@blamejs/exceptd-skills 0.14.1 → 0.14.3

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 0.14.3 — 2026-05-27
+
+The resolved-citation cache is now integrity-checked. Each cached record carries a content digest (covering its `resolved_at` timestamp) that is verified on read, and freshness is gated on that timestamp rather than the file's modification time. A cache file edited in place — flipping a rejected CVE to "published" — is rejected as tampered instead of trusted, and a touched file can no longer resurrect a stale verdict. This closes a path where a writable cache could launder a rejected or fabricated citation into a passing verdict (which feeds `collect citation-hygiene --resolve` and, in turn, attestations).
+
+`exceptd cve` and `exceptd rfc` reject unknown flags instead of silently ignoring them — a mistyped `--json` no longer emits human text into a pipe that asked for JSON.
+
+Malformed evidence is rejected at the boundary. A JSON `null`, array, or scalar piped to `run --evidence -` now returns "evidence must be a JSON object" instead of being silently accepted as an empty run or surfacing as an internal error.
+
+`collect citation-hygiene --resolve` now flags a cited RFC number that resolves to nothing, matching how it already flags a fabricated CVE. `ci --max-rwep` rejects a non-numeric or negative cap instead of silently coercing it to 0 (which had quietly degenerated the gate to "block everything"). `run --format` notes on stderr when it overrides `--json`. `cve`, `rfc`, `collect`, `watch`, and `report` are now listed in `exceptd help`.
+
+## 0.14.2 — 2026-05-27
+
+`exceptd collect citation-hygiene --resolve` now resolves the cited CVEs the offline catalog can't confirm — once each, through the shared resolver cache — and flips their verdicts instead of parking them as inconclusive for an agent to chase: a rejected or disputed identifier becomes a hit, a well-formed identifier NVD doesn't know becomes fabricated, and a confirmed one clears. Honors `--air-gap` (catalog and cache only, no network).
+
+The RFC index now includes obsoleted and historic RFCs (8888 entries, up from 7476). `exceptd rfc <number>` resolves a superseded RFC entirely offline — RFC 2616, for example, returns "Hypertext Transfer Protocol -- HTTP/1.1, obsoleted by RFC 7230–7235" — so confirming whether a cited RFC is still current no longer requires an IETF datatracker lookup.
+
 ## 0.14.1 — 2026-05-27
 
 Two citation resolvers — `exceptd cve <id>` and `exceptd rfc <number>` — answer "is this CVE/RFC citation valid?" so an agent gets the answer from exceptd instead of researching each identifier against NVD or the IETF datatracker by hand. A fan-out of agents auditing a codebase previously re-researched the same citations independently; these resolvers do it once and cache the result for the rest.

package/bin/exceptd.js

@@ -450,8 +450,19 @@ Canonical verbs
   verify-attestation <sid>   Alias for \`attest verify\`.
   run-all                    Alias for \`run --all\`.
 
+  cve <CVE-ID>               Resolve a CVE citation: published | rejected | disputed
+                             | fabricated | nonexistent (catalog → cache → one NVD
+                             lookup). --air-gap/--no-network offline-only; exit 2 on
+                             a citation that won't stand up.
+  rfc <number>               Resolve an RFC number → title + status from the local
+                             index (offline). --check "<title>" flags a mismatch.
+  collect <playbook>         Run a playbook's companion collector; emits submission
+                             JSON to pipe into \`run --evidence -\`. --resolve
+                             (citation-hygiene) resolves uncatalogued citations.
   skill <name>               Show context for a specific skill.
   framework-gap <fw> <ref>   Programmatic gap analysis (one framework, one CVE/scenario).
+  watch [--alerts]           Forward-watch aggregator across skills.
+  report [executive]         Structured posture report.
   path                       Absolute path to the installed package.
   version                    Package version.
 
@@ -945,6 +956,19 @@ function readJsonFile(filePath) {
   }
 }
 
+// Evidence must be a JSON object. `null`, an array, or a scalar parse as valid
+// JSON but are not a submission — without this guard `null` NPE'd deep in the
+// runner ("internal error") and `[]` / a wrong-typed field were silently
+// accepted and run as if empty, so an operator believed a malformed submission
+// was evaluated. Reject at the read boundary with an actionable message.
+function asEvidenceObject(parsed) {
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+    const got = parsed === null ? "null" : Array.isArray(parsed) ? "array" : typeof parsed;
+    throw new Error(`evidence must be a JSON object (e.g. {"artifacts": {...}, "signal_overrides": {...}}); got ${got}. Run \`exceptd brief <playbook>\` for the expected shape.`);
+  }
+  return parsed;
+}
+
 function readEvidence(evidenceFlag) {
   if (!evidenceFlag) return {};
   // v0.12.12: file-path branch enforces a max size to defend against an
@@ -988,7 +1012,7 @@ function readEvidence(evidenceFlag) {
       );
       return {};
     }
-    return JSON.parse(text);
+    return asEvidenceObject(JSON.parse(text));
   }
   let stat;
   try { stat = fs.statSync(evidenceFlag); }
@@ -999,7 +1023,7 @@ function readEvidence(evidenceFlag) {
   // Route through readJsonFile() for UTF-8-BOM / UTF-16 tolerance.
   // Windows-tool-emitted JSON commonly carries these markers; the raw "utf8"
   // decode in readFileSync chokes on the leading 0xFEFF.
-  return readJsonFile(evidenceFlag);
+  return asEvidenceObject(readJsonFile(evidenceFlag));
 }
 
 function loadRunner() {
@@ -2337,7 +2361,7 @@ Flags (selected — see \`exceptd run --help\` for the full list):
  * its evidence JSON before going through phases 4-7. Returns a categorized
  * list: ok / missing_required / unknown_keys / type_mismatch / suggestions.
  */
-function cmdCollect(runner, args, runOpts, pretty) {
+async function cmdCollect(runner, args, runOpts, pretty) {
   const playbookId = args._[0];
   if (!playbookId) {
     return emitError(
@@ -2439,6 +2463,30 @@ function cmdCollect(runner, args, runOpts, pretty) {
   try { pbMetaAirGap = !!(runner.loadPlaybook(playbookId)?._meta?.air_gap_mode); }
   catch { /* playbook load shouldn't fail here — collector exists — but be defensive */ }
   const collectAirGap = !!(runOpts.airGap || process.env.EXCEPTD_AIR_GAP === "1" || pbMetaAirGap);
+
+  // --resolve: resolve the citations the offline catalog couldn't confirm,
+  // flipping their parked signals instead of leaving them inconclusive for the
+  // operator to research. Opt-in, collector-specific (only citation-hygiene
+  // exposes applyResolution). Honors the collect air-gap disposition.
+  if (args.resolve) {
+    if (typeof mod.applyResolution !== "function") {
+      return emitError(
+        `collect: --resolve is not supported by the "${playbookId}" collector (no resolution step).`,
+        { verb: "collect", playbook_id: playbookId },
+        pretty,
+      );
+    }
+    try {
+      submission = await mod.applyResolution(submission, { airGap: collectAirGap });
+    } catch (e) {
+      return emitError(
+        `collect: --resolve failed for "${playbookId}": ${e.message}`,
+        { verb: "collect", playbook_id: playbookId, exit_code: 2 },
+        pretty,
+      );
+    }
+  }
+
   // Spread `submission` first, then explicit fields, so a submission key
   // named `air_gap_mode` (currently always undefined but defensive against
   // future collector contracts) can't clobber the envelope marker.
@@ -3552,6 +3600,14 @@ function cmdRun(runner, args, runOpts, pretty) {
         pretty,
       );
     }
+    // --format wins over --json (one stdout document). Note it rather than
+    // silently discarding --json — a script that pipes for JSON and later adds
+    // --format markdown for a human would otherwise get non-JSON with no signal.
+    if ((args.json || global.__exceptdWantJson) && requested !== "json") {
+      process.stderr.write(
+        `[exceptd] note: --format "${requested}" overrides --json; stdout is the ${requested} document, not the JSON envelope.\n`
+      );
+    }
     // Only one document can be written to stdout. When several --format values
     // are given, emit the first and tell the operator where the rest live so
     // the extras aren't silently dropped.
@@ -7807,6 +7863,16 @@ function cmdAsk(runner, args, runOpts, pretty) {
 function cmdCi(runner, args, runOpts, pretty) {
   const scope = args.scope;
   const maxRwep = args["max-rwep"] !== undefined ? Number(args["max-rwep"]) : null;
+  // Reject a non-numeric / negative cap rather than silently coercing it.
+  // `--max-rwep abc` previously became Number→NaN→0, degenerating the gate to
+  // "block everything at RWEP 0" with no error — a silently-broken CI gate.
+  if (maxRwep !== null && (!Number.isFinite(maxRwep) || maxRwep < 0)) {
+    return emitError(
+      `ci: --max-rwep must be a non-negative number; got ${JSON.stringify(String(args["max-rwep"]))}.`,
+      { verb: "ci", provided: args["max-rwep"] },
+      pretty,
+    );
+  }
   const blockOnClock = !!args["block-on-jurisdiction-clock"];
 
   // v0.11.9 (#115): --required <playbook,playbook,...> takes precedence over

package/data/_indexes/_meta.json

@@ -1,10 +1,10 @@
 {
   "schema_version": "1.1.0",
-  "generated_at": "2026-05-27T12:31:54.921Z",
+  "generated_at": "2026-05-27T14:56:20.154Z",
   "generator": "scripts/build-indexes.js",
   "source_count": 54,
   "source_hashes": {
-    "manifest.json": "cc72d668222e9cd18eaef7928e173ad17434ff4b411235bbba2b13fca722db9e",
+    "manifest.json": "cfe6dbf90ca102b12a5d538e2744df007f7c8df306dc2ccdeac76f408c328d91",
     "data/atlas-ttps.json": "d24bc02859d40ccf1615db75cca68c077585904e41e0d8f6de448121e9b1abb0",
     "data/attack-techniques.json": "fa193f0d2d248176a8beddb641e9fe56ba4faa9e15dc253ff876dbf0c5d58a77",
     "data/cve-catalog.json": "3d451dda7ac0c7d57a4075ae4bafd3148c6184b35dc1bc59d8b81d1f2641e430",
@@ -14,7 +14,7 @@
     "data/exploit-availability.json": "ec2656f0d9a893610e27b43eb6035fe9b18e057c9f6dfaac7e7d4959bbcbb795",
     "data/framework-control-gaps.json": "46094ad9b9584f454daddd28f4c5d27faf0ea0510daafd38fb60bf9d30f6a305",
     "data/global-frameworks.json": "9ba563a85f7f8d6c3c957de64945e20925a89d0ed6ea6fc561cf093811acf558",
-    "data/rfc-references.json": "66ef2e1f444a2cf0c2700a754f0a66030bb8a91d9e68394b9537ea1fe8b904fe",
+    "data/rfc-references.json": "b21d03b948c41bc8a854e2f057948ecf844bd8c105848aeb141d1eadf8192c31",
     "data/zeroday-lessons.json": "258252b9bff1fc11b05b76e10b659c1195971884bd44c92af5fefe17a5ca9512",
     "skills/kernel-lpe-triage/skill.md": "08b3e9815ba481c57c80f5fc0ccbf5bb7cbb41f570c235ba6ff9596b8c07354d",
     "skills/ai-attack-surface/skill.md": "c4c1eb22a38ca7a959b5725222bab8fbd4f4044a548a93f3e288e6f698334b72",

package/data/_indexes/activity-feed.json

@@ -5,6 +5,14 @@
     "event_count": 54
   },
   "events": [
+    {
+      "date": "2026-05-27",
+      "type": "catalog_update",
+      "artifact": "data/rfc-references.json",
+      "path": "data/rfc-references.json",
+      "schema_version": "1.0.0",
+      "entry_count": 8888
+    },
     {
       "date": "2026-05-22",
       "type": "skill_review",
@@ -100,14 +108,6 @@
       "schema_version": "1.0.0",
       "entry_count": 468
     },
-    {
-      "date": "2026-05-19",
-      "type": "catalog_update",
-      "artifact": "data/rfc-references.json",
-      "path": "data/rfc-references.json",
-      "schema_version": "1.0.0",
-      "entry_count": 7476
-    },
     {
       "date": "2026-05-18",
       "type": "skill_review",

package/data/_indexes/catalog-summaries.json

@@ -207,7 +207,7 @@
       "path": "data/rfc-references.json",
       "purpose": "IETF RFCs + active Internet-Drafts cited by skills (TLS, IPsec, PQ crypto migration, HTTP/3, CT). Cross-validated against IETF Datatracker via validate-rfcs.",
       "schema_version": "1.0.0",
-      "last_updated": "2026-05-19",
+      "last_updated": "2026-05-27",
       "tlp": "CLEAR",
       "source_confidence_default": "A1",
       "freshness_policy": {
@@ -216,7 +216,7 @@
         "rebuild_after_days": 365,
         "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
       },
-      "entry_count": 7476,
+      "entry_count": 8888,
       "sample_keys": [
         "RFC-4301",
         "RFC-4303",