shifathosn
/
rea
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
rea/scripts/lib
History
morluto 3af3811ab0
fix: integrate 24 reviewed browser/native/semantics corrections (#815) 
* fix(reference): resolve emitted extensions to TypeScript source

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* test(reference): retain legitimate declaration import counterparts

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* fix(mcp): recognize implicit form elicitation capability

Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>

* fix(ghidra): reject contradictory NativeAOT reports

* fix(native): preserve thin architectures across echoed filename lines

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(native): preserve app bundle executable filename whitespace

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(doctor): validate Node-wrapped client policy

Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>

* fix(reference): preserve observed entry failure reasons

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* fix(artifacts): verify opaque bytes before reusing inventory identities

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* fix(browser): resolve DOM destinations against document base URL

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>

* fix: recover serialized native NIB view hierarchy

Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>

* ci: exercise native compiled NIB hierarchy regressions

Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>

* fix(deps): remediate reachable archive-parsing advisories

Two high-severity advisories are reachable from untrusted target content:

- @xmldom/xmldom 0.9.10 (via plist) parses XML plist bytes from analyzed
  app bundles in the keyed-archive reader. Refreshed to 0.9.12.
- brace-expansion 5.0.7 (via @electron/asar -> minimatch) is reached while
  analyzing untrusted ASAR archives. Refreshed to 5.0.12.

Both are in-range patch updates (plist declares ^0.9.10, minimatch declares
^5.0.5), so no source or API change is required and no direct dependency
declaration moves. Lockfile-only change.

The remaining smol-toml advisory is not included: it parses operator-owned
client configuration rather than untrusted target content, and its fix moves
outside the declared range and changes leading-BOM handling.

* fix(semantics): link wrapped arrow Promise returns

* fix(reconstruction): preserve unknown graph limitations

* fix(native): preserve exact code signing identifiers

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(native): recognize only whole otool command headers

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(native): retain nm-proven literal export names

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(javascript): project decoded file URL paths

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix: preserve explicit source-relative URL observation spelling

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(native): project Mach-O evidence into container file offsets

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

* fix(browser): normalize referrer policy fallback lists

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

---------

Signed-off-by: Rudy Celekli <rudy@gradiahq.com>
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>
Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>
Co-authored-by: Rudy Celekli <rudy@gradiahq.com>
Co-authored-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>
Co-authored-by: Kaoru0822 <aisakamimaki@gmail.com>
Co-authored-by: DeryFerd <deryferdikao125@gmail.com>
 		2026-10-07 10:33:10 +08:00
..
android-cli-cancellation.mjs feat(android): integrate static APK analysis with headless JADX (#738) 2026-10-06 12:46:48 +00:00
artifact-e2e.mjs feat(native): add inspection primitives, dispatch traces and approved UI observation (#500) 2026-10-04 16:02:36 +08:00
browser-network-assertions.mjs feat(browser): capture correlated network content and lifecycle evidence (#797) 2026-10-07 04:35:49 +08:00
browser-network-e2e.mjs feat(browser): capture correlated network content and lifecycle evidence (#797) 2026-10-07 04:35:49 +08:00
browser-popup-e2e.mjs fix(browser): capture popup network and report early event gaps (#614) 2026-10-06 01:58:54 +08:00
browser-scenario-verifier.mjs feat(browser): capture correlated network content and lifecycle evidence (#797) 2026-10-07 04:35:49 +08:00
browser-screenshot-e2e.mjs refactor!: simplify runtime tools and remove replay engines (#572) 2026-10-05 21:15:04 +08:00
browser-script-export-assertions.mjs feat(web): export captured scripts for JavaScript application analysis (#801) 2026-10-07 05:24:32 +08:00
browser-script-export-e2e.mjs feat(web): export captured scripts for JavaScript application analysis (#801) 2026-10-07 05:24:32 +08:00
browser-verifier-assertions.mjs fix: integrate 24 reviewed browser/native/semantics corrections (#815) 2026-10-07 10:33:10 +08:00
catalog-builders.mjs feat(web): export captured scripts for JavaScript application analysis (#801) 2026-10-07 05:24:32 +08:00
catalog-cli.mjs refactor(adapters): split oversized provider workflows 2026-07-18 05:49:14 +00:00
catalog-core.mjs feat(web): export captured scripts for JavaScript application analysis (#801) 2026-10-07 05:24:32 +08:00
conformance-fixtures.d.mts test(conformance): remove fixture generator test option 2026-09-29 18:00:47 +08:00
conformance-fixtures.mjs test(conformance): remove fixture generator test option 2026-09-29 18:00:47 +08:00
development-tests.d.mts chore(test): separate development feedback from full verification (#599) 2026-10-06 00:59:26 +08:00
development-tests.mjs fix(test): improve capture reliability and runner cleanup (#609) 2026-10-06 01:32:46 +08:00
docs-facts.d.mts docs: clarify onboarding and align provider guidance (#745) 2026-10-06 22:57:36 +08:00
docs-facts.mjs docs: clarify onboarding and align provider guidance (#745) 2026-10-06 22:57:36 +08:00
format-generated-file.mjs chore: migrate formatting to Oxfmt (#615) 2026-10-06 01:59:19 +08:00
generate-firmware-fixture.py feat(firmware): integrate Binwalk and Unblob analysis 2026-10-06 14:16:04 +00:00
generated-file.d.mts build: add canonical product catalog and docs drift checks 2026-07-15 17:43:52 +08:00
generated-file.mjs fix(build): preserve native generated-file line endings 2026-07-17 03:05:19 +09:00
managed-completion-report.mjs refactor!: simplify runtime tools and remove replay engines (#572) 2026-10-05 21:15:04 +08:00
managed-conformance-config.mjs refactor: return complete tool results inline 2026-09-29 07:08:46 +08:00
managed-conformance-manifest-parser.mjs refactor(tools): remove remaining arbitrary workflow caps 2026-09-29 17:00:06 +08:00
managed-conformance-manifest.mjs refactor: return complete tool results inline 2026-09-29 07:08:46 +08:00
managed-conformance-oracles.mjs refactor: return complete analysis results inline 2026-09-29 08:07:24 +08:00
managed-conformance-support.mjs fix: consolidate boundary ownership and cleanup failure paths (#477) 2026-09-08 10:59:13 +08:00
managed-pe-fixture.d.mts fix(managed): emit valid x64 conformance PE 2026-07-17 20:06:07 +08:00
managed-pe-fixture.mjs refactor: split oversized analysis workflows 2026-07-18 05:49:14 +00:00
mcp-startup-probe.d.mts perf(mcp): reduce cold-start work 2026-07-26 15:02:58 +00:00
mcp-startup-probe.mjs perf(mcp): reduce cold-start work 2026-07-26 15:02:58 +00:00
mcp-verifier-results.mjs refactor: return complete tool results inline 2026-09-29 07:08:46 +08:00
native-value-e2e.mjs fix(mcp): return complete inline Evidence records (#585) 2026-10-06 00:10:31 +08:00
product-catalog.d.mts refactor: return complete tool results inline 2026-09-29 07:08:46 +08:00
product-catalog.mjs chore: migrate formatting to Oxfmt (#615) 2026-10-06 01:59:19 +08:00
real-hopper-exhaustive-search.d.mts refactor: return complete tool results inline 2026-09-29 07:08:46 +08:00
real-hopper-exhaustive-search.mjs refactor: return complete tool results inline 2026-09-29 07:08:46 +08:00
real-hopper-fixture.d.mts test(hopper): add semantic runtime conformance 2026-07-18 04:50:23 +00:00
real-hopper-fixture.mjs refactor(schema): remove data-only version markers 2026-09-29 08:45:36 +08:00
real-hopper-function-basics.mjs feat(native): add inspection primitives, dispatch traces and approved UI observation (#500) 2026-10-04 16:02:36 +08:00
real-hopper-inventory.mjs fix: correct native inventories and bridge error classification (#503) 2026-10-04 17:25:09 +08:00
real-hopper-selection.mjs refactor: return complete tool results inline 2026-09-29 07:08:46 +08:00
real-hopper-semantic.d.mts test(hopper): add semantic runtime conformance 2026-07-18 04:50:23 +00:00
real-hopper-semantic.mjs refactor: return complete tool results inline 2026-09-29 07:08:46 +08:00
unrelated-hopper-sentinel.mjs fix(process): protect unrelated Hopper during cleanup 2026-07-22 14:04:00 +00:00
verifier-run.d.mts refactor: return complete analysis results inline 2026-09-29 08:07:24 +08:00
verifier-run.mjs feat(ghidra): enable Windows x64 read-only analysis (#699) 2026-10-06 16:53:33 +08:00
verify-package-core.mjs fix(mcp): emit valid schemas for empty arrays (#535) 2026-10-05 15:32:58 +08:00