@clear-capabilities/agentic-security-scanner 0.193.0 → 0.194.1

package/dist/agentic-security.mjs.sha256

@@ -1 +1 @@
-5d8fb492821f3d892794686f94fddc357697b3e888607cdc87d4cb3aaf6a8563  agentic-security.mjs
+7d24338be81b56ab61e4657a2e9dd905de078c94b29e6f74d2a972a239c57f1b  agentic-security.mjs

package/dist/{e29b6f93be53390f2671.json → d5d8dfd7571b07827d1d.json}

@@ -1,6 +1,6 @@
 {
   "name": "@clear-capabilities/agentic-security-scanner",
-  "version": "0.193.0",
+  "version": "0.194.1",
   "description": "Scanner engine for the agentic-security Claude Code plugin: SAST, SCA with reachability and CISA KEV, secrets, IaC, Haskell and Nix/NixOS, prompt-injection, MCP/agent-tool audit, authZ analysis, SBOM, compliance attestation, and more.",
   "type": "module",
   "main": "src/index.js",
@@ -40,7 +40,7 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@babel/core": "^8.0.9",
+    "@babel/core": "^8.0.10",
     "@babel/preset-react": "^8.0.1",
     "@babel/preset-typescript": "^8.0.1",
     "js-yaml": "^5.5.0",
@@ -49,10 +49,10 @@
   "optionalDependencies": {
     "tree-sitter-wasms": "0.1.13",
     "web-tree-sitter": "0.20.8",
-    "z3-solver": "^5.3.2"
+    "z3-solver": "^5.3.3"
   },
   "devDependencies": {
-    "@types/node": "^26.6.5",
+    "@types/node": "^26.6.6",
     "@vercel/ncc": "^0.45.0",
     "java-parser": "^3.0.1"
   },
@@ -79,7 +79,7 @@
     "ee:runtime-audit": "node ../scripts/engineering-excellence/runtime-audit.mjs",
     "ee:ir-matrix": "node ../scripts/engineering-excellence/ir-matrix.mjs",
     "test:loop-real-prd": "node --test ../scripts/loop-engineering/test/loop-real-prd.test.js",
-    "test:loop": "node --test --test-concurrency=1 ../scripts/loop-engineering/test/loop-manifest.test.js ../scripts/loop-engineering/test/loop-watchdog.test.js ../scripts/loop-engineering/test/loop-background.test.js ../scripts/loop-engineering/test/loop-dashboard.test.js ../scripts/loop-engineering/test/loop-evidence.test.js ../scripts/loop-engineering/test/loop-recovery.test.js ../scripts/loop-engineering/test/loop-remote.test.js ../scripts/loop-engineering/test/loop-runbook.test.js ../scripts/loop-engineering/test/loop-assurance-profile.test.js ../scripts/loop-engineering/test/loop-assurance-runtime.test.js ../scripts/loop-engineering/test/loop-bounds.test.js ../scripts/loop-engineering/test/loop-spend.test.js ../scripts/loop-engineering/test/loop-ci-attest.test.js",
+    "test:loop": "node --test --test-concurrency=3 ../scripts/loop-engineering/test/loop-manifest.test.js ../scripts/loop-engineering/test/loop-watchdog.test.js ../scripts/loop-engineering/test/loop-background.test.js ../scripts/loop-engineering/test/loop-dashboard.test.js ../scripts/loop-engineering/test/loop-evidence.test.js ../scripts/loop-engineering/test/loop-recovery.test.js ../scripts/loop-engineering/test/loop-remote.test.js ../scripts/loop-engineering/test/loop-runbook.test.js ../scripts/loop-engineering/test/loop-assurance-profile.test.js ../scripts/loop-engineering/test/loop-assurance-runtime.test.js ../scripts/loop-engineering/test/loop-bounds.test.js ../scripts/loop-engineering/test/loop-spend.test.js ../scripts/loop-engineering/test/loop-ci-attest.test.js",
     "test:python": "node ../scripts/run-python-tests.mjs",
     "bench:dag-incremental": "node ../bench/dag-incremental/run.mjs",
     "test:smoke": "node --test test/smoke.test.js test/demo-app.test.js",
@@ -118,7 +118,7 @@
     "evaluation": "node ../scripts/evaluation.mjs",
     "evaluation:synthetic": "node ../scripts/evaluation.mjs synthetic",
     "test:routing": "node --test test/routing/outcomes.test.js test/routing/economics.test.js test/routing/adapter.test.js test/routing/calibration.test.js test/routing/decide.test.js test/routing/unchanged-when-off.test.js test/routing/shadow.test.js test/routing/promotion.test.js test/routing/drift.test.js test/routing/canary.test.js test/routing/feedback.test.js test/routing/report.test.js",
-    "test:release-closure": "node --test test/release-closure/closure-plan.test.js test/release-closure/closure-record.test.js test/release-closure/compatibility.test.js test/release-closure/rollout-stages.test.js test/release-closure/migration-readers.test.js test/release-closure/rollback.test.js test/release-closure/wrappers.test.js test/release-closure/final-closure.test.js test/release-closure/final-closure-controller.test.js test/release-closure/runner-hardening.test.js test/release-closure/remote-attestation.test.js",
+    "test:release-closure": "node --test test/release-closure/closure-plan.test.js test/release-closure/closure-record.test.js test/release-closure/compatibility.test.js test/release-closure/rollout-stages.test.js test/release-closure/migration-readers.test.js test/release-closure/rollback.test.js test/release-closure/wrappers.test.js test/release-closure/final-closure.test.js test/release-closure/final-closure-controller.test.js test/release-closure/runner-hardening.test.js test/release-closure/remote-attestation.test.js test/release-closure/closure-parallel.test.js",
     "release:closure:check": "node ../scripts/release-closure.mjs --run",
     "release:closure:static": "node ../scripts/release-closure.mjs --static",
     "test:documentation": "node --test test/documentation/drift-check.test.js test/documentation/generated-pages.test.js test/documentation/scope-and-examples.test.js test/documentation/policy-cards.test.js test/documentation/operations-and-review.test.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clear-capabilities/agentic-security-scanner",
-  "version": "0.193.0",
+  "version": "0.194.1",
   "description": "Scanner engine for the agentic-security Claude Code plugin: SAST, SCA with reachability and CISA KEV, secrets, IaC, Haskell and Nix/NixOS, prompt-injection, MCP/agent-tool audit, authZ analysis, SBOM, compliance attestation, and more.",
   "type": "module",
   "main": "src/index.js",
@@ -40,7 +40,7 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@babel/core": "^8.0.9",
+    "@babel/core": "^8.0.10",
     "@babel/preset-react": "^8.0.1",
     "@babel/preset-typescript": "^8.0.1",
     "js-yaml": "^5.5.0",
@@ -49,10 +49,10 @@
   "optionalDependencies": {
     "tree-sitter-wasms": "0.1.13",
     "web-tree-sitter": "0.20.8",
-    "z3-solver": "^5.3.2"
+    "z3-solver": "^5.3.3"
   },
   "devDependencies": {
-    "@types/node": "^26.6.5",
+    "@types/node": "^26.6.6",
     "@vercel/ncc": "^0.45.0",
     "java-parser": "^3.0.1"
   },
@@ -79,7 +79,7 @@
     "ee:runtime-audit": "node ../scripts/engineering-excellence/runtime-audit.mjs",
     "ee:ir-matrix": "node ../scripts/engineering-excellence/ir-matrix.mjs",
     "test:loop-real-prd": "node --test ../scripts/loop-engineering/test/loop-real-prd.test.js",
-    "test:loop": "node --test --test-concurrency=1 ../scripts/loop-engineering/test/loop-manifest.test.js ../scripts/loop-engineering/test/loop-watchdog.test.js ../scripts/loop-engineering/test/loop-background.test.js ../scripts/loop-engineering/test/loop-dashboard.test.js ../scripts/loop-engineering/test/loop-evidence.test.js ../scripts/loop-engineering/test/loop-recovery.test.js ../scripts/loop-engineering/test/loop-remote.test.js ../scripts/loop-engineering/test/loop-runbook.test.js ../scripts/loop-engineering/test/loop-assurance-profile.test.js ../scripts/loop-engineering/test/loop-assurance-runtime.test.js ../scripts/loop-engineering/test/loop-bounds.test.js ../scripts/loop-engineering/test/loop-spend.test.js ../scripts/loop-engineering/test/loop-ci-attest.test.js",
+    "test:loop": "node --test --test-concurrency=3 ../scripts/loop-engineering/test/loop-manifest.test.js ../scripts/loop-engineering/test/loop-watchdog.test.js ../scripts/loop-engineering/test/loop-background.test.js ../scripts/loop-engineering/test/loop-dashboard.test.js ../scripts/loop-engineering/test/loop-evidence.test.js ../scripts/loop-engineering/test/loop-recovery.test.js ../scripts/loop-engineering/test/loop-remote.test.js ../scripts/loop-engineering/test/loop-runbook.test.js ../scripts/loop-engineering/test/loop-assurance-profile.test.js ../scripts/loop-engineering/test/loop-assurance-runtime.test.js ../scripts/loop-engineering/test/loop-bounds.test.js ../scripts/loop-engineering/test/loop-spend.test.js ../scripts/loop-engineering/test/loop-ci-attest.test.js",
     "test:python": "node ../scripts/run-python-tests.mjs",
     "bench:dag-incremental": "node ../bench/dag-incremental/run.mjs",
     "test:smoke": "node --test test/smoke.test.js test/demo-app.test.js",
@@ -118,7 +118,7 @@
     "evaluation": "node ../scripts/evaluation.mjs",
     "evaluation:synthetic": "node ../scripts/evaluation.mjs synthetic",
     "test:routing": "node --test test/routing/outcomes.test.js test/routing/economics.test.js test/routing/adapter.test.js test/routing/calibration.test.js test/routing/decide.test.js test/routing/unchanged-when-off.test.js test/routing/shadow.test.js test/routing/promotion.test.js test/routing/drift.test.js test/routing/canary.test.js test/routing/feedback.test.js test/routing/report.test.js",
-    "test:release-closure": "node --test test/release-closure/closure-plan.test.js test/release-closure/closure-record.test.js test/release-closure/compatibility.test.js test/release-closure/rollout-stages.test.js test/release-closure/migration-readers.test.js test/release-closure/rollback.test.js test/release-closure/wrappers.test.js test/release-closure/final-closure.test.js test/release-closure/final-closure-controller.test.js test/release-closure/runner-hardening.test.js test/release-closure/remote-attestation.test.js",
+    "test:release-closure": "node --test test/release-closure/closure-plan.test.js test/release-closure/closure-record.test.js test/release-closure/compatibility.test.js test/release-closure/rollout-stages.test.js test/release-closure/migration-readers.test.js test/release-closure/rollback.test.js test/release-closure/wrappers.test.js test/release-closure/final-closure.test.js test/release-closure/final-closure-controller.test.js test/release-closure/runner-hardening.test.js test/release-closure/remote-attestation.test.js test/release-closure/closure-parallel.test.js",
     "release:closure:check": "node ../scripts/release-closure.mjs --run",
     "release:closure:static": "node ../scripts/release-closure.mjs --static",
     "test:documentation": "node --test test/documentation/drift-check.test.js test/documentation/generated-pages.test.js test/documentation/scope-and-examples.test.js test/documentation/policy-cards.test.js test/documentation/operations-and-review.test.js",

package/src/posture/proof-fabric/container.js

@@ -20,9 +20,10 @@
 //   * Podman is not probed: it is a supported engine name, and no run against it exists.
 //   * macOS is unmeasured. Docker Desktop runs containers in a VM, so bind mounts, uids and file ownership behave differently from the Linux
 //     measurement; no macOS container run has been recorded.
-//   * The haskell:9 image is wired (CONTAINER_TOOLS, CONTAINER_PATH) but its toolchain layout for a non-root user was never run against a real
-//     engine; the measurement skips Haskell unless AGENTIC_SECURITY_PROOF_CONTAINER_HASKELL=1 (bench/proof-fabric/measure.mjs). The result file
-//     names no .NET image either, so the dotnet SDK image is unverified in the same way.
+//   * The haskell:9 image: its first real-engine run (0.194.0 pull request) failed with `ghc: not found`, because GHC lives in /opt/ghc/<version>/bin
+//     and not /opt/ghc/bin; `containerArgs` now resolves that directory inside the container. Whether the leg then passes is the `proof-container`
+//     job's result; the measurement still skips Haskell unless AGENTIC_SECURITY_PROOF_CONTAINER_HASKELL=1 (bench/proof-fabric/measure.mjs). The
+//     result file names no .NET image either, so the dotnet SDK image is unverified in the same way.
 //   * A reproducer that needs the loopback callback listener (SSRF) cannot run with `--network none` and is skipped, not measured.
 import { spawnSync } from 'node:child_process';
 import { superviseSpawn } from '../../sandbox/supervise.js';
@@ -47,7 +48,11 @@ export function containerArgs({ image, name, hostRoot, argv, env = {}, limits, u
     '-e', 'HOME=/work', '-e', `PATH=${CONTAINER_PATH}`, '-e', 'CI=1',
   ];
   for (const [k, v] of Object.entries(env)) args.push('-e', `${k}=${v}`);
-  args.push(image, ...argv);
+  // The haskell image keeps GHC in a VERSIONED directory (/opt/ghc/<version>/bin, found by the first real-engine Haskell run: `ghc: not found` with an
+  // unversioned /opt/ghc/bin on PATH), and the version floats with the tag. The directory is resolved inside the container, after the environment
+  // (including a reproducer's own PATH) has been applied, so nothing here depends on which GHC the image carries.
+  const inner = /^haskell:/.test(image) ? ['sh', '-c', 'for d in /opt/ghc/*/bin; do PATH="$d:$PATH"; done; export PATH; exec "$@"', 'sh', ...argv] : argv;
+  args.push(image, ...inner);
   return args;
 }
 

package/src/posture/proof-fabric/runner.js

@@ -158,9 +158,14 @@ export async function runAttempt(reproducer, opts = {}) {
   const errs = validateReproducer(reproducer);
   if (errs.length) return done({ status: 'invalid', reasons: errs });
   const tools = opts.tools ?? hostTools();
-  const sup = languageSupport(reproducer.lang, tools);
-  if (!sup.supported) return done({ status: 'unsupported', reasons: [sup.reason] });
   const env = opts.environment ?? selectEnvironment({ lang: reproducer.lang, requireContainer: opts.requireContainer, preferContainer: opts.preferContainer ?? true, force: opts.force });
+  // Which toolchain must exist depends on WHERE the program runs. Inside a container it is the image's (CONTAINER_TOOLS), so the host's toolchain is
+  // irrelevant: judging a container run by the host's tools made every Haskell proof `unsupported` on a runner without GHC, however good the image
+  // (found by the first hosted container run of the Haskell leg; a developer machine with GHC installed hid it).
+  if (env.mode !== 'container') {
+    const sup = languageSupport(reproducer.lang, tools);
+    if (!sup.supported) return done({ status: 'unsupported', environment: env, reasons: [sup.reason] });
+  }
   if (env.mode === 'unavailable') return done({ status: 'blocked', environment: env, reasons: [env.reason] });
   const inContainer = env.mode === 'container';
   if (inContainer && reproducer.network === 'callback') {