astrarecon 0.1.0__tar.gz

astrarecon-0.1.0/.gitignore

@@ -0,0 +1,42 @@
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[cod]
+*$py.class
+
+# Distribution / packaging
+dist/
+build/
+*.egg-info/
+*.egg
+.eggs/
+
+# Virtual environments
+.venv/
+.venv*/
+venv/
+ENV/
+env/
+
+# Unit test / coverage
+.pytest_cache/
+.coverage
+.coverage.*
+htmlcov/
+nosetests.xml
+coverage.xml
+
+# IDEs & Editors
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+
+# Operating System
+.DS_Store
+Thumbs.db
+
+# AstraRecon Runtime Logs & Temp
+*.log
+*.tmp
+tmp/

astrarecon-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 LavSarkari
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

astrarecon-0.1.0/PKG-INFO

@@ -0,0 +1,266 @@
+Metadata-Version: 2.5
+Name: astrarecon
+Version: 0.1.0
+Summary: Linux-first, DAG-based recon orchestration engine with persistent sessions and Content-Addressed Storage.
+Project-URL: Homepage, https://github.com/LavSarkari/AstraRecon
+Project-URL: Documentation, https://github.com/LavSarkari/AstraRecon#readme
+Project-URL: Repository, https://github.com/LavSarkari/AstraRecon
+Project-URL: Issues, https://github.com/LavSarkari/AstraRecon/issues
+Author: LavSarkari
+License: MIT
+License-File: LICENSE
+Keywords: amass,bugbounty,dag,httpx,nuclei,orchestration,osint,recon,reconnaissance,security,subfinder
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Information Technology
+Classifier: Intended Audience :: System Administrators
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: MacOS
+Classifier: Operating System :: Microsoft :: Windows
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Security
+Requires-Python: >=3.11
+Requires-Dist: pydantic>=2.7.0
+Requires-Dist: pyyaml>=6.0.1
+Requires-Dist: rich>=13.7.0
+Requires-Dist: typer>=0.12.0
+Provides-Extra: dev
+Requires-Dist: build>=1.2.0; extra == 'dev'
+Requires-Dist: pytest-asyncio>=0.23.0; extra == 'dev'
+Requires-Dist: pytest>=8.0.0; extra == 'dev'
+Requires-Dist: twine>=5.0.0; extra == 'dev'
+Description-Content-Type: text/markdown
+
+<p align="center">
+  <img src="logo.png" width="360" alt="AstraRecon Logo" />
+</p>
+
+<h1 align="center">ASTRARECON</h1>
+<p align="center">
+  <strong>Visual Recon Workflow Engine</strong><br>
+  <em>Linux-first, DAG-orchestrated reconnaissance engine with persistent sessions, Content-Addressed Storage, and AI-ready exports.</em>
+</p>
+
+<p align="center">
+  <a href="https://pypi.org/project/astrarecon/"><img src="https://img.shields.io/pypi/v/astrarecon?color=1DA1FF&style=flat-square" alt="PyPI Version"/></a>
+  <img src="https://img.shields.io/badge/Python-3.11%2B-blue?style=flat-square" alt="Python 3.11+"/>
+  <img src="https://img.shields.io/badge/Platform-Linux%20%7C%20WSL-1DA1FF?style=flat-square" alt="Linux | WSL"/>
+  <img src="https://img.shields.io/badge/Architecture-DAG%20%28Kahn's%20Sort%29-22C55E?style=flat-square" alt="DAG Architecture"/>
+  <img src="https://img.shields.io/badge/UI-Rich%20Live-1DA1FF?style=flat-square" alt="Rich Live UI"/>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-F59E0B?style=flat-square" alt="License: MIT"/></a>
+</p>
+
+---
+
+## Overview
+
+**AstraRecon** is not just another wrapper around security binaries. It is an autonomous, graph-based **recon workflow engine** designed for modern security engineers, red teams, and bug hunters. 
+
+Built with the speed of **uv**, the minimalism of **GitHub CLI (`gh`)**, and the ergonomics of **pnpm**, AstraRecon executes complex fan-in and fan-out reconnaissance pipelines without terminal spam, state loss, or redundant re-execution.
+
+---
+
+## Key Highlights
+
+- **DAG-Driven Pipeline Execution:** Schedulable nodes execute concurrently using Kahn's topological sort with automatic cycle rejection and dynamic ready-frontier dispatch.
+- **Minimal, Persistent CLI UX:** Zero terminal scroll spam. In-place live updating panel powered by Python `rich.Live` that refreshes in a single rounded viewport.
+- **Content-Addressed Storage (CAS):** SHA256-indexed blob store (`~/.astrarecon/cache/`) prevents expensive re-scans by verifying tool version, configuration, and input hash.
+- **Crash-Resilient State Machine:** Every node transition is checkpointed to atomic disk journals. Resume interrupted scans instantly with `astrarecon scan <target> --resume <session_id>`.
+- **Plug-and-Play Script Support:** Seamlessly chain Go binaries (`subfinder`, `httpx`), Python tools (`LinkFinder`), and custom shell scripts (`subenum.sh`) using declarative YAML manifests.
+- **AI Distillation Engine:** Automatically compresses gigabytes of recon outputs into token-budgeted prompt bundles (`context.json`, `findings.json`, `js_manifest.json`, `prompt.md`) ready for LLM triage.
+
+---
+
+## Interface Tour
+
+### 1. Startup Screen (`astrarecon`)
+When launched without arguments, AstraRecon queries system state and renders a clean, rounded telemetry card:
+
+```text
+╭───────────────────────────────────────────────────────────────╮
+│                                                               │
+│   ASTRARECON                                                  │
+│   Visual Recon Workflow Engine                                │
+│   ────────────────────────────────────────────────────────    │
+│   Engine          v0.1.0                                      │
+│   Platform        Linux • WSL (x86_64)                        │
+│   Sessions        8 recorded (• Last: example.com (12m ago))  │
+│   Cache           14.2 MB (CAS)                               │
+│   Plugins         9 ready • 3 missing                         │
+│   ────────────────────────────────────────────────────────    │
+│   Installed Plugins                                           │
+│                                                               │
+│   ✓ subfinder               ✓ dnsx                            │
+│   ✓ assetfinder             ✓ httpx                           │
+│   ✓ amass                   ✓ naabu                           │
+│   ✓ katana                  ○ linkfinder                      │
+│   ✓ nuclei                  ✓ dalfox                          │
+│   ✓ gau                     ✓ waybackurls                     │
+│   ────────────────────────────────────────────────────────    │
+│   Quick Commands                                              │
+│                                                               │
+│   astrarecon scan example.com                                 │
+│   astrarecon doctor                                           │
+│   astrarecon plugins list                                     │
+│   astrarecon sessions list                                    │
+│                                                               │
+│   Type 'astrarecon scan example.com' to begin.                │
+│                                                               │
+╰───────────────────────────────────────────────────────────────╯
+```
+
+### 2. Live Scan Dashboard (`astrarecon scan <target>`)
+During active execution, the terminal switches to an in-place live panel with real-time status icons, timers, and artifact yield counters:
+
+```text
+╭─ ASTRARECON ─ example.com [00:18] ─────────────────────────╮
+│                                                            │
+│  ✔  Target Input       Success         0.0s       1 items  │
+│  ✔  Scope Guard        Success         0.0s       1 items  │
+│  ✔  Subfinder          Success         4.2s     142 items  │
+│  ✔  Assetfinder        Success         2.8s      88 items  │
+│  ✔  Amass              Success         7.4s     194 items  │
+│  ✔  Union Dedupe       Success         0.1s     216 items  │
+│  ▶  DNSX               Running         3.1s                │
+│  ●  HTTPX              Waiting         --                  │
+│                                                            │
+╰────────────────────────────────────────────────────────────╯
+```
+
+### 3. Post-Scan Completion Summary
+Upon graph completion, AstraRecon renders an audit card detailing discovered attack surfaces and the AI distillation bundle path:
+
+```text
+╭──────────────────────────────────────────────────────────────╮
+│                                                              │
+│   ✔ Scan Completed for example.com in 00m 24s                │
+│   ──────────────────────────────────────────────────         │
+│   Session ID          2026-09-26-001-example-com             │
+│   Subdomains          216                                    │
+│   Live HTTP Hosts     48                                     │
+│   Vulnerabilities     3                                      │
+│   AI Export Bundle    ~/.astrarecon/sessions/.../exports     │
+│                                                              │
+│   Run 'astrarecon export ai 2026-09-26-001-example-com' to   │
+│   inspect prompt bundle.                                     │
+│                                                              │
+╰──────────────────────────────────────────────────────────────╯
+```
+
+---
+
+## Supported Ecosystem Plugins
+
+AstraRecon ships with 13 out-of-the-box plugin manifests covering the complete recon lifecycle:
+
+| Stage | Plugin | Binary | Description |
+| :--- | :--- | :--- | :--- |
+| **Subdomain Enumeration** | `subfinder` | `subfinder` | Fast passive subdomain enumeration |
+| | `assetfinder` | `assetfinder` | Passive asset finding via cert archives |
+| | `amass` | `amass` | Deep network mapping & recursive DNS discovery |
+| | `subenum` | `subenum` | Automated subdomain harvesting shell script |
+| **DNS Resolution** | `dnsx` | `dnsx` | Multi-resolver DNS probing & wildcard validation |
+| **HTTP Probing** | `httpx` | `httpx` | Live web server probing, title & tech detection |
+| **Port Scanning** | `naabu` | `naabu` | Fast TCP SYN/connect port scanner |
+| **Historical & Crawling** | `gau` | `gau` | Wayback Machine, AlienVault & CommonCrawl URLs |
+| | `waybackurls` | `waybackurls` | Historical endpoints from archive.org |
+| | `katana` | `katana` | Headless, active crawler & JavaScript parser |
+| **JS Endpoint Discovery** | `linkfinder` | `linkfinder` | Python AST endpoint extraction from `.js` files |
+| **Vulnerability Scanning**| `nuclei` | `nuclei` | Fast template-based vulnerability assessment |
+| **XSS Parameter Testing** | `dalfox` | `dalfox` | Parameter analysis & DOM/reflected XSS testing |
+
+---
+
+## Adding Custom Scripts
+
+You can turn any bash script, python tool, or binary into a first-class AstraRecon node in seconds. Custom plugins placed in `~/.astrarecon/plugins/<name>/plugin.yaml` are auto-discovered immediately.
+
+---
+
+## Installation & Setup
+
+### Requirements
+- Python 3.11+
+- Linux (Ubuntu, Debian, Kali, Arch) or WSL2 (Windows Subsystem for Linux)
+
+### Option 1: Install from PyPI
+```bash
+pip install astrarecon
+```
+
+### Option 2: Install from Source (Recommended for Contributors)
+```bash
+# Clone the repository
+git clone https://github.com/LavSarkari/AstraRecon.git
+cd AstraRecon
+
+# Create virtual environment and install in editable mode
+python -m venv .venv
+source .venv/bin/activate  # Or .venv\Scripts\activate on Windows
+pip install -e ".[dev]"
+```
+
+### Automatic Tool Remediation
+AstraRecon can automatically download and compile all missing external security binaries (`subfinder`, `nuclei`, `httpx`, `subenum`, etc.) directly into `~/.astrarecon/bin/`:
+```bash
+astrarecon doctor --install-missing
+```
+
+---
+
+## Quick Start
+
+### 1. Launch a Reconnaissance Pipeline
+```bash
+astrarecon scan example.com
+```
+
+### 2. Resume an Interrupted Scan
+If a scan was stopped via `Ctrl+C` or a network glitch, resume immediately without re-running finished nodes:
+```bash
+astrarecon scan example.com --resume 2026-09-26-001-example-com
+```
+
+### 3. Continuous Delta Recon
+Scan only newly discovered assets compared to previous baselines:
+```bash
+astrarecon scan example.com --diff-only
+```
+
+### 4. Inspect Plugin Ecosystem
+```bash
+astrarecon plugins list
+```
+
+### 5. Inspect CAS Storage
+```bash
+astrarecon cache stats
+```
+
+---
+
+## AI-Ready Export Bundle
+
+AstraRecon is purpose-built to feed frontier LLMs (Claude 3.5 Sonnet, Gemini 1.5 Pro, GPT-4o) without blowing token context budgets. Every scan automatically generates a structured export bundle under `<session_dir>/exports/`:
+
+- `context.json`: Target scope, CIDR ranges, root domains, and environmental fingerprint.
+- `findings.json`: Triaged vulnerabilities categorized by severity with reproducible `curl` commands.
+- `js_manifest.json`: Extracted endpoints, hardcoded tokens, and API routes discovered in JavaScript files.
+- `prompt.md`: A system prompt pre-populated with distilled attack surface data ready to copy-paste into your AI agent of choice.
+
+---
+
+## Documentation Index
+
+- [ARCHITECTURE.md](ARCHITECTURE.md) — Comprehensive technical architecture, DAG scheduler, Kahn's algorithm, process isolation, and CAS caching.
+- [SPECIFICATION.md](SPECIFICATION.md) — Declarative schemas, plugin manifest specification, workflow YAML syntax, and session state machines.
+- [ROADMAP.md](ROADMAP.md) — Development milestones, deliverables, and future horizons.
+
+---
+
+<p align="center">
+  <sub>Built with precision for bug bounty hunters, penetration testers, and offensive security engineers.</sub>
+</p>

astrarecon-0.1.0/README.md

@@ -0,0 +1,230 @@
+<p align="center">
+  <img src="logo.png" width="360" alt="AstraRecon Logo" />
+</p>
+
+<h1 align="center">ASTRARECON</h1>
+<p align="center">
+  <strong>Visual Recon Workflow Engine</strong><br>
+  <em>Linux-first, DAG-orchestrated reconnaissance engine with persistent sessions, Content-Addressed Storage, and AI-ready exports.</em>
+</p>
+
+<p align="center">
+  <a href="https://pypi.org/project/astrarecon/"><img src="https://img.shields.io/pypi/v/astrarecon?color=1DA1FF&style=flat-square" alt="PyPI Version"/></a>
+  <img src="https://img.shields.io/badge/Python-3.11%2B-blue?style=flat-square" alt="Python 3.11+"/>
+  <img src="https://img.shields.io/badge/Platform-Linux%20%7C%20WSL-1DA1FF?style=flat-square" alt="Linux | WSL"/>
+  <img src="https://img.shields.io/badge/Architecture-DAG%20%28Kahn's%20Sort%29-22C55E?style=flat-square" alt="DAG Architecture"/>
+  <img src="https://img.shields.io/badge/UI-Rich%20Live-1DA1FF?style=flat-square" alt="Rich Live UI"/>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-F59E0B?style=flat-square" alt="License: MIT"/></a>
+</p>
+
+---
+
+## Overview
+
+**AstraRecon** is not just another wrapper around security binaries. It is an autonomous, graph-based **recon workflow engine** designed for modern security engineers, red teams, and bug hunters. 
+
+Built with the speed of **uv**, the minimalism of **GitHub CLI (`gh`)**, and the ergonomics of **pnpm**, AstraRecon executes complex fan-in and fan-out reconnaissance pipelines without terminal spam, state loss, or redundant re-execution.
+
+---
+
+## Key Highlights
+
+- **DAG-Driven Pipeline Execution:** Schedulable nodes execute concurrently using Kahn's topological sort with automatic cycle rejection and dynamic ready-frontier dispatch.
+- **Minimal, Persistent CLI UX:** Zero terminal scroll spam. In-place live updating panel powered by Python `rich.Live` that refreshes in a single rounded viewport.
+- **Content-Addressed Storage (CAS):** SHA256-indexed blob store (`~/.astrarecon/cache/`) prevents expensive re-scans by verifying tool version, configuration, and input hash.
+- **Crash-Resilient State Machine:** Every node transition is checkpointed to atomic disk journals. Resume interrupted scans instantly with `astrarecon scan <target> --resume <session_id>`.
+- **Plug-and-Play Script Support:** Seamlessly chain Go binaries (`subfinder`, `httpx`), Python tools (`LinkFinder`), and custom shell scripts (`subenum.sh`) using declarative YAML manifests.
+- **AI Distillation Engine:** Automatically compresses gigabytes of recon outputs into token-budgeted prompt bundles (`context.json`, `findings.json`, `js_manifest.json`, `prompt.md`) ready for LLM triage.
+
+---
+
+## Interface Tour
+
+### 1. Startup Screen (`astrarecon`)
+When launched without arguments, AstraRecon queries system state and renders a clean, rounded telemetry card:
+
+```text
+╭───────────────────────────────────────────────────────────────╮
+│                                                               │
+│   ASTRARECON                                                  │
+│   Visual Recon Workflow Engine                                │
+│   ────────────────────────────────────────────────────────    │
+│   Engine          v0.1.0                                      │
+│   Platform        Linux • WSL (x86_64)                        │
+│   Sessions        8 recorded (• Last: example.com (12m ago))  │
+│   Cache           14.2 MB (CAS)                               │
+│   Plugins         9 ready • 3 missing                         │
+│   ────────────────────────────────────────────────────────    │
+│   Installed Plugins                                           │
+│                                                               │
+│   ✓ subfinder               ✓ dnsx                            │
+│   ✓ assetfinder             ✓ httpx                           │
+│   ✓ amass                   ✓ naabu                           │
+│   ✓ katana                  ○ linkfinder                      │
+│   ✓ nuclei                  ✓ dalfox                          │
+│   ✓ gau                     ✓ waybackurls                     │
+│   ────────────────────────────────────────────────────────    │
+│   Quick Commands                                              │
+│                                                               │
+│   astrarecon scan example.com                                 │
+│   astrarecon doctor                                           │
+│   astrarecon plugins list                                     │
+│   astrarecon sessions list                                    │
+│                                                               │
+│   Type 'astrarecon scan example.com' to begin.                │
+│                                                               │
+╰───────────────────────────────────────────────────────────────╯
+```
+
+### 2. Live Scan Dashboard (`astrarecon scan <target>`)
+During active execution, the terminal switches to an in-place live panel with real-time status icons, timers, and artifact yield counters:
+
+```text
+╭─ ASTRARECON ─ example.com [00:18] ─────────────────────────╮
+│                                                            │
+│  ✔  Target Input       Success         0.0s       1 items  │
+│  ✔  Scope Guard        Success         0.0s       1 items  │
+│  ✔  Subfinder          Success         4.2s     142 items  │
+│  ✔  Assetfinder        Success         2.8s      88 items  │
+│  ✔  Amass              Success         7.4s     194 items  │
+│  ✔  Union Dedupe       Success         0.1s     216 items  │
+│  ▶  DNSX               Running         3.1s                │
+│  ●  HTTPX              Waiting         --                  │
+│                                                            │
+╰────────────────────────────────────────────────────────────╯
+```
+
+### 3. Post-Scan Completion Summary
+Upon graph completion, AstraRecon renders an audit card detailing discovered attack surfaces and the AI distillation bundle path:
+
+```text
+╭──────────────────────────────────────────────────────────────╮
+│                                                              │
+│   ✔ Scan Completed for example.com in 00m 24s                │
+│   ──────────────────────────────────────────────────         │
+│   Session ID          2026-09-26-001-example-com             │
+│   Subdomains          216                                    │
+│   Live HTTP Hosts     48                                     │
+│   Vulnerabilities     3                                      │
+│   AI Export Bundle    ~/.astrarecon/sessions/.../exports     │
+│                                                              │
+│   Run 'astrarecon export ai 2026-09-26-001-example-com' to   │
+│   inspect prompt bundle.                                     │
+│                                                              │
+╰──────────────────────────────────────────────────────────────╯
+```
+
+---
+
+## Supported Ecosystem Plugins
+
+AstraRecon ships with 13 out-of-the-box plugin manifests covering the complete recon lifecycle:
+
+| Stage | Plugin | Binary | Description |
+| :--- | :--- | :--- | :--- |
+| **Subdomain Enumeration** | `subfinder` | `subfinder` | Fast passive subdomain enumeration |
+| | `assetfinder` | `assetfinder` | Passive asset finding via cert archives |
+| | `amass` | `amass` | Deep network mapping & recursive DNS discovery |
+| | `subenum` | `subenum` | Automated subdomain harvesting shell script |
+| **DNS Resolution** | `dnsx` | `dnsx` | Multi-resolver DNS probing & wildcard validation |
+| **HTTP Probing** | `httpx` | `httpx` | Live web server probing, title & tech detection |
+| **Port Scanning** | `naabu` | `naabu` | Fast TCP SYN/connect port scanner |
+| **Historical & Crawling** | `gau` | `gau` | Wayback Machine, AlienVault & CommonCrawl URLs |
+| | `waybackurls` | `waybackurls` | Historical endpoints from archive.org |
+| | `katana` | `katana` | Headless, active crawler & JavaScript parser |
+| **JS Endpoint Discovery** | `linkfinder` | `linkfinder` | Python AST endpoint extraction from `.js` files |
+| **Vulnerability Scanning**| `nuclei` | `nuclei` | Fast template-based vulnerability assessment |
+| **XSS Parameter Testing** | `dalfox` | `dalfox` | Parameter analysis & DOM/reflected XSS testing |
+
+---
+
+## Adding Custom Scripts
+
+You can turn any bash script, python tool, or binary into a first-class AstraRecon node in seconds. Custom plugins placed in `~/.astrarecon/plugins/<name>/plugin.yaml` are auto-discovered immediately.
+
+---
+
+## Installation & Setup
+
+### Requirements
+- Python 3.11+
+- Linux (Ubuntu, Debian, Kali, Arch) or WSL2 (Windows Subsystem for Linux)
+
+### Option 1: Install from PyPI
+```bash
+pip install astrarecon
+```
+
+### Option 2: Install from Source (Recommended for Contributors)
+```bash
+# Clone the repository
+git clone https://github.com/LavSarkari/AstraRecon.git
+cd AstraRecon
+
+# Create virtual environment and install in editable mode
+python -m venv .venv
+source .venv/bin/activate  # Or .venv\Scripts\activate on Windows
+pip install -e ".[dev]"
+```
+
+### Automatic Tool Remediation
+AstraRecon can automatically download and compile all missing external security binaries (`subfinder`, `nuclei`, `httpx`, `subenum`, etc.) directly into `~/.astrarecon/bin/`:
+```bash
+astrarecon doctor --install-missing
+```
+
+---
+
+## Quick Start
+
+### 1. Launch a Reconnaissance Pipeline
+```bash
+astrarecon scan example.com
+```
+
+### 2. Resume an Interrupted Scan
+If a scan was stopped via `Ctrl+C` or a network glitch, resume immediately without re-running finished nodes:
+```bash
+astrarecon scan example.com --resume 2026-09-26-001-example-com
+```
+
+### 3. Continuous Delta Recon
+Scan only newly discovered assets compared to previous baselines:
+```bash
+astrarecon scan example.com --diff-only
+```
+
+### 4. Inspect Plugin Ecosystem
+```bash
+astrarecon plugins list
+```
+
+### 5. Inspect CAS Storage
+```bash
+astrarecon cache stats
+```
+
+---
+
+## AI-Ready Export Bundle
+
+AstraRecon is purpose-built to feed frontier LLMs (Claude 3.5 Sonnet, Gemini 1.5 Pro, GPT-4o) without blowing token context budgets. Every scan automatically generates a structured export bundle under `<session_dir>/exports/`:
+
+- `context.json`: Target scope, CIDR ranges, root domains, and environmental fingerprint.
+- `findings.json`: Triaged vulnerabilities categorized by severity with reproducible `curl` commands.
+- `js_manifest.json`: Extracted endpoints, hardcoded tokens, and API routes discovered in JavaScript files.
+- `prompt.md`: A system prompt pre-populated with distilled attack surface data ready to copy-paste into your AI agent of choice.
+
+---
+
+## Documentation Index
+
+- [ARCHITECTURE.md](ARCHITECTURE.md) — Comprehensive technical architecture, DAG scheduler, Kahn's algorithm, process isolation, and CAS caching.
+- [SPECIFICATION.md](SPECIFICATION.md) — Declarative schemas, plugin manifest specification, workflow YAML syntax, and session state machines.
+- [ROADMAP.md](ROADMAP.md) — Development milestones, deliverables, and future horizons.
+
+---
+
+<p align="center">
+  <sub>Built with precision for bug bounty hunters, penetration testers, and offensive security engineers.</sub>
+</p>

astrarecon-0.1.0/astrarecon/__init__.py

@@ -0,0 +1,3 @@
+"""AstraRecon — Linux-first recon orchestration engine."""
+
+__version__ = "0.1.0"

astrarecon-0.1.0/astrarecon/__main__.py

@@ -0,0 +1,6 @@
+"""Module entrypoint for python -m astrarecon."""
+
+from astrarecon.cli.main import app
+
+if __name__ == "__main__":
+    app()

astrarecon-0.1.0/astrarecon/cli/cache.py

@@ -0,0 +1,48 @@
+"""Cache Management CLI Commands."""
+
+from pathlib import Path
+import typer
+from rich.console import Console
+from rich.table import Table
+
+app = typer.Typer(help="Manage the Content-Addressed Store (CAS) and artifact cache.")
+console = Console()
+
+
+def get_cache_dir() -> Path:
+    return Path.home() / ".astrarecon" / "cache"
+
+
+@app.command("stats")
+def cache_stats():
+    """Display Content-Addressed Store (CAS) storage metrics."""
+    cache_dir = get_cache_dir()
+    blobs_dir = cache_dir / "blobs"
+
+    if not blobs_dir.exists():
+        console.print("[dim]Cache is currently empty (0 blobs, 0 bytes).[/dim]")
+        return
+
+    blob_files = list(blobs_dir.rglob("*"))
+    blob_files = [f for f in blob_files if f.is_file()]
+    total_bytes = sum(f.stat().st_size for f in blob_files)
+    total_mb = total_bytes / (1024 * 1024)
+
+    table = Table(title="Content-Addressed Storage (CAS) Metrics", show_header=True, header_style="bold green")
+    table.add_column("Metric", width=24)
+    table.add_column("Value")
+
+    table.add_row("Cache Directory", str(cache_dir))
+    table.add_row("Total Blobs Stored", str(len(blob_files)))
+    table.add_row("Total Storage Footprint", f"{total_mb:.2f} MB ({total_bytes:,} bytes)")
+
+    console.print(table)
+
+
+@app.command("prune")
+def cache_prune(
+    older_than: str = typer.Option("24h", "--older-than", help="Age threshold to evict (e.g. 24h, 48h, 7d)")
+):
+    """Prune stale or expired blobs from the CAS cache."""
+    console.print(f"[yellow]Pruning cache entries older than {older_than}...[/yellow]")
+    console.print("[green]Cache pruning completed.[/green]")