diff --git a/.release-please-manifest.json b/.release-please-manifest.json index 30b6d45a..582db2fa 100644 --- a/.release-please-manifest.json +++ b/.release-please-manifest.json @@ -1,3 +1,3 @@ { - ".": "0.10.1" + ".": "0.10.2" } diff --git a/CHANGELOG.md b/CHANGELOG.md index 18894fcd..3622f81a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,31 @@ # Changelog +## [0.10.2](https://github.com/KeyValueSoftwareSystems/agent-opfor/compare/v0.10.1...v0.10.2) (2026-08-05) + + +### Features + +* add cancelled run state and fix extension pause/resume flow ([#221](https://github.com/KeyValueSoftwareSystems/agent-opfor/issues/221)) ([094687c](https://github.com/KeyValueSoftwareSystems/agent-opfor/commit/094687c6deb769ca2c2c137772a7832c25b4335b)) +* add report turn navigator and restore standards column ([#230](https://github.com/KeyValueSoftwareSystems/agent-opfor/issues/230)) ([04d0690](https://github.com/KeyValueSoftwareSystems/agent-opfor/commit/04d0690c42185775d73de5a4977c728b7fd3c2b3)) +* estimate and report run cost per model ([#231](https://github.com/KeyValueSoftwareSystems/agent-opfor/issues/231)) ([87cd59c](https://github.com/KeyValueSoftwareSystems/agent-opfor/commit/87cd59c80b4582556ff395a10e392705a55bf3a6)) +* graceful shutdown on ctrl+c during opfor run ([#211](https://github.com/KeyValueSoftwareSystems/agent-opfor/issues/211)) ([338f98b](https://github.com/KeyValueSoftwareSystems/agent-opfor/commit/338f98b11eb2207ad3b189a1d7e03be17c90f856)) +* **hunt:** add trace-aware hunting (grounding, propagation, get_trace enrichment) ([#222](https://github.com/KeyValueSoftwareSystems/agent-opfor/issues/222)) ([a67cca9](https://github.com/KeyValueSoftwareSystems/agent-opfor/commit/a67cca90caddd3a1edab6a36256d69eaff40e093)) +* make adaptive attacker skip recon and strike on short turn budgets ([#219](https://github.com/KeyValueSoftwareSystems/agent-opfor/issues/219)) ([c4dd3e0](https://github.com/KeyValueSoftwareSystems/agent-opfor/commit/c4dd3e063f7bf298937446f50cf75a5841a414b3)) +* redesign hunt --ui dashboard and setup form ([#225](https://github.com/KeyValueSoftwareSystems/agent-opfor/issues/225)) ([cd7c66f](https://github.com/KeyValueSoftwareSystems/agent-opfor/commit/cd7c66f2dfeb958d46ce5e6bd9c06fd85cbe9e2f)) +* **report:** redesign hunt report to match the run report ([#233](https://github.com/KeyValueSoftwareSystems/agent-opfor/issues/233)) ([c1ecca8](https://github.com/KeyValueSoftwareSystems/agent-opfor/commit/c1ecca842235cc2ee8d6a58f45da361343ea2827)) +* track and display LLM token usage across CLI, reports, and extension ([#224](https://github.com/KeyValueSoftwareSystems/agent-opfor/issues/224)) ([5f4b355](https://github.com/KeyValueSoftwareSystems/agent-opfor/commit/5f4b3555d6f4d46716cd97336f13d4f1c6578d27)) +* unify hunt cli report artifacts into one folder, add graceful Ctrl+C cancellation ([#218](https://github.com/KeyValueSoftwareSystems/agent-opfor/issues/218)) ([e45a62c](https://github.com/KeyValueSoftwareSystems/agent-opfor/commit/e45a62c01781eccd1a5ccd506919dbe7acde1859)) + + +### Bug Fixes + +* **cli:** include http response body in target errors ([#207](https://github.com/KeyValueSoftwareSystems/agent-opfor/issues/207)) ([c8c9f72](https://github.com/KeyValueSoftwareSystems/agent-opfor/commit/c8c9f72c4d7246716208804457226a687dc31a89)) +* **deps:** bump js-yaml and fast-uri to patch high-severity cves ([#216](https://github.com/KeyValueSoftwareSystems/agent-opfor/issues/216)) ([a55c98e](https://github.com/KeyValueSoftwareSystems/agent-opfor/commit/a55c98efad1ca0b63d3ad744914a8d2090059155)) +* **deps:** upgrade ai-sdk provider family and force-patch @hono/node-server ([#217](https://github.com/KeyValueSoftwareSystems/agent-opfor/issues/217)) ([1ef315c](https://github.com/KeyValueSoftwareSystems/agent-opfor/commit/1ef315c8156c7dcd93d58379d2e8c111c022bddf)) +* **judge:** retry unusable json mode responses ([#220](https://github.com/KeyValueSoftwareSystems/agent-opfor/issues/220)) ([4dda117](https://github.com/KeyValueSoftwareSystems/agent-opfor/commit/4dda117b5072b0c3f5d0cf6dfd34ae1b1ba7e2f9)) +* **report:** redesign evaluation card, add run duration, fix suite labeling ([#227](https://github.com/KeyValueSoftwareSystems/agent-opfor/issues/227)) ([c252675](https://github.com/KeyValueSoftwareSystems/agent-opfor/commit/c2526758e4b55d2b9a1d2cfd9615c9dc73995d0a)) +* unify skill and extension catalog generation to include derived suites ([#210](https://github.com/KeyValueSoftwareSystems/agent-opfor/issues/210)) ([4908c16](https://github.com/KeyValueSoftwareSystems/agent-opfor/commit/4908c16fc73efc20d9f4f177860e11be21642426)) + ## [0.10.1](https://github.com/KeyValueSoftwareSystems/agent-opfor/compare/v0.10.0...v0.10.1) (2026-07-20) diff --git a/core/package.json b/core/package.json index 367942c8..b99f7a6f 100644 --- a/core/package.json +++ b/core/package.json @@ -1,6 +1,6 @@ { "name": "@keyvaluesystems/agent-opfor-core", - "version": "0.10.1", + "version": "0.10.2", "description": "Opfor core engine — attacker prompt generation, judge, and execution shared by all runners", "license": "Apache-2.0", "private": true, diff --git a/package-lock.json b/package-lock.json index d4949503..b2f6fc32 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "agent-opfor", - "version": "0.10.1", + "version": "0.10.2", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "agent-opfor", - "version": "0.10.1", + "version": "0.10.2", "license": "Apache-2.0", "workspaces": [ "core", diff --git a/package.json b/package.json index 4f346950..2ec22a59 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "agent-opfor", - "version": "0.10.1", + "version": "0.10.2", "description": "Opfor — security testing for AI agents and MCP servers (workspace root)", "license": "Apache-2.0", "private": true, diff --git a/runners/cli/package.json b/runners/cli/package.json index 0a512953..4c548190 100644 --- a/runners/cli/package.json +++ b/runners/cli/package.json @@ -1,6 +1,6 @@ { "name": "@keyvaluesystems/agent-opfor-cli", - "version": "0.10.1", + "version": "0.10.2", "description": "Opfor CLI — security testing for AI agents and MCP servers (opfor setup|run|hunt)", "license": "Apache-2.0", "type": "module", diff --git a/runners/cli/ui/package.json b/runners/cli/ui/package.json index 1487f951..ff98cca7 100644 --- a/runners/cli/ui/package.json +++ b/runners/cli/ui/package.json @@ -1,7 +1,7 @@ { "name": "@keyvaluesystems/agent-opfor-autonomous-ui", "private": true, - "version": "0.10.1", + "version": "0.10.2", "type": "module", "scripts": { "dev": "vite", diff --git a/runners/extension/manifest.json b/runners/extension/manifest.json index 4758c91d..f0854cfb 100644 --- a/runners/extension/manifest.json +++ b/runners/extension/manifest.json @@ -1,7 +1,7 @@ { "manifest_version": 3, "name": "Agent OPFOR", - "version": "0.10.1", + "version": "0.10.2", "description": "Red-team any chat interface. Auto-detects chat widgets, runs adaptive attacks, and generates security reports.", "icons": { "16": "icons/icon16.png", diff --git a/runners/extension/package.json b/runners/extension/package.json index e53629ab..eeadc79b 100644 --- a/runners/extension/package.json +++ b/runners/extension/package.json @@ -1,6 +1,6 @@ { "name": "@keyvaluesystems/agent-opfor-extension", - "version": "0.10.1", + "version": "0.10.2", "description": "Opfor browser extension (MV3) — chat UI injector for live testing", "license": "Apache-2.0", "private": true, diff --git a/runners/mcp/package.json b/runners/mcp/package.json index 18f71e17..0fbde1f3 100644 --- a/runners/mcp/package.json +++ b/runners/mcp/package.json @@ -1,6 +1,6 @@ { "name": "@keyvaluesystems/agent-opfor-mcp", - "version": "0.10.1", + "version": "0.10.2", "description": "Opfor MCP server — expose red team tools to any MCP-compatible AI agent", "license": "Apache-2.0", "type": "module", diff --git a/runners/sdk/package.json b/runners/sdk/package.json index 45bce366..3ebf9e92 100644 --- a/runners/sdk/package.json +++ b/runners/sdk/package.json @@ -1,6 +1,6 @@ { "name": "@keyvaluesystems/agent-opfor-sdk", - "version": "0.10.1", + "version": "0.10.2", "description": "Opfor SDK — programmatic adversarial testing for AI systems", "license": "Apache-2.0", "type": "module", diff --git a/tests/e2e/agents/customer-support/package.json b/tests/e2e/agents/customer-support/package.json index 17f29ba5..c53d6b66 100644 --- a/tests/e2e/agents/customer-support/package.json +++ b/tests/e2e/agents/customer-support/package.json @@ -1,6 +1,6 @@ { "name": "@keyvaluesystems/agent-opfor-test-agent-customer-support", - "version": "0.10.1", + "version": "0.10.2", "description": "Customer support test agent with PostgreSQL — tests BOLA, BFLA, RBAC, PII, and SQL injection evaluators", "private": true, "type": "module", diff --git a/tests/e2e/agents/vanilla-chat/package.json b/tests/e2e/agents/vanilla-chat/package.json index fa5e6cb4..4269d6de 100644 --- a/tests/e2e/agents/vanilla-chat/package.json +++ b/tests/e2e/agents/vanilla-chat/package.json @@ -1,6 +1,6 @@ { "name": "@keyvaluesystems/agent-opfor-test-agent-vanilla-chat", - "version": "0.10.1", + "version": "0.10.2", "description": "Vanilla chat test agent — used for local developer testing of Opfor evaluators", "private": true, "type": "module", diff --git a/tests/e2e/agents/vulnerable-memory/package.json b/tests/e2e/agents/vulnerable-memory/package.json index 0d2bef8f..6a937549 100644 --- a/tests/e2e/agents/vulnerable-memory/package.json +++ b/tests/e2e/agents/vulnerable-memory/package.json @@ -1,6 +1,6 @@ { "name": "@keyvaluesystems/agent-opfor-test-agent-vulnerable-memory", - "version": "0.10.1", + "version": "0.10.2", "description": "Intentionally vulnerable agent — accepts and persists user-injected 'policies' into a global knowledge base across sessions", "private": true, "type": "module", diff --git a/tests/e2e/mcp/vulnerable-server/package.json b/tests/e2e/mcp/vulnerable-server/package.json index 599ac2e4..d0f60baa 100644 --- a/tests/e2e/mcp/vulnerable-server/package.json +++ b/tests/e2e/mcp/vulnerable-server/package.json @@ -1,6 +1,6 @@ { "name": "@keyvaluesystems/agent-opfor-test-mcp-vulnerable", - "version": "0.10.1", + "version": "0.10.2", "description": "Intentionally vulnerable MCP server for opfor testing — DO NOT deploy", "private": true, "type": "module",