How 0xdun0/rovex works
Rovex is a local-first pentest reporting and vulnerability-management platform. The main user journey is to create a pentest or writeup project, edit its sectional Markdown report, manage findings and CVSS severity, then publish or export the report. The app also provides project, evidence, client, theme, and documentation areas, plus an MCP endpoint for agent-driven report authoring. The graph uses README capability descriptions and the sampled routes and handlers; several UI-to-service connections are not shown because their call sites were not sampled.
Main entry points: [id]/page.tsx Project report · route.ts MCP HTTP endpoint · report/page.tsx Workspace dashboard · 9a4f2c1b8e7d3a6e/page.tsx Project management
Components 23
Reporting workspace
- Workspace dashboard
src/app/report/page.tsx - Project management
src/app/report/9a4f2c1b8e7d3a6e/page.tsx - Theme studio
src/components/theme-studio/theme-config-dialog.tsx - Documentation hub
src/app/report/e3b8a1c9f4d27e5a/page.tsx
Report authoring
- Project report
src/app/report/9a4f2c1b8e7d3a6e/[id]/page.tsx - Markdown editor
src/components/section-markdown-editor.tsx - Report preview
src/components/markdown-preview.tsx - Finding management
src/app/report/9a4f2c1b8e7d3a6e/[id]/findings/[findingId]/page.tsx - CVSS engine
src/lib/cvss.ts - Report exporters
src/lib/report-docx.ts
Local services
- App data context
src/context/data-context.tsx - State API
src/app/api/state/route.ts - State file access
src/lib/server/state-file.ts - Local state
- User preferences API
src/app/api/user/route.ts - Variables API
src/app/api/variables/route.ts
AI and extensions
- MCP HTTP endpoint
src/app/api/mcp/route.ts - MCP tool handlers
src/lib/mcp/handlers.ts - MCP playbooks
src/lib/mcp/skills.ts - Link preview API
src/app/api/link-preview/route.ts
Other components
- Pentest operator
- MCP client
- Public websites
Connections 21
- Pentest operator → Workspace dashboard: opens workspace
- Workspace dashboard → Project management: opens projects
- Project management → Project report: opens report
- Project report → Markdown editor: edits sections
- Markdown editor → Report preview: renders Markdown
- Project report → Finding management: manages findings
- Finding management → CVSS engine: calculates severity
- Project report → Report exporters: exports report
- App data context → State API: requests state
- State API → Local state: reads or writes
- User preferences API → Local state: persists user data
- Variables API → Local state: persists variables
- MCP client → MCP HTTP endpoint: sends JSON-RPC
- MCP HTTP endpoint → MCP tool handlers: dispatches tools
- MCP HTTP endpoint → MCP playbooks: serves prompts
- MCP tool handlers → State file access: reads or writes
- State file access → Local state: reads or writes
- Pentest operator → Theme studio: customizes appearance
- Pentest operator → Documentation hub: reads guidance
- Pentest operator → Link preview API: requests preview
- Link preview API → Public websites: fetches metadata