Standalone helper scripts and notes live here until they deserve to become SwiftPM targets under Sources/.
Prefer small repeatable tools that capture evidence into research/<Target>/ and keep polished docs under docs/.
mediaremote-inventory.zsh: captures liveMediaRemote.frameworkdyld-cache evidence, selected/beta SDK stub symbols, support-binary linkage and entitlements, framework resources, and symbol diffs intoresearch/MediaRemote/captures/<timestamp>/.mediaremote-interface-capture.zsh: buildsmr-interface-probeand captures selected Objective-C runtime class metadata intoresearch/MediaRemote/experiments/interfaces/<timestamp>/.mediaremote-message-surfaces.zsh: extracts XPC keys, request/response log templates, daemon request handlers, protobuf/message symbols, and transport helpers from an inventory capture intoresearch/MediaRemote/experiments/messages/<timestamp>/.mediaremote-message-id-callsites.zsh: disassemblesMediaRemote.frameworkthroughdyld_infoor reuses a disassembly file, then extracts immediate message type values passed toMRXPCConnectionsend helpers andMRCreateXPCMessage.mediaremote-xpc-trace-observe.zsh: buildsMRXPCTraceInterpose, injects it into a probe withDYLD_INSERT_LIBRARIES, and runs the command throughmediaremote-daemon-observe.zshso XPC message-ID traces and daemon logs share one capture window.