pentesting 0.73.3 → 0.73.5

package/dist/{chunk-BKWCGMSV.js → chunk-ULP6TF2X.js}

@@ -53,6 +53,9 @@ import {
   getTorBrowserArgs,
   getUsedPorts,
   listBackgroundProcesses,
+  llmNodeCooldownPolicy,
+  llmNodeOutputParsing,
+  llmNodeSystemPrompt,
   promoteToShell,
   readFileContent,
   runCommand,
@@ -61,7 +64,7 @@ import {
   startBackgroundProcess,
   stopBackgroundProcess,
   writeFileContent
-} from "./chunk-UB7RW6LM.js";
+} from "./chunk-EIPVHHPI.js";
 import {
   DETECTION_PATTERNS,
   HEALTH_CONFIG,
@@ -74,11 +77,8 @@ import {
   SYSTEM_LIMITS,
   __require,
   getProcessEventLog,
-  llmNodeCooldownPolicy,
-  llmNodeOutputParsing,
-  llmNodeSystemPrompt,
   logEvent
-} from "./chunk-GLO6TOJN.js";
+} from "./chunk-I52SWXYV.js";
 
 // src/shared/utils/config/env.ts
 var ENV_KEYS = {
@@ -2887,7 +2887,7 @@ var CoreAgent = class _CoreAgent {
     );
     return { output: "", toolsExecuted, isCompleted: false };
   }
-  // ─── AgentController Methods for Dynamic YAML Pipeline ────────────────────
+  // ─── AgentController Methods for Dynamic Runtime Pipeline ─────────────────
   async runLLMInference(ctx, systemPrompt) {
     const iteration = ctx.memory.iteration || 0;
     const progress = ctx.memory.progress;
@@ -3438,14 +3438,28 @@ var shellTools = [
     ["process_id"],
     async (params) => {
       const processId = params.process_id;
+      const profile = params.profile;
       const result = await handleInteractAction(
         processId,
-        getShellCheckCommand(params.profile),
+        getShellCheckCommand(profile),
         params.wait_ms
       );
-      if (result.success && params.profile === "stability" && outputLooksStabilized(result.output)) {
+      if (result.success && profile === "stability") {
+        logEvent(processId, PROCESS_EVENTS.SHELL_STABILITY_CHECKED, "Shell stability probe executed by shell_check");
+      }
+      if (result.success && profile === "stability" && outputLooksStabilized(result.output)) {
         logEvent(processId, PROCESS_EVENTS.SHELL_STABILIZED, "Shell stability confirmed by shell_check");
       }
+      if (result.success && profile === "stability" && !outputLooksStabilized(result.output)) {
+        logEvent(
+          processId,
+          PROCESS_EVENTS.SHELL_STABILITY_INCOMPLETE,
+          "Shell stability probe did not confirm a stable PTY"
+        );
+      }
+      if (result.success && profile === "post") {
+        logEvent(processId, PROCESS_EVENTS.POST_EXPLOITATION_ACTIVITY, "Post-exploitation probe executed by shell_check");
+      }
       return result;
     }
   ),
@@ -3498,6 +3512,10 @@ var offensiveBoundedTools = [
     TOOL_NAMES.EXPLOIT_FOOTHOLD_CHECK,
     "Run a bounded foothold confirmation probe after an exploit chain appears to land access."
   ),
+  createBoundedCommandTool(
+    TOOL_NAMES.EXPLOIT_VECTOR_CHECK,
+    "Run a bounded exploit vector reachability or service confirmation probe before changing vectors."
+  ),
   createBoundedCommandTool(
     TOOL_NAMES.PWN_CRASH_REPRO,
     "Run a bounded pwn crash reproduction command from the preserved crash state."
@@ -11879,7 +11897,7 @@ After completion: record key loot/findings from the sub-agent output to canonica
         workerType: params["worker_type"],
         resumeTaskId: params["resume_task_id"]
       };
-      const { AgentTool } = await import("./agent-tool-JEFUBDZE.js");
+      const { AgentTool } = await import("./agent-tool-6JOB2JB6.js");
       const executor = new AgentTool(state, events, scopeGuard, approvalGate);
       const result = await executor.execute(input);
       state.recordDelegatedTask({
@@ -12027,6 +12045,9 @@ function hasEvent(processId, eventName) {
     (event) => event.processId === processId && event.event === eventName
   );
 }
+function getLatestEventTimestamp(processId, eventName) {
+  return getProcessEventLog().filter((event) => event.processId === processId && event.event === eventName).reduce((latest, event) => Math.max(latest, event.timestamp), 0);
+}
 function isPtyUpgradeCommand(detail) {
   return detail.includes("pty.spawn(") || detail.includes("import pty; pty.spawn(") || detail.includes("script -qc") || detail.includes("script -q /dev/null -c /bin/bash") || detail.includes("script /dev/null -c bash") || detail.includes("stty raw -echo") || detail.includes("export term=") || detail.includes("export shell=") || detail.includes("stty rows") || detail.includes("stty columns") || detail.includes("tty") || detail.includes("/usr/bin/expect -c") || detail.includes('exec "/bin/bash"');
 }
@@ -12039,6 +12060,11 @@ function isShellStabilized(stdout, commandDetails) {
 function isPostExploitationCommand(detail) {
   return detail.includes("sudo -l") || detail.includes("ip a") || detail.includes("ip route") || detail.includes("ps aux") || detail.includes("ss -tlnp") || detail.includes("netstat -tlnp") || detail.includes("env | grep") || detail.includes("find / -perm -4000") || detail.includes("getcap -r /") || detail.includes("cat /etc/os-release") || detail.includes("uname -a") || detail.includes("whoami && hostname");
 }
+function hasRecentEvent(processId, eventName) {
+  return getProcessEventLog().some(
+    (event) => event.processId === processId && event.event === eventName
+  );
+}
 function getShellSupervisorLifecycleSnapshot() {
   const processes = listBackgroundProcesses().filter(
     (process2) => process2.isRunning && (process2.role === PROCESS_ROLES.ACTIVE_SHELL || process2.role === PROCESS_ROLES.LISTENER)
@@ -12047,7 +12073,9 @@ function getShellSupervisorLifecycleSnapshot() {
   if (activeShell) {
     const output = getProcessOutput(activeShell.id);
     const commandDetails = getRecentCommandDetails(activeShell.id);
-    if (commandDetails.some(isPostExploitationCommand)) {
+    const lastStabilizedAt = getLatestEventTimestamp(activeShell.id, PROCESS_EVENTS.SHELL_STABILIZED);
+    const lastIncompleteAt = getLatestEventTimestamp(activeShell.id, PROCESS_EVENTS.SHELL_STABILITY_INCOMPLETE);
+    if (hasRecentEvent(activeShell.id, PROCESS_EVENTS.POST_EXPLOITATION_ACTIVITY) || commandDetails.some(isPostExploitationCommand)) {
       return {
         phase: "post_exploitation_active",
         activeShellId: activeShell.id,
@@ -12055,13 +12083,20 @@ function getShellSupervisorLifecycleSnapshot() {
       };
     }
     if (hasEvent(activeShell.id, PROCESS_EVENTS.SHELL_STABILIZED) || output && isShellStabilized(output.stdout, commandDetails)) {
+      if (lastIncompleteAt > lastStabilizedAt) {
+        return {
+          phase: "active_shell_stabilizing",
+          activeShellId: activeShell.id,
+          recommendation: `Active shell ${activeShell.id} lost stable PTY confirmation after the last probe. Re-run shell upgrade and verify TERM/TTY quality again before broad enumeration.`
+        };
+      }
       return {
         phase: "active_shell_stabilized",
         activeShellId: activeShell.id,
         recommendation: `Active shell ${activeShell.id} appears stabilized. Reuse it for controlled enumeration and follow-up operations.`
       };
     }
-    if (hasEvent(activeShell.id, PROCESS_EVENTS.SHELL_UPGRADE_ATTEMPTED) || commandDetails.some(isPtyUpgradeCommand)) {
+    if (hasEvent(activeShell.id, PROCESS_EVENTS.SHELL_UPGRADE_ATTEMPTED) || hasRecentEvent(activeShell.id, PROCESS_EVENTS.SHELL_STABILITY_INCOMPLETE) || hasRecentEvent(activeShell.id, PROCESS_EVENTS.SHELL_STABILITY_CHECKED) || commandDetails.some(isPtyUpgradeCommand)) {
       return {
         phase: "active_shell_stabilizing",
         activeShellId: activeShell.id,