feat(nuclei): including signature manager and expectation signature (#198)

[Megafredo]

Proposed changes

• Implementation of signatures / expectations for Nuclei Injector (WIP)

Related issues

• Closes feat(nuclei): create its own signatures for inject expectations #198

Checklist

• I consider the submitted work as finished
• I tested the code for its functionality
• I wrote test cases for the relevant uses case
• I added/update the relevant documentation (either on github or on notion)
• Where necessary I refactored code to improve the overall quality
• For bug fix -> I implemented a test that covers the bug

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #247      +/-   ##
==========================================
+ Coverage   67.52%   68.08%   +0.56%     
==========================================
  Files          68       75       +7     
  Lines        3138     3353     +215     
==========================================
+ Hits         2119     2283     +164     
- Misses       1019     1070      +51     

Files with missing lines	Coverage Δ
nuclei/nuclei/nuclei_contracts/nuclei_contracts.py	96.66% <100.00%> (+0.11%)	⬆️

... and 10 files with indirect coverage changes

📢 Thoughts on this report? Let us know!

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[guzmud]

Testing against a locally running OAEV (docker stack on :rolling)

{
  "timestamp": "2026-06-26T12:12:00.317603Z",
  "level": "INFO",
  "name": "Nuclei",
  "message": "Executing nuclei with: nuclei -concurrency 5 -bulk-size 5 -rate-limit 50 -timeout 10 -retries 1 -max-host-error 30 -scan-strategy host-spray -response-size-read 1048576 -response-size-save 1048576 -exclude-type headless -tags cloud -jsonl"
}

{
  "timestamp": "2026-06-26T12:12:09.399398Z",
  "level": "DEBUG",
  "name": "pyoaev.signatures.signature_manager",
  "message": "send_signatures inject_id=6e7be97b-c5a9-4835-9c39-a58d9aae6e81, execution_status=success, execution_action=InjectExecutionActions.COMPLETE"
}

[Copilot]

Pull request overview

This PR extends the Nuclei injector to support expectation signatures by (1) adding new predefined expectation types to the contract and (2) producing/sending signature payloads during injector execution, aligning with issue #198’s expectation-signature output requirements.

Changes:

• Add predefined expectations for DETECTION and PREVENTION to Nuclei contract fields.
• Add a new contract output element for ExpectationSignature (expectation_signatures).
• Integrate pyoaev.signatures.SignatureManager into the Nuclei injector run flow and update external contract tests accordingly.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 3 comments.

File	Description
nuclei/test/nuclei_contracts/test_external_contracts.py	Updates expected external contract JSON to include additional predefined expectations and the new expectation-signature output.
nuclei/nuclei/openaev_nuclei.py	Integrates signature building/sending into injector execution and extracts expectation types from inject content.
nuclei/nuclei/nuclei_contracts/nuclei_contracts.py	Adds DETECTION/PREVENTION predefined expectations and introduces the ExpectationSignature contract output.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 3 changed files in this pull request and generated 2 comments.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 3 changed files in this pull request and generated 6 comments.

[guzmud]

Using it with the latest openaev/platform:rolling against a pre-registered asset