7 Commits

Author	SHA1	Message	Date
morluto	ecf3ed8bdb	refactor(tools): remove remaining arbitrary workflow caps	2026-09-29 17:00:06 +08:00
morluto	b8a9da0c0f	refactor(mcp): make analysis states unrepresentable (#468) ... * refactor(config): parse capability settings into exact states * refactor(runtime): encode replay and process outcomes exactly * refactor: make analysis states unrepresentable * refactor(mcp): register canonical schemas with SDK * fix: preserve capability and catalog invariants * fix(build): remove stale compiled modules * fix(replay): update real verifier policy dependency * fix(package): verify the complete MCP catalog * fix(test): supply complete replay reload policy * refactor(contracts): centralize output schema lookup * refactor(mcp): delegate protocol boundaries to SDK * fix(browser): approve real source capture * fix(mcp): preserve catalog guidance	2026-08-10 02:28:11 +08:00
morluto	513fa294a4	feat(process): record provider and verifier run lineage	2026-07-22 14:01:47 +00:00
N0zoM1z0	0ac418dd8b	fix(ghidra): preserve Windows batch invocation semantics	2026-07-17 03:05:19 +09:00
N0zoM1z0	bc0fb45f16	feat(ghidra): launch bounded Windows headless sessions ... Invoke analyzeHeadless.bat through an absolute cmd.exe with fixed interpreter switches, quoted arguments, delayed expansion disabled, and fail-closed metacharacter and length checks. Isolate Windows home and temporary coordinates, hide provider windows, and terminate the P0 launcher tree through bounded taskkill cleanup. Advertise explicit limitations that this preview does not provide Job Object ownership, DACL enforcement, reparse-point authority, or hostile-target safety.	2026-07-17 03:05:19 +09:00
N0zoM1z0	f0e625d7ee	feat(ghidra): add private headless provider session	2026-07-16 01:27:54 +09:00
N0zoM1z0	70e1a0f532	refactor(process): extract reusable provider lifecycle primitives ... Introduce provider-neutral ownership, private runtime roots, absolute startup deadlines, pending-operation correlation, bounded output capture, and verified TERM-to-KILL process supervision.\n\nMigrate Hopper onto the shared lifecycle pieces while keeping its Unix-socket protocol and health/shutdown parsing adapter-specific. Preserve exact ownership checks and fail-closed cleanup, including descendant cleanup after the launcher leader exits.\n\nAdd reusable process fixtures and deterministic coverage for startup timeout, cancellation, output bounds, exit diagnostics, cleanup escalation, repeated close, spawn failure, and resource disposal. Update architecture, provider evaluation, contributor guidance, and generated API documentation.	2026-07-15 23:20:48 +09:00