blitzstrike 2.4.182 → 2.4.183
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +20 -12
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -5,7 +5,15 @@ All notable changes to Blitz Strike are documented here.
|
|
|
5
5
|
The format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
|
|
6
6
|
and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
7
7
|
|
|
8
|
-
## [2.4.
|
|
8
|
+
## [2.4.183] — 2026-11-03
|
|
9
|
+
|
|
10
|
+
### Fixed — corrected stale CHANGELOG release dates
|
|
11
|
+
|
|
12
|
+
- Entries 2.4.169–2.4.178 were dated 2026-10-11 but published 2026-10-12;
|
|
13
|
+
2.4.179 published 2026-10-18; 2.4.182 published 2026-11-03. Dates corrected
|
|
14
|
+
to match the npm publish times.
|
|
15
|
+
|
|
16
|
+
## [2.4.182] — 2026-11-03
|
|
9
17
|
|
|
10
18
|
### Added — HTTP-level asset fingerprinting (Shodan-style MMH3)
|
|
11
19
|
|
|
@@ -37,7 +45,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
37
45
|
`serial_chain_discipline` (each chain step consumes the prior step's REAL output),
|
|
38
46
|
`compression_discipline` (synthesize causally, preserve observed/inferred + source ids).
|
|
39
47
|
|
|
40
|
-
## [2.4.179] — 2026-10-
|
|
48
|
+
## [2.4.179] — 2026-10-18
|
|
41
49
|
|
|
42
50
|
### Added — WordPress P1-P6 vulnerability pattern taxonomy
|
|
43
51
|
|
|
@@ -48,7 +56,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
48
56
|
fixed (the correct control), and anchor WPVDB record ids.
|
|
49
57
|
- `frameworkProfile()` exposes `patterns`; `framework_intel` returns them.
|
|
50
58
|
|
|
51
|
-
## [2.4.178] — 2026-10-
|
|
59
|
+
## [2.4.178] — 2026-10-12
|
|
52
60
|
|
|
53
61
|
### Added — goal decomposition (six-phase plan)
|
|
54
62
|
|
|
@@ -57,7 +65,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
57
65
|
ESCALATION → REPORT), each with its own quantitative condition. `goal_tree`
|
|
58
66
|
shows the parent → sub-goal hierarchy and per-parent progress.
|
|
59
67
|
|
|
60
|
-
## [2.4.177] — 2026-10-
|
|
68
|
+
## [2.4.177] — 2026-10-12
|
|
61
69
|
|
|
62
70
|
### Added — surface coverage tracker (quantitative progress)
|
|
63
71
|
|
|
@@ -68,7 +76,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
68
76
|
- Gives the agent a measurable "how done are we" number — a goal like
|
|
69
77
|
"coverage >= 80%" is now verifiable against the measured pct before prove_goal.
|
|
70
78
|
|
|
71
|
-
## [2.4.176] — 2026-10-
|
|
79
|
+
## [2.4.176] — 2026-10-12
|
|
72
80
|
|
|
73
81
|
### Added — retest context (completes the retest loop)
|
|
74
82
|
|
|
@@ -77,7 +85,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
77
85
|
evidence grouped by role (proof/baseline/verification) + reproducible flag,
|
|
78
86
|
the active operation constraints, and the current goal state.
|
|
79
87
|
|
|
80
|
-
## [2.4.175] — 2026-10-
|
|
88
|
+
## [2.4.175] — 2026-10-12
|
|
81
89
|
|
|
82
90
|
### Added — evidence roles (structured proof/baseline/verification/supporting)
|
|
83
91
|
|
|
@@ -87,7 +95,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
87
95
|
returns the role breakdown + a `reproducible` flag (true only when a finding has
|
|
88
96
|
proof + baseline + verification — the three roles a HackerOne-grade PoC needs).
|
|
89
97
|
|
|
90
|
-
## [2.4.174] — 2026-10-
|
|
98
|
+
## [2.4.174] — 2026-10-12
|
|
91
99
|
|
|
92
100
|
### Added — observation ledger + lineage (third write-back channel)
|
|
93
101
|
|
|
@@ -97,7 +105,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
97
105
|
- Completes the three write-back channels: findings (vulns), assets (asset_discovery),
|
|
98
106
|
and facts (neutral/negative observations that would otherwise be lost).
|
|
99
107
|
|
|
100
|
-
## [2.4.173] — 2026-10-
|
|
108
|
+
## [2.4.173] — 2026-10-12
|
|
101
109
|
|
|
102
110
|
### Added — goal tracking + prove_goal (completion signal)
|
|
103
111
|
|
|
@@ -107,7 +115,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
107
115
|
- A goal with a quantitative condition must have its measured value verified before
|
|
108
116
|
proving it met; the task is complete only when `all_met` is true.
|
|
109
117
|
|
|
110
|
-
## [2.4.172] — 2026-10-
|
|
118
|
+
## [2.4.172] — 2026-10-12
|
|
111
119
|
|
|
112
120
|
### Added — operation constraint registry (deterministic red lines)
|
|
113
121
|
|
|
@@ -119,11 +127,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
119
127
|
(host/port/param). DENY rules always win; allowlist mode fails closed.
|
|
120
128
|
- The operation red line is injected as the top rule of the system prompt.
|
|
121
129
|
|
|
122
|
-
## [2.4.171] — 2026-10-
|
|
130
|
+
## [2.4.171] — 2026-10-12
|
|
123
131
|
|
|
124
132
|
### Changed — internal docs cleanup
|
|
125
133
|
|
|
126
|
-
## [2.4.170] — 2026-10-
|
|
134
|
+
## [2.4.170] — 2026-10-12
|
|
127
135
|
|
|
128
136
|
### Added — 3-way retest verdict + planner discipline
|
|
129
137
|
|
|
@@ -137,7 +145,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
137
145
|
re-check once), `observed_vs_inferred` (never upgrade a version/CVE/inferred hit
|
|
138
146
|
to confirmed).
|
|
139
147
|
|
|
140
|
-
## [2.4.169] — 2026-10-
|
|
148
|
+
## [2.4.169] — 2026-10-12
|
|
141
149
|
|
|
142
150
|
### Added — finding retest loop (post-confirmation lifecycle)
|
|
143
151
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "blitzstrike",
|
|
3
|
-
"version": "2.4.
|
|
3
|
+
"version": "2.4.183",
|
|
4
4
|
"description": "Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data layer. One server, every agent.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"bin": {
|