Commit Graph

61 Commits

Author SHA1 Message Date
morluto b2d1f2affd feat(setup): verify installed skill catalog identity 2026-07-16 19:51:25 +08:00
morluto 8de25d0230 test(mcp): cover strict compact wire contracts 2026-07-16 19:50:16 +08:00
N0zoM1z0 cc1e47c615 docs(dotnet): refresh managed reconstruction api 2026-07-16 20:37:42 +09:00
N0zoM1z0 c506664744 feat(dotnet): import managed reconstructions 2026-07-16 20:37:42 +09:00
N0zoM1z0 798631ade6 docs: refresh managed runtime api docs 2026-07-16 20:10:36 +09:00
N0zoM1z0 5f66cfd57a feat(dotnet): add managed runtime correlation planning 2026-07-16 20:10:36 +09:00
N0zoM1z0 2b75fcfaac test(dotnet): add managed conformance verifier 2026-07-16 19:25:13 +09:00
N0zoM1z0 466b1bbebe feat(dotnet): add managed native boundary inspection 2026-07-16 18:57:56 +09:00
N0zoM1z0 55794d6083 feat(dotnet): add managed member comparison 2026-07-16 18:27:08 +09:00
N0zoM1z0 98cad3788d feat(dotnet): add managed member inspection 2026-07-16 17:44:36 +09:00
N0zoM1z0 c251c38aa2 feat(dotnet): add managed artifact triage 2026-07-16 17:05:03 +09:00
N0zoM1z0 80faff3e5b docs(analysis): define managed-code evidence boundary 2026-07-16 16:09:17 +09:00
N0zoM1z0 a8c1057279 docs: stabilize replay API source links
Regenerate the new TypeDoc pages after their source files are tracked so CI and local generation both include the canonical main-branch source links.
2026-07-16 15:45:55 +09:00
N0zoM1z0 d86231ad33 feat(application): add isolated JavaScript replay
Expose one plan/execute replay contract through both CLI and MCP with exact source, input, runtime, sandbox, limit, and export commitments.

Run selected ESM and extracted CommonJS/Rspack factories in a disposable Linux x64 Bubblewrap namespace with a content-addressed Node ELF closure, architecture-checked seccomp, delegated systemd cgroup limits, bounded protocol capture, cancellation, and observable cleanup.

Preserve left and right observations as Evidence, derive differential comparisons without erasing unknowns, add optional separately authorized reproducers, and fail closed on stale plans or unavailable host boundaries.

Add source-owned parser, sanitizer, clipboard, denial, timeout, OOM, protocol-forgery, and cancellation coverage; a real Linux verifier and workflow; regenerated catalogs and TypeDoc; and updated the packaged REA analysis skill for the 83-tool inventory.
2026-07-16 15:45:55 +09:00
N0zoM1z0 461990da3f docs(security): define controlled replay authority 2026-07-16 11:54:05 +09:00
N0zoM1z0 4a30820a93 docs: refresh application workflow API links 2026-07-16 11:29:54 +09:00
N0zoM1z0 778b995bbf feat(application): add cross-layer graph workflows 2026-07-16 11:29:54 +09:00
N0zoM1z0 87b23482e2 docs: refresh runtime reconciliation API 2026-07-16 09:55:21 +09:00
N0zoM1z0 8c67dbd49e feat(electron): reconcile static artifacts with passive runtime 2026-07-16 09:55:21 +09:00
N0zoM1z0 3fa2304bc7 feat(electron): map static process and IPC boundaries 2026-07-16 07:56:13 +09:00
morluto 13c79b670a docs: refresh generated artifacts for 1.7.0 2026-07-15 22:00:32 +00:00
morluto 4647b324b8 docs: refresh generated artifacts for 1.7.0 2026-07-15 21:49:10 +00:00
N0zoM1z0 aa46abfe1b feat(artifact): reconstruct JavaScript application structure 2026-07-16 06:43:30 +09:00
N0zoM1z0 da4817abd1 docs: regenerate JavaScript graph API with Node 24 2026-07-16 05:08:52 +09:00
N0zoM1z0 2ca56724e4 feat(domain): add versioned JavaScript Application Graph 2026-07-16 05:08:52 +09:00
N0zoM1z0 d8321defd7 feat(ghidra): add function analysis and conformance 2026-07-16 04:17:08 +09:00
N0zoM1z0 a45de27d9e docs: refresh Ghidra inventory API links 2026-07-16 02:59:37 +09:00
N0zoM1z0 b1c07dd9c6 feat(ghidra): implement read-only inventory operations 2026-07-16 02:59:37 +09:00
N0zoM1z0 f0e625d7ee feat(ghidra): add private headless provider session 2026-07-16 01:27:54 +09:00
N0zoM1z0 70e1a0f532 refactor(process): extract reusable provider lifecycle primitives
Introduce provider-neutral ownership, private runtime roots, absolute startup deadlines, pending-operation correlation, bounded output capture, and verified TERM-to-KILL process supervision.\n\nMigrate Hopper onto the shared lifecycle pieces while keeping its Unix-socket protocol and health/shutdown parsing adapter-specific. Preserve exact ownership checks and fail-closed cleanup, including descendant cleanup after the launcher leader exits.\n\nAdd reusable process fixtures and deterministic coverage for startup timeout, cancellation, output bounds, exit diagnostics, cleanup escalation, repeated close, spawn failure, and resource disposal. Update architecture, provider evaluation, contributor guidance, and generated API documentation.
2026-07-15 23:20:48 +09:00
N0zoM1z0 a7621c2633 docs(api): refresh provider source anchors
Regenerate the new provider registry and routing API pages with the repository's canonical Node 24.18 runtime so TypeDoc output matches CI.
2026-07-15 22:13:48 +09:00
N0zoM1z0 941d7101dd feat(session): add explicit provider registry and target binding
Introduce deterministic deep-provider discovery and immutable per-target routing while retaining disjoint artifact and native capability families.

Expose provider selection consistently through MCP, CLI, environment configuration, session status, prompt completion, typed diagnostics, and generated documentation. Preserve exact provider/profile provenance without request racing or transparent fallback.

Cover overlapping providers, ambiguity, rejection details, cancellation, restoration, package installation, and real Hopper target switching.
2026-07-15 22:13:48 +09:00
N0zoM1z0 bd3cf964d6 docs(api): refresh profile source anchors
Regenerate the committed TypeDoc pages after the profile sources were formatted by the pre-commit hook. This keeps the generated source links aligned with the final committed line numbers.
2026-07-15 20:31:56 +09:00
N0zoM1z0 21da71ec6d refactor(domain): remove provider-specific target and snapshot state
Move Hopper loader derivation and compatibility projection into the Hopper adapter so BinaryTarget carries only provider-neutral identity and format metadata.

Introduce bounded canonical analysis-profile commitments, exact provider/profile snapshot v2 bindings, legacy snapshot rejection guidance, and backward-compatible profiled Evidence v2 records. Partition cache and replay behavior by target, concrete provider build, and profile while preserving custom Hopper loader overrides.

Propagate profiles consistently through CLI, MCP, composed workflows, and session lifecycle; preserve the 78-tool contract and legacy loaderArgs response projection. Add migration documentation, generated API updates, property regressions, package verification, and real Hopper coverage.
2026-07-15 20:31:56 +09:00
N0zoM1z0 f9f2fbe2fc docs(architecture): define provider selection and analysis profiles
Accept a strict split between disjoint CompositeProvider routing and an overlapping deep-provider registry with deterministic request, CLI, and environment selection.

Specify target binding, no-fallback lifecycle semantics, adapter-owned open options, canonical analysis profile commitments, snapshot v2 migration, and backward-compatible Evidence v2 provenance.

Document target-free candidate diagnostics, compatibility projections, rejected alternatives, and required behavior scenarios that the provider foundation and Ghidra PRs must satisfy.
2026-07-15 18:04:32 +08:00
N0zoM1z0 beb9ece7d1 build: add canonical product catalog and docs drift checks
Derive package, tool-family, provider, setup-client, schema-version, and CLI facts from the runtime contract sources into a deterministic checked-in catalog.

Add non-mutating generated-file checks, exact TypeDoc regenerate-and-compare validation, caller-visible documentation fact checks, and CI enforcement through docs:check.

Cover command-router parity, source-derived catalog values, deliberate documentation drift, and stale generated artifacts while preserving runtime behavior.
2026-07-15 17:43:52 +08:00
N0zoM1z0 54056a9782 docs: reconcile product documentation with shipped behavior
Align the documented tool inventory, setup client matrix, supported hosts, installation behavior, and roadmap with the 1.6.0 implementation.

Record Ghidra as the accepted next read-only provider direction without claiming shipped support, and refresh the provider admission criteria around evidence fidelity and local diagnostics.

Regenerate the committed TypeDoc site from current sources so package metadata and Process Capture v4 contracts replace the stale 1.1.0/v3 output. Add localized README coverage for every detected setup client.
2026-07-15 17:03:56 +08:00
morluto 6397e54169 fix(cli): confirm project grant revocation 2026-07-14 22:25:47 +00:00
N0zoM1z0 a6b5ca4135 fix(application): add explicit investigation replay 2026-07-14 21:03:23 +00:00
N0zoM1z0 7a4cfb4fbd fix(cli): confirm project grant revocation 2026-07-14 20:27:29 +00:00
N0zoM1z0 be76f8090b feat: add web and Electron reverse-engineering workflows 2026-07-14 20:24:12 +09:00
N0zoM1z0 2c1ceabbf1 feat: add passive website reverse engineering 2026-07-14 12:27:13 +08:00
morluto 08981a31b5 docs: add Hopper screenshot to README 2026-07-14 12:02:43 +08:00
morluto 190efcaf17 feat(core): add typed policy and integrity contracts 2026-07-14 02:11:56 +00:00
morluto b394903b88 Merge remote-tracking branch 'origin/main' into feat/mcp-prompts-completion
# Conflicts:
#	scripts/verify-package.mjs
2026-07-14 04:55:38 +08:00
morluto a2076b47a6 fix(security): restrict investigation artifact inputs 2026-07-14 04:48:46 +08:00
morluto ee785ca9a9 Merge remote-tracking branch 'origin/main' into feat/persistent-workspace-investigation-runs
# Conflicts:
#	README.md
#	scripts/verify-package.mjs
#	src/cli.ts
#	src/domain/errors.ts
#	src/server/registerInvestigationTools.ts
#	tests/errors.test.ts
2026-07-14 04:28:14 +08:00
morluto 12060f6d8d fix(copy): use agent terminology 2026-07-13 19:17:15 +00:00
morluto 77454dc8f4 fix(errors): improve recovery guidance 2026-07-13 19:09:27 +00:00
N0zoM1z0 24c3adb553 feat: add guided MCP workflow prompts 2026-07-13 21:04:28 +08:00