morluto 6c35d74a7d refactor: centralize input validation and schema interpretation ...

Migrate twelve application service files to the existing provider input owner,
preserving schema causes, cancellation precedence, caller selection, and
retained Evidence. Keep flows with distinct error policies separate.

Replace the DeepSeek verifier's recursive object scan with schema-position
traversal using the canonical keyword and local-reference owners. Literal
pattern fields no longer cause false regex failures; patternProperties keys
are checked alongside actual pattern constraints in native regex modes.

Validation: 271 focused workflow/service tests and six verifier regressions
passed; static checks, discovery, and actual Node source-loader smoke passed.
The baseline scanner reproduced the new regressions. Installed DeepSeek client
execution was not run.

2026-10-26 17:05:05 +08:00

..

ci

fix(verification): keep runtime packaging and boundary fixtures complete

2026-10-26 16:46:53 +08:00

fixtures

fix(async): own completion across test and provider boundaries

2026-10-25 08:29:20 +08:00

lib

refactor: centralize input validation and schema interpretation

2026-10-26 17:05:05 +08:00

lint

fix(ci): own mock isolation and normalize Git patch directories

2026-10-25 09:49:26 +08:00

verify

refactor(verification): centralize native client result discovery

2026-10-26 15:40:34 +08:00

verify-tools/skills

fix(ci): run the lockfile-pinned Skills CLI in package verification (#6235)

2026-10-21 21:19:45 -07:00

audit-website-links.py

fix(website): handle UTF-8 output and slash refs in link audits (#4123)

2026-10-23 02:31:11 +08:00

build-conformance-fixtures.mjs

…

build-ghidra-nativeaot.mjs

ci(ghidra): compile the packaged bridge source cohort (#3142)

2026-10-15 18:11:19 +00:00

build-windows-native.mjs

refactor(windows): share native artifact validation

2026-10-26 16:04:44 +08:00

bundle-runtime.d.mts

…

bundle-runtime.mjs

fix(cli): share builtin argument ownership with MCP routing

2026-10-24 03:16:30 +08:00

check-dependency-install.mjs

…

check-doc-facts.mjs

…

clean-build-output.mjs

…

create-ghidra-windows-fixture.mjs

feat(ghidra): admit ARM PE targets on Windows (#3965)

2026-10-15 20:11:26 +08:00

electron-active-hook-boundaries.cjs

fix(electron): block trash calls in active observation hook

2026-10-24 02:36:00 +08:00

electron-active-hook.cjs

fix(electron): preserve callback ownership through listener removal

2026-10-19 09:51:04 +08:00

generate-completion-ledger.mjs

refactor(tooling): move completion ledger generation out of domain

2026-10-26 14:46:35 +08:00

generate-error-schema.mjs

…

generate-mcp-tool-catalog.mjs

…

generate-nativeaot-fixtures.mjs

fix(ghidra): resolve file offsets in decompile (#2101)

2026-10-13 18:23:17 +08:00

generate-package-metadata.mjs

fix(skills): parse metadata only from YAML frontmatter

2026-10-26 15:49:58 +08:00

generate-product-catalog.mjs

…

generate-skill-metadata.mjs

fix(skills): parse metadata only from YAML frontmatter

2026-10-26 15:49:58 +08:00

generate-third-party-inventory.mjs

fix: align MCP archive contracts and documentation (#2478)

2026-10-13 12:06:41 +08:00

hopper-demo-x11.py

fix(hopper): pass private X authority cookie through stdin

2026-10-24 03:00:07 +08:00

prepack.mjs

refactor(cli): share process environment preparation

2026-10-24 11:50:11 +08:00

prepare-reverse-tools-mutation.mjs

fix(reverse): reconcile cleanup ownership and mutation diagnostics (#2799)

2026-10-14 04:47:34 +08:00

prepare-website.py

…

prepare.mjs

fix(build): prepare release dependency types during installation (#6978)

2026-10-24 09:24:43 +00:00

print-mcp-config.mjs

…

rea-android-workspace-guardian.mjs

fix(android): clean Windows workspaces after owner termination (#2440)

2026-10-13 22:03:16 +08:00

rea.mjs

refactor(cli): share process environment preparation

2026-10-24 11:50:11 +08:00

record-catalog-digests.mjs

perf(mcp): record catalog identities for all schema profiles (#5415)

2026-10-20 10:09:28 +00:00

record-mcp-catalog.mjs

perf(mcp): defer analysis runtime after catalog discovery (#4424)

2026-10-22 03:07:31 +00:00

release-notes.mjs

…

release-npm-tag.mjs

refactor(release): remove obsolete tag CLI and proposal output

2026-10-24 11:41:34 +08:00

release-proposal.mjs

refactor(release): remove obsolete tag CLI and proposal output

2026-10-24 11:41:34 +08:00

run-development-tests.mjs

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

run-exact-tests.mjs

fix(test): reject excluded symlink aliases in exact selection

2026-10-14 13:58:17 +08:00

run-exclusive-command.mjs

fix(lifecycle): preserve observations and cleanup ownership (#4274)

2026-10-16 11:48:59 +08:00

run-exclusive.mjs

fix(runner): scope internal Node notices to the supervisor (#7020)

2026-10-24 15:57:23 +00:00

run-turbo.mjs

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

run-typescript.d.mts

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

run-typescript.mjs

perf(ci): use tsrs and reduce PE acceptance startup (#5795)

2026-10-21 19:47:52 +08:00

scan-todos.mjs

…

test-website.py

docs(readme): add Roman Urdu edition (#6499)

2026-10-23 16:06:27 +08:00

verify-adb.mjs

fix(verifiers): centralize failure and cleanup ownership

2026-10-24 15:38:35 +08:00

verify-agent-experience.mjs

fix(skills): parse metadata only from YAML frontmatter

2026-10-26 15:49:58 +08:00

verify-agentenv-environment.mjs

feat(environment): build agent environments from a prompt (#6946)

2026-10-24 21:51:41 +08:00

verify-apk-signature.mjs

feat(apk): inspect signing declarations with retained fact queries

2026-10-22 11:48:09 +00:00

verify-apktool.mjs

feat(apktool): share one APK resource decode across selected locale tables (#4777) (#4804)

2026-10-18 03:57:17 +08:00

verify-binary-layout.mjs

feat(binary-layout): admit ELF32 i386, ARM and MIPS layout profiles (#7052)

2026-10-25 14:18:44 +08:00

verify-browser-dom-destinations.mjs

fix(verifiers): centralize failure and cleanup ownership

2026-10-24 15:38:35 +08:00

verify-browser-modules.mjs

fix(verifiers): own browser fixture setup and cleanup in one scope

2026-10-14 09:55:09 +08:00

verify-browser-network.mjs

fix(verifiers): own browser fixture setup and cleanup in one scope

2026-10-14 09:55:09 +08:00

verify-browser-request.mjs

feat(environment): build agent environments from a prompt (#6946)

2026-10-24 21:51:41 +08:00

verify-browser-runtime.mjs

…

verify-browser-scripts.mjs

fix(verifiers): own browser fixture setup and cleanup in one scope

2026-10-14 09:55:09 +08:00

verify-browser-source-maps.mjs

fix(verifiers): require positive ownership and restore cleanup coverage

2026-10-14 09:47:57 +08:00

verify-claude-client.mjs

refactor(verification): centralize native client result discovery

2026-10-26 15:40:34 +08:00

verify-commandcode-client.mjs

refactor(verification): share native client fixture assertions

2026-10-26 15:34:11 +08:00

verify-conformance-fixtures.mjs

refactor: consolidate binary artifact interpretation and fixture ownership

2026-10-26 16:21:11 +08:00

verify-copilot-client.mjs

refactor(verification): centralize native client result discovery

2026-10-26 15:40:34 +08:00

verify-deepseek-client.mjs

refactor: centralize input validation and schema interpretation

2026-10-26 17:05:05 +08:00

verify-evm-interface.mjs

feat(evm): inspect lossless Solidity terminal CBOR metadata (#2790)

2026-10-13 21:55:30 +08:00

verify-flutter.mjs

fix(verifiers): centralize failure and cleanup ownership

2026-10-24 15:38:35 +08:00

verify-frida.mjs

fix(verifiers): centralize failure and cleanup ownership

2026-10-24 15:38:35 +08:00

verify-gemini-client.mjs

refactor(verification): centralize native client result discovery

2026-10-26 15:40:34 +08:00

verify-ghidra-bridge-sources.mjs

ci(ghidra): compile the packaged bridge source cohort (#3142)

2026-10-15 18:11:19 +00:00

verify-go-binary.mjs

test: harden verification fixtures and runtime coverage

2026-10-14 08:59:27 +08:00

verify-grok-client.mjs

refactor(verification): share native client fixture assertions

2026-10-26 15:34:11 +08:00

verify-http3-network-captures.mjs

test(http3): add real MITM capture verification lab (#1997)

2026-10-14 01:09:19 +08:00

verify-il2cpp-metadata.mjs

feat(il2cpp): link generic method instances behind --generic-instances (#5785)

2026-10-24 16:19:05 +08:00

verify-jeb.mjs

fix(verifiers): centralize failure and cleanup ownership

2026-10-24 15:38:35 +08:00

verify-linux-setup-e2e.mjs

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

verify-mcp-registry-metadata.mjs

…

verify-module-boundaries.mjs

test: harden verification fixtures and runtime coverage

2026-10-14 08:59:27 +08:00

verify-native-agent-client.mjs

refactor(verification): centralize native client result discovery

2026-10-26 15:40:34 +08:00

verify-native-calls.mjs

fix(ci): validate artifact MCP replies against named schemas (#6021)

2026-10-21 23:28:12 +08:00

verify-native-ui.mjs

fix(native)!: preserve UI scalar facts and selection failures

2026-10-24 04:25:13 +08:00

verify-node-sea.mjs

feat(artifacts): inventory and extract Node.js single executable application blobs (#7000)

2026-10-25 02:10:41 +08:00

verify-omp-client.mjs

refactor(verification): share native client fixture assertions

2026-10-26 15:34:11 +08:00

verify-opencode-client.mjs

refactor(verification): centralize native client result discovery

2026-10-26 15:40:34 +08:00

verify-package-artifact.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-capabilities.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-discovery.d.mts

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

verify-package-discovery.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-environment.d.mts

…

verify-package-environment.mjs

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

verify-package-evidence.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-install.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-managed.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-mcp.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-pack.mjs

fix(skills): parse metadata only from YAML frontmatter

2026-10-26 15:49:58 +08:00

verify-package-platform.d.mts

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

verify-package-platform.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-prompts.mjs

…

verify-package-setup-plan.d.mts

fix(ci): correlate ownership trace threads and preserve setup failures

2026-10-20 00:05:22 +08:00

verify-package-setup-plan.mjs

fix(ci): correlate ownership trace threads and preserve setup failures

2026-10-20 00:05:22 +08:00

verify-package-setup.d.mts

fix(verifiers): own setup terminal and snapshot lifetimes

2026-10-24 17:54:18 +08:00

verify-package-setup.mjs

fix(setup): register explicit MCP runtimes and preserve launcher identity

2026-10-26 02:33:31 +08:00

verify-package-unknown-provider.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package-update.mjs

fix(verifiers): consolidate shared helper ownership

2026-10-24 22:28:39 +08:00

verify-package.mjs

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

verify-packaged-ghidra-windows.mjs

feat(ghidra): analyze GameCube/Wii DOL executables through Ghidra (#6240)

2026-10-24 17:56:31 +08:00

verify-packaged-wasm-artifact.mjs

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

verify-packed-bridge.d.mts

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

verify-packed-bridge.mjs

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

verify-packet-capture.mjs

fix(verifiers): centralize failure and cleanup ownership

2026-10-24 15:38:35 +08:00

verify-pcap.mjs

fix(verifiers): centralize failure and cleanup ownership

2026-10-24 15:38:35 +08:00

verify-pe-load-config.mjs

feat(pe): inspect TLS callbacks and load configuration (#7008)

2026-10-24 22:06:41 +08:00

verify-published-package.mjs

fix(release): rehearse qualified packages before publication

2026-10-14 21:51:19 +08:00

verify-qlog-captures.mjs

feat(browser): inspect retained aioquic qlog JSON captures

2026-10-13 03:24:05 +00:00

verify-qwen-client.mjs

refactor(verification): centralize native client result discovery

2026-10-26 15:40:34 +08:00

verify-real-browser.mjs

refactor(tooling): move verifier host helpers out of runtime

2026-10-26 14:46:23 +08:00

verify-real-cutter.mjs

fix(verify): request command JSON for Cutter inspection

2026-10-18 07:34:08 +08:00

verify-real-electron.mjs

fix: bind Electron actions to the selected native window

2026-10-24 02:29:08 +08:00

verify-real-ghidra-6502.mjs

feat(ghidra): support raw NMOS 6502 analysis (#2079)

2026-10-13 21:13:01 +08:00

verify-real-ghidra-address-context.mjs

perf(ghidra): aggregate binary overview at the provider boundary (#4754)

2026-10-17 10:44:24 +00:00

verify-real-ghidra-assertions.mjs

fix(verifiers): propagate session assertion failures synchronously

2026-10-25 07:56:26 +08:00

verify-real-ghidra-com.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-decompile-timeout.mjs

feat(mcp): support runtime analysis limit recovery (#7049)

2026-10-25 09:45:26 +08:00

verify-real-ghidra-decompiler-failure.mjs

feat(ghidra): bound one procedure's decompile without closing the session (#5662)

2026-10-24 07:42:50 +08:00

verify-real-ghidra-dol.mjs

feat(ghidra): analyze GameCube/Wii DOL executables through Ghidra (#6240)

2026-10-24 17:56:31 +08:00

verify-real-ghidra-dos.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-function.mjs

perf(ghidra): omit redundant raw results (#5355)

2026-10-20 05:14:33 +00:00

verify-real-ghidra-inventory.mjs

perf(ghidra): omit redundant raw results (#5355)

2026-10-20 05:14:33 +00:00

verify-real-ghidra-m68k.mjs

feat(ghidra): support raw big-endian m68k analysis (#4018)

2026-10-16 23:57:34 +08:00

verify-real-ghidra-mips-relocatable.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-mips-shared.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-mips.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-nativeaot.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-noreturn.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-ghidra-ppc.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-raw.mjs

feat(firmware): attribute hardware MMIO peripheral memory regions in native disassembly (#5348)

2026-10-23 05:37:58 +08:00

verify-real-ghidra-riscv.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-swift.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-ghidra-switch-assertions.mjs

…

verify-real-ghidra-switch-controls.mjs

…

verify-real-ghidra-switch.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-ghidra-windows.mjs

perf(ghidra): omit redundant raw results (#5355)

2026-10-20 05:14:33 +00:00

verify-real-ghidra.mjs

fix(verify): own asynchronous Ghidra prerequisite inspection

2026-10-18 07:33:58 +08:00

verify-real-hopper-deadlines.mjs

refactor(hopper): move verifier assertions out of runtime

2026-10-24 11:19:45 +08:00

verify-real-hopper-fat.mjs

fix(hopper)!: verify current Linux releases with the publisher key

2026-10-15 12:15:55 +08:00

verify-real-hopper-linux.mjs

test(hopper): repair Linux demo setup and native verification (#2638)

2026-10-13 14:39:18 +08:00

verify-real-hopper.mjs

refactor(hopper): move verifier assertions out of runtime

2026-10-24 11:19:45 +08:00

verify-real-ida.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-real-kuna.mjs

feat(analysis)!: default function MCP output to retained summaries (#5660)

2026-10-24 08:18:53 +08:00

verify-reconstruction-readiness.mjs

fix(verifiers): centralize failure and cleanup ownership

2026-10-24 15:38:35 +08:00

verify-recorded-crash.mjs

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

verify-release-artifact.mjs

fix(release): rehearse qualified packages before publication

2026-10-14 21:51:19 +08:00

verify-release-checkpoint.mjs

…

verify-repository-skill.mjs

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

verify-signal-recording.mjs

fix(verifiers): centralize failure and cleanup ownership

2026-10-24 15:38:35 +08:00

verify-solidity-metadata.mjs

feat(evm): inspect lossless Solidity terminal CBOR metadata (#2790)

2026-10-13 21:55:30 +08:00

verify-test-discovery.mjs

…

verify-test-temp-hygiene.mjs

fix(verifiers): centralize failure and cleanup ownership

2026-10-24 15:38:35 +08:00

verify-wasm-artifact.mjs

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

verify-wasm-interface-comparison.mjs

feat(wasm): compare retained core-module interfaces (#2464)

2026-10-13 23:49:04 +08:00

verify-web-network-captures.mjs

feat(analysis-view): project an environment manifest from web network captures (#4954)

2026-10-19 07:07:37 +08:00

verify-website.py

docs(readme): add Roman Urdu edition (#6499)

2026-10-23 16:06:27 +08:00

verify-windows-native-artifact.mjs

refactor(windows): share native artifact validation

2026-10-26 16:04:44 +08:00

verify-windows-native-inspection.mjs

fix(verification): keep runtime packaging and boundary fixtures complete

2026-10-26 16:46:53 +08:00

verify-windows-native.mjs

fix(verifiers): centralize failure and cleanup ownership

2026-10-24 15:38:35 +08:00

verify-windows-package.mjs

fix(verifiers): share package command and workspace ownership

2026-10-24 16:58:18 +08:00

website_i18n.py

docs(readme): add Roman Urdu edition (#6499)

2026-10-23 16:06:27 +08:00

website.py

fix(website): improve layout and clarify homepage copy

2026-10-26 01:33:31 +08:00

windows-capabilities.mjs

refactor(tooling): move verifier host helpers out of runtime

2026-10-26 14:46:23 +08:00