@pensar/apex 1.7.0 → 1.8.0-canary.2f3da4a2

package/build/{cli-836bfgxg.js → cli-nhb9w2dk.js}

@@ -1,6 +1,6 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-x3k26g1t.js";
+} from "./cli-230tpm4a.js";
 import {
   __commonJS,
   __require

package/build/{cli-gr3zncst.js → cli-nqynaq47.js}

@@ -2,7 +2,7 @@ import {
   CweEntrySchema,
   ValidatedCweEntrySchema,
   hasCanonicalName
-} from "./cli-x3k26g1t.js";
+} from "./cli-230tpm4a.js";
 import {
   exports_external1 as exports_external,
   init_zod

package/build/{cli-rc7hyq7e.js → cli-rzrxttza.js}

@@ -71,12 +71,12 @@ import {
 } from "./cli-0ghkg3w6.js";
 import {
   signGatewayRequest
-} from "./cli-xtqm11qt.js";
+} from "./cli-91tyknkx.js";
 import {
   config,
   ensureValidToken,
   getPensarGatewayUrl
-} from "./cli-q2dty8g4.js";
+} from "./cli-xf5qehnx.js";
 import {
   getModelInfo,
   init_models
@@ -34884,7 +34884,41 @@ function checkIfRateLimitError(error) {
   return errorMessage.includes("too many tokens") || errorMessage.includes("rate limit") || errorMessage.includes("request rate") || errorMessage.includes("throttl") || errorMessage.includes("overloaded") || errorMessage.includes("too many requests") || errorMessage.includes("please wait") || errorMessage.includes("service unavailable") || errorName.includes("throttl") || errorName.includes("toomanyrequests") || errorName.includes("serviceunavailable") || errorCode === "rate_limit_exceeded" || errorCode === "throttling" || errorCode === "429" || httpStatus === 429 || httpStatus === 529 || httpStatus === 503 || errorString.includes("throttl") || errorString.includes("too many") || errorString.includes("request rate");
 }
 var MAX_RATE_LIMIT_RETRIES = 20;
-function wrapStreamWithErrorHandler(originalStream, messagesContainer, opts, model, silent, rateLimitRetryCount = 0) {
+var MAX_IDLE_RESUME_RETRIES = 3;
+var STREAM_IDLE_TIMEOUT_MS = 5 * 60 * 1000;
+
+class StreamIdleTimeoutError extends Error {
+  constructor(idleMs) {
+    super(`Stream idle for ${Math.round(idleMs / 1000)}s — no chunks received`);
+    this.name = "StreamIdleTimeoutError";
+  }
+}
+async function* withIdleTimeout(stream, idleMs) {
+  const iterator = stream[Symbol.asyncIterator]();
+  try {
+    while (true) {
+      let timer;
+      const result = await Promise.race([
+        iterator.next(),
+        new Promise((_, reject) => {
+          timer = setTimeout(() => reject(new StreamIdleTimeoutError(idleMs)), idleMs);
+          if (typeof timer === "object" && "unref" in timer)
+            timer.unref();
+        })
+      ]);
+      clearTimeout(timer);
+      if (result.done)
+        return;
+      yield result.value;
+    }
+  } finally {
+    iterator.return?.()?.catch?.(() => {});
+  }
+}
+function isStreamIdleTimeoutError(error) {
+  return error instanceof StreamIdleTimeoutError;
+}
+function wrapStreamWithErrorHandler(originalStream, messagesContainer, opts, model, silent, rateLimitRetryCount = 0, idleResumeCount = 0) {
   let wrappedStream = null;
   const handler = {
     get(target, prop) {
@@ -34892,7 +34926,7 @@ function wrapStreamWithErrorHandler(originalStream, messagesContainer, opts, mod
         if (!wrappedStream) {
           wrappedStream = async function* () {
             try {
-              for await (const chunk of originalStream.fullStream) {
+              for await (const chunk of withIdleTimeout(originalStream.fullStream, STREAM_IDLE_TIMEOUT_MS)) {
                 if (chunk.type === "error") {
                   throw chunk.error;
                 }
@@ -34901,6 +34935,21 @@ function wrapStreamWithErrorHandler(originalStream, messagesContainer, opts, mod
             } catch (error) {
               const errorMessage = error instanceof Error ? error.message : String(error);
               const isCtxError = checkIfContextLengthError(error);
+              if (!isCtxError && isStreamIdleTimeoutError(error) && idleResumeCount < MAX_IDLE_RESUME_RETRIES && messagesContainer.current.length > 0) {
+                const nextIdleCount = idleResumeCount + 1;
+                if (!silent) {
+                  console.warn(`Stream stalled (attempt ${nextIdleCount}/${MAX_IDLE_RESUME_RETRIES}), resuming with ${messagesContainer.current.length} messages: ${errorMessage}`);
+                }
+                const retriedStream = streamResponse({
+                  ...opts,
+                  messages: messagesContainer.current
+                });
+                const wrappedRetriedStream = wrapStreamWithErrorHandler(retriedStream, messagesContainer, opts, model, silent, rateLimitRetryCount, nextIdleCount);
+                for await (const chunk of wrappedRetriedStream.fullStream) {
+                  yield chunk;
+                }
+                return;
+              }
               if (!isCtxError && checkIfRateLimitError(error) && rateLimitRetryCount < MAX_RATE_LIMIT_RETRIES) {
                 const nextRetryCount = rateLimitRetryCount + 1;
                 const delayMs = Math.min(1000 * nextRetryCount, 30000);
@@ -34912,7 +34961,7 @@ function wrapStreamWithErrorHandler(originalStream, messagesContainer, opts, mod
                   ...opts,
                   messages: messagesContainer.current.length > 0 ? messagesContainer.current : undefined
                 });
-                const wrappedRetriedStream = wrapStreamWithErrorHandler(retriedStream, messagesContainer, opts, model, silent, nextRetryCount);
+                const wrappedRetriedStream = wrapStreamWithErrorHandler(retriedStream, messagesContainer, opts, model, silent, nextRetryCount, idleResumeCount);
                 for await (const chunk of wrappedRetriedStream.fullStream) {
                   yield chunk;
                 }
@@ -34940,7 +34989,7 @@ function wrapStreamWithErrorHandler(originalStream, messagesContainer, opts, mod
                       ...opts,
                       messages: compacted
                     });
-                    const wrappedRetry = wrapStreamWithErrorHandler(retried, messagesContainer, opts, model, silent, rateLimitRetryCount);
+                    const wrappedRetry = wrapStreamWithErrorHandler(retried, messagesContainer, opts, model, silent, rateLimitRetryCount, idleResumeCount);
                     for await (const chunk of wrappedRetry.fullStream) {
                       yield chunk;
                     }

package/build/{cli-q2dty8g4.js → cli-xf5qehnx.js}

@@ -2,7 +2,7 @@ import {
   get,
   init,
   update
-} from "./cli-40ef01tb.js";
+} from "./cli-kc8akm2b.js";
 
 // src/core/api/constants.ts
 var PENSAR_API_BASE_URL = "https://api.pensar.dev";

package/build/cli.js

@@ -6,15 +6,15 @@ import {
 import"./cli-3y0dgy56.js";
 import {
   init_toolset
-} from "./cli-rc7hyq7e.js";
+} from "./cli-rzrxttza.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-xtqm11qt.js";
-import"./cli-q2dty8g4.js";
+import"./cli-91tyknkx.js";
+import"./cli-xf5qehnx.js";
 import"./cli-gpnb45ck.js";
-import"./cli-40ef01tb.js";
+import"./cli-kc8akm2b.js";
 import {
   package_default
-} from "./cli-r879p2yz.js";
+} from "./cli-etxprvkj.js";
 import {
   init_models
 } from "./cli-03z6pswp.js";
@@ -25,7 +25,7 @@ import {
 // package.json
 var package_default2 = {
   name: "@pensar/apex",
-  version: "1.7.0",
+  version: "1.8.0-canary.2f3da4a2",
   description: "AI-powered penetration testing CLI tool with terminal UI",
   module: "src/tui/index.tsx",
   main: "build/cli.js",
@@ -500,7 +500,7 @@ async function resolveCliModel() {
   const explicit = getArg("--model");
   if (explicit)
     return explicit;
-  const { config: appConfig } = await import("./index-py7gtxez.js");
+  const { config: appConfig } = await import("./index-6bsbwhyw.js");
   const { getDefaultModelForConfig } = await import("./utils-jf52rmrb.js");
   const pensarConfig = await appConfig.get();
   const defaultModel = getDefaultModelForConfig(pensarConfig);
@@ -539,6 +539,7 @@ Usage:
 
 operator options (-p):
   -p, --prompt <text|@file>  (required) Prompt for the operator agent
+  -s, --system <text|@file>  Override the default system prompt
   --target <url>             Target URL / domain / IP
   --model <model>            AI model (default: auto-selected from configured provider)
 
@@ -572,9 +573,9 @@ Global options:
 async function runPentest() {
   const { config: config2 } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config2();
-  const { runPentestAgent } = await import("./blackboxPentest-rwyjy4kq.js");
-  const { sessions } = await import("./index-5a173a2k.js");
-  const { config: appConfig } = await import("./index-py7gtxez.js");
+  const { runPentestAgent } = await import("./blackboxPentest-n9m7hbn8.js");
+  const { sessions } = await import("./index-eata65cj.js");
+  const { config: appConfig } = await import("./index-6bsbwhyw.js");
   const target = getArgRequired("--target");
   const cwd = getArg("--cwd");
   const mode = getArg("--mode");
@@ -638,9 +639,9 @@ Report:    ${reportPath}` : ""}`);
 async function runTargetedPentest() {
   const { config: config2 } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config2();
-  const { runTargetedPentestAgent } = await import("./targetedPentest-de8a67va.js");
-  const { sessions } = await import("./index-5a173a2k.js");
-  const { config: appConfig } = await import("./index-py7gtxez.js");
+  const { runTargetedPentestAgent } = await import("./targetedPentest-4bj9654f.js");
+  const { sessions } = await import("./index-eata65cj.js");
+  const { config: appConfig } = await import("./index-6bsbwhyw.js");
   const target = getArgRequired("--target");
   const objectives = getAllArgs("--objective");
   const pensarConfig = await appConfig.get();
@@ -688,8 +689,8 @@ POCs:      ${pocsPath}`);
 async function runThreatModel() {
   const { config: config2 } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config2();
-  const { runThreatModelWorkflow } = await import("./threatModel-waz866yk.js");
-  const { config: appConfig } = await import("./index-py7gtxez.js");
+  const { runThreatModelWorkflow } = await import("./threatModel-pe3svbnc.js");
+  const { config: appConfig } = await import("./index-6bsbwhyw.js");
   const path = await import("path");
   const pensarConfig = await appConfig.get();
   const model = await resolveCliModel();
@@ -725,10 +726,10 @@ Threat model written to: ${resolvedPath}`);
 async function runOperator() {
   const { config: config2 } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config2();
-  const { runOffensiveSecurityAgent } = await import("./offesecAgent-ahcz5hcx.js");
-  const { sessions, normalizeMessages, getResumeMessages } = await import("./index-5a173a2k.js");
-  const { ALL_TOOL_NAMES, SKILL_TOOL_NAMES } = await import("./index-a4ydz3dd.js");
-  const { config: appConfig } = await import("./index-py7gtxez.js");
+  const { runOffensiveSecurityAgent } = await import("./offesecAgent-vvrhkr8r.js");
+  const { sessions, normalizeMessages, getResumeMessages } = await import("./index-eata65cj.js");
+  const { ALL_TOOL_NAMES, SKILL_TOOL_NAMES } = await import("./index-5035hx9j.js");
+  const { config: appConfig } = await import("./index-6bsbwhyw.js");
   const { createInterface } = await import("readline");
   const { readFileSync: readFileSync2, existsSync } = await import("fs");
   const path = await import("path");
@@ -739,6 +740,8 @@ async function runOperator() {
     process.exit(1);
   }
   const prompt = resolveFlagValue(promptRaw);
+  const systemRaw = getArg("-s") ?? getArg("--system");
+  const systemPrompt = systemRaw ? resolveFlagValue(systemRaw) : undefined;
   const target = getArg("--target");
   const pensarConfig = await appConfig.get();
   const model = await resolveCliModel();
@@ -783,6 +786,7 @@ ${sep}
     for (;; ) {
       await runOffensiveSecurityAgent({
         prompt: currentPrompt,
+        ...systemPrompt ? { system: systemPrompt } : {},
         model,
         target,
         activeTools: [...ALL_TOOL_NAMES, ...SKILL_TOOL_NAMES],
@@ -837,25 +841,25 @@ if (hasFlag("-p") || command === "--prompt") {
   await runTargetedPentest();
 } else if (command === "login" || command === "auth") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./auth-wvh553ea.js");
+  await import("./auth-0afhfypr.js");
 } else if (command === "uninstall") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./uninstall-0bwz7jdn.js");
+  await import("./uninstall-tv9t0pgc.js");
 } else if (command === "projects") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./projects-dqp4m0ws.js");
+  await import("./projects-0qkjmzbw.js");
 } else if (command === "pentests") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./pentests-re8dzxt9.js");
+  await import("./pentests-s5x17s2j.js");
 } else if (command === "issues") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./issues-trbzy8n0.js");
+  await import("./issues-hgvycr7p.js");
 } else if (command === "fixes") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./fixes-1z283wdz.js");
+  await import("./fixes-c8fa4er8.js");
 } else if (command === "logs") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./logs-c88md0h3.js");
+  await import("./logs-0560s383.js");
 } else if (command === "threat-model") {
   await runThreatModel();
 } else if (command === "doctor") {
@@ -867,7 +871,7 @@ if (hasFlag("-p") || command === "--prompt") {
     console.error("All other commands work with Node \u2014 run 'pensar --help'.");
     process.exit(1);
   }
-  await import("./index-j3hw6d4w.js");
+  await import("./index-vhcxarqs.js");
 } else {
   console.error(`Error: Unknown command '${command}'`);
   console.error();

package/build/{fixes-1z283wdz.js → fixes-c8fa4er8.js}

@@ -2,10 +2,10 @@
 import {
   getFix,
   listFixes
-} from "./cli-vvyq7ace.js";
-import"./cli-q2dty8g4.js";
-import"./cli-40ef01tb.js";
-import"./cli-r879p2yz.js";
+} from "./cli-g90c7ajw.js";
+import"./cli-xf5qehnx.js";
+import"./cli-kc8akm2b.js";
+import"./cli-etxprvkj.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/fixes.ts

package/build/{index-a4ydz3dd.js → index-5035hx9j.js}

@@ -7,17 +7,17 @@ import {
   SKILL_TOOL_NAMES,
   StepTraceWriter,
   createAllTools
-} from "./cli-x3k26g1t.js";
+} from "./cli-230tpm4a.js";
 import"./cli-tp1tqn3k.js";
-import"./cli-nqx9y9ds.js";
+import"./cli-629hvmba.js";
 import"./cli-3y0dgy56.js";
-import"./cli-rc7hyq7e.js";
+import"./cli-rzrxttza.js";
 import"./cli-0ghkg3w6.js";
-import"./cli-xtqm11qt.js";
-import"./cli-q2dty8g4.js";
+import"./cli-91tyknkx.js";
+import"./cli-xf5qehnx.js";
 import"./cli-gpnb45ck.js";
-import"./cli-40ef01tb.js";
-import"./cli-r879p2yz.js";
+import"./cli-kc8akm2b.js";
+import"./cli-etxprvkj.js";
 import"./cli-03z6pswp.js";
 import"./cli-8rxa073f.js";
 export {

package/build/{index-py7gtxez.js → index-6bsbwhyw.js}

@@ -2,8 +2,8 @@ import {
   get,
   init,
   update
-} from "./cli-40ef01tb.js";
-import"./cli-r879p2yz.js";
+} from "./cli-kc8akm2b.js";
+import"./cli-etxprvkj.js";
 import"./cli-8rxa073f.js";
 
 // src/core/config/index.ts

package/build/{index-5a173a2k.js → index-eata65cj.js}

@@ -13,24 +13,24 @@ import {
   update,
   write,
   writeRaw
-} from "./cli-nqx9y9ds.js";
+} from "./cli-629hvmba.js";
 import {
   ToolsetStateSchema,
   exports_toolset,
   init_toolset,
   toggleTool
-} from "./cli-rc7hyq7e.js";
+} from "./cli-rzrxttza.js";
 import {
   init_zod,
   zod_default
 } from "./cli-0ghkg3w6.js";
-import"./cli-xtqm11qt.js";
-import"./cli-q2dty8g4.js";
+import"./cli-91tyknkx.js";
+import"./cli-xf5qehnx.js";
 import"./cli-gpnb45ck.js";
-import"./cli-40ef01tb.js";
+import"./cli-kc8akm2b.js";
 import {
   getCurrentVersion
-} from "./cli-r879p2yz.js";
+} from "./cli-etxprvkj.js";
 import"./cli-03z6pswp.js";
 import {
   __require,

package/build/{index-1p5bg26t.js → index-k41ryzgs.js}

@@ -9,15 +9,15 @@ import {
   signGatewayRequest,
   startDeviceFlow,
   validateGateway
-} from "./cli-xtqm11qt.js";
+} from "./cli-91tyknkx.js";
 import {
   ensureValidToken,
   fetchWorkOSClientId,
   isTokenExpired,
   refreshAccessToken
-} from "./cli-q2dty8g4.js";
-import"./cli-40ef01tb.js";
-import"./cli-r879p2yz.js";
+} from "./cli-xf5qehnx.js";
+import"./cli-kc8akm2b.js";
+import"./cli-etxprvkj.js";
 import"./cli-8rxa073f.js";
 export {
   validateGateway,