blitzstrike 2.4.182 → 2.4.184
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +12 -12
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -5,7 +5,7 @@ All notable changes to Blitz Strike are documented here.
|
|
|
5
5
|
The format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
|
|
6
6
|
and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
7
7
|
|
|
8
|
-
## [2.4.
|
|
8
|
+
## [2.4.184] — 2026-11-03
|
|
9
9
|
|
|
10
10
|
### Added — HTTP-level asset fingerprinting (Shodan-style MMH3)
|
|
11
11
|
|
|
@@ -37,7 +37,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
37
37
|
`serial_chain_discipline` (each chain step consumes the prior step's REAL output),
|
|
38
38
|
`compression_discipline` (synthesize causally, preserve observed/inferred + source ids).
|
|
39
39
|
|
|
40
|
-
## [2.4.179] — 2026-10-
|
|
40
|
+
## [2.4.179] — 2026-10-18
|
|
41
41
|
|
|
42
42
|
### Added — WordPress P1-P6 vulnerability pattern taxonomy
|
|
43
43
|
|
|
@@ -48,7 +48,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
48
48
|
fixed (the correct control), and anchor WPVDB record ids.
|
|
49
49
|
- `frameworkProfile()` exposes `patterns`; `framework_intel` returns them.
|
|
50
50
|
|
|
51
|
-
## [2.4.178] — 2026-10-
|
|
51
|
+
## [2.4.178] — 2026-10-12
|
|
52
52
|
|
|
53
53
|
### Added — goal decomposition (six-phase plan)
|
|
54
54
|
|
|
@@ -57,7 +57,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
57
57
|
ESCALATION → REPORT), each with its own quantitative condition. `goal_tree`
|
|
58
58
|
shows the parent → sub-goal hierarchy and per-parent progress.
|
|
59
59
|
|
|
60
|
-
## [2.4.177] — 2026-10-
|
|
60
|
+
## [2.4.177] — 2026-10-12
|
|
61
61
|
|
|
62
62
|
### Added — surface coverage tracker (quantitative progress)
|
|
63
63
|
|
|
@@ -68,7 +68,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
68
68
|
- Gives the agent a measurable "how done are we" number — a goal like
|
|
69
69
|
"coverage >= 80%" is now verifiable against the measured pct before prove_goal.
|
|
70
70
|
|
|
71
|
-
## [2.4.176] — 2026-10-
|
|
71
|
+
## [2.4.176] — 2026-10-12
|
|
72
72
|
|
|
73
73
|
### Added — retest context (completes the retest loop)
|
|
74
74
|
|
|
@@ -77,7 +77,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
77
77
|
evidence grouped by role (proof/baseline/verification) + reproducible flag,
|
|
78
78
|
the active operation constraints, and the current goal state.
|
|
79
79
|
|
|
80
|
-
## [2.4.175] — 2026-10-
|
|
80
|
+
## [2.4.175] — 2026-10-12
|
|
81
81
|
|
|
82
82
|
### Added — evidence roles (structured proof/baseline/verification/supporting)
|
|
83
83
|
|
|
@@ -87,7 +87,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
87
87
|
returns the role breakdown + a `reproducible` flag (true only when a finding has
|
|
88
88
|
proof + baseline + verification — the three roles a HackerOne-grade PoC needs).
|
|
89
89
|
|
|
90
|
-
## [2.4.174] — 2026-10-
|
|
90
|
+
## [2.4.174] — 2026-10-12
|
|
91
91
|
|
|
92
92
|
### Added — observation ledger + lineage (third write-back channel)
|
|
93
93
|
|
|
@@ -97,7 +97,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
97
97
|
- Completes the three write-back channels: findings (vulns), assets (asset_discovery),
|
|
98
98
|
and facts (neutral/negative observations that would otherwise be lost).
|
|
99
99
|
|
|
100
|
-
## [2.4.173] — 2026-10-
|
|
100
|
+
## [2.4.173] — 2026-10-12
|
|
101
101
|
|
|
102
102
|
### Added — goal tracking + prove_goal (completion signal)
|
|
103
103
|
|
|
@@ -107,7 +107,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
107
107
|
- A goal with a quantitative condition must have its measured value verified before
|
|
108
108
|
proving it met; the task is complete only when `all_met` is true.
|
|
109
109
|
|
|
110
|
-
## [2.4.172] — 2026-10-
|
|
110
|
+
## [2.4.172] — 2026-10-12
|
|
111
111
|
|
|
112
112
|
### Added — operation constraint registry (deterministic red lines)
|
|
113
113
|
|
|
@@ -119,11 +119,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
119
119
|
(host/port/param). DENY rules always win; allowlist mode fails closed.
|
|
120
120
|
- The operation red line is injected as the top rule of the system prompt.
|
|
121
121
|
|
|
122
|
-
## [2.4.171] — 2026-10-
|
|
122
|
+
## [2.4.171] — 2026-10-12
|
|
123
123
|
|
|
124
124
|
### Changed — internal docs cleanup
|
|
125
125
|
|
|
126
|
-
## [2.4.170] — 2026-10-
|
|
126
|
+
## [2.4.170] — 2026-10-12
|
|
127
127
|
|
|
128
128
|
### Added — 3-way retest verdict + planner discipline
|
|
129
129
|
|
|
@@ -137,7 +137,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
|
137
137
|
re-check once), `observed_vs_inferred` (never upgrade a version/CVE/inferred hit
|
|
138
138
|
to confirmed).
|
|
139
139
|
|
|
140
|
-
## [2.4.169] — 2026-10-
|
|
140
|
+
## [2.4.169] — 2026-10-12
|
|
141
141
|
|
|
142
142
|
### Added — finding retest loop (post-confirmation lifecycle)
|
|
143
143
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "blitzstrike",
|
|
3
|
-
"version": "2.4.
|
|
3
|
+
"version": "2.4.184",
|
|
4
4
|
"description": "Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data layer. One server, every agent.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"bin": {
|