Merge QS into master - #1372

Merged

mr-tz merged 608 commits into

Aug 19, 2026

This pull request is big! We're only showing the most recent 250 commits

Commits on Jul 17, 2026

Commits on Jul 18, 2026

fix(macho): remove redundant PE rsrc type info
vee1e
committed
cfce1b7

Commits on Jul 19, 2026

refactor(language): share coverage CLI args and logging
vee1e
committed
cf704bc
refactor(layout): thin package exports to compute_layout
vee1e
committed
d350f78

Commits on Jul 20, 2026

refactor(tags): drop unused __all__
vee1e
committed
f921069

Commits on Jul 21, 2026

Merge pull request #1337 from vee1e/refactor/first-class-modular
mr-tz
authored
eb18719

Commits on Jul 26, 2026

Commits on Jul 27, 2026

refactor: remove interim floss.document re-export shim
vee1e
committed
96437ba
refactor: remove floss quantum entry point and alias
vee1e
committed
e06e5d7
test: restore explanatory comments in test_qs
vee1e
committed
dd0211f
test: restore test_analysis_pipeline in test_qs
vee1e
committed
cda9f33
refactor: drop floss.main re-exports; fix call sites
vee1e
committed
c090b94
refactor(render): non-mutating hide filter and single layout check
vee1e
committed
957b14d
refactor(render): hoist layout render imports to module level
vee1e
committed
eb7354d
fix(render): always show enabled recovered-string sections
vee1e
committed
63fab3f
test: restore explanatory round-trip comments in test_qs
vee1e
committed
c1e027e
refactor: drop unused Runtime.layout and Runtime.tags timings
vee1e
committed
75c973a

Commits on Jul 28, 2026

chore(readme): tags are also applied independently of file type
vee1e
committed
1b05672
refactor(results): drop unused tags on stack/decoded strings
vee1e
committed
374262d
style: drop unnecessary bulk_analyze reformats
vee1e
committed
03ee960
style: reformat results.py with project isort/black settings
vee1e
committed
38e5a7d
feat(cli): temporary --no-layout and --no-tags product flags
vee1e
committed
b4c1c62
fix: harden default layout path and clean quantum leftovers
vee1e
committed
47715ef

Commits on Jul 29, 2026

docs: TODO for --load ignoring --no-layout product flags
vee1e
committed
77bb42e

Commits on Jul 30, 2026

fix: correct layout-path static runtime and review nits
vee1e
committed
6a34b48
docs(script): add TODO for bulk analysis
vee1e
committed
9d1f7da

Commits on Jul 31, 2026

refactor: inline static string extraction
vee1e
committed
c4d8105
fix: normalize runtime round trips
vee1e
committed
538a510

Commits on Aug 1, 2026

fix: CI quantumstrand trigger and --no sample argv order
vee1e
committed
b2a62e9
refactor(tests): rename test_qs.py to test_layout.py
vee1e
committed
60e7792
fix(ci): checkout testfiles for build smoke test
vee1e
committed
7ed1275
fix: mmap classic statics; materialize bytes only for layout
vee1e
committed
6890d76
style: drop nargs sample-order comments
vee1e
committed
c087754

Commits on Aug 2, 2026

refactor(tests): drop qs prefix from remaining test modules
vee1e
committed
ae271e6
revert: keep single full-buffer read for statics and layout
vee1e
committed
bedeab4
feat: record sample md5/sha1/sha256 in result metadata
vee1e
committed
d5f00fa

Commits on Aug 4, 2026

Merge pull request #1347 from vee1e/feat/unified-pipeline-iteration-2
mr-tz
authored
c622837

Commits on Aug 7, 2026

add pma json
vee1e
committed
b0ece42
qs-viewer: add favicon
vee1e
committed
15a8522
ignore vercel and bun.lock
vee1e
committed
d46b309

Commits on Aug 11, 2026

feat: migrate CLI flags and add runtime metrics
vee1e
committed
1dc265a
fix: avoid template expansion in release zip step
vee1e
committed
2405bf8
fix: update smoke test flag and import order
vee1e
committed
6f455e1
fix: drop the all pseudo-type from string type flags
vee1e
committed
67a33d5
feat: validate results documents with a full JSON parse
vee1e
committed
7de508c
docs: require -- separator before sample in function examples
vee1e
committed
790f787
docs: show plain usage in help examples
vee1e
committed
beef995
fix: drop --disable-progress flag
vee1e
committed
7cb2501
refactor: rename string type selection variables
vee1e
committed
5d9ebdf
docs: remove outdated json load comment
vee1e
committed
44b888d
refactor: time layout and tag steps in a wrapper
vee1e
committed
873c8bd
test: combine no-args help case into help test
vee1e
committed
e178418
Update floss/cli.py

vee1e
and
mr-tz
authored
3873762
refactor: replace set subset operator with explicit all() key check
vee1e
committed
48095d9
lint: fix black on cli.py
vee1e
committed
e83efb9
Merge branch 'quantumstrand' into feat/prevalence-db-update
Moritz Raabe
committed
361322d

Commits on Aug 12, 2026

refactor: make layout string extraction explicit, drop 'live' naming
vee1e
committed
7dbe90d
refactor: rename string type options to enabled/disabled naming
vee1e
committed
60b6254
test: drop nonexistent-path assertion from binary results-doc test
vee1e
committed
235963c
test: check representative --json option in help output
vee1e
committed
c5c2224
refactor: consistently prefix internal pipeline helpers with underscore
vee1e
committed
5f7a5d2
refactor: use context manager to time layout and tag steps
vee1e
committed
e0eefaf
qs-viewer: match ResultDocument schema and use floss-generated sample
vee1e
committed
e64aac5
refactor: drop underscore prefixes from pipeline helpers
vee1e
committed
585cceb
feat(qs-viewer): rebrand to FLOSS and use floss favicon
vee1e
committed
054bf26
ci(qs-viewer): deploy to Vercel via GitHub Actions
vee1e
committed
080f90d
ci(qs-viewer): fix pinned actions/setup-node sha
vee1e
committed
4bf8120
ci(qs-viewer): deploy via Vercel git integration with npm-only build
vee1e
committed
f0d4f97
feat(qs-viewer): tweak upload hint text
vee1e
committed
3c47ad3
feat(qs-viewer): rename title to FLOSS Graphical Viewer
vee1e
committed
3ef3c9f
refactor: drop redundant always-on layout/tags kwargs in main
vee1e
committed
3244737
refactor: co-locate file type sniffing helpers in utils
vee1e
committed
924a83f
refactor: merge file type and results document detection
vee1e
committed
1164d7d
refactor: clarify layout variable naming in compute_layout
vee1e
committed
68ec89f
refactor: revert pointless Layout return from extract_layout_strings
vee1e
committed
6d03da5
refactor: restore original extract_layout_strings signature
vee1e
committed
9c4da76
refactor: move runtime timing into Runtime.measure
vee1e
committed
3543297
feat(qs-viewer): add light mode theme
vee1e
committed
8b10125
refactor: move layout string extraction into Layout.extract_strings
vee1e
committed
f62f41d
feat(qs-viewer): add light/dark theme toggle button
vee1e
committed
c7f3b95
feat(qs-viewer): use sun/moon svg icon for theme toggle
vee1e
committed
03f1239
refactor: use runtime.measure for analyze timing spans
vee1e
committed
2bb4036
test: assert version appears in --version output
vee1e
committed
2bf26d1
refactor: rename Runtime.measure to measure_and_set_time
vee1e
committed
4235e7b
feat(qs-viewer): show floss logo in sidebar header
vee1e
committed
0692b82
feat(qs-viewer): show total and ignored string count
vee1e
committed
4c6b993
feat(qs-viewer): add fuzzy subsequence search with pre-lowercased corpus
vee1e
committed
6f2e507
feat(qs-viewer): virtualize string list for smooth 100k corpus rendering
vee1e
committed
1b75a61
feat(qs-viewer): add drag-and-drop overlay indicator with background blur
vee1e
committed
432d36d
fix(qs-viewer): survive malformed JSON and render errors instead of black screen
vee1e
committed
622c03c

Commits on Aug 13, 2026

cli: add --plain stub argument
vee1e
committed
763d7c1
cli: remove trailing comma from --analyze-functions help
vee1e
committed
8cfd7ad
pipeline: measure layout and tag phases separately
vee1e
committed
abc052c
utils: single-pass file type detection
vee1e
committed
f7893a3
results: reject unknown fields in measure_and_set_time
vee1e
committed
504e1b5
build_oss_db: derive default output dir from data_root
vee1e
committed
67fc76e
test: drop duplicated --analyze-functions assertion
vee1e
committed
aaa3e00
docs: drop stale quantum-style terminology from comments
vee1e
committed
3cb79bb
scripts: replace deprecated --no with --no-string-type
vee1e
committed
716e1fd
pipeline: reject results documents in load_vw
vee1e
committed
0443166
main: keep --string-type restrictions with --analyze-functions
vee1e
committed
c06bc68
pipeline: keep layout-attempt time in fallback static_strings
vee1e
committed
d9078a6
utils: detect results documents by byte sequence, not full parse
vee1e
committed
b2f2efe
main: implement --plain classic view
vee1e
committed
3c0e11f
utils: widen results detection sniff to 8KB
vee1e
committed
326666b
main: error when --string-type static meets --analyze-functions
vee1e
committed
8597b30
Merge pull request #1355 from vee1e/feat/unified-pipeline-iteration-3
mr-tz
authored
806e1a3
Merge GP hash sets for faster queries and add LFS check
mr-tz
committed
dd001f1
Merge pull request #1326 from mandiant/feat/prevalence-db-update
mr-tz
authored
5b379b1
feat: iteration 4 — filters, columns, summary, and consolidated rendering
vee1e
committed
19dab48
fix(main): handle JSON-mode detection when no argv or combined short flags
vee1e
committed
f05cf68
fix(filter): match --section against the containing top-level section
vee1e
committed
31a9c08
fix(filter): --interesting drops only strings with no non-noisy tag
vee1e
committed
2ed9f04
fix(filter): cap --max-strings per top-level section, not per node
vee1e
committed
b138011
fix(render): make the encoding column independent of offset
vee1e
committed
c88e442
fix(main): validate --query regexes at parse time
vee1e
committed
da3e6c3
refactor: align naming with codebase conventions
vee1e
committed
ee73c64
refactor: remove dead code and duplicated definitions
vee1e
committed
a5ad979
perf: avoid repeated recomputation in filters, grouping, and summary
vee1e
committed
9541818
refactor: reduce verbosity in render dispatch and layout rendering
vee1e
committed
64cb593
test: cover new filter/columns/summary behavior and validate --max-strings
vee1e
committed
1167838
fix(render): tag filters override the default hide rules
vee1e
committed
3dbf3e5
fix(cli): emit a single JSON error object on STDERR in JSON mode
vee1e
committed
c759e3b
feat(cli): support language and all string types
vee1e
committed
bc4d563
fix(summary): count strings under their containing top-level section
vee1e
committed
301726a
fix(render): --plain/--summary no longer mutate the result document
vee1e
committed
9bb9314
refactor: align headings with spec, remove dead wrapper, tighten tests
vee1e
committed
49dc53f
chore(render): drop unused json import from default.py
vee1e
committed
47e24b2
fix(pipeline): extract language strings independently of static strings
vee1e
committed
4cdb2f3
docs(cli): require -- before the sample for multi-value filter flags
vee1e
committed
743b03b
fix(filter): --section descends through Mach-O fat-arch wrappers
vee1e
committed
4ca9bf8
fix(render): --plain applies the render-time filters
vee1e
committed
3fbf1a0
docs(cli): dedupe and expand --structure help
vee1e
committed
9939f40
test: make tests exercise the behavior they name
vee1e
committed
af1a370
chore(render): fix stale docstring and trim restating comments
vee1e
committed
7afd6de
style(render): order import for static_strings_from_layout
vee1e
committed
e4ce010
fix(render): stop truncating columns, drop boundary strings, keep parent strings
vee1e
committed
8e03f2c
fix(summary): escape Rich markup and control chars in high-value strings
vee1e
committed
8f8dc07
fix(render): no classic meta table when a layout exists
vee1e
committed
c5afd82
fix(filter): cap --max-strings per section on fat Mach-O
vee1e
committed
1eab2a7
feat(cli): accept --language auto (the default)
vee1e
committed
f07c097
fix(results): filter language/layout strings by length; accept stack-only functions
vee1e
committed
fb9e788
test(results): guard layout-none in the filter_string_len test
vee1e
committed
08562ee
test(render): annotate the console getvalue ignore for mypy
vee1e
committed
d8025c5
fix(cli): send text-mode errors to stderr; detect uppercase JSON flags
vee1e
committed
a1fd95f
test(render): cover --no-structure and --columns encoding
vee1e
committed
8f7b995
style: apply isort import ordering to recently edited files
vee1e
committed
7e95165
ci(vercel): only deploy qs-viewer on qs-viewer-enhance
vee1e
committed
858ad0d
Merge pull request #1358 from vee1e/qs-viewer-enhance
mr-tz
authored
4f14613

Commits on Aug 14, 2026

Commits on Aug 16, 2026

Commits on Aug 17, 2026

docs: remove spec reference

vee1e
and
mr-tz
authored
07c39b7
fix(results): warn when -n is below the min length used to build a doc
vee1e
committed
cc66e7e
fix(cli): 'all' string type can only be used alone
vee1e
committed
7932b3d
feat(cli): add -y/--yes to skip the deobfuscation prompt
vee1e
committed
2c39629
test(cli): remove --language auto acceptance test
vee1e
committed
8ef8bc1
test(cli): remove -- terminator filter-flag test
vee1e
committed
cac88eb
test(cli): use -y and floss.main for the language extraction test
vee1e
committed
4731c8d
test(cli): route language-override tests through floss.main with -y
vee1e
committed
03ec9e9
fix(cli): reject non-static string types with --summary
vee1e
committed
f73c7ef
test(render): add tag-normalization, Mach-O summary, no-layout warning tests
vee1e
committed
e1bc7f9
fix(results): abort when -n is below the min length used to build a doc
vee1e
committed
f3263ff
Merge pull request #1360 from vee1e/feat/unified-pipeline-iteration-4
mr-tz
authored
5e3bf72
feat(cache): add result-document cache module
vee1e
committed
d8a4fe8
feat(cache): wire result caching into the analysis pipeline
vee1e
committed
e250849
feat(cache): wire caching into the CLI and document envars
vee1e
committed
2d9b8a1
test(cache): isolate cache dir and add end-to-end cache tests
vee1e
committed
199de0f
fix(cache): make lock and cache-dir tests Windows-compatible
vee1e
committed
fba96b0
fix(cache): allow layout-less cache hits and clarify miss comment
vee1e
committed
bc94b6c
fix(cache): clear disabled string types on cache materialize
vee1e
committed
82e5446
fix(cache): never crash analysis on cache file I/O errors
vee1e
committed
f516fe2
fix(cache): let a tags-enabled cache serve a no-tags request
vee1e
committed
1571c40
test(cache): narrow optional layout before access for mypy
vee1e
committed
7a9b529

Commits on Aug 18, 2026

refactor: rename analyze_functions to match the CLI flag
vee1e
committed
ed05890
feat(cache): add FLOSS_CACHE_REFRESH to force a re-analysis
vee1e
committed
a5e7aa0
docs(cache): drop the :func: reST markup in docstrings
vee1e
committed
8436f21
Update floss/cli.py

vee1e
and
mr-tz
authored
8cfa8fb
fix(cache): never crash on cache init failures
vee1e
committed
638f1f5
fix(cache): record the requested min_length on cache hits
vee1e
committed
82293a3
fix(cache): parse boolean envars case-insensitively
vee1e
committed
408302d
fix(cache): guard is_file() in load() against OSError
vee1e
committed
0db7615
Merge pull request #1367 from vee1e/feat/unified-pipeline-iteration-5
mr-tz
authored
59dabcf
feat(render): aesthetically revamp summary mode layout and tag filtering
mr-tz
committed
8058866
Merge pull request #1366 from mandiant/feat/render-summary-layout
mr-tz
authored
0471fb1
ci: retarget workflows from quantumstrand to master
vee1e
committed
af99e7f
refactor(viewer): rename qs-viewer directory to viewer
vee1e
committed
a0fed7e
refactor(viewer): drop quantum-strand branding
vee1e
committed
6665429
chore(viewer): remove stale qs artifacts
vee1e
committed
14c299c
refactor(tags): rename jh_to_qs.py to jh_to_oss.py
vee1e
committed
640fa72
chore(pyproject): drop stale optional [qs] comment
vee1e
committed
4d3847b
chore(viewer): keep pma sample, rename to drop qs naming
vee1e
committed
2ba52b0
feat(viewer): use pma0303_floss sample, normalize to current schema
vee1e
committed
f98c5e6
merge: resolve requirements.txt conflict, keep master pins + branch deps
vee1e
committed
b5bb3cb
ci: keep quantumstrand in PR triggers until CI is green
vee1e
committed
2b27980
Merge pull request #1370 from vee1e/qs-merge-final
mr-tz
authored
36e98ca
ci(web-release): scope pages and id-token permissions to the deploy job
vee1e
committed
1592003
ci: scope permissions and fix action pin to clear zizmor medium findings
vee1e
committed
cfff4fd
fix(enrich): recognize XOR-decoded PE/ELF layout names
vee1e
committed
21a9a71
fix(pipeline): -y/--yes now disables deobfuscation
vee1e
committed
916e310
fix(cache): include the analysis format in the cache key
vee1e
committed
47445d6
fix(layout): annotate PE/ELF root-level strings with structures
vee1e
committed
13c3fc8
fix(cli): reject --summary with --analyze-functions
vee1e
committed
552b487
fix(scripts): make --pes mode reachable in extract_strings.py
vee1e
committed
cede3de
fix(tags): detect unpulled Git LFS pointers in all loaders
vee1e
committed
7c4d4d0
style: black/isort formatting for earlier fixes
vee1e
committed
26af97d

Commits on Aug 19, 2026

refactor(pipeline): drop dead --disable-progress plumbing
vee1e
committed
68ca344
refactor(cli): rename -y/--yes to --no-prompt
vee1e
committed
8c2451c
style(main): drop comment duplicating the --summary error text
vee1e
committed
eedabce
refactor(cache): default the analysis format in compute_key
vee1e
committed
f700666
feat(cli): make string deobfuscation opt-in and drop the prompt
vee1e
committed
0abe0c2
revert(cli): restore all-on default string extraction
vee1e
committed
bfc01b0
docs(AGENTS): note the result cache when diffing output
vee1e
committed
e94f0a1
test(cache): rely on the compute_key auto default
vee1e
committed
3569962
refactor(cli): reject any string-type selection with --summary
vee1e
committed
864e689
fix(scripts): use the correct max_len constants for libs vs pes
vee1e
committed
1413961
test(cli): fix duplicated language-test docstring
vee1e
committed
7bdd3fe
test(cli): drop deobfuscation-on-by-default test
vee1e
committed
461113d
fix(render): escape \t in the layout view like the other views
vee1e
committed
f87a491
Merge pull request #1376 from vee1e/fix/quantumstrand-review-1375
mr-tz
authored
050bfe2