mirror of
https://github.com/morluto/rea.git
synced 2026-11-05 06:45:22 +00:00
[GH-ISSUE #5099] [Bug] Inspecting inferior-tty permanently revokes persistent GDB session TTY verification #3136
Closed
opened 2026-10-31 00:37:02 +00:00 by bsakaguchi
·
7 comments
No Branch/Tag specified
main
codex/procedure-reference-stacked
release-please--branches--main--components--rea-agents
release-please--branches--main--components--rea-agents--release-notes
codex/kuna-independent-retry
codex/byte-search-overlay-coverage
codex/open-failure-target-receipt
codex/kuna-xref-evidence
codex/ghidra-ambiguous-procedure-recovery
codex/function-source-bundle
codex/trace-function-integration-prototype
codex/snapshot-source-closure
codex/recorded-evidence-array-pages
codex/evidence-recovery-redesign
codex/trace-feature-address-scope
codex/call-discovery-scope
codex/ghidra-literal-candidate-evidence
codex/decompile-directory-independent-retry
codex/retry-provenance-base
codex/value-flow-capability-experiment
codex/ghidra-containing-instruction
cursor/readme-discord-button-ef9f
dependabot/github_actions/actions/setup-node-7.1.0
dependabot/github_actions/actions/upload-artifact-7.0.2
dependabot/npm_and_yarn/npm-minor-and-patch-d8d97ce6df
codex/kuna-1989
fix/8559-native-ui-fixture-ownership
fix/8555-go-verifier-mcp-ownership
codex/provider-capability-recovery
fix/8642-rizin-target-stdin
codex/ghidra-memory-effect-scope
codex/ghidra-annotation-entry-selector
codex/ghidra-readonly-recovery
codex/ghidra-regex-verifier-recovery
codex/evidence-discovery-view-guidance
fix/8545-bulk-append-overflow
fix/8428-navigation-refusal-alternatives
codex/address-context-recovery
codex/matching-member-limitations
codex/unknown-scope-contract
codex/evidence-view-guidance
feat/8373-native-trace-views
codex/ghidra-snapshot-verifier-binding
codex/elf-export-visibility
codex/evidence-view-recovery
codex/native-reference-cli-help
codex/provider-candidate-observation-scope
codex/kuna-session-verification
codex/ghidra-switch-lifetime-guidance
codex/pseudocode-paging-discovery
codex/clarify-evidence-view-support
codex/kuna-xrefs-selector-recovery
codex/context-capacity-recovery
codex/evidence-closure-large-links
codex/same-function-evidence-identity
codex/ghidra-verifier-inspected-jdk
codex/audit-guided-workflows
codex/crash-prompt-retained-dossiers
codex/analysis-view-error-recovery
codex/kuna-verifier-target-selection
codex/ghidra-selected-project-call-coverage
codex/docs-native-analysis-scope
codex/ghidra-java-socket-boundary
codex/ghidra-retained-snapshot-verifier
codex/ghidra-search-inventory-facts
fix/8284-zero-argument-parameter-bindings
fix/8198-ui-action-handler-offset
fix/8257-elf-entry-label-identity
fix/8304-deferred-output-schema-projection
fix/8277-call-path-computed-target-uncertainty
fix/pr-8089-conflicts
fix/ci-static-duplicate-export
dependabot/npm_and_yarn/lint-staged-17.6.0
dependabot/github_actions/actions/download-artifact-8.0.2
dependabot/npm_and_yarn/write-file-atomic-8.0.0
dependabot/npm_and_yarn/canonicalize-5.1.0
dependabot/github_actions/actions/cache/restore-6.1.0
dependabot/npm_and_yarn/toon-format/toon-4.4.0
dependabot/github_actions/actions/deploy-pages-5.0.1
codex/review-fixes-pr-2403
codex/review-fixes-pr-2400
codex/process-terminal-width
codex/test-brittleness-cleanup
verify/7167-browser-connect-macos
fix/7167-browser-connect
feat/native-matching-allowance-setting
feat/browser-scenario-dry-run
test/managed-caller-parameters-20261024
codex/parser-fortythird-boundaries
fix/6926-pinvoke-platform-decorations-20261023
fix/6889-har-body-encoding-20261023
fix/6888-sqlite-schema-budget-20261023
fix/dependency-security-gates-6708
cursor/evidence-overwrite-rebase-b4ac
feat/4057-verify-native-exports
fix/windows-acl-observer-overhead-20261022
cursor/erlang-beam-restack-4476
cursor/pe-certificate-review-bf32
fix/6116-javascript-application-fs-errors
fix/6061-unmapped-runtime-script-unknown
feat/browser-scenario-summary
fix/pe-certificates
codex/verify-3407
cursor/rebase-5699
cursor/rebase-5352
cursor/rebase-5600
cursor/fix-cli-schema-omission-10a8
codex/audit-hopper-shutdown-reasons-20261021
fix/demangle-swift-omitted-record
fix/nib-boolean-value-types
cursor/cancellation-partial-observation-a5ac
fix/ib-object-limit-reasons
fix/electron-fuse-limit-advice
fix/kuna-doctor-dangling-cache
fix/fixed-budget-refusal-advice
fix/js-ipc-listener-dedup
fix/js-return-member-provenance
fix/dmg-integrity-retry-advice
fix/ida-doctor-readiness
fix/kuna-version-probe-output-drain
fix/legacy-swift-runtime-name-matching
fix/dylib-lazy-load-commands
fix/browser-scenario-startup-cancel
fix/swift-nested-punycode-classification
fix/compare-unselected-scopes
fix/objc-method-budget-coverage
fix/dmg-mounted-root-observations
audit/ci-tests-20261019-round2
release/6.7.0
fix/wabt-cleanup-retry-resolution
fix/electron-fuse-elf-pe-architecture
fix/native-plist-descriptor-ownership
fix/kuna-caller-cleanup-ownership
experiment/atomic-codemode-20261016
review/first-contributor-3776
fix/call-resolution-full-read-cycles
fix/member-mutation-selection-repeat
experiment/atomic-re-tools-20261015
perf/member-mutation-lazy-origins
perf/static-network-mutation-index
fix/hopper-startup-lifecycle
audit/3050-windows-proof-20261015
feat/windows-window-capture-2183
audit/3049-windows-proof-20261015
audit/3735-macos-fixtures-20261015
fix/batch-decompile-null-pseudocode
fix/kuna-inventory-honors-jobs
experiment/browser-codemode-tool-design-20261015
fix/hopper-clean-runtime-argv
codex/review-2049-27f1b367
review-fixes/pr-2787-routing
fix/3360-scoped-this-emitters
fix/3367-replaced-global-effects
fix/3838-compact-any-value-items
test/hopper-download-probe-20261015
codex/windows-runtime-creation-red-green-20261015
codex/windows-readonly-root-red-green-20261015
codex/windows-root-share-red-green-20261015
codex/exp-1685-win-mcp-startup
codex/bug-sweep-20261015
investigate/2190-windows-package-phases
investigate/3543-macos-cli-deadline
perf/3281-reverse-tools-feedback-quality
fix/3406-hopper-doctor-fixture
fix/3341-wrapper-require-test-context
fix/3301-owned-uninstall-fixtures
fix/3164-compiler-input-ownership
fix/pcap-cleanup-stdout-newline-20261014
perf/interface-builder-summary
codex/review-fixes-pr-1977
fix/ghidra-effective-jvm-platform
fix/docs-turkish-rust-link-20261013
fix/main-maintenance-ci-20261010
fix/recover-binary-session-process-effects
codex/review-fixes-pr-2457
codex/ci-required-cancellation-gate
fix/main-format-baseline-20261013
fix/setup-preserve-entry-fields
cursor/restore-main-checks-1ffc
fix/ghidra-bridge-hashmap-import
codex/shared-ci-jadx-json-default-20261013
codex/shared-ci-ghidra-test-groups-20261013
codex/shared-ci-java-fixture-format-20261013
codex/fix-intrinsic-invocation-boundaries
test/release-preflight-reusable-jobs
test/js-parameter-provenance-expectation
fix/linux-hopper-verification-current
test/2419-ghidra-elf-probe-size
followup/pr-1544-native-ida
codex/fold-pr-2230-contribution
docs/readme-responsible-use
fix/issue-2064
fix/issue-2050
fix/issue-2053
fix/issue-1968
fix/issue-1945
experiment/codemode-bridge-20261011
fix/tool-effects-negative-wording-1904-20261012
fix/1842-electron-interop-provenance
feat/recover-javascript-multi-input
refactor/website-i18n-prep
fix/nativeaot-pe-virtual-extent
fix/browser-verifier-ci-hang
fix/pe-resources-input-selection
docs/beginner-friendly-guides
docs/beginner-setup-guide
fix/javascript-analysis-worker-1563
fix/1649-ghidra-duplicate-names
fix/javascript-export-keys-integration-1369
test/maintenance-boundary-contracts-20261011
review/javascript-export-keys-1369
review/process-live-progress-1483
test/javascript-1495-growth-ratio
fix/ci-escape-timing
docs/normalized-terminal-geometry-1450
release/6.3.0
archive/release-6.3.0-pr1381
release/6.2.0
fix/electron-preload-dynamic-override
fix/javascript-self-referential-bundler-edges
release/6.1.0
cursor/grok-client-cherry-pick-0b56
feat/signature-posture
feat/dyld-shared-cache
feat/artifact-integrity-policy
feat/pkg-inventory
release/6.0.0
chore/sync-release-5.0.0
release/5.0.0
cursor/cloud-agent-node-787e
fix/javascript-xhr-open-endpoints
review/pr-711-realpath-fallback-wording
cleanup/replay-confinement
codex/test-suite-performance
codex/issue-foundations
codex/address-open-issues-2026-07-20
agent/javascript-vite-rollup-esbuild-adapters
agent/process-cleanup
agent/triage-integration
agent/unknown-commands-registry
feat/mcp-identity-metadata
morlvps/issue_cleanup
codex/installer-redesign
morl/roadmap-investigation-core
morl/roadmap-investigation-docs
release-please--branches--main--components--rea
rea-agents-6.8.0
rea-agents-6.7.0
rea-agents-6.6.0
experiment/atomic-codemode-wait-runtime-20261016
rea-agents-6.5.0
rea-agents-6.4.0
rea-agents-6.3.0
rea-agents-6.2.0
rea-agents-6.1.0
rea-agents-6.0.0
rea-agents-5.0.0
rea-agents-4.1.0
rea-agents-4.0.1
rea-agents-4.0.0
rea-agents-3.2.1
rea-agents-3.2.0
rea-agents-3.1.0
rea-agents-3.0.0
rea-agents-2.7.0
rea-agents-2.6.0
rea-agents-2.5.1
rea-agents-2.5.0
rea-agents-2.4.0
rea-agents-2.3.0
rea-agents-2.2.0
rea-agents-2.1.0
rea-agents-2.0.0
rea-agents-1.7.0
rea-agents-1.6.0
rea-agents-1.5.0
rea-agents-1.4.0
rea-agents-1.3.0
rea-agents-1.2.0
rea-agents-1.1.0
rea-agents-1.0.0
rea-agents-0.5.0
rea-agents-0.4.0
rea-agents-0.3.0
rea-0.2.1
rea-0.2.0
Labels
Clear labels
area: bridge
area: bridge
area: build
area: build
area: build
area: cli
area: domain
area: evidence
area: mcp
area: native
area: providers
area: runtime
area: server
area: setup
area: tests
bug
design
documentation
enhancement
enhancement
enhancement
experiment
help wanted
i18n
invalid
P0: critical
P1: high
P2: medium
P2: medium
P2: medium
P3: low
performance
provider-request
pull-request
Mirrored from GitHub Pull Request
question
roadmap
triage
No labels
area: bridge
area: bridge
area: build
area: build
area: build
area: cli
area: domain
area: evidence
area: mcp
area: native
area: providers
area: runtime
area: server
area: setup
area: tests
bug
design
documentation
enhancement
enhancement
enhancement
experiment
help wanted
i18n
invalid
P0: critical
P1: high
P2: medium
P2: medium
P2: medium
P3: low
performance
provider-request
pull-request
question
roadmap
triage
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".
No due date set.
Dependencies
No dependencies set.
Reference
morluto/rea#3136
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @coygeek on GitHub (Oct 18, 2026).
Original GitHub issue: https://github.com/morluto/rea/issues/5099
Before submitting
Area
MCP or agent integration
Observed behavior
With a synthetic MI peer through the production MCP registration,
show versionpreservedinferior_tty_verified: true, but successfulshow inferior-ttychanged it to false. Setting the original terminal again left verification false. Close with a synthetic live thread group then returnedcapability_unavailableand required explicit disposition. The session remained ready; simulated disposition followed by close with the same ID succeeded.This is a mocked boundary observation. No real GNU GDB, target or terminal was used. Source confirms the flag has no restoration path within a started session.
Reproduction
From the source checkout at the revision below, with its locked dependencies installed, create an isolated workspace:
Save this probe as
$WORK/probe.mts:Run from the checkout root:
The check completed once with exit 0. It starts only a disposable Node MI peer and uses
platform: 'linux'to exercise the Linux manager branch on the host described below. The fixture represents one live group; it does not execute an inferior or touch the fixture PID.Expected behavior
A built-in read-only inspection of the inferior TTY should preserve its configured verification. The GDB guide describes permanent revocation for commands that can change the terminal or redirect a run. Plain
show inferior-ttydoes neither. The console contract accepts GDB console commands, and the close contract documents automatic detach when the required live-group and verified-output conditions hold.Impact and scope
The false revocation unnecessarily removes the verified-TTY prerequisite for automatic detach and requires an explicit inferior disposition before close when a live group remains. It persists for the session even after setting the original TTY again. This is bounded to commands whose text matches the classifier, in Linux persistent MCP sessions. Avoiding the inspection prevents this trigger; simulated disposition and same-ID close recovered successfully. No data loss or target termination was observed. Real-provider frequency and downstream client behavior are NOT_ENOUGH_INFO.
REA version
Current main source
3537e58c1ab29309f06eabf50bc52adba9817a0c, package version 6.7.0. Relevant manager, registration, contract and guide files are identical to stable tagrea-agents-6.7.0; the published release runtime was not tested.Runtime and platform
Node v26.12.0; Darwin 27.0.0; arm64. Node 26 satisfies package engines; the repository's pinned Node 24.18.0 was not exercised. Persistent native macOS GDB support is not claimed. The explicit Linux option and fake peer exercise REA's supported-branch state handling without establishing real Linux/GDB descriptor behavior.
Target and artifact context
Synthetic MI3 peer, selected terminal string
/dev/pts/7, and one simulated live group with fixture PID 4242. No executable target, actual terminal, provider installation or remote service.Interface
MCP
Earliest failure stage
Capture or observation
Relevant output or evidence
Observed through production registration, manager, MI parser and status/error projection:
The error reason was
Live GDB inferiors require an explicit disposition because no durable inferior TTY is verified.Source-derived path: registration forwards the accepted console command; execute clears verification; classifier matches any inferior-tty mention; status exposes the flag; live-group close refuses without it. The only assignment of true is startup readback verification.
Typed outcome or recovery expected
Successful read-only
gdb_consoleshould return its Evidence while retaininginferior_tty_verified: true. Other live-inferior and descriptor checks must still apply at close. After actual output-affecting commands, retaining ownership and requiring disposition remains appropriate.Analysis or suspected cause
Source-derived: the classifier searches the whole command for
inferior-tty, so the setting name alone causes revocation before the command runs. This covers bothshow inferior-ttyandhelp inferior-tty, independently of setting or redirection syntax. The helper returned true for both in the probe; only show was exercised through MCP.Additional context
Related #4653 concerns incorrect error classification when disposition is required, rather than this read-only trigger that unnecessarily removes verification. #3656 concerns provider integration scope. Neither covers this contract and trigger. No known-good release was established. Real GDB execution, live-target automatic detach, and published-package runtime coverage remain NOT_ENOUGH_INFO.
@XinwangTao commented on GitHub (Oct 19, 2026):
Good find — a read-only inspection turning into a permanent state mutation is exactly the kind of surprise that's hard to debug later. The fact that show version keeps inferior_tty_verified: true while show inferior-tty clears it, and that no restoration path exists within a started session, makes the flag effectively lossy: once touched by an inspection the session can no longer close normally without explicit disposition. Agreed the read-only trigger should preserve configured verification — inspections shouldn't have side effects on session state.
@akushonkamen commented on GitHub (Oct 19, 2026):
I'd like to take this one — the root cause is clear (the
inferior-ttypredicate incommandMayChangeInferiorOutputmatches the read-onlyshow inferior-ttyquery, and there's no path to restoreinferiorTtyVerifiedafter startup). Will follow up with a fix that keeps the fail-closed detach semantics, along with regression tests, shortly.@akushonkamen commented on GitHub (Oct 19, 2026):
Update: the fix is implemented and verified on the branch
fix/5099-show-inferior-tty-verified(commitbede9d6a).commandMayChangeInferiorOutputnow exempts exactly the two read-only TTY query forms (show inferior-ttyand MI-inferior-tty-show); every other command mentioning the TTY setting keeps revoking the verified-sink flag, so mutating commands still fail closed and detach still re-reads and compares the live TTY before-target-detach. Regression tests cover the query forms, composite commands, and the inspect-then-close detach path (red before the fix, green after; fullGdbSessionManagerCoverage.test.ts156/156 plus adjacent GDB suites).Opening the PR itself is currently erroring out on my side (GitHub rejects the create-PR call for this fork with a permissions error while other writes succeed); I'll open it as soon as that clears.
@matbrgz commented on GitHub (Oct 19, 2026):
Cross-referencing with sibling GDB persistent session report #5098 (
[Bug] debug-with-gdb rejects built-in p, s and d aliases before starting GDB). Both issues address state mutation and command validation boundaries in persistent GDB sessions (debug-with-gdb).Consolidated under Cluster AG (GDB Persistent Debug Session & CLI Command Boundary) in tracker #4330.
@XinwangTao commented on GitHub (Oct 20, 2026):
The fix lands at the right boundary — exempting exactly the two read-only TTY query forms while every mutating TTY command keeps revoking the flag preserves the fail-closed detach semantics, and the inspect-then-close regression test covers precisely the case that bit us. Agree with matbrgz that #5098 and this share the same command-boundary theme; consolidating under Cluster AG in #4330 keeps the audit manageable. Hope the create-PR permission error clears so this can land.
@akushonkamen commented on GitHub (Oct 20, 2026):
Thanks @XinwangTao for the review — glad the boundary matches what the issue needed, and thanks @matbrgz for the cross-reference to #5098; I'll take that (and the rest of Cluster AG) into account in the follow-up here.
One heads-up on timing: this account currently holds this repository's maximum number of open pull requests (#2150, #5247, #5250), so GitHub is rejecting new PR creation until one of them merges. The branch
fix/5099-show-inferior-tty-verified(bede9d6a) is complete and validated (red→green plus adjacent GDB suites), and I'll open the PR here the moment a slot frees up.@coygeek commented on GitHub (Oct 24, 2026):
Checked the reported fix on
mainatd87e73f2db.Exact show inferior-tty/help inferior-tty return false before conservative mutation detection; compound and mutating commands remain true. A production-source probe confirms show, set and compound controls. Session regression executes both inspections and checks verification stays true, then checks with inferior-tty revokes it and close does not detach.
Implementation: GdbSessionManager.ts.
The relevant regression checks in GdbSessionManagerCoverage.test.ts passed in the focused test run on this revision. This closure is based on the current source and those checks; provider fixtures do not establish a real-engine run. Closing as completed on main.