Rea

vrea-agents-1.5.0 scope: rea-agents Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 12d MCP Developer Tools

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-skills ai-agent-tools ai-agents binary-analysis cli coding-agent

+10 more

coding-agents decompiler disassembler hopper-disassembler mcp mcp-server model-context-protocol reverse-engineering reverse-engineering-tools static-analysis

Affected surfaces

auth rbac

Summary

AI summary

Updates Bug Fixes, 1.5.0, and Tests across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Feature	Low	Adds passive website reverse engineering capability. Adds passive website reverse engineering capability. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix
Bugfix	Medium	Drops disallowed redirect evidence in browser component. Drops disallowed redirect evidence in browser component. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Medium	Scopes CDP events and fails closed in browser component. Scopes CDP events and fails closed in browser component. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Medium	Scopes workers and binary frame sizes in browser component. Scopes workers and binary frame sizes in browser component. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Medium	Hardens PTY events and configured roots. Hardens PTY events and configured roots. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Medium	Defers cache write grants in permission system. Defers cache write grants in permission system. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Medium	Resolves triaged correctness issues. Resolves triaged correctness issues. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Medium	Resolves validation and artifact edge cases. Resolves validation and artifact edge cases. Source: llm_adapter@2026-07-15 Confidence: high	—

Full changelog

1.5.0 (2026-07-14)

Features

add passive website reverse engineering (9986971)
add passive website reverse engineering (2c1ceab)

Bug Fixes

browser: drop disallowed redirect evidence (8481be9)
browser: scope CDP events and fail closed (5279d77)
browser: scope workers and binary frame sizes (dfc06cf)
harden PTY events and configured roots (ae8b1c5)
harden PTY events and configured roots (31b40f3)
permission: defer cache write grants (6a3fd5b)
permission: defer cache write grants (f840e70)
resolve triaged correctness issues (2575b30)
resolve triaged correctness issues (e8ed307)
resolve validation and artifact edge cases (2468682)
resolve validation and artifact edge cases (ef7f2f9)

Documentation

add Hopper screenshot to README (a699fdd)
add Hopper screenshot to README (08981a3)

Tests

cli: allow cold-start integration timing (7d5621d)

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Rea

Get notified when new releases ship.

About Rea

All releases →

Related context

Related tools

Earlier breaking changes

vrea-agents-2.0.0 mcp now requires Evidence for managed reconstruction.
vrea-agents-1.0.0 contracts APIs now return structured discriminated output shapes
vrea-agents-0.3.0 rename identity package and CLI to REA
vrea-0.2.0 rename identity package and CLI to REA