[PR #314] [MERGED] feat(artifacts): project mobile application inventories #1952

New issue

Closed

opened 2026-10-16 21:12:48 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-16 21:12:48 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/morluto/rea/pull/314
Author: @morluto
Created: 7/20/2026
Status: ✅ Merged
Merged: 7/20/2026
Merged by: @morluto

Base: main ← Head: codex/application-inventory-projections

📝 Commits (4)

d36b385 feat(artifacts): project mobile application inventories
0cc9d46 fix(artifacts): bound mobile projection candidates
560dbda fix(artifacts): align projection provider targets
b0cb28a docs: update application projection API

📊 Changes

112 files changed (+2693 additions, -140 deletions)

View changed files

📝 docs/api/assets/hierarchy.js (+1 -1)
📝 docs/api/assets/navigation.js (+1 -1)
📝 docs/api/assets/search.js (+1 -1)
📝 docs/api/classes/application_BinarySession.BinarySession.html (+1 -1)
📝 docs/api/classes/application_BinarySessionRecords.BinarySessionRecords.html (+1 -1)
📝 docs/api/classes/application_PermissionAuthority.PermissionPathError.html (+1 -1)
📝 docs/api/classes/application_ProcessCaptureError.ProcessCaptureError.html (+1 -1)
📝 docs/api/classes/application_ProjectPermissionStore.ProjectPermissionStoreError.html (+1 -1)
📝 docs/api/classes/browser_BrowserProcessStartup.BrowserStartupError.html (+1 -1)
📝 docs/api/classes/domain_errors.AnalysisCancelledError.html (+1 -1)
📝 docs/api/classes/domain_errors.AnalysisCapabilityUnavailableError.html (+1 -1)
📝 docs/api/classes/domain_errors.AnalysisError.html (+1 -1)
📝 docs/api/classes/domain_errors.AnalysisInputError.html (+1 -1)
📝 docs/api/classes/domain_errors.AnalysisOutputError.html (+1 -1)
📝 docs/api/classes/domain_errors.AnalysisProtocolError.html (+1 -1)
📝 docs/api/classes/domain_errors.AnalysisTimeoutError.html (+1 -1)
📝 docs/api/classes/domain_errors.ArtifactOperationError.html (+1 -1)
📝 docs/api/classes/domain_errors.BinaryTargetError.html (+1 -1)
📝 docs/api/classes/domain_errors.BrowserObservationError.html (+1 -1)
📝 docs/api/classes/domain_errors.ConfigurationError.html (+1 -1)

...and 80 more files

📄 Description

Problem

Artifact inventory evidence identifies files and container structure, but callers still have to reconstruct Android and Apple application boundaries, runtime families, and likely JavaScript/native bridge surfaces themselves.

Changes

add deterministic Android APK and Apple IPA projections over authenticated inventory Evidence
classify bounded application components and runtime families without executing target content
emit explicit, bounded bridge hypotheses from JavaScript and native components
expose provider descriptors and Evidence-producing application services
preserve incomplete and truncated inventory states in projection coverage
generate API documentation for the new public contracts

This is a current-main replacement slice extracted from draft #311. It intentionally does not expose new caller-visible CLI or MCP tools yet.

Review notes

Suggested order: domain schemas and projection logic, Evidence service wrappers, then regression tests.

Verification

npm run check
npm run knip
focused Vitest projection suite (9 tests)

Real Hopper/Ghidra verification was not required because this change operates only on existing artifact inventory Evidence and does not change either deep-analysis adapter.

Refs #311

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/morluto/rea/pull/314 **Author:** [@morluto](https://github.com/morluto) **Created:** 7/20/2026 **Status:** ✅ Merged **Merged:** 7/20/2026 **Merged by:** [@morluto](https://github.com/morluto) **Base:** `main` ← **Head:** `codex/application-inventory-projections` --- ### 📝 Commits (4) - [`d36b385`](https://github.com/morluto/rea/commit/d36b38537821dd2d74d99a9e49eccd569cfaf341) feat(artifacts): project mobile application inventories - [`0cc9d46`](https://github.com/morluto/rea/commit/0cc9d468c4d6f3036b5888d12173157b487371c3) fix(artifacts): bound mobile projection candidates - [`560dbda`](https://github.com/morluto/rea/commit/560dbda76d9a07ea9291c00bec8a383456ad0e03) fix(artifacts): align projection provider targets - [`b0cb28a`](https://github.com/morluto/rea/commit/b0cb28a9bf04f849e792346306bb42ed4fac6b29) docs: update application projection API ### 📊 Changes **112 files changed** (+2693 additions, -140 deletions) <details> <summary>View changed files</summary> 📝 `docs/api/assets/hierarchy.js` (+1 -1) 📝 `docs/api/assets/navigation.js` (+1 -1) 📝 `docs/api/assets/search.js` (+1 -1) 📝 `docs/api/classes/application_BinarySession.BinarySession.html` (+1 -1) 📝 `docs/api/classes/application_BinarySessionRecords.BinarySessionRecords.html` (+1 -1) 📝 `docs/api/classes/application_PermissionAuthority.PermissionPathError.html` (+1 -1) 📝 `docs/api/classes/application_ProcessCaptureError.ProcessCaptureError.html` (+1 -1) 📝 `docs/api/classes/application_ProjectPermissionStore.ProjectPermissionStoreError.html` (+1 -1) 📝 `docs/api/classes/browser_BrowserProcessStartup.BrowserStartupError.html` (+1 -1) 📝 `docs/api/classes/domain_errors.AnalysisCancelledError.html` (+1 -1) 📝 `docs/api/classes/domain_errors.AnalysisCapabilityUnavailableError.html` (+1 -1) 📝 `docs/api/classes/domain_errors.AnalysisError.html` (+1 -1) 📝 `docs/api/classes/domain_errors.AnalysisInputError.html` (+1 -1) 📝 `docs/api/classes/domain_errors.AnalysisOutputError.html` (+1 -1) 📝 `docs/api/classes/domain_errors.AnalysisProtocolError.html` (+1 -1) 📝 `docs/api/classes/domain_errors.AnalysisTimeoutError.html` (+1 -1) 📝 `docs/api/classes/domain_errors.ArtifactOperationError.html` (+1 -1) 📝 `docs/api/classes/domain_errors.BinaryTargetError.html` (+1 -1) 📝 `docs/api/classes/domain_errors.BrowserObservationError.html` (+1 -1) 📝 `docs/api/classes/domain_errors.ConfigurationError.html` (+1 -1) _...and 80 more files_ </details> ### 📄 Description ## Problem Artifact inventory evidence identifies files and container structure, but callers still have to reconstruct Android and Apple application boundaries, runtime families, and likely JavaScript/native bridge surfaces themselves. ## Changes - add deterministic Android APK and Apple IPA projections over authenticated inventory Evidence - classify bounded application components and runtime families without executing target content - emit explicit, bounded bridge hypotheses from JavaScript and native components - expose provider descriptors and Evidence-producing application services - preserve incomplete and truncated inventory states in projection coverage - generate API documentation for the new public contracts This is a current-main replacement slice extracted from draft #311. It intentionally does not expose new caller-visible CLI or MCP tools yet. ## Review notes Suggested order: domain schemas and projection logic, Evidence service wrappers, then regression tests. ## Verification - `npm run check` - `npm run knip` - focused Vitest projection suite (9 tests) Real Hopper/Ghidra verification was not required because this change operates only on existing artifact inventory Evidence and does not change either deep-analysis adapter. Refs #311 --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-16 21:12:48 +00:00