Kaoru0822 90c6922905 fix(javascript): keep empty URL path segments significant (#3792) ...

* fix(javascript): keep empty URL path segments significant

ESM imports and HTML script references were joined with POSIX path
rules, which collapse '//' before applying '..'. URL resolution removes
the empty segment instead, so './assets//../app.js' names assets/app.js,
not app.js, and the graph linked the importer and renderer to the wrong
file. URL references refused every '//' even when dot segments cancel it.

Resolve ESM, HTML (including document base) and URL references through
one URL dot-segment helper. A remaining empty segment stays unavailable,
references above the artifact root are still rejected, and CommonJS keeps
filesystem path semantics.

Fixes #3307

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix(javascript): resolve HTML base and reference as one URL path

The base href was turned into a canonical path before the script
reference was applied. A base empty segment that the reference's '..'
would remove was rejected early, and an above-root '..' from the base
became a removable segment that the reference's '..' could cancel.

Keep one URL path state through base and reference resolution, with
above-root escapes held apart from removable segments, and reject empty
segments only in the final path. Remove the superseded htmlBaseDirectory.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-14 19:12:49 -07:00

..

adb

fix(adb): retain rollback ownership and cancelled acquisition facts

2026-10-11 00:28:39 +08:00

analysisView

fix(analysis-view): unify inert inline Evidence admission

2026-10-15 03:13:28 +08:00

android

feat(android): add opt-in package summaries and retained manifest views

2026-10-13 10:21:53 +08:00

apktool

fix(application): preserve a cancellation that races a completed provider run (#2710)

2026-10-13 23:51:44 +08:00

apple

refactor(apple): group artifact producers and verification (#952)

2026-10-07 21:09:33 +08:00

artifacts

fix(artifacts)!: authenticate complete inspection and summary inputs

2026-10-15 03:43:28 +08:00

binary

style(test): format coverage regression fixtures

2026-10-15 03:43:29 +08:00

binaryDiagnostics

feat(recorded-crash): decode AArch64 core register notes (#2505)

2026-10-13 23:48:24 +08:00

captures

feat(captures): discover installed protocol and field definitions (#2496)

2026-10-13 15:55:25 +09:00

electron

feat(electron): inspect packaged Electron fuse state without execution (#2399)

2026-10-14 09:16:33 +08:00

evm

fix(artifacts): authenticate file subjects across provider and view boundaries

2026-10-13 13:23:03 +08:00

firmware

fix(providers): retain worker cleanup owners through shutdown

2026-10-11 00:03:21 +08:00

flutter

perf(flutter): add opt-in retained AOT summary and string pages

2026-10-13 11:39:30 +08:00

frida

fix(frida): preserve attach targets and reconcile early detachment

2026-10-14 16:10:46 +08:00

go

fix(artifacts): retain read cleanup ownership through CLI and MCP shutdown

2026-10-13 16:08:41 +08:00

harmony

feat(harmony): project HarmonyOS package inventory evidence (#1447)

2026-10-11 20:09:21 +08:00

investigation

perf(evidence): reuse authenticated unknown mutation snapshots

2026-10-13 12:46:06 +08:00

javascript

fix(javascript): keep empty URL path segments significant (#3792)

2026-10-14 19:12:49 -07:00

jeb

fix(jeb): probe live operations with owned discovery deadlines

2026-10-15 03:43:29 +08:00

managed

feat(managed): decode ldstr user strings in member inspection (#2162)

2026-10-14 03:01:23 +08:00

native

fix(evidence): preserve source attribution across composed workflows

2026-10-15 06:33:48 +08:00

pcap

feat(pcap): add bounded capture summaries through CLI and MCP

2026-10-13 04:53:03 +00:00

process

fix(io): retain cleanup ownership and honor cancellation

2026-10-12 14:12:44 +08:00

reverse

fix(reverse): reconcile cleanup ownership and mutation diagnostics (#2799)

2026-10-14 04:47:34 +08:00

rust

feat(native): read embedded cargo-auditable Rust dependency lists (#2456)

2026-10-14 02:50:30 +08:00

signals

feat(signals): discover installed decoders and option help (#2487)

2026-10-13 15:58:19 +09:00

sqlite

feat(sqlite): inspect offline snapshots with selective evidence (#2271)

2026-10-12 18:33:23 +00:00

wasm

fix(wasm): attribute invalid paths to their selected fields (#2796)

2026-10-14 02:39:03 +08:00

AnalysisContextQueries.test.ts

fix(mcp): align advertised contracts and retain workflow evidence

2026-10-14 08:32:00 +08:00

AnalysisContextQueries.ts

fix(mcp): align advertised contracts and retain workflow evidence

2026-10-14 08:32:00 +08:00

AnalysisDocument.ts

fix(analysis): bind overview document identity to the active target (#1094)

2026-10-09 00:57:28 +08:00

AnalysisProvider.test.ts

perf(evidence): stop copying normalized results into raw_result (#1402)

2026-10-09 19:52:54 -07:00

AnalysisProvider.ts

fix(providers)!: preserve readiness, coverage, and diagnostic ownership

2026-10-14 08:28:14 +08:00

AppBundleExecutable.test.ts

fix(targets): compare the Info.plist bplist prefix without ASCII folding (#2100)

2026-10-13 23:37:45 +08:00

AppBundleExecutable.ts

fix(apple): preserve archive signatures and metadata byte identity

2026-10-13 07:34:52 +08:00

AppBundleOpenStepDepth.test.ts

fix(analysis): preserve extraction gaps and database failure reasons

2026-10-14 08:32:15 +08:00

BinaryTargetResolver.ts

fix(application): normalize owned target admission cancellation

2026-10-14 17:49:18 +08:00

BrowserEvidence.ts

feat(browser): attach passive tools to browsers without HTTP discovery (#2346)

2026-10-14 00:36:37 +08:00

BrowserObservationPort.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

BrowserObservationService.ts

fix(browser): bound capture work and preserve observation gaps

2026-10-14 08:31:29 +08:00

BrowserScenarioCapturePort.ts

fix(browser): retain startup owners and coordinate retryable close

2026-10-11 00:03:22 +08:00

BrowserScenarioCaptureService.ts

perf(mcp): keep Playwright and type-only imports off MCP startup (#1691)

2026-10-10 21:04:05 -07:00

BrowserScenarioEvidence.ts

refactor: use canonical implementations and types directly

2026-10-09 23:35:19 +08:00

CallPathTracing.ts

fix(reverse): reconcile cleanup ownership and mutation diagnostics (#2799)

2026-10-14 04:47:34 +08:00

CapabilityClientRequirements.ts

fix(tools)!: simplify direct invocation and harden boundary contracts (#555)

2026-10-05 20:16:44 +08:00

CapabilityInventory.test.ts

fix(android): report validated ADB and Apktool host availability

2026-10-14 16:54:08 +08:00

CapabilityInventory.ts

fix(jeb): probe live operations with owned discovery deadlines

2026-10-15 03:43:29 +08:00

ClaudeDesktopConfigLocation.test.ts

fix(setup): resolve the configuration MSIX Claude Desktop reads (#2426)

2026-10-13 22:04:22 +08:00

ClaudeDesktopConfigLocation.ts

fix(setup): resolve the configuration MSIX Claude Desktop reads (#2426)

2026-10-13 22:04:22 +08:00

ClientConfigPath.ts

refactor(runtime): name all silent catch causes without changing diagnostics (#637)

2026-10-06 05:58:46 +08:00

ClientConfigurationDocument.shape.test.ts

fix(setup): name invalid client config shape errors clearly (#2157)

2026-10-12 23:24:24 +08:00

ClientConfigurationDocument.ts

fix(setup): preserve Hermes YAML scalar semantics

2026-10-14 14:47:26 +08:00

ClientConfigurationFiles.ts

fix(setup): report the effective ZCode fallback registration

2026-10-14 13:58:15 +08:00

ClientRegistrationEnvironment.ts

fix(setup): include registered IDA budgets in client deadlines

2026-10-15 07:36:34 +08:00

ClientRegistrationIdentity.ts

fix(setup): preserve overridden runner variables and test isolation on Windows

2026-10-15 00:56:31 +05:30

ClientRegistrationStatus.ts

fix(setup): include registered IDA budgets in client deadlines

2026-10-15 07:36:34 +08:00

closeOwnedWebResources.ts

fix(ci): align FAT fixtures and consolidate duplicated workflow helpers

2026-10-13 16:16:31 +08:00

DirectAnalysis.ts

fix(cli): route static artifact analysis without native engines

2026-10-14 13:58:12 +08:00

DirectAnalysisCleanup.ts

refactor(cleanup): share failure composition and retain native UI owners

2026-10-11 00:03:18 +08:00

DirectAnalysisDependencies.ts

fix(cli): route static artifact analysis without native engines

2026-10-14 13:58:12 +08:00

DirectAnalysisStatus.ts

fix(identity)!: preserve invocation uncertainty and advertised catalogs

2026-10-14 16:10:46 +08:00

Doctor.fixture.ts

fix(bun): report the real runtime and enforce worker memory budgets on Windows (#1730)

2026-10-11 19:20:00 +08:00

Doctor.test.ts

fix(setup): derive MCP tool deadlines and preserve caller timeout choices

2026-10-15 05:05:24 +08:00

Doctor.ts

fix(setup): include registered IDA budgets in client deadlines

2026-10-15 07:36:34 +08:00

DoctorDiagnostics.ts

fix(hopper): share launcher discovery across setup and runtime

2026-10-14 17:09:17 +08:00

DoctorProviderIds.ts

fix(setup): preserve registration identity and recovery ownership

2026-10-14 08:25:53 +08:00

DoctorScope.ts

fix(identity)!: preserve invocation uncertainty and advertised catalogs

2026-10-14 16:10:46 +08:00

DshCordisPatch.ts

fix(setup): preserve registration identity and recovery ownership

2026-10-14 08:25:53 +08:00

DshCordisYaml.ts

feat(setup): register DeepSeek Harness through setup, doctor and uninstall (#1929)

2026-10-12 11:06:26 +08:00

EnhancedLiteralTracing.ts

feat(ida): resolve containing procedures and report the admitted program as the document (#2374)

2026-10-13 20:56:20 +08:00

EnhancedTools.ts

fix(analysis): propagate typed cancellation across batch stages

2026-10-14 16:54:07 +08:00

EnhancedToolSelectorOrigin.test.ts

fix(evidence): preserve trace uncertainty and partial provider observations

2026-10-12 14:46:10 +08:00

EnhancedToolTypes.ts

perf(mcp): keep Playwright and type-only imports off MCP startup (#1691)

2026-10-10 21:04:05 -07:00

EvidenceBundleCommands.ts

perf(evidence): reuse sealed bundle reads in compare and export (#2715)

2026-10-13 21:50:25 +08:00

EvidenceBundleFiles.ts

perf(evidence): authenticate and seal imported bundles in one pass

2026-10-13 03:22:38 +08:00

EvidenceInputResolver.test.ts

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

EvidenceInputResolver.ts

feat(evidence): accept exact retained application references (#734)

2026-10-06 20:17:59 +08:00

FunctionAnalysisEvidence.ts

fix(call-path): preserve relationship coverage from analysis (#2001)

2026-10-12 08:55:19 +08:00

GeminiClientSettings.ts

fix(setup): evaluate Gemini workspace trust before settings content

2026-10-14 17:49:19 +08:00

HermesClientHome.ts

fix(setup): follow and validate Hermes sticky profiles (#1528)

2026-10-10 18:19:51 +08:00

HermesConfigurationYaml.test.ts

fix(setup): retain Hermes YAML scalar source during updates

2026-10-15 00:57:57 +08:00

HermesConfigurationYaml.ts

fix(setup): retain Hermes YAML scalar source during updates

2026-10-15 00:57:57 +08:00

homebrew.ts

fix(doctor): find the Homebrew Hopper cask without writing Homebrew caches

2026-10-09 03:28:25 +00:00

HopperDownload.ts

fix(setup): preserve recovery backups and retain installer cleanup

2026-10-11 00:03:21 +08:00

InventoryProjectionEvidence.ts

perf(mcp): keep Playwright and type-only imports off MCP startup (#1691)

2026-10-10 21:04:05 -07:00

InvestigationProviders.ts

fix(cache): invalidate snapshots that lack source caveat semantics

2026-10-15 06:45:53 +08:00

JsonFiles.ts

fix(io): retain cleanup ownership and honor cancellation

2026-10-12 14:12:44 +08:00

JsonInputFile.ts

fix(snapshot): classify non-object roots as invalid content (#2685)

2026-10-13 16:04:44 +08:00

LinuxHopper.test.ts

fix(setup): preserve registration identity and recovery ownership

2026-10-14 08:25:53 +08:00

LinuxHopper.ts

fix(setup): preserve registration identity and recovery ownership

2026-10-14 08:25:53 +08:00

MacHopper.test.ts

fix(setup): own Hopper replacement staging and committed outcomes

2026-10-15 03:43:29 +08:00

MacHopper.ts

fix(setup): own Hopper replacement staging and committed outcomes

2026-10-15 03:43:29 +08:00

MacHopperPaths.test.ts

fix(hopper): share launcher discovery across setup and runtime

2026-10-14 17:09:17 +08:00

MacHopperPaths.ts

fix(hopper): share launcher discovery across setup and runtime

2026-10-14 17:09:17 +08:00

MipsElfMetadata.ts

fix(ghidra): reconcile GNU MIPS ABI declarations

2026-10-14 14:47:26 +08:00

MipsElfSharedLoad.ts

feat(ghidra): admit verified MIPS16 shared ELF images

2026-10-12 07:50:31 +08:00

MipsGnuAttributes.test.ts

fix(ghidra): reconcile GNU MIPS ABI declarations

2026-10-14 14:47:26 +08:00

MipsGnuAttributes.ts

fix(ghidra): reconcile GNU MIPS ABI declarations

2026-10-14 14:47:26 +08:00

MsixPackageStorage.ts

fix(setup): resolve the configuration MSIX Claude Desktop reads (#2426)

2026-10-13 22:04:22 +08:00

OptionalObservationProviders.ts

feat: add Frida instrumentation support (#1359)

2026-10-12 22:01:58 +08:00

ProcedureAddressResolution.ts

fix(analysis): resolve procedure identities and preserve literal queries

2026-10-09 02:42:39 +08:00

ProgressReporter.test.ts

fix(process): coalesce delayed capture progress

2026-10-10 18:54:57 +08:00

ProgressReporter.ts

fix(progress): measure delivery intervals with a monotonic clock

2026-10-13 15:23:56 +08:00

ProviderOperationExecution.ts

fix(application): preserve a cancellation that races a completed provider run (#2710)

2026-10-13 23:51:44 +08:00

RealHopperAssertions.ts

test: consolidate redundant assertions into boundary workflows

2026-10-09 20:26:46 +08:00

ReconstructionCoverageService.ts

perf(mcp): keep Playwright and type-only imports off MCP startup (#1691)

2026-10-10 21:04:05 -07:00

ReconstructionObligationAuthority.ts

refactor(analysis): remove fixed result quotas

2026-09-29 13:57:24 +08:00

ReconstructionObligationCandidates.test.ts

perf(reconstruction): index semantic evidence contexts per derivation

2026-10-11 02:21:28 +08:00

ReconstructionObligationCandidates.ts

fix(reconstruction): merge repeated observations into one generated obligation (#3524)

2026-10-14 17:11:28 -07:00

ReconstructionObligationLedger.authority.test.ts

test: consolidate service and process fixtures

2026-10-08 04:03:24 +08:00

ReconstructionObligationLedger.closure.test.ts

fix(reconstruction): withhold readiness for manifest references to absent Evidence (#3526)

2026-10-14 17:11:40 -07:00

ReconstructionObligationLedger.fixture.ts

fix(reconstruction): merge repeated observations into one generated obligation (#3524)

2026-10-14 17:11:28 -07:00

ReconstructionObligationLedgerDiagnostics.ts

fix(evidence): validate closure projections and browser body coverage

2026-10-12 08:59:14 +08:00

ReconstructionObligationLedgerEvaluation.ts

fix(reconstruction): withhold readiness for manifest references to absent Evidence (#3526)

2026-10-14 17:11:40 -07:00

ReconstructionObligationLedgerProjection.ts

fix(evidence): validate closure projections and browser body coverage

2026-10-12 08:59:14 +08:00

ReconstructionObligationLedgerService.ts

fix(evidence): classify noncanonical bundles at the input boundary

2026-10-14 17:49:16 +08:00

ReconstructionObligationOriginalCases.ts

fix(reconstruction): withhold readiness for manifest references to absent Evidence (#3526)

2026-10-14 17:11:40 -07:00

ReconstructionObligationPolicies.ts

feat(reconstruction): add obligation ledgers

2026-07-24 13:17:56 +00:00

ReferenceSourceImport.ts

chore: reconcile current main fixes and client support

2026-10-14 08:36:38 +08:00

ReferenceSourceImportEntries.test.ts

fix(reference): retain unknown kind for unsupported source entries

2026-10-14 15:20:02 +08:00

ReferenceSourceImportEntries.ts

fix(reference): never resolve a directory to an extensionless index (#3789)

2026-10-14 19:12:36 -07:00

ReferenceSourceImportPolicy.ts

fix(reference)!: retain source and metadata cleanup owners

2026-10-11 06:10:10 +08:00

ReferenceSourceImportTypes.test.ts

fix(reference)!: retain source and metadata cleanup owners

2026-10-11 06:10:10 +08:00

ReferenceSourceImportTypes.ts

fix(javascript): centralize module syntax and separate erased type dependencies

2026-10-13 14:39:06 +08:00

ReferenceSourceVcsAdapter.ts

fix(artifacts): preserve path identity and exclusion applicability

2026-10-14 08:31:16 +08:00

RegularFileRead.ts

fix(setup): preserve current recovery snapshots and decoding failures

2026-10-13 14:51:55 +08:00

Setup.configuration.test.ts

refactor(setup): distinguish provider configuration from registration settings

2026-10-15 05:23:04 +08:00

Setup.fixture.ts

refactor(setup): distinguish provider configuration from registration settings

2026-10-15 05:23:04 +08:00

Setup.initialSnapshot.test.ts

refactor: consolidate boundary semantics and prune redundant tests

2026-10-10 05:56:01 +08:00

Setup.planning.test.ts

fix(setup): own Hopper replacement staging and committed outcomes

2026-10-15 03:43:29 +08:00

Setup.recovery.test.ts

fix(setup): separate host support and stop skill checks after drift (#2073)

2026-10-13 23:33:54 +08:00

Setup.ts

refactor(setup): distinguish provider configuration from registration settings

2026-10-15 05:23:04 +08:00

SetupClientConfiguration.ts

fix(setup): include registered IDA budgets in client deadlines

2026-10-15 07:36:34 +08:00

SetupClients.ts

fix(setup): resolve the configuration MSIX Claude Desktop reads (#2426)

2026-10-13 22:04:22 +08:00

SetupHost.ts

fix(setup): include registered IDA budgets in client deadlines

2026-10-15 07:36:34 +08:00

SetupInstallFailure.test.ts

fix(setup): preserve registration identity and recovery ownership

2026-10-14 08:25:53 +08:00

SetupInstallFailure.ts

fix(setup): own Hopper replacement staging and committed outcomes

2026-10-15 03:43:29 +08:00

SetupPlan.ts

refactor(setup): distinguish provider configuration from registration settings

2026-10-15 05:23:04 +08:00

SetupRecoveryBackup.ts

fix(setup): preserve registration identity and recovery ownership

2026-10-14 08:25:53 +08:00

SetupRegistrationEnvironment.ts

fix(setup): propagate selected provider deadlines through CLI registrations

2026-10-15 05:16:08 +08:00

SetupSkill.ts

fix(setup): inspect installed skill identity for unqualified doctor

2026-10-14 17:49:20 +08:00

SetupTypes.ts

refactor(setup): distinguish provider configuration from registration settings

2026-10-15 05:23:04 +08:00

SourceLimitations.ts

perf(evidence): group repeated caveats with their source operations

2026-10-15 06:39:48 +08:00

SupportedClients.ts

fix(uninstall): remove the REA-owned ZCode fallback registration (#2783)

2026-10-13 17:33:26 -07:00

TypeScriptEmittedSourceCandidates.ts

fix(javascript): retain compiler-dependent module resolution facts

2026-10-13 15:58:25 +08:00

Uninstall.ts

fix(identity)!: preserve invocation uncertainty and advertised catalogs

2026-10-14 16:10:46 +08:00

UninstallFailure.ts

perf(cli): defer command-specific modules until dispatch

2026-10-11 13:20:15 +08:00

Update.test.ts

fix(setup): retain regular-file cleanup ownership through workflows

2026-10-12 05:57:35 +08:00

Update.ts

fix(setup): retain regular-file cleanup ownership through workflows

2026-10-12 05:57:35 +08:00

UpdateFailure.ts

fix(setup): retain regular-file cleanup ownership through workflows

2026-10-12 05:57:35 +08:00

UpdateMaintenance.ts

fix(update): share parsed client activation with maintenance

2026-10-13 12:46:05 +08:00

UpdateRuntime.release.test.ts

feat(update): update Bun global installations (#1735)

2026-10-11 17:56:05 +08:00

UpdateRuntime.ts

fix(setup): retain regular-file cleanup ownership through workflows

2026-10-12 05:57:35 +08:00

Utf8JsonInput.ts

fix(json): name a leading byte-order mark in rejected JSON input (#1510)

2026-10-10 01:37:41 -07:00

ValidateSelectedWebScript.ts

feat(browser): trace captured website source-map locations (#897)

2026-10-07 16:21:18 +08:00

WebModulePorts.ts

fix(artifacts): retain read cleanup ownership through CLI and MCP shutdown

2026-10-13 16:08:41 +08:00

WebModuleTraceService.test.ts

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

WebModuleTraceService.ts

fix(ci): align FAT fixtures and consolidate duplicated workflow helpers

2026-10-13 16:16:31 +08:00

WebNetworkCapturePort.ts

fix(artifacts): retain read cleanup ownership through CLI and MCP shutdown

2026-10-13 16:08:41 +08:00

WebNetworkCaptureService.test.ts

feat(browser): inspect historical web network captures (#992)

2026-10-08 07:53:41 +08:00

WebNetworkCaptureService.ts

fix(artifacts): retain read cleanup ownership through CLI and MCP shutdown

2026-10-13 16:08:41 +08:00

WebRuntimePort.ts

feat(browser): attribute native execution and listener sources (#917)

2026-10-07 21:45:07 +08:00

WebRuntimeService.fixture.ts

feat(browser): attribute native execution and listener sources (#917)

2026-10-07 21:45:07 +08:00

WebRuntimeService.test.ts

feat(browser): attribute native execution and listener sources (#917)

2026-10-07 21:45:07 +08:00

WebRuntimeService.ts

refactor(input): share schema issue error construction

2026-10-09 00:49:30 +08:00

WebScriptArtifactPort.ts

fix(artifacts): retain read cleanup ownership through CLI and MCP shutdown

2026-10-13 16:08:41 +08:00

WebScriptExportService.ts

fix(web)!: retain capture read cleanup through export

2026-10-11 06:30:56 +08:00

WebSourceLocationPorts.ts

fix(artifacts): retain read cleanup ownership through CLI and MCP shutdown

2026-10-13 16:08:41 +08:00

WebSourceLocationService.test.ts

fix(bun): report the real runtime and enforce worker memory budgets on Windows (#1730)

2026-10-11 19:20:00 +08:00

WebSourceLocationService.ts

fix(ci): align FAT fixtures and consolidate duplicated workflow helpers

2026-10-13 16:16:31 +08:00

WindowsCapabilities.ts

fix(providers)!: preserve readiness, coverage, and diagnostic ownership

2026-10-14 08:28:14 +08:00

WorkflowEvidence.test.ts

perf(evidence): group repeated caveats with their source operations

2026-10-15 06:39:48 +08:00

WorkflowEvidence.ts

fix(evidence): preserve source attribution across composed workflows

2026-10-15 06:33:48 +08:00

workflowInputError.ts

refactor(input): share schema issue error construction

2026-10-09 00:49:30 +08:00

XrefsAddressResolution.ts

fix(cli): resolve xrefs symbol selectors after address validation (#1209)

2026-10-09 13:28:48 +08:00