rea/src
Ysopwnable b5afa5f91e
feat(browser): attribute native execution and listener sources (#917)
* feat(browser): attribute native execution and listener sources

Integrate finite native precise-coverage windows and direct DOM listener inspection through shared CLI/MCP workflows, exact session script identities, inline source evidence and owned instrumentation cleanup.

Refs #881, #774

Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)

* fix(browser): preserve runtime identity and settle fixture cleanup

Retain complete reported initiator objects, reject changing loader availability, propagate the selected operation through main-frame authorization and complete effect/help inventories. Close only the synthetic owned Chrome via its native endpoint, await process-group settlement and preserve primary verification errors during cleanup.

Refs #881

Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)

* fix(browser): settle invalid events and preserve document evidence

Accept same-document URL changes with proven stable loader identity, retain metadata without inventing ownership, terminate malformed event collection immediately, and sanitize known transport URLs without erasing sourceURL declarations.

Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)

* fix(browser): end detached target windows and sanitize coverage identities

Reuse the existing flat-session event matcher, retain prearming termination, and apply the source identity policy to coverage URLs. Add real MCP target-close verification and producer regressions for detachment orderings.

Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)

* fix(browser): retain final sample metadata and settle fatal protocol failures

Keep source inventory open through the resetting sample, propagate fatal wire failures without outstanding commands, and check listener collection failures after final document validation.

Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)

Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)

* fix(browser): require default execution worlds for website attribution

Preserve native context and world metadata without treating same-frame isolated or unknown contexts as website sources. Verify actual Chrome isolated function execution before excluding its coverage, and cover ambiguous world metadata with producer regressions.

Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)

Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)

* fix(browser): revalidate runtime source joins and selector failures

Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)

---------

Co-authored-by: morluto <76467478+morluto@users.noreply.github.com>
2026-10-07 21:45:07 +08:00
..
android fix(android): bound fragmented JADX MCP frame memory (#937) 2026-10-07 19:51:08 +08:00
application feat(browser): attribute native execution and listener sources (#917) 2026-10-07 21:45:07 +08:00
artifacts refactor(apple): group artifact producers and verification (#952) 2026-10-07 21:09:33 +08:00
browser feat(browser): attribute native execution and listener sources (#917) 2026-10-07 21:45:07 +08:00
cli feat(browser): attribute native execution and listener sources (#917) 2026-10-07 21:45:07 +08:00
composition feat(browser): attribute native execution and listener sources (#917) 2026-10-07 21:45:07 +08:00
config feat(ida): add read-only GUI and headless MCP providers (#754) 2026-10-07 01:47:05 +08:00
contracts feat(browser): attribute native execution and listener sources (#917) 2026-10-07 21:45:07 +08:00
domain feat(browser): attribute native execution and listener sources (#917) 2026-10-07 21:45:07 +08:00
dotnet refactor(managed): group capability workflows and verification (#926) 2026-10-07 19:22:04 +08:00
evaluation feat: complete REA remediation program 2026-07-22 22:09:12 +09:00
firmware refactor(firmware): group layered source and verification (#878) 2026-10-07 14:44:52 +08:00
ghidra perf(providers): assemble fragmented responses once per line (#911) 2026-10-07 17:07:00 +08:00
hopper fix(process): retain provider output until streams close (#928) 2026-10-07 18:39:10 +08:00
ida fix(ida): share concurrent session cleanup (#950) 2026-10-07 19:58:43 +08:00
inspector refactor(javascript): group domain semantics and contracts (#907) 2026-10-07 17:16:58 +08:00
javascript perf(javascript): reduce analysis and source-map work (#955) 2026-10-07 20:33:35 +08:00
main fix(android)!: preserve JVM settings and reuse metadata sessions (#908) 2026-10-07 16:50:41 +08:00
native refactor(apple): group artifact producers and verification (#952) 2026-10-07 21:09:33 +08:00
process fix(android): bound fragmented JADX MCP frame memory (#937) 2026-10-07 19:51:08 +08:00
reference fix(reference): retain partial imports for unreadable directories (#766) 2026-10-07 02:36:21 +08:00
server feat(browser): attribute native execution and listener sources (#917) 2026-10-07 21:45:07 +08:00
windows fix(windows): accept ordinary drive path separators (#791) 2026-10-07 03:51:59 +08:00
catalogIdentity.ts perf(cli): defer unused catalog work during command startup (#920) 2026-10-07 18:16:10 +08:00
cli.ts feat(browser): attribute native execution and listener sources (#917) 2026-10-07 21:45:07 +08:00
cliBrowserContext.ts fix(mcp): isolate optional observation adapter failures (#838) 2026-10-07 11:45:17 +08:00
cliBrowserScenarioCommands.ts fix(mcp): isolate optional observation adapter failures (#838) 2026-10-07 11:45:17 +08:00
cliCommandNames.ts feat(browser): attribute native execution and listener sources (#917) 2026-10-07 21:45:07 +08:00
cliEnvironmentSeam.test.ts refactor!: simplify runtime tools and remove replay engines (#572) 2026-10-05 21:15:04 +08:00
cliEvidenceCommands.ts refactor(domain): split error taxonomy into thematic modules (#636) 2026-10-06 05:57:38 +08:00
cliHostInputs.test.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
cliJavaScriptRuntimeCommands.ts refactor(javascript): group domain semantics and contracts (#907) 2026-10-07 17:16:58 +08:00
cliJsonInput.ts refactor(domain): split error taxonomy into thematic modules (#636) 2026-10-06 05:57:38 +08:00
cliJsonInputStatus.test.ts fix(cli): fail when JSON input files cannot be parsed 2026-10-06 03:02:22 -07:00
cliLogging.test.ts refactor(domain): split error taxonomy into thematic modules (#636) 2026-10-06 05:57:38 +08:00
cliLogging.ts refactor(domain): split error taxonomy into thematic modules (#636) 2026-10-06 05:57:38 +08:00
cliObservationOptions.test.ts refactor(tools): return complete analysis results inline 2026-09-29 14:53:50 +08:00
cliObservationOptions.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
cliOutput.ts fix(cli): emit empty structured filter projections (#914) 2026-10-07 17:51:10 +08:00
cliReferenceSourceImportStatus.test.ts fix(cli): preserve unsupported historical-source imports (#795) 2026-10-07 04:02:10 +08:00
config.test.ts feat(ida): add read-only GUI and headless MCP providers (#754) 2026-10-07 01:47:05 +08:00
config.ts refactor(app): split session and CLI workflows 2026-07-18 05:49:14 +00:00
doctorRuntime.ts feat(ida): add read-only GUI and headless MCP providers (#754) 2026-10-07 01:47:05 +08:00
generatedMcpToolCatalog.ts feat(browser): attribute native execution and listener sources (#917) 2026-10-07 21:45:07 +08:00
generatedPackageMetadata.ts feat(apple): project macOS bundle anatomy in application graphs 2026-10-07 10:06:48 +00:00
identity.ts feat: streamline agent integration and MCP routing 2026-07-20 17:11:06 +08:00
logger.ts fix(tools)!: simplify direct invocation and harden boundary contracts (#555) 2026-10-05 20:16:44 +08:00
main.ts fix(android)!: preserve JVM settings and reuse metadata sessions (#908) 2026-10-07 16:50:41 +08:00
mcpDoctor.ts refactor(tools): remove remaining arbitrary workflow caps 2026-09-29 17:00:06 +08:00
mcpStartupPolicy.ts perf(mcp): reduce cold-start work 2026-07-26 15:02:58 +00:00
serverIdentity.ts refactor: return complete analysis results inline 2026-09-29 08:07:24 +08:00