N0zoM1z0
d86231ad33
Expose one plan/execute replay contract through both CLI and MCP with exact source, input, runtime, sandbox, limit, and export commitments. Run selected ESM and extracted CommonJS/Rspack factories in a disposable Linux x64 Bubblewrap namespace with a content-addressed Node ELF closure, architecture-checked seccomp, delegated systemd cgroup limits, bounded protocol capture, cancellation, and observable cleanup. Preserve left and right observations as Evidence, derive differential comparisons without erasing unknowns, add optional separately authorized reproducers, and fail closed on stale plans or unavailable host boundaries. Add source-owned parser, sanitizer, clipboard, denial, timeout, OOM, protocol-forgery, and cancellation coverage; a real Linux verifier and workflow; regenerated catalogs and TypeDoc; and updated the packaged REA analysis skill for the 83-tool inventory.
1.2 KiB
1.2 KiB
Description
Type of Change
- Bug fix
- New feature
- Documentation update
- Performance improvement
- Refactoring (no functional change)
- Tool contract change (MCP schema modification)
Testing Performed
- Unit tests added or updated
- TypeScript typecheck passes (
npm run typecheck) - Linting passes (
npm run lint) - Full test suite passes (
npm test) - Real Hopper verification performed (
npm run verify:hopper) - Linux real Hopper verification performed (
npm run verify:hopper:linux) or unavailability explained - Real browser verification performed (
npm run verify:browser) or unavailability explained - Package verification performed (
npm run verify:package)