@pensar/apex 1.2.0-canary.45d5a431 → 1.2.0

package/build/{agent-6tr656h6.js → agent-hv2vnw37.js}

@@ -1,21 +1,21 @@
 import {
   WhiteboxAttackSurfaceResultSchema
-} from "./cli-v59chwpq.js";
+} from "./cli-33rkyxds.js";
 import {
   OffensiveSecurityAgent
-} from "./cli-fqbtn2jm.js";
+} from "./cli-dvsj2p1x.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-en95jsmj.js";
+import"./cli-q43w92k5.js";
 import"./cli-3y0dgy56.js";
 import {
   hasToolCall,
   tool
-} from "./cli-pwm6h6qr.js";
+} from "./cli-s43zrc3b.js";
 import"./cli-03z6pswp.js";
-import"./cli-ph5ntnp3.js";
-import"./cli-4drstr4p.js";
-import"./cli-chtdyzgf.js";
-import"./cli-fnbfcd05.js";
+import"./cli-720fdbrk.js";
+import"./cli-2mnefwqh.js";
+import"./cli-1rz3jys3.js";
+import"./cli-qaaesy26.js";
 import"./cli-gpnb45ck.js";
 import"./cli-8rxa073f.js";
 

package/build/agent-jkr50v3q.js

@@ -0,0 +1,18 @@
+import {
+  CodeAgent
+} from "./cli-3sg681re.js";
+import"./cli-dvsj2p1x.js";
+import"./cli-tp1tqn3k.js";
+import"./cli-q43w92k5.js";
+import"./cli-3y0dgy56.js";
+import"./cli-s43zrc3b.js";
+import"./cli-03z6pswp.js";
+import"./cli-720fdbrk.js";
+import"./cli-2mnefwqh.js";
+import"./cli-1rz3jys3.js";
+import"./cli-qaaesy26.js";
+import"./cli-gpnb45ck.js";
+import"./cli-8rxa073f.js";
+export {
+  CodeAgent
+};

package/build/{auth-jzmpqksm.js → auth-aj10f99d.js}

@@ -8,14 +8,14 @@ import {
   pollWorkOSToken,
   selectWorkspace,
   startDeviceFlow
-} from "./cli-ph5ntnp3.js";
+} from "./cli-720fdbrk.js";
 import {
   config,
   getPensarApiUrl,
   getPensarConsoleUrl
-} from "./cli-4drstr4p.js";
-import"./cli-chtdyzgf.js";
-import"./cli-fnbfcd05.js";
+} from "./cli-2mnefwqh.js";
+import"./cli-1rz3jys3.js";
+import"./cli-qaaesy26.js";
 import {
   __require
 } from "./cli-8rxa073f.js";

package/build/{authentication-79cr1733.js → authentication-90mvv4kd.js}

@@ -1,19 +1,19 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-fqbtn2jm.js";
+} from "./cli-dvsj2p1x.js";
 import {
   detectOSAndEnhancePrompt
 } from "./cli-tp1tqn3k.js";
-import"./cli-en95jsmj.js";
+import"./cli-q43w92k5.js";
 import"./cli-3y0dgy56.js";
 import {
   hasToolCall
-} from "./cli-pwm6h6qr.js";
+} from "./cli-s43zrc3b.js";
 import"./cli-03z6pswp.js";
-import"./cli-ph5ntnp3.js";
-import"./cli-4drstr4p.js";
-import"./cli-chtdyzgf.js";
-import"./cli-fnbfcd05.js";
+import"./cli-720fdbrk.js";
+import"./cli-2mnefwqh.js";
+import"./cli-1rz3jys3.js";
+import"./cli-qaaesy26.js";
 import"./cli-gpnb45ck.js";
 import"./cli-8rxa073f.js";
 

package/build/blackboxAgent-f2y66hex.js

@@ -0,0 +1,18 @@
+import {
+  BlackboxAttackSurfaceAgent
+} from "./cli-gqphezya.js";
+import"./cli-dvsj2p1x.js";
+import"./cli-tp1tqn3k.js";
+import"./cli-q43w92k5.js";
+import"./cli-3y0dgy56.js";
+import"./cli-s43zrc3b.js";
+import"./cli-03z6pswp.js";
+import"./cli-720fdbrk.js";
+import"./cli-2mnefwqh.js";
+import"./cli-1rz3jys3.js";
+import"./cli-qaaesy26.js";
+import"./cli-gpnb45ck.js";
+import"./cli-8rxa073f.js";
+export {
+  BlackboxAttackSurfaceAgent
+};

package/build/{blackboxPentest-7xz1zg1f.js → blackboxPentest-prq8qrhc.js}

@@ -1,22 +1,22 @@
 import {
   runPentestWorkflow
-} from "./cli-jmfjf0xc.js";
-import"./cli-b88bgfv5.js";
-import"./cli-byq7tftq.js";
-import"./cli-d5zmetvp.js";
+} from "./cli-erp6djfj.js";
+import"./cli-avnfgjhs.js";
+import"./cli-ypxq76sm.js";
+import"./cli-gqphezya.js";
 import"./cli-fw5r7pfj.js";
-import"./cli-tztmmk79.js";
-import"./cli-v59chwpq.js";
-import"./cli-fqbtn2jm.js";
+import"./cli-3sg681re.js";
+import"./cli-33rkyxds.js";
+import"./cli-dvsj2p1x.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-en95jsmj.js";
+import"./cli-q43w92k5.js";
 import"./cli-3y0dgy56.js";
-import"./cli-pwm6h6qr.js";
+import"./cli-s43zrc3b.js";
 import"./cli-03z6pswp.js";
-import"./cli-ph5ntnp3.js";
-import"./cli-4drstr4p.js";
-import"./cli-chtdyzgf.js";
-import"./cli-fnbfcd05.js";
+import"./cli-720fdbrk.js";
+import"./cli-2mnefwqh.js";
+import"./cli-1rz3jys3.js";
+import"./cli-qaaesy26.js";
 import"./cli-gpnb45ck.js";
 import"./cli-8rxa073f.js";
 

package/build/{cli-chtdyzgf.js → cli-1rz3jys3.js}

@@ -1,6 +1,6 @@
 import {
   getCurrentVersion
-} from "./cli-fnbfcd05.js";
+} from "./cli-qaaesy26.js";
 
 // src/core/config/config.ts
 import os from "os";

package/build/{cli-4drstr4p.js → cli-2mnefwqh.js}

@@ -2,7 +2,7 @@ import {
   get,
   init,
   update
-} from "./cli-chtdyzgf.js";
+} from "./cli-1rz3jys3.js";
 
 // src/core/api/constants.ts
 var PENSAR_API_BASE_URL = "https://api.pensar.dev";

package/build/{cli-v59chwpq.js → cli-33rkyxds.js}

@@ -1,7 +1,7 @@
 import {
   exports_external,
   init_zod
-} from "./cli-pwm6h6qr.js";
+} from "./cli-s43zrc3b.js";
 
 // src/core/agents/specialized/whiteboxAttackSurface/types.ts
 init_zod();

package/build/{cli-tztmmk79.js → cli-3sg681re.js}

@@ -1,9 +1,9 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-fqbtn2jm.js";
+} from "./cli-dvsj2p1x.js";
 import {
   stepCountIs
-} from "./cli-pwm6h6qr.js";
+} from "./cli-s43zrc3b.js";
 
 // src/core/agents/specialized/codeAgent/prompts.ts
 var CODE_AGENT_SYSTEM_PROMPT = `You are an expert coding agent with direct filesystem access. You will be given a specific objective — focus exclusively on completing it.

package/build/{cli-a0krppgv.js → cli-4m9f65ze.js}

@@ -2,7 +2,7 @@ import {
   config,
   ensureValidToken,
   getPensarApiUrl
-} from "./cli-4drstr4p.js";
+} from "./cli-2mnefwqh.js";
 
 // src/core/api/issues.ts
 async function getAuthHeaders() {

package/build/{cli-ph5ntnp3.js → cli-720fdbrk.js}

@@ -3,7 +3,7 @@ import {
   ensureValidToken,
   getPensarApiUrl,
   getPensarGatewayUrl
-} from "./cli-4drstr4p.js";
+} from "./cli-2mnefwqh.js";
 
 // src/core/auth/signing.ts
 import { createHmac, createHash, randomUUID } from "crypto";

package/build/{cli-b88bgfv5.js → cli-avnfgjhs.js}

@@ -2,11 +2,11 @@ import {
   CweEntrySchema,
   ValidatedCweEntrySchema,
   hasCanonicalName
-} from "./cli-fqbtn2jm.js";
+} from "./cli-dvsj2p1x.js";
 import {
   exports_external,
   init_zod
-} from "./cli-pwm6h6qr.js";
+} from "./cli-s43zrc3b.js";
 
 // src/core/report/schemas.ts
 init_zod();

package/build/{cli-fqbtn2jm.js → cli-dvsj2p1x.js}

@@ -16,7 +16,7 @@ import {
   update,
   write,
   writeRaw
-} from "./cli-en95jsmj.js";
+} from "./cli-q43w92k5.js";
 import {
   parseTargetUrl
 } from "./cli-3y0dgy56.js";
@@ -52,18 +52,18 @@ import {
   union,
   unknown,
   zod_default
-} from "./cli-pwm6h6qr.js";
+} from "./cli-s43zrc3b.js";
 import {
   signGatewayRequest
-} from "./cli-ph5ntnp3.js";
+} from "./cli-720fdbrk.js";
 import {
   config,
   ensureValidToken,
   getPensarApiUrl
-} from "./cli-4drstr4p.js";
+} from "./cli-2mnefwqh.js";
 import {
   getCurrentVersion
-} from "./cli-fnbfcd05.js";
+} from "./cli-qaaesy26.js";
 import {
   __commonJS,
   __require,
@@ -99953,7 +99953,7 @@ async function generateThreatModelForEndpoint(ctx, input) {
   return threatModelLimiter(async () => {
     if (ctx.abortSignal?.aborted)
       return null;
-    const { CodeAgent } = await import("./agent-8a7t15zp.js");
+    const { CodeAgent } = await import("./agent-jkr50v3q.js");
     const subagentId = `threat-model-${sanitize(input.appName)}-${sanitize(input.routePath)}`;
     ctx.eventBus?.emit("subagent-spawn", {
       subagentId,
@@ -100642,7 +100642,7 @@ When to use delegate_to_auth_subagent vs authenticate_session:
         if (credentials) {
           ctx.session.credentialManager.addFromAuthCredentials(credentials);
         }
-        const { runAuthenticationAgent } = await import("./authentication-79cr1733.js");
+        const { runAuthenticationAgent } = await import("./authentication-90mvv4kd.js");
         const localBus = new AgentEventBus;
         AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
         const result = await runAuthenticationAgent({
@@ -101555,7 +101555,7 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
       });
       if (cwd) {
         try {
-          const { WhiteboxAttackSurfaceAgent } = await import("./agent-6tr656h6.js");
+          const { WhiteboxAttackSurfaceAgent } = await import("./agent-hv2vnw37.js");
           const localBus = new AgentEventBus;
           AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
           const agent = new WhiteboxAttackSurfaceAgent({
@@ -101604,7 +101604,7 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
         }
       }
       try {
-        const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-r71vagzf.js");
+        const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-f2y66hex.js");
         const localBus = new AgentEventBus;
         AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
         const agent = new BlackboxAttackSurfaceAgent({
@@ -101680,7 +101680,7 @@ Pass every target you want tested — the swarm handles concurrency automaticall
       toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async ({ targets }) => {
-      const { runPentestSwarm, DEFAULT_CONCURRENCY } = await import("./pentest-qqgw0g47.js");
+      const { runPentestSwarm, DEFAULT_CONCURRENCY } = await import("./pentest-5p1ahtr6.js");
       if (!ctx.model) {
         return {
           success: false,
@@ -101808,7 +101808,7 @@ Returns an array of results with the text output from each agent.`,
   });
 }
 async function runSingleCodingAgent(ctx, codebasePath, objective, agentIndex, name) {
-  const { CodeAgent } = await import("./agent-8a7t15zp.js");
+  const { CodeAgent } = await import("./agent-jkr50v3q.js");
   const subagentId = `coding-agent-${agentIndex}`;
   ctx.eventBus?.emit("subagent-spawn", {
     subagentId,
@@ -101869,7 +101869,7 @@ Omit \`cwd\` for blackbox mode (live target probing only).`,
       toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async ({ target, cwd }) => {
-      const { runPentestWorkflow: workflow } = await import("./pentest-qqgw0g47.js");
+      const { runPentestWorkflow: workflow } = await import("./pentest-5p1ahtr6.js");
       if (!ctx.model) {
         return {
           success: false,
@@ -106478,45 +106478,8 @@ function killDescendants(rootPid, signal) {
 }
 
 // src/core/agents/offSecAgent/prompt.ts
-import { existsSync as existsSync12, readdirSync as readdirSync3, statSync } from "fs";
-import { join as join18 } from "path";
-function buildProvidedFilesSection(sessionRootPath) {
-  const providedDir = join18(sessionRootPath, "provided_files");
-  if (!existsSync12(providedDir))
-    return "";
-  let entries;
-  try {
-    entries = readdirSync3(providedDir);
-  } catch {
-    return "";
-  }
-  const fileEntries = entries.filter((name) => name !== "README.md").map((name) => {
-    try {
-      const stat2 = statSync(join18(providedDir, name));
-      if (!stat2.isFile())
-        return null;
-      return { name, size: stat2.size };
-    } catch {
-      return null;
-    }
-  }).filter((e) => e !== null);
-  if (fileEntries.length === 0)
-    return "";
-  const lines = fileEntries.map((f) => `- \`provided_files/${f.name}\` (${f.size} bytes)`);
-  return `
-
-# Provided Files
-
-The user has uploaded the following files for this session. They are available at \`${providedDir}\` (relative path: \`provided_files/\`) and may include sample payloads, reference documentation, test data, or other context the agent should consult when planning and executing its work.
-
-${lines.join(`
-`)}
-
-Read these with \`read_file\` and list directory contents with \`list_files provided_files/\` as needed. A \`README.md\` inside \`provided_files/\` may include per-file descriptions supplied by the user — check it first before diving into individual files.`;
-}
 function buildSessionWorkspaceSection(session, agentCwd) {
   const sandboxMode = agentCwd === session.rootPath;
-  const providedFilesSection = buildProvidedFilesSection(session.rootPath);
   if (sandboxMode) {
     return `
 
@@ -106530,9 +106493,8 @@ The session directory (${session.rootPath}) contains these subdirectories:
 - **scratchpad/** — your scratch space for working notes, intermediate data, wordlists, temporary scripts. **Do NOT write reports, executive summaries, or finding compilations here** — reports are generated automatically from findings/.
 - **logs/** — execution logs
 - **evidence/** — screenshots and evidence (written by browser tools)
-- **provided_files/** — user-uploaded files (sample payloads, docs, test data); populated when the project has workspace files configured.
 
-Tools like \`document_vulnerability\` and browser evidence capture write to the correct subdirectories automatically.${providedFilesSection}`;
+Tools like \`document_vulnerability\` and browser evidence capture write to the correct subdirectories automatically.`;
   }
   return `
 
@@ -106547,9 +106509,8 @@ Session artifacts are stored separately at ${session.rootPath}:
 - **scratchpad/** — your scratch space
 - **logs/** — execution logs
 - **evidence/** — screenshots and evidence
-- **provided_files/** — user-uploaded files (sample payloads, docs, test data); populated when the project has workspace files configured.
 
-Tools like \`document_vulnerability\` and browser evidence capture write to the session directory automatically.${providedFilesSection}`;
+Tools like \`document_vulnerability\` and browser evidence capture write to the session directory automatically.`;
 }
 function buildBaseSystemPrompt(options) {
   const sandboxMode = options?.sandboxMode ?? true;
@@ -106913,7 +106874,7 @@ class ApprovalTimeoutError extends ApprovalDeniedError {
 init_zod();
 import path from "path";
 import os from "os";
-import { existsSync as existsSync13, readFileSync as readFileSync4 } from "fs";
+import { existsSync as existsSync12, readFileSync as readFileSync4 } from "fs";
 init_toolset();
 var DEFAULT_OUTCOME_GUIDANCE = "Prove the exploit can be run but do not exfiltrate data or cause any harm to the system. " + "Create proof-of-concept exploits that demonstrate the vulnerability exists without causing damage.";
 var EXFIL_OUTCOME_GUIDANCE = "Exfiltrate data to extract the flag value. " + "Create proof-of-concept exploits that successfully extract the flag from the target system.";
@@ -107223,7 +107184,7 @@ async function loadOperatorState(sessionId) {
   try {
     const session = await get(sessionId);
     const statePath = path.join(session.rootPath, "messages.json");
-    if (!existsSync13(statePath))
+    if (!existsSync12(statePath))
       return null;
     const data = readFileSync4(statePath, "utf-8");
     const parsed = JSON.parse(data);
@@ -107252,7 +107213,7 @@ async function loadOperatorState(sessionId) {
 }
 function hasOperatorState(session) {
   const statePath = path.join(session.rootPath, "messages.json");
-  return existsSync13(statePath);
+  return existsSync12(statePath);
 }
 var MAX_RESUME_MESSAGES = 200;
 function getResumeMessages(messages, limit = MAX_RESUME_MESSAGES) {
@@ -107375,8 +107336,8 @@ var sessions = {
 };
 
 // src/core/agents/offSecAgent/offensiveSecurityAgent.ts
-import { join as join19 } from "path";
-import { mkdirSync as mkdirSync12, existsSync as existsSync14 } from "fs";
+import { join as join18 } from "path";
+import { mkdirSync as mkdirSync12, existsSync as existsSync13 } from "fs";
 import { writeFile as writeFile4 } from "fs/promises";
 
 // src/core/agents/offSecAgent/trace.ts
@@ -107623,15 +107584,15 @@ class OffensiveSecurityAgent {
         input.commandCancelHandle.cancel = () => shell.cancelCurrentCommand();
       }
     }
-    const messagesDir = input.messagesDir ?? (input.subagentId ? join19(input.session.rootPath, "subagents", input.subagentId) : input.session.rootPath);
-    const tracePath = input.subagentId ? join19(input.session.rootPath, "subagents", `${input.subagentId}.trace.jsonl`) : join19(messagesDir, "trace.jsonl");
+    const messagesDir = input.messagesDir ?? (input.subagentId ? join18(input.session.rootPath, "subagents", input.subagentId) : input.session.rootPath);
+    const tracePath = input.subagentId ? join18(input.session.rootPath, "subagents", `${input.subagentId}.trace.jsonl`) : join18(messagesDir, "trace.jsonl");
     const traceWriter = new StepTraceWriter({
       tracePath,
       agentId: input.subagentId ?? null,
       eventBus: this.eventBus
     });
     const taskDriven = input.session.config?.taskDriven ?? false;
-    const tasksDir = input.tasksDir ?? (taskDriven ? input.subagentId ? join19(input.session.rootPath, "subagents", `${input.subagentId}-tasks`) : join19(input.session.rootPath, "tasks") : undefined);
+    const tasksDir = input.tasksDir ?? (taskDriven ? input.subagentId ? join18(input.session.rootPath, "subagents", `${input.subagentId}-tasks`) : join18(input.session.rootPath, "tasks") : undefined);
     const credentialManager = input.credentialManager ?? input.session.credentialManager;
     const builtinTools = createAllTools({
       session: input.session,
@@ -107694,10 +107655,10 @@ class OffensiveSecurityAgent {
       const planSet = new Set(PLAN_MODE_TOOL_NAMES);
       activeTools = activeTools.filter((t) => planSet.has(t));
     }
-    if (!existsSync14(messagesDir)) {
+    if (!existsSync13(messagesDir)) {
       mkdirSync12(messagesDir, { recursive: true });
     }
-    const messagesPath = join19(messagesDir, "messages.json");
+    const messagesPath = join18(messagesDir, "messages.json");
     const initialMessagesRef = {
       current: input.messages ? [...input.messages] : [
         {

package/build/{cli-jmfjf0xc.js → cli-erp6djfj.js}

@@ -14,33 +14,33 @@ import {
   updateManifestEntryStatus,
   writeAgentManifest,
   writeExecutionMetrics
-} from "./cli-b88bgfv5.js";
+} from "./cli-avnfgjhs.js";
 import {
   TargetedPentestAgent,
   buildPentestSystemPrompt
-} from "./cli-byq7tftq.js";
+} from "./cli-ypxq76sm.js";
 import {
   BlackboxAttackSurfaceAgent
-} from "./cli-d5zmetvp.js";
+} from "./cli-gqphezya.js";
 import {
   createThreatModelPrompt
 } from "./cli-fw5r7pfj.js";
 import {
   CodeAgent
-} from "./cli-tztmmk79.js";
+} from "./cli-3sg681re.js";
 import {
   EndpointSchema
-} from "./cli-v59chwpq.js";
+} from "./cli-33rkyxds.js";
 import {
   FindingsRegistry,
   OffensiveSecurityAgent,
   PLAN_MODE_TOOL_NAMES
-} from "./cli-fqbtn2jm.js";
+} from "./cli-dvsj2p1x.js";
 import {
   exports_external,
   hasToolCall,
   init_zod
-} from "./cli-pwm6h6qr.js";
+} from "./cli-s43zrc3b.js";
 
 // src/core/workflows/pentest.ts
 import { existsSync as existsSync3, readdirSync as readdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";

package/build/{cli-d5zmetvp.js → cli-gqphezya.js}

@@ -1,13 +1,13 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-fqbtn2jm.js";
+} from "./cli-dvsj2p1x.js";
 import {
   detectOSAndEnhancePrompt
 } from "./cli-tp1tqn3k.js";
 import {
   hasToolCall,
   stepCountIs
-} from "./cli-pwm6h6qr.js";
+} from "./cli-s43zrc3b.js";
 
 // src/core/agents/specialized/attackSurface/blackboxAgent.ts
 import { join } from "path";

package/build/{cli-en95jsmj.js → cli-q43w92k5.js}

@@ -3,7 +3,7 @@ import {
   generateObjectResponse,
   init_zod,
   zod_default
-} from "./cli-pwm6h6qr.js";
+} from "./cli-s43zrc3b.js";
 import {
   __callDispose,
   __using

package/build/{cli-fnbfcd05.js → cli-qaaesy26.js}

@@ -3,7 +3,7 @@ import { spawnSync } from "child_process";
 // package.json
 var package_default = {
   name: "@pensar/apex",
-  version: "1.2.0-canary.45d5a431",
+  version: "1.2.0",
   description: "AI-powered penetration testing CLI tool with terminal UI",
   module: "src/tui/index.tsx",
   main: "build/cli.js",

package/build/{cli-pwm6h6qr.js → cli-s43zrc3b.js}

@@ -4,12 +4,12 @@ import {
 } from "./cli-03z6pswp.js";
 import {
   signGatewayRequest
-} from "./cli-ph5ntnp3.js";
+} from "./cli-720fdbrk.js";
 import {
   config,
   ensureValidToken,
   getPensarGatewayUrl
-} from "./cli-4drstr4p.js";
+} from "./cli-2mnefwqh.js";
 import {
   require_auth_errors,
   require_token_error,

package/build/{cli-cmr0vsq2.js → cli-t0am6nqt.js}

@@ -1,6 +1,6 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-fqbtn2jm.js";
+} from "./cli-dvsj2p1x.js";
 import {
   __commonJS,
   __require

package/build/{cli-byq7tftq.js → cli-ypxq76sm.js}

@@ -1,11 +1,11 @@
 import {
   OffensiveSecurityAgent,
   readPlan
-} from "./cli-fqbtn2jm.js";
+} from "./cli-dvsj2p1x.js";
 import {
   exports_external,
   init_zod
-} from "./cli-pwm6h6qr.js";
+} from "./cli-s43zrc3b.js";
 
 // src/core/agents/specialized/pentest/agent.ts
 import { existsSync, readdirSync, readFileSync } from "fs";

package/build/cli.js

@@ -6,16 +6,16 @@ import {
 import"./cli-3y0dgy56.js";
 import {
   init_toolset
-} from "./cli-pwm6h6qr.js";
+} from "./cli-s43zrc3b.js";
 import {
   init_models
 } from "./cli-03z6pswp.js";
-import"./cli-ph5ntnp3.js";
-import"./cli-4drstr4p.js";
-import"./cli-chtdyzgf.js";
+import"./cli-720fdbrk.js";
+import"./cli-2mnefwqh.js";
+import"./cli-1rz3jys3.js";
 import {
   package_default
-} from "./cli-fnbfcd05.js";
+} from "./cli-qaaesy26.js";
 import"./cli-gpnb45ck.js";
 import {
   __require,
@@ -24,7 +24,7 @@ import {
 // package.json
 var package_default2 = {
   name: "@pensar/apex",
-  version: "1.2.0-canary.45d5a431",
+  version: "1.2.0",
   description: "AI-powered penetration testing CLI tool with terminal UI",
   module: "src/tui/index.tsx",
   main: "build/cli.js",
@@ -541,9 +541,9 @@ Global options:
 async function runPentest() {
   const { config: config2 } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config2();
-  const { runPentestAgent } = await import("./blackboxPentest-7xz1zg1f.js");
-  const { sessions } = await import("./index-yvrq5hvh.js");
-  const { config: appConfig } = await import("./index-8q3h58dx.js");
+  const { runPentestAgent } = await import("./blackboxPentest-prq8qrhc.js");
+  const { sessions } = await import("./index-fds2qfsc.js");
+  const { config: appConfig } = await import("./index-ftdt7ktr.js");
   const { getDefaultModelForConfig } = await import("./utils-8yqe12jr.js");
   const target = getArgRequired("--target");
   const cwd = getArg("--cwd");
@@ -609,9 +609,9 @@ Report:    ${reportPath}` : ""}`);
 async function runTargetedPentest() {
   const { config: config2 } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config2();
-  const { runTargetedPentestAgent } = await import("./targetedPentest-0b2gvj21.js");
-  const { sessions } = await import("./index-yvrq5hvh.js");
-  const { config: appConfig } = await import("./index-8q3h58dx.js");
+  const { runTargetedPentestAgent } = await import("./targetedPentest-6qpsqdx5.js");
+  const { sessions } = await import("./index-fds2qfsc.js");
+  const { config: appConfig } = await import("./index-ftdt7ktr.js");
   const { getDefaultModelForConfig } = await import("./utils-8yqe12jr.js");
   const target = getArgRequired("--target");
   const objectives = getAllArgs("--objective");
@@ -661,8 +661,8 @@ POCs:      ${pocsPath}`);
 async function runThreatModel() {
   const { config: config2 } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config2();
-  const { runThreatModelWorkflow } = await import("./threatModel-t8qvtm5z.js");
-  const { config: appConfig } = await import("./index-8q3h58dx.js");
+  const { runThreatModelWorkflow } = await import("./threatModel-g0azznnt.js");
+  const { config: appConfig } = await import("./index-ftdt7ktr.js");
   const { getDefaultModelForConfig } = await import("./utils-8yqe12jr.js");
   const path = await import("path");
   const pensarConfig = await appConfig.get();
@@ -718,25 +718,25 @@ if (command === "version" || command === "--version" || command === "-v") {
   await runTargetedPentest();
 } else if (command === "login" || command === "auth") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./auth-jzmpqksm.js");
+  await import("./auth-aj10f99d.js");
 } else if (command === "uninstall") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./uninstall-g133a6p8.js");
+  await import("./uninstall-0yjhkdk3.js");
 } else if (command === "projects") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./projects-nqv0yd0p.js");
+  await import("./projects-zkw40bda.js");
 } else if (command === "pentests") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./pentests-c8fgdcnv.js");
+  await import("./pentests-bsh9ht7r.js");
 } else if (command === "issues") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./issues-1x3f1ayz.js");
+  await import("./issues-tecf6w97.js");
 } else if (command === "fixes") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./fixes-jybzkf67.js");
+  await import("./fixes-g7b34fs5.js");
 } else if (command === "logs") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./logs-dhvwj9cy.js");
+  await import("./logs-5qwr98mr.js");
 } else if (command === "threat-model") {
   await runThreatModel();
 } else if (command === "doctor") {
@@ -748,7 +748,7 @@ if (command === "version" || command === "--version" || command === "-v") {
     console.error("All other commands work with Node \u2014 run 'pensar --help'.");
     process.exit(1);
   }
-  await import("./index-xnerya9j.js");
+  await import("./index-cpj7zx72.js");
 } else {
   console.error(`Error: Unknown command '${command}'`);
   console.error();

package/build/{fixes-jybzkf67.js → fixes-g7b34fs5.js}

@@ -2,10 +2,10 @@
 import {
   getFix,
   listFixes
-} from "./cli-a0krppgv.js";
-import"./cli-4drstr4p.js";
-import"./cli-chtdyzgf.js";
-import"./cli-fnbfcd05.js";
+} from "./cli-4m9f65ze.js";
+import"./cli-2mnefwqh.js";
+import"./cli-1rz3jys3.js";
+import"./cli-qaaesy26.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/fixes.ts

package/build/{index-yehvwy6w.js → index-9j9dqpdd.js}

@@ -9,15 +9,15 @@ import {
   signGatewayRequest,
   startDeviceFlow,
   validateGateway
-} from "./cli-ph5ntnp3.js";
+} from "./cli-720fdbrk.js";
 import {
   ensureValidToken,
   fetchWorkOSClientId,
   isTokenExpired,
   refreshAccessToken
-} from "./cli-4drstr4p.js";
-import"./cli-chtdyzgf.js";
-import"./cli-fnbfcd05.js";
+} from "./cli-2mnefwqh.js";
+import"./cli-1rz3jys3.js";
+import"./cli-qaaesy26.js";
 import"./cli-8rxa073f.js";
 export {
   validateGateway,

package/build/{index-xnerya9j.js → index-cpj7zx72.js}

@@ -7,14 +7,14 @@ import {
   buildThreatModelPrompt,
   createSkillsRegistry,
   runOffensiveSecurityAgent
-} from "./cli-cmr0vsq2.js";
+} from "./cli-t0am6nqt.js";
 import {
   REPORT_FILENAME_MD,
   convertModelMessagesToUI,
   loadSubagents,
   readExecutionMetrics,
   writeExecutionMetrics
-} from "./cli-b88bgfv5.js";
+} from "./cli-avnfgjhs.js";
 import {
   createThreatModelPrompt
 } from "./cli-fw5r7pfj.js";
@@ -38,14 +38,14 @@ import {
   planFilePath,
   readPlan,
   sessions
-} from "./cli-fqbtn2jm.js";
+} from "./cli-dvsj2p1x.js";
 import {
   detectOSAndEnhancePrompt
 } from "./cli-tp1tqn3k.js";
 import {
   read,
   write
-} from "./cli-en95jsmj.js";
+} from "./cli-q43w92k5.js";
 import {
   getAutoPopulatedHosts,
   getAutoPopulatedPorts,
@@ -57,7 +57,7 @@ import {
   init_toolset,
   modelSupportsThinking,
   stepCountIs
-} from "./cli-pwm6h6qr.js";
+} from "./cli-s43zrc3b.js";
 import {
   AVAILABLE_MODELS,
   init_models
@@ -72,18 +72,18 @@ import {
   selectWorkspace,
   startDeviceFlow,
   validateGateway
-} from "./cli-ph5ntnp3.js";
+} from "./cli-720fdbrk.js";
 import {
   config,
   getPensarApiUrl,
   getPensarConsoleUrl
-} from "./cli-4drstr4p.js";
+} from "./cli-2mnefwqh.js";
 import {
   update
-} from "./cli-chtdyzgf.js";
+} from "./cli-1rz3jys3.js";
 import {
   checkForUpdate
-} from "./cli-fnbfcd05.js";
+} from "./cli-qaaesy26.js";
 import"./cli-gpnb45ck.js";
 import {
   __commonJS,
@@ -68647,7 +68647,7 @@ function AppContent({
       toast(`Update available: v${currentVersion} → v${latestVersion}. Run: pensar upgrade`, "warn", 8000);
     });
     const checkAuthToken = async () => {
-      const { isTokenExpired, isConnected: isConnected2 } = await import("./index-yehvwy6w.js");
+      const { isTokenExpired, isConnected: isConnected2 } = await import("./index-9j9dqpdd.js");
       if (isConnected2(config2.data) && config2.data.accessToken && isTokenExpired(config2.data.accessToken, 60) && !config2.data.refreshToken && !config2.data.pensarAPIKey) {
         toast("Your Pensar Console session has expired. Run /login to refresh.", "warn", 8000);
       }

package/build/{index-yvrq5hvh.js → index-fds2qfsc.js}

@@ -13,7 +13,7 @@ import {
   update,
   write,
   writeRaw
-} from "./cli-en95jsmj.js";
+} from "./cli-q43w92k5.js";
 import {
   ToolsetStateSchema,
   exports_toolset,
@@ -21,14 +21,14 @@ import {
   init_zod,
   toggleTool,
   zod_default
-} from "./cli-pwm6h6qr.js";
+} from "./cli-s43zrc3b.js";
 import"./cli-03z6pswp.js";
-import"./cli-ph5ntnp3.js";
-import"./cli-4drstr4p.js";
-import"./cli-chtdyzgf.js";
+import"./cli-720fdbrk.js";
+import"./cli-2mnefwqh.js";
+import"./cli-1rz3jys3.js";
 import {
   getCurrentVersion
-} from "./cli-fnbfcd05.js";
+} from "./cli-qaaesy26.js";
 import"./cli-gpnb45ck.js";
 import {
   __require,

package/build/{index-8q3h58dx.js → index-ftdt7ktr.js}

@@ -2,8 +2,8 @@ import {
   get,
   init,
   update
-} from "./cli-chtdyzgf.js";
-import"./cli-fnbfcd05.js";
+} from "./cli-1rz3jys3.js";
+import"./cli-qaaesy26.js";
 import"./cli-8rxa073f.js";
 
 // src/core/config/index.ts

package/build/{issues-1x3f1ayz.js → issues-tecf6w97.js}

@@ -3,10 +3,10 @@ import {
   getIssue,
   listIssues,
   updateIssue
-} from "./cli-a0krppgv.js";
-import"./cli-4drstr4p.js";
-import"./cli-chtdyzgf.js";
-import"./cli-fnbfcd05.js";
+} from "./cli-4m9f65ze.js";
+import"./cli-2mnefwqh.js";
+import"./cli-1rz3jys3.js";
+import"./cli-qaaesy26.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/issues.ts

package/build/{logs-dhvwj9cy.js → logs-5qwr98mr.js}

@@ -2,10 +2,10 @@
 import {
   listAgentLogs,
   searchAgentLogs
-} from "./cli-a0krppgv.js";
-import"./cli-4drstr4p.js";
-import"./cli-chtdyzgf.js";
-import"./cli-fnbfcd05.js";
+} from "./cli-4m9f65ze.js";
+import"./cli-2mnefwqh.js";
+import"./cli-1rz3jys3.js";
+import"./cli-qaaesy26.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/logs.ts

package/build/pentest-5p1ahtr6.js

@@ -0,0 +1,28 @@
+import {
+  DEFAULT_CONCURRENCY,
+  runPentestSwarm,
+  runPentestWorkflow
+} from "./cli-erp6djfj.js";
+import"./cli-avnfgjhs.js";
+import"./cli-ypxq76sm.js";
+import"./cli-gqphezya.js";
+import"./cli-fw5r7pfj.js";
+import"./cli-3sg681re.js";
+import"./cli-33rkyxds.js";
+import"./cli-dvsj2p1x.js";
+import"./cli-tp1tqn3k.js";
+import"./cli-q43w92k5.js";
+import"./cli-3y0dgy56.js";
+import"./cli-s43zrc3b.js";
+import"./cli-03z6pswp.js";
+import"./cli-720fdbrk.js";
+import"./cli-2mnefwqh.js";
+import"./cli-1rz3jys3.js";
+import"./cli-qaaesy26.js";
+import"./cli-gpnb45ck.js";
+import"./cli-8rxa073f.js";
+export {
+  runPentestWorkflow,
+  runPentestSwarm,
+  DEFAULT_CONCURRENCY
+};

package/build/{pentests-c8fgdcnv.js → pentests-bsh9ht7r.js}

@@ -3,10 +3,10 @@ import {
   dispatchPentest,
   getScan,
   listScans
-} from "./cli-a0krppgv.js";
-import"./cli-4drstr4p.js";
-import"./cli-chtdyzgf.js";
-import"./cli-fnbfcd05.js";
+} from "./cli-4m9f65ze.js";
+import"./cli-2mnefwqh.js";
+import"./cli-1rz3jys3.js";
+import"./cli-qaaesy26.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/pentests.ts

package/build/{projects-nqv0yd0p.js → projects-zkw40bda.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env bun
 import {
   listProjects
-} from "./cli-a0krppgv.js";
-import"./cli-4drstr4p.js";
-import"./cli-chtdyzgf.js";
-import"./cli-fnbfcd05.js";
+} from "./cli-4m9f65ze.js";
+import"./cli-2mnefwqh.js";
+import"./cli-1rz3jys3.js";
+import"./cli-qaaesy26.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/projects.ts

package/build/{targetedPentest-0b2gvj21.js → targetedPentest-6qpsqdx5.js}

@@ -1,16 +1,16 @@
 import {
   TargetedPentestAgent
-} from "./cli-byq7tftq.js";
-import"./cli-fqbtn2jm.js";
+} from "./cli-ypxq76sm.js";
+import"./cli-dvsj2p1x.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-en95jsmj.js";
+import"./cli-q43w92k5.js";
 import"./cli-3y0dgy56.js";
-import"./cli-pwm6h6qr.js";
+import"./cli-s43zrc3b.js";
 import"./cli-03z6pswp.js";
-import"./cli-ph5ntnp3.js";
-import"./cli-4drstr4p.js";
-import"./cli-chtdyzgf.js";
-import"./cli-fnbfcd05.js";
+import"./cli-720fdbrk.js";
+import"./cli-2mnefwqh.js";
+import"./cli-1rz3jys3.js";
+import"./cli-qaaesy26.js";
 import"./cli-gpnb45ck.js";
 import"./cli-8rxa073f.js";
 

package/build/{threatModel-t8qvtm5z.js → threatModel-g0azznnt.js}

@@ -2,25 +2,25 @@ import {
   buildThreatModelPrompt,
   createSkillsRegistry,
   runOffensiveSecurityAgent
-} from "./cli-cmr0vsq2.js";
+} from "./cli-t0am6nqt.js";
 import {
   ALL_TOOL_NAMES,
   ASK_USER_QUESTIONS_TOOL_NAME,
   SKILL_TOOL_NAMES,
   buildBaseSystemPrompt,
   sessions
-} from "./cli-fqbtn2jm.js";
+} from "./cli-dvsj2p1x.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-en95jsmj.js";
+import"./cli-q43w92k5.js";
 import"./cli-3y0dgy56.js";
 import {
   stepCountIs
-} from "./cli-pwm6h6qr.js";
+} from "./cli-s43zrc3b.js";
 import"./cli-03z6pswp.js";
-import"./cli-ph5ntnp3.js";
-import"./cli-4drstr4p.js";
-import"./cli-chtdyzgf.js";
-import"./cli-fnbfcd05.js";
+import"./cli-720fdbrk.js";
+import"./cli-2mnefwqh.js";
+import"./cli-1rz3jys3.js";
+import"./cli-qaaesy26.js";
 import"./cli-gpnb45ck.js";
 import"./cli-8rxa073f.js";
 

package/build/{uninstall-g133a6p8.js → uninstall-0yjhkdk3.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env bun
 import {
   detectInstallMethod
-} from "./cli-fnbfcd05.js";
+} from "./cli-qaaesy26.js";
 import {
   __require
 } from "./cli-8rxa073f.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pensar/apex",
-  "version": "1.2.0-canary.45d5a431",
+  "version": "1.2.0",
   "description": "AI-powered penetration testing CLI tool with terminal UI",
   "module": "src/tui/index.tsx",
   "main": "build/cli.js",

package/build/agent-8a7t15zp.js

@@ -1,18 +0,0 @@
-import {
-  CodeAgent
-} from "./cli-tztmmk79.js";
-import"./cli-fqbtn2jm.js";
-import"./cli-tp1tqn3k.js";
-import"./cli-en95jsmj.js";
-import"./cli-3y0dgy56.js";
-import"./cli-pwm6h6qr.js";
-import"./cli-03z6pswp.js";
-import"./cli-ph5ntnp3.js";
-import"./cli-4drstr4p.js";
-import"./cli-chtdyzgf.js";
-import"./cli-fnbfcd05.js";
-import"./cli-gpnb45ck.js";
-import"./cli-8rxa073f.js";
-export {
-  CodeAgent
-};

package/build/blackboxAgent-r71vagzf.js

@@ -1,18 +0,0 @@
-import {
-  BlackboxAttackSurfaceAgent
-} from "./cli-d5zmetvp.js";
-import"./cli-fqbtn2jm.js";
-import"./cli-tp1tqn3k.js";
-import"./cli-en95jsmj.js";
-import"./cli-3y0dgy56.js";
-import"./cli-pwm6h6qr.js";
-import"./cli-03z6pswp.js";
-import"./cli-ph5ntnp3.js";
-import"./cli-4drstr4p.js";
-import"./cli-chtdyzgf.js";
-import"./cli-fnbfcd05.js";
-import"./cli-gpnb45ck.js";
-import"./cli-8rxa073f.js";
-export {
-  BlackboxAttackSurfaceAgent
-};

package/build/pentest-qqgw0g47.js

@@ -1,28 +0,0 @@
-import {
-  DEFAULT_CONCURRENCY,
-  runPentestSwarm,
-  runPentestWorkflow
-} from "./cli-jmfjf0xc.js";
-import"./cli-b88bgfv5.js";
-import"./cli-byq7tftq.js";
-import"./cli-d5zmetvp.js";
-import"./cli-fw5r7pfj.js";
-import"./cli-tztmmk79.js";
-import"./cli-v59chwpq.js";
-import"./cli-fqbtn2jm.js";
-import"./cli-tp1tqn3k.js";
-import"./cli-en95jsmj.js";
-import"./cli-3y0dgy56.js";
-import"./cli-pwm6h6qr.js";
-import"./cli-03z6pswp.js";
-import"./cli-ph5ntnp3.js";
-import"./cli-4drstr4p.js";
-import"./cli-chtdyzgf.js";
-import"./cli-fnbfcd05.js";
-import"./cli-gpnb45ck.js";
-import"./cli-8rxa073f.js";
-export {
-  runPentestWorkflow,
-  runPentestSwarm,
-  DEFAULT_CONCURRENCY
-};