@pensar/apex 2.0.0 → 2.0.1

package/build/cli.js

@@ -5,24 +5,25 @@ import {
   createThreatModelPrompt
 } from "./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import {
-  init_toolset
-} from "./cli-s1nckt4k.js";
 import {
   buildAuthConfig,
-  init_ai,
+  init_ai1 as init_ai,
   init_models,
-  init_utils
-} from "./cli-h825qzmd.js";
-import"./cli-948dk60p.js";
+  init_session,
+  init_structured,
+  init_toolset,
+  init_utils,
+  logger
+} from "./cli-z1dapp7v.js";
+import"./cli-8g5cwvbm.js";
 import"./cli-e6rgwtpb.js";
-import"./cli-h6nw89zf.js";
 import"./cli-gpnb45ck.js";
-import"./cli-0v9x0eby.js";
+import"./cli-eptabm2j.js";
+import"./cli-88bhxzr1.js";
 import {
   init_package,
   package_default
-} from "./cli-a20jcpmp.js";
+} from "./cli-0yptvbbm.js";
 import {
   __require,
   __toESM
@@ -142,7 +143,7 @@ var package_default2 = {
     tsc: "tsc --noEmit"
   },
   type: "module",
-  version: "2.0.0"
+  version: "2.0.1"
 };
 
 // src/core/ai/index.ts
@@ -150,6 +151,45 @@ init_ai();
 init_models();
 init_utils();
 
+// src/core/cli/logLevelArgs.ts
+var VALID_LOG_LEVELS = new Set([
+  "DEBUG",
+  "INFO",
+  "WARN",
+  "ERROR",
+  "SILENT"
+]);
+function resolveCliLogLevel(argv) {
+  let logLevelValue;
+  let shorthandLevel;
+  let sawLogLevel = false;
+  let invalid;
+  for (let i = argv.length - 1;i >= 0; i--) {
+    const a = argv[i];
+    if (a === "--verbose") {
+      shorthandLevel ??= "DEBUG";
+      argv.splice(i, 1);
+    } else if (a === "--quiet") {
+      shorthandLevel ??= "WARN";
+      argv.splice(i, 1);
+    } else if (a === "--log-level") {
+      const next = argv[i + 1];
+      const valueToken = next !== undefined && !next.startsWith("-") ? next : undefined;
+      if (!sawLogLevel) {
+        sawLogLevel = true;
+        const upper = valueToken?.toUpperCase();
+        if (upper && VALID_LOG_LEVELS.has(upper)) {
+          logLevelValue = upper;
+        } else {
+          invalid = valueToken ?? "(missing)";
+        }
+      }
+      argv.splice(i, valueToken !== undefined ? 2 : 1);
+    }
+  }
+  return { level: logLevelValue ?? shorthandLevel, invalid };
+}
+
 // src/core/cli/pentestMode.ts
 var SUPPORTED_PENTEST_MODES = ["exfil"];
 function resolvePentestMode(mode) {
@@ -421,6 +461,13 @@ You can upgrade manually by running:
   };
 }
 
+// src/core/logger/index.ts
+init_session();
+init_structured();
+import os from "os";
+import path from "path";
+var ERROR_LOG_PATH = path.join(os.homedir(), ".pensar", "error.log");
+
 // src/tui/utils/command-flags.ts
 import { readFileSync } from "fs";
 import { isAbsolute, resolve } from "path";
@@ -450,7 +497,6 @@ function resolveThreatModelPrompt(value) {
 
 // src/cli.ts
 var args = process.argv.slice(2);
-var command = args[0];
 var version = package_default2.version;
 var OBFUSCATE_FLAGS = new Set(["--obfuscate", "--redact", "-O"]);
 var obfuscateRequested = args.some((a) => OBFUSCATE_FLAGS.has(a));
@@ -461,6 +507,17 @@ if (obfuscateRequested) {
       args.splice(i, 1);
   }
 }
+{
+  const { level, invalid } = resolveCliLogLevel(args);
+  if (invalid !== undefined) {
+    console.error(`Ignoring invalid --log-level "${invalid}" (expected DEBUG|INFO|WARN|ERROR|SILENT)`);
+  }
+  if (level) {
+    logger.setLevel(level);
+    process.env.PENSAR_LOG_LEVEL = level;
+  }
+}
+var command = args[0];
 function getArg(flag, argv = args) {
   const idx = argv.indexOf(flag);
   return idx !== -1 ? argv[idx + 1] : undefined;
@@ -495,7 +552,7 @@ function attachCliAgentStreamListeners(bus) {
 async function createInstrumentedBus(session) {
   const bus = new AgentEventBus;
   attachCliAgentStreamListeners(bus);
-  const { attachWandbToEventBus } = await import("./upload-7wtbr768.js");
+  const { attachWandbToEventBus } = await import("./upload-wg0vxmk0.js");
   const wandbCleanup = await attachWandbToEventBus(session, bus).catch((e) => {
     console.warn("[wandb] Tracing disabled:", e.message);
     return null;
@@ -512,7 +569,7 @@ async function resolveCliHeaders() {
   const { parseHeaderLine: parseHeaderLine2, parseHeadersFromFile, formatParseError: formatParseError2 } = await import("./parse-15kqmy2v.js");
   const merged = {};
   if (!noGlobal) {
-    const { config: appConfig } = await import("./index-aymt8k9w.js");
+    const { config: appConfig } = await import("./index-a1sy2zak.js");
     const cfg = await appConfig.get();
     if (cfg.defaultHeaders) {
       Object.assign(merged, cfg.defaultHeaders);
@@ -546,8 +603,8 @@ async function resolveCliModel() {
   const explicit = getArg("--model");
   if (explicit)
     return explicit;
-  const { config: appConfig } = await import("./index-aymt8k9w.js");
-  const { getDefaultModelForConfig } = await import("./utils-trqnyj77.js");
+  const { config: appConfig } = await import("./index-a1sy2zak.js");
+  const { getDefaultModelForConfig } = await import("./utils-gd1y4t26.js");
   const pensarConfig = await appConfig.get();
   const defaultModel = getDefaultModelForConfig(pensarConfig);
   if (!defaultModel) {
@@ -621,6 +678,9 @@ threat-model options:
 Global options:
   -h, --help         Show this help message
   -v, --version      Show version number
+  --log-level <lvl>  Diagnostic log level: debug|info|warn|error|silent
+  --verbose          Shorthand for --log-level debug
+  --quiet            Shorthand for --log-level warn
   --obfuscate        Run the TUI in obfuscation mode \u2014 redacts hostnames,
                      IPs, UUIDs, emails, paths, tokens, and apparent
                      company names so screenshots are safe to share.
@@ -629,9 +689,9 @@ Global options:
 async function runPentest() {
   const { config } = await import("./main-3zneyg7p.js").then((m)=>__toESM(m.default,1));
   config();
-  const { runPentestAgent } = await import("./blackboxPentest-xwc031xm.js");
-  const { sessions } = await import("./index-0fnbx38r.js");
-  const { config: appConfig } = await import("./index-aymt8k9w.js");
+  const { runPentestAgent } = await import("./blackboxPentest-xngbtdxb.js");
+  const { sessions: sessions2 } = await import("./index-k6ttkac6.js");
+  const { config: appConfig } = await import("./index-a1sy2zak.js");
   const target = getArgRequired("--target");
   const cwd = getArg("--cwd");
   const mode = getArg("--mode");
@@ -661,7 +721,7 @@ Thinking: enabled` : ""}${taskDriven ? `
 Task-driven: enabled` : ""}${headers ? `
 Headers: ${Object.keys(headers).length} configured` : ""}
 `);
-  const session = await sessions.create({
+  const session = await sessions2.create({
     name: cwd ? "Whitebox Pentest" : "Blackbox Pentest",
     targets: [target],
     config: {
@@ -701,9 +761,9 @@ Report:    ${reportPath}` : ""}`);
 async function runTargetedPentest() {
   const { config } = await import("./main-3zneyg7p.js").then((m)=>__toESM(m.default,1));
   config();
-  const { runTargetedPentestAgent } = await import("./targetedPentest-cpbd87rc.js");
-  const { sessions } = await import("./index-0fnbx38r.js");
-  const { config: appConfig } = await import("./index-aymt8k9w.js");
+  const { runTargetedPentestAgent } = await import("./targetedPentest-m24wvscc.js");
+  const { sessions: sessions2 } = await import("./index-k6ttkac6.js");
+  const { config: appConfig } = await import("./index-a1sy2zak.js");
   const target = getArgRequired("--target");
   const objectives = getAllArgs("--objective");
   const pensarConfig = await appConfig.get();
@@ -724,7 +784,7 @@ Objectives:
 ${objectivesList}
 `);
   const headers = await resolveCliHeaders();
-  const session = await sessions.create({
+  const session = await sessions2.create({
     name: "Targeted Pentest",
     targets: [target],
     ...headers !== undefined ? { config: { headers } } : {}
@@ -755,13 +815,13 @@ POCs:      ${pocsPath}`);
 async function runThreatModel() {
   const { config } = await import("./main-3zneyg7p.js").then((m)=>__toESM(m.default,1));
   config();
-  const { runThreatModelWorkflow } = await import("./threatModel-9n56z6a6.js");
-  const { config: appConfig } = await import("./index-aymt8k9w.js");
-  const path = await import("path");
+  const { runThreatModelWorkflow } = await import("./threatModel-7akmfzzm.js");
+  const { config: appConfig } = await import("./index-a1sy2zak.js");
+  const path2 = await import("path");
   const pensarConfig = await appConfig.get();
   const model = await resolveCliModel();
   const outputArg = getArg("--output") ?? getArg("-o") ?? "threat-model.md";
-  const resolvedPath = path.isAbsolute(outputArg) ? outputArg : path.resolve(process.cwd(), outputArg);
+  const resolvedPath = path2.isAbsolute(outputArg) ? outputArg : path2.resolve(process.cwd(), outputArg);
   const sep = "=".repeat(60);
   console.log(`${sep}
 THREAT MODEL GENERATION
@@ -792,13 +852,13 @@ Threat model written to: ${resolvedPath}`);
 async function runOperator() {
   const { config } = await import("./main-3zneyg7p.js").then((m)=>__toESM(m.default,1));
   config();
-  const { runOffensiveSecurityAgent } = await import("./offesecAgent-mrbyc93d.js");
-  const { sessions, normalizeMessages, getResumeMessages } = await import("./index-0fnbx38r.js");
-  const { ALL_TOOL_NAMES, SKILL_TOOL_NAMES } = await import("./index-hfhkjj2g.js");
-  const { config: appConfig } = await import("./index-aymt8k9w.js");
+  const { runOffensiveSecurityAgent } = await import("./offesecAgent-azd8ahkm.js");
+  const { sessions: sessions2, normalizeMessages, getResumeMessages } = await import("./index-k6ttkac6.js");
+  const { ALL_TOOL_NAMES, SKILL_TOOL_NAMES } = await import("./index-2t2cg8x0.js");
+  const { config: appConfig } = await import("./index-a1sy2zak.js");
   const { createInterface } = await import("readline");
   const { readFileSync: readFileSync2, existsSync } = await import("fs");
-  const path = await import("path");
+  const path2 = await import("path");
   const { stepCountIs } = await import("./index-vc29b21w.js");
   const promptRaw = getArg("-p") ?? getArg("--prompt");
   if (!promptRaw) {
@@ -820,7 +880,7 @@ Target:  ${target}` : ""}
 ${sep}
 `);
   const headers = await resolveCliHeaders();
-  const session = await sessions.create({
+  const session = await sessions2.create({
     name: "Operator Session",
     targets: target ? [target] : [],
     config: {
@@ -864,7 +924,7 @@ ${sep}
         session,
         messages
       });
-      const messagesPath = path.join(session.rootPath, "messages.json");
+      const messagesPath = path2.join(session.rootPath, "messages.json");
       if (existsSync(messagesPath)) {
         const raw = JSON.parse(readFileSync2(messagesPath, "utf-8"));
         const allMessages = Array.isArray(raw) ? raw : [];
@@ -909,32 +969,32 @@ if (hasFlag("-p") || command === "--prompt") {
   await runTargetedPentest();
 } else if (command === "login" || command === "auth") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./auth-24ca1qwx.js");
+  await import("./auth-bmt98hz0.js");
 } else if (command === "uninstall") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./uninstall-6y9dkgyt.js");
+  await import("./uninstall-7pm6zcah.js");
 } else if (command === "apps") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./apps-gdze0s68.js");
+  await import("./apps-2ac4vt09.js");
 } else if (command === "pentests") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./pentests-htmtq66d.js");
+  await import("./pentests-npjb5q1h.js");
 } else if (command === "issues") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./issues-5pnrspt7.js");
+  await import("./issues-17kdjtdg.js");
 } else if (command === "fixes") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./fixes-a4qscvkx.js");
+  await import("./fixes-d8ytvyzn.js");
 } else if (command === "logs") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./logs-1mfm901x.js");
+  await import("./logs-r4rjar4m.js");
 } else if (command === "config") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./config-cmq1cxz3.js");
+  await import("./config-j0gfjhrm.js");
 } else if (command === "threat-model") {
   await runThreatModel();
 } else if (command === "doctor") {
-  const { runDoctor } = await import("./doctor-2bkpddws.js");
+  const { runDoctor } = await import("./doctor-zn8ms7gs.js");
   await runDoctor();
 } else if (args.length === 0) {
   if (process.env.PENSAR_NO_TUI === "1") {
@@ -942,7 +1002,7 @@ if (hasFlag("-p") || command === "--prompt") {
     console.error("All other commands work with Node \u2014 run 'pensar --help'.");
     process.exit(1);
   }
-  await import("./index-48pjf9d2.js");
+  await import("./index-528cyewc.js");
 } else {
   console.error(`Error: Unknown command '${command}'`);
   console.error();

package/build/{config-cmq1cxz3.js → config-j0gfjhrm.js}

@@ -11,9 +11,9 @@ import {
 import {
   config,
   init_config
-} from "./cli-h6nw89zf.js";
-import"./cli-0v9x0eby.js";
-import"./cli-a20jcpmp.js";
+} from "./cli-eptabm2j.js";
+import"./cli-88bhxzr1.js";
+import"./cli-0yptvbbm.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/config.ts

package/build/{doctor-2bkpddws.js → doctor-zn8ms7gs.js}

@@ -1,6 +1,13 @@
 import {
   toolExists
-} from "./cli-mswm4k81.js";
+} from "./cli-cc13ydyx.js";
+import"./cli-z1dapp7v.js";
+import"./cli-8g5cwvbm.js";
+import"./cli-e6rgwtpb.js";
+import"./cli-gpnb45ck.js";
+import"./cli-eptabm2j.js";
+import"./cli-88bhxzr1.js";
+import"./cli-0yptvbbm.js";
 import"./cli-8rxa073f.js";
 
 // src/core/doctor.ts

package/build/{fixes-a4qscvkx.js → fixes-d8ytvyzn.js}

@@ -2,29 +2,26 @@
 import {
   getFix,
   listFixes
-} from "./cli-31cara07.js";
-import"./cli-5fr9k6m4.js";
-import"./cli-sw5swz40.js";
-import"./cli-cb5va0cs.js";
-import"./cli-zvq4gy61.js";
-import"./cli-zpvmaxem.js";
-import"./cli-wdmqkshz.js";
+} from "./cli-pyzw545d.js";
+import"./cli-mfzkhttr.js";
+import"./cli-fxtbkw2f.js";
+import"./cli-w2st266h.js";
+import"./cli-fa7nrded.js";
+import"./cli-f93g10xk.js";
+import"./cli-ddtmgbqv.js";
 import"./cli-9fsre5pt.js";
-import"./cli-ntd42071.js";
-import"./cli-k8mvghe1.js";
-import"./cli-mswm4k81.js";
-import"./cli-3knnkdps.js";
+import"./cli-hk03x6fq.js";
+import"./cli-zpdmnz8c.js";
+import"./cli-cc13ydyx.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-s1nckt4k.js";
-import"./cli-1yavz2pb.js";
-import"./cli-h825qzmd.js";
-import"./cli-948dk60p.js";
+import"./cli-z1dapp7v.js";
+import"./cli-8g5cwvbm.js";
 import"./cli-e6rgwtpb.js";
-import"./cli-h6nw89zf.js";
 import"./cli-gpnb45ck.js";
-import"./cli-0v9x0eby.js";
-import"./cli-a20jcpmp.js";
+import"./cli-eptabm2j.js";
+import"./cli-88bhxzr1.js";
+import"./cli-0yptvbbm.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/fixes.ts

package/build/{index-hfhkjj2g.js → index-2t2cg8x0.js}

@@ -1,6 +1,6 @@
 import {
   ApexFindingObject
-} from "./cli-ntd42071.js";
+} from "./cli-hk03x6fq.js";
 import {
   ALL_TOOL_NAMES,
   ASK_USER_QUESTIONS_TOOL_NAME,
@@ -83,19 +83,16 @@ import {
   validateDiscovery,
   webSearch,
   writePlan
-} from "./cli-k8mvghe1.js";
-import"./cli-mswm4k81.js";
-import"./cli-3knnkdps.js";
+} from "./cli-zpdmnz8c.js";
+import"./cli-cc13ydyx.js";
 import"./cli-c8131c4q.js";
-import"./cli-s1nckt4k.js";
-import"./cli-1yavz2pb.js";
-import"./cli-h825qzmd.js";
-import"./cli-948dk60p.js";
+import"./cli-z1dapp7v.js";
+import"./cli-8g5cwvbm.js";
 import"./cli-e6rgwtpb.js";
-import"./cli-h6nw89zf.js";
 import"./cli-gpnb45ck.js";
-import"./cli-0v9x0eby.js";
-import"./cli-a20jcpmp.js";
+import"./cli-eptabm2j.js";
+import"./cli-88bhxzr1.js";
+import"./cli-0yptvbbm.js";
 import"./cli-8rxa073f.js";
 export {
   writePlan,

package/build/{index-54ep0ery.js → index-3cbcjqw1.js}

@@ -7,22 +7,19 @@ import {
   WHITEBOX_APPS_DISCOVERY_SYSTEM_PROMPT,
   WHITEBOX_DISCOVERY_SYSTEM_PROMPT,
   WhiteboxAttackSurfaceAgent
-} from "./cli-wdmqkshz.js";
+} from "./cli-ddtmgbqv.js";
 import"./cli-9fsre5pt.js";
-import"./cli-ntd42071.js";
-import"./cli-k8mvghe1.js";
-import"./cli-mswm4k81.js";
-import"./cli-3knnkdps.js";
+import"./cli-hk03x6fq.js";
+import"./cli-zpdmnz8c.js";
+import"./cli-cc13ydyx.js";
 import"./cli-c8131c4q.js";
-import"./cli-s1nckt4k.js";
-import"./cli-1yavz2pb.js";
-import"./cli-h825qzmd.js";
-import"./cli-948dk60p.js";
+import"./cli-z1dapp7v.js";
+import"./cli-8g5cwvbm.js";
 import"./cli-e6rgwtpb.js";
-import"./cli-h6nw89zf.js";
 import"./cli-gpnb45ck.js";
-import"./cli-0v9x0eby.js";
-import"./cli-a20jcpmp.js";
+import"./cli-eptabm2j.js";
+import"./cli-88bhxzr1.js";
+import"./cli-0yptvbbm.js";
 import"./cli-8rxa073f.js";
 export {
   WhiteboxAttackSurfaceAgent,