0b1a945d69
fix(electron): model view constructors as window-like surfaces ( #9571 )
...
* fix(electron): model view constructors as window-like surfaces
Electron's static pass recognized a window only through the literal
`BrowserWindow` constructor, so `BaseWindow`, `BrowserView` and
`WebContentsView` produced no node and their literal `webPreferences` were
invisible. IPC registrations reached through such a view's own
`webContents.ipc` were dropped too, because the receiver resolver had the
same single-constructor gate -- VS Code alone registers seven channels this
way, and a shipped sample of four applications put 29 percent of window
construction sites on an unmodeled constructor.
Read webPreferences through one constructor set shared by the construction
inspector and the IPC receiver resolver. The finding only carries the new
`window_constructor` field when the site is not `BrowserWindow`, so existing
projections and their evidence stay byte-identical. A non-BrowserWindow
owner is not admitted for `loadFile`/`loadURL` on itself: only BrowserWindow
exposes those directly.
* fix(electron): keep the view constructor label lookup nullable
Observation labels are nullable in the application graph schema, so the
byLabel lookup failed tsc with TS18047 and took the Static checks job
down with it.
---------
Co-authored-by: 2SinceJuly <202121119+2SinceJuly@users.noreply.github.com >
Co-authored-by: morluto <76467478+morluto@users.noreply.github.com >
2026-11-09 19:53:11 +08:00
morluto and ShuaixinHuang
b46f4fcebd
fix(javascript): preserve loader authority for exact suffixes ( #9477 )
...
* fix(javascript): require exact loader suffix case
* fix(javascript): share exact loader mode across import resolution
* test(process): align symlink fixture with filesystem checkpoints
* test(javascript): normalize the module resolution oracle path separators
* test(frida): assert the CLI spawn Evidence contract
* test(mcp): use an unsupported analysis-view parent
* test(browser): separate source-location line bounds from parity
* fix(javascript): preserve uncertain loader provenance
* test(javascript): cover uncertain require resolution
* fix(javascript): retain conditional Electron evidence
* fix(javascript): preserve timed semantic provenance
* fix(javascript): retain conditional builtin effects
* test(javascript): distinguish bundled host authority
* fix(javascript): preserve nested loader invocation identity
* test(javascript): qualify Electron fixture authority
* fix(javascript): preserve loader invocation authority
* fix(javascript): respect source order for resolver escapes
* fix(javascript): check nested loader callable mutations
* fix(javascript): retain conditional constructor requests
* fix(reference): retain constructor loader relationships
* fix(reference): follow nested loader callable paths
* refactor(javascript): share callable mutation interpretation
* fix(javascript): require exact package loader suffixes
* refactor(javascript): unify conditional relation evidence
* refactor(javascript): unify conditional node evidence
* fix(javascript): retain unknown authority for mixed case sources
* fix(javascript): preserve loader uncertainty for dotfiles
* fix(reference): classify javascript suffix dotfiles
* test(reference): cover suffix dotfiles through cli
* fix(javascript): retain equivalent conditional built-in origins
* fix(javascript): preserve wrapped resolver operation
* fix(javascript): retain nested conditional built-in receivers
* test(javascript): declare CommonJS in native addon fixtures
* fix(javascript): retain wrapped resolver candidates
* style: format merged native command schema
* fix(javascript): preserve uncertain loader authority
* test(javascript): require candidate preload evidence
* test(javascript): cover reference loader member writes
---------
Co-authored-by: ShuaixinHuang <1836656514@qq.com >
2026-11-09 13:21:24 +08:00
ShuaixinHuang
a2134b3a74
fix(javascript): resolve module-level Electron options in functions ( #8960 )
...
* fix(javascript): resolve module-level Electron options in functions
* fix(javascript): limit module option ancestry walk
* fix(javascript): preserve uncertain captured argument ordering
* fix(javascript): retain hoisted activation uncertainty
* fix(javascript): retain function ownership through loops
* fix(javascript): account for classic global activations
* fix(javascript): bind first activations to lexical identities
* fix(javascript): retain uncertain global activation timing
* fix(javascript): isolate receiver facts and share computed reads
* fix(javascript): retain projected and opaque global activations
* fix(javascript): refresh activation bounds as opaque effects grow
* fix(ci): format website watch directories without changing configuration
* fix(javascript): share source reads across opaque-effect updates
* fix(javascript): retain constructed-code global activation bounds
* fix(javascript): share runtime activation and receiver facts
* fix(javascript): reuse pattern reads and function positions
* fix(javascript): isolate copied paths and preserve runtime reads
* style(javascript): format migrated reference imports
* fix(javascript): normalize constructor activation and receiver effects
* fix(javascript): retain aliased receiver timing and lexical global this
* fix(javascript): preserve effect-free receiver identity across activations
* fix(javascript): retain outer activation and prototype effects
* fix(javascript): index implicit reads without deep path rescans
* fix(javascript): retain aliased prototype and parameter read uncertainty
* fix(javascript): index reflected reads through intrinsic invocation facts
* fix(javascript): retain unresolved global activation reads
* chore: refresh PR branch after review fix publication
* fix(javascript): retain projected receiver reads and cache method facts
* fix(javascript): retain inherited and implicit activation reads
* fix(javascript): retain caller-owned this uncertainty
* fix(javascript): retain reflected reads with unresolved spread arguments
* fix(javascript): preserve enclosing activation for decorators
* fix(javascript): track intrinsic literal prototype effects
* fix(javascript): retain catch activation from implicit reads
* perf(javascript): reuse effective keys for projected reads
* fix(javascript): retain possible caller-owned ambient effects
2026-11-05 16:52:19 +08:00
Wenyu Chiou
c7ae27807f
fix(electron): retain scoped IPC registration provenance ( #7031 )
...
* fix(electron): retain scoped IPC registration provenance
* fix(electron): defer mutation analysis until scoped receiver admission
2026-10-25 03:57:02 +08:00
morluto
5f13ddd755
fix(javascript): require API identity for static application roles
2026-10-24 02:35:36 +08:00
