@pensar/apex 1.0.0 → 1.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (49) hide show
  1. package/assets/wordlists/LICENSE +21 -0
  2. package/assets/wordlists/README.md +36 -0
  3. package/assets/wordlists/common.txt +4751 -0
  4. package/assets/wordlists/large.txt +29999 -0
  5. package/assets/wordlists/tiny.txt +227 -0
  6. package/build/agent-0jmzw6zx.js +18 -0
  7. package/build/{agent-95ysppvr.js → agent-wmynfx37.js} +10 -9
  8. package/build/{auth-h84w23gx.js → auth-p2n15nfp.js} +4 -4
  9. package/build/{authentication-3m2qm7ym.js → authentication-ngxxzcvc.js} +11 -11
  10. package/build/blackboxAgent-v698p7e4.js +18 -0
  11. package/build/{blackboxPentest-kn3y84jf.js → blackboxPentest-7jvcbz3f.js} +15 -15
  12. package/build/{cli-r8cerdwk.js → cli-03z6pswp.js} +1 -1
  13. package/build/{cli-abkgxjcc.js → cli-06q6sz4x.js} +2 -2
  14. package/build/{cli-dfth2beg.js → cli-1tv4x6xh.js} +8 -8
  15. package/build/{cli-ey40xb9a.js → cli-1xdc0keq.js} +1 -1
  16. package/build/{cli-qcsv2e9h.js → cli-5xfjvm8j.js} +1 -1
  17. package/build/{cli-wqeja2k6.js → cli-6negm843.js} +1 -1
  18. package/build/{cli-x5t1x7ts.js → cli-ahmpjgg6.js} +1 -1
  19. package/build/{cli-j4qm285k.js → cli-ch1yfrj1.js} +2 -2
  20. package/build/{cli-dsybj1jp.js → cli-d5mcmzp1.js} +1 -1
  21. package/build/{cli-etrmgpa5.js → cli-gs7zy230.js} +5 -5
  22. package/build/{cli-awjwsbrz.js → cli-mazg4ajq.js} +2 -2
  23. package/build/{cli-mxj8tz9b.js → cli-nwcvgx5m.js} +51 -14
  24. package/build/{cli-r4jzb7aj.js → cli-st6vsbzv.js} +2 -1
  25. package/build/{cli-qvq41y3z.js → cli-t1nkahx2.js} +1 -1
  26. package/build/cli-tp1tqn3k.js +184 -0
  27. package/build/{cli-yz3dzpxd.js → cli-tyrzasca.js} +351 -104
  28. package/build/{cli-sgzbqavm.js → cli-yvnb3k0x.js} +1 -1
  29. package/build/cli.js +28 -27
  30. package/build/{doctor-b7612pzw.js → doctor-8tva8j99.js} +1 -1
  31. package/build/{fixes-5f9xv4yx.js → fixes-p4e3bjcg.js} +4 -4
  32. package/build/{index-b7e18f8m.js → index-esgrht7q.js} +7 -7
  33. package/build/{index-d86fgcjm.js → index-gpvx8y17.js} +4 -4
  34. package/build/{index-h5r11f3q.js → index-m6gw4113.js} +2 -2
  35. package/build/{index-0qfckx3a.js → index-ywrq8mhc.js} +1555 -1449
  36. package/build/{issues-dy4rrtr2.js → issues-8had86x1.js} +4 -4
  37. package/build/{logs-d3sjx7vk.js → logs-3fpd8xq8.js} +4 -4
  38. package/build/pentest-4ty38pt8.js +28 -0
  39. package/build/{pentests-vwekf0zm.js → pentests-tqv6zrqy.js} +4 -4
  40. package/build/{projects-se9jgfb0.js → projects-eh2g7061.js} +4 -4
  41. package/build/{targetedPentest-mhkts702.js → targetedPentest-60td56me.js} +10 -9
  42. package/build/{threatModel-gdvgv7pc.js → threatModel-v46xygtn.js} +10 -9
  43. package/build/{uninstall-11a98j87.js → uninstall-vz6jzt86.js} +1 -1
  44. package/build/{utils-zvr7bcyw.js → utils-8yqe12jr.js} +1 -1
  45. package/package.json +2 -1
  46. package/build/agent-e3r90w2x.js +0 -17
  47. package/build/blackboxAgent-4t68wah3.js +0 -18
  48. package/build/cli-6gtnyaqf.js +0 -109
  49. package/build/pentest-6ctf263k.js +0 -28
@@ -0,0 +1,227 @@
1
+ .DS_Store
2
+ .bash_history
3
+ .bashrc
4
+ .dockerignore
5
+ .env
6
+ .env.backup
7
+ .env.bak
8
+ .env.dev
9
+ .env.development
10
+ .env.local
11
+ .env.old
12
+ .env.prod
13
+ .env.production
14
+ .env.staging
15
+ .env.test
16
+ .git
17
+ .git/HEAD
18
+ .git/config
19
+ .gitignore
20
+ .htaccess
21
+ .htpasswd
22
+ .npmrc
23
+ .ssh
24
+ .svn
25
+ .travis.yml
26
+ .well-known
27
+ .well-known/security.txt
28
+ .yarnrc
29
+ Dockerfile
30
+ Makefile
31
+ README
32
+ README.md
33
+ WEB-INF
34
+ WEB-INF/web.xml
35
+ about
36
+ account
37
+ accounts
38
+ actuator
39
+ actuator/env
40
+ actuator/health
41
+ actuator/info
42
+ admin
43
+ admin.php
44
+ admin/login
45
+ admin/login.php
46
+ ajax
47
+ analytics
48
+ api
49
+ api-docs
50
+ api/admin
51
+ api/auth
52
+ api/health
53
+ api/login
54
+ api/me
55
+ api/status
56
+ api/swagger
57
+ api/swagger.json
58
+ api/users
59
+ api/v1
60
+ api/v2
61
+ api/v3
62
+ app
63
+ application.properties
64
+ apps
65
+ assets
66
+ auth
67
+ auth/login
68
+ auth/logout
69
+ auth/token
70
+ backend
71
+ backup
72
+ backups
73
+ build
74
+ cache
75
+ callback
76
+ cgi-bin
77
+ changelog
78
+ checkout
79
+ cms
80
+ composer.json
81
+ composer.lock
82
+ config
83
+ config.json
84
+ config.php
85
+ config.yaml
86
+ config.yml
87
+ console
88
+ contact
89
+ control
90
+ cpanel
91
+ crossdomain.xml
92
+ css
93
+ dashboard
94
+ data
95
+ database
96
+ db
97
+ debug
98
+ dev
99
+ docker-compose.yml
100
+ docs
101
+ download
102
+ downloads
103
+ env
104
+ error
105
+ errors
106
+ explorer
107
+ files
108
+ forgot-password
109
+ graphiql
110
+ graphql
111
+ health
112
+ help
113
+ home
114
+ images
115
+ img
116
+ includes
117
+ index
118
+ index.html
119
+ index.php
120
+ internal
121
+ invoices
122
+ js
123
+ json
124
+ laravel.log
125
+ ldap
126
+ licenses
127
+ log
128
+ login
129
+ login.aspx
130
+ login.html
131
+ login.jsp
132
+ login.php
133
+ logout
134
+ manage
135
+ management
136
+ me
137
+ metrics
138
+ node_modules
139
+ oauth
140
+ oauth/authorize
141
+ oauth/token
142
+ old
143
+ openapi
144
+ openapi.json
145
+ openapi.yaml
146
+ orders
147
+ package-lock.json
148
+ package.json
149
+ panel
150
+ password
151
+ password-reset
152
+ phpinfo.php
153
+ phpmyadmin
154
+ pma
155
+ portal
156
+ private
157
+ profile
158
+ public
159
+ readme
160
+ readme.md
161
+ redoc
162
+ register
163
+ report
164
+ reports
165
+ reset-password
166
+ robots.txt
167
+ sandbox
168
+ search
169
+ secret
170
+ secrets
171
+ secure
172
+ security
173
+ server-status
174
+ service-worker.js
175
+ session
176
+ sessions
177
+ settings
178
+ setup
179
+ shop
180
+ sign-in
181
+ sign-up
182
+ signin
183
+ signout
184
+ signup
185
+ site-map
186
+ sitemap
187
+ sitemap.xml
188
+ sql
189
+ src
190
+ ssh
191
+ staging
192
+ static
193
+ status
194
+ storage
195
+ swagger
196
+ swagger-ui
197
+ swagger-ui.html
198
+ swagger.json
199
+ swagger.yaml
200
+ sysadmin
201
+ system
202
+ test
203
+ testing
204
+ tests
205
+ tmp
206
+ token
207
+ tokens
208
+ tools
209
+ trace
210
+ upload
211
+ uploads
212
+ user
213
+ users
214
+ v1
215
+ v2
216
+ v3
217
+ vendor
218
+ web.config
219
+ webhook
220
+ webhooks
221
+ wp-admin
222
+ wp-config.php
223
+ wp-content
224
+ wp-includes
225
+ wp-json
226
+ wp-login.php
227
+ yarn.lock
@@ -0,0 +1,18 @@
1
+ import {
2
+ CodeAgent
3
+ } from "./cli-mazg4ajq.js";
4
+ import"./cli-tyrzasca.js";
5
+ import"./cli-tp1tqn3k.js";
6
+ import"./cli-6negm843.js";
7
+ import"./cli-3y0dgy56.js";
8
+ import"./cli-1tv4x6xh.js";
9
+ import"./cli-03z6pswp.js";
10
+ import"./cli-t1nkahx2.js";
11
+ import"./cli-5xfjvm8j.js";
12
+ import"./cli-yvnb3k0x.js";
13
+ import"./cli-st6vsbzv.js";
14
+ import"./cli-gpnb45ck.js";
15
+ import"./cli-8rxa073f.js";
16
+ export {
17
+ CodeAgent
18
+ };
@@ -1,20 +1,21 @@
1
1
  import {
2
2
  WhiteboxAttackSurfaceResultSchema
3
- } from "./cli-ey40xb9a.js";
3
+ } from "./cli-1xdc0keq.js";
4
4
  import {
5
5
  OffensiveSecurityAgent
6
- } from "./cli-yz3dzpxd.js";
7
- import"./cli-wqeja2k6.js";
6
+ } from "./cli-tyrzasca.js";
7
+ import"./cli-tp1tqn3k.js";
8
+ import"./cli-6negm843.js";
8
9
  import"./cli-3y0dgy56.js";
9
10
  import {
10
11
  hasToolCall,
11
12
  tool
12
- } from "./cli-dfth2beg.js";
13
- import"./cli-r8cerdwk.js";
14
- import"./cli-qvq41y3z.js";
15
- import"./cli-qcsv2e9h.js";
16
- import"./cli-sgzbqavm.js";
17
- import"./cli-r4jzb7aj.js";
13
+ } from "./cli-1tv4x6xh.js";
14
+ import"./cli-03z6pswp.js";
15
+ import"./cli-t1nkahx2.js";
16
+ import"./cli-5xfjvm8j.js";
17
+ import"./cli-yvnb3k0x.js";
18
+ import"./cli-st6vsbzv.js";
18
19
  import"./cli-gpnb45ck.js";
19
20
  import"./cli-8rxa073f.js";
20
21
 
@@ -8,14 +8,14 @@ import {
8
8
  pollWorkOSToken,
9
9
  selectWorkspace,
10
10
  startDeviceFlow
11
- } from "./cli-qvq41y3z.js";
11
+ } from "./cli-t1nkahx2.js";
12
12
  import {
13
13
  config,
14
14
  getPensarApiUrl,
15
15
  getPensarConsoleUrl
16
- } from "./cli-qcsv2e9h.js";
17
- import"./cli-sgzbqavm.js";
18
- import"./cli-r4jzb7aj.js";
16
+ } from "./cli-5xfjvm8j.js";
17
+ import"./cli-yvnb3k0x.js";
18
+ import"./cli-st6vsbzv.js";
19
19
  import {
20
20
  __require
21
21
  } from "./cli-8rxa073f.js";
@@ -1,19 +1,19 @@
1
- import {
2
- detectOSAndEnhancePrompt
3
- } from "./cli-6gtnyaqf.js";
4
1
  import {
5
2
  OffensiveSecurityAgent
6
- } from "./cli-yz3dzpxd.js";
7
- import"./cli-wqeja2k6.js";
3
+ } from "./cli-tyrzasca.js";
4
+ import {
5
+ detectOSAndEnhancePrompt
6
+ } from "./cli-tp1tqn3k.js";
7
+ import"./cli-6negm843.js";
8
8
  import"./cli-3y0dgy56.js";
9
9
  import {
10
10
  hasToolCall
11
- } from "./cli-dfth2beg.js";
12
- import"./cli-r8cerdwk.js";
13
- import"./cli-qvq41y3z.js";
14
- import"./cli-qcsv2e9h.js";
15
- import"./cli-sgzbqavm.js";
16
- import"./cli-r4jzb7aj.js";
11
+ } from "./cli-1tv4x6xh.js";
12
+ import"./cli-03z6pswp.js";
13
+ import"./cli-t1nkahx2.js";
14
+ import"./cli-5xfjvm8j.js";
15
+ import"./cli-yvnb3k0x.js";
16
+ import"./cli-st6vsbzv.js";
17
17
  import"./cli-gpnb45ck.js";
18
18
  import"./cli-8rxa073f.js";
19
19
 
@@ -0,0 +1,18 @@
1
+ import {
2
+ BlackboxAttackSurfaceAgent
3
+ } from "./cli-gs7zy230.js";
4
+ import"./cli-tyrzasca.js";
5
+ import"./cli-tp1tqn3k.js";
6
+ import"./cli-6negm843.js";
7
+ import"./cli-3y0dgy56.js";
8
+ import"./cli-1tv4x6xh.js";
9
+ import"./cli-03z6pswp.js";
10
+ import"./cli-t1nkahx2.js";
11
+ import"./cli-5xfjvm8j.js";
12
+ import"./cli-yvnb3k0x.js";
13
+ import"./cli-st6vsbzv.js";
14
+ import"./cli-gpnb45ck.js";
15
+ import"./cli-8rxa073f.js";
16
+ export {
17
+ BlackboxAttackSurfaceAgent
18
+ };
@@ -1,22 +1,22 @@
1
1
  import {
2
2
  runPentestWorkflow
3
- } from "./cli-mxj8tz9b.js";
4
- import"./cli-abkgxjcc.js";
5
- import"./cli-j4qm285k.js";
6
- import"./cli-etrmgpa5.js";
3
+ } from "./cli-nwcvgx5m.js";
4
+ import"./cli-06q6sz4x.js";
5
+ import"./cli-ch1yfrj1.js";
6
+ import"./cli-gs7zy230.js";
7
7
  import"./cli-fw5r7pfj.js";
8
- import"./cli-awjwsbrz.js";
9
- import"./cli-6gtnyaqf.js";
10
- import"./cli-ey40xb9a.js";
11
- import"./cli-yz3dzpxd.js";
12
- import"./cli-wqeja2k6.js";
8
+ import"./cli-mazg4ajq.js";
9
+ import"./cli-1xdc0keq.js";
10
+ import"./cli-tyrzasca.js";
11
+ import"./cli-tp1tqn3k.js";
12
+ import"./cli-6negm843.js";
13
13
  import"./cli-3y0dgy56.js";
14
- import"./cli-dfth2beg.js";
15
- import"./cli-r8cerdwk.js";
16
- import"./cli-qvq41y3z.js";
17
- import"./cli-qcsv2e9h.js";
18
- import"./cli-sgzbqavm.js";
19
- import"./cli-r4jzb7aj.js";
14
+ import"./cli-1tv4x6xh.js";
15
+ import"./cli-03z6pswp.js";
16
+ import"./cli-t1nkahx2.js";
17
+ import"./cli-5xfjvm8j.js";
18
+ import"./cli-yvnb3k0x.js";
19
+ import"./cli-st6vsbzv.js";
20
20
  import"./cli-gpnb45ck.js";
21
21
  import"./cli-8rxa073f.js";
22
22
 
@@ -1338,7 +1338,7 @@ var init_pensar = __esm(() => {
1338
1338
  id: "pensar:anthropic.claude-opus-4-6-v1",
1339
1339
  name: "Claude Opus 4.6",
1340
1340
  provider: "pensar",
1341
- contextLength: 200000
1341
+ contextLength: 1e6
1342
1342
  },
1343
1343
  {
1344
1344
  id: "pensar:anthropic.claude-sonnet-4-5-20250929-v1:0",
@@ -2,11 +2,11 @@ import {
2
2
  CweEntrySchema,
3
3
  ValidatedCweEntrySchema,
4
4
  hasCanonicalName
5
- } from "./cli-yz3dzpxd.js";
5
+ } from "./cli-tyrzasca.js";
6
6
  import {
7
7
  exports_external,
8
8
  init_zod
9
- } from "./cli-dfth2beg.js";
9
+ } from "./cli-1tv4x6xh.js";
10
10
 
11
11
  // src/core/report/schemas.ts
12
12
  init_zod();
@@ -1,15 +1,15 @@
1
1
  import {
2
2
  getModelInfo,
3
3
  init_models
4
- } from "./cli-r8cerdwk.js";
4
+ } from "./cli-03z6pswp.js";
5
5
  import {
6
6
  signGatewayRequest
7
- } from "./cli-qvq41y3z.js";
7
+ } from "./cli-t1nkahx2.js";
8
8
  import {
9
9
  config,
10
10
  ensureValidToken,
11
11
  getPensarGatewayUrl
12
- } from "./cli-qcsv2e9h.js";
12
+ } from "./cli-5xfjvm8j.js";
13
13
  import {
14
14
  require_auth_errors,
15
15
  require_token_error,
@@ -55735,9 +55735,9 @@ function streamResponse(opts) {
55735
55735
  let cacheRead = meta?.cacheReadInputTokens ?? 0;
55736
55736
  let cacheCreation = meta?.cacheCreationInputTokens ?? 0;
55737
55737
  if (cacheRead === 0 && cacheCreation === 0) {
55738
- const usage = stepResult.usage;
55739
- cacheRead = usage?.inputTokens?.cacheRead ?? 0;
55740
- cacheCreation = usage?.inputTokens?.cacheWrite ?? 0;
55738
+ const { inputTokenDetails } = stepResult.usage;
55739
+ cacheRead = inputTokenDetails?.cacheReadTokens ?? 0;
55740
+ cacheCreation = inputTokenDetails?.cacheWriteTokens ?? 0;
55741
55741
  }
55742
55742
  if (cacheRead > 0 || cacheCreation > 0) {
55743
55743
  onCacheMetrics({
@@ -56598,8 +56598,8 @@ function createPensarModel(bedrockModelId, config3) {
56598
56598
  },
56599
56599
  usage: {
56600
56600
  inputTokens: {
56601
- total: inputTokens,
56602
- noCache: undefined,
56601
+ total: inputTokens + (cacheReadTokens || 0) + (cacheCreationTokens || 0),
56602
+ noCache: inputTokens,
56603
56603
  cacheRead: cacheReadTokens || undefined,
56604
56604
  cacheWrite: cacheCreationTokens || undefined
56605
56605
  },
@@ -1,7 +1,7 @@
1
1
  import {
2
2
  exports_external,
3
3
  init_zod
4
- } from "./cli-dfth2beg.js";
4
+ } from "./cli-1tv4x6xh.js";
5
5
 
6
6
  // src/core/agents/specialized/whiteboxAttackSurface/types.ts
7
7
  init_zod();
@@ -2,7 +2,7 @@ import {
2
2
  get,
3
3
  init,
4
4
  update
5
- } from "./cli-sgzbqavm.js";
5
+ } from "./cli-yvnb3k0x.js";
6
6
 
7
7
  // src/core/api/constants.ts
8
8
  var PENSAR_API_BASE_URL = "https://api.pensar.dev";
@@ -3,7 +3,7 @@ import {
3
3
  generateObjectResponse,
4
4
  init_zod,
5
5
  zod_default
6
- } from "./cli-dfth2beg.js";
6
+ } from "./cli-1tv4x6xh.js";
7
7
  import {
8
8
  __callDispose,
9
9
  __using
@@ -1,6 +1,6 @@
1
1
  import {
2
2
  OffensiveSecurityAgent
3
- } from "./cli-yz3dzpxd.js";
3
+ } from "./cli-tyrzasca.js";
4
4
  import {
5
5
  __commonJS,
6
6
  __require
@@ -1,11 +1,11 @@
1
1
  import {
2
2
  OffensiveSecurityAgent,
3
3
  readPlan
4
- } from "./cli-yz3dzpxd.js";
4
+ } from "./cli-tyrzasca.js";
5
5
  import {
6
6
  exports_external,
7
7
  init_zod
8
- } from "./cli-dfth2beg.js";
8
+ } from "./cli-1tv4x6xh.js";
9
9
 
10
10
  // src/core/agents/specialized/pentest/agent.ts
11
11
  import { existsSync, readdirSync, readFileSync } from "fs";
@@ -2,7 +2,7 @@ import {
2
2
  config,
3
3
  ensureValidToken,
4
4
  getPensarApiUrl
5
- } from "./cli-qcsv2e9h.js";
5
+ } from "./cli-5xfjvm8j.js";
6
6
 
7
7
  // src/core/api/issues.ts
8
8
  async function getAuthHeaders() {
@@ -1,13 +1,13 @@
1
- import {
2
- detectOSAndEnhancePrompt
3
- } from "./cli-6gtnyaqf.js";
4
1
  import {
5
2
  OffensiveSecurityAgent
6
- } from "./cli-yz3dzpxd.js";
3
+ } from "./cli-tyrzasca.js";
4
+ import {
5
+ detectOSAndEnhancePrompt
6
+ } from "./cli-tp1tqn3k.js";
7
7
  import {
8
8
  hasToolCall,
9
9
  stepCountIs
10
- } from "./cli-dfth2beg.js";
10
+ } from "./cli-1tv4x6xh.js";
11
11
 
12
12
  // src/core/agents/specialized/attackSurface/blackboxAgent.ts
13
13
  import { join } from "path";
@@ -1,9 +1,9 @@
1
1
  import {
2
2
  OffensiveSecurityAgent
3
- } from "./cli-yz3dzpxd.js";
3
+ } from "./cli-tyrzasca.js";
4
4
  import {
5
5
  stepCountIs
6
- } from "./cli-dfth2beg.js";
6
+ } from "./cli-1tv4x6xh.js";
7
7
 
8
8
  // src/core/agents/specialized/codeAgent/prompts.ts
9
9
  var CODE_AGENT_SYSTEM_PROMPT = `You are an expert coding agent with direct filesystem access. You will be given a specific objective — focus exclusively on completing it.