Rudy Mizrahi Celekliandmorluto
6caa38a0ca
* fix(javascript): keep mutated object initializer values unknown Signed-off-by: Rudy Celekli <rudy@gradiahq.com> * fix(javascript): retain copied slots while following nested mutations Signed-off-by: Rudy Celekli <rudy@gradiahq.com> * fix(javascript): retain facts for unchanged object properties Signed-off-by: Rudy Celekli <rudy@gradiahq.com> * docs(javascript): state untracked mutation channels Signed-off-by: Rudy Celekli <rudy@gradiahq.com> --------- Signed-off-by: Rudy Celekli <rudy@gradiahq.com> Co-authored-by: morluto <76467478+morluto@users.noreply.github.com>
11 KiB
Cross-layer JavaScript application workflows
REA derives a complete reachable feature trace from one authenticated JavaScript
Application Graph and compares two authenticated graph versions. The MCP tools
are trace_application_feature, trace_javascript_semantics,
compare_application_versions, compare_source_to_bundle, and
compare_javascript_export_shapes; their CLI equivalents use the same names
with hyphens.
These workflows consume Evidence produced by
analyze_javascript_application or reconcile_javascript_runtime. They do not
read an artifact, execute application code, attach to a process, or open a
native-analysis provider. Static artifact observations, passive runtime
observations, relationship inferences, and unknown or unavailable facts retain
their original graph authority.
analyze_javascript_application Evidence retains the structural JavaScript
Application Graph and a separate semantic relation graph bound to the same root
artifact digest and structural graph ID. Semantic tracing requires the semantic
relation graph and reports when it is unavailable rather than treating missing
data as an empty graph.
Feature tracing
Select one literal seed kind: node ID, route, string, API, IPC channel, module, or native export. Matching is exact or literal substring matching; regular expressions and executable predicates are not accepted. The trace includes all matching seeds and the complete graph reachable in the selected direction.
The result contains the matching basis, complete reachable subgraph, terminal
paths, authority summaries, and native handoffs. A handoff binds
the exact native artifact digest and requested exports from the application
graph. Existing Hopper or Ghidra Evidence is linked only when its subject digest
matches exactly. Otherwise the result recommends provider-neutral follow-up
tools and reports requires-provider-analysis; it never starts or switches a
provider implicitly.
Semantic relation tracing
trace_javascript_semantics queries the authenticated companion graph without
rereading mutable files. A seed may identify a semantic or application node,
literal, function fingerprint, property, endpoint, event, or boundary field.
The query declares backward pro