@pensar/apex 0.0.111 → 0.0.112

package/build/cli-2ckm5es2.js

@@ -0,0 +1,50 @@
+import {
+  exports_external,
+  init_zod
+} from "./cli-kqtgcdzn.js";
+
+// src/core/agents/specialized/whiteboxAttackSurface/types.ts
+init_zod();
+var RiskScoreBreakdownSchema = exports_external.object({
+  exposure: exports_external.number().min(0).max(3).describe("Exposure Level (0-3): 3=Public no auth, 2=Standard user login, 1=Privileged/admin access, 0=Private/internal-only"),
+  dataSensitivity: exports_external.number().min(0).max(3).describe("Data Sensitivity (0-3): 3=PII/PHI/financial/passwords/tokens, 2=Business operations/configs, 1=Low-value user data, 0=No meaningful data"),
+  functionCriticality: exports_external.number().min(0).max(2).describe("Function Criticality (0-2): 2=Auth flows/payments/state-changing mutations, 1=Core product functionality, 0=Non-critical content"),
+  securityIndicators: exports_external.number().min(0).max(2).describe("Security Indicators (0-2): 2=Critical vuln patterns (SQLi, command injection, hardcoded secrets), 1=Moderate concerns (missing validation, weak error handling), 0=No obvious issues")
+});
+var RiskScoreSchema = exports_external.object({
+  score: exports_external.number().min(0).max(10).describe("Total risk score (0-10)"),
+  explanation: exports_external.string().describe("Justification for the risk score"),
+  breakdown: RiskScoreBreakdownSchema
+});
+var EndpointSchema = exports_external.object({
+  method: exports_external.string().describe("HTTP method (GET, POST, PUT, DELETE, etc.) or 'PAGE' for web pages"),
+  path: exports_external.string().describe("Route path (e.g. /api/users/:id, /dashboard)"),
+  handler: exports_external.string().optional().describe("Handler function or component name, if identifiable"),
+  file: exports_external.string().describe("File where this endpoint is defined"),
+  line: exports_external.number().optional().describe("Line number in the file"),
+  authRequired: exports_external.boolean().optional().describe("Whether this endpoint appears to require authentication"),
+  description: exports_external.string().optional().describe("Brief description of what this endpoint does"),
+  pentestObjectives: exports_external.array(exports_external.string()).describe("Specific pentest objectives for this endpoint (e.g. 'Test for IDOR by enumerating user IDs', 'Test for SQL injection in search parameter')"),
+  riskScore: RiskScoreSchema.optional().describe("AI-calculated risk score for prioritizing pentest efforts")
+});
+var AppSchema = exports_external.object({
+  name: exports_external.string().describe("Application or service name"),
+  framework: exports_external.string().describe("Framework in use (e.g. Express, Next.js, Django, FastAPI, Rails)"),
+  description: exports_external.string().describe("Brief description of what this app does"),
+  location: exports_external.string().describe("Path to the app root relative to the repository root"),
+  pages: exports_external.array(EndpointSchema).describe("Web pages / views defined in this app"),
+  apiEndpoints: exports_external.array(EndpointSchema).describe("API endpoints defined in this app")
+});
+var WhiteboxAttackSurfaceResultSchema = exports_external.object({
+  repoType: exports_external.string().describe("Repository structure type (e.g. 'monorepo', 'single-app', 'multi-package')"),
+  packageManager: exports_external.string().describe("Package manager detected (e.g. npm, yarn, pnpm, pip, cargo, go modules)"),
+  apps: exports_external.array(AppSchema).describe("All applications discovered in the repository"),
+  summary: exports_external.object({
+    totalApps: exports_external.number(),
+    totalPages: exports_external.number(),
+    totalApiEndpoints: exports_external.number(),
+    totalPentestObjectives: exports_external.number()
+  })
+});
+
+export { EndpointSchema, WhiteboxAttackSurfaceResultSchema };