@pensar/apex 1.8.0 → 1.8.2-canary.fb75c486

package/build/{index-dw1xbhfn.js → index-vc29b21w.js}

@@ -31,6 +31,10 @@ import {
   getErrorMessage,
   getErrorMessage1 as getErrorMessage2,
   getRuntimeEnvironmentUserAgent,
+  init_dist,
+  init_dist1 as init_dist2,
+  init_dist2 as init_dist3,
+  init_v4,
   isAbortError,
   isJSONArray,
   isJSONObject,
@@ -50,13 +54,98 @@ import {
   validateTypes,
   withUserAgentSuffix,
   zodSchema
-} from "./cli-0ghkg3w6.js";
+} from "./cli-e6rgwtpb.js";
 import"./cli-gpnb45ck.js";
 import {
   __toESM
 } from "./cli-8rxa073f.js";
 
 // node_modules/ai/dist/index.mjs
+init_dist2();
+init_dist3();
+init_dist3();
+init_dist3();
+init_dist();
+init_dist();
+init_dist();
+init_dist();
+init_dist();
+init_dist();
+init_dist();
+init_dist();
+init_dist();
+init_dist();
+init_dist();
+init_dist();
+init_dist();
+init_dist();
+init_dist();
+init_dist();
+init_dist();
+init_dist();
+init_dist();
+init_dist();
+init_dist3();
+init_dist();
+init_dist2();
+init_dist3();
+init_dist3();
+init_dist3();
+init_dist();
+init_dist3();
+init_v4();
+init_dist();
+init_dist3();
+init_dist();
+init_dist3();
+init_v4();
+init_v4();
+init_v4();
+init_v4();
+init_v4();
+init_dist2();
+init_dist();
+init_dist();
+init_dist3();
+init_dist3();
+init_dist3();
+init_dist();
+init_dist3();
+init_dist3();
+init_dist3();
+init_dist();
+init_dist3();
+init_dist3();
+init_v4();
+init_dist3();
+init_dist3();
+init_dist3();
+init_dist3();
+init_dist();
+init_dist3();
+init_v4();
+init_dist3();
+init_dist3();
+init_dist3();
+init_dist3();
+init_dist();
+init_dist3();
+init_dist();
+init_dist3();
+init_dist3();
+init_dist3();
+init_dist3();
+init_dist3();
+init_dist();
+init_dist3();
+init_dist();
+init_dist();
+init_dist();
+init_dist3();
+init_dist3();
+init_dist3();
+init_dist3();
+init_dist3();
 var import_api = __toESM(require_src(), 1);
 var import_api2 = __toESM(require_src(), 1);
 var __defProp = Object.defineProperty;
@@ -1015,7 +1104,7 @@ function detectMediaType({
   }
   return;
 }
-var VERSION = "6.0.168";
+var VERSION = "6.0.175";
 var download = async ({
   url,
   maxBytes,
@@ -1789,33 +1878,35 @@ var modelMessageSchema = exports_external.union([
   assistantModelMessageSchema,
   toolModelMessageSchema
 ]);
-async function standardizePrompt(prompt) {
-  if (prompt.prompt == null && prompt.messages == null) {
+async function standardizePrompt({
+  allowSystemInMessages,
+  system,
+  prompt,
+  messages
+}) {
+  if (prompt == null && messages == null) {
     throw new InvalidPromptError({
       prompt,
       message: "prompt or messages must be defined"
     });
   }
-  if (prompt.prompt != null && prompt.messages != null) {
+  if (prompt != null && messages != null) {
     throw new InvalidPromptError({
       prompt,
       message: "prompt and messages cannot be defined at the same time"
     });
   }
-  if (prompt.system != null && typeof prompt.system !== "string" && !asArray(prompt.system).every((message) => typeof message === "object" && message !== null && ("role" in message) && message.role === "system")) {
+  if (typeof system !== "string" && !asArray(system).every((message) => message.role === "system")) {
     throw new InvalidPromptError({
       prompt,
       message: "system must be a string, SystemModelMessage, or array of SystemModelMessage"
     });
   }
-  let messages;
-  if (prompt.prompt != null && typeof prompt.prompt === "string") {
-    messages = [{ role: "user", content: prompt.prompt }];
-  } else if (prompt.prompt != null && Array.isArray(prompt.prompt)) {
-    messages = prompt.prompt;
-  } else if (prompt.messages != null) {
-    messages = prompt.messages;
-  } else {
+  if (prompt != null && typeof prompt === "string") {
+    messages = [{ role: "user", content: prompt }];
+  } else if (prompt != null && Array.isArray(prompt)) {
+    messages = prompt;
+  } else if (messages == null) {
     throw new InvalidPromptError({
       prompt,
       message: "prompt or messages must be defined"
@@ -1827,6 +1918,17 @@ async function standardizePrompt(prompt) {
       message: "messages must not be empty"
     });
   }
+  if (messages.some((message) => message.role === "system")) {
+    if (allowSystemInMessages === false) {
+      throw new InvalidPromptError({
+        prompt,
+        message: "System messages are not allowed in the prompt or messages fields. Use the system option instead."
+      });
+    }
+    if (allowSystemInMessages === undefined) {
+      console.warn("AI SDK Warning: System messages in the prompt or messages fields can be a security risk because they may enable prompt injection attacks. Use the system option instead when possible. Set allowSystemInMessages to true to suppress this warning, or false to throw an error.");
+    }
+  }
   const validationResult = await safeValidateTypes({
     value: messages,
     schema: exports_external.array(modelMessageSchema)
@@ -1838,10 +1940,7 @@ async function standardizePrompt(prompt) {
       cause: validationResult.error
     });
   }
-  return {
-    messages,
-    system: prompt.system
-  };
+  return { messages, system };
 }
 function wrapGatewayError(error) {
   if (!GatewayAuthenticationError.isInstance(error))
@@ -2184,6 +2283,9 @@ function mergeObjects(base, overrides) {
   }
   const result = { ...base };
   for (const key in overrides) {
+    if (key === "__proto__" || key === "constructor" || key === "prototype") {
+      continue;
+    }
     if (Object.prototype.hasOwnProperty.call(overrides, key)) {
       const overridesValue = overrides[key];
       if (overridesValue === undefined)
@@ -3220,6 +3322,15 @@ var json = ({
     }
   };
 };
+function mergeToolProviderMetadata(toolMetadata, callMetadata) {
+  if (toolMetadata == null) {
+    return callMetadata;
+  }
+  if (callMetadata == null) {
+    return toolMetadata;
+  }
+  return { ...toolMetadata, ...callMetadata };
+}
 async function parseToolCall({
   toolCall,
   tools,
@@ -3227,7 +3338,7 @@ async function parseToolCall({
   system,
   messages
 }) {
-  var _a21;
+  var _a21, _b;
   try {
     if (tools == null) {
       if (toolCall.providerExecuted && toolCall.dynamic) {
@@ -3278,7 +3389,7 @@ async function parseToolCall({
       error,
       title: (_a21 = tools == null ? undefined : tools[toolCall.toolName]) == null ? undefined : _a21.title,
       providerExecuted: toolCall.providerExecuted,
-      providerMetadata: toolCall.providerMetadata
+      providerMetadata: mergeToolProviderMetadata((_b = tools == null ? undefined : tools[toolCall.toolName]) == null ? undefined : _b.providerMetadata, toolCall.providerMetadata)
     };
   }
 }
@@ -3325,13 +3436,14 @@ async function doParseToolCall({
       cause: parseResult.error
     });
   }
+  const mergedProviderMetadata = mergeToolProviderMetadata(tool2.providerMetadata, toolCall.providerMetadata);
   return tool2.type === "dynamic" ? {
     type: "tool-call",
     toolCallId: toolCall.toolCallId,
     toolName: toolCall.toolName,
     input: parseResult.value,
     providerExecuted: toolCall.providerExecuted,
-    providerMetadata: toolCall.providerMetadata,
+    providerMetadata: mergedProviderMetadata,
     dynamic: true,
     title: tool2.title
   } : {
@@ -3340,7 +3452,7 @@ async function doParseToolCall({
     toolName,
     input: parseResult.value,
     providerExecuted: toolCall.providerExecuted,
-    providerMetadata: toolCall.providerMetadata,
+    providerMetadata: mergedProviderMetadata,
     title: tool2.title
   };
 }
@@ -3583,6 +3695,7 @@ async function generateText({
   system,
   prompt,
   messages,
+  allowSystemInMessages,
   maxRetries: maxRetriesArg,
   abortSignal,
   timeout,
@@ -3632,7 +3745,8 @@ async function generateText({
   const initialPrompt = await standardizePrompt({
     system,
     prompt,
-    messages
+    messages,
+    allowSystemInMessages
   });
   const globalTelemetry = createGlobalTelemetry(telemetry == null ? undefined : telemetry.integrations);
   await notify({
@@ -5730,6 +5844,7 @@ function streamText({
   system,
   prompt,
   messages,
+  allowSystemInMessages,
   maxRetries,
   abortSignal,
   timeout,
@@ -5781,6 +5896,7 @@ function streamText({
     system,
     prompt,
     messages,
+    allowSystemInMessages,
     tools,
     toolChoice,
     transforms: asArray(transform),
@@ -5887,6 +6003,7 @@ var DefaultStreamTextResult = class {
     system,
     prompt,
     messages,
+    allowSystemInMessages,
     tools,
     toolChoice,
     transforms,
@@ -6268,7 +6385,8 @@ var DefaultStreamTextResult = class {
         const initialPrompt = await standardizePrompt({
           system,
           prompt,
-          messages
+          messages,
+          allowSystemInMessages
         });
         await notify({
           event: {
@@ -7347,6 +7465,14 @@ var ToolLoopAgent = class {
   }
   async prepareCall(options) {
     var _a21, _b, _c, _d;
+    if (this.settings.callOptionsSchema != null && options.options !== undefined) {
+      const validatedOptions = await validateTypes({
+        value: options.options,
+        schema: this.settings.callOptionsSchema,
+        context: { field: "options" }
+      });
+      options = { ...options, options: validatedOptions };
+    }
     const { onStepFinish: _settingsOnStepFinish, ...settingsWithoutCallback } = this.settings;
     const baseCallArgs = {
       ...settingsWithoutCallback,
@@ -8069,6 +8195,9 @@ async function safeValidateUIMessages({
             const toolPart = part;
             const toolName = toolPart.type.slice(5);
             const tool2 = tools[toolName];
+            if (!tool2 && (toolPart.state === "output-available" || toolPart.state === "output-error" || toolPart.state === "output-denied")) {
+              continue;
+            }
             if (!tool2) {
               return {
                 success: false,
@@ -9117,6 +9246,7 @@ async function generateObject(options) {
     system,
     prompt,
     messages,
+    allowSystemInMessages,
     maxRetries: maxRetriesArg,
     abortSignal,
     headers,
@@ -9197,7 +9327,8 @@ async function generateObject(options) {
         const standardizedPrompt = await standardizePrompt({
           system,
           prompt,
-          messages
+          messages,
+          allowSystemInMessages
         });
         const promptMessages = await convertToLanguageModelPrompt({
           prompt: standardizedPrompt,
@@ -9485,6 +9616,7 @@ function streamObject(options) {
     system,
     prompt,
     messages,
+    allowSystemInMessages,
     maxRetries,
     abortSignal,
     headers,
@@ -9532,6 +9664,7 @@ function streamObject(options) {
     system,
     prompt,
     messages,
+    allowSystemInMessages,
     schemaName,
     schemaDescription,
     providerOptions,
@@ -9556,6 +9689,7 @@ var DefaultStreamObjectResult = class {
     system,
     prompt,
     messages,
+    allowSystemInMessages,
     schemaName,
     schemaDescription,
     providerOptions,
@@ -9625,7 +9759,8 @@ var DefaultStreamObjectResult = class {
         const standardizedPrompt = await standardizePrompt({
           system,
           prompt,
-          messages
+          messages,
+          allowSystemInMessages
         });
         const callOptions = {
           responseFormat: {

package/build/index-vwt27stc.js

@@ -0,0 +1,184 @@
+import {
+  ApexFindingObject
+} from "./cli-k0730f59.js";
+import {
+  ALL_TOOL_NAMES,
+  ASK_USER_QUESTIONS_TOOL_NAME,
+  AgentEventBus,
+  AskUserQuestionSchema,
+  BASE_SYSTEM_PROMPT,
+  BROWSER_TOOL_NAMES,
+  EMAIL_TOOL_NAMES,
+  OffensiveSecurityAgent,
+  PLAN_MODE_TOOL_NAMES,
+  PersistentShell,
+  PlaywrightMcpSession,
+  RESPONSE_TOOL_NAME,
+  SEND_EMAIL_TOOL_NAME,
+  SKILL_TOOL_NAMES,
+  ScopeViolationError,
+  StepTraceWriter,
+  addMemory,
+  assertCommandInScope,
+  assertUrlInScope,
+  authenticateSession,
+  buildBaseSystemPrompt,
+  buildProvidedFilesSection,
+  buildSessionWorkspaceSection,
+  checkSandboxPlaywright,
+  checkpointState,
+  completeAuthentication,
+  crawlAuthenticated,
+  createAllTools,
+  createAttackSurfaceReport,
+  createBrowserTools,
+  createBrowserToolset,
+  createEmailToolset,
+  createFile,
+  createResponseTool,
+  createSandboxBrowserTools,
+  createTask,
+  delegateAuth,
+  detectAuthScheme,
+  documentApp,
+  documentEndpoint,
+  documentVulnerability,
+  ensureSandboxBrowser,
+  ensureSandboxPlaywright,
+  executeCommand,
+  extractFallbackStdout,
+  extractHostname,
+  extractHostsFromCommand,
+  extractJsEndpoints,
+  getAllowedHosts,
+  getApexTmpRoot,
+  getMemory,
+  getPage,
+  grep,
+  httpRequest,
+  installSandboxPlaywright,
+  isHostAllowed,
+  listFiles,
+  listMemories,
+  listTasksTool,
+  parseStorageStateResult,
+  probeAuthEndpoints,
+  provideComparisonResults,
+  readFile,
+  readSkill,
+  readTempfileCapped,
+  runAttackSurface,
+  runPentestWorkflow,
+  setHeadlessMode,
+  setUserAgent,
+  setViewportSize,
+  spawnCodingAgent,
+  spawnPentestAgent,
+  spawnPentestSwarm,
+  submitPlan,
+  testEndpointVariations,
+  transformScriptToFunction,
+  updateFile,
+  updateTask,
+  validateDiscovery,
+  webSearch,
+  writePlan
+} from "./cli-wfmdch3r.js";
+import"./cli-mswm4k81.js";
+import"./cli-ryy39d77.js";
+import"./cli-c8131c4q.js";
+import"./cli-s1nckt4k.js";
+import"./cli-87zakjb2.js";
+import"./cli-6p7d2k55.js";
+import"./cli-w5990vr6.js";
+import"./cli-e6rgwtpb.js";
+import"./cli-9egg9azd.js";
+import"./cli-gpnb45ck.js";
+import"./cli-gtcd5c3f.js";
+import"./cli-g5h24ny8.js";
+import"./cli-8rxa073f.js";
+export {
+  writePlan,
+  webSearch,
+  validateDiscovery,
+  updateTask,
+  updateFile,
+  transformScriptToFunction,
+  testEndpointVariations,
+  submitPlan,
+  spawnPentestSwarm,
+  spawnPentestAgent,
+  spawnCodingAgent,
+  setViewportSize,
+  setUserAgent,
+  setHeadlessMode,
+  runPentestWorkflow,
+  runAttackSurface,
+  readTempfileCapped,
+  readSkill,
+  readFile,
+  provideComparisonResults,
+  probeAuthEndpoints,
+  parseStorageStateResult,
+  listTasksTool,
+  listMemories,
+  listFiles,
+  isHostAllowed,
+  installSandboxPlaywright,
+  httpRequest,
+  grep,
+  getPage,
+  getMemory,
+  getApexTmpRoot,
+  getAllowedHosts,
+  extractJsEndpoints,
+  extractHostsFromCommand,
+  extractHostname,
+  extractFallbackStdout,
+  executeCommand,
+  ensureSandboxPlaywright,
+  ensureSandboxBrowser,
+  documentVulnerability,
+  documentEndpoint,
+  documentApp,
+  detectAuthScheme,
+  delegateAuth,
+  createTask,
+  createSandboxBrowserTools,
+  createResponseTool,
+  createFile,
+  createEmailToolset,
+  createBrowserToolset,
+  createBrowserTools,
+  createAttackSurfaceReport,
+  createAllTools,
+  crawlAuthenticated,
+  completeAuthentication,
+  checkpointState,
+  checkSandboxPlaywright,
+  buildSessionWorkspaceSection,
+  buildProvidedFilesSection,
+  buildBaseSystemPrompt,
+  authenticateSession,
+  assertUrlInScope,
+  assertCommandInScope,
+  addMemory,
+  StepTraceWriter,
+  ScopeViolationError,
+  SKILL_TOOL_NAMES,
+  SEND_EMAIL_TOOL_NAME,
+  RESPONSE_TOOL_NAME,
+  PlaywrightMcpSession,
+  PersistentShell,
+  PLAN_MODE_TOOL_NAMES,
+  OffensiveSecurityAgent,
+  EMAIL_TOOL_NAMES as EMAIL_TOOL_NAMES_ACTIVE,
+  EMAIL_TOOL_NAMES,
+  BROWSER_TOOL_NAMES,
+  BASE_SYSTEM_PROMPT,
+  AskUserQuestionSchema,
+  ApexFindingObject,
+  AgentEventBus,
+  ASK_USER_QUESTIONS_TOOL_NAME,
+  ALL_TOOL_NAMES
+};

package/build/{issues-qbmdneej.js → issues-1bynat5q.js}

@@ -3,10 +3,29 @@ import {
   getIssue,
   listIssues,
   updateIssue
-} from "./cli-q7r2sth7.js";
-import"./cli-asyas1xb.js";
-import"./cli-nr1cjfr9.js";
-import"./cli-dj1dgw2n.js";
+} from "./cli-q8dfq25x.js";
+import"./cli-rhry8mat.js";
+import"./cli-v9ds4jb8.js";
+import"./cli-0tnv1vkp.js";
+import"./cli-8frjr68r.js";
+import"./cli-4xb21y6g.js";
+import"./cli-abbka8n3.js";
+import"./cli-9fsre5pt.js";
+import"./cli-k0730f59.js";
+import"./cli-wfmdch3r.js";
+import"./cli-mswm4k81.js";
+import"./cli-ryy39d77.js";
+import"./cli-fw5r7pfj.js";
+import"./cli-c8131c4q.js";
+import"./cli-s1nckt4k.js";
+import"./cli-87zakjb2.js";
+import"./cli-6p7d2k55.js";
+import"./cli-w5990vr6.js";
+import"./cli-e6rgwtpb.js";
+import"./cli-9egg9azd.js";
+import"./cli-gpnb45ck.js";
+import"./cli-gtcd5c3f.js";
+import"./cli-g5h24ny8.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/issues.ts
@@ -17,8 +36,10 @@ function getFlag(flag, argv) {
 function showHelp() {
   console.log(`pensar issues — Manage security issues via the Pensar API
 
+All commands operate on the selected workspace (set via \`pensar login\`).
+
 Usage:
-  pensar issues <projectId> [filters]            List issues for a project
+  pensar issues [filters]                        List issues in the workspace
   pensar issues get <issueId>                    Get issue details
   pensar issues update <issueId> [options]       Update an issue
 
@@ -41,7 +62,7 @@ Options:
 async function main() {
   const args = process.argv.slice(2);
   const sub = args[0];
-  if (!sub || sub === "--help" || sub === "-h" || sub === "help") {
+  if (sub === "--help" || sub === "-h" || sub === "help") {
     showHelp();
     return;
   }
@@ -75,15 +96,18 @@ async function main() {
         userFlaggedFalsePositiveReason
       });
       console.log(JSON.stringify(result, null, 2));
-    } else {
-      const projectId = sub;
-      const issues = await listIssues(projectId, {
+    } else if (!sub || sub === "list" || sub.startsWith("--")) {
+      const issues = await listIssues({
         scanId: getFlag("--scan", args),
         status: getFlag("--status", args),
         severity: getFlag("--severity", args),
         branch: getFlag("--branch", args)
       });
       console.log(JSON.stringify(issues, null, 2));
+    } else {
+      console.error(`Error: Unknown subcommand "${sub}"`);
+      showHelp();
+      process.exit(1);
     }
   } catch (err) {
     console.error(`

package/build/{logs-xm5vbymy.js → logs-e78vx2dy.js}

@@ -2,10 +2,29 @@
 import {
   listAgentLogs,
   searchAgentLogs
-} from "./cli-q7r2sth7.js";
-import"./cli-asyas1xb.js";
-import"./cli-nr1cjfr9.js";
-import"./cli-dj1dgw2n.js";
+} from "./cli-q8dfq25x.js";
+import"./cli-rhry8mat.js";
+import"./cli-v9ds4jb8.js";
+import"./cli-0tnv1vkp.js";
+import"./cli-8frjr68r.js";
+import"./cli-4xb21y6g.js";
+import"./cli-abbka8n3.js";
+import"./cli-9fsre5pt.js";
+import"./cli-k0730f59.js";
+import"./cli-wfmdch3r.js";
+import"./cli-mswm4k81.js";
+import"./cli-ryy39d77.js";
+import"./cli-fw5r7pfj.js";
+import"./cli-c8131c4q.js";
+import"./cli-s1nckt4k.js";
+import"./cli-87zakjb2.js";
+import"./cli-6p7d2k55.js";
+import"./cli-w5990vr6.js";
+import"./cli-e6rgwtpb.js";
+import"./cli-9egg9azd.js";
+import"./cli-gpnb45ck.js";
+import"./cli-gtcd5c3f.js";
+import"./cli-g5h24ny8.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/logs.ts