4aa51bfe19
fix(reverse): reconcile cleanup ownership and mutation diagnostics ( #2799 )
...
* feat(process): add owned debugger shutdown lifecycle
* feat(reverse): add local inspection commands
* feat(gdb): add persistent debugger integration
* feat(cutter): add Cutter bridge integration
* test(reverse): enforce complete integration coverage
* fix(process): preserve debugger shutdown ownership
* fix(reverse): retain evidence across interrupted commands
* fix(gdb): honor captured provider environment
* test(process): cover debugger shutdown retries
* fix(reverse): retain evidence for interrupted providers
* test(process): cover debugger shutdown retries
* fix(reverse): retain evidence for interrupted providers
* fix(server): snapshot provider environment at creation
* fix(reverse): close review gaps with complete coverage
* fix(reverse): address inspection review findings
* fix(gdb): bound sessions and retain cleanup ownership
* fix(ci): require reverse-tools quality lane
* fix(process): unref inherited debugger output pipes
* fix(reverse): address remaining PR 1960 findings
* fix(gdb): address remaining PR 1961 findings
* fix(reverse): account for unrestricted provider execution
* fix(process): retain debugger ownership until safe shutdown
* fix(process): preserve replacement debugger sessions
* fix(reverse): preserve admission and output provenance
* fix(process): retain exited debugger until output settles
* fix(mcp): bound provider admission and debugger cleanup
* fix(reverse): preserve failure provenance and classify E2BIG
* fix(gdb): preserve startup cleanup and detach safety
* fix(process): retain debugger ownership after detach failure
* fix(reverse): preserve mutation and failure provenance
* fix(gdb): address debugger review findings
* fix(reverse): rebind sessions after external mutation
* fix(process): cap debugger output after exit
* fix(gdb): protect one-shot detach verification
* feat(debugger): add reverse tool coverage gate
* test(debugger): cover integrated failure paths
* fix(gdb): bound and preserve session observations
* fix(gdb): address review regressions
* style: format merged integration files
* fix(reverse): preserve session and output evidence
* refactor(gdb): share repeated test and partial result setup
* fix(gdb): invalidate TTY proof for Python aliases
* fix(reverse): retain failure output byte counts
* test(process): synchronize late debugger output
* fix(gdb): invalidate TTY proof for wrapped commands
* fix(gdb): recognize wit command abbreviation
* test(reverse): wait for cancelled descendant readiness
* test(reverse): bound descendant cancellation cleanup
* style(reverse): format integration tests and adapters
* style: format reverse engineering integration files
* test(reverse): remove duplicate environment harness
* test(gdb): share session startup assertions
* fix(gdb): invalidate output proof for command abbreviations
* test(reverse): share composition edge case scenarios
* fix(ci): recognize verification and mutation tool entries
* test(rizin): cover successful fake inferior detach
* test(cli): align full output failure envelope
* test(cli): isolate reverse command lifecycle service
* test(process): share debugger output fixture setup
* fix(binary): preserve high-bit Windows signature bytes
* style(binary): format Windows signature parser
* test(mcp): preserve call coverage in unchanged comparison
* fix(ci): include reverse tools Vitest configs in lint cache
* fix(mcp): preserve target content on delivery errors
* ci: align duplication ceiling with expanded suite
* test(reverse): allow signal admission mutants
* fix(reverse): bound retained cleanup failures to process owners
* fix(test): replace drifting mutation ranges with owned selectors
* fix(reverse): admit persistent commands and retain cleanup ownership
* fix(cutter): recover timed-out commands from exact receipts
* fix(cutter): reject unsupported bridge request kinds
* fix(ci): repair client format and shared verification fixtures
* fix(native): preserve debugger cleanup ownership and bridge authentication
* test(native): retain diagnostics without perfect coverage requirements
* chore(licenses): refresh locked dependency inventory and notices
* fix(test): exclude transient command locks from mutation sandboxes
* fix(gdb): admit only platforms with safe detach verification
* fix(cutter): retain bounded completion receipts until acknowledgement
* fix(cutter): acknowledge commands rejected before UI dispatch
* test(reverse): fail cancellation checks before fixture teardown
* test(gdb): clean up the retained broken-stdin fixture owner
* docs(test): clarify focused provider verification scope
* fix(rizin): retain close cleanup failures
* fix(gdb): wait for inferior stop and bound MI buffering
* fix(cutter): retain failed receipt acknowledgements
* fix(rizin): return retained session identity on rebind failure
* fix(gdb): preserve startup cancellation and lossy status
* fix(rizin): retain launch provenance and assemble frames once
* fix(cutter): recover receipts across callers and bound discovery
* docs: describe debugger evidence and bridge recovery
* fix(process): keep cleanup incomplete while writers remain
Stopping a debugger no longer reports success when inherited output
streams stay open, so BinarySession cannot reopen a binary a child is
still changing. Concurrent Cutter cleanup retries share one receipt
acknowledgement instead of treating a consumed receipt as failure.
* fix(debuggers): recover cleanup with captured process identities
* fix(analysis): retire sessions after unrestricted commands
* fix(cli): preserve completed evidence after cleanup recovery
* fix(cutter): bound frame collection and coalesce cleanup
* fix(windows): resolve selected provider paths absolutely
* fix(gdb): report decoding loss in failed startup evidence
* fix(rizin): scope decoding loss to collected command frames
* test(mcp): cover snapshot retirement in reverse tools CI
---------
Co-authored-by: Daniel Gonçalves Araujo <47118053+dandgabr@users.noreply.github.com >
Co-authored-by: REA Maintainers <noreply@github.com >
Co-authored-by: OpenAI Codex <codex@users.noreply.github.com >
Co-authored-by: Cursor Agent <cursoragent@cursor.com >
2026-10-14 04:47:34 +08:00
0bf01dfa59
perf(ci): share trusted caches and fail fast on PR test failures ( #3007 )
...
* fix(ci): restore inherited validation failures
* perf(ci): share trusted caches and fail fast on PR test failures
* fix(ci): bound static cache and hash vitest config for knip
- Bound the rolling .turbo/cache snapshot with 7d/500MB eviction so each
trusted main save cannot accumulate history toward the GitHub limit.
- Hash vitest.config.ts in knip inputs so removing the CiTestSequencer
import invalidates the cached passing check.
- Cover both in cache-policy and task-hash regressions.
2026-10-14 04:25:57 +08:00
c6503edfc4
ci: pin GitHub Actions to full commit SHAs ( #1901 )
...
* ci: pin GitHub Actions to full commit SHAs
Replace every third-party `uses: owner/repo@vN` reference in
.github/workflows with the 40-character commit SHA that the tag
currently resolves to, keeping the exact release as a trailing comment.
Each pin was checked with `git ls-remote --tags`: the floating major tag
and the commented release dereference to the same commit. Local
reusable workflows are unchanged.
Re-pin reactivecircus/android-emulator-runner from the SHA of the
annotated `v2` tag object (4c44018e) to the commit it points to
(a421e438, v2.38.0); Actions resolves both, but only the commit SHA is
an immutable reference that tooling can compare with the release.
Update the Windows Ghidra workflow trust-boundary test to require
SHA-pinned setup-node and upload-artifact references instead of the
previous floating tags.
Validation: actionlint v1.7.7 (-shellcheck= -pyflakes=, as in CI), YAML
parse of all workflows, no remaining unpinned third-party `uses:`, and
the workflow boundary/conformance tests.
* style(ci): format action identity assertion
Retain formatting edits produced before the user stopped validation.
Source inspection and git diff --check only. Tests, builds and typechecks skipped by explicit user request. GitHub review writes paused globally.
---------
Co-authored-by: morluto <76467478+morluto@users.noreply.github.com >
2026-10-13 21:38:46 +08:00
490a285070
ci: reuse current-run builds across provider lanes
2026-10-13 19:30:50 +08:00
db3c9f084b
fix(ci): keep cancellation ownership in the calling workflow
...
Remove redundant ref-based concurrency from reusable provider and website workflows. Their old groups could cancel qualification from another CI tier even though the callers used separate groups. Disposable hosted jobs now inherit caller scheduling; direct manual dispatches remain independent.
Validate every called CI workflow has no independent cancellation group. Validation: 100 focused scope/gate tests and actionlint 1.7.7.
2026-10-13 17:15:42 +08:00
a00c34dcb1
ci: reuse portable Turbo outputs across verification runs
2026-10-11 18:43:22 +08:00
66c344e289
ci: scope provider and native verification by changed inputs ( #1660 )
2026-10-11 08:31:27 +08:00
b5afa5f91e
feat(browser): attribute native execution and listener sources ( #917 )
...
* feat(browser): attribute native execution and listener sources
Integrate finite native precise-coverage windows and direct DOM listener inspection through shared CLI/MCP workflows, exact session script identities, inline source evidence and owned instrumentation cleanup.
Refs #881 , #774
Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)
* fix(browser): preserve runtime identity and settle fixture cleanup
Retain complete reported initiator objects, reject changing loader availability, propagate the selected operation through main-frame authorization and complete effect/help inventories. Close only the synthetic owned Chrome via its native endpoint, await process-group settlement and preserve primary verification errors during cleanup.
Refs #881
Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)
* fix(browser): settle invalid events and preserve document evidence
Accept same-document URL changes with proven stable loader identity, retain metadata without inventing ownership, terminate malformed event collection immediately, and sanitize known transport URLs without erasing sourceURL declarations.
Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)
* fix(browser): end detached target windows and sanitize coverage identities
Reuse the existing flat-session event matcher, retain prearming termination, and apply the source identity policy to coverage URLs. Add real MCP target-close verification and producer regressions for detachment orderings.
Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)
* fix(browser): retain final sample metadata and settle fatal protocol failures
Keep source inventory open through the resetting sample, propagate fatal wire failures without outstanding commands, and check listener collection failures after final document validation.
Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)
* fix(browser): require default execution worlds for website attribution
Preserve native context and world metadata without treating same-frame isolated or unknown contexts as website sources. Verify actual Chrome isolated function execution before excluding its coverage, and cover ambiguous world metadata with producer regressions.
Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)
* fix(browser): revalidate runtime source joins and selector failures
Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)
---------
Co-authored-by: morluto <76467478+morluto@users.noreply.github.com >
2026-10-07 21:45:07 +08:00
morluto