morluto
bb6a58c2a7
refactor(server): use canonical elicitation type
2026-09-29 19:12:21 +08:00
morluto
ecf3ed8bdb
refactor(tools): remove remaining arbitrary workflow caps
2026-09-29 17:00:06 +08:00
morluto
2f08c7c932
refactor(tools): remove artificial analysis ceilings
2026-09-29 16:29:23 +08:00
morluto
2a6eb41147
refactor(tools): return complete analysis results inline
2026-09-29 14:53:50 +08:00
morluto
34d00fd323
refactor(mcp): simplify workflow and observation scope
2026-09-29 12:41:28 +08:00
morluto
8c24272ee7
refactor(artifacts): remove selectors and traversal quotas
2026-09-29 12:15:49 +08:00
morluto
f55c2b9267
refactor(mcp): simplify tool inputs and inline results
2026-09-29 11:22:00 +08:00
morluto
7acac615ca
refactor(contracts): simplify workflows and drop readiness tool
2026-09-29 09:22:44 +08:00
morluto
9e7605482a
refactor(coverage): evaluate inline without workspaces
2026-09-29 08:45:00 +08:00
morluto
0d96275b68
refactor: return complete tool results inline
2026-09-29 07:08:46 +08:00
morluto
b8a9da0c0f
refactor(mcp): make analysis states unrepresentable ( #468 )
...
* refactor(config): parse capability settings into exact states
* refactor(runtime): encode replay and process outcomes exactly
* refactor: make analysis states unrepresentable
* refactor(mcp): register canonical schemas with SDK
* fix: preserve capability and catalog invariants
* fix(build): remove stale compiled modules
* fix(replay): update real verifier policy dependency
* fix(package): verify the complete MCP catalog
* fix(test): supply complete replay reload policy
* refactor(contracts): centralize output schema lookup
* refactor(mcp): delegate protocol boundaries to SDK
* fix(browser): approve real source capture
* fix(mcp): preserve catalog guidance
2026-08-10 02:28:11 +08:00
morluto
8f229ede70
feat(electron): add autonomous Electron runtime analysis ( #464 )
...
* feat: add autonomous Electron runtime analysis
* feat(electron): add lifecycle and boundary telemetry
* feat(electron): capture runtime boundary evidence
* fix(electron): package boundary hook helper
* feat(electron): report active capture coverage
* fix(electron): account for bring-your-own runtime
* feat(electron): expand agent-owned runtime scenarios
* fix(ghidra): keep fixture credentials out of argv
* perf(test): serialize local test and docs workloads
* fix(electron): harden active runtime capture
* fix(inspector): require exact runtime target authorization
* fix(docs): make managed manifest host independent
* fix(ci): make generated catalog portable
* fix: unblock autonomous command and electron flows
* fix(electron): close popup and detached helper gaps
2026-08-05 19:07:46 +08:00
morluto
51559245d2
Merge pull request #461 from morluto/agent/comprehensive-repository-audit
...
fix: harden evidence lifecycle and MCP contracts
2026-08-04 03:00:25 +08:00
morluto
1712e6d821
feat!: make evidence bundles canonical MCP resources
...
Add immutable session bundle snapshots, bounded resource discovery, paginated unknowns, mutable current analysis snapshots, and provider-neutral navigation/address context tools.
BREAKING CHANGE: export_evidence_bundle now requires a filesystem path and no longer returns an inline bundle.
2026-07-29 17:36:40 +00:00
morluto
969519c00f
fix(mcp): clarify routing and advertise input examples
2026-07-29 07:18:09 +00:00
morluto
fecddc0549
perf(mcp): reduce cold-start work
2026-07-26 15:02:58 +00:00
morluto
035e1144b0
feat(server): advertise available tools dynamically
2026-07-24 13:18:58 +00:00
N0zoM1z0
d25e98c3f9
feat: complete REA remediation program
2026-07-22 22:09:12 +09:00
N0zoM1z0
f4156d9663
fix(mcp): preserve investigation input policy
2026-07-21 19:51:11 +08:00
N0zoM1z0
3e3d45856e
feat: streamline agent integration and MCP routing
2026-07-20 17:11:06 +08:00
morluto
c6ee0049c4
refactor(app): split session and CLI workflows
2026-07-18 05:49:14 +00:00
morluto
2e5b44365f
refactor: simplify authorization boundaries
2026-07-18 05:49:14 +00:00
morluto
e6cfce3902
feat(permissions): add scoped process capture elicitation
2026-07-18 04:50:22 +00:00
morluto
194349683a
feat: add managed characterization and coverage closure
2026-07-16 22:53:50 +00:00
morluto
412bbaf05e
fix(mcp): hide managed workflows without a session
2026-07-16 19:53:03 +08:00
morluto
9c4a93d9b1
fix(mcp): integrate managed contracts after rebase
2026-07-16 19:52:35 +08:00
N0zoM1z0
5f66cfd57a
feat(dotnet): add managed runtime correlation planning
2026-07-16 20:10:36 +09:00
N0zoM1z0
55794d6083
feat(dotnet): add managed member comparison
2026-07-16 18:27:08 +09:00
N0zoM1z0
c251c38aa2
feat(dotnet): add managed artifact triage
2026-07-16 17:05:03 +09:00
N0zoM1z0
d86231ad33
feat(application): add isolated JavaScript replay
...
Expose one plan/execute replay contract through both CLI and MCP with exact source, input, runtime, sandbox, limit, and export commitments.
Run selected ESM and extracted CommonJS/Rspack factories in a disposable Linux x64 Bubblewrap namespace with a content-addressed Node ELF closure, architecture-checked seccomp, delegated systemd cgroup limits, bounded protocol capture, cancellation, and observable cleanup.
Preserve left and right observations as Evidence, derive differential comparisons without erasing unknowns, add optional separately authorized reproducers, and fail closed on stale plans or unavailable host boundaries.
Add source-owned parser, sanitizer, clipboard, denial, timeout, OOM, protocol-forgery, and cancellation coverage; a real Linux verifier and workflow; regenerated catalogs and TypeDoc; and updated the packaged REA analysis skill for the 83-tool inventory.
2026-07-16 15:45:55 +09:00
N0zoM1z0
778b995bbf
feat(application): add cross-layer graph workflows
2026-07-16 11:29:54 +09:00
N0zoM1z0
21da71ec6d
refactor(domain): remove provider-specific target and snapshot state
...
Move Hopper loader derivation and compatibility projection into the Hopper adapter so BinaryTarget carries only provider-neutral identity and format metadata.
Introduce bounded canonical analysis-profile commitments, exact provider/profile snapshot v2 bindings, legacy snapshot rejection guidance, and backward-compatible profiled Evidence v2 records. Partition cache and replay behavior by target, concrete provider build, and profile while preserving custom Hopper loader overrides.
Propagate profiles consistently through CLI, MCP, composed workflows, and session lifecycle; preserve the 78-tool contract and legacy loaderArgs response projection. Add migration documentation, generated API updates, property regressions, package verification, and real Hopper coverage.
2026-07-15 20:31:56 +09:00
N0zoM1z0
be76f8090b
feat: add web and Electron reverse-engineering workflows
2026-07-14 20:24:12 +09:00
N0zoM1z0
2c1ceabbf1
feat: add passive website reverse engineering
2026-07-14 12:27:13 +08:00
morluto
da59299a8a
feat(mcp): expose progress resources and availability
2026-07-14 02:11:56 +00:00
morluto
b394903b88
Merge remote-tracking branch 'origin/main' into feat/mcp-prompts-completion
...
# Conflicts:
# scripts/verify-package.mjs
2026-07-14 04:55:38 +08:00
morluto
a2076b47a6
fix(security): restrict investigation artifact inputs
2026-07-14 04:48:46 +08:00
morluto
c439b9e778
feat(analysis): add provider-neutral persistent snapshots
2026-07-14 04:18:38 +08:00
N0zoM1z0
24c3adb553
feat: add guided MCP workflow prompts
2026-07-13 21:04:28 +08:00
morluto
4ff4c11a00
Add evidence-backed investigation workflows
2026-07-12 21:12:18 +00:00
morluto
cc8681a856
feat: add evidence-backed process investigations
2026-07-12 20:36:00 +08:00
morluto
4f18e26ee5
feat: evolve REA analysis platform
2026-07-12 19:32:13 +08:00
morluto
03072e0ea7
Add structured runtime logging
2026-07-12 10:57:34 +08:00
morluto
62ede515b7
docs: record runtime and release constraints
2026-07-12 08:45:35 +08:00
morluto
d9c9025ffb
Improve Hopper session reliability
2026-07-12 06:53:31 +08:00
morluto
f32e718cc7
feat(session): add dynamic binary lifecycle
2026-07-12 06:34:18 +08:00
morluto
09bec111d5
Add MCP server layer: tool result, server, tool registration
2026-07-12 03:25:23 +08:00
morluto