Matt Van Horn 0e6eca4085 feat(native): read embedded cargo-auditable Rust dependency lists (#2456) ...

* feat(native): read embedded cargo-auditable Rust dependency lists

* fix(native): trim PE section padding and compute dependency cycles iteratively

* fix(native): ignore SHT_NOBITS sections and validate dependency edges linearly

* fix(native): bound compiler path scanning and retained hashes

* fix(rust): pass package arrays as named parameterized test cases

* fix(rust): admit graph expansion and preserve resource units

* fix(rust): reject malformed packages, false cycles, and hidden compiler paths

Fail the first malformed cargo-auditable package before Zod collects an
issue per field. Require cyclic dependency indices to match the cycles in
package dependencies. Keep read-only ELF ranges when a section name does
not fit the bounded name window, so a rustc path in that range is still
reported.

* fix(ci): repair integrated checks and Hopper test baseline

* fix(go): verify Mach-O sections against segments

---------

Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>
Co-authored-by: morluto <76467478+morluto@users.noreply.github.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>

2026-10-14 02:50:30 +08:00

..

adb

fix(adb): retain rollback ownership and cancelled acquisition facts

2026-10-11 00:28:39 +08:00

analysisView

feat(fiddler): inspect native SAZ captures

2026-10-13 02:51:14 +00:00

android

feat(android): add opt-in package summaries and retained manifest views

2026-10-13 10:21:53 +08:00

apktool

fix(application): preserve a cancellation that races a completed provider run (#2710)

2026-10-13 23:51:44 +08:00

apple

refactor(apple): group artifact producers and verification (#952)

2026-10-07 21:09:33 +08:00

artifacts

refactor(artifacts): move inventory and extraction into provider owners (#1032)

2026-10-08 05:51:14 +08:00

binary

fix(session): preserve investigation records after failed target opens (#2754)

2026-10-13 23:46:23 +08:00

binaryDiagnostics

feat(recorded-crash): decode AArch64 core register notes (#2505)

2026-10-13 23:48:24 +08:00

captures

feat(captures): discover installed protocol and field definitions (#2496)

2026-10-13 15:55:25 +09:00

evm

fix(artifacts): authenticate file subjects across provider and view boundaries

2026-10-13 13:23:03 +08:00

firmware

fix(providers): retain worker cleanup owners through shutdown

2026-10-11 00:03:21 +08:00

flutter

perf(flutter): add opt-in retained AOT summary and string pages

2026-10-13 11:39:30 +08:00

frida

perf(frida): evict captured messages without copying the whole queue (#2628)

2026-10-13 00:11:38 -07:00

go

fix(artifacts): retain read cleanup ownership through CLI and MCP shutdown

2026-10-13 16:08:41 +08:00

harmony

feat(harmony): project HarmonyOS package inventory evidence (#1447)

2026-10-11 20:09:21 +08:00

investigation

perf(evidence): reuse authenticated unknown mutation snapshots

2026-10-13 12:46:06 +08:00

javascript

fix(source-maps): keep sources when sourcesContent length differs (#2873)

2026-10-13 23:52:47 +08:00

jeb

test: strengthen archive and resource cleanup assertions

2026-10-12 04:53:27 +08:00

managed

fix(domain): preserve derived byte counts and uncertain identity

2026-10-13 13:12:06 +08:00

native

fix(native): accept declared facts in dispatch name inventory (#2906)

2026-10-14 00:34:06 +08:00

pcap

feat(pcap): add bounded capture summaries through CLI and MCP

2026-10-13 04:53:03 +00:00

process

fix(io): retain cleanup ownership and honor cancellation

2026-10-12 14:12:44 +08:00

rust

feat(native): read embedded cargo-auditable Rust dependency lists (#2456)

2026-10-14 02:50:30 +08:00

signals

feat(signals): discover installed decoders and option help (#2487)

2026-10-13 15:58:19 +09:00

sqlite

feat(sqlite): inspect offline snapshots with selective evidence (#2271)

2026-10-12 18:33:23 +00:00

wasm

fix(wasm): attribute invalid paths to their selected fields (#2796)

2026-10-14 02:39:03 +08:00

AnalysisContextQueries.test.ts

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

AnalysisContextQueries.ts

refactor: prune obsolete provider and verification code

2026-10-12 08:59:14 +08:00

AnalysisDocument.ts

fix(analysis): bind overview document identity to the active target (#1094)

2026-10-09 00:57:28 +08:00

AnalysisProvider.test.ts

perf(evidence): stop copying normalized results into raw_result (#1402)

2026-10-09 19:52:54 -07:00

AnalysisProvider.ts

feat(ida): resolve containing procedures and report the admitted program as the document (#2374)

2026-10-13 20:56:20 +08:00

AppBundleExecutable.test.ts

fix(targets): compare the Info.plist bplist prefix without ASCII folding (#2100)

2026-10-13 23:37:45 +08:00

AppBundleExecutable.ts

fix(apple): preserve archive signatures and metadata byte identity

2026-10-13 07:34:52 +08:00

BinaryTargetResolver.ts

fix(target): probe WASM before inferred database routing (#2007)

2026-10-13 23:49:33 +08:00

BrowserEvidence.ts

feat(browser): attach passive tools to browsers without HTTP discovery (#2346)

2026-10-14 00:36:37 +08:00

BrowserObservationPort.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

BrowserObservationService.ts

perf(mcp): keep Playwright and type-only imports off MCP startup (#1691)

2026-10-10 21:04:05 -07:00

BrowserScenarioCapturePort.ts

fix(browser): retain startup owners and coordinate retryable close

2026-10-11 00:03:22 +08:00

BrowserScenarioCaptureService.ts

perf(mcp): keep Playwright and type-only imports off MCP startup (#1691)

2026-10-10 21:04:05 -07:00

BrowserScenarioEvidence.ts

refactor: use canonical implementations and types directly

2026-10-09 23:35:19 +08:00

CallPathTracing.ts

fix(evidence): preserve trace uncertainty and partial provider observations

2026-10-12 14:46:10 +08:00

CapabilityClientRequirements.ts

…

CapabilityInventory.test.ts

feat(ida): resolve containing procedures and report the admitted program as the document (#2374)

2026-10-13 20:56:20 +08:00

CapabilityInventory.ts

feat(native): read embedded cargo-auditable Rust dependency lists (#2456)

2026-10-14 02:50:30 +08:00

ClaudeDesktopConfigLocation.test.ts

fix(setup): resolve the configuration MSIX Claude Desktop reads (#2426)

2026-10-13 22:04:22 +08:00

ClaudeDesktopConfigLocation.ts

fix(setup): resolve the configuration MSIX Claude Desktop reads (#2426)

2026-10-13 22:04:22 +08:00

ClientConfigPath.ts

…

ClientConfigurationDocument.shape.test.ts

fix(setup): name invalid client config shape errors clearly (#2157)

2026-10-12 23:24:24 +08:00

ClientConfigurationDocument.ts

feat(setup): add Kimi Code client support (#2744)

2026-10-13 23:36:54 +08:00

ClientConfigurationFiles.ts

fix(setup): retain regular-file cleanup ownership through workflows

2026-10-12 05:57:35 +08:00

ClientRegistrationEnvironment.ts

feat(setup): register DeepSeek Harness through setup, doctor and uninstall (#1929)

2026-10-12 11:06:26 +08:00

ClientRegistrationIdentity.ts

fix(setup): register a stable launcher when run through bunx (#1731)

2026-10-11 19:17:15 +08:00

ClientRegistrationStatus.ts

feat(setup): add Kimi Code client support (#2744)

2026-10-13 23:36:54 +08:00

closeOwnedWebResources.ts

fix(ci): align FAT fixtures and consolidate duplicated workflow helpers

2026-10-13 16:16:31 +08:00

DirectAnalysis.ts

feat(native): search analyzed memory for masked byte patterns (#2341)

2026-10-13 23:41:45 +08:00

DirectAnalysisCleanup.ts

refactor(cleanup): share failure composition and retain native UI owners

2026-10-11 00:03:18 +08:00

DirectAnalysisDependencies.ts

perf(cli): defer binary provider composition

2026-10-11 11:07:15 +08:00

DirectAnalysisStatus.ts

feat(sqlite): inspect offline snapshots with selective evidence (#2271)

2026-10-12 18:33:23 +00:00

Doctor.fixture.ts

fix(bun): report the real runtime and enforce worker memory budgets on Windows (#1730)

2026-10-11 19:20:00 +08:00

Doctor.test.ts

fix(setup): separate host support and stop skill checks after drift (#2073)

2026-10-13 23:33:54 +08:00

Doctor.ts

feat(target): explain static WASM inspection after native rejection

2026-10-12 07:00:30 +08:00

DoctorDiagnostics.ts

fix(setup): separate host support and stop skill checks after drift (#2073)

2026-10-13 23:33:54 +08:00

DoctorProviderIds.ts

perf(cli): defer command-specific modules until dispatch

2026-10-11 13:20:15 +08:00

DoctorScope.ts

fix(setup): verify independently selected skill destinations

2026-10-12 01:31:32 +08:00

DshCordisPatch.ts

fix(setup): keep a Cordis operation's own fields when uninstall empties it (#2730)

2026-10-13 23:46:46 +08:00

DshCordisYaml.ts

feat(setup): register DeepSeek Harness through setup, doctor and uninstall (#1929)

2026-10-12 11:06:26 +08:00

EnhancedLiteralTracing.ts

feat(ida): resolve containing procedures and report the admitted program as the document (#2374)

2026-10-13 20:56:20 +08:00

EnhancedTools.ts

feat(ida): resolve containing procedures and report the admitted program as the document (#2374)

2026-10-13 20:56:20 +08:00

EnhancedToolSelectorOrigin.test.ts

fix(evidence): preserve trace uncertainty and partial provider observations

2026-10-12 14:46:10 +08:00

EnhancedToolTypes.ts

perf(mcp): keep Playwright and type-only imports off MCP startup (#1691)

2026-10-10 21:04:05 -07:00

EvidenceBundleCommands.ts

perf(evidence): reuse sealed bundle reads in compare and export (#2715)

2026-10-13 21:50:25 +08:00

EvidenceBundleFiles.ts

perf(evidence): authenticate and seal imported bundles in one pass

2026-10-13 03:22:38 +08:00

EvidenceInputResolver.test.ts

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

EvidenceInputResolver.ts

…

FunctionAnalysisEvidence.ts

fix(call-path): preserve relationship coverage from analysis (#2001)

2026-10-12 08:55:19 +08:00

GeminiClientSettings.ts

fix(setup): retain regular-file cleanup ownership through workflows

2026-10-12 05:57:35 +08:00

HermesClientHome.ts

fix(setup): follow and validate Hermes sticky profiles (#1528)

2026-10-10 18:19:51 +08:00

HermesConfigurationYaml.test.ts

fix(setup): keep Hermes config numbers as written (#2368)

2026-10-13 20:44:17 +08:00

HermesConfigurationYaml.ts

fix(setup): keep Hermes config numbers as written (#2368)

2026-10-13 20:44:17 +08:00

homebrew.ts

fix(doctor): find the Homebrew Hopper cask without writing Homebrew caches

2026-10-09 03:28:25 +00:00

HopperDownload.ts

fix(setup): preserve recovery backups and retain installer cleanup

2026-10-11 00:03:21 +08:00

InventoryProjectionEvidence.ts

perf(mcp): keep Playwright and type-only imports off MCP startup (#1691)

2026-10-10 21:04:05 -07:00

InvestigationProviders.ts

feat(ida): resolve containing procedures and report the admitted program as the document (#2374)

2026-10-13 20:56:20 +08:00

JsonFiles.ts

fix(io): retain cleanup ownership and honor cancellation

2026-10-12 14:12:44 +08:00

JsonInputFile.ts

fix(snapshot): classify non-object roots as invalid content (#2685)

2026-10-13 16:04:44 +08:00

LinuxHopper.test.ts

fix(setup): separate host support and stop skill checks after drift (#2073)

2026-10-13 23:33:54 +08:00

LinuxHopper.ts

fix(setup): separate host support and stop skill checks after drift (#2073)

2026-10-13 23:33:54 +08:00

MacHopper.test.ts

fix(setup): pin Hopper's macOS publisher identity before install (#2481)

2026-10-13 14:40:04 +08:00

MacHopper.ts

fix(setup): pin Hopper's macOS publisher identity before install (#2481)

2026-10-13 14:40:04 +08:00

MipsElfMetadata.ts

fix(elf): centralize fixed header validation across consumers

2026-10-13 08:07:58 +08:00

MipsElfSharedLoad.ts

feat(ghidra): admit verified MIPS16 shared ELF images

2026-10-12 07:50:31 +08:00

MsixPackageStorage.ts

fix(setup): resolve the configuration MSIX Claude Desktop reads (#2426)

2026-10-13 22:04:22 +08:00

OptionalObservationProviders.ts

feat: add Frida instrumentation support (#1359)

2026-10-12 22:01:58 +08:00

ProcedureAddressResolution.ts

fix(analysis): resolve procedure identities and preserve literal queries

2026-10-09 02:42:39 +08:00

ProgressReporter.test.ts

fix(process): coalesce delayed capture progress

2026-10-10 18:54:57 +08:00

ProgressReporter.ts

fix(progress): measure delivery intervals with a monotonic clock

2026-10-13 15:23:56 +08:00

ProviderOperationExecution.ts

fix(application): preserve a cancellation that races a completed provider run (#2710)

2026-10-13 23:51:44 +08:00

RealHopperAssertions.ts

test: consolidate redundant assertions into boundary workflows

2026-10-09 20:26:46 +08:00

ReconstructionCoverageService.ts

perf(mcp): keep Playwright and type-only imports off MCP startup (#1691)

2026-10-10 21:04:05 -07:00

ReconstructionObligationAuthority.ts

…

ReconstructionObligationCandidates.test.ts

perf(reconstruction): index semantic evidence contexts per derivation

2026-10-11 02:21:28 +08:00

ReconstructionObligationCandidates.ts

fix: order remaining outputs independently of host locale (#1867)

2026-10-12 01:10:01 +08:00

ReconstructionObligationLedger.authority.test.ts

test: consolidate service and process fixtures

2026-10-08 04:03:24 +08:00

ReconstructionObligationLedger.closure.test.ts

fix(evidence): validate closure projections and browser body coverage

2026-10-12 08:59:14 +08:00

ReconstructionObligationLedger.fixture.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

ReconstructionObligationLedgerDiagnostics.ts

fix(evidence): validate closure projections and browser body coverage

2026-10-12 08:59:14 +08:00

ReconstructionObligationLedgerEvaluation.ts

fix(evidence): validate closure projections and browser body coverage

2026-10-12 08:59:14 +08:00

ReconstructionObligationLedgerProjection.ts

fix(evidence): validate closure projections and browser body coverage

2026-10-12 08:59:14 +08:00

ReconstructionObligationLedgerService.ts

perf(mcp): keep Playwright and type-only imports off MCP startup (#1691)

2026-10-10 21:04:05 -07:00

ReconstructionObligationOriginalCases.ts

fix: order remaining outputs independently of host locale (#1867)

2026-10-12 01:10:01 +08:00

ReconstructionObligationPolicies.ts

…

ReferenceSourceImport.ts

perf(mcp): keep Playwright and type-only imports off MCP startup (#1691)

2026-10-10 21:04:05 -07:00

ReferenceSourceImportEntries.ts

fix(reference): preserve directory intent when resolving source imports (#2770)

2026-10-13 20:06:19 +08:00

ReferenceSourceImportPolicy.ts

fix(reference)!: retain source and metadata cleanup owners

2026-10-11 06:10:10 +08:00

ReferenceSourceImportTypes.test.ts

fix(reference)!: retain source and metadata cleanup owners

2026-10-11 06:10:10 +08:00

ReferenceSourceImportTypes.ts

fix(javascript): centralize module syntax and separate erased type dependencies

2026-10-13 14:39:06 +08:00

ReferenceSourceVcsAdapter.ts

fix(reference): report sloppy scripts, PHP, C# and enclosing Git facts (#1770)

2026-10-13 05:52:27 +09:00

RegularFileRead.ts

fix(setup): preserve current recovery snapshots and decoding failures

2026-10-13 14:51:55 +08:00

Setup.configuration.test.ts

fix(setup): separate host support and stop skill checks after drift (#2073)

2026-10-13 23:33:54 +08:00

Setup.fixture.ts

fix(setup): resolve the configuration MSIX Claude Desktop reads (#2426)

2026-10-13 22:04:22 +08:00

Setup.initialSnapshot.test.ts

refactor: consolidate boundary semantics and prune redundant tests

2026-10-10 05:56:01 +08:00

Setup.planning.test.ts

fix(setup): separate host support and stop skill checks after drift (#2073)

2026-10-13 23:33:54 +08:00

Setup.recovery.test.ts

fix(setup): separate host support and stop skill checks after drift (#2073)

2026-10-13 23:33:54 +08:00

Setup.ts

fix(setup): preserve skill files and report rollback failures

2026-10-12 05:24:10 +08:00

SetupClientConfiguration.ts

feat(setup): add Kimi Code client support (#2744)

2026-10-13 23:36:54 +08:00

SetupClients.ts

fix(setup): resolve the configuration MSIX Claude Desktop reads (#2426)

2026-10-13 22:04:22 +08:00

SetupHost.ts

fix(setup): separate host support and stop skill checks after drift (#2073)

2026-10-13 23:33:54 +08:00

SetupInstallFailure.test.ts

fix(setup): pin Hopper's macOS publisher identity before install (#2481)

2026-10-13 14:40:04 +08:00

SetupInstallFailure.ts

fix(setup): pin Hopper's macOS publisher identity before install (#2481)

2026-10-13 14:40:04 +08:00

SetupPlan.ts

fix(setup): separate host support and stop skill checks after drift (#2073)

2026-10-13 23:33:54 +08:00

SetupRegistrationEnvironment.ts

fix: order remaining outputs independently of host locale (#1867)

2026-10-12 01:10:01 +08:00

SetupSkill.ts

fix(setup): separate host support and stop skill checks after drift (#2073)

2026-10-13 23:33:54 +08:00

SetupTypes.ts

fix(setup): resolve the configuration MSIX Claude Desktop reads (#2426)

2026-10-13 22:04:22 +08:00

SupportedClients.ts

fix: repair the static-check failures on the default branch (#2895)

2026-10-14 00:31:27 +08:00

TypeScriptEmittedSourceCandidates.ts

fix(javascript): retain compiler-dependent module resolution facts

2026-10-13 15:58:25 +08:00

Uninstall.ts

fix(cli): label each uninstall skill root by its client (#2197)

2026-10-13 23:32:31 +08:00

UninstallFailure.ts

perf(cli): defer command-specific modules until dispatch

2026-10-11 13:20:15 +08:00

Update.test.ts

fix(setup): retain regular-file cleanup ownership through workflows

2026-10-12 05:57:35 +08:00

Update.ts

fix(setup): retain regular-file cleanup ownership through workflows

2026-10-12 05:57:35 +08:00

UpdateFailure.ts

fix(setup): retain regular-file cleanup ownership through workflows

2026-10-12 05:57:35 +08:00

UpdateMaintenance.ts

fix(update): share parsed client activation with maintenance

2026-10-13 12:46:05 +08:00

UpdateRuntime.release.test.ts

feat(update): update Bun global installations (#1735)

2026-10-11 17:56:05 +08:00

UpdateRuntime.ts

fix(setup): retain regular-file cleanup ownership through workflows

2026-10-12 05:57:35 +08:00

Utf8JsonInput.ts

fix(json): name a leading byte-order mark in rejected JSON input (#1510)

2026-10-10 01:37:41 -07:00

ValidateSelectedWebScript.ts

…

WebModulePorts.ts

fix(artifacts): retain read cleanup ownership through CLI and MCP shutdown

2026-10-13 16:08:41 +08:00

WebModuleTraceService.test.ts

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

WebModuleTraceService.ts

fix(ci): align FAT fixtures and consolidate duplicated workflow helpers

2026-10-13 16:16:31 +08:00

WebNetworkCapturePort.ts

fix(artifacts): retain read cleanup ownership through CLI and MCP shutdown

2026-10-13 16:08:41 +08:00

WebNetworkCaptureService.test.ts

feat(browser): inspect historical web network captures (#992)

2026-10-08 07:53:41 +08:00

WebNetworkCaptureService.ts

fix(artifacts): retain read cleanup ownership through CLI and MCP shutdown

2026-10-13 16:08:41 +08:00

WebRuntimePort.ts

feat(browser): attribute native execution and listener sources (#917)

2026-10-07 21:45:07 +08:00

WebRuntimeService.fixture.ts

feat(browser): attribute native execution and listener sources (#917)

2026-10-07 21:45:07 +08:00

WebRuntimeService.test.ts

feat(browser): attribute native execution and listener sources (#917)

2026-10-07 21:45:07 +08:00

WebRuntimeService.ts

refactor(input): share schema issue error construction

2026-10-09 00:49:30 +08:00

WebScriptArtifactPort.ts

fix(artifacts): retain read cleanup ownership through CLI and MCP shutdown

2026-10-13 16:08:41 +08:00

WebScriptExportService.ts

fix(web)!: retain capture read cleanup through export

2026-10-11 06:30:56 +08:00

WebSourceLocationPorts.ts

fix(artifacts): retain read cleanup ownership through CLI and MCP shutdown

2026-10-13 16:08:41 +08:00

WebSourceLocationService.test.ts

fix(bun): report the real runtime and enforce worker memory budgets on Windows (#1730)

2026-10-11 19:20:00 +08:00

WebSourceLocationService.ts

fix(ci): align FAT fixtures and consolidate duplicated workflow helpers

2026-10-13 16:16:31 +08:00

WindowsCapabilities.ts

refactor(process): separate capture implementation from analyst workflows (#988)

2026-10-08 00:46:21 +08:00

WorkflowEvidence.test.ts

test(evidence): cover workflow question whitespace normalization (#1739)

2026-10-11 19:58:55 +08:00

WorkflowEvidence.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

workflowInputError.ts

refactor(input): share schema issue error construction

2026-10-09 00:49:30 +08:00

XrefsAddressResolution.ts

fix(cli): resolve xrefs symbol selectors after address validation (#1209)

2026-10-09 13:28:48 +08:00