Changelog

0.2.0

Removed MFTParse class (use MftVolume.ReadAllRecords() or MftVolume.FindByName() instead)
Removed MftFileEntry interop struct (internal; replaced by MftRecord)
Replaced uint matchFlags with MatchFlags enum (ExactMatch, Contains, ResolvePaths) across all public APIs
FileUtilities, MFTUtilities, and Kernel32 are now internal
FindByName now takes MatchFlags instead of bool exactMatch / bool resolvePaths (e.g. FindByName(".git", MatchFlags.ExactMatch | MatchFlags.ResolvePaths))
MftVolume.BufferSizeRecords settable property replaced with bufferSizeRecords parameter on MftVolume.Open()
Removed EnsureElevated() (use CanSelfElevate() + TryRunElevated() instead)
Removed MftVolume.ResolvePath(ulong) (use ReadAllRecords(resolvePaths: true) or MftPathUtilities.ResolvePath() with a lookup)
Removed MFTUtilities.GetFileNameForDriveLetter() (use MFTUtilities.GetVolumePath())
Removed unused Kernel32 P/Invoke methods (CloseHandle, ReadFile, SetFilePointerEx, DeviceIoControl)

Added MatchFlags flags enum for type-safe filter options
Added CanSelfElevate() and TryRunElevated(string, int) to ElevationUtilities
Swappable native function indirection (MFTLibNative) for testability
Swappable dependencies in ElevationUtilities for testability
Extracted MftVolume.ExtractDriveLetter() helper
Replaced magic numbers in MftResult with named constants (NativeEntrySize, NativePathEntrySize)
Native error messages (e.g. "Volume is not NTFS", allocation failures) are now surfaced as InvalidOperationException instead of being silently ignored
Fixed path resolution when filter is null
Enabled ContinuousIntegrationBuild for deterministic NuGet DLLs

Expanded test suite from 16 to 80+ tests
Achieved 100% line, branch, method, and full-method coverage
Added admin-elevated test suite (MftVolumeAdminTests)
Added coverage for ElevationUtilities, MftResult, MftRecord, path resolution, native mock indirection
Added combined coverage script for admin + non-admin tests
Tagged interactive UAC tests with TestCategory("Interactive")