Jinwoo-H 696b83186f test(mobile): probe the hybrid WebView gesture window and app-bound flag ...

Two security-review questions about the hybrid iOS shell needed measurement
rather than reading: which native touches arm the 5s user-gesture window that
privileged page requests spend, and whether limitsNavigationsToAppBoundDomains
does anything while app.json declares no WKAppBoundDomains key.

The gesture probe drives clipboardWrite, the cheapest gesture-gated mutation,
through the page bridge after each candidate arming action and records whether
the shell granted or denied it. The app-bound probe asks the page to navigate
to an external https origin and records who refuses it: the shell's navigation
delegate raises a native warning banner, while an app-bound refusal would fail
the provisional navigation inside WebKit with no delegate decision.

Claude-Session: https://claude.ai/code/session_01JNnE9qzUZMMnqpZWCqM3nb

2026-09-01 23:01:06 -04:00

..

bounded-process-line-reader.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

bounded-response-body.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

build-mermaid-webview-engine.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

build-terminal-webview-engine.mjs

Fix blank mobile terminal on Android devices with outdated WebViews or blocked CDN (#7186)

2026-07-03 15:22:00 -07:00

emulator-agent-history-fixture.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

emulator-control-runtime.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

emulator-deep-link-confirmation.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

emulator-developer-menu-dismissal.mjs

test(mobile): verify hosted clipboard image paste

2026-08-09 18:34:57 -04:00

emulator-launcher-shutdown.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

emulator-macos-keychain-home.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

emulator-orca-cli-selection.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

emulator-pairing-child-environment.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

emulator-pairing-public-key.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

emulator-pairing-runtime-process.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

emulator-pairing-runtime-relaunch.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

emulator-pairing-runtime-restart.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

export-host-mobile-web.mjs

fix(mobile): launch hosted export without pnpm shim

2026-08-23 21:00:59 -04:00

hosted-adversarial-github-cli.mjs

test(mobile): complete hybrid adversarial validation

2026-08-09 18:35:02 -04:00

hosted-adversarial-provider-content.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-adversarial-provider-fixture.mjs

test(mobile): complete hybrid adversarial validation

2026-08-09 18:35:02 -04:00

hosted-adversarial-repository-fixture.mjs

test(mobile): harden hosted terminal links

2026-08-09 18:35:01 -04:00

hosted-adversarial-runtime-fixture.mjs

test(mobile): complete hybrid adversarial validation

2026-08-09 18:35:02 -04:00

hosted-adversarial-terminal-links.mjs

test(mobile): complete hybrid adversarial validation

2026-08-09 18:35:02 -04:00

hosted-android-adversarial-terminal-links.mjs

test(mobile): complete hybrid adversarial validation

2026-08-09 18:35:02 -04:00

hosted-android-agent-history-journey.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-android-emulator-accessibility.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

hosted-android-emulator-session.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-android-hardware-back-journey.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-android-mobile-web-cache.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

hosted-android-pairing.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-android-privacy-audit.mjs

test(mobile): validate hosted adversarial content

2026-08-09 18:35:01 -04:00

hosted-android-webview-touch-point.mjs

test(mobile): harden hosted Android touch activation

2026-08-09 18:35:02 -04:00

hosted-android-workspace-activation.mjs

test(mobile): harden hosted Android touch activation

2026-08-09 18:35:02 -04:00

hosted-child-process-shutdown.mjs

test(mobile): verify hosted executable isolation

2026-08-09 18:34:58 -04:00

hosted-ios-accounts-parity.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-ios-adversarial-content.mjs

test(mobile): harden hosted terminal links

2026-08-09 18:35:01 -04:00

hosted-ios-adversarial-terminal-links.mjs

test(mobile): complete hybrid adversarial validation

2026-08-09 18:35:02 -04:00

hosted-ios-agent-history-journey.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-ios-agent-history-parity.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-ios-app-bound-navigation-probe.mjs

test(mobile): probe the hybrid WebView gesture window and app-bound flag

2026-09-01 23:01:06 -04:00

hosted-ios-build-activation.mjs

test(mobile): prove automatic package rollback

2026-08-09 18:35:01 -04:00

hosted-ios-core-route-parity.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-ios-document-upload.mjs

test(mobile): fix hosted iOS e2e harness and root test triage

2026-09-01 21:17:38 -04:00

hosted-ios-emulator-accessibility.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-ios-emulator-controller.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

hosted-ios-emulator-long-press.mjs

test(mobile): verify hosted document upload

2026-08-09 18:34:57 -04:00

hosted-ios-files-preview-parity.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-ios-host-origin-source-control-journey.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-ios-hybrid-route-handoff.mjs

feat(mobile): cut over to hybrid workspace route

2026-08-09 18:35:02 -04:00

hosted-ios-mobile-launcher.mjs

fix(mobile): restore hybrid cutover parity seams

2026-08-23 05:34:16 -04:00

hosted-ios-mobile-web-cache.mjs

test(mobile): prove automatic package rollback

2026-08-09 18:35:01 -04:00

hosted-ios-native-alert-journey.mjs

test(mobile): arm a native gesture before the hosted alert probe; split the task project client

2026-09-01 19:24:33 -04:00

hosted-ios-native-baseline-step.mjs

fix(mobile): restore hybrid cutover parity seams

2026-08-23 05:34:16 -04:00

hosted-ios-native-onboarding.mjs

test(mobile): prove automatic package rollback

2026-08-09 18:35:01 -04:00

hosted-ios-native-settings-handoff.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

hosted-ios-native-settings-journey.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-ios-photo-permission-denial.mjs

test(mobile): verify hosted photo permission revocation

2026-08-09 18:34:58 -04:00

hosted-ios-photo-permission-revocation.mjs

test(mobile): fix hosted iOS e2e harness and root test triage

2026-09-01 21:17:38 -04:00

hosted-ios-privacy-log-audit.mjs

test(mobile): audit Android hosted privacy

2026-08-09 18:35:01 -04:00

hosted-ios-screenshot-parity.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

hosted-ios-simulator-app-build.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

hosted-ios-simulator-app-preparation.mjs

test(mobile): prove automatic package rollback

2026-08-09 18:35:01 -04:00

hosted-ios-simulator-device.mjs

test(mobile): complete hybrid adversarial validation

2026-08-09 18:35:02 -04:00

hosted-ios-source-control-review-journey.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-ios-source-control-review-parity.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-ios-terminal-clipboard-image-paste.mjs

test(mobile): fix hosted iOS e2e harness and root test triage

2026-09-01 21:17:38 -04:00

hosted-ios-terminal-clipboard-paste.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-ios-terminal-device-input-journey.mjs

test(mobile): verify hosted photo permission revocation

2026-08-09 18:34:58 -04:00

hosted-ios-user-gesture-window-probe.mjs

test(mobile): probe the hybrid WebView gesture window and app-bound flag

2026-09-01 23:01:06 -04:00

hosted-ios-webcontent-process.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

hosted-ios-webview-security-probe.mjs

Merge remote-tracking branch 'origin/main' into mobile-rearch

2026-08-12 16:37:00 -04:00

hosted-ios-workspace-parity.mjs

test(mobile): add iOS workspace parity

2026-08-09 18:34:57 -04:00

hosted-loopback-port.mjs

test(mobile): harden hosted terminal links

2026-08-09 18:35:01 -04:00

hosted-mobile-e2e-launch.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

hosted-terminal-link-locator.mjs

test(mobile): complete hybrid adversarial validation

2026-08-09 18:35:02 -04:00

hosted-webview-adversarial-content.mjs

test(mobile): validate hosted adversarial content

2026-08-09 18:35:01 -04:00

hosted-webview-adversarial-files.mjs

test(mobile): harden hosted terminal links

2026-08-09 18:35:01 -04:00

hosted-webview-bridge-error-observation.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-webview-cdp-evaluation.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

hosted-webview-cdp-session.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-webview-cdp-target-discovery.mjs

fix(mobile): harden hosted web runtime boundaries

2026-08-30 22:31:44 -04:00

hosted-webview-control-point.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

hosted-webview-e2e-report.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-webview-executable-isolation.mjs

test(mobile): verify hosted executable isolation

2026-08-09 18:34:58 -04:00

hosted-webview-long-press.mjs

test(mobile): verify hosted document upload

2026-08-09 18:34:57 -04:00

hosted-webview-privacy-isolation.mjs

test(mobile): audit hosted page privacy

2026-08-09 18:35:01 -04:00

hosted-webview-privacy-log-evidence.mjs

test(mobile): audit Android hosted privacy

2026-08-09 18:35:01 -04:00

hosted-webview-route-exception-evidence.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-webview-route-navigation.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-webview-runtime-directory.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

hosted-webview-security-evidence.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

hosted-webview-simulator-e2e-options.mjs

test(mobile): validate hosted adversarial content

2026-08-09 18:35:01 -04:00

hosted-webview-workspace-activation.mjs

test(mobile): fix hosted iOS e2e harness and root test triage

2026-09-01 21:17:38 -04:00

mobile-expo-cli.mjs

refs/heads/handle-mobile-pull-request-issues (#6598)

2026-06-28 00:58:17 -07:00

mobile-lag-scenario.ts

Fix mobile workspace parity (#6207)

2026-06-23 17:07:28 -07:00

mock-server-account-rpc.ts

feat(mobile): add safe Codex rate-limit resets (#9394)

2026-07-24 14:42:04 -07:00

mock-server-account-state.ts

feat(mobile): add safe Codex rate-limit resets (#9394)

2026-07-24 14:42:04 -07:00

mock-server-encryption.ts

Mobile: worktree-list sidebar for tablet/foldable layouts (#5505)

2026-06-16 16:50:38 -07:00

mock-server-file-preview-data.ts

Show full workspace file tree on mobile (#7289)

2026-07-06 15:41:51 -07:00

mock-server-git-state.ts

feat(mobile): combine PR sidebar and checks parity (#5641)

2026-06-17 22:52:12 -07:00

mock-server-key-pair.ts

fix(mobile): harden native chat send budgets, streams, and stop (#10814)

2026-07-26 22:08:38 -07:00

mock-server-native-chat-scenario.ts

fix(mobile): harden native chat send budgets, streams, and stop (#10814)

2026-07-26 22:08:38 -07:00

mock-server-rpc-handlers.ts

refactor(shared): drop the shared/types barrel and import from the real modules (#14447)

2026-08-13 22:48:24 -07:00

mock-server-session-tabs-fixture.ts

fix(mobile): route external mouse click and drag to the terminal (#11473)

2026-07-31 00:54:40 -07:00

mock-server-terminal-fixtures.ts

feat(mobile): add safe Codex rate-limit resets (#9394)

2026-07-24 14:42:04 -07:00

mock-server-terminal-stream.ts

Revert the terminal IME composition-ownership change (#13282)

2026-08-08 19:06:50 -07:00

mock-server.ts

fix(mobile): harden native chat send budgets, streams, and stop (#10814)

2026-07-26 22:08:38 -07:00

prepare-android-release.mjs

fix(mobile): keep Android release versionCode committed (#7271)

2026-07-03 15:26:11 -07:00

repro-mobile-foreground-stall.sh

fix(mobile): redial when the app resumes mid-dial (#12344)

2026-08-03 13:53:59 -07:00

repro-terminal-color-output.ts

Refactor lower max-lines modules (#16760)

2026-08-27 16:10:51 -07:00

repro-terminal-colors.ts

Refactor lower max-lines modules (#16760)

2026-08-27 16:10:51 -07:00

repro-workspace-picker-lag.ts

feat(mobile): combine PR sidebar and checks parity (#5641)

2026-06-17 22:52:12 -07:00

repro-worktree-startup-output.ts

Refactor lower max-lines modules (#16760)

2026-08-27 16:10:51 -07:00

repro-worktree-startup-stream.ts

Refactor lower max-lines modules (#16760)

2026-08-27 16:10:51 -07:00

run-hosted-android-corrupt-cache.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

run-hosted-android-hardware-back-e2e.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

run-hosted-android-source-control-review-e2e.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

run-hosted-android-webview-crash-loop.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00

run-hosted-android-webview-security-e2e.mjs

test(mobile): audit hosted page privacy

2026-08-09 18:35:01 -04:00

run-hosted-ios-webview-crash-loop.mjs

test(mobile): audit hosted crash logs

2026-08-09 18:35:01 -04:00

run-hosted-ios-webview-gesture-and-app-bound-probes.mjs

test(mobile): probe the hybrid WebView gesture window and app-bound flag

2026-09-01 23:01:06 -04:00

run-hosted-webview-simulator-e2e.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

run-ios-mobile-web-store-tests.mjs

Fix iOS host cache root boundary

2026-08-23 05:17:55 -04:00

start-emulator-pairing-runtime.mjs

feat(mobile): complete hybrid parity hardening

2026-08-23 20:08:01 -04:00

start-emulator.mjs

chore(mobile): close post-rebase validation

2026-08-09 18:35:00 -04:00

start-expo.mjs

chore(lint): adopt unicorn/prefer-import-meta-properties (error) (#6847)

2026-06-29 23:37:30 -07:00

test-subscribe.ts

perf(runtime): gate terminal.list visual layouts (#12450)

2026-08-04 17:50:52 -07:00

verify-hosted-android-release-webview.mjs

feat(mobile): migrate host UI to hybrid WebView

2026-08-09 18:34:56 -04:00