Edgar ArakelyanandClaude Opus 5.5 178668fc74 fix(environment): readable bundle inputs, an honest replay check and admitted export reads ...

- The Dockerfile copies manifest.json and evidence.json owned by the node
  user, so a private host umask cannot leave the runtime user unable to
  read them.
- The generated verifier keeps the first record's own unknown status
  instead of borrowing another record's, and an error reply never passes
  the check, even when the recorded status is unknown.
- Export checks, before reading an input, that reading and natively
  parsing the whole file fits live heap headroom, with the same rule the
  bounded JSON reader applies to native parsing, and refuses it as a
  resource constraint otherwise.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-18 20:52:25 -07:00

..

adb

fix(adb): preserve command failure target identities

2026-10-19 01:13:57 +08:00

android

fix(android): retain archive admission ownership through cleanup retries

2026-10-18 02:19:12 +08:00

apktool

fix(apktool)!: select numeric regions using Android b+ qualifiers

2026-10-19 03:25:25 +08:00

application

fix(environment): readable bundle inputs, an honest replay check and admitted export reads

2026-10-18 20:52:25 -07:00

artifacts

fix(plist)!: preserve unknown XML scalar identities

2026-10-19 02:48:09 +08:00

browser

fix(browser): retain module resolution through finalization

2026-10-18 09:07:53 +08:00

captures

fix(process): preserve file outcomes through exact cleanup recovery

2026-10-18 02:55:41 +08:00

cli

feat(environment): export an environment manifest as an agent environment bundle

2026-10-18 19:43:09 -07:00

composition

fix(javascript): bound semantic unknown retention at projection

2026-10-17 21:57:31 +08:00

config

feat(environment): serve an environment manifest as a replay environment

2026-10-18 19:43:09 -07:00

contracts

feat(analysis-view): project an environment manifest from web network captures (#4954)

2026-10-19 07:07:37 +08:00

cutter

fix(cutter): normalize command checkpoint cancellation

2026-10-17 09:24:43 +08:00

domain

feat(environment): serve an environment manifest as a replay environment

2026-10-18 19:43:09 -07:00

dotnet

fix(managed): avoid duplicate decode budget charging on cached metadata strings

2026-10-17 07:10:58 +00:00

electron

fix(electron): own fuse cleanup through adapters and shutdown

2026-10-17 21:24:00 +08:00

evaluation

fix(evaluation): require explicit REA server attribution

2026-10-14 09:47:57 +08:00

evm

fix(evm): preserve command owner cancellation reasons

2026-10-17 13:18:05 +08:00

filesystem

fix(setup): preserve the selected destination during configuration publication

2026-10-18 07:06:15 +08:00

firmware

fix(artifacts): carry exact cleanup authority through scope failures

2026-10-18 08:44:41 +08:00

flutter

fix(flutter): keep completed inspection facts when cancelled during snapshot cleanup (#4766)

2026-10-17 04:27:55 -07:00

frida

fix(frida): preserve attach targets and reconcile early detachment

2026-10-14 16:10:46 +08:00

gdb

fix(gdb): report close disposition as a capability precondition

2026-10-18 10:03:39 +08:00

ghidra

fix(providers): preserve live cleanup ownership through retries

2026-10-18 01:59:10 +08:00

go

fix(electron): share executable architecture facts for fuse inspection

2026-10-17 21:10:07 +08:00

hopper

fix(domain): admit Qualcomm Hexagon (EM_HEXAGON, 164) ELF binaries (#4819)

2026-10-17 23:52:03 +08:00

ida

fix(domain): admit Qualcomm Hexagon (EM_HEXAGON, 164) ELF binaries (#4819)

2026-10-17 23:52:03 +08:00

inspector

fix(javascript): report malformed runtime context events as excluded (#4755)

2026-10-17 04:26:25 -07:00

javascript

fix(javascript): preserve SQLite constructor provenance

2026-10-18 05:06:46 +08:00

jeb

fix(jeb): attribute transport timeouts to requested operations

2026-10-17 06:31:16 +08:00

kuna

fix(providers): preserve live cleanup ownership through retries

2026-10-18 01:59:10 +08:00

main

fix(mcp): keep a startup signal's exit status through the entry's normal return

2026-10-18 10:36:27 -07:00

native

fix(plist)!: preserve unknown XML scalar identities

2026-10-19 02:48:09 +08:00

objdump

fix(paths): select caller paths through symlinks and .. as the filesystem does (#4067)

2026-10-15 05:19:43 -07:00

pcap

fix(pcap): preserve exact UTC capture instants

2026-10-18 07:40:25 +08:00

process

fix(artifacts): carry exact cleanup authority through scope failures

2026-10-18 08:44:41 +08:00

providers

fix(providers): preserve live cleanup ownership through retries

2026-10-18 01:59:10 +08:00

reference

fix(filesystem): preserve digest failures through cleanup cancellation

2026-10-17 05:47:19 +08:00

rizin

fix(rizin): preserve output whitespace before completion markers

2026-10-18 09:53:59 +08:00

rust

fix(providers): preserve bounded artifact reads and cleanup owners

2026-10-17 00:44:02 +08:00

server

fix(environment): advertise untrusted-content instructions and keep non-UTF-8 bodies as base64

2026-10-18 20:38:54 -07:00

signals

fix(process): preserve file outcomes through exact cleanup recovery

2026-10-18 02:55:41 +08:00

sqlite

fix(sqlite): preserve column identity before row selection

2026-10-17 15:33:59 +08:00

wasm

fix(wasm): retain cleanup ownership through WABT recovery

2026-10-17 21:02:50 +08:00

windows

fix(windows): retain primary snapshot and cancellation failures

2026-10-17 00:44:02 +08:00

catalogIdentity.ts

perf(catalog): record default catalog digests at build time (#4041)

2026-10-15 02:19:38 -07:00

cli.ts

feat(environment): serve an environment manifest as a replay environment

2026-10-18 19:43:09 -07:00

cliBrowserContext.ts

fix(mcp): isolate optional observation adapter failures (#838)

2026-10-07 11:45:17 +08:00

cliBrowserScenarioCommands.ts

fix(mcp): normalize browser scenario input errors (#4661)

2026-10-17 17:36:32 +08:00

cliCommandNames.ts

feat(environment): export an environment manifest as an agent environment bundle

2026-10-18 19:43:09 -07:00

cliEvidenceCommands.ts

perf(mcp): keep Playwright and type-only imports off MCP startup (#1691)

2026-10-10 21:04:05 -07:00

cliHostInputs.test.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

cliJavaScriptRuntimeCommands.ts

fix(browser): bound capture work and preserve observation gaps

2026-10-14 08:31:29 +08:00

cliJsonInput.ts

fix(cli): keep file URLs out of operator-relative path resolution (#2882)

2026-10-14 01:05:14 +08:00

cliJsonPaths.test.ts

fix(cli): keep file URLs out of operator-relative path resolution (#2882)

2026-10-14 01:05:14 +08:00

cliLogging.test.ts

feat(update): update Bun global installations (#1735)

2026-10-11 17:56:05 +08:00

cliLogging.ts

fix(cli): report string capacity failures during result formatting

2026-10-18 04:00:15 +08:00

cliObservationOptions.ts

fix(javascript): bound semantic unknown retention at projection

2026-10-17 21:57:31 +08:00

cliOutput.ts

fix(cli): route update flag through verified updater

2026-10-18 05:33:21 +08:00

config.test.ts

fix(setup): reject NUL bytes in registration environments (#4335)

2026-10-17 00:24:35 +08:00

doctorRuntime.test.ts

fix(hopper): verify and repair the Linux embedding runtime (#5041)

2026-10-19 00:11:10 +08:00

doctorRuntime.ts

fix(hopper): verify and repair the Linux embedding runtime (#5041)

2026-10-19 00:11:10 +08:00

generatedPackageMetadata.ts

chore(release/6.7.0): release rea-agents 6.7.0 (#4983)

2026-10-18 15:40:45 +08:00

homeDirectory.test.ts

fix(setup): ignore empty home directory selections

2026-10-13 04:11:55 +08:00

identity.ts

feat: streamline agent integration and MCP routing

2026-07-20 17:11:06 +08:00

logger.ts

fix(cli): report an invalid REA_LOG_LEVEL as configuration (#2140)

2026-10-12 06:07:37 -07:00

main.ts

fix(mcp): keep a startup signal's exit status through the entry's normal return

2026-10-18 10:36:27 -07:00

mcpDoctor.ts

fix(mcp): bind catalog identity to output schema profiles

2026-10-15 01:41:31 +08:00

mcpStartupPolicy.ts

fix(setup): include registered IDA budgets in client deadlines

2026-10-15 07:36:34 +08:00

recordedCatalogDigests.ts

perf(catalog): record default catalog digests at build time (#4041)

2026-10-15 02:19:38 -07:00

serverIdentity.ts

fix(identity)!: preserve invocation uncertainty and advertised catalogs

2026-10-14 16:10:46 +08:00

setupEnvironment.test.ts

refactor(setup): distinguish provider configuration from registration settings

2026-10-15 05:23:04 +08:00