@vulcn/engine 0.3.0 → 0.3.2

package/CHANGELOG.md

@@ -1,5 +1,70 @@
 # Changelog
 
+## 0.3.2
+
+### Patch Changes
+
+- 51d69b7: ### Auto-Crawl: Automated Form Discovery & Session Generation
+
+  Adds a new **auto-crawl** capability to the browser driver — automatically discovers injectable forms, inputs, and submit buttons on a target URL, then generates ready-to-run `Session[]` objects. This replaces the need to manually record sessions for basic form testing.
+
+  #### `@vulcn/engine`
+  - **`CrawlOptions` type** — new interface for crawl configuration (`maxDepth`, `maxPages`, `pageTimeout`, `sameOrigin`, `onPageCrawled` callback)
+  - **`RecorderDriver.crawl()`** — optional method on the recorder interface, so only drivers that support auto-discovery need to implement it
+  - **`DriverManager.crawl()`** — new top-level method that dispatches to the driver's crawl implementation, with clear errors when a driver doesn't support it
+  - **Test coverage** — 4 new tests for the crawl flow (success, arg passthrough, missing driver, unsupported driver), coverage at 62.88%
+
+  #### `@vulcn/driver-browser`
+  - **`BrowserCrawler`** — new module (`crawler.ts`) that performs BFS-based crawling using Playwright:
+    - Discovers explicit `<form>` elements with their inputs and submit buttons
+    - Discovers standalone inputs not inside a `<form>` (common in SPAs)
+    - Identifies injectable text-like input types (text, search, url, email, tel, password, textarea)
+    - Finds submit triggers (submit buttons, untyped buttons, or falls back to Enter keypress)
+    - Follows same-origin links with configurable depth control
+    - Generates proper `navigate → input → submit` step sequences per form
+  - **`recorder.crawl()`** — wired into the browser driver's recorder interface
+  - **Exported** — `crawlAndBuildSessions` available for direct programmatic use
+
+  #### Architecture
+  - Removed standalone `@vulcn/crawler` package — crawler is now a core part of `@vulcn/driver-browser`, consistent with the driver-based architecture
+  - Cleaned up `pnpm-workspace.yaml` to remove the deleted crawler entry
+
+## 0.3.1
+
+### Patch Changes
+
+- c62a3dc: ### `@vulcn/plugin-report` — New Package
+
+  Introducing the **Report Generation Plugin** — generate professional security reports at the end of every `vulcn run`.
+  - **HTML**: Modern dark-themed dashboard with risk gauge, severity breakdown bars, expandable finding cards, Vulcn branding, Inter + JetBrains Mono typography, and print-friendly CSS
+  - **JSON**: Machine-readable structured output for CI/CD pipelines — includes severity counts, risk score, vuln types, affected URLs
+  - **YAML**: Human-readable YAML with descriptive header comment — same data model as JSON
+  - Uses the `onRunEnd` plugin hook to intercept results after execution completes
+  - Exports `generateHtml`, `generateJson`, `generateYaml` for programmatic use
+
+  ### `@vulcn/engine`
+  - **Plugin lifecycle hooks**: `DriverManager.execute()` now invokes `onRunStart` and `onRunEnd` plugin hooks around the driver runner, enabling plugins like the report generator to intercept and process results
+  - Removed legacy `Runner` and `Recorder` exports — all execution now goes through `DriverManager`
+  - Updated package description and SEO keywords for npm discoverability
+
+  ### `vulcn` (CLI)
+  - Added `--report <format>` flag (`html`, `json`, `yaml`, `all`) to generate security reports after test runs
+  - Added `--report-output <dir>` flag to specify output directory for generated reports
+  - Report plugin is auto-loaded when `--report` flag is used
+  - Updated package description and SEO keywords — positioned as a modern, fast alternative to legacy security scanners
+
+  ### `@vulcn/driver-browser`
+  - Updated package description, keywords, homepage, and bugs URL for npm discoverability
+
+  ### `@vulcn/plugin-payloads`
+  - Updated package description, keywords, homepage, and bugs URL for npm discoverability
+
+  ### `@vulcn/plugin-detect-xss`
+  - Updated package description, keywords, homepage, and bugs URL for npm discoverability
+
+  ### `@vulcn/plugin-detect-reflection`
+  - Updated package description, keywords, homepage, and bugs URL for npm discoverability
+
 ## 0.3.0
 
 ### Minor Changes