feat(sccm): complete end-to-end diagnostics epic

.gitattributes

@@ -6,3 +6,5 @@
 # Real-world log fixtures are byte-sensitive (UTF-8 BOM + CRLF); never normalize them.
 src-tauri/tests/fixtures/** -text
 
+# SCCM parser fixtures are byte-sensitive evidence; never normalize them.
+crates/cmtraceopen-parser/tests/fixtures/** -text

CHANGELOG.md

@@ -39,6 +39,16 @@ All notable changes to this project will be documented in this file.
 
 - **Intune Device Inventory log support (#354)**: CMTrace Open now discovers and parses the complete Microsoft Device Inventory Agent log family under `C:\Program Files\Microsoft Device Inventory Agent\Logs` instead of falling back to the generic timestamped or plain-text readers. Three wire formats are recognized by content: the **harvester** dialect (`IntuneInventoryHarvesterLog.log` and its timestamped rotations), where the producer's bracketed `[Information]`/`[Warning]`/`[Error]` level is authoritative and is no longer left in the message or overridden by keyword inference; the **Inventory Adaptor** dialect (`InventoryAdaptor.log` and the literal trailing-underscore `InventoryAdaptor.log_` rotation), which now keeps its timestamp and process ID and holds continuation JSON in the record that introduced it; and a **rotation-failure** dialect, where a .NET exception and its stack trace stay in one logical record. The Device Inventory Agent folder is available from the known-sources menu, folder aggregation includes `.log`, timestamped rotations, and `.log_`, and Windows file association covers the producer's literal `.log_` extension. Real-time tailing preserves logical records across appends.
 
+### Fixed
+
+- **SCCM server coverage topology (#335)**: Normalized server coverage rows now
+  retain optional opaque producer-host and workflow-subject handles, preventing
+  artifacts from distinct physical producers or workflow subjects from
+  collapsing into one row. Site-core analysis also rejects coverage whose
+  topology does not match its artifact membership and emits explicit coverage
+  gaps instead of shaping results from incongruent input. The additive fields
+  remain schema v1 and are omitted from JSON when absent.
+
 ## [1.5.0] - 2026-07-27
 
 ### Added

crates/cmtraceopen-parser/Cargo.toml

@@ -26,3 +26,6 @@ encoding_rs = "0.8"
 log = "0.4"
 thiserror = "2"
 base64 = "0.22"
+sha2 = "0.11"
+
+[dev-dependencies]

crates/cmtraceopen-parser/src/esp/redaction.rs

@@ -1418,8 +1418,7 @@ fn redact_text_for_context(value: &str, context: TextRedactionContext) -> String
     // the MAC matcher could pick up decimal sub-authority pairs inside it, and
     // IPv4 runs before IPv6 so an IPv4-mapped IPv6 address cannot leak its dotted
     // tail.
-    let redacted =
-        azure_storage_credential_pattern().replace_all(&redacted, "${prefix}[redacted]");
+    let redacted = azure_storage_credential_pattern().replace_all(&redacted, "${prefix}[redacted]");
     let redacted = ipv4_address_pattern().replace_all(&redacted, REDACTED);
     let redacted = mac_address_pattern().replace_all(&redacted, REDACTED);
     let redacted = redact_ipv6_addresses(&redacted);

crates/cmtraceopen-parser/src/esp/reducer.rs

@@ -3137,7 +3137,10 @@ fn sidecar_app_state_observation(
     ordinal: usize,
     observation: &EspRegistryObservation,
 ) -> Option<SidecarAppStateObservation> {
-    let field = if observation.value_name.eq_ignore_ascii_case("InstallationState") {
+    let field = if observation
+        .value_name
+        .eq_ignore_ascii_case("InstallationState")
+    {
         SidecarAppField::InstallationState
     } else if observation.value_name.eq_ignore_ascii_case("ErrorHresult") {
         SidecarAppField::ErrorHresult

crates/cmtraceopen-parser/src/esp/timeline.rs

@@ -115,7 +115,10 @@ mod tests {
         // "...05.250Z" before "...05Z" because '.' (0x2E) < 'Z' (0x5A), which
         // inverts chronology; the parsed-instant key must keep 05 before 05.250.
         let entries = vec![
-            (0usize, timeline_entry("timeline|a|b|0", "2026-07-15T12:00:05Z")),
+            (
+                0usize,
+                timeline_entry("timeline|a|b|0", "2026-07-15T12:00:05Z"),
+            ),
             (
                 1usize,
                 timeline_entry("timeline|a|b|1", "2026-07-15T12:00:05.250Z"),

crates/cmtraceopen-parser/src/lib.rs

@@ -14,4 +14,5 @@ pub mod esp;
 pub mod intune;
 pub mod models;
 pub mod parser;
+pub mod sccm;
 pub(crate) mod wire;