@pensar/apex 1.6.0-canary.75793e2c → 1.6.0

package/build/{agent-6xwvnvbd.js → agent-nnj9t74r.js}

@@ -3,21 +3,21 @@ import {
 } from "./cli-0fy9j5dw.js";
 import {
   OffensiveSecurityAgent
-} from "./cli-ac60eqhd.js";
+} from "./cli-e06s4dbt.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-z5a6069g.js";
+import"./cli-fhm4gfky.js";
 import"./cli-3y0dgy56.js";
 import {
   hasToolCall
-} from "./cli-8r61bnf2.js";
+} from "./cli-2gz62eh7.js";
 import {
   tool
 } from "./cli-0ghkg3w6.js";
-import"./cli-953xbxsg.js";
-import"./cli-vy2nfvj1.js";
+import"./cli-3462esbc.js";
+import"./cli-m45bmsc5.js";
 import"./cli-gpnb45ck.js";
-import"./cli-r1etggh4.js";
-import"./cli-pr5cfct7.js";
+import"./cli-j54wb0q5.js";
+import"./cli-4bvafx3k.js";
 import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 

package/build/agent-xyps79pq.js

@@ -0,0 +1,19 @@
+import {
+  CodeAgent
+} from "./cli-6w784800.js";
+import"./cli-e06s4dbt.js";
+import"./cli-tp1tqn3k.js";
+import"./cli-fhm4gfky.js";
+import"./cli-3y0dgy56.js";
+import"./cli-2gz62eh7.js";
+import"./cli-0ghkg3w6.js";
+import"./cli-3462esbc.js";
+import"./cli-m45bmsc5.js";
+import"./cli-gpnb45ck.js";
+import"./cli-j54wb0q5.js";
+import"./cli-4bvafx3k.js";
+import"./cli-03z6pswp.js";
+import"./cli-8rxa073f.js";
+export {
+  CodeAgent
+};

package/build/{auth-djs3h4zh.js → auth-hhzeb7wq.js}

@@ -8,14 +8,14 @@ import {
   pollWorkOSToken,
   selectWorkspace,
   startDeviceFlow
-} from "./cli-953xbxsg.js";
+} from "./cli-3462esbc.js";
 import {
   config,
   getPensarApiUrl,
   getPensarConsoleUrl
-} from "./cli-vy2nfvj1.js";
-import"./cli-r1etggh4.js";
-import"./cli-pr5cfct7.js";
+} from "./cli-m45bmsc5.js";
+import"./cli-j54wb0q5.js";
+import"./cli-4bvafx3k.js";
 import {
   __require
 } from "./cli-8rxa073f.js";

package/build/{authentication-bj89fgf2.js → authentication-696jn3en.js}

@@ -1,20 +1,20 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-ac60eqhd.js";
+} from "./cli-e06s4dbt.js";
 import {
   detectOSAndEnhancePrompt
 } from "./cli-tp1tqn3k.js";
-import"./cli-z5a6069g.js";
+import"./cli-fhm4gfky.js";
 import"./cli-3y0dgy56.js";
 import {
   hasToolCall
-} from "./cli-8r61bnf2.js";
+} from "./cli-2gz62eh7.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-953xbxsg.js";
-import"./cli-vy2nfvj1.js";
+import"./cli-3462esbc.js";
+import"./cli-m45bmsc5.js";
 import"./cli-gpnb45ck.js";
-import"./cli-r1etggh4.js";
-import"./cli-pr5cfct7.js";
+import"./cli-j54wb0q5.js";
+import"./cli-4bvafx3k.js";
 import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 

package/build/{blackboxAgent-2z5mby4y.js → blackboxAgent-nxvgqsw3.js}

@@ -1,17 +1,17 @@
 import {
   BlackboxAttackSurfaceAgent
-} from "./cli-te5p85w7.js";
-import"./cli-ac60eqhd.js";
+} from "./cli-x1g2s9n9.js";
+import"./cli-e06s4dbt.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-z5a6069g.js";
+import"./cli-fhm4gfky.js";
 import"./cli-3y0dgy56.js";
-import"./cli-8r61bnf2.js";
+import"./cli-2gz62eh7.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-953xbxsg.js";
-import"./cli-vy2nfvj1.js";
+import"./cli-3462esbc.js";
+import"./cli-m45bmsc5.js";
 import"./cli-gpnb45ck.js";
-import"./cli-r1etggh4.js";
-import"./cli-pr5cfct7.js";
+import"./cli-j54wb0q5.js";
+import"./cli-4bvafx3k.js";
 import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 export {

package/build/{blackboxPentest-7qef7tpb.js → blackboxPentest-x1eynyy6.js}

@@ -1,23 +1,23 @@
 import {
   runPentestWorkflow
-} from "./cli-28azhrka.js";
-import"./cli-zzaah44r.js";
-import"./cli-zgggnwry.js";
+} from "./cli-nhqvhgdk.js";
+import"./cli-ww2x78tc.js";
+import"./cli-m69x66eh.js";
 import"./cli-0fy9j5dw.js";
-import"./cli-te5p85w7.js";
+import"./cli-x1g2s9n9.js";
 import"./cli-fw5r7pfj.js";
-import"./cli-3kx02vjp.js";
-import"./cli-ac60eqhd.js";
+import"./cli-6w784800.js";
+import"./cli-e06s4dbt.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-z5a6069g.js";
+import"./cli-fhm4gfky.js";
 import"./cli-3y0dgy56.js";
-import"./cli-8r61bnf2.js";
+import"./cli-2gz62eh7.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-953xbxsg.js";
-import"./cli-vy2nfvj1.js";
+import"./cli-3462esbc.js";
+import"./cli-m45bmsc5.js";
 import"./cli-gpnb45ck.js";
-import"./cli-r1etggh4.js";
-import"./cli-pr5cfct7.js";
+import"./cli-j54wb0q5.js";
+import"./cli-4bvafx3k.js";
 import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 

package/build/{cli-vjzgzbgb.js → cli-2aj6efy7.js}

@@ -1,6 +1,6 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-ac60eqhd.js";
+} from "./cli-e06s4dbt.js";
 import {
   __commonJS,
   __require

package/build/{cli-8r61bnf2.js → cli-2gz62eh7.js}

@@ -71,12 +71,12 @@ import {
 } from "./cli-0ghkg3w6.js";
 import {
   signGatewayRequest
-} from "./cli-953xbxsg.js";
+} from "./cli-3462esbc.js";
 import {
   config,
   ensureValidToken,
   getPensarGatewayUrl
-} from "./cli-vy2nfvj1.js";
+} from "./cli-m45bmsc5.js";
 import {
   getModelInfo,
   init_models

package/build/{cli-953xbxsg.js → cli-3462esbc.js}

@@ -3,7 +3,7 @@ import {
   ensureValidToken,
   getPensarApiUrl,
   getPensarGatewayUrl
-} from "./cli-vy2nfvj1.js";
+} from "./cli-m45bmsc5.js";
 
 // src/core/auth/signing.ts
 import { createHmac, createHash, randomUUID } from "crypto";

package/build/{cli-pr5cfct7.js → cli-4bvafx3k.js}

@@ -3,7 +3,7 @@ import { spawnSync } from "child_process";
 // package.json
 var package_default = {
   name: "@pensar/apex",
-  version: "1.6.0-canary.75793e2c",
+  version: "1.6.0",
   description: "AI-powered penetration testing CLI tool with terminal UI",
   module: "src/tui/index.tsx",
   main: "build/cli.js",

package/build/{cli-3kx02vjp.js → cli-6w784800.js}

@@ -1,9 +1,9 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-ac60eqhd.js";
+} from "./cli-e06s4dbt.js";
 import {
   stepCountIs
-} from "./cli-8r61bnf2.js";
+} from "./cli-2gz62eh7.js";
 
 // src/core/agents/specialized/codeAgent/prompts.ts
 var CODE_AGENT_SYSTEM_PROMPT = `You are an expert coding agent with direct filesystem access. You will be given a specific objective — focus exclusively on completing it.

package/build/{cli-ac60eqhd.js → cli-e06s4dbt.js}

@@ -16,7 +16,7 @@ import {
   update,
   write,
   writeRaw
-} from "./cli-z5a6069g.js";
+} from "./cli-fhm4gfky.js";
 import {
   parseTargetUrl
 } from "./cli-3y0dgy56.js";
@@ -29,7 +29,7 @@ import {
   require_tslib,
   streamResponse,
   toggleTool
-} from "./cli-8r61bnf2.js";
+} from "./cli-2gz62eh7.js";
 import {
   _enum,
   _null,
@@ -57,15 +57,15 @@ import {
 } from "./cli-0ghkg3w6.js";
 import {
   signGatewayRequest
-} from "./cli-953xbxsg.js";
+} from "./cli-3462esbc.js";
 import {
   config,
   ensureValidToken,
   getPensarApiUrl
-} from "./cli-vy2nfvj1.js";
+} from "./cli-m45bmsc5.js";
 import {
   getCurrentVersion
-} from "./cli-pr5cfct7.js";
+} from "./cli-4bvafx3k.js";
 import {
   __commonJS,
   __require,
@@ -119360,7 +119360,7 @@ async function generateThreatModelForEndpoint(ctx, input) {
   return threatModelLimiter(async () => {
     if (ctx.abortSignal?.aborted)
       return null;
-    const { CodeAgent } = await import("./agent-78akh567.js");
+    const { CodeAgent } = await import("./agent-xyps79pq.js");
     const subagentId = `threat-model-${sanitize(input.appName)}-${sanitize(input.routePath)}`;
     ctx.eventBus?.emit("subagent-spawn", {
       subagentId,
@@ -120049,7 +120049,7 @@ When to use delegate_to_auth_subagent vs authenticate_session:
         if (credentials) {
           ctx.session.credentialManager.addFromAuthCredentials(credentials);
         }
-        const { runAuthenticationAgent } = await import("./authentication-bj89fgf2.js");
+        const { runAuthenticationAgent } = await import("./authentication-696jn3en.js");
         const localBus = new AgentEventBus;
         AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
         const result = await runAuthenticationAgent({
@@ -120962,7 +120962,7 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
       });
       if (cwd) {
         try {
-          const { WhiteboxAttackSurfaceAgent } = await import("./agent-6xwvnvbd.js");
+          const { WhiteboxAttackSurfaceAgent } = await import("./agent-nnj9t74r.js");
           const localBus = new AgentEventBus;
           AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
           const agent = new WhiteboxAttackSurfaceAgent({
@@ -121011,7 +121011,7 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
         }
       }
       try {
-        const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-2z5mby4y.js");
+        const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-nxvgqsw3.js");
         const localBus = new AgentEventBus;
         AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
         const agent = new BlackboxAttackSurfaceAgent({
@@ -121087,7 +121087,7 @@ Pass every target you want tested — the swarm handles concurrency automaticall
       toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async ({ targets }) => {
-      const { runPentestSwarm, DEFAULT_CONCURRENCY } = await import("./pentest-e8a7tczb.js");
+      const { runPentestSwarm, DEFAULT_CONCURRENCY } = await import("./pentest-gtn28jcf.js");
       if (!ctx.model) {
         return {
           success: false,
@@ -121215,7 +121215,7 @@ Returns an array of results with the text output from each agent.`,
   });
 }
 async function runSingleCodingAgent(ctx, codebasePath, objective, agentIndex, name) {
-  const { CodeAgent } = await import("./agent-78akh567.js");
+  const { CodeAgent } = await import("./agent-xyps79pq.js");
   const subagentId = `coding-agent-${agentIndex}`;
   ctx.eventBus?.emit("subagent-spawn", {
     subagentId,
@@ -121276,7 +121276,7 @@ Omit \`cwd\` for blackbox mode (live target probing only).`,
       toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async ({ target, cwd }) => {
-      const { runPentestWorkflow: workflow } = await import("./pentest-e8a7tczb.js");
+      const { runPentestWorkflow: workflow } = await import("./pentest-gtn28jcf.js");
       if (!ctx.model) {
         return {
           success: false,
@@ -124811,49 +124811,6 @@ var webSearchInputSchema = exports_external.object({
   query: exports_external.string().describe("The search query to look up. Be specific and include relevant keywords for better results."),
   toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing (e.g., 'Searching for CVE-2024-1234 details')")
 });
-var BRAVE_SEARCH_URL = "https://api.search.brave.com/res/v1/web/search";
-async function braveSearch(query, apiKey) {
-  const url = new URL(BRAVE_SEARCH_URL);
-  url.searchParams.set("q", query);
-  url.searchParams.set("count", "10");
-  const response = await fetch(url.toString(), {
-    method: "GET",
-    headers: {
-      Accept: "application/json",
-      "Accept-Encoding": "gzip",
-      "X-Subscription-Token": apiKey
-    }
-  });
-  if (!response.ok) {
-    if (response.status === 401 || response.status === 403) {
-      return {
-        success: false,
-        results: [],
-        error: "Brave API authentication failed. Check that your brave_api_key is valid."
-      };
-    }
-    if (response.status === 429) {
-      return {
-        success: false,
-        results: [],
-        error: "Brave API rate limit exceeded. Please wait a moment before searching again."
-      };
-    }
-    const errorText = await response.text().catch(() => "Unknown error");
-    return {
-      success: false,
-      results: [],
-      error: `Brave search failed: ${response.status} ${response.statusText}. ${errorText}`
-    };
-  }
-  const data = await response.json();
-  const results = data.web?.results?.map((r) => ({
-    title: r.title ?? "",
-    url: r.url ?? "",
-    snippet: r.description ?? ""
-  })) ?? [];
-  return { success: true, results };
-}
 function webSearch(_ctx) {
   return tool({
     description: `Search the web for real-time information about any topic. Returns summarized information from search results.
@@ -124865,7 +124822,7 @@ USAGE GUIDANCE:
 - Find documentation for tools, APIs, and security testing techniques
 - Look up default credentials, common misconfigurations, and hardening guides
 
-IMPORTANT: This tool requires either a Pensar account or a Brave API key. If neither is configured, you'll receive an error message with instructions.
+IMPORTANT: This tool requires a Pensar account. If you're not signed in, you'll receive an error message with instructions to sign in.
 
 COMMON SEARCH PATTERNS:
 - "CVE-2024-XXXX exploit" — Find details about specific CVEs
@@ -124877,9 +124834,6 @@ COMMON SEARCH PATTERNS:
     execute: async ({ query }) => {
       try {
         const cfg = await config.get();
-        if (cfg.braveAPIKey) {
-          return braveSearch(query, cfg.braveAPIKey);
-        }
         const apiUrl = getPensarApiUrl();
         const body = JSON.stringify({ query });
         if (cfg.pensarAPIKey && !cfg.accessToken) {
@@ -124902,7 +124856,7 @@ COMMON SEARCH PATTERNS:
           return {
             success: false,
             results: [],
-            error: "Web search requires a Pensar account or a Brave API key. Please sign in to your Pensar account or configure a Brave API key (set BRAVE_API_KEY or brave_api_key in config)."
+            error: "Web search requires a Pensar account. Please sign in to your Pensar account to use this feature. You can sign in via the TUI settings or by running 'pensar login'."
           };
         }
         if (!cfg.workspaceId) {

package/build/{cli-z5a6069g.js → cli-fhm4gfky.js}

@@ -1,6 +1,6 @@
 import {
   generateObjectResponse
-} from "./cli-8r61bnf2.js";
+} from "./cli-2gz62eh7.js";
 import {
   exports_external1 as exports_external,
   init_zod,

package/build/{cli-r1etggh4.js → cli-j54wb0q5.js}

@@ -1,6 +1,6 @@
 import {
   getCurrentVersion
-} from "./cli-pr5cfct7.js";
+} from "./cli-4bvafx3k.js";
 
 // src/core/config/config.ts
 import os from "os";
@@ -38,8 +38,7 @@ function applyEnvFallbacks(parsedConfig) {
     pensarAPIKey: parsedConfig.pensarAPIKey ?? process.env.PENSAR_API_KEY,
     daytonaAPIKey: parsedConfig.daytonaAPIKey ?? process.env.DAYTONA_API_KEY,
     daytonaOrgId: parsedConfig.daytonaOrgId ?? process.env.DAYTONA_ORG_ID,
-    runloopAPIKey: parsedConfig.runloopAPIKey ?? process.env.RUNLOOP_API_KEY,
-    braveAPIKey: parsedConfig.braveAPIKey ?? process.env.BRAVE_API_KEY
+    runloopAPIKey: parsedConfig.runloopAPIKey ?? process.env.RUNLOOP_API_KEY
   };
 }
 async function get() {

package/build/{cli-vy2nfvj1.js → cli-m45bmsc5.js}

@@ -2,7 +2,7 @@ import {
   get,
   init,
   update
-} from "./cli-r1etggh4.js";
+} from "./cli-j54wb0q5.js";
 
 // src/core/api/constants.ts
 var PENSAR_API_BASE_URL = "https://api.pensar.dev";

package/build/{cli-zgggnwry.js → cli-m69x66eh.js}

@@ -1,7 +1,7 @@
 import {
   OffensiveSecurityAgent,
   readPlan
-} from "./cli-ac60eqhd.js";
+} from "./cli-e06s4dbt.js";
 import {
   exports_external1 as exports_external,
   init_zod

package/build/{cli-28azhrka.js → cli-nhqvhgdk.js}

@@ -14,31 +14,31 @@ import {
   updateManifestEntryStatus,
   writeAgentManifest,
   writeExecutionMetrics
-} from "./cli-zzaah44r.js";
+} from "./cli-ww2x78tc.js";
 import {
   TargetedPentestAgent,
   buildPentestSystemPrompt
-} from "./cli-zgggnwry.js";
+} from "./cli-m69x66eh.js";
 import {
   EndpointSchema
 } from "./cli-0fy9j5dw.js";
 import {
   BlackboxAttackSurfaceAgent
-} from "./cli-te5p85w7.js";
+} from "./cli-x1g2s9n9.js";
 import {
   createThreatModelPrompt
 } from "./cli-fw5r7pfj.js";
 import {
   CodeAgent
-} from "./cli-3kx02vjp.js";
+} from "./cli-6w784800.js";
 import {
   FindingsRegistry,
   OffensiveSecurityAgent,
   PLAN_MODE_TOOL_NAMES
-} from "./cli-ac60eqhd.js";
+} from "./cli-e06s4dbt.js";
 import {
   hasToolCall
-} from "./cli-8r61bnf2.js";
+} from "./cli-2gz62eh7.js";
 import {
   exports_external1 as exports_external,
   init_zod

package/build/{cli-zzaah44r.js → cli-ww2x78tc.js}

@@ -2,7 +2,7 @@ import {
   CweEntrySchema,
   ValidatedCweEntrySchema,
   hasCanonicalName
-} from "./cli-ac60eqhd.js";
+} from "./cli-e06s4dbt.js";
 import {
   exports_external1 as exports_external,
   init_zod

package/build/{cli-te5p85w7.js → cli-x1g2s9n9.js}

@@ -1,13 +1,13 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-ac60eqhd.js";
+} from "./cli-e06s4dbt.js";
 import {
   detectOSAndEnhancePrompt
 } from "./cli-tp1tqn3k.js";
 import {
   hasToolCall,
   stepCountIs
-} from "./cli-8r61bnf2.js";
+} from "./cli-2gz62eh7.js";
 
 // src/core/agents/specialized/attackSurface/blackboxAgent.ts
 import { join } from "path";

package/build/{cli-femvjhv5.js → cli-ys0ahwpb.js}

@@ -2,7 +2,7 @@ import {
   config,
   ensureValidToken,
   getPensarApiUrl
-} from "./cli-vy2nfvj1.js";
+} from "./cli-m45bmsc5.js";
 
 // src/core/api/issues.ts
 async function getAuthHeaders() {

package/build/cli.js

@@ -6,15 +6,15 @@ import {
 import"./cli-3y0dgy56.js";
 import {
   init_toolset
-} from "./cli-8r61bnf2.js";
+} from "./cli-2gz62eh7.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-953xbxsg.js";
-import"./cli-vy2nfvj1.js";
+import"./cli-3462esbc.js";
+import"./cli-m45bmsc5.js";
 import"./cli-gpnb45ck.js";
-import"./cli-r1etggh4.js";
+import"./cli-j54wb0q5.js";
 import {
   package_default
-} from "./cli-pr5cfct7.js";
+} from "./cli-4bvafx3k.js";
 import {
   init_models
 } from "./cli-03z6pswp.js";
@@ -25,7 +25,7 @@ import {
 // package.json
 var package_default2 = {
   name: "@pensar/apex",
-  version: "1.6.0-canary.75793e2c",
+  version: "1.6.0",
   description: "AI-powered penetration testing CLI tool with terminal UI",
   module: "src/tui/index.tsx",
   main: "build/cli.js",
@@ -500,7 +500,7 @@ async function resolveCliModel() {
   const explicit = getArg("--model");
   if (explicit)
     return explicit;
-  const { config: appConfig } = await import("./index-dgg4m84h.js");
+  const { config: appConfig } = await import("./index-rm3jf64j.js");
   const { getDefaultModelForConfig } = await import("./utils-jf52rmrb.js");
   const pensarConfig = await appConfig.get();
   const defaultModel = getDefaultModelForConfig(pensarConfig);
@@ -572,9 +572,9 @@ Global options:
 async function runPentest() {
   const { config: config2 } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config2();
-  const { runPentestAgent } = await import("./blackboxPentest-7qef7tpb.js");
-  const { sessions } = await import("./index-1rta5jw0.js");
-  const { config: appConfig } = await import("./index-dgg4m84h.js");
+  const { runPentestAgent } = await import("./blackboxPentest-x1eynyy6.js");
+  const { sessions } = await import("./index-g60tmaw4.js");
+  const { config: appConfig } = await import("./index-rm3jf64j.js");
   const target = getArgRequired("--target");
   const cwd = getArg("--cwd");
   const mode = getArg("--mode");
@@ -638,9 +638,9 @@ Report:    ${reportPath}` : ""}`);
 async function runTargetedPentest() {
   const { config: config2 } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config2();
-  const { runTargetedPentestAgent } = await import("./targetedPentest-vawsfkmb.js");
-  const { sessions } = await import("./index-1rta5jw0.js");
-  const { config: appConfig } = await import("./index-dgg4m84h.js");
+  const { runTargetedPentestAgent } = await import("./targetedPentest-ydr77zs4.js");
+  const { sessions } = await import("./index-g60tmaw4.js");
+  const { config: appConfig } = await import("./index-rm3jf64j.js");
   const target = getArgRequired("--target");
   const objectives = getAllArgs("--objective");
   const pensarConfig = await appConfig.get();
@@ -688,8 +688,8 @@ POCs:      ${pocsPath}`);
 async function runThreatModel() {
   const { config: config2 } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config2();
-  const { runThreatModelWorkflow } = await import("./threatModel-ax1h25bk.js");
-  const { config: appConfig } = await import("./index-dgg4m84h.js");
+  const { runThreatModelWorkflow } = await import("./threatModel-vkn59yef.js");
+  const { config: appConfig } = await import("./index-rm3jf64j.js");
   const path = await import("path");
   const pensarConfig = await appConfig.get();
   const model = await resolveCliModel();
@@ -725,10 +725,10 @@ Threat model written to: ${resolvedPath}`);
 async function runOperator() {
   const { config: config2 } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config2();
-  const { runOffensiveSecurityAgent } = await import("./offesecAgent-d5kx4hma.js");
-  const { sessions, normalizeMessages, getResumeMessages } = await import("./index-1rta5jw0.js");
-  const { ALL_TOOL_NAMES, SKILL_TOOL_NAMES } = await import("./index-9cac8cja.js");
-  const { config: appConfig } = await import("./index-dgg4m84h.js");
+  const { runOffensiveSecurityAgent } = await import("./offesecAgent-e8t65rte.js");
+  const { sessions, normalizeMessages, getResumeMessages } = await import("./index-g60tmaw4.js");
+  const { ALL_TOOL_NAMES, SKILL_TOOL_NAMES } = await import("./index-wr87h0sz.js");
+  const { config: appConfig } = await import("./index-rm3jf64j.js");
   const { createInterface } = await import("readline");
   const { readFileSync: readFileSync2, existsSync } = await import("fs");
   const path = await import("path");
@@ -837,25 +837,25 @@ if (hasFlag("-p") || command === "--prompt") {
   await runTargetedPentest();
 } else if (command === "login" || command === "auth") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./auth-djs3h4zh.js");
+  await import("./auth-hhzeb7wq.js");
 } else if (command === "uninstall") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./uninstall-x9490712.js");
+  await import("./uninstall-b3kzz704.js");
 } else if (command === "projects") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./projects-jhcqdwpt.js");
+  await import("./projects-w5yxp27m.js");
 } else if (command === "pentests") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./pentests-jyyy32rc.js");
+  await import("./pentests-3zp7z952.js");
 } else if (command === "issues") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./issues-yqt8m9s1.js");
+  await import("./issues-mrcf758f.js");
 } else if (command === "fixes") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./fixes-s5dzvhzg.js");
+  await import("./fixes-d38fdj5s.js");
 } else if (command === "logs") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./logs-j12ccp2q.js");
+  await import("./logs-pece65p3.js");
 } else if (command === "threat-model") {
   await runThreatModel();
 } else if (command === "doctor") {
@@ -867,7 +867,7 @@ if (hasFlag("-p") || command === "--prompt") {
     console.error("All other commands work with Node \u2014 run 'pensar --help'.");
     process.exit(1);
   }
-  await import("./index-9s8ke47b.js");
+  await import("./index-hcxak3dc.js");
 } else {
   console.error(`Error: Unknown command '${command}'`);
   console.error();

package/build/{fixes-s5dzvhzg.js → fixes-d38fdj5s.js}

@@ -2,10 +2,10 @@
 import {
   getFix,
   listFixes
-} from "./cli-femvjhv5.js";
-import"./cli-vy2nfvj1.js";
-import"./cli-r1etggh4.js";
-import"./cli-pr5cfct7.js";
+} from "./cli-ys0ahwpb.js";
+import"./cli-m45bmsc5.js";
+import"./cli-j54wb0q5.js";
+import"./cli-4bvafx3k.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/fixes.ts

package/build/{index-y0y1p784.js → index-0je5jws9.js}

@@ -9,15 +9,15 @@ import {
   signGatewayRequest,
   startDeviceFlow,
   validateGateway
-} from "./cli-953xbxsg.js";
+} from "./cli-3462esbc.js";
 import {
   ensureValidToken,
   fetchWorkOSClientId,
   isTokenExpired,
   refreshAccessToken
-} from "./cli-vy2nfvj1.js";
-import"./cli-r1etggh4.js";
-import"./cli-pr5cfct7.js";
+} from "./cli-m45bmsc5.js";
+import"./cli-j54wb0q5.js";
+import"./cli-4bvafx3k.js";
 import"./cli-8rxa073f.js";
 export {
   validateGateway,

package/build/{index-1rta5jw0.js → index-g60tmaw4.js}

@@ -13,24 +13,24 @@ import {
   update,
   write,
   writeRaw
-} from "./cli-z5a6069g.js";
+} from "./cli-fhm4gfky.js";
 import {
   ToolsetStateSchema,
   exports_toolset,
   init_toolset,
   toggleTool
-} from "./cli-8r61bnf2.js";
+} from "./cli-2gz62eh7.js";
 import {
   init_zod,
   zod_default
 } from "./cli-0ghkg3w6.js";
-import"./cli-953xbxsg.js";
-import"./cli-vy2nfvj1.js";
+import"./cli-3462esbc.js";
+import"./cli-m45bmsc5.js";
 import"./cli-gpnb45ck.js";
-import"./cli-r1etggh4.js";
+import"./cli-j54wb0q5.js";
 import {
   getCurrentVersion
-} from "./cli-pr5cfct7.js";
+} from "./cli-4bvafx3k.js";
 import"./cli-03z6pswp.js";
 import {
   __require,

package/build/{index-9s8ke47b.js → index-hcxak3dc.js}

@@ -3,14 +3,14 @@ import {
   buildThreatModelPrompt,
   createSkillsRegistry,
   runOffensiveSecurityAgent
-} from "./cli-vjzgzbgb.js";
+} from "./cli-2aj6efy7.js";
 import {
   REPORT_FILENAME_MD,
   convertModelMessagesToUI,
   loadSubagents,
   readExecutionMetrics,
   writeExecutionMetrics
-} from "./cli-zzaah44r.js";
+} from "./cli-ww2x78tc.js";
 import {
   createThreatModelPrompt
 } from "./cli-fw5r7pfj.js";
@@ -38,14 +38,14 @@ import {
   planFilePath,
   readPlan,
   sessions
-} from "./cli-ac60eqhd.js";
+} from "./cli-e06s4dbt.js";
 import {
   detectOSAndEnhancePrompt
 } from "./cli-tp1tqn3k.js";
 import {
   read,
   write
-} from "./cli-z5a6069g.js";
+} from "./cli-fhm4gfky.js";
 import {
   getAutoPopulatedHosts,
   getAutoPopulatedPorts,
@@ -57,7 +57,7 @@ import {
   init_toolset,
   modelSupportsThinking,
   stepCountIs
-} from "./cli-8r61bnf2.js";
+} from "./cli-2gz62eh7.js";
 import"./cli-0ghkg3w6.js";
 import {
   disconnect,
@@ -69,19 +69,19 @@ import {
   selectWorkspace,
   startDeviceFlow,
   validateGateway
-} from "./cli-953xbxsg.js";
+} from "./cli-3462esbc.js";
 import {
   config,
   getPensarApiUrl,
   getPensarConsoleUrl
-} from "./cli-vy2nfvj1.js";
+} from "./cli-m45bmsc5.js";
 import"./cli-gpnb45ck.js";
 import {
   update
-} from "./cli-r1etggh4.js";
+} from "./cli-j54wb0q5.js";
 import {
   checkForUpdate
-} from "./cli-pr5cfct7.js";
+} from "./cli-4bvafx3k.js";
 import {
   AVAILABLE_MODELS,
   init_models
@@ -69360,7 +69360,7 @@ function AppContent({
       toast(`Update available: v${currentVersion} → v${latestVersion}. Run: pensar upgrade`, "warn", 8000);
     });
     const checkAuthToken = async () => {
-      const { isTokenExpired, isConnected: isConnected2 } = await import("./index-y0y1p784.js");
+      const { isTokenExpired, isConnected: isConnected2 } = await import("./index-0je5jws9.js");
       if (isConnected2(config2.data) && config2.data.accessToken && isTokenExpired(config2.data.accessToken, 60) && !config2.data.refreshToken && !config2.data.pensarAPIKey) {
         toast("Your Pensar Console session has expired. Run /login to refresh.", "warn", 8000);
       }

package/build/{index-dgg4m84h.js → index-rm3jf64j.js}

@@ -2,8 +2,8 @@ import {
   get,
   init,
   update
-} from "./cli-r1etggh4.js";
-import"./cli-pr5cfct7.js";
+} from "./cli-j54wb0q5.js";
+import"./cli-4bvafx3k.js";
 import"./cli-8rxa073f.js";
 
 // src/core/config/index.ts

package/build/{index-9cac8cja.js → index-wr87h0sz.js}

@@ -7,17 +7,17 @@ import {
   SKILL_TOOL_NAMES,
   StepTraceWriter,
   createAllTools
-} from "./cli-ac60eqhd.js";
+} from "./cli-e06s4dbt.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-z5a6069g.js";
+import"./cli-fhm4gfky.js";
 import"./cli-3y0dgy56.js";
-import"./cli-8r61bnf2.js";
+import"./cli-2gz62eh7.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-953xbxsg.js";
-import"./cli-vy2nfvj1.js";
+import"./cli-3462esbc.js";
+import"./cli-m45bmsc5.js";
 import"./cli-gpnb45ck.js";
-import"./cli-r1etggh4.js";
-import"./cli-pr5cfct7.js";
+import"./cli-j54wb0q5.js";
+import"./cli-4bvafx3k.js";
 import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 export {

package/build/{issues-yqt8m9s1.js → issues-mrcf758f.js}

@@ -3,10 +3,10 @@ import {
   getIssue,
   listIssues,
   updateIssue
-} from "./cli-femvjhv5.js";
-import"./cli-vy2nfvj1.js";
-import"./cli-r1etggh4.js";
-import"./cli-pr5cfct7.js";
+} from "./cli-ys0ahwpb.js";
+import"./cli-m45bmsc5.js";
+import"./cli-j54wb0q5.js";
+import"./cli-4bvafx3k.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/issues.ts

package/build/{logs-j12ccp2q.js → logs-pece65p3.js}

@@ -2,10 +2,10 @@
 import {
   listAgentLogs,
   searchAgentLogs
-} from "./cli-femvjhv5.js";
-import"./cli-vy2nfvj1.js";
-import"./cli-r1etggh4.js";
-import"./cli-pr5cfct7.js";
+} from "./cli-ys0ahwpb.js";
+import"./cli-m45bmsc5.js";
+import"./cli-j54wb0q5.js";
+import"./cli-4bvafx3k.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/logs.ts

package/build/{offesecAgent-d5kx4hma.js → offesecAgent-e8t65rte.js}

@@ -1,16 +1,16 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-ac60eqhd.js";
+} from "./cli-e06s4dbt.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-z5a6069g.js";
+import"./cli-fhm4gfky.js";
 import"./cli-3y0dgy56.js";
-import"./cli-8r61bnf2.js";
+import"./cli-2gz62eh7.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-953xbxsg.js";
-import"./cli-vy2nfvj1.js";
+import"./cli-3462esbc.js";
+import"./cli-m45bmsc5.js";
 import"./cli-gpnb45ck.js";
-import"./cli-r1etggh4.js";
-import"./cli-pr5cfct7.js";
+import"./cli-j54wb0q5.js";
+import"./cli-4bvafx3k.js";
 import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 

package/build/{pentest-e8a7tczb.js → pentest-gtn28jcf.js}

@@ -2,24 +2,24 @@ import {
   DEFAULT_CONCURRENCY,
   runPentestSwarm,
   runPentestWorkflow
-} from "./cli-28azhrka.js";
-import"./cli-zzaah44r.js";
-import"./cli-zgggnwry.js";
+} from "./cli-nhqvhgdk.js";
+import"./cli-ww2x78tc.js";
+import"./cli-m69x66eh.js";
 import"./cli-0fy9j5dw.js";
-import"./cli-te5p85w7.js";
+import"./cli-x1g2s9n9.js";
 import"./cli-fw5r7pfj.js";
-import"./cli-3kx02vjp.js";
-import"./cli-ac60eqhd.js";
+import"./cli-6w784800.js";
+import"./cli-e06s4dbt.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-z5a6069g.js";
+import"./cli-fhm4gfky.js";
 import"./cli-3y0dgy56.js";
-import"./cli-8r61bnf2.js";
+import"./cli-2gz62eh7.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-953xbxsg.js";
-import"./cli-vy2nfvj1.js";
+import"./cli-3462esbc.js";
+import"./cli-m45bmsc5.js";
 import"./cli-gpnb45ck.js";
-import"./cli-r1etggh4.js";
-import"./cli-pr5cfct7.js";
+import"./cli-j54wb0q5.js";
+import"./cli-4bvafx3k.js";
 import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 export {

package/build/{pentests-jyyy32rc.js → pentests-3zp7z952.js}

@@ -3,10 +3,10 @@ import {
   dispatchPentest,
   getScan,
   listScans
-} from "./cli-femvjhv5.js";
-import"./cli-vy2nfvj1.js";
-import"./cli-r1etggh4.js";
-import"./cli-pr5cfct7.js";
+} from "./cli-ys0ahwpb.js";
+import"./cli-m45bmsc5.js";
+import"./cli-j54wb0q5.js";
+import"./cli-4bvafx3k.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/pentests.ts

package/build/{projects-jhcqdwpt.js → projects-w5yxp27m.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env bun
 import {
   listProjects
-} from "./cli-femvjhv5.js";
-import"./cli-vy2nfvj1.js";
-import"./cli-r1etggh4.js";
-import"./cli-pr5cfct7.js";
+} from "./cli-ys0ahwpb.js";
+import"./cli-m45bmsc5.js";
+import"./cli-j54wb0q5.js";
+import"./cli-4bvafx3k.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/projects.ts

package/build/{targetedPentest-vawsfkmb.js → targetedPentest-ydr77zs4.js}

@@ -1,17 +1,17 @@
 import {
   TargetedPentestAgent
-} from "./cli-zgggnwry.js";
-import"./cli-ac60eqhd.js";
+} from "./cli-m69x66eh.js";
+import"./cli-e06s4dbt.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-z5a6069g.js";
+import"./cli-fhm4gfky.js";
 import"./cli-3y0dgy56.js";
-import"./cli-8r61bnf2.js";
+import"./cli-2gz62eh7.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-953xbxsg.js";
-import"./cli-vy2nfvj1.js";
+import"./cli-3462esbc.js";
+import"./cli-m45bmsc5.js";
 import"./cli-gpnb45ck.js";
-import"./cli-r1etggh4.js";
-import"./cli-pr5cfct7.js";
+import"./cli-j54wb0q5.js";
+import"./cli-4bvafx3k.js";
 import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 

package/build/{threatModel-ax1h25bk.js → threatModel-vkn59yef.js}

@@ -2,26 +2,26 @@ import {
   buildThreatModelPrompt,
   createSkillsRegistry,
   runOffensiveSecurityAgent
-} from "./cli-vjzgzbgb.js";
+} from "./cli-2aj6efy7.js";
 import {
   ALL_TOOL_NAMES,
   ASK_USER_QUESTIONS_TOOL_NAME,
   SKILL_TOOL_NAMES,
   buildBaseSystemPrompt,
   sessions
-} from "./cli-ac60eqhd.js";
+} from "./cli-e06s4dbt.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-z5a6069g.js";
+import"./cli-fhm4gfky.js";
 import"./cli-3y0dgy56.js";
 import {
   stepCountIs
-} from "./cli-8r61bnf2.js";
+} from "./cli-2gz62eh7.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-953xbxsg.js";
-import"./cli-vy2nfvj1.js";
+import"./cli-3462esbc.js";
+import"./cli-m45bmsc5.js";
 import"./cli-gpnb45ck.js";
-import"./cli-r1etggh4.js";
-import"./cli-pr5cfct7.js";
+import"./cli-j54wb0q5.js";
+import"./cli-4bvafx3k.js";
 import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 

package/build/{uninstall-x9490712.js → uninstall-b3kzz704.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env bun
 import {
   detectInstallMethod
-} from "./cli-pr5cfct7.js";
+} from "./cli-4bvafx3k.js";
 import {
   __require
 } from "./cli-8rxa073f.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pensar/apex",
-  "version": "1.6.0-canary.75793e2c",
+  "version": "1.6.0",
   "description": "AI-powered penetration testing CLI tool with terminal UI",
   "module": "src/tui/index.tsx",
   "main": "build/cli.js",

package/build/agent-78akh567.js

@@ -1,19 +0,0 @@
-import {
-  CodeAgent
-} from "./cli-3kx02vjp.js";
-import"./cli-ac60eqhd.js";
-import"./cli-tp1tqn3k.js";
-import"./cli-z5a6069g.js";
-import"./cli-3y0dgy56.js";
-import"./cli-8r61bnf2.js";
-import"./cli-0ghkg3w6.js";
-import"./cli-953xbxsg.js";
-import"./cli-vy2nfvj1.js";
-import"./cli-gpnb45ck.js";
-import"./cli-r1etggh4.js";
-import"./cli-pr5cfct7.js";
-import"./cli-03z6pswp.js";
-import"./cli-8rxa073f.js";
-export {
-  CodeAgent
-};