fix(extract): recover nested firmware filesystems with native decoders

AGENTS.md

@@ -17,6 +17,14 @@ Keep runtime-data and citation versions synchronized through `cargo-release` rep
 Release notes describe user-facing changes; the first regular release introduces the product and its migration path.
 Use `cargo-dist` for native GitHub platform builds and archive smoke tests; publishing is an explicit maintainer workflow dispatch.
 
+## Firmware extraction
+
+`fat_extract::pipeline` owns the recursive container and embedded-region queue and per-artifact outcomes.
+`output::OutputTree` owns staged publication, path validation, shared output limits, and deferred symlinks.
+SquashFS header, inode, codec, and cached metadata readers remain separate; new formats reuse the output contract.
+Carved images and directory names alone do not establish rootfs recovery; unresolved branches must leave fallback available.
+Explicit native selection must not invoke external filesystem fallback.
+
 ## MCU analysis and terminal reports
 
 **Raw MCU identification** (`fat_analyze::mcu`): Structural vector candidates, family evidence, and code mapping are independent.

CHANGELOG.md

@@ -4,10 +4,13 @@
 
 ### Added
 
+- Native recursive ZIP, TAR, and gzip extraction with SquashFS 2/3/4 decoding, including both byte orders and legacy LZMA block layouts.
+- Extraction manifests include per-artifact lineage, decoder outcomes, limits, and recovery status.
 - An Arch Linux and Omarchy installation guide with tested prerequisites, optional tools, and extraction verification steps.
 
 ### Fixed
 
+- Carved images and empty output directories no longer stop rootfs recovery attempts.
 - Healthy bootloader tmux sessions are reused on tmux versions that sanitize control characters in display formats.
 - Binwalk runs that exit without scanning any files are retried up to twice within the original timeout, preserving failed attempts and reporting a failure if scanning never starts.
 - Automatic native dependency installation recognizes Omarchy and other distributions declaring `ID_LIKE=arch`, while preserving explicitly supported distribution recipes.