N0zoM1z0
26881da76a
feat(ghidra): enable Windows x64 read-only analysis ( #699 )
...
* feat(ghidra): enable Windows x64 read-only analysis
* test(ghidra): exercise native Windows runtime boundaries
* test(ghidra): verify current Windows inventory and isolate ACL observer
* fix(ghidra): align Windows admission and address P0 review
2026-10-06 16:53:33 +08:00
morluto and RudyCelekli
cf061159ab
fix: integrate 14 approved fix PRs (668,671,673,675,678-681,685-690) ( #705 )
...
* fix(javascript): preserve array index positions
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com >
* fix(javascript): respect object property overwrite order
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com >
* test(javascript): cover uncertain spread discriminants
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com >
* fix(javascript): keep nonfinite values outside JSON lattice
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com >
* fix(dotnet): keep non-CIL method implementations unknown
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com >
* test(package): separate CIL reconstruction from native imports
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com >
* fix(javascript): invalidate values on nontrivial binding writes
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com >
* fix(artifacts): align native DMG mount and detach lifecycle
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com >
* fix(browser): retain all literal worker import arguments
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com >
* fix(native): preserve final demangled symbol whitespace
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com >
* fix(dotnet): preserve C identifier underscores in native matching
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com >
* fix(browser): respect metadata key and overwrite semantics
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com >
* fix(javascript): keep optional parameter input unknown
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com >
* fix(dotnet): report observed method metadata changes
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com >
* docs(dotnet): synchronize generated conformance skill digest
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com >
* fix(browser): reject malformed indexed source-map offsets
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com >
* fix(native): preserve numeric-looking Mach-O identifiers
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com >
* docs: regenerate catalogs for integrated fix batch
* docs: regenerate catalogs after merging main (#702 )
---------
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com >
Co-authored-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com >
2026-10-06 16:31:00 +08:00
Kaoru0822
3460eda9ca
fix(conformance): preserve own JSON keys during comparison ( #573 )
2026-10-05 21:42:26 +08:00
morluto
b5e98915c6
fix(tools)!: simplify direct invocation and harden boundary contracts ( #555 )
...
Remove REA permission grants, scope ceilings, approval confirmations, and inert settings. Preserve selected local evidence, accept caller-chosen commands and paths, and report actual runtime failures.
Harden provider results, schema serialization, snapshot evidence binding, archive paths, source maps, native screenshots, managed EH parsing, and cancellation cleanup. Regenerate tool metadata and document direct invocation.
BREAKING CHANGE: Removed permission configuration and policy commands, approval fields, filesystem scope inputs, and fixed confirmation options. Process capture inherits the host environment and accepts command names; callers must refresh tool schemas and migrate removed fields.
2026-10-05 20:16:44 +08:00
morluto
4fbc501121
feat(native): add inspection primitives, dispatch traces and approved UI observation ( #500 )
...
* fix(hopper): normalize string-backed addresses and update verification
* feat(native): add inspection primitives, dispatch traces and approved UI observation
* test: prioritize real artifact E2E and captured golden regressions
* fix(process): queue observed output before reactive rendering actions
* test: prune redundant cases and strengthen boundary assertions
* fix(cli): route native value tracing through shared workflows
* test: replace synthetic success with real workflows and captured data
* fix(catalog): separate portable metadata from native host availability
2026-10-04 16:02:36 +08:00
morluto
b5c0b5b53e
test(hopper): remove dossier identity assertion
2026-09-29 18:42:52 +08:00
morluto
ea853cebde
test(conformance): remove fixture generator test option
2026-09-29 18:00:47 +08:00
morluto
56e2bf7696
test: remove vacuous and duplicate assertions
2026-09-29 18:00:30 +08:00
morluto
2a6eb41147
refactor(tools): return complete analysis results inline
2026-09-29 14:53:50 +08:00
morluto
7acac615ca
refactor(contracts): simplify workflows and drop readiness tool
2026-09-29 09:22:44 +08:00
morluto
5457f4a2bc
refactor(schema): remove data-only version markers
2026-09-29 08:45:36 +08:00
morluto
b3529aa327
test: replace brittle workflow and readme checks
2026-09-29 08:44:41 +08:00
morluto
a2a3243ea8
refactor: return complete analysis results inline
2026-09-29 08:07:24 +08:00
morluto
0d96275b68
refactor: return complete tool results inline
2026-09-29 07:08:46 +08:00
morluto
2160d4fae5
fix: consolidate boundary ownership and cleanup failure paths ( #477 )
2026-09-08 10:59:13 +08:00
morluto
d4dc940bd8
refactor(test): keep coverage at behavioral boundaries ( #474 )
...
* refactor(test): keep coverage at behavioral boundaries
* fix(ci): restore package workflow temp-root classification
2026-08-11 18:34:32 +08:00
morluto
d65730c4c2
refactor(domain): encode comparison and lifecycle states exactly ( #473 )
...
* refactor(domain): encode comparison states exactly
* refactor(domain): make evidence lifecycles explicit
* refactor(browser): parse capture states once
* test: prefer behavior over implementation seams
* chore: refresh schema-derived metadata
* test(process): preserve lifecycle cleanup coverage
* test(hopper): bind rename cache coverage to dispatch
2026-08-11 18:04:36 +08:00
morluto and Devin
e91c8c39c2
refactor(test): colocate pure-domain tests and reduce test debt ( #471 )
...
* refactor(test): colocate pure-domain tests and reduce test debt
Move focused immutable domain/contracts/adapter tests from
tests/composition/** beside their production owners under src/** as
colocated *.test.ts/*.fixture.ts, and relocate persistence-shaped
composition tests under tests/boundary/filesystem/**. Update import
paths, the Vitest project topology (shared worker context for pure
domain/contracts and recording-port service projects), the test
migration ledger, testing docs, and AGENTS.md to match.
Generated with [Devin](https://devin.ai )
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
* docs: remove test migration ledger
The cutover is complete and the ledger is no longer referenced anywhere
in source, scripts, or the docs gate. Drop the standalone artifact.
Generated with [Devin](https://devin.ai )
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
* docs: clean up stale migration artifacts
Remove empty directories left by the test migration and replace the
"final cutover" language in docs/testing.md with standing PR guidance
that no longer references the completed migration.
Generated with [Devin](https://devin.ai )
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
* fix: repair CI failures from schema, knip, and stale generated artifacts
Three root causes fixed:
1. catalog-schemas.mjs: valuesAt only traversed anyOf from Zod's
toJSONSchema, not oneOf. The webScreenshotDiffSchema change to a
discriminated union produces oneOf, so the product catalog generator
could not derive the web_screenshot_diff schema version. Add oneOf
traversal.
2. conformancePackage.ts: the test rewrite removed the only imports of
ScenarioManifest, ReplayPlan, ShimPlan, and ExpectedEvidence, making
them unused exports that knip flags. Remove the dead type aliases.
3. Regenerate stale artifacts (product catalog, MCP tool catalog, skill
metadata, conformance manifest) that drifted from the source changes.
Generated with [Devin](https://devin.ai )
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
---------
Co-authored-by: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-08-10 14:57:44 +08:00
morluto
b8a9da0c0f
refactor(mcp): make analysis states unrepresentable ( #468 )
...
* refactor(config): parse capability settings into exact states
* refactor(runtime): encode replay and process outcomes exactly
* refactor: make analysis states unrepresentable
* refactor(mcp): register canonical schemas with SDK
* fix: preserve capability and catalog invariants
* fix(build): remove stale compiled modules
* fix(replay): update real verifier policy dependency
* fix(package): verify the complete MCP catalog
* fix(test): supply complete replay reload policy
* refactor(contracts): centralize output schema lookup
* refactor(mcp): delegate protocol boundaries to SDK
* fix(browser): approve real source capture
* fix(mcp): preserve catalog guidance
2026-08-10 02:28:11 +08:00
morluto
8f229ede70
feat(electron): add autonomous Electron runtime analysis ( #464 )
...
* feat: add autonomous Electron runtime analysis
* feat(electron): add lifecycle and boundary telemetry
* feat(electron): capture runtime boundary evidence
* fix(electron): package boundary hook helper
* feat(electron): report active capture coverage
* fix(electron): account for bring-your-own runtime
* feat(electron): expand agent-owned runtime scenarios
* fix(ghidra): keep fixture credentials out of argv
* perf(test): serialize local test and docs workloads
* fix(electron): harden active runtime capture
* fix(inspector): require exact runtime target authorization
* fix(docs): make managed manifest host independent
* fix(ci): make generated catalog portable
* fix: unblock autonomous command and electron flows
* fix(electron): close popup and detached helper gaps
2026-08-05 19:07:46 +08:00
morluto
513d9b1555
test: overhaul deterministic suite architecture
2026-07-29 22:00:38 +00:00