@pensar/apex 2.2.0 → 2.3.0-canary.9edb404e

package/build/{cli-xpn9tsw0.js → cli-2p85ycnd.js}

@@ -1,9 +1,9 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-xbdn034b.js";
+} from "./cli-1rv86z6y.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-s43t5ay0.js";
+} from "./cli-kghddcpa.js";
 import {
   createLogger,
   hasToolCall,
@@ -11,7 +11,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-6kx46ck0.js";
+} from "./cli-f4mfvjp4.js";
 
 // src/core/agents/specialized/authenticationAgent/agent.ts
 init_dist();

package/build/{cli-51dkmt5p.js → cli-3trffpp2.js}

@@ -3,7 +3,7 @@ import {
   init,
   init_config,
   update
-} from "./cli-7n43wz82.js";
+} from "./cli-fxghs4c4.js";
 import {
   __esm
 } from "./cli-8rxa073f.js";

package/build/{cli-1f636vzd.js → cli-a7zrapxn.js}

@@ -120,7 +120,7 @@ var init_package = __esm(() => {
       tsc: "tsc --noEmit"
     },
     type: "module",
-    version: "2.2.0"
+    version: "2.3.0-canary.9edb404e"
   };
 });
 

package/build/{cli-ptzy9ak5.js → cli-c06dq4hj.js}

@@ -1,7 +1,7 @@
 import {
   CweEntrySchema,
   ValidatedCweEntrySchema
-} from "./cli-xbdn034b.js";
+} from "./cli-1rv86z6y.js";
 import {
   exports_external,
   init_zod

package/build/{cli-6kx46ck0.js → cli-f4mfvjp4.js}

@@ -4,7 +4,7 @@ import {
   init_auth,
   init_constants,
   signGatewayRequest
-} from "./cli-4tc6888c.js";
+} from "./cli-sgy9czg3.js";
 import {
   AISDKError,
   APICallError,
@@ -87,11 +87,11 @@ import {
 import {
   config,
   init_config
-} from "./cli-51dkmt5p.js";
+} from "./cli-3trffpp2.js";
 import {
   getCurrentVersion,
   init_installation
-} from "./cli-1f636vzd.js";
+} from "./cli-a7zrapxn.js";
 import {
   __callDispose,
   __commonJS,
@@ -47127,7 +47127,7 @@ async function create2(input) {
   if (normalizedConfig?.headers !== undefined) {
     snapshotHeaders = { ...normalizedConfig.headers };
   } else {
-    const { config: appConfig } = await import("./index-34h2nb6x.js");
+    const { config: appConfig } = await import("./index-fx2ks1ym.js");
     const cfg = await appConfig.get();
     snapshotHeaders = cfg.defaultHeaders ? { ...cfg.defaultHeaders } : { ...DEFAULT_HEADER_RECORD };
   }
@@ -47303,7 +47303,8 @@ async function updateOperatorSettings(sessionId, settings) {
       session.config.operatorSettings = {
         initialMode: "manual",
         requireApproval: true,
-        enableSuggestions: true
+        enableSuggestions: true,
+        strikeMode: false
       };
     }
     if (settings.initialMode !== undefined) {
@@ -47315,6 +47316,9 @@ async function updateOperatorSettings(sessionId, settings) {
     if (settings.enableSuggestions !== undefined) {
       session.config.operatorSettings.enableSuggestions = settings.enableSuggestions;
     }
+    if (settings.strikeMode !== undefined) {
+      session.config.operatorSettings.strikeMode = settings.strikeMode;
+    }
   });
 }
 async function updateSessionHeaders(sessionId, headers) {
@@ -47387,7 +47391,8 @@ var init_session = __esm(() => {
   OperatorSettingsObject = zod_default.object({
     initialMode: zod_default.enum(["plan", "manual", "auto"]).default("manual"),
     requireApproval: zod_default.boolean().default(true),
-    enableSuggestions: zod_default.boolean().default(true)
+    enableSuggestions: zod_default.boolean().default(true),
+    strikeMode: zod_default.boolean().optional()
   });
   EmailInboxConfigObject = zod_default.discriminatedUnion("provider", [
     zod_default.object({
@@ -47422,6 +47427,14 @@ var init_session = __esm(() => {
       username: zod_default.string(),
       password: zod_default.string(),
       tls: zod_default.boolean()
+    }),
+    zod_default.object({
+      provider: zod_default.literal("http"),
+      id: zod_default.string(),
+      name: zod_default.string(),
+      emailAddress: zod_default.string(),
+      endpoint: zod_default.string(),
+      token: zod_default.string()
     })
   ]);
   EmailIntegrationConfigObject = zod_default.object({

package/build/{cli-7n43wz82.js → cli-fxghs4c4.js}

@@ -1,7 +1,7 @@
 import {
   getCurrentVersion,
   init_installation
-} from "./cli-1f636vzd.js";
+} from "./cli-a7zrapxn.js";
 import {
   __esm
 } from "./cli-8rxa073f.js";
@@ -38,6 +38,7 @@ function applyEnvFallbacks(parsedConfig) {
     ...parsedConfig,
     responsibleUseAccepted: parsedConfig.responsibleUseAccepted ?? false,
     defaultHeaders: parsedConfig.defaultHeaders ?? DEFAULT_CONFIG.defaultHeaders,
+    strikeMode: parsedConfig.strikeMode ?? DEFAULT_CONFIG.strikeMode,
     surfaceIntegrationEnabled: parsedConfig.surfaceIntegrationEnabled ?? parseBoolEnv(process.env.PENSAR_SURFACE_INTEGRATION),
     version,
     openAiAPIKey: parsedConfig.openAiAPIKey ?? process.env.OPENAI_API_KEY,
@@ -78,7 +79,8 @@ var init_config = __esm(() => {
   init_installation();
   DEFAULT_CONFIG = {
     responsibleUseAccepted: false,
-    defaultHeaders: { "User-Agent": "pensar-apex" }
+    defaultHeaders: { "User-Agent": "pensar-apex" },
+    strikeMode: false
   };
 });
 

package/build/{cli-tz9yg4ew.js → cli-g6v0y8zp.js}

@@ -1,20 +1,20 @@
 import {
   BlackboxAttackSurfaceAgent
-} from "./cli-1re2kv5v.js";
+} from "./cli-ssrtpxs4.js";
 import {
   REPORT_FILENAME_JSON,
   REPORT_FILENAME_MD,
   buildPentestReport,
   renderJson,
   renderMarkdown
-} from "./cli-2jn8104w.js";
+} from "./cli-hyv0m4sf.js";
 import {
   TargetedPentestAgent,
   buildPentestSystemPrompt
-} from "./cli-n114n8mk.js";
+} from "./cli-twxay3td.js";
 import {
   CodeAgent
-} from "./cli-knqx15w6.js";
+} from "./cli-r3d63aym.js";
 import {
   AppsDiscoveryResultSchema,
   DiscoverySummarySchema,
@@ -22,7 +22,7 @@ import {
   WHITEBOX_APPS_DISCOVERY_SYSTEM_PROMPT,
   WHITEBOX_DISCOVERY_SYSTEM_PROMPT,
   WHITEBOX_ENDPOINT_DOCUMENTATION_SYSTEM_PROMPT
-} from "./cli-7e5ad5js.js";
+} from "./cli-m6d8tekt.js";
 import {
   FindingsRegistry,
   OffensiveSecurityAgent,
@@ -31,7 +31,7 @@ import {
   pLimit,
   runWithBoundedConcurrency,
   toGrpcPentestContext
-} from "./cli-xbdn034b.js";
+} from "./cli-1rv86z6y.js";
 import {
   createThreatModelPrompt
 } from "./cli-fw5r7pfj.js";
@@ -45,7 +45,7 @@ import {
   init_structured,
   newSessionId,
   scopedLogger
-} from "./cli-6kx46ck0.js";
+} from "./cli-f4mfvjp4.js";
 import {
   __require
 } from "./cli-8rxa073f.js";
@@ -7786,7 +7786,7 @@ async function runPentestSwarm(input) {
 }
 async function runPentestWorkflow(input) {
   if (input.fastStrike) {
-    const { runFastStrike } = await import("./fastStrike-9tm6bedh.js");
+    const { runFastStrike } = await import("./fastStrike-bc7qpqzg.js");
     return runFastStrike(input);
   }
   const {

package/build/{cli-1cf5vy5m.js → cli-g9kmsvhw.js}

@@ -4,19 +4,19 @@ import {
   OffensiveSecurityAgent,
   SKILL_TOOL_NAMES,
   buildBaseSystemPrompt
-} from "./cli-xbdn034b.js";
+} from "./cli-1rv86z6y.js";
 import {
   init_dist,
   init_session,
   sessions,
   stepCountIs
-} from "./cli-6kx46ck0.js";
+} from "./cli-f4mfvjp4.js";
 import {
   ensureValidToken,
   getPensarApiUrl,
   init_auth,
   init_constants
-} from "./cli-4tc6888c.js";
+} from "./cli-sgy9czg3.js";
 import {
   exports_external,
   init_zod
@@ -24,7 +24,7 @@ import {
 import {
   config,
   init_config
-} from "./cli-51dkmt5p.js";
+} from "./cli-3trffpp2.js";
 import {
   __commonJS,
   __require
@@ -7135,6 +7135,12 @@ async function updateIssue(issueId, data) {
 async function retestIssue(issueId) {
   return apiRequest("POST", `/issues/${issueId}/retest`);
 }
+async function linkPullRequest(issueId, url) {
+  return apiRequest("POST", `/issues/${issueId}/pull-requests`, { url });
+}
+async function listIssuePullRequests(issueId) {
+  return apiRequest("GET", `/issues/${issueId}/pull-requests`);
+}
 async function listFixes(issueId) {
   return apiRequest("GET", `/issues/${issueId}/fixes`);
 }
@@ -7322,46 +7328,60 @@ async function runOffensiveSecurityAgent(input) {
   return { streamResult: agent.streamResult, session: agent.session };
 }
 // src/core/agents/specialized/patching/prompts.ts
-var PREAMBLE2 = `You are an expert security vulnerability patching agent. Your goal is to analyze security vulnerabilities, provide high-quality fixes, and verify the fixes don't break existing functionality.`;
+var PREAMBLE2 = `You are an expert security vulnerability patching agent — an autonomous coding agent specialized in fixing security issues. Your goal is to analyze security vulnerabilities, apply high-quality fixes, verify they don't break existing functionality, and return structured PR metadata.`;
 var ORIENT_STEP = `1. **Orient Yourself**:
-   - Review the AGENTS.md / project documentation provided in your prompt for build, lint, and test commands
-   - Use list_files to explore the repository structure
+   - Read the project instructions (AGENTS.md / CLAUDE.md) provided in your prompt in full. They are authoritative for this repository: coding conventions, architectural rules, error-handling policy, forbidden patterns, AND the exact build/lint/test commands
+   - Use glob / list_files to explore the repository structure (prefer glob for pattern searches like "**/*.ts")
    - Read package.json, Makefile, or equivalent to understand the project's toolchain
-   - Identify the lint command, test command, type-check command, and any other verification scripts`;
-var UNDERSTAND_STEP = `2. **Understand the Vulnerability**: 
+   - Identify the lint command, test command, type-check command, and any other verification scripts
+   - Optionally call profile_codebase for a high-level map of the repo`;
+var TASK_STEP = `2. **Track Work with Tasks**:
+   - Use create_task early to decompose the job into concrete steps (orient, understand, edit, verify, finalize)
+   - Update tasks with update_task as you progress (in_progress → completed / failed)
+   - Use list_tasks when you need to recall what's left
+   - Keep tasks atomic — one clear outcome per task`;
+var UNDERSTAND_STEP = `3. **Understand the Vulnerability**:
    - Carefully read the vulnerability description, CWE mappings, and any dataflow analysis provided
    - Understand the root cause: What makes this code vulnerable?
    - Identify the attack vector: How would an attacker exploit this?
-   - Consider the context: What is the application trying to do?`;
-var REVIEW_STEP = `3. **Review the Code**:
+   - Consider the context: What is the application trying to do?
+   - Use web_search / get_page when you need framework-specific security guidance or CVE details`;
+var REVIEW_STEP = `4. **Review the Code**:
    - Use read_file to read the vulnerable file(s) mentioned in the issue
-   - Use grep to search for related code patterns, similar vulnerabilities, or existing security controls
+   - Use grep or run_code_query for structural searches (rg / ast-grep) across related patterns
    - Review related files: imports, dependencies, configuration files
    - Understand the data flow: Where does user input come from? Where does it go?`;
-var PLAN_STEP = `4. **Plan Your Fix**:
+var PLAN_STEP = `5. **Plan Your Fix**:
    - Identify the exact code that needs to change
    - Determine the appropriate security control (input validation, parameterized queries, access control, etc.)
    - Consider side effects: Will this break existing functionality?
    - Think about edge cases: What other inputs or scenarios need to be handled?
    - Look for framework-specific or language-specific best practices
-   - State your complete plan clearly before making changes`;
-var APPLY_STEP = `5. **Apply the Patch**:
-   - Use update_file to modify existing files with your security fixes
+   - State your complete plan clearly before making changes, and reflect it in your task list`;
+var APPLY_STEP = `6. **Apply the Patch**:
+   - Prefer update_file for small, exact string replacements
+   - Prefer apply_patch (unified diff) for multi-hunk or multi-file edits
    - Use create_file if you need to add new security utilities or middleware
+   - Use delete_file only when removing obsolete insecure code that is truly unused
    - Make minimal, targeted changes — don't refactor unrelated code
-   - Follow the existing code style and conventions
+   - Follow the existing code style and conventions, and any rules stated in the project instructions
    - Ensure your changes integrate cleanly with the existing codebase`;
-var RESTART_STEP = `6. **Restart Dev Environment** (if applicable):
+var GIT_STEP = `7. **Self-Check with Git**:
+   - Use git_status to see which files changed
+   - Use git_diff to review the exact patch before verification
+   - Do NOT commit, push, or open a PR — the host handles that after you finalize`;
+var RESTART_STEP = `8. **Restart Dev Environment** (if applicable):
    - Use execute_command to restart any dev servers or services so your changes are loaded
    - Wait for the services to become healthy`;
-var VERIFY_STEP = `7. **Verify the Patch**:
+var VERIFY_STEP = `9. **Verify the Patch**:
    - Use execute_command to run the project's lint command (e.g. \`npm run lint\`, \`ruff check\`, \`cargo clippy\`)
    - Use execute_command to run the project's type-check command if applicable (e.g. \`npx tsc --noEmit\`, \`mypy\`)
    - Use execute_command to run the project's test suite (e.g. \`npm test\`, \`pytest\`, \`cargo test\`)
    - If a Proof of Concept (POC) is provided, run it to verify the vulnerability is fixed — the POC should FAIL (non-zero exit code) after a successful patch
    - If any check fails, read the error output carefully, fix the issues, and re-run until all checks pass
    - If the project has no clear lint/test commands, at minimum verify the changed files parse correctly (e.g. \`node -c file.js\`, \`python -m py_compile file.py\`)`;
-var FINALIZE_STEP = `8. **Finalize**:
+var FINALIZE_STEP = `10. **Finalize**:
+   - Mark remaining tasks completed
    - Use the response tool to complete the patching process
    - Provide a clear, detailed summary of:
      * Each file you changed and why
@@ -7428,12 +7448,18 @@ var SECURITY_BEST_PRACTICES = `# Security Best Practices by Vulnerability Type
 - Remove sensitive data from client-side code`;
 var TOOL_USAGE2 = `# Tool Usage
 
-- **list_files**: Explore directory structure and find relevant files
+- **glob**: Find files by pattern (e.g. "**/*.ts", "**/package.json")
+- **list_files**: Explore directory structure
 - **read_file**: Read file contents to understand code
-- **grep**: Search for patterns across the codebase
-- **update_file**: Modify existing files with security fixes
-- **create_file**: Create new files if needed (utilities, middleware, etc.)
-- **execute_command**: Run shell commands — use for linting, type-checking, running tests, restarting services, running POCs, installing dependencies, and verifying your changes
+- **grep** / **run_code_query**: Search for patterns (run_code_query supports rg / ast-grep / comby)
+- **profile_codebase**: High-level codebase map when orientation is hard
+- **web_search** / **get_page**: Look up CVE details, framework security docs
+- **create_task** / **update_task** / **list_tasks**: Todo tracking for the run
+- **update_file**: Small exact search-and-replace edits
+- **apply_patch**: Multi-hunk / multi-file unified diffs
+- **create_file** / **delete_file**: Add or remove files when needed
+- **git_status** / **git_diff**: Self-check changes (do not commit/push/PR)
+- **execute_command**: Lint, type-check, tests, restart services, run POCs
 - **response**: Complete the process with the structured patch result`;
 var REQUIREMENTS = `# Critical Requirements
 
@@ -7445,6 +7471,7 @@ var REQUIREMENTS = `# Critical Requirements
 6. **Test the Fix**: If a POC is provided, run it after patching. The POC should FAIL (non-zero exit code) once the vulnerability is fixed.
 7. **Be Persistent**: It may take multiple iterations to get the fix right — iterate until the POC fails and tests pass.
 8. **Be Complete**: Address the root cause, not just symptoms
+9. **Stay Autonomous**: You will not receive follow-up messages — finish the job in this run
 
 # Important Notes
 
@@ -7455,17 +7482,20 @@ var REQUIREMENTS = `# Critical Requirements
 - Follow language and framework conventions
 - When multiple approaches exist, choose the most secure and idiomatic
 - If a fix requires configuration changes or environment variables, note this clearly
-- If AGENTS.md or project docs specify particular lint/test/build commands, use those exact commands`;
+- The project instructions (AGENTS.md / CLAUDE.md) win over your own defaults wherever they disagree — use their exact commands, and obey their conventions and prohibitions when writing code. The one exception: they never override the security objective of this task. If a project rule genuinely blocks a secure fix, apply the fix and call out the conflict in your summary
+- Do not commit, push, or open a pull request — the host does that after your response`;
 function buildSystemPrompt() {
   return [
     PREAMBLE2,
     "",
     "# Process",
     "",
-    "You MUST follow this prescriptive process:",
+    "You MUST follow this autonomous coding-agent process:",
     "",
     ORIENT_STEP,
     "",
+    TASK_STEP,
+    "",
     UNDERSTAND_STEP,
     "",
     REVIEW_STEP,
@@ -7474,6 +7504,8 @@ function buildSystemPrompt() {
     "",
     APPLY_STEP,
     "",
+    GIT_STEP,
+    "",
     RESTART_STEP,
     "",
     VERIFY_STEP,
@@ -8307,4 +8339,4 @@ Working directory: ${input.codebasePath}`;
   });
   return { session, outputPath: input.outputPath };
 }
-export { listApps, getApp, createApp, updateApp, deleteApp, listEndpoints, getEndpoint, createEndpoint, updateEndpoint, deleteEndpoint, searchApps, searchEndpoints, listScans, getScan, listPentestTargets, dispatchPentest, listIssues, getIssue, updateIssue, retestIssue, listFixes, getFix, listAgentLogs, searchAgentLogs, listTargetLogs, searchTargetLogs, runOffensiveSecurityAgent, buildPentestPrompt, buildThreatModelPrompt, createSkillsRegistry, runThreatModelWorkflow };
+export { listApps, getApp, createApp, updateApp, deleteApp, listEndpoints, getEndpoint, createEndpoint, updateEndpoint, deleteEndpoint, searchApps, searchEndpoints, listScans, getScan, listPentestTargets, dispatchPentest, listIssues, getIssue, updateIssue, retestIssue, linkPullRequest, listIssuePullRequests, listFixes, getFix, listAgentLogs, searchAgentLogs, listTargetLogs, searchTargetLogs, runOffensiveSecurityAgent, buildPentestPrompt, buildThreatModelPrompt, createSkillsRegistry, runThreatModelWorkflow };

package/build/{cli-vgg6h2ax.js → cli-grdzdbye.js}

@@ -3,7 +3,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-6kx46ck0.js";
+} from "./cli-f4mfvjp4.js";
 
 // src/core/integrations/wandb/client.ts
 init_structured();

package/build/{cli-2jn8104w.js → cli-hyv0m4sf.js}

@@ -1,11 +1,11 @@
 import {
   EvidenceFileEntrySchema
-} from "./cli-ptzy9ak5.js";
+} from "./cli-c06dq4hj.js";
 import {
   CweEntrySchema,
   ValidatedCweEntrySchema,
   hasCanonicalName
-} from "./cli-xbdn034b.js";
+} from "./cli-1rv86z6y.js";
 import {
   exports_external,
   init_zod

package/build/{cli-s43t5ay0.js → cli-kghddcpa.js}

@@ -3,7 +3,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-6kx46ck0.js";
+} from "./cli-f4mfvjp4.js";
 
 // src/core/agents/specialized/utils.ts
 import { execSync } from "node:child_process";

package/build/{cli-7e5ad5js.js → cli-m6d8tekt.js}

@@ -2,11 +2,11 @@ import {
   EndpointTransportEnum,
   GrpcEndpointMetadataSchema,
   OffensiveSecurityAgent
-} from "./cli-xbdn034b.js";
+} from "./cli-1rv86z6y.js";
 import {
   hasToolCall,
   init_dist
-} from "./cli-6kx46ck0.js";
+} from "./cli-f4mfvjp4.js";
 import {
   exports_external,
   init_zod,

package/build/{cli-knqx15w6.js → cli-r3d63aym.js}

@@ -1,10 +1,10 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-xbdn034b.js";
+} from "./cli-1rv86z6y.js";
 import {
   init_dist,
   stepCountIs
-} from "./cli-6kx46ck0.js";
+} from "./cli-f4mfvjp4.js";
 
 // src/core/agents/specialized/codeAgent/agent.ts
 init_dist();

package/build/{cli-4tc6888c.js → cli-sgy9czg3.js}

@@ -1,7 +1,7 @@
 import {
   config,
   init_config
-} from "./cli-51dkmt5p.js";
+} from "./cli-3trffpp2.js";
 import {
   __esm
 } from "./cli-8rxa073f.js";
@@ -350,6 +350,55 @@ async function selectWorkspace(apiUrl, accessToken, workspaceId) {
   }
   return await response.json();
 }
+async function createWorkspaceSelection(apiUrl, accessToken) {
+  const response = await fetch(`${apiUrl}/api/cli/workspace-selection`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${accessToken}`
+    }
+  });
+  if (!response.ok) {
+    throw new Error("Failed to start workspace selection");
+  }
+  return await response.json();
+}
+async function pollWorkspaceSelection(apiUrl, accessToken, selectionId, signal) {
+  const POLL_INTERVAL = 3000;
+  const TIMEOUT = 10 * 60 * 1000;
+  const deadline = Date.now() + TIMEOUT;
+  while (Date.now() < deadline) {
+    if (signal?.aborted)
+      throw new Error("Cancelled");
+    await sleep2(POLL_INTERVAL);
+    if (signal?.aborted)
+      throw new Error("Cancelled");
+    try {
+      const response = await fetch(`${apiUrl}/api/cli/workspace-selection?id=${encodeURIComponent(selectionId)}`, {
+        headers: { Authorization: `Bearer ${accessToken}` }
+      });
+      if (!response.ok)
+        continue;
+      const data = await response.json();
+      if (data.status === "complete" && data.workspaceId) {
+        return data.workspaceId;
+      }
+      if (data.status === "expired") {
+        throw new Error("Workspace selection expired. Please run `pensar login` again.");
+      }
+    } catch (err) {
+      if (signal?.aborted)
+        throw new Error("Cancelled");
+      if (err instanceof Error && err.message.includes("Please try again")) {
+        throw err;
+      }
+      if (err instanceof Error && err.message.includes("expired")) {
+        throw err;
+      }
+    }
+  }
+  throw new Error("Workspace selection timed out. Please try again.");
+}
 var init_workspaces = () => {};
 
 // src/core/auth/index.ts
@@ -362,4 +411,4 @@ var init_auth = __esm(() => {
   init_workspaces();
 });
 
-export { getPensarApiUrl, getPensarGatewayUrl, getPensarConsoleUrl, init_constants, isConnected, disconnect, startDeviceFlow, pollWorkOSToken, pollLegacyToken, isTokenExpired, ensureValidToken, validateGateway, signGatewayRequest, fetchWorkspaces, pollForWorkspaceCreation, selectWorkspace, init_auth };
+export { getPensarApiUrl, getPensarGatewayUrl, getPensarConsoleUrl, init_constants, isConnected, disconnect, startDeviceFlow, pollWorkOSToken, pollLegacyToken, isTokenExpired, ensureValidToken, validateGateway, signGatewayRequest, fetchWorkspaces, pollForWorkspaceCreation, selectWorkspace, createWorkspaceSelection, pollWorkspaceSelection, init_auth };

package/build/{cli-1re2kv5v.js → cli-ssrtpxs4.js}

@@ -1,14 +1,14 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-xbdn034b.js";
+} from "./cli-1rv86z6y.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-s43t5ay0.js";
+} from "./cli-kghddcpa.js";
 import {
   hasToolCall,
   init_dist,
   stepCountIs
-} from "./cli-6kx46ck0.js";
+} from "./cli-f4mfvjp4.js";
 
 // src/core/agents/specialized/attackSurface/blackboxAgent.ts
 init_dist();

package/build/{cli-n114n8mk.js → cli-twxay3td.js}

@@ -5,7 +5,7 @@ import {
   createReportErrorTool,
   isMemoryEnabled,
   readPlan
-} from "./cli-xbdn034b.js";
+} from "./cli-1rv86z6y.js";
 import {
   createLogger,
   hasToolCall,
@@ -13,7 +13,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-6kx46ck0.js";
+} from "./cli-f4mfvjp4.js";
 import {
   exports_external,
   init_zod