTools
                                  server/registerNativeTools
                                  server/registerOfficialTools
                                  server/registerProcessComparisonTool
                                  server/registerPrompts
                                  server/registerSessionStatusTool
                                  server/registerSessionTools
                                  server/runDerivedOperation
                                  server/sessionEvidence
                                  server/sessionToolPolicies
                                  server/toolLogging
                                  server/toolRegistrationOptions
                                  server/toolResult
                                  @@ -25,7 +25,7 @@

                                  On This Page

                                  Modules -
                                  application/AbortablePromiseapplication/AnalysisProviderapplication/AnalysisProviderEvaluationapplication/AnalysisProviderRegistryapplication/AnalysisSnapshotCacheapplication/AnalysisSnapshotFilesapplication/ArtifactExtractionapplication/ArtifactGraphConstructionapplication/ArtifactInventoryapplication/AuthorizedArtifactInventoryapplication/BinarySessionapplication/BinarySessionPortapplication/BoundedJsonFilesapplication/BrowserEvidenceapplication/BrowserObservationPortapplication/BrowserObservationServiceapplication/CapabilityInventoryapplication/ClientConfigPathapplication/ClientRegistrationStatusapplication/CommandShimReplayapplication/CompositeProviderapplication/ConfiguredRootsapplication/CrossVersionInventoryapplication/CrossVersionInvestigationapplication/CrossVersionInvestigationEvidenceapplication/CrossVersionInvestigationReplayapplication/DeferredFileAuthorizationapplication/DirectAnalysisapplication/Doctorapplication/ElectronEvidenceapplication/ElectronObservationPortapplication/ElectronObservationServiceapplication/EnhancedToolsapplication/EvidenceBundleCommandsapplication/EvidenceBundleFilesapplication/EvidenceLedgerapplication/FilesystemSnapshotapplication/homebrewapplication/InvestigationProvidersapplication/InvestigationWorkspaceStoreapplication/LinuxHopperapplication/LoopbackReplayapplication/MacHopperapplication/PermissionAuthorityapplication/PermissionConfigurationapplication/ProcessCaptureAuthorityapplication/ProcessCaptureCapabilityapplication/ProcessCaptureErrorapplication/ProcessCaptureLifecycleapplication/ProcessCheckpointsapplication/ProcessCliapplication/ProcessEvidenceapplication/ProcessHarnessapplication/ProcessNormalizationapplication/ProcessSamplingapplication/ProgressReporterapplication/ProjectPermissionStoreapplication/RealHopperAssertionsapplication/ReferenceSourceImportapplication/ReferenceSourceImportEntriesapplication/ReferenceSourceImportPolicyapplication/ReferenceSourceImportTypesapplication/ReferenceSourceVcsAdapterapplication/runtimeapplication/SessionProviderRouterapplication/Setupapplication/SetupClientsapplication/SetupInstallFailureapplication/SetupPlanapplication/SetupSkillapplication/SupportedClientsapplication/TerminalRendererapplication/Uninstallapplication/UnknownEvidenceapplication/Upgradebrowser/CdpBrowserProviderbrowser/CdpCaptureCompletenessbrowser/CdpCaptureDocumentsbrowser/CdpCaptureEventsbrowser/CdpCaptureStoragebrowser/CdpCaptureValuesbrowser/CdpConnectionbrowser/CdpElectronInspectionbrowser/CdpElectronProviderbrowser/CdpEndpointbrowser/CdpObservationSessionbrowser/CdpOptionalCommandbrowser/CdpPageCapturebrowser/CdpSafeMetadatabrowser/CdpScreenshotbrowser/CdpTargetSessionbrowser/CdpWebMcpDiscoverybrowser/ElectronFileScopebrowser/PngVisualDiffbrowser/SensitiveTextCapturebrowser/WebSourceMapFetchercliconfigcontracts/artifactComparisonExamplecontracts/artifactToolContractscontracts/browserToolContractscontracts/electronToolContractscontracts/enhancedInputscontracts/errorSchemascontracts/functionComparisonExamplecontracts/investigationExamplescontracts/nativeToolContractscontracts/processCaptureExamplecontracts/promptContractscontracts/providerSelectioncontracts/sessionLifecycleInputscontracts/toolContractExamplescontracts/toolContractscontracts/toolContractTypescontracts/toolOutputSchemascontracts/unknownContractExamplesdomain/analysisProfiledomain/analysisSnapshotdomain/artifactComparisondomain/artifactGraphdomain/artifactInventoryEvidencedomain/binaryTargetdomain/browserCompletenessdomain/browserObservationdomain/browserSessiondomain/bundleComparisondomain/callPathdomain/changedBehaviordomain/electronObservationdomain/errorsdomain/evidencedomain/evidenceBundledomain/functionComparisondomain/functionComparisonNormalizationdomain/functionComparisonResultsdomain/functionComparisonSchemasdomain/functionDossierEvidencedomain/hopperStartupFailuredomain/hopperValuesdomain/investigationWorkspacedomain/jsonLimitsdomain/jsonShapedomain/jsonValuedomain/nativeInspectiondomain/permissionPolicydomain/processCapturedomain/processCaptureValidationdomain/processComparisondomain/processScenariodomain/reconstructionUnknownsdomain/reconstructionVerificationdomain/reconstructionVerificationSchemasdomain/referenceSourceClassificationdomain/referenceSourceGraphdomain/referenceSourceImportParsingdomain/referenceSourcePolicydomain/residualUnknowndomain/resultdomain/runtimeVersiondomain/staticRuntimeCorrelationdomain/symbolAnalysisdomain/webBundleAnalysisdomain/webBundleAnalyzerdomain/webCaptureDiffdomain/webContentArtifactdomain/webInventorydomain/webMcpDiscoverydomain/webScreenshothopper/BridgeLauncherhopper/HopperAnalysisProfilehopper/HopperClienthopper/HopperProviderhopper/HopperSessionValueshopper/HopperSocketConnectionhopper/protocolmainprocess/PendingOperationsprocess/PrivateRuntimeRootprocess/ProcessOwnershipprocess/ProviderDeadlineprocess/ProviderProcessserver/createServerserver/mcpProgressserver/promptCompletionserver/recordDerivedEvidenceserver/registerArtifactComparisonToolserver/registerArtifactToolsserver/registerBrowserToolsserver/registerBundleComparisonToolserver/registerElectronToolsserver/registerEnhancedToolsserver/registerEvidenceResourcesserver/registerEvidenceToolsserver/registerFunctionComparisonToolserver/registerInvestigationToolsserver/registerNativeToolsserver/registerOfficialToolsserver/registerProcessComparisonToolserver/registerPromptsserver/registerSessionStatusToolserver/registerSessionToolsserver/runDerivedOperationserver/sessionEvidenceserver/sessionToolPoliciesserver/toolLoggingserver/toolRegistrationOptionsserver/toolResult
                                  +
                                  application/AbortablePromiseapplication/AnalysisProviderapplication/AnalysisProviderEvaluationapplication/AnalysisProviderRegistryapplication/AnalysisSnapshotCacheapplication/AnalysisSnapshotFilesapplication/ArtifactExtractionapplication/ArtifactGraphConstructionapplication/ArtifactInventoryapplication/AuthorizedArtifactInventoryapplication/BinarySessionapplication/BinarySessionPortapplication/BoundedJsonFilesapplication/BrowserEvidenceapplication/BrowserObservationPortapplication/BrowserObservationServiceapplication/CapabilityInventoryapplication/ClientConfigPathapplication/ClientRegistrationStatusapplication/CommandShimReplayapplication/CompositeProviderapplication/ConfiguredRootsapplication/CrossVersionInventoryapplication/CrossVersionInvestigationapplication/CrossVersionInvestigationEvidenceapplication/CrossVersionInvestigationReplayapplication/DeferredFileAuthorizationapplication/DirectAnalysisapplication/Doctorapplication/ElectronEvidenceapplication/ElectronObservationPortapplication/ElectronObservationServiceapplication/EnhancedToolsapplication/EvidenceBundleCommandsapplication/EvidenceBundleFilesapplication/EvidenceLedgerapplication/FilesystemSnapshotapplication/homebrewapplication/InvestigationProvidersapplication/InvestigationWorkspaceStoreapplication/LinuxHopperapplication/LoopbackReplayapplication/MacHopperapplication/PermissionAuthorityapplication/PermissionConfigurationapplication/ProcessCaptureAuthorityapplication/ProcessCaptureCapabilityapplication/ProcessCaptureErrorapplication/ProcessCaptureLifecycleapplication/ProcessCheckpointsapplication/ProcessCliapplication/ProcessEvidenceapplication/ProcessHarnessapplication/ProcessNormalizationapplication/ProcessSamplingapplication/ProgressReporterapplication/ProjectPermissionStoreapplication/RealHopperAssertionsapplication/ReferenceSourceImportapplication/ReferenceSourceImportEntriesapplication/ReferenceSourceImportPolicyapplication/ReferenceSourceImportTypesapplication/ReferenceSourceVcsAdapterapplication/runtimeapplication/SessionProviderRouterapplication/Setupapplication/SetupClientsapplication/SetupInstallFailureapplication/SetupPlanapplication/SetupSkillapplication/SupportedClientsapplication/TerminalRendererapplication/Uninstallapplication/UnknownEvidenceapplication/Upgradebrowser/CdpBrowserProviderbrowser/CdpCaptureCompletenessbrowser/CdpCaptureDocumentsbrowser/CdpCaptureEventsbrowser/CdpCaptureStoragebrowser/CdpCaptureValuesbrowser/CdpConnectionbrowser/CdpElectronInspectionbrowser/CdpElectronProviderbrowser/CdpEndpointbrowser/CdpObservationSessionbrowser/CdpOptionalCommandbrowser/CdpPageCapturebrowser/CdpSafeMetadatabrowser/CdpScreenshotbrowser/CdpTargetSessionbrowser/CdpWebMcpDiscoverybrowser/ElectronFileScopebrowser/PngVisualDiffbrowser/SensitiveTextCapturebrowser/WebSourceMapFetchercliconfigcontracts/artifactComparisonExamplecontracts/artifactToolContractscontracts/browserToolContractscontracts/electronToolContractscontracts/enhancedInputscontracts/errorSchemascontracts/functionComparisonExamplecontracts/investigationExamplescontracts/nativeToolContractscontracts/processCaptureExamplecontracts/promptContractscontracts/providerSelectioncontracts/sessionLifecycleInputscontracts/toolContractExamplescontracts/toolContractscontracts/toolContractTypescontracts/toolOutputSchemascontracts/unknownContractExamplesdomain/analysisProfiledomain/analysisSnapshotdomain/artifactComparisondomain/artifactGraphdomain/artifactInventoryEvidencedomain/binaryTargetdomain/browserCompletenessdomain/browserObservationdomain/browserSessiondomain/bundleComparisondomain/callPathdomain/changedBehaviordomain/electronObservationdomain/errorsdomain/evidencedomain/evidenceBundledomain/functionComparisondomain/functionComparisonNormalizationdomain/functionComparisonResultsdomain/functionComparisonSchemasdomain/functionDossierEvidencedomain/hopperStartupFailuredomain/hopperValuesdomain/investigationWorkspacedomain/jsonLimitsdomain/jsonShapedomain/jsonValuedomain/nativeInspectiondomain/permissionPolicydomain/processCapturedomain/processCaptureValidationdomain/processComparisondomain/processScenariodomain/reconstructionUnknownsdomain/reconstructionVerificationdomain/reconstructionVerificationSchemasdomain/referenceSourceClassificationdomain/referenceSourceGraphdomain/referenceSourceImportParsingdomain/referenceSourcePolicydomain/residualUnknowndomain/resultdomain/runtimeVersiondomain/staticRuntimeCorrelationdomain/symbolAnalysisdomain/webBundleAnalysisdomain/webBundleAnalyzerdomain/webCaptureDiffdomain/webContentArtifactdomain/webInventorydomain/webMcpDiscoverydomain/webScreenshotghidra/GhidraAnalysisProfileghidra/GhidraClientghidra/GhidraClientTypesghidra/GhidraDefaultsghidra/GhidraDiagnosticsghidra/GhidraDoctorghidra/GhidraInstallationghidra/GhidraLauncherghidra/GhidraProviderghidra/GhidraResponseBufferghidra/GhidraResponseRouterghidra/GhidraSessionErrorghidra/GhidraSessionValuesghidra/GhidraSocketConnectionghidra/protocolhopper/BridgeLauncherhopper/HopperAnalysisProfilehopper/HopperClienthopper/HopperProviderhopper/HopperSessionValueshopper/HopperSocketConnectionhopper/protocolmainprocess/PendingOperationsprocess/PrivateRuntimeRootprocess/ProcessOwnershipprocess/ProviderDeadlineprocess/ProviderProcessserver/createServerserver/mcpProgressserver/promptCompletionserver/recordDerivedEvidenceserver/registerArtifactComparisonToolserver/registerArtifactToolsserver/registerBrowserToolsserver/registerBundleComparisonToolserver/registerElectronToolsserver/registerEnhancedToolsserver/registerEvidenceResourcesserver/registerEvidenceToolsserver/registerFunctionComparisonToolserver/registerInvestigationToolsserver/registerNativeToolsserver/registerOfficialToolsserver/registerProcessComparisonToolserver/registerPromptsserver/registerSessionStatusToolserver/registerSessionToolsserver/runDerivedOperationserver/sessionEvidenceserver/sessionToolPoliciesserver/toolLoggingserver/toolRegistrationOptionsserver/toolResult
                                  @@ -49,17 +50,17 @@
                                  configuredHopperPath?: string
                                  +
                                • Defined in src/application/Doctor.ts:68
                                  • nodeVersion: string
                                  +
                                • Defined in src/application/Doctor.ts:67
                                  • platform: Platform
                                  +
                                • Defined in src/application/Doctor.ts:66
                                  • @@ -71,7 +72,7 @@

                                  Returns Promise<string | undefined>

                                  +
                                • Defined in src/application/Doctor.ts:75
                                  • +
                                • Defined in src/application/Doctor.ts:80

                                  • Returns Promise<boolean>

                                  +
                                • Defined in src/application/Doctor.ts:72
                                  • +
                                • Defined in src/application/Doctor.ts:78
                                  • +
                                • Defined in src/application/Doctor.ts:79
                                  • +
                                • Defined in src/application/Doctor.ts:74
                                  • +
                                • Defined in src/application/Doctor.ts:70
                                  • +
                                • Defined in src/application/Doctor.ts:69
                                  • +
                                • Defined in src/application/Doctor.ts:76
                                  • +
                                  + +

                                  Returns Promise<boolean>

                                  +
                                • Defined in src/application/Doctor.ts:73

                                  • Returns Promise<boolean>

                                  +
                                • Defined in src/application/Doctor.ts:71
                                  • @@ -191,7 +201,7 @@
                                  Properties
                                  configuredHopperPathnodeVersionplatform
                                  Methods -
                                  brewHopperPathclientRegistrationsexecutableinstallationPathsinstalledSkillVersionlinuxDemoRuntimeReadylinuxDistributionmacosVersionmanualHopperPathssupportedLinuxHoppervalidTarget
                                  +
                                  brewHopperPathclientRegistrationsexecutableinstallationPathsinstalledSkillVersionlinuxDemoRuntimeReadylinuxDistributionmacosVersionmanualHopperPathsproviderInspectionssupportedLinuxHoppervalidTarget
                                  -
                                  interface ParsedReferenceSourceEntries {
                                      entries: (
                                          | {
                                              classifications: (
                                                  | "unknown"
                                                  | "manifest"
                                                  | "source"
                                                  | "test"
                                                  | "config"
                                                  | "generated"
                                                  | "vendor"
                                                  | "documentation"
                                              )[];
                                              content_state: | "unknown"
                                              | "too-large"
                                              | "excluded"
                                              | "hashed"
                                              | "redacted-secret"
                                              | "unreadable";
                                              kind: "file";
                                              language: string
                                              | null;
                                              limitations: string[];
                                              path: string;
                                              sha256: string | null;
                                              size: number | null;
                                          }
                                          | {
                                              classifications: (
                                                  | "unknown"
                                                  | "manifest"
                                                  | "source"
                                                  | "test"
                                                  | "config"
                                                  | "generated"
                                                  | "vendor"
                                                  | "documentation"
                                              )[];
                                              kind: "directory";
                                              limitations: string[];
                                              path: string;
                                              tree_state: | "unknown"
                                              | "excluded"
                                              | "partial"
                                              | "unreadable"
                                              | "enumerated";
                                          }
                                          | {
                                              classifications: (
                                                  | "unknown"
                                                  | "manifest"
                                                  | "source"
                                                  | "test"
                                                  | "config"
                                                  | "generated"
                                                  | "vendor"
                                                  | "documentation"
                                              )[];
                                              kind: "symlink";
                                              limitations: string[];
                                              path: string;
                                              target: string;
                                              target_state: | "unknown"
                                              | "external"
                                              | "missing"
                                              | "unreadable"
                                              | "internal";
                                          }
                                      )[];
                                      limitations: string[];
                                      parseFailures: { parser: string; path: string; reason: string }[];
                                      relationships: {
                                          from_path: string;
                                          kind: "references" | "imports" | "requires" | "declares-module";
                                          parse_state: "unknown" | "partial" | "parsed";
                                          resolution: "unknown" | "external" | "unresolved" | "internal";
                                          to: string;
                                      }[];
                                  }
                                  @@ -36,22 +36,22 @@
                                  detail: string
                                  +
                                • Defined in src/application/Setup.ts:116
                                  • external: boolean
                                  +
                                • Defined in src/application/Setup.ts:117
                                  • kind: "install_hopper" | "install_skill" | "configure_client"
                                  +
                                • Defined in src/application/Setup.ts:114
                                  • target: string
                                  +
                                • Defined in src/application/Setup.ts:115
                                  • diff --git a/docs/api/interfaces/application_Setup.SetupHost.html b/docs/api/interfaces/application_Setup.SetupHost.html index d199af5d2..cc9c28de3 100644 --- a/docs/api/interfaces/application_Setup.SetupHost.html +++ b/docs/api/interfaces/application_Setup.SetupHost.html @@ -16,9 +16,9 @@ Implementations report interrupted installers as values: setup must not wait indefinitely for stdin or a GUI response in an unattended agent invocation.

                                  -
                                  interface SetupHost {
                                      nodeVersion: string;
                                      platform: Platform;
                                      clientNeedsConfigure(
                                          client: SetupClient,
                                          hopperPath: string | undefined,
                                          command: readonly string[],
                                      ): Promise<boolean>;
                                      configureClient(
                                          client: SetupClient,
                                          hopperPath: string | undefined,
                                          command: readonly string[],
                                      ): Promise<ClientConfigurationResult>;
                                      detectedClients(): Promise<readonly SetupClient[]>;
                                      doctor(): Promise<
                                          {
                                              checks: readonly DoctorCheck[];
                                              healthy: boolean;
                                              hopperPath?: string;
                                              identity?: {
                                                  catalog: {
                                                      counts: {
                                                          cli_commands: number;
                                                          mcp_prompts: number;
                                                          mcp_resource_templates: 7;
                                                          mcp_resources: 2;
                                                          mcp_tools: number;
                                                      };
                                                      digests: {
                                                          combined_sha256: string;
                                                          prompts_sha256: string;
                                                          resources_sha256: string;
                                                          tools_sha256: string;
                                                      };
                                                      tools: {
                                                          annotations: {
                                                              destructive: boolean;
                                                              idempotent: boolean;
                                                              open_world: boolean;
                                                              read_only: boolean;
                                                          };
                                                          name: | "open_binary"
                                                          | "list_browser_targets"
                                                          | "inspect_web_page"
                                                          | "analyze_web_bundle"
                                                          | "observe_web_session"
                                                          | "discover_webmcp_tools"
                                                          | "compare_web_captures"
                                                          | "capture_web_screenshot"
                                                          | "compare_web_screenshots"
                                                          | "list_electron_targets"
                                                          | "inspect_electron_page"
                                                          | "inventory_artifact"
                                                          | "extract_artifact"
                                                          | "swift_classes"
                                                          | "get_objc_classes"
                                                          | "get_objc_protocols"
                                                          | "batch_decompile"
                                                          | "get_call_graph"
                                                          | "analyze_swift_types"
                                                          | "find_xrefs_to_name"
                                                          | "binary_overview"
                                                          | "analyze_function"
                                                          | "trace_feature"
                                                          | "comment"
                                                          | "compare_artifacts"
                                                          | "find_changed_behavior"
                                                          | "compare_process_captures"
                                                          | "compare_functions"
                                                          | "capture_process_scenario"
                                                          | "address_name"
                                                          | "current_address"
                                                          | "current_procedure"
                                                          | "current_document"
                                                          | "goto_address"
                                                          | "inline_comment"
                                                          | "list_bookmarks"
                                                          | "list_documents"
                                                          | "list_names"
                                                          | "list_procedures"
                                                          | "list_segments"
                                                          | "list_strings"
                                                          | "next_address"
                                                          | "prev_address"
                                                          | "procedure_address"
                                                          | "procedure_assembly"
                                                          | "procedure_callees"
                                                          | "procedure_callers"
                                                          | "procedure_info"
                                                          | "procedure_references"
                                                          | "procedure_pseudo_code"
                                                          | "resolve_containing_procedure"
                                                          | "search_procedures"
                                                          | "search_strings"
                                                          | "set_address_name"
                                                          | "set_addresses_names"
                                                          | "set_bookmark"
                                                          | "set_comment"
                                                          | "set_current_document"
                                                          | "set_inline_comment"
                                                          | "unset_bookmark"
                                                          | "xrefs"
                                                          | "inspect_macho"
                                                          | "inspect_signature"
                                                          | "inspect_plist"
                                                          | "list_architectures"
                                                          | "demangle_swift"
                                                          | "close_binary"
                                                          | "binary_session"
                                                          | "export_evidence_bundle"
                                                          | "import_evidence_bundle"
                                                          | "compare_bundles"
                                                          | "build_call_path"
                                                          | "correlate_static_and_runtime"
                                                          | "verify_reconstruction"
                                                          | "list_unknowns"
                                                          | "record_unknown"
                                                          | "update_unknown"
                                                          | "verify_unknown_resolution";
                                                          surface: ToolKind;
                                                      }[];
                                                  };
                                                  cli_package_version: string;
                                                  expected_skill_version: string;
                                                  installations: {
                                                      paths: readonly string[];
                                                      state: "unknown"
                                                      | "single"
                                                      | "multiple";
                                                  };
                                                  live_server: { remediation: string; state: "unknown" };
                                                  registrations: readonly ClientRegistrationStatus[];
                                                  sdk: {
                                                      client_test: "2.0.0-beta.4";
                                                      core: "2.0.0-beta.4";
                                                      server: "2.0.0-beta.4";
                                                  };
                                                  skill: {
                                                      installed_version: string
                                                      | null;
                                                      remediation: string | null;
                                                      state: "unknown" | "aligned" | "stale";
                                                  };
                                              };
                                          },
                                      >;
                                      hopperPath(): Promise<string | undefined>;
                                      installHopper(replaceExisting: boolean): Promise<SetupHopperInstallResult>;
                                      installSkill(): Promise<"failed" | "unchanged" | "installed">;
                                      linuxDistribution(): Promise<LinuxDistribution | undefined>;
                                      macosVersion(): Promise<string | undefined>;
                                      skillNeedsInstall(): Promise<boolean>;
                                  }
                                  @@ -40,6 +40,7 @@ indefinitely for stdin or a GUI response in an unattended agent invocation.

                                  installSkill linuxDistribution macosVersion +providerEnvironment? skillNeedsInstall
                                  @@ -49,12 +50,12 @@ indefinitely for stdin or a GUI response in an unattended agent invocation.

                                  nodeVersion: string
                                  +
                                • Defined in src/application/Setup.ts:76
                                  • platform: Platform
                                  +
                                • Defined in src/application/Setup.ts:75
                                  • @@ -62,32 +63,32 @@ indefinitely for stdin or a GUI response in an unattended agent invocation.

                                  +
                                • Defined in src/application/Setup.ts:88
                                  • +
                                • Defined in src/application/Setup.ts:83
                                  • +
                                • Defined in src/application/Setup.ts:82
                                  • +
                                • Defined in src/application/Setup.ts:95
                                  • +
                                • Defined in src/application/Setup.ts:79

                                  • Returns Promise<SetupHopperInstallResult>

                                  +
                                • Defined in src/application/Setup.ts:80
                                  • +
                                • Defined in src/application/Setup.ts:94
                                  • +
                                • Defined in src/application/Setup.ts:78
                                  • +
                                • Defined in src/application/Setup.ts:77
                                  • +
                                  + +
                                  +
                                • Defined in src/application/Setup.ts:93
                                  • @@ -181,7 +191,7 @@ indefinitely for stdin or a GUI response in an unattended agent invocation.

                                  Properties
                                  nodeVersionplatform
                                  Methods -
                                  clientNeedsConfigureconfigureClientdetectedClientsdoctorhopperPathinstallHopperinstallSkilllinuxDistributionmacosVersionskillNeedsInstall
                                  +
                                  clientNeedsConfigureconfigureClientdetectedClientsdoctorhopperPathinstallHopperinstallSkilllinuxDistributionmacosVersionproviderEnvironmentskillNeedsInstall
                                  interface SetupOptions {
                                      approved: boolean;
                                      installHopper: boolean;
                                      structured: boolean;
                                  }
                                  +
                                • Defined in src/application/Setup.ts:121
                                  • @@ -35,17 +35,17 @@
                                  approved: boolean
                                  +
                                • Defined in src/application/Setup.ts:122
                                  • installHopper: boolean
                                  +
                                • Defined in src/application/Setup.ts:123
                                  • structured: boolean
                                  +
                                • Defined in src/application/Setup.ts:124
                                  • diff --git a/docs/api/interfaces/application_Setup.SetupResult.html b/docs/api/interfaces/application_Setup.SetupResult.html index 53417a062..ca16ee897 100644 --- a/docs/api/interfaces/application_Setup.SetupResult.html +++ b/docs/api/interfaces/application_Setup.SetupResult.html @@ -16,9 +16,9 @@ needs_human carries remediation text instead of initiating an interactive prompt, avoiding deadlocks in stdio and other unattended environments.

                                  -
                                  interface SetupResult {
                                      appliedActions: readonly string[];
                                      clients: Readonly<Record<string, ClientConfigurationResult>>;
                                      code?: SetupFailureCode;
                                      doctor: {
                                          checks: readonly DoctorCheck[];
                                          healthy: boolean;
                                          hopperPath?: string;
                                          identity?: {
                                              catalog: {
                                                  counts: {
                                                      cli_commands: number;
                                                      mcp_prompts: number;
                                                      mcp_resource_templates: 7;
                                                      mcp_resources: 2;
                                                      mcp_tools: number;
                                                  };
                                                  digests: {
                                                      combined_sha256: string;
                                                      prompts_sha256: string;
                                                      resources_sha256: string;
                                                      tools_sha256: string;
                                                  };
                                                  tools: {
                                                      annotations: {
                                                          destructive: boolean;
                                                          idempotent: boolean;
                                                          open_world: boolean;
                                                          read_only: boolean;
                                                      };
                                                      name: | "open_binary"
                                                      | "list_browser_targets"
                                                      | "inspect_web_page"
                                                      | "analyze_web_bundle"
                                                      | "observe_web_session"
                                                      | "discover_webmcp_tools"
                                                      | "compare_web_captures"
                                                      | "capture_web_screenshot"
                                                      | "compare_web_screenshots"
                                                      | "list_electron_targets"
                                                      | "inspect_electron_page"
                                                      | "inventory_artifact"
                                                      | "extract_artifact"
                                                      | "swift_classes"
                                                      | "get_objc_classes"
                                                      | "get_objc_protocols"
                                                      | "batch_decompile"
                                                      | "get_call_graph"
                                                      | "analyze_swift_types"
                                                      | "find_xrefs_to_name"
                                                      | "binary_overview"
                                                      | "analyze_function"
                                                      | "trace_feature"
                                                      | "comment"
                                                      | "compare_artifacts"
                                                      | "find_changed_behavior"
                                                      | "compare_process_captures"
                                                      | "compare_functions"
                                                      | "capture_process_scenario"
                                                      | "address_name"
                                                      | "current_address"
                                                      | "current_procedure"
                                                      | "current_document"
                                                      | "goto_address"
                                                      | "inline_comment"
                                                      | "list_bookmarks"
                                                      | "list_documents"
                                                      | "list_names"
                                                      | "list_procedures"
                                                      | "list_segments"
                                                      | "list_strings"
                                                      | "next_address"
                                                      | "prev_address"
                                                      | "procedure_address"
                                                      | "procedure_assembly"
                                                      | "procedure_callees"
                                                      | "procedure_callers"
                                                      | "procedure_info"
                                                      | "procedure_references"
                                                      | "procedure_pseudo_code"
                                                      | "resolve_containing_procedure"
                                                      | "search_procedures"
                                                      | "search_strings"
                                                      | "set_address_name"
                                                      | "set_addresses_names"
                                                      | "set_bookmark"
                                                      | "set_comment"
                                                      | "set_current_document"
                                                      | "set_inline_comment"
                                                      | "unset_bookmark"
                                                      | "xrefs"
                                                      | "inspect_macho"
                                                      | "inspect_signature"
                                                      | "inspect_plist"
                                                      | "list_architectures"
                                                      | "demangle_swift"
                                                      | "close_binary"
                                                      | "binary_session"
                                                      | "export_evidence_bundle"
                                                      | "import_evidence_bundle"
                                                      | "compare_bundles"
                                                      | "build_call_path"
                                                      | "correlate_static_and_runtime"
                                                      | "verify_reconstruction"
                                                      | "list_unknowns"
                                                      | "record_unknown"
                                                      | "update_unknown"
                                                      | "verify_unknown_resolution";
                                                      surface: ToolKind;
                                                  }[];
                                              };
                                              cli_package_version: string;
                                              expected_skill_version: string;
                                              installations: {
                                                  paths: readonly string[];
                                                  state: "unknown"
                                                  | "single"
                                                  | "multiple";
                                              };
                                              live_server: { remediation: string; state: "unknown" };
                                              registrations: readonly ClientRegistrationStatus[];
                                              sdk: {
                                                  client_test: "2.0.0-beta.4";
                                                  core: "2.0.0-beta.4";
                                                  server: "2.0.0-beta.4";
                                              };
                                              skill: {
                                                  installed_version: string
                                                  | null;
                                                  remediation: string | null;
                                                  state: "unknown" | "aligned" | "stale";
                                              };
                                          };
                                      };
                                      plannedActions: readonly SetupAction[];
                                      remediation?: string;
                                      status: "ready"
                                      | "planned"
                                      | "needs_confirmation"
                                      | "needs_human";
                                  }
                                  @@ -41,37 +41,37 @@ prompt, avoiding deadlocks in stdio and other unattended environments.

                                  appliedActions: readonly string[]
                                  +
                                • Defined in src/application/Setup.ts:105
                                  • clients: Readonly<Record<string, ClientConfigurationResult>>
                                  +
                                • Defined in src/application/Setup.ts:106
                                  • code?: SetupFailureCode
                                  +
                                • Defined in src/application/Setup.ts:109
                                  • -
                                  doctor: {
                                      checks: readonly DoctorCheck[];
                                      healthy: boolean;
                                      hopperPath?: string;
                                      identity?: {
                                          catalog: {
                                              counts: {
                                                  cli_commands: number;
                                                  mcp_prompts: number;
                                                  mcp_resource_templates: 7;
                                                  mcp_resources: 2;
                                                  mcp_tools: number;
                                              };
                                              digests: {
                                                  combined_sha256: string;
                                                  prompts_sha256: string;
                                                  resources_sha256: string;
                                                  tools_sha256: string;
                                              };
                                              tools: {
                                                  annotations: {
                                                      destructive: boolean;
                                                      idempotent: boolean;
                                                      open_world: boolean;
                                                      read_only: boolean;
                                                  };
                                                  name: | "open_binary"
                                                  | "list_browser_targets"
                                                  | "inspect_web_page"
                                                  | "analyze_web_bundle"
                                                  | "observe_web_session"
                                                  | "discover_webmcp_tools"
                                                  | "compare_web_captures"
                                                  | "capture_web_screenshot"
                                                  | "compare_web_screenshots"
                                                  | "list_electron_targets"
                                                  | "inspect_electron_page"
                                                  | "inventory_artifact"
                                                  | "extract_artifact"
                                                  | "swift_classes"
                                                  | "get_objc_classes"
                                                  | "get_objc_protocols"
                                                  | "batch_decompile"
                                                  | "get_call_graph"
                                                  | "analyze_swift_types"
                                                  | "find_xrefs_to_name"
                                                  | "binary_overview"
                                                  | "analyze_function"
                                                  | "trace_feature"
                                                  | "comment"
                                                  | "compare_artifacts"
                                                  | "find_changed_behavior"
                                                  | "compare_process_captures"
                                                  | "compare_functions"
                                                  | "capture_process_scenario"
                                                  | "address_name"
                                                  | "current_address"
                                                  | "current_procedure"
                                                  | "current_document"
                                                  | "goto_address"
                                                  | "inline_comment"
                                                  | "list_bookmarks"
                                                  | "list_documents"
                                                  | "list_names"
                                                  | "list_procedures"
                                                  | "list_segments"
                                                  | "list_strings"
                                                  | "next_address"
                                                  | "prev_address"
                                                  | "procedure_address"
                                                  | "procedure_assembly"
                                                  | "procedure_callees"
                                                  | "procedure_callers"
                                                  | "procedure_info"
                                                  | "procedure_references"
                                                  | "procedure_pseudo_code"
                                                  | "resolve_containing_procedure"
                                                  | "search_procedures"
                                                  | "search_strings"
                                                  | "set_address_name"
                                                  | "set_addresses_names"
                                                  | "set_bookmark"
                                                  | "set_comment"
                                                  | "set_current_document"
                                                  | "set_inline_comment"
                                                  | "unset_bookmark"
                                                  | "xrefs"
                                                  | "inspect_macho"
                                                  | "inspect_signature"
                                                  | "inspect_plist"
                                                  | "list_architectures"
                                                  | "demangle_swift"
                                                  | "close_binary"
                                                  | "binary_session"
                                                  | "export_evidence_bundle"
                                                  | "import_evidence_bundle"
                                                  | "compare_bundles"
                                                  | "build_call_path"
                                                  | "correlate_static_and_runtime"
                                                  | "verify_reconstruction"
                                                  | "list_unknowns"
                                                  | "record_unknown"
                                                  | "update_unknown"
                                                  | "verify_unknown_resolution";
                                                  surface: ToolKind;
                                              }[];
                                          };
                                          cli_package_version: string;
                                          expected_skill_version: string;
                                          installations: {
                                              paths: readonly string[];
                                              state: "unknown"
                                              | "single"
                                              | "multiple";
                                          };
                                          live_server: { remediation: string; state: "unknown" };
                                          registrations: readonly ClientRegistrationStatus[];
                                          sdk: {
                                              client_test: "2.0.0-beta.4";
                                              core: "2.0.0-beta.4";
                                              server: "2.0.0-beta.4";
                                          };
                                          skill: {
                                              installed_version: string
                                              | null;
                                              remediation: string | null;
                                              state: "unknown" | "aligned" | "stale";
                                          };
                                      };
                                  }
                                  +
                                • Defined in src/application/Setup.ts:107
                                  • plannedActions: readonly SetupAction[]
                                  +
                                • Defined in src/application/Setup.ts:104
                                  • remediation?: string
                                  +
                                • Defined in src/application/Setup.ts:108
                                  • status: "ready" | "planned" | "needs_confirmation" | "needs_human"
                                  +
                                • Defined in src/application/Setup.ts:103
                                  • diff --git a/docs/api/interfaces/browser_CdpEndpoint.CdpEndpointDiscovery.html b/docs/api/interfaces/browser_CdpEndpoint.CdpEndpointDiscovery.html index eb57b6d78..43a181327 100644 --- a/docs/api/interfaces/browser_CdpEndpoint.CdpEndpointDiscovery.html +++ b/docs/api/interfaces/browser_CdpEndpoint.CdpEndpointDiscovery.html @@ -13,7 +13,7 @@

                                  Interface CdpEndpointDiscovery

                                  interface CdpEndpointDiscovery {
                                      targets: readonly CdpEndpointTarget[];
                                      version: {
                                          js_version: string;
                                          product: string;
                                          protocol_version: string;
                                          revision: string;
                                          user_agent: string;
                                      };
                                      webSocket: CdpWebSocketEndpoint;
                                  }
                                  +
                                • Defined in src/browser/CdpEndpoint.ts:59
                                  • @@ -32,17 +32,17 @@
                                  targets: readonly CdpEndpointTarget[]
                                  +
                                • Defined in src/browser/CdpEndpoint.ts:68
                                  • version: {
                                      js_version: string;
                                      product: string;
                                      protocol_version: string;
                                      revision: string;
                                      user_agent: string;
                                  }
                                  +
                                • Defined in src/browser/CdpEndpoint.ts:61
                                  • webSocket: CdpWebSocketEndpoint
                                  +
                                • Defined in src/browser/CdpEndpoint.ts:60
                                  • diff --git a/docs/api/interfaces/browser_CdpEndpoint.CdpEndpointTarget.html b/docs/api/interfaces/browser_CdpEndpoint.CdpEndpointTarget.html index d4d98d4e4..b2230645d 100644 --- a/docs/api/interfaces/browser_CdpEndpoint.CdpEndpointTarget.html +++ b/docs/api/interfaces/browser_CdpEndpoint.CdpEndpointTarget.html @@ -16,7 +16,7 @@
                                  interface CdpEndpointTarget {
                                      attached: boolean;
                                      id: string;
                                      title: string;
                                      type: string;
                                      url: string;
                                      webSocket?: CdpPageWebSocketEndpoint;
                                  }
                                  +
                                • Defined in src/browser/CdpEndpoint.ts:50
                                  • @@ -38,32 +38,32 @@
                                  attached: boolean
                                  +
                                • Defined in src/browser/CdpEndpoint.ts:55
                                  • id: string
                                  +
                                • Defined in src/browser/CdpEndpoint.ts:51
                                  • title: string
                                  +
                                • Defined in src/browser/CdpEndpoint.ts:53
                                  • type: string
                                  +
                                • Defined in src/browser/CdpEndpoint.ts:52
                                  • url: string
                                  +
                                • Defined in src/browser/CdpEndpoint.ts:54
                                  • webSocket?: CdpPageWebSocketEndpoint
                                  +
                                • Defined in src/browser/CdpEndpoint.ts:56
                                  • diff --git a/docs/api/interfaces/config.AppConfig.html b/docs/api/interfaces/config.AppConfig.html index bf9663c15..e0ba9727c 100644 --- a/docs/api/interfaces/config.AppConfig.html +++ b/docs/api/interfaces/config.AppConfig.html @@ -11,9 +11,9 @@
                                • config
                                • AppConfig

                                  • Interface AppConfig

                                  -
                                  interface AppConfig {
                                      administratorPermissionGrants: readonly PermissionGrant[];
                                      analysisProvider: string;
                                      analysisSnapshotFilePolicy: EvidenceFilePolicy;
                                      artifactIntegrityContinueEnabled: boolean;
                                      artifactNativeMountEnabled: boolean;
                                      browserAllowedOrigins: readonly string[];
                                      browserCdpEndpoints: readonly string[];
                                      browserObservationEnabled: boolean;
                                      electronCdpEndpoints: readonly string[];
                                      electronFileRoots: readonly string[];
                                      electronObservationEnabled: boolean;
                                      evidenceFilePolicy: EvidenceFilePolicy;
                                      hopperLauncherPath: string;
                                      hopperLoaderArgs: readonly string[];
                                      hopperTargetKind: "executable" | "database";
                                      hopperTargetPath: string | undefined;
                                      investigationInputRoots: readonly string[];
                                      logLevel:
                                          | "error"
                                          | "trace"
                                          | "debug"
                                          | "info"
                                          | "warn"
                                          | "fatal"
                                          | "silent";
                                      permissionCeilings: readonly PermissionScope[];
                                      permissionProjectRoot: string
                                      | undefined;
                                      permissionProjectStore: string | undefined;
                                      processExecutionPolicy: ProcessExecutionPolicy;
                                      referenceSourcePolicy: ReferenceSourcePolicy;
                                  }
                                  @@ -33,6 +33,8 @@ electronFileRoots electronObservationEnabled evidenceFilePolicy +ghidraInstallDir +ghidraJavaHome hopperLauncherPath hopperLoaderArgs hopperTargetKind @@ -52,117 +54,127 @@
                                  administratorPermissionGrants: readonly PermissionGrant[]
                                  +
                                • Defined in src/config.ts:55
                                  • analysisProvider: string
                                  +
                                • Defined in src/config.ts:33
                                  • analysisSnapshotFilePolicy: EvidenceFilePolicy
                                  +
                                • Defined in src/config.ts:46
                                  • artifactIntegrityContinueEnabled: boolean
                                  +
                                • Defined in src/config.ts:43
                                  • artifactNativeMountEnabled: boolean
                                  +
                                • Defined in src/config.ts:42
                                  • browserAllowedOrigins: readonly string[]
                                  +
                                • Defined in src/config.ts:50
                                  • browserCdpEndpoints: readonly string[]
                                  +
                                • Defined in src/config.ts:49
                                  • browserObservationEnabled: boolean
                                  +
                                • Defined in src/config.ts:48
                                  • electronCdpEndpoints: readonly string[]
                                  +
                                • Defined in src/config.ts:52
                                  • electronFileRoots: readonly string[]
                                  +
                                • Defined in src/config.ts:53
                                  • electronObservationEnabled: boolean
                                  +
                                • Defined in src/config.ts:51
                                  • evidenceFilePolicy: EvidenceFilePolicy
                                  +
                                • Defined in src/config.ts:44
                                  • +
                                  + +
                                  ghidraInstallDir: string | undefined
                                  +
                                  + +
                                  ghidraJavaHome: string | undefined
                                  hopperLauncherPath: string
                                  +
                                • Defined in src/config.ts:36
                                  • hopperLoaderArgs: readonly string[]
                                  +
                                • Defined in src/config.ts:39
                                  • hopperTargetKind: "executable" | "database"
                                  +
                                • Defined in src/config.ts:38
                                  • hopperTargetPath: string | undefined
                                  +
                                • Defined in src/config.ts:37
                                  • investigationInputRoots: readonly string[]
                                  +
                                • Defined in src/config.ts:45
                                  • logLevel: "error" | "trace" | "debug" | "info" | "warn" | "fatal" | "silent"
                                  +
                                • Defined in src/config.ts:40
                                  • permissionCeilings: readonly PermissionScope[]
                                  +
                                • Defined in src/config.ts:54
                                  • permissionProjectRoot: string | undefined
                                  +
                                • Defined in src/config.ts:56
                                  • permissionProjectStore: string | undefined
                                  +
                                • Defined in src/config.ts:57
                                  • processExecutionPolicy: ProcessExecutionPolicy
                                  +
                                • Defined in src/config.ts:41
                                  • referenceSourcePolicy: ReferenceSourcePolicy
                                  +
                                • Defined in src/config.ts:47
                                  • @@ -178,7 +190,7 @@

                                  On This Page

                                  Properties -
                                  +
                                  administratorPermissionGrantsanalysisProvideranalysisSnapshotFilePolicyartifactIntegrityContinueEnabledartifactNativeMountEnabledbrowserAllowedOriginsbrowserCdpEndpointsbrowserObservationEnabledelectronCdpEndpointselectronFileRootselectronObservationEnabledevidenceFilePolicyghidraInstallDirghidraJavaHomehopperLauncherPathhopperLoaderArgshopperTargetKindhopperTargetPathinvestigationInputRootslogLevelpermissionCeilingspermissionProjectRootpermissionProjectStoreprocessExecutionPolicyreferenceSourcePolicy
                                  interface AnalysisErrorProjection {
                                      category:
                                          | "truncated"
                                          | "timeout"
                                          | "unavailable"
                                          | "permission_required"
                                          | "cancelled"
                                          | "execution_failure"
                                          | "invalid_input"
                                          | "unsupported_provider"
                                          | "integrity_mismatch";
                                      code: | "truncated"
                                      | "permission_required"
                                      | "cancelled"
                                      | "provider_unavailable"
                                      | "invalid_request"
                                      | "unreadable_output"
                                      | "capability_unavailable"
                                      | "provider_timeout"
                                      | "artifact_integrity_mismatch"
                                      | "artifact_operation_failed"
                                      | "evidence_integrity_mismatch"
                                      | "process_capture_failed"
                                      | "cleanup_incomplete"
                                      | "revision_conflict"
                                      | "outside_approved_root"
                                      | "configuration_invalid"
                                      | "target_unavailable"
                                      | "execution_failure";
                                      details?: Readonly<Record<string, JSONType>>;
                                      message: string;
                                      remediation: Readonly<
                                          {
                                              action: string;
                                              elicitation_supported?: boolean;
                                              restart_required: boolean;
                                          },
                                      >;
                                      retryable: boolean;
                                      readonly [key: string]: JSONType;
                                  }
                                  -
                                  +

                                  Hierarchy

                                  +
                                • Defined in src/domain/errors.ts:471
                                  • @@ -46,32 +46,32 @@
                                  category:
                                      | "truncated"
                                      | "timeout"
                                      | "unavailable"
                                      | "permission_required"
                                      | "cancelled"
                                      | "execution_failure"
                                      | "invalid_input"
                                      | "unsupported_provider"
                                      | "integrity_mismatch"
                                  +
                                • Defined in src/domain/errors.ts:492
                                  • code:
                                      | "truncated"
                                      | "permission_required"
                                      | "cancelled"
                                      | "provider_unavailable"
                                      | "invalid_request"
                                      | "unreadable_output"
                                      | "capability_unavailable"
                                      | "provider_timeout"
                                      | "artifact_integrity_mismatch"
                                      | "artifact_operation_failed"
                                      | "evidence_integrity_mismatch"
                                      | "process_capture_failed"
                                      | "cleanup_incomplete"
                                      | "revision_conflict"
                                      | "outside_approved_root"
                                      | "configuration_invalid"
                                      | "target_unavailable"
                                      | "execution_failure"
                                  +
                                • Defined in src/domain/errors.ts:473
                                  • details?: Readonly<Record<string, JSONType>>
                                  +
                                • Defined in src/domain/errors.ts:509
                                  • message: string
                                  +
                                • Defined in src/domain/errors.ts:502
                                  • remediation: Readonly<
                                      {
                                          action: string;
                                          elicitation_supported?: boolean;
                                          restart_required: boolean;
                                      },
                                  >
                                  +
                                • Defined in src/domain/errors.ts:504
                                  • retryable: boolean
                                  +
                                • Defined in src/domain/errors.ts:503
                                  • diff --git a/docs/api/interfaces/domain_errors.ProviderAdapterErrorOptions.html b/docs/api/interfaces/domain_errors.ProviderAdapterErrorOptions.html new file mode 100644 index 000000000..f5167f85b --- /dev/null +++ b/docs/api/interfaces/domain_errors.ProviderAdapterErrorOptions.html @@ -0,0 +1,64 @@ +ProviderAdapterErrorOptions | rea-agents - v1.6.0
                                  +
                                  rea-agents - v1.6.0 + +
                                    +
                                    +
                                    Preparing search index...
                                    +
                                    +
                                    +
                                    + +

                                    Interface ProviderAdapterErrorOptions

                                    +
                                    +

                                    A provider adapter failed outside its more precise typed variants.

                                    +
                                    +
                                    interface ProviderAdapterErrorOptions {
                                        diagnostics?: Readonly<Record<string, JSONType>>;
                                    }
                                    +
                                    +

                                    Hierarchy

                                    +
                                      +
                                    • ErrorOptions +
                                        +
                                      • ProviderAdapterErrorOptions
                                    +
                                    +
                                    +
                                    +
                                    Index
                                     +
                                    +
                                    + +
                                    diagnostics? +
                                    +
                                    + +
                                    +
                                    + +
                                    diagnostics?: Readonly<Record<string, JSONType>>
                                    +
                                    +
                                    +
                                    +
                                    +

                                    Settings

                                     +
                                    +
                                    Member Visibility +
                                      +
                                      • +
                                    +
                                    +
                                    +

                                    On This Page

                                     +
                                    +
                                    Properties +
                                    +
                                    +
                                    +
                                    diff --git a/docs/api/interfaces/domain_permissionPolicy.PermissionGrant.html b/docs/api/interfaces/domain_permissionPolicy.PermissionGrant.html index bc36c448a..49c573e49 100644 --- a/docs/api/interfaces/domain_permissionPolicy.PermissionGrant.html +++ b/docs/api/interfaces/domain_permissionPolicy.PermissionGrant.html @@ -15,7 +15,7 @@

                                    Authority issued beneath the administrator ceiling.

                                    interface PermissionGrant {
                                        capability: PermissionCapability;
                                        environment_names: readonly string[];
                                        executables: readonly string[];
                                        expires_at: string | null;
                                        grant_id: string;
                                        lifetime: "once" | "session" | "project" | "administrator";
                                        mount: boolean;
                                        network: PermissionNetwork;
                                        operation_identity: string | null;
                                        origins?: readonly string[];
                                        roots: readonly string[];
                                    }
                                    -
                                    +

                                    Hierarchy (View Summary)

                                    • PermissionScope diff --git a/docs/api/interfaces/domain_permissionPolicy.PermissionRequest.html b/docs/api/interfaces/domain_permissionPolicy.PermissionRequest.html index 2466a71d7..696361e16 100644 --- a/docs/api/interfaces/domain_permissionPolicy.PermissionRequest.html +++ b/docs/api/interfaces/domain_permissionPolicy.PermissionRequest.html @@ -15,7 +15,7 @@

                                      A request identity associates one-shot grants with exactly one operation.

                                    interface PermissionRequest {
                                        capability: PermissionCapability;
                                        environment_names: readonly string[];
                                        executables: readonly string[];
                                        mount: boolean;
                                        network: PermissionNetwork;
                                        operation_identity: string;
                                        origins?: readonly string[];
                                        roots: readonly string[];
                                    }
                                    -
                                    +

                                    Hierarchy (View Summary)

                                    • PermissionScope diff --git a/docs/api/interfaces/domain_permissionPolicy.PermissionScope.html b/docs/api/interfaces/domain_permissionPolicy.PermissionScope.html index 162d202b9..ebc54578c 100644 --- a/docs/api/interfaces/domain_permissionPolicy.PermissionScope.html +++ b/docs/api/interfaces/domain_permissionPolicy.PermissionScope.html @@ -15,7 +15,7 @@

                                      Exact normalized scope requested by one local operation.

                                    interface PermissionScope {
                                        capability: PermissionCapability;
                                        environment_names: readonly string[];
                                        executables: readonly string[];
                                        mount: boolean;
                                        network: PermissionNetwork;
                                        origins?: readonly string[];
                                        roots: readonly string[];
                                    }
                                    -
                                    +

                                    Hierarchy (View Summary)

                                    • PermissionScope diff --git a/docs/api/interfaces/domain_webInventory.StableWebResource.html b/docs/api/interfaces/domain_webInventory.StableWebResource.html index fd820fd29..fa63d8475 100644 --- a/docs/api/interfaces/domain_webInventory.StableWebResource.html +++ b/docs/api/interfaces/domain_webInventory.StableWebResource.html @@ -12,7 +12,7 @@
                                    • StableWebResource

                                    Interface StableWebResource

                                    interface StableWebResource {
                                        content_size: number | null;
                                        mime_type: string;
                                        origin: string | null;
                                        resource_key: string;
                                        type: string;
                                        url: string;
                                    }
                                    -
                                    +

                                    Hierarchy (View Summary)

                                    • WebInventoryResourceInput diff --git a/docs/api/interfaces/domain_webInventory.WebInventoryResourceInput.html b/docs/api/interfaces/domain_webInventory.WebInventoryResourceInput.html index 0b173373b..2d185af9c 100644 --- a/docs/api/interfaces/domain_webInventory.WebInventoryResourceInput.html +++ b/docs/api/interfaces/domain_webInventory.WebInventoryResourceInput.html @@ -12,7 +12,7 @@
                                    • WebInventoryResourceInput

                                    Interface WebInventoryResourceInput

                                    interface WebInventoryResourceInput {
                                        content_size: number | null;
                                        mime_type: string;
                                        origin: string | null;
                                        type: string;
                                        url: string;
                                    }
                                    -
                                    +

                                    Hierarchy (View Summary)

                                    interface BridgeLaunch {
                                        cleanup?: () => Promise<ProcessCleanupResult>;
                                        ownsProcessLifetime: boolean;
                                        process: ChildProcess;
                                        shutdownByCleanup?: boolean;
                                    }
                                    -
                                    +

                                    Hierarchy (View Summary)

                                    +
                                  • Defined in src/process/ProviderProcess.ts:34
                                    • ownsProcessLifetime: boolean
                                    +
                                  • Defined in src/process/ProviderProcess.ts:33
                                    • process: ChildProcess
                                    +
                                  • Defined in src/process/ProviderProcess.ts:32
                                    • shutdownByCleanup?: boolean
                                    diff --git a/docs/api/interfaces/process_ProviderProcess.OwnedProviderProcessSpawnOptions.html b/docs/api/interfaces/process_ProviderProcess.OwnedProviderProcessSpawnOptions.html index 396e808f3..769ef3b48 100644 --- a/docs/api/interfaces/process_ProviderProcess.OwnedProviderProcessSpawnOptions.html +++ b/docs/api/interfaces/process_ProviderProcess.OwnedProviderProcessSpawnOptions.html @@ -14,7 +14,7 @@

                                    Spawn coordinates shared by owned, long-lived provider processes.

                                    -
                                    interface OwnedProviderProcessSpawnOptions {
                                        arguments: readonly string[];
                                        command: string;
                                        cwd?: string;
                                        env?: ProcessEnv;
                                        expectedCommand?: string;
                                        runId: string;
                                    }
                                    env?: ProcessEnv
                                    +
                                  • Defined in src/process/ProviderProcess.ts:21
                                    • -
                                    expectedCommand?: string
                                    +
                                  • Defined in src/process/ProviderProcess.ts:19
                                    • runId: string
                                    interface ProviderProcessLaunch {
                                        cleanup?: () => Promise<ProcessCleanupResult>;
                                        ownsProcessLifetime: boolean;
                                        process: ChildProcess;
                                    }
                                    -
                                    +

                                    Hierarchy (View Summary)

                                    +
                                  • Defined in src/process/ProviderProcess.ts:31
                                    • @@ -41,17 +42,17 @@
                                    cleanup?: () => Promise<ProcessCleanupResult>
                                    +
                                  • Defined in src/process/ProviderProcess.ts:34
                                    • ownsProcessLifetime: boolean
                                    +
                                  • Defined in src/process/ProviderProcess.ts:33
                                    • process: ChildProcess
                                    +
                                  • Defined in src/process/ProviderProcess.ts:32
                                    • diff --git a/docs/api/interfaces/process_ProviderProcess.ProviderProcessSnapshot.html b/docs/api/interfaces/process_ProviderProcess.ProviderProcessSnapshot.html index cecc0523a..8f975c904 100644 --- a/docs/api/interfaces/process_ProviderProcess.ProviderProcessSnapshot.html +++ b/docs/api/interfaces/process_ProviderProcess.ProviderProcessSnapshot.html @@ -16,7 +16,7 @@
                                    interface ProviderProcessSnapshot {
                                        exitCode: number | null | undefined;
                                        signal: Signals | null | undefined;
                                        stderr: {
                                            bytes: number;
                                            retainedBytes: number;
                                            text: string;
                                            truncated: boolean;
                                        };
                                        stdout: {
                                            bytes: number;
                                            retainedBytes: number;
                                            text: string;
                                            truncated: boolean;
                                        };
                                    }
                                    +
                                  • Defined in src/process/ProviderProcess.ts:38
                                    • @@ -36,22 +36,22 @@
                                    exitCode: number | null | undefined
                                    +
                                  • Defined in src/process/ProviderProcess.ts:51
                                    • signal: Signals | null | undefined
                                    +
                                  • Defined in src/process/ProviderProcess.ts:52
                                    • stderr: {
                                        bytes: number;
                                        retainedBytes: number;
                                        text: string;
                                        truncated: boolean;
                                    }
                                    +
                                  • Defined in src/process/ProviderProcess.ts:45
                                    • stdout: {
                                        bytes: number;
                                        retainedBytes: number;
                                        text: string;
                                        truncated: boolean;
                                    }
                                    +
                                  • Defined in src/process/ProviderProcess.ts:39
                                    • diff --git a/docs/api/interfaces/process_ProviderProcess.ProviderProcessStopOptions.html b/docs/api/interfaces/process_ProviderProcess.ProviderProcessStopOptions.html index 2c0a2133f..62a7fd94e 100644 --- a/docs/api/interfaces/process_ProviderProcess.ProviderProcessStopOptions.html +++ b/docs/api/interfaces/process_ProviderProcess.ProviderProcessStopOptions.html @@ -16,7 +16,7 @@
                                    interface ProviderProcessStopOptions {
                                        cleanupResult?: ProcessCleanupResult;
                                        killGraceMs?: number;
                                        terminationGraceMs?: number;
                                    }
                                    +
                                  • Defined in src/process/ProviderProcess.ts:79
                                    • @@ -35,17 +35,17 @@
                                    cleanupResult?: ProcessCleanupResult
                                    +
                                  • Defined in src/process/ProviderProcess.ts:80
                                    • killGraceMs?: number
                                    +
                                  • Defined in src/process/ProviderProcess.ts:82
                                    • terminationGraceMs?: number
                                    +
                                  • Defined in src/process/ProviderProcess.ts:81
                                    • diff --git a/docs/api/interfaces/process_ProviderProcess.ProviderProcessSupervisorOptions.html b/docs/api/interfaces/process_ProviderProcess.ProviderProcessSupervisorOptions.html index 740ced498..79859b4b6 100644 --- a/docs/api/interfaces/process_ProviderProcess.ProviderProcessSupervisorOptions.html +++ b/docs/api/interfaces/process_ProviderProcess.ProviderProcessSupervisorOptions.html @@ -16,7 +16,7 @@
                                    interface ProviderProcessSupervisorOptions {
                                        maxOutputBytesPerStream?: number;
                                        onDiagnostic?: (event: ProviderProcessDiagnostic) => void;
                                    }
                                    +
                                  • Defined in src/process/ProviderProcess.ts:73
                                    • @@ -34,12 +34,12 @@
                                    maxOutputBytesPerStream?: number
                                    +
                                  • Defined in src/process/ProviderProcess.ts:74
                                    • onDiagnostic?: (event: ProviderProcessDiagnostic) => void
                                    +
                                  • Defined in src/process/ProviderProcess.ts:75
                                    • diff --git a/docs/api/interfaces/process_ProviderProcess.SpawnedOwnedProviderProcess.html b/docs/api/interfaces/process_ProviderProcess.SpawnedOwnedProviderProcess.html index 987982e48..5b1c2f99f 100644 --- a/docs/api/interfaces/process_ProviderProcess.SpawnedOwnedProviderProcess.html +++ b/docs/api/interfaces/process_ProviderProcess.SpawnedOwnedProviderProcess.html @@ -16,7 +16,7 @@
                                    interface SpawnedOwnedProviderProcess {
                                        ownership: OwnedProcessGroup;
                                        process: ChildProcess;
                                    }
                                    +
                                  • Defined in src/process/ProviderProcess.ts:25
                                    • @@ -34,12 +34,12 @@
                                    ownership: OwnedProcessGroup
                                    +
                                  • Defined in src/process/ProviderProcess.ts:27
                                    • process: ChildProcess
                                    +
                                  • Defined in src/process/ProviderProcess.ts:26
                                    • diff --git a/docs/api/modules/application_Doctor.html b/docs/api/modules/application_Doctor.html index 13fc2be50..cb19d3f2d 100644 --- a/docs/api/modules/application_Doctor.html +++ b/docs/api/modules/application_Doctor.html @@ -11,7 +11,7 @@
                                  • application/Doctor

                                    • Module application/Doctor

                                    -
                                    DoctorCheck
                                    DoctorHost
                                    +
                                    DoctorCheck
                                    DoctorHost
                                    DoctorProviderCheck
                                    DoctorProviderInspection
                                    SystemDoctorHostOptions
                                    runDoctor
                                    systemDoctorHost
                                    @@ -29,7 +29,7 @@

                                    On This Page

                                    Interfaces -
                                    DoctorCheckDoctorHost
                                    +
                                    DoctorCheckDoctorHostDoctorProviderCheckDoctorProviderInspectionSystemDoctorHostOptions
                                    Functions
                                    runDoctorsystemDoctorHost
                                    diff --git a/docs/api/modules/application_Setup.html b/docs/api/modules/application_Setup.html index 7244deedb..8115f7e9b 100644 --- a/docs/api/modules/application_Setup.html +++ b/docs/api/modules/application_Setup.html @@ -13,9 +13,9 @@
                                    SetupAction
                                    SetupHost
                                    SetupOptions
                                    SetupResult
                                    -
                                    ClientConfigurationResult
                                    SetupConfirmation
                                    +
                                    ClientConfigurationResult
                                    SetupConfirmation
                                    SetupProviderEnvironment
                                    -
                                    configureJsonClient
                                    configureTomlClient
                                    detectClients
                                    runSetup
                                    +
                                    configureJsonClient
                                    configureTomlClient
                                    detectClients
                                    runSetup
                                    systemSetupHost
                                    canonicalSkillNeedsInstall → canonicalSkillNeedsInstall
                                    installCanonicalSkill → installCanonicalSkill
                                    SetupClient → SetupClient
                                    SetupHopperInstallResult → SetupHopperInstallResult
                                    @@ -35,9 +35,9 @@
                                    Interfaces
                                    SetupActionSetupHostSetupOptionsSetupResult
                                    Type Aliases -
                                    ClientConfigurationResultSetupConfirmation
                                    +
                                    ClientConfigurationResultSetupConfirmationSetupProviderEnvironment
                                    Functions -
                                    configureJsonClientconfigureTomlClientdetectClientsrunSetup
                                    +
                                    configureJsonClientconfigureTomlClientdetectClientsrunSetupsystemSetupHost
                                    References
                                    canonicalSkillNeedsInstallinstallCanonicalSkillSetupClientSetupHopperInstallResult
                                    diff --git a/docs/api/modules/domain_errors.html b/docs/api/modules/domain_errors.html index 6634282aa..efb916b2f 100644 --- a/docs/api/modules/domain_errors.html +++ b/docs/api/modules/domain_errors.html @@ -13,7 +13,7 @@
                                    AnalysisCancelledError
                                    AnalysisCapabilityUnavailableError
                                    AnalysisError
                                    AnalysisInputError
                                    AnalysisOutputError
                                    AnalysisProtocolError
                                    AnalysisTimeoutError
                                    ArtifactOperationError
                                    BinaryTargetError
                                    BrowserObservationError
                                    ConfigurationError
                                    EvidenceFileError
                                    EvidenceIntegrityError
                                    EvidenceLimitError
                                    HopperCancelledError
                                    HopperError
                                    HopperProcessError
                                    HopperProtocolError
                                    HopperRemoteError
                                    HopperStartError
                                    HopperTimeoutError
                                    InvestigationWorkspaceError
                                    NoBinaryOpenError
                                    PermissionRequiredError
                                    ProviderAdapterError
                                    ProviderSelectionError
                                    UnknownRegistryError
                                    -
                                    AnalysisErrorProjection
                                    ProviderSelectionErrorOptions
                                    ProviderSelectionRejection
                                    +
                                    AnalysisErrorProjection
                                    ProviderAdapterErrorOptions
                                    ProviderSelectionErrorOptions
                                    ProviderSelectionRejection
                                    AnalysisErrorTag
                                    BrowserObservationOperation
                                    HopperDiagnosticType
                                    ProviderSelectionFailureReason
                                    @@ -37,7 +37,7 @@
                                    Classes
                                    AnalysisCancelledErrorAnalysisCapabilityUnavailableErrorAnalysisErrorAnalysisInputErrorAnalysisOutputErrorAnalysisProtocolErrorAnalysisTimeoutErrorArtifactOperationErrorBinaryTargetErrorBrowserObservationErrorConfigurationErrorEvidenceFileErrorEvidenceIntegrityErrorEvidenceLimitErrorHopperCancelledErrorHopperErrorHopperProcessErrorHopperProtocolErrorHopperRemoteErrorHopperStartErrorHopperTimeoutErrorInvestigationWorkspaceErrorNoBinaryOpenErrorPermissionRequiredErrorProviderAdapterErrorProviderSelectionErrorUnknownRegistryError
                                    Interfaces -
                                    AnalysisErrorProjectionProviderSelectionErrorOptionsProviderSelectionRejection
                                    +
                                    AnalysisErrorProjectionProviderAdapterErrorOptionsProviderSelectionErrorOptionsProviderSelectionRejection
                                    Type Aliases
                                    AnalysisErrorTagBrowserObservationOperationHopperDiagnosticTypeProviderSelectionFailureReason
                                    Functions diff --git a/docs/api/modules/ghidra_GhidraAnalysisProfile.html b/docs/api/modules/ghidra_GhidraAnalysisProfile.html new file mode 100644 index 000000000..3980fda78 --- /dev/null +++ b/docs/api/modules/ghidra_GhidraAnalysisProfile.html @@ -0,0 +1,36 @@ +ghidra/GhidraAnalysisProfile | rea-agents - v1.6.0
                                    +
                                    rea-agents - v1.6.0 + +
                                      +
                                      +
                                      Preparing search index...
                                      +
                                      +
                                      +
                                      + +

                                      Module ghidra/GhidraAnalysisProfile

                                      +
                                      +
                                      resolveGhidraAnalysisProfile
                                      +
                                      +
                                      +
                                      +
                                      +

                                      Settings

                                       +
                                      +
                                      Member Visibility +
                                        +
                                        • +
                                      +
                                      +
                                      +

                                      On This Page

                                       +
                                      +
                                      Functions +
                                      +
                                      +
                                      +
                                      diff --git a/docs/api/modules/ghidra_GhidraClient.html b/docs/api/modules/ghidra_GhidraClient.html new file mode 100644 index 000000000..b8d6f3cae --- /dev/null +++ b/docs/api/modules/ghidra_GhidraClient.html @@ -0,0 +1,40 @@ +ghidra/GhidraClient | rea-agents - v1.6.0
                                      +
                                      rea-agents - v1.6.0 + +
                                        +
                                        +
                                        Preparing search index...
                                        +
                                        +
                                        +
                                        + +

                                        Module ghidra/GhidraClient

                                        +
                                        +
                                        GhidraClient
                                        +
                                        +
                                        GhidraClientOptions → GhidraClientOptions
                                        GhidraDiagnostic → GhidraDiagnostic
                                        GhidraStartResult → GhidraStartResult
                                        +
                                        +
                                        +
                                        +
                                        +

                                        Settings

                                         +
                                        +
                                        Member Visibility +
                                          +
                                          • +
                                        +
                                        +
                                        +

                                        On This Page

                                         +
                                        +
                                        Classes +
                                        +
                                        References +
                                        +
                                        +
                                        +
                                        diff --git a/docs/api/modules/ghidra_GhidraClientTypes.html b/docs/api/modules/ghidra_GhidraClientTypes.html new file mode 100644 index 000000000..23217b8c2 --- /dev/null +++ b/docs/api/modules/ghidra_GhidraClientTypes.html @@ -0,0 +1,40 @@ +ghidra/GhidraClientTypes | rea-agents - v1.6.0
                                        +
                                        rea-agents - v1.6.0 + +
                                          +
                                          +
                                          Preparing search index...
                                          +
                                          +
                                          +
                                          + +

                                          Module ghidra/GhidraClientTypes

                                          +
                                          +
                                          GhidraClientOptions
                                          +
                                          +
                                          GhidraDiagnostic
                                          GhidraStartResult
                                          +
                                          +
                                          +
                                          +
                                          +

                                          Settings

                                           +
                                          +
                                          Member Visibility +
                                            +
                                            • +
                                          +
                                          +
                                          +

                                          On This Page

                                           +
                                          +
                                          Interfaces +
                                          +
                                          Type Aliases +
                                          +
                                          +
                                          +
                                          diff --git a/docs/api/modules/ghidra_GhidraDefaults.html b/docs/api/modules/ghidra_GhidraDefaults.html new file mode 100644 index 000000000..0b004df4d --- /dev/null +++ b/docs/api/modules/ghidra_GhidraDefaults.html @@ -0,0 +1,36 @@ +ghidra/GhidraDefaults | rea-agents - v1.6.0
                                          +
                                          rea-agents - v1.6.0 + +
                                            +
                                            +
                                            Preparing search index...
                                            +
                                            +
                                            +
                                            + +

                                            Module ghidra/GhidraDefaults

                                            +
                                            +
                                            GHIDRA_ANALYSIS_TIMEOUT_SECONDS
                                            GHIDRA_BRIDGE_VERSION
                                            GHIDRA_MAX_CPU
                                            GHIDRA_MAX_HEAP
                                            GHIDRA_MAX_LINE_BYTES
                                            GHIDRA_REQUEST_TIMEOUT_MS
                                            GHIDRA_STARTUP_TIMEOUT_MS
                                            +
                                            +
                                            +
                                            +
                                            +

                                            Settings

                                             +
                                            +
                                            Member Visibility +
                                              +
                                              • +
                                            +
                                            +
                                            +

                                            On This Page

                                             +
                                            +
                                            Variables +
                                            +
                                            +
                                            +
                                            diff --git a/docs/api/modules/ghidra_GhidraDiagnostics.html b/docs/api/modules/ghidra_GhidraDiagnostics.html new file mode 100644 index 000000000..8a4f46db5 --- /dev/null +++ b/docs/api/modules/ghidra_GhidraDiagnostics.html @@ -0,0 +1,40 @@ +ghidra/GhidraDiagnostics | rea-agents - v1.6.0
                                            +
                                            rea-agents - v1.6.0 + +
                                              +
                                              +
                                              Preparing search index...
                                              +
                                              +
                                              +
                                              + +

                                              Module ghidra/GhidraDiagnostics

                                              +
                                              +
                                              GhidraDiagnosticsOptions
                                              +
                                              +
                                              createGhidraDiagnostics
                                              +
                                              +
                                              +
                                              +
                                              +

                                              Settings

                                               +
                                              +
                                              Member Visibility +
                                                +
                                                • +
                                              +
                                              +
                                              +

                                              On This Page

                                               +
                                              +
                                              Interfaces +
                                              +
                                              Functions +
                                              +
                                              +
                                              +
                                              diff --git a/docs/api/modules/ghidra_GhidraDoctor.html b/docs/api/modules/ghidra_GhidraDoctor.html new file mode 100644 index 000000000..f96701175 --- /dev/null +++ b/docs/api/modules/ghidra_GhidraDoctor.html @@ -0,0 +1,36 @@ +ghidra/GhidraDoctor | rea-agents - v1.6.0
                                              +
                                              rea-agents - v1.6.0 + +
                                                +
                                                +
                                                Preparing search index...
                                                +
                                                +
                                                +
                                                + +

                                                Module ghidra/GhidraDoctor

                                                +
                                                +
                                                inspectSystemGhidraProvider
                                                projectGhidraDoctorInspection
                                                +
                                                +
                                                +
                                                +
                                                +

                                                Settings

                                                 +
                                                +
                                                Member Visibility +
                                                  +
                                                  • +
                                                +
                                                +
                                                +

                                                On This Page

                                                 +
                                                +
                                                Functions +
                                                +
                                                +
                                                +
                                                diff --git a/docs/api/modules/ghidra_GhidraInstallation.html b/docs/api/modules/ghidra_GhidraInstallation.html new file mode 100644 index 000000000..d0398156e --- /dev/null +++ b/docs/api/modules/ghidra_GhidraInstallation.html @@ -0,0 +1,44 @@ +ghidra/GhidraInstallation | rea-agents - v1.6.0
                                                +
                                                rea-agents - v1.6.0 + +
                                                  +
                                                  +
                                                  Preparing search index...
                                                  +
                                                  +
                                                  +
                                                  + +

                                                  Module ghidra/GhidraInstallation

                                                  +
                                                  +
                                                  GhidraInstallationCheck
                                                  GhidraInstallationHost
                                                  GhidraInstallationInspection
                                                  GhidraInstallationOptions
                                                  GhidraJavaObservation
                                                  +
                                                  +
                                                  SUPPORTED_GHIDRA_JAVA_MAJOR
                                                  SUPPORTED_GHIDRA_VERSION
                                                  +
                                                  +
                                                  ghidraInstallationDiagnostics
                                                  ghidraJavaEnvironment
                                                  inspectGhidraInstallation
                                                  +
                                                  +
                                                  +
                                                  +
                                                  +

                                                  Settings

                                                   +
                                                  +
                                                  Member Visibility +
                                                    +
                                                    • +
                                                  +
                                                  +
                                                  +

                                                  On This Page

                                                   +
                                                  +
                                                  Interfaces +
                                                  +
                                                  Variables +
                                                  +
                                                  Functions +
                                                  +
                                                  +
                                                  +
                                                  diff --git a/docs/api/modules/ghidra_GhidraLauncher.html b/docs/api/modules/ghidra_GhidraLauncher.html new file mode 100644 index 000000000..5b76298c8 --- /dev/null +++ b/docs/api/modules/ghidra_GhidraLauncher.html @@ -0,0 +1,44 @@ +ghidra/GhidraLauncher | rea-agents - v1.6.0
                                                  +
                                                  rea-agents - v1.6.0 + +
                                                    +
                                                    +
                                                    Preparing search index...
                                                    +
                                                    +
                                                    +
                                                    + +

                                                    Module ghidra/GhidraLauncher

                                                    +
                                                    +
                                                    GhidraHeadlessLauncher
                                                    GhidraLaunchError
                                                    +
                                                    +
                                                    GhidraHeadlessArgumentOptions
                                                    GhidraHeadlessLauncherOptions
                                                    GhidraLaunch
                                                    GhidraLauncher
                                                    GhidraLaunchSession
                                                    +
                                                    +
                                                    ghidraHeadlessArguments
                                                    +
                                                    +
                                                    +
                                                    +
                                                    +

                                                    Settings

                                                     +
                                                    +
                                                    Member Visibility +
                                                      +
                                                      • +
                                                    +
                                                    +
                                                    +

                                                    On This Page

                                                     +
                                                    +
                                                    Classes +
                                                    +
                                                    Interfaces +
                                                    +
                                                    Functions +
                                                    +
                                                    +
                                                    +
                                                    diff --git a/docs/api/modules/ghidra_GhidraProvider.html b/docs/api/modules/ghidra_GhidraProvider.html new file mode 100644 index 000000000..9f8b96e9c --- /dev/null +++ b/docs/api/modules/ghidra_GhidraProvider.html @@ -0,0 +1,40 @@ +ghidra/GhidraProvider | rea-agents - v1.6.0
                                                    +
                                                    rea-agents - v1.6.0 + +
                                                      +
                                                      +
                                                      Preparing search index...
                                                      +
                                                      +
                                                      +
                                                      + +

                                                      Module ghidra/GhidraProvider

                                                      +
                                                      +
                                                      GhidraProvider
                                                      +
                                                      +
                                                      GHIDRA_PROVIDER_IDENTITY
                                                      GHIDRA_PROVIDER_TOOL_CONTRACTS
                                                      +
                                                      +
                                                      +
                                                      +
                                                      +

                                                      Settings

                                                       +
                                                      +
                                                      Member Visibility +
                                                        +
                                                        • +
                                                      +
                                                      +
                                                      +

                                                      On This Page

                                                       +
                                                      +
                                                      Classes +
                                                      +
                                                      Variables +
                                                      +
                                                      +
                                                      +
                                                      diff --git a/docs/api/modules/ghidra_GhidraResponseBuffer.html b/docs/api/modules/ghidra_GhidraResponseBuffer.html new file mode 100644 index 000000000..909d47283 --- /dev/null +++ b/docs/api/modules/ghidra_GhidraResponseBuffer.html @@ -0,0 +1,40 @@ +ghidra/GhidraResponseBuffer | rea-agents - v1.6.0
                                                      +
                                                      rea-agents - v1.6.0 + +
                                                        +
                                                        +
                                                        Preparing search index...
                                                        +
                                                        +
                                                        +
                                                        + +

                                                        Module ghidra/GhidraResponseBuffer

                                                        +
                                                        +
                                                        GhidraResponseBuffer
                                                        +
                                                        +
                                                        GhidraResponseBufferOptions
                                                        +
                                                        +
                                                        +
                                                        +
                                                        +

                                                        Settings

                                                         +
                                                        +
                                                        Member Visibility +
                                                          +
                                                          • +
                                                        +
                                                        +
                                                        +

                                                        On This Page

                                                         +
                                                        +
                                                        Classes +
                                                        +
                                                        Interfaces +
                                                        +
                                                        +
                                                        +
                                                        diff --git a/docs/api/modules/ghidra_GhidraResponseRouter.html b/docs/api/modules/ghidra_GhidraResponseRouter.html new file mode 100644 index 000000000..54f8509f1 --- /dev/null +++ b/docs/api/modules/ghidra_GhidraResponseRouter.html @@ -0,0 +1,40 @@ +ghidra/GhidraResponseRouter | rea-agents - v1.6.0
                                                        +
                                                        rea-agents - v1.6.0 + +
                                                          +
                                                          +
                                                          Preparing search index...
                                                          +
                                                          +
                                                          +
                                                          + +

                                                          Module ghidra/GhidraResponseRouter

                                                          +
                                                          +
                                                          GhidraResponseRouter
                                                          +
                                                          +
                                                          GhidraResponseRouterOptions
                                                          +
                                                          +
                                                          +
                                                          +
                                                          +

                                                          Settings

                                                           +
                                                          +
                                                          Member Visibility +
                                                            +
                                                            • +
                                                          +
                                                          +
                                                          +

                                                          On This Page

                                                           +
                                                          +
                                                          Classes +
                                                          +
                                                          Interfaces +
                                                          +
                                                          +
                                                          +
                                                          diff --git a/docs/api/modules/ghidra_GhidraSessionError.html b/docs/api/modules/ghidra_GhidraSessionError.html new file mode 100644 index 000000000..af094ee95 --- /dev/null +++ b/docs/api/modules/ghidra_GhidraSessionError.html @@ -0,0 +1,44 @@ +ghidra/GhidraSessionError | rea-agents - v1.6.0
                                                          +
                                                          rea-agents - v1.6.0 + +
                                                            +
                                                            +
                                                            Preparing search index...
                                                            +
                                                            +
                                                            +
                                                            + +

                                                            Module ghidra/GhidraSessionError

                                                            +
                                                            +
                                                            GhidraSessionError
                                                            +
                                                            +
                                                            GhidraSessionErrorOptions
                                                            +
                                                            +
                                                            GhidraSessionFailureKind
                                                            +
                                                            +
                                                            +
                                                            +
                                                            +

                                                            Settings

                                                             +
                                                            +
                                                            Member Visibility +
                                                              +
                                                              • +
                                                            +
                                                            +
                                                            +

                                                            On This Page

                                                             +
                                                            +
                                                            Classes +
                                                            +
                                                            Interfaces +
                                                            +
                                                            Type Aliases +
                                                            +
                                                            +
                                                            +
                                                            diff --git a/docs/api/modules/ghidra_GhidraSessionValues.html b/docs/api/modules/ghidra_GhidraSessionValues.html new file mode 100644 index 000000000..4db09ae18 --- /dev/null +++ b/docs/api/modules/ghidra_GhidraSessionValues.html @@ -0,0 +1,40 @@ +ghidra/GhidraSessionValues | rea-agents - v1.6.0
                                                            +
                                                            rea-agents - v1.6.0 + +
                                                              +
                                                              +
                                                              Preparing search index...
                                                              +
                                                              +
                                                              +
                                                              + +

                                                              Module ghidra/GhidraSessionValues

                                                              +
                                                              +
                                                              GhidraSessionInfo
                                                              +
                                                              +
                                                              isGhidraShutdownAcknowledgement
                                                              parseGhidraSessionInfo
                                                              +
                                                              +
                                                              +
                                                              +
                                                              +

                                                              Settings

                                                               +
                                                              +
                                                              Member Visibility +
                                                                +
                                                                • +
                                                              +
                                                              +
                                                              +

                                                              On This Page

                                                               +
                                                              +
                                                              Type Aliases +
                                                              +
                                                              Functions +
                                                              +
                                                              +
                                                              +
                                                              diff --git a/docs/api/modules/ghidra_GhidraSocketConnection.html b/docs/api/modules/ghidra_GhidraSocketConnection.html new file mode 100644 index 000000000..95702381e --- /dev/null +++ b/docs/api/modules/ghidra_GhidraSocketConnection.html @@ -0,0 +1,40 @@ +ghidra/GhidraSocketConnection | rea-agents - v1.6.0
                                                              +
                                                              rea-agents - v1.6.0 + +
                                                                +
                                                                +
                                                                Preparing search index...
                                                                +
                                                                +
                                                                +
                                                                + +

                                                                Module ghidra/GhidraSocketConnection

                                                                +
                                                                +
                                                                GhidraSocketHandlers
                                                                +
                                                                +
                                                                attachGhidraSocket
                                                                connectGhidraSocketOnce
                                                                +
                                                                +
                                                                +
                                                                +
                                                                +

                                                                Settings

                                                                 +
                                                                +
                                                                Member Visibility +
                                                                  +
                                                                  • +
                                                                +
                                                                +
                                                                +

                                                                On This Page

                                                                 +
                                                                +
                                                                Interfaces +
                                                                +
                                                                Functions +
                                                                +
                                                                +
                                                                +
                                                                diff --git a/docs/api/modules/ghidra_protocol.html b/docs/api/modules/ghidra_protocol.html new file mode 100644 index 000000000..26ec6a9ff --- /dev/null +++ b/docs/api/modules/ghidra_protocol.html @@ -0,0 +1,40 @@ +ghidra/protocol | rea-agents - v1.6.0
                                                                +
                                                                rea-agents - v1.6.0 + +
                                                                  +
                                                                  +
                                                                  Preparing search index...
                                                                  +
                                                                  +
                                                                  +
                                                                  + +

                                                                  Module ghidra/protocol

                                                                  +
                                                                  +
                                                                  GhidraBridgeResponse
                                                                  +
                                                                  +
                                                                  ghidraResponseResult
                                                                  parseGhidraResponseLine
                                                                  +
                                                                  +
                                                                  +
                                                                  +
                                                                  +

                                                                  Settings

                                                                   +
                                                                  +
                                                                  Member Visibility +
                                                                    +
                                                                    • +
                                                                  +
                                                                  +
                                                                  +

                                                                  On This Page

                                                                   +
                                                                  +
                                                                  Type Aliases +
                                                                  +
                                                                  Functions +
                                                                  +
                                                                  +
                                                                  +
                                                                  diff --git a/docs/api/types/application_Setup.ClientConfigurationResult.html b/docs/api/types/application_Setup.ClientConfigurationResult.html index b4c10eaad..6d452d73e 100644 --- a/docs/api/types/application_Setup.ClientConfigurationResult.html +++ b/docs/api/types/application_Setup.ClientConfigurationResult.html @@ -15,7 +15,7 @@

                                                                  Result of one backup/write/readback transaction.

                                                                  +
                                                                • Defined in src/application/Setup.ts:60
                                                                  • diff --git a/docs/api/types/application_Setup.SetupConfirmation.html b/docs/api/types/application_Setup.SetupConfirmation.html index 5f6233a22..87ea5f7e4 100644 --- a/docs/api/types/application_Setup.SetupConfirmation.html +++ b/docs/api/types/application_Setup.SetupConfirmation.html @@ -27,7 +27,7 @@
                                                                • actions: readonly SetupAction[]

                                                                  • Returns Promise<boolean>

                                                                  +
                                                                • Defined in src/application/Setup.ts:128
                                                                  • diff --git a/docs/api/types/application_Setup.SetupProviderEnvironment.html b/docs/api/types/application_Setup.SetupProviderEnvironment.html new file mode 100644 index 000000000..dd9510350 --- /dev/null +++ b/docs/api/types/application_Setup.SetupProviderEnvironment.html @@ -0,0 +1,35 @@ +SetupProviderEnvironment | rea-agents - v1.6.0
                                                                  +
                                                                  rea-agents - v1.6.0 + +
                                                                    +
                                                                    +
                                                                    Preparing search index...
                                                                    +
                                                                    +
                                                                    +
                                                                    + +

                                                                    Type Alias SetupProviderEnvironment

                                                                    +
                                                                    SetupProviderEnvironment: Readonly<Record<string, string>>
                                                                    +

                                                                    Exact non-secret provider variables propagated into managed registrations.

                                                                    +
                                                                    +
                                                                    +
                                                                    +
                                                                    +
                                                                    +

                                                                    Settings

                                                                     +
                                                                    +
                                                                    Member Visibility +
                                                                      +
                                                                      • +
                                                                    +
                                                                    +
                                                                    +
                                                                    +
                                                                    diff --git a/docs/api/types/browser_CdpEndpoint.CdpWebSocketEndpoint.html b/docs/api/types/browser_CdpEndpoint.CdpWebSocketEndpoint.html index 3935972b5..2a6577da2 100644 --- a/docs/api/types/browser_CdpEndpoint.CdpWebSocketEndpoint.html +++ b/docs/api/types/browser_CdpEndpoint.CdpWebSocketEndpoint.html @@ -15,7 +15,7 @@

                                                                    Validated CDP discovery socket and its command-routing scope.

                                                                    +
                                                                  • Defined in src/browser/CdpEndpoint.ts:45
                                                                    • diff --git a/docs/api/types/domain_errors.BrowserObservationOperation.html b/docs/api/types/domain_errors.BrowserObservationOperation.html index 8a45d041b..fba24852d 100644 --- a/docs/api/types/domain_errors.BrowserObservationOperation.html +++ b/docs/api/types/domain_errors.BrowserObservationOperation.html @@ -15,7 +15,7 @@

                                                                    Public browser and Electron operations that can fail at a CDP boundary.

                                                                    +
                                                                  • Defined in src/domain/errors.ts:239
                                                                    • diff --git a/docs/api/types/domain_errors.HopperDiagnosticType.html b/docs/api/types/domain_errors.HopperDiagnosticType.html index 89f773a90..98f9ae611 100644 --- a/docs/api/types/domain_errors.HopperDiagnosticType.html +++ b/docs/api/types/domain_errors.HopperDiagnosticType.html @@ -13,7 +13,7 @@

                                                                    Type Alias HopperDiagnosticType

                                                                    HopperDiagnosticType:
                                                                        | "remote"
                                                                        | "authorization"
                                                                        | "invalid_request"
                                                                        | "bridge_exception"
                                                                    +
                                                                  • Defined in src/domain/errors.ts:402
                                                                    • diff --git a/docs/api/types/ghidra_GhidraClientTypes.GhidraDiagnostic.html b/docs/api/types/ghidra_GhidraClientTypes.GhidraDiagnostic.html new file mode 100644 index 000000000..7fc13a9e7 --- /dev/null +++ b/docs/api/types/ghidra_GhidraClientTypes.GhidraDiagnostic.html @@ -0,0 +1,35 @@ +GhidraDiagnostic | rea-agents - v1.6.0
                                                                    +
                                                                    rea-agents - v1.6.0 + +
                                                                      +
                                                                      +
                                                                      Preparing search index...
                                                                      +
                                                                      +
                                                                      +
                                                                      + +

                                                                      Type Alias GhidraDiagnostic

                                                                      +
                                                                      GhidraDiagnostic:
                                                                          | {
                                                                              bytes: number;
                                                                              stream: "stdout"
                                                                              | "stderr";
                                                                              totalBytes: number;
                                                                              truncated: boolean;
                                                                              type: "launcher-output";
                                                                          }
                                                                          | {
                                                                              code: number
                                                                              | null;
                                                                              signal: NodeJS.Signals | null;
                                                                              type: "launcher-exit";
                                                                          }
                                                                          | { reason: string; type: "cleanup-incomplete" }
                                                                      +

                                                                      Safe lifecycle telemetry for one isolated Ghidra headless process.

                                                                      +
                                                                      +
                                                                      +
                                                                      +
                                                                      +
                                                                      +

                                                                      Settings

                                                                       +
                                                                      +
                                                                      Member Visibility +
                                                                        +
                                                                        • +
                                                                      +
                                                                      +
                                                                      +
                                                                      +
                                                                      diff --git a/docs/api/types/ghidra_GhidraClientTypes.GhidraStartResult.html b/docs/api/types/ghidra_GhidraClientTypes.GhidraStartResult.html new file mode 100644 index 000000000..4fc1bdf02 --- /dev/null +++ b/docs/api/types/ghidra_GhidraClientTypes.GhidraStartResult.html @@ -0,0 +1,35 @@ +GhidraStartResult | rea-agents - v1.6.0
                                                                      +
                                                                      rea-agents - v1.6.0 + +
                                                                        +
                                                                        +
                                                                        Preparing search index...
                                                                        +
                                                                        +
                                                                        +
                                                                        + +

                                                                        Type Alias GhidraStartResult

                                                                        +
                                                                        GhidraStartResult: Result<GhidraSessionInfo, GhidraSessionError>
                                                                        +

                                                                        Result of opening and authenticating one headless Ghidra session.

                                                                        +
                                                                        +
                                                                        +
                                                                        +
                                                                        +
                                                                        +

                                                                        Settings

                                                                         +
                                                                        +
                                                                        Member Visibility +
                                                                          +
                                                                          • +
                                                                        +
                                                                        +
                                                                        +
                                                                        +
                                                                        diff --git a/docs/api/types/ghidra_GhidraSessionError.GhidraSessionFailureKind.html b/docs/api/types/ghidra_GhidraSessionError.GhidraSessionFailureKind.html new file mode 100644 index 000000000..d4ed24ad0 --- /dev/null +++ b/docs/api/types/ghidra_GhidraSessionError.GhidraSessionFailureKind.html @@ -0,0 +1,35 @@ +GhidraSessionFailureKind | rea-agents - v1.6.0
                                                                        +
                                                                        rea-agents - v1.6.0 + +
                                                                          +
                                                                          +
                                                                          Preparing search index...
                                                                          +
                                                                          +
                                                                          +
                                                                          + +

                                                                          Type Alias GhidraSessionFailureKind

                                                                          +
                                                                          GhidraSessionFailureKind:
                                                                              | "cancelled"
                                                                              | "timeout"
                                                                              | "start"
                                                                              | "process"
                                                                              | "protocol"
                                                                              | "remote"
                                                                              | "analysis_timeout"
                                                                          +

                                                                          Stable failure phase for one private Ghidra headless session.

                                                                          +
                                                                          +
                                                                          +
                                                                          +
                                                                          +
                                                                          +

                                                                          Settings

                                                                           +
                                                                          +
                                                                          Member Visibility +
                                                                            +
                                                                            • +
                                                                          +
                                                                          +
                                                                          +
                                                                          +
                                                                          diff --git a/docs/api/types/ghidra_GhidraSessionValues.GhidraSessionInfo.html b/docs/api/types/ghidra_GhidraSessionValues.GhidraSessionInfo.html new file mode 100644 index 000000000..94a2c1d4f --- /dev/null +++ b/docs/api/types/ghidra_GhidraSessionValues.GhidraSessionInfo.html @@ -0,0 +1,35 @@ +GhidraSessionInfo | rea-agents - v1.6.0
                                                                          +
                                                                          rea-agents - v1.6.0 + +
                                                                            +
                                                                            +
                                                                            Preparing search index...
                                                                            +
                                                                            +
                                                                            +
                                                                            + +

                                                                            Type Alias GhidraSessionInfo

                                                                            +
                                                                            GhidraSessionInfo: z.infer<typeof sessionInfoSchema>
                                                                            +

                                                                            Authenticated metadata produced after Ghidra finishes auto-analysis.

                                                                            +
                                                                            +
                                                                            +
                                                                            +
                                                                            +
                                                                            +

                                                                            Settings

                                                                             +
                                                                            +
                                                                            Member Visibility +
                                                                              +
                                                                              • +
                                                                            +
                                                                            +
                                                                            +
                                                                            +
                                                                            diff --git a/docs/api/types/ghidra_protocol.GhidraBridgeResponse.html b/docs/api/types/ghidra_protocol.GhidraBridgeResponse.html new file mode 100644 index 000000000..2b65ad343 --- /dev/null +++ b/docs/api/types/ghidra_protocol.GhidraBridgeResponse.html @@ -0,0 +1,35 @@ +GhidraBridgeResponse | rea-agents - v1.6.0
                                                                            +
                                                                            rea-agents - v1.6.0 + +
                                                                              +
                                                                              +
                                                                              Preparing search index...
                                                                              +
                                                                              +
                                                                              +
                                                                              + +

                                                                              Type Alias GhidraBridgeResponse

                                                                              +
                                                                              GhidraBridgeResponse: z.infer<typeof responseSchema>
                                                                              +

                                                                              Validated response emitted by REA's packaged Ghidra script.

                                                                              +
                                                                              +
                                                                              +
                                                                              +
                                                                              +
                                                                              +

                                                                              Settings

                                                                               +
                                                                              +
                                                                              Member Visibility +
                                                                                +
                                                                                • +
                                                                              +
                                                                              +
                                                                              +
                                                                              +
                                                                              diff --git a/docs/api/types/process_ProviderProcess.ProviderProcessDiagnostic.html b/docs/api/types/process_ProviderProcess.ProviderProcessDiagnostic.html index 033023bc8..c7c39e7c9 100644 --- a/docs/api/types/process_ProviderProcess.ProviderProcessDiagnostic.html +++ b/docs/api/types/process_ProviderProcess.ProviderProcessDiagnostic.html @@ -15,7 +15,7 @@

                                                                              Resource-safe events emitted without imposing provider protocol semantics.

                                                                              +
                                                                            • Defined in src/process/ProviderProcess.ts:56
                                                                              • diff --git a/docs/api/types/process_ProviderProcess.ProviderProcessStopResult.html b/docs/api/types/process_ProviderProcess.ProviderProcessStopResult.html index 9cc8608e4..84e68a923 100644 --- a/docs/api/types/process_ProviderProcess.ProviderProcessStopResult.html +++ b/docs/api/types/process_ProviderProcess.ProviderProcessStopResult.html @@ -15,7 +15,7 @@

                                                                              Exact disposition of one owned process stop attempt.

                                                                              +
                                                                            • Defined in src/process/ProviderProcess.ts:86
                                                                              • diff --git a/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_ANALYSIS_TIMEOUT_SECONDS.html b/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_ANALYSIS_TIMEOUT_SECONDS.html new file mode 100644 index 000000000..4ba722824 --- /dev/null +++ b/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_ANALYSIS_TIMEOUT_SECONDS.html @@ -0,0 +1,35 @@ +GHIDRA_ANALYSIS_TIMEOUT_SECONDS | rea-agents - v1.6.0
                                                                              +
                                                                              rea-agents - v1.6.0 + +
                                                                                +
                                                                                +
                                                                                Preparing search index...
                                                                                +
                                                                                +
                                                                                +
                                                                                + +

                                                                                Variable GHIDRA_ANALYSIS_TIMEOUT_SECONDSConst

                                                                                +
                                                                                GHIDRA_ANALYSIS_TIMEOUT_SECONDS: 300
                                                                                +

                                                                                Maximum wall-clock analysis time passed to Ghidra for one imported file.

                                                                                +
                                                                                +
                                                                                +
                                                                                +
                                                                                +
                                                                                +

                                                                                Settings

                                                                                 +
                                                                                +
                                                                                Member Visibility +
                                                                                  +
                                                                                  • +
                                                                                +
                                                                                +
                                                                                +
                                                                                +
                                                                                diff --git a/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_BRIDGE_VERSION.html b/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_BRIDGE_VERSION.html new file mode 100644 index 000000000..ea1213983 --- /dev/null +++ b/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_BRIDGE_VERSION.html @@ -0,0 +1,35 @@ +GHIDRA_BRIDGE_VERSION | rea-agents - v1.6.0
                                                                                +
                                                                                rea-agents - v1.6.0 + +
                                                                                  +
                                                                                  +
                                                                                  Preparing search index...
                                                                                  +
                                                                                  +
                                                                                  +
                                                                                  + +

                                                                                  Variable GHIDRA_BRIDGE_VERSIONConst

                                                                                  +
                                                                                  GHIDRA_BRIDGE_VERSION: 1
                                                                                  +

                                                                                  Version of REA's Java bridge handshake and request protocol.

                                                                                  +
                                                                                  +
                                                                                  +
                                                                                  +
                                                                                  +
                                                                                  +

                                                                                  Settings

                                                                                   +
                                                                                  +
                                                                                  Member Visibility +
                                                                                    +
                                                                                    • +
                                                                                  +
                                                                                  +
                                                                                  +
                                                                                  +
                                                                                  diff --git a/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_MAX_CPU.html b/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_MAX_CPU.html new file mode 100644 index 000000000..58fc5e556 --- /dev/null +++ b/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_MAX_CPU.html @@ -0,0 +1,35 @@ +GHIDRA_MAX_CPU | rea-agents - v1.6.0
                                                                                  +
                                                                                  rea-agents - v1.6.0 + +
                                                                                    +
                                                                                    +
                                                                                    Preparing search index...
                                                                                    +
                                                                                    +
                                                                                    +
                                                                                    + +

                                                                                    Variable GHIDRA_MAX_CPUConst

                                                                                    +
                                                                                    GHIDRA_MAX_CPU: 2
                                                                                    +

                                                                                    Maximum CPU cores made available to one headless analysis.

                                                                                    +
                                                                                    +
                                                                                    +
                                                                                    +
                                                                                    +
                                                                                    +

                                                                                    Settings

                                                                                     +
                                                                                    +
                                                                                    Member Visibility +
                                                                                      +
                                                                                      • +
                                                                                    +
                                                                                    +
                                                                                    +
                                                                                    +
                                                                                    diff --git a/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_MAX_HEAP.html b/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_MAX_HEAP.html new file mode 100644 index 000000000..2a409f18c --- /dev/null +++ b/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_MAX_HEAP.html @@ -0,0 +1,35 @@ +GHIDRA_MAX_HEAP | rea-agents - v1.6.0
                                                                                    +
                                                                                    rea-agents - v1.6.0 + +
                                                                                      +
                                                                                      +
                                                                                      Preparing search index...
                                                                                      +
                                                                                      +
                                                                                      +
                                                                                      + +

                                                                                      Variable GHIDRA_MAX_HEAPConst

                                                                                      +
                                                                                      GHIDRA_MAX_HEAP: "2G"
                                                                                      +

                                                                                      Explicit JVM heap ceiling for one headless provider process.

                                                                                      +
                                                                                      +
                                                                                      +
                                                                                      +
                                                                                      +
                                                                                      +

                                                                                      Settings

                                                                                       +
                                                                                      +
                                                                                      Member Visibility +
                                                                                        +
                                                                                        • +
                                                                                      +
                                                                                      +
                                                                                      +
                                                                                      +
                                                                                      diff --git a/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_MAX_LINE_BYTES.html b/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_MAX_LINE_BYTES.html new file mode 100644 index 000000000..a4c53a348 --- /dev/null +++ b/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_MAX_LINE_BYTES.html @@ -0,0 +1,35 @@ +GHIDRA_MAX_LINE_BYTES | rea-agents - v1.6.0
                                                                                      +
                                                                                      rea-agents - v1.6.0 + +
                                                                                        +
                                                                                        +
                                                                                        Preparing search index...
                                                                                        +
                                                                                        +
                                                                                        +
                                                                                        + +

                                                                                        Variable GHIDRA_MAX_LINE_BYTESConst

                                                                                        +
                                                                                        GHIDRA_MAX_LINE_BYTES: number = ...
                                                                                        +

                                                                                        Maximum encoded response line accepted from the Java bridge.

                                                                                        +
                                                                                        +
                                                                                        +
                                                                                        +
                                                                                        +
                                                                                        +

                                                                                        Settings

                                                                                         +
                                                                                        +
                                                                                        Member Visibility +
                                                                                          +
                                                                                          • +
                                                                                        +
                                                                                        +
                                                                                        +
                                                                                        +
                                                                                        diff --git a/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_REQUEST_TIMEOUT_MS.html b/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_REQUEST_TIMEOUT_MS.html new file mode 100644 index 000000000..fbdcd514d --- /dev/null +++ b/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_REQUEST_TIMEOUT_MS.html @@ -0,0 +1,35 @@ +GHIDRA_REQUEST_TIMEOUT_MS | rea-agents - v1.6.0
                                                                                        +
                                                                                        rea-agents - v1.6.0 + +
                                                                                          +
                                                                                          +
                                                                                          Preparing search index...
                                                                                          +
                                                                                          +
                                                                                          +
                                                                                          + +

                                                                                          Variable GHIDRA_REQUEST_TIMEOUT_MSConst

                                                                                          +
                                                                                          GHIDRA_REQUEST_TIMEOUT_MS: 10000 = 10_000
                                                                                          +

                                                                                          Default bounded wait for one established bridge request.

                                                                                          +
                                                                                          +
                                                                                          +
                                                                                          +
                                                                                          +
                                                                                          +

                                                                                          Settings

                                                                                           +
                                                                                          +
                                                                                          Member Visibility +
                                                                                            +
                                                                                            • +
                                                                                          +
                                                                                          +
                                                                                          +
                                                                                          +
                                                                                          diff --git a/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_STARTUP_TIMEOUT_MS.html b/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_STARTUP_TIMEOUT_MS.html new file mode 100644 index 000000000..50c793d98 --- /dev/null +++ b/docs/api/variables/ghidra_GhidraDefaults.GHIDRA_STARTUP_TIMEOUT_MS.html @@ -0,0 +1,35 @@ +GHIDRA_STARTUP_TIMEOUT_MS | rea-agents - v1.6.0
                                                                                          +
                                                                                          rea-agents - v1.6.0 + +
                                                                                            +
                                                                                            +
                                                                                            Preparing search index...
                                                                                            +
                                                                                            +
                                                                                            +
                                                                                            + +

                                                                                            Variable GHIDRA_STARTUP_TIMEOUT_MSConst

                                                                                            +
                                                                                            GHIDRA_STARTUP_TIMEOUT_MS: 330000 = 330_000
                                                                                            +

                                                                                            Absolute import, analysis, bridge, and health startup deadline.

                                                                                            +
                                                                                            +
                                                                                            +
                                                                                            +
                                                                                            +
                                                                                            +

                                                                                            Settings

                                                                                             +
                                                                                            +
                                                                                            Member Visibility +
                                                                                              +
                                                                                              • +
                                                                                            +
                                                                                            +
                                                                                            +
                                                                                            +
                                                                                            diff --git a/docs/api/variables/ghidra_GhidraInstallation.SUPPORTED_GHIDRA_JAVA_MAJOR.html b/docs/api/variables/ghidra_GhidraInstallation.SUPPORTED_GHIDRA_JAVA_MAJOR.html new file mode 100644 index 000000000..bb90ad2a2 --- /dev/null +++ b/docs/api/variables/ghidra_GhidraInstallation.SUPPORTED_GHIDRA_JAVA_MAJOR.html @@ -0,0 +1,35 @@ +SUPPORTED_GHIDRA_JAVA_MAJOR | rea-agents - v1.6.0
                                                                                            +
                                                                                            rea-agents - v1.6.0 + +
                                                                                              +
                                                                                              +
                                                                                              Preparing search index...
                                                                                              +
                                                                                              +
                                                                                              +
                                                                                              + +

                                                                                              Variable SUPPORTED_GHIDRA_JAVA_MAJORConst

                                                                                              +
                                                                                              SUPPORTED_GHIDRA_JAVA_MAJOR: 21
                                                                                              +

                                                                                              Exact JDK major documented by the supported Ghidra release.

                                                                                              +
                                                                                              +
                                                                                              +
                                                                                              +
                                                                                              +
                                                                                              +

                                                                                              Settings

                                                                                               +
                                                                                              +
                                                                                              Member Visibility +
                                                                                                +
                                                                                                • +
                                                                                              +
                                                                                              +
                                                                                              +
                                                                                              +
                                                                                              diff --git a/docs/api/variables/ghidra_GhidraInstallation.SUPPORTED_GHIDRA_VERSION.html b/docs/api/variables/ghidra_GhidraInstallation.SUPPORTED_GHIDRA_VERSION.html new file mode 100644 index 000000000..b6de4c3a4 --- /dev/null +++ b/docs/api/variables/ghidra_GhidraInstallation.SUPPORTED_GHIDRA_VERSION.html @@ -0,0 +1,35 @@ +SUPPORTED_GHIDRA_VERSION | rea-agents - v1.6.0
                                                                                              +
                                                                                              rea-agents - v1.6.0 + +
                                                                                                +
                                                                                                +
                                                                                                Preparing search index...
                                                                                                +
                                                                                                +
                                                                                                +
                                                                                                + +

                                                                                                Variable SUPPORTED_GHIDRA_VERSIONConst

                                                                                                +
                                                                                                SUPPORTED_GHIDRA_VERSION: "12.1.2"
                                                                                                +

                                                                                                Exact Ghidra build whose Java bridge contract this REA release supports.

                                                                                                +
                                                                                                +
                                                                                                +
                                                                                                +
                                                                                                +
                                                                                                +

                                                                                                Settings

                                                                                                 +
                                                                                                +
                                                                                                Member Visibility +
                                                                                                  +
                                                                                                  • +
                                                                                                +
                                                                                                +
                                                                                                +
                                                                                                +
                                                                                                diff --git a/docs/api/variables/ghidra_GhidraProvider.GHIDRA_PROVIDER_IDENTITY.html b/docs/api/variables/ghidra_GhidraProvider.GHIDRA_PROVIDER_IDENTITY.html new file mode 100644 index 000000000..7946a9c0a --- /dev/null +++ b/docs/api/variables/ghidra_GhidraProvider.GHIDRA_PROVIDER_IDENTITY.html @@ -0,0 +1,35 @@ +GHIDRA_PROVIDER_IDENTITY | rea-agents - v1.6.0
                                                                                                +
                                                                                                rea-agents - v1.6.0 + +
                                                                                                  +
                                                                                                  +
                                                                                                  Preparing search index...
                                                                                                  +
                                                                                                  +
                                                                                                  +
                                                                                                  + +

                                                                                                  Variable GHIDRA_PROVIDER_IDENTITYConst

                                                                                                  +
                                                                                                  GHIDRA_PROVIDER_IDENTITY: ProviderIdentity = ...
                                                                                                  +

                                                                                                  Public identity committed by every Ghidra-backed observation.

                                                                                                  +
                                                                                                  +
                                                                                                  +
                                                                                                  +
                                                                                                  +
                                                                                                  +

                                                                                                  Settings

                                                                                                   +
                                                                                                  +
                                                                                                  Member Visibility +
                                                                                                    +
                                                                                                    • +
                                                                                                  +
                                                                                                  +
                                                                                                  +
                                                                                                  +
                                                                                                  diff --git a/docs/api/variables/ghidra_GhidraProvider.GHIDRA_PROVIDER_TOOL_CONTRACTS.html b/docs/api/variables/ghidra_GhidraProvider.GHIDRA_PROVIDER_TOOL_CONTRACTS.html new file mode 100644 index 000000000..ee1d17360 --- /dev/null +++ b/docs/api/variables/ghidra_GhidraProvider.GHIDRA_PROVIDER_TOOL_CONTRACTS.html @@ -0,0 +1,35 @@ +GHIDRA_PROVIDER_TOOL_CONTRACTS | rea-agents - v1.6.0
                                                                                                  +
                                                                                                  rea-agents - v1.6.0 + +
                                                                                                    +
                                                                                                    +
                                                                                                    Preparing search index...
                                                                                                    +
                                                                                                    +
                                                                                                    +
                                                                                                    + +

                                                                                                    Variable GHIDRA_PROVIDER_TOOL_CONTRACTSConst

                                                                                                    +
                                                                                                    GHIDRA_PROVIDER_TOOL_CONTRACTS: readonly CapabilityDescriptor[] = ...
                                                                                                    +

                                                                                                    PR07 intentionally exposes session health but no binary operation contract.

                                                                                                    +
                                                                                                    +
                                                                                                    +
                                                                                                    +
                                                                                                    +
                                                                                                    +

                                                                                                    Settings

                                                                                                     +
                                                                                                    +
                                                                                                    Member Visibility +
                                                                                                      +
                                                                                                      • +
                                                                                                    +
                                                                                                    +
                                                                                                    +
                                                                                                    +
                                                                                                    diff --git a/docs/architecture.mermaid b/docs/architecture.mermaid index 6e96f8325..935ead84e 100644 --- a/docs/architecture.mermaid +++ b/docs/architecture.mermaid @@ -7,7 +7,8 @@ graph TD subgraph "Adapters" SERVER["src/server/
                                                                                                    MCP request translation
                                                                                                    createServer, tool registration, toolResult"] - BRIDGE["bridge/hopper_bridge.py
                                                                                                    Runs inside Hopper
                                                                                                    adapts operations to Hopper Python API"] + HOPPER_BRIDGE["bridge/hopper_bridge.py
                                                                                                    Runs inside Hopper
                                                                                                    adapts operations to Hopper Python API"] + GHIDRA_BRIDGE["bridge/ghidra/ReaGhidraBridge.java
                                                                                                    Packaged HeadlessScript
                                                                                                    private authenticated control channel"] INSTALL["Host installation adapters
                                                                                                    macOS: verified vendor DMG to ~/Applications
                                                                                                    Linux: verified vendor package + apt/dnf/pacman"] end @@ -20,6 +21,7 @@ graph TD subgraph "Provider Layers" HOPPER["src/hopper/
                                                                                                    Hopper launch & Unix-socket protocol
                                                                                                    BridgeLauncher, HopperClient, protocol"] + GHIDRA["src/ghidra/
                                                                                                    Ghidra discovery, profile & private headless session
                                                                                                    launcher, client, doctor, protocol"] AUX["src/artifacts/ + src/native/
                                                                                                    disjoint artifact and native capabilities"] BROWSER["src/browser/
                                                                                                    Loopback CDP transport
                                                                                                    exact-origin passive observation"] end @@ -53,22 +55,27 @@ graph TD APP --> SESSION SESSION --> REGISTRY REGISTRY --> HOPPER + REGISTRY --> GHIDRA SESSION --> AUX APP --> WORKSPACE APP --> INSTALL SERVER --> CONTRACTS SERVER --> APP APP --> BROWSER - HOPPER --> BRIDGE + HOPPER --> HOPPER_BRIDGE + GHIDRA --> GHIDRA_BRIDGE HOPPER --> PROCESS + GHIDRA --> PROCESS APP --> PROCESS APP --> DOMAIN CONTRACTS --> DOMAIN HOPPER --> DOMAIN + GHIDRA --> DOMAIN AUX --> DOMAIN BROWSER --> DOMAIN PROCESS --> DOMAIN TESTS -.-> MAIN TESTS -.-> HOPPER + TESTS -.-> GHIDRA TESTS -.-> PROCESS TESTS -.-> BROWSER diff --git a/docs/installation.md b/docs/installation.md index 6c70c1530..92209f9f5 100644 --- a/docs/installation.md +++ b/docs/installation.md @@ -34,7 +34,7 @@ Supported options are `--version `, `--dry-run`, `--no-setup`, `--no-pro `rea setup` discovers the current state, prints one plan, and asks `Continue? [Y/n]`. The plan identifies: -- an existing Hopper installation or the official package it proposes to install; +- an existing Hopper installation, a validated bring-your-own Ghidra environment, or the official Hopper package it proposes to install; - each detected agent configuration path; - the REA skill destination; - external software and package-manager effects. @@ -66,6 +66,36 @@ offered demo mode for each analysis session; it does not require the user's desktop display. Unattended package-manager access requires `--yes --install-hopper`. +## Ghidra + +REA's initial Ghidra provider layer is bring-your-own and currently supports +Linux x64 with the exact official Ghidra 12.1.2 release and a 64-bit full JDK 21. It supplies discovery, analysis-profile commitment, and an isolated +read-only headless session; it intentionally declares no binary-analysis +operations yet. + +Extract Ghidra and install the JDK outside REA, then export absolute paths: + +```bash +export GHIDRA_INSTALL_DIR=/absolute/path/to/ghidra_12.1.2_PUBLIC +export JAVA_HOME=/absolute/path/to/jdk-21 # optional if java/javac are on PATH +rea doctor --json +rea setup +``` + +Doctor validates the platform, architecture, application version, +`support/analyzeHeadless`, Java version/bitness, and the presence of `javac`. +When Java is found through `PATH`, setup records its observed JDK home so GUI +MCP clients do not depend on an incidental shell path. Setup shows every exact +environment entry in its plan, writes only after approval, and never downloads, +installs, upgrades, or modifies Ghidra or Java. + +Each verified session uses a private temporary project and isolated +home/cache/config/temp paths. REA passes `-readOnly`, `-deleteProject`, a +per-file analysis timeout, CPU and heap bounds, and its packaged Java bridge via +`-scriptPath`; it never opens an existing user project. The local bridge socket +and descriptor are current-user-only, and all owned runtime paths and processes +are removed on every terminal lifecycle path. + ## Diagnose, update, and remove `rea doctor --json` is strictly read-only. `rea upgrade` updates only the npm installation that owns the running CLI. `rea uninstall` removes only REA-owned agent registrations and skill files; `--purge-data` additionally removes REA cache and state paths. diff --git a/docs/product-catalog.json b/docs/product-catalog.json index 9daf0c121..58a49385b 100644 --- a/docs/product-catalog.json +++ b/docs/product-catalog.json @@ -137,6 +137,12 @@ ] }, "providers": [ + { + "id": "ghidra", + "name": "Ghidra", + "version": null, + "capabilities": [] + }, { "id": "hopper", "name": "Hopper Disassembler", diff --git a/docs/provider-evaluation.md b/docs/provider-evaluation.md index 611581a52..91a06fe66 100644 --- a/docs/provider-evaluation.md +++ b/docs/provider-evaluation.md @@ -1,13 +1,17 @@ # Static-analysis provider evaluation -Status: Ghidra is approved as the direction for REA's next full read-only -analysis provider. This note does not claim that Ghidra support is implemented -or shipped. +Status: the Ghidra provider foundation is shipped. It validates an exact +bring-your-own Ghidra 12.1.2/JDK 21 environment on Linux x64, resolves a +provider/version/profile commitment, and runs one isolated read-only headless +import with an authenticated post-analysis bridge. It intentionally publishes +no binary operation capabilities yet. The provider-neutral target, provider registry, deterministic target binding, analysis-profile commitment, Evidence provenance, snapshot v2, and bounded -provider-process lifecycle foundations are implemented. Ghidra support itself -remains gated on its launcher, bridge, semantic adapter, and multi-fixture +provider-process lifecycle foundations are implemented. The Ghidra launcher, +packaged Java bridge, doctor/setup projection, bounded client lifecycle, and +single-target real Linux verifier are also implemented. Binary inventory and +function semantics remain gated on operation adapters and a multi-fixture conformance suite. A provider is not a drop-in replacement for Hopper: every capability must be mapped explicitly, with truthful `unavailable` or degraded results where the engine cannot provide equivalent semantics. @@ -28,6 +32,9 @@ follow. bounded startup/analysis/request deadlines, cancellation, and cleanup. - Prefer a packaged Java bridge loaded through Ghidra's script path. PyGhidra remains useful for prototypes but is not a mandatory production dependency. +- The foundation bridge exposes authenticated `ping` and `shutdown` only. + Successful auto-analysis is lifecycle proof, not an inventory, xref, CFG, or + decompilation claim. - Implement read-only inventories, assembly, decompilation, function metadata, calls, references, containment, and bounded search first. - Report GUI cursor/navigation and persistent mutation operations as unavailable @@ -36,6 +43,31 @@ follow. compare normalized semantic facts rather than provider-specific pseudocode text. +## Shipped foundation boundary + +`GHIDRA_INSTALL_DIR` must identify an extracted official 12.1.2 release; +optional `JAVA_HOME` must identify a 64-bit full JDK 21, otherwise doctor probes +`java` and `javac` from `PATH`. The adapter currently rejects non-Linux hosts, +non-x64 hosts, other Ghidra/JDK versions, missing `analyzeHeadless`, non- +executable targets, unknown architectures, and formats other than ELF, PE, and +Mach-O before launch. + +The launcher creates one mode-0700 runtime root with private project, +home/cache/config/data/temp, logs, descriptor, socket, and ownership manifest. +It passes `-readOnly`, `-deleteProject`, a 300-second per-file analysis limit, +two CPUs, and a 2 GiB heap; inherited Java option injection variables are +cleared. The mode-0600 descriptor carries the random token without exposing it +in argv or environment. The Java bridge deletes the descriptor after parsing, +binds a mode-0600 Unix socket, reports actual Ghidra/language/compiler/analysis +metadata, accepts only bounded authenticated `ping`/`shutdown`, and deletes the +socket. Close, cancellation, timeout, malformed protocol, or process exit stops +the token-verified owned process group and removes the entire runtime root. + +The provider catalog therefore lists `ghidra` with an empty capability array. +This is deliberate: provider discovery and a real headless lifecycle are +shipped, while binary operation semantics remain unavailable rather than being +borrowed from Hopper or inferred from a successful import. + ## Shared provider-process foundation `src/process/` now provides the mechanisms that a long-lived Hopper or Ghidra @@ -48,14 +80,15 @@ forced termination, double-close, spawn failure, and resource release. The foundation does not define a bridge schema, socket framing, health payload, analysis model, or shutdown acknowledgement. Hopper keeps its authenticated -NDJSON-over-Unix-socket protocol in `src/hopper/`; Ghidra may use its own Java -bridge and transport while reusing only these process mechanisms. +NDJSON-over-Unix-socket protocol in `src/hopper/`; Ghidra has a separate strict +NDJSON protocol implemented by the packaged Java `HeadlessScript` and reuses +only the generic process mechanisms. ## Shortlist | Provider | License / automation surface | What it brings | REA fit and blockers | | ------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| [Ghidra](https://github.com/NationalSecurityAgency/ghidra) | Apache-2.0 source license; `analyzeHeadless`, Java APIs, and PyGhidra | Broad static analysis, many processors and formats, scripting, and project/database workflows | Strong candidate for a full provider. Requires a Java/JDK runtime, isolated project/cache directories, process supervision, and a stable adapter for Ghidra's project-oriented model. | +| [Ghidra](https://github.com/NationalSecurityAgency/ghidra) | Apache-2.0 source license; `analyzeHeadless`, Java APIs, and PyGhidra | Broad static analysis, many processors and formats, scripting, and project/database workflows | Foundation shipped: exact BYO installation checks, isolated project/state, bounded owned process, packaged Java bridge, and real lifecycle verifier. Operation schemas and semantic conformance remain before it is a full Hopper alternative. | | [Rizin](https://github.com/rizinorg/rizin) / [rz-pipe](https://github.com/rizinorg/rz-pipe) | Rizin repository contains LGPL-3.0 and GPL-3.0 components; `rizin`, `rz-bin`, and language bridges through `rzpipe` | Portable CLI analysis, disassembly/debugging, many architectures and file formats, JSON command output | Good candidate for a process-backed Linux provider and fast metadata fallback. License/component inventory must be preserved; command output needs version-pinned parsers and semantic conformance before evidence is trusted. | | [LIEF](https://github.com/lief-project/LIEF) | Apache-2.0; C++, Python, and other bindings | Deterministic parsing and modification of ELF, PE, Mach-O, COFF, and related executable formats; headers, sections, symbols, relocations, and functions | Best near-term complement, not a decompiler replacement. It can cover format metadata and artifact evidence without a long-lived analysis process; function semantics, pseudocode, CFG, and cross-reference parity remain out of scope unless separately demonstrated. | | [Binary Ninja](https://docs.binary.ninja/dev/index.html) | API/documentation components are MIT, while the analysis product is licensed by edition; commercial, Ultimate, or Headless license is required for headless automation | Python/Core/C++/Rust APIs, headless loading, IL layers, function analysis, plugins, and configurable analysis | Strong technical fit for a native provider, especially function dossiers. Commercial licensing, license-secret handling, native runtime packaging, and multithreaded lifecycle rules are material deployment blockers. | @@ -64,8 +97,8 @@ bridge and transport while reusing only these process mechanisms. 1. Use the implemented explicit provider registry and target binding without changing Hopper behavior. -2. Implement the bounded read-only Ghidra provider described above and admit - capabilities individually through the shared conformance corpus. +2. Extend the bounded read-only Ghidra foundation with capabilities admitted + individually through the shared conformance corpus. 3. Connect Electron/native-add-on application findings to the selected native analysis provider without introducing provider-prefixed tools. 4. Evaluate LIEF or Rizin later as complementary metadata/disassembly providers, diff --git a/docs/roadmap.md b/docs/roadmap.md index 7607e91df..e28bcc43f 100644 --- a/docs/roadmap.md +++ b/docs/roadmap.md @@ -3,20 +3,28 @@ ## Shipped behavior REA setup currently configures the capabilities that exist today: its bundled -skill, detected agent integrations, and optional Hopper provider. It detects +skill, detected agent integrations, optional Hopper provider, and validated +bring-your-own Ghidra paths. It detects Claude Code, Claude Desktop, Codex, Cursor, Gemini CLI, Windsurf, and Devin. The first six have documented local MCP configuration boundaries and can be updated additively; Devin is reported but left unchanged. -## Next provider milestone +The Ghidra foundation supports Linux x64 with exact Ghidra 12.1.2 and a 64-bit +full JDK 21. Doctor validates those coordinates; approved setup propagates them +to MCP registrations without installing or modifying either dependency. REA's +packaged Java bridge then proves an isolated read-only headless import, +post-analysis handshake, and complete cleanup. The provider intentionally +declares no binary operation capabilities in this foundation release. -Ghidra is the accepted direction for REA's second deep static-analysis provider, -but it is not shipped yet. The first implementation is planned as a bring-your- -own Ghidra and Java installation with read-only headless analysis, the shipped -explicit provider selection and target binding, isolated temporary projects, -and truthful unavailable capabilities. Setup must not install Java. Automatic -Ghidra acquisition, if added later, must remain a separately planned and -approved related-tool change. +## Next Ghidra milestone + +Admit Ghidra read-only capabilities individually: start with program identity, +procedures, strings, symbols, memory blocks, address/name resolution, and +bounded search; then add function details, decompilation, assembly, calls, xrefs, +and CFG. Every claim requires normalized provider-neutral semantics and real +source-owned conformance. Hopper and Ghidra pseudocode text is not expected to +match. Automatic Ghidra acquisition, if ever added, remains a separately +planned and approved related-tool change; setup must never install Java. ## Capability-selective setup diff --git a/package.json b/package.json index 1209fa27c..924e52aab 100644 --- a/package.json +++ b/package.json @@ -40,6 +40,7 @@ "dist", "install.sh", "bridge/hopper_bridge.py", + "bridge/ghidra/ReaGhidraBridge.java", "scripts/rea.mjs", "scripts/prepare-node-pty.mjs", "scripts/rebuild-native.mjs", @@ -71,6 +72,7 @@ "test:watch": "vitest", "typecheck": "tsc --noEmit", "verify:hopper": "npm run build && node scripts/verify-real-hopper.mjs", + "verify:ghidra": "npm run build && node scripts/verify-real-ghidra.mjs", "verify:browser": "npm run build && node scripts/verify-real-browser.mjs", "verify:hopper:linux": "npm run build && node scripts/verify-real-hopper-linux.mjs", "verify:setup:linux": "npm run build && node scripts/verify-linux-setup-e2e.mjs", diff --git a/scripts/lib/product-catalog.mjs b/scripts/lib/product-catalog.mjs index 6d7814a98..1101baeb7 100644 --- a/scripts/lib/product-catalog.mjs +++ b/scripts/lib/product-catalog.mjs @@ -101,6 +101,7 @@ const SOURCE_PATHS = { electronContracts: "dist/contracts/electronToolContracts.js", supportedClients: "dist/application/SupportedClients.js", hopperProvider: "dist/hopper/HopperProvider.js", + ghidraProvider: "dist/ghidra/GhidraProvider.js", nativeProvider: "dist/native/NativeMacOSProvider.js", artifactProviders: "dist/application/InvestigationProviders.js", browserProvider: "dist/browser/CdpBrowserProvider.js", @@ -194,6 +195,10 @@ const providerCatalog = (sources) => identity: sources.hopperProvider.HOPPER_PROVIDER_IDENTITY, contracts: sources.hopperProvider.HOPPER_PROVIDER_TOOL_CONTRACTS, }, + { + identity: sources.ghidraProvider.GHIDRA_PROVIDER_IDENTITY, + contracts: sources.ghidraProvider.GHIDRA_PROVIDER_TOOL_CONTRACTS, + }, { identity: sources.nativeProvider.NATIVE_MACOS_PROVIDER_IDENTITY, contracts: sources.nativeContracts.NATIVE_TOOL_CONTRACTS, diff --git a/scripts/scan-todos.mjs b/scripts/scan-todos.mjs index e783d4e85..44e3dae04 100644 --- a/scripts/scan-todos.mjs +++ b/scripts/scan-todos.mjs @@ -9,7 +9,13 @@ const root = resolve(import.meta.dirname, ".."); // Native globSync is available throughout the Node versions in package.engines. // Its exclusion option is `exclude`; `ignore` and `nodir` belong to npm glob. const sourceFiles = globSync( - ["src/**/*.ts", "tests/**/*.ts", "scripts/**/*.mjs", "bridge/**/*.py"], + [ + "src/**/*.ts", + "tests/**/*.ts", + "scripts/**/*.mjs", + "bridge/**/*.py", + "bridge/**/*.java", + ], { cwd: root, exclude: (path) => path.split(/[\\/]/u).includes("node_modules"), diff --git a/scripts/verify-packed-bridge.mjs b/scripts/verify-packed-bridge.mjs index ca9fc3224..020202ea4 100644 --- a/scripts/verify-packed-bridge.mjs +++ b/scripts/verify-packed-bridge.mjs @@ -1,9 +1,11 @@ import { execFile } from "node:child_process"; +import { readFile } from "node:fs/promises"; import { join } from "node:path"; import { promisify } from "node:util"; const exec = promisify(execFile); -const packedBridge = "package/bridge/hopper_bridge.py"; +const packedHopperBridge = "package/bridge/hopper_bridge.py"; +const packedGhidraBridge = "package/bridge/ghidra/ReaGhidraBridge.java"; /** Verify that the packed production bridge rejects a catastrophic regex. */ export async function verifyPackedBridge({ @@ -12,14 +14,29 @@ export async function verifyPackedBridge({ tarball, packedFiles, }) { - if (!packedFiles.includes(packedBridge)) + if (!packedFiles.includes(packedHopperBridge)) throw new Error("package omitted the Hopper bridge"); + if (!packedFiles.includes(packedGhidraBridge)) + throw new Error("package omitted the Ghidra bridge"); await exec("tar", ["-xf", join(root, tarball), "-C", workspace]); + const ghidraSource = await readFile( + join(workspace, packedGhidraBridge), + "utf8", + ); + for (const commitment of [ + "extends HeadlessScript", + 'request.method.equals("ping")', + 'request.method.equals("shutdown")', + 'result.addProperty("read_only", true)', + "analysisTimeoutOccurred()", + ]) + if (!ghidraSource.includes(commitment)) + throw new Error(`packaged Ghidra bridge omitted ${commitment}`); const probe = JSON.parse( ( await exec("python3", [ join(root, "tests/fixtures/bridgeRegexProbe.py"), - join(workspace, packedBridge), + join(workspace, packedHopperBridge), JSON.stringify({ action: "match", pattern: "(a|aa){1,35}b", diff --git a/scripts/verify-real-ghidra.mjs b/scripts/verify-real-ghidra.mjs new file mode 100644 index 000000000..21eefd8b4 --- /dev/null +++ b/scripts/verify-real-ghidra.mjs @@ -0,0 +1,141 @@ +#!/usr/bin/env node + +import { access } from "node:fs/promises"; +import { isAbsolute } from "node:path"; +import { fileURLToPath } from "node:url"; + +import { resolveGhidraAnalysisProfile } from "../dist/ghidra/GhidraAnalysisProfile.js"; +import { GhidraClient } from "../dist/ghidra/GhidraClient.js"; +import { + inspectGhidraInstallation, + SUPPORTED_GHIDRA_VERSION, +} from "../dist/ghidra/GhidraInstallation.js"; +import { GhidraHeadlessLauncher } from "../dist/ghidra/GhidraLauncher.js"; +import { GHIDRA_PROVIDER_IDENTITY } from "../dist/ghidra/GhidraProvider.js"; +import { parseBinaryTarget } from "../dist/domain/binaryTarget.js"; + +const installDir = process.env.GHIDRA_INSTALL_DIR; +if (installDir === undefined || !isAbsolute(installDir)) + throw new Error( + "Set GHIDRA_INSTALL_DIR to the absolute root of an extracted Ghidra 12.1.2 release.", + ); +const targetPath = process.env.GHIDRA_TARGET_PATH ?? "/usr/bin/true"; +const installation = inspectGhidraInstallation({ + installDir, + ...(process.env.JAVA_HOME === undefined + ? {} + : { javaHome: process.env.JAVA_HOME }), +}); +if (!installation.available || installation.analyzeHeadlessPath === null) + throw new Error( + `Ghidra installation is unavailable: ${JSON.stringify(installation)}`, + ); +if (installation.providerVersion !== SUPPORTED_GHIDRA_VERSION) + throw new Error("Ghidra provider version commitment drifted"); +const parsedTarget = await parseBinaryTarget(targetPath); +if (!parsedTarget.ok) throw parsedTarget.error; +const profile = await resolveGhidraAnalysisProfile( + parsedTarget.value, + GHIDRA_PROVIDER_IDENTITY, + installation, +); +if (!profile.ok || profile.value.profile === null) + throw new Error("Ghidra analysis profile could not be committed"); + +const client = new GhidraClient({ + launcher: new GhidraHeadlessLauncher({ + analyzeHeadlessPath: installation.analyzeHeadlessPath, + ...(process.env.JAVA_HOME === undefined + ? {} + : { javaHome: process.env.JAVA_HOME }), + bridgeScriptPath: fileURLToPath( + new URL("../bridge/ghidra/ReaGhidraBridge.java", import.meta.url), + ), + }), + targetPath: parsedTarget.value.path, + providerVersion: SUPPORTED_GHIDRA_VERSION, + profileDigest: profile.value.profile.digest, +}); + +let runtimeCoordinates; +let observedSession; +try { + const started = await client.start(); + if (!started.ok) throw started.error; + assertSession(started.value, profile.value.profile.digest); + const pinged = await client.ping(); + if (!pinged.ok) throw pinged.error; + assertSession(pinged.value, profile.value.profile.digest); + observedSession = pinged.value; + runtimeCoordinates = client.diagnostics(); + for (const name of ["runtime_root", "socket_path", "project_root"]) + if (typeof runtimeCoordinates[name] !== "string") + throw new Error(`Ghidra verifier did not observe ${name}`); + if (typeof runtimeCoordinates.process_id !== "number") + throw new Error("Ghidra verifier did not observe its process ID"); +} finally { + await client.close(); +} + +if (runtimeCoordinates === undefined) + throw new Error("Ghidra runtime coordinates were not captured"); +if (observedSession === undefined) + throw new Error("Ghidra session metadata was not captured"); +for (const name of ["runtime_root", "socket_path", "project_root"]) { + const path = runtimeCoordinates[name]; + if (typeof path === "string" && (await exists(path))) + throw new Error(`Ghidra cleanup left ${name}: ${path}`); +} +const pid = runtimeCoordinates.process_id; +if (typeof pid === "number" && processExists(pid)) + throw new Error(`Ghidra cleanup left process ${String(pid)}`); + +process.stdout.write( + `${JSON.stringify({ + ok: true, + provider: { id: "ghidra", version: SUPPORTED_GHIDRA_VERSION }, + target_path: parsedTarget.value.path, + target_sha256: parsedTarget.value.sha256, + analysis_profile_digest: profile.value.profile.digest, + language_id: observedSession.target.language_id, + compiler_spec_id: observedSession.target.compiler_spec_id, + cleanup: "complete", + })}\n`, +); + +function assertSession(session, expectedDigest) { + if ( + session.provider.id !== "ghidra" || + session.provider.version !== SUPPORTED_GHIDRA_VERSION || + session.profile_digest !== expectedDigest || + session.read_only !== true || + session.analysis_complete !== true || + session.analysis_timed_out !== false || + session.capabilities.join(",") !== "ping,shutdown" + ) + throw new Error( + `Ghidra session commitment drifted: ${JSON.stringify(session)}`, + ); +} + +async function exists(path) { + try { + await access(path); + return true; + } catch { + return false; + } +} + +function processExists(pid) { + try { + process.kill(pid, 0); + return true; + } catch (cause) { + return !( + cause instanceof Error && + "code" in cause && + cause.code === "ESRCH" + ); + } +} diff --git a/src/application/Doctor.ts b/src/application/Doctor.ts index 2cfa7e63d..7d6eedeea 100644 --- a/src/application/Doctor.ts +++ b/src/application/Doctor.ts @@ -40,6 +40,27 @@ export interface DoctorCheck { readonly detail?: string; readonly remediation?: string; } + +/** One provider-owned check projected without importing its adapter types. */ +export interface DoctorProviderCheck { + readonly name: string; + readonly ok: boolean; + readonly code: string | null; + readonly detail: string; + readonly remediation: string | null; + readonly classification: Exclude; +} + +/** Read-only provider inspection supplied by an outer composition adapter. */ +export interface DoctorProviderInspection { + readonly id: string; + readonly configured: boolean; + readonly available: boolean; + readonly providerVersion: string | null; + /** Exact non-secret variables safe to persist in an approved registration. */ + readonly registrationEnvironment: Readonly>; + readonly checks: readonly DoctorProviderCheck[]; +} /** Read-only host capabilities required by diagnostics. */ export interface DoctorHost { readonly platform: NodeJS.Platform; @@ -53,6 +74,7 @@ export interface DoctorHost { linuxDemoRuntimeReady(): Promise; brewHopperPath(): Promise; manualHopperPaths(): Promise; + providerInspections?(): Promise; installationPaths?(): Promise; installedSkillVersion?(): Promise; clientRegistrations?(): Promise; @@ -69,6 +91,7 @@ export const runDoctor = async ( ): Promise<{ readonly healthy: boolean; readonly hopperPath?: string; + readonly providerInspections?: readonly DoctorProviderInspection[]; readonly checks: readonly DoctorCheck[]; readonly identity?: { readonly cli_package_version: string; @@ -168,6 +191,7 @@ export const runDoctor = async ( }, ), ); + const providerInspections = await inspectDoctorProviders(host, checks); if (host.platform === "linux" && hopperPath !== undefined) checks.push( check( @@ -203,8 +227,17 @@ export const runDoctor = async ( "Run rea setup, then restart the affected client.", }); return { - healthy: checks.every(({ ok }) => ok), + healthy: doctorHealthy(checks, { + hopperAvailable: + hopperPath !== undefined && + checks + .filter(({ name }) => name.startsWith("hopper")) + .every(({ ok }) => ok), + hopperConfigured: host.configuredHopperPath !== undefined, + providerInspections, + }), ...(hopperPath === undefined ? {} : { hopperPath }), + ...(providerInspections === undefined ? {} : { providerInspections }), checks, identity: { cli_package_version: PRODUCT_IDENTITY.packageVersion, @@ -249,8 +282,17 @@ const unsupportedHopperRemediation = (configured: boolean): string => ? "Unset or update HOPPER_LAUNCHER_PATH, install the Hopper build supported by this REA release, or update REA." : "Install the Hopper build supported by this REA release, or update REA for a newer Hopper build."; +/** Optional outer-adapter diagnostics composed without reversing dependencies. */ +export interface SystemDoctorHostOptions { + readonly providerInspections?: () => Promise< + readonly DoctorProviderInspection[] + >; +} + /** Create diagnostics backed by the current process and host commands. */ -export const systemDoctorHost = (): DoctorHost => ({ +export const systemDoctorHost = ( + options: SystemDoctorHostOptions = {}, +): DoctorHost => ({ platform: process.platform, nodeVersion: process.versions.node, ...(process.env.HOPPER_LAUNCHER_PATH === undefined @@ -330,6 +372,9 @@ export const systemDoctorHost = (): DoctorHost => ({ } return paths; }, + ...(options.providerInspections === undefined + ? {} + : { providerInspections: options.providerInspections }), async installationPaths() { try { const command = process.platform === "win32" ? "where" : "which"; @@ -383,3 +428,72 @@ const check = ( ...(detail === undefined ? {} : { detail }), ...(ok ? {} : { remediation: failure.remediation }), }); + +const providerDoctorChecks = ( + inspection: DoctorProviderInspection, +): readonly DoctorCheck[] => + inspection.checks.map((candidate) => ({ + name: + candidate.name === "configuration" + ? inspection.id + : `${inspection.id}-${candidate.name}`, + ok: candidate.ok, + classification: candidate.ok ? "healthy" : candidate.classification, + detail: candidate.detail, + ...(candidate.remediation === null + ? {} + : { remediation: candidate.remediation }), + })); + +const inspectDoctorProviders = async ( + host: DoctorHost, + checks: DoctorCheck[], +): Promise => { + const inspections = await host.providerInspections?.(); + if (inspections === undefined) return undefined; + for (const inspection of inspections) + checks.push(...providerDoctorChecks(inspection)); + return inspections; +}; + +const doctorHealthy = ( + checks: readonly DoctorCheck[], + providers: { + readonly hopperAvailable: boolean; + readonly hopperConfigured: boolean; + readonly providerInspections: + | readonly DoctorProviderInspection[] + | undefined; + }, +): boolean => { + if (providers.providerInspections === undefined) + return checks.every(({ ok }) => ok); + const providerChecks = checks.filter( + ({ name }) => + name.startsWith("hopper") || + providers.providerInspections?.some((inspection) => + providerCheckName(inspection.id, name), + ) === true, + ); + const coreHealthy = checks + .filter((candidate) => !providerChecks.includes(candidate)) + .every(({ ok }) => ok); + const configuredProvidersHealthy = providerChecks + .filter(({ name }) => { + if (name.startsWith("hopper")) return providers.hopperConfigured; + return providers.providerInspections?.some( + (inspection) => + inspection.configured && providerCheckName(inspection.id, name), + ); + }) + .every(({ ok }) => ok); + return ( + coreHealthy && + configuredProvidersHealthy && + (providers.hopperAvailable || + providers.providerInspections.some(({ available }) => available)) + ); +}; + +const providerCheckName = (providerId: string, name: string): boolean => + name === providerId || name.startsWith(`${providerId}-`); diff --git a/src/application/Setup.ts b/src/application/Setup.ts index fb4fca45c..b2ca4c787 100644 --- a/src/application/Setup.ts +++ b/src/application/Setup.ts @@ -16,7 +16,12 @@ import { parse as parseToml, stringify as stringifyToml } from "smol-toml"; import { PRODUCT_IDENTITY } from "../identity.js"; import { supportsNodeVersion } from "../domain/runtimeVersion.js"; import { resolveClientConfigTransactionPath } from "./ClientConfigPath.js"; -import { runDoctor, systemDoctorHost } from "./Doctor.js"; +import { + runDoctor, + systemDoctorHost, + type DoctorHost, + type DoctorProviderInspection, +} from "./Doctor.js"; import { installLinuxHopper, readLinuxDistribution, @@ -38,6 +43,9 @@ import { } from "./SetupInstallFailure.js"; export type { SetupHopperInstallResult } from "./SetupInstallFailure.js"; +/** Exact non-secret provider variables propagated into managed registrations. */ +export type SetupProviderEnvironment = Readonly>; + export { canonicalSkillNeedsInstall, installCanonicalSkill, @@ -70,15 +78,16 @@ export interface SetupHost { linuxDistribution(): Promise; hopperPath(): Promise; installHopper(replaceExisting: boolean): Promise; + providerEnvironment?(): Promise; detectedClients(): Promise; configureClient( client: SetupClient, - hopperPath: string | undefined, + providerEnvironment: SetupProviderEnvironment, command: readonly string[], ): Promise; clientNeedsConfigure( client: SetupClient, - hopperPath: string | undefined, + providerEnvironment: SetupProviderEnvironment, command: readonly string[], ): Promise; skillNeedsInstall(): Promise; @@ -141,12 +150,13 @@ export const runSetup = async ( doctor: await host.doctor(), remediation, }); - const unsupported = await hostRemediation(host); + const unsupported = await hostRemediation(host, options.installHopper); if (unsupported !== undefined) return fail(unsupported); let hopperPath = await host.hopperPath(); + let providerEnvironment = await initialProviderEnvironment(host, hopperPath); const discovery = await discoverSetupActions( host, - hopperPath, + providerEnvironment, options.installHopper, ); const { installHopper, installSkill } = discovery; @@ -182,18 +192,22 @@ export const runSetup = async ( remediation: installed.remediation, }; hopperPath = installed.launcherPath; + providerEnvironment = { + ...providerEnvironment, + HOPPER_LAUNCHER_PATH: installed.launcherPath, + }; appliedActions.push("installed_hopper"); detectedClients = await filterClientsNeedingConfigure( host, detectedClients, - hopperPath, + providerEnvironment, registrationCommand(), ); } const clientFailure = await configureDetectedClients({ host, detectedClients, - hopperPath, + providerEnvironment, command: registrationCommand(), clients, appliedActions, @@ -226,7 +240,7 @@ export const runSetup = async ( const discoverSetupActions = async ( host: SetupHost, - hopperPath: string | undefined, + providerEnvironment: SetupProviderEnvironment, forceHopperInstall: boolean, ) => { const initialDoctor = await host.doctor(); @@ -237,7 +251,9 @@ const discoverSetupActions = async ( (name === "hopper-version" && detail === "/opt/hopper/bin/Hopper")), ); const installHopper = - forceHopperInstall || hopperPath === undefined || linuxHopperRepairNeeded; + forceHopperInstall || + Object.keys(providerEnvironment).length === 0 || + linuxHopperRepairNeeded; const [detectedClients, installSkill] = await Promise.all([ host.detectedClients(), host.skillNeedsInstall(), @@ -248,7 +264,7 @@ const discoverSetupActions = async ( : await filterClientsNeedingConfigure( host, detectedClients, - hopperPath, + providerEnvironment, command, ); const plannedActions = setupPlan( @@ -256,6 +272,7 @@ const discoverSetupActions = async ( installHopper, installSkill, clients, + providerEnvironment, ); return { installHopper, @@ -268,17 +285,25 @@ const discoverSetupActions = async ( const filterClientsNeedingConfigure = async ( host: SetupHost, detectedClients: readonly SetupClient[], - hopperPath: string | undefined, + providerEnvironment: SetupProviderEnvironment, command: readonly string[], ): Promise => { const needs = await Promise.all( detectedClients.map((client) => - host.clientNeedsConfigure(client, hopperPath, command), + host.clientNeedsConfigure(client, providerEnvironment, command), ), ); return detectedClients.filter((_, index) => needs[index]); }; +const initialProviderEnvironment = async ( + host: SetupHost, + hopperPath: string | undefined, +): Promise => ({ + ...(await host.providerEnvironment?.()), + ...(hopperPath === undefined ? {} : { HOPPER_LAUNCHER_PATH: hopperPath }), +}); + const finalSetupRemediation = ( platform: NodeJS.Platform, installedHopper: boolean, @@ -295,6 +320,7 @@ const finalSetupRemediation = ( const hostRemediation = async ( host: SetupHost, + forceHopperInstall: boolean, ): Promise => { if (host.platform !== "darwin" && host.platform !== "linux") return "REA supports Hopper on macOS and selected 64-bit Linux distributions."; @@ -306,20 +332,36 @@ const hostRemediation = async ( ? "Upgrade to macOS 12 or newer." : undefined; } - return (await host.linuxDistribution())?.supported === true - ? undefined - : "REA supports Hopper on Ubuntu 24.04+, Fedora 41+, and 64-bit Arch Linux."; + if ((await host.linuxDistribution())?.supported === true) return undefined; + const providerEnvironment = await host.providerEnvironment?.(); + if ( + !forceHopperInstall && + providerEnvironment !== undefined && + Object.keys(providerEnvironment).length > 0 + ) + return undefined; + return "Automated Hopper setup supports Ubuntu 24.04+, Fedora 41+, and 64-bit Arch Linux; configure an existing supported provider instead."; }; /** Production setup effects for Hopper, agent configuration, and the canonical skill directory. */ -const systemSetupHost = (): SetupHost => { - const doctorHost = systemDoctorHost(); +export const systemSetupHost = ( + doctorHost: DoctorHost = systemDoctorHost(), +): SetupHost => { return { platform: process.platform, nodeVersion: process.versions.node, macosVersion: () => doctorHost.macosVersion(), linuxDistribution: readLinuxDistribution, hopperPath: async () => (await runDoctor(undefined, doctorHost)).hopperPath, + providerEnvironment: async () => { + const diagnosis = await runDoctor(undefined, doctorHost); + return { + ...providerRegistrationEnvironment(diagnosis.providerInspections ?? []), + ...(diagnosis.hopperPath === undefined + ? {} + : { HOPPER_LAUNCHER_PATH: diagnosis.hopperPath }), + }; + }, installHopper: async (replaceExisting) => { const result = process.platform === "linux" @@ -329,14 +371,14 @@ const systemSetupHost = (): SetupHost => { return setupInstallFailure(result.reason); }, detectedClients: () => detectClients(homedir()), - configureClient: (client, hopperPath, command) => + configureClient: (client, providerEnvironment, command) => client.format === "unsupported" ? Promise.resolve({ status: "skipped" }) : client.format === "toml" - ? configureTomlClient(client, hopperPath, command) - : configureJsonClient(client, hopperPath, command), - clientNeedsConfigure: (client, hopperPath, command) => - clientConfigurationAligned(client, hopperPath, command).then( + ? configureTomlClient(client, providerEnvironment, command) + : configureJsonClient(client, providerEnvironment, command), + clientNeedsConfigure: (client, providerEnvironment, command) => + clientConfigurationAligned(client, providerEnvironment, command).then( (aligned) => !aligned, ), skillNeedsInstall: () => canonicalSkillNeedsInstall(homedir()), @@ -359,7 +401,7 @@ export const detectClients = async ( /** Back up, atomically update, and semantically read back one JSON MCP configuration. */ export const configureJsonClient = async ( client: SetupClient, - hopperPath?: string, + environment: SetupProviderEnvironment | string = {}, command: readonly string[] = [ "npx", "-y", @@ -386,13 +428,10 @@ export const configureJsonClient = async ( } catch { return { status: "failed", reason: "readback" }; } - const desired = { - command: command[0] ?? PRODUCT_IDENTITY.cliBinary, - args: command.slice(1), - ...(hopperPath === undefined - ? {} - : { env: { HOPPER_LAUNCHER_PATH: hopperPath } }), - }; + const desired = clientConfigurationDesired( + normalizeProviderEnvironment(environment), + command, + ); if ( JSON.stringify(servers[PRODUCT_IDENTITY.mcpServerKey]) === JSON.stringify(desired) @@ -440,7 +479,7 @@ export const configureJsonClient = async ( /** Back up, atomically update, and semantically read back Codex TOML configuration. */ export const configureTomlClient = async ( client: SetupClient, - hopperPath?: string, + environment: SetupProviderEnvironment | string = {}, command: readonly string[] = [ "npx", "-y", @@ -467,13 +506,10 @@ export const configureTomlClient = async ( } catch { return { status: "failed", reason: "readback" }; } - const desired = { - command: command[0] ?? PRODUCT_IDENTITY.cliBinary, - args: command.slice(1), - ...(hopperPath === undefined - ? {} - : { env: { HOPPER_LAUNCHER_PATH: hopperPath } }), - }; + const desired = clientConfigurationDesired( + normalizeProviderEnvironment(environment), + command, + ); if ( JSON.stringify(servers[PRODUCT_IDENTITY.mcpServerKey]) === JSON.stringify(desired) @@ -558,22 +594,27 @@ const restoreConfig = async ( }; const clientConfigurationDesired = ( - hopperPath: string | undefined, + providerEnvironment: SetupProviderEnvironment, command: readonly string[], -) => ({ - command: command[0] ?? PRODUCT_IDENTITY.cliBinary, - args: command.slice(1), - ...(hopperPath === undefined - ? {} - : { env: { HOPPER_LAUNCHER_PATH: hopperPath } }), -}); +) => { + const environment = Object.fromEntries( + Object.entries(providerEnvironment).sort(([left], [right]) => + left.localeCompare(right), + ), + ); + return { + command: command[0] ?? PRODUCT_IDENTITY.cliBinary, + args: command.slice(1), + ...(Object.keys(environment).length === 0 ? {} : { env: environment }), + }; +}; const clientConfigurationAligned = async ( client: SetupClient, - hopperPath: string | undefined, + providerEnvironment: SetupProviderEnvironment, command: readonly string[], ): Promise => { - const desired = clientConfigurationDesired(hopperPath, command); + const desired = clientConfigurationDesired(providerEnvironment, command); try { const original = await readFile(client.configPath, "utf8"); if (client.format === "toml") { @@ -594,3 +635,22 @@ const clientConfigurationAligned = async ( return false; } }; + +const normalizeProviderEnvironment = ( + environment: SetupProviderEnvironment | string, +): SetupProviderEnvironment => + typeof environment === "string" + ? { HOPPER_LAUNCHER_PATH: environment } + : environment; + +const providerRegistrationEnvironment = ( + inspections: readonly DoctorProviderInspection[], +): SetupProviderEnvironment => + Object.fromEntries( + inspections + .filter(({ available }) => available) + .flatMap(({ registrationEnvironment }) => + Object.entries(registrationEnvironment), + ) + .sort(([left], [right]) => left.localeCompare(right)), + ); diff --git a/src/application/SetupClients.ts b/src/application/SetupClients.ts index 8554fe8c6..ce566c15e 100644 --- a/src/application/SetupClients.ts +++ b/src/application/SetupClients.ts @@ -2,6 +2,7 @@ import type { ClientConfigurationResult, SetupClient, SetupHost, + SetupProviderEnvironment, } from "./Setup.js"; const failedConfigurationMessage = ( @@ -20,7 +21,7 @@ const failedConfigurationMessage = ( export const configureDetectedClients = async (options: { readonly host: SetupHost; readonly detectedClients: readonly SetupClient[]; - readonly hopperPath: string | undefined; + readonly providerEnvironment: SetupProviderEnvironment; readonly command: readonly string[]; readonly clients: Record; readonly appliedActions: string[]; @@ -29,7 +30,7 @@ export const configureDetectedClients = async (options: { for (const client of options.detectedClients) { const result = await options.host.configureClient( client, - options.hopperPath, + options.providerEnvironment, options.command, ); options.clients[client.name] = result; diff --git a/src/application/SetupPlan.ts b/src/application/SetupPlan.ts index 7c6789886..4396da098 100644 --- a/src/application/SetupPlan.ts +++ b/src/application/SetupPlan.ts @@ -1,4 +1,8 @@ -import type { SetupAction, SetupClient } from "./Setup.js"; +import type { + SetupAction, + SetupClient, + SetupProviderEnvironment, +} from "./Setup.js"; /** Build the complete setup mutation plan before approval. */ export const setupPlan = ( @@ -6,6 +10,7 @@ export const setupPlan = ( installHopper: boolean, installSkill: boolean, clients: readonly SetupClient[], + providerEnvironment: SetupProviderEnvironment, ): readonly SetupAction[] => [ ...(installHopper ? [ @@ -29,7 +34,7 @@ export const setupPlan = ( (client): SetupAction => ({ kind: "configure_client", target: client.configPath, - detail: `Add the REA MCP registration for ${client.name}; preserve unrelated configuration.`, + detail: clientConfigurationDetail(client.name, providerEnvironment), external: false, }), ), @@ -44,3 +49,15 @@ export const setupPlan = ( ] : []), ]; + +const clientConfigurationDetail = ( + client: string, + environment: SetupProviderEnvironment, +): string => { + const entries = Object.entries(environment) + .sort(([left], [right]) => left.localeCompare(right)) + .map(([name, value]) => `${name}=${value}`); + const suffix = + entries.length === 0 ? "" : ` Environment: ${entries.join(", ")}.`; + return `Add the REA MCP registration for ${client}; preserve unrelated configuration.${suffix}`; +}; diff --git a/src/application/runtime.ts b/src/application/runtime.ts index c0e1a6b56..9de3c8a88 100644 --- a/src/application/runtime.ts +++ b/src/application/runtime.ts @@ -1,6 +1,7 @@ import type { AppConfig } from "../config.js"; import { BinarySession } from "./BinarySession.js"; import { HopperProvider } from "../hopper/HopperProvider.js"; +import { GhidraProvider } from "../ghidra/GhidraProvider.js"; import { NativeMacOSProvider } from "../native/NativeMacOSProvider.js"; import { ArtifactProvider } from "../artifacts/ArtifactProvider.js"; import { silentLogger, type Logger } from "../logger.js"; @@ -17,9 +18,10 @@ export const createBinarySession = ( logger: Logger = silentLogger, ): BinarySession => { const hopper = new HopperProvider(config, logger); + const ghidra = new GhidraProvider(config, logger); return new BinarySession( SessionProviderRouter.selectable( - new AnalysisProviderRegistry([hopper], config.analysisProvider), + new AnalysisProviderRegistry([hopper, ghidra], config.analysisProvider), [ new ArtifactProvider( config.artifactNativeMountEnabled, diff --git a/src/browser/CdpEndpoint.ts b/src/browser/CdpEndpoint.ts index 4aa55b8df..eee428f20 100644 --- a/src/browser/CdpEndpoint.ts +++ b/src/browser/CdpEndpoint.ts @@ -9,6 +9,7 @@ import { BrowserObservationError, type BrowserObservationOperation, } from "../domain/errors.js"; +import { sanitizeBrowserUrl } from "../domain/browserObservation.js"; const HTTP_TIMEOUT_MS = 5_000; const MAX_VERSION_BYTES = 64 * 1_024; @@ -111,7 +112,7 @@ export const discoverCdpEndpoint = async ( targets: targets.map((target) => ({ id: target.id, type: target.type, - title: target.title, + title: sanitizeTargetTitle(target.title), url: target.url, attached: target.attached, ...targetWebSocket(endpoint, target, operation), @@ -119,6 +120,18 @@ export const discoverCdpEndpoint = async ( }; }; +const sanitizeTargetTitle = (value: string): string => { + let url: URL; + try { + url = new URL(value); + } catch { + return value; + } + return url.protocol === "http:" || url.protocol === "https:" + ? sanitizeBrowserUrl(value).url.slice(0, 16_384) + : value; +}; + /** Select a browser attachment socket or a direct socket for one page target. */ export const cdpTargetWebSocket = ( discovery: CdpEndpointDiscovery, diff --git a/src/cli.ts b/src/cli.ts index 239622651..307ef3ae9 100644 --- a/src/cli.ts +++ b/src/cli.ts @@ -8,7 +8,11 @@ import { runProviderAnalysis, runSessionStatus, } from "./application/DirectAnalysis.js"; -import { runSetup, type SetupAction } from "./application/Setup.js"; +import { + runSetup, + systemSetupHost, + type SetupAction, +} from "./application/Setup.js"; import { runUninstall } from "./application/Uninstall.js"; import { runUpgrade, systemUpgradeHost } from "./application/Upgrade.js"; import { PRODUCT_IDENTITY } from "./identity.js"; @@ -35,6 +39,7 @@ import { analysisProviderSelectorSchema, type AnalysisProviderSelector, } from "./contracts/providerSelection.js"; +import { createSystemDoctorHost } from "./doctorRuntime.js"; /** * Build the one-shot Incur CLI without starting Hopper at import time. @@ -180,7 +185,7 @@ const registerSetupCommands = ( installHopper: options.installHopper, structured: formatExplicit, }, - undefined, + systemSetupHost(createSystemDoctorHost()), options.yes || formatExplicit || process.stdin.isTTY !== true ? undefined : confirmSetup, @@ -193,7 +198,9 @@ const registerSetupCommands = ( target: z.string().optional().describe("Optional app path to check"), }), run: ({ options }) => - logCliCommand(logger, "doctor", () => runDoctor(options.target)), + logCliCommand(logger, "doctor", () => + runDoctor(options.target, createSystemDoctorHost()), + ), }); cli.command(CLI_COMMANDS.uninstall, { description: "Remove REA-owned agent configuration and skill files", diff --git a/src/config.ts b/src/config.ts index c21d78371..007952d61 100644 --- a/src/config.ts +++ b/src/config.ts @@ -1,4 +1,5 @@ import { z } from "zod"; +import { isAbsolute } from "node:path"; import { ConfigurationError } from "./domain/errors.js"; import { err, ok, type Result } from "./domain/result.js"; @@ -30,6 +31,8 @@ const defaultHopperLauncherPath = (): string => export interface AppConfig { readonly analysisProvider: AnalysisProviderSelector; + readonly ghidraInstallDir: string | undefined; + readonly ghidraJavaHome: string | undefined; readonly hopperLauncherPath: string; readonly hopperTargetPath: string | undefined; readonly hopperTargetKind: "executable" | "database"; @@ -57,6 +60,16 @@ export interface AppConfig { const environmentSchema = z .object({ REA_ANALYSIS_PROVIDER: analysisProviderSelectorSchema.default("auto"), + GHIDRA_INSTALL_DIR: z + .string() + .min(1) + .refine(isAbsolute, "GHIDRA_INSTALL_DIR must be absolute") + .optional(), + JAVA_HOME: z + .string() + .min(1) + .refine(isAbsolute, "JAVA_HOME must be absolute") + .optional(), HOPPER_LAUNCHER_PATH: z.string().min(1).optional(), HOPPER_TARGET_PATH: z.string().min(1).optional(), HOPPER_TARGET_KIND: z @@ -234,7 +247,7 @@ const parseLoaderArgs = ( }; /** - * Parse Hopper launcher configuration once at the composition root. + * Parse provider and authority configuration once at the composition root. * Explicit loader arguments override REA's header-derived defaults for a * supported target, allowing callers to refine Hopper's loader behavior without * bypassing REA's path and executable-header checks. @@ -364,6 +377,8 @@ export const parseConfig = ( ] satisfies readonly PermissionCeiling[]; return ok({ analysisProvider: parsedEnvironment.data.REA_ANALYSIS_PROVIDER, + ghidraInstallDir: parsedEnvironment.data.GHIDRA_INSTALL_DIR, + ghidraJavaHome: parsedEnvironment.data.JAVA_HOME, hopperLauncherPath: parsedEnvironment.data.HOPPER_LAUNCHER_PATH ?? defaultHopperLauncherPath(), diff --git a/src/doctorRuntime.ts b/src/doctorRuntime.ts new file mode 100644 index 000000000..691f8dfcb --- /dev/null +++ b/src/doctorRuntime.ts @@ -0,0 +1,8 @@ +import { systemDoctorHost, type DoctorHost } from "./application/Doctor.js"; +import { inspectSystemGhidraProvider } from "./ghidra/GhidraDoctor.js"; + +/** Compose provider diagnostics at the outer CLI adapter boundary. */ +export const createSystemDoctorHost = (): DoctorHost => + systemDoctorHost({ + providerInspections: async () => [await inspectSystemGhidraProvider()], + }); diff --git a/src/domain/errors.ts b/src/domain/errors.ts index 605194ef1..1df2decf6 100644 --- a/src/domain/errors.ts +++ b/src/domain/errors.ts @@ -212,16 +212,26 @@ const providerSelectionUserMessage = ( } }; +/** A provider adapter failed outside its more precise typed variants. */ +export interface ProviderAdapterErrorOptions extends ErrorOptions { + readonly diagnostics?: Readonly>; +} + /** A provider adapter failed outside its more precise typed variants. */ export class ProviderAdapterError extends AnalysisError { readonly _tag = "ProviderAdapterError"; + readonly diagnostics: Readonly> | undefined; constructor( readonly providerId: string, readonly operation: string, - options?: ErrorOptions, + options: ProviderAdapterErrorOptions = {}, ) { super(`Provider ${providerId} adapter failed during ${operation}`, options); + this.diagnostics = + options.diagnostics === undefined + ? undefined + : structuredClone(options.diagnostics); } } @@ -702,7 +712,13 @@ const errorDetails = ( })), }; if (error instanceof ProviderAdapterError) - return { provider_id: error.providerId, operation: error.operation }; + return { + provider_id: error.providerId, + operation: error.operation, + ...(error.diagnostics === undefined + ? {} + : { diagnostics: error.diagnostics }), + }; if (error instanceof BrowserObservationError) return { operation: error.operation, reason: error.reason }; if (error instanceof HopperRemoteError) diff --git a/src/ghidra/GhidraAnalysisProfile.ts b/src/ghidra/GhidraAnalysisProfile.ts new file mode 100644 index 000000000..6d8f922fb --- /dev/null +++ b/src/ghidra/GhidraAnalysisProfile.ts @@ -0,0 +1,61 @@ +import type { + AnalysisProfileResolution, + ProviderIdentity, +} from "../application/AnalysisProvider.js"; +import { createAnalysisProfile } from "../domain/analysisProfile.js"; +import type { BinaryTarget } from "../domain/binaryTarget.js"; +import { + AnalysisCancelledError, + ProviderAdapterError, + type AnalysisError, +} from "../domain/errors.js"; +import { err, ok, type Result } from "../domain/result.js"; +import { + GHIDRA_ANALYSIS_TIMEOUT_SECONDS, + GHIDRA_MAX_CPU, + GHIDRA_MAX_HEAP, +} from "./GhidraDefaults.js"; +import type { GhidraInstallationInspection } from "./GhidraInstallation.js"; + +/** Resolve version-bound, deterministic semantics before Ghidra imports a target. */ +export const resolveGhidraAnalysisProfile = ( + target: BinaryTarget, + identity: ProviderIdentity, + installation: GhidraInstallationInspection, + signal?: AbortSignal, +): Promise> => { + if (signal?.aborted === true) + return Promise.resolve(err(new AnalysisCancelledError("open_binary"))); + if (target.kind !== "executable") + return Promise.resolve(ok({ profile: null, compatibility: {} })); + const version = installation.providerVersion; + if (!installation.available || version === null) + return Promise.resolve( + err(new ProviderAdapterError(identity.id, "resolve_analysis_profile")), + ); + const provider = { ...identity, version }; + return Promise.resolve( + ok({ + profile: createAnalysisProfile(provider, 1, { + target_kind: target.kind, + target_format: target.format, + architecture: target.architecture ?? null, + available_architectures: [ + ...(target.availableArchitectures ?? []), + ].sort(), + import_mode: "ephemeral-read-only", + loader: "auto-from-header", + language_id: "auto-from-header", + compiler_spec_id: "auto-default", + analyzer_preset: "ghidra-default", + analysis_timeout_seconds: GHIDRA_ANALYSIS_TIMEOUT_SECONDS, + max_cpu: GHIDRA_MAX_CPU, + max_heap: GHIDRA_MAX_HEAP, + }), + compatibility: { + languageId: "auto", + compilerSpecId: "auto", + }, + }), + ); +}; diff --git a/src/ghidra/GhidraClient.ts b/src/ghidra/GhidraClient.ts new file mode 100644 index 000000000..f3d6f39c1 --- /dev/null +++ b/src/ghidra/GhidraClient.ts @@ -0,0 +1,528 @@ +import { randomBytes, randomUUID } from "node:crypto"; +import { access } from "node:fs/promises"; +import type { Socket } from "node:net"; +import { join } from "node:path"; + +import type { JsonValue } from "../domain/jsonValue.js"; +import { err, ok, type Result } from "../domain/result.js"; +import { silentLogger, type Logger } from "../logger.js"; +import { PendingOperations } from "../process/PendingOperations.js"; +import { PrivateRuntimeRoot } from "../process/PrivateRuntimeRoot.js"; +import { ProviderStartupDeadline } from "../process/ProviderDeadline.js"; +import { + type ProviderProcessDiagnostic, + type ProviderProcessSnapshot, + ProviderProcessSupervisor, +} from "../process/ProviderProcess.js"; +import { + GHIDRA_MAX_LINE_BYTES, + GHIDRA_REQUEST_TIMEOUT_MS, + GHIDRA_STARTUP_TIMEOUT_MS, +} from "./GhidraDefaults.js"; +import type { + GhidraClientOptions, + GhidraStartResult, +} from "./GhidraClientTypes.js"; +import { createGhidraDiagnostics } from "./GhidraDiagnostics.js"; +import type { GhidraLaunch } from "./GhidraLauncher.js"; +import { GhidraResponseBuffer } from "./GhidraResponseBuffer.js"; +import { GhidraResponseRouter } from "./GhidraResponseRouter.js"; +import { GhidraSessionError } from "./GhidraSessionError.js"; +import { + isGhidraShutdownAcknowledgement, + parseGhidraSessionInfo, + type GhidraSessionInfo, +} from "./GhidraSessionValues.js"; +import { + attachGhidraSocket, + connectGhidraSocketOnce, +} from "./GhidraSocketConnection.js"; + +const SHUTDOWN_TIMEOUT_MS = 10_000; +const SESSION_ROOT = "/tmp"; + +export type { + GhidraClientOptions, + GhidraDiagnostic, + GhidraStartResult, +} from "./GhidraClientTypes.js"; + +/** Owns one authenticated, private, read-only Ghidra headless session. */ +export class GhidraClient { + readonly #options: Required< + Pick + > & + GhidraClientOptions; + readonly #pending = new PendingOperations< + number, + Result + >(); + readonly #logger: Logger; + #socket: Socket | undefined; + #detachSocket: (() => void) | undefined; + #launch: GhidraLaunch | undefined; + #process: ProviderProcessSupervisor | undefined; + #runtimeRoot: PrivateRuntimeRoot | undefined; + #token: string | undefined; + #runId: string | undefined; + #nextId = 1; + #closing = false; + #processSnapshot: ProviderProcessSnapshot | undefined; + #lastDiagnostics: Readonly> = {}; + #startupController: AbortController | undefined; + #startPromise: Promise | undefined; + #closePromise: Promise | undefined; + readonly #responseRouter = new GhidraResponseRouter({ + pending: this.#pending, + nextId: () => this.#nextId, + remoteFailure: (message, cause) => this.#failure("remote", message, cause), + protocolFailure: (message, cause) => this.#abortProtocol(message, cause), + }); + readonly #responseBuffer = new GhidraResponseBuffer({ + maxLineBytes: GHIDRA_MAX_LINE_BYTES, + onLine: (line) => this.#responseRouter.route(line), + onFailure: (message) => this.#abortProtocol(message), + }); + readonly #onSocketData = (chunk: string): void => + this.#responseBuffer.push(chunk); + readonly #onSocketError = (): void => { + this.#failAll(this.#failure("process", "Ghidra bridge socket failed")); + }; + readonly #onSocketClose = (): void => { + if (!this.#closing) + this.#failAll(this.#failure("process", "Ghidra bridge socket closed")); + }; + + constructor(options: GhidraClientOptions) { + this.#logger = options.logger ?? silentLogger; + this.#options = { + ...options, + requestTimeoutMs: options.requestTimeoutMs ?? GHIDRA_REQUEST_TIMEOUT_MS, + startupTimeoutMs: options.startupTimeoutMs ?? GHIDRA_STARTUP_TIMEOUT_MS, + }; + } + + /** Launch Ghidra once and require its exact post-analysis handshake. */ + start(signal?: AbortSignal): Promise { + if (this.#closePromise !== undefined) + return this.#closePromise.then(() => this.start(signal)); + if (this.#startPromise !== undefined) return this.#startPromise; + const controller = new AbortController(); + const onAbort = (): void => controller.abort(signal?.reason); + if (signal?.aborted === true) onAbort(); + else signal?.addEventListener("abort", onAbort, { once: true }); + const started = this.#start(controller.signal); + this.#startupController = controller; + this.#startPromise = started; + const reset = (): void => { + signal?.removeEventListener("abort", onAbort); + if (this.#startPromise === started) { + this.#startPromise = undefined; + if (this.#startupController === controller) + this.#startupController = undefined; + } + }; + void started.then((result) => { + signal?.removeEventListener("abort", onAbort); + if (!result.ok) reset(); + }, reset); + return started; + } + + /** Revalidate live bridge, provider, run, and profile metadata. */ + async ping( + options: { + readonly signal?: AbortSignal; + readonly timeoutMs?: number; + } = {}, + ): Promise> { + const started = await this.start(options.signal); + if (!started.ok) return started; + const result = await this.#request("ping", {}, options); + if (!result.ok) return result; + return this.#parseSessionInfo(result.value); + } + + /** Stop the owned process group and remove all project/runtime artifacts. */ + close(): Promise { + const starting = this.#startPromise; + const controller = this.#startupController; + controller?.abort(); + this.#closePromise ??= Promise.resolve().then(() => + this.#close(starting, controller), + ); + return this.#closePromise; + } + + /** Latest bounded local diagnostics, with bearer material redacted. */ + diagnostics(): Readonly> { + return structuredClone(this.#diagnostics()); + } + + async #start(signal: AbortSignal): Promise { + if (signal.aborted) + return err(this.#failure("cancelled", "Ghidra startup was cancelled")); + if (this.#socket !== undefined || this.#runtimeRoot !== undefined) + return err(this.#failure("protocol", "Ghidra client is already started")); + const deadline = new ProviderStartupDeadline( + this.#options.startupTimeoutMs, + signal, + ); + try { + return await this.#startWithin(deadline); + } finally { + deadline.dispose(); + } + } + + async #startWithin( + deadline: ProviderStartupDeadline, + ): Promise { + try { + this.#runtimeRoot = await PrivateRuntimeRoot.create({ + parent: SESSION_ROOT, + prefix: "rea-ghidra-", + }); + } catch (cause: unknown) { + return err( + this.#failure("start", "Ghidra runtime root creation failed", cause), + ); + } + if (deadline.signal.aborted) return this.#startupInterrupted(deadline); + const socketPath = join(this.#runtimeRoot.path, "bridge.sock"); + this.#token = randomBytes(32).toString("hex"); + this.#runId = randomUUID(); + const launched = await this.#options.launcher + .launch( + { + runtimeRoot: this.#runtimeRoot.path, + socketPath, + token: this.#token, + runId: this.#runId, + targetPath: this.#options.targetPath, + providerVersion: this.#options.providerVersion, + profileDigest: this.#options.profileDigest, + }, + { signal: deadline.signal }, + ) + .catch((cause: unknown) => + err(this.#failure("start", "Ghidra launcher failed", cause)), + ); + if (!launched.ok) { + const failure = deadline.signal.aborted + ? this.#interruptionFailure(deadline) + : launched.error instanceof GhidraSessionError + ? launched.error + : this.#failure("start", launched.error.message, launched.error); + await this.#cleanup(); + return err(failure); + } + this.#launch = launched.value; + this.#process = new ProviderProcessSupervisor(launched.value, { + onDiagnostic: (event) => this.#onProcessDiagnostic(event), + }); + const connected = await this.#connect(socketPath, deadline); + if (!connected.ok) { + const failure = connected.error; + await this.#cleanup(); + return err(failure); + } + const ping = await this.#request( + "ping", + {}, + { + signal: deadline.signal, + timeoutMs: deadline.remainingMs(), + }, + ); + if (!ping.ok) { + const failure = deadline.signal.aborted + ? this.#interruptionFailure(deadline) + : ping.error; + await this.#cleanup(); + return err(failure); + } + const parsed = this.#parseSessionInfo(ping.value); + if (!parsed.ok || parsed.value.analysis_timed_out) { + const failure = parsed.ok + ? this.#failure( + "analysis_timeout", + "Ghidra auto-analysis reached its per-file deadline", + ) + : parsed.error; + await this.#cleanup(); + return err(failure); + } + return parsed; + } + + async #connect( + socketPath: string, + deadline: ProviderStartupDeadline, + ): Promise> { + while (deadline.remainingMs() > 0) { + if (deadline.signal.aborted) + return err(this.#interruptionFailure(deadline)); + if (this.#closing) + return err(this.#failure("cancelled", "Ghidra startup was closed")); + if (this.#processSnapshot?.exitCode !== undefined) + return err( + this.#failure("process", "Ghidra exited before bridge startup"), + ); + try { + await access(socketPath); + } catch { + if ((await deadline.wait(50)) === "aborted") + return err(this.#interruptionFailure(deadline)); + continue; + } + const connected = await connectGhidraSocketOnce( + socketPath, + deadline.signal, + ); + if (connected.ok) { + this.#socket = connected.value; + this.#detachSocket = attachGhidraSocket(connected.value, { + data: this.#onSocketData, + error: this.#onSocketError, + close: this.#onSocketClose, + }); + return ok(undefined); + } + if ((await deadline.wait(50)) === "aborted") + return err(this.#interruptionFailure(deadline)); + } + return err( + this.#failure("timeout", "Ghidra startup deadline elapsed", undefined, { + timeoutMs: this.#options.startupTimeoutMs, + }), + ); + } + + async #request( + method: string, + params: JsonValue, + options: { readonly signal?: AbortSignal; readonly timeoutMs?: number }, + ): Promise> { + const socket = this.#socket; + const token = this.#token; + if (socket === undefined || socket.destroyed || token === undefined) + return err(this.#failure("process", "Ghidra bridge is unavailable")); + if (options.signal?.aborted === true) + return err(this.#failure("cancelled", "Ghidra request was cancelled")); + const id = this.#nextId++; + const timeoutMs = options.timeoutMs ?? this.#options.requestTimeoutMs; + if (timeoutMs <= 0) + return err( + this.#failure("timeout", "Ghidra request deadline elapsed", undefined, { + timeoutMs, + }), + ); + const response = this.#pending.wait(id, { + timeoutMs, + ...(options.signal === undefined ? {} : { signal: options.signal }), + timeoutValue: () => + err( + this.#failure( + "timeout", + "Ghidra bridge request timed out", + undefined, + { timeoutMs }, + ), + ), + cancelledValue: () => + err(this.#failure("cancelled", "Ghidra request was cancelled")), + }); + socket.write( + `${JSON.stringify({ id, token, method, params })}\n`, + (cause) => { + if (cause !== undefined && cause !== null) + this.#pending.settle( + id, + err(this.#failure("process", "Ghidra bridge write failed", cause)), + ); + }, + ); + const result = await response; + this.#logger[result.ok ? "debug" : "warn"]( + { method, status: result.ok ? "ok" : "error" }, + "Ghidra bridge request completed", + ); + return result; + } + + #parseSessionInfo( + value: JsonValue, + ): Result { + const runId = this.#runId; + if (runId === undefined) + return err(this.#failure("protocol", "Ghidra run identity is missing")); + const parsed = parseGhidraSessionInfo(value, { + runId, + providerVersion: this.#options.providerVersion, + profileDigest: this.#options.profileDigest, + }); + return parsed.ok + ? parsed + : err( + this.#failure( + "protocol", + "Ghidra bridge handshake is invalid", + parsed.error, + ), + ); + } + + async #close( + starting: Promise | undefined, + controller: AbortController | undefined, + ): Promise { + try { + await starting?.catch(() => undefined); + await this.#cleanup(); + } finally { + if (this.#startPromise === starting) this.#startPromise = undefined; + if (this.#startupController === controller) + this.#startupController = undefined; + this.#closePromise = undefined; + } + } + + async #cleanup(): Promise { + this.#closing = true; + try { + const socket = this.#socket; + if (socket !== undefined && !socket.destroyed) { + const shutdown = await this.#request( + "shutdown", + {}, + { + timeoutMs: SHUTDOWN_TIMEOUT_MS, + }, + ).catch(() => + err(this.#failure("process", "Ghidra shutdown request failed")), + ); + if (!shutdown.ok || !isGhidraShutdownAcknowledgement(shutdown.value)) + this.#logger.warn( + { status: shutdown.ok ? "invalid-acknowledgement" : "failed" }, + "Ghidra bridge shutdown was not confirmed", + ); + } + this.#failAll(this.#failure("process", "Ghidra session closed")); + this.#detachSocket?.(); + this.#detachSocket = undefined; + socket?.destroy(); + this.#socket = undefined; + if (this.#process !== undefined) { + await this.#process.waitForExit(500); + this.#processSnapshot = this.#process.snapshot(); + const stopped = await this.#process.stop(); + this.#processSnapshot = this.#process.snapshot(); + if (stopped.status === "incomplete") { + this.#options.onDiagnostic?.({ + type: "cleanup-incomplete", + reason: stopped.reason, + }); + this.#logger.warn( + { reason: stopped.reason }, + "Ghidra process cleanup failed closed", + ); + } + } + this.#lastDiagnostics = this.#diagnostics(); + this.#process = undefined; + this.#launch = undefined; + const runtimeRoot = this.#runtimeRoot; + this.#runtimeRoot = undefined; + await runtimeRoot?.close(); + this.#token = undefined; + this.#runId = undefined; + this.#responseBuffer.reset(); + } finally { + this.#closing = false; + } + } + + #onProcessDiagnostic(event: ProviderProcessDiagnostic): void { + if (event.type === "output") { + this.#options.onDiagnostic?.({ + type: "launcher-output", + stream: event.stream, + bytes: event.bytes, + totalBytes: event.totalBytes, + truncated: event.truncated, + }); + return; + } + if (event.type === "error") { + this.#logger.warn( + { message: event.message }, + "Ghidra process emitted an error", + ); + return; + } + this.#processSnapshot = event.snapshot; + this.#options.onDiagnostic?.({ + type: "launcher-exit", + code: event.code, + signal: event.signal, + }); + if (!this.#closing) + this.#failAll(this.#failure("process", "Ghidra process exited")); + } + + #abortProtocol(message: string, cause?: Error): void { + this.#failAll(this.#failure("protocol", message, cause)); + this.#socket?.destroy(); + } + + #failAll(error: GhidraSessionError): void { + this.#pending.failAll(() => err(error)); + } + + async #startupInterrupted( + deadline: ProviderStartupDeadline, + ): Promise { + const failure = this.#interruptionFailure(deadline); + await this.#cleanup(); + return err(failure); + } + + #interruptionFailure(deadline: ProviderStartupDeadline): GhidraSessionError { + return deadline.cancelled + ? this.#failure("cancelled", "Ghidra startup was cancelled") + : this.#failure("timeout", "Ghidra startup deadline elapsed", undefined, { + timeoutMs: deadline.timeoutMs, + }); + } + + #failure( + kind: GhidraSessionError["kind"], + message: string, + cause?: unknown, + options: { readonly timeoutMs?: number } = {}, + ): GhidraSessionError { + return new GhidraSessionError(kind, message, this.#diagnostics(), { + ...(cause === undefined ? {} : { cause }), + ...(options.timeoutMs === undefined + ? {} + : { timeoutMs: options.timeoutMs }), + }); + } + + #diagnostics(): Readonly> { + const snapshot = this.#process?.snapshot() ?? this.#processSnapshot; + return createGhidraDiagnostics({ + targetPath: this.#options.targetPath, + providerVersion: this.#options.providerVersion, + profileDigest: this.#options.profileDigest, + ...(this.#runtimeRoot === undefined + ? {} + : { runtimeRoot: this.#runtimeRoot.path }), + ...(this.#launch === undefined ? {} : { launch: this.#launch }), + ...(snapshot === undefined ? {} : { snapshot }), + ...(this.#token === undefined ? {} : { token: this.#token }), + previous: this.#lastDiagnostics, + }); + } +} diff --git a/src/ghidra/GhidraClientTypes.ts b/src/ghidra/GhidraClientTypes.ts new file mode 100644 index 000000000..235a4ad1d --- /dev/null +++ b/src/ghidra/GhidraClientTypes.ts @@ -0,0 +1,36 @@ +import type { Logger } from "../logger.js"; +import type { Result } from "../domain/result.js"; +import type { GhidraLauncher } from "./GhidraLauncher.js"; +import type { GhidraSessionError } from "./GhidraSessionError.js"; +import type { GhidraSessionInfo } from "./GhidraSessionValues.js"; + +/** Result of opening and authenticating one headless Ghidra session. */ +export type GhidraStartResult = Result; + +/** Safe lifecycle telemetry for one isolated Ghidra headless process. */ +export type GhidraDiagnostic = + | { + readonly type: "launcher-output"; + readonly stream: "stdout" | "stderr"; + readonly bytes: number; + readonly totalBytes: number; + readonly truncated: boolean; + } + | { + readonly type: "launcher-exit"; + readonly code: number | null; + readonly signal: NodeJS.Signals | null; + } + | { readonly type: "cleanup-incomplete"; readonly reason: string }; + +/** Dependencies and exact profile commitment for one headless import. */ +export interface GhidraClientOptions { + readonly launcher: GhidraLauncher; + readonly targetPath: string; + readonly providerVersion: string; + readonly profileDigest: string; + readonly requestTimeoutMs?: number; + readonly startupTimeoutMs?: number; + readonly onDiagnostic?: (event: GhidraDiagnostic) => void; + readonly logger?: Logger; +} diff --git a/src/ghidra/GhidraDefaults.ts b/src/ghidra/GhidraDefaults.ts new file mode 100644 index 000000000..3b676516b --- /dev/null +++ b/src/ghidra/GhidraDefaults.ts @@ -0,0 +1,14 @@ +/** Maximum wall-clock analysis time passed to Ghidra for one imported file. */ +export const GHIDRA_ANALYSIS_TIMEOUT_SECONDS = 300; +/** Maximum CPU cores made available to one headless analysis. */ +export const GHIDRA_MAX_CPU = 2; +/** Explicit JVM heap ceiling for one headless provider process. */ +export const GHIDRA_MAX_HEAP = "2G"; +/** Absolute import, analysis, bridge, and health startup deadline. */ +export const GHIDRA_STARTUP_TIMEOUT_MS = 330_000; +/** Default bounded wait for one established bridge request. */ +export const GHIDRA_REQUEST_TIMEOUT_MS = 10_000; +/** Maximum encoded response line accepted from the Java bridge. */ +export const GHIDRA_MAX_LINE_BYTES = 1024 * 1024; +/** Version of REA's Java bridge handshake and request protocol. */ +export const GHIDRA_BRIDGE_VERSION = 1; diff --git a/src/ghidra/GhidraDiagnostics.ts b/src/ghidra/GhidraDiagnostics.ts new file mode 100644 index 000000000..48400bdbd --- /dev/null +++ b/src/ghidra/GhidraDiagnostics.ts @@ -0,0 +1,68 @@ +import type { JsonValue } from "../domain/jsonValue.js"; +import type { ProviderProcessSnapshot } from "../process/ProviderProcess.js"; +import type { GhidraLaunch } from "./GhidraLauncher.js"; + +/** Inputs needed to project bounded diagnostics for one Ghidra runtime. */ +export interface GhidraDiagnosticsOptions { + readonly targetPath: string; + readonly providerVersion: string; + readonly profileDigest: string; + readonly runtimeRoot?: string; + readonly launch?: GhidraLaunch; + readonly snapshot?: ProviderProcessSnapshot; + readonly token?: string; + readonly previous: Readonly>; +} + +/** Preserve actionable runtime coordinates after cleanup and redact bearer data. */ +export const createGhidraDiagnostics = ( + options: GhidraDiagnosticsOptions, +): Readonly> => { + if ( + options.runtimeRoot === undefined && + options.launch === undefined && + Object.keys(options.previous).length > 0 + ) + return options.previous; + const redacted = (value: string): string => + options.token === undefined + ? value + : value.replaceAll(options.token, "[REDACTED]"); + return { + target_path: options.targetPath, + provider_version: options.providerVersion, + profile_digest: options.profileDigest, + ...(options.runtimeRoot === undefined + ? {} + : { + runtime_root: options.runtimeRoot, + socket_path: `${options.runtimeRoot}/bridge.sock`, + }), + ...(options.launch === undefined + ? {} + : { + project_root: options.launch.projectRoot, + ghidra_log_path: options.launch.ghidraLogPath, + script_log_path: options.launch.scriptLogPath, + process_id: options.launch.process.pid ?? null, + }), + ...(options.snapshot === undefined + ? {} + : { + exit_code: options.snapshot.exitCode ?? null, + exit_signal: options.snapshot.signal ?? null, + stdout: boundedStream(options.snapshot.stdout, redacted), + stderr: boundedStream(options.snapshot.stderr, redacted), + }), + }; +}; + +const boundedStream = ( + stream: ProviderProcessSnapshot["stdout"], + redact: (value: string) => string, +): JsonValue => ({ + text: redact(stream.text), + bytes: stream.bytes, + retained_bytes: stream.retainedBytes, + truncated: stream.truncated, +}); diff --git a/src/ghidra/GhidraDoctor.ts b/src/ghidra/GhidraDoctor.ts new file mode 100644 index 000000000..5918f484b --- /dev/null +++ b/src/ghidra/GhidraDoctor.ts @@ -0,0 +1,90 @@ +import type { + DoctorProviderCheck, + DoctorProviderInspection, +} from "../application/Doctor.js"; +import { + inspectGhidraInstallation, + type GhidraInstallationCheck, + type GhidraInstallationInspection, +} from "./GhidraInstallation.js"; + +/** Project adapter-owned installation facts into the generic doctor contract. */ +export const projectGhidraDoctorInspection = ( + inspection: GhidraInstallationInspection, +): DoctorProviderInspection => ({ + id: "ghidra", + configured: inspection.installDir !== null, + available: inspection.available, + providerVersion: inspection.providerVersion, + registrationEnvironment: + inspection.available && inspection.installDir !== null + ? { + GHIDRA_INSTALL_DIR: inspection.installDir, + ...(inspection.javaHome === null + ? {} + : { JAVA_HOME: inspection.javaHome }), + } + : {}, + checks: selectedChecks(inspection).map((check) => + projectCheck(check, inspection.installDir !== null), + ), +}); + +/** Inspect the process-configured BYO Ghidra installation for `rea doctor`. */ +export const inspectSystemGhidraProvider = + (): Promise => + Promise.resolve( + projectGhidraDoctorInspection( + inspectGhidraInstallation({ + ...(process.env.GHIDRA_INSTALL_DIR === undefined + ? {} + : { installDir: process.env.GHIDRA_INSTALL_DIR }), + ...(process.env.JAVA_HOME === undefined + ? {} + : { javaHome: process.env.JAVA_HOME }), + }), + ), + ); + +const selectedChecks = ( + inspection: GhidraInstallationInspection, +): readonly GhidraInstallationCheck[] => { + const byName = new Map( + inspection.checks.map((candidate) => [candidate.name, candidate]), + ); + const configuration = byName.get("configuration"); + if (configuration === undefined) return []; + if (!configuration.ok) return [configuration]; + const installation = byName.get("installation"); + return [ + configuration, + byName.get("platform"), + byName.get("architecture"), + installation, + ...(installation?.ok === true + ? [byName.get("version"), byName.get("headless")] + : []), + byName.get("java"), + ].filter((candidate): candidate is GhidraInstallationCheck => + Boolean(candidate), + ); +}; + +const projectCheck = ( + check: GhidraInstallationCheck, + configured: boolean, +): DoctorProviderCheck => ({ + name: check.name, + ok: check.ok, + code: check.code, + detail: check.detail, + remediation: check.remediation, + classification: + check.name === "platform" || check.name === "architecture" + ? "unsupported_host" + : check.name === "java" && check.code === "runtime_missing" + ? "missing_dependency" + : configured + ? "config_drift" + : "missing_analysis_engine", +}); diff --git a/src/ghidra/GhidraInstallation.ts b/src/ghidra/GhidraInstallation.ts new file mode 100644 index 000000000..e10d74a69 --- /dev/null +++ b/src/ghidra/GhidraInstallation.ts @@ -0,0 +1,378 @@ +import { spawnSync } from "node:child_process"; +import { constants } from "node:fs"; +import { accessSync, readFileSync } from "node:fs"; +import { delimiter, join } from "node:path"; + +import type { ProviderRejectionCode } from "../contracts/providerSelection.js"; +import type { JsonValue } from "../domain/jsonValue.js"; + +/** Exact Ghidra build whose Java bridge contract this REA release supports. */ +export const SUPPORTED_GHIDRA_VERSION = "12.1.2"; +/** Exact JDK major documented by the supported Ghidra release. */ +export const SUPPORTED_GHIDRA_JAVA_MAJOR = 21; + +/** Caller-owned paths and host coordinates used for one installation probe. */ +export interface GhidraInstallationOptions { + readonly installDir?: string; + readonly javaHome?: string; + readonly platform?: NodeJS.Platform; + readonly architecture?: NodeJS.Architecture; +} + +/** One independently actionable part of the supported-installation contract. */ +export interface GhidraInstallationCheck { + readonly name: + | "configuration" + | "platform" + | "architecture" + | "installation" + | "version" + | "headless" + | "java"; + readonly ok: boolean; + readonly code: ProviderRejectionCode | null; + readonly detail: string; + readonly remediation: string | null; +} + +/** Bounded observation of a BYO Ghidra installation and JDK. */ +export interface GhidraInstallationInspection { + readonly available: boolean; + readonly platform: NodeJS.Platform; + readonly architecture: NodeJS.Architecture; + readonly installDir: string | null; + readonly analyzeHeadlessPath: string | null; + readonly applicationPropertiesPath: string | null; + readonly providerVersion: string | null; + readonly javaCommand: string; + readonly javaHome: string | null; + readonly javaVersion: string | null; + readonly checks: readonly GhidraInstallationCheck[]; + readonly rejectionCode: ProviderRejectionCode | null; + readonly reason: string | null; +} + +/** Parsed identity of the JDK selected for Ghidra. */ +export interface GhidraJavaObservation { + readonly version: string; + readonly major: number; + readonly home: string; + readonly bits: number; + readonly jdk: boolean; +} + +/** Narrow synchronous seam used by provider discovery without launching Ghidra. */ +export interface GhidraInstallationHost { + readText(path: string): string | undefined; + executable(path: string): boolean; + probeJava( + command: string, + environment: NodeJS.ProcessEnv, + ): GhidraJavaObservation | undefined; +} + +interface GhidraInstallationCoordinates { + readonly installDir: string | null; + readonly applicationPropertiesPath: string | null; + readonly analyzeHeadlessPath: string | null; + readonly propertiesAvailable: boolean; + readonly providerVersion: string | null; + readonly javaCommand: string; + readonly java: GhidraJavaObservation | undefined; +} + +interface GhidraInstallationCheckContext { + readonly coordinates: GhidraInstallationCoordinates; + readonly platform: NodeJS.Platform; + readonly architecture: NodeJS.Architecture; + readonly javaHome: string | undefined; + readonly host: GhidraInstallationHost; +} + +/** Inspect an installation without importing a target or modifying Ghidra. */ +export const inspectGhidraInstallation = ( + options: GhidraInstallationOptions, + host: GhidraInstallationHost = systemGhidraInstallationHost(), +): GhidraInstallationInspection => { + const platform = options.platform ?? process.platform; + const architecture = options.architecture ?? process.arch; + const coordinates = installationCoordinates(options, host); + const checks = installationChecks({ + coordinates, + platform, + architecture, + javaHome: options.javaHome, + host, + }); + const failed = checks.find(({ ok }) => !ok); + return { + available: failed === undefined, + platform, + architecture, + installDir: coordinates.installDir, + analyzeHeadlessPath: coordinates.analyzeHeadlessPath, + applicationPropertiesPath: coordinates.applicationPropertiesPath, + providerVersion: coordinates.providerVersion, + javaCommand: coordinates.javaCommand, + javaHome: coordinates.java?.home ?? options.javaHome ?? null, + javaVersion: coordinates.java?.version ?? null, + checks, + rejectionCode: failed?.code ?? null, + reason: failed?.remediation ?? null, + }; +}; + +const installationCoordinates = ( + options: GhidraInstallationOptions, + host: GhidraInstallationHost, +): GhidraInstallationCoordinates => { + const installDir = options.installDir ?? null; + const applicationPropertiesPath = + installDir === null + ? null + : join(installDir, "Ghidra", "application.properties"); + const analyzeHeadlessPath = + installDir === null ? null : join(installDir, "support", "analyzeHeadless"); + const properties = + applicationPropertiesPath === null + ? undefined + : host.readText(applicationPropertiesPath); + const javaCommand = + options.javaHome === undefined + ? "java" + : join(options.javaHome, "bin", "java"); + return { + installDir, + applicationPropertiesPath, + analyzeHeadlessPath, + propertiesAvailable: properties !== undefined, + providerVersion: + properties === undefined + ? null + : propertyValue(properties, "application.version"), + javaCommand, + java: host.probeJava(javaCommand, ghidraJavaEnvironment(options.javaHome)), + }; +}; + +const installationChecks = ({ + coordinates, + platform, + architecture, + javaHome, + host, +}: GhidraInstallationCheckContext): readonly GhidraInstallationCheck[] => [ + installationCheck({ + name: "configuration", + ok: coordinates.installDir !== null, + code: "not_configured", + detail: coordinates.installDir ?? "GHIDRA_INSTALL_DIR is not set", + remediation: + "Set GHIDRA_INSTALL_DIR to an extracted Ghidra 12.1.2 release directory.", + }), + installationCheck({ + name: "platform", + ok: platform === "linux", + code: "unsupported_host", + detail: platform, + remediation: "REA's Ghidra v1 adapter currently supports Linux only.", + }), + installationCheck({ + name: "architecture", + ok: architecture === "x64", + code: "unsupported_host", + detail: architecture, + remediation: + "Use the official Linux x86-64 Ghidra distribution on an x64 host.", + }), + installationCheck({ + name: "installation", + ok: coordinates.propertiesAvailable, + code: "executable_missing", + detail: + coordinates.applicationPropertiesPath ?? + "Ghidra application properties unavailable", + remediation: + "Point GHIDRA_INSTALL_DIR at the root of an extracted official Ghidra release.", + }), + installationCheck({ + name: "version", + ok: coordinates.providerVersion === SUPPORTED_GHIDRA_VERSION, + code: + coordinates.providerVersion === null + ? "version_unresolved" + : "unsupported_version", + detail: coordinates.providerVersion ?? "unknown", + remediation: `Install Ghidra ${SUPPORTED_GHIDRA_VERSION}, or update REA for a different Ghidra build.`, + }), + installationCheck({ + name: "headless", + ok: + coordinates.analyzeHeadlessPath !== null && + host.executable(coordinates.analyzeHeadlessPath), + code: "executable_missing", + detail: coordinates.analyzeHeadlessPath ?? "analyzeHeadless unavailable", + remediation: + "Restore the executable support/analyzeHeadless script from the official Ghidra release.", + }), + javaCheck(coordinates.java, coordinates.javaCommand, javaHome), +]; + +/** Project an installation probe into caller-visible, secret-free diagnostics. */ +export const ghidraInstallationDiagnostics = ( + inspection: GhidraInstallationInspection, +): Readonly> => ({ + install_dir: inspection.installDir, + analyze_headless_path: inspection.analyzeHeadlessPath, + application_properties_path: inspection.applicationPropertiesPath, + provider_version: inspection.providerVersion, + java_command: inspection.javaCommand, + java_home: inspection.javaHome, + java_version: inspection.javaVersion, + platform: inspection.platform, + architecture: inspection.architecture, + checks: inspection.checks.map((check) => ({ + name: check.name, + ok: check.ok, + code: check.code, + detail: check.detail, + })), +}); + +/** Environment that makes an explicitly selected JDK win over PATH discovery. */ +export const ghidraJavaEnvironment = ( + javaHome: string | undefined, + environment: NodeJS.ProcessEnv = process.env, +): NodeJS.ProcessEnv => { + const boundedEnvironment = { + ...environment, + _JAVA_OPTIONS: "", + JAVA_TOOL_OPTIONS: "", + JDK_JAVA_OPTIONS: "", + GHIDRA_JAVA_OPTIONS: "", + }; + return javaHome === undefined + ? boundedEnvironment + : { + ...boundedEnvironment, + JAVA_HOME: javaHome, + PATH: `${join(javaHome, "bin")}${delimiter}${environment.PATH ?? ""}`, + }; +}; + +const installationCheck = ( + options: Omit & { + readonly code: ProviderRejectionCode; + readonly remediation: string; + }, +): GhidraInstallationCheck => ({ + name: options.name, + ok: options.ok, + code: options.ok ? null : options.code, + detail: options.detail, + remediation: options.ok ? null : options.remediation, +}); + +const javaCheck = ( + observation: GhidraJavaObservation | undefined, + command: string, + configuredHome: string | undefined, +): GhidraInstallationCheck => { + const supported = + observation !== undefined && + observation.major === SUPPORTED_GHIDRA_JAVA_MAJOR && + observation.bits === 64 && + observation.jdk; + const detail = + observation === undefined + ? command + : `${observation.version}; ${String(observation.bits)}-bit; ${observation.jdk ? "JDK" : "runtime only"}; ${observation.home}`; + return installationCheck({ + name: "java", + ok: supported, + code: observation === undefined ? "runtime_missing" : "unsupported_version", + detail, + remediation: + configuredHome === undefined + ? "Install a 64-bit JDK 21 or set JAVA_HOME before starting REA." + : "Update JAVA_HOME to the root of a 64-bit JDK 21 installation.", + }); +}; + +const propertyValue = (content: string, name: string): string | null => { + for (const line of content.split(/\r?\n/u)) { + const separator = line.indexOf("="); + if (separator < 0 || line.slice(0, separator).trim() !== name) continue; + const value = line.slice(separator + 1).trim(); + return value.length === 0 ? null : value; + } + return null; +}; + +const systemGhidraInstallationHost = (): GhidraInstallationHost => ({ + readText(path) { + try { + return readFileSync(path, "utf8"); + } catch { + return undefined; + } + }, + executable(path) { + try { + accessSync(path, constants.X_OK); + return true; + } catch { + return false; + } + }, + probeJava(command, environment) { + const observed = spawnSync( + command, + ["-XshowSettings:properties", "-version"], + { + encoding: "utf8", + env: environment, + timeout: 5_000, + maxBuffer: 128 * 1024, + windowsHide: true, + }, + ); + if (observed.error !== undefined || observed.status !== 0) return undefined; + const output = `${observed.stdout ?? ""}\n${observed.stderr ?? ""}`; + const version = javaProperty(output, "java.version"); + const home = javaProperty(output, "java.home"); + const bits = Number.parseInt( + javaProperty(output, "sun.arch.data.model") ?? "0", + 10, + ); + if (version === null || home === null) return undefined; + return { + version, + major: javaMajor(version), + home, + bits, + jdk: executablePath(join(home, "bin", "javac")), + }; + }, +}); + +const executablePath = (path: string): boolean => { + try { + accessSync(path, constants.X_OK); + return true; + } catch { + return false; + } +}; + +const javaProperty = (output: string, name: string): string | null => + new RegExp( + `^\\s*${name.replaceAll(".", "\\.")}\\s*=\\s*(.+?)\\s*$`, + "mu", + ).exec(output)?.[1] ?? null; + +const javaMajor = (version: string): number => { + const first = Number.parseInt(version.split(".")[0] ?? "0", 10); + if (first !== 1) return first; + return Number.parseInt(version.split(".")[1] ?? "0", 10); +}; diff --git a/src/ghidra/GhidraLauncher.ts b/src/ghidra/GhidraLauncher.ts new file mode 100644 index 000000000..accd68ab2 --- /dev/null +++ b/src/ghidra/GhidraLauncher.ts @@ -0,0 +1,217 @@ +import { mkdir } from "node:fs/promises"; +import { basename, dirname, join } from "node:path"; + +import writeFileAtomic from "write-file-atomic"; + +import { AnalysisCancelledError } from "../domain/errors.js"; +import { err, ok, type Result } from "../domain/result.js"; +import { cleanupOwnedProcessGroup } from "../process/ProcessOwnership.js"; +import { + type ProviderProcessLaunch, + type SpawnedOwnedProviderProcess, + spawnOwnedProviderProcess, +} from "../process/ProviderProcess.js"; +import { + GHIDRA_ANALYSIS_TIMEOUT_SECONDS, + GHIDRA_MAX_CPU, + GHIDRA_MAX_HEAP, +} from "./GhidraDefaults.js"; +import { ghidraJavaEnvironment } from "./GhidraInstallation.js"; + +/** Private paths and identity material for one headless Ghidra import. */ +export interface GhidraLaunchSession { + readonly runtimeRoot: string; + readonly socketPath: string; + readonly token: string; + readonly runId: string; + readonly targetPath: string; + readonly providerVersion: string; + readonly profileDigest: string; +} + +/** Process plus private log coordinates returned by a Ghidra launcher. */ +export interface GhidraLaunch extends ProviderProcessLaunch { + readonly projectRoot: string; + readonly ghidraLogPath: string; + readonly scriptLogPath: string; +} + +/** Provider-owned capability that starts one isolated headless analysis. */ +export interface GhidraLauncher { + launch( + session: GhidraLaunchSession, + options?: { readonly signal?: AbortSignal }, + ): Promise>; +} + +/** Local launch failure retained as the cause of a provider-neutral error. */ +export class GhidraLaunchError extends Error { + constructor(message: string, options?: ErrorOptions) { + super(message, options); + this.name = "GhidraLaunchError"; + } +} + +/** Static coordinates for an extracted Ghidra release and packaged script. */ +export interface GhidraHeadlessLauncherOptions { + readonly analyzeHeadlessPath: string; + readonly javaHome?: string; + readonly bridgeScriptPath: string; +} + +/** Launch Ghidra without copying scripts into or modifying its installation. */ +export class GhidraHeadlessLauncher implements GhidraLauncher { + constructor(readonly options: GhidraHeadlessLauncherOptions) {} + + async launch( + session: GhidraLaunchSession, + options: { readonly signal?: AbortSignal } = {}, + ): Promise> { + if (isAborted(options.signal)) + return err(new AnalysisCancelledError("open_binary")); + const paths = ghidraRuntimePaths(session.runtimeRoot); + let started: SpawnedOwnedProviderProcess | undefined; + try { + await Promise.all( + [ + paths.projectRoot, + paths.homeRoot, + paths.tempRoot, + paths.cacheRoot, + paths.configRoot, + paths.dataRoot, + ].map((path) => mkdir(path, { recursive: true, mode: 0o700 })), + ); + await writeFileAtomic( + paths.descriptorPath, + `${JSON.stringify({ + schema_version: 1, + socket_path: session.socketPath, + token: session.token, + run_id: session.runId, + provider_version: session.providerVersion, + profile_digest: session.profileDigest, + })}\n`, + { encoding: "utf8", mode: 0o600 }, + ); + if (isAborted(options.signal)) + return err(new AnalysisCancelledError("open_binary")); + started = await spawnOwnedProviderProcess({ + command: this.options.analyzeHeadlessPath, + arguments: ghidraHeadlessArguments({ + projectRoot: paths.projectRoot, + targetPath: session.targetPath, + bridgeScriptPath: this.options.bridgeScriptPath, + descriptorPath: paths.descriptorPath, + ghidraLogPath: paths.ghidraLogPath, + scriptLogPath: paths.scriptLogPath, + }), + runId: session.runId, + // analyzeHeadless is an interpreter-driven script. Parent identity and + // the per-process run token remain the cleanup authority. + expectedCommand: null, + env: ghidraLaunchEnvironment(paths, this.options.javaHome), + }); + await writeFileAtomic( + paths.ownershipPath, + `${JSON.stringify({ + schema_version: 1, + run_id: session.runId, + pid: started.ownership.leaderPid, + process_group_id: started.ownership.processGroupId, + parent_pid: process.pid, + launcher: this.options.analyzeHeadlessPath, + created_at: new Date().toISOString(), + })}\n`, + { encoding: "utf8", mode: 0o600 }, + ); + if (isAborted(options.signal)) { + await cleanupOwnedProcessGroup(started.ownership); + return err(new AnalysisCancelledError("open_binary")); + } + const ownership = started.ownership; + return ok({ + process: started.process, + ownsProcessLifetime: true, + cleanup: () => cleanupOwnedProcessGroup(ownership), + projectRoot: paths.projectRoot, + ghidraLogPath: paths.ghidraLogPath, + scriptLogPath: paths.scriptLogPath, + }); + } catch (cause: unknown) { + if (started !== undefined) + await cleanupOwnedProcessGroup(started.ownership).catch( + () => undefined, + ); + return isAborted(options.signal) + ? err(new AnalysisCancelledError("open_binary")) + : err( + new GhidraLaunchError("Ghidra headless launch failed", { cause }), + ); + } + } +} + +/** Paths encoded into one bounded analyzeHeadless invocation. */ +export interface GhidraHeadlessArgumentOptions { + readonly projectRoot: string; + readonly targetPath: string; + readonly bridgeScriptPath: string; + readonly descriptorPath: string; + readonly ghidraLogPath: string; + readonly scriptLogPath: string; +} + +/** Build the complete read-only headless invocation in deterministic order. */ +export const ghidraHeadlessArguments = ( + options: GhidraHeadlessArgumentOptions, +): readonly string[] => [ + options.projectRoot, + "rea-project", + "-import", + options.targetPath, + "-readOnly", + "-deleteProject", + "-analysisTimeoutPerFile", + String(GHIDRA_ANALYSIS_TIMEOUT_SECONDS), + "-max-cpu", + String(GHIDRA_MAX_CPU), + "-log", + options.ghidraLogPath, + "-scriptlog", + options.scriptLogPath, + "-scriptPath", + dirname(options.bridgeScriptPath), + "-postScript", + basename(options.bridgeScriptPath), + options.descriptorPath, +]; + +const ghidraRuntimePaths = (runtimeRoot: string) => ({ + projectRoot: join(runtimeRoot, "project"), + homeRoot: join(runtimeRoot, "home"), + tempRoot: join(runtimeRoot, "tmp"), + cacheRoot: join(runtimeRoot, "cache"), + configRoot: join(runtimeRoot, "config"), + dataRoot: join(runtimeRoot, "data"), + descriptorPath: join(runtimeRoot, "session.json"), + ownershipPath: join(runtimeRoot, "ownership.json"), + ghidraLogPath: join(runtimeRoot, "ghidra.log"), + scriptLogPath: join(runtimeRoot, "script.log"), +}); + +const ghidraLaunchEnvironment = ( + paths: ReturnType, + javaHome: string | undefined, +): NodeJS.ProcessEnv => ({ + ...ghidraJavaEnvironment(javaHome), + HOME: paths.homeRoot, + TMPDIR: paths.tempRoot, + XDG_CACHE_HOME: paths.cacheRoot, + XDG_CONFIG_HOME: paths.configRoot, + XDG_DATA_HOME: paths.dataRoot, + GHIDRA_HEADLESS_MAXMEM: GHIDRA_MAX_HEAP, + GHIDRA_HEADLESS_JAVA_OPTIONS: `-Duser.home=${paths.homeRoot} -Djava.io.tmpdir=${paths.tempRoot}`, +}); + +const isAborted = (signal?: AbortSignal): boolean => signal?.aborted === true; diff --git a/src/ghidra/GhidraProvider.ts b/src/ghidra/GhidraProvider.ts new file mode 100644 index 000000000..af3ed5724 --- /dev/null +++ b/src/ghidra/GhidraProvider.ts @@ -0,0 +1,275 @@ +import { fileURLToPath } from "node:url"; + +import { + createAnalysisExecution, + type AnalysisClient, + type AnalysisOperation, + type AnalysisProfileResolutionOptions, + type AnalysisProviderCandidate, + type CapabilityDescriptor, + type ProviderAvailability, + type ProviderIdentity, + type ProviderTargetSupport, +} from "../application/AnalysisProvider.js"; +import type { AppConfig } from "../config.js"; +import type { AnalysisProfileCommitment } from "../domain/analysisProfile.js"; +import type { BinaryTarget } from "../domain/binaryTarget.js"; +import { + AnalysisCancelledError, + AnalysisCapabilityUnavailableError, + type AnalysisError, + AnalysisTimeoutError, + ProviderAdapterError, +} from "../domain/errors.js"; +import { err, ok, type Result } from "../domain/result.js"; +import type { Logger } from "../logger.js"; +import { GhidraClient } from "./GhidraClient.js"; +import { + GHIDRA_ANALYSIS_TIMEOUT_SECONDS, + GHIDRA_STARTUP_TIMEOUT_MS, +} from "./GhidraDefaults.js"; +import { + ghidraInstallationDiagnostics, + inspectGhidraInstallation, + type GhidraInstallationHost, + type GhidraInstallationInspection, +} from "./GhidraInstallation.js"; +import { GhidraHeadlessLauncher } from "./GhidraLauncher.js"; +import { resolveGhidraAnalysisProfile } from "./GhidraAnalysisProfile.js"; +import type { GhidraSessionError } from "./GhidraSessionError.js"; + +/** Public identity committed by every Ghidra-backed observation. */ +export const GHIDRA_PROVIDER_IDENTITY: ProviderIdentity = Object.freeze({ + id: "ghidra", + name: "Ghidra", + version: null, +}); + +/** PR07 intentionally exposes session health but no binary operation contract. */ +export const GHIDRA_PROVIDER_TOOL_CONTRACTS: readonly CapabilityDescriptor[] = + Object.freeze([]); + +const SUPPORTED_ARCHITECTURES = new Set(["x86", "x86_64", "arm", "arm64"]); +const SUPPORTED_FORMATS = new Set(["elf", "pe", "mach-o"]); + +/** Linux Ghidra candidate backed by an isolated read-only headless import. */ +export class GhidraProvider implements AnalysisProviderCandidate { + #installation: GhidraInstallationInspection | undefined; + + constructor( + private readonly config: AppConfig, + private readonly logger: Logger, + private readonly installationHost?: GhidraInstallationHost, + ) {} + + identity(): ProviderIdentity { + return GHIDRA_PROVIDER_IDENTITY; + } + + capabilities(): readonly CapabilityDescriptor[] { + return GHIDRA_PROVIDER_TOOL_CONTRACTS; + } + + inspectAvailability(): ProviderAvailability { + const installation = this.#inspectInstallation(); + const diagnostics = ghidraInstallationDiagnostics(installation); + return installation.available + ? { + status: "available", + code: null, + reason: null, + diagnostics, + } + : { + status: "unavailable", + code: installation.rejectionCode ?? "not_configured", + reason: + installation.reason ?? "Ghidra installation is not available.", + diagnostics, + }; + } + + inspectTargetSupport(target: BinaryTarget): ProviderTargetSupport { + const diagnostics = { + target_kind: target.kind, + target_format: target.format, + architecture: target.architecture ?? null, + }; + if (target.kind !== "executable") + return { + status: "unsupported", + code: "target_kind_unsupported", + reason: `Ghidra v1 imports executable targets, not ${target.kind} targets.`, + diagnostics, + }; + if (!SUPPORTED_FORMATS.has(target.format)) + return { + status: "unsupported", + code: "target_format_unsupported", + reason: `Ghidra v1 does not import ${target.format} through this adapter.`, + diagnostics, + }; + if ( + target.architecture === undefined || + !SUPPORTED_ARCHITECTURES.has(target.architecture) + ) + return { + status: "unsupported", + code: "architecture_unsupported", + reason: + "Ghidra v1 requires a concrete x86, x86_64, arm, or arm64 target architecture.", + diagnostics, + }; + return { + status: "supported", + code: null, + reason: null, + diagnostics, + }; + } + + resolveAnalysisProfile( + target: BinaryTarget, + options?: AnalysisProfileResolutionOptions, + ) { + return resolveGhidraAnalysisProfile( + target, + GHIDRA_PROVIDER_IDENTITY, + this.#inspectInstallation(), + options?.signal, + ); + } + + createClient( + target: BinaryTarget, + profile?: AnalysisProfileCommitment, + ): AnalysisClient { + const installation = this.#inspectInstallation(); + const prerequisites = ghidraClientPrerequisites( + target, + profile, + installation, + ); + if (!prerequisites.ok) return unavailableClient(prerequisites.error); + const committedProfile = prerequisites.value.profile; + const client = new GhidraClient({ + launcher: new GhidraHeadlessLauncher({ + analyzeHeadlessPath: prerequisites.value.analyzeHeadlessPath, + ...(this.config.ghidraJavaHome === undefined + ? {} + : { javaHome: this.config.ghidraJavaHome }), + bridgeScriptPath: fileURLToPath( + new URL("../../bridge/ghidra/ReaGhidraBridge.java", import.meta.url), + ), + }), + targetPath: target.path, + providerVersion: prerequisites.value.providerVersion, + profileDigest: committedProfile.digest, + logger: this.logger.child({ layer: "ghidra-bridge" }), + }); + return { + execute: async (operation, _parameters, options) => { + if (operation !== "health") + return err( + new AnalysisCapabilityUnavailableError( + GHIDRA_PROVIDER_IDENTITY.id, + operation, + "Ghidra binary operations are not declared by this adapter release.", + ), + ); + const started = await client.start(options?.signal); + if (!started.ok) + return err(projectSessionError(operation, started.error)); + return ok( + createAnalysisExecution(started.value, committedProfile.provider, { + analysisProfile: committedProfile, + limitations: [ + "The session proves completed default Ghidra auto-analysis but exposes no binary operations in this release.", + "The imported program and project are ephemeral and externally read-only.", + ], + }), + ); + }, + close: () => client.close(), + }; + } + + #inspectInstallation(): GhidraInstallationInspection { + const options = { + ...(this.config.ghidraInstallDir === undefined + ? {} + : { installDir: this.config.ghidraInstallDir }), + ...(this.config.ghidraJavaHome === undefined + ? {} + : { javaHome: this.config.ghidraJavaHome }), + }; + this.#installation ??= + this.installationHost === undefined + ? inspectGhidraInstallation(options) + : inspectGhidraInstallation(options, this.installationHost); + return this.#installation; + } +} + +interface GhidraClientCoordinates { + readonly analyzeHeadlessPath: string; + readonly providerVersion: string; + readonly profile: AnalysisProfileCommitment; +} + +const ghidraClientPrerequisites = ( + target: BinaryTarget, + profile: AnalysisProfileCommitment | undefined, + installation: GhidraInstallationInspection, +): Result => { + if (target.kind !== "executable") + return err( + new AnalysisCapabilityUnavailableError( + "ghidra", + "health", + `Ghidra cannot import ${target.kind} targets through this adapter.`, + ), + ); + if ( + !installation.available || + installation.analyzeHeadlessPath === null || + installation.providerVersion === null + ) + return err( + new ProviderAdapterError("ghidra", "health", { + diagnostics: ghidraInstallationDiagnostics(installation), + }), + ); + if (profile === undefined || profile.provider.id !== "ghidra") + return err(new ProviderAdapterError("ghidra", "health")); + return ok({ + analyzeHeadlessPath: installation.analyzeHeadlessPath, + providerVersion: installation.providerVersion, + profile, + }); +}; + +const unavailableClient = (failure: AnalysisError): AnalysisClient => ({ + execute: () => Promise.resolve(err(failure)), + close: () => Promise.resolve(), +}); + +const projectSessionError = ( + operation: AnalysisOperation, + failure: GhidraSessionError, +): AnalysisError => { + if (failure.kind === "cancelled") + return new AnalysisCancelledError(operation); + if (failure.kind === "timeout" || failure.kind === "analysis_timeout") + return new AnalysisTimeoutError( + operation, + failure.timeoutMs ?? + (failure.kind === "analysis_timeout" + ? GHIDRA_ANALYSIS_TIMEOUT_SECONDS * 1_000 + : GHIDRA_STARTUP_TIMEOUT_MS), + ); + return new ProviderAdapterError("ghidra", operation, { + cause: failure, + diagnostics: failure.diagnostics, + }); +}; diff --git a/src/ghidra/GhidraResponseBuffer.ts b/src/ghidra/GhidraResponseBuffer.ts new file mode 100644 index 000000000..1ba59df0b --- /dev/null +++ b/src/ghidra/GhidraResponseBuffer.ts @@ -0,0 +1,42 @@ +/** Callbacks for one bounded newline-delimited Ghidra response stream. */ +export interface GhidraResponseBufferOptions { + readonly maxLineBytes: number; + readonly onLine: (line: string) => void; + readonly onFailure: (message: string) => void; +} + +/** Splits fragmented UTF-8 socket data while enforcing a byte limit per line. */ +export class GhidraResponseBuffer { + readonly #options: GhidraResponseBufferOptions; + #buffer = ""; + + constructor(options: GhidraResponseBufferOptions) { + this.#options = options; + } + + /** Consume one decoded socket chunk. */ + push(chunk: string): void { + this.#buffer += chunk; + let newline = this.#buffer.indexOf("\n"); + while (newline >= 0) { + const encodedLine = this.#buffer.slice(0, newline); + this.#buffer = this.#buffer.slice(newline + 1); + if (Buffer.byteLength(encodedLine) > this.#options.maxLineBytes) { + this.#options.onFailure( + "Ghidra response exceeded the maximum line size", + ); + return; + } + const line = encodedLine.trim(); + if (line.length > 0) this.#options.onLine(line); + newline = this.#buffer.indexOf("\n"); + } + if (Buffer.byteLength(this.#buffer) > this.#options.maxLineBytes) + this.#options.onFailure("Ghidra response exceeded the maximum line size"); + } + + /** Drop any incomplete line when a session closes. */ + reset(): void { + this.#buffer = ""; + } +} diff --git a/src/ghidra/GhidraResponseRouter.ts b/src/ghidra/GhidraResponseRouter.ts new file mode 100644 index 000000000..e92794571 --- /dev/null +++ b/src/ghidra/GhidraResponseRouter.ts @@ -0,0 +1,46 @@ +import type { JsonValue } from "../domain/jsonValue.js"; +import { err, type Result } from "../domain/result.js"; +import type { PendingOperations } from "../process/PendingOperations.js"; +import type { GhidraSessionError } from "./GhidraSessionError.js"; +import { ghidraResponseResult, parseGhidraResponseLine } from "./protocol.js"; + +/** Dependencies for correlating validated bridge responses. */ +export interface GhidraResponseRouterOptions { + readonly pending: PendingOperations< + number, + Result + >; + readonly nextId: () => number; + readonly remoteFailure: (message: string, cause: Error) => GhidraSessionError; + readonly protocolFailure: (message: string, cause?: Error) => void; +} + +/** Routes validated response IDs without giving the wire protocol client state. */ +export class GhidraResponseRouter { + readonly #options: GhidraResponseRouterOptions; + + constructor(options: GhidraResponseRouterOptions) { + this.#options = options; + } + + /** Parse and settle one complete response line. */ + route(line: string): void { + const parsed = parseGhidraResponseLine(line); + if (!parsed.ok) { + this.#options.protocolFailure(parsed.error.message, parsed.error); + return; + } + if (!this.#options.pending.has(parsed.value.id)) { + if (parsed.value.id >= this.#options.nextId()) + this.#options.protocolFailure("Ghidra returned an unknown response id"); + return; + } + const result = ghidraResponseResult(parsed.value); + this.#options.pending.settle( + parsed.value.id, + result.ok + ? result + : err(this.#options.remoteFailure(result.error.message, result.error)), + ); + } +} diff --git a/src/ghidra/GhidraSessionError.ts b/src/ghidra/GhidraSessionError.ts new file mode 100644 index 000000000..f0a2a0a3e --- /dev/null +++ b/src/ghidra/GhidraSessionError.ts @@ -0,0 +1,34 @@ +import type { JsonValue } from "../domain/jsonValue.js"; + +/** Stable failure phase for one private Ghidra headless session. */ +export type GhidraSessionFailureKind = + | "cancelled" + | "timeout" + | "start" + | "process" + | "protocol" + | "remote" + | "analysis_timeout"; + +/** Additional structured context for a Ghidra session failure. */ +export interface GhidraSessionErrorOptions extends ErrorOptions { + readonly timeoutMs?: number; +} + +/** Provider-owned failure with bounded, token-redacted local diagnostics. */ +export class GhidraSessionError extends Error { + readonly diagnostics: Readonly>; + readonly timeoutMs: number | undefined; + + constructor( + readonly kind: GhidraSessionFailureKind, + message: string, + diagnostics: Readonly> = {}, + options: GhidraSessionErrorOptions = {}, + ) { + super(message, options); + this.name = "GhidraSessionError"; + this.diagnostics = structuredClone(diagnostics); + this.timeoutMs = options.timeoutMs; + } +} diff --git a/src/ghidra/GhidraSessionValues.ts b/src/ghidra/GhidraSessionValues.ts new file mode 100644 index 000000000..81f9a98e8 --- /dev/null +++ b/src/ghidra/GhidraSessionValues.ts @@ -0,0 +1,66 @@ +import { z } from "zod"; + +import type { JsonValue } from "../domain/jsonValue.js"; +import { err, ok, type Result } from "../domain/result.js"; +import { GHIDRA_BRIDGE_VERSION } from "./GhidraDefaults.js"; + +const sessionInfoSchema = z + .object({ + name: z.literal("REA Ghidra bridge"), + bridge_version: z.literal(GHIDRA_BRIDGE_VERSION), + run_id: z.string().uuid(), + profile_digest: z.string().regex(/^[a-f0-9]{64}$/u), + provider: z + .object({ + id: z.literal("ghidra"), + version: z.string().min(1), + }) + .strict(), + read_only: z.literal(true), + analysis_complete: z.boolean(), + analysis_timed_out: z.boolean(), + capabilities: z.array(z.enum(["ping", "shutdown"])).max(2), + target: z + .object({ + name: z.string().min(1), + language_id: z.string().min(1), + compiler_spec_id: z.string().min(1), + }) + .strict(), + }) + .strict(); + +/** Authenticated metadata produced after Ghidra finishes auto-analysis. */ +export type GhidraSessionInfo = z.infer; + +/** Require exact run, provider, and profile identity from the Java bridge. */ +export const parseGhidraSessionInfo = ( + value: JsonValue, + expected: { + readonly runId: string; + readonly providerVersion: string; + readonly profileDigest: string; + }, +): Result => { + const parsed = sessionInfoSchema.safeParse(value); + if ( + !parsed.success || + parsed.data.run_id !== expected.runId || + parsed.data.provider.version !== expected.providerVersion || + parsed.data.profile_digest !== expected.profileDigest || + new Set(parsed.data.capabilities).size !== 2 || + !parsed.data.capabilities.includes("ping") || + !parsed.data.capabilities.includes("shutdown") || + parsed.data.analysis_complete === parsed.data.analysis_timed_out + ) + return err(new Error("Ghidra bridge handshake identity is invalid")); + return ok(parsed.data); +}; + +/** Require acknowledgement that the private bridge loop has ended. */ +export const isGhidraShutdownAcknowledgement = (value: JsonValue): boolean => + typeof value === "object" && + value !== null && + !Array.isArray(value) && + value.shutdown === true && + value.project_ephemeral === true; diff --git a/src/ghidra/GhidraSocketConnection.ts b/src/ghidra/GhidraSocketConnection.ts new file mode 100644 index 000000000..28b9fa01b --- /dev/null +++ b/src/ghidra/GhidraSocketConnection.ts @@ -0,0 +1,74 @@ +import { createConnection, type Socket } from "node:net"; + +import { err, ok, type Result } from "../domain/result.js"; +import { GhidraSessionError } from "./GhidraSessionError.js"; + +/** Stable listeners attached for the lifetime of one bridge socket. */ +export interface GhidraSocketHandlers { + readonly data: (chunk: string) => void; + readonly error: () => void; + readonly close: () => void; +} + +/** Attach decoded bridge listeners and return an idempotent detach callback. */ +export const attachGhidraSocket = ( + socket: Socket, + handlers: GhidraSocketHandlers, +): (() => void) => { + socket.setEncoding("utf8"); + socket.on("data", handlers.data); + socket.on("error", handlers.error); + socket.on("close", handlers.close); + return () => { + socket.off("data", handlers.data); + socket.off("error", handlers.error); + socket.off("close", handlers.close); + }; +}; + +/** Open one abort-aware Ghidra Unix-socket connection attempt. */ +export const connectGhidraSocketOnce = ( + socketPath: string, + signal: AbortSignal, +): Promise> => + new Promise((resolve) => { + const socket = createConnection(socketPath); + const detach = (): void => { + socket.off("connect", onConnect); + socket.off("error", onError); + signal.removeEventListener("abort", onAbort); + }; + const onConnect = (): void => { + detach(); + resolve(ok(socket)); + }; + const onError = (cause: Error): void => { + detach(); + socket.destroy(); + resolve( + err( + new GhidraSessionError("start", "Ghidra bridge connection failed", { + socket_path: socketPath, + error: cause.message, + }), + ), + ); + }; + const onAbort = (): void => { + detach(); + socket.destroy(); + resolve( + err( + new GhidraSessionError( + "cancelled", + "Ghidra bridge connection was cancelled", + { socket_path: socketPath }, + ), + ), + ); + }; + socket.once("connect", onConnect); + socket.once("error", onError); + signal.addEventListener("abort", onAbort, { once: true }); + if (signal.aborted) onAbort(); + }); diff --git a/src/ghidra/protocol.ts b/src/ghidra/protocol.ts new file mode 100644 index 000000000..900283488 --- /dev/null +++ b/src/ghidra/protocol.ts @@ -0,0 +1,77 @@ +import { z } from "zod"; + +import { jsonValueSchema, type JsonValue } from "../domain/jsonValue.js"; +import { err, ok, type Result } from "../domain/result.js"; + +const responseSchema = z + .object({ + id: z.number().int().positive(), + ok: z.boolean(), + result: jsonValueSchema.optional(), + error: z + .object({ + code: z.string().min(1).max(128), + message: z.string().min(1).max(4_096), + }) + .strict() + .optional(), + }) + .strict() + .superRefine((value, context) => { + if (value.ok && value.result === undefined) + context.addIssue({ + code: "custom", + path: ["result"], + message: "Successful Ghidra response requires a result", + }); + if (!value.ok && value.error === undefined) + context.addIssue({ + code: "custom", + path: ["error"], + message: "Failed Ghidra response requires an error", + }); + if (!value.ok && value.result !== undefined) + context.addIssue({ + code: "custom", + path: ["result"], + message: "Failed Ghidra response cannot include a result", + }); + if (value.ok && value.error !== undefined) + context.addIssue({ + code: "custom", + path: ["error"], + message: "Successful Ghidra response cannot include an error", + }); + }); + +/** Validated response emitted by REA's packaged Ghidra script. */ +export type GhidraBridgeResponse = z.infer; + +/** Parse one complete Java-bridge response without accepting extra fields. */ +export const parseGhidraResponseLine = ( + line: string, +): Result => { + try { + const parsed: unknown = JSON.parse(line); + const response = responseSchema.safeParse(parsed); + return response.success + ? ok(response.data) + : err(new Error("Ghidra bridge response has an invalid shape")); + } catch (cause: unknown) { + return err( + new Error("Ghidra bridge response is not valid JSON", { cause }), + ); + } +}; + +/** Project one validated response into its result or remote failure. */ +export const ghidraResponseResult = ( + response: GhidraBridgeResponse, +): Result => + response.ok + ? ok(response.result ?? null) + : err( + new Error( + `${response.error?.code ?? "bridge_error"}: ${response.error?.message ?? "Ghidra bridge request failed"}`, + ), + ); diff --git a/src/process/ProviderProcess.ts b/src/process/ProviderProcess.ts index 178f9295c..be3b4d01f 100644 --- a/src/process/ProviderProcess.ts +++ b/src/process/ProviderProcess.ts @@ -15,7 +15,8 @@ export interface OwnedProviderProcessSpawnOptions { readonly command: string; readonly arguments: readonly string[]; readonly runId: string; - readonly expectedCommand?: string; + /** Null disables argv-prefix matching for interpreter-driven launch scripts. */ + readonly expectedCommand?: string | null; readonly cwd?: string; readonly env?: NodeJS.ProcessEnv; } @@ -120,8 +121,10 @@ export const spawnOwnedProviderProcess = async ( runId: options.runId, leaderPid: pid, processGroupId: pid, - expectedCommand: options.expectedCommand ?? options.command, expectedParentPid: process.pid, + ...(options.expectedCommand === null + ? {} + : { expectedCommand: options.expectedCommand ?? options.command }), }; return { process: child, ownership }; }; diff --git a/tests/cdpBrowserProvider.test.ts b/tests/cdpBrowserProvider.test.ts index 3a8ce3a5e..92c0547db 100644 --- a/tests/cdpBrowserProvider.test.ts +++ b/tests/cdpBrowserProvider.test.ts @@ -53,6 +53,36 @@ describe("CdpBrowserProvider", () => { expect(JSON.stringify(result.value)).not.toContain("page-secret"); }); + it("sanitizes URL-shaped transitional target titles", async () => { + const browser = await startFakeCdpBrowser({ + urlShapedAllowedTitle: true, + }); + browsers.push(browser); + const provider = new CdpBrowserProvider(); + const input = { + cdp_endpoint: browser.endpoint, + allowed_origins: [browser.allowedOrigin], + approved: true as const, + target_id: "allowed-page", + }; + const listed = await provider.listTargets( + listBrowserTargetsInputSchema.parse(input), + ); + if (!listed.ok) throw listed.error; + expect(listed.value.targets.items[0]?.title).toBe( + `${browser.allowedOrigin}/app?startup=%5BREDACTED%5D`, + ); + + const inspected = await provider.inspectPage( + inspectWebPageInputSchema.parse({ ...input, observation_ms: 0 }), + ); + if (!inspected.ok) throw inspected.error; + expect(inspected.value.target.title).toBe( + `${browser.allowedOrigin}/app?startup=%5BREDACTED%5D`, + ); + expect(JSON.stringify({ listed, inspected })).not.toContain("title-secret"); + }); + it("uses page-scoped discovery sockets as direct target transports", async () => { const browser = await startFakeCdpBrowser({ pageScopedVersionWebSocket: true, diff --git a/tests/config.test.ts b/tests/config.test.ts index f34117e2f..4a94b102e 100644 --- a/tests/config.test.ts +++ b/tests/config.test.ts @@ -51,6 +51,25 @@ describe("runtime configuration", () => { expect(parseConfig({ REA_ANALYSIS_PROVIDER: invalid }).ok).toBe(false); }); + it("parses absolute BYO Ghidra and optional Java paths", () => { + expect( + parseConfig({ + GHIDRA_INSTALL_DIR: "/opt/ghidra_12.1.2_PUBLIC", + JAVA_HOME: "/usr/lib/jvm/jdk-21", + }), + ).toMatchObject({ + ok: true, + value: { + ghidraInstallDir: "/opt/ghidra_12.1.2_PUBLIC", + ghidraJavaHome: "/usr/lib/jvm/jdk-21", + }, + }); + expect(parseConfig({ GHIDRA_INSTALL_DIR: "relative/ghidra" }).ok).toBe( + false, + ); + expect(parseConfig({ JAVA_HOME: "relative/jdk" }).ok).toBe(false); + }); + it("builds a separate Electron endpoint and file-root ceiling", () => { const result = parseConfig({ REA_ELECTRON_OBSERVE_ENABLED: "true", diff --git a/tests/directAnalysisPermissions.test.ts b/tests/directAnalysisPermissions.test.ts index 1234573cc..fd796920b 100644 --- a/tests/directAnalysisPermissions.test.ts +++ b/tests/directAnalysisPermissions.test.ts @@ -54,7 +54,7 @@ describe("direct analysis snapshot permissions", () => { details: { selection_reason: "unknown_provider", requested_provider_id: "request-provider", - candidate_ids: ["hopper"], + candidate_ids: ["ghidra", "hopper"], }, }); }); diff --git a/tests/errors.test.ts b/tests/errors.test.ts index c49f7d7b7..0d68b62a0 100644 --- a/tests/errors.test.ts +++ b/tests/errors.test.ts @@ -43,6 +43,26 @@ describe("analysis error projection", () => { ); }); + it("projects bounded provider diagnostics without dropping local coordinates", () => { + const diagnostics = { + runtime_root: "/tmp/rea-ghidra-fixture", + profile_digest: "a".repeat(64), + exit_code: 1, + }; + const error = new ProviderAdapterError("ghidra", "health", { + diagnostics, + }); + + expect(error.diagnostics).not.toBe(diagnostics); + expect(projectAnalysisError(error)).toMatchObject({ + details: { + provider_id: "ghidra", + operation: "health", + diagnostics, + }, + }); + }); + it("projects stable, safe Linux startup failure codes", () => { const expected = [ [70, "private_display_unavailable"], diff --git a/tests/fixtures/captureGhidraLaunch.mjs b/tests/fixtures/captureGhidraLaunch.mjs new file mode 100755 index 000000000..0a5d88598 --- /dev/null +++ b/tests/fixtures/captureGhidraLaunch.mjs @@ -0,0 +1,36 @@ +#!/usr/bin/env node + +import { readFile, stat, writeFile } from "node:fs/promises"; +import { dirname, join } from "node:path"; + +const arguments_ = process.argv.slice(2); +const descriptorPath = arguments_.at(-1); +if (descriptorPath === undefined) process.exit(64); +const descriptor = JSON.parse(await readFile(descriptorPath, "utf8")); +const runtimeRoot = dirname(descriptorPath); +await writeFile( + join(runtimeRoot, "launch-capture.json"), + `${JSON.stringify({ + arguments: arguments_, + environment: { + HOME: process.env.HOME, + TMPDIR: process.env.TMPDIR, + XDG_CACHE_HOME: process.env.XDG_CACHE_HOME, + XDG_CONFIG_HOME: process.env.XDG_CONFIG_HOME, + XDG_DATA_HOME: process.env.XDG_DATA_HOME, + GHIDRA_HEADLESS_MAXMEM: process.env.GHIDRA_HEADLESS_MAXMEM, + GHIDRA_HEADLESS_JAVA_OPTIONS: process.env.GHIDRA_HEADLESS_JAVA_OPTIONS, + GHIDRA_JAVA_OPTIONS: process.env.GHIDRA_JAVA_OPTIONS, + JAVA_TOOL_OPTIONS: process.env.JAVA_TOOL_OPTIONS, + JDK_JAVA_OPTIONS: process.env.JDK_JAVA_OPTIONS, + _JAVA_OPTIONS: process.env._JAVA_OPTIONS, + JAVA_HOME: process.env.JAVA_HOME, + PATH: process.env.PATH, + REA_PROCESS_RUN_ID: process.env.REA_PROCESS_RUN_ID, + }, + descriptor_mode: (await stat(descriptorPath)).mode & 0o777, + descriptor_has_token: typeof descriptor.token === "string", + })}\n`, + { mode: 0o600 }, +); +setInterval(() => undefined, 1_000); diff --git a/tests/fixtures/fakeCdpBrowser.ts b/tests/fixtures/fakeCdpBrowser.ts index 25f6c5612..5e9f55e67 100644 --- a/tests/fixtures/fakeCdpBrowser.ts +++ b/tests/fixtures/fakeCdpBrowser.ts @@ -62,6 +62,7 @@ interface FakeOptions { readonly webMcpChildLeavesScope?: boolean; readonly electronFileUrl?: string; readonly duplicateElectronInventory?: boolean; + readonly urlShapedAllowedTitle?: boolean; } /** Start a real HTTP/WebSocket fake at the same seams as a user-owned browser. */ @@ -225,7 +226,10 @@ const targets = ( { id: "allowed-page", type: "page", - title: "Inspectable application", + title: + options.urlShapedAllowedTitle === true + ? `http://127.0.0.1:${String(port)}/app?startup=title-secret#fragment` + : "Inspectable application", url: `http://127.0.0.1:${String(port)}/app?token=page-secret#fragment`, attached: false, ...(options.omitTargetWebSocket === true diff --git a/tests/fixtures/fakeGhidra.mjs b/tests/fixtures/fakeGhidra.mjs new file mode 100644 index 000000000..9c41fe871 --- /dev/null +++ b/tests/fixtures/fakeGhidra.mjs @@ -0,0 +1,128 @@ +import { rm } from "node:fs/promises"; +import { createServer } from "node:net"; + +const [ + socketPath, + token, + runId, + providerVersion, + profileDigest, + mode = "success", +] = process.argv.slice(2); + +if ( + socketPath === undefined || + token === undefined || + runId === undefined || + providerVersion === undefined || + profileDigest === undefined +) { + process.exit(64); +} + +if (mode === "exit") process.exit(73); +if (mode === "silent") setInterval(() => undefined, 1_000); +else { + await rm(socketPath, { force: true }); + const server = createServer((socket) => { + socket.setEncoding("utf8"); + let buffer = ""; + let pings = 0; + socket.on("data", (chunk) => { + buffer += chunk; + let newline = buffer.indexOf("\n"); + while (newline >= 0) { + const line = buffer.slice(0, newline); + buffer = buffer.slice(newline + 1); + newline = buffer.indexOf("\n"); + const request = JSON.parse(line); + if (request.token !== token) { + socket.end( + `${JSON.stringify({ + id: request.id, + ok: false, + error: { code: "auth", message: "Authentication failed" }, + })}\n`, + ); + continue; + } + if (request.method === "ping") { + pings += 1; + if (mode === "malformed") { + socket.write("{invalid\n"); + continue; + } + if (mode === "contradictory") { + socket.write( + `${JSON.stringify({ + id: request.id, + ok: false, + result: { unexpected: true }, + error: { code: "failure", message: "Failed" }, + })}\n`, + ); + continue; + } + if (mode === "oversized_whitespace") { + socket.write(`${" ".repeat(1024 * 1024 + 1)}\n`); + continue; + } + if (mode === "future_id") { + socket.write( + `${JSON.stringify({ id: request.id + 10, ok: true, result: null })}\n`, + ); + continue; + } + if (mode === "hang_after_start" && pings > 1) continue; + const result = sessionInfo({ + runId, + providerVersion: + mode === "wrong_identity" ? "0.0.0" : providerVersion, + profileDigest, + timedOut: mode === "analysis_timeout", + }); + const response = `${JSON.stringify({ id: request.id, ok: true, result })}\n`; + if (mode === "fragmented") { + const split = Math.floor(response.length / 2); + socket.write(response.slice(0, split)); + setTimeout(() => socket.write(response.slice(split)), 5); + } else socket.write(response); + continue; + } + if (request.method === "shutdown") { + socket.end( + `${JSON.stringify({ + id: request.id, + ok: true, + result: { shutdown: true, project_ephemeral: true }, + })}\n`, + ); + server.close(() => process.exit(0)); + } + } + }); + }); + server.listen(socketPath); +} + +const sessionInfo = ({ + runId: sessionRunId, + providerVersion: version, + profileDigest: digest, + timedOut, +}) => ({ + name: "REA Ghidra bridge", + bridge_version: 1, + run_id: sessionRunId, + profile_digest: digest, + provider: { id: "ghidra", version }, + read_only: true, + analysis_complete: !timedOut, + analysis_timed_out: timedOut, + capabilities: ["ping", "shutdown"], + target: { + name: "fixture", + language_id: "x86:LE:64:default", + compiler_spec_id: "gcc", + }, +}); diff --git a/tests/ghidraClient.test.ts b/tests/ghidraClient.test.ts new file mode 100644 index 000000000..596a2b78f --- /dev/null +++ b/tests/ghidraClient.test.ts @@ -0,0 +1,243 @@ +import { spawn, type ChildProcess } from "node:child_process"; +import { getEventListeners } from "node:events"; +import { access, mkdir } from "node:fs/promises"; +import { join } from "node:path"; +import { fileURLToPath } from "node:url"; + +import { afterEach, describe, expect, it } from "vitest"; + +import { ok } from "../src/domain/result.js"; +import { + GhidraClient, + type GhidraDiagnostic, +} from "../src/ghidra/GhidraClient.js"; +import type { + GhidraLaunchSession, + GhidraLauncher, +} from "../src/ghidra/GhidraLauncher.js"; + +const fixturePath = fileURLToPath( + new URL("./fixtures/fakeGhidra.mjs", import.meta.url), +); +const PROFILE_DIGEST = "a".repeat(64); +const PROVIDER_VERSION = "12.1.2"; + +type FixtureMode = + | "success" + | "fragmented" + | "wrong_identity" + | "malformed" + | "contradictory" + | "oversized_whitespace" + | "future_id" + | "analysis_timeout" + | "hang_after_start" + | "silent" + | "exit"; + +class FixtureLauncher implements GhidraLauncher { + readonly runtimeRoots: string[] = []; + readonly socketPaths: string[] = []; + readonly tokens: string[] = []; + readonly processes: ChildProcess[] = []; + + constructor(readonly mode: FixtureMode = "success") {} + + async launch(session: GhidraLaunchSession) { + this.runtimeRoots.push(session.runtimeRoot); + this.socketPaths.push(session.socketPath); + this.tokens.push(session.token); + const projectRoot = join(session.runtimeRoot, "project"); + await mkdir(projectRoot, { recursive: true }); + const process_ = spawn( + process.execPath, + [ + fixturePath, + session.socketPath, + session.token, + session.runId, + session.providerVersion, + session.profileDigest, + this.mode, + ], + { stdio: ["ignore", "pipe", "pipe"] }, + ); + this.processes.push(process_); + return ok({ + process: process_, + ownsProcessLifetime: true, + projectRoot, + ghidraLogPath: join(session.runtimeRoot, "ghidra.log"), + scriptLogPath: join(session.runtimeRoot, "script.log"), + }); + } +} + +const clients: GhidraClient[] = []; +const clientFor = ( + launcher: GhidraLauncher, + options: { + readonly startupTimeoutMs?: number; + readonly requestTimeoutMs?: number; + readonly onDiagnostic?: (event: GhidraDiagnostic) => void; + } = {}, +): GhidraClient => { + const client = new GhidraClient({ + launcher, + targetPath: "/tmp/fixture", + providerVersion: PROVIDER_VERSION, + profileDigest: PROFILE_DIGEST, + startupTimeoutMs: options.startupTimeoutMs ?? 1_000, + requestTimeoutMs: options.requestTimeoutMs ?? 100, + ...(options.onDiagnostic === undefined + ? {} + : { onDiagnostic: options.onDiagnostic }), + }); + clients.push(client); + return client; +}; + +afterEach(async () => { + await Promise.all(clients.splice(0).map((client) => client.close())); +}); + +describe("GhidraClient", () => { + it("completes an exact, fragmented post-analysis handshake", async () => { + const launcher = new FixtureLauncher("fragmented"); + const client = clientFor(launcher); + + await expect(client.start()).resolves.toMatchObject({ + ok: true, + value: { + provider: { id: "ghidra", version: PROVIDER_VERSION }, + profile_digest: PROFILE_DIGEST, + read_only: true, + analysis_complete: true, + analysis_timed_out: false, + capabilities: ["ping", "shutdown"], + }, + }); + expect(Buffer.byteLength(launcher.socketPaths[0] ?? "")).toBeLessThan(108); + }); + + it.each([ + ["wrong_identity", "protocol"], + ["malformed", "protocol"], + ["contradictory", "protocol"], + ["oversized_whitespace", "protocol"], + ["future_id", "protocol"], + ["analysis_timeout", "analysis_timeout"], + ["exit", "process"], + ] as const)("projects %s startup as %s", async (mode, expectedKind) => { + const client = clientFor(new FixtureLauncher(mode)); + const result = await client.start(); + expect(result.ok).toBe(false); + if (!result.ok) expect(result.error.kind).toBe(expectedKind); + }); + + it("applies one startup deadline and removes the private runtime", async () => { + const launcher = new FixtureLauncher("silent"); + const client = clientFor(launcher, { startupTimeoutMs: 30 }); + + const result = await client.start(); + + expect(result).toMatchObject({ + ok: false, + error: { kind: "timeout", timeoutMs: 30 }, + }); + await expect(access(launcher.runtimeRoots[0] ?? "")).rejects.toMatchObject({ + code: "ENOENT", + }); + expect(exited(launcher.processes[0])).toBe(true); + }); + + it("cancels startup promptly and leaves no project or process", async () => { + const launcher = new FixtureLauncher("silent"); + const client = clientFor(launcher, { startupTimeoutMs: 10_000 }); + const controller = new AbortController(); + const pending = client.start(controller.signal); + setTimeout(() => controller.abort(), 10); + + const result = await pending; + + expect(result).toMatchObject({ ok: false, error: { kind: "cancelled" } }); + await expect(access(launcher.runtimeRoots[0] ?? "")).rejects.toMatchObject({ + code: "ENOENT", + }); + expect(exited(launcher.processes[0])).toBe(true); + }); + + it("times out an established ping without corrupting shutdown", async () => { + const client = clientFor(new FixtureLauncher("hang_after_start")); + await expect(client.start()).resolves.toMatchObject({ ok: true }); + + await expect(client.ping({ timeoutMs: 5 })).resolves.toMatchObject({ + ok: false, + error: { kind: "timeout", timeoutMs: 5 }, + }); + }); + + it("makes double close idempotent and detaches process listeners", async () => { + const launcher = new FixtureLauncher(); + const client = clientFor(launcher); + await expect(client.start()).resolves.toMatchObject({ ok: true }); + + await Promise.all([client.close(), client.close()]); + await client.close(); + + await expect(access(launcher.runtimeRoots[0] ?? "")).rejects.toMatchObject({ + code: "ENOENT", + }); + const process_ = launcher.processes[0]; + expect(exited(process_)).toBe(true); + if (process_ === undefined) + throw new Error("Fixture process was not captured"); + expect(getEventListeners(process_, "exit")).toHaveLength(0); + expect(getEventListeners(process_, "close")).toHaveLength(0); + expect(getEventListeners(process_, "error")).toHaveLength(0); + expect(process_.stdout).not.toBeNull(); + if (process_.stdout !== null) + expect(getEventListeners(process_.stdout, "data")).toHaveLength(0); + }); + + it("retains actionable runtime coordinates after successful cleanup", async () => { + const launcher = new FixtureLauncher(); + const client = clientFor(launcher); + await expect(client.start()).resolves.toMatchObject({ ok: true }); + + await client.close(); + + expect(client.diagnostics()).toMatchObject({ + runtime_root: launcher.runtimeRoots[0], + socket_path: launcher.socketPaths[0], + project_root: join(launcher.runtimeRoots[0] ?? "", "project"), + process_id: expect.any(Number), + }); + await expect(access(launcher.runtimeRoots[0] ?? "")).rejects.toMatchObject({ + code: "ENOENT", + }); + }); + + it("retains actionable diagnostics without retaining its token", async () => { + const launcher = new FixtureLauncher("exit"); + const events: GhidraDiagnostic[] = []; + const client = clientFor(launcher, { + onDiagnostic: (event) => events.push(event), + }); + const result = await client.start(); + expect(result.ok).toBe(false); + if (result.ok) return; + + const encoded = JSON.stringify(result.error.diagnostics); + expect(encoded).toContain("/tmp/fixture"); + expect(encoded).toContain(PROFILE_DIGEST); + expect(encoded).not.toContain(launcher.tokens[0] ?? "missing-token"); + expect(events).toContainEqual( + expect.objectContaining({ type: "launcher-exit" }), + ); + }); +}); + +const exited = (process_: ChildProcess | undefined): boolean => + process_ !== undefined && + (process_.exitCode !== null || process_.signalCode !== null); diff --git a/tests/ghidraDoctor.test.ts b/tests/ghidraDoctor.test.ts new file mode 100644 index 000000000..7dd2edc6c --- /dev/null +++ b/tests/ghidraDoctor.test.ts @@ -0,0 +1,152 @@ +import { describe, expect, it } from "vitest"; + +import { runDoctor, type DoctorHost } from "../src/application/Doctor.js"; +import { + inspectGhidraInstallation, + type GhidraInstallationHost, + type GhidraInstallationInspection, +} from "../src/ghidra/GhidraInstallation.js"; +import { projectGhidraDoctorInspection } from "../src/ghidra/GhidraDoctor.js"; + +const INSTALL = "/opt/ghidra_12.1.2_PUBLIC"; +const installationHost = ( + overrides: Partial = {}, +): GhidraInstallationHost => ({ + readText: () => "application.version=12.1.2\n", + executable: () => true, + probeJava: () => ({ + version: "21.0.11", + major: 21, + home: "/usr/lib/jvm/jdk-21", + bits: 64, + jdk: true, + }), + ...overrides, +}); + +const inspection = ( + options: { + readonly installDir?: string; + readonly architecture?: NodeJS.Architecture; + } = { installDir: INSTALL }, + overrides: Partial = {}, +): GhidraInstallationInspection => + inspectGhidraInstallation( + { + platform: "linux", + architecture: options.architecture ?? "x64", + ...(options.installDir === undefined + ? {} + : { installDir: options.installDir }), + }, + installationHost(overrides), + ); + +const doctorHost = ( + ghidra: GhidraInstallationInspection, + hopperAvailable = false, +): DoctorHost => ({ + platform: "linux", + nodeVersion: "24.18.0", + macosVersion: () => Promise.resolve(undefined), + linuxDistribution: () => + Promise.resolve({ + id: "ubuntu", + versionId: "24.04", + packageFamily: "deb", + supported: true, + }), + validTarget: () => Promise.resolve(true), + executable: (path) => + Promise.resolve(hopperAvailable && path.includes("Hopper")), + supportedLinuxHopper: () => Promise.resolve(true), + linuxDemoRuntimeReady: () => Promise.resolve(true), + brewHopperPath: () => Promise.resolve(undefined), + manualHopperPaths: () => Promise.resolve([]), + providerInspections: () => + Promise.resolve([projectGhidraDoctorInspection(ghidra)]), +}); + +describe("Ghidra doctor integration", () => { + it("accepts a valid BYO Ghidra engine when Hopper is absent", async () => { + const result = await runDoctor(undefined, doctorHost(inspection())); + + expect(result.healthy).toBe(true); + expect(result.hopperPath).toBeUndefined(); + expect(result.providerInspections?.[0]).toMatchObject({ + id: "ghidra", + available: true, + providerVersion: "12.1.2", + registrationEnvironment: { + GHIDRA_INSTALL_DIR: INSTALL, + JAVA_HOME: "/usr/lib/jvm/jdk-21", + }, + }); + expect( + result.checks.find(({ name }) => name === "ghidra-java"), + ).toMatchObject({ + ok: true, + detail: expect.stringContaining("21.0.11"), + }); + }); + + it.each([ + [ + "bad installation", + inspection({ installDir: INSTALL }, { readText: () => undefined }), + "ghidra-installation", + ], + [ + "wrong version", + inspection( + { installDir: INSTALL }, + { readText: () => "application.version=11.4\n" }, + ), + "ghidra-version", + ], + [ + "missing analyzeHeadless", + inspection({ installDir: INSTALL }, { executable: () => false }), + "ghidra-headless", + ], + [ + "wrong Java", + inspection( + { installDir: INSTALL }, + { + probeJava: () => ({ + version: "17.0.12", + major: 17, + home: "/usr/lib/jvm/jdk-17", + bits: 64, + jdk: true, + }), + }, + ), + "ghidra-java", + ], + [ + "unsupported architecture", + inspection({ installDir: INSTALL, architecture: "arm64" }), + "ghidra-architecture", + ], + ] as const)("distinguishes %s", async (_label, ghidra, checkName) => { + const result = await runDoctor(undefined, doctorHost(ghidra, true)); + + expect(result.healthy).toBe(false); + expect(result.checks.find(({ name }) => name === checkName)).toMatchObject({ + ok: false, + remediation: expect.any(String), + }); + }); + + it("treats unconfigured Ghidra as optional when Hopper is healthy", async () => { + const result = await runDoctor(undefined, doctorHost(inspection({}), true)); + + expect(result.healthy).toBe(true); + expect(result.checks.find(({ name }) => name === "ghidra")).toMatchObject({ + ok: false, + classification: "missing_analysis_engine", + }); + }); +}); diff --git a/tests/ghidraInstallation.test.ts b/tests/ghidraInstallation.test.ts new file mode 100644 index 000000000..7aad65493 --- /dev/null +++ b/tests/ghidraInstallation.test.ts @@ -0,0 +1,174 @@ +import { describe, expect, it } from "vitest"; + +import { + ghidraJavaEnvironment, + inspectGhidraInstallation, + SUPPORTED_GHIDRA_JAVA_MAJOR, + SUPPORTED_GHIDRA_VERSION, + type GhidraInstallationHost, + type GhidraJavaObservation, +} from "../src/ghidra/GhidraInstallation.js"; + +const INSTALL = "/opt/ghidra"; +const PROPERTIES = `${INSTALL}/Ghidra/application.properties`; +const HEADLESS = `${INSTALL}/support/analyzeHeadless`; +const JAVA: GhidraJavaObservation = { + version: "21.0.11", + major: SUPPORTED_GHIDRA_JAVA_MAJOR, + home: "/usr/lib/jvm/jdk-21", + bits: 64, + jdk: true, +}; + +const host = ( + overrides: Partial = {}, +): GhidraInstallationHost => ({ + readText: (path) => + path === PROPERTIES + ? `application.version=${SUPPORTED_GHIDRA_VERSION}\n` + : undefined, + executable: (path) => path === HEADLESS, + probeJava: () => JAVA, + ...overrides, +}); + +describe("Ghidra installation inspection", () => { + it("clears inherited JVM option injection before probing Java", () => { + expect( + ghidraJavaEnvironment("/opt/jdk-21", { + PATH: "/usr/bin", + _JAVA_OPTIONS: "-Xmx99G", + JAVA_TOOL_OPTIONS: "-javaagent:/tmp/agent.jar", + JDK_JAVA_OPTIONS: "-XX:MaxRAMPercentage=99", + GHIDRA_JAVA_OPTIONS: "-Duser.home=/tmp/unapproved", + }), + ).toMatchObject({ + PATH: "/opt/jdk-21/bin:/usr/bin", + JAVA_HOME: "/opt/jdk-21", + _JAVA_OPTIONS: "", + JAVA_TOOL_OPTIONS: "", + JDK_JAVA_OPTIONS: "", + GHIDRA_JAVA_OPTIONS: "", + }); + }); + + it("accepts only the exact Linux x64 Ghidra and JDK commitment", () => { + expect( + inspectGhidraInstallation( + { installDir: INSTALL, platform: "linux", architecture: "x64" }, + host(), + ), + ).toMatchObject({ + available: true, + providerVersion: SUPPORTED_GHIDRA_VERSION, + analyzeHeadlessPath: HEADLESS, + javaVersion: "21.0.11", + rejectionCode: null, + }); + }); + + it.each([ + { + name: "missing configuration", + options: { platform: "linux" as const, architecture: "x64" as const }, + override: {}, + failed: "configuration", + code: "not_configured", + }, + { + name: "unsupported platform", + options: { + installDir: INSTALL, + platform: "darwin" as const, + architecture: "x64" as const, + }, + override: {}, + failed: "platform", + code: "unsupported_host", + }, + { + name: "unsupported architecture", + options: { + installDir: INSTALL, + platform: "linux" as const, + architecture: "arm64" as const, + }, + override: {}, + failed: "architecture", + code: "unsupported_host", + }, + { + name: "bad installation root", + options: { + installDir: INSTALL, + platform: "linux" as const, + architecture: "x64" as const, + }, + override: { readText: () => undefined }, + failed: "installation", + code: "executable_missing", + }, + { + name: "wrong Ghidra version", + options: { + installDir: INSTALL, + platform: "linux" as const, + architecture: "x64" as const, + }, + override: { readText: () => "application.version=11.4\n" }, + failed: "version", + code: "unsupported_version", + }, + { + name: "missing analyzeHeadless", + options: { + installDir: INSTALL, + platform: "linux" as const, + architecture: "x64" as const, + }, + override: { executable: () => false }, + failed: "headless", + code: "executable_missing", + }, + { + name: "missing Java", + options: { + installDir: INSTALL, + platform: "linux" as const, + architecture: "x64" as const, + }, + override: { probeJava: () => undefined }, + failed: "java", + code: "runtime_missing", + }, + { + name: "wrong Java", + options: { + installDir: INSTALL, + platform: "linux" as const, + architecture: "x64" as const, + }, + override: { probeJava: () => ({ ...JAVA, major: 17, version: "17" }) }, + failed: "java", + code: "unsupported_version", + }, + { + name: "JRE instead of JDK", + options: { + installDir: INSTALL, + platform: "linux" as const, + architecture: "x64" as const, + }, + override: { probeJava: () => ({ ...JAVA, jdk: false }) }, + failed: "java", + code: "unsupported_version", + }, + ])("distinguishes $name", ({ options, override, failed, code }) => { + const result = inspectGhidraInstallation(options, host(override)); + expect(result.available).toBe(false); + expect(result.checks.find(({ ok }) => !ok)).toMatchObject({ + name: failed, + code, + }); + }); +}); diff --git a/tests/ghidraLauncher.test.ts b/tests/ghidraLauncher.test.ts new file mode 100644 index 000000000..55e1aeb2b --- /dev/null +++ b/tests/ghidraLauncher.test.ts @@ -0,0 +1,133 @@ +import { access, chmod, mkdtemp, readFile, rm, stat } from "node:fs/promises"; +import { tmpdir } from "node:os"; +import { join } from "node:path"; +import { fileURLToPath } from "node:url"; + +import { afterEach, beforeAll, describe, expect, it, vi } from "vitest"; + +import { + ghidraHeadlessArguments, + GhidraHeadlessLauncher, +} from "../src/ghidra/GhidraLauncher.js"; + +const fixturePath = fileURLToPath( + new URL("./fixtures/captureGhidraLaunch.mjs", import.meta.url), +); +const roots: string[] = []; + +beforeAll(() => chmod(fixturePath, 0o755)); +afterEach(async () => { + vi.unstubAllEnvs(); + await Promise.all( + roots.splice(0).map((path) => rm(path, { recursive: true, force: true })), + ); +}); + +describe("Ghidra headless launcher", () => { + it("builds a bounded read-only import in deterministic order", () => { + expect( + ghidraHeadlessArguments({ + projectRoot: "/tmp/project", + targetPath: "/tmp/target", + bridgeScriptPath: "/package/bridge/ReaGhidraBridge.java", + descriptorPath: "/tmp/session.json", + ghidraLogPath: "/tmp/ghidra.log", + scriptLogPath: "/tmp/script.log", + }), + ).toEqual([ + "/tmp/project", + "rea-project", + "-import", + "/tmp/target", + "-readOnly", + "-deleteProject", + "-analysisTimeoutPerFile", + "300", + "-max-cpu", + "2", + "-log", + "/tmp/ghidra.log", + "-scriptlog", + "/tmp/script.log", + "-scriptPath", + "/package/bridge", + "-postScript", + "ReaGhidraBridge.java", + "/tmp/session.json", + ]); + }); + + it("keeps authority in a private descriptor and isolates Ghidra state", async () => { + vi.stubEnv("GHIDRA_JAVA_OPTIONS", "-javaagent:/unapproved/agent.jar"); + vi.stubEnv("JAVA_TOOL_OPTIONS", "-Duser.home=/unapproved/home"); + vi.stubEnv("JDK_JAVA_OPTIONS", "-XX:MaxRAMPercentage=99"); + vi.stubEnv("_JAVA_OPTIONS", "-Xmx99G"); + const runtimeRoot = await mkdtemp(join(tmpdir(), "rea-launcher-test-")); + roots.push(runtimeRoot); + const token = "secret-token-that-must-not-leak"; + const launcher = new GhidraHeadlessLauncher({ + analyzeHeadlessPath: fixturePath, + javaHome: "/opt/jdk-21", + bridgeScriptPath: "/package/bridge/ReaGhidraBridge.java", + }); + const launched = await launcher.launch({ + runtimeRoot, + socketPath: join(runtimeRoot, "bridge.sock"), + token, + runId: "d6fcbb66-e829-4ff6-a535-0035aec63139", + targetPath: "/tmp/fixture", + providerVersion: "12.1.2", + profileDigest: "a".repeat(64), + }); + expect(launched.ok).toBe(true); + if (!launched.ok) return; + const capturePath = join(runtimeRoot, "launch-capture.json"); + await waitFor(capturePath); + const capture = JSON.parse(await readFile(capturePath, "utf8")); + const encodedArguments = JSON.stringify(capture.arguments); + const encodedEnvironment = JSON.stringify(capture.environment); + expect(encodedArguments).not.toContain(token); + expect(encodedEnvironment).not.toContain(token); + expect(capture).toMatchObject({ + descriptor_mode: 0o600, + descriptor_has_token: true, + environment: { + HOME: join(runtimeRoot, "home"), + TMPDIR: join(runtimeRoot, "tmp"), + XDG_CACHE_HOME: join(runtimeRoot, "cache"), + XDG_CONFIG_HOME: join(runtimeRoot, "config"), + XDG_DATA_HOME: join(runtimeRoot, "data"), + GHIDRA_HEADLESS_MAXMEM: "2G", + GHIDRA_JAVA_OPTIONS: "", + JAVA_TOOL_OPTIONS: "", + JDK_JAVA_OPTIONS: "", + _JAVA_OPTIONS: "", + JAVA_HOME: "/opt/jdk-21", + REA_PROCESS_RUN_ID: "d6fcbb66-e829-4ff6-a535-0035aec63139", + }, + }); + expect(capture.environment.PATH).toMatch(/^\/opt\/jdk-21\/bin:/u); + expect(capture.environment.GHIDRA_HEADLESS_JAVA_OPTIONS).toContain( + `-Duser.home=${join(runtimeRoot, "home")}`, + ); + expect((await stat(join(runtimeRoot, "ownership.json"))).mode & 0o777).toBe( + 0o600, + ); + + const cleaned = await launched.value.cleanup?.(); + expect(cleaned).toMatchObject({ cleaned: true }); + await expect(access(join(runtimeRoot, "project"))).resolves.toBeUndefined(); + }); +}); + +const waitFor = async (path: string): Promise => { + for (let attempt = 0; attempt < 100; attempt += 1) { + try { + await access(path); + return; + } catch { + await new Promise((resolve) => setTimeout(resolve, 10)); + } + } + throw new Error(`Timed out waiting for ${path}`); +}; diff --git a/tests/ghidraProvider.test.ts b/tests/ghidraProvider.test.ts new file mode 100644 index 000000000..bc1527cea --- /dev/null +++ b/tests/ghidraProvider.test.ts @@ -0,0 +1,149 @@ +import { describe, expect, it, vi } from "vitest"; + +import { parseConfig } from "../src/config.js"; +import type { BinaryTarget } from "../src/domain/binaryTarget.js"; +import { + GHIDRA_PROVIDER_IDENTITY, + GHIDRA_PROVIDER_TOOL_CONTRACTS, + GhidraProvider, +} from "../src/ghidra/GhidraProvider.js"; +import type { GhidraInstallationHost } from "../src/ghidra/GhidraInstallation.js"; +import { silentLogger } from "../src/logger.js"; + +const INSTALL = "/opt/ghidra_12.1.2_PUBLIC"; +const installationHost = (): GhidraInstallationHost => ({ + readText: () => "application.version=12.1.2\n", + executable: () => true, + probeJava: () => ({ + version: "21.0.11", + major: 21, + home: "/usr/lib/jvm/jdk-21", + bits: 64, + jdk: true, + }), +}); + +const provider = (host = installationHost()): GhidraProvider => { + const config = parseConfig({ GHIDRA_INSTALL_DIR: INSTALL }); + if (!config.ok) throw config.error; + return new GhidraProvider(config.value, silentLogger, host); +}; + +describe("Ghidra provider", () => { + it("discovers the exact installation once without launching Ghidra", () => { + const host = installationHost(); + const probe = vi.spyOn(host, "probeJava"); + const ghidra = provider(host); + + expect(ghidra.identity()).toEqual(GHIDRA_PROVIDER_IDENTITY); + expect(ghidra.capabilities()).toBe(GHIDRA_PROVIDER_TOOL_CONTRACTS); + expect(GHIDRA_PROVIDER_TOOL_CONTRACTS).toEqual([]); + expect(Object.isFrozen(ghidra.capabilities())).toBe(true); + expect(ghidra.inspectAvailability()).toMatchObject({ + status: "available", + diagnostics: { + install_dir: INSTALL, + provider_version: "12.1.2", + java_version: "21.0.11", + }, + }); + expect(ghidra.inspectAvailability()).toMatchObject({ status: "available" }); + expect(probe).toHaveBeenCalledOnce(); + }); + + it("separates target kind, format, and concrete architecture", () => { + const ghidra = provider(); + expect( + ghidra.inspectTargetSupport(executableTarget("elf", "x86_64")), + ).toMatchObject({ + status: "supported", + }); + expect( + ghidra.inspectTargetSupport(executableTarget("pe", "arm64")), + ).toMatchObject({ + status: "supported", + }); + expect( + ghidra.inspectTargetSupport({ + ...executableTarget("elf", "x86_64"), + kind: "archive", + format: "asar", + }), + ).toMatchObject({ + status: "unsupported", + code: "target_kind_unsupported", + }); + expect( + ghidra.inspectTargetSupport(executableTarget("javascript", "x86_64")), + ).toMatchObject({ + status: "unsupported", + code: "target_format_unsupported", + }); + expect(ghidra.inspectTargetSupport(executableTarget("elf"))).toMatchObject({ + status: "unsupported", + code: "architecture_unsupported", + }); + }); + + it("commits exact provider, isolation, and resource semantics", async () => { + const ghidra = provider(); + const resolved = await ghidra.resolveAnalysisProfile( + executableTarget("elf", "x86_64"), + ); + + expect(resolved.ok).toBe(true); + if (!resolved.ok || resolved.value.profile === null) return; + expect(resolved.value.profile).toMatchObject({ + provider: { id: "ghidra", name: "Ghidra", version: "12.1.2" }, + provider_profile_schema_version: 1, + parameters: { + import_mode: "ephemeral-read-only", + analyzer_preset: "ghidra-default", + analysis_timeout_seconds: 300, + max_cpu: 2, + max_heap: "2G", + }, + }); + expect(resolved.value.compatibility).toEqual({ + languageId: "auto", + compilerSpecId: "auto", + }); + + const result = await ghidra + .createClient(executableTarget("elf", "x86_64"), resolved.value.profile) + .execute("list_procedures", {}); + expect(result).toMatchObject({ + ok: false, + error: { + _tag: "AnalysisCapabilityUnavailableError", + providerId: "ghidra", + }, + }); + }); + + it("returns cancellation before profile work", async () => { + const controller = new AbortController(); + controller.abort(); + await expect( + provider().resolveAnalysisProfile(executableTarget("elf", "x86_64"), { + signal: controller.signal, + }), + ).resolves.toMatchObject({ + ok: false, + error: { _tag: "AnalysisCancelledError", operation: "open_binary" }, + }); + }); +}); + +const executableTarget = ( + format: BinaryTarget["format"], + architecture?: NonNullable, +): BinaryTarget => ({ + path: "/tmp/fixture", + sha256: "a".repeat(64), + kind: "executable", + format, + ...(architecture === undefined + ? {} + : { architecture, availableArchitectures: [architecture] }), +}); diff --git a/tests/productCatalog.test.ts b/tests/productCatalog.test.ts index 1043f965f..c74fdc001 100644 --- a/tests/productCatalog.test.ts +++ b/tests/productCatalog.test.ts @@ -19,6 +19,7 @@ import { HOPPER_PROVIDER_IDENTITY, HOPPER_PROVIDER_TOOL_CONTRACTS, } from "../src/hopper/HopperProvider.js"; +import { GHIDRA_PROVIDER_IDENTITY } from "../src/ghidra/GhidraProvider.js"; import { NATIVE_MACOS_PROVIDER_IDENTITY } from "../src/native/NativeMacOSProvider.js"; import { assertDocumentationFacts, @@ -57,6 +58,7 @@ describe("canonical product catalog", () => { expect(catalog.providers.map(({ id }) => id).sort()).toEqual( [ HOPPER_PROVIDER_IDENTITY, + GHIDRA_PROVIDER_IDENTITY, NATIVE_MACOS_PROVIDER_IDENTITY, ARTIFACT_GRAPH_PROVIDER, CDP_BROWSER_PROVIDER_IDENTITY, @@ -69,6 +71,10 @@ describe("canonical product catalog", () => { catalog.providers.find(({ id }) => id === HOPPER_PROVIDER_IDENTITY.id) ?.capabilities, ).toEqual(HOPPER_PROVIDER_TOOL_CONTRACTS.map(({ name }) => name).sort()); + expect( + catalog.providers.find(({ id }) => id === GHIDRA_PROVIDER_IDENTITY.id) + ?.capabilities, + ).toEqual([]); expect( z.toJSONSchema(analysisSnapshotSchema).properties?.snapshot_version, ).toMatchObject({ @@ -92,7 +98,7 @@ describe("canonical product catalog", () => { assertDocumentationFacts(root, catalog), ).resolves.toBeUndefined(); await expect(documentationFactIssues(root, catalog)).resolves.toEqual([]); - }); + }, 15_000); it("uses the same primary command names as the actual Incur router", () => { const inventory = createCliInventory(createCli()); diff --git a/tests/providerArchitecture.test.ts b/tests/providerArchitecture.test.ts index 2d8e768b5..ec7773642 100644 --- a/tests/providerArchitecture.test.ts +++ b/tests/providerArchitecture.test.ts @@ -6,12 +6,13 @@ import { describe, expect, it } from "vitest"; import { parseConfig } from "../src/config.js"; import { HopperProvider } from "../src/hopper/HopperProvider.js"; +import { GhidraProvider } from "../src/ghidra/GhidraProvider.js"; import { silentLogger } from "../src/logger.js"; const sourceRoot = new URL("../src/", import.meta.url); describe("provider-neutral architecture", () => { - it("keeps Hopper imports behind its adapter and composition root", async () => { + it("keeps deep-provider imports behind adapters and the composition root", async () => { const forbiddenRoots = ["domain", "contracts", "server", "application"]; const inspected = await Promise.all( forbiddenRoots.map(async (root) => { @@ -23,7 +24,7 @@ describe("provider-neutral architecture", () => { if (root === "application" && file.endsWith("/runtime.ts")) return undefined; const source = await readFile(file, "utf8"); - return /from\s+["'][^"']*\/hopper\//u.test(source) + return /from\s+["'][^"']*\/(?:hopper|ghidra)\//u.test(source) ? relative(fileURLToPath(sourceRoot), file) : undefined; }), @@ -36,6 +37,19 @@ describe("provider-neutral architecture", () => { expect(violations).toEqual([]); }); + it("publishes no speculative Ghidra binary capabilities", () => { + const config = parseConfig({}); + expect(config.ok).toBe(true); + if (!config.ok) return; + const provider = new GhidraProvider(config.value, silentLogger, { + readText: () => undefined, + executable: () => false, + probeJava: () => undefined, + }); + expect(provider.capabilities()).toEqual([]); + expect(Object.isFrozen(provider.capabilities())).toBe(true); + }); + it("publishes deterministic immutable Hopper capability descriptors", () => { const config = parseConfig({}); expect(config.ok).toBe(true); diff --git a/tests/providerProcess.test.ts b/tests/providerProcess.test.ts index 37e434dbd..54d092112 100644 --- a/tests/providerProcess.test.ts +++ b/tests/providerProcess.test.ts @@ -254,6 +254,24 @@ describe("provider process lifecycle primitives", () => { } }); + it("allows interpreter launchers to rely on parent and run-token identity", async () => { + const spawned = await spawnOwnedProviderProcess({ + command: process.execPath, + arguments: [processFixturePath, "graceful"], + runId: "provider-process-interpreter-run", + expectedCommand: null, + }); + try { + expect(spawned.ownership).toMatchObject({ + expectedParentPid: process.pid, + runId: "provider-process-interpreter-run", + }); + expect(spawned.ownership).not.toHaveProperty("expectedCommand"); + } finally { + await stopProviderProcessFixture(spawned.process); + } + }); + it("rejects deterministic spawn failures without producing a process", async () => { await expect( spawnOwnedProviderProcess({ diff --git a/tests/runtime.test.ts b/tests/runtime.test.ts index b58b50441..8ec9c4785 100644 --- a/tests/runtime.test.ts +++ b/tests/runtime.test.ts @@ -83,5 +83,5 @@ describe("production stdio runtime", () => { await client.close(); await transport.close(); } - }); + }, 15_000); }); diff --git a/tests/setup.test.ts b/tests/setup.test.ts index 23c0e22c2..d686cfd6c 100644 --- a/tests/setup.test.ts +++ b/tests/setup.test.ts @@ -7,6 +7,7 @@ import { type SetupHost, type SetupOptions, type SetupHopperInstallResult, + type SetupProviderEnvironment, } from "../src/application/Setup.js"; import type { DoctorCheck } from "../src/application/Doctor.js"; import type { LinuxDistribution } from "../src/application/LinuxHopper.js"; @@ -17,6 +18,8 @@ class FakeSetupHost implements SetupHost { version: string | undefined = "14.5"; distribution: LinuxDistribution | undefined; hopper: string | undefined; + ghidra: string | undefined; + javaHome: string | undefined; hopperInstallSucceeds = true; skill: "installed" | "unchanged" | "failed" = "installed"; clients: readonly SetupClient[] = []; @@ -26,6 +29,7 @@ class FakeSetupHost implements SetupHost { configurations = 0; skillInstalls = 0; checkedHopperPaths: Array = []; + configuredProviderEnvironments: SetupProviderEnvironment[] = []; doctorHealthy: boolean | undefined; linuxDemoRuntimeMissing = false; unsupportedHopperVersion = false; @@ -39,6 +43,14 @@ class FakeSetupHost implements SetupHost { linuxDistribution = (): Promise => Promise.resolve(this.distribution); hopperPath = (): Promise => Promise.resolve(this.hopper); + providerEnvironment = (): Promise => + Promise.resolve({ + ...(this.hopper === undefined + ? {} + : { HOPPER_LAUNCHER_PATH: this.hopper }), + ...(this.ghidra === undefined ? {} : { GHIDRA_INSTALL_DIR: this.ghidra }), + ...(this.javaHome === undefined ? {} : { JAVA_HOME: this.javaHome }), + }); installHopper = ( replaceExisting: boolean, ): Promise => { @@ -62,17 +74,19 @@ class FakeSetupHost implements SetupHost { Promise.resolve(this.clients); configureClient = ( client: SetupClient, + providerEnvironment: SetupProviderEnvironment, ): Promise => { this.configurations += 1; + this.configuredProviderEnvironments.push(providerEnvironment); return Promise.resolve( this.clientResults.get(client.name) ?? { status: "configured" }, ); }; clientNeedsConfigure = ( client: SetupClient, - hopperPath: string | undefined, + providerEnvironment: SetupProviderEnvironment, ): Promise => { - this.checkedHopperPaths.push(hopperPath); + this.checkedHopperPaths.push(providerEnvironment.HOPPER_LAUNCHER_PATH); return Promise.resolve( this.clientResults.get(client.name)?.status !== "unchanged", ); @@ -237,6 +251,42 @@ describe("setup workflow", () => { expect(host.hopperInstalls).toBe(0); }); + it("plans and propagates BYO Ghidra without installing software", async () => { + const host = new FakeSetupHost("linux"); + host.distribution = { + id: "ubuntu", + versionId: "24.04", + packageFamily: "deb", + supported: true, + }; + host.ghidra = "/opt/ghidra_12.1.2_PUBLIC"; + host.javaHome = "/usr/lib/jvm/jdk-21"; + host.doctorHealthy = true; + host.skill = "unchanged"; + host.clients = [{ name: "cursor", configPath: "/cursor.json" }]; + + const plan = await runSetup(options(false), host); + expect(plan.plannedActions.map(({ kind }) => kind)).toEqual([ + "configure_client", + ]); + expect(plan.plannedActions[0]?.detail).toContain( + "GHIDRA_INSTALL_DIR=/opt/ghidra_12.1.2_PUBLIC", + ); + expect(plan.plannedActions[0]?.detail).toContain( + "JAVA_HOME=/usr/lib/jvm/jdk-21", + ); + expect(host.hopperInstalls).toBe(0); + expect(host.configurations).toBe(0); + + const applied = await runSetup(options(true), host); + expect(applied.status).toBe("ready"); + expect(host.hopperInstalls).toBe(0); + expect(host.configuredProviderEnvironments).toContainEqual({ + GHIDRA_INSTALL_DIR: "/opt/ghidra_12.1.2_PUBLIC", + JAVA_HOME: "/usr/lib/jvm/jdk-21", + }); + }); + it("reinstalls existing Hopper when explicitly requested", async () => { const host = new FakeSetupHost(); host.hopper = "/Applications/Hopper"; @@ -428,7 +478,31 @@ describe("setup workflow", () => { expect(result.status).toBe("needs_human"); expect(host.hopperInstalls).toBe(0); expect(result.remediation).toBe( - "REA supports Hopper on Ubuntu 24.04+, Fedora 41+, and 64-bit Arch Linux.", + "Automated Hopper setup supports Ubuntu 24.04+, Fedora 41+, and 64-bit Arch Linux; configure an existing supported provider instead.", ); }); + + it("configures BYO Ghidra on Linux outside Hopper's installer matrix", async () => { + const host = new FakeSetupHost("linux"); + host.distribution = { + id: "debian", + versionId: "13", + packageFamily: "deb", + supported: false, + }; + host.ghidra = "/opt/ghidra_12.1.2_PUBLIC"; + host.javaHome = "/usr/lib/jvm/jdk-21"; + host.doctorHealthy = true; + host.skill = "unchanged"; + host.clients = [{ name: "codex", configPath: "/codex.toml" }]; + + const result = await runSetup(options(true), host); + + expect(result.status).toBe("ready"); + expect(host.hopperInstalls).toBe(0); + expect(host.configuredProviderEnvironments).toContainEqual({ + GHIDRA_INSTALL_DIR: "/opt/ghidra_12.1.2_PUBLIC", + JAVA_HOME: "/usr/lib/jvm/jdk-21", + }); + }); }); diff --git a/tests/setupConfig.test.ts b/tests/setupConfig.test.ts index 292d05ddd..c30b85f94 100644 --- a/tests/setupConfig.test.ts +++ b/tests/setupConfig.test.ts @@ -146,6 +146,33 @@ describe("JSON client configuration transaction", () => { expect(await readFile(`${configPath}.rea.backup`, "utf8")).toBe(original); }); + it("adds exact BYO Ghidra and Java paths without installing dependencies", async () => { + directory = await mkdtemp(join(tmpdir(), "rea-setup-")); + const configPath = join(directory, "mcp.json"); + const client = { name: "cursor", configPath }; + const environment = { + GHIDRA_INSTALL_DIR: "/opt/ghidra_12.1.2_PUBLIC", + JAVA_HOME: "/usr/lib/jvm/jdk-21", + }; + + expect(await configureJsonClient(client, environment)).toMatchObject({ + status: "configured", + }); + expect(JSON.parse(await readFile(configPath, "utf8"))).toMatchObject({ + mcpServers: { + rea: { + env: { + GHIDRA_INSTALL_DIR: environment.GHIDRA_INSTALL_DIR, + JAVA_HOME: environment.JAVA_HOME, + }, + }, + }, + }); + expect(await configureJsonClient(client, environment)).toEqual({ + status: "unchanged", + }); + }); + it("refuses malformed existing JSON without overwriting it", async () => { directory = await mkdtemp(join(tmpdir(), "rea-setup-")); const configPath = join(directory, "mcp.json"); diff --git a/tests/setupLifecycle.test.ts b/tests/setupLifecycle.test.ts index 06ba37dc2..fdbff715e 100644 --- a/tests/setupLifecycle.test.ts +++ b/tests/setupLifecycle.test.ts @@ -77,7 +77,11 @@ describe("agent lifecycle", () => { expect( await configureTomlClient( { name: "codex", configPath, format: "toml" }, - "/Hopper Path", + { + HOPPER_LAUNCHER_PATH: "/Hopper Path", + GHIDRA_INSTALL_DIR: "/opt/ghidra", + JAVA_HOME: "/opt/jdk-21", + }, ["rea", "mcp"], ), ).toMatchObject({ status: "configured" }); @@ -85,10 +89,16 @@ describe("agent lifecycle", () => { expect(configured).toContain('model = "gpt-5"'); expect(configured).toContain("[mcp_servers.rea]"); expect(configured).toContain('command = "rea"'); + expect(configured).toContain('GHIDRA_INSTALL_DIR = "/opt/ghidra"'); + expect(configured).toContain('JAVA_HOME = "/opt/jdk-21"'); expect( await configureTomlClient( { name: "codex", configPath, format: "toml" }, - "/Hopper Path", + { + HOPPER_LAUNCHER_PATH: "/Hopper Path", + GHIDRA_INSTALL_DIR: "/opt/ghidra", + JAVA_HOME: "/opt/jdk-21", + }, ["rea", "mcp"], ), ).toEqual({ status: "unchanged" }); diff --git a/typedoc.json b/typedoc.json index 4f57c01cf..54de01ba7 100644 --- a/typedoc.json +++ b/typedoc.json @@ -7,6 +7,7 @@ "src/domain", "src/contracts", "src/hopper", + "src/ghidra", "src/process", "src/browser", "src/application",