chore: add Cloud Agent environment install

Save the tested Node 24.18.0 install so Cloud Agents read it from the repository.
docs: note Cloud Agent Node.js toolchain
2026-10-07 09:07:46 +00:00 · 2026-10-07 03:36:23 +00:00
1521 changed files with 21182 additions and 105212 deletions
@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+NODE_VERSION="24.18.0"
+NODE_SHA256="55aa7153f9d88f28d765fcdad5ae6945b5c0f98a36881703817e4c450fa76742"
+export PATH="/usr/local/bin:${PATH}"
+
+if [[ "$(/usr/local/bin/node -v 2>/dev/null || true)" != "v${NODE_VERSION}" ]]; then
+  tmp="$(mktemp -d)"
+  curl -fsSL -o "${tmp}/node.tar.xz" "https://nodejs.org/dist/v${NODE_VERSION}/node-v${NODE_VERSION}-linux-x64.tar.xz"
+  echo "${NODE_SHA256}  ${tmp}/node.tar.xz" | sha256sum -c -
+  sudo tar -xJf "${tmp}/node.tar.xz" -C /usr/local --strip-components=1
+  rm -rf "${tmp}"
+fi
+
+hash -r
+
+for cmd in node npm npx corepack; do
+  if [[ -x "/usr/local/bin/${cmd}" ]]; then
+    sudo ln -sfn "/usr/local/bin/${cmd}" "/usr/local/cargo/bin/${cmd}"
+  fi
+done
+
+if [[ -f "${HOME}/.bashrc" ]] && ! grep -qF '# rea-dev-node' "${HOME}/.bashrc"; then
+  printf '\n# rea-dev-node\nexport PATH="/usr/local/bin:$PATH"\n' >> "${HOME}/.bashrc"
+fi
+
+npm ci
@@ -0,0 +1,4 @@
+{
+  "name": "REA",
+  "install": "bash .cursor/cloud-agent-install.sh"
+}
@@ -28,7 +28,7 @@ intentionally not included. -->
 - Provider, bridge, target-format, or platform compatibility:
 - Evidence, artifact, provenance, or reconstruction contract:
 - Process execution, authorization, cleanup, or containment impact:
- Generated metadata (`docs/public/product-catalog.json`), package, or installation impact (CI generates and validates ignored catalogs and `skills/`; edit authored instructions in `skill-src/` and never commit build outputs):
+- Generated metadata (`docs/product-catalog.json`), package, or installation impact:

 ## Evidence and regression coverage

@@ -59,10 +59,6 @@ relevant real-provider or platform workflow, or explain why it was unavailable.
 limits, security/privacy/containment implications, and meaningful proof gaps. -->

 - Breaking changes or migration steps:
-  <!-- For ! / BREAKING CHANGE: show a previously valid call/configuration,
-  its new behavior and migration, and why compatibility/deprecation cannot
-  preserve it. Compatible fixes/additions should use patch/minor semantics.
-  See docs/releasing.md. -->
 - Real Hopper/Ghidra, browser, or OS coverage:
 - Package or release metadata impact:
 - Security, privacy, process, or containment review:
@@ -4,7 +4,7 @@ on:
  push:
    branches: [main]
  pull_request:
-    branches: [main, "release/*"]
+    branches: [main]

 concurrency:
  group: ci-${{ github.event.pull_request.number || github.ref }}
@@ -102,8 +102,6 @@ jobs:
        with:
          name: rea-dist
          path: dist
-      - name: Generate projections from downloaded build
-        run: npm run build:projections
      - run: npm run test:ci:shard:run -- --shard=${{ matrix.shard }}
      - uses: actions/upload-artifact@v4
        if: ${{ !cancelled() }}
@@ -231,16 +229,7 @@ jobs:
        with:
          node-version-file: .nvmrc
      - name: Prepare cross compiler
-        run: |
-          # Slow Azure archive transfers can exhaust the job before compilation.
-          # Keep the same signed packages and avoid slow HTTP mirror fallback.
-          for source in /etc/apt/apt-mirrors.txt /etc/apt/sources.list /etc/apt/sources.list.d/ubuntu.sources; do
-            if [ -f "$source" ]; then
-              sudo sed -i 's|azure.archive.ubuntu.com|archive.ubuntu.com|g; s|http://archive.ubuntu.com|https://archive.ubuntu.com|g' "$source"
-            fi
-          done
-          sudo apt-get update
-          sudo apt-get install --no-install-recommends -y g++-mingw-w64-x86-64
+        run: sudo apt-get update && sudo apt-get install --no-install-recommends -y g++-mingw-w64-x86-64
      - run: npm run build:windows-native
      - run: npm run verify:windows-native:artifact
      - uses: actions/upload-artifact@v4
@@ -250,46 +239,20 @@ jobs:
          if-no-files-found: error

  package-e2e:
-    name: Native package baseline (${{ matrix.platform }} ${{ matrix.architecture }})
+    name: Package/install integration (${{ matrix.os }})
    needs: [changes, windows-native-build]
    if: github.event_name == 'push' || needs.changes.outputs.package == 'true'
    strategy:
      fail-fast: false
-      max-parallel: 2
      matrix:
-        include:
-          - os: ubuntu-latest
-            platform: linux
-            architecture: x64
-          - os: ubuntu-24.04-arm
-            platform: linux
-            architecture: arm64
-          - os: macos-15
-            platform: darwin
-            architecture: arm64
-          - os: macos-15-intel
-            platform: darwin
-            architecture: x64
+        os: [ubuntu-latest, macos-14]
    runs-on: ${{ matrix.os }}
-    timeout-minutes: 20
-    env:
-      NODE_OPTIONS: "--max-old-space-size=1024"
-      UV_THREADPOOL_SIZE: "2"
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version-file: .nvmrc
          cache: npm
-      - name: Verify native runtime identity
-        env:
-          EXPECTED_CI_PLATFORM: ${{ matrix.platform }}
-          EXPECTED_CI_ARCHITECTURE: ${{ matrix.architecture }}
-        run: >-
-          node -e "const assert = require('node:assert/strict');
-          assert.equal(process.platform, process.env.EXPECTED_CI_PLATFORM);
-          assert.equal(process.arch, process.env.EXPECTED_CI_ARCHITECTURE);
-          console.log(JSON.stringify({ platform: process.platform, architecture: process.arch, node: process.version }));"
      - run: npm ci
      - uses: actions/download-artifact@v4
        with:
@@ -297,15 +260,12 @@ jobs:
          path: native/windows/build/
      - run: npm run verify:windows-native:artifact
      - run: npm run verify:package
-      - name: Verify real Node Inspector discovery and observation
-        if: matrix.platform == 'darwin'
-        run: npm run verify:inspector

  apple-artifacts:
    name: Real Apple artifact CLI/MCP E2E
    needs: changes
    if: github.event_name == 'push' || needs.changes.outputs.code == 'true'
-    runs-on: macos-15
+    runs-on: macos-14
    timeout-minutes: 15
    steps:
      - uses: actions/checkout@v4
@@ -316,20 +276,12 @@ jobs:
      - run: npm ci
      - run: npm run verify:keyed-archive
      - run: npm run verify:asset-catalog
-      - run: npm run verify:macos-bundle
-      - run: npm run verify:installer-package
-      - name: Native installer and compiled NIB hierarchy regressions
-        run: npm run test:focused -- tests/boundary/filesystem/installScript.test.ts tests/boundary/filesystem/nibNativeHierarchy.test.ts tests/boundary/filesystem/interfaceBuilderBundle.test.ts
+      - name: Native compiled NIB hierarchy regressions
+        run: npm run test:focused -- src/application/NibNativeHierarchy.test.ts
      - name: Real binary metadata and Interface Builder integration
        run: npm run verify:apple-dispatch && npm run verify:interface-builder
      - name: Native plist CLI selection regressions
-        run: npm run test:focused -- tests/boundary/cli/nativePlistCli.test.ts tests/boundary/cli/nativePlistPrototypeKeyCli.test.ts tests/boundary/cli/nativePlistSelectionFailureCli.test.ts
-      - name: Native Swift demangling CLI and MCP regressions
-        run: npm run test:focused -- tests/boundary/cli/nativeDemangleCli.test.ts tests/boundary/mcp/nativeDemangleMcp.test.ts
-      - name: Process filesystem snapshot descriptor regressions
-        run: npm run test:focused -- src/process/capture/FilesystemSnapshot.test.ts
-      - name: Native Darwin ownership and process cleanup regressions
-        run: npm run test:focused -- tests/boundary/process/darwinProcessRunTokenReader.test.ts tests/boundary/process/processCaptureLifecycle.test.ts tests/boundary/cli/processCli.test.ts tests/boundary/mcp/sessionMcp.test.ts
+        run: npm run test:focused -- tests/boundary/cli/nativePlistCli.test.ts

  reconstruction-readiness:
    name: Reconstruction readiness
@@ -366,38 +318,16 @@ jobs:
    if: github.event_name == 'push' || needs.changes.outputs.code == 'true'
    strategy:
      fail-fast: false
-      max-parallel: 2
      matrix:
-        include:
-          - os: ubuntu-latest
-            platform: linux
-            architecture: x64
-          - os: ubuntu-24.04-arm
-            platform: linux
-            architecture: arm64
-          - os: windows-latest
-            platform: win32
-            architecture: x64
+        os: [ubuntu-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    timeout-minutes: 10
-    env:
-      NODE_OPTIONS: "--max-old-space-size=1024"
-      UV_THREADPOOL_SIZE: "2"
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version-file: .nvmrc
          cache: npm
-      - name: Verify native runtime identity
-        env:
-          EXPECTED_CI_PLATFORM: ${{ matrix.platform }}
-          EXPECTED_CI_ARCHITECTURE: ${{ matrix.architecture }}
-        run: >-
-          node -e "const assert = require('node:assert/strict');
-          assert.equal(process.platform, process.env.EXPECTED_CI_PLATFORM);
-          assert.equal(process.arch, process.env.EXPECTED_CI_ARCHITECTURE);
-          console.log(JSON.stringify({ platform: process.platform, architecture: process.arch, node: process.version }));"
      - run: npm ci
      - name: Verify real Node Inspector discovery and observation
        run: npm run verify:inspector
@@ -444,16 +374,12 @@ jobs:
          tests/boundary/filesystem/safeOutputTree.test.ts
          tests/boundary/providers/native/artifactProvider.archiveSafety.test.ts
          tests/boundary/filesystem/setupUnavailableProvider.test.ts
-          tests/boundary/filesystem/windowsNpxRegistration.test.ts
-          src/application/ClientRegistrationIdentity.test.ts
-          tests/boundary/filesystem/webScriptManifestPaths.test.ts
-          tests/acceptance/webModuleCli.test.ts
-          tests/acceptance/webSourceLocationCli.test.ts
          tests/boundary/cli/referenceSourceImportStatus.test.ts
          src/cliReferenceSourceImportStatus.test.ts
          tests/boundary/filesystem/asarInventoryFreshness.test.ts
          tests/composition/javascript-applications/javascriptArtifactReconstruction.test.ts
          tests/conformance/providers/ghidra/windowsCapabilities.test.ts
+          tests/conformance/providers/ghidra/ghidraWindowsFixture.test.ts
          src/ghidra/GhidraInstallation.test.ts
          tests/boundary/providers/ghidra/ghidraTransport.test.ts
          tests/boundary/providers/ghidra/ghidraTargetSnapshot.test.ts
@@ -489,13 +415,3 @@ jobs:
          cache: npm
      - run: npm ci
      - run: npm run docs:check
-      - name: Generation leaves authored files unchanged
-        run: git diff --exit-code
-      - uses: actions/upload-artifact@v4
-        with:
-          name: generated-docs
-          path: |
-            docs/public/product-catalog.json
-            docs/verification/managed-conformance-*.json
-            skills/reverse-engineer-anything
-          if-no-files-found: error
@@ -1,28 +0,0 @@
-name: Documentation build
-
-on:
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-concurrency:
-  group: documentation-build-${{ github.ref }}
-  cancel-in-progress: true
-
-env:
-  HUSKY: "0"
-
-jobs:
-  build:
-    name: Build documentation
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version-file: .nvmrc
-          cache: npm
-      - run: npm ci
-      - run: npm run docs:build
@@ -1,78 +0,0 @@
-name: Real offline binary layout
-
-on:
-  workflow_dispatch:
-    inputs:
-      large_mcp:
-        description: "Also verify the complete 65,281-section result over MCP (slow)"
-        type: boolean
-        default: false
-  pull_request:
-    paths:
-      - ".github/workflows/real-binary-layout.yml"
-      - "bridge/pwntools/**"
-      - "src/native/pwntools/**"
-      - "src/domain/native/binaryLayout*"
-      - "src/application/binaryDiagnostics/**"
-      - "src/contracts/native/binaryDiagnosticsToolContracts.ts"
-      - "src/composition/binaryDiagnostics.ts"
-      - "src/server/registerBinaryDiagnosticsTools.ts"
-      - "src/server/createServer.ts"
-      - "src/cli/binaryDiagnosticsCommands.ts"
-      - "src/cli.ts"
-      - "src/cliCommandNames.ts"
-      - "src/contracts/toolContracts.ts"
-      - "src/contracts/toolEffects.ts"
-      - "src/process/OwnedCommand.ts"
-      - "src/process/ProviderProcess.ts"
-      - "src/process/ProviderDeadline.ts"
-      - "src/process/ProcessOwnership*.ts"
-      - "src/process/PrivateRuntimeRoot.ts"
-      - "src/artifacts/readStableArtifact*.ts"
-      - "src/artifacts/ArtifactReader.ts"
-      - "src/domain/analysisError*.ts"
-      - "scripts/verify-binary-layout.mjs"
-      - "scripts/lib/elf-section-name-fixtures.mjs"
-      - "scripts/lib/large-result-mcp.mjs"
-      - "scripts/fixtures/binary-layout*"
-      - "package.json"
-      - "package-lock.json"
-
-permissions:
-  contents: read
-
-concurrency:
-  group: real-binary-layout-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: true
-
-env:
-  NODE_OPTIONS: --max-old-space-size=768
-  HUSKY: "0"
-  REA_VERIFY_LARGE_ELF_MCP: ${{ inputs.large_mcp && '1' || '0' }}
-
-jobs:
-  real-binary-layout:
-    runs-on: ubuntu-24.04
-    timeout-minutes: 15
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version-file: .nvmrc
-          cache: npm
-      - run: npm ci
-      - name: Acquire exact upstream libraries in an isolated runner environment
-        shell: bash
-        run: |
-          layout_python_root="${RUNNER_TEMP}/rea-pwntools-layout"
-          python3 -m venv "${layout_python_root}"
-          "${layout_python_root}/bin/python" -m pip install --disable-pip-version-check \
-            'pwntools==4.15.0' 'pyelftools==0.33' 'unicorn==2.1.2'
-          command -v gcc
-          command -v ld
-          command -v strip
-          command -v strace
-          echo "REA_PWNTOOLS_PYTHON=${layout_python_root}/bin/python" >> "${GITHUB_ENV}"
-          echo "REA_VERIFY_STRACE_COMMAND=$(command -v strace)" >> "${GITHUB_ENV}"
-      - name: Verify source-owned fixtures through public CLI and MCP
-        run: npm run verify:binary:layout
@@ -7,31 +7,17 @@ on:
      - "scripts/verify-real-browser.mjs"
      - "scripts/verify-browser-network.mjs"
      - "scripts/verify-browser-scripts.mjs"
-      - "scripts/verify-browser-modules.mjs"
-      - "scripts/verify-browser-dom-destinations.mjs"
      - "scripts/lib/browser-*.mjs"
      - "scripts/fixtures/browser-network-site.mjs"
      - "scripts/fixtures/browser-script-site.mjs"
-      - "scripts/fixtures/browser-module-site.mjs"
      - "scripts/fixtures/browser-verifier-site.mjs"
      - "scripts/fixtures/page-cdp-proxy.mjs"
      - "src/browser/**"
      - "src/domain/browser*.ts"
      - "src/domain/webScript*.ts"
-      - "src/domain/webModule*.ts"
-      - "src/application/WebModule*.ts"
-      - "src/composition/webModules.ts"
-      - "src/artifacts/readStableArtifact.ts"
-      - "src/artifacts/ArtifactPaths.ts"
      - "src/application/WebScriptExportService.ts"
      - "src/contracts/webScriptToolContracts.ts"
      - "src/server/registerWebScriptTool.ts"
-      - "src/server/registerWebModuleTool.ts"
-      - "src/server/createServer.ts"
-      - "src/cli/webModuleCommands.ts"
-      - "src/cli.ts"
-      - "src/cliCommandNames.ts"
-      - "src/contracts/toolEffects.ts"
      - "src/cli/webScriptCommands.ts"
      - "package.json"
      - "package-lock.json"
@@ -1,66 +0,0 @@
-name: Real offline EVM interface
-
-on:
-  workflow_dispatch:
-  pull_request:
-    paths:
-      - ".github/workflows/real-evm-interface.yml"
-      - "src/evm/**"
-      - "src/domain/evm/**"
-      - "src/application/evm/**"
-      - "src/contracts/evm/**"
-      - "src/composition/evm.ts"
-      - "src/cli/evmCommands.ts"
-      - "src/server/registerEvmTools.ts"
-      - "src/server/createServer.ts"
-      - "src/cli.ts"
-      - "src/cliCommandNames.ts"
-      - "src/contracts/toolContracts.ts"
-      - "src/contracts/toolEffects.ts"
-      - "src/process/OwnedCommand.ts"
-      - "src/process/ProviderProcess.ts"
-      - "src/process/ProcessOwnership*.ts"
-      - "src/process/ProviderDeadline.ts"
-      - "src/process/PrivateRuntimeRoot.ts"
-      - "src/artifacts/readStableArtifact*.ts"
-      - "src/artifacts/ArtifactReader.ts"
-      - "scripts/verify-evm-interface.mjs"
-      - "scripts/fixtures/evm-interface.sol"
-      - "third_party/evmole/**"
-      - "package.json"
-      - "package-lock.json"
-
-permissions:
-  contents: read
-
-concurrency:
-  group: real-evm-interface-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: true
-
-env:
-  NODE_OPTIONS: --max-old-space-size=768
-  HUSKY: "0"
-
-jobs:
-  real-evm-interface:
-    runs-on: ubuntu-24.04
-    timeout-minutes: 15
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version-file: .nvmrc
-          cache: npm
-      - run: npm ci
-      - name: Acquire unchanged fixture compiler in isolated runner storage
-        shell: bash
-        run: |
-          evm_fixture_root="${RUNNER_TEMP}/rea-evm-fixture-compiler"
-          mkdir -p "${evm_fixture_root}"
-          npm install --prefix "${evm_fixture_root}" --ignore-scripts --no-audit --no-fund --save-exact solc@0.8.30
-          command -v prlimit
-          command -v strace
-          echo "REA_VERIFY_STRACE_COMMAND=$(command -v strace)" >> "${GITHUB_ENV}"
-          echo "REA_VERIFY_SOLC_MODULE=${evm_fixture_root}/node_modules/solc/index.js" >> "${GITHUB_ENV}"
-      - name: Verify source-owned compiled bytecode through public CLI and MCP
-        run: npm run verify:evm:interface
@@ -21,14 +21,7 @@ jobs:
        with:
          node-version-file: .nvmrc
      - name: Prepare cross compiler
-        run: |
-          for source in /etc/apt/apt-mirrors.txt /etc/apt/sources.list /etc/apt/sources.list.d/ubuntu.sources; do
-            if [ -f "$source" ]; then
-              sudo sed -i 's|azure.archive.ubuntu.com|archive.ubuntu.com|g; s|http://archive.ubuntu.com|https://archive.ubuntu.com|g' "$source"
-            fi
-          done
-          sudo apt-get update
-          sudo apt-get install --no-install-recommends -y g++-mingw-w64-x86-64
+        run: sudo apt-get update && sudo apt-get install --no-install-recommends -y g++-mingw-w64-x86-64
      - run: npm run build:windows-native
      - run: npm run verify:windows-native:artifact
      - uses: actions/upload-artifact@v4
@@ -60,18 +53,10 @@ jobs:
        env:
          REA_ANALYSIS_PROVIDER: ghidra
        run: npm run verify:ghidra:windows | Tee-Object -FilePath windows-ghidra-proof.log
-      - name: Verify native x86 Windows Ghidra operations
-        env:
-          REA_ANALYSIS_PROVIDER: ghidra
-        run: npm run verify:ghidra:windows -- --x86 | Tee-Object -FilePath windows-ghidra-x86-proof.log
      - name: Verify ordinary-user CLI and MCP operations
        env:
          REA_ANALYSIS_PROVIDER: ghidra
        run: npm run verify:ghidra:windows:package | Tee-Object -FilePath windows-ghidra-package-proof.log
-      - name: Verify ordinary-user x86 CLI and MCP operations
-        env:
-          REA_ANALYSIS_PROVIDER: ghidra
-        run: npm run verify:ghidra:windows:package -- --x86 | Tee-Object -FilePath windows-ghidra-x86-package-proof.log
      - uses: actions/upload-artifact@v4
        if: always()
        with:
@@ -79,6 +64,4 @@ jobs:
          path: |
            windows-ghidra-proof.log
            windows-ghidra-package-proof.log
-            windows-ghidra-x86-proof.log
-            windows-ghidra-x86-package-proof.log
          retention-days: 30
@@ -1,68 +0,0 @@
-name: Real JavaScript recovery
-
-on:
-  pull_request:
-    paths:
-      - ".github/workflows/real-javascript-recovery.yml"
-      - "src/javascript/recovery/**"
-      - "src/domain/javascript/**"
-      - "src/application/javascript/JavaScriptRecovery*.ts"
-      - "src/composition/javascriptRecovery.ts"
-      - "src/contracts/javascript/javascriptRecoveryToolContracts.ts"
-      - "src/cli/javascriptRecoveryCommands.ts"
-      - "src/cli/javascriptApplicationAnalysis.ts"
-      - "src/server/registerJavaScriptRecoveryTool.ts"
-      - "src/server/createServer.ts"
-      - "src/server/sessionAvailabilityPolicy.ts"
-      - "src/application/CapabilityInventory.ts"
-      - "src/cli.ts"
-      - "src/cliCommandNames.ts"
-      - "src/contracts/toolContracts.ts"
-      - "src/contracts/toolEffects.ts"
-      - "scripts/rea.mjs"
-      - "src/process/**"
-      - "src/artifacts/SafeOutputTree.ts"
-      - "scripts/verify/javascript/recovery.mjs"
-      - "scripts/fixtures/javascript-recovery/**"
-      - "third_party/wakaru"
-      - "package.json"
-      - "package-lock.json"
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-concurrency:
-  group: javascript-recovery-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
-
-env:
-  HUSKY: "0"
-  NODE_OPTIONS: "--max-old-space-size=768"
-  RAYON_NUM_THREADS: "1"
-
-jobs:
-  real-javascript-recovery:
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 24
-          cache: npm
-      - run: npm ci
-      - name: Fetch pinned Wakaru release into the job workspace
-        shell: bash
-        run: |
-          mkdir -p "$RUNNER_TEMP/rea-wakaru"
-          curl --fail --location --retry 3 https://github.com/pionxzh/wakaru/releases/download/v1.13.0/wakaru-linux-x64.tar.gz -o "$RUNNER_TEMP/rea-wakaru/release.tar.gz"
-          tar -xzf "$RUNNER_TEMP/rea-wakaru/release.tar.gz" -C "$RUNNER_TEMP/rea-wakaru" wakaru
-          printf '%s  %s\n' e8c7ca052974604197389f6ace7464e4dd24dce64e2730971521bd6606ec9c9e "$RUNNER_TEMP/rea-wakaru/wakaru" | sha256sum --check
-      - name: Install isolated fixture compilers
-        run: npm install --prefix "$RUNNER_TEMP/rea-fixture-compilers" --ignore-scripts --no-audit --no-fund esbuild@0.25.10 webpack@5.101.3
-      - run: npm run build:cached
-      - run: npm run verify:javascript:recovery
-        env:
-          REA_WAKARU_COMMAND: ${{ runner.temp }}/rea-wakaru/wakaru
-          REA_JAVASCRIPT_FIXTURE_TOOLS: ${{ runner.temp }}/rea-fixture-compilers
@@ -1,99 +0,0 @@
-name: Real recorded crash evidence
-
-on:
-  workflow_dispatch:
-  pull_request:
-    paths:
-      - ".github/workflows/real-recorded-crash.yml"
-      - "bridge/pwntools/**"
-      - "bridge/pwndbg/**"
-      - "src/native/pwntools/**"
-      - "src/native/pwndbg/**"
-      - "src/domain/native/recordedCrash*"
-      - "src/application/binaryDiagnostics/**"
-      - "src/contracts/native/binaryDiagnosticsToolContracts.ts"
-      - "src/contracts/toolEffects.ts"
-      - "src/contracts/toolOutputSchemaGroups.ts"
-      - "src/composition/binaryDiagnostics.ts"
-      - "src/server/registerRecordedCrashTools.ts"
-      - "src/server/createServer.ts"
-      - "src/server/sessionAvailabilityPolicy.ts"
-      - "src/cli/binaryDiagnosticsCommands.ts"
-      - "src/cliCommandNames.ts"
-      - "src/process/**"
-      - "src/artifacts/readStableArtifact*.ts"
-      - "src/domain/analysisError*.ts"
-      - "scripts/verify-recorded-crash.mjs"
-      - "scripts/verify/recorded-crash/**"
-      - "scripts/lib/recorded-core-fixtures.py"
-      - "scripts/fixtures/recorded-crash.c"
-      - "third_party/pwndbg/**"
-      - "package.json"
-      - "package-lock.json"
-
-permissions:
-  contents: read
-
-concurrency:
-  group: real-recorded-crash-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: true
-
-env:
-  NODE_OPTIONS: --max-old-space-size=768
-  HUSKY: "0"
-  UV_CONCURRENT_BUILDS: "1"
-  UV_CONCURRENT_INSTALLS: "1"
-  UV_PYTHON_DOWNLOADS: never
-
-jobs:
-  real-recorded-crash:
-    runs-on: ubuntu-24.04
-    timeout-minutes: 15
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version-file: .nvmrc
-          cache: npm
-      - run: npm ci
-      - name: Install GDB on the disposable CI runner
-        shell: bash
-        run: |
-          sudo apt-get update -qq
-          sudo apt-get install --yes --no-install-recommends gdb
-      - name: Acquire exact unchanged upstreams in isolated runner storage
-        shell: bash
-        run: |
-          command -v gcc
-          command -v gdb
-          command -v strace
-          core_decoder_root="${RUNNER_TEMP}/rea-core-decoder"
-          core_pwndbg_root="${RUNNER_TEMP}/rea-core-pwndbg"
-          core_pwndbg_venv="${RUNNER_TEMP}/rea-core-pwndbg-venv"
-          python3 -m venv "${core_decoder_root}"
-          "${core_decoder_root}/bin/python" -m pip install --disable-pip-version-check \
-            'pwntools==4.15.0' 'pyelftools==0.33' 'unicorn==2.1.2' 'uv==0.12.0'
-          git init "${core_pwndbg_root}"
-          git -C "${core_pwndbg_root}" remote add origin https://github.com/pwndbg/pwndbg.git
-          git -C "${core_pwndbg_root}" fetch --depth=1 origin 55596aa676a2756efb8d67034f31675170eabe48
-          git -C "${core_pwndbg_root}" checkout --detach FETCH_HEAD
-          test "$(git -C "${core_pwndbg_root}" rev-parse HEAD)" = 55596aa676a2756efb8d67034f31675170eabe48
-          UV_PROJECT_ENVIRONMENT="${core_pwndbg_venv}" \
-            "${core_decoder_root}/bin/uv" sync --project "${core_pwndbg_root}" \
-            --frozen --no-editable --no-default-groups --python /usr/bin/python3 --no-managed-python
-          test -z "$(git -C "${core_pwndbg_root}" status --porcelain --untracked-files=no)"
-          echo "REA_PWNTOOLS_PYTHON=${core_decoder_root}/bin/python" >> "${GITHUB_ENV}"
-          echo "REA_PWNDBG_GDB=$(command -v gdb)" >> "${GITHUB_ENV}"
-          echo "REA_PWNDBG_GDBINIT=${core_pwndbg_root}/gdbinit.py" >> "${GITHUB_ENV}"
-          echo "REA_PWNDBG_VENV_PATH=${core_pwndbg_venv}" >> "${GITHUB_ENV}"
-          echo "REA_VERIFY_STRACE_COMMAND=$(command -v strace)" >> "${GITHUB_ENV}"
-      - name: Build and install the exact package in isolated runner storage
-        shell: bash
-        run: |
-          npm run build:cached
-          npm pack --ignore-scripts --json --pack-destination "${RUNNER_TEMP}" > "${RUNNER_TEMP}/rea-core-pack.json"
-          core_package_name=$(node -p 'JSON.parse(require("node:fs").readFileSync(process.argv[1], "utf8"))[0].filename' "${RUNNER_TEMP}/rea-core-pack.json")
-          npm install --prefix "${RUNNER_TEMP}/rea-core-installed" --ignore-scripts --no-fund --no-audit "${RUNNER_TEMP}/${core_package_name}"
-      - name: Verify installed CLI and MCP against the source-owned recording
-        shell: bash
-        run: node scripts/verify-recorded-crash.mjs "${RUNNER_TEMP}/rea-core-installed/node_modules/rea-agents/scripts/rea.mjs"
@@ -1,75 +0,0 @@
-name: Real historical web network captures
-
-on:
-  workflow_dispatch:
-  pull_request:
-    paths:
-      - ".github/workflows/real-web-network-captures.yml"
-      - "bridge/mitmproxy/**"
-      - "src/browser/history/**"
-      - "src/domain/webNetworkCapture*.ts"
-      - "src/domain/analysisError*.ts"
-      - "src/contracts/errorSchemas.ts"
-      - "src/domain/explicitSensitive*.ts"
-      - "src/application/WebNetworkCapture*"
-      - "src/composition/webNetworkCaptures.ts"
-      - "src/cli/webNetworkCaptureCommands.ts"
-      - "src/server/registerWebNetworkCaptureTool.ts"
-      - "src/server/createServer.ts"
-      - "src/server/toolRegistrationOptions.ts"
-      - "src/cli.ts"
-      - "src/cliCommandNames.ts"
-      - "src/contracts/toolContracts.ts"
-      - "src/contracts/toolEffects.ts"
-      - "src/process/OwnedCommand.ts"
-      - "src/process/ProviderProcess.ts"
-      - "src/process/ProviderDeadline.ts"
-      - "src/process/ProcessOwnership*.ts"
-      - "src/process/PrivateRuntimeRoot.ts"
-      - "src/process/capture/ProcessCaptureLifecycle.ts"
-      - "src/artifacts/readStableArtifact*.ts"
-      - "src/artifacts/ArtifactReader.ts"
-      - "src/contracts/webNetworkCaptureToolContracts.ts"
-      - "scripts/verify-web-network-captures.mjs"
-      - "scripts/fixtures/generate-mitmproxy-capture.py"
-      - "package.json"
-      - "package-lock.json"
-
-permissions:
-  contents: read
-
-concurrency:
-  group: real-web-network-captures-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: true
-
-env:
-  HUSKY: "0"
-  NODE_OPTIONS: --max-old-space-size=768
-
-jobs:
-  real-web-network-captures:
-    runs-on: ubuntu-24.04
-    timeout-minutes: 15
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version-file: .nvmrc
-          cache: npm
-      - name: Use pinned package manager
-        run: npm install --global npm@11.16.0
-      - run: npm ci
-      - name: Acquire fixed upstream native profile in runner temporary storage
-        shell: bash
-        run: |
-          capture_tool_root="${RUNNER_TEMP}/rea-mitmproxy-12.2.3"
-          mkdir -p "${capture_tool_root}"
-          curl --fail --location --retry 3 --max-time 180 \
-            https://downloads.mitmproxy.org/12.2.3/mitmproxy-12.2.3-linux-x86_64.tar.gz \
-            --output "${capture_tool_root}/mitmproxy.tar.gz"
-          echo '2e95286b618fa6fd33e5e62a78c2e5112571d85f42ec2bac29b97ee242bdb5c5  mitmproxy.tar.gz' \
-            | (cd "${capture_tool_root}" && sha256sum --check --strict)
-          tar -xzf "${capture_tool_root}/mitmproxy.tar.gz" -C "${capture_tool_root}"
-          echo "REA_MITMDUMP_COMMAND=${capture_tool_root}/mitmdump" >> "${GITHUB_ENV}"
-      - name: Verify upstream producer fixtures through public CLI and MCP
-        run: npm run verify:web:network-captures
@@ -1,54 +0,0 @@
-name: Real website runtime attribution
-on:
-  pull_request:
-    paths:
-      - ".github/workflows/real-web-runtime.yml"
-      - "scripts/verify-browser-runtime.mjs"
-      - "scripts/lib/browser-runtime-*.mjs"
-      - "src/process/ProviderProcess.ts"
-      - "src/process/ProcessOwnership*.ts"
-      - "scripts/fixtures/browser-runtime-site.mjs"
-      - "src/browser/execution/**"
-      - "src/browser/CdpConnection.ts"
-      - "src/browser/CdpEndpoint.ts"
-      - "src/browser/CdpTarget*.ts"
-      - "src/browser/CdpCaptureValues.ts"
-      - "src/browser/CdpAuthorized*.ts"
-      - "src/domain/webRuntime.ts"
-      - "src/domain/webExecution.ts"
-      - "src/domain/webEventListeners.ts"
-      - "src/domain/browserObservationError*.ts"
-      - "src/application/WebRuntime*.ts"
-      - "src/composition/webRuntime.ts"
-      - "src/contracts/webRuntimeToolContracts.ts"
-      - "src/contracts/toolEffects.ts"
-      - "src/server/registerWebRuntimeTools.ts"
-      - "src/server/createServer.ts"
-      - "src/cli/webRuntimeCommands.ts"
-      - "src/cli/commandCancellation.ts"
-      - "src/cli.ts"
-      - "package.json"
-      - "package-lock.json"
-  workflow_dispatch:
-permissions:
-  contents: read
-concurrency:
-  group: real-web-runtime-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
-env:
-  HUSKY: "0"
-jobs:
-  real-web-runtime:
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 24
-          cache: npm
-      - run: npm ci
-      - run: npm run verify:browser:runtime
-        env:
-          REA_BROWSER_EXECUTABLE: /usr/bin/google-chrome
-          REA_BROWSER_NO_SANDBOX: "true"
@@ -1,50 +0,0 @@
-name: Real website source-map verification
-on:
-  pull_request:
-    paths:
-      - ".github/workflows/real-web-source-map.yml"
-      - "scripts/verify-browser-source-maps.mjs"
-      - "scripts/lib/browser-source-map-e2e.mjs"
-      - "scripts/fixtures/browser-source-map-site.mjs"
-      - "src/javascript/sourceMaps/**"
-      - "src/browser/assets/**"
-      - "src/domain/webSource*.ts"
-      - "src/domain/webScript*.ts"
-      - "src/application/WebSourceLocation*.ts"
-      - "src/application/ValidateSelectedWebScript.ts"
-      - "src/composition/webSourceLocations.ts"
-      - "src/server/registerWebSourceLocationTool.ts"
-      - "src/server/createServer.ts"
-      - "src/contracts/webScriptToolContracts.ts"
-      - "src/process/**"
-      - "src/cli/webSourceLocationCommands.ts"
-      - "src/cli.ts"
-      - "src/artifacts/readStableArtifact.ts"
-      - "package.json"
-      - "package-lock.json"
-  workflow_dispatch:
-permissions:
-  contents: read
-concurrency:
-  group: real-web-source-map-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
-env:
-  HUSKY: "0"
-jobs:
-  real-web-source-map:
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 24
-          cache: npm
-      - run: npm ci
-      - name: Install the pinned compiler into an isolated fixture directory
-        run: npm install --prefix "$RUNNER_TEMP/rea-web-source-map-compiler" --no-audit --no-fund --package-lock=false esbuild@0.25.10
-      - run: npm run verify:browser:source-maps
-        env:
-          REA_BROWSER_EXECUTABLE: /usr/bin/google-chrome
-          REA_BROWSER_NO_SANDBOX: "true"
-          REA_WEB_SOURCE_MAP_COMPILER: ${{ runner.temp }}/rea-web-source-map-compiler/node_modules/esbuild/lib/main.js
@@ -1,24 +1,14 @@
 name: Release

 on:
-  workflow_dispatch:
-    inputs:
-      release_branch:
-        description: Frozen release branch (release/VERSION)
-        required: true
-        type: string
-      phase:
-        description: Prepare the release PR, or publish its reviewed merge
-        required: true
-        default: prepare
-        type: choice
-        options: [prepare, publish]
+  push:
+    branches: [main]

 env:
  HUSKY: "0"

 concurrency:
-  group: release-${{ inputs.release_branch }}
+  group: release-${{ github.ref }}
  cancel-in-progress: false

 jobs:
@@ -30,163 +20,85 @@ jobs:
      pull-requests: write
    outputs:
      release_created: ${{ steps.release.outputs.release_created }}
-      sha: ${{ steps.release.outputs.sha }}
+      tag_name: ${{ steps.release.outputs.tag_name }}
    steps:
-      - name: Validate release selection
-        shell: bash
-        env:
-          RELEASE_BRANCH: ${{ inputs.release_branch }}
-          RELEASE_PHASE: ${{ inputs.phase }}
-        run: |
-          if [[ "${RELEASE_PHASE}" != prepare && "${RELEASE_PHASE}" != publish ]]; then
-            echo "phase must be prepare or publish." >&2
-            exit 1
-          fi
-          if [[ "${RELEASE_PHASE}" == prepare && "${GITHUB_REF}" != "refs/heads/main" ]]; then
-            echo "Run prepare from main; release_branch selects the frozen source." >&2
-            exit 1
-          fi
-          if [[ "${RELEASE_PHASE}" == publish && "${GITHUB_REF}" != "refs/heads/${RELEASE_BRANCH}" ]]; then
-            echo "Run publish from the selected frozen release branch so npm provenance records its source." >&2
-            exit 1
-          fi
-          if [[ ! "${RELEASE_BRANCH}" =~ ^release/[^/]+$ ]]; then
-            echo "release_branch must select a release/ branch; main is not a release checkpoint." >&2
-            exit 1
-          fi
-          if ! git check-ref-format "refs/heads/${RELEASE_BRANCH}"; then
-            echo "Invalid release_branch: ${RELEASE_BRANCH}" >&2
-            exit 1
-          fi
-
-      - name: Resolve release branch tip
-        id: branch
-        shell: bash
-        env:
-          GH_TOKEN: ${{ github.token }}
-          RELEASE_BRANCH: ${{ inputs.release_branch }}
-        run: |
-          sha="$(gh api "repos/${GITHUB_REPOSITORY}/git/ref/heads/${RELEASE_BRANCH}" --jq '.object | select(.type == "commit") | .sha')"
-          if [[ ! "${sha}" =~ ^[0-9a-f]{40}$ ]]; then
-            echo "The release branch tip is not a commit." >&2
-            exit 1
-          fi
-          echo "sha=${sha}" >> "${GITHUB_OUTPUT}"
-
-      - name: Require the publish dispatch to match the branch tip
-        if: inputs.phase == 'publish'
-        shell: bash
-        env:
-          BRANCH_SHA: ${{ steps.branch.outputs.sha }}
-        run: |
-          if [[ "${BRANCH_SHA}" != "${GITHUB_SHA}" ]]; then
-            echo "The release branch tip differs from the dispatched checkpoint; refusing to create a release for a moved source." >&2
-            exit 1
-          fi
-
-      - name: Check out release controller and Git history
-        uses: actions/checkout@v6
-        with:
-          ref: ${{ github.sha }}
-          fetch-depth: 0
-          persist-credentials: false
-
-      - name: Set up Node.js for checkpoint validation
-        uses: actions/setup-node@v6
-        with:
-          node-version-file: .nvmrc
-          package-manager-cache: false
-
-      - name: Install checkpoint validation dependencies
-        run: npm ci
-
-      - name: Validate checkpoint version and ancestry before release creation
-        env:
-          RELEASE_PHASE: ${{ inputs.phase }}
-          RELEASE_BRANCH: ${{ inputs.release_branch }}
-          SOURCE_SHA: ${{ steps.branch.outputs.sha }}
-        run: >-
-          node scripts/verify-release-checkpoint.mjs
-          --phase "$RELEASE_PHASE" --release-branch "$RELEASE_BRANCH"
-          --source-sha "$SOURCE_SHA"
-
      - uses: googleapis/release-please-action@v4
        id: release
        with:
-          # A dedicated credential starts PR CI automatically; the built-in
-          # token creates approval-required PR runs for maintainers to approve.
+          # A dedicated credential lets release-PR updates trigger CI. GitHub
+          # requires manual approval for pull_request events from GITHUB_TOKEN.
          token: ${{ secrets.RELEASE_PLEASE_TOKEN || secrets.GITHUB_TOKEN }}
-          target-branch: ${{ inputs.release_branch }}
-          skip-github-release: ${{ inputs.phase == 'prepare' }}
-          skip-github-pull-request: ${{ inputs.phase == 'publish' }}
-
-      - name: Require a merged release PR for publication
-        if: inputs.phase == 'publish' && steps.release.outputs.release_created != 'true'
-        run: |
-          echo "No new release was created. Merge the reviewed release PR into its frozen branch before publishing. For a partial publication, re-run failed jobs in the original run." >&2
-          exit 1
-
-      - name: Bind publication to the dispatched checkpoint
-        if: inputs.phase == 'publish' && steps.release.outputs.release_created == 'true'
-        shell: bash
-        env:
-          RELEASE_SHA: ${{ steps.release.outputs.sha }}
-        run: |
-          if [[ "${RELEASE_SHA}" != "${GITHUB_SHA}" ]]; then
-            echo "The tagged release SHA differs from the dispatched checkpoint; refusing to publish mismatched source provenance. The GitHub release already exists; do not dispatch publish again." >&2
-            exit 1
-          fi

      - name: Check out release pull request
-        if: inputs.phase == 'prepare' && steps.release.outputs.prs_created == 'true'
+        if: steps.release.outputs.prs_created == 'true'
        uses: actions/checkout@v6
        with:
          ref: ${{ fromJSON(steps.release.outputs.pr).headBranchName }}
-          fetch-depth: 0
          persist-credentials: false

      - name: Set up Node.js for generated documentation
-        if: inputs.phase == 'prepare' && steps.release.outputs.prs_created == 'true'
+        if: steps.release.outputs.prs_created == 'true'
        uses: actions/setup-node@v6
        with:
          node-version-file: .nvmrc
          package-manager-cache: false

      - name: Install dependencies
-        if: inputs.phase == 'prepare' && steps.release.outputs.prs_created == 'true'
+        if: steps.release.outputs.prs_created == 'true'
        run: npm ci

-      - name: Validate prepared release version and migration notes
-        if: inputs.phase == 'prepare' && steps.release.outputs.prs_created == 'true'
-        env:
-          RELEASE_BRANCH: ${{ inputs.release_branch }}
-          SOURCE_SHA: ${{ steps.branch.outputs.sha }}
-        run: >-
-          node scripts/verify-release-checkpoint.mjs
-          --phase prepare --stage candidate --release-branch "$RELEASE_BRANCH"
-          --source-sha "$SOURCE_SHA"
-
      - name: Regenerate release documentation
-        if: inputs.phase == 'prepare' && steps.release.outputs.prs_created == 'true'
+        if: steps.release.outputs.prs_created == 'true'
        run: npm run docs:generate

-      - name: Validate generated release documentation
-        if: inputs.phase == 'prepare' && steps.release.outputs.prs_created == 'true'
-        run: npm run docs:check && git diff --exit-code
+      - name: Commit canonical release catalog
+        if: steps.release.outputs.prs_created == 'true'
+        shell: bash
+        env:
+          # Use the same identity for the follow-up commit so it also triggers CI.
+          GH_TOKEN: ${{ secrets.RELEASE_PLEASE_TOKEN || secrets.GITHUB_TOKEN }}
+          RELEASE_PR_JSON: ${{ steps.release.outputs.pr }}
+        run: |
+          release_pr_branch="$(node --input-type=module -e '
+            const value = JSON.parse(process.env.RELEASE_PR_JSON ?? "");
+            if (
+              typeof value !== "object" ||
+              value === null ||
+              typeof value.headBranchName !== "string" ||
+              value.headBranchName.length === 0
+            ) {
+              process.exit(1);
+            }
+            process.stdout.write(value.headBranchName);
+          ')"
+          changed_paths="$(git diff --name-only)"
+          if [[ -z "${changed_paths}" ]]; then
+            echo "Release documentation is already canonical."
+            exit 0
+          fi
+          if [[ "${changed_paths}" != "docs/product-catalog.json" ]]; then
+            echo "docs:generate changed unexpected tracked paths:" >&2
+            printf '%s\n' "${changed_paths}" >&2
+            exit 1
+          fi
+          git diff --check
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git add -- docs/product-catalog.json
+          git commit -m "chore: normalize release product catalog"
+          gh auth setup-git
+          git push origin "HEAD:${release_pr_branch}"

  publish:
    name: Publish to npm
    needs: release-please
-    if: inputs.phase == 'publish' && needs.release-please.outputs.release_created == 'true'
+    if: needs.release-please.outputs.release_created == 'true'
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    steps:
      - uses: actions/checkout@v6
-        with:
-          ref: ${{ needs.release-please.outputs.sha }}
-          persist-credentials: false

      - uses: actions/setup-node@v6
        with:
@@ -223,32 +135,28 @@ jobs:
          verification_root="$(mktemp -d)"
          trap 'rm -rf -- "${verification_root}"' EXIT
          cd "${verification_root}"
-          max_attempts=120
-          sleep_seconds=15
-          total_window_minutes=$((max_attempts * sleep_seconds / 60))
-          for attempt in $(seq 1 "${max_attempts}"); do
+          for attempt in $(seq 1 80); do
            published_version="$(npm view --prefer-online "rea-agents@${version}" version --json 2>/dev/null || true)"
            if [ "${published_version}" = "\"${version}\"" ]; then
-              echo "rea-agents@${version} is visible on npm after attempt ${attempt}/${max_attempts}; verifying the published CLI."
+              echo "rea-agents@${version} is visible on npm after attempt ${attempt}; verifying the published CLI."
              npm exec --yes --package="rea-agents@${version}" -- rea --help
              npm exec --yes --package="rea-agents@${version}" -- rea --llms
              node "${GITHUB_WORKSPACE}/scripts/verify-published-package.mjs" "${version}"
              exit 0
            else
-              echo "rea-agents@${version} is not visible on npm yet (attempt ${attempt}/${max_attempts}; up to ${total_window_minutes} minutes)" >&2
+              echo "rea-agents@${version} is not visible on npm yet (attempt ${attempt}/80; up to 20 minutes)" >&2
            fi
-            if [ "${attempt}" -lt "${max_attempts}" ]; then
-              sleep "${sleep_seconds}"
+            if [ "${attempt}" -lt 80 ]; then
+              sleep 15
            fi
          done
-          echo "rea-agents@${version} did not become visible on npm within ${total_window_minutes} minutes (${max_attempts} attempts × ${sleep_seconds}s)" >&2
-          echo "This indicates npm registry propagation delay, not a CLI verification failure." >&2
+          echo "rea-agents@${version} did not become visible on npm within 20 minutes" >&2
          exit 1

  publish-mcp:
    name: Publish to MCP Registry
    needs: [release-please, publish]
-    if: inputs.phase == 'publish' && needs.release-please.outputs.release_created == 'true' && needs.publish.result == 'success'
+    if: needs.release-please.outputs.release_created == 'true' && needs.publish.result == 'success'
    runs-on: ubuntu-latest
    permissions:
      contents: read
@@ -256,7 +164,7 @@ jobs:
    steps:
      - uses: actions/checkout@v6
        with:
-          ref: ${{ needs.release-please.outputs.sha }}
+          ref: ${{ needs.release-please.outputs.tag_name }}
          persist-credentials: false

      - name: Verify package and registry metadata versions
@@ -1,31 +0,0 @@
-name: Website checks
-
-on:
-  pull_request:
-    branches: [main, "release/*"]
-    paths:
-      - "website/**"
-      - "scripts/verify-website.py"
-      - "scripts/prepare-website.py"
-      - ".github/workflows/**"
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-concurrency:
-  group: website-check-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: true
-
-jobs:
-  check:
-    name: Website checks
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    steps:
-      - name: Check out the repository
-        uses: actions/checkout@v4
-      - name: Prepare the example download
-        run: python3 scripts/prepare-website.py
-      - name: Check website links and publishing configuration
-        run: python3 scripts/verify-website.py
@@ -1,48 +0,0 @@
-name: Publish REA website
-
-on:
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-concurrency:
-  group: website-pages
-  cancel-in-progress: false
-
-jobs:
-  prepare:
-    if: github.ref == 'refs/heads/main'
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    permissions:
-      contents: read
-      pages: read
-    steps:
-      - name: Check out the repository
-        uses: actions/checkout@v4
-      - name: Prepare the example download
-        run: python3 scripts/prepare-website.py
-      - name: Check website links and publishing configuration
-        run: python3 scripts/verify-website.py
-      - name: Configure Pages
-        uses: actions/configure-pages@v5
-      - name: Upload the website
-        uses: actions/upload-pages-artifact@v4
-        with:
-          path: website/public
-
-  deploy:
-    needs: prepare
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    permissions:
-      pages: write
-      id-token: write
-    environment:
-      name: github-pages
-      url: ${{ steps.deployment.outputs.page_url }}
-    steps:
-      - name: Publish to GitHub Pages
-        id: deployment
-        uses: actions/deploy-pages@v4
@@ -37,8 +37,6 @@ coverage/
 test-results.xml
 .turbo/
 .cache/
-docs/.vitepress/cache/
-docs/.vitepress/dist/

 # OS
 .DS_Store
@@ -46,16 +44,3 @@ Thumbs.db

 # Local reference sources and analysis artifacts
 /_reference/
-
-# Generated website download
-/website/public/examples/notes-example.zip
-
-# Build-generated MCP tool catalog (regenerated by `npm run build`; never commit)
-src/generatedMcpToolCatalog.ts
-
-# Derived catalogs, portable conformance projections, and packaged skill bundles
-# (regenerated from this checkout by `npm run build:cached`; never commit)
-/skills/
-/docs/public/product-catalog.json
-/docs/verification/managed-conformance-manifest.json
-/docs/verification/managed-conformance-ledger.json
@@ -10,6 +10,3 @@
 [submodule "third_party/ghidra-nativeaot"]
 	path = third_party/ghidra-nativeaot
 	url = https://github.com/Washi1337/ghidra-nativeaot.git
-[submodule "third_party/wakaru"]
-	path = third_party/wakaru
-	url = https://github.com/pionxzh/wakaru.git
@@ -28,13 +28,98 @@
    {
      "files": [
        "scripts/electron-active-hook*.cjs",
-        "tests/conformance/readiness/electron/*.js",
-        "website/public/examples/notes-electron/*.js"
+        "tests/conformance/readiness/electron/*.js"
      ],
      "rules": {
        "no-var-requires": "off"
      }
    },
+    {
+      "files": [
+        "src/{contracts,domain,server}/**/*.ts",
+        "src/application/**/*.ts"
+      ],
+      "excludeFiles": ["src/application/runtime.ts"],
+      "rules": {
+        "no-restricted-imports": [
+          "error",
+          {
+            "patterns": [
+              {
+                "group": [
+                  "**/ghidra/**",
+                  "**/hopper/**",
+                  "**/ida/**",
+                  "**/android/**",
+                  "**/firmware/**"
+                ],
+                "message": "Provider imports belong behind typed ports or in production composition."
+              }
+            ]
+          }
+        ]
+      }
+    },
+    {
+      "files": ["src/{contracts,domain}/**/*.ts"],
+      "rules": {
+        "no-restricted-imports": [
+          "error",
+          {
+            "patterns": [
+              {
+                "group": [
+                  "**/application/**",
+                  "**/server/**",
+                  "**/cli/**",
+                  "**/main/**",
+                  "**/cli.*",
+                  "**/main.*",
+                  "**/android/**",
+                  "**/artifacts/**",
+                  "**/browser/**",
+                  "**/dotnet/**",
+                  "**/firmware/**",
+                  "**/ghidra/**",
+                  "**/hopper/**",
+                  "**/ida/**",
+                  "**/native/**",
+                  "**/process/**",
+                  "**/reference/**",
+                  "**/windows/**",
+                  "**/composition/**"
+                ],
+                "message": "Domain and contracts depend inward; use typed ports for application, caller and provider boundaries."
+              }
+            ]
+          }
+        ]
+      }
+    },
+    {
+      "files": ["src/application/**/*.ts"],
+      "excludeFiles": ["src/application/runtime.ts"],
+      "rules": {
+        "no-restricted-imports": [
+          "error",
+          {
+            "patterns": [
+              {
+                "group": [
+                  "**/ghidra/**",
+                  "**/hopper/**",
+                  "**/ida/**",
+                  "**/android/**",
+                  "**/firmware/**",
+                  "**/composition/**"
+                ],
+                "message": "Application workflows use typed ports; production construction belongs in composition."
+              }
+            ]
+          }
+        ]
+      }
+    },
    {
      "files": ["tests/**/*.ts", "src/**/*.test.ts", "src/**/*.fixture.ts"],
      "rules": {
@@ -49,6 +134,36 @@
        ]
      }
    },
+    {
+      "files": ["src/domain/**/*.{fixture,test}.ts"],
+      "rules": {
+        "no-restricted-imports": [
+          "error",
+          {
+            "patterns": [
+              {
+                "group": [
+                  "**/application/**",
+                  "**/server/**",
+                  "**/process/**",
+                  "**/browser/**",
+                  "**/ghidra/**",
+                  "**/hopper/**",
+                  "**/ida/**",
+                  "**/replay/**",
+                  "**/cli.*",
+                  "**/main.*",
+                  "**/composition/**",
+                  "**/android/**",
+                  "**/firmware/**"
+                ],
+                "message": "Domain tests may import only their owning domain and inward dependencies."
+              }
+            ]
+          }
+        ]
+      }
+    },
    {
      "files": ["src/application/**/*.test.ts"],
      "rules": {
@@ -1,3 +1,3 @@
 {
-  ".": "6.0.0"
+  ".": "4.1.0"
 }
@@ -2,7 +2,7 @@

 ## Product Direction

-REA exposes reverse-engineering tools through a CLI and MCP server. Hopper, the bring-your-own Ghidra adapter, and the bring-your-own IDA MCP adapter are operation-capable deep binary-analysis providers. Ghidra is supported on Linux x64 and macOS x64/arm64 with matching native decompiler tools, and has an experimental Windows x64 P0 boundary for approved native x86 and x86-64 PE applications; on Linux and macOS it supplies inventory, function analysis, and atomic function annotation edits in an ephemeral database, without modifying executable bytes or controlling a GUI. Windows P0 has no mutation authority. IDA adapts upstream legacy attached GUI and modern headless database-supervisor profiles for live read-only analysis; initial real verification covers Windows, and an attached GUI database is never saved or closed. Keep provider-specific code out of the domain and application layers.
+REA exposes reverse-engineering tools through a CLI and MCP server. Hopper, the bring-your-own Ghidra adapter, and the bring-your-own IDA MCP adapter are operation-capable deep binary-analysis providers. Ghidra is supported on Linux x64 and macOS x64/arm64 with matching native decompiler tools, and has an experimental Windows x64 P0 boundary for approved native x86-64 PE applications; on Linux and macOS it supplies inventory, function analysis, and atomic function annotation edits in an ephemeral database, without modifying executable bytes or controlling a GUI. Windows P0 has no mutation authority. IDA adapts upstream legacy attached GUI and modern headless database-supervisor profiles for live read-only analysis; initial real verification covers Windows, and an attached GUI database is never saved or closed. Keep provider-specific code out of the domain and application layers.

 Prioritize:

@@ -20,12 +20,11 @@ REA is a local-only tool. Preserve caller-selected inputs, captured output, URLs
 REA is a layered ESM TypeScript application. Dependencies flow inward from pure domain logic through contracts, providers, application workflows, and CLI/MCP adapters. See [docs/architecture.mermaid](docs/architecture.mermaid) for the component map.

 - `src/domain/` owns pure provider-neutral semantics; `src/contracts/` owns caller-visible schemas and the canonical tool inventory.
- `src/hopper/`, `src/ghidra/`, `src/ida/`, `src/browser/`, `src/inspector/`, `src/native/`, `src/artifacts/`, and `src/dotnet/` own provider-specific boundaries. Keep provider protocols out of domain and application code.
- `src/application/` composes shared CLI/MCP workflows, including Evidence provenance, unknowns, and eligible snapshot bindings; `src/server/` translates MCP requests; `src/cli.ts` and `src/main.ts` are the CLI and MCP entry points.
- `src/process/` owns shared process lifecycle primitives, not provider wire protocols. Reuse its supervision and identity primitives before adding provider-local lifecycle code; a PID and executable pathname alone do not establish ownership after exit or reuse. `bridge/` contains provider-side adapters.
- `tests/` contains unit, composition, boundary, acceptance, and conformance tests. `scripts/verify-*` and capability directories under `scripts/verify/` contain real-toolchain checks.
- `docs/public/product-catalog.json`, `docs/verification/managed-conformance-*.json`, and `skills/` are ignored build outputs. Update source contracts and authored instructions in `skill-src/`, then run `npm run build:cached`; never commit derived catalog digests or portable conformance projections.
- `src/generatedMcpToolCatalog.ts` is build-generated and gitignored. Never commit it; resolve any trace of it in merges by deleting it and running `npm run build:cached`.
+- `src/hopper/`, `src/ghidra/`, `src/ida/`, `src/browser/`, `src/native/`, `src/artifacts/`, and `src/dotnet/` own provider-specific boundaries. Keep provider protocols out of domain and application code.
+- `src/application/` composes shared CLI/MCP workflows; `src/server/` translates MCP requests; `src/cli.ts` and `src/main.ts` are the CLI and MCP entry points.
+- `src/process/` owns shared process lifecycle primitives, not provider wire protocols. `bridge/` contains provider-side adapters.
+- `tests/` contains unit, composition, boundary, acceptance, and conformance tests. `scripts/verify-*` contains real-toolchain checks.
+- `docs/product-catalog.json` is generated. Update its source contracts and regenerate it; do not edit it directly.

 ## Build, Test, and Development Commands

@@ -36,7 +35,7 @@ REA is a layered ESM TypeScript application. Dependencies flow inward from pure
 - `npm run check:changed`: run cached static checks and source tests affected since the branch merge base (default `origin/main`).
 - `npm run check:fast`: run cached typecheck and lint checks.
 - `npm run check:pr`: opt into the complete local deterministic gate and generated-document checks for broad changes; CI owns full coverage. Routine iterations need focused tests and relevant checks, not the whole gate each time.
- `npm run docs:check`: build and validate generated documents for the current checkout; `npm run docs:generate` regenerates them. CI retains ignored outputs as artifacts and does not push snapshot commits to feature branches.
+- `npm run docs:check`: check committed generated documents; `npm run docs:generate` regenerates them.
 - For provider-dependent changes, see [docs/testing.md](docs/testing.md) and run the matching real-provider verification.
 - Keep each verification lane's prerequisites limited to the claim it checks. Use host-native fixtures for host/provider acceptance; put optional cross-target formats and their external toolchains in a separate lane. Preflight required commands and report the missing dependency and lane clearly.

@@ -54,11 +53,9 @@ Use ESM TypeScript, two-space indentation, and the committed Oxfmt configuration

 Treat a boundary as a contract between the producer's actual representation and the consumer's required meaning. When implementing or auditing a boundary, trace the value through parsing, normalization, authorization, serialization, and the CLI/MCP result. Establish affected callers from their code paths; similar tool names or workflows do not prove that they share a schema or failure mode.

-When changing boundary behavior, inspect adjacent input representations, failure paths, and affected callers, and correct the underlying assumption across those cases.
+Keep portable evidence and scenario validation distinct from host-native execution checks. Absolute filesystem paths, file URLs, and HTTP paths have different semantics; do not substitute one platform's syntax for the domain concept. Interpret provider metadata according to its documented or observed producer behavior. When a transformation loses information, preserve the reported value and an explicit unknown rather than guessing a canonical identity.

-Keep portable evidence and scenario validation distinct from host-native execution checks. Absolute filesystem paths, file URLs, and HTTP paths have different semantics; do not substitute one platform's syntax for the domain concept. Interpret provider metadata according to its documented or observed producer behavior. Keep values used for identity, provenance, matching, and path resolution separate from display formatting. When normalization loses information, preserve the source value and an explicit unknown; display placeholders must not feed back into lookup or selection.
-
-Preserve meaningful failure reasons through application and adapter layers. Malformed input is distinct from an unsupported target, unavailable provider, or host operating-system permission denial. Diagnostics should identify the failed constraint and the target or lifecycle request it applies to. Recovery advice must address that reason and point to an available workflow; generic catches must not erase actionable validation details. Preserve collected observations on execution failure independently of whether cleanup succeeds.
+Preserve meaningful failure reasons through application and adapter layers. Malformed input is distinct from an unsupported target, unavailable provider, or host operating-system permission denial. Diagnostics should identify the failed constraint and the target or lifecycle request it applies to. Recovery advice must address that reason and point to an available workflow; generic catches must not erase actionable validation details.

 Leave meaningful target, action, capture, and output choices to the agent. A selected operation already expresses intent; do not require approval booleans or repeated permission declarations. Trace each setting to its consumer: remove ignored options and single-value confirmations, derive built-in lifecycle behavior, and supply defaults for omitted optional metadata. Report actual effects and limitations where they help interpret results rather than asking callers to restate them.

@@ -82,7 +79,7 @@ Let agents compose experiments with ordinary commands, scripts, and local fixtur
 - Use **observe/capture** only when runtime activity is required, and declare authority and lifecycle effects in the contract.
 - Extend an existing tool when intent and result contract are unchanged. Add a tool for a distinct analyst outcome or materially different authority.
 - Keep caller-facing names and results provider-neutral. Put engine-specific behavior in provider adapters and report each provider's exact coverage.
- Keep results complete by default. Add a limit only when it follows from a real format, protocol, authority, or resource-safety constraint; explain truncation and unsupported facets. Account for representation expansion and products of independently bounded dimensions before allocating or retaining output. Derive facet completeness from what was examined and exhausted, not an empty failure list. Keep observed, derived, inferred, and unknown results distinct.
+- Keep results complete by default. Add a limit only when it follows from a real format, protocol, authority, or resource-safety constraint; explain truncation and unsupported facets. Keep observed, derived, inferred, and unknown results distinct.
 - Include artifact identity, source locations, Evidence references, actionable errors, and relevant limitations when they affect conclusions. Return the evidence needed for the next analysis inline rather than requiring a resource or identifier lookup.
 - Implement shared application workflows behind CLI and MCP adapters. Update canonical contracts and generated catalog together.

@@ -96,7 +93,7 @@ Keep tool catalogs complete and self-describing; prefer capability- and session-

 ## Cursor Cloud specific instructions

-Development requires Node.js 24.18.0 and npm 11.16.0 (`.nvmrc` and `packageManager`). The Cloud Agent image places an older `node` on `PATH` ahead of a normal install. Environment setup installs the pinned toolchain under `/usr/local` and prepends `/usr/local/bin` for login shells. Confirm `node -v` is `v24.18.0` before installing dependencies.
+Development requires Node.js 24.18.0 and npm 11.16.0 (`.nvmrc` and `packageManager`). The Cloud Agent image places an older `node` on `PATH` ahead of a normal install. `.cursor/cloud-agent-install.sh` installs that toolchain under `/usr/local` and prepends `/usr/local/bin` for login shells. Confirm `node -v` is `v24.18.0` before installing dependencies.

 `npm ci` installs locked dependencies. `npm run build:cached` produces the CLI and MCP server. `npm run check:fast` is the pre-push typecheck and lint. Hopper, Ghidra, and IDA are optional bring-your-own providers. JavaScript analysis and the deterministic Vitest suites do not need them. `rea doctor` reports those engines as missing until they are configured.

@@ -1,363 +1,5 @@
 # Changelog

-## [6.0.0](https://github.com/morluto/rea/compare/rea-agents-5.0.0...rea-agents-6.0.0) (2026-10-08)
-
-
-### ⚠ BREAKING CHANGES
-
-* **contracts:** MCP filesystem inputs now require absolute host paths, including target/snapshot paths, evidence bundle paths, managed and firmware inputs, browser/Electron launch paths and expected server paths. Calls such as `open_binary({"path":"./app"})` must send an absolute path such as `/home/analyst/app` or `C:\analysis\app`. Optional paths remain optional. CLI operator-relative paths continue to work. See [#948](https://github.com/morluto/rea/pull/948) and [#1004](https://github.com/morluto/rea/pull/1004).
-
-### Features
-
-* **artifacts:** trace Mach-O dylib resolution in bundles ([78d594c](https://github.com/morluto/rea/commit/78d594cacd376725f833a99402069c103aae9aac))
-* **browser:** inspect historical web network captures ([#992](https://github.com/morluto/rea/issues/992)) ([2bf3663](https://github.com/morluto/rea/commit/2bf3663f654386c9fd8c1437c49659df97bd4697))
-* **evm:** inspect offline bytecode interfaces through EVMole ([#1051](https://github.com/morluto/rea/issues/1051)) ([7af7bc8](https://github.com/morluto/rea/commit/7af7bc88ce0e8f084eaa0db1e8f834d495440fd9))
-* **ghidra:** support native x86 PE applications on Windows ([#1030](https://github.com/morluto/rea/issues/1030)) ([c6dad93](https://github.com/morluto/rea/commit/c6dad932084032bcb32acc61e8066a7784497710))
-* **native:** inspect offline ELF layout through pwntools ([#1037](https://github.com/morluto/rea/issues/1037)) ([4fc6565](https://github.com/morluto/rea/commit/4fc6565b0ffb36d7105b3524e08d0c5d603ae07d))
-* **native:** inspect recorded crashes through pwntools and pwndbg ([#1054](https://github.com/morluto/rea/issues/1054)) ([163ee09](https://github.com/morluto/rea/commit/163ee09a7425479385e0ed0b5d74043e2587eab2))
-* **native:** observe function and Objective-C method calls under LLDB ([1d13cef](https://github.com/morluto/rea/commit/1d13cef5f46f5e07f594bde7b1a4725f189b9a5e))
-
-
-### Bug Fixes
-
-* **dotnet:** validate managed metadata and CIL boundaries ([#938](https://github.com/morluto/rea/pull/938)) ([bda4ada](https://github.com/morluto/rea/commit/bda4ada7fb6bd7dd70a444bb3c57e34f7f5cc00b))
-
-* **build:** clarify generated-file check hint and drop redundant catalog step ([#998](https://github.com/morluto/rea/pull/998)) ([6f0ef16](https://github.com/morluto/rea/commit/6f0ef160501ea3b24dfa2939dfcd3eea0dc13ee7))
-
-* **release:** extend npm propagation window and improve diagnostics ([#943](https://github.com/morluto/rea/pull/943)) ([06b047a](https://github.com/morluto/rea/commit/06b047a0929369d5b8635b3651da115c8fcd53a7))
-
-* **contracts:** require absolute local paths for session filesystem inputs ([#948](https://github.com/morluto/rea/pull/948)) ([5b172b1](https://github.com/morluto/rea/commit/5b172b1042fc09a4e12d956018f15d86cf397ffe))
-
-* **ci:** generate source catalog before shard tests ([#1002](https://github.com/morluto/rea/pull/1002)) ([eb8f649](https://github.com/morluto/rea/commit/eb8f6491a88bfa79d13f7923e4ef94d791f6ba4d))
-
-* **contracts:** require absolute local paths for remaining caller-supplied file inputs ([#1004](https://github.com/morluto/rea/pull/1004)) ([cbc0dd1](https://github.com/morluto/rea/commit/cbc0dd1e7ca36fa3504a9ea8eae303a0876b176b))
-
-* **cli:** classify ENOTDIR JSON input failures ([#1000](https://github.com/morluto/rea/pull/1000)) ([a6132be](https://github.com/morluto/rea/commit/a6132be0546d6a9e3fa83426c8b59b1280b3e5bd))
-
-* **browser:** preserve authorized redirect hops ([#986](https://github.com/morluto/rea/pull/986)) ([ae0f725](https://github.com/morluto/rea/commit/ae0f725fad368730c6198d49716ccc410bca0536))
-
-* **mcp:** reject unknown MCP tool inputs ([#975](https://github.com/morluto/rea/pull/975)) ([fe64fd6](https://github.com/morluto/rea/commit/fe64fd65d93eff202ad90145544dc9ff84651974))
-
-* **release:** publish from explicit source checkpoints ([#1003](https://github.com/morluto/rea/pull/1003)) ([64c7188](https://github.com/morluto/rea/commit/64c71880ae4f7bc658ffce46eb729c4141dbdf19))
-
-* **release:** publish from explicit source checkpoints ([#1006](https://github.com/morluto/rea/pull/1006)) ([b4fc0ec](https://github.com/morluto/rea/commit/b4fc0ecaa1f6b912dc27880e6b6127ace47abc2e))
-
-* **javascript:** bound semantic node projection for resource safety ([#966](https://github.com/morluto/rea/pull/966)) ([96a46ad](https://github.com/morluto/rea/commit/96a46ada0a36f0349f2b0fc20b4c932401b4ad84))
-
-* **ci:** avoid slow Azure archive for the native cross compiler ([#1016](https://github.com/morluto/rea/issues/1016)) ([51956c1](https://github.com/morluto/rea/commit/51956c1a49a7dc9ed70a6fba480a670a7e7b2b9b))
-* **ci:** decouple stdio smoke tests from Linux display probes ([#1014](https://github.com/morluto/rea/issues/1014)) ([93731e1](https://github.com/morluto/rea/commit/93731e17ddea76db86dfa84bb54536dcf8ebfa0b))
-* **cli:** stream large JavaScript JSON results ([#1024](https://github.com/morluto/rea/issues/1024)) ([0e25bef](https://github.com/morluto/rea/commit/0e25befe78f220691abe5d0291cc04a75c9cc877))
-* **javascript:** complete large-ASAR analysis with file-local projection ([#1055](https://github.com/morluto/rea/issues/1055)) ([b9fb438](https://github.com/morluto/rea/commit/b9fb43883570bef7cb29fd16f27c25d5a7e5bb54))
-* **javascript:** recognize digits in artifact URI schemes ([#1045](https://github.com/morluto/rea/issues/1045)) ([03424ae](https://github.com/morluto/rea/commit/03424ae91ef22efd57db1bdde9379a3ac450b8f7))
-* **javascript:** reconstruct HTML script loads accurately ([#1042](https://github.com/morluto/rea/issues/1042)) ([1154f2f](https://github.com/morluto/rea/commit/1154f2f03c0b0bb6cb6c5da09b8d8e1c837febc4))
-* **javascript:** report application analysis progress on the CLI ([#1008](https://github.com/morluto/rea/issues/1008)) ([7b18c58](https://github.com/morluto/rea/commit/7b18c581409848077de7a9cb6d7d1a0b91a02e12))
-* **javascript:** resolve module URLs and reject invalid exports targets ([#1031](https://github.com/morluto/rea/issues/1031)) ([8d5c88f](https://github.com/morluto/rea/commit/8d5c88f17cde4ab4fa54c5142f0a45e612619a53))
-* **javascript:** resolve root package exports arrays ([#1046](https://github.com/morluto/rea/issues/1046)) ([53409ab](https://github.com/morluto/rea/commit/53409ab1968d60c77f98feedefe237a08859a95c))
-* **mcp:** advertise JSON values without recursive schemas ([#995](https://github.com/morluto/rea/issues/995)) ([7425f70](https://github.com/morluto/rea/commit/7425f70fd0247a7ea7192deb959fd6f48ba83a21)), closes [#919](https://github.com/morluto/rea/issues/919)
-* **mcp:** bound capture comparison input schema depth ([#1005](https://github.com/morluto/rea/issues/1005)) ([6b55de0](https://github.com/morluto/rea/commit/6b55de017badc9066642e1ff2561eb1da0ff93f8))
-* **process:** preserve partial evidence and verify detached cleanup ([#1011](https://github.com/morluto/rea/issues/1011)) ([63cf28f](https://github.com/morluto/rea/commit/63cf28fd8f8acaf656e993300a2a24280b2fd692))
-* **release:** support built-in credentials and refresh release boundary ([6a278a6](https://github.com/morluto/rea/commit/6a278a68dd4fa69b9153697ecb7bba7de4c55c32))
-* **release:** support default credentials and record 5.0.0 boundary ([#1012](https://github.com/morluto/rea/issues/1012)) ([6a278a6](https://github.com/morluto/rea/commit/6a278a68dd4fa69b9153697ecb7bba7de4c55c32))
-* **release:** sync 5.0.0 checkpoint back to main ([966cca8](https://github.com/morluto/rea/commit/966cca8efe5ed08b3285cd06409688d871eb5e6b))
-* **snapshot:** replay validated workflow evidence ([#984](https://github.com/morluto/rea/issues/984)) ([1d62e54](https://github.com/morluto/rea/commit/1d62e54e1f976e64130e4e9b651c3180aa4fa727))
-* **windows:** allow Java to read retained target snapshots ([#1027](https://github.com/morluto/rea/issues/1027)) ([28d5c39](https://github.com/morluto/rea/commit/28d5c397c83f901e4086083868041711371ad32a))
-
-
-### Performance Improvements
-
-* **artifacts:** replace quadratic ZIP overlap checks ([#1013](https://github.com/morluto/rea/issues/1013)) ([76e7e51](https://github.com/morluto/rea/commit/76e7e510bb2d7d37728ca50749d524beb5890cf8))
-* **javascript:** cache canonical export comparison sort keys ([#1028](https://github.com/morluto/rea/issues/1028)) ([63ba742](https://github.com/morluto/rea/commit/63ba7424c0ab69b94397e8913f8e231de111583f))
-
-
-### Code Refactoring
-
-* **build:** generate MCP tool catalog at build time instead of committing it ([#997](https://github.com/morluto/rea/pull/997)) ([35a4e18](https://github.com/morluto/rea/commit/35a4e18d3028014e24d2e209ec99a590fde63152))
-
-* **process:** separate capture implementation from analyst workflows ([#988](https://github.com/morluto/rea/pull/988)) ([6aa9afb](https://github.com/morluto/rea/commit/6aa9afb5493a97801eb1126a0dcf11f9705165db))
-
-* **artifacts:** move inventory and extraction into provider owners ([#1032](https://github.com/morluto/rea/issues/1032)) ([6e4535c](https://github.com/morluto/rea/commit/6e4535c1011f1982e9ab07b7ebcd600c19cd494d))
-* remove abandoned test-only analysis scaffolding ([c93422a](https://github.com/morluto/rea/commit/c93422a898fdbedb7d28709144b4337a2669440b))
-
-
-### Documentation
-
-* improve Korean wording and particles ([#1047](https://github.com/morluto/rea/issues/1047)) ([c5d165b](https://github.com/morluto/rea/commit/c5d165bd03fed95a0b0105661d3ba7e0efbfa449))
-* simplify the English README and organize guides ([#1043](https://github.com/morluto/rea/issues/1043)) ([28f10cf](https://github.com/morluto/rea/commit/28f10cf2bc7b7c590700b50d47072015f3e3c66e))
-
-
-### Tests
-
-* **process:** wait for observable snapshot ctime changes ([#999](https://github.com/morluto/rea/pull/999)) ([161ed91](https://github.com/morluto/rea/commit/161ed9157134d5c3b0fbae19ceb756ac58a26c04))
-
-* **browser:** consolidate CDP workflows and colocate parser coverage ([2682904](https://github.com/morluto/rea/commit/26829045d0f0e744bb60d6babc2dc3312f4bfa53))
-* **ci:** stabilize browser source identity fixture delivery ([#1023](https://github.com/morluto/rea/issues/1023)) ([ed725da](https://github.com/morluto/rea/commit/ed725dace4a689e4e5c804dc6bf06c7fc663c7c9))
-* **cli:** reduce repeated startup and filesystem setup ([d88d6c1](https://github.com/morluto/rea/commit/d88d6c1897740ccbd6c57f4ba01861fc751fb3a8))
-* consolidate service and process fixtures ([f8a53a8](https://github.com/morluto/rea/commit/f8a53a8c065f1ccbdaa051a4e1ef267a2047d759))
-* **javascript:** consolidate source analysis and export regressions ([f517a5a](https://github.com/morluto/rea/commit/f517a5a1d7c0766ed50f8dfd5ee69e65525ac744))
-* **javascript:** cover plain long-line loader identities ([#1025](https://github.com/morluto/rea/issues/1025)) ([984fc27](https://github.com/morluto/rea/commit/984fc27ce19d57f708bdae688a258cf8663cdea6))
-* **mcp:** consolidate SDK schema checks and scenario ports ([9c3479e](https://github.com/morluto/rea/commit/9c3479ed95100d8ee5ed4d9158a4550e4ac2a752))
-* **providers:** verify framing through client socket boundaries ([1fd1989](https://github.com/morluto/rea/commit/1fd1989d342375a01b6d14b282ad58001b7d1800))
-* prune redundant conformance checks and document test priorities ([aafdf8a](https://github.com/morluto/rea/commit/aafdf8a01b42fb6fd927c0f2a66e758e1a510abc))
-
-## [5.0.0](https://github.com/morluto/rea/compare/rea-agents-4.1.0...rea-agents-5.0.0) (2026-10-07)
-
-
-### ⚠ BREAKING CHANGES
-
-* **native:** preserve incomplete native UI captures ([#991](https://github.com/morluto/rea/issues/991))
-* **android:** Android analysis now requires a full JDK 17 or newer with its compiler module for the packaged Java source bridge.
-
-### Features
-
-* **apple:** project macOS bundle anatomy in application graphs ([88c940b](https://github.com/morluto/rea/commit/88c940b165d788a491e212ea93e00462c4dde6a2))
-* **apple:** project macOS bundle anatomy in application graphs ([dd3e7ae](https://github.com/morluto/rea/commit/dd3e7aef0d52c478f6cdf475501c42ebe7f5c97e))
-* **application:** wire Android and Apple inventory graph tools ([#852](https://github.com/morluto/rea/issues/852)) ([e0fd820](https://github.com/morluto/rea/commit/e0fd8207a1fb738bcc34f204b55c4fa154f5f02d))
-* **browser:** attribute native execution and listener sources ([#917](https://github.com/morluto/rea/issues/917)) ([b5afa5f](https://github.com/morluto/rea/commit/b5afa5f91eed9ae31d670aeab9bbf5112d790ec2))
-* **browser:** capture correlated network content and lifecycle evidence ([#797](https://github.com/morluto/rea/issues/797)) ([f9eaf05](https://github.com/morluto/rea/commit/f9eaf056ef58215094513176a70fabae0740081f))
-* **browser:** trace captured website module imports ([#879](https://github.com/morluto/rea/issues/879)) ([01be082](https://github.com/morluto/rea/commit/01be082e9e11c78b91828c06a9c543c754783c07))
-* **browser:** trace captured website source-map locations ([#897](https://github.com/morluto/rea/issues/897)) ([f430c41](https://github.com/morluto/rea/commit/f430c416c72d444fbe521e0263f8935da4cdb040))
-* **javascript:** recover readable modules with Wakaru ([#848](https://github.com/morluto/rea/issues/848)) ([166dcd2](https://github.com/morluto/rea/commit/166dcd21d06f687a9c480a6a6d36beb3b4954dd0))
-* **native:** decode chained fixups, binds, ObjC categories and properties ([a657557](https://github.com/morluto/rea/commit/a65755728f7a10d984514c75fa863b84ddcdaee9))
-* **native:** decode chained fixups, binds, ObjC categories and properties ([3e24a72](https://github.com/morluto/rea/commit/3e24a72465fe6c628db1f836e93d74d7f4a92b80))
-* **native:** open iOS-style and iOS-on-Mac wrapper app bundles ([2ed89e6](https://github.com/morluto/rea/commit/2ed89e6529924248d2e21084f8730bedbb16bc3f))
-* **native:** open iOS-style and iOS-on-Mac wrapper app bundles ([aeebba3](https://github.com/morluto/rea/commit/aeebba391ee5c288b75cd828e7d18d32b40aa698))
-* **web:** export captured scripts for JavaScript application analysis ([#801](https://github.com/morluto/rea/issues/801)) ([472b72a](https://github.com/morluto/rea/commit/472b72a53068a8e2ec78fe239d687023482daaa7))
-* **website:** add a shared back-to-top link ([5047373](https://github.com/morluto/rea/commit/504737300632d8644fbd6c658d2c97e38bb54c3b))
-* **website:** introduce REA and the DX-Ball reconstruction ([#906](https://github.com/morluto/rea/issues/906)) ([4e3953c](https://github.com/morluto/rea/commit/4e3953cc45ce9c21786a7a6fc495d2350aa85d24))
-
-
-### Bug Fixes
-
-* address review nits from batch integration follow-ups ([#818](https://github.com/morluto/rea/issues/818)) ([5a0e0ba](https://github.com/morluto/rea/commit/5a0e0ba3b81ea0ec336addb07da98ec7bc0a35d3))
-* **android:** align runtime suffix inference ([#977](https://github.com/morluto/rea/issues/977)) ([fb3749a](https://github.com/morluto/rea/commit/fb3749aff692a7a8225dff00a4516b48a76866b6))
-* **android:** bound fragmented JADX MCP frame memory ([#937](https://github.com/morluto/rea/issues/937)) ([9e39795](https://github.com/morluto/rea/commit/9e397958951edb543134e3ad57e7ab253d6df21a))
-* **android:** preserve JVM settings and reuse metadata sessions ([#908](https://github.com/morluto/rea/issues/908)) ([eab34a9](https://github.com/morluto/rea/commit/eab34a9d8c5eebad6b04b85750be0276d679c3f9))
-* **apple:** attribute only application-root components in macOS inventories ([5524970](https://github.com/morluto/rea/commit/55249704c5c83cbf8d20ac7869863cc196da00a6))
-* **apple:** count only real framework version directories ([2e81e86](https://github.com/morluto/rea/commit/2e81e867b24da8314f666f62d154de5803040cdf))
-* **apple:** pair bridge hypotheses within one application root ([7acf4e7](https://github.com/morluto/rea/commit/7acf4e741a6a314ea7aabb18fc757e196158ff76))
-* **apple:** pair bridge hypotheses within one application root ([9226ade](https://github.com/morluto/rea/commit/9226ade5114f287eb8e1b00b08dd91da1cc66003))
-* **apple:** traverse keyed archive hierarchy collections ([#976](https://github.com/morluto/rea/issues/976)) ([71ac83f](https://github.com/morluto/rea/commit/71ac83f3dd376135098f460c86e7897183456ec5))
-* **artifacts:** accept APFS image disks ejected with their container ([d93ebec](https://github.com/morluto/rea/commit/d93ebec9df951d40e66ced667f07fadd2dd5d25a))
-* **artifacts:** accept APFS image disks ejected with their container ([b72c079](https://github.com/morluto/rea/commit/b72c079a9a90c374bd6dd30ff8c4387306b8f59b))
-* **artifacts:** accept the bundle subject when extracting an app bundle ([#891](https://github.com/morluto/rea/issues/891)) ([37d2eba](https://github.com/morluto/rea/commit/37d2ebac4c2a524eec6e32c4c57cbbb632491ad8))
-* **artifacts:** decode flat keyed-archive NIBs with data and shared references ([b3f013f](https://github.com/morluto/rea/commit/b3f013fa183e8351319a053575aeee5df337c276))
-* **artifacts:** decode flat keyed-archive NIBs with data and shared references ([2a4667b](https://github.com/morluto/rea/commit/2a4667bb79117b202abb009c0bb9ebfdfde57158))
-* **artifacts:** harden reader lifecycle boundaries ([#951](https://github.com/morluto/rea/issues/951)) ([2366bda](https://github.com/morluto/rea/commit/2366bda37b1084016d42a0d06920dc57e7c7723f))
-* **artifacts:** keep the post-snapshot detach check out of provenance ([62634e4](https://github.com/morluto/rea/commit/62634e4c0177bde8a08decc356da98fbe25d2000))
-* **artifacts:** preserve reader failure diagnostics ([#987](https://github.com/morluto/rea/issues/987)) ([fc4a9a0](https://github.com/morluto/rea/commit/fc4a9a05922ce8474fd0717bc800343b0a95bd41))
-* **artifacts:** project compiled AppKit actions from the control to its target ([b08228d](https://github.com/morluto/rea/commit/b08228d19f8a0f6dbc940e8d322ef2bb42d2ce1a))
-* **artifacts:** project compiled AppKit actions from the control to its target ([#905](https://github.com/morluto/rea/issues/905)) ([900d7c8](https://github.com/morluto/rea/commit/900d7c8606cbc1ccbca818827a55bf2eab28bca4))
-* **artifacts:** project UIKit runtime outlet and event connections ([aa8082e](https://github.com/morluto/rea/commit/aa8082ea6c0898feb4d842135aea6b9539f769f8))
-* **artifacts:** project UIKit runtime outlet and event connections ([8b24387](https://github.com/morluto/rea/commit/8b243877c22a5550d005e7b8abf93791ce8566b9))
-* **artifacts:** read AppKit connectors from flat keyed-archive NIBs ([#900](https://github.com/morluto/rea/issues/900)) ([27c272b](https://github.com/morluto/rea/commit/27c272bd9a42e7235c7991881196c60dbc126714))
-* **artifacts:** read keyed archive dictionaries keyed UID as dictionaries ([cfd2b0c](https://github.com/morluto/rea/commit/cfd2b0c75dfb9d51b936788a46d0338145803ece))
-* **artifacts:** read keyed archive dictionaries keyed UID as dictionaries ([35c82b9](https://github.com/morluto/rea/commit/35c82b93eb2579687bb446c3a8a2a9f1a7563d28))
-* **artifacts:** report which path constraint failed ([#847](https://github.com/morluto/rea/issues/847)) ([3f1a77f](https://github.com/morluto/rea/commit/3f1a77f68ec4355d8b792ccb2970bc03485889c9))
-* **browser:** distinguish computed call keys from identifiers ([#808](https://github.com/morluto/rea/issues/808)) ([02beb74](https://github.com/morluto/rea/commit/02beb745358f02bdaabed4bb523c5e3527a9841e))
-* **browser:** distinguish WebMCP registration frame owners ([#813](https://github.com/morluto/rea/issues/813)) ([b3b44d8](https://github.com/morluto/rea/commit/b3b44d8a2d8b2aa70a8ed8b9cddf365865fcc53f))
-* **browser:** fingerprint cookies at the selected page URL ([#763](https://github.com/morluto/rea/issues/763)) ([78014e3](https://github.com/morluto/rea/commit/78014e3d149f762c848581a0aac7e44f75d51225))
-* **browser:** identify NodeNext TypeScript original source artifacts ([#811](https://github.com/morluto/rea/issues/811)) ([e84ad86](https://github.com/morluto/rea/commit/e84ad86a7578fb46568663aca6fe6a6f3986cc8d))
-* **browser:** preserve evidence through deep AST analysis ([#924](https://github.com/morluto/rea/issues/924)) ([f826aa8](https://github.com/morluto/rea/commit/f826aa893fa7d55e87d907f0c94c39421a166dd8))
-* **browser:** preserve form destinations and satisfies mutation uncertainty ([#825](https://github.com/morluto/rea/issues/825)) ([6dd719e](https://github.com/morluto/rea/commit/6dd719eaf605b37cd5dad6d01d33527ca9d59f06)), closes [#820](https://github.com/morluto/rea/issues/820)
-* **browser:** preserve Link header value delimiters ([#805](https://github.com/morluto/rea/issues/805)) ([dd36405](https://github.com/morluto/rea/commit/dd3640548fe3d1e8b92784a63fac55d757dcc1f0))
-* **build:** validate installed dependencies before cache hits ([#982](https://github.com/morluto/rea/issues/982)) ([a45fe86](https://github.com/morluto/rea/commit/a45fe86a39b9e7a7c21e3665b6de4763cb72d782))
-* capture IndexedDB object-store record fingerprints ([#809](https://github.com/morluto/rea/issues/809)) ([21a8bd0](https://github.com/morluto/rea/commit/21a8bd0ccde2326c8bc022714a88a438d8b89dde))
-* **cli:** align structured output guard with native flags ([#777](https://github.com/morluto/rea/issues/777)) ([e9fac56](https://github.com/morluto/rea/commit/e9fac56232e74c8287863ca5c4cc7d8e39fb4a40))
-* **cli:** emit empty structured filter projections ([#914](https://github.com/morluto/rea/issues/914)) ([2db668f](https://github.com/morluto/rea/commit/2db668f6ca91d2514a354fd459239b84031812e7))
-* **cli:** honor the selected native plist path ([#773](https://github.com/morluto/rea/issues/773)) ([0374865](https://github.com/morluto/rea/commit/0374865836aa4960657fb92f588c71e35dd3bed8))
-* **cli:** preserve output and comparison input validation ([#981](https://github.com/morluto/rea/issues/981)) ([d5c43d6](https://github.com/morluto/rea/commit/d5c43d65f0f6a1de8fb2eb5f2c1940a6ea2af20c))
-* **cli:** preserve unsupported historical-source imports ([#795](https://github.com/morluto/rea/issues/795)) ([911d580](https://github.com/morluto/rea/commit/911d58063477912042da5e9e573a9e8008956622))
-* **contracts:** align CLI/MCP boundary contracts ([#946](https://github.com/morluto/rea/issues/946)) ([4a60738](https://github.com/morluto/rea/commit/4a6073810a955d058c10f209157cbd68832a92c5))
-* **deps:** remediate smol-toml advisories ([93091ab](https://github.com/morluto/rea/commit/93091abb4dbd3cceee217d179db816895df24d70))
-* **deps:** remediate smol-toml advisories ([c55ae3b](https://github.com/morluto/rea/commit/c55ae3b9eccc17e6e8f4369e13044995d0650704))
-* **dotnet:** compare members with undecoded signatures by exact identity ([28fd49f](https://github.com/morluto/rea/commit/28fd49f0f6cf54e373411f5999e6b5722dd826f5))
-* **dotnet:** compare members with undecoded signatures by exact identity ([d52af3b](https://github.com/morluto/rea/commit/d52af3b321a321964598fb302edeb26552c9dffd))
-* **dotnet:** inspect native boundaries of non-managed and malformed PEs ([d5f28fb](https://github.com/morluto/rea/commit/d5f28fb29c5c3e8acef940fcae042e660e3a4d72))
-* **dotnet:** inspect native boundaries of non-managed and malformed PEs ([d98dcfa](https://github.com/morluto/rea/commit/d98dcfa8c2e46a7cc918aeb01058c26c4a84060c))
-* **dotnet:** keep a decoded member unknown beside an undecoded counterpart ([76b7020](https://github.com/morluto/rea/commit/76b70203d941ab85c1772f330407fd832d438c9c))
-* **dotnet:** keep admitted CLI header facts when metadata is unreadable ([e5ba693](https://github.com/morluto/rea/commit/e5ba6934e4ff819c09077ca70bd2417d37f85bc0))
-* **dotnet:** name the shared key in exact-signature ambiguities ([7714e76](https://github.com/morluto/rea/commit/7714e763d9ac2e87994068b3dee37ca6c5ffc6f4))
-* **dotnet:** treat ambiguous undecoded members as possible counterparts ([73370e1](https://github.com/morluto/rea/commit/73370e1c064899753988581c9a821e0e7f579561))
-* **errors:** report union input issues at the union's path ([bddeb63](https://github.com/morluto/rea/commit/bddeb634b583cf4f7d5fa6cf3a1ee821e05d2923))
-* **evaluation:** canonicalize Unicode argument keys ([#980](https://github.com/morluto/rea/issues/980)) ([0a4caf4](https://github.com/morluto/rea/commit/0a4caf4a0a1355b6a121fc88886b22e55843ac76))
-* **firmware:** accept the verified Binwalk and Unblob release lines ([#844](https://github.com/morluto/rea/issues/844)) ([bef4321](https://github.com/morluto/rea/commit/bef4321afb3d0d480e8a04ad7e256663542caa3d))
-* **firmware:** retain multi-file extraction failures ([#978](https://github.com/morluto/rea/issues/978)) ([8aaf9a1](https://github.com/morluto/rea/commit/8aaf9a19788beb6612332505850ad3407cb00027))
-* **ghidra:** admit the 12.1 line and the install's JDK range ([#840](https://github.com/morluto/rea/issues/840)) ([5cbf06c](https://github.com/morluto/rea/commit/5cbf06c7ad0ace599721bffd7da566b8a790b622))
-* **ghidra:** select exact packaged bridge scripts ([#800](https://github.com/morluto/rea/issues/800)) ([894c30e](https://github.com/morluto/rea/commit/894c30ef02d946f0c8de3ae6c9168d9525d95033))
-* **ida:** share concurrent session cleanup ([#950](https://github.com/morluto/rea/issues/950)) ([f14b6a8](https://github.com/morluto/rea/commit/f14b6a84306116716e78c5ffc84353ac07939593))
-* **installer:** validate exact semantic versions ([#954](https://github.com/morluto/rea/issues/954)) ([248972f](https://github.com/morluto/rea/commit/248972f327776687037dc07099117584c0674e77))
-* integrate 24 reviewed browser/native/semantics corrections ([#815](https://github.com/morluto/rea/issues/815)) ([3af3811](https://github.com/morluto/rea/commit/3af3811ab0a212b6aab6185628d47ecad37958fc))
-* **javascript:** advertise the exact empty seed rule and match empty API keys ([35e5508](https://github.com/morluto/rea/commit/35e5508fd095a062d7477bd6bb7d2d8e28201cd8))
-* **javascript:** analyze source maps with empty source names ([58ef8ac](https://github.com/morluto/rea/commit/58ef8ac3aa803d7b64dd12a5b2a2e8ec24261060))
-* **javascript:** analyze sources containing empty string literals ([e7cbfe0](https://github.com/morluto/rea/commit/e7cbfe04fdfd7affe50dba9e2c7a9a0a72291041))
-* **javascript:** analyze sources containing empty string literals ([11fc3b9](https://github.com/morluto/rea/commit/11fc3b981509e8107b10b2e75363f5bb489879db))
-* **javascript:** filter keyed-collection receivers only for get/delete ([00f707b](https://github.com/morluto/rea/commit/00f707b250451246d69a1205c39c6843fab6bb5b))
-* **javascript:** handle deep AST traversal and addition without stack overflow ([#915](https://github.com/morluto/rea/issues/915)) ([62b3711](https://github.com/morluto/rea/commit/62b37111e7f09887eb712c6e8e721e0334cf10b9))
-* **javascript:** handle deep static member paths ([#939](https://github.com/morluto/rea/issues/939)) ([348c65c](https://github.com/morluto/rea/commit/348c65c7ece1aee280f9431d995996b444e7549d))
-* **javascript:** keep bare relative URLs for computed-method XHR ([e32028d](https://github.com/morluto/rea/commit/e32028d1b566872ba8cd08fc6800c198d6aef30b))
-* **javascript:** keep computed-method XHR request URLs ([602d002](https://github.com/morluto/rea/commit/602d0021d45a6cdab9f806554f3ee12ea670ec97))
-* **javascript:** keep exact empty env keys and method names ([522c2d0](https://github.com/morluto/rea/commit/522c2d0ecb1eb7be262eaef2926cceac9a68badc))
-* **javascript:** keep exact empty env keys and method names ([f7954a8](https://github.com/morluto/rea/commit/f7954a8fd692f262ef3ce1507b957681150ce9c4)), closes [#783](https://github.com/morluto/rea/issues/783)
-* **javascript:** keep exact empty require paths and request fields ([ad1f6b5](https://github.com/morluto/rea/commit/ad1f6b508fbdd44d8bf1884ed96ae69082808e7d)), closes [#783](https://github.com/morluto/rea/issues/783)
-* **javascript:** keep exact empty values in graph identities ([f608127](https://github.com/morluto/rea/commit/f608127635ed8e0d105ad95252e5ea0dff899f5b))
-* **javascript:** keep exact empty values in graph identities ([63012ee](https://github.com/morluto/rea/commit/63012eeb601fc74ca82f3a027d852a5da1b099d2))
-* **javascript:** keep keyed-collection reads out of endpoints ([9075ce7](https://github.com/morluto/rea/commit/9075ce71ada4334407aa2d194dc82e3031e30260))
-* **javascript:** keep keyed-collection reads out of endpoints ([eb68761](https://github.com/morluto/rea/commit/eb68761eb0a35b876e33dd6115d0d07f97e99dd5))
-* **javascript:** keep literal HTTP methods on storage-named receivers ([9f48a76](https://github.com/morluto/rea/commit/9f48a76e1186cc43c6928eff1c82e93280caee1a))
-* **javascript:** keep literal-method and URL-literal requests on aliased receivers ([e3e7664](https://github.com/morluto/rea/commit/e3e76646657e950e24241ba715eb97ea385933e9))
-* **javascript:** keep mutated object initializer values unknown ([#752](https://github.com/morluto/rea/issues/752)) ([6caa38a](https://github.com/morluto/rea/commit/6caa38a0cad369ddff52b08f8d7d44c1b92ecac0))
-* **javascript:** keep storage open versions out of XHR endpoints ([4f51103](https://github.com/morluto/rea/commit/4f5110306d9edab94bf63bf81cf259324d96af57))
-* **javascript:** keep storage open versions out of XHR endpoints ([898b0f6](https://github.com/morluto/rea/commit/898b0f62d76ea1cf793140cb255cad16ab85b44d))
-* **javascript:** keep XHR and client endpoints that receiver spellings hid ([05f43ed](https://github.com/morluto/rea/commit/05f43ed388ae4e9316d320b592b6eba5b119ce89))
-* **javascript:** leave empty application values unlabeled ([527b76e](https://github.com/morluto/rea/commit/527b76ef78e84d29bb41bd45f1f83fae05ca66ca))
-* **javascript:** match exact empty literal channels and seeds ([e20da1f](https://github.com/morluto/rea/commit/e20da1f205b105b1b6a5decd3c2d0fe36fd12410))
-* **javascript:** never read window or document open as XHR ([ae849a7](https://github.com/morluto/rea/commit/ae849a72811857ba9755962ec48a1d76c9d1181a))
-* **javascript:** preserve computed Electron member uncertainty ([3a4a63f](https://github.com/morluto/rea/commit/3a4a63f70a2e42fb1fa48881e08b08d612289f2e))
-* **javascript:** preserve computed Electron member uncertainty ([1260cac](https://github.com/morluto/rea/commit/1260cacc67b8e0c93fb9434452053feca956e7e7))
-* **javascript:** project decoded file URL paths ([#810](https://github.com/morluto/rea/issues/810)) ([2572e1e](https://github.com/morluto/rea/commit/2572e1eb2f853a4cebfc8303d9e293e1d106d608))
-* **javascript:** read open() endpoints only from XHR method/URL pairs ([63e0822](https://github.com/morluto/rea/commit/63e0822cc794bd6ec1688340b3230ffb6b5c4a8c))
-* **javascript:** read open() endpoints only from XHR method/URL pairs ([1be3705](https://github.com/morluto/rea/commit/1be370543f7ea39016f86ebdec80a8ceaf7f8a28))
-* **javascript:** read substitution-free templates as exact strings ([c371d6e](https://github.com/morluto/rea/commit/c371d6e1e9cceb28e6cfc874e14c4e740bb87751))
-* **javascript:** read substitution-free templates as exact strings ([77cf757](https://github.com/morluto/rea/commit/77cf75710369acc6c304ec352ab25aa7274e04b1))
-* **javascript:** resolve bare source-map and worker URLs next to the script ([#890](https://github.com/morluto/rea/issues/890)) ([45fcd28](https://github.com/morluto/rea/commit/45fcd28b4018723bdb508a9229b74ab9eb749f75))
-* **javascript:** retain recovered call argument positions ([#929](https://github.com/morluto/rea/issues/929)) ([e6ba9c3](https://github.com/morluto/rea/commit/e6ba9c3af3053485f154825eea6a156127328be9))
-* **linux:** improve Hopper reliability and CachyOS support ([#963](https://github.com/morluto/rea/issues/963)) ([98b2b02](https://github.com/morluto/rea/commit/98b2b027afd8c80b68e9daaf97bdaa4d942105cc))
-* **mcp:** advertise reserved process environment key ([#949](https://github.com/morluto/rea/issues/949)) ([e0d76ae](https://github.com/morluto/rea/commit/e0d76ae80ddc70ae4d5afcbd1427afb81eee3669))
-* **mcp:** isolate optional observation adapter failures ([#838](https://github.com/morluto/rea/issues/838)) ([be3cfbf](https://github.com/morluto/rea/commit/be3cfbffdfbbb65da75dcec0518e2ebf387e66bc))
-* **mcp:** preserve exact guided prompt context ([#761](https://github.com/morluto/rea/issues/761)) ([66c26f2](https://github.com/morluto/rea/commit/66c26f280b1d494806ee182b52564166760f0ae2))
-* **native-ui:** handle incomplete accessibility child collections ([#944](https://github.com/morluto/rea/issues/944)) ([ac3bae3](https://github.com/morluto/rea/commit/ac3bae3cb97c4fb622eb1b6ac1f3b84e6a70ba03))
-* **native:** inspect plists containing data, dates, and non-finite reals ([bc2cd8b](https://github.com/morluto/rea/commit/bc2cd8b874e115eee446860043758a80bd583ad0))
-* **native:** inspect plists containing data, dates, and non-finite reals ([5ead2cf](https://github.com/morluto/rea/commit/5ead2cfbc47896b43502363d3568330f5d94762e))
-* **native:** keep echoed codesign paths out of signature fields ([#865](https://github.com/morluto/rea/issues/865)) ([4aa2b60](https://github.com/morluto/rea/commit/4aa2b60c1d84607a138395ae93260b2e50c2a721))
-* **native:** keep echoed Mach-O paths out of load commands and symbols ([ab985c6](https://github.com/morluto/rea/commit/ab985c6a10e9da856ed151100cee8459793c3573))
-* **native:** keep echoed Mach-O paths out of load commands and symbols ([37fe105](https://github.com/morluto/rea/commit/37fe105ba168488d05226f2912bed802e2d48d75))
-* **native:** keep integral plist reals beyond the JSON range as reals ([#860](https://github.com/morluto/rea/issues/860)) ([3b92a2b](https://github.com/morluto/rea/commit/3b92a2bceddaa1659654da08160813a3affbc6b7))
-* **native:** keep plist XML element types for large numbers ([f85056d](https://github.com/morluto/rea/commit/f85056d83e42a461c8c947792774580294d0ceb9))
-* **native:** keep the resolved bundle plist and permission failures ([418a556](https://github.com/morluto/rea/commit/418a5562f6f640503c751924a4787586c2c5c98a))
-* **native:** pass Swift symbols to swift-demangle as operands ([dd90965](https://github.com/morluto/rea/commit/dd90965058a9e6f7dd7f30eb7e462572e777db7f))
-* **native:** pass Swift symbols to swift-demangle as operands ([6c88094](https://github.com/morluto/rea/commit/6c88094da45258b346fe594764e561f999622a58))
-* **native:** preserve incomplete native UI captures ([#991](https://github.com/morluto/rea/issues/991)) ([9f496ef](https://github.com/morluto/rea/commit/9f496ef2d4a3aa68816287bf5d2ba1620d72c97a))
-* **native:** report exact plist integers beyond the JSON number range ([c9f49db](https://github.com/morluto/rea/commit/c9f49db907db0513ad8b22c9b2bbdcee400aff11))
-* **native:** report exact plist integers beyond the JSON number range ([430c297](https://github.com/morluto/rea/commit/430c297ca4ddb3491c2b835b889486e6a2ffdc17))
-* **native:** report plist permission denials as access failures ([5738a0c](https://github.com/morluto/rea/commit/5738a0cf8c111833847fecb2f7d0c2ee35eabbd6))
-* **native:** report why a selected plist cannot be inspected ([14f9b3d](https://github.com/morluto/rea/commit/14f9b3d93119a60a3cf5f3d9c138ca829a5462e8))
-* **native:** report why a selected plist cannot be inspected ([0674fac](https://github.com/morluto/rea/commit/0674facd468c3321584ece908031feee7220b9c6))
-* **plist:** keep character references beyond Unicode literal ([5afd8a8](https://github.com/morluto/rea/commit/5afd8a850b2ebd62e3400a5e2ece1a1cfa98bab6))
-* **plist:** read XML plists containing a __proto__ key ([faaee69](https://github.com/morluto/rea/commit/faaee693d5bb4bb957387ebd0f4338513c4c914a))
-* **plist:** read XML plists containing a __proto__ key ([a08be51](https://github.com/morluto/rea/commit/a08be51e9f0d23bd46b66bbdb88dbda44bc54c88))
-* **plist:** report omitted __proto__ entries in signatures and Interface Builder ([15ab5db](https://github.com/morluto/rea/commit/15ab5dbcaf3fac09756e98926373965247dad622))
-* **plist:** report omitted __proto__ entries in signatures and Interface Builder ([6729ee7](https://github.com/morluto/rea/commit/6729ee7636889a0a2ebc9fca8e35860476f8ca34))
-* preserve native UI failure reasons and dedupe version literals ([#854](https://github.com/morluto/rea/issues/854)) ([2d4a910](https://github.com/morluto/rea/commit/2d4a910fcd30e8d5b96fcb957b931e9aa3e4ab0c))
-* **process:** clarify Windows capture support and recovery ([#798](https://github.com/morluto/rea/issues/798)) ([50787b2](https://github.com/morluto/rea/commit/50787b2faf1a4bea799d041960ca2b91199ef403))
-* **process:** harden filesystem snapshot identity and cancellation ([#956](https://github.com/morluto/rea/issues/956)) ([93aa9eb](https://github.com/morluto/rea/commit/93aa9eb5c2551984182a4025d836e4223e8ecc8a))
-* **process:** retain provider output until streams close ([#928](https://github.com/morluto/rea/issues/928)) ([b929251](https://github.com/morluto/rea/commit/b9292516f4eedc2dedba713abf57f665ef1fb596))
-* **reference:** retain partial imports for unreadable directories ([#766](https://github.com/morluto/rea/issues/766)) ([cffc548](https://github.com/morluto/rea/commit/cffc548cd3127c5db811f20db4816039846b3170))
-* **release:** drive checkpoint releases from frozen branches ([fc58fa1](https://github.com/morluto/rea/commit/fc58fa1eb01fe5a8200a78e9551799c9c1a3d256))
-* **release:** publish from explicit source checkpoints ([49887f0](https://github.com/morluto/rea/commit/49887f0239da4483153a5e1610058619855525db))
-* **semantics:** isolate named function expression bindings ([#776](https://github.com/morluto/rea/issues/776)) ([ae81f64](https://github.com/morluto/rea/commit/ae81f64d2ad10e5cdbf8356819351c02480aee7a))
-* **semantics:** preserve direct promise ownership boundaries ([#758](https://github.com/morluto/rea/issues/758)) ([e1ca412](https://github.com/morluto/rea/commit/e1ca412757bb01be855a66bf72006e3becd497b6))
-* **semantics:** preserve empty string property keys ([#764](https://github.com/morluto/rea/issues/764)) ([630bdaf](https://github.com/morluto/rea/commit/630bdafcacc621105f6a43ed68a6e51651aca629))
-* **semantics:** recognize Node builtin default namespaces ([#769](https://github.com/morluto/rea/issues/769)) ([24a0bf9](https://github.com/morluto/rea/commit/24a0bf9a618604e2fa30817d673ce911c7842819))
-* **semantics:** retain trailing rest argument flows ([#756](https://github.com/morluto/rea/issues/756)) ([4bfd803](https://github.com/morluto/rea/commit/4bfd8038be0a60c43a452bec15e23799a0b040c0))
-* **setup:** accept the pinned Hopper RPM launcher ([#933](https://github.com/morluto/rea/issues/933)) ([dda8e6a](https://github.com/morluto/rea/commit/dda8e6a72890f87bdf8bbd3250b68b6648aae553))
-* **setup:** read an OpenCode V2 server named type as a table entry ([#866](https://github.com/morluto/rea/issues/866)) ([4e17be5](https://github.com/morluto/rea/commit/4e17be57053fb0ce2561d92e05b6e38ef789b2d4))
-* **setup:** register OpenCode V2 configurations in mcp.servers ([957069d](https://github.com/morluto/rea/commit/957069d14d832ddeac3f90dd141d379b81e2832a))
-* **setup:** register OpenCode V2 configurations in mcp.servers ([69d8afe](https://github.com/morluto/rea/commit/69d8afefc19e014a4bba7a182983a9e77e100a75))
-* **target:** decode app Info.plist executables with an XML parser ([c57f1b7](https://github.com/morluto/rea/commit/c57f1b74e0af5cf5fbb459cb247e1448cbf8df1b))
-* **target:** decode app Info.plist executables with an XML parser ([c182f72](https://github.com/morluto/rea/commit/c182f72ad3d9eea10b084a43527acb7c8ca2d6bf))
-* **test:** disconnect Hopper fixture IPC on SIGTERM ([b912b11](https://github.com/morluto/rea/commit/b912b117f019d5d3e4b4e3ef683e9b25f3a709bc))
-* **windows:** accept ordinary drive path separators ([#791](https://github.com/morluto/rea/issues/791)) ([b62931f](https://github.com/morluto/rea/commit/b62931f8335f58bfe344883a4f149e9eef73d835))
-* **windows:** remove cancelled snapshot outputs ([#957](https://github.com/morluto/rea/issues/957)) ([d76f7d1](https://github.com/morluto/rea/commit/d76f7d150895289aa1fb85a057b81ca7ff102df4))
-
-
-### Performance Improvements
-
-* **artifacts:** stream ASAR members without full buffering ([#962](https://github.com/morluto/rea/issues/962)) ([abd7a5e](https://github.com/morluto/rea/commit/abd7a5ed091061e4b1e83e5933e9009fb5b8d577))
-* **call-path:** prune dead ends and enumerate without recursion ([#909](https://github.com/morluto/rea/issues/909)) ([e52fe97](https://github.com/morluto/rea/commit/e52fe9719fec03f2aa79b1a1b9e11b38c229903c))
-* **cli:** defer catalog digests and use canonical cache scope ([9a15525](https://github.com/morluto/rea/commit/9a1552529889e9f5b52a88739eb767b92e57e24e))
-* **cli:** defer unused catalog work during command startup ([#920](https://github.com/morluto/rea/issues/920)) ([9a15525](https://github.com/morluto/rea/commit/9a1552529889e9f5b52a88739eb767b92e57e24e))
-* **comparison:** reuse canonical sort keys ([#990](https://github.com/morluto/rea/issues/990)) ([ebb065e](https://github.com/morluto/rea/commit/ebb065e2dc15f5763276f401521896f66bae6339))
-* **dotnet:** index declaring-type ranges once per metadata table ([#918](https://github.com/morluto/rea/issues/918)) ([7a9f587](https://github.com/morluto/rea/commit/7a9f587c3a9998d828b83388438976527ca7074f))
-* **dotnet:** index ordered declaring-type ranges once per table ([7a9f587](https://github.com/morluto/rea/commit/7a9f587c3a9998d828b83388438976527ca7074f))
-* **evidence:** scale imports and dependency graphs ([#941](https://github.com/morluto/rea/issues/941)) ([7dc40d3](https://github.com/morluto/rea/commit/7dc40d3d9e00caf013109942a5d9a1d7fdf9ec62))
-* **inspector:** bound runtime script location authorization ([#945](https://github.com/morluto/rea/issues/945)) ([58381ee](https://github.com/morluto/rea/commit/58381eefa24f73580e31eaa09dc14b9c04d78d6c))
-* **javascript:** analyze member chains without recursive copying ([#932](https://github.com/morluto/rea/issues/932)) ([dcde958](https://github.com/morluto/rea/commit/dcde9584508830a5d99ac5e2032f539563c69002))
-* **javascript:** index Promise return-site ownership ([#971](https://github.com/morluto/rea/issues/971)) ([2cedde9](https://github.com/morluto/rea/commit/2cedde9f1cf72b04bef37f9f004bb68d5ff6502a))
-* **javascript:** index semantic fingerprint relations ([#942](https://github.com/morluto/rea/issues/942)) ([c92a344](https://github.com/morluto/rea/commit/c92a344d4770125d85a11f3fc7a23d800bd30003))
-* **javascript:** reduce analysis and source-map work ([#955](https://github.com/morluto/rea/issues/955)) ([c7530f9](https://github.com/morluto/rea/commit/c7530f9a816d84354516d3ea137f4a0d91d3b8b3))
-* **providers:** assemble fragmented responses once per line ([#911](https://github.com/morluto/rea/issues/911)) ([df7151b](https://github.com/morluto/rea/commit/df7151ba305eab3a33a9261a023705b29862b308))
-* **reconstruction:** index coverage evaluation ([#983](https://github.com/morluto/rea/issues/983)) ([f26c8b5](https://github.com/morluto/rea/commit/f26c8b5b8cff10b93173359b5453874d659f2440))
-* **setup:** reuse initial diagnostics during planning ([#940](https://github.com/morluto/rea/issues/940)) ([118d43e](https://github.com/morluto/rea/commit/118d43e787e38857714852cc846b1b604a61950d))
-
-
-### Code Refactoring
-
-* add incremental capability migration safeguards ([#819](https://github.com/morluto/rea/issues/819)) ([75f50d8](https://github.com/morluto/rea/commit/75f50d86f6d504f4dd97a707871d39ec022b3047))
-* **android:** group layered source and verification ([#873](https://github.com/morluto/rea/issues/873)) ([8e8921d](https://github.com/morluto/rea/commit/8e8921d40c63b40ab7e1598f672063dd304d93f0))
-* **apple:** group artifact producers and verification ([#952](https://github.com/morluto/rea/issues/952)) ([ef1a0cc](https://github.com/morluto/rea/commit/ef1a0cc65af7918ef7204a39f42a4299b486c453))
-* **artifacts:** isolate JavaScript file acquisition ([#916](https://github.com/morluto/rea/issues/916)) ([f0a68dc](https://github.com/morluto/rea/commit/f0a68dce60e81b4d2f420bf774b61957a37326ac))
-* **binary:** group session selection and snapshot ownership ([#886](https://github.com/morluto/rea/issues/886)) ([dd114d3](https://github.com/morluto/rea/commit/dd114d39801973e958a582c8fcba7ccce0e50299))
-* **binary:** move production composition outside application workflows ([#965](https://github.com/morluto/rea/issues/965)) ([33d4761](https://github.com/morluto/rea/commit/33d4761cc7a96630b7c2fed890df83d433c45914))
-* **browser:** align inspector exclusions with canonical vocabulary ([#834](https://github.com/morluto/rea/issues/834)) ([de9593a](https://github.com/morluto/rea/commit/de9593ad48c0b97507f18949b7ad86ad9c743ebc))
-* **cli:** split core analysis command registrar ([#858](https://github.com/morluto/rea/issues/858)) ([8b9940a](https://github.com/morluto/rea/commit/8b9940a7b5d3fcd5a8eda6d397f0ab7c3aaf2ac9))
-* colocate investigation record implementation ([#867](https://github.com/morluto/rea/issues/867)) ([bb19c94](https://github.com/morluto/rea/commit/bb19c9477ef3eefd9c5b2e6cabe78cc94e6779ae))
-* compose investigation record ownership ([#845](https://github.com/morluto/rea/issues/845)) ([ce73c3f](https://github.com/morluto/rea/commit/ce73c3fed2e5fd20ae0113579345a69763eb7655))
-* declare auxiliary capabilities from source ([#853](https://github.com/morluto/rea/issues/853)) ([4a6c17c](https://github.com/morluto/rea/commit/4a6c17ce83dfd20412f0e168525314a20c61169e))
-* **domain:** consolidate property-key extraction behind semanticStaticPropertyKey ([#823](https://github.com/morluto/rea/issues/823)) ([764ff05](https://github.com/morluto/rea/commit/764ff05231f1a666dfa655492da42b4b6ba742c3))
-* **domain:** converge comparison mechanics on shared vocabulary ([#824](https://github.com/morluto/rea/issues/824)) ([c13c9d4](https://github.com/morluto/rea/commit/c13c9d41f8441a711266adee21429fb7433a6aa1))
-* **domain:** extract artifact path syntax helpers ([#830](https://github.com/morluto/rea/issues/830)) ([ef535b8](https://github.com/morluto/rea/commit/ef535b81fefc358b0bdb655e5aa057fc3949ce5f))
-* **domain:** extract source-map envelope walk and disambiguate stringValue ([#828](https://github.com/morluto/rea/issues/828)) ([64ebdf4](https://github.com/morluto/rea/commit/64ebdf45016bda679674cbd2287576eadf66a1fc))
-* **domain:** map validation taxonomies and add inventory Result seam ([#833](https://github.com/morluto/rea/issues/833)) ([78f4848](https://github.com/morluto/rea/commit/78f4848d70ce462426e9f221d6e7b3e34219bf46))
-* **domain:** split Interface Builder keyed-archive parse from graph builder ([#859](https://github.com/morluto/rea/issues/859)) ([da09706](https://github.com/morluto/rea/commit/da0970672da725dbb095ffcaefad07303ae85aab))
-* **firmware:** group layered source and verification ([#878](https://github.com/morluto/rea/issues/878)) ([507e8b3](https://github.com/morluto/rea/commit/507e8b3c7be75f8de69be214618394aca3585404))
-* **ghidra:** extract createClient and load-image attestation ([#856](https://github.com/morluto/rea/issues/856)) ([b7df5b7](https://github.com/morluto/rea/commit/b7df5b78052539e57967db8e6562befd70c6ebdc))
-* give Inspector its own capability directory ([#869](https://github.com/morluto/rea/issues/869)) ([021ba69](https://github.com/morluto/rea/commit/021ba690b07eab4b990be47f90946db9f70e0fc0))
-* **javascript:** group application workflows and verification ([#896](https://github.com/morluto/rea/issues/896)) ([0804722](https://github.com/morluto/rea/commit/0804722cdf721a8d767d02f9342ebdf8d186f7e1))
-* **javascript:** group domain semantics and contracts ([#907](https://github.com/morluto/rea/issues/907)) ([f6a58f1](https://github.com/morluto/rea/commit/f6a58f10629614fb7a6970421218b73d41bce6a5))
-* **managed:** group capability workflows and verification ([#926](https://github.com/morluto/rea/issues/926)) ([28713f9](https://github.com/morluto/rea/commit/28713f9b4dcb882f0e811653890fde70cb5fdadb))
-* **native:** group analyst semantics workflows and contracts ([#973](https://github.com/morluto/rea/issues/973)) ([ea4db4c](https://github.com/morluto/rea/commit/ea4db4c9f7cbc10dc701c4d5770109c08952a5b8))
-* **native:** split Apple dispatch metadata decode facets ([#855](https://github.com/morluto/rea/issues/855)) ([676959e](https://github.com/morluto/rea/commit/676959ecb55b606a567af3d2eb3d3edc96f0aa2f))
-* **provider:** declare deep capabilities from source ([#892](https://github.com/morluto/rea/issues/892)) ([b808e2d](https://github.com/morluto/rea/commit/b808e2d6bbbae38c1ff2e293e1cf77464d889bdd))
-* share Android and firmware provider factories ([#826](https://github.com/morluto/rea/issues/826)) ([3ed59b2](https://github.com/morluto/rea/commit/3ed59b281247f2180b3c79e658078507e4cc1be2))
-
-
-### Documentation
-
-* add concise lawful-use disclaimer ([#888](https://github.com/morluto/rea/issues/888)) ([4037c65](https://github.com/morluto/rea/commit/4037c6545dc8cc47f4602d8f06e5329ed641cdbb))
-* add DX-Ball reconstruction showcase ([#876](https://github.com/morluto/rea/issues/876)) ([895079d](https://github.com/morluto/rea/commit/895079dd093f02487789d9aa967f0cccbfe379d8))
-* add prominent website and showcase links to READMEs ([2ccc86c](https://github.com/morluto/rea/commit/2ccc86cd13d71f08b553d3b9962175144b882539))
-* add README star history chart ([#850](https://github.com/morluto/rea/issues/850)) ([11f27de](https://github.com/morluto/rea/commit/11f27deddf88703368942d3ddfc239a7ebe72e3e))
-* add website and showcase links to READMEs ([#930](https://github.com/morluto/rea/issues/930)) ([2ccc86c](https://github.com/morluto/rea/commit/2ccc86cd13d71f08b553d3b9962175144b882539))
-* **apple:** describe directory-based framework plist ambiguity ([6d74992](https://github.com/morluto/rea/commit/6d74992efed3271e8370c505afdde347609f8353))
-* audit and improve localized readmes translations and wording ([00a6ac3](https://github.com/morluto/rea/commit/00a6ac3de99f432bd6dbb88148a2aab5f8d3d338))
-* clarify NativeAOT scope and regenerate conformance ledger ([c945931](https://github.com/morluto/rea/commit/c945931961cbd488163c6d92ef91336ed506942e))
-* fix stale IDA roadmap item, mermaid paths, toolchain wording ([d2aed17](https://github.com/morluto/rea/commit/d2aed172ab79d98ff4e62c14d8f34cc49c1d17b4))
-* move quick start up and mark skill install optional ([554e9b1](https://github.com/morluto/rea/commit/554e9b1612f7799c2bc7177eb1a9b04a0f27d2e9))
-* note Cloud Agent Node.js toolchain ([#837](https://github.com/morluto/rea/issues/837)) ([6aa6350](https://github.com/morluto/rea/commit/6aa6350c800796d0953937e894ff176ae248e930))
-* publish VitePress documentation on GitHub Pages ([c78fe69](https://github.com/morluto/rea/commit/c78fe6990bcface6853ac5c11c90df6bc0df562d))
-* separate ambiguous and unavailable provider recovery ([c3f2b8e](https://github.com/morluto/rea/commit/c3f2b8e7742915dc27ab7c801a8a1a9127169896))
-* show task-scoped readiness and provider preference in the quick start ([880cca1](https://github.com/morluto/rea/commit/880cca1bca497bb53c97a821b470df0f2235e043))
-* show task-scoped readiness and provider preference in the quick start ([5fd0db3](https://github.com/morluto/rea/commit/5fd0db37d94f1c1a0495920c79e121d799da0d30)), closes [#726](https://github.com/morluto/rea/issues/726)
-* update release boundary to npm 4.1.0 with Windows native bundle ([69be514](https://github.com/morluto/rea/commit/69be514c67c8b2eb8b450355a9782d9237748fda))
-* **website:** add Notion case study and improve onboarding ([a6ba772](https://github.com/morluto/rea/commit/a6ba772c08e2648e6602787a0ea537d75d72802d))
-* **website:** add TH04 bullet-ring case study ([f8d84da](https://github.com/morluto/rea/commit/f8d84da127fad871050c098b004a503b36795ad0))
-* **website:** add worked guides and keep Pages publishing manual ([#925](https://github.com/morluto/rea/issues/925)) ([4f25ee3](https://github.com/morluto/rea/commit/4f25ee33dcd4195f8d877f8835f81c4e08c95235))
-* **website:** clarify guides and case studies ([5065fcd](https://github.com/morluto/rea/commit/5065fcd5205ec7c0d259131431c2cf54d9f69cf6))
-
-
-### Tests
-
-* **artifacts:** report compiled connector records when a storyboard route is missing ([d421d3f](https://github.com/morluto/rea/commit/d421d3f286ce515b5126859a0f9cac60667a168e))
-* **artifacts:** report observed action routes when a compiled route is missing ([c60b737](https://github.com/morluto/rea/commit/c60b737f7db8e2c9a1982cdb4357fcda1f47ff08))
-* **artifacts:** write the storyboard fixture's action in Cocoa syntax ([53bfa7e](https://github.com/morluto/rea/commit/53bfa7e3f792cdb9f2e95fc954f3616426414bcc))
-* eliminate fixture races and prune redundant scaffolding ([#849](https://github.com/morluto/rea/issues/849)) ([f72931d](https://github.com/morluto/rea/commit/f72931d9dd54609bfca422750fc2667f80af691c))
-
-
-### Continuous Integration
-
-* consolidate macOS native baseline checks ([#935](https://github.com/morluto/rea/issues/935)) ([810fe53](https://github.com/morluto/rea/commit/810fe53e799b89dc215c52c9245d36fb2a44d9c4))
-* verify native arm64 and Intel macOS workflows ([#898](https://github.com/morluto/rea/issues/898)) ([4801a24](https://github.com/morluto/rea/commit/4801a24089964860db7f4855be21d2d4313c7eab))
-
 ## [4.1.0](https://github.com/morluto/rea/compare/rea-agents-4.0.1...rea-agents-4.1.0) (2026-10-06)


@@ -10,7 +10,7 @@ When adding or changing an MCP tool, follow the [tool design guide](docs/tool-de

 ## Development setup

-REA development requires Node.js 24.18.x and npm 11.16.x (pinned toolchain via `nvm use`; the supported runtime range is Node.js ^22.19 || ^24.11 || >=26, as the README badge states). Real-Hopper verification additionally requires either macOS 12+ or an officially supported Linux host (Ubuntu 24.04+, Fedora 41+, 64-bit Arch, or CachyOS) and an installed Hopper application. Linux demo verification uses its own private Xvfb display and does not require a desktop session. Run `nvm use` before installing dependencies.
+REA development requires Node.js 24.18.x and npm 11.16.x (pinned toolchain via `nvm use`; the supported runtime range is Node.js ^22.19 || ^24.11 || >=26, as the README badge states). Real-Hopper verification additionally requires either macOS 12+ or an officially supported Linux host (Ubuntu 24.04+, Fedora 41+, or 64-bit Arch) and an installed Hopper application. Linux demo verification uses its own private Xvfb display and does not require a desktop session. Run `nvm use` before installing dependencies.

 ```bash
 npm ci
@@ -26,24 +26,6 @@ worktrees. After a package, lockfile, or managed-skill version change, run

 Keep dependencies flowing inward through the existing domain, contracts, provider, application, server, and adapter layers. Parse unknown values at process and protocol boundaries, model expected failures with `Result`, and preserve the canonical tool inventory defined by `TOOL_CONTRACTS` unless a deliberate contract change updates every verifier, generated catalog artifact, and snapshot. Keep tool discovery complete and report capability- and session-scoped availability through `binary_session`.

-## Documentation website
-
-The VitePress site uses the Markdown files in `docs/`. Run `npm run docs:dev`
-for live editing, `npm run docs:build` to check the production build and
-links, and `npm run docs:preview` to preview that build at `/rea/`.
-
-Site navigation lives in `docs/.vitepress/config.ts`. Keep links to guides
-relative so they work on GitHub and the website; link to repository files
-outside `docs/` using their full GitHub URLs. Generated reference documents
-use `npm run docs:generate`; `docs:build` generates them before building the website.
-
-Pull requests run `npm run docs:check`. `.github/workflows/pages.yml` is a
-manual VitePress build and does not publish. The public site at
-<https://morluto.github.io/rea/> is published only by the manual website
-workflow on `main`. The repository's **Settings → Pages → Build and
-deployment → Source** must be set to **GitHub Actions** before the first
-deployment.
-
 ## Development feedback and PR verification

 For an ordinary edit, run the relevant regression and cached static checks:
@@ -74,24 +56,8 @@ require the matching real-provider `verify:*` lane.
 Formatting uses Oxfmt and the committed `.oxfmtrc.json`; generated sources use
 the same configuration. Pre-commit formats and lints staged files; pre-push runs
 `check:fast`.
-`docs:check` builds and validates generated metadata for the current checkout.
-The product catalog (`docs/public/product-catalog.json`), portable managed
-conformance projections (`docs/verification/managed-conformance-*.json`), and
-packaged skill (`skills/`) are ignored build outputs. Edit skill instructions
-and references in `skill-src/`; the build adds catalog-dependent metadata to
-the packaged copy without rewriting authored files. The generated manifest
-commits to that exact packaged skill bundle. It is a portable projection of
-the deterministic managed verifier, not a record of optional real-provider runs.
-CI validates these outputs and retains them as artifacts instead of pushing
-generated-only commits onto feature branches. Reviewed source metadata such as
-`src/generatedPackageMetadata.ts` and `docs/error-contract.schema.json` remains
-tracked and checked for freshness. Do not commit ignored generated outputs.
-The build-generated product catalog contains documented facts and their provider
-identity, rather than full runtime schema hashes. The managed skill contains
-instructions and inventory metadata; doctor compares its installed files with
-the canonical bundle. Schema-only fixes should not change these outputs or the
-skill commitment in the conformance manifest. Runtime schema identity remains
-available through doctor and `binary_session`.
+`docs:check` checks committed generated metadata. `docs:generate` regenerates
+those files, and the docs CI lane checks them.
 Real-provider execution remains uncached; deterministic builds use Turbo.

 Local `npm test` runs every deterministic Vitest project without coverage or
@@ -138,14 +104,32 @@ Describe the behavior change and verification performed in the pull request. Nev

 ## Maintainer release checklist

-Use the [checkpoint release guide](docs/releasing.md). Releases start from an
-explicit `release/VERSION` branch cut at a recorded commit. Manually prepare
-the bot PR, wait for its exact-head CI and review, merge into that frozen
-branch, and manually publish through the official Release workflow. Main
-pushes do not update release PRs or publish packages. Both publishers build
-the exact SHA tagged by Release Please.
+Run `npm run check:pr`, the isolated package verifier, package dry run, and two-target real-Hopper verifier described above. Build a local tarball and exercise the executable through the package boundary:

-Keep new implementation commits on main for the next release. The workflow
-owns packaged-artifact verification, npm publication, the published CLI/MCP
-canary, and MCP Registry publication. Sync release metadata back to main after
-publication; see the guide for partial-publication recovery and verification.
+```bash
+npm pack
+```
+
+Use the exact filename printed by `npm pack` to run the packaged executable:
+
+```bash
+npm exec --yes --package ./rea-agents-VERSION.tgz -- rea --help
+```
+
+Replace `VERSION` with the packed version; do not use a tarball from an earlier
+build.
+
+Publish the public package:
+
+```bash
+npm publish --access public
+```
+
+After npm registry propagation, verify the published CLI and connect the client SDK version pinned in `package.json` to the published server to confirm the canonical tool catalog:
+
+```bash
+npx -y rea-agents@latest --help
+npx -y rea-agents@latest doctor
+npx -y rea-agents@latest setup --yes --all-detected
+npx -y rea-agents@latest mcp
+```
@@ -10,17 +10,14 @@

 [![npm version](https://img.shields.io/npm/v/rea-agents?style=flat-square&color=cb3837)](https://www.npmjs.com/package/rea-agents)
 [![CI](https://img.shields.io/github/actions/workflow/status/morluto/rea/ci.yml?branch=main&style=flat-square&label=CI)](https://github.com/morluto/rea/actions/workflows/ci.yml)
-[![MCP tool catalog](https://img.shields.io/badge/MCP-tool_catalog-5c4ee5?style=flat-square)](docs/mcp-contracts.md#generated-catalog)
+[![MCP tool catalog](https://img.shields.io/badge/MCP-tool_catalog-5c4ee5?style=flat-square)](#tool-catalog-for-investigation)
 [![Node.js 22+](https://img.shields.io/badge/Node.js-22.19%2B-339933?style=flat-square&logo=nodedotjs&logoColor=white)](https://nodejs.org/)
-[![skills.sh](https://skills.sh/b/morluto/rea?style=flat-square)](https://skills.sh/morluto/rea/reverse-engineer-anything)
 [![MIT license](https://img.shields.io/badge/license-MIT-f4c430?style=flat-square)](LICENSE)
 [![Discord](https://img.shields.io/discord/1556595354999332884?logo=discord&logoColor=white&label=Discord&color=5865F2)](https://discord.gg/GkcryMnJDM)

 <a href="https://trendshift.io/repositories/82054?utm_source=repository-badge&amp;utm_medium=badge&amp;utm_campaign=badge-repository-82054" target="_blank" rel="noopener noreferrer"><img src="https://trendshift.io/api/badge/repositories/82054" alt="morluto%2Frea | Trendshift" width="250" height="55"/></a>

-**[Website](https://morluto.github.io/rea/) · [Guides](https://morluto.github.io/rea/guides/) · [Showcases](https://morluto.github.io/rea/showcase/)**
-
-[Quick start](#quick-start) · [How REA works](#how-rea-works) · [What you can analyze](#what-you-can-analyze) · [Showcases](#showcases) · [FAQ](#faq) · [Documentation](#documentation)
+[Quick start](#quick-start) · [Current status](#current-status) · [Investigation model](#the-investigation-model) · [Tool catalog](#tool-catalog-for-investigation) · [Roadmap](#roadmap) · [How it works](#how-it-works)

 <code>npx rea-agents setup</code>

@@ -54,284 +51,693 @@ REA connects your agent to tools for inspecting native binaries, JavaScript and

 Setup registers REA with your agent and installs matching workflow instructions. Native analysis can use an existing Hopper or Ghidra installation; setup can optionally install Hopper with approval. Static JavaScript analysis needs neither engine.

-> **[Visit the REA website](https://morluto.github.io/rea/)** for setup instructions, illustrated guides, and real case studies.
-
 ## Quick start

-### Set up your agent
+### Run setup (recommended)

-With Node.js and npm installed, run:
+Set up REA with your agent:

 ```bash
 npx rea-agents setup
 ```

-Choose your agents, review the proposed changes, and approve them. Setup adds
-REA's MCP server and matching workflow instructions, with backups of existing
-configuration. Restart your agent afterward.
+Choose which supported agents should use REA, then review the exact paths and changes before approving. Existing REA registrations are selected by default; newly detected agents are available to select, but detection alone does not select them. Setup adds MCP access and REA's guided workflow for selected agents. Hopper is a separate optional choice with its own consent. Setup can also record an existing Ghidra installation.

-Setup supports Claude Code, Codex, Cursor, Gemini CLI and
-[other agents](docs/installation.md#supported-agents). See
-[installation and setup](docs/installation.md) for provider configuration and
-manual MCP registration.
+Setup shows its changes before applying them and backs up existing configuration. See [Installation and setup](docs/installation.md) for requirements and setup options.

-### Ask your agent
+### AI Coding Assistants (optional)
+
+Add the skill to your AI coding assistant for richer context:
+
+```bash
+npx skills add morluto/rea --skill reverse-engineer-anything
+```
+
+The skill provides REA's investigation workflow. Run setup above to connect REA to your agent and configure analysis tools. Setup already installs a version-matched skill by default; this command installs the repository version.
+
+### With an agent (recommended)
+
+After setup, restart your agent and [describe the app or feature](#just-ask-your-agent) you want to understand. Hopper can run in demo mode; if it shows a first-run prompt, choose the demo or enter an existing license.
+
+REA supports Claude Code, Claude Desktop, Codex, Cursor, Gemini CLI, Windsurf, Devin, OpenCode, Antigravity, GitHub Copilot CLI, Command Code, and VS Code. Existing REA registrations are selected by default during setup; other detected agents remain unselected until chosen. Other agents can use the [manual MCP configuration](#manual-mcp-configuration).
+
+### First result from the terminal
+
+For your extracted JavaScript/Electron application tree or ASAR, run:
+
+```bash
+npx -y rea-agents@latest analyze-javascript-application /absolute/path/to/app --json
+```
+
+Replace the path with your target (for example, `"D:/apps/example"` on Windows).
+This returns inline Evidence, recovered graph, limitations, and unknowns without
+MCP setup, Hopper, Ghidra, or executing the application. For a native app, configure
+its engine first, then use `analyze` with that app's path. Run `doctor` when you
+need diagnosis; it is not a prerequisite for each analysis.
+
+### Install the rea command
+
+Install the command-line interface:
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/morluto/rea/main/install.sh | bash
+```
+
+The installer adds `rea` to your system and starts setup when run in a terminal. It requires Node.js and npm to be installed already.
+
+Alternatively, install with npm, then run setup:
+
+```bash
+npm install --global rea-agents
+rea setup
+```
+
+Update either installation with `rea update`.
+
+### Requirements
+
+Static JavaScript inspection requires the Node/npm runtime only. Host and
+external-tool prerequisites depend on the selected workflow; the native
+provider guides describe their supported platforms.
+
+- macOS 12 or newer
+- Ubuntu 24.04+, Fedora 41+, or 64-bit Arch Linux
+- Node.js 22.x (>=22.19), 24.x (>=24.11), or 26+
+- npm; REA does not require or install a particular npm version
+
+Deep native binary analysis requires [Hopper](https://www.hopperapp.com/), [Ghidra](#ghidra-analysis-provider), or [IDA Pro](#ida-pro-analysis-provider). Hopper is separate software with its own license; its demo supports analysis with vendor-defined limits. Ghidra and IDA are bring-your-own providers.
+
+Firmware region inspection and explicit extraction use caller-supplied Binwalk and Unblob on Linux. See [Firmware analysis](docs/firmware-analysis.md) for setup, provenance, resource limits and native handoff.
+
+Static APK analysis uses a separately supplied headless JADX JAR and Java, with no emulator or APK execution. See [Android analysis](docs/android-analysis.md) for setup, CLI/MCP operations, coverage and public test fixtures.
+
+Repository main and npm 4.1.0 include experimental Windows x64 Ghidra support for native x86-64 PE applications on local NTFS, with bundled Job Object, private-DACL, and path-admission controls. Check the [release boundary](docs/installation.md#released-package-and-main) before expecting this from an older npm package. See [Windows Ghidra P0](docs/windows-ghidra-p0.md) for prerequisites and verified scope.
+
+If something is not working, run:
+
+```bash
+npx -y rea-agents@latest doctor
+```
+
+`doctor` checks your host, dependencies, analysis tools, and agent configuration without changing them. Use `--json` for structured diagnostics.
+
+### Linux installation and troubleshooting
+
+On macOS, setup can install Hopper in `~/Applications` after approval. It verifies the official download and does not need Homebrew or administrator privileges.
+
+On supported Linux distributions, setup can install Hopper and its demo-session dependencies through your system package manager. You may see a system authorization prompt. Demo sessions use a private virtual display, leaving your desktop alone. See [Hopper installation](docs/installation.md#hopper) for download verification and platform details.
+
+The normal Linux launcher is `/opt/hopper/bin/Hopper`. If Hopper was installed elsewhere:
+
+```bash
+export HOPPER_LAUNCHER_PATH=/absolute/path/to/Hopper
+rea doctor --json
+```
+
+If doctor reports a missing analysis engine even though the file exists, inspect shared-library resolution with:
+
+```bash
+ldd /opt/hopper/bin/Hopper | grep 'not found'
+```
+
+Install the missing packages and rerun `rea setup`. The Linux demo needs Xvfb, Python 3, X11, and XTEST; approved setup installs these dependencies. If you use the curl installer, add `~/.local/bin` to your shell `PATH` when needed.
+
+REA defaults `HOPPER_LAUNCHER_PATH` to `/Applications/Hopper Disassembler.app/Contents/MacOS/hopper` on macOS and `/opt/hopper/bin/Hopper` on Linux. Explicit configuration always takes precedence.
+
+### Ghidra analysis provider
+
+Already use Ghidra? REA can connect it to your agent on Linux x64 or macOS x64/arm64. It requires **Ghidra 12.1.4** and a **64-bit JDK 21**. On macOS, your Ghidra installation must also include the native decompiler for your architecture.
+
+Set the installation paths, then run setup:
+
+```bash
+export GHIDRA_INSTALL_DIR=/absolute/path/to/ghidra_12.1.4_PUBLIC
+export JAVA_HOME=/absolute/path/to/jdk-21 # optional when java and javac resolve from PATH
+rea doctor --json
+rea setup
+rea providers --json
+```
+
+Setup checks the installations and saves their paths in your selected agents' configuration after approval. Ghidra and Java must already be installed; REA does not download or change them.
+
+The adapter exposes inventory, function, memory and load-image inspection, plus atomic function annotation edits on Linux and macOS. `annotate_native_function` edits names and entry comments in the session database and returns a refreshed function dossier; executable bytes stay unchanged. Ghidra does not provide GUI controls through REA.
+
+Opening a Ghidra target selects its provider; the first analysis query starts import and auto-analysis. That query can take longer than a client's default request deadline. See [first-query deadlines and recovery](docs/mcp-contracts.md#ghidra-first-query-deadlines-and-recovery) for an SDK example and cancellation recovery.
+
+REA analyzes a temporary copy of the target and removes the temporary project when the session closes. Results identify what Ghidra observed and what it could not resolve. Decompilation produces pseudocode rather than the original source.
+
+Ghidra also imports DOS MZ executables with an explicit 16-bit x86 real-mode profile. Function results include complete observed body ranges, distinguishing owned bytes from the enclosing span. See the [DOS analysis guide](docs/ghidra-dos.md) for addresses, packing, and verification boundaries.
+See [optional NativeAOT metadata recovery](docs/ghidra-nativeaot.md) for the pinned
+headless adapter, supported layout and existing native-tool workflow.
+
+Windows Ghidra P0 uses bundled native controls for its read-only native x86-64 PE boundary on local NTFS; see the [Windows Ghidra P0 guide](docs/windows-ghidra-p0.md). See [Ghidra installation](docs/installation.md#ghidra), [provider evaluation](docs/provider-evaluation.md), and [testing](docs/testing.md) for configuration details, coverage, and real-provider verification.
+
+To remove only REA-owned MCP registrations and the managed skill:
+
+```bash
+rea uninstall
+rea uninstall --purge-data # also removes only ~/.rea/cache and ~/.rea/state
+```
+
+Uninstall preserves Hopper, Node.js, Evidence files, captures, unrelated skills, and other MCP servers. It refuses malformed client configuration and never follows purge-data symlinks.
+
+### IDA Pro analysis provider
+
+Already have [mrexodia/ida-pro-mcp](https://github.com/mrexodia/ida-pro-mcp) working? REA can reuse its MCP registration for read-only analysis of the current GUI target, or use its database supervisor to open and analyze a supplied binary headlessly.
+
+```bash
+export REA_IDA_MCP_CONFIG=/absolute/path/to/ida-mcp.json
+rea function /absolute/path/to/program main --provider ida --json
+```
+
+The registration selects `attached` (default, legacy 1.4 tools) or `headless` (modern database supervisor). Setup can preserve this file reference in your selected agent's REA registration. REA adapts existing analysis contracts and manages its own headless database; it leaves an attached GUI database open and never saves it. Results stay live because external IDA database changes are not immutable snapshots.
+
+See the [IDA provider guide](docs/ida-provider.md) for upstream installation links, exact configuration examples, Windows-native headless operation, lifecycle cleanup, and coverage. The initial real workflows cover a Windows GUI and Windows x64 headless IDA 9.3; other engine/platform combinations remain unverified. Use a package version that includes this adapter; repository main can lead the npm release.
+
+### CLI or agent?
+
+| If you want to…                                                  | Use                                                                 |
+| ---------------------------------------------------------------- | ------------------------------------------------------------------- |
+| Ask an agent to investigate an app and build a feature           | Run setup, restart your agent, then describe the task               |
+| Inspect or decompile one part of an app from the Terminal        | `rea analyze` or `rea decompile`                                    |
+| Validate, canonicalize, or compare Evidence bundles              | `rea evidence-import`, `rea evidence-export`, or `rea compare`      |
+| Map a local JavaScript/Electron application without executing it | `rea analyze PATH` or `rea analyze-javascript-application`          |
+| Reuse immutable analysis results without relaunching a provider  | Pass `--snapshot /path/to/analysis.json` to a deep-analysis command |
+| Import source as historical reference                            | `rea import-reference-source`                                       |
+| Capture or compare controlled process behavior                   | `rea capture-process` or `rea compare-process-captures`             |
+
+```bash
+rea evidence-import /absolute/path/to/evidence/bundle.json
+rea evidence-export /absolute/path/to/evidence/bundle.json /absolute/path/to/evidence/canonical.json
+rea compare /absolute/path/to/evidence/left.json /absolute/path/to/evidence/right.json
+```
+
+Analyze a JavaScript application directory or ASAR without executing it:
+
+```bash
+rea analyze /absolute/path/to/releases/app.asar --json
+rea analyze-javascript-application /absolute/path/to/releases/app.asar --json
+```
+
+For a directory or `.asar`, generic `rea analyze` automatically selects the
+static JavaScript application provider when neither `--provider` nor
+`--snapshot` is supplied. Both routes return the analysis and its Evidence
+context inline.
+
+Import an older source tree as a reference. REA keeps it separate from observations of the current app:
+
+```bash
+rea import-reference-source /absolute/path/to/source
+```
+
+Historical-source import requires safe no-follow file opens and currently runs
+on Linux and macOS. Native Windows reports `unsupported_host`; run the import
+with Linux REA in WSL or on another supported host. Changing permissions or
+reinstalling REA does not enable this Windows workflow.
+
+Imports read the path supplied to the command. File names do not cause automatic omissions; files are represented by hashes and metadata. To exclude selected paths, set `REA_REFERENCE_SECRET_PATTERNS_JSON` to a JSON string array of ignore patterns. Exports never replace an existing file unless `--overwrite` is explicit.
+
+Use a snapshot to save successful analysis results and reuse them on later runs. REA reuses a result only when the target bytes, operation, parameters, analysis tool, and settings match. It does not cache changes or cursor-dependent calls. Snapshot files stay local and use owner-only permissions.
+
+```bash
+rea analyze /absolute/path/to/app --snapshot /absolute/path/to/analysis/app.json
+# The same exact query can be answered from that snapshot.
+rea analyze /absolute/path/to/app --snapshot /absolute/path/to/analysis/app.json
+```
+
+Exact CLI cached-evidence reads happen before any provider process starts. In MCP sessions,
+pass `snapshot_path` to `open_binary` to import a snapshot atomically while
+opening its matching target; MCP providers may still start before a cached call
+result is returned. Pass `snapshot_path` and, when required, `overwrite: true` to
+`close_binary` to save atomically before Hopper resources are released. If the
+save fails, REA deliberately leaves the session open.
+
+## Just ask your agent
+
+After [setup](#quick-start), restart your agent and ask:

 ```text
 Understand how search works in the Notes app, show me the evidence, and build a
 similar feature for my project.
 ```

-Replace Notes with your target app and the feature you want to understand.
+Replace Notes with the app you want to understand, or ask for an overview first.

-### Use the terminal
+## The investigation model

-Inspect an extracted JavaScript/Electron app directory or ASAR:
+<table>
+<tr>
+<td width="33%" valign="top">
+<strong>Decompile</strong><br /><br />
+Open an app and recover readable code, strings, names, and other clues about how it works.
+</td>
+<td width="33%" valign="top">
+<strong>Understand</strong><br /><br />
+Follow the code from one part of the app to another until the agent can explain how a feature actually works.
+</td>
+<td width="33%" valign="top">
+<strong>Recreate</strong><br /><br />
+Turn what the agent learned into a feature for your own product, adapted to your stack, interface, and requirements.
+</td>
+</tr>
+</table>

-```bash
-npx -y rea-agents@latest analyze-javascript-application /absolute/path/to/app --json
+REA shows how it reached its conclusions. It does not claim to recover original source code or automatically clone an application.
+
+## Why REA
+
+|                          |                                                                                                       |
+| ------------------------ | ----------------------------------------------------------------------------------------------------- |
+| **Built for agents**     | Ask what an app does and let your agent inspect it instead of guessing.                               |
+| **CLI and MCP**          | Run the same reverse-engineering capabilities from your terminal or agent.                            |
+| **Guided setup**         | Configure your agent, connect an existing analysis tool, or install Hopper with your approval.        |
+| **From insight to code** | Understand a feature, then build your own version in the same coding session.                         |
+| **Local by design**      | Analysis runs on your supported local host. REA does not upload the app to a hosted analysis service. |
+| **Keeps context**        | Investigate several apps without starting over for every question.                                    |
+
+## One prompt, a full investigation
+
+```text
+Reverse engineer the Notes app. Find how offline search works, explain it,
+and build a version for my project using TypeScript and SQLite.
 ```

-The result includes modules, imports, Electron boundaries and their evidence.
-Replace the path with your target, such as `"D:/apps/example"` on Windows.
+REA gives the agent a clear path from that request to working code:

-To install the `rea` command for regular use:
+| Step | What the agent does                     | REA tools                                                        |
+| ---: | --------------------------------------- | ---------------------------------------------------------------- |
+|    1 | Opens and identifies the binary         | `open_binary`, `binary_overview`                                 |
+|    2 | Finds likely offline-search clues       | `search_strings`, `search_procedures`, `list_names`              |
+|    3 | Connects those clues to executable code | `find_xrefs_to_name`, `xrefs`, `procedure_callers`               |
+|    4 | Reconstructs the relevant control flow  | `get_call_graph`, `procedure_callees`, `procedure_info`          |
+|    5 | Decompiles the relevant routines        | `procedure_pseudo_code`, `procedure_assembly`, `batch_decompile` |
+|    6 | Builds the feature in your project      | code adapted to your stack, product, and requirements            |
+
+REA handles the app analysis in steps 1 through 5. The agent performs step 6 with its normal file-editing and test tools, using what it learned about the app.
+
+## What agents can do
+
+- Investigate a feature you like and build a version tailored to your own product.
+- Explain how a feature works when its source code is unavailable.
+- Reconstruct an app's authentication, storage, update, or networking flow.
+- Recover enough structure to document an undocumented format or interface.
+- Trace a suspicious behavior from a string or symbol to the code that implements it.
+- Turn recovered behavior into product features, tests, migration notes, ports, or interoperable replacements.
+- Analyze Swift and Objective-C metadata without manually untangling every mangled symbol.
+- Leave names, comments, and bookmarks in Hopper so human and agent analysis reinforce each other.
+
+See [native investigation](docs/native-investigation.md) for keyed archives, instruction/call/type primitives, typed dispatch metadata, value traces and native desktop observation.
+
+## Tool catalog for investigation
+
+| Tool family               | Count | Examples                                                                                                                                                            |
+| ------------------------- | ----: | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Native inspection         |    41 | functions, pseudocode, assembly, strings, symbols, calls, references, annotations, byte reads, and file offsets                                                     |
+| Investigation workflows   |    14 | app overviews, function dossiers, native APIs and dispatch, batch decompilation, feature traces, call paths, call graphs, Swift and Objective-C discovery           |
+| Native macOS utilities    |     7 | Mach-O metadata, code signatures, plists, architectures, and Swift demangling without launching Hopper                                                              |
+| Artifact graph            |     5 | directory and package inventories, compiled Interface Builder files, Apple asset catalogs, and extraction                                                           |
+| Managed PE/CLI            |     7 | .NET identity, metadata, CIL instructions, native dependencies, reconstruction imports, and build comparisons                                                       |
+| Firmware                  |     2 | Linux firmware region inspection and explicit extraction                                                                                                            |
+| Android APK               |     5 | package and manifest declarations, class search, member inventories, method decompilation, and incoming static references                                           |
+| Browser observation       |     9 | page structure, network metadata, scripts, source maps, WebMCP discovery, screenshots, and capture comparisons                                                      |
+| Electron analysis         |     5 | renderer observation, static app mapping, and static/runtime reconciliation                                                                                         |
+| JavaScript runtime        |     2 | Node/Electron Inspector target discovery, script locations, and execution-context events                                                                            |
+| Application workflows     |     8 | captured website script export; cross-layer feature traces, build comparisons, historical source mapping, static return-shape comparison, and reconstruction checks |
+| Workspace and observation |    21 | sessions, evidence bundles, navigation context, process/artifact/function comparisons, and open-question tracking                                                   |
+
+The public interface describes what the agent is trying to learn. Providers decide how to answer. macOS utilities handle common semantic inspection without launching Hopper; Hopper handles deeper native analysis; the process harness records direct behavioral captures.
+
+## Current status
+
+REA supports native application, JavaScript, Electron, .NET, and browser investigation on macOS and Linux. Individual tools have platform and runtime prerequisites. `rea capabilities` and `rea providers` describe the binary-session providers and auxiliary operations; they are not an inventory of every browser, Android, or application workflow. Use the connected MCP tool list and `binary_session` tool availability for the full MCP surface, and the relevant guide for each tool's prerequisites. Repository main can be ahead of [the npm release](docs/installation.md#released-package-and-main).
+
+Static Android APK inspection is verified on Linux with headless JADX; see [Android analysis](docs/android-analysis.md) for its separate prerequisites and coverage.
+
+- **Native binaries:** Open Mach-O, ELF, PE, and Mac `.app` targets through a selected deep provider. Hopper and Ghidra cover broad inventory and function analysis; the IDA adapter supplies its documented read-only function/string operations. Hopper also accepts `.hop` databases and supports annotations.
+- **Packages and resources:** Inspect directories, ZIP, APK, IPA, ASAR, plists, compiled Interface Builder files, and Apple asset catalogs. Artifact requests name the input and requested extraction or traversal directly; macOS DMG traversal also requires the host's native mounting support.
+- **JavaScript and Electron:** Map modules, imports, source maps, routes, IPC channels, storage, and native add-ons without running the app. Compare builds and trace a feature across the recovered graph. Dynamic and ambiguous relationships remain unresolved. See [JavaScript application workflows](docs/javascript-application-workflows.md).
+- **Websites:** Inspect a selected page in an existing Chrome-family browser. Capture page structure, network metadata, script evidence, and screenshots requested by the call. Passive observation does not navigate or execute page JavaScript. See [browser observation](docs/browser-observation.md).
+
+  Export retained scripts with `export_web_scripts` / `rea export-web-scripts`
+  into a verified local directory, then use the existing JavaScript analysis
+  and tracing tools. Source URLs, frame or transaction references, competing
+  versions, and missing-source states remain inline. See
+  [captured website scripts](docs/website-script-export.md).
+
+- **Electron and Node runtime observation:** Inspect selected Electron pages or attach to a Node/Electron V8 Inspector target. Inspector observation records script locations and execution-context events; it does not infer imports, IPC activity, or which modules executed. See [runtime observation](docs/javascript-runtime-observation.md).
+- **.NET assemblies:** Inspect metadata and CIL instructions, compare builds, and check declared native dependencies without loading or running the assembly. Imported decompiler output is labeled as analyst inference. See [managed-code analysis](docs/managed-code-analysis.md).
+- **Controlled behavior capture:** Run process, browser, or Electron scenarios with the target, actions, and lifecycle declared in each request, then compare the resulting evidence. Missing observations cannot establish that two runs behaved the same way.
+- **Evidence and comparison:** Save results with artifact identity, provider, locations, confidence, and limitations. Export or import bundles, compare artifacts and functions, and connect static findings to runtime observations without claiming causality from correlation.
+- **Open questions:** Track unresolved findings, contradictions, and follow-up probes. Reconstruction checks report pass, fail, or unknown rather than treating missing evidence as a pass.
+- **Guided workflows:** Start six [MCP investigation workflows](docs/mcp-prompts.md) with suggestions based on your current session.
+
+Windows x64 Ghidra P0 supports native, non-managed, non-DLL x86-64 PE applications on fixed local NTFS with 25 read-only operations. Linux/macOS Ghidra additionally supports atomic session-scoped function names and entry comments. Ghidra has no GUI controls; Windows P0 has no mutation authority.
+
+### Website observation with CDP
+
+REA can inspect an already-running Chrome-family browser through a literal loopback CDP endpoint. Each request names the endpoint and target; an optional origin filter can narrow discovery:
+
+```bash
+rea list-browser-targets http://127.0.0.1:9222 --json
+rea inspect-web-page http://127.0.0.1:9222 TARGET_ID --json
+```
+
+The eight passive browser tools work through both CLI and MCP. They inspect the selected page without navigating, clicking, or evaluating its JavaScript. Credentials, cookies, authorization headers, and raw payload values are not retained. A request selects whether to include script sources, accessibility text, screenshots, or console and payload summaries. REA cannot observe activity that happened before it attached. See [browser observation](docs/browser-observation.md) for browser startup, capture options, and limits.
+
+### Controlled browser scenarios
+
+`capture_browser_scenario` runs a caller-declared sequence of browser actions through
+Playwright. Unlike passive observation, it can interact with the page. Each
+step records evidence such as screenshots, page structure, navigation, and
+network activity. Missing or truncated observations cannot establish that two
+runs behaved the same way.
+
+```bash
+rea capture-browser-scenario ./scenario.json --json
+```
+
+Launch mode owns a temporary browser profile and removes it after terminating
+the launched browser. Connect mode accepts one exact loopback CDP target and
+disconnects without closing the external browser. The request supplies the
+selected executable or endpoint, actions, and any origin or environment
+selections needed by the scenario. Scenario JSON contains secret references and
+environment-variable names, never secret values. The default capture retains
+only the final URL; request `dom`, `accessibility`, or `screenshot` when an
+interaction changes the page without navigating. For asynchronous updates,
+wait for a page-specific result-ready condition before capture. See the
+[browser scenario contract](docs/browser-scenario-contract.md), including its
+interaction example.
+
+### Node and Electron V8 Inspector observation
+
+Node and Electron runtime observation attaches to an existing Inspector target named in the request:
+
+```bash
+rea list-javascript-runtime-targets http://127.0.0.1:9229 --json
+rea observe-javascript-runtime http://127.0.0.1:9229 TARGET_ID \
+  --runtime-kind node --json
+```
+
+REA records script locations and execution-context events without evaluating
+code or setting breakpoints. These observations do not establish import
+relationships, event activity, IPC, process identity, or Electron roles. See
+[Node and Electron runtime observation](docs/javascript-runtime-observation.md)
+for the exact coverage.
+
+Exact package, tool-family, provider, setup-client, schema, and CLI facts are generated from source in [`docs/product-catalog.json`](docs/product-catalog.json). PR CI verifies this catalog, narrative documentation, and generated schemas.
+
+## Roadmap
+
+The [current status](#current-status) section describes shipped capabilities. These are the next areas of work.
+
+### Now
+
+1. **Keep documentation accurate:** update the generated catalog and documentation checks when tools, providers, setup options, or versions change.
+2. **Test more native binaries:** expand architecture and indirect-call coverage across Hopper and Ghidra.
+
+### Next
+
+1. **Connect more application layers:** add static extractors and runtime observations to feature traces.
+2. **Extend .NET analysis:** improve comparisons of obfuscated assemblies and connect managed findings to verified native analysis. See the [managed-code guide](docs/managed-code-analysis.md).
+3. **Compare more runtime behavior:** expand process, protocol, filesystem, reconnect, and version-comparison coverage.
+
+### Later
+
+1. **Expand browser and Electron interaction:** add scenario actions beyond the current click and wait operations.
+2. **Observe native apps at runtime:** explore LLDB, Frida, system logs, and native API tracing.
+3. **Evaluate more tools and targets:** assess Binary Ninja, Rizin, LIEF, Windows-native tools, mobile apps, and firmware. IDA support already ships via the bring-your-own upstream adapter; see the [IDA provider guide](docs/ida-provider.md).
+
+Setup already lets you choose agent integration and Hopper installation. Support for installing additional analysis tools is future work, described in the [installation roadmap](docs/roadmap.md).
+
+See [provider evaluation](docs/provider-evaluation.md) for coverage and remaining requirements, and the [native investigation guide](docs/native-investigation.md) for UI, dispatch, and value-flow analysis.
+
+## Using REA with other agents
+
+Setup offers supported agent integrations for selection. Existing REA registrations are selected by default; newly detected agents remain unselected until chosen. Any agent that supports local MCP servers can use the configuration below.
+
+### Manual MCP configuration
+
+<!-- x-release-please-start-version -->
+
+```json
+{
+  "mcpServers": {
+    "rea": {
+      "command": "npx",
+      "args": ["-y", "rea-agents@4.1.0", "mcp"]
+    }
+  }
+}
+```
+
+<!-- x-release-please-end -->
+
+Persistent registrations should use one exact package version. `rea setup`
+maintains that pin, updates the bundled skill at the same time, and gives Codex
+a 30-second startup allowance for a cold package-runner start. `rea update`
+installs an exact release and verifies the new executable. It returns an
+unapplied maintenance plan for existing REA integrations, with a scoped setup
+command to review and approve their changes. Restart affected agents afterward.
+
+MCP clients that support prompts can also discover six ordered investigation
+workflows through `prompts/list`. Their optional identifier arguments use the
+current session for bounded `completion/complete` suggestions; see
+[Guided MCP prompts and completion](docs/mcp-prompts.md).
+
+## How it works
+
+```mermaid
+flowchart LR
+    Agent["Agent"] --> REA["REA<br/>CLI + MCP"]
+    Terminal --> REA
+    REA --> Session["Target-bound session router"]
+    Session --> Registry["Deep-provider registry<br/>deterministic selection"]
+    Registry --> Hopper["Hopper provider"]
+    Registry --> Ghidra["Ghidra provider<br/>inventory + function analysis + annotations"]
+    Registry --> Ida["IDA MCP provider<br/>attached GUI or owned headless database"]
+    Hopper --> Runtime["Owned provider runtime<br/>deadline + bounded diagnostics + cleanup"]
+    Ghidra --> Runtime
+    Ida --> IdaRuntime["Upstream MCP lifecycle<br/>live observations + owned database cleanup"]
+    IdaRuntime --> Target
+    Session --> Native["Native macOS provider"]
+    Session --> Artifact["Artifact graph provider"]
+    REA --> Browser["Browser CDP provider"]
+    REA --> Android["Android static provider<br/>headless JADX adapter"]
+    Android --> Runtime
+    REA --> Firmware["Firmware providers<br/>Binwalk / Unblob adapters"]
+    Firmware --> Runtime
+    REA --> Process["Process capture provider"]
+    Runtime --> Target["Target software"]
+    Process --> Target
+    Native --> Target
+    Artifact --> Target
+```
+
+The CLI and MCP server use the same application workflows and evidence contracts. A provider declares which capabilities it supports and the side effects those capabilities may have. Terminal commands are short-lived; an MCP session can retain an active target and evidence ledger for the session.
+
+## CLI
+
+The agent workflow above is the easiest way to use REA. For a one-off overview from the Terminal:
+
+```bash
+npx -y rea-agents@latest analyze /Applications/Notes.app
+npx -y rea-agents@latest inspect /Applications/Notes.app
+npx -y rea-agents@latest search /Applications/Notes.app "offline"
+npx -y rea-agents@latest function /Applications/Notes.app 0x1000
+npx -y rea-agents@latest xrefs /Applications/Notes.app 0x1000
+npx -y rea-agents@latest trace /Applications/Notes.app "offline"
+npx -y rea-agents@latest compare /absolute/path/to/left-evidence.json /absolute/path/to/right-evidence.json
+npx -y rea-agents@latest capabilities
+npx -y rea-agents@latest providers
+```
+
+Run `npx -y rea-agents@latest --help` for direct decompilation, bounded search and
+other options. `analyze` and `inspect` share the same overview workflow;
+`function`, `xrefs`, and `trace` return the same Evidence envelopes as MCP.
+
+Or install the `rea` command globally:

 ```bash
 npm install --global rea-agents
 rea --help
-```
-
-For native analysis, configure a provider first. See the
-[CLI and Evidence guide](docs/cli.md) for native commands, provider selection,
-snapshots and scripting.
-
-### Update REA
-
-REA changes quickly, and new releases include frequent bug fixes. Keep your
-installation up to date.
-
-For an npm-installed CLI:
-
-```bash
 rea update
+rea mcp
 ```

-To refresh your agent registrations and skill, run the setup command printed
-by the update.
+REA accepts a Mac `.app` folder directly. If an agent cannot find an app by name, tell it where the app is installed.

-If you use `npx`, update your agent setup with:
+### Choosing a deep-analysis provider
+
+Choose which analysis tool to use from the CLI:

 ```bash
-npx rea-agents@latest setup
+rea providers --json
+rea analyze /absolute/path/to/program --provider hopper
+REA_ANALYSIS_PROVIDER=hopper rea decompile /absolute/path/to/program 0x1000
 ```

-Review the setup changes and restart your agent. For one-off CLI commands,
-use `npx rea-agents@latest` followed by the command.
+For MCP, pass the optional selector on `open_binary`:

-## How REA works
+```json
+{
+  "path": "/absolute/path/to/program",
+  "provider_id": "hopper"
+}
+```

-Your agent calls REA through MCP to inspect the target and trace relevant code.
-REA returns findings with their evidence. The agent uses them to ask follow-up
-questions, explain the behavior, or write and test an implementation.
-CLI commands use the same workflows.
+Use `--provider`, or `provider_id` in MCP, to choose Hopper, Ghidra, or IDA for a target. This choice overrides `REA_ANALYSIS_PROVIDER`.

-![REA investigation flow: your agent asks about a local target, REA inspects and traces it using analysis tools, and the agent uses the returned code, references and unknowns to explain, implement and test.](website/public/assets/figures/rea-investigation-flow.svg)
+With `auto`, REA selects the only available tool that supports the target. If both are available, specify one before opening the target. The session keeps that choice until you explicitly switch or close it; a failure never silently switches tools. Artifact-only analysis can work without a native analysis tool.

-[Open the full-size figure](website/public/assets/figures/rea-investigation-flow.svg).
+Run `rea providers` and `rea capabilities` to check availability and supported operations. Ghidra supports inspection and atomic function annotation edits on Linux and macOS. Its database edits are discarded on close; GUI controls require Hopper. Windows Ghidra P0 supports read-only analysis of native x86-64 PE applications on local NTFS with bundled native controls.

-<a id="current-status"></a>
+The session also reports active work and cleanup status. If a caller times out, the analysis tool may still be busy; `analysis_activity` reports that state. A `cleanup_incomplete` result identifies resources whose shutdown or removal could not be verified. See [provider selection and analysis profiles](docs/adr/0001-provider-selection-and-analysis-profiles.md) for session, cache, and process-tracking details.

-## What you can analyze
+### CLI exit status

-REA requires Node.js 22.x (>=22.19), 24.x (>=24.11), or 26+, plus npm.
-Additional tools and host support depend on the target:
+| Status    | Meaning                                                                                                                                                                        |
+| --------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| `0`       | The operation completed. Results may still include warnings, partial evidence, or unresolved questions.                                                                        |
+| `1`       | The operation could not complete, for example because of invalid input, host permission denial, cancellation, or timeout. Structured output reports the reason when available. |
+| `128 + N` | The process ended from signal `N`, where the shell or runtime preserves the conventional signal-derived status.                                                                |

-| Target                 | What REA returns                                                                     | Requirements and guide                                                                                                                |
-| ---------------------- | ------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------- |
-| Native binaries        | Pseudocode, assembly, strings, symbols, calls and references                         | Hopper, Ghidra or IDA; [native analysis](https://morluto.github.io/rea/guides/native/)                                                |
-| Offline ELF layout     | Sections, segments, original symbols/relocations and static mitigation candidates    | Caller-supplied pwntools on Linux x64; [binary diagnostics](docs/binary-diagnostics.md)                                               |
-| EVM bytecode           | Dispatch selectors, byte offsets, inferred arguments and mutability                  | Local raw/hex carrier; [offline EVM guide](docs/evm-bytecode.md)                                                                      |
-| Recorded Linux crashes | Raw notes, every recorded thread's registers/signals and optional mapping candidates | Caller-supplied pwntools; optional GDB/pwndbg; [recorded crashes](docs/recorded-crashes.md)                                           |
-| JavaScript / Electron  | Modules, imports, source maps, routes, IPC and native add-on relationships           | Node.js and npm; [application analysis](https://morluto.github.io/rea/guides/javascript/)                                             |
-| Websites               | Page structure, scripts, network observations and requested screenshots              | A Chrome-family browser; [browser analysis](https://morluto.github.io/rea/guides/browser/)                                            |
-| Saved network captures | Requests, responses, exposed payloads and source locations                           | HAR; mitmdump on Linux for native mitmproxy captures; [capture guide](docs/web-network-captures.md)                                   |
-| .NET assemblies        | Metadata, CIL instructions, declared native dependencies and build comparisons       | Static inspection; [managed-code guide](docs/managed-code-analysis.md)                                                                |
-| Android APKs           | Manifest declarations, classes, decompiled methods and references                    | Headless JADX and a full JDK on Linux/macOS; [Android guide](docs/android-analysis.md)                                                |
-| Firmware               | Regions, extraction results and native-analysis handoffs                             | Binwalk / Unblob on Linux; [firmware guide](docs/firmware-analysis.md)                                                                |
-| Packages and resources | File inventories, digests, plists, Apple bundle anatomy and extracted resources      | [Artifact and JavaScript guide](docs/javascript-artifact-reconstruction.md), [Apple applications](docs/apple-application-analysis.md) |
-| Process behavior       | Terminal output, interactions, exit and filesystem observations, and run comparisons | Linux/macOS with a native PTY; [process capture](docs/process-capture.md)                                                             |
+`setup --dry-run` returns status `planned` and exits `0`. A setup result with
+status `cancelled` also exits `0`.
+`setup` returns `1` for `needs_confirmation` or `needs_human`
+because configuration is not ready; rerun it after approval or remediation.
+`doctor` returns `1` when required checks for its readiness scope are unhealthy.
+Unavailable optional provider prerequisites remain visible as informational
+diagnostics and do not block setup or unrelated providers. Output format, full envelopes,
+filters, and token controls never change the operation status.

-Static JavaScript and .NET inspection read the supplied files without running
-the application. Runtime capture runs or interacts with the selected target
-using your user permissions; each runtime guide describes its effects.
+When REA feeds a shell pipeline, enable `pipefail` so a downstream formatter
+cannot hide its failure:

-<a id="choosing-a-deep-analysis-provider"></a>
+```bash
+set -o pipefail
+rea inspect-artifact ./app.asar --json | jq . > inspection.json
+```

-Native formats and host support vary by provider. See
-[Hopper and Ghidra setup](docs/installation.md#hopper), the
-[IDA guide](docs/ida-provider.md), and
-[experimental Windows Ghidra support](docs/windows-ghidra-p0.md).
-Ghidra also supports [16-bit DOS analysis](docs/ghidra-dos.md).
-For provider selection, see the [CLI guide](docs/cli.md#choose-a-provider).
-Check [release availability](docs/installation.md#released-package-and-main)
-for features added since the latest npm release.
+## Current Hopper provider

-## Showcases
+REA starts Hopper when an operation needs it. On macOS, Hopper may bring its window or a dialog to the foreground even though REA requests background startup. Demo or license prompts may need your attention.

-### DX-Ball: reconstruct a sound-pan calculation
+Hopper handles one analysis request at a time. Cancelling your wait does not stop work already running inside Hopper; the session reports whether it is still busy. Successful decompilation results are cached until a relevant rename or comment change.

-Follow a sound call into its position-to-pan helper, inspect the instructions,
-and turn incomplete pseudocode into C. The reconstruction passes 3,205
-original-x86 cases and reproduces all 63 compiled function bytes.
+Use `rea instructions` when you only need assembly instructions for a function. It avoids decompilation and a whole-program inventory.

-[Read the case study](https://morluto.github.io/rea/showcase/dx-ball/) ·
-[Reconstruction repository](https://github.com/N0zoM1z0/dx-ball)
+Closing a session shuts down REA's bridge and removes its temporary socket directory while preserving a Hopper application you may be using. If cleanup cannot be verified, `close_binary` reports `cleanup_incomplete` and the affected resources.

-### Notion: trace the Electron clipboard bridge
+## Process capture

-Find the renderer's clipboard API, follow it through preload and IPC into the
-main process, and inspect the rich clipboard format.
+Process capture runs the exact executable and scenario declared in the request,
+with the requested working directory and environment. Filesystem observation
+paths select what to snapshot. The process runs with your user permissions;
+Process Capture records behavior and is not a security sandbox.

-[Read the case study](https://morluto.github.io/rea/showcase/notion/)
+Capture a scenario or compare two saved Process Capture Evidence records:

-### TH04: recover a DOS bullet-ring calculation
+```bash
+rea capture-process ./authority-scenario.json --json > authority-capture.json
+rea capture-process ./reconstruction-scenario.json --json > reconstruction-capture.json
+rea compare-process-captures authority-capture.json reconstruction-capture.json --json
+```

-Inspect the original PC-98 game's 16-bit instructions, recover the fixed and
-aimed angle calculations, and compare the reconstructed C++ with the
-historical compiler output.
+The comparison reports each observed dimension separately and identifies the
+first terminal, interaction, exit, filesystem, or process divergence.
+See [Process Capture](docs/process-capture.md) for scenario fields, limits, and
+evidence boundaries.

-[Read the case study](https://morluto.github.io/rea/showcase/th04/) ·
-[Reconstruction repository](https://github.com/N0zoM1z0/th04)
+Process Capture currently runs on Linux and macOS with a working native PTY
+backend. Native Windows capture remains unavailable until the PTY adapter can
+verify descendant cleanup; installing or reinstalling its Windows PTY binary
+does not enable capture. For Linux commands, run Linux REA inside WSL.
+Comparing existing capture Evidence remains available on Windows.

-If you've used REA on something interesting, we'd love to see it. Share your
-case in an [issue](https://github.com/morluto/rea/issues) or a
-[pull request](https://github.com/morluto/rea/pulls), including the target,
-your question, how REA helped, and what you found.
+On supported capture hosts, a missing or incompatible PTY binary can be fixed
+by reinstalling REA for the current platform, architecture, and Node.js version
+with optional dependencies enabled. Use separate scenario and output files;
+`--json` produces the JSON consumed by the comparison command.
+
+ASAR inventory verifies Electron integrity metadata for both archive entries
+and `.asar.unpacked` companion files. Integrity failures identify the logical
+path, declared and calculated SHA-256 values, and whether the entry was
+unpacked; REA does not silently accept the mismatched artifact. If a supplied
+ASAR declares unpacked companion bytes that are absent from the local artifact
+set, REA keeps that occurrence as `unavailable` and continues analyzing the
+embedded JavaScript instead of treating the missing native/resource bytes as
+verified or absent.
+
+## Security model
+
+Analysis runs locally. REA communicates with Hopper and Ghidra through authenticated private local sockets and with IDA through its configured local MCP registration. Your agent or model provider has its own data policy.
+
+Runtime requests act on the declared target and lifecycle. Analysis tools and launched targets run with your user permissions, and native UI capture still depends on macOS Accessibility and Screen Recording access. Static JavaScript analysis does not execute extracted modules; use direct browser, Electron, or process capture when runtime behavior is needed.
+
+Windows Ghidra P0 automatically uses native Job Objects, protected private-runtime DACLs, and handle-based admission. Its experimental scope is native x86-64 PE applications on local NTFS. Report vulnerabilities through the private process in [SECURITY.md](SECURITY.md).

 ## FAQ

+<details>
+<summary><strong>Does Hopper need to be running before I start REA?</strong></summary>
+
+No. REA starts Hopper when an operation needs it. An already-running Hopper application is also supported.
+
+</details>
+
+<details>
+<summary><strong>Why did Hopper appear in front of my other windows?</strong></summary>
+
+Hopper's launcher internally activates the application. REA requests background startup, but macOS and Hopper may still bring a window or dialog forward. See [Current Hopper provider](#current-hopper-provider).
+
+</details>
+
+<details>
+<summary><strong>Does REA include Hopper?</strong></summary>
+
+No. Setup can install Hopper for you, but Hopper remains separate software with its own license. REA supplies the CLI, MCP server, and workflows that make it usable by agents.
+
+</details>
+
+<details>
+<summary><strong>Does REA install or include Ghidra or Java?</strong></summary>
+
+No. REA connects to an existing Ghidra installation. Run setup after providing the Ghidra and Java paths shown in the [Ghidra section](#ghidra-analysis-provider).
+
+</details>
+
+<details>
+<summary><strong>Does REA upload the app?</strong></summary>
+
+REA has no hosted analysis service. Current providers analyze artifacts and capture behavior locally. Your agent or model provider may have its own data policy, so review that separately.
+
+</details>
+
+<details>
+<summary><strong>Can REA recover the original source code?</strong></summary>
+
+No decompiler can guarantee the original source. REA gives an agent pseudocode, assembly, symbols, strings, metadata, and relationships that it can use to explain or compatibly recreate observed behavior.
+
+</details>
+
 <details>
 <summary><strong>Which agents can use REA?</strong></summary>

-Any agent that supports local MCP servers. Setup configures the
-[supported agents](docs/installation.md#supported-agents); other clients can use
-[manual MCP registration](docs/installation.md#mcp-registry).
+Any agent that can run a local MCP server can use the manual configuration. Setup offers the supported integrations listed in [Installation and setup](docs/installation.md#supported-agents); existing REA registrations are selected by default, and other detected agents require selection.

 </details>

-<details>
-<summary><strong>Do I need Hopper, Ghidra or IDA?</strong></summary>
+## Development

-Deep native analysis uses one of them. Static JavaScript and .NET inspection
-work without a native analysis engine. Setup can install Hopper after approval;
-Ghidra and IDA use your existing installations. See [provider setup](docs/installation.md#hopper).
+See [CONTRIBUTING.md](CONTRIBUTING.md) for development setup and contribution checks, and [docs/testing.md](docs/testing.md) for test scopes and real-tool verification. `npm run docs:check` checks committed generated documents; `npm run docs:generate` regenerates them.

-</details>
+`npm run verify:agent` evaluates native, JavaScript, managed, and browser investigation tasks through a real local Codex CLI. Its report covers tool selection, repeated calls, token use, completion quality, and handling of permissions and unknowns.

-<details>
-<summary><strong>Do I need to start Hopper first?</strong></summary>
-
-REA starts Hopper when an operation needs it. On macOS, a first-run dialog may
-ask you to choose demo mode or activate your license. See
-[Hopper startup and troubleshooting](docs/installation.md#launcher-paths-and-troubleshooting).
-
-</details>
-
-<details>
-<summary><strong>What does installing the skill from skills.sh do?</strong></summary>
-
-The skill supplies investigation instructions for your agent. Use `rea setup`
-to register REA's MCP server and install the matching instructions, then restart
-your agent. See [skill-only installation](docs/installation.md#skill-only-installation).
-
-</details>
-
-<details>
-<summary><strong>What code does REA return?</strong></summary>
-
-Native analysis returns pseudocode and assembly. JavaScript/Electron analysis
-recovers modules and their relationships. Your agent uses these findings to
-write and test an implementation; the [showcases](#showcases) give worked examples.
-
-</details>
-
-<details>
-<summary><strong>Does REA upload my app?</strong></summary>
-
-REA analyzes targets locally. Your agent receives the tool results, and its
-model provider has its own data policy.
-
-</details>
-
-<details>
-<summary><strong>What should I do if I hit a bug?</strong></summary>
-
-Update first; a recent release may already fix it.
-
-For an npm-installed CLI:
-
-```bash
-rea update
-```
-
-For agent setup through `npx`:
-
-```bash
-npx rea-agents@latest setup
-```
-
-If you're using an agent, complete the [setup refresh](#update-rea) and restart
-it. Retry the same task. If the problem persists, [open an issue](https://github.com/morluto/rea/issues)
-with your REA version, target type, steps to reproduce and error output.
-
-</details>
-
-## Documentation
-
-Start with the website's [worked guides](https://morluto.github.io/rea/guides/).
-For exact options, prerequisites and result contracts:
-
- [Installation and setup](docs/installation.md): agent registration, provider configuration, updates and uninstall.
- [Readiness and troubleshooting](docs/installation.md#check-readiness-for-your-task): diagnose one agent or analysis engine.
- [CLI and Evidence](docs/cli.md): commands, provider selection, snapshots, import/export and exit statuses.
- [MCP contracts](docs/mcp-contracts.md) and [agent prompts](docs/mcp-prompts.md): tool results, sessions and guided investigations.
- [Tool catalog](docs/mcp-contracts.md#generated-catalog): build-generated inventory of tools, providers and CLI commands.
- [Roadmap](docs/roadmap.md): planned work and capability trackers.
-
-Report vulnerabilities through [SECURITY.md](SECURITY.md).
-
-## Contributing
-
-We'd love your help with REA! [Open an issue](https://github.com/morluto/rea/issues) to
-report a bug or suggest a feature, or [send a pull request](https://github.com/morluto/rea/pulls)
-to improve the code or docs.
-
-See [CONTRIBUTING.md](CONTRIBUTING.md) for development setup and checks,
-[testing](docs/testing.md) for verification lanes, and the
-[architecture map](docs/architecture.mermaid) for the project structure.
+`npm run evidence:generate` regenerates the managed conformance manifest and Evidence completion ledger from live verification results. `npm run evidence:check` reruns verification and checks for drift. Unsupported claims remain explicit and do not count as passes. See [testing](docs/testing.md) for verification commands and process-cleanup checks.

 ## Project links

-[Website](https://morluto.github.io/rea/) · [npm](https://www.npmjs.com/package/rea-agents) · [skills.sh](https://skills.sh/morluto/rea/reverse-engineer-anything) · [Issues](https://github.com/morluto/rea/issues) · [Security](SECURITY.md)
-
-## Star history
-
-🎉 **20,000 GitHub stars — thank you!**
-
-Thanks to everyone using REA, reporting bugs, testing builds, and contributing fixes.
-
-<a href="https://www.star-history.com/?repos=morluto%2Frea&amp;type=date">
-  <picture>
-    <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=morluto/rea&amp;type=date&amp;theme=dark&amp;legend=top-left" />
-    <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=morluto/rea&amp;type=date" />
-    <img alt="REA GitHub star history" src="https://api.star-history.com/chart?repos=morluto/rea&amp;type=date" />
-  </picture>
-</a>
-
-## Disclaimer
-
-REA provides tools for lawful reverse-engineering research, analysis, and reconstruction. You are responsible for obtaining any required authorization and complying with applicable laws. The project does not endorse illegal or unauthorized use.
+[npm](https://www.npmjs.com/package/rea-agents) · [Issues](https://github.com/morluto/rea/issues) · [Security](SECURITY.md) · [Contributing](CONTRIBUTING.md) · [Hopper](https://www.hopperapp.com/) · [Ghidra](https://github.com/NationalSecurityAgency/ghidra)

 ## License

@@ -17,8 +17,6 @@

 <a href="https://trendshift.io/repositories/82054?utm_source=repository-badge&amp;utm_medium=badge&amp;utm_campaign=badge-repository-82054" target="_blank" rel="noopener noreferrer"><img src="https://trendshift.io/api/badge/repositories/82054" alt="morluto%2Frea | Trendshift" width="250" height="55"/></a>

-**[الموقع (بالإنجليزية)](https://morluto.github.io/rea/) · [أدلة الاستخدام](https://morluto.github.io/rea/guides/) · [دراسة حالة DX-Ball](https://morluto.github.io/rea/showcase/dx-ball/)**
-
 [البدء السريع](#البدء-السريع) · [حالة الدعم](#حالة-الدعم) · [من الملف التنفيذي إلى السلوك](#من-الملف-التنفيذي-إلى-السلوك) · [منصة أدوات التحقيق](#منصة-أدوات-التحقيق) · [خطة العمل](#خطة-العمل) · [كيف يعمل؟](#كيف-يعمل)

 <table aria-label="REA community">
@@ -138,12 +136,12 @@ rea setup
 ### المتطلبات

 - macOS 12 أو أحدث
- Ubuntu 24.04+ أو Fedora 41+ أو Arch Linux بنواة 64 بت أو CachyOS
+- Ubuntu 24.04+ أو Fedora 41+ أو Arch Linux بنواة 64 بت
 - Node.js 22.x (>=22.19) أو 24.x (>=24.11) أو 26+ وnpm

 يتطلب تحليل الملفات التنفيذية الأصلية Hopper أو Ghidra. Hopper برنامج منفصل، وللوضع التجريبي قيود يحددها المورّد، لكن الترخيص المدفوع ليس إلزاميًا.

-يدعم Ghidra نظامي Linux x64 وmacOS x64/arm64. ثبت Ghidra 12.1.x وJDK الكامل بنواة 64 بت الذي يعلنه ذلك التثبيت (`application.java.min` حتى `application.java.max`) بصورة منفصلة، ثم اضبط REA لاستخدامهما. تتطلب إصدارات 12.1 الحالية JDK 21 أو أحدث ولا تحدد حدًا أعلى. جرى التحقق من الجسر مع Ghidra 12.1.4 وJDK 21. يحتاج macOS أيضًا إلى أداة فك الترجمة الأصلية المطابقة لمعمارية الجهاز.
+يدعم Ghidra نظامي Linux x64 وmacOS x64/arm64. ثبت Ghidra 12.1.4 وJDK 21 الكامل بنواة 64 بت بصورة منفصلة، ثم اضبط REA لاستخدامهما. يحتاج macOS أيضًا إلى أداة فك الترجمة الأصلية المطابقة لمعمارية الجهاز.

 يستطيع Setup التحقق من التثبيت وحفظ المسارات؛ ولا يثبت أو يحدّث Ghidra أو Java أو Node.js أو npm أو Homebrew.

@@ -153,7 +151,7 @@ rea setup

 يشخّص `npx -y rea-agents@latest doctor` الجهاز والاعتماديات وأدوات التحليل وإعدادات الوكيل من دون تغييرها. أضف `--json` للحصول على تشخيص منظم.

-على Linux، يفضّل REA الملف التنفيذي `/opt/hopper/bin/Hopper`، وإذا لم يكن متاحًا يتحقق تلقائيًا من `~/.local/share/rea/hopper/bin/Hopper`. استخدم `HOPPER_LAUNCHER_PATH` للمسارات الأخرى. إذا كان الملف موجودًا لكن محرك التحليل لا يظهر، فشغّل `ldd /absolute/path/to/Hopper | grep 'not found'` على مسار Hopper الفعلي للتحقق من المكتبات الناقصة. راجع [دليل Hopper](docs/installation.md#hopper).
+مسار Hopper الافتراضي على Linux هو `/opt/hopper/bin/Hopper`. استخدم `HOPPER_LAUNCHER_PATH` للمسارات الأخرى. إذا كان الملف موجودًا لكن محرك التحليل لا يظهر، فشغّل `ldd /opt/hopper/bin/Hopper | grep 'not found'` للتحقق من المكتبات الناقصة. راجع [دليل Hopper](docs/installation.md#hopper).

 ### التحديث والإزالة

@@ -213,20 +211,20 @@ rea setup

 ## منصة أدوات التحقيق

-| عائلة الأدوات           | العدد | الاستخدام                                                                                                                                                 |
-| ---------------------- | ----: | -------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| الفحص الأصلي            |    41 | الدوال والشيفرة شبه المصدرية والتعليمات والسلاسل والرموز والاستدعاءات والمراجع والتعليقات وقراءة البايتات ومواضع الملفات                                   |
-| سير عمل التحقيق        |    14 | نظرات عامة على التطبيقات وملفات الدوال وواجهات API الأصلية والتوزيع وفك الترجمة الدفعي وتتبع الميزات ومسارات الاستدعاء ومخططاته واكتشاف Swift وObjective-C |
-| أدوات الملفات الثنائية |    10 | بيانات Mach-O والتوقيعات وplist والمعماريات وأسماء Swift ومراقبة الاستدعاءات عبر LLDB على macOS؛ تخطيط ELF وأدلة الحماية الثابتة وسجلات الأعطال على Linux   |
-| مخطط المخرجات          |     7 | جرد الدلائل والحزم وملفات Interface Builder المترجمة وكتالوجات موارد Apple وتحليل تحميل Mach-O dylib والاستخراج واستدلال واجهات EVM دون اتصال               |
-| PE/CLI المُدار          |     7 | هوية تجميعات .NET وبياناتها الوصفية وتعليمات CIL والاعتماديات الأصلية واستيراد إعادة البناء ومقارنة الإصدارات                                               |
-| البرامج الثابتة        |     2 | فحص مناطق البرامج الثابتة على Linux واستخراجها الصريح                                                                                                    |
-| Android APK            |     5 | بيانات الحزمة وmanifest والبحث عن الأصناف وقوائم الأعضاء وفك ترجمة الأساليب والمراجع الثابتة                                                                |
-| مراقبة المتصفح         |    12 | بنية الصفحات وبيانات الشبكة والبرامج النصية وخرائط المصدر واكتشاف WebMCP والصور ومقارنة الالتقاط                                                          |
-| تحليل Electron         |     5 | مراقبة العارضين وخريطة التطبيق الثابتة والمواءمة بين نتائج الثبات والتشغيل                                                                               |
-| وقت تشغيل JavaScript   |     2 | اكتشاف أهداف Node/Electron Inspector ومواضع البرامج وأحداث سياقات التنفيذ                                                                                |
-| سير عمل التطبيقات      |    13 | تصدير النصوص البرمجية الملتقطة، تتبع الميزات عبر الطبقات ومقارنة الإصدارات ومواءمة المصدر التاريخي ومقارنة أشكال القيم المعادة والتحقق من إعادة الإنشاء    |
-| مساحة العمل والملاحظة   |    21 | الجلسات وحزم الأدلة وسياق التنقل ومقارنة العمليات والمخرجات والدوال وتسجيل الأسئلة غير المحسومة                                                            |
+| عائلة الأدوات         | العدد | الاستخدام                                                                                                                                                 |
+| -------------------- | ----: | -------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| الفحص الأصلي          |    41 | الدوال والشيفرة شبه المصدرية والتعليمات والسلاسل والرموز والاستدعاءات والمراجع والتعليقات وقراءة البايتات ومواضع الملفات                                   |
+| سير عمل التحقيق      |    14 | نظرات عامة على التطبيقات وملفات الدوال وواجهات API الأصلية والتوزيع وفك الترجمة الدفعي وتتبع الميزات ومسارات الاستدعاء ومخططاته واكتشاف Swift وObjective-C |
+| أدوات macOS الأصلية   |     7 | بيانات Mach-O والتوقيعات وplist والمعماريات واستعادة أسماء Swift دون تشغيل Hopper                                                                        |
+| مخطط المخرجات        |     5 | جرد الدلائل والحزم وملفات Interface Builder المترجمة وكتالوجات موارد Apple والاستخراج                                                                      |
+| PE/CLI المُدار        |     7 | هوية تجميعات .NET وبياناتها الوصفية وتعليمات CIL والاعتماديات الأصلية واستيراد إعادة البناء ومقارنة الإصدارات                                               |
+| البرامج الثابتة      |     2 | فحص مناطق البرامج الثابتة على Linux واستخراجها الصريح                                                                                                    |
+| Android APK          |     5 | بيانات الحزمة وmanifest والبحث عن الأصناف وقوائم الأعضاء وفك ترجمة الأساليب والمراجع الثابتة                                                                |
+| مراقبة المتصفح       |     9 | بنية الصفحات وبيانات الشبكة والبرامج النصية وخرائط المصدر واكتشاف WebMCP والصور ومقارنة الالتقاط                                                          |
+| تحليل Electron       |     5 | مراقبة العارضين وخريطة التطبيق الثابتة والمواءمة بين نتائج الثبات والتشغيل                                                                               |
+| وقت تشغيل JavaScript |     2 | اكتشاف أهداف Node/Electron Inspector ومواضع البرامج وأحداث سياقات التنفيذ                                                                                |
+| سير عمل التطبيقات    |     8 | تصدير النصوص البرمجية الملتقطة، تتبع الميزات عبر الطبقات ومقارنة الإصدارات ومواءمة المصدر التاريخي ومقارنة أشكال القيم المعادة والتحقق من إعادة الإنشاء    |
+| مساحة العمل والملاحظة |    21 | الجلسات وحزم الأدلة وسياق التنقل ومقارنة العمليات والمخرجات والدوال وتسجيل الأسئلة غير المحسومة                                                            |

 ## خطة العمل

@@ -243,7 +241,7 @@ rea setup
  "mcpServers": {
    "rea": {
      "command": "npx",
-      "args": ["-y", "rea-agents@6.0.0", "mcp"]
+      "args": ["-y", "rea-agents@4.1.0", "mcp"]
    }
  }
 }
@@ -313,7 +311,7 @@ npx -y rea-agents@latest compare /absolute/path/to/left-evidence.json /absolute/
 <details>
 <summary><strong>هل يعمل REA على Linux أو Windows؟</strong></summary>

-يدعم REA نظام macOS 12+ وUbuntu 24.04+ وFedora 41+ وArch Linux بنواة 64 بت وCachyOS. يعمل تحليل Ghidra للقراءة فقط على Linux x64 وmacOS x64/arm64 مع Ghidra 12.1.x وJDK الكامل الذي يعلنه التثبيت (JDK 21 أو أحدث دون حد أعلى في إصدارات 12.1 الحالية)، إضافة إلى حد Windows x64 P0 التجريبي لتطبيقات PE الأصلية x86-64 على NTFS محلي؛ راجع [دليل Windows Ghidra P0](docs/windows-ghidra-p0.md) للنطاق الموثق.
+يدعم REA نظام macOS 12+ وUbuntu 24.04+ وFedora 41+ وArch Linux بنواة 64 بت. يعمل تحليل Ghidra للقراءة فقط على Linux x64 وmacOS x64/arm64 مع Ghidra 12.1.4 وJDK 21 الكامل، إضافة إلى حد Windows x64 P0 التجريبي لتطبيقات PE الأصلية x86-64 على NTFS محلي؛ راجع [دليل Windows Ghidra P0](docs/windows-ghidra-p0.md) للنطاق الموثق.

 </details>

@@ -336,20 +334,6 @@ npx -y rea-agents@latest compare /absolute/path/to/left-evidence.json /absolute/
 - [Hopper Disassembler](https://www.hopperapp.com/)
 - [سياسة الأمان](SECURITY.md)

-## تاريخ النجوم
-
-🎉 **وصلنا إلى 20,000 نجمة على GitHub، شكرًا لكم!**
-
-شكرًا لكل من يستخدم REA ويبلّغ عن الأخطاء ويختبر الإصدارات ويساهم في إصلاحها.
-
-<a href="https://www.star-history.com/?repos=morluto%2Frea&amp;type=date">
-  <picture>
-    <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=morluto/rea&amp;type=date&amp;theme=dark&amp;legend=top-left" />
-    <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=morluto/rea&amp;type=date" />
-    <img alt="تاريخ نجوم REA على GitHub" src="https://api.star-history.com/chart?repos=morluto/rea&amp;type=date" />
-  </picture>
-</a>
-
 ## الترخيص

 [MIT](LICENSE)
@@ -4,9 +4,9 @@

 # REA：あらゆるものをリバースエンジニアリング

-### バイナリ、アプリ、実行時の動作をひとつの MCP でリバースエンジニアリング。
+### エージェントでアプリの動作からネイティブバイナリまで調べる。

-**気に入った機能を見つけたら、その仕組みをバイナリのレベルまで理解する。**
+**気になる機能を見つけ、仕組みを理解し、自分の形で実装する。**

 [![npm version](https://img.shields.io/npm/v/rea-agents?style=flat-square&color=cb3837)](https://www.npmjs.com/package/rea-agents)
 [![CI](https://img.shields.io/github/actions/workflow/status/morluto/rea/ci.yml?branch=main&style=flat-square&label=CI)](https://github.com/morluto/rea/actions/workflows/ci.yml)
@@ -17,8 +17,6 @@

 <a href="https://trendshift.io/repositories/82054?utm_source=repository-badge&amp;utm_medium=badge&amp;utm_campaign=badge-repository-82054" target="_blank" rel="noopener noreferrer"><img src="https://trendshift.io/api/badge/repositories/82054" alt="morluto%2Frea | Trendshift" width="250" height="55"/></a>

-**[ウェブサイト（英語）](https://morluto.github.io/rea/) · [ガイド](https://morluto.github.io/rea/guides/) · [DX-Ball の事例](https://morluto.github.io/rea/showcase/dx-ball/)**
-
 [クイックスタート](#クイックスタート) · [現在の対応状況](#現在の対応状況) · [バイナリから動作へ](#バイナリから動作へ) · [調査ツールカタログ](#調査ツールカタログ) · [ロードマップ](#ロードマップ) · [仕組み](#仕組み)

 <table aria-label="REA community">
@@ -45,11 +43,11 @@

 ---

-自分のプロダクトにも欲しい機能を他のアプリで見つけたら、REA を使ってエージェントに調査を依頼できます。エージェントはソースコードがなくてもアプリを調べ、機能の仕組みを説明して根拠を示し、あなたのプロジェクト向けの実装まで進められます。
+アプリの機能を自分のプロダクトにも取り入れたいときは、REA を使ってエージェントに調査を依頼できます。ソースコードがなくても、アプリを調べ、仕組みと根拠を示し、あなたのプロジェクト向けに同様の機能を実装できます。

-REA は、ネイティブバイナリ、JavaScript/Electron アプリ、.NET アセンブリ、Web サイトを調べるためのツールをエージェントに提供します。同じツールはターミナルからも使えます。解析はローカルで実行され、結果には各結論の根拠と制限が含まれます。
+REA はネイティブバイナリ、JavaScript/Electron アプリ、.NET アセンブリ、Web サイトの解析ツールを提供します。エージェントからもターミナルからも使えます。解析はローカルで実行され、結果には根拠と制限が含まれます。

-セットアップは REA をエージェントに登録し、対応するワークフロー手順もインストールします。ネイティブ解析には既存の Hopper または Ghidra を使えます。承認すれば、セットアップで Hopper をインストールすることもできます。静的な JavaScript 解析にはどちらのエンジンも不要です。
+Setup はエージェントを設定し、既存の Hopper または Ghidra に接続します。承認後に Hopper をインストールすることもできます。

 ## エージェントに頼むだけ

@@ -59,7 +57,7 @@ REA は、ネイティブバイナリ、JavaScript/Electron アプリ、.NET ア
 メモアプリの検索機能を調べて根拠を示し、私のプロジェクト向けに同様の機能を実装してください。
 ```

-「メモアプリ」を調べたいアプリに置き換えてください。まずは概要の調査を依頼することもできます。
+メモアプリを調べたいアプリに置き換えるか、まず概要を依頼してください。

 ## バイナリから動作へ

@@ -67,73 +65,56 @@ REA は、ネイティブバイナリ、JavaScript/Electron アプリ、.NET ア
 | -------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------ |
 | ネイティブアプリや実行ファイルから、プロシージャ、疑似コード、アセンブリ、文字列、シンボル、セグメント、メタデータを復元します。 | 呼び出し元、呼び出し先、クロスリファレンス、コールグラフをたどり、機能やアルゴリズムの実際の動作を説明できる状態にします。 | エージェントが得た知見を、あなたの技術スタック、画面、要件に合うプロダクト機能へ変えます。 |

-REA は結論に至った根拠を示します。元のソースコードを復元できる、あるいはアプリ全体を自動的に複製できるとは主張しません。
+REA は調査をバイナリ上の根拠に結び付けます。元のソースコードを復元したり、アプリ全体を自動複製したりするとは主張しません。

 ## REA を選ぶ理由

-|                            |                                                                                                          |
-| -------------------------- | -------------------------------------------------------------------------------------------------------- |
-| **エージェント向け**       | アプリの動作を質問すると、エージェントが推測ではなく実際に調べて答えます。                               |
-| **CLI と MCP**             | 同じリバースエンジニアリング機能を、ターミナルからもエージェントからも使えます。                         |
-| **ガイド付きセットアップ** | エージェントの設定、既存の解析ツールへの接続、承認したうえでの Hopper のインストールに対応します。       |
-| **洞察からコードへ**       | 機能を理解したら、同じコーディングセッションで自分のプロダクト向けに実装できます。                       |
-| **ローカルで解析**         | 解析は対応するローカルホストで実行されます。REA がアプリをホスト型の解析サービスへ送ることはありません。 |
-| **コンテキストを維持**     | 質問のたびに解析をやり直すことなく、複数のアプリを続けて調査できます。                                   |
+|                            |                                                                                                      |
+| -------------------------- | ---------------------------------------------------------------------------------------------------- |
+| **エージェント向け**       | アプリの動作について質問し、推測ではなくエージェントに調査させることができます。                     |
+| **CLI と MCP**             | ターミナルとエージェントから同じリバースエンジニアリング機能を使えます。                             |
+| **ガイド付きセットアップ** | エージェントの設定、既存の解析ツールへの接続、承認後の Hopper インストールに対応します。             |
+| **洞察からコードへ**       | 機能を理解したら、同じコーディングセッションで自分のプロダクト向けに実装できます。                   |
+| **ローカルで解析**         | 解析は対応するローカルホストで実行され、REA がバイナリをホスト型解析サービスへ送ることはありません。 |
+| **コンテキストを維持**     | 質問ごとに解析を最初からやり直さず、複数のアプリを続けて調査できます。                               |

 ## クイックスタート

 ### セットアップを実行（推奨）

-REA をエージェントで使えるように設定します：
+REA をエージェントで使うための設定を行います：

 ```bash
 npx rea-agents setup
 ```

-セットアップでは、まず REA を使うエージェントを選び（複数選択可）、具体的なパスと変更内容を確認してから承認します。既存の REA 登録は最初から選択されています。新しく検出されたエージェントは選択肢に表示されますが、検出されただけでは選択されません。選択したエージェントには、MCP 接続と REA のガイド付きワークフローが追加されます。Hopper のインストールは別の任意項目で、個別に承認が必要です。既存の Ghidra のインストール先を登録することもできます。
+Setup は最初に連携するエージェントを複数選択できるようにします。既存の REA 登録は初期選択されますが、検出されただけのクライアントは自動選択されず、未設定のクライアントも選べます。具体的なパスと変更内容を確認してから承認してください。選択したエージェントには通常 REA のワークフローをインストールします。Hopper は別の任意操作で、個別の承認が必要です。既存の Ghidra のパスも登録できます。

-セットアップは変更を適用する前に内容を表示し、既存の設定をバックアップします。要件とセットアップのオプションは[インストールガイド](docs/installation.md)を参照してください。
+変更は事前に表示され、既存の設定はバックアップされます。要件と追加オプションは[インストールガイド](docs/installation.md)を参照してください。

-### エージェントで使う（推奨）
+### エージェントで使う

-セットアップ後にエージェントを再起動し、理解したいアプリや機能を[説明してください](#エージェントに頼むだけ)。Hopper はデモモードでも動作します。初回起動の画面が表示されたら、デモを選ぶか既存のライセンスを入力してください。
+設定後にエージェントを再起動し、調べたいアプリや機能を説明します。REA は Claude Code、Claude Desktop、Codex、Cursor、Gemini CLI、Windsurf、Devin、OpenCode、Antigravity、GitHub Copilot CLI、Command Code、VS Code に対応します。既存の REA 登録は初期選択され、それ以外の検出済みクライアントは選択が必要です。その他のエージェントは下記の MCP 設定を使えます。

-REA は Claude Code、Claude Desktop、Codex、Cursor、Gemini CLI、Windsurf、Devin、OpenCode、Antigravity、GitHub Copilot CLI、Command Code、VS Code に対応しています。セットアップでは既存の REA 登録が最初から選択され、それ以外の検出済みエージェントは選択するまで対象になりません。その他のエージェントは[手動の MCP 設定](#他のコーディングエージェントで使う)を使えます。
+Hopper はデモモードで使えます。初回起動の画面ではデモを選択するか、既存のライセンスを入力してください。

 ### AI コーディングアシスタント向けスキル（任意）

-AI コーディングアシスタントにスキルを追加すると、より豊富なコンテキストを利用できます：
+AI コーディングアシスタントにスキルを追加すると、より豊富なコンテキストが得られます：

 ```bash
 npx skills add morluto/rea --skill reverse-engineer-anything
 ```

-このスキルは REA の調査ワークフローを提供します。REA をエージェントに接続して解析ツールを設定するには、上記のセットアップを実行してください。セットアップは既定でバージョンの一致したスキルをインストールします。このコマンドはリポジトリ版のスキルをインストールします。
+このスキルは REA の調査ワークフローを提供します。上記の setup を実行して REA をエージェントに接続し、解析ツールを設定してください。Setup は既定でバージョンに合ったスキルをインストールします。このコマンドではリポジトリ版のスキルをインストールします。

-### ターミナルで最初の結果を得る
-
-展開済みの JavaScript/Electron アプリのディレクトリまたは ASAR に対して、次を実行します：
+展開済みの JavaScript/Electron アプリのツリーや ASAR であれば、MCP の設定もネイティブエンジンも不要です：

 ```bash
 npx -y rea-agents@latest analyze-javascript-application /absolute/path/to/app --json
 ```

-パスは調査対象に置き換えてください（Windows では `"D:/apps/example"` など）。MCP の設定、Hopper、Ghidra を必要とせず、アプリを実行することもなく、Evidence、復元したグラフ、制限、未解決事項をその場で返します。ネイティブアプリの場合は、先にエンジンを設定してから、そのアプリのパスを指定して `analyze` を使います。`doctor` は問題を診断したいときに使うもので、解析のたびに実行する必要はありません。
-
-### 作業に合わせて準備状況を確認する
-
-オプションなしの `rea doctor` は連携全体の監査です。検出したすべてのエージェント登録、インストール済みのスキル、すべての任意の解析エンジンを確認するため、今の作業には支障がなくても `healthy: false` を報告することがあります。作業に合わせて確認範囲を指定してください：
-
-| 作業                                       | 準備状況の確認                                                                                 |
-| ------------------------------------------ | ---------------------------------------------------------------------------------------------- |
-| 静的な JavaScript/Electron 解析            | 不要です。`analyze-javascript-application` を直接実行します。                                  |
-| 特定の解析エンジンのトラブルシューティング | `rea doctor --provider ghidra --json`（または `hopper`、`ida`）                                |
-| 特定のエージェントの MCP 登録を確認        | `rea doctor --client codex --json`（[クライアント ID](docs/installation.md#supported-agents)） |
-| インストール済みのスキルを確認             | `rea doctor --skill --json`                                                                    |
-
-範囲を指定したレポートでは、`healthy` と終了ステータスを決めるのは `scope_checks` だけです。それ以外の項目は `informational_checks` に表示され、今の作業のために修正する必要はありません。たとえば、使っていないエンジンが見つからなくても対処は不要です。
-
-ネイティブ対象に対応するエンジンが複数インストールされている場合、REA は自動ではどれも選びません。対象を開くと `code: "capability_unavailable"` と `details.selection_reason: "ambiguous"` で失敗し、`details.candidate_ids` に候補が示されます。CLI の `--provider` か `open_binary` の `provider_id` で一度選ぶか、常用する設定として `REA_ANALYSIS_PROVIDER` を指定してください。詳しくは[英語版の解説](README.md#choosing-a-deep-analysis-provider)を参照してください。
+パスを調査対象に置き換えてください（Windows では `"D:/apps/example"` のようなパス）。この静的ワークフローではそのようなパスも扱えます。ネイティブ解析には専用のエンジン設定が必要です。

 ### rea コマンドをインストール

@@ -143,9 +124,9 @@ npx -y rea-agents@latest analyze-javascript-application /absolute/path/to/app --
 curl -fsSL https://raw.githubusercontent.com/morluto/rea/main/install.sh | bash
 ```

-Node.js と npm を先にインストールしておいてください。ターミナルで実行すると、インストーラーは `rea` を追加してセットアップを開始します。
+Node.js と npm を先にインストールしてください。ターミナルで実行すると、インストーラーは `rea` を追加してセットアップを開始します。

-npm でインストールしてから、セットアップを実行することもできます：
+npm でインストールし、セットアップを実行することもできます：

 ```bash
 npm install --global rea-agents
@@ -154,56 +135,38 @@ rea setup

 ### 要件

-静的な JavaScript 解析に必要なのは Node.js と npm だけです。ホストと外部ツールの前提条件は使うワークフローによって異なり、ネイティブ解析プロバイダーの対応プラットフォームは各ガイドで説明しています。
-
 - macOS 12 以降
- Ubuntu 24.04+、Fedora 41+、64 ビット Arch Linux、または CachyOS
- Node.js 22.x (>=22.19)、24.x (>=24.11)、または 26+
- npm（特定のバージョンは不要で、REA が npm をインストールすることもありません）
+- Ubuntu 24.04+、Fedora 41+、または 64 ビット Arch Linux
+- Node.js 22.x (>=22.19)、24.x (>=24.11)、または 26+ と npm

-ネイティブバイナリの詳細な解析には Hopper、Ghidra、IDA Pro のいずれかが必要です。Hopper は独自のライセンスを持つ別製品で、デモ版でもベンダーが定める制限の範囲で解析できます。Ghidra と IDA は、利用者が用意したものを使います。
+ネイティブバイナリ解析には Hopper または Ghidra が必要です。Hopper は別製品です。デモにはベンダー所定の制限がありますが、有料ライセンスは必須ではありません。

-Ghidra は Linux x64 と macOS x64/arm64 に対応しています。Ghidra 12.1.x と、そのインストールが宣言する 64 ビットの完全な JDK（`application.java.min` から `application.java.max` まで）を別途インストールし、REA で使うように設定してください。現行の 12.1 リリースは JDK 21 以降を必要とし、上限はありません。ブリッジは Ghidra 12.1.4 と JDK 21 で検証しています。macOS では、ホストのアーキテクチャに合うネイティブデコンパイラーも必要です。
+Ghidra は Linux x64 と macOS x64/arm64 に対応します。Ghidra 12.1.4 と完全な 64 ビット JDK 21 を別途インストールし、REA で使うように設定してください。macOS ではホストのアーキテクチャに合うネイティブデコンパイラーも必要です。

-```bash
-export GHIDRA_INSTALL_DIR=/absolute/path/to/ghidra_12.1.4_PUBLIC
-export JAVA_HOME=/absolute/path/to/jdk-21 # java と javac が PATH から解決できる場合は省略可
-rea doctor --provider ghidra --json
-rea setup
-```
+Setup はインストールを確認し、パスを保存できます。Ghidra、Java、Node.js、npm、Homebrew のインストールや更新は行いません。

-セットアップはこれらのインストールを確認し、承認後にパスを保存します。Ghidra、Java、Node.js、npm、Homebrew のインストールや更新は行いません。
-
-IDA Pro は、すでに動作している [mrexodia/ida-pro-mcp](https://github.com/mrexodia/ida-pro-mcp) の MCP 登録を再利用します。開いている GUI の対象を読み取り専用で解析するか（`attached`、既定）、データベースのスーパーバイザーで指定したバイナリをヘッドレスで開いて解析します（`headless`）。REA が attached の GUI データベースを保存したり閉じたりすることはありません。最初の実環境での検証は、Windows の GUI と Windows x64 のヘッドレス IDA 9.3 が対象です。設定方法と対応範囲は [IDA プロバイダーガイド](docs/ida-provider.md)を参照してください。
-
-```bash
-export REA_IDA_MCP_CONFIG=/absolute/path/to/ida-mcp.json
-rea function /absolute/path/to/program main --provider ida --json
-```
-
-リポジトリの main と npm 4.1.0 には、ローカル NTFS 上のネイティブ x86-64 PE アプリケーション（マネージドコードと DLL を除く）を対象とする、実験的な Windows x64 Ghidra P0 対応が含まれています。Job Object、プライベート DACL、パスの受け入れ検査の各制御も同梱されています。古い npm パッケージでこの機能を使えるか確認するには[リリース境界](docs/installation.md#released-package-and-main)を、前提条件と検証済みの範囲は [Windows Ghidra P0](docs/windows-ghidra-p0.md) を参照してください。
+リポジトリの main と npm 4.1.0 には、ローカル NTFS 上のネイティブ x86-64 PE アプリケーション（非マネージド、非 DLL 向け）を対象とする実験的な Windows x64 Ghidra P0 対応が含まれています。Job Object、プライベート DACL、パス許可の各制御が同梱されています。古い npm パッケージに期待する前に[リリース境界](docs/installation.md#released-package-and-main)を確認してください。前提条件と検証済みの範囲は [Windows Ghidra P0](docs/windows-ghidra-p0.md) を参照してください。

 ### トラブルシューティング

-`npx -y rea-agents@latest doctor` は、ホスト、依存関係、解析ツール、エージェント設定を変更せずに確認します。構造化された診断結果が必要な場合は `--json` を追加してください。
+`npx -y rea-agents@latest doctor` はホスト、依存関係、解析ツール、エージェント設定を変更せずに確認します。構造化された診断には `--json` を追加してください。

-Linux では実行可能な `/opt/hopper/bin/Hopper` を優先し、利用できない場合は `~/.local/share/rea/hopper/bin/Hopper` を自動的に確認します。それ以外の場所にインストールした場合は `HOPPER_LAUNCHER_PATH` を設定してください。ファイルがあるのに解析エンジンが見つからないと報告される場合は、実際の Hopper のパスに対して `ldd /absolute/path/to/Hopper | grep 'not found'` を実行し、不足しているライブラリを確認してください。詳しくは [Hopper ガイド](docs/installation.md#hopper)を参照してください。
+Linux の既定ランチャーは `/opt/hopper/bin/Hopper` です。別の場所には `HOPPER_LAUNCHER_PATH` を設定します。ファイルがあるのに解析エンジンが見つからない場合は、`ldd /opt/hopper/bin/Hopper | grep 'not found'` で不足ライブラリを確認してください。詳しくは [Hopper ガイド](docs/installation.md#hopper)を参照してください。

 ### 更新とアンインストール

 - `rea update` は現在の REA インストールを更新します。
- `rea uninstall` は REA が管理するエージェント登録とスキルだけを削除します。Hopper、Node.js、Evidence ファイル、キャプチャ、無関係なスキル、他の MCP サーバーは残ります。
- `rea uninstall --purge-data` は `~/.rea/cache` と `~/.rea/state` も削除します。それらを消したい場合にだけ使ってください。
+- `rea uninstall` は REA が管理するエージェント登録とワークフローファイルを削除します。Hopper は残ります。
+- `rea uninstall --purge-data` は REA のキャッシュと状態も削除します。それらを削除したい場合にだけ使ってください。

 ## 現在の対応状況

 リポジトリの現在の機能とプラットフォーム要件は[英語の対応状況ガイド](README.md#current-status)で説明しています。main は [npm リリース](docs/installation.md#released-package-and-main)より先行する場合があります。

- Ghidra は Linux x64、macOS x64/arm64、実験的な Windows x64 P0 境界で 25 種類の読み取り専用操作を提供します。Linux と macOS では、セッション内での関数名とエントリーコメントのアトミックな編集にも対応します。Windows P0 には変更の権限がなく、Ghidra には REA から操作できる GUI 機能はありません。
- IDA アダプターは、ドキュメントに記載された読み取り専用の関数・文字列操作を提供します。
- 静的な Android APK の検査は Linux と macOS に対応し、別途用意したヘッドレス JADX と完全な JDK が必要です。現在のメタデータブリッジは macOS arm64 で検証しています。詳しくは [Android 解析](docs/android-analysis.md)を参照してください。
- ブラウザー、Electron、プロセスの各リクエストは対象、操作、ライフサイクルを直接指定し、ホストで実際に許可されたアクセスの範囲で動作します。REA 側で別途権限を付与する必要はありません。セットアップによる設定の書き込みと Hopper のインストールには、引き続き具体的な計画の承認が必要です。
- `rea capabilities` と `rea providers` はバイナリセッションのプロバイダーと補助操作を説明するもので、ブラウザー、Android、アプリのすべてのワークフローの一覧ではありません。MCP の機能全体は、接続中の MCP ツール一覧と `binary_session` が示すツールの利用可否で確認してください。
+- Ghidra は Linux x64、macOS x64/arm64、実験的な Windows x64 P0 境界で 25 件の読み取り専用操作を提供します。Linux/macOS ではアトミックなセッション内関数注釈にも対応します。Windows P0 は読み取り専用であり、Ghidra に GUI 操作はありません。
+- 静的な Android 検査には持ち込みの JADX/Java が別途必要です。実プロバイダー検証は Linux を対象とします。詳しくは[Android 解析](docs/android-analysis.md)を参照してください。
+- ブラウザー、Electron、プロセスの各リクエストは対象・操作・ライフサイクルを直接指定し、ホストの実際のアクセスに依存します。REA 側の個別の許可付与は不要です。Setup による設定書き込みと Hopper のインストールは、引き続き正確な計画の承認が必要です。
+- `rea capabilities` はバイナリセッション操作の説明であり、すべてのアプリ／ランタイムツールの目録ではありません。接続済み MCP ツール一覧と関連ガイドを参照してください。

 ## ひとつのプロンプトで調査を完結

@@ -216,54 +179,49 @@ TypeScript と SQLite を使って私のプロジェクト向けに実装して
 | ---: | ------------------------------ | ---------------------------------------------------------------- |
 |    1 | バイナリを開いて識別           | `open_binary`, `binary_overview`                                 |
 |    2 | オフライン検索の手掛かりを探す | `search_strings`, `search_procedures`, `list_names`              |
-|    3 | 手掛かりを実行コードに結び付け | `find_xrefs_to_name`, `xrefs`, `procedure_callers`               |
-|    4 | 関連する制御フローを復元       | `get_call_graph`, `procedure_callees`, `procedure_info`          |
+|    3 | 手掛かりと実行コードを接続     | `find_xrefs_to_name`, `xrefs`, `procedure_callers`               |
+|    4 | 制御フローを復元               | `get_call_graph`, `procedure_callees`, `procedure_info`          |
 |    5 | 関連する処理を逆コンパイル     | `procedure_pseudo_code`, `procedure_assembly`, `batch_decompile` |
-|    6 | プロジェクトに機能を実装       | 技術スタック、プロダクト、要件に合わせたコード                   |
+|    6 | プロジェクトに機能を実装する   | 技術スタック、プロダクト、要件に合わせたコード                   |

-手順 1〜5 のアプリ解析は REA が担当します。手順 6 は、アプリについて得た知見をもとに、エージェントが通常の編集ツールとテストツールで行います。
+REA は手順 1〜5 のバイナリ解析を処理し、手順 6 はエージェントの通常の編集・テストツールが行います。

 ## エージェントにできること

- 気に入った機能を調査し、自分のプロダクトに合わせた形で実装する。
- ソースコードが手に入らない機能の仕組みを説明する。
- アプリの認証、保存、更新、ネットワーク処理の流れを復元する。
- 文書化されていない形式やインターフェースについて、文書化に必要な構造を復元する。
- 文字列やシンボルから、疑わしい動作を実装しているコードまでたどる。
- 復元した動作を、プロダクト機能、テスト、移行メモ、移植版、相互運用できる代替実装に変える。
- マングルされたシンボルをひとつずつ手作業で読み解かなくても、Swift と Objective-C のメタデータを解析する。
- Hopper に名前、コメント、ブックマークを残し、人とエージェントの解析を互いに活かす。
+- ソースコードがない機能の仕組みを説明する。
+- アプリの認証、保存、更新、ネットワークフローを復元する。
+- 非公開の形式やインターフェースを文書化できる構造を回収する。
+- 文字列やシンボルから疑わしい動作の実装コードまで追跡する。
+- 同じセッションで 2 バージョンを切り替え、実装経路を比較する。
+- 気になる機能を調査し、自分のプロダクトに合わせた形で実装する。
+- 復元した動作をプロダクト機能、テスト、移行ノート、移植、相互運用できる代替実装へ変換する。
+- Swift / Objective-C のメタデータを解析する。
+- Hopper に名前、コメント、ブックマークを残し、人間とエージェントの調査を共有する。

 ## 調査ツールカタログ

-| ツール分類           |  数 | 用途                                                                                                                                                                    |
-| -------------------- | --: | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| ネイティブ検査       |  41 | 関数、疑似コード、アセンブリ、文字列、シンボル、呼び出し、参照、注釈、バイト読み取り、ファイルオフセット                                                                |
-| 調査ワークフロー     |  14 | アプリ概要、関数ドシエ、ネイティブ API とディスパッチ、一括逆コンパイル、機能トレース、コールパス、コールグラフ、Swift と Objective-C の検出                            |
-| ネイティブバイナリ   |  10 | macOS の Mach-O メタデータ、署名、plist、アーキテクチャ、Swift シンボル、LLDB による呼び出し観測；Linux の ELF レイアウト、静的な保護機構の証拠と記録済みクラッシュ     |
-| 成果物グラフ         |   7 | ディレクトリとパッケージの目録、コンパイル済み Interface Builder ファイル、Apple アセットカタログ、Mach-O dylib のロード解決、抽出、オフライン EVM インターフェース推定 |
-| マネージド PE/CLI    |   7 | .NET の識別情報、メタデータ、CIL 命令、ネイティブ依存関係、再構築結果のインポート、ビルド比較                                                                           |
-| ファームウェア       |   2 | Linux ファームウェア領域の検査と明示的な展開                                                                                                                            |
-| Android APK          |   5 | パッケージと manifest の宣言、クラス検索、メンバー一覧、メソッドの逆コンパイル、静的な被参照                                                                            |
-| ブラウザー観察       |  12 | ページ構成、ネットワークメタデータ、スクリプト、ソースマップ、WebMCP の検出、スクリーンショット、キャプチャ比較                                                         |
-| Electron 解析        |   5 | レンダラーの観察、静的なアプリのマッピング、静的結果と実行時結果の照合                                                                                                  |
-| JavaScript 実行時    |   2 | Node/Electron Inspector の対象検出、スクリプトの位置、実行コンテキストのイベント                                                                                        |
-| アプリワークフロー   |  13 | 取得した Web スクリプトのエクスポート、Android/Apple の目録の投影、層をまたぐ機能トレース、ビルド比較、過去のソースとの対応付け、静的な戻り値形状の比較、再構築の検証   |
-| ワークスペースと観察 |  21 | セッション、Evidence バンドル、ナビゲーションの文脈、プロセス・成果物・関数の比較、未解決事項の記録                                                                     |
+| ツール分類           |  数 | 用途                                                                                                                                         |
+| -------------------- | --: | -------------------------------------------------------------------------------------------------------------------------------------------- |
+| ネイティブ検査       |  41 | 関数、疑似コード、アセンブリ、文字列、シンボル、呼び出し、参照、注釈、バイト読み取り、ファイルオフセット                                     |
+| 調査ワークフロー     |  14 | アプリ概要、関数ドシエ、ネイティブ API とディスパッチ、一括逆コンパイル、機能トレース、コールパス、コールグラフ、Swift と Objective-C の検出 |
+| macOS ネイティブ     |   7 | Hopper を起動せずに扱える Mach-O メタデータ、署名、plist、アーキテクチャ、Swift 名の復元                                                     |
+| 成果物グラフ         |   5 | ディレクトリとパッケージの目録、コンパイル済み Interface Builder ファイル、Apple アセットカタログ、抽出                                      |
+| マネージド PE/CLI    |   7 | .NET の識別、メタデータ、CIL 命令、ネイティブ依存関係、再構築インポート、ビルド比較                                                          |
+| ファームウェア       |   2 | Linux ファームウェア領域の検査と明示的な展開                                                                                                 |
+| Android APK          |   5 | パッケージと manifest の宣言、クラス検索、メンバー一覧、メソッド逆コンパイル、静的参照                                                       |
+| ブラウザー観察       |   9 | ページ構成、ネットワークメタデータ、スクリプト、ソースマップ、WebMCP 検出、スクリーンショット、キャプチャ比較                                |
+| Electron 解析        |   5 | レンダラー観察、静的アプリマッピング、静的／実行時結果の対応付け                                                                             |
+| JavaScript 実行時    |   2 | Node/Electron Inspector 対象の検出、スクリプト位置、実行コンテキストイベント                                                                 |
+| アプリワークフロー   |   8 | 取得した Web スクリプトのエクスポート、層をまたぐ機能トレース、ビルド比較、履歴ソース対応、静的戻り値形状の比較、再実装検証                  |
+| ワークスペースと観察 |  21 | セッション、証跡バンドル、ナビゲーション文脈、プロセス・成果物・関数比較、未解決事項の記録                                                   |

 ## ロードマップ

-[現在の対応状況](#現在の対応状況)は提供済みの機能です。今後の作業は次のとおりです。
-
- **現在：** ツール、プロバイダー、セットアップの選択肢、バージョンの変更に合わせてドキュメントを正確に保ち、Hopper と Ghidra で検証するネイティブバイナリのアーキテクチャと間接呼び出しの範囲を広げます。
- **次：** 機能トレースに静的抽出と実行時の観察を追加し、難読化された .NET アセンブリの比較を改善し、プロセス、プロトコル、ファイルシステム、再接続、バージョン比較の範囲を広げます。
- **その後：** ブラウザーと Electron のシナリオ操作を増やし、LLDB や Frida などによるネイティブアプリの実行時観察と、他の解析ツールや対象の評価を進めます。
-
-セットアップでは、すでにエージェント連携と Hopper のインストールを選べます。その他の解析ツールのインストールへの対応は今後の作業です。[インストールのロードマップ](docs/roadmap.md)と[解析ツールの評価](docs/provider-evaluation.md)を参照してください。
+次の作業はネイティブ対象の検証拡大、JavaScript と .NET のバージョン比較、実行時の観察と再実装の検証です。Setup はエージェント連携と Hopper のインストールを選択できます。他の解析ツールのインストールは今後の作業です。[インストールのロードマップ](docs/roadmap.md)と[解析ツールの評価](docs/provider-evaluation.md)を参照してください。

 ## 他のコーディングエージェントで使う

-セットアップは Claude Code、Claude Desktop、Codex、Cursor、Gemini CLI、Windsurf、Devin、OpenCode、Antigravity、GitHub Copilot CLI、Command Code、VS Code に対応しています。既存の REA 登録は最初から選択され、それ以外の検出済みエージェントは選択するまで対象になりません。ローカル MCP サーバーに対応するエージェントであれば、次の設定でも接続できます。
+Setup は Claude Code、Claude Desktop、Codex、Cursor、Gemini CLI、Windsurf、Devin、OpenCode、Antigravity、GitHub Copilot CLI、Command Code、VS Code に対応します。既存の REA 登録は初期選択され、それ以外の検出済みクライアントは選択が必要です。ローカル MCP サーバーに対応するエージェントは、次の設定でも接続できます。

 <!-- x-release-please-start-version -->

@@ -272,7 +230,7 @@ TypeScript と SQLite を使って私のプロジェクト向けに実装して
  "mcpServers": {
    "rea": {
      "command": "npx",
-      "args": ["-y", "rea-agents@6.0.0", "mcp"]
+      "args": ["-y", "rea-agents@4.1.0", "mcp"]
    }
  }
 }
@@ -280,33 +238,29 @@ TypeScript と SQLite を使って私のプロジェクト向けに実装して

 <!-- x-release-please-end -->

-常用する登録では、パッケージのバージョンを 1 つに固定してください。`rea setup` はその固定バージョンを維持し、同梱のスキルも同時に更新します。
-
 ## 仕組み

 ```mermaid
 flowchart LR
    Agent["コーディングエージェント"] --> REA["REA<br/>CLI + MCP"]
    Terminal["ターミナル"] --> REA
-    REA --> Hopper["Hopper プロバイダー"]
-    REA --> Ghidra["Ghidra プロバイダー<br/>インベントリ + 関数解析 + 注釈"]
-    REA --> Ida["IDA MCP プロバイダー<br/>attached GUI または headless データベース"]
+    REA --> Hopper["Hopper 解析操作"]
    Hopper --> App["あなたのアプリ"]
+    REA --> Ghidra["Ghidra 読み取り専用解析<br/>インベントリ + 関数解析"]
    Ghidra --> App
-    Ida --> App
 ```

-CLI と MCP サーバーは、同じアプリケーションワークフローと Evidence の契約を使います。ターミナルのコマンドは完了すると自身のブリッジセッションを解放し、エージェントのセッションは調査中の対象と Evidence を保持できます。REA のセッションを閉じても、利用中の Hopper アプリは終了しません。
+CLI と MCP サーバーは同じ解析処理を使います。ターミナルコマンドは完了後に自分のブリッジセッションを解放し、エージェントセッションは調査中の接続を維持できます。REA セッションを閉じても、ユーザーが利用中の Hopper は終了しません。

 ## CLI

-上のエージェントワークフローが、REA を使う最も簡単な方法です。ターミナルからアプリの概要を一度だけ調べる場合は、次を実行します。
+上のエージェントワークフローが、REA を使う最も簡単な方法です。ターミナルから一度だけアプリの概要を調べる場合は、次を実行します。

 ```bash
 npx -y rea-agents@latest analyze /Applications/Notes.app
 ```

-直接の逆コンパイルやその他のオプションは、`npx -y rea-agents@latest --help` で確認できます。
+直接デコンパイルする方法やその他のオプションは、`npx -y rea-agents@latest --help` で確認できます。

 グローバルな `rea` コマンドとしてもインストールできます。

@@ -316,49 +270,41 @@ rea --help
 rea mcp
 ```

-REA は Mac の `.app` フォルダーを直接開けます。エージェントがアプリを名前で見つけられない場合は、インストール場所を伝えてください。
+REA は Mac の `.app` フォルダーを直接開けます。エージェントがアプリを見つけられない場合は、インストール場所を伝えてください。

 ## Hopper アプリの動作

-REA は操作に必要になった時点で Hopper を起動します。Hopper のランチャーは内部でアプリをアクティブにするため、REA がバックグラウンドでの起動を要求しても、macOS では Hopper のウィンドウやダイアログが前面に出る場合があります。デモやライセンスの画面では操作が必要になることがあります。
+REA は必要なときに Hopper を起動します。Hopper のランチャーは内部でアプリをアクティブ化するため、ターゲットを開くと Hopper が前面に出る場合があります。REA はバックグラウンド起動を要求しますが、常に背面に留まる保証はありません。

-Hopper は解析リクエストを一度に 1 つずつ処理します。待機をキャンセルしても、Hopper 内ですでに実行中の処理は止まりません。処理中かどうかはセッションが報告します。セッションを閉じると REA のブリッジと一時ソケットディレクトリを削除しますが、利用中の Hopper アプリは終了しません。後片付けを確認できなかった場合、`close_binary` は `cleanup_incomplete` と対象のリソースを報告します。
+明示的な形式・アーキテクチャ引数により一般的な FAT / ARM 選択ダイアログを避けますが、別の Hopper / macOS ダイアログは人の操作を必要とする場合があります。セッションを閉じるとブリッジとソケットを削除しますが、ユーザーが利用中の Hopper は終了しません。

 ## セキュリティモデル

-解析はローカルで実行されます。REA は Hopper や Ghidra とは認証付きのプライベートなローカルソケットで、IDA とは設定済みのローカル MCP 登録を通じて通信します。Ghidra セッションは隔離された一時プロジェクトを使い、ユーザーの Ghidra プロジェクトを開いたり変更したりしません。
-
-これはサンドボックスではありません。解析ツールと起動した対象は現在のユーザー権限で動作し、同じ OS ユーザー権限で動く悪意のあるプロセスは防げません。Windows Ghidra P0 では、ネイティブの Job Object、保護されたプライベート DACL、ハンドルベースの受け入れ検査を自動的に使います。脆弱性は [SECURITY.md](SECURITY.md) に記載された非公開の手順で報告してください。
+各セッションはランダムな capability token と現在のユーザーだけが使える Unix ソケットを使用します。Ghidra セッションは隔離された一時プロジェクトも使用し、ユーザー所有の Ghidra プロジェクトを開いたり変更したりしません。これはサンドボックスではなく、同じ OS ユーザー権限で動作する悪意あるプロセスを防御しません。信頼できないバイナリの解析は、現在のユーザー権限で選択されたローカルプロバイダーに委譲されます。脆弱性は [SECURITY.md](SECURITY.md) の非公開手順で報告してください。

 ## FAQ

-<details><summary><strong>Hopper を先に起動しておく必要はありますか？</strong></summary>
+<details><summary><strong>Hopper を先に起動する必要がありますか？</strong></summary>

-いいえ。REA は必要になった時点で Hopper を起動します。すでに起動している Hopper でも使えますが、既存の GUI ドキュメントには接続せず、新しい解析ドキュメントを開きます。
+いいえ。REA が必要時に起動します。Hopper が起動済みでも使えますが、既存の GUI ドキュメントには接続せず、新しい解析ドキュメントを開きます。

 </details>

-<details><summary><strong>REA に Hopper は含まれていますか？</strong></summary>
+<details><summary><strong>REA に Hopper は含まれますか？</strong></summary>

-含まれていません。セットアップで Hopper をインストールできますが、Hopper は独自のライセンスを持つ別製品です。REA は、エージェントが Hopper を使えるようにする CLI、MCP サーバー、ワークフローを提供します。
+含まれません。Setup で Hopper をインストールできますが、Hopper は独自のライセンスを持つ別製品です。REA は CLI、MCP サーバー、エージェント向けワークフローを提供します。

 </details>

-<details><summary><strong>REA は Ghidra や Java をインストールしたり同梱したりしますか？</strong></summary>
+<details><summary><strong>バイナリはアップロードされますか？</strong></summary>

-いいえ。REA は既存の Ghidra のインストールに接続します。[要件](#要件)にある Ghidra と Java のパスを設定してから、セットアップを実行してください。
-
-</details>
-
-<details><summary><strong>アプリはアップロードされますか？</strong></summary>
-
-REA にホスト型の解析サービスはありません。現在のプロバイダーは、成果物の解析と動作のキャプチャをローカルで行います。エージェントやモデルの提供元には独自のデータポリシーがあるため、別途確認してください。
+REA にホスト型解析サービスはありません。ローカル Unix ソケット経由で Hopper を操作します。エージェントやモデル提供者のデータポリシーは別途確認してください。

 </details>

 <details><summary><strong>元のソースコードを復元できますか？</strong></summary>

-元のソースコードを確実に復元できるデコンパイラーはありません。REA はエージェントに疑似コード、アセンブリ、シンボル、文字列、メタデータ、それらの関係を提供し、観察された動作の説明や互換性のある再現に役立てられるようにします。
+保証できません。REA は疑似コード、アセンブリ、シンボル、文字列、メタデータ、関係を提供し、エージェントが観察した動作を説明または互換再現できるようにします。

 </details>

@@ -366,20 +312,6 @@ REA にホスト型の解析サービスはありません。現在のプロバ

 開発環境、アーキテクチャ、テスト、リリース手順は [CONTRIBUTING.md](CONTRIBUTING.md) を参照してください。

-## スター履歴
-
-🎉 **GitHub スターが 20,000 を突破しました。ありがとうございます！**
-
-REA を使い、問題を報告し、ビルドをテストし、修正を届けてくださる皆さんに感謝します。
-
-<a href="https://www.star-history.com/?repos=morluto%2Frea&amp;type=date">
-  <picture>
-    <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=morluto/rea&amp;type=date&amp;theme=dark&amp;legend=top-left" />
-    <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=morluto/rea&amp;type=date" />
-    <img alt="REA の GitHub スター履歴" src="https://api.star-history.com/chart?repos=morluto/rea&amp;type=date" />
-  </picture>
-</a>
-
 ## ライセンス

 [MIT](LICENSE)
@@ -17,8 +17,6 @@

 <a href="https://trendshift.io/repositories/82054?utm_source=repository-badge&amp;utm_medium=badge&amp;utm_campaign=badge-repository-82054" target="_blank" rel="noopener noreferrer"><img src="https://trendshift.io/api/badge/repositories/82054" alt="morluto%2Frea | Trendshift" width="250" height="55"/></a>

-**[웹사이트(영문)](https://morluto.github.io/rea/) · [가이드](https://morluto.github.io/rea/guides/) · [DX-Ball 사례](https://morluto.github.io/rea/showcase/dx-ball/)**
-
 [빠른 시작](#빠른-시작) · [현재 지원 범위](#현재-지원-범위) · [바이너리에서 동작까지](#바이너리에서-동작까지) · [조사 도구 카탈로그](#조사-도구-카탈로그) · [로드맵](#로드맵) · [작동 방식](#작동-방식)

 <table aria-label="REA community">
@@ -109,7 +107,7 @@ AI 코딩 어시스턴트에 스킬을 추가하면 더 풍부한 컨텍스트
 npx skills add morluto/rea --skill reverse-engineer-anything
 ```

-이 스킬은 REA의 조사 워크플로를 제공합니다. 위 Setup을 실행해 REA를 에이전트에 연결하고 분석 도구를 설정하세요. Setup은 기본적으로 버전에 맞는 스킬을 설치합니다. 이 명령은 저장소 버전의 스킬을 설치합니다.
+이 스킬은 REA의 조사 워크플로를 제공합니다. 위 setup을 실행해 REA를 에이전트에 연결하고 분석 도구를 설정하세요. Setup은 기본적으로 버전에 맞는 스킬을 설치합니다. 이 명령은 저장소 버전의 스킬을 설치합니다.

 압축을 해제한 JavaScript/Electron 앱 트리나 ASAR라면 MCP 설정이나 네이티브 엔진 없이 바로 분석할 수 있습니다.

@@ -117,7 +115,7 @@ npx skills add morluto/rea --skill reverse-engineer-anything
 npx -y rea-agents@latest analyze-javascript-application /absolute/path/to/app --json
 ```

-경로를 조사 대상의 경로로 바꾸세요(Windows에서는 `"D:/apps/example"` 같은 경로). 이 정적 워크플로에서는 이런 경로도 지원됩니다. 네이티브 분석에는 전용 엔진 설정이 필요합니다.
+경로를 조사 대상으로 바꾸세요(Windows에서는 `"D:/apps/example"` 같은 경로). 이 정적 워크플로에서는 이런 경로도 지원됩니다. 네이티브 분석에는 전용 엔진 설정이 필요합니다.

 ### rea 명령 설치하기

@@ -139,12 +137,12 @@ rea setup
 ### 요구 사항

 - macOS 12 이상
- Ubuntu 24.04+, Fedora 41+, 64비트 Arch Linux 또는 CachyOS
+- Ubuntu 24.04+, Fedora 41+ 또는 64비트 Arch Linux
 - Node.js 22.x (>=22.19), 24.x (>=24.11) 또는 26+와 npm

 네이티브 바이너리 분석에는 Hopper 또는 Ghidra가 필요합니다. Hopper는 별도 소프트웨어입니다. 데모에는 공급업체의 제한이 있지만 유료 라이선스가 필수는 아닙니다.

-Ghidra는 Linux x64와 macOS x64/arm64를 지원합니다. Ghidra 12.1.x와 그 설치본이 선언한 완전한 64비트 JDK(`application.java.min`부터 `application.java.max`까지)를 별도로 설치한 뒤 REA에서 사용하도록 설정하세요. 현재 12.1 릴리스는 JDK 21 이상을 요구하고 상한은 없습니다. 브리지는 Ghidra 12.1.4와 JDK 21에서 검증됩니다. macOS에서는 호스트 아키텍처에 맞는 네이티브 디컴파일러도 필요합니다.
+Ghidra는 Linux x64와 macOS x64/arm64를 지원합니다. Ghidra 12.1.4와 완전한 64비트 JDK 21을 별도로 설치한 뒤 REA가 사용하도록 설정하세요. macOS에서는 호스트 아키텍처에 맞는 네이티브 디컴파일러도 필요합니다.

 Setup은 설치를 확인하고 경로를 저장할 수 있습니다. Ghidra, Java, Node.js, npm, Homebrew를 설치하거나 업데이트하지 않습니다.

@@ -154,7 +152,7 @@ Setup은 설치를 확인하고 경로를 저장할 수 있습니다. Ghidra, Ja

 `npx -y rea-agents@latest doctor`는 호스트, 의존성, 분석 도구, 에이전트 설정을 변경 없이 확인합니다. 구조화된 진단에는 `--json`을 추가하세요.

-Linux에서는 실행 가능한 `/opt/hopper/bin/Hopper`를 우선 사용하고, 사용할 수 없으면 `~/.local/share/rea/hopper/bin/Hopper`를 자동으로 확인합니다. 다른 위치에는 `HOPPER_LAUNCHER_PATH`를 설정하세요. 파일이 있는데도 분석 엔진이 없다고 하면 실제 Hopper 경로에 대해 `ldd /absolute/path/to/Hopper | grep 'not found'`를 실행해 누락된 라이브러리를 확인하세요. 자세한 내용은 [Hopper 안내](docs/installation.md#hopper)를 참고하세요.
+Linux의 기본 Hopper 실행 파일은 `/opt/hopper/bin/Hopper`입니다. 다른 위치에는 `HOPPER_LAUNCHER_PATH`를 설정하세요. 파일이 있는데도 분석 엔진이 없다고 하면 `ldd /opt/hopper/bin/Hopper | grep 'not found'`로 누락된 라이브러리를 확인하세요. 자세한 내용은 [Hopper 안내](docs/installation.md#hopper)를 참고하세요.

 ### 업데이트와 제거

@@ -164,7 +162,7 @@ Linux에서는 실행 가능한 `/opt/hopper/bin/Hopper`를 우선 사용하고,

 ## 현재 지원 범위

-저장소의 현재 기능과 플랫폼 요구 사항은 [영문 지원 가이드](README.md#current-status)에 설명되어 있습니다. main은 [npm 릴리스](docs/installation.md#released-package-and-main)보다 앞선 내용이 포함될 수 있습니다.
+저장소의 현재 기능과 플랫폼 요구 사항은 [영문 지원 가이드](README.md#current-status)에 설명되어 있습니다. main은 [npm 릴리스](docs/installation.md#released-package-and-main)보다 앞설 수 있습니다.

 - Ghidra는 Linux x64, macOS x64/arm64, 실험적인 Windows x64 P0 경계에서 25개의 읽기 전용 작업을 제공합니다. Linux/macOS에서는 원자적 세션 함수 주석도 추가로 지원합니다. Windows P0는 읽기 전용이며 Ghidra에는 GUI 제어가 없습니다.
 - 정적 Android 검사는 별도로 준비한 JADX/Java가 필요합니다. 실제 제공자 검증은 Linux를 대상으로 합니다. [Android 분석](docs/android-analysis.md)을 참고하세요.
@@ -187,7 +185,7 @@ TypeScript와 SQLite를 사용해 제 프로젝트에 맞는 버전을 구현해
 |    5 | 관련 루틴 디컴파일      | `procedure_pseudo_code`, `procedure_assembly`, `batch_decompile` |
 |    6 | 프로젝트에 기능 구현    | 기술 스택, 제품, 요구 사항에 맞는 코드                           |

-REA는 1~5단계의 바이너리 분석을 처리합니다. 6단계는 에이전트가 일반 파일 편집 및 테스트 도구로 수행합니다.
+REA는 1–5단계의 바이너리 분석을 처리합니다. 6단계는 에이전트가 일반 파일 편집 및 테스트 도구로 수행합니다.

 ## 에이전트가 할 수 있는 일

@@ -203,20 +201,20 @@ REA는 1~5단계의 바이너리 분석을 처리합니다. 6단계는 에이전

 ## 조사 도구 카탈로그

-| 도구 분류         |  수 | 용도                                                                                                                                     |
-| ----------------- | --: | ---------------------------------------------------------------------------------------------------------------------------------------- |
-| 네이티브 검사     |  41 | 함수, 의사 코드, 어셈블리, 문자열, 심볼, 호출, 참조, 주석, 바이트 읽기, 파일 오프셋                                                      |
-| 조사 워크플로     |  14 | 앱 개요, 함수 기록서, 네이티브 API와 디스패치, 일괄 디컴파일, 기능 추적, 호출 경로, 호출 그래프, Swift와 Objective-C 탐색                |
-| 네이티브 바이너리 |  10 | macOS의 Mach-O 메타데이터, 서명, plist, 아키텍처, Swift 심볼과 LLDB 호출 관찰; Linux의 ELF 레이아웃, 정적 보호 증거와 기록된 크래시      |
-| 아티팩트 그래프   |   7 | 디렉터리와 패키지 목록, 컴파일된 Interface Builder 파일, Apple 애셋 카탈로그, Mach-O dylib 로드 해석, 추출, 오프라인 EVM 인터페이스 추론 |
-| 관리 PE/CLI       |   7 | .NET 식별, 메타데이터, CIL 명령어, 네이티브 종속성, 재구성 가져오기, 빌드 비교                                                           |
-| 펌웨어            |   2 | Linux 펌웨어 영역 검사 및 명시적 추출                                                                                                    |
-| Android APK       |   5 | 패키지와 manifest 선언, 클래스 검색, 멤버 목록, 메서드 디컴파일, 정적 참조                                                               |
-| 브라우저 관찰     |  12 | 페이지 구조, 네트워크 메타데이터, 스크립트, 소스 맵, WebMCP 탐색, 스크린샷, 캡처 비교                                                    |
-| Electron 분석     |   5 | 렌더러 관찰, 정적 앱 매핑, 정적·런타임 결과 연결                                                                                         |
-| JavaScript 런타임 |   2 | Node/Electron Inspector 대상 탐색, 스크립트 위치, 실행 컨텍스트 이벤트                                                                   |
-| 앱 워크플로       |  13 | 캡처한 웹 스크립트 내보내기, 계층 간 기능 추적, 빌드 비교, 히스토리 소스 매핑, 정적 반환 구조 비교, 재구현 검증                          |
-| 작업 공간과 관찰  |  21 | 세션, 근거 번들, 탐색 컨텍스트, 프로세스·아티팩트·함수 비교, 미해결 항목 기록                                                            |
+| 도구 분류         |  수 | 용도                                                                                                                      |
+| ----------------- | --: | ------------------------------------------------------------------------------------------------------------------------- |
+| 네이티브 검사     |  41 | 함수, 의사 코드, 어셈블리, 문자열, 심볼, 호출, 참조, 주석, 바이트 읽기, 파일 오프셋                                       |
+| 조사 워크플로     |  14 | 앱 개요, 함수 기록서, 네이티브 API와 디스패치, 일괄 디컴파일, 기능 추적, 호출 경로, 호출 그래프, Swift와 Objective-C 탐색 |
+| macOS 네이티브    |   7 | Hopper 실행 없이 처리하는 Mach-O 메타데이터, 서명, plist, 아키텍처, Swift 이름 복원                                       |
+| 아티팩트 그래프   |   5 | 디렉터리와 패키지 목록, 컴파일된 Interface Builder 파일, Apple 애셋 카탈로그, 추출                                        |
+| 관리 PE/CLI       |   7 | .NET 식별, 메타데이터, CIL 명령어, 네이티브 종속성, 재구성 가져오기, 빌드 비교                                            |
+| 펌웨어            |   2 | Linux 펌웨어 영역 검사 및 명시적 추출                                                                                     |
+| Android APK       |   5 | 패키지와 manifest 선언, 클래스 검색, 멤버 목록, 메서드 디컴파일, 정적 참조                                                |
+| 브라우저 관찰     |   9 | 페이지 구조, 네트워크 메타데이터, 스크립트, 소스 맵, WebMCP 탐색, 스크린샷, 캡처 비교                                     |
+| Electron 분석     |   5 | 렌더러 관찰, 정적 앱 매핑, 정적·런타임 결과 연결                                                                          |
+| JavaScript 런타임 |   2 | Node/Electron Inspector 대상 탐색, 스크립트 위치, 실행 컨텍스트 이벤트                                                    |
+| 앱 워크플로       |   8 | 캡처한 웹 스크립트 내보내기, 계층 간 기능 추적, 빌드 비교, 히스토리 소스 매핑, 정적 반환 구조 비교, 재구현 검증           |
+| 작업 공간과 관찰  |  21 | 세션, 근거 번들, 탐색 컨텍스트, 프로세스·아티팩트·함수 비교, 미해결 항목 기록                                             |

 ## 로드맵

@@ -233,7 +231,7 @@ Setup은 Claude Code, Claude Desktop, Codex, Cursor, Gemini CLI, Windsurf, Devin
  "mcpServers": {
    "rea": {
      "command": "npx",
-      "args": ["-y", "rea-agents@6.0.0", "mcp"]
+      "args": ["-y", "rea-agents@4.1.0", "mcp"]
    }
  }
 }
@@ -273,7 +271,7 @@ rea --help
 rea mcp
 ```

-REA는 macOS의 `.app` 폴더를 직접 열 수 있습니다. 에이전트가 앱을 찾지 못하면 설치 위치를 알려 주세요.
+REA는 Mac의 `.app` 폴더를 직접 열 수 있습니다. 에이전트가 앱을 찾지 못하면 설치 위치를 알려 주세요.

 ## Hopper 앱 동작

@@ -315,20 +313,6 @@ REA에는 호스팅 분석 서비스가 없습니다. 로컬 Unix 소켓을 통

 개발 환경, 아키텍처, 테스트, 릴리스 지침은 [CONTRIBUTING.md](CONTRIBUTING.md)를 참고하세요.

-## 스타 기록
-
-🎉 **GitHub 스타 20,000개, 감사합니다!**
-
-REA를 사용하고, 버그를 제보하고, 빌드를 테스트하고, 수정에 기여해 주신 모든 분께 감사드립니다.
-
-<a href="https://www.star-history.com/?repos=morluto%2Frea&amp;type=date">
-  <picture>
-    <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=morluto/rea&amp;type=date&amp;theme=dark&amp;legend=top-left" />
-    <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=morluto/rea&amp;type=date" />
-    <img alt="REA GitHub 스타 기록" src="https://api.star-history.com/chart?repos=morluto/rea&amp;type=date" />
-  </picture>
-</a>
-
 ## 라이선스

 [MIT](LICENSE)
@@ -17,8 +17,6 @@

 <a href="https://trendshift.io/repositories/82054?utm_source=repository-badge&amp;utm_medium=badge&amp;utm_campaign=badge-repository-82054" target="_blank" rel="noopener noreferrer"><img src="https://trendshift.io/api/badge/repositories/82054" alt="morluto%2Frea | Trendshift" width="250" height="55"/></a>

-**[网站（英文）](https://morluto.github.io/rea/) · [使用指南](https://morluto.github.io/rea/guides/) · [DX-Ball 案例](https://morluto.github.io/rea/showcase/dx-ball/)**
-
 [快速开始](#快速开始) · [当前状态](#当前状态) · [从二进制到行为](#从二进制到行为) · [调查工具目录](#调查工具目录) · [路线图](#路线图) · [工作原理](#工作原理)

 <table aria-label="REA community">
@@ -138,12 +136,12 @@ rea setup
 ### 系统要求

 - macOS 12 或更高版本
- Ubuntu 24.04+、Fedora 41+、64 位 Arch Linux 或 CachyOS
+- Ubuntu 24.04+、Fedora 41+ 或 64 位 Arch Linux
 - Node.js 22.x (>=22.19)、24.x (>=24.11) 或 26+，以及 npm

 原生二进制分析需要 Hopper 或 Ghidra。Hopper 是独立软件；演示模式有厂商规定的限制，不要求购买许可证。

-Ghidra 支持 Linux x64 和 macOS x64/arm64。单独安装 Ghidra 12.1.x，以及该安装在 `application.java.min` 到 `application.java.max` 中声明的完整 64 位 JDK，然后配置 REA 使用它们。当前 12.1 发行版要求 JDK 21 或更新版本，并且不设置上限。桥接在 Ghidra 12.1.4 和 JDK 21 上完成验证。macOS 还需要对应架构的原生反编译器。
+Ghidra 支持 Linux x64 和 macOS x64/arm64。单独安装 Ghidra 12.1.4 和完整的 64 位 JDK 21，然后配置 REA 使用它们。macOS 还需要对应架构的原生反编译器。

 Setup 可以验证安装并保存路径，不会安装或升级 Ghidra、Java、Node.js、npm 或 Homebrew。

@@ -153,7 +151,7 @@ Setup 可以验证安装并保存路径，不会安装或升级 Ghidra、Java、

 运行 `npx -y rea-agents@latest doctor`，检查主机、依赖、分析工具和智能体配置。该命令不会修改文件。添加 `--json` 可获取结构化诊断。

-Linux 上 REA 会优先使用可执行的 `/opt/hopper/bin/Hopper`；如果不可用，则自动检查 `~/.local/share/rea/hopper/bin/Hopper`。其他路径可通过 `HOPPER_LAUNCHER_PATH` 指定。如果文件存在但仍报告缺少分析引擎，请对实际 Hopper 路径运行 `ldd /absolute/path/to/Hopper | grep 'not found'` 检查缺少的系统库。安装详情见 [Hopper 指南](docs/installation.md#hopper)。
+Linux 上的默认 Hopper 启动器为 `/opt/hopper/bin/Hopper`。其他路径可通过 `HOPPER_LAUNCHER_PATH` 指定。如果文件存在但仍报告缺少分析引擎，运行 `ldd /opt/hopper/bin/Hopper | grep 'not found'` 检查缺少的系统库。安装详情见 [Hopper 指南](docs/installation.md#hopper)。

 ### 更新与卸载

@@ -202,20 +200,20 @@ REA 负责第 1–5 步中的二进制分析。第 6 步由智能体使用其常

 ## 调查工具目录

-| 工具类别          | 数量 | 用途                                                                                                                 |
-| ----------------- | ---: | -------------------------------------------------------------------------------------------------------------------- |
-| 原生检查          |   41 | 函数、伪代码、汇编、字符串、符号、调用、引用、注释、字节读取与文件偏移                                               |
-| 调查工作流        |   14 | 应用概览、函数档案、原生 API 与分发、批量反编译、功能追踪、调用路径与调用图、Swift 与 Objective-C 发现               |
-| 原生二进制工具    |   10 | macOS 的 Mach-O 元数据、签名、plist、架构、Swift 符号与 LLDB 调用观察；Linux 的 ELF 布局、静态保护证据与历史崩溃记录 |
-| 产物图            |    7 | 目录与软件包清单、编译后的 Interface Builder 文件、Apple 资源目录、Mach-O dylib 加载解析、提取与离线 EVM 接口推断    |
-| 托管 PE/CLI       |    7 | .NET 程序集身份、元数据、CIL 指令、原生依赖声明、重建导入与构建比较                                                  |
-| 固件              |    2 | Linux 固件区域检查与显式提取                                                                                         |
-| Android APK       |    5 | 包与 manifest 声明、类搜索、成员清单、方法反编译与静态引用                                                           |
-| 浏览器观察        |   12 | 页面结构、网络元数据、脚本、来源映射、WebMCP 发现、截图与捕获比较                                                    |
-| Electron 分析     |    5 | 渲染进程观察、静态应用映射、静态/运行时结果关联                                                                      |
-| JavaScript 运行时 |    2 | Node/Electron Inspector 目标发现、脚本位置与执行上下文事件                                                           |
-| 应用工作流        |   13 | 捕获的网站脚本导出、跨层功能追踪、构建比较、历史源码映射、静态返回结构比较与重建验证                                 |
-| 工作区与观察      |   21 | 会话、证据包、导航上下文、进程/产物/函数比较与待解决问题跟踪                                                         |
+| 工具类别          | 数量 | 用途                                                                                                   |
+| ----------------- | ---: | ------------------------------------------------------------------------------------------------------ |
+| 原生检查          |   41 | 函数、伪代码、汇编、字符串、符号、调用、引用、注释、字节读取与文件偏移                                 |
+| 调查工作流        |   14 | 应用概览、函数档案、原生 API 与分发、批量反编译、功能追踪、调用路径与调用图、Swift 与 Objective-C 发现 |
+| macOS 原生工具    |    7 | Mach-O 元数据、代码签名、plist、架构与 Swift 符号还原，无需启动 Hopper                                 |
+| 产物图            |    5 | 目录与软件包清单、编译后的 Interface Builder 文件、Apple 资源目录与提取                                |
+| 托管 PE/CLI       |    7 | .NET 程序集身份、元数据、CIL 指令、原生依赖声明、重建导入与构建比较                                    |
+| 固件              |    2 | Linux 固件区域检查与显式提取                                                                           |
+| Android APK       |    5 | 包与 manifest 声明、类搜索、成员清单、方法反编译与静态引用                                             |
+| 浏览器观察        |    9 | 页面结构、网络元数据、脚本、来源映射、WebMCP 发现、截图与捕获比较                                      |
+| Electron 分析     |    5 | 渲染进程观察、静态应用映射、静态/运行时结果关联                                                        |
+| JavaScript 运行时 |    2 | Node/Electron Inspector 目标发现、脚本位置与执行上下文事件                                             |
+| 应用工作流        |    8 | 捕获的网站脚本导出、跨层功能追踪、构建比较、历史源码映射、静态返回结构比较与重建验证                   |
+| 工作区与观察      |   21 | 会话、证据包、导航上下文、进程/产物/函数比较与待解决问题跟踪                                           |

 ## 路线图

@@ -232,7 +230,7 @@ Setup 支持 Claude Code、Claude Desktop、Codex、Cursor、Gemini CLI、Windsu
  "mcpServers": {
    "rea": {
      "command": "npx",
-      "args": ["-y", "rea-agents@6.0.0", "mcp"]
+      "args": ["-y", "rea-agents@4.1.0", "mcp"]
    }
  }
 }
@@ -316,20 +314,6 @@ REA 不提供托管分析服务，而是通过本地 Unix 套接字把操作交

 开发环境、架构、测试和发布说明请参阅 [CONTRIBUTING.md](CONTRIBUTING.md)。

-## Star 历史
-
-🎉 **GitHub Star 突破 20,000，感谢大家！**
-
-感谢每一位使用 REA、反馈问题、测试构建和贡献修复的朋友。
-
-<a href="https://www.star-history.com/?repos=morluto%2Frea&amp;type=date">
-  <picture>
-    <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=morluto/rea&amp;type=date&amp;theme=dark&amp;legend=top-left" />
-    <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=morluto/rea&amp;type=date" />
-    <img alt="REA GitHub Star 历史" src="https://api.star-history.com/chart?repos=morluto/rea&amp;type=date" />
-  </picture>
-</a>
-
 ## 许可证

 [MIT](LICENSE)
@@ -1,247 +0,0 @@
-import com.atxx.jhmcp.*;
-import com.google.gson.*;
-import io.modelcontextprotocol.kotlin.sdk.server.*;
-import io.modelcontextprotocol.kotlin.sdk.types.*;
-import jadx.api.*;
-import jadx.core.dex.nodes.*;
-import java.io.PrintStream;
-import java.util.*;
-import java.util.concurrent.CountDownLatch;
-import java.util.stream.Collectors;
-import kotlin.Unit;
-import kotlin.coroutines.EmptyCoroutineContext;
-import kotlinx.coroutines.BuildersKt;
-import kotlinx.io.CoreKt;
-import kotlinx.io.JvmCoreKt;
-import kotlinx.serialization.json.JsonObject;
-
-/** REA-owned metadata boundary for the unmodified jadx-headless-mcp 0.7.1 JAR. */
-class ReaJadxBridge {
-  private static final Gson JSON = new Gson();
-  private final SessionHolder holder;
-  private JadxSession indexedSession;
-  private Map<String, List<ClassSnapshot>> classes = Map.of();
-
-  private record MethodSnapshot(String name, String shortId, Map<String, Object> summary) {}
-  private record ClassSnapshot(JavaClass node, List<MethodSnapshot> methods, Map<String, Object> summary) {}
-
-  private ReaJadxBridge(SessionHolder holder) { this.holder = holder; }
-
-  private static CallToolResult text(String value, boolean failed) {
-    return new CallToolResult(List.of(new TextContent(value, null, null)), failed, null, null);
-  }
-
-  private static CallToolResult json(Object value) { return text(JSON.toJson(value), false); }
-
-  private static String string(JsonObject args, String name) {
-    JsonElement value = JsonParser.parseString(args.toString()).getAsJsonObject().get(name);
-    if (value == null || !value.isJsonPrimitive() || !value.getAsJsonPrimitive().isString())
-      throw new IllegalArgumentException(name + " must be a string");
-    return value.getAsString();
-  }
-
-  private static int integer(JsonObject args, String name, int fallback) {
-    JsonElement value = JsonParser.parseString(args.toString()).getAsJsonObject().get(name);
-    if (value == null) return fallback;
-    if (!value.isJsonPrimitive() || !value.getAsJsonPrimitive().isNumber())
-      throw new IllegalArgumentException(name + " must be a nonnegative integer");
-    try {
-      int result = value.getAsBigDecimal().intValueExact();
-      if (result < 0) throw new ArithmeticException();
-      return result;
-    } catch (ArithmeticException error) {
-      throw new IllegalArgumentException(name + " must be a nonnegative integer", error);
-    }
-  }
-
-  private JadxSession session() {
-    JadxSession current = holder.current();
-    if (current == null) throw new IllegalArgumentException("No APK loaded");
-    return current;
-  }
-
-  private ClassSnapshot selected(JsonObject args) {
-    JadxSession current = session();
-    if (indexedSession != current) {
-      Map<String, List<ClassSnapshot>> index = new LinkedHashMap<>();
-      if (!current.getClasses().isEmpty()) {
-        JadxDecompiler decompiler = current.getClasses().get(0).getClassNode().root().getDecompiler();
-        // JavaClass.getMethods/getFields/getInnerClasses all load code. Raw nodes do not.
-        // Snapshot every identity before code generation can rewrite aliases or members.
-        for (JavaClass cls : decompiler.getClassesWithInners()) {
-          ClassNode node = cls.getClassNode();
-          List<MethodNode> ordered = new ArrayList<>(node.getMethods());
-          ordered.sort(Comparator.comparing(MethodNode::getAlias));
-          List<MethodSnapshot> methods = ordered.stream().map(method -> {
-            String name = method.getAlias();
-            String signature = name + "(" + method.getArgTypes().stream()
-                .map(Object::toString).collect(Collectors.joining(", "))
-                + "): " + method.getReturnType().toString();
-            return new MethodSnapshot(name, method.getMethodInfo().getShortId(), Map.of(
-                "name", name, "signature", signature,
-                "is_constructor", method.isConstructor(), "def_pos", 0));
-          }).toList();
-          List<Map<String, Object>> fields = node.getFields().stream()
-              .sorted(Comparator.comparing(FieldNode::getAlias))
-              .map(field -> Map.<String, Object>of("name", field.getAlias(),
-                  "type", field.getType().toString(), "def_pos", 0)).toList();
-          List<String> inner = node.getInnerClasses().stream().map(ClassNode::getFullName).toList();
-          Map<String, Object> summary = Map.of(
-              "full_name", cls.getFullName(), "name", cls.getName(),
-              "method_count", methods.size(), "field_count", fields.size(),
-              "inner_class_count", inner.size(), "inner_classes", inner,
-              "methods", methods.stream().map(MethodSnapshot::summary).toList(), "fields", fields);
-          index.computeIfAbsent(cls.getFullName(), ignored -> new ArrayList<>())
-              .add(new ClassSnapshot(cls, methods, summary));
-        }
-      }
-      classes = Collections.unmodifiableMap(index);
-      indexedSession = current;
-    }
-    String name = string(args, "class_name");
-    List<ClassSnapshot> candidates = classes.get(name);
-    if (candidates == null) throw new IllegalArgumentException("Exact class not found: " + name);
-    if (candidates.size() != 1) throw new IllegalArgumentException("Ambiguous metadata class identity: " + name
-        + "; raw identities: " + candidates.stream().map(candidate -> candidate.node().getRawName()).toList());
-    return candidates.get(0);
-  }
-
-  private List<MethodSnapshot> methods(ClassSnapshot cls, JsonObject args) {
-    String name = string(args, "method_name");
-    List<MethodSnapshot> result = cls.methods().stream().filter(method -> method.name().equals(name)).toList();
-    if (result.isEmpty()) throw new IllegalArgumentException("Method not found: " + name);
-    return result;
-  }
-
-  private JavaMethod method(ClassSnapshot cls, MethodSnapshot selected) {
-    JavaMethod result = cls.node().searchMethodByShortId(selected.shortId());
-    if (result == null) throw new IllegalArgumentException("Method identity no longer available: " + selected.shortId());
-    return result;
-  }
-
-  private CallToolResult handle(String name, JsonObject args) {
-    if (name.equals("rea_jvm_status")) return json(Map.of(
-        "engine_reported_version", BuildInfo.VERSION,
-        "max_heap_bytes", Runtime.getRuntime().maxMemory(),
-        "available_processors", Runtime.getRuntime().availableProcessors(),
-        "java_version", System.getProperty("java.version"),
-        "metadata_scope", "parsed_members"));
-    JadxSession current = session();
-    if (name.equals("list_classes")) {
-      List<String> names = current.getClassFqns();
-      int offset = integer(args, "offset", 0);
-      int limit = integer(args, "limit", 200);
-      int start = Math.min(offset, names.size());
-      int end = (int) Math.min((long) start + limit, names.size());
-      return json(Map.of("total", names.size(), "offset", offset, "limit", limit,
-          "items", names.subList(start, end)));
-    }
-    ClassSnapshot cls = selected(args);
-    if (name.equals("get_class_summary")) return json(cls.summary());
-    if (name.equals("get_method_body")) {
-      List<MethodSnapshot> overloads = methods(cls, args);
-      int index = integer(args, "overload_index", 0);
-      if (index >= overloads.size()) throw new IllegalArgumentException("overload_index out of range: " + index);
-      JavaMethod method = method(cls, overloads.get(index));
-      JadxSession.SmartCode code = current.getMethodBodySmart(method, current.getMaxSourceBytes(), true);
-      return json(Map.of("class_name", cls.summary().get("full_name"),
-          "method_name", overloads.get(index).name(), "full_name", method.getFullName(),
-          "overload_index", index, "overload_count", overloads.size(),
-          "mode", code.getKind(), "fell_back", code.getFellBack(),
-          "markers", code.getMarkers(), "body", code.getText()));
-    }
-    List<JavaNode> uses;
-    String target = string(args, "class_name");
-    if (name.equals("get_xrefs_to_class")) uses = cls.node().getUseIn();
-    else {
-      List<MethodSnapshot> overloads = methods(cls, args);
-      if (overloads.size() != 1) throw new IllegalArgumentException("Method references require a unique overload");
-      target += "." + overloads.get(0).name();
-      uses = method(cls, overloads.get(0)).getUseIn();
-    }
-    // REA consumes all references without materializing source line information.
-    List<Map<String, Object>> items = uses.stream().map(node -> current.describeUsage(node, false)).toList();
-    return json(Map.of("target", target, "total", uses.size(), "count", items.size(),
-        "resolve_line", false, "items", items));
-  }
-
-  public static void main(String[] args) throws Exception {
-    PrintStream protocolOut = System.out;
-    System.setOut(System.err);
-    SessionHolder holder = new SessionHolder(new SessionConfig(
-        1048576, 0, 90000L, 1, List.of(), List.of(), 64, ResourceMode.FULL));
-    ServerCapabilities capabilities = new ServerCapabilities(
-        new ServerCapabilities.Tools(null), null, null, null, null, null, null, Map.of());
-    Server server = new Server(new Implementation("rea-jadx-bridge", "1", null, null, null),
-        new ServerOptions(capabilities), "", ignored -> Unit.INSTANCE);
-    SessionToolsKt.registerSessionTools(server, holder);
-    ManifestToolsKt.registerManifestTools(server, holder);
-    ClassToolsKt.registerClassTools(server, holder);
-    MethodToolsKt.registerMethodTools(server, holder);
-    XrefToolsKt.registerXrefTools(server, holder);
-    ReaJadxBridge bridge = new ReaJadxBridge(holder);
-    Set<String> consumed = Set.of("load_apk", "get_app_info", "get_android_manifest",
-        "list_classes", "get_class_summary", "get_method_body",
-        "get_xrefs_to_class", "get_xrefs_to_method");
-    for (String name : new ArrayList<>(server.getTools().keySet()))
-      if (!consumed.contains(name)) server.removeTool(name);
-    Tool diagnostics = new Tool("rea_jvm_status",
-        new ToolSchema(null, new JsonObject(Map.of()), List.of(), null),
-        "Observed worker JVM and metadata scope", null, null, null, null, null, null);
-    server.addTool(diagnostics, (connection, request, continuation) -> bridge.handle("rea_jvm_status", request.getArguments()));
-    for (String name : List.of("list_classes", "get_class_summary",
-        "get_method_body", "get_xrefs_to_class", "get_xrefs_to_method")) {
-      Tool tool = server.getTools().get(name).getTool();
-      server.removeTool(name);
-      List<String> fields = switch (name) {
-        case "list_classes" -> List.of("offset", "limit");
-        case "get_method_body" -> List.of("class_name", "method_name", "overload_index");
-        case "get_xrefs_to_method" -> List.of("class_name", "method_name");
-        default -> List.of("class_name");
-      };
-      Map<String, kotlinx.serialization.json.JsonElement> properties = new LinkedHashMap<>();
-      for (String field : fields) properties.put(field, tool.getInputSchema().getProperties().get(field));
-      String description = switch (name) {
-        case "list_classes" -> "Indexed pages of all top-level class names, with offset and limit.";
-        case "get_class_summary" -> "Parsed member metadata for one exact class name; no source generation.";
-        case "get_method_body" -> "Source for an exact class and stable same-name overload index, with smali fallback.";
-        default -> "Complete static references to an exact class or unique method; source lines are unresolved.";
-      };
-      Tool narrowed = new Tool(name, new ToolSchema(null, new JsonObject(properties),
-          tool.getInputSchema().getRequired(), null), description, null, null, null, null, null, null);
-      server.addTool(narrowed, (connection, request, continuation) -> {
-        try { return bridge.handle(name, request.getArguments()); }
-        catch (IllegalArgumentException error) { return text(error.getMessage(), true); }
-      });
-    }
-    CountDownLatch done = new CountDownLatch(1);
-    server.onClose(() -> { done.countDown(); return Unit.INSTANCE; });
-    StdioServerTransport transport = new StdioServerTransport(
-        CoreKt.buffered(JvmCoreKt.asSource(System.in)),
-        CoreKt.buffered(JvmCoreKt.asSink(protocolOut)));
-    transport.onClose(() -> { done.countDown(); return Unit.INSTANCE; });
-    ServerSession connection = null;
-    try {
-      connection = BuildersKt.runBlocking(EmptyCoroutineContext.INSTANCE,
-          (scope, continuation) -> server.createSession(transport, continuation));
-      done.await();
-    } finally {
-      try {
-        if (connection != null) {
-          ServerSession connected = connection;
-          // Unsubscribe the connection before the SDK joins its notification service.
-          BuildersKt.runBlocking(EmptyCoroutineContext.INSTANCE,
-              (scope, continuation) -> connected.close(continuation));
-        }
-      } finally {
-        try {
-          BuildersKt.runBlocking(EmptyCoroutineContext.INSTANCE,
-              (scope, continuation) -> server.close(continuation));
-        } finally {
-          BuildersKt.runBlocking(EmptyCoroutineContext.INSTANCE,
-              (scope, continuation) -> holder.unload(continuation));
-        }
-      }
-    }
-  }
-}
@@ -1,208 +0,0 @@
-"""REA offline adapter using mitmproxy's unchanged native tnetstring decoder.
-
-No FlowReader migrations, HAR conversion, proxy listener, or target requests.
-The containing mitmdump process and its configuration directory are REA-owned.
-"""
-
-import base64
-import hashlib
-import json
-import math
-import re
-import resource
-from pathlib import Path
-
-from mitmproxy import ctx, version
-from mitmproxy.io import tnetstring
-
-PROFILE = "12.2.3"
-OUTPUT_BYTES = 96 * 1024 * 1024
-CREDENTIALS = {b"authorization", b"proxy-authorization", b"cookie", b"set-cookie"}
-
-
-class CaptureFailure(Exception):
-    def __init__(self, reason, message, pointer=""):
-        self.reason, self.pointer = reason, pointer
-        super().__init__(message)
-
-
-def pointer(parent, key):
-    return parent + "/" + str(key).replace("~", "~0").replace("/", "~1")
-
-
-class BoundedReader:
-    """Refuse malicious declared lengths before the upstream parser allocates."""
-    def __init__(self, handle, size):
-        self.handle, self.size = handle, size
-
-    def read(self, count):
-        if count < 0 or count > self.size - self.handle.tell():
-            raise CaptureFailure("format", "Native record declares bytes beyond the retained capture.")
-        return self.handle.read(count)
-
-
-def project_record(state, secrets):
-    binaries, numbers, redactions = [], [], []
-    byte_secrets = []
-    for secret in secrets:
-        try:
-            byte_secrets.append(secret.encode("utf-8", errors="strict"))
-        except UnicodeEncodeError:
-            # Non-scalar JSON strings have no UTF-8 byte representation.
-            # Keep them in secrets for the ordinary string projection.
-            pass
-
-    def redact(text, path, original):
-        if any(secret in text or secret in original for secret in secrets):
-            redactions.append({"pointer": path, "reason": "explicit-sensitive-value"})
-            return None
-        return text
-
-    def transport_value(value, path, transport_url):
-        if not (transport_url or re.fullmatch(r"/(?:backup/)*request/(?:path|authority)", path)):
-            return value, False
-        binary = isinstance(value, bytes)
-        pattern = rb"^([\x00-\x20]*(?:[a-z][a-z0-9+.-]*:)?//)[^/?#]*@" if binary else r"^([\x00-\x20]*(?:[a-z][a-z0-9+.-]*:)?//)[^/?#]*@"
-        replacement = rb"\1" if binary else r"\1"
-        separator = b"@" if binary else "@"
-        safe_url = re.sub(pattern, replacement, value, flags=re.I)
-        if path.endswith("/authority") and separator in safe_url:
-            safe_url = safe_url.rsplit(separator, 1)[1]
-        changed = safe_url != value
-        if changed:
-            redactions.append({"pointer": path, "reason": "transport-credential"})
-        return safe_url, changed
-
-    def validate_omitted(value, path, depth):
-        before = len(binaries), len(numbers), len(redactions)
-        visit(value, path, depth)
-        del binaries[before[0]:]
-        del numbers[before[1]:]
-        del redactions[before[2]:]
-
-    def visit(value, path, depth=0, credential=False, transport_url=False):
-        if depth > 64:
-            raise CaptureFailure("input-limit", "Native capture exceeds the 64-level evidence nesting budget.", path)
-        if credential:
-            validate_omitted(value, path, depth)
-            redactions.append({"pointer": path, "reason": "transport-credential"})
-            if isinstance(value, bytes):
-                binaries.append({"pointer": path, "representation": "producer-bytes", "state": "redacted", "content_base64": None, "bytes": None, "sha256": None})
-            return None
-        if isinstance(value, bytes):
-            safe_bytes, credential_url = transport_value(value, path, transport_url)
-            content_base64 = base64.b64encode(value).decode("ascii")
-            digest = hashlib.sha256(value).hexdigest()
-            hidden = any(secret in value or secret in safe_bytes for secret in byte_secrets) or any(secret in content_base64 or secret in digest for secret in secrets)
-            safe_text = None
-            try:
-                safe_text = safe_bytes.decode("utf-8", errors="strict")
-            except UnicodeDecodeError:
-                pass
-            if hidden:
-                redactions.append({"pointer": path, "reason": "explicit-sensitive-value"})
-            exclude = hidden or credential_url
-            binaries.append({"pointer": path, "representation": "producer-bytes", "state": "redacted" if exclude else "retained", "content_base64": None if exclude else content_base64, "bytes": None if exclude else len(value), "sha256": None if exclude else digest})
-            if hidden:
-                return None
-            return safe_text
-        if isinstance(value, str):
-            safe_text, _ = transport_value(value, path, transport_url)
-            return redact(safe_text, path, value)
-        if isinstance(value, bool) or value is None:
-            return value
-        if isinstance(value, (int, float)):
-            literal = repr(value)
-            if any(secret in literal for secret in secrets):
-                redactions.append({"pointer": path, "reason": "explicit-sensitive-value"})
-                return None
-            numbers.append({"pointer": path, "producer_type": "integer" if isinstance(value, int) else "float", "literal": literal})
-            return value if (abs(value) <= 9007199254740991 if isinstance(value, int) else math.isfinite(value)) else None
-        if isinstance(value, (list, tuple)):
-            fields = re.fullmatch(r"/(?:backup/)*(?:request|response)/(?:headers|trailers)", path)
-            if fields:
-                result = []
-                for index, field in enumerate(value):
-                    if not isinstance(field, (list, tuple)) or len(field) != 2 or not isinstance(field[0], bytes):
-                        raise CaptureFailure("format", "Native header/trailer is not an ordered byte pair.", pointer(path, index))
-                    result.append([visit(field[0], pointer(pointer(path, index), 0), depth + 2), visit(field[1], pointer(pointer(path, index), 1), depth + 2, field[0].lower() in CREDENTIALS, field[0].lower() in {b"location", b"referer", b"origin"})])
-                return result
-            return [visit(item, pointer(path, index), depth + 1) for index, item in enumerate(value)]
-        if isinstance(value, dict):
-            result = {}
-            for key, item in value.items():
-                if not isinstance(key, str):
-                    raise CaptureFailure("format", "Native record has a non-string dictionary key.", path)
-                if any(secret in key for secret in secrets):
-                    # Validate the omitted subtree too, then discard all of its
-                    # coordinates rather than inventing a replacement identity.
-                    validate_omitted(item, pointer(path, key), depth + 1)
-                    redactions.append({"pointer": path, "reason": "explicit-sensitive-value", "scope": "property-name"})
-                    continue
-                result[key] = visit(item, pointer(path, key), depth + 1)
-            return result
-        raise CaptureFailure("decoder", "Native parser returned an unexpected value type: " + type(value).__name__ + ".", path)
-
-    return {"reported": visit(state, ""), "binary_fields": binaries, "numeric_literals": numbers, "redactions": redactions}
-
-
-def decode(request):
-    if version.VERSION != PROFILE:
-        raise CaptureFailure("unsupported", "Expected mitmproxy " + PROFILE + "; observed " + version.VERSION + ".")
-    records = []
-    capture = Path(request["snapshot_path"])
-    size = capture.stat().st_size
-    with capture.open("rb") as handle:
-        reader = BoundedReader(handle, size)
-        while handle.tell() < size:
-            start = handle.tell()
-            try:
-                state = tnetstring.load(reader)
-            except CaptureFailure:
-                raise
-            except RecursionError:
-                raise CaptureFailure("input-limit", "Native parser exceeded its recursion budget at byte offset " + str(start) + ".") from None
-            except (ValueError, IndexError, UnicodeError, EOFError):
-                raise CaptureFailure("format", "Malformed native record at byte offset " + str(start) + ".") from None
-            if not isinstance(state, dict):
-                raise CaptureFailure("format", "Native flow record must be a dictionary at byte offset " + str(start) + ".")
-            records.append({"ordinal": len(records), "location": {"kind": "byte-range", "offset": start, "bytes": handle.tell() - start}, **project_record(state, request["sensitive_values"]), "limitations": ["Fields are original native states without FlowReader migration. Binary fields contain exact producer bytes; reported UTF-8 strings for those fields are derived display views. Unknown flow/version extensions are retained without interpretation."]})
-    return {"decoder": {"id": "mitmproxy-native-tnetstring", "name": "REA offline native mitmproxy adapter", "version": PROFILE}, "container": {"reported": None, "numeric_literals": [], "redactions": [], "records_pointer": None}, "total_records": len(records), "records": records}
-
-
-def failure_reply(error):
-    """Keep producer constraints, resource exhaustion and adapter defects distinct."""
-    if isinstance(error, CaptureFailure):
-        return {"ok": False, "reason": error.reason, "message": str(error), "pointer": error.pointer}
-    if isinstance(error, MemoryError):
-        return {"ok": False, "reason": "resource-limit", "message": "Native decoder exhausted its 768 MiB address-space budget.", "pointer": ""}
-    return {"ok": False, "reason": "decoder", "message": "Offline native decoder failed unexpectedly: " + type(error).__name__ + ".", "pointer": ""}
-
-
-class OfflineCapture:
-    def load(self, loader):
-        loader.add_option("rea_request_path", str, "", "REA private offline capture request")
-
-    def running(self):
-        resource.setrlimit(resource.RLIMIT_AS, (768 * 1024 * 1024, 768 * 1024 * 1024))
-        resource.setrlimit(resource.RLIMIT_CPU, (30, 30))
-        resource.setrlimit(resource.RLIMIT_FSIZE, (OUTPUT_BYTES, OUTPUT_BYTES))
-        resource.setrlimit(resource.RLIMIT_CORE, (0, 0))
-        request = json.loads(Path(ctx.options.rea_request_path).read_text(encoding="utf-8"))
-        try:
-            response = {"ok": True, "value": decode(request)}
-        except Exception as error:
-            response = failure_reply(error)
-        try:
-            try:
-                output = json.dumps(response, ensure_ascii=True, allow_nan=False, separators=(",", ":")).encode("ascii")
-            except Exception as error:
-                output = json.dumps(failure_reply(error), separators=(",", ":")).encode("ascii")
-            if len(output) > OUTPUT_BYTES:
-                output = b'{"ok":false,"reason":"limit","message":"Native reply exceeds the complete-evidence output budget.","pointer":""}'
-            Path(request["reply_path"]).write_bytes(output)
-        finally:
-            ctx.master.shutdown()
-
-
-addons = [OfflineCapture()]
@@ -1,27 +0,0 @@
-import Foundation
-
-struct ChildBatch<Element> {
-  let values: [Element]
-  let complete: Bool
-}
-
-struct ChildCount {
-  let value: Int?
-  let error: Int32?
-}
-
-func serializeHelperOutput(_ value: Any) throws -> Data {
-  try JSONSerialization.data(withJSONObject: value, options: [.sortedKeys, .withoutEscapingSlashes])
-}
-
-func captureChildCount(status: Int32, success: Int32, value: Int) -> ChildCount {
-  guard status == success else { return ChildCount(value: nil, error: status) }
-  return ChildCount(value: value, error: nil)
-}
-
-func captureChildValues<Element>(requestedCount: Int, copy: () -> [Element]?) -> ChildBatch<Element> {
-  guard requestedCount > 0 else { return ChildBatch(values: [], complete: true) }
-  let returned = copy() ?? []
-  let values = Array(returned.prefix(requestedCount))
-  return ChildBatch(values: values, complete: values.count == requestedCount)
-}
@@ -22,17 +22,15 @@ func attribute(_ element: AXUIElement, _ key: String) -> CFTypeRef? {
  var value: CFTypeRef?
  return AXUIElementCopyAttributeValue(element, key as CFString, &value) == .success ? value : nil
 }
-func childCount(_ element: AXUIElement) -> ChildCount {
+func childCount(_ element: AXUIElement) -> Int {
  var count = 0
-  let status = AXUIElementGetAttributeValueCount(element, kAXChildrenAttribute as CFString, &count)
-  return captureChildCount(status: status.rawValue, success: AXError.success.rawValue, value: count)
+  return AXUIElementGetAttributeValueCount(element, kAXChildrenAttribute as CFString, &count) == .success ? count : 0
 }
-func children(_ element: AXUIElement, count: Int) -> ChildBatch<AXUIElement> {
-  captureChildValues(requestedCount: count) {
-    var value: CFArray?
-    guard AXUIElementCopyAttributeValues(element, kAXChildrenAttribute as CFString, 0, count, &value) == .success else { return nil }
-    return value as? [AXUIElement]
-  }
+func children(_ element: AXUIElement, limit: Int) -> [AXUIElement] {
+  var value: CFArray?
+  let count = min(limit, childCount(element))
+  if count == 0 { return [] }
+  return AXUIElementCopyAttributeValues(element, kAXChildrenAttribute as CFString, 0, count, &value) == .success ? value as? [AXUIElement] ?? [] : []
 }
 func text(_ element: AXUIElement, _ key: String) -> Any { (attribute(element, key) as? String) ?? NSNull() as Any }
 func windowBounds(_ element: AXUIElement) -> CGRect? {
@@ -89,11 +87,7 @@ func observe(_ request: Request) async throws -> [String: Any] {
    var element = root
    for index in action.path ?? [] {
      var selectedChild: CFArray?
-      let count = childCount(element)
-      guard let available = count.value else {
-        try fail("element-count-unavailable", "Cannot validate selected accessibility path because child count failed with AXError \(count.error ?? -1)")
-      }
-      guard index >= 0 && index < available,
+      guard index >= 0 && index < childCount(element),
        AXUIElementCopyAttributeValues(element, kAXChildrenAttribute as CFString, index, 1, &selectedChild) == .success,
        let item = (selectedChild as? [AXUIElement])?.first else { try fail("element-missing", "Selected accessibility path no longer exists") }
      element = item
@@ -109,29 +103,21 @@ func observe(_ request: Request) async throws -> [String: Any] {
    }
    guard outcome == .success else { try fail("action-failed", "Accessibility action failed with AXError \(outcome.rawValue)") }
  }
-  var nodes: [[String: Any]] = []; var truncated = false; var gaps: [String] = []
+  var nodes: [[String: Any]] = []; var truncated = false
  if request.accessibility, let root = selected {
    var pending: [(AXUIElement, [Int])] = [(root, [])]
    while let (element, path) = pending.popLast() {
      if nodes.count >= request.max_nodes { truncated = true; break }
-      let childCountResult = childCount(element)
+      let totalChildren = childCount(element)
      var actions: CFArray?
      AXUIElementCopyActionNames(element, &actions)
-      nodes.append(["path": path, "role": text(element, kAXRoleAttribute), "title": text(element, kAXTitleAttribute), "value": text(element, kAXValueAttribute), "actions": actions as? [String] ?? [], "children_count": childCountResult.value.map { $0 as Any } ?? NSNull()])
-      guard let totalChildren = childCountResult.value else {
-        truncated = true
-        gaps.append("AX child count unavailable at path \(path): AXError \(childCountResult.error ?? -1)")
-        continue
-      }
+      nodes.append(["path": path, "role": text(element, kAXRoleAttribute), "title": text(element, kAXTitleAttribute), "value": text(element, kAXValueAttribute), "actions": actions as? [String] ?? [], "children_count": totalChildren])
      if path.count >= 32 { if totalChildren > 0 { truncated = true }; continue }
      let available = max(0, request.max_nodes - nodes.count - pending.count)
      let count = min(available, totalChildren)
-      let batch = children(element, count: count)
-      if !batch.complete { truncated = true }
+      let items = children(element, limit: count)
      if totalChildren > count { truncated = true }
-      for (index, item) in batch.values.enumerated().reversed() {
-        pending.append((item, path + [index]))
-      }
+      for index in (0..<count).reversed() { pending.append((items[index], path + [index])) }
    }
  }
  var screenshot: Any = NSNull()
@@ -153,18 +139,18 @@ func observe(_ request: Request) async throws -> [String: Any] {
    }
    screenshot = ["mime_type": "image/png", "base64": png.base64EncodedString(), "sha256": SHA256.hash(data: png).map({ String(format: "%02x", $0) }).joined(), "width": image.width, "height": image.height]
  }
-  return ["window": ["pid": request.pid, "window_id": request.window_id, "executable": request.executable, "launch_time": launch, "title": window[kCGWindowName as String] as? String ?? ""], "nodes": nodes, "truncated": truncated, "screenshot": screenshot, "gaps": request.accessibility ? gaps : ["Accessibility capture was disabled"]]
+  return ["window": ["pid": request.pid, "window_id": request.window_id, "executable": request.executable, "launch_time": launch, "title": window[kCGWindowName as String] as? String ?? ""], "nodes": nodes, "truncated": truncated, "screenshot": screenshot, "gaps": request.accessibility ? [] : ["Accessibility capture was disabled"]]
 }
 Task { @MainActor in
  do {
    let request = try JSONDecoder().decode(Request.self, from: Data(CommandLine.arguments[1].utf8))
    let result = try await observe(request)
-    let output = try serializeHelperOutput(["ok": true, "result": result])
+    let output = try JSONSerialization.data(withJSONObject: ["ok": true, "result": result], options: [.sortedKeys])
    FileHandle.standardOutput.write(output)
  } catch {
    let failure = error as? BoundaryFailure
    let output: [String: Any] = ["ok": false, "code": failure?.code ?? "capture-failed", "message": failure?.message ?? error.localizedDescription]
-    if let data = try? serializeHelperOutput(output) { FileHandle.standardOutput.write(data) }
+    if let data = try? JSONSerialization.data(withJSONObject: output, options: [.sortedKeys]) { FileHandle.standardOutput.write(data) }
  }
  exit(0)
 }
@@ -1,303 +0,0 @@
-"""Bounded native call observation executed inside LLDB's embedded Python.
-
-REA imports this module into `lldb --batch` and runs `rea_trace <config.json>`.
-It launches one owned process, stops at the requested functions and
-Objective-C methods, records each entry from registers and memory reads only,
-continues, and kills the process once it exits, the event limit is reached or
-the duration elapses. No expression is evaluated and no target code runs on
-the tracer's behalf. The result is written as JSON to the configured path.
-"""
-
-import json
-import time
-
-import lldb
-
-ARGUMENT_REGISTERS = {
-    "arm64": ["x0", "x1", "x2", "x3", "x4", "x5", "x6", "x7"],
-    "arm64e": ["x0", "x1", "x2", "x3", "x4", "x5", "x6", "x7"],
-    "x86_64": ["rdi", "rsi", "rdx", "rcx", "r8", "r9"],
-    "x86_64h": ["rdi", "rsi", "rdx", "rcx", "r8", "r9"],
-}
-MAX_SELECTOR_BYTES = 1024
-MAX_REPORTED_LOCATIONS = 64
-MAX_OTHER_STOPS = 256
-LISTENER_NAME = "rea-native-call-observation"
-
-
-def _hex(value):
-    return "0x%x" % value
-
-
-def _location(address, target):
-    """Load and file address, module and symbol of one code address."""
-    module = address.GetModule()
-    symbol = address.GetSymbol()
-    file_address = address.GetFileAddress()
-    return {
-        "load_address": _hex(address.GetLoadAddress(target)),
-        "file_address": None
-        if file_address == lldb.LLDB_INVALID_ADDRESS
-        else _hex(file_address),
-        "module": module.GetFileSpec().GetFilename() if module.IsValid() else None,
-        "module_path": str(module.GetFileSpec()) if module.IsValid() else None,
-        "symbol": symbol.GetName() if symbol.IsValid() else None,
-    }
-
-
-def _no_files():
-    return lldb.SBFileSpecList()
-
-
-def _create_breakpoints(target, spec):
-    """LLDB breakpoints for one request; a class-qualified method may need two."""
-    if spec["kind"] == "function":
-        modules = lldb.SBFileSpecList()
-        if spec.get("module"):
-            modules.Append(lldb.SBFileSpec(spec["module"], False))
-        return [
-            target.BreakpointCreateByName(
-                spec["name"], lldb.eFunctionNameTypeAuto, modules, _no_files()
-            )
-        ]
-    class_name = spec.get("class_name")
-    method_type = spec.get("method_type", "any")
-    if class_name is None:
-        return [
-            target.BreakpointCreateByName(
-                spec["selector"], lldb.eFunctionNameTypeSelector, _no_files(), _no_files()
-            )
-        ]
-    prefixes = {"instance": ["-"], "class": ["+"], "any": ["-", "+"]}[method_type]
-    return [
-        target.BreakpointCreateByName(
-            "%s[%s %s]" % (prefix, class_name, spec["selector"]),
-            lldb.eFunctionNameTypeFull,
-            _no_files(),
-            _no_files(),
-        )
-        for prefix in prefixes
-    ]
-
-
-def _dynamic_class(target, pointer):
-    """Class of an Objective-C receiver from LLDB's runtime reader, without running code."""
-    if pointer == 0:
-        return None
-    data = lldb.SBData.CreateDataFromUInt64Array(
-        target.GetByteOrder(), target.GetAddressByteSize(), [pointer]
-    )
-    value = target.CreateValueFromData(
-        "receiver", data, target.GetBasicType(lldb.eBasicTypeObjCID)
-    )
-    dynamic = value.GetDynamicValue(lldb.eDynamicDontRunTarget)
-    name = dynamic.GetTypeName() if dynamic.IsValid() else None
-    if not name or name in ("id", "objc_object *"):
-        return None
-    return name[:-2] if name.endswith(" *") else name
-
-
-def _wanted(spec, symbol):
-    """Selector-only requests may admit only instance or only class methods."""
-    if spec["kind"] != "objc-method" or spec.get("class_name") is not None:
-        return True
-    method_type = spec.get("method_type", "any")
-    if method_type == "any":
-        return True
-    return symbol.startswith("-[" if method_type == "instance" else "+[")
-
-
-def _record(context, thread, index, sequence):
-    target, process, config = context["target"], context["process"], context["config"]
-    frame = thread.GetFrameAtIndex(0)
-    location = _location(frame.GetPCAddress(), target)
-    symbol = location["symbol"] or ""
-    if not _wanted(config["breakpoints"][index], symbol):
-        return None
-    names = ARGUMENT_REGISTERS.get(config["architecture"], [])
-    registers = [
-        {"name": name, "value": _hex(frame.FindRegister(name).GetValueAsUnsigned())}
-        for name in names[: config["argument_registers"]]
-    ]
-    receiver_class = None
-    selector = None
-    if symbol.startswith("-[") or symbol.startswith("+["):
-        error = lldb.SBError()
-        text = process.ReadCStringFromMemory(
-            frame.FindRegister(names[1]).GetValueAsUnsigned(),
-            MAX_SELECTOR_BYTES,
-            error,
-        )
-        selector = text if error.Success() and text else None
-        if symbol.startswith("-["):
-            receiver_class = _dynamic_class(
-                target, frame.FindRegister(names[0]).GetValueAsUnsigned()
-            )
-    frames = min(thread.GetNumFrames(), 1 + config["backtrace_frames"])
-    record = {
-        "sequence": sequence,
-        "elapsed_ms": round((time.monotonic() - context["started"]) * 1000, 3),
-        "thread_id": thread.GetThreadID(),
-        "breakpoint_index": index,
-        "receiver_class": receiver_class,
-        "selector": selector,
-        "registers": registers,
-        "backtrace": [
-            _location(thread.GetFrameAtIndex(depth).GetPCAddress(), target)
-            for depth in range(1, frames)
-        ],
-    }
-    record.update(location)
-    return record
-
-
-def _handle_stop(context, events, other_stops):
-    """Record breakpoint hits of one stop; return an outcome when tracing must end."""
-    process = context["process"]
-    for thread in process:
-        reason = thread.GetStopReason()
-        if reason == lldb.eStopReasonBreakpoint:
-            index = context["breakpoint_index"].get(thread.GetStopReasonDataAtIndex(0))
-            if index is None:
-                continue
-            record = _record(context, thread, index, len(events))
-            if record is not None:
-                events.append(record)
-            if len(events) >= context["config"]["max_events"]:
-                return "event-limit"
-        elif reason in (lldb.eStopReasonSignal, lldb.eStopReasonException):
-            other_stops.append(thread.GetStopDescription(256))
-            if len(other_stops) >= MAX_OTHER_STOPS:
-                return "stop-limit"
-    return None
-
-
-def _breakpoint_report(target, created):
-    report = []
-    for index, breakpoints in enumerate(created):
-        locations = []
-        count = 0
-        for breakpoint in breakpoints:
-            count += breakpoint.GetNumLocations()
-            for position in range(breakpoint.GetNumLocations()):
-                if len(locations) < MAX_REPORTED_LOCATIONS:
-                    locations.append(
-                        _location(breakpoint.GetLocationAtIndex(position).GetAddress(), target)
-                    )
-        report.append({"index": index, "location_count": count, "locations": locations})
-    return report
-
-
-def _launch_info(target, config, listener):
-    launch = lldb.SBLaunchInfo(config["arguments"])
-    launch.SetListener(listener)
-    environment = target.GetEnvironment()
-    for key, value in config["environment"].items():
-        environment.Set(key, value, True)
-    launch.SetEnvironment(environment, False)
-    if config.get("working_directory"):
-        launch.SetWorkingDirectory(config["working_directory"])
-    launch.AddOpenFileAction(0, "/dev/null", True, False)
-    launch.AddOpenFileAction(1, config["stdout_path"], False, True)
-    launch.AddOpenFileAction(2, config["stderr_path"], False, True)
-    return launch
-
-
-def _wait_for_exit(listener, process, seconds):
-    event = lldb.SBEvent()
-    deadline = time.monotonic() + seconds
-    while process.GetState() != lldb.eStateExited and time.monotonic() < deadline:
-        listener.WaitForEvent(1, event)
-
-
-def trace(debugger, config):
-    debugger.SetAsync(True)
-    # Stop at the symbol itself, where argument registers still hold the ABI
-    # arguments, even when line tables would let LLDB skip the prologue.
-    lldb.SBDebugger.SetInternalVariable(
-        "target.skip-prologue", "false", debugger.GetInstanceName()
-    )
-    error = lldb.SBError()
-    target = debugger.CreateTarget(
-        config["executable"], config["architecture"], None, False, error
-    )
-    if not target.IsValid():
-        return {"status": "target-error", "error": error.GetCString()}
-    created = [_create_breakpoints(target, spec) for spec in config["breakpoints"]]
-    breakpoint_index = {}
-    for index, breakpoints in enumerate(created):
-        for breakpoint in breakpoints:
-            breakpoint_index[breakpoint.GetID()] = index
-    listener = lldb.SBListener(LISTENER_NAME)
-    started = time.monotonic()
-    process = target.Launch(_launch_info(target, config, listener), error)
-    if not error.Success() or not process.IsValid():
-        return {"status": "launch-error", "error": error.GetCString()}
-    with open(config["pid_path"], "w") as handle:
-        handle.write(str(process.GetProcessID()))
-    context = {
-        "target": target,
-        "process": process,
-        "config": config,
-        "started": started,
-        "breakpoint_index": breakpoint_index,
-    }
-    events = []
-    other_stops = []
-    outcome = None
-    deadline = started + config["duration_ms"] / 1000
-    event = lldb.SBEvent()
-    while outcome is None:
-        if time.monotonic() >= deadline:
-            outcome = "duration-elapsed"
-            break
-        if not listener.WaitForEvent(1, event):
-            continue
-        if not lldb.SBProcess.EventIsProcessEvent(event):
-            continue
-        state = lldb.SBProcess.GetStateFromEvent(event)
-        if state == lldb.eStateExited:
-            outcome = "exited"
-        elif state == lldb.eStateStopped and not lldb.SBProcess.GetRestartedFromEvent(event):
-            outcome = _handle_stop(context, events, other_stops)
-            if outcome is None:
-                process.Continue()
-    pid = process.GetProcessID()
-    exit_status = None
-    exit_description = None
-    if outcome == "exited":
-        exit_status = process.GetExitStatus()
-        exit_description = process.GetExitDescription()
-    else:
-        process.Kill()
-        _wait_for_exit(listener, process, 5)
-    return {
-        "status": "traced",
-        "version": lldb.SBDebugger.GetVersionString().splitlines()[0],
-        "pid": pid,
-        "outcome": outcome,
-        "exit_status": exit_status,
-        "exit_description": exit_description,
-        "killed": outcome != "exited",
-        "terminated": process.GetState() == lldb.eStateExited,
-        "elapsed_ms": round((time.monotonic() - started) * 1000, 3),
-        "breakpoints": _breakpoint_report(target, created),
-        "events": events,
-        "other_stops": other_stops,
-    }
-
-
-def run(debugger, command, result, internal_dict):
-    """LLDB command entry point: `rea_trace <config.json>`."""
-    with open(command.strip()) as handle:
-        config = json.load(handle)
-    try:
-        output = trace(debugger, config)
-    except Exception as error:  # Reported as a tracer failure, never re-raised into LLDB.
-        output = {"status": "tracer-error", "error": "%s: %s" % (type(error).__name__, error)}
-    with open(config["result_path"], "w") as handle:
-        json.dump(output, handle)
-
-
-def __lldb_init_module(debugger, internal_dict):
-    debugger.HandleCommand("command script add -f rea_lldb_tracer.run rea_trace")
@@ -1,293 +0,0 @@
-import Darwin
-import Foundation
-
-struct RunTokenObservation: Encodable {
-  let pid: Int32
-  let state: String
-  let run_id: String?
-  let reason: String?
-}
-
-struct ProcessIdentityObservation: Encodable {
-  let pid: Int32
-  let state: String
-  let identity: String?
-  let reason: String?
-}
-
-private struct ProcessMetadata {
-  let identity: String
-  let pointerSize: Int
-}
-
-struct ProcessSnapshot {
-  fileprivate let metadata: [Int32: ProcessMetadata]
-  let failure: String?
-}
-
-typealias ProcessTableSysctlCall = (
-  _ mib: inout [Int32],
-  _ output: UnsafeMutableRawPointer?,
-  _ size: inout Int
-) -> Int32
-
-private func readProcessSnapshot() -> ProcessSnapshot {
-  readProcessSnapshot { mib, output, size in
-    sysctl(&mib, u_int(mib.count), output, &size, nil, 0)
-  }
-}
-
-func readProcessSnapshot(
-  sysctlCall: ProcessTableSysctlCall
-) -> ProcessSnapshot {
-  for _ in 0..<3 {
-    var mib = [CTL_KERN, KERN_PROC, KERN_PROC_ALL, 0]
-    var size = 0
-    guard sysctlCall(&mib, nil, &size) == 0 else {
-      let failure = errno
-      return ProcessSnapshot(metadata: [:], failure: "process_table_failed_\(failure)")
-    }
-    guard size >= MemoryLayout<kinfo_proc>.size,
-          size % MemoryLayout<kinfo_proc>.stride == 0 else {
-      return ProcessSnapshot(metadata: [:], failure: "process_table_failed_\(errno)")
-    }
-    var processes = [kinfo_proc](
-      repeating: kinfo_proc(),
-      count: size / MemoryLayout<kinfo_proc>.stride
-    )
-    let result = processes.withUnsafeMutableBufferPointer { buffer in
-      let output = buffer.baseAddress.map { UnsafeMutableRawPointer($0) }
-      return sysctlCall(&mib, output, &size)
-    }
-    guard result == 0 else {
-      let failure = errno
-      if failure == ENOMEM { continue }
-      return ProcessSnapshot(metadata: [:], failure: "process_table_failed_\(failure)")
-    }
-    guard size % MemoryLayout<kinfo_proc>.stride == 0 else {
-      return ProcessSnapshot(metadata: [:], failure: "process_table_failed_\(errno)")
-    }
-    let processCount = size / MemoryLayout<kinfo_proc>.stride
-    let metadata = Dictionary(
-      processes.prefix(processCount).map { process in
-        let start = process.kp_proc.p_starttime
-        return (
-          process.kp_proc.p_pid,
-          ProcessMetadata(
-            identity: "\(start.tv_sec):\(start.tv_usec)",
-            pointerSize: process.kp_proc.p_flag & P_LP64 != 0 ? 8 : 4
-          )
-        )
-      },
-      uniquingKeysWith: { first, _ in first }
-    )
-    return ProcessSnapshot(metadata: metadata, failure: nil)
-  }
-  return ProcessSnapshot(metadata: [:], failure: "process_table_failed_\(ENOMEM)")
-}
-
-func readProcessIdentities(pids: [Int32]) -> [ProcessIdentityObservation] {
-  let snapshot = readProcessSnapshot()
-  return pids.map { pid in
-    guard let metadata = snapshot.metadata[pid] else {
-      return unavailableIdentity(
-        pid: pid,
-        reason: snapshot.failure ?? "process_not_in_snapshot"
-      )
-    }
-    return ProcessIdentityObservation(pid: pid, state: "readable", identity: metadata.identity, reason: nil)
-  }
-}
-
-private func unavailableIdentity(pid: Int32, reason: String) -> ProcessIdentityObservation {
-  ProcessIdentityObservation(pid: pid, state: "unavailable", identity: nil, reason: reason)
-}
-
-enum RunTokenReadError: Error {
-  case invalidBuffer
-  case duplicateToken
-  case invalidTokenEncoding
-  case environmentUnavailable
-  case appleVectorUnavailable
-  case ambiguousEnvironmentBoundary
-}
-
-@_silgen_name("csops")
-private func csops(
-  _ pid: Int32,
-  _ ops: UInt32,
-  _ addr: UnsafeMutableRawPointer?,
-  _ size: Int
-) -> Int32
-
-private let csOpsStatus: UInt32 = 0
-private let csPlatformBinary: UInt32 = 0x0400_0000
-
-/**
- * Whether the target image is an Apple platform binary. Current macOS omits
- * the environment of platform binaries from KERN_PROCARGS2 for every caller,
- * so this distinguishes a policy-withheld environment from a process whose
- * environment is genuinely absent or transiently unreadable.
- */
-func isPlatformBinary(pid: Int32) -> Bool {
-  var flags: UInt32 = 0
-  let result = withUnsafeMutablePointer(to: &flags) { pointer in
-    csops(pid, csOpsStatus, UnsafeMutableRawPointer(pointer), MemoryLayout<UInt32>.size)
-  }
-  return result == 0 && (flags & csPlatformBinary) != 0
-}
-
-private func readRunToken(pid: Int32, pointerSize: Int) -> RunTokenObservation {
-  var mib = [CTL_KERN, KERN_PROCARGS2, Int32(pid)]
-  var size = 0
-  guard sysctl(&mib, u_int(mib.count), nil, &size, nil, 0) == 0, size >= MemoryLayout<Int32>.size else {
-    return unavailable(pid: pid, reason: "sysctl_failed_\(errno)")
-  }
-  var bytes = [UInt8](repeating: 0, count: size)
-  let result = bytes.withUnsafeMutableBytes { buffer in
-    sysctl(&mib, u_int(mib.count), buffer.baseAddress, &size, nil, 0)
-  }
-  guard result == 0 else {
-    return unavailable(pid: pid, reason: "sysctl_failed_\(errno)")
-  }
-  bytes = Array(bytes.prefix(size))
-  do {
-    return RunTokenObservation(pid: pid, state: "readable", run_id: try token(in: bytes, pointerSize: pointerSize), reason: nil)
-  } catch RunTokenReadError.duplicateToken {
-    return unavailable(pid: pid, reason: "duplicate_run_token")
-  } catch RunTokenReadError.invalidTokenEncoding {
-    return unavailable(pid: pid, reason: "invalid_run_token_encoding")
-  } catch RunTokenReadError.environmentUnavailable {
-    return unavailable(
-      pid: pid,
-      reason: isPlatformBinary(pid: pid)
-        ? "platform_binary_environment_withheld"
-        : "environment_unavailable"
-    )
-  } catch RunTokenReadError.appleVectorUnavailable {
-    return unavailable(pid: pid, reason: "apple_vector_unavailable")
-  } catch RunTokenReadError.ambiguousEnvironmentBoundary {
-    return unavailable(pid: pid, reason: "ambiguous_environment_boundary")
-  } catch {
-    return unavailable(pid: pid, reason: "malformed_procargs")
-  }
-}
-
-func readRunTokens(pids: [Int32]) -> [RunTokenObservation] {
-  let before = readProcessSnapshot()
-  let observations = pids.map { pid -> RunTokenObservation in
-    guard let metadata = before.metadata[pid] else {
-      return unavailable(pid: pid, reason: before.failure ?? "process_not_in_snapshot")
-    }
-    return readRunToken(pid: pid, pointerSize: metadata.pointerSize)
-  }
-  let after = readProcessSnapshot()
-  return zip(pids, observations).map { pid, observation in
-    guard let initial = before.metadata[pid], let current = after.metadata[pid] else {
-      return unavailable(pid: pid, reason: after.failure ?? "process_not_in_snapshot")
-    }
-    guard initial.identity == current.identity,
-          initial.pointerSize == current.pointerSize else {
-      return unavailable(pid: pid, reason: "process_identity_changed_during_token_read")
-    }
-    return observation
-  }
-}
-
-func token(in bytes: [UInt8], pointerSize: Int = MemoryLayout<UnsafeRawPointer>.size) throws -> String? {
-  guard bytes.count >= MemoryLayout<Int32>.size else { throw RunTokenReadError.invalidBuffer }
-  let argc = bytes.withUnsafeBytes { $0.loadUnaligned(as: Int32.self).littleEndian }
-  guard argc >= 0, Int(argc) <= bytes.count else { throw RunTokenReadError.invalidBuffer }
-  var offset = MemoryLayout<Int32>.size
-  guard let executablePath = readString(in: bytes, offset: &offset) else {
-    throw RunTokenReadError.invalidBuffer
-  }
-  guard pointerSize == 4 || pointerSize == 8 else { throw RunTokenReadError.invalidBuffer }
-  let pathRecordSize = Array("executable_path=".utf8).count + executablePath.count + 1
-  let padding = (pointerSize - pathRecordSize % pointerSize) % pointerSize
-  guard offset + padding <= bytes.count,
-        bytes[offset..<(offset + padding)].allSatisfy({ $0 == 0 }) else {
-    throw RunTokenReadError.invalidBuffer
-  }
-  offset += padding
-  for _ in 0..<argc {
-    guard readString(in: bytes, offset: &offset, allowEmpty: true) != nil else {
-      throw RunTokenReadError.invalidBuffer
-    }
-  }
-  guard bytes.last == 0 else { throw RunTokenReadError.invalidBuffer }
-  if offset == bytes.count {
-    throw RunTokenReadError.environmentUnavailable
-  }
-  var trailingEntries: [ArraySlice<UInt8>] = []
-  var zeroedAppleVectorStart: Int?
-  while offset < bytes.count {
-    if bytes[offset] == 0 {
-      let start = offset
-      while offset < bytes.count, bytes[offset] == 0 {
-        offset += 1
-      }
-      if offset - start > 1 {
-        zeroedAppleVectorStart = zeroedAppleVectorStart ?? trailingEntries.count
-      }
-      continue
-    }
-    guard let entry = readString(in: bytes, offset: &offset) else {
-      throw RunTokenReadError.invalidBuffer
-    }
-    trailingEntries.append(entry)
-  }
-  // XNU appends its Apple vector after the environment. libc clears the
-  // initial `pfz=` record after startup, leaving a multi-NUL run in its place.
-  // A caller can also set `pfz`, so prefer the final intact sentinel when it
-  // remains available and otherwise stop at the cleared record.
-  let intactAppleVectorStart = trailingEntries.lastIndex(where: {
-    $0.starts(with: Array("pfz=".utf8))
-  })
-  let preferZeroedBoundary = zeroedAppleVectorStart.flatMap { zeroedStart in
-    intactAppleVectorStart.map { intactStart in intactStart < zeroedStart } ?? true
-  } ?? false
-  let appleVectorStart = preferZeroedBoundary
-    ? zeroedAppleVectorStart
-    : intactAppleVectorStart
-  guard let appleVectorStart else {
-    throw RunTokenReadError.appleVectorUnavailable
-  }
-  if trailingEntries[appleVectorStart...].contains(where: {
-    $0.starts(with: Array("REA_PROCESS_RUN_ID=".utf8))
-  }) {
-    throw RunTokenReadError.ambiguousEnvironmentBoundary
-  }
-  let environmentEntries = trailingEntries[..<appleVectorStart]
-  guard !environmentEntries.isEmpty else {
-    throw RunTokenReadError.environmentUnavailable
-  }
-  var found: String?
-  for entry in environmentEntries {
-    if entry.starts(with: Array("REA_PROCESS_RUN_ID=".utf8)) {
-      guard found == nil else { throw RunTokenReadError.duplicateToken }
-      let value = entry.dropFirst("REA_PROCESS_RUN_ID=".utf8.count)
-      guard let decoded = String(bytes: value, encoding: .utf8) else {
-        throw RunTokenReadError.invalidTokenEncoding
-      }
-      found = decoded
-    }
-  }
-  return found
-}
-
-private func readString(
-  in bytes: [UInt8],
-  offset: inout Int,
-  allowEmpty: Bool = false
-) -> ArraySlice<UInt8>? {
-  guard offset < bytes.count, let end = bytes[offset...].firstIndex(of: 0),
-        allowEmpty || end > offset else { return nil }
-  let string = bytes[offset..<end]
-  offset = end + 1
-  return string
-}
-
-private func unavailable(pid: Int32, reason: String) -> RunTokenObservation {
-  RunTokenObservation(pid: pid, state: "unavailable", run_id: nil, reason: reason)
-}
@@ -1,35 +0,0 @@
-import Foundation
-
-struct RunTokenResponse: Encodable {
-  let results: [RunTokenObservation]
-}
-
-struct ProcessIdentityResponse: Encodable {
-  let results: [ProcessIdentityObservation]
-}
-
-@main
-struct ProcessRunTokenReaderMain {
-  static func main() {
-    let arguments = Array(CommandLine.arguments.dropFirst())
-    let identityMode = arguments.first == "--identities"
-    let pidArguments = identityMode ? Array(arguments.dropFirst()) : arguments
-    let pids = pidArguments.compactMap(Int32.init)
-    guard pids.count == pidArguments.count else {
-      fputs("invalid process ID input\n", stderr)
-      exit(64)
-    }
-    do {
-      let output: Data
-      if identityMode {
-        output = try JSONEncoder().encode(ProcessIdentityResponse(results: readProcessIdentities(pids: pids)))
-      } else {
-        output = try JSONEncoder().encode(RunTokenResponse(results: readRunTokens(pids: pids)))
-      }
-      FileHandle.standardOutput.write(output)
-    } catch {
-      fputs("could not encode process token observations\n", stderr)
-      exit(70)
-    }
-  }
-}
@@ -1,101 +0,0 @@
-"""Fixed core-only GDB/pwndbg operation; no caller commands or historical PID lookup."""
-import json
-import os
-from pathlib import Path
-import resource
-import gdb
-
-OUTPUT_BYTES = 64 * 1024 * 1024
-
-
-class ContextFailure(Exception):
-    def __init__(self, reason, message):
-        super().__init__(message)
-        self.reason = reason
-
-
-def inspect(request):
-    if gdb.selected_inferior().connection is not None:
-        raise ContextFailure("decoder", "Owned GDB unexpectedly has an inferior connection before core loading.")
-    root = Path(os.environ["REA_CORE_CONTEXT_REQUEST"]).parent
-    empty = root / "no-libraries"
-    empty.mkdir(mode=0o700)
-    for command in ["set auto-load off", "set debuginfod enabled off", "set auto-solib-add off", "set history save off", "set pagination off",
-                    "set sysroot ./no-libraries", "set solib-search-path ./no-libraries"]:
-        gdb.execute(command, to_string=True)
-    entry = request["gdbinit"]
-    try:
-        exec(compile(Path(entry).read_bytes(), entry, "exec"), {"__name__": "__main__", "__file__": entry})
-        import pwndbg.aglib.vmmap
-        import pwndbg.lib.version
-    except (ImportError, OSError) as error:
-        raise ContextFailure("unavailable", "Selected pwndbg could not initialize: " + str(error)) from error
-    version = pwndbg.lib.version.__version__
-    if version != "2026.09.15" and not version.startswith("2026.09.15 build: "):
-        raise ContextFailure("unsupported", "Expected unchanged pwndbg2026.09.15; selected plugin reports " + version + ".")
-    gdb.execute('set context-sections ""', to_string=True)
-    # core-file takes a raw filename and retains quote characters. Use a fixed
-    # relative filename in the owned cwd so no selected path becomes GDB syntax.
-    if Path(request["snapshot_path"]) != root.parent / "object.snapshot":
-        raise ContextFailure("decoder", "Core context request did not select the shared owned snapshot.")
-    gdb.execute("core-file ../object.snapshot", to_string=True)
-    inferior = gdb.selected_inferior()
-    if inferior.connection is None or inferior.connection.type != "core" or gdb.current_progspace().filename is not None:
-        raise ContextFailure("decoder", "Requested core-only boundary was not established; no mapping query performed.")
-    maps = []
-    for page in pwndbg.aglib.vmmap.get():
-        flags = page.flags
-        maps.append({"start": hex(page.start), "end": hex(page.end), "offset": hex(page.offset), "reported_flags": flags,
-                     "permissions": {"read": bool(flags & 4), "write": bool(flags & 2), "execute": bool(flags & 1)} if 1 <= flags <= 7 else None,
-                     "pathname_display": page.objfile, "current_file_identity": "unknown"})
-    return {"status": "available", "gdb_version": gdb.VERSION, "pwndbg_version": version, "connection": "core", "executable": None,
-            "historical_pid": inferior.pid, "reported_limits": {"address_space_bytes": resource.getrlimit(resource.RLIMIT_AS)[0], "cpu_seconds": resource.getrlimit(resource.RLIMIT_CPU)[0], "file_size_bytes": resource.getrlimit(resource.RLIMIT_FSIZE)[0]}, "maps": maps, "confidence": "derived", "completeness": "unknown",
-            "diagnostics": {"stdout": "", "stderr": "", "truncated": False}}
-
-
-def failure_exit(request_path, status, marker):
-    try:
-        descriptor = os.open(Path(request_path).parent / "resource.failure", os.O_WRONLY | os.O_CREAT | os.O_EXCL, 0o600)
-        os.write(descriptor, marker)
-        os.close(descriptor)
-    except (OSError, MemoryError):
-        pass
-    os._exit(status)
-
-
-def main():
-    request_path = os.environ["REA_CORE_CONTEXT_REQUEST"]
-    request = json.loads(Path(request_path).read_text(encoding="utf-8"))
-    reserve = bytearray(1024 * 1024)
-    try:
-        reply = {"ok": True, "value": inspect(request)}
-    except ContextFailure as error:
-        reply = {"ok": False, "reason": error.reason, "message": str(error)}
-    except MemoryError:
-        reserve = None
-        failure_exit(request_path, 75, b"M")
-    except Exception as error:
-        if isinstance(error, OSError) and error.errno == 12:
-            reserve = None
-            failure_exit(request_path, 75, b"M")
-        reply = {"ok": False, "reason": "decoder", "message": type(error).__name__ + ": " + str(error)}
-    try:
-        encoded = json.dumps(reply, ensure_ascii=True, allow_nan=False).encode("utf-8")
-        if len(encoded) > OUTPUT_BYTES:
-            encoded = json.dumps({"ok": False, "reason": "output-limit", "message": "Complete debugger context exceeds64 MiB reply budget."}).encode("utf-8")
-        descriptor = os.open(request["reply_path"], os.O_WRONLY | os.O_CREAT | os.O_EXCL, 0o600)
-        with os.fdopen(descriptor, "wb") as handle:
-            handle.write(encoded)
-    except MemoryError:
-        reserve = None
-        failure_exit(request_path, 75, b"M")
-    except OSError as error:
-        if error.errno == 27:
-            failure_exit(request_path, 76, b"F")
-        if error.errno == 12:
-            reserve = None
-            failure_exit(request_path, 75, b"M")
-        raise
-
-
-main()
@@ -1,39 +0,0 @@
-"""Catch typed resource failures while loading or running the owned debugger launcher.
-
-Only this package's fixed sibling is executed; caller input stays in request.json.
-Interpreter startup failures before this boundary remain unclassified.
-"""
-import os
-import sys
-
-
-def resource_exit(status, marker):
-    try:
-        if len(sys.argv) > 2:
-            descriptor = os.open(sys.argv[1], os.O_WRONLY | os.O_CREAT | os.O_EXCL, 0o600)
-            os.write(descriptor, marker)
-            os.close(descriptor)
-    except (OSError, MemoryError):
-        # Without a complete marker the parent keeps this failure unclassified.
-        pass
-    os._exit(status)
-
-try:
-    implementation = os.path.join(os.path.dirname(__file__), "launch_impl.py")
-    with open(implementation, "rb") as handle:
-        source = handle.read()
-    exec(compile(source, implementation, "exec"), {
-        "__file__": implementation,
-        "__name__": "__main__",
-    })
-except MemoryError:
-    # Reserved status: an observed allocation failure, including imports/compile.
-    resource_exit(75, b"M")
-except OSError as error:
-    # Linux ENOMEM is an observed allocation failure, independent of error text.
-    if error.errno == 12:
-        resource_exit(75, b"M")
-    # Linux EFBIG is observed directly, including a partial limits/reply write.
-    if error.errno == 27:
-        resource_exit(76, b"F")
-    raise
@@ -1,34 +0,0 @@
-"""Lower inherited limits before replacing this owned process with GDB."""
-import json
-import os
-from pathlib import Path
-import sys
-
-runtime_path = Path(__file__).parent.parent / "pwntools" / "decoder_runtime.py"
-runtime = {"__file__": str(runtime_path), "__name__": "rea_decoder_runtime"}
-exec(compile(runtime_path.read_bytes(), str(runtime_path), "exec"), runtime)
-
-
-class LaunchFailure(Exception):
-    def __init__(self, reason, message):
-        super().__init__(message)
-        self.reason = reason
-
-
-def launch(snapshot, cache):
-    request_path = sys.argv[-1]
-    request = json.loads(Path(request_path).read_text(encoding="utf-8"))
-    bridge = str(Path(__file__).with_name("core_context.py"))
-    environment = dict(os.environ, REA_CORE_CONTEXT_REQUEST=request_path)
-    # Only fixed package code appears in the GDB Python command. Selected paths stay JSON data.
-    command = "python exec(compile(open(" + repr(bridge) + ", 'rb').read(), " + repr(bridge) + ", 'exec'), {'__name__':'__main__','__file__':" + repr(bridge) + "})"
-    try:
-        os.execve(request["gdb"], [request["gdb"], "-nx", "-nh", "--batch", "--quiet",
-                                  "-iex", "set auto-load off", "-iex", "set debuginfod enabled off",
-                                  "-iex", "set auto-solib-add off", "-ex", command], environment)
-    except OSError as error:
-        raise LaunchFailure("unavailable", "Selected GDB could not start (" + str(error.errno) + "): " + request["gdb"] + "; " + str(error)) from error
-
-
-if __name__ == "__main__":
-    runtime["main"](sys.argv[-1], launch, LaunchFailure, "pwndbg-core-launcher")
@@ -1,59 +0,0 @@
-"""Shared bounded reply/limit protocol, independent of the supplied artifact format."""
-import json
-import os
-from pathlib import Path
-import resource
-import sys
-
-OUTPUT_BYTES = 64 * 1024 * 1024
-
-def lower_resource_limits():
-    limits = {}
-    for name, kind, maximum in (
-        ("address_space_bytes", resource.RLIMIT_AS, 3 * 1024**3),
-        ("cpu_seconds", resource.RLIMIT_CPU, 30),
-        ("file_size_bytes", resource.RLIMIT_FSIZE, OUTPUT_BYTES),
-    ):
-        soft, hard = resource.getrlimit(kind)
-        finite = [maximum] + [value for value in (soft, hard) if value != resource.RLIM_INFINITY]
-        effective = min(finite)
-        # Preserve the inherited hard boundary and never raise a caller's soft limit.
-        resource.setrlimit(kind, (effective, hard))
-        limits[name] = effective
-    return limits
-
-
-def main(request_path, inspect, failure_type, profile):
-    request = json.loads(Path(request_path).read_text(encoding="utf-8"))
-    os.environ["PWNLIB_NOTERM"] = "1"
-    os.environ["PWNLIB_CACHE_DIR"] = str(Path(request_path).parent / "cache")
-    limits = None
-    # Release bounded emergency headroom before constructing a MemoryError reply.
-    # The outer exit-status contract also covers allocation failure during serialization.
-    memory_reserve = bytearray(1024 * 1024)
-    try:
-        limits = lower_resource_limits()
-        descriptor = os.open(Path(request_path).parent / "limits.json", os.O_WRONLY | os.O_CREAT | os.O_EXCL, 0o600)
-        with os.fdopen(descriptor, "w", encoding="utf-8") as handle:
-            json.dump(limits, handle)
-        value = inspect(Path(request["snapshot_path"]), Path(request_path).parent / "cache")
-        value["limitations"].append("Effective owned Python resource soft limits: " + json.dumps(limits, sort_keys=True) + ". Inherited tighter limits are retained.")
-        reply = {"ok": True, "profile": profile, "value": value}
-    except failure_type as error:
-        reply = {"ok": False, "reason": error.reason, "message": str(error)}
-    except MemoryError:
-        memory_reserve = None
-        reply = {"ok": False, "reason": "resource-limit", "message": "pwntools memory allocation failed under the effective resource limits; the exact allocation cause is unknown.", "reported_limits": limits}
-    except Exception as error:
-        if isinstance(error, OSError) and error.errno == 12:
-            memory_reserve = None
-            reply = {"ok": False, "reason": "resource-limit", "message": "pwntools reported OSError(ENOMEM); the exact allocation cause is unknown.", "reported_limits": limits}
-        else:
-            reply = {"ok": False, "reason": "decoder", "message": type(error).__name__ + ": " + str(error)}
-    encoded = json.dumps(reply, ensure_ascii=True, allow_nan=False).encode("utf-8")
-    if len(encoded) > OUTPUT_BYTES:
-        encoded = json.dumps({"ok": False, "reason": "output-limit", "message": "Complete artifact result exceeds the 64 MiB reply budget."}).encode("utf-8")
-    descriptor = os.open(request["reply_path"], os.O_WRONLY | os.O_CREAT | os.O_EXCL, 0o600)
-    with os.fdopen(descriptor, "wb") as handle:
-        handle.write(encoded)
-
@@ -1,39 +0,0 @@
-"""Catch typed resource failures while loading or running the owned ELF adapter.
-
-Only this package's fixed sibling is executed; caller input stays in request.json.
-Interpreter startup failures before this boundary remain unclassified.
-"""
-import os
-import sys
-
-
-def resource_exit(status, marker):
-    try:
-        if len(sys.argv) > 2:
-            descriptor = os.open(sys.argv[1], os.O_WRONLY | os.O_CREAT | os.O_EXCL, 0o600)
-            os.write(descriptor, marker)
-            os.close(descriptor)
-    except (OSError, MemoryError):
-        # Without a complete marker the parent keeps this failure unclassified.
-        pass
-    os._exit(status)
-
-try:
-    implementation = os.path.join(os.path.dirname(__file__), "layout_impl.py")
-    with open(implementation, "rb") as handle:
-        source = handle.read()
-    exec(compile(source, implementation, "exec"), {
-        "__file__": implementation,
-        "__name__": "__main__",
-    })
-except MemoryError:
-    # Reserved status: an observed allocation failure, including imports/compile.
-    resource_exit(75, b"M")
-except OSError as error:
-    # Linux ENOMEM is an observed allocation failure, independent of error text.
-    if error.errno == 12:
-        resource_exit(75, b"M")
-    # Linux EFBIG is observed directly, including a partial limits/reply write.
-    if error.errno == 27:
-        resource_exit(76, b"F")
-    raise
@@ -1,309 +0,0 @@
-"""Offline adapter to unchanged pwntools 4.15.0; never use libs/maps/libc.
-
-Owned request/snapshot/reply paths are supplied by REA. No host target-process launch,
-user configuration initialization, debugger startup, or dependency installation.
-"""
-import base64
-import importlib.metadata
-import io
-import json
-import os
-from pathlib import Path
-import resource
-import sys
-
-PROFILE = "pwntools@4.15.0;pyelftools@0.33;unicorn@2.1.2"
-PACKAGES = {"pwntools": "4.15.0", "pyelftools": "0.33", "unicorn": "2.1.2"}
-OUTPUT_BYTES = 64 * 1024 * 1024
-
-
-class LayoutFailure(Exception):
-    def __init__(self, reason, message):
-        super().__init__(message)
-        self.reason = reason
-
-
-def address(value):
-    return hex(int(value))
-
-
-def file_range(offset, size, length):
-    return 0 <= offset <= length and 0 <= size <= length - offset
-
-
-def location(offset, size, length):
-    if not file_range(offset, size, length):
-        raise LayoutFailure("format", "ELF contains a file-backed range outside the selected snapshot.")
-    return {"offset": address(offset), "bytes": address(size)}
-
-
-def name_reference(display, section, offset, content):
-    header = getattr(section, "header", None)
-    if header is None or header.sh_type != "SHT_STRTAB":
-        return {"display": display, "bytes_base64": None, "location": None,
-                "unknown_reason": "Referenced string table could not be resolved."}
-    return name_in_table(display, header.sh_offset, header.sh_size, offset, content)
-
-
-def name_in_table(display, table_start, table_size, offset, content):
-    location(table_start, table_size, len(content))
-    if not 0 <= offset < table_size:
-        raise LayoutFailure("format", f"ELF name offset {offset} lies outside its declared string table of {table_size} bytes at file offset {table_start}.")
-    start = table_start + offset
-    limit = table_start + table_size
-    end = content.find(b"\0", start, limit)
-    if end < 0:
-        raise LayoutFailure("format", "ELF name lacks a terminator within its reported string table.")
-    raw = content[start:end]
-    return {"display": raw.decode("utf-8", "replace") if display is None else display, "bytes_base64": base64.b64encode(raw).decode("ascii"),
-            "location": location(start, len(raw) + 1, len(content)), "unknown_reason": None}
-
-
-def dynamic_name_reference(tags, offset, image, content):
-    starts = [tag.d_val for tag in tags if tag.d_tag == "DT_STRTAB"]
-    sizes = [tag.d_val for tag in tags if tag.d_tag == "DT_STRSZ"]
-    if not starts or not sizes:
-        raise LayoutFailure("format", "ELF dependency requires DT_STRTAB and DT_STRSZ.")
-    if len(starts) != 1 or len(sizes) != 1:
-        raise LayoutFailure("unsupported-target", "ELF dependency string-table tags are ambiguous: " + repr({"DT_STRTAB": starts, "DT_STRSZ": sizes}))
-    if not 0 <= offset < sizes[0]:
-        raise LayoutFailure("format", f"ELF dependency name offset {offset} lies outside declared DT_STRSZ {sizes[0]}.")
-    offsets = set()
-    if len(starts) == 1 and len(sizes) == 1:
-        for segment in image.iter_segments_by_type("PT_LOAD"):
-            h = segment.header
-            if starts[0] >= h.p_vaddr and starts[0] + sizes[0] <= h.p_vaddr + h.p_filesz:
-                offsets.add(h.p_offset + starts[0] - h.p_vaddr)
-    if len(offsets) != 1:
-        raise LayoutFailure("unsupported-target", "Dynamic string table lacks a unique file-backed mapping: " + repr({"DT_STRTAB": starts, "DT_STRSZ": sizes, "candidate_file_offsets": sorted(offsets)}))
-    return name_in_table(None, offsets.pop(), sizes[0], offset, content)
-
-
-def symbol_value_meaning(raw, image_type, sections):
-    index = raw.st_shndx
-    if raw.st_info.type == "STT_FILE": return "no-address"
-    if index == "SHN_UNDEF": return "undefined"
-    if index == "SHN_COMMON": return "alignment"
-    if index == "SHN_ABS": return "absolute-value"
-    if not isinstance(index, int) or not 0 < index < len(sections) or index >= 0xff00:
-        return "unknown-section-index"
-    if sections[index].header.sh_type == "SHT_NULL":
-        return "unknown-section-index"
-    if image_type == "ET_REL": return "section-offset"
-    if raw.st_info.type == "STT_TLS": return "tls-offset"
-    return "linked-virtual-address"
-
-
-def relocation_target(image_type, section_index, offset, sections):
-    if image_type != "ET_REL":
-        return {"kind": "linked-virtual-address", "address": address(offset)}
-    if section_index == 0 or sections[section_index].header.sh_type == "SHT_NULL":
-        return {"kind": "unknown-section", "reported_section_index": section_index,
-                "offset": address(offset), "unknown_reason": "undefined-section-reference" if section_index == 0 else "inactive-section-header"}
-    return {"kind": "section-offset", "section_index": section_index, "offset": address(offset)}
-
-
-def inspect_elf(path, cache):
-    for package, expected in PACKAGES.items():
-        try:
-            version = importlib.metadata.version(package)
-        except importlib.metadata.PackageNotFoundError as error:
-            raise LayoutFailure("unavailable", "Selected Python lacks " + package + " " + expected + ".") from error
-        if version != expected:
-            raise LayoutFailure("unsupported", "Expected " + package + " " + expected + "; selected Python reports " + version + ".")
-    content = path.read_bytes()
-    if len(content) < 4 or content[:4] != b"\x7fELF":
-        raise LayoutFailure("format", "Selected object does not contain an ELF header.")
-    if len(content) < 16:
-        raise LayoutFailure("format", "Selected ELF identification is truncated.")
-    if content[4] != 2 or content[5] != 1:
-        raise LayoutFailure("unsupported-target", "Initial layout profile requires ELF64 little-endian objects.")
-    if len(content) < 64:
-        raise LayoutFailure("format", "Selected ELF64 header is truncated.")
-    if int.from_bytes(content[18:20], "little") != 62:
-        raise LayoutFailure("unsupported-target", "Initial layout profile requires x86-64 ELF objects.")
-    if int.from_bytes(content[16:18], "little") not in (1, 2, 3):
-        raise LayoutFailure("unsupported-target", "Selected ELF type is outside the EXEC/DYN/REL layout profile; recorded core analysis is separate.")
-    from pwnlib.context import context
-    with context.local(cache_dir=str(cache), log_level="warning"):
-        from elftools.common.exceptions import ELFError
-        from elftools.elf.elffile import ELFFile
-        from pwnlib.elf import ELF
-        try:
-            headers = ELFFile(io.BytesIO(content))
-            section_count = headers.num_sections()
-            if headers.header.e_shstrndx == 0xffff and section_count == 0:
-                raise LayoutFailure("format", "ELF extended section-name index requires a declared section-zero header.")
-            raw_name_index = headers.header.e_shstrndx
-            if 0xff00 <= raw_name_index < 0xffff:
-                raise LayoutFailure("format", f"ELF section-name index {raw_name_index} is reserved and cannot directly reference a section.")
-            section_name_index = headers.get_shstrndx()
-            if raw_name_index == 0xffff and section_name_index < 0xff00:
-                raise LayoutFailure("format", f"ELF SHN_XINDEX resolves to ordinary index {section_name_index}; the escape requires an index at least SHN_LORESERVE (0xff00).")
-            if section_name_index != 0:
-                if section_name_index >= section_count:
-                    raise LayoutFailure("format", f"ELF section-name table index {section_name_index} lies outside the declared section count {section_count}.")
-                names_header = headers._get_section_header(section_name_index)
-                if names_header.sh_type != "SHT_STRTAB":
-                    raise LayoutFailure("format", f"ELF section-name table {section_name_index} is not SHT_STRTAB.")
-                location(names_header.sh_offset, names_header.sh_size, len(content))
-        except ELFError as error:
-            raise LayoutFailure("format", str(error)) from error
-        class LayoutELF(ELF):
-            def _get_section_name(self, header):
-                # SHN_UNDEF declares no names; upstream would otherwise read
-                # strings at the inactive section-zero offset.
-                return "" if section_name_index == 0 else super()._get_section_name(header)
-
-            # pyelftools 0.33 calls these documented filters internally;
-            # pwntools 4.15.0's cached overrides do not accept the argument.
-            # Forward the filter on this adapter instance, without modifying
-            # either upstream package or process-global methods.
-            def iter_segments(self, type=None):
-                return (segment for segment in super().iter_segments()
-                        if type is None or segment.header.p_type == type)
-
-            def iter_sections(self, type=None):
-                return (section for section in super().iter_sections()
-                        if type is None or section.header.sh_type == type)
-        try:
-            image = LayoutELF(str(path), checksec=False)
-            if image.arch != "amd64" or image.bits != 64 or image.endian != "little":
-                raise LayoutFailure("unsupported-target", "Initial layout profile requires x86-64 ELF64 little-endian objects.")
-            if image.header.e_type not in ("ET_EXEC", "ET_DYN", "ET_REL"):
-                raise LayoutFailure("unsupported-target", "Selected ELF type is outside the EXEC/DYN/REL layout profile; recorded core analysis is separate.")
-            length = len(content)
-            all_sections = list(image.iter_sections())
-            shstrings = image.get_section(section_name_index) if all_sections and section_name_index != 0 else None
-            sections, segments, symbols, relocations, packed_relatives = [], [], [], [], []
-            needed, interpreters = [], []
-            for index, section in enumerate(all_sections):
-                h = section.header
-                backing = h.sh_type not in ("SHT_NOBITS", "SHT_NULL")
-                if backing: location(h.sh_offset, h.sh_size, length)
-                sections.append({
-                    "index": index, "name": name_reference(section.name, shstrings, h.sh_name, content) if shstrings is not None else {"display": "", "bytes_base64": None, "location": None, "unknown_reason": "ELF declares no section-name table (SHN_UNDEF index 0)."}, "name_offset": address(h.sh_name), "type": h.sh_type,
-                    "header_location": location(image.header.e_shoff + index * image.header.e_shentsize, image.header.e_shentsize, length),
-                    "address": address(h.sh_addr), "offset": address(h.sh_offset),
-                    "size": address(h.sh_size), "alignment": address(h.sh_addralign),
-                    "flags": address(h.sh_flags), "link": h.sh_link, "info": h.sh_info,
-                    "entry_size": address(h.sh_entsize), "file_backing": "file" if backing else "none",
-                })
-                if h.sh_type in ("SHT_SYMTAB", "SHT_DYNSYM"):
-                    if h.sh_entsize < image.structs.Elf_Sym.sizeof():
-                        raise LayoutFailure("format", "ELF symbol entry is smaller than the decoded Elf64_Sym structure.")
-                    if h.sh_link >= len(all_sections) or all_sections[h.sh_link].header.sh_type != "SHT_STRTAB":
-                        raise LayoutFailure("format", f"ELF symbol table {index} links to invalid string table {h.sh_link}.")
-                    strings = all_sections[h.sh_link]
-                    for entry, symbol in enumerate(section.iter_symbols()):
-                        raw = symbol.entry
-                        symbols.append({
-                            "table_index": index, "entry_index": entry,
-                            "name": name_reference(symbol.name, strings, raw.st_name, content), "name_offset": address(raw.st_name),
-                            "location": location(h.sh_offset + entry * h.sh_entsize, h.sh_entsize, length),
-                            "value": address(raw.st_value), "value_meaning": symbol_value_meaning(raw, image.header.e_type, all_sections),
-                            "size": address(raw.st_size), "binding": raw.st_info.bind, "type": raw.st_info.type,
-                            "visibility": raw.st_other.visibility, "section_index": raw.st_shndx,
-                        })
-                if h.sh_type in ("SHT_REL", "SHT_RELA"):
-                    if image.header.e_type == "ET_REL" and h.sh_info >= len(all_sections):
-                        raise LayoutFailure("format", f"ELF relocation section {index} references missing target section {h.sh_info}.")
-                    symbol_table = None
-                    if h.sh_link != 0:
-                        if h.sh_link >= len(all_sections) or all_sections[h.sh_link].header.sh_type not in ("SHT_SYMTAB", "SHT_DYNSYM"):
-                            raise LayoutFailure("format", f"ELF relocation section {index} links to invalid symbol table {h.sh_link}.")
-                        symbol_table = all_sections[h.sh_link]
-                    for entry, relocation in enumerate(section.iter_relocations()):
-                        raw = relocation.entry
-                        if raw.r_info_sym != 0 and (symbol_table is None or raw.r_info_sym >= symbol_table.num_symbols()):
-                            raise LayoutFailure("format", f"ELF relocation section {index} entry {entry} references missing symbol {raw.r_info_sym} in table {h.sh_link}.")
-                        relocations.append({
-                            "section_index": index, "entry_index": entry, "reported_offset": address(raw.r_offset),
-                            "target": relocation_target(image.header.e_type, h.sh_info, raw.r_offset, all_sections),
-                            "location": location(h.sh_offset + entry * h.sh_entsize, h.sh_entsize, length),
-                            "type": raw.r_info_type, "symbol_table_index": h.sh_link, "symbol_index": raw.r_info_sym,
-                            "symbol_reference_meaning": "zero-symbol-value" if raw.r_info_sym == 0 else "symbol-table-entry",
-                            "addend": None if "r_addend" not in raw else str(raw.r_addend),
-                        })
-                if h.sh_type == "SHT_RELR":
-                    packed_relatives.append({
-                        "section_index": index,
-                        "location": location(h.sh_offset, h.sh_size, length),
-                        "encoded_bytes_base64": base64.b64encode(content[h.sh_offset:h.sh_offset + h.sh_size]).decode("ascii"),
-                        "entries": [{"decoded_index": decoded, "reported_offset": address(relocation.entry.r_offset)} for decoded, relocation in enumerate(section.iter_relocations())],
-                        "offset_meaning": "unknown" if image.header.e_type == "ET_REL" else "linked-virtual-address",
-                        "evidence_kind": "derived", "entry_source_locations": None, "addends": None,
-                    })
-            for index, segment in enumerate(image.iter_segments()):
-                h = segment.header
-                backing = h.p_type != "PT_NULL" and h.p_filesz != 0
-                if backing: location(h.p_offset, h.p_filesz, length)
-                if h.p_type == "PT_LOAD" and h.p_memsz < h.p_filesz:
-                    raise LayoutFailure("format", "ELF load segment memory size is smaller than its file size.")
-                segments.append({
-                    "index": index, "type": h.p_type, "offset": address(h.p_offset),
-                    "header_location": location(image.header.e_phoff + index * image.header.e_phentsize, image.header.e_phentsize, length),
-                    "file_size": address(h.p_filesz), "memory_size": address(h.p_memsz),
-                    "virtual_address": address(h.p_vaddr), "physical_address": address(h.p_paddr),
-                    "alignment": address(h.p_align), "flags": address(h.p_flags),
-                    "file_backing": "file" if backing else "none",
-                    "permissions": None if h.p_type == "PT_NULL" else {"read": bool(h.p_flags & 4), "write": bool(h.p_flags & 2), "execute": bool(h.p_flags & 1)},
-                })
-                if h.p_type == "PT_DYNAMIC":
-                    tag_size = image.structs.Elf_Dyn.sizeof()
-                    tags = []
-                    for tag_index in range(h.p_filesz // tag_size):
-                        tag = segment._get_tag(tag_index)
-                        tags.append(tag)
-                        if tag.d_tag == "DT_NULL":
-                            break
-                    else:
-                        raise LayoutFailure("format", f"ELF dynamic segment {index} has no complete DT_NULL terminator within its reported file range.")
-                    for tag in tags:
-                        if tag.d_tag == "DT_NEEDED":
-                            needed.append(dynamic_name_reference(tags, tag.d_val, image, content))
-                if h.p_type == "PT_INTERP":
-                    raw = content[h.p_offset:h.p_offset + h.p_filesz]
-                    end = raw.find(b"\0")
-                    if end < 0:
-                        raise LayoutFailure("format", "ELF interpreter lacks a reported terminator.")
-                    interpreters.append({"display": raw[:end].decode("utf-8", "replace"), "bytes_base64": base64.b64encode(raw[:end]).decode("ascii"), "location": location(h.p_offset, end + 1, length), "unknown_reason": None})
-            return {
-                "format": "elf", "architecture": {"machine": image.header.e_machine, "bits": image.bits, "byte_order": image.endian},
-                "image_type": image.header.e_type,
-                "entry_point": {"reported_value": address(image.header.e_entry), "meaning": "not-applicable" if image.header.e_type == "ET_REL" else "absent" if image.header.e_entry == 0 else "linked-virtual-address", "execution_status": "unknown"},
-                "runtime_load_base": None, "sections": sections, "segments": segments, "symbols": symbols, "relocations": relocations,
-                "packed_relative_relocations": packed_relatives, "relocation_inventory_completeness": "unknown",
-                "linkage": {"needed_libraries": needed, "interpreters": interpreters,
-                    "got": [{"display_name": name, "address": address(value)} for name, value in image.got.items()],
-                    "plt": [{"display_name": name, "address": address(value)} for name, value in image.plt.items()],
-                    "convenience_maps_completeness": "unknown", "runtime_library_paths": None},
-                "mitigations": {"evidence_kind": "inferred", "position_independent": image.pie, "nx_indicator": image.nx, "executable_stack_indicator": image.execstack, "stack_canary_indicator": image.canary, "relro": image.relro},
-                "limitations": [
-                    "PT_NULL payload fields are unused and retain their reported numbers without file-byte or permission claims. Zero-file-size segments provide no file bytes.",
-                    "SHN_XINDEX symbol values remain unresolved in this upstream representation; an external index table does not establish a resolved index in this report.",
-                    "Reported values preserve linked addresses, section offsets, TLS offsets, alignment and absolute values separately. Runtime load base and library paths are unknown.",
-                    "Names are display strings plus raw bytes and file ranges where resolvable; section/table/entry indices preserve identity and duplicates. Name ranges include their terminating NUL; raw name bytes exclude it.",
-                    "Ordinary relocation rows cover REL/RELA. RELR tables retain complete encoded bytes and upstream-decoded offsets as derived evidence; per-offset packed-word locations and implicit addends remain unknown. Relocation inventory completeness is unknown, including other encodings and missing section tables.",
-                    "Relocation symbol index zero uses a zero symbol value without a table lookup. Positive indices reference validated original symbol-table entries; raw table and symbol indices remain reported.",
-                    "Relocatable relocation targets with SHN_UNDEF or inactive SHT_NULL headers retain their reported section index/offset as unknown; they do not establish an associated target section.",
-                    "GOT/PLT are derived upstream convenience maps; PLT inference can emulate selected instructions in Unicorn. They do not establish target runtime behavior; aliases may collapse and warnings may indicate incomplete coverage. Their completeness is unknown.",
-                    "Mitigations are upstream static heuristics, not runtime protection. ET_DYN does not prove an executable; absent canary symbols do not prove every function unprotected.",
-                    "This profile inspects ELF EXEC/DYN/REL layout only. It does not analyze recorded cores, resolve loaded libraries, launch the target as a host process or start a debugger.",
-                    "Symbol/relocation inventories reflect original section tables. A sectionless image can still report dynamic dependency names; missing tables do not prove absence of dynamic symbols or relocations.",
-                    *(["Absent section-name table: section-dependent RELRO/canary heuristics may be incomplete; protection coverage is unknown."] if all_sections and section_name_index == 0 else []),
-                    *(["Sectionless images lack the .dynamic section and symbol tables used by upstream heuristics. RELRO/canary indicators may be incomplete; their values remain reported static candidates, with protection coverage unknown."] if not all_sections else []),
-                ],
-            }
-        except LayoutFailure:
-            raise
-        except (ELFError, ValueError, AssertionError, IndexError) as error:
-            raise LayoutFailure("format", "Selected ELF failed unchanged upstream structural parsing: " + str(error)) from error
-
-
-
-if __name__ == "__main__":
-    runtime_path = Path(__file__).with_name("decoder_runtime.py")
-    runtime = {"__file__": str(runtime_path), "__name__": "rea_decoder_runtime"}
-    exec(compile(runtime_path.read_bytes(), str(runtime_path), "exec"), runtime)
-    runtime["main"](sys.argv[-1], inspect_elf, LayoutFailure, PROFILE)
@@ -1,39 +0,0 @@
-"""Catch typed resource failures while loading or running the owned recorded-core adapter.
-
-Only this package's fixed sibling is executed; caller input stays in request.json.
-Interpreter startup failures before this boundary remain unclassified.
-"""
-import os
-import sys
-
-
-def resource_exit(status, marker):
-    try:
-        if len(sys.argv) > 2:
-            descriptor = os.open(sys.argv[1], os.O_WRONLY | os.O_CREAT | os.O_EXCL, 0o600)
-            os.write(descriptor, marker)
-            os.close(descriptor)
-    except (OSError, MemoryError):
-        # Without a complete marker the parent keeps this failure unclassified.
-        pass
-    os._exit(status)
-
-try:
-    implementation = os.path.join(os.path.dirname(__file__), "recorded_crash_impl.py")
-    with open(implementation, "rb") as handle:
-        source = handle.read()
-    exec(compile(source, implementation, "exec"), {
-        "__file__": implementation,
-        "__name__": "__main__",
-    })
-except MemoryError:
-    # Reserved status: an observed allocation failure, including imports/compile.
-    resource_exit(75, b"M")
-except OSError as error:
-    # Linux ENOMEM is an observed allocation failure, independent of error text.
-    if error.errno == 12:
-        resource_exit(75, b"M")
-    # Linux EFBIG is observed directly, including a partial limits/reply write.
-    if error.errno == 27:
-        resource_exit(76, b"F")
-    raise
@@ -1,143 +0,0 @@
-"""Bounded Linux core evidence via unchanged ELFFile/structs and pwntools ctypes.
-
-No Corefile-selected thread, executable guessing, process lookup or target launch.
-"""
-import base64
-import ctypes
-import importlib.metadata
-import io
-from pathlib import Path
-import sys
-
-PROFILE = "pwntools@4.15.0;pyelftools@0.33;unicorn@2.1.2"
-
-
-class CoreFailure(Exception):
-    def __init__(self, reason, message):
-        super().__init__(message)
-        self.reason = reason
-
-
-def encoded(value):
-    return base64.b64encode(value).decode("ascii")
-
-
-def location(offset, size, limit):
-    if not 0 <= offset <= limit or not 0 <= size <= limit - offset:
-        raise CoreFailure("format", "Recorded source range exceeds its declared container.")
-    return {"offset": hex(offset), "bytes": hex(size)}
-
-
-def inspect_core(path, cache):
-    for package, required in {"pwntools": "4.15.0", "pyelftools": "0.33", "unicorn": "2.1.2"}.items():
-        try:
-            actual = importlib.metadata.version(package)
-        except importlib.metadata.PackageNotFoundError as error:
-            raise CoreFailure("unavailable", "Selected Python lacks " + package + " " + required + ".") from error
-        if actual != required:
-            raise CoreFailure("unsupported", "Expected " + package + " " + required + "; selected Python reports " + actual + ".")
-    content = path.read_bytes()
-    if len(content) < 16 or content[:4] != b"\x7fELF":
-        raise CoreFailure("format", "Selected recording lacks a complete ELF identification.")
-    if content[4:6] != b"\x02\x01":
-        raise CoreFailure("unsupported-target", "Initial recorded-core profile requires ELF64 little-endian.")
-    if len(content) < 64:
-        raise CoreFailure("format", "Selected ELF64 core header is truncated.")
-    # Linux commonly emits ELFOSABI_NONE (0), also accepted as GNU/Linux (3).
-    # Other declared OSABIs must never select Linux note ctypes.
-    if content[7] not in (0, 3) or content[8] != 0:
-        raise CoreFailure("unsupported-target", "Initial recorded-core profile requires System V or GNU/Linux OSABI with ABI version zero; selected OSABI=" + str(content[7]) + ", ABI version=" + str(content[8]) + ".")
-    if int.from_bytes(content[16:18], "little") != 4 or int.from_bytes(content[18:20], "little") != 62:
-        raise CoreFailure("unsupported-target", "Initial recorded-core profile requires x86-64 ET_CORE.")
-    from elftools.common.exceptions import ELFError
-    from elftools.common.utils import struct_parse
-    from elftools.elf.elffile import ELFFile
-    from pwnlib.elf.datatypes import elf_prstatus_amd64, elf_siginfo_64, user_regs_struct_amd64
-    try:
-        image = ELFFile(io.BytesIO(content))
-        header = image.header
-        count = image.num_segments()
-        if count and header.e_phentsize < image.structs.Elf_Phdr.sizeof():
-            raise CoreFailure("format", "Program-header entry is shorter than the required ELF64 structure.")
-        location(header.e_phoff, count * header.e_phentsize, len(content))
-        segments, notes, padding, threads, signals = [], [], [], [], []
-        for segment_index, segment in enumerate(image.iter_segments()):
-            h = segment.header
-            backing = h.p_type != "PT_NULL" and h.p_filesz > 0
-            if backing:
-                location(h.p_offset, h.p_filesz, len(content))
-            if h.p_type == "PT_LOAD" and h.p_filesz > h.p_memsz:
-                raise CoreFailure("format", "Recorded PT_LOAD file bytes exceed memory size.")
-            segments.append({"index": segment_index, "type": h.p_type,
-                             "header_location": location(header.e_phoff + segment_index * header.e_phentsize, header.e_phentsize, len(content)),
-                             "offset": hex(h.p_offset), "file_size": hex(h.p_filesz), "memory_size": hex(h.p_memsz),
-                             "virtual_address": hex(h.p_vaddr), "physical_address": hex(h.p_paddr), "alignment": hex(h.p_align), "flags": hex(h.p_flags), "file_backing": "file" if backing else "none"})
-            if h.p_type != "PT_NOTE" or h.p_filesz == 0:
-                continue
-            position, end = h.p_offset, h.p_offset + h.p_filesz
-            header_size = image.structs.Elf_Nhdr.sizeof()
-            while position < end:
-                if end - position < header_size:
-                    raw = content[position:end]
-                    if any(raw):
-                        raise CoreFailure("format", "Nonzero trailing note bytes lack a complete note header.")
-                    padding.append({"segment_index": segment_index, "location": location(position, len(raw), end), "bytes_base64": encoded(raw)})
-                    break
-                note = struct_parse(image.structs.Elf_Nhdr, image.stream, stream_pos=position)
-                owner_start = position + header_size
-                descriptor_start = owner_start + ((note.n_namesz + 3) // 4) * 4
-                note_end = descriptor_start + ((note.n_descsz + 3) // 4) * 4
-                location(position, note_end - position, end)
-                owner = content[owner_start:owner_start + note.n_namesz]
-                if owner and b"\0" not in owner:
-                    raise CoreFailure("format", "Declared note owner has no NUL terminator.")
-                display = owner.split(b"\0", 1)[0].decode("utf-8", "replace") if owner else None
-                descriptor = content[descriptor_start:descriptor_start + note.n_descsz]
-                note_index = len(notes)
-                notes.append({"index": note_index, "segment_index": segment_index, "type": note.n_type,
-                              "location": location(position, note_end - position, end),
-                              "owner_location": location(owner_start, len(owner), end), "owner_bytes_base64": encoded(owner), "owner_display": display,
-                              "descriptor_location": location(descriptor_start, len(descriptor), end), "descriptor_bytes_base64": encoded(descriptor)})
-                position = note_end
-                # Only the initial Linux CORE ABI is interpreted. Other owners retain exact bytes.
-                if owner != b"CORE\0":
-                    continue
-                if note.n_type == "NT_PRSTATUS":
-                    if len(descriptor) < ctypes.sizeof(elf_prstatus_amd64):
-                        raise CoreFailure("format", "Linux amd64 NT_PRSTATUS descriptor is truncated.")
-                    status = elf_prstatus_amd64.from_buffer_copy(descriptor)
-                    registers = []
-                    for name, kind in user_regs_struct_amd64._fields_:
-                        relative = elf_prstatus_amd64.pr_reg.offset + getattr(user_regs_struct_amd64, name).offset
-                        registers.append({"name": name, "value": hex(getattr(status.pr_reg, name)), "location": location(descriptor_start + relative, ctypes.sizeof(kind), end)})
-                    threads.append({"note_index": note_index, "historical_pid": ctypes.c_int32(status.pr_pid).value, "recorded_current_signal": status.pr_cursig, "registers": registers})
-                elif note.n_type == "NT_SIGINFO":
-                    if len(descriptor) < ctypes.sizeof(elf_siginfo_64):
-                        raise CoreFailure("format", "Linux amd64 NT_SIGINFO descriptor is truncated.")
-                    signal = elf_siginfo_64.from_buffer_copy(descriptor)
-                    number = ctypes.c_int32(signal.si_signo).value
-                    code = ctypes.c_int32(signal.si_code).value
-                    known = number == 11 and code in (1, 2)
-                    signals.append({"note_index": note_index, "number": number, "code": code, "errno": ctypes.c_int32(signal.si_errno).value,
-                                    "fault_address": hex(signal.sigfault_addr) if known else None,
-                                    "fault_address_meaning": "recorded-sigsegv-address" if known else "unknown", "thread_association": "unknown"})
-        return {"format": "elf-core", "architecture": "x86_64-little-endian", "target_execution": "not-performed", "live_process_identity": "unknown",
-                "segments": segments, "notes": notes, "note_padding": padding, "threads": threads, "signals": signals,
-                "note_interpretation_completeness": "unknown",
-                "limitations": ["The initial Linux note profile accepts System V/unspecified or GNU/Linux OSABI with ABI version zero; an unspecified OSABI alone does not prove operating-system origin.",
-                                "Historical PID and signal values are recorded metadata, not current process identity or attach authority.",
-                                "Only exact Linux CORE NT_PRSTATUS/NT_SIGINFO owners are interpreted; every descriptor and owner retains original bytes. Other note semantics remain unknown.",
-                                "NT_SIGINFO thread association is unknown. Only SIGSEGV SEGV_MAPERR/SEGV_ACCERR initially establish a fault-address union meaning.",
-                                "PT_LOAD file bytes are recorded bytes. Undumped memory and current executable/library identity remain unknown; no current host file is resolved from a recorded pathname.",
-                                "Missing notes/registers/signals do not establish their absence at the original crash. Full unwinding, executable pairing and live control are not provided."]}
-    except CoreFailure:
-        raise
-    except (ELFError, ValueError, AssertionError, IndexError) as error:
-        raise CoreFailure("format", "Recorded core failed unchanged upstream structural parsing: " + str(error)) from error
-
-
-if __name__ == "__main__":
-    runtime_path = Path(__file__).with_name("decoder_runtime.py")
-    runtime = {"__file__": str(runtime_path), "__name__": "rea_decoder_runtime"}
-    exec(compile(runtime_path.read_bytes(), str(runtime_path), "exec"), runtime)
-    runtime["main"](sys.argv[-1], inspect_core, CoreFailure, PROFILE)
@@ -1,85 +0,0 @@
-import { defineConfig } from "vitepress";
-
-export default defineConfig({
-  title: "REA",
-  description:
-    "Reverse engineer binaries, applications, and runtime behavior with one CLI and MCP server.",
-  lang: "en-US",
-  base: "/rea/",
-  themeConfig: {
-    nav: [
-      { text: "Get started", link: "/installation" },
-      { text: "Reference", link: "/mcp-contracts" },
-      { text: "Roadmap", link: "/roadmap" },
-    ],
-    sidebar: [
-      {
-        text: "Getting started",
-        items: [
-          { text: "Installation and setup", link: "/installation" },
-          { text: "CLI and Evidence", link: "/cli" },
-          { text: "Agent prompts", link: "/mcp-prompts" },
-          { text: "Roadmap", link: "/roadmap" },
-        ],
-      },
-      {
-        text: "Investigation guides",
-        items: [
-          { text: "Native binaries", link: "/native-investigation" },
-          {
-            text: "JavaScript and Electron",
-            link: "/javascript-artifact-reconstruction",
-          },
-          {
-            text: "JavaScript workflows",
-            link: "/javascript-application-workflows",
-          },
-          { text: "Browser observation", link: "/browser-observation" },
-          { text: "Electron observation", link: "/electron-observation" },
-          { text: "Process capture", link: "/process-capture" },
-          { text: ".NET assemblies", link: "/managed-code-analysis" },
-          { text: "Android applications", link: "/android-analysis" },
-          { text: "Apple applications", link: "/apple-application-analysis" },
-          { text: "Firmware", link: "/firmware-analysis" },
-          {
-            text: "Reconstruction readiness",
-            link: "/reconstruction-readiness",
-          },
-        ],
-      },
-      {
-        text: "Provider guides",
-        collapsed: true,
-        items: [
-          { text: "IDA", link: "/ida-provider" },
-          { text: "Ghidra on Windows", link: "/windows-ghidra-p0" },
-          { text: "Ghidra DOS analysis", link: "/ghidra-dos" },
-          { text: "Ghidra NativeAOT", link: "/ghidra-nativeaot" },
-          { text: "Provider evaluation", link: "/provider-evaluation" },
-        ],
-      },
-      {
-        text: "Reference and development",
-        collapsed: true,
-        items: [
-          { text: "MCP contracts", link: "/mcp-contracts" },
-          { text: "Tool design", link: "/tool-design" },
-          { text: "Testing", link: "/testing" },
-          { text: "Releasing", link: "/releasing" },
-          { text: "Architecture decisions", link: "/adr/README" },
-        ],
-      },
-    ],
-    search: { provider: "local" },
-    socialLinks: [
-      { icon: "github", link: "https://github.com/morluto/rea" },
-      { icon: "discord", link: "https://discord.gg/GkcryMnJDM" },
-    ],
-    editLink: {
-      pattern: "https://github.com/morluto/rea/edit/main/docs/:path",
-    },
-    footer: {
-      message: "Released under the MIT License.",
-    },
-  },
-});
@@ -29,12 +29,12 @@ same bytes could therefore disagree because of language, compiler, loader,
 analyzer, or provider-version differences while appearing target-compatible.

 The decision addressed the earlier representations of
-[`CompositeProvider`](https://github.com/morluto/rea/blob/main/src/application/binary/CompositeProvider.ts),
-[runtime composition](https://github.com/morluto/rea/blob/main/src/composition/binary.ts),
-[`BinarySession`](https://github.com/morluto/rea/blob/main/src/application/binary/BinarySession.ts),
-[`BinaryTarget`](https://github.com/morluto/rea/blob/main/src/domain/binaryTarget.ts),
-[analysis snapshot](https://github.com/morluto/rea/blob/main/src/domain/analysisSnapshot.ts), and
-[session lifecycle inputs](https://github.com/morluto/rea/blob/main/src/contracts/sessionLifecycleInputs.ts).
+[`CompositeProvider`](../../src/application/CompositeProvider.ts),
+[runtime composition](../../src/application/runtime.ts),
+[`BinarySession`](../../src/application/BinarySession.ts),
+[`BinaryTarget`](../../src/domain/binaryTarget.ts),
+[analysis snapshot](../../src/domain/analysisSnapshot.ts), and
+[session lifecycle inputs](../../src/contracts/sessionLifecycleInputs.ts).

 The next deep provider must not weaken the existing product invariants:

@@ -2,7 +2,7 @@

 REA wraps an existing headless JADX engine through `src/android/`. Its source is
 kept as an unmodified, commit-pinned Git submodule; see
-[upstream provenance](https://github.com/morluto/rea/blob/main/third_party/README.md). CLI and MCP use the same
+[upstream provenance](../third_party/README.md). CLI and MCP use the same
 application workflow and return artifact-bound Evidence inline.

 This family is present on repository main and in npm 4.1.0. Check the
@@ -11,9 +11,7 @@ connected server's tool list before selecting it.

 ## Supply tools

-Use a **full JDK 17 or newer** (including its compiler module) and
-**jadx-headless-mcp 0.7.1**. REA runs its packaged Java metadata bridge in
-source-file mode against the unmodified engine JAR. REA does not install Java,
+Use **Java 17 or newer** and **jadx-headless-mcp 0.7.1**. REA does not install Java,
 an Android SDK, JADX, a device service or an emulator. Set the path in the shell
 or MCP server environment:

@@ -23,9 +21,8 @@ export REA_JADX_MCP_JAR=/absolute/path/jadx-headless-mcp-0.7.1-all.jar
 export JAVA_HOME=/absolute/path/existing-jdk
 ```

-The current metadata bridge is verified on macOS arm64 with OpenJDK 21 and the
-public Appium ApiDemos fixture. The POSIX adapter also supports Linux; the new
-bridge has not yet undergone real verification on Linux/JDK 25.
+Linux is verified with the public Appium ApiDemos fixture. The POSIX adapter can
+run on macOS, but that host has not undergone real Android verification.
 Windows is unsupported for this provider's owned stdio process boundary.

 ## Answer an analyst question
@@ -75,10 +72,7 @@ selected overload. Native/abstract methods with no decompiled body report
  Signature verification is explicitly `not_performed`.
 - Class search consumes all pages and checks their counts. An empty `query`
  inventories all class names; class names are decompiler representations.
- Class inventories read parsed metadata without generating source and return
-  full reported display types, fields and inner class names. Synthetic members
-  that code generation hides can appear in the inventory; it stays consistent
-  after method decompilation within the retained session.
+- Class inventories return display signatures, fields and inner class names.
  Exact DEX descriptors are unknown. Overload indices are tied to this artifact
  and engine, not stable identities across different builds.
 - Method inspection reports Java or smali, fallback markers and complete/partial
@@ -94,69 +88,28 @@ selected overload. Native/abstract methods with no decompiled body report
 These operations do not execute the APK or provide split APK/AAB handling,
 signature validation, full resource-table semantics, native-library analysis or
 Android runtime capture. Existing artifact inventory/extraction tools can supply
-archive evidence. Project that Evidence with the execution-free inventory tool:
-
-```sh
-rea project-android-application-graph '{"inventory_evidence":[<inventory_artifact Evidence>]}'
-```
-
-```json
-{
-  "name": "project_android_application_graph",
-  "arguments": {
-    "inventory_evidence": ["<inventory_artifact Evidence>"]
-  }
-}
-```
-
-The projection reports exact component paths and hashes, runtime-family hints,
-and path-based bridge hypotheses. It does not decode DEX or claim observed
-runtime calls.
+archive evidence; `project_android_application_graph` remains a separate,
+execution-free inventory projection.

 ## Resource and lifecycle limits

-REA retains one serialized session with private, immutable APK, engine JAR and
-metadata-bridge copies. Matching requests reuse the loaded engine. APK/engine
-digests and JVM configuration are checked before reuse; changed inputs retire
-the previous session. Sessions are cleaned after 60 seconds of inactivity, on
-target/configuration changes, failure, timeout, cancellation, MCP disconnect or
-server shutdown. One-shot CLI commands always join cleanup before returning.
+Each request creates private, immutable APK and JAR copies. Their workspace and
+owned process group are cleaned on success, failure, timeout and cancellation.
 REA never writes to the original APK or launches target code.

 If process cleanup cannot be confirmed, REA retains the workspace and reports its
 location. That provider instance blocks subsequent engine launches until the
 caller resolves the reported resources and starts a fresh instance.

-The provider uses one JADX analysis worker independently of JVM processor and
-garbage-collector settings. REA supplies no default heap or visible-CPU override;
-Java uses its normal ergonomics and inherits caller JVM settings. Optional
-provider settings add explicit JVM arguments:
-
-```sh
-export REA_JADX_HEAP_MIB=8192
-# Optional, independent of the single JADX worker:
-export REA_JADX_ACTIVE_PROCESSOR_COUNT=4
-# Or select settings through Java's standard environment options:
-export JAVA_TOOL_OPTIONS=-Xmx8g
-```
-
-Both REA settings must be positive safe integers; processor counts must also fit
-the JVM's signed 32-bit range. REA preserves
-`JAVA_TOOL_OPTIONS`, `JDK_JAVA_OPTIONS` and `_JAVA_OPTIONS` rather than replacing
-them. Java's standard precedence applies: explicit command-line heap settings
-override `JAVA_TOOL_OPTIONS`, while `_JAVA_OPTIONS` can override command-line
-settings. Evidence reports the worker's observed `Runtime.maxMemory()` rounded
-down to MiB and retains exact bytes, Java version and visible processors in its
-raw runtime response. The observed allocatable heap can differ from configured
-`-Xmx`, especially with Serial GC. Heap is not a total RSS cap: the JVM also
+The provider serializes requests within each REA instance, uses one worker and
+sets JVM maximum heap to **512 MiB**. Heap is not a total RSS cap: the JVM also
 uses native memory. Independent REA instances have independent queues. Whole
 operations have a **120-second** execution deadline after reaching the queue's
 front; upstream decompilation is limited to **90 seconds**.

 Decoded manifest and method text have a **1 MiB** upstream byte budget and report
-truncation. Class-name pages use indexed slices of up to 4,096 names without changing the
-complete, case-sensitive search contract. A protocol frame above **8 MiB**, or combined stdout/stderr above
-**32 MiB per operation**, fails with a diagnostic instead of returning an incomplete inventory
+truncation. A protocol frame above **8 MiB**, or cumulative stdout/stderr above
+**32 MiB**, fails with a diagnostic instead of returning an incomplete inventory
 as complete. These are memory-safety boundaries, not undocumented result caps.

 ## Real verification
@@ -1,24 +1,10 @@
 # Apple Application Inventory Projection

 REA can project one or more authenticated `inventory_artifact` Evidence records
-for the same IPA, macOS `.app` directory, ZIP, or DMG into an Apple application
-inventory. The projection is execution-free: it reports exact paths, content
-hashes, detected formats, bundle anatomy, runtime-family hints, and path-based
-bridge hypotheses. It does not parse plist or CMS semantics or claim observed
-runtime calls.
-
-```sh
-rea project-apple-application-graph '{"inventory_evidence":[<inventory_artifact Evidence>]}'
-```
-
-```json
-{
-  "name": "project_apple_application_graph",
-  "arguments": {
-    "inventory_evidence": ["<inventory_artifact Evidence>"]
-  }
-}
-```
+for the same IPA into an Apple application inventory. The projection is
+execution-free: it reports exact paths, content hashes, detected formats,
+runtime-family hints, and path-based bridge hypotheses. It does not parse plist
+or CMS semantics or claim observed runtime calls.

 The result includes every component in each inventory category and every
 JavaScript-to-native bridge candidate pair. It has no caller-selected component
@@ -30,158 +16,3 @@ Coverage is `complete-within-inventory` when the supplied pages reconstruct the
 complete authenticated inventory, and `partial` otherwise. A partial result
 states that absence is unknown. Component and bridge-candidate arrays are still
 the complete projection of the inventory that was supplied.
-
-## Application roots
-
-| Inventory root                         | Application root                                    |
-| -------------------------------------- | --------------------------------------------------- |
-| IPA                                    | Each `Payload/<Name>.app`                           |
-| `.app` directory                       | `.`, the inventoried bundle itself                  |
-| Directory, ZIP, or DMG containing apps | Each outermost `<Name>.app` followed by `Contents/` |
-
-ZIP archives made with `ditto -c -k --keepParent` report `<Name>.app`. A DMG
-reports `<image>.dmg/<Volume>/<Name>.app`; DMG child inventory needs the native
-macOS mounting adapter. When a DMG has only its root identity, the projection is
-`partial` and says that bundle absence is unknown. Other inventory formats, such
-as APK or ASAR, are rejected as input errors.
-
-An inventoried directory whose name ends in `.app` is its own root even when its
-inventory is partial or lacks `Contents/`. For directory, ZIP, and DMG
-inventories, components outside every application root are not attributed to
-the application. This covers installers, disk-image extras, and AppleDouble
-sidecars, which therefore stay out of runtime families and bridge candidates. A
-limitation reports how many inventoried entries were left out. IPA projection
-still lists every archive component, including `SwiftSupport/`.
-
-`platforms` lists `macos` for application roots with `Contents/`. It lists `ios`
-for shallow application roots that have an `Info.plist`. An application root
-with neither, such as an empty inventory, has no platform.
-
-## macOS bundle anatomy
-
-`bundles` lists each application root and every nested bundle under it. Each
-bundle reports its `parent_path`, `layout`, `info_plist_path`,
-`executable_candidates`, and `signing_paths`.
-
-| Layout                | Meaning         | Content directory                             |
-| --------------------- | --------------- | --------------------------------------------- |
-| `macos-deep`          | Has `Contents/` | `Contents/`, executables in `Contents/MacOS/` |
-| `versioned-framework` | Has `Versions/` | Each real `Versions/<version>/`               |
-| `shallow`             | Neither         | The bundle directory itself                   |
-
-Roles are path conventions (`role_basis: "path-convention"`):
-
-| Role                 | Path                                                            |
-| -------------------- | --------------------------------------------------------------- |
-| `app-extension`      | `*.appex`                                                       |
-| `xpc-service`        | `*.xpc`, including XPC services inside frameworks               |
-| `framework`          | `*.framework`                                                   |
-| `system-extension`   | `*.systemextension`                                             |
-| `driver-extension`   | `*.dext`                                                        |
-| `plug-in`            | `PlugIns/*.bundle`, `*.plugin`, `*.qlgenerator`, `*.mdimporter` |
-| `resource-bundle`    | `Resources/*.bundle`, such as SwiftPM resource bundles          |
-| `bundle`             | Any other `*.bundle`                                            |
-| `login-item`         | `Contents/Library/LoginItems/*.app`                             |
-| `helper-application` | `Contents/Helpers/*.app`                                        |
-| `nested-application` | Any other nested `*.app`                                        |
-
-The components also list:
-
- `privileged_helpers`: files directly in `Contents/Library/LaunchServices/`,
-  where SMJobBless helpers live;
- `launchd_plists`: `.plist` files directly in `Contents/Library/LaunchAgents/`
-  (`domain: "agent"`) or `Contents/Library/LaunchDaemons/` (`domain: "daemon"`),
-  as used by SMAppService;
- `helpers`: files directly in `Contents/Helpers/`.
-
-Symlinks are reported by path in `symlinks`. Their targets are not inventoried,
-so a versioned framework is described through its real `Versions/<version>/`
-directories rather than `Versions/Current`. A framework's `info_plist_path` is
-`null`, with a limitation explaining why, when it has more than one real
-`Versions/<version>/` directory (even if only one of them holds a plist,
-because `Versions/Current` decides which one applies) or when its single
-version directory has no `Resources/Info.plist`.
-
-AppleDouble sidecar files (`._*` and `__MACOSX/`) are inventory facts, but they
-describe neighbouring files. They are excluded from roots, bundle roles, and the
-anatomy components.
-
-The projection does not read plists. Use `inspect_plist` on a bundle's
-`info_plist_path` or a launchd plist to read `CFBundleExecutable`, identifiers,
-`SMPrivilegedExecutables`, `BundleProgram`, URL schemes, and usage descriptions.
-Use `inspect_signature` on an executable candidate for code-signing claims.
-
-## Dylib load resolution
-
-`trace_dylib_resolution` answers which file each Mach-O dylib load reaches. It
-runs on the active Mach-O, or on every executable in the active `.app`. Each
-executable in a bundle (the main app, XPC services, app extensions, login items,
-privileged helpers, and helper tools) is a separate process root with its own
-`@executable_path`.
-
-```sh
-rea trace-dylib-resolution MyApp.app --json
-rea trace-dylib-resolution MyApp.app --root Contents/MacOS/MyApp --architecture arm64 --json
-```
-
-```json
-{
-  "name": "trace_dylib_resolution",
-  "arguments": { "roots": ["Contents/MacOS/MyApp"], "architecture": "arm64" }
-}
-```
-
-Load commands are parsed in TypeScript from Mach-O and FAT headers, including
-the `dylib_use_command` encoding newer linkers emit for flags such as delayed
-initialization. Nothing is executed and no Apple tool is required, so the tool
-also works off macOS.
-
-Resolution follows dyld:
-
- `@executable_path` is the directory of the process root's executable. It is
-  undetermined when the root is a library.
- `@loader_path` is the directory of the image that holds the load command, or
-  of the image that owns the `LC_RPATH` entry being expanded.
- `@rpath` tries each `LC_RPATH` of the loading image first, then those of the
-  image that loaded it, up to the process root.
- Dependencies load dependents-first in load-command order, and each image
-  loads once per process. A later request whose install name matches an
-  already loaded image reuses it.
- Symlinks such as `Versions/Current` are followed inside the analyzed root.
-  An escape through `..` or an absolute link is `escapes-target`.
-
-Each edge lists every candidate path tried, with its outcome: `resolved`,
-`absent`, `not-mach-o`, `malformed`, `unsupported` (recognized Mach-O outside
-parser coverage, such as big-endian images), `architecture-missing`,
-`outside-target`, `escapes-target`, or `undetermined`. Slices follow dyld's
-graded architectures, so an `x86_64h` process also loads `x86_64`. The edge's `resolution` is one of:
-
-| Status         | Meaning                                                                                                                                                   |
-| -------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `resolved`     | An image inside the analyzed root loads, and no earlier candidate was undeterminable.                                                                     |
-| `conditional`  | An image inside the root resolves, but an earlier candidate outside the root (for example `/usr/lib/swift`) would win if it exists on the running system. |
-| `unresolved`   | Every candidate is definitively absent or unusable inside the root.                                                                                       |
-| `undetermined` | No candidate resolves inside the root, and some candidate lies outside it or depends on the environment.                                                  |
-
-A `conditional` image is still traced, because it is the image the analyzed
-root supplies. Every edge below it has `loader_conditional: true`, and a
-request that reuses it by install name is `conditional` too. Findings on those
-edges say that they apply only if the conditional image loads.
-
-Absolute install names such as `/usr/lib/libSystem.B.dylib` are
-`outside-target`. On macOS 11 and later most of them live in the dyld shared
-cache rather than on disk, so REA does not check them against the host.
-
-`findings` are derived, not observed:
-
- `required-load-unresolved`, `weak-load-unresolved`, and `lazy-load-unresolved`.
-  `LC_LAZY_LOAD_DYLIB` dependencies are resolved but not traversed, because dyld
-  loads them on first use; an unresolved one is not a launch failure.
- `earlier-rpath-candidate-absent`: a Mach-O placed at an earlier search path
-  would load first. Whether code-signing library validation would reject it is
-  not evaluated; use `inspect_signature`.
- `dyld-environment-present`: `LC_DYLD_ENVIRONMENT` search paths are not modeled.
-
-`verify:macos-bundle` checks the parser against `otool -l` for every traced
-image. It also compares the predicted load order of two process roots with the
-images dyld actually loads (`DYLD_PRINT_LIBRARIES`).
@@ -5,10 +5,6 @@ graph TD
        DISPATCH["scripts/rea.mjs<br/>Executable dispatcher<br/>routes mcp / one-shot"]
    end

-    subgraph "Production Composition"
-        COMPOSITION["src/composition/<br/>fresh typed provider and session factories<br/>one-shot binding and independent optional loading"]
-    end
-
    subgraph "Adapters"
        SERVER["src/server/<br/>MCP request translation<br/>createServer, tool registration, toolResult"]
        HOPPER_BRIDGE["bridge/hopper_bridge.py<br/>Runs inside Hopper<br/>adapts operations to Hopper Python API"]
@@ -20,22 +16,16 @@ graph TD
        APP["src/application/<br/>Shared CLI/MCP workflows<br/>enhanced analysis and investigations"]
        SESSION["SessionProviderRouter + BinarySession<br/>one immutable deep binding per target<br/>disjoint auxiliary routing"]
        REGISTRY["AnalysisProviderRegistry<br/>sorted deep candidates<br/>deterministic selection, no fallback"]
-        RECORDS["src/application/investigation/<br/>composed InvestigationRecords + narrow ports<br/>EvidenceLedger and Unknown ownership"]
-        SNAPSHOT["BinarySessionRecords + AnalysisSnapshotCache<br/>binary target/profile snapshots<br/>compatibility facade and post-commit notifications"]
-        JS_RECON["src/application/javascript/ + src/artifacts/javascript/<br/>JavaScript artifact reconstruction<br/>directory/ASAR reads<br/>AST-only bundle projection"]
+        JS_RECON["src/application/ + src/artifacts/<br/>JavaScript artifact reconstruction<br/>directory/ASAR reads<br/>AST-only bundle projection"]
    end

    subgraph "Provider Layers"
-        PWNTOOLS["src/native/pwntools/ + src/native/pwndbg/<br/>BYO offline ELF/core adapters<br/>owned snapshots/Python and optional core-only GDB<br/>unchanged upstream parsers, ABI structures and mapping API"]
-        EVM["src/evm/<br/>unchanged EVMole/WASM in bounded owned worker<br/>explicit carrier parsing and inferred interface adapter"]
        HOPPER["src/hopper/<br/>Hopper launch & Unix-socket protocol<br/>BridgeLauncher, HopperClient, protocol"]
        GHIDRA["src/ghidra/<br/>Ghidra discovery, profile & function analysis<br/>snapshot, Unix/Windows transport, bounded lifecycle"]
        IDA["src/ida/<br/>Upstream MCP contract adaptation<br/>live GUI binding or owned headless database"]
        IDA_MCP["External ida-pro-mcp<br/>GUI proxy or database supervisor<br/>upstream installation and engine lifecycle"]
-        AUX["src/artifacts/ + src/native/<br/>artifact inventory and extraction<br/>format readers and native capabilities"]
-        BROWSER["src/browser/<br/>CDP / Playwright capture<br/>captured scripts and native module resolution<br/>execution/: coverage, listener and source attribution"]
-        JS_CODEC["src/javascript/sourceMaps/<br/>pinned upstream map codec<br/>owned heap-limited Node process, complete point evidence"]
-        INSPECTOR["src/inspector/<br/>passive V8 Inspector discovery and capture<br/>script and target locations"]
+        AUX["src/artifacts/ + src/native/<br/>disjoint artifact and native capabilities"]
+        BROWSER["src/browser/<br/>CDP / Playwright capture<br/>captured script adapters and publication"]
        DOTNET["src/dotnet/<br/>Managed static metadata provider<br/>PE/CLI metadata inventory, members, IL"]
        FIRMWARE["src/firmware/<br/>Binwalk / Unblob adapters<br/>owned processes, report normalization, private extraction"]
        ANDROID["src/android/<br/>Static APK adapter<br/>owned SDK stdio, pinned headless JADX, normalization"]
@@ -75,10 +65,6 @@ graph TD
    MAIN --> SERVER
    MAIN --> APP
    CLI --> APP
-    MAIN --> COMPOSITION
-    CLI --> COMPOSITION
-    SERVER --> COMPOSITION
-    COMPOSITION --> SESSION
    APP --> FIRMWARE
    FIRMWARE --> PROCESS
    FIRMWARE --> CONTRACTS
@@ -89,18 +75,9 @@ graph TD
    CLI --> ERRORS
    APP --> SESSION
    SESSION --> REGISTRY
-    SESSION --> SNAPSHOT
-    SNAPSHOT --> RECORDS
-    APP -->|record callbacks| RECORDS
-    SERVER -->|narrow record ports| RECORDS
-    RECORDS --> DOMAIN
-    COMPOSITION --> PWNTOOLS
-    PWNTOOLS --> PROCESS
-    PWNTOOLS --> DOMAIN
-    COMPOSITION --> HOPPER
-    COMPOSITION --> GHIDRA
-    COMPOSITION --> IDA
-    COMPOSITION --> AUX
+    REGISTRY --> HOPPER
+    REGISTRY --> GHIDRA
+    REGISTRY --> IDA
    IDA --> IDA_MCP
    IDA --> CONTRACTS
    IDA --> DOMAIN
@@ -110,12 +87,6 @@ graph TD
    SERVER --> CONTRACTS
    SERVER --> APP
    APP --> BROWSER
-    APP -->|source-map codec port| JS_CODEC
-    JS_CODEC --> PROCESS
-    JS_CODEC --> DOMAIN
-    APP -->|runtime observation port| INSPECTOR
-    INSPECTOR -->|shared CDP and file-location helpers| BROWSER
-    INSPECTOR --> DOMAIN
    APP --> DOTNET
    DOTNET --> DOMAIN
    HOPPER --> HOPPER_BRIDGE
@@ -145,8 +116,3 @@ graph TD
    TESTS -.-> BROWSER
    TESTS -.-> EVALUATION
    TESTS -.-> ERRORS
-
-    COMPOSITION --> EVM
-    APP -->|EVM interface port| EVM
-    EVM --> PROCESS
-    EVM --> DOMAIN
@@ -1,131 +0,0 @@
-# Offline binary diagnostics
-
-`inspect_binary_layout` / `inspect-binary-layout` answers what an explicit
-file contains: section/segment layout, original symbols/relocations, static
-linkage names and mitigation indicators. It works without an active Hopper,
-Ghidra or IDA target. CTF is one possible use; crash triage, compatibility and
-ordinary binary inspection use the same modular capability.
-
-## Bring your own engine
-
-Initial real verification covers **Linux x64, ELF64 x86-64 little-endian
-EXEC/DYN/REL**. Provide an absolute Python executable whose environment already
-contains unchanged pwntools 4.15.0, pyelftools 0.33 and Unicorn 2.1.2:
-
-```sh
-REA_PWNTOOLS_PYTHON=/absolute/isolated-env/bin/python \
-  rea inspect-binary-layout ./selected.elf --json
-```
-
-```json
-{
-  "name": "inspect_binary_layout",
-  "arguments": { "path": "/artifacts/selected.elf" }
-}
-```
-
-REA never installs Python, packages or GDB, changes a user init file, launches
-the selected object as a host process, or requests runtime library resolution. The Python process
-uses isolated mode and an owned cache. Exact upstream profiles are recorded in
-[upstream provenance](https://github.com/morluto/rea/blob/main/third_party/pwntools/README.md).
-
-## Interpreting results
-
- Artifact path, SHA-256 and size identify original selected bytes. All parsing
-  reads an owned stable snapshot; the original is unchanged.
- Addresses, offsets, lengths and flags are hexadecimal strings. A linked
-  address is not a runtime address. Runtime load base remains null. A zero
-  EXEC/DYN entry means absent; a relocatable entry is not applicable.
- Each symbol retains its table and entry index. Its reported value can mean
-  undefined, alignment, absolute value, no address, unknown section index,
-  section offset, TLS offset or linked virtual address. Duplicate names remain
-  separate entries. SHN_XINDEX remains unresolved in the selected upstream
-  representation; its external index table is not silently treated as resolved.
- Relocatable objects have section-relative relocations and no executable entry
-  claim. Signed REL/RELA relocation addends are decimal strings. Packed RELR
-  tables retain full original bytes and upstream-decoded offsets as derived
-  evidence, with per-offset packed-word locations and implicit addends unknown.
-  Overall relocation inventory completeness remains unknown.
-  A relocatable SHN_UNDEF target or inactive SHT_NULL header remains an explicit
-  unknown with the original reported section index and offset.
- REL/RELA symbol references retain their original table and entry indices.
-  Positive indices resolve through a validated symbol table; symbol index zero
-  means a zero symbol value without a table lookup, including when no table is
-  linked. Malformed references fail with the affected section and symbol index.
- Section-name and symbol tables require declared SHT_STRTAB links.
-  SHN_UNDEF explicitly means no section names: display is empty, raw name and
-  location unknown, with the original name offsets retained. Extended section-name
-  indices resolve through section zero and undergo the same validation.
- Symbol tables require a declared SHT_STRTAB link. Name offsets and terminators
-  must stay inside the declared string table; malformed references fail before
-  unrelated bytes can become names. Dynamic dependencies use DT_STRTAB/DT_STRSZ
-  with a unique file-backed mapping; ambiguous or unbacked mappings are
-  explicitly unsupported.
- Name display strings use UTF-8 replacement for opaque bytes, including
-  sectionless dependency names and interpreter paths. Raw name
-  bytes and string-table ranges retain observed identity where resolvable;
-  ranges include the terminating NUL and base64 bytes exclude it.
- NOBITS and NULL sections provide no file bytes. Reported file-backed ranges
-  are checked against snapshot size again at the public boundary. PT_NULL payload
-  fields are unused: reported numbers remain, file backing is none and interpreted
-  permissions are null. Segments with zero file size also have no file bytes.
- Sectionless dynamic images still report dependency names with raw bytes and
-  file locations where uniquely mapped. Missing symbol/relocation section tables
-  do not establish that those runtime tables are absent.
-  Upstream RELRO/canary heuristics rely on sections and can be incomplete in
-  this case; their reported candidates retain an explicit coverage limitation.
- DT_NEEDED/PT_INTERP are reported names, not resolved runtime paths. GOT/PLT
-  maps are derived convenience views and may collapse aliases. PLT inference
-  can emulate selected instructions in Unicorn; its outputs are static candidates.
-  Exec syscall tracing observes host process launches. Map completeness
-  remains unknown and original upstream warnings are returned inline.
- Canary, PIE, NX, executable-stack and RELRO are static inferences. NX and
-  executable-stack are separate upstream indicators: on x86-64 an executable
-  stack can accompany an unknown (`null`) NX indicator. ET_DYN can be a shared
-  library, and an absent canary symbol does not prove every function unprotected.
-
-Complete results have a 32 MiB input, 64 MiB reply, 1 MiB combined diagnostics
-and 30-second owned command deadline. The reply budget applies to the decoder
-record; the CLI/MCP Evidence envelope adds copies and encoding overhead. The
-pinned MCP SDK defaults to a 10 MiB receive buffer. Large complete results need
-a caller-configured `StdioClientTransport({ maxBufferSize: ... })`; the large
-extended-index verification uses 256 MiB and an explicit five-minute request
-timeout in its separate opt-in MCP lane. REA does not silently truncate the result. Python lowers resource soft limits to at most 3 GiB virtual address space,
-30 CPU seconds and 64 MiB file output. Inherited tighter soft/hard limits are
-retained, and the effective values are returned in the result limitations. Virtual address space is not RSS;
-Unicorn needs a large virtual map. Limits fail with no partial success, and
-owned process/root cleanup completes independently of cancellation.
-
-Core files, GDB session/state/control, optional pwndbg enrichment and instruction
-inspection are separate increments tracked by #969. This increment makes no
-real support claim for those features or other operating systems/architectures.
-
-Typed decoder failures retain bounded `captured_output` (stdout, stderr and an
-explicit truncation flag) alongside the original failure category and reason.
-Successful `diagnostics` also exposes the supervisor's `truncated` flag. Output
-beyond the complete diagnostic budget is rejected, including when the decoder
-writes a valid reply; cleanup and late cancellation reuse the observed flag.
-Memory allocation failures use `resource_constraint`, with effective resource
-limits (or an explicit unknown) and memory-specific recovery guidance. A
-MemoryError alone does not establish the exact failed allocation or that a
-particular budget was exhausted. Invalid undersized symbol entries are rejected
-before REA reports source ranges for them.
-The bridge reserves 1 MiB to report allocation failures. If even error reporting
-or serialization fails with MemoryError, its reserved exit status preserves the
-resource classification with unknown effective limits.
-Reserved exits require a matching private marker written by the bridge's actual
-failure branch. Bare launcher exits or missing/unwritable markers retain process
-diagnostics with the resource cause unverified.
-Signal termination alone is never classified as observed memory exhaustion.
-The small bootstrap also covers catchable MemoryError during adapter imports,
-compilation and initialization. Python interpreter startup failures before the
-bootstrap runs retain their observed process diagnostics without guessed causes.
-SIGXCPU retains a CPU resource diagnostic and CPU-specific recovery advice.
-Observed EFBIG writes or SIGXFSZ termination retain a file-size resource
-diagnostic and file-size-specific recovery advice. If a tight file limit also
-prevents writing the limit record, effective values remain unknown.
-The bridge records actual limits in owned storage before analysis; missing or
-malformed limit reports remain unknown with their read failure preserved. A
-received signal alone does not establish its exact cause. Dynamic tags require
-a complete DT_NULL inside PT_DYNAMIC; interpreter names and ranges end at the
-first NUL, with any padding still represented by the original segment range.
@@ -3,8 +3,6 @@
 Captured Debugger sources can be exported for REA's existing static JavaScript
 analysis with `export_web_scripts`. See [captured website scripts](website-script-export.md)
 for the capture options, source mappings, and browser/local resolution limits.
-Use [captured module relationships](website-module-trace.md) to resolve one
-exported script's native imports under an explicit URL/import-map context.

 REA can attach to a user-owned Chrome-family browser through the Chrome DevTools Protocol (CDP) and produce bounded Evidence about an existing page. This is a passive reverse-engineering capability, not a general browser automation or remote-control surface.

@@ -24,17 +22,6 @@ REA can attach to a user-owned Chrome-family browser through the Chrome DevTools
 Target discovery returns the complete in-scope target array in one result.

 Electron `file://` pages use a separate provider and target boundary; see [electron-observation.md](electron-observation.md).
-
-## Provider authorities
-
-CDP page capture, V8 Inspector observation, and Playwright scenarios stay
-separate providers because their authorities differ: CDP and V8 attach to an
-already-running target and never launch, drive, evaluate, or mutate it, while
-Playwright providers own and drive the runtime (launch browsers, run actions,
-capture step snapshots). Merging them would mix attach-only and owned-process
-lifecycles in one contract. What they share instead is one exclusion
-vocabulary (`BrowserExclusionReason`): every denial reason in every stack maps
-onto it, even where a wire schema keeps a narrower historical bucket.
 Existing static application Evidence and passive web/Electron captures can be
 combined later through
 [JavaScript static/runtime reconciliation](javascript-runtime-reconciliation.md).
@@ -133,7 +120,7 @@ REA retains local observation data and removes only URL userinfo credentials, ex
 - URL observations preserve the complete local URL, including query values, fragments, duplicate parameters, and their order. Only username/password userinfo is removed; malformed original URL strings remain available with `origin: null`.
 - DOM snapshots retain node types, node names, value lengths, and attribute names, but not text or attribute values.
 - Accessibility structure and roles are retained by default, while names and descriptions require `include_accessibility_text: true`.
- Network observations retain method, status, MIME type, size, type, initiator stack location, and complete URLs with userinfo credentials removed. Redirects reported by CDP are attached as ordered `redirects` on the one request ID, with the prior request URL, CDP response URL, method/type, response status/MIME/encoded length, request timestamp, and the next `requestWillBeSent` event timestamp. CDP delivers `redirectResponse` with that next request event, so the latter is an event boundary rather than an exact response timestamp. Redirect response headers and bodies are discarded; hops outside the selected origins are discarded with the request chain. Headers are discarded after an allowlisted projection of length/encoding, structured CSP/Link/policy fields, and untrusted agent hints. Cookies and authorization headers are never retained.
+- Network observations retain method, status, MIME type, size, type, initiator stack location, and complete URLs with userinfo credentials removed. Headers are discarded after an allowlisted projection of length/encoding, structured CSP/Link/policy fields, and untrusted agent hints. Cookies and authorization headers are never retained.
 - Request/response bodies are not requested or parsed by default. When selected, only allowed-origin JSON media types are read, converted immediately to complete value-free property paths/types, and discarded. `Network.getResponseBody` is never sent unless JSON body shape capture is selected.
 - Console observations with a stack source retain call type, argument types, timestamp, and source location. When console text capture is selected, already-delivered primitive values are retained verbatim; objects, getters, and remote properties are never expanded.
 - WebSocket observations retain direction, opcode, and payload byte length. When shape capture is selected, text frames are classified as text or complete value-free JSON shape; binary bytes, hashes, prefixes, and raw frames are never retained.
@@ -6,17 +6,17 @@ there is no new universal provider interface or fixed module manifest.

 ## Ownership to preserve

-| Responsibility                                | Current owner                       | Migration direction                                   |
-| --------------------------------------------- | ----------------------------------- | ----------------------------------------------------- |
-| Analyst semantics and Evidence representation | domain                              | Keep pure and provider-neutral                        |
-| Named public input/output contracts           | contracts                           | Keep exact CLI/MCP meaning and complete discovery     |
-| Producer parsing and external tool protocols  | provider adapters                   | Keep behind the relevant typed port                   |
-| Shared analyst workflows                      | application                         | Share between CLI and MCP                             |
-| Concrete provider construction                | composition, MCP startup            | Keep fresh typed factories at the production boundary |
-| Investigation Evidence and Unknowns           | InvestigationRecords/EvidenceLedger | Consume narrow read/write/atomic record ports         |
-| Target/profile snapshots and invalidation     | BinarySessionRecords/BinarySession  | Keep binary-owned                                     |
-| Subprocess ownership and host primitives      | process/windows                     | Reuse; preserve cancellation and cleanup              |
-| Public translation                            | CLI/MCP adapters                    | Delegate to shared workflows and named contracts      |
+| Responsibility                                | Current owner                            | Migration direction                                            |
+| --------------------------------------------- | ---------------------------------------- | -------------------------------------------------------------- |
+| Analyst semantics and Evidence representation | domain                                   | Keep pure and provider-neutral                                 |
+| Named public input/output contracts           | contracts                                | Keep exact CLI/MCP meaning and complete discovery              |
+| Producer parsing and external tool protocols  | provider adapters                        | Keep behind the relevant typed port                            |
+| Shared analyst workflows                      | application                              | Share between CLI and MCP                                      |
+| Concrete provider construction                | binary runtime, composition, MCP startup | Consolidate one capability at a time in production composition |
+| Investigation Evidence and Unknowns           | BinarySessionRecords                     | Extract one composed record owner after caller migration       |
+| Target/profile snapshots and invalidation     | BinarySessionRecords/BinarySession       | Keep binary-owned                                              |
+| Subprocess ownership and host primitives      | process/windows                          | Reuse; preserve cancellation and cleanup                       |
+| Public translation                            | CLI/MCP adapters                         | Delegate to shared workflows and named contracts               |

 Retain exact Evidence IDs, provenance, detached reads, atomic Evidence/Unknown
 mutations and optimistic revisions. Preserve current close and failed-cleanup
@@ -60,21 +60,6 @@ provider implementations. Production composition is a deliberate outer boundary.
 Other existing adapter imports will migrate incrementally; do not widen a lint
 exception to conceal new protocol code inside application workflows.

-`npm run verify:module-boundaries` parses repository-owned source imports,
-reexports, type imports and literal dynamic imports, then checks their resolved
-source layer. Nested names such as `domain/android` are domain code; `src/android`
-is the provider adapter. The check runs with lint, including cached static gates.
-It covers tracked and untracked non-ignored TypeScript source and skips cached
-paths removed during a move. Pass exact source paths for a focused check.
-
-Pure source and its tests keep inward dependencies. Application/server provider
-construction guards cover the migrated deep, Android, firmware, JavaScript recovery and observation
-implementations. Application workflows cannot import composition, including the
-former binary runtime entrypoint; shared browser capture/export helpers remain admitted while their
-ownership is reviewed. Test lane restrictions still use Oxlint. Producer-dependent
-browser and managed comparison tests live in boundary lanes with their original
-fixtures and assertions. This is a development guard, not runtime authorization.
-
 Select verification by the claim changed: schema/composition, package, real
 engine or host-native workflow. Record host/target prerequisites and source-owned
 fixtures. Run heavy lanes serially with bounded workers/heaps and reuse existing
@@ -104,374 +89,7 @@ inside the provider. The existing launcher seams remain available to boundary
 fixtures, which now exercise the production factories.

 Application workflows and MCP registration must not import these concrete
-providers. Composition may import their implementations. Binary composition also
-uses this outer boundary after its direct-analysis callers were migrated.
+providers. Composition may import their implementations. Binary composition is
+still at its existing entrypoint while its direct-analysis callers are investigated.
 This concrete pilot does not introduce a shared provider interface or module
 manifest.
-
-## Independent optional observation adapters
-
-Browser observation, browser scenarios, Electron observation, Electron scenarios
-and V8 Inspector observation now have separate factories in `src/composition/`.
-CLI commands reuse them; MCP startup dynamically imports each factory independently.
-`OptionalObservationProviders` describes these five existing typed ports only. It
-is provisional startup wiring, not an extensible plugin manifest or a universal
-provider interface.
-
-A failed import or constructor retains the successful peers. The complete tool
-catalog remains advertised. Session availability reports the failed adapter and
-its actual reason, and affected handlers return the existing capability-unavailable
-error. Explicit loading failures take precedence over configured availability.
-Passive Electron and active Electron failures are independent; static JavaScript
-analysis and runtime reconciliation remain usable without either adapter. CLI
-Electron commands also load only their selected runtime factory at execution.
-
-Source identities are available without importing the optional implementations.
-Registration acquires no engines, probes no endpoints, changes no permissions and
-installs nothing. Core transport failures and shutdown still use their existing
-lifecycle. Fault-injection coverage uses the production loading/startup path and
-actual MCP SDK calls; recording ports establish composition behavior, while the
-real Inspector lane separately establishes runtime behavior.
-
-## Investigation record ownership pilot
-
-`src/application/investigation/InvestigationRecords.ts` owns one existing
-EvidenceLedger per runtime. The production session composition constructs that
-owner explicitly; the direct BinarySession constructor retains a fresh default
-for compatibility. There is no second ledger, global store, persistence or new
-retention policy.
-
-The ledger, Unknown Evidence helper and the ledger's two original behavior tests
-now live beside the owner in `src/application/investigation/`. Bundle validation
-and record-owner consumers follow the new paths; retained-reference access still
-uses the narrow record ports. The move preserves implementation bodies and test
-assertions. Binary snapshot/cache files remain with their existing owner.
-
-EvidenceReader, EvidenceWriter and EvidenceUnknownWriter describe existing
-read/write/atomic callback needs. UnknownRegistryPort preserves optimistic
-revisions and consistency verification. Non-binary MCP registrars use these
-record types without depending on the binary execution/lifecycle surface.
-BinarySessionPort retains its compatible record methods through composition.
-
-BinarySessionRecords remains the snapshot owner and compatibility facade. It
-passes the actual active target explicitly for recordUnknown/updateUnknown;
-recordEvidenceWithUnknown keeps its target-free mutation subject. Snapshot import
-merges records without notifying midway, then emits after the cache commits.
-Bundle import retains the full change delta so Unknown-only changes notify even
-when recordsAdded is zero. Clearing resets records, cache and invalidation before
-notification; observer failures remain best effort after a committed mutation.
-
-Close and failed-cleanup clearing, ordinary target-switch retention, detached
-reads, Evidence identities and deterministic bundle transfer keep their existing
-behavior. Snapshots still require an active target and concrete analysis profile;
-extracting investigation ownership does not make them a target-free record store.
-#721 remains responsible for any future lifetime-policy change.
-
-## Inspector adapter ownership
-
-`src/inspector/` owns V8 Inspector discovery, passive capture, script/target
-location interpretation and its lightweight provider identity. The composition
-factory and optional loader use this owner. Browser CDP connection, endpoint/value
-and Electron file-location helpers remain deliberate shared adapter utilities at
-their existing paths; no provider wire protocol moves into domain or process.
-
-Loopback fixtures and producer boundaries now live under
-`tests/fixtures/inspector/` and `tests/boundary/inspector/`. The socket-backed
-unresolved-target reconciliation test moves from composition into the forked
-boundary lane with its original assertions. Adapter tests retain fork isolation.
-`npm run verify:inspector` keeps its public development entrypoint and delegates
-to `scripts/verify/inspector/runtime-observation.mjs`, using the real Node fixture
-under `tests/conformance/inspector/`. Catalog imports, source guards and test
-discovery follow the new paths. Observation authority, lifecycle, producer
-interpretation and caller-visible contracts stay unchanged.
-
-## Auxiliary source declaration pilot
-
-Artifact, macOS native and managed static metadata now belongs to each adapter's
-`*ProviderMetadata.ts` module. The implementation and
-`src/composition/auxiliaryAnalysisProviders.ts` reuse the same identity and exact
-capability descriptors. The declarations reference existing AnalysisProvider
-loaders; they cover these three disjoint auxiliary implementations only. Deep
-candidate selection and the five typed observation ports remain separate.
-
-The binary runtime reads these source declarations while auxiliary construction
-stays lazy. The separate managed-only entrypoint retains direct construction for
-its execution-free workflow. The MCP catalog generator reads declarations without
-constructing implementations, using its canonical macOS platform; actual runtime
-host restrictions remain explicit.
-Discovery and binary operation-kind routing now consume canonical source contracts
-rather than their generated JSON artifact. No declaration imports its generated
-output. Generated catalog facts and public schemas stay unchanged.
-
-All observation registrars resolve contracts by name. An isolated compiled-process
-test reverses presentation arrays and performs actual MCP SDK calls to verify
-advertised schemas and handler meaning. Reordering metadata must not select a
-different operation, schema, provider or deep-provider priority.
-
-## Android layer and verification ownership
-
-Android workflows and their existing typed port live in `src/application/android/`,
-pure APK/inventory semantics in `src/domain/android/`, and the named inspection
-contracts in `src/contracts/android/`. The headless JADX producer remains in
-`src/android/`; `src/composition/android.ts` supplies its fresh factory to both
-caller adapters. Public names, result meaning and JVM/queue/cleanup limits are
-unchanged. Inventory-only application projection remains execution-free.
-
-The real lane and signal-cleanup helper belong to `scripts/verify/android/`; its
-explicit downloader and fixed manifest belong to `scripts/fixtures/android/`.
-`verify:android` and `fixtures:android` keep their command names and repository-root
-`_reference/apk-integration/` fixture default. Synthetic producer fixtures stay in
-`tests/fixtures/android/`, with matching boundary and composition ownership. Real
-JADX CLI/MCP parity requires the fixed APK and existing audited JAR; synthetic
-protocol/cancellation success does not establish that engine or an unverified host.
-
-## Deep-provider source declarations
-
-Hopper, Ghidra and IDA declare their implemented analyst operations in their
-own `*ProviderCapabilities.ts` modules. Hopper's inventory is typed against the
-existing direct-operation contracts; Ghidra reuses its inventory/function adapter
-operations; IDA retains its read-only operation family. Frozen operation arrays
-feed the existing capability builders without importing generated catalog data.
-
-The catalog generator reads these source declarations and joins operation names
-to canonical `TOOL_CONTRACTS`. A missing contract identifies the declaring provider
-and operation. Public schemas and descriptions remain owned by contracts; the
-declarations describe implementation coverage. Provider adapters must not consume
-the generated MCP catalog that is derived from them. The resolved module guard
-checks this edge while admitting canonical source contracts, generated package
-metadata and the existing application snapshot-cache consumer.
-
-Exact provider effects and lifecycle differences remain in their adapters:
-Hopper's GUI and mutation effects, Ghidra's experimental Windows authority and
-mutation restrictions, and IDA's attached/headless effects and live observations.
-This source increment introduces no common provider lifecycle or new interface.
-
-## JavaScript application ownership
-
-`src/application/javascript/` owns JavaScript/Electron artifact analysis and
-graph projection, feature/version/export/source comparisons, runtime Evidence
-and reconciliation, observation ports, and source recovery workflows. Pure
-analysis and public schemas keep their existing domain/contract ownership;
-shared artifact inventory, investigation records and execution types remain
-shared. CLI, MCP and production factories import the owning workflow directly.
-
-`src/domain/javascript/` owns static parsing and semantic IR, application and
-semantic graphs, Electron facts, runtime reconciliation, recovery result
-semantics, and source-to-bundle comparisons. Shared Evidence, digests, ordering,
-comparison semantics and historical-source graphs stay at their existing owners.
-Native handoffs link exact-subject Evidence without selecting or executing a
-provider.
-
-`src/contracts/javascript/` owns the JavaScript/Electron observation and recovery
-contracts, JavaScript-specific workflow requests, and their examples. The shared
-`applicationToolContracts.ts` aggregate stays at the contract root because it also
-owns reconstruction and Android/Apple projection operations. Canonical tool
-aggregation, named handler binding and SDK schema presentation remain unchanged.
-Catalog source paths, compiled verifier/SDK fixtures and recovery CI filters
-follow the domain/contract owners.
-
-`scripts/verify/javascript/` groups application-workflow, runtime-reconciliation,
-large-digest and real-recovery entrypoints. Their existing npm commands retain
-their invocation semantics. Recovery fixture compilation lives beside its
-unchanged sources under `scripts/fixtures/javascript-recovery/`. Its default
-REA entrypoint still resolves to `scripts/rea.mjs`. Managed conformance imports
-the relocated compiled workflow; owning CI source filters follow the new paths.
-
-`src/artifacts/javascript/` owns directory/ASAR reader construction and relevant
-file acquisition, including root/nested byte verification, UTF-8 diagnostics and
-nested reader cleanup. Its narrow factory returns the existing `ArtifactReader`;
-the application retains input admission, inventory, graph construction and its
-original root-reader `finally` close. Pure file facts live in
-`src/domain/javascript/javascriptArtifactFiles.ts`, and the shared immutable
-inventory snapshot lives in `src/domain/artifactInventorySnapshot.ts`. Inventory
-options and integrity policy remain application-owned. Shared stream hashing
-lives in `src/artifacts/ArtifactHash.ts`, preserving complete byte counts and the
-bounded classification prefix. Acquisition/hash guards reject imports from
-application, composition or caller adapters; JavaScript workflows use the factory
-instead of importing concrete ASAR/directory reader classes.
-
-ZIP, native-DMG and Mach-O inventory reader selection keep their existing
-lifecycles. Runtime ports retain their distinct Inspector, passive Electron and
-active Electron effects; shipped Electron hooks remain at their existing
-provider boundary.
-
-## Managed capability ownership
-
-`src/domain/managed/` owns managed artifact and member semantics, reconstruction
-import, native-boundary verification and application graph projection.
-`src/application/managed/` owns their shared Evidence workflows, and
-`src/contracts/managed/` owns their named contracts and examples. Producer
-metadata/IL parsing stays in `src/dotnet/`; target resolution, Evidence, ordering
-and investigation records retain their shared owners. Path-based member
-comparison preserves its actual target/byte-digest admission and existing parser
-helper.
-
-`scripts/verify/managed/` groups the portable conformance entrypoint and its
-support, manifest, oracle and completion-report helpers. Its PE byte fixture
-builder and declaration live in `scripts/fixtures/managed/`, shared with the
-installed-package lane and existing managed conformance tests. `verify:managed`
-keeps its command name and optional caller-cwd manifest resolution. Compiled
-catalog and generator imports follow the owners; document-check cache inputs
-include the relocated runtime verifier and fixture files.
-
-Portable byte fixtures, optional operator-local manifests, actual ILSpy oracles
-and real Ghidra NativeAOT checks retain their distinct proof levels and
-prerequisites. The existing NativeAOT fixture/engine lane keeps its owner. This
-move preserves implementations, Evidence identities and generated commitments.
-
-## Binary application ownership
-
-`src/application/binary/` owns the active session, deep-provider registry and
-evaluation, operation routing, disjoint provider composition, lazy auxiliary
-clients, cancellation and client cleanup. Its records facade and snapshot
-cache/files remain bound to the exact target and analysis profile. Investigation
-records still have their separate owner in `src/application/investigation/`.
-
-`AnalysisProvider.ts` stays shared because its identity/execution types also serve
-nonbinary ports. `BinaryTargetResolver.ts` stays shared because Android, firmware,
-managed and artifact workflows use its target parsing. Production wiring lives
-in `src/composition/binary.ts`; application workflows gain no outward composition
-dependency.
-
-The three colocated application tests move with their owner. Composition cases
-remain in `tests/composition/analysis-sessions/`; filesystem and SDK cases retain
-their boundary lanes. The shared `tests/fixtures/binarySession.ts` factory supports
-several capability families. Existing recursive application globs discover the
-moved tests; bridge assets and real-verifier entrypoints remain at their owners.
-
-## Firmware layer and verification ownership
-
-Firmware workflows and their existing typed port live in
-`src/application/firmware/`, pure request/result semantics in
-`src/domain/firmware/`, and named contracts in `src/contracts/firmware/`.
-`src/firmware/` keeps producer commands, report parsing, source copies, publication
-and cleanup; `src/composition/firmware.ts` supplies a fresh typed factory.
-
-The real lane belongs to `scripts/verify/firmware/analysis.mjs`; the fixture runner
-and its unchanged Python producer belong together in `scripts/fixtures/firmware/`.
-The npm command names and selected `REA_FIRMWARE_FIXTURE_ROOT` are unchanged. The
-runner retains its working-directory-relative default; the verifier retains its
-repository-root default. Both point to `_reference/firmware-integration/generated`
-when invoked through the documented npm commands. Optional ext4/Ghidra lanes keep
-their own prerequisites. Source-fixture generation and synthetic producer tests
-do not establish real Binwalk/Unblob analysis or another host's execution support.
-
-## Apple artifact capability ownership
-
-`src/domain/apple/` owns Apple application anatomy/projection, asset catalog
-facts, Interface Builder graphs, keyed archive semantics and plist values.
-`src/application/apple/AppleApplicationService.ts` retains the shared workflow
-that projects authenticated IPA/macOS inventory Evidence.
-
-`src/artifacts/apple/` owns the actual producer boundary: directory acquisition,
-assetutil invocation, plist/NIB decoding, encoded view-parent interpretation and
-keyed archive inspection. These helpers are used by ArtifactProvider, retain
-its existing typed analysis boundary, injected assetutil seam and original reader
-cleanup, and do not require a new port for each helper. Producer code no longer
-lives in the application layer. Guards reject application/composition/caller
-imports from this owner while admitting pure facts and shared artifact readers.
-Adapter-source tests retain their assertions in the existing forked adapter lane.
-
-`scripts/verify/apple/` groups archive, asset catalog, Interface Builder,
-Objective-C/Swift dispatch and macOS bundle verification. The macOS bundle fixture
-builder lives in `scripts/fixtures/apple/`; NIB byte fixtures stay beside their
-artifact decoder. Existing format-specific conformance sources and goldens keep
-their locations, and relocated verifiers resolve them against their own file
-URLs. Public npm entrypoints and CLI/MCP contracts stay stable; generated-document
-cache inputs include the relocated runtime scripts and fixture builder.
-
-Portable decoder and injected producer tests establish their format/boundary
-claims. Actual Swift/Xcode, assetutil, native NIB, bundle signing and DMG lifecycle
-claims require the real Apple lane. Native binary API/value-flow semantics and
-shared cross-domain contract aggregates keep their separate owners.
-
-## Artifact inventory and extraction ownership
-
-`src/artifacts/inventory/` owns format classification, reader selection, inventory
-policy, canonical scanning and artifact graph construction. The shared artifact
-provider and JavaScript reconstruction workflow consume this owner. Snapshot
-semantics remain in `src/domain/artifactInventorySnapshot.ts`.
-
-`src/artifacts/extraction/` owns member selection, integrity checks and transactional
-materialization through the existing readers and safe output tree. Reader cleanup,
-cancellation, rollback, archive containment and caller-visible results retain their
-existing behavior. Acquisition guards reject imports from these producer owners
-into application workflows, production composition or CLI/MCP adapters.
-
-`src/application/artifacts/ArtifactExtractionDestination.ts` owns the caller's
-default temporary output-root choice for both CLI and MCP. The adapters pass this
-destination to the existing provider operation; format handling and member writes
-remain in the artifact owner.
-
-Add format-specific acquisition behavior beside the inventory readers and exercise
-its actual producer representation in filesystem boundary tests. Add caller
-workflow behavior in the application owner and verify both adapters. The installed
-package lane checks inventory identity and extraction through CLI and MCP; the
-real Apple bundle lane separately establishes DMG mount and detach behavior.
-
-## Binary production composition closure
-
-`src/composition/binary.ts` is the shared production owner for deep candidate
-construction, lazy auxiliary composition and the managed-only session factory.
-It preserves the existing constructor bodies, selection policy and fresh session
-per invocation. Factory registration acquires no engine or target.
-
-`DirectAnalysis` and `DirectAnalysisStatus` receive these two existing factories
-through `DirectAnalysisDependencies`. They retain configuration parsing, selected
-status environment, cancellation, snapshot replay/binding, Evidence projection
-and finally-close. The dependency uses the existing BinarySession type, including
-its replay policy; it adds no universal backend or lifecycle contract.
-
-`src/composition/directAnalysis.ts` binds the production factories for CLI and
-one-shot managed MCP callers. Binding creates no session and stores no retained
-analysis state. MCP startup constructs its connection session through the same
-binary factory. Source and compiled fixtures use these entrypoints. The former
-application runtime path is removed, and the source guard no longer admits its
-outward provider/composition imports.
-
-## Native analyst capability ownership
-
-`src/domain/native/` owns portable native inspection, instruction/data types,
-load-image facts, API boundaries, annotations, metadata recovery, UI observation
-semantics and value/investigation graphs. `src/application/native/` owns shared
-API projection, call routes, dispatch inspection and UI/value tracing. Its tests
-keep the existing service lane. `src/contracts/native/` owns the named native
-adapter contracts; shared official/enhanced aggregates remain at their owners.
-
-Producer interpretation, external commands and host UI lifecycle remain in
-`src/native/`, Hopper, Ghidra and IDA. The shared function dossier still lives in
-`domain/hopperValues.ts`: its historical name does not make its meaning exclusive
-to Hopper. This move retains existing typed ports, exact result schemas,
-observed/derived/unknown distinctions, profiles and Evidence links.
-
-Source and compiled verifier imports follow the new owners. Host UI and real
-native-value verifier locations are retained until their own proof lanes migrate;
-interactive macOS UI success and real dependency tracing require their respective
-host/engine workflows. Portable source fixtures and injected call-route tests
-establish their narrower boundaries, without expanding provider/platform support.
-
-## Process capture and analyst workflow ownership
-
-`src/domain/process/` owns scenario/capture validation, portable process trees,
-trace specifications, observations, comparisons and the canonical process Evidence
-identity. The standalone contract example lives in `src/contracts/process/`;
-shared session contracts retain their broader investigation owner.
-
-`src/process/capture/` owns the actual PTY boundary, terminal rendering, sampling,
-selected child environment, filesystem snapshots/effects, runtime path admission,
-event journal, settlement and resource cleanup. It reuses `src/process/` ownership
-primitives and the Windows host substrate. Its identity import follows the
-existing pure declaration directly. A source guard rejects outward application,
-composition and caller imports; no new provider or lifecycle interface is added.
-
-`src/application/process/` retains Evidence projection and file-backed CLI
-capture/comparison workflows. Capture helper tests use the forked adapter lane;
-Evidence/host integration tests use the serial process-boundary lane. Their
-fixtures and assertions remain unchanged. Installed capability-probe URLs follow
-the new compiled adapter path, including the optional-dependency failure probe.
-
-Windows PTY capture retains its existing unavailable outcome because descendant
-cleanup is not yet verified. Native Job Objects and a PTY binary do not establish
-that capture workflow. Real POSIX capture/cleanup and installed terminal/PTY module
-resolution require their actual host and package lanes; portable comparison
-fixtures establish their separate evidence semantics.
@@ -1,184 +0,0 @@
-# CLI and Evidence
-
-Use the CLI for a direct inspection or a script. It uses the same application
-workflows and evidence contracts as REA's MCP server. Each CLI invocation is a
-separate process; save results when you want to use them in a later command.
-
-## Run a command
-
-After [installing REA](installation.md), use `rea`. You can also run a command
-without a global installation:
-
-```bash
-npx -y rea-agents@latest analyze-javascript-application /absolute/path/to/app --json
-```
-
-Use an extracted application directory or an ASAR as the target. Static
-JavaScript analysis returns the application graph and Evidence directly.
-Generic `rea analyze PATH` selects this workflow for directories and `.asar`
-files when neither `--provider` nor `--snapshot` is supplied. See
-[JavaScript artifact reconstruction](javascript-artifact-reconstruction.md)
-for results, integrity checks and coverage.
-
-## Native analysis
-
-Configure [Hopper or Ghidra](installation.md#hopper), or the
-[IDA adapter](ida-provider.md), before analyzing a native target. Substitute
-your target, search text and function name or address in these examples:
-
-```bash
-rea analyze /absolute/path/to/program --provider ghidra --json
-rea search /absolute/path/to/program "search" --provider ghidra --json
-rea function /absolute/path/to/program main --provider ghidra --json
-rea decompile /absolute/path/to/program 0x1000 --provider ghidra --json
-rea xrefs /absolute/path/to/program 0x1000 --provider ghidra --json
-rea trace /absolute/path/to/program "search" --provider ghidra --json
-```
-
-`analyze` and `inspect` share the native overview workflow. `function` returns
-a function dossier; `decompile` returns pseudocode. For assembly instructions
-alone, use `rea instructions`. A macOS `.app` bundle can be supplied directly.
-
-Run `rea --help` or a command's `--help` for arguments and output options.
-The [generated catalog](product-catalog.json) lists all CLI commands and MCP
-tools. Provider-specific target support is described in the
-[native guide](native-investigation.md), [DOS guide](ghidra-dos.md), and
-[Windows Ghidra guide](windows-ghidra-p0.md).
-
-## Choose a provider
-
-List the available providers and their supported operations:
-
-```bash
-rea providers --json
-rea capabilities --json
-```
-
-These commands describe binary-session providers and auxiliary capabilities.
-For the complete MCP surface, use the connected server's tool list and the
-session's advertised availability; individual guides describe prerequisites.
-
-With automatic selection, REA uses the single available provider that supports
-the target. When several providers support it, select one explicitly:
-
-```bash
-rea analyze /absolute/path/to/program --provider hopper
-```
-
-Set `REA_ANALYSIS_PROVIDER` for a standing preference. An explicit `--provider`
-overrides it. In MCP, pass `provider_id` to `open_binary`:
-
-```json
-{
-  "path": "/absolute/path/to/program",
-  "provider_id": "hopper"
-}
-```
-
-The selected provider remains bound to the session until an explicit switch
-or close. Provider failures are returned with their original reason. For an
-`ambiguous` selection error, choose from `details.candidate_ids`; for
-`provider_unavailable`, run `rea doctor --provider ID --json` to diagnose the
-selected engine. See [task readiness](installation.md#check-readiness-for-your-task)
-and [provider selection](adr/0001-provider-selection-and-analysis-profiles.md).
-
-The session reports work still in progress through `analysis_activity`.
-A client timeout can end its wait while the provider continues analyzing.
-`cleanup_incomplete` identifies resources whose shutdown or removal could not
-be verified. See [MCP contracts](mcp-contracts.md) for session lifecycle and
-[Ghidra first-query deadlines](mcp-contracts.md#ghidra-first-query-deadlines-and-recovery)
-for import, client timeouts and recovery.
-
-## Save and reuse analysis snapshots
-
-A snapshot retains successful analysis results for later queries. REA reuses
-an exact result when the target bytes, operation, parameters, provider and
-settings match. Mutations and cursor-dependent calls are excluded from the
-cache. Snapshot files are local and use owner-only permissions.
-
-```bash
-rea analyze /absolute/path/to/program --provider ghidra --snapshot /absolute/path/to/analysis/program.json
-# Repeat the same query to reuse its saved result.
-rea analyze /absolute/path/to/program --provider ghidra --snapshot /absolute/path/to/analysis/program.json
-```
-
-An exact CLI cache hit is read before starting a provider process.
-In MCP, `open_binary` accepts `snapshot_path` to import a snapshot atomically
-for its matching target; an MCP provider may still start before returning a
-cached result. `close_binary` accepts `snapshot_path` and optional
-`overwrite: true` to save before releasing provider resources. A failed save
-leaves the session open so the caller can resolve the output failure.
-
-## Import, export and compare Evidence
-
-Evidence records retain artifact identity, source locations, observations,
-inferences and unresolved findings. Validate an existing bundle, export its
-canonical form, or compare two supplied bundles:
-
-```bash
-rea evidence-import /absolute/path/to/evidence/bundle.json
-rea evidence-export /absolute/path/to/evidence/bundle.json /absolute/path/to/evidence/canonical.json
-rea compare /absolute/path/to/evidence/left.json /absolute/path/to/evidence/right.json
-```
-
-Exports preserve an existing destination unless `--overwrite` is explicit.
-For application traces and version comparisons, see
-[JavaScript application workflows](javascript-application-workflows.md).
-MCP [retained Evidence references](mcp-contracts.md#retained-application-evidence-inputs)
-belong to one connection. Separate CLI calls consume full saved records.
-
-## Import historical source
-
-Import an older source tree to compare with the current artifact:
-
-```bash
-rea import-reference-source /absolute/path/to/source
-```
-
-The import records hashes and metadata for the supplied files, separately
-from observations of the current app. File names do not automatically exclude
-files. Set `REA_REFERENCE_SECRET_PATTERNS_JSON` to a JSON array of ignore
-patterns when you want to exclude selected paths.
-
-Historical-source import requires safe no-follow file opens on Linux or
-macOS. Native Windows returns `unsupported_host`; use Linux REA inside WSL
-or another supported host. See
-[source-to-bundle comparison](javascript-application-workflows.md#historical-source-to-bundle-comparison)
-for mapping identities, inferences and unknowns.
-
-## Capture runtime behavior
-
-Choose the guide for the target and intended interaction:
-
- [Browser observation](browser-observation.md): inspect a selected page through CDP.
- [Browser scenarios](browser-scenario-contract.md): run declared interactions and capture their results.
- [Electron observation](electron-observation.md): inspect an Electron renderer or capture an application scenario.
- [Node/Electron Inspector](javascript-runtime-observation.md): record script locations and execution contexts.
- [Process capture](process-capture.md): run an executable and compare terminal, exit and filesystem observations.
-
-Runtime requests name the target and actions. Launched targets run with your
-user permissions; consult the chosen guide for host requirements and effects.
-
-## Output and exit status
-
-The default terminal format is TOON. Use `--json` when saving results for a
-JSON consumer. Output selection and formatting do not change operation status.
-
-| Status    | Meaning                                                                                                                                              |
-| --------- | ---------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `0`       | The operation completed. Its result may include partial evidence, warnings or unresolved questions.                                                  |
-| `1`       | The operation could not complete. Structured output identifies invalid input, permissions, cancellation, timeouts or another failure when available. |
-| `128 + N` | Signal `N` ended the process, where the shell or runtime preserves the conventional signal-derived status.                                           |
-
-`setup --dry-run` returns `planned` and exits `0`; a cancelled setup also exits
-`0`. Setup returns `1` for `needs_confirmation` or `needs_human`.
-`doctor` returns `1` when required checks in its selected readiness scope fail;
-unavailable optional providers remain informational for unrelated tasks.
-
-Enable `pipefail` in a supporting shell so a downstream formatter preserves
-REA's failure status:
-
-```bash
-set -o pipefail
-rea inspect-artifact ./app.asar --json | jq . > inspection.json
-```
@@ -10,12 +10,10 @@
          "enum": [
            "invalid_input",
            "unsupported_provider",
-            "unsupported_target",
            "integrity_mismatch",
            "truncated",
            "cancelled",
            "timeout",
-            "resource_constraint",
            "unavailable",
            "execution_failure"
          ]
@@ -31,79 +29,7 @@
        "details": {
          "type": "object",
          "propertyNames": { "type": "string" },
-          "additionalProperties": {}
-        }
-      },
-      "required": ["code", "category", "message", "retryable", "remediation"],
-      "additionalProperties": false
-    },
-    {
-      "type": "object",
-      "properties": {
-        "code": { "type": "string", "const": "access_denied" },
-        "category": {
-          "type": "string",
-          "enum": [
-            "invalid_input",
-            "unsupported_provider",
-            "unsupported_target",
-            "integrity_mismatch",
-            "truncated",
-            "cancelled",
-            "timeout",
-            "resource_constraint",
-            "unavailable",
-            "execution_failure"
-          ]
-        },
-        "message": { "type": "string", "minLength": 1 },
-        "retryable": { "type": "boolean" },
-        "remediation": {
-          "type": "object",
-          "properties": { "action": { "type": "string", "minLength": 1 } },
-          "required": ["action"],
-          "additionalProperties": false
-        },
-        "details": {
-          "type": "object",
-          "propertyNames": { "type": "string" },
-          "additionalProperties": {}
-        }
-      },
-      "required": ["code", "category", "message", "retryable", "remediation"],
-      "additionalProperties": false
-    },
-    {
-      "type": "object",
-      "properties": {
-        "code": { "type": "string", "const": "artifact_changed" },
-        "category": {
-          "type": "string",
-          "enum": [
-            "invalid_input",
-            "unsupported_provider",
-            "unsupported_target",
-            "integrity_mismatch",
-            "truncated",
-            "cancelled",
-            "timeout",
-            "resource_constraint",
-            "unavailable",
-            "execution_failure"
-          ]
-        },
-        "message": { "type": "string", "minLength": 1 },
-        "retryable": { "type": "boolean" },
-        "remediation": {
-          "type": "object",
-          "properties": { "action": { "type": "string", "minLength": 1 } },
-          "required": ["action"],
-          "additionalProperties": false
-        },
-        "details": {
-          "type": "object",
-          "propertyNames": { "type": "string" },
-          "additionalProperties": {}
+          "additionalProperties": { "$ref": "#/$defs/__schema0" }
        }
      },
      "required": ["code", "category", "message", "retryable", "remediation"],
@@ -118,12 +44,10 @@
          "enum": [
            "invalid_input",
            "unsupported_provider",
-            "unsupported_target",
            "integrity_mismatch",
            "truncated",
            "cancelled",
            "timeout",
-            "resource_constraint",
            "unavailable",
            "execution_failure"
          ]
@@ -139,7 +63,7 @@
        "details": {
          "type": "object",
          "propertyNames": { "type": "string" },
-          "additionalProperties": {}
+          "additionalProperties": { "$ref": "#/$defs/__schema0" }
        }
      },
      "required": ["code", "category", "message", "retryable", "remediation"],
@@ -154,12 +78,10 @@
          "enum": [
            "invalid_input",
            "unsupported_provider",
-            "unsupported_target",
            "integrity_mismatch",
            "truncated",
            "cancelled",
            "timeout",
-            "resource_constraint",
            "unavailable",
            "execution_failure"
          ]
@@ -175,43 +97,7 @@
        "details": {
          "type": "object",
          "propertyNames": { "type": "string" },
-          "additionalProperties": {}
-        }
-      },
-      "required": ["code", "category", "message", "retryable", "remediation"],
-      "additionalProperties": false
-    },
-    {
-      "type": "object",
-      "properties": {
-        "code": { "type": "string", "const": "unsupported_target" },
-        "category": {
-          "type": "string",
-          "enum": [
-            "invalid_input",
-            "unsupported_provider",
-            "unsupported_target",
-            "integrity_mismatch",
-            "truncated",
-            "cancelled",
-            "timeout",
-            "resource_constraint",
-            "unavailable",
-            "execution_failure"
-          ]
-        },
-        "message": { "type": "string", "minLength": 1 },
-        "retryable": { "type": "boolean" },
-        "remediation": {
-          "type": "object",
-          "properties": { "action": { "type": "string", "minLength": 1 } },
-          "required": ["action"],
-          "additionalProperties": false
-        },
-        "details": {
-          "type": "object",
-          "propertyNames": { "type": "string" },
-          "additionalProperties": {}
+          "additionalProperties": { "$ref": "#/$defs/__schema0" }
        }
      },
      "required": ["code", "category", "message", "retryable", "remediation"],
@@ -226,12 +112,10 @@
          "enum": [
            "invalid_input",
            "unsupported_provider",
-            "unsupported_target",
            "integrity_mismatch",
            "truncated",
            "cancelled",
            "timeout",
-            "resource_constraint",
            "unavailable",
            "execution_failure"
          ]
@@ -247,7 +131,7 @@
        "details": {
          "type": "object",
          "propertyNames": { "type": "string" },
-          "additionalProperties": {}
+          "additionalProperties": { "$ref": "#/$defs/__schema0" }
        }
      },
      "required": ["code", "category", "message", "retryable", "remediation"],
@@ -262,12 +146,10 @@
          "enum": [
            "invalid_input",
            "unsupported_provider",
-            "unsupported_target",
            "integrity_mismatch",
            "truncated",
            "cancelled",
            "timeout",
-            "resource_constraint",
            "unavailable",
            "execution_failure"
          ]
@@ -283,43 +165,7 @@
        "details": {
          "type": "object",
          "propertyNames": { "type": "string" },
-          "additionalProperties": {}
-        }
-      },
-      "required": ["code", "category", "message", "retryable", "remediation"],
-      "additionalProperties": false
-    },
-    {
-      "type": "object",
-      "properties": {
-        "code": { "type": "string", "const": "resource_constraint" },
-        "category": {
-          "type": "string",
-          "enum": [
-            "invalid_input",
-            "unsupported_provider",
-            "unsupported_target",
-            "integrity_mismatch",
-            "truncated",
-            "cancelled",
-            "timeout",
-            "resource_constraint",
-            "unavailable",
-            "execution_failure"
-          ]
-        },
-        "message": { "type": "string", "minLength": 1 },
-        "retryable": { "type": "boolean" },
-        "remediation": {
-          "type": "object",
-          "properties": { "action": { "type": "string", "minLength": 1 } },
-          "required": ["action"],
-          "additionalProperties": false
-        },
-        "details": {
-          "type": "object",
-          "propertyNames": { "type": "string" },
-          "additionalProperties": {}
+          "additionalProperties": { "$ref": "#/$defs/__schema0" }
        }
      },
      "required": ["code", "category", "message", "retryable", "remediation"],
@@ -334,12 +180,10 @@
          "enum": [
            "invalid_input",
            "unsupported_provider",
-            "unsupported_target",
            "integrity_mismatch",
            "truncated",
            "cancelled",
            "timeout",
-            "resource_constraint",
            "unavailable",
            "execution_failure"
          ]
@@ -355,7 +199,7 @@
        "details": {
          "type": "object",
          "propertyNames": { "type": "string" },
-          "additionalProperties": {}
+          "additionalProperties": { "$ref": "#/$defs/__schema0" }
        }
      },
      "required": ["code", "category", "message", "retryable", "remediation"],
@@ -370,12 +214,10 @@
          "enum": [
            "invalid_input",
            "unsupported_provider",
-            "unsupported_target",
            "integrity_mismatch",
            "truncated",
            "cancelled",
            "timeout",
-            "resource_constraint",
            "unavailable",
            "execution_failure"
          ]
@@ -398,29 +240,7 @@
            "calculated_sha256": {
              "anyOf": [{ "type": "string" }, { "type": "null" }]
            },
-            "unpacked": { "type": "boolean" },
-            "checksum_mismatches": {
-              "type": "array",
-              "items": {
-                "type": "object",
-                "properties": {
-                  "representation": {
-                    "type": "string",
-                    "enum": ["stored", "decoded"]
-                  },
-                  "algorithm": { "type": "string" },
-                  "declared": { "type": "string" },
-                  "observed": { "type": "string" }
-                },
-                "required": [
-                  "representation",
-                  "algorithm",
-                  "declared",
-                  "observed"
-                ],
-                "additionalProperties": false
-              }
-            }
+            "unpacked": { "type": "boolean" }
          },
          "required": [
            "logical_path",
@@ -450,12 +270,10 @@
          "enum": [
            "invalid_input",
            "unsupported_provider",
-            "unsupported_target",
            "integrity_mismatch",
            "truncated",
            "cancelled",
            "timeout",
-            "resource_constraint",
            "unavailable",
            "execution_failure"
          ]
@@ -471,7 +289,7 @@
        "details": {
          "type": "object",
          "propertyNames": { "type": "string" },
-          "additionalProperties": {}
+          "additionalProperties": { "$ref": "#/$defs/__schema0" }
        }
      },
      "required": ["code", "category", "message", "retryable", "remediation"],
@@ -486,12 +304,10 @@
          "enum": [
            "invalid_input",
            "unsupported_provider",
-            "unsupported_target",
            "integrity_mismatch",
            "truncated",
            "cancelled",
            "timeout",
-            "resource_constraint",
            "unavailable",
            "execution_failure"
          ]
@@ -507,7 +323,7 @@
        "details": {
          "type": "object",
          "propertyNames": { "type": "string" },
-          "additionalProperties": {}
+          "additionalProperties": { "$ref": "#/$defs/__schema0" }
        }
      },
      "required": ["code", "category", "message", "retryable", "remediation"],
@@ -522,12 +338,10 @@
          "enum": [
            "invalid_input",
            "unsupported_provider",
-            "unsupported_target",
            "integrity_mismatch",
            "truncated",
            "cancelled",
            "timeout",
-            "resource_constraint",
            "unavailable",
            "execution_failure"
          ]
@@ -543,7 +357,7 @@
        "details": {
          "type": "object",
          "propertyNames": { "type": "string" },
-          "additionalProperties": {}
+          "additionalProperties": { "$ref": "#/$defs/__schema0" }
        }
      },
      "required": ["code", "category", "message", "retryable", "remediation"],
@@ -558,12 +372,10 @@
          "enum": [
            "invalid_input",
            "unsupported_provider",
-            "unsupported_target",
            "integrity_mismatch",
            "truncated",
            "cancelled",
            "timeout",
-            "resource_constraint",
            "unavailable",
            "execution_failure"
          ]
@@ -579,7 +391,7 @@
        "details": {
          "type": "object",
          "propertyNames": { "type": "string" },
-          "additionalProperties": {}
+          "additionalProperties": { "$ref": "#/$defs/__schema0" }
        }
      },
      "required": ["code", "category", "message", "retryable", "remediation"],
@@ -594,12 +406,10 @@
          "enum": [
            "invalid_input",
            "unsupported_provider",
-            "unsupported_target",
            "integrity_mismatch",
            "truncated",
            "cancelled",
            "timeout",
-            "resource_constraint",
            "unavailable",
            "execution_failure"
          ]
@@ -615,7 +425,7 @@
        "details": {
          "type": "object",
          "propertyNames": { "type": "string" },
-          "additionalProperties": {}
+          "additionalProperties": { "$ref": "#/$defs/__schema0" }
        }
      },
      "required": ["code", "category", "message", "retryable", "remediation"],
@@ -630,12 +440,10 @@
          "enum": [
            "invalid_input",
            "unsupported_provider",
-            "unsupported_target",
            "integrity_mismatch",
            "truncated",
            "cancelled",
            "timeout",
-            "resource_constraint",
            "unavailable",
            "execution_failure"
          ]
@@ -651,7 +459,7 @@
        "details": {
          "type": "object",
          "propertyNames": { "type": "string" },
-          "additionalProperties": {}
+          "additionalProperties": { "$ref": "#/$defs/__schema0" }
        }
      },
      "required": ["code", "category", "message", "retryable", "remediation"],
@@ -666,12 +474,10 @@
          "enum": [
            "invalid_input",
            "unsupported_provider",
-            "unsupported_target",
            "integrity_mismatch",
            "truncated",
            "cancelled",
            "timeout",
-            "resource_constraint",
            "unavailable",
            "execution_failure"
          ]
@@ -687,7 +493,7 @@
        "details": {
          "type": "object",
          "propertyNames": { "type": "string" },
-          "additionalProperties": {}
+          "additionalProperties": { "$ref": "#/$defs/__schema0" }
        }
      },
      "required": ["code", "category", "message", "retryable", "remediation"],
@@ -702,12 +508,10 @@
          "enum": [
            "invalid_input",
            "unsupported_provider",
-            "unsupported_target",
            "integrity_mismatch",
            "truncated",
            "cancelled",
            "timeout",
-            "resource_constraint",
            "unavailable",
            "execution_failure"
          ]
@@ -723,7 +527,7 @@
        "details": {
          "type": "object",
          "propertyNames": { "type": "string" },
-          "additionalProperties": {}
+          "additionalProperties": { "$ref": "#/$defs/__schema0" }
        }
      },
      "required": ["code", "category", "message", "retryable", "remediation"],
@@ -738,12 +542,10 @@
          "enum": [
            "invalid_input",
            "unsupported_provider",
-            "unsupported_target",
            "integrity_mismatch",
            "truncated",
            "cancelled",
            "timeout",
-            "resource_constraint",
            "unavailable",
            "execution_failure"
          ]
@@ -759,11 +561,27 @@
        "details": {
          "type": "object",
          "propertyNames": { "type": "string" },
-          "additionalProperties": {}
+          "additionalProperties": { "$ref": "#/$defs/__schema0" }
        }
      },
      "required": ["code", "category", "message", "retryable", "remediation"],
      "additionalProperties": false
    }
-  ]
+  ],
+  "$defs": {
+    "__schema0": {
+      "anyOf": [
+        { "type": "string" },
+        { "type": "number" },
+        { "type": "boolean" },
+        { "type": "null" },
+        { "type": "array", "items": { "$ref": "#/$defs/__schema0" } },
+        {
+          "type": "object",
+          "propertyNames": { "type": "string" },
+          "additionalProperties": { "$ref": "#/$defs/__schema0" }
+        }
+      ]
+    }
+  }
 }
@@ -1,84 +0,0 @@
-# Offline EVM bytecode
-
-`inspect_evm_interface` / `inspect-evm-interface` infers interface candidates
-from one explicitly selected local bytecode carrier. The capability is general:
-contract investigation, compatibility, audit and CTF showcases use the same
-portable primitive. It does not require an active native binary target.
-
-```sh
-rea inspect-evm-interface ./runtime.hex hex --json
-rea inspect-evm-interface ./runtime.bin raw --json
-```
-
-```json
-{
-  "name": "inspect_evm_interface",
-  "arguments": { "path": "/artifacts/runtime.hex", "encoding": "hex" }
-}
-```
-
-Initial real verification covers flat legacy bytecode on Linux x64 and unchanged
-bundled EVMole 0.9.3. EOF-style EF00 containers return `unsupported_target`,
-with the selected path and format reason. Provider/configuration failures retain
-their distinct unavailable-provider or capability classification.
-The host must already provide util-linux `prlimit`, normally `/usr/bin/prlimit`;
-`REA_EVM_PRLIMIT_COMMAND` can select another absolute executable. REA installs
-no system tools and changes no user configuration. [Upstream provenance and
-license](https://github.com/morluto/rea/blob/main/third_party/evmole/README.md) are packaged.
-
-## Evidence semantics
-
- `encoding` is required: raw bytes or UTF-8 hex, with optional `0x` prefix and
-  outer ASCII whitespace. Odd hex, interior separators, BOM, non-ASCII whitespace
-  and invalid UTF-8 are rejected. Empty bytecode is valid and has unknown coverage.
- Carrier SHA-256 identifies the exact original file, including prefix/casing
-  and whitespace. Decoded-byte SHA-256 identifies actual selected EVM bytes.
-  Neither digest is the Ethereum Keccak code hash.
- Full bytecode, upstream function offsets and original producer representation
-  are returned inline. Offsets are byte positions in decoded bytecode.
- Upstream also returns terminal metadata during selector recovery. Its reported
-  values remain in `raw_result`; integer precision and non-text-key coverage are
-  unknown in the JS binding. Full bytecode retains the original encoded metadata.
- Selectors, argument strings and state mutability are **inferences**. Function
-  names/signatures are not looked up. Optimized code may produce different
-  mutability candidates; recovered types are not a verified source ABI.
- Runtime/init-code identity, deployed authenticity, hardfork and discovery
-  completeness remain unknown. Empty candidates do not prove no callable interface.
- Analysis is offline: no target runtime execution, implicit chain/RPC/explorer
-  lookup, wallet action, transaction broadcast or network request.
-
-## Resource and lifecycle limits
-
-Inputs are limited to 4 MiB, complete replies to 16 MiB and combined diagnostic
-output to 1 MiB. An owned worker has a 256 MiB JavaScript heap, 3 GiB virtual
-address-space limit, 30 CPU seconds and a 30-second command deadline. Virtual
-address space differs from resident memory. The worker retains inherited tighter
-soft/hard limits, reports its configured soft limits inline and leaves hard limits
-unchanged. WASM trap reservations are disabled
-so the engine can run within that virtual limit; actual memory is not equated to
-its 3 GiB allowance. Limits fail without partial success. Stable snapshots,
-private files and owned processes are cleaned independently of caller cancellation.
-Invalid-input, unsupported, cancellation, timeout and malformed-reply failures
-retain bounded stdout/stderr under `details.captured_output`, including whether
-diagnostic output was truncated. Cleanup failures preserve the
-original error projection and any captured output.
-Successful results expose `diagnostics.truncated` from the supervisor as well.
-Excess diagnostic output fails the complete-output contract even when the worker
-has written a valid reply.
-SIGXCPU retains a CPU resource diagnostic and CPU-specific guidance. Observed
-file-size write failures (EFBIG) and SIGXFSZ likewise retain a file-size resource
-diagnostic. Exact signal/write causes remain unknown. Configured
-soft limits are reported separately from unknown effective limits; the received
-signal alone does not establish its exact cause.
-Reserved file-size exits require a matching private marker written by the
-worker's EFBIG branch. Bare launcher exits or unwritable markers retain process
-diagnostics with the resource cause unverified.
-
-Source/metadata, proxy resolution, storage/CFG and fork-explicit execution/traces
-remain separate increments under #972, with materially different result or
-execution authority. This primitive makes no deployment or runtime behavior claim.
-
-The real verification lane traces representative raw/hex CLI workflows and checks
-that only declared Node/prlimit launchers and process ownership inspection run.
-Socket traces permit local stdio socket pairs and reject attempted network requests.
-These observations verify those fixtures; they are not a general network sandbox.
@@ -1,10 +1,7 @@
 # Firmware analysis

-REA accepts **Binwalk 3.1.x** for region inspection and **Unblob 26.6.x** for
-explicit extraction. The report parsers are verified with Binwalk 3.1.0 and
-Unblob 26.6.4. Another build on those lines is accepted, the observed version
-is reported, and a limitation records that the parser was not verified against
-that build. This first firmware milestone is verified on Linux x64.
+REA integrates **Binwalk 3.1.0** for region inspection and **Unblob 26.6.4** for
+explicit extraction. This first firmware milestone is verified on Linux x64.
 No device, root privilege, mount, emulation or execution of extracted programs
 is needed. Arbitrary firmware bytes do not pass native executable admission;
 select a returned ELF separately for supported Ghidra analysis.
@@ -19,8 +16,7 @@ export REA_UNBLOB_COMMAND=/absolute/path/to/unblob
 ```

 REA does not install these tools, their dependencies or system packages. It
-checks the tool's `--version` banner when executing a request. Binwalk must
-print `binwalk <version>` and Unblob must print the version alone. Inspection and
+checks the actual tool version when executing a request. Inspection and
 extraction have independent prerequisites; one does not require the other.
 Both require util-linux `prlimit`, normally `/usr/bin/prlimit`; override its
 absolute path with `REA_FIRMWARE_PRLIMIT_COMMAND` if needed.
@@ -38,7 +34,7 @@ git submodule update --init third_party/binwalk third_party/unblob
 ```

 Normal REA builds and npm packages do not include or build these sources or
-engine binaries. See [upstream provenance](https://github.com/morluto/rea/blob/main/third_party/README.md).
+engine binaries. See [upstream provenance](../third_party/README.md).

 ## CLI and MCP

@@ -165,7 +161,7 @@ Additional lanes are explicit, so the base lane stays small:
 REA_FIRMWARE_VERIFY_EXT4=1 npm run fixtures:firmware
 REA_FIRMWARE_VERIFY_EXT4=1 npm run verify:firmware

-# Existing Ghidra 12.1.x and its declared JDK required.
+# Existing Ghidra 12.1.4 and Java required.
 REA_FIRMWARE_VERIFY_GHIDRA=1 npm run verify:firmware
 ```

@@ -2,9 +2,9 @@

 REA can analyze DOS MZ executables and explicitly selected COM images through the bring-your-own Ghidra adapter.
 The Linux x64 verification lane exercises actual 16-bit disassembly and
-decompilation through the CLI and stdio MCP. Provider admission accepts Ghidra
-12.1.x and that installation's declared JDK range. The verification lane uses
-Ghidra 12.1.4 and JDK 21; no DOS emulator or cross-compiler is required.
+decompilation through the CLI and stdio MCP. It requires the same Ghidra
+12.1.4 and 64-bit JDK 21 installation as other Ghidra sessions; no DOS emulator
+or cross-compiler is required.

 ## Open and inspect

@@ -7,10 +7,7 @@ source notices are retained. No upstream source or algorithms are rewritten.

 The initial tested layout is .NET runtime **8.0.22**, NativeAOT RTR **9.1**,
 x86-64 ELF and native Windows PE **targets analyzed on Linux x64**, using
-Ghidra **12.1.4** and JDK **21**. The build accepts any Ghidra 12.1.x release and
-javac 21 or newer, and it compiles with `--release 21`. Real verification of
-this layout remains the Ghidra 12.1.4 and JDK 21 pair. Other NativeAOT layouts,
-architectures, and hosts are unsupported.
+Ghidra **12.1.4** and JDK **21**. Other layouts/architectures/hosts are unsupported.
 Windows Ghidra P0 has no database mutation authority. A PE/CLI or ReadyToRun
 assembly should use `inspect_managed_artifact`; it is not NativeAOT.

@@ -1,46 +0,0 @@
---
-layout: home
-
-hero:
-  name: REA
-  text: Reverse Engineer Anything
-  tagline: Understand binaries, applications, and runtime behavior with one CLI and MCP server.
-  actions:
-    - theme: brand
-      text: Get started
-      link: /installation
-    - theme: alt
-      text: View on GitHub
-      link: https://github.com/morluto/rea
-
-features:
-  - title: Investigate with your agent
-    details: Connect REA to your coding agent, describe the app or feature you want to understand, and follow the evidence.
-    link: /mcp-prompts
-  - title: Inspect across formats
-    details: Explore native binaries, JavaScript and Electron apps, .NET assemblies, Android packages, firmware, and websites.
-    link: /installation
-  - title: Keep the evidence
-    details: Analysis runs locally and returns observations, limitations, and unknowns through the CLI and MCP.
-    link: /mcp-contracts
---
-
-## Start with one command
-
-```bash
-npx rea-agents setup
-```
-
-Choose your agent, review the planned changes, and approve setup. Native binary
-analysis can use an existing Hopper, Ghidra, or IDA installation; static
-JavaScript analysis needs no native analysis engine.
-
-For a first result from an extracted JavaScript application or ASAR:
-
-```bash
-npx -y rea-agents@latest analyze-javascript-application /absolute/path/to/app --json
-```
-
-See [installation and setup](./installation.md) for requirements and configuration.
-
-![REA inspecting a native binary in Hopper](./assets/rea-hopper-analysis.png)
@@ -68,18 +68,13 @@ selects the npm release, and persistent MCP registrations are pinned to the
 version that performed setup. Installing newer instructions does not update a
 running server or its registration.

-The release checked on **2026-10-07** was **5.0.0** (133 MCP tools), published
-from the fixed checkpoint
-[`b33236ec`](https://github.com/morluto/rea/releases/tag/rea-agents-5.0.0).
-The public CLI, MCP catalog and target-free session, and isolated update from
-4.1.0 to 5.0.0 were verified through npm. The artifact includes Windows native
-controls, Android/JADX and firmware tools, Ghidra function annotations, and
-retained application-Evidence references.
-
-Main's catalog describes the current code. A source build or a subsequent
-release containing changes after this checkpoint is required for newer
-functionality. Package startup alone does not verify a provider's real
-platform workflow.
+The release checked on **2026-10-06** was **4.1.0** (125 MCP tools). That artifact
+includes main's Windows native control bundle, Android/JADX and firmware
+tools, Ghidra function annotation workflow, and retained application-Evidence
+references.
+Main's catalog describes the current code; a source build or a subsequent
+release containing later changes is required for anything newer. Package startup alone does not verify a
+provider's real platform workflow.

 To check the published version, run `npm view rea-agents dist-tags.latest`.
 Use the connected server's actual tool list and advertised input schemas for
@@ -95,7 +90,7 @@ npx skills add morluto/rea --skill reverse-engineer-anything

 This installs agent instructions and bundled references, not REA MCP
 registration or analysis engines. Follow the skill's
-[conditional connection guide](https://github.com/morluto/rea/blob/main/skill-src/reverse-engineer-anything/SKILL.md#connect-only-when-needed).
+[conditional connection guide](../skills/reverse-engineer-anything/SKILL.md#connect-only-when-needed).
 Working tools can be used immediately. If tools are missing, inspect the current
 client's registration with `doctor --client codex --json` (substitute its client
 ID), then plan repairs with `setup --client codex --dry-run --json`. Show and
@@ -113,9 +108,7 @@ npx -y rea-agents@latest analyze-javascript-application /absolute/path/to/app --
 ```

 It returns the complete Evidence record directly and requires no native engine.
-Provider failures in doctor do not prevent unrelated target-free tools. To check
-readiness for one task instead of auditing every integration, see
-[Check readiness for your task](#check-readiness-for-your-task).
+Provider failures in doctor do not prevent unrelated target-free tools.

 ## Supported agents

@@ -136,11 +129,6 @@ Setup can configure these clients for REA's local MCP server:
 | Command Code       | `commandcode`    |
 | VS Code            | `vscode`         |

-For OpenCode, setup writes the V1 `mcp.rea` entry, which OpenCode V1 and V2
-both load. If the configuration already uses OpenCode V2's native
-`mcp.servers` table, setup registers REA there instead and replaces any earlier
-`mcp.rea` entry from REA.
-
 ## Review setup changes

 `rea setup` first offers the supported agents in a multi-select. Existing REA
@@ -218,44 +206,12 @@ installed REA skill. Run the returned scoped setup command to review and approve
 those changes, then restart affected agents. The plan is returned in terminal,
 non-TTY, and JSON modes without applying configuration changes.

-## Check readiness for your task
-
-Run `rea doctor` when you need diagnosis. It reads host prerequisites and agent
-configuration without changing them. Without options, it audits every detected
-registration, the installed skill and optional analysis engines; its overall
-`healthy` value can be false while your chosen workflow works.
-
-Select the part you want to check:
-
-| Task                                | Readiness check                                                          |
-| ----------------------------------- | ------------------------------------------------------------------------ |
-| Static JavaScript/Electron analysis | Run `rea analyze-javascript-application PATH --json` directly.           |
-| One analysis engine                 | `rea doctor --provider ghidra --json` (or `hopper`, `ida`)               |
-| One agent registration              | `rea doctor --client codex --json` (see [client IDs](#supported-agents)) |
-| Installed workflow instructions     | `rea doctor --skill --json`                                              |
-
-A scoped report has `scope.mode: "explicit"`. Its `scope_checks` determine
-`healthy` and the exit status. Other checks appear in `informational_checks`;
-`environment_healthy` summarizes the full audit. `--target` adds a target check,
-but the report remains audit-wide unless a scope option is also supplied.
-
-Follow the remediation for the failed check. If a native target has several
-available providers, choose one with `--provider` on the CLI or `provider_id`
-on `open_binary`. A `capability_unavailable` failure carries
-`details.selection_reason`: `ambiguous` asks you to choose from
-`details.candidate_ids`, while `provider_unavailable` asks you to repair the
-selected engine. See [provider selection](cli.md#choose-a-provider).
-
 ## Hopper

 Hopper is separate commercial software with its own license. Its free demo has
 vendor-defined limits, and a paid license is optional. REA reuses any detected
 installation and preserves Hopper during uninstall.

-The supported native host baseline is macOS 12+, Ubuntu 24.04+, Fedora 41+,
-64-bit Arch Linux, or CachyOS. Ghidra and IDA have their own provider-specific
-host requirements; Windows Ghidra uses the [experimental P0 boundary](windows-ghidra-p0.md).
-
 On macOS, approved setup downloads the official DMG, checks its published size
 and digest, validates the application bundle, and atomically installs it to
 `~/Applications/Hopper Disassembler.app`. REA then opens Hopper so the
@@ -284,40 +240,6 @@ host mount and the rest of `/tmp` remain unchanged; this fallback never invokes
 `sudo`. `rea doctor --provider hopper --json` reports the selected
 strategy and both host and effective mount facts.

-### Launcher paths and troubleshooting
-
-On macOS, REA uses
-`/Applications/Hopper Disassembler.app/Contents/MacOS/hopper` by default.
-On Linux, it prefers executable `/opt/hopper/bin/Hopper`, then executable
-`~/.local/share/rea/hopper/bin/Hopper`; if neither exists, the former remains
-the diagnostic fallback. `HOPPER_LAUNCHER_PATH` overrides those choices:
-
-```bash
-export HOPPER_LAUNCHER_PATH=/absolute/path/to/Hopper
-rea doctor --provider hopper --json
-```
-
-If a Linux launcher exists but cannot start, inspect its shared libraries:
-
-```bash
-ldd /absolute/path/to/Hopper | grep 'not found'
-```
-
-Install the missing packages and rerun the scoped check. Linux demo sessions
-need Xvfb, Python 3, X11 and XTEST; approved setup installs those dependencies
-on supported distributions. Add the curl installer's reported executable
-directory, commonly `~/.local/bin`, to your shell `PATH` if needed.
-
-REA starts Hopper when needed. On macOS, its launcher can bring a window or
-first-run dialog forward; choose demo mode or activate your existing license.
-Hopper serializes analysis requests. Cancelling a wait can leave provider work
-running, which the session reports. Successful decompilation is cached until
-a relevant rename or comment changes it.
-
-Closing a session shuts down REA's bridge and removes its temporary socket
-directory while preserving the Hopper application. A `cleanup_incomplete`
-result identifies resources whose cleanup could not be verified.
-
 ### Hopper in CI

 REA's unattended Linux path is validated against Hopper's offered demo mode.
@@ -342,10 +264,7 @@ copying license secrets into logs, or killing unrelated Hopper processes.

 REA connects to an existing Ghidra installation on Linux x64, macOS x64/arm64,
 or experimental Windows x64 P0.
-It accepts Ghidra 12.1.x and the 64-bit full JDK declared by that installation's
-`application.java.min` and `application.java.max`. Current 12.1 releases require
-JDK 21 or newer and set no maximum. The bridge is verified with Ghidra 12.1.4
-and JDK 21. On macOS, the installation
+It requires Ghidra 12.1.4 and a 64-bit full JDK 21. On macOS, the installation
 must include the native decompiler for the host architecture; REA does not
 build it or change Gatekeeper quarantine settings.

@@ -360,7 +279,7 @@ entry comments atomically and returns refreshed analysis. These session metadata
 edits leave executable bytes unchanged and are discarded on close. GUI controls
 require Hopper; Windows P0 remains read-only.

-Windows P0 admits native x86 and x86-64 PE applications on fixed local NTFS volumes.
+Windows P0 admits native x86-64 PE applications on fixed local NTFS volumes.
 The npm package bundles native Job Object ownership, protected private runtime
 DACLs, and handle-based path admission; no separate addon installation is needed.
 See the [Windows Ghidra P0 guide](windows-ghidra-p0.md) for verified scope and
@@ -391,9 +310,9 @@ installation remains unavailable on Windows. Setup never installs Ghidra,
 Java, or Python. It preserves valid detected Ghidra/JDK settings in agent
 registrations. See [Windows Ghidra P0](windows-ghidra-p0.md) for provider diagnostics.

-Doctor validates the platform, architecture, Ghidra 12.1.x application version,
-`support/analyzeHeadless` or `support/analyzeHeadless.bat`, the installation's
-Java major range, 64-bit JDK bitness, and the presence of `javac`/`javac.exe`.
+Doctor validates the platform, architecture, application version,
+`support/analyzeHeadless` or `support/analyzeHeadless.bat`, Java
+version/bitness, and the presence of `javac`/`javac.exe`.
 When Java is found through `PATH`, setup records its observed JDK home so GUI
 MCP clients do not depend on an incidental shell path. Setup shows every exact
 environment entry in its plan, writes only after approval, and never downloads,
@@ -460,17 +379,6 @@ Ghidra/JDK installation; neither is inferred from startup alone.

 `rea doctor --json` is strictly read-only. `rea update` updates only the npm installation that owns the running CLI. Source checkouts and package-runner copies must be updated through the mechanism that owns them; a fresh package-runner invocation can use `npx rea-agents@latest`. `rea uninstall` removes only REA-owned agent registrations and skill files; `--purge-data` additionally removes REA cache and state paths.

-```bash
-rea update
-rea uninstall
-rea uninstall --purge-data
-```
-
-Uninstall preserves Hopper, Node.js, Evidence files, captures, unrelated skills
-and other MCP servers. Purging removes only REA's cache and state under
-`~/.rea`; malformed client configuration or purge-path symlinks stop the
-operation. See the [CLI guide](cli.md#output-and-exit-status) for exit statuses.
-
 ## MCP Registry

 REA is published in the official MCP Registry as `io.github.morluto/rea`. Registry
@@ -490,7 +398,7 @@ For a client that requires manual configuration, use:
  "mcpServers": {
    "rea": {
      "command": "npx",
-      "args": ["-y", "rea-agents@6.0.0", "mcp"]
+      "args": ["-y", "rea-agents@4.1.0", "mcp"]
    }
  }
 }
@@ -31,11 +31,6 @@ command and the generic route return their complete results inline. Native
 targets, single JavaScript files, `.app` bundles, and explicit deep-provider or
 snapshot requests retain the native deep-analysis route.

-Both CLI routes emit `rea_progress` JSON lines on stderr as inventory, source
-parsing, graph construction, validation, and Evidence hashing begin. Stdout
-remains the selected result document. Completion is reported after Evidence
-creation; a failed analysis retains its typed diagnostic result.
-
 Configure an MCP client with the ordinary REA setup command:

 ```bash
@@ -57,65 +52,22 @@ manifest and graph commitments, JavaScript Application Graph, static
 Electron summary, reconstruction statistics, and explicit limitations. It does
 not require a live Hopper, Ghidra, browser, or Electron process.

-## ASAR integrity
-
-ASAR inventory checks Electron integrity metadata for embedded archive entries
-and supplied `.asar.unpacked` companion files. An integrity failure identifies
-the logical path, declared and calculated SHA-256 values, and whether the entry
-was unpacked. By default, a mismatch is returned as a failure with its artifact
-context. Requests that support `integrity_policy` can explicitly select
-`record-and-continue` to inspect verified siblings while retaining the mismatch.
-
-An unpacked entry whose companion bytes were not supplied remains
-`unavailable`. REA continues analyzing embedded JavaScript and records the
-missing native/resource bytes as unknown. See [what is reconstructed](#what-is-reconstructed)
-for the inventory fields and [MCP integrity handling](mcp-contracts.md#integrity-record-and-continue)
-for the tool-result contract.
-
 ## Large results

-Application analysis projects semantic relationships one source file at a time.
-After projection, it retains only the lexical module facts and exported return
-shapes needed to build application relationships. Full source IR does not stay
-resident for every file together. Callable ownership and contained-reference
-queries use per-file range indexes, while call sites use exact-range lookups.
-Existing node budgets and coverage reporting remain in effect.
-
-Progress identifies the source file being parsed and projected. Cancellation is
-checked between files, with event-loop yields that allow notifications and
-completed file-local allocations to be released. A single file's synchronous
-parser and semantic extraction still need to finish before that boundary.
-
 Graph and Evidence identifiers hash canonical JSON incrementally, without
 assembling a single string for the whole graph. The canonical bytes and existing
 identifiers remain unchanged. The opt-in regression check is
 `npm run verify:javascript:digests`;
 it hashes a value larger than the running Node engine's single-string limit.

-Both application CLI routes stream complete JSON and JSONL output in bounded
-chunks, including field filters and `--full-output`. They wait for each stdout
-write instead of constructing or reparsing a document-sized string. The opt-in
-`npm run verify:javascript:output` checks the actual CLI formatting boundary with
-a temporary output file larger than the running engine's string limit, verifies
-its bytes and digest, and removes it. Use `-- jsonl` for the compact JSONL check.
-Each check needs space for one output file plus a 1 GiB free-space reserve.
-
-Other CLI formats and `--token-count` still assemble whole strings.
-Field selection remains useful when the caller needs a
-smaller view, for example `--format json --filter-output
-evidence_id,normalized_result.statistics`. Streaming output does not bound the
-memory needed to construct the analysis graph itself.
-MCP prepares the complete repeated response incrementally against the pinned
-SDK's 10 MiB stdio receive-buffer budget. Oversized results return an actionable
-transport constraint and the exact same-session Evidence reference. Use
-`trace_application_feature` to inspect a selected module's relationships, or
-`export_evidence_bundle` to write the complete canonical bundle without a
-document-sized allocation. Same-session analysis reads reuse authenticated
-immutable snapshots; foreign inline Evidence is still parsed and authenticated.
-See [MCP tool results](mcp-contracts.md#tool-results) for larger client buffers
-and `REA_MCP_MAX_RESPONSE_BYTES`. Follow-up results remain complete and can also
-exceed the transport budget. Compact result views are tracked separately in
-[#1050](https://github.com/morluto/rea/issues/1050).
+Output formatters and MCP transport serialization still assemble whole strings.
+For a large CLI result, select the needed fields
+before formatting, for example `--format json --filter-output
+evidence_id,normalized_result.statistics`. Complete serialization of a result
+beyond the engine's string limit is not established by this digest check.
+Client framing limits also apply: the pinned Node MCP SDK's stdio transport
+defaults to a 10 MiB buffer. Its caller-selected `maxBufferSize` must accommodate
+the complete response, including text and structured Evidence projections.

 ## What is reconstructed

@@ -241,27 +193,3 @@ paired, ambiguous, and unpaired IPC, validation candidates, utility processes,
 and native binding requests. These fixtures establish parser and artifact-reader
 claims; they do not replace the later operator-supplied real-application
 benchmark.
-
-URI schemes are classified independently of local file names: a reference such
-as `web3:app.js` remains external even when an artifact has that literal name.
-Scheme characters may include digits after the initial letter; a relative path
-such as `./web3:app.js` still names a local artifact.
-
-Package `exports` fallback arrays are supported both at the top level and under
-the root `"."` entry. The resolver selects targets in declared order using the
-same conditional and invalid-entry handling as nested exports arrays.
-
-ESM relative module paths and selected package exports targets use URL suffix handling
-and one percent-decoding pass. CommonJS relative paths and legacy package main
-fields retain literal filename punctuation. Exports targets must start with
-`./` and exclude `.`, `..`, and `node_modules` path segments, including their
-encoded forms, before URL normalization. Arrays skip invalid exports targets
-in declared order; URL decoding and file lookup failures for a selected target
-do not select a later entry. Rejected references retain the package metadata
-path, original target, failed constraint, and importing source location.
-
-HTML script references resolve to exact inventoried files after applying the
-document base and query/fragment rules. CommonJS module lookups retain extension
-and directory resolution.
-Unresolved HTML references retain their declaration, source range, and resolution
-reason in the renderer observations.
@@ -1,90 +0,0 @@
-# JavaScript source recovery
-
-`recover_javascript_sources` / `recover-javascript-sources` derives readable
-modules from one explicitly selected UTF-8 JavaScript file or bundle. Use it on
-files returned by `export_web_scripts` or other local scripts. The operation
-never executes the selected or recovered application code.
-
-## Caller-supplied engine
-
-The initial adapter is verified on Linux x64 with Wakaru **1.13.0**. Set
-`REA_WAKARU_COMMAND` to the absolute path of an executable supplied by the caller.
-The adapter uses util-linux `prlimit` (default `/usr/bin/prlimit`; override with
-an absolute `REA_JAVASCRIPT_PRLIMIT_COMMAND`). REA does not install either tool.
-Engine configuration is checked only when recovery is requested; other REA
-capabilities remain available without it.
-
-Unmodified upstream source is retained in `third_party/wakaru`, pinned to
-`6070266d24b32951fa2fe1d2dad5b4313bd5c81b` (v1.13.0, Apache-2.0).
-The result reports the executed binary's exact path, SHA-256 and observed version.
-The audited source revision is distinct from `executed_source_revision: null`:
-a version string cannot prove which source produced a caller-supplied binary.
-
-## Recover and analyze
-
-```sh
-rea recover-javascript-sources /tmp/web-scripts/app.js /tmp/recovered-app --json
-rea analyze-javascript-application /tmp/recovered-app/modules --json
-```
-
-MCP input:
-
-```json
-{
-  "path": "/tmp/web-scripts/app.js",
-  "output_directory": "/tmp/recovered-app"
-}
-```
-
-The output directory must be absent, absolute, and have an existing parent.
-The source is snapshotted in a private workspace, and the engine writes only to
-its own staging directory. Reported module paths, input identities, UTF-8 byte
-ranges, regular files and emitted map representations are validated before
-publication. REA writes verified bytes to an exclusively owned output tree and
-rolls it back on failure. It also checks that the original source and engine
-bytes remain unchanged before committing. The existing output is never overwritten.
-
-Published contents:
-
- `inputs/bundle.js`: exact original snapshot; its digest binds the Evidence.
- `modules/`: derived modules and any upstream-emitted source maps.
- `reports/stdout.json` and `reports/provenance.json`: exact producer reports.
- `manifest.json`: identities, modules, transform choices, warnings and limitations.
-
-The inline result includes complete file paths/digests/sizes, extraction ranges,
-warnings and `analysis_input`, directly usable as the arguments to
-`analyze_javascript_application`. Raw Evidence retains selected command arguments,
-reported input paths, exit status, stderr and reports; temporary paths are recorded
-as historical execution coordinates after their workspace is removed.
-
-## Transform choices and interpretation
-
-`extraction_mode` defaults to `structural` (Wakaru `--unpack=strict`). `heuristic`
-uses `--unpack=auto`; `inspection` uses `--unpack=inspect` and can return finer,
-non-executable regions. `rewrite_level` accepts `minimal`, `standard` (default)
-and `aggressive`. Maps and provenance are requested in every operation.
-
-Structural extraction can fall back to a single file. In the real fixtures,
-webpack 5 yields two modules; the esbuild scope-hoisted fixture remains one
-unknown-format script. Returned module counts and detected formats report those
-actual outcomes. A valid report with failed transformations returns `partial`
-with original warnings and files. An unusable report, inconsistent provenance,
-escaping path, symlink or missing module is an error, with owned cleanup.
-
-Evidence confidence is `derived`. Extraction ranges are half-open **UTF-8 byte
-offsets in the original snapshot**, rather than rewritten line positions or a
-coverage assertion. Source maps are preserved without claiming independently
-verified mapping accuracy. Original variable names and arbitrary runtime
-equivalence remain unknown. No network fetching occurs.
-
-## Resource policy and verification
-
-Each operation uses one worker, a 1 GiB address-space ceiling and a 120-second
-deadline; it accepts up to 64 MiB of input and 128 MiB/10000 entries of staged
-output, with 8 MiB per diagnostic/report stream. Exceeding a limit is an explicit
-failure with rollback. These limits apply per operation and do not claim aggregate
-host containment across concurrent callers.
-
-See [testing.md](testing.md#javascript-source-recovery) for the focused real
-Wakaru CLI/MCP lane and its source-owned compiler fixtures. Other host platforms
-and Bun/Vue recovery are not claimed by this adapter.
@@ -25,7 +25,7 @@ part of the current tool set.

 This guide describes the implementation and verification of
 [ADR-0003](adr/0003-managed-code-evidence-and-provider-boundary.md). The canonical
-tool inventory is the [build-generated catalog](mcp-contracts.md#generated-catalog).
+tool inventory is [`product-catalog.json`](product-catalog.json).

 ## Shipped scope

@@ -125,7 +125,7 @@ The upstream analyzer currently gates its own analysis to x86-64. NativeAOT's
 broader platform matrix does not establish REA coverage: PE/COFF, ELF, Mach-O,
 shared libraries, target architectures, and runtime metadata versions each need
 their own provider verification. REA's experimental Windows Ghidra boundary is
-limited to admitted native x86 and x86-64 PE applications, so it does not currently
+limited to admitted native x86-64 PE applications, so it does not currently
 establish coverage for PE DLLs. Mobile NativeAOT targets should remain
 experimental until REA has a matching provider and package-level verification.

@@ -284,13 +284,7 @@ Cross-version matching first prefers exact CIL/signature identity. When that
 does not match, it pairs an exact declared type, method name, and raw signature
 before trying structural body shape. The exact-signature key uses names only
 as part of that full tuple; names alone never select a pair. Duplicate tuples
-remain ambiguous rather than being paired by token order. Fields follow the
-same exact tiers. The raw signature is exact whether or not REA decoded it, so
-undecoded signatures pair by that tuple too, but they never enter structural
-rounds. An unmatched member is therefore reported as `unknown`, not added or
-removed, when its own signature was not decoded or when the other side has an
-unpaired member, one-sided or ambiguous, with the same declared type and name
-whose signature was not decoded.
+remain ambiguous rather than being paired by token order.

 For a matched method, an unavailable or partial body makes body-shape facets
 unknown while preserving observed signature differences. Structural identity
@@ -1,15 +1,5 @@
 # MCP runtime contracts

-## Generated catalog
-
-Run `npm run build:cached` in a source checkout to generate the machine-readable
-catalog at `docs/public/product-catalog.json`. The [catalog](product-catalog.json)
-is also included in documentation builds. PR CI retains it with the packaged
-skill and portable conformance projections in the `generated-docs` artifact.
-These outputs describe the exact source revision being built; they are not
-checked-in snapshots. For a running server, `binary_session` remains the
-authoritative source of catalog identity and tool availability.
-
 ## Identity and discovery

 `binary_session` reports the active package, server, SDK, and negotiated
@@ -23,24 +13,6 @@ are currently unavailable. Opening or closing a target or observing a provider
 health transition leaves that catalog unchanged and does not emit
 `notifications/tools/list_changed`.

-Advertised input and output schemas contain no reachable recursive references.
-The input compatibility profile limits nesting to ten object, array, and
-`anyOf`/`oneOf`/`allOf` levels, following local references per path. Property
-maps, reference definitions, and example data do not add schema levels. Tests
-check the complete catalog after SDK conversion and its generated counterpart.
-This is REA's local compatibility profile; individual model APIs can impose
-additional limits.
-
-For passive `compare_web_captures` inputs, pass each complete
-`inspect_web_page` result in `before.inspection` or `after.inspection`, with an
-optional complete `discover_webmcp_tools` result in the matching `webmcp` field.
-The input schema describes these producer-result objects as round-trip payloads.
-For scenario comparisons, pass complete `capture_browser_scenario` results in
-`before_scenario` and `after_scenario`. REA validates all nested fields with the
-original capture schemas; observation output schemas remain complete. Scenario
-authoring inputs and comparison normalization options retain their full
-advertised structure.
-
 Call `binary_session` with `{}` and read `result.tool_availability` to choose a
 callable operation for the current target, provider, host, and negotiated client
 capabilities. The default result includes the complete inventory with each
@@ -164,26 +136,6 @@ directly to `compare_functions`, and `inspect_artifact` Evidence to
 `compare_artifacts`. Use `get_evidence_bundle` when the task needs broader
 retained session history or an explicit bundle for transfer.

-REA prepares complete MCP results within the pinned stdio client's 10 MiB
-receive-buffer budget, including both text and structured representations and
-room for the JSON-RPC envelope. If a result cannot fit, REA returns
-`resource_constraint` with `details.resource: "transport"` before constructing
-a document-sized string. Analysis Evidence remains complete in the current
-session. Its exact reference is reported in
-`details.reported_limits.evidence_reference`; use it with a focused application
-workflow, or call `export_evidence_bundle` with a destination path. Complete
-bundle exports stream canonical JSON into an atomically published file. A broad
-follow-up or `get_evidence_bundle` can also exceed the response budget; exporting
-preserves the complete session without sending it through a single MCP frame.
-
-Clients that explicitly configure a larger receive buffer can set the REA
-server's `REA_MCP_MAX_RESPONSE_BYTES` environment variable to the same byte
-count. This setting must be a safe decimal integer at least 10485760; REA
-reserves 1024 bytes for the envelope. Raising it restores complete inline
-delivery for responses that fit that buffer and Node's single-string limit.
-It does not change the client's buffer, analysis coverage, or retained content.
-Ordinary responses keep their existing complete result contract.
-
 ## Retained application Evidence inputs

 `trace_application_feature`, `trace_javascript_semantics`,
@@ -280,12 +232,6 @@ Artifact integrity fails closed by default. A request can explicitly select
 `integrity_policy=record-and-continue` when the investigation needs verified
 siblings to continue after a mismatch.

-Strict member failures include `details.checksum_mismatches` for conflicting
-stored or decoded checksums, preserving each algorithm and declared/observed
-value. An unsupported checksum algorithm leaves that verification facet unknown;
-readable member bytes are still hashed and can be extracted, with the declared
-algorithm and value retained in limitations.
-
 Contradictory bytes are quarantined from nested expansion and recorded with
 declared and observed hashes, trust, provenance, path, and unpacked state.
 Verified siblings continue. Comparisons classify the result as a contradiction
@@ -12,13 +12,6 @@ input file and include the observed lipo slice offset for universal binaries.
 If that offset is unavailable, segment evidence locations are omitted with an
 explicit limitation; architecture inventory locations remain available.

- `trace_dylib_resolution` / `rea trace-dylib-resolution <app-or-mach-o>`
-  parses Mach-O load commands in TypeScript and follows dyld's path expansion
-  for every executable in an app bundle, or for one Mach-O within its directory.
-  It reports each `@rpath`, `@loader_path` and `@executable_path` candidate with
-  its outcome. Paths outside the analyzed root, including shared-cache system
-  libraries, stay undetermined. See
-  [Apple application analysis](apple-application-analysis.md#dylib-load-resolution).
 - `inspect_asset_catalog` / `rea inspect-asset-catalog <app>` reads compiled
  `Assets.car` metadata through macOS `assetutil --info`. Catalog digests, raw
  rendition fields, pagination and exact UI resource-name matches are returned.
@@ -37,8 +30,8 @@ explicit limitation; architecture inventory locations remain available.
  connections and controller/class names. `verify:interface-builder` compiles
  a source-owned AppKit XIB with `ibtool`. Storyboards require an installed
  iOS platform; unsupported archive forms remain explicit.
- `inspect_native_dispatch_metadata` /
-  `rea inspect-native-dispatch-metadata <app-or-binary>` prefers a validated macOS Mach-O byte reader. It decodes
+- `inspect_native_dispatch_metadata` / `rea inspect-native-dispatch-metadata
+  <app-or-binary>` prefers a validated macOS Mach-O byte reader. It decodes
  64-bit little-endian Objective-C class/metaclass records, superclass pointers,
  absolute/relative method entries, ivar offsets/sizes/alignment and protocol
  declarations. It also decodes simple Swift conformances, static synchronous
@@ -46,20 +39,9 @@ explicit limitation; architecture inventory locations remain available.
  vtable descriptors. Records include exact virtual addresses/file offsets and
  artifact evidence. Vtable indexes are metadata word offsets; witness indexes
  start after the conformance header. Names unavailable in metadata remain null.
-  Pointers are decoded through the image's fixups:
-  - `LC_DYLD_CHAINED_FIXUPS` rebases and binds, including the authenticated
-    arm64e formats;
-  - legacy `LC_DYLD_INFO` bind opcodes.
-
-  So an external superclass resolves from its `_OBJC_CLASS_$_` bind (for
-  example `NSObject`). The `pointer_fixups` coverage facet names the mechanism.
-  Class properties, with parsed attributes, and `__objc_catlist` categories are
-  also decoded. Categories record the extended class, local or external, plus
-  their methods, protocols and properties; category methods appear as
-  implementations with a `category`. Swift field-offset globals that are only
-  initialized at runtime stay unresolved. Generic, resilient, async and
-  coroutine tables, and inherited overrides, have explicit unsupported or
-  partial coverage. Other providers retain the
+  Chained fixups, external bindings, authenticated pointers, categories,
+  properties, generic/resilient/async/coroutine tables and inherited overrides
+  have explicit unsupported or partial coverage. Other providers retain the
  existing symbol-based inventory with its narrower coverage.

 ## Native instruction, call and type primitives
@@ -166,50 +148,9 @@ owned helper per scenario, removes its temporary compiler cache and stops its
 helper on cancellation. It does not launch or own the selected application. UI
 actions may change application data or trigger network activity.

-## Native call observation
-
-`observe_native_calls` / `rea observe-native-calls <app-or-mach-o> <input-json>`
-launches the active Mach-O as a new, owned process under LLDB. It stops at
-caller-selected entries, records them and continues:
-
- functions by exact symbol name, optionally limited to one image;
- Objective-C methods by selector, optionally limited to one class and to
-  instance or class methods.
-
-```sh
-rea observe-native-calls /Applications/Example.app '{"breakpoints":[{"kind":"objc-method","class_name":"NSURLSession","selector":"dataTaskWithRequest:completionHandler:"},{"kind":"function","name":"open","module":"libsystem_kernel.dylib"}],"duration_ms":5000,"backtrace_frames":4}' --json
-```
-
-Each event is an observation: thread, image, symbol, load and file address,
-the raw integer argument registers, optional caller frames and, for an
-Objective-C method, the selector read from `_cmd` and the receiver's dynamic
-class. Breakpoints stop at the symbol itself, so the registers hold the ABI
-arguments. The receiver class comes from LLDB's Objective-C runtime reader
-without running target code; no expression is evaluated, and REA never
-attaches to a process it did not launch.
-
-The run ends when the process exits, `max_events` entries are recorded, or
-`duration_ms` elapses. In the last two cases the process is killed, and REA
-confirms that it is gone. The result reports:
-
- the outcome, exit status and captured stdout/stderr (1 MiB kept per stream);
- signal or exception stops;
- every breakpoint's resolved locations; a breakpoint that matched no loaded
-  code makes coverage partial;
- limitations.
-
-Only entries are observed: return values, floating-point and stack arguments,
-and inlined or `objc_direct` calls are not. The target runs with the current
-user's permissions and may change files, show UI or use the network.
-
-Debugging must be allowed for the user (Developer Tools access). A
-hardened-runtime target without `com.apple.security.get-task-allow` cannot be
-debugged; `inspect_signature` reports this as the debugger-attach facet, and
-the tool fails with a `debugger-attach-denied` reason.
-
 ## Provider and verification boundaries

-Install a Ghidra 12.1.x release and the 64-bit full JDK it declares, then configure REA to
+Install Ghidra 12.1.4 and a full 64-bit JDK 21 separately, then configure REA to
 use them. Ghidra analysis supports Linux x64 and macOS x64/arm64; macOS requires
 the matching native decompiler. Experimental Windows x64 P0 admits native
 x86-64 PE applications on local NTFS using bundled Job Object ownership,
@@ -224,10 +165,8 @@ GUI authority, and REA never falls back automatically to Hopper.
  instruction/call facts, value dependencies and process/project cleanup.
 - `npm run verify:ghidra:aarch64-jump-table`: optimized ELF and byte/halfword
  relative tables, plus ARM64 Mach-O on an ARM64 macOS host.
- `npm run verify:apple-dispatch`: source-built Objective-C protocols, classes,
-  properties and categories, and Swift conformances and vtables. Each is linked
-  with legacy `LC_DYLD_INFO` and with chained fixups (and as arm64e on Apple
-  silicon), then repeated after stripping local symbols.
+- `npm run verify:apple-dispatch`: source-built Objective-C protocols/classes and
+  Swift conformances/vtables, repeated after stripping local symbols.
 - `npm run verify:native-ui`: one source-owned fixture window, successful
  selected-window capture and actions, changed-target rejection, and cleanup.
  Missing OS permissions fail this lane.
@@ -30,14 +30,6 @@ different recovery: reinstall REA for the active platform, architecture, and
 Node.js version with optional dependencies enabled. Capability diagnostics
 distinguish this from the Windows capture-adapter limitation.

-macOS also requires Apple's Swift compiler through `xcrun` for process
-ownership inspection. REA compiles its packaged, narrow process-inspection
-helper into a private temporary directory before a capture or owned provider
-process starts; the same prerequisite applies to owned provider-process
-supervision on macOS. REA removes that directory when it exits. REA does not
-install Xcode, Command Line Tools, or other software. Capability checks prepare
-this helper before reporting macOS capture as available.
-
 ## Capture a command

 Write a JSON scenario and pass its path to the CLI:
@@ -102,12 +94,6 @@ run the same owned-process cleanup path. Settlement reports whether the
 sampled process group quiesced or whether cleanup was needed or unverifiable;
 sampling cannot prove that every short-lived or detached descendant was seen.

-When the host withholds an unrelated process’s ownership token, REA leaves that
-process untouched and records its PID and reason in `cleanup.unverified_processes`
-and process residual unknowns. Successful cleanup verifies the owned group;
-it does not attribute those unrelated processes. Related or otherwise unexplained
-unreadable processes still prevent successful cleanup.
-
 ## Compare two captures

 Compare saved capture Evidence with:
@@ -0,0 +1,646 @@
+{
+  "package": {
+    "name": "rea-agents",
+    "version": "4.1.0",
+    "sdk": {
+      "server": "2.3.1",
+      "client": "2.3.1",
+      "core": "2.3.1"
+    },
+    "skill_version": "26"
+  },
+  "tools": {
+    "total": 126,
+    "families": [
+      {
+        "id": "direct",
+        "surface": "official-proxy",
+        "count": 41,
+        "tools": [
+          "address_name",
+          "address_to_file_offset",
+          "annotate_native_function",
+          "comment",
+          "current_address",
+          "current_document",
+          "current_procedure",
+          "goto_address",
+          "inline_comment",
+          "inspect_native_data_type",
+          "inspect_native_instruction",
+          "inspect_native_load_image",
+          "list_bookmarks",
+          "list_documents",
+          "list_names",
+          "list_procedures",
+          "list_segments",
+          "list_strings",
+          "next_address",
+          "prev_address",
+          "procedure_address",
+          "procedure_assembly",
+          "procedure_callees",
+          "procedure_callers",
+          "procedure_info",
+          "procedure_pseudo_code",
+          "procedure_references",
+          "read_bytes",
+          "read_function_instructions",
+          "resolve_containing_procedure",
+          "resolve_native_call_targets",
+          "search_procedures",
+          "search_strings",
+          "set_address_name",
+          "set_addresses_names",
+          "set_bookmark",
+          "set_comment",
+          "set_current_document",
+          "set_inline_comment",
+          "unset_bookmark",
+          "xrefs"
+        ]
+      },
+      {
+        "id": "enhanced",
+        "surface": "enhanced",
+        "count": 14,
+        "tools": [
+          "analyze_function",
+          "analyze_swift_types",
+          "batch_decompile",
+          "binary_overview",
+          "find_xrefs_to_name",
+          "get_call_graph",
+          "get_objc_classes",
+          "get_objc_protocols",
+          "inspect_native_api",
+          "inspect_native_dispatch_metadata",
+          "trace_call_path",
+          "trace_feature",
+          "trace_native_ui_action",
+          "trace_native_values"
+        ]
+      },
+      {
+        "id": "native",
+        "surface": "native-provider",
+        "count": 7,
+        "tools": [
+          "capture_native_ui_scenario",
+          "demangle_swift",
+          "inspect_macho",
+          "inspect_plist",
+          "inspect_signature",
+          "list_architectures",
+          "observe_native_ui"
+        ]
+      },
+      {
+        "id": "artifact",
+        "surface": "artifact-provider",
+        "count": 5,
+        "tools": [
+          "decode_interface_builder",
+          "extract_artifact",
+          "inspect_artifact",
+          "inspect_asset_catalog",
+          "inspect_keyed_archive"
+        ]
+      },
+      {
+        "id": "managed",
+        "surface": "managed",
+        "count": 7,
+        "tools": [
+          "compare_managed_members",
+          "import_managed_reconstruction",
+          "inspect_managed_artifact",
+          "inspect_managed_members",
+          "inspect_managed_native_boundaries",
+          "project_managed_application_graph",
+          "verify_managed_native_boundaries"
+        ]
+      },
+      {
+        "id": "firmware",
+        "surface": "firmware-provider",
+        "count": 2,
+        "tools": ["extract_firmware", "inspect_firmware_regions"]
+      },
+      {
+        "id": "android",
+        "surface": "android-provider",
+        "count": 5,
+        "tools": [
+          "inspect_android_class",
+          "inspect_android_method",
+          "inspect_android_package",
+          "search_android_classes",
+          "trace_android_references"
+        ]
+      },
+      {
+        "id": "browser",
+        "surface": "browser-provider",
+        "count": 9,
+        "tools": [
+          "analyze_web_bundle",
+          "capture_browser_scenario",
+          "capture_web_screenshot",
+          "compare_web_captures",
+          "compare_web_screenshots",
+          "discover_webmcp_tools",
+          "inspect_web_page",
+          "list_browser_targets",
+          "observe_web_session"
+        ]
+      },
+      {
+        "id": "electron",
+        "surface": "electron-provider",
+        "count": 5,
+        "tools": [
+          "analyze_javascript_application",
+          "capture_electron_scenario",
+          "inspect_electron_page",
+          "list_electron_targets",
+          "reconcile_javascript_runtime"
+        ]
+      },
+      {
+        "id": "javascript-runtime",
+        "surface": "runtime-provider",
+        "count": 2,
+        "tools": [
+          "list_javascript_runtime_targets",
+          "observe_javascript_runtime"
+        ]
+      },
+      {
+        "id": "application",
+        "surface": "application-workflow",
+        "count": 8,
+        "tools": [
+          "build_reconstruction_obligation_ledger",
+          "compare_application_versions",
+          "compare_javascript_export_shapes",
+          "compare_source_to_bundle",
+          "evaluate_reconstruction_coverage",
+          "export_web_scripts",
+          "trace_application_feature",
+          "trace_javascript_semantics"
+        ]
+      },
+      {
+        "id": "session",
+        "surface": "session",
+        "count": 21,
+        "tools": [
+          "binary_session",
+          "build_call_path",
+          "capture_process_scenario",
+          "close_binary",
+          "compare_artifacts",
+          "compare_bundles",
+          "compare_functions",
+          "compare_process_captures",
+          "correlate_static_and_runtime",
+          "export_evidence_bundle",
+          "find_changed_behavior",
+          "get_evidence_bundle",
+          "get_navigation_context",
+          "import_evidence_bundle",
+          "inspect_address_context",
+          "list_unknowns",
+          "open_binary",
+          "record_unknown",
+          "update_unknown",
+          "verify_reconstruction",
+          "verify_unknown_resolution"
+        ]
+      }
+    ]
+  },
+  "providers": [
+    {
+      "id": "binwalk",
+      "name": "Binwalk",
+      "version": "3.1.0",
+      "capabilities": ["inspect_firmware_regions"]
+    },
+    {
+      "id": "ghidra",
+      "name": "Ghidra",
+      "version": null,
+      "capabilities": [
+        "address_name",
+        "address_to_file_offset",
+        "analyze_function",
+        "annotate_native_function",
+        "inspect_native_data_type",
+        "inspect_native_instruction",
+        "inspect_native_load_image",
+        "list_documents",
+        "list_names",
+        "list_procedures",
+        "list_segments",
+        "list_strings",
+        "procedure_address",
+        "procedure_assembly",
+        "procedure_callees",
+        "procedure_callers",
+        "procedure_info",
+        "procedure_pseudo_code",
+        "procedure_references",
+        "read_bytes",
+        "read_function_instructions",
+        "resolve_containing_procedure",
+        "resolve_native_call_targets",
+        "search_procedures",
+        "search_strings",
+        "xrefs"
+      ]
+    },
+    {
+      "id": "hopper",
+      "name": "Hopper Disassembler",
+      "version": null,
+      "capabilities": [
+        "address_name",
+        "address_to_file_offset",
+        "analyze_function",
+        "comment",
+        "current_address",
+        "current_document",
+        "current_procedure",
+        "goto_address",
+        "inline_comment",
+        "list_bookmarks",
+        "list_documents",
+        "list_names",
+        "list_procedures",
+        "list_segments",
+        "list_strings",
+        "next_address",
+        "prev_address",
+        "procedure_address",
+        "procedure_assembly",
+        "procedure_callees",
+        "procedure_callers",
+        "procedure_info",
+        "procedure_pseudo_code",
+        "procedure_references",
+        "read_bytes",
+        "read_function_instructions",
+        "resolve_containing_procedure",
+        "search_procedures",
+        "search_strings",
+        "set_address_name",
+        "set_addresses_names",
+        "set_bookmark",
+        "set_comment",
+        "set_current_document",
+        "set_inline_comment",
+        "unset_bookmark",
+        "xrefs"
+      ]
+    },
+    {
+      "id": "ida",
+      "name": "IDA Pro MCP adapter",
+      "version": "1",
+      "capabilities": [
+        "analyze_function",
+        "list_procedures",
+        "list_strings",
+        "procedure_address",
+        "procedure_assembly",
+        "procedure_callees",
+        "procedure_callers",
+        "procedure_pseudo_code",
+        "read_function_instructions",
+        "search_procedures",
+        "search_strings",
+        "xrefs"
+      ]
+    },
+    {
+      "id": "jadx",
+      "name": "JADX headless",
+      "version": "0.7.1",
+      "capabilities": [
+        "inspect_android_class",
+        "inspect_android_method",
+        "inspect_android_package",
+        "search_android_classes",
+        "trace_android_references"
+      ]
+    },
+    {
+      "id": "native-macos",
+      "name": "macOS native inspection utilities",
+      "version": null,
+      "capabilities": [
+        "capture_native_ui_scenario",
+        "demangle_swift",
+        "inspect_macho",
+        "inspect_plist",
+        "inspect_signature",
+        "list_architectures",
+        "observe_native_ui"
+      ]
+    },
+    {
+      "id": "rea-artifact-graph",
+      "name": "REA safe artifact graph provider",
+      "version": "1",
+      "capabilities": [
+        "decode_interface_builder",
+        "extract_artifact",
+        "inspect_artifact",
+        "inspect_asset_catalog",
+        "inspect_keyed_archive"
+      ]
+    },
+    {
+      "id": "rea-cdp-browser",
+      "name": "REA Chrome DevTools Protocol observation provider",
+      "version": "2",
+      "capabilities": [
+        "analyze_web_bundle",
+        "capture_web_screenshot",
+        "compare_web_captures",
+        "compare_web_screenshots",
+        "discover_webmcp_tools",
+        "inspect_web_page",
+        "list_browser_targets",
+        "observe_web_session"
+      ]
+    },
+    {
+      "id": "rea-cdp-electron",
+      "name": "REA Electron file-page CDP observation provider",
+      "version": "1",
+      "capabilities": ["inspect_electron_page", "list_electron_targets"]
+    },
+    {
+      "id": "rea-dotnet-static",
+      "name": "REA managed static analysis provider",
+      "version": "1",
+      "capabilities": [
+        "inspect_managed_artifact",
+        "inspect_managed_members",
+        "inspect_managed_native_boundaries"
+      ]
+    },
+    {
+      "id": "rea-dotnet-workflows",
+      "name": "REA managed-code workflows",
+      "version": "1",
+      "capabilities": [
+        "compare_managed_members",
+        "import_managed_reconstruction",
+        "project_managed_application_graph",
+        "verify_managed_native_boundaries"
+      ]
+    },
+    {
+      "id": "rea-javascript-application",
+      "name": "REA JavaScript application analyzer",
+      "version": "1",
+      "capabilities": ["analyze_javascript_application"]
+    },
+    {
+      "id": "rea-javascript-application-workflows",
+      "name": "REA JavaScript application workflows",
+      "version": "1",
+      "capabilities": [
+        "build_reconstruction_obligation_ledger",
+        "compare_application_versions",
+        "compare_javascript_export_shapes",
+        "compare_source_to_bundle",
+        "evaluate_reconstruction_coverage",
+        "trace_application_feature",
+        "trace_javascript_semantics"
+      ]
+    },
+    {
+      "id": "rea-javascript-runtime-reconciliation",
+      "name": "REA JavaScript runtime reconciliation",
+      "version": "1",
+      "capabilities": ["reconcile_javascript_runtime"]
+    },
+    {
+      "id": "rea-playwright-browser-scenario",
+      "name": "REA Playwright browser scenario capture provider",
+      "version": "1",
+      "capabilities": ["capture_browser_scenario"]
+    },
+    {
+      "id": "rea-playwright-electron-active",
+      "name": "REA Playwright active Electron observation provider",
+      "version": "1",
+      "capabilities": ["capture_electron_scenario"]
+    },
+    {
+      "id": "rea-v8-inspector",
+      "name": "REA passive Node/Electron V8 Inspector provider",
+      "version": "1",
+      "capabilities": [
+        "list_javascript_runtime_targets",
+        "observe_javascript_runtime"
+      ]
+    },
+    {
+      "id": "rea-web-script-export",
+      "name": "REA captured script export",
+      "version": "1",
+      "capabilities": ["export_web_scripts"]
+    },
+    {
+      "id": "unblob",
+      "name": "Unblob",
+      "version": "26.6.4",
+      "capabilities": ["extract_firmware"]
+    }
+  ],
+  "setup_clients": [
+    {
+      "id": "claude_code",
+      "display_name": "Claude Code",
+      "format": "json",
+      "configuration": "managed"
+    },
+    {
+      "id": "claude_desktop",
+      "display_name": "Claude Desktop",
+      "format": "json",
+      "configuration": "managed"
+    },
+    {
+      "id": "codex",
+      "display_name": "Codex",
+      "format": "toml",
+      "configuration": "managed"
+    },
+    {
+      "id": "cursor",
+      "display_name": "Cursor",
+      "format": "json",
+      "configuration": "managed"
+    },
+    {
+      "id": "gemini_cli",
+      "display_name": "Gemini CLI",
+      "format": "json",
+      "configuration": "managed"
+    },
+    {
+      "id": "windsurf",
+      "display_name": "Windsurf",
+      "format": "json",
+      "configuration": "managed"
+    },
+    {
+      "id": "devin",
+      "display_name": "Devin",
+      "format": "json",
+      "configuration": "managed"
+    },
+    {
+      "id": "opencode",
+      "display_name": "OpenCode",
+      "format": "opencode",
+      "configuration": "managed"
+    },
+    {
+      "id": "antigravity",
+      "display_name": "Antigravity",
+      "format": "json",
+      "configuration": "managed"
+    },
+    {
+      "id": "copilot_cli",
+      "display_name": "GitHub Copilot CLI",
+      "format": "copilot_cli",
+      "configuration": "managed"
+    },
+    {
+      "id": "commandcode",
+      "display_name": "Command Code",
+      "format": "commandcode",
+      "configuration": "managed"
+    },
+    {
+      "id": "vscode",
+      "display_name": "VS Code",
+      "format": "vscode",
+      "configuration": "managed"
+    }
+  ],
+  "cli": {
+    "primary_count": 81,
+    "commands": [
+      "address-to-file-offset",
+      "analyze",
+      "analyze-javascript-application",
+      "analyze-web-bundle",
+      "annotate-native-function",
+      "build-reconstruction-obligation-ledger",
+      "capabilities",
+      "capture-browser-scenario",
+      "capture-electron-scenario",
+      "capture-native-ui-scenario",
+      "capture-process",
+      "capture-web-screenshot",
+      "compare",
+      "compare-application-versions",
+      "compare-javascript-export-shapes",
+      "compare-managed-members",
+      "compare-process-captures",
+      "compare-source-to-bundle",
+      "compare-web-captures",
+      "compare-web-screenshots",
+      "decode-interface-builder",
+      "decompile",
+      "demangle-swift",
+      "discover-webmcp-tools",
+      "doctor",
+      "evaluate-reconstruction-coverage",
+      "evidence-export",
+      "evidence-import",
+      "export-web-scripts",
+      "extract-artifact",
+      "extract-firmware",
+      "function",
+      "import-managed-reconstruction",
+      "import-reference-source",
+      "inspect",
+      "inspect-android-class",
+      "inspect-android-method",
+      "inspect-android-package",
+      "inspect-artifact",
+      "inspect-asset-catalog",
+      "inspect-electron-page",
+      "inspect-firmware-regions",
+      "inspect-keyed-archive",
+      "inspect-macho",
+      "inspect-managed-artifact",
+      "inspect-managed-members",
+      "inspect-managed-native-boundaries",
+      "inspect-native-api",
+      "inspect-native-data-type",
+      "inspect-native-dispatch-metadata",
+      "inspect-native-instruction",
+      "inspect-native-load-image",
+      "inspect-plist",
+      "inspect-signature",
+      "inspect-web-page",
+      "instructions",
+      "list-architectures",
+      "list-browser-targets",
+      "list-electron-targets",
+      "list-javascript-runtime-targets",
+      "observe-javascript-runtime",
+      "observe-native-ui",
+      "observe-web-session",
+      "project-managed-application-graph",
+      "providers",
+      "read-bytes",
+      "reconcile-javascript-runtime",
+      "resolve-native-call-targets",
+      "search",
+      "search-android-classes",
+      "setup",
+      "trace",
+      "trace-android-references",
+      "trace-application-feature",
+      "trace-javascript-semantics",
+      "trace-native-ui-action",
+      "trace-native-values",
+      "uninstall",
+      "update",
+      "verify-managed-native-boundaries",
+      "xrefs"
+    ],
+    "aliases": [
+      {
+        "name": "compare-bundles",
+        "target": "compare"
+      }
+    ]
+  },
+  "runtime_catalog": {
+    "counts": {
+      "cli_commands": 81,
+      "mcp_tools": 126,
+      "mcp_prompts": 6
+    },
+    "digests": {
+      "tools_sha256": "569db1182f19869a3bdb22cf217bc75526f317b59635c8866d0e62741077cd52",
+      "prompts_sha256": "ef2de8814390b340623c32001610aa2709d90bed51537b6e562ab3abf144ab4d",
+      "combined_sha256": "e21455dd7d64af94e0b07aff55ab82f03a37e46729ece51be38b50083d2d5b55",
+      "providers_sha256": "7949ddcf2eb5ba41b022bb3dfa1951ab96dbf5640285fa7fd5d35b0e4a5bdab3"
+    }
+  }
+}
@@ -3,10 +3,8 @@
 This guide describes repository main. Check the [released package boundary](installation.md#released-package-and-main) when using npm.

 Ghidra read-only analysis is available on Linux x64 and macOS x64/arm64.
-Install a Ghidra 12.1.x release and the 64-bit full JDK that release declares,
-then configure REA to use them. Current 12.1 releases require JDK 21 or newer
-and set no maximum. The bridge is verified with Ghidra 12.1.4 and JDK 21.
-macOS installations need the matching native decompiler.
+Install Ghidra 12.1.4 and a full 64-bit JDK 21 separately, then configure REA to
+use them. macOS installations need the matching native decompiler.

 REA imports one target into a temporary project and exposes 25 read-only
 operations after analysis completes. They cover inventories, search,
@@ -18,7 +16,7 @@ comments atomically, verifies readback, and returns refreshed function analysis.
 Changes live only in the session database and leave executable bytes unchanged.
 Ghidra does not expose GUI controls; Windows P0 remains read-only.

-Windows x64 P0 supports native x86 and x86-64 PE applications on local NTFS with
+Windows x64 P0 supports native x86-64 PE applications on local NTFS with
 bundled Job Object ownership, protected runtime DACLs, and handle-based path
 admission. Real ordinary-user verification covers all 25 read-only operations
 through the packaged CLI and MCP, target integrity, and cleanup. This remains
@@ -49,20 +47,18 @@ follow.
 - Report GUI cursor/navigation and persistent mutation operations as unavailable
  until their semantics and project ownership are explicitly designed.
 - Verify real claims on Linux with at least two distinct source-owned binaries.
-  Verify the Windows host claim with the deterministic source-owned x86 and x86-64 PE
-  fixtures and all admitted operations; compare normalized semantic facts rather
+  Verify the Windows host claim with the deterministic source-owned x86-64 PE
+  fixture and all admitted operations; compare normalized semantic facts rather
  than provider-specific pseudocode text.

 ## Shipped foundation boundary

-`GHIDRA_INSTALL_DIR` must identify an extracted Ghidra 12.1.x release. Optional
-`JAVA_HOME` must identify a 64-bit full JDK inside that installation's
-`application.java.min` and `application.java.max` (JDK 21 or newer, with no
-maximum, when the release leaves those at the 12.1 defaults). Otherwise doctor
-probes `java`/`javac` or `java.exe`/`javac.exe` from `PATH`. Supported Linux and macOS
+`GHIDRA_INSTALL_DIR` must identify an extracted official 12.1.4 release;
+optional `JAVA_HOME` must identify a 64-bit full JDK 21, otherwise doctor probes
+`java`/`javac` or `java.exe`/`javac.exe` from `PATH`. Supported Linux and macOS
 hosts accept compatible ELF, PE, and Mach-O executable targets. Host admission
 and target compatibility are separate checks. Windows x64 P0 admits only native,
-non-managed, non-DLL x86 and x86-64 PE applications on fixed local NTFS, with the packaged
+non-managed, non-DLL x86-64 PE applications on fixed local NTFS, with the packaged
 native authority available before launch.

 The launcher creates one ephemeral runtime root with project,
@@ -136,7 +132,7 @@ Mach-O target coverage. It requires `clang`, LLD, and `lld-link`; set
 these tools before compilation. Keeping this matrix separate lets Linux
 host/provider acceptance run with only the host compiler.

-`npm run verify:ghidra:windows` and its `-- --x86` variant check the source-owned native x86 and x86-64 PE
+`npm run verify:ghidra:windows` checks the source-owned native x86-64 PE
 fixture, all 25 read-only operations, target/snapshot/import SHA-256 linkage,
 and project, endpoint, process, and runtime cleanup. The independent native
 lane checks DACLs, handle admission, cancellation, and Job Object lifecycle.
@@ -165,12 +161,12 @@ only the generic process mechanisms.

 ## Shortlist

-| Provider                                                                                    | License / automation surface                                                                                                                                           | What it brings                                                                                                                                          | REA fit and blockers                                                                                                                                                                                                                                                                                                                                                                                                                        |
-| ------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| [Ghidra](https://github.com/NationalSecurityAgency/ghidra)                                  | Apache-2.0 source license; `analyzeHeadless`, Java APIs, and PyGhidra                                                                                                  | Static analysis, multiple processors and formats, scripting, and project/database workflows                                                             | 25 read-only operations shipped on Linux/macOS with installation checks, temporary projects, a serial API queue, and real ELF/PE/Mach-O conformance. Experimental Windows x64 P0 supports native x86 and x86-64 PE on local NTFS with bundled native controls and ordinary-user CLI/MCP verification; Linux/macOS additionally support atomic session function annotations; Windows mutation and all Ghidra GUI operations are unavailable. |
-| [Rizin](https://github.com/rizinorg/rizin) / [rz-pipe](https://github.com/rizinorg/rz-pipe) | Rizin repository contains LGPL-3.0 and GPL-3.0 components; `rizin`, `rz-bin`, and language bridges through `rzpipe`                                                    | Portable CLI analysis, disassembly/debugging, many architectures and file formats, JSON command output                                                  | Good candidate for a process-backed Linux provider and fast metadata fallback. License/component inventory must be preserved; command output needs version-pinned parsers and semantic conformance before evidence is trusted.                                                                                                                                                                                                              |
-| [LIEF](https://github.com/lief-project/LIEF)                                                | Apache-2.0; C++, Python, and other bindings                                                                                                                            | Deterministic parsing and modification of ELF, PE, Mach-O, COFF, and related executable formats; headers, sections, symbols, relocations, and functions | Best near-term complement, not a decompiler replacement. It can cover format metadata and artifact evidence without a long-lived analysis process; function semantics, pseudocode, CFG, and cross-reference parity remain out of scope unless separately demonstrated.                                                                                                                                                                      |
-| [Binary Ninja](https://docs.binary.ninja/dev/index.html)                                    | API/documentation components are MIT, while the analysis product is licensed by edition; commercial, Ultimate, or Headless license is required for headless automation | Python/Core/C++/Rust APIs, headless loading, IL layers, function analysis, plugins, and configurable analysis                                           | Strong technical fit for a native provider, especially function dossiers. Commercial licensing, license-secret handling, native runtime packaging, and multithreaded lifecycle rules are material deployment blockers.                                                                                                                                                                                                                      |
+| Provider                                                                                    | License / automation surface                                                                                                                                           | What it brings                                                                                                                                          | REA fit and blockers                                                                                                                                                                                                                                                                                                                                                                                                                |
+| ------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| [Ghidra](https://github.com/NationalSecurityAgency/ghidra)                                  | Apache-2.0 source license; `analyzeHeadless`, Java APIs, and PyGhidra                                                                                                  | Static analysis, multiple processors and formats, scripting, and project/database workflows                                                             | 25 read-only operations shipped on Linux/macOS with installation checks, temporary projects, a serial API queue, and real ELF/PE/Mach-O conformance. Experimental Windows x64 P0 supports native x86-64 PE on local NTFS with bundled native controls and ordinary-user CLI/MCP verification; Linux/macOS additionally support atomic session function annotations; Windows mutation and all Ghidra GUI operations are unavailable. |
+| [Rizin](https://github.com/rizinorg/rizin) / [rz-pipe](https://github.com/rizinorg/rz-pipe) | Rizin repository contains LGPL-3.0 and GPL-3.0 components; `rizin`, `rz-bin`, and language bridges through `rzpipe`                                                    | Portable CLI analysis, disassembly/debugging, many architectures and file formats, JSON command output                                                  | Good candidate for a process-backed Linux provider and fast metadata fallback. License/component inventory must be preserved; command output needs version-pinned parsers and semantic conformance before evidence is trusted.                                                                                                                                                                                                      |
+| [LIEF](https://github.com/lief-project/LIEF)                                                | Apache-2.0; C++, Python, and other bindings                                                                                                                            | Deterministic parsing and modification of ELF, PE, Mach-O, COFF, and related executable formats; headers, sections, symbols, relocations, and functions | Best near-term complement, not a decompiler replacement. It can cover format metadata and artifact evidence without a long-lived analysis process; function semantics, pseudocode, CFG, and cross-reference parity remain out of scope unless separately demonstrated.                                                                                                                                                              |
+| [Binary Ninja](https://docs.binary.ninja/dev/index.html)                                    | API/documentation components are MIT, while the analysis product is licensed by edition; commercial, Ultimate, or Headless license is required for headless automation | Python/Core/C++/Rust APIs, headless loading, IL layers, function analysis, plugins, and configurable analysis                                           | Strong technical fit for a native provider, especially function dossiers. Commercial licensing, license-secret handling, native runtime packaging, and multithreaded lifecycle rules are material deployment blockers.                                                                                                                                                                                                              |

 ## Recommended order

@@ -1,88 +0,0 @@
-# Recorded crash evidence
-
-`inspect_recorded_crash` / `rea inspect-recorded-crash` inspect a caller-selected
-Linux ELF64 x86-64 little-endian core independently of an active binary target.
-
-```sh
-export REA_PWNTOOLS_PYTHON=/absolute/existing/venv/bin/python
-rea inspect-recorded-crash ./crash.core --json
-```
-
-The selected Python needs unchanged pwntools 4.15.0, pyelftools 0.33 and Unicorn 2.1.2.
-REA does not install these dependencies. ELFFile/its original ELF structures and
-pwntools' original Linux amd64 ctypes provide parsing and ABI layout. The adapter
-adds bounds, representation preservation and lifecycle ownership.
-The initial Linux note profile accepts System V/unspecified and GNU/Linux OSABI
-with ABI version zero. Other declared ABIs return `unsupported_target` before
-note interpretation; an unspecified OSABI alone does not prove OS origin.
-
-## Recorded observations
-
- Artifact path, original SHA-256 and size; full normalized result and Evidence
-  are inline through CLI and MCP.
- Original program headers and recorded segment file/memory ranges. Undumped
-  memory and current executable/library identity remain unknown.
- Every note's original identity, owner/descriptor bytes and source ranges,
-  including unfamiliar owners and note kinds.
- Every exact Linux CORE PRSTATUS note as a separate recorded thread, with
-  historical PID, signal and lossless uint64 registers bound to source bytes.
-  Each supported note has exactly one interpretation; each thread contains the
-  complete 27-register ABI set, with names bound to their original ABI offsets.
-  Physical note ranges cannot overlap or leave segment gaps. ELF and note headers
-  are independently bound to the snapshot, including extended program counts.
- Signed SIGINFO number/code/errno. Initially only SIGSEGV codes 1/2 establish the
-  fault-address union; other variants retain raw bytes and unknown meaning.
-
-Historical PIDs are metadata. They never select a live process or authorize
-attach/control. Missing notes do not establish absence at the crash; note
-interpretation completeness and signal-thread association remain unknown.
-
-## Optional debugger mapping context
-
-```sh
-export REA_PWNDBG_GDB=/absolute/existing/gdb
-export REA_PWNDBG_GDBINIT=/absolute/unchanged/pwndbg/gdbinit.py
-export REA_PWNDBG_VENV_PATH=/absolute/existing/pwndbg-venv
-rea inspect-recorded-crash ./crash.core --debugger-context --json
-```
-
-MCP uses `{ "path": "/artifacts/crash.core", "include_debugger_context": true }`.
-Omitting this meaningful facet requests only recorded evidence. Requested but
-unavailable context returns an actionable failure; it never silently claims
-debugger coverage. GDB defaults to `/usr/bin/gdb`; the plugin and virtual
-environment require explicit absolute paths. Initial local verification covers
-Linux x64, GDB 13.1 and unchanged pwndbg 2026.09.15.
-
-The outer provider owns both processes and one stable core snapshot. An owned
-Python launcher lowers inherited soft limits before replacing itself with GDB.
-GDB starts without initfiles, auto-load, debuginfod or automatic shared-library
-loading. Owned empty library search paths and caches are used, with plugin
-updates disabled. Fixed package code verifies a core connection and no paired
-executable before querying mapping candidates. No caller GDB command language is
-exposed. The exact observed GDB/plugin version strings are retained.
-
-Mapping names are producer display metadata, with unknown current file identity.
-Map permissions are derived from reported flags; zero/unfamiliar flags leave
-permissions unknown. These maps do not establish page contents or an executable
-match. Core source bytes remain available independently of this enrichment.
-An Evidence envelope containing these maps is `derived`; inspection without
-debugger context is `observed`.
-
-## Bounds and verification
-
-Initial Linux x64 limits: 32 MiB input, 64 MiB decoder reply, 1 MiB diagnostics per
-stage, 30 seconds owned wall deadline per stage, 3 GiB address-space soft ceiling
-and 30 seconds CPU soft ceiling. Tighter inherited soft/hard limits are retained;
-hard limits are not raised. Complete oversized results fail explicitly. These
-process limits do not constitute a sandbox for caller-supplied engine code.
-
-Resource exit statuses need matching private failure-branch markers. Unmarked
-launcher failures retain their actual status/output and unknown resource cause.
-Cancellation, output truncation and independent owned cleanup remain explicit.
-
-`npm run verify:recorded:crash` uses source-owned fixtures and caller-supplied
-GDB/Python/pwndbg/strace. Fixture generation explicitly launches its owned test
-program; subsequent inspection only reads the resulting core. Real acceptance
-checks recorded threads, high registers, missing/malformed notes, opaque owners,
-CLI/MCP parity, optional debugger context and historical PID collision with an
-owned live sentinel. Original inputs and host configuration remain unchanged.
@@ -1,185 +0,0 @@
-# Releasing from a checkpoint
-
-REA releases use an explicit source checkpoint. Main can continue accepting
-changes while a release is tested and published. The Release workflow runs
-only when a maintainer dispatches it; main pushes do not refresh release PRs.
-
-## 1. Select the source
-
-Choose the next version from the unreleased Conventional Commits, including
-breaking changes. Record the full source SHA and create `release/VERSION` at
-that commit. The version is a maintainer choice; Release Please's proposed
-version must agree before publication.
-
-`release/VERSION` also sets the expected version for the workflow. Use an exact
-SemVer such as `release/6.1.0` or `release/6.1.0-rc.1`, without build metadata.
-The checkpoint validator rejects a candidate whose package, lockfile, manifest,
-registry metadata or changelog disagrees with that version before creating a tag.
-
-### Compatibility and version selection
-
-REA uses the default SemVer strategy: compatible fixes increment patch;
-compatible capabilities increment minor; incompatible public behavior increments
-major. Adding tools, internal refactoring and correcting behavior outside the
-supported contract do not by themselves require a major release.
-
-The supported public surface includes documented CLI commands/options, MCP tool
-names and input/result contracts, saved evidence formats and supported runtime
-requirements. Before adding `!` or a `BREAKING CHANGE` footer, a PR must identify
-a previously valid call or configuration that will fail or change meaning,
-explain why compatibility cannot be preserved, and give its migration. Prefer
-optional additions, compatibility adapters and a documented deprecation period;
-group deliberate removals into a planned major release. Maintainers review this
-impact before merging; the bot parses markers and cannot infer compatibility.
-
-For example, adding an optional inspection tool is a minor change. Rejecting a
-relative MCP path previously accepted by the public contract is breaking;
-rejecting an input that the existing contract already prohibited is a fix.
-Changing the version number alone does not restore compatibility.
-
-For example, after selecting a reviewed commit for 5.0.0:
-
-```bash
-git fetch origin main
-git branch release/5.0.0 SOURCE_SHA
-git push origin release/5.0.0
-```
-
-Replace `SOURCE_SHA` with the selected full commit SHA. The checkpoint must
-include this release workflow and CI support for release branches. For an
-older checkpoint, backport only the release infrastructure first and record
-that additional commit. Do not merge later implementation changes into the
-release branch or rebase the candidate onto a moving main.
-
-## 2. Prepare the bot PR
-
-Run the workflow definition from main and select the frozen source separately:
-
-```bash
-gh workflow run release.yml --ref main \
-  -f release_branch=release/5.0.0 -f phase=prepare
-```
-
-Release Please targets that branch and prepares its version, changelog, and
-registry metadata. The workflow uses an optional `RELEASE_PLEASE_TOKEN`
-repository secret and otherwise uses the built-in `GITHUB_TOKEN`. A dedicated
-GitHub App or personal access token can start PR CI automatically. With the
-built-in token, `opened`, `synchronize`, and `reopened` PR events create runs
-that require a maintainer with write access to approve them. See
-[GitHub's workflow trigger documentation](https://docs.github.com/en/actions/how-tos/write-workflows/choose-when-workflows-run/trigger-a-workflow).
-
-The generation step normalizes the product catalog. Preparation cannot create
-a GitHub release or publish a package. Record the final bot PR head after
-normalization, then approve that head's blocked runs from the PR page. Updates
-to the bot branch can create new approval-required runs; approval of an older
-head does not verify the normalized candidate. Wait for the final head's CI.
-
-The validator reads the actual ancestry range from the published baseline tag
-to the selected checkpoint, including visible first-parent Conventional Commits
-and the PR titles in GitHub's default merge messages. The report preserves the
-original merge subject alongside the extracted Conventional Commit title.
-This matters after merging a side-branch release back into a newer main:
-Release Please's chronological history cutoff can omit unreleased mainline
-commits. Unreleased breaking markers require a major increment and references
-in the new release's breaking-change migration section. Other omitted entries
-are reported for review. Historical notes from an older release cannot satisfy
-the new release's migration check. This audits declared markers and references;
-it does not prove API compatibility or the quality of a migration explanation.
-
-If preparation reports a mismatch or omitted breaking changes, inspect the
-recorded ancestry report, correct the release PR's version artifacts and notes,
-regenerate documentation, and review/test its final head. Do not repeatedly
-prepare over manual corrections. Publication independently checks the merged
-candidate again before Release Please can create a tag.
-
-Review the candidate's version, notes, generated metadata, and package
-contents. Wait for the candidate's CI and relevant real-provider checks.
-Routine local iterations need focused checks; CI owns full deterministic
-coverage and platform lanes. If an artifact or real-provider check is
-unavailable, report that limit before deciding to publish.
-
-Merge the reviewed PR into `release/5.0.0` with its head SHA matched. Further
-main commits do not change this candidate. A necessary release fix belongs
-on the release branch, must be reviewed and tested, and establishes a new
-recorded checkpoint.
-
-## 3. Publish the reviewed merge
-
-After the release PR has merged:
-
-```bash
-gh workflow run release.yml --ref release/5.0.0 \
-  -f release_branch=release/5.0.0 -f phase=publish
-```
-
-Publication creates the release from the merged bot PR without preparing or
-updating another PR. Both npm and MCP Registry jobs check out Release Please's
-exact release SHA. They do not build the current main tip or a mutable branch.
-The publish dispatch runs from the frozen release branch so npm's provenance
-records the actual release commit. Before Release Please creates a tag, the
-workflow accepts only `prepare` or `publish` and requires the selected branch
-tip to equal the dispatch SHA. Registry jobs run only during `publish`. After
-a tag exists, a mismatch between that tag's SHA and the dispatch SHA stops
-both registry publishes.
-See [npm's provenance implementation](https://github.com/npm/cli/blob/v11.16.0/workspaces/libnpmpublish/lib/provenance.js)
-for the use of GitHub's workflow ref and commit SHA.
-
-The workflow builds the bundled Windows controls and verifies the packaged
-artifact before npm publication. It then verifies the published CLI, the
-capability-scoped MCP catalog, and the isolated package update path before
-publishing MCP Registry metadata.
-
-Record these outcomes separately:
-
- GitHub release and tag, including the resolved commit SHA.
- npm's exact version and integrity, with the published-package canary passed.
- MCP Registry's exact server version and matching npm package version.
-
-A GitHub tag alone does not establish npm or MCP Registry publication.
-
-## 4. Sync metadata back to main
-
-Post-release synchronization is part of completing the release. Finish it
-before cutting the next checkpoint; otherwise main retains the previous
-release baseline and can propose an already-published version again.
-
-After publication, open a PR from the release branch back to main. Preserve
-main's later implementation changes and regenerate ignored build outputs from
-the combined contracts with the released package version.
-Review and test this synchronization PR, then use a merge commit so the release
-tag remains in main's ancestry. Keep the released tag unchanged.
-
-The synchronization must include `.release-please-manifest.json`,
-`package.json`, both root versions in `package-lock.json`, `CHANGELOG.md`,
-`server.json`, and the versioned documentation examples. Run
-`npm run docs:generate`, `npm run docs:check`, and the release configuration
-tests against the combined tree. After the merge, verify that the released
-tag is an ancestor of main:
-
-```bash
-git fetch origin main --tags
-git merge-base --is-ancestor rea-agents-5.0.0 origin/main
-```
-
-Close any superseded rolling release PR. Future releases repeat the checkpoint
-procedure from main; never resume automatic release-PR refreshes on main pushes.
-Preparation generates and validates the catalog, portable conformance
-projections, and packaged skill from the candidate checkout without committing
-them. The checkpoint validator binds tracked version authority to the source
-SHA; generated-catalog and package checks validate the derived representation.
-No generated-metadata workflow pushes follow-up commits onto feature or release
-branches.
-
-## Partial publication and retries
-
-Inspect the failed job and public registry state before retrying. When npm is
-already published, the npm job verifies that exact version instead of
-publishing it again. Re-run failed jobs in the original publication run so its
-release SHA and outputs stay fixed. If only MCP publication failed, retry that
-job after checking that the npm canary succeeded.
-
-A branch tip that moved after dispatch fails before Release Please creates a
-tag. Do not dispatch a fresh publish phase to repair an already-created
-release: Release Please will not create the same release again. Do not move
-the tag, delete the release, or unpublish npm as a retry. A defective public
-package requires a reviewed correction and a new version.
@@ -20,30 +20,6 @@ validation, provider prerequisites, target identity, cancellation, and owned
 resource cleanup remain part of each tool's contract. Setup still discloses
 installation changes and requires approval before writing or installing.

-## Planned work
-
-The [website guides](https://morluto.github.io/rea/guides/) and
-[generated catalog](product-catalog.json) describe available workflows.
-Current development priorities are:
-
- Keep generated metadata and narrative documentation aligned with tools,
-  providers, setup options and releases.
- Expand native architecture, type and indirect-call verification across
-  Hopper and Ghidra.
- Connect additional static extractors and runtime observations to
-  cross-layer feature traces.
- Improve obfuscated .NET comparisons and links between managed findings
-  and verified native analysis.
- Extend process, protocol, filesystem, reconnect and build-comparison
-  coverage, plus browser and Electron scenario actions.
- Evaluate native runtime observation through LLDB, Frida, system logs and
-  API tracing, and additional tools and targets such as Binary Ninja, Rizin,
-  LIEF, Windows-native workflows, mobile applications and firmware.
-
-Provider additions and platform support require the corresponding real
-verification lanes; see [testing](testing.md) and
-[provider evaluation](provider-evaluation.md).
-
 ## Remaining evidence and provider work

 The [platform roadmap](https://github.com/morluto/rea/issues/32),
@@ -69,10 +45,8 @@ verified paths for an existing Ghidra installation. It configures Claude Code,
 Claude Desktop, Codex, Cursor, Gemini CLI, Windsurf, Devin, OpenCode, Antigravity,
 GitHub Copilot CLI, Command Code, and VS Code using each client's configuration format.

-Ghidra analysis supports Linux x64 and macOS x64/arm64 with Ghidra 12.1.x and the
-64-bit full JDK that installation declares. Current 12.1 releases require JDK 21
-or newer and set no maximum; the bridge is verified with Ghidra 12.1.4 and JDK 21.
-macOS also requires the matching native decompiler. The
+Ghidra analysis supports Linux x64 and macOS x64/arm64 with Ghidra 12.1.4 and a
+64-bit full JDK 21. macOS also requires the matching native decompiler. The
 adapter exposes thirteen inventory operations and twelve function-analysis
 operations, for 25 read-only operations total. Linux and macOS additionally support
 atomic function-name and entry-comment edits with refreshed analysis; metadata
@@ -86,7 +60,7 @@ Mach-O cross-target fixtures. See [testing](testing.md) for the prerequisites
 and exact commands.

 Experimental Windows x64 P0 now supplies bundled Job Object ownership,
-protected runtime DACLs, and handle-based admission for native x86 and x86-64 PE
+protected runtime DACLs, and handle-based admission for native x86-64 PE
 applications on local NTFS. Real ordinary-user CLI/MCP verification covers
 all 25 read-only operations and cleanup. The [Windows P0 guide](windows-ghidra-p0.md)
 describes this boundary and unverified broader coverage.
@@ -0,0 +1,169 @@
+# Test suite audit
+
+## Scope and priority
+
+The expanded audit on 2026-10-04 reviewed every one of the 355 Vitest files
+present at its start: 82 domain/contracts, 56 application/composition, 147
+adapter/configuration/process/filesystem/CLI files, and 70 MCP/acceptance/
+conformance/evaluation files. Three review passes checked the proposed removals
+against existing stronger coverage and checked the final changes for lost
+assertions. The remaining suite has 351 files.
+
+Prefer full real-provider E2E, then integration across schemas and transports,
+then real-data goldens. Remove lower-level duplication once the replacement
+asserts the same behavior. Keep distinct failure regressions that a successful
+E2E cannot exercise. Do not lower coverage thresholds to accommodate pruning.
+
+## Changes made
+
+| Previous test or assertion                                                                      | Decision                              | Replacement or retained claim                                                                                                        |
+| ----------------------------------------------------------------------------------------------- | ------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------ |
+| Asset application tests using fabricated `.car` bytes and injected utility JSON                 | Remove two plumbing cases             | `verify:asset-catalog`: real actool → assetutil → CLI and stdio MCP, including digest, full metadata, pagination and invalid input   |
+| Keyed archive positive binary/XML objects assembled with the same plist library as the reader   | Remove two synthetic success cases    | Captured Foundation XML plus reviewed complete object/reference graph golden; real Foundation binary/XML → CLI and stdio MCP         |
+| Generic contract schema/annotation/example loops and output-map inventory comparisons           | Consolidate into one SDK wire test    | Assert exported schemas, guidance, effect annotations and valid examples on the actual advertised MCP catalog                        |
+| Ghidra function operation enum membership                                                       | Remove                                | Canonical catalog, provider handshake and actual operation roundtrips establish admission; malformed provider results remain covered |
+| Asset page assertion pinning `10_001`                                                           | Remove                                | Invalid-page rejection through real MCP; malformed utility data still covered                                                        |
+| Suggested prompt tool positions                                                                 | Remove incidental ordering assertions | Keep authority, evidence, untrusted input and preparation constraints                                                                |
+| Package “acceptance” assertions pinning CI matrix/shard values and fake launcher command arrays | Remove configuration-shaped cases     | Actual package/install verifier remains; retain a compact release verification-before-publish and registry-canary static guard       |
+| Package failure classifier under acceptance                                                     | Move to package evaluation            | Preserve all malformed/unrelated-failure rejection cases; do not call them E2E                                                       |
+| Native value graph checks conditional on success                                                | Strengthen                            | Require success before pagination/ambiguity assertions; unexpected errors can no longer pass                                         |
+| Native UI verifier treating permission denial as a positive pass                                | Separate outcomes                     | Default lane requires real capture/action success; opt-in permissions lane explicitly reports no positive E2E proof                  |
+
+Ten previous test cases were removed or consolidated; three replacement
+Vitest cases cover the captured goldens and release guard. The two real artifact
+E2E scripts add product-level evidence outside the deterministic Vitest count.
+
+## Exhaustive follow-up
+
+The follow-up removes or consolidates another 31 test declarations, including
+three redundant test files. Parameterized declarations and executed cases have
+different counts; the figures above count source declarations. It also repairs
+assertions that could pass without exercising their stated behavior.
+
+| Area                         | Cleanup                                                                                                                       | Stronger retained evidence                                                                                        |
+| ---------------------------- | ----------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------- |
+| Configuration                | Merge duplicate target/loader tests and preserve custom launcher, explicit provider and actionable error diagnostics          | Independent malformed inputs; each capability flag is rejected separately                                         |
+| Browser scenarios            | Remove fake launch success and expression-selected artifact success                                                           | Real Chromium scenarios, actual artifacts, CLI capture and owned/external cleanup in `verify:browser`             |
+| CLI policy                   | Remove duplicate confirmation helper cases                                                                                    | Compiled CLI proves project files stay unchanged until `--yes`; distinct interactive choices remain               |
+| Provider capabilities        | Remove numerical catalog freezes; consolidate Hopper byte-read discovery                                                      | Exact canonical capability identities, admission, mutation effects and detached descriptors                       |
+| Evidence ledger              | Merge reordered-key checks into serialized bundle import; remove one-record quota claims                                      | Atomic import, conflicts, residual revisions, actual large collections and byte regressions                       |
+| MCP batching and concurrency | Replace maximum concurrency and empty indistinguishable responses                                                             | Every distinct ordered batch result; concurrently gated requests complete in reverse order with matching payloads |
+| MCP inventories and graphs   | Remove traversal/inventory call order and redundant catalog/prose checks                                                      | Exact complete cyclic graph, full inline inventories, canonical SDK catalog and all-handler roundtrips            |
+| Authority and lifecycle      | Attempt the refused Ghidra mutation; require successful setup, call and switch; close twice                                   | Typed refusal with zero mutation dispatch, restored target calls and exact owned-resource cleanup                 |
+| Process and provider output  | Remove incidental environment read and command option order/defaults                                                          | PID/ownership validation, exact disabled-policy failure and complete decoded response above 10 MiB                |
+| Conformance and CI guards    | Merge identical replay runs; remove duplicate missing-row fault, trivial hash/self equality and incidental worker/step counts | Distinct faulty evidence, digest order, actual test discovery, file existence and release/runner authority        |
+| Pure schemas                 | Remove fabricated comparison-dimension injection and impossible long boundary success                                         | Real artifact comparison and SDK coverage evaluation with returned boundary identity                              |
+
+The removed long boundary selector test only parsed a 1,000-character request;
+workspace boundary identities admit at most 200 characters, so that positive
+could never represent a successful evaluation. The actual MCP evaluation stays
+covered. One unused ledger serialization helper was also retired after removing
+its only test consumer; no CLI or MCP contract changed.
+
+No further immediately safe pruning was identified in the final review. Retained
+replacement candidates below are coverage gaps, rather than permission to delete
+unique tests. Test-only domain scaffolding also stays pending a separate decision
+about the corresponding source behavior; deleting those tests alone would leave
+unverified code and fail unused-export checks.
+
+## Stronger replacements from the closing pass
+
+Three more synthetic success cases were removed. Native value composition now
+runs through the production CLI and a separate stdio MCP subprocess with real
+Ghidra, using a source-built native fixture. It checks argument/parameter/return
+relationships, the fixture's global operand, authenticated Evidence, upstream
+and workflow analysis profiles, identical CLI/MCP graphs, discovery availability
+and successful MCP session closure. Ambiguity, cancellation, target changes,
+missing flow and bounded-work regressions remain in the focused suite.
+
+That replacement found missing CLI workflow routing for `trace_native_values`
+and missing workflow profile classification. The routing and discovery now use
+the composed operation's actual provider prerequisites; workflow Evidence commits
+to the upstream Ghidra profile.
+
+The lone hand-built client-document equality test is replaced by a real TOML
+filesystem transaction: reversed environment keys leave the original bytes
+unchanged and create no backup. A real ZIP entry with an application root longer
+than 5,000 characters replaces injected schema-only positive data. Inventory
+completeness tests partition actual scans into authenticated partial observations
+and require exact assembled results and every source citation, including more
+than 100 citations. These are consumer merge tests, not provider pagination
+claims. Replay aggregation now covers all four statuses and retains actual runner
+diagnostics; it does not claim to execute a real sandbox. Retained pixel-metric
+fixtures now write correct PNG chunk checksums.
+
+The all-zero screenshot buffer is replaced by a real Chromium PNG of 9,467,940
+bytes, transported intact through CLI and stdio MCP and decoded by the production
+pixel comparator. The verifier configures the SDK client's receive buffer because
+its 10 MiB default is smaller than the inline JSON response. This does not claim
+large comparison-request transport coverage. A real SDK initialize request,
+captured during a successful production stdio handshake, replaces the JSON-RPC
+decoder's field-count-only oracle with exact field/value expectations.
+
+The closing pass also removed assertions tied to internal call order, defaults,
+private cache sizes, duplicated polling and fabricated schema extensions. Unique
+malformed-input, security-capacity and cleanup regressions remain.
+
+## Real process regression found
+
+The full suite exposed a renderer ordering race. Publishing a terminal output
+journal entry could synchronously trigger a reactive resize before the preceding
+output was queued for rendering. Queue that output first. The existing real
+source-owned interactive PTY test now also requires the first resized frame to
+contain the output that triggered the resize, preserving the original event
+order rather than sorting or changing timestamps to conceal it.
+
+## Coverage kept
+
+Malformed archives, broken and cyclic references, unsupported metadata pointers,
+relative Objective-C method layouts, ambiguous call candidates, digest mismatch,
+cancellation, host permission denial, bounded output and owned-resource cleanup
+remain covered. These cases provide evidence beyond a successful real-tool run.
+The hand-assembled relative method fixture stays until compiler-produced
+relative-list fixtures establish equivalent assertions.
+
+## Remaining priorities
+
+1. Extend the real Ghidra CLI/stdio MCP journey from value tracing to dispatch
+   and UI handlers before pruning their hand-authored composition success cases.
+   Native value tracing now establishes full transport parity.
+2. Real binary dispatch and nib → full product transports, with normalized
+   semantic goldens. The compiler-backed readers already run in the new Apple
+   CI lane; synthetic pointer/layout rejection tests remain useful.
+3. An approved interactive macOS runner for native UI capture/actions, including
+   stdio MCP scenarios. Hosted runners without permissions cannot supply this
+   proof. No arbitrary application's windows should be opened for this lane.
+4. Real macOS/Linux Ghidra CI runners with bring-your-own installations. This
+   change adds Apple artifact CI without installing Java or Ghidra.
+5. Classify fake-runner replay/application acceptance accurately and replace
+   repeated happy paths only after real sandbox journeys assert the same claims.
+   The replay workflow's allow-unavailable mode must not imply executed replay.
+6. Replace repeated-array schema ceiling tests with real producer/transport
+   regressions before deleting them. Existing integration tests do not yet
+   establish their large-input guarantees.
+
+Some static guards protect irreversible release authority rather than product
+behavior. Keep these few guards explicit and separate from E2E evidence.
+
+## Verification after the expanded audit
+
+- `npm run check:pr`: 351 files passed; 1,794 tests passed and two skipped.
+  Typecheck, lint, formatting, unused-code and generated-document gates passed.
+- `npm run check:fast`: passed; 70 lint warnings and zero errors.
+- `npm run verify:browser`: actual Chromium observation and scenario CLI routes,
+  retained artifacts, owned/external lifecycle checks and large CLI/stdio MCP PNG
+  capture passed.
+- `npm run verify:ghidra`: macOS ARM64 with Ghidra 12.1.4/JDK 21 passed, including
+  real native value tracing through CLI and stdio MCP: 171 nodes, 298 edges and
+  six decompilations.
+- `npm run verify:asset-catalog`: real actool/assetutil → CLI and stdio MCP,
+  complete records, pagination and malformed input checks passed.
+- `npm run verify:keyed-archive`: real Foundation binary/XML → CLI and stdio MCP,
+  full graph golden, shared/cyclic identity and malformed scope checks passed.
+
+- `npm run verify:fixtures`: seven source-built host fixtures, source/artifact
+  digests and exhaustive inventory checks passed.
+
+No Hopper windows were opened for this audit. The closing pass runs real Ghidra
+on macOS ARM64; earlier Hopper evidence remains separate. No new hosted CI success
+is claimed.
@@ -6,27 +6,10 @@ from real captured inputs. Keep focused module tests for distinct failure or
 semantic cases that these workflows cannot reliably reproduce. A test's path
 or suite name does not establish its behavioral depth.

-Avoid tests that mirror getters, enum mappings, fixture helpers, or prescribed
-call sequences. Prefer one representative workflow over a Cartesian matrix
-when every row crosses the same boundary. Keep distinct command handlers,
-producer representations, failure reasons, and lifecycle states covered.
-Consolidate their shared setup without hiding the inputs or expected evidence.
-
 Tests are grouped into Vitest projects so ownership, allowed dependencies and
-runtime cost are visible from their paths. Before pruning a distinct boundary
-regression, identify the replacement scenario and its assertions; passing
-success journeys do not replace malformed input, cancellation, permission or
-cleanup coverage. Trivial helper checks do not need a replacement. If only
-tests consume a production module, trace CLI/MCP and verifier imports,
-including imports of compiled files, and remove abandoned scaffolding with its
-tests when it has no runtime consumer.
-
-Measure slow files before removing capacity regressions. Optimize repeated
-process startup, fixture construction, and production algorithms when they
-dominate runtime. Keep at least one input beyond each formerly failing size or
-depth; smaller fixtures do not establish that truncation or stack exhaustion
-has been fixed. Record the toolchain, coverage mode, and cache conditions when
-comparing durations.
+runtime cost are visible from their paths. Before pruning a test, identify the
+replacement scenario and its assertions; passing success journeys do not
+replace malformed input, cancellation, permission or cleanup coverage.

 ## Behavioral depths

@@ -49,12 +32,6 @@ registries but do not cross production filesystem, process, socket, or browser b
 Boundary tests cross one production boundary. Only acceptance tests assemble
 the complete runtime or invoke the compiled product surface.

-Binary session, registry, lazy-client and snapshot module cases live under
-`src/application/binary/`. Their composition cases stay in
-`tests/composition/analysis-sessions/`; snapshot persistence and actual SDK calls
-stay in the filesystem and MCP boundary lanes. The shared injected session fixture
-serves several capabilities and remains under `tests/fixtures/`.
-
 Focused immutable builders and recording ports shared by one test family live
 beside their production owner as `src/**/*.fixture.ts`. They are typechecked
 with the suite and excluded from package builds; broader runtime and provider
@@ -78,16 +55,6 @@ needed, exercise the actual target through browser, Electron, or process
 capture. Real model trials are manual; Vitest covers deterministic evaluator
 logic.

-`verify:managed` runs the portable PE byte-fixture conformance entrypoint under
-`scripts/verify/managed/`, with its byte builder under
-`scripts/fixtures/managed/`. It checks static classification, members,
-reconstruction, native-boundary relationships and application graphs without
-executing fixture PE files. Operator-local manifests and actual ILSpy oracles
-remain optional, separately reported checks; the real Ghidra NativeAOT lane has
-its own toolchain prerequisites. See [the managed guide](managed-code-analysis.md)
-for those configurations. Generated completion-ledger checks use the same owning
-entrypoint and include its verifier/fixture files in their cache inputs.
-
 ## End-to-end, integration and golden evidence

 Full E2E tests invoke the production command dispatcher and real providers,
@@ -98,53 +65,6 @@ an XML graph golden. `verify:asset-catalog` compiles source-owned colors with
 `actool`, invokes real `assetutil`, then checks CLI/MCP results, exact catalog
 digest, every raw metadata field, pagination and malformed input rejection.
 Neither artifact workflow requires Hopper or launches it. Both run in macOS CI.
-`verify:installer-package` needs only macOS's `pkgbuild`, `productbuild` and
-`pkgutil`. It builds a component package with install scripts, a product package
-around it, and a pbzx (`--compression latest`) package. It checks that
-`inspect-artifact` expands Scripts and Payload with exact content digests, and
-that the expanded Payload members equal Apple's `pkgutil --payload-files`
-listing. It also checks that the product package nests its component, that the
-pbzx payload is recorded with a limitation instead of being expanded, and that
-CLI and stdio MCP results agree.
-`verify:macos-bundle` needs only macOS with Command Line Tools. It compiles a
-source-owned app with `clang`: a versioned framework, XPC services, an app
-extension, a login item, a privileged helper, launchd plists, and a helper tool,
-signed ad hoc. It packs the app as a directory, a `ditto` ZIP, and an APFS DMG,
-then checks that `inspect-artifact` plus `project-apple-application-graph`
-report the same bundle anatomy for all three through the CLI, with stdio MCP
-parity. It also checks that the DMG is detached afterwards. The same app
-covers `trace-dylib-resolution`:
-
- each resolution status and finding, with CLI/MCP parity;
- for every traced image, dependencies, rpaths, and install names equal to
-  `otool -l`;
- for the main executable and an XPC service, a predicted load order equal to
-  the images dyld actually loads under `DYLD_PRINT_LIBRARIES`.
-
-It runs in macOS CI.
-
-Apple artifact verifiers live in `scripts/verify/apple/`, with the macOS bundle
-builder under `scripts/fixtures/apple/` and NIB byte fixtures beside the decoder
-in `src/artifacts/apple/`. The npm entrypoints are unchanged. Format-specific
-Swift/XIB/asset sources and goldens retain their locations; real Apple workflows
-resolve them from the verifier file URL and run in the macOS CI lane.
-
-Portable native semantics and their tests live in `src/domain/native/`; shared
-analyst workflows and service-lane tests live in `src/application/native/`.
-Named native contracts live in `src/contracts/native/`. Provider protocol and
-host UI tests retain their adapter/boundary lanes, and real verifier command
-names remain unchanged.
-The existing Apple CI job also runs the host Swift-demangling CLI/MCP regression
-suites, including option-like symbols, carriage returns and multiline rejection.
-
-Process semantics/tests live in `src/domain/process/`; PTY capture implementation
-and forked helper tests live in `src/process/capture/`. Evidence projection and
-file workflows live in `src/application/process/`; producer-backed Evidence/host
-cases run in the serial `tests/boundary/process/` lane. Installed-package probes
-load the compiled capture capability owner, including the missing-optional-module
-case. Real capture tests preserve actual descendant and cleanup checks.
-The existing Apple job also exercises the relocated filesystem snapshot identity,
-cancellation and descriptor cleanup regressions on macOS.

 MCP SDK transport tests with recording providers remain integration tests.
 They are useful for schema drift and failure projection but do not prove that
@@ -186,13 +106,8 @@ It uses an installed browser and accepts an optional installed REA entrypoint.
 The complete `verify:browser` lane also exercises passive script export through
 both public adapters. See [website script export](website-script-export.md).

-`verify:browser:modules` compares CLI and stdio MCP traces against an independent
-real Chromium module-loading fixture: import-map scopes, package prefixes,
-null/backtracking rejection, query/fragment identities, repeated module instances,
-lazy and computed unknowns, exact source/map identities and no implicit refetch.
-Set `REA_BROWSER_EXECUTABLE`; the optional script argument selects an installed
-package entrypoint. The complete `verify:browser` lane and existing conditional
-Chrome CI include this verifier. See [module relationships](website-module-trace.md).
+The [test suite audit](test-suite-audit.md) records the pruning decisions,
+replacement evidence and remaining priorities.

 ## Real-toolchain verification lanes

@@ -203,18 +118,13 @@ commands. Check prerequisites before starting expensive work and name the
 missing command, target, and lane in any failure message. A lane must not imply
 that a host or target is covered when it was skipped.

-Provider admission accepts Ghidra 12.1.x and the JDK range declared by that
-installation (`application.java.min` through `application.java.max`). Current
-12.1 releases require JDK 21 or newer and set no maximum. The lanes below still
-prove behavior on the verified Ghidra 12.1.4 and JDK 21 build.
-
 | Ghidra lane                                | Supported runner/target                                                            | Additional local tools                                              |
 | ------------------------------------------ | ---------------------------------------------------------------------------------- | ------------------------------------------------------------------- |
 | `npm run verify:ghidra`                    | Linux x64 ELF or macOS x64/arm64 Mach-O                                            | Host C compiler, Ghidra 12.1.4, and full JDK 21                     |
 | `npm run verify:ghidra:switch`             | Linux x64 ELF; GCC/Clang optimized and stripped switch fixtures                    | GCC, Clang, GNU nm/objdump/strip, Ghidra 12.1.4, and full JDK 21    |
 | `npm run verify:ghidra:aarch64-jump-table` | Any supported Ghidra host; AArch64 ELF; byte/halfword tables; host ARM64 Mach-O    | Clang with AArch64 target support, Ghidra 12.1.4, and full JDK 21   |
 | `npm run verify:ghidra:cross-format`       | Any supported Ghidra host; also analyzes AArch64 ELF, x86-64 PE, and x86-64 Mach-O | `clang`, LLD, and `lld-link` in addition to host-lane prerequisites |
-| `npm run verify:ghidra:windows`            | Controlled Windows x64 with native x86-64 PE; `-- --x86` selects native x86 PE     | Ghidra 12.1.4, full JDK 21, and the matching native artifact        |
+| `npm run verify:ghidra:windows`            | Controlled Windows x64 with native x86-64 PE                                       | Ghidra 12.1.4, full JDK 21, and the matching native artifact        |

 Windows native conformance runs with `npm run verify:windows-native` and does
 not require Ghidra or Java. An optional independently compiled Windows fixture
@@ -253,21 +163,12 @@ requires unresolved table bounds or case mappings to remain visible as
 residual unknowns.

 `npm run verify:inspector` requires the supported Node.js runtime and installed
-REA dependencies. CI runs it on Linux and macOS x64/arm64 and Windows x64. It starts owned loopback
+REA dependencies. CI runs it on Linux and Windows. It starts owned loopback
 Node Inspector fixtures and verifies discovery and passive observation through
 the CLI and stdio MCP, including special filenames, unresolved discovery
 locations, and independently resolved loaded scripts. Double-quote filenames
 are tested on POSIX only because Windows does not support them.

-Inspector adapters live in `src/inspector/`, with loopback fixtures under
-`tests/fixtures/inspector/` and forked producer boundaries under
-`tests/boundary/inspector/`. The real lane is owned by
-`scripts/verify/inspector/runtime-observation.mjs` and
-`tests/conformance/inspector/`. Browser and Inspector deliberately share the
-existing browser CDP transport/value and file-location helpers. Node fixture
-success proves this Inspector workflow on the tested host; it does not prove
-Electron GUI behavior or another engine.
-
 ## Android APK analysis

 `npm run verify:android` requires an existing Java 17+ and an explicit
@@ -278,16 +179,6 @@ kept under ignored `_reference/`. No Gradle build, Android SDK, emulator or
 application execution is required. The lane compares real CLI/MCP package,
 class search, class inventory, method decompilation and incoming references.
 See [Android analysis](android-analysis.md) for boundaries and resource budgets.
-Authenticated IPA and macOS application inventory projection is documented in
-[Apple application analysis](apple-application-analysis.md).
-
-The lane and owned-process cancellation helper live in `scripts/verify/android/`.
-The explicit downloader and fixed manifest live in `scripts/fixtures/android/`;
-their default remains repository-root `_reference/apk-integration/`. Producer
-fixtures live in `tests/fixtures/android/`, boundary cases in
-`tests/boundary/android/`, and inventory projection composition cases in
-`tests/composition/android/`. Real engine success and synthetic protocol success
-are separate proof levels.

 Synthetic producer regressions run independently:

@@ -386,35 +277,6 @@ Keep the provider-specific acceptance path independent from optional
 cross-compilers. Cross-format failures belong to the cross-format lane and must
 not make native host acceptance unavailable.

-## Native platform baseline in CI
-
-CI exercises the pinned Node.js runtime on native hosted runners:
-
-| Host                  | Runner             | Baseline checks                                                                          |
-| --------------------- | ------------------ | ---------------------------------------------------------------------------------------- |
-| Linux x64             | `ubuntu-latest`    | Installed package and real Node Inspector CLI/MCP                                        |
-| Linux arm64 (aarch64) | `ubuntu-24.04-arm` | Installed package and real Node Inspector CLI/MCP                                        |
-| macOS 15 arm64        | `macos-15`         | Installed package and real Node Inspector CLI/MCP                                        |
-| macOS 15 x64          | `macos-15-intel`   | Installed package and real Node Inspector CLI/MCP                                        |
-| Windows x64           | `windows-latest`   | Curated capabilities, native controls, installed package and real Node Inspector CLI/MCP |
-
-Package and Inspector matrices assert the actual Node platform/architecture
-before verification and record those values with the Node version. Each matrix
-runs at most two jobs concurrently with explicit timeouts and Node heap/thread
-limits. Package checks cover installation, CLI/MCP discovery, target-free
-analysis, configuration backups/recovery, Evidence and owned lifecycle; Inspector
-checks execute source-owned loopback targets and special filename cases.
-
-macOS uses one OS version with one native baseline job per architecture. Each job
-runs package and Inspector checks after a single dependency installation. The
-separate Inspector matrix covers Linux and Windows; Apple artifact checks retain
-their own macOS 15 arm64 job for Xcode-dependent workflows.
-
-These native baseline checks complement the Linux source-test shards and the
-separate Apple-artifact and real-provider lanes. Actual Hopper, Ghidra, IDA,
-browser and managed-tool claims require their corresponding verification lanes.
-Runner labels follow the [GitHub hosted-runner reference](https://docs.github.com/en/actions/reference/runners/github-hosted-runners).
-
 ## Developer commands

 Use source feedback while editing, explicit boundary checks for the changed
@@ -433,7 +295,7 @@ behavior, and complete CI evidence before merging.
 | `npm run test:watch:all`          | Changed tests from every project; builds at startup, so rebuild after production edits before relying on compiled tests |
 | `npm run check:changed`           | Cached typecheck/lint and branch-related source feedback                                                                |
 | `npm run check:pr`                | Opt-in complete local deterministic gate and generated-file checks                                                      |
-| `npm run docs:check`              | Generated-document validation from current source and build outputs                                                     |
+| `npm run docs:check`              | Committed generated-document freshness                                                                                  |

 For example:

@@ -468,21 +330,19 @@ broad changes or diagnosing CI, rather than after every edit. Package/install
 changes additionally need package verification; provider changes need actual
 provider evidence.

-Each Vitest project uses up to two workers, bounded by available host parallelism.
-Default-group projects can run together. Only `process-boundary` runs in the
-later sequence group and serializes its files because process-tree observations
-share host sampling resources. Acceptance and process-global files retain isolated
-forks but are not serialized; isolation does not imply serial scheduling. CI uses
-the same per-project worker bound.
+Local full-suite Vitest runs use up to two workers and schedule projects one
+at a time. Process, acceptance and process-global projects serialize their
+files to prevent competing lifecycle observations. CI retains its two-worker
+budget.
 The pure domain/contracts and recording-port service projects share one worker
 module context because their tests own no mutable runtime resources. MCP
 boundary files also share the immutable server module graph while creating and
 closing independent in-memory sessions. Adapter, composition, acceptance,
 process-global, and other boundary projects retain per-file isolation.
-Build and documentation writers use checkout-local locks for their respective
-output files. `npm test` delegates its build to the build lock; the Vitest suite
-does not hold a test-command lock. `check:pr` runs its test task before starting
-generated-document validation.
+`npm test`, `npm run docs:check`, and `npm run docs:generate` share
+repository-local locks and fail fast when the same class of command is already
+running. The `npm test` build is inside that lock. `check:pr` runs its test task
+before starting generated-document validation.

 Vitest and Node persistent compile caches are deliberately not enabled by
 default. To evaluate repeated local runs, opt in for both cold and warm
@@ -522,188 +382,26 @@ that explicit lane, not the routine iteration requirement.

 ## Apple native metadata and UI

-`npm run verify:apple-dispatch` compiles the Objective-C fixture (classes,
-protocols, a property and an `NSString` category) and the Swift
-conformance/vtable fixture.
-
- Each fixture is linked with legacy `LC_DYLD_INFO` binds and with chained
-  fixups; on Apple silicon the ObjC fixture is also built as arm64e, which uses
-  authenticated pointers.
- The lane inspects the bytes and repeats after stripping local symbols.
- It requires the bound `NSObject` superclass, the external category, and the
-  matching `pointer_fixups` coverage. It requires macOS and the host Xcode toolchain; targets are not
-  executed. `npm run verify:native-ui` launches exactly one source-owned fixture
-  window and requires successful selected-window capture and selected actions.
-  An OS permission denial fails the positive lane. `npm run verify:native-ui:permissions`
-  allows a host-permission-boundary-only result and explicitly reports
-  `positive_e2e: false`; it must not be reported as capture/action proof.
-  Both commands reject a changed executable digest and clean up the fixture
-  process and helper. These lanes require an interactive macOS desktop. See [native investigation](native-investigation.md)
-
-`npm run verify:native-calls` needs only macOS with Command Line Tools (`clang`,
-`lldb`, `codesign`, `nm`). It compiles `tests/conformance/native/calls.m` and
-runs `observe-native-calls` through the CLI and stdio MCP. It checks:
-
- the receiver class, selector and argument registers of every entry, and that
-  breakpoint addresses equal `nm`'s symbol addresses;
- captured stdout and an environment override;
- the event-limit and duration outcomes, with the process confirmed gone;
- that a hardened-runtime copy is refused with `debugger-attach-denied`, and
-  that the same copy signed with `get-task-allow` is traced.
-  for the exact ABI, authority, graph and observation boundaries.
+`npm run verify:apple-dispatch` compiles Objective-C class/protocol and Swift
+conformance/vtable fixtures, inspects their bytes and repeats after stripping
+local symbols. It requires macOS and the host Xcode toolchain; targets are not
+executed. `npm run verify:native-ui` launches exactly one source-owned fixture
+window and requires successful selected-window capture and selected actions.
+An OS permission denial fails the positive lane. `npm run verify:native-ui:permissions`
+allows a host-permission-boundary-only result and explicitly reports
+`positive_e2e: false`; it must not be reported as capture/action proof.
+Both commands reject a changed executable digest and clean up the fixture
+process and helper. These lanes require an interactive macOS desktop. See [native investigation](native-investigation.md)
+for the exact ABI, authority, graph and observation boundaries.

 ### Firmware adapters

 `npm run fixtures:firmware` uses existing Python 3 and a host C compiler to make
 an ignored gzip/USTAR firmware fixture and independent offset/hash oracle.
 `npm run verify:firmware` requires caller-supplied Binwalk 3.1.0, Unblob 26.6.4
-and util-linux prlimit on Linux. The provider also accepts other 3.1.x and
-26.6.x builds and reports them as unverified; this lane proves the audited
-releases. It verifies CLI/MCP parity, selected ranges,
+and util-linux prlimit on Linux. It verifies CLI/MCP parity, selected ranges,
 unknown chunks, depth limits and extracted child digests. The optional
 `REA_FIRMWARE_VERIFY_EXT4=1` lane requires existing mke2fs/debugfs; the separate
 `REA_FIRMWARE_VERIFY_GHIDRA=1` lane checks a selected host ELF through real Ghidra.
 Neither optional toolchain is a base-lane prerequisite. See
 [firmware analysis](firmware-analysis.md) for limits and unverified formats.
-
-The real entrypoint is `scripts/verify/firmware/analysis.mjs`; the fixture runner
-and unchanged Python producer belong together in `scripts/fixtures/firmware/`.
-Producer fixtures and boundaries remain in `tests/fixtures/firmware/` and
-`tests/boundary/firmware/`. Source-fixture generation proves the runner and
-independent oracle; actual Binwalk/Unblob CLI/MCP proof requires selected tools.
-
-### JavaScript source recovery
-
-Build once with `npm run build:cached`, then run `npm run verify:javascript:recovery`.
-This focused lane requires Linux x64, util-linux `prlimit`,
-`REA_WAKARU_COMMAND` pointing to the official Wakaru 1.13.0 Linux x64 binary,
-and `REA_JAVASCRIPT_FIXTURE_TOOLS` pointing to an isolated npm prefix containing
-esbuild 0.25.10 and webpack 5.101.3. No global installation is required.
-The lane compiles source-owned fixtures, exercises CLI and stdio MCP, verifies
-published bytes and provenance, feeds recovered modules into existing analysis,
-and compares a finite set of known fixture results. It does not establish
-arbitrary recovered-application equivalence. CI installs these prerequisites only
-in `.github/workflows/real-javascript-recovery.yml`; the existing `real-browser`
-lane uses real Chrome for browser capture and website workflows.
-
-### Captured website source-map lane
-
-`npm run verify:browser:source-maps` checks actual Chromium capture/export and
-source-map point tracing through CLI and stdio MCP. It requires absolute
-`REA_BROWSER_EXECUTABLE` and `REA_WEB_SOURCE_MAP_COMPILER` pointing to esbuild
-0.25.10's `lib/main.js` in a caller-owned isolated installation. Preflight reports
-missing prerequisites for this lane. The compiler is used only to generate the
-source-owned fixture. No Hopper, Ghidra or application dependency installation
-is required.
-
-```bash
-REA_BROWSER_EXECUTABLE=/absolute/path/to/chromium \
-REA_WEB_SOURCE_MAP_COMPILER=/absolute/path/to/fixture-tools/node_modules/esbuild/lib/main.js \
-npm run verify:browser:source-maps
-```
-
-`scripts/verify-browser-source-maps.mjs /absolute/path/to/installed/rea.mjs`
-checks an installed package after building the verifier dependencies. The separate
-conditional `real-web-source-map` CI job supplies Chrome and an isolated pinned
-fixture compiler; static/unit checks do not acquire a browser. See
-[the source location guide](web-source-location.md) for the verified decoder profile.
-
-### JavaScript large-output lane
-
-`npm run verify:javascript:output` exercises the CLI JSON result surface beyond
-the running Node engine's single-string limit. Shared input leaves keep the
-fixture's graph small; the verifier writes one temporary output file, checks its
-complete byte count and an independent digest, then removes it. It requires only
-Node and the built REA runtime, with space for the output plus a 1 GiB reserve.
-Run `npm run verify:javascript:output -- jsonl` for compact JSONL coverage. This
-opt-in lane is separate from routine tests and the canonical hash check
-`npm run verify:javascript:digests`. It verifies serialization rather than an
-arbitrary third-party application's parsing cost or MCP client capacity.
-
-### Website runtime attribution lane
-
-`npm run verify:browser:runtime` uses caller-supplied
-`REA_BROWSER_EXECUTABLE` and an owned synthetic site/profile. It exercises public
-CLI and stdio MCP for precise execution and native listener source locations,
-including actual armed progress, Unicode/CRLF digests, repeated source URLs with
-distinct script IDs, zero branches and function-only unknowns on repeated
-coverage, request initiators and an externally owned page that remains open.
-
-An optional entrypoint argument to `scripts/verify-browser-runtime.mjs` runs the
-same checks through an isolated installed package. The conditional
-`real-web-runtime` CI job runs only for relevant changes and needs no fixture
-compiler. Ordinary unit/static gates acquire no browser. See
-[website runtime attribution](web-runtime.md) for effects, resource bounds and
-coverage limits.
-
-### Offline binary layout
-
-`npm run verify:binary:layout` requires Linux x64, GCC/binutils, absolute
-`REA_PWNTOOLS_PYTHON` with pwntools 4.15.0/pyelftools 0.33/Unicorn 2.1.2 and
-absolute `REA_VERIFY_STRACE_COMMAND`. It compiles ephemeral source-owned ELF
-fixtures and checks public CLI/MCP, lossless addresses/names, file ranges,
-mitigation inferences, malformed/unsupported input, original file hashes and
-released process ownership. Exec syscall tracing must identify only the declared
-Node/Python launchers; no target binary is executed. Core/debugger claims need
-separate verification lanes. Pass an installed package entrypoint as the script's
-first argument to verify packaging independently of the checkout.
-The valid SHN_XINDEX fixture has 65,281 full section rows; CLI is checked in
-the ordinary lane. Its large MCP transfer is opt-in with
-`REA_VERIFY_LARGE_ELF_MCP=1` (or the workflow dispatch `large_mcp` input), an
-explicit 256 MiB SDK receive buffer and five-minute request timeout. Ordinary
-MCP fixtures retain the pinned SDK defaults.
-
-### Offline EVM interface
-
-`npm run verify:evm:interface` requires Linux x64, an absolute
-`REA_VERIFY_STRACE_COMMAND`, caller-supplied util-linux `prlimit` and `REA_VERIFY_SOLC_MODULE` selecting the absolute module path for
-solc 0.8.30. It compiles source-owned plain/optimized/via-IR Cancun fixtures in
-private storage and checks actual CLI/MCP selector evidence, raw/hex identity,
-unknowns, malformed carriers and independent cleanup. An optional positional
-entrypoint verifies a fresh installed package. It acquires no engine, compiler
-or chain dependency and does not execute a contract on a chain.
-
-### Recorded crash evidence
-
-`npm run verify:recorded:crash` is a separate Linux x64 lane. It requires GCC,
-GDB, absolute `REA_PWNTOOLS_PYTHON` with the offline ELF profile above,
-`REA_PWNDBG_GDBINIT` and `REA_PWNDBG_VENV_PATH` with unchanged pwndbg 2026.09.15,
-and `REA_VERIFY_STRACE_COMMAND`. Its disposable CI runner installs GDB, checks out the exact upstream
-commit and installs its frozen lockfile in isolated runner storage. No developer
-host configuration or core-pattern setting changes.
-
-Fixture generation explicitly runs an owned source-built two-thread program
-under GDB to create a recording. Subsequent public CLI/MCP inspection verifies
-lossless high registers, signed signals, note source bytes, malformed/missing
-notes, unfamiliar owners, optional core-only mapping context and actionable
-missing/unsupported plugin errors. A historical-PID collision fixture references
-an owned live sentinel; inspection syscall traces reject process attach/memory
-access, provider lookups of that PID's `/proc` files and attempted Internet sockets. Traces admit
-the observed upstream startup helpers (`iconv -l`, the selected checkout's Git
-version lookup) and REA ownership inspection separately from target execution.
-This is fixture evidence, not a sandbox claim. Inputs remain unchanged and the
-sentinel must stay alive; owned cleanup and empty verifier descendants are required. Pass an
-installed package entrypoint as the script's first argument for package coverage.
-
-## Agent evaluation and conformance records
-
-Evaluate native, JavaScript, managed and browser investigation tasks through a
-real local Codex CLI with:
-
-```bash
-npm run verify:agent
-```
-
-Its report records tool selection, repeated calls, token use, completion quality,
-and handling of permissions and unknowns.
-
-Regenerate the managed conformance manifest and Evidence completion ledger from
-live verification results, or check them for drift:
-
-```bash
-npm run evidence:generate
-npm run evidence:check
-```
-
-The records preserve unsupported and unverified coverage as explicit unknowns.
-Run the matching real-tool prerequisites described in this guide.
@@ -80,18 +80,7 @@ or model-authored loop when one call can answer the question.
 ## Implement and evaluate

 - Put shared user workflows in the application layer; keep MCP translation in
-  the server adapter and CLI behavior aligned with the same workflow. Share
-  Evidence provenance, unknown projection, and eligible snapshot binding through
-  application/session owners. Matching result payloads alone do not establish
-  equivalent retention or replay behavior.
- Derive each facet's coverage from examined records, unsupported representations,
-  and exhaustiveness. Keep issues structured until presentation; do not select a
-  facet by matching diagnostic prose or infer completeness from an empty failure
-  list. Preserve available observations independently of cleanup success.
- Measure the resource consumed before choosing a limit. Value alternatives,
-  retained records, trace-frame products, output bytes, and temporary-file growth
-  need different accounting. Enforce a justified budget before the costly step
-  and report its effect; an input-byte or graph-node cap does not bound every stage.
+  the server adapter and CLI behavior aligned with the same workflow.
 - Update the canonical contract inventory, output schemas, examples, generated
  catalog, and relevant docs together.
 - Verify valid, malformed, boundary, unavailable, cancellation, and partial
@@ -56,7 +56,7 @@ harm_rank,location,trigger,current_copy,user_risk,proposed_replacement,implement
 46,src/application/Uninstall.ts:removeManagedPath symlink,Managed cache/state/skill path is a symbolic link,Refused to follow symlink {path}.,Exposes local path and does not explain manual safety check,"REA did not remove this item because its managed path is a symbolic link. Verify the link target before removing it manually.",implemented,focused assertion passed
 47,src/application/Uninstall.ts:removeManagedPath failure,Managed item removal fails,{path} could not be removed.,Exposes local path and gives no recovery,"This item could not be removed. Check file permissions, then rerun uninstall.",implemented,verified by injected managed-path removal failure test
 48,src/application/DoctorDiagnostics.ts:node,Runtime version is outside supported ranges,"Install Node.js 22.x (>=22.19), 24.x (>=24.11), or 26+.",Low risk; exact dependency recovery,Keep current copy,unchanged,verified by doctor unit test
-49,src/application/Doctor.ts:host,Host OS/distribution is unsupported,"REA supports macOS 12+, Ubuntu 24.04+, Fedora 41+, 64-bit Arch Linux, and CachyOS.",Low risk; clearly states supported choices,Keep current copy,unchanged,verified by doctor unit tests
+49,src/application/Doctor.ts:host,Host OS/distribution is unsupported,"REA supports macOS 12+, Ubuntu 24.04+, Fedora 41+, and 64-bit Arch Linux.",Low risk; clearly states supported choices,Keep current copy,unchanged,verified by doctor unit tests
 50,src/application/Doctor.ts:analysis engine,Optional deep-analysis executable cannot be found,"Run rea setup to install Hopper, or set HOPPER_LAUNCHER_PATH.",Low risk in setup-specific diagnostic; exact recovery paths,Keep current copy,unchanged,verified by doctor unit tests
 51,src/application/Doctor.ts:target,Optional target path fails shared validation,Supply a readable local app or program path.,Low risk; tells caller valid target class,Keep current copy,unchanged,verified by doctor unit test
 52,src/application/Setup.ts:approval,Setup plan lacks approval,"Review the setup plan, then rerun interactively or with --yes.",Low risk; exact authorization recovery,Keep current copy,unchanged,verified by setup unit tests
@@ -67,13 +67,13 @@ harm_rank,location,trigger,current_copy,user_risk,proposed_replacement,implement
 57,src/application/Setup.ts:unsupported platform,Platform is neither macOS nor Linux,REA supports Hopper on macOS and selected 64-bit Linux distributions.,Low risk; states support boundary,Keep current copy,unchanged,verified by setup unit test
 58,src/application/SetupHost.ts:unsupported Node,Runtime version cannot run setup,"Install Node.js 22.x (>=22.19), 24.x (>=24.11), or 26+ and rerun setup.",Low risk; exact dependency and retry,Keep current copy,unchanged,verified by setup host tests
 59,src/application/Setup.ts:unsupported macOS,macOS version is missing or older than 12,Upgrade to macOS 12 or newer.,Low risk; exact support floor,Keep current copy,unchanged,verified by setup host tests
-60,src/application/Setup.ts:unsupported Linux,Linux distribution is outside supported set,"REA supports Hopper on Ubuntu 24.04+, Fedora 41+, 64-bit Arch Linux, and CachyOS.",Low risk; exact supported alternatives,Keep current copy,unchanged,verified by setup unit test
-61,src/application/process/ProcessCli.ts:readJson read,Process scenario or evidence file cannot be read,Raw filesystem exception through CLI framework,Can expose local paths/codes and no recovery,"Process input file could not be read. Check that the path exists and is readable.",implemented,verified by focused CLI test
-62,src/application/process/ProcessCli.ts:readJson size,Process scenario or evidence file exceeds 64 MiB,Process JSON input exceeds byte limit,Does not state limit or recovery,"Process input file is too large. Reduce it below 64 MiB, then try again.",implemented,verified by focused sparse-file CLI test
-63,src/application/process/ProcessCli.ts:readJson parse,Process scenario or evidence file is malformed JSON,Raw JSON parser exception through CLI framework,Can expose parser implementation and lacks recovery,"Process input file is not valid JSON. Repair the file, then try again.",implemented,verified by focused CLI test
-64,src/application/process/ProcessCli.ts:capture scenario parse,Scenario fails Process Capture schema,Raw Zod validation exception through CLI framework,Exposes schema internals and field paths without stable recovery,"Process scenario is invalid. Check its required fields and limits, then try again.",implemented,verified by focused CLI test
-66,src/application/process/ProcessCli.ts:wrong evidence,Comparison receives valid Evidence from another workflow,Expected REA process capture Evidence,Uses internal schema name and does not explain recovery,"Capture evidence is not from the current process-capture workflow. Create new capture evidence, then try again.",implemented,verified by focused CLI test
-67,src/application/process/ProcessCli.ts:unexpected,Unexpected parser/comparison/canonicalization failure escapes expected classifications,Raw thrown exception through CLI framework,Can expose stack or internal invariant,"Process command could not complete. Check the input files and run `rea doctor`, then try again.",implemented,verified by direct unexpected-cause projection test
+60,src/application/Setup.ts:unsupported Linux,Linux distribution is outside supported set,"REA supports Hopper on Ubuntu 24.04+, Fedora 41+, and 64-bit Arch Linux.",Low risk; exact supported alternatives,Keep current copy,unchanged,verified by setup unit test
+61,src/application/ProcessCli.ts:readJson read,Process scenario or evidence file cannot be read,Raw filesystem exception through CLI framework,Can expose local paths/codes and no recovery,"Process input file could not be read. Check that the path exists and is readable.",implemented,verified by focused CLI test
+62,src/application/ProcessCli.ts:readJson size,Process scenario or evidence file exceeds 64 MiB,Process JSON input exceeds byte limit,Does not state limit or recovery,"Process input file is too large. Reduce it below 64 MiB, then try again.",implemented,verified by focused sparse-file CLI test
+63,src/application/ProcessCli.ts:readJson parse,Process scenario or evidence file is malformed JSON,Raw JSON parser exception through CLI framework,Can expose parser implementation and lacks recovery,"Process input file is not valid JSON. Repair the file, then try again.",implemented,verified by focused CLI test
+64,src/application/ProcessCli.ts:capture scenario parse,Scenario fails Process Capture schema,Raw Zod validation exception through CLI framework,Exposes schema internals and field paths without stable recovery,"Process scenario is invalid. Check its required fields and limits, then try again.",implemented,verified by focused CLI test
+66,src/application/ProcessCli.ts:wrong evidence,Comparison receives valid Evidence from another workflow,Expected REA process capture Evidence,Uses internal schema name and does not explain recovery,"Capture evidence is not from the current process-capture workflow. Create new capture evidence, then try again.",implemented,verified by focused CLI test
+67,src/application/ProcessCli.ts:unexpected,Unexpected parser/comparison/canonicalization failure escapes expected classifications,Raw thrown exception through CLI framework,Can expose stack or internal invariant,"Process command could not complete. Check the input files and run `rea doctor`, then try again.",implemented,verified by direct unexpected-cause projection test
 68,src/server/registerEvidenceTools.ts:object guard,Validated provider-tool input is unexpectedly not an object,Provider tool input was not an object,Exposes provider architecture and implies caller can fix impossible state,Remove the impossible duplicate guard and parse through the declared JSON-object schema.,removed,verified by typecheck and MCP integration tests
 69,src/server/registerEnhancedTools.ts:object guard,Validated enhanced-tool input is unexpectedly not an object,Validated enhanced input was not a JSON object,Exposes validation/JSON implementation detail,Remove the impossible duplicate guard and parse through the declared JSON-object schema.,removed,verified by typecheck and enhanced MCP integration tests
 70,src/server/registerOfficialTools.ts:object guard,Validated direct-tool input is unexpectedly not an object,Validated MCP tool input was not a JSON object,Exposes MCP validation implementation detail,Remove the impossible duplicate guard and parse through the declared JSON-object schema.,removed,verified by typecheck and official MCP integration tests
@@ -0,0 +1,105 @@
+{
+  "ledger_id": "ecl_132e857a8a93f0b366cd72f9cfa1c338ffd4100460a7834ef69abff936c84472",
+  "records": [
+    {
+      "claim_id": "managed.application-graph-projection",
+      "status": "pass",
+      "evidence_ids": [
+        "ev_b061a5a559acb3748cb9784c637f6693f74faeb564ba2b11d6fc32619e757459"
+      ]
+    },
+    {
+      "claim_id": "managed.decompiler-reconstruction-import",
+      "status": "pass",
+      "evidence_ids": [
+        "ev_13f3401a3aaddc3f6d087ad160fa928374e142cdb9861254359b46865b8c992e"
+      ]
+    },
+    {
+      "claim_id": "managed.dotnet-framework-x86-pinvoke",
+      "status": "pass",
+      "evidence_ids": [
+        "ev_6f026216826ca06e080b77ff608f02634fa945fbd2e151b4cd261c1444f8bbb1"
+      ]
+    },
+    {
+      "claim_id": "managed.ilspy-reconstruction-oracle",
+      "status": "unsupported",
+      "evidence_ids": [
+        "ev_65a94c4de03f9c6ebdaff3f381cca377821f349d3ca6dfad47a31cc586fae939"
+      ]
+    },
+    {
+      "claim_id": "managed.malformed-metadata",
+      "status": "pass",
+      "evidence_ids": [
+        "ev_deae4259ea4395623176de40d06c2abcbc2b3a77f0bfb068d76e568d801f45a8"
+      ]
+    },
+    {
+      "claim_id": "managed.managed-native-verification",
+      "status": "pass",
+      "evidence_ids": [
+        "ev_0edcbbcaa1191a4e5324a437f739957b77f9ac45e7897724337f2d6d06b3f9d1"
+      ]
+    },
+    {
+      "claim_id": "managed.modern-dotnet-anycpu",
+      "status": "pass",
+      "evidence_ids": [
+        "ev_d1af50e8dc04cd589385769efd8758e82095425f6e9c1cc4bf2f530c6b434c93"
+      ]
+    },
+    {
+      "claim_id": "managed.mvid-and-token-drift",
+      "status": "pass",
+      "evidence_ids": [
+        "ev_5493f40bc875535488d789a490361abcc1f76bfbdf52536d09ff127442a8e854"
+      ]
+    },
+    {
+      "claim_id": "managed.not-managed",
+      "status": "pass",
+      "evidence_ids": [
+        "ev_03ce0cc0183ee0710f8120e837565129559ab3bc41927df326066370c2341699"
+      ]
+    },
+    {
+      "claim_id": "managed.operator-local-manifest",
+      "status": "unsupported",
+      "evidence_ids": [
+        "ev_9d3e50da1d372c55f46649e69eae702cbe8f0ba6a81d1e46afc3e1a284c81757"
+      ]
+    },
+    {
+      "claim_id": "managed.operator-manifest-self-test",
+      "status": "pass",
+      "evidence_ids": [
+        "ev_f974f4b9d039cda841894c6173cae86427ecef48f4e7a4d6c73edf7b23af2b2a"
+      ]
+    },
+    {
+      "claim_id": "managed.unicode-obfuscated-identifiers",
+      "status": "pass",
+      "evidence_ids": [
+        "ev_c4f38ce76d8359d92ee8e9442503e47b7913550442349a0df688bd274a3def67"
+      ]
+    },
+    {
+      "claim_id": "managed.x64-ready-to-run-native-body",
+      "status": "pass",
+      "evidence_ids": [
+        "ev_3e05ef1d6a796d3d4cb3372fe8e549efec759c59bf09d8ff660059a2e448cbc0"
+      ]
+    }
+  ],
+  "summary": {
+    "total": 13,
+    "pass": 11,
+    "fail": 0,
+    "unsupported": 2,
+    "truncated": 0,
+    "unknown": 0,
+    "complete": false
+  }
+}
@@ -0,0 +1,201 @@
+{
+  "manifest_id": "ecm_d68a1575bdaa1a044ccce8e27c5dd335612f909bc81c52ce3089b576fd772940",
+  "verifier": {
+    "id": "rea-managed-conformance",
+    "version": "1"
+  },
+  "environment": {
+    "platform": "portable",
+    "architecture": "portable",
+    "runtime": "node",
+    "runtime_version": "portable"
+  },
+  "skill_digests": [
+    {
+      "skill_id": "reverse-engineer-anything",
+      "sha256": "d2d971cc67bb0f7b80b4e39382a6bd1146445ed1dbf52043f89e2da2985c97ba"
+    }
+  ],
+  "claims": [
+    {
+      "claim_id": "managed.application-graph-projection",
+      "scenario": {
+        "id": "managed-application-graph-projection",
+        "version": 1
+      },
+      "artifact_sha256s": [
+        "f17fe6286cb07c6385e786e0aa877564d44123197f02617dfec70c537a33e4ea"
+      ],
+      "provider": {
+        "id": "rea-managed-conformance",
+        "version": "1"
+      }
+    },
+    {
+      "claim_id": "managed.decompiler-reconstruction-import",
+      "scenario": {
+        "id": "decompiler-reconstruction-import",
+        "version": 1
+      },
+      "artifact_sha256s": [
+        "cead4cc99733e4e56a5fd0cec8a0813bbc24e249aa72a10eca4c47ee3b0e129d"
+      ],
+      "provider": {
+        "id": "rea-managed-conformance",
+        "version": "1"
+      }
+    },
+    {
+      "claim_id": "managed.dotnet-framework-x86-pinvoke",
+      "scenario": {
+        "id": "dotnet-framework-x86-pinvoke",
+        "version": 1
+      },
+      "artifact_sha256s": [
+        "f17fe6286cb07c6385e786e0aa877564d44123197f02617dfec70c537a33e4ea"
+      ],
+      "provider": {
+        "id": "rea-managed-conformance",
+        "version": "1"
+      }
+    },
+    {
+      "claim_id": "managed.ilspy-reconstruction-oracle",
+      "scenario": {
+        "id": "ilspy-reconstruction-oracle",
+        "version": 1
+      },
+      "artifact_sha256s": [],
+      "provider": {
+        "id": "rea-managed-conformance",
+        "version": "1"
+      }
+    },
+    {
+      "claim_id": "managed.malformed-metadata",
+      "scenario": {
+        "id": "malformed-metadata",
+        "version": 1
+      },
+      "artifact_sha256s": [
+        "827e10b6391d29edca48c191e2ddd79f3bc1165e46e4ba2f4edf41ab60f45e78"
+      ],
+      "provider": {
+        "id": "rea-managed-conformance",
+        "version": "1"
+      }
+    },
+    {
+      "claim_id": "managed.managed-native-verification",
+      "scenario": {
+        "id": "managed-native-verification",
+        "version": 1
+      },
+      "artifact_sha256s": [
+        "9999999999999999999999999999999999999999999999999999999999999999",
+        "f17fe6286cb07c6385e786e0aa877564d44123197f02617dfec70c537a33e4ea"
+      ],
+      "provider": {
+        "id": "rea-managed-conformance",
+        "version": "1"
+      }
+    },
+    {
+      "claim_id": "managed.modern-dotnet-anycpu",
+      "scenario": {
+        "id": "modern-dotnet-anycpu",
+        "version": 1
+      },
+      "artifact_sha256s": [
+        "92b588ae43d418117fa108c0004b5d0451f6112238d21bad8d75c0eb1da860f0"
+      ],
+      "provider": {
+        "id": "rea-managed-conformance",
+        "version": "1"
+      }
+    },
+    {
+      "claim_id": "managed.mvid-and-token-drift",
+      "scenario": {
+        "id": "mvid-and-token-drift",
+        "version": 1
+      },
+      "artifact_sha256s": [
+        "276395c671a656ab57d583158443c10de552dccfb37dc97cd013f673c0f86b43",
+        "ef009dab7424fdeba996f2524dbe86fd899c96394498cca0463fcfdb228c5572"
+      ],
+      "provider": {
+        "id": "rea-managed-conformance",
+        "version": "1"
+      }
+    },
+    {
+      "claim_id": "managed.not-managed",
+      "scenario": {
+        "id": "not-managed",
+        "version": 1
+      },
+      "artifact_sha256s": [
+        "de74dab8ab034054a811d4248efcda0bed505187a061a806e274ae87bc453754"
+      ],
+      "provider": {
+        "id": "rea-managed-conformance",
+        "version": "1"
+      }
+    },
+    {
+      "claim_id": "managed.operator-local-manifest",
+      "scenario": {
+        "id": "operator-local-manifest",
+        "version": 1
+      },
+      "artifact_sha256s": [],
+      "provider": {
+        "id": "rea-managed-conformance",
+        "version": "1"
+      }
+    },
+    {
+      "claim_id": "managed.operator-manifest-self-test",
+      "scenario": {
+        "id": "operator-manifest-self-test",
+        "version": 1
+      },
+      "artifact_sha256s": [
+        "cdc11ec7fd0f392e43b9b23971cb41ec49fd0a997fc33c24fcc553cd4386ae37"
+      ],
+      "provider": {
+        "id": "rea-managed-conformance",
+        "version": "1"
+      }
+    },
+    {
+      "claim_id": "managed.unicode-obfuscated-identifiers",
+      "scenario": {
+        "id": "unicode-obfuscated-identifiers",
+        "version": 1
+      },
+      "artifact_sha256s": [
+        "cead4cc99733e4e56a5fd0cec8a0813bbc24e249aa72a10eca4c47ee3b0e129d"
+      ],
+      "provider": {
+        "id": "rea-managed-conformance",
+        "version": "1"
+      }
+    },
+    {
+      "claim_id": "managed.x64-ready-to-run-native-body",
+      "scenario": {
+        "id": "x64-ready-to-run-native-body",
+        "version": 1
+      },
+      "artifact_sha256s": [
+        "e47402428322cdcb06f561036d7d108528cbc6e262d92a21f869218a20c80bfb"
+      ],
+      "provider": {
+        "id": "rea-managed-conformance",
+        "version": "1"
+      }
+    }
+  ]
+}
@@ -1,147 +0,0 @@
-# Historical web network captures
-
-Use `inspect_web_network_capture` / `inspect-web-network-capture` to inspect
-retained producer evidence. This is an offline operation: recorded URLs are
-never fetched, and no browser or proxy listener is started.
-
-```sh
-rea inspect-web-network-capture /absolute/session.har har --json
-rea inspect-web-network-capture /absolute/session.har har --record 2 --record 0 --json
-```
-
-```json
-{
-  "name": "inspect_web_network_capture",
-  "arguments": {
-    "capture_path": "/absolute/session.har",
-    "format": "har",
-    "record_ordinals": [2, 0]
-  }
-}
-```
-
-Omit ordinals to return every record. Explicit selection preserves caller order
-and original zero-based producer ordinals; duplicate or out-of-range selections
-are input errors. Every record is validated before selection, so selecting one
-entry does not hide a malformed entry elsewhere.
-
-## Formats and upstream profiles
-
-HAR uses unchanged `har-schema@2.0.0` draft-06 schemas, `ajv@8.20.0`,
-`ajv-formats@3.0.1`, `jsonc-parser@3.3.1` JSON visitor, and
-`lossless-json@4.3.1` numeric representations, pinned in the npm lockfile.
-Only the HAR 1.2 profile is supported. Unknown extensions remain reported
-evidence. Duplicate object keys, including equal values and escaped spellings,
-are rejected before materialization. Prototype-named members such as
-`__proto__` are preserved as ordinary own JSON members without prototype
-mutation. Original capture files remain unchanged.
-The observed mitmproxy 12.2.3 `SaveHar` profile can emit `postData.text: null`
-for a missing request body. REA preserves that reported null, omitting the
-optional field only from its validation copy for this exact producer profile;
-it does not invent an empty string or body bytes.
-
-Native mitmproxy decoding requires a caller-supplied **mitmdump 12.2.3 on
-Linux**. Set its absolute executable path:
-
-```sh
-REA_MITMDUMP_COMMAND=/absolute/mitmdump rea inspect-web-network-capture /absolute/session.mitm mitmproxy --json
-```
-
-REA does not install mitmproxy. Its owned process uses a private configuration
-directory, `--no-server`, and the unchanged upstream `mitmproxy.io.tnetstring`
-decoder. It does not run `FlowReader` migrations or convert native states to
-HAR. Raw IDs, state versions, flow types, backup states and unknown extensions
-are preserved without synthesizing connections, timestamps or content. The
-tested upstream source is tag `v12.2.3`, commit
-`6c09d56e4c29a92f5ad01b03199977584b8ea14f`; other native tool versions return
-an explicit unsupported-profile diagnostic. Non-Linux native decoding is not
-supported by this adapter.
-
-## Reading the evidence
-
- `artifact` identifies the caller-selected file and stable snapshot digest.
- `records` preserve producer order/ordinals and original JSON pointers or byte
-  ranges. No live browser transaction or scenario IDs are invented.
- `reported` retains the producer's fields. HAR container metadata is returned
-  separately, with `log.entries` replaced by `null` and `records_pointer`
-  identifying the record collection. This is an inspection representation,
-  not a reconstructed HAR file.
- `numeric_literals` preserve HAR number lexemes and native integer/float
-  representations, including unsafe integers and non-finite native floats.
-  Values that cannot be safely represented as JSON numbers are `null` in the
-  reported view. Unsafe standard HAR numeric fields fail schema validation;
-  unsafe extension numbers remain available through their sidecars.
- `binary_fields` retain exposed bytes, base64 and SHA-256 independently of
-  declared sizes. Valid HAR `content.encoding: "base64"` is decoded exactly;
-  producer-decoded Unicode text, missing text and unknown encodings do not
-  establish original body bytes. Post-data parameters do not reconstruct a
-  multipart body. Native byte fields also have an exact UTF-8 display view
-  when valid; binary sidecars establish their actual representation. Native
-  missing content and empty content remain distinct.
- `redactions` identify known transport authentication exclusions and explicit
-  sensitive-value exclusions. Redacted byte fields retain neither original
-  bytes nor their digest. Unknown extension names and token-looking query
-  parameters do not establish sensitivity.
-
-Mark sensitive literal string/UTF-8 byte values with MCP `sensitive_values`, or
-repeat CLI `--sensitive-value`. These declarations are never persisted in
-Evidence parameters; the count is retained. Explicit text/UTF-8 byte matches
-exclude the entire field with a reported `null` rather than substitute a text
-marker or rewrite payload bytes. This prevents replacement markers from
-reintroducing declared literals. The file digest identifies the original artifact
-unless it matches an explicit declaration; in that case `artifact.sha256` and
-Evidence `subject` are null with an explanation. A sensitive property name excludes that
-entire property and its sidecars; a `scope: "property-name"` redaction points
-to its actual parent. No substitute property name or child pointer is invented.
-Omitted subtrees are still validated, including canonical HAR base64. Explicitly sensitive artifact
-paths are empty in Evidence and omitted from locations, while the original
-SHA-256 and size remain available unless the digest itself is explicitly excluded. Failure messages, diagnostics and cleanup
-resources follow the same explicit declarations without changing error types;
-sensitive issue pointers identify a real ancestor instead of a fabricated
-coordinate. Header/cookie authentication values and known
-transport URL userinfo are excluded structurally, including native backups.
-
-Generated free-text limitations follow the same literal declarations, including
-global, per-record and Evidence explanations added during projection. Contract
-field names, typed discriminators and exact decoder identities keep their
-canonical meanings; declarations do not rename formats or providers.
-
-Historical evidence does not prove runtime attribution, execution or deployment
-authenticity. Mitmproxy messages are upstream-assembled messages, not recovered
-wire fragments. Native dictionary duplicate keys have the unchanged upstream
-decoder's last-value semantics; this adapter does not claim to recover discarded
-duplicates or the original numeric spelling of parsed native floats.
-
-## Resource and lifecycle boundaries
-
-Complete evidence has a 32 MiB input, 96 MiB decoder reply and 64-level nesting
-budget. Exceeding a budget returns no partial success.
-Oversized selected captures return an input error identifying `capture_path`
-and the byte budget; owned reply/output failures remain output or provider errors.
-HAR runs in an owned
-192 MiB Node old-generation heap with one V8 worker. Native decoding applies
-Linux limits of 768 MiB address space, 30 seconds CPU and 96 MiB file output;
-both commands have a 30-second wall deadline and independently supervised
-process cleanup. Owned decoder diagnostics retain at most 1 MiB across stdout
-and stderr; the collector drops overflow as it arrives, reports the limit
-failure and verifies cleanup. Heap limits alone do not establish aggregate RSS limits.
-
-Stable regular-file reads reject symlinks, replacement and concurrent changes.
-Private snapshots, declarations and tool configuration are removed before the
-result returns. Cleanup uncertainty retains the selected capture, resource and
-original failure information. The original capture is never changed.
-
-## Excluded coordinates and read failures
-
-Explicitly marked values also exclude matching source coordinates and their sidecars. A hidden record coordinate is reported as `location.kind: "unknown"`; REA does not invent a replacement pointer. Original record ordinals and artifact digests remain available.
-
-Host filesystem read denials return `code: "access_denied"`, `category: "unavailable"`, the actual `EACCES`/`EPERM` code and read-access guidance. Missing files remain input failures. Cleanup failures retain the prior structured error, including its input constraints or provider diagnostics, with explicitly marked text excluded.
-
-An observed replacement or in-place change during stable artifact acquisition
-returns `code: "artifact_changed"`, `category: "integrity_mismatch"` and
-`retryable: true`, retaining the selected path and reader's reason. Wait until
-the capture file is stable before retrying. No unstable snapshot is decoded.
-Command cleanup failures retain the original status and both diagnostic streams;
-the decoder's ownership preparation receives the same cancellation signal.
-
-MCP advertises the same strict named input contract used by the application. Historical inspection delegates argument validation to that shared application boundary so accepted explicit-sensitive declarations also cover invalid argument names and other correction details. The SDK receives raw arguments through its Standard Schema interface; malformed inputs still fail before decoder or filesystem effects and return the normal structured REA error. Protocol-envelope validation remains owned by MCP.
@@ -1,61 +0,0 @@
-# Website runtime source attribution
-
-REA integrates native Chrome DevTools Protocol inspection and precise V8 coverage through two composable tools. Supply an existing loopback CDP endpoint and a page target from `list_browser_targets`. With omitted origins, REA selects the page's current HTTP(S) origin. The browser and page remain externally owned.
-
-## Observe execution
-
-```bash
-rea observe-web-execution http://127.0.0.1:9222 TARGET_ID \
-  --observation-ms 10000 --json
-```
-
-MCP: `observe_web_execution` with `cdp_endpoint`, `target_id`, optional `allowed_origins` and optional `observation_ms` (default 10000). The operation itself selects instrumentation; no extra approval flag is needed.
-
-Starting precise coverage resets counters and prevents optimized execution until REA stops it. This changes timing/JIT behavior. REA requests accurate call counts and detailed ranges, takes one resetting sample, stops coverage, disables enabled domains and detaches its own connection. It does not navigate, click, evaluate selected application code or close the page.
-
-Wait for the actual armed progress event before performing an action. MCP emits negotiated progress notifications; CLI emits `rea_progress` JSON on stderr while the Evidence result stays on stdout. Use ordinary commands, scripts or user actions to trigger behavior. CLI SIGINT/SIGTERM and MCP cancellation await instrumentation cleanup; unconfirmed cleanup is an error with the target, failed commands and previous failure.
-
-Results retain:
-
- The selected target, frame and document loader identity; local armed/end timestamps and separate backend monotonic coverage timestamps.
- Every admitted producer function/block range, exclusive end offset and execution count in UTF-16 code units, with verified bounds when exact text is available. Nested/overlapping counts are preserved and must not be summed.
- Main-document script inventory, exact session script IDs, resource start coordinates, sourceURL/source-map declarations, producer hash and independently computed UTF-8 text digest.
- Armed-window requests from the selected main frame and selected origins, complete reported initiator objects (including stack hierarchy/descriptions), derived callsites, exact script-ID associations and unresolved async parent IDs. Source association does not establish UI causality.
-
-The coverage counter interval starts at backend acceptance before the armed receipt and ends at the resetting sample after the local timer. Counts may include execution during these command intervals; request events are restricted to the locally armed window. The result retains both backend timestamps and the distinct local clock.
-
-Source metadata remains collected through receipt of the resetting sample, including scripts parsed during the final command. REA then freezes this inventory for source joins. Fatal protocol parsing failures terminate the observer even when no command is outstanding; listener inspection checks producer failures after its final document assertion.
-
-A document replacement ends the window; final coverage then remains unavailable. Missing coverage is unknown: an already loaded script may be absent from a sample. A detailed request also does not guarantee block granularity for already compiled functions. If `is_block_coverage` is false, the function-only ranges are observed and branch execution remains unknown. Native Chrome verification reproduced block coverage in the first window and function-only coverage in a subsequent window, including without REA.
-
-Same-document navigation such as `history.pushState()` remains valid when the frame and known loader identity stay stable and the current origin is allowed. Unknown loader identity retains a conservative URL check; newly reported or replaced loaders are rejected. Malformed producer events end an armed window immediately and trigger cleanup, independently of the selected duration.
-
-Target detachment ends the window even when the browser's root connection stays open. When the closed session cannot acknowledge cleanup, the operation returns a failure with the selected target, failed commands and original producer reason; it does not claim successful cleanup.
-
-Child frames, workers, service workers, WebAssembly, chronological execution order and framework-specific causal interpretation are outside this operation. Script ownership comes from frame/context metadata, never URL equality. Repeated URLs and synthetic names therefore retain separate identities.
-
-Observed script metadata remains available when ownership is unknown; source text and source association remain excluded or unknown. Request/initiator resource URLs omit transport userinfo. Stack and script URLs can also be inert `sourceURL` names: REA preserves declared names and unknown representations, and only removes script URL userinfo when stable producer metadata explicitly reports `hasSourceURL: false`. This policy also applies when metadata arrives after a request. Unknown producer extension fields and source-map declarations are preserved.
-
-## Inspect a node's listeners
-
-```bash
-rea inspect-web-event-listeners http://127.0.0.1:9222 TARGET_ID '#submit' --json
-```
-
-MCP: `inspect_web_event_listeners` with the same scope and an explicit CSS `selector`. Native DOM selection inspects the first matching node in the main document. A missing match is an explicit empty result.
-
-The result contains directly registered listener types/flags, callback coordinates, source identity/text/digest and execution unknowns. REA uses native DOM/DOMDebugger operations and releases its own remote object group. It never invokes a listener or dispatches an event. Delegated ancestor listeners, descendants, closed shadow roots and framework registries are not enumerated.
-
-## Bounds and verification
-
-Each protocol message has a 64 MiB budget; script/context metadata and request metadata each have an 8 MiB retained budget. Complete retained source text has a 32 MiB budget. Oversized or malformed evidence returns no partial successful result. Each command and the complete inspection/source-join phase have a 20-second deadline; cleanup has a separate 5-second command deadline plus transport closure. The selected observation duration must fit the host timer's positive 32-bit millisecond range. REA does not control the externally owned browser's CPU or memory.
-
-`npm run verify:browser:runtime` uses caller-supplied `REA_BROWSER_EXECUTABLE` and the native `ps` command on Linux/macOS against an owned synthetic fixture, through real public CLI and stdio MCP. It checks exact Unicode/CRLF text/digests, same-URL identities, same-document navigation, inert declared names, executed and zero-count branches, function-only unknowns on repeated observation, listener selection, initiator association, actual arming and preservation of the external page. A separate fixture page closes during an armed MCP window to verify prompt termination and inline cleanup diagnostics. The optional positional entrypoint to `scripts/verify-browser-runtime.mjs` permits the same checks against an isolated installed tarball.
-
-Real workflow coverage is Linux x64 / Chrome 153 / Node 24. Other browser engines and host workflows remain unverified. The conditional `real-web-runtime` CI lane acquires Chrome only for relevant changes; ordinary unit/static checks need no browser.
-
-Primary protocol references: [Profiler and Debugger](https://raw.githubusercontent.com/ChromeDevTools/devtools-protocol/master/pdl/js_protocol.pdl), [DOMDebugger](https://raw.githubusercontent.com/ChromeDevTools/devtools-protocol/master/pdl/domains/DOMDebugger.pdl).
-
-Source ownership requires both the selected main frame and producer evidence for its default execution world. Extension/automation isolated worlds, worker worlds and unknown worlds cannot establish website source joins. Contradictory world metadata stays unowned. Referenced source records retain the reported execution context and script auxiliary context metadata; source text is read only for proven main-document default worlds.
-
-Known script/context identities are monitored through asynchronous source completion after the sample cutoff. A changed identity excludes its retained text, frame attribution, coverage and request/source joins. Chromium's specific native CSS syntax rejection returns an input error for `selector`, including the selected target; unrelated node, command and transport failures retain their original category.
@@ -1,97 +0,0 @@
-# Captured website source locations
-
-`trace_web_source_location` maps one selected position in a script retained by
-`export_web_scripts` through one explicitly paired local source map. The shared
-CLI/MCP workflow verifies actual manifest, script and map byte identities and
-returns the original position and embedded source inline. It acquires no browser,
-fetches no URL and executes no application code.
-
-```bash
-rea trace-web-source-location \
-  /analysis/scripts/manifest.json 0 \
-  /analysis/app.js.map 'https://example.test/maps/app.js.map?v=7#context' \
-  1 25 --json
-```
-
-The six positional arguments select the manifest, zero-based script index,
-absolute map path, absolute map URL context, one-based generated line and
-zero-based UTF-16 column. The MCP arguments are:
-
-```json
-{
-  "manifest_path": "/analysis/scripts/manifest.json",
-  "script_index": 0,
-  "source_map": {
-    "path": "/analysis/app.js.map",
-    "url": "https://example.test/maps/app.js.map?v=7#context"
-  },
-  "generated_position": { "line": 1, "column": 25 }
-}
-```
-
-The URL supplies the context for resolving `sources` and `sourceRoot`; it is not
-an instruction to fetch. Absolute virtual or file contexts can be selected as
-well. The map/script association is caller-selected: a declaration or local map
-does not prove deployment authenticity or execution. Use
-[import tracing](website-module-trace.md) to inspect outgoing native module edges.
-
-## Meaning of the evidence
-
-Lookup follows the greatest generated position less than or equal to the
-selected point, across lines, and returns **every** segment at that position.
-It includes generated-only mappings. This follows
-[ECMA-426 GetOriginalPositions](https://tc39.es/ecma426/#sec-getoriginalpositions),
-with one-based lines in REA's public contract. A point result does not establish
-coverage of a source range, execution or UI causality.
-
-Mapped entries preserve the raw source name/root, section path, section-local
-source index and flattened index. Duplicate URLs remain distinct, including
-entries with different embedded contents. Missing source names retain a null
-resolved URL. Original coordinates outside embedded text retain the reported
-coordinates and a null offset.
-
-Embedded content hashes identify the UTF-8 encoding of the decoded
-`sourcesContent` string, including its line endings. They do not identify an
-independently captured original file. Raw map text is retained in Evidence's
-`raw_result`, including unknown extensions; these extensions are not interpreted.
-Capture context and source Evidence links accompany independently verified
-selected file identities.
-
-## Adapter and resource boundaries
-
-The adapter uses the locked upstream
-[`@jridgewell/trace-mapping` 0.3.31](https://github.com/jridgewell/trace-mapping)
-without modifying its code. It validates map/VLQ structure before allocation,
-normalizes nested indexed offsets before upstream flattening, checks section
-boundaries and indexes, and retains raw declaration identity. It supports regular
-maps and inline indexed sections. External section URLs return an actionable
-unsupported-profile error. This is a defined decoder profile, not a claim to
-implement every current source-map extension.
-
-One owned Node subprocess decodes the map. Its private request directory is
-removed before success is returned. Only this child's inherited `NODE_OPTIONS`
-is removed; explicit V8 flags set a 192 MiB old-generation and 8 MiB semi-space
-budget, one V8 worker and a 20-second deadline. Reported actual V8 heap limits
-are checked. These are heap limits, not an aggregate process RSS limit. Cleanup
-may extend the deadline and an unconfirmed cleanup overrides success with
-`cleanup_incomplete` and the owning operation/resources.
-
-Complete evidence is bounded by a 4 MiB map, 32 MiB codec reply, 262144 decoded
-rows/segments and 64 nested section levels. Exceeding a budget returns an explicit
-failure, without partial results. The existing 32 MiB manifest and 16 MiB selected
-script boundaries also apply. No global toolchain or browser configuration changes
-are made.
-
-## Verification
-
-Focused tests cover duplicate mappings, indexed offsets/overlap/local indexes,
-32-bit VLQ overflow, nullable content, UTF-16/CRLF positions, immutable artifact
-identity, cancellation, late output closure, cleanup failures, SDK schemas and
-public CLI behavior. The actual codec process is exercised on the test host.
-
-The optional `verify:browser:source-maps` lane compiles a source-owned TypeScript
-fixture with isolated esbuild 0.25.10, serves it to real Chromium, captures and
-exports the actual response, then checks the original compiler point and exact
-retained content through CLI and stdio MCP. It can target an installed package.
-Only this lane requires Chromium and the fixture compiler. Linux x64 is the real
-workflow covered by the dedicated CI job; other host workflows remain unverified.
@@ -1,85 +0,0 @@
-# Captured website module relationships
-
-`trace_web_module_imports` / `rea trace-web-module-imports` traces one script's
-outgoing native ES imports and re-exports from an
-[exported capture](website-script-export.md). It verifies the selected source's
-SHA-256 and byte count, preserves browser URL identities, and returns every
-matching capture candidate inline. It does not refetch website assets.
-
-## Select the source and context
-
-Provide a caller-supplied Chromium executable supporting `import.meta.resolve`.
-REA does not install or upgrade a browser. Real verification covers Linux x64;
-other hosts have not received this feature's real workflow verification.
-
-```bash
-REA_BROWSER_EXECUTABLE=/absolute/path/to/chrome \
-  rea trace-web-module-imports /analysis/export/manifest.json 0 \
-  --importer-url 'https://example.test/app/main.js?build=2#entry' \
-  --import-map-path /analysis/import-map.json \
-  --import-map-base-url https://example.test/maps/ \
-  --json
-```
-
-The MCP input expresses the same choices:
-
-```json
-{
-  "manifest_path": "/analysis/export/manifest.json",
-  "script_index": 0,
-  "importer_url": "https://example.test/app/main.js?build=2#entry",
-  "import_map": {
-    "path": "/analysis/import-map.json",
-    "base_url": "https://example.test/maps/"
-  }
-}
-```
-
-`script_index` is zero-based in `manifest.scripts`. If `importer_url` is omitted,
-the trace selects the reported source URL. An inline script's document base
-cannot be established from that URL alone; choose the context explicitly when
-known. `import_map` is optional and reads local JSON only. Its exact bytes and
-base URL are retained; selecting it does not prove the map was installed in the
-captured page. HTTP(S) importer contexts without URL userinfo are supported initially.
-
-## Interpret the evidence
-
- Static imports, re-exports and literal dynamic imports receive the native
-  engine's resolved URL or exact rejection message. Empty strings are retained.
- Computed dynamic imports retain their expression and source positions with
-  `computed-specifier` unknown resolution. Erased type-only imports/exports and
-  inferred bundler IDs are excluded from native import claims.
- Locations use UTF-16 offsets and columns, with one-based lines. Parse recovery
-  diagnostics and unparseable input are explicit.
- Query variants and fragments remain distinct. An exact reported URL is an
-  `exact-reported-url` candidate. A response URL stripped of its fragment is a
-  weaker `response-url-without-fragment` content candidate. Multiple captured
-  versions are all returned; the trace selects none as canonical.
- Candidate metadata remains reported capture evidence; only the selected
-  source's bytes are reverified. Missing/lazy targets can resolve successfully
-  with no captured candidate. Every relationship reports execution as unknown.
- Source-map declarations remain declarations; this operation does not read or
-  invent map bytes, original-source mappings, worker ownership or UI causality.
-
-The selected source is loaded from `files/` under the manifest's current
-directory. Relocation retains the manifest's originally reported paths and the
-actual current source path separately. Unsafe paths, symlink source directories,
-nonregular files, wrong digests/sizes and malformed UTF-8 fail explicitly.
-
-## Engine and lifecycle
-
-An owned temporary browser context runs REA's trusted resolver stub. The selected
-application is parsed as data and is never executed by this trace. Page requests
-are fulfilled with REA's synthetic document/stub or blocked; no website asset is
-downloaded. This does not establish an OS sandbox or browser-wide network
-containment. The engine version and native report are retained in Evidence.
-
-Sources without literal imports do not acquire a browser. The manifest, source
-and import map have 32 MiB, 16 MiB and 4 MiB input limits. Native resolution has
-one 20-second deadline; cleanup may extend that deadline. One renderer is
-requested, and there is no aggregate host memory-limit claim. Cancellation
-closes only the owned browser; cleanup failure cannot return a successful trace.
-`REA_BROWSER_NO_SANDBOX=true` passes Chromium's corresponding launch option when
-the host requires it; it does not enable an REA security boundary.
-
-See [testing](testing.md) for the native loading oracle and CLI/MCP real lane.
@@ -3,8 +3,6 @@
 This guide describes repository main. npm 4.1.0 includes the Windows
 native bundle; check the [release boundary](installation.md#released-package-and-main)
 before applying these instructions to an older published package.
-Native x86 (32-bit) PE support is available on repository main; npm releases
-through 5.0.0 admit x86-64 PE targets on Windows.

 Status: experimental Windows x64 support for the read-only P0 boundary. Windows
 package builds bundle native process, filesystem, and DACL controls. REA
@@ -15,9 +13,9 @@ additional permission flag or degraded mode is required.

 - Windows 10+ x64 with fixed local NTFS target and temporary volumes;
 - Node.js 22.x (>=22.19), 24.x (>=24.11), or 26+;
- an operator-installed Ghidra 12.1.x distribution (verified with 12.1.4);
- a 64-bit full JDK inside that installation's declared Java range (JDK 21 or newer, with no maximum, for current 12.1 releases);
- an explicit native, non-managed, non-DLL x86 or x86-64 PE application; and
+- an operator-installed official Ghidra 12.1.4 distribution;
+- a 64-bit full JDK 21;
+- an explicit native, non-managed, non-DLL x86-64 PE application; and
 - the 25 read-only Ghidra inventory, memory, and function-analysis operations.

 Loaded memory reads and file offsets preserve Ghidra's observed source mappings.
@@ -100,7 +98,7 @@ and artifact SHA-256 before loading the package-owned addon. Native failure
 reasons remain distinct from a valid installation and an unsupported target.

 PE header classification and SHA-256 come from the same open file. The Windows
-provider admits native x86 and x86-64 PE applications and rejects unsupported roles,
+provider admits native x86-64 PE applications and rejects unsupported roles,
 architectures, managed images, and malformed headers. The original selected
 source coordinate is preserved for native admission.

@@ -150,7 +148,7 @@ private runtime files; crash-time transactional deletion is not claimed.

 ## Verification

-See [native controls](https://github.com/morluto/rea/blob/main/native/windows/README.md) for the separate artifact
+See [native controls](../native/windows/README.md) for the separate artifact
 build lane and native boundary checks. Development tarballs without the built
 artifact report native controls unavailable; publishing requires the verified
 artifact and manifest.
@@ -158,8 +156,6 @@ artifact and manifest.
 ```powershell
 npm run verify:windows-native
 npm run verify:ghidra:windows
-npm run verify:ghidra:windows -- --x86
-npm run verify:ghidra:windows:package -- --x86
 npm run verify:ghidra:windows:package -- C:\fixtures\installed-rea C:\fixtures\sample.exe
 ```

@@ -3,10 +3,6 @@ set -euo pipefail

 PACKAGE="rea-agents"
 REPOSITORY="morluto/rea"
-numeric_identifier='(0|[1-9][0-9]*)'
-prerelease_identifier="(${numeric_identifier}|[0-9A-Za-z-]*[A-Za-z-][0-9A-Za-z-]*)"
-build_identifier='[0-9A-Za-z-]+'
-version_pattern="${numeric_identifier}\\.${numeric_identifier}\\.${numeric_identifier}(-${prerelease_identifier}(\\.${prerelease_identifier})*)?(\\+${build_identifier}(\\.${build_identifier})*)?"
 version="${REA_VERSION:-}"
 dry_run=false
 start_setup=true
@@ -71,20 +67,14 @@ if ! [[ "$_node_patch" =~ ^[0-9]+(\+[0-9A-Za-z.-]+)?$ ]] ||
 fi

 if [[ -n "$version" ]]; then
-  [[ "$version" =~ ^${version_pattern}$ ]] || fail "version must be an exact semantic version."
+  [[ "$version" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z.-]+)?$ ]] || fail "version must be an exact semantic version."
 else
  release_json="$(curl -fsSL --proto '=https' --tlsv1.2 --retry 3 -H 'Accept: application/vnd.github+json' "https://api.github.com/repos/$REPOSITORY/releases/latest")" || fail "the latest REA release could not be resolved. Check network access or pass --version VERSION, then retry."
  tag="$(printf '%s' "$release_json" | node -e 'let s="";process.stdin.on("data",c=>s+=c).on("end",()=>{const v=JSON.parse(s).tag_name;if(typeof v!=="string")process.exit(1);process.stdout.write(v)})' 2>/dev/null)" || fail "the release response was invalid. Retry later or pass --version VERSION."
-  [[ "$tag" =~ ^rea-agents-(${version_pattern})$ ]] || fail "the latest release tag was invalid. Retry later or pass --version VERSION."
+  [[ "$tag" =~ ^rea-agents-([0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z.-]+)?)$ ]] || fail "the latest release tag was invalid. Retry later or pass --version VERSION."
  version="${BASH_REMATCH[1]}"
 fi

-# npm's exact-version resolver cleans build metadata from the requested version,
-# so it may install the base release and make the post-install identity check fail.
-if [[ "$version" =~ \+ ]]; then
-  fail "npm cannot install an exact version with build metadata. Pass a version without build metadata, then retry."
-fi
-
 prefix_args=()
 if [[ "$platform" == "Linux" ]]; then
  prefix_args=(--prefix "$HOME/.local")
@@ -107,7 +97,7 @@ if [[ "$dry_run" == true ]]; then
 fi

 printf 'Installing %s@%s...\n' "$PACKAGE" "$version"
-npm install --global ${prefix_args[@]+"${prefix_args[@]}"} "$PACKAGE@$version" || fail "npm could not install REA. Check registry access and npm permissions, then retry."
+npm install --global "${prefix_args[@]}" "$PACKAGE@$version" || fail "npm could not install REA. Check registry access and npm permissions, then retry."
 [[ -x "$install_bin" ]] || fail "npm completed without installing the rea command. Check the npm global bin directory and PATH, then retry."
 installed_version="$("$install_bin" --version 2>/dev/null | tr -d '[:space:]')" || fail "the installed REA version could not be read. Reinstall the requested version, then retry."
 [[ "$installed_version" == "$version" ]] || fail "installed version $installed_version does not match $version. Reinstall the requested version, then retry."
@@ -2,11 +2,7 @@
  "$schema": "./node_modules/knip/schema.json",
  "entry": ["src/main.ts", "src/cli.ts", "src/contracts/errorSchemas.ts"],
  "project": ["src/**/*.ts", "tests/**/*.ts", "scripts/**/*.mjs"],
-  "vitepress": {
-    "entry": ["docs/.vitepress/config.ts"]
-  },
-  "ignoreBinaries": ["mkfifo"],
-  "ignoreDependencies": ["electron", "esbuild", "webpack"],
+  "ignoreDependencies": ["electron"],
  "ignoreExportsUsedInFile": true,
  "rules": {
    "files": "error",
@@ -277,15 +277,14 @@ static void directory(Runtime& root, const std::wstring& relative) {
  }
 }

-static Handle createPrivateFile(Runtime& root, const std::wstring& relative,
-                                DWORD access = DELETE | GENERIC_WRITE | GENERIC_READ | READ_CONTROL) {
+static Handle createPrivateFile(Runtime& root, const std::wstring& relative) {
  const auto path = relativePath(root, relative);
  const auto parentPath = path.substr(0, path.find_last_of(L'\\'));
  auto parent = runtimeDirectory(root, parentPath);
  verifyPrivate(parent->get(), parentPath, parentPath == root.path);
  Security security;
  auto file = createRelative(parent->get(), path.substr(path.find_last_of(L'\\') + 1),
-                              access, false, security, path);
+                             GENERIC_WRITE | GENERIC_READ | READ_CONTROL, false, security, path);
  verifyPrivate(file.get(), path, false);
  return file;
 }
@@ -306,26 +305,6 @@ static void dispose(HANDLE handle, const std::wstring& path) {
  require(SetFileInformationByHandle(handle, FileDispositionInfo, &deletion, sizeof(deletion)), "Delete owned object by handle failed", path);
 }

-static void disposeSnapshot(Runtime& root, Handle& file, const std::wstring& path) {
-  // Snapshot readers do not share DELETE access. Release the writer only for
-  // failed-copy cleanup, with its parent pinned and its identity recorded.
-  auto parent = runtimeDirectory(root, path.substr(0, path.find_last_of(L'\\')));
-  FILE_ID_INFO expected{};
-  require(GetFileInformationByHandleEx(file.get(), FileIdInfo, &expected, sizeof(expected)),
-          "Read incomplete snapshot identity failed", path);
-  file.reset();
-  auto cleanup = openComponent(path, DELETE | GENERIC_READ | FILE_WRITE_ATTRIBUTES, false);
-  FILE_ID_INFO observed{};
-  require(GetFileInformationByHandleEx(cleanup.get(), FileIdInfo, &observed, sizeof(observed)),
-          "Read snapshot cleanup identity failed", path);
-  require(expected.VolumeSerialNumber == observed.VolumeSerialNumber &&
-          std::equal(std::begin(expected.FileId.Identifier), std::end(expected.FileId.Identifier),
-                     std::begin(observed.FileId.Identifier)),
-          "Incomplete snapshot identity changed before cleanup", path, ERROR_ACCESS_DENIED);
-  verifyPrivate(cleanup.get(), path, false);
-  dispose(cleanup.get(), path);
-}
-
 void closeRuntime(Runtime& root) {
  if (root.closed) return;
  // Windows keeps the bearer descriptor and snapshot leases until this owner
@@ -433,17 +412,6 @@ static void copySnapshot(napi_env, void* pointer) {
 static void completeSnapshot(napi_env env, napi_status status, void* pointer) {
  std::unique_ptr<SnapshotWork> work(static_cast<SnapshotWork*>(pointer));
  work->root->snapshotPending = false;
-  const auto reject = [&](const Failure& failure) {
-    try {
-      disposeSnapshot(*work->root, work->destination, work->path);
-      napi_reject_deferred(env, work->deferred, failureValue(env, failure));
-    } catch (const Failure& cleanupFailure) {
-      const Failure combined(
-          failure.constraint + "; incomplete snapshot cleanup failed: " + cleanupFailure.constraint,
-          work->path, cleanupFailure.win32);
-      napi_reject_deferred(env, work->deferred, failureValue(env, combined));
-    }
-  };
  try {
    if (work->failure) throw *work->failure;
    require(status == napi_ok && !work->root->snapshotCancelled.load(), "Native snapshot worker was cancelled", work->path, ERROR_OPERATION_ABORTED);
@@ -454,9 +422,10 @@ static void completeSnapshot(napi_env env, napi_status status, void* pointer) {
    work->root->immutableFiles.push_back(std::move(work->destination));
    check(napi_resolve_deferred(env, work->deferred, result));
  } catch (const Failure& failure) {
-    reject(failure);
+    napi_reject_deferred(env, work->deferred, failureValue(env, failure));
  } catch (const std::exception& failure) {
-    reject(Failure(failure.what(), work->path, ERROR_GEN_FAILURE));
+    napi_reject_deferred(env, work->deferred,
+                         failureValue(env, Failure(failure.what(), work->path, ERROR_GEN_FAILURE)));
  }
  napi_delete_reference(env, work->rootReference);
  napi_delete_async_work(env, work->work);
@@ -467,9 +436,7 @@ static napi_value snapshot(napi_env env, napi_value rootValue, Runtime& root,
  auto work = std::make_unique<SnapshotWork>(env, root);
  work->source = openFile(sourcePath);
  work->path = relativePath(root, relative);
-  // Retain the write lease with read-only sharing, but omit DELETE authority:
-  // Java's RandomAccessFile reader shares read/write, not delete access.
-  work->destination = createPrivateFile(root, relative, GENERIC_WRITE | GENERIC_READ | READ_CONTROL);
+  work->destination = createPrivateFile(root, relative);
  napi_value promise;
  check(napi_create_promise(env, &work->deferred, &promise));
  check(napi_create_reference(env, rootValue, 1, &work->rootReference));
@@ -539,13 +506,7 @@ napi_value filesystemCall(napi_env env, const std::wstring& operation, const std
    auto file = runtimeDirectory(root, path.substr(0, path.find_last_of(L'\\')));
    file->path = path;
    file->requestedPath = path;
-    // Retained output handles have write and DELETE access, so this read open
-    // must share both to pass Windows' symmetric share check. Those retained
-    // handles still omit FILE_SHARE_WRITE and FILE_SHARE_DELETE, blocking
-    // competing writes and delete opens.
-    file->handles.push_back(openComponent(path, GENERIC_READ, false,
-                                          FILE_SHARE_READ | FILE_SHARE_WRITE |
-                                              FILE_SHARE_DELETE));
+    file->handles.push_back(openComponent(path, GENERIC_READ, false));
    verifyPrivate(file->get(), path, false);
    auto result = identity(env, file->get(), path);
    set(env, result, "handle", wrap(env, std::move(file)));
@@ -1,7 +1,7 @@
 {
  "name": "rea-agents",
  "mcpName": "io.github.morluto/rea",
-  "version": "6.0.0",
+  "version": "4.1.0",
  "description": "Reverse engineer anything from your terminal or agent with one CLI and MCP server.",
  "license": "MIT",
  "repository": {
@@ -42,16 +42,10 @@
    "dist",
    "install.sh",
    "bridge/hopper_bridge.py",
-    "bridge/native/NativeUIChildren.swift",
    "bridge/native/ReaNativeUI.swift",
-    "bridge/native/rea_lldb_tracer.py",
-    "bridge/process/ProcessRunTokenReader.swift",
-    "bridge/process/ProcessRunTokenReaderMain.swift",
    "bridge/ghidra/ReaGhidraBridge.java",
    "bridge/ghidra/ReaGhidraExtensions.java",
    "bridge/ghidra/ReaGhidraPrepareCom.java",
-    "bridge/android/ReaJadxBridge.java",
-    "bridge/mitmproxy/capture.py",
    "scripts/rea.mjs",
    "scripts/electron-active-hook.cjs",
    "scripts/electron-active-hook-boundaries.cjs",
@@ -63,32 +57,18 @@
    "LICENSE",
    "native/windows/build/manifest.json",
    "native/windows/build/rea-windows-x64.node",
-    "scripts/verify-windows-native-artifact.mjs",
-    "bridge/pwntools/layout.py",
-    "bridge/pwntools/layout_impl.py",
-    "third_party/pwntools/README.md",
-    "third_party/evmole/README.md",
-    "third_party/evmole/LICENSE",
-    "bridge/pwntools/decoder_runtime.py",
-    "bridge/pwntools/recorded_crash.py",
-    "bridge/pwntools/recorded_crash_impl.py",
-    "bridge/pwndbg/launch.py",
-    "bridge/pwndbg/launch_impl.py",
-    "bridge/pwndbg/core_context.py",
-    "third_party/pwndbg/README.md",
-    "third_party/pwndbg/LICENSE.md"
+    "scripts/verify-windows-native-artifact.mjs"
  ],
  "scripts": {
    "deps:check": "node scripts/check-dependency-install.mjs",
    "metadata:generate": "node scripts/generate-package-metadata.mjs",
    "metadata:check": "node scripts/generate-package-metadata.mjs --check",
    "mcp-registry:check": "node scripts/verify-mcp-registry-metadata.mjs",
-    "mcp-catalog:generate": "npm run build:cached",
+    "mcp-catalog:generate": "npm run build:cached && node scripts/generate-mcp-tool-catalog.mjs",
    "mcp-catalog:check": "node scripts/generate-mcp-tool-catalog.mjs --check",
    "prebuild": "npm run deps:check && npm run metadata:check",
    "build": "node scripts/run-exclusive.mjs build npm run build:unlocked",
-    "build:unlocked": "node scripts/clean-build-output.mjs && tsc -p tsconfig.build.json && npm run build:projections",
-    "build:projections": "node scripts/generate-mcp-tool-catalog.mjs && node scripts/generate-skill-metadata.mjs && node scripts/generate-product-catalog.mjs && node scripts/generate-completion-ledger.mjs",
+    "build:unlocked": "node scripts/clean-build-output.mjs && tsc -p tsconfig.build.json",
    "precheck": "npm run deps:check",
    "check": "turbo run typecheck lint format:check knip metadata:check",
    "precheck:fast": "npm run deps:check",
@@ -101,11 +81,11 @@
    "check:pr": "turbo run typecheck lint format:check knip metadata:check test:run && npm run docs:check && npm run jscpd && npm run scan:todos",
    "precheck:ci": "npm run deps:check",
    "check:ci": "turbo run typecheck lint format:check knip metadata:check jscpd scan:todos",
-    "build:cached": "node scripts/check-dependency-install.mjs && turbo run build",
+    "build:cached": "turbo run build",
    "format": "oxfmt .",
    "format:check": "oxfmt --check .",
-    "lint": "oxlint && npm run verify:module-boundaries",
-    "lint:fix": "oxlint --fix && npm run verify:module-boundaries",
+    "lint": "oxlint",
+    "lint:fix": "oxlint --fix",
    "knip": "knip",
    "jscpd": "jscpd src/ tests/",
    "scan:todos": "node scripts/scan-todos.mjs",
@@ -139,34 +119,31 @@
    "typecheck": "tsc --noEmit",
    "verify:test-temp-hygiene": "npm run build:cached && node scripts/verify-test-temp-hygiene.mjs",
    "verify:hopper": "npm run verify:fixtures && npm run build:cached && node scripts/verify-real-hopper.mjs",
-    "verify:apple-dispatch": "npm run build:cached && node scripts/verify/apple/dispatch.mjs",
+    "verify:apple-dispatch": "npm run build:cached && node scripts/verify-apple-dispatch.mjs",
    "verify:native-ui": "npm run build:cached && node scripts/verify-native-ui.mjs",
-    "verify:keyed-archive": "npm run build:cached && node scripts/verify/apple/keyed-archive.mjs",
-    "verify:installer-package": "npm run build:cached && node scripts/verify/apple/installer-package.mjs",
-    "verify:macos-bundle": "npm run build:cached && node scripts/verify/apple/macos-bundle.mjs",
+    "verify:keyed-archive": "npm run build:cached && node scripts/verify-keyed-archive.mjs",
    "verify:ghidra": "npm run build:cached && node scripts/verify-real-ghidra.mjs",
    "verify:ida": "npm run build:cached && node scripts/verify-real-ida.mjs",
    "verify:ghidra:switch": "npm run build:cached && node scripts/verify-real-ghidra-switch.mjs",
    "verify:ghidra:dos": "npm run build:cached && node scripts/verify-real-ghidra-dos.mjs",
    "verify:ghidra:com": "npm run build:cached && node scripts/verify-real-ghidra-com.mjs",
    "verify:ghidra:aarch64-jump-table": "npm run build:cached && node scripts/verify-real-ghidra.mjs --aarch64-jump-table",
-    "verify:interface-builder": "npm run build:cached && node scripts/verify/apple/interface-builder.mjs",
+    "verify:interface-builder": "npm run build:cached && node scripts/verify-interface-builder.mjs",
    "verify:ghidra:cross-format": "npm run build:cached && node scripts/verify-real-ghidra.mjs --cross-format",
    "verify:ghidra:windows": "npm run build:cached && npm run build:ghidra-windows-fixture && node scripts/verify-real-ghidra-windows.mjs",
    "verify:browser": "npm run build:cached && node scripts/verify-real-browser.mjs",
    "verify:browser:dom": "node scripts/verify-browser-dom-destinations.mjs",
    "verify:browser:network": "npm run build:cached && node scripts/verify-browser-network.mjs",
    "verify:electron": "npm run build:cached && node scripts/verify-real-electron.mjs",
-    "verify:inspector": "npm run build:cached && node scripts/verify/inspector/runtime-observation.mjs",
-    "verify:javascript-runtime": "npm run build:cached && node scripts/verify/javascript/runtime-observation.mjs",
-    "verify:javascript:digests": "npm run build:cached && node scripts/verify/javascript/digests.mjs",
-    "verify:javascript:output": "npm run build:cached && node scripts/verify/javascript/output.mjs",
-    "verify:application-workflows": "npm run build:cached && node scripts/verify/javascript/application-workflows.mjs",
-    "verify:managed": "npm run build:cached && node scripts/verify/managed/conformance.mjs",
-    "verify:firmware": "npm run build:cached && node scripts/verify/firmware/analysis.mjs",
-    "fixtures:firmware": "node scripts/fixtures/firmware/generate.mjs",
-    "verify:android": "npm run build:cached && node scripts/verify/android/analysis.mjs",
-    "fixtures:android": "node scripts/fixtures/android/fetch.mjs",
+    "verify:inspector": "npm run build:cached && node scripts/verify-real-javascript-runtime-observation.mjs",
+    "verify:javascript-runtime": "npm run build:cached && node scripts/verify-local-javascript-runtime.mjs",
+    "verify:javascript:digests": "npm run build:cached && node scripts/verify-large-javascript-digests.mjs",
+    "verify:application-workflows": "npm run build:cached && node scripts/verify-local-application-workflows.mjs",
+    "verify:managed": "npm run build:cached && node scripts/verify-managed-conformance.mjs",
+    "verify:firmware": "npm run build:cached && node scripts/verify-real-firmware.mjs",
+    "fixtures:firmware": "node scripts/generate-firmware-fixtures.mjs",
+    "verify:android": "npm run build:cached && node scripts/verify-real-android.mjs",
+    "fixtures:android": "node scripts/fetch-android-fixtures.mjs",
    "verify:agent": "npm run build:cached && node scripts/verify-agent-experience.mjs",
    "verify:hopper:linux": "npm run verify:fixtures && npm run build:cached && node scripts/verify-real-hopper-linux.mjs",
    "verify:setup:linux": "npm run build:cached && node scripts/verify-linux-setup-e2e.mjs",
@@ -181,20 +158,14 @@
    "config:print": "node scripts/print-mcp-config.mjs",
    "evidence:generate": "npm run build:cached && node scripts/generate-completion-ledger.mjs",
    "evidence:check": "npm run build:cached && node scripts/generate-completion-ledger.mjs --check",
-    "predocs:dev": "npm run docs:generate",
-    "docs:dev": "vitepress dev docs",
-    "predocs:build": "npm run docs:generate",
-    "docs:build": "vitepress build docs",
-    "docs:preview": "vitepress preview docs",
    "docs:generate": "node scripts/run-exclusive.mjs docs npm run docs:generate:unlocked",
-    "docs:generate:unlocked": "npm run metadata:generate && npm run build:cached && node scripts/generate-error-schema.mjs",
+    "docs:generate:unlocked": "npm run metadata:generate && npm run build:cached && node scripts/generate-mcp-tool-catalog.mjs && node scripts/generate-skill-metadata.mjs && node scripts/generate-product-catalog.mjs && node scripts/generate-completion-ledger.mjs && node scripts/generate-error-schema.mjs",
    "docs:check": "node scripts/run-exclusive.mjs docs turbo run docs:check:built",
    "docs:check:built": "node scripts/generate-package-metadata.mjs --check && node scripts/generate-mcp-tool-catalog.mjs --check && node scripts/generate-skill-metadata.mjs --check && node scripts/generate-product-catalog.mjs --check && node scripts/generate-completion-ledger.mjs --check && node scripts/check-doc-facts.mjs && node scripts/generate-error-schema.mjs --check",
    "docs:error-schema": "npm run build:cached && node scripts/generate-error-schema.mjs",
    "prepack": "node scripts/prepack.mjs",
    "prepare": "node scripts/prepare.mjs",
-    "verify:asset-catalog": "npm run build:cached && node scripts/verify/apple/asset-catalog.mjs",
-    "verify:native-calls": "npm run build:cached && node scripts/verify-native-calls.mjs",
+    "verify:asset-catalog": "npm run build:cached && node scripts/verify-asset-catalog.mjs",
    "verify:native-ui:permissions": "npm run build:cached && node scripts/verify-native-ui.mjs --allow-permission-denial",
    "test:focused": "node scripts/run-development-tests.mjs focused",
    "build:windows-native": "node scripts/build-windows-native.mjs",
@@ -206,16 +177,7 @@
    "build:fixtures:nativeaot": "node scripts/generate-nativeaot-fixtures.mjs",
    "verify:ghidra:nativeaot": "npm run build:cached && node scripts/verify-real-ghidra-nativeaot.mjs",
    "verify:browser:scripts": "npm run build:cached && node scripts/verify-browser-scripts.mjs",
-    "verify:browser:modules": "npm run build:cached && node scripts/verify-browser-modules.mjs",
-    "verify:test-discovery": "node scripts/verify-test-discovery.mjs",
-    "verify:javascript:recovery": "node scripts/verify/javascript/recovery.mjs",
-    "verify:module-boundaries": "node scripts/verify-module-boundaries.mjs",
-    "verify:browser:source-maps": "npm run build:cached && node scripts/verify-browser-source-maps.mjs",
-    "verify:browser:runtime": "npm run build:cached && node scripts/verify-browser-runtime.mjs",
-    "verify:web:network-captures": "npm run build:cached && node scripts/verify-web-network-captures.mjs",
-    "verify:binary:layout": "npm run build:cached && node scripts/verify-binary-layout.mjs",
-    "verify:evm:interface": "npm run build:cached && node scripts/verify-evm-interface.mjs",
-    "verify:recorded:crash": "npm run build:cached && node scripts/verify-recorded-crash.mjs"
+    "verify:test-discovery": "node scripts/verify-test-discovery.mjs"
  },
  "lint-staged": {
    "*.{cjs,cts,js,jsx,mjs,mts,ts,tsx}": [
@@ -233,36 +195,24 @@
    "@lydell/node-pty": "1.1.0",
    "@modelcontextprotocol/client": "2.3.1",
    "@modelcontextprotocol/server": "2.3.1",
-    "@xmldom/xmldom": "0.9.12",
    "@xterm/addon-serialize": "0.14.0",
    "@xterm/headless": "6.0.0",
-    "@zip.js/zip.js": "2.15.0",
-    "ajv": "8.20.0",
-    "ajv-formats": "3.0.1",
+    "@zip.js/zip.js": "2.8.26",
    "canonicalize": "3.0.0",
    "cross-spawn": "7.0.6",
    "diff": "9.0.0",
-    "har-schema": "2.0.0",
    "ignore": "7.0.6",
    "incur": "0.6.1",
    "isomorphic-git": "1.38.7",
    "jsonc-parser": "3.3.1",
-    "lossless-json": "4.3.1",
-    "parse5": "8.0.1",
    "pino": "10.4.0",
    "playwright-core": "1.58.2",
    "plist": "5.0.0",
    "semver": "7.8.5",
-    "smol-toml": "1.9.0",
+    "smol-toml": "1.7.0",
    "write-file-atomic": "7.0.0",
    "ws": "8.21.0",
-    "zod": "4.4.3",
-    "evmole": "0.9.3"
-  },
-  "overrides": {
-    "vitepress": {
-      "vite": "6.4.4"
-    }
+    "zod": "4.4.3"
  },
  "devDependencies": {
    "@fast-check/vitest": "0.5.0",
@@ -272,6 +222,7 @@
    "@types/write-file-atomic": "4.0.3",
    "@types/ws": "8.18.1",
    "@vitest/coverage-v8": "5.0.3",
+    "ajv": "8.20.0",
    "husky": "9.1.7",
    "jscpd": "5.0.12",
    "knip": "6.39.0",
@@ -280,7 +231,6 @@
    "oxlint": "1.87.0",
    "turbo": "2.11.7",
    "typescript": "7.0.2",
-    "vitepress": "1.6.4",
    "vitest": "5.0.3",
    "yaml": "2.9.0"
  }
@@ -16,6 +16,7 @@
    ".": {
      "package-name": "rea-agents",
      "extra-files": [
+        { "type": "generic", "path": "README.md" },
        { "type": "generic", "path": "README_zh.md" },
        { "type": "generic", "path": "README_ja.md" },
        { "type": "generic", "path": "README_ko.md" },
@@ -34,6 +35,11 @@
          "type": "json",
          "path": "server.json",
          "jsonpath": "$.packages[0].version"
+        },
+        {
+          "type": "json",
+          "path": "docs/product-catalog.json",
+          "jsonpath": "$.package.version"
        }
      ]
    }
@@ -20,17 +20,14 @@ const source = resolve(
 const install = process.env.GHIDRA_INSTALL_DIR;
 if (!install)
  throw new Error(
-    "NativeAOT build lane requires existing GHIDRA_INSTALL_DIR (Ghidra 12.1.x).",
+    "NativeAOT build lane requires existing GHIDRA_INSTALL_DIR (Ghidra 12.1.4).",
  );
 const properties = await readFile(
  join(install, "Ghidra/application.properties"),
  "utf8",
 );
-const ghidraVersion = propertyValue(properties, "application.version");
-if (!ghidraReleaseLineAccepted(ghidraVersion))
-  throw new Error(
-    `NativeAOT build lane accepts Ghidra 12.1.x (verified with 12.1.4). Observed application.version=${ghidraVersion ?? "missing"}.`,
-  );
+if (!/^application.version=12\.1\.4\s*$/m.test(properties))
+  throw new Error("NativeAOT build lane requires Ghidra 12.1.4.");
 const output = resolve(
  process.env.REA_NATIVEAOT_BUILD_ROOT ??
    join(root, "_reference/nativeaot-integration/extension"),
@@ -50,11 +47,9 @@ const run = (command, args) => {
  return result.stdout.trim();
 };
 const javac = java ? join(java, "javac") : "javac";
-const javacBanner = capture(javac, ["-version"]);
-const javacMajor = Number(/^javac (\d+)/mu.exec(javacBanner)?.[1]);
-if (!Number.isInteger(javacMajor) || javacMajor < 21)
+if (!/^javac 21(?:\.|$)/u.test(run(javac, ["-version"])))
  throw new Error(
-    `NativeAOT build lane requires javac 21 or newer and compiles with --release 21. Observed: ${javacBanner || "no version"}. REA does not install or upgrade Java.`,
+    "NativeAOT build lane requires an existing JDK 21 javac; REA does not install or upgrade Java.",
  );
 const revision = run("git", ["-C", source, "rev-parse", "HEAD"]);
 if (
@@ -98,8 +93,6 @@ try {
  run(javac, [
    "-J-Xmx512m",
    "-J-XX:ActiveProcessorCount=1",
-    "--release",
-    "21",
    `@${join(output, "javac.args")}`,
  ]);
  await writeFile(
@@ -126,7 +119,7 @@ try {
        jar,
        sha256,
        upstream_revision: revision,
-        ghidra_version: ghidraVersion,
+        ghidra_version: "12.1.4",
        integration_api: 1,
      },
      null,
@@ -138,41 +131,10 @@ try {
      jar,
      sha256,
      upstream_revision: revision,
-      ghidra_version: ghidraVersion,
+      ghidra_version: "12.1.4",
      integration_api: 1,
    }),
  );
 } finally {
  await rm(classes, { recursive: true, force: true });
 }
-
-/** Read one application.properties value. Empty and missing values stay unknown. */
-function propertyValue(content, name) {
-  for (const line of content.split(/\r?\n/u)) {
-    const separator = line.indexOf("=");
-    if (separator < 0 || line.slice(0, separator).trim() !== name) continue;
-    const value = line.slice(separator + 1).trim();
-    return value.length === 0 ? null : value;
-  }
-  return null;
-}
-
-/** Same 12.1 line as GhidraInstallationPolicy, including a distro suffix. */
-function ghidraReleaseLineAccepted(raw) {
-  const match = /^(\d+)\.(\d+)(?:\.(\d+))?([-+].*)?$/u.exec(raw ?? "");
-  return match !== null && Number(match[1]) === 12 && Number(match[2]) === 1;
-}
-
-function capture(command, args) {
-  const result = spawnSync(command, args, {
-    cwd: root,
-    encoding: "utf8",
-    timeout: 120_000,
-    maxBuffer: 4 * 1024 * 1024,
-  });
-  if (result.error || result.status !== 0)
-    throw new Error(
-      `NativeAOT build prerequisite/action ${command} failed: ${result.error?.message ?? ""}\n${result.stdout ?? ""}${result.stderr ?? ""}`,
-    );
-  return `${result.stdout ?? ""}\n${result.stderr ?? ""}`.trim();
-}
@@ -3,68 +3,50 @@ import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";

 const root = resolve(dirname(fileURLToPath(import.meta.url)), "..");
-for (const architecture of ["x86_64", "x86"]) {
-  const x86 = architecture === "x86";
-  const output = resolve(
-    root,
-    "build",
-    "fixtures",
-    x86 ? "rea-ghidra-windows-x86.exe" : "rea-ghidra-windows.exe",
-  );
-  const bytes = Buffer.alloc(1024);
-  const peOffset = 0x80;
-  const optionalHeader = peOffset + 24;
-  const optionalHeaderSize = x86 ? 0xe0 : 0xf0;
-  const sectionTable = optionalHeader + optionalHeaderSize;
+const output = resolve(root, "build", "fixtures", "rea-ghidra-windows.exe");
+const bytes = Buffer.alloc(1024);
+const peOffset = 0x80;
+const optionalHeader = peOffset + 24;
+const sectionTable = optionalHeader + 0xf0;

-  bytes.write("MZ", 0, "ascii");
-  bytes.writeUInt32LE(peOffset, 0x3c);
-  bytes.write("PE\0\0", peOffset, "binary");
-  bytes.writeUInt16LE(x86 ? 0x14c : 0x8664, peOffset + 4);
-  bytes.writeUInt16LE(1, peOffset + 6);
-  bytes.writeUInt16LE(optionalHeaderSize, peOffset + 20);
-  bytes.writeUInt16LE(x86 ? 0x102 : 0x22, peOffset + 22);
+bytes.write("MZ", 0, "ascii");
+bytes.writeUInt32LE(peOffset, 0x3c);
+bytes.write("PE\0\0", peOffset, "binary");
+bytes.writeUInt16LE(0x8664, peOffset + 4);
+bytes.writeUInt16LE(1, peOffset + 6);
+bytes.writeUInt16LE(0xf0, peOffset + 20);
+bytes.writeUInt16LE(0x22, peOffset + 22);

-  bytes.writeUInt16LE(x86 ? 0x10b : 0x20b, optionalHeader);
-  bytes.writeUInt32LE(0x200, optionalHeader + 4);
-  bytes.writeUInt32LE(0x1000, optionalHeader + 16);
-  bytes.writeUInt32LE(0x1000, optionalHeader + 20);
-  if (x86) bytes.writeUInt32LE(0x400000, optionalHeader + 28);
-  else bytes.writeBigUInt64LE(0x1_4000_0000n, optionalHeader + 24);
-  bytes.writeUInt32LE(0x1000, optionalHeader + 32);
-  bytes.writeUInt32LE(0x200, optionalHeader + 36);
-  bytes.writeUInt16LE(6, optionalHeader + 40);
-  bytes.writeUInt16LE(6, optionalHeader + 48);
-  bytes.writeUInt32LE(0x2000, optionalHeader + 56);
-  bytes.writeUInt32LE(0x200, optionalHeader + 60);
-  bytes.writeUInt16LE(3, optionalHeader + 68);
-  bytes.writeUInt16LE(x86 ? 0x8140 : 0x8160, optionalHeader + 70);
-  if (x86) {
-    bytes.writeUInt32LE(0x10_0000, optionalHeader + 72);
-    bytes.writeUInt32LE(0x1000, optionalHeader + 76);
-    bytes.writeUInt32LE(0x10_0000, optionalHeader + 80);
-    bytes.writeUInt32LE(0x1000, optionalHeader + 84);
-    bytes.writeUInt32LE(16, optionalHeader + 92);
-  } else {
-    bytes.writeBigUInt64LE(0x10_0000n, optionalHeader + 72);
-    bytes.writeBigUInt64LE(0x1000n, optionalHeader + 80);
-    bytes.writeBigUInt64LE(0x10_0000n, optionalHeader + 88);
-    bytes.writeBigUInt64LE(0x1000n, optionalHeader + 96);
-    bytes.writeUInt32LE(16, optionalHeader + 108);
-  }
+bytes.writeUInt16LE(0x20b, optionalHeader);
+bytes.writeUInt32LE(0x200, optionalHeader + 4);
+bytes.writeUInt32LE(0x1000, optionalHeader + 16);
+bytes.writeUInt32LE(0x1000, optionalHeader + 20);
+bytes.writeBigUInt64LE(0x1_4000_0000n, optionalHeader + 24);
+bytes.writeUInt32LE(0x1000, optionalHeader + 32);
+bytes.writeUInt32LE(0x200, optionalHeader + 36);
+bytes.writeUInt16LE(6, optionalHeader + 40);
+bytes.writeUInt16LE(6, optionalHeader + 48);
+bytes.writeUInt32LE(0x2000, optionalHeader + 56);
+bytes.writeUInt32LE(0x200, optionalHeader + 60);
+bytes.writeUInt16LE(3, optionalHeader + 68);
+bytes.writeUInt16LE(0x8160, optionalHeader + 70);
+bytes.writeBigUInt64LE(0x10_0000n, optionalHeader + 72);
+bytes.writeBigUInt64LE(0x1000n, optionalHeader + 80);
+bytes.writeBigUInt64LE(0x10_0000n, optionalHeader + 88);
+bytes.writeBigUInt64LE(0x1000n, optionalHeader + 96);
+bytes.writeUInt32LE(16, optionalHeader + 108);

-  bytes.write(".text", sectionTable, "ascii");
-  bytes.writeUInt32LE(0x16, sectionTable + 8);
-  bytes.writeUInt32LE(0x1000, sectionTable + 12);
-  bytes.writeUInt32LE(0x200, sectionTable + 16);
-  bytes.writeUInt32LE(0x200, sectionTable + 20);
-  bytes.writeUInt32LE(0x6000_0020, sectionTable + 36);
+bytes.write(".text", sectionTable, "ascii");
+bytes.writeUInt32LE(0x16, sectionTable + 8);
+bytes.writeUInt32LE(0x1000, sectionTable + 12);
+bytes.writeUInt32LE(0x200, sectionTable + 16);
+bytes.writeUInt32LE(0x200, sectionTable + 20);
+bytes.writeUInt32LE(0x6000_0020, sectionTable + 36);

-  // entry calls the second function, returns zero; second returns 42.
-  bytes.set([0xe8, 0x0b, 0, 0, 0, 0x31, 0xc0, 0xc3], 0x200);
-  bytes.set([0xb8, 0x2a, 0, 0, 0, 0xc3], 0x210);
+// entry calls the second function, returns zero; second returns 42.
+bytes.set([0xe8, 0x0b, 0, 0, 0, 0x31, 0xc0, 0xc3], 0x200);
+bytes.set([0xb8, 0x2a, 0, 0, 0, 0xc3], 0x210);

-  await mkdir(dirname(output), { recursive: true });
-  await writeFile(output, bytes);
-  if (!x86) process.stdout.write(`${output}\n`);
-}
+await mkdir(dirname(output), { recursive: true });
+await writeFile(output, bytes);
+process.stdout.write(`${output}\n`);
@@ -3,17 +3,15 @@ import { createReadStream } from "node:fs";
 import { link, mkdir, open, rm } from "node:fs/promises";
 import { resolve, join } from "node:path";
 import { fileURLToPath } from "node:url";
-import { JADX_RELEASE } from "../../../src/android/JadxRelease.ts";
-import fixture from "./apidemos.json" with { type: "json" };
+import { JADX_RELEASE } from "../src/android/JadxRelease.ts";
+import fixture from "./fixtures/android-apidemos.json" with { type: "json" };

 const args = process.argv.slice(2);
 if (args.length > 1)
-  throw new Error("Usage: npm run fixtures:android -- [DIRECTORY]");
+  throw new Error("Usage: node scripts/fetch-android-fixtures.mjs [DIRECTORY]");
 const directory = resolve(
  args[0] ??
-    fileURLToPath(
-      new URL("../../../_reference/apk-integration/", import.meta.url),
-    ),
+    fileURLToPath(new URL("../_reference/apk-integration/", import.meta.url)),
 );
 await mkdir(directory, { recursive: true });
 const hashFile = async (path) => {
@@ -1,289 +0,0 @@
-import { execFile } from "node:child_process";
-import { mkdir, rm, symlink, writeFile } from "node:fs/promises";
-import { dirname, join } from "node:path";
-import { promisify } from "node:util";
-
-const exec = promisify(execFile);
-
-/** Commands the macOS bundle fixture needs from Command Line Tools. */
-export const MACOS_BUNDLE_FIXTURE_COMMANDS = [
-  ["/usr/bin/xcrun", ["--find", "clang"]],
-  ["/usr/bin/xcrun", ["--find", "codesign"]],
-  ["/usr/bin/ditto", ["-h"]],
-  ["/usr/bin/hdiutil", ["help"]],
-];
-
-/** Fail with the missing command name before building any fixture. */
-export async function preflightMacosBundleFixture() {
-  if (process.platform !== "darwin")
-    throw new Error(
-      "macOS bundle verification requires a macOS host with Command Line Tools",
-    );
-  for (const [command, arguments_] of MACOS_BUNDLE_FIXTURE_COMMANDS)
-    try {
-      await exec(command, arguments_);
-    } catch (cause) {
-      // `ditto -h` and `hdiutil help` exit non-zero while printing usage.
-      if (cause?.code === "ENOENT")
-        throw new Error(
-          `macOS bundle verification requires ${command} ${arguments_.join(" ")}`,
-          { cause },
-        );
-      if (command === "/usr/bin/xcrun")
-        throw new Error(
-          `macOS bundle verification requires Command Line Tools (${arguments_.join(" ")} failed)`,
-          { cause },
-        );
-    }
-}
-
-const plist = (entries) =>
-  `<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-${Object.entries(entries)
-  .map(([key, value]) => `  <key>${key}</key>\n  <string>${value}</string>`)
-  .join("\n")}
-</dict>
-</plist>
-`;
-
-const bundlePlist = (identifier, executable, packageType = "APPL") =>
-  plist({
-    CFBundleIdentifier: identifier,
-    CFBundleExecutable: executable,
-    CFBundlePackageType: packageType,
-  });
-
-const write = async (path, text) => {
-  await mkdir(dirname(path), { recursive: true });
-  await writeFile(path, text);
-};
-
-/** Compile one C source beneath `root/sources` into `output`. */
-const clang = async (root, { name, source, output, flags = [] }) => {
-  const sourcePath = join(root, "sources", `${name}.c`);
-  await write(sourcePath, source);
-  await mkdir(dirname(output), { recursive: true });
-  await exec("/usr/bin/xcrun", [
-    "clang",
-    "-O0",
-    sourcePath,
-    "-o",
-    output,
-    ...flags,
-  ]);
-};
-
-const PROGRAM = `int main(void) { return 0; }\n`;
-
-/** A versioned framework whose own rpath supplies a second `libchain.dylib`. */
-const buildCoreFramework = async (root, frameworks) => {
-  const core = join(frameworks, "Core.framework");
-  const version = join(core, "Versions", "A");
-  const chainFlags = ["-dynamiclib", "-install_name", "@rpath/libchain.dylib"];
-  await clang(root, {
-    name: "chain-app",
-    source: `const char *chain_variant(void) { return "app"; }\n`,
-    output: join(frameworks, "libchain.dylib"),
-    flags: chainFlags,
-  });
-  await clang(root, {
-    name: "chain-framework",
-    source: `const char *chain_variant(void) { return "framework"; }\n`,
-    output: join(version, "Libraries", "libchain.dylib"),
-    flags: chainFlags,
-  });
-  await clang(root, {
-    name: "sibling",
-    source: `int sibling_value(void) { return 7; }\n`,
-    output: join(version, "libsibling.dylib"),
-    flags: ["-dynamiclib", "-install_name", "@loader_path/libsibling.dylib"],
-  });
-  await clang(root, {
-    name: "core",
-    source: `const char *chain_variant(void);
-int sibling_value(void);
-const char *core_chain(void) { return sibling_value() == 7 ? chain_variant() : "broken"; }
-`,
-    output: join(version, "Core"),
-    flags: [
-      "-dynamiclib",
-      "-install_name",
-      "@rpath/Core.framework/Versions/A/Core",
-      "-Wl,-rpath,@loader_path/Libraries",
-      join(version, "libsibling.dylib"),
-      join(version, "Libraries", "libchain.dylib"),
-    ],
-  });
-  await write(
-    join(version, "Resources", "Info.plist"),
-    bundlePlist("com.example.rea.core", "Core", "FMWK"),
-  );
-  const service = join(version, "XPCServices", "FwSvc.xpc", "Contents");
-  await clang(root, {
-    name: "framework-service",
-    source: PROGRAM,
-    output: join(service, "MacOS", "FwSvc"),
-  });
-  await write(
-    join(service, "Info.plist"),
-    bundlePlist("com.example.rea.core.service", "FwSvc", "XPC!"),
-  );
-  await symlink("A", join(core, "Versions", "Current"));
-  await symlink("Versions/Current/Core", join(core, "Core"));
-  await symlink("Versions/Current/Resources", join(core, "Resources"));
-  await symlink("Versions/Current/XPCServices", join(core, "XPCServices"));
-  return join(version, "Core");
-};
-
-/**
- * The main executable. It searches a missing `Overrides` rpath before
- * `Frameworks`, weakly links a library deleted after linking, and
- * delay-links a library, which the linker encodes as `dylib_use_command`.
- */
-const buildMainExecutable = async (root, contents, coreBinary) => {
-  const gone = join(contents, "Frameworks", "libgone.dylib");
-  await clang(root, {
-    name: "gone",
-    source: `int gone_value(void) { return 1; }\n`,
-    output: gone,
-    flags: ["-dynamiclib", "-install_name", "@rpath/libgone.dylib"],
-  });
-  const delayed = join(contents, "Frameworks", "libdelay.dylib");
-  await clang(root, {
-    name: "delay",
-    source: `int delay_value(void) { return 3; }\n`,
-    output: delayed,
-    flags: ["-dynamiclib", "-install_name", "@rpath/libdelay.dylib"],
-  });
-  const executable = join(contents, "MacOS", "MacFixture");
-  await clang(root, {
-    name: "main",
-    source: `#include <stdio.h>
-const char *core_chain(void);
-int delay_value(void);
-extern int gone_value(void) __attribute__((weak_import));
-int main(void) {
-  if (delay_value() != 3) return 1;
-  printf("chain=%s weak=%s\\n", core_chain(), gone_value ? "present" : "absent");
-  return 0;
-}
-`,
-    output: executable,
-    flags: [
-      "-Wl,-rpath,@executable_path/../Overrides",
-      "-Wl,-rpath,@executable_path/../Frameworks",
-      coreBinary,
-      `-Wl,-weak_library,${gone}`,
-      `-Wl,-delay_library,${delayed}`,
-    ],
-  });
-  await rm(gone);
-  await write(
-    join(contents, "Info.plist"),
-    bundlePlist("com.example.rea.fixture", "MacFixture"),
-  );
-  return executable;
-};
-
-/** One `Contents/`-layout bundle with a trivial executable. */
-const buildNestedBundle = async (root, { bundle, executable, plist }) => {
-  await clang(root, {
-    name: executable,
-    source: PROGRAM,
-    output: join(bundle, "Contents", "MacOS", executable),
-  });
-  await write(join(bundle, "Contents", "Info.plist"), plist);
-};
-
-const buildNestedBundles = async (root, contents, coreBinary) => {
-  const service = join(contents, "XPCServices", "Svc.xpc", "Contents");
-  await clang(root, {
-    name: "service",
-    source: `const char *core_chain(void);
-int main(void) { return core_chain()[0] == 'b'; }
-`,
-    output: join(service, "MacOS", "Svc"),
-    // An absolute rpath outside the bundle precedes the bundled framework.
-    flags: [
-      "-Wl,-rpath,/opt/rea-fixture-absent/lib",
-      "-Wl,-rpath,@executable_path/../../../../Frameworks",
-      coreBinary,
-    ],
-  });
-  await write(
-    join(service, "Info.plist"),
-    bundlePlist("com.example.rea.fixture.service", "Svc", "XPC!"),
-  );
-  await buildNestedBundle(root, {
-    bundle: join(contents, "PlugIns", "Ext.appex"),
-    executable: "Ext",
-    plist: bundlePlist("com.example.rea.fixture.extension", "Ext", "XPC!"),
-  });
-  await buildNestedBundle(root, {
-    bundle: join(contents, "Library", "LoginItems", "Login.app"),
-    executable: "Login",
-    plist: bundlePlist("com.example.rea.fixture.login", "Login"),
-  });
-};
-
-/** A privileged helper, its launchd plists, and a non-bundle helper tool. */
-const buildLaunchItems = async (root, contents) => {
-  await clang(root, {
-    name: "privileged-helper",
-    source: PROGRAM,
-    output: join(
-      contents,
-      "Library",
-      "LaunchServices",
-      "com.example.rea.helper",
-    ),
-  });
-  await write(
-    join(contents, "Library", "LaunchDaemons", "com.example.rea.helper.plist"),
-    plist({
-      Label: "com.example.rea.helper",
-      BundleProgram: "Contents/Library/LaunchServices/com.example.rea.helper",
-    }),
-  );
-  await write(
-    join(contents, "Library", "LaunchAgents", "com.example.rea.agent.plist"),
-    plist({
-      Label: "com.example.rea.agent",
-      BundleProgram: "Contents/Helpers/rea-tool",
-    }),
-  );
-  await clang(root, {
-    name: "tool",
-    source: PROGRAM,
-    output: join(contents, "Helpers", "rea-tool"),
-  });
-};
-
-/**
- * Build `MacFixture.app` with every bundle role and dylib-loading shape REA
- * projects. The main executable prints which `libchain.dylib` copy dyld
- * selected, so callers can compare static resolution with a real load.
- */
-export async function buildMacosBundleFixture(root) {
-  const app = join(root, "MacFixture.app");
-  const contents = join(app, "Contents");
-  const coreBinary = await buildCoreFramework(
-    root,
-    join(contents, "Frameworks"),
-  );
-  const executable = await buildMainExecutable(root, contents, coreBinary);
-  await buildNestedBundles(root, contents, coreBinary);
-  await buildLaunchItems(root, contents);
-  await exec("/usr/bin/xcrun", [
-    "codesign",
-    "--force",
-    "--deep",
-    "--sign",
-    "-",
-    app,
-  ]);
-  return { app, executable };
-}
@@ -1,10 +0,0 @@
-.globl _start
-.globl absolute_value
-.set absolute_value, 0x20000000000007
-.bss
-.lcomm zero_backing, 8192
-.text
-_start:
-  mov $60, %eax
-  xor %edi, %edi
-  syscall
@@ -1,17 +0,0 @@
-#include <stdio.h>
-#include <stdlib.h>
-
-int stored_value = 7;
-char zero_backing[8192];
-__thread int tls_value;
-int common_value;
-
-__attribute__((noinline)) int read_values(const char *text) {
-  char buffer[32];
-  snprintf(buffer, sizeof(buffer), "%s", text);
-  return buffer[0] + stored_value + tls_value + common_value;
-}
-
-int main(int argc, char **argv) {
-  return read_values(argc > 1 ? argv[1] : "source-owned");
-}
@@ -1,61 +0,0 @@
-import { createServer } from "node:http";
-
-/** Source-owned module graph with actual native loading and an uncalled lazy edge. */
-export async function startBrowserModuleSite() {
-  const requests = [];
-  const importMap = {
-    imports: { "pkg/": "/pkg/", alias: "./global.js", blocked: null },
-    scopes: { "/scoped/": { alias: "./scoped.js" } },
-  };
-  const main = `
-import {marker as alias} from 'alias';
-import {marker as pkg} from 'pkg/nested.js';
-const a = await import('/query.js?v=1#one');
-const b = await import('/query.js?v=1#two');
-const c = await import('/query.js?v=2');
-const again = await import('/query.js?v=1#one');
-const specifiers = ['alias', 'pkg/nested.js', '/query.js?v=1#one', '/query.js?v=1#two', '/query.js?v=2', '/query.js?v=1#one', './lazy.js', 'blocked', 'pkg/../escape.js', 'pkg/%2e%2e/escape.js', ''];
-globalThis.__moduleProof = {alias, pkg, urls: [a.url,b.url,c.url], instances: [a.instance,b.instance,c.instance], same_module: again === a, different_fragments: a !== b, resolutions: specifiers.map(specifier => {try{return {state: 'resolved', url: import.meta.resolve(specifier)}}catch(error){return {state: 'rejected', message: String(error)}}})};
-document.body.dataset.ready = 'true';
-function uncalled(){return import('./lazy.js')}
-function blocked(){return import('blocked')}
-function escaped(){return import('pkg/../escape.js')}
-function encodedEscape(){return import('pkg/%2e%2e/escape.js')}
-function empty(){return import('')}
-function computed(name){return import(name)}
-`;
-  const server = createServer((request, response) => {
-    requests.push(request.url);
-    if (request.url === "/")
-      return response
-        .writeHead(200, { "Content-Type": "text/html" })
-        .end(
-          `<body><base href="/maps/"><script type="importmap">${JSON.stringify(importMap)}</script><script type="module" src="/scoped/main.js?build=2#entry"></script></body>`,
-        );
-    response.setHeader("Content-Type", "text/javascript");
-    if (request.url?.startsWith("/scoped/main.js?")) return response.end(main);
-    if (request.url === "/maps/scoped.js")
-      return response.end("export const marker = 'scoped';");
-    if (request.url === "/pkg/nested.js")
-      return response.end("export const marker = 'pkg';");
-    if (request.url?.startsWith("/query.js?"))
-      return response.end(
-        "globalThis.__moduleCount = (globalThis.__moduleCount ?? 0) + 1; export const instance = globalThis.__moduleCount; export const url = import.meta.url;",
-      );
-    response.writeHead(404).end("Not selected");
-  });
-  await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
-  const address = server.address();
-  if (address === null || typeof address === "string")
-    throw new Error("Module fixture has no TCP address");
-  return {
-    origin: `http://127.0.0.1:${address.port}`,
-    requests,
-    importMap,
-    main,
-    close: () =>
-      new Promise((resolve, reject) =>
-        server.close((error) => (error ? reject(error) : resolve())),
-      ),
-  };
-}
@@ -1,51 +0,0 @@
-import { createServer } from "node:http";
-
-/** Owned synthetic site keeps source bytes, repeated URLs and expected execution independent of REA. */
-export async function startBrowserRuntimeSite() {
-  let origin;
-  let evidenceRequests = 0;
-  const sources = () => ({
-    selected: `// 🔥 UTF-16 prefix\r\nfunction chosen() {\r\n  history.pushState({}, '', '/same-document?caller=value#fragment');\r\n  fetch('/evidence?marker=chosen');\r\n  if (document.body.dataset.branch === 'unused') { fetch('/never'); }\r\n}\r\ndocument.querySelector('#run').addEventListener('click', chosen, { passive: true });\r\n//# sourceURL=${origin.replace("http://", "http://declared:label@")}/same.js\r\n`,
-    other: `function untouched() { return 'other source'; }\r\ndocument.querySelector('#child').addEventListener('click', untouched);\r\n//# sourceURL=${origin.replace("http://", "http://declared:label@")}/same.js\r\n`,
-  });
-  const server = createServer((request, response) => {
-    response.setHeader("content-type", "text/html; charset=utf-8");
-    if (request.url?.startsWith("/evidence")) {
-      evidenceRequests += 1;
-      response.end("ok");
-      return;
-    }
-    if (request.url === "/a.js" || request.url === "/b.js") {
-      response.setHeader(
-        "content-type",
-        "application/javascript; charset=utf-8",
-      );
-      response.end(
-        request.url === "/a.js" ? sources().selected : sources().other,
-      );
-      return;
-    }
-    response.end(
-      '<!doctype html><meta charset="utf-8"><button id="run"><span id="child">Run</span></button><script src="/a.js"></script><script src="/b.js"></script>',
-    );
-  });
-  await new Promise((resolve, reject) => {
-    server.once("error", reject);
-    server.listen(0, "127.0.0.1", resolve);
-  });
-  const address = server.address();
-  if (address === null || typeof address === "string")
-    throw new Error("Runtime fixture did not bind TCP");
-  origin = `http://127.0.0.1:${address.port}`;
-  return {
-    origin,
-    sources: sources(),
-    evidenceRequests: () => evidenceRequests,
-    close: () =>
-      new Promise((resolve, reject) =>
-        server.close((error) =>
-          error === undefined ? resolve() : reject(error),
-        ),
-      ),
-  };
-}
@@ -1,77 +0,0 @@
-import { createServer } from "node:http";
-import { pathToFileURL } from "node:url";
-import { access } from "node:fs/promises";
-import { isAbsolute } from "node:path";
-
-/** Generate a real compiler map and serve only source-owned fixture code. */
-export async function startBrowserSourceMapSite() {
-  const command = process.env.REA_WEB_SOURCE_MAP_COMPILER;
-  if (!command || !isAbsolute(command))
-    throw new Error(
-      "verify:browser:source-maps requires absolute REA_WEB_SOURCE_MAP_COMPILER pointing to isolated esbuild 0.25.10 lib/main.js",
-    );
-  await access(command);
-  const compiler = await import(pathToFileURL(command).href);
-  if (compiler.version !== "0.25.10")
-    throw new Error(`Expected esbuild 0.25.10; observed ${compiler.version}`);
-  const original =
-    '// 🎋 UTF-16 and CRLF fixture\r\nfunction boot(): void {\r\n  const marker: string = "source-map proof";\r\n  document.body.dataset.ready = marker;\r\n}\r\nboot();\r\n';
-  const compiled = await compiler
-    .transform(original, {
-      loader: "ts",
-      sourcefile: "../src/fixture.ts?v=7#original",
-      sourcemap: "external",
-      minify: true,
-      format: "iife",
-      target: "es2022",
-    })
-    .finally(() => compiler.stop());
-  const token = '"source-map proof"';
-  const generatedOffset = compiled.code.indexOf(token);
-  const originalOffset = original.indexOf(token);
-  if (generatedOffset < 0 || originalOffset < 0)
-    throw new Error("Compiler fixture marker missing");
-  const position = textPosition(compiled.code, generatedOffset);
-  const originalPosition = textPosition(original, originalOffset);
-  let mapRequests = 0;
-  const server = createServer((request, response) => {
-    if (request.url === "/")
-      return response
-        .writeHead(200, { "Content-Type": "text/html" })
-        .end('<body><script src="/app.js?build=7"></script></body>');
-    if (request.url === "/app.js?build=7")
-      return response
-        .writeHead(200, { "Content-Type": "text/javascript" })
-        .end(compiled.code);
-    if (request.url?.startsWith("/maps/app.js.map")) {
-      mapRequests += 1;
-      return response
-        .writeHead(200, { "Content-Type": "application/json" })
-        .end(compiled.map);
-    }
-    response.writeHead(404).end("Unselected");
-  });
-  await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
-  const address = server.address();
-  if (!address || typeof address === "string")
-    throw new Error("Source map fixture has no TCP address");
-  return {
-    origin: `http://127.0.0.1:${address.port}`,
-    original,
-    generated: compiled.code,
-    map: compiled.map,
-    position,
-    originalPosition,
-    originalOffset,
-    mapRequests: () => mapRequests,
-    compiler: { id: "esbuild", version: compiler.version },
-    close: () =>
-      new Promise((resolve, reject) =>
-        server.close((error) => (error ? reject(error) : resolve())),
-      ),
-  };
-}
-const textPosition = (text, offset) => {
-  const preceding = text.slice(0, offset).split(/\r\n?|\n|\u2028|\u2029/u);
-  return { line: preceding.length, column: preceding.at(-1).length };
-};
@@ -1,12 +0,0 @@
-// SPDX-License-Identifier: MIT
-pragma solidity 0.8.30;
-
-// Public source-owned fixture; generated runtime bytecode is never tracked.
-contract InterfaceFixture {
-  uint256 public stored;
-  function set(uint256 value) external { stored = value; }
-  function read() external view returns (uint256) { return stored; }
-  function pair(uint32 a, address b) external pure returns (uint32, address) { return (a, b); }
-  receive() external payable {}
-  fallback() external {}
-}
@@ -1,151 +0,0 @@
-import importlib.util
-import json
-from pathlib import Path
-from mitmproxy import connection, ctx, http
-from mitmproxy.io import FlowWriter
-from mitmproxy.io import tnetstring
-from mitmproxy.addons.savehar import SaveHar
-from mitmproxy.websocket import WebSocketData, WebSocketMessage
-
-class Generator:
-    def load(self, loader):
-        loader.add_option("rea_fixture_root", str, "", "Owned synthetic fixture root")
-        loader.add_option("rea_adapter_path", str, "", "REA native adapter under verification")
-
-    def running(self):
-        root = Path(ctx.options.rea_fixture_root)
-        spec = importlib.util.spec_from_file_location("rea_capture_under_test", ctx.options.rea_adapter_path)
-        adapter = importlib.util.module_from_spec(spec)
-        spec.loader.exec_module(adapter)
-        classifications = [
-            (adapter.CaptureFailure("format", "Malformed retained record.", "/record"), "format"),
-            (adapter.CaptureFailure("input-limit", "Nesting budget.", "/extension"), "input-limit"),
-            (MemoryError("payload must not enter diagnostics"), "resource-limit"),
-            (RuntimeError("payload must not enter diagnostics"), "decoder"),
-            (OSError("payload must not enter diagnostics"), "decoder"),
-        ]
-        for error, expected in classifications:
-            reply = adapter.failure_reply(error)
-            assert reply["reason"] == expected, reply
-            assert "payload must not enter diagnostics" not in json.dumps(reply)
-        for state, expected in [({"metadata": {1: b"bad-key"}}, "format"), ({"metadata": object()}, "decoder")]:
-            try:
-                adapter.project_record(state, [])
-            except adapter.CaptureFailure as error:
-                assert error.reason == expected, (error.reason, expected)
-                assert error.pointer == "/metadata", error.pointer
-            else:
-                raise AssertionError("Invalid native representation was accepted")
-        non_utf8 = adapter.project_record({"request": {"headers": [(b"Referer", b"https://byte-user:byte-secret@example.test/path\xff")] }}, [])
-        assert non_utf8["reported"]["request"]["headers"][0][1] is None, non_utf8
-        assert non_utf8["binary_fields"][-1]["state"] == "redacted", non_utf8
-        for value in [" \tHTTPS://ows-user:ows-secret@example.test/path\t ", b" \tHTTPS://ows-user:ows-secret@example.test/path\t "]:
-            projected = adapter.project_record({"request": {"headers": [(b"Referer", value)]}}, [])
-            assert projected["reported"]["request"]["headers"][0][1] == " \tHTTPS://example.test/path\t ", projected
-            assert "ows-secret" not in json.dumps(projected), projected
-            if isinstance(value, bytes):
-                assert projected["binary_fields"][-1]["state"] == "redacted", projected
-        (root / "native-error-classifications.json").write_text(json.dumps({"passed": len(classifications) + 2}))
-        first = http.HTTPFlow(connection.Client(peername=("127.0.0.1", 1), sockname=("127.0.0.1", 2)), connection.Server(address=("example.test", 80)))
-        first.id = "original-producer-id"
-        first.request = http.Request.make("POST", "http://example.test/a?token=ordinary", b"\x00\xffbody", [(b"Authorization", b"Bearer native-transport-secret"), (b"X-Duplicate", b"one"), (b"X-Duplicate", b"two")])
-        first.request.path = "http://user:password@example.test/a?token=ordinary#fragment"
-        first.response = http.Response.make(200, b"\x00\xfeanswer", [(b"Set-Cookie", b"session=cookie-secret"), (b"Location", b"https://redirect-user:redirect-password@example.test/b?token=ordinary")])
-        first.metadata = {"big_integer": 9007199254740993, "nonfinite": float("inf"), "isLosslessNumber": True, "value": "ordinary-extension", "response": {"headers": [["Authorization", "ordinary-extension-credential-name"]]}}
-        first.websocket = WebSocketData(messages=[WebSocketMessage(2, True, b"\x00\xfdmessage", 123.5)])
-        first.backup()
-        first.comment = "caller-selected-fixture"
-        second = first.copy()
-        second.id = first.id
-        second.request.raw_content = None
-        second.response.raw_content = b""
-        second.websocket = None
-        with (root / "flows.mitm").open("wb") as handle:
-            writer = FlowWriter(handle)
-            writer.add(first)
-            writer.add(second)
-        har_first, har_second = first.copy(), second.copy()
-        har_first.request.path = "/a?token=ordinary#fragment"
-        har_second.request.path = "/a?token=ordinary#fragment"
-        har_first.response.raw_content = b"\x00\xff\x01\xfe"
-        markers = {"sensitive": "REDACTED", "bracket": "literal[", "overlap": "secret", "ordinary": "unmarked"}
-        har = SaveHar().make_har([har_first, har_second])
-        har["log"]["entries"][0]["_markers"] = markers
-        har["log"]["entries"][0]["_private_properties"] = {"private-property/~": {"number": 123, "text": "private-property"}, "kept": 7}
-        (root / "producer.har").write_text(json.dumps(har))
-        har_text = json.dumps(har)
-        for name, members in [
-            ("equal-number", '"_duplicate": 1, "_duplicate": 1'),
-            ("equal-null", '"_duplicate": null, "_duplicate": null'),
-            ("equal-object", '"_duplicate": {"value": 1}, "_duplicate": {"value": 1}'),
-            ("escaped-key", '"_duplicate": 1, "\\u005fduplicate": 1'),
-        ]:
-            duplicate = har_text.replace('"cache": {}', '"cache": {}, ' + members, 1)
-            assert duplicate != har_text
-            (root / ("duplicate-" + name + ".har")).write_text(duplicate)
-        duplicate = har_text.replace('"version": "1.2"', '"version": "1.2", "version": "1.2"', 1)
-        assert duplicate != har_text
-        (root / "duplicate-core.har").write_text(duplicate)
-        prototype = json.loads(har_text)
-        prototype["_extension"] = {"__proto__": {"preserved": 7}, "constructor": "ordinary"}
-        (root / "prototype.har").write_text(json.dumps(prototype))
-        prototype_native = first.get_state()
-        prototype_native["metadata"]["__proto__"] = {"preserved": 7}
-        with (root / "prototype.mitm").open("wb") as handle:
-            tnetstring.dump(prototype_native, handle)
-        invalid_har = json.loads(json.dumps(har))
-        invalid_har["log"]["entries"][0]["response"]["content"].update({"encoding": "base64", "text": "AR=="})
-        (root / "invalid-private-parent.har").write_text(json.dumps(invalid_har))
-        strings = first.get_state()
-        for state in [strings, strings["backup"]]:
-            state["request"]["path"] = "https://native-user:string-password@example.test/string-path"
-            state["request"]["authority"] = "authority-user:authority-password@example.test"
-            state["request"]["headers"] = [(b"Referer", "https://referer-user:referer-password@example.test/from"), (b"Origin", "//origin-user:origin-password@example.test")]
-            state["response"]["headers"] = [(b"Location", "https://location-user:location-password@example.test/to")]
-            state["metadata"]["_markers"] = dict(markers)
-            state["metadata"]["_private_properties"] = {"private-property/~": {"number": 123, "bytes": b"private-property"}, "kept": 7}
-        with (root / "string-urls.mitm").open("wb") as handle:
-            tnetstring.dump(strings, handle)
-        strings["metadata"]["_private_properties"]["private-property/~"] = {1: b"unsupported-key"}
-        with (root / "invalid-private-key.mitm").open("wb") as handle:
-            tnetstring.dump(strings, handle)
-        extension = "leaf"
-        for _ in range(66):
-            extension = {"child": extension}
-        har["_extension"] = extension
-        (root / "deep.har").write_text(json.dumps(har))
-        deep = first.get_state()
-        deep["_extension"] = extension
-        with (root / "deep.mitm").open("wb") as handle:
-            tnetstring.dump(deep, handle)
-        for name, value in [("invalid-credential-key", {1: b"bad-key"}), ("deep-credential", extension)]:
-            malformed = first.get_state()
-            malformed["request"]["headers"] = [(b"Authorization", value)]
-            with (root / (name + ".mitm")).open("wb") as handle:
-                tnetstring.dump(malformed, handle)
-        for prefix, name in [(" \t", "ows"), ("\r\n \v\f\x00\x1f", "controls")]:
-            url = prefix + "HTTPS://ows-user:ows-secret@example.test/path?token=ordinary#fragment\t "
-            relative = prefix + "//ows-user:ows-secret@example.test/path?token=ordinary#fragment\t "
-            whitespace_har = json.loads((root / "producer.har").read_text())
-            entry = whitespace_har["log"]["entries"][0]
-            for side, header in [("response", "Location"), ("request", "Referer"), ("request", "Origin")]:
-                entry[side]["headers"] = [{"name": header, "value": url}] + entry[side]["headers"]
-            (root / (name + ".har")).write_text(json.dumps(whitespace_har))
-            whitespace_native = first.get_state()
-            for state in [whitespace_native, whitespace_native["backup"]]:
-                state["request"]["headers"] = [(b"Referer", url.encode("utf-8")), (b"Origin", relative)]
-                state["response"]["headers"] = [(b"Location", url)]
-            with (root / (name + ".mitm")).open("wb") as handle:
-                tnetstring.dump(whitespace_native, handle)
-        non_utf8_native = first.get_state()
-        for state in [non_utf8_native, non_utf8_native["backup"]]:
-            state["request"]["path"] = b"https://byte-user:byte-secret@example.test/path\xff"
-            state["request"]["authority"] = b"byte-user:byte-secret@example.test\xff"
-            state["request"]["headers"] = [(b"Referer", b" https://byte-user:byte-secret@example.test/from\xff"), (b"Origin", b"//byte-user:byte-secret@example.test\xff")]
-            state["response"]["headers"] = [(b"Location", b"https://byte-user:byte-secret@example.test/to\xff")]
-        with (root / "non-utf8-urls.mitm").open("wb") as handle:
-            tnetstring.dump(non_utf8_native, handle)
-        (root / "oracle.json").write_text(json.dumps({"records": 2, "request_base64": "AP9ib2R5", "response_base64": "AP5hbnN3ZXI=", "websocket_base64": "AP1tZXNzYWdl", "id": first.id}))
-        ctx.master.shutdown()
-
-addons = [Generator()]
--- a/Show More
+++ b/Show More