Week of May 25: bounded hotspot evidence and production fixes

Performance

• Localized DNS, ARP, SIP, Wi-Fi, SMB, TCP stall, DF-clear retransmission, and security-alert hotspots to actionable packet windows.
• Suppressed broad minimap and PacketStats spans that made large captures feel noisier than they needed to be.
• Improved AI history list queries, PCAP quick filters, backend responsiveness, and upload-insights hot paths.

Agent and Copilot

• Carried representative hotspot guidance into Ask AI and packet pivots so Agent and Copilot answers start closer to the right frames.
• Fixed Copilot completed-run replay and completion projection for reattached chats.
• Improved cached Agent evidence rendering and saved-analysis display after upload report delivery.

Bug fixes

• Fixed field-row range overflow handling, client log ingestion content-type handling, generation-scoped reprocess cleanup, and stale backend hotspot guidance.
• Hardened duplicate upload detection, PCAP scope refresh, password reset validation, and orphaned indexing lock healing.

Platform

• Added an admin activity summary page, protocol presence icons in the PCAP list, stable demo capture IDs, and polished Agent report email rendering.
• Wired SES delivery through the egress proxy path and improved transactional email templates.