@cantinasecurity/apex-cli 0.1.2 → 0.1.3

package/.claude/skills/apex-cli/SKILL.md

@@ -31,7 +31,7 @@ If the Apex MCP server is not configured, fall back to the local CLI:
 - `apex scan` scans the current working directory by default; pass `--repo` only when the user asks to scan explicit alternate roots.
 - `apex-doctor` reports whether Apex will use remote materialization or a local snapshot upload for each selected source.
 - Plain local directories and dirty git worktrees can scan through local snapshot uploads without provider access.
-- Audit scans use `--mode audit` in user-facing CLI calls. The legacy `ultra` mode remains accepted as an alias, but audit scans still require provider-backed GitHub or GitLab sources.
+- Audit scans use `--mode audit` in user-facing CLI calls and request payloads. The legacy `ultra` mode remains accepted as an alias, but audit scans still require provider-backed GitHub or GitLab sources.
 - `apex-workspace-use` accepts a workspace name, prefix, or ID.
 - Use `sourceMode: "remote"` only when the user explicitly wants to forbid local snapshot fallbacks.
 - Finding comments and feedback currently require `CANTINA_AUTH_TOKEN` in the MCP server environment because those writes go through the Cantina web-app routes instead of the Apex CLI bearer-token routes.

package/README.md

@@ -192,7 +192,7 @@ Useful flags:
 
 `auto` is the default. `remote` requires Apex to materialize from a remote repository. `local` forces a local snapshot upload even when a clean remote path is available.
 
-Audit scans still require provider-backed GitHub or GitLab repositories that Apex can materialize remotely without a local snapshot fallback. `ultra` remains accepted as a backwards-compatible alias for the audit scan mode.
+Audit scans use `audit` as the scan mode and still require provider-backed GitHub or GitLab repositories that Apex can materialize remotely without a local snapshot fallback. `ultra` remains accepted as a backwards-compatible alias.
 
 ## LLM / MCP Usage
 

package/dist/commands.js

@@ -78,7 +78,7 @@ function formatAuditScanBalance(scanBalance) {
     return `Audit scans: ${detailParts.join(", ")}`;
 }
 function normalizeRequestedScanMode(value) {
-    return value === "ultra" || value === "audit" ? "ultra" : "standard";
+    return value === "ultra" || value === "audit" ? "audit" : "standard";
 }
 function normalizeFindingRefInput(value) {
     const trimmed = normalizeFindingRef(value);
@@ -353,7 +353,7 @@ export async function commandScan(client, cwd, flags) {
     const forceRestart = await ensureScanRestartConfirmed(flags, activeScan);
     let workspaceId = resolvedWorkspaceId;
     let scan;
-    if (requestedMode === "ultra") {
+    if (requestedMode === "audit") {
         if (!supportsLegacyRemoteFlow(result.resolve.plannedSources)) {
             throw new Error("Audit scans currently require provider-backed GitHub or GitLab repositories without local snapshot fallbacks.");
         }

package/dist/help.js

@@ -52,7 +52,7 @@ Flags:
 Tips:
   apex scan uses the current directory name as the default workspace name unless you pass --workspace-name.
   apex scan uses the current directory as the default source root unless you pass --repo.
-  audit is the user-facing name for the legacy ultra scan mode; ultra remains accepted as an alias.
+  audit is the current scan mode for audit scans; ultra remains accepted as a legacy alias.
   apex workspace use accepts a workspace name, prefix, or ID.
   Finding comments and feedback currently require CANTINA_AUTH_TOKEN from a logged-in Cantina/Apex browser session.
   Invalid finding feedback requires --dismissal-reason.
@@ -93,7 +93,7 @@ Commands:
   /exit                   Exit Apex
 
 Tips:
-  audit is the user-facing name for the legacy ultra scan mode; ultra remains accepted as an alias.
+  audit is the current scan mode for audit scans; ultra remains accepted as a legacy alias.
   /workspace use accepts a workspace name, prefix, or ID.
   /findings comment and /findings feedback require CANTINA_AUTH_TOKEN in the shell environment.
   Invalid finding feedback requires a dismissal reason.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cantinasecurity/apex-cli",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Standalone CLI and MCP server for Apex.",
   "private": false,
   "type": "module",

package/skills/apex-cli/SKILL.md

@@ -26,7 +26,7 @@ Guidelines:
 - `apex-scan` scans the provided `cwd` by default; pass `repoPaths` only when the user asks to scan explicit alternate roots.
 - `apex-doctor` reports whether Apex will use remote materialization or a local snapshot upload for each selected source.
 - Apex can scan plain local directories and dirty git worktrees without provider connections by using local snapshot uploads.
-- Audit scans use `mode: "audit"` in user-facing instructions. The legacy `ultra` mode remains accepted as an alias, but audit scans still require provider-backed GitHub or GitLab sources.
+- Audit scans use `mode: "audit"` in user-facing instructions and request payloads. The legacy `ultra` mode remains accepted as an alias, but audit scans still require provider-backed GitHub or GitLab sources.
 - `apex-workspace-use` accepts a workspace name, prefix, or ID.
 - Use `sourceMode: "remote"` only when the user explicitly wants to forbid local snapshot fallbacks.
 - Use `force: true` on `apex-scan` only when the user explicitly wants to replace or overlap an active scan.