pentesting 0.12.13 → 0.14.1

package/dist/{skill-2AON6M2V.js → skill-NGH4KQUH.js}

@@ -1,5 +1,13 @@
+import {
+  PATHS
+} from "./chunk-5KIJPRTS.js";
 import "./chunk-3RG5ZIWI.js";
 
+// src/core/skill/skill.ts
+import { existsSync, readdirSync, readFileSync } from "fs";
+import { join } from "path";
+import { homedir } from "os";
+
 // src/core/skill/flow.ts
 var FlowError = class extends Error {
   constructor(message) {
@@ -7,12 +15,6 @@ var FlowError = class extends Error {
     this.name = "FlowError";
   }
 };
-var FlowParseError = class extends FlowError {
-  constructor(message) {
-    super(message);
-    this.name = "FlowParseError";
-  }
-};
 var FlowValidationError = class extends FlowError {
   constructor(message) {
     super(message);
@@ -196,9 +198,6 @@ var FlowExecutor = class {
 };
 
 // src/core/skill/skill.ts
-import { existsSync, readdirSync, readFileSync } from "fs";
-import { join } from "path";
-import { homedir } from "os";
 function getBuiltinSkillsDir() {
   return join(__dirname, "..", "..", "skills");
 }
@@ -206,14 +205,14 @@ function getUserSkillsDirCandidates() {
   return [
     join(homedir(), ".config", "agents", "skills"),
     join(homedir(), ".agents", "skills"),
-    join(homedir(), ".pentest", "skills"),
+    PATHS.SKILLS,
     join(homedir(), ".claude", "skills")
   ];
 }
 function getProjectSkillsDirCandidates(workDir) {
   return [
     join(workDir, ".agents", "skills"),
-    join(workDir, ".pentest", "skills"),
+    PATHS.SKILLS,
     join(workDir, ".claude", "skills")
   ];
 }
@@ -396,11 +395,208 @@ function getSkillManager(workDir) {
   }
   return skillManager;
 }
+
+// src/core/skill/skill-loader.ts
+import { promises as fs } from "fs";
+import path from "path";
+import { EventEmitter } from "events";
+var DEFAULT_CONFIG = {
+  skillDirs: [PATHS.SKILLS, PATHS.AGENT_SPECS],
+  filePatterns: ["*.md", "*.yaml", "*.yml"],
+  watchForChanges: false
+};
+function parseFrontmatter2(content) {
+  const match = content.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n([\s\S]*)$/);
+  if (!match) {
+    return { metadata: {}, body: content };
+  }
+  const yamlBlock = match[1];
+  const body = match[2];
+  const metadata = {};
+  for (const line of yamlBlock.split("\n")) {
+    const kvMatch = line.match(/^(\w[\w-]*)\s*:\s*(.*)$/);
+    if (kvMatch) {
+      const key = kvMatch[1].trim();
+      let value = kvMatch[2].trim();
+      if (typeof value === "string" && value.startsWith("[") && value.endsWith("]")) {
+        value = value.slice(1, -1).split(",").map((s) => s.trim().replace(/^['"]|['"]$/g, ""));
+      } else if (value === "true") value = true;
+      else if (value === "false") value = false;
+      else if (!isNaN(Number(value)) && value !== "") value = Number(value);
+      metadata[key] = value;
+    }
+    const listMatch = line.match(/^\s+-\s+(.+)$/);
+    if (listMatch) {
+      const keys = Object.keys(metadata);
+      const lastKey = keys[keys.length - 1];
+      if (lastKey) {
+        const existing = metadata[lastKey];
+        if (Array.isArray(existing)) {
+          existing.push(listMatch[1].trim());
+        } else {
+          metadata[lastKey] = [existing, listMatch[1].trim()].filter(Boolean);
+        }
+      }
+    }
+  }
+  return { metadata, body };
+}
+var SkillLoader = class extends EventEmitter {
+  config;
+  skills = /* @__PURE__ */ new Map();
+  loaded = false;
+  constructor(config = {}) {
+    super();
+    this.config = { ...DEFAULT_CONFIG, ...config };
+  }
+  /**
+   * Load all skills from configured directories
+   */
+  async loadAll() {
+    this.skills.clear();
+    let count = 0;
+    for (const dir of this.config.skillDirs) {
+      try {
+        const resolvedDir = path.resolve(dir);
+        const exists = await fs.access(resolvedDir).then(() => true).catch(() => false);
+        if (!exists) continue;
+        count += await this.loadFromDirectory(resolvedDir);
+      } catch {
+      }
+    }
+    this.loaded = true;
+    return count;
+  }
+  /**
+   * Load skills from a single directory (recursive)
+   */
+  async loadFromDirectory(dir) {
+    let count = 0;
+    try {
+      const entries = await fs.readdir(dir, { withFileTypes: true });
+      for (const entry of entries) {
+        const fullPath = path.join(dir, entry.name);
+        if (entry.isDirectory()) {
+          const skillFile = path.join(fullPath, "SKILL.md");
+          const hasSkillFile = await fs.access(skillFile).then(() => true).catch(() => false);
+          if (hasSkillFile) {
+            const skill = await this.loadSkillFile(skillFile);
+            if (skill) {
+              this.skills.set(skill.name, skill);
+              count++;
+            }
+          }
+          count += await this.loadFromDirectory(fullPath);
+        } else if (this.isSkillFile(entry.name)) {
+          const skill = await this.loadSkillFile(fullPath);
+          if (skill) {
+            this.skills.set(skill.name, skill);
+            count++;
+          }
+        }
+      }
+    } catch {
+    }
+    return count;
+  }
+  /**
+   * Load a single skill file
+   */
+  async loadSkillFile(filePath) {
+    try {
+      const content = await fs.readFile(filePath, "utf-8");
+      const { metadata, body } = parseFrontmatter2(content);
+      const name = String(metadata.name ?? path.basename(path.dirname(filePath)));
+      if (!name) return null;
+      const triggers = Array.isArray(metadata.triggers) ? metadata.triggers.map(String) : typeof metadata.triggers === "string" ? [metadata.triggers] : [];
+      const tools = Array.isArray(metadata.tools) ? metadata.tools.map(String) : typeof metadata.tools === "string" ? [metadata.tools] : [];
+      return {
+        name,
+        description: String(metadata.description ?? ""),
+        triggers,
+        tools,
+        phase: metadata.phase,
+        priority: metadata.priority,
+        instructions: body.trim(),
+        filePath,
+        metadata
+      };
+    } catch {
+      return null;
+    }
+  }
+  /**
+   * Check if filename matches skill patterns
+   */
+  isSkillFile(filename) {
+    return filename.endsWith(".md") || filename.endsWith(".yaml") || filename.endsWith(".yml");
+  }
+  /**
+   * Match user input against skill triggers
+   */
+  match(userInput) {
+    const input = userInput.toLowerCase();
+    const matches = [];
+    for (const [, skill] of this.skills) {
+      const matchedTriggers = [];
+      let score = 0;
+      for (const trigger of skill.triggers) {
+        if (input.includes(trigger.toLowerCase())) {
+          matchedTriggers.push(trigger);
+          score += trigger.length / input.length;
+        }
+      }
+      if (matchedTriggers.length > 0) {
+        matches.push({ skill, score: Math.min(1, score), matchedTriggers });
+      }
+    }
+    return matches.sort((a, b) => b.score - a.score);
+  }
+  /**
+   * Get a skill by name
+   */
+  get(name) {
+    return this.skills.get(name);
+  }
+  /**
+   * Get all loaded skills
+   */
+  getAll() {
+    return Array.from(this.skills.values());
+  }
+  /**
+   * Get skills by phase
+   */
+  getByPhase(phase) {
+    return this.getAll().filter((s) => s.phase === phase);
+  }
+  /**
+   * Check if skills are loaded
+   */
+  isLoaded() {
+    return this.loaded;
+  }
+  /**
+   * Get skill count
+   */
+  get count() {
+    return this.skills.size;
+  }
+  /**
+   * Format skills list for display
+   */
+  formatList() {
+    const skills = this.getAll();
+    if (skills.length === 0) return "No skills loaded";
+    return skills.map(
+      (s) => `\u{1F4E6} ${s.name}: ${s.description} (triggers: ${s.triggers.join(", ")})`
+    ).join("\n");
+  }
+};
 export {
   FlowError,
   FlowExecutor,
-  FlowParseError,
-  FlowValidationError,
+  SkillLoader,
   SkillManager,
   discoverSkills,
   discoverSkillsFromRoots,
@@ -411,6 +607,5 @@ export {
   parseFrontmatter,
   parseMermaidFlowchart,
   parseSkillText,
-  resolveSkillRoots,
-  validateFlow
+  resolveSkillRoots
 };

package/dist/{web-search-XQYEM24B.js → web-search-IOD4SUIR.js}

@@ -3,6 +3,7 @@ import {
   ctfResearch,
   deepSearch,
   fetchUrlContent,
+  recursiveSearch,
   searchADWriteups,
   searchBing,
   searchBrave,
@@ -17,14 +18,17 @@ import {
   searchWriteups,
   searchYahoo,
   securityResearch,
-  unifiedSearch
-} from "./chunk-AOJBE232.js";
+  unifiedSearch,
+  waybackSearch,
+  zeroDayResearch
+} from "./chunk-M2IFHZDV.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   closeBrowser,
   ctfResearch,
   deepSearch,
   fetchUrlContent,
+  recursiveSearch,
   searchADWriteups,
   searchBing,
   searchBrave,
@@ -39,5 +43,7 @@ export {
   searchWriteups,
   searchYahoo,
   securityResearch,
-  unifiedSearch
+  unifiedSearch,
+  waybackSearch,
+  zeroDayResearch
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pentesting",
-  "version": "0.12.13",
+  "version": "0.14.1",
   "description": "Autonomous Penetration Testing AI Agent",
   "type": "module",
   "main": "dist/index.js",
@@ -26,7 +26,7 @@
     "release:minor": "npm version minor && npm run build && npm publish",
     "release:major": "npm version major && npm run build && npm publish",
     "release": "npm run release:patch",
-    "publish:token": "npm config set //registry.npmjs.org/:_authToken=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 && npm run build && npm publish",
+    "publish:token": "npm config set //registry.npmjs.org/:_authToken=${NPM_TOKEN} && npm run build && npm publish",
     "release:token:patch": "npm version patch && npm run publish:token",
     "release:token:minor": "npm version minor && npm run publish:token",
     "release:token:major": "npm version major && npm run publish:token",
@@ -37,11 +37,11 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/agnusdei1207/pentesting.git"
+    "url": "git+https://github.com/agnusdei1207"
   },
-  "homepage": "https://github.com/agnusdei1207/pentesting#readme",
+  "homepage": "https://agnusdei.kr",
   "bugs": {
-    "url": "https://github.com/agnusdei1207/pentesting/issues"
+    "url": "https://github.com/agnusdei1207"
   },
   "keywords": [
     "penetration-testing",
@@ -91,4 +91,4 @@
     "typescript": "^5.7.3",
     "vitest": "^4.0.18"
   }
-}
+}

package/dist/auto-update-6CLBRLE3.js

@@ -1,24 +0,0 @@
-import {
-  checkForUpdate,
-  checkForUpdateAsync,
-  compareSemver,
-  doUpdate,
-  fetchLatestVersion,
-  formatUpdateNotification,
-  readVersionCache,
-  semverTuple,
-  writeVersionCache
-} from "./chunk-5IKQY4A4.js";
-import "./chunk-6IXHQS2A.js";
-import "./chunk-3RG5ZIWI.js";
-export {
-  checkForUpdate,
-  checkForUpdateAsync,
-  compareSemver,
-  doUpdate,
-  fetchLatestVersion,
-  formatUpdateNotification,
-  readVersionCache,
-  semverTuple,
-  writeVersionCache
-};

package/dist/chunk-5IKQY4A4.js

@@ -1,134 +0,0 @@
-import {
-  APP_NAME,
-  APP_VERSION
-} from "./chunk-6IXHQS2A.js";
-
-// src/core/update/auto-update.ts
-import { execSync } from "child_process";
-import { existsSync, readFileSync, writeFileSync, mkdirSync } from "fs";
-import { join } from "path";
-import { homedir } from "os";
-var UPDATE_CHECK_INTERVAL = 24 * 60 * 60 * 1e3;
-var VERSION_CACHE_FILE = join(homedir(), ".pentest", "latest_version.json");
-function semverTuple(version) {
-  const match = version.match(/^(\d+)\.(\d+)\.(\d+)/);
-  if (!match) return [0, 0, 0];
-  return [parseInt(match[1]), parseInt(match[2]), parseInt(match[3])];
-}
-function compareSemver(a, b) {
-  const [a1, a2, a3] = semverTuple(a);
-  const [b1, b2, b3] = semverTuple(b);
-  if (a1 !== b1) return a1 < b1 ? -1 : 1;
-  if (a2 !== b2) return a2 < b2 ? -1 : 1;
-  if (a3 !== b3) return a3 < b3 ? -1 : 1;
-  return 0;
-}
-function readVersionCache() {
-  try {
-    if (!existsSync(VERSION_CACHE_FILE)) return null;
-    const data = JSON.parse(readFileSync(VERSION_CACHE_FILE, "utf-8"));
-    return data;
-  } catch {
-    return null;
-  }
-}
-function writeVersionCache(info) {
-  try {
-    const dir = join(homedir(), ".pentest");
-    if (!existsSync(dir)) {
-      mkdirSync(dir, { recursive: true });
-    }
-    writeFileSync(VERSION_CACHE_FILE, JSON.stringify(info, null, 2));
-  } catch {
-  }
-}
-function fetchLatestVersion(packageName = APP_NAME) {
-  try {
-    const output = execSync(`npm view ${packageName} version`, {
-      encoding: "utf-8",
-      timeout: 1e4,
-      stdio: ["pipe", "pipe", "pipe"]
-    });
-    return output.trim();
-  } catch {
-    return null;
-  }
-}
-function checkForUpdate(forceCheck = false) {
-  const currentVersion = APP_VERSION;
-  const cached = readVersionCache();
-  const now = Date.now();
-  if (!forceCheck && cached && now - cached.checkedAt < UPDATE_CHECK_INTERVAL) {
-    const hasUpdate2 = compareSemver(cached.version, currentVersion) > 0;
-    return {
-      hasUpdate: hasUpdate2,
-      currentVersion,
-      latestVersion: cached.version
-    };
-  }
-  const latestVersion = fetchLatestVersion();
-  if (!latestVersion) {
-    return {
-      hasUpdate: false,
-      currentVersion,
-      latestVersion: null,
-      error: "Failed to fetch latest version"
-    };
-  }
-  writeVersionCache({
-    version: latestVersion,
-    checkedAt: now
-  });
-  const hasUpdate = compareSemver(latestVersion, currentVersion) > 0;
-  return {
-    hasUpdate,
-    currentVersion,
-    latestVersion
-  };
-}
-async function checkForUpdateAsync() {
-  return new Promise((resolve) => {
-    setImmediate(() => {
-      resolve(checkForUpdate());
-    });
-  });
-}
-function formatUpdateNotification(result) {
-  if (!result.hasUpdate || !result.latestVersion) return null;
-  return `
-\u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510
-\u2502  \u{1F195} A new version of ${APP_NAME} is available!   \u2502
-\u2502                                                \u2502
-\u2502  Current: ${result.currentVersion.padEnd(10)}  Latest: ${result.latestVersion.padEnd(10)}  \u2502
-\u2502                                                \u2502
-\u2502  Run: npm update -g ${APP_NAME}                  \u2502
-\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518
-`.trim();
-}
-function doUpdate() {
-  try {
-    execSync(`npm update -g ${APP_NAME}`, {
-      encoding: "utf-8",
-      timeout: 12e4,
-      stdio: "inherit"
-    });
-    return { success: true, message: `Updated ${APP_NAME} successfully!` };
-  } catch (e) {
-    return {
-      success: false,
-      message: `Failed to update: ${e instanceof Error ? e.message : String(e)}`
-    };
-  }
-}
-
-export {
-  semverTuple,
-  compareSemver,
-  readVersionCache,
-  writeVersionCache,
-  fetchLatestVersion,
-  checkForUpdate,
-  checkForUpdateAsync,
-  formatUpdateNotification,
-  doUpdate
-};

package/dist/replay-ABCV4F64.js

@@ -1,130 +0,0 @@
-import {
-  __require
-} from "./chunk-3RG5ZIWI.js";
-
-// src/core/replay/session-replay.ts
-import { existsSync, readFileSync } from "fs";
-function parseWireFile(filePath) {
-  if (!existsSync(filePath)) return [];
-  const events = [];
-  const content = readFileSync(filePath, "utf-8");
-  for (const line of content.split("\n")) {
-    if (!line.trim()) continue;
-    try {
-      const record = JSON.parse(line);
-      events.push({
-        type: record.message.type,
-        timestamp: record.message.timestamp,
-        data: record.message.data
-      });
-    } catch {
-    }
-  }
-  return events;
-}
-function getReplaySummary(events) {
-  if (events.length === 0) {
-    return { events, duration: 0, toolCalls: 0, findings: 0 };
-  }
-  const firstTs = events[0].timestamp;
-  const lastTs = events[events.length - 1].timestamp;
-  const duration = (lastTs - firstTs) / 1e3;
-  let toolCalls = 0;
-  let findings = 0;
-  for (const event of events) {
-    if (event.type === "tool_call") toolCalls++;
-    if (event.type === "status_update") {
-      const data = event.data;
-      if (data.event === "finding") findings++;
-    }
-  }
-  return { events, duration, toolCalls, findings };
-}
-function formatReplayEvent(event) {
-  const time = new Date(event.timestamp).toLocaleTimeString();
-  switch (event.type) {
-    case "turn_begin":
-      return `[${time}] \u{1F504} Turn started`;
-    case "step_begin": {
-      const data = event.data;
-      return `[${time}] \u{1F4CD} Step ${data.stepIndex + 1}`;
-    }
-    case "content_part": {
-      const data = event.data;
-      const preview = data.content.slice(0, 50).replace(/\n/g, " ");
-      const icon = data.isThinking ? "\u{1F4AD}" : "\u{1F4AC}";
-      return `[${time}] ${icon} ${preview}...`;
-    }
-    case "tool_call": {
-      const data = event.data;
-      return `[${time}] Tool: ${data.toolName}`;
-    }
-    case "tool_result": {
-      const data = event.data;
-      const icon = data.isError ? "\u2717" : "\u2713";
-      return `[${time}] ${icon} Tool result`;
-    }
-    case "status_update": {
-      const data = event.data;
-      if (data.event === "finding") {
-        return `[${time}] \u{1F3AF} Finding: ${data.title}`;
-      }
-      if (data.event === "phase_change") {
-        return `[${time}] \u{1F4CD} Phase: ${data.phase}`;
-      }
-      return `[${time}] \u{1F4CA} ${data.event}`;
-    }
-    case "turn_end":
-      return `[${time}] \u2713 Turn complete`;
-    default:
-      return `[${time}] ${event.type}`;
-  }
-}
-async function replaySession(wirePath, options = {}) {
-  const events = parseWireFile(wirePath);
-  const summary = getReplaySummary(events);
-  if (events.length === 0) return summary;
-  const speed = options.speed ?? 0;
-  let lastTs = events[0].timestamp;
-  for (const event of events) {
-    const formatted = formatReplayEvent(event);
-    if (options.onEvent) {
-      options.onEvent(event, formatted);
-    }
-    if (speed > 0) {
-      const delay = (event.timestamp - lastTs) / speed;
-      if (delay > 0 && delay < 5e3) {
-        await new Promise((r) => setTimeout(r, delay));
-      }
-      lastTs = event.timestamp;
-    }
-  }
-  return summary;
-}
-function findRecentWireFiles(sessionDir, limit = 10) {
-  const { readdirSync, statSync } = __require("fs");
-  const { join } = __require("path");
-  if (!existsSync(sessionDir)) return [];
-  const files = [];
-  try {
-    const entries = readdirSync(sessionDir, { withFileTypes: true });
-    for (const entry of entries) {
-      if (entry.isFile() && entry.name.endsWith(".jsonl")) {
-        const filePath = join(sessionDir, entry.name);
-        const stat = statSync(filePath);
-        files.push({ path: filePath, mtime: stat.mtimeMs });
-      }
-    }
-  } catch {
-    return [];
-  }
-  files.sort((a, b) => b.mtime - a.mtime);
-  return files.slice(0, limit).map((f) => f.path);
-}
-export {
-  findRecentWireFiles,
-  formatReplayEvent,
-  getReplaySummary,
-  parseWireFile,
-  replaySession
-};

package/dist/update-34NDFWS3.js

@@ -1,24 +0,0 @@
-import {
-  checkForUpdate,
-  checkForUpdateAsync,
-  compareSemver,
-  doUpdate,
-  fetchLatestVersion,
-  formatUpdateNotification,
-  readVersionCache,
-  semverTuple,
-  writeVersionCache
-} from "./chunk-5IKQY4A4.js";
-import "./chunk-6IXHQS2A.js";
-import "./chunk-3RG5ZIWI.js";
-export {
-  checkForUpdate,
-  checkForUpdateAsync,
-  compareSemver,
-  doUpdate,
-  fetchLatestVersion,
-  formatUpdateNotification,
-  readVersionCache,
-  semverTuple,
-  writeVersionCache
-};