blitzstrike 1.0.49 → 1.0.50

package/CHANGELOG.md

@@ -5,6 +5,19 @@ All notable changes to Blitz Strike are documented here.
 The format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/).
 
+## [1.0.50] — 2026-09-13
+
+### Added — Autonomous Security Engine (phase 10: cross-agent memory)
+
+- **Cross-agent Memory** (`src/mission/memory.ts`, §20):
+  - `persistMissionMemory()` — persists confirmed findings (verified),
+    rejected findings, and failed approaches (with `future_policy`) into the
+    long-term memory store; pending hypotheses are NOT persisted (unverified).
+  - `recallForTarget()` — retrieves memory relevant to a target, to seed a
+    fresh mission.
+- Mission Control's `finalize` now persists reusable knowledge and records the
+  saved/deduped count in `memory_refs`.
+
 ## [1.0.49] — 2026-09-13
 
 ### Added — Autonomous Security Engine (phase 9: failure recovery)

package/dist/index.js

@@ -18716,6 +18716,34 @@ var init_recovery = __esm(() => {
   };
 });
 
+// src/mission/memory.ts
+function recordHypothesisOutcome(type, target, status, evidence) {
+  return remember(`finding:${type}`, `[${status}] ${type} @ ${target}: ${evidence}`, status === "validated" ? "signature" : "lesson", [type.toLowerCase(), status], "mission", status === "validated").saved === true;
+}
+function recordFailedApproach(fa) {
+  return remember(`failed:${fa.technique}`, `${fa.technique} failed (${fa.category}): ${fa.reason} — ${fa.future_policy}`, "lesson", ["failed", fa.category], "mission", false).saved === true;
+}
+function persistMissionMemory(mission) {
+  let attempted = 0;
+  let saved = 0;
+  for (const h of mission.hypotheses) {
+    if (h.status !== "validated" && h.status !== "rejected")
+      continue;
+    attempted += 1;
+    if (recordHypothesisOutcome(h.type, h.target, h.status, h.evidence))
+      saved += 1;
+  }
+  for (const fa of mission.failed_approaches) {
+    attempted += 1;
+    if (recordFailedApproach(fa))
+      saved += 1;
+  }
+  return { saved, deduped: attempted - saved };
+}
+var init_memory2 = __esm(() => {
+  init_memory();
+});
+
 // src/mission/control.ts
 import { existsSync as existsSync8, statSync as statSync4 } from "node:fs";
 function scopeAllowed(mission) {
@@ -18878,6 +18906,10 @@ function finalize2(mission) {
     tasks: allResolved(m.tasks) ? 1 : 0,
     hypotheses_validated: m.hypotheses.length > 0 ? m.hypotheses.filter((h) => h.status === "validated").length / m.hypotheses.length : 0
   };
+  const mem = persistMissionMemory(m);
+  if (mem.saved > 0) {
+    m = { ...m, memory_refs: [...m.memory_refs, `persisted:${mem.saved} (${mem.deduped} deduped)`] };
+  }
   return saveMission(m);
 }
 async function startMission(target, mode, opts = {}) {
@@ -18900,6 +18932,7 @@ var init_control = __esm(() => {
   init_planner();
   init_coverage();
   init_recovery();
+  init_memory2();
   MODE_PROFILES = {
     web: { agents: ["recon", "web", "api", "auth", "validator", "reviewer", "reporter"], verify: true, risk: "medium" },
     api: { agents: ["recon", "api", "auth", "validator", "reviewer", "reporter"], verify: true, risk: "medium" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blitzstrike",
-  "version": "1.0.49",
+  "version": "1.0.50",
   "description": "Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data layer. One server, every agent.",
   "type": "module",
   "bin": {