gensokyo-dev f60e42a9ae fix(mcp)!: bound validation work before tool dispatch (#7905) ...

Reuse the pinned SDK's combined array-element and object-member admission
before canonical validation, deferred runtime loading and tool execution.
Share a configurable finite allowance across eager/deferred HTTP and stdio,
and project refusals to bounded, actionable transport resource errors.

Preserve canonical CLI/application contracts, caller-selected input values,
ordinary validation semantics and complete Evidence access. Exercise actual
transport boundaries, real artifact/TShark workflows, packaged installation,
continued service and downstream identity/capacity regressions.

Fixes #7882

BREAKING CHANGE: MCP tool arguments now default to 1,024 combined array
elements and object members per call. Select a larger positive finite
REA_MCP_MAX_INPUT_ELEMENTS allowance and restart for larger inline inputs,
or use retained/file selectors where supported. Inputs are never truncated.

Assisted-by: Reimu (gensokyo-skills:reimu-incident-triage)
Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)
Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)

2026-10-29 05:56:38 +00:00

..

adbErrorIdentity.test.ts

fix(adb): preserve command failure target identities

2026-10-19 01:13:57 +08:00

adbListingNumbers.test.ts

test(ci): align source preservation and catalog assertions

2026-10-27 02:35:54 +08:00

adbNumericDeclarations.test.ts

fix(adb): own numeric declaration validation and diagnostics

2026-10-24 06:34:33 +08:00

adbPackageInventoryCoverage.test.ts

fix(adb): report unrecognized package rows from resolve-adb-packages (#5874)

2026-10-21 05:06:11 -07:00

androidRuntimeComponentHints.test.ts

fix(parsers): preserve format evidence and caller input identity

2026-10-23 22:54:28 +08:00

appBundleEncodingCli.test.ts

test(mcp): read bundle failures from public error content

2026-10-09 22:46:09 +08:00

appleBundleTraversalCoverage.test.ts

fix(apple): preserve bounded archive diagnostics (#7890)

2026-10-29 07:36:29 +08:00

appleLaunchdPlists.test.ts

fix(apple): derive launchd domains from owning directories

2026-10-17 20:10:12 +08:00

applicationManifestRoots.test.ts

fix(javascript): keep dependency manifests out of application roots

2026-10-11 10:43:48 +08:00

applicationVersionMatchingCli.test.ts

fix(javascript): match unchanged module exports across application versions (#5196)

2026-10-23 02:25:43 +08:00

applicationVersionRelocationCli.test.ts

fix(javascript): preserve unresolved version relationships

2026-10-17 12:51:04 +08:00

applicationVersionSelectedSourceCli.test.ts

fix(javascript): preserve uncertainty for unexamined sources (#7911)

2026-10-29 09:25:25 +08:00

applicationWorkflowCli.test.ts

fix(mcp)!: bound validation work before tool dispatch (#7905)

2026-10-29 05:56:38 +00:00

artifactComparisonCoverage.test.ts

fix(artifacts): validate partial inventory edges

2026-10-27 10:19:00 +08:00

assetCatalogResourceKeys.test.ts

fix(apple): preserve bounded archive diagnostics (#7890)

2026-10-29 07:36:29 +08:00

binaryPlistDates.test.ts

chore(lint): enforce buffer and cancellation regression guards

2026-10-25 07:31:42 +08:00

blockSourceMapCli.test.ts

fix: restore JavaScript analysis and current regression checks (#3080)

2026-10-14 12:17:54 +08:00

bundlerCallbackMetadataCli.test.ts

fix(javascript): retain distinct chunk registration callback metadata (#2737)

2026-10-13 17:42:41 +08:00

bundleResourceRootCliMcp.test.ts

fix(resources)!: inspect app resources without an executable

2026-10-21 04:22:20 +08:00

bundleResourceTargetIdentity.test.ts

fix(native): validate plist target identity

2026-10-27 10:48:42 +08:00

catchInitializerOwnership.test.ts

fix(javascript): preserve catch destructuring alias ownership

2026-10-24 12:07:33 +08:00

createRequireFilenameBase.test.ts

fix(javascript): preserve map boundaries and loader provenance

2026-10-24 01:00:14 +08:00

electronBlankPathCli.test.ts

fix(process): avoid cold ownership helper deadline exhaustion (#1139)

2026-10-09 07:18:07 +08:00

electronInvalidPaths.test.ts

test: stabilize worker cancellation and trailer regressions (#5497)

2026-10-20 23:06:09 +08:00

electronIpcConstantChannelCli.test.ts

fix(javascript): count one IPC observation per site-resolved channel (#5810)

2026-10-21 05:06:50 -07:00

electronIpcListenerCallsiteCli.test.ts

fix(mcp)!: bound validation work before tool dispatch (#7905)

2026-10-29 05:56:38 +00:00

electronModuleInteropCli.test.ts

fix(javascript): follow actual receivers in nested intrinsic calls (#1912)

2026-10-12 01:22:26 +08:00

electronOpaqueBindingCli.test.ts

fix(javascript): invalidate Electron reads after direct eval (#7053)

2026-10-25 11:29:45 +08:00

electronPreloadOverridesCli.test.ts

fix(electron): unwrap transparent inline window options

2026-10-16 08:14:51 +08:00

electronSwitchConditionsCli.test.ts

fix(javascript): retain Electron switch conditions (#7910)

2026-10-29 07:56:15 +08:00

emptyImportNameCli.test.ts

fix(javascript): preserve empty ESM import names in provenance (#2797)

2026-10-14 03:12:04 +08:00

erlangBeamViews.test.ts

test(erlang): cover lambdas names filter and chunks miss in BEAM views (#6973)

2026-10-24 17:39:57 +08:00

esbuildCommonJsExports.test.ts

fix(javascript): preserve map boundaries and loader provenance

2026-10-24 01:00:14 +08:00

exportedFunctionBindingsCli.test.ts

fix(mcp)!: bound validation work before tool dispatch (#7905)

2026-10-29 05:56:38 +00:00

getterLocalAliasesCli.test.ts

fix(javascript): retain getter receivers through local aliases (#2778)

2026-10-13 21:26:13 +08:00

getterReceiverMutationsCli.test.ts

fix(javascript): preserve container ownership for getter mutations (#2765)

2026-10-13 20:10:39 +08:00

hopperPublisherRejectionCli.test.ts

chore(lint): enforce buffer and cancellation regression guards

2026-10-25 07:31:42 +08:00

interfaceBuilderClassNameIdentity.test.ts

fix(apple): preserve archived className fields and descriptor identity

2026-10-23 23:36:21 +08:00

interfaceBuilderHierarchyLimits.test.ts

test(apple): author admitted archives and typed binary UID references

2026-10-24 08:22:14 +08:00

interfaceBuilderNibRelationships.test.ts

fix(apple): recognize AppKit cell ownership (#7916)

2026-10-29 07:55:05 +08:00

interfaceBuilderPlistNumbers.test.ts

test(apple): author admitted archives and typed binary UID references

2026-10-24 08:22:14 +08:00

interfaceBuilderUIKitKeyedArchive.test.ts

fix(plist): own dictionary decoding across Apple workflows

2026-10-26 22:20:00 +08:00

javascriptAnalysisLimits.test.ts

test(mcp): validate selected tools without compiling the entire catalog

2026-10-26 18:26:33 +08:00

javascriptAsarCollisionCli.test.ts

fix(javascript)!: report ambiguous artifact paths (#7864)

2026-10-29 05:10:18 +08:00

javascriptBuiltinDefaultsCli.test.ts

fix(javascript): deduplicate shared projected source facts

2026-10-24 09:11:30 +08:00

javascriptCallbackTargets.test.ts

fix(javascript): preserve incoming callback target uncertainty (#4243)

2026-10-16 10:09:22 +08:00

javascriptCallLiteralTransfer.test.ts

feat(javascript): discover semantic call literals in feature traces (#7840)

2026-10-29 01:25:23 +08:00

javascriptCancellationCli.test.ts

fix(browser): preserve passive network inventory uncertainty

2026-10-15 02:28:46 +08:00

javascriptCapturedGenericInvocation.test.ts

fix(javascript): preserve runtime path bytes and Electron ownership (#4941)

2026-10-20 17:25:19 +08:00

javascriptCapturedParameters.test.ts

fix(javascript): bound loop capture and rest-copy expansion

2026-10-24 19:36:20 +08:00

javascriptCheckpointReserveCli.test.ts

test(javascript): separate heap pressure from graph admission proof

2026-10-21 07:26:20 +08:00

javascriptChildHandleOwnership.test.ts

fix(javascript): resolve child ownership at receiver reads (#3819)

2026-10-17 00:22:26 +08:00

javascriptChildProcessArgumentsCli.test.ts

fix(javascript): keep spread child argv counts unknown (#2748)

2026-10-13 23:36:35 +08:00

javascriptChildProcessStdioCli.test.ts

fix(javascript): ignore async exec stdio options (#7087)

2026-10-26 23:16:28 +08:00

javascriptCommonJsDirectoryLookup.test.ts

fix(javascript): preserve CommonJS lookup and analysis provenance (#2306)

2026-10-13 23:31:30 +08:00

javascriptConfigurationReadsCli.test.ts

fix(browser): preserve passive network inventory uncertainty

2026-10-15 02:28:46 +08:00

javascriptContentDeduplicatedModulePaths.test.ts

fix(tests): accept retained module aliases in node views

2026-10-25 10:30:08 +08:00

javascriptDependencyMainHostPaths.test.ts

fix(javascript): preserve runtime path bytes and Electron ownership (#4941)

2026-10-20 17:25:19 +08:00

javascriptEndpointCandidateCli.test.ts

test(javascript): verify endpoint certainty through CLI and MCP

2026-10-18 08:25:28 +08:00

javascriptEndpointCorrespondenceCli.test.ts

fix(javascript): separate endpoint syntax correspondence from target identity

2026-10-24 03:59:44 +08:00

javascriptEndpointPayload.test.ts

fix(javascript): enforce semantic byte bounds for literals

2026-10-15 23:43:05 +08:00

javascriptEscapedArtifactImports.test.ts

fix(javascript): preserve runtime path bytes and Electron ownership (#4941)

2026-10-20 17:25:19 +08:00

javascriptEvalEffectsCli.test.ts

fix(javascript): invalidate stale facts across direct eval

2026-10-18 05:08:37 +08:00

javascriptEventPayload.test.ts

fix(javascript)!: avoid event payload copies in graph metadata (#1427)

2026-10-10 12:20:05 +08:00

javascriptExportedAppPathChanges.test.ts

fix(javascript): preserve runtime path bytes and Electron ownership (#4941)

2026-10-20 17:25:19 +08:00

javascriptFactoryCompletion.test.ts

fix(javascript): preserve runtime path bytes and Electron ownership (#4941)

2026-10-20 17:25:19 +08:00

javascriptFeatureTraceSeedSelectionCli.test.ts

feat(javascript): discover semantic call literals in feature traces (#7840)

2026-10-29 01:25:23 +08:00

javascriptFunctionFingerprintsCli.test.ts

fix(javascript): retain directive values in function fingerprints

2026-10-14 15:20:05 +08:00

javascriptFunctionNameCli.test.ts

refactor(javascript): group domain semantics and contracts (#907)

2026-10-07 17:16:58 +08:00

javascriptGraphQueryCoverage.test.ts

fix(javascript): trace boundary results to assigned bindings (#7912)

2026-10-29 07:58:57 +08:00

javascriptHtmlUrlSuffixesCli.test.ts

fix(javascript): exclude HTML URL suffixes from path admission (#2833)

2026-10-14 06:41:22 +08:00

javascriptIndirectLoaderOwners.test.ts

fix(javascript): distinguish resolver discovery from module loading

2026-10-24 02:35:59 +08:00

javascriptIterationAliases.test.ts

fix(javascript): invalidate references stored through property targets (#1445)

2026-10-10 13:47:15 +08:00

javascriptLiteralLoaderOwnership.test.ts

test(acceptance): run loader ownership once through stdio MCP (#6354)

2026-10-23 00:50:47 +08:00

javascriptLiteralLoaderOwnership.ts

fix(javascript): distinguish resolver discovery from module loading

2026-10-24 02:35:59 +08:00

javascriptLiteralPercentPaths.test.ts

test(javascript): align public fixtures with proven source facts

2026-10-24 08:22:14 +08:00

javascriptLoaderReviewBoundaries.test.ts

fix(javascript): preserve runtime path bytes and Electron ownership (#4941)

2026-10-20 17:25:19 +08:00

JavaScriptModuleLookupCli.test.ts

fix(javascript): align module lookup and source evidence

2026-10-14 08:46:50 +08:00

javascriptModuleResolutionSemantics.test.ts

test(javascript): distinguish resolver URLs from existing module targets

2026-10-24 04:19:12 +08:00

javascriptNativeBindingOwnership.test.ts

merge: reconcile concurrent main fixes with issue remediation

2026-10-24 02:45:14 +08:00

javascriptNextRouteContext.test.ts

fix(javascript): preserve unknown Next package ownership

2026-10-27 07:40:45 +08:00

javascriptNextRouteSegmentIdentity.test.ts

fix(web): preserve Next route filename patterns

2026-10-27 07:44:04 +08:00

javascriptNonStringMainControls.test.ts

fix(javascript): preserve runtime path bytes and Electron ownership (#4941)

2026-10-20 17:25:19 +08:00

javascriptPackageExportPatternOwners.test.ts

fix(javascript): preserve runtime path bytes and Electron ownership (#4941)

2026-10-20 17:25:19 +08:00

javascriptPackageLaunchBoundaries.test.ts

fix(javascript): preserve runtime path bytes and Electron ownership (#4941)

2026-10-20 17:25:19 +08:00

javascriptPartialEndpointsCli.test.ts

fix(javascript): retain unresolved network targets with provenance

2026-10-16 08:14:52 +08:00

javascriptPossibleSetterOwners.test.ts

fix(javascript): preserve runtime path bytes and Electron ownership (#4941)

2026-10-20 17:25:19 +08:00

javascriptPreloadResolveOwners.test.ts

fix(javascript): preserve runtime path bytes and Electron ownership (#4941)

2026-10-20 17:25:19 +08:00

javascriptPublishedAppOwners.test.ts

fix(javascript): preserve runtime path bytes and Electron ownership (#4941)

2026-10-20 17:25:19 +08:00

javascriptRepeatedResolve.test.ts

fix(javascript): preserve repeated native resolver calls (#7824)

2026-10-29 01:29:48 +08:00

javascriptReplacedGlobalEffectsCli.test.ts

fix(javascript): drop built-in effects for visibly replaced globals (#4565)

2026-10-23 02:28:53 +08:00

javascriptReturnedAppPathChanges.test.ts

refactor(javascript): own property capture translation

2026-10-22 08:52:56 +08:00

javascriptReturnedReferenceCycles.test.ts

fix(javascript): preserve runtime path bytes and Electron ownership (#4941)

2026-10-20 17:25:19 +08:00

javascriptReturnedReferences.test.ts

fix(javascript): preserve getter results on direct property writes

2026-10-11 08:15:47 +08:00

javascriptRouteAndRpcIdentity.test.ts

fix(javascript): retain anchored route constants under reserved prefixes (#7838)

2026-10-29 04:58:22 +08:00

javascriptRpcPropertyOwnershipCli.test.ts

fix(javascript): retain standalone GraphQL source operations

2026-10-15 15:59:42 +08:00

javascriptServiceWorkerCli.test.ts

fix(javascript): attribute service workers to intact platform paths

2026-10-16 06:06:06 +08:00

javascriptSlotStores.test.ts

fix(javascript): invalidate references stored through property targets (#1445)

2026-10-10 13:47:15 +08:00

javascriptSourceSelectionCli.test.ts

refactor(javascript): own coverage facts and reuse block prefixes

2026-10-25 09:49:26 +08:00

javascriptStaticApiIdentity.test.ts

fix(javascript): resolve proven URL constructor aliases

2026-10-24 10:17:23 +08:00

javascriptTimerWritesCli.test.ts

fix(javascript): select timer handles at cancellation reads

2026-10-16 06:06:11 +08:00

javascriptUnavailableHtmlCli.test.ts

fix(javascript): retain unavailable HTML reference scopes

2026-10-24 03:11:07 +08:00

javascriptUnknownCapacity.test.ts

fix(javascript): bound semantic unknown retention at projection

2026-10-17 21:57:31 +08:00

javascriptUnreadAppPathChanges.test.ts

fix(javascript): preserve runtime path bytes and Electron ownership (#4941)

2026-10-20 17:25:19 +08:00

javascriptWindowOptionsCli.test.ts

feat(electron): resolve stable local constant window options

2026-10-16 14:52:33 +08:00

javascriptWindowsLoadFilePaths.test.ts

fix(javascript): preserve runtime path bytes and Electron ownership (#4941)

2026-10-20 17:25:19 +08:00

javascriptWorkerUrlCli.test.ts

fix(javascript): exclude erased imports from runtime bindings (#6994)

2026-10-24 11:22:23 +00:00

javascriptWrapperElectronCaptures.test.ts

fix(javascript): require API identity for static application roles

2026-10-24 02:35:36 +08:00

jvmAdmissionIdentity.test.ts

chore(lint): enforce buffer and cancellation regression guards

2026-10-25 07:31:42 +08:00

keyedArchivePostTable.test.ts

fix(apple): preserve post-table plist objects (#7820)

2026-10-29 04:59:14 +08:00

keyedArchiveScalarKinds.test.ts

chore(lint): enforce buffer and cancellation regression guards

2026-10-25 07:31:42 +08:00

keyedArchiveTextUnicode.test.ts

fix(cli)!: refuse lossy text output (#7852)

2026-10-29 08:09:49 +08:00

keyedArchiveXmlNumbers.test.ts

chore(lint): enforce buffer and cancellation regression guards

2026-10-25 07:31:42 +08:00

keyedArchiveXmlScalars.test.ts

chore(lint): enforce buffer and cancellation regression guards

2026-10-25 07:31:42 +08:00

mobileDirectoryComponents.test.ts

chore(lint): enforce buffer and cancellation regression guards

2026-10-25 07:31:42 +08:00

mobileFrameworkConventions.test.ts

refactor(cli): retain typed analysis outcomes through delivery

2026-10-27 09:16:02 +08:00

nativeExportsDynamicSegment.test.ts

fix(native): preserve unknown ELF export coverage without a dynsym section

2026-10-24 03:14:34 +08:00

nativeExportsOrdinalSlots.test.ts

fix(pe): preserve biased export ordinals

2026-10-23 18:23:54 +08:00

nativeExportsVersionRequirements.test.ts

fix(native): preserve metadata uncertainty in coverage

2026-10-25 01:45:23 +08:00

nativeExportsViews.test.ts

perf(native): query retained export table facts (#6907)

2026-10-24 05:00:05 +08:00

nativePlistBinaryScalars.test.ts

fix(plist): preserve binary UID and dictionary identity

2026-10-27 09:49:28 +08:00

nativePlistNesting.test.ts

fix(ci): align static checks and regression fixtures with current contracts (#7349)

2026-10-27 21:24:30 +08:00

nibFieldIdentity.test.ts

chore(lint): enforce buffer and cancellation regression guards

2026-10-25 07:31:42 +08:00

packageImportAliasesCli.test.ts

test(javascript): align public fixtures with proven source facts

2026-10-24 08:22:14 +08:00

packageJsonImports.test.ts

fix(javascript): report JSON status for imported package manifests

2026-10-11 17:07:57 +08:00

packageMainLookupCli.test.ts

fix(javascript): align module lookup and source evidence

2026-10-14 08:46:50 +08:00

packageRootSuffixCli.test.ts

fix(javascript): preserve package and source-map boundary identity (#1939)

2026-10-12 04:09:17 +08:00

packageSelfNameBoundaryCli.test.ts

fix(javascript): preserve package and source-map boundary identity (#1939)

2026-10-12 04:09:17 +08:00

packageSpecifierSuffixCli.test.ts

test(javascript): align public fixtures with proven source facts

2026-10-24 08:22:14 +08:00

packageSubpathsCli.test.ts

test(javascript): align public fixtures with proven source facts

2026-10-24 08:22:14 +08:00

packageUrlUnicodeCli.test.ts

chore(lint): enforce buffer and cancellation regression guards

2026-10-25 07:31:42 +08:00

packageVersionComparison.test.ts

fix(javascript): preserve uncertainty for unexamined sources (#7911)

2026-10-29 09:25:25 +08:00

peResources.test.ts

chore(lint): enforce buffer and cancellation regression guards

2026-10-25 07:31:42 +08:00

pythonPycViews.test.ts

feat(python): query selected pyc code-object facts (#6928)

2026-10-24 10:23:06 +08:00

resourceOnlyPlistSelection.test.ts

chore(lint): enforce buffer and cancellation regression guards

2026-10-25 07:31:42 +08:00

runtime.test.ts

fix(mcp)!: return a compact binary_session status by default (#7127)

2026-10-25 05:29:03 -07:00

sourceMapPrefixCli.test.ts

fix(source-maps): reuse admitted source URL identities

2026-10-24 00:01:19 +08:00

typescriptThisParametersCli.test.ts

fix(javascript): exclude TypeScript this annotations from runtime parameters (#2761)

2026-10-14 07:18:50 +08:00

unboundRequires.test.ts

fix(javascript): preserve import-equals declaration and export evidence (#2062)

2026-10-13 06:04:21 +09:00

webpackLoaderReturnsCli.test.ts

fix(javascript): refuse Webpack loaders that can fall off the end (#6007)

2026-10-21 07:53:42 -07:00

webpackRenamedExportsCli.test.ts

fix(javascript): bind defaulted and destructured Webpack factory roles (#7117)

2026-10-25 05:23:23 -07:00

webScriptPortablePathsCli.test.ts

fix(web): preserve portable captured script paths (#7862)

2026-10-29 01:55:38 +08:00

withMemberMutationCli.test.ts

fix(javascript): preserve uncertain with-scope member writes (#7914)

2026-10-29 09:23:34 +08:00