@clear-capabilities/agentic-security-scanner 0.150.1 → 0.151.0

package/dist/5830.index.js

@@ -2,7 +2,7 @@ export const id = 5830;
 export const ids = [5830];
 export const modules = {
 
-/***/ 5830:
+/***/ 95830:
 /***/ ((__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) => {
 
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
@@ -13,8 +13,8 @@ export const modules = {
 /* harmony export */   stampFindingTimestamps: () => (/* binding */ stampFindingTimestamps)
 /* harmony export */ });
 /* unused harmony export findingsExceedingSLA */
-/* harmony import */ var node_crypto__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(7598);
-/* harmony import */ var _provenance_schema_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(4594);
+/* harmony import */ var node_crypto__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(77598);
+/* harmony import */ var _provenance_schema_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(34594);
 // 0.8.0 Feat-11: MTTR / finding-age tracking — per-finding firstSeenAt/lastSeenAt with SLA breach detection.
 //
 // Stamps every finding with `firstSeenAt` (preserved from the baseline if the

package/dist/6257.index.js

@@ -2,7 +2,7 @@ export const id = 6257;
 export const ids = [6257];
 export const modules = {
 
-/***/ 6257:
+/***/ 66257:
 /***/ ((__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) => {
 
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
@@ -10,10 +10,10 @@ export const modules = {
 /* harmony export */   proposeOllamaFix: () => (/* binding */ proposeOllamaFix)
 /* harmony export */ });
 /* unused harmony export buildFixPrompt */
-/* harmony import */ var _egress_redact_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(4831);
-/* harmony import */ var _egress_policy_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(5712);
-/* harmony import */ var _providers_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(8947);
-/* harmony import */ var _ollama_provider_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(3837);
+/* harmony import */ var _egress_redact_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(74831);
+/* harmony import */ var _egress_policy_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(45712);
+/* harmony import */ var _providers_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(38947);
+/* harmony import */ var _ollama_provider_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(23837);
 // Ollama-assisted patch proposal for the `fix` role, used only when no
 // deterministic/stored patch exists (agentic-security-ollama-offline-prd.md
 // §33). Before this module, `fix`/`poc`/`explain`/`logic` had NO call site
@@ -68,7 +68,7 @@ const FIX_PROPOSAL_ERROR = Object.freeze({
  * through the same redaction pipeline llm-validator/index.js's renderPrompt
  * uses, and is framed as data the model must never treat as instructions.
  */
-function buildFixPrompt(finding, fileContent, scanRoot) {
+function buildFixPrompt(finding, fileContent, scanRoot, rejectionFeedback) {
   const sterileContent = (0,_egress_redact_js__WEBPACK_IMPORTED_MODULE_0__/* .redactPayload */ .cy)({ text: String(fileContent || ''), filePath: finding.file, scanRoot }).text;
   return [
     'You are a security patch-synthesis component. You PROPOSE a fix; a separate',
@@ -87,6 +87,19 @@ function buildFixPrompt(finding, fileContent, scanRoot) {
     sterileContent,
     '--- END-UNTRUSTED-FILE-CONTENT ---',
     '',
+    // Adversarial-review fix (2026-09): at temperature 0 with the SAME
+    // prompt, a rejected patch would very likely just reproduce itself on
+    // retry — this is the one place cmdFix's bounded one-time retry
+    // (bin/agentic-security.js) feeds the deterministic gate's OWN rejection
+    // reason back in, so the second attempt has an actual reason to differ
+    // rather than repeating the first attempt's exact mistake.
+    ...(rejectionFeedback ? [
+      'Your previous proposal for this exact finding was REJECTED by the',
+      'deterministic verification gate below. Propose a DIFFERENT fix that',
+      'avoids this specific problem — do not repeat the same patch:',
+      `  ${String(rejectionFeedback).slice(0, 500)}`,
+      '',
+    ] : []),
     'Propose a minimal, targeted fix for the finding above. Reply with ONLY a',
     'single JSON object, no other text:',
     '{"target_file": "<must exactly equal the File given above>", ' +
@@ -110,7 +123,7 @@ function validateFixResponse(obj, { file }) {
  * @returns {{ok:true, replacement, rationale, expectedSecurityEffect,
  *   testsToRun, model} | {ok:false, code, reason}}
  */
-async function proposeOllamaFix({ finding, fileContent, scanRoot, env = process.env }) {
+async function proposeOllamaFix({ finding, fileContent, scanRoot, env = process.env, rejectionFeedback } = {}) {
   const resolved = (0,_providers_js__WEBPACK_IMPORTED_MODULE_2__.resolveProvider)({ role: 'fix', env });
   if (!resolved.ok || resolved.config.provider !== 'ollama') {
     return {
@@ -128,7 +141,7 @@ async function proposeOllamaFix({ finding, fileContent, scanRoot, env = process.
     return { ok: false, code: FIX_PROPOSAL_ERROR.POLICY_BLOCKED, reason: decision.reason, egressDecision: decision };
   }
 
-  const prompt = buildFixPrompt(finding, fileContent, scanRoot);
+  const prompt = buildFixPrompt(finding, fileContent, scanRoot, rejectionFeedback);
   const oc = resolved.config.ollama;
   const r = await (0,_ollama_provider_js__WEBPACK_IMPORTED_MODULE_3__/* .callOllamaStructured */ .uM)({
     host: resolved.config.endpoint,

package/dist/6626.index.js

@@ -2,7 +2,7 @@ export const id = 6626;
 export const ids = [6626,2659];
 export const modules = {
 
-/***/ 2659:
+/***/ 42659:
 /***/ ((__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) => {
 
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
@@ -90,7 +90,7 @@ function validateImpactAssessment(record) {
 
 /***/ }),
 
-/***/ 6626:
+/***/ 66626:
 /***/ ((__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) => {
 
 
@@ -251,11 +251,11 @@ function showDisconnected(graph) {
 }
 
 // EXTERNAL MODULE: ./src/lineage/export-json.js
-var export_json = __webpack_require__(859);
+var export_json = __webpack_require__(40859);
 // EXTERNAL MODULE: ./src/lineage/ids.js
-var ids = __webpack_require__(5034);
+var ids = __webpack_require__(45034);
 // EXTERNAL MODULE: ./src/lineage/impact-assessment.js
-var impact_assessment = __webpack_require__(2659);
+var impact_assessment = __webpack_require__(42659);
 ;// CONCATENATED MODULE: ./src/lineage/impact-engine.js
 // impact-engine.js — M5 deliverable #4 (FR-507): the pure read/
 // aggregate computation behind "assess impact" from a compromised

package/dist/6662.index.js

@@ -10,7 +10,7 @@ __webpack_require__.r(__webpack_exports__);
 /* harmony export */   evaluateDriftPolicies: () => (/* binding */ evaluateDriftPolicies),
 /* harmony export */   loadDriftPolicies: () => (/* binding */ loadDriftPolicies)
 /* harmony export */ });
-/* harmony import */ var node_fs__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(3024);
+/* harmony import */ var node_fs__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(73024);
 // drift-policy.js — M4 deliverable #8, sub-project 8b, Task 2: a
 // before/after drift-policy DSL evaluated against a GraphDiff (Task 1's
 // own output, see graph-diff.js).

package/dist/6675.index.js

@@ -2,16 +2,16 @@ export const id = 6675;
 export const ids = [6675];
 export const modules = {
 
-/***/ 6675:
+/***/ 46675:
 /***/ ((__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) => {
 
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
 /* harmony export */   runOnce: () => (/* binding */ runOnce)
 /* harmony export */ });
 /* unused harmony exports readDeps, _queryOsvForDep, loadState, persistState, loadConfig, formatPayload, _internals */
-/* harmony import */ var node_fs__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(3024);
-/* harmony import */ var node_path__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(6760);
-/* harmony import */ var _state_dir_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(1174);
+/* harmony import */ var node_fs__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(73024);
+/* harmony import */ var node_path__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(76760);
+/* harmony import */ var _state_dir_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(31174);
 // Continuous CVE-watch daemon.
 //
 // Polls OSV for the project's dependency tree on a schedule (or one-shot),

package/dist/6730.index.js

@@ -2,7 +2,7 @@ export const id = 6730;
 export const ids = [6730,5144];
 export const modules = {
 
-/***/ 5144:
+/***/ 45144:
 /***/ ((__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) => {
 
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
@@ -13,9 +13,9 @@ export const modules = {
 /* harmony export */   removeLegalHold: () => (/* binding */ removeLegalHold)
 /* harmony export */ });
 /* unused harmony export LEGAL_HOLD_FILE */
-/* harmony import */ var node_fs__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(3024);
-/* harmony import */ var _state_dir_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(1174);
-/* harmony import */ var _artifact_registry_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(471);
+/* harmony import */ var node_fs__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(73024);
+/* harmony import */ var _state_dir_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(31174);
+/* harmony import */ var _artifact_registry_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(70471);
 // FR-707 (assurance-hardening PRD): "Support legal hold and policy-
 // authorized retention exceptions | Legal hold is identity-bound, reasoned,
 // time-bounded where applicable, and auditable."
@@ -160,18 +160,18 @@ function removeLegalHold(scanRoot, artifact) {
 
 /***/ }),
 
-/***/ 6730:
+/***/ 96730:
 /***/ ((__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) => {
 
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
 /* harmony export */   findExpiredArtifacts: () => (/* binding */ findExpiredArtifacts)
 /* harmony export */ });
 /* unused harmony exports RETENTION_DEFAULTS, loadRetentionPolicy, effectiveTtlDays */
-/* harmony import */ var node_fs__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(3024);
-/* harmony import */ var _util_yaml_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(2340);
-/* harmony import */ var _state_dir_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(1174);
-/* harmony import */ var _artifact_registry_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(471);
-/* harmony import */ var _legal_hold_js__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(5144);
+/* harmony import */ var node_fs__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(73024);
+/* harmony import */ var _util_yaml_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(82340);
+/* harmony import */ var _state_dir_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(31174);
+/* harmony import */ var _artifact_registry_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(70471);
+/* harmony import */ var _legal_hold_js__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(45144);
 // Retention policy: default and maximum TTL by artifact class (assurance-
 // hardening PRD FR-702).
 //

package/dist/6829.index.js

@@ -12,10 +12,10 @@ export const modules = {
 /* harmony export */   signObligationEvidencePack: () => (/* binding */ signObligationEvidencePack),
 /* harmony export */   verifyObligationEvidencePack: () => (/* binding */ verifyObligationEvidencePack)
 /* harmony export */ });
-/* harmony import */ var _evidence_bundle_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(8317);
-/* harmony import */ var _evidence_grade_wording_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(3540);
-/* harmony import */ var _lineage_export_json_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(859);
-/* harmony import */ var node_crypto__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(7598);
+/* harmony import */ var _evidence_bundle_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(98317);
+/* harmony import */ var _evidence_grade_wording_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(71159);
+/* harmony import */ var _lineage_export_json_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(40859);
+/* harmony import */ var node_crypto__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(77598);
 // obligation-evidence-pack.js — Milestone 4 sub-project 6c: signed,
 // versioned evidence packs for a Regulatory Obligation Overlay framework
 // evaluation (FR-504, PRD §10.10). Fourth sibling in the

package/dist/6944.index.js

@@ -2,7 +2,7 @@ export const id = 6944;
 export const ids = [6944];
 export const modules = {
 
-/***/ 6944:
+/***/ 86944:
 /***/ ((__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) => {
 
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
@@ -11,7 +11,7 @@ export const modules = {
 /* harmony export */   Xv: () => (/* binding */ CSP_HEADER_VALUE),
 /* harmony export */   generateSessionToken: () => (/* binding */ generateSessionToken)
 /* harmony export */ });
-/* harmony import */ var node_crypto__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(7598);
+/* harmony import */ var node_crypto__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(77598);
 // security.js — Milestone 3, sub-project Server, increment 1.
 //
 // Security primitives for the `explore` loopback HTTP server: session-token

package/dist/6994.index.js

@@ -2,7 +2,7 @@ export const id = 6994;
 export const ids = [6994];
 export const modules = {
 
-/***/ 6994:
+/***/ 86994:
 /***/ ((__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) => {
 
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
@@ -10,10 +10,10 @@ export const modules = {
 /* harmony export */   proposeOllamaPoc: () => (/* binding */ proposeOllamaPoc)
 /* harmony export */ });
 /* unused harmony export buildPocPrompt */
-/* harmony import */ var _egress_redact_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(4831);
-/* harmony import */ var _egress_policy_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(5712);
-/* harmony import */ var _providers_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(8947);
-/* harmony import */ var _ollama_provider_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(3837);
+/* harmony import */ var _egress_redact_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(74831);
+/* harmony import */ var _egress_policy_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(45712);
+/* harmony import */ var _providers_js__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(38947);
+/* harmony import */ var _ollama_provider_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(23837);
 // Ollama-assisted PoC sketch for the `poc` role (agentic-security-ollama-offline-prd.md
 // §18.1 lists "PoC generation" among the P0-required model calls, alongside
 // fix/explain/logic/verify). Before this module `poc` had a reserved slot in

package/dist/7039.index.js

@@ -2,7 +2,7 @@ export const id = 7039;
 export const ids = [7039,4399];
 export const modules = {
 
-/***/ 4399:
+/***/ 54399:
 /***/ ((__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) => {
 
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
@@ -14,7 +14,8 @@ export const modules = {
 /* harmony export */   recommendAdmission: () => (/* binding */ recommendAdmission)
 /* harmony export */ });
 /* unused harmony exports KNOWN_MODEL_SIZE_GB, evaluateMemoryAdmission */
-/* harmony import */ var node_os__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(8161);
+/* harmony import */ var node_os__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(48161);
+/* harmony import */ var _oom_feedback_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(6782);
 // Model family hints, RAM-aware memory profiles, and the memory-admission
 // check for the Ollama provider (agentic-security-ollama-offline-prd.md
 // §13, §14, §15, §22.3, §30).
@@ -36,6 +37,7 @@ export const modules = {
 
 
 
+
 // PRD §12/§13 FR-1203 — non-authoritative family hint from a model name.
 // Longest/most-specific pattern first so `qwen3.5:4b` doesn't fall through to
 // the bare `qwen` bucket.
@@ -217,7 +219,31 @@ function evaluateMemoryAdmission({
  * `{admitted:false}` with a human-readable explanation, which callers treat
  * as "run deterministic-only" (PRD §23.4).
  */
-function recommendAdmission({ profile, freeBytes, requestedContextTokens, requestedModel } = {}) {
+function recommendAdmission(opts = {}) {
+  const result = _recommendAdmissionCore(opts);
+  // Adversarial-review fix (2026-09): a memory-admission ESTIMATE that
+  // actually caused a real OOM (ollama-provider.js's callOllamaChat now
+  // records this via oom-feedback.js) used to have no way to affect a
+  // future admission decision for the SAME model on the SAME machine — the
+  // exact same "admitted: true" would repeat forever. This does not
+  // recalibrate the underlying estimate (that needs real hardware variety
+  // one machine's observed failures can't substitute for); it attaches an
+  // honest warning so the decision is no longer presented with unqualified
+  // confidence.
+  const chosenModel = result.model || opts.requestedModel;
+  const prior = chosenModel ? (0,_oom_feedback_js__WEBPACK_IMPORTED_MODULE_1__/* .priorOOMFor */ .NL)(chosenModel) : null;
+  if (prior) {
+    return {
+      ...result,
+      priorOOMWarning: `'${chosenModel}' has previously failed with an out-of-memory error on this machine ` +
+        `(${prior.count} time${prior.count === 1 ? '' : 's'}, most recently ${new Date(prior.lastAt).toISOString()}). ` +
+        'The memory estimate below may be optimistic for your hardware.',
+    };
+  }
+  return result;
+}
+
+function _recommendAdmissionCore({ profile, freeBytes, requestedContextTokens, requestedModel } = {}) {
   const p = MEMORY_PROFILES[profile];
   if (!p) return { admitted: false, reason: `unknown memory profile '${profile}'` };
 
@@ -263,19 +289,19 @@ function recommendAdmission({ profile, freeBytes, requestedContextTokens, reques
 
 /***/ }),
 
-/***/ 7039:
+/***/ 27039:
 /***/ ((__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) => {
 
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
 /* harmony export */   getModelCapabilities: () => (/* binding */ getModelCapabilities)
 /* harmony export */ });
-/* unused harmony exports capabilitiesFromShowMetadata, probeStructuredOutput, probeToolCalling, _internals */
-/* harmony import */ var node_fs__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(3024);
-/* harmony import */ var node_path__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(6760);
-/* harmony import */ var node_os__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(8161);
-/* harmony import */ var node_crypto__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(7598);
-/* harmony import */ var _ollama_provider_js__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(3837);
-/* harmony import */ var _model_capabilities_js__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(4399);
+/* unused harmony exports DEFAULT_CACHE_TTL_MS, capabilitiesFromShowMetadata, probeStructuredOutput, probeToolCalling, _internals */
+/* harmony import */ var node_fs__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(73024);
+/* harmony import */ var node_path__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(76760);
+/* harmony import */ var node_os__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(48161);
+/* harmony import */ var node_crypto__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(77598);
+/* harmony import */ var _ollama_provider_js__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(23837);
+/* harmony import */ var _model_capabilities_js__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(54399);
 // PRD §13.2 — the three-layer model capability detection strategy.
 //
 // LAYER A (metadata) is the cheapest and most authoritative: Ollama's own
@@ -296,10 +322,21 @@ function recommendAdmission({ profile, freeBytes, requestedContextTokens, reques
 // CACHE KEY = Ollama version + model digest + model name (PRD §13.2 exactly).
 // Digest is load-bearing: `ollama pull` replacing a tag's underlying weights
 // must invalidate the cache even though the name/tag string is unchanged.
-// Persisted forever (no TTL) because the key itself is what expires the
-// entry — a version/digest bump makes a new key, not a stale hit on the old
-// one. Same disk-cache directory convention as sca/sigstore-verify.js and
+// Same disk-cache directory convention as sca/sigstore-verify.js and
 // engine.js's OSV cache (`~/.claude/agentic-security/<name>/`).
+//
+// TTL + force-reprobe (adversarial-review fix, 2026-09). The key-based
+// invalidation above is real but not complete: this module's own comment
+// used to claim the entry is safe "forever" because the key changes when
+// the model does — but `/api/show` doesn't expose a digest on every Ollama
+// version (falls back to model NAME alone then, a few lines below), so a
+// same-tag re-pull, or simply an unlucky single-trial probe the first time
+// (see probeStructuredOutput/probeToolCalling's own single-call design),
+// had no way to ever self-correct short of a user manually deleting a file
+// under `~/.claude/agentic-security/`. Two independent fixes, since either
+// alone leaves a real gap: a default TTL as a safety net for the case
+// nobody notices, and an explicit `force` option (`models test --force`)
+// for the case someone DOES suspect a stale answer and wants it right now.
 
 
 
@@ -310,18 +347,38 @@ function recommendAdmission({ profile, freeBytes, requestedContextTokens, reques
 
 const CACHE_DIR = node_path__WEBPACK_IMPORTED_MODULE_1__.join(node_os__WEBPACK_IMPORTED_MODULE_2__.homedir(), '.claude', 'agentic-security', 'ollama-capability-cache');
 
+// Default safety-net TTL: 30 days. Not the primary invalidation mechanism
+// (the key is) — a backstop for the cases the key can't see: a same-tag
+// re-pull on an Ollama version that doesn't expose a digest, or a single
+// unlucky probe trial that happened to pass/fail against the model's true
+// behavior. Overridable for anyone who wants a tighter or looser bound.
+const DEFAULT_CACHE_TTL_MS = 30 * 24 * 60 * 60 * 1000;
+
 function _ensureCacheDir() { try { node_fs__WEBPACK_IMPORTED_MODULE_0__.mkdirSync(CACHE_DIR, { recursive: true }); } catch {} }
 function _cacheKey(ollamaVersion, modelDigest, modelName) {
   return node_crypto__WEBPACK_IMPORTED_MODULE_3__.createHash('sha256').update(`${ollamaVersion}::${modelDigest}::${modelName}`).digest('hex');
 }
 function _cachePath(key) { return node_path__WEBPACK_IMPORTED_MODULE_1__.join(CACHE_DIR, key + '.json'); }
 
-function _readProbeCache(key) {
-  try { return JSON.parse(node_fs__WEBPACK_IMPORTED_MODULE_0__.readFileSync(_cachePath(key), 'utf8')); } catch { return null; }
+/**
+ * @returns {object|null} the cached probe RESULT (not the envelope), or
+ *   `null` on a miss, a parse failure, OR an entry older than `ttlMs`.
+ */
+function _readProbeCache(key, ttlMs) {
+  let envelope;
+  try { envelope = JSON.parse(node_fs__WEBPACK_IMPORTED_MODULE_0__.readFileSync(_cachePath(key), 'utf8')); } catch { return null; }
+  // Backward-compatible with a pre-TTL cache file that was just the bare
+  // result object (no `probedAt`) — treat an entry with no timestamp as
+  // fresh rather than discarding every cache written before this fix.
+  if (envelope && typeof envelope === 'object' && 'probedAt' in envelope && 'result' in envelope) {
+    if (Number.isFinite(ttlMs) && ttlMs > 0 && Date.now() - envelope.probedAt > ttlMs) return null;
+    return envelope.result;
+  }
+  return envelope;
 }
 function _writeProbeCache(key, value) {
   _ensureCacheDir();
-  try { node_fs__WEBPACK_IMPORTED_MODULE_0__.writeFileSync(_cachePath(key), JSON.stringify(value)); } catch {}
+  try { node_fs__WEBPACK_IMPORTED_MODULE_0__.writeFileSync(_cachePath(key), JSON.stringify({ probedAt: Date.now(), result: value })); } catch {}
 }
 
 /**
@@ -424,9 +481,16 @@ function _mergeLayer(base, overlay, sourceFlag) {
  * should use, since Layer C spends real inference time on the user's
  * machine.
  *
+ * `force: true` (adversarial-review fix, 2026-09 — `models test --force`)
+ * skips reading the cache — always runs a fresh probe and overwrites
+ * whatever was there. `ttlMs` (default 30 days, `DEFAULT_CACHE_TTL_MS`)
+ * bounds how long a cached entry is trusted without either; pass `0`/
+ * `Infinity` to disable the TTL safety net entirely and rely on the key
+ * alone, matching this module's original design intent.
+ *
  * @returns {{ok:true, capabilities:object, cached:boolean} | {ok:false, code, reason}}
  */
-async function getModelCapabilities({ host, model, env = process.env, probe = false, timeouts, keepAlive } = {}) {
+async function getModelCapabilities({ host, model, env = process.env, probe = false, force = false, ttlMs = DEFAULT_CACHE_TTL_MS, timeouts, keepAlive } = {}) {
   let capabilities = (0,_model_capabilities_js__WEBPACK_IMPORTED_MODULE_5__.capabilitiesFromFamilyHint)(model);
 
   const show = await (0,_ollama_provider_js__WEBPACK_IMPORTED_MODULE_4__/* .showOllamaModel */ .$G)({ host, model, timeouts });
@@ -447,7 +511,7 @@ async function getModelCapabilities({ host, model, env = process.env, probe = fa
   const modelDigest = show.ok && show.details?.digest ? show.details.digest : 'unknown-digest';
   const cacheKey = _cacheKey(ollamaVersion, modelDigest, model);
 
-  const cached = _readProbeCache(cacheKey);
+  const cached = force ? null : _readProbeCache(cacheKey, ttlMs);
   if (cached) {
     return { ok: true, capabilities: _mergeLayer(capabilities, cached, 'runtimeProbe'), cached: true };
   }

package/dist/7178.index.js

@@ -3,18 +3,21 @@ export const ids = [7178];
 export const modules = {
 
 /***/ 7178:
-/***/ ((__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) => {
+/***/ ((__webpack_module__, __webpack_exports__, __webpack_require__) => {
 
+__webpack_require__.a(__webpack_module__, async (__webpack_handle_async_dependencies__, __webpack_async_result__) => { try {
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
 /* harmony export */   runHistory: () => (/* binding */ runHistory),
 /* harmony export */   runWhatIf: () => (/* binding */ runWhatIf)
 /* harmony export */ });
 /* unused harmony export listHistoricalRefs */
-/* harmony import */ var node_child_process__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(1421);
-/* harmony import */ var node_fs__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(3024);
-/* harmony import */ var node_path__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(6760);
-/* harmony import */ var _util_git_hardening_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(8844);
-/* harmony import */ var _engine_js__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(9753);
+/* harmony import */ var node_child_process__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(31421);
+/* harmony import */ var node_fs__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(73024);
+/* harmony import */ var node_path__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(76760);
+/* harmony import */ var _util_git_hardening_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(78844);
+/* harmony import */ var _engine_js__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(67198);
+var __webpack_async_dependencies__ = __webpack_handle_async_dependencies__([_engine_js__WEBPACK_IMPORTED_MODULE_4__]);
+_engine_js__WEBPACK_IMPORTED_MODULE_4__ = (__webpack_async_dependencies__.then ? (await __webpack_async_dependencies__)() : __webpack_async_dependencies__)[0];
 // Time-travel + counterfactual scanning (v0.68).
 //
 // Two new modes that exploit the pure-input shape of runFullScan:
@@ -262,6 +265,8 @@ function _walkWorkingTree(root) {
   return out;
 }
 
+__webpack_async_result__();
+} catch(e) { __webpack_async_result__(e); } });
 
 /***/ })
 

package/dist/7227.index.js

@@ -2,15 +2,15 @@ export const id = 7227;
 export const ids = [7227];
 export const modules = {
 
-/***/ 7227:
+/***/ 67227:
 /***/ ((__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) => {
 
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
 /* harmony export */   evaluatePolicy: () => (/* binding */ evaluatePolicy)
 /* harmony export */ });
 /* unused harmony export _internals */
-/* harmony import */ var node_fs__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(3024);
-/* harmony import */ var node_child_process__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(1421);
+/* harmony import */ var node_fs__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(73024);
+/* harmony import */ var node_child_process__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(31421);
 // Policy-as-code gate (FR-SDLC-9).
 //
 // Today's CI gate is `--fail-on <severity>`. That's coarse. Customers want

package/dist/7552.index.js

@@ -2,7 +2,7 @@ export const id = 7552;
 export const ids = [7552];
 export const modules = {
 
-/***/ 7552:
+/***/ 67552:
 /***/ ((__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) => {
 
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
@@ -12,7 +12,7 @@ export const modules = {
 /* harmony export */   writeExportReport: () => (/* binding */ writeExportReport)
 /* harmony export */ });
 /* unused harmony exports DELETION_REPORT_FILE, EXPORT_REPORT_FILE */
-/* harmony import */ var _state_dir_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(1174);
+/* harmony import */ var _state_dir_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(31174);
 // FR-706 (assurance-hardening PRD): manifest-based export and deletion
 // reports — "Operators can prove what was exported, deleted, retained, or
 // failed."

package/dist/7709.index.js

@@ -2,13 +2,13 @@ export const id = 7709;
 export const ids = [7709];
 export const modules = {
 
-/***/ 7709:
+/***/ 17709:
 /***/ ((__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) => {
 
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
 /* harmony export */   exportFlowsCSV: () => (/* binding */ exportFlowsCSV)
 /* harmony export */ });
-/* harmony import */ var _protection_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(965);
+/* harmony import */ var _protection_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(80965);
 // export-csv.js — Milestone 4, sub-project JSON/CSV export.
 //
 // One row per FLOW (not node, not edge — the closest analogue in this