chore(main): release hexgraph 0.10.0

[branover]

🤖 I have created a release beep boop

0.10.0 (2026-08-15)

Features

• add a web-UI button to import a directory as a target (#281) (6dbd047)
• add unrestricted HexGraph VR skill (#308) (1ac157f)
• audit the real connection outcome of egress probes (net_list_egress) (#289) (2fae871)
• import a mounted/extracted filesystem directory as a target (#279) (8ef9270)
• integrate Codex project workflows (#307) (b1370c5)
• lazy per-directory loading for the Targets sidebar tree (#276) (3f96c96)

Bug Fixes

• clean up abandoned re_script probes (#309) (c1b4ce7)
• clean up the directory-import modal's recon-toggle copy (#282) (67eb586)
• copy/hash firmware artifacts off the SQLite write lock (ingest/unpack/delete) (#295) (960f54a)
• detach analyze_target's per-child recon loop for large firmware (#278) (b0755f8)
• detach Ghidra enrichment on reveal — target_reveal_dir hung 2+ hours (#275) (ea3ee20)
• detach promote_file's analysis + close its idempotency gap (#274) (d4904fd)
• dirimport database-locked crash + silent skip visibility (#280) (790ab2c)
• disable Non-Returning Functions analyzer under the large-binary fast profile (#284) (567442a)
• dispose the DecompInterface in the researcher Ghidra bridge (leak per decompile) (#273) (ca73b6d)
• eliminate the O(N²) / long lock holds in link_same_code, reachability, and merge (#297) (3b3613f)
• give every seam-routed Ghidra op the dead-bridge degradation (#301) (0ee9ae6)
• hold the SQLite write lock in short bursts so ingest stops hitting "database is locked" (#283) (2c74190)
• index nodes once in extract-at-write enrichment (O(N²) write-lock stall) (#291) (6eeb9ad)
• list_strings greps the whole artifact, not the capped facts (#285) (0b59219)
• make re_search_code's decompile-on-demand grep reuse, bound, and price itself (#298) (a74831c)
• make reveal's Ghidra enrichment opt-in, not automatic (#277) (29d6979)
• never hold the SQLite write lock across slow sandbox work (multi-agent decompile contention) (#288) (b5095d3)
• normalize new Ghidra PIE imports (#310) (2970458)
• read re_hexdump bytes in the sandbox (r2 p8), not host pyelftools (#290) (c51e952)
• rebuild the code->data xref index the large-binary fast profile drops (#306) (9316379)
• recover a doomed session on a failed observation write (stop the SQL leak) (#292) (6e55232)
• release the write lock across fuzz reaper snapshot/teardown + campaign launch (#296) (28e1d71)
• release the write lock across the two remaining Ghidra slow ops (#293) (343149b)
• report the true function count, not the capped inventory slice (#287) (07b0bbb)
• resident Ghidra bridge empties decompiles over time (DecompInterface leak + reused TaskMonitor) (#271) (76c8df0)
• route on positive evidence of death, not on an unanswered probe (#304) (bf303bd)
• route re_resolve's section/symbol reads through the sandbox (drop host pyelftools) (#294) (1acee19)
• route taint through the Ghidra seam, and correct stale/missing tool caveats (#299) (e4444b9)
• route the xref family to warm Ghidra in any mode, not just headless (#286) (4d8130b)

---

This PR was generated with Release Please. See documentation.