@pensar/apex 2.0.0-canary.241920ad → 2.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +0 -20
- package/build/agent-84enr6xn.js +22 -0
- package/build/{agent-7866ka7b.js → agent-x1tnsg7n.js} +10 -7
- package/build/{agent-aj7jpehp.js → agent-z8043nrm.js} +12 -9
- package/build/{apps-hse35c2d.js → apps-gdze0s68.js} +18 -15
- package/build/{auth-15rkvgam.js → auth-24ca1qwx.js} +19 -16
- package/build/authentication-0k43jay4.js +22 -0
- package/build/blackboxAgent-76tnwwg7.js +22 -0
- package/build/{blackboxPentest-vmtnnp5d.js → blackboxPentest-xwc031xm.js} +16 -13
- package/build/{cli-23xtyah8.js → cli-0v9x0eby.js} +1 -1
- package/build/cli-1yavz2pb.js +17 -0
- package/build/{cli-6gge86w5.js → cli-31cara07.js} +6 -8
- package/build/cli-3knnkdps.js +666 -0
- package/build/{cli-cbw2rmv7.js → cli-5fr9k6m4.js} +35 -58
- package/build/{cli-78s9w64j.js → cli-948dk60p.js} +1 -1
- package/build/{cli-k1vsv3qh.js → cli-a20jcpmp.js} +1 -1
- package/build/{cli-0svsmc2c.js → cli-cb5va0cs.js} +1 -10
- package/build/{cli-rtbry75t.js → cli-h6nw89zf.js} +1 -1
- package/build/{cli-5h1kv0v4.js → cli-h825qzmd.js} +53 -1492
- package/build/{cli-gtepvg8s.js → cli-k8mvghe1.js} +921 -444
- package/build/{cli-4dpc999m.js → cli-mswm4k81.js} +1 -11
- package/build/{cli-zyk3xsth.js → cli-ntd42071.js} +1 -1
- package/build/{cli-mb837pv4.js → cli-pkdjamer.js} +5 -15
- package/build/cli-s1nckt4k.js +20 -0
- package/build/{cli-4ez6yssj.js → cli-sw5swz40.js} +3 -3
- package/build/{cli-ft17f9nh.js → cli-wdmqkshz.js} +2 -2
- package/build/{cli-demg7sj2.js → cli-zpvmaxem.js} +2 -2
- package/build/{cli-r0s5br0a.js → cli-zvq4gy61.js} +6 -13
- package/build/cli.js +45 -105
- package/build/{config-bb6q79q0.js → config-cmq1cxz3.js} +3 -3
- package/build/{doctor-tkz0a0g4.js → doctor-2bkpddws.js} +1 -8
- package/build/{fixes-krvbkbey.js → fixes-a4qscvkx.js} +18 -15
- package/build/{index-pamhzcx3.js → index-0fnbx38r.js} +14 -20
- package/build/{index-ah3cm7hf.js → index-2a1x5nnv.js} +3 -3
- package/build/{index-v4sz6cee.js → index-48pjf9d2.js} +124 -76
- package/build/{index-tknvj68q.js → index-54ep0ery.js} +12 -9
- package/build/{index-wsp4kqtm.js → index-aymt8k9w.js} +2 -2
- package/build/{index-a9ea9c1q.js → index-hfhkjj2g.js} +11 -8
- package/build/{index-4gk224ac.js → index-s17r2akv.js} +4 -4
- package/build/{issues-m2me70rs.js → issues-5pnrspt7.js} +18 -15
- package/build/{logs-rxf1a0be.js → logs-1mfm901x.js} +18 -15
- package/build/{offesecAgent-hmxcpch7.js → offesecAgent-mrbyc93d.js} +11 -8
- package/build/pentest-wy4eeagc.js +31 -0
- package/build/{pentests-201vfsn6.js → pentests-htmtq66d.js} +18 -15
- package/build/{targetedPentest-85b1dndy.js → targetedPentest-cpbd87rc.js} +12 -9
- package/build/threatModel-9n56z6a6.js +29 -0
- package/build/{uninstall-qa8jvrj1.js → uninstall-6y9dkgyt.js} +1 -1
- package/build/{upload-p58nxxvf.js → upload-7wtbr768.js} +1 -8
- package/build/{utils-hsde107p.js → utils-trqnyj77.js} +8 -6
- package/package.json +1 -1
- package/build/agent-mjyx1amj.js +0 -19
- package/build/authentication-b8p1afqq.js +0 -19
- package/build/blackboxAgent-z1h2cgyg.js +0 -19
- package/build/pentest-r6hfzf8n.js +0 -28
- package/build/threatModel-hbpz15y7.js +0 -26
package/README.md
CHANGED
|
@@ -84,26 +84,6 @@ pensar targeted-pentest --target https://example.com --objective "Test authentic
|
|
|
84
84
|
| `--threat-model <text\|@file>` | pentest | Threat model to guide testing |
|
|
85
85
|
| `--objective <text>` | targeted-pentest | Testing objective (repeatable) |
|
|
86
86
|
|
|
87
|
-
### Logging
|
|
88
|
-
|
|
89
|
-
Apex routes diagnostic/operational logging through a centralized structured logger
|
|
90
|
-
(`src/core/logger`). It writes one-line JSON to **stderr** when output is not a TTY — keeping
|
|
91
|
-
it separate from the program's stdout and easy to ship to a log pipeline (e.g. CloudWatch) —
|
|
92
|
-
and pretty, colorized output in an interactive terminal. User-facing CLI/TUI output stays on
|
|
93
|
-
stdout.
|
|
94
|
-
|
|
95
|
-
Set the level (most → least verbose: `debug` < `info` < `warn` < `error`, default `info`):
|
|
96
|
-
|
|
97
|
-
```bash
|
|
98
|
-
pensar pentest --target https://example.com --log-level debug # or --verbose / --quiet
|
|
99
|
-
PENSAR_LOG_LEVEL=debug pensar ... # via environment
|
|
100
|
-
PENSAR_DEBUG=1 pensar ... # back-compat alias for debug
|
|
101
|
-
```
|
|
102
|
-
|
|
103
|
-
Resolution order: CLI flag → `PENSAR_LOG_LEVEL` → `PENSAR_DEBUG` → default `info`.
|
|
104
|
-
`PENSAR_LOG_FORMAT=json|pretty` forces the output format. When Apex runs as a managed agent,
|
|
105
|
-
`PENSAR_LOG_LEVEL` is supplied by the host environment.
|
|
106
|
-
|
|
107
87
|
### W&B Weave Tracing
|
|
108
88
|
|
|
109
89
|
Stream step-level agent traces to Weights & Biases Weave for analysis and fine-tuning:
|
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
import {
|
|
2
|
+
CodeAgent
|
|
3
|
+
} from "./cli-zpvmaxem.js";
|
|
4
|
+
import"./cli-9fsre5pt.js";
|
|
5
|
+
import"./cli-ntd42071.js";
|
|
6
|
+
import"./cli-k8mvghe1.js";
|
|
7
|
+
import"./cli-mswm4k81.js";
|
|
8
|
+
import"./cli-3knnkdps.js";
|
|
9
|
+
import"./cli-c8131c4q.js";
|
|
10
|
+
import"./cli-s1nckt4k.js";
|
|
11
|
+
import"./cli-1yavz2pb.js";
|
|
12
|
+
import"./cli-h825qzmd.js";
|
|
13
|
+
import"./cli-948dk60p.js";
|
|
14
|
+
import"./cli-e6rgwtpb.js";
|
|
15
|
+
import"./cli-h6nw89zf.js";
|
|
16
|
+
import"./cli-gpnb45ck.js";
|
|
17
|
+
import"./cli-0v9x0eby.js";
|
|
18
|
+
import"./cli-a20jcpmp.js";
|
|
19
|
+
import"./cli-8rxa073f.js";
|
|
20
|
+
export {
|
|
21
|
+
CodeAgent
|
|
22
|
+
};
|
|
@@ -1,23 +1,26 @@
|
|
|
1
1
|
import {
|
|
2
2
|
OffensiveSecurityAgent
|
|
3
|
-
} from "./cli-
|
|
3
|
+
} from "./cli-k8mvghe1.js";
|
|
4
4
|
import {
|
|
5
5
|
detectOSAndEnhancePrompt
|
|
6
|
-
} from "./cli-
|
|
6
|
+
} from "./cli-mswm4k81.js";
|
|
7
|
+
import"./cli-3knnkdps.js";
|
|
7
8
|
import"./cli-c8131c4q.js";
|
|
9
|
+
import"./cli-s1nckt4k.js";
|
|
10
|
+
import"./cli-1yavz2pb.js";
|
|
8
11
|
import {
|
|
9
12
|
init_dist,
|
|
10
13
|
stepCountIs
|
|
11
|
-
} from "./cli-
|
|
12
|
-
import"./cli-
|
|
14
|
+
} from "./cli-h825qzmd.js";
|
|
15
|
+
import"./cli-948dk60p.js";
|
|
13
16
|
import {
|
|
14
17
|
exports_external1 as exports_external,
|
|
15
18
|
init_zod
|
|
16
19
|
} from "./cli-e6rgwtpb.js";
|
|
20
|
+
import"./cli-h6nw89zf.js";
|
|
17
21
|
import"./cli-gpnb45ck.js";
|
|
18
|
-
import"./cli-
|
|
19
|
-
import"./cli-
|
|
20
|
-
import"./cli-k1vsv3qh.js";
|
|
22
|
+
import"./cli-0v9x0eby.js";
|
|
23
|
+
import"./cli-a20jcpmp.js";
|
|
21
24
|
import"./cli-8rxa073f.js";
|
|
22
25
|
|
|
23
26
|
// src/core/agents/specialized/findingJudge/agent.ts
|
|
@@ -3,19 +3,22 @@ import {
|
|
|
3
3
|
buildPentestActiveTools,
|
|
4
4
|
buildPentestPrompt,
|
|
5
5
|
buildPentestSystemPrompt
|
|
6
|
-
} from "./cli-
|
|
6
|
+
} from "./cli-cb5va0cs.js";
|
|
7
7
|
import"./cli-9fsre5pt.js";
|
|
8
|
-
import"./cli-
|
|
9
|
-
import"./cli-
|
|
10
|
-
import"./cli-
|
|
8
|
+
import"./cli-ntd42071.js";
|
|
9
|
+
import"./cli-k8mvghe1.js";
|
|
10
|
+
import"./cli-mswm4k81.js";
|
|
11
|
+
import"./cli-3knnkdps.js";
|
|
11
12
|
import"./cli-c8131c4q.js";
|
|
12
|
-
import"./cli-
|
|
13
|
-
import"./cli-
|
|
13
|
+
import"./cli-s1nckt4k.js";
|
|
14
|
+
import"./cli-1yavz2pb.js";
|
|
15
|
+
import"./cli-h825qzmd.js";
|
|
16
|
+
import"./cli-948dk60p.js";
|
|
14
17
|
import"./cli-e6rgwtpb.js";
|
|
18
|
+
import"./cli-h6nw89zf.js";
|
|
15
19
|
import"./cli-gpnb45ck.js";
|
|
16
|
-
import"./cli-
|
|
17
|
-
import"./cli-
|
|
18
|
-
import"./cli-k1vsv3qh.js";
|
|
20
|
+
import"./cli-0v9x0eby.js";
|
|
21
|
+
import"./cli-a20jcpmp.js";
|
|
19
22
|
import"./cli-8rxa073f.js";
|
|
20
23
|
export {
|
|
21
24
|
buildPentestSystemPrompt,
|
|
@@ -12,26 +12,29 @@ import {
|
|
|
12
12
|
searchEndpoints,
|
|
13
13
|
updateApp,
|
|
14
14
|
updateEndpoint
|
|
15
|
-
} from "./cli-
|
|
16
|
-
import"./cli-
|
|
17
|
-
import"./cli-
|
|
18
|
-
import"./cli-
|
|
19
|
-
import"./cli-
|
|
20
|
-
import"./cli-
|
|
21
|
-
import"./cli-
|
|
15
|
+
} from "./cli-31cara07.js";
|
|
16
|
+
import"./cli-5fr9k6m4.js";
|
|
17
|
+
import"./cli-sw5swz40.js";
|
|
18
|
+
import"./cli-cb5va0cs.js";
|
|
19
|
+
import"./cli-zvq4gy61.js";
|
|
20
|
+
import"./cli-zpvmaxem.js";
|
|
21
|
+
import"./cli-wdmqkshz.js";
|
|
22
22
|
import"./cli-9fsre5pt.js";
|
|
23
|
-
import"./cli-
|
|
24
|
-
import"./cli-
|
|
25
|
-
import"./cli-
|
|
23
|
+
import"./cli-ntd42071.js";
|
|
24
|
+
import"./cli-k8mvghe1.js";
|
|
25
|
+
import"./cli-mswm4k81.js";
|
|
26
|
+
import"./cli-3knnkdps.js";
|
|
26
27
|
import"./cli-fw5r7pfj.js";
|
|
27
28
|
import"./cli-c8131c4q.js";
|
|
28
|
-
import"./cli-
|
|
29
|
-
import"./cli-
|
|
29
|
+
import"./cli-s1nckt4k.js";
|
|
30
|
+
import"./cli-1yavz2pb.js";
|
|
31
|
+
import"./cli-h825qzmd.js";
|
|
32
|
+
import"./cli-948dk60p.js";
|
|
30
33
|
import"./cli-e6rgwtpb.js";
|
|
34
|
+
import"./cli-h6nw89zf.js";
|
|
31
35
|
import"./cli-gpnb45ck.js";
|
|
32
|
-
import"./cli-
|
|
33
|
-
import"./cli-
|
|
34
|
-
import"./cli-k1vsv3qh.js";
|
|
36
|
+
import"./cli-0v9x0eby.js";
|
|
37
|
+
import"./cli-a20jcpmp.js";
|
|
35
38
|
import"./cli-8rxa073f.js";
|
|
36
39
|
|
|
37
40
|
// src/cli/apps.ts
|
|
@@ -1,18 +1,21 @@
|
|
|
1
1
|
#!/usr/bin/env bun
|
|
2
|
-
import"./cli-
|
|
3
|
-
import"./cli-
|
|
4
|
-
import"./cli-
|
|
5
|
-
import"./cli-
|
|
6
|
-
import"./cli-
|
|
7
|
-
import"./cli-
|
|
8
|
-
import"./cli-
|
|
2
|
+
import"./cli-31cara07.js";
|
|
3
|
+
import"./cli-5fr9k6m4.js";
|
|
4
|
+
import"./cli-sw5swz40.js";
|
|
5
|
+
import"./cli-cb5va0cs.js";
|
|
6
|
+
import"./cli-zvq4gy61.js";
|
|
7
|
+
import"./cli-zpvmaxem.js";
|
|
8
|
+
import"./cli-wdmqkshz.js";
|
|
9
9
|
import"./cli-9fsre5pt.js";
|
|
10
|
-
import"./cli-
|
|
11
|
-
import"./cli-
|
|
12
|
-
import"./cli-
|
|
10
|
+
import"./cli-ntd42071.js";
|
|
11
|
+
import"./cli-k8mvghe1.js";
|
|
12
|
+
import"./cli-mswm4k81.js";
|
|
13
|
+
import"./cli-3knnkdps.js";
|
|
13
14
|
import"./cli-fw5r7pfj.js";
|
|
14
15
|
import"./cli-c8131c4q.js";
|
|
15
|
-
import"./cli-
|
|
16
|
+
import"./cli-s1nckt4k.js";
|
|
17
|
+
import"./cli-1yavz2pb.js";
|
|
18
|
+
import"./cli-h825qzmd.js";
|
|
16
19
|
import {
|
|
17
20
|
disconnect,
|
|
18
21
|
fetchWorkspaces,
|
|
@@ -25,15 +28,15 @@ import {
|
|
|
25
28
|
pollWorkOSToken,
|
|
26
29
|
selectWorkspace,
|
|
27
30
|
startDeviceFlow
|
|
28
|
-
} from "./cli-
|
|
31
|
+
} from "./cli-948dk60p.js";
|
|
29
32
|
import"./cli-e6rgwtpb.js";
|
|
30
|
-
import"./cli-gpnb45ck.js";
|
|
31
33
|
import {
|
|
32
34
|
config,
|
|
33
35
|
init_config
|
|
34
|
-
} from "./cli-
|
|
35
|
-
import"./cli-
|
|
36
|
-
import"./cli-
|
|
36
|
+
} from "./cli-h6nw89zf.js";
|
|
37
|
+
import"./cli-gpnb45ck.js";
|
|
38
|
+
import"./cli-0v9x0eby.js";
|
|
39
|
+
import"./cli-a20jcpmp.js";
|
|
37
40
|
import {
|
|
38
41
|
__require
|
|
39
42
|
} from "./cli-8rxa073f.js";
|
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
import {
|
|
2
|
+
runAuthenticationAgent
|
|
3
|
+
} from "./cli-zvq4gy61.js";
|
|
4
|
+
import"./cli-9fsre5pt.js";
|
|
5
|
+
import"./cli-ntd42071.js";
|
|
6
|
+
import"./cli-k8mvghe1.js";
|
|
7
|
+
import"./cli-mswm4k81.js";
|
|
8
|
+
import"./cli-3knnkdps.js";
|
|
9
|
+
import"./cli-c8131c4q.js";
|
|
10
|
+
import"./cli-s1nckt4k.js";
|
|
11
|
+
import"./cli-1yavz2pb.js";
|
|
12
|
+
import"./cli-h825qzmd.js";
|
|
13
|
+
import"./cli-948dk60p.js";
|
|
14
|
+
import"./cli-e6rgwtpb.js";
|
|
15
|
+
import"./cli-h6nw89zf.js";
|
|
16
|
+
import"./cli-gpnb45ck.js";
|
|
17
|
+
import"./cli-0v9x0eby.js";
|
|
18
|
+
import"./cli-a20jcpmp.js";
|
|
19
|
+
import"./cli-8rxa073f.js";
|
|
20
|
+
export {
|
|
21
|
+
runAuthenticationAgent
|
|
22
|
+
};
|
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
import {
|
|
2
|
+
BlackboxAttackSurfaceAgent
|
|
3
|
+
} from "./cli-sw5swz40.js";
|
|
4
|
+
import"./cli-9fsre5pt.js";
|
|
5
|
+
import"./cli-ntd42071.js";
|
|
6
|
+
import"./cli-k8mvghe1.js";
|
|
7
|
+
import"./cli-mswm4k81.js";
|
|
8
|
+
import"./cli-3knnkdps.js";
|
|
9
|
+
import"./cli-c8131c4q.js";
|
|
10
|
+
import"./cli-s1nckt4k.js";
|
|
11
|
+
import"./cli-1yavz2pb.js";
|
|
12
|
+
import"./cli-h825qzmd.js";
|
|
13
|
+
import"./cli-948dk60p.js";
|
|
14
|
+
import"./cli-e6rgwtpb.js";
|
|
15
|
+
import"./cli-h6nw89zf.js";
|
|
16
|
+
import"./cli-gpnb45ck.js";
|
|
17
|
+
import"./cli-0v9x0eby.js";
|
|
18
|
+
import"./cli-a20jcpmp.js";
|
|
19
|
+
import"./cli-8rxa073f.js";
|
|
20
|
+
export {
|
|
21
|
+
BlackboxAttackSurfaceAgent
|
|
22
|
+
};
|
|
@@ -1,23 +1,26 @@
|
|
|
1
1
|
import {
|
|
2
2
|
runPentestWorkflow
|
|
3
|
-
} from "./cli-
|
|
4
|
-
import"./cli-
|
|
5
|
-
import"./cli-
|
|
6
|
-
import"./cli-
|
|
7
|
-
import"./cli-
|
|
3
|
+
} from "./cli-5fr9k6m4.js";
|
|
4
|
+
import"./cli-sw5swz40.js";
|
|
5
|
+
import"./cli-cb5va0cs.js";
|
|
6
|
+
import"./cli-zpvmaxem.js";
|
|
7
|
+
import"./cli-wdmqkshz.js";
|
|
8
8
|
import"./cli-9fsre5pt.js";
|
|
9
|
-
import"./cli-
|
|
10
|
-
import"./cli-
|
|
11
|
-
import"./cli-
|
|
9
|
+
import"./cli-ntd42071.js";
|
|
10
|
+
import"./cli-k8mvghe1.js";
|
|
11
|
+
import"./cli-mswm4k81.js";
|
|
12
|
+
import"./cli-3knnkdps.js";
|
|
12
13
|
import"./cli-fw5r7pfj.js";
|
|
13
14
|
import"./cli-c8131c4q.js";
|
|
14
|
-
import"./cli-
|
|
15
|
-
import"./cli-
|
|
15
|
+
import"./cli-s1nckt4k.js";
|
|
16
|
+
import"./cli-1yavz2pb.js";
|
|
17
|
+
import"./cli-h825qzmd.js";
|
|
18
|
+
import"./cli-948dk60p.js";
|
|
16
19
|
import"./cli-e6rgwtpb.js";
|
|
20
|
+
import"./cli-h6nw89zf.js";
|
|
17
21
|
import"./cli-gpnb45ck.js";
|
|
18
|
-
import"./cli-
|
|
19
|
-
import"./cli-
|
|
20
|
-
import"./cli-k1vsv3qh.js";
|
|
22
|
+
import"./cli-0v9x0eby.js";
|
|
23
|
+
import"./cli-a20jcpmp.js";
|
|
21
24
|
import"./cli-8rxa073f.js";
|
|
22
25
|
|
|
23
26
|
// src/core/api/blackboxPentest.ts
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
import {
|
|
2
|
+
init_ai,
|
|
3
|
+
init_models,
|
|
4
|
+
init_utils
|
|
5
|
+
} from "./cli-h825qzmd.js";
|
|
6
|
+
import {
|
|
7
|
+
__esm
|
|
8
|
+
} from "./cli-8rxa073f.js";
|
|
9
|
+
|
|
10
|
+
// src/core/ai/index.ts
|
|
11
|
+
var init_ai2 = __esm(() => {
|
|
12
|
+
init_ai();
|
|
13
|
+
init_models();
|
|
14
|
+
init_utils();
|
|
15
|
+
});
|
|
16
|
+
|
|
17
|
+
export { init_ai2 as init_ai };
|
|
@@ -3,20 +3,19 @@ import {
|
|
|
3
3
|
ASK_USER_QUESTIONS_TOOL_NAME,
|
|
4
4
|
OffensiveSecurityAgent,
|
|
5
5
|
SKILL_TOOL_NAMES,
|
|
6
|
-
buildBaseSystemPrompt
|
|
7
|
-
|
|
6
|
+
buildBaseSystemPrompt,
|
|
7
|
+
sessions
|
|
8
|
+
} from "./cli-k8mvghe1.js";
|
|
8
9
|
import {
|
|
9
10
|
init_dist,
|
|
10
|
-
init_session,
|
|
11
|
-
sessions,
|
|
12
11
|
stepCountIs
|
|
13
|
-
} from "./cli-
|
|
12
|
+
} from "./cli-h825qzmd.js";
|
|
14
13
|
import {
|
|
15
14
|
ensureValidToken,
|
|
16
15
|
getPensarApiUrl,
|
|
17
16
|
init_auth,
|
|
18
17
|
init_constants
|
|
19
|
-
} from "./cli-
|
|
18
|
+
} from "./cli-948dk60p.js";
|
|
20
19
|
import {
|
|
21
20
|
exports_external1 as exports_external,
|
|
22
21
|
init_zod
|
|
@@ -24,7 +23,7 @@ import {
|
|
|
24
23
|
import {
|
|
25
24
|
config,
|
|
26
25
|
init_config
|
|
27
|
-
} from "./cli-
|
|
26
|
+
} from "./cli-h6nw89zf.js";
|
|
28
27
|
import {
|
|
29
28
|
__commonJS,
|
|
30
29
|
__require
|
|
@@ -7442,7 +7441,6 @@ var PatchResultSchema = exports_external.object({
|
|
|
7442
7441
|
});
|
|
7443
7442
|
// src/core/workflows/threatModel.ts
|
|
7444
7443
|
init_dist();
|
|
7445
|
-
init_session();
|
|
7446
7444
|
|
|
7447
7445
|
// src/core/skills/registry.ts
|
|
7448
7446
|
import fs2 from "fs/promises";
|