@pensar/apex 2.2.0-canary.85a9da57 → 2.2.0-canary.a22f76de

package/build/{agent-n467bw8f.js → agent-0xx3yj8f.js}

@@ -4,19 +4,19 @@ import {
   buildPentestActiveTools,
   buildPentestPrompt,
   buildPentestSystemPrompt
-} from "./cli-6azgnarp.js";
+} from "./cli-0h6kq8ne.js";
 import"./cli-9fsre5pt.js";
-import"./cli-9489ah09.js";
-import"./cli-n9yjp8w4.js";
-import"./cli-draweqwg.js";
+import"./cli-eca3jmva.js";
+import"./cli-qeye81qv.js";
+import"./cli-pw576mmk.js";
 import"./cli-c8131c4q.js";
-import"./cli-dq4pfsaf.js";
-import"./cli-anr9cqj2.js";
+import"./cli-sg2b7w5j.js";
+import"./cli-m6db1s7m.js";
 import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-wvrke9n9.js";
-import"./cli-sp72n0rn.js";
-import"./cli-ahz5mbyf.js";
+import"./cli-1mc79bn9.js";
+import"./cli-36p7dcds.js";
+import"./cli-94zfkk4a.js";
 import"./cli-8rxa073f.js";
 export {
   buildPentestSystemPrompt,

package/build/{agent-9j0t23gh.js → agent-nt1gaxs0.js}

@@ -1,23 +1,23 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-n9yjp8w4.js";
+} from "./cli-qeye81qv.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-draweqwg.js";
+} from "./cli-pw576mmk.js";
 import"./cli-c8131c4q.js";
 import {
   init_dist,
   stepCountIs
-} from "./cli-dq4pfsaf.js";
-import"./cli-anr9cqj2.js";
+} from "./cli-sg2b7w5j.js";
+import"./cli-m6db1s7m.js";
 import {
   exports_external,
   init_zod
 } from "./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-wvrke9n9.js";
-import"./cli-sp72n0rn.js";
-import"./cli-ahz5mbyf.js";
+import"./cli-1mc79bn9.js";
+import"./cli-36p7dcds.js";
+import"./cli-94zfkk4a.js";
 import"./cli-8rxa073f.js";
 
 // src/core/agents/specialized/findingJudge/agent.ts

package/build/agent-s551dn9w.js

@@ -0,0 +1,19 @@
+import {
+  CodeAgent
+} from "./cli-hbp2jw8x.js";
+import"./cli-9fsre5pt.js";
+import"./cli-eca3jmva.js";
+import"./cli-qeye81qv.js";
+import"./cli-pw576mmk.js";
+import"./cli-c8131c4q.js";
+import"./cli-sg2b7w5j.js";
+import"./cli-m6db1s7m.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-1mc79bn9.js";
+import"./cli-36p7dcds.js";
+import"./cli-94zfkk4a.js";
+import"./cli-8rxa073f.js";
+export {
+  CodeAgent
+};

package/build/{apps-fgh1j83g.js → apps-6dfsp8hj.js}

@@ -12,27 +12,27 @@ import {
   searchEndpoints,
   updateApp,
   updateEndpoint
-} from "./cli-whg4krbb.js";
-import"./cli-m7se6ehn.js";
-import"./cli-zbhf6wnd.js";
-import"./cli-69xfj2a5.js";
-import"./cli-6azgnarp.js";
-import"./cli-r7pfx8my.js";
-import"./cli-yjbbecv8.js";
-import"./cli-fzhcb5ew.js";
+} from "./cli-v5z684jq.js";
+import"./cli-jzt9py6j.js";
+import"./cli-zf28yx2d.js";
+import"./cli-39mzrzxa.js";
+import"./cli-0h6kq8ne.js";
+import"./cli-mc5gw06k.js";
+import"./cli-hbp2jw8x.js";
+import"./cli-tf4gwejg.js";
 import"./cli-9fsre5pt.js";
-import"./cli-9489ah09.js";
-import"./cli-n9yjp8w4.js";
-import"./cli-draweqwg.js";
+import"./cli-eca3jmva.js";
+import"./cli-qeye81qv.js";
+import"./cli-pw576mmk.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-dq4pfsaf.js";
-import"./cli-anr9cqj2.js";
+import"./cli-sg2b7w5j.js";
+import"./cli-m6db1s7m.js";
 import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-wvrke9n9.js";
-import"./cli-sp72n0rn.js";
-import"./cli-ahz5mbyf.js";
+import"./cli-1mc79bn9.js";
+import"./cli-36p7dcds.js";
+import"./cli-94zfkk4a.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/apps.ts

package/build/{auth-mrtqpn8r.js → auth-bs2vzwsn.js}

@@ -1,20 +1,21 @@
 #!/usr/bin/env bun
-import"./cli-whg4krbb.js";
-import"./cli-m7se6ehn.js";
-import"./cli-zbhf6wnd.js";
-import"./cli-69xfj2a5.js";
-import"./cli-6azgnarp.js";
-import"./cli-r7pfx8my.js";
-import"./cli-yjbbecv8.js";
-import"./cli-fzhcb5ew.js";
+import"./cli-v5z684jq.js";
+import"./cli-jzt9py6j.js";
+import"./cli-zf28yx2d.js";
+import"./cli-39mzrzxa.js";
+import"./cli-0h6kq8ne.js";
+import"./cli-mc5gw06k.js";
+import"./cli-hbp2jw8x.js";
+import"./cli-tf4gwejg.js";
 import"./cli-9fsre5pt.js";
-import"./cli-9489ah09.js";
-import"./cli-n9yjp8w4.js";
-import"./cli-draweqwg.js";
+import"./cli-eca3jmva.js";
+import"./cli-qeye81qv.js";
+import"./cli-pw576mmk.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-dq4pfsaf.js";
+import"./cli-sg2b7w5j.js";
 import {
+  createWorkspaceSelection,
   disconnect,
   fetchWorkspaces,
   getPensarApiUrl,
@@ -24,17 +25,18 @@ import {
   pollForWorkspaceCreation,
   pollLegacyToken,
   pollWorkOSToken,
+  pollWorkspaceSelection,
   selectWorkspace,
   startDeviceFlow
-} from "./cli-anr9cqj2.js";
+} from "./cli-m6db1s7m.js";
 import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
 import {
   config,
   init_config
-} from "./cli-wvrke9n9.js";
-import"./cli-sp72n0rn.js";
-import"./cli-ahz5mbyf.js";
+} from "./cli-1mc79bn9.js";
+import"./cli-36p7dcds.js";
+import"./cli-94zfkk4a.js";
 import {
   __require
 } from "./cli-8rxa073f.js";
@@ -70,26 +72,16 @@ function prompt(question) {
     });
   });
 }
-async function promptWorkspaceSelection(workspaces) {
+async function selectWorkspaceInBrowser(apiUrl, accessToken) {
+  const selection = await createWorkspaceSelection(apiUrl, accessToken);
+  openUrl(selection.selectionUrl);
   console.log(`
-Select a workspace:
-`);
-  workspaces.forEach((ws, i) => {
-    console.log(`  ${i + 1}. ${ws.name} (${ws.slug}) — $${ws.balance.toFixed(2)}`);
-  });
-  const answer = await prompt(`
-Enter number (1-${workspaces.length}): `);
-  const index = parseInt(answer, 10) - 1;
-  if (Number.isNaN(index) || index < 0 || index >= workspaces.length) {
-    console.error("Invalid selection.");
-    process.exit(1);
-  }
-  const workspace = workspaces[index];
-  if (!workspace) {
-    console.error("Invalid selection.");
-    process.exit(1);
-  }
-  return workspace;
+You have multiple workspaces. Choose one in your browser to continue.
+If the browser didn't open, visit:
+  ${selection.selectionUrl}
+
+Waiting for workspace selection...`);
+  return pollWorkspaceSelection(apiUrl, accessToken, selection.selectionId);
 }
 async function login() {
   const appConfig = await config.get();
@@ -187,17 +179,18 @@ If the browser didn't open, visit: ${consoleUrl}/create-workspace?redirect=/cred
     console.log("Waiting for workspace creation...");
     workspaces = await pollForWorkspaceCreation(apiUrl, accessToken);
   }
-  let workspace;
+  let workspaceId;
   if (workspaces.length === 1) {
     const onlyWorkspace = workspaces[0];
     if (!onlyWorkspace) {
       throw new Error("No workspace available after workspace lookup");
     }
-    workspace = onlyWorkspace;
+    workspaceId = onlyWorkspace.id;
   } else {
-    workspace = await promptWorkspaceSelection(workspaces);
+    workspaceId = await selectWorkspaceInBrowser(apiUrl, accessToken);
   }
-  const result = await selectWorkspace(apiUrl, accessToken, workspace.id);
+  const result = await selectWorkspace(apiUrl, accessToken, workspaceId);
+  const workspace = result.workspace;
   await config.update({
     workspaceId: workspace.id,
     workspaceSlug: workspace.slug,

package/build/authentication-2qtekfz4.js

@@ -0,0 +1,19 @@
+import {
+  runAuthenticationAgent
+} from "./cli-mc5gw06k.js";
+import"./cli-9fsre5pt.js";
+import"./cli-eca3jmva.js";
+import"./cli-qeye81qv.js";
+import"./cli-pw576mmk.js";
+import"./cli-c8131c4q.js";
+import"./cli-sg2b7w5j.js";
+import"./cli-m6db1s7m.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-1mc79bn9.js";
+import"./cli-36p7dcds.js";
+import"./cli-94zfkk4a.js";
+import"./cli-8rxa073f.js";
+export {
+  runAuthenticationAgent
+};

package/build/blackboxAgent-zvvbea75.js

@@ -0,0 +1,19 @@
+import {
+  BlackboxAttackSurfaceAgent
+} from "./cli-zf28yx2d.js";
+import"./cli-9fsre5pt.js";
+import"./cli-eca3jmva.js";
+import"./cli-qeye81qv.js";
+import"./cli-pw576mmk.js";
+import"./cli-c8131c4q.js";
+import"./cli-sg2b7w5j.js";
+import"./cli-m6db1s7m.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-1mc79bn9.js";
+import"./cli-36p7dcds.js";
+import"./cli-94zfkk4a.js";
+import"./cli-8rxa073f.js";
+export {
+  BlackboxAttackSurfaceAgent
+};

package/build/{blackboxPentest-9d2hr7xv.js → blackboxPentest-kjgfhv3p.js}

@@ -1,24 +1,24 @@
 import {
   runPentestWorkflow
-} from "./cli-m7se6ehn.js";
-import"./cli-zbhf6wnd.js";
-import"./cli-69xfj2a5.js";
-import"./cli-6azgnarp.js";
-import"./cli-yjbbecv8.js";
-import"./cli-fzhcb5ew.js";
+} from "./cli-jzt9py6j.js";
+import"./cli-zf28yx2d.js";
+import"./cli-39mzrzxa.js";
+import"./cli-0h6kq8ne.js";
+import"./cli-hbp2jw8x.js";
+import"./cli-tf4gwejg.js";
 import"./cli-9fsre5pt.js";
-import"./cli-9489ah09.js";
-import"./cli-n9yjp8w4.js";
-import"./cli-draweqwg.js";
+import"./cli-eca3jmva.js";
+import"./cli-qeye81qv.js";
+import"./cli-pw576mmk.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-dq4pfsaf.js";
-import"./cli-anr9cqj2.js";
+import"./cli-sg2b7w5j.js";
+import"./cli-m6db1s7m.js";
 import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-wvrke9n9.js";
-import"./cli-sp72n0rn.js";
-import"./cli-ahz5mbyf.js";
+import"./cli-1mc79bn9.js";
+import"./cli-36p7dcds.js";
+import"./cli-94zfkk4a.js";
 import"./cli-8rxa073f.js";
 
 // src/core/api/blackboxPentest.ts

package/build/{cli-6azgnarp.js → cli-0h6kq8ne.js}

@@ -5,7 +5,7 @@ import {
   createReportErrorTool,
   isMemoryEnabled,
   readPlan
-} from "./cli-n9yjp8w4.js";
+} from "./cli-qeye81qv.js";
 import {
   createLogger,
   hasToolCall,
@@ -13,7 +13,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-dq4pfsaf.js";
+} from "./cli-sg2b7w5j.js";
 import {
   exports_external,
   init_zod

package/build/{cli-wvrke9n9.js → cli-1mc79bn9.js}

@@ -3,7 +3,7 @@ import {
   init,
   init_config,
   update
-} from "./cli-sp72n0rn.js";
+} from "./cli-36p7dcds.js";
 import {
   __esm
 } from "./cli-8rxa073f.js";

package/build/{cli-sp72n0rn.js → cli-36p7dcds.js}

@@ -1,7 +1,7 @@
 import {
   getCurrentVersion,
   init_installation
-} from "./cli-ahz5mbyf.js";
+} from "./cli-94zfkk4a.js";
 import {
   __esm
 } from "./cli-8rxa073f.js";
@@ -38,6 +38,7 @@ function applyEnvFallbacks(parsedConfig) {
     ...parsedConfig,
     responsibleUseAccepted: parsedConfig.responsibleUseAccepted ?? false,
     defaultHeaders: parsedConfig.defaultHeaders ?? DEFAULT_CONFIG.defaultHeaders,
+    strikeMode: parsedConfig.strikeMode ?? DEFAULT_CONFIG.strikeMode,
     surfaceIntegrationEnabled: parsedConfig.surfaceIntegrationEnabled ?? parseBoolEnv(process.env.PENSAR_SURFACE_INTEGRATION),
     version,
     openAiAPIKey: parsedConfig.openAiAPIKey ?? process.env.OPENAI_API_KEY,
@@ -78,7 +79,8 @@ var init_config = __esm(() => {
   init_installation();
   DEFAULT_CONFIG = {
     responsibleUseAccepted: false,
-    defaultHeaders: { "User-Agent": "pensar-apex" }
+    defaultHeaders: { "User-Agent": "pensar-apex" },
+    strikeMode: false
   };
 });
 

package/build/{cli-69xfj2a5.js → cli-39mzrzxa.js}

@@ -1,11 +1,11 @@
 import {
   EvidenceFileEntrySchema
-} from "./cli-9489ah09.js";
+} from "./cli-eca3jmva.js";
 import {
   CweEntrySchema,
   ValidatedCweEntrySchema,
   hasCanonicalName
-} from "./cli-n9yjp8w4.js";
+} from "./cli-qeye81qv.js";
 import {
   exports_external,
   init_zod

package/build/{cli-ahz5mbyf.js → cli-94zfkk4a.js}

@@ -120,7 +120,7 @@ var init_package = __esm(() => {
       tsc: "tsc --noEmit"
     },
     type: "module",
-    version: "2.2.0-canary.85a9da57"
+    version: "2.2.0-canary.a22f76de"
   };
 });
 

package/build/{cli-tqj2cwed.js → cli-c3njdv5t.js}

@@ -3,7 +3,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-dq4pfsaf.js";
+} from "./cli-sg2b7w5j.js";
 
 // src/core/integrations/wandb/client.ts
 init_structured();

package/build/{cli-9489ah09.js → cli-eca3jmva.js}

@@ -1,7 +1,7 @@
 import {
   CweEntrySchema,
   ValidatedCweEntrySchema
-} from "./cli-n9yjp8w4.js";
+} from "./cli-qeye81qv.js";
 import {
   exports_external,
   init_zod

package/build/{cli-yjbbecv8.js → cli-hbp2jw8x.js}

@@ -1,10 +1,10 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-n9yjp8w4.js";
+} from "./cli-qeye81qv.js";
 import {
   init_dist,
   stepCountIs
-} from "./cli-dq4pfsaf.js";
+} from "./cli-sg2b7w5j.js";
 
 // src/core/agents/specialized/codeAgent/agent.ts
 init_dist();

package/build/{cli-m7se6ehn.js → cli-jzt9py6j.js}

@@ -1,20 +1,20 @@
 import {
   BlackboxAttackSurfaceAgent
-} from "./cli-zbhf6wnd.js";
+} from "./cli-zf28yx2d.js";
 import {
   REPORT_FILENAME_JSON,
   REPORT_FILENAME_MD,
   buildPentestReport,
   renderJson,
   renderMarkdown
-} from "./cli-69xfj2a5.js";
+} from "./cli-39mzrzxa.js";
 import {
   TargetedPentestAgent,
   buildPentestSystemPrompt
-} from "./cli-6azgnarp.js";
+} from "./cli-0h6kq8ne.js";
 import {
   CodeAgent
-} from "./cli-yjbbecv8.js";
+} from "./cli-hbp2jw8x.js";
 import {
   AppsDiscoveryResultSchema,
   DiscoverySummarySchema,
@@ -22,7 +22,7 @@ import {
   WHITEBOX_APPS_DISCOVERY_SYSTEM_PROMPT,
   WHITEBOX_DISCOVERY_SYSTEM_PROMPT,
   WHITEBOX_ENDPOINT_DOCUMENTATION_SYSTEM_PROMPT
-} from "./cli-fzhcb5ew.js";
+} from "./cli-tf4gwejg.js";
 import {
   FindingsRegistry,
   OffensiveSecurityAgent,
@@ -31,7 +31,7 @@ import {
   pLimit,
   runWithBoundedConcurrency,
   toGrpcPentestContext
-} from "./cli-n9yjp8w4.js";
+} from "./cli-qeye81qv.js";
 import {
   createThreatModelPrompt
 } from "./cli-fw5r7pfj.js";
@@ -45,7 +45,7 @@ import {
   init_structured,
   newSessionId,
   scopedLogger
-} from "./cli-dq4pfsaf.js";
+} from "./cli-sg2b7w5j.js";
 import {
   __require
 } from "./cli-8rxa073f.js";
@@ -7786,7 +7786,7 @@ async function runPentestSwarm(input) {
 }
 async function runPentestWorkflow(input) {
   if (input.fastStrike) {
-    const { runFastStrike } = await import("./fastStrike-e5hdhz84.js");
+    const { runFastStrike } = await import("./fastStrike-edc7xxg6.js");
     return runFastStrike(input);
   }
   const {

package/build/{cli-anr9cqj2.js → cli-m6db1s7m.js}

@@ -1,7 +1,7 @@
 import {
   config,
   init_config
-} from "./cli-wvrke9n9.js";
+} from "./cli-1mc79bn9.js";
 import {
   __esm
 } from "./cli-8rxa073f.js";
@@ -350,6 +350,55 @@ async function selectWorkspace(apiUrl, accessToken, workspaceId) {
   }
   return await response.json();
 }
+async function createWorkspaceSelection(apiUrl, accessToken) {
+  const response = await fetch(`${apiUrl}/api/cli/workspace-selection`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${accessToken}`
+    }
+  });
+  if (!response.ok) {
+    throw new Error("Failed to start workspace selection");
+  }
+  return await response.json();
+}
+async function pollWorkspaceSelection(apiUrl, accessToken, selectionId, signal) {
+  const POLL_INTERVAL = 3000;
+  const TIMEOUT = 10 * 60 * 1000;
+  const deadline = Date.now() + TIMEOUT;
+  while (Date.now() < deadline) {
+    if (signal?.aborted)
+      throw new Error("Cancelled");
+    await sleep2(POLL_INTERVAL);
+    if (signal?.aborted)
+      throw new Error("Cancelled");
+    try {
+      const response = await fetch(`${apiUrl}/api/cli/workspace-selection?id=${encodeURIComponent(selectionId)}`, {
+        headers: { Authorization: `Bearer ${accessToken}` }
+      });
+      if (!response.ok)
+        continue;
+      const data = await response.json();
+      if (data.status === "complete" && data.workspaceId) {
+        return data.workspaceId;
+      }
+      if (data.status === "expired") {
+        throw new Error("Workspace selection expired. Please run `pensar login` again.");
+      }
+    } catch (err) {
+      if (signal?.aborted)
+        throw new Error("Cancelled");
+      if (err instanceof Error && err.message.includes("Please try again")) {
+        throw err;
+      }
+      if (err instanceof Error && err.message.includes("expired")) {
+        throw err;
+      }
+    }
+  }
+  throw new Error("Workspace selection timed out. Please try again.");
+}
 var init_workspaces = () => {};
 
 // src/core/auth/index.ts
@@ -362,4 +411,4 @@ var init_auth = __esm(() => {
   init_workspaces();
 });
 
-export { getPensarApiUrl, getPensarGatewayUrl, getPensarConsoleUrl, init_constants, isConnected, disconnect, startDeviceFlow, pollWorkOSToken, pollLegacyToken, isTokenExpired, ensureValidToken, validateGateway, signGatewayRequest, fetchWorkspaces, pollForWorkspaceCreation, selectWorkspace, init_auth };
+export { getPensarApiUrl, getPensarGatewayUrl, getPensarConsoleUrl, init_constants, isConnected, disconnect, startDeviceFlow, pollWorkOSToken, pollLegacyToken, isTokenExpired, ensureValidToken, validateGateway, signGatewayRequest, fetchWorkspaces, pollForWorkspaceCreation, selectWorkspace, createWorkspaceSelection, pollWorkspaceSelection, init_auth };

package/build/{cli-r7pfx8my.js → cli-mc5gw06k.js}

@@ -1,9 +1,9 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-n9yjp8w4.js";
+} from "./cli-qeye81qv.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-draweqwg.js";
+} from "./cli-pw576mmk.js";
 import {
   createLogger,
   hasToolCall,
@@ -11,7 +11,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-dq4pfsaf.js";
+} from "./cli-sg2b7w5j.js";
 
 // src/core/agents/specialized/authenticationAgent/agent.ts
 init_dist();

package/build/{cli-draweqwg.js → cli-pw576mmk.js}

@@ -3,7 +3,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-dq4pfsaf.js";
+} from "./cli-sg2b7w5j.js";
 
 // src/core/agents/specialized/utils.ts
 import { execSync } from "node:child_process";