shifathosn
/
rea
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
rea/tests/fixtures
History
Ysopwnable 2bf3663f65
feat(browser): inspect historical web network captures (#992) 
* feat(browser): inspect retained HAR and mitmproxy capture evidence

Add independent offline format adapters, inline CLI/MCP evidence, bounded
owned decoder processes, and real producer verification.

Refs #882

Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)

* fix(browser): preserve capture boundaries during cancellation and decoding

Honor cancellation during owned-command cleanup, retain opaque HAR
extension content, and clean verifier resources on every failure path.

Refs #882

Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)

* fix(browser): exclude sensitive capture fields across representations

Normalize known native transport URLs for both bytes and strings, including backups. Exclude explicitly sensitive text fields with null so redaction markers cannot reintroduce declared literals. Cover both provider identities in catalog conformance.

Refs #882

Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)

* fix(browser): exclude sensitive capture identities and bound diagnostics

* fix(browser): validate excluded HAR subtrees before projection

* fix(browser): distinguish capture input limits from decoder failures

* fix(browser): preserve decoder failure categories

* fix(browser): validate excluded native credential values

* test(browser): report capture verifier assertions directly

* fix(browser): classify native representation failures precisely

* fix(browser): exclude URL userinfo after header whitespace

* fix(browser): preserve capture evidence and failure boundaries

* fix(browser): exclude sensitive literals from capture limitations

* test(browser): check limitation values without JSON syntax

* fix(browser): preserve acquisition integrity and exclude selection diagnostics

* fix(browser): preserve capture acquisition and declaration boundaries

* fix(mcp): project sensitive capture argument validation

* fix: preserve capture bytes and prelaunch cancellation

* fix(browser): exclude sensitive HAR record ancestry

* fix(browser): preserve transport URL and parameter exclusions

* fix(browser): preserve numeric redaction and canonical capture provenance

* fix(browser): cover derived capture values and ownership preparation deadlines

* fix(browser): exclude explicitly sensitive artifact digests

* chore: regenerate generated metadata

* fix(browser): reject lossy HAR member normalization

* test(browser): assert the advertised unsupported-profile outcome

* fix(browser): preserve JSON visitor nesting failure locations

* fix(browser): exclude explicitly sensitive native source ranges

---------

Co-authored-by: Kaoru0822 <208281322+kaoru0822-kitauji@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 		2026-10-08 07:53:41 +08:00
..
android fix(android)!: preserve JVM settings and reuse metadata sessions (#908) 2026-10-07 16:50:41 +08:00
firmware refactor(firmware): group layered source and verification (#878) 2026-10-07 14:44:52 +08:00
golden refactor!: simplify runtime tools and remove replay engines (#572) 2026-10-05 21:15:04 +08:00
inspector refactor: give Inspector its own capability directory (#869) 2026-10-07 13:53:25 +08:00
interface-builder fix(artifacts): project compiled AppKit actions from the control to its target (#905) 2026-10-07 17:40:18 +08:00
javascript-recovery refactor(javascript): group application workflows and verification (#896) 2026-10-07 16:03:37 +08:00
native-macos fix(native): retain re-exported Mach-O library dependencies (#516) 2026-10-05 14:59:48 +08:00
nativeaot feat(ghidra): integrate optional NativeAOT metadata recovery (#748) 2026-10-07 00:57:08 +08:00
replay feat(application): add isolated JavaScript replay 2026-07-16 15:45:55 +09:00
windows feat(ghidra): enable Windows x64 read-only analysis (#699) 2026-10-06 16:53:33 +08:00
analysisExecution.ts Add evidence-backed investigation workflows 2026-07-12 21:12:18 +00:00
artifactEntryOrder.ts fix(artifacts): resolve parents after archive enumeration (#578) 2026-10-05 23:06:46 +08:00
artifactEvidence.ts feat(native): add inspection primitives, dispatch traces and approved UI observation (#500) 2026-10-04 16:02:36 +08:00
binarySession.ts refactor(binary): group session selection and snapshot ownership (#886) 2026-10-07 15:05:29 +08:00
bridgeSearchProbe.py refactor(tools): return complete analysis results inline 2026-09-29 14:53:50 +08:00
captureGhidraLaunch.cmd feat(ghidra): launch bounded Windows headless sessions 2026-07-17 03:05:19 +09:00
captureGhidraLaunch.mjs test: eliminate fixture races and prune redundant scaffolding (#849) 2026-10-07 12:25:37 +08:00
contractPresentation.mjs refactor(binary): move production composition outside application workflows (#965) 2026-10-07 21:56:58 +08:00
directoryReaderFifoProbe.mjs fix(artifacts): harden reader lifecycle boundaries (#951) 2026-10-07 20:00:24 +08:00
electronBoundaryApplication.ts feat(electron): map static process and IPC boundaries 2026-07-16 07:56:13 +09:00
fakeCdpBrowser.ts feat(browser): attribute native execution and listener sources (#917) 2026-10-07 21:45:07 +08:00
fakeCdpBrowserEvents.ts fix(browser): preserve authorized redirect hops (#986) 2026-10-08 01:08:31 +08:00
fakeCdpBrowserResults.ts fix(browser): distinguish WebMCP registration frame owners (#813) 2026-10-07 10:19:49 +08:00
fakeCdpBrowserTargets.ts refactor: return complete tool results inline 2026-09-29 07:08:46 +08:00
fakeCdpBrowserTypes.ts fix(browser): preserve authorized redirect hops (#986) 2026-10-08 01:08:31 +08:00
fakeGhidra.mjs test(providers): verify framing through client socket boundaries 2026-10-08 04:03:23 +08:00
fakeHopper.mjs test(providers): verify framing through client socket boundaries 2026-10-08 04:03:23 +08:00
fakeLauncher.mjs refactor: return complete tool results inline 2026-09-29 07:08:46 +08:00
filesystemSnapshotFifoProbe.mjs fix(process): harden filesystem snapshot identity and cancellation (#956) 2026-10-07 23:45:23 +08:00
ghidraRuntime.ts feat(ghidra): enable Windows x64 read-only analysis (#699) 2026-10-06 16:53:33 +08:00
historicalHar.ts feat(browser): inspect historical web network captures (#992) 2026-10-08 07:53:41 +08:00
hopperBridgeFacadeProbe.py refactor!: simplify runtime tools and remove replay engines (#572) 2026-10-05 21:15:04 +08:00
hopperCleanupTimeout.py fix(linux): improve Hopper reliability and CachyOS support (#963) 2026-10-07 23:16:48 +08:00
hopperDialogDetection.py fix(linux): improve Hopper reliability and CachyOS support (#963) 2026-10-07 23:16:48 +08:00
idaMcp.ts feat(ida): add read-only GUI and headless MCP providers (#754) 2026-10-07 01:47:05 +08:00
javascriptArtifactApplication.ts fix(electron): resolve package and dirname entrypoints by context 2026-07-17 21:30:24 +08:00
mcpDoctorExit.mjs feat: complete REA remediation program 2026-07-22 22:09:12 +09:00
mcpDoctorHang.mjs feat: complete REA remediation program 2026-07-22 22:09:12 +09:00
nativeCommands.ts fix(native): keep echoed codesign paths out of signature fields (#865) 2026-10-07 13:20:12 +08:00
optionalObservationProviders.ts refactor(javascript): group application workflows and verification (#896) 2026-10-07 16:03:37 +08:00
processFidelity.mjs fix(process): preserve partial evidence and verify detached cleanup (#1011) 2026-10-08 04:46:46 +08:00
processIdentity.mjs fix(process): honor disabled PID normalization in samples 2026-10-06 01:22:45 -07:00
processReactiveScenario.mjs test: replace implementation lock-in with behavioural assertions (#498) 2026-10-03 23:22:07 +08:00
processRunTokenParserProbe.swift fix(process): preserve partial evidence and verify detached cleanup (#1011) 2026-10-08 04:46:46 +08:00
processRunTokenSnapshotProbe.swift fix(process): preserve partial evidence and verify detached cleanup (#1011) 2026-10-08 04:46:46 +08:00
processSnapshotCancellation.mjs fix(process): harden filesystem snapshot identity and cancellation (#956) 2026-10-07 23:45:23 +08:00
providerProcess.mjs feat(electron): add autonomous Electron runtime analysis (#464) 2026-08-05 19:07:46 +08:00
providerProcess.ts feat(ghidra): enable Windows x64 read-only analysis (#699) 2026-10-06 16:53:33 +08:00
temporaryDirectory.ts test: replace implementation lock-in with behavioural assertions (#498) 2026-10-03 23:22:07 +08:00
webModuleTrace.ts feat(browser): trace captured website module imports (#879) 2026-10-07 14:59:52 +08:00
webRuntime.ts feat(browser): attribute native execution and listener sources (#917) 2026-10-07 21:45:07 +08:00
webScriptCapture.ts feat(web): export captured scripts for JavaScript application analysis (#801) 2026-10-07 05:24:32 +08:00
webSourceLocation.ts feat(browser): trace captured website source-map locations (#897) 2026-10-07 16:21:18 +08:00
x11ProbeHang.py feat: complete REA remediation program 2026-07-22 22:09:12 +09:00
x11ProbeOutput.py fix(process): retain provider output until streams close (#928) 2026-10-07 18:39:10 +08:00