refactor: converge extension ownership and runtime boundaries - #130

Closed

M09Ic wants to merge 389 commits into

refactor/issue127-final

This pull request is big! We're only showing the most recent 250 commits

Commits on Jul 28, 2026

fix(web): rebuild reload candidates from explicit config
M09Ic
committed
189570d
fix(web): make cancellation and event replay durable
M09Ic
committed
a320b44
fix(build): pin generator tool dependencies
M09Ic
committed
8b2e121
fix: clear cross-platform lint debt
M09Ic
committed
63479ba
Merge pull request #78 from chainreactors/fix/web-runtime-integrity
M09Ic
authored
fc72a48
refactor(agent): enforce root package dependency layers
M09Ic
committed
b18ae98
test(web): require real agent and verify SSE resume
M09Ic
committed
644cefc
ci: enforce architecture and zero-debt gates
M09Ic
committed
f1e0b49
test(output): keep golden fixtures platform-stable
M09Ic
committed
d9bf03e
fix(web): converge scans across timeout races
M09Ic
committed
e599073
fix(deps): consume race-free scanner and viewer
M09Ic
committed
04e7ade
Merge pull request #77 from chainreactors/refactor/unidirectional-layer-deps
M09Ic
authored
1361fbd
refactor(build): demote agent command to example
M09Ic
committed
27c244c
test(output): normalize golden fixture line endings
M09Ic
committed
38f1441
refactor(runner): transfer command ownership to cairn
M09Ic
committed
3530077
fix(deps): preserve CONNECT tunnel bytes
M09Ic
committed
d940d30

Commits on Jul 29, 2026

refactor(config): centralize env and provider protocols
M09Ic
committed
8ced520
refactor(config): enforce strict provider protocols
M09Ic
committed
d811949
fix(agent): clamp retry backoff before shifting
M09Ic
committed
b361175
fix(web): initialize app from resolved configuration
M09Ic
committed
b93601a
test(tui): isolate bang output newline contract
M09Ic
committed
3d27cd5
test(tui): retire obsolete platform skip
M09Ic
committed
ea6c0e0
fix(scan): avoid per-run global logger mutation
M09Ic
committed
ee91aa6
Merge pull request #79 from chainreactors/refactor/unidirectional-layer-deps
M09Ic
authored
faa579d

Commits on Aug 1, 2026

feat: unify web protocols on protobuf and ConnectRPC
M09Ic
committed
c850230
fix(neutron): emit the captured request/response in JSON results

wuchulonly
and
claude
committed
7201b2a

Commits on Aug 2, 2026

feat(protocol): adopt namespaced AOP and split product RPC types
M09Ic
committed
326e020
refactor(scan): remove duplicate report and DTO pipelines
M09Ic
committed
d403178
refactor(agent): use typed AOP events across runtime
M09Ic
committed
7708906
refactor(web): unify AOP transport and product ConnectRPC
M09Ic
committed
2d91a53
refactor(frontend): consume generated AIScan protobuf clients
M09Ic
committed
a7ec164
fix(web): persist and route canonical node URIs
M09Ic
committed
ae3106f
fix(frontend): use canonical node URI identity
M09Ic
committed
d657008
test(aop): preserve node URI field compatibility
M09Ic
committed
6f68dcf
refactor(web): name canonical node URI routing explicitly
M09Ic
committed
67bd8c7
chore: ignore local test artifacts
M09Ic
committed
2030603
refactor(protocol): flatten packages and canonicalize node IDs
M09Ic
committed
1841d7a
refactor: unify agent runtime and web node transport
M09Ic
committed
7d590a8
refactor(skills): migrate tool docs to OKF-style knowledge bundles

M09Ic
and
claude
committed
be4da6e
feat(examples): add rmcp tool node and acp client/server examples

M09Ic
and
claude
committed
27d24a9
docs(api): add external integration API reference

M09Ic
and
claude
committed
34e383c
docs(api): refocus on chat input/output with cross-language codegen

M09Ic
and
claude
committed
ad28b25
docs(api): add protoc-gen-doc generated proto references

M09Ic
and
claude
committed
83b2044
refactor: unify web RPC and runtime architecture
M09Ic
committed
7abc8ae
chore(deps): bump chainreactors/ioa to d0e2604 for shared client CLI

M09Ic
and
claude
committed
604abfe
fix(ci): restore generated asset placeholder and satisfy quality gates
M09Ic
committed
27f18de
fix(test): keep stdio test output behind one host lock
M09Ic
committed
c1edf53
fix(web): align cyber-ui host component contracts
M09Ic
committed
6c9472f
fix(web): auto-attach the runtime REPL after discovery
M09Ic
committed
379bd85
refactor(pty): use AOP messages as the canonical protocol
M09Ic
committed
c0f62c6
refactor(protocol): align AOP application and node endpoints
M09Ic
committed
f27b0e3
refactor(pty): encapsulate runtime behind AOP messages
M09Ic
committed
42b000c
fix(protocol): keep generic AOP nodes product-neutral
M09Ic
committed
db9c425
chore(frontend): point AOP client at application endpoint
M09Ic
committed
f433165
refactor(web): centralize runtime in service package
M09Ic
committed
16d661a
refactor(web): hide business composition behind management contract
M09Ic
committed
20353b8
refactor(web): consolidate service mechanisms
M09Ic
committed
5db7ec7
refactor(web): move sqlite persistence to bun and protojson
M09Ic
committed
8ca25f5
fix(ci): make lint advisory and repair failing checks
M09Ic
committed
0144f4d
refactor(sco): normalize raw artifacts on the server
M09Ic
committed
287d776
Merge pull request #80 from chainreactors/feat/aop-connectrpc-unification
M09Ic
authored
6873362

Commits on Aug 3, 2026

fix(build): enable cgo for full artifacts
M09Ic
committed
0b82157
ci: upload standard and full binaries
M09Ic
committed
2d903b2
fix(web): align command and turn health state
M09Ic
committed
6cbf1b8
fix(session): unify JSONL persistence and rotate continuations
M09Ic
committed
bdda0af
Merge pull request #84 from chainreactors/fix/unified-jsonl-session-rotation
M09Ic
authored
1362228
merge: integrate v0.4.0 session and web fixes
M09Ic
committed
6e86f6b
docs: prepare v0.4.0 release and document web console
M09Ic
committed
6e55f36
fix(release): validate UPX-packed Windows binaries
M09Ic
committed
403c590
fix(release): avoid UPX environment collision
M09Ic
committed
be73daf

Commits on Aug 5, 2026

fix embedded IOA and tool panic boundaries
M09Ic
committed
bfbb17f

Commits on Aug 6, 2026

feat(scan): emit native artifacts with correlated loot
M09Ic
committed
ea823d2
feat(config): reuse shared LLM environment
M09Ic
committed
c768b03

Commits on Aug 7, 2026

feat: add optional shell command bridge
M09Ic
committed
61add0a
refactor: keep command bridge as a PTY adapter
M09Ic
committed
7ca507c
fix: reclaim exited Windows bridge runtimes
M09Ic
committed
5f5c093
refactor: make shell command adapter transparent
M09Ic
committed
38b0893
test: stabilize concurrent PTY option isolation
M09Ic
committed
5753f2b
feat(skills): add ioa finding publishing convention

M09Ic
and
claude
committed
b1ef513
feat(record): add native media capture transport
M09Ic
committed
572744c
fix(protocol): pin canonical loot and file range schemas
M09Ic
committed
e932775
fix(runner): make run wait include cleanup
M09Ic
committed
6aed37b
fix(node): clean up panicked operations before reporting
M09Ic
committed
aebd0cd
feat(record): add native desktop capture tool
M09Ic
committed
1c65da3
fix(ci): export Windows recorder SDK paths
M09Ic
committed
e35db5f
fix(ci): persist recorder link environment on Windows
M09Ic
committed
4acd1dd
fix(build): restore static native RE2 for full artifacts
M09Ic
committed
e47d188
ci: validate native RE2 and name Windows artifacts
M09Ic
committed
45d5bfa
refactor(record): consolidate native SDK tooling
M09Ic
committed
891ccf7
feat(browser): expand reusable headless automation
M09Ic
committed
03e17e2
fix(build): detect Windows MSYS hosts
M09Ic
committed
84def21
Merge remote-tracking branch 'origin/feat/native-artifact-loot' into HEAD
M09Ic
committed
b1877a8

Commits on Aug 8, 2026

Merge master into feat/native-artifact-loot
M09Ic
committed
703d91c
Merge pull request #86 from chainreactors/feat/command-bridge
M09Ic
authored
4f4bb2f
Merge remote-tracking branch 'origin/master' into feat/native-artifact-loot
M09Ic
committed
a1713cf
fix(ci): fall back to building recorder SDK
M09Ic
committed
a638806
fix(build): fetch x264 from GitHub mirror
M09Ic
committed
e3adbba
fix(ci): export Windows recorder link environment
M09Ic
committed
99f71fe
Merge pull request #85 from chainreactors/feat/native-artifact-loot
M09Ic
authored
383de9b
Merge master into feat/record-tool
M09Ic
committed
c77d056
Merge pull request #88 from chainreactors/feat/record-tool
M09Ic
authored
4396332

Commits on Aug 9, 2026

fix(ci): unify nightly and release workflows
M09Ic
committed
6b404ac
refactor: clean v1 compatibility and package boundaries
M09Ic
committed
50a6726
build: align full profile with static re2
M09Ic
committed
27e5768
docs: add record and release promo materials
M09Ic
committed
c76e5ac
fix(web): update cyber-ui record card focus
M09Ic
committed
0454c76
chore: ignore local agent and browser artifacts
M09Ic
committed
8829684
Merge remote-tracking branch 'origin/master' into feat/native-artifact-loot
M09Ic
committed
0c47335
chore(release): finalize v1 gates and cleanup
M09Ic
committed
b022102
test(arch): follow portable recorder shell contract
M09Ic
committed
b0b1958
test(web): synchronize terminal reconnect teardown
M09Ic
committed
77dac6a
fix(build): strip local release-profile binaries
M09Ic
committed
668fe06
test(tmux): isolate offset reads from PTY timing
M09Ic
committed
55df4b9
fix(deps): pin race-free zombie runner
M09Ic
committed
c2abcc8
docs: write v1.0.0-rc1 changelog
M09Ic
committed
b8fd6b3

Commits on Aug 10, 2026

fix(node): reset reconnect backoff after stable sessions
h3zh1
committed
9767580
fix(node): enforce websocket liveness deadlines
h3zh1
committed
40b18cd
fix(node): classify websocket connection failures
h3zh1
committed
410c069
feat(node): advertise runner process instance identity
h3zh1
committed
fdc8e54
fix(node): surface enrollment rejection reasons
h3zh1
committed
a405238
feat(web): add contextual chat input guide
M09Ic
committed
c828928
feat(web): automate agent quick connect
M09Ic
committed
0b4850a
refactor(node): simplify websocket connection lifecycle
M09Ic
committed
bd6e7c6
refactor(node): derive websocket recovery timings
M09Ic
committed
e2d5c26
Merge pull request #92 from chainreactors/fix/node-websocket-reliability
M09Ic
authored
fa9acb9
refactor(agent): separate harness prompt from scan skill
M09Ic
committed
9f687ce
fix(runner): sanitize AOP tool text at UTF-8 boundary
wuchulonly
committed
5bd4274
Merge pull request #93 from chainreactors/fix/aop-invalid-utf8
wuchulonly
authored
d852455

Commits on Aug 12, 2026

docs(skills): correct gogo/scan port presets (top100/top1000 invalid)

wuchulonly
and
claude
committed
bc67b73
Merge pull request #94 from chainreactors/fix/gogo-scan-port-presets
wuchulonly
authored
b2e0c25

Commits on Aug 13, 2026

fix(node): 工具 terminal 后丢弃流式工具的尾随 artifact

wuchulonly
and
claude
committed
d459a33
fix(node): 尾随 artifact 按"已结算 call"丢弃，并覆盖取消路径

wuchulonly
and
claude
committed
0988ae2
test(node): websocket 存活测试并入 proto_connection_test

wuchulonly
and
claude
committed
d23e0d0

Commits on Aug 16, 2026

fix: upgrade katana to v1.7.0
wuchulonly
committed
e3f185f
Merge pull request #97 from chainreactors/fix/katana-v1.7.0
wuchulonly
authored
2204864
ci: reduce GitHub Actions usage
M09Ic
committed
43ccaea

Commits on Aug 18, 2026

feat(traffic): AOP traffic namespace over an always-on capture hub

M09Ic
and
claude
committed
76d90a7
build: make the module resolvable outside this multi-repo checkout

M09Ic
and
claude
committed
de0e7eb
feat(file): the runtime's file-access audit trail

M09Ic
and
claude
committed
fbc7d03
build: make record tool opt-in
M09Ic
committed
35fe338
build(aop): bump cyber-ui to the file-access proto

M09Ic
and
claude
committed
6d1b719

Commits on Aug 19, 2026

refactor(runner): unify native runtime assembly
M09Ic
committed
91ba6b4
Merge remote-tracking branch 'origin/master' into feat/traffic-namespace
M09Ic
committed
3888749
fix(ci): verify release candidates before publishing
M09Ic
committed
674c078
refactor(ci): separate release build from publishing
M09Ic
committed
e4e2be8
fix(web): pin published cyber-ui file protocol
M09Ic
committed
b31c260
fix(ci): satisfy static analysis
M09Ic
committed
64b3182
fix(ci): make cold generation and headless capture reliable
M09Ic
committed
a166888
Merge pull request #103 from chainreactors/feat/traffic-namespace
M09Ic
authored
46368aa
fix(pty): consume drained session output
M09Ic
committed
c959c08
fix(agent): unify keep-alive producer lifecycle
M09Ic
committed
e56eddb
Merge pull request #106 from chainreactors/fix/rc2-pty-drain
M09Ic
authored
6493076
fix(ci): bound Playwright browser installation
M09Ic
committed
93dd787
Merge pull request #107 from chainreactors/fix/ci-playwright-install
M09Ic
authored
33213df
docs: complete v1.0.0-rc2 changelog
M09Ic
committed
b17913b
ci: keep runner verification out of release assets
M09Ic
committed
76574a2
Merge pull request #108 from chainreactors/docs/rc2-changelog
M09Ic
authored
6dec246
docs: focus rc2 notes on mitm and proxy
M09Ic
committed
6faa1a7
Merge pull request #109 from chainreactors/docs/rc2-mitm-focus
M09Ic
authored
bfb1b03
feat(curl): add pure-Go, browser-naturalized curl bash tool

M09Ic
and
claude
committed
1048659
feat(aop/traffic): add Exchange, the canonical HTTP exchange struct

M09Ic
and
claude
committed
79078d4

Commits on Aug 20, 2026

Commits on Aug 21, 2026

feat(curl): support common compatibility flags
wuchulonly
committed
b87a02b
fix(curl): reject overflowing timeout values
wuchulonly
committed
6fbef3b
test(curl): keep path tests within repository layout
wuchulonly
committed
6b11e8e
fix(curl): honor last HTTP version option
wuchulonly
committed
f42e224
test(curl): cover resolve TLS and proxy boundaries
wuchulonly
committed
bb93c2a
fix(curl): reject head requests with bodies
wuchulonly
committed
7df05e0
fix(curl): report timeout failures as code 28
wuchulonly
committed
0bee893
fix(curl): map body read deadlines to timeout code
wuchulonly
committed
5d4351b
fix(curl): classify network timeout errors consistently
wuchulonly
committed
650e38e
test(curl): cover common fail bundle
wuchulonly
committed
3aa191d
fix(curl): preserve output files on failed transfers
wuchulonly
committed
76b171a
feat(curl): support ascii request tracing
wuchulonly
committed
0fe6ef7
fix(curl): tighten compatibility edge cases
M09Ic
committed
904e17d
chore: clean curl and proxy lint debt
M09Ic
committed
f4e55c2
chore: clean curl and proxy lint debt
M09Ic
committed
00239a8
chore(curl): simplify response capture and lint fixes
M09Ic
committed
58e0f7a
test: include curl in default capabilities
M09Ic
committed
65e3c40
refactor(curl): reuse standard response snapshots
M09Ic
committed
7b5afb5
test: include curl in full capabilities
M09Ic
committed
f5a05c1
test: include curl in full capabilities
M09Ic
committed
aef07e2
Merge pull request #110 from chainreactors/feat/curl-tool
M09Ic
authored
fe20a20
Merge pull request #111 from chainreactors/feat/curl-compat
M09Ic
authored
0c150fb

Commits on Aug 22, 2026

Commits on Aug 23, 2026

Commits on Aug 26, 2026

fix(runner): stop failed turns from looping through automatic continuation

h3zh1
and
cursoragent
committed
28cae8d
feat(output): cap JSONL file size and per-session sqlite events

h3zh1
and
cursoragent
committed
e1278d7
fix(traffic): reconstruct the Host header net/http strips at capture

wuchulonly
and
claude
committed
7c26275

Commits on Aug 27, 2026

Merge pull request #114 from chainreactors/fix/capture-host-header
wuchulonly
authored
592fb64
fix: unify runner egress for built-in tools
M09Ic
committed
90764fb
fix: prevent repeated AOP persistence
M09Ic
committed
fddd243

Commits on Aug 31, 2026

fix(runner): cap inline tool result size at 64KiB
h3zh1
committed
dc9e0d7

Commits on Sep 1, 2026

Commits on Sep 4, 2026

修复(commands)：前台命令继承调用工作目录

wuchulonly
and
claude
committed
e5bae2f
修复(aop)：在协议边界规范化工具文本
 wuchulonly
committed
68ec504
修复(proxy)：限制并回收 MITM body 捕获
 wuchulonly
committed
c26799d
修复(web)：将取消请求交由运行时处理
 wuchulonly
committed
7815e27
统一(curl)：使用 AIScan Web 资产摘要
 wuchulonly
committed
76ab375
优化(frontend)：为资产面板启用分页
 wuchulonly
committed
593a854

Commits on Sep 5, 2026

修复(frontend)：更新回复完成时间的子模块版本
 wuchulonly
committed
78e1851
修复(frontend)：更新聊天时间线子模块版本
 wuchulonly
committed
f1cef59

Commits on Sep 9, 2026

feat(traffic): add selective subscriptions and bounded capture
M09Ic
committed
4ff97ba
refactor(traffic): remove storage sink and body reference abstractions
M09Ic
committed
1523b1a
Merge pull request #120 from chainreactors/pr-62
M09Ic
authored
93f99cb
fix(ci): stabilize rc3 release checks
M09Ic
committed
eb3e3e3
release: prepare v1.0.0-rc3
M09Ic
committed
918751e
ci: isolate stale browser service tests
M09Ic
committed
8a83caa
test(web): restore terminal E2E through the node endpoint
M09Ic
committed
aaa9458
test(web): acknowledge terminal open before reconnect
M09Ic
committed
e0f79a1
test(web): tolerate reconnect notification ordering
M09Ic
committed
88ff4a0
test(web): synchronize reconnect with completed forwarding
M09Ic
committed
100278e
docs: refine rc3 changelog for users
M09Ic
committed
9c0d039
docs: make rc3 changelog concrete
M09Ic
committed
d17a97e

Commits on Sep 14, 2026

refactor: separate app runtime console and communication host
M09Ic
committed
6589ba1
docs: plan next console decoupling phase
M09Ic
committed
d3dcc83
refactor: unify console execution with runtime
M09Ic
committed
c169053
simplify repository harness and browser architecture
M09Ic
committed
0c1a29f
feat: add explicit plugin lifecycle coordinator
M09Ic
committed
e25c8b1
test: add real product and LLM delegation harness to CI
M09Ic
committed
ce9bd32
refactor: separate tool execution from registration
M09Ic
committed
05b97d2
refactor: enforce extension-owned lifecycle context
M09Ic
committed
af6a8e3
refactor: own app registry through extension set
M09Ic
committed
ba6f324
docs: record extension lifecycle boundaries and migration gap
M09Ic
committed
3eac499
test: exercise registry through extension set
M09Ic
committed
0852c19
refactor: unify file tool registration extensions
M09Ic
committed
ecb0ec9
refactor: centralize tool group extension ownership
M09Ic
committed
98bd837
test: migrate resource lifecycle checks to extension sets
M09Ic
committed
7ab4f21
docs: record converged file extension boundaries
M09Ic
committed
6c701bc
refactor: centralize extensions under pkg/exts
M09Ic
committed
2f17a76
refactor: adapt IOA service through extension host
M09Ic
committed
61d10ae
refactor(harness): consolidate extension ownership and retire legacy runtime
M09Ic
committed
638c325
refactor: separate composition roots from extension capabilities
M09Ic
committed
0a64ef6
refactor(harness): unify agent session ownership and extension declarations
M09Ic
committed
32790fa
fix(harness): converge profile wiring and session failure drain
M09Ic
committed
14392fe
refactor(harness): finalize observation terminology and profile contracts
M09Ic
committed
f7f94fd
refactor: separate agent loop and session extensions
M09Ic
committed
cbbdfa6