morluto c7e9e096d3 fix(plist): reject malformed XML before value decoding ...

Reuse the shared validated XML document for depth and prototype-key preflight, preventing recovery-only values from being projected as observations. Preserve OpenStep and valid XML source semantics.

Validation: 46 focused checks; 5 final syntax controls; 10 encoding and public CLI/MCP overlap checks; check:fast. Public malformed-entity CLI changed from success to typed format failure. Generated inert artifacts only; no real Apple application or native engine execution.

Refs #4714

2026-10-17 15:24:57 +08:00

..

adb

fix(adb): preserve display-scoped window focus declarations

2026-10-17 13:40:09 +08:00

android

fix(filesystem): preserve digest failures through cleanup cancellation

2026-10-17 05:47:19 +08:00

apktool

refactor(xml): centralize strict document parsing

2026-10-17 15:16:24 +08:00

application

docs(native): distinguish analysis memory from source bytes

2026-10-17 07:11:10 +00:00

artifacts

fix(ghidra): admit installation metadata through owned bounded reads

2026-10-17 12:02:26 +08:00

browser

refactor(xml): centralize strict document parsing

2026-10-17 15:16:24 +08:00

captures

fix(browser): bound capture work and preserve observation gaps

2026-10-14 08:31:29 +08:00

cli

fix(ghidra): own Java prerequisite probes through final cleanup

2026-10-17 11:29:03 +08:00

composition

fix(cli): prefer native byte inspection for automatic dispatch metadata

2026-10-17 03:11:32 +08:00

config

fix(setup): reject NUL bytes in registration environments (#4335)

2026-10-17 00:24:35 +08:00

contracts

fix(adb): preserve display-scoped window focus declarations

2026-10-17 13:40:09 +08:00

cutter

fix(cutter): normalize command checkpoint cancellation

2026-10-17 09:24:43 +08:00

domain

fix(plist): reject malformed XML before value decoding

2026-10-17 15:24:57 +08:00

dotnet

fix(managed): avoid duplicate decode budget charging on cached metadata strings

2026-10-17 07:10:58 +00:00

electron

fix(filesystem): preserve digest failures through cleanup cancellation

2026-10-17 05:47:19 +08:00

evaluation

fix(evaluation): require explicit REA server attribution

2026-10-14 09:47:57 +08:00

evm

fix(evm): preserve command owner cancellation reasons

2026-10-17 13:18:05 +08:00

filesystem

fix(ghidra): retain executable header read and cleanup ownership

2026-10-17 12:17:44 +08:00

firmware

fix(firmware): preserve snapshot input failures and descriptor ownership

2026-10-17 08:53:56 +08:00

flutter

fix(filesystem): preserve digest failures through cleanup cancellation

2026-10-17 05:47:19 +08:00

frida

fix(frida): preserve attach targets and reconcile early detachment

2026-10-14 16:10:46 +08:00

gdb

fix(gdb): validate complete thread-group inventories before cleanup

2026-10-16 03:49:44 +08:00

ghidra

fix(ghidra): preserve valid Unicode language metadata

2026-10-17 15:17:03 +08:00

go

fix(artifacts): preserve input size refusals and recovery

2026-10-17 08:45:15 +08:00

hopper

fix(hopper): retain search failure context and cleanup ownership

2026-10-17 13:12:43 +08:00

ida

fix(ida): attribute startup failures and retain cleanup ownership

2026-10-17 09:12:57 +08:00

inspector

fix(inspector): retain usable targets and cancel owned capture waits

2026-10-14 09:47:57 +08:00

javascript

fix(filesystem): preserve digest failures through cleanup cancellation

2026-10-17 05:47:19 +08:00

jeb

fix(jeb): attribute transport timeouts to requested operations

2026-10-17 06:31:16 +08:00

kuna

perf(kuna): reuse sorted string inventory for exact lookups

2026-10-17 07:04:16 +00:00

main

fix(lifecycle): preserve observations and cleanup ownership (#4274)

2026-10-16 11:48:59 +08:00

native

fix(objc): isolate empty protocol selectors and category class names (#4549)

2026-10-17 06:43:12 +08:00

objdump

fix(paths): select caller paths through symlinks and .. as the filesystem does (#4067)

2026-10-15 05:19:43 -07:00

pcap

fix(filesystem): preserve digest failures through cleanup cancellation

2026-10-17 05:47:19 +08:00

process

fix(process): preserve completed observations and cleanup authority

2026-10-17 11:10:02 +08:00

providers

fix(kuna): preserve live cleanup in caller failures

2026-10-17 14:13:16 +08:00

reference

fix(filesystem): preserve digest failures through cleanup cancellation

2026-10-17 05:47:19 +08:00

rizin

fix(rizin): retain interrupted command frames (#4459)

2026-10-16 21:08:47 +08:00

rust

fix(providers): preserve bounded artifact reads and cleanup owners

2026-10-17 00:44:02 +08:00

server

refactor(providers)!: await owned readiness observations

2026-10-17 09:57:43 +08:00

signals

fix(analysis): preserve extraction gaps and database failure reasons

2026-10-14 08:32:15 +08:00

sqlite

fix(providers): preserve bounded artifact reads and cleanup owners

2026-10-17 00:44:02 +08:00

wasm

fix(artifacts): preserve input size refusals and recovery

2026-10-17 08:45:15 +08:00

windows

fix(windows): retain primary snapshot and cancellation failures

2026-10-17 00:44:02 +08:00

catalogIdentity.ts

perf(catalog): record default catalog digests at build time (#4041)

2026-10-15 02:19:38 -07:00

cli.ts

fix(reverse): reconcile cleanup ownership and mutation diagnostics (#2799)

2026-10-14 04:47:34 +08:00

cliBrowserContext.ts

fix(mcp): isolate optional observation adapter failures (#838)

2026-10-07 11:45:17 +08:00

cliBrowserScenarioCommands.ts

fix(cli): await browser scenario cleanup on interrupts

2026-10-11 17:33:57 +08:00

cliCommandNames.ts

feat(electron): inspect packaged Electron fuse state without execution (#2399)

2026-10-14 09:16:33 +08:00

cliEvidenceCommands.ts

perf(mcp): keep Playwright and type-only imports off MCP startup (#1691)

2026-10-10 21:04:05 -07:00

cliHostInputs.test.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

cliJavaScriptRuntimeCommands.ts

fix(browser): bound capture work and preserve observation gaps

2026-10-14 08:31:29 +08:00

cliJsonInput.ts

fix(cli): keep file URLs out of operator-relative path resolution (#2882)

2026-10-14 01:05:14 +08:00

cliJsonPaths.test.ts

fix(cli): keep file URLs out of operator-relative path resolution (#2882)

2026-10-14 01:05:14 +08:00

cliLogging.test.ts

feat(update): update Bun global installations (#1735)

2026-10-11 17:56:05 +08:00

cliLogging.ts

fix(cli): preserve failure semantics across full-output formats

2026-10-13 03:33:27 +08:00

cliObservationOptions.ts

fix(javascript): trace wrapped Electron IPC paths in large bundles (#1874)

2026-10-12 09:28:59 +08:00

cliOutput.ts

fix(cli): accept --flag=value for global output flags (#3811)

2026-10-14 20:22:02 -07:00

config.test.ts

fix(setup): reject NUL bytes in registration environments (#4335)

2026-10-17 00:24:35 +08:00

doctorRuntime.test.ts

feat(kuna): add Kuna readiness, doctor and owned project cache (#3832)

2026-10-15 05:56:56 +00:00

doctorRuntime.ts

fix(ghidra): own Java prerequisite probes through final cleanup

2026-10-17 11:29:03 +08:00

generatedPackageMetadata.ts

chore(main): release rea-agents 6.5.0 (#1693)

2026-10-14 20:31:45 +08:00

homeDirectory.test.ts

fix(setup): ignore empty home directory selections

2026-10-13 04:11:55 +08:00

identity.ts

feat: streamline agent integration and MCP routing

2026-07-20 17:11:06 +08:00

logger.ts

fix(cli): report an invalid REA_LOG_LEVEL as configuration (#2140)

2026-10-12 06:07:37 -07:00

main.ts

fix(mcp): retain shutdown signals until cleanup succeeds

2026-10-16 05:43:39 +08:00

mcpDoctor.ts

fix(mcp): bind catalog identity to output schema profiles

2026-10-15 01:41:31 +08:00

mcpStartupPolicy.ts

fix(setup): include registered IDA budgets in client deadlines

2026-10-15 07:36:34 +08:00

recordedCatalogDigests.ts

perf(catalog): record default catalog digests at build time (#4041)

2026-10-15 02:19:38 -07:00

serverIdentity.ts

fix(identity)!: preserve invocation uncertainty and advertised catalogs

2026-10-14 16:10:46 +08:00

setupEnvironment.test.ts

refactor(setup): distinguish provider configuration from registration settings

2026-10-15 05:23:04 +08:00