XPC and auth-flow capture #1997

New issue

Closed

opened 2026-10-16 21:13:12 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-16 21:13:12 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/morluto/rea/pull/448
Author: @morluto
Created: 7/28/2026
Status: ✅ Merged
Merged: 7/28/2026
Merged by: @morluto

Base: main ← Head: codex/custom-protocol-capture-365

📝 Commits (1)

6fa6f9b feat(protocol): add custom TCP/UDP/IPC/XPC and auth-flow capture

📊 Changes

2 files changed (+330 additions, -0 deletions)

View changed files

➕ src/domain/customProtocolCapture.ts (+173 -0)
➕ tests/customProtocolCapture.test.ts (+157 -0)

📄 Description

Summary

Add support for custom TCP and UDP framing, local IPC, Unix sockets, named pipes, XPC, and authentication/token lifecycle metadata.

Closes #365.

Changes

Transport types: TCP, UDP, IPC, Unix socket, named pipe, XPC
Protocol frames: Captured with direction, source/destination process identity, endpoint addresses, and decoded content
Authentication flows: Stage tracking (init, challenge, response, token exchange, renewal, revocation, failure, success) with correlation IDs
Token lifecycle: issued, refreshed, expired, revoked, renewed
Credential detection: Fields are detected and redacted by default
Utility functions: Filter by transport type, protocol, auth success/failure; compute auth flow duration; correlate process identity

Verification

npm run typecheck   # passes
npx vitest run tests/customProtocolCapture.test.ts  # 9 tests pass

Acceptance criteria

✅ Direction, process identity, endpoint, and source-code correlations are preserved
✅ Secret redaction is enforced (credentials detected and redacted by default)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/morluto/rea/pull/448 **Author:** [@morluto](https://github.com/morluto) **Created:** 7/28/2026 **Status:** ✅ Merged **Merged:** 7/28/2026 **Merged by:** [@morluto](https://github.com/morluto) **Base:** `main` ← **Head:** `codex/custom-protocol-capture-365` --- ### 📝 Commits (1) - [`6fa6f9b`](https://github.com/morluto/rea/commit/6fa6f9b6d9595a480a590766dadcfebb8e7111b5) feat(protocol): add custom TCP/UDP/IPC/XPC and auth-flow capture ### 📊 Changes **2 files changed** (+330 additions, -0 deletions) <details> <summary>View changed files</summary> ➕ `src/domain/customProtocolCapture.ts` (+173 -0) ➕ `tests/customProtocolCapture.test.ts` (+157 -0) </details> ### 📄 Description ## Summary Add support for custom TCP and UDP framing, local IPC, Unix sockets, named pipes, XPC, and authentication/token lifecycle metadata. Closes #365. ## Changes - **Transport types**: TCP, UDP, IPC, Unix socket, named pipe, XPC - **Protocol frames**: Captured with direction, source/destination process identity, endpoint addresses, and decoded content - **Authentication flows**: Stage tracking (init, challenge, response, token exchange, renewal, revocation, failure, success) with correlation IDs - **Token lifecycle**: issued, refreshed, expired, revoked, renewed - **Credential detection**: Fields are detected and redacted by default - **Utility functions**: Filter by transport type, protocol, auth success/failure; compute auth flow duration; correlate process identity ## Verification ```bash npm run typecheck # passes npx vitest run tests/customProtocolCapture.test.ts # 9 tests pass ``` ## Acceptance criteria - ✅ Direction, process identity, endpoint, and source-code correlations are preserved - ✅ Secret redaction is enforced (credentials detected and redacted by default) --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-16 21:13:12 +00:00