@pensar/apex 1.7.0 → 1.8.0-canary.0d99fc6b

package/build/agent-4r4v67zn.js

@@ -0,0 +1,21 @@
+import {
+  CodeAgent
+} from "./cli-1t4bfz5p.js";
+import"./cli-9fsre5pt.js";
+import"./cli-7pg2p4df.js";
+import"./cli-3e5y21yf.js";
+import"./cli-mswm4k81.js";
+import"./cli-8vt56350.js";
+import"./cli-3y0dgy56.js";
+import"./cli-319h88b8.js";
+import"./cli-5x18s214.js";
+import"./cli-c1dq3bjq.js";
+import"./cli-peywcat1.js";
+import"./cli-2sdqzmg5.js";
+import"./cli-gpnb45ck.js";
+import"./cli-xgnxtfvg.js";
+import"./cli-gjyeds7x.js";
+import"./cli-8rxa073f.js";
+export {
+  CodeAgent
+};

package/build/agent-7e2fje70.js

@@ -0,0 +1,23 @@
+import {
+  TargetedPentestAgent,
+  buildPentestSystemPrompt
+} from "./cli-2sv6r1yn.js";
+import"./cli-9fsre5pt.js";
+import"./cli-7pg2p4df.js";
+import"./cli-3e5y21yf.js";
+import"./cli-mswm4k81.js";
+import"./cli-8vt56350.js";
+import"./cli-3y0dgy56.js";
+import"./cli-319h88b8.js";
+import"./cli-5x18s214.js";
+import"./cli-c1dq3bjq.js";
+import"./cli-peywcat1.js";
+import"./cli-2sdqzmg5.js";
+import"./cli-gpnb45ck.js";
+import"./cli-xgnxtfvg.js";
+import"./cli-gjyeds7x.js";
+import"./cli-8rxa073f.js";
+export {
+  buildPentestSystemPrompt,
+  TargetedPentestAgent
+};

package/build/agent-w6269xc8.js

@@ -0,0 +1,202 @@
+import {
+  OffensiveSecurityAgent
+} from "./cli-3e5y21yf.js";
+import {
+  detectOSAndEnhancePrompt
+} from "./cli-mswm4k81.js";
+import"./cli-8vt56350.js";
+import"./cli-3y0dgy56.js";
+import"./cli-319h88b8.js";
+import"./cli-5x18s214.js";
+import {
+  init_dist,
+  stepCountIs
+} from "./cli-c1dq3bjq.js";
+import"./cli-peywcat1.js";
+import {
+  exports_external1 as exports_external,
+  init_zod
+} from "./cli-2sdqzmg5.js";
+import"./cli-gpnb45ck.js";
+import"./cli-xgnxtfvg.js";
+import"./cli-gjyeds7x.js";
+import"./cli-8rxa073f.js";
+
+// src/core/agents/specialized/findingJudge/agent.ts
+init_dist();
+
+// src/core/agents/specialized/findingJudge/prompts.ts
+var MAX_POC_SCRIPT_CHARS = 12000;
+var MAX_OUTPUT_CHARS = 16000;
+var MAX_EVIDENCE_CHARS = 8000;
+var MAX_DESCRIPTION_CHARS = 4000;
+function truncate(value, limit) {
+  if (value.length <= limit)
+    return value;
+  return value.substring(0, limit) + `
+... [truncated]`;
+}
+var FINDING_JUDGE_SYSTEM_PROMPT = `You are a security finding validation specialist running as an agentic verifier inside an automated penetration testing pipeline.
+
+You are the last line of defense against false positives, hallucinated findings, fabricated evidence, and overstated impact. Your job is to independently verify whether a submitted proof-of-concept and its output support the claimed finding.
+
+## Operating Rules
+
+- Use tools before accepting a finding. At minimum, rerun or inspect the PoC with execute_command, compare behavior with http_request, read saved artifacts, or research the relevant technology with web_search/get_page.
+- Stay in scope. Only interact with the target endpoint/host and artifacts from this session.
+- Do not create, edit, delete, or document findings. You only validate and call the response tool.
+- Do not run destructive payloads or broaden exploitation. Verification should be enough to confirm or refute the claim.
+- Distinguish "the PoC exited 0" from "the vulnerability is proven." A successful exit code is only supporting evidence.
+- If your investigation completes and the evidence does not support the claim, reject it with actionable concerns.
+- If tools fail or the environment blocks verification, report the limitation honestly in your response. Infrastructure failure fallback is handled by the caller, not by you.
+- Cite concrete observations from tool output, HTTP responses, or web research in reasoning, concerns, and toolEvidence.
+
+## Evaluation Criteria
+
+### Correctness
+- SQL injection: output should show inaccessible data, query errors, or behavioral differences indicating injection success.
+- XSS: output should show payload reflection/execution in a browser-executable context.
+- Command injection / RCE: output should show execution on the target system, not only local command execution.
+- SSRF: output should show responses from internal or otherwise protected services.
+- Path traversal: output should show file contents outside the intended path.
+- IDOR: output should show access to another user's/account's resource while authentication exists.
+- Authentication bypass: output should show protected access without valid credentials.
+- Email/HTML injection: ideally verify delivery and rendering. If only server acceptance is shown, confidence must stay below 0.7 and limitations must state rendering was not independently verified.
+- Missing rate limiting / anti-automation: fewer than 50 requests is insufficient. Evidence must state exact request count, timing/distribution, and observed statuses.
+
+### Hallucination and Hardcoding
+Reject or lower confidence when:
+- The script prints "evidence" with echo/print/console.log that was never received from the target.
+- The script constructs fake HTTP responses or error messages.
+- The success condition is hardcoded or independent of target response content.
+- The script always exits 0.
+- Evidence text does not match live responses or the claimed endpoint.
+
+### Severity and Classification
+- Accept as vulnerability when real target interaction demonstrates unintended, exploitable behavior.
+- Accept as informational when the observation is real but low-risk, common default behavior, or plausibly intentional.
+- Accept as expected-behavior when the behavior is clearly by design.
+- Reject when the PoC fabricates evidence, does not demonstrate the claim, or the demonstrated impact fundamentally mismatches the finding.
+
+## Response Requirements
+
+Call the response tool exactly once. Include:
+- valid: true only when the finding should be persisted.
+- findingType: vulnerability, informational, or expected-behavior.
+- confidence: calibrated 0.0 to 1.0. Below 0.7 requires concerns.
+- reasoning: concise explanation grounded in concrete observations.
+- concerns: actionable concerns; empty only for valid high-confidence results.
+- verificationSteps: actions you performed.
+- toolEvidence: concrete observations from provided artifacts or tool outputs.
+- reproducedPoc: whether you reran or independently reproduced the PoC.
+- webResearchUsed: whether web research materially informed the judgment.
+- limitations: remaining gaps.`;
+function buildFindingJudgePrompt(input) {
+  const { pocScript, pocType, pocOutput, claim } = input;
+  return `# Finding Validation Request
+
+## Target
+
+**Target:** ${input.target || "Unknown"}
+**Claimed Endpoint:** ${claim.endpoint}
+**POC Path:** ${input.pocPath || "Not provided"}
+
+## Claimed Vulnerability
+
+**Title:** ${claim.title}
+**Vulnerability Class:** ${claim.vulnerabilityClass || "Unknown"}
+
+### Description
+${truncate(claim.description, MAX_DESCRIPTION_CHARS)}
+
+### Claimed Impact
+${truncate(claim.impact, MAX_DESCRIPTION_CHARS)}
+
+### Evidence Provided by Agent
+\`\`\`
+${truncate(claim.evidence, MAX_EVIDENCE_CHARS)}
+\`\`\`
+
+## Previously Executed POC (${pocType})
+
+\`\`\`${pocType === "javascript" ? "js" : pocType === "python" ? "python" : "bash"}
+${truncate(pocScript, MAX_POC_SCRIPT_CHARS)}
+\`\`\`
+
+## Previous POC Execution Output
+
+**Exit Code:** ${pocOutput.exitCode}
+
+### stdout
+\`\`\`
+${truncate(pocOutput.stdout || "(empty)", MAX_OUTPUT_CHARS)}
+\`\`\`
+
+### stderr
+\`\`\`
+${truncate(pocOutput.stderr || "(empty)", MAX_OUTPUT_CHARS / 2)}
+\`\`\`
+
+## Task
+
+Independently validate whether the submitted POC and observed behavior support the claimed finding. Use the available minimal tools to rerun or inspect the POC, compare live target behavior, read saved artifacts, or research public documentation/CVEs as needed.
+
+Do not document or mutate anything. When done, call response with your structured judgment.`;
+}
+
+// src/core/agents/specialized/findingJudge/types.ts
+init_zod();
+var FINDING_TYPES = [
+  "vulnerability",
+  "informational",
+  "expected-behavior"
+];
+var FindingJudgeOutputSchema = exports_external.object({
+  valid: exports_external.boolean().describe("Whether the POC legitimately demonstrates the claimed vulnerability"),
+  findingType: exports_external.enum(FINDING_TYPES).describe("Classification: 'vulnerability' for genuine security issues, 'informational' for low-risk observations worth noting, 'expected-behavior' for findings that describe intentional design decisions"),
+  confidence: exports_external.number().min(0).max(1).describe("Confidence in the judgment, a decimal between 0.0 (no confidence) and 1.0 (certain)"),
+  reasoning: exports_external.string().describe("Brief explanation of the key tool observations and analysis that led to this judgment"),
+  concerns: exports_external.array(exports_external.string()).describe("Specific concerns identified. Empty array only when the finding is valid and high-confidence."),
+  verificationSteps: exports_external.array(exports_external.string()).describe("Concrete verification actions performed before deciding."),
+  toolEvidence: exports_external.array(exports_external.string()).describe("Specific observations from tool output or provided artifacts."),
+  reproducedPoc: exports_external.boolean().describe("Whether the judge reran or independently reproduced the POC."),
+  webResearchUsed: exports_external.boolean().describe("Whether web_search/get_page materially informed the judgment."),
+  limitations: exports_external.array(exports_external.string()).describe("Remaining verification gaps or environmental limitations.")
+});
+
+// src/core/agents/specialized/findingJudge/agent.ts
+var FINDING_JUDGE_ACTIVE_TOOLS = [
+  "execute_command",
+  "http_request",
+  "read_file",
+  "list_files",
+  "grep",
+  "web_search",
+  "get_page",
+  "response"
+];
+
+class FindingJudgeAgent extends OffensiveSecurityAgent {
+  constructor(opts) {
+    const target = opts.finding.target ?? opts.target ?? opts.session.targets[0];
+    super({
+      system: detectOSAndEnhancePrompt(FINDING_JUDGE_SYSTEM_PROMPT),
+      prompt: buildFindingJudgePrompt({ ...opts.finding, target }),
+      model: opts.model,
+      session: opts.session,
+      target,
+      authConfig: opts.authConfig,
+      abortSignal: opts.abortSignal,
+      eventBus: opts.eventBus,
+      sandbox: opts.sandbox,
+      enableThinking: opts.enableThinking,
+      subagentId: "finding-judge",
+      activeTools: [...FINDING_JUDGE_ACTIVE_TOOLS],
+      responseSchema: FindingJudgeOutputSchema,
+      stopWhen: stepCountIs(60)
+    });
+  }
+}
+export {
+  FindingJudgeAgent
+};