13 Commits

Author SHA1 Message Date
zhaoxuya520 99a2bc4b30 feat: resolve Codex, Binary Ninja, and security review issues
Add an optional Codex adapter, Binary Ninja route and skill, Git-blob security boundaries, payload provenance documentation, and Gradle Wrapper verification.

Closes #47
Closes #121
Closes #125
2026-09-03 20:19:17 +08:00
Edison 98fcf243c9 feat(threat-intel): public-source IOC route as R44 (#103 rebase) (#112)
* feat: add public-source threat intelligence

* fix(routing): assign threat-intel to R44, not ADF R42

Keep analysis-decision-framework R42 as experimental YARA.
Public-source IOC / OSINT route is R44. Restore 5 benchmark cases.

---------

Co-authored-by: kriptoburak <kriptoburak@users.noreply.github.com>
2026-08-22 13:58:56 +08:00
zhaoxuya520 a9ed8d04ad Merge pull request #93 from jhuang-tw/fix/client-neutral-bootstrap-capability
fix: make MCP bootstrap client-neutral by default

Owner integration: preserve all prior CI contracts, document explicit host selection on Windows, and make the Bash manifest regression UTF-8 deterministic.
2026-08-19 11:58:54 +08:00
zhaoxuya520 a50eead89a Merge pull request #90 from kin9-0rz/main
fix(scripts): unify PowerShell child host resolution and add r2 fallbacks
2026-08-19 11:33:07 +08:00
Harry 0a4019d56f fix(router): clamp hot path to routing.json and real auth gate
Keep reverse-skill a skill router, not a platform. RULES hot path is master-route then case-init then PRIMARY. MASTER-ROUTING priority is verified against routing.json. precedent-auth no longer grants. CTF is one R41 pointer, not 40 competition routes. open.ps1 never deletes .i64/.idb. Route-scope parse is line-anchored and last-match. Tests: 168 routing cases, parse-contracts, title-safety in CI.
2026-08-18 14:58:22 +01:00
Harry 79d74db3d3 feat(ida-reverse): keep-alive supervisor and ida-pro-mcp 2.x open
Reuse a healthy HTTP MCP, launch idalib_supervisor via windowless Python, and never taskkill ida.exe. Treat a listening 13337 with tools/list timeout as busy so the 1-minute watchdog cannot kill a supervisor mid-idb_open. open.ps1 uses idb_open/idb_list. Add watchdog, autostart, GUI launcher, and ToolDiscovery catalog entries.
2026-08-18 14:25:41 +01:00
jhuang-tw 33015cc3f4 fix: separate MCP capability readiness from npx presence 2026-08-18 00:07:18 -07:00
kin9-0rz 0bc4ec960d fix(scripts): 统一 PowerShell 子进程入口并修复 r2 工具索引 fallback
- 新增 lib/HostRuntime.ps1 的 Resolve-ReverseHostExe,子进程调用统一经当前进程优先解析(pwsh→powershell→系统兜底),替代 verify/case-init/test-routing/test-p0-friction 中硬编码的 & powershell / Start-Process powershell.exe,修复仅装 PowerShell 7+ 环境下子进程调用失败
- ToolDiscovery.ps1 的 r2 Fallbacks 补充 r2.bat 与 radare2.exe 路径,修复 radare2 Windows 发行版(无 r2.exe)下 tool-index 误报 no
- verify-routing-coherence.ps1 的 pin gate 改用 hashtable 索引访问 capabilities 可选属性,修复 Set-StrictMode -Latest 下访问不存在属性抛错(此前被 powershell 硬编码失败掩盖)
- 回写 field-journal 并同步 _index.md
2026-08-17 14:20:38 +08:00
Edison 2c95829db5 Merge pull request #76 from atirna/agent/reverse-skill-impactful-audit
fix(bootstrap): 强制使用清单中的固定来源
2026-08-14 19:56:25 +08:00
deku 23824b0f2d fix(radare2): index radare2-skills tools 2026-08-14 13:44:34 +08:00
ZhaoXu ee9217b8af fix(bootstrap): preserve native command exit codes 2026-08-14 01:45:40 +08:00
Atirna 87e00b80db fix(bootstrap): fail closed before manifest installs 2026-08-13 03:22:32 +05:30
zhaoxuya520 9c28c6ca10 release: v1.0.1 2026-08-08 18:32:33 +08:00