@pensar/apex 0.0.65 → 0.0.66

package/build/index.js

@@ -49473,19 +49473,19 @@ var require_token_io = __commonJS((exports, module2) => {
     getUserDataDir: () => getUserDataDir
   });
   module2.exports = __toCommonJS2(token_io_exports);
-  var import_path10 = __toESM2(__require("path"));
-  var import_fs9 = __toESM2(__require("fs"));
-  var import_os6 = __toESM2(__require("os"));
+  var import_path11 = __toESM2(__require("path"));
+  var import_fs10 = __toESM2(__require("fs"));
+  var import_os7 = __toESM2(__require("os"));
   var import_token_error = require_token_error();
   function findRootDir() {
     try {
       let dir = process.cwd();
-      while (dir !== import_path10.default.dirname(dir)) {
-        const pkgPath = import_path10.default.join(dir, ".vercel");
-        if (import_fs9.default.existsSync(pkgPath)) {
+      while (dir !== import_path11.default.dirname(dir)) {
+        const pkgPath = import_path11.default.join(dir, ".vercel");
+        if (import_fs10.default.existsSync(pkgPath)) {
           return dir;
         }
-        dir = import_path10.default.dirname(dir);
+        dir = import_path11.default.dirname(dir);
       }
     } catch (e) {
       throw new import_token_error.VercelOidcTokenError("Token refresh only supported in node server environments");
@@ -49496,11 +49496,11 @@ var require_token_io = __commonJS((exports, module2) => {
     if (process.env.XDG_DATA_HOME) {
       return process.env.XDG_DATA_HOME;
     }
-    switch (import_os6.default.platform()) {
+    switch (import_os7.default.platform()) {
       case "darwin":
-        return import_path10.default.join(import_os6.default.homedir(), "Library/Application Support");
+        return import_path11.default.join(import_os7.default.homedir(), "Library/Application Support");
       case "linux":
-        return import_path10.default.join(import_os6.default.homedir(), ".local/share");
+        return import_path11.default.join(import_os7.default.homedir(), ".local/share");
       case "win32":
         if (process.env.LOCALAPPDATA) {
           return process.env.LOCALAPPDATA;
@@ -49609,10 +49609,10 @@ var require_oauth = __commonJS((exports, module2) => {
     refreshTokenRequest: () => refreshTokenRequest
   });
   module2.exports = __toCommonJS2(oauth_exports);
-  var import_os6 = __require("os");
+  var import_os7 = __require("os");
   var VERCEL_ISSUER = "https://vercel.com";
   var VERCEL_CLI_CLIENT_ID = "cl_HYyOPBNtFMfHhaUn9L4QPfTZz6TP47bp";
-  var userAgent = `@vercel/oidc node-${process.version} ${(0, import_os6.platform)()} (${(0, import_os6.arch)()}) ${(0, import_os6.hostname)()}`;
+  var userAgent = `@vercel/oidc node-${process.version} ${(0, import_os7.platform)()} (${(0, import_os7.arch)()}) ${(0, import_os7.hostname)()}`;
   var _tokenEndpoint = null;
   async function getTokenEndpoint() {
     if (_tokenEndpoint) {
@@ -61019,11 +61019,11 @@ Submit the final structured report. Call this ONCE at the very end with complete
 If resuming from a previous run, review the assets already in the session assets folder and continue where you left off.`;
 
 // src/core/agents/specialized/utils.ts
-import { readFileSync as readFileSync2, existsSync as existsSync8 } from "fs";
+import { readFileSync as readFileSync3, existsSync as existsSync9 } from "fs";
 import { execSync } from "child_process";
 function readOsRelease() {
   try {
-    const content = readFileSync2("/etc/os-release", "utf8");
+    const content = readFileSync3("/etc/os-release", "utf8");
     const lines = content.split(/\r?\n/);
     const map2 = {};
     for (const line of lines) {
@@ -61044,11 +61044,11 @@ function readOsRelease() {
 }
 function detectDocker() {
   try {
-    if (existsSync8("/.dockerenv"))
+    if (existsSync9("/.dockerenv"))
       return true;
   } catch {}
   try {
-    const cgroup = readFileSync2("/proc/1/cgroup", "utf8");
+    const cgroup = readFileSync3("/proc/1/cgroup", "utf8");
     if (/docker|containerd|kubepods/i.test(cgroup))
       return true;
   } catch {}
@@ -61128,9 +61128,9 @@ ${prompt}`;
 var init_utils = () => {};
 
 // src/core/agents/specialized/attackSurface/types.ts
-import { readFileSync as readFileSync3 } from "fs";
+import { readFileSync as readFileSync4 } from "fs";
 function loadAttackSurfaceResults(resultsPath) {
-  const data = readFileSync3(resultsPath, "utf-8");
+  const data = readFileSync4(resultsPath, "utf-8");
   return JSON.parse(data);
 }
 var init_types2 = () => {};
@@ -104156,7 +104156,7 @@ var init_stdio2 = __esm(() => {
 });
 
 // src/core/agents/offSecAgent/tools/playwrightMcp.ts
-import { writeFileSync as writeFileSync2, mkdirSync, existsSync as existsSync9 } from "fs";
+import { writeFileSync as writeFileSync3, mkdirSync as mkdirSync2, existsSync as existsSync10 } from "fs";
 import { join as join3, dirname as dirname2 } from "path";
 async function initializeMcpClient() {
   if (mcpClient) {
@@ -104239,8 +104239,8 @@ function createBrowserTools(targetUrl, evidenceDir, mode = "pentest", logger, ab
   abortSignal?.addEventListener("abort", () => {
     disconnectMcpClient().catch(() => {});
   });
-  if (!existsSync9(evidenceDir)) {
-    mkdirSync(evidenceDir, { recursive: true });
+  if (!existsSync10(evidenceDir)) {
+    mkdirSync2(evidenceDir, { recursive: true });
   }
   const descriptions = mode === "pentest" ? PENTEST_DESCRIPTIONS : mode === "auth" ? AUTH_DESCRIPTIONS : OPERATOR_DESCRIPTIONS;
   const browser_navigate = tool2({
@@ -104280,10 +104280,10 @@ Target base URL: ${targetUrl}`,
           const screenshotFilename = `${filename}_${timestamp}.png`;
           const screenshotPath = join3(evidenceDir, screenshotFilename);
           const dir = dirname2(screenshotPath);
-          if (!existsSync9(dir)) {
-            mkdirSync(dir, { recursive: true });
+          if (!existsSync10(dir)) {
+            mkdirSync2(dir, { recursive: true });
           }
-          writeFileSync2(screenshotPath, Buffer.from(result.data, "base64"));
+          writeFileSync3(screenshotPath, Buffer.from(result.data, "base64"));
           return {
             success: true,
             path: screenshotPath,
@@ -104725,6 +104725,32 @@ IMPORTANT: Always analyze results and adjust your approach based on findings.`,
           command
         };
       }
+      if (ctx4.sandbox) {
+        try {
+          const ssmTimeout = Math.max(Math.ceil(timeout / 1000), 30);
+          const result = await ctx4.sandbox.execute(command, {
+            timeout: ssmTimeout
+          });
+          return {
+            success: result.success,
+            error: !result.success ? result.stderr || "Command failed" : "",
+            stdout: result.stdout.length > 50000 ? `${result.stdout.substring(0, 50000)}...
+
+(truncated) call the command again with grep / tail to paginate` : result.stdout || "(no output)",
+            stderr: result.stderr || "",
+            command
+          };
+        } catch (error41) {
+          const msg = error41 instanceof Error ? error41.message : String(error41);
+          return {
+            success: false,
+            error: msg,
+            stdout: "",
+            stderr: msg,
+            command
+          };
+        }
+      }
       return new Promise((resolve4) => {
         const shellCmd = process.platform === "win32" ? "cmd" : "bash";
         const shellArgs = process.platform === "win32" ? ["/c", command] : ["-lc", command];
@@ -104823,6 +104849,16 @@ COMMON TESTING PATTERNS:
       followRedirects,
       timeout
     }) => {
+      if (ctx4.sandbox) {
+        return executeSandboxHttpRequest(ctx4, {
+          url: url2,
+          method,
+          headers,
+          body,
+          followRedirects,
+          timeout
+        });
+      }
       let timeoutId;
       try {
         if (ctx4.abortSignal?.aborted) {
@@ -104890,6 +104926,82 @@ COMMON TESTING PATTERNS:
     }
   });
 }
+async function executeSandboxHttpRequest(ctx4, opts) {
+  const { url: url2, method, headers, body, followRedirects, timeout } = opts;
+  try {
+    let curlCommand = `curl -i -X ${method}`;
+    if (headers) {
+      for (const [key, value] of Object.entries(headers)) {
+        curlCommand += ` -H "${key}: ${value}"`;
+      }
+    }
+    if (body && ["POST", "PUT", "PATCH"].includes(method)) {
+      const escapedBody = body.replace(/"/g, "\\\"").replace(/\$/g, "\\$");
+      curlCommand += ` -d "${escapedBody}"`;
+    }
+    if (followRedirects) {
+      curlCommand += " -L";
+    }
+    const timeoutSeconds = Math.ceil(timeout / 1000);
+    curlCommand += ` --max-time ${timeoutSeconds}`;
+    curlCommand += ` "${url2}" 2>&1`;
+    const ssmTimeout = Math.max(timeoutSeconds, 30);
+    const result = await ctx4.sandbox.execute(curlCommand, {
+      timeout: ssmTimeout
+    });
+    const output = result.stdout || "";
+    const lines = output.split(`
+`);
+    let statusLine = "";
+    const responseHeaders = {};
+    let bodyStartIndex = 0;
+    for (let i = 0;i < lines.length; i++) {
+      const line = lines[i];
+      if (line.startsWith("HTTP/")) {
+        statusLine = line;
+        for (let j2 = i + 1;j2 < lines.length; j2++) {
+          if (lines[j2].trim() === "") {
+            bodyStartIndex = j2 + 1;
+            break;
+          }
+          const headerMatch = lines[j2].match(/^([^:]+):\s*(.+)$/);
+          if (headerMatch) {
+            responseHeaders[headerMatch[1].toLowerCase()] = headerMatch[2];
+          }
+        }
+        break;
+      }
+    }
+    const statusMatch = statusLine.match(/HTTP\/[\d.]+\s+(\d+)\s+(.+)/);
+    const status = statusMatch ? parseInt(statusMatch[1]) : 0;
+    const statusText = statusMatch ? statusMatch[2] : "Unknown";
+    const responseBody = lines.slice(bodyStartIndex).join(`
+`);
+    return {
+      success: status >= 200 && status < 400,
+      status,
+      statusText,
+      headers: responseHeaders,
+      body: responseBody.length > 5000 ? `${responseBody.substring(0, 5000)}...
+
+(truncated) use execute_command with grep / tail to paginate the response` : responseBody,
+      url: url2,
+      redirected: false
+    };
+  } catch (error41) {
+    const msg = error41 instanceof Error ? error41.message : String(error41);
+    return {
+      success: false,
+      error: msg,
+      status: 0,
+      statusText: "Error",
+      headers: {},
+      body: "",
+      url: url2,
+      redirected: false
+    };
+  }
+}
 var httpRequestInputSchema;
 var init_httpRequest = __esm(() => {
   init_dist7();
@@ -104916,7 +105028,7 @@ var init_httpRequest = __esm(() => {
 
 // src/core/agents/offSecAgent/tools/documentFinding.ts
 import { join as join5 } from "path";
-import { writeFileSync as writeFileSync3, appendFileSync } from "fs";
+import { writeFileSync as writeFileSync4, appendFileSync as appendFileSync2 } from "fs";
 function documentFinding(ctx4) {
   const { session } = ctx4;
   return tool2({
@@ -104952,7 +105064,7 @@ FINDING STRUCTURE:
         const jsonPath = join5(session.findingsPath, jsonFilename);
         const mdFilename = `${findingId}.md`;
         const mdPath = join5(session.findingsPath, mdFilename);
-        writeFileSync3(jsonPath, JSON.stringify(findingWithMeta, null, 2));
+        writeFileSync4(jsonPath, JSON.stringify(findingWithMeta, null, 2));
         const markdown = `# ${finding.title}
 
 **Severity:** ${finding.severity}  
@@ -104991,12 +105103,12 @@ ${finding.references}` : ""}
 
 *This finding was automatically documented by the Pensar penetration testing agent.*
 `;
-        writeFileSync3(mdPath, markdown);
+        writeFileSync4(mdPath, markdown);
         const summaryPath = join5(session.rootPath, "findings-summary.md");
         const summaryEntry = `- [${finding.severity}] ${finding.title} - \`findings/${mdFilename}\`
 `;
         try {
-          appendFileSync(summaryPath, summaryEntry);
+          appendFileSync2(summaryPath, summaryEntry);
         } catch {
           const header = `# Findings Summary
 
@@ -105006,7 +105118,7 @@ ${finding.references}` : ""}
 ## All Findings
 
 `;
-          writeFileSync3(summaryPath, header + summaryEntry);
+          writeFileSync4(summaryPath, header + summaryEntry);
         }
         return {
           success: true,
@@ -105047,11 +105159,11 @@ var init_documentFinding = __esm(() => {
 import { join as join6 } from "path";
 import { spawn as spawn3 } from "child_process";
 import {
-  existsSync as existsSync10,
-  writeFileSync as writeFileSync4,
+  existsSync as existsSync11,
+  writeFileSync as writeFileSync5,
   chmodSync,
   unlinkSync,
-  mkdirSync as mkdirSync2
+  mkdirSync as mkdirSync3
 } from "fs";
 function sanitizeFilename(str) {
   return str.toLowerCase().replace(/[^a-z0-9_-]/g, "_").replace(/_+/g, "_").replace(/^_|_$/g, "").substring(0, 50);
@@ -105090,67 +105202,126 @@ Max ${MAX_POC_ATTEMPTS} attempts per approach before pivoting.`,
           attemptsRemaining: 0
         };
       }
+      if (ctx4.sandbox) {
+        return executeSandboxPoc(ctx4, poc, currentAttempts);
+      }
+      return executeLocalPoc(ctx4, poc, currentAttempts);
+    }
+  });
+}
+async function executeLocalPoc(ctx4, poc, currentAttempts) {
+  try {
+    const pocsPath = ctx4.session.pocsPath;
+    if (!existsSync11(pocsPath)) {
+      mkdirSync3(pocsPath, { recursive: true });
+    }
+    const { filename, pocContent } = preparePoc(poc, currentAttempts);
+    const pocPath = join6(pocsPath, filename);
+    writeFileSync5(pocPath, pocContent);
+    chmodSync(pocPath, 493);
+    const runner = poc.pocType === "bash" ? "bash" : poc.pocType === "python" ? "python3" : "node";
+    const { stdout, stderr, exitCode } = await runScript(runner, pocPath, 60000, ctx4.abortSignal);
+    if (exitCode !== 0) {
+      try {
+        unlinkSync(pocPath);
+      } catch {}
+    }
+    return {
+      success: exitCode === 0,
+      pocPath: exitCode === 0 ? `pocs/${filename}` : undefined,
+      stdout,
+      stderr,
+      exitCode,
+      attemptsRemaining: MAX_POC_ATTEMPTS - currentAttempts,
+      error: exitCode !== 0 ? `POC exited with code ${exitCode}. ${MAX_POC_ATTEMPTS - currentAttempts} attempts remaining.` : undefined
+    };
+  } catch (error41) {
+    const errorMsg = error41 instanceof Error ? error41.message : String(error41);
+    return {
+      success: false,
+      error: errorMsg,
+      attemptsRemaining: MAX_POC_ATTEMPTS - currentAttempts
+    };
+  }
+}
+async function executeSandboxPoc(ctx4, poc, currentAttempts) {
+  try {
+    const { filename, pocContent } = preparePoc(poc, currentAttempts);
+    const localPocsPath = ctx4.session.pocsPath;
+    if (!existsSync11(localPocsPath)) {
+      mkdirSync3(localPocsPath, { recursive: true });
+    }
+    const localPocPath = join6(localPocsPath, filename);
+    if (existsSync11(localPocPath)) {
+      return {
+        success: false,
+        error: `POC already exists at: pocs/${filename}`,
+        attemptsRemaining: MAX_POC_ATTEMPTS - currentAttempts
+      };
+    }
+    writeFileSync5(localPocPath, pocContent);
+    const sandboxPocPath = `/tmp/pocs/${filename}`;
+    await ctx4.sandbox.execute("mkdir -p /tmp/pocs");
+    const base64Content = Buffer.from(pocContent).toString("base64");
+    await ctx4.sandbox.execute(`echo "${base64Content}" | base64 -d > ${sandboxPocPath}`);
+    await ctx4.sandbox.execute(`chmod +x ${sandboxPocPath}`);
+    const runner = poc.pocType === "bash" ? "bash" : poc.pocType === "python" ? "python3" : "node";
+    const result = await ctx4.sandbox.execute(`cd /tmp && ${runner} ${sandboxPocPath}`, { timeout: 60 });
+    const executionSuccess = result.success || result.exitCode === 0;
+    if (!executionSuccess) {
+      await ctx4.sandbox.execute(`rm -f ${sandboxPocPath}`);
       try {
-        const pocsPath = ctx4.session.pocsPath;
-        if (!existsSync10(pocsPath)) {
-          mkdirSync2(pocsPath, { recursive: true });
-        }
-        const extension = poc.pocType === "bash" ? ".sh" : poc.pocType === "python" ? ".py" : ".js";
-        const sanitizedName = sanitizeFilename(poc.pocName);
-        const filename = `poc_${sanitizedName}${extension}`;
-        const pocPath = join6(pocsPath, filename);
-        let pocContent = poc.pocContent.trim();
-        if (!pocContent.startsWith("#!")) {
-          const shebangs = {
-            bash: `#!/bin/bash
+        unlinkSync(localPocPath);
+      } catch {}
+    }
+    return {
+      success: executionSuccess,
+      pocPath: executionSuccess ? `pocs/${filename}` : undefined,
+      stdout: result.stdout || "(no output)",
+      stderr: executionSuccess ? result.stderr || "(no errors)" : (result.stderr || "POC execution failed") + `
+
+POC file has been deleted.`,
+      exitCode: result.exitCode,
+      attemptsRemaining: MAX_POC_ATTEMPTS - currentAttempts,
+      error: !executionSuccess ? `POC exited with code ${result.exitCode}. ${MAX_POC_ATTEMPTS - currentAttempts} attempts remaining.` : undefined
+    };
+  } catch (error41) {
+    const errorMsg = error41 instanceof Error ? error41.message : String(error41);
+    return {
+      success: false,
+      error: errorMsg,
+      attemptsRemaining: MAX_POC_ATTEMPTS - currentAttempts
+    };
+  }
+}
+function preparePoc(poc, currentAttempts) {
+  const extension = poc.pocType === "bash" ? ".sh" : poc.pocType === "python" ? ".py" : ".js";
+  const sanitizedName = sanitizeFilename(poc.pocName);
+  const filename = `poc_${sanitizedName}${extension}`;
+  let pocContent = poc.pocContent.trim();
+  if (!pocContent.startsWith("#!")) {
+    const shebangs = {
+      bash: `#!/bin/bash
 set -e
 
 `,
-            python: `#!/usr/bin/env python3
+      python: `#!/usr/bin/env python3
 
 `,
-            javascript: `#!/usr/bin/env node
+      javascript: `#!/usr/bin/env node
 
 `
-          };
-          pocContent = shebangs[poc.pocType] + pocContent;
-        }
-        const commentChar = poc.pocType === "javascript" ? "//" : "#";
-        const header = `${commentChar} POC: ${poc.description}
+    };
+    pocContent = shebangs[poc.pocType] + pocContent;
+  }
+  const commentChar = poc.pocType === "javascript" ? "//" : "#";
+  const header = `${commentChar} POC: ${poc.description}
 ${commentChar} Created: ${new Date().toISOString()}
 ${commentChar} Attempt: ${currentAttempts}/${MAX_POC_ATTEMPTS}
 
 `;
-        const afterShebang = pocContent.replace(/^#!.*\n/, (match) => match + header);
-        pocContent = afterShebang;
-        writeFileSync4(pocPath, pocContent);
-        chmodSync(pocPath, 493);
-        const runner = poc.pocType === "bash" ? "bash" : poc.pocType === "python" ? "python3" : "node";
-        const { stdout, stderr, exitCode } = await runScript(runner, pocPath, 60000, ctx4.abortSignal);
-        if (exitCode !== 0) {
-          try {
-            unlinkSync(pocPath);
-          } catch {}
-        }
-        return {
-          success: exitCode === 0,
-          pocPath: exitCode === 0 ? `pocs/${filename}` : undefined,
-          stdout,
-          stderr,
-          exitCode,
-          attemptsRemaining: MAX_POC_ATTEMPTS - currentAttempts,
-          error: exitCode !== 0 ? `POC exited with code ${exitCode}. ${MAX_POC_ATTEMPTS - currentAttempts} attempts remaining.` : undefined
-        };
-      } catch (error41) {
-        const errorMsg = error41 instanceof Error ? error41.message : String(error41);
-        return {
-          success: false,
-          error: errorMsg,
-          attemptsRemaining: MAX_POC_ATTEMPTS - currentAttempts
-        };
-      }
-    }
-  });
+  pocContent = pocContent.replace(/^#!.*\n/, (match) => match + header);
+  return { filename, pocContent };
 }
 function runScript(runner, scriptPath, timeout, abortSignal) {
   return new Promise((resolve4) => {
@@ -105447,7 +105618,7 @@ var init_grep = __esm(() => {
 
 // src/core/agents/offSecAgent/tools/documentAsset.ts
 import { join as join8 } from "path";
-import { writeFileSync as writeFileSync5, mkdirSync as mkdirSync3, existsSync as existsSync11 } from "fs";
+import { writeFileSync as writeFileSync6, mkdirSync as mkdirSync4, existsSync as existsSync12 } from "fs";
 function documentAsset(ctx4) {
   const assetsPath = join8(ctx4.session.rootPath, "assets");
   return tool2({
@@ -105514,8 +105685,8 @@ Each asset creates a JSON file in the assets directory for tracking and analysis
       toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async (asset) => {
-      if (!existsSync11(assetsPath)) {
-        mkdirSync3(assetsPath, { recursive: true });
+      if (!existsSync12(assetsPath)) {
+        mkdirSync4(assetsPath, { recursive: true });
       }
       const sanitizedName = asset.assetName.toLowerCase().replace(/[^a-z0-9-_.]/g, "_");
       const timestamp = new Date().toISOString().replace(/[:.]/g, "-");
@@ -105527,7 +105698,7 @@ Each asset creates a JSON file in the assets directory for tracking and analysis
         sessionId: ctx4.session.id,
         target: ctx4.session.targets[0]
       };
-      writeFileSync5(filepath, JSON.stringify(assetRecord, null, 2));
+      writeFileSync6(filepath, JSON.stringify(assetRecord, null, 2));
       return {
         success: true,
         assetName: asset.assetName,
@@ -105546,7 +105717,7 @@ var init_documentAsset = __esm(() => {
 
 // src/core/agents/offSecAgent/tools/authenticateSession.ts
 import { join as join9 } from "path";
-import { writeFileSync as writeFileSync6 } from "fs";
+import { writeFileSync as writeFileSync7 } from "fs";
 function authenticateSession(ctx4) {
   return tool2({
     description: `Authenticate with credentials and obtain a session cookie for subsequent authenticated requests.
@@ -105611,7 +105782,7 @@ Use this to:
           loginUrl,
           timestamp: new Date().toISOString()
         };
-        writeFileSync6(sessionInfoPath, JSON.stringify(sessionInfo, null, 2));
+        writeFileSync7(sessionInfoPath, JSON.stringify(sessionInfo, null, 2));
         return {
           success: authenticated,
           authenticated,
@@ -105923,7 +106094,7 @@ var init_authentication = __esm(() => {
 
 // src/core/agents/offSecAgent/tools/delegateAuth.ts
 import { join as join10 } from "path";
-import { writeFileSync as writeFileSync7 } from "fs";
+import { writeFileSync as writeFileSync8 } from "fs";
 function mergeAuthCredentials(sessionCreds, explicit) {
   const hasExplicit = explicit.username || explicit.password || explicit.apiKey || explicit.tokens;
   const hasSession = sessionCreds && (sessionCreds.username || sessionCreds.password || sessionCreds.apiKey || sessionCreds.tokens);
@@ -106084,7 +106255,7 @@ When to use delegate_to_auth_subagent vs authenticate_session:
             timestamp: new Date().toISOString(),
             delegatedToSubagent: true
           };
-          writeFileSync7(sessionInfoPath, JSON.stringify(sessionInfo, null, 2));
+          writeFileSync8(sessionInfoPath, JSON.stringify(sessionInfo, null, 2));
         }
         const hasHeaders = result.exportedHeaders && Object.keys(result.exportedHeaders).length > 0;
         const hasCookies = result.exportedCookies && result.exportedCookies.length > 0;
@@ -106489,7 +106660,7 @@ var init_validateDiscovery = __esm(() => {
 
 // src/core/agents/offSecAgent/tools/createAttackSurfaceReport.ts
 import { join as join11 } from "path";
-import { writeFileSync as writeFileSync8 } from "fs";
+import { writeFileSync as writeFileSync9 } from "fs";
 function createAttackSurfaceReport(ctx4) {
   return tool2({
     description: `Provide attack surface analysis results to the orchestrator agent.
@@ -106516,7 +106687,7 @@ Call this at the END of your analysis with:
     }),
     execute: async (results) => {
       const resultsPath = join11(ctx4.session.rootPath, "attack-surface-results.json");
-      writeFileSync8(resultsPath, JSON.stringify(results, null, 2));
+      writeFileSync9(resultsPath, JSON.stringify(results, null, 2));
       return {
         success: true,
         resultsPath,
@@ -106533,7 +106704,7 @@ var init_createAttackSurfaceReport = __esm(() => {
 
 // src/core/agents/offSecAgent/tools/completeAuthentication.ts
 import { join as join12 } from "path";
-import { existsSync as existsSync12, mkdirSync as mkdirSync4, writeFileSync as writeFileSync9 } from "fs";
+import { existsSync as existsSync13, mkdirSync as mkdirSync5, writeFileSync as writeFileSync10 } from "fs";
 function completeAuthentication(ctx4) {
   return tool2({
     description: `Signal that the authentication process is complete.
@@ -106576,8 +106747,8 @@ This tool marks the end of the authentication flow.`,
       if (result.success && (result.exportedCookies || result.exportedHeaders)) {
         try {
           const authDir = join12(ctx4.session.rootPath, AUTH_DIR);
-          if (!existsSync12(authDir)) {
-            mkdirSync4(authDir, { recursive: true });
+          if (!existsSync13(authDir)) {
+            mkdirSync5(authDir, { recursive: true });
           }
           authDataPath = join12(authDir, AUTH_DATA_FILENAME);
           const authData = {
@@ -106589,7 +106760,7 @@ This tool marks the end of the authentication flow.`,
             target: ctx4.target || "",
             timestamp: new Date().toISOString()
           };
-          writeFileSync9(authDataPath, JSON.stringify(authData, null, 2));
+          writeFileSync10(authDataPath, JSON.stringify(authData, null, 2));
           console.log(`Auth data persisted to ${authDataPath}`);
         } catch (err) {
           console.error(`Failed to persist auth data: ${err}`);
@@ -107299,16 +107470,16 @@ __export(exports_agent2, {
   runPentestAgent: () => runPentestAgent,
   TargetedPentestAgent: () => TargetedPentestAgent
 });
-import { existsSync as existsSync13, readdirSync as readdirSync2, readFileSync as readFileSync4 } from "fs";
+import { existsSync as existsSync14, readdirSync as readdirSync2, readFileSync as readFileSync5 } from "fs";
 import { join as join13 } from "path";
 function buildPrompt2(target, objectives, sessionRootPath) {
   const objectiveList = objectives.map((o, i) => `${i + 1}. ${o}`).join(`
 `);
   let authSection = "";
   const authDataPath = join13(sessionRootPath, "auth", "auth-data.json");
-  if (existsSync13(authDataPath)) {
+  if (existsSync14(authDataPath)) {
     try {
-      const raw = readFileSync4(authDataPath, "utf-8");
+      const raw = readFileSync5(authDataPath, "utf-8");
       const authData = JSON.parse(raw);
       if (authData.authenticated) {
         const parts = [
@@ -107354,12 +107525,12 @@ ${objectiveList}
 Do NOT discover or enumerate other endpoints or services. Focus exclusively on the target and objectives above.`;
 }
 function loadFindings(findingsPath) {
-  if (!existsSync13(findingsPath)) {
+  if (!existsSync14(findingsPath)) {
     return [];
   }
   return readdirSync2(findingsPath).filter((f) => f.endsWith(".json")).map((f) => {
     try {
-      const content = readFileSync4(join13(findingsPath, f), "utf-8");
+      const content = readFileSync5(join13(findingsPath, f), "utf-8");
       return JSON.parse(content);
     } catch {
       return null;
@@ -107416,7 +107587,8 @@ var init_agent3 = __esm(() => {
         session,
         authConfig,
         onStepFinish,
-        abortSignal
+        abortSignal,
+        sandbox
       } = opts;
       super({
         system: PENTEST_SYSTEM_PROMPT,
@@ -107427,6 +107599,7 @@ var init_agent3 = __esm(() => {
         authConfig,
         onStepFinish,
         abortSignal,
+        sandbox,
         activeTools: [
           "execute_command",
           "http_request",
@@ -107809,7 +107982,7 @@ var init_spawnCodingAgent = __esm(() => {
 
 // src/core/agents/offSecAgent/tools/provideComparisonResults.ts
 import { join as join14 } from "path";
-import { writeFileSync as writeFileSync10 } from "fs";
+import { writeFileSync as writeFileSync11 } from "fs";
 function provideComparisonResults(ctx4) {
   return tool2({
     description: `Provide the final comparison results with matched, missed, and extra findings.
@@ -107856,7 +108029,7 @@ Results will be saved to: comparison-results.json in the session directory.`,
         precision
       };
       const resultsPath = join14(ctx4.session.rootPath, "comparison-results.json");
-      writeFileSync10(resultsPath, JSON.stringify(result, null, 2));
+      writeFileSync11(resultsPath, JSON.stringify(result, null, 2));
       return {
         success: true,
         resultsPath,
@@ -108087,7 +108260,8 @@ var init_offensiveSecurityAgent = __esm(() => {
         model: input.model,
         authConfig: input.authConfig,
         callbacks: input.callbacks,
-        subagentCallbacks: input.subagentCallbacks
+        subagentCallbacks: input.subagentCallbacks,
+        sandbox: input.sandbox
       });
       let tools = input.extraTools ? { ...builtinTools, ...input.extraTools } : { ...builtinTools };
       let capturedResponse = null;
@@ -108191,7 +108365,7 @@ __export(exports_blackboxAgent, {
   BlackboxAttackSurfaceAgent: () => BlackboxAttackSurfaceAgent
 });
 import { join as join15 } from "path";
-import { existsSync as existsSync14, mkdirSync as mkdirSync5, writeFileSync as writeFileSync11 } from "fs";
+import { existsSync as existsSync15, mkdirSync as mkdirSync6, writeFileSync as writeFileSync12 } from "fs";
 function buildPrompt4(target, session) {
   const scopeConstraints = session.config?.scopeConstraints;
   const authenticationInstructions = session.config?.authenticationInstructions;
@@ -108285,8 +108459,8 @@ var init_blackboxAgent = __esm(() => {
       const resultsPath = join15(session.rootPath, "attack-surface-results.json");
       const assetsPath = join15(session.rootPath, "assets");
       const subagentFolder = join15(session.rootPath, "subagents", "attack-surface-agent");
-      if (!existsSync14(subagentFolder)) {
-        mkdirSync5(subagentFolder, { recursive: true });
+      if (!existsSync15(subagentFolder)) {
+        mkdirSync6(subagentFolder, { recursive: true });
       }
       super({
         system: detectOSAndEnhancePrompt(SYSTEM),
@@ -108299,7 +108473,7 @@ var init_blackboxAgent = __esm(() => {
           onStepFinish?.(e);
           const messages = e.response.messages;
           if (messages !== undefined) {
-            writeFileSync11(join15(subagentFolder, "attack-surface-agent.log"), JSON.stringify(messages, null, 2));
+            writeFileSync12(join15(subagentFolder, "attack-surface-agent.log"), JSON.stringify(messages, null, 2));
           }
         },
         abortSignal,
@@ -108324,7 +108498,7 @@ var init_blackboxAgent = __esm(() => {
         resolveResult: () => {
           let results = null;
           let targets = [];
-          if (existsSync14(resultsPath)) {
+          if (existsSync15(resultsPath)) {
             try {
               results = loadAttackSurfaceResults(resultsPath);
               targets = results.targets || [];
@@ -135125,7 +135299,7 @@ var useTerminalDimensions = () => {
 };
 
 // src/tui/index.tsx
-var import_react80 = __toESM(require_react(), 1);
+var import_react83 = __toESM(require_react(), 1);
 
 // src/tui/components/footer.tsx
 import os5 from "os";
@@ -142370,6 +142544,206 @@ function ResponsibleUseDisclosure({
   }, undefined, true, undefined, this);
 }
 
+// src/tui/context/toast.tsx
+var import_react53 = __toESM(require_react(), 1);
+var ToastContext = import_react53.createContext(null);
+var nextId = 0;
+var DEFAULT_DURATION = {
+  default: 3000,
+  warn: 4000,
+  error: 5000
+};
+function ToastProvider({ children }) {
+  const [toasts, setToasts] = import_react53.useState([]);
+  const dismiss = import_react53.useCallback((id) => {
+    setToasts((prev) => prev.filter((t2) => t2.id !== id));
+  }, []);
+  const toast = import_react53.useCallback((message, variant = "default", duration) => {
+    const id = nextId++;
+    const ms = duration ?? DEFAULT_DURATION[variant];
+    setToasts((prev) => [...prev, { id, message, variant, duration: ms }]);
+    setTimeout(() => dismiss(id), ms);
+  }, [dismiss]);
+  const value = import_react53.useMemo(() => ({ toasts, toast, dismiss }), [toasts, toast, dismiss]);
+  return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ToastContext.Provider, {
+    value,
+    children
+  }, undefined, false, undefined, this);
+}
+function useToast() {
+  const ctx4 = import_react53.useContext(ToastContext);
+  if (!ctx4)
+    throw new Error("useToast() must be used within <ToastProvider>");
+  return ctx4;
+}
+
+// src/tui/components/toast.tsx
+var VARIANT_ICONS = {
+  default: "●",
+  error: "✖",
+  warn: "⚠"
+};
+function variantColor(variant, colors2) {
+  switch (variant) {
+    case "error":
+      return colors2.error;
+    case "warn":
+      return colors2.warning;
+    default:
+      return colors2.info;
+  }
+}
+function ToastItem({
+  message,
+  variant,
+  onDismiss
+}) {
+  const { colors: colors2 } = useTheme();
+  const accent = variantColor(variant, colors2);
+  return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
+    flexDirection: "row",
+    gap: 1,
+    paddingLeft: 1,
+    paddingRight: 1,
+    border: ["left"],
+    borderColor: accent,
+    backgroundColor: colors2.backgroundPanel,
+    onMouseUp: () => onDismiss(),
+    children: [
+      /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+        fg: accent,
+        children: VARIANT_ICONS[variant]
+      }, undefined, false, undefined, this),
+      /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+        fg: colors2.text,
+        children: message
+      }, undefined, false, undefined, this)
+    ]
+  }, undefined, true, undefined, this);
+}
+function ToastContainer() {
+  const { toasts, dismiss } = useToast();
+  const dims = useTerminalDimensions();
+  if (toasts.length === 0)
+    return null;
+  return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
+    position: "absolute",
+    right: 1,
+    top: 0,
+    flexDirection: "column",
+    gap: 0,
+    alignItems: "flex-end",
+    maxWidth: Math.min(60, dims.width - 4),
+    zIndex: 9999,
+    children: toasts.map((t2) => /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ToastItem, {
+      message: t2.message,
+      variant: t2.variant,
+      onDismiss: () => dismiss(t2.id)
+    }, t2.id, false, undefined, this))
+  }, undefined, false, undefined, this);
+}
+
+// src/tui/components/error-boundary.tsx
+var import_react55 = __toESM(require_react(), 1);
+
+// src/core/logger/index.ts
+import {
+  appendFileSync,
+  existsSync as existsSync8,
+  mkdirSync,
+  readFileSync as readFileSync2,
+  writeFileSync as writeFileSync2
+} from "fs";
+import os6 from "os";
+import path7 from "path";
+var ERROR_LOG_PATH = path7.join(os6.homedir(), ".pensar", "error.log");
+var RETENTION_DAYS = 7;
+var TIMESTAMP_RE = /^(\d{4}-\d{2}-\d{2}T[\d:.]+Z) - /;
+var hasPruned = false;
+function pruneErrorLog() {
+  if (hasPruned)
+    return;
+  hasPruned = true;
+  try {
+    if (!existsSync8(ERROR_LOG_PATH))
+      return;
+    const cutoff = Date.now() - RETENTION_DAYS * 86400000;
+    const raw = readFileSync2(ERROR_LOG_PATH, "utf8");
+    const lines = raw.split(`
+`);
+    const kept = [];
+    let keeping = true;
+    for (const line of lines) {
+      const match = TIMESTAMP_RE.exec(line);
+      if (match) {
+        keeping = new Date(match[1]).getTime() >= cutoff;
+      }
+      if (keeping) {
+        kept.push(line);
+      }
+    }
+    writeFileSync2(ERROR_LOG_PATH, kept.join(`
+`), "utf8");
+  } catch {}
+}
+function writeErrorLog(error, source) {
+  try {
+    pruneErrorLog();
+    const dir = path7.dirname(ERROR_LOG_PATH);
+    if (!existsSync8(dir)) {
+      mkdirSync(dir, { recursive: true });
+    }
+    const timestamp = new Date().toISOString();
+    const tag = source ? `[${source}] ` : "";
+    const message = error instanceof Error ? `${error.message}
+${error.stack ?? ""}` : String(error);
+    const entry = `${timestamp} - [ERROR] ${tag}${message}
+`;
+    appendFileSync(ERROR_LOG_PATH, entry, "utf8");
+  } catch {}
+}
+
+// src/tui/components/error-boundary.tsx
+var MAX_ERRORS = 3;
+var ERROR_WINDOW_MS = 5000;
+
+class ErrorBoundaryInner extends import_react55.default.Component {
+  state = {
+    hasError: false,
+    errorTimestamps: [],
+    halted: false
+  };
+  static getDerivedStateFromError() {
+    return { hasError: true };
+  }
+  componentDidCatch(error) {
+    console.error("[ErrorBoundary]", error);
+    writeErrorLog(error, "TUI");
+    this.props.onError(error.message);
+    const now = Date.now();
+    const recent = [...this.state.errorTimestamps, now].filter((t2) => now - t2 < ERROR_WINDOW_MS);
+    if (recent.length >= MAX_ERRORS) {
+      this.props.onError("Too many errors in quick succession — UI recovery halted.");
+      this.setState({ halted: true, hasError: false, errorTimestamps: recent });
+      return;
+    }
+    this.setState({ hasError: false, errorTimestamps: recent });
+  }
+  render() {
+    if (this.state.halted) {
+      return null;
+    }
+    return this.props.children;
+  }
+}
+function ErrorBoundary2({ children }) {
+  const { toast } = useToast();
+  const handleError = import_react55.useCallback((message) => {
+    toast(message, "error");
+  }, [toast]);
+  return import_react55.default.createElement(ErrorBoundaryInner, { onError: handleError }, children);
+}
+
 // src/tui/keybindings-registry.ts
 var keybindings = [
   {
@@ -142475,16 +142849,16 @@ function ShortcutsDialog({
 }
 
 // src/tui/components/commands/help-dialog.tsx
-var import_react54 = __toESM(require_react(), 1);
+var import_react57 = __toESM(require_react(), 1);
 function HelpDialog() {
   const { colors: colors2 } = useTheme();
   const { commands: commands2 } = useCommand();
   const route = useRoute();
   const dimensions = useTerminalDimensions();
-  const [selectedIndex, setSelectedIndex] = import_react54.useState(0);
-  const [showDetail, setShowDetail] = import_react54.useState(false);
-  const scrollboxRef = import_react54.useRef(null);
-  const commandsByCategory = import_react54.useMemo(() => {
+  const [selectedIndex, setSelectedIndex] = import_react57.useState(0);
+  const [showDetail, setShowDetail] = import_react57.useState(false);
+  const scrollboxRef = import_react57.useRef(null);
+  const commandsByCategory = import_react57.useMemo(() => {
     const grouped = {};
     for (const cmd of commands2) {
       const category = cmd.category || "Other";
@@ -142495,15 +142869,15 @@ function HelpDialog() {
     }
     return grouped;
   }, [commands2]);
-  const flatCommands = import_react54.useMemo(() => {
+  const flatCommands = import_react57.useMemo(() => {
     return commands2;
   }, [commands2]);
-  import_react54.useEffect(() => {
+  import_react57.useEffect(() => {
     if (selectedIndex >= flatCommands.length) {
       setSelectedIndex(Math.max(0, flatCommands.length - 1));
     }
   }, [flatCommands.length, selectedIndex]);
-  import_react54.useEffect(() => {
+  import_react57.useEffect(() => {
     scrollToIndex(scrollboxRef.current, selectedIndex, flatCommands, (cmd) => cmd.name);
   }, [selectedIndex, flatCommands]);
   const handleClose = () => {
@@ -142938,10 +143312,10 @@ function ModelsDisplay() {
 }
 
 // src/tui/context/keybinding.tsx
-var import_react61 = __toESM(require_react(), 1);
+var import_react64 = __toESM(require_react(), 1);
 
 // src/tui/keybindings/keybind.tsx
-var import_react57 = __toESM(require_react(), 1);
+var import_react60 = __toESM(require_react(), 1);
 
 // src/tui/keybindings/actions.ts
 var movementActions = [
@@ -143193,7 +143567,7 @@ var allActions = [
 var actionsByKey = new Map(allActions.map((action) => [action.key, action]));
 var actionsById = new Map(allActions.map((action) => [action.id, action]));
 // src/tui/keybindings/keybind.tsx
-var LeaderKeyContext = import_react57.createContext(null);
+var LeaderKeyContext = import_react60.createContext(null);
 // src/tui/keybindings/registry.ts
 function createKeybindings(deps) {
   const {
@@ -143399,7 +143773,7 @@ var Keybind;
 })(Keybind ||= {});
 
 // src/tui/context/keybinding.tsx
-var KeybindingContext = import_react61.createContext(undefined);
+var KeybindingContext = import_react64.createContext(undefined);
 function KeybindingProvider({
   children,
   deps
@@ -143438,15 +143812,15 @@ function KeybindingProvider({
 }
 
 // src/tui/components/pentest/pentest.tsx
-var import_react70 = __toESM(require_react(), 1);
-import { existsSync as existsSync16, readdirSync as readdirSync4, readFileSync as readFileSync6 } from "fs";
+var import_react73 = __toESM(require_react(), 1);
+import { existsSync as existsSync17, readdirSync as readdirSync4, readFileSync as readFileSync7 } from "fs";
 import { join as join17 } from "path";
 import { exec as exec3 } from "child_process";
 
 // src/core/workflows/pentest.ts
 init_blackboxAgent();
 init_agent3();
-import { existsSync as existsSync15, readdirSync as readdirSync3, readFileSync as readFileSync5 } from "fs";
+import { existsSync as existsSync16, readdirSync as readdirSync3, readFileSync as readFileSync6 } from "fs";
 import { join as join16 } from "path";
 
 // src/core/workflows/whiteboxAttackSurface.ts
@@ -143885,7 +144259,7 @@ async function runPentestWorkflow(input) {
     findings,
     findingsPath: session.findingsPath,
     pocsPath: session.pocsPath,
-    reportPath: existsSync15(reportPath) ? reportPath : null
+    reportPath: existsSync16(reportPath) ? reportPath : null
   };
 }
 async function runWhiteboxPhase(opts) {
@@ -143955,12 +144329,12 @@ async function runWithBoundedConcurrency2(items, concurrency, fn) {
   return results;
 }
 function loadFindings2(findingsPath) {
-  if (!existsSync15(findingsPath)) {
+  if (!existsSync16(findingsPath)) {
     return [];
   }
   return readdirSync3(findingsPath).filter((f) => f.endsWith(".json")).map((f) => {
     try {
-      const content = readFileSync5(join16(findingsPath, f), "utf-8");
+      const content = readFileSync6(join16(findingsPath, f), "utf-8");
       return JSON.parse(content);
     } catch {
       return null;
@@ -143989,7 +144363,7 @@ Found ${findings.length} vulnerabilities`);
 }
 
 // src/tui/components/agent-display.tsx
-var import_react68 = __toESM(require_react(), 1);
+var import_react71 = __toESM(require_react(), 1);
 
 // node_modules/marked/lib/marked.esm.js
 function L2() {
@@ -145755,14 +146129,14 @@ function getResultSummary(result, toolName) {
   return null;
 }
 // src/tui/components/shared/ascii-spinner.tsx
-var import_react62 = __toESM(require_react(), 1);
+var import_react65 = __toESM(require_react(), 1);
 var SPINNER_FRAMES = ["/", "-", "\\", "|"];
 var SPINNER_INTERVAL = 100;
 function AsciiSpinner({ label, fg: fg2 }) {
   const { colors: colors2 } = useTheme();
   const spinnerColor = fg2 ?? colors2.info;
-  const [frame, setFrame] = import_react62.useState(0);
-  import_react62.useEffect(() => {
+  const [frame, setFrame] = import_react65.useState(0);
+  import_react65.useEffect(() => {
     const interval = setInterval(() => {
       setFrame((f) => (f + 1) % SPINNER_FRAMES.length);
     }, SPINNER_INTERVAL);
@@ -145774,14 +146148,14 @@ function AsciiSpinner({ label, fg: fg2 }) {
   }, undefined, false, undefined, this);
 }
 // src/tui/components/shared/tool-renderer.tsx
-var import_react63 = __toESM(require_react(), 1);
-var ToolRenderer = import_react63.memo(function ToolRenderer2({
+var import_react66 = __toESM(require_react(), 1);
+var ToolRenderer = import_react66.memo(function ToolRenderer2({
   message,
   verbose = false,
   expandedLogs = false
 }) {
   const { colors: colors2 } = useTheme();
-  const [showOutput, setShowOutput] = import_react63.useState(false);
+  const [showOutput, setShowOutput] = import_react66.useState(false);
   if (!isToolMessage(message)) {
     return null;
   }
@@ -145878,8 +146252,8 @@ var ToolRenderer = import_react63.memo(function ToolRenderer2({
   }, undefined, true, undefined, this);
 });
 // src/tui/components/shared/message-renderer.tsx
-var import_react64 = __toESM(require_react(), 1);
-var MessageRenderer = import_react64.memo(function MessageRenderer2({
+var import_react67 = __toESM(require_react(), 1);
+var MessageRenderer = import_react67.memo(function MessageRenderer2({
   message,
   isStreaming = false,
   verbose = false,
@@ -145889,7 +146263,7 @@ var MessageRenderer = import_react64.memo(function MessageRenderer2({
 }) {
   const { colors: colors2 } = useTheme();
   const content = typeof message.content === "string" ? message.content : JSON.stringify(message.content);
-  const displayContent = import_react64.useMemo(() => message.role === "assistant" ? markdownToStyledText(content, colors2) : content, [content, message.role, colors2]);
+  const displayContent = import_react67.useMemo(() => message.role === "assistant" ? markdownToStyledText(content, colors2) : content, [content, message.role, colors2]);
   if (isToolMessage(message)) {
     return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ToolRenderer, {
       message,
@@ -146001,9 +146375,9 @@ var MessageRenderer = import_react64.memo(function MessageRenderer2({
   }, undefined, false, undefined, this);
 });
 // src/tui/components/shared/approval-prompt.tsx
-var import_react65 = __toESM(require_react(), 1);
+var import_react68 = __toESM(require_react(), 1);
 // src/tui/components/shared/message-reducer.ts
-var import_react67 = __toESM(require_react(), 1);
+var import_react70 = __toESM(require_react(), 1);
 // src/tui/components/agent-display.tsx
 function getStableKey(item, contextId = "root") {
   if ("messages" in item) {
@@ -146079,11 +146453,11 @@ function AgentDisplay({
     ]
   }, undefined, true, undefined, this);
 }
-var SubAgentDisplay = import_react68.memo(function SubAgentDisplay2({
+var SubAgentDisplay = import_react71.memo(function SubAgentDisplay2({
   subagent
 }) {
   const { colors: colors2 } = useTheme();
-  const [open, setOpen] = import_react68.useState(false);
+  const [open, setOpen] = import_react71.useState(false);
   return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
     height: open ? 40 : "auto",
     onMouseDown: () => setOpen(!open),
@@ -146138,7 +146512,7 @@ var SubAgentDisplay = import_react68.memo(function SubAgentDisplay2({
     ]
   }, undefined, true, undefined, this);
 });
-var AgentMessage = import_react68.memo(function AgentMessage2({
+var AgentMessage = import_react71.memo(function AgentMessage2({
   message
 }) {
   const { colors: colors2 } = useTheme();
@@ -146251,8 +146625,8 @@ var AgentMessage = import_react68.memo(function AgentMessage2({
 });
 function ToolDetails({ message }) {
   const { colors: colors2 } = useTheme();
-  const [showArgs, setShowArgs] = import_react68.useState(false);
-  const [showResult, setShowResult] = import_react68.useState(false);
+  const [showArgs, setShowArgs] = import_react71.useState(false);
+  const [showResult, setShowResult] = import_react71.useState(false);
   if (message.role !== "tool") {
     return null;
   }
@@ -146329,24 +146703,24 @@ function Pentest({ sessionId }) {
   const route = useRoute();
   const { model, setThinking, setIsExecuting, isExecuting } = useAgent();
   const { stack, externalDialogOpen } = useDialog();
-  const [session, setSession] = import_react70.useState(null);
-  const [error41, setError] = import_react70.useState(null);
-  const [phase, setPhase] = import_react70.useState("loading");
-  const [abortController, setAbortController] = import_react70.useState(null);
-  const [panelMessages, setPanelMessages] = import_react70.useState([]);
-  const panelTextRef = import_react70.useRef("");
-  const panelSourceRef = import_react70.useRef(null);
-  const [pentestAgents, setPentestAgents] = import_react70.useState({});
-  const pentestTextRefs = import_react70.useRef({});
-  const [assets, setAssets] = import_react70.useState([]);
-  const [viewMode, setViewMode] = import_react70.useState("overview");
-  const [selectedAgentId, setSelectedAgentId] = import_react70.useState(null);
-  const [focusedIndex, setFocusedIndex] = import_react70.useState(0);
-  const [showOrchestratorPanel, setShowOrchestratorPanel] = import_react70.useState(false);
-  const [startTime, setStartTime] = import_react70.useState(null);
-  const pentestAgentList = import_react70.useMemo(() => Object.values(pentestAgents).sort((a, b3) => a.createdAt.getTime() - b3.createdAt.getTime()), [pentestAgents]);
-  const selectedAgent = import_react70.useMemo(() => selectedAgentId ? pentestAgents[selectedAgentId] ?? null : null, [pentestAgents, selectedAgentId]);
-  import_react70.useEffect(() => {
+  const [session, setSession] = import_react73.useState(null);
+  const [error41, setError] = import_react73.useState(null);
+  const [phase, setPhase] = import_react73.useState("loading");
+  const [abortController, setAbortController] = import_react73.useState(null);
+  const [panelMessages, setPanelMessages] = import_react73.useState([]);
+  const panelTextRef = import_react73.useRef("");
+  const panelSourceRef = import_react73.useRef(null);
+  const [pentestAgents, setPentestAgents] = import_react73.useState({});
+  const pentestTextRefs = import_react73.useRef({});
+  const [assets, setAssets] = import_react73.useState([]);
+  const [viewMode, setViewMode] = import_react73.useState("overview");
+  const [selectedAgentId, setSelectedAgentId] = import_react73.useState(null);
+  const [focusedIndex, setFocusedIndex] = import_react73.useState(0);
+  const [showOrchestratorPanel, setShowOrchestratorPanel] = import_react73.useState(false);
+  const [startTime, setStartTime] = import_react73.useState(null);
+  const pentestAgentList = import_react73.useMemo(() => Object.values(pentestAgents).sort((a, b3) => a.createdAt.getTime() - b3.createdAt.getTime()), [pentestAgents]);
+  const selectedAgent = import_react73.useMemo(() => selectedAgentId ? pentestAgents[selectedAgentId] ?? null : null, [pentestAgents, selectedAgentId]);
+  import_react73.useEffect(() => {
     async function load() {
       try {
         const s = await sessions.get(sessionId);
@@ -146363,19 +146737,19 @@ function Pentest({ sessionId }) {
     }
     load();
   }, [sessionId]);
-  import_react70.useEffect(() => {
+  import_react73.useEffect(() => {
     if (!session)
       return;
     const assetsPath = join17(session.rootPath, "assets");
     function readAssets() {
-      if (!existsSync16(assetsPath))
+      if (!existsSync17(assetsPath))
         return;
       try {
         const files = readdirSync4(assetsPath).filter((f) => f.endsWith(".json"));
         const loaded = [];
         for (const file2 of files) {
           try {
-            const content = readFileSync6(join17(assetsPath, file2), "utf-8");
+            const content = readFileSync7(join17(assetsPath, file2), "utf-8");
             loaded.push(JSON.parse(content));
           } catch {}
         }
@@ -146386,12 +146760,12 @@ function Pentest({ sessionId }) {
     const interval = setInterval(readAssets, 2000);
     return () => clearInterval(interval);
   }, [session]);
-  import_react70.useEffect(() => {
+  import_react73.useEffect(() => {
     return () => {
       abortController?.abort();
     };
   }, [abortController]);
-  const ensurePentestAgent = import_react70.useCallback((subagentId) => {
+  const ensurePentestAgent = import_react73.useCallback((subagentId) => {
     setPentestAgents((prev) => {
       if (prev[subagentId])
         return prev;
@@ -146408,7 +146782,7 @@ function Pentest({ sessionId }) {
       };
     });
   }, []);
-  const handleSubagentSpawn = import_react70.useCallback(({
+  const handleSubagentSpawn = import_react73.useCallback(({
     subagentId,
     input
   }) => {
@@ -146428,7 +146802,7 @@ function Pentest({ sessionId }) {
       }
     }));
   }, []);
-  const handleSubagentComplete = import_react70.useCallback(({ subagentId, status }) => {
+  const handleSubagentComplete = import_react73.useCallback(({ subagentId, status }) => {
     if (!subagentId.startsWith("pentest-agent-"))
       return;
     setPentestAgents((prev) => {
@@ -146441,7 +146815,7 @@ function Pentest({ sessionId }) {
       };
     });
   }, []);
-  const appendPanelText = import_react70.useCallback((source, text2) => {
+  const appendPanelText = import_react73.useCallback((source, text2) => {
     if (panelSourceRef.current !== source) {
       panelTextRef.current = "";
       panelSourceRef.current = source;
@@ -146466,7 +146840,7 @@ function Pentest({ sessionId }) {
       ];
     });
   }, []);
-  const appendPentestText = import_react70.useCallback((subagentId, text2) => {
+  const appendPentestText = import_react73.useCallback((subagentId, text2) => {
     ensurePentestAgent(subagentId);
     if (!pentestTextRefs.current[subagentId]) {
       pentestTextRefs.current[subagentId] = "";
@@ -146499,7 +146873,7 @@ function Pentest({ sessionId }) {
       };
     });
   }, [ensurePentestAgent]);
-  const addPanelToolCall = import_react70.useCallback((toolCallId, toolName, args) => {
+  const addPanelToolCall = import_react73.useCallback((toolCallId, toolName, args) => {
     panelTextRef.current = "";
     panelSourceRef.current = null;
     const description = typeof args?.toolCallDescription === "string" ? args.toolCallDescription : toolName;
@@ -146518,7 +146892,7 @@ function Pentest({ sessionId }) {
       return [...prev, msg];
     });
   }, []);
-  const addPentestToolCall = import_react70.useCallback((subagentId, toolCallId, toolName, args) => {
+  const addPentestToolCall = import_react73.useCallback((subagentId, toolCallId, toolName, args) => {
     pentestTextRefs.current[subagentId] = "";
     ensurePentestAgent(subagentId);
     const description = typeof args?.toolCallDescription === "string" ? args.toolCallDescription : toolName;
@@ -146563,12 +146937,12 @@ function Pentest({ sessionId }) {
       }
     ];
   };
-  const updatePanelToolResult = import_react70.useCallback((toolCallId, toolName, result) => {
+  const updatePanelToolResult = import_react73.useCallback((toolCallId, toolName, result) => {
     panelTextRef.current = "";
     panelSourceRef.current = null;
     setPanelMessages((prev) => toolResultUpdater(prev, toolCallId, toolName, result));
   }, []);
-  const updatePentestToolResult = import_react70.useCallback((subagentId, toolCallId, toolName, result) => {
+  const updatePentestToolResult = import_react73.useCallback((subagentId, toolCallId, toolName, result) => {
     pentestTextRefs.current[subagentId] = "";
     setPentestAgents((prev) => {
       const agent = prev[subagentId];
@@ -146583,7 +146957,7 @@ function Pentest({ sessionId }) {
       };
     });
   }, []);
-  const startPentest = import_react70.useCallback(async (s) => {
+  const startPentest = import_react73.useCallback(async (s) => {
     setPhase("discovery");
     setStartTime(new Date);
     setIsExecuting(true);
@@ -146679,7 +147053,7 @@ function Pentest({ sessionId }) {
     handleSubagentSpawn,
     handleSubagentComplete
   ]);
-  import_react70.useEffect(() => {
+  import_react73.useEffect(() => {
     if (session && phase === "loading") {
       startPentest(session);
     }
@@ -146741,11 +147115,11 @@ function Pentest({ sessionId }) {
       }
     }
   });
-  const openReport = import_react70.useCallback(() => {
+  const openReport = import_react73.useCallback(() => {
     if (!session)
       return;
     const reportPath = join17(session.rootPath, "pentest-report.md");
-    if (existsSync16(reportPath)) {
+    if (existsSync17(reportPath)) {
       exec3(`open "${reportPath}"`);
     } else {
       exec3(`open "${session.rootPath}"`);
@@ -146933,7 +147307,7 @@ function OrchestratorPanel({
 }) {
   const { colors: colors2 } = useTheme();
   const isRunning = phase !== "loading" && phase !== "completed" && phase !== "error";
-  const assetSummary = import_react70.useMemo(() => {
+  const assetSummary = import_react73.useMemo(() => {
     const byType = {};
     for (const a of assets) {
       const key = a.assetType;
@@ -147182,7 +147556,7 @@ function AgentCardGrid({
   onSelectAgent
 }) {
   const { colors: colors2 } = useTheme();
-  const rows = import_react70.useMemo(() => {
+  const rows = import_react73.useMemo(() => {
     const result = [];
     for (let i = 0;i < agents.length; i += 2) {
       result.push(agents.slice(i, i + 2));
@@ -147230,14 +147604,14 @@ function AgentCard({
     completed: colors2.primary,
     failed: colors2.error
   }[agent.status];
-  const lastActivity = import_react70.useMemo(() => {
+  const lastActivity = import_react73.useMemo(() => {
     const last = agent.messages[agent.messages.length - 1];
     if (!last)
       return "Starting...";
     const text2 = typeof last.content === "string" ? last.content.replace(/\n/g, " ").trim() : "Working...";
     return text2.length > 50 ? text2.substring(0, 47) + "..." : text2;
   }, [agent.messages]);
-  const toolCalls = import_react70.useMemo(() => agent.messages.filter((m3) => m3.role === "tool").length, [agent.messages]);
+  const toolCalls = import_react73.useMemo(() => agent.messages.filter((m3) => m3.role === "tool").length, [agent.messages]);
   return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
     flexGrow: 1,
     flexBasis: 0,
@@ -147424,8 +147798,8 @@ function MetricsBar({
   isExecuting
 }) {
   const { colors: colors2 } = useTheme();
-  const [now2, setNow] = import_react70.useState(Date.now());
-  import_react70.useEffect(() => {
+  const [now2, setNow] = import_react73.useState(Date.now());
+  import_react73.useEffect(() => {
     if (!isExecuting)
       return;
     const interval = setInterval(() => setNow(Date.now()), 1000);
@@ -147568,7 +147942,7 @@ function MetricsBar({
 }
 
 // src/tui/components/operator-dashboard/index.tsx
-var import_react75 = __toESM(require_react(), 1);
+var import_react78 = __toESM(require_react(), 1);
 
 // src/core/api/offesecAgent.ts
 init_offensiveSecurityAgent();
@@ -147665,7 +148039,7 @@ function InlineApprovalPrompt2({ approval }) {
 }
 
 // src/tui/components/chat/loading-indicator.tsx
-var import_react72 = __toESM(require_react(), 1);
+var import_react75 = __toESM(require_react(), 1);
 var SPINNER_FRAMES2 = ["⠋", "⠙", "⠹", "⠸", "⠼", "⠴", "⠦", "⠧", "⠇", "⠏"];
 var SPINNER_INTERVAL2 = 80;
 var DOTS_FRAMES = ["", ".", "..", "..."];
@@ -147676,15 +148050,15 @@ function LoadingIndicator({
   toolName
 }) {
   const { colors: colors2 } = useTheme();
-  const [spinnerFrame, setSpinnerFrame] = import_react72.useState(0);
-  const [dotsFrame, setDotsFrame] = import_react72.useState(0);
-  import_react72.useEffect(() => {
+  const [spinnerFrame, setSpinnerFrame] = import_react75.useState(0);
+  const [dotsFrame, setDotsFrame] = import_react75.useState(0);
+  import_react75.useEffect(() => {
     const interval = setInterval(() => {
       setSpinnerFrame((f) => (f + 1) % SPINNER_FRAMES2.length);
     }, SPINNER_INTERVAL2);
     return () => clearInterval(interval);
   }, []);
-  import_react72.useEffect(() => {
+  import_react75.useEffect(() => {
     const interval = setInterval(() => {
       setDotsFrame((f) => (f + 1) % DOTS_FRAMES.length);
     }, DOTS_INTERVAL);
@@ -147954,7 +148328,7 @@ function MessageList({
 }
 
 // src/tui/components/chat/input-area.tsx
-var import_react73 = __toESM(require_react(), 1);
+var import_react76 = __toESM(require_react(), 1);
 function NormalInputAreaInner({
   value,
   onChange,
@@ -147969,17 +148343,17 @@ function NormalInputAreaInner({
 }) {
   const { colors: colors2 } = useTheme();
   const { inputValue, setInputValue } = useInput();
-  const promptRef = import_react73.useRef(null);
-  const isExternalUpdate = import_react73.useRef(false);
+  const promptRef = import_react76.useRef(null);
+  const isExternalUpdate = import_react76.useRef(false);
   const isDisabled = status === "running";
-  import_react73.useEffect(() => {
+  import_react76.useEffect(() => {
     if (value !== inputValue) {
       isExternalUpdate.current = true;
       setInputValue(value);
       promptRef.current?.setValue(value);
     }
   }, [value]);
-  import_react73.useEffect(() => {
+  import_react76.useEffect(() => {
     if (isExternalUpdate.current) {
       isExternalUpdate.current = false;
       return;
@@ -148129,7 +148503,7 @@ function ApprovalInputArea2({
   lastDeclineNote
 }) {
   const { colors: colors2 } = useTheme();
-  const [focusedElement, setFocusedElement] = import_react73.useState(0);
+  const [focusedElement, setFocusedElement] = import_react76.useState(0);
   const tierColor = getTierColor(colors2, approval.tier);
   useKeyboard((key) => {
     if (key.name === "up") {
@@ -148251,20 +148625,20 @@ function OperatorDashboard({
   const route = useRoute();
   const config4 = useConfig();
   const { model, setThinking, setIsExecuting } = useAgent();
-  const [session, setSession] = import_react75.useState(null);
-  const [loading, setLoading] = import_react75.useState(true);
-  const [error41, setError] = import_react75.useState(null);
-  const [status, setStatus] = import_react75.useState("idle");
-  const abortControllerRef = import_react75.useRef(null);
-  const [messages, setMessages] = import_react75.useState([]);
-  const textRef = import_react75.useRef("");
-  const [inputValue, setInputValue] = import_react75.useState("");
-  const [operatorState, setOperatorState] = import_react75.useState(() => createInitialOperatorState("manual", 2));
-  const [pendingApprovals] = import_react75.useState([]);
-  const [lastApprovedAction] = import_react75.useState(null);
-  const [verboseMode, setVerboseMode] = import_react75.useState(false);
-  const [expandedLogs, setExpandedLogs] = import_react75.useState(false);
-  import_react75.useEffect(() => {
+  const [session, setSession] = import_react78.useState(null);
+  const [loading, setLoading] = import_react78.useState(true);
+  const [error41, setError] = import_react78.useState(null);
+  const [status, setStatus] = import_react78.useState("idle");
+  const abortControllerRef = import_react78.useRef(null);
+  const [messages, setMessages] = import_react78.useState([]);
+  const textRef = import_react78.useRef("");
+  const [inputValue, setInputValue] = import_react78.useState("");
+  const [operatorState, setOperatorState] = import_react78.useState(() => createInitialOperatorState("manual", 2));
+  const [pendingApprovals] = import_react78.useState([]);
+  const [lastApprovedAction] = import_react78.useState(null);
+  const [verboseMode, setVerboseMode] = import_react78.useState(false);
+  const [expandedLogs, setExpandedLogs] = import_react78.useState(false);
+  import_react78.useEffect(() => {
     async function loadSession() {
       try {
         const s = await sessions.get(sessionId);
@@ -148296,7 +148670,7 @@ function OperatorDashboard({
     }
     loadSession();
   }, [sessionId, isResume]);
-  const appendText = import_react75.useCallback((text2) => {
+  const appendText = import_react78.useCallback((text2) => {
     textRef.current += text2;
     const accumulated = textRef.current;
     setMessages((prev) => {
@@ -148312,7 +148686,7 @@ function OperatorDashboard({
       ];
     });
   }, []);
-  const addToolCall = import_react75.useCallback((toolCallId, toolName, args) => {
+  const addToolCall = import_react78.useCallback((toolCallId, toolName, args) => {
     textRef.current = "";
     setMessages((prev) => [
       ...prev,
@@ -148327,7 +148701,7 @@ function OperatorDashboard({
       }
     ]);
   }, []);
-  const updateToolResult = import_react75.useCallback((toolCallId, _toolName, result) => {
+  const updateToolResult = import_react78.useCallback((toolCallId, _toolName, result) => {
     textRef.current = "";
     setMessages((prev) => {
       const idx = prev.findIndex((m3) => isToolMessage(m3) && m3.toolCallId === toolCallId);
@@ -148338,7 +148712,7 @@ function OperatorDashboard({
       return updated;
     });
   }, []);
-  const runAgent = import_react75.useCallback(async (prompt) => {
+  const runAgent = import_react78.useCallback(async (prompt) => {
     if (!session)
       return;
     setStatus("running");
@@ -148417,13 +148791,13 @@ function OperatorDashboard({
     setThinking,
     setIsExecuting
   ]);
-  const handleSubmit = import_react75.useCallback((value) => {
+  const handleSubmit = import_react78.useCallback((value) => {
     if (!value.trim() || status === "running")
       return;
     setInputValue("");
     runAgent(value.trim());
   }, [status, runAgent]);
-  const handleAbort = import_react75.useCallback(() => {
+  const handleAbort = import_react78.useCallback(() => {
     if (abortControllerRef.current) {
       abortControllerRef.current.abort();
       abortControllerRef.current = null;
@@ -148634,7 +149008,7 @@ Session paths:
 }
 
 // src/tui/components/commands/theme-picker.tsx
-var import_react77 = __toESM(require_react(), 1);
+var import_react80 = __toESM(require_react(), 1);
 function ThemePicker() {
   const dimensions = useTerminalDimensions();
   const route = useRoute();
@@ -148647,15 +149021,15 @@ function ThemePicker() {
     toggleMode,
     setMode
   } = useTheme();
-  const [selectedIndex, setSelectedIndex] = import_react77.useState(() => Math.max(0, availableThemes.indexOf(theme.name)));
-  const originalThemeRef = import_react77.useRef(theme.name);
-  const originalModeRef = import_react77.useRef(mode);
-  const handleClose = import_react77.useCallback(() => {
+  const [selectedIndex, setSelectedIndex] = import_react80.useState(() => Math.max(0, availableThemes.indexOf(theme.name)));
+  const originalThemeRef = import_react80.useRef(theme.name);
+  const originalModeRef = import_react80.useRef(mode);
+  const handleClose = import_react80.useCallback(() => {
     setTheme(originalThemeRef.current);
     setMode(originalModeRef.current);
     route.navigate({ type: "base", path: "home" });
   }, [setTheme, setMode, route]);
-  const handleConfirm = import_react77.useCallback(async () => {
+  const handleConfirm = import_react80.useCallback(async () => {
     const currentThemeName = availableThemes[selectedIndex];
     if (currentThemeName) {
       await config.update({ theme: currentThemeName });
@@ -151182,52 +151556,47 @@ async function detectTerminalMode(timeoutMs = 1000) {
 }
 
 // src/tui/index.tsx
-function App(props) {
-  const { appConfig, initialTheme, initialMode } = props;
-  const [focusIndex, setFocusIndex] = import_react80.useState(0);
-  const [cwd, setCwd] = import_react80.useState(process.cwd());
-  const [ctrlCPressTime, setCtrlCPressTime] = import_react80.useState(null);
-  const [showExitWarning, setShowExitWarning] = import_react80.useState(false);
-  const [inputKey, setInputKey] = import_react80.useState(0);
-  const [showSessionsDialog, setShowSessionsDialog] = import_react80.useState(false);
-  const [showShortcutsDialog, setShowShortcutsDialog] = import_react80.useState(false);
+function App({ appConfig }) {
+  const [focusIndex, setFocusIndex] = import_react83.useState(0);
+  const [cwd, setCwd] = import_react83.useState(process.cwd());
+  const [ctrlCPressTime, setCtrlCPressTime] = import_react83.useState(null);
+  const [showExitWarning, setShowExitWarning] = import_react83.useState(false);
+  const [inputKey, setInputKey] = import_react83.useState(0);
+  const [showSessionsDialog, setShowSessionsDialog] = import_react83.useState(false);
+  const [showShortcutsDialog, setShowShortcutsDialog] = import_react83.useState(false);
   const navigableItems = ["command-input"];
-  return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ThemeProvider, {
-    initialTheme,
-    initialMode,
-    children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ConfigProvider, {
-      config: appConfig,
-      children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(SessionProvider, {
-        children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(RouteProvider, {
-          children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(FocusProvider, {
-            children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(InputProvider, {
-              children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(DialogProvider, {
-                children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(AgentProvider, {
-                  children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(CommandProvider, {
-                    children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(KeybindingProvider, {
-                      deps: {
-                        ctrlCPressTime,
-                        setCtrlCPressTime,
-                        setShowExitWarning,
-                        setInputKey,
-                        setShowSessionsDialog,
-                        setShowShortcutsDialog,
-                        setFocusIndex,
-                        navigableItems
-                      },
-                      children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(AppContent, {
-                        focusIndex,
-                        showSessionsDialog,
-                        setShowSessionsDialog,
-                        showShortcutsDialog,
-                        setShowShortcutsDialog,
-                        cwd,
-                        setCtrlCPressTime,
-                        showExitWarning,
-                        setShowExitWarning,
-                        inputKey,
-                        setInputKey
-                      }, undefined, false, undefined, this)
+  return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ConfigProvider, {
+    config: appConfig,
+    children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(SessionProvider, {
+      children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(RouteProvider, {
+        children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(FocusProvider, {
+          children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(InputProvider, {
+            children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(DialogProvider, {
+              children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(AgentProvider, {
+                children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(CommandProvider, {
+                  children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(KeybindingProvider, {
+                    deps: {
+                      ctrlCPressTime,
+                      setCtrlCPressTime,
+                      setShowExitWarning,
+                      setInputKey,
+                      setShowSessionsDialog,
+                      setShowShortcutsDialog,
+                      setFocusIndex,
+                      navigableItems
+                    },
+                    children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(AppContent, {
+                      focusIndex,
+                      showSessionsDialog,
+                      setShowSessionsDialog,
+                      showShortcutsDialog,
+                      setShowShortcutsDialog,
+                      cwd,
+                      setCtrlCPressTime,
+                      showExitWarning,
+                      setShowExitWarning,
+                      inputKey,
+                      setInputKey
                     }, undefined, false, undefined, this)
                   }, undefined, false, undefined, this)
                 }, undefined, false, undefined, this)
@@ -151257,7 +151626,7 @@ function AppContent({
   const { colors: colors2 } = useTheme();
   const { refocusPrompt } = useFocus();
   const { setExternalDialogOpen } = useDialog();
-  import_react80.useEffect(() => {
+  import_react83.useEffect(() => {
     if (route.data.type !== "base")
       return;
     if (!config4.data.responsibleUseAccepted && route.data.path !== "disclosure") {
@@ -151266,7 +151635,7 @@ function AppContent({
       route.navigate({ type: "base", path: "providers" });
     }
   }, [config4.data.responsibleUseAccepted, route.data]);
-  import_react80.useEffect(() => {
+  import_react83.useEffect(() => {
     if (showExitWarning) {
       const timer = setTimeout(() => {
         setShowExitWarning(false);
@@ -151449,17 +151818,28 @@ async function main2() {
   process.on("uncaughtException", (err) => {
     renderer.destroy();
     console.error("Uncaught exception:", err);
+    writeErrorLog(err, "UNCAUGHT");
     process.exit(1);
   });
   process.on("unhandledRejection", (reason) => {
     renderer.destroy();
     console.error("Unhandled rejection:", reason);
+    writeErrorLog(reason, "UNHANDLED_REJECTION");
     process.exit(1);
   });
-  createRoot(renderer).render(/* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(App, {
-    appConfig,
+  createRoot(renderer).render(/* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ThemeProvider, {
     initialTheme: themeName,
-    initialMode: mode
+    initialMode: mode,
+    children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ToastProvider, {
+      children: [
+        /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ErrorBoundary2, {
+          children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(App, {
+            appConfig
+          }, undefined, false, undefined, this)
+        }, undefined, false, undefined, this),
+        /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ToastContainer, {}, undefined, false, undefined, this)
+      ]
+    }, undefined, true, undefined, this)
   }, undefined, false, undefined, this));
 }
 main2();