@pensar/apex 2.4.0-canary.70dd6aae → 2.4.0-canary.d13eb239

package/build/{agent-qcsapr5k.js → agent-e46h35ay.js}

@@ -1,23 +1,23 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-xhhtbvvf.js";
+} from "./cli-deh0yfrw.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-tpwapt8k.js";
+} from "./cli-rgsym52y.js";
 import"./cli-c8131c4q.js";
 import {
   init_dist,
   stepCountIs
-} from "./cli-89encaay.js";
-import"./cli-a83apjmm.js";
+} from "./cli-a1xmncfm.js";
+import"./cli-419b5qgw.js";
 import {
   exports_external,
   init_zod
 } from "./cli-swpbx60z.js";
 import"./cli-j54qa6tm.js";
-import"./cli-a21gdq0h.js";
-import"./cli-4secrpg2.js";
-import"./cli-rx13s2v3.js";
+import"./cli-4z8jyxcb.js";
+import"./cli-2s00pcp1.js";
+import"./cli-04hkr78f.js";
 import"./cli-bc05qbss.js";
 
 // src/core/agents/specialized/findingJudge/agent.ts

package/build/agent-rjfefj3b.js

@@ -0,0 +1,19 @@
+import {
+  CodeAgent
+} from "./cli-0eeheft8.js";
+import"./cli-9fsre5pt.js";
+import"./cli-xdrjf347.js";
+import"./cli-deh0yfrw.js";
+import"./cli-rgsym52y.js";
+import"./cli-c8131c4q.js";
+import"./cli-a1xmncfm.js";
+import"./cli-419b5qgw.js";
+import"./cli-swpbx60z.js";
+import"./cli-j54qa6tm.js";
+import"./cli-4z8jyxcb.js";
+import"./cli-2s00pcp1.js";
+import"./cli-04hkr78f.js";
+import"./cli-bc05qbss.js";
+export {
+  CodeAgent
+};

package/build/{agent-k599ja1k.js → agent-tm0tmpgc.js}

@@ -5,19 +5,19 @@ import {
   buildPentestPrompt,
   buildPentestSystemPrompt,
   resolvePentestAgentRole
-} from "./cli-bsh9mtwc.js";
+} from "./cli-jgk83qr1.js";
 import"./cli-9fsre5pt.js";
-import"./cli-xgppmcjy.js";
-import"./cli-xhhtbvvf.js";
-import"./cli-tpwapt8k.js";
+import"./cli-xdrjf347.js";
+import"./cli-deh0yfrw.js";
+import"./cli-rgsym52y.js";
 import"./cli-c8131c4q.js";
-import"./cli-89encaay.js";
-import"./cli-a83apjmm.js";
+import"./cli-a1xmncfm.js";
+import"./cli-419b5qgw.js";
 import"./cli-swpbx60z.js";
 import"./cli-j54qa6tm.js";
-import"./cli-a21gdq0h.js";
-import"./cli-4secrpg2.js";
-import"./cli-rx13s2v3.js";
+import"./cli-4z8jyxcb.js";
+import"./cli-2s00pcp1.js";
+import"./cli-04hkr78f.js";
 import"./cli-bc05qbss.js";
 export {
   PentestResponseSchema,

package/build/{apps-w6wc1v7d.js → apps-yd4dytnh.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env bun
-import"./cli-w7hcfa14.js";
-import"./cli-1ndjx2cf.js";
-import"./cli-dg149fq1.js";
-import"./cli-q70zwc6d.js";
-import"./cli-bsh9mtwc.js";
-import"./cli-eb6cbejm.js";
-import"./cli-thfxawqn.js";
-import"./cli-rf0a3mw3.js";
+import"./cli-vkjgcner.js";
+import"./cli-yy936th4.js";
+import"./cli-0wc6bt29.js";
+import"./cli-1b7ytd6z.js";
+import"./cli-jgk83qr1.js";
+import"./cli-wjw0pmn3.js";
+import"./cli-0eeheft8.js";
+import"./cli-z3ykxkhs.js";
 import"./cli-9fsre5pt.js";
-import"./cli-xgppmcjy.js";
+import"./cli-xdrjf347.js";
 import {
   ENDPOINT_TRANSPORTS,
   createApp,
@@ -25,17 +25,17 @@ import {
   searchEndpoints,
   updateApp,
   updateEndpoint
-} from "./cli-xhhtbvvf.js";
-import"./cli-tpwapt8k.js";
+} from "./cli-deh0yfrw.js";
+import"./cli-rgsym52y.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-89encaay.js";
-import"./cli-a83apjmm.js";
+import"./cli-a1xmncfm.js";
+import"./cli-419b5qgw.js";
 import"./cli-swpbx60z.js";
 import"./cli-j54qa6tm.js";
-import"./cli-a21gdq0h.js";
-import"./cli-4secrpg2.js";
-import"./cli-rx13s2v3.js";
+import"./cli-4z8jyxcb.js";
+import"./cli-2s00pcp1.js";
+import"./cli-04hkr78f.js";
 import"./cli-bc05qbss.js";
 
 // src/cli/apps.ts

package/build/{auth-bg9jgx4x.js → auth-90n1pswd.js}

@@ -1,19 +1,19 @@
 #!/usr/bin/env bun
-import"./cli-w7hcfa14.js";
-import"./cli-1ndjx2cf.js";
-import"./cli-dg149fq1.js";
-import"./cli-q70zwc6d.js";
-import"./cli-bsh9mtwc.js";
-import"./cli-eb6cbejm.js";
-import"./cli-thfxawqn.js";
-import"./cli-rf0a3mw3.js";
+import"./cli-vkjgcner.js";
+import"./cli-yy936th4.js";
+import"./cli-0wc6bt29.js";
+import"./cli-1b7ytd6z.js";
+import"./cli-jgk83qr1.js";
+import"./cli-wjw0pmn3.js";
+import"./cli-0eeheft8.js";
+import"./cli-z3ykxkhs.js";
 import"./cli-9fsre5pt.js";
-import"./cli-xgppmcjy.js";
-import"./cli-xhhtbvvf.js";
-import"./cli-tpwapt8k.js";
+import"./cli-xdrjf347.js";
+import"./cli-deh0yfrw.js";
+import"./cli-rgsym52y.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-89encaay.js";
+import"./cli-a1xmncfm.js";
 import {
   createWorkspaceSelection,
   disconnect,
@@ -29,15 +29,15 @@ import {
   pollWorkspaceSelection,
   selectWorkspace,
   startDeviceFlow
-} from "./cli-a83apjmm.js";
+} from "./cli-419b5qgw.js";
 import"./cli-swpbx60z.js";
 import"./cli-j54qa6tm.js";
 import {
   config,
   init_config
-} from "./cli-a21gdq0h.js";
-import"./cli-4secrpg2.js";
-import"./cli-rx13s2v3.js";
+} from "./cli-4z8jyxcb.js";
+import"./cli-2s00pcp1.js";
+import"./cli-04hkr78f.js";
 import {
   __require
 } from "./cli-bc05qbss.js";

package/build/authentication-19qczcfx.js

@@ -0,0 +1,19 @@
+import {
+  runAuthenticationAgent
+} from "./cli-wjw0pmn3.js";
+import"./cli-9fsre5pt.js";
+import"./cli-xdrjf347.js";
+import"./cli-deh0yfrw.js";
+import"./cli-rgsym52y.js";
+import"./cli-c8131c4q.js";
+import"./cli-a1xmncfm.js";
+import"./cli-419b5qgw.js";
+import"./cli-swpbx60z.js";
+import"./cli-j54qa6tm.js";
+import"./cli-4z8jyxcb.js";
+import"./cli-2s00pcp1.js";
+import"./cli-04hkr78f.js";
+import"./cli-bc05qbss.js";
+export {
+  runAuthenticationAgent
+};

package/build/blackboxAgent-ja53082h.js

@@ -0,0 +1,19 @@
+import {
+  BlackboxAttackSurfaceAgent
+} from "./cli-0wc6bt29.js";
+import"./cli-9fsre5pt.js";
+import"./cli-xdrjf347.js";
+import"./cli-deh0yfrw.js";
+import"./cli-rgsym52y.js";
+import"./cli-c8131c4q.js";
+import"./cli-a1xmncfm.js";
+import"./cli-419b5qgw.js";
+import"./cli-swpbx60z.js";
+import"./cli-j54qa6tm.js";
+import"./cli-4z8jyxcb.js";
+import"./cli-2s00pcp1.js";
+import"./cli-04hkr78f.js";
+import"./cli-bc05qbss.js";
+export {
+  BlackboxAttackSurfaceAgent
+};

package/build/{blackboxPentest-gezfrvxt.js → blackboxPentest-qt04n5v0.js}

@@ -1,24 +1,24 @@
 import {
   runPentestWorkflow
-} from "./cli-1ndjx2cf.js";
-import"./cli-dg149fq1.js";
-import"./cli-q70zwc6d.js";
-import"./cli-bsh9mtwc.js";
-import"./cli-thfxawqn.js";
-import"./cli-rf0a3mw3.js";
+} from "./cli-yy936th4.js";
+import"./cli-0wc6bt29.js";
+import"./cli-1b7ytd6z.js";
+import"./cli-jgk83qr1.js";
+import"./cli-0eeheft8.js";
+import"./cli-z3ykxkhs.js";
 import"./cli-9fsre5pt.js";
-import"./cli-xgppmcjy.js";
-import"./cli-xhhtbvvf.js";
-import"./cli-tpwapt8k.js";
+import"./cli-xdrjf347.js";
+import"./cli-deh0yfrw.js";
+import"./cli-rgsym52y.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-89encaay.js";
-import"./cli-a83apjmm.js";
+import"./cli-a1xmncfm.js";
+import"./cli-419b5qgw.js";
 import"./cli-swpbx60z.js";
 import"./cli-j54qa6tm.js";
-import"./cli-a21gdq0h.js";
-import"./cli-4secrpg2.js";
-import"./cli-rx13s2v3.js";
+import"./cli-4z8jyxcb.js";
+import"./cli-2s00pcp1.js";
+import"./cli-04hkr78f.js";
 import"./cli-bc05qbss.js";
 
 // src/core/api/blackboxPentest.ts

package/build/{cli-rx13s2v3.js → cli-04hkr78f.js}

@@ -120,7 +120,7 @@ var init_package = __esm(() => {
       tsc: "tsc --noEmit"
     },
     type: "module",
-    version: "2.4.0-canary.70dd6aae"
+    version: "2.4.0-canary.d13eb239"
   };
 });
 

package/build/{cli-thfxawqn.js → cli-0eeheft8.js}

@@ -1,10 +1,10 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-xhhtbvvf.js";
+} from "./cli-deh0yfrw.js";
 import {
   init_dist,
   stepCountIs
-} from "./cli-89encaay.js";
+} from "./cli-a1xmncfm.js";
 
 // src/core/agents/specialized/codeAgent/agent.ts
 init_dist();

package/build/{cli-dg149fq1.js → cli-0wc6bt29.js}

@@ -1,14 +1,14 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-xhhtbvvf.js";
+} from "./cli-deh0yfrw.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-tpwapt8k.js";
+} from "./cli-rgsym52y.js";
 import {
   hasToolCall,
   init_dist,
   stepCountIs
-} from "./cli-89encaay.js";
+} from "./cli-a1xmncfm.js";
 
 // src/core/agents/specialized/attackSurface/blackboxAgent.ts
 init_dist();

package/build/{cli-q70zwc6d.js → cli-1b7ytd6z.js}

@@ -1,11 +1,11 @@
 import {
   EvidenceFileEntrySchema
-} from "./cli-xgppmcjy.js";
+} from "./cli-xdrjf347.js";
 import {
   CweEntrySchema,
   ValidatedCweEntrySchema,
   hasCanonicalName
-} from "./cli-xhhtbvvf.js";
+} from "./cli-deh0yfrw.js";
 import {
   exports_external,
   init_zod

package/build/{cli-4secrpg2.js → cli-2s00pcp1.js}

@@ -1,7 +1,7 @@
 import {
   getCurrentVersion,
   init_installation
-} from "./cli-rx13s2v3.js";
+} from "./cli-04hkr78f.js";
 import {
   __esm
 } from "./cli-bc05qbss.js";

package/build/{cli-a83apjmm.js → cli-419b5qgw.js}

@@ -1,7 +1,7 @@
 import {
   config,
   init_config
-} from "./cli-a21gdq0h.js";
+} from "./cli-4z8jyxcb.js";
 import {
   __esm
 } from "./cli-bc05qbss.js";

package/build/{cli-a21gdq0h.js → cli-4z8jyxcb.js}

@@ -3,7 +3,7 @@ import {
   init,
   init_config,
   update
-} from "./cli-4secrpg2.js";
+} from "./cli-2s00pcp1.js";
 import {
   __esm
 } from "./cli-bc05qbss.js";

package/build/{cli-89encaay.js → cli-a1xmncfm.js}

@@ -4,7 +4,7 @@ import {
   init_auth,
   init_constants,
   signGatewayRequest
-} from "./cli-a83apjmm.js";
+} from "./cli-419b5qgw.js";
 import {
   AISDKError,
   APICallError,
@@ -87,11 +87,11 @@ import {
 import {
   config,
   init_config
-} from "./cli-a21gdq0h.js";
+} from "./cli-4z8jyxcb.js";
 import {
   getCurrentVersion,
   init_installation
-} from "./cli-rx13s2v3.js";
+} from "./cli-04hkr78f.js";
 import {
   __callDispose,
   __commonJS,
@@ -45821,6 +45821,9 @@ var init_streamTelemetry = __esm(() => {
 
 // src/core/ai/ai.ts
 import { AsyncLocalStorage } from "node:async_hooks";
+function isRepairFailClosedTool(toolName) {
+  return REPAIR_FAIL_CLOSED_TOOLS.has(toolName);
+}
 function takeStepContext() {
   const store = stepContextStore.getStore();
   if (!store)
@@ -46265,6 +46268,12 @@ function streamResponse(opts) {
           const rawLen = typeof raw === "string" ? raw.length : JSON.stringify(raw).length;
           log.warn(`[response-debug] experimental_repairToolCall FIRED for response ` + `rawInputChars=${rawLen} error=${(error.message || String(error)).slice(0, 200)}`);
         }
+        if (isRepairFailClosedTool(toolCall.toolName)) {
+          if (!silent) {
+            log.warn(`Tool-call repair disabled for security-sensitive tool "${toolCall.toolName}" — failing closed (no argument synthesis).`);
+          }
+          return null;
+        }
         try {
           if (!silent) {
             log.debug(`Repairing tool call: ${toolCall.toolName}`, {
@@ -46447,7 +46456,7 @@ async function generateObjectResponse(opts) {
   }
   throw lastError;
 }
-var log, RESPONSE_DEBUG, RESPONSE_TOOL_NAME = "response", DEFAULT_OPENAI_REASONING_EFFORT = "medium", OPENAI_REASONING_MODEL_IDS, _usageCallback = null, stepContextStore, SEQUENTIAL_TOOL_CALL_INSTRUCTION, MAX_RATE_LIMIT_RETRIES = 20, MAX_IDLE_RESUME_RETRIES = 3, STREAM_IDLE_TIMEOUT_MS, StreamIdleTimeoutError, NON_GATED_TOOLS, MAX_OBJECT_RATE_LIMIT_RETRIES = 8, ContextLengthError, ContextLengthExhaustedError, MAX_RESTART_DEPTH = 3, MAX_TOOL_INPUT_CHARS = 8000, MAX_SCHEMA_CHARS = 6000, MINIMAL_RESTART_PROMPT = "Continue the previous task. Earlier context was discarded due to repeated context-length errors.";
+var log, RESPONSE_DEBUG, RESPONSE_TOOL_NAME = "response", REPAIR_FAIL_CLOSED_TOOLS, DEFAULT_OPENAI_REASONING_EFFORT = "medium", OPENAI_REASONING_MODEL_IDS, _usageCallback = null, stepContextStore, SEQUENTIAL_TOOL_CALL_INSTRUCTION, MAX_RATE_LIMIT_RETRIES = 20, MAX_IDLE_RESUME_RETRIES = 3, STREAM_IDLE_TIMEOUT_MS, StreamIdleTimeoutError, NON_GATED_TOOLS, MAX_OBJECT_RATE_LIMIT_RETRIES = 8, ContextLengthError, ContextLengthExhaustedError, MAX_RESTART_DEPTH = 3, MAX_TOOL_INPUT_CHARS = 8000, MAX_SCHEMA_CHARS = 6000, MINIMAL_RESTART_PROMPT = "Continue the previous task. Earlier context was discarded due to repeated context-length errors.";
 var init_ai = __esm(() => {
   init_dist4();
   init_structured();
@@ -46460,6 +46469,9 @@ var init_ai = __esm(() => {
   init_utils();
   log = scopedLogger(() => createLogger("ai"));
   RESPONSE_DEBUG = process.env.RESPONSE_DEBUG === "1" || process.env.RESPONSE_DEBUG === "true";
+  REPAIR_FAIL_CLOSED_TOOLS = new Set([
+    "spawn_pentest_agent"
+  ]);
   OPENAI_REASONING_MODEL_IDS = new Set([
     "gpt-5",
     "gpt-5-2025-08-07",
@@ -47372,7 +47384,7 @@ async function create2(input) {
   if (normalizedConfig?.headers !== undefined) {
     snapshotHeaders = { ...normalizedConfig.headers };
   } else {
-    const { config: appConfig } = await import("./index-e96hpswc.js");
+    const { config: appConfig } = await import("./index-7vdchwsv.js");
     const cfg = await appConfig.get();
     snapshotHeaders = cfg.defaultHeaders ? { ...cfg.defaultHeaders } : { ...DEFAULT_HEADER_RECORD };
   }

package/build/{cli-xhhtbvvf.js → cli-deh0yfrw.js}

@@ -1,6 +1,6 @@
 import {
   detectOSAndEnhancePrompt
-} from "./cli-tpwapt8k.js";
+} from "./cli-rgsym52y.js";
 import {
   parseTargetUrl
 } from "./cli-c8131c4q.js";
@@ -32,14 +32,14 @@ import {
   streamResponse,
   withSubagentSessionBaggage,
   write
-} from "./cli-89encaay.js";
+} from "./cli-a1xmncfm.js";
 import {
   ensureValidToken,
   getPensarApiUrl,
   init_auth,
   init_constants,
   signGatewayRequest
-} from "./cli-a83apjmm.js";
+} from "./cli-419b5qgw.js";
 import {
   _enum,
   _null,
@@ -70,7 +70,7 @@ import {
 import {
   config,
   init_config
-} from "./cli-a21gdq0h.js";
+} from "./cli-4z8jyxcb.js";
 import {
   __commonJS,
   __require,
@@ -104461,6 +104461,19 @@ function assertUrlInScope(url, ctx) {
     throw new ScopeViolationError(hostname, allowedHosts);
   }
 }
+function assertFindingEndpointInScope(endpoint, ctx) {
+  const allowedHosts = getAllowedHosts(ctx);
+  if (allowedHosts.length === 0)
+    return;
+  if (!/^https?:\/\//i.test(endpoint.trim()))
+    return;
+  const hostname = extractHostname2(endpoint);
+  if (!hostname)
+    return;
+  if (!isHostAllowed(hostname, allowedHosts)) {
+    throw new ScopeViolationError(hostname, allowedHosts);
+  }
+}
 function extractHostsFromCommand(command) {
   const hosts = new Set;
   const urlPattern = /https?:\/\/[^\s"'`;|&)<>]+/gi;
@@ -106752,7 +106765,7 @@ IMPORTANT: Pass protectedEndpoints in authHints when you've discovered 401/403 e
         if (credentials) {
           ctx.session.credentialManager.addFromAuthCredentials(credentials);
         }
-        const { runAuthenticationAgent } = await import("./authentication-px7hvjew.js");
+        const { runAuthenticationAgent } = await import("./authentication-19qczcfx.js");
         const localBus = new AgentEventBus;
         AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
         const result = await runAuthenticationAgent({
@@ -107546,7 +107559,7 @@ async function generateThreatModelForEndpoint(ctx, input) {
   return threatModelLimiter(async () => {
     if (ctx.abortSignal?.aborted)
       return null;
-    const { CodeAgent } = await import("./agent-bt1317by.js");
+    const { CodeAgent } = await import("./agent-rjfefj3b.js");
     const subagentId = newSessionId();
     const subagentName = `Threat Model: ${input.routePath}`;
     ctx.eventBus?.emit("subagent-spawn", {
@@ -109471,7 +109484,7 @@ init_lazyLogger();
 var log6 = scopedLogger(() => createLogger("FindingJudge"));
 async function judgeFinding(input, ctx) {
   try {
-    const { FindingJudgeAgent } = await import("./agent-qcsapr5k.js");
+    const { FindingJudgeAgent } = await import("./agent-e46h35ay.js");
     const agent = new FindingJudgeAgent({
       finding: input,
       model: ctx.model,
@@ -109647,6 +109660,18 @@ CRITICAL RULES — READ BEFORE CALLING:
 - If you could not exploit a vulnerability, do NOT call this tool — mention it in your final response summary instead`,
     inputSchema: documentVulnerabilityInputSchema,
     execute: async (input) => {
+      try {
+        assertFindingEndpointInScope(input.endpoint, ctx);
+      } catch (error) {
+        if (error instanceof ScopeViolationError) {
+          return {
+            success: false,
+            error: error.message,
+            message: `Finding endpoint rejected — out of scope: ${error.message}`
+          };
+        }
+        throw error;
+      }
       try {
         const materializedEvidence = formatMateriality(input);
         if (ctx.findingsRegistry) {
@@ -116097,7 +116122,7 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
       });
       if (cwd) {
         try {
-          const { WhiteboxAttackSurfaceAgent } = await import("./index-7jzzkhwc.js");
+          const { WhiteboxAttackSurfaceAgent } = await import("./index-y04ata99.js");
           const localBus = new AgentEventBus;
           AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
           const agent = new WhiteboxAttackSurfaceAgent({
@@ -116152,7 +116177,7 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
         }
       }
       try {
-        const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-h5scqk7m.js");
+        const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-ja53082h.js");
         const localBus = new AgentEventBus;
         AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
         const agent = new BlackboxAttackSurfaceAgent({
@@ -116230,7 +116255,7 @@ Omit \`cwd\` for blackbox mode (live target probing only).`,
       toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async ({ target, cwd }) => {
-      const { runPentestWorkflow: workflow } = await import("./pentest-narr05dk.js");
+      const { runPentestWorkflow: workflow } = await import("./pentest-7kcewtby.js");
       if (!ctx.model) {
         return {
           success: false,
@@ -117808,7 +117833,7 @@ Returns an array of results with the text output from each agent.`,
   });
 }
 async function runSingleCodingAgent(ctx, codebasePath, objective, agentIndex, name) {
-  const { CodeAgent } = await import("./agent-bt1317by.js");
+  const { CodeAgent } = await import("./agent-rjfefj3b.js");
   const childSessionId = newSessionId();
   const subagentId = childSessionId;
   ctx.eventBus?.emit("subagent-spawn", {
@@ -118325,7 +118350,21 @@ Returns the worker's summary, objective results, and finding count — but NOT t
           message: "spawn_pentest_agent requires a model in the tool context."
         };
       }
-      const { TargetedPentestAgent } = await import("./agent-k599ja1k.js");
+      if (typeof target !== "string" || parseTargetUrl(target) === null) {
+        return {
+          success: false,
+          message: `spawn_pentest_agent rejected: "target" is not a valid full URL (received ${JSON.stringify(target)}). ` + `Pass the exact full URL the orchestrator received — do NOT invent, default, or substitute a target.`
+        };
+      }
+      try {
+        assertUrlInScope(target, ctx);
+      } catch (error) {
+        if (error instanceof ScopeViolationError) {
+          return { success: false, message: error.message };
+        }
+        throw error;
+      }
+      const { TargetedPentestAgent } = await import("./agent-tm0tmpgc.js");
       const findingsRegistry = ctx.findingsRegistry ?? FindingsRegistry.fromDirectory(ctx.session.findingsPath, {
         model: ctx.model,
         authConfig: ctx.authConfig,
@@ -118459,7 +118498,7 @@ Pass every target you want tested — the swarm handles concurrency automaticall
       toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async ({ targets }) => {
-      const { runPentestSwarm, DEFAULT_CONCURRENCY: DEFAULT_CONCURRENCY2 } = await import("./pentest-narr05dk.js");
+      const { runPentestSwarm, DEFAULT_CONCURRENCY: DEFAULT_CONCURRENCY2 } = await import("./pentest-7kcewtby.js");
       if (!ctx.model) {
         return {
           success: false,

package/build/{cli-bsh9mtwc.js → cli-jgk83qr1.js}

@@ -5,7 +5,7 @@ import {
   createReportErrorTool,
   isMemoryEnabled,
   readPlan
-} from "./cli-xhhtbvvf.js";
+} from "./cli-deh0yfrw.js";
 import {
   createLogger,
   hasToolCall,
@@ -13,7 +13,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-89encaay.js";
+} from "./cli-a1xmncfm.js";
 import {
   exports_external,
   init_zod

package/build/{cli-6r6nrznn.js → cli-kc7w78m4.js}

@@ -3,7 +3,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-89encaay.js";
+} from "./cli-a1xmncfm.js";
 
 // src/core/integrations/wandb/client.ts
 init_structured();

package/build/{cli-tpwapt8k.js → cli-rgsym52y.js}

@@ -3,7 +3,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-89encaay.js";
+} from "./cli-a1xmncfm.js";
 
 // src/core/agents/specialized/utils.ts
 import { execSync } from "node:child_process";

package/build/{cli-w7hcfa14.js → cli-vkjgcner.js}

@@ -5,16 +5,16 @@ import {
   SKILL_TOOL_NAMES,
   apiRequest,
   buildBaseSystemPrompt
-} from "./cli-xhhtbvvf.js";
+} from "./cli-deh0yfrw.js";
 import {
   init_dist,
   init_session,
   sessions,
   stepCountIs
-} from "./cli-89encaay.js";
+} from "./cli-a1xmncfm.js";
 import {
   init_constants
-} from "./cli-a83apjmm.js";
+} from "./cli-419b5qgw.js";
 import {
   exports_external,
   init_zod