@pensar/apex 2.4.0 → 2.5.0-canary.aa559068

package/build/agent-48xj79bj.js

@@ -0,0 +1,20 @@
+import {
+  CodeAgent
+} from "./cli-12ky98ey.js";
+import"./cli-9fsre5pt.js";
+import"./cli-g0whajsq.js";
+import"./cli-kya26m6f.js";
+import"./cli-8mws7sa5.js";
+import"./cli-c8131c4q.js";
+import"./cli-qwv4jsj2.js";
+import"./cli-jsw8vt43.js";
+import"./cli-avmhkjtv.js";
+import"./cli-j54qa6tm.js";
+import"./cli-54egv3xw.js";
+import"./cli-eaaqeve1.js";
+import"./cli-w51z9qjr.js";
+import"./cli-knd276ed.js";
+import"./cli-bc05qbss.js";
+export {
+  CodeAgent
+};

package/build/{agent-nhs1w5w0.js → agent-7q3c9cjt.js}

@@ -5,19 +5,20 @@ import {
   buildPentestPrompt,
   buildPentestSystemPrompt,
   resolvePentestAgentRole
-} from "./cli-mavved45.js";
+} from "./cli-7735d17s.js";
 import"./cli-9fsre5pt.js";
-import"./cli-qqt4gj1w.js";
-import"./cli-repbyhkk.js";
-import"./cli-tznv8pf1.js";
+import"./cli-g0whajsq.js";
+import"./cli-kya26m6f.js";
+import"./cli-8mws7sa5.js";
 import"./cli-c8131c4q.js";
-import"./cli-tkc598ey.js";
-import"./cli-0n4r54hq.js";
-import"./cli-swpbx60z.js";
+import"./cli-qwv4jsj2.js";
+import"./cli-jsw8vt43.js";
+import"./cli-avmhkjtv.js";
 import"./cli-j54qa6tm.js";
-import"./cli-72cvcqhg.js";
-import"./cli-9rhzhgx2.js";
-import"./cli-vnynf0js.js";
+import"./cli-54egv3xw.js";
+import"./cli-eaaqeve1.js";
+import"./cli-w51z9qjr.js";
+import"./cli-knd276ed.js";
 import"./cli-bc05qbss.js";
 export {
   PentestResponseSchema,

package/build/{agent-5ejt5vpz.js → agent-ve8pkr6q.js}

@@ -1,23 +1,24 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-repbyhkk.js";
+} from "./cli-kya26m6f.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-tznv8pf1.js";
+} from "./cli-8mws7sa5.js";
 import"./cli-c8131c4q.js";
 import {
   init_dist,
   stepCountIs
-} from "./cli-tkc598ey.js";
-import"./cli-0n4r54hq.js";
+} from "./cli-qwv4jsj2.js";
+import"./cli-jsw8vt43.js";
 import {
   exports_external,
   init_zod
-} from "./cli-swpbx60z.js";
+} from "./cli-avmhkjtv.js";
 import"./cli-j54qa6tm.js";
-import"./cli-72cvcqhg.js";
-import"./cli-9rhzhgx2.js";
-import"./cli-vnynf0js.js";
+import"./cli-54egv3xw.js";
+import"./cli-eaaqeve1.js";
+import"./cli-w51z9qjr.js";
+import"./cli-knd276ed.js";
 import"./cli-bc05qbss.js";
 
 // src/core/agents/specialized/findingJudge/agent.ts

package/build/{apps-17wvz1d7.js → apps-4rsrnftx.js}

@@ -1,38 +1,46 @@
 #!/usr/bin/env bun
-import"./cli-vq52kp7j.js";
-import"./cli-5k33webc.js";
-import"./cli-gq40s5b3.js";
-import"./cli-b1adytsy.js";
-import"./cli-mavved45.js";
-import"./cli-xshasbwe.js";
-import"./cli-32z0017y.js";
-import"./cli-k8kc47pq.js";
+import {
+  markCommandFailed
+} from "./cli-7q3ae3ft.js";
+import"./cli-gb1s7k3v.js";
+import"./cli-9pbk8m32.js";
+import"./cli-2ar3m569.js";
+import"./cli-mmyn6wmb.js";
+import"./cli-6cq67y5m.js";
+import"./cli-7735d17s.js";
+import"./cli-whp0f8gp.js";
+import"./cli-r3w58pmq.js";
+import"./cli-12ky98ey.js";
 import"./cli-9fsre5pt.js";
-import"./cli-qqt4gj1w.js";
+import"./cli-g0whajsq.js";
 import {
+  ENDPOINT_TRANSPORTS,
   createApp,
+  createDomain,
   createEndpoint,
   deleteApp,
   deleteEndpoint,
   getApp,
   getEndpoint,
   listApps,
+  listDomains,
   listEndpoints,
   searchApps,
   searchEndpoints,
   updateApp,
   updateEndpoint
-} from "./cli-repbyhkk.js";
-import"./cli-tznv8pf1.js";
+} from "./cli-kya26m6f.js";
+import"./cli-8mws7sa5.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-tkc598ey.js";
-import"./cli-0n4r54hq.js";
-import"./cli-swpbx60z.js";
+import"./cli-qwv4jsj2.js";
+import"./cli-jsw8vt43.js";
+import"./cli-avmhkjtv.js";
 import"./cli-j54qa6tm.js";
-import"./cli-72cvcqhg.js";
-import"./cli-9rhzhgx2.js";
-import"./cli-vnynf0js.js";
+import"./cli-54egv3xw.js";
+import"./cli-eaaqeve1.js";
+import"./cli-w51z9qjr.js";
+import"./cli-knd276ed.js";
 import"./cli-bc05qbss.js";
 
 // src/cli/apps.ts
@@ -88,6 +96,14 @@ function parseEndpointType(value) {
   }
   return value;
 }
+function parseTransport(value) {
+  if (value === undefined)
+    return;
+  if (!ENDPOINT_TRANSPORTS.includes(value)) {
+    throw new Error(`Invalid --transport "${value}". Must be one of: ${ENDPOINT_TRANSPORTS.join(", ")}`);
+  }
+  return value;
+}
 function parseInteger(flag, value) {
   if (value === undefined)
     return;
@@ -117,6 +133,8 @@ Usage:
   pensar apps create [options]                             Create an app
   pensar apps update <appId> [options]                     Update an app
   pensar apps delete <appId>                               Delete an app
+  pensar apps domains                                      List workspace domains
+  pensar apps domain-create <domain>                       Create/resolve a domain
   pensar apps endpoints <appId> [filters]                  List endpoints
   pensar apps endpoint <endpointId>                        Show endpoint details
   pensar apps endpoint-create <appId> [options]            Create an endpoint
@@ -130,9 +148,13 @@ App fields (create requires --name and --description):
   --description <text>         Application description
   --type <type>                One of: ${APPLICATION_TYPES.join(", ")}
   --framework <text>           Framework / runtime hint
-  --domain <id>                Linked domain UUID
+  --domain <id>                Linked domain UUID (see "apps domains")
   --disallowed-actions <text>  Free-form disallowed actions notes
 
+Domains:
+  API-created domains are canonicalized and created idempotently by Console.
+  They stay unverified and do not start reconnaissance.
+
 List pagination (for "apps" and "endpoints <appId>"):
   --limit <n>                  Page size (default 100, max 200)
   --offset <n>                 Page offset (default 0)
@@ -158,6 +180,8 @@ Endpoint fields (create requires --endpoint and --description):
   --endpoint <text>            Endpoint path / URL / route
   --description <text>         Endpoint description
   --type <type>                One of: ${ENDPOINT_TYPES.join(", ")}
+  --transport <transport>      One of: ${ENDPOINT_TRANSPORTS.join(", ")}
+                               (defaults to http when omitted)
   --location <text>            Source file (whitebox)
   --start-line <n>             Start line number
   --end-line <n>               End line number
@@ -235,6 +259,7 @@ function parseEndpointCreateOptions(argv) {
   if (description === undefined)
     throw new Error("--description is required");
   const type = parseEndpointType(getFlag("--type", argv));
+  const transport = parseTransport(getFlag("--transport", argv));
   const location = getFlag("--location", argv);
   const startLineNumber = parseInteger("--start-line", getFlag("--start-line", argv));
   const endLineNumber = parseInteger("--end-line", getFlag("--end-line", argv));
@@ -246,6 +271,7 @@ function parseEndpointCreateOptions(argv) {
     endpoint,
     description,
     ...type !== undefined ? { type } : {},
+    ...transport !== undefined ? { transport } : {},
     ...location !== undefined ? { location } : {},
     ...startLineNumber !== undefined ? { startLineNumber } : {},
     ...endLineNumber !== undefined ? { endLineNumber } : {},
@@ -269,6 +295,9 @@ function parseEndpointUpdateOptions(argv) {
   const type = parseEndpointType(getFlag("--type", argv));
   if (type !== undefined)
     update.type = type;
+  const transport = parseTransport(getFlag("--transport", argv));
+  if (transport !== undefined)
+    update.transport = transport;
   const location = getFlag("--location", argv);
   if (location !== undefined)
     update.location = location;
@@ -305,7 +334,7 @@ async function main() {
       if (!appId) {
         console.error("Error: app ID is required");
         console.error("Usage: pensar apps get <appId>");
-        process.exit(1);
+        return markCommandFailed();
       }
       const app = await getApp(appId);
       console.log(JSON.stringify(app, null, 2));
@@ -318,7 +347,7 @@ async function main() {
       if (!appId) {
         console.error("Error: app ID is required");
         console.error("Usage: pensar apps update <appId> [options]");
-        process.exit(1);
+        return markCommandFailed();
       }
       const opts = parseAppUpdateOptions(args);
       const result = await updateApp(appId, opts);
@@ -328,16 +357,28 @@ async function main() {
       if (!appId) {
         console.error("Error: app ID is required");
         console.error("Usage: pensar apps delete <appId>");
-        process.exit(1);
+        return markCommandFailed();
       }
       const result = await deleteApp(appId);
       console.log(JSON.stringify(result, null, 2));
+    } else if (sub === "domains") {
+      const result = await listDomains();
+      console.log(JSON.stringify(result, null, 2));
+    } else if (sub === "domain-create") {
+      const url = args[1];
+      if (!url) {
+        console.error("Error: domain is required");
+        console.error("Usage: pensar apps domain-create <domain>");
+        return markCommandFailed();
+      }
+      const result = await createDomain({ url });
+      console.log(JSON.stringify(result, null, 2));
     } else if (sub === "endpoints") {
       const appId = args[1];
       if (!appId) {
         console.error("Error: app ID is required");
         console.error("Usage: pensar apps endpoints <appId> [filters]");
-        process.exit(1);
+        return markCommandFailed();
       }
       const type = parseEndpointType(getFlag("--type", args));
       const minRiskScore = parseNumber("--min-risk", getFlag("--min-risk", args));
@@ -356,7 +397,7 @@ async function main() {
       if (!endpointId) {
         console.error("Error: endpoint ID is required");
         console.error("Usage: pensar apps endpoint <endpointId>");
-        process.exit(1);
+        return markCommandFailed();
       }
       const result = await getEndpoint(endpointId);
       console.log(JSON.stringify(result, null, 2));
@@ -365,7 +406,7 @@ async function main() {
       if (!appId) {
         console.error("Error: app ID is required");
         console.error("Usage: pensar apps endpoint-create <appId> --endpoint E --description D");
-        process.exit(1);
+        return markCommandFailed();
       }
       const opts = parseEndpointCreateOptions(args);
       const result = await createEndpoint(appId, opts);
@@ -375,7 +416,7 @@ async function main() {
       if (!endpointId) {
         console.error("Error: endpoint ID is required");
         console.error("Usage: pensar apps endpoint-update <endpointId> [options]");
-        process.exit(1);
+        return markCommandFailed();
       }
       const opts = parseEndpointUpdateOptions(args);
       const result = await updateEndpoint(endpointId, opts);
@@ -385,7 +426,7 @@ async function main() {
       if (!endpointId) {
         console.error("Error: endpoint ID is required");
         console.error("Usage: pensar apps endpoint-delete <endpointId>");
-        process.exit(1);
+        return markCommandFailed();
       }
       const result = await deleteEndpoint(endpointId);
       console.log(JSON.stringify(result, null, 2));
@@ -394,7 +435,7 @@ async function main() {
       if (!query || query.startsWith("--")) {
         console.error("Error: search query is required");
         console.error("Usage: pensar apps search <query> [options]");
-        process.exit(1);
+        return markCommandFailed();
       }
       const type = parseAppType(getFlag("--type", args));
       const limit = parseInteger("--limit", getFlag("--limit", args));
@@ -410,7 +451,7 @@ async function main() {
       if (!query || query.startsWith("--")) {
         console.error("Error: search query is required");
         console.error("Usage: pensar apps search-endpoints <query> [options]");
-        process.exit(1);
+        return markCommandFailed();
       }
       const applicationId = getFlag("--app", args);
       const type = parseEndpointType(getFlag("--type", args));
@@ -438,12 +479,12 @@ async function main() {
     } else {
       console.error(`Error: Unknown subcommand "${sub}"`);
       showHelp();
-      process.exit(1);
+      return markCommandFailed();
     }
   } catch (err) {
     console.error(`
 Error: ${err instanceof Error ? err.message : String(err)}`);
-    process.exit(1);
+    return markCommandFailed();
   }
 }
-main();
+await main();

package/build/{auth-z3h9859n.js → auth-0w07dbg2.js}

@@ -1,19 +1,23 @@
 #!/usr/bin/env bun
-import"./cli-vq52kp7j.js";
-import"./cli-5k33webc.js";
-import"./cli-gq40s5b3.js";
-import"./cli-b1adytsy.js";
-import"./cli-mavved45.js";
-import"./cli-xshasbwe.js";
-import"./cli-32z0017y.js";
-import"./cli-k8kc47pq.js";
+import {
+  markCommandFailed
+} from "./cli-7q3ae3ft.js";
+import"./cli-gb1s7k3v.js";
+import"./cli-9pbk8m32.js";
+import"./cli-2ar3m569.js";
+import"./cli-mmyn6wmb.js";
+import"./cli-6cq67y5m.js";
+import"./cli-7735d17s.js";
+import"./cli-whp0f8gp.js";
+import"./cli-r3w58pmq.js";
+import"./cli-12ky98ey.js";
 import"./cli-9fsre5pt.js";
-import"./cli-qqt4gj1w.js";
-import"./cli-repbyhkk.js";
-import"./cli-tznv8pf1.js";
+import"./cli-g0whajsq.js";
+import"./cli-kya26m6f.js";
+import"./cli-8mws7sa5.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-tkc598ey.js";
+import"./cli-qwv4jsj2.js";
 import {
   createWorkspaceSelection,
   disconnect,
@@ -29,15 +33,16 @@ import {
   pollWorkspaceSelection,
   selectWorkspace,
   startDeviceFlow
-} from "./cli-0n4r54hq.js";
-import"./cli-swpbx60z.js";
+} from "./cli-jsw8vt43.js";
+import"./cli-avmhkjtv.js";
 import"./cli-j54qa6tm.js";
 import {
   config,
   init_config
-} from "./cli-72cvcqhg.js";
-import"./cli-9rhzhgx2.js";
-import"./cli-vnynf0js.js";
+} from "./cli-54egv3xw.js";
+import"./cli-eaaqeve1.js";
+import"./cli-w51z9qjr.js";
+import"./cli-knd276ed.js";
 import {
   __require
 } from "./cli-bc05qbss.js";
@@ -300,12 +305,12 @@ async function main() {
     } else {
       console.error(`Unknown auth subcommand: ${subcommand}`);
       console.error("Run 'pensar login --help' for usage information");
-      process.exit(1);
+      return markCommandFailed();
     }
   } catch (err) {
     console.error(`
 Error: ${err instanceof Error ? err.message : String(err)}`);
-    process.exit(1);
+    return markCommandFailed();
   }
 }
-main();
+await main();

package/build/authentication-87zzmjdd.js

@@ -0,0 +1,20 @@
+import {
+  runAuthenticationAgent
+} from "./cli-r3w58pmq.js";
+import"./cli-9fsre5pt.js";
+import"./cli-g0whajsq.js";
+import"./cli-kya26m6f.js";
+import"./cli-8mws7sa5.js";
+import"./cli-c8131c4q.js";
+import"./cli-qwv4jsj2.js";
+import"./cli-jsw8vt43.js";
+import"./cli-avmhkjtv.js";
+import"./cli-j54qa6tm.js";
+import"./cli-54egv3xw.js";
+import"./cli-eaaqeve1.js";
+import"./cli-w51z9qjr.js";
+import"./cli-knd276ed.js";
+import"./cli-bc05qbss.js";
+export {
+  runAuthenticationAgent
+};

package/build/blackboxAgent-x0e1wqjx.js

@@ -0,0 +1,20 @@
+import {
+  BlackboxAttackSurfaceAgent
+} from "./cli-6cq67y5m.js";
+import"./cli-9fsre5pt.js";
+import"./cli-g0whajsq.js";
+import"./cli-kya26m6f.js";
+import"./cli-8mws7sa5.js";
+import"./cli-c8131c4q.js";
+import"./cli-qwv4jsj2.js";
+import"./cli-jsw8vt43.js";
+import"./cli-avmhkjtv.js";
+import"./cli-j54qa6tm.js";
+import"./cli-54egv3xw.js";
+import"./cli-eaaqeve1.js";
+import"./cli-w51z9qjr.js";
+import"./cli-knd276ed.js";
+import"./cli-bc05qbss.js";
+export {
+  BlackboxAttackSurfaceAgent
+};

package/build/blackboxPentest-0hwj49dr.js

@@ -0,0 +1,70 @@
+import {
+  EMPTY_SESSION_TOKEN_USAGE,
+  accumulateSessionTokens
+} from "./cli-9pbk8m32.js";
+import {
+  readExecutionMetrics,
+  runPentestWorkflow,
+  writeExecutionMetrics
+} from "./cli-2ar3m569.js";
+import"./cli-mmyn6wmb.js";
+import"./cli-6cq67y5m.js";
+import"./cli-7735d17s.js";
+import"./cli-whp0f8gp.js";
+import"./cli-12ky98ey.js";
+import"./cli-9fsre5pt.js";
+import"./cli-g0whajsq.js";
+import"./cli-kya26m6f.js";
+import"./cli-8mws7sa5.js";
+import"./cli-fw5r7pfj.js";
+import"./cli-c8131c4q.js";
+import"./cli-qwv4jsj2.js";
+import"./cli-jsw8vt43.js";
+import"./cli-avmhkjtv.js";
+import"./cli-j54qa6tm.js";
+import"./cli-54egv3xw.js";
+import"./cli-eaaqeve1.js";
+import"./cli-w51z9qjr.js";
+import"./cli-knd276ed.js";
+import"./cli-bc05qbss.js";
+
+// src/core/api/blackboxPentest.ts
+async function runPentestAgent(input) {
+  const persisted = readExecutionMetrics(input.session.rootPath)?.tokenUsage;
+  let tokenUsage = persisted ?? EMPTY_SESSION_TOKEN_USAGE;
+  const onStepFinish = async (event) => {
+    tokenUsage = accumulateSessionTokens(tokenUsage, event.usage ?? {});
+    await input.onStepFinish?.(event);
+  };
+  const onCacheMetrics = (metrics) => {
+    tokenUsage = accumulateSessionTokens(tokenUsage, {
+      cacheReadTokens: metrics.cacheReadInputTokens,
+      cacheWriteTokens: metrics.cacheCreationInputTokens
+    });
+    input.onCacheMetrics?.(metrics);
+  };
+  let result;
+  try {
+    result = await runPentestWorkflow({
+      ...input,
+      onStepFinish,
+      onCacheMetrics
+    });
+  } finally {
+    writeExecutionMetrics({
+      sessionRootPath: input.session.rootPath,
+      tokenUsage
+    });
+  }
+  const { findings, findingsPath, pocsPath, reportPath } = result;
+  console.log(`
+Found ${findings.length} vulnerabilities`);
+  console.log(`Findings: ${findingsPath}`);
+  console.log(`POCs: ${pocsPath}`);
+  if (reportPath)
+    console.log(`Report: ${reportPath}`);
+  return { findings, findingsPath, pocsPath, reportPath };
+}
+export {
+  runPentestAgent
+};

package/build/{cli-32z0017y.js → cli-12ky98ey.js}

@@ -1,10 +1,10 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-repbyhkk.js";
+} from "./cli-kya26m6f.js";
 import {
   init_dist,
   stepCountIs
-} from "./cli-tkc598ey.js";
+} from "./cli-qwv4jsj2.js";
 
 // src/core/agents/specialized/codeAgent/agent.ts
 init_dist();