405732a7f5
fix: correct native inventories and bridge error classification ( #503 )
...
* fix(hopper): preserve normalized inventory addresses
* test(hopper): isolate real inventory verification
* fix(native): preserve otool addresses and section alignment
* fix: preserve address spaces in call path evidence
* fix(hopper): distinguish request validation from provider faults
* fix(native): retain tool inventory facts and reject failed signatures
2026-10-04 17:25:09 +08:00
4fbc501121
feat(native): add inspection primitives, dispatch traces and approved UI observation ( #500 )
...
* fix(hopper): normalize string-backed addresses and update verification
* feat(native): add inspection primitives, dispatch traces and approved UI observation
* test: prioritize real artifact E2E and captured golden regressions
* fix(process): queue observed output before reactive rendering actions
* test: prune redundant cases and strengthen boundary assertions
* fix(cli): route native value tracing through shared workflows
* test: replace synthetic success with real workflows and captured data
* fix(catalog): separate portable metadata from native host availability
2026-10-04 16:02:36 +08:00
ed933d1893
feat(native): add investigation features ( #486 )
...
* feat(native): add UI and dispatch investigation workflows
* feat(ghidra): support macOS host validation
* docs: update native investigation capabilities
* feat(artifacts): decode compiled Interface Builder archives
* feat(ghidra): expose bounded p-code value flow
* test(ghidra): split host and cross-format verification
* fix(verify): follow complete result contracts
* refactor: remove unused authorization and schema helpers
* refactor: remove unused evidence result alias
* fix(ghidra): report jump-table evidence precisely
* fix(verify): align browser scenario fixture schema
* fix(setup): compare parsed client config structurally
* test(ghidra): verify AArch64 jump-table mappings
* fix(ghidra): recover AArch64 byte jump tables
* test(artifacts): verify compiled interface builder archives
* feat(native): trace UI actions through handlers
* fix(tests): update native trace and shutdown fixtures
* fix(verification): diagnose browser scenario failures
* fix(browser): wrap scenario snapshots in capture state
* fix(native): bind and bound investigation workflows
* fix(artifacts): preserve bounded interface builder evidence
* fix(ghidra): enforce admitted hosts and preflight tools
* fix(native): preserve trace cancellation and bounds
* test(application): expect bound analysis target evidence
* fix(native): preserve investigation bounds and cancellation
* fix(application): preserve bundle and unresolved trace evidence
* style(test): format artifact subject fixture
2026-09-30 00:41:05 +08:00
ea853cebde
test(conformance): remove fixture generator test option
2026-09-29 18:00:47 +08:00
a5797c5be6
chore(ghidra): align supported release to 12.1.4
2026-09-29 17:36:46 +08:00
dfad09e3b5
refactor(managed): derive inspection from PE CLI extents
2026-09-29 17:35:41 +08:00
ecf3ed8bdb
refactor(tools): remove remaining arbitrary workflow caps
2026-09-29 17:00:06 +08:00
2f08c7c932
refactor(tools): remove artificial analysis ceilings
2026-09-29 16:29:23 +08:00
5dd3b4655e
refactor(browser): remove arbitrary capture ceilings
2026-09-29 15:31:27 +08:00
2a6eb41147
refactor(tools): return complete analysis results inline
2026-09-29 14:53:50 +08:00
c34efca4cd
refactor(files): use caller paths for local evidence files
2026-09-29 14:53:20 +08:00
20152a9872
refactor(analysis): remove fixed result quotas
2026-09-29 13:57:24 +08:00
e8c56e0c0a
refactor(electron): retain complete active observations
2026-09-29 12:42:24 +08:00
bd0e341572
refactor(tools): remove redundant limits and acknowledgements
2026-09-29 10:53:45 +08:00
7ba3580c86
refactor(artifacts): select extraction by logical path
2026-09-29 10:53:33 +08:00
7acac615ca
refactor(contracts): simplify workflows and drop readiness tool
2026-09-29 09:22:44 +08:00
0fe96d92df
refactor(artifacts): consolidate inventory into inspection
2026-09-29 09:22:24 +08:00
a66e43a99d
fix(ghidra): return complete native analysis results
2026-09-29 08:45:49 +08:00
5457f4a2bc
refactor(schema): remove data-only version markers
2026-09-29 08:45:36 +08:00
a2a3243ea8
refactor: return complete analysis results inline
2026-09-29 08:07:24 +08:00
81996df7a5
refactor: remove cross-version investigation workflow
2026-09-29 08:06:43 +08:00
0d96275b68
refactor: return complete tool results inline
2026-09-29 07:08:46 +08:00
2160d4fae5
fix: consolidate boundary ownership and cleanup failure paths ( #477 )
2026-09-08 10:59:13 +08:00
e91c8c39c2
refactor(test): colocate pure-domain tests and reduce test debt ( #471 )
...
* refactor(test): colocate pure-domain tests and reduce test debt
Move focused immutable domain/contracts/adapter tests from
tests/composition/** beside their production owners under src/** as
colocated *.test.ts/*.fixture.ts, and relocate persistence-shaped
composition tests under tests/boundary/filesystem/**. Update import
paths, the Vitest project topology (shared worker context for pure
domain/contracts and recording-port service projects), the test
migration ledger, testing docs, and AGENTS.md to match.
Generated with [Devin](https://devin.ai )
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
* docs: remove test migration ledger
The cutover is complete and the ledger is no longer referenced anywhere
in source, scripts, or the docs gate. Drop the standalone artifact.
Generated with [Devin](https://devin.ai )
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
* docs: clean up stale migration artifacts
Remove empty directories left by the test migration and replace the
"final cutover" language in docs/testing.md with standing PR guidance
that no longer references the completed migration.
Generated with [Devin](https://devin.ai )
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
* fix: repair CI failures from schema, knip, and stale generated artifacts
Three root causes fixed:
1. catalog-schemas.mjs: valuesAt only traversed anyOf from Zod's
toJSONSchema, not oneOf. The webScreenshotDiffSchema change to a
discriminated union produces oneOf, so the product catalog generator
could not derive the web_screenshot_diff schema version. Add oneOf
traversal.
2. conformancePackage.ts: the test rewrite removed the only imports of
ScenarioManifest, ReplayPlan, ShimPlan, and ExpectedEvidence, making
them unused exports that knip flags. Remove the dead type aliases.
3. Regenerate stale artifacts (product catalog, MCP tool catalog, skill
metadata, conformance manifest) that drifted from the source changes.
Generated with [Devin](https://devin.ai )
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
---------
Co-authored-by: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-08-10 14:57:44 +08:00
1783bf6dfd
fix(npm): preserve explicit setup versions ( #465 )
...
* fix(npm): refresh stale setup bootstraps
* fix(npm): preserve explicit setup versions
* docs: distinguish first-run and refresh setup
2026-08-10 02:59:52 +08:00
b8a9da0c0f
refactor(mcp): make analysis states unrepresentable ( #468 )
...
* refactor(config): parse capability settings into exact states
* refactor(runtime): encode replay and process outcomes exactly
* refactor: make analysis states unrepresentable
* refactor(mcp): register canonical schemas with SDK
* fix: preserve capability and catalog invariants
* fix(build): remove stale compiled modules
* fix(replay): update real verifier policy dependency
* fix(package): verify the complete MCP catalog
* fix(test): supply complete replay reload policy
* refactor(contracts): centralize output schema lookup
* refactor(mcp): delegate protocol boundaries to SDK
* fix(browser): approve real source capture
* fix(mcp): preserve catalog guidance
2026-08-10 02:28:11 +08:00
8f229ede70
feat(electron): add autonomous Electron runtime analysis ( #464 )
...
* feat: add autonomous Electron runtime analysis
* feat(electron): add lifecycle and boundary telemetry
* feat(electron): capture runtime boundary evidence
* fix(electron): package boundary hook helper
* feat(electron): report active capture coverage
* fix(electron): account for bring-your-own runtime
* feat(electron): expand agent-owned runtime scenarios
* fix(ghidra): keep fixture credentials out of argv
* perf(test): serialize local test and docs workloads
* fix(electron): harden active runtime capture
* fix(inspector): require exact runtime target authorization
* fix(docs): make managed manifest host independent
* fix(ci): make generated catalog portable
* fix: unblock autonomous command and electron flows
* fix(electron): close popup and detached helper gaps
2026-08-05 19:07:46 +08:00
51559245d2
Merge pull request #461 from morluto/agent/comprehensive-repository-audit
...
fix: harden evidence lifecycle and MCP contracts
2026-08-04 03:00:25 +08:00
1f8ad7bc68
test(package): verify npx upgrade on published releases
2026-08-01 15:10:12 +08:00
ba098f24e5
test(eval): cover navigation and address tool routing
2026-07-29 17:36:51 +00:00
281e41f766
fix(verify): follow dynamic Hopper tool availability
2026-07-29 07:18:48 +00:00
c4cd0330e0
fix(catalog): digest provider projections
2026-07-26 16:07:12 +00:00
7157ab0b70
test(mcp): stabilize lazy-loading verification
2026-07-26 15:26:41 +00:00
fecddc0549
perf(mcp): reduce cold-start work
2026-07-26 15:02:58 +00:00
90bb1610f5
fix(setup): refresh stale local npx bootstrap
2026-07-26 06:39:28 +00:00
4716fa2ece
test: add critical provider workflow coverage
2026-07-25 15:12:51 +00:00
521139d4a5
feat(native): inspect API boundaries with evidence
2026-07-25 14:29:28 +00:00
9522adf19a
test(package): prove artifact cleanup and identity
2026-07-25 14:29:08 +00:00
095c75df23
fix(ci): allow slower real browser startup
2026-07-24 15:28:32 +00:00
1c9e50814e
fix(ci): repair cross-platform package verification
2026-07-24 15:22:24 +00:00
24b3dc41df
fix(browser): contain scenario pages and preserve inputs
2026-07-24 14:14:15 +00:00
f0069cbee4
fix(browser): require storage fingerprint approval
2026-07-24 14:13:57 +00:00
035e1144b0
feat(server): advertise available tools dynamically
2026-07-24 13:18:58 +00:00
38ff7418ef
feat(reconstruction): evaluate end-to-end readiness
2026-07-24 13:18:10 +00:00
8271650945
feat(runtime): add passive V8 Inspector observation
2026-07-24 13:16:35 +00:00
1ac3118aa2
feat(browser): capture controlled Playwright scenarios
2026-07-24 13:16:01 +00:00
8e7709d35a
feat(analysis): add bounded memory and call tracing
2026-07-24 13:14:01 +00:00
13f3372a8b
fix(test): use direct Node launcher on macOS
2026-07-24 03:31:26 +00:00
0b7013134c
test(package): stabilize fake Hopper ownership
2026-07-24 00:33:29 +09:00
e0bc7fd973
fix(hopper): add bounded analysis recovery
2026-07-24 00:33:29 +09:00
morluto
N0zoM1z0