morluto 5a0e0ba3b8 fix: address review nits from batch integration follow-ups (#818) ...

- browser: reject empty Referrer-Policy tokens structurally while
  still skipping them per W3 fallback semantics.
- browser: document that WebMCP keys cannot collapse since unknown
  frames are excluded before keying.
- ghidra: split NativeAOT non-recovery diagnostics into
  reason-missing vs payload-present variants with exact assertions.
- reference: lock secret-patterned exclusion before failure
  projection so failure messages cannot carry secret paths.
- doctor: lock direct-launcher Codex timeout ordering both ways.
- native: note plutil -n macOS 12+ requirement; add fat-output
  control guarding the thin pre-scan.
- reconstruction: multi-unknown limitation coverage via shared helper.

Tracks #817 for the remaining smol-toml advisory.

2026-10-07 10:49:23 +08:00

..

analysisSnapshot.test.ts

fix(tools)!: simplify direct invocation and harden boundary contracts (#555)

2026-10-05 20:16:44 +08:00

artifactComparisonSummary.test.ts

fix(artifacts): exclude removed paths from unchanged counts (#569)

2026-10-05 21:42:56 +08:00

artifactDirectoryIdentity.test.ts

refactor(domain): consolidate canonical ordering and digest helpers (#624)

2026-10-06 04:55:26 +08:00

artifactInventoryEntryOrder.test.ts

fix(artifacts): resolve parents after archive enumeration (#578)

2026-10-05 23:06:46 +08:00

artifactInventorySnapshot.test.ts

refactor(artifacts): remove selectors and traversal quotas

2026-09-29 12:15:49 +08:00

artifactMzInventory.test.ts

feat(ghidra): add DOS MZ analysis and complete function extents (#556)

2026-10-05 20:09:45 +08:00

asarInventoryContainment.test.ts

fix(artifacts): retain expanded ASAR container parents (#583)

2026-10-05 23:39:12 +08:00

asarInventoryFreshness.test.ts

fix(artifacts): expand nested ASARs on Windows (#582)

2026-10-05 23:33:59 +08:00

authorizedArtifactInventory.test.ts

refactor(artifacts): remove selectors and traversal quotas

2026-09-29 12:15:49 +08:00

binaryTarget.test.ts

fix: integrate 24 reviewed browser/native/semantics corrections (#815)

2026-10-07 10:33:10 +08:00

boundedFileBytes.test.ts

fix: consolidate boundary ownership and cleanup failure paths (#477)

2026-09-08 10:59:13 +08:00

clientConfigurationBom.test.ts

fix(setup): accept leading BOM in JSON client configs

2026-10-06 03:40:42 -07:00

clientConfigurationDialects.test.ts

feat(setup): support Command Code MCP registration (#645)

2026-10-06 14:15:59 +08:00

clientConfigurationTransactions.test.ts

fix: consolidate boundary ownership and cleanup failure paths (#477)

2026-09-08 10:59:13 +08:00

clientLifecycle.test.ts

feat(setup): support Command Code MCP registration (#645)

2026-10-06 14:15:59 +08:00

clientRegistrationStatus.test.ts

fix: address review nits from batch integration follow-ups (#818)

2026-10-07 10:49:23 +08:00

cliJsonInput.test.ts

test: remove stale limits and handoff expectations

2026-09-29 17:00:16 +08:00

dependencyInstall.test.ts

refactor(tools): remove artificial analysis ceilings

2026-09-29 16:29:23 +08:00

directAnalysisPermissions.test.ts

feat(ida): add read-only GUI and headless MCP providers (#754)

2026-10-07 01:47:05 +08:00

dosComTarget.test.ts

feat(ghidra): admit explicit DOS COM analysis (#702)

2026-10-06 16:26:40 +08:00

electronFileScope.test.ts

refactor(tools): remove artificial analysis ceilings

2026-09-29 16:29:23 +08:00

evidenceBundleFiles.test.ts

refactor(files): use caller paths for local evidence files

2026-09-29 14:53:20 +08:00

installScript.test.ts

fix(setup): align Node runtime checks with package engines

2026-10-05 22:13:22 -07:00

javascriptArtifactContentIdentity.test.ts

fix: integrate 24 reviewed browser/native/semantics corrections (#815)

2026-10-07 10:33:10 +08:00

javascriptArtifactReconstruction.test.ts

fix(tools)!: simplify direct invocation and harden boundary contracts (#555)

2026-10-05 20:16:44 +08:00

javascriptExportContainerCoverage.test.ts

fix(comparison): retain container-only export shape paths

2026-10-06 00:42:19 -07:00

javascriptExportShapeComparison.test.ts

fix: integrate 14 approved fix PRs (668,671,673,675,678-681,685-690) (#705)

2026-10-06 16:31:00 +08:00

javascriptPackagePrecedence.test.ts

fix(javascript): prefer package entrypoints over directory indexes (#575)

2026-10-05 22:34:48 +08:00

javascriptRequireLiteralPaths.test.ts

fix(javascript): preserve literal CommonJS path punctuation (#576)

2026-10-05 22:28:51 +08:00

javascriptSourceMapComments.test.ts

fix(javascript): read source-map directives only from comments (#672)

2026-10-06 16:18:25 +08:00

javascriptSourceMapLocations.test.ts

fix(javascript): count all source line terminators

2026-10-05 23:49:27 -07:00

jsonUtf8Input.test.ts

fix(cli): reject invalid UTF-8 JSON file bytes (#613)

2026-10-06 02:10:11 +08:00

nativeArtifactGoldens.test.ts

feat(native): add inspection primitives, dispatch traces and approved UI observation (#500)

2026-10-04 16:02:36 +08:00

referenceSourceComputedRequire.test.ts

fix(reference): distinguish computed require member names

2026-10-06 00:26:08 -07:00

referenceSourceDockerfileLanguage.test.ts

fix(reference): bound Dockerfile language detection

2026-10-06 00:03:29 -07:00

referenceSourceDynamicImports.test.ts

fix(reference): retain dynamic import relationships

2026-10-05 22:32:36 -07:00

referenceSourceFailureDetails.test.ts

fix: address review nits from batch integration follow-ups (#818)

2026-10-07 10:49:23 +08:00

referenceSourceImport.test.ts

fix: integrate 24 reviewed browser/native/semantics corrections (#815)

2026-10-07 10:33:10 +08:00

referenceSourceReader.test.ts

fix(tools)!: simplify direct invocation and harden boundary contracts (#555)

2026-10-05 20:16:44 +08:00

referenceSourceRecovery.test.ts

fix(reference): retain recovered parser diagnostics

2026-10-06 00:17:04 -07:00

referenceSourceTestFilenames.test.ts

fix(reference): classify test suffixes before extensions

2026-10-05 23:56:24 -07:00

referenceSourceTypeScriptExtensions.test.ts

fix: integrate 24 reviewed browser/native/semantics corrections (#815)

2026-10-07 10:33:10 +08:00

referenceSourceUnreadableDirectories.test.ts

fix(reference): retain partial imports for unreadable directories (#766)

2026-10-07 02:36:21 +08:00

referenceSourceVcs.test.ts

fix(reference): read linked worktree commit provenance (#677)

2026-10-06 16:18:42 +08:00

releaseWorkflow.test.ts

feat(native): add inspection primitives, dispatch traces and approved UI observation (#500)

2026-10-04 16:02:36 +08:00

runtimeIdentification.test.ts

refactor(tools): return complete analysis results inline

2026-09-29 14:53:50 +08:00

safeOutputTree.test.ts

fix(artifacts): make extraction output tree work on Windows (#753)

2026-10-07 01:46:52 +08:00

setupConfig.test.ts

refactor(app): split Setup and ProcessOwnership modules (#628)

2026-10-06 05:00:32 +08:00

setupSkill.test.ts

docs: clarify onboarding and align provider guidance (#745)

2026-10-06 22:57:36 +08:00

setupUnavailableProvider.test.ts

feat(ghidra): enable Windows x64 read-only analysis (#699)

2026-10-06 16:53:33 +08:00

sourceToBundlePaths.test.ts

fix(tools)!: simplify direct invocation and harden boundary contracts (#555)

2026-10-05 20:16:44 +08:00

storeFileLock.test.ts

fix: consolidate boundary ownership and cleanup failure paths (#477)

2026-09-08 10:59:13 +08:00

targetDiagnostics.test.ts

fix(target): explain the JavaScript directory analysis route (#733)

2026-10-06 19:53:08 +08:00

temporaryDirectory.test.ts

chore(deps): upgrade typescript, vitest, and MCP SDK to latest (#633)

2026-10-06 05:15:17 +08:00

webScriptExport.test.ts

feat(web): export captured scripts for JavaScript application analysis (#801)

2026-10-07 05:24:32 +08:00

zipDetection.test.ts

fix: consolidate boundary ownership and cleanup failure paths (#477)

2026-09-08 10:59:13 +08:00