pentesting 0.73.5 → 0.73.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +16 -2
- package/dist/{agent-tool-6JOB2JB6.js → agent-tool-EZF2ILH6.js} +3 -3
- package/dist/{chunk-EIPVHHPI.js → chunk-FJ7PENUK.js} +26 -5
- package/dist/chunk-KAUE3MSR.js +1144 -0
- package/dist/{chunk-ULP6TF2X.js → chunk-UIYY4RLA.js} +118 -33
- package/dist/main.js +3251 -2979
- package/dist/{persistence-EFKMGPYS.js → persistence-7LJFJXK5.js} +2 -2
- package/dist/{process-registry-BI7BKPHN.js → process-registry-7XV46TDC.js} +1 -1
- package/package.json +10 -8
- package/dist/chunk-I52SWXYV.js +0 -1122
package/README.md
CHANGED
|
@@ -38,6 +38,18 @@ Pentesting support tool. Can autonomously execute network penetration tests or a
|
|
|
38
38
|
|
|
39
39
|
Web search is included in the subscription — **no separate Search API key required**.
|
|
40
40
|
|
|
41
|
+
If you want the repository default start path, export your env vars locally and run:
|
|
42
|
+
|
|
43
|
+
```bash
|
|
44
|
+
export PENTEST_API_KEY="your_z_ai_key"
|
|
45
|
+
export PENTEST_BASE_URL="https://api.z.ai/api/anthropic"
|
|
46
|
+
export PENTEST_MODEL="glm-4.7"
|
|
47
|
+
npm run start
|
|
48
|
+
```
|
|
49
|
+
|
|
50
|
+
`npm run start -- -t 10.10.10.5` passes CLI arguments through to the container entrypoint.
|
|
51
|
+
Use `npm run start:local` only if you explicitly want the non-container Node runtime.
|
|
52
|
+
|
|
41
53
|
```bash
|
|
42
54
|
docker run -it --rm \
|
|
43
55
|
-e PENTEST_API_KEY="your_z_ai_key" \
|
|
@@ -94,8 +106,10 @@ npm run verify
|
|
|
94
106
|
npm run verify:docker
|
|
95
107
|
```
|
|
96
108
|
|
|
97
|
-
- `npm run
|
|
98
|
-
- `npm run
|
|
109
|
+
- `npm run verify` now runs typecheck, tests, and build.
|
|
110
|
+
- `npm run verify:docker` builds the image and launches the Docker TUI path through `test.sh`.
|
|
111
|
+
- `npm run check` prunes Docker state, runs tests and build, rebuilds the local image, and then launches the Docker TUI path.
|
|
112
|
+
- `npm run check:clean` runs `npm run check:ci` after an explicit `docker system prune -af --volumes`.
|
|
99
113
|
|
|
100
114
|
---
|
|
101
115
|
|
|
@@ -5,7 +5,7 @@ import {
|
|
|
5
5
|
createContextExtractor,
|
|
6
6
|
getLLMClient,
|
|
7
7
|
getShellSupervisorLifecycleSnapshot
|
|
8
|
-
} from "./chunk-
|
|
8
|
+
} from "./chunk-UIYY4RLA.js";
|
|
9
9
|
import {
|
|
10
10
|
AGENT_ROLES,
|
|
11
11
|
EVENT_TYPES,
|
|
@@ -13,14 +13,14 @@ import {
|
|
|
13
13
|
TOOL_NAMES,
|
|
14
14
|
getProcessOutput,
|
|
15
15
|
listBackgroundProcesses
|
|
16
|
-
} from "./chunk-
|
|
16
|
+
} from "./chunk-FJ7PENUK.js";
|
|
17
17
|
import {
|
|
18
18
|
DETECTION_PATTERNS,
|
|
19
19
|
PROCESS_EVENTS,
|
|
20
20
|
PROCESS_ROLES,
|
|
21
21
|
getActiveProcessSummary,
|
|
22
22
|
getProcessEventLog
|
|
23
|
-
} from "./chunk-
|
|
23
|
+
} from "./chunk-KAUE3MSR.js";
|
|
24
24
|
|
|
25
25
|
// src/engine/agent-tool/completion-box.ts
|
|
26
26
|
function createCompletionBox() {
|
|
@@ -19,7 +19,7 @@ import {
|
|
|
19
19
|
getRuntimeSectionOr,
|
|
20
20
|
logEvent,
|
|
21
21
|
setProcess
|
|
22
|
-
} from "./chunk-
|
|
22
|
+
} from "./chunk-KAUE3MSR.js";
|
|
23
23
|
|
|
24
24
|
// src/shared/constants/time/conversions.ts
|
|
25
25
|
var MS_PER_MINUTE = 6e4;
|
|
@@ -347,8 +347,7 @@ var INPUT_PROMPT_PATTERNS = [
|
|
|
347
347
|
];
|
|
348
348
|
|
|
349
349
|
// src/shared/constants/agent.ts
|
|
350
|
-
var
|
|
351
|
-
var APP_VERSION = "0.73.5";
|
|
350
|
+
var APP_VERSION = "0.73.7";
|
|
352
351
|
var APP_DESCRIPTION = "Autonomous Penetration Testing AI Agent";
|
|
353
352
|
var LLM_ROLES = {
|
|
354
353
|
SYSTEM: "system",
|
|
@@ -2799,7 +2798,7 @@ async function cleanupAllProcesses() {
|
|
|
2799
2798
|
cleanupDone = false;
|
|
2800
2799
|
return;
|
|
2801
2800
|
}
|
|
2802
|
-
const { getBackgroundProcessesMap: getBackgroundProcessesMap2 } = await import("./process-registry-
|
|
2801
|
+
const { getBackgroundProcessesMap: getBackgroundProcessesMap2 } = await import("./process-registry-7XV46TDC.js");
|
|
2803
2802
|
const backgroundProcesses = getBackgroundProcessesMap2();
|
|
2804
2803
|
terminateAllNatively(backgroundProcesses, "SIGTERM");
|
|
2805
2804
|
await new Promise((r) => setTimeout(r, SYSTEM_LIMITS.CLEANUP_BATCH_WAIT_MS));
|
|
@@ -3830,6 +3829,25 @@ var StateSerializer = class {
|
|
|
3830
3829
|
}
|
|
3831
3830
|
}
|
|
3832
3831
|
static formatDelegatedTasks(state3, lines) {
|
|
3832
|
+
const activeExecution = state3.getActiveDelegatedExecution();
|
|
3833
|
+
if (activeExecution) {
|
|
3834
|
+
const worker = activeExecution.workerType ? ` worker:${activeExecution.workerType}` : "";
|
|
3835
|
+
const resume = activeExecution.resumeTaskId ? ` resume:${activeExecution.resumeTaskId}` : "";
|
|
3836
|
+
lines.push(`Delegated Execution [running]: ${activeExecution.task}${worker}${resume}`);
|
|
3837
|
+
if (activeExecution.target) {
|
|
3838
|
+
lines.push(` target: ${activeExecution.target}`);
|
|
3839
|
+
}
|
|
3840
|
+
if (activeExecution.context) {
|
|
3841
|
+
lines.push(` context: ${activeExecution.context}`);
|
|
3842
|
+
}
|
|
3843
|
+
if (activeExecution.parentTaskId || activeExecution.rootTaskId) {
|
|
3844
|
+
const chainParts = [
|
|
3845
|
+
activeExecution.parentTaskId ? `parent:${activeExecution.parentTaskId}` : "",
|
|
3846
|
+
activeExecution.rootTaskId ? `root:${activeExecution.rootTaskId}` : ""
|
|
3847
|
+
].filter(Boolean);
|
|
3848
|
+
lines.push(` chain: ${chainParts.join(" ")}`);
|
|
3849
|
+
}
|
|
3850
|
+
}
|
|
3833
3851
|
const activeTasks = state3.getActiveDelegatedTasks();
|
|
3834
3852
|
if (activeTasks.length === 0) return;
|
|
3835
3853
|
lines.push(`Delegated Tasks (${activeTasks.length} active):`);
|
|
@@ -3994,6 +4012,7 @@ function saveState(state3) {
|
|
|
3994
4012
|
currentPhase: state3.getPhase(),
|
|
3995
4013
|
missionSummary: state3.getMissionSummary(),
|
|
3996
4014
|
missionChecklist: state3.getMissionChecklist(),
|
|
4015
|
+
activeDelegatedExecution: state3.getActiveDelegatedExecution(),
|
|
3997
4016
|
delegatedTasks: state3.getDelegatedTasks()
|
|
3998
4017
|
};
|
|
3999
4018
|
const sessionFile = join5(sessionsDir, FILE_PATTERNS.session());
|
|
@@ -4065,6 +4084,9 @@ function loadState(state3) {
|
|
|
4065
4084
|
if (snapshot.missionChecklist?.length > 0) {
|
|
4066
4085
|
state3.restoreMissionChecklist(snapshot.missionChecklist);
|
|
4067
4086
|
}
|
|
4087
|
+
if (snapshot.activeDelegatedExecution) {
|
|
4088
|
+
state3.restoreActiveDelegatedExecution(snapshot.activeDelegatedExecution);
|
|
4089
|
+
}
|
|
4068
4090
|
if (Array.isArray(snapshot.delegatedTasks)) {
|
|
4069
4091
|
for (const task of snapshot.delegatedTasks) {
|
|
4070
4092
|
state3.restoreDelegatedTask(task);
|
|
@@ -4132,7 +4154,6 @@ export {
|
|
|
4132
4154
|
LLM_ERROR_TYPES,
|
|
4133
4155
|
AGENT_LIMITS,
|
|
4134
4156
|
MEMORY_LIMITS,
|
|
4135
|
-
APP_NAME,
|
|
4136
4157
|
APP_VERSION,
|
|
4137
4158
|
APP_DESCRIPTION,
|
|
4138
4159
|
LLM_ROLES,
|