@pensar/apex 2.3.0 → 2.4.0

package/build/{agent-9xna7jhw.js → agent-5ejt5vpz.js}

@@ -1,24 +1,24 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-n2m2yy5b.js";
+} from "./cli-repbyhkk.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-7tw4xfnw.js";
+} from "./cli-tznv8pf1.js";
 import"./cli-c8131c4q.js";
 import {
   init_dist,
   stepCountIs
-} from "./cli-zx8gk8xv.js";
-import"./cli-vckbhnyk.js";
+} from "./cli-tkc598ey.js";
+import"./cli-0n4r54hq.js";
 import {
   exports_external,
   init_zod
-} from "./cli-3k1x5rn3.js";
-import"./cli-gpnb45ck.js";
-import"./cli-f7hanqbw.js";
-import"./cli-eveg9djy.js";
-import"./cli-barsn8br.js";
-import"./cli-8rxa073f.js";
+} from "./cli-swpbx60z.js";
+import"./cli-j54qa6tm.js";
+import"./cli-72cvcqhg.js";
+import"./cli-9rhzhgx2.js";
+import"./cli-vnynf0js.js";
+import"./cli-bc05qbss.js";
 
 // src/core/agents/specialized/findingJudge/agent.ts
 init_dist();
@@ -68,7 +68,7 @@ You are the last line of defense against false positives, hallucinated findings,
 - Authorization / access-control boundary bypass (RSC/prefetch/redirect-body leaks, missing per-route checks): the evidence must establish the access-model delta — which identity/role was used, and proof that the returned data is genuinely out of scope for that identity (cross-tenant, another user's, or admin-only data a member should not see). A 200 response, a leaked RSC payload, or a skipped redirect alone does NOT prove sensitive exposure. If the bypass is real but the returned data is non-sensitive or plausibly same-tenant/expected-visible, classify as a valid lower-impact finding and require the claim's impact/severity to match — do NOT accept it as high-confidence sensitive/cross-tenant exposure.
 - Authentication bypass: output should show protected access without valid credentials.
 - Email/HTML injection: ideally verify delivery and rendering. If only server acceptance is shown, confidence must stay below 0.7 and limitations must state rendering was not independently verified.
-- Missing rate limiting / anti-automation: fewer than 50 requests is insufficient. Evidence must state exact request count, timing/distribution, and observed statuses.
+- Missing rate limiting / anti-automation: a modest burst (~20 requests) with no observed throttling, delays, or 429s is sufficient to demonstrate the gap. For endpoints with real-world side effects (sending email/SMS/push, creating tickets/notifications, contact/support/feedback forms, payments), as few as 2–3 attempts plus the observed response is sufficient — do NOT require volume-testing that would spam real recipients. Evidence must state exact request count, timing/distribution, and observed statuses.
 
 ### Common Low-Signal Patterns
 Reject these unless the submitted evidence demonstrates concrete harm:

package/build/agent-mvpgvgks.js

@@ -0,0 +1,19 @@
+import {
+  CodeAgent
+} from "./cli-32z0017y.js";
+import"./cli-9fsre5pt.js";
+import"./cli-qqt4gj1w.js";
+import"./cli-repbyhkk.js";
+import"./cli-tznv8pf1.js";
+import"./cli-c8131c4q.js";
+import"./cli-tkc598ey.js";
+import"./cli-0n4r54hq.js";
+import"./cli-swpbx60z.js";
+import"./cli-j54qa6tm.js";
+import"./cli-72cvcqhg.js";
+import"./cli-9rhzhgx2.js";
+import"./cli-vnynf0js.js";
+import"./cli-bc05qbss.js";
+export {
+  CodeAgent
+};

package/build/agent-nhs1w5w0.js

@@ -0,0 +1,29 @@
+import {
+  PentestResponseSchema,
+  TargetedPentestAgent,
+  buildPentestActiveTools,
+  buildPentestPrompt,
+  buildPentestSystemPrompt,
+  resolvePentestAgentRole
+} from "./cli-mavved45.js";
+import"./cli-9fsre5pt.js";
+import"./cli-qqt4gj1w.js";
+import"./cli-repbyhkk.js";
+import"./cli-tznv8pf1.js";
+import"./cli-c8131c4q.js";
+import"./cli-tkc598ey.js";
+import"./cli-0n4r54hq.js";
+import"./cli-swpbx60z.js";
+import"./cli-j54qa6tm.js";
+import"./cli-72cvcqhg.js";
+import"./cli-9rhzhgx2.js";
+import"./cli-vnynf0js.js";
+import"./cli-bc05qbss.js";
+export {
+  PentestResponseSchema,
+  TargetedPentestAgent,
+  buildPentestActiveTools,
+  buildPentestPrompt,
+  buildPentestSystemPrompt,
+  resolvePentestAgentRole
+};

package/build/{apps-43pqbz7r.js → apps-17wvz1d7.js}

@@ -1,4 +1,14 @@
 #!/usr/bin/env bun
+import"./cli-vq52kp7j.js";
+import"./cli-5k33webc.js";
+import"./cli-gq40s5b3.js";
+import"./cli-b1adytsy.js";
+import"./cli-mavved45.js";
+import"./cli-xshasbwe.js";
+import"./cli-32z0017y.js";
+import"./cli-k8kc47pq.js";
+import"./cli-9fsre5pt.js";
+import"./cli-qqt4gj1w.js";
 import {
   createApp,
   createEndpoint,
@@ -12,28 +22,18 @@ import {
   searchEndpoints,
   updateApp,
   updateEndpoint
-} from "./cli-f71s6kcw.js";
-import"./cli-zm8tfpv7.js";
-import"./cli-bv2807tj.js";
-import"./cli-72b18z0n.js";
-import"./cli-50906d27.js";
-import"./cli-zk1ch6qf.js";
-import"./cli-j0n189ee.js";
-import"./cli-baqhqbe5.js";
-import"./cli-9fsre5pt.js";
-import"./cli-jyp2c6th.js";
-import"./cli-n2m2yy5b.js";
-import"./cli-7tw4xfnw.js";
+} from "./cli-repbyhkk.js";
+import"./cli-tznv8pf1.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-zx8gk8xv.js";
-import"./cli-vckbhnyk.js";
-import"./cli-3k1x5rn3.js";
-import"./cli-gpnb45ck.js";
-import"./cli-f7hanqbw.js";
-import"./cli-eveg9djy.js";
-import"./cli-barsn8br.js";
-import"./cli-8rxa073f.js";
+import"./cli-tkc598ey.js";
+import"./cli-0n4r54hq.js";
+import"./cli-swpbx60z.js";
+import"./cli-j54qa6tm.js";
+import"./cli-72cvcqhg.js";
+import"./cli-9rhzhgx2.js";
+import"./cli-vnynf0js.js";
+import"./cli-bc05qbss.js";
 
 // src/cli/apps.ts
 var APPLICATION_TYPES = [

package/build/{auth-c1z670rx.js → auth-z3h9859n.js}

@@ -1,22 +1,23 @@
 #!/usr/bin/env bun
-import"./cli-f71s6kcw.js";
-import"./cli-zm8tfpv7.js";
-import"./cli-bv2807tj.js";
-import"./cli-72b18z0n.js";
-import"./cli-50906d27.js";
-import"./cli-zk1ch6qf.js";
-import"./cli-j0n189ee.js";
-import"./cli-baqhqbe5.js";
+import"./cli-vq52kp7j.js";
+import"./cli-5k33webc.js";
+import"./cli-gq40s5b3.js";
+import"./cli-b1adytsy.js";
+import"./cli-mavved45.js";
+import"./cli-xshasbwe.js";
+import"./cli-32z0017y.js";
+import"./cli-k8kc47pq.js";
 import"./cli-9fsre5pt.js";
-import"./cli-jyp2c6th.js";
-import"./cli-n2m2yy5b.js";
-import"./cli-7tw4xfnw.js";
+import"./cli-qqt4gj1w.js";
+import"./cli-repbyhkk.js";
+import"./cli-tznv8pf1.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-zx8gk8xv.js";
+import"./cli-tkc598ey.js";
 import {
   createWorkspaceSelection,
   disconnect,
+  ensureValidToken,
   fetchWorkspaces,
   getPensarApiUrl,
   getPensarConsoleUrl,
@@ -28,18 +29,18 @@ import {
   pollWorkspaceSelection,
   selectWorkspace,
   startDeviceFlow
-} from "./cli-vckbhnyk.js";
-import"./cli-3k1x5rn3.js";
-import"./cli-gpnb45ck.js";
+} from "./cli-0n4r54hq.js";
+import"./cli-swpbx60z.js";
+import"./cli-j54qa6tm.js";
 import {
   config,
   init_config
-} from "./cli-f7hanqbw.js";
-import"./cli-eveg9djy.js";
-import"./cli-barsn8br.js";
+} from "./cli-72cvcqhg.js";
+import"./cli-9rhzhgx2.js";
+import"./cli-vnynf0js.js";
 import {
   __require
-} from "./cli-8rxa073f.js";
+} from "./cli-bc05qbss.js";
 
 // src/cli/auth.ts
 import * as readline from "node:readline";
@@ -85,7 +86,13 @@ Waiting for workspace selection...`);
 }
 async function login() {
   const appConfig = await config.get();
-  if (isConnected(appConfig)) {
+  const hasStoredCredentials = isConnected(appConfig);
+  const validToken = hasStoredCredentials ? await ensureValidToken({
+    accessToken: appConfig.accessToken,
+    refreshToken: appConfig.refreshToken,
+    pensarAPIKey: appConfig.pensarAPIKey
+  }) : null;
+  if (validToken) {
     console.log("Already connected to Pensar Console.");
     if (appConfig.workspaceSlug) {
       console.log(`  Workspace: ${appConfig.workspaceSlug}`);
@@ -95,6 +102,8 @@ Reconnect? (y/N): `);
     if (answer.toLowerCase() !== "y") {
       return;
     }
+  } else if (hasStoredCredentials) {
+    console.log("Your saved Pensar Console session has expired. Reconnecting.");
   }
   console.log(`
 Pensar Console — Managed Inference
@@ -228,6 +237,15 @@ async function status() {
     console.log("Not connected to Pensar Console.\n\nRun `pensar login` to connect.");
     return;
   }
+  const validToken = await ensureValidToken({
+    accessToken: appConfig.accessToken,
+    refreshToken: appConfig.refreshToken,
+    pensarAPIKey: appConfig.pensarAPIKey
+  });
+  if (!validToken) {
+    console.log("Your Pensar Console session has expired.\n\nRun `pensar login` to reconnect.");
+    return;
+  }
   if (!appConfig.accessToken && appConfig.pensarAPIKey && !appConfig.workspaceSlug) {
     try {
       const apiUrl = getPensarApiUrl();

package/build/authentication-3s97cpk4.js

@@ -0,0 +1,19 @@
+import {
+  runAuthenticationAgent
+} from "./cli-xshasbwe.js";
+import"./cli-9fsre5pt.js";
+import"./cli-qqt4gj1w.js";
+import"./cli-repbyhkk.js";
+import"./cli-tznv8pf1.js";
+import"./cli-c8131c4q.js";
+import"./cli-tkc598ey.js";
+import"./cli-0n4r54hq.js";
+import"./cli-swpbx60z.js";
+import"./cli-j54qa6tm.js";
+import"./cli-72cvcqhg.js";
+import"./cli-9rhzhgx2.js";
+import"./cli-vnynf0js.js";
+import"./cli-bc05qbss.js";
+export {
+  runAuthenticationAgent
+};

package/build/blackboxAgent-gw0a1ca4.js

@@ -0,0 +1,19 @@
+import {
+  BlackboxAttackSurfaceAgent
+} from "./cli-gq40s5b3.js";
+import"./cli-9fsre5pt.js";
+import"./cli-qqt4gj1w.js";
+import"./cli-repbyhkk.js";
+import"./cli-tznv8pf1.js";
+import"./cli-c8131c4q.js";
+import"./cli-tkc598ey.js";
+import"./cli-0n4r54hq.js";
+import"./cli-swpbx60z.js";
+import"./cli-j54qa6tm.js";
+import"./cli-72cvcqhg.js";
+import"./cli-9rhzhgx2.js";
+import"./cli-vnynf0js.js";
+import"./cli-bc05qbss.js";
+export {
+  BlackboxAttackSurfaceAgent
+};

package/build/{blackboxPentest-tgc2t3y6.js → blackboxPentest-44333zss.js}

@@ -1,25 +1,25 @@
 import {
   runPentestWorkflow
-} from "./cli-zm8tfpv7.js";
-import"./cli-bv2807tj.js";
-import"./cli-72b18z0n.js";
-import"./cli-50906d27.js";
-import"./cli-j0n189ee.js";
-import"./cli-baqhqbe5.js";
+} from "./cli-5k33webc.js";
+import"./cli-gq40s5b3.js";
+import"./cli-b1adytsy.js";
+import"./cli-mavved45.js";
+import"./cli-32z0017y.js";
+import"./cli-k8kc47pq.js";
 import"./cli-9fsre5pt.js";
-import"./cli-jyp2c6th.js";
-import"./cli-n2m2yy5b.js";
-import"./cli-7tw4xfnw.js";
+import"./cli-qqt4gj1w.js";
+import"./cli-repbyhkk.js";
+import"./cli-tznv8pf1.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-zx8gk8xv.js";
-import"./cli-vckbhnyk.js";
-import"./cli-3k1x5rn3.js";
-import"./cli-gpnb45ck.js";
-import"./cli-f7hanqbw.js";
-import"./cli-eveg9djy.js";
-import"./cli-barsn8br.js";
-import"./cli-8rxa073f.js";
+import"./cli-tkc598ey.js";
+import"./cli-0n4r54hq.js";
+import"./cli-swpbx60z.js";
+import"./cli-j54qa6tm.js";
+import"./cli-72cvcqhg.js";
+import"./cli-9rhzhgx2.js";
+import"./cli-vnynf0js.js";
+import"./cli-bc05qbss.js";
 
 // src/core/api/blackboxPentest.ts
 async function runPentestAgent(input) {

package/build/{cli-vckbhnyk.js → cli-0n4r54hq.js}

@@ -1,10 +1,10 @@
 import {
   config,
   init_config
-} from "./cli-f7hanqbw.js";
+} from "./cli-72cvcqhg.js";
 import {
   __esm
-} from "./cli-8rxa073f.js";
+} from "./cli-bc05qbss.js";
 
 // src/core/auth/connection.ts
 function isConnected(cfg) {

package/build/{cli-bnkgdywr.js → cli-2cbwdk78.js}

@@ -3,7 +3,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-zx8gk8xv.js";
+} from "./cli-tkc598ey.js";
 
 // src/core/integrations/wandb/client.ts
 init_structured();

package/build/{cli-j0n189ee.js → cli-32z0017y.js}

@@ -1,10 +1,10 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-n2m2yy5b.js";
+} from "./cli-repbyhkk.js";
 import {
   init_dist,
   stepCountIs
-} from "./cli-zx8gk8xv.js";
+} from "./cli-tkc598ey.js";
 
 // src/core/agents/specialized/codeAgent/agent.ts
 init_dist();

package/build/{cli-zm8tfpv7.js → cli-5k33webc.js}

@@ -1,20 +1,20 @@
 import {
   BlackboxAttackSurfaceAgent
-} from "./cli-bv2807tj.js";
+} from "./cli-gq40s5b3.js";
 import {
   REPORT_FILENAME_JSON,
   REPORT_FILENAME_MD,
   buildPentestReport,
   renderJson,
   renderMarkdown
-} from "./cli-72b18z0n.js";
+} from "./cli-b1adytsy.js";
 import {
   TargetedPentestAgent,
   buildPentestSystemPrompt
-} from "./cli-50906d27.js";
+} from "./cli-mavved45.js";
 import {
   CodeAgent
-} from "./cli-j0n189ee.js";
+} from "./cli-32z0017y.js";
 import {
   AppsDiscoveryResultSchema,
   DiscoverySummarySchema,
@@ -22,7 +22,7 @@ import {
   WHITEBOX_APPS_DISCOVERY_SYSTEM_PROMPT,
   WHITEBOX_DISCOVERY_SYSTEM_PROMPT,
   WHITEBOX_ENDPOINT_DOCUMENTATION_SYSTEM_PROMPT
-} from "./cli-baqhqbe5.js";
+} from "./cli-k8kc47pq.js";
 import {
   FindingsRegistry,
   OffensiveSecurityAgent,
@@ -31,7 +31,7 @@ import {
   pLimit,
   runWithBoundedConcurrency,
   toGrpcPentestContext
-} from "./cli-n2m2yy5b.js";
+} from "./cli-repbyhkk.js";
 import {
   createThreatModelPrompt
 } from "./cli-fw5r7pfj.js";
@@ -45,10 +45,10 @@ import {
   init_structured,
   newSessionId,
   scopedLogger
-} from "./cli-zx8gk8xv.js";
+} from "./cli-tkc598ey.js";
 import {
   __require
-} from "./cli-8rxa073f.js";
+} from "./cli-bc05qbss.js";
 
 // src/core/workflows/pentest.ts
 init_dist();
@@ -7692,6 +7692,12 @@ async function runPentestSwarm(input) {
     });
     if (session.config?.requirePlan && session.config?.taskDriven && previousMessages.length === 0) {
       try {
+        eventBus?.emit("subagent-spawn", {
+          subagentId: `${subagentId}-plan`,
+          name: `${subagentName} (plan)`,
+          input: { target: target.target, objectives: target.objectives },
+          parentSubagentId: subagentId
+        });
         const executionTasksDir = join18(session.rootPath, "subagents", `${subagentId}-tasks`);
         const planAgent = new OffensiveSecurityAgent({
           system: PLAN_PHASE_SYSTEM_PROMPT,
@@ -7717,7 +7723,17 @@ async function runPentestSwarm(input) {
           display
         });
         await planAgent.consume();
+        eventBus?.emit("subagent-complete", {
+          subagentId: `${subagentId}-plan`,
+          status: "completed",
+          parentSubagentId: subagentId
+        });
       } catch (planErr) {
+        eventBus?.emit("subagent-complete", {
+          subagentId: `${subagentId}-plan`,
+          status: "failed",
+          parentSubagentId: subagentId
+        });
         log5.warn(`Plan phase failed for ${subagentId}: ${planErr}`);
       }
     }
@@ -7786,7 +7802,7 @@ async function runPentestSwarm(input) {
 }
 async function runPentestWorkflow(input) {
   if (input.fastStrike) {
-    const { runFastStrike } = await import("./fastStrike-ebz1ph9a.js");
+    const { runFastStrike } = await import("./fastStrike-8zka43xs.js");
     return runFastStrike(input);
   }
   const {

package/build/{cli-f7hanqbw.js → cli-72cvcqhg.js}

@@ -3,10 +3,10 @@ import {
   init,
   init_config,
   update
-} from "./cli-eveg9djy.js";
+} from "./cli-9rhzhgx2.js";
 import {
   __esm
-} from "./cli-8rxa073f.js";
+} from "./cli-bc05qbss.js";
 
 // src/core/config/index.ts
 var config;

package/build/{cli-eveg9djy.js → cli-9rhzhgx2.js}

@@ -1,10 +1,10 @@
 import {
   getCurrentVersion,
   init_installation
-} from "./cli-barsn8br.js";
+} from "./cli-vnynf0js.js";
 import {
   __esm
-} from "./cli-8rxa073f.js";
+} from "./cli-bc05qbss.js";
 
 // src/core/config/config.ts
 import fs from "node:fs/promises";
@@ -45,6 +45,7 @@ function applyEnvFallbacks(parsedConfig) {
     anthropicAPIKey: parsedConfig.anthropicAPIKey ?? process.env.ANTHROPIC_API_KEY,
     googleAPIKey: parsedConfig.googleAPIKey ?? process.env.GOOGLE_GENERATIVE_AI_API_KEY,
     openRouterAPIKey: parsedConfig.openRouterAPIKey ?? process.env.OPENROUTER_API_KEY,
+    concentrateAPIKey: parsedConfig.concentrateAPIKey ?? process.env.CONCENTRATE_API_KEY,
     inceptionAPIKey: parsedConfig.inceptionAPIKey ?? process.env.INCEPTION_API_KEY,
     bedrockAPIKey: parsedConfig.bedrockAPIKey ?? process.env.BEDROCK_API_KEY,
     pensarAPIKey: parsedConfig.pensarAPIKey ?? process.env.PENSAR_API_KEY,

package/build/{cli-72b18z0n.js → cli-b1adytsy.js}

@@ -1,15 +1,15 @@
 import {
   EvidenceFileEntrySchema
-} from "./cli-jyp2c6th.js";
+} from "./cli-qqt4gj1w.js";
 import {
   CweEntrySchema,
   ValidatedCweEntrySchema,
   hasCanonicalName
-} from "./cli-n2m2yy5b.js";
+} from "./cli-repbyhkk.js";
 import {
   exports_external,
   init_zod
-} from "./cli-3k1x5rn3.js";
+} from "./cli-swpbx60z.js";
 
 // src/core/report/schemas.ts
 init_zod();

package/build/{cli-8rxa073f.js → cli-bc05qbss.js}

@@ -20,12 +20,14 @@ var __toESM = (mod, isNodeMode, target) => {
   }
   target = mod != null ? __create(__getProtoOf(mod)) : {};
   const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
-  for (let key of __getOwnPropNames(mod))
-    if (!__hasOwnProp.call(to, key))
-      __defProp(to, key, {
-        get: __accessProp.bind(mod, key),
-        enumerable: true
-      });
+  if (mod && typeof mod === "object" || typeof mod === "function") {
+    for (let key of __getOwnPropNames(mod))
+      if (!__hasOwnProp.call(to, key))
+        __defProp(to, key, {
+          get: __accessProp.bind(mod, key),
+          enumerable: true
+        });
+  }
   if (canCache)
     cache.set(mod, to);
   return to;

package/build/{cli-q24twygk.js → cli-dm0fc0bm.js}

@@ -1,6 +1,6 @@
 import {
   __require
-} from "./cli-8rxa073f.js";
+} from "./cli-bc05qbss.js";
 
 // src/core/http/parse.ts
 var NAME_TOKEN = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;

package/build/{cli-yz80qkzn.js → cli-ee3axgts.js}

@@ -1,6 +1,6 @@
 import {
   __esm
-} from "./cli-8rxa073f.js";
+} from "./cli-bc05qbss.js";
 
 // src/core/providers/types.ts
 var AVAILABLE_PROVIDERS;
@@ -30,6 +30,12 @@ var init_types = __esm(() => {
       description: "Access multiple AI models through one API",
       requiresAPIKey: true
     },
+    {
+      id: "concentrate",
+      name: "Concentrate",
+      description: "Access multiple AI models through one API",
+      requiresAPIKey: true
+    },
     {
       id: "inception",
       name: "Inception",

package/build/{cli-bv2807tj.js → cli-gq40s5b3.js}

@@ -1,14 +1,14 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-n2m2yy5b.js";
+} from "./cli-repbyhkk.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-7tw4xfnw.js";
+} from "./cli-tznv8pf1.js";
 import {
   hasToolCall,
   init_dist,
   stepCountIs
-} from "./cli-zx8gk8xv.js";
+} from "./cli-tkc598ey.js";
 
 // src/core/agents/specialized/attackSurface/blackboxAgent.ts
 init_dist();

package/build/{cli-gpnb45ck.js → cli-j54qa6tm.js}

@@ -1,10 +1,10 @@
 import {
   __commonJS,
   __require
-} from "./cli-8rxa073f.js";
+} from "./cli-bc05qbss.js";
 
 // node_modules/@vercel/oidc/dist/token-error.js
-var require_token_error = __commonJS((exports, module) => {
+var require_token_error = __commonJS(function(exports, module) {
   var __defProp = Object.defineProperty;
   var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
   var __getOwnPropNames = Object.getOwnPropertyNames;
@@ -44,7 +44,7 @@ var require_token_error = __commonJS((exports, module) => {
 });
 
 // node_modules/@vercel/oidc/dist/token-io.js
-var require_token_io = __commonJS((exports, module) => {
+var require_token_io = __commonJS(function(exports, module) {
   var __create = Object.create;
   var __defProp = Object.defineProperty;
   var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -111,7 +111,7 @@ var require_token_io = __commonJS((exports, module) => {
 });
 
 // node_modules/@vercel/oidc/dist/auth-config.js
-var require_auth_config = __commonJS((exports, module) => {
+var require_auth_config = __commonJS(function(exports, module) {
   var __create = Object.create;
   var __defProp = Object.defineProperty;
   var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -184,7 +184,7 @@ var require_auth_config = __commonJS((exports, module) => {
 });
 
 // node_modules/@vercel/oidc/dist/oauth.js
-var require_oauth = __commonJS((exports, module) => {
+var require_oauth = __commonJS(function(exports, module) {
   var __defProp = Object.defineProperty;
   var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
   var __getOwnPropNames = Object.getOwnPropertyNames;
@@ -270,7 +270,7 @@ var require_oauth = __commonJS((exports, module) => {
 });
 
 // node_modules/@vercel/oidc/dist/auth-errors.js
-var require_auth_errors = __commonJS((exports, module) => {
+var require_auth_errors = __commonJS(function(exports, module) {
   var __defProp = Object.defineProperty;
   var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
   var __getOwnPropNames = Object.getOwnPropertyNames;
@@ -311,7 +311,7 @@ var require_auth_errors = __commonJS((exports, module) => {
 });
 
 // node_modules/@vercel/oidc/dist/token-util.js
-var require_token_util = __commonJS((exports, module) => {
+var require_token_util = __commonJS(function(exports, module) {
   var __create = Object.create;
   var __defProp = Object.defineProperty;
   var __getOwnPropDesc = Object.getOwnPropertyDescriptor;