morluto 584937c761 feat(mcp): make MCP startup phase budgets configurable (#6304) ...

* feat(mcp): make MCP startup phase budgets configurable

REA_MCP_INITIALIZE_BUDGET_MS, REA_MCP_TOOLS_LIST_BUDGET_MS,
REA_MCP_FIRST_CATALOG_BUDGET_MS, and REA_MCP_DOCTOR_DEADLINE_MS keep
today's defaults and refuse values outside 1 to 2147483647 ms. Codex's
30 second startup figure stays client guidance.

Co-authored-by: morluto <morluto@users.noreply.github.com>

* fix(mcp): enforce the first-catalog budget while phases are pending

The packaged startup probe applied each phase timeout on its own and
checked REA_MCP_FIRST_CATALOG_BUDGET_MS only after both requests
finished. A shorter first-catalog budget now clamps the in-flight
request and cancels it from one deadline measured at startup.

Co-authored-by: morluto <morluto@users.noreply.github.com>

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: morluto <morluto@users.noreply.github.com>

2026-10-22 23:54:01 +08:00

..

agent-evaluation-commands.mjs

fix(evaluation): prepare and retain native ownership helpers (#5615)

2026-10-20 16:29:46 +00:00

artifact-e2e.mjs

fix(ci): validate artifact MCP replies against named schemas (#6021)

2026-10-21 23:28:12 +08:00

browser-capture-metadata-budget-e2e.mjs

fix(browser): bound capture work and preserve observation gaps

2026-10-14 08:31:29 +08:00

browser-dom-destinations-e2e.mjs

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

browser-module-e2e.mjs

fix(verify): report every owned cleanup failure before success

2026-10-14 13:40:53 +08:00

browser-nested-source-map-e2e.mjs

fix(verify): report every owned cleanup failure before success

2026-10-14 13:40:53 +08:00

browser-network-assertions.mjs

fix(browser): preserve body API provenance through script export

2026-10-12 14:12:19 +08:00

browser-network-e2e.mjs

fix(verify): report every owned cleanup failure before success

2026-10-14 13:40:53 +08:00

browser-popup-e2e.mjs

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

browser-runtime-e2e.mjs

fix(verify): report every owned cleanup failure before success

2026-10-14 13:40:53 +08:00

browser-runtime-fixture-lifecycle.mjs

fix(verify): report every owned cleanup failure before success

2026-10-14 13:40:53 +08:00

browser-runtime-selector-e2e.mjs

feat(browser): attribute native execution and listener sources (#917)

2026-10-07 21:45:07 +08:00

browser-runtime-termination-e2e.mjs

fix(browser): retain precise observation termination facts

2026-10-21 14:50:32 +08:00

browser-runtime-world-e2e.mjs

feat(browser): attribute native execution and listener sources (#917)

2026-10-07 21:45:07 +08:00

browser-scenario-environment-e2e.mjs

fix(browser): report attached locale coverage limits

2026-10-15 19:37:19 +08:00

browser-scenario-service-worker-setup-e2e.mjs

test(browser): select a bounded service-worker setup deadline (#6186)

2026-10-22 08:16:34 +08:00

browser-scenario-service-workers-e2e.mjs

test(browser): verify typed worker refusals across navigations

2026-10-15 03:43:29 +08:00

browser-scenario-storage-e2e.mjs

fix(browser): confirm service-worker cancellation cleanup (#4010)

2026-10-15 20:08:30 +08:00

browser-scenario-verifier.mjs

fix(browser): retain scenario observations across failures

2026-10-09 22:46:08 +08:00

browser-screenshot-e2e.mjs

fix(mcp): deliver typed errors without invalid structured output (#1277)

2026-10-09 13:54:32 +00:00

browser-script-export-assertions.mjs

refactor(javascript): group domain semantics and contracts (#907)

2026-10-07 17:16:58 +08:00

browser-script-export-e2e.mjs

fix(verify): report every owned cleanup failure before success

2026-10-14 13:40:53 +08:00

browser-socket-e2e.mjs

feat(browser): attach passive tools to browsers without HTTP discovery (#2346)

2026-10-14 00:36:37 +08:00

browser-source-map-e2e.mjs

fix(verify): report every owned cleanup failure before success

2026-10-14 13:40:53 +08:00

browser-url-userinfo-e2e.mjs

fix(browser): preserve URL paths when removing credentials (#4731)

2026-10-17 23:23:37 +08:00

browser-verifier-assertions.mjs

fix(browser)!: preserve WebSocket connections and comparable payload coverage

2026-10-11 09:43:25 +08:00

catalog-builders.mjs

feat(apk): inspect signing declarations with retained fact queries

2026-10-22 11:48:09 +00:00

catalog-cli.d.mts

refactor(catalog): import CLI metadata from its owner

2026-10-10 00:49:14 +08:00

catalog-cli.mjs

…

catalog-core.mjs

feat(apk): inspect signing declarations with retained fact queries

2026-10-22 11:48:09 +00:00

clean-linux-hopper-runtime.d.mts

fix: isolate Linux inventory and repair DEX schema regex (#2910)

2026-10-14 00:56:43 +08:00

clean-linux-hopper-runtime.mjs

fix(process): preserve cleanup ownership and normalize captures once

2026-10-14 08:19:07 +08:00

conformance-fixtures.d.mts

…

conformance-fixtures.mjs

…

development-tests.d.mts

build: separate runtime artifacts and supervise command ownership

2026-10-09 20:11:17 +08:00

development-tests.mjs

perf(mcp): defer analysis runtime after catalog discovery (#4424)

2026-10-22 03:07:31 +00:00

docs-facts.d.mts

docs: clarify onboarding and align provider guidance (#745)

2026-10-06 22:57:36 +08:00

docs-facts.mjs

docs: move translated READMEs under docs/readme (#2165)

2026-10-13 22:25:32 +08:00

elf-section-name-fixtures.mjs

feat(native): inspect offline ELF layout through pwntools (#1037)

2026-10-08 14:22:08 +08:00

format-generated-file.mjs

…

generated-file.d.mts

…

generated-file.mjs

fix(build): clarify generated-file check hint and drop redundant catalog step (#998)

2026-10-08 00:21:39 +08:00

ghidra-installation-inspection.d.mts

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

ghidra-installation-inspection.mjs

fix(tests): restore Android prerequisite verification

2026-10-18 12:46:25 +00:00

ghidra-reference-snapshot-e2e.mjs

fix(targets): cancel resolution before provider admission

2026-10-10 00:35:17 +08:00

ghidra-verifier-timeouts.d.mts

fix(test): honor Ghidra startup budgets in Windows verification (#3417)

2026-10-15 03:50:50 +08:00

ghidra-verifier-timeouts.mjs

fix(test): honor Ghidra startup budgets in Windows verification (#3417)

2026-10-15 03:50:50 +08:00

ghidra-windows-byte-search.mjs

feat(ghidra): admit ARM PE targets on Windows (#3965)

2026-10-15 20:11:26 +08:00

ghidra-windows-fixture-options.d.mts

feat(ghidra): admit ARM PE targets on Windows (#3965)

2026-10-15 20:11:26 +08:00

ghidra-windows-fixture-options.mjs

feat(ghidra): admit ARM PE targets on Windows (#3965)

2026-10-15 20:11:26 +08:00

http3-capture-assertions.mjs

test(http3): add real MITM capture verification lab (#1997)

2026-10-14 01:09:19 +08:00

http3-capture-assertions.test.mjs

test(http3): add real MITM capture verification lab (#1997)

2026-10-14 01:09:19 +08:00

http3-verifier-lifecycle.mjs

test(http3): add real MITM capture verification lab (#1997)

2026-10-14 01:09:19 +08:00

http3-verifier-lifecycle.test.mjs

test(http3): add real MITM capture verification lab (#1997)

2026-10-14 01:09:19 +08:00

ida-feature-trace.d.mts

feat(ida): resolve containing procedures and report the admitted program as the document (#2374)

2026-10-13 20:56:20 +08:00

ida-feature-trace.mjs

feat(ida): resolve containing procedures and report the admitted program as the document (#2374)

2026-10-13 20:56:20 +08:00

jadx-configuration-inspection.d.mts

fix(tests): restore Android prerequisite verification

2026-10-18 12:46:25 +00:00

jadx-configuration-inspection.mjs

fix(tests): restore Android prerequisite verification

2026-10-18 12:46:25 +00:00

javascript-application-analysis.mjs

fix(artifacts)!: retain cleanup owners through client shutdown

2026-10-11 04:43:02 +08:00

javascript-application-paths.d.mts

fix(javascript): retain selected application paths in Evidence

2026-10-20 00:37:45 +08:00

javascript-application-paths.mjs

fix(javascript): retain selected application paths in Evidence

2026-10-20 00:37:45 +08:00

javascript-facts-reference.mjs

feat(javascript): query retained application facts by exact path (#4265)

2026-10-16 12:46:53 +08:00

javascript-file-scope-oracle.d.mts

fix(javascript): preserve analysis applicability after interruption (#4207)

2026-10-16 03:46:00 +08:00

javascript-file-scope-oracle.mjs

fix(javascript): preserve analysis applicability after interruption (#4207)

2026-10-16 03:46:00 +08:00

kuna-native-reference-verifier.mjs

fix(kuna): own version-probe processes through output and cleanup

2026-10-21 00:09:34 +08:00

kuna-reference-verifier.mjs

feat(kuna): add bounded call relationships and exact xrefs

2026-10-15 11:12:47 +00:00

kuna-string-verifier.mjs

fix(kuna): own version-probe processes through output and cleanup

2026-10-21 00:09:34 +08:00

large-result-mcp.mjs

fix(mcp): retain complete application results across response limits

2026-10-08 23:46:02 +08:00

mcp-startup-probe.d.mts

feat(mcp): make MCP startup phase budgets configurable (#6304)

2026-10-22 23:54:01 +08:00

mcp-startup-probe.mjs

feat(mcp): make MCP startup phase budgets configurable (#6304)

2026-10-22 23:54:01 +08:00

mcp-verifier-results.mjs

perf(mcp)!: compact repeated session discovery facts (#1988)

2026-10-12 07:40:19 +08:00

module-boundaries.d.mts

refactor(process): separate capture implementation from analyst workflows (#988)

2026-10-08 00:46:21 +08:00

module-boundaries.mjs

feat(python): inspect CPython pyc headers and marshal code objects (#4826)

2026-10-22 19:00:08 +08:00

native-value-e2e.mjs

fix(ghidra): preserve function facet and call coverage (#3002)

2026-10-14 07:52:14 +08:00

nativeaot-build.d.mts

fix(ghidra): resolve file offsets in decompile (#2101)

2026-10-13 18:23:17 +08:00

nativeaot-build.mjs

fix(ghidra): resolve file offsets in decompile (#2101)

2026-10-13 18:23:17 +08:00

product-catalog.d.mts

refactor(catalog): import CLI metadata from its owner

2026-10-10 00:49:14 +08:00

product-catalog.mjs

perf(mcp)!: default to compact input schema advertisements (#5975)

2026-10-22 00:17:11 +08:00

real-ghidra-address-boundaries.d.mts

test(ghidra): preserve address alias restoration failures (#3060)

2026-10-14 14:33:26 +08:00

real-ghidra-address-boundaries.mjs

test: harden verification fixtures and runtime coverage

2026-10-14 08:59:27 +08:00

real-ghidra-batch-identity.mjs

fix(native): distinguish batch selectors from resolved entries

2026-10-09 19:09:30 +08:00

real-ghidra-borland-seh.mjs

fix(ghidra): retain function boundary limitations on references

2026-10-15 06:20:20 +08:00

real-ghidra-boundaries.mjs

fix(ghidra): preserve function facet and call coverage (#3002)

2026-10-14 07:52:14 +08:00

real-ghidra-compact-references.mjs

feat(native): expose typed incoming references at exact addresses (#1715)

2026-10-11 19:52:09 +08:00

real-ghidra-entry-aliases.mjs

test(ghidra): preserve metadata in interior-label fixture

2026-10-11 06:10:10 +08:00

real-ghidra-file-offsets.d.mts

fix(test): honor Ghidra startup budgets in Windows verification (#3417)

2026-10-15 03:50:50 +08:00

real-ghidra-file-offsets.mjs

fix(test): honor Ghidra startup budgets in Windows verification (#3417)

2026-10-15 03:50:50 +08:00

real-ghidra-instruction-flow.mjs

fix(ghidra): preserve decoded return flow evidence

2026-10-09 18:53:28 +08:00

real-ghidra-large-results.mjs

perf(ghidra): omit redundant raw results (#5355)

2026-10-20 05:14:33 +00:00

real-ghidra-namespace-annotations.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

real-ghidra-snapshot-lifecycle.mjs

fix(ghidra): encode Java probe output as UTF-8 (#2206)

2026-10-13 00:45:23 +08:00

real-ghidra-target-admission.mjs

test(ghidra): isolate source admission failure sessions

2026-10-15 20:45:35 +08:00

real-hopper-boundaries.mjs

fix(hopper): verify bookmark names and clear existing labels

2026-10-20 22:39:23 +08:00

real-hopper-cleanup.d.mts

fix(hopper): verify lease cleanup and repair the macOS test lane (#1111)

2026-10-09 02:41:34 +08:00

real-hopper-cleanup.mjs

fix(hopper): verify lease cleanup and repair the macOS test lane (#1111)

2026-10-09 02:41:34 +08:00

real-hopper-cli-selectors.mjs

fix(cli): accept exact native names through explicit selectors

2026-10-09 05:46:16 +08:00

real-hopper-exhaustive-search.d.mts

…

real-hopper-exhaustive-search.mjs

…

real-hopper-fixture.d.mts

…

real-hopper-fixture.mjs

fix(hopper): preserve typed string values and verify real searches

2026-10-09 05:12:36 +08:00

real-hopper-function-basics.mjs

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

real-hopper-inventory.mjs

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

real-hopper-navigation.mjs

fix(hopper): probe interior navigation from multi-byte instructions (#1285)

2026-10-10 06:07:01 +08:00

real-hopper-owner-exit.mjs

fix(verification): retain Hopper ownership evidence across owner exit (#5357)

2026-10-20 05:52:06 +00:00

real-hopper-search.d.mts

test: harden verification fixtures and runtime coverage

2026-10-14 08:59:27 +08:00

real-hopper-search.mjs

test(hopper): bind string assertions to observed source extents

2026-10-14 07:12:10 +08:00

real-hopper-selection.mjs

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

real-hopper-semantic.d.mts

…

real-hopper-semantic.mjs

fix(native): preserve observed function dossier coverage

2026-10-14 07:11:55 +08:00

real-hopper-session-isolation.mjs

fix(hopper): reserve Linux demo application before launch (#1158)

2026-10-09 10:14:25 +08:00

real-hopper-source-binding.mjs

fix(hopper): bind file mappings to verified source bytes

2026-10-09 06:13:41 +08:00

real-hopper-workflows.mjs

fix(analysis)!: scope call-graph caveats to their observed relationships

2026-10-12 09:29:07 +08:00

recorded-core-fixtures.py

fix(process): settle native exit and repair ownership verification (#5249)

2026-10-20 02:01:00 +08:00

release-checkpoint.mjs

fix(release): publish reviewed release PR merges

2026-10-09 08:44:47 +08:00

release-notes-github.mjs

feat(release): add contributor-aware release notes workflow

2026-10-11 10:19:16 +08:00

release-notes-publication.mjs

feat(release): add contributor-aware release notes workflow

2026-10-11 10:19:16 +08:00

release-notes.mjs

fix(release): exclude Codex automation from contributor thanks

2026-10-14 19:06:36 +08:00

release-package-canary.mjs

perf(mcp)!: default to compact input schema advertisements (#5975)

2026-10-22 00:17:11 +08:00

reverse-tools-mutation-targets.mjs

fix(reverse): reconcile cleanup ownership and mutation diagnostics (#2799)

2026-10-14 04:47:34 +08:00

test-discovery.d.mts

refactor: add incremental capability migration safeguards (#819)

2026-10-07 10:56:06 +08:00

test-discovery.mjs

refactor: add incremental capability migration safeguards (#819)

2026-10-07 10:56:06 +08:00

test-projects.d.mts

perf(ci): start source feedback early and diagnose stalled runs (#3013)

2026-10-14 06:07:08 +08:00

test-projects.mjs

feat(apk): inspect signing declarations with retained fact queries

2026-10-22 11:48:09 +00:00

test-temporary-ownership.d.mts

fix(tests): preserve temporary fixture ownership

2026-10-18 11:34:44 +00:00

test-temporary-ownership.mjs

fix(tests): preserve temporary fixture ownership

2026-10-18 11:34:44 +00:00

unrelated-hopper-sentinel.mjs

…

verifier-cleanup.d.mts

fix(verify): report every owned cleanup failure before success

2026-10-14 13:40:53 +08:00

verifier-cleanup.mjs

fix(lifecycle): preserve observations and cleanup ownership (#4274)

2026-10-16 11:48:59 +08:00

verifier-file-resources.d.mts

fix(kuna): own version-probe processes through output and cleanup

2026-10-21 00:09:34 +08:00

verifier-file-resources.mjs

fix(tests): restore Android prerequisite verification

2026-10-18 12:46:25 +00:00

verifier-run.d.mts

fix(verifiers): require positive ownership and restore cleanup coverage

2026-10-14 09:47:57 +08:00

verifier-run.mjs

fix(verifiers): require positive ownership and restore cleanup coverage

2026-10-14 09:47:57 +08:00

verify-package-core.mjs

fix(verifiers): launch npm through Node on Windows (#4153)

2026-10-15 23:12:29 +08:00

verify-package-listing.d.mts

fix(package): parse tar listings without platform line endings (#4315)

2026-10-17 00:09:59 +08:00

verify-package-listing.mjs

fix(package): parse tar listings without platform line endings (#4315)

2026-10-17 00:09:59 +08:00

verify-wabt-cleanup.mjs

fix(wasm): retain cleanup ownership through WABT recovery

2026-10-17 21:02:50 +08:00

wabt-verifier-timeouts.mjs

fix(verifiers): align WABT operation timeout (#4117)

2026-10-15 22:29:15 +08:00

windows-job-memory-limit.mjs

fix(bun): report the real runtime and enforce worker memory budgets on Windows (#1730)

2026-10-11 19:20:00 +08:00

windows-ordinary-user-verifier.d.mts

fix(verifiers): require positive ownership and restore cleanup coverage

2026-10-14 09:47:57 +08:00

windows-ordinary-user-verifier.mjs

fix(verifiers): require positive ownership and restore cleanup coverage

2026-10-14 09:47:57 +08:00

windows-owned-command.d.mts

fix(lifecycle): preserve observations and cleanup ownership (#4274)

2026-10-16 11:48:59 +08:00

windows-owned-command.mjs

fix(lifecycle): preserve observations and cleanup ownership (#4274)

2026-10-16 11:48:59 +08:00

windows-protocol-input.mjs

fix(bun): report the real runtime and enforce worker memory budgets on Windows (#1730)

2026-10-11 19:20:00 +08:00

windows-volume-root-append-lease.mjs

fix(windows): admit volume roots with existing write handles

2026-10-15 06:12:23 +08:00