morlutoandhhang b7f563e15f test: strengthen public input and module lookup controls ...

Incorporate the independent query-bearing ESM and cjs-only directory cases from #2031 and #2032 into existing Node-backed CLI/MCP tests. Their production patches are already superseded on main.

Make invalid Swift-symbol validation prove it precedes artifact access, and bound the test child so failures retain output before the outer test deadline. Clarify that network API content types project only the type/subtype essence.

Validation: module lookup CLI/MCP and native demangle CLI tests pass. A bounded Flameox reproduction passed in under one second; the CI timeout was not reproduced and no provider hang fix is claimed.

Co-authored-by: hhang <169027046+xu91102@users.noreply.github.com>

2026-10-12 11:59:23 +08:00

..

.vitepress

feat(go): inspect embedded binary build metadata (#1363)

2026-10-12 11:34:02 +08:00

assets

docs: keep license sections text-only

2026-10-10 00:09:46 +08:00

releases

chore(main): release rea-agents 6.4.0 (#1399)

2026-10-11 11:57:29 +08:00

adb-device-analysis.md

fix(adb): preserve device paths and prevent destination collisions

2026-10-12 05:57:35 +08:00

android-analysis.md

fix(android): preserve decoded values and duplicate class inventories

2026-10-12 06:29:13 +08:00

apktool-resource-analysis.md

fix(apktool): run Windows batch launchers through cmd.exe (#1777)

2026-10-11 17:16:48 +08:00

apple-application-analysis.md

fix(mobile): bound framework conventions to path segments (#1506)

2026-10-10 21:42:03 +08:00

architecture.mermaid

refactor: use canonical implementations and types directly

2026-10-09 23:35:19 +08:00

binary-diagnostics.md

fix(native): raise default PE resource entry budget to 16384 (#1703)

2026-10-11 19:01:33 +08:00

browser-observation.md

fix(browser): retain effective source-map response urls

2026-10-11 15:35:43 +08:00

browser-scenario-contract.md

fix(browser): seed storage by browser partition

2026-10-11 10:17:53 +08:00

cli.md

feat(go): inspect embedded binary build metadata (#1363)

2026-10-12 11:34:02 +08:00

electron-observation.md

fix(electron): support packaged app.asar pages and rewritten unpacked companions (#1400)

2026-10-10 23:01:54 +08:00

error-contract.schema.json

feat(evm): inspect offline bytecode interfaces through EVMole (#1051)

2026-10-08 15:32:05 +08:00

evm-bytecode.md

fix(build): make catalogs and packaged skills generated outputs (#1086)

2026-10-08 22:43:51 +08:00

firmware-analysis.md

fix(providers): retain worker cleanup owners through shutdown

2026-10-11 00:03:21 +08:00

ghidra-dos.md

fix(ghidra): reject address truncation before reads and edits

2026-10-09 03:53:28 +08:00

ghidra-mips.md

test(ghidra): require pending multi-HI16 coverage in the real MIPS relocatable lane (#1974)

2026-10-12 08:42:08 +08:00

ghidra-nativeaot.md

feat(ghidra): inspect NativeAOT PE metadata read-only

2026-10-11 10:31:49 +08:00

ghidra-provider.md

feat(ghidra): inspect NativeAOT PE metadata read-only

2026-10-11 10:31:49 +08:00

ghidra-psp.md

feat(ghidra): admit bounded PSP ELF through installed Allegrex (#1599)

2026-10-11 19:47:33 +08:00

go-binaries.md

feat(go): inspect embedded binary build metadata (#1363)

2026-10-12 11:34:02 +08:00

harmony-analysis.md

feat(harmony): project HarmonyOS package inventory evidence (#1447)

2026-10-11 20:09:21 +08:00

ida-provider.md

fix(ida): preserve non-x86 call edges and workflow uncertainty (#1906)

2026-10-12 04:10:22 +08:00

index.md

docs: publish VitePress documentation on GitHub Pages

2026-10-07 16:58:04 +08:00

installation.md

docs(install): explain Claude Code upfront tool loading on third-party endpoints (#2029)

2026-10-11 20:56:19 -07:00

javascript-application-graph.md

docs(contracts)!: explain canonical URL and skill metadata ownership

2026-10-10 02:49:46 +08:00

javascript-application-workflows.md

docs: correct stale logging, Ghidra host, and example path statements (#1420)

2026-10-10 21:29:31 +08:00

javascript-artifact-reconstruction.md

fix(javascript): trace wrapped Electron IPC paths in large bundles (#1874)

2026-10-12 09:28:59 +08:00

javascript-recovery.md

feat(javascript): recover code-split bundles from multiple inputs (#1686)

2026-10-11 18:39:49 +08:00

javascript-runtime-observation.md

fix(inspector): bound retained metadata and preserve cancellation

2026-10-09 05:15:23 +08:00

javascript-runtime-reconciliation.md

fix(tools)!: simplify direct invocation and harden boundary contracts (#555)

2026-10-05 20:16:44 +08:00

jeb-analysis.md

feat(jeb): add JEB engine provider over its MCP interface (#1536)

2026-10-10 23:03:27 +08:00

managed-code-analysis.md

feat(managed): select declaring types in inspect_managed_members

2026-10-12 08:31:37 +08:00

mcp-contracts.md

feat(mcp): derive an API surface view from retained web network captures (#1891)

2026-10-12 10:44:17 +08:00

mcp-prompts.md

feat(mcp): select views of retained analysis results (#1180)

2026-10-09 12:45:48 +08:00

migration-6.2.md

docs: correct MCP error and capture import guidance

2026-10-10 05:41:52 +08:00

native-investigation.md

fix(native): preserve universal Mach-O container identity

2026-10-12 09:29:07 +08:00

process-capture.md

feat(process): bound a finalization interval before forced capture timeout

2026-10-11 09:55:43 +08:00

raw-binary.md

feat(ghidra): apply validated analyzer overrides before analysis

2026-10-12 03:49:31 +08:00

reconstruction-obligation-ledgers.md

refactor: return complete analysis results inline

2026-09-29 08:07:24 +08:00

reconstruction-readiness.md

fix(tools)!: simplify direct invocation and harden boundary contracts (#555)

2026-10-05 20:16:44 +08:00

recorded-crashes.md

feat(native): inspect recorded crashes through pwntools and pwndbg (#1054)

2026-10-08 16:50:31 +08:00

releasing.md

fix(release): avoid duplicated contributor thanks

2026-10-11 11:49:49 +08:00

roadmap.md

docs: remove retired architecture and migration artifacts

2026-10-10 05:41:45 +08:00

testing.md

feat(setup): register DeepSeek Harness through setup, doctor and uninstall (#1929)

2026-10-12 11:06:26 +08:00

tool-design.md

fix(analysis): preserve relationship coverage across evidence and replay

2026-10-12 05:57:35 +08:00

user-visible-errors.csv

fix(errors): stop recommending retries for non-retryable failures (#1869)

2026-10-11 23:17:35 +08:00

wasm-artifacts.md

feat(target): explain static WASM inspection after native rejection

2026-10-12 07:00:30 +08:00

web-network-captures.md

test: strengthen public input and module lookup controls

2026-10-12 11:59:23 +08:00

web-runtime.md

fix(browser): treat module-import initiator positions as script positions

2026-10-08 16:44:25 +00:00

web-source-location.md

fix(bun): report the real runtime and enforce worker memory budgets on Windows (#1730)

2026-10-11 19:20:00 +08:00

website-module-trace.md

feat(browser): trace captured website module imports (#879)

2026-10-07 14:59:52 +08:00

website-script-export.md

fix(files): reject nonregular capture and JSON inputs

2026-10-10 01:49:54 +08:00

windows-ghidra-p0.md

feat(ghidra): inspect NativeAOT PE metadata read-only

2026-10-11 10:31:49 +08:00