@pensar/apex 0.0.112 → 0.0.113-canary.3baa3cfe

package/build/{agent-5qdmmchx.js → agent-kv566fgq.js}

@@ -1,19 +1,19 @@
 import {
   WhiteboxAttackSurfaceResultSchema
-} from "./cli-2ckm5es2.js";
+} from "./cli-02z97kgd.js";
 import {
   OffensiveSecurityAgent
-} from "./cli-r8r90gka.js";
-import"./cli-jh38b6zv.js";
+} from "./cli-fawawybp.js";
+import"./cli-73ka6pcc.js";
 import {
   hasToolCall,
   tool
-} from "./cli-kqtgcdzn.js";
-import"./cli-j66pect7.js";
-import"./cli-bp6d08sg.js";
-import"./cli-jb0gcnrs.js";
-import"./cli-yj3dy0vg.js";
-import"./cli-15vxn9zj.js";
+} from "./cli-8y6mcpyz.js";
+import"./cli-2acntev8.js";
+import"./cli-kdwyyczp.js";
+import"./cli-2namddg2.js";
+import"./cli-23dth5xj.js";
+import"./cli-0tpx8khk.js";
 import"./cli-7ckctq7a.js";
 import"./cli-8rxa073f.js";
 

package/build/agent-vk2ncd9f.js

@@ -0,0 +1,16 @@
+import {
+  CodeAgent
+} from "./cli-c003dtjg.js";
+import"./cli-fawawybp.js";
+import"./cli-73ka6pcc.js";
+import"./cli-8y6mcpyz.js";
+import"./cli-2acntev8.js";
+import"./cli-kdwyyczp.js";
+import"./cli-2namddg2.js";
+import"./cli-23dth5xj.js";
+import"./cli-0tpx8khk.js";
+import"./cli-7ckctq7a.js";
+import"./cli-8rxa073f.js";
+export {
+  CodeAgent
+};

package/build/{auth-jvq72ekc.js → auth-1m8atrbk.js}

@@ -8,14 +8,14 @@ import {
   pollWorkOSToken,
   selectWorkspace,
   startDeviceFlow
-} from "./cli-j66pect7.js";
+} from "./cli-2acntev8.js";
 import {
   config,
   getPensarApiUrl,
   getPensarConsoleUrl
-} from "./cli-bp6d08sg.js";
-import"./cli-jb0gcnrs.js";
-import"./cli-yj3dy0vg.js";
+} from "./cli-kdwyyczp.js";
+import"./cli-2namddg2.js";
+import"./cli-23dth5xj.js";
 import {
   __require
 } from "./cli-8rxa073f.js";
@@ -172,9 +172,10 @@ If the browser didn't open, visit: ${consoleUrl}/create-workspace?redirect=/cred
 ✓ Connected to Pensar Console
   Workspace: ${workspace.name} (${workspace.slug})
   Credits: $${result.billing.balance.toFixed(2)}`);
-  if (!result.confirmed && result.billingUrl) {
+  const needsBillingSetup = !result.billing.ready && result.billing.balance <= 0 && !!result.billingUrl;
+  if (needsBillingSetup && result.billingUrl) {
     console.log(`
-⚠ Your workspace needs credits. Add them at:
+⚠ Your workspace billing setup is not ready yet. Finish setup at:
   ${result.billingUrl}`);
   } else if (result.billing.balance < 1) {
     const billingUrl = `${getPensarConsoleUrl()}/${workspace.slug}/settings/billing`;

package/build/{authentication-nya4td5k.js → authentication-7q5gr325.js}

@@ -3,16 +3,16 @@ import {
 } from "./cli-6gtnyaqf.js";
 import {
   OffensiveSecurityAgent
-} from "./cli-r8r90gka.js";
-import"./cli-jh38b6zv.js";
+} from "./cli-fawawybp.js";
+import"./cli-73ka6pcc.js";
 import {
   hasToolCall
-} from "./cli-kqtgcdzn.js";
-import"./cli-j66pect7.js";
-import"./cli-bp6d08sg.js";
-import"./cli-jb0gcnrs.js";
-import"./cli-yj3dy0vg.js";
-import"./cli-15vxn9zj.js";
+} from "./cli-8y6mcpyz.js";
+import"./cli-2acntev8.js";
+import"./cli-kdwyyczp.js";
+import"./cli-2namddg2.js";
+import"./cli-23dth5xj.js";
+import"./cli-0tpx8khk.js";
 import"./cli-7ckctq7a.js";
 import"./cli-8rxa073f.js";
 

package/build/blackboxAgent-xh1aes46.js

@@ -0,0 +1,17 @@
+import {
+  BlackboxAttackSurfaceAgent
+} from "./cli-g0ca8jbm.js";
+import"./cli-6gtnyaqf.js";
+import"./cli-fawawybp.js";
+import"./cli-73ka6pcc.js";
+import"./cli-8y6mcpyz.js";
+import"./cli-2acntev8.js";
+import"./cli-kdwyyczp.js";
+import"./cli-2namddg2.js";
+import"./cli-23dth5xj.js";
+import"./cli-0tpx8khk.js";
+import"./cli-7ckctq7a.js";
+import"./cli-8rxa073f.js";
+export {
+  BlackboxAttackSurfaceAgent
+};

package/build/{blackboxPentest-85hwznet.js → blackboxPentest-0avhbq0s.js}

@@ -1,19 +1,19 @@
 import {
   runPentestWorkflow
-} from "./cli-f9shhcxf.js";
-import"./cli-e20q3hqz.js";
-import"./cli-w04ggbe4.js";
-import"./cli-2ckm5es2.js";
-import"./cli-hmrzx8am.js";
+} from "./cli-rxc3573d.js";
+import"./cli-pw1bses1.js";
+import"./cli-c003dtjg.js";
+import"./cli-02z97kgd.js";
+import"./cli-g0ca8jbm.js";
 import"./cli-6gtnyaqf.js";
-import"./cli-r8r90gka.js";
-import"./cli-jh38b6zv.js";
-import"./cli-kqtgcdzn.js";
-import"./cli-j66pect7.js";
-import"./cli-bp6d08sg.js";
-import"./cli-jb0gcnrs.js";
-import"./cli-yj3dy0vg.js";
-import"./cli-15vxn9zj.js";
+import"./cli-fawawybp.js";
+import"./cli-73ka6pcc.js";
+import"./cli-8y6mcpyz.js";
+import"./cli-2acntev8.js";
+import"./cli-kdwyyczp.js";
+import"./cli-2namddg2.js";
+import"./cli-23dth5xj.js";
+import"./cli-0tpx8khk.js";
 import"./cli-7ckctq7a.js";
 import"./cli-8rxa073f.js";
 

package/build/{cli-2ckm5es2.js → cli-02z97kgd.js}

@@ -1,7 +1,7 @@
 import {
   exports_external,
   init_zod
-} from "./cli-kqtgcdzn.js";
+} from "./cli-8y6mcpyz.js";
 
 // src/core/agents/specialized/whiteboxAttackSurface/types.ts
 init_zod();

package/build/{cli-15vxn9zj.js → cli-0tpx8khk.js}

@@ -238,30 +238,6 @@ var OPENAI_MODELS = [
     provider: "openai",
     contextLength: 128000
   },
-  {
-    id: "gpt-4-turbo",
-    name: "GPT-4-turbo",
-    provider: "openai",
-    contextLength: 128000
-  },
-  {
-    id: "gpt-4-turbo-2024-04-09",
-    name: "GPT-4-turbo-2024-04-09",
-    provider: "openai",
-    contextLength: 128000
-  },
-  {
-    id: "gpt-4",
-    name: "GPT-4",
-    provider: "openai",
-    contextLength: 8192
-  },
-  {
-    id: "gpt-4-0613",
-    name: "GPT-4-0613",
-    provider: "openai",
-    contextLength: 8192
-  },
   {
     id: "gpt-3.5-turbo-0125",
     name: "GPT-3.5-turbo-0125",
@@ -286,12 +262,6 @@ var OPENAI_MODELS = [
     provider: "openai",
     contextLength: 16385
   },
-  {
-    id: "chatgpt-4o-latest",
-    name: "ChatGPT-4o (Latest)",
-    provider: "openai",
-    contextLength: 128000
-  },
   {
     id: "gpt-5",
     name: "GPT-5",
@@ -381,6 +351,36 @@ var OPENAI_MODELS = [
     name: "GPT-5.2-pro-2025-12-11",
     provider: "openai",
     contextLength: 200000
+  },
+  {
+    id: "gpt-5.3-chat-latest",
+    name: "GPT-5.3-chat (Latest)",
+    provider: "openai",
+    contextLength: 200000
+  },
+  {
+    id: "gpt-5.4",
+    name: "GPT-5.4",
+    provider: "openai",
+    contextLength: 200000
+  },
+  {
+    id: "gpt-5.4-2026-03-05",
+    name: "GPT-5.4-2026-03-05",
+    provider: "openai",
+    contextLength: 200000
+  },
+  {
+    id: "gpt-5.4-pro",
+    name: "GPT-5.4-pro",
+    provider: "openai",
+    contextLength: 200000
+  },
+  {
+    id: "gpt-5.4-pro-2026-03-05",
+    name: "GPT-5.4-pro-2026-03-05",
+    provider: "openai",
+    contextLength: 200000
   }
 ];
 

package/build/{cli-yj3dy0vg.js → cli-23dth5xj.js}

@@ -3,7 +3,7 @@ import { spawnSync } from "child_process";
 // package.json
 var package_default = {
   name: "@pensar/apex",
-  version: "0.0.112",
+  version: "0.0.113-canary.3baa3cfe",
   description: "AI-powered penetration testing CLI tool with terminal UI",
   module: "src/tui/index.tsx",
   main: "build/cli.js",
@@ -83,7 +83,7 @@ var package_default = {
     "@ai-sdk/amazon-bedrock": "^4.0.69",
     "@ai-sdk/anthropic": "^3.0.50",
     "@ai-sdk/google": "^3.0.37",
-    "@ai-sdk/openai": "^3.0.37",
+    "@ai-sdk/openai": "3.0.46",
     "@ai-sdk/openai-compatible": "^2.0.35",
     "@daytonaio/sdk": "^0.112.1",
     "@googleapis/gmail": "^16.1.1",

package/build/{cli-j66pect7.js → cli-2acntev8.js}

@@ -1,7 +1,9 @@
 import {
   config,
-  getPensarApiUrl
-} from "./cli-bp6d08sg.js";
+  ensureValidToken,
+  getPensarApiUrl,
+  getPensarGatewayUrl
+} from "./cli-kdwyyczp.js";
 
 // src/core/auth/device-flow.ts
 function sleep(ms) {
@@ -199,4 +201,37 @@ ${bodyHash}`;
   const signature = createHmac("sha256", signingKey).update(payload).digest("base64");
   return { signature, timestamp, nonce };
 }
-export { signGatewayRequest, startDeviceFlow, pollWorkOSToken, pollLegacyToken, fetchWorkspaces, pollForWorkspaceCreation, selectWorkspace, isConnected, disconnect };
+// src/core/auth/gateway.ts
+async function validateGateway() {
+  const cfg = await config.get();
+  const tokenResult = await ensureValidToken({
+    accessToken: cfg.accessToken,
+    refreshToken: cfg.refreshToken,
+    pensarAPIKey: cfg.pensarAPIKey
+  });
+  if (!tokenResult)
+    return null;
+  const gatewayUrl = cfg.gatewayUrl || getPensarGatewayUrl();
+  const headers = {
+    Authorization: `Bearer ${tokenResult.token}`
+  };
+  if (cfg.workspaceId) {
+    headers["X-Workspace-Id"] = cfg.workspaceId;
+  }
+  const response = await fetch(`${gatewayUrl}/gateway/validate`, {
+    method: "GET",
+    headers
+  });
+  if (!response.ok) {
+    throw new Error(`Gateway validation failed (${response.status})`);
+  }
+  const result = await response.json();
+  if (result.signingKey || result.gatewayUrl) {
+    await config.update({
+      gatewaySigningKey: result.signingKey ?? undefined,
+      gatewayUrl: result.gatewayUrl ?? undefined
+    });
+  }
+  return result;
+}
+export { signGatewayRequest, startDeviceFlow, pollWorkOSToken, pollLegacyToken, fetchWorkspaces, pollForWorkspaceCreation, selectWorkspace, isConnected, disconnect, validateGateway };

package/build/{cli-jb0gcnrs.js → cli-2namddg2.js}

@@ -1,6 +1,6 @@
 import {
   getCurrentVersion
-} from "./cli-yj3dy0vg.js";
+} from "./cli-23dth5xj.js";
 
 // src/core/config/config.ts
 import os from "os";

package/build/{cli-jh38b6zv.js → cli-73ka6pcc.js}

@@ -3,7 +3,7 @@ import {
   generateObjectResponse,
   init_zod,
   zod_default
-} from "./cli-kqtgcdzn.js";
+} from "./cli-8y6mcpyz.js";
 import {
   __callDispose,
   __esm,