blitzstrike 1.0.24 → 1.0.26

package/dist/index.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-import { createRequire } from "node:module";
 var __create = Object.create;
 var __getProtoOf = Object.getPrototypeOf;
 var __defProp = Object.defineProperty;
@@ -44,7 +43,6 @@ var __esm = (fn, res, err) => () => {
     throw err[0];
   return res;
 };
-var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // node_modules/ajv/dist/compile/codegen/code.js
 var require_code = __commonJS(function(exports) {
@@ -14822,7 +14820,7 @@ var require_src = __commonJS(function(exports, module) {
 });
 
 // src/sync.ts
-import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync2, readFileSync as readFileSync11, readdirSync as readdirSync5, statSync as statSync3, rmSync } from "node:fs";
+import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync4, readFileSync as readFileSync11, readdirSync as readdirSync5, statSync as statSync3, rmSync as rmSync2 } from "node:fs";
 import { join as join9 } from "node:path";
 import { homedir as homedir4 } from "node:os";
 import { fileURLToPath as fileURLToPath7 } from "node:url";
@@ -14881,7 +14879,7 @@ function syncData() {
   if (gitOk && (!dirExists(payloadsPath) || countFiles(payloadsPath) === 0 || !dirExists(templatesPath) || countFiles(templatesPath) === 0)) {
     const tmp = join9(DATA_ROOT2, ".tmp-clone");
     if (dirExists(tmp))
-      rmSync(tmp, { recursive: true, force: true });
+      rmSync2(tmp, { recursive: true, force: true });
     const r = spawnSync3("git", ["clone", "--depth", "1", "--filter=blob:none", "--sparse", GITHUB_REPO, tmp], { timeout: 120000 });
     if (r.status === 0) {
       const sparse = spawnSync3("git", ["-C", tmp, "sparse-checkout", "set", "payloads", "templates"], { timeout: 120000 });
@@ -14895,7 +14893,7 @@ function syncData() {
           templatesSynced = true;
         }
       }
-      rmSync(tmp, { recursive: true, force: true });
+      rmSync2(tmp, { recursive: true, force: true });
     }
   }
   return {
@@ -14918,7 +14916,7 @@ function manualCopy(src, dst) {
     if (e.isDirectory())
       manualCopy(s, d);
     else
-      writeFileSync2(d, readFileSync11(s));
+      writeFileSync4(d, readFileSync11(s));
   }
 }
 var ROOT6, DATA_ROOT2, GITHUB_REPO = "https://github.com/shinthink/blitzstrike.git";
@@ -29649,7 +29647,7 @@ import { join as join4 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/memory.ts
-import { readFileSync as readFileSync2, appendFileSync, mkdirSync, existsSync } from "node:fs";
+import { readFileSync as readFileSync2, appendFileSync, mkdirSync, existsSync, writeFileSync } from "node:fs";
 import { join as join2 } from "node:path";
 import { createHash } from "node:crypto";
 import { homedir } from "node:os";
@@ -29762,7 +29760,6 @@ function listMemory() {
   };
 }
 function forget(id) {
-  const { writeFileSync } = __require("node:fs");
   const entries = loadMemory();
   const kept = entries.filter((e) => e.id !== id);
   if (kept.length === entries.length) {
@@ -30476,7 +30473,7 @@ function loadJson(name) {
 function detectWaf(headers, body = "") {
   const sigs = loadJson("waf_signatures");
   if (!sigs)
-    return { error: "waf_signatures.json not loaded" };
+    return { detected: false, wafs: [], error: "waf_signatures.json not loaded" };
   const headerSigs = sigs.header_signatures ?? [];
   const bodySigs = sigs.body_signatures ?? [];
   const matches = [];
@@ -30487,7 +30484,7 @@ function detectWaf(headers, body = "") {
     if (!h)
       continue;
     if (pattern) {
-      const val = (headers[h] ?? headers[s.header] ?? "").toLowerCase();
+      const val = (headers[h] ?? headers[s.header ?? ""] ?? "").toLowerCase();
       if (val.includes(pattern)) {
         matches.push({ waf: s.waf, header: s.header, pattern: s.pattern, confidence: s.confidence, via: "header-value" });
       }
@@ -30520,14 +30517,14 @@ function detectWaf(headers, body = "") {
 function techCorrelation(tech) {
   const data = loadJson("tech_correlations");
   if (!data)
-    return { error: "tech_correlations.json not loaded" };
+    return { found: false, error: "tech_correlations.json not loaded" };
   const key = tech.toLowerCase();
   const entry = data[key];
   if (!entry) {
     const matches = Object.keys(data).filter((k) => k.includes(key) || key.includes(k)).slice(0, 5);
     return { found: false, tech, suggestions: matches };
   }
-  return { found: true, tech: key, vulns: entry.vulns ?? [], paths: entry.paths ?? [], detection: entry.detection ?? entry };
+  return { found: true, tech: key, vulns: entry.vulns ?? [], paths: entry.paths ?? [], detection: entry.detection ?? { vulns: entry.vulns, paths: entry.paths } };
 }
 function cveCorrelation(cveId) {
   const data = loadJson("cve_correlations");
@@ -50478,6 +50475,9 @@ function dedupFindings(findings) {
   }
   return [...groups.values()];
 }
+function uniqueFindings(findings) {
+  return dedupFindings(findings).map((g) => g.representative);
+}
 
 // src/report.ts
 function summarize(findings) {
@@ -50590,7 +50590,7 @@ function reportJson(findings, opts = {}) {
 }
 
 // src/benchmark.ts
-import { readFileSync as readFileSync9, readdirSync as readdirSync4 } from "node:fs";
+import { readFileSync as readFileSync9, readdirSync as readdirSync4, writeFileSync as writeFileSync2, rmSync } from "node:fs";
 import { join as join7 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 var ROOT4 = join7(fileURLToPath5(new URL(".", import.meta.url)), "..");
@@ -50661,8 +50661,7 @@ function detect(entry) {
   const lang = entry.language;
   if (lang === "php") {
     const tmp = join7(ROOT4, "bench", ".tmp.php");
-    const { writeFileSync, rmSync } = __require("node:fs");
-    writeFileSync(tmp, entry.code);
+    writeFileSync2(tmp, entry.code);
     const r = analyzeTaint(tmp);
     rmSync(tmp, { force: true });
     if (r.findings.length > 0)
@@ -51385,7 +51384,7 @@ function createServer() {
     inputSchema: { path: string2().describe("Source file path") }
   }, async ({ path }) => {
     const r = traceDataFlow(path);
-    const taintedSinks = [...new Set(r.candidates.map((c) => c.sink_id ?? c.sink ?? c.category))];
+    const taintedSinks = [...new Set(r.candidates.map((c) => c.sink?.id ?? "unknown"))];
     const guidance = nextSteps({
       tier: "eagle-eye",
       hasFindings: r.candidates.length > 0,
@@ -51529,7 +51528,8 @@ function createServer() {
       return { content: [{ type: "text", text: JSON.stringify({ error: "invalid JSON" }) }] };
     }
     const groups = dedupFindings(list);
-    return { content: [{ type: "text", text: JSON.stringify(groups.map((g) => ({ signature: g.signature, count: g.count, representative: g.representative.id }))) }] };
+    const unique = uniqueFindings(list);
+    return { content: [{ type: "text", text: JSON.stringify({ groups: groups.map((g) => ({ signature: g.signature, count: g.count, representative: g.representative.id })), unique_findings: unique.map((f) => f.id) }) }] };
   });
   server.registerTool("generate_report", {
     title: "Generate a reproducible report",
@@ -51574,7 +51574,7 @@ async function serve() {
 }
 
 // src/cli.ts
-import { readFileSync as readFileSync10, existsSync as existsSync5, writeFileSync, mkdirSync as mkdirSync2 } from "node:fs";
+import { readFileSync as readFileSync10, existsSync as existsSync5, writeFileSync as writeFileSync3, mkdirSync as mkdirSync2 } from "node:fs";
 import { join as join8, dirname } from "node:path";
 import { homedir as homedir3 } from "node:os";
 import { fileURLToPath as fileURLToPath6 } from "node:url";
@@ -51671,7 +51671,7 @@ function jsonMcpServersWrite(p) {
       ...existing.mcpServers ?? {},
       blitzstrike: { command, args }
     };
-    writeFileSync(p, JSON.stringify(existing, null, 2));
+    writeFileSync3(p, JSON.stringify(existing, null, 2));
   };
 }
 function opencodeWrite(p) {
@@ -51684,7 +51684,7 @@ function opencodeWrite(p) {
       ...existing.mcp ?? {},
       blitzstrike: { type: "local", command: ["npx", "-y", "blitzstrike", "serve", "--mcp"], enabled: true }
     };
-    writeFileSync(p, JSON.stringify(existing, null, 2));
+    writeFileSync3(p, JSON.stringify(existing, null, 2));
     copyOpenCodeAgents();
   };
 }
@@ -51699,7 +51699,7 @@ function copyOpenCodeAgents() {
     const src = join8(srcDir, f);
     const dst = join8(dstDir, f);
     if (existsSync5(src)) {
-      writeFileSync(dst, readFileSync10(src, "utf8"));
+      writeFileSync3(dst, readFileSync10(src, "utf8"));
     }
   }
 }
@@ -51719,7 +51719,7 @@ function codexWrite(p) {
 command = "${command}"
 args = ${JSON.stringify(args)}
 `;
-    writeFileSync(p, existing);
+    writeFileSync3(p, existing);
   };
 }
 function hermesWrite(p) {
@@ -51748,7 +51748,7 @@ mcp_servers:
     args: ${JSON.stringify(args)}
 `;
     }
-    writeFileSync(p, existing);
+    writeFileSync3(p, existing);
   };
 }
 function detectAgents() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blitzstrike",
-  "version": "1.0.24",
+  "version": "1.0.26",
   "description": "Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data layer. One server, every agent.",
   "type": "module",
   "bin": {