4 people b1bf4a70d4 fix(setup): name invalid client config shape errors clearly (#2157) ...

* fix(setup): name invalid client config shape errors clearly

Setup was dumping raw Zod issues for non-object roots or server tables,
and uninstall always claimed the file was not valid JSON. Report the
structural problem instead, and reserve parse failures for real syntax errors.

Fixes #2152

Co-authored-by: Cursor <[email protected]>

* fix(setup): preserve client configuration record validation

Keep descriptive shape errors while retaining Zod record validation and its own-property copy. Reject tagged YAML objects before setup or uninstall writes and prevent inherited JSONC properties from fabricating client registrations.

Add production-boundary regressions for tagged YAML roots and server tables, plus inherited Cursor and OpenCode settings. All 91 focused tests, npm run check, verify:test-discovery, verify:package, and npm pack --dry-run passed.

---------

Co-authored-by: Beqa Ksovreli <[email protected]>
Co-authored-by: Cursor <[email protected]>
Co-authored-by: morluto <[email protected]>

2026-10-12 23:24:24 +08:00

..

adb

fix(ghidra): recover stale clients on same-target reopen (#2014)

2026-10-12 14:06:52 +08:00

android

fix(android): preserve decoded values and duplicate class inventories

2026-10-12 06:29:13 +08:00

apktool

fix(analysis): preserve producer identity and partial evidence

2026-10-12 12:37:00 +08:00

application

fix(setup): name invalid client config shape errors clearly (#2157)

2026-10-12 23:24:24 +08:00

artifacts

fix(apple): preflight XML plist nesting before keyed archive decoding (#2161)

2026-10-12 23:12:10 +08:00

browser

fix(evidence): preserve literal keys and response body ownership

2026-10-12 16:17:29 +08:00

cli

fix(frida): name the argument each Frida input error rejects (#2217)

2026-10-12 23:00:59 +08:00

composition

feat(flutter): identify Dart snapshot builds and inspect AOT payloads by pure APK parsing (#1582)

2026-10-12 22:35:55 +08:00

config

feat(ghidra): apply validated analyzer overrides before analysis

2026-10-12 03:49:31 +08:00

contracts

feat(flutter): identify Dart snapshot builds and inspect AOT payloads by pure APK parsing (#1582)

2026-10-12 22:35:55 +08:00

domain

fix(apple): preflight XML plist nesting before keyed archive decoding (#2161)

2026-10-12 23:12:10 +08:00

dotnet

fix(managed): report malformed PE layouts as invalid input (#2194)

2026-10-12 06:53:26 -07:00

evaluation

fix(evaluation): authenticate delivered Evidence citations

2026-10-11 14:48:46 +08:00

evm

perf(evm): avoid repeated cleanup diagnostics (#1622)

2026-10-11 03:28:16 +08:00

filesystem

feat(flutter): identify Dart snapshot builds and inspect AOT payloads by pure APK parsing (#1582)

2026-10-12 22:35:55 +08:00

firmware

fix(evidence): authenticate identities and retain extraction provenance

2026-10-12 14:12:19 +08:00

flutter

feat(flutter): identify Dart snapshot builds and inspect AOT payloads by pure APK parsing (#1582)

2026-10-12 22:35:55 +08:00

frida

fix(frida): name the argument each Frida input error rejects (#2217)

2026-10-12 23:00:59 +08:00

ghidra

docs: correct drift and reorganize English guides (#2207)

2026-10-12 22:14:25 +08:00

go

feat(go): inspect embedded binary build metadata (#1363)

2026-10-12 11:34:02 +08:00

hopper

fix(ida): thin the selected FAT slice into the private headless input (#2201)

2026-10-12 22:07:49 +08:00

ida

fix(ida): thin the selected FAT slice into the private headless input (#2201)

2026-10-12 22:07:49 +08:00

inspector

fix(runtime)!: preserve unknown debugger attachment state

2026-10-12 12:37:00 +08:00

javascript

fix(javascript): preserve execution and invocation provenance

2026-10-12 10:03:17 +08:00

jeb

fix(analysis): preserve producer identity and partial evidence

2026-10-12 12:37:00 +08:00

main

fix(mcp): keep shared optional providers open across discarded probes (#2205)

2026-10-12 06:56:45 -07:00

native

fix(analysis): preserve producer identity and partial evidence

2026-10-12 12:37:00 +08:00

process

fix(process): return private runtime ownership at allocation

2026-10-12 16:30:53 +08:00

reference

fix(reference): verify symlink identity around target reads

2026-10-12 04:33:47 +08:00

server

fix(frida): name the argument each Frida input error rejects (#2217)

2026-10-12 23:00:59 +08:00

wasm

fix(wasm): preserve leading BOM in custom section names (#2102)

2026-10-12 18:39:01 +08:00

windows

fix(windows): retain failed native inspection ownership (#1826)

2026-10-11 21:33:25 +08:00

catalogIdentity.ts

perf(mcp)!: compact repeated session discovery facts (#1988)

2026-10-12 07:40:19 +08:00

cli.ts

feat(flutter): identify Dart snapshot builds and inspect AOT payloads by pure APK parsing (#1582)

2026-10-12 22:35:55 +08:00

cliBrowserContext.ts

fix(mcp): isolate optional observation adapter failures (#838)

2026-10-07 11:45:17 +08:00

cliBrowserScenarioCommands.ts

fix(cli): await browser scenario cleanup on interrupts

2026-10-11 17:33:57 +08:00

cliCommandNames.ts

feat(flutter): identify Dart snapshot builds and inspect AOT payloads by pure APK parsing (#1582)

2026-10-12 22:35:55 +08:00

cliEvidenceCommands.ts

perf(mcp): keep Playwright and type-only imports off MCP startup (#1691)

2026-10-10 21:04:05 -07:00

cliHostInputs.test.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

cliJavaScriptRuntimeCommands.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

cliJsonInput.ts

fix(filesystem): bound and verify admitted file and JSON reads

2026-10-11 00:28:24 +08:00

cliJsonPaths.test.ts

fix(cli): preserve blank JSON paths for input validation (#1068)

2026-10-08 20:57:54 +08:00

cliLogging.test.ts

feat(update): update Bun global installations (#1735)

2026-10-11 17:56:05 +08:00

cliLogging.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

cliObservationOptions.ts

fix(javascript): trace wrapped Electron IPC paths in large bundles (#1874)

2026-10-12 09:28:59 +08:00

cliOutput.ts

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

config.test.ts

fix(workflows): retain staged output ownership and cancellation semantics

2026-10-12 06:29:27 +08:00

doctorRuntime.ts

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

generatedPackageMetadata.ts

docs: correct drift and reorganize English guides (#2207)

2026-10-12 22:14:25 +08:00

identity.ts

feat: streamline agent integration and MCP routing

2026-07-20 17:11:06 +08:00

logger.ts

fix(cli): report an invalid REA_LOG_LEVEL as configuration (#2140)

2026-10-12 06:07:37 -07:00

main.ts

fix(mcp): keep shared optional providers open across discarded probes (#2205)

2026-10-12 06:56:45 -07:00

mcpDoctor.ts

fix(mcp): validate doctor probe against its discovered output contract (#1461)

2026-10-10 14:33:57 +08:00

mcpStartupPolicy.ts

perf(mcp): reduce cold-start work

2026-07-26 15:02:58 +00:00

serverIdentity.ts

refactor: return complete analysis results inline

2026-09-29 08:07:24 +08:00

setupEnvironment.test.ts

fix(setup): register a stable launcher when run through bunx (#1731)

2026-10-11 19:17:15 +08:00