morluto
cb4e5cfbff
feat(analysis): make resource budgets recoverable across CLI and MCP ( #9706 )
...
* refactor(analysis): centralize resource budgets and recovery facts
* feat(analysis): expose ASAR and Ghidra runtime admission controls
* feat(artifacts): expose reader admission and preserve limited recognition
* feat(javascript): expose recoverable semantic precision budgets
* feat(web): add recoverable source-map budgets and compact retained views
* feat(web): make historical capture decoding budgets recoverable
* fix(desktop): enforce selected view policies across capture and export
* feat(runtime): make Frida and LLDB retention budgets selectable
* feat(native): expose diagnostic budgets and preserve exhaustion causes
* feat(managed): expose recoverable snapshot and representation budgets
* feat(metadata): make Go and Rust inspection budgets recoverable
* feat(wasm): expose representation and producer admissions
* feat(evm): expose per-call worker resource budgets
* feat(android): make resource and string-pool omissions recoverable
* feat(producers): expose command and recorded-capture budgets
* docs(analysis): record recovery contracts and integrated validation
* fix(docs): link calibration oracle from published verification pages
* fix(docs): restore desktop task anchors and receipt links
* test(analysis): align fixtures with selectable budget contracts
* fix(analysis): remove source-location projector dependency cycle
* test(analysis): refresh budget recovery and verifier regressions
* test(analysis): preserve format and publication recovery expectations
* test(windows): align conformance with owned runtime admission
* fix(desktop): preserve selected alias kinds in exported state
* test(analysis): align provider fixtures with recoverable budgets
* test(desktop): validate emitted alias metadata structurally
* fix(ghidra): classify bounded Windows endpoint refusals
* test(cli): assert selectable artifact admission recovery
* fix(cli): preserve capture provenance in environment builds
2026-11-10 05:11:20 -05:00
morluto and ShuaixinHuang
b46f4fcebd
fix(javascript): preserve loader authority for exact suffixes ( #9477 )
...
* fix(javascript): require exact loader suffix case
* fix(javascript): share exact loader mode across import resolution
* test(process): align symlink fixture with filesystem checkpoints
* test(javascript): normalize the module resolution oracle path separators
* test(frida): assert the CLI spawn Evidence contract
* test(mcp): use an unsupported analysis-view parent
* test(browser): separate source-location line bounds from parity
* fix(javascript): preserve uncertain loader provenance
* test(javascript): cover uncertain require resolution
* fix(javascript): retain conditional Electron evidence
* fix(javascript): preserve timed semantic provenance
* fix(javascript): retain conditional builtin effects
* test(javascript): distinguish bundled host authority
* fix(javascript): preserve nested loader invocation identity
* test(javascript): qualify Electron fixture authority
* fix(javascript): preserve loader invocation authority
* fix(javascript): respect source order for resolver escapes
* fix(javascript): check nested loader callable mutations
* fix(javascript): retain conditional constructor requests
* fix(reference): retain constructor loader relationships
* fix(reference): follow nested loader callable paths
* refactor(javascript): share callable mutation interpretation
* fix(javascript): require exact package loader suffixes
* refactor(javascript): unify conditional relation evidence
* refactor(javascript): unify conditional node evidence
* fix(javascript): retain unknown authority for mixed case sources
* fix(javascript): preserve loader uncertainty for dotfiles
* fix(reference): classify javascript suffix dotfiles
* test(reference): cover suffix dotfiles through cli
* fix(javascript): retain equivalent conditional built-in origins
* fix(javascript): preserve wrapped resolver operation
* fix(javascript): retain nested conditional built-in receivers
* test(javascript): declare CommonJS in native addon fixtures
* fix(javascript): retain wrapped resolver candidates
* style: format merged native command schema
* fix(javascript): preserve uncertain loader authority
* test(javascript): require candidate preload evidence
* test(javascript): cover reference loader member writes
---------
Co-authored-by: ShuaixinHuang <1836656514@qq.com >
2026-11-09 13:21:24 +08:00
morluto and Cursor Agent
249b90c5e3
refactor(javascript): break the semantic analysis import cycle ( #8063 )
...
* refactor(javascript): break the semantic analysis import cycle
Split shared semantic facts out of the analysis hub so projectors of
effects, evaluation, and identity no longer import one another in a cycle.
* refactor(javascript): share the import specifier reader
Read static imports in one module used by the boundary checker and both
cycle guards, so those rules cannot drift apart.
---------
Co-authored-by: Cursor Agent <cursoragent@cursor.com >
2026-10-30 06:07:49 +08:00
morluto
89006609f1
fix(javascript): separate erased types from runtime semantics
...
Record erasure during definition indexing and reuse it across runtime references, captures, effects, module links, routes, Electron and Vite. Preserve source type links and emitted decorator and computed-key effects; keep actual runtime reads and escapes conservative.
Validation: 1,647 focused tests and 9 documentation tests passed, with build, static and documentation gates. The inherited reference-lifetimes stress file exhausts a 512 MiB worker on both unmodified 18451e479
2026-10-24 18:00:43 +08:00
morluto
cc4f805541
fix(javascript): retain unresolved export iteration sources
2026-10-24 08:22:14 +08:00
morluto
da0480a665
fix(javascript): preserve capture timing and detached receiver authority
2026-10-24 03:16:29 +08:00
morluto
f1a9d85de5
fix(javascript): preserve per-field publication and provenance coverage
2026-10-24 03:10:43 +08:00
morluto
2206822109
fix(javascript): preserve copied values and export publication lifetimes
2026-10-24 03:10:43 +08:00
ShuaixinHuang
e9fc8fb30c
fix(javascript): preserve runtime path bytes and Electron ownership ( #4941 )
...
* fix(javascript): preserve literal percent runtime paths
* fix(javascript): ignore resolve prefixes before the final anchor
* fix(electron): retain application roots for loadFile declarations
* fix(electron): resolve loadFile from enclosing application package
* fix(electron): retain outer application root across package scopes
* fix(electron): derive application ownership from inventoried packages
* fix(electron): retain resolved package entrypoint ownership
* fix(electron): preserve competing application ownership
* fix(electron): retain invalid and omitted runtime ownership
* fix(electron): preserve omitted module ownership and runtime paths
* fix(electron): preserve proven roots before confining page paths
* fix(electron): retain possible owners behind missing imports
* fix(electron): distinguish absent imports and owned page candidates
* fix(electron): keep unavailable JSON out of owner gaps
* fix(electron): retain exact loader formats and default entry status
* fix(electron): retain unavailable entrypoint ownership candidates
* test(ghidra): preserve Windows Node probe prerequisites
* test(ghidra): assert cancellation during profile shutdown
* fix(electron): separate examined imports from frontend ownership
* fix(electron): retain unavailable directory entrypoint owners
* test(jeb): retain Linux ownership prerequisite in isolation
* fix(javascript): retain unchecked loader ownership and literal main paths
* fix(javascript): preserve runtime paths and call-site module aliases
* fix(javascript): bound module alias traversal and preserve projections
* fix(javascript): retain host module and nested artifact path boundaries
* fix(javascript): preserve ESM and archive module loader provenance
* test(javascript): distinguish unmapped containers from missing exports
* fix: retain default module aliases and Electron builtin imports
* fix: preserve host file URL and inward ASAR ownership
* fix: preserve CommonJS file URL classification in CI fixtures
* fix: retain bound module loaders and Windows entrypoint uncertainty
* fix: retain ASAR uncertainty and invalidate changed Electron app roots
* fix(javascript): retain ownership uncertainty across loader boundaries
* fix(javascript): preserve loader sources and bound alias queries
* fix(javascript): retain destructured loader sources
* fix(javascript): preserve loader uncertainty at resolution boundaries
* fix(javascript): preserve callable and package launch ownership
* fix(javascript): preserve captured values across member reads
* test(process): assert tagged filesystem cancellation failures
* fix(javascript): preserve inventory bases and invocation read timing
* fix(javascript): preserve ownership across indirect and unread loads
* test(javascript): order fixture directory creation on Windows
* test(javascript): share ordered filesystem fixture writer
* fix(javascript): unify loader provenance and package validation
* fix(javascript): preserve captured Node require loader values
* fix(javascript): preserve loader invocation authority
* fix(javascript): verify generic loader invocation authority
* fix(javascript): preserve conditional loader method alternatives
* fix(javascript): require proven factories for source association
* fix(javascript): honor replaced Electron app path setters
* fix(javascript): prove path and assignment source ownership
* fix(javascript): retain native delegate eligibility through shared writes
* fix(process): settle stale baseline errors after confirmed absence
* fix(javascript): preserve assignment and path boundary evidence
* fix(javascript): prove source-directory resolve anchors
* fix: preserve application path provenance and portable schemas
* fix(javascript): retain CommonJS exported setter effects
* fix: isolate Linux identity observations and retain native module exports
* fix(javascript): preserve published app and helper provenance
* fix(javascript): normalize typed stores and native path fixtures
2026-10-20 17:25:19 +08:00
rodricksz4h5
bec88b9d77
fix(javascript): retain CommonJS exports defined with Object.defineProperty ( #4725 )
...
* fix(javascript): retain CommonJS exports defined with Object.defineProperty
tsc, Babel and Rollup emit Object.defineProperty(exports, name, descriptor) for CommonJS re-exports. The semantic projection only recognised assignments, so these exports were missing from export_names and exposes edges. Recognise the call on exports or module.exports with the existing unmodified-global and receiver checks, track its receiver lifetime like an assignment, and link a data descriptor's value like the assigned value; an accessor's result stays unknown.
* fix(javascript): unwrap assignment chains in defined CommonJS export values
A descriptor value such as holder.parse = require("./parser").parse lost its require origin because only the assignment path took the rightmost assigned value. Do it once in the shared export builder.
2026-10-17 23:23:47 +08:00
鸡哥
75104040df
fix(javascript): track public CommonJS export receiver lifetimes ( #3567 )
...
* fix(javascript): track public CommonJS export receiver lifetimes
* fix(javascript): retain exports across uncertain identity effects
2026-10-15 02:46:14 +08:00
morluto