@pensar/apex 2.2.0 → 2.3.0-canary.545f12fe

package/build/{cli-4tc6888c.js → cli-683adz4a.js}

@@ -1,7 +1,7 @@
 import {
   config,
   init_config
-} from "./cli-51dkmt5p.js";
+} from "./cli-e2qdjmmk.js";
 import {
   __esm
 } from "./cli-8rxa073f.js";
@@ -350,6 +350,55 @@ async function selectWorkspace(apiUrl, accessToken, workspaceId) {
   }
   return await response.json();
 }
+async function createWorkspaceSelection(apiUrl, accessToken) {
+  const response = await fetch(`${apiUrl}/api/cli/workspace-selection`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${accessToken}`
+    }
+  });
+  if (!response.ok) {
+    throw new Error("Failed to start workspace selection");
+  }
+  return await response.json();
+}
+async function pollWorkspaceSelection(apiUrl, accessToken, selectionId, signal) {
+  const POLL_INTERVAL = 3000;
+  const TIMEOUT = 10 * 60 * 1000;
+  const deadline = Date.now() + TIMEOUT;
+  while (Date.now() < deadline) {
+    if (signal?.aborted)
+      throw new Error("Cancelled");
+    await sleep2(POLL_INTERVAL);
+    if (signal?.aborted)
+      throw new Error("Cancelled");
+    try {
+      const response = await fetch(`${apiUrl}/api/cli/workspace-selection?id=${encodeURIComponent(selectionId)}`, {
+        headers: { Authorization: `Bearer ${accessToken}` }
+      });
+      if (!response.ok)
+        continue;
+      const data = await response.json();
+      if (data.status === "complete" && data.workspaceId) {
+        return data.workspaceId;
+      }
+      if (data.status === "expired") {
+        throw new Error("Workspace selection expired. Please run `pensar login` again.");
+      }
+    } catch (err) {
+      if (signal?.aborted)
+        throw new Error("Cancelled");
+      if (err instanceof Error && err.message.includes("Please try again")) {
+        throw err;
+      }
+      if (err instanceof Error && err.message.includes("expired")) {
+        throw err;
+      }
+    }
+  }
+  throw new Error("Workspace selection timed out. Please try again.");
+}
 var init_workspaces = () => {};
 
 // src/core/auth/index.ts
@@ -362,4 +411,4 @@ var init_auth = __esm(() => {
   init_workspaces();
 });
 
-export { getPensarApiUrl, getPensarGatewayUrl, getPensarConsoleUrl, init_constants, isConnected, disconnect, startDeviceFlow, pollWorkOSToken, pollLegacyToken, isTokenExpired, ensureValidToken, validateGateway, signGatewayRequest, fetchWorkspaces, pollForWorkspaceCreation, selectWorkspace, init_auth };
+export { getPensarApiUrl, getPensarGatewayUrl, getPensarConsoleUrl, init_constants, isConnected, disconnect, startDeviceFlow, pollWorkOSToken, pollLegacyToken, isTokenExpired, ensureValidToken, validateGateway, signGatewayRequest, fetchWorkspaces, pollForWorkspaceCreation, selectWorkspace, createWorkspaceSelection, pollWorkspaceSelection, init_auth };

package/build/{cli-xpn9tsw0.js → cli-aqn5axrc.js}

@@ -1,9 +1,9 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-xbdn034b.js";
+} from "./cli-3q59v60j.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-s43t5ay0.js";
+} from "./cli-f1fn45dm.js";
 import {
   createLogger,
   hasToolCall,
@@ -11,7 +11,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-6kx46ck0.js";
+} from "./cli-2b1fcxrx.js";
 
 // src/core/agents/specialized/authenticationAgent/agent.ts
 init_dist();

package/build/{cli-1f636vzd.js → cli-atjcbeyz.js}

@@ -120,7 +120,7 @@ var init_package = __esm(() => {
       tsc: "tsc --noEmit"
     },
     type: "module",
-    version: "2.2.0"
+    version: "2.3.0-canary.545f12fe"
   };
 });
 

package/build/{cli-1re2kv5v.js → cli-b8djymsb.js}

@@ -1,14 +1,14 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-xbdn034b.js";
+} from "./cli-3q59v60j.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-s43t5ay0.js";
+} from "./cli-f1fn45dm.js";
 import {
   hasToolCall,
   init_dist,
   stepCountIs
-} from "./cli-6kx46ck0.js";
+} from "./cli-2b1fcxrx.js";
 
 // src/core/agents/specialized/attackSurface/blackboxAgent.ts
 init_dist();

package/build/{cli-ptzy9ak5.js → cli-cj6gf45y.js}

@@ -1,7 +1,7 @@
 import {
   CweEntrySchema,
   ValidatedCweEntrySchema
-} from "./cli-xbdn034b.js";
+} from "./cli-3q59v60j.js";
 import {
   exports_external,
   init_zod

package/build/{cli-vgg6h2ax.js → cli-df54tdaz.js}

@@ -3,7 +3,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-6kx46ck0.js";
+} from "./cli-2b1fcxrx.js";
 
 // src/core/integrations/wandb/client.ts
 init_structured();

package/build/{cli-51dkmt5p.js → cli-e2qdjmmk.js}

@@ -3,7 +3,7 @@ import {
   init,
   init_config,
   update
-} from "./cli-7n43wz82.js";
+} from "./cli-1xqq625p.js";
 import {
   __esm
 } from "./cli-8rxa073f.js";

package/build/{cli-s43t5ay0.js → cli-f1fn45dm.js}

@@ -3,7 +3,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-6kx46ck0.js";
+} from "./cli-2b1fcxrx.js";
 
 // src/core/agents/specialized/utils.ts
 import { execSync } from "node:child_process";

package/build/{cli-knqx15w6.js → cli-fdh49tvn.js}

@@ -1,10 +1,10 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-xbdn034b.js";
+} from "./cli-3q59v60j.js";
 import {
   init_dist,
   stepCountIs
-} from "./cli-6kx46ck0.js";
+} from "./cli-2b1fcxrx.js";
 
 // src/core/agents/specialized/codeAgent/agent.ts
 init_dist();

package/build/{cli-7e5ad5js.js → cli-jqfbbpvp.js}

@@ -2,11 +2,11 @@ import {
   EndpointTransportEnum,
   GrpcEndpointMetadataSchema,
   OffensiveSecurityAgent
-} from "./cli-xbdn034b.js";
+} from "./cli-3q59v60j.js";
 import {
   hasToolCall,
   init_dist
-} from "./cli-6kx46ck0.js";
+} from "./cli-2b1fcxrx.js";
 import {
   exports_external,
   init_zod,

package/build/{cli-tz9yg4ew.js → cli-nkgncst6.js}

@@ -1,20 +1,20 @@
 import {
   BlackboxAttackSurfaceAgent
-} from "./cli-1re2kv5v.js";
+} from "./cli-b8djymsb.js";
 import {
   REPORT_FILENAME_JSON,
   REPORT_FILENAME_MD,
   buildPentestReport,
   renderJson,
   renderMarkdown
-} from "./cli-2jn8104w.js";
+} from "./cli-08ebfe16.js";
 import {
   TargetedPentestAgent,
   buildPentestSystemPrompt
-} from "./cli-n114n8mk.js";
+} from "./cli-1dpatpjw.js";
 import {
   CodeAgent
-} from "./cli-knqx15w6.js";
+} from "./cli-fdh49tvn.js";
 import {
   AppsDiscoveryResultSchema,
   DiscoverySummarySchema,
@@ -22,7 +22,7 @@ import {
   WHITEBOX_APPS_DISCOVERY_SYSTEM_PROMPT,
   WHITEBOX_DISCOVERY_SYSTEM_PROMPT,
   WHITEBOX_ENDPOINT_DOCUMENTATION_SYSTEM_PROMPT
-} from "./cli-7e5ad5js.js";
+} from "./cli-jqfbbpvp.js";
 import {
   FindingsRegistry,
   OffensiveSecurityAgent,
@@ -31,7 +31,7 @@ import {
   pLimit,
   runWithBoundedConcurrency,
   toGrpcPentestContext
-} from "./cli-xbdn034b.js";
+} from "./cli-3q59v60j.js";
 import {
   createThreatModelPrompt
 } from "./cli-fw5r7pfj.js";
@@ -45,7 +45,7 @@ import {
   init_structured,
   newSessionId,
   scopedLogger
-} from "./cli-6kx46ck0.js";
+} from "./cli-2b1fcxrx.js";
 import {
   __require
 } from "./cli-8rxa073f.js";
@@ -7786,7 +7786,7 @@ async function runPentestSwarm(input) {
 }
 async function runPentestWorkflow(input) {
   if (input.fastStrike) {
-    const { runFastStrike } = await import("./fastStrike-9tm6bedh.js");
+    const { runFastStrike } = await import("./fastStrike-7ptrz6qt.js");
     return runFastStrike(input);
   }
   const {

package/build/{cli-1cf5vy5m.js → cli-qq5tzdaf.js}

@@ -4,19 +4,19 @@ import {
   OffensiveSecurityAgent,
   SKILL_TOOL_NAMES,
   buildBaseSystemPrompt
-} from "./cli-xbdn034b.js";
+} from "./cli-3q59v60j.js";
 import {
   init_dist,
   init_session,
   sessions,
   stepCountIs
-} from "./cli-6kx46ck0.js";
+} from "./cli-2b1fcxrx.js";
 import {
   ensureValidToken,
   getPensarApiUrl,
   init_auth,
   init_constants
-} from "./cli-4tc6888c.js";
+} from "./cli-683adz4a.js";
 import {
   exports_external,
   init_zod
@@ -24,7 +24,7 @@ import {
 import {
   config,
   init_config
-} from "./cli-51dkmt5p.js";
+} from "./cli-e2qdjmmk.js";
 import {
   __commonJS,
   __require
@@ -7135,6 +7135,12 @@ async function updateIssue(issueId, data) {
 async function retestIssue(issueId) {
   return apiRequest("POST", `/issues/${issueId}/retest`);
 }
+async function linkPullRequest(issueId, url) {
+  return apiRequest("POST", `/issues/${issueId}/pull-requests`, { url });
+}
+async function listIssuePullRequests(issueId) {
+  return apiRequest("GET", `/issues/${issueId}/pull-requests`);
+}
 async function listFixes(issueId) {
   return apiRequest("GET", `/issues/${issueId}/fixes`);
 }
@@ -7322,46 +7328,60 @@ async function runOffensiveSecurityAgent(input) {
   return { streamResult: agent.streamResult, session: agent.session };
 }
 // src/core/agents/specialized/patching/prompts.ts
-var PREAMBLE2 = `You are an expert security vulnerability patching agent. Your goal is to analyze security vulnerabilities, provide high-quality fixes, and verify the fixes don't break existing functionality.`;
+var PREAMBLE2 = `You are an expert security vulnerability patching agent — an autonomous coding agent specialized in fixing security issues. Your goal is to analyze security vulnerabilities, apply high-quality fixes, verify they don't break existing functionality, and return structured PR metadata.`;
 var ORIENT_STEP = `1. **Orient Yourself**:
-   - Review the AGENTS.md / project documentation provided in your prompt for build, lint, and test commands
-   - Use list_files to explore the repository structure
+   - Read the project instructions (AGENTS.md / CLAUDE.md) provided in your prompt in full. They are authoritative for this repository: coding conventions, architectural rules, error-handling policy, forbidden patterns, AND the exact build/lint/test commands
+   - Use glob / list_files to explore the repository structure (prefer glob for pattern searches like "**/*.ts")
    - Read package.json, Makefile, or equivalent to understand the project's toolchain
-   - Identify the lint command, test command, type-check command, and any other verification scripts`;
-var UNDERSTAND_STEP = `2. **Understand the Vulnerability**: 
+   - Identify the lint command, test command, type-check command, and any other verification scripts
+   - Optionally call profile_codebase for a high-level map of the repo`;
+var TASK_STEP = `2. **Track Work with Tasks**:
+   - Use create_task early to decompose the job into concrete steps (orient, understand, edit, verify, finalize)
+   - Update tasks with update_task as you progress (in_progress → completed / failed)
+   - Use list_tasks when you need to recall what's left
+   - Keep tasks atomic — one clear outcome per task`;
+var UNDERSTAND_STEP = `3. **Understand the Vulnerability**:
    - Carefully read the vulnerability description, CWE mappings, and any dataflow analysis provided
    - Understand the root cause: What makes this code vulnerable?
    - Identify the attack vector: How would an attacker exploit this?
-   - Consider the context: What is the application trying to do?`;
-var REVIEW_STEP = `3. **Review the Code**:
+   - Consider the context: What is the application trying to do?
+   - Use web_search / get_page when you need framework-specific security guidance or CVE details`;
+var REVIEW_STEP = `4. **Review the Code**:
    - Use read_file to read the vulnerable file(s) mentioned in the issue
-   - Use grep to search for related code patterns, similar vulnerabilities, or existing security controls
+   - Use grep or run_code_query for structural searches (rg / ast-grep) across related patterns
    - Review related files: imports, dependencies, configuration files
    - Understand the data flow: Where does user input come from? Where does it go?`;
-var PLAN_STEP = `4. **Plan Your Fix**:
+var PLAN_STEP = `5. **Plan Your Fix**:
    - Identify the exact code that needs to change
    - Determine the appropriate security control (input validation, parameterized queries, access control, etc.)
    - Consider side effects: Will this break existing functionality?
    - Think about edge cases: What other inputs or scenarios need to be handled?
    - Look for framework-specific or language-specific best practices
-   - State your complete plan clearly before making changes`;
-var APPLY_STEP = `5. **Apply the Patch**:
-   - Use update_file to modify existing files with your security fixes
+   - State your complete plan clearly before making changes, and reflect it in your task list`;
+var APPLY_STEP = `6. **Apply the Patch**:
+   - Prefer update_file for small, exact string replacements
+   - Prefer apply_patch (unified diff) for multi-hunk or multi-file edits
    - Use create_file if you need to add new security utilities or middleware
+   - Use delete_file only when removing obsolete insecure code that is truly unused
    - Make minimal, targeted changes — don't refactor unrelated code
-   - Follow the existing code style and conventions
+   - Follow the existing code style and conventions, and any rules stated in the project instructions
    - Ensure your changes integrate cleanly with the existing codebase`;
-var RESTART_STEP = `6. **Restart Dev Environment** (if applicable):
+var GIT_STEP = `7. **Self-Check with Git**:
+   - Use git_status to see which files changed
+   - Use git_diff to review the exact patch before verification
+   - Do NOT commit, push, or open a PR — the host handles that after you finalize`;
+var RESTART_STEP = `8. **Restart Dev Environment** (if applicable):
    - Use execute_command to restart any dev servers or services so your changes are loaded
    - Wait for the services to become healthy`;
-var VERIFY_STEP = `7. **Verify the Patch**:
+var VERIFY_STEP = `9. **Verify the Patch**:
    - Use execute_command to run the project's lint command (e.g. \`npm run lint\`, \`ruff check\`, \`cargo clippy\`)
    - Use execute_command to run the project's type-check command if applicable (e.g. \`npx tsc --noEmit\`, \`mypy\`)
    - Use execute_command to run the project's test suite (e.g. \`npm test\`, \`pytest\`, \`cargo test\`)
    - If a Proof of Concept (POC) is provided, run it to verify the vulnerability is fixed — the POC should FAIL (non-zero exit code) after a successful patch
    - If any check fails, read the error output carefully, fix the issues, and re-run until all checks pass
    - If the project has no clear lint/test commands, at minimum verify the changed files parse correctly (e.g. \`node -c file.js\`, \`python -m py_compile file.py\`)`;
-var FINALIZE_STEP = `8. **Finalize**:
+var FINALIZE_STEP = `10. **Finalize**:
+   - Mark remaining tasks completed
    - Use the response tool to complete the patching process
    - Provide a clear, detailed summary of:
      * Each file you changed and why
@@ -7428,12 +7448,18 @@ var SECURITY_BEST_PRACTICES = `# Security Best Practices by Vulnerability Type
 - Remove sensitive data from client-side code`;
 var TOOL_USAGE2 = `# Tool Usage
 
-- **list_files**: Explore directory structure and find relevant files
+- **glob**: Find files by pattern (e.g. "**/*.ts", "**/package.json")
+- **list_files**: Explore directory structure
 - **read_file**: Read file contents to understand code
-- **grep**: Search for patterns across the codebase
-- **update_file**: Modify existing files with security fixes
-- **create_file**: Create new files if needed (utilities, middleware, etc.)
-- **execute_command**: Run shell commands — use for linting, type-checking, running tests, restarting services, running POCs, installing dependencies, and verifying your changes
+- **grep** / **run_code_query**: Search for patterns (run_code_query supports rg / ast-grep / comby)
+- **profile_codebase**: High-level codebase map when orientation is hard
+- **web_search** / **get_page**: Look up CVE details, framework security docs
+- **create_task** / **update_task** / **list_tasks**: Todo tracking for the run
+- **update_file**: Small exact search-and-replace edits
+- **apply_patch**: Multi-hunk / multi-file unified diffs
+- **create_file** / **delete_file**: Add or remove files when needed
+- **git_status** / **git_diff**: Self-check changes (do not commit/push/PR)
+- **execute_command**: Lint, type-check, tests, restart services, run POCs
 - **response**: Complete the process with the structured patch result`;
 var REQUIREMENTS = `# Critical Requirements
 
@@ -7445,6 +7471,7 @@ var REQUIREMENTS = `# Critical Requirements
 6. **Test the Fix**: If a POC is provided, run it after patching. The POC should FAIL (non-zero exit code) once the vulnerability is fixed.
 7. **Be Persistent**: It may take multiple iterations to get the fix right — iterate until the POC fails and tests pass.
 8. **Be Complete**: Address the root cause, not just symptoms
+9. **Stay Autonomous**: You will not receive follow-up messages — finish the job in this run
 
 # Important Notes
 
@@ -7455,17 +7482,20 @@ var REQUIREMENTS = `# Critical Requirements
 - Follow language and framework conventions
 - When multiple approaches exist, choose the most secure and idiomatic
 - If a fix requires configuration changes or environment variables, note this clearly
-- If AGENTS.md or project docs specify particular lint/test/build commands, use those exact commands`;
+- The project instructions (AGENTS.md / CLAUDE.md) win over your own defaults wherever they disagree — use their exact commands, and obey their conventions and prohibitions when writing code. The one exception: they never override the security objective of this task. If a project rule genuinely blocks a secure fix, apply the fix and call out the conflict in your summary
+- Do not commit, push, or open a pull request — the host does that after your response`;
 function buildSystemPrompt() {
   return [
     PREAMBLE2,
     "",
     "# Process",
     "",
-    "You MUST follow this prescriptive process:",
+    "You MUST follow this autonomous coding-agent process:",
     "",
     ORIENT_STEP,
     "",
+    TASK_STEP,
+    "",
     UNDERSTAND_STEP,
     "",
     REVIEW_STEP,
@@ -7474,6 +7504,8 @@ function buildSystemPrompt() {
     "",
     APPLY_STEP,
     "",
+    GIT_STEP,
+    "",
     RESTART_STEP,
     "",
     VERIFY_STEP,
@@ -8307,4 +8339,4 @@ Working directory: ${input.codebasePath}`;
   });
   return { session, outputPath: input.outputPath };
 }
-export { listApps, getApp, createApp, updateApp, deleteApp, listEndpoints, getEndpoint, createEndpoint, updateEndpoint, deleteEndpoint, searchApps, searchEndpoints, listScans, getScan, listPentestTargets, dispatchPentest, listIssues, getIssue, updateIssue, retestIssue, listFixes, getFix, listAgentLogs, searchAgentLogs, listTargetLogs, searchTargetLogs, runOffensiveSecurityAgent, buildPentestPrompt, buildThreatModelPrompt, createSkillsRegistry, runThreatModelWorkflow };
+export { listApps, getApp, createApp, updateApp, deleteApp, listEndpoints, getEndpoint, createEndpoint, updateEndpoint, deleteEndpoint, searchApps, searchEndpoints, listScans, getScan, listPentestTargets, dispatchPentest, listIssues, getIssue, updateIssue, retestIssue, linkPullRequest, listIssuePullRequests, listFixes, getFix, listAgentLogs, searchAgentLogs, listTargetLogs, searchTargetLogs, runOffensiveSecurityAgent, buildPentestPrompt, buildThreatModelPrompt, createSkillsRegistry, runThreatModelWorkflow };

package/build/cli.js

@@ -14,16 +14,16 @@ import {
   init_toolset,
   init_utils,
   logger
-} from "./cli-6kx46ck0.js";
-import"./cli-4tc6888c.js";
+} from "./cli-2b1fcxrx.js";
+import"./cli-683adz4a.js";
 import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-51dkmt5p.js";
-import"./cli-7n43wz82.js";
+import"./cli-e2qdjmmk.js";
+import"./cli-1xqq625p.js";
 import {
   init_package,
   package_default
-} from "./cli-1f636vzd.js";
+} from "./cli-atjcbeyz.js";
 import {
   __require,
   __toESM
@@ -144,7 +144,7 @@ var package_default2 = {
     tsc: "tsc --noEmit"
   },
   type: "module",
-  version: "2.2.0"
+  version: "2.3.0-canary.545f12fe"
 };
 
 // src/core/ai/index.ts
@@ -299,13 +299,18 @@ class AgentEventBus {
         });
         break;
       case "reasoning-start":
-        this.emit("reasoning-start", { subagentId });
+        this.emit("reasoning-start", { subagentId, sessionId, messageId });
         break;
       case "reasoning-delta":
-        this.emit("reasoning-delta", { text: chunk.text, subagentId });
+        this.emit("reasoning-delta", {
+          text: chunk.text,
+          subagentId,
+          sessionId,
+          messageId
+        });
         break;
       case "reasoning-end":
-        this.emit("reasoning-end", { subagentId });
+        this.emit("reasoning-end", { subagentId, sessionId, messageId });
         break;
       case "tool-input-start":
         this.emit("tool-call-start", {
@@ -587,7 +592,7 @@ function attachCliAgentStreamListeners(bus) {
 async function createInstrumentedBus(session) {
   const bus = new AgentEventBus;
   attachCliAgentStreamListeners(bus);
-  const { attachWandbToEventBus } = await import("./upload-x7etpfp4.js");
+  const { attachWandbToEventBus } = await import("./upload-nskdz2y3.js");
   const wandbCleanup = await attachWandbToEventBus(session, bus).catch((e) => {
     console.warn("[wandb] Tracing disabled:", e.message);
     return null;
@@ -604,7 +609,7 @@ async function resolveCliHeaders() {
   const { parseHeaderLine: parseHeaderLine2, parseHeadersFromFile, formatParseError: formatParseError2 } = await import("./parse-7djk9jyf.js");
   const merged = {};
   if (!noGlobal) {
-    const { config: appConfig } = await import("./index-31rwrakh.js");
+    const { config: appConfig } = await import("./index-532vvmaf.js");
     const cfg = await appConfig.get();
     if (cfg.defaultHeaders) {
       Object.assign(merged, cfg.defaultHeaders);
@@ -638,8 +643,8 @@ async function resolveCliModel() {
   const explicit = getArg("--model");
   if (explicit)
     return explicit;
-  const { config: appConfig } = await import("./index-31rwrakh.js");
-  const { getDefaultModelForConfig } = await import("./utils-kw6yh5yn.js");
+  const { config: appConfig } = await import("./index-532vvmaf.js");
+  const { getDefaultModelForConfig } = await import("./utils-r7ndrdsp.js");
   const pensarConfig = await appConfig.get();
   const defaultModel = getDefaultModelForConfig(pensarConfig);
   if (!defaultModel) {
@@ -727,9 +732,9 @@ Global options:
 async function runPentest() {
   const { config } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config();
-  const { runPentestAgent } = await import("./blackboxPentest-h28nykk5.js");
-  const { sessions: sessions2 } = await import("./index-6dbym5jy.js");
-  const { config: appConfig } = await import("./index-31rwrakh.js");
+  const { runPentestAgent } = await import("./blackboxPentest-yej2rznw.js");
+  const { sessions: sessions2 } = await import("./index-hnecr3bj.js");
+  const { config: appConfig } = await import("./index-532vvmaf.js");
   const target = getArgRequired("--target");
   const cwd = getArg("--cwd");
   const mode = getArg("--mode");
@@ -805,9 +810,9 @@ Report:    ${reportPath}` : ""}`);
 async function runTargetedPentest() {
   const { config } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config();
-  const { runTargetedPentestAgent } = await import("./targetedPentest-3x13kqvc.js");
-  const { sessions: sessions2 } = await import("./index-6dbym5jy.js");
-  const { config: appConfig } = await import("./index-31rwrakh.js");
+  const { runTargetedPentestAgent } = await import("./targetedPentest-rpwgc6wf.js");
+  const { sessions: sessions2 } = await import("./index-hnecr3bj.js");
+  const { config: appConfig } = await import("./index-532vvmaf.js");
   const target = getArgRequired("--target");
   const objectives = getAllArgs("--objective");
   const pensarConfig = await appConfig.get();
@@ -859,8 +864,8 @@ POCs:      ${pocsPath}`);
 async function runThreatModel() {
   const { config } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config();
-  const { runThreatModelWorkflow } = await import("./threatModel-7f02av7y.js");
-  const { config: appConfig } = await import("./index-31rwrakh.js");
+  const { runThreatModelWorkflow } = await import("./threatModel-5h24gh6m.js");
+  const { config: appConfig } = await import("./index-532vvmaf.js");
   const path2 = await import("path");
   const pensarConfig = await appConfig.get();
   const model = await resolveCliModel();
@@ -896,10 +901,10 @@ Threat model written to: ${resolvedPath}`);
 async function runOperator() {
   const { config } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
   config();
-  const { runOffensiveSecurityAgent } = await import("./offesecAgent-7m9smy0t.js");
-  const { sessions: sessions2, normalizeMessages, getResumeMessages } = await import("./index-6dbym5jy.js");
-  const { ALL_TOOL_NAMES, SKILL_TOOL_NAMES } = await import("./index-4hqbyzf5.js");
-  const { config: appConfig } = await import("./index-31rwrakh.js");
+  const { runOffensiveSecurityAgent } = await import("./offesecAgent-zsc5vrek.js");
+  const { sessions: sessions2, normalizeMessages, getResumeMessages } = await import("./index-hnecr3bj.js");
+  const { ALL_TOOL_NAMES, SKILL_TOOL_NAMES } = await import("./index-9qd1rtbs.js");
+  const { config: appConfig } = await import("./index-532vvmaf.js");
   const { createInterface } = await import("readline");
   const { readFileSync: readFileSync2, existsSync } = await import("fs");
   const path2 = await import("path");
@@ -1013,35 +1018,35 @@ if (hasFlag("-p") || command === "--prompt") {
   await runTargetedPentest();
 } else if (command === "login" || command === "auth") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./auth-q73k9bh9.js");
+  await import("./auth-xk51kbta.js");
 } else if (command === "uninstall") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./uninstall-p1q5pkx2.js");
+  await import("./uninstall-tc9xqgxy.js");
 } else if (command === "apps") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./apps-0es69e2s.js");
+  await import("./apps-csx75pk9.js");
 } else if (command === "pentests") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./pentests-1hcqjyk2.js");
+  await import("./pentests-8tqyzj9v.js");
 } else if (command === "targets") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./targets-nqz8w37e.js");
+  await import("./targets-8pd483mk.js");
 } else if (command === "issues") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./issues-wjakj8yy.js");
+  await import("./issues-p6spqtma.js");
 } else if (command === "fixes") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./fixes-1dry8j61.js");
+  await import("./fixes-43ex34f1.js");
 } else if (command === "logs") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./logs-ewyzcspy.js");
+  await import("./logs-eq2nc2k3.js");
 } else if (command === "config") {
   process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./config-xcf7rc6x.js");
+  await import("./config-tf803ygw.js");
 } else if (command === "threat-model") {
   await runThreatModel();
 } else if (command === "doctor") {
-  const { runDoctor } = await import("./doctor-98zperf9.js");
+  const { runDoctor } = await import("./doctor-hvmgtwsv.js");
   await runDoctor();
 } else if (args.length === 0) {
   if (process.env.PENSAR_NO_TUI === "1") {
@@ -1049,7 +1054,7 @@ if (hasFlag("-p") || command === "--prompt") {
     console.error("All other commands work with Node \u2014 run 'pensar --help'.");
     process.exit(1);
   }
-  await import("./index-0j880wqc.js");
+  await import("./index-05epz60s.js");
 } else {
   console.error(`Error: Unknown command '${command}'`);
   console.error();

package/build/{config-xcf7rc6x.js → config-tf803ygw.js}

@@ -11,9 +11,9 @@ import {
 import {
   config,
   init_config
-} from "./cli-51dkmt5p.js";
-import"./cli-7n43wz82.js";
-import"./cli-1f636vzd.js";
+} from "./cli-e2qdjmmk.js";
+import"./cli-1xqq625p.js";
+import"./cli-atjcbeyz.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/config.ts