blitzstrike 2.4.80 → 2.4.82

package/dist/index.js

@@ -17358,10 +17358,10 @@ var init_update = __esm(() => {
 });
 
 // src/release.ts
-import { readFileSync as readFileSync28, existsSync as existsSync14 } from "node:fs";
+import { readFileSync as readFileSync28, existsSync as existsSync15 } from "node:fs";
 import { join as join25 } from "node:path";
 import { fileURLToPath as fileURLToPath14 } from "node:url";
-import { execSync as execSync2 } from "node:child_process";
+import { execSync as execSync3 } from "node:child_process";
 function validateRelease() {
   const checks = [];
   checks.push({ name: "package.json version", ok: true, detail: VERSION });
@@ -17378,13 +17378,13 @@ function validateRelease() {
     checks.push({ name: "CHANGELOG version", ok: false, detail: "CHANGELOG.md not found" });
   }
   try {
-    const tag = execSync2("git describe --tags --abbrev=0", { cwd: ROOT8, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+    const tag = execSync3("git describe --tags --abbrev=0", { cwd: ROOT8, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
     checks.push({ name: "Git tag", ok: tag === `v${VERSION}`, detail: tag, soft: true });
   } catch {
     checks.push({ name: "Git tag", ok: true, detail: "unavailable (no git/tags)", soft: true });
   }
   try {
-    const published = execSync2("npm view blitzstrike version", { encoding: "utf8", timeout: 8000, stdio: ["ignore", "pipe", "ignore"] }).trim();
+    const published = execSync3("npm view blitzstrike version", { encoding: "utf8", timeout: 8000, stdio: ["ignore", "pipe", "ignore"] }).trim();
     checks.push({ name: "npm registry version", ok: published === VERSION, detail: published, soft: true });
   } catch {
     checks.push({ name: "npm registry version", ok: true, detail: "unavailable (offline)", soft: true });
@@ -17398,7 +17398,7 @@ function validateRelease() {
   return { version: VERSION, checks, consistent: checks.filter((c) => !c.soft).every((c) => c.ok) };
 }
 function lockfilePresent() {
-  return existsSync14(join25(ROOT8, "package-lock.json")) || existsSync14(join25(ROOT8, "bun.lock")) || existsSync14(join25(ROOT8, "bun.lockb"));
+  return existsSync15(join25(ROOT8, "package-lock.json")) || existsSync15(join25(ROOT8, "bun.lock")) || existsSync15(join25(ROOT8, "bun.lockb"));
 }
 var ROOT8;
 var init_release = __esm(() => {
@@ -17440,7 +17440,7 @@ var init_dependency = __esm(() => {
 });
 
 // src/cli.ts
-import { readFileSync as readFileSync30, existsSync as existsSync15, writeFileSync as writeFileSync9, mkdirSync as mkdirSync10 } from "node:fs";
+import { readFileSync as readFileSync30, existsSync as existsSync16, writeFileSync as writeFileSync9, mkdirSync as mkdirSync10 } from "node:fs";
 import { join as join27, dirname as dirname6 } from "node:path";
 import { homedir as homedir11 } from "node:os";
 import { fileURLToPath as fileURLToPath16 } from "node:url";
@@ -17486,7 +17486,7 @@ async function runDoctor() {
     detail: h1 ? `X-HackerOne-Research: ${h1}` : "H1_USERNAME not set",
     fix: h1 ? undefined : "export H1_USERNAME=<your-hackerone-username> (adds X-HackerOne-Research to outbound requests)"
   });
-  const dataOk = existsSync15(join27(ROOT10, "chains.json")) && existsSync15(join27(ROOT10, "tools-catalog.json"));
+  const dataOk = existsSync16(join27(ROOT10, "chains.json")) && existsSync16(join27(ROOT10, "tools-catalog.json"));
   issues.push({
     name: "Data layers (chains + tools-catalog)",
     status: dataOk ? "ok" : "fail",
@@ -17538,14 +17538,14 @@ function resolveCommand() {
   if (which("blitzstrike"))
     return { command: "blitzstrike", args: ["serve", "--mcp"] };
   const src = join27(ROOT10, "src", "index.ts");
-  if (which("bun") && existsSync15(src))
+  if (which("bun") && existsSync16(src))
     return { command: "bun", args: ["run", src, "serve", "--mcp"] };
   if (which("npx"))
     return { command: "npx", args: ["-y", "blitzstrike", "serve", "--mcp"] };
   if (which("bunx"))
     return { command: "bunx", args: ["blitzstrike", "serve", "--mcp"] };
   const dist = join27(ROOT10, "dist", "index.js");
-  if (existsSync15(dist))
+  if (existsSync16(dist))
     return { command: "bun", args: [dist, "serve", "--mcp"] };
   return { command: "npx", args: ["-y", "blitzstrike", "serve", "--mcp"] };
 }
@@ -17559,7 +17559,7 @@ function readJson(p) {
 function jsonMcpServersWrite(p) {
   return (command, args) => {
     const dir = dirname6(p);
-    if (!existsSync15(dir))
+    if (!existsSync16(dir))
       mkdirSync10(dir, { recursive: true });
     const existing = readJson(p) ?? {};
     existing.mcpServers = {
@@ -17572,7 +17572,7 @@ function jsonMcpServersWrite(p) {
 function opencodeWrite(p) {
   return (command, args) => {
     const dir = dirname6(p);
-    if (!existsSync15(dir))
+    if (!existsSync16(dir))
       mkdirSync10(dir, { recursive: true });
     const existing = readJson(p) ?? {};
     existing.mcp = {
@@ -17586,14 +17586,14 @@ function opencodeWrite(p) {
 function copyOpenCodeAgents() {
   const srcDir = join27(ROOT10, "opencode-agents");
   const dstDir = join27(homedir11(), ".config", "opencode", "agents");
-  if (!existsSync15(srcDir))
+  if (!existsSync16(srcDir))
     return;
-  if (!existsSync15(dstDir))
+  if (!existsSync16(dstDir))
     mkdirSync10(dstDir, { recursive: true });
   for (const f of ["Blitz Strike.md", "Blitz.md", "Eagle Eye.md", "Strike.md"]) {
     const src = join27(srcDir, f);
     const dst = join27(dstDir, f);
-    if (existsSync15(src)) {
+    if (existsSync16(src)) {
       writeFileSync9(dst, readFileSync30(src, "utf8"));
     }
   }
@@ -17601,9 +17601,9 @@ function copyOpenCodeAgents() {
 function codexWrite(p) {
   return (command, args) => {
     const dir = dirname6(p);
-    if (!existsSync15(dir))
+    if (!existsSync16(dir))
       mkdirSync10(dir, { recursive: true });
-    let existing = existsSync15(p) ? readFileSync30(p, "utf8") : "";
+    let existing = existsSync16(p) ? readFileSync30(p, "utf8") : "";
     if (!existing.trimEnd().endsWith(`
 `))
       existing += `
@@ -17620,9 +17620,9 @@ args = ${JSON.stringify(args)}
 function hermesWrite(p) {
   return (command, args) => {
     const dir = dirname6(p);
-    if (!existsSync15(dir))
+    if (!existsSync16(dir))
       mkdirSync10(dir, { recursive: true });
-    let existing = existsSync15(p) ? readFileSync30(p, "utf8") : "";
+    let existing = existsSync16(p) ? readFileSync30(p, "utf8") : "";
     existing = existing.replace(/^  blitzstrike:\n(?:    .*\n?)*/m, "");
     if (!existing.trimEnd().endsWith(`
 `))
@@ -17653,70 +17653,70 @@ function detectAgents() {
   agents.push({
     name: "Claude Code",
     detectPath: claudeJson,
-    installed: () => existsSync15(claudeJson) || which("claude"),
+    installed: () => existsSync16(claudeJson) || which("claude"),
     write: jsonMcpServersWrite(claudeJson)
   });
   const claudeDesktop = join27(home, ".config", "Claude", "claude_desktop_config.json");
   agents.push({
     name: "Claude Desktop",
     detectPath: claudeDesktop,
-    installed: () => existsSync15(claudeDesktop),
+    installed: () => existsSync16(claudeDesktop),
     write: jsonMcpServersWrite(claudeDesktop)
   });
   const cursor = join27(home, ".cursor", "mcp.json");
   agents.push({
     name: "Cursor",
     detectPath: cursor,
-    installed: () => existsSync15(join27(home, ".cursor")) || which("cursor"),
+    installed: () => existsSync16(join27(home, ".cursor")) || which("cursor"),
     write: jsonMcpServersWrite(cursor)
   });
   const opencode = join27(home, ".config", "opencode", "opencode.jsonc");
   agents.push({
     name: "OpenCode",
     detectPath: opencode,
-    installed: () => existsSync15(join27(home, ".config", "opencode")) || which("opencode"),
+    installed: () => existsSync16(join27(home, ".config", "opencode")) || which("opencode"),
     write: opencodeWrite(opencode)
   });
   const codex = join27(home, ".codex", "config.toml");
   agents.push({
     name: "Codex",
     detectPath: codex,
-    installed: () => existsSync15(join27(home, ".codex")) || which("codex"),
+    installed: () => existsSync16(join27(home, ".codex")) || which("codex"),
     write: codexWrite(codex)
   });
   const hermes = join27(home, ".hermes", "config.yaml");
   agents.push({
     name: "Hermes",
     detectPath: hermes,
-    installed: () => existsSync15(join27(home, ".hermes")) || which("hermes"),
+    installed: () => existsSync16(join27(home, ".hermes")) || which("hermes"),
     write: hermesWrite(hermes)
   });
   const gemini = join27(home, ".gemini", "settings.json");
   agents.push({
     name: "Gemini CLI",
     detectPath: gemini,
-    installed: () => existsSync15(join27(home, ".gemini")) || which("gemini"),
+    installed: () => existsSync16(join27(home, ".gemini")) || which("gemini"),
     write: jsonMcpServersWrite(gemini)
   });
   const windsurf = join27(home, ".codeium", "windsurf", "mcp_config.json");
   agents.push({
     name: "Windsurf",
     detectPath: windsurf,
-    installed: () => existsSync15(join27(home, ".codeium")) || which("windsurf"),
+    installed: () => existsSync16(join27(home, ".codeium")) || which("windsurf"),
     write: jsonMcpServersWrite(windsurf)
   });
   const copilot = join27(home, ".copilot", "mcp.json");
   agents.push({
     name: "Copilot",
     detectPath: copilot,
-    installed: () => existsSync15(join27(home, ".copilot")),
+    installed: () => existsSync16(join27(home, ".copilot")),
     write: jsonMcpServersWrite(copilot)
   });
   const cline = join27(home, ".cline", "mcp_settings.json");
   agents.push({
     name: "Cline",
     detectPath: cline,
-    installed: () => existsSync15(join27(home, ".cline")),
+    installed: () => existsSync16(join27(home, ".cline")),
     write: jsonMcpServersWrite(cline)
   });
   return agents;
@@ -32555,9 +32555,9 @@ async function nvdLookup(cveId) {
 
 // src/orchestrator.ts
 init_scanner();
-import { readFileSync as readFileSync9, existsSync as existsSync8, statSync as statSync2 } from "node:fs";
-import { join as join11 } from "node:path";
-import { fileURLToPath as fileURLToPath5 } from "node:url";
+import { readFileSync as readFileSync10, existsSync as existsSync8, statSync as statSync2 } from "node:fs";
+import { join as join12 } from "node:path";
+import { fileURLToPath as fileURLToPath6 } from "node:url";
 
 // src/memory.ts
 import { readFileSync as readFileSync2, appendFileSync, mkdirSync, existsSync, writeFileSync } from "node:fs";
@@ -34109,9 +34109,9 @@ function uniqueFindings(findings) {
 }
 
 // src/intel.ts
-import { readFileSync as readFileSync8, existsSync as existsSync7 } from "node:fs";
-import { join as join9 } from "node:path";
-import { fileURLToPath as fileURLToPath4 } from "node:url";
+import { readFileSync as readFileSync9, existsSync as existsSync7 } from "node:fs";
+import { join as join10 } from "node:path";
+import { fileURLToPath as fileURLToPath5 } from "node:url";
 
 // src/intelligence.ts
 import { readFileSync as readFileSync7, appendFileSync as appendFileSync3, mkdirSync as mkdirSync4, existsSync as existsSync6 } from "node:fs";
@@ -34292,17 +34292,196 @@ function queryIntel(filter = {}) {
   };
 }
 
+// src/patterns.ts
+import { readFileSync as readFileSync8 } from "node:fs";
+import { join as join9, dirname as dirname2 } from "node:path";
+import { fileURLToPath as fileURLToPath4 } from "node:url";
+
+// src/synonyms.ts
+var ALIASES = {
+  idor: "missing_authz",
+  bola: "missing_authz",
+  "broken object level authorization": "missing_authz",
+  "insecure direct object reference": "missing_authz",
+  "broken access control": "missing_authz",
+  authorization: "missing_authz",
+  csrf: "missing_nonce",
+  xsrf: "missing_nonce",
+  "cross site request forgery": "missing_nonce",
+  "cross-site request forgery": "missing_nonce",
+  sqli: "sql_injection",
+  "sql injection": "sql_injection",
+  "sql-injection": "sql_injection",
+  ssti: "ssti",
+  "template injection": "ssti",
+  "server side template injection": "ssti",
+  xxe: "xxe",
+  "xml external entity": "xxe",
+  "xxe injection": "xxe",
+  bpla: "mass_assignment",
+  "broken property level authorization": "mass_assignment",
+  "mass assignment": "mass_assignment",
+  lfi: "path_confusion",
+  rfi: "path_confusion",
+  "path traversal": "path_confusion",
+  "directory traversal": "path_confusion",
+  "local file inclusion": "path_confusion",
+  "remote file inclusion": "path_confusion",
+  ssrf: "ssrf",
+  "server side request forgery": "ssrf",
+  "server-side request forgery": "ssrf",
+  "prompt injection": "llm_injection",
+  llm: "llm_injection",
+  llm01: "llm_injection",
+  "llm prompt injection": "llm_injection",
+  graphql: "graphql_exposure",
+  oauth: "oauth_misconfig",
+  "open redirect": "oauth_misconfig",
+  grpc: "grpc_reflection",
+  "hardcoded credential": "hardcoded_secret",
+  "hardcoded secret": "hardcoded_secret",
+  "credential leak": "hardcoded_secret",
+  "hard coded credentials": "hardcoded_secret",
+  "priv esc": "priv_esc",
+  privesc: "priv_esc",
+  "privilege escalation": "priv_esc",
+  "file upload": "file_upload",
+  "unrestricted upload": "file_upload",
+  "unrestricted file upload": "file_upload",
+  deserialization: "deserialization",
+  "insecure deserialization": "deserialization",
+  unserialize: "deserialization",
+  "type juggling": "type_juggling",
+  "php type juggling": "type_juggling",
+  "prototype pollution": "prototype_pollution",
+  crlf: "crlf_injection",
+  "header injection": "crlf_injection",
+  "http response splitting": "crlf_injection",
+  "wrong sanitizer": "wrong_sanitizer",
+  "wrong context sanitization": "wrong_sanitizer",
+  "dependency confusion": "dependency_confusion",
+  "dep confusion": "dependency_confusion",
+  "supply chain": "dependency_confusion",
+  "supply chain attack": "dependency_confusion",
+  "ml supply chain": "ml_supply_chain",
+  "ai supply chain": "ml_supply_chain",
+  "model poisoning": "ml_supply_chain",
+  "ml security": "ml_supply_chain",
+  "ai ml security": "ml_supply_chain",
+  "rust unsafe": "rust_unsafe",
+  "unsafe rust": "rust_unsafe",
+  "rust memory safety": "rust_unsafe",
+  transmute: "rust_unsafe",
+  "rust format string": "rust_format_string",
+  "format string": "rust_format_string",
+  "format string injection": "rust_format_string",
+  "jwt algorithm confusion": "jwt_alg_confusion",
+  "jwt alg confusion": "jwt_alg_confusion",
+  "alg confusion": "jwt_alg_confusion",
+  "rs256 hs256": "jwt_alg_confusion",
+  "web cache deception": "cache_deception",
+  "cache deception": "cache_deception",
+  "cache poisoning": "cache_deception",
+  "cache key injection": "cache_deception"
+};
+function normalize(term) {
+  return term.trim().toLowerCase().replace(/[_-]+/g, " ").replace(/\s+/g, " ").trim();
+}
+function canonicalId(term) {
+  const key = normalize(term);
+  if (ALIASES[key])
+    return ALIASES[key];
+  return key.replace(/ /g, "_");
+}
+function synonymsFor(term) {
+  const canonical = canonicalId(term);
+  const aliases = Object.entries(ALIASES).filter(([, v]) => v === canonical).map(([k]) => k);
+  return { canonical, aliases };
+}
+function listAliases() {
+  return Object.entries(ALIASES).map(([alias, canonical]) => ({ alias, canonical }));
+}
+
+// src/patterns.ts
+var __dirname2 = dirname2(fileURLToPath4(import.meta.url));
+var _doc = null;
+function load() {
+  if (_doc)
+    return _doc;
+  try {
+    _doc = JSON.parse(readFileSync8(join9(__dirname2, "..", "intelligence", "patterns.json"), "utf8"));
+  } catch {
+    _doc = { patterns: [] };
+  }
+  return _doc;
+}
+function patternLookup(id) {
+  const canonical = canonicalId(id);
+  const p = load().patterns.find((x) => x.id === canonical);
+  return p ?? null;
+}
+function listPatterns() {
+  return load().patterns;
+}
+function submissionGate(input) {
+  const questions = [
+    {
+      q: "Reproducible — a copy-paste-ready request or step list triggers it?",
+      pass: input.reproducible === true,
+      reason: "Without an exact reproduction the finding is a hypothesis, not a result."
+    },
+    {
+      q: "In scope — the vulnerable asset is in the engagement scope?",
+      pass: input.in_scope === true,
+      reason: "Out-of-scope assets must not be submitted."
+    },
+    {
+      q: "Real impact — maps to an accepted-impact class, not informational?",
+      pass: input.real_impact === true,
+      reason: "Informational-only findings dilute the validity ratio."
+    },
+    {
+      q: "No privileged assumption — works without unrealistic attacker prerequisites?",
+      pass: input.no_privileged_assumption === true,
+      reason: "'Admin can do X' is a centralization risk, not a vulnerability."
+    },
+    {
+      q: "Verified live — confirmed with a marker + negative control, not just a static hint?",
+      pass: input.verified_live === true,
+      reason: "A static hit is a hypothesis until verified live (strike_verify / browser_validate)."
+    },
+    {
+      q: "Evidence attached AND redacted — secrets/PII stripped, integrity-tagged?",
+      pass: input.evidence_redacted === true,
+      reason: "Evidence must carry SHA-256-tagged, redacted records — no leaked secrets or victim PII."
+    },
+    {
+      q: "Severity derived — CVSS/confidence computed, not guessed?",
+      pass: input.severity_derived === true,
+      reason: "Severity is not confidence; derive it, don't assert it."
+    }
+  ];
+  const failed = questions.find((q) => !q.pass);
+  return {
+    verdict: failed ? "fail" : "pass",
+    passed: questions.filter((q) => q.pass).length,
+    total: questions.length,
+    questions,
+    ...failed ? { blocker: failed.q } : {}
+  };
+}
+
 // src/intel.ts
 import { readdirSync as readdirSync4 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
-var ROOT3 = join9(fileURLToPath4(new URL(".", import.meta.url)), "..");
-var INTEL = join9(ROOT3, "intelligence");
+var ROOT3 = join10(fileURLToPath5(new URL(".", import.meta.url)), "..");
+var INTEL = join10(ROOT3, "intelligence");
 function loadJson(name) {
-  const p = join9(INTEL, `${name}.json`);
+  const p = join10(INTEL, `${name}.json`);
   if (!existsSync7(p))
     return null;
   try {
-    return JSON.parse(readFileSync8(p, "utf8"));
+    return JSON.parse(readFileSync9(p, "utf8"));
   } catch {
     return null;
   }
@@ -34534,6 +34713,38 @@ function successProbability(priority, vector, tech) {
 function estimateTime(vector) {
   return VECTOR_TIME[vector] ?? DEFAULT_VECTOR_TIME;
 }
+var PAYOUT_FALLBACK = {
+  xss: [500, 5000],
+  command_injection: [1000, 1e4],
+  open_redirect: [300, 3000],
+  cors_misconfiguration: [300, 3000],
+  business_logic: [500, 1e4],
+  lfi: [1000, 1e4],
+  nosql_injection: [1000, 15000],
+  pickle_deserialization: [5000, 30000],
+  upload_rce: [500, 1e4],
+  auth_bypass: [1000, 1e4],
+  idor: [500, 5000],
+  wp_plugin_audit: [500, 1e4],
+  xmlrpc: [300, 3000],
+  rest_api_auth: [500, 5000],
+  debug_mode: [200, 2000],
+  actuator_exposure: [500, 5000],
+  viewstate: [1000, 5000]
+};
+function fmtUsd(v) {
+  return v >= 1000 ? `$${v / 1000}K` : `$${v}`;
+}
+function payoutFor(vector) {
+  const pat = patternLookup(canonicalId(vector));
+  if (pat && pat.payout_min != null && pat.payout_max != null) {
+    return { min: pat.payout_min, max: pat.payout_max, display: pat.typical_payout ?? `${fmtUsd(pat.payout_min)}–${fmtUsd(pat.payout_max)}` };
+  }
+  const fb = PAYOUT_FALLBACK[vector];
+  if (fb)
+    return { min: fb[0], max: fb[1], display: `${fmtUsd(fb[0])}–${fmtUsd(fb[1])}` };
+  return null;
+}
 function attackPlan(target, tech = [], params = [], mode = "full") {
   const data = loadJson("attack_vectors");
   const totalCategories = data?.categories.length ?? 0;
@@ -34569,31 +34780,37 @@ function attackPlan(target, tech = [], params = [], mode = "full") {
     target,
     mode,
     taxonomy: { total_categories: totalCategories, total_vectors_here: sorted.length },
-    plan: sorted.map((p, i) => ({
-      order: i + 1,
-      vector: p.vector,
-      priority: p.priority,
-      success_probability: successProbability(p.priority, p.vector, techKey),
-      estimated_time_sec: estimateTime(p.vector),
-      reason: p.reason,
-      tool: p.tool,
-      source: p.source
-    })),
+    plan: sorted.map((p, i) => {
+      const sp = successProbability(p.priority, p.vector, techKey);
+      const payout = payoutFor(p.vector);
+      return {
+        order: i + 1,
+        vector: p.vector,
+        priority: p.priority,
+        success_probability: sp,
+        typical_payout: payout?.display ?? null,
+        expected_value_usd: payout ? Math.round(sp * (payout.min + payout.max) / 2) : null,
+        estimated_time_sec: estimateTime(p.vector),
+        reason: p.reason,
+        tool: p.tool,
+        source: p.source
+      };
+    }),
     total_estimated_time_sec: totalTime
   };
 }
-var PACKAGE_PAYLOADS = join9(ROOT3, "payloads");
-var PACKAGE_TEMPLATES = join9(ROOT3, "templates");
-var DATA_ROOT = process.env.BLITZSTRIKE_DATA ?? join9(homedir6(), ".blitzstrike", "data");
+var PACKAGE_PAYLOADS = join10(ROOT3, "payloads");
+var PACKAGE_TEMPLATES = join10(ROOT3, "templates");
+var DATA_ROOT = process.env.BLITZSTRIKE_DATA ?? join10(homedir6(), ".blitzstrike", "data");
 function payloadsDir() {
   if (existsSync7(PACKAGE_PAYLOADS))
     return PACKAGE_PAYLOADS;
-  return join9(DATA_ROOT, "payloads");
+  return join10(DATA_ROOT, "payloads");
 }
 function templatesDir() {
   if (existsSync7(PACKAGE_TEMPLATES))
     return PACKAGE_TEMPLATES;
-  return join9(DATA_ROOT, "templates");
+  return join10(DATA_ROOT, "templates");
 }
 var PAYLOADS = payloadsDir();
 var TEMPLATES = templatesDir();
@@ -34629,7 +34846,7 @@ function payloadLookup(topic) {
   const normalized = ALIASES[key] ?? key;
   const exact = cats.find((c) => c.toLowerCase() === normalized);
   if (exact) {
-    return { found: true, category: exact, files: listFiles(join9(PAYLOADS, exact)) };
+    return { found: true, category: exact, files: listFiles(join10(PAYLOADS, exact)) };
   }
   const keyTokens = normalized.split(/[^a-z0-9]+/).filter((t) => t.length >= 3);
   const matches = cats.filter((c) => {
@@ -34639,7 +34856,7 @@ function payloadLookup(topic) {
     return keyTokens.some((tok) => new RegExp(`(^|[^a-z0-9])${tok}`).test(cl));
   });
   if (matches.length > 0) {
-    return { found: true, category: matches[0], files: listFiles(join9(PAYLOADS, matches[0])), alternatives: matches.slice(0, 10) };
+    return { found: true, category: matches[0], files: listFiles(join10(PAYLOADS, matches[0])), alternatives: matches.slice(0, 10) };
   }
   return { found: false, topic, suggestions: cats.slice(0, 20) };
 }
@@ -34648,19 +34865,19 @@ function readPayload(category, file) {
   const exact = cats.find((c) => c.toLowerCase() === category.toLowerCase());
   if (!exact)
     return { found: false, category, suggestions: cats.slice(0, 20) };
-  const dir = join9(PAYLOADS, exact);
+  const dir = join10(PAYLOADS, exact);
   const files = listFiles(dir);
   if (!file) {
     const readme = files.find((f) => f.toLowerCase() === "readme.md");
     if (readme) {
-      return { found: true, category: exact, file: readme, content: readFileSync8(join9(dir, readme), "utf8").slice(0, 20000) };
+      return { found: true, category: exact, file: readme, content: readFileSync9(join10(dir, readme), "utf8").slice(0, 20000) };
     }
     return { found: true, category: exact, files };
   }
   const f = files.find((x) => x.toLowerCase() === file.toLowerCase());
   if (!f)
     return { found: false, category: exact, file, suggestions: files };
-  return { found: true, category: exact, file: f, content: readFileSync8(join9(dir, f), "utf8").slice(0, 20000) };
+  return { found: true, category: exact, file: f, content: readFileSync9(join10(dir, f), "utf8").slice(0, 20000) };
 }
 function listFiles(dir) {
   try {
@@ -34675,7 +34892,7 @@ function countTemplates() {
     const walk = (dir) => {
       for (const e of readdirSync4(dir, { withFileTypes: true })) {
         if (e.isDirectory())
-          walk(join9(dir, e.name));
+          walk(join10(dir, e.name));
         else if (e.name.endsWith(".yaml"))
           n++;
       }
@@ -34700,14 +34917,14 @@ function templateLookup(topic, limit = 10) {
     }
     for (const e of entries) {
       if (e.isDirectory())
-        walk(join9(dir, e.name), depth + 1);
+        walk(join10(dir, e.name), depth + 1);
       else if (e.name.endsWith(".yaml")) {
         const name = e.name.toLowerCase();
         if (name.includes(key)) {
-          const full = join9(dir, e.name);
+          const full = join10(dir, e.name);
           let id = "";
           try {
-            const content = readFileSync8(full, "utf8");
+            const content = readFileSync9(full, "utf8");
             const m = content.match(/^\s*id:\s*(.+)$/m);
             if (m)
               id = m[1].trim();
@@ -35253,7 +35470,7 @@ function complianceSummary(cwes) {
 
 // src/report.ts
 import { writeFileSync as writeFileSync2, mkdirSync as mkdirSync5 } from "node:fs";
-import { join as join10 } from "node:path";
+import { join as join11 } from "node:path";
 import { homedir as homedir7 } from "node:os";
 var SEVERITY_METRICS = {
   critical: { AV: "N", AC: "L", PR: "N", UI: "N", S: "U", C: "H", I: "H", A: "H" },
@@ -35484,7 +35701,7 @@ function reportJson(findings, opts = {}) {
   };
   return JSON.stringify(payload, null, 2);
 }
-var REPORT_DIR = process.env.BLITZSTRIKE_REPORT_DIR ?? join10(homedir7(), ".blitzstrike", "reports");
+var REPORT_DIR = process.env.BLITZSTRIKE_REPORT_DIR ?? join11(homedir7(), ".blitzstrike", "reports");
 function slugify2(s) {
   const slug = s.toLowerCase().replace(/^https?:\/\//, "").replace(/[^a-z0-9.-]+/g, "-").replace(/^-+|-+$/g, "").replace(/\./g, "_").slice(0, 60);
   return slug || "engagement";
@@ -35495,7 +35712,7 @@ function saveReport(content, opts = {}) {
   const ts = new Date().toISOString().replace(/[:.]/g, "-").slice(0, 19);
   const ext = opts.format === "json" ? "json" : "md";
   const filename = `${slug}-${ts}.${ext}`;
-  const path = join10(REPORT_DIR, filename);
+  const path = join11(REPORT_DIR, filename);
   writeFileSync2(path, content, "utf8");
   return { path, dir: REPORT_DIR, filename };
 }
@@ -35564,14 +35781,14 @@ function findingReport(f) {
 }
 function perFindingReports(findings, opts = {}) {
   const slug = slugify2(opts.scope ?? opts.title ?? "engagement");
-  const dir = join10(REPORT_DIR, slug);
-  const findingsDir = join10(dir, "findings");
+  const dir = join11(REPORT_DIR, slug);
+  const findingsDir = join11(dir, "findings");
   mkdirSync5(findingsDir, { recursive: true });
   const files = [];
   for (const f of findings) {
     const sev = f.classification?.severity ?? "informational";
     const filename = `${sev}_${findingSlug(f.title)}.md`;
-    const path = join10(findingsDir, filename);
+    const path = join11(findingsDir, filename);
     writeFileSync2(path, findingReport(f), "utf8");
     files.push({ path, filename, severity: sev, title: f.title });
   }
@@ -35599,7 +35816,7 @@ function perFindingReports(findings, opts = {}) {
     summaryLines.push(`| ${i + 1} | ${fl.title} | ${fl.severity} | [${fl.filename}](findings/${fl.filename}) |`);
   });
   summaryLines.push("");
-  const summaryPath = join10(dir, "SUMMARY.md");
+  const summaryPath = join11(dir, "SUMMARY.md");
   writeFileSync2(summaryPath, summaryLines.join(`
 `), "utf8");
   const meta = {
@@ -35608,9 +35825,9 @@ function perFindingReports(findings, opts = {}) {
     version: opts.version ?? null,
     total_findings: findings.length,
     by_severity: bySeverity,
-    findings: files.map((fl) => ({ title: fl.title, severity: fl.severity, file: join10("findings", fl.filename) }))
+    findings: files.map((fl) => ({ title: fl.title, severity: fl.severity, file: join11("findings", fl.filename) }))
   };
-  const metadataPath = join10(dir, "metadata.json");
+  const metadataPath = join11(dir, "metadata.json");
   writeFileSync2(metadataPath, JSON.stringify(meta, null, 2) + `
 `, "utf8");
   return {
@@ -36247,9 +36464,9 @@ function loadChains() {
   if (_chainsCache)
     return _chainsCache;
   try {
-    const dir = join11(fileURLToPath5(new URL(".", import.meta.url)), "..");
-    const path = join11(dir, "chains.json");
-    const raw = JSON.parse(readFileSync9(path, "utf8"));
+    const dir = join12(fileURLToPath6(new URL(".", import.meta.url)), "..");
+    const path = join12(dir, "chains.json");
+    const raw = JSON.parse(readFileSync10(path, "utf8"));
     _chainsCache = raw.chains ?? [];
     return _chainsCache;
   } catch {
@@ -37030,8 +37247,8 @@ var CHAIN_ID_TO_ESCALATION = {
 };
 function loadChainLinks() {
   try {
-    const dir = join11(fileURLToPath5(new URL(".", import.meta.url)), "..");
-    const data = JSON.parse(readFileSync9(join11(dir, "intelligence", "chain_links.json"), "utf8"));
+    const dir = join12(fileURLToPath6(new URL(".", import.meta.url)), "..");
+    const data = JSON.parse(readFileSync10(join12(dir, "intelligence", "chain_links.json"), "utf8"));
     return data.links ?? [];
   } catch {
     return [];
@@ -37187,18 +37404,18 @@ function compactState(phase, findings) {
 }
 
 // src/tasks.ts
-import { mkdirSync as mkdirSync6, readFileSync as readFileSync10, writeFileSync as writeFileSync3 } from "node:fs";
-import { join as join12 } from "node:path";
-import { fileURLToPath as fileURLToPath6 } from "node:url";
+import { mkdirSync as mkdirSync6, readFileSync as readFileSync11, writeFileSync as writeFileSync3 } from "node:fs";
+import { join as join13 } from "node:path";
+import { fileURLToPath as fileURLToPath7 } from "node:url";
 function tasksDir() {
-  return join12(fileURLToPath6(new URL(".", import.meta.url)), "..", ".blitzstrike", "tasks");
+  return join13(fileURLToPath7(new URL(".", import.meta.url)), "..", ".blitzstrike", "tasks");
 }
 function taskPath(id) {
-  return join12(tasksDir(), `${id}.json`);
+  return join13(tasksDir(), `${id}.json`);
 }
-function load(id) {
+function load2(id) {
   try {
-    return JSON.parse(readFileSync10(taskPath(id), "utf8"));
+    return JSON.parse(readFileSync11(taskPath(id), "utf8"));
   } catch {
     return null;
   }
@@ -37223,7 +37440,7 @@ function taskStart(id, objective, plan) {
   return { ...t, progress: `0/${plan.length}`, next: t.current_step };
 }
 function taskCheckpoint(id, step, status, note, outputHash) {
-  const t = load(id);
+  const t = load2(id);
   if (!t)
     return { ok: false, error: `task '${id}' not found — call task_start first` };
   t.checkpoints.push({ step, status, output_hash: outputHash, note, ts: Date.now() });
@@ -37249,7 +37466,7 @@ function taskCheckpoint(id, step, status, note, outputHash) {
   };
 }
 function taskStatus(id) {
-  const t = load(id);
+  const t = load2(id);
   if (!t)
     return { found: false, error: `task '${id}' not found` };
   const done = t.checkpoints.filter((c) => c.status === "done").length;
@@ -37265,7 +37482,7 @@ function taskStatus(id) {
   };
 }
 function taskResume(id) {
-  const t = load(id);
+  const t = load2(id);
   if (!t)
     return { found: false, error: `task '${id}' not found` };
   const doneSteps = t.checkpoints.filter((c) => c.status === "done").map((c) => c.step);
@@ -37538,16 +37755,16 @@ function scaffoldEngagement(target, scope = [], out_of_scope = []) {
 // src/incremental.ts
 import { execFileSync as execFileSync2 } from "node:child_process";
 import { writeFileSync as writeFileSync4, mkdtempSync, rmSync } from "node:fs";
-import { join as join13 } from "node:path";
+import { join as join14 } from "node:path";
 import { tmpdir } from "node:os";
 
 // src/eagle2.ts
 var import_php_parser2 = __toESM(require_src(), 1);
-import { readFileSync as readFileSync13 } from "node:fs";
+import { readFileSync as readFileSync14 } from "node:fs";
 
 // src/dataflow.ts
 init_scanner();
-import { readFileSync as readFileSync11 } from "node:fs";
+import { readFileSync as readFileSync12 } from "node:fs";
 var SOURCES = {
   $_GET: { id: "http_get", label: "HTTP GET parameter", attacker_controlled: true },
   $_POST: { id: "http_post", label: "HTTP POST body", attacker_controlled: true },
@@ -37632,7 +37849,7 @@ function traceDataFlow(path) {
     return result;
   let text;
   try {
-    text = readFileSync11(path, "utf8");
+    text = readFileSync12(path, "utf8");
   } catch {
     return result;
   }
@@ -37713,7 +37930,7 @@ init_scanner();
 
 // src/callgraph.ts
 var import_php_parser = __toESM(require_src(), 1);
-import { readFileSync as readFileSync12 } from "node:fs";
+import { readFileSync as readFileSync13 } from "node:fs";
 var parser = new import_php_parser.Engine({
   parser: { extractDoc: false, php7: true },
   ast: { withPositions: true, withSource: false }
@@ -37774,7 +37991,7 @@ function buildCallGraph(path) {
   const g = { nodes: new Map, edges: [] };
   let code;
   try {
-    code = readFileSync12(path, "utf8");
+    code = readFileSync13(path, "utf8");
   } catch {
     return g;
   }
@@ -38436,7 +38653,7 @@ function resolveFuncId(name, summaries) {
 function analyzeDataFlow2(path) {
   let cacheCode = "";
   try {
-    cacheCode = readFileSync13(path, "utf8");
+    cacheCode = readFileSync14(path, "utf8");
   } catch {}
   if (cacheCode) {
     const cached = getCache("eagle2", cacheCode);
@@ -38458,7 +38675,7 @@ function analyzeDataFlow2(path) {
   };
   let code;
   try {
-    code = cacheCode || readFileSync13(path, "utf8");
+    code = cacheCode || readFileSync14(path, "utf8");
   } catch {
     return result;
   }
@@ -57144,8 +57361,8 @@ function analyzeChangedFiles(repo, base = "HEAD~1", head = "HEAD") {
       continue;
     const lang = detectLanguage(file)?.language;
     if (lang === "php") {
-      const dir = mkdtempSync(join13(tmpdir(), "blitz-incr-"));
-      const tmp = join13(dir, "changed.php");
+      const dir = mkdtempSync(join14(tmpdir(), "blitz-incr-"));
+      const tmp = join14(dir, "changed.php");
       writeFileSync4(tmp, code);
       try {
         const r = analyzeDataFlow2(tmp);
@@ -57166,7 +57383,7 @@ function analyzeChangedFiles(repo, base = "HEAD~1", head = "HEAD") {
 // src/taint.ts
 init_scanner();
 var import_php_parser4 = __toESM(require_src(), 1);
-import { readFileSync as readFileSync14 } from "node:fs";
+import { readFileSync as readFileSync15 } from "node:fs";
 var parser4 = new import_php_parser4.Engine({
   parser: { extractDoc: false, php7: true },
   ast: { withPositions: true, withSource: false }
@@ -57464,7 +57681,7 @@ function analyzeTaint(path) {
   const result = { file: path, findings: [], suppressed: 0 };
   let code;
   try {
-    code = readFileSync14(path, "utf8");
+    code = readFileSync15(path, "utf8");
   } catch {
     return result;
   }
@@ -57558,15 +57775,15 @@ function taintTree(root, maxFiles = 2000) {
 }
 
 // src/differential.ts
-import { writeFileSync as writeFileSync5, rmSync as rmSync2, mkdtempSync as mkdtempSync2, readFileSync as readFileSync15 } from "node:fs";
-import { join as join14 } from "node:path";
+import { writeFileSync as writeFileSync5, rmSync as rmSync2, mkdtempSync as mkdtempSync2, readFileSync as readFileSync16 } from "node:fs";
+import { join as join15 } from "node:path";
 import { tmpdir as tmpdir2 } from "node:os";
 import { execFileSync as execFileSync3 } from "node:child_process";
 init_scanner();
 function runEngine(code, language, file) {
   if (language === "php") {
-    const dir = mkdtempSync2(join14(tmpdir2(), "blitz-diff-"));
-    const tmp = join14(dir, "old.php");
+    const dir = mkdtempSync2(join15(tmpdir2(), "blitz-diff-"));
+    const tmp = join15(dir, "old.php");
     writeFileSync5(tmp, code);
     try {
       const r = analyzeDataFlow2(tmp);
@@ -57720,8 +57937,8 @@ function languageOf(file) {
   return adapter?.language ?? "php";
 }
 function analyzeDifferentialFiles(oldPath, newPath, language) {
-  const oldCode = readFileSync15(oldPath, "utf8");
-  const newCode = readFileSync15(newPath, "utf8");
+  const oldCode = readFileSync16(oldPath, "utf8");
+  const newCode = readFileSync16(newPath, "utf8");
   const lang = language ?? languageOf(newPath);
   return analyzeDifferential(oldCode, newCode, lang, newPath);
 }
@@ -57848,46 +58065,46 @@ function analyzePatch(oldCode, newCode, language = "php") {
   };
 }
 function analyzePatchFiles(oldPath, newPath, language) {
-  const oldCode = readFileSync15(oldPath, "utf8");
-  const newCode = readFileSync15(newPath, "utf8");
+  const oldCode = readFileSync16(oldPath, "utf8");
+  const newCode = readFileSync16(newPath, "utf8");
   const lang = language ?? languageOf(newPath);
   return analyzePatch(oldCode, newCode, lang);
 }
 
 // src/frameworks.ts
-import { readFileSync as readFileSync16, existsSync as existsSync9 } from "node:fs";
-import { join as join15 } from "node:path";
-import { fileURLToPath as fileURLToPath7 } from "node:url";
-var ROOT4 = join15(fileURLToPath7(new URL(".", import.meta.url)), "..");
-var INTEL2 = join15(ROOT4, "intelligence");
+import { readFileSync as readFileSync17, existsSync as existsSync9 } from "node:fs";
+import { join as join16 } from "node:path";
+import { fileURLToPath as fileURLToPath8 } from "node:url";
+var ROOT4 = join16(fileURLToPath8(new URL(".", import.meta.url)), "..");
+var INTEL2 = join16(ROOT4, "intelligence");
 var cache = null;
-function load2() {
+function load3() {
   if (cache)
     return cache;
-  const p = join15(INTEL2, "frameworks.json");
+  const p = join16(INTEL2, "frameworks.json");
   if (!existsSync9(p))
     return null;
   try {
-    cache = JSON.parse(readFileSync16(p, "utf8"));
+    cache = JSON.parse(readFileSync17(p, "utf8"));
     return cache;
   } catch {
     return null;
   }
 }
 function listFrameworks() {
-  const data = load2();
+  const data = load3();
   if (!data)
     return [];
   return data.frameworks.map((f) => ({ id: f.id, name: f.name, language: f.language }));
 }
 function frameworkProfile(id) {
-  const data = load2();
+  const data = load3();
   if (!data)
     return null;
   return data.frameworks.find((f) => f.id === id) ?? null;
 }
 function detectFramework(code, language) {
-  const data = load2();
+  const data = load3();
   const hay = code.toLowerCase();
   const candidates = [];
   if (data) {
@@ -58376,185 +58593,6 @@ function nextSteps(ctx) {
   return steps;
 }
 
-// src/patterns.ts
-import { readFileSync as readFileSync17 } from "node:fs";
-import { join as join16, dirname as dirname2 } from "node:path";
-import { fileURLToPath as fileURLToPath8 } from "node:url";
-
-// src/synonyms.ts
-var ALIASES = {
-  idor: "missing_authz",
-  bola: "missing_authz",
-  "broken object level authorization": "missing_authz",
-  "insecure direct object reference": "missing_authz",
-  "broken access control": "missing_authz",
-  authorization: "missing_authz",
-  csrf: "missing_nonce",
-  xsrf: "missing_nonce",
-  "cross site request forgery": "missing_nonce",
-  "cross-site request forgery": "missing_nonce",
-  sqli: "sql_injection",
-  "sql injection": "sql_injection",
-  "sql-injection": "sql_injection",
-  ssti: "ssti",
-  "template injection": "ssti",
-  "server side template injection": "ssti",
-  xxe: "xxe",
-  "xml external entity": "xxe",
-  "xxe injection": "xxe",
-  bpla: "mass_assignment",
-  "broken property level authorization": "mass_assignment",
-  "mass assignment": "mass_assignment",
-  lfi: "path_confusion",
-  rfi: "path_confusion",
-  "path traversal": "path_confusion",
-  "directory traversal": "path_confusion",
-  "local file inclusion": "path_confusion",
-  "remote file inclusion": "path_confusion",
-  ssrf: "ssrf",
-  "server side request forgery": "ssrf",
-  "server-side request forgery": "ssrf",
-  "prompt injection": "llm_injection",
-  llm: "llm_injection",
-  llm01: "llm_injection",
-  "llm prompt injection": "llm_injection",
-  graphql: "graphql_exposure",
-  oauth: "oauth_misconfig",
-  "open redirect": "oauth_misconfig",
-  grpc: "grpc_reflection",
-  "hardcoded credential": "hardcoded_secret",
-  "hardcoded secret": "hardcoded_secret",
-  "credential leak": "hardcoded_secret",
-  "hard coded credentials": "hardcoded_secret",
-  "priv esc": "priv_esc",
-  privesc: "priv_esc",
-  "privilege escalation": "priv_esc",
-  "file upload": "file_upload",
-  "unrestricted upload": "file_upload",
-  "unrestricted file upload": "file_upload",
-  deserialization: "deserialization",
-  "insecure deserialization": "deserialization",
-  unserialize: "deserialization",
-  "type juggling": "type_juggling",
-  "php type juggling": "type_juggling",
-  "prototype pollution": "prototype_pollution",
-  crlf: "crlf_injection",
-  "header injection": "crlf_injection",
-  "http response splitting": "crlf_injection",
-  "wrong sanitizer": "wrong_sanitizer",
-  "wrong context sanitization": "wrong_sanitizer",
-  "dependency confusion": "dependency_confusion",
-  "dep confusion": "dependency_confusion",
-  "supply chain": "dependency_confusion",
-  "supply chain attack": "dependency_confusion",
-  "ml supply chain": "ml_supply_chain",
-  "ai supply chain": "ml_supply_chain",
-  "model poisoning": "ml_supply_chain",
-  "ml security": "ml_supply_chain",
-  "ai ml security": "ml_supply_chain",
-  "rust unsafe": "rust_unsafe",
-  "unsafe rust": "rust_unsafe",
-  "rust memory safety": "rust_unsafe",
-  transmute: "rust_unsafe",
-  "rust format string": "rust_format_string",
-  "format string": "rust_format_string",
-  "format string injection": "rust_format_string",
-  "jwt algorithm confusion": "jwt_alg_confusion",
-  "jwt alg confusion": "jwt_alg_confusion",
-  "alg confusion": "jwt_alg_confusion",
-  "rs256 hs256": "jwt_alg_confusion",
-  "web cache deception": "cache_deception",
-  "cache deception": "cache_deception",
-  "cache poisoning": "cache_deception",
-  "cache key injection": "cache_deception"
-};
-function normalize(term) {
-  return term.trim().toLowerCase().replace(/[_-]+/g, " ").replace(/\s+/g, " ").trim();
-}
-function canonicalId(term) {
-  const key = normalize(term);
-  if (ALIASES[key])
-    return ALIASES[key];
-  return key.replace(/ /g, "_");
-}
-function synonymsFor(term) {
-  const canonical = canonicalId(term);
-  const aliases = Object.entries(ALIASES).filter(([, v]) => v === canonical).map(([k]) => k);
-  return { canonical, aliases };
-}
-function listAliases() {
-  return Object.entries(ALIASES).map(([alias, canonical]) => ({ alias, canonical }));
-}
-
-// src/patterns.ts
-var __dirname2 = dirname2(fileURLToPath8(import.meta.url));
-var _doc = null;
-function load3() {
-  if (_doc)
-    return _doc;
-  try {
-    _doc = JSON.parse(readFileSync17(join16(__dirname2, "..", "intelligence", "patterns.json"), "utf8"));
-  } catch {
-    _doc = { patterns: [] };
-  }
-  return _doc;
-}
-function patternLookup(id) {
-  const canonical = canonicalId(id);
-  const p = load3().patterns.find((x) => x.id === canonical);
-  return p ?? null;
-}
-function listPatterns() {
-  return load3().patterns;
-}
-function submissionGate(input) {
-  const questions = [
-    {
-      q: "Reproducible — a copy-paste-ready request or step list triggers it?",
-      pass: input.reproducible === true,
-      reason: "Without an exact reproduction the finding is a hypothesis, not a result."
-    },
-    {
-      q: "In scope — the vulnerable asset is in the engagement scope?",
-      pass: input.in_scope === true,
-      reason: "Out-of-scope assets must not be submitted."
-    },
-    {
-      q: "Real impact — maps to an accepted-impact class, not informational?",
-      pass: input.real_impact === true,
-      reason: "Informational-only findings dilute the validity ratio."
-    },
-    {
-      q: "No privileged assumption — works without unrealistic attacker prerequisites?",
-      pass: input.no_privileged_assumption === true,
-      reason: "'Admin can do X' is a centralization risk, not a vulnerability."
-    },
-    {
-      q: "Verified live — confirmed with a marker + negative control, not just a static hint?",
-      pass: input.verified_live === true,
-      reason: "A static hit is a hypothesis until verified live (strike_verify / browser_validate)."
-    },
-    {
-      q: "Evidence attached AND redacted — secrets/PII stripped, integrity-tagged?",
-      pass: input.evidence_redacted === true,
-      reason: "Evidence must carry SHA-256-tagged, redacted records — no leaked secrets or victim PII."
-    },
-    {
-      q: "Severity derived — CVSS/confidence computed, not guessed?",
-      pass: input.severity_derived === true,
-      reason: "Severity is not confidence; derive it, don't assert it."
-    }
-  ];
-  const failed = questions.find((q) => !q.pass);
-  return {
-    verdict: failed ? "fail" : "pass",
-    passed: questions.filter((q) => q.pass).length,
-    total: questions.length,
-    questions,
-    ...failed ? { blocker: failed.q } : {}
-  };
-}
-
 // src/git-history.ts
 init_complex_bugs();
 import { execFileSync as execFileSync4 } from "node:child_process";
@@ -60139,8 +60177,174 @@ function analyzeJwt(token, opts = {}) {
   };
 }
 
+// src/oob.ts
+import { spawn as spawn3, execSync as execSync2 } from "node:child_process";
+import { createServer } from "node:http";
+import { randomUUID } from "node:crypto";
+import { networkInterfaces } from "node:os";
+import { existsSync as existsSync13 } from "node:fs";
+var sessions = new Map;
+function sleep(ms) {
+  return new Promise((r) => setTimeout(r, ms));
+}
+function findInteractsh() {
+  try {
+    const p = execSync2("which interactsh-client 2>/dev/null", { encoding: "utf8", timeout: 3000 }).trim();
+    if (p)
+      return p;
+  } catch {}
+  const home = process.env.HOME ?? "/root";
+  const candidates = [`${home}/go/bin/interactsh-client`, "/usr/local/bin/interactsh-client", "/usr/bin/interactsh-client"];
+  for (const c of candidates)
+    if (existsSync13(c))
+      return c;
+  return null;
+}
+function stripAnsi(s) {
+  return s.replace(/\u001b\[[0-9;]*m/g, "");
+}
+function extractDomain(buffer) {
+  const m = stripAnsi(buffer).match(/\[INF\]\s+([a-z0-9]{20,}\.[a-z0-9.-]+)/i);
+  return m ? m[1] : null;
+}
+function parseInteractions(buffer) {
+  const out = [];
+  for (const raw of stripAnsi(buffer).split(`
+`)) {
+    const line = raw.trim();
+    if (!line.startsWith("{"))
+      continue;
+    try {
+      const j = JSON.parse(line);
+      if (j && j.protocol && j.timestamp) {
+        const req = typeof j["raw-request"] === "string" ? j["raw-request"].split(/\r?\n/)[0] : null;
+        out.push({
+          protocol: j.protocol,
+          remote_address: j["remote-address"] ?? null,
+          request_line: req,
+          timestamp: j.timestamp,
+          unique_id: j["unique-id"] ?? null
+        });
+      }
+    } catch {}
+  }
+  return out;
+}
+function localIP() {
+  const ifaces = networkInterfaces();
+  for (const name of Object.keys(ifaces)) {
+    for (const iface of ifaces[name] ?? []) {
+      if (iface.family === "IPv4" && !iface.internal)
+        return iface.address;
+    }
+  }
+  return "127.0.0.1";
+}
+function result(s, extra = {}) {
+  return {
+    id: s.id,
+    mode: s.mode,
+    domain: s.domain ?? null,
+    url: s.url ?? null,
+    payload_url: s.url ? `\${oob_url}` : null,
+    payload_dns: s.domain ? `\${oob_dns}` : null,
+    templates: s.domain ? {
+      dns: `\${oob_dns}`,
+      http: `http://\${oob_dns}`,
+      ssrf_xxe: `http://\${oob_dns}/<marker>`,
+      sql_blind: `http://\${oob_dns}/<marker>`
+    } : { http: `http://${s.url}/<marker>` },
+    ...extra
+  };
+}
+async function oobStart() {
+  const bin = findInteractsh();
+  if (bin) {
+    const id = randomUUID().slice(0, 8);
+    const session = { id, mode: "interactsh", buffer: "", hits: [], startedAt: Date.now() };
+    session.proc = spawn3(bin, ["-json"], { stdio: ["ignore", "pipe", "pipe"] });
+    session.proc.stdout?.on("data", (d) => session.buffer += d.toString());
+    session.proc.stderr?.on("data", (d) => session.buffer += d.toString());
+    sessions.set(id, session);
+    const deadline = Date.now() + 25000;
+    while (Date.now() < deadline) {
+      const domain = extractDomain(session.buffer);
+      if (domain) {
+        session.domain = domain;
+        session.url = `http://${domain}`;
+        return result(session, { status: "listening" });
+      }
+      await sleep(300);
+    }
+    return result(session, { status: "timeout", note: "interactsh-client did not register a domain within 15s — check network / oast server reachability" });
+  }
+  return startSelfHost();
+}
+function startSelfHost() {
+  const id = randomUUID().slice(0, 8);
+  const session = { id, mode: "selfhost", buffer: "", hits: [], startedAt: Date.now() };
+  const server = createServer((req, res) => {
+    let body = "";
+    req.on("data", (c) => body += c);
+    req.on("end", () => {
+      session.hits.push({
+        protocol: "http",
+        method: req.method,
+        path: req.url,
+        remote_address: req.socket.remoteAddress,
+        headers: req.headers,
+        body: body.slice(0, 2000),
+        timestamp: new Date().toISOString()
+      });
+      res.writeHead(200, { "Content-Type": "text/plain" });
+      res.end("oob-ok");
+    });
+  });
+  server.listen(0, "0.0.0.0");
+  const port = server.address().port;
+  session.server = server;
+  session.port = port;
+  session.url = `http://${localIP()}:${port}`;
+  sessions.set(id, session);
+  return result(session, {
+    status: "listening",
+    note: "local listener (target must reach this host); for a remote target, expose it via a tunnel (e.g. pinggy) and re-point the payload"
+  });
+}
+function oobPoll(id) {
+  const s = sessions.get(id);
+  if (!s)
+    return { error: "unknown session id (was it stopped or did the server restart?)" };
+  if (s.mode === "selfhost") {
+    const fresh = s.hits.slice(0);
+    s.hits.length = 0;
+    return { id, mode: s.mode, url: s.url, found: fresh.length > 0, hits: fresh, total_hits_seen: fresh.length };
+  }
+  const interactions = parseInteractions(s.buffer);
+  const known = new Set(s.hits.map((h) => `${h.timestamp}|${h.protocol}|${h.request_line ?? ""}`));
+  const fresh = interactions.filter((i) => !known.has(`${i.timestamp}|${i.protocol}|${i.request_line ?? ""}`));
+  s.hits.push(...fresh);
+  return { id, mode: s.mode, domain: s.domain, url: s.url, found: fresh.length > 0, hits: fresh, total_hits_seen: s.hits.length };
+}
+function oobStop(id) {
+  const s = sessions.get(id);
+  if (!s)
+    return { error: "unknown session id" };
+  try {
+    s.proc?.kill("SIGTERM");
+  } catch {}
+  try {
+    s.server?.close();
+  } catch {}
+  sessions.delete(id);
+  return { id, stopped: true, total_hits_seen: s.hits.length };
+}
+function oobList() {
+  return { active: [...sessions.values()].map((s) => ({ id: s.id, mode: s.mode, domain: s.domain, url: s.url, age_sec: Math.round((Date.now() - s.startedAt) / 1000) })) };
+}
+
 // src/enterprise-benchmark.ts
-import { existsSync as existsSync13, readFileSync as readFileSync25, readdirSync as readdirSync6, statSync as statSync3 } from "node:fs";
+import { existsSync as existsSync14, readFileSync as readFileSync25, readdirSync as readdirSync6, statSync as statSync3 } from "node:fs";
 import { join as join23, resolve } from "node:path";
 init_complex_bugs();
 var ROOT6 = resolve(process.cwd(), "bench", "enterprise");
@@ -60201,7 +60405,7 @@ function detectFixture(dir) {
 function runEnterpriseBenchmark() {
   const fixtures = [];
   for (const fx of ENTERPRISE_FIXTURES) {
-    if (!existsSync13(fx.dir)) {
+    if (!existsSync14(fx.dir)) {
       fixtures.push({ id: fx.id, available: false, detected: 0, expected: fx.expected_vulns, recall: 0 });
       continue;
     }
@@ -60383,7 +60587,7 @@ function coverageMatrix() {
 // src/server.ts
 init_update();
 init_version();
-function createServer() {
+function createServer2() {
   const server = new McpServer({
     name: "blitzstrike",
     version: VERSION
@@ -60396,7 +60600,7 @@ function createServer() {
 ` + `- A hard block (Cloudflare/WAF/IP-block/captcha) is NOT the end: mark the finding blocked + note the required vantage (residential / authorized / correct-SNI / --resolve direct-to-origin), then CONTINUE to the next lead (origin bypass, non-prod cluster, mobile APK, subdomain).
 ` + `- Keep trying every lead AND every chain step until each is verified/executed or blocked, THEN generate_report. Never deliver a bare surface map, and never stop at 'found X' when X enables more.
 
-` + "TWO PATHS:\\n" + "- Source path on disk -> blitz_scan / taint_file / eagle_eye2 (static).\\n" + "- Live URL -> live_recon / active_scan / strike_verify (web-hunting).\\n\\n" + "DEEPEN A FINDING: attack_plan(target, tech, params) to get the prioritized vector plan (decide what to test next with data); list_chains (escalation), chain_links (compose), technique_lookup(cls), payload_lookup, bypass_lookup (blocked). Ground any detector hit empirically with pattern_lookup(id) — it returns the class's CWE, real-world signature, escalation chains, citable references, per-class bypass techniques, and the high-value assets (crown jewels) that class hits, so a raw hit becomes a class-aware finding. Resolve free-form terminology first with synonym_lookup(term) (IDOR/BOLA/SQLi/prompt-injection → canonical id). For an llm_injection hit, its pattern carries a validation discipline — the RUN-TWICE RULE (reproduce token-for-token across two fresh sessions), NON-GUESSABLE ANCHOR (must leak a real key/URL, not a plausible guess), and OOB PROOF (a verifiable callback log) — apply all three before reporting. BEFORE generating a report, run submission_gate(...) and only ship a finding that passes all 7 questions (reproducible, in-scope, real-impact, no-privileged-assumption, verified-live, evidence-redacted, severity-derived); one false = kill it. Calibrate severity with severity_calibrate(type, cvss) to get a P1–P5 tier + VRT-style category. Start each engagement with engagement_scaffold(target, scope) for the folder + scope.md structure, and check data_refresh() to confirm the data layers are consistent. Phase doctrine: read_skill(bs-orchestrate-engagement | bs-web-hunting | bs-source-audit | bs-verify-finding). Campaign plan: read_playbook(target-type). On any failure call retry_guidance(signal) / model_fallback(signal) before giving up.\n" + "KNOWLEDGE BASE (discover, don't guess): skillLookup(topic) / listSkills for the 40 attack-path + hunting skills (ap-*, hp-*, bs-*); list_attack_vectors / attack_vectors(cat) for the 34-category vector taxonomy; taxonomy(kind) for OWASP/CWE/ASVS/API-top-10; read_playbook(type) for the 17 campaign playbooks; list_manuals / read_tool_manual for 317 tool references; list_tools / run_catalog_tool for the 141-tool catalog. Every tool, skill, and data layer is reachable from these. CROSS-TARGET INTELLIGENCE: strike_resolve auto-records confirmed/false_positive verdicts into the empirical ledger; query it with intelligence(action=hit_rates/top_vectors/recall) so a new target on a known tech inherits historical hit-rates (attack_plan already blends them into success_probability). intelligence(action=recall, tech, target) is the per-engagement pattern recall — it returns which patterns historically CONFIRMED on that tech (prioritize them) versus which only ever produced false positives (avoid them), so a new engagement starts from the empirical playbook of past ones. LIVE PENTEST + TARGETING (black-box, WAF-safe): cache_gap(base_url, endpoint) fuzzes path-normalization + static-extension variants for cache deception/poisoning; blind_oracle(base_url, param, value) detects which SINK a param reaches (sql/ssti/xss) via benign arithmetic (id=1+0, test${7*7}) WITHOUT a malicious payload; param_precedence(base_url, param, A, B) maps duplicate-parameter precedence (first/last-wins) for WAF-bypass. SOURCE TARGETING: action_surface(code) maps every wp_ajax_* action to its vuln class + DERIVED priority (what to look for WHERE); security_state(sanitizers, sink) gives a wrong-context sanitization verdict; framework_knowledge(framework) returns auth/nonce primitives for 9 frameworks; variant_scan(root, signature) mass-sweeps an install base for ONE bug family; patch_analyze(old, new) REVERSES a security patch into the 0-day, and its mine_signature feeds variant_scan to sweep unpatched copies. All of these are DETECTION HINTS — verify each live (strike_verify / browser_validate) before it enters the report. NEWEST DETECTORS — understand AND try them: variant_scan also emits priv_esc (privilege escalation — a role/capability/user change fed by request input, traced cross-file via reverse call-graph, e.g. set_role($id, sanitize_key($_POST['um-role'])) or update_user_meta(...,'wp_capabilities', $_POST[...])) and flags uploadAllow=>array('all') unrestricted-upload configs as file_upload (the file-manager/connector shape). TO TRY a priv_esc hit: submit the role field with 'administrator' (or send wp_capabilities meta) and confirm the account actually gains admin. TO TRY an unrestricted-upload hit: POST a .php/.phtml and confirm it lands web-reachable + executes. variant_scan also emits hardcoded_secret (CWE-798) in three tiers: a secret field (api_key/db_password/access_token/aws_*) assigned a literal (HIGH), a known secret FORMAT (JWT eyJ…/AWS AKIA…/GitHub ghp_…/Slack xoxb-…/…) regardless of name (HIGH), or a high-entropy suspect token (MEDIUM — verify before reporting). Verify a frontend/JS secret live via drive_devtools (inspect the JS bundle / network response and confirm the key is actually exposed), and for a backend secret confirm it is reachable/valid. A static hit is a HYPOTHESIS until verified live — never report unverified. For a repo, also scan_git_history(root) — secrets DELETED from HEAD still live in .git history (the removed-later-is-not-fixed trap), and it feeds every recovered pre-deletion blob through the same secret detector. Once you recover a credential, prove it is still ACTIVE with validate_leaked_key(apiBase, endpoints, key|blobUrl) — a READ-ONLY differential test (401-without-key vs 200-with-key = auth bypass PROVEN). Two supply-chain detectors: dependency_confusion (a manifest/build file resolving a package from a public registry — pypi.org/npmjs.org --extra-index-url, or a scoped @company/pkg with no private registry) and ml_supply_chain (torch.load without weights_only=True / joblib.load / np.load(allow_pickle=True) / keras load_model on an untrusted model → pickle RCE). Rust is supported end-to-end: the taint engine (blitz_scan / taint_file) maps Rust sinks (std::process::Command, sqlx/diesel, reqwest/hyper, std::fs, serde/bincode) to the classic classes, plus two Rust-specific detectors — rust_unsafe (transmute / assume_init / from_raw_parts / ptr::* — memory-unsafety surface, CWE-119) and rust_format_string (println!/format! with a variable as the format string — CWE-134). The sqlx query! compile-time macro is treated as safe (suppressed). Two more web-class detectors: jwt_alg_confusion (a JWT verifier that dispatches on the token's alg header and accepts BOTH RS256 and HS256, with the HS256 HMAC secret derived from public/shared key material — CWE-347; the attacker sets alg=HS256 and signs with the public key to forge admin tokens) and cache_deception (a reverse proxy caching static-extension URLs with a cache key that omits the session cookie, over a session-authenticated backend — CWE-525; the victim's cached private response is re-fetched anonymously). TO TRY a jwt_alg_confusion hit: fetch the public key (/.well-known/jwks.json), forge an HS256 token signed with that public key, and confirm admin access. TO TRY a cache_deception hit: request an authenticated path with a static extension appended (.css/.js) and re-fetch it anonymously.\n" + `PRECISION ANALYSIS — chrome-devtools MCP is MANDATORY, not optional:
+` + "TWO PATHS:\\n" + "- Source path on disk -> blitz_scan / taint_file / eagle_eye2 (static).\\n" + "- Live URL -> live_recon / active_scan / strike_verify (web-hunting).\\n\\n" + "DEEPEN A FINDING: attack_plan(target, tech, params) to get the prioritized vector plan (decide what to test next with data); list_chains (escalation), chain_links (compose), technique_lookup(cls), payload_lookup, bypass_lookup (blocked). Ground any detector hit empirically with pattern_lookup(id) — it returns the class's CWE, real-world signature, escalation chains, citable references, per-class bypass techniques, and the high-value assets (crown jewels) that class hits, so a raw hit becomes a class-aware finding. Resolve free-form terminology first with synonym_lookup(term) (IDOR/BOLA/SQLi/prompt-injection → canonical id). For an llm_injection hit, its pattern carries a validation discipline — the RUN-TWICE RULE (reproduce token-for-token across two fresh sessions), NON-GUESSABLE ANCHOR (must leak a real key/URL, not a plausible guess), and OOB PROOF (a verifiable callback log) — apply all three before reporting. BEFORE generating a report, run submission_gate(...) and only ship a finding that passes all 7 questions (reproducible, in-scope, real-impact, no-privileged-assumption, verified-live, evidence-redacted, severity-derived); one false = kill it. Calibrate severity with severity_calibrate(type, cvss) to get a P1–P5 tier + VRT-style category. Start each engagement with engagement_scaffold(target, scope) for the folder + scope.md structure, and check data_refresh() to confirm the data layers are consistent. Phase doctrine: read_skill(bs-orchestrate-engagement | bs-web-hunting | bs-source-audit | bs-verify-finding). Campaign plan: read_playbook(target-type). On any failure call retry_guidance(signal) / model_fallback(signal) before giving up.\n" + "KNOWLEDGE BASE (discover, don't guess): skillLookup(topic) / listSkills for the 40 attack-path + hunting skills (ap-*, hp-*, bs-*); list_attack_vectors / attack_vectors(cat) for the 34-category vector taxonomy; taxonomy(kind) for OWASP/CWE/ASVS/API-top-10; read_playbook(type) for the 17 campaign playbooks; list_manuals / read_tool_manual for 317 tool references; list_tools / run_catalog_tool for the 141-tool catalog. Every tool, skill, and data layer is reachable from these. CROSS-TARGET INTELLIGENCE: strike_resolve auto-records confirmed/false_positive verdicts into the empirical ledger; query it with intelligence(action=hit_rates/top_vectors/recall) so a new target on a known tech inherits historical hit-rates (attack_plan already blends them into success_probability). intelligence(action=recall, tech, target) is the per-engagement pattern recall — it returns which patterns historically CONFIRMED on that tech (prioritize them) versus which only ever produced false positives (avoid them), so a new engagement starts from the empirical playbook of past ones. LIVE PENTEST + TARGETING (black-box, WAF-safe): cache_gap(base_url, endpoint) fuzzes path-normalization + static-extension variants for cache deception/poisoning; blind_oracle(base_url, param, value) detects which SINK a param reaches (sql/ssti/xss) via benign arithmetic (id=1+0, test${7*7}) WITHOUT a malicious payload; param_precedence(base_url, param, A, B) maps duplicate-parameter precedence (first/last-wins) for WAF-bypass. OOB (out-of-band) PROOF for BLIND vulns: oob_start() spins an interactsh listener (unique *.oast.* domain, streams DNS/HTTP interactions — the standard for public targets) or a local HTTP listener for local labs; inject the canary, then oob_poll(id) until the hit arrives; oob_stop(id) to clean up. A blind SSRF/XXE/SQLi/command-injection is CONFIRMED only when the canary actually arrives — never from a guess. SOURCE TARGETING: action_surface(code) maps every wp_ajax_* action to its vuln class + DERIVED priority (what to look for WHERE); security_state(sanitizers, sink) gives a wrong-context sanitization verdict; framework_knowledge(framework) returns auth/nonce primitives for 9 frameworks; variant_scan(root, signature) mass-sweeps an install base for ONE bug family; patch_analyze(old, new) REVERSES a security patch into the 0-day, and its mine_signature feeds variant_scan to sweep unpatched copies. All of these are DETECTION HINTS — verify each live (strike_verify / browser_validate) before it enters the report. NEWEST DETECTORS — understand AND try them: variant_scan also emits priv_esc (privilege escalation — a role/capability/user change fed by request input, traced cross-file via reverse call-graph, e.g. set_role($id, sanitize_key($_POST['um-role'])) or update_user_meta(...,'wp_capabilities', $_POST[...])) and flags uploadAllow=>array('all') unrestricted-upload configs as file_upload (the file-manager/connector shape). TO TRY a priv_esc hit: submit the role field with 'administrator' (or send wp_capabilities meta) and confirm the account actually gains admin. TO TRY an unrestricted-upload hit: POST a .php/.phtml and confirm it lands web-reachable + executes. variant_scan also emits hardcoded_secret (CWE-798) in three tiers: a secret field (api_key/db_password/access_token/aws_*) assigned a literal (HIGH), a known secret FORMAT (JWT eyJ…/AWS AKIA…/GitHub ghp_…/Slack xoxb-…/…) regardless of name (HIGH), or a high-entropy suspect token (MEDIUM — verify before reporting). Verify a frontend/JS secret live via drive_devtools (inspect the JS bundle / network response and confirm the key is actually exposed), and for a backend secret confirm it is reachable/valid. A static hit is a HYPOTHESIS until verified live — never report unverified. For a repo, also scan_git_history(root) — secrets DELETED from HEAD still live in .git history (the removed-later-is-not-fixed trap), and it feeds every recovered pre-deletion blob through the same secret detector. Once you recover a credential, prove it is still ACTIVE with validate_leaked_key(apiBase, endpoints, key|blobUrl) — a READ-ONLY differential test (401-without-key vs 200-with-key = auth bypass PROVEN). Two supply-chain detectors: dependency_confusion (a manifest/build file resolving a package from a public registry — pypi.org/npmjs.org --extra-index-url, or a scoped @company/pkg with no private registry) and ml_supply_chain (torch.load without weights_only=True / joblib.load / np.load(allow_pickle=True) / keras load_model on an untrusted model → pickle RCE). Rust is supported end-to-end: the taint engine (blitz_scan / taint_file) maps Rust sinks (std::process::Command, sqlx/diesel, reqwest/hyper, std::fs, serde/bincode) to the classic classes, plus two Rust-specific detectors — rust_unsafe (transmute / assume_init / from_raw_parts / ptr::* — memory-unsafety surface, CWE-119) and rust_format_string (println!/format! with a variable as the format string — CWE-134). The sqlx query! compile-time macro is treated as safe (suppressed). Two more web-class detectors: jwt_alg_confusion (a JWT verifier that dispatches on the token's alg header and accepts BOTH RS256 and HS256, with the HS256 HMAC secret derived from public/shared key material — CWE-347; the attacker sets alg=HS256 and signs with the public key to forge admin tokens) and cache_deception (a reverse proxy caching static-extension URLs with a cache key that omits the session cookie, over a session-authenticated backend — CWE-525; the victim's cached private response is re-fetched anonymously). TO TRY a jwt_alg_confusion hit: fetch the public key (/.well-known/jwks.json), forge an HS256 token signed with that public key, and confirm admin access. TO TRY a cache_deception hit: request an authenticated path with a static extension appended (.css/.js) and re-fetch it anonymously.\n" + `PRECISION ANALYSIS — chrome-devtools MCP is MANDATORY, not optional:
 ` + `- When a lead needs DOM/JS precision — DOM-XSS sink execution, AJAX endpoint + payload interception, JS runtime errors, redirect chains, SSO/token flow, or anything a static HTML glance cannot prove — call drive_devtools(target). It spawns chrome-devtools-mcp and drives a REAL headless browser (navigate -> list_network_requests -> list_console_messages -> evaluate_script), giving reproducible evidence instead of a guess.
 ` + `- Before calling it, check_mcp() to confirm the browser MCP is available; if not, blitzstrike install-tools or npm i -g chrome-devtools-mcp. Never substitute eyeballing minified JS or a static sink guess when a live browser can PROVE it. This is the precision + consistency layer.
 ` + "EXTERNAL MCP SERVERS (verified, connect them — NOT one-shot CLIs): chrome-devtools-mcp (29 tools: list_network_requests/get_network_request for raw HTTP interception, list_console_messages for JS errors + DOM-XSS, evaluate_script to run JS, take_screenshot) -> stdio chrome-devtools-mcp --headless --chromeArg=--no-sandbox --chromeArg=--disable-gpu (as root/container this is MANDATORY or the browser crashes; add --proxyServer http://127.0.0.1:8080 to route through Burp, --acceptInsecureCerts for bad TLS). burp-suite-mcp (proxy history + active scan + repeater) -> NOT npm: build the JAR (git clone https://github.com/PortSwigger/mcp-server.git && cd mcp-server && ./gradlew embedProxyJar), load it in Burp Extensions, then connect the client to http://127.0.0.1:9876 (SSE) or the stdio proxy java -jar mcp-proxy-all.jar --sse-url http://127.0.0.1:9876."
@@ -60756,7 +60960,7 @@ ${statusLine}` : statusLine },
   });
   server.registerTool("pattern_lookup", {
     title: "Empirical pattern lookup",
-    description: "GROUNDING: return the empirical grounding for a detector type / vuln class — its CWE, its real-world signature, the escalation chains it composes into (cross-ref chains.json), and citable references. Use to turn a raw detector hit into a grounded, class-aware finding. Pass 'list' to enumerate all grounded classes.",
+    description: "GROUNDING: return the empirical grounding for a detector type / vuln class — its CWE, its real-world signature, the escalation chains it composes into (cross-ref chains.json), citable references, and its typical bug-bounty payout range (typical_payout / payout_min / payout_max) for impact-first prioritization. Use to turn a raw detector hit into a grounded, class-aware finding. Pass 'list' to enumerate all grounded classes.",
     inputSchema: {
       id: string2().describe("Detector/vuln class id (sql_injection, ssrf, idor-like missing_authz, …), or 'list'")
     }
@@ -61315,6 +61519,38 @@ ${statusLine}` : statusLine },
     }
     return { content: [{ type: "text", text: JSON.stringify(await blindOracle(base_url, param, value, { sinks: s })) }] };
   });
+  server.registerTool("oob_start", {
+    title: "Out-of-band callback listener (blind SSRF/XXE/SQLi/RCE proof)",
+    description: "Start a deterministic out-of-band (OOB) listener to PROVE a blind vuln (SSRF/XXE/SQLi/command injection) that does not reflect in the HTTP response. Uses interactsh-client when installed (unique *.oast.* domain, streams DNS/HTTP interactions) — the standard for public targets; falls back to a local HTTP listener for local labs. Returns the callback URL/domain + payload templates. Pair oob_start -> inject the canary -> oob_poll(id) until the hit arrives -> oob_stop(id). A hit is reported ONLY when an interaction actually arrives for the session's unique id — never a guess.",
+    inputSchema: {}
+  }, async () => {
+    return { content: [{ type: "text", text: JSON.stringify(await oobStart()) }] };
+  });
+  server.registerTool("oob_poll", {
+    title: "Poll an OOB listener for incoming interactions",
+    description: "Check a live OOB session (from oob_start) for incoming DNS/HTTP interactions. Returns found:true + the hits (protocol, remote address, request line, timestamp) when the canary was actually fetched. Poll repeatedly (e.g. every 2-3s) for up to ~60s after injecting the payload; a blind vuln is CONFIRMED only when your marker arrives.",
+    inputSchema: {
+      id: string2().describe("Session id returned by oob_start")
+    }
+  }, async ({ id }) => {
+    return { content: [{ type: "text", text: JSON.stringify(oobPoll(id)) }] };
+  });
+  server.registerTool("oob_stop", {
+    title: "Stop an OOB listener",
+    description: "Stop an OOB session and free its resources (kill the interactsh child / close the listener). Returns the total hits seen.",
+    inputSchema: {
+      id: string2().describe("Session id returned by oob_start")
+    }
+  }, async ({ id }) => {
+    return { content: [{ type: "text", text: JSON.stringify(oobStop(id)) }] };
+  });
+  server.registerTool("oob_list", {
+    title: "List active OOB listeners",
+    description: "List active OOB sessions (id, mode, domain/url, age) for introspection.",
+    inputSchema: {}
+  }, async () => {
+    return { content: [{ type: "text", text: JSON.stringify(oobList()) }] };
+  });
   server.registerTool("param_precedence", {
     title: "Duplicate parameter precedence fuzzer (WAF-bypass oracle)",
     description: "LIVE (black-box): determine how the app resolves duplicate parameters + alternate delimiters (; , %26 %3b | [] %00 + #). Reveals the WAF-bypass vector — if the WAF validates one value and the app binds another, inject via the disagreement. Deterministic: baseline A/B + differential per variant.",
@@ -62237,21 +62473,21 @@ ${out}${gate}` }] };
   return server;
 }
 async function serve() {
-  const server = createServer();
+  const server = createServer2();
   const transport = new StdioServerTransport;
   await server.connect(transport);
 }
 
 // src/index.ts
 init_cli();
-import { readFileSync as readFileSync31, existsSync as existsSync16 } from "node:fs";
+import { readFileSync as readFileSync31, existsSync as existsSync17 } from "node:fs";
 import { join as join28 } from "node:path";
 import { fileURLToPath as fileURLToPath17 } from "node:url";
 var ROOT11 = join28(fileURLToPath17(new URL(".", import.meta.url)), "..");
 function readVersion() {
   try {
     const p = join28(ROOT11, "package.json");
-    if (existsSync16(p))
+    if (existsSync17(p))
       return JSON.parse(readFileSync31(p, "utf8")).version ?? "1.0.0";
   } catch {}
   return "1.0.0";