@pensar/apex 2.3.0 → 2.4.0-canary.09a8744f

package/build/{cli-baqhqbe5.js → cli-7gcsfnw6.js}

@@ -2,16 +2,16 @@ import {
   EndpointTransportEnum,
   GrpcEndpointMetadataSchema,
   OffensiveSecurityAgent
-} from "./cli-n2m2yy5b.js";
+} from "./cli-hc4w41as.js";
 import {
   hasToolCall,
   init_dist
-} from "./cli-zx8gk8xv.js";
+} from "./cli-51503njj.js";
 import {
   exports_external,
   init_zod,
   tool
-} from "./cli-3k1x5rn3.js";
+} from "./cli-avmhkjtv.js";
 
 // src/core/agents/specialized/whiteboxAttackSurface/agent.ts
 init_dist();

package/build/cli-7q3ae3ft.js

@@ -0,0 +1,6 @@
+// src/cli/command-exit.ts
+function markCommandFailed() {
+  process.exitCode = 1;
+}
+
+export { markCommandFailed };

package/build/{cli-72b18z0n.js → cli-8nj7pnew.js}

@@ -1,15 +1,16 @@
 import {
   EvidenceFileEntrySchema
-} from "./cli-jyp2c6th.js";
+} from "./cli-nvqny4ej.js";
 import {
+  AttackPathSchema,
   CweEntrySchema,
   ValidatedCweEntrySchema,
   hasCanonicalName
-} from "./cli-n2m2yy5b.js";
+} from "./cli-hc4w41as.js";
 import {
   exports_external,
   init_zod
-} from "./cli-3k1x5rn3.js";
+} from "./cli-avmhkjtv.js";
 
 // src/core/report/schemas.ts
 init_zod();
@@ -27,7 +28,8 @@ var PentestReportFindingSchema = exports_external.object({
   rootCauseGroup: exports_external.string().optional(),
   relatedFindings: exports_external.array(exports_external.string()).optional(),
   rootCauseLead: exports_external.boolean().optional(),
-  evidenceFiles: exports_external.array(EvidenceFileEntrySchema).optional()
+  evidenceFiles: exports_external.array(EvidenceFileEntrySchema).optional(),
+  attackPath: AttackPathSchema.optional()
 });
 var PentestReportSchema = exports_external.object({
   version: exports_external.string().regex(/^1\.\d+$/),
@@ -86,7 +88,8 @@ function buildPentestReport(findings, context) {
       rootCauseGroup: f.rootCauseGroup,
       relatedFindings: f.relatedFindings,
       rootCauseLead: f.rootCauseLead,
-      evidenceFiles: f.evidenceFiles
+      evidenceFiles: f.evidenceFiles,
+      attackPath: f.attackPath
     }))
   };
 }
@@ -141,6 +144,12 @@ function renderFinding(finding, metadata) {
     "",
     finding.impact,
     "",
+    ...finding.attackPath?.length ? [
+      "## Attack Path",
+      "",
+      ...finding.attackPath.map(renderAttackPathHop),
+      ""
+    ] : [],
     "## Evidence",
     "",
     "```",
@@ -187,6 +196,20 @@ function renderFinding(finding, metadata) {
   return lines.join(`
 `);
 }
+function renderAttackPathHop(hop, index) {
+  const parts = [];
+  if (hop.applicationName)
+    parts.push(`**${hop.applicationName}**`);
+  if (hop.applicationId)
+    parts.push(`(\`${hop.applicationId}\`)`);
+  if (hop.host)
+    parts.push(`host \`${hop.host}\``);
+  if (hop.relationshipType)
+    parts.push(`via ${hop.relationshipType}`);
+  if (hop.notes)
+    parts.push(`— ${hop.notes}`);
+  return `${index + 1}. ${parts.join(" ") || "Unspecified system member"}`;
+}
 
 // src/core/report/index.ts
 var REPORT_FILENAME_MD = "pentest-report.md";

package/build/{cli-f7hanqbw.js → cli-9fds4ss0.js}

@@ -3,10 +3,10 @@ import {
   init,
   init_config,
   update
-} from "./cli-eveg9djy.js";
+} from "./cli-5tbg4dyb.js";
 import {
   __esm
-} from "./cli-8rxa073f.js";
+} from "./cli-bc05qbss.js";
 
 // src/core/config/index.ts
 var config;

package/build/cli-9pbk8m32.js

@@ -0,0 +1,32 @@
+// src/core/session/usage.ts
+var EMPTY_SESSION_TOKEN_USAGE = {
+  inputTokens: 0,
+  outputTokens: 0,
+  cacheReadTokens: 0,
+  cacheWriteTokens: 0
+};
+function accumulateSessionTokens(current, step) {
+  const inputTokens = step.inputTokens ?? 0;
+  const outputTokens = step.outputTokens ?? 0;
+  const cacheReadTokens = step.cacheReadTokens ?? 0;
+  const cacheWriteTokens = step.cacheWriteTokens ?? 0;
+  if (inputTokens === 0 && outputTokens === 0 && cacheReadTokens === 0 && cacheWriteTokens === 0) {
+    return current;
+  }
+  return {
+    inputTokens: current.inputTokens + inputTokens,
+    outputTokens: current.outputTokens + outputTokens,
+    cacheReadTokens: current.cacheReadTokens + cacheReadTokens,
+    cacheWriteTokens: current.cacheWriteTokens + cacheWriteTokens
+  };
+}
+function contextPercentage(context) {
+  if (!context)
+    return null;
+  if (context.contextLimit <= 0)
+    return null;
+  const raw = context.usedTokens / context.contextLimit * 100;
+  return Math.min(100, Math.max(0, raw));
+}
+
+export { EMPTY_SESSION_TOKEN_USAGE, accumulateSessionTokens, contextPercentage };