shifathosn
/
rea
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
rea/tests/boundary/browser
History
morluto 3af3811ab0
fix: integrate 24 reviewed browser/native/semantics corrections (#815) 
* fix(reference): resolve emitted extensions to TypeScript source

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* test(reference): retain legitimate declaration import counterparts

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* fix(mcp): recognize implicit form elicitation capability

Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>

* fix(ghidra): reject contradictory NativeAOT reports

* fix(native): preserve thin architectures across echoed filename lines

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(native): preserve app bundle executable filename whitespace

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(doctor): validate Node-wrapped client policy

Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>

* fix(reference): preserve observed entry failure reasons

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* fix(artifacts): verify opaque bytes before reusing inventory identities

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* fix(browser): resolve DOM destinations against document base URL

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* fix: recover serialized native NIB view hierarchy

Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>

* ci: exercise native compiled NIB hierarchy regressions

Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>

* fix(deps): remediate reachable archive-parsing advisories

Two high-severity advisories are reachable from untrusted target content:

- @xmldom/xmldom 0.9.10 (via plist) parses XML plist bytes from analyzed
  app bundles in the keyed-archive reader. Refreshed to 0.9.12.
- brace-expansion 5.0.7 (via @electron/asar -> minimatch) is reached while
  analyzing untrusted ASAR archives. Refreshed to 5.0.12.

Both are in-range patch updates (plist declares ^0.9.10, minimatch declares
^5.0.5), so no source or API change is required and no direct dependency
declaration moves. Lockfile-only change.

The remaining smol-toml advisory is not included: it parses operator-owned
client configuration rather than untrusted target content, and its fix moves
outside the declared range and changes leading-BOM handling.

* fix(semantics): link wrapped arrow Promise returns

* fix(reconstruction): preserve unknown graph limitations

* fix(native): preserve exact code signing identifiers

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(native): recognize only whole otool command headers

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(native): retain nm-proven literal export names

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(javascript): project decoded file URL paths

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix: preserve explicit source-relative URL observation spelling

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(native): project Mach-O evidence into container file offsets

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(browser): normalize referrer policy fallback lists

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

---------

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>
Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>
Co-authored-by: Rudy Celekli <rudy@gradiahq.com>
Co-authored-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>
Co-authored-by: Kaoru0822 <aisakamimaki@gmail.com>
Co-authored-by: DeryFerd <deryferdikao125@gmail.com>
 		2026-10-07 10:33:10 +08:00
..
browserProcessStartup.test.ts test: overhaul deterministic suite architecture 2026-07-29 22:00:38 +00:00
cdpBrowserProvider.discovery_authorization.test.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
cdpBrowserProvider.document_script.test.ts fix(browser): distinguish WebMCP registration frame owners (#813) 2026-10-07 10:19:49 +08:00
cdpBrowserProvider.indexed_db.test.ts fix: capture IndexedDB object-store record fingerprints (#809) 2026-10-07 10:18:03 +08:00
cdpBrowserProvider.lifecycle_failures.test.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
cdpBrowserProvider.network.test.ts refactor(tools): remove redundant limits and acknowledgements 2026-09-29 10:53:45 +08:00
cdpBrowserProvider.sensitive_data.test.ts fix(browser): fingerprint cookies at the selected page URL (#763) 2026-10-07 10:11:57 +08:00
cdpBrowserProvider.support.ts test: overhaul deterministic suite architecture 2026-07-29 22:00:38 +00:00
cdpBrowserProvider.targetInventory.test.ts refactor(observation): return complete inventories 2026-09-29 13:02:30 +08:00
cdpBrowserProvider.timelineEvents.test.ts refactor(browser): return complete observation evidence 2026-09-29 13:56:49 +08:00
cdpCaptureDocuments.test.ts fix!: repair boundary contracts across CLI and MCP (#597) 2026-10-06 00:50:38 +08:00
cdpCaptureNavigation.test.ts fix(browser): ignore duplicate frame navigations and read block-form source map directives (#546) 2026-10-05 17:25:16 +08:00
cdpCleanupCancellation.test.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
cdpConnection.test.ts refactor(tools): return complete analysis results inline 2026-09-29 14:53:50 +08:00
cdpElectronProvider.test.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
cdpJsonShapeComparison.test.ts fix(comparison): break JSON shape collation ties 2026-10-06 01:01:16 -07:00
cdpObservationResourceTypes.test.ts fix(browser): keep subresource redirects out of page navigation scope (#524) 2026-10-05 14:58:14 +08:00
cdpSafeMetadata.test.ts fix: integrate 24 reviewed browser/native/semantics corrections (#815) 2026-10-07 10:33:10 +08:00
cdpScreenshotDocumentIdentity.test.ts fix(browser): distinguish duplicate screenshot frame events (#612) 2026-10-06 02:10:00 +08:00
electronActiveHook.test.ts refactor(browser): remove arbitrary capture ceilings 2026-09-29 15:31:27 +08:00
javascriptRuntimeObservation.test.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
javascriptRuntimeTargetLocations.test.ts fix(inspector): preserve lossy Node discovery locations (#542) 2026-10-05 16:55:42 +08:00
webCaptureDiff.test.ts fix(web): retain uncertainty for incomplete capture inventories (#513) 2026-10-05 14:58:24 +08:00
webSourceMapFetcher.test.ts fix(browser): identify NodeNext TypeScript original source artifacts (#811) 2026-10-07 10:20:51 +08:00
webSourceMapResponseCleanup.test.ts fix(browser): release discarded source-map response bodies (#611) 2026-10-06 02:09:50 +08:00