fix(tools)!: simplify direct invocation and harden boundary contracts (#555)

Remove REA permission grants, scope ceilings, approval confirmations, and inert settings. Preserve selected local evidence, accept caller-chosen commands and paths, and report actual runtime failures.

Harden provider results, schema serialization, snapshot evidence binding, archive paths, source maps, native screenshots, managed EH parsing, and cancellation cleanup. Regenerate tool metadata and document direct invocation.

BREAKING CHANGE: Removed permission configuration and policy commands, approval fields, filesystem scope inputs, and fixed confirmation options. Process capture inherits the host environment and accepts command names; callers must refresh tool schemas and migrate removed fields.

src/application/JavaScriptRuntimeReconciliationService.ts

@@ -1,3 +1,4 @@
+import { resolve } from "node:path";
 import { z } from "zod";
 
 import {
@@ -32,19 +33,82 @@ export const reconcileJavaScriptRuntimeEvidence = (
 
 /** Reconcile input already parsed by a trusted adapter boundary. */
 export const reconcileJavaScriptRuntimeEvidenceValidated = (
-  input: z.output<typeof reconcileJavaScriptRuntimeInputSchema>,
+  parsedInput: z.output<typeof reconcileJavaScriptRuntimeInputSchema>,
 ): Result<Evidence, AnalysisError> => {
   try {
+    const input = reconcileJavaScriptRuntimeInputSchema.parse(
+      normalizeRuntimeMappingRoots(parsedInput),
+    );
     const result = reconcileJavaScriptRuntime(input);
     return ok(createJavaScriptRuntimeReconciliationEvidence(input, result));
   } catch (cause: unknown) {
+    if (cause instanceof z.ZodError)
+      return err(
+        new AnalysisInputError(
+          OPERATION,
+          undefined,
+          projectInputIssues(cause.issues, parsedInput),
+        ),
+      );
+    if (
+      cause instanceof TypeError &&
+      SAFE_RECONCILIATION_INPUT_CONSTRAINTS.has(cause.message)
+    )
+      return err(
+        new AnalysisInputError(OPERATION, undefined, [
+          { path: [], reason: "invalid_value", message: cause.message },
+        ]),
+      );
     return err(
-      cause instanceof z.ZodError || cause instanceof TypeError
-        ? new AnalysisInputError(OPERATION)
-        : new AnalysisProtocolError(
-            "JavaScript runtime reconciliation produced an invalid result",
-            { cause },
-          ),
+      new AnalysisProtocolError(
+        "JavaScript runtime reconciliation produced an invalid result",
+        { cause },
+      ),
     );
   }
 };
+
+const normalizeRuntimeMappingRoots = (
+  input: z.output<typeof reconcileJavaScriptRuntimeInputSchema>,
+): z.output<typeof reconcileJavaScriptRuntimeInputSchema> => ({
+  ...input,
+  static_layers: input.static_layers.map((layer) => ({
+    ...layer,
+    runtime_mappings: layer.runtime_mappings.map((mapping) =>
+      mapping.kind === "file-root"
+        ? {
+            ...mapping,
+            root: isPortableAbsolutePath(mapping.root)
+              ? mapping.root
+              : resolve(mapping.root),
+          }
+        : mapping,
+    ),
+  })),
+});
+
+const isPortableAbsolutePath = (path: string): boolean =>
+  path.startsWith("/") ||
+  /^[a-z]:[\\/]/iu.test(path) ||
+  /^(?:\\\\|\/\/)[^\\/]+[\\/][^\\/]+(?:[\\/]|$)/u.test(path);
+
+const SAFE_RECONCILIATION_INPUT_CONSTRAINTS = new Set([
+  "Evidence semantic identifier does not match its record",
+  "JavaScript application Evidence subject disagrees with its result",
+  "Runtime reconciliation requires inspect_web_page, inspect_electron_page, observe_javascript_runtime, or capture_electron_scenario Evidence",
+  "Runtime Evidence target or declared role disagrees with its result",
+  "Runtime Evidence contains an invalid builtin location",
+  "Runtime Evidence target disagrees with its captured result",
+  "Browser Evidence target is outside its recorded origin scope",
+  "Runtime Evidence contains source without source-capture selection",
+  "Active Electron Evidence application path disagrees with its configured root",
+  ...[
+    "inspect_web_page",
+    "inspect_electron_page",
+    "observe_javascript_runtime",
+    "capture_electron_scenario",
+  ].map(
+    (operation) =>
+      `Evidence does not match the supported ${operation} contract`,
+  ),
+]);