Scope TikTok IM artifacts to TikTok-owned containers - #2067
Merged
Conversation
The TikTok message, contact and replied-message patterns match AwemeIM.db and the ChatFiles db.sqlite by file name in any app container. iOS containers are GUID directories, so the globs cannot carry the app identity the way the Android patterns do. Each matched database is now attributed to the app named by its container's own .com.apple.mobile_container_manager.metadata.plist, or by the AppDomain bundle id a backup-reconstructed path carries, and only containers owned by com.zhiliaoapp.musically are parsed. Anything else is skipped and logged. Row counts are unchanged on the tested corpora. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
pull Bot
pushed a commit
to arc675/ileapp
that referenced
this pull request
Aug 29, 2026
…ners Extends the abrignoni#2067 container-owner check to tiktok_app_sessions and tiktok_watch_history: the metadata plist glob joins their paths, matched databases in containers not owned by com.zhiliaoapp.musically are skipped and logged, and Watch History records checked absences for four corpora. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Attributes every file matched by the TikTok message, contact and replied-message patterns to the app that owns its container, and parses only TikTok's.
*AwemeIM.db*and ChatFilesdb.sqlitepatterns match by file name in any app container, and iOS containers are GUID directories, so the globs cannot be anchored the way Anchor TikTok IM path patterns to the TikTok package names ALEAPP#1238 anchored the Android ones. The owner is read from the container's own.com.apple.mobile_container_manager.metadata.plist, or from the AppDomain bundle id a backup-reconstructed path carries.