Skip to content

fix(cli): route JavaScript applications from analyze #402

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
N0zoM1z0 merged 1 commit into from
Jul 21, 2026
Merged

fix(cli): route JavaScript applications from analyze #402

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 8 additions & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -262,7 +262,7 @@ Uninstall preserves Hopper, Node.js, evidence, captures, external evidence roots
| Inspect or decompile one part of an app from the Terminal | `rea analyze` or `rea decompile` |
| Validate, canonicalize, or compare Evidence v2 bundles | `rea evidence-import`, `rea evidence-export`, or `rea compare` |
| Run or resume a persistent two-version artifact analysis | `rea investigate-versions` |
| Map a local JavaScript/Electron application without executing it | `rea analyze-javascript-application` |
| Map a local JavaScript/Electron application without executing it | `rea analyze PATH --approved` or `rea analyze-javascript-application` |
| Reuse immutable analysis results without relaunching a provider | Pass `--snapshot /approved/path/analysis.json` to a deep-analysis command |
| Import source as historical reference | `rea import-reference-source` |
| Capture or compare controlled process behavior | `rea capture-process` or `rea compare-process-captures` |
Expand All @@ -276,9 +276,16 @@ rea evidence-import /absolute/path/to/evidence/bundle.json
rea evidence-export /absolute/path/to/evidence/bundle.json /absolute/path/to/evidence/canonical.json
rea compare /absolute/path/to/evidence/left.json /absolute/path/to/evidence/right.json
rea investigate-versions /absolute/path/to/releases/v1 /absolute/path/to/releases/v2 /absolute/path/to/evidence/releases.json --yes --workspace-name releases
rea analyze /absolute/path/to/releases/app.asar --approved --json
rea analyze-javascript-application /absolute/path/to/releases/app.asar --approved --json
```

For a directory or `.asar`, generic `rea analyze` automatically selects the
static JavaScript application provider when neither `--provider` nor
`--snapshot` is supplied. The dedicated command remains available for explicit
format and resource-limit controls. Both routes require `--approved` and an
administrator-approved investigation input root.

If REA is registered with an MCP client, run approved `rea setup` while the
explicit investigation-root variable is set, then restart that client. Setup
copies this non-secret policy into the managed registration; changing the shell
Expand Down
2 changes: 1 addition & 1 deletion .../api/functions/application_JavaScriptApplicationService.analyzeJavaScriptApplication.html
View file
Open in desktop

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion ...tions/application_JavaScriptApplicationService.analyzeJavaScriptApplicationValidated.html
View file
Open in desktop

Large diffs are not rendered by default.

4 changes: 2 additions & 2 deletions docs/api/functions/domain_javascriptStaticAnalysisHelpers.argumentNode.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,14 +14,14 @@ <h1>Function argumentNode</h1></div>
<section class="tsd-panel">
<ul class="tsd-signatures">
<li class="">
<div class="tsd-signature tsd-anchor-link" id="argumentnode"><span class="tsd-kind-call-signature">argumentNode</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">argument</span><span class="tsd-signature-symbol">:</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">ArgumentPlaceholder</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">JSXNamespacedName</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">SpreadElement</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">Expression</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">undefined</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Node</span><br/><span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">undefined</span><a href="#argumentnode" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
<div class="tsd-signature tsd-anchor-link" id="argumentnode"><span class="tsd-kind-call-signature">argumentNode</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">argument</span><span class="tsd-signature-symbol">:</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">Expression</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">SpreadElement</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">JSXNamespacedName</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">ArgumentPlaceholder</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">undefined</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Node</span><br/><span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">undefined</span><a href="#argumentnode" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
<div class="tsd-description">
<div class="tsd-comment tsd-typography"><p>Normalize one Babel call/new argument into the inert node shared by inspectors.</p>
</div>
<div class="tsd-parameters">
<h4 class="tsd-parameters-title">Parameters</h4>
<ul class="tsd-parameter-list">
<li><span><span class="tsd-kind-parameter">argument</span>: <br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">ArgumentPlaceholder</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">JSXNamespacedName</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">SpreadElement</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">Expression</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">undefined</span></span></li></ul></div>
<li><span><span class="tsd-kind-parameter">argument</span>: <br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">Expression</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">SpreadElement</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">JSXNamespacedName</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">ArgumentPlaceholder</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">undefined</span></span></li></ul></div>
<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">Node</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">undefined</span></h4><aside class="tsd-sources">
<ul>
<li>Defined in <a href="https://github.com/morluto/rea/blob/main/src/domain/javascriptStaticAnalysisHelpers.ts#L43">src/domain/javascriptStaticAnalysisHelpers.ts:43</a></li></ul></aside></div></li></ul></section></div>
Expand Down
4 changes: 2 additions & 2 deletions docs/api/functions/domain_javascriptStaticAnalysisHelpers.endpointArgument.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,15 +14,15 @@ <h1>Function endpointArgument</h1></div>
<section class="tsd-panel">
<ul class="tsd-signatures">
<li class="">
<div class="tsd-signature tsd-anchor-link" id="endpointargument"><span class="tsd-kind-call-signature">endpointArgument</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">name</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">args</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-keyword">readonly</span> (<br/>        <span class="tsd-signature-type">ArgumentPlaceholder</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">JSXNamespacedName</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">SpreadElement</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">Expression</span><br/>    )<span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">undefined</span><a href="#endpointargument" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
<div class="tsd-signature tsd-anchor-link" id="endpointargument"><span class="tsd-kind-call-signature">endpointArgument</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">name</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">args</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-keyword">readonly</span> (<br/>        <span class="tsd-signature-type">Expression</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">SpreadElement</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">JSXNamespacedName</span><br/>        <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">ArgumentPlaceholder</span><br/>    )<span class="tsd-signature-symbol">[]</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">undefined</span><a href="#endpointargument" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
<div class="tsd-description">
<div class="tsd-comment tsd-typography"><p>Select the literal URL argument for recognized network callees.</p>
</div>
<div class="tsd-parameters">
<h4 class="tsd-parameters-title">Parameters</h4>
<ul class="tsd-parameter-list">
<li><span><span class="tsd-kind-parameter">name</span>: <span class="tsd-signature-type">string</span></span></li>
<li><span><span class="tsd-kind-parameter">args</span>: <span class="tsd-signature-keyword">readonly</span> (<span class="tsd-signature-type">ArgumentPlaceholder</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">JSXNamespacedName</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">SpreadElement</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">Expression</span>)<span class="tsd-signature-symbol">[]</span></span></li></ul></div>
<li><span><span class="tsd-kind-parameter">args</span>: <span class="tsd-signature-keyword">readonly</span> (<span class="tsd-signature-type">Expression</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">SpreadElement</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">JSXNamespacedName</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">ArgumentPlaceholder</span>)<span class="tsd-signature-symbol">[]</span></span></li></ul></div>
<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">undefined</span></h4><aside class="tsd-sources">
<ul>
<li>Defined in <a href="https://github.com/morluto/rea/blob/main/src/domain/javascriptStaticAnalysisHelpers.ts#L279">src/domain/javascriptStaticAnalysisHelpers.ts:279</a></li></ul></aside></div></li></ul></section></div>
Expand Down
4 changes: 2 additions & 2 deletions docs/api/functions/domain_javascriptStaticAnalysisHelpers.factoryRequireName.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,14 +14,14 @@ <h1>Function factoryRequireName</h1></div>
<section class="tsd-panel">
<ul class="tsd-signatures">
<li class="">
<div class="tsd-signature tsd-anchor-link" id="factoryrequirename"><span class="tsd-kind-call-signature">factoryRequireName</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">factory</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">ArrowFunctionExpression</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">FunctionExpression</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">ObjectMethod</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><a href="#factoryrequirename" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
<div class="tsd-signature tsd-anchor-link" id="factoryrequirename"><span class="tsd-kind-call-signature">factoryRequireName</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">factory</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">FunctionExpression</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">ArrowFunctionExpression</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">ObjectMethod</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span><a href="#factoryrequirename" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
<div class="tsd-description">
<div class="tsd-comment tsd-typography"><p>Read the factory-local bundler require parameter when declared.</p>
</div>
<div class="tsd-parameters">
<h4 class="tsd-parameters-title">Parameters</h4>
<ul class="tsd-parameter-list">
<li><span><span class="tsd-kind-parameter">factory</span>: <span class="tsd-signature-type">ArrowFunctionExpression</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">FunctionExpression</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">ObjectMethod</span></span></li></ul></div>
<li><span><span class="tsd-kind-parameter">factory</span>: <span class="tsd-signature-type">FunctionExpression</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">ArrowFunctionExpression</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">ObjectMethod</span></span></li></ul></div>
<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">string</span> <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">null</span></h4><aside class="tsd-sources">
<ul>
<li>Defined in <a href="https://github.com/morluto/rea/blob/main/src/domain/javascriptStaticAnalysisHelpers.ts#L124">src/domain/javascriptStaticAnalysisHelpers.ts:124</a></li></ul></aside></div></li></ul></section></div>
Expand Down
Loading
Loading