@pensar/apex 2.3.0-canary.15ec17ea → 2.3.0-canary.3f6d2a2b

package/build/{agent-00rjnxth.js → agent-2h0w8eta.js}

@@ -1,23 +1,23 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-3q27f7wb.js";
+} from "./cli-mb680jb3.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-vfsxxnmr.js";
+} from "./cli-06fq5zym.js";
 import"./cli-c8131c4q.js";
 import {
   init_dist,
   stepCountIs
-} from "./cli-ef2c0sm6.js";
-import"./cli-xw6xh0c2.js";
+} from "./cli-2q3kvbwv.js";
+import"./cli-dth5et2y.js";
 import {
   exports_external,
   init_zod
 } from "./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-3b5rh4nn.js";
-import"./cli-sf878p6j.js";
-import"./cli-ztvkmav5.js";
+import"./cli-0qybv29g.js";
+import"./cli-khyery65.js";
+import"./cli-3e0jb8k6.js";
 import"./cli-8rxa073f.js";
 
 // src/core/agents/specialized/findingJudge/agent.ts

package/build/agent-95qsypnq.js

@@ -0,0 +1,19 @@
+import {
+  CodeAgent
+} from "./cli-7d3h16fw.js";
+import"./cli-9fsre5pt.js";
+import"./cli-3r7xgtqj.js";
+import"./cli-mb680jb3.js";
+import"./cli-06fq5zym.js";
+import"./cli-c8131c4q.js";
+import"./cli-2q3kvbwv.js";
+import"./cli-dth5et2y.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-0qybv29g.js";
+import"./cli-khyery65.js";
+import"./cli-3e0jb8k6.js";
+import"./cli-8rxa073f.js";
+export {
+  CodeAgent
+};

package/build/{agent-q3yvg7qp.js → agent-rktf0v3c.js}

@@ -4,19 +4,19 @@ import {
   buildPentestActiveTools,
   buildPentestPrompt,
   buildPentestSystemPrompt
-} from "./cli-wp59e6eq.js";
+} from "./cli-s8z1mkv5.js";
 import"./cli-9fsre5pt.js";
-import"./cli-vbz5qm07.js";
-import"./cli-3q27f7wb.js";
-import"./cli-vfsxxnmr.js";
+import"./cli-3r7xgtqj.js";
+import"./cli-mb680jb3.js";
+import"./cli-06fq5zym.js";
 import"./cli-c8131c4q.js";
-import"./cli-ef2c0sm6.js";
-import"./cli-xw6xh0c2.js";
+import"./cli-2q3kvbwv.js";
+import"./cli-dth5et2y.js";
 import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-3b5rh4nn.js";
-import"./cli-sf878p6j.js";
-import"./cli-ztvkmav5.js";
+import"./cli-0qybv29g.js";
+import"./cli-khyery65.js";
+import"./cli-3e0jb8k6.js";
 import"./cli-8rxa073f.js";
 export {
   buildPentestSystemPrompt,

package/build/{apps-f3snzs8b.js → apps-rehs72t3.js}

@@ -1,4 +1,14 @@
 #!/usr/bin/env bun
+import"./cli-2m8y1rkp.js";
+import"./cli-abm5bgap.js";
+import"./cli-5asc7364.js";
+import"./cli-xkv494x1.js";
+import"./cli-s8z1mkv5.js";
+import"./cli-41h8gh1v.js";
+import"./cli-7d3h16fw.js";
+import"./cli-qs2mveb2.js";
+import"./cli-9fsre5pt.js";
+import"./cli-3r7xgtqj.js";
 import {
   createApp,
   createEndpoint,
@@ -12,27 +22,17 @@ import {
   searchEndpoints,
   updateApp,
   updateEndpoint
-} from "./cli-x7tqybza.js";
-import"./cli-nsc30rcx.js";
-import"./cli-fkkkkf49.js";
-import"./cli-b27w98bz.js";
-import"./cli-wp59e6eq.js";
-import"./cli-v8q0djvy.js";
-import"./cli-ztk7j1rd.js";
-import"./cli-x5gd8b11.js";
-import"./cli-9fsre5pt.js";
-import"./cli-vbz5qm07.js";
-import"./cli-3q27f7wb.js";
-import"./cli-vfsxxnmr.js";
+} from "./cli-mb680jb3.js";
+import"./cli-06fq5zym.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-ef2c0sm6.js";
-import"./cli-xw6xh0c2.js";
+import"./cli-2q3kvbwv.js";
+import"./cli-dth5et2y.js";
 import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-3b5rh4nn.js";
-import"./cli-sf878p6j.js";
-import"./cli-ztvkmav5.js";
+import"./cli-0qybv29g.js";
+import"./cli-khyery65.js";
+import"./cli-3e0jb8k6.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/apps.ts

package/build/{auth-5pqmq5x9.js → auth-h5bjv1dp.js}

@@ -1,22 +1,23 @@
 #!/usr/bin/env bun
-import"./cli-x7tqybza.js";
-import"./cli-nsc30rcx.js";
-import"./cli-fkkkkf49.js";
-import"./cli-b27w98bz.js";
-import"./cli-wp59e6eq.js";
-import"./cli-v8q0djvy.js";
-import"./cli-ztk7j1rd.js";
-import"./cli-x5gd8b11.js";
+import"./cli-2m8y1rkp.js";
+import"./cli-abm5bgap.js";
+import"./cli-5asc7364.js";
+import"./cli-xkv494x1.js";
+import"./cli-s8z1mkv5.js";
+import"./cli-41h8gh1v.js";
+import"./cli-7d3h16fw.js";
+import"./cli-qs2mveb2.js";
 import"./cli-9fsre5pt.js";
-import"./cli-vbz5qm07.js";
-import"./cli-3q27f7wb.js";
-import"./cli-vfsxxnmr.js";
+import"./cli-3r7xgtqj.js";
+import"./cli-mb680jb3.js";
+import"./cli-06fq5zym.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-ef2c0sm6.js";
+import"./cli-2q3kvbwv.js";
 import {
   createWorkspaceSelection,
   disconnect,
+  ensureValidToken,
   fetchWorkspaces,
   getPensarApiUrl,
   getPensarConsoleUrl,
@@ -28,15 +29,15 @@ import {
   pollWorkspaceSelection,
   selectWorkspace,
   startDeviceFlow
-} from "./cli-xw6xh0c2.js";
+} from "./cli-dth5et2y.js";
 import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
 import {
   config,
   init_config
-} from "./cli-3b5rh4nn.js";
-import"./cli-sf878p6j.js";
-import"./cli-ztvkmav5.js";
+} from "./cli-0qybv29g.js";
+import"./cli-khyery65.js";
+import"./cli-3e0jb8k6.js";
 import {
   __require
 } from "./cli-8rxa073f.js";
@@ -85,7 +86,13 @@ Waiting for workspace selection...`);
 }
 async function login() {
   const appConfig = await config.get();
-  if (isConnected(appConfig)) {
+  const hasStoredCredentials = isConnected(appConfig);
+  const validToken = hasStoredCredentials ? await ensureValidToken({
+    accessToken: appConfig.accessToken,
+    refreshToken: appConfig.refreshToken,
+    pensarAPIKey: appConfig.pensarAPIKey
+  }) : null;
+  if (validToken) {
     console.log("Already connected to Pensar Console.");
     if (appConfig.workspaceSlug) {
       console.log(`  Workspace: ${appConfig.workspaceSlug}`);
@@ -95,6 +102,8 @@ Reconnect? (y/N): `);
     if (answer.toLowerCase() !== "y") {
       return;
     }
+  } else if (hasStoredCredentials) {
+    console.log("Your saved Pensar Console session has expired. Reconnecting.");
   }
   console.log(`
 Pensar Console — Managed Inference
@@ -228,6 +237,15 @@ async function status() {
     console.log("Not connected to Pensar Console.\n\nRun `pensar login` to connect.");
     return;
   }
+  const validToken = await ensureValidToken({
+    accessToken: appConfig.accessToken,
+    refreshToken: appConfig.refreshToken,
+    pensarAPIKey: appConfig.pensarAPIKey
+  });
+  if (!validToken) {
+    console.log("Your Pensar Console session has expired.\n\nRun `pensar login` to reconnect.");
+    return;
+  }
   if (!appConfig.accessToken && appConfig.pensarAPIKey && !appConfig.workspaceSlug) {
     try {
       const apiUrl = getPensarApiUrl();

package/build/authentication-zqkagnvm.js

@@ -0,0 +1,19 @@
+import {
+  runAuthenticationAgent
+} from "./cli-41h8gh1v.js";
+import"./cli-9fsre5pt.js";
+import"./cli-3r7xgtqj.js";
+import"./cli-mb680jb3.js";
+import"./cli-06fq5zym.js";
+import"./cli-c8131c4q.js";
+import"./cli-2q3kvbwv.js";
+import"./cli-dth5et2y.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-0qybv29g.js";
+import"./cli-khyery65.js";
+import"./cli-3e0jb8k6.js";
+import"./cli-8rxa073f.js";
+export {
+  runAuthenticationAgent
+};

package/build/blackboxAgent-b799jbpa.js

@@ -0,0 +1,19 @@
+import {
+  BlackboxAttackSurfaceAgent
+} from "./cli-5asc7364.js";
+import"./cli-9fsre5pt.js";
+import"./cli-3r7xgtqj.js";
+import"./cli-mb680jb3.js";
+import"./cli-06fq5zym.js";
+import"./cli-c8131c4q.js";
+import"./cli-2q3kvbwv.js";
+import"./cli-dth5et2y.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-0qybv29g.js";
+import"./cli-khyery65.js";
+import"./cli-3e0jb8k6.js";
+import"./cli-8rxa073f.js";
+export {
+  BlackboxAttackSurfaceAgent
+};

package/build/{blackboxPentest-bwj95jra.js → blackboxPentest-gszetqnq.js}

@@ -1,24 +1,24 @@
 import {
   runPentestWorkflow
-} from "./cli-nsc30rcx.js";
-import"./cli-fkkkkf49.js";
-import"./cli-b27w98bz.js";
-import"./cli-wp59e6eq.js";
-import"./cli-ztk7j1rd.js";
-import"./cli-x5gd8b11.js";
+} from "./cli-abm5bgap.js";
+import"./cli-5asc7364.js";
+import"./cli-xkv494x1.js";
+import"./cli-s8z1mkv5.js";
+import"./cli-7d3h16fw.js";
+import"./cli-qs2mveb2.js";
 import"./cli-9fsre5pt.js";
-import"./cli-vbz5qm07.js";
-import"./cli-3q27f7wb.js";
-import"./cli-vfsxxnmr.js";
+import"./cli-3r7xgtqj.js";
+import"./cli-mb680jb3.js";
+import"./cli-06fq5zym.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-ef2c0sm6.js";
-import"./cli-xw6xh0c2.js";
+import"./cli-2q3kvbwv.js";
+import"./cli-dth5et2y.js";
 import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-3b5rh4nn.js";
-import"./cli-sf878p6j.js";
-import"./cli-ztvkmav5.js";
+import"./cli-0qybv29g.js";
+import"./cli-khyery65.js";
+import"./cli-3e0jb8k6.js";
 import"./cli-8rxa073f.js";
 
 // src/core/api/blackboxPentest.ts

package/build/{cli-vfsxxnmr.js → cli-06fq5zym.js}

@@ -3,7 +3,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-ef2c0sm6.js";
+} from "./cli-2q3kvbwv.js";
 
 // src/core/agents/specialized/utils.ts
 import { execSync } from "node:child_process";

package/build/{cli-3b5rh4nn.js → cli-0qybv29g.js}

@@ -3,7 +3,7 @@ import {
   init,
   init_config,
   update
-} from "./cli-sf878p6j.js";
+} from "./cli-khyery65.js";
 import {
   __esm
 } from "./cli-8rxa073f.js";

package/build/{cli-x7tqybza.js → cli-2m8y1rkp.js}

@@ -3,28 +3,22 @@ import {
   ASK_USER_QUESTIONS_TOOL_NAME,
   OffensiveSecurityAgent,
   SKILL_TOOL_NAMES,
+  apiRequest,
   buildBaseSystemPrompt
-} from "./cli-3q27f7wb.js";
+} from "./cli-mb680jb3.js";
 import {
   init_dist,
   init_session,
   sessions,
   stepCountIs
-} from "./cli-ef2c0sm6.js";
+} from "./cli-2q3kvbwv.js";
 import {
-  ensureValidToken,
-  getPensarApiUrl,
-  init_auth,
   init_constants
-} from "./cli-xw6xh0c2.js";
+} from "./cli-dth5et2y.js";
 import {
   exports_external,
   init_zod
 } from "./cli-3k1x5rn3.js";
-import {
-  config,
-  init_config
-} from "./cli-3b5rh4nn.js";
 import {
   __commonJS,
   __require
@@ -6971,134 +6965,6 @@ var require_public_api = __commonJS((exports) => {
   exports.stringify = stringify;
 });
 
-// src/core/api/apiClient.ts
-init_auth();
-init_config();
-init_constants();
-async function getAuthHeaders() {
-  const cfg = await config.get();
-  const validToken = await ensureValidToken({
-    accessToken: cfg.accessToken,
-    refreshToken: cfg.refreshToken,
-    pensarAPIKey: cfg.pensarAPIKey
-  });
-  if (!validToken) {
-    throw new Error("Not authenticated. Run `pensar login` to connect to Pensar Console.");
-  }
-  const headers = {
-    "Content-Type": "application/json",
-    Authorization: `Bearer ${validToken.token}`
-  };
-  if (cfg.workspaceId) {
-    headers["X-Workspace-Id"] = cfg.workspaceId;
-  }
-  return headers;
-}
-async function apiRequest(method, path, body) {
-  const baseUrl = getPensarApiUrl();
-  const headers = await getAuthHeaders();
-  const url = `${baseUrl}${path}`;
-  const init = { method, headers };
-  if (body !== undefined) {
-    init.body = JSON.stringify(body);
-  }
-  const response = await fetch(url, init);
-  if (!response.ok) {
-    const text2 = await response.text();
-    let message;
-    try {
-      const err = JSON.parse(text2);
-      message = err.error ?? text2;
-    } catch {
-      message = text2;
-    }
-    throw new Error(`API error (${response.status}): ${message}`);
-  }
-  const text = await response.text();
-  if (!text)
-    return;
-  return JSON.parse(text);
-}
-
-// src/core/api/apps.ts
-async function listApps(opts) {
-  const params = new URLSearchParams;
-  if (opts?.limit !== undefined)
-    params.set("limit", String(opts.limit));
-  if (opts?.offset !== undefined)
-    params.set("offset", String(opts.offset));
-  const qs = params.toString();
-  return apiRequest("GET", `/apps${qs ? `?${qs}` : ""}`);
-}
-async function getApp(appId) {
-  return apiRequest("GET", `/apps/${appId}`);
-}
-async function createApp(data) {
-  return apiRequest("POST", "/apps", data);
-}
-async function updateApp(appId, data) {
-  return apiRequest("PATCH", `/apps/${appId}`, data);
-}
-async function deleteApp(appId) {
-  return apiRequest("DELETE", `/apps/${appId}`);
-}
-async function listEndpoints(appId, filters) {
-  const params = new URLSearchParams;
-  if (filters?.type)
-    params.set("type", filters.type);
-  if (filters?.minRiskScore !== undefined) {
-    params.set("minRiskScore", String(filters.minRiskScore));
-  }
-  if (filters?.limit !== undefined)
-    params.set("limit", String(filters.limit));
-  if (filters?.offset !== undefined) {
-    params.set("offset", String(filters.offset));
-  }
-  const qs = params.toString();
-  const path = `/apps/${appId}/endpoints${qs ? `?${qs}` : ""}`;
-  return apiRequest("GET", path);
-}
-async function getEndpoint(endpointId) {
-  return apiRequest("GET", `/endpoints/${endpointId}`);
-}
-async function createEndpoint(appId, data) {
-  return apiRequest("POST", `/apps/${appId}/endpoints`, data);
-}
-async function updateEndpoint(endpointId, data) {
-  return apiRequest("PATCH", `/endpoints/${endpointId}`, data);
-}
-async function deleteEndpoint(endpointId) {
-  return apiRequest("DELETE", `/endpoints/${endpointId}`);
-}
-async function searchApps(query, opts) {
-  const params = new URLSearchParams({ q: query });
-  if (opts?.type)
-    params.set("type", opts.type);
-  if (opts?.limit !== undefined)
-    params.set("limit", String(opts.limit));
-  if (opts?.offset !== undefined)
-    params.set("offset", String(opts.offset));
-  return apiRequest("GET", `/search/apps?${params.toString()}`);
-}
-async function searchEndpoints(query, opts) {
-  const params = new URLSearchParams({ q: query });
-  if (opts?.applicationId)
-    params.set("applicationId", opts.applicationId);
-  if (opts?.type)
-    params.set("type", opts.type);
-  if (opts?.minRiskScore !== undefined) {
-    params.set("minRiskScore", String(opts.minRiskScore));
-  }
-  if (opts?.authRequired !== undefined) {
-    params.set("authRequired", opts.authRequired ? "true" : "false");
-  }
-  if (opts?.limit !== undefined)
-    params.set("limit", String(opts.limit));
-  if (opts?.offset !== undefined)
-    params.set("offset", String(opts.offset));
-  return apiRequest("GET", `/search/endpoints?${params.toString()}`);
-}
-
 // src/core/api/issues.ts
 async function listScans() {
   return apiRequest("GET", "/pentests");
@@ -8339,4 +8205,4 @@ Working directory: ${input.codebasePath}`;
   });
   return { session, outputPath: input.outputPath };
 }
-export { listApps, getApp, createApp, updateApp, deleteApp, listEndpoints, getEndpoint, createEndpoint, updateEndpoint, deleteEndpoint, searchApps, searchEndpoints, listScans, getScan, listPentestTargets, dispatchPentest, listIssues, getIssue, updateIssue, retestIssue, linkPullRequest, listIssuePullRequests, listFixes, getFix, listAgentLogs, searchAgentLogs, listTargetLogs, searchTargetLogs, runOffensiveSecurityAgent, buildPentestPrompt, buildThreatModelPrompt, createSkillsRegistry, runThreatModelWorkflow };
+export { listScans, getScan, listPentestTargets, dispatchPentest, listIssues, getIssue, updateIssue, retestIssue, linkPullRequest, listIssuePullRequests, listFixes, getFix, listAgentLogs, searchAgentLogs, listTargetLogs, searchTargetLogs, runOffensiveSecurityAgent, buildPentestPrompt, buildThreatModelPrompt, createSkillsRegistry, runThreatModelWorkflow };

package/build/{cli-ef2c0sm6.js → cli-2q3kvbwv.js}

@@ -4,7 +4,7 @@ import {
   init_auth,
   init_constants,
   signGatewayRequest
-} from "./cli-xw6xh0c2.js";
+} from "./cli-dth5et2y.js";
 import {
   AISDKError,
   APICallError,
@@ -87,11 +87,11 @@ import {
 import {
   config,
   init_config
-} from "./cli-3b5rh4nn.js";
+} from "./cli-0qybv29g.js";
 import {
   getCurrentVersion,
   init_installation
-} from "./cli-ztvkmav5.js";
+} from "./cli-3e0jb8k6.js";
 import {
   __callDispose,
   __commonJS,
@@ -46606,6 +46606,11 @@ function toReference(stored) {
   if (stored.tokens?.customHeaders) {
     ref.customHeaderKeys = Object.keys(stored.tokens.customHeaders);
   }
+  if (stored.additionalFields) {
+    const keys = Object.keys(stored.additionalFields);
+    if (keys.length > 0)
+      ref.additionalFieldKeys = keys;
+  }
   const ctx = stored.metadata?.context;
   if (typeof ctx === "string" && ctx)
     ref.context = ctx;
@@ -46616,7 +46621,7 @@ class CredentialManager {
   store = new Map;
   findDuplicate(candidate) {
     for (const [id, existing] of this.store) {
-      if (existing.username === candidate.username && existing.password === candidate.password && existing.apiKey === candidate.apiKey && existing.loginUrl === candidate.loginUrl && existing.tokens?.bearerToken === candidate.tokens?.bearerToken && existing.tokens?.cookies === candidate.tokens?.cookies && existing.tokens?.sessionToken === candidate.tokens?.sessionToken && JSON.stringify(existing.tokens?.customHeaders) === JSON.stringify(candidate.tokens?.customHeaders)) {
+      if (existing.username === candidate.username && existing.password === candidate.password && existing.apiKey === candidate.apiKey && existing.loginUrl === candidate.loginUrl && existing.tokens?.bearerToken === candidate.tokens?.bearerToken && existing.tokens?.cookies === candidate.tokens?.cookies && existing.tokens?.sessionToken === candidate.tokens?.sessionToken && JSON.stringify(existing.tokens?.customHeaders) === JSON.stringify(candidate.tokens?.customHeaders) && JSON.stringify(existing.additionalFields) === JSON.stringify(candidate.additionalFields)) {
         return id;
       }
     }
@@ -46714,6 +46719,9 @@ class CredentialManager {
       if (ref.customHeaderKeys?.length) {
         parts.push(`  Header keys: ${ref.customHeaderKeys.join(", ")}`);
       }
+      if (ref.additionalFieldKeys?.length) {
+        parts.push(`  Additional secret fields: ${ref.additionalFieldKeys.join(", ")}`);
+      }
       if (ref.context)
         parts.push(`  Context: ${ref.context}`);
       return parts.join(`
@@ -46722,6 +46730,9 @@ class CredentialManager {
     return `<available_credentials>
 The following credentials are available. To use a credential, pass its ID to the appropriate tool.
 Do NOT ask the user for passwords or secrets — they are resolved automatically from the credential ID.
+"Additional secret fields" are operator-supplied named secrets: pass the name as "credentialField"
+to browser_fill, or read the matching environment variable in execute_command. Their values are
+never shown to you and are redacted from command output.
 
 ${lines.join(`
 
@@ -47265,7 +47276,7 @@ async function create2(input) {
   if (normalizedConfig?.headers !== undefined) {
     snapshotHeaders = { ...normalizedConfig.headers };
   } else {
-    const { config: appConfig } = await import("./index-0kd686e2.js");
+    const { config: appConfig } = await import("./index-yggyem63.js");
     const cfg = await appConfig.get();
     snapshotHeaders = cfg.defaultHeaders ? { ...cfg.defaultHeaders } : { ...DEFAULT_HEADER_RECORD };
   }

package/build/{cli-ztvkmav5.js → cli-3e0jb8k6.js}

@@ -120,7 +120,7 @@ var init_package = __esm(() => {
       tsc: "tsc --noEmit"
     },
     type: "module",
-    version: "2.3.0-canary.15ec17ea"
+    version: "2.3.0-canary.3f6d2a2b"
   };
 });
 

package/build/{cli-vbz5qm07.js → cli-3r7xgtqj.js}

@@ -1,7 +1,7 @@
 import {
   CweEntrySchema,
   ValidatedCweEntrySchema
-} from "./cli-3q27f7wb.js";
+} from "./cli-mb680jb3.js";
 import {
   exports_external,
   init_zod