@securecode-ai/mcp 0.6.1 → 0.9.0

package/dist/attack/runtimeProbe.js

@@ -0,0 +1,300 @@
+"use strict";
+/**
+ * Runtime probe engine — executes a small baseline + attack HTTP plan against
+ * the user's local dev server (127.0.0.1) and applies deterministic rules for
+ * a PROVEN / UNPROVEN / INCONCLUSIVE verdict.
+ *
+ * Fires when sandbox verification cannot exercise an HTTP-endpoint-shaped
+ * finding (e.g. "Effect-TS module requires full runtime", "Test timed out
+ * after 12 rounds"): the probe replays the decisive requests against the
+ * real listener instead of a sandboxed boot.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PROBE_ELIGIBLE_TYPES = void 0;
+exports.encodeProbePath = encodeProbePath;
+exports.detectDevServer = detectDevServer;
+exports.executeProbePlan = executeProbePlan;
+exports.matchEndpointForFinding = matchEndpointForFinding;
+exports.isProbeEligible = isProbeEligible;
+const fs = __importStar(require("fs"));
+const net = __importStar(require("net"));
+const path = __importStar(require("path"));
+const executor_1 = require("./executor");
+const policy_1 = require("./policy");
+const report_1 = require("./report");
+const probeRules_1 = require("./probeRules");
+const AUTODETECT_PORTS = [3000, 5173, 8080, 4000, 8000, 5174, 3001];
+const PROBE_BUDGET = {
+    maxSteps: 8,
+    maxRequests: 8,
+    wallClockMs: 60_000,
+    maxResponseBytes: 200_000,
+    requestTimeoutMs: 10_000,
+    costCapUsd: 0,
+};
+/** Vulnerability types a runtime probe can exercise (pocRouter HTTP list + xss). */
+exports.PROBE_ELIGIBLE_TYPES = new Set([
+    'sql_injection',
+    'nosql_injection',
+    'ssrf',
+    'open_redirect',
+    'broken_access_control',
+    'xss',
+]);
+const PROBE_VERIFY_REASON_RE = /(timed? ?out|full runtime|cannot test in sandbox|runtime|DOM\/jsdom)/i;
+function redactResponseHeaders(headers) {
+    if (!headers)
+        return {};
+    const out = {};
+    for (const [k, v] of Object.entries(headers)) {
+        if (/authorization|cookie|x-api-key|api-key/i.test(k)) {
+            out[k] = '[REDACTED]';
+        }
+        else {
+            out[k] = v;
+        }
+    }
+    return out;
+}
+/** URL-encode the path so SQLi/XSS payloads with spaces/quotes survive the request. */
+function encodeProbePath(rawPath) {
+    try {
+        const parsed = new URL(rawPath, 'http://127.0.0.1');
+        return parsed.pathname + parsed.search;
+    }
+    catch {
+        const qIdx = rawPath.indexOf('?');
+        const pathPart = qIdx >= 0 ? rawPath.slice(0, qIdx) : rawPath;
+        const queryPart = qIdx >= 0 ? rawPath.slice(qIdx + 1) : '';
+        const encodedPath = pathPart.split('/').map((segment) => encodeURIComponent(segment)).join('/');
+        const encodedQuery = queryPart
+            .split('&')
+            .map((pair) => {
+            const eq = pair.indexOf('=');
+            return eq >= 0
+                ? `${encodeURIComponent(pair.slice(0, eq))}=${encodeURIComponent(pair.slice(eq + 1))}`
+                : encodeURIComponent(pair);
+        })
+            .join('&');
+        return qIdx >= 0 ? `${encodedPath}?${encodedQuery}` : encodedPath;
+    }
+}
+function isPortOpen(host, port, timeoutMs) {
+    return new Promise((resolve) => {
+        let settled = false;
+        const socket = net.createConnection({ host, port });
+        const done = (open) => {
+            if (settled)
+                return;
+            settled = true;
+            socket.destroy();
+            resolve(open);
+        };
+        socket.setTimeout(timeoutMs);
+        socket.once('connect', () => done(true));
+        socket.once('timeout', () => done(false));
+        socket.once('error', () => done(false));
+    });
+}
+async function detectDevServer(workspaceRoot, opts) {
+    const envValue = process.env.SECURECODE_DEV_SERVER_PORT;
+    if (envValue) {
+        const port = Number.parseInt(envValue.trim(), 10);
+        if (Number.isInteger(port) && port >= 1 && port <= 65535) {
+            return { host: '127.0.0.1', port, source: 'env' };
+        }
+    }
+    try {
+        const cfgPath = path.join(workspaceRoot, '.securecode', 'runtime-probe.json');
+        if (fs.existsSync(cfgPath)) {
+            const cfg = JSON.parse(fs.readFileSync(cfgPath, 'utf8'));
+            const port = typeof cfg.port === 'number' ? cfg.port : Number.parseInt(String(cfg.port ?? ''), 10);
+            const host = typeof cfg.host === 'string' && cfg.host.length > 0 ? cfg.host : '127.0.0.1';
+            if (Number.isInteger(port) && port >= 1 && port <= 65535 && (0, policy_1.isLocalhostHost)(host)) {
+                return { host, port, source: 'config' };
+            }
+        }
+    }
+    catch {
+        // fall through to autodetect
+    }
+    const candidates = opts?.candidatePorts ?? AUTODETECT_PORTS;
+    for (const port of candidates) {
+        if (await isPortOpen('127.0.0.1', port, 400)) {
+            return { host: '127.0.0.1', port, source: 'autodetect' };
+        }
+    }
+    return null;
+}
+function snapshotToRuleResponse(snapshot) {
+    return {
+        statusCode: snapshot.statusCode,
+        headers: snapshot.headers,
+        body: snapshot.body,
+        latencyMs: snapshot.latencyMs,
+    };
+}
+function buildEvidence(ruleResult, baseline, attack) {
+    const parts = [
+        `Rule '${ruleResult.rule}' → ${ruleResult.verdict}: ${ruleResult.reason}`,
+        `Decisive statuses: baseline ${baseline ? baseline.statusCode : 'none'} → attack ${attack.statusCode}.`,
+    ];
+    const snippet = attack.body.slice(0, 300);
+    if (snippet.length > 0) {
+        parts.push(`Attack body (first ${snippet.length} of ${attack.body.length} chars, redacted): ${snippet}`);
+    }
+    return (0, report_1.redactText)(parts.join(' ')).slice(0, 2000);
+}
+async function executeProbePlan(plan, opts = {}) {
+    const observed = [];
+    const inconclusive = (reason) => ({
+        verdict: 'INCONCLUSIVE',
+        reason,
+        evidence: (0, report_1.redactText)(reason).slice(0, 2000),
+        requests: observed,
+    });
+    if (plan.requests.length === 0) {
+        return inconclusive('Probe plan contains no requests.');
+    }
+    if (plan.requests.length > PROBE_BUDGET.maxRequests) {
+        return inconclusive(`Probe plan has ${plan.requests.length} requests, exceeding the budget cap of ${PROBE_BUDGET.maxRequests}.`);
+    }
+    const snapshots = [];
+    for (const req of plan.requests) {
+        if (opts.signal?.aborted) {
+            return inconclusive('cancelled');
+        }
+        let safePath;
+        try {
+            (0, policy_1.validateTarget)({ host: plan.host, port: plan.port, path: req.path });
+            safePath = encodeProbePath(req.path);
+        }
+        catch (err) {
+            const message = err instanceof policy_1.PolicyError ? err.message : String(err);
+            return inconclusive(`Policy validation failed for ${req.role} ${req.method} ${req.path}: ${message}`);
+        }
+        const resp = await (0, executor_1.executeHttpRequest)({
+            method: req.method,
+            path: safePath,
+            host: plan.host,
+            port: plan.port,
+            headers: req.headers,
+            body: req.body,
+        }, PROBE_BUDGET, opts.signal);
+        observed.push({
+            role: req.role,
+            method: req.method,
+            path: req.path,
+            statusCode: resp.statusCode,
+            latencyMs: resp.latencyMs,
+        });
+        snapshots.push({
+            role: req.role,
+            statusCode: resp.statusCode,
+            headers: redactResponseHeaders(resp.headers),
+            body: (0, report_1.redactText)(resp.body),
+            latencyMs: resp.latencyMs,
+            error: resp.error,
+        });
+    }
+    if (opts.signal?.aborted) {
+        return inconclusive('cancelled');
+    }
+    let baseline = null;
+    let attack = null;
+    let attackRequest = null;
+    for (let i = 0; i < plan.requests.length; i++) {
+        if (plan.requests[i].role === 'baseline') {
+            baseline = snapshots[i];
+        }
+        else {
+            attack = snapshots[i];
+            attackRequest = plan.requests[i];
+        }
+    }
+    if (!attackRequest || !attack) {
+        return inconclusive('Probe plan contains no attack request.');
+    }
+    const ruleResult = (0, probeRules_1.applyProbeRules)({
+        method: attackRequest.method,
+        path: attackRequest.path,
+        headers: attackRequest.headers,
+        body: attackRequest.body,
+        ...(attackRequest.expect ?? {}),
+    }, attack.statusCode === 0 ? null : snapshotToRuleResponse(attack), null, baseline && baseline.statusCode !== 0 ? snapshotToRuleResponse(baseline) : null);
+    const verdict = ruleResult.verdict === 'confirmed-bypass'
+        ? 'PROVEN'
+        : ruleResult.verdict === 'refuted'
+            ? 'UNPROVEN'
+            : 'INCONCLUSIVE';
+    return {
+        verdict,
+        rule: ruleResult.rule,
+        reason: (0, report_1.redactText)(ruleResult.reason),
+        baselineStatus: baseline ? baseline.statusCode : undefined,
+        attackStatus: attack.statusCode,
+        evidence: buildEvidence(ruleResult, baseline, attack),
+        requests: observed,
+    };
+}
+function matchEndpointForFinding(finding, endpointContext) {
+    if (!Array.isArray(endpointContext))
+        return null;
+    for (const entry of endpointContext) {
+        if (!entry || typeof entry !== 'object')
+            continue;
+        const candidate = entry;
+        if (typeof candidate.method !== 'string' || candidate.method.length === 0)
+            continue;
+        if (typeof candidate.path !== 'string' || candidate.path.length === 0)
+            continue;
+        if (typeof candidate.line !== 'number')
+            continue;
+        const nearLine = Math.abs(candidate.line - finding.line) <= 25;
+        const coversLine = candidate.line <= finding.line && finding.line <= candidate.line + 200;
+        if (nearLine || coversLine)
+            return candidate;
+    }
+    return null;
+}
+function isProbeEligible(finding, verifyReason, endpointContext) {
+    if (!exports.PROBE_ELIGIBLE_TYPES.has(finding.type))
+        return false;
+    if (!PROBE_VERIFY_REASON_RE.test(verifyReason ?? ''))
+        return false;
+    return matchEndpointForFinding(finding, endpointContext) !== null;
+}
+//# sourceMappingURL=runtimeProbe.js.map

package/dist/attack/runtimeProbe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeProbe.js","sourceRoot":"","sources":["../../src/attack/runtimeProbe.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuFH,0CAoBC;AAmBD,0CA+BC;AAoCD,4CAiHC;AASD,0DAgBC;AAED,0CAQC;AAnVD,uCAAyB;AACzB,yCAA2B;AAC3B,2CAA6B;AAC7B,yCAAgD;AAChD,qCAA2F;AAC3F,qCAAsC;AACtC,6CAA6F;AA0C7F,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEpE,MAAM,YAAY,GAAiB;IAC/B,QAAQ,EAAE,CAAC;IACX,WAAW,EAAE,CAAC;IACd,WAAW,EAAE,MAAM;IACnB,gBAAgB,EAAE,OAAO;IACzB,gBAAgB,EAAE,MAAM;IACxB,UAAU,EAAE,CAAC;CAChB,CAAC;AAEF,oFAAoF;AACvE,QAAA,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IAC7D,eAAe;IACf,iBAAiB;IACjB,MAAM;IACN,eAAe;IACf,uBAAuB;IACvB,KAAK;CACR,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,uEAAuE,CAAC;AAEvG,SAAS,qBAAqB,CAAC,OAAgC;IAC3D,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,IAAI,yCAAyC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC;QAC1B,CAAC;aAAM,CAAC;YACJ,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,uFAAuF;AACvF,SAAgB,eAAe,CAAC,OAAe;IAC3C,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9D,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChG,MAAM,YAAY,GAAG,SAAS;aACzB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACV,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,OAAO,EAAE,IAAI,CAAC;gBACV,CAAC,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE;gBACtF,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC;aACD,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;IACtE,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY,EAAE,SAAiB;IAC7D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,EAAE;YAC3B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACP,CAAC;AAEM,KAAK,UAAU,eAAe,CACjC,aAAqB,EACrB,IAAoC;IAEpC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACxD,IAAI,QAAQ,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;YACvD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACtD,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAAC;QAC9E,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAuC,CAAC;YAC/F,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACnG,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;YAC1F,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI,IAAA,wBAAe,EAAC,IAAI,CAAC,EAAE,CAAC;gBAChF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAC5C,CAAC;QACL,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACL,6BAA6B;IACjC,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,EAAE,cAAc,IAAI,gBAAgB,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,MAAM,UAAU,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAC7D,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAWD,SAAS,sBAAsB,CAAC,QAAuB;IACnD,OAAO;QACH,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;KAChC,CAAC;AACN,CAAC;AAED,SAAS,aAAa,CAClB,UAA2B,EAC3B,QAA8B,EAC9B,MAAqB;IAErB,MAAM,KAAK,GAAG;QACV,SAAS,UAAU,CAAC,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,EAAE;QACzE,+BAA+B,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,aAAa,MAAM,CAAC,UAAU,GAAG;KAC1G,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,sBAAsB,OAAO,CAAC,MAAM,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,sBAAsB,OAAO,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,IAAA,mBAAU,EAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC;AAEM,KAAK,UAAU,gBAAgB,CAClC,IAAe,EACf,OAAiC,EAAE;IAEnC,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAE/C,MAAM,YAAY,GAAG,CAAC,MAAc,EAAe,EAAE,CAAC,CAAC;QACnD,OAAO,EAAE,cAAc;QACvB,MAAM;QACN,QAAQ,EAAE,IAAA,mBAAU,EAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;QAC3C,QAAQ,EAAE,QAAQ;KACrB,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,YAAY,CAAC,kCAAkC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;QAClD,OAAO,YAAY,CACf,kBAAkB,IAAI,CAAC,QAAQ,CAAC,MAAM,0CAA0C,YAAY,CAAC,WAAW,GAAG,CAC9G,CAAC;IACN,CAAC;IAED,MAAM,SAAS,GAAoB,EAAE,CAAC;IAEtC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACvB,OAAO,YAAY,CAAC,WAAW,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACD,IAAA,uBAAc,EAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YACrE,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,GAAG,YAAY,oBAAW,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvE,OAAO,YAAY,CAAC,gCAAgC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAA,6BAAkB,EACjC;YACI,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,GAAG,CAAC,IAAI;SACjB,EACD,YAAY,EACZ,IAAI,CAAC,MAAM,CACd,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC5B,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC;YAC5C,IAAI,EAAE,IAAA,mBAAU,EAAC,IAAI,CAAC,IAAI,CAAC;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;SACpB,CAAC,CAAC;IACP,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACvB,OAAO,YAAY,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,QAAQ,GAAyB,IAAI,CAAC;IAC1C,IAAI,MAAM,GAAyB,IAAI,CAAC;IACxC,IAAI,aAAa,GAAwB,IAAI,CAAC;IAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACvC,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YACtB,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO,YAAY,CAAC,wCAAwC,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,UAAU,GAAG,IAAA,4BAAe,EAC9B;QACI,MAAM,EAAE,aAAa,CAAC,MAAM;QAC5B,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,GAAG,CAAC,aAAa,CAAC,MAAM,IAAI,EAAE,CAAC;KAClC,EACD,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAC/D,IAAI,EACJ,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAClF,CAAC;IAEF,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,KAAK,kBAAkB;QACrD,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,UAAU,CAAC,OAAO,KAAK,SAAS;YAC9B,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,cAAc,CAAC;IAEzB,OAAO;QACH,OAAO;QACP,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,MAAM,EAAE,IAAA,mBAAU,EAAC,UAAU,CAAC,MAAM,CAAC;QACrC,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QAC1D,YAAY,EAAE,MAAM,CAAC,UAAU;QAC/B,QAAQ,EAAE,aAAa,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC;QACrD,QAAQ,EAAE,QAAQ;KACrB,CAAC;AACN,CAAC;AASD,SAAgB,uBAAuB,CACnC,OAAyD,EACzD,eAAsC;IAEtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QAClD,MAAM,SAAS,GAAG,KAA+B,CAAC;QAClD,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACpF,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChF,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,GAAG,GAAG,CAAC;QAC1F,IAAI,QAAQ,IAAI,UAAU;YAAE,OAAO,SAAS,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAgB,eAAe,CAC3B,OAAyD,EACzD,YAAoB,EACpB,eAAsC;IAEtC,IAAI,CAAC,4BAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,OAAO,uBAAuB,CAAC,OAAO,EAAE,eAAe,CAAC,KAAK,IAAI,CAAC;AACtE,CAAC"}

package/dist/attack/scanScheduler.d.ts

@@ -53,5 +53,12 @@ export declare function buildRecoveryConstraint(state: ScanRunState, investigati
 /**
  * Compute a deterministic fingerprint for an action, used to detect
  * repeated recovery attempts on the same action.
+ *
+ * Requirement-derived scheduler actions carry a `requirementId` scope so
+ * two DIFFERENT requirements that map to the same tool call (e.g. several
+ * read_config requirements all producing `read_config:all`) don't collide
+ * on one burned fingerprint — the second requirement's recovery would
+ * otherwise be rejected as a duplicate of the first. read_file fingerprints
+ * stay range-based: ranged reads are already distinct per range.
  */
 export declare function actionFingerprint(action: AgentScanAction): string;

package/dist/attack/scanScheduler.js

@@ -34,7 +34,7 @@ function schedule(input) {
     const activeCandidates = candidates.getActive();
     for (const candidate of activeCandidates) {
         if (candidate.severity === 'critical' || candidate.severity === 'high') {
-            const action = actionForCandidateEvidence(candidate, target);
+            const action = actionForCandidateEvidence(candidate, target, investigation);
             if (action) {
                 return {
                     kind: 'deterministic-action',
@@ -52,7 +52,7 @@ function schedule(input) {
     const topWorkItem = workItems.highestPriority();
     if (topWorkItem && (topWorkItem.priority === 'critical' || topWorkItem.priority === 'high')) {
         if (topWorkItem.status === 'pending' || topWorkItem.status === 'active') {
-            const action = actionForWorkItem(topWorkItem, target, workItems);
+            const action = actionForWorkItem(topWorkItem, target, workItems, investigation);
             if (action) {
                 return {
                     kind: 'deterministic-action',
@@ -124,7 +124,7 @@ function schedule(input) {
     // 6-8. Missing evidence from unsatisfied requirements
     const unsatisfied = evidence.getUnsatisfiedRequirements();
     if (unsatisfied.length > 0) {
-        const action = actionForRequirement(unsatisfied[0], target);
+        const action = actionForRequirement(unsatisfied[0], target, undefined, investigation);
         if (action) {
             return {
                 kind: 'deterministic-action',
@@ -136,7 +136,7 @@ function schedule(input) {
     // 9. Lower-priority pending work items
     const pending = workItems.getPending();
     if (pending.length > 0) {
-        const action = actionForWorkItem(pending[0], target, workItems);
+        const action = actionForWorkItem(pending[0], target, workItems, investigation);
         if (action) {
             return {
                 kind: 'deterministic-action',
@@ -168,27 +168,35 @@ function buildRecoveryConstraint(state, investigation) {
 /**
  * Compute a deterministic fingerprint for an action, used to detect
  * repeated recovery attempts on the same action.
+ *
+ * Requirement-derived scheduler actions carry a `requirementId` scope so
+ * two DIFFERENT requirements that map to the same tool call (e.g. several
+ * read_config requirements all producing `read_config:all`) don't collide
+ * on one burned fingerprint — the second requirement's recovery would
+ * otherwise be rejected as a duplicate of the first. read_file fingerprints
+ * stay range-based: ranged reads are already distinct per range.
  */
 function actionFingerprint(action) {
     const a = action;
+    const reqScope = a.requirementId ? `@${a.requirementId}` : '';
     switch (a.type) {
         case 'read_file':
             return `read_file:${a.path || ''}:${a.startLine || 0}:${a.endLine || 0}`;
         case 'search_code':
-            return `search_code:${a.pattern || ''}:${a.glob || ''}`;
+            return `search_code:${a.pattern || ''}:${a.glob || ''}${reqScope}`;
         case 'trace_flow':
         case 'trace_flow_cross_file':
-            return `${a.type}:${a.filePath || ''}`;
+            return `${a.type}:${a.filePath || ''}${reqScope}`;
         case 'check_guard':
-            return `check_guard:${a.guardName || ''}:${a.attackType || ''}:${a.filePath || ''}`;
+            return `check_guard:${a.guardName || ''}:${a.attackType || ''}:${a.filePath || ''}${reqScope}`;
         case 'check_policy':
-            return `check_policy:${a.filePath || ''}`;
+            return `check_policy:${a.filePath || ''}${reqScope}`;
         case 'read_config':
-            return `read_config:${a.configKind || 'all'}`;
+            return `read_config:${a.configKind || 'all'}${reqScope}`;
         case 'get_endpoints':
-            return `get_endpoints:${a.glob || ''}`;
+            return `get_endpoints:${a.glob || ''}${reqScope}`;
         case 'find_tests':
-            return `find_tests:${a.filePath || ''}:${a.symbol || ''}`;
+            return `find_tests:${a.filePath || ''}:${a.symbol || ''}${reqScope}`;
         case 'find_definition':
             return `find_definition:${a.filePath || ''}:${a.symbol || ''}`;
         case 'find_references':
@@ -203,10 +211,10 @@ function canExecute(input) {
     return input.state.budget.stepsRemaining > 0 &&
         input.state.budget.costSpentUsd < input.state.budget.costCapUsd;
 }
-function actionForCandidateEvidence(candidate, target) {
+function actionForCandidateEvidence(candidate, target, investigation) {
     if (candidate.requiredEvidence && candidate.requiredEvidence.length > 0) {
         const req = candidate.requiredEvidence[0];
-        return actionForRequirement(req, target);
+        return actionForRequirement(req, target, undefined, investigation);
     }
     // Default: trace flow to gather more evidence
     return {
@@ -215,7 +223,7 @@ function actionForCandidateEvidence(candidate, target) {
         rationale: `Gather evidence for candidate: ${candidate.claim}`,
     };
 }
-function actionForWorkItem(item, target, queue) {
+function actionForWorkItem(item, target, queue, investigation) {
     if (item.kind === 'implementation-review') {
         const symbol = item.title.replace('Resolve implementation for: ', '');
         return {
@@ -231,64 +239,81 @@ function actionForWorkItem(item, target, queue) {
         return null;
     const req = unsatisfied[0];
     const targetFile = req.targetFiles?.[0] || item.targetFiles[0] || target.filePath;
-    return actionForRequirement(req, target, targetFile);
+    return actionForRequirement(req, target, targetFile, investigation);
 }
-function actionForRequirement(req, target, explicitTargetFile) {
+function actionForRequirement(req, target, explicitTargetFile, investigation) {
     const tool = req.requiredTools?.[0];
     if (!tool)
         return null;
     const targetFile = explicitTargetFile || req.targetFiles?.[0] || target.filePath;
+    // Stamp the requirement id so actionFingerprint scopes requirement-derived
+    // actions per-requirement — see actionFingerprint for why.
+    const stamp = (action) => Object.assign({}, action, { requirementId: req.id });
     switch (tool) {
-        case 'read_file':
-            return {
+        case 'read_file': {
+            // Ranged read: a rangeless read on a large file returns a
+            // function map (no content, no progress), so derive the next
+            // unread range from tracked coverage when one exists.
+            const nextRange = investigation?.getNextUnreadRange(targetFile) ?? null;
+            if (nextRange) {
+                return stamp({
+                    type: 'read_file',
+                    path: targetFile,
+                    startLine: nextRange.start,
+                    endLine: nextRange.end,
+                    rationale: req.description,
+                });
+            }
+            return stamp({
                 type: 'read_file',
                 path: targetFile,
                 rationale: req.description,
-            };
+            });
+        }
         case 'search_code':
-            return {
+            return stamp({
                 type: 'search_code',
                 pattern: 'auth|require|guard|permission|owner',
                 rationale: req.description,
-            };
+            });
         case 'check_policy':
-            return {
+            return stamp({
                 type: 'check_policy',
                 filePath: targetFile,
                 rationale: req.description,
-            };
+            });
         case 'check_guard':
-            return {
+            return stamp({
                 type: 'check_guard',
                 filePath: targetFile,
                 guardName: 'auth',
                 attackType: 'broken_access_control',
                 rationale: req.description,
-            };
+            });
         case 'get_endpoints':
-            return {
+            return stamp({
                 type: 'get_endpoints',
                 rationale: req.description,
-            };
+            });
         case 'trace_flow':
         case 'trace_flow_cross_file':
-            return {
+            return stamp({
                 type: 'trace_flow_cross_file',
                 filePath: targetFile,
                 rationale: req.description,
-            };
+            });
         case 'read_config':
-            return {
+            return stamp({
                 type: 'read_config',
                 configKind: 'all',
                 rationale: req.description,
-            };
+            });
         case 'find_tests':
-            return {
+            return stamp({
                 type: 'find_tests',
                 filePath: targetFile,
                 rationale: req.description,
-            };
+            });
         case 'find_definition':
             return null;
         case 'find_references':

package/dist/attack/scanScheduler.js.map

@@ -1 +1 @@
-{"version":3,"file":"scanScheduler.js","sourceRoot":"","sources":["../../src/attack/scanScheduler.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;AA+BH,4BA4IC;AAED,0DAcC;AAMD,8CA6BC;AA/LD,SAAgB,QAAQ,CAAC,KAAqB;IAC1C,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAE1F,kDAAkD;IAClD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACjF,CAAC;IAED,8DAA8D;IAC9D,MAAM,gBAAgB,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;IAChD,KAAK,MAAM,SAAS,IAAI,gBAAgB,EAAE,CAAC;QACvC,IAAI,SAAS,CAAC,QAAQ,KAAK,UAAU,IAAI,SAAS,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACrE,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC7D,IAAI,MAAM,EAAE,CAAC;gBACT,OAAO;oBACH,IAAI,EAAE,sBAAsB;oBAC5B,MAAM;oBACN,UAAU,EAAE,SAAS,CAAC,EAAE;oBACxB,MAAM,EAAE,4BAA4B,SAAS,CAAC,KAAK,kBAAkB;iBACxE,CAAC;YACN,CAAC;QACL,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,qEAAqE;IACrE,qEAAqE;IACrE,oEAAoE;IACpE,MAAM,WAAW,GAAG,SAAS,CAAC,eAAe,EAAE,CAAC;IAChD,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,QAAQ,KAAK,UAAU,IAAI,WAAW,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC;QAC1F,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtE,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YACjE,IAAI,MAAM,EAAE,CAAC;gBACT,OAAO;oBACH,IAAI,EAAE,sBAAsB;oBAC5B,MAAM;oBACN,UAAU,EAAE,WAAW,CAAC,EAAE;oBAC1B,MAAM,EAAE,cAAc,WAAW,CAAC,QAAQ,qBAAqB,WAAW,CAAC,KAAK,EAAE;iBACrF,CAAC;YACN,CAAC;QACL,CAAC;IACL,CAAC;IAED,oEAAoE;IACpE,qEAAqE;IACrE,gDAAgD;IAChD,MAAM,kBAAkB,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACpH,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW;QAChC,CAAC,CAAC,aAAa,CAAC,yBAAyB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,CAAC;QACvI,CAAC,CAAC,aAAa,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,SAAS,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,QAAQ,EAAE,UAAU,IAAI,CAAC,CAAC;QAC7C,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjG,MAAM,GAAG,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,OAAO;YACH,IAAI,EAAE,sBAAsB;YAC5B,MAAM,EAAE;gBACJ,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,MAAM,CAAC,QAAQ;gBACrB,SAAS,EAAE,SAAS,CAAC,KAAK;gBAC1B,OAAO,EAAE,SAAS,CAAC,GAAG;gBACtB,SAAS,EAAE,qCAAqC,GAAG,QAAQ,UAAU,SAAS;aAC9D;YACpB,MAAM,EAAE,gBAAgB,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,GAAG,oBAAoB,GAAG,YAAY;SAC9F,CAAC;IACN,CAAC;IAED,mEAAmE;IACnE,MAAM,eAAe,GAAG,QAAQ,CAAC,0BAA0B,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACnE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CACxD,CAAC;IACF,IAAI,eAAe,EAAE,CAAC;QAClB,OAAO;YACH,IAAI,EAAE,sBAAsB;YAC5B,MAAM,EAAE;gBACJ,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBACjE,SAAS,EAAE,6CAA6C;aACxC;YACpB,MAAM,EAAE,kDAAkD;SAC7D,CAAC;IACN,CAAC;IAED,2CAA2C;IAC3C,MAAM,kBAAkB,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;IACpD,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAChF,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,sBAAsB,EAAE,CAAC;QAChD,IAAI,KAAK,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,sBAAsB;gBAC5B,MAAM,EAAE;oBACJ,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,KAAK,CAAC,QAAQ;oBACpB,SAAS,EAAE,KAAK,CAAC,KAAK;oBACtB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,EAAE,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC;oBACnD,SAAS,EAAE,8BAA8B,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE;iBACpD;gBACpB,UAAU,EAAE,KAAK,CAAC,EAAE;gBACpB,MAAM,EAAE,GAAG,mBAAmB,CAAC,MAAM,2CAA2C;aACnF,CAAC;QACN,CAAC;IACL,CAAC;IAED,sDAAsD;IACtD,MAAM,WAAW,GAAG,QAAQ,CAAC,0BAA0B,EAAE,CAAC;IAC1D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5D,IAAI,MAAM,EAAE,CAAC;YACT,OAAO;gBACH,IAAI,EAAE,sBAAsB;gBAC5B,MAAM;gBACN,MAAM,EAAE,qBAAqB,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;aAC5D,CAAC;QACN,CAAC;IACL,CAAC;IAED,uCAAuC;IACvC,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC;IACvC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,MAAM,EAAE,CAAC;YACT,OAAO;gBACH,IAAI,EAAE,sBAAsB;gBAC5B,MAAM;gBACN,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;gBACzB,MAAM,EAAE,gCAAgC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;aAC7D,CAAC;QACN,CAAC;IACL,CAAC;IAED,mDAAmD;IACnD,IAAI,UAAU,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC;IAC3G,CAAC;IAED,gCAAgC;IAChC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,sDAAsD,EAAE,CAAC;AAC7F,CAAC;AAED,SAAgB,uBAAuB,CACnC,KAAmB,EACnB,aAAiC;IAEjC,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAC9D,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAElC,MAAM,cAAc,GAAG,aAAa,CAAC,4BAA4B,EAAE,CAAC;IACpE,OAAO;QACH,IAAI,EAAE,UAAU;QAChB,gBAAgB,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;QAC1D,cAAc,EAAE,cAAqB,IAAI,SAAS;QAClD,MAAM,EAAE,kBAAkB,OAAO,oCAAoC;KACxE,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,MAAuB;IACrD,MAAM,CAAC,GAAG,MAAa,CAAC;IACxB,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACb,KAAK,WAAW;YACZ,OAAO,aAAa,CAAC,CAAC,IAAI,IAAI,EAAE,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC;QAC7E,KAAK,aAAa;YACd,OAAO,eAAe,CAAC,CAAC,OAAO,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QAC5D,KAAK,YAAY,CAAC;QAClB,KAAK,uBAAuB;YACxB,OAAO,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC3C,KAAK,aAAa;YACd,OAAO,eAAe,CAAC,CAAC,SAAS,IAAI,EAAE,IAAI,CAAC,CAAC,UAAU,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACxF,KAAK,cAAc;YACf,OAAO,gBAAgB,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC9C,KAAK,aAAa;YACd,OAAO,eAAe,CAAC,CAAC,UAAU,IAAI,KAAK,EAAE,CAAC;QAClD,KAAK,eAAe;YAChB,OAAO,iBAAiB,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QAC3C,KAAK,YAAY;YACb,OAAO,cAAc,CAAC,CAAC,QAAQ,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAC9D,KAAK,iBAAiB;YAClB,OAAO,mBAAmB,CAAC,CAAC,QAAQ,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACnE,KAAK,iBAAiB;YAClB,OAAO,mBAAmB,CAAC,CAAC,QAAQ,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACnE,KAAK,YAAY;YACb,OAAO,cAAc,CAAC,CAAC,QAAQ,IAAI,EAAE,IAAI,CAAC,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QACpE;YACI,OAAO,GAAG,CAAC,CAAC,IAAI,IAAI,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC3E,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,KAAqB;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,GAAG,CAAC;QACrC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC;AAC3E,CAAC;AAED,SAAS,0BAA0B,CAAC,SAAc,EAAE,MAAuB;IACvE,IAAI,SAAS,CAAC,gBAAgB,IAAI,SAAS,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,GAAG,GAAG,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAC1C,OAAO,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IACD,8CAA8C;IAC9C,OAAO;QACH,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ;QAC7D,SAAS,EAAE,kCAAkC,SAAS,CAAC,KAAK,EAAE;KAC9C,CAAC;AACzB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAc,EAAE,MAAuB,EAAE,KAAqB;IACrF,IAAI,IAAI,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC;QACtE,OAAO;YACH,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,OAAO,MAAM,oBAAoB,MAAM,EAAE;YAClD,SAAS,EAAE,IAAI,CAAC,KAAK;SACL,CAAC;IACzB,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;IAC1F,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC;IAClF,OAAO,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAwB,EAAE,MAAuB,EAAE,kBAA2B;IACxG,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,UAAU,GAAG,kBAAkB,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC;IAEjF,QAAQ,IAAI,EAAE,CAAC;QACX,KAAK,WAAW;YACZ,OAAO;gBACH,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,UAAU;gBAChB,SAAS,EAAE,GAAG,CAAC,WAAW;aACV,CAAC;QACzB,KAAK,aAAa;YACd,OAAO;gBACH,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,qCAAqC;gBAC9C,SAAS,EAAE,GAAG,CAAC,WAAW;aACV,CAAC;QACzB,KAAK,cAAc;YACf,OAAO;gBACH,IAAI,EAAE,cAAc;gBACpB,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,GAAG,CAAC,WAAW;aACV,CAAC;QACzB,KAAK,aAAa;YACd,OAAO;gBACH,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,MAAM;gBACjB,UAAU,EAAE,uBAAuB;gBACnC,SAAS,EAAE,GAAG,CAAC,WAAW;aACV,CAAC;QACzB,KAAK,eAAe;YAChB,OAAO;gBACH,IAAI,EAAE,eAAe;gBACrB,SAAS,EAAE,GAAG,CAAC,WAAW;aACV,CAAC;QACzB,KAAK,YAAY,CAAC;QAClB,KAAK,uBAAuB;YACxB,OAAO;gBACH,IAAI,EAAE,uBAAuB;gBAC7B,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,GAAG,CAAC,WAAW;aACV,CAAC;QACzB,KAAK,aAAa;YACd,OAAO;gBACH,IAAI,EAAE,aAAa;gBACnB,UAAU,EAAE,KAAK;gBACjB,SAAS,EAAE,GAAG,CAAC,WAAW;aACV,CAAC;QACzB,KAAK,YAAY;YACb,OAAO;gBACH,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,GAAG,CAAC,WAAW;aACV,CAAC;QACzB,KAAK,iBAAiB;YAClB,OAAO,IAAI,CAAC;QAChB,KAAK,iBAAiB;YAClB,OAAO,IAAI,CAAC;QAChB;YACI,OAAO,IAAI,CAAC;IACpB,CAAC;AACL,CAAC"}
+{"version":3,"file":"scanScheduler.js","sourceRoot":"","sources":["../../src/attack/scanScheduler.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;AA+BH,4BA4IC;AAED,0DAcC;AAaD,8CA8BC;AAvMD,SAAgB,QAAQ,CAAC,KAAqB;IAC1C,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAE1F,kDAAkD;IAClD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACjF,CAAC;IAED,8DAA8D;IAC9D,MAAM,gBAAgB,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;IAChD,KAAK,MAAM,SAAS,IAAI,gBAAgB,EAAE,CAAC;QACvC,IAAI,SAAS,CAAC,QAAQ,KAAK,UAAU,IAAI,SAAS,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACrE,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;YAC5E,IAAI,MAAM,EAAE,CAAC;gBACT,OAAO;oBACH,IAAI,EAAE,sBAAsB;oBAC5B,MAAM;oBACN,UAAU,EAAE,SAAS,CAAC,EAAE;oBACxB,MAAM,EAAE,4BAA4B,SAAS,CAAC,KAAK,kBAAkB;iBACxE,CAAC;YACN,CAAC;QACL,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,qEAAqE;IACrE,qEAAqE;IACrE,oEAAoE;IACpE,MAAM,WAAW,GAAG,SAAS,CAAC,eAAe,EAAE,CAAC;IAChD,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,QAAQ,KAAK,UAAU,IAAI,WAAW,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC;QAC1F,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtE,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;YAChF,IAAI,MAAM,EAAE,CAAC;gBACT,OAAO;oBACH,IAAI,EAAE,sBAAsB;oBAC5B,MAAM;oBACN,UAAU,EAAE,WAAW,CAAC,EAAE;oBAC1B,MAAM,EAAE,cAAc,WAAW,CAAC,QAAQ,qBAAqB,WAAW,CAAC,KAAK,EAAE;iBACrF,CAAC;YACN,CAAC;QACL,CAAC;IACL,CAAC;IAED,oEAAoE;IACpE,qEAAqE;IACrE,gDAAgD;IAChD,MAAM,kBAAkB,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACpH,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW;QAChC,CAAC,CAAC,aAAa,CAAC,yBAAyB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,CAAC;QACvI,CAAC,CAAC,aAAa,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,SAAS,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,QAAQ,EAAE,UAAU,IAAI,CAAC,CAAC;QAC7C,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjG,MAAM,GAAG,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,OAAO;YACH,IAAI,EAAE,sBAAsB;YAC5B,MAAM,EAAE;gBACJ,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,MAAM,CAAC,QAAQ;gBACrB,SAAS,EAAE,SAAS,CAAC,KAAK;gBAC1B,OAAO,EAAE,SAAS,CAAC,GAAG;gBACtB,SAAS,EAAE,qCAAqC,GAAG,QAAQ,UAAU,SAAS;aAC9D;YACpB,MAAM,EAAE,gBAAgB,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,GAAG,oBAAoB,GAAG,YAAY;SAC9F,CAAC;IACN,CAAC;IAED,mEAAmE;IACnE,MAAM,eAAe,GAAG,QAAQ,CAAC,0BAA0B,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACnE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CACxD,CAAC;IACF,IAAI,eAAe,EAAE,CAAC;QAClB,OAAO;YACH,IAAI,EAAE,sBAAsB;YAC5B,MAAM,EAAE;gBACJ,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBACjE,SAAS,EAAE,6CAA6C;aACxC;YACpB,MAAM,EAAE,kDAAkD;SAC7D,CAAC;IACN,CAAC;IAED,2CAA2C;IAC3C,MAAM,kBAAkB,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;IACpD,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAChF,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,sBAAsB,EAAE,CAAC;QAChD,IAAI,KAAK,EAAE,CAAC;YACR,OAAO;gBACH,IAAI,EAAE,sBAAsB;gBAC5B,MAAM,EAAE;oBACJ,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,KAAK,CAAC,QAAQ;oBACpB,SAAS,EAAE,KAAK,CAAC,KAAK;oBACtB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,EAAE,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC;oBACnD,SAAS,EAAE,8BAA8B,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE;iBACpD;gBACpB,UAAU,EAAE,KAAK,CAAC,EAAE;gBACpB,MAAM,EAAE,GAAG,mBAAmB,CAAC,MAAM,2CAA2C;aACnF,CAAC;QACN,CAAC;IACL,CAAC;IAED,sDAAsD;IACtD,MAAM,WAAW,GAAG,QAAQ,CAAC,0BAA0B,EAAE,CAAC;IAC1D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACtF,IAAI,MAAM,EAAE,CAAC;YACT,OAAO;gBACH,IAAI,EAAE,sBAAsB;gBAC5B,MAAM;gBACN,MAAM,EAAE,qBAAqB,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;aAC5D,CAAC;QACN,CAAC;IACL,CAAC;IAED,uCAAuC;IACvC,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC;IACvC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QAC/E,IAAI,MAAM,EAAE,CAAC;YACT,OAAO;gBACH,IAAI,EAAE,sBAAsB;gBAC5B,MAAM;gBACN,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;gBACzB,MAAM,EAAE,gCAAgC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;aAC7D,CAAC;QACN,CAAC;IACL,CAAC;IAED,mDAAmD;IACnD,IAAI,UAAU,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC;IAC3G,CAAC;IAED,gCAAgC;IAChC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,sDAAsD,EAAE,CAAC;AAC7F,CAAC;AAED,SAAgB,uBAAuB,CACnC,KAAmB,EACnB,aAAiC;IAEjC,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAC9D,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAElC,MAAM,cAAc,GAAG,aAAa,CAAC,4BAA4B,EAAE,CAAC;IACpE,OAAO;QACH,IAAI,EAAE,UAAU;QAChB,gBAAgB,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;QAC1D,cAAc,EAAE,cAAqB,IAAI,SAAS;QAClD,MAAM,EAAE,kBAAkB,OAAO,oCAAoC;KACxE,CAAC;AACN,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,iBAAiB,CAAC,MAAuB;IACrD,MAAM,CAAC,GAAG,MAAa,CAAC;IACxB,MAAM,QAAQ,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACb,KAAK,WAAW;YACZ,OAAO,aAAa,CAAC,CAAC,IAAI,IAAI,EAAE,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC;QAC7E,KAAK,aAAa;YACd,OAAO,eAAe,CAAC,CAAC,OAAO,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC;QACvE,KAAK,YAAY,CAAC;QAClB,KAAK,uBAAuB;YACxB,OAAO,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC;QACtD,KAAK,aAAa;YACd,OAAO,eAAe,CAAC,CAAC,SAAS,IAAI,EAAE,IAAI,CAAC,CAAC,UAAU,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC;QACnG,KAAK,cAAc;YACf,OAAO,gBAAgB,CAAC,CAAC,QAAQ,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC;QACzD,KAAK,aAAa;YACd,OAAO,eAAe,CAAC,CAAC,UAAU,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;QAC7D,KAAK,eAAe;YAChB,OAAO,iBAAiB,CAAC,CAAC,IAAI,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC;QACtD,KAAK,YAAY;YACb,OAAO,cAAc,CAAC,CAAC,QAAQ,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC;QACzE,KAAK,iBAAiB;YAClB,OAAO,mBAAmB,CAAC,CAAC,QAAQ,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACnE,KAAK,iBAAiB;YAClB,OAAO,mBAAmB,CAAC,CAAC,QAAQ,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACnE,KAAK,YAAY;YACb,OAAO,cAAc,CAAC,CAAC,QAAQ,IAAI,EAAE,IAAI,CAAC,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QACpE;YACI,OAAO,GAAG,CAAC,CAAC,IAAI,IAAI,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC3E,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,KAAqB;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,GAAG,CAAC;QACrC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC;AAC3E,CAAC;AAED,SAAS,0BAA0B,CAAC,SAAc,EAAE,MAAuB,EAAE,aAAkC;IAC3G,IAAI,SAAS,CAAC,gBAAgB,IAAI,SAAS,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,GAAG,GAAG,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAC1C,OAAO,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;IACvE,CAAC;IACD,8CAA8C;IAC9C,OAAO;QACH,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ;QAC7D,SAAS,EAAE,kCAAkC,SAAS,CAAC,KAAK,EAAE;KAC9C,CAAC;AACzB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAc,EAAE,MAAuB,EAAE,KAAqB,EAAE,aAAkC;IACzH,IAAI,IAAI,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC;QACtE,OAAO;YACH,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,OAAO,MAAM,oBAAoB,MAAM,EAAE;YAClD,SAAS,EAAE,IAAI,CAAC,KAAK;SACL,CAAC;IACzB,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;IAC1F,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC;IAClF,OAAO,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAwB,EAAE,MAAuB,EAAE,kBAA2B,EAAE,aAAkC;IAC5I,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,UAAU,GAAG,kBAAkB,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC;IACjF,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,KAAK,GAAG,CAAC,MAAuB,EAAmB,EAAE,CACvD,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IAEzD,QAAQ,IAAI,EAAE,CAAC;QACX,KAAK,WAAW,CAAC,CAAC,CAAC;YACf,0DAA0D;YAC1D,6DAA6D;YAC7D,sDAAsD;YACtD,MAAM,SAAS,GAAG,aAAa,EAAE,kBAAkB,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;YACxE,IAAI,SAAS,EAAE,CAAC;gBACZ,OAAO,KAAK,CAAC;oBACT,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,UAAU;oBAChB,SAAS,EAAE,SAAS,CAAC,KAAK;oBAC1B,OAAO,EAAE,SAAS,CAAC,GAAG;oBACtB,SAAS,EAAE,GAAG,CAAC,WAAW;iBACV,CAAC,CAAC;YAC1B,CAAC;YACD,OAAO,KAAK,CAAC;gBACT,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,UAAU;gBAChB,SAAS,EAAE,GAAG,CAAC,WAAW;aACV,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,aAAa;YACd,OAAO,KAAK,CAAC;gBACT,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,qCAAqC;gBAC9C,SAAS,EAAE,GAAG,CAAC,WAAW;aACV,CAAC,CAAC;QAC1B,KAAK,cAAc;YACf,OAAO,KAAK,CAAC;gBACT,IAAI,EAAE,cAAc;gBACpB,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,GAAG,CAAC,WAAW;aACV,CAAC,CAAC;QAC1B,KAAK,aAAa;YACd,OAAO,KAAK,CAAC;gBACT,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,MAAM;gBACjB,UAAU,EAAE,uBAAuB;gBACnC,SAAS,EAAE,GAAG,CAAC,WAAW;aACV,CAAC,CAAC;QAC1B,KAAK,eAAe;YAChB,OAAO,KAAK,CAAC;gBACT,IAAI,EAAE,eAAe;gBACrB,SAAS,EAAE,GAAG,CAAC,WAAW;aACV,CAAC,CAAC;QAC1B,KAAK,YAAY,CAAC;QAClB,KAAK,uBAAuB;YACxB,OAAO,KAAK,CAAC;gBACT,IAAI,EAAE,uBAAuB;gBAC7B,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,GAAG,CAAC,WAAW;aACV,CAAC,CAAC;QAC1B,KAAK,aAAa;YACd,OAAO,KAAK,CAAC;gBACT,IAAI,EAAE,aAAa;gBACnB,UAAU,EAAE,KAAK;gBACjB,SAAS,EAAE,GAAG,CAAC,WAAW;aACV,CAAC,CAAC;QAC1B,KAAK,YAAY;YACb,OAAO,KAAK,CAAC;gBACT,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,GAAG,CAAC,WAAW;aACV,CAAC,CAAC;QAC1B,KAAK,iBAAiB;YAClB,OAAO,IAAI,CAAC;QAChB,KAAK,iBAAiB;YAClB,OAAO,IAAI,CAAC;QAChB;YACI,OAAO,IAAI,CAAC;IACpB,CAAC;AACL,CAAC"}

package/dist/attack/scanState.d.ts

@@ -10,7 +10,7 @@
  */
 import type { AgentScanTarget, AgentScanTranscriptStep, AgentScanBudget } from './agentScanProtocol';
 export type ScanPhase = 'planning' | 'surveying' | 'tracing' | 'candidate_investigation' | 'finish_review' | 'verifying' | 'evidence_recovery' | 'finalizing' | 'completed' | 'terminated';
-export type ScanTerminationReason = 'agent_finish' | 'forced_incomplete' | 'cost_cap' | 'budget_exhausted' | 'wall_clock' | 'cancelled' | 'api_error' | 'blocked_read_recovery';
+export type ScanTerminationReason = 'agent_finish' | 'forced_incomplete' | 'cost_cap' | 'budget_exhausted' | 'wall_clock' | 'cancelled' | 'api_error' | 'blocked_read_recovery' | 'llm_degraded';
 export interface ScanTermination {
     reason: ScanTerminationReason;
     phase: ScanPhase;

package/dist/attack/scanState.js.map

@@ -1 +1 @@
-{"version":3,"file":"scanState.js","sourceRoot":"","sources":["../../src/attack/scanState.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;AAsFH,gDAmCC;AAED,kDAaC;AAED,sCAYC;AAED,wCAEC;AAED,gDAGC;AAED,sDAEC;AAED,wCAEC;AAED,sCAWC;AA3GD,MAAM,iBAAiB,GAAmC;IACtD,QAAQ,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;IACrC,SAAS,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC;IACpC,OAAO,EAAE,CAAC,yBAAyB,EAAE,eAAe,EAAE,YAAY,CAAC;IACnE,uBAAuB,EAAE,CAAC,eAAe,EAAE,SAAS,EAAE,YAAY,CAAC;IACnE,aAAa,EAAE,CAAC,WAAW,EAAE,mBAAmB,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,CAAC;IACvF,SAAS,EAAE,CAAC,mBAAmB,EAAE,YAAY,EAAE,YAAY,CAAC;IAC5D,iBAAiB,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,yBAAyB,EAAE,YAAY,CAAC;IACpF,UAAU,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;IACvC,SAAS,EAAE,EAAE;IACb,UAAU,EAAE,EAAE;CACjB,CAAC;AAEF,SAAgB,kBAAkB,CAC9B,KAAa,EACb,MAAuB,EACvB,MAAuB;IAEvB,OAAO;QACH,KAAK;QACL,KAAK,EAAE,UAAU;QACjB,MAAM;QACN,UAAU,EAAE,EAAE;QACd,MAAM,EAAE;YACJ,SAAS,EAAE,CAAC;YACZ,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,YAAY,EAAE,CAAC;YACf,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,WAAW,EAAE,OAAO;SACvB;QACD,QAAQ,EAAE;YACN,yBAAyB,EAAE,CAAC;YAC5B,mBAAmB,EAAE,CAAC;YACtB,gBAAgB,EAAE,CAAC;YACnB,+BAA+B,EAAE,IAAI;YACrC,8BAA8B,EAAE,CAAC;YACjC,wBAAwB,EAAE,CAAC;YAC3B,2BAA2B,EAAE,CAAC;YAC9B,qBAAqB,EAAE,CAAC;YACxB,0BAA0B,EAAE,CAAC;SAChC;QACD,cAAc,EAAE,CAAC;QACjB,kBAAkB,EAAE,CAAC;KACxB,CAAC;AACN,CAAC;AAED,SAAgB,mBAAmB,CAC/B,KAAmB,EACnB,IAAe,EACf,MAAc;IAEd,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACX,kCAAkC,KAAK,CAAC,KAAK,OAAO,IAAI,KAAK,MAAM,KAAK;YACxE,sBAAsB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7C,CAAC;IACN,CAAC;IACD,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;AACvB,CAAC;AAED,SAAgB,aAAa,CACzB,KAAmB,EACnB,MAA6B,EAC7B,OAAgB;IAEhB,KAAK,CAAC,WAAW,GAAG;QAChB,MAAM;QACN,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,OAAO;KACV,CAAC;IACF,KAAK,CAAC,KAAK,GAAG,YAAY,CAAC;AAC/B,CAAC;AAED,SAAgB,cAAc,CAAC,KAAmB;IAC9C,OAAO,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,KAAK,KAAK,YAAY,CAAC;AACvE,CAAC;AAED,SAAgB,kBAAkB,CAAC,KAAmB;IAClD,OAAO,KAAK,CAAC,MAAM,CAAC,cAAc,GAAG,CAAC;QAC/B,KAAK,CAAC,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC;AAC/D,CAAC;AAED,SAAgB,qBAAqB,CAAC,KAAmB;IACrD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;AAC1E,CAAC;AAED,SAAgB,cAAc,CAAC,KAAmB;IAC9C,OAAO,kBAAkB,CAAC,KAAK,CAAC,IAAI,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;AAC/F,CAAC;AAED,SAAgB,aAAa,CAAC,KAAmB;IAC7C,OAAO,IAAI,CAAC,SAAS,CAAC;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;QACjC,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc;QAC3C,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY;QACvC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,mBAAmB,EAAE,KAAK,CAAC,QAAQ,CAAC,mBAAmB;QACvD,WAAW,EAAE,KAAK,CAAC,WAAW;KACjC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"scanState.js","sourceRoot":"","sources":["../../src/attack/scanState.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;AAuFH,gDAmCC;AAED,kDAaC;AAED,sCAYC;AAED,wCAEC;AAED,gDAGC;AAED,sDAEC;AAED,wCAEC;AAED,sCAWC;AA3GD,MAAM,iBAAiB,GAAmC;IACtD,QAAQ,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;IACrC,SAAS,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC;IACpC,OAAO,EAAE,CAAC,yBAAyB,EAAE,eAAe,EAAE,YAAY,CAAC;IACnE,uBAAuB,EAAE,CAAC,eAAe,EAAE,SAAS,EAAE,YAAY,CAAC;IACnE,aAAa,EAAE,CAAC,WAAW,EAAE,mBAAmB,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,CAAC;IACvF,SAAS,EAAE,CAAC,mBAAmB,EAAE,YAAY,EAAE,YAAY,CAAC;IAC5D,iBAAiB,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,yBAAyB,EAAE,YAAY,CAAC;IACpF,UAAU,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;IACvC,SAAS,EAAE,EAAE;IACb,UAAU,EAAE,EAAE;CACjB,CAAC;AAEF,SAAgB,kBAAkB,CAC9B,KAAa,EACb,MAAuB,EACvB,MAAuB;IAEvB,OAAO;QACH,KAAK;QACL,KAAK,EAAE,UAAU;QACjB,MAAM;QACN,UAAU,EAAE,EAAE;QACd,MAAM,EAAE;YACJ,SAAS,EAAE,CAAC;YACZ,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,YAAY,EAAE,CAAC;YACf,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,WAAW,EAAE,OAAO;SACvB;QACD,QAAQ,EAAE;YACN,yBAAyB,EAAE,CAAC;YAC5B,mBAAmB,EAAE,CAAC;YACtB,gBAAgB,EAAE,CAAC;YACnB,+BAA+B,EAAE,IAAI;YACrC,8BAA8B,EAAE,CAAC;YACjC,wBAAwB,EAAE,CAAC;YAC3B,2BAA2B,EAAE,CAAC;YAC9B,qBAAqB,EAAE,CAAC;YACxB,0BAA0B,EAAE,CAAC;SAChC;QACD,cAAc,EAAE,CAAC;QACjB,kBAAkB,EAAE,CAAC;KACxB,CAAC;AACN,CAAC;AAED,SAAgB,mBAAmB,CAC/B,KAAmB,EACnB,IAAe,EACf,MAAc;IAEd,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACX,kCAAkC,KAAK,CAAC,KAAK,OAAO,IAAI,KAAK,MAAM,KAAK;YACxE,sBAAsB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7C,CAAC;IACN,CAAC;IACD,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;AACvB,CAAC;AAED,SAAgB,aAAa,CACzB,KAAmB,EACnB,MAA6B,EAC7B,OAAgB;IAEhB,KAAK,CAAC,WAAW,GAAG;QAChB,MAAM;QACN,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,OAAO;KACV,CAAC;IACF,KAAK,CAAC,KAAK,GAAG,YAAY,CAAC;AAC/B,CAAC;AAED,SAAgB,cAAc,CAAC,KAAmB;IAC9C,OAAO,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,KAAK,KAAK,YAAY,CAAC;AACvE,CAAC;AAED,SAAgB,kBAAkB,CAAC,KAAmB;IAClD,OAAO,KAAK,CAAC,MAAM,CAAC,cAAc,GAAG,CAAC;QAC/B,KAAK,CAAC,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC;AAC/D,CAAC;AAED,SAAgB,qBAAqB,CAAC,KAAmB;IACrD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;AAC1E,CAAC;AAED,SAAgB,cAAc,CAAC,KAAmB;IAC9C,OAAO,kBAAkB,CAAC,KAAK,CAAC,IAAI,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;AAC/F,CAAC;AAED,SAAgB,aAAa,CAAC,KAAmB;IAC7C,OAAO,IAAI,CAAC,SAAS,CAAC;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;QACjC,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc;QAC3C,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY;QACvC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,mBAAmB,EAAE,KAAK,CAAC,QAAQ,CAAC,mBAAmB;QACvD,WAAW,EAAE,KAAK,CAAC,WAAW;KACjC,CAAC,CAAC;AACP,CAAC"}

package/dist/audit/findingReviewQueue.d.ts

@@ -23,7 +23,7 @@
  * evidenceHash) are not re-enqueued — the existing item is returned.
  */
 export type ReviewDecision = 'confirmed' | 'rejected' | 'deferred';
-export type ReviewReason = 'inconclusive-verification' | 'sandbox-unavailable' | 'verification-budget-exhausted' | 'runtime-blocked' | 'test-generation-failed' | 'manual-request';
+export type ReviewReason = 'inconclusive-verification' | 'sandbox-unavailable' | 'verification-budget-exhausted' | 'runtime-blocked' | 'test-generation-failed' | 'runtime-probe-pending' | 'manual-request';
 export interface FindingReviewItem {
     id: string;
     createdAt: string;