rea/src/contracts
ysopwnable 01be082e9e
feat(browser): trace captured website module imports (#879)
* feat(browser): trace captured website module imports

Compose verified exported scripts, inert native import syntax and a narrow
Chromium resolution port. Preserve query/fragment identity, import-map context,
all reported capture candidates and explicit unknown execution. Share named
CLI/MCP contracts and retain native reports, diagnostics and cleanup failures.

Add focused boundary regressions and a real module-loading oracle to the
existing conditional Chrome lane. No captured application code is executed
by module tracing, and no selected website asset is refetched.

Refs #851, #774

Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)

* fix(browser): preserve module contexts and source bindings

Keep capture completeness inline, validate actual source text against its
digest, and separate unsupported URL contexts from malformed input.
Use the importer origin for native module resolution and the selected map
base independently, including mixed HTTP/HTTPS and escaped HTML attributes.

Refs #851, #774

Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)
2026-10-07 14:59:52 +08:00
..
android refactor(android): group layered source and verification (#873) 2026-10-07 14:09:57 +08:00
firmware refactor(firmware): group layered source and verification (#878) 2026-10-07 14:44:52 +08:00
analysisSearchContract.ts refactor(tools): remove redundant limits and acknowledgements 2026-09-29 10:53:45 +08:00
applicationToolContracts.ts refactor(android): group layered source and verification (#873) 2026-10-07 14:09:57 +08:00
applicationWorkflowInputContracts.ts feat(evidence): accept exact retained application references (#734) 2026-10-06 20:17:59 +08:00
artifactComparisonExample.ts refactor(domain): consolidate canonical ordering and digest helpers (#624) 2026-10-06 04:55:26 +08:00
artifactToolContracts.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
browserProviderToolContracts.ts feat(browser): capture controlled Playwright scenarios 2026-07-24 13:16:01 +00:00
browserScenarioToolContracts.ts feat(browser): capture correlated network content and lifecycle evidence (#797) 2026-10-07 04:35:49 +08:00
browserToolContracts.ts refactor!: simplify runtime tools and remove replay engines (#572) 2026-10-05 21:15:04 +08:00
contractSnapshot.test.ts refactor(firmware): group layered source and verification (#878) 2026-10-07 14:44:52 +08:00
electronToolContracts.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
enhancedInputs.ts refactor!: simplify runtime tools and remove replay engines (#572) 2026-10-05 21:15:04 +08:00
enhancedToolContracts.ts refactor(contracts): split tool contracts by family (#634) 2026-10-06 05:20:11 +08:00
errorSchemas.ts fix(cli): fail when JSON input files cannot be parsed 2026-10-06 03:02:22 -07:00
evidenceInputContracts.ts feat(evidence): accept exact retained application references (#734) 2026-10-06 20:17:59 +08:00
functionComparisonExample.ts refactor: return complete tool results inline 2026-09-29 07:08:46 +08:00
functionInstructionContract.ts refactor: return complete tool results inline 2026-09-29 07:08:46 +08:00
functionWorkflowToolContracts.ts fix(ghidra): recover evidenced switch cases and default targets (#579) 2026-10-05 22:54:17 +08:00
hopperMemoryContracts.ts refactor(tools): remove redundant limits and acknowledgements 2026-09-29 10:53:45 +08:00
investigationExamples.ts refactor(tools): remove artificial analysis ceilings 2026-09-29 16:29:23 +08:00
javascriptApplicationWorkflowExamples.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
javascriptRecoveryToolContracts.ts feat(javascript): recover readable modules with Wakaru (#848) 2026-10-07 12:46:13 +08:00
javascriptRuntimeObservationToolContracts.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
javascriptRuntimeReconciliationExample.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
managedToolContracts.ts fix!: repair boundary contracts across CLI and MCP (#597) 2026-10-06 00:50:38 +08:00
managedWorkflowExamples.ts refactor!: simplify runtime tools and remove replay engines (#572) 2026-10-05 21:15:04 +08:00
managedWorkflowToolContracts.ts refactor!: simplify runtime tools and remove replay engines (#572) 2026-10-05 21:15:04 +08:00
mobileApplicationGraphExamples.ts feat(application): wire Android and Apple inventory graph tools (#852) 2026-10-07 13:34:48 +08:00
nativeToolContracts.ts fix(native): pass Swift symbols to swift-demangle as operands 2026-10-06 22:40:19 -07:00
officialToolContracts.ts feat(ghidra): add atomic function annotation edits (#709) 2026-10-06 17:24:33 +08:00
processCaptureExample.ts refactor(test): keep coverage at behavioral boundaries (#474) 2026-08-11 18:34:32 +08:00
promptContracts.test.ts feat(native): add inspection primitives, dispatch traces and approved UI observation (#500) 2026-10-04 16:02:36 +08:00
promptContracts.ts fix(target): explain the JavaScript directory analysis route (#733) 2026-10-06 19:53:08 +08:00
providerSelection.ts refactor: return complete tool results inline 2026-09-29 07:08:46 +08:00
reconstructionReadinessExample.ts refactor(analysis): remove fixed result quotas 2026-09-29 13:57:24 +08:00
sessionLifecycleInputs.ts feat(ghidra): admit explicit DOS COM analysis (#702) 2026-10-06 16:26:40 +08:00
sessionStatusContract.ts refactor: return complete tool results inline 2026-09-29 07:08:46 +08:00
sessionToolContracts.ts feat(ghidra): admit explicit DOS COM analysis (#702) 2026-10-06 16:26:40 +08:00
sessionToolSchemas.ts chore(deps): finish toolchain upgrades and drop dead weight (#644) 2026-10-06 06:02:02 +08:00
toolContractExamples.ts feat(ghidra): add atomic function annotation edits (#709) 2026-10-06 17:24:33 +08:00
toolContractHelpers.ts refactor: return complete tool results inline 2026-09-29 07:08:46 +08:00
toolContractTypes.ts feat(firmware): integrate Binwalk and Unblob analysis 2026-10-06 14:16:04 +00:00
toolContracts.test.ts feat(browser): trace captured website module imports (#879) 2026-10-07 14:59:52 +08:00
toolContracts.ts refactor(firmware): group layered source and verification (#878) 2026-10-07 14:44:52 +08:00
toolEffects.ts feat(browser): trace captured website module imports (#879) 2026-10-07 14:59:52 +08:00
toolOutputSchemaGroups.ts feat(ghidra): add atomic function annotation edits (#709) 2026-10-06 17:24:33 +08:00
toolOutputSchemaPrimitives.ts feat(ghidra): admit explicit DOS COM analysis (#702) 2026-10-06 16:26:40 +08:00
toolOutputSchemas.ts refactor(domain): split analysis boundaries 2026-07-18 05:49:14 +00:00
toolSchemaMetadata.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
unknownContractExamples.ts refactor(tools): remove redundant limits and acknowledgements 2026-09-29 10:53:45 +08:00
webScriptToolContracts.ts feat(browser): trace captured website module imports (#879) 2026-10-07 14:59:52 +08:00
workflowInputContracts.test.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00