28f10cf2bc
docs: simplify the English README and organize guides ( #1043 )
...
* docs: simplify the English README
Preserve the opening and add the official skills.sh badge. Move setup diagnostics and CLI/Evidence details into guides, add three website showcases, and check setup-client facts in the installation guide.
Refs #1017
* docs: add README workflow and FAQ
Restore the original Disclaimer verbatim, invite community showcases, reuse the website investigation figure, and answer six common questions.
* docs: clarify README updates and collapse FAQ
* docs: welcome contributions in the README
* docs: highlight website guidance before quick start
* docs: keep README capability links aligned with main
* fix(docs): preserve README backlinks and release checks
2026-10-08 11:44:00 +08:00
0e25befe78
fix(cli): stream large JavaScript JSON results ( #1024 )
...
* fix(javascript): report application analysis progress on the CLI
* test(cli): preserve progress in filtered output checks
* fix(cli): stream large JavaScript JSON results
* test(cli): include streaming output in dispatcher fixture
2026-10-08 03:44:51 +08:00
7b18c58140
fix(javascript): report application analysis progress on the CLI ( #1008 )
...
* fix(javascript): report application analysis progress on the CLI
* test(cli): preserve progress in filtered output checks
2026-10-08 03:19:37 +08:00
9f42495d11
fix(javascript): hash graph and evidence JSON incrementally ( #646 )
2026-10-06 11:54:55 +08:00
b5e98915c6
fix(tools)!: simplify direct invocation and harden boundary contracts ( #555 )
...
Remove REA permission grants, scope ceilings, approval confirmations, and inert settings. Preserve selected local evidence, accept caller-chosen commands and paths, and report actual runtime failures.
Harden provider results, schema serialization, snapshot evidence binding, archive paths, source maps, native screenshots, managed EH parsing, and cancellation cleanup. Regenerate tool metadata and document direct invocation.
BREAKING CHANGE: Removed permission configuration and policy commands, approval fields, filesystem scope inputs, and fixed confirmation options. Process capture inherits the host environment and accepts command names; callers must refresh tool schemas and migrate removed fields.
2026-10-05 20:16:44 +08:00
c34efca4cd
refactor(files): use caller paths for local evidence files
2026-09-29 14:53:20 +08:00
53db3a476b
docs: refresh tool catalog and cleanup audit fixtures
2026-09-29 11:23:24 +08:00
7ba3580c86
refactor(artifacts): select extraction by logical path
2026-09-29 10:53:33 +08:00
0d96275b68
refactor: return complete tool results inline
2026-09-29 07:08:46 +08:00
74965d9088
fix(cli): route JavaScript applications from analyze
2026-07-21 23:42:28 +08:00
f4156d9663
fix(mcp): preserve investigation input policy
2026-07-21 19:51:11 +08:00
fb6964a74e
fix(electron): keep missing unpacked ASAR entries unavailable
2026-07-16 23:35:48 +09:00
8c67dbd49e
feat(electron): reconcile static artifacts with passive runtime
2026-07-16 09:55:21 +09:00
3fa2304bc7
feat(electron): map static process and IPC boundaries
2026-07-16 07:56:13 +09:00
aa46abfe1b
feat(artifact): reconstruct JavaScript application structure
2026-07-16 06:43:30 +09:00
Ysopwnable
morluto
N0zoM1z0