@pensar/apex 2.0.1 → 2.0.2-canary.1de5ff5b

package/build/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env bun
 // @bun
-import"./cli-8xknm7d9.js";
+import"./cli-q24twygk.js";
 import {
   createThreatModelPrompt
 } from "./cli-fw5r7pfj.js";
@@ -14,16 +14,16 @@ import {
   init_toolset,
   init_utils,
   logger
-} from "./cli-z1dapp7v.js";
-import"./cli-8g5cwvbm.js";
-import"./cli-e6rgwtpb.js";
+} from "./cli-bxtz3bdv.js";
+import"./cli-zgpj2mv1.js";
+import"./cli-f7d23ded.js";
 import"./cli-gpnb45ck.js";
-import"./cli-eptabm2j.js";
-import"./cli-88bhxzr1.js";
+import"./cli-kn9tst6t.js";
+import"./cli-hkegr688.js";
 import {
   init_package,
   package_default
-} from "./cli-0yptvbbm.js";
+} from "./cli-w55v1bht.js";
 import {
   __require,
   __toESM
@@ -49,9 +49,10 @@ var package_default2 = {
     "@opentelemetry/api": "^1.9.0",
     "@opentui/core": "^0.1.107",
     "@opentui/react": "^0.1.107",
-    "@pensar/surface": "0.2.1",
+    "@pensar/surface": "0.2.2",
     "@playwright/mcp": "^0.0.54",
     ai: "^6.0.105",
+    "camoufox-js": "^0.11.1",
     glob: "^13.0.0",
     "highlight.js": "^11.11.1",
     imapflow: "^1.2.10",
@@ -64,7 +65,7 @@ var package_default2 = {
     sharp: "^0.34.4",
     tldts: "^7.0.28",
     yaml: "^2.8.2",
-    zod: "^3.25.76"
+    zod: "^4.1.12"
   },
   description: "AI-powered penetration testing CLI tool with terminal UI",
   devDependencies: {
@@ -115,13 +116,13 @@ var package_default2 = {
     url: "https://github.com/pensarai/apex.git"
   },
   scripts: {
-    build: "bun build src/cli.ts --outdir build --target node --format esm --splitting --external @opentui/core --external @opentui/react --external @opentui/react/* --external react --external react/jsx-runtime --external react/jsx-dev-runtime --external react-reconciler --external weave",
+    build: "bun build src/cli.ts --outdir build --target node --format esm --splitting --external @opentui/core --external @opentui/react --external @opentui/react/* --external react --external react/jsx-runtime --external react/jsx-dev-runtime --external react-reconciler --external weave --external electron --external chromium-bidi --external camoufox-js",
     "build:binaries": "bun run generate:ascii && mkdir -p dist && bun run build:binary:macos-arm64 && bun run build:binary:macos-x64 && bun run build:binary:linux-x64 && bun run build:binary:linux-arm64",
-    "build:binary": "bun run generate:ascii && bun build src/cli.ts --compile --outfile pensar",
-    "build:binary:linux-arm64": "bun build src/cli.ts --compile --target=bun-linux-arm64 --outfile dist/pensar-linux-arm64",
-    "build:binary:linux-x64": "bun build src/cli.ts --compile --target=bun-linux-x64 --outfile dist/pensar-linux-x64",
-    "build:binary:macos-arm64": "bun build src/cli.ts --compile --target=bun-darwin-arm64 --outfile dist/pensar-darwin-arm64",
-    "build:binary:macos-x64": "bun build src/cli.ts --compile --target=bun-darwin-x64 --outfile dist/pensar-darwin-x64",
+    "build:binary": "bun run generate:ascii && bun build src/cli.ts --compile --external electron --external chromium-bidi --external camoufox-js --outfile pensar",
+    "build:binary:linux-arm64": "bun build src/cli.ts --compile --external electron --external chromium-bidi --external camoufox-js --target=bun-linux-arm64 --outfile dist/pensar-linux-arm64",
+    "build:binary:linux-x64": "bun build src/cli.ts --compile --external electron --external chromium-bidi --external camoufox-js --target=bun-linux-x64 --outfile dist/pensar-linux-x64",
+    "build:binary:macos-arm64": "bun build src/cli.ts --compile --external electron --external chromium-bidi --external camoufox-js --target=bun-darwin-arm64 --outfile dist/pensar-darwin-arm64",
+    "build:binary:macos-x64": "bun build src/cli.ts --compile --external electron --external chromium-bidi --external camoufox-js --target=bun-darwin-x64 --outfile dist/pensar-darwin-x64",
     check: "biome check --write",
     "check:ci": "biome check",
     "daytona-benchmark": "bun run scripts/daytona-benchmark.ts",
@@ -143,7 +144,7 @@ var package_default2 = {
     tsc: "tsc --noEmit"
   },
   type: "module",
-  version: "2.0.1"
+  version: "2.0.2-canary.1de5ff5b"
 };
 
 // src/core/ai/index.ts
@@ -206,9 +207,12 @@ function resolvePentestMode(mode) {
 }
 
 // src/core/eventBus.ts
-import { EventEmitter } from "events";
+import { EventEmitter } from "node:events";
 var CHILD_BUS_FORWARD_POLICY = {
   "text-delta": "forward",
+  "reasoning-delta": "forward",
+  "reasoning-start": "forward",
+  "reasoning-end": "forward",
   "tool-call-start": "forward",
   "tool-call-delta": "forward",
   "tool-call-complete": "forward",
@@ -285,6 +289,15 @@ class AgentEventBus {
       case "text-delta":
         this.emit("text-delta", { text: chunk.text, subagentId });
         break;
+      case "reasoning-start":
+        this.emit("reasoning-start", { subagentId });
+        break;
+      case "reasoning-delta":
+        this.emit("reasoning-delta", { text: chunk.text, subagentId });
+        break;
+      case "reasoning-end":
+        this.emit("reasoning-end", { subagentId });
+        break;
       case "tool-input-start":
         this.emit("tool-call-start", {
           toolCallId: chunk.id,
@@ -331,7 +344,7 @@ class AgentEventBus {
 
 // src/core/installation/index.ts
 init_package();
-import { spawnSync } from "child_process";
+import { spawnSync } from "node:child_process";
 function getCurrentVersion() {
   return package_default.version;
 }
@@ -464,13 +477,13 @@ You can upgrade manually by running:
 // src/core/logger/index.ts
 init_session();
 init_structured();
-import os from "os";
-import path from "path";
+import os from "node:os";
+import path from "node:path";
 var ERROR_LOG_PATH = path.join(os.homedir(), ".pensar", "error.log");
 
 // src/tui/utils/command-flags.ts
-import { readFileSync } from "fs";
-import { isAbsolute, resolve } from "path";
+import { readFileSync } from "node:fs";
+import { isAbsolute, resolve } from "node:path";
 init_toolset();
 function combinePromptParts(threatModel, prompt) {
   const parts = [];
@@ -552,7 +565,7 @@ function attachCliAgentStreamListeners(bus) {
 async function createInstrumentedBus(session) {
   const bus = new AgentEventBus;
   attachCliAgentStreamListeners(bus);
-  const { attachWandbToEventBus } = await import("./upload-wg0vxmk0.js");
+  const { attachWandbToEventBus } = await import("./upload-5e7pkj1n.js");
   const wandbCleanup = await attachWandbToEventBus(session, bus).catch((e) => {
     console.warn("[wandb] Tracing disabled:", e.message);
     return null;
@@ -566,10 +579,10 @@ async function resolveCliHeaders() {
   if (headerArgs.length === 0 && !headersFromArg && !noGlobal) {
     return;
   }
-  const { parseHeaderLine: parseHeaderLine2, parseHeadersFromFile, formatParseError: formatParseError2 } = await import("./parse-15kqmy2v.js");
+  const { parseHeaderLine: parseHeaderLine2, parseHeadersFromFile, formatParseError: formatParseError2 } = await import("./parse-7djk9jyf.js");
   const merged = {};
   if (!noGlobal) {
-    const { config: appConfig } = await import("./index-a1sy2zak.js");
+    const { config: appConfig } = await import("./index-cwtb1k9c.js");
     const cfg = await appConfig.get();
     if (cfg.defaultHeaders) {
       Object.assign(merged, cfg.defaultHeaders);
@@ -603,8 +616,8 @@ async function resolveCliModel() {
   const explicit = getArg("--model");
   if (explicit)
     return explicit;
-  const { config: appConfig } = await import("./index-a1sy2zak.js");
-  const { getDefaultModelForConfig } = await import("./utils-gd1y4t26.js");
+  const { config: appConfig } = await import("./index-cwtb1k9c.js");
+  const { getDefaultModelForConfig } = await import("./utils-amj862q8.js");
   const pensarConfig = await appConfig.get();
   const defaultModel = getDefaultModelForConfig(pensarConfig);
   if (!defaultModel) {
@@ -632,6 +645,7 @@ Usage:
   pensar uninstall                    Uninstall Pensar (keeps sessions, memories, skills)
   pensar apps                         Manage the attack surface (apps & endpoints)
   pensar pentests                     List and manage pentests
+  pensar targets                      List pentest targets and view their agent logs
   pensar issues                       List and manage security issues
   pensar fixes                        View security fixes
   pensar logs                         View agent execution logs
@@ -689,9 +703,9 @@ Global options:
 async function runPentest() {
   const { config } = await import("./main-3zneyg7p.js").then((m)=>__toESM(m.default,1));
   config();
-  const { runPentestAgent } = await import("./blackboxPentest-xngbtdxb.js");
-  const { sessions: sessions2 } = await import("./index-k6ttkac6.js");
-  const { config: appConfig } = await import("./index-a1sy2zak.js");
+  const { runPentestAgent } = await import("./blackboxPentest-2v0856w0.js");
+  const { sessions: sessions2 } = await import("./index-pkq9jjgj.js");
+  const { config: appConfig } = await import("./index-cwtb1k9c.js");
   const target = getArgRequired("--target");
   const cwd = getArg("--cwd");
   const mode = getArg("--mode");
@@ -761,9 +775,9 @@ Report:    ${reportPath}` : ""}`);
 async function runTargetedPentest() {
   const { config } = await import("./main-3zneyg7p.js").then((m)=>__toESM(m.default,1));
   config();
-  const { runTargetedPentestAgent } = await import("./targetedPentest-m24wvscc.js");
-  const { sessions: sessions2 } = await import("./index-k6ttkac6.js");
-  const { config: appConfig } = await import("./index-a1sy2zak.js");
+  const { runTargetedPentestAgent } = await import("./targetedPentest-yrs8xwvg.js");
+  const { sessions: sessions2 } = await import("./index-pkq9jjgj.js");
+  const { config: appConfig } = await import("./index-cwtb1k9c.js");
   const target = getArgRequired("--target");
   const objectives = getAllArgs("--objective");
   const pensarConfig = await appConfig.get();
@@ -815,8 +829,8 @@ POCs:      ${pocsPath}`);
 async function runThreatModel() {
   const { config } = await import("./main-3zneyg7p.js").then((m)=>__toESM(m.default,1));
   config();
-  const { runThreatModelWorkflow } = await import("./threatModel-7akmfzzm.js");
-  const { config: appConfig } = await import("./index-a1sy2zak.js");
+  const { runThreatModelWorkflow } = await import("./threatModel-zr6dmn2t.js");
+  const { config: appConfig } = await import("./index-cwtb1k9c.js");
   const path2 = await import("path");
   const pensarConfig = await appConfig.get();
   const model = await resolveCliModel();
@@ -852,14 +866,14 @@ Threat model written to: ${resolvedPath}`);
 async function runOperator() {
   const { config } = await import("./main-3zneyg7p.js").then((m)=>__toESM(m.default,1));
   config();
-  const { runOffensiveSecurityAgent } = await import("./offesecAgent-azd8ahkm.js");
-  const { sessions: sessions2, normalizeMessages, getResumeMessages } = await import("./index-k6ttkac6.js");
-  const { ALL_TOOL_NAMES, SKILL_TOOL_NAMES } = await import("./index-2t2cg8x0.js");
-  const { config: appConfig } = await import("./index-a1sy2zak.js");
+  const { runOffensiveSecurityAgent } = await import("./offesecAgent-6m7300st.js");
+  const { sessions: sessions2, normalizeMessages, getResumeMessages } = await import("./index-pkq9jjgj.js");
+  const { ALL_TOOL_NAMES, SKILL_TOOL_NAMES } = await import("./index-27fhky9b.js");
+  const { config: appConfig } = await import("./index-cwtb1k9c.js");
   const { createInterface } = await import("readline");
   const { readFileSync: readFileSync2, existsSync } = await import("fs");
   const path2 = await import("path");
-  const { stepCountIs } = await import("./index-vc29b21w.js");
+  const { stepCountIs } = await import("./index-mgng15va.js");
   const promptRaw = getArg("-p") ?? getArg("--prompt");
   if (!promptRaw) {
     console.error("Error: -p <prompt> is required");
@@ -969,32 +983,35 @@ if (hasFlag("-p") || command === "--prompt") {
   await runTargetedPentest();
 } else if (command === "login" || command === "auth") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./auth-bmt98hz0.js");
+  await import("./auth-snffaqnn.js");
 } else if (command === "uninstall") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./uninstall-7pm6zcah.js");
+  await import("./uninstall-p8d3kg6p.js");
 } else if (command === "apps") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./apps-2ac4vt09.js");
+  await import("./apps-p91cynx1.js");
 } else if (command === "pentests") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./pentests-npjb5q1h.js");
+  await import("./pentests-y3gqyam1.js");
+} else if (command === "targets") {
+  process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
+  await import("./targets-439kemyk.js");
 } else if (command === "issues") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./issues-17kdjtdg.js");
+  await import("./issues-hzqc762k.js");
 } else if (command === "fixes") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./fixes-d8ytvyzn.js");
+  await import("./fixes-y8qx2ps5.js");
 } else if (command === "logs") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./logs-r4rjar4m.js");
+  await import("./logs-wmqhnyfa.js");
 } else if (command === "config") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./config-j0gfjhrm.js");
+  await import("./config-rb760dgz.js");
 } else if (command === "threat-model") {
   await runThreatModel();
 } else if (command === "doctor") {
-  const { runDoctor } = await import("./doctor-zn8ms7gs.js");
+  const { runDoctor } = await import("./doctor-2m2xy88h.js");
   await runDoctor();
 } else if (args.length === 0) {
   if (process.env.PENSAR_NO_TUI === "1") {
@@ -1002,7 +1019,7 @@ if (hasFlag("-p") || command === "--prompt") {
     console.error("All other commands work with Node \u2014 run 'pensar --help'.");
     process.exit(1);
   }
-  await import("./index-528cyewc.js");
+  await import("./index-5eb4pewb.js");
 } else {
   console.error(`Error: Unknown command '${command}'`);
   console.error();

package/build/{config-j0gfjhrm.js → config-rb760dgz.js}

@@ -7,13 +7,13 @@ import {
   formatParseError,
   parseHeaderLine,
   parseHeadersFromFile
-} from "./cli-8xknm7d9.js";
+} from "./cli-q24twygk.js";
 import {
   config,
   init_config
-} from "./cli-eptabm2j.js";
-import"./cli-88bhxzr1.js";
-import"./cli-0yptvbbm.js";
+} from "./cli-kn9tst6t.js";
+import"./cli-hkegr688.js";
+import"./cli-w55v1bht.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/config.ts

package/build/{doctor-zn8ms7gs.js → doctor-2m2xy88h.js}

@@ -1,18 +1,18 @@
 import {
   toolExists
-} from "./cli-cc13ydyx.js";
-import"./cli-z1dapp7v.js";
-import"./cli-8g5cwvbm.js";
-import"./cli-e6rgwtpb.js";
+} from "./cli-p4aht9hv.js";
+import"./cli-bxtz3bdv.js";
+import"./cli-zgpj2mv1.js";
+import"./cli-f7d23ded.js";
 import"./cli-gpnb45ck.js";
-import"./cli-eptabm2j.js";
-import"./cli-88bhxzr1.js";
-import"./cli-0yptvbbm.js";
+import"./cli-kn9tst6t.js";
+import"./cli-hkegr688.js";
+import"./cli-w55v1bht.js";
 import"./cli-8rxa073f.js";
 
 // src/core/doctor.ts
-import { execSync, spawnSync } from "child_process";
-import readline from "readline";
+import { execSync, spawnSync } from "node:child_process";
+import readline from "node:readline";
 function detectPackageManager() {
   const platform = process.platform;
   if (platform === "darwin" && toolExists("brew")) {

package/build/{fixes-d8ytvyzn.js → fixes-y8qx2ps5.js}

@@ -2,26 +2,26 @@
 import {
   getFix,
   listFixes
-} from "./cli-pyzw545d.js";
-import"./cli-mfzkhttr.js";
-import"./cli-fxtbkw2f.js";
-import"./cli-w2st266h.js";
-import"./cli-fa7nrded.js";
-import"./cli-f93g10xk.js";
-import"./cli-ddtmgbqv.js";
+} from "./cli-pevzp7nj.js";
+import"./cli-jzkfbrnx.js";
+import"./cli-r9v48v8g.js";
+import"./cli-5c0rvt4t.js";
+import"./cli-cbhsy5x3.js";
+import"./cli-wgqxjhky.js";
+import"./cli-mep0ck1r.js";
 import"./cli-9fsre5pt.js";
-import"./cli-hk03x6fq.js";
-import"./cli-zpdmnz8c.js";
-import"./cli-cc13ydyx.js";
+import"./cli-4x7k2s16.js";
+import"./cli-d5vz4kyn.js";
+import"./cli-p4aht9hv.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-z1dapp7v.js";
-import"./cli-8g5cwvbm.js";
-import"./cli-e6rgwtpb.js";
+import"./cli-bxtz3bdv.js";
+import"./cli-zgpj2mv1.js";
+import"./cli-f7d23ded.js";
 import"./cli-gpnb45ck.js";
-import"./cli-eptabm2j.js";
-import"./cli-88bhxzr1.js";
-import"./cli-0yptvbbm.js";
+import"./cli-kn9tst6t.js";
+import"./cli-hkegr688.js";
+import"./cli-w55v1bht.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/fixes.ts

package/build/{index-2t2cg8x0.js → index-27fhky9b.js}

@@ -1,6 +1,6 @@
 import {
   ApexFindingObject
-} from "./cli-hk03x6fq.js";
+} from "./cli-4x7k2s16.js";
 import {
   ALL_TOOL_NAMES,
   ASK_USER_QUESTIONS_TOOL_NAME,
@@ -83,16 +83,16 @@ import {
   validateDiscovery,
   webSearch,
   writePlan
-} from "./cli-zpdmnz8c.js";
-import"./cli-cc13ydyx.js";
+} from "./cli-d5vz4kyn.js";
+import"./cli-p4aht9hv.js";
 import"./cli-c8131c4q.js";
-import"./cli-z1dapp7v.js";
-import"./cli-8g5cwvbm.js";
-import"./cli-e6rgwtpb.js";
+import"./cli-bxtz3bdv.js";
+import"./cli-zgpj2mv1.js";
+import"./cli-f7d23ded.js";
 import"./cli-gpnb45ck.js";
-import"./cli-eptabm2j.js";
-import"./cli-88bhxzr1.js";
-import"./cli-0yptvbbm.js";
+import"./cli-kn9tst6t.js";
+import"./cli-hkegr688.js";
+import"./cli-w55v1bht.js";
 import"./cli-8rxa073f.js";
 export {
   writePlan,