@pensar/apex 2.1.3-canary.7cfccb5f → 2.1.3-canary.8160bb0d

package/build/agent-5pv1rckc.js

@@ -0,0 +1,19 @@
+import {
+  CodeAgent
+} from "./cli-b0vgyt78.js";
+import"./cli-9fsre5pt.js";
+import"./cli-y8nfrasa.js";
+import"./cli-s36h5j62.js";
+import"./cli-fmbfa5fe.js";
+import"./cli-c8131c4q.js";
+import"./cli-pf18sads.js";
+import"./cli-jt7jvy95.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-rf2eyex6.js";
+import"./cli-5wx9vdf8.js";
+import"./cli-e6hwq54g.js";
+import"./cli-8rxa073f.js";
+export {
+  CodeAgent
+};

package/build/agent-82e02x8n.js

@@ -0,0 +1,27 @@
+import {
+  PentestResponseSchema,
+  TargetedPentestAgent,
+  buildPentestActiveTools,
+  buildPentestPrompt,
+  buildPentestSystemPrompt
+} from "./cli-c6xjxdxw.js";
+import"./cli-9fsre5pt.js";
+import"./cli-y8nfrasa.js";
+import"./cli-s36h5j62.js";
+import"./cli-fmbfa5fe.js";
+import"./cli-c8131c4q.js";
+import"./cli-pf18sads.js";
+import"./cli-jt7jvy95.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-rf2eyex6.js";
+import"./cli-5wx9vdf8.js";
+import"./cli-e6hwq54g.js";
+import"./cli-8rxa073f.js";
+export {
+  buildPentestSystemPrompt,
+  buildPentestPrompt,
+  buildPentestActiveTools,
+  TargetedPentestAgent,
+  PentestResponseSchema
+};

package/build/{agent-ya49k979.js → agent-yynqgg1p.js}

@@ -1,23 +1,23 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-anaapwba.js";
+} from "./cli-s36h5j62.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-k26fp7mk.js";
+} from "./cli-fmbfa5fe.js";
 import"./cli-c8131c4q.js";
 import {
   init_dist,
   stepCountIs
-} from "./cli-0bsq9pg5.js";
-import"./cli-58tgx25b.js";
+} from "./cli-pf18sads.js";
+import"./cli-jt7jvy95.js";
 import {
   exports_external,
   init_zod
-} from "./cli-29yqhrjq.js";
+} from "./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-82vmrgxg.js";
-import"./cli-g5rvmttn.js";
-import"./cli-rz6mptgy.js";
+import"./cli-rf2eyex6.js";
+import"./cli-5wx9vdf8.js";
+import"./cli-e6hwq54g.js";
 import"./cli-8rxa073f.js";
 
 // src/core/agents/specialized/findingJudge/agent.ts
@@ -207,8 +207,10 @@ class FindingJudgeAgent extends OffensiveSecurityAgent {
       eventBus: opts.eventBus,
       sandbox: opts.sandbox,
       enableThinking: opts.enableThinking,
+      thinkingEffort: opts.thinkingEffort,
       openAIReasoningEffort: opts.openAIReasoningEffort,
       subagentId: opts.subagentId ?? "finding-judge",
+      subagentName: opts.subagentName ?? "Finding Judge",
       activeTools: [...FINDING_JUDGE_ACTIVE_TOOLS],
       responseSchema: FindingJudgeOutputSchema,
       stopWhen: stepCountIs(60)

package/build/{apps-0mcvnpev.js → apps-ees9r71c.js}

@@ -12,26 +12,27 @@ import {
   searchEndpoints,
   updateApp,
   updateEndpoint
-} from "./cli-2d1p7s31.js";
-import"./cli-hv67fhfc.js";
-import"./cli-j81s1fej.js";
-import"./cli-zwe89e8k.js";
-import"./cli-pjb523ev.js";
-import"./cli-96vcwb5a.js";
-import"./cli-4ahy4xrw.js";
+} from "./cli-pe9p15n5.js";
+import"./cli-2n7qr656.js";
+import"./cli-pwwdphkf.js";
+import"./cli-1kfxqzxp.js";
+import"./cli-c6xjxdxw.js";
+import"./cli-e6tk5bpr.js";
+import"./cli-b0vgyt78.js";
+import"./cli-cvs8sc67.js";
 import"./cli-9fsre5pt.js";
-import"./cli-gr13e66y.js";
-import"./cli-anaapwba.js";
-import"./cli-k26fp7mk.js";
+import"./cli-y8nfrasa.js";
+import"./cli-s36h5j62.js";
+import"./cli-fmbfa5fe.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-0bsq9pg5.js";
-import"./cli-58tgx25b.js";
-import"./cli-29yqhrjq.js";
+import"./cli-pf18sads.js";
+import"./cli-jt7jvy95.js";
+import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-82vmrgxg.js";
-import"./cli-g5rvmttn.js";
-import"./cli-rz6mptgy.js";
+import"./cli-rf2eyex6.js";
+import"./cli-5wx9vdf8.js";
+import"./cli-e6hwq54g.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/apps.ts

package/build/{auth-1trmknwn.js → auth-vck1c0sb.js}

@@ -1,18 +1,19 @@
 #!/usr/bin/env bun
-import"./cli-2d1p7s31.js";
-import"./cli-hv67fhfc.js";
-import"./cli-j81s1fej.js";
-import"./cli-zwe89e8k.js";
-import"./cli-pjb523ev.js";
-import"./cli-96vcwb5a.js";
-import"./cli-4ahy4xrw.js";
+import"./cli-pe9p15n5.js";
+import"./cli-2n7qr656.js";
+import"./cli-pwwdphkf.js";
+import"./cli-1kfxqzxp.js";
+import"./cli-c6xjxdxw.js";
+import"./cli-e6tk5bpr.js";
+import"./cli-b0vgyt78.js";
+import"./cli-cvs8sc67.js";
 import"./cli-9fsre5pt.js";
-import"./cli-gr13e66y.js";
-import"./cli-anaapwba.js";
-import"./cli-k26fp7mk.js";
+import"./cli-y8nfrasa.js";
+import"./cli-s36h5j62.js";
+import"./cli-fmbfa5fe.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-0bsq9pg5.js";
+import"./cli-pf18sads.js";
 import {
   disconnect,
   fetchWorkspaces,
@@ -25,15 +26,15 @@ import {
   pollWorkOSToken,
   selectWorkspace,
   startDeviceFlow
-} from "./cli-58tgx25b.js";
-import"./cli-29yqhrjq.js";
+} from "./cli-jt7jvy95.js";
+import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
 import {
   config,
   init_config
-} from "./cli-82vmrgxg.js";
-import"./cli-g5rvmttn.js";
-import"./cli-rz6mptgy.js";
+} from "./cli-rf2eyex6.js";
+import"./cli-5wx9vdf8.js";
+import"./cli-e6hwq54g.js";
 import {
   __require
 } from "./cli-8rxa073f.js";

package/build/authentication-v0a5c4c4.js

@@ -0,0 +1,19 @@
+import {
+  runAuthenticationAgent
+} from "./cli-e6tk5bpr.js";
+import"./cli-9fsre5pt.js";
+import"./cli-y8nfrasa.js";
+import"./cli-s36h5j62.js";
+import"./cli-fmbfa5fe.js";
+import"./cli-c8131c4q.js";
+import"./cli-pf18sads.js";
+import"./cli-jt7jvy95.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-rf2eyex6.js";
+import"./cli-5wx9vdf8.js";
+import"./cli-e6hwq54g.js";
+import"./cli-8rxa073f.js";
+export {
+  runAuthenticationAgent
+};

package/build/blackboxAgent-ta3e9fsg.js

@@ -0,0 +1,19 @@
+import {
+  BlackboxAttackSurfaceAgent
+} from "./cli-pwwdphkf.js";
+import"./cli-9fsre5pt.js";
+import"./cli-y8nfrasa.js";
+import"./cli-s36h5j62.js";
+import"./cli-fmbfa5fe.js";
+import"./cli-c8131c4q.js";
+import"./cli-pf18sads.js";
+import"./cli-jt7jvy95.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-rf2eyex6.js";
+import"./cli-5wx9vdf8.js";
+import"./cli-e6hwq54g.js";
+import"./cli-8rxa073f.js";
+export {
+  BlackboxAttackSurfaceAgent
+};

package/build/{blackboxPentest-s9r96gfw.js → blackboxPentest-pse1ysk0.js}

@@ -1,23 +1,24 @@
 import {
   runPentestWorkflow
-} from "./cli-hv67fhfc.js";
-import"./cli-j81s1fej.js";
-import"./cli-zwe89e8k.js";
-import"./cli-96vcwb5a.js";
-import"./cli-4ahy4xrw.js";
+} from "./cli-2n7qr656.js";
+import"./cli-pwwdphkf.js";
+import"./cli-1kfxqzxp.js";
+import"./cli-c6xjxdxw.js";
+import"./cli-b0vgyt78.js";
+import"./cli-cvs8sc67.js";
 import"./cli-9fsre5pt.js";
-import"./cli-gr13e66y.js";
-import"./cli-anaapwba.js";
-import"./cli-k26fp7mk.js";
+import"./cli-y8nfrasa.js";
+import"./cli-s36h5j62.js";
+import"./cli-fmbfa5fe.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-0bsq9pg5.js";
-import"./cli-58tgx25b.js";
-import"./cli-29yqhrjq.js";
+import"./cli-pf18sads.js";
+import"./cli-jt7jvy95.js";
+import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-82vmrgxg.js";
-import"./cli-g5rvmttn.js";
-import"./cli-rz6mptgy.js";
+import"./cli-rf2eyex6.js";
+import"./cli-5wx9vdf8.js";
+import"./cli-e6hwq54g.js";
 import"./cli-8rxa073f.js";
 
 // src/core/api/blackboxPentest.ts

package/build/cli-1kfxqzxp.js

@@ -0,0 +1,195 @@
+import {
+  EvidenceFileEntrySchema
+} from "./cli-y8nfrasa.js";
+import {
+  CweEntrySchema,
+  ValidatedCweEntrySchema,
+  hasCanonicalName
+} from "./cli-s36h5j62.js";
+import {
+  exports_external,
+  init_zod
+} from "./cli-3k1x5rn3.js";
+
+// src/core/report/schemas.ts
+init_zod();
+var PentestReportFindingSchema = exports_external.object({
+  title: exports_external.string(),
+  severity: exports_external.enum(["CRITICAL", "HIGH", "MEDIUM", "LOW"]),
+  description: exports_external.string(),
+  impact: exports_external.string(),
+  evidence: exports_external.string(),
+  endpoint: exports_external.string(),
+  pocPath: exports_external.string(),
+  remediation: exports_external.string(),
+  references: exports_external.string().optional(),
+  cwes: exports_external.array(ValidatedCweEntrySchema.or(CweEntrySchema)).optional(),
+  rootCauseGroup: exports_external.string().optional(),
+  relatedFindings: exports_external.array(exports_external.string()).optional(),
+  rootCauseLead: exports_external.boolean().optional(),
+  evidenceFiles: exports_external.array(EvidenceFileEntrySchema).optional()
+});
+var PentestReportSchema = exports_external.object({
+  version: exports_external.string().regex(/^1\.\d+$/),
+  metadata: exports_external.object({
+    target: exports_external.string(),
+    model: exports_external.string(),
+    timestamp: exports_external.string(),
+    sessionId: exports_external.string(),
+    mode: exports_external.enum(["blackbox", "whitebox", "targeted"])
+  }),
+  summary: exports_external.object({
+    totalFindings: exports_external.number(),
+    bySeverity: exports_external.object({
+      CRITICAL: exports_external.number(),
+      HIGH: exports_external.number(),
+      MEDIUM: exports_external.number(),
+      LOW: exports_external.number()
+    })
+  }),
+  findings: exports_external.array(PentestReportFindingSchema)
+});
+var REPORT_VERSION = "1.0";
+
+// src/core/report/builder.ts
+var SEVERITY_ORDER = ["CRITICAL", "HIGH", "MEDIUM", "LOW"];
+function buildPentestReport(findings, context) {
+  const sorted = [...findings].sort((a, b) => SEVERITY_ORDER.indexOf(a.severity) - SEVERITY_ORDER.indexOf(b.severity));
+  const bySeverity = { CRITICAL: 0, HIGH: 0, MEDIUM: 0, LOW: 0 };
+  for (const f of findings) {
+    bySeverity[f.severity]++;
+  }
+  return {
+    version: REPORT_VERSION,
+    metadata: {
+      target: context.target,
+      model: context.model,
+      timestamp: new Date().toISOString(),
+      sessionId: context.sessionId,
+      mode: context.mode
+    },
+    summary: {
+      totalFindings: findings.length,
+      bySeverity
+    },
+    findings: sorted.map((f) => ({
+      title: f.title,
+      severity: f.severity,
+      description: f.description,
+      impact: f.impact,
+      evidence: f.evidence,
+      endpoint: f.endpoint,
+      pocPath: f.pocPath,
+      remediation: f.remediation,
+      references: f.references,
+      cwes: f.cwes,
+      rootCauseGroup: f.rootCauseGroup,
+      relatedFindings: f.relatedFindings,
+      rootCauseLead: f.rootCauseLead,
+      evidenceFiles: f.evidenceFiles
+    }))
+  };
+}
+
+// src/core/report/renderers/json.ts
+function renderJson(report) {
+  return JSON.stringify(report, null, 2);
+}
+
+// src/core/report/renderers/markdown.ts
+function renderMarkdown(report) {
+  const { metadata, findings, summary } = report;
+  const header = [
+    `# Pentest Report — ${metadata.target}`,
+    "",
+    `**Date:** ${metadata.timestamp}  `,
+    `**Session:** ${metadata.sessionId}  `,
+    `**Model:** ${metadata.model}  `,
+    `**Mode:** ${metadata.mode}`,
+    "",
+    `**Findings:** ${summary.totalFindings}`,
+    ""
+  ];
+  if (findings.length === 0) {
+    return [
+      ...header,
+      "No findings were identified during this assessment.",
+      ""
+    ].join(`
+`);
+  }
+  const body = findings.map((finding) => renderFinding(finding, metadata)).join(`
+`);
+  return [...header, body].join(`
+`);
+}
+function renderFinding(finding, metadata) {
+  const lines = [
+    `# ${finding.title}`,
+    "",
+    `**Severity:** ${finding.severity}  `,
+    `**Target:** ${metadata.target}  `,
+    `**Endpoint:** ${finding.endpoint}  `,
+    `**Date:** ${metadata.timestamp}  `,
+    `**Session:** ${metadata.sessionId}`,
+    "",
+    "## Description",
+    "",
+    finding.description,
+    "",
+    "## Impact",
+    "",
+    finding.impact,
+    "",
+    "## Evidence",
+    "",
+    "```",
+    finding.evidence,
+    "```",
+    "",
+    ...finding.evidenceFiles?.length ? [
+      "## Evidence Files",
+      "",
+      ...finding.evidenceFiles.map((ef) => `- **[${ef.type}]** \`${ef.path}\` — ${ef.description}`),
+      ""
+    ] : [],
+    ...finding.cwes?.length ? [
+      "## CWE Classification",
+      "",
+      ...finding.cwes.map((cwe) => `- **${cwe.id}**${hasCanonicalName(cwe) ? `: ${cwe.name}` : ""} — ${cwe.reasoning}`),
+      ""
+    ] : [],
+    ...finding.rootCauseGroup ? [
+      "## Root Cause Group",
+      "",
+      `**Group:** \`${finding.rootCauseGroup}\``,
+      ...finding.relatedFindings?.length ? [
+        "",
+        "**Related Findings:**",
+        ...finding.relatedFindings.map((rf) => `- ${rf}`)
+      ] : [],
+      ""
+    ] : [],
+    "## POC",
+    "",
+    `Path: \`${finding.pocPath}\``,
+    "",
+    "## Remediation",
+    "",
+    finding.remediation,
+    ...finding.references ? ["", `## References`, "", finding.references] : [],
+    "",
+    "---",
+    "",
+    "*This finding was automatically documented by the Pensar penetration testing agent.*",
+    ""
+  ];
+  return lines.join(`
+`);
+}
+
+// src/core/report/index.ts
+var REPORT_FILENAME_MD = "pentest-report.md";
+var REPORT_FILENAME_JSON = "pentest-report.json";
+
+export { buildPentestReport, renderJson, renderMarkdown, REPORT_FILENAME_MD, REPORT_FILENAME_JSON };