rea/tests/boundary/mcp
morluto 3af3811ab0
fix: integrate 24 reviewed browser/native/semantics corrections (#815)
* fix(reference): resolve emitted extensions to TypeScript source

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* test(reference): retain legitimate declaration import counterparts

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* fix(mcp): recognize implicit form elicitation capability

Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>

* fix(ghidra): reject contradictory NativeAOT reports

* fix(native): preserve thin architectures across echoed filename lines

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(native): preserve app bundle executable filename whitespace

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(doctor): validate Node-wrapped client policy

Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>

* fix(reference): preserve observed entry failure reasons

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* fix(artifacts): verify opaque bytes before reusing inventory identities

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* fix(browser): resolve DOM destinations against document base URL

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* fix: recover serialized native NIB view hierarchy

Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>

* ci: exercise native compiled NIB hierarchy regressions

Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>

* fix(deps): remediate reachable archive-parsing advisories

Two high-severity advisories are reachable from untrusted target content:

- @xmldom/xmldom 0.9.10 (via plist) parses XML plist bytes from analyzed
  app bundles in the keyed-archive reader. Refreshed to 0.9.12.
- brace-expansion 5.0.7 (via @electron/asar -> minimatch) is reached while
  analyzing untrusted ASAR archives. Refreshed to 5.0.12.

Both are in-range patch updates (plist declares ^0.9.10, minimatch declares
^5.0.5), so no source or API change is required and no direct dependency
declaration moves. Lockfile-only change.

The remaining smol-toml advisory is not included: it parses operator-owned
client configuration rather than untrusted target content, and its fix moves
outside the declared range and changes leading-BOM handling.

* fix(semantics): link wrapped arrow Promise returns

* fix(reconstruction): preserve unknown graph limitations

* fix(native): preserve exact code signing identifiers

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(native): recognize only whole otool command headers

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(native): retain nm-proven literal export names

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(javascript): project decoded file URL paths

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix: preserve explicit source-relative URL observation spelling

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(native): project Mach-O evidence into container file offsets

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(browser): normalize referrer policy fallback lists

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

---------

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>
Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>
Co-authored-by: Rudy Celekli <rudy@gradiahq.com>
Co-authored-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>
Co-authored-by: Kaoru0822 <aisakamimaki@gmail.com>
Co-authored-by: DeryFerd <deryferdikao125@gmail.com>
2026-10-07 10:33:10 +08:00
..
androidAnalysisMcp.test.ts feat(android): integrate static APK analysis with headless JADX (#738) 2026-10-06 12:46:48 +00:00
artifactEntryOrderMcp.test.ts fix(artifacts): resolve parents after archive enumeration (#578) 2026-10-05 23:06:46 +08:00
artifactMcp.inlineInventory.test.ts feat(native): add inspection primitives, dispatch traces and approved UI observation (#500) 2026-10-04 16:02:36 +08:00
artifactMcp.test.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
browserMcp.test.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
browserScenarioMcp.test.ts refactor(domain): split error taxonomy into thematic modules (#636) 2026-10-06 05:57:38 +08:00
bundleComparisonMcp.test.ts refactor(tools): return complete analysis results inline 2026-09-29 14:53:50 +08:00
clientCapabilities.test.ts fix: integrate 24 reviewed browser/native/semantics corrections (#815) 2026-10-07 10:33:10 +08:00
createServer.test.ts refactor!: simplify runtime tools and remove replay engines (#572) 2026-10-05 21:15:04 +08:00
electronMcp.test.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
enhancedTools.01-lists-the-complete-target-open.test.ts refactor(domain): split error taxonomy into thematic modules (#636) 2026-10-06 05:57:38 +08:00
enhancedTools.03-returns-typed-graph-failures-and.test.ts refactor(domain): split error taxonomy into thematic modules (#636) 2026-10-06 05:57:38 +08:00
enhancedTools.04-uses-complete-inventories-inline.test.ts feat(native): add inspection primitives, dispatch traces and approved UI observation (#500) 2026-10-04 16:02:36 +08:00
enhancedTools.06-rejects-incomplete-function-dossiers-at.test.ts test: replace implementation lock-in with behavioural assertions (#498) 2026-10-03 23:22:07 +08:00
enhancedTools.callPathsAndBatches.test.ts feat(firmware): integrate Binwalk and Unblob analysis 2026-10-06 14:16:04 +00:00
enhancedTools.inputValidation.test.ts test: replace implementation lock-in with behavioural assertions (#498) 2026-10-03 23:22:07 +08:00
enhancedToolsHarness.ts test: replace implementation lock-in with behavioural assertions (#498) 2026-10-03 23:22:07 +08:00
evidenceBundleInline.test.ts refactor: return complete tool results inline 2026-09-29 07:08:46 +08:00
firmwareMcp.test.ts feat(firmware): integrate Binwalk and Unblob analysis 2026-10-06 14:16:04 +00:00
functionComparisonMcp.test.ts fix(reconstruction): accept function comparison source parameters 2026-10-06 02:11:10 -07:00
ghidraEvidenceMcp.test.ts feat(ida): add read-only GUI and headless MCP providers (#754) 2026-10-07 01:47:05 +08:00
ghidraFailureDiagnostics.test.ts fix(ghidra): preserve request and shutdown failure diagnostics (#647) 2026-10-06 12:13:52 +08:00
ghidraMcpHarness.ts feat(ghidra): add atomic function annotation edits (#709) 2026-10-06 17:24:33 +08:00
ghidraNativeApiMcp.test.ts fix(ghidra): recover evidenced switch cases and default targets (#579) 2026-10-05 22:54:17 +08:00
ghidraRoutingMcp.test.ts feat(native): add inspection primitives, dispatch traces and approved UI observation (#500) 2026-10-04 16:02:36 +08:00
idaTransport.test.ts feat(ida): add read-only GUI and headless MCP providers (#754) 2026-10-07 01:47:05 +08:00
inlineEvidenceCompositionMcp.test.ts fix(mcp): return complete inline Evidence records (#585) 2026-10-06 00:10:31 +08:00
investigationAnalysisMcp.test.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
javascriptRuntimeObservationMcp.test.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
mainErrors.test.ts feat(native): add inspection primitives, dispatch traces and approved UI observation (#500) 2026-10-04 16:02:36 +08:00
mainReload.test.ts refactor!: simplify runtime tools and remove replay engines (#572) 2026-10-05 21:15:04 +08:00
managedMcp.test.ts fix!: repair boundary contracts across CLI and MCP (#597) 2026-10-06 00:50:38 +08:00
mcpDoctor.test.ts refactor(mcp): make analysis states unrepresentable (#468) 2026-08-10 02:28:11 +08:00
mcpStartupPolicy.test.ts feat(native): add inspection primitives, dispatch traces and approved UI observation (#500) 2026-10-04 16:02:36 +08:00
officialTools.test.ts feat(ghidra): add atomic function annotation edits (#709) 2026-10-06 17:24:33 +08:00
processEvidenceIdentityMcp.test.ts fix(evidence): admit current process provider identity 2026-10-06 01:43:45 -07:00
processTraceAdaptersParity.test.ts refactor(tools): remove artificial analysis ceilings 2026-09-29 16:29:23 +08:00
progressMcp.test.ts refactor(domain): split error taxonomy into thematic modules (#636) 2026-10-06 05:57:38 +08:00
promptCompletion.test.ts test: remove stale limits and handoff expectations 2026-09-29 17:00:16 +08:00
promptMcp.test.ts fix(mcp): preserve exact guided prompt context (#761) 2026-10-07 02:36:31 +08:00
providerSelectionMcp.test.ts refactor: return complete analysis results inline 2026-09-29 08:07:24 +08:00
reconstructionCoverageMcp.test.ts feat(native): add inspection primitives, dispatch traces and approved UI observation (#500) 2026-10-04 16:02:36 +08:00
reconstructionObligationLedgerMcp.test.ts refactor: return complete analysis results inline 2026-09-29 08:07:24 +08:00
retainedApplicationEvidenceMcp.test.ts feat(evidence): accept exact retained application references (#734) 2026-10-06 20:17:59 +08:00
serverIdentity.test.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
serverLifecycleMcp.test.ts refactor(domain): split error taxonomy into thematic modules (#636) 2026-10-06 05:57:38 +08:00
serverUnknownsMcp.test.ts fix(process): scope comparison unknowns to their evidence (#732) 2026-10-06 19:16:49 +08:00
serverWorkflowMcp.test.ts feat(native): add inspection primitives, dispatch traces and approved UI observation (#500) 2026-10-04 16:02:36 +08:00
sessionMcp.test.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
sessionMcpHarness.ts refactor(tools): return complete analysis results inline 2026-09-29 14:53:50 +08:00
shutdown.test.ts fix(mcp): retain shutdown failure diagnostics 2026-10-06 03:58:12 -07:00
toolRegistrationOptions.test.ts fix(skill): remove obsolete grants and audit tool effects 2026-10-06 01:40:58 +08:00
toolResult.test.ts refactor(domain): split error taxonomy into thematic modules (#636) 2026-10-06 05:57:38 +08:00
toolSchemaValidity.test.ts refactor!: simplify runtime tools and remove replay engines (#572) 2026-10-05 21:15:04 +08:00