11 Commits

Include renames

Author	SHA1	Message	Date
morluto	0386efd1e1	fix(pcap): retain producer contradiction diagnostics (#7937) ... * fix(pcap): retain producer contradiction diagnostics * test(pcap): align DNS fixture with empty captures	2026-10-29 08:43:14 +08:00
gensokyo-dev	8f9af920ef	fix(pcap): redact HTTP credentials in failed capture diagnostics (#7871) ... Project bounded JSON diagnostics using shared URI roles and source spans. Keep complete parser input unchanged and compute safe diagnostics lazily. Preserve byte facts, error classification, path data and cleanup ownership. Reuse JSON escape-coordinate mapping with IDA diagnostics. Fixes #7812 Assisted-by: Reimu (gensokyo-skills:reimu-incident-triage) Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing) Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis)	2026-10-28 18:14:22 +00:00
3 people	1201c25542	fix(ci): align static checks and regression fixtures with current contracts (#7349) ... * fix(ci): retire unused internal analysis declarations * test: use an admitted app bundle for provider routing (cherry picked from commit 00aa17f12a) * test: keep bundle routing coverage outside oversized group (cherry picked from commit 8658353b0d) * fix(ci): align regression fixtures with current admission contracts * test: bind extraction close fixtures to their ZIP digest (cherry picked from commit 626d0250db) * test(cli): match typed analysis outcomes in function detail fixture * test(ghidra): preserve empty Java property separator framing * test(electron): retain unknown IPC ownership for native module gaps * fix(electron): share source-scoped call path identity * test(captures): assert safe source identity on SAZ refusal * test(apple): match root occurrence kind to inventory manifest * fix(examples): align directory root occurrence identity * test(electron): align equivalent fixture assertions with upstream * test(process): assert retained capture root identity * test(windows): declare the PE fixture optional header * test(ci): refresh owned registration and verifier fixtures * test(setup): use owned registrations for refresh fixtures * test(process): control unavailable ownership in CLI cleanup fixture * test(process): guard controlled compiler output arguments * test(setup): align equivalent entrypoint guards with upstream * test(process): release the cleanup target through an owned gate * test(ci): align semantic identities and owned fixture facts * test(pcap): retain the upstream DNS wire fixture branch * test(pcap): use the canonical wire ownership fixture * test(pcap): assert exact DNS wire query labels * test(ci): preserve admission and ownership fixture prerequisites * test(ci): align authenticated fixture and cleanup boundaries * test(windows): align native artifact fixtures with upstream * test(android): request complete evidence for inline MCP contracts * test: avoid pinning diagnostic wording * test: verify cleanup diagnostics at their source * test: strengthen evidence and cleanup checks * test: avoid pinning registration guidance --------- Co-authored-by: Plastic-time <Plastic-time@users.noreply.github.com> Co-authored-by: morluto <76467478+morluto@users.noreply.github.com>	2026-10-27 21:24:30 +08:00
morluto	59dc48db20	fix(pcap): attribute DNS answers using wire identities	2026-10-27 13:54:20 +08:00
morluto	4572f31589	fix(pcap): preserve DNS class when attributing answers	2026-10-27 12:56:10 +08:00
morluto	25375924f7	fix(pcap): attribute DNS addresses by record owner	2026-10-27 12:42:51 +08:00
morluto	7958e15892	fix(pcap): preserve header snapshot limit with inferred lengths	2026-10-24 10:35:50 +08:00
morluto	4cb1f1d820	fix(pcap): preserve HTTP/2 URI and selected-tool admission facts	2026-10-24 02:35:59 +08:00
morluto	51e5938776	fix(pcap): retain UTF-8 decoding failures across tool output ... Validate supervised text once before version or capture interpretation. Exercise POSIX client probes through compiled CLI and stdio MCP; capture-summary native bounds remain host-specific. Fixes #6775	2026-10-24 00:11:41 +08:00
morlutoandMert Kaya	796faa0e4e	fix(pcap): preserve exact UTC capture instants ... Request epoch timestamps from capinfos and normalize them once at the metadata boundary, preserving nanosecond precision and explicit unknowns. Bound numeric parsing to the producer representation and cover negative fractions, calendar limits, malformed output and MCP projection. Adapted from PR #4909. Fixes #4907. Validation: 47 passed, 24 platform-specific skips across five focused files; check:fast and test discovery passed. No live Wireshark or Linux/Windows capture execution was performed on this macOS host. Co-authored-by: Mert Kaya <47145541+mertkayacs@users.noreply.github.com>	2026-10-18 07:40:25 +08:00
Quentin LimoandN0zoM1z0	9581e067ad	feat(pcap): add bounded capture summaries through CLI and MCP ... Summarize saved Wireshark4.x captures with enforced native resource limits, serialized admission, stable snapshot verification and retained fact/text pages. Preserve complete inventories within resource budgets and source uncertainty; report cleanup failure with partial Evidence and retained ownership. Verified six recorded corpora /13026 packets with independent Scapy/Python oracles, real CLI/MCP/schema parity,60 SNI names,132 DNS addresses and1000 URIs. Real TShark CI now exercises summary/paging. Actual Windows/Bun Wireshark remains unverified; macOS capture requires a separate enforceable-bound decision. Co-authored-by: 3QL <85309073+3QL@users.noreply.github.com> Co-authored-by: N0zoM1z0 <161784452+N0zoM1z0@users.noreply.github.com>	2026-10-13 04:53:03 +00:00