[PR #313] [MERGED] feat: streamline agent integration and MCP routing #1949

New issue

Closed

opened 2026-10-16 21:12:46 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-16 21:12:46 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/morluto/rea/pull/313
Author: @N0zoM1z0
Created: 7/20/2026
Status: ✅ Merged
Merged: 7/20/2026
Merged by: @N0zoM1z0

Base: main ← Head: codex/agent-integration-release-performance

📝 Commits (4)

3e3d458 feat: streamline agent integration and MCP routing
a2089a4 docs: refresh generated API links
d7d6bdf fix: align session filters and Hopper verification
b9bead2 fix(ci): keep tool kind type internal

📊 Changes

157 files changed (+2748 additions, -715 deletions)

View changed files

📝 .github/workflows/release.yml (+6 -3)
📝 README.md (+25 -10)
📝 README_ar.md (+3 -3)
📝 README_ja.md (+4 -4)
📝 README_ko.md (+3 -3)
📝 README_zh.md (+4 -4)
📝 docs/api/assets/hierarchy.js (+1 -1)
📝 docs/api/assets/navigation.js (+1 -1)
📝 docs/api/assets/search.js (+1 -1)
📝 docs/api/classes/application_BinarySession.BinarySession.html (+1 -1)
📝 docs/api/classes/application_BinarySessionRecords.BinarySessionRecords.html (+1 -1)
📝 docs/api/classes/application_PermissionAuthority.PermissionPathError.html (+1 -1)
📝 docs/api/classes/application_ProcessCaptureError.ProcessCaptureError.html (+1 -1)
📝 docs/api/classes/application_ProjectPermissionStore.ProjectPermissionStoreError.html (+1 -1)
📝 docs/api/classes/browser_BrowserProcessStartup.BrowserStartupError.html (+1 -1)
📝 docs/api/classes/ghidra_GhidraLauncher.GhidraLaunchError.html (+1 -1)
📝 docs/api/classes/ghidra_GhidraSessionError.GhidraSessionError.html (+1 -1)
📝 docs/api/classes/ghidra_protocol.GhidraRemoteError.html (+1 -1)
📝 docs/api/functions/application_CapabilityInventory.buildCapabilityInventory.html (+2 -2)
📝 docs/api/functions/application_ClientRegistrationStatus.readClientRegistrationStatuses.html (+1 -1)

...and 80 more files

📄 Description

Summary

make the npm release path verify the packed artifact before publish and exercise the published package from a clean working directory
make rea setup install and repair the exact pinned MCP registration plus the bundled Codex skill as one approval-gated, transactional Agent Integration action
improve natural MCP routing with compact server instructions, summary-first session and JavaScript application results, paginated graph resources, and explicit-path managed inspection
add a real Codex CLI agent-experience verifier covering natural tool selection, first-tool accuracy, repeated-call behavior, evidence use, semantic completion, and authority honesty

Why

REA's individual tools were capable, but package consumers and agents still had avoidable integration friction: registration and skill installation could drift independently, target-free routing guidance was weak, and large default projections made tool choice and follow-up work harder. This change treats distribution and agent usability as end-to-end product contracts.

Caller-visible behavior

binary_session now returns a compact summary by default and supports capability filtering and pagination; callers can explicitly request the full projection.
JavaScript application analysis returns a summary with counts, findings, coverage, unknowns, and evidence. Full nodes and edges are available through graph resources instead of being repeated in every result.
managed artifact tools accept an explicit local path and open the corresponding session automatically.
target-free MCP sessions advertise short routing guidance across native, JavaScript/Electron, managed, replay, and browser workflows.
setup remains additive and approval-gated, with backups and rollback for both MCP configuration and the bundled skill.

Example inputs remain explicit and small:

{"mode":"summary","capability":"decompile","cursor":0,"limit":25}

{"path":"/absolute/path/to/application.dll"}

Validation

npm run check
npm run verify:package
npm run verify:published -- 2.1.0
npm run verify:agent using codex-cli 0.144.6: 4/4 natural selections, 4/4 correct first tools, zero repeated tool calls, 4/4 completion quality, and 4/4 authority honesty
npm run knip
npm run jscpd
npm run scan:todos

Real Hopper and Ghidra verification was not performed because those bring-your-own installations are unavailable in this environment. The package, MCP, and source-owned agent scenarios passed.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/morluto/rea/pull/313 **Author:** [@N0zoM1z0](https://github.com/N0zoM1z0) **Created:** 7/20/2026 **Status:** ✅ Merged **Merged:** 7/20/2026 **Merged by:** [@N0zoM1z0](https://github.com/N0zoM1z0) **Base:** `main` ← **Head:** `codex/agent-integration-release-performance` --- ### 📝 Commits (4) - [`3e3d458`](https://github.com/morluto/rea/commit/3e3d45856ede849371027b62ad1a7b0687798951) feat: streamline agent integration and MCP routing - [`a2089a4`](https://github.com/morluto/rea/commit/a2089a40671b3edae7db98ce37587da87f093d1b) docs: refresh generated API links - [`d7d6bdf`](https://github.com/morluto/rea/commit/d7d6bdf474a1672a9b33888044a38672d28ab0ee) fix: align session filters and Hopper verification - [`b9bead2`](https://github.com/morluto/rea/commit/b9bead2809eca4448ac28f3e2465f8021a109983) fix(ci): keep tool kind type internal ### 📊 Changes **157 files changed** (+2748 additions, -715 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/release.yml` (+6 -3) 📝 `README.md` (+25 -10) 📝 `README_ar.md` (+3 -3) 📝 `README_ja.md` (+4 -4) 📝 `README_ko.md` (+3 -3) 📝 `README_zh.md` (+4 -4) 📝 `docs/api/assets/hierarchy.js` (+1 -1) 📝 `docs/api/assets/navigation.js` (+1 -1) 📝 `docs/api/assets/search.js` (+1 -1) 📝 `docs/api/classes/application_BinarySession.BinarySession.html` (+1 -1) 📝 `docs/api/classes/application_BinarySessionRecords.BinarySessionRecords.html` (+1 -1) 📝 `docs/api/classes/application_PermissionAuthority.PermissionPathError.html` (+1 -1) 📝 `docs/api/classes/application_ProcessCaptureError.ProcessCaptureError.html` (+1 -1) 📝 `docs/api/classes/application_ProjectPermissionStore.ProjectPermissionStoreError.html` (+1 -1) 📝 `docs/api/classes/browser_BrowserProcessStartup.BrowserStartupError.html` (+1 -1) 📝 `docs/api/classes/ghidra_GhidraLauncher.GhidraLaunchError.html` (+1 -1) 📝 `docs/api/classes/ghidra_GhidraSessionError.GhidraSessionError.html` (+1 -1) 📝 `docs/api/classes/ghidra_protocol.GhidraRemoteError.html` (+1 -1) 📝 `docs/api/functions/application_CapabilityInventory.buildCapabilityInventory.html` (+2 -2) 📝 `docs/api/functions/application_ClientRegistrationStatus.readClientRegistrationStatuses.html` (+1 -1) _...and 80 more files_ </details> ### 📄 Description ## Summary - make the npm release path verify the packed artifact before publish and exercise the published package from a clean working directory - make `rea setup` install and repair the exact pinned MCP registration plus the bundled Codex skill as one approval-gated, transactional Agent Integration action - improve natural MCP routing with compact server instructions, summary-first session and JavaScript application results, paginated graph resources, and explicit-path managed inspection - add a real Codex CLI agent-experience verifier covering natural tool selection, first-tool accuracy, repeated-call behavior, evidence use, semantic completion, and authority honesty ## Why REA's individual tools were capable, but package consumers and agents still had avoidable integration friction: registration and skill installation could drift independently, target-free routing guidance was weak, and large default projections made tool choice and follow-up work harder. This change treats distribution and agent usability as end-to-end product contracts. ## Caller-visible behavior - `binary_session` now returns a compact summary by default and supports capability filtering and pagination; callers can explicitly request the full projection. - JavaScript application analysis returns a summary with counts, findings, coverage, unknowns, and evidence. Full nodes and edges are available through graph resources instead of being repeated in every result. - managed artifact tools accept an explicit local path and open the corresponding session automatically. - target-free MCP sessions advertise short routing guidance across native, JavaScript/Electron, managed, replay, and browser workflows. - setup remains additive and approval-gated, with backups and rollback for both MCP configuration and the bundled skill. Example inputs remain explicit and small: ```json {"mode":"summary","capability":"decompile","cursor":0,"limit":25} ``` ```json {"path":"/absolute/path/to/application.dll"} ``` ## Validation - `npm run check` - `npm run verify:package` - `npm run verify:published -- 2.1.0` - `npm run verify:agent` using `codex-cli 0.144.6`: 4/4 natural selections, 4/4 correct first tools, zero repeated tool calls, 4/4 completion quality, and 4/4 authority honesty - `npm run knip` - `npm run jscpd` - `npm run scan:todos` Real Hopper and Ghidra verification was not performed because those bring-your-own installations are unavailable in this environment. The package, MCP, and source-owned agent scenarios passed.  --- <a href="https://app.devin.ai/review/morluto/rea/pull/313" target="_blank"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1"> <img src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1" alt="Open in Devin Review"> </picture> </a>  --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-16 21:12:46 +00:00