87b9793c53
fix(javascript): trace wrapped Electron IPC paths in large bundles ( #1874 )
...
Co-authored-by: David <17119984+fengdwx@users.noreply.github.com>
2026-10-12 09:28:59 +08:00
85c1d2587a
feat(javascript): analyze selected application sources
...
Analyze exact selected sources in first-request order before unrelated
static scopes, preserving full artifact identity and byte verification.
Retain selection in CLI/MCP Evidence and summaries, with explicit unknowns
and partial coverage for unselected sources. Keep default full analysis.
Fixes #1848
Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
Co-authored-by: Kaoru0822 <208281322+kaoru0822-kitauji@users.noreply.github.com>
2026-10-12 04:07:14 +08:00
4999e4be2c
fix(javascript): isolate source analysis and retain bounded partial evidence ( #1651 )
...
* refactor(javascript): validate transferable file projections
* test(javascript): consume decoded module and static facts
* fix(javascript): isolate source analysis and retain bounded partial evidence
* test(javascript): verify cleanup retention and repeated source paths
2026-10-11 07:22:50 +08:00
7915ee5178
feat(javascript): record Electron integrity mismatches
2026-10-10 02:49:46 +08:00
b5e98915c6
fix(tools)!: simplify direct invocation and harden boundary contracts ( #555 )
...
Remove REA permission grants, scope ceilings, approval confirmations, and inert settings. Preserve selected local evidence, accept caller-chosen commands and paths, and report actual runtime failures.
Harden provider results, schema serialization, snapshot evidence binding, archive paths, source maps, native screenshots, managed EH parsing, and cancellation cleanup. Regenerate tool metadata and document direct invocation.
BREAKING CHANGE: Removed permission configuration and policy commands, approval fields, filesystem scope inputs, and fixed confirmation options. Process capture inherits the host environment and accepts command names; callers must refresh tool schemas and migrate removed fields.
2026-10-05 20:16:44 +08:00
ecf3ed8bdb
refactor(tools): remove remaining arbitrary workflow caps
2026-09-29 17:00:06 +08:00
2f08c7c932
refactor(tools): remove artificial analysis ceilings
2026-09-29 16:29:23 +08:00
2a6eb41147
refactor(tools): return complete analysis results inline
2026-09-29 14:53:50 +08:00
0e2738ffb6
refactor(browser): return complete observation evidence
2026-09-29 13:56:49 +08:00
7b3c797237
refactor(observation): internalize capture budgets
2026-09-29 12:16:10 +08:00
bd0e341572
refactor(tools): remove redundant limits and acknowledgements
2026-09-29 10:53:45 +08:00
0d96275b68
refactor: return complete tool results inline
2026-09-29 07:08:46 +08:00
2160d4fae5
fix: consolidate boundary ownership and cleanup failure paths ( #477 )
2026-09-08 10:59:13 +08:00
b8a9da0c0f
refactor(mcp): make analysis states unrepresentable ( #468 )
...
* refactor(config): parse capability settings into exact states
* refactor(runtime): encode replay and process outcomes exactly
* refactor: make analysis states unrepresentable
* refactor(mcp): register canonical schemas with SDK
* fix: preserve capability and catalog invariants
* fix(build): remove stale compiled modules
* fix(replay): update real verifier policy dependency
* fix(package): verify the complete MCP catalog
* fix(test): supply complete replay reload policy
* refactor(contracts): centralize output schema lookup
* refactor(mcp): delegate protocol boundaries to SDK
* fix(browser): approve real source capture
* fix(mcp): preserve catalog guidance
2026-08-10 02:28:11 +08:00
f0069cbee4
fix(browser): require storage fingerprint approval
2026-07-24 14:13:57 +00:00
d25e98c3f9
feat: complete REA remediation program
2026-07-22 22:09:12 +09:00
2bea40571d
refactor: finish lint cleanup
2026-07-18 05:49:14 +00:00
David
Ysopwnable
morluto
N0zoM1z0