rea/CHANGELOG.md

Changelog

1.7.0 (2026-07-15)

Features

• artifact: reconstruct JavaScript application structure (aa46abf)
• domain: add versioned JavaScript Application Graph (2ca5672)
• ghidra: add function analysis and conformance (d8321de)
• ghidra: add private headless provider session (f0e625d)
• ghidra: implement read-only inventory operations (b1c07dd)
• session: add explicit provider registry and target binding (941d710)

Bug Fixes

• address setup, upgrade, and process test regressions (960d759)
• address setup, upgrade, and process test regressions (02f12b9)
• cli: make clean source checkouts start reliably (ed17e76)
• cli: make clean source checkouts start reliably (6ba9765)
• setup: replace managed Hopper on reinstall (0ca93f9)

Code Refactoring

• domain: remove provider-specific target and snapshot state (21da71e)
• process: extract reusable provider lifecycle primitives (70e1a0f)

Documentation

• api: refresh profile source anchors (bd3cf96)
• api: refresh provider source anchors (a7621c2)
• architecture: define provider selection and analysis profiles (75f8696)
• architecture: define provider selection and analysis profiles (f9f2fbe)
• reconcile product documentation with shipped behavior (addc208)
• reconcile product documentation with shipped behavior (54056a9)
• refresh Ghidra inventory API links (a45de27)
• regenerate JavaScript graph API with Node 24 (da4817a)

Tests

• keep package setup verification read-only (acaf030)

1.6.0 (2026-07-14)

Features

• add web and Electron reverse-engineering workflows (be76f80)

Bug Fixes

• application: add explicit investigation replay (7112e1e)
• application: add explicit investigation replay (a6b5ca4)
• browser: keep page endpoint type internal (3743962)
• browser: observe direct target disconnects (9be24f8)
• browser: preserve operation-aware cancellation errors (0aac8aa)
• browser: support page-scoped CDP transports (c4930f4)
• browser: support page-scoped CDP transports (bf96192)
• browser: support relative source map URLs (5231e95)
• cli: confirm project grant revocation (6397e54)
• cli: confirm project grant revocation (7a4cfb4)
• cli: restrict production MCP dispatch (8bd0e5f)
• cli: restrict production MCP dispatch (190e5d3)
• doctor: honor explicit Hopper launcher (c69fe2c)
• doctor: honor explicit Hopper launcher (9208592)
• evidence: enforce the combined record limit (c791802)
• evidence: enforce the combined record limit (834c70c)
• hopper: cancel startup before closing (f471a63)
• hopper: cancel startup before closing (6cc2fdf)
• hopper: select verified Linux demo mode explicitly (46e4052)
• hopper: select verified Linux demo mode explicitly (04c5fd6)
• native: harden command capture edge cases (c2e64a4)
• native: harden command capture edge cases (d39f98d)
• preserve setup diagnostics and clean Knip config (2d1e021)
• preserve setup diagnostics and clean Knip config (5a7ccef)
• process: gate sampling on initialized PTY root (57938a8)
• process: gate sampling on initialized PTY roots (e831a41)
• process: keep validation detail internal (614a119)
• process: restrict cleanup to captured group leaders (40c6f60)
• process: settle exited zombie groups (072ce5a)
• process: settle exited zombie groups (4828326)
• process: stabilize and speed up the test suite (a3b7de9)
• reference: preserve distinct parse failures (e02cb2f)
• reference: preserve distinct parse failures (543510f)
• rollup batch of fixes (b348b2c)
• runtime: apply permission reloads atomically (49e843e)
• runtime: apply permission reloads atomically (3ae7109)
• runtime: serialize permission reloads (7e53dd6)
• runtime: unregister shutdown handlers (71072d8)
• runtime: unregister shutdown handlers (f9e3c23)
• session: isolate availability observers (43766fd)
• session: isolate availability observers (e5a80d4)
• session: reopen replaced targets (e98413c)
• session: reopen replaced targets (5c55999)
• setup: configure every detected client (69744a4)
• setup: configure every detected client (24f9a1f)
• setup: omit aligned client configurations from plan (a86da4f)
• setup: omit aligned skill from plan (d81687f)
• setup: omit aligned skill from plan (2984fa7)
• setup: preserve client config symlinks (85285f1)
• setup: preserve client config symlinks (df87544)
• test: adapt mainReload shutdown seam to registerShutdown signature (0a430c1)
• tooling: isolate concurrent repository checks (fb17156)
• tooling: isolate concurrent repository checks (ab8c5c1)
• upgrade: prevent version downgrades (a204840)
• upgrade: prevent version downgrades (1d1d234)
• verify: reconcile PR-212/215/228 package E2E expectations (cfa110c)

Performance Improvements

• application: scan version artifacts in parallel (528c05e)
• application: scan version artifacts in parallel (c00739b)

Tests

• application: verify packaged MCP replay (6601e0c)
• browser: harden Chrome startup on CI (74c5121)
• browser: route discovery sockets through proxy (e363f0e)
• browser: verify page-scoped Chrome transport (c252536)
• cli: verify packaged policy revocation (3d71737)
• hopper: cover verified Linux rejection (db202c2)
• hopper: retry after cancelled startup (6de726f)
• hopper: verify alternate Linux launcher path (d93257b)
• package: cover aligned setup plan (a597639)
• package: cover config symlink lifecycle (d1ef7a5)
• package: preserve unrelated symlink config (c50e51e)
• reduce test suite runtime (2223da1)
• reference: cover failure normalization (3d5041f)
• runtime: cover idempotent handler cleanup (1bdb59e)
• serialize subprocess-heavy integrations (f46fc7f)
• session: reopen replaced target through MCP (1c32880)
• setup: cover later clients after failure (8f73112)

1.5.0 (2026-07-14)

Features

• add passive website reverse engineering (9986971)
• add passive website reverse engineering (2c1ceab)

Bug Fixes

• browser: drop disallowed redirect evidence (8481be9)
• browser: scope CDP events and fail closed (5279d77)
• browser: scope workers and binary frame sizes (dfc06cf)
• harden PTY events and configured roots (ae8b1c5)
• harden PTY events and configured roots (31b40f3)
• permission: defer cache write grants (6a3fd5b)
• permission: defer cache write grants (f840e70)
• resolve triaged correctness issues (2575b30)
• resolve triaged correctness issues (e8ed307)
• resolve validation and artifact edge cases (2468682)
• resolve validation and artifact edge cases (ef7f2f9)

Documentation

• add Hopper screenshot to README (a699fdd)
• add Hopper screenshot to README (08981a3)

Tests

• cli: allow cold-start integration timing (7d5621d)

1.4.0 (2026-07-14)

Features

• core: add typed policy and integrity contracts (190efca)
• identity: derive MCP surface metadata (2722722)
• mcp: expose progress resources and availability (da59299)
• mcp: land policy, resources, and typed contracts (8f79ee7)

Bug Fixes

• ci: keep generated error docs with their owner (3e60e38)
• ci: preserve stacked integration changes (cf8e5cf)
• cli: return nonzero status for operation failures (#121) (00c187e)
• cli: return nonzero status for operation failures (#122) (964620a)
• hopper: complete owned Linux shutdown (#116) (fb51874)
• mcp: preserve migrated revisions and valid links (4149472)
• preserve actionable artifact diagnostics (#119) (7385220)
• workspace: migrate legacy integrity identities (d092d4c)

Tests

• identity: defer live MCP integration proof (74db3fc)

1.3.0 (2026-07-13)

Features

• add guided MCP workflow prompts (08d5b91)
• add guided MCP workflow prompts (24c3adb)
• add persistent cross-version investigation workspaces (c52eb46)
• add persistent cross-version investigation workspaces (41366ed)
• analysis: add provider-neutral persistent snapshots (c439b9e)
• analysis: persist snapshots and close Hopper reliably (c6407ef)
• errors: add caller-safe typed error projections (3be439c)
• mcp: return structured typed tool results (eb38e4c)

Bug Fixes

• bridge: bound regex search work (733a382)
• bridge: bound regex search work (65682ee)
• ci: remove unused setup type export (c5728af)
• cli: render actionable analysis errors (af8c4ef)
• copy: use agent terminology (12060f6)
• errors: improve recovery guidance (77454dc)
• errors: return actionable caller-safe failures (fb0da03)
• hopper: cancel analysis and close documents reliably (179870e)
• hopper: return addresses for procedure relationships (2c707ab)
• linux: start Hopper demo sessions headlessly (32c5080)
• linux: start Hopper demo sessions headlessly (75818d1)
• security: restrict investigation artifact inputs (a2076b4)

Tests

• linux: verify setup through CLI and MCP (67504d2)
• package: preserve unsupported host verification (977119f)
• strengthen MCP prompt acceptance coverage (05fb9b1)

1.2.0 (2026-07-13)

Features

• artifacts: add approved native DMG traversal (24d000a)
• process: add deterministic capture v3 (d0e21f9)
• process: add deterministic capture v3 (5a361a6)
• process: introduce evidence-safe capture v4 (ee4d284)

Bug Fixes

• artifacts: diagnose unpacked ASAR integrity failures (a504342)
• ci: remove redundant process exports (19bb231)
• process: harden capture validation and cleanup (ac78de0)

Code Refactoring

• artifacts: simplify inventory traversal (c8d762e)
• setup: split setup and CLI registration (07e1b5a)

Documentation

• document capture v4 and native mounts (aca518b)
• document process capture v3 (50f4a29)
• process: preserve capture invariants (841990b)
• skill: document capture v4 and DMG mounts (f0a9a3c)

Tests

• process: use deterministic hang fixture (ba15d16)

1.1.0 (2026-07-13)

Features

• setup: make installation explicit and safe (29d92ca)
• setup: make installation explicit and safe (3793889)

Bug Fixes

• preserve requested evidence paths on macOS (0c0e2b8)
• preserve requested evidence paths on macOS (3d0ad79)

Documentation

• api: regenerate TypeDoc reference (0a66cae)
• define REA contributor priorities (5df4ef6)
• explain the installation workflow (1c83263)

1.0.0 (2026-07-13)

⚠ BREAKING CHANGES

• contracts: batch_decompile, get_call_graph, and find_xrefs_to_name now return structured discriminated output shapes.

Features

• cli: add self-upgrade command (c004220)
• cli: add self-upgrade command (0d77a9f)

Bug Fixes

• contracts: keep error schema internal (ac8cc66)
• contracts: return structured workflow failures (4c54ff6)
• native: classify pre-aborted analysis first (dfd598f)

Documentation

• list upgrade in CLI reference (8a24088)

0.5.0 (2026-07-13)

Features

• analysis: harden agent workflows and evidence boundaries (883db91)
• cli: align terminal workflows with MCP (b1912b1)

Bug Fixes

• analysis: accept valid final dossier pages (7c36f36)
• bridge: harden bounded Hopper boundaries (f8e8ea3)
• cli: preserve function provider provenance (c630f41)
• lifecycle: validate owned Hopper process identity (898d6b0)
• process: default capture networking to loopback (bce3398)
• process: keep network approval fail-closed (9526389)

Code Refactoring

• cli: share direct analysis tool types (329fdf6)

Documentation

• correct pull request tool inventory (d806480)
• document CLI safety and provider evaluation (efc9bd2)

Tests

• docs: keep localized claims and tool counts aligned (a7b84a9)
• verification: strengthen conformance and real-Hopper checks (0d36976)

0.4.0 (2026-07-12)

Features

• add cross-platform installation lifecycle (cc6a955)
• add cross-platform installation lifecycle (e651cb6)

Documentation

• document installation and Linux support (034563a)
• simplify REA onboarding (e1dfe86)
• simplify REA onboarding (d85b661)

Tests

• add package installation end-to-end coverage (993356b)
• stabilize artifact pagination coverage (f56bdde)

Continuous Integration

• enforce conventional pull request titles (07a0b98)
• enforce conventional pull request titles (3a21f16)
• verify installed package with Linux Hopper (4f97f69)

0.3.0 (2026-07-12)

Features

• add evidence-backed process investigations (cc8681a)
• cli: add guided local onboarding (8ca3db8)
• evolve REA analysis platform (4f18e26)
• identity: rename package and CLI to REA (3d70812)
• mcp: add typed bounded analysis tools (893d2e2)
• session: add dynamic binary lifecycle (f32e718)

Bug Fixes

• boundaries: reject unsafe local inputs (15e8cf3)
• doctor: require an executable Hopper launcher (aee9cb8)
• hopper: launch analysis without stealing focus (ff321dc)
• hopper: make loader selection non-interactive (2b7ef86)
• keep execution options internal (167a824)
• setup: persist detected Hopper launcher (b2866e4)
• setup: preserve consent and startup target kind (a67054f)
• setup: preserve invalid MCP configuration (88f5edc)
• targets: cancel startup and probe PE offsets (66b8d6e)
• verify: tolerate exited Hopper helpers (b167bd7)

Code Refactoring

• cli: share runtime between CLI and MCP (97541d8)

Documentation

• document frictionless binary workflow (ee6d539)
• document the 43-tool workflow (1f235cb)
• record runtime and release constraints (62ede51)
• redesign and localize README (051b6db)
• redesign and localize README (910eda6)

Tests

• add source-built Hopper conformance fixtures (d648bcd)

0.2.1 (2026-07-12)

Documentation

• redesign and localize README (051b6db)
• redesign and localize README (910eda6)

0.2.0 (2026-07-12)

Features

• cli: add guided local onboarding (8ca3db8)
• identity: rename package and CLI to REA (3d70812)
• session: add dynamic binary lifecycle (f32e718)

Bug Fixes

• boundaries: reject unsafe local inputs (15e8cf3)
• doctor: require an executable Hopper launcher (aee9cb8)
• hopper: launch analysis without stealing focus (ff321dc)
• hopper: make loader selection non-interactive (2b7ef86)
• setup: persist detected Hopper launcher (b2866e4)
• setup: preserve consent and startup target kind (a67054f)
• setup: preserve invalid MCP configuration (88f5edc)
• targets: cancel startup and probe PE offsets (66b8d6e)
• verify: tolerate exited Hopper helpers (b167bd7)

Code Refactoring

• cli: share runtime between CLI and MCP (97541d8)

Documentation

• document frictionless binary workflow (ee6d539)
• record runtime and release constraints (62ede51)