Skip to content

Rea

vrea-agents-1.6.0 scope: rea-agents Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 12d MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-skills ai-agent-tools ai-agents binary-analysis cli coding-agent
+10 more
coding-agents decompiler disassembler hopper-disassembler mcp mcp-server model-context-protocol reverse-engineering reverse-engineering-tools static-analysis

Affected surfaces

auth rbac

Summary

AI summary

Updates Bug Fixes, Tests, and 1.6.0 across a mixed release.

Changes in this release

Feature Medium

Adds web and Electron reverse‑engineering workflows.

Adds web and Electron reverse‑engineering workflows.

Source: llm_adapter@2026-07-15

Confidence: high

 —
Performance Medium

Scans version artifacts in parallel for faster application startup.

Scans version artifacts in parallel for faster application startup.

Source: llm_adapter@2026-07-15

Confidence: high

 —
Bugfix Medium

Prevents version downgrades during upgrade operations.

Prevents version downgrades during upgrade operations.

Source: llm_adapter@2026-07-15

Confidence: high

 —
Bugfix Medium

Restricts production MCP dispatch to authorized contexts.

Restricts production MCP dispatch to authorized contexts.

Source: llm_adapter@2026-07-15

Confidence: high

 —
Bugfix Medium

Applies permission reloads atomically in the runtime.

Applies permission reloads atomically in the runtime.

Source: llm_adapter@2026-07-15

Confidence: high

 —
Bugfix Medium

Serializes permission reloads to avoid race conditions.

Serializes permission reloads to avoid race conditions.

Source: llm_adapter@2026-07-15

Confidence: high

 —
Bugfix Medium

Unregisters shutdown handlers to prevent lingering callbacks.

Unregisters shutdown handlers to prevent lingering callbacks.

Source: llm_adapter@2026-07-15

Confidence: high

 —
Bugfix Medium

Confirms project grant revocation in the CLI.

Confirms project grant revocation in the CLI.

Source: llm_adapter@2026-07-15

Confidence: high

 —
Bugfix Medium

Supports page‑scoped CDP transports for browser components.

Supports page‑scoped CDP transports for browser components.

Source: llm_adapter@2026-07-15

Confidence: high

 —
Bugfix Medium

Preserves operation‑aware cancellation errors in the browser.

Preserves operation‑aware cancellation errors in the browser.

Source: llm_adapter@2026-07-15

Confidence: high

 —
Bugfix Low

Enforces combined record limit in evidence handling.

Enforces combined record limit in evidence handling.

Source: granite4.1:30b@2026-07-15-audit

Confidence: low

 —
Bugfix Low

Hardens command capture edge cases in native code.

Hardens command capture edge cases in native code.

Source: granite4.1:30b@2026-07-15-audit

Confidence: low

 —
Bugfix Low

Keeps page endpoint type internal within the browser module.

Keeps page endpoint type internal within the browser module.

Source: granite4.1:30b@2026-07-15-audit

Confidence: low

 —
Bugfix Low

Observes direct target disconnects in the browser component.

Observes direct target disconnects in the browser component.

Source: granite4.1:30b@2026-07-15-audit

Confidence: low

 —
Bugfix Low

Supports relative source map URLs in the browser implementation.

Supports relative source map URLs in the browser implementation.

Source: granite4.1:30b@2026-07-15-audit

Confidence: low

 —
Bugfix Low

Preserves setup diagnostics and cleans Knip configuration during initialization.

Preserves setup diagnostics and cleans Knip configuration during initialization.

Source: granite4.1:30b@2026-07-15-audit

Confidence: low

 —
Full changelog

1.6.0 (2026-07-14)

Features

  • add web and Electron reverse-engineering workflows (be76f80)

Bug Fixes

  • application: add explicit investigation replay (7112e1e)
  • application: add explicit investigation replay (a6b5ca4)
  • browser: keep page endpoint type internal (3743962)
  • browser: observe direct target disconnects (9be24f8)
  • browser: preserve operation-aware cancellation errors (0aac8aa)
  • browser: support page-scoped CDP transports (c4930f4)
  • browser: support page-scoped CDP transports (bf96192)
  • browser: support relative source map URLs (5231e95)
  • cli: confirm project grant revocation (6397e54)
  • cli: confirm project grant revocation (7a4cfb4)
  • cli: restrict production MCP dispatch (8bd0e5f)
  • cli: restrict production MCP dispatch (190e5d3)
  • doctor: honor explicit Hopper launcher (c69fe2c)
  • doctor: honor explicit Hopper launcher (9208592)
  • evidence: enforce the combined record limit (c791802)
  • evidence: enforce the combined record limit (834c70c)
  • hopper: cancel startup before closing (f471a63)
  • hopper: cancel startup before closing (6cc2fdf)
  • hopper: select verified Linux demo mode explicitly (46e4052)
  • hopper: select verified Linux demo mode explicitly (04c5fd6)
  • native: harden command capture edge cases (c2e64a4)
  • native: harden command capture edge cases (d39f98d)
  • preserve setup diagnostics and clean Knip config (2d1e021)
  • preserve setup diagnostics and clean Knip config (5a7ccef)
  • process: gate sampling on initialized PTY root (57938a8)
  • process: gate sampling on initialized PTY roots (e831a41)
  • process: keep validation detail internal (614a119)
  • process: restrict cleanup to captured group leaders (40c6f60)
  • process: settle exited zombie groups (072ce5a)
  • process: settle exited zombie groups (4828326)
  • process: stabilize and speed up the test suite (a3b7de9)
  • reference: preserve distinct parse failures (e02cb2f)
  • reference: preserve distinct parse failures (543510f)
  • rollup batch of fixes (b348b2c)
  • runtime: apply permission reloads atomically (49e843e)
  • runtime: apply permission reloads atomically (3ae7109)
  • runtime: serialize permission reloads (7e53dd6)
  • runtime: unregister shutdown handlers (71072d8)
  • runtime: unregister shutdown handlers (f9e3c23)
  • session: isolate availability observers (43766fd)
  • session: isolate availability observers (e5a80d4)
  • session: reopen replaced targets (e98413c)
  • session: reopen replaced targets (5c55999)
  • setup: configure every detected client (69744a4)
  • setup: configure every detected client (24f9a1f)
  • setup: omit aligned client configurations from plan (a86da4f)
  • setup: omit aligned skill from plan (d81687f)
  • setup: omit aligned skill from plan (2984fa7)
  • setup: preserve client config symlinks (85285f1)
  • setup: preserve client config symlinks (df87544)
  • test: adapt mainReload shutdown seam to registerShutdown signature (0a430c1)
  • tooling: isolate concurrent repository checks (fb17156)
  • tooling: isolate concurrent repository checks (ab8c5c1)
  • upgrade: prevent version downgrades (a204840)
  • upgrade: prevent version downgrades (1d1d234)
  • verify: reconcile PR-212/215/228 package E2E expectations (cfa110c)

Performance Improvements

  • application: scan version artifacts in parallel (528c05e)
  • application: scan version artifacts in parallel (c00739b)

Tests

  • application: verify packaged MCP replay (6601e0c)
  • browser: harden Chrome startup on CI (74c5121)
  • browser: route discovery sockets through proxy (e363f0e)
  • browser: verify page-scoped Chrome transport (c252536)
  • cli: verify packaged policy revocation (3d71737)
  • hopper: cover verified Linux rejection (db202c2)
  • hopper: retry after cancelled startup (6de726f)
  • hopper: verify alternate Linux launcher path (d93257b)
  • package: cover aligned setup plan (a597639)
  • package: cover config symlink lifecycle (d1ef7a5)
  • package: preserve unrelated symlink config (c50e51e)
  • reduce test suite runtime (2223da1)
  • reference: cover failure normalization (3d5041f)
  • runtime: cover idempotent handler cleanup (1bdb59e)
  • serialize subprocess-heavy integrations (f46fc7f)
  • session: reopen replaced target through MCP (1c32880)
  • setup: cover later clients after failure (8f73112)
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Rea

Get notified when new releases ship.

Sign up free

About Rea

All releases →

Related context

Earlier breaking changes

Beta — feedback welcome: [email protected]