@integsec/agentic-pentest-proxy 0.3.7 → 0.3.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (49) hide show
  1. package/cloudflare/wrangler.jsonc +1 -1
  2. package/dist/bin/integsec-agentic-pentest-bridge.js +2 -2
  3. package/dist/bin/integsec-agentic-pentest-scanners-mcp.d.ts +3 -0
  4. package/dist/bin/integsec-agentic-pentest-scanners-mcp.d.ts.map +1 -0
  5. package/dist/bin/integsec-agentic-pentest-scanners-mcp.js +39 -0
  6. package/dist/bin/integsec-agentic-pentest-scanners-mcp.js.map +1 -0
  7. package/dist/src/config.js +1 -1
  8. package/dist/src/gateway/admin.js +13 -4
  9. package/dist/src/gateway/runtime.d.ts.map +1 -1
  10. package/dist/src/gateway/runtime.js +17 -4
  11. package/dist/src/gateway/runtime.js.map +1 -1
  12. package/dist/src/gateway/state.d.ts +1 -0
  13. package/dist/src/gateway/state.d.ts.map +1 -1
  14. package/dist/src/gateway/state.js +9 -0
  15. package/dist/src/gateway/state.js.map +1 -1
  16. package/dist/src/index.d.ts +1 -1
  17. package/dist/src/index.js +1 -1
  18. package/dist/src/manifest-schema.d.ts +1 -0
  19. package/dist/src/manifest-schema.d.ts.map +1 -1
  20. package/dist/src/manifest-schema.js +1 -0
  21. package/dist/src/manifest-schema.js.map +1 -1
  22. package/dist/src/proxy.d.ts +2 -1
  23. package/dist/src/proxy.d.ts.map +1 -1
  24. package/dist/src/proxy.js +4 -3
  25. package/dist/src/proxy.js.map +1 -1
  26. package/dist/src/scanners/runner.d.ts +4 -0
  27. package/dist/src/scanners/runner.d.ts.map +1 -0
  28. package/dist/src/scanners/runner.js +95 -0
  29. package/dist/src/scanners/runner.js.map +1 -0
  30. package/dist/src/technique-checker.d.ts.map +1 -1
  31. package/dist/src/technique-checker.js +2 -1
  32. package/dist/src/technique-checker.js.map +1 -1
  33. package/dist/src/tui/DecisionRow.d.ts.map +1 -1
  34. package/dist/src/tui/DecisionRow.js +2 -1
  35. package/dist/src/tui/DecisionRow.js.map +1 -1
  36. package/dist/src/tui/destination.d.ts +4 -0
  37. package/dist/src/tui/destination.d.ts.map +1 -0
  38. package/dist/src/tui/destination.js +43 -0
  39. package/dist/src/tui/destination.js.map +1 -0
  40. package/dist/src/types.d.ts +2 -0
  41. package/dist/src/types.d.ts.map +1 -1
  42. package/dist/src/validator.d.ts +5 -2
  43. package/dist/src/validator.d.ts.map +1 -1
  44. package/dist/src/validator.js +105 -3
  45. package/dist/src/validator.js.map +1 -1
  46. package/docs/managed-gateway.md +7 -1
  47. package/docs/security.md +6 -0
  48. package/docs/tui.md +3 -1
  49. package/package.json +5 -3
package/docs/tui.md CHANGED
@@ -8,7 +8,9 @@ The terminal monitor tails local audit JSONL files written by the proxy. Run it
8
8
  integsec-agentic-pentest-tui --audit-path /path/to/audit
9
9
  ```
10
10
 
11
- Use `--engagement <id>` to show one engagement. The header shows the engagement, client, and operator from the first matching entry. The stats panel shows allowed and blocked counts and frequent targets and tools. The live feed shows recent decisions, targets, reasons for blocks, and duration.
11
+ Use `--engagement <id>` to show one engagement. The header shows the engagement, client, and operator from the first matching entry. The stats panel shows allowed and blocked counts and frequent targets and tools. The live feed shows recent decisions, destinations, reasons for blocks, and duration. When structured audit fields include an HTTP URL or Burp's target hostname, port, and TLS setting, destinations include the scheme and port, for example `https://app.example.test:443 (HTTP/2)`. Older entries without these fields still show the hostname.
12
+
13
+ `--gateway` watches local audit files; the TUI itself does not connect to the gateway's HTTP port. An allowed decision means the gateway forwarded the call. Repeater and Intruder staging tools can create local Burp items without sending target traffic yet.
12
14
 
13
15
  The action shots below use fictional identifiers and documentation-only IP addresses. They are rendered from the actual TUI components.
14
16
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@integsec/agentic-pentest-proxy",
3
- "version": "0.3.7",
3
+ "version": "0.3.8",
4
4
  "description": "IntegSec Agentic Pentest MCP Proxy — enforce penetration testing engagement scope for AI agents",
5
5
  "repository": {
6
6
  "type": "git",
@@ -15,7 +15,8 @@
15
15
  "integsec-agentic-pentest-manifest": "dist/bin/integsec-agentic-pentest-manifest.js",
16
16
  "integsec-agentic-pentest-gateway": "dist/bin/integsec-agentic-pentest-gateway.js",
17
17
  "integsec-gateway": "dist/bin/integsec-agentic-pentest-gateway.js",
18
- "integsec-agentic-pentest-bridge": "dist/bin/integsec-agentic-pentest-bridge.js"
18
+ "integsec-agentic-pentest-bridge": "dist/bin/integsec-agentic-pentest-bridge.js",
19
+ "integsec-agentic-pentest-scanners-mcp": "dist/bin/integsec-agentic-pentest-scanners-mcp.js"
19
20
  },
20
21
  "files": [
21
22
  "dist/",
@@ -39,7 +40,8 @@
39
40
  "driver": "vitest run --config vitest.driver.config.ts",
40
41
  "lint": "tsc --noEmit",
41
42
  "start": "node dist/bin/integsec-agentic-pentest-proxy.js",
42
- "postinstall": "node scripts/postinstall.cjs"
43
+ "postinstall": "node scripts/postinstall.cjs",
44
+ "hooks:install": "git config --local core.hooksPath .githooks"
43
45
  },
44
46
  "keywords": [
45
47
  "mcp",