eggsec-nse 0.2.0

eggsec-nse 0.2.0 — provider inversion and portability hardening

Published from source commit ff0d2c0 (crates.io artifact eggsec-nse 0.2.0, docs.rs built).

Added

• NseHostServices per-run provider bundle with one capability-aware broker sequence
• Clock/random/environment providers with deterministic test doubles
• DNS/TCP/UDP provider contracts with exact-endpoint selection (resolve-authorize-connect identity)
• Filesystem/process providers with per-run virtual CWD
• HTTP provider contract with native reqwest backend
• Public broker/provider DTO types for embedders
• Windows compile/check qualification (MSRV 1.89)

Changed (breaking)

• register_vulns_library(lua) now requires (lua, capability_ctx: &NseCapabilityContext)
• Network send bytes count as written, not read; max_network_bytes_written is now enforced
• HTTP accounting splits request-written from response-read bytes

Security notes

• Provider mechanics are NOT embedding-application authorization.
• The known 72-file specialized direct-I/O residual remains outside provider/capability coverage (pinned by boundary guard). Automated embedders must NOT treat 0.2.0 as complete protocol-wide scope enforcement.
• No upstream Nmap script/nselib corpus is bundled.

Full changelog: CHANGELOG.md. Install: eggsec-nse = { version = "0.2", features = ["nse"] }