N0zoM1z0 and gensokyo-dev
4546673eec
refactor(ntfs): keep reference lookup refusals in tagged results
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 14:10:25 +08:00
N0zoM1z0 and gensokyo-dev
b99a7b6a21
feat(ntfs): advertise extension link coverage and shared capacity
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 14:10:25 +08:00
N0zoM1z0 and gensokyo-dev
5934ba1bf9
test(ntfs): retain extension facts across inventory and paired workflows
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 14:10:25 +08:00
N0zoM1z0 and gensokyo-dev
b3bab01b22
feat(ntfs): resolve acquired extension attributes by full identity
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 14:10:25 +08:00
N0zoM1z0 and gensokyo-dev
428590e9f2
feat(ntfs): define bounded attribute reference evidence
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 14:10:25 +08:00
morluto and Cursor Agent
1e80a96094
fix(python): handle one-byte marshal strings and deep code references ( #9895 )
...
* fix(python): decode marshal one-byte strings as Latin-1
* fix(python): hash referenced code objects iteratively
---------
Co-authored-by: Cursor Agent <cursoragent@cursor.com >
2026-11-11 00:44:54 -05:00
morluto and Cursor Agent
abc4f0f8b2
fix(android): validate DEX long syntax before conversion ( #9909 )
...
Co-authored-by: Cursor Agent <cursoragent@cursor.com >
2026-11-11 00:44:20 -05:00
morluto and Cursor Agent
5c2917266d
fix(inputs): validate command admission and preserve valid MCP requests ( #9901 )
...
* fix(cli): validate named inputs before target admission
* fix(mcp): preserve valid inputs when advertised schema references widen
* test(inputs): reach session behavior with admitted inputs
One-shot admission now rejects incomplete requests before a session exists. Lifecycle tests supply the required fields, and unknown arguments are rejected before provider issues are retained.
* fix(cli): preserve Electron fuse path spelling
Anchor relative fuse paths without stripping dot segments, and let an empty path reach the operation so it still reports invalid_request.
* fix(cli): reject outline-depth unless detail is summary
The advertised schema already required detail summary whenever outline-depth
was present. The parser still applied the full default and accepted that
combination, so its output failed the same schema. Parsing now rejects it
before the command runs.
---------
Co-authored-by: Cursor Agent <cursoragent@cursor.com >
2026-11-11 00:43:30 -05:00
Ysopwnable and gensokyo-dev
1371ba1e07
fix(ci): retry interrupted native profile downloads ( #9926 )
...
* fix(ci): retry interrupted native profile downloads
The immutable mitmproxy GET can reset after a partial body with curl 56,
which the existing default retry policy does not retry. Retry transfer
errors within the existing attempt count and keep the checksum gate.
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
* test(ci): verify native profile download recovery
Execute the named workflow step with real curl, a local HTTP server and
a tiny archive. Cover TCP reset recovery, retry exhaustion, HTTP failure
and digest rejection before profile extraction or environment export.
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
---------
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 05:38:35 +00:00
N0zoM1z0 and gensokyo-dev
faf42f8f13
docs(ntfs): distinguish paired fixture and Windows host coverage
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:32:55 +08:00
N0zoM1z0 and gensokyo-dev
bf671f20a2
docs(ntfs): record independent paired-volume verification
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:32:55 +08:00
morluto
6de105bc60
fix(kuna): validate output and retain exact cleanup ownership ( #9974 )
...
* fix(kuna): preserve output validity and cleanup ownership
* fix(kuna): preserve Unicode boundaries in diagnostic tails
2026-11-11 00:26:08 -05:00
morluto
7aaff2e4e4
fix(cli): retain Evidence receipts on format refusal ( #9943 )
2026-11-11 00:22:30 -05:00
a54e848302
feat(cursor): ship a Marketplace plugin with the skill and pinned MCP server ( #9878 )
...
Cursor Marketplace installs are Git checkouts, so the plugin manifest
points at a synced copy of the authored skill and starts
npx -y rea-agents@<release> mcp. Release Please and the release
checkpoint keep that pin aligned with the package version.
The manifest, skill, and icon checks follow the local plugin bundle
contract from #7619 , adapted for a checkout that has no dist/.
Co-authored-by: Cursor Agent <cursoragent@cursor.com >
Co-authored-by: GamerDubz <105694977+GamerDubz@users.noreply.github.com >
2026-11-11 00:16:44 -05:00
morluto and Cursor Agent
6a2b690440
fix(environment): preserve capture evidence during state inference ( #9897 )
...
fix(environment): preserve evidence when inferring and serving state
Co-authored-by: Cursor Agent <cursoragent@cursor.com >
2026-11-11 00:14:27 -05:00
N0zoM1z0 and gensokyo-dev
bae4ec0cda
docs(ntfs): record metadata page ownership and review verification
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:13:09 +08:00
N0zoM1z0 and gensokyo-dev
a8cd7cadc0
fix(ntfs): align inventory limitations with decoded metadata
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:13:09 +08:00
N0zoM1z0 and gensokyo-dev
22a3ba263e
refactor(ntfs): select metadata details from the retained identity index
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:13:09 +08:00
N0zoM1z0 and gensokyo-dev
09f58bf044
docs(ntfs): record complete CLI delivery measurements
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:13:09 +08:00
N0zoM1z0 and gensokyo-dev
1a8a9b749a
perf(ntfs): make detailed MFT pages opt in for journal queries
...
Keep inventory counts inline and preserve explicit 1–32 record detail requests. The real 26-record Windows sample serialized 57,946 metadata bytes before detail selection.
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:13:09 +08:00
N0zoM1z0 and gensokyo-dev
1f20c57627
docs(ntfs): record verification with Windows 11 metadata samples
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:13:09 +08:00
N0zoM1z0 and gensokyo-dev
c51ac43f9c
fix(ntfs): retain valid entries before malformed attribute list tails
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:13:09 +08:00
N0zoM1z0 and gensokyo-dev
e5a92d1848
docs(ntfs): explain acquisition paging and metadata coverage
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:13:09 +08:00
N0zoM1z0 and gensokyo-dev
710c353bff
feat(ntfs): page MFT metadata alongside journal events
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:13:09 +08:00
N0zoM1z0 and gensokyo-dev
96086e9c1f
feat(ntfs): report bounded V4 extents and unknown history coverage
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:13:09 +08:00
N0zoM1z0 and gensokyo-dev
f8ed4d16a0
feat(ntfs): decode V3 journal identities without false MFT joins
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:13:09 +08:00
N0zoM1z0 and gensokyo-dev
699cb72c48
feat(ntfs): validate resident and nonresident attribute metadata
...
Keep attribute parsing at the verified record boundary and retain only the identity index for journal joins.
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:13:09 +08:00
N0zoM1z0 and gensokyo-dev
411804afbf
feat(ntfs): expose source file names and lossless metadata
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:13:09 +08:00
morluto and Cursor Agent
81c09773be
fix(hopper): scope recovery guidance to the caller lifetime ( #9905 )
...
Co-authored-by: Cursor Agent <cursoragent@cursor.com >
2026-11-11 00:09:05 -05:00
morluto
25d46f3a58
fix(captures): validate packet read scope before paging ( #9922 )
2026-11-11 00:06:36 -05:00
morluto
75871ebb8b
fix(hopper): finish cleanup after progress observer failures ( #9966 )
2026-11-11 00:05:55 -05:00
N0zoM1z0 and gensokyo-dev
40239b31e7
docs(ntfs): record scoped page reuse and complete MCP measurements
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:03:32 +08:00
N0zoM1z0 and gensokyo-dev
ffac2e0c99
perf(ntfs): reuse validated acquisitions and MFT identity lookups
...
Retain one completed pair per resource scope, revalidate selected file state on every page, invalidate failures, and clear retained bytes at shutdown. Keep cold CLI process costs explicit.
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:03:32 +08:00
N0zoM1z0 and gensokyo-dev
fc9585a44f
feat(artifacts): expose verified file state for snapshot reuse
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:03:32 +08:00
N0zoM1z0 and gensokyo-dev
7771fb7123
fix(ntfs): describe the journal page row limit
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:03:32 +08:00
N0zoM1z0 and gensokyo-dev
2847464189
perf(ntfs): decode journal pages at their requested offsets
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:03:32 +08:00
N0zoM1z0 and gensokyo-dev
58edc31638
fix(ntfs): leave unused MFT reference identities unresolved
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:03:32 +08:00
N0zoM1z0 and gensokyo-dev
114b57678f
test(ntfs): retain paired facts through journal cleanup retry
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:03:32 +08:00
N0zoM1z0 and gensokyo-dev
4a8b157a28
fix(ntfs): retain completed MFT facts after journal failure
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:03:32 +08:00
N0zoM1z0 and gensokyo-dev
f3629bae94
fix(ntfs): retain the MFT identity after format refusal
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:03:32 +08:00
N0zoM1z0 and gensokyo-dev
48ee3f02fd
fix(ntfs): consume the parsed record identity verdict
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:03:32 +08:00
N0zoM1z0 and gensokyo-dev
6e8cd0bc5e
test(ntfs): use valid protected acquisition records
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:03:32 +08:00
N0zoM1z0 and gensokyo-dev
3c54f3ce4e
fix(ntfs): preserve acquisition access and I/O failures
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:03:32 +08:00
N0zoM1z0 and gensokyo-dev
55f344a77b
docs(ntfs): describe paired acquisition and timeline paging
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:03:32 +08:00
N0zoM1z0 and gensokyo-dev
01a7e2c3b7
feat(ntfs): expose the journal timeline through CLI and MCP
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:03:32 +08:00
N0zoM1z0 and gensokyo-dev
2e34aa0433
feat(ntfs): seal paired journal acquisitions as Evidence
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:03:32 +08:00
N0zoM1z0 and gensokyo-dev
c0b3c18b8a
feat(ntfs): page correlated journal observations by source offset
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:03:32 +08:00
N0zoM1z0 and gensokyo-dev
afed309f0f
fix(ntfs): exclude invalid MFT extents from journal matching
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:03:32 +08:00
N0zoM1z0 and gensokyo-dev
a3ff69f5ba
feat(artifacts): report MFT file-name coverage
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:03:32 +08:00
N0zoM1z0 and gensokyo-dev
a44d457745
feat(ntfs): correlate USN entries by full MFT identity
...
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com >
2026-11-11 13:03:32 +08:00