blitzstrike 1.0.43 → 1.0.45
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +43 -0
- package/dist/index.js +25161 -24129
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -5,6 +5,49 @@ All notable changes to Blitz Strike are documented here.
|
|
|
5
5
|
The format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
|
|
6
6
|
and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
7
7
|
|
|
8
|
+
## [1.0.45] — 2026-09-13
|
|
9
|
+
|
|
10
|
+
### Added — Autonomous Security Engine (foundation, phases 1–6 of 18)
|
|
11
|
+
|
|
12
|
+
The first milestone of the "Autonomous Security Research & Verification Engine"
|
|
13
|
+
upgrade — a Mission Control layer that wraps the existing BLITZ / EAGLE-EYE /
|
|
14
|
+
STRIKE core without replacing it.
|
|
15
|
+
|
|
16
|
+
- **Mission State** (`src/mission/state.ts`) — persistent, resumable missions
|
|
17
|
+
(`~/.blitzstrike/missions/<id>.json`).
|
|
18
|
+
- **Task Graph** (`src/mission/taskgraph.ts`) — dependency-aware, parallel
|
|
19
|
+
scheduling (pending/running/blocked/success/failed/retry/skipped/cancelled).
|
|
20
|
+
- **Security Graph** (`src/mission/graph.ts`) — shared world model (nodes +
|
|
21
|
+
typed edges).
|
|
22
|
+
- **Hypothesis Engine** (`src/mission/hypothesis.ts`) — observation/hypothesis/
|
|
23
|
+
validated/rejected with §14 confidence bands; never auto-confirms a hit.
|
|
24
|
+
- **Specialized Agents** (`src/agents.ts`) — 12 modular agents (@commander,
|
|
25
|
+
@recon, @web, @api, @source, @auth, @mobile, @cloud, @analysis, @validator,
|
|
26
|
+
@reviewer, @reporter), each wrapping an existing primitive.
|
|
27
|
+
- **Mission Control** (`src/mission/control.ts`) — the autonomous loop
|
|
28
|
+
(observe → plan → act → collect → replan → terminate), stateful + resumable,
|
|
29
|
+
mode profiles (web/api/source/mobile/cloud/bugbounty/redteam/audit).
|
|
30
|
+
- **CLI** — `blitzstrike mission <target> [--mode] [--scope]`, plus
|
|
31
|
+
list/status/report/resume/stop subcommands.
|
|
32
|
+
- **MCP Autonomous Mission API** — `mission_start` / `mission_status` /
|
|
33
|
+
`mission_resume` / `mission_stop` / `mission_list`.
|
|
34
|
+
|
|
35
|
+
## [1.0.44] — 2026-09-13
|
|
36
|
+
|
|
37
|
+
### Added
|
|
38
|
+
|
|
39
|
+
- **Autonomous no-babysitting orchestration** (the missing piece vs.
|
|
40
|
+
oh-my-open-pentest's plugin loop):
|
|
41
|
+
- `runEngagement` now returns the full deliverable **inline** — summary,
|
|
42
|
+
markdown, JSON, and SARIF — so a single call completes a source audit
|
|
43
|
+
(no separate `report` call needed).
|
|
44
|
+
- `runLiveEngagement` — a fully autonomous live engagement for URL targets:
|
|
45
|
+
scope gate → marker-reflection sweep (`strike_verify` per common parameter)
|
|
46
|
+
→ canonical findings via `resolveFinding` → inline report.
|
|
47
|
+
- `run_engagement` MCP tool auto-branches: URL target → autonomous live
|
|
48
|
+
sweep; source path → full static pipeline. Scope-gated and non-destructive
|
|
49
|
+
(marker + negative control only).
|
|
50
|
+
|
|
8
51
|
## [1.0.43] — 2026-09-13
|
|
9
52
|
|
|
10
53
|
### Added
|