🔍 Reverse engineering with REA: read a program you did not write · วิศวกรรมย้อนกลับด้วย REA: อ่านโปรแกรมที่คุณไม่ได้เขียน · 用 REA 学逆向工程：读懂不是你写的程序

1 Install REA · ติดตั้ง REA · 安装 REA

node --version
npm install rea-agents@6.3.0
npx rea --version

what the last command printedสิ่งที่คำสั่งสุดท้ายพิมพ์ออกมา最后一条命令打印的内容

6.3.0

2 commands.py: REA's commands, sorted into families · commands.py: คำสั่งของ REA จัดเป็นกลุ่ม · commands.py：把 REA 的命令分成几族

commands.py

"""commands.py - ask REA for its list of commands, and sort them into families.

    python commands.py
"""
import subprocess
import textwrap


def main():
    # --help prints every command with one line of explanation.
    finished = subprocess.run("npx rea --help", shell=True, capture_output=True, text=True, encoding="utf-8")
    if finished.returncode != 0:
        print("REA stopped with an error. Type npx rea --help yourself to read it.")
        return

    # The list begins after the line "Commands:" and ends at the first empty line.
    commands = []
    inside = False
    for line in finished.stdout.split("\n"):
        if line.strip() == "Commands:":
            inside = True
        elif inside and line.strip() == "":
            break
        elif inside:
            commands.append(line.split()[0])

    # The first word of a command says what kind of work it does: inspect-plist,
    # inspect-macho and inspect-signature are all of the family "inspect".
    families = {}
    for name in commands:
        verb, _, rest = name.partition("-")
        families.setdefault(verb, []).append(rest or "(by itself)")

    print("commands in all", len(commands))
    print("families       ", len(families))
    print()
    for verb in sorted(families, key=lambda v: (-len(families[v]), v)):
        members = ", ".join(families[verb])
        head = verb + " (" + str(len(families[verb])) + "): "
        print(textwrap.fill(members, width=78, initial_indent=head, subsequent_indent=" " * len(head),
                            break_on_hyphens=False))


if __name__ == "__main__":
    main()

python commands.py

what it printedสิ่งที่มันพิมพ์ออกมา它打印的内容

commands in all 95
families        35

inspect (27): (by itself), analysis-view, android-class, android-method,
              android-package, artifact, asset-catalog, binary-layout,
              electron-page, evm-interface, firmware-regions, keyed-archive,
              macho, managed-artifact, managed-members,
              managed-native-boundaries, native-api, native-data-type,
              native-dispatch-metadata, native-instruction, native-load-image,
              plist, recorded-crash, signature, web-event-listeners,
              web-network-capture, web-page
trace (9): (by itself), android-references, application-feature,
           dylib-resolution, javascript-semantics, native-ui-action,
           native-values, web-module-imports, web-source-location
compare (8): (by itself), application-versions, javascript-export-shapes,
             managed-members, process-captures, source-to-bundle,
             web-captures, web-screenshots
capture (5): browser-scenario, electron-scenario, native-ui-scenario, process,
             web-screenshot
observe (5): javascript-runtime, native-calls, native-ui, web-execution,
             web-session
list (4): architectures, browser-targets, electron-targets,
          javascript-runtime-targets
analyze (3): (by itself), javascript-application, web-bundle
project (3): android-application-graph, apple-application-graph,
             managed-application-graph
evidence (2): export, import
extract (2): artifact, firmware
import (2): managed-reconstruction, reference-source
search (2): (by itself), android-classes
address (1): to-file-offset
annotate (1): native-function
build (1): reconstruction-obligation-ledger
capabilities (1): (by itself)
decode (1): interface-builder
decompile (1): (by itself)
demangle (1): swift
discover (1): webmcp-tools
doctor (1): (by itself)
evaluate (1): reconstruction-coverage
export (1): web-scripts
function (1): (by itself)
instructions (1): (by itself)
providers (1): (by itself)
read (1): bytes
reconcile (1): javascript-runtime
recover (1): javascript-sources
resolve (1): native-call-targets
setup (1): (by itself)
uninstall (1): (by itself)
update (1): (by itself)
verify (1): managed-native-boundaries
xrefs (1): (by itself)

3 ready.py: what your computer is ready for · ready.py: คอมพิวเตอร์ของคุณพร้อมสำหรับอะไร · ready.py：你的电脑已经为什么做好了准备

ready.py

"""ready.py - ask REA which analysis engines this computer has.

    python ready.py
"""
import json
import subprocess

# The engines that REA can use to read machine code. It needs one of them for
# the commands that turn a compiled program back into code. Node.js and the
# host are listed too, because every REA command needs those.
ENGINES = ["node", "host", "hopper", "ghidra", "ida-registration"]


def main():
    # doctor ends with code 1 when anything is missing. Its answer is complete all the same,
    # so this file does not stop on that code.
    finished = subprocess.run("npx rea doctor --json", shell=True, capture_output=True, text=True, encoding="utf-8")
    report = json.loads(finished.stdout)

    print("ENGINES ON THIS COMPUTER")
    for check in report["scope_checks"]:
        if check["name"] in ENGINES:
            state = "yes" if check["ok"] else "no "
            print("  " + state, check["name"].ljust(17), check.get("detail", ""))


if __name__ == "__main__":
    main()

python ready.py

what it printedสิ่งที่มันพิมพ์ออกมา它打印的内容

ENGINES ON THIS COMPUTER
  yes node              24.15.0
  yes host              win32 x64
  no  hopper            
  no  ghidra            GHIDRA_INSTALL_DIR is not set
  no  ida-registration  IDA MCP registration is not configured.

4 get_rectangle.py: download the app and its source · get_rectangle.py: ดาวน์โหลดแอปและซอร์สของมัน · get_rectangle.py：下载应用和它的源代码

get_rectangle.py

"""get_rectangle.py - download the app Rectangle and its source code, to study them.

    python3 get_rectangle.py

Rectangle is only downloaded and copied here. It is not installed and not started.
"""
import os
import subprocess

# One exact version: the app as its author ships it, and the source code it was built from.
VERSION = "2.0.3"
HOME_PAGE = "https://github.com/rxhanson/Rectangle"
APP_ADDRESS = HOME_PAGE + "/releases/download/v" + VERSION + "/Rectangle" + VERSION + ".dmg"
SOURCE_ADDRESS = HOME_PAGE + "/archive/refs/tags/v" + VERSION + ".tar.gz"


def run(command):
    # check=True stops this file at the first command that fails, and timeout=120
    # stops a command that has not finished after two minutes.
    # input=b"Y\n" answers yes if a disk asks you to agree to its licence.
    subprocess.run(command, check=True, capture_output=True, timeout=120, input=b"Y\n")


def count_files(folder):
    total = 0
    for path, folders, files in os.walk(folder):
        total = total + len(files)
    return total


def main():
    if not os.path.exists("Rectangle.app"):
        run(["curl", "-sL", "-o", "Rectangle.dmg", APP_ADDRESS])
        # A .dmg file is a disk in a file. hdiutil opens it as a folder named "disk".
        disk = os.path.abspath("disk")
        run(["hdiutil", "attach", "Rectangle.dmg", "-nobrowse", "-readonly", "-mountpoint", disk])
        run(["cp", "-R", "disk/Rectangle.app", "Rectangle.app"])
        run(["hdiutil", "detach", disk, "-force"])

    if not os.path.exists("rectangle_src"):
        run(["curl", "-sL", "-o", "rectangle_src.tar.gz", SOURCE_ADDRESS])
        os.mkdir("rectangle_src")
        # --strip-components 1 leaves out the one folder that wraps everything.
        run(["tar", "-xzf", "rectangle_src.tar.gz", "-C", "rectangle_src", "--strip-components", "1"])

    print("Rectangle.app  ", count_files("Rectangle.app"), "files")
    print("rectangle_src  ", count_files("rectangle_src"), "files")
    with open("rectangle_src/LICENSE", encoding="utf-8") as licence:
        print("licence        ", licence.readline().strip())


if __name__ == "__main__":
    main()

python3 get_rectangle.py

what it printedสิ่งที่มันพิมพ์ออกมา它打印的内容

Rectangle.app   149 files
rectangle_src   454 files
licence         MIT License

5 app_card.py: the card the app carries · app_card.py: บัตรที่แอปพกติดตัว · app_card.py：应用随身带的卡片

app_card.py

"""app_card.py - ask REA for the card that a Mac app carries about itself.

    python3 app_card.py
"""
import json
import subprocess

APP = "Rectangle.app"


def main():
    command = "npx rea inspect-plist " + APP + " --json"
    finished = subprocess.run(command, shell=True, capture_output=True, text=True)
    if finished.returncode != 0:
        print(finished.stdout)
        return
    card = json.loads(finished.stdout)["normalized_result"]["value"]

    print("name            ", card["CFBundleName"])
    print("identifier      ", card["CFBundleIdentifier"])
    print("version         ", card["CFBundleShortVersionString"])
    print("needs macOS     ", card["LSMinimumSystemVersion"], "or newer")
    print("program file    ", card["CFBundleExecutable"])
    print("first class     ", card["NSPrincipalClass"])
    print("first design    ", card["NSMainStoryboardFile"])
    # .get gives None when the card has no such entry.
    print("no Dock icon    ", card.get("LSUIElement"))
    print("asks for updates", card.get("SUFeedURL"))
    print("entries in all  ", len(card))

    # The kinds of address that macOS hands to this app.
    print("ADDRESSES IT OPENS")
    for kind in card.get("CFBundleURLTypes", []):
        print("  " + ", ".join(kind["CFBundleURLSchemes"]))


if __name__ == "__main__":
    main()

python3 app_card.py

what it printedสิ่งที่มันพิมพ์ออกมา它打印的内容

name             Rectangle
identifier       com.knollsoft.Rectangle
version          2.0.3
needs macOS      14.0 or newer
program file     Rectangle
first class      NSApplication
first design     Main
no Dock icon     True
asks for updates https://rectangleapp.com/downloads/updates.xml
entries in all   30
ADDRESSES IT OPENS
  rectangle

6 app_signature.py: who signed it · app_signature.py: ใครเซ็นรับรองมัน · app_signature.py：谁给它签了名

app_signature.py

"""app_signature.py - ask REA who signed a Mac app, and what the app is allowed to do.

    python3 app_signature.py
"""
import json
import subprocess

APP = "Rectangle.app"


def main():
    command = "npx rea inspect-signature " + APP + " --json"
    finished = subprocess.run(command, shell=True, capture_output=True, text=True)
    if finished.returncode != 0:
        print(finished.stdout)
        return
    signature = json.loads(finished.stdout)["normalized_result"]

    print("signed          ", signature["signed"])
    print("identifier      ", signature["identifier"])
    print("team            ", signature["team_identifier"])
    print("format          ", signature["format"])
    print("hardened runtime", signature["hardened_runtime"])
    print("SIGNED BY, FROM THE SIGNER UP TO THE ROOT")
    for authority in signature["authorities"]:
        print("  " + authority)

    # An entitlement is one permission that the signer gave to this program.
    entitlements = signature["entitlements"]
    print("ENTITLEMENTS:", len(entitlements))
    for name in sorted(entitlements):
        print("  " + name, "=", entitlements[name])


if __name__ == "__main__":
    main()

python3 app_signature.py

what it printedสิ่งที่มันพิมพ์ออกมา它打印的内容

signed           True
identifier       com.knollsoft.Rectangle
team             XSYZ3E4B7D
format           Mach-O universal (x86_64 arm64)
hardened runtime True
SIGNED BY, FROM THE SIGNER UP TO THE ROOT
  Developer ID Application: Ryan Hanson (XSYZ3E4B7D)
  Developer ID Certification Authority
  Apple Root CA
ENTITLEMENTS: 0

7 app_libraries.py: what it is built on · app_libraries.py: มันสร้างบนอะไร · app_libraries.py：它建立在什么之上

app_libraries.py

"""app_libraries.py - ask REA which libraries a Mac app loads, and how much it takes from each.

    python3 app_libraries.py
"""
import json
import subprocess

PROGRAM = "Rectangle.app/Contents/MacOS/Rectangle"


def main():
    command = "npx rea inspect-macho " + PROGRAM + " --json"
    finished = subprocess.run(command, shell=True, capture_output=True, text=True)
    if finished.returncode != 0:
        print(finished.stdout)
        return
    result = json.loads(finished.stdout)["normalized_result"]

    print("BUILT FOR")
    for processor in result["architectures"]["items"]:
        megabytes = processor["size"] / 1000000
        print("  " + processor["name"].ljust(8), format(megabytes, ".1f"), "MB")

    from_macos = 0
    private = 0
    own = []
    for library in result["dependencies"]["items"]:
        # One entry is not a library: the small program that loads all the others.
        if library["kind"] == "LC_LOAD_DYLINKER":
            continue
        if "/PrivateFrameworks/" in library["path"]:
            private = private + 1
        elif library["path"].startswith("/System/") or library["path"].startswith("/usr/lib/"):
            from_macos = from_macos + 1
        else:
            own.append(library["path"])
    print("LIBRARIES IT LOADS:", from_macos + private + len(own))
    print("  from macOS              ", from_macos)
    print("  Apple's private ones    ", private)
    print("  brought along in the app", len(own))
    for path in own:
        print("    " + path)

    # Count the imported functions of each library in a dictionary: library -> how many.
    counts = {}
    for function in result["imports"]["items"]:
        source = function["source"]
        counts[source] = counts.get(source, 0) + 1
    print("FUNCTIONS IT TAKES FROM LIBRARIES:", len(result["imports"]["items"]))
    print("  THE 10 LIBRARIES IT TAKES MOST FROM")
    most = sorted(counts, key=counts.get, reverse=True)[:10]
    for source in most:
        print("  " + str(counts[source]).rjust(5), source)


if __name__ == "__main__":
    main()

python3 app_libraries.py

what it printedสิ่งที่มันพิมพ์ออกมา它打印的内容

BUILT FOR
  x86_64   2.0 MB
  arm64    1.7 MB
LIBRARIES IT LOADS: 33
  from macOS               32
  Apple's private ones     0
  brought along in the app 1
    @rpath/Sparkle.framework/Versions/B/Sparkle
FUNCTIONS IT TAKES FROM LIBRARIES: 1206
  THE 10 LIBRARIES IT TAKES MOST FROM
    344 SwiftUI
    342 libswiftCore
    138 Foundation
    119 AppKit
     39 CoreGraphics
     37 libSystem
     33 libswiftDispatch
     30 CoreFoundation
     26 libobjc
     19 ApplicationServices

8 app_windows.py: from a menu item to its code · app_windows.py: จากรายการเมนูไปถึงโค้ดของมัน · app_windows.py：从菜单项到它的代码

app_windows.py

"""app_windows.py - ask REA for the designs of a Mac app's windows and menus, and look inside one.

    python3 app_windows.py MainMenu
"""
import json
import subprocess
import sys

APP = "Rectangle.app"
# The places in a design where a text for the screen is kept.
TEXT_KEYS = ["NSDev", "NSContents", "NSWindowTitle", "NSTitle"]


def main():
    wanted = sys.argv[1]
    command = "npx rea decode-interface-builder " + APP + " --json"
    finished = subprocess.run(command, shell=True, capture_output=True, text=True)
    if finished.returncode != 0:
        print(finished.stdout)
        return
    result = json.loads(finished.stdout)["normalized_result"]

    designs = result["documents"]
    print("DESIGN FILES:", len(designs))
    for design in designs:
        print("  " + design["relative_path"])
    print("answer cut short    ", result["graph"]["truncated"])
    # REA lists what it left out, and why, among the limits of its answer.
    left_out = 0
    for limit in result["limitations"]:
        if "omitted because max documents" in limit:
            left_out = left_out + 1
    print("files left out      ", left_out)
    chosen = None
    for design in designs:
        if wanted in design["relative_path"]:
            chosen = design
    if chosen is None:
        print("No design file has", wanted, "in its name.")
        return
    path = chosen["relative_path"]
    print("LOOKING INSIDE      ", path)
    print("objects in it       ", chosen["object_count"])

    # Every node of this design has an id that begins with the path of the design.
    parts = []
    for node in result["graph"]["nodes"]:
        if node["id"].startswith("ib:" + path + ":"):
            parts.append(node)

    texts = []
    names = {}
    for node in parts:
        attributes = node["attributes"]
        if "objectID" in attributes:
            names[attributes["objectID"]] = node["name"]
        for key in TEXT_KEYS:
            text = attributes.get("nibValues", {}).get(key)
            if isinstance(text, str) and text != "" and text not in texts:
                texts.append(text)

    print("TEXTS ON THE SCREEN:", len(texts))
    for text in texts[:12]:
        print("  " + json.dumps(text))

    # An action says: when this control is used, call the method with this name.
    print("ACTIONS")
    for node in parts:
        if node["kind"] != "action":
            continue
        attributes = node["attributes"]
        control = names.get(attributes["source_id"], "?")
        # Some actions name no receiver in the design: the app finds one while it runs.
        receiver = names.get(attributes["destination_id"], "(no fixed receiver)")
        print("  " + control, "calls", attributes["selector"], "of", receiver)


if __name__ == "__main__":
    main()

python3 app_windows.py MainMenu

what it printedสิ่งที่มันพิมพ์ออกมา它打印的内容

DESIGN FILES: 7
  Contents/Frameworks/Sparkle.framework/Versions/B/Resources/SUUpdateAlert.nib
  Contents/Frameworks/Sparkle.framework/Versions/B/Resources/SUUpdatePermissionPrompt.nib
  Contents/Resources/MessageView.nib
  Contents/Resources/Base.lproj/Main.storyboardc/MainMenu.nib
  Contents/Resources/LogViewer.storyboardc/LogViewController.nib
  Contents/Resources/LogViewer.storyboardc/LogWindowController.nib
  Contents/Resources/LogViewer.storyboardc/PiU-lX-bsA-view-ptq-Cu-Bka.nib
answer cut short     False
files left out       0
LOOKING INSIDE       Contents/Resources/Base.lproj/Main.storyboardc/MainMenu.nib
objects in it        128
TEXTS ON THE SCREEN: 43
  "Ignore frontmost.app"
  "Settings\u2026"
  "About"
  "View Logging\u2026"
  "Check for Updates\u2026"
  "Quit Rectangle"
  "Not Authorized to Control Your Computer"
  "Authorize\u2026"
  "Main Menu"
  "Rectangle"
  "About Rectangle"
  "Preferences\u2026"
ACTIONS
  NSMenuItem calls ignoreFrontMostApp: of _TtC9Rectangle11AppDelegate
  NSMenuItem calls openPreferences: of _TtC9Rectangle11AppDelegate
  NSMenuItem calls showAbout: of _TtC9Rectangle11AppDelegate
  NSMenuItem calls viewLogging: of _TtC9Rectangle11AppDelegate
  NSMenuItem calls checkForUpdates: of _TtC9Rectangle11AppDelegate
  NSMenuItem calls terminate: of NSApplication
  NSMenuItem calls authorizeAccessibility: of _TtC9Rectangle11AppDelegate
  NSMenuItem calls orderFrontStandardAboutPanel: of NSApplication
  NSMenuItem calls terminate: of NSApplication
  NSMenuItem calls orderFrontStandardAboutPanel: of (no fixed receiver)
  NSMenuItem calls hide: of (no fixed receiver)
  NSMenuItem calls hideOtherApplications: of (no fixed receiver)
  NSMenuItem calls unhideAllApplications: of (no fixed receiver)
  NSMenuItem calls terminate: of (no fixed receiver)
  NSMenuItem calls newDocument: of (no fixed receiver)
  NSMenuItem calls openDocument: of (no fixed receiver)
  NSMenuItem calls performClose: of (no fixed receiver)
  NSMenuItem calls saveDocument: of (no fixed receiver)
  NSMenuItem calls undo: of (no fixed receiver)
  NSMenuItem calls redo: of (no fixed receiver)
  NSMenuItem calls cut: of (no fixed receiver)
  NSMenuItem calls copy: of (no fixed receiver)
  NSMenuItem calls paste: of (no fixed receiver)
  NSMenuItem calls pasteAsPlainText: of (no fixed receiver)
  NSMenuItem calls delete: of (no fixed receiver)
  NSMenuItem calls selectAll: of (no fixed receiver)
  NSMenuItem calls performFindPanelAction: of (no fixed receiver)
  NSMenuItem calls performFindPanelAction: of (no fixed receiver)
  NSMenuItem calls performFindPanelAction: of (no fixed receiver)
  NSMenuItem calls performFindPanelAction: of (no fixed receiver)
  NSMenuItem calls performFindPanelAction: of (no fixed receiver)
  NSMenuItem calls centerSelectionInVisibleArea: of (no fixed receiver)
  NSMenuItem calls toggleFullScreen: of (no fixed receiver)
  NSMenuItem calls performMiniaturize: of (no fixed receiver)
  NSMenuItem calls showHelp: of (no fixed receiver)

lines.py

"""lines.py - print some lines of a file, each with its number.

    python3 lines.py rectangle_src/Rectangle/AppDelegate.swift 258 264
"""
import sys

path = sys.argv[1]
first = int(sys.argv[2])
last = int(sys.argv[3])

with open(path, encoding="utf-8") as source:
    number = 0
    for line in source:
        number = number + 1
        if first <= number <= last:
            print(str(number).rjust(4), line.rstrip())

python3 lines.py rectangle_src/Rectangle/AppDelegate.swift 258 264

what it printedสิ่งที่มันพิมพ์ออกมา它打印的内容

 258     @IBAction func openPreferences(_ sender: Any) {
 259         if settingsWindowController == nil {
 260             settingsWindowController = SettingsWindowController()
 261         }
 262         NSApp.activate(ignoringOtherApps: true)
 263         settingsWindowController?.showWindow(self)
 264     }

9 Mark REA, in two ways · ตรวจ REA ด้วยสองวิธี · 用两种方法给 REA 打分

source_says.py

"""source_says.py - mark REA's list of actions against the source code of Rectangle.

    python3 source_says.py

In the source code a design is a text file, and each action in it is one line
such as <action selector="terminate:" ...>. REA never saw those files: it read
the compiled designs inside Rectangle.app.
"""
import json
import os
import subprocess
import xml.etree.ElementTree as ElementTree

APP = "Rectangle.app"
SOURCE = "rectangle_src/Rectangle"


def actions_in_source():
    found = set()
    for path, folders, files in os.walk(SOURCE):
        for name in files:
            if name.endswith(".storyboard") or name.endswith(".xib"):
                design = ElementTree.parse(os.path.join(path, name))
                # iter("action") visits every <action> in the file, however deep it is.
                for action in design.iter("action"):
                    found.add(action.get("selector"))
    return found


def actions_from_rea():
    command = "npx rea decode-interface-builder " + APP + " --json"
    finished = subprocess.run(command, shell=True, capture_output=True, text=True)
    result = json.loads(finished.stdout)["normalized_result"]
    found = set()
    for node in result["graph"]["nodes"]:
        # Rectangle brings a library of its own with its own designs. Leave those out.
        if node["kind"] == "action" and "/Frameworks/" not in node["id"]:
            found.add(node["attributes"]["selector"])
    return found, result["graph"]["truncated"]


def main():
    truth = actions_in_source()
    found, cut_short = actions_from_rea()
    print("actions in the source code ", len(truth))
    print("REA found                  ", len(found & truth), "of", len(truth))
    print("in the source, not found   ", sorted(truth - found))
    print("found, not in the source   ", sorted(found - truth))
    print("REA's answer cut short     ", cut_short)


if __name__ == "__main__":
    main()

python3 source_says.py

what it printedสิ่งที่มันพิมพ์ออกมา它打印的内容

actions in the source code  29
REA found                   29 of 29
in the source, not found    []
found, not in the source    []
REA's answer cut short      False

python3 lines.py rectangle_src/Rectangle/Base.lproj/Main.storyboard 238 242

what it printedสิ่งที่มันพิมพ์ออกมา它打印的内容

 238                         <menuItem title="Settings…" id="YRC-4a-xGg">
 239                             <modifierMask key="keyEquivalentModifierMask"/>
 240                             <connections>
 241                                 <action selector="openPreferences:" target="Voe-Tx-rLC" id="EgB-O8-H7c"/>
 242                             </connections>

apple_says.py

"""apple_says.py - ask Apple's own tools the questions that REA answered, to mark REA.

    python3 apple_says.py
"""
import os
import plistlib
import subprocess

APP = "Rectangle.app"
PROGRAM = APP + "/Contents/MacOS/Rectangle"


def printed_by(command):
    finished = subprocess.run(command, capture_output=True)
    return finished.stdout


def main():
    # 1. The card. plistlib comes with Python and reads this kind of file.
    with open(APP + "/Contents/Info.plist", "rb") as source:
        card = plistlib.load(source)
    print("identifier          ", card["CFBundleIdentifier"])
    print("version             ", card["CFBundleShortVersionString"])
    print("entries on the card ", len(card))

    # 2. The processors. lipo is Apple's tool for programs built for more than one.
    processors = printed_by(["lipo", "-archs", PROGRAM]).decode().strip()
    print("built for           ", processors)

    # 3. The libraries of the first processor's copy. otool -L prints the program's
    # name, then one library on each line.
    first = processors.split()[0]
    answer = printed_by(["otool", "-arch", first, "-L", PROGRAM])
    lines = answer.decode().strip().split("\n")
    print("libraries it loads  ", len(lines) - 1)

    # 4. The entitlements. codesign prints them as a file of the same kind as the card.
    answer = printed_by(["codesign", "-d", "--entitlements", "-", "--xml", APP])
    if answer == b"":
        print("entitlements         0")
    else:
        print("entitlements        ", len(plistlib.loads(answer)))

    # 5. The designs: count the files whose names end in .nib.
    designs = 0
    for path, folders, files in os.walk(APP):
        for name in files:
            if name.endswith(".nib"):
                designs = designs + 1
    print("design files        ", designs)


if __name__ == "__main__":
    main()

python3 apple_says.py

what it printedสิ่งที่มันพิมพ์ออกมา它打印的内容

identifier           com.knollsoft.Rectangle
version              2.0.3
entries on the card  30
built for            x86_64 arm64
libraries it loads   33
entitlements         0
design files         7

10 agent_setup.py: connect REA to your agent · agent_setup.py: เชื่อม REA เข้ากับเอเจนต์ของคุณ · agent_setup.py：把 REA 接到你的智能体上

agent_setup.py

"""agent_setup.py - connect REA to a coding agent, or first see what that would change.

    python agent_setup.py                    the agents REA knows, and which ones it finds here
    python agent_setup.py codex              what setup would change for one agent; changes nothing
    python agent_setup.py claude_code --yes  make the changes
    python agent_setup.py opencode --yes --ollama http://your-spark.local:11434 --model qwen2.5:14b
                                             first point OpenCode at an Ollama server, then connect REA
"""
import json
import os
import pathlib
import subprocess
import sys

HOME = os.path.expanduser("~")

# OpenCode reads this file on every computer: its global settings, as JSON.
OPENCODE_CONFIG = pathlib.Path(HOME) / ".config" / "opencode" / "opencode.json"


def short(text):
    # The report names files in your home folder. Written as ~, the line is
    # true on any computer, and it says nothing about this one.
    return text.replace(HOME, "~").replace(HOME.replace("\\", "\\\\"), "~")


def ask_setup(*words):
    command = "npx rea setup --format json " + " ".join(words)
    finished = subprocess.run(command, shell=True, capture_output=True, text=True, encoding="utf-8")
    return json.loads(finished.stdout)


def point_opencode_at_ollama(url, model):
    """Give OpenCode a provider named "ollama": an Ollama server, spoken to the way OpenAI's
    API is spoken to, and one model on it. The rest of the file is kept as it was."""
    settings = {}
    if OPENCODE_CONFIG.exists():
        settings = json.loads(OPENCODE_CONFIG.read_text(encoding="utf-8"))
    settings.setdefault("$schema", "https://opencode.ai/config.json")
    settings.setdefault("provider", {})["ollama"] = {
        "npm": "@ai-sdk/openai-compatible",
        "name": "Ollama (local)",
        "options": {"baseURL": url.rstrip("/") + "/v1"},
        "models": {model: {"name": model}},
    }
    settings["model"] = "ollama/" + model
    OPENCODE_CONFIG.parent.mkdir(parents=True, exist_ok=True)
    OPENCODE_CONFIG.write_text(json.dumps(settings, indent=2) + "\n", encoding="utf-8")
    print("wrote  ", short(str(OPENCODE_CONFIG)))
    print("   provider ollama at", url, "| model", model)


def main():
    words = sys.argv[1:]
    agent, ollama, model = None, None, "qwen2.5:14b"
    while words:
        word = words.pop(0)
        if word == "--ollama":
            ollama = words.pop(0)
        elif word == "--model":
            model = words.pop(0)
        elif not word.startswith("--") and agent is None:
            agent = word

    if agent is None:
        # --dry-run makes the plan for every agent REA finds, and changes nothing.
        report = ask_setup("--dry-run")
        print("agent               name for --client   found here   set up")
        for state in report["clientStates"]:
            found = "yes" if state["detected"] else "no"
            done = "yes" if state["configured"] else "no"
            print(f"{state['client']['displayName']:<19} {state['client']['name']:<19} {found:<12} {done}")
        return

    if agent == "opencode" and ollama and "--yes" in sys.argv:
        point_opencode_at_ollama(ollama, model)
        print()

    # Without --yes, REA only says what it would do.
    report = ask_setup("--client", agent, "--yes" if "--yes" in sys.argv else "--dry-run")
    print("agent  ", agent)
    print("status ", report["status"])
    if not report["plannedActions"]:
        print("nothing to do: this agent is set up already")
    for action in report["plannedActions"]:
        print()
        print(action["operation"], action["label"])
        print("   file ", short(action["target"]))
        print("   what ", short(action["detail"]))
    if report["appliedActions"]:
        print()
        print("done   ", ", ".join(report["appliedActions"]))
        for name, state in report["clients"].items():
            print("backup ", short(state.get("backupPath") or "none"))


if __name__ == "__main__":
    main()

python3 agent_setup.py

what it printed, on GitHub's Macสิ่งที่มันพิมพ์ออกมา บน Mac ของ GitHub它在 GitHub 的 Mac 上打印的内容

agent               name for --client   found here   set up
Claude Code         claude_code         no           no
Claude Desktop      claude_desktop      no           no
Codex               codex               yes          no
Cursor              cursor              no           no
Gemini CLI          gemini_cli          no           no
Windsurf            windsurf            no           no
Devin               devin               no           no
OpenCode            opencode            yes          no
Antigravity         antigravity         no           no
GitHub Copilot CLI  copilot_cli         no           no
Command Code        commandcode         no           no
VS Code             vscode              no           no
Grok Build          grok_build          no           no
OMP                 omp                 no           no
Grok Bot            grok_bot            no           no

brew install anomalyco/tap/opencode
python3 agent_setup.py opencode --yes --ollama http://your-spark.local:11434 --model qwen2.5:14b

what it printed, on GitHub's Macสิ่งที่มันพิมพ์ออกมา บน Mac ของ GitHub它在 GitHub 的 Mac 上打印的内容

wrote   ~/.config/opencode/opencode.json
   provider ollama at http://your-spark.local:11434 | model qwen2.5:14b

agent   opencode
status  ready

update OpenCode
   file  ~/.config/opencode/opencode.json
   what  Add the REA MCP registration for OpenCode; preserve unrelated configuration. Command: "npx" "-y" "rea-agents@6.3.0" "mcp". No additional environment variables.

done    configured_opencode
backup  ~/.config/opencode/opencode.json.rea.backup

brew install --cask codex
python3 agent_setup.py codex --yes

what it printed, on GitHub's Macสิ่งที่มันพิมพ์ออกมา บน Mac ของ GitHub它在 GitHub 的 Mac 上打印的内容

agent   codex
status  ready

create Codex
   file  ~/.codex/config.toml
   what  Add the REA MCP registration for Codex; preserve unrelated configuration. Command: "npx" "-y" "rea-agents@6.3.0" "mcp". No additional environment variables.

install REA reverse-engineering skill
   file  ~/.agents/skills/reverse-engineer-anything
   what  Install or update the bundled REA reverse-engineering skill and on-demand references.

done    configured_codex, installed_skill
backup  none

python agent_setup.py claude_code --yes

what it printed, on the Windows laptopสิ่งที่มันพิมพ์ออกมา บนแล็ปท็อป Windows它在 Windows 笔记本上打印的内容

agent   claude_code
status  ready

update Claude Code
   file  ~\.claude.json
   what  Add the REA MCP registration for Claude Code; preserve unrelated configuration. Command: "C:\\Program Files\\nodejs\\node.exe" "C:\\relab\\node_modules\\rea-agents\\scripts\\rea.mjs" "mcp". No additional environment variables.

install REA skill for Claude Code
   file  ~\.claude\skills\reverse-engineer-anything
   what  Install or update the REA skill in Claude Code's personal skill directory.

done    configured_claude_code, installed_skill
backup  ~\.claude.json.rea.backup