@pensar/apex 1.8.0 → 1.8.2-canary.fb75c486

package/build/cli-0fy9j5dw.js

@@ -1,61 +0,0 @@
-import {
-  exports_external1 as exports_external,
-  init_zod
-} from "./cli-0ghkg3w6.js";
-
-// src/core/agents/specialized/whiteboxAttackSurface/types.ts
-init_zod();
-var RiskScoreBreakdownSchema = exports_external.object({
-  exposure: exports_external.number().min(0).max(3).describe("Exposure Level (0-3): 3=Public no auth, 2=Standard user login, 1=Privileged/admin access, 0=Private/internal-only"),
-  dataSensitivity: exports_external.number().min(0).max(3).describe("Data Sensitivity (0-3): 3=PII/PHI/financial/passwords/tokens, 2=Business operations/configs, 1=Low-value user data, 0=No meaningful data"),
-  functionCriticality: exports_external.number().min(0).max(2).describe("Function Criticality (0-2): 2=Auth flows/payments/state-changing mutations, 1=Core product functionality, 0=Non-critical content"),
-  securityIndicators: exports_external.number().min(0).max(2).describe("Security Indicators (0-2): 2=Critical vuln patterns (SQLi, command injection, hardcoded secrets), 1=Moderate concerns (missing validation, weak error handling), 0=No obvious issues")
-});
-var RiskScoreSchema = exports_external.object({
-  score: exports_external.number().min(0).max(10).describe("Total risk score (0-10)"),
-  explanation: exports_external.string().describe("Justification for the risk score"),
-  breakdown: RiskScoreBreakdownSchema
-});
-var EndpointSchema = exports_external.object({
-  method: exports_external.string().describe("HTTP method (GET, POST, PUT, DELETE, etc.) or 'PAGE' for web pages"),
-  path: exports_external.string().describe("Route path (e.g. /api/users/:id, /dashboard)"),
-  handler: exports_external.string().optional().describe("Handler function or component name, if identifiable"),
-  file: exports_external.string().describe("File where this endpoint is defined"),
-  line: exports_external.number().optional().describe("Line number in the file"),
-  authRequired: exports_external.boolean().optional().describe("Whether this endpoint appears to require authentication"),
-  description: exports_external.string().optional().describe("Brief description of what this endpoint does"),
-  pentestObjectives: exports_external.array(exports_external.string()).default([]).describe("Pentest objectives for this endpoint, derived from the threat model when available " + "(e.g. 'Test for IDOR by enumerating user IDs', 'Test for SQL injection in search parameter')"),
-  riskScore: RiskScoreSchema.optional().describe("AI-calculated risk score for prioritizing pentest efforts"),
-  threatModel: exports_external.string().optional().describe("Endpoint-specific threat model describing attack vectors, data sensitivity, and testing priorities")
-});
-var AppSchema = exports_external.object({
-  name: exports_external.string().describe("Application or service name"),
-  type: exports_external.enum([
-    "web_application",
-    "api",
-    "full_stack",
-    "domain",
-    "subdomain",
-    "database",
-    "cloud_resource",
-    "storage"
-  ]).default("web_application").describe("Type of application (web_application, api, full_stack, database, cloud_resource, storage, etc.)"),
-  framework: exports_external.string().describe("Framework in use (e.g. Express, Next.js, Django, FastAPI, Rails)"),
-  description: exports_external.string().describe("Brief description of what this app does"),
-  location: exports_external.string().describe("Path to the app root relative to the repository root"),
-  pages: exports_external.array(EndpointSchema).describe("Web pages / views defined in this app"),
-  apiEndpoints: exports_external.array(EndpointSchema).describe("API endpoints defined in this app")
-});
-var WhiteboxAttackSurfaceResultSchema = exports_external.object({
-  repoType: exports_external.string().describe("Repository structure type (e.g. 'monorepo', 'single-app', 'multi-package')"),
-  packageManager: exports_external.string().describe("Package manager detected (e.g. npm, yarn, pnpm, pip, cargo, go modules)"),
-  apps: exports_external.array(AppSchema).describe("All applications discovered in the repository"),
-  summary: exports_external.object({
-    totalApps: exports_external.number(),
-    totalPages: exports_external.number(),
-    totalApiEndpoints: exports_external.number(),
-    totalPentestObjectives: exports_external.number()
-  })
-});
-
-export { EndpointSchema, WhiteboxAttackSurfaceResultSchema };

package/build/cli-asyas1xb.js

@@ -1,110 +0,0 @@
-import {
-  get,
-  init,
-  update
-} from "./cli-nr1cjfr9.js";
-
-// src/core/api/constants.ts
-var PENSAR_API_BASE_URL = "https://api.pensar.dev";
-var PENSAR_GATEWAY_BASE_URL = "https://gateway.pensar.dev";
-var PENSAR_CONSOLE_BASE_URL = "https://console.pensar.dev";
-function getPensarApiUrl() {
-  return process.env.PENSAR_API_URL || PENSAR_API_BASE_URL;
-}
-function getPensarGatewayUrl() {
-  return process.env.PENSAR_GATEWAY_URL || PENSAR_GATEWAY_BASE_URL;
-}
-function getPensarConsoleUrl() {
-  return process.env.PENSAR_CONSOLE_URL || PENSAR_CONSOLE_BASE_URL;
-}
-
-// src/core/config/index.ts
-var config = {
-  get,
-  init,
-  update
-};
-
-// src/core/auth/token.ts
-function decodeJwtPayload(token) {
-  try {
-    const parts = token.split(".");
-    if (parts.length !== 3)
-      return null;
-    const payload = Buffer.from(parts[1], "base64url").toString("utf-8");
-    return JSON.parse(payload);
-  } catch {
-    return null;
-  }
-}
-function isTokenExpired(token, bufferSeconds = 60) {
-  const payload = decodeJwtPayload(token);
-  if (!payload || typeof payload.exp !== "number")
-    return true;
-  const nowSeconds = Math.floor(Date.now() / 1000);
-  return payload.exp - nowSeconds < bufferSeconds;
-}
-var cachedClientId = null;
-async function fetchWorkOSClientId() {
-  if (cachedClientId)
-    return cachedClientId;
-  try {
-    const apiUrl = getPensarApiUrl();
-    const response = await fetch(`${apiUrl}/api/cli/config`);
-    if (!response.ok)
-      return null;
-    const data = await response.json();
-    cachedClientId = data.workosClientId;
-    return cachedClientId;
-  } catch {
-    return null;
-  }
-}
-async function refreshAccessToken(clientId, refreshToken) {
-  try {
-    const response = await fetch("https://api.workos.com/user_management/authenticate", {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({
-        client_id: clientId,
-        grant_type: "refresh_token",
-        refresh_token: refreshToken
-      })
-    });
-    if (!response.ok) {
-      console.error(`[pensar] Token refresh failed: ${response.status} ${response.statusText}`);
-      return null;
-    }
-    const data = await response.json();
-    await config.update({
-      accessToken: data.access_token,
-      refreshToken: data.refresh_token
-    });
-    return data.access_token;
-  } catch (err) {
-    console.error("[pensar] Token refresh error:", err);
-    return null;
-  }
-}
-async function ensureValidToken(cfg) {
-  if (cfg.accessToken) {
-    if (!isTokenExpired(cfg.accessToken)) {
-      return { token: cfg.accessToken, type: "workos" };
-    }
-    if (cfg.refreshToken) {
-      const clientId = await fetchWorkOSClientId();
-      if (clientId) {
-        const newToken = await refreshAccessToken(clientId, cfg.refreshToken);
-        if (newToken) {
-          return { token: newToken, type: "workos" };
-        }
-      }
-    }
-  }
-  if (cfg.pensarAPIKey) {
-    return { token: cfg.pensarAPIKey, type: "legacy" };
-  }
-  return null;
-}
-
-export { getPensarApiUrl, getPensarGatewayUrl, getPensarConsoleUrl, config, isTokenExpired, fetchWorkOSClientId, refreshAccessToken, ensureValidToken };

package/build/cli-dj1dgw2n.js

@@ -1,190 +0,0 @@
-// src/core/installation/index.ts
-import { spawnSync } from "child_process";
-// package.json
-var package_default = {
-  name: "@pensar/apex",
-  version: "1.8.0",
-  description: "AI-powered penetration testing CLI tool with terminal UI",
-  module: "src/tui/index.tsx",
-  main: "build/cli.js",
-  type: "module",
-  repository: {
-    type: "git",
-    url: "https://github.com/pensarai/apex.git"
-  },
-  bin: {
-    pensar: "./bin/pensar.js"
-  },
-  files: [
-    "build",
-    "bin",
-    "assets",
-    "pensar.svg",
-    "LICENSE"
-  ],
-  scripts: {
-    build: "bun build src/cli.ts --outdir build --target node --format esm --splitting --external @opentui/core --external @opentui/react --external @opentui/react/* --external react --external react/jsx-runtime --external react/jsx-dev-runtime --external react-reconciler --external weave",
-    "generate:ascii": "bun run scripts/generate-ascii-art.ts",
-    "generate:models": "bun run scripts/generate-models.ts",
-    "build:binary": "bun run generate:ascii && bun build src/cli.ts --compile --outfile pensar",
-    "build:binary:macos-arm64": "bun build src/cli.ts --compile --target=bun-darwin-arm64 --outfile dist/pensar-darwin-arm64",
-    "build:binary:macos-x64": "bun build src/cli.ts --compile --target=bun-darwin-x64 --outfile dist/pensar-darwin-x64",
-    "build:binary:linux-x64": "bun build src/cli.ts --compile --target=bun-linux-x64 --outfile dist/pensar-linux-x64",
-    "build:binary:linux-arm64": "bun build src/cli.ts --compile --target=bun-linux-arm64 --outfile dist/pensar-linux-arm64",
-    "build:binaries": "bun run generate:ascii && mkdir -p dist && bun run build:binary:macos-arm64 && bun run build:binary:macos-x64 && bun run build:binary:linux-x64 && bun run build:binary:linux-arm64",
-    dev: "bun run scripts/watch.ts",
-    "dev:debug": "SHOW_CONSOLE=true bun run scripts/watch.ts",
-    start: "bun run src/tui/index.tsx",
-    pensar: "node bin/pensar.js",
-    tsc: "tsc --noEmit",
-    "daytona-benchmark": "bun run scripts/daytona-benchmark.ts",
-    "local-benchmark": "bun run scripts/local-benchmark.ts",
-    test: "vitest run",
-    "test:watch": "vitest",
-    lint: "eslint src/",
-    format: "prettier --write .",
-    "format:check": "prettier --check .",
-    prepublishOnly: "npm run build"
-  },
-  keywords: [
-    "penetration-testing",
-    "security",
-    "pentesting",
-    "ai",
-    "cli",
-    "terminal",
-    "tui"
-  ],
-  author: "Pensar",
-  license: "MIT",
-  engines: {
-    node: ">=18.0.0",
-    bun: ">=1.0.0"
-  },
-  optionalDependencies: {
-    weave: "^0.12.1"
-  },
-  devDependencies: {
-    "@eslint/js": "^10.0.1",
-    "@types/bun": "^1.3.0",
-    "@types/mailparser": "^3.4.6",
-    "@types/mime-types": "^3.0.1",
-    "@types/nodemailer": "^8.0.0",
-    "@types/react": "^19.2.6",
-    "@typescript-eslint/eslint-plugin": "^8.55.0",
-    "@typescript-eslint/parser": "^8.55.0",
-    dotenv: "^17.2.3",
-    eslint: "^10.0.0",
-    "eslint-config-prettier": "^10.1.8",
-    "eslint-plugin-unused-imports": "^4.4.1",
-    prettier: "^3.8.1",
-    "typescript-eslint": "^8.55.0",
-    vitest: "^2.1.8"
-  },
-  peerDependencies: {
-    typescript: "^5.9.3"
-  },
-  dependencies: {
-    "@ai-sdk/amazon-bedrock": "^4.0.69",
-    "@ai-sdk/anthropic": "^3.0.50",
-    "@ai-sdk/google": "^3.0.37",
-    "@ai-sdk/openai": "3.0.46",
-    "@ai-sdk/openai-compatible": "^2.0.35",
-    "@daytonaio/sdk": "^0.112.1",
-    "@googleapis/gmail": "^16.1.1",
-    "@microsoft/microsoft-graph-client": "^3.0.7",
-    "@modelcontextprotocol/sdk": "^1.0.0",
-    "@openrouter/ai-sdk-provider": "^2.2.3",
-    "@opentui/core": "^0.1.80",
-    "@opentui/react": "^0.1.80",
-    "@playwright/mcp": "^0.0.54",
-    ai: "^6.0.105",
-    glob: "^13.0.0",
-    "google-auth-library": "^10.6.1",
-    "highlight.js": "^11.11.1",
-    ignore: "^7.0.5",
-    imapflow: "^1.2.10",
-    jsonwebtoken: "^9.0.3",
-    mailparser: "^3.9.3",
-    marked: "^16.4.0",
-    "mime-types": "^3.0.2",
-    nanoid: "^5.1.6",
-    nodemailer: "^8.0.7",
-    "p-limit": "^7.2.0",
-    react: "^19.2.0",
-    sharp: "^0.34.4",
-    tldts: "^7.0.28",
-    yaml: "^2.8.2",
-    zod: "^3.25.76"
-  },
-  packageManager: "yarn@1.22.22+sha512.a6b2f7906b721bba3d67d4aff083df04dad64c399707841b7acf00f6b133b7ac24255f2652fa22ae3534329dc6180534e98d17432037ff6fd140556e2bb3137e"
-};
-
-// src/core/installation/index.ts
-function getCurrentVersion() {
-  return package_default.version;
-}
-function isNewerVersion(current, latest) {
-  const parse = (v) => v.split(".").map((n) => parseInt(n, 10) || 0);
-  const c = parse(current);
-  const l = parse(latest);
-  for (let i = 0;i < Math.max(c.length, l.length); i++) {
-    const cv = c[i] ?? 0;
-    const lv = l[i] ?? 0;
-    if (lv > cv)
-      return true;
-    if (lv < cv)
-      return false;
-  }
-  return false;
-}
-async function getLatestVersion() {
-  const res = await fetch("https://registry.npmjs.org/@pensar/apex/latest");
-  if (!res.ok)
-    throw new Error(`Failed to fetch latest version: ${res.statusText}`);
-  const data = await res.json();
-  return String(data.version);
-}
-function detectInstallMethod() {
-  const execPath = process.execPath;
-  const argv1 = process.argv[1] ?? "";
-  if (execPath.includes("homebrew") || execPath.includes("Cellar") || execPath.includes("linuxbrew") || argv1.includes("homebrew") || argv1.includes("Cellar")) {
-    return "homebrew";
-  }
-  if (argv1.includes("node_modules") || argv1.includes(".npm") || argv1.includes("npx")) {
-    return "npm";
-  }
-  const execName = execPath.split("/").pop()?.replace(/\.exe$/, "") ?? "";
-  const isInterpreter = execName === "bun" || execName === "node" || execName === "bun-debug";
-  if (!isInterpreter) {
-    return "binary";
-  }
-  const npmCheck = spawnSync("npm", ["list", "-g", "@pensar/apex", "--depth=0"], {
-    encoding: "utf-8",
-    timeout: 1e4
-  });
-  if (npmCheck.status === 0 && npmCheck.stdout?.includes("@pensar/apex")) {
-    return "npm";
-  }
-  return "binary";
-}
-async function checkForUpdate() {
-  const currentVersion = getCurrentVersion();
-  let latestVersion;
-  try {
-    latestVersion = await getLatestVersion();
-  } catch {
-    return {
-      updateAvailable: false,
-      currentVersion,
-      latestVersion: currentVersion
-    };
-  }
-  return {
-    updateAvailable: isNewerVersion(currentVersion, latestVersion),
-    currentVersion,
-    latestVersion
-  };
-}
-
-export { package_default, getCurrentVersion, detectInstallMethod, checkForUpdate };

package/build/cli-q7r2sth7.js

@@ -1,103 +0,0 @@
-import {
-  config,
-  ensureValidToken,
-  getPensarApiUrl
-} from "./cli-asyas1xb.js";
-
-// src/core/api/issues.ts
-async function getAuthHeaders() {
-  const cfg = await config.get();
-  const validToken = await ensureValidToken({
-    accessToken: cfg.accessToken,
-    refreshToken: cfg.refreshToken,
-    pensarAPIKey: cfg.pensarAPIKey
-  });
-  if (!validToken) {
-    throw new Error("Not authenticated. Run `pensar login` to connect to Pensar Console.");
-  }
-  const headers = {
-    "Content-Type": "application/json",
-    Authorization: `Bearer ${validToken.token}`
-  };
-  if (cfg.workspaceId) {
-    headers["X-Workspace-Id"] = cfg.workspaceId;
-  }
-  return headers;
-}
-async function apiRequest(method, path, body) {
-  const baseUrl = getPensarApiUrl();
-  const headers = await getAuthHeaders();
-  const url = `${baseUrl}${path}`;
-  const init = { method, headers };
-  if (body !== undefined) {
-    init.body = JSON.stringify(body);
-  }
-  const response = await fetch(url, init);
-  if (!response.ok) {
-    const text = await response.text();
-    let message;
-    try {
-      const err = JSON.parse(text);
-      message = err.error ?? text;
-    } catch {
-      message = text;
-    }
-    throw new Error(`API error (${response.status}): ${message}`);
-  }
-  return await response.json();
-}
-async function listProjects() {
-  return apiRequest("GET", "/projects");
-}
-async function listScans(projectId) {
-  return apiRequest("GET", `/projects/${projectId}/pentests`);
-}
-async function getScan(scanId) {
-  return apiRequest("GET", `/pentests/${scanId}`);
-}
-async function dispatchPentest(projectId, opts) {
-  return apiRequest("POST", `/projects/${projectId}/pentests`, opts);
-}
-async function listIssues(projectId, filters) {
-  const params = new URLSearchParams;
-  if (filters?.scanId)
-    params.set("scanId", filters.scanId);
-  if (filters?.status)
-    params.set("status", filters.status);
-  if (filters?.severity)
-    params.set("severity", filters.severity);
-  if (filters?.branch)
-    params.set("branch", filters.branch);
-  const qs = params.toString();
-  const path = `/projects/${projectId}/issues${qs ? `?${qs}` : ""}`;
-  return apiRequest("GET", path);
-}
-async function getIssue(issueId) {
-  return apiRequest("GET", `/issues/${issueId}`);
-}
-async function updateIssue(issueId, data) {
-  return apiRequest("PATCH", `/issues/${issueId}`, data);
-}
-async function listFixes(issueId) {
-  return apiRequest("GET", `/issues/${issueId}/fixes`);
-}
-async function getFix(fixId) {
-  return apiRequest("GET", `/fixes/${fixId}`);
-}
-async function listAgentLogs(issueId, opts) {
-  const params = new URLSearchParams;
-  if (opts?.level)
-    params.set("level", opts.level);
-  if (opts?.role)
-    params.set("role", opts.role);
-  if (opts?.limit)
-    params.set("limit", String(opts.limit));
-  const qs = params.toString();
-  const path = `/issues/${issueId}/logs${qs ? `?${qs}` : ""}`;
-  return apiRequest("GET", path);
-}
-async function searchAgentLogs(issueId, query, opts) {
-  return apiRequest("POST", `/issues/${issueId}/logs/search`, { query, ...opts });
-}
-
-export { listProjects, listScans, getScan, dispatchPentest, listIssues, getIssue, updateIssue, listFixes, getFix, listAgentLogs, searchAgentLogs };