6.8 KiB
Capability Source Matrix
Date: 2026-07-10
Stage: C log-backed receive implementation
Evidence index: docs/source-discovery/2026-07-09-n12-pre-zyl-index.md
Schema notes: docs/source-discovery/2026-07-09-n12-pre-zyl-schema-notes.md
Source priority
- Existing bridge / API / local service.
- Local data, log, cache, or database source.
- UIA helper source through C# WinHelper.
- Network/protocol source.
- Mock source for tests only.
Matrix
| MCP tool | Primary source | Fallback source | Evidence file | Decision status | Next implementation slice |
|---|---|---|---|---|---|
isphere_receive_messages |
decrypted PacketReader.ProcessPacket XMPP <message> stanzas via internal/isphere.EncryptedPacketLogSource; configured by ISPHERE_PACKET_LOG_FILE or ISPHERE_PACKET_LOG_DIR |
copied MsgLib.db message tables through x86 read-only sidecar list_messages selected explicitly by source_preference="msglib_readonly"; decrypted Smark.SendReceive transport stanzas; decrypted SaveToDB Chat_OnMessageArrived traces |
docs/source-discovery/2026-07-09-n12-pre-zyl-schema-notes.md#field-mapping-evidence; docs/source-discovery/2026-07-10-dotnet-wrapper-static-analysis.md; docs/source-discovery/2026-07-10-db-backed-receive-source-design.md |
C20 supports and validates the current safe receive-message contract args; C32 wires optional MsgLib display metadata into receive-message sender_name and conversation.display_name; C33 proves this path through a real copied-DB MCP smoke; C35 maps MsgLib message tables; C36 adds metadata-only message_sources; C37 defines bounded list_messages design; C38 implements sidecar/Go-wrapper list_messages with sanitized copied-DB verification; C39 adds a Go adapter from ListMessages to the receive-message domain model; C40 adds tool-level explicit msglib_readonly source selection; C41 wires env-configured MsgLib receive source and optional copied-DB smoke while auto remains PacketReader/log-backed |
C42 operator hardening and PacketReader-vs-MsgLib reconciliation precheck |
isphere_search_contacts |
bare sender/receiver JIDs extracted from normalized log-backed messages loaded from configured PacketReader file or directory source | validated copied MsgLib.db tables: TD_Roster, TD_CustomEffigy, tblRecent, tblChatLevel, tblPersonMsg; decrypted roster/contact stanzas from Smark.SendReceive; UIA helper source if display names are still missing |
docs/source-discovery/2026-07-10-msglib-readonly-schema-extraction.md |
C34 documents how to enable optional MsgLib contact display enrichment and verify sanitized MCP output; search enrichment remains available | C37 bounded DB-backed receive-source design |
isphere_search_groups |
decrypted PacketReader.ProcessPacket type="groupchat" stanzas and conference/MUC JIDs loaded from configured PacketReader file or directory source |
validated copied MsgLib.db tables: tblMsgGroupPersonMsg, TD_WorkGroupAuth, tblRecent; UIA helper source if group display names are still missing |
docs/source-discovery/2026-07-10-msglib-readonly-schema-extraction.md; C9 ignored-log scan: PacketReader 86 groupchat/86 conference hits; Smark 24 groupchat/658 conference/631 muc hits |
C34 documents how to enable optional MsgLib group display enrichment and verify sanitized MCP output; search enrichment remains available | C37 bounded DB-backed receive-source design |
isphere_receive_files |
decrypted PacketReader.ProcessPacket file-transfer message stanzas via internal/isphere.ListFilesFromMessages and isphere_receive_files list mode; configured PacketReader file or directory source; zyl\importal\<hash> cache entries remain unlinked |
decrypted Smark.SendReceive and SaveToDB traces for file-reference reconciliation; future UIA/client connector for download |
docs/source-discovery/2026-07-09-n12-pre-zyl-schema-notes.md#c12-file-transfer-evidence-precheck |
C22 verifies safe file-list contract args; no log-to-cache/download mapping yet | defer download mapping; precheck contact/group display-name evidence |
isphere_send_message |
none validated yet | existing bridge/API/local service preferred; UIA write connector only after internal-sandbox action evidence; network/protocol connector only after protocol discovery | docs/source-discovery/2026-07-10-send-message-source-precheck.md |
C15 blocked: contract exists, but no committed bridge/API/local service, helper write op, UIA action chain, or protocol connector is validated | do not implement write behavior; harden existing read source configuration |
isphere_send_file |
none validated yet | depends on send-message connector plus outbound file/upload evidence | docs/source-discovery/2026-07-10-send-message-source-precheck.md |
blocked behind isphere_send_message connector selection and file upload/source policy |
defer until send-message connector is validated |
Stage C entry rule
Open implementation only for the selected row whose evidence maps concrete fields to the MCP output contract. After Stage B2, isphere_receive_messages satisfies the entry rule through decrypted PacketReader.ProcessPacket XML shape.
Stage C first slice recommendation
Start Stage C with a narrow log-backed isphere_receive_messages source abstraction:
- Implement DES/CBC/PKCS7 line decryption for
IMPP.Util.Log.LogSecurityPolicyformat. - Implement a parser for decrypted
PacketReader.ProcessPacketXMPP<message>stanzas. - Normalize only redacted test fixtures into message structs first.
- Add the MCP tool registration after the parser/source abstraction passes tests.
Deferred source work
MsgLib.db has a validated copied read-only open path through the bundled 32-bit System.Data.SQLite.dll and password 123. C27 adds MsgLibReadSidecar as the bounded x86 .NET reader boundary, C28 adds the Go internal/msglib process client, C29 adds bounded display_entities extraction, C30 wires it as optional contact/group MCP enrichment, C31 proves real copied-DB MCP enrichment with sanitized output, C32 reuses it for receive-message display fields, C33 proves that receive display path through a real copied-DB MCP smoke without printing entity values, C34 documents the operator setup/verification path, C35 maps MsgLib message tables to receive-message contract fields without reading row values, C36 adds metadata-only message_sources readiness, C37 defines the bounded DB-backed receive-source design, C38 implements sidecar/Go-wrapper list_messages with sanitized verification, C39 adds a Go adapter from MsgLib list results to the receive-message domain model, C40 adds explicit tool-level msglib_readonly source selection, and C41 wires env-configured explicit MsgLib receive with optional sanitized smoke. The next step is operator hardening and reconciliation precheck; do not silently merge MsgLib rows into the MCP default.