rea/src
morluto 8d3cfef753 fix(plist): disclose binary prototype-key omissions
Reuse the bounded binary preflight to observe dictionary keys before the pinned decoder drops them. Keyed archive results disclose the omission and Interface Builder marks archive decoding partial. XML keeps its existing exact counts; binary reporting deliberately leaves the count unknown because overwritten subtrees and decoder projection can change visibility.

Remove the superseded size-only preflight contract. Cover ASCII, UTF-16 and extended lengths, shared references, nested and shadowed dictionaries, and the value-only negative control. Synthetic plist and filesystem fixtures; no plutil or ibtool verification.

Fixes #1594. Supersedes #1593.
2026-10-11 07:02:39 +08:00
..
adb fix(adb): retain rollback ownership and cancelled acquisition facts 2026-10-11 00:28:39 +08:00
android perf(android): validate prerequisites once per retained JADX session 2026-10-11 02:31:57 +08:00
apktool fix(ci): repair format gate and pin maintenance skill destinations 2026-10-11 00:33:36 +08:00
application fix(web)!: retain capture read cleanup through export 2026-10-11 06:30:56 +08:00
artifacts fix(plist): disclose binary prototype-key omissions 2026-10-11 07:02:39 +08:00
browser fix(web)!: retain capture read cleanup through export 2026-10-11 06:30:56 +08:00
cli fix(cli): preserve native option descriptions in help 2026-10-11 06:41:46 +08:00
composition feat(apktool): decode Android resource tables through a caller-supplied launcher (#1556) 2026-10-10 23:04:12 +08:00
config feat(mcp): compact input schema profile for size-capped providers (kimi-cli/Moonshot) (#1514) 2026-10-10 16:58:43 +08:00
contracts fix(process)!: bound terminal buffers before capture 2026-10-11 03:19:29 +08:00
domain fix(plist): disclose binary prototype-key omissions 2026-10-11 07:02:39 +08:00
dotnet fix(dotnet): bound RVA reads by section virtual size 2026-10-11 07:02:16 +08:00
evaluation feat(skills)!: improve Codex onboarding and task recovery (#1613) 2026-10-11 03:13:56 +08:00
evm perf(evm): avoid repeated cleanup diagnostics (#1622) 2026-10-11 03:28:16 +08:00
filesystem refactor(filesystem): share directory cleanup ownership 2026-10-11 06:10:10 +08:00
firmware fix(publication)!: retain cleanup owners across export workflows 2026-10-11 05:17:10 +08:00
ghidra feat(ghidra): admit set_address_name and set_addresses_names (#1635) 2026-10-11 04:35:38 +08:00
hopper fix(providers): bound launcher diagnostics without losing byte counts 2026-10-11 02:50:06 +08:00
ida fix(engines): serialize JEB acquisition and respect IDA cancellation 2026-10-11 00:03:23 +08:00
inspector fix(inspector): retain observations after capture failures 2026-10-09 23:35:19 +08:00
javascript fix(publication)!: retain cleanup owners across export workflows 2026-10-11 05:17:10 +08:00
jeb fix(engines): serialize JEB acquisition and respect IDA cancellation 2026-10-11 00:03:23 +08:00
main fix(mcp): admit composed analysis through result bookkeeping 2026-10-10 00:35:17 +08:00
native fix(native): bound metadata projection and compact Mach-O bind runs 2026-10-11 00:03:19 +08:00
process fix(providers): bound launcher diagnostics without losing byte counts 2026-10-11 02:50:06 +08:00
reference fix(reference)!: retain source and metadata cleanup owners 2026-10-11 06:10:10 +08:00
server fix(publication)!: retain cleanup owners across export workflows 2026-10-11 05:17:10 +08:00
windows fix: bind identity and coverage to the producing rule (#1513) 2026-10-10 17:14:47 +08:00
catalogIdentity.ts refactor: remove forwarding exports and redundant aliases 2026-10-09 22:46:09 +08:00
cli.ts feat(apktool): decode Android resource tables through a caller-supplied launcher (#1556) 2026-10-10 23:04:12 +08:00
cliBrowserContext.ts fix(mcp): isolate optional observation adapter failures (#838) 2026-10-07 11:45:17 +08:00
cliBrowserScenarioCommands.ts perf(cli): defer Playwright and isomorphic-git until a command needs them 2026-10-10 13:16:44 +08:00
cliCommandNames.ts feat(apktool): decode Android resource tables through a caller-supplied launcher (#1556) 2026-10-10 23:04:12 +08:00
cliEvidenceCommands.ts refactor: remove forwarding exports and redundant aliases 2026-10-09 22:46:09 +08:00
cliHostInputs.test.ts refactor: remove forwarding exports and redundant aliases 2026-10-09 22:46:09 +08:00
cliJavaScriptRuntimeCommands.ts refactor: remove forwarding exports and redundant aliases 2026-10-09 22:46:09 +08:00
cliJsonInput.ts fix(filesystem): bound and verify admitted file and JSON reads 2026-10-11 00:28:24 +08:00
cliJsonPaths.test.ts fix(cli): preserve blank JSON paths for input validation (#1068) 2026-10-08 20:57:54 +08:00
cliLogging.test.ts refactor: consolidate boundary semantics and prune redundant tests 2026-10-10 05:56:01 +08:00
cliLogging.ts refactor: remove forwarding exports and redundant aliases 2026-10-09 22:46:09 +08:00
cliObservationOptions.ts feat(javascript): record Electron integrity mismatches 2026-10-10 02:49:46 +08:00
cliOutput.ts refactor!: enforce canonical evidence and provider boundaries 2026-10-09 20:18:52 +08:00
config.test.ts refactor: remove forwarding exports and redundant aliases 2026-10-09 22:46:09 +08:00
doctorRuntime.ts refactor!: enforce canonical evidence and provider boundaries 2026-10-09 20:18:52 +08:00
generatedPackageMetadata.ts feat(skills)!: improve Codex onboarding and task recovery (#1613) 2026-10-11 03:13:56 +08:00
identity.ts feat: streamline agent integration and MCP routing 2026-07-20 17:11:06 +08:00
logger.ts refactor: remove forwarding exports and redundant aliases 2026-10-09 22:46:09 +08:00
main.ts refactor: remove forwarding exports and redundant aliases 2026-10-09 22:46:09 +08:00
mcpDoctor.ts fix(mcp): validate doctor probe against its discovered output contract (#1461) 2026-10-10 14:33:57 +08:00
mcpStartupPolicy.ts perf(mcp): reduce cold-start work 2026-07-26 15:02:58 +00:00
serverIdentity.ts refactor: return complete analysis results inline 2026-09-29 08:07:24 +08:00
setupEnvironment.test.ts refactor!: enforce canonical evidence and provider boundaries 2026-10-09 20:18:52 +08:00