[GH-ISSUE #1431] [Feature] HarmonyOS/OpenHarmony package and Ark bytecode analysis (ArkDecompiler evaluation) #487

New issue

Open

opened 2026-10-15 18:25:30 +00:00 by bsakaguchi · 1 comment

bsakaguchi commented 2026-10-15 18:25:30 +00:00

Owner

Copy link

Originally created by @N0zoM1z0 on GitHub (Oct 10, 2026).
Original GitHub issue: https://github.com/morluto/rea/issues/1431

Area

Managed runtime, bytecode and packaged-application analysis

Current limitation and goal

Investigate a reusable static reverse-engineering workflow for HarmonyOS NEXT / OpenHarmony application artifacts, prompted by JD ArkDecompiler. Analysts should be able to identify a package, inspect its modules and entry points, examine selected Ark bytecode/functions, and follow evidenced native-library boundaries through equivalent CLI/MCP workflows.

This is a deferred research roadmap, requested by the maintainer to retain the opportunity. Current implementation priorities remain bug fixes, stability and output usability. This issue does not start feature implementation or a release. Parent: #42. Future runtime work can coordinate with #1267 and #968.

Research date: 2026-10-10; REA baseline f4a0c1ce95375c1661ca95b414829113a10298b8. Open/closed issue and PR searches for Harmony, ArkTS, ArkDecompiler, HAP and Panda found no focused proposal. REA's existing Android/JADX adapter is relevant reuse experience; its APK/DEX support does not establish Ark bytecode support.

Ecosystem and artifact scope

The official package overview and Stage build/release structure establish several distinct targets:

Artifact	Analyst questions / scope
.hap	Installable application module: bundle/module identity, abilities and entry points, declared permissions, embedded bytecode, resources and native libraries.
.hsp	Runtime shared package: module dependencies and exported/imported relationships; distinguish in-app products from integrated build inputs.
.app	Distribution App Pack containing HAP/HSP modules and pack.info; preserve each child package's identity and provenance.
.har / OHPM metadata	Build-time reusable library with code, native libraries and resources; distinguish source/build products actually present. HAR is not an independently installed runtime module; do not invent original HAR ownership from a flattened final HAP.
.abc / textual .pa	Ark/Panda bytecode and disassembly: records/classes, functions, strings/literals, imports/exports, instructions and available debug/source locations.
Resources and native products	resources.index, resource/profile files and .so libraries: connect observed resource references and native imports/exports to their owning module. AOT/profile artifacts require separate identification and coverage.

Do not treat all Harmony products or SDK generations as equivalent. Start with a recorded Stage-model/compiler/bytecode combination. Older FA packages use a different layout and config.json; Stage build inputs use JSON5 while installed products use module.json. Identify contents rather than assuming .hap always means .abc or treating a package extension as an Android target.

The official bytecode format documentation is explicitly based on 12.0.6.0 and describes PANDA magic, an internal four-part bytecode version, offsets/indexes and MUTF-8 strings. That version is distinct from application version, SDK/API level and tool version. Runtime Core also has separate dynamic and static-core specifications. Verify dialect compatibility; filename/magic alone cannot establish decompiler coverage.

Upstream candidates and limits

Candidate	Source-backed role and integration consideration
JD ArkDecompiler	Apache-2.0 C++ decompiler rebuilding ArkTS via IR/AST. README and v0.1.0 release explicitly say decompilation is Linux-only, while disassembly is cross-platform. Cross-platform GUI downloads do not establish cross-platform decompilation.
Official ark_disasm	SDK CLI converting .abc to assembly; reports format/minimum-supported versions and can include byte positions. Strong first disassembly baseline. Options that skip literals must not silently remove evidence.
Official AbcKit	Inspection/modification library with enumeration and static/dynamic graph APIs. Evaluate read-only structured metadata/graph access before writing another bytecode parser; build and ABI/version prerequisites still need a real compatibility experiment.
ABCDE	Apache-2.0 Kotlin/JVM package, bytecode and resource-index parser, with library/examples. Its experimental decompiler documents unsupported try/catch and some async bytecode. Useful alternative for inventory/resources rather than assumed full decompilation.
abc-decompiler	Apache-2.0 project based on modified JADX and ABCDE, still under development; some instructions become pseudo-functions. Evaluate separately from ordinary JADX and verify component licenses and headless interfaces.
dayu	Python parser/CLI with selected-method IR/pseudocode and CFG output; decompilation requires matching .abc and ark_disasm output. Upstream calls it rudimentary and does not guarantee correctness. Declares AGPL-3.0; distribution/use choice needs explicit license review.
Official packaging/signing tools	Packing/unpacking tooling documents HAP/HSP/HAR/App Pack and other product modes. HAP signer supplies signature/profile verification. Expose inspected signing facts and verification results separately from trust/distribution-policy conclusions.

JD's CLI entry point accepts an input and output filename (xabc input.abc output.ts) and selects dynamic bytecode. Its current main ignores the decompilation return value and returns zero: exit status alone is not success proof. Its preparation script selects OpenHarmony 6.0.0.1 sources; upstream also requires local compiler/dependency patches, while its Docker recipe selects 5.1.0. Pin one working combination; do not run these scripts as REA setup or assume current master components build together.

ArkAnalyzer is adjacent static-analysis prior art and points to its maintained OpenHarmony-SIG repository. It is not proof of binary-decompiler compatibility. Cangjie–ArkTS interoperability introduces another language/native boundary; record such artifacts explicitly and defer language-specific recovery until independently justified.

Suggested increments and acceptance

1. Package identification and inventory: HAP/HSP/App Pack/HAR, source versus installed manifests, bytecode versions, resources, libraries and module dependencies. Reuse existing archive/native/Evidence infrastructure, keep format/provider code outside domain/application layers, and report unsupported facets explicitly.
2. Selected bytecode inspection: real ark_disasm and/or a proven structured reader; inspect one selected record/function and references, retaining raw identifiers, bytes/offsets, literal values and unresolved targets. Map native loading/registration only where supported by evidence; static references are not observed runtime calls.
3. Optional JD decompilation adapter: bring-your-own Linux xabc plus its compatible libraries. Retain original artifact identity and raw disassembly, record exact provider/compiler versions, validate actual produced output, preserve partial failures, and classify generated ArkTS as derived evidence. Missing source names/types/locations remain unknown.
4. Independent follow-ups: deeper resource resolution, package/function comparison, native/N-API or other interop tracing, additional dialects/hosts, signature verification, FA/AOT/patch products and Cangjie. Device debugging/instrumentation belongs to a separate runtime increment.

Acceptance must use source-generated public fixtures compiled/packaged by the actual pinned toolchain, then exercise the compiled CLI, actual SDK-connected stdio MCP and an installed REA package with real providers. Include multi-module/shared-library packages, imports/exports, literals, closures/async/exception flow, stripped/obfuscated information, resource references and a known native bridge. Compare observations against producer outputs; never require reconstructed source to equal original source.

Also test malformed/checksum/version/offset failures, Unicode/MUTF-8 strings and names, duplicate archive entries/path escape/decompression pressure, incomplete modules, missing/mismatched tooling, provider crashes/zero-status failures, cancellation and large producer output. Bound process/output retention by documented resource constraints, preserve collected evidence, and declare examined scope/completeness. Selected results should avoid copying entire bytecode, AST and source into every label or response; coordinate retained Evidence/views with #1065 instead of duplicating its shared transport work. Serialized size is not a model-token or billing measurement.

REA remains local-only and the first increment is static/read-only. Do not execute target applications, re-sign/repack them, drive a GUI, install device services, upgrade Java/Node/SDKs, or modify global toolchain settings as part of discovery. Reuse upstream code where appropriate, pin provenance and review actual redistributed component licenses.

Research status: documentation, repository metadata, CLI source and alternative tool boundaries reviewed using gh. No SDK/compiler/decompiler was installed or executed for this issue. API availability and upstream claims do not establish REA support; record verified host/dialect/version combinations separately when implementation begins.

Originally created by @N0zoM1z0 on GitHub (Oct 10, 2026). Original GitHub issue: https://github.com/morluto/rea/issues/1431 ### Area Managed runtime, bytecode and packaged-application analysis ### Current limitation and goal Investigate a reusable static reverse-engineering workflow for **HarmonyOS NEXT / OpenHarmony application artifacts**, prompted by [JD ArkDecompiler](https://github.com/jd-opensource/arkdecompiler). Analysts should be able to identify a package, inspect its modules and entry points, examine selected Ark bytecode/functions, and follow evidenced native-library boundaries through equivalent CLI/MCP workflows. This is a **deferred research roadmap**, requested by the maintainer to retain the opportunity. Current implementation priorities remain bug fixes, stability and output usability. This issue does not start feature implementation or a release. Parent: #42. Future runtime work can coordinate with #1267 and #968. Research date: 2026-10-10; REA baseline `f4a0c1ce95375c1661ca95b414829113a10298b8`. Open/closed issue and PR searches for Harmony, ArkTS, ArkDecompiler, HAP and Panda found no focused proposal. REA's existing [Android/JADX adapter](https://github.com/morluto/rea/blob/f4a0c1ce95375c1661ca95b414829113a10298b8/docs/android-analysis.md) is relevant reuse experience; its APK/DEX support does not establish Ark bytecode support. ### Ecosystem and artifact scope The official [package overview](https://github.com/openharmony/docs/blob/f41b9345badd47c7ab0c263344cd7f4b5a549afb/en/application-dev/quick-start/application-package-overview.md) and [Stage build/release structure](https://github.com/openharmony/docs/blob/f41b9345badd47c7ab0c263344cd7f4b5a549afb/en/application-dev/quick-start/application-package-structure-stage.md) establish several distinct targets: | Artifact | Analyst questions / scope | | --- | --- | | `.hap` | Installable application module: bundle/module identity, abilities and entry points, declared permissions, embedded bytecode, resources and native libraries. | | `.hsp` | Runtime shared package: module dependencies and exported/imported relationships; distinguish in-app products from integrated build inputs. | | `.app` | Distribution App Pack containing HAP/HSP modules and `pack.info`; preserve each child package's identity and provenance. | | `.har` / OHPM metadata | Build-time reusable library with code, native libraries and resources; distinguish source/build products actually present. HAR is not an independently installed runtime module; do not invent original HAR ownership from a flattened final HAP. | | `.abc` / textual `.pa` | Ark/Panda bytecode and disassembly: records/classes, functions, strings/literals, imports/exports, instructions and available debug/source locations. | | Resources and native products | `resources.index`, resource/profile files and `.so` libraries: connect observed resource references and native imports/exports to their owning module. AOT/profile artifacts require separate identification and coverage. | Do not treat all Harmony products or SDK generations as equivalent. Start with a recorded Stage-model/compiler/bytecode combination. [Older FA packages](https://github.com/openharmony/docs/blob/f41b9345badd47c7ab0c263344cd7f4b5a549afb/en/application-dev/quick-start/application-package-structure-fa.md) use a different layout and `config.json`; Stage build inputs use JSON5 while installed products use `module.json`. Identify contents rather than assuming `.hap` always means `.abc` or treating a package extension as an Android target. The official [bytecode format documentation](https://github.com/openharmony/docs/blob/f41b9345badd47c7ab0c263344cd7f4b5a549afb/en/application-dev/arkts-utils/arkts-bytecode-file-format.md) is explicitly based on **12.0.6.0** and describes PANDA magic, an internal four-part bytecode version, offsets/indexes and MUTF-8 strings. That version is distinct from application version, SDK/API level and tool version. Runtime Core also has separate [dynamic](https://github.com/openharmony/arkcompiler_runtime_core/blob/6b3a0de5e971b667a1e46e17283595df67a99f0b/docs/file_format.md) and [static-core](https://github.com/openharmony/arkcompiler_runtime_core/blob/6b3a0de5e971b667a1e46e17283595df67a99f0b/static_core/docs/file_format.md) specifications. Verify dialect compatibility; filename/magic alone cannot establish decompiler coverage. ### Upstream candidates and limits | Candidate | Source-backed role and integration consideration | | --- | --- | | [JD ArkDecompiler](https://github.com/jd-opensource/arkdecompiler/blob/8afb36903127b56edee362ce67aacd823610d3e4/README.md) | Apache-2.0 C++ decompiler rebuilding ArkTS via IR/AST. README and [v0.1.0 release](https://github.com/jd-opensource/arkdecompiler/releases/tag/v0.1.0) explicitly say **decompilation is Linux-only**, while disassembly is cross-platform. Cross-platform GUI downloads do not establish cross-platform decompilation. | | [Official `ark_disasm`](https://github.com/openharmony/docs/blob/f41b9345badd47c7ab0c263344cd7f4b5a549afb/en/application-dev/arkts-utils/tool-disassembler.md) | SDK CLI converting `.abc` to assembly; reports format/minimum-supported versions and can include byte positions. Strong first disassembly baseline. Options that skip literals must not silently remove evidence. | | [Official AbcKit](https://github.com/openharmony/arkcompiler_runtime_core/blob/6b3a0de5e971b667a1e46e17283595df67a99f0b/libabckit/README.md) | Inspection/modification library with [enumeration and static/dynamic graph APIs](https://github.com/openharmony/arkcompiler_runtime_core/blob/6b3a0de5e971b667a1e46e17283595df67a99f0b/libabckit/doc/mini_cookbook.md). Evaluate read-only structured metadata/graph access before writing another bytecode parser; build and ABI/version prerequisites still need a real compatibility experiment. | | [ABCDE](https://github.com/Yricky/abcde/blob/62f7fc6a0d455d478db1bf3bcb61f2b79d5a473a/README.md) | Apache-2.0 Kotlin/JVM package, bytecode and resource-index parser, with library/examples. Its experimental decompiler documents unsupported try/catch and some async bytecode. Useful alternative for inventory/resources rather than assumed full decompilation. | | [abc-decompiler](https://github.com/ohos-decompiler/abc-decompiler/blob/427c4cd9f80496236a4a3548d29a6b8aaf74b8e0/README.md) | Apache-2.0 project based on modified JADX and ABCDE, still under development; some instructions become pseudo-functions. Evaluate separately from ordinary JADX and verify component licenses and headless interfaces. | | [dayu](https://github.com/hx1997/dayu/blob/da592965e03ff05d7dd3c7d39699471aedd89436/README.md) | Python parser/CLI with selected-method IR/pseudocode and CFG output; decompilation requires matching `.abc` and `ark_disasm` output. Upstream calls it rudimentary and does not guarantee correctness. Declares AGPL-3.0; distribution/use choice needs explicit license review. | | Official packaging/signing tools | [Packing/unpacking tooling](https://github.com/openharmony/developtools_packing_tool/blob/b2aa3f6abcdb0f2d3a63f5220019465e412fe22a/README_zh.md) documents HAP/HSP/HAR/App Pack and other product modes. [HAP signer](https://github.com/openharmony/developtools_hapsigner/blob/24ef0c843d94f68d16975cac42e377f31def48c6/README.md) supplies signature/profile verification. Expose inspected signing facts and verification results separately from trust/distribution-policy conclusions. | JD's [CLI entry point](https://github.com/jd-opensource/arkdecompiler/blob/8afb36903127b56edee362ce67aacd823610d3e4/xabc.cpp) accepts an input and output filename (`xabc input.abc output.ts`) and selects dynamic bytecode. Its current `main` ignores the decompilation return value and returns zero: exit status alone is not success proof. Its [preparation script](https://github.com/jd-opensource/arkdecompiler/blob/8afb36903127b56edee362ce67aacd823610d3e4/scripts/prepare.sh) selects OpenHarmony 6.0.0.1 sources; upstream also requires local compiler/dependency patches, while its [Docker recipe](https://github.com/jd-opensource/arkdecompiler/blob/8afb36903127b56edee362ce67aacd823610d3e4/docker/Dockerfile) selects 5.1.0. Pin one working combination; do not run these scripts as REA setup or assume current master components build together. [ArkAnalyzer](https://github.com/SMAT-Lab/ArkAnalyzer/blob/e9167bab5f950dafbe3f5956d8d5835e3364b4a5/README.md) is adjacent static-analysis prior art and points to its maintained OpenHarmony-SIG repository. It is not proof of binary-decompiler compatibility. [Cangjie–ArkTS interoperability](https://github.com/openharmony/arkcompiler_cangjie_ark_interop/blob/9ff68bddb407897ab482b5456abb7ba9d3618c51/README.md) introduces another language/native boundary; record such artifacts explicitly and defer language-specific recovery until independently justified. ### Suggested increments and acceptance 1. **Package identification and inventory:** HAP/HSP/App Pack/HAR, source versus installed manifests, bytecode versions, resources, libraries and module dependencies. Reuse existing archive/native/Evidence infrastructure, keep format/provider code outside domain/application layers, and report unsupported facets explicitly. 2. **Selected bytecode inspection:** real `ark_disasm` and/or a proven structured reader; inspect one selected record/function and references, retaining raw identifiers, bytes/offsets, literal values and unresolved targets. Map native loading/registration only where supported by evidence; static references are not observed runtime calls. 3. **Optional JD decompilation adapter:** bring-your-own Linux `xabc` plus its compatible libraries. Retain original artifact identity and raw disassembly, record exact provider/compiler versions, validate actual produced output, preserve partial failures, and classify generated ArkTS as derived evidence. Missing source names/types/locations remain unknown. 4. **Independent follow-ups:** deeper resource resolution, package/function comparison, native/N-API or other interop tracing, additional dialects/hosts, signature verification, FA/AOT/patch products and Cangjie. Device debugging/instrumentation belongs to a separate runtime increment. Acceptance must use source-generated public fixtures compiled/packaged by the **actual pinned toolchain**, then exercise the compiled CLI, actual SDK-connected stdio MCP and an installed REA package with real providers. Include multi-module/shared-library packages, imports/exports, literals, closures/async/exception flow, stripped/obfuscated information, resource references and a known native bridge. Compare observations against producer outputs; never require reconstructed source to equal original source. Also test malformed/checksum/version/offset failures, Unicode/MUTF-8 strings and names, duplicate archive entries/path escape/decompression pressure, incomplete modules, missing/mismatched tooling, provider crashes/zero-status failures, cancellation and large producer output. Bound process/output retention by documented resource constraints, preserve collected evidence, and declare examined scope/completeness. Selected results should avoid copying entire bytecode, AST and source into every label or response; coordinate retained Evidence/views with #1065 instead of duplicating its shared transport work. Serialized size is not a model-token or billing measurement. REA remains local-only and the first increment is static/read-only. Do not execute target applications, re-sign/repack them, drive a GUI, install device services, upgrade Java/Node/SDKs, or modify global toolchain settings as part of discovery. Reuse upstream code where appropriate, pin provenance and review actual redistributed component licenses. **Research status:** documentation, repository metadata, CLI source and alternative tool boundaries reviewed using `gh`. No SDK/compiler/decompiler was installed or executed for this issue. API availability and upstream claims do not establish REA support; record verified host/dialect/version combinations separately when implementation begins.

bsakaguchi added the

area: domain

roadmap

enhancement

P2: medium

labels 2026-10-15 18:25:30 +00:00

bsakaguchi referenced this issue 2026-10-15 18:25:59 +00:00

[GH-ISSUE #1597] [Bug] verify:ghidra entry-alias check fails on macOS arm64 #540

bsakaguchi referenced this issue 2026-10-15 18:28:32 +00:00

[GH-ISSUE #2383] [Tracker] Audit analysis and debugging coverage for the TIOBE top 100 languages (October 2026) #794

bsakaguchi referenced this issue 2026-10-15 18:30:38 +00:00

[GH-ISSUE #2980] [Bug] Real-Ghidra lanes fail: compare_functions of a Ghidra dossier with itself is unknown after #2450 #1045

bsakaguchi referenced this issue 2026-10-16 21:05:48 +00:00

[GH-ISSUE #3796] [Tracker] Open feature requests by area (October 2026) #1471

bsakaguchi referenced this issue 2026-10-16 21:05:49 +00:00

[GH-ISSUE #3796] [Tracker] Open feature requests by area (October 2026) #1471

bsakaguchi referenced this issue 2026-10-16 21:13:27 +00:00

[PR #486] [MERGED] feat(native): add investigation features #2023

bsakaguchi referenced this issue 2026-10-16 21:13:30 +00:00

[PR #500] [MERGED] feat(native): add inspection primitives, dispatch traces and approved UI observation #2028

bsakaguchi referenced this issue 2026-10-17 21:04:27 +00:00

[GH-ISSUE #4644] [Bug] Ghidra: one decompiler failure discards the whole analyze_function dossier and is reported as an environment problem #2422

bsakaguchi referenced this issue 2026-10-17 21:12:39 +00:00

[PR #1592] [MERGED] feat(ghidra): recover signed AArch64 relative jump tables #2992

bsakaguchi added

enhancement

and removed

enhancement

labels 2026-10-31 00:29:14 +00:00

bsakaguchi commented 2026-10-31 00:29:15 +00:00

Author

Owner

Copy link

@asmjmp0 commented on GitHub (Oct 22, 2026):

how about xpanda.I've submitted a PR. https://github.com/morluto/rea/pull/6288

<!-- gh-comment-id:6336762897 --> @asmjmp0 commented on GitHub (Oct 22, 2026): how about xpanda.I've submitted a PR. https://github.com/morluto/rea/pull/6288

bsakaguchi referenced this issue 2026-10-31 00:30:38 +00:00

[GH-ISSUE #3582] [Tracker] Ready to close or merge: issues and pull requests (October 2026) #1330

bsakaguchi referenced this issue 2026-10-31 01:07:22 +00:00

[PR #2977] feat(ghidra): report computed branches without a recovered jump table #5533

bsakaguchi referenced this issue 2026-11-03 20:41:07 +00:00

[GH-ISSUE #487] [Feature] Improve Ghidra AArch64 jump-table recovery #261

Sign in to join this conversation.

No Branch/Tag specified

Branches Tags

main

codex/procedure-reference-stacked

release-please--branches--main--components--rea-agents

release-please--branches--main--components--rea-agents--release-notes

codex/kuna-independent-retry

codex/byte-search-overlay-coverage

codex/open-failure-target-receipt

codex/kuna-xref-evidence

codex/ghidra-ambiguous-procedure-recovery

codex/function-source-bundle

codex/trace-function-integration-prototype

codex/snapshot-source-closure

codex/recorded-evidence-array-pages

codex/evidence-recovery-redesign

codex/trace-feature-address-scope

codex/call-discovery-scope

codex/ghidra-literal-candidate-evidence

codex/decompile-directory-independent-retry

codex/retry-provenance-base

codex/value-flow-capability-experiment

codex/ghidra-containing-instruction

cursor/readme-discord-button-ef9f

dependabot/github_actions/actions/setup-node-7.1.0

dependabot/github_actions/actions/upload-artifact-7.0.2

dependabot/npm_and_yarn/npm-minor-and-patch-d8d97ce6df

codex/kuna-1989

fix/8559-native-ui-fixture-ownership

fix/8555-go-verifier-mcp-ownership

codex/provider-capability-recovery

fix/8642-rizin-target-stdin

codex/ghidra-memory-effect-scope

codex/ghidra-annotation-entry-selector

codex/ghidra-readonly-recovery

codex/ghidra-regex-verifier-recovery

codex/evidence-discovery-view-guidance

fix/8545-bulk-append-overflow

fix/8428-navigation-refusal-alternatives

codex/address-context-recovery

codex/matching-member-limitations

codex/unknown-scope-contract

codex/evidence-view-guidance

feat/8373-native-trace-views

codex/ghidra-snapshot-verifier-binding

codex/elf-export-visibility

codex/evidence-view-recovery

codex/native-reference-cli-help

codex/provider-candidate-observation-scope

codex/kuna-session-verification

codex/ghidra-switch-lifetime-guidance

codex/pseudocode-paging-discovery

codex/clarify-evidence-view-support

codex/kuna-xrefs-selector-recovery

codex/context-capacity-recovery

codex/evidence-closure-large-links

codex/same-function-evidence-identity

codex/ghidra-verifier-inspected-jdk

codex/audit-guided-workflows

codex/crash-prompt-retained-dossiers

codex/analysis-view-error-recovery

codex/kuna-verifier-target-selection

codex/ghidra-selected-project-call-coverage

codex/docs-native-analysis-scope

codex/ghidra-java-socket-boundary

codex/ghidra-retained-snapshot-verifier

codex/ghidra-search-inventory-facts

fix/8284-zero-argument-parameter-bindings

fix/8198-ui-action-handler-offset

fix/8257-elf-entry-label-identity

fix/8304-deferred-output-schema-projection

fix/8277-call-path-computed-target-uncertainty

fix/pr-8089-conflicts

fix/ci-static-duplicate-export

dependabot/npm_and_yarn/lint-staged-17.6.0

dependabot/github_actions/actions/download-artifact-8.0.2

dependabot/npm_and_yarn/write-file-atomic-8.0.0

dependabot/npm_and_yarn/canonicalize-5.1.0

dependabot/github_actions/actions/cache/restore-6.1.0

dependabot/npm_and_yarn/toon-format/toon-4.4.0

dependabot/github_actions/actions/deploy-pages-5.0.1

codex/review-fixes-pr-2403

codex/review-fixes-pr-2400

codex/process-terminal-width

codex/test-brittleness-cleanup

verify/7167-browser-connect-macos

fix/7167-browser-connect

feat/native-matching-allowance-setting

feat/browser-scenario-dry-run

test/managed-caller-parameters-20261024

codex/parser-fortythird-boundaries

fix/6926-pinvoke-platform-decorations-20261023

fix/6889-har-body-encoding-20261023

fix/6888-sqlite-schema-budget-20261023

fix/dependency-security-gates-6708

cursor/evidence-overwrite-rebase-b4ac

feat/4057-verify-native-exports

fix/windows-acl-observer-overhead-20261022

cursor/erlang-beam-restack-4476

cursor/pe-certificate-review-bf32

fix/6116-javascript-application-fs-errors

fix/6061-unmapped-runtime-script-unknown

feat/browser-scenario-summary

fix/pe-certificates

codex/verify-3407

cursor/rebase-5699

cursor/rebase-5352

cursor/rebase-5600

cursor/fix-cli-schema-omission-10a8

codex/audit-hopper-shutdown-reasons-20261021

fix/demangle-swift-omitted-record

fix/nib-boolean-value-types

cursor/cancellation-partial-observation-a5ac

fix/ib-object-limit-reasons

fix/electron-fuse-limit-advice

fix/kuna-doctor-dangling-cache

fix/fixed-budget-refusal-advice

fix/js-ipc-listener-dedup

fix/js-return-member-provenance

fix/dmg-integrity-retry-advice

fix/ida-doctor-readiness

fix/kuna-version-probe-output-drain

fix/legacy-swift-runtime-name-matching

fix/dylib-lazy-load-commands

fix/browser-scenario-startup-cancel

fix/swift-nested-punycode-classification

fix/compare-unselected-scopes

fix/objc-method-budget-coverage

fix/dmg-mounted-root-observations

audit/ci-tests-20261019-round2

release/6.7.0

fix/wabt-cleanup-retry-resolution

fix/electron-fuse-elf-pe-architecture

fix/native-plist-descriptor-ownership

fix/kuna-caller-cleanup-ownership

experiment/atomic-codemode-20261016

review/first-contributor-3776

fix/call-resolution-full-read-cycles

fix/member-mutation-selection-repeat

experiment/atomic-re-tools-20261015

perf/member-mutation-lazy-origins

perf/static-network-mutation-index

fix/hopper-startup-lifecycle

audit/3050-windows-proof-20261015

feat/windows-window-capture-2183

audit/3049-windows-proof-20261015

audit/3735-macos-fixtures-20261015

fix/batch-decompile-null-pseudocode

fix/kuna-inventory-honors-jobs

experiment/browser-codemode-tool-design-20261015

fix/hopper-clean-runtime-argv

codex/review-2049-27f1b367

review-fixes/pr-2787-routing

fix/3360-scoped-this-emitters

fix/3367-replaced-global-effects

fix/3838-compact-any-value-items

test/hopper-download-probe-20261015

codex/windows-runtime-creation-red-green-20261015

codex/windows-readonly-root-red-green-20261015

codex/windows-root-share-red-green-20261015

codex/exp-1685-win-mcp-startup

codex/bug-sweep-20261015

investigate/2190-windows-package-phases

investigate/3543-macos-cli-deadline

perf/3281-reverse-tools-feedback-quality

fix/3406-hopper-doctor-fixture

fix/3341-wrapper-require-test-context

fix/3301-owned-uninstall-fixtures

fix/3164-compiler-input-ownership

fix/pcap-cleanup-stdout-newline-20261014

perf/interface-builder-summary

codex/review-fixes-pr-1977

fix/ghidra-effective-jvm-platform

fix/docs-turkish-rust-link-20261013

fix/main-maintenance-ci-20261010

fix/recover-binary-session-process-effects

codex/review-fixes-pr-2457

codex/ci-required-cancellation-gate

fix/main-format-baseline-20261013

fix/setup-preserve-entry-fields

cursor/restore-main-checks-1ffc

fix/ghidra-bridge-hashmap-import

codex/shared-ci-jadx-json-default-20261013

codex/shared-ci-ghidra-test-groups-20261013

codex/shared-ci-java-fixture-format-20261013

codex/fix-intrinsic-invocation-boundaries

test/release-preflight-reusable-jobs

test/js-parameter-provenance-expectation

fix/linux-hopper-verification-current

test/2419-ghidra-elf-probe-size

followup/pr-1544-native-ida

codex/fold-pr-2230-contribution

docs/readme-responsible-use

fix/issue-2064

fix/issue-2050

fix/issue-2053

fix/issue-1968

fix/issue-1945

experiment/codemode-bridge-20261011

fix/tool-effects-negative-wording-1904-20261012

fix/1842-electron-interop-provenance

feat/recover-javascript-multi-input

refactor/website-i18n-prep

fix/nativeaot-pe-virtual-extent

fix/browser-verifier-ci-hang

fix/pe-resources-input-selection

docs/beginner-friendly-guides

docs/beginner-setup-guide

fix/javascript-analysis-worker-1563

fix/1649-ghidra-duplicate-names

fix/javascript-export-keys-integration-1369

test/maintenance-boundary-contracts-20261011

review/javascript-export-keys-1369

review/process-live-progress-1483

test/javascript-1495-growth-ratio

fix/ci-escape-timing

docs/normalized-terminal-geometry-1450

release/6.3.0

archive/release-6.3.0-pr1381

release/6.2.0

fix/electron-preload-dynamic-override

fix/javascript-self-referential-bundler-edges

release/6.1.0

cursor/grok-client-cherry-pick-0b56

feat/signature-posture

feat/dyld-shared-cache

feat/artifact-integrity-policy

feat/pkg-inventory

release/6.0.0

chore/sync-release-5.0.0

release/5.0.0

cursor/cloud-agent-node-787e

fix/javascript-xhr-open-endpoints

review/pr-711-realpath-fallback-wording

cleanup/replay-confinement

codex/test-suite-performance

codex/issue-foundations

codex/address-open-issues-2026-07-20

agent/javascript-vite-rollup-esbuild-adapters

agent/process-cleanup

agent/triage-integration

agent/unknown-commands-registry

feat/mcp-identity-metadata

morlvps/issue_cleanup

codex/installer-redesign

morl/roadmap-investigation-core

morl/roadmap-investigation-docs

release-please--branches--main--components--rea

rea-agents-6.8.0

rea-agents-6.7.0

rea-agents-6.6.0

experiment/atomic-codemode-wait-runtime-20261016

rea-agents-6.5.0

rea-agents-6.4.0

rea-agents-6.3.0

rea-agents-6.2.0

rea-agents-6.1.0

rea-agents-6.0.0

rea-agents-5.0.0

rea-agents-4.1.0

rea-agents-4.0.1

rea-agents-4.0.0

rea-agents-3.2.1

rea-agents-3.2.0

rea-agents-3.1.0

rea-agents-3.0.0

rea-agents-2.7.0

rea-agents-2.6.0

rea-agents-2.5.1

rea-agents-2.5.0

rea-agents-2.4.0

rea-agents-2.3.0

rea-agents-2.2.0

rea-agents-2.1.0

rea-agents-2.0.0

rea-agents-1.7.0

rea-agents-1.6.0

rea-agents-1.5.0

rea-agents-1.4.0

rea-agents-1.3.0

rea-agents-1.2.0

rea-agents-1.1.0

rea-agents-1.0.0

rea-agents-0.5.0

rea-agents-0.4.0

rea-agents-0.3.0

rea-0.2.1

rea-0.2.0

Labels

Clear labels   

area: bridge

  

area: bridge

  

area: build

  

area: build

  

area: build

  

area: cli

  

area: domain

  

area: evidence

  

area: mcp

  

area: native

  

area: providers

  

area: runtime

  

area: server

  

area: setup

  

area: tests

  

bug

  

design

  

documentation

  

enhancement

  

enhancement

  

enhancement

  

experiment

  

help wanted

  

i18n

  

invalid

  

P0: critical

  

P1: high

  

P2: medium

  

P2: medium

  

P2: medium

  

P3: low

  

performance

  

provider-request

  

pull-request

Mirrored from GitHub Pull Request

  

question

  

roadmap

  

triage

No labels

area: bridge

area: bridge

area: build

area: build

area: build

area: cli

area: domain

area: evidence

area: mcp

area: native

area: providers

area: runtime

area: server

area: setup

area: tests

bug

design

documentation

enhancement

enhancement

enhancement

experiment

help wanted

i18n

invalid

P0: critical

P1: high

P2: medium

P2: medium

P2: medium

P3: low

performance

provider-request

pull-request

question

roadmap

triage

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

morluto/rea#487

No description provided.