@pensar/apex 2.0.1 → 2.0.2-canary.09dbe74f

package/build/{index-528cyewc.js → index-pr80jx2t.js}

@@ -7,21 +7,21 @@ import {
   buildThreatModelPrompt,
   createSkillsRegistry,
   runOffensiveSecurityAgent
-} from "./cli-pyzw545d.js";
+} from "./cli-ncecs1a9.js";
 import {
   REPORT_FILENAME_MD,
   convertModelMessagesToUI,
   loadSubagents,
   readExecutionMetrics,
   writeExecutionMetrics
-} from "./cli-mfzkhttr.js";
-import"./cli-fxtbkw2f.js";
-import"./cli-w2st266h.js";
-import"./cli-fa7nrded.js";
-import"./cli-f93g10xk.js";
-import"./cli-ddtmgbqv.js";
+} from "./cli-5e5gq617.js";
+import"./cli-pyz8tnrp.js";
+import"./cli-pppvjz87.js";
+import"./cli-2hw7jen3.js";
+import"./cli-mcn1ar96.js";
+import"./cli-8q9kr0x9.js";
 import"./cli-9fsre5pt.js";
-import"./cli-hk03x6fq.js";
+import"./cli-117ypqqj.js";
 import {
   ALL_TOOL_NAMES,
   ASK_USER_QUESTIONS_TOOL_NAME,
@@ -37,14 +37,14 @@ import {
   hasPlan,
   planFilePath,
   readPlan
-} from "./cli-zpdmnz8c.js";
+} from "./cli-2p56h4nq.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-cc13ydyx.js";
+} from "./cli-sgrt7t9v.js";
 import {
   formatParseError,
   parseHeaderLine
-} from "./cli-8xknm7d9.js";
+} from "./cli-q24twygk.js";
 import {
   createThreatModelPrompt
 } from "./cli-fw5r7pfj.js";
@@ -56,7 +56,7 @@ import {
 import {
   createWeaveTracer,
   resolveConfig
-} from "./cli-1f5zzrxj.js";
+} from "./cli-k8zpadm5.js";
 import {
   AVAILABLE_PROVIDERS,
   init_types
@@ -82,7 +82,7 @@ import {
   stepCountIs,
   write,
   writeErrorLog
-} from "./cli-z1dapp7v.js";
+} from "./cli-a3pzv462.js";
 import {
   disconnect,
   fetchWorkspaces,
@@ -96,21 +96,21 @@ import {
   selectWorkspace,
   startDeviceFlow,
   validateGateway
-} from "./cli-8g5cwvbm.js";
+} from "./cli-r9yh5mka.js";
 import"./cli-e6rgwtpb.js";
 import"./cli-gpnb45ck.js";
 import {
   config,
   init_config as init_config2
-} from "./cli-eptabm2j.js";
+} from "./cli-eg35gebv.js";
 import {
   init_config,
   update
-} from "./cli-88bhxzr1.js";
+} from "./cli-tt7ps59g.js";
 import {
   checkForUpdate,
   init_installation
-} from "./cli-0yptvbbm.js";
+} from "./cli-hh404jw6.js";
 import {
   __commonJS,
   __esm,
@@ -53209,7 +53209,7 @@ function ModelPicker({
         if (expandedProviders.has("local")) {
           items.push({ type: "local-input", field: "url" });
           items.push({ type: "local-input", field: "model" });
-          const localModels = groupedModels["local"];
+          const localModels = groupedModels.local;
           if (localModels) {
             for (const m of localModels) {
               items.push({ type: "model", model: m });
@@ -53460,7 +53460,7 @@ function ModelPicker({
           const providerName = providerNames[provider] || provider;
           const isFocused = isProviderFocused(provider);
           if (provider === "local") {
-            const localModels = groupedModels["local"];
+            const localModels = groupedModels.local;
             const modelCount = localModels?.length ?? 0;
             const elements2 = [];
             elements2.push(/* @__PURE__ */ jsxDEV4(PickerRow, {
@@ -54246,7 +54246,7 @@ function extractHostLabel(host) {
 }
 function extractHostFromUrl(url) {
   const m = /^https?:\/\/([^\/?#:]+)/i.exec(url);
-  return m && m[1] ? m[1] : null;
+  return m?.[1] ? m[1] : null;
 }
 function extractOrgLabel(text) {
   const first = text.trim().split(/\s+/)[0];
@@ -54352,8 +54352,8 @@ function deobfuscate(input) {
 init_config2();
 
 // src/tui/utils/command-flags.ts
-import { readFileSync } from "fs";
-import { isAbsolute, resolve } from "path";
+import { readFileSync } from "node:fs";
+import { isAbsolute, resolve } from "node:path";
 init_toolset();
 function combinePromptParts(threatModel, prompt) {
   const parts = [];
@@ -54496,7 +54496,7 @@ function parseWebFlags(args) {
     flags._hostsExplicitlyProvided = true;
   }
   if (raw.ports) {
-    flags.ports = String(raw.ports).split(",").map((p) => parseInt(p.trim(), 10)).filter((p) => !isNaN(p));
+    flags.ports = String(raw.ports).split(",").map((p) => parseInt(p.trim(), 10)).filter((p) => !Number.isNaN(p));
   }
   if (flags.target) {
     const parsed = parseTargetUrl(flags.target);
@@ -54804,6 +54804,47 @@ var commands = [
       });
     }
   },
+  {
+    name: "prompt-injection",
+    aliases: ["pi"],
+    description: "Test LLM prompt-injection defenses",
+    category: "Pentesting",
+    options: [
+      {
+        name: "--library",
+        valueHint: "<path>",
+        description: "Local prompt-injection payload library path"
+      },
+      {
+        name: "--target",
+        valueHint: "<url>",
+        description: "Target application or endpoint"
+      }
+    ],
+    handler: async (args, ctx2) => {
+      const skillArgs = {};
+      for (let i = 0;i < args.length; i++) {
+        if (args[i] === "--library" && args[i + 1]) {
+          skillArgs.library = args[++i];
+        } else if (args[i] === "--target" && args[i + 1]) {
+          skillArgs.target = args[++i];
+        }
+      }
+      ctx2.navigate({
+        type: "operator",
+        nonce: Date.now(),
+        initialConfig: {
+          requireApproval: true,
+          target: skillArgs.target,
+          promptInjectionLibrarySource: skillArgs.library
+        },
+        initialSkill: {
+          slug: "prompt-injection",
+          args: skillArgs
+        }
+      });
+    }
+  },
   {
     name: "resume",
     aliases: ["sessions", "s"],
@@ -54817,7 +54858,7 @@ var commands = [
     name: "new",
     description: "Start a new operator session",
     category: "Pentesting",
-    handler: async (args, ctx2) => {
+    handler: async (_args, ctx2) => {
       ctx2.navigate({ type: "operator", nonce: Date.now() });
     }
   },
@@ -54826,7 +54867,7 @@ var commands = [
     aliases: ["auth"],
     description: "Connect to Pensar Console for managed inference",
     category: "Configuration",
-    handler: async (args, ctx2) => {
+    handler: async (_args, ctx2) => {
       ctx2.openAuthDialog?.();
     }
   },
@@ -54835,7 +54876,7 @@ var commands = [
     aliases: ["buy"],
     description: "Buy credits / check balance",
     category: "Configuration",
-    handler: async (args, ctx2) => {
+    handler: async (_args, ctx2) => {
       ctx2.openCreditsDialog?.();
     }
   },
@@ -54843,7 +54884,7 @@ var commands = [
     name: "models",
     description: "Show available AI models",
     category: "Configuration",
-    handler: async (args, ctx2) => {
+    handler: async (_args, ctx2) => {
       ctx2.openModelDialog?.();
     }
   },
@@ -54851,7 +54892,7 @@ var commands = [
     name: "providers",
     description: "Manage AI providers and API keys",
     category: "Configuration",
-    handler: async (args, ctx2) => {
+    handler: async (_args, ctx2) => {
       ctx2.openProvidersDialog?.();
     }
   },
@@ -54946,7 +54987,7 @@ var commands = [
     name: "help",
     description: "Show help dialog",
     category: "General",
-    handler: async (args, ctx2) => {
+    handler: async (_args, ctx2) => {
       ctx2.openHelpDialog?.();
     }
   },
@@ -54972,7 +55013,7 @@ var commands = [
     description: "View and manage active tools (session only)",
     category: "General",
     hidden: true,
-    handler: async (args, ctx2) => {
+    handler: async (_args, ctx2) => {
       if (ctx2.route.type !== "operator") {
         return;
       }
@@ -55072,7 +55113,7 @@ function patchFromString() {
 }
 function patchChildrenSetter() {
   const descriptor = Object.getOwnPropertyDescriptor(TextNodeRenderable.prototype, "children");
-  if (!descriptor || !descriptor.set) {
+  if (!descriptor?.set) {
     throw new Error("Obfuscation patch: TextNodeRenderable.prototype.children setter not found.");
   }
   const originalSetter = descriptor.set;
@@ -55582,10 +55623,10 @@ function DialogProvider({ children }) {
       children,
       /* @__PURE__ */ jsxDEV11("box", {
         position: "absolute",
-        children: stack.length > 0 && (stack[stack.length - 1].bare ? stack[stack.length - 1].element : /* @__PURE__ */ jsxDEV11(Dialog, {
+        children: stack.length > 0 && (stack[stack.length - 1]?.bare ? stack[stack.length - 1]?.element : /* @__PURE__ */ jsxDEV11(Dialog, {
           onClose: clear,
           size,
-          children: stack[stack.length - 1].element
+          children: stack[stack.length - 1]?.element
         }, undefined, false, undefined, this))
       }, undefined, false, undefined, this)
     ]
@@ -55715,6 +55756,7 @@ var TOOL_SUMMARY_MAP = {
   browser_screenshot: () => "screenshot",
   nuclei_scan: (args) => `nuclei ${args.templates || "all"} -> ${args.target || ""}`,
   document_finding: (args) => `finding: ${args.title || args.name || ""}`,
+  list_prompt_injections: (args) => args.category ? `prompt injections: ${args.category}` : "prompt injections",
   smart_enumerate: (args) => `smart_enumerate ${args.target || args.url || ""}`,
   get_attack_surface: (args) => `get_attack_surface ${args.target || args.url || ""}`,
   Task: (args) => args.description || "Task",
@@ -55858,7 +55900,7 @@ function DialogControls({ controls }) {
             "]"
           ]
         }, undefined, true, undefined, this),
-        " " + control.label
+        ` ${control.label}`
       ]
     }, control.key, true, undefined, this))
   }, undefined, false, undefined, this);
@@ -57123,7 +57165,7 @@ function markdownToStyledText(rawContent, colors2) {
   const mutedColor = colors2?.textMuted ?? RGBA22.fromInts(150, 150, 150, 255);
   const codeColor = colors2?.markdownCode ?? RGBA22.fromInts(100, 255, 100, 255);
   const linkColor = colors2?.markdownLink ?? RGBA22.fromInts(100, 200, 255, 255);
-  if (!content || !content.trim()) {
+  if (!content?.trim()) {
     return new StyledText([
       { __isChunk: true, text: content || "", fg: textColor, attributes: 0 }
     ]);
@@ -57219,7 +57261,7 @@ function markdownToStyledText(rawContent, colors2) {
       } else if (token.type === "code") {
         chunks.push({
           __isChunk: true,
-          text: token.text + `
+          text: `${token.text}
 `,
           fg: codeColor,
           attributes: 0
@@ -57263,11 +57305,11 @@ function markdownToStyledText(rawContent, colors2) {
       if (lastChunk && lastChunk.text === `
 `) {
         chunks.pop();
-      } else if (lastChunk && lastChunk.text.endsWith(`
+      } else if (lastChunk?.text.endsWith(`
 
 `)) {
         lastChunk.text = lastChunk.text.slice(0, -1);
-      } else if (lastChunk && lastChunk.text) {
+      } else if (lastChunk?.text) {
         lastChunk.text = lastChunk.text.trimEnd();
         if (lastChunk.text === "") {
           chunks.pop();
@@ -57640,7 +57682,7 @@ var DiscoverySection = memo(function DiscoverySection2({
           visibleTargets.map((t) => {
             const obj = t.objectives.length > 0 ? ` — ${t.objectives.join(", ")}` : "";
             const full = `${t.target}${obj}`;
-            const line = full.length > targetMaxWidth ? full.slice(0, targetMaxWidth - 1) + "…" : full;
+            const line = full.length > targetMaxWidth ? `${full.slice(0, targetMaxWidth - 1)}…` : full;
             return /* @__PURE__ */ jsxDEV19("text", {
               fg: colors2.textMuted,
               children: [
@@ -57739,7 +57781,7 @@ var ReportingSection = memo(function ReportingSection2({
   const { colors: colors2 } = useTheme();
   const headerLabel = reporting.status === "complete" ? `Report Complete · ${reporting.findingsCount ?? 0} finding${(reporting.findingsCount ?? 0) !== 1 ? "s" : ""}` : reporting.label || "Report Generation";
   const severityOrder = ["critical", "high", "medium", "low", "info"];
-  const severityParts = reporting.findingsBySeverity ? severityOrder.filter((s) => reporting.findingsBySeverity[s]).map((s) => `${reporting.findingsBySeverity[s]} ${s}`) : [];
+  const severityParts = reporting.findingsBySeverity ? severityOrder.filter((s) => reporting.findingsBySeverity?.[s]).map((s) => `${reporting.findingsBySeverity?.[s]} ${s}`) : [];
   return /* @__PURE__ */ jsxDEV19("box", {
     flexDirection: "column",
     children: [
@@ -57778,6 +57820,7 @@ var ReportingSection = memo(function ReportingSection2({
 import { StyledText as StyledText3 } from "@opentui/core";
 
 // src/tui/components/shared/syntax-highlight.ts
+import { extname } from "node:path";
 import { StyledText as StyledText2 } from "@opentui/core";
 
 // node_modules/highlight.js/es/index.js
@@ -57785,7 +57828,6 @@ var import_lib = __toESM(require_lib(), 1);
 var es_default = import_lib.default;
 
 // src/tui/components/shared/syntax-highlight.ts
-import { extname } from "path";
 function buildClassColorMap(colors2) {
   return {
     "hljs-keyword": colors2.syntaxKeyword,
@@ -59056,15 +59098,15 @@ function extractStreamableContent(args) {
     if (typeof args.evidence === "string")
       text += `
 
-` + args.evidence;
+${args.evidence}`;
     if (typeof args.impact === "string")
       text += `
 
-` + args.impact;
+${args.impact}`;
     if (typeof args.remediation === "string")
       text += `
 
-` + args.remediation;
+${args.remediation}`;
     return text;
   }
   if (typeof args.title === "string" && typeof args.content === "string") {
@@ -59074,7 +59116,7 @@ ${args.content}`;
   return null;
 }
 function tryParsePartialJson(text) {
-  if (!text || !text.trimStart().startsWith("{"))
+  if (!text?.trimStart().startsWith("{"))
     return null;
   try {
     const result = JSON.parse(text);
@@ -59141,7 +59183,7 @@ import {
 } from "react";
 
 // src/tui/components/shared/prompt-input-logic.ts
-function computeUpArrow(currentState, history, suggestionsCount) {
+function computeUpArrow(currentState, history, _suggestionsCount) {
   const inAutocomplete = currentState.selectedSuggestionIndex >= 0;
   if (inAutocomplete) {
     if (currentState.selectedSuggestionIndex <= 0) {
@@ -59435,8 +59477,8 @@ function truncateToLines(text, lineWidth, maxLines) {
         current = word;
       }
       i++;
-    } else if ((current + " " + word).length <= lineWidth) {
-      current += " " + word;
+    } else if (`${current} ${word}`.length <= lineWidth) {
+      current += ` ${word}`;
       i++;
     } else {
       lines.push(current);
@@ -59448,7 +59490,7 @@ function truncateToLines(text, lineWidth, maxLines) {
   }
   if (i < words.length || wordSliced) {
     const last = lines[lines.length - 1];
-    lines[lines.length - 1] = last.length < lineWidth ? last + "…" : last.slice(0, lineWidth - 1) + "…";
+    lines[lines.length - 1] = last.length < lineWidth ? `${last}…` : `${last.slice(0, lineWidth - 1)}…`;
   }
   return lines.join(`
 `);
@@ -59651,7 +59693,7 @@ var PromptInput = forwardRef(function PromptInput2({
     const completionCtx = slashCtx ?? (optCtx ? { token: optCtx.token, start: optCtx.start, end: optCtx.end } : null);
     if (completionCtx) {
       const text = textareaRef.current?.plainText ?? "";
-      const completedValue = optCtx && !slashCtx ? tabResult.acceptedValue + " " : tabResult.acceptedValue;
+      const completedValue = optCtx && !slashCtx ? `${tabResult.acceptedValue} ` : tabResult.acceptedValue;
       const { newText, cursorOffset } = computeInlineCompletion(text, completionCtx, completedValue);
       textareaRef.current?.setText(newText);
       setInputValue(newText);
@@ -61692,7 +61734,7 @@ function HelpDialog({ onClose }) {
       const cat = cmd.category || "General";
       if (!byCategory.has(cat))
         byCategory.set(cat, []);
-      byCategory.get(cat).push(cmd);
+      byCategory.get(cat)?.push(cmd);
     }
     for (const cat of categories) {
       const cmds = byCategory.get(cat);
@@ -62818,8 +62860,8 @@ import { useCallback as useCallback16, useEffect as useEffect18, useRef as useRe
 init_session();
 
 // src/tui/hooks/use-sessions-list.ts
-import { existsSync, readdirSync } from "fs";
-import { join } from "path";
+import { existsSync, readdirSync } from "node:fs";
+import { join } from "node:path";
 import { useCallback as useCallback15, useEffect as useEffect17, useState as useState27 } from "react";
 init_session();
 function countFindings(findingsPath) {
@@ -64026,7 +64068,7 @@ function WebWizard({
       if (state.scope.allowedHosts.length > 0 || state.scope.allowedPorts.length > 0) {
         sessionConfig.scopeConstraints = {
           allowedHosts: state.scope.allowedHosts,
-          allowedPorts: state.scope.allowedPorts.map((p) => parseInt(p, 10)).filter((p) => !isNaN(p)),
+          allowedPorts: state.scope.allowedPorts.map((p) => parseInt(p, 10)).filter((p) => !Number.isNaN(p)),
           strictScope: state.scope.strictScope
         };
       }
@@ -64701,7 +64743,7 @@ function ErrorBoundary({ children }) {
 }
 
 // src/tui/components/footer.tsx
-import os from "os";
+import os from "node:os";
 
 // src/tui/context/session.tsx
 init_session();
@@ -64772,7 +64814,7 @@ function Footer({
   const effectiveCwd = sessionCwd || cwd;
   const relativeCwd = effectiveCwd.split(os.homedir()).pop() || "";
   const segments = relativeCwd.split("/").filter(Boolean);
-  const rawDisplayCwd = segments.length <= 2 ? "~/" + segments.join("/") : "…/" + segments.slice(-2).join("/");
+  const rawDisplayCwd = segments.length <= 2 ? `~/${segments.join("/")}` : `…/${segments.slice(-2).join("/")}`;
   const displayCwd = obfuscateEnabled ? "~/[workdir]" : rawDisplayCwd;
   const showCwd = termWidth >= 100;
   const session = useSession();
@@ -64918,9 +64960,9 @@ function ContextProgress({
 
 // src/tui/components/operator-dashboard/index.tsx
 init_dist();
+import { existsSync as existsSync3, readFileSync as readFileSync3, writeFileSync } from "node:fs";
+import { isAbsolute as isAbsolute2, join as join3, resolve as resolve2 } from "node:path";
 import { useKeyboard as useKeyboard25 } from "@opentui/react";
-import { existsSync as existsSync3, readFileSync as readFileSync3, writeFileSync } from "fs";
-import { isAbsolute as isAbsolute2, join as join3, resolve as resolve2 } from "path";
 import {
   useCallback as useCallback19,
   useEffect as useEffect25,
@@ -65131,7 +65173,7 @@ var SUBAGENT_TOOLS = new Set([
   "spawn_coding_agent",
   "delegate_to_auth_subagent"
 ]);
-function getLoadingState(messages, hasPendingTool, isLastAssistant, pendingToolName) {
+function getLoadingState(_messages, hasPendingTool, isLastAssistant, pendingToolName) {
   if (hasPendingTool) {
     if (pendingToolName && SUBAGENT_TOOLS.has(pendingToolName)) {
       return "waiting";
@@ -65377,7 +65419,7 @@ var MIN_CONTENT_HEIGHT = 10;
 function normalizeQuestion(q2, index) {
   const fallbackHeader = `Q${index + 1}`;
   const trimmedHeader = (q2.header ?? "").trim();
-  const header = trimmedHeader.length === 0 ? fallbackHeader : trimmedHeader.length > 20 ? trimmedHeader.slice(0, 19) + "…" : trimmedHeader;
+  const header = trimmedHeader.length === 0 ? fallbackHeader : trimmedHeader.length > 20 ? `${trimmedHeader.slice(0, 19)}…` : trimmedHeader;
   const options = (q2.options ?? []).slice(0, 4);
   return {
     ...q2,
@@ -65824,7 +65866,7 @@ function TabBar({
               }, undefined, false, undefined, this)
             ]
           }, undefined, true, undefined, this)
-        }, isSubmit ? "submit" : q2.id, false, undefined, this);
+        }, isSubmit ? "submit" : q2?.id, false, undefined, this);
       }),
       hiddenAfter > 0 && /* @__PURE__ */ jsxDEV49("text", {
         fg: colors2.textMuted,
@@ -65907,7 +65949,7 @@ function Row({
           children: [
             /* @__PURE__ */ jsxDEV49("text", {
               fg: markerColor,
-              children: marker + " "
+              children: `${marker} `
             }, undefined, false, undefined, this),
             /* @__PURE__ */ jsxDEV49("text", {
               children: [
@@ -65931,7 +65973,7 @@ function Row({
           flexDirection: "row",
           children: /* @__PURE__ */ jsxDEV49("text", {
             fg: descColor,
-            children: "    " + (question.multiSelect ? "    " : "") + opt.description
+            children: `    ${question.multiSelect ? "    " : ""}${opt.description}`
           }, undefined, false, undefined, this)
         }, undefined, false, undefined, this) : null
       ]
@@ -65947,7 +65989,7 @@ function Row({
       children: [
         /* @__PURE__ */ jsxDEV49("text", {
           fg: markerColor,
-          children: marker + " "
+          children: `${marker} `
         }, undefined, false, undefined, this),
         /* @__PURE__ */ jsxDEV49("text", {
           children: [
@@ -65986,7 +66028,7 @@ function Row({
     children: [
       /* @__PURE__ */ jsxDEV49("text", {
         fg: markerColor,
-        children: marker + " "
+        children: `${marker} `
       }, undefined, false, undefined, this),
       /* @__PURE__ */ jsxDEV49("text", {
         fg: focused ? colors2.primary : colors2.textMuted,
@@ -66538,7 +66580,7 @@ function QueuedMessages({
       }, undefined, false, undefined, this),
       messages.map((msg, index) => {
         const isSelected = index === selectedIndex;
-        const displayText = msg.text.length > 80 ? msg.text.slice(0, 77) + "…" : msg.text;
+        const displayText = msg.text.length > 80 ? `${msg.text.slice(0, 77)}…` : msg.text;
         return /* @__PURE__ */ jsxDEV51("box", {
           flexDirection: "row",
           gap: 1,
@@ -66854,14 +66896,14 @@ function getLastActivity(session, maxLen) {
       const icon = isPending ? "○" : m2.status === "error" ? "✗" : "✓";
       const label = getToolDisplayLabel(m2.toolName, m2.args ?? {});
       const line = `${icon} ${label}`;
-      return line.length > maxLen ? line.slice(0, maxLen - 1) + "…" : line;
+      return line.length > maxLen ? `${line.slice(0, maxLen - 1)}…` : line;
     }
     if (m2.role === "assistant" && typeof m2.content === "string" && m2.content.trim()) {
       const lines = m2.content.trim().split(`
 `);
       const last = lines[lines.length - 1].trim();
       if (last) {
-        return last.length > maxLen ? last.slice(0, maxLen - 1) + "…" : last;
+        return last.length > maxLen ? `${last.slice(0, maxLen - 1)}…` : last;
       }
     }
   }
@@ -67979,6 +68021,7 @@ Error: ${errMsg}
       enableThinking: reasoningEnabled && modelSupportsThinking(model.id),
       openAIReasoningEffort: modelSupportsOpenAIReasoning(model.id) ? openAIReasoningEffort : undefined,
       surfaceIntegrationEnabled: config2.data?.surfaceIntegrationEnabled,
+      promptInjectionLibrarySource: initialConfig?.promptInjectionLibrarySource ?? (route.data.type === "operator" ? route.data.initialSkill?.args?.library : undefined),
       onStepFinish,
       onCacheMetrics: (metrics) => {
         addCacheUsage(metrics.cacheReadInputTokens, metrics.cacheCreationInputTokens);
@@ -68064,7 +68107,8 @@ Error: ${errMsg}
           agentCwd: initialConfig?.sandbox ? undefined : process.cwd(),
           codebasePath: initialConfig?.sandbox ? undefined : process.cwd(),
           taskDriven: initialConfig?.taskDriven,
-          ...initialConfig?.headers !== undefined ? { headers: { ...initialConfig.headers } } : {}
+          ...initialConfig?.headers !== undefined ? { headers: { ...initialConfig.headers } } : {},
+          promptInjectionLibrarySource: initialConfig?.promptInjectionLibrarySource ?? (route.data.type === "operator" ? route.data.initialSkill?.args?.library : undefined)
         };
         agentResult = await runOffensiveSecurityAgent({
           ...commonInput,
@@ -68170,6 +68214,8 @@ Error: ${errMsg}
     initialConfig?.taskDriven,
     initialConfig?.target,
     initialConfig?.headers,
+    initialConfig?.promptInjectionLibrarySource,
+    route.data,
     setSessionCwd,
     subagentStore.setState,
     skillsRegistry.buildCatalog,
@@ -69676,7 +69722,7 @@ function AppContent({
       toast(`Update available: v${currentVersion} → v${latestVersion}. Run: pensar upgrade`, "warn", 8000);
     });
     const checkAuthToken = async () => {
-      const { isTokenExpired, isConnected: isConnected2 } = await import("./index-hjvqqkem.js");
+      const { isTokenExpired, isConnected: isConnected2 } = await import("./index-0nz7y997.js");
       if (isConnected2(config2.data) && config2.data.accessToken && isTokenExpired(config2.data.accessToken, 60) && !config2.data.refreshToken && !config2.data.pensarAPIKey) {
         toast("Your Pensar Console session has expired. Run /login to refresh.", "warn", 8000);
       }

package/build/{index-a1sy2zak.js → index-rg2czyx7.js}

@@ -3,8 +3,8 @@ import {
   init,
   init_config,
   update
-} from "./cli-88bhxzr1.js";
-import"./cli-0yptvbbm.js";
+} from "./cli-tt7ps59g.js";
+import"./cli-hh404jw6.js";
 import"./cli-8rxa073f.js";
 
 // src/core/config/index.ts

package/build/{index-3cbcjqw1.js → index-speg9ebc.js}

@@ -7,19 +7,19 @@ import {
   WHITEBOX_APPS_DISCOVERY_SYSTEM_PROMPT,
   WHITEBOX_DISCOVERY_SYSTEM_PROMPT,
   WhiteboxAttackSurfaceAgent
-} from "./cli-ddtmgbqv.js";
+} from "./cli-8q9kr0x9.js";
 import"./cli-9fsre5pt.js";
-import"./cli-hk03x6fq.js";
-import"./cli-zpdmnz8c.js";
-import"./cli-cc13ydyx.js";
+import"./cli-117ypqqj.js";
+import"./cli-2p56h4nq.js";
+import"./cli-sgrt7t9v.js";
 import"./cli-c8131c4q.js";
-import"./cli-z1dapp7v.js";
-import"./cli-8g5cwvbm.js";
+import"./cli-a3pzv462.js";
+import"./cli-r9yh5mka.js";
 import"./cli-e6rgwtpb.js";
 import"./cli-gpnb45ck.js";
-import"./cli-eptabm2j.js";
-import"./cli-88bhxzr1.js";
-import"./cli-0yptvbbm.js";
+import"./cli-eg35gebv.js";
+import"./cli-tt7ps59g.js";
+import"./cli-hh404jw6.js";
 import"./cli-8rxa073f.js";
 export {
   WhiteboxAttackSurfaceAgent,

package/build/{index-9d2es97h.js → index-syz3srk7.js}

@@ -1,9 +1,9 @@
 import {
   config,
   init_config
-} from "./cli-eptabm2j.js";
-import"./cli-88bhxzr1.js";
-import"./cli-0yptvbbm.js";
+} from "./cli-eg35gebv.js";
+import"./cli-tt7ps59g.js";
+import"./cli-hh404jw6.js";
 import"./cli-8rxa073f.js";
 init_config();