@pensar/apex 2.4.0 → 2.5.0-canary.c20fe7ed

package/build/{agent-nhs1w5w0.js → agent-1e2wj9z8.js}

@@ -5,19 +5,20 @@ import {
   buildPentestPrompt,
   buildPentestSystemPrompt,
   resolvePentestAgentRole
-} from "./cli-mavved45.js";
+} from "./cli-cg3s2en9.js";
 import"./cli-9fsre5pt.js";
-import"./cli-qqt4gj1w.js";
-import"./cli-repbyhkk.js";
-import"./cli-tznv8pf1.js";
+import"./cli-3x1y9yk0.js";
+import"./cli-6grv9k35.js";
+import"./cli-1q3vervd.js";
 import"./cli-c8131c4q.js";
-import"./cli-tkc598ey.js";
-import"./cli-0n4r54hq.js";
-import"./cli-swpbx60z.js";
+import"./cli-bxhaqp8w.js";
+import"./cli-3b3teb1m.js";
+import"./cli-avmhkjtv.js";
 import"./cli-j54qa6tm.js";
-import"./cli-72cvcqhg.js";
-import"./cli-9rhzhgx2.js";
-import"./cli-vnynf0js.js";
+import"./cli-y9mjgfsd.js";
+import"./cli-jq2yh557.js";
+import"./cli-5ynht461.js";
+import"./cli-knd276ed.js";
 import"./cli-bc05qbss.js";
 export {
   PentestResponseSchema,

package/build/agent-45hqpjke.js

@@ -0,0 +1,20 @@
+import {
+  CodeAgent
+} from "./cli-jgd1gxnf.js";
+import"./cli-9fsre5pt.js";
+import"./cli-3x1y9yk0.js";
+import"./cli-6grv9k35.js";
+import"./cli-1q3vervd.js";
+import"./cli-c8131c4q.js";
+import"./cli-bxhaqp8w.js";
+import"./cli-3b3teb1m.js";
+import"./cli-avmhkjtv.js";
+import"./cli-j54qa6tm.js";
+import"./cli-y9mjgfsd.js";
+import"./cli-jq2yh557.js";
+import"./cli-5ynht461.js";
+import"./cli-knd276ed.js";
+import"./cli-bc05qbss.js";
+export {
+  CodeAgent
+};

package/build/{agent-5ejt5vpz.js → agent-6z92j5sh.js}

@@ -1,23 +1,24 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-repbyhkk.js";
+} from "./cli-6grv9k35.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-tznv8pf1.js";
+} from "./cli-1q3vervd.js";
 import"./cli-c8131c4q.js";
 import {
   init_dist,
   stepCountIs
-} from "./cli-tkc598ey.js";
-import"./cli-0n4r54hq.js";
+} from "./cli-bxhaqp8w.js";
+import"./cli-3b3teb1m.js";
 import {
   exports_external,
   init_zod
-} from "./cli-swpbx60z.js";
+} from "./cli-avmhkjtv.js";
 import"./cli-j54qa6tm.js";
-import"./cli-72cvcqhg.js";
-import"./cli-9rhzhgx2.js";
-import"./cli-vnynf0js.js";
+import"./cli-y9mjgfsd.js";
+import"./cli-jq2yh557.js";
+import"./cli-5ynht461.js";
+import"./cli-knd276ed.js";
 import"./cli-bc05qbss.js";
 
 // src/core/agents/specialized/findingJudge/agent.ts

package/build/{apps-17wvz1d7.js → apps-ndg4qp8t.js}

@@ -1,38 +1,46 @@
 #!/usr/bin/env bun
-import"./cli-vq52kp7j.js";
-import"./cli-5k33webc.js";
-import"./cli-gq40s5b3.js";
-import"./cli-b1adytsy.js";
-import"./cli-mavved45.js";
-import"./cli-xshasbwe.js";
-import"./cli-32z0017y.js";
-import"./cli-k8kc47pq.js";
+import {
+  markCommandFailed
+} from "./cli-7q3ae3ft.js";
+import"./cli-zgda61x2.js";
+import"./cli-9pbk8m32.js";
+import"./cli-3a5hy1r3.js";
+import"./cli-ygm0ygzg.js";
+import"./cli-whyqn949.js";
+import"./cli-cg3s2en9.js";
+import"./cli-4zm8sx6f.js";
+import"./cli-1hkxhyef.js";
+import"./cli-jgd1gxnf.js";
 import"./cli-9fsre5pt.js";
-import"./cli-qqt4gj1w.js";
+import"./cli-3x1y9yk0.js";
 import {
+  ENDPOINT_TRANSPORTS,
   createApp,
+  createDomain,
   createEndpoint,
   deleteApp,
   deleteEndpoint,
   getApp,
   getEndpoint,
   listApps,
+  listDomains,
   listEndpoints,
   searchApps,
   searchEndpoints,
   updateApp,
   updateEndpoint
-} from "./cli-repbyhkk.js";
-import"./cli-tznv8pf1.js";
+} from "./cli-6grv9k35.js";
+import"./cli-1q3vervd.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-tkc598ey.js";
-import"./cli-0n4r54hq.js";
-import"./cli-swpbx60z.js";
+import"./cli-bxhaqp8w.js";
+import"./cli-3b3teb1m.js";
+import"./cli-avmhkjtv.js";
 import"./cli-j54qa6tm.js";
-import"./cli-72cvcqhg.js";
-import"./cli-9rhzhgx2.js";
-import"./cli-vnynf0js.js";
+import"./cli-y9mjgfsd.js";
+import"./cli-jq2yh557.js";
+import"./cli-5ynht461.js";
+import"./cli-knd276ed.js";
 import"./cli-bc05qbss.js";
 
 // src/cli/apps.ts
@@ -88,6 +96,14 @@ function parseEndpointType(value) {
   }
   return value;
 }
+function parseTransport(value) {
+  if (value === undefined)
+    return;
+  if (!ENDPOINT_TRANSPORTS.includes(value)) {
+    throw new Error(`Invalid --transport "${value}". Must be one of: ${ENDPOINT_TRANSPORTS.join(", ")}`);
+  }
+  return value;
+}
 function parseInteger(flag, value) {
   if (value === undefined)
     return;
@@ -117,6 +133,8 @@ Usage:
   pensar apps create [options]                             Create an app
   pensar apps update <appId> [options]                     Update an app
   pensar apps delete <appId>                               Delete an app
+  pensar apps domains                                      List workspace domains
+  pensar apps domain-create <domain>                       Create/resolve a domain
   pensar apps endpoints <appId> [filters]                  List endpoints
   pensar apps endpoint <endpointId>                        Show endpoint details
   pensar apps endpoint-create <appId> [options]            Create an endpoint
@@ -130,9 +148,13 @@ App fields (create requires --name and --description):
   --description <text>         Application description
   --type <type>                One of: ${APPLICATION_TYPES.join(", ")}
   --framework <text>           Framework / runtime hint
-  --domain <id>                Linked domain UUID
+  --domain <id>                Linked domain UUID (see "apps domains")
   --disallowed-actions <text>  Free-form disallowed actions notes
 
+Domains:
+  API-created domains are canonicalized and created idempotently by Console.
+  They stay unverified and do not start reconnaissance.
+
 List pagination (for "apps" and "endpoints <appId>"):
   --limit <n>                  Page size (default 100, max 200)
   --offset <n>                 Page offset (default 0)
@@ -158,6 +180,8 @@ Endpoint fields (create requires --endpoint and --description):
   --endpoint <text>            Endpoint path / URL / route
   --description <text>         Endpoint description
   --type <type>                One of: ${ENDPOINT_TYPES.join(", ")}
+  --transport <transport>      One of: ${ENDPOINT_TRANSPORTS.join(", ")}
+                               (defaults to http when omitted)
   --location <text>            Source file (whitebox)
   --start-line <n>             Start line number
   --end-line <n>               End line number
@@ -235,6 +259,7 @@ function parseEndpointCreateOptions(argv) {
   if (description === undefined)
     throw new Error("--description is required");
   const type = parseEndpointType(getFlag("--type", argv));
+  const transport = parseTransport(getFlag("--transport", argv));
   const location = getFlag("--location", argv);
   const startLineNumber = parseInteger("--start-line", getFlag("--start-line", argv));
   const endLineNumber = parseInteger("--end-line", getFlag("--end-line", argv));
@@ -246,6 +271,7 @@ function parseEndpointCreateOptions(argv) {
     endpoint,
     description,
     ...type !== undefined ? { type } : {},
+    ...transport !== undefined ? { transport } : {},
     ...location !== undefined ? { location } : {},
     ...startLineNumber !== undefined ? { startLineNumber } : {},
     ...endLineNumber !== undefined ? { endLineNumber } : {},
@@ -269,6 +295,9 @@ function parseEndpointUpdateOptions(argv) {
   const type = parseEndpointType(getFlag("--type", argv));
   if (type !== undefined)
     update.type = type;
+  const transport = parseTransport(getFlag("--transport", argv));
+  if (transport !== undefined)
+    update.transport = transport;
   const location = getFlag("--location", argv);
   if (location !== undefined)
     update.location = location;
@@ -305,7 +334,7 @@ async function main() {
       if (!appId) {
         console.error("Error: app ID is required");
         console.error("Usage: pensar apps get <appId>");
-        process.exit(1);
+        return markCommandFailed();
       }
       const app = await getApp(appId);
       console.log(JSON.stringify(app, null, 2));
@@ -318,7 +347,7 @@ async function main() {
       if (!appId) {
         console.error("Error: app ID is required");
         console.error("Usage: pensar apps update <appId> [options]");
-        process.exit(1);
+        return markCommandFailed();
       }
       const opts = parseAppUpdateOptions(args);
       const result = await updateApp(appId, opts);
@@ -328,16 +357,28 @@ async function main() {
       if (!appId) {
         console.error("Error: app ID is required");
         console.error("Usage: pensar apps delete <appId>");
-        process.exit(1);
+        return markCommandFailed();
       }
       const result = await deleteApp(appId);
       console.log(JSON.stringify(result, null, 2));
+    } else if (sub === "domains") {
+      const result = await listDomains();
+      console.log(JSON.stringify(result, null, 2));
+    } else if (sub === "domain-create") {
+      const url = args[1];
+      if (!url) {
+        console.error("Error: domain is required");
+        console.error("Usage: pensar apps domain-create <domain>");
+        return markCommandFailed();
+      }
+      const result = await createDomain({ url });
+      console.log(JSON.stringify(result, null, 2));
     } else if (sub === "endpoints") {
       const appId = args[1];
       if (!appId) {
         console.error("Error: app ID is required");
         console.error("Usage: pensar apps endpoints <appId> [filters]");
-        process.exit(1);
+        return markCommandFailed();
       }
       const type = parseEndpointType(getFlag("--type", args));
       const minRiskScore = parseNumber("--min-risk", getFlag("--min-risk", args));
@@ -356,7 +397,7 @@ async function main() {
       if (!endpointId) {
         console.error("Error: endpoint ID is required");
         console.error("Usage: pensar apps endpoint <endpointId>");
-        process.exit(1);
+        return markCommandFailed();
       }
       const result = await getEndpoint(endpointId);
       console.log(JSON.stringify(result, null, 2));
@@ -365,7 +406,7 @@ async function main() {
       if (!appId) {
         console.error("Error: app ID is required");
         console.error("Usage: pensar apps endpoint-create <appId> --endpoint E --description D");
-        process.exit(1);
+        return markCommandFailed();
       }
       const opts = parseEndpointCreateOptions(args);
       const result = await createEndpoint(appId, opts);
@@ -375,7 +416,7 @@ async function main() {
       if (!endpointId) {
         console.error("Error: endpoint ID is required");
         console.error("Usage: pensar apps endpoint-update <endpointId> [options]");
-        process.exit(1);
+        return markCommandFailed();
       }
       const opts = parseEndpointUpdateOptions(args);
       const result = await updateEndpoint(endpointId, opts);
@@ -385,7 +426,7 @@ async function main() {
       if (!endpointId) {
         console.error("Error: endpoint ID is required");
         console.error("Usage: pensar apps endpoint-delete <endpointId>");
-        process.exit(1);
+        return markCommandFailed();
       }
       const result = await deleteEndpoint(endpointId);
       console.log(JSON.stringify(result, null, 2));
@@ -394,7 +435,7 @@ async function main() {
       if (!query || query.startsWith("--")) {
         console.error("Error: search query is required");
         console.error("Usage: pensar apps search <query> [options]");
-        process.exit(1);
+        return markCommandFailed();
       }
       const type = parseAppType(getFlag("--type", args));
       const limit = parseInteger("--limit", getFlag("--limit", args));
@@ -410,7 +451,7 @@ async function main() {
       if (!query || query.startsWith("--")) {
         console.error("Error: search query is required");
         console.error("Usage: pensar apps search-endpoints <query> [options]");
-        process.exit(1);
+        return markCommandFailed();
       }
       const applicationId = getFlag("--app", args);
       const type = parseEndpointType(getFlag("--type", args));
@@ -438,12 +479,12 @@ async function main() {
     } else {
       console.error(`Error: Unknown subcommand "${sub}"`);
       showHelp();
-      process.exit(1);
+      return markCommandFailed();
     }
   } catch (err) {
     console.error(`
 Error: ${err instanceof Error ? err.message : String(err)}`);
-    process.exit(1);
+    return markCommandFailed();
   }
 }
-main();
+await main();

package/build/{auth-z3h9859n.js → auth-z6emgx61.js}

@@ -1,19 +1,23 @@
 #!/usr/bin/env bun
-import"./cli-vq52kp7j.js";
-import"./cli-5k33webc.js";
-import"./cli-gq40s5b3.js";
-import"./cli-b1adytsy.js";
-import"./cli-mavved45.js";
-import"./cli-xshasbwe.js";
-import"./cli-32z0017y.js";
-import"./cli-k8kc47pq.js";
+import {
+  markCommandFailed
+} from "./cli-7q3ae3ft.js";
+import"./cli-zgda61x2.js";
+import"./cli-9pbk8m32.js";
+import"./cli-3a5hy1r3.js";
+import"./cli-ygm0ygzg.js";
+import"./cli-whyqn949.js";
+import"./cli-cg3s2en9.js";
+import"./cli-4zm8sx6f.js";
+import"./cli-1hkxhyef.js";
+import"./cli-jgd1gxnf.js";
 import"./cli-9fsre5pt.js";
-import"./cli-qqt4gj1w.js";
-import"./cli-repbyhkk.js";
-import"./cli-tznv8pf1.js";
+import"./cli-3x1y9yk0.js";
+import"./cli-6grv9k35.js";
+import"./cli-1q3vervd.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-tkc598ey.js";
+import"./cli-bxhaqp8w.js";
 import {
   createWorkspaceSelection,
   disconnect,
@@ -29,15 +33,16 @@ import {
   pollWorkspaceSelection,
   selectWorkspace,
   startDeviceFlow
-} from "./cli-0n4r54hq.js";
-import"./cli-swpbx60z.js";
+} from "./cli-3b3teb1m.js";
+import"./cli-avmhkjtv.js";
 import"./cli-j54qa6tm.js";
 import {
   config,
   init_config
-} from "./cli-72cvcqhg.js";
-import"./cli-9rhzhgx2.js";
-import"./cli-vnynf0js.js";
+} from "./cli-y9mjgfsd.js";
+import"./cli-jq2yh557.js";
+import"./cli-5ynht461.js";
+import"./cli-knd276ed.js";
 import {
   __require
 } from "./cli-bc05qbss.js";
@@ -300,12 +305,12 @@ async function main() {
     } else {
       console.error(`Unknown auth subcommand: ${subcommand}`);
       console.error("Run 'pensar login --help' for usage information");
-      process.exit(1);
+      return markCommandFailed();
     }
   } catch (err) {
     console.error(`
 Error: ${err instanceof Error ? err.message : String(err)}`);
-    process.exit(1);
+    return markCommandFailed();
   }
 }
-main();
+await main();

package/build/authentication-gqmrgkqt.js

@@ -0,0 +1,20 @@
+import {
+  runAuthenticationAgent
+} from "./cli-1hkxhyef.js";
+import"./cli-9fsre5pt.js";
+import"./cli-3x1y9yk0.js";
+import"./cli-6grv9k35.js";
+import"./cli-1q3vervd.js";
+import"./cli-c8131c4q.js";
+import"./cli-bxhaqp8w.js";
+import"./cli-3b3teb1m.js";
+import"./cli-avmhkjtv.js";
+import"./cli-j54qa6tm.js";
+import"./cli-y9mjgfsd.js";
+import"./cli-jq2yh557.js";
+import"./cli-5ynht461.js";
+import"./cli-knd276ed.js";
+import"./cli-bc05qbss.js";
+export {
+  runAuthenticationAgent
+};

package/build/blackboxAgent-sg4gt9t9.js

@@ -0,0 +1,20 @@
+import {
+  BlackboxAttackSurfaceAgent
+} from "./cli-whyqn949.js";
+import"./cli-9fsre5pt.js";
+import"./cli-3x1y9yk0.js";
+import"./cli-6grv9k35.js";
+import"./cli-1q3vervd.js";
+import"./cli-c8131c4q.js";
+import"./cli-bxhaqp8w.js";
+import"./cli-3b3teb1m.js";
+import"./cli-avmhkjtv.js";
+import"./cli-j54qa6tm.js";
+import"./cli-y9mjgfsd.js";
+import"./cli-jq2yh557.js";
+import"./cli-5ynht461.js";
+import"./cli-knd276ed.js";
+import"./cli-bc05qbss.js";
+export {
+  BlackboxAttackSurfaceAgent
+};

package/build/blackboxPentest-0nr9742k.js

@@ -0,0 +1,70 @@
+import {
+  EMPTY_SESSION_TOKEN_USAGE,
+  accumulateSessionTokens
+} from "./cli-9pbk8m32.js";
+import {
+  readExecutionMetrics,
+  runPentestWorkflow,
+  writeExecutionMetrics
+} from "./cli-3a5hy1r3.js";
+import"./cli-ygm0ygzg.js";
+import"./cli-whyqn949.js";
+import"./cli-cg3s2en9.js";
+import"./cli-4zm8sx6f.js";
+import"./cli-jgd1gxnf.js";
+import"./cli-9fsre5pt.js";
+import"./cli-3x1y9yk0.js";
+import"./cli-6grv9k35.js";
+import"./cli-1q3vervd.js";
+import"./cli-fw5r7pfj.js";
+import"./cli-c8131c4q.js";
+import"./cli-bxhaqp8w.js";
+import"./cli-3b3teb1m.js";
+import"./cli-avmhkjtv.js";
+import"./cli-j54qa6tm.js";
+import"./cli-y9mjgfsd.js";
+import"./cli-jq2yh557.js";
+import"./cli-5ynht461.js";
+import"./cli-knd276ed.js";
+import"./cli-bc05qbss.js";
+
+// src/core/api/blackboxPentest.ts
+async function runPentestAgent(input) {
+  const persisted = readExecutionMetrics(input.session.rootPath)?.tokenUsage;
+  let tokenUsage = persisted ?? EMPTY_SESSION_TOKEN_USAGE;
+  const onStepFinish = async (event) => {
+    tokenUsage = accumulateSessionTokens(tokenUsage, event.usage ?? {});
+    await input.onStepFinish?.(event);
+  };
+  const onCacheMetrics = (metrics) => {
+    tokenUsage = accumulateSessionTokens(tokenUsage, {
+      cacheReadTokens: metrics.cacheReadInputTokens,
+      cacheWriteTokens: metrics.cacheCreationInputTokens
+    });
+    input.onCacheMetrics?.(metrics);
+  };
+  let result;
+  try {
+    result = await runPentestWorkflow({
+      ...input,
+      onStepFinish,
+      onCacheMetrics
+    });
+  } finally {
+    writeExecutionMetrics({
+      sessionRootPath: input.session.rootPath,
+      tokenUsage
+    });
+  }
+  const { findings, findingsPath, pocsPath, reportPath } = result;
+  console.log(`
+Found ${findings.length} vulnerabilities`);
+  console.log(`Findings: ${findingsPath}`);
+  console.log(`POCs: ${pocsPath}`);
+  if (reportPath)
+    console.log(`Report: ${reportPath}`);
+  return { findings, findingsPath, pocsPath, reportPath };
+}
+export {
+  runPentestAgent
+};

package/build/{cli-xshasbwe.js → cli-1hkxhyef.js}

@@ -1,9 +1,9 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-repbyhkk.js";
+} from "./cli-6grv9k35.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-tznv8pf1.js";
+} from "./cli-1q3vervd.js";
 import {
   createLogger,
   hasToolCall,
@@ -11,7 +11,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-tkc598ey.js";
+} from "./cli-bxhaqp8w.js";
 
 // src/core/agents/specialized/authenticationAgent/agent.ts
 init_dist();
@@ -141,6 +141,23 @@ every 30 seconds, so run this immediately before filling the field. If the code
 retry once (you may have crossed a period boundary). Only report an MFA barrier if no seed is available
 or two fresh codes are both rejected.
 
+# SMS passwordless (phone as login)
+
+If a credential has a \`phoneNumber\` additional field, the phone number IS the login identifier — not MFA
+after a password. Do **not** report \`phone_verification\` as a barrier for this flow.
+
+1. \`browser_fill\` with \`credentialId\` and \`credentialField="phoneNumber"\` (never type the number).
+2. Click the target's send-code / text-me control. Note \`Date.now()\` at that click as \`sinceMs\`.
+3. \`execute_command\` \`sleep 5\`, then call \`sms_list_messages\` with that \`credentialId\` and \`sinceMs\`.
+   If the list is empty, sleep and list again a few times. If it stays empty or returns an error, stop
+   and report what you observed — do not hang in a wait loop. Set \`claim=true\` once a message is present
+   so other runs cannot reuse the OTP.
+4. \`browser_fill\` the OTP from the claimed/listed result (\`code\`, or parse \`body\` if \`code\` is null).
+5. Continue the login and call \`complete_authentication\`.
+
+TOTP-via-environment-variable above is unchanged and still applies when the login asks for an authenticator
+app code.
+
 # Error Recovery
 
 If authentication fails, try these mechanical fixes (they are login mechanics, not credential changes):
@@ -243,6 +260,7 @@ class AuthenticationAgent extends OffensiveSecurityAgent {
         "email_search_messages",
         "email_get_message",
         "send_email",
+        "sms_list_messages",
         "web_search",
         "get_page"
       ],
@@ -328,6 +346,14 @@ function buildAuthPrompt(target, authHints, credentialManager, context, envVarNa
     parts.push("");
   }
   if (credBlock) {
+    const hasSmsPasswordless = credentialManager?.listReferences().some((ref) => ref.additionalFieldKeys?.includes("phoneNumber"));
+    const smsInstructions = hasSmsPasswordless ? `
+If a credential has a phoneNumber additional field (Mobile OTP / sms-passwordless), phone is the login
+identifier — not MFA-after-password. browser_fill credentialField="phoneNumber", click send-code, then
+execute_command \`sleep 5\` and call sms_list_messages with sinceMs = Date.now() at that click (claim=true
+once a message is present). If the list is empty, sleep and list again; if it stays empty, fail with what
+you observed — do not hang waiting. Then browser_fill the OTP. Do NOT report phone_verification as a
+barrier for this flow. TOTP-via-env for authenticator MFA is unchanged.` : "";
     parts.push(`INSTRUCTIONS:
 You have credentials available via credential IDs — authenticate immediately.
 1. For API/form logins, use execute_command (curl) to submit credentials and capture the Set-Cookie / token response
@@ -335,7 +361,7 @@ You have credentials available via credential IDs — authenticate immediately.
    pass credentialId + credentialField (e.g. credentialField="password") instead of the raw value —
    the secret is resolved securely at execution time. NEVER type a password directly.
 3. Call complete_authentication with exported cookies/headers to persist credentials and end the run
-
+${smsInstructions}
 The credentials above were provided to you and have already been verified — they are SHARED across runs, so
 do not modify them or their account settings. NEVER change the password, complete a password reset /
 forced-password-change / account-recovery flow, or modify MFA/2FA settings (enrolling, disabling, or

package/build/{cli-tznv8pf1.js → cli-1q3vervd.js}

@@ -3,7 +3,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-tkc598ey.js";
+} from "./cli-bxhaqp8w.js";
 
 // src/core/agents/specialized/utils.ts
 import { execSync } from "node:child_process";