morluto 7b25a73ac4 fix(browser): bound CDP messages by the shared budget ...

Apply the 64 MiB protocol message limit when connect callers omit an override. Reject invalid explicit limits, including values that wrap through ws signed 32-bit coercion and disable enforcement. Preserve the typed payload_limit reason through disconnect and later commands.

Validation: 16 transport boundary tests passed, including UTF-8 exact/+1 limits and an oversized frame header without allocating its body. Real Chrome 154 CLI/MCP browser verification and check:fast passed. This caps message bytes, not decoded JSON heap size.

2026-10-11 07:30:14 +08:00

..

.vitepress

docs: remove retired architecture and migration artifacts

2026-10-10 05:41:45 +08:00

assets

docs: keep license sections text-only

2026-10-10 00:09:46 +08:00

adb-device-analysis.md

fix(adb): retain rollback ownership and cancelled acquisition facts

2026-10-11 00:28:39 +08:00

android-analysis.md

fix(mobile): bound framework conventions to path segments (#1506)

2026-10-10 21:42:03 +08:00

apktool-resource-analysis.md

feat(apktool): decode Android resource tables through a caller-supplied launcher (#1556)

2026-10-10 23:04:12 +08:00

apple-application-analysis.md

fix(mobile): bound framework conventions to path segments (#1506)

2026-10-10 21:42:03 +08:00

architecture.mermaid

refactor: use canonical implementations and types directly

2026-10-09 23:35:19 +08:00

binary-diagnostics.md

feat(artifacts): inspect PE resource identities and payload ranges (#1482)

2026-10-10 23:02:06 +08:00

browser-observation.md

fix(browser): bound CDP messages by the shared budget

2026-10-11 07:30:14 +08:00

browser-scenario-contract.md

refactor(captures)!: require canonical producer metadata

2026-10-09 23:35:19 +08:00

cli.md

fix(reference)!: preserve exclusion rule provenance

2026-10-11 04:15:26 +08:00

electron-observation.md

fix(electron): support packaged app.asar pages and rewritten unpacked companions (#1400)

2026-10-10 23:01:54 +08:00

error-contract.schema.json

feat(evm): inspect offline bytecode interfaces through EVMole (#1051)

2026-10-08 15:32:05 +08:00

evm-bytecode.md

fix(build): make catalogs and packaged skills generated outputs (#1086)

2026-10-08 22:43:51 +08:00

firmware-analysis.md

fix(providers): retain worker cleanup owners through shutdown

2026-10-11 00:03:21 +08:00

ghidra-dos.md

fix(ghidra): reject address truncation before reads and edits

2026-10-09 03:53:28 +08:00

ghidra-mips.md

fix(ghidra): admit carved MIPS ELF with incomplete section tables (#1629)

2026-10-11 04:33:05 +08:00

ghidra-nativeaot.md

fix(ghidra): admit the 12.1 line and the install's JDK range (#840)

2026-10-07 12:24:36 +08:00

ghidra-provider.md

chore: merge main into Windows DLL support branch

2026-10-10 13:42:54 +08:00

ida-provider.md

feat(ida): add read-only GUI and headless MCP providers (#754)

2026-10-07 01:47:05 +08:00

index.md

docs: publish VitePress documentation on GitHub Pages

2026-10-07 16:58:04 +08:00

installation.md

docs(setup): identify Qwen and OpenCode release gaps

2026-10-11 07:10:46 +08:00

javascript-application-graph.md

docs(contracts)!: explain canonical URL and skill metadata ownership

2026-10-10 02:49:46 +08:00

javascript-application-workflows.md

docs: correct stale logging, Ghidra host, and example path statements (#1420)

2026-10-10 21:29:31 +08:00

javascript-artifact-reconstruction.md

feat(javascript): return a retained summary view on request (#1568)

2026-10-10 07:37:37 -07:00

javascript-recovery.md

fix(javascript): accept the Wakaru 1.x release line and verify 1.14.0 (#1540)

2026-10-10 23:02:15 +08:00

javascript-runtime-observation.md

fix(inspector): bound retained metadata and preserve cancellation

2026-10-09 05:15:23 +08:00

javascript-runtime-reconciliation.md

fix(tools)!: simplify direct invocation and harden boundary contracts (#555)

2026-10-05 20:16:44 +08:00

jeb-analysis.md

feat(jeb): add JEB engine provider over its MCP interface (#1536)

2026-10-10 23:03:27 +08:00

managed-code-analysis.md

fix(managed): budget decoding before representation expansion

2026-10-11 00:03:19 +08:00

mcp-contracts.md

fix(electron): support packaged app.asar pages and rewritten unpacked companions (#1400)

2026-10-10 23:01:54 +08:00

mcp-prompts.md

feat(mcp): select views of retained analysis results (#1180)

2026-10-09 12:45:48 +08:00

migration-6.2.md

docs: correct MCP error and capture import guidance

2026-10-10 05:41:52 +08:00

native-investigation.md

feat(ghidra): admit set_address_name and set_addresses_names (#1635)

2026-10-11 04:35:38 +08:00

process-capture.md

fix(process)!: bound terminal buffers before capture

2026-10-11 03:19:29 +08:00

reconstruction-obligation-ledgers.md

refactor: return complete analysis results inline

2026-09-29 08:07:24 +08:00

reconstruction-readiness.md

fix(tools)!: simplify direct invocation and harden boundary contracts (#555)

2026-10-05 20:16:44 +08:00

recorded-crashes.md

feat(native): inspect recorded crashes through pwntools and pwndbg (#1054)

2026-10-08 16:50:31 +08:00

releasing.md

docs: explain 6.2 contract and saved-data migration (#1304)

2026-10-09 15:31:11 +00:00

roadmap.md

docs: remove retired architecture and migration artifacts

2026-10-10 05:41:45 +08:00

testing.md

fix(tests): separate Copilot model IDs from wire models (#1647)

2026-10-11 06:52:45 +08:00

tool-design.md

docs: prune repeated contributor and tool design instructions

2026-10-10 05:28:13 +08:00

user-visible-errors.csv

fix(setup): recognize supported Nobara hosts

2026-10-10 02:49:46 +08:00

web-network-captures.md

fix(capture): retain Electron observations and HAR resource failures

2026-10-09 06:49:02 +08:00

web-runtime.md

fix(browser): treat module-import initiator positions as script positions

2026-10-08 16:44:25 +00:00

web-source-location.md

fix(browser): validate and bound source-map evidence

2026-10-09 06:32:10 +08:00

website-module-trace.md

feat(browser): trace captured website module imports (#879)

2026-10-07 14:59:52 +08:00

website-script-export.md

fix(files): reject nonregular capture and JSON inputs

2026-10-10 01:49:54 +08:00

windows-ghidra-p0.md

feat(ghidra): support native PE DLLs on Windows

2026-10-09 16:11:13 +01:00