@pensar/apex 1.4.0 → 1.5.0

package/build/{agent-xw97p62b.js → agent-826kcm6p.js}

@@ -3,22 +3,22 @@ import {
 } from "./cli-0fy9j5dw.js";
 import {
   OffensiveSecurityAgent
-} from "./cli-rn3mezj8.js";
+} from "./cli-9agejx4x.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-evenmfmt.js";
+import"./cli-710a5ab8.js";
 import"./cli-3y0dgy56.js";
 import {
   hasToolCall
-} from "./cli-ctb1vg2p.js";
-import"./cli-03z6pswp.js";
+} from "./cli-wntm40ab.js";
 import {
   tool
 } from "./cli-0ghkg3w6.js";
-import"./cli-39d581n4.js";
-import"./cli-mxms90xg.js";
-import"./cli-am3dgbv8.js";
-import"./cli-jh6h1myg.js";
+import"./cli-tw7mm283.js";
+import"./cli-wgnkk2ae.js";
 import"./cli-gpnb45ck.js";
+import"./cli-vv6j2mec.js";
+import"./cli-wzb6j1d9.js";
+import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 
 // src/core/agents/specialized/whiteboxAttackSurface/prompts.ts

package/build/agent-ygmdd47f.js

@@ -0,0 +1,19 @@
+import {
+  CodeAgent
+} from "./cli-30w3njcs.js";
+import"./cli-9agejx4x.js";
+import"./cli-tp1tqn3k.js";
+import"./cli-710a5ab8.js";
+import"./cli-3y0dgy56.js";
+import"./cli-wntm40ab.js";
+import"./cli-0ghkg3w6.js";
+import"./cli-tw7mm283.js";
+import"./cli-wgnkk2ae.js";
+import"./cli-gpnb45ck.js";
+import"./cli-vv6j2mec.js";
+import"./cli-wzb6j1d9.js";
+import"./cli-03z6pswp.js";
+import"./cli-8rxa073f.js";
+export {
+  CodeAgent
+};

package/build/{auth-sc1hmsgv.js → auth-xsgt862b.js}

@@ -8,14 +8,14 @@ import {
   pollWorkOSToken,
   selectWorkspace,
   startDeviceFlow
-} from "./cli-39d581n4.js";
+} from "./cli-tw7mm283.js";
 import {
   config,
   getPensarApiUrl,
   getPensarConsoleUrl
-} from "./cli-mxms90xg.js";
-import"./cli-am3dgbv8.js";
-import"./cli-jh6h1myg.js";
+} from "./cli-wgnkk2ae.js";
+import"./cli-vv6j2mec.js";
+import"./cli-wzb6j1d9.js";
 import {
   __require
 } from "./cli-8rxa073f.js";

package/build/{authentication-jt2jbqj2.js → authentication-30wrh2pf.js}

@@ -1,21 +1,21 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-rn3mezj8.js";
+} from "./cli-9agejx4x.js";
 import {
   detectOSAndEnhancePrompt
 } from "./cli-tp1tqn3k.js";
-import"./cli-evenmfmt.js";
+import"./cli-710a5ab8.js";
 import"./cli-3y0dgy56.js";
 import {
   hasToolCall
-} from "./cli-ctb1vg2p.js";
-import"./cli-03z6pswp.js";
+} from "./cli-wntm40ab.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-39d581n4.js";
-import"./cli-mxms90xg.js";
-import"./cli-am3dgbv8.js";
-import"./cli-jh6h1myg.js";
+import"./cli-tw7mm283.js";
+import"./cli-wgnkk2ae.js";
 import"./cli-gpnb45ck.js";
+import"./cli-vv6j2mec.js";
+import"./cli-wzb6j1d9.js";
+import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 
 // src/core/agents/specialized/authenticationAgent/agent.ts

package/build/{blackboxAgent-rq9z4g0p.js → blackboxAgent-q1z639g8.js}

@@ -1,18 +1,18 @@
 import {
   BlackboxAttackSurfaceAgent
-} from "./cli-jp69ygke.js";
-import"./cli-rn3mezj8.js";
+} from "./cli-60drere9.js";
+import"./cli-9agejx4x.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-evenmfmt.js";
+import"./cli-710a5ab8.js";
 import"./cli-3y0dgy56.js";
-import"./cli-ctb1vg2p.js";
-import"./cli-03z6pswp.js";
+import"./cli-wntm40ab.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-39d581n4.js";
-import"./cli-mxms90xg.js";
-import"./cli-am3dgbv8.js";
-import"./cli-jh6h1myg.js";
+import"./cli-tw7mm283.js";
+import"./cli-wgnkk2ae.js";
 import"./cli-gpnb45ck.js";
+import"./cli-vv6j2mec.js";
+import"./cli-wzb6j1d9.js";
+import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 export {
   BlackboxAttackSurfaceAgent

package/build/{blackboxPentest-3wwyqckx.js → blackboxPentest-9v0xt57e.js}

@@ -1,24 +1,24 @@
 import {
   runPentestWorkflow
-} from "./cli-vwyn3es3.js";
-import"./cli-e1axrn0s.js";
-import"./cli-e9n1z1dp.js";
-import"./cli-jp69ygke.js";
-import"./cli-fw5r7pfj.js";
-import"./cli-a9bs4kq9.js";
+} from "./cli-rke1rjpf.js";
+import"./cli-z5t4337e.js";
+import"./cli-v3f4zxgx.js";
 import"./cli-0fy9j5dw.js";
-import"./cli-rn3mezj8.js";
+import"./cli-60drere9.js";
+import"./cli-fw5r7pfj.js";
+import"./cli-30w3njcs.js";
+import"./cli-9agejx4x.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-evenmfmt.js";
+import"./cli-710a5ab8.js";
 import"./cli-3y0dgy56.js";
-import"./cli-ctb1vg2p.js";
-import"./cli-03z6pswp.js";
+import"./cli-wntm40ab.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-39d581n4.js";
-import"./cli-mxms90xg.js";
-import"./cli-am3dgbv8.js";
-import"./cli-jh6h1myg.js";
+import"./cli-tw7mm283.js";
+import"./cli-wgnkk2ae.js";
 import"./cli-gpnb45ck.js";
+import"./cli-vv6j2mec.js";
+import"./cli-wzb6j1d9.js";
+import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 
 // src/core/api/blackboxPentest.ts

package/build/{cli-k0tycc78.js → cli-1c0yqbxc.js}

@@ -1,6 +1,6 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-rn3mezj8.js";
+} from "./cli-9agejx4x.js";
 import {
   __commonJS,
   __require

package/build/{cli-a9bs4kq9.js → cli-30w3njcs.js}

@@ -1,9 +1,9 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-rn3mezj8.js";
+} from "./cli-9agejx4x.js";
 import {
   stepCountIs
-} from "./cli-ctb1vg2p.js";
+} from "./cli-wntm40ab.js";
 
 // src/core/agents/specialized/codeAgent/prompts.ts
 var CODE_AGENT_SYSTEM_PROMPT = `You are an expert coding agent with direct filesystem access. You will be given a specific objective — focus exclusively on completing it.

package/build/{cli-6r72e7et.js → cli-4cgqez3x.js}

@@ -2,7 +2,7 @@ import {
   config,
   ensureValidToken,
   getPensarApiUrl
-} from "./cli-mxms90xg.js";
+} from "./cli-wgnkk2ae.js";
 
 // src/core/api/issues.ts
 async function getAuthHeaders() {

package/build/{cli-jp69ygke.js → cli-60drere9.js}

@@ -1,13 +1,13 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-rn3mezj8.js";
+} from "./cli-9agejx4x.js";
 import {
   detectOSAndEnhancePrompt
 } from "./cli-tp1tqn3k.js";
 import {
   hasToolCall,
   stepCountIs
-} from "./cli-ctb1vg2p.js";
+} from "./cli-wntm40ab.js";
 
 // src/core/agents/specialized/attackSurface/blackboxAgent.ts
 import { join } from "path";

package/build/{cli-evenmfmt.js → cli-710a5ab8.js}

@@ -1,6 +1,6 @@
 import {
   generateObjectResponse
-} from "./cli-ctb1vg2p.js";
+} from "./cli-wntm40ab.js";
 import {
   exports_external1 as exports_external,
   init_zod,

package/build/{cli-rn3mezj8.js → cli-9agejx4x.js}

@@ -16,7 +16,7 @@ import {
   update,
   write,
   writeRaw
-} from "./cli-evenmfmt.js";
+} from "./cli-710a5ab8.js";
 import {
   parseTargetUrl
 } from "./cli-3y0dgy56.js";
@@ -29,7 +29,7 @@ import {
   require_tslib,
   streamResponse,
   toggleTool
-} from "./cli-ctb1vg2p.js";
+} from "./cli-wntm40ab.js";
 import {
   _enum,
   _null,
@@ -57,15 +57,15 @@ import {
 } from "./cli-0ghkg3w6.js";
 import {
   signGatewayRequest
-} from "./cli-39d581n4.js";
+} from "./cli-tw7mm283.js";
 import {
   config,
   ensureValidToken,
   getPensarApiUrl
-} from "./cli-mxms90xg.js";
+} from "./cli-wgnkk2ae.js";
 import {
   getCurrentVersion
-} from "./cli-jh6h1myg.js";
+} from "./cli-wzb6j1d9.js";
 import {
   __commonJS,
   __require,
@@ -109978,7 +109978,7 @@ async function generateThreatModelForEndpoint(ctx, input) {
   return threatModelLimiter(async () => {
     if (ctx.abortSignal?.aborted)
       return null;
-    const { CodeAgent } = await import("./agent-xg2xarp3.js");
+    const { CodeAgent } = await import("./agent-ygmdd47f.js");
     const subagentId = `threat-model-${sanitize(input.appName)}-${sanitize(input.routePath)}`;
     ctx.eventBus?.emit("subagent-spawn", {
       subagentId,
@@ -110667,7 +110667,7 @@ When to use delegate_to_auth_subagent vs authenticate_session:
         if (credentials) {
           ctx.session.credentialManager.addFromAuthCredentials(credentials);
         }
-        const { runAuthenticationAgent } = await import("./authentication-jt2jbqj2.js");
+        const { runAuthenticationAgent } = await import("./authentication-30wrh2pf.js");
         const localBus = new AgentEventBus;
         AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
         const result = await runAuthenticationAgent({
@@ -111580,7 +111580,7 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
       });
       if (cwd) {
         try {
-          const { WhiteboxAttackSurfaceAgent } = await import("./agent-xw97p62b.js");
+          const { WhiteboxAttackSurfaceAgent } = await import("./agent-826kcm6p.js");
           const localBus = new AgentEventBus;
           AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
           const agent = new WhiteboxAttackSurfaceAgent({
@@ -111629,7 +111629,7 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
         }
       }
       try {
-        const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-rq9z4g0p.js");
+        const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-q1z639g8.js");
         const localBus = new AgentEventBus;
         AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
         const agent = new BlackboxAttackSurfaceAgent({
@@ -111705,7 +111705,7 @@ Pass every target you want tested — the swarm handles concurrency automaticall
       toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async ({ targets }) => {
-      const { runPentestSwarm, DEFAULT_CONCURRENCY } = await import("./pentest-tv2e2ygn.js");
+      const { runPentestSwarm, DEFAULT_CONCURRENCY } = await import("./pentest-mczd9b5r.js");
       if (!ctx.model) {
         return {
           success: false,
@@ -111833,7 +111833,7 @@ Returns an array of results with the text output from each agent.`,
   });
 }
 async function runSingleCodingAgent(ctx, codebasePath, objective, agentIndex, name) {
-  const { CodeAgent } = await import("./agent-xg2xarp3.js");
+  const { CodeAgent } = await import("./agent-ygmdd47f.js");
   const subagentId = `coding-agent-${agentIndex}`;
   ctx.eventBus?.emit("subagent-spawn", {
     subagentId,
@@ -111894,7 +111894,7 @@ Omit \`cwd\` for blackbox mode (live target probing only).`,
       toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async ({ target, cwd }) => {
-      const { runPentestWorkflow: workflow } = await import("./pentest-tv2e2ygn.js");
+      const { runPentestWorkflow: workflow } = await import("./pentest-mczd9b5r.js");
       if (!ctx.model) {
         return {
           success: false,

package/build/{cli-vwyn3es3.js → cli-rke1rjpf.js}

@@ -14,31 +14,31 @@ import {
   updateManifestEntryStatus,
   writeAgentManifest,
   writeExecutionMetrics
-} from "./cli-e1axrn0s.js";
+} from "./cli-z5t4337e.js";
 import {
   TargetedPentestAgent,
   buildPentestSystemPrompt
-} from "./cli-e9n1z1dp.js";
+} from "./cli-v3f4zxgx.js";
+import {
+  EndpointSchema
+} from "./cli-0fy9j5dw.js";
 import {
   BlackboxAttackSurfaceAgent
-} from "./cli-jp69ygke.js";
+} from "./cli-60drere9.js";
 import {
   createThreatModelPrompt
 } from "./cli-fw5r7pfj.js";
 import {
   CodeAgent
-} from "./cli-a9bs4kq9.js";
-import {
-  EndpointSchema
-} from "./cli-0fy9j5dw.js";
+} from "./cli-30w3njcs.js";
 import {
   FindingsRegistry,
   OffensiveSecurityAgent,
   PLAN_MODE_TOOL_NAMES
-} from "./cli-rn3mezj8.js";
+} from "./cli-9agejx4x.js";
 import {
   hasToolCall
-} from "./cli-ctb1vg2p.js";
+} from "./cli-wntm40ab.js";
 import {
   exports_external1 as exports_external,
   init_zod

package/build/{cli-39d581n4.js → cli-tw7mm283.js}

@@ -3,7 +3,7 @@ import {
   ensureValidToken,
   getPensarApiUrl,
   getPensarGatewayUrl
-} from "./cli-mxms90xg.js";
+} from "./cli-wgnkk2ae.js";
 
 // src/core/auth/signing.ts
 import { createHmac, createHash, randomUUID } from "crypto";

package/build/{cli-e9n1z1dp.js → cli-v3f4zxgx.js}

@@ -1,7 +1,7 @@
 import {
   OffensiveSecurityAgent,
   readPlan
-} from "./cli-rn3mezj8.js";
+} from "./cli-9agejx4x.js";
 import {
   exports_external1 as exports_external,
   init_zod

package/build/{cli-am3dgbv8.js → cli-vv6j2mec.js}

@@ -1,6 +1,6 @@
 import {
   getCurrentVersion
-} from "./cli-jh6h1myg.js";
+} from "./cli-wzb6j1d9.js";
 
 // src/core/config/config.ts
 import os from "os";
@@ -23,18 +23,11 @@ async function init() {
   const version = getCurrentVersion();
   return { ...DEFAULT_CONFIG, version };
 }
-async function get() {
-  const folder = path.join(os.homedir(), ".pensar");
-  const file = path.join(folder, "config.json");
-  const exists = await fs.access(file).then(() => true).catch(() => false);
-  if (!exists) {
-    return await init();
-  }
-  const config = await fs.readFile(file, "utf8");
-  const parsedConfig = JSON.parse(config);
+function applyEnvFallbacks(parsedConfig) {
   const version = getCurrentVersion();
   return {
     ...parsedConfig,
+    responsibleUseAccepted: parsedConfig.responsibleUseAccepted ?? false,
     version,
     openAiAPIKey: parsedConfig.openAiAPIKey ?? process.env.OPENAI_API_KEY,
     anthropicAPIKey: parsedConfig.anthropicAPIKey ?? process.env.ANTHROPIC_API_KEY,
@@ -48,6 +41,18 @@ async function get() {
     runloopAPIKey: parsedConfig.runloopAPIKey ?? process.env.RUNLOOP_API_KEY
   };
 }
+async function get() {
+  const folder = path.join(os.homedir(), ".pensar");
+  const file = path.join(folder, "config.json");
+  const exists = await fs.access(file).then(() => true).catch(() => false);
+  if (!exists) {
+    await init();
+    return applyEnvFallbacks(DEFAULT_CONFIG);
+  }
+  const config = await fs.readFile(file, "utf8");
+  const parsedConfig = JSON.parse(config);
+  return applyEnvFallbacks(parsedConfig);
+}
 async function update(config) {
   const folder = path.join(os.homedir(), ".pensar");
   const file = path.join(folder, "config.json");

package/build/{cli-mxms90xg.js → cli-wgnkk2ae.js}

@@ -2,7 +2,7 @@ import {
   get,
   init,
   update
-} from "./cli-am3dgbv8.js";
+} from "./cli-vv6j2mec.js";
 
 // src/core/api/constants.ts
 var PENSAR_API_BASE_URL = "https://api.pensar.dev";

package/build/{cli-ctb1vg2p.js → cli-wntm40ab.js}

@@ -1,7 +1,3 @@
-import {
-  getModelInfo,
-  init_models
-} from "./cli-03z6pswp.js";
 import {
   AISDKError,
   APICallError,
@@ -75,12 +71,16 @@ import {
 } from "./cli-0ghkg3w6.js";
 import {
   signGatewayRequest
-} from "./cli-39d581n4.js";
+} from "./cli-tw7mm283.js";
 import {
   config,
   ensureValidToken,
   getPensarGatewayUrl
-} from "./cli-mxms90xg.js";
+} from "./cli-wgnkk2ae.js";
+import {
+  getModelInfo,
+  init_models
+} from "./cli-03z6pswp.js";
 import {
   __commonJS,
   __esm,

package/build/{cli-jh6h1myg.js → cli-wzb6j1d9.js}

@@ -3,7 +3,7 @@ import { spawnSync } from "child_process";
 // package.json
 var package_default = {
   name: "@pensar/apex",
-  version: "1.4.0",
+  version: "1.5.0",
   description: "AI-powered penetration testing CLI tool with terminal UI",
   module: "src/tui/index.tsx",
   main: "build/cli.js",

package/build/{cli-e1axrn0s.js → cli-z5t4337e.js}

@@ -2,7 +2,7 @@ import {
   CweEntrySchema,
   ValidatedCweEntrySchema,
   hasCanonicalName
-} from "./cli-rn3mezj8.js";
+} from "./cli-9agejx4x.js";
 import {
   exports_external1 as exports_external,
   init_zod

package/build/cli.js

@@ -6,18 +6,18 @@ import {
 import"./cli-3y0dgy56.js";
 import {
   init_toolset
-} from "./cli-ctb1vg2p.js";
-import {
-  init_models
-} from "./cli-03z6pswp.js";
+} from "./cli-wntm40ab.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-39d581n4.js";
-import"./cli-mxms90xg.js";
-import"./cli-am3dgbv8.js";
+import"./cli-tw7mm283.js";
+import"./cli-wgnkk2ae.js";
+import"./cli-gpnb45ck.js";
+import"./cli-vv6j2mec.js";
 import {
   package_default
-} from "./cli-jh6h1myg.js";
-import"./cli-gpnb45ck.js";
+} from "./cli-wzb6j1d9.js";
+import {
+  init_models
+} from "./cli-03z6pswp.js";
 import {
   __require,
   __toESM
@@ -25,7 +25,7 @@ import {
 // package.json
 var package_default2 = {
   name: "@pensar/apex",
-  version: "1.4.0",
+  version: "1.5.0",
   description: "AI-powered penetration testing CLI tool with terminal UI",
   module: "src/tui/index.tsx",
   main: "build/cli.js",
@@ -494,6 +494,26 @@ async function createInstrumentedBus(session) {
   });
   return { bus, cleanup: async () => wandbCleanup?.() };
 }
+async function resolveCliModel() {
+  const explicit = getArg("--model");
+  if (explicit)
+    return explicit;
+  const { config: appConfig } = await import("./index-g9ghthsc.js");
+  const { getDefaultModelForConfig } = await import("./utils-jf52rmrb.js");
+  const pensarConfig = await appConfig.get();
+  const defaultModel = getDefaultModelForConfig(pensarConfig);
+  if (!defaultModel) {
+    console.error(`Error: No AI provider configured. Set one of:
+` + `  PENSAR_API_KEY     \u2014 Pensar Console (recommended)
+` + `  ANTHROPIC_API_KEY  \u2014 Anthropic direct
+` + `  OPENAI_API_KEY     \u2014 OpenAI
+` + `  OPENROUTER_API_KEY \u2014 OpenRouter
+` + `
+Or run 'pensar login' to connect to Pensar Console.`);
+    process.exit(1);
+  }
+  return defaultModel.id;
+}
 function showHelp() {
   console.log(`Pensar - AI-Powered Penetration Testing CLI
 
@@ -518,13 +538,13 @@ Usage:
 operator options (-p):
   -p, --prompt <text|@file>  (required) Prompt for the operator agent
   --target <url>             Target URL / domain / IP
-  --model <model>            AI model (default: claude-sonnet-4-5)
+  --model <model>            AI model (default: auto-selected from configured provider)
 
 pentest options:
   --target <url>           (required) Target URL / domain / IP
   --cwd <path>             Source code path \u2014 enables whitebox attack surface
   --mode <mode>            Pentest mode: exfil (pivoting & flag extraction)
-  --model <model>          AI model (default: claude-sonnet-4-5)
+  --model <model>          AI model (default: auto-selected from configured provider)
   --extended-thinking       Enable extended thinking for supported models
   --task-driven             Enable task-driven architecture (experimental)
   --prompt <text|@file>    Guidance for the pentest agent (inline text or @filepath)
@@ -533,11 +553,11 @@ pentest options:
 targeted-pentest options:
   --target <url>          (required) Target URL / domain / IP
   --objective <text>      (required, repeatable) Testing objective
-  --model <model>         AI model (default: claude-sonnet-4-5)
+  --model <model>         AI model (default: auto-selected from configured provider)
 
 threat-model options:
   --output, -o <path>  Output file path (default: ./threat-model.md)
-  --model <model>      AI model (default: claude-sonnet-4-5)
+  --model <model>      AI model (default: auto-selected from configured provider)
 
 Global options:
   -h, --help         Show this help message
@@ -550,10 +570,9 @@ Global options:
 async function runPentest() {
   const { config: config2 } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config2();
-  const { runPentestAgent } = await import("./blackboxPentest-3wwyqckx.js");
-  const { sessions } = await import("./index-8cn46ysy.js");
-  const { config: appConfig } = await import("./index-bx88n3qr.js");
-  const { getDefaultModelForConfig } = await import("./utils-8yqe12jr.js");
+  const { runPentestAgent } = await import("./blackboxPentest-9v0xt57e.js");
+  const { sessions } = await import("./index-q06a58c3.js");
+  const { config: appConfig } = await import("./index-g9ghthsc.js");
   const target = getArgRequired("--target");
   const cwd = getArg("--cwd");
   const mode = getArg("--mode");
@@ -565,8 +584,7 @@ async function runPentest() {
   const resolvedPrompt = promptRaw ? resolveFlagValue(promptRaw) : undefined;
   const prompt = combinePromptParts(resolvedTm, resolvedPrompt);
   const pensarConfig = await appConfig.get();
-  const dynamicDefault = getDefaultModelForConfig(pensarConfig)?.id ?? "claude-sonnet-4-5";
-  const model = getArg("--model") ?? dynamicDefault;
+  const model = await resolveCliModel();
   const { exfilMode, warning: modeWarning } = resolvePentestMode(mode);
   if (modeWarning) {
     console.warn(modeWarning);
@@ -618,15 +636,13 @@ Report:    ${reportPath}` : ""}`);
 async function runTargetedPentest() {
   const { config: config2 } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config2();
-  const { runTargetedPentestAgent } = await import("./targetedPentest-nm0y2fv4.js");
-  const { sessions } = await import("./index-8cn46ysy.js");
-  const { config: appConfig } = await import("./index-bx88n3qr.js");
-  const { getDefaultModelForConfig } = await import("./utils-8yqe12jr.js");
+  const { runTargetedPentestAgent } = await import("./targetedPentest-j457sh84.js");
+  const { sessions } = await import("./index-q06a58c3.js");
+  const { config: appConfig } = await import("./index-g9ghthsc.js");
   const target = getArgRequired("--target");
   const objectives = getAllArgs("--objective");
   const pensarConfig = await appConfig.get();
-  const dynamicDefault = getDefaultModelForConfig(pensarConfig)?.id ?? "claude-sonnet-4-5";
-  const model = getArg("--model") ?? dynamicDefault;
+  const model = await resolveCliModel();
   if (objectives.length === 0) {
     console.error("Error: at least one --objective is required");
     process.exit(1);
@@ -670,13 +686,11 @@ POCs:      ${pocsPath}`);
 async function runThreatModel() {
   const { config: config2 } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config2();
-  const { runThreatModelWorkflow } = await import("./threatModel-qrtk7rj4.js");
-  const { config: appConfig } = await import("./index-bx88n3qr.js");
-  const { getDefaultModelForConfig } = await import("./utils-8yqe12jr.js");
+  const { runThreatModelWorkflow } = await import("./threatModel-kk3f89wx.js");
+  const { config: appConfig } = await import("./index-g9ghthsc.js");
   const path = await import("path");
   const pensarConfig = await appConfig.get();
-  const dynamicDefault = getDefaultModelForConfig(pensarConfig)?.id ?? "claude-sonnet-4-5";
-  const model = getArg("--model") ?? dynamicDefault;
+  const model = await resolveCliModel();
   const outputArg = getArg("--output") ?? getArg("-o") ?? "threat-model.md";
   const resolvedPath = path.isAbsolute(outputArg) ? outputArg : path.resolve(process.cwd(), outputArg);
   const sep = "=".repeat(60);
@@ -709,11 +723,10 @@ Threat model written to: ${resolvedPath}`);
 async function runOperator() {
   const { config: config2 } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config2();
-  const { runOffensiveSecurityAgent } = await import("./offesecAgent-pxnz905y.js");
-  const { sessions, normalizeMessages, getResumeMessages } = await import("./index-8cn46ysy.js");
-  const { ALL_TOOL_NAMES, SKILL_TOOL_NAMES } = await import("./index-hg0e235k.js");
-  const { config: appConfig } = await import("./index-bx88n3qr.js");
-  const { getDefaultModelForConfig } = await import("./utils-8yqe12jr.js");
+  const { runOffensiveSecurityAgent } = await import("./offesecAgent-h0ersxej.js");
+  const { sessions, normalizeMessages, getResumeMessages } = await import("./index-q06a58c3.js");
+  const { ALL_TOOL_NAMES, SKILL_TOOL_NAMES } = await import("./index-0pcd0tmc.js");
+  const { config: appConfig } = await import("./index-g9ghthsc.js");
   const { createInterface } = await import("readline");
   const { readFileSync: readFileSync2, existsSync } = await import("fs");
   const path = await import("path");
@@ -726,8 +739,7 @@ async function runOperator() {
   const prompt = resolveFlagValue(promptRaw);
   const target = getArg("--target");
   const pensarConfig = await appConfig.get();
-  const dynamicDefault = getDefaultModelForConfig(pensarConfig)?.id ?? "claude-sonnet-4-5";
-  const model = getArg("--model") ?? dynamicDefault;
+  const model = await resolveCliModel();
   const sep = "\u2500".repeat(60);
   console.log(`${sep}
 OPERATOR SESSION
@@ -823,25 +835,25 @@ if (hasFlag("-p") || command === "--prompt") {
   await runTargetedPentest();
 } else if (command === "login" || command === "auth") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./auth-sc1hmsgv.js");
+  await import("./auth-xsgt862b.js");
 } else if (command === "uninstall") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./uninstall-cy8m1788.js");
+  await import("./uninstall-8cqb79tf.js");
 } else if (command === "projects") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./projects-wxke4080.js");
+  await import("./projects-9nf4z056.js");
 } else if (command === "pentests") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./pentests-s9462spt.js");
+  await import("./pentests-dgf16fbb.js");
 } else if (command === "issues") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./issues-k3tx6cng.js");
+  await import("./issues-dcb00e79.js");
 } else if (command === "fixes") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./fixes-05de9mv3.js");
+  await import("./fixes-64yfftv5.js");
 } else if (command === "logs") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./logs-q33a8qag.js");
+  await import("./logs-e6v46nst.js");
 } else if (command === "threat-model") {
   await runThreatModel();
 } else if (command === "doctor") {
@@ -853,7 +865,7 @@ if (hasFlag("-p") || command === "--prompt") {
     console.error("All other commands work with Node \u2014 run 'pensar --help'.");
     process.exit(1);
   }
-  await import("./index-vaba4g8m.js");
+  await import("./index-532gd4bb.js");
 } else {
   console.error(`Error: Unknown command '${command}'`);
   console.error();

package/build/{fixes-05de9mv3.js → fixes-64yfftv5.js}

@@ -2,10 +2,10 @@
 import {
   getFix,
   listFixes
-} from "./cli-6r72e7et.js";
-import"./cli-mxms90xg.js";
-import"./cli-am3dgbv8.js";
-import"./cli-jh6h1myg.js";
+} from "./cli-4cgqez3x.js";
+import"./cli-wgnkk2ae.js";
+import"./cli-vv6j2mec.js";
+import"./cli-wzb6j1d9.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/fixes.ts

package/build/{index-hg0e235k.js → index-0pcd0tmc.js}

@@ -7,18 +7,18 @@ import {
   SKILL_TOOL_NAMES,
   StepTraceWriter,
   createAllTools
-} from "./cli-rn3mezj8.js";
+} from "./cli-9agejx4x.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-evenmfmt.js";
+import"./cli-710a5ab8.js";
 import"./cli-3y0dgy56.js";
-import"./cli-ctb1vg2p.js";
-import"./cli-03z6pswp.js";
+import"./cli-wntm40ab.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-39d581n4.js";
-import"./cli-mxms90xg.js";
-import"./cli-am3dgbv8.js";
-import"./cli-jh6h1myg.js";
+import"./cli-tw7mm283.js";
+import"./cli-wgnkk2ae.js";
 import"./cli-gpnb45ck.js";
+import"./cli-vv6j2mec.js";
+import"./cli-wzb6j1d9.js";
+import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 export {
   createAllTools,

package/build/{index-vaba4g8m.js → index-532gd4bb.js}

@@ -1,20 +1,16 @@
-import {
-  AVAILABLE_PROVIDERS,
-  init_types
-} from "./cli-yz80qkzn.js";
 import {
   buildPentestPrompt,
   buildThreatModelPrompt,
   createSkillsRegistry,
   runOffensiveSecurityAgent
-} from "./cli-k0tycc78.js";
+} from "./cli-1c0yqbxc.js";
 import {
   REPORT_FILENAME_MD,
   convertModelMessagesToUI,
   loadSubagents,
   readExecutionMetrics,
   writeExecutionMetrics
-} from "./cli-e1axrn0s.js";
+} from "./cli-z5t4337e.js";
 import {
   createThreatModelPrompt
 } from "./cli-fw5r7pfj.js";
@@ -22,6 +18,10 @@ import {
   createWeaveTracer,
   resolveConfig
 } from "./cli-pkdjamer.js";
+import {
+  AVAILABLE_PROVIDERS,
+  init_types
+} from "./cli-yz80qkzn.js";
 import {
   ALL_TOOL_NAMES,
   ASK_USER_QUESTIONS_TOOL_NAME,
@@ -38,14 +38,14 @@ import {
   planFilePath,
   readPlan,
   sessions
-} from "./cli-rn3mezj8.js";
+} from "./cli-9agejx4x.js";
 import {
   detectOSAndEnhancePrompt
 } from "./cli-tp1tqn3k.js";
 import {
   read,
   write
-} from "./cli-evenmfmt.js";
+} from "./cli-710a5ab8.js";
 import {
   getAutoPopulatedHosts,
   getAutoPopulatedPorts,
@@ -57,11 +57,7 @@ import {
   init_toolset,
   modelSupportsThinking,
   stepCountIs
-} from "./cli-ctb1vg2p.js";
-import {
-  AVAILABLE_MODELS,
-  init_models
-} from "./cli-03z6pswp.js";
+} from "./cli-wntm40ab.js";
 import"./cli-0ghkg3w6.js";
 import {
   disconnect,
@@ -73,19 +69,23 @@ import {
   selectWorkspace,
   startDeviceFlow,
   validateGateway
-} from "./cli-39d581n4.js";
+} from "./cli-tw7mm283.js";
 import {
   config,
   getPensarApiUrl,
   getPensarConsoleUrl
-} from "./cli-mxms90xg.js";
+} from "./cli-wgnkk2ae.js";
+import"./cli-gpnb45ck.js";
 import {
   update
-} from "./cli-am3dgbv8.js";
+} from "./cli-vv6j2mec.js";
 import {
   checkForUpdate
-} from "./cli-jh6h1myg.js";
-import"./cli-gpnb45ck.js";
+} from "./cli-wzb6j1d9.js";
+import {
+  AVAILABLE_MODELS,
+  init_models
+} from "./cli-03z6pswp.js";
 import {
   __commonJS,
   __esm,
@@ -197,7 +197,8 @@ var init_utils = __esm(() => {
     anthropic: "claude-opus-4-6",
     openai: "gpt-5.2-pro",
     google: "gemini-3.1-pro-preview",
-    openrouter: "anthropic/claude-opus-4.6"
+    openrouter: "anthropic/claude-opus-4.6",
+    bedrock: "anthropic.claude-opus-4-6-v1"
   };
 });
 
@@ -69359,7 +69360,7 @@ function AppContent({
       toast(`Update available: v${currentVersion} → v${latestVersion}. Run: pensar upgrade`, "warn", 8000);
     });
     const checkAuthToken = async () => {
-      const { isTokenExpired, isConnected: isConnected2 } = await import("./index-fh4dtkm8.js");
+      const { isTokenExpired, isConnected: isConnected2 } = await import("./index-wj1sggpd.js");
       if (isConnected2(config2.data) && config2.data.accessToken && isTokenExpired(config2.data.accessToken, 60) && !config2.data.refreshToken && !config2.data.pensarAPIKey) {
         toast("Your Pensar Console session has expired. Run /login to refresh.", "warn", 8000);
       }

package/build/{index-bx88n3qr.js → index-g9ghthsc.js}

@@ -2,8 +2,8 @@ import {
   get,
   init,
   update
-} from "./cli-am3dgbv8.js";
-import"./cli-jh6h1myg.js";
+} from "./cli-vv6j2mec.js";
+import"./cli-wzb6j1d9.js";
 import"./cli-8rxa073f.js";
 
 // src/core/config/index.ts

package/build/{index-8cn46ysy.js → index-q06a58c3.js}

@@ -13,25 +13,25 @@ import {
   update,
   write,
   writeRaw
-} from "./cli-evenmfmt.js";
+} from "./cli-710a5ab8.js";
 import {
   ToolsetStateSchema,
   exports_toolset,
   init_toolset,
   toggleTool
-} from "./cli-ctb1vg2p.js";
-import"./cli-03z6pswp.js";
+} from "./cli-wntm40ab.js";
 import {
   init_zod,
   zod_default
 } from "./cli-0ghkg3w6.js";
-import"./cli-39d581n4.js";
-import"./cli-mxms90xg.js";
-import"./cli-am3dgbv8.js";
+import"./cli-tw7mm283.js";
+import"./cli-wgnkk2ae.js";
+import"./cli-gpnb45ck.js";
+import"./cli-vv6j2mec.js";
 import {
   getCurrentVersion
-} from "./cli-jh6h1myg.js";
-import"./cli-gpnb45ck.js";
+} from "./cli-wzb6j1d9.js";
+import"./cli-03z6pswp.js";
 import {
   __require,
   __toCommonJS

package/build/{index-fh4dtkm8.js → index-wj1sggpd.js}

@@ -9,15 +9,15 @@ import {
   signGatewayRequest,
   startDeviceFlow,
   validateGateway
-} from "./cli-39d581n4.js";
+} from "./cli-tw7mm283.js";
 import {
   ensureValidToken,
   fetchWorkOSClientId,
   isTokenExpired,
   refreshAccessToken
-} from "./cli-mxms90xg.js";
-import"./cli-am3dgbv8.js";
-import"./cli-jh6h1myg.js";
+} from "./cli-wgnkk2ae.js";
+import"./cli-vv6j2mec.js";
+import"./cli-wzb6j1d9.js";
 import"./cli-8rxa073f.js";
 export {
   validateGateway,

package/build/{issues-k3tx6cng.js → issues-dcb00e79.js}

@@ -3,10 +3,10 @@ import {
   getIssue,
   listIssues,
   updateIssue
-} from "./cli-6r72e7et.js";
-import"./cli-mxms90xg.js";
-import"./cli-am3dgbv8.js";
-import"./cli-jh6h1myg.js";
+} from "./cli-4cgqez3x.js";
+import"./cli-wgnkk2ae.js";
+import"./cli-vv6j2mec.js";
+import"./cli-wzb6j1d9.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/issues.ts

package/build/{logs-q33a8qag.js → logs-e6v46nst.js}

@@ -2,10 +2,10 @@
 import {
   listAgentLogs,
   searchAgentLogs
-} from "./cli-6r72e7et.js";
-import"./cli-mxms90xg.js";
-import"./cli-am3dgbv8.js";
-import"./cli-jh6h1myg.js";
+} from "./cli-4cgqez3x.js";
+import"./cli-wgnkk2ae.js";
+import"./cli-vv6j2mec.js";
+import"./cli-wzb6j1d9.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/logs.ts

package/build/{offesecAgent-pxnz905y.js → offesecAgent-h0ersxej.js}

@@ -1,17 +1,17 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-rn3mezj8.js";
+} from "./cli-9agejx4x.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-evenmfmt.js";
+import"./cli-710a5ab8.js";
 import"./cli-3y0dgy56.js";
-import"./cli-ctb1vg2p.js";
-import"./cli-03z6pswp.js";
+import"./cli-wntm40ab.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-39d581n4.js";
-import"./cli-mxms90xg.js";
-import"./cli-am3dgbv8.js";
-import"./cli-jh6h1myg.js";
+import"./cli-tw7mm283.js";
+import"./cli-wgnkk2ae.js";
 import"./cli-gpnb45ck.js";
+import"./cli-vv6j2mec.js";
+import"./cli-wzb6j1d9.js";
+import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 
 // src/core/api/offesecAgent.ts

package/build/{pentest-tv2e2ygn.js → pentest-mczd9b5r.js}

@@ -2,25 +2,25 @@ import {
   DEFAULT_CONCURRENCY,
   runPentestSwarm,
   runPentestWorkflow
-} from "./cli-vwyn3es3.js";
-import"./cli-e1axrn0s.js";
-import"./cli-e9n1z1dp.js";
-import"./cli-jp69ygke.js";
-import"./cli-fw5r7pfj.js";
-import"./cli-a9bs4kq9.js";
+} from "./cli-rke1rjpf.js";
+import"./cli-z5t4337e.js";
+import"./cli-v3f4zxgx.js";
 import"./cli-0fy9j5dw.js";
-import"./cli-rn3mezj8.js";
+import"./cli-60drere9.js";
+import"./cli-fw5r7pfj.js";
+import"./cli-30w3njcs.js";
+import"./cli-9agejx4x.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-evenmfmt.js";
+import"./cli-710a5ab8.js";
 import"./cli-3y0dgy56.js";
-import"./cli-ctb1vg2p.js";
-import"./cli-03z6pswp.js";
+import"./cli-wntm40ab.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-39d581n4.js";
-import"./cli-mxms90xg.js";
-import"./cli-am3dgbv8.js";
-import"./cli-jh6h1myg.js";
+import"./cli-tw7mm283.js";
+import"./cli-wgnkk2ae.js";
 import"./cli-gpnb45ck.js";
+import"./cli-vv6j2mec.js";
+import"./cli-wzb6j1d9.js";
+import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 export {
   runPentestWorkflow,

package/build/{pentests-s9462spt.js → pentests-dgf16fbb.js}

@@ -3,10 +3,10 @@ import {
   dispatchPentest,
   getScan,
   listScans
-} from "./cli-6r72e7et.js";
-import"./cli-mxms90xg.js";
-import"./cli-am3dgbv8.js";
-import"./cli-jh6h1myg.js";
+} from "./cli-4cgqez3x.js";
+import"./cli-wgnkk2ae.js";
+import"./cli-vv6j2mec.js";
+import"./cli-wzb6j1d9.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/pentests.ts

package/build/{projects-wxke4080.js → projects-9nf4z056.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env bun
 import {
   listProjects
-} from "./cli-6r72e7et.js";
-import"./cli-mxms90xg.js";
-import"./cli-am3dgbv8.js";
-import"./cli-jh6h1myg.js";
+} from "./cli-4cgqez3x.js";
+import"./cli-wgnkk2ae.js";
+import"./cli-vv6j2mec.js";
+import"./cli-wzb6j1d9.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/projects.ts

package/build/{targetedPentest-nm0y2fv4.js → targetedPentest-j457sh84.js}

@@ -1,18 +1,18 @@
 import {
   TargetedPentestAgent
-} from "./cli-e9n1z1dp.js";
-import"./cli-rn3mezj8.js";
+} from "./cli-v3f4zxgx.js";
+import"./cli-9agejx4x.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-evenmfmt.js";
+import"./cli-710a5ab8.js";
 import"./cli-3y0dgy56.js";
-import"./cli-ctb1vg2p.js";
-import"./cli-03z6pswp.js";
+import"./cli-wntm40ab.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-39d581n4.js";
-import"./cli-mxms90xg.js";
-import"./cli-am3dgbv8.js";
-import"./cli-jh6h1myg.js";
+import"./cli-tw7mm283.js";
+import"./cli-wgnkk2ae.js";
 import"./cli-gpnb45ck.js";
+import"./cli-vv6j2mec.js";
+import"./cli-wzb6j1d9.js";
+import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 
 // src/core/api/targetedPentest.ts

package/build/{threatModel-qrtk7rj4.js → threatModel-kk3f89wx.js}

@@ -2,27 +2,27 @@ import {
   buildThreatModelPrompt,
   createSkillsRegistry,
   runOffensiveSecurityAgent
-} from "./cli-k0tycc78.js";
+} from "./cli-1c0yqbxc.js";
 import {
   ALL_TOOL_NAMES,
   ASK_USER_QUESTIONS_TOOL_NAME,
   SKILL_TOOL_NAMES,
   buildBaseSystemPrompt,
   sessions
-} from "./cli-rn3mezj8.js";
+} from "./cli-9agejx4x.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-evenmfmt.js";
+import"./cli-710a5ab8.js";
 import"./cli-3y0dgy56.js";
 import {
   stepCountIs
-} from "./cli-ctb1vg2p.js";
-import"./cli-03z6pswp.js";
+} from "./cli-wntm40ab.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-39d581n4.js";
-import"./cli-mxms90xg.js";
-import"./cli-am3dgbv8.js";
-import"./cli-jh6h1myg.js";
+import"./cli-tw7mm283.js";
+import"./cli-wgnkk2ae.js";
 import"./cli-gpnb45ck.js";
+import"./cli-vv6j2mec.js";
+import"./cli-wzb6j1d9.js";
+import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 
 // src/core/workflows/threatModel.ts

package/build/{uninstall-cy8m1788.js → uninstall-8cqb79tf.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env bun
 import {
   detectInstallMethod
-} from "./cli-jh6h1myg.js";
+} from "./cli-wzb6j1d9.js";
 import {
   __require
 } from "./cli-8rxa073f.js";

package/build/{utils-8yqe12jr.js → utils-jf52rmrb.js}

@@ -24,7 +24,8 @@ var PREFERRED_MODEL_BY_PROVIDER = {
   anthropic: "claude-opus-4-6",
   openai: "gpt-5.2-pro",
   google: "gemini-3.1-pro-preview",
-  openrouter: "anthropic/claude-opus-4.6"
+  openrouter: "anthropic/claude-opus-4.6",
+  bedrock: "anthropic.claude-opus-4-6-v1"
 };
 function getConfiguredProviders(config) {
   return AVAILABLE_PROVIDERS.map((provider) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pensar/apex",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "description": "AI-powered penetration testing CLI tool with terminal UI",
   "module": "src/tui/index.tsx",
   "main": "build/cli.js",

package/build/agent-xg2xarp3.js

@@ -1,19 +0,0 @@
-import {
-  CodeAgent
-} from "./cli-a9bs4kq9.js";
-import"./cli-rn3mezj8.js";
-import"./cli-tp1tqn3k.js";
-import"./cli-evenmfmt.js";
-import"./cli-3y0dgy56.js";
-import"./cli-ctb1vg2p.js";
-import"./cli-03z6pswp.js";
-import"./cli-0ghkg3w6.js";
-import"./cli-39d581n4.js";
-import"./cli-mxms90xg.js";
-import"./cli-am3dgbv8.js";
-import"./cli-jh6h1myg.js";
-import"./cli-gpnb45ck.js";
-import"./cli-8rxa073f.js";
-export {
-  CodeAgent
-};