codevanta 0.1.0__tar.gz → 0.2.0__tar.gz

{codevanta-0.1.0 → codevanta-0.2.0}/CHANGELOG.md

@@ -4,6 +4,64 @@ All notable changes to CODEVANTA are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the project uses
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.2.0] - 2026-11-13
+
+### Added
+
+- **Typed comparators** (`codevanta compare <a.json> <b.json>` + MCP tool
+  `codevanta_compare`): function inventories matched by name and by fingerprint,
+  string-set diffs, and evidence-bundle membership diffs - all offline, typed,
+  evidence-backed.
+- **Residual-unknown ledger** (`codevanta unknowns`): typed `UnknownRecord` with
+  deterministic ids and an open/resolve lifecycle, surfaced in the evidence bundle
+  and over MCP (`codevanta_unknowns`).
+- **Six REA-parity lanes** (PR #50): ELF-core + Apple `.ips` crash parsers
+  (`codevanta core`/`codevanta ips`, MCP `codevanta_crash`); auto-detecting
+  format metadata (APK signing v2/v3, Go buildinfo, Rust cargo-auditable, `.pyc`
+  headers, Electron fuses, ELF notes/modinfo, desktop classification;
+  `codevanta metadata`, MCP `codevanta_metadata`); binary containers (WASM
+  sections, EVM disasm-lite, GGUF, safetensors, pcap, firmware magic scan,
+  `codevanta binmeta`/`codevanta evm`) and a read-only SQLite viewer
+  (`codevanta sqlite`, MCP `codevanta_binmeta`/`codevanta_sqlite`); the ADB
+  mobile lane with offline transcript parsers and skip-gated live wrappers
+  (`codevanta mobile`, MCP `codevanta_adb`); the Web/Electron lane (stdlib
+  CDP client, passive page inspection, screenshot, WebMCP probe, ASAR
+  reconstruction; `codevanta web`/`codevanta asar`, MCP
+  `codevanta_web_inspect`/`codevanta_asar`); and solver-backed symbolic
+  execution gated on optional z3-solver with an unchanged naive fallback
+  (`--solver auto`, MCP `codevanta_symbolic_solve`).
+- **Signal/firmware lane** (PR #51): sigrok `.sr` session archives, a pure-Python
+  UART decoder-lite with parity/stop validation, flattened devicetree (FDT)
+  parsing, and a skip-gated sigrok-cli wrapper (`codevanta signal`/`codevanta dtb`,
+  MCP `codevanta_signal_sr`/`codevanta_uart_decode`/`codevanta_dtb`).
+- **Provider-neutral navigation state** (PR #51): bookmarks, comments, cursor and
+  goto-history per session over the session store, plus typed external-GUI
+  provider probes (`codevanta nav`, MCP `codevanta_nav`/`codevanta_nav_providers`).
+
+### Changed
+
+- MCP server now exposes 38 tools (from 22 at v0.1.0); `z3-solver>=4.13` joined
+  the dev extras so CI exercises the solver lane for real.
+
+## [0.1.1] - 2026-11-13
+
+### Added
+
+- **Live gdb debug sessions** (`codevanta.analysis.debug_session` + `codevanta debug`
+  + MCP tool `codevanta_debug`): the layer now owns a real `gdb --interpreter=mi2`
+  process - launch, break-at (symbol or address), continue, step/next, register
+  reads, bounded memory reads, backtrace frames, verified quit - each result typed,
+  JSON-safe and evidence-backed (`gdb.mi2`, HIGH, one-run provenance). A missing gdb
+  is a typed `AnalysisError` with an install hint, never a traceback.
+- MCP tool count is now 23; the MCP `INSTRUCTIONS` document `debug` as the one
+  explicit execution exception.
+
+### Changed
+
+- README is fully de-hardcoded: real screenshots of the CLI, the loopback dashboard
+  and a 97-node call graph export; installation starts from PyPI; volatile counts
+  and Windows-only example paths removed; docs describe the actual CI gates.
+
 ## [Unreleased]
 
 ### Added

{codevanta-0.1.0/src/codevanta.egg-info → codevanta-0.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codevanta
-Version: 0.1.0
+Version: 0.2.0
 Summary: CODEVANTA — Advanced Code Intelligence: AI-Powered Reverse Engineering & Binary Analysis Platform
 Author: kevindoni
 License-Expression: MIT
@@ -38,6 +38,9 @@ Requires-Dist: ruff>=0.5; extra == "dev"
 Requires-Dist: build>=1.2; extra == "dev"
 Requires-Dist: unicorn>=2.0; extra == "dev"
 Requires-Dist: pyelftools>=0.31; extra == "dev"
+Requires-Dist: z3-solver>=4.13; extra == "dev"
+Provides-Extra: solver
+Requires-Dist: z3-solver>=4.13; extra == "solver"
 Provides-Extra: emulation
 Requires-Dist: unicorn>=2.0; extra == "emulation"
 Provides-Extra: dwarf
@@ -49,8 +52,20 @@ Dynamic: license-file
 
 # CODEVANTA
 
+[![PyPI — version](https://img.shields.io/pypi/v/codevanta)](https://pypi.org/project/codevanta/)
+
 > **Advanced Code Intelligence** — Decode. Analyze. Understand.
 
+<p align="center">
+  <img src="docs/assets/cli.png" width="840" alt="CODEVANTA CLI - real output of info, functions and xrefs against a committed PE sample"><br>
+  <em>CLI - info, functions, xrefs on a committed PE sample</em><br><br>
+  <img src="docs/assets/gui.png" width="840" alt="CODEVANTA read-only web dashboard served on loopback"><br>
+  <em>Read-only web dashboard (codevanta gui)</em><br><br>
+  <img src="docs/assets/callgraph.png" width="840" alt="Self-contained HTML call graph export with pan and zoom"><br>
+  <em>HTML call graph export - 97 nodes (codevanta callgraph --format html)</em>
+</p>
+
+
 CODEVANTA is an AI-powered code intelligence, reverse engineering, and binary
 analysis platform. It helps engineers, security researchers, and analysts
 understand software faster — from source code to executables with missing
@@ -218,7 +233,7 @@ Phase 2 adds the first reverse-engineering views on top of the phase 1 engine:
   `codevanta_diff`, `codevanta_jump_table`, `codevanta_function_hash`,
   `codevanta_xrefs`, `codevanta_cfg`, `codevanta_callgraph`,
   `codevanta_session_save`, and `codevanta_session_list`, alongside the five
-  phase 1 tools (fifteen in total). `codevanta_diff` takes `max_functions`,
+  phase 1 tools. `codevanta_diff` takes `max_functions`,
   `deep`, `semantic`, and `threshold`, so the phase 2j pairing pass is reachable
   from an agent without a separate `codevanta_similarity` call.
 - **`analyze` integration** (`core/report.py`) — the `codevanta analyze` JSON
@@ -267,10 +282,10 @@ tools. Phase 2i adds the `alignment`/`array_groups` layout hints on a struct
 suggestion, the `function_similarity`/`normalized_tokens` API, and the
 `codevanta_struct` MCP tool. Phase 2j adds the opt-in semantic pairing pass on the
 binary diff (`semantic=True`, `threshold` defaulting to `0.9`), the
-`codevanta_similarity` MCP tool (fifteen tools), and the `signed` mnemonic hint on
+`codevanta_similarity` MCP tool, and the `signed` mnemonic hint on
 struct fields, reachable as `diff --semantic --threshold` and as the
 `codevanta struct` footer `signed:` line. Phase 2k adds the `deep` / `semantic` /
-`threshold` arguments to the `codevanta_diff` MCP tool (fifteen tools, no new
+`threshold` arguments to the `codevanta_diff` MCP tool (no new
 registration), the semantic pass's cross-architecture guard — the pass is skipped
 with a warning naming both `BinaryInfo.architecture` tokens, which are compared
 after trimming whitespace and lower-casing only, so a hand-built `AMD64` does not
@@ -290,8 +305,17 @@ scope, confidence semantics, and limitations.
 
 ## Installation
 
+**From PyPI** (recommended):
+
+```powershell
+python -m pip install codevanta
+```
+
+**From source** (development install with the dev extras):
+
 ```powershell
-cd D:\PALIKASIKU\CODEVANTA
+git clone https://github.com/kevindoni/CODEVANTA.git
+cd CODEVANTA
 python -m pip install -e ".[dev]"
 ```
 
@@ -307,47 +331,46 @@ installs, and the full setup/uninstall reference.
 ## Usage
 
 ```powershell
-codevanta info      C:\Windows\System32\notepad.exe
-codevanta functions C:\Windows\System32\kernel32.dll --limit 8
-codevanta strings   C:\Windows\System32\notepad.exe --min-length 8
-codevanta entropy   C:\Windows\System32\notepad.exe --threshold 7.2
-codevanta disasm    C:\Windows\System32\notepad.exe --count 40
-codevanta analyze   samples\elf64_text.bin --output samples\report.json
+codevanta info      samples\pe64_text.bin
+codevanta functions samples\pe64_text.bin --limit 8
+codevanta strings   samples\macho64_text.bin --min-length 8
+codevanta entropy   samples\pe64_text.bin --threshold 7.2
+codevanta disasm    samples\pe64_text.bin --count 40
+codevanta analyze   samples\elf64_text.bin --output report.json
 
 # Phase 2
-codevanta analyze   C:\Windows\System32\notepad.exe --xrefs --cfg       # report + xrefs + cfg
-codevanta analyze   C:\Windows\System32\notepad.exe                     # phase 1 only
-codevanta analyze   C:\Windows\System32\notepad.exe --xref-limit 200 --xrefs -o report.json
-codevanta xrefs     C:\Windows\System32\notepad.exe --limit 40
-codevanta cfg       C:\Windows\System32\notepad.exe --address 0x140001000
-codevanta cfg       C:\Windows\System32\notepad.exe --address 0x140001000 --traversal recursive
-codevanta cfg       C:\Windows\System32\notepad.exe --address 0x140001000 --traversal recursive --resolve-indirect
-codevanta jump-table C:\Windows\System32\notepad.exe --address 0x140003000
-codevanta jump-table C:\Windows\System32\notepad.exe --address 0x140003000 --entries 64 --json
-codevanta diff      samples\v1.bin samples\v2.bin
-codevanta diff      samples\v1.bin samples\v2.bin --max-functions 20000 --json
-codevanta diff      samples\v1.bin samples\v2.bin --semantic
-codevanta diff      samples\v1.bin samples\v2.bin --semantic --threshold 0.75 --json
-codevanta callgraph C:\Windows\System32\notepad.exe --format dot -o callgraph.dot
-codevanta callgraph C:\Windows\System32\notepad.exe --format graphml -o callgraph.graphml
-codevanta callgraph C:\Windows\System32\notepad.exe --format html -o callgraph.html
+codevanta analyze   samples\pe64_text.bin --xrefs --cfg       # report + xrefs + cfg
+codevanta analyze   samples\pe64_text.bin                     # phase 1 only
+codevanta analyze   samples\pe64_text.bin --xref-limit 200 --xrefs -o report.json
+codevanta xrefs     samples\pe64_text.bin --limit 40
+codevanta cfg       samples\pe64_text.bin                     # entry point, linear traversal
+codevanta cfg       samples\pe64_text.bin --traversal recursive
+codevanta cfg       samples\pe64_text.bin --traversal recursive --resolve-indirect
+codevanta jump-table samples\pe64_text.bin --address 0x140001000
+codevanta jump-table samples\pe64_text.bin --address 0x140001000 --entries 64 --json
+codevanta diff      samples\pe64_text.bin samples\macho64_text.bin
+codevanta diff      samples\pe64_text.bin samples\macho64_text.bin --max-functions 20000 --json
+codevanta diff      samples\pe64_text.bin samples\macho64_text.bin --semantic
+codevanta diff      samples\pe64_text.bin samples\macho64_text.bin --semantic --threshold 0.75 --json
+codevanta callgraph samples\pe64_text.bin --format dot -o callgraph.dot
+codevanta callgraph samples\pe64_text.bin --format graphml -o callgraph.graphml
+codevanta callgraph samples\pe64_text.bin --format html -o callgraph.html
 Invoke-Item callgraph.html   # drag to pan, wheel to zoom, search labels, filter by kind
-codevanta analyze   C:\Windows\System32\notepad.exe --callgraph -o report.json
-codevanta session save C:\Windows\System32\notepad.exe --notes "baseline triage"
+codevanta analyze   samples\pe64_text.bin --callgraph -o report.json
+codevanta session save samples\pe64_text.bin --notes "baseline triage"   # prints: session saved: <id>
 codevanta session list --limit 10
-codevanta session show 4f9c1a7b2d3e
-codevanta session annotate 4f9c1a7b2d3e 0x401000 "decrypts config with XOR 0x5a"
-codevanta session notes 4f9c1a7b2d3e
-codevanta struct    C:\Windows\System32\notepad.exe --address 0x140001000
-codevanta struct    samples\handle.bin --function process --include-stack --json
+codevanta session show SESSION_ID      # the id that `session save` printed
+codevanta session annotate SESSION_ID 0x140001000 "decrypts config with XOR 0x5a"
+codevanta session notes SESSION_ID
+codevanta struct    samples\pe64_text.bin --function codevanta_sample_main --include-stack --json
 
 # Phase 3
-codevanta decompile C:\Windows\System32\notepad.exe 0x1400019c0 --backend native
+codevanta decompile samples\pe64_text.bin 0x140001000 --backend native
 codevanta decompile samples\pe64_text.bin --json
 codevanta decompile samples\pe64_text.bin --max-instructions 20 --output rendering.c
 codevanta emulate   samples\pe64_text.bin                              # returns 42
 codevanta emulate   samples\pe64_text.bin --set rdi=2 --mem 0x600000=48454c4c4f
-codevanta emulate   C:\Windows\System32\notepad.exe --resolve-target   # jmp/call [rip+..]
+codevanta emulate   samples\pe64_text.bin --resolve-target   # jmp/call [rip+..]
 
 # Phase 5 — symbol-grade views and dynamic sessions
 codevanta dwarf     samples\hello-dwarf                                # DWARF symbols + type layouts
@@ -375,8 +398,11 @@ hinted anything. The same data comes back from Python and JSON:
 ```python
 from codevanta.analysis.binary_diff import diff_binaries
 
-# Leftovers paired by normalized instruction-shape similarity (default 0.9)
-diff = diff_binaries("samples/v1.bin", "samples/v2.bin", semantic=True, threshold=0.9)
+diff = diff_binaries("samples/pe64_text.bin", "samples/macho64_text.bin")
+print(diff.identical, len(diff.functions_added), len(diff.functions_removed))
+# With semantic=True, the leftovers left unpaired by address and name matching
+# are additionally scored by normalized instruction-shape similarity
+# (threshold defaults to 0.9) and reported in `functions_changed`.
 for delta in diff.functions_changed:
     print(hex(delta.address), delta.similarity)  # None unless the pair was scored
 ```
@@ -479,7 +505,7 @@ codevanta gui --no-browser     # print the URL and wait
 
 `codevanta gui` serves one self-contained dashboard page over a loopback-only,
 read-only HTTP server — no extra dependencies, no network access, and the
-analysed file is never executed or written. The page drives fourteen JSON routes
+analysed file is never executed or written. The page drives these JSON routes
 (`/api/health`, `/api/info`, `/api/functions`, `/api/strings`, `/api/xrefs`,
 `/api/cfg`, `/api/struct`, `/api/callgraph`, `/api/diff`, `/api/decompile`,
 `/api/emulate`, `/api/symbolic`, `/api/session_save`, `/api/session_list`), each
@@ -521,7 +547,7 @@ Safety model: every run prints the exact file changes and a diff first; nothing
 is written without `--yes` (or an interactive confirmation); existing configs
 are backed up as `*.codevanta.bak`; re-running the same command is a no-op.
 
-MCP tools (twenty-two): `codevanta_info`, `codevanta_functions`,
+MCP tools: `codevanta_info`, `codevanta_functions`,
 `codevanta_strings`, `codevanta_disasm`, `codevanta_analyze`,
 `codevanta_xrefs`, `codevanta_cfg`, `codevanta_callgraph`, `codevanta_diff`,
 `codevanta_jump_table`, `codevanta_function_hash`, `codevanta_similarity`,
@@ -612,12 +638,12 @@ plus smoke-tests the wheel on 3.13.
 - [Project specification](PROJECT_SPEC.md)
 - [Architecture](docs/architecture.md)
 - [API reference](docs/api.md) — every public Python entry point, the evidence
-  contract, the fourteen dashboard routes, and the twenty-two MCP tools
+  contract, the dashboard routes, and the MCP tools
 - [Sample binaries](docs/samples.md) — the committed PE/Mach-O/ELF fixtures and
   how to regenerate them
 - [Contributor attribution](docs/attribution.md) — how agent commits are credited,
   and how to make an agent appear in GitHub's contributor graph
-- [Release checklist](docs/release-checklist.md) — the pending PyPI publisher,
+- [Release checklist](docs/release-checklist.md) — the PyPI trusted publisher,
   the `pypi` environment, dry runs, tagging and CI re-runs (maintainers)
 - [Phase 2 — cross-references, CFGs, sessions](docs/phase2.md)
 - [Phase 2b — call graphs, graph export, session annotations](docs/phase2b.md)
@@ -642,11 +668,11 @@ from `src/`. A phase can be **delivered with named gaps** — those gaps are the
 
 | Phase | Delivered | Open |
 |-------|-----------|------|
-| **1 · Foundation** | ✅ PE / ELF / Mach-O (fat slices too) / DEX loaders — `core/loader.py:363-379` (`dex\n` magic → `_load_dex`)<br>✅ Disassembly, ASCII + UTF-16 strings, function discovery, JSON evidence report — `core/disassembler.py`, `core/strings.py`, `core/functions.py`, `core/report.py`<br>✅ Per-section entropy and packing triage — `core/entropy.py` (`shannon_entropy`, `analyze_entropy`), `codevanta entropy`<br>✅ CLI: 20 commands (19 `@app.command()` + `mcp serve`) plus the `session` sub-app with 5 subcommands — `cli/main.py`<br>✅ MCP server exposing 22 tools — `mcp_server/server.py` (`build_server().list_tools()` returns 22)<br>✅ Guided agent setup for Claude Code, Cursor, Cline and VS Code — `setup/` (`clients.py`, `plan.py`, `apply.py`, `verify.py`) | ⬜ **.NET (CLR), WebAssembly and JVM `.class`/JAR formats** — `loader.py` recognises PE, ELF, Mach-O and DEX only |
-| **2 · RE views** | ✅ Cross-references, incl. `call_import` / `call_indirect` slot resolution — `analysis/xrefs.py`<br>✅ Linear **and** recursive CFG — `analysis/cfg.py` (`build_cfg`, `build_recursive_cfg`), `codevanta cfg --traversal recursive`<br>✅ Call graphs with DOT / GraphML / HTML export — `analysis/callgraph.py`, `analysis/graph_export.py`, `analysis/html_view.py`<br>✅ Absolute and relative jump tables — `analysis/jump_tables.py` (`MODE_ABSOLUTE`, `MODE_RELATIVE`)<br>✅ SQLite sessions with address annotations — `storage/session.py`, `codevanta session save/list/show/annotate/notes`<br>✅ Structural binary diff, function fingerprints, function similarity — `analysis/binary_diff.py`, `analysis/function_hash.py`<br>✅ Struct-field recovery — `analysis/type_recovery.py`, `codevanta struct`<br>✅ Read-only loopback dashboard, 14 endpoints — `gui/server.py` (`ROUTES`) | ⬜ **Live debugger execution** — `codevanta attach` states outright that "the provider is never launched: this command writes a file and prints a command line"; the gdb/Frida session layer generates scripts and replays traces (`analysis/dynamic.py`, `analysis/trace.py`) but nothing runs gdb/Frida against a target<br>✅ GUI session persistence — `/api/session_save` and `/api/session_list` over `storage/session.py`<br>⬜ **Graph-oriented viewer application** — the shipped viewer is the static HTML/SVG export (`analysis/html_view.py`), not an interactive app |
+| **1 · Foundation** | ✅ PE / ELF / Mach-O (fat slices too) / DEX loaders — `core/loader.py` (`dex\n` magic → `_load_dex`)<br>✅ Disassembly, ASCII + UTF-16 strings, function discovery, JSON evidence report — `core/disassembler.py`, `core/strings.py`, `core/functions.py`, `core/report.py`<br>✅ Per-section entropy and packing triage — `core/entropy.py` (`shannon_entropy`, `analyze_entropy`), `codevanta entropy`<br>✅ CLI — see `codevanta --help` (the `session` sub-app adds its own subcommands) — `cli/main.py`<br>✅ MCP server exposing the analysis tools — `mcp_server/server.py` (`build_server().list_tools()`)<br>✅ Guided agent setup for Claude Code, Cursor, Cline and VS Code — `setup/` (`clients.py`, `plan.py`, `apply.py`, `verify.py`) | ⬜ **.NET (CLR), WebAssembly and JVM `.class`/JAR formats** — `loader.py` recognises PE, ELF, Mach-O and DEX only |
+| **2 · RE views** | ✅ Cross-references, incl. `call_import` / `call_indirect` slot resolution — `analysis/xrefs.py`<br>✅ Linear **and** recursive CFG — `analysis/cfg.py` (`build_cfg`, `build_recursive_cfg`), `codevanta cfg --traversal recursive`<br>✅ Call graphs with DOT / GraphML / HTML export — `analysis/callgraph.py`, `analysis/graph_export.py`, `analysis/html_view.py`<br>✅ Absolute and relative jump tables — `analysis/jump_tables.py` (`MODE_ABSOLUTE`, `MODE_RELATIVE`)<br>✅ SQLite sessions with address annotations — `storage/session.py`, `codevanta session save/list/show/annotate/notes`<br>✅ Structural binary diff, function fingerprints, function similarity — `analysis/binary_diff.py`, `analysis/function_hash.py`<br>✅ Struct-field recovery — `analysis/type_recovery.py`, `codevanta struct`<br>✅ Read-only loopback dashboard — `gui/server.py` (`ROUTES`) | ⬜ **Live debugger execution** — `codevanta attach` states outright that "the provider is never launched: this command writes a file and prints a command line"; the gdb/Frida session layer generates scripts and replays traces (`analysis/dynamic.py`, `analysis/trace.py`) but nothing runs gdb/Frida against a target<br>✅ GUI session persistence — `/api/session_save` and `/api/session_list` over `storage/session.py`<br>⬜ **Graph-oriented viewer application** — the shipped viewer is the static HTML/SVG export (`analysis/html_view.py`), not an interactive app |
 | **3 · Decompilation** | ✅ Pseudo-C through three providers — `analysis/decompile.py`, `analysis/decompilers/` (`native`, `angr`, `ghidra` reported by `available_backends()`)<br>✅ Type propagation over decompiled output — `analysis/type_propagation.py`<br>✅ Decompiler parity enforced in CI instead of assumed — `.github/workflows/ci.yml` jobs `decompile-parity` and `ghidra-parity` | ⬜ **Embedded Python scripting** — no script command and no sandboxed interpreter; `session` stores annotations only |
-| **4 · Emulation** | ✅ Bounded, offline emulation that never executes on the host, with explicit `return` / `budget` / `unmapped` / `unsupported` stop reasons — `analysis/emulate.py` (Unicorn), `codevanta emulate`<br>✅ 29 emulation tests — `tests/test_emulate.py` | ⬜ **Typed / SSA IR lifting** — `ir/base.py` and `ir/adapters/` are a contract plus an empty registry ("Concrete adapters arrive in phase 4")<br>⚠️ **Symbolic execution** — bounded path exploration over Unicorn exists (`analysis/symbolic.py`, seeded branches recorded as assumptions); no solver-based symbolic execution (`Simulator`/`SimulationManager`/Z3) in `src/` |
-| **5 · Platform** | ✅ CI/CD with real gates — `ci.yml` runs 7 job runs (3 Python versions × `test`, plus `type-check` (mypy), `package` (wheel smoke test), `decompile-parity`, `ghidra-parity`) and `pyproject.toml` sets `fail_under = 85` coverage<br>✅ Release pipeline — `release.yml`: `build` → `publish-pypi` (trusted publishing) → `github-release`<br>✅ Dynamic provider probing, script generation and trace replay reachable from the CLI — `analysis/dynamic.py`, `analysis/trace.py` (`parse_gdb_trace`, `parse_frida_trace`), `codevanta attach`, `codevanta trace` | ✅ **Plugin SDK** — `plugins/` (entry-point discovery, bounded `run_plugin`, built-in registry, `MetricsAnalyzer`)<br>⬜ **Full AI layer** and **multi-user** — no auth, user or tenant model exists in `src/`<br>✅ **Evidence bundle** — `analysis/evidence_bundle.py` (manifest, per-entry tamper detection) and `scripts/report_bundle.py` (report + trace → verifiable bundle)<br>✅ **Fuzz and benchmark** — `scripts/fuzz_parsers.py` (`fuzz-smoke` job) and `scripts/bench_gate.py` (`benchmark` job, informational)<br>✅ **Windows / macOS CI** — `test-platform` matrix py3.13 on windows-latest and macos-latest (non-blocking platform signal)<br>⬜ **PyPI release** — publishing is wired but has never run: `git tag -l` is empty, so no `v*` tag has been cut |
+| **4 · Emulation** | ✅ Bounded, offline emulation that never executes on the host, with explicit `return` / `budget` / `unmapped` / `unsupported` stop reasons — `analysis/emulate.py` (Unicorn), `codevanta emulate`<br>✅ Emulation test suite — `tests/test_emulate.py` | ⬜ **Typed / SSA IR lifting** — `ir/base.py` and `ir/adapters/` are a contract plus an empty registry ("Concrete adapters arrive in phase 4")<br>⚠️ **Symbolic execution** — bounded path exploration over Unicorn exists (`analysis/symbolic.py`, seeded branches recorded as assumptions); no solver-based symbolic execution (`Simulator`/`SimulationManager`/Z3) in `src/` |
+| **5 · Platform** | ✅ CI/CD with real gates — `ci.yml` gates the test matrix, `type-check` (mypy), the wheel smoke test, `decompile-parity` and `fuzz smoke`, with best-effort `ghidra-parity`, an informational `benchmark`, and non-blocking windows/macOS platform runs (see the workflow for the current job list) and `pyproject.toml` sets `fail_under = 85` coverage<br>✅ Release pipeline — `release.yml`: `build` → `publish-pypi` (trusted publishing) → `github-release`; used for the v0.1.0 release<br>✅ Dynamic provider probing, script generation and trace replay reachable from the CLI — `analysis/dynamic.py`, `analysis/trace.py` (`parse_gdb_trace`, `parse_frida_trace`), `codevanta attach`, `codevanta trace` | ✅ **Plugin SDK** — `plugins/` (entry-point discovery, bounded `run_plugin`, built-in registry, `MetricsAnalyzer`)<br>⬜ **Full AI layer** and **multi-user** — no auth, user or tenant model exists in `src/`<br>✅ **Evidence bundle** — `analysis/evidence_bundle.py` (manifest, per-entry tamper detection) and `scripts/report_bundle.py` (report + trace → verifiable bundle)<br>✅ **Fuzz and benchmark** — `scripts/fuzz_parsers.py` (`fuzz-smoke` job) and `scripts/bench_gate.py` (`benchmark` job, informational)<br>✅ **Windows / macOS CI** — `test-platform` matrix py3.13 on windows-latest and macos-latest (non-blocking platform signal)<br>✅ **PyPI release** — v0.1.0 published through trusted publishing: a `v*` tag drives `release.yml` |
 
 ## Product principles
 

{codevanta-0.1.0 → codevanta-0.2.0}/README.md

@@ -1,7 +1,19 @@
 # CODEVANTA
 
+[![PyPI — version](https://img.shields.io/pypi/v/codevanta)](https://pypi.org/project/codevanta/)
+
 > **Advanced Code Intelligence** — Decode. Analyze. Understand.
 
+<p align="center">
+  <img src="docs/assets/cli.png" width="840" alt="CODEVANTA CLI - real output of info, functions and xrefs against a committed PE sample"><br>
+  <em>CLI - info, functions, xrefs on a committed PE sample</em><br><br>
+  <img src="docs/assets/gui.png" width="840" alt="CODEVANTA read-only web dashboard served on loopback"><br>
+  <em>Read-only web dashboard (codevanta gui)</em><br><br>
+  <img src="docs/assets/callgraph.png" width="840" alt="Self-contained HTML call graph export with pan and zoom"><br>
+  <em>HTML call graph export - 97 nodes (codevanta callgraph --format html)</em>
+</p>
+
+
 CODEVANTA is an AI-powered code intelligence, reverse engineering, and binary
 analysis platform. It helps engineers, security researchers, and analysts
 understand software faster — from source code to executables with missing
@@ -169,7 +181,7 @@ Phase 2 adds the first reverse-engineering views on top of the phase 1 engine:
   `codevanta_diff`, `codevanta_jump_table`, `codevanta_function_hash`,
   `codevanta_xrefs`, `codevanta_cfg`, `codevanta_callgraph`,
   `codevanta_session_save`, and `codevanta_session_list`, alongside the five
-  phase 1 tools (fifteen in total). `codevanta_diff` takes `max_functions`,
+  phase 1 tools. `codevanta_diff` takes `max_functions`,
   `deep`, `semantic`, and `threshold`, so the phase 2j pairing pass is reachable
   from an agent without a separate `codevanta_similarity` call.
 - **`analyze` integration** (`core/report.py`) — the `codevanta analyze` JSON
@@ -218,10 +230,10 @@ tools. Phase 2i adds the `alignment`/`array_groups` layout hints on a struct
 suggestion, the `function_similarity`/`normalized_tokens` API, and the
 `codevanta_struct` MCP tool. Phase 2j adds the opt-in semantic pairing pass on the
 binary diff (`semantic=True`, `threshold` defaulting to `0.9`), the
-`codevanta_similarity` MCP tool (fifteen tools), and the `signed` mnemonic hint on
+`codevanta_similarity` MCP tool, and the `signed` mnemonic hint on
 struct fields, reachable as `diff --semantic --threshold` and as the
 `codevanta struct` footer `signed:` line. Phase 2k adds the `deep` / `semantic` /
-`threshold` arguments to the `codevanta_diff` MCP tool (fifteen tools, no new
+`threshold` arguments to the `codevanta_diff` MCP tool (no new
 registration), the semantic pass's cross-architecture guard — the pass is skipped
 with a warning naming both `BinaryInfo.architecture` tokens, which are compared
 after trimming whitespace and lower-casing only, so a hand-built `AMD64` does not
@@ -241,8 +253,17 @@ scope, confidence semantics, and limitations.
 
 ## Installation
 
+**From PyPI** (recommended):
+
+```powershell
+python -m pip install codevanta
+```
+
+**From source** (development install with the dev extras):
+
 ```powershell
-cd D:\PALIKASIKU\CODEVANTA
+git clone https://github.com/kevindoni/CODEVANTA.git
+cd CODEVANTA
 python -m pip install -e ".[dev]"
 ```
 
@@ -258,47 +279,46 @@ installs, and the full setup/uninstall reference.
 ## Usage
 
 ```powershell
-codevanta info      C:\Windows\System32\notepad.exe
-codevanta functions C:\Windows\System32\kernel32.dll --limit 8
-codevanta strings   C:\Windows\System32\notepad.exe --min-length 8
-codevanta entropy   C:\Windows\System32\notepad.exe --threshold 7.2
-codevanta disasm    C:\Windows\System32\notepad.exe --count 40
-codevanta analyze   samples\elf64_text.bin --output samples\report.json
+codevanta info      samples\pe64_text.bin
+codevanta functions samples\pe64_text.bin --limit 8
+codevanta strings   samples\macho64_text.bin --min-length 8
+codevanta entropy   samples\pe64_text.bin --threshold 7.2
+codevanta disasm    samples\pe64_text.bin --count 40
+codevanta analyze   samples\elf64_text.bin --output report.json
 
 # Phase 2
-codevanta analyze   C:\Windows\System32\notepad.exe --xrefs --cfg       # report + xrefs + cfg
-codevanta analyze   C:\Windows\System32\notepad.exe                     # phase 1 only
-codevanta analyze   C:\Windows\System32\notepad.exe --xref-limit 200 --xrefs -o report.json
-codevanta xrefs     C:\Windows\System32\notepad.exe --limit 40
-codevanta cfg       C:\Windows\System32\notepad.exe --address 0x140001000
-codevanta cfg       C:\Windows\System32\notepad.exe --address 0x140001000 --traversal recursive
-codevanta cfg       C:\Windows\System32\notepad.exe --address 0x140001000 --traversal recursive --resolve-indirect
-codevanta jump-table C:\Windows\System32\notepad.exe --address 0x140003000
-codevanta jump-table C:\Windows\System32\notepad.exe --address 0x140003000 --entries 64 --json
-codevanta diff      samples\v1.bin samples\v2.bin
-codevanta diff      samples\v1.bin samples\v2.bin --max-functions 20000 --json
-codevanta diff      samples\v1.bin samples\v2.bin --semantic
-codevanta diff      samples\v1.bin samples\v2.bin --semantic --threshold 0.75 --json
-codevanta callgraph C:\Windows\System32\notepad.exe --format dot -o callgraph.dot
-codevanta callgraph C:\Windows\System32\notepad.exe --format graphml -o callgraph.graphml
-codevanta callgraph C:\Windows\System32\notepad.exe --format html -o callgraph.html
+codevanta analyze   samples\pe64_text.bin --xrefs --cfg       # report + xrefs + cfg
+codevanta analyze   samples\pe64_text.bin                     # phase 1 only
+codevanta analyze   samples\pe64_text.bin --xref-limit 200 --xrefs -o report.json
+codevanta xrefs     samples\pe64_text.bin --limit 40
+codevanta cfg       samples\pe64_text.bin                     # entry point, linear traversal
+codevanta cfg       samples\pe64_text.bin --traversal recursive
+codevanta cfg       samples\pe64_text.bin --traversal recursive --resolve-indirect
+codevanta jump-table samples\pe64_text.bin --address 0x140001000
+codevanta jump-table samples\pe64_text.bin --address 0x140001000 --entries 64 --json
+codevanta diff      samples\pe64_text.bin samples\macho64_text.bin
+codevanta diff      samples\pe64_text.bin samples\macho64_text.bin --max-functions 20000 --json
+codevanta diff      samples\pe64_text.bin samples\macho64_text.bin --semantic
+codevanta diff      samples\pe64_text.bin samples\macho64_text.bin --semantic --threshold 0.75 --json
+codevanta callgraph samples\pe64_text.bin --format dot -o callgraph.dot
+codevanta callgraph samples\pe64_text.bin --format graphml -o callgraph.graphml
+codevanta callgraph samples\pe64_text.bin --format html -o callgraph.html
 Invoke-Item callgraph.html   # drag to pan, wheel to zoom, search labels, filter by kind
-codevanta analyze   C:\Windows\System32\notepad.exe --callgraph -o report.json
-codevanta session save C:\Windows\System32\notepad.exe --notes "baseline triage"
+codevanta analyze   samples\pe64_text.bin --callgraph -o report.json
+codevanta session save samples\pe64_text.bin --notes "baseline triage"   # prints: session saved: <id>
 codevanta session list --limit 10
-codevanta session show 4f9c1a7b2d3e
-codevanta session annotate 4f9c1a7b2d3e 0x401000 "decrypts config with XOR 0x5a"
-codevanta session notes 4f9c1a7b2d3e
-codevanta struct    C:\Windows\System32\notepad.exe --address 0x140001000
-codevanta struct    samples\handle.bin --function process --include-stack --json
+codevanta session show SESSION_ID      # the id that `session save` printed
+codevanta session annotate SESSION_ID 0x140001000 "decrypts config with XOR 0x5a"
+codevanta session notes SESSION_ID
+codevanta struct    samples\pe64_text.bin --function codevanta_sample_main --include-stack --json
 
 # Phase 3
-codevanta decompile C:\Windows\System32\notepad.exe 0x1400019c0 --backend native
+codevanta decompile samples\pe64_text.bin 0x140001000 --backend native
 codevanta decompile samples\pe64_text.bin --json
 codevanta decompile samples\pe64_text.bin --max-instructions 20 --output rendering.c
 codevanta emulate   samples\pe64_text.bin                              # returns 42
 codevanta emulate   samples\pe64_text.bin --set rdi=2 --mem 0x600000=48454c4c4f
-codevanta emulate   C:\Windows\System32\notepad.exe --resolve-target   # jmp/call [rip+..]
+codevanta emulate   samples\pe64_text.bin --resolve-target   # jmp/call [rip+..]
 
 # Phase 5 — symbol-grade views and dynamic sessions
 codevanta dwarf     samples\hello-dwarf                                # DWARF symbols + type layouts
@@ -326,8 +346,11 @@ hinted anything. The same data comes back from Python and JSON:
 ```python
 from codevanta.analysis.binary_diff import diff_binaries
 
-# Leftovers paired by normalized instruction-shape similarity (default 0.9)
-diff = diff_binaries("samples/v1.bin", "samples/v2.bin", semantic=True, threshold=0.9)
+diff = diff_binaries("samples/pe64_text.bin", "samples/macho64_text.bin")
+print(diff.identical, len(diff.functions_added), len(diff.functions_removed))
+# With semantic=True, the leftovers left unpaired by address and name matching
+# are additionally scored by normalized instruction-shape similarity
+# (threshold defaults to 0.9) and reported in `functions_changed`.
 for delta in diff.functions_changed:
     print(hex(delta.address), delta.similarity)  # None unless the pair was scored
 ```
@@ -430,7 +453,7 @@ codevanta gui --no-browser     # print the URL and wait
 
 `codevanta gui` serves one self-contained dashboard page over a loopback-only,
 read-only HTTP server — no extra dependencies, no network access, and the
-analysed file is never executed or written. The page drives fourteen JSON routes
+analysed file is never executed or written. The page drives these JSON routes
 (`/api/health`, `/api/info`, `/api/functions`, `/api/strings`, `/api/xrefs`,
 `/api/cfg`, `/api/struct`, `/api/callgraph`, `/api/diff`, `/api/decompile`,
 `/api/emulate`, `/api/symbolic`, `/api/session_save`, `/api/session_list`), each
@@ -472,7 +495,7 @@ Safety model: every run prints the exact file changes and a diff first; nothing
 is written without `--yes` (or an interactive confirmation); existing configs
 are backed up as `*.codevanta.bak`; re-running the same command is a no-op.
 
-MCP tools (twenty-two): `codevanta_info`, `codevanta_functions`,
+MCP tools: `codevanta_info`, `codevanta_functions`,
 `codevanta_strings`, `codevanta_disasm`, `codevanta_analyze`,
 `codevanta_xrefs`, `codevanta_cfg`, `codevanta_callgraph`, `codevanta_diff`,
 `codevanta_jump_table`, `codevanta_function_hash`, `codevanta_similarity`,
@@ -563,12 +586,12 @@ plus smoke-tests the wheel on 3.13.
 - [Project specification](PROJECT_SPEC.md)
 - [Architecture](docs/architecture.md)
 - [API reference](docs/api.md) — every public Python entry point, the evidence
-  contract, the fourteen dashboard routes, and the twenty-two MCP tools
+  contract, the dashboard routes, and the MCP tools
 - [Sample binaries](docs/samples.md) — the committed PE/Mach-O/ELF fixtures and
   how to regenerate them
 - [Contributor attribution](docs/attribution.md) — how agent commits are credited,
   and how to make an agent appear in GitHub's contributor graph
-- [Release checklist](docs/release-checklist.md) — the pending PyPI publisher,
+- [Release checklist](docs/release-checklist.md) — the PyPI trusted publisher,
   the `pypi` environment, dry runs, tagging and CI re-runs (maintainers)
 - [Phase 2 — cross-references, CFGs, sessions](docs/phase2.md)
 - [Phase 2b — call graphs, graph export, session annotations](docs/phase2b.md)
@@ -593,11 +616,11 @@ from `src/`. A phase can be **delivered with named gaps** — those gaps are the
 
 | Phase | Delivered | Open |
 |-------|-----------|------|
-| **1 · Foundation** | ✅ PE / ELF / Mach-O (fat slices too) / DEX loaders — `core/loader.py:363-379` (`dex\n` magic → `_load_dex`)<br>✅ Disassembly, ASCII + UTF-16 strings, function discovery, JSON evidence report — `core/disassembler.py`, `core/strings.py`, `core/functions.py`, `core/report.py`<br>✅ Per-section entropy and packing triage — `core/entropy.py` (`shannon_entropy`, `analyze_entropy`), `codevanta entropy`<br>✅ CLI: 20 commands (19 `@app.command()` + `mcp serve`) plus the `session` sub-app with 5 subcommands — `cli/main.py`<br>✅ MCP server exposing 22 tools — `mcp_server/server.py` (`build_server().list_tools()` returns 22)<br>✅ Guided agent setup for Claude Code, Cursor, Cline and VS Code — `setup/` (`clients.py`, `plan.py`, `apply.py`, `verify.py`) | ⬜ **.NET (CLR), WebAssembly and JVM `.class`/JAR formats** — `loader.py` recognises PE, ELF, Mach-O and DEX only |
-| **2 · RE views** | ✅ Cross-references, incl. `call_import` / `call_indirect` slot resolution — `analysis/xrefs.py`<br>✅ Linear **and** recursive CFG — `analysis/cfg.py` (`build_cfg`, `build_recursive_cfg`), `codevanta cfg --traversal recursive`<br>✅ Call graphs with DOT / GraphML / HTML export — `analysis/callgraph.py`, `analysis/graph_export.py`, `analysis/html_view.py`<br>✅ Absolute and relative jump tables — `analysis/jump_tables.py` (`MODE_ABSOLUTE`, `MODE_RELATIVE`)<br>✅ SQLite sessions with address annotations — `storage/session.py`, `codevanta session save/list/show/annotate/notes`<br>✅ Structural binary diff, function fingerprints, function similarity — `analysis/binary_diff.py`, `analysis/function_hash.py`<br>✅ Struct-field recovery — `analysis/type_recovery.py`, `codevanta struct`<br>✅ Read-only loopback dashboard, 14 endpoints — `gui/server.py` (`ROUTES`) | ⬜ **Live debugger execution** — `codevanta attach` states outright that "the provider is never launched: this command writes a file and prints a command line"; the gdb/Frida session layer generates scripts and replays traces (`analysis/dynamic.py`, `analysis/trace.py`) but nothing runs gdb/Frida against a target<br>✅ GUI session persistence — `/api/session_save` and `/api/session_list` over `storage/session.py`<br>⬜ **Graph-oriented viewer application** — the shipped viewer is the static HTML/SVG export (`analysis/html_view.py`), not an interactive app |
+| **1 · Foundation** | ✅ PE / ELF / Mach-O (fat slices too) / DEX loaders — `core/loader.py` (`dex\n` magic → `_load_dex`)<br>✅ Disassembly, ASCII + UTF-16 strings, function discovery, JSON evidence report — `core/disassembler.py`, `core/strings.py`, `core/functions.py`, `core/report.py`<br>✅ Per-section entropy and packing triage — `core/entropy.py` (`shannon_entropy`, `analyze_entropy`), `codevanta entropy`<br>✅ CLI — see `codevanta --help` (the `session` sub-app adds its own subcommands) — `cli/main.py`<br>✅ MCP server exposing the analysis tools — `mcp_server/server.py` (`build_server().list_tools()`)<br>✅ Guided agent setup for Claude Code, Cursor, Cline and VS Code — `setup/` (`clients.py`, `plan.py`, `apply.py`, `verify.py`) | ⬜ **.NET (CLR), WebAssembly and JVM `.class`/JAR formats** — `loader.py` recognises PE, ELF, Mach-O and DEX only |
+| **2 · RE views** | ✅ Cross-references, incl. `call_import` / `call_indirect` slot resolution — `analysis/xrefs.py`<br>✅ Linear **and** recursive CFG — `analysis/cfg.py` (`build_cfg`, `build_recursive_cfg`), `codevanta cfg --traversal recursive`<br>✅ Call graphs with DOT / GraphML / HTML export — `analysis/callgraph.py`, `analysis/graph_export.py`, `analysis/html_view.py`<br>✅ Absolute and relative jump tables — `analysis/jump_tables.py` (`MODE_ABSOLUTE`, `MODE_RELATIVE`)<br>✅ SQLite sessions with address annotations — `storage/session.py`, `codevanta session save/list/show/annotate/notes`<br>✅ Structural binary diff, function fingerprints, function similarity — `analysis/binary_diff.py`, `analysis/function_hash.py`<br>✅ Struct-field recovery — `analysis/type_recovery.py`, `codevanta struct`<br>✅ Read-only loopback dashboard — `gui/server.py` (`ROUTES`) | ⬜ **Live debugger execution** — `codevanta attach` states outright that "the provider is never launched: this command writes a file and prints a command line"; the gdb/Frida session layer generates scripts and replays traces (`analysis/dynamic.py`, `analysis/trace.py`) but nothing runs gdb/Frida against a target<br>✅ GUI session persistence — `/api/session_save` and `/api/session_list` over `storage/session.py`<br>⬜ **Graph-oriented viewer application** — the shipped viewer is the static HTML/SVG export (`analysis/html_view.py`), not an interactive app |
 | **3 · Decompilation** | ✅ Pseudo-C through three providers — `analysis/decompile.py`, `analysis/decompilers/` (`native`, `angr`, `ghidra` reported by `available_backends()`)<br>✅ Type propagation over decompiled output — `analysis/type_propagation.py`<br>✅ Decompiler parity enforced in CI instead of assumed — `.github/workflows/ci.yml` jobs `decompile-parity` and `ghidra-parity` | ⬜ **Embedded Python scripting** — no script command and no sandboxed interpreter; `session` stores annotations only |
-| **4 · Emulation** | ✅ Bounded, offline emulation that never executes on the host, with explicit `return` / `budget` / `unmapped` / `unsupported` stop reasons — `analysis/emulate.py` (Unicorn), `codevanta emulate`<br>✅ 29 emulation tests — `tests/test_emulate.py` | ⬜ **Typed / SSA IR lifting** — `ir/base.py` and `ir/adapters/` are a contract plus an empty registry ("Concrete adapters arrive in phase 4")<br>⚠️ **Symbolic execution** — bounded path exploration over Unicorn exists (`analysis/symbolic.py`, seeded branches recorded as assumptions); no solver-based symbolic execution (`Simulator`/`SimulationManager`/Z3) in `src/` |
-| **5 · Platform** | ✅ CI/CD with real gates — `ci.yml` runs 7 job runs (3 Python versions × `test`, plus `type-check` (mypy), `package` (wheel smoke test), `decompile-parity`, `ghidra-parity`) and `pyproject.toml` sets `fail_under = 85` coverage<br>✅ Release pipeline — `release.yml`: `build` → `publish-pypi` (trusted publishing) → `github-release`<br>✅ Dynamic provider probing, script generation and trace replay reachable from the CLI — `analysis/dynamic.py`, `analysis/trace.py` (`parse_gdb_trace`, `parse_frida_trace`), `codevanta attach`, `codevanta trace` | ✅ **Plugin SDK** — `plugins/` (entry-point discovery, bounded `run_plugin`, built-in registry, `MetricsAnalyzer`)<br>⬜ **Full AI layer** and **multi-user** — no auth, user or tenant model exists in `src/`<br>✅ **Evidence bundle** — `analysis/evidence_bundle.py` (manifest, per-entry tamper detection) and `scripts/report_bundle.py` (report + trace → verifiable bundle)<br>✅ **Fuzz and benchmark** — `scripts/fuzz_parsers.py` (`fuzz-smoke` job) and `scripts/bench_gate.py` (`benchmark` job, informational)<br>✅ **Windows / macOS CI** — `test-platform` matrix py3.13 on windows-latest and macos-latest (non-blocking platform signal)<br>⬜ **PyPI release** — publishing is wired but has never run: `git tag -l` is empty, so no `v*` tag has been cut |
+| **4 · Emulation** | ✅ Bounded, offline emulation that never executes on the host, with explicit `return` / `budget` / `unmapped` / `unsupported` stop reasons — `analysis/emulate.py` (Unicorn), `codevanta emulate`<br>✅ Emulation test suite — `tests/test_emulate.py` | ⬜ **Typed / SSA IR lifting** — `ir/base.py` and `ir/adapters/` are a contract plus an empty registry ("Concrete adapters arrive in phase 4")<br>⚠️ **Symbolic execution** — bounded path exploration over Unicorn exists (`analysis/symbolic.py`, seeded branches recorded as assumptions); no solver-based symbolic execution (`Simulator`/`SimulationManager`/Z3) in `src/` |
+| **5 · Platform** | ✅ CI/CD with real gates — `ci.yml` gates the test matrix, `type-check` (mypy), the wheel smoke test, `decompile-parity` and `fuzz smoke`, with best-effort `ghidra-parity`, an informational `benchmark`, and non-blocking windows/macOS platform runs (see the workflow for the current job list) and `pyproject.toml` sets `fail_under = 85` coverage<br>✅ Release pipeline — `release.yml`: `build` → `publish-pypi` (trusted publishing) → `github-release`; used for the v0.1.0 release<br>✅ Dynamic provider probing, script generation and trace replay reachable from the CLI — `analysis/dynamic.py`, `analysis/trace.py` (`parse_gdb_trace`, `parse_frida_trace`), `codevanta attach`, `codevanta trace` | ✅ **Plugin SDK** — `plugins/` (entry-point discovery, bounded `run_plugin`, built-in registry, `MetricsAnalyzer`)<br>⬜ **Full AI layer** and **multi-user** — no auth, user or tenant model exists in `src/`<br>✅ **Evidence bundle** — `analysis/evidence_bundle.py` (manifest, per-entry tamper detection) and `scripts/report_bundle.py` (report + trace → verifiable bundle)<br>✅ **Fuzz and benchmark** — `scripts/fuzz_parsers.py` (`fuzz-smoke` job) and `scripts/bench_gate.py` (`benchmark` job, informational)<br>✅ **Windows / macOS CI** — `test-platform` matrix py3.13 on windows-latest and macos-latest (non-blocking platform signal)<br>✅ **PyPI release** — v0.1.0 published through trusted publishing: a `v*` tag drives `release.yml` |
 
 ## Product principles
 

{codevanta-0.1.0 → codevanta-0.2.0}/docs/install.md

@@ -37,14 +37,15 @@ uv tool install git+https://github.com/kevindoni/CODEVANTA.git   # isolated
 # from a local clone: python -m pip install -e ".[dev]"
 ```
 
-## From PyPI (after the first release)
+## From PyPI
 
 ```powershell
-uv tool install codevanta       # or: pipx install codevanta
+python -m pip install codevanta   # or: uv tool install codevanta / pipx install codevanta
 codevanta setup --dry-run --client claude
 ```
 
-Until the first PyPI release is published, use the GitHub one-liners above.
+The GitHub one-liners above install from `main`; use them when you want the
+latest unreleased changes instead of the published version.
 
 ## Connect a coding agent
 

{codevanta-0.1.0 → codevanta-0.2.0}/docs/repository-settings.md

@@ -11,7 +11,7 @@ Applied through the GitHub API (`PUT /repos/kevindoni/CODEVANTA/branches/main/pr
 |------|-------|
 | Require a pull request before merging | yes (0 approvals, so a maintainer can self-merge) |
 | Dismiss stale approvals on new commits | yes |
-| Require status checks | `test (py3.11)`, `test (py3.13)`, `build and smoke-test wheel` |
+| Require status checks | `test (py3.11)`, `test (py3.13)`, `test (py3.14)`, `type-check (mypy)`, `build and smoke-test wheel`, `decompile-parity`, `fuzz smoke (parser hardening)` — the full CI run is listed in §6 |
 | Require branches to be up to date | yes (strict) |
 | Require linear history | yes (squash or rebase merges only) |
 | Block force pushes | yes |
@@ -74,7 +74,7 @@ both files to the GitHub release. Update `CHANGELOG.md` before tagging.
 
 | Workflow | Trigger | Jobs |
 |----------|---------|------|
-| `ci.yml` | push to `main`, pull requests, manual | lint + tests on 3.11/3.13, wheel build and clean-venv smoke test |
+| `ci.yml` | push to `main`, pull requests, manual | lint + tests on 3.11/3.13/3.14, mypy type-check, wheel build and clean-venv smoke test, `decompile-parity` (angr), `ghidra-parity` (best effort), `fuzz smoke`, `benchmark` (informational), py3.13 windows/macos platform runs (non-blocking) |
 | `release.yml` | tag `v*` | build, PyPI trusted publish, GitHub release assets |
 
 Python 3.11, 3.13, and 3.14 are in the CI matrix. Older interpreters are

{codevanta-0.1.0 → codevanta-0.2.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "codevanta"
-version = "0.1.0"
+version = "0.2.0"
 description = "CODEVANTA — Advanced Code Intelligence: AI-Powered Reverse Engineering & Binary Analysis Platform"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -50,6 +50,10 @@ dev = [
   "build>=1.2",
   "unicorn>=2.0",
   "pyelftools>=0.31",
+  "z3-solver>=4.13",
+]
+solver = [
+  "z3-solver>=4.13",
 ]
 emulation = [
   "unicorn>=2.0",