lee/rea
1
0 Fork 0
mirror of https://github.com/morluto/rea.git synced 2026-11-03 04:29:07 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,050 Commits 243 Branches 40 Tags
00a6ac3de99f432bd6dbb88148a2aab5f8d3d338
Commit Graph
1050 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
morluto 00a6ac3de9 docs: audit and improve localized readmes translations and wording 2026-10-07 02:42:32 +08:00
Rudy Mizrahi Celekli 4bfd8038be fix(semantics): retain trailing rest argument flows (#756) 
Signed-off-by: Rudy Celekli <rudy@gradiahq.com>
 2026-10-07 02:36:51 +08:00
Rudy Mizrahi Celekli e1ca412757 fix(semantics): preserve direct promise ownership boundaries (#758) 
Signed-off-by: Rudy Celekli <rudy@gradiahq.com>
 2026-10-07 02:36:41 +08:00
Rudy Mizrahi Celekli 66c26f280b fix(mcp): preserve exact guided prompt context (#761) 
Signed-off-by: RudyCelekli <47457359+rudycelekli@users.noreply.github.com>
 2026-10-07 02:36:31 +08:00
Rudy Mizrahi Celekli cffc548cd3 fix(reference): retain partial imports for unreadable directories (#766) 
Signed-off-by: Rudy Celekli <rudy@gradiahq.com>
 2026-10-07 02:36:21 +08:00
Rudy Mizrahi Celekli ae81f64d2a fix(semantics): isolate named function expression bindings (#776) 
Squash-merge: reviewed, no issues. Clean semantics fix with thorough binding-matrix coverage.
 2026-10-07 02:36:06 +08:00
morluto c945931961 docs: clarify NativeAOT scope and regenerate conformance ledger 
Documents NativeAOT as a native-analysis route with format/architecture limits, keeps the skill DOS-guide link inside the installed bundle convention, and regenerates the managed conformance manifest.
 2026-10-07 02:34:44 +08:00
morluto 69be514c67 docs: update release boundary to npm 4.1.0 with Windows native bundle 2026-10-07 02:32:55 +08:00
morluto 554e9b1612 docs: move quick start up and mark skill install optional 2026-10-07 02:08:21 +08:00
github-actions[bot] 9622b4b4cf chore(main): release rea-agents 4.1.0 (#635) 
* chore(main): release rea-agents 4.1.0

* chore: normalize release product catalog

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
rea-agents-4.1.0 		2026-10-07 01:57:26 +08:00
N0zoM1z0 8238232485 feat(ida): add read-only GUI and headless MCP providers (#754) 2026-10-07 01:47:05 +08:00
Dery Ferdika c8e66c704a fix(artifacts): make extraction output tree work on Windows (#753) 
SafeOutputTree.create() called fchmod(0o700) on a directory handle and
commit() fsynced a directory handle. Both are POSIX-only: Windows rejects
them with EPERM ("operation not permitted, fchmod"/"fsync"), so every
extract_artifact call failed with a generic io error and produced no output.

Skip the redundant directory chmod and directory fsync on Windows. mkdir
already applies the requested mode, and file contents are synced in write().
Add a Windows regression test and run it, plus the archive-safety test, in
the curated Windows CI lane so the behavior is covered.
 2026-10-07 01:46:52 +08:00
Tufail AkramCursorN0zoM1z0
 		91daaa68ae docs(browser): add an interaction example that captures the visible result (#750) 
* docs(browser): add an interaction example that captures the visible result

Fixes #728

Co-authored-by: Cursor <cursoragent@cursor.com>

* docs(browser): wait for asynchronous search results before capture

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: N0zoM1z0 <1705004398@qq.com>
 2026-10-07 01:24:22 +08:00
Kaoru0822 9a4e6da5a9 fix(firmware): validate configured executables (#751) 2026-10-07 01:03:55 +08:00
N0zoM1z0 fb679b63c2 feat(ghidra): integrate optional NativeAOT metadata recovery (#748) 
* feat(ghidra): integrate optional NativeAOT metadata recovery

* fix(ghidra): bind extension snapshots to configured artifacts

* test(ghidra): verify lazy NativeAOT startup failures

* fix(ghidra): preserve NativeAOT failure reasons and coverage

* fix(ghidra): preserve NativeAOT x64 calling conventions

* test(ghidra): guard recovered NativeAOT method conventions

* fix(ghidra): reject blocking extension file inputs

* fix(ghidra): diagnose incompatible NativeAOT extension classes

* test(ghidra): verify real extension initialization failures

* fix(ghidra): keep extension descriptor fields optional
 2026-10-07 00:57:08 +08:00
Kaoru0822 6d1f39b250 Merge pull request #749 from kaoru0822-kitauji/fix/javascript-schema-diagnostics 
fix(javascript): expose result schema failures
 2026-10-06 09:01:33 -07:00
Kaoru0822 99263a720d fix(javascript): expose result schema failures 2026-10-06 08:52:29 -07:00
N0zoM1z0 5af1699103 docs: clarify onboarding and align provider guidance (#745) 2026-10-06 22:57:36 +08:00
Vinay Prasadandmorluto d3f498ceec docs(hopper): document HopperTargetLease realpath fallback (#711) 
* docs(hopper): document HopperTargetLease realpath fallback

Closes #642

* docs(hopper): clarify realpath fallback errors

---------

Co-authored-by: morluto <76467478+morluto@users.noreply.github.com>
 2026-10-06 22:27:57 +08:00
Dery Ferdikaandmorluto 1d15bcb9ec fix(browser): classify CSP host sources by their own origin (#707) 
* fix(browser): classify CSP host sources by their own origin

A Content-Security-Policy host-source without a scheme (for example
`cdn.example.com` or `*.trusted.test`) was resolved with
`new URL(token, baseUrl)`, so it became a page-relative path and was
reported as the observed page's own origin. Third-party script, style, and
connect sources were therefore misreported as approved origins, and a bare
`*` wildcard collapsed to the page origin as well.

Resolve host-sources per CSP3 \u00a72.3.1: a scheme-less source inherits the
protected resource's scheme, wildcard host/port sources stay classified as a
set of origins, and non-host tokens remain `other`. Keyword and scheme
sources are unchanged.

Adds boundary coverage for scheme-less host sources, wildcards, and scheme
inheritance against the approved-origin set.

* fix(browser): validate CSP host source syntax

---------

Co-authored-by: morluto <76467478+morluto@users.noreply.github.com>
 2026-10-06 22:26:57 +08:00
Kaoru0822 739039092f fix(android): validate explicit Java runtime (#742) 2026-10-06 22:25:54 +08:00
morluto 3f6d6dc756 docs: update Trendshift repository badge 2026-10-06 22:18:21 +08:00
N0zoM1z0 5a7c769692 feat(firmware): integrate Binwalk and Unblob analysis 
* feat(firmware): integrate Binwalk and Unblob analysis

* fix(firmware): verify published files and namespace source references

* test(firmware): isolate extractor dependency failure from process cleanup

* fix(firmware): retain actionable report and cleanup diagnostics

* test: assert retained batch output failure diagnostics
 2026-10-06 14:16:04 +00:00
Kaoru0822 8d7071da4c Merge pull request #739 from kaoru0822-kitauji/fix/hopper-shutdown-request-diagnostics 
fix(hopper): retain shutdown request diagnostics
 2026-10-06 06:19:07 -07:00
Kaoru0822 72548712fe fix(hopper): retain shutdown request diagnostics 2026-10-06 05:49:26 -07:00
N0zoM1z0 904d03e987 feat(android): integrate static APK analysis with headless JADX (#738) 
* feat(android): integrate static APK analysis with headless JADX

* test(android): include APK tools in explicit effects audit
 2026-10-06 12:46:48 +00:00
N0zoM1z0 d0f3480a3c feat(evidence): accept exact retained application references (#734) 2026-10-06 20:17:59 +08:00
Kaoru0822 00eb03d0f2 Merge pull request #735 from kaoru0822-kitauji/fix/reference-import-cli-failure-status 
fix(cli): report reference-source import failures
 2026-10-06 05:09:11 -07:00
Kaoru0822 75a75cbb20 Merge pull request #731 from kaoru0822-kitauji/fix/semantic-union-unknown-branches 
fix(javascript): preserve unknown branches in primitive unions
 2026-10-06 05:08:54 -07:00
Kaoru0822 09c249deb8 Merge pull request #729 from kaoru0822-kitauji/fix/mcp-shutdown-diagnostics 
fix(mcp): retain shutdown failure diagnostics
 2026-10-06 05:08:40 -07:00
Kaoru0822 a5b970c6bf Merge pull request #716 from kaoru0822-kitauji/fix/client-configuration-leading-bom 
fix(setup): accept leading BOM in JSON client configs
 2026-10-06 05:08:25 -07:00
Kaoru0822 65c879757e Merge pull request #715 from kaoru0822-kitauji/fix/typed-seed-array-members 
fix(trace): match typed seeds against member arrays
 2026-10-06 05:08:12 -07:00
Kaoru0822 18c18290d0 Merge pull request #714 from kaoru0822-kitauji/fix/cli-json-file-failure-status 
fix(cli): fail when JSON input files cannot be parsed
 2026-10-06 05:07:58 -07:00
Kaoru0822 b1b687fb75 Merge pull request #713 from kaoru0822-kitauji/fix/ghidra-universal-macho-refusal 
fix(ghidra): refuse ambiguous universal Mach-O imports
 2026-10-06 05:07:38 -07:00
Kaoru0822 863ed47de2 Merge pull request #712 from kaoru0822-kitauji/fix/javascript-resolve-path-semantics 
fix(javascript): preserve path.resolve reset semantics
 2026-10-06 05:07:23 -07:00
Kaoru0822 1dccd0dee0 Merge pull request #701 from kaoru0822-kitauji/fix/mixed-signature-slices 
fix(native): inspect mixed-signature Mach-O slices
 2026-10-06 05:07:08 -07:00
Kaoru0822 6582b2433a fix(ghidra): refuse ambiguous universal Mach-O imports 2026-10-06 05:00:53 -07:00
Kaoru0822 66f3cfa594 fix(native): inspect mixed-signature Mach-O slices 2026-10-06 04:59:15 -07:00
N0zoM1z0 e2c23f3640 docs(ghidra): explain first-query deadlines and recovery (#736) 2026-10-06 19:53:44 +08:00
N0zoM1z0 8d44b3edd3 fix(target): explain the JavaScript directory analysis route (#733) 2026-10-06 19:53:08 +08:00
Kaoru0822 431e8ebfcf fix(cli): report reference-source import failures 2026-10-06 04:27:34 -07:00
N0zoM1z0 9dd6cef90a fix(process): scope comparison unknowns to their evidence (#732) 2026-10-06 19:16:49 +08:00
Kaoru0822 9a2f395028 fix(javascript): preserve unknown branches in primitive unions 2026-10-06 04:06:11 -07:00
Kaoru0822 fd008cd8e0 fix(mcp): retain shutdown failure diagnostics 2026-10-06 03:58:12 -07:00
Kaoru0822 fe843ec0b1 fix(setup): accept leading BOM in JSON client configs 2026-10-06 03:40:42 -07:00
Kaoru0822 38ebd54776 fix(trace): match typed seeds against member arrays 2026-10-06 03:24:18 -07:00
Kaoru0822 3201f0538d fix(cli): fail when JSON input files cannot be parsed 2026-10-06 03:02:22 -07:00
Kaoru0822 af48fe8791 Merge pull request #710 from kaoru0822-kitauji/fix/electron-option-property-keys 
fix(electron): respect computed option keys and overrides
 2026-10-06 02:44:14 -07:00
Kaoru0822 417737748a fix(javascript): preserve path.resolve reset semantics 2026-10-06 02:42:16 -07:00
Kaoru0822 98de3380e3 fix(electron): respect computed option keys and overrides 2026-10-06 02:26:28 -07:00