[GH-ISSUE #34] Add a native macOS inspection provider #24

New issue

Closed

opened 2026-10-15 18:20:04 +00:00 by bsakaguchi · 2 comments

bsakaguchi commented

2026-10-15 18:20:04 +00:00

Owner

Originally created by @morluto on GitHub (Jul 12, 2026).
Original GitHub issue: https://github.com/morluto/rea/issues/34

Goal

Answer deterministic binary questions without launching Hopper by composing native macOS utilities behind provider-neutral capabilities.

Initial adapters

file
nm
otool
strings
codesign
plutil
lipo
dwarfdump
dyld_info
swift-demangle
xcrun vtool

Requirements

Expose semantic operations such as inspect_macho, inspect_signature, inspect_plist, list_architectures, and demangle_swift.
Parse subprocess output at an explicit boundary; do not leak raw command-specific formats into public contracts.
Record the command, tool version, artifact SHA-256, exit status, limitations, and source locations.
Bound output and support cancellation and timeouts.
Detect unavailable tools as typed capability errors.
Keep command execution read-only.

Acceptance criteria

inspect_macho returns slices, load commands, imports, exports, linked frameworks, UUID/build metadata, segments, sections, and permissions when supported.
CLI and MCP use identical schemas.
Fixture tests cover Mach-O and universal binaries plus unavailable or malformed-tool output.
Results can participate in evidence bundles and provider comparison.

Originally created by @morluto on GitHub (Jul 12, 2026). Original GitHub issue: https://github.com/morluto/rea/issues/34 ## Goal Answer deterministic binary questions without launching Hopper by composing native macOS utilities behind provider-neutral capabilities. ## Initial adapters - file - nm - otool - strings - codesign - plutil - lipo - dwarfdump - dyld_info - swift-demangle - xcrun vtool ## Requirements - Expose semantic operations such as inspect_macho, inspect_signature, inspect_plist, list_architectures, and demangle_swift. - Parse subprocess output at an explicit boundary; do not leak raw command-specific formats into public contracts. - Record the command, tool version, artifact SHA-256, exit status, limitations, and source locations. - Bound output and support cancellation and timeouts. - Detect unavailable tools as typed capability errors. - Keep command execution read-only. ## Acceptance criteria - inspect_macho returns slices, load commands, imports, exports, linked frameworks, UUID/build metadata, segments, sections, and permissions when supported. - CLI and MCP use identical schemas. - Fixture tests cover Mach-O and universal binaries plus unavailable or malformed-tool output. - Results can participate in evidence bundles and provider comparison.

bsakaguchi

2026-10-15 18:20:04 +00:00

closed this issue
added the
P1: high

area: domain

enhancement
labels

bsakaguchi commented

2026-10-15 18:20:06 +00:00

Author

Owner

@morluto commented on GitHub (Jul 17, 2026):

Completed on current . and provide the native macOS inspection boundary, including Mach-O inventory, signature/plist inspection, architecture listing, and demangling, with CLI/MCP wiring and native-provider tests. Additional format-specific depth can remain in focused capability issues.

@morluto commented on GitHub (Jul 17, 2026): Completed on current . and provide the native macOS inspection boundary, including Mach-O inventory, signature/plist inspection, architecture listing, and demangling, with CLI/MCP wiring and native-provider tests. Additional format-specific depth can remain in focused capability issues.

bsakaguchi commented

2026-10-15 18:20:06 +00:00

Author

Owner

@morluto commented on GitHub (Jul 17, 2026):

Correction to the preceding comment: completed on current main. NativeMacOSProvider.ts and NativeMachoInspection.ts provide Mach-O inventory, signature and plist inspection, architecture listing, and demangling, with CLI/MCP wiring and native-provider tests.

@morluto commented on GitHub (Jul 17, 2026): Correction to the preceding comment: completed on current main. NativeMacOSProvider.ts and NativeMachoInspection.ts provide Mach-O inventory, signature and plist inspection, architecture listing, and demangling, with CLI/MCP wiring and native-provider tests.

bsakaguchi referenced this issue

2026-10-15 18:20:37 +00:00

[GH-ISSUE #72] Regenerate evidence and completion ledgers automatically #59

bsakaguchi referenced this issue

2026-10-15 18:20:50 +00:00

[GH-ISSUE #115] Detect stale MCP server versions after REA upgrade and report complete surface inventory #75

bsakaguchi referenced this issue

2026-10-15 18:28:29 +00:00

[GH-ISSUE #2383] [Tracker] Audit analysis and debugging coverage for the TIOBE top 100 languages (October 2026) #794

bsakaguchi referenced this issue

2026-10-16 21:12:29 +00:00

[PR #274] [MERGED] feat(mcp)!: harden contracts and Evidence references #1918