Matt Van Horn 630352b450 fix(release-exposure): follow file: URL source map declarations ...

The scheme guard in noteLocalMapReference returned on every URL scheme, so
a declaration such as file:///release/debug.json was dropped with the remote
ones. A member without a .map name was then scanned as ordinary text and
javascript.source_map_sources reported not_observed.

Convert file: URLs with fileURLToPath and record them in mapTargets through
the same step as relative declarations. A target that is never reached, or
that was already scanned as text, counts as skipped, and so does a malformed
file: URL. A file: URL names one absolute location, so a .map target outside
the inventory stays unassessed rather than being trusted by its name. Remote
schemes stay ignored.

2026-11-01 14:57:47 -08:00

..

adb

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

android

feat(android): trace callers of external DEX methods (#8154)

2026-10-31 01:07:18 +08:00

apkSignature

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

apktool

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

application

fix(release-exposure): keep Electron undecided without positive proof

2026-11-01 14:45:46 -08:00

artifacts

fix(release-exposure): follow file: URL source map declarations

2026-11-01 14:57:47 -08:00

browser

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

captures

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

cli

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

composition

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

compression

fix(gpu): distinguish host descriptor failures from invalid targets

2026-10-24 00:27:57 +08:00

config

fix(ci): consolidate shared timer limit export

2026-10-31 01:16:19 +08:00

contracts

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

cutter

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

domain

fix(release-exposure): decode wide text members before scanning

2026-11-01 14:51:49 -08:00

dotnet

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

electron

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

erlang

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

evm

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

filesystem

feat(artifacts): inspect classic iNES container regions (#2816)

2026-10-31 15:49:16 +08:00

firmware

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

flutter

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

frida

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

gdb

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

ghidra

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

go

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

gpu

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

hopper

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

ida

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

il2cpp

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

inspector

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

javascript

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

jeb

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

kuna

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

main

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

model

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

native

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

objdump

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

pcap

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

process

perf(process): reuse a verified Darwin ownership helper across processes (#8318)

2026-10-31 11:12:02 -07:00

providers

refactor(analysis): move client cleanup to application

2026-10-27 13:49:44 +08:00

python

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

reference

fix(input)!: classify unresolvable source paths (#7847)

2026-10-29 01:52:34 +08:00

rizin

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

rust

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

server

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

signals

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

sqlite

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

wasm

fix: report provider admission failures as typed codes (#8066)

2026-10-30 06:48:01 +08:00

windows

fix(windows): keep polling owned process output after a failed poll (#8163)

2026-10-31 15:23:13 +08:00

catalogIdentity.ts

feat(workflows): expose guided prompts through CLI and MCP (#6995)

2026-10-28 14:12:39 +08:00

cli.ts

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

cliBrowserScenarioCommands.ts

refactor(cli): retain typed analysis outcomes through delivery

2026-10-27 09:16:02 +08:00

cliBuiltinArguments.ts

fix(cli): prevent mcp discovery from registering clients (#7919)

2026-10-29 08:57:38 +08:00

cliBundleResource.test.ts

…

cliCommandNames.ts

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

cliConfiguration.ts

feat(cli): report version and runtime with an explicit output format (#6530)

2026-10-24 00:06:03 +08:00

cliEvidenceCommands.ts

fix(cli): reject empty Evidence file arguments (#7988)

2026-10-29 12:34:46 +08:00

cliHostInputs.test.ts

…

cliJsonInput.ts

refactor(cli): remove obsolete JSON read error mode

2026-10-27 12:42:25 +08:00

cliJsonPaths.test.ts

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

cliLogging.ts

…

cliObservationOptions.test.ts

fix(cli): reject empty observation duration selections (#7710)

2026-10-28 12:57:14 +08:00

cliObservationOptions.ts

fix(cli): reject empty observation duration selections (#7710)

2026-10-28 12:57:14 +08:00

cliOutput.ts

fix(cli): prevent mcp discovery from registering clients (#7919)

2026-10-29 08:57:38 +08:00

config.test.ts

fix(mcp)!: bound validation work before tool dispatch (#7905)

2026-10-29 05:56:38 +00:00

doctorRuntime.test.ts

test: strengthen integration oracles and verification (#8295)

2026-11-01 00:15:28 +08:00

doctorRuntime.ts

fix(setup): preserve and validate selected JEB endpoints

2026-10-27 07:17:10 +08:00

generatedPackageMetadata.ts

refactor(evidence): unify retained inputs across domains (#8299)

2026-10-31 14:45:21 +00:00

homeDirectory.test.ts

…

identity.ts

…

logger.ts

refactor(logging): unify startup policy and test ownership

2026-10-23 15:21:14 +08:00

main.ts

fix(mcp)!: require allowed hosts for non-loopback HTTP binds (#7172)

2026-10-26 22:55:10 +08:00

mcpDoctor.ts

fix(cli): correct completion options and setup guidance (#7851)

2026-10-29 01:28:04 +08:00

mcpDoctorOptions.ts

fix(cli): correct completion options and setup guidance (#7851)

2026-10-29 01:28:04 +08:00

mcpStartupPolicy.test.ts

fix(verification): keep runtime packaging and boundary fixtures complete

2026-10-26 16:46:53 +08:00

mcpStartupPolicy.ts

refactor(analysis): consolidate selection ownership

2026-10-27 13:21:35 +08:00

nativeDeadlineFlags.test.ts

…

recordedCatalogDigests.ts

feat(mcp): support compact output schema advertisements (#7218)

2026-10-26 17:59:51 +08:00

recordedMcpCatalog.ts

…

serverIdentity.ts

…

setupEnvironment.test.ts

fix(setup)!: bind managed registrations to selected installation

2026-10-28 11:34:28 +00:00