public_git/nickol-knx-mcp
1
0
Fork 0
mirror of https://github.com/NickoScope/nickol-knx-mcp.git synced 2026-09-29 19:31:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat: sub-DPT linter + KNX Secure posture (v0.4.0)

Browse Source 
A1 — sub-DPT sanity linter: when a GA name implies a specific DPT
sub-type (temperature->9.001, power->14.056, brightness/position->5.001),
flag a wrong sub or wrong main. Multilingual, conservative; surfaced as
the subdpt_suspect finding via check_dpt / analyze_all.

A4 — KNX Data Secure posture: secure_posture() + new check_secure MCP
tool. Report-only summary (secured vs plaintext counts, mixed
secure/plaintext middle groups, keyring handover checklist). Reads only
the per-GA Security flag; no key material touched. Handover pack section
5 rewritten to this posture section.

Version bump to 0.4.0; CHANGELOG updated.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Nikolay Miroshnichenko
2026-07-01 19:26:28 +02:00
co-authored by Claude Opus 4.8
parent b16492eb68
commit 44e1ae3aa7
7 changed files with 194 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CHANGELOG.md
+20
View File
@@ -6,7 +6,27 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
## [Unreleased]
## [0.4.0] — 2026-07-01
**Two new lint dimensions: does the DPT sub-type match what the name promises, and is the
project's KNX Secure posture consistent.** This release adds a conservative sub-DPT sanity
linter and a report-only KNX Data Secure posture summary (no key material ever touched),
plus the itemised QA findings in the handover pack.
### Added
- **A1 — sub-DPT sanity linter** (`analyze.py`, surfaced by `check_dpt` and `analyze_all` as the
`subdpt_suspect` finding). When a group-address name implies a specific DPT sub-type
(temperature → `9.001`, power → `14.056`, brightness/position → `5.001`, and similar), the
linter flags a wrong sub-type or a wrong main type. Multilingual keyword matching, deliberately
conservative — it only fires when the name is unambiguous, so it does not second-guess correct
or generic DPTs.
- **A4 — KNX Data Secure posture** (`analyze.py` `secure_posture()`, new MCP tool `check_secure`).
A report-only summary of the project's security posture: secured vs plaintext GA counts, middle
groups that mix secure and plaintext objects, and a keyring (`.knxkeys`) handover checklist. It
reads only the per-GA `Security` flag — no key material is read, derived, or emitted.
- **KNX Secure posture section in the handover pack** — section 5 of `handover.md` is rewritten
from a flat secure-GA count into the full posture section (counts, mixed-group flag, keyring
handover checklist), so the as-built deliverable states the security posture explicitly.
- **Itemised QA findings in the handover pack** — section 6 of `handover.md` now lists the
actual 🔴 errors and 🟡 warnings (address + name, grouped by check), not just totals, so the
handover doubles as a review checklist. Info-level items (intentional reserves / logic / macros)