Dery Ferdika a732c859dd fix(contracts): reject NUL bytes in Frida, Rizin, and GDB local path inputs (#3575) ...

Route the caller-selected local path fields in load_frida_script,
instrument_with_frida, start_frida_session, start_rizin_debug_session,
and start_gdb_session through the shared localPathStringSchema so a NUL
byte is refused at the advertised contract boundary instead of reaching
the filesystem or a provider subprocess and surfacing as a raw error.

Extend the OS-invalid-local-input acceptance harness to the tools that
were missing from it.

2026-10-15 01:17:54 +08:00

..

adb

fix(adb)!: distinguish reinstall intent from observed replacement

2026-10-14 17:09:17 +08:00

android

fix(providers)!: preserve readiness, coverage, and diagnostic ownership

2026-10-14 08:28:14 +08:00

apktool

fix(android): report validated ADB and Apktool host availability

2026-10-14 16:54:08 +08:00

application

fix(setup): retain Hermes YAML scalar source during updates

2026-10-15 00:57:57 +08:00

artifacts

test: align malformed XML and route seed assertions with owning contracts

2026-10-14 17:55:22 +08:00

browser

fix(browser): decode SAZ XML through typed encoding validation

2026-10-14 17:49:16 +08:00

captures

fix(browser): bound capture work and preserve observation gaps

2026-10-14 08:31:29 +08:00

cli

fix(adb)!: distinguish reinstall intent from observed replacement

2026-10-14 17:09:17 +08:00

composition

fix(cli): route static artifact analysis without native engines

2026-10-14 13:58:12 +08:00

config

fix(hopper): skip non-file launcher candidates

2026-10-15 00:09:42 +08:00

contracts

fix(contracts): reject NUL bytes in Frida, Rizin, and GDB local path inputs (#3575)

2026-10-15 01:17:54 +08:00

cutter

fix(reverse): reconcile cleanup ownership and mutation diagnostics (#2799)

2026-10-14 04:47:34 +08:00

domain

fix(mcp): preserve tuple constraints in advertised schemas

2026-10-15 01:12:46 +08:00

dotnet

fix(managed): preserve enclosing identity in member comparisons (#3079)

2026-10-14 23:20:07 +08:00

electron

fix(electron): preserve selected fuse inspection paths (#3104)

2026-10-14 12:49:17 +08:00

evaluation

fix(evaluation): require explicit REA server attribution

2026-10-14 09:47:57 +08:00

evm

fix(evm): preserve transferred cleanup ownership and bounded output

2026-10-14 14:47:26 +08:00

filesystem

fix(flutter): name a missing or non-file APK selection (#2727)

2026-10-13 21:49:23 +08:00

firmware

fix(analysis): preserve extraction gaps and database failure reasons

2026-10-14 08:32:15 +08:00

flutter

fix(flutter): find snapshot headers that a read chunk boundary splits (#2804)

2026-10-13 22:14:07 +08:00

frida

fix(frida): preserve attach targets and reconcile early detachment

2026-10-14 16:10:46 +08:00

gdb

fix(reverse): reconcile cleanup ownership and mutation diagnostics (#2799)

2026-10-14 04:47:34 +08:00

ghidra

fix(ghidra): preserve PE PDB coverage facts (#2933)

2026-10-14 22:25:05 +08:00

go

fix(native): retain partial format facts and explicit coverage

2026-10-14 08:29:16 +08:00

hopper

fix(hopper): prepare deterministic FAT32 analysis slices

2026-10-14 16:54:08 +08:00

ida

fix: restore JavaScript analysis and current regression checks (#3080)

2026-10-14 12:17:54 +08:00

inspector

fix(inspector): retain usable targets and cancel owned capture waits

2026-10-14 09:47:57 +08:00

javascript

fix(javascript): preserve resource error reasons across worker frames

2026-10-14 16:10:46 +08:00

jeb

fix(providers)!: preserve readiness, coverage, and diagnostic ownership

2026-10-14 08:28:14 +08:00

main

fix(mcp): release optional providers when transport startup fails

2026-10-14 16:10:46 +08:00

native

fix(native): distinguish proven pre-launch failure from unknown target ownership

2026-10-14 17:49:18 +08:00

objdump

fix(reverse): reconcile cleanup ownership and mutation diagnostics (#2799)

2026-10-14 04:47:34 +08:00

pcap

fix(pcap): retain parsed observations when process cleanup fails

2026-10-14 13:40:53 +08:00

process

fix(process): retain deletions after observed roots become obstructed

2026-10-14 17:49:17 +08:00

reference

fix(reference): preserve missing symlink target facts

2026-10-14 08:43:59 +08:00

rizin

fix(reverse): reconcile cleanup ownership and mutation diagnostics (#2799)

2026-10-14 04:47:34 +08:00

rust

fix(rust): retain compatible cargo-auditable revisions

2026-10-14 14:47:26 +08:00

server

fix(mcp): bound SDK validation errors before transport delivery

2026-10-14 16:54:08 +08:00

signals

fix(analysis): preserve extraction gaps and database failure reasons

2026-10-14 08:32:15 +08:00

sqlite

fix(sqlite): keep a retained worker owner after a failed worker exit (#3242)

2026-10-14 00:56:22 -07:00

wasm

fix(providers)!: preserve readiness, coverage, and diagnostic ownership

2026-10-14 08:28:14 +08:00

windows

fix(windows): end output streams before releasing owned handles

2026-10-14 16:10:46 +08:00

catalogIdentity.ts

fix(identity)!: preserve invocation uncertainty and advertised catalogs

2026-10-14 16:10:46 +08:00

cli.ts

fix(reverse): reconcile cleanup ownership and mutation diagnostics (#2799)

2026-10-14 04:47:34 +08:00

cliBrowserContext.ts

fix(mcp): isolate optional observation adapter failures (#838)

2026-10-07 11:45:17 +08:00

cliBrowserScenarioCommands.ts

fix(cli): await browser scenario cleanup on interrupts

2026-10-11 17:33:57 +08:00

cliCommandNames.ts

feat(electron): inspect packaged Electron fuse state without execution (#2399)

2026-10-14 09:16:33 +08:00

cliEvidenceCommands.ts

perf(mcp): keep Playwright and type-only imports off MCP startup (#1691)

2026-10-10 21:04:05 -07:00

cliHostInputs.test.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

cliJavaScriptRuntimeCommands.ts

fix(browser): bound capture work and preserve observation gaps

2026-10-14 08:31:29 +08:00

cliJsonInput.ts

fix(cli): keep file URLs out of operator-relative path resolution (#2882)

2026-10-14 01:05:14 +08:00

cliJsonPaths.test.ts

fix(cli): keep file URLs out of operator-relative path resolution (#2882)

2026-10-14 01:05:14 +08:00

cliLogging.test.ts

feat(update): update Bun global installations (#1735)

2026-10-11 17:56:05 +08:00

cliLogging.ts

fix(cli): preserve failure semantics across full-output formats

2026-10-13 03:33:27 +08:00

cliObservationOptions.ts

fix(javascript): trace wrapped Electron IPC paths in large bundles (#1874)

2026-10-12 09:28:59 +08:00

cliOutput.ts

fix(cli): reject unterminated output filter slices (#2315)

2026-10-13 20:04:33 +08:00

config.test.ts

fix(hopper): share launcher discovery across setup and runtime

2026-10-14 17:09:17 +08:00

doctorRuntime.test.ts

fix(setup): preserve registration identity and recovery ownership

2026-10-14 08:25:53 +08:00

doctorRuntime.ts

fix(setup): preserve validated caller-selected JEB registration settings

2026-10-14 10:06:46 +08:00

generatedPackageMetadata.ts

chore(main): release rea-agents 6.5.0 (#1693)

2026-10-14 20:31:45 +08:00

homeDirectory.test.ts

fix(setup): ignore empty home directory selections

2026-10-13 04:11:55 +08:00

identity.ts

feat: streamline agent integration and MCP routing

2026-07-20 17:11:06 +08:00

logger.ts

fix(cli): report an invalid REA_LOG_LEVEL as configuration (#2140)

2026-10-12 06:07:37 -07:00

main.ts

fix(identity)!: preserve invocation uncertainty and advertised catalogs

2026-10-14 16:10:46 +08:00

mcpDoctor.ts

fix(identity)!: preserve invocation uncertainty and advertised catalogs

2026-10-14 16:10:46 +08:00

mcpStartupPolicy.ts

fix(mcp): bound retained doctor stderr while draining output

2026-10-14 13:58:17 +08:00

serverIdentity.ts

fix(identity)!: preserve invocation uncertainty and advertised catalogs

2026-10-14 16:10:46 +08:00

setupEnvironment.test.ts

fix(setup): preserve validated caller-selected JEB registration settings

2026-10-14 10:06:46 +08:00