refactor: extraction, tooling, and stability#3

Merged

calebevans merged 37 commits into

mainfrom

Jun 4, 2026

Commits on Jun 3, 2026

feat: comprehensive codebase review, refactoring, and performance overhaul
calebevans
committed
fix: persist extraction directory paths in case DB for cross-process access
calebevans
committed
refactor: cap tool responses to metadata + preview, full output lives in DB
calebevans
committed
feat: dynamic executor tool allowlist and standardized docstrings
calebevans
committed
refactor: redesign task panel to reactive model (track actual execution only)
calebevans
committed
chore: remove dead Tier 1 extractor code not used by the active workflow
calebevans
committed
feat: display IOC enrichment data (geolocation, ASN) in report appendix
calebevans
committed
docs: update README and architecture docs to reflect current system state
calebevans
committed
docs: add contributor guide for adding new MCP tools
calebevans
committed
fix: add DB kv_store fallback for EVTX directory in Hayabusa and Chainsaw
calebevans
committed
fix: correct evidence path handling for nested multi-system directories
calebevans
committed
fix: improve mmls error handling for partition-only and E01 images
calebevans
committed
fix: ensure task panel correctly tracks per-system tool status in parallel
calebevans
committed
fix: stabilize dashboard rendering and equalize task panel distribution
calebevans
committed
fix: eliminate dashboard jumpiness by fixing layout structure across refreshes
calebevans
committed
fix: prevent log messages from flickering below panel border
calebevans
committed
fix: report token counts now match CLI by reading actual SDK usage data
calebevans
committed
chore(docs): enhance documentation structure and add glossary
calebevans
committed
feat: enhance CLI functionality and improve investigation reporting
calebevans
committed
docs: fix 22 discrepancies found by verification review
calebevans
committed
fix: add TSK icat fallback for disk artifact extraction when E01 mount fails
calebevans
committed
fix: make run_fls self-contained with inline mmls retry on partition offset failure
calebevans
committed
fix: make TSK icat the primary extraction method for disk artifacts
calebevans
committed
fix: harden icat-first extraction against edge cases
calebevans
committed
feat: multi-partition support for disk image analysis
calebevans
committed

Commits on Jun 4, 2026