Skip to content

v0.2.0

Choose a tag to compare

View all tags
@JameZUK JameZUK released this 23 Jun 19:46
· 27 commits to procmon_parser since this release
v0.2.0
20e9635
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

First tagged release of the modular procmon_mcp package.

Added

  • Parsed-capture cache — reloading an unchanged file is near-instant (29×–146× faster on real captures). New clear_cache tool, no_cache option (+ from_cache in the response), and --no-cache / --clear-cache CLI flags.
  • list_network_connections — capture-wide network triage across all processes.
  • get_network_top_talkers — ranks remote endpoints across the whole capture by event count.
  • Enriched network records — host/ip/hostname/port, operations, inferred directions, results, count, and first/last-seen timestamps.
  • Packaging — pyproject.toml with a procmon-mcp console script and lxml/psutil/all/dev extras; MIT LICENSE.
  • CI — GitHub Actions across Python 3.10–3.13 with and without lxml, plus an sdk-smoke job that imports the server against the real MCP SDK. Tests grew 78 → 123.

Changed

  • BREAKING: find_network_connections now returns enriched structured records ranked by count, not bare host:port strings.
  • Endpoint parsing accepts resolved service-name ports (domain, https, …) and DNS hostnames.
  • requirements.txt lists only mcp[cli] as required; lxml/psutil are optional.

Fixed

  • Critical: event fields were read on the iterparse start event, silently dropping/nulling events on large captures; now read on end.
  • Exact-match filters returned all events instead of zero for an absent value.
  • Server failed to import on current MCP SDKs (description= → instructions=).
  • Minor error-handling and load-ordering cleanups.

Security

  • Cache files are serialized with Python's pickle module and read back only from the user-owned ~/.procmonmcp/cache directory.

Full details in CHANGELOG.md.

Assets 2
Loading