<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# Performing PASTA Methodology — API Reference

## agent.js CLI

```bash
# Stage1 action
node scripts/agent.js --action stage1

# Stage2 action
node scripts/agent.js --action stage2

# Stage3 action
node scripts/agent.js --action stage3

# Analyze action
node scripts/agent.js --action analyze

# Report action
node scripts/agent.js --action report
```

## PASTA Stage Output Schema

```json
{
  "stage": 1,
  "name": "Define Objectives",
  "objectives": ["Protect customer PII"],
  "risk_appetite": "medium",
  "compliance_requirements": ["GDPR", "PCI-DSS"]
}
```

## Threat-Vulnerability Correlation

```json
{
  "component": "API Server",
  "threats": ["Injection", "Broken Authentication"],
  "vulnerabilities": ["CVE-2024-1234", "Weak session management"],
  "attack_scenarios": ["Exploit API via crafted payload"],
  "risk_score": 8.5
}
```
