25d3805e7f
Merge remote-tracking branch 'origin/main' into codex/audit-continuation-20261020-refresh20
2026-10-20 22:04:00 +08:00
82902465c4
docs(errors): describe live JSON heap admission
...
Replace the superseded fixed 64 MiB process-input refusal with the shared reader diagnostic and recovery text. Restore CSV field boundaries in the adjacent import-limit catalogue entry.
Refs #5077 . Verification is source consistency and CSV parsing, without a new large-file runtime claim.
2026-10-20 21:59:05 +08:00
cf5194f68e
fix(firmware): separate analysis and publication deadlines ( #4602 )
...
Separate extraction/inventory and caller-selectable publication budgets in the shared firmware workflow. Preserve phase, selected timeout, verified progress, caller cancellation identity and committed observations through cleanup. Enforce monotonic expiry even before timer callbacks run.
Validated with 101 targeted tests, full static checks, documentation checks and real OpenWrt CLI/MCP workflows with digest and cleanup verification. Existing main CI failures are documented separately.
Fixes #4176 .
2026-10-20 13:57:20 +00:00
52d1a72af0
feat(il2cpp): link native methods and export Ghidra seeds
...
Link IL2CPP metadata names to native addresses and types through shared CLI/MCP workflows, with bounded queries and atomic Ghidra seed export.
Preserve the original implementation by 8rulerstar and follow-up correctness, resource, provenance, and CI dependency repairs. Verified against real Windows/Android artifacts, independent references, actual Ghidra, and focused CLI/MCP tests.
Fixes #5112 .
2026-10-20 21:56:54 +08:00
e50a271c72
fix(mcp): guide agents through tool error recovery ( #5470 )
...
Add shared, typed input-contract and timeout-state recovery guidance. Normalize SDK input failures within the actual MCP wire budget, preserve full diagnostics and protocol metadata, and retain original Evidence when normalized delivery would exceed the budget.
Fixes #5431 .
2026-10-20 21:45:05 +08:00
c374c2fe72
fix(ghidra): preserve partial dossiers on decompiler failure ( #4650 )
...
Preserve listing-backed facts and explicit unavailable decompiler facets when one function fails. Retain Evidence while excluding transient failures and derived workflows from snapshot reuse; keep healthy cache reuse and owned cleanup semantics.
Fixes #4644 .
2026-10-20 12:08:08 +00:00
0c440bfc07
fix(cli): match listener recovery guidance to system failure
...
Classify listener errno and lifecycle phase at the transport owner. Preserve native cause and unknown codes while distinguishing host lookup, unavailable address, occupied port and permission recovery.
Refs #5455 .
2026-10-20 19:54:56 +08:00
a4dbb36d8e
fix(javascript): retain uncertainty for missing source map mappings
...
Share the required mappings field contract and retain readable declarations across malformed indexed leaves while marking graph coverage partial.
Refs #5469 .
2026-10-20 19:54:33 +08:00
0e83d92c58
fix(mcp): advertise existing absolute path constraints
...
Reuse the schema-visible host path owner across session, firmware, managed, browser, Electron and Evidence-file inputs. Keep existing runtime and CLI path semantics.
Refs #5493 .
2026-10-20 19:54:14 +08:00
ee12d517a2
fix(prompts): describe crash document without provider assumptions
...
Refs #5474 . Use the existing provider-neutral document selector wording; public prompt list/render tests passed without starting providers.
2026-10-20 19:39:31 +08:00
9cf7a7cb0d
fix(protobuf): preserve partial facts for malformed web trailers
...
Parse gRPC-Web trailer blocks with typed failures, enforce field values and lower-case names, and propagate unexpected decoder failures. Retain earlier fields and raw capture bytes across binary and text framing.
Refs #5386 . Related control-value fix : #5422 .
2026-10-20 19:39:18 +08:00
00a055be0f
chore: merge latest main before publishing audit fixes
2026-10-20 19:29:26 +08:00
22278b20c0
chore: merge main into audited lifecycle fixes
2026-10-20 19:28:09 +08:00
3cf6206614
fix(mcp): require absolute evidence bundle paths
2026-10-20 19:26:17 +08:00
4714c7eaa3
fix(cli): preserve typed failures through output filters
2026-10-20 19:26:08 +08:00
cec8f1e8f3
fix(providers): offer only admitted ambiguity choices
2026-10-20 19:25:59 +08:00
21e0c580e7
feat(il2cpp): read member names, string literals and metadata versions 24 and 27 ( #5326 )
...
* feat(il2cpp): read member names, string literals and metadata versions 24 and 27
Adds field, property, event and parameter names with their owners, managed string literals, and the version 24 and 27 header layouts to inspect_il2cpp_metadata, with filtered pages for the new collections. Member decoding yields between row batches like the other row readers.
* fix(il2cpp): bound metadata expansion and query parameter owners
* test(il2cpp): cover nonempty property and event tables
---------
Co-authored-by: gensokyo-dev <gensokyo-dev@users.noreply.github.com >
2026-10-20 19:21:42 +08:00
f01dccab77
fix(javascript): retain cancellation after observed worker failure
2026-10-20 19:13:06 +08:00
5f0bc86d1a
docs(ko): describe update alias and bounded output
2026-10-20 19:05:50 +08:00
f69332c94c
test(process): bind capture watchdog cleanup to test lifetime
2026-10-20 19:05:44 +08:00
2e03251b61
fix(zip): retain raw filename provenance for legacy decoding
2026-10-20 19:05:38 +08:00
108c0e7e49
fix(macho): share width-specific load command alignment
2026-10-20 19:05:31 +08:00
266dd1d958
fix(go): reuse PE content spans for build metadata search
2026-10-20 19:05:24 +08:00
cac12ae334
fix(workers): retain observed protocol failures across cancellation
2026-10-20 19:05:00 +08:00
861c11ec77
fix(evidence): preserve execution profiles in composed observations
2026-10-20 19:04:52 +08:00
9051809343
fix(adb): preserve empty string activity extras
2026-10-20 18:38:13 +08:00
9db5f1b276
fix(apple): keep empty asset catalog pages complete
2026-10-20 18:38:05 +08:00
3a9176098d
fix(javascript): preserve observed worker failure ordering
2026-10-20 18:38:00 +08:00
483678bf9f
fix(managed): retain operand-free instruction anchors
2026-10-20 18:37:56 +08:00
052956af34
fix(doctor): validate Hopper startup timeout in readiness checks ( #3755 )
...
Fixes #3306 . Reuse the runtime timeout parser in doctor, preserve scope semantics and separate setting validation from provider configuration.
Co-authored-by: xiajiahang <xiajiahang82@gmail.com >
Co-authored-by: Kaoru0822 <208281322+kaoru0822-kitauji@users.noreply.github.com >
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-10-20 10:32:12 +00:00
aa314ab682
ci(windows): run environment registration regressions ( #5409 )
...
Retain 13 Windows-only environment/setup regressions in the curated native lane. Select Windows qualification for both their three test files and their client configuration, registration and DSH production owner families. Guard membership and actual Git-diff classification; qualify all 60 target cases on hosted Windows.
2026-10-20 10:18:17 +00:00
c23e161629
perf(mcp): record catalog identities for all schema profiles ( #5415 )
...
Share compiled schema conversion while recording all four built-in catalog profiles. Preserve canonical hashes, output validation and custom-budget fallback. Refs #723 .
Co-authored-by: Kaoru0822 <208281322+kaoru0822-kitauji@users.noreply.github.com >
2026-10-20 10:09:28 +00:00
1417bf943b
feat(native): match retained function inventories across builds ( #5390 )
...
Match retained native inventories through shared CLI/MCP workflows with conservative symbol/byte correspondence, unresolved structural candidates, complete Evidence provenance and bounded paged reads.
Closes #5343 .
2026-10-20 09:48:52 +00:00
e84468c0bb
fix(setup): preserve Windows environment override identity ( #4946 )
...
* fix(setup): preserve Windows environment override identity
* fix(setup): preserve selected platform and YAML alias metadata
* fix(setup): reconcile layered environment and projected YAML identities
2026-10-20 17:25:51 +08:00
afde435c94
test(setup): use native Windows launcher in layered OpenCode fixture ( #4947 )
2026-10-20 17:25:38 +08:00
e9fc8fb30c
fix(javascript): preserve runtime path bytes and Electron ownership ( #4941 )
...
* fix(javascript): preserve literal percent runtime paths
* fix(javascript): ignore resolve prefixes before the final anchor
* fix(electron): retain application roots for loadFile declarations
* fix(electron): resolve loadFile from enclosing application package
* fix(electron): retain outer application root across package scopes
* fix(electron): derive application ownership from inventoried packages
* fix(electron): retain resolved package entrypoint ownership
* fix(electron): preserve competing application ownership
* fix(electron): retain invalid and omitted runtime ownership
* fix(electron): preserve omitted module ownership and runtime paths
* fix(electron): preserve proven roots before confining page paths
* fix(electron): retain possible owners behind missing imports
* fix(electron): distinguish absent imports and owned page candidates
* fix(electron): keep unavailable JSON out of owner gaps
* fix(electron): retain exact loader formats and default entry status
* fix(electron): retain unavailable entrypoint ownership candidates
* test(ghidra): preserve Windows Node probe prerequisites
* test(ghidra): assert cancellation during profile shutdown
* fix(electron): separate examined imports from frontend ownership
* fix(electron): retain unavailable directory entrypoint owners
* test(jeb): retain Linux ownership prerequisite in isolation
* fix(javascript): retain unchecked loader ownership and literal main paths
* fix(javascript): preserve runtime paths and call-site module aliases
* fix(javascript): bound module alias traversal and preserve projections
* fix(javascript): retain host module and nested artifact path boundaries
* fix(javascript): preserve ESM and archive module loader provenance
* test(javascript): distinguish unmapped containers from missing exports
* fix: retain default module aliases and Electron builtin imports
* fix: preserve host file URL and inward ASAR ownership
* fix: preserve CommonJS file URL classification in CI fixtures
* fix: retain bound module loaders and Windows entrypoint uncertainty
* fix: retain ASAR uncertainty and invalidate changed Electron app roots
* fix(javascript): retain ownership uncertainty across loader boundaries
* fix(javascript): preserve loader sources and bound alias queries
* fix(javascript): retain destructured loader sources
* fix(javascript): preserve loader uncertainty at resolution boundaries
* fix(javascript): preserve callable and package launch ownership
* fix(javascript): preserve captured values across member reads
* test(process): assert tagged filesystem cancellation failures
* fix(javascript): preserve inventory bases and invocation read timing
* fix(javascript): preserve ownership across indirect and unread loads
* test(javascript): order fixture directory creation on Windows
* test(javascript): share ordered filesystem fixture writer
* fix(javascript): unify loader provenance and package validation
* fix(javascript): preserve captured Node require loader values
* fix(javascript): preserve loader invocation authority
* fix(javascript): verify generic loader invocation authority
* fix(javascript): preserve conditional loader method alternatives
* fix(javascript): require proven factories for source association
* fix(javascript): honor replaced Electron app path setters
* fix(javascript): prove path and assignment source ownership
* fix(javascript): retain native delegate eligibility through shared writes
* fix(process): settle stale baseline errors after confirmed absence
* fix(javascript): preserve assignment and path boundary evidence
* fix(javascript): prove source-directory resolve anchors
* fix: preserve application path provenance and portable schemas
* fix(javascript): retain CommonJS exported setter effects
* fix: isolate Linux identity observations and retain native module exports
* fix(javascript): preserve published app and helper provenance
* fix(javascript): normalize typed stores and native path fixtures
2026-10-20 17:25:19 +08:00
c284168c4b
fix(objdump): scope debug-link limitations to DWARF requests
2026-10-20 17:18:21 +08:00
be20ac3740
fix(source-maps): preserve failure priority and cancellation provenance
2026-10-20 17:18:20 +08:00
cc73587ec4
fix(lldb): preserve observed failures through interrupted cleanup
2026-10-20 17:18:20 +08:00
98edca9f96
fix(pwndbg): clarify debugger context output limit message
2026-10-20 17:18:19 +08:00
98a5e56380
docs(ghidra): explain server-wide analyzer override scope
2026-10-20 17:18:19 +08:00
7c6142efdc
fix(ghidra): retain stable Homebrew installation aliases
2026-10-20 17:18:18 +08:00
562dab00c5
fix(mcp): retain protocol envelopes when replacing oversized errors
2026-10-20 17:18:18 +08:00
3b02179560
fix(javascript): preserve uncertain call targets across activation boundaries
2026-10-20 17:18:18 +08:00
599fdac029
fix(browser): stop late navigation before releasing attached sessions
2026-10-20 17:18:17 +08:00
696832caa3
fix(gdb): gate readiness and retain caller cancellation through cleanup
2026-10-20 17:17:16 +08:00
459a356edb
fix(evm): preserve cancellation and exact cleanup ownership
2026-10-20 17:17:16 +08:00
419502c8d0
fix(pcap): preserve cancellation and endpoint evidence through cleanup
2026-10-20 17:17:15 +08:00
1006714271
fix(sqlite): retain primary outcomes through cleanup retries
2026-10-20 17:17:15 +08:00
e367750b1b
fix(process): preserve observed command failures and native ownership
2026-10-20 17:17:14 +08:00
morluto