Comparing changes

The npm job was missing the wasi-sdk setup and r2hermes build steps, causing the gui build to fail when it needs hbc.wasm in public/. Add the same cache/build/copy steps used in build-cli.yml.

- Extract shared CI setup into composite action (.github/actions/setup) - Split bun and npm builds into separate workflows to avoid conflicts - Gate npm publish and GitHub release on all builds + tests passing - Coverage workflow now skips unnecessary agent/gui builds - Add [email protected] patch (was missing, broke compiled CLI binary) - Remove outdated [email protected] and [email protected] patches - Remove build-npm.ts workaround, externalize assets.tgz in tsdown - Move bun install out of build:cli/build:all scripts into workflows - Fix tsconfig moduleResolution for tsgo compatibility

- Remove automatic prepare hook to avoid cascading builds on bun install - Add `bun run setup` for first-time local dev (submodules, agent, gui, WASM) - Rename dev:both → dev:all with 4-pane tmux layout (server, gui, agent watches) - CI workflows explicitly install what they need

Tab 1: agent watches (fruity, droid, transport) in 3 columns Tab 2: server + gui dev side by side

Add Binary Ninja / Iaito-inspired features to the R2 binary viewer: - Dashboard (binary overview with arch, hashes, entropy, sections) - Memory maps visualization with segment bar chart - Synchronized split panes (disassembly + CFG side by side) - Disassembly minimap with click-to-jump-to-function - Inline opcode bytes toggle - Cross-reference graph with dagre layout - Rename dialog for functions - Binaries/libraries panel - Multi-mode search (string, hex, ROP, assembly) - Type editor with Monaco - Bookmarks with localStorage persistence - CFG export as SVG Persist selected function, view mode, and left tab across page reload. Add R2 context provider for address sync and shared state. Add i18n keys (en + cn) for all new UI strings. Replace hardcoded colors with CSS variables for light/dark mode.

DexViewerTab now fetches the file from the device via HTTP and analyzes it entirely in the browser using the r2 WASM worker, same as the standalone R2Page. - Remove useDexR2Session (Socket.IO client hook) - Remove ic/strings socket events from r2ws.ts - Remove openDeviceFile path from r2ws open handler - DexViewerTab fetches file via /api/download or /api/apk-entry, then passes ArrayBuffer to useR2File → R2Viewer

Magika WASM init freezes the browser for several seconds with no workaround. Replace with extension-based language detection from the existing LANGUAGES table; users can still switch syntax manually.

- Notepad2-style toolbar: Save, Undo/Redo, Cut/Copy/Paste, Find, Fold/Unfold, Word Wrap toggle, Download - Save calls existing fs.saveText RPC (both platforms) - Writable flag passed from FilesTab; disables editing and write actions when directory is readonly - Agent preview() now throws on files >1MB instead of silently truncating - Map plist extension to XML syntax highlighting

Hex editor: - Paged on-demand loading via fs.range RPC (64KB pages, LRU cache) - HexView dual mode: buffer (existing consumers) and paged (hex editor) - Data inspector sidebar (int/float/string formats via DataView) - Toolbar with stride selector, go-to-offset, download - Status bar with file path, size, loaded pages - Wide scrollbar styled as minimap via CSS Agent: - Split posix.ts into thin syscall wrappers + file.ts for higher-level file operations (readFile, readRange, size, rename, isWritable) - Add fs.range(path, offset, length) and fs.size(path) RPCs - Bump text preview limit to 4MB - Add streaming pullRange to transport agent for Range requests Server: - Download route now supports HTTP Range headers via streaming pullRange (chunked posix reads with backpressure) Audio preview: - Simplified to direct URL — browser handles Range natively, no blob TextEditorTab: - Fix tooltip render prop (render= instead of asChild)

- Refactor scripts/dev.ts to use Bun.$ for tmux, Bun.spawn for wt - Accept argv: "both" (server + gui) or "all" (agent + server + gui) - Add bun run dev:both script

- build-npm: build agent and gui before npm pack; fix upload path (npm pack outputs to root, not build/) - publish: use working-directory for npm publish to avoid glob interpreted as git URL; fix CLI binary download paths (upload-artifact strips common prefix); remove coverage gate

The 3-step scr.color=1 → cmd → scr.color=0 sequence allowed concurrent calls (loadDisassembly + loadCfg) to interleave on the shared r2 worker, causing empty disassembly in split mode. DEX files were most affected due to slower af analysis widening the race window. Also fixed missing ansi.toHtml in useR2Live HTML path.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comparing changes

Open a pull request

Commits on Mar 30, 2026

This comparison is taking too long to generate.

Uh oh!