@pensar/apex 2.1.3-canary.06f4c3eb → 2.1.3-canary.082299eb

package/build/{agent-ts46he50.js → agent-25rra8mk.js}

@@ -1,23 +1,23 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-99a9aq3w.js";
+} from "./cli-w5vt3svr.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-sganpfnr.js";
+} from "./cli-35rkgbhd.js";
 import"./cli-c8131c4q.js";
 import {
   init_dist,
   stepCountIs
-} from "./cli-ja43jscc.js";
-import"./cli-80sehbtt.js";
+} from "./cli-d28z7z1b.js";
+import"./cli-0kg01x44.js";
 import {
   exports_external,
   init_zod
-} from "./cli-29yqhrjq.js";
+} from "./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-pgsqvjqw.js";
-import"./cli-h28cfavt.js";
-import"./cli-5vvb8cby.js";
+import"./cli-7bzzjw1f.js";
+import"./cli-bp7f8nyk.js";
+import"./cli-f5javz2k.js";
 import"./cli-8rxa073f.js";
 
 // src/core/agents/specialized/findingJudge/agent.ts
@@ -207,6 +207,7 @@ class FindingJudgeAgent extends OffensiveSecurityAgent {
       eventBus: opts.eventBus,
       sandbox: opts.sandbox,
       enableThinking: opts.enableThinking,
+      thinkingEffort: opts.thinkingEffort,
       openAIReasoningEffort: opts.openAIReasoningEffort,
       subagentId: opts.subagentId ?? "finding-judge",
       activeTools: [...FINDING_JUDGE_ACTIVE_TOOLS],

package/build/agent-qa4kk7v1.js

@@ -0,0 +1,27 @@
+import {
+  PentestResponseSchema,
+  TargetedPentestAgent,
+  buildPentestActiveTools,
+  buildPentestPrompt,
+  buildPentestSystemPrompt
+} from "./cli-8256tzw9.js";
+import"./cli-9fsre5pt.js";
+import"./cli-7g8n2kkk.js";
+import"./cli-w5vt3svr.js";
+import"./cli-35rkgbhd.js";
+import"./cli-c8131c4q.js";
+import"./cli-d28z7z1b.js";
+import"./cli-0kg01x44.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-7bzzjw1f.js";
+import"./cli-bp7f8nyk.js";
+import"./cli-f5javz2k.js";
+import"./cli-8rxa073f.js";
+export {
+  buildPentestSystemPrompt,
+  buildPentestPrompt,
+  buildPentestActiveTools,
+  TargetedPentestAgent,
+  PentestResponseSchema
+};

package/build/agent-xpddb5yz.js

@@ -0,0 +1,19 @@
+import {
+  CodeAgent
+} from "./cli-nn5rxhvz.js";
+import"./cli-9fsre5pt.js";
+import"./cli-7g8n2kkk.js";
+import"./cli-w5vt3svr.js";
+import"./cli-35rkgbhd.js";
+import"./cli-c8131c4q.js";
+import"./cli-d28z7z1b.js";
+import"./cli-0kg01x44.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-7bzzjw1f.js";
+import"./cli-bp7f8nyk.js";
+import"./cli-f5javz2k.js";
+import"./cli-8rxa073f.js";
+export {
+  CodeAgent
+};

package/build/{apps-6egm0mw2.js → apps-c4rdprzp.js}

@@ -12,26 +12,27 @@ import {
   searchEndpoints,
   updateApp,
   updateEndpoint
-} from "./cli-jn2sxf89.js";
-import"./cli-gta3gsva.js";
-import"./cli-8p3trjtv.js";
-import"./cli-952bzt8m.js";
-import"./cli-epra15kv.js";
-import"./cli-mt0f9tte.js";
-import"./cli-adgyv55h.js";
+} from "./cli-db434rd0.js";
+import"./cli-y4csaqh2.js";
+import"./cli-qdvef4qc.js";
+import"./cli-sekg25pa.js";
+import"./cli-8256tzw9.js";
+import"./cli-wdahap6k.js";
+import"./cli-nn5rxhvz.js";
+import"./cli-nfnfwfcn.js";
 import"./cli-9fsre5pt.js";
-import"./cli-r2z98y59.js";
-import"./cli-99a9aq3w.js";
-import"./cli-sganpfnr.js";
+import"./cli-7g8n2kkk.js";
+import"./cli-w5vt3svr.js";
+import"./cli-35rkgbhd.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-ja43jscc.js";
-import"./cli-80sehbtt.js";
-import"./cli-29yqhrjq.js";
+import"./cli-d28z7z1b.js";
+import"./cli-0kg01x44.js";
+import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-pgsqvjqw.js";
-import"./cli-h28cfavt.js";
-import"./cli-5vvb8cby.js";
+import"./cli-7bzzjw1f.js";
+import"./cli-bp7f8nyk.js";
+import"./cli-f5javz2k.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/apps.ts

package/build/{auth-qd4f8hgn.js → auth-cm0s3an4.js}

@@ -1,18 +1,19 @@
 #!/usr/bin/env bun
-import"./cli-jn2sxf89.js";
-import"./cli-gta3gsva.js";
-import"./cli-8p3trjtv.js";
-import"./cli-952bzt8m.js";
-import"./cli-epra15kv.js";
-import"./cli-mt0f9tte.js";
-import"./cli-adgyv55h.js";
+import"./cli-db434rd0.js";
+import"./cli-y4csaqh2.js";
+import"./cli-qdvef4qc.js";
+import"./cli-sekg25pa.js";
+import"./cli-8256tzw9.js";
+import"./cli-wdahap6k.js";
+import"./cli-nn5rxhvz.js";
+import"./cli-nfnfwfcn.js";
 import"./cli-9fsre5pt.js";
-import"./cli-r2z98y59.js";
-import"./cli-99a9aq3w.js";
-import"./cli-sganpfnr.js";
+import"./cli-7g8n2kkk.js";
+import"./cli-w5vt3svr.js";
+import"./cli-35rkgbhd.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-ja43jscc.js";
+import"./cli-d28z7z1b.js";
 import {
   disconnect,
   fetchWorkspaces,
@@ -25,15 +26,15 @@ import {
   pollWorkOSToken,
   selectWorkspace,
   startDeviceFlow
-} from "./cli-80sehbtt.js";
-import"./cli-29yqhrjq.js";
+} from "./cli-0kg01x44.js";
+import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
 import {
   config,
   init_config
-} from "./cli-pgsqvjqw.js";
-import"./cli-h28cfavt.js";
-import"./cli-5vvb8cby.js";
+} from "./cli-7bzzjw1f.js";
+import"./cli-bp7f8nyk.js";
+import"./cli-f5javz2k.js";
 import {
   __require
 } from "./cli-8rxa073f.js";

package/build/authentication-k8303p1y.js

@@ -0,0 +1,19 @@
+import {
+  runAuthenticationAgent
+} from "./cli-wdahap6k.js";
+import"./cli-9fsre5pt.js";
+import"./cli-7g8n2kkk.js";
+import"./cli-w5vt3svr.js";
+import"./cli-35rkgbhd.js";
+import"./cli-c8131c4q.js";
+import"./cli-d28z7z1b.js";
+import"./cli-0kg01x44.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-7bzzjw1f.js";
+import"./cli-bp7f8nyk.js";
+import"./cli-f5javz2k.js";
+import"./cli-8rxa073f.js";
+export {
+  runAuthenticationAgent
+};

package/build/blackboxAgent-8mpqbggt.js

@@ -0,0 +1,19 @@
+import {
+  BlackboxAttackSurfaceAgent
+} from "./cli-qdvef4qc.js";
+import"./cli-9fsre5pt.js";
+import"./cli-7g8n2kkk.js";
+import"./cli-w5vt3svr.js";
+import"./cli-35rkgbhd.js";
+import"./cli-c8131c4q.js";
+import"./cli-d28z7z1b.js";
+import"./cli-0kg01x44.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-7bzzjw1f.js";
+import"./cli-bp7f8nyk.js";
+import"./cli-f5javz2k.js";
+import"./cli-8rxa073f.js";
+export {
+  BlackboxAttackSurfaceAgent
+};

package/build/{blackboxPentest-fe56bfc1.js → blackboxPentest-b1dqrv93.js}

@@ -1,23 +1,24 @@
 import {
   runPentestWorkflow
-} from "./cli-gta3gsva.js";
-import"./cli-8p3trjtv.js";
-import"./cli-952bzt8m.js";
-import"./cli-mt0f9tte.js";
-import"./cli-adgyv55h.js";
+} from "./cli-y4csaqh2.js";
+import"./cli-qdvef4qc.js";
+import"./cli-sekg25pa.js";
+import"./cli-8256tzw9.js";
+import"./cli-nn5rxhvz.js";
+import"./cli-nfnfwfcn.js";
 import"./cli-9fsre5pt.js";
-import"./cli-r2z98y59.js";
-import"./cli-99a9aq3w.js";
-import"./cli-sganpfnr.js";
+import"./cli-7g8n2kkk.js";
+import"./cli-w5vt3svr.js";
+import"./cli-35rkgbhd.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-ja43jscc.js";
-import"./cli-80sehbtt.js";
-import"./cli-29yqhrjq.js";
+import"./cli-d28z7z1b.js";
+import"./cli-0kg01x44.js";
+import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-pgsqvjqw.js";
-import"./cli-h28cfavt.js";
-import"./cli-5vvb8cby.js";
+import"./cli-7bzzjw1f.js";
+import"./cli-bp7f8nyk.js";
+import"./cli-f5javz2k.js";
 import"./cli-8rxa073f.js";
 
 // src/core/api/blackboxPentest.ts

package/build/{cli-80sehbtt.js → cli-0kg01x44.js}

@@ -1,7 +1,7 @@
 import {
   config,
   init_config
-} from "./cli-pgsqvjqw.js";
+} from "./cli-7bzzjw1f.js";
 import {
   __esm
 } from "./cli-8rxa073f.js";

package/build/{cli-sganpfnr.js → cli-35rkgbhd.js}

@@ -3,7 +3,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-ja43jscc.js";
+} from "./cli-d28z7z1b.js";
 
 // src/core/agents/specialized/utils.ts
 import { execSync } from "node:child_process";

package/build/{cli-29yqhrjq.js → cli-3k1x5rn3.js}

@@ -24438,4 +24438,4 @@ var require_src = __commonJS((exports) => {
   };
 });
 
-export { AISDKError, APICallError, EmptyResponseBodyError, getErrorMessage, InvalidArgumentError, InvalidPromptError, InvalidResponseDataError, JSONParseError, LoadAPIKeyError, LoadSettingError, NoContentGeneratedError, NoSuchModelError, TooManyEmbeddingValuesForCallError, TypeValidationError, UnsupportedFunctionalityError, isJSONArray, isJSONObject, init_dist, safeParse, toJSONSchema, init_core2 as init_core, exports_iso, safeParseAsync2 as safeParseAsync, string2 as string, number2 as number, boolean2 as boolean, _null3 as _null, unknown, array, object, looseObject, union, discriminatedUnion, intersection, record, _enum2 as _enum, literal, optional, custom, preprocess, exports_external, init_v4, ZodFirstPartyTypeKind2 as ZodFirstPartyTypeKind, init_v3, EventSourceParserStream, init_stream, combineHeaders, createToolNameMapping, delay, DelayedPromise, extractResponseHeaders, convertBase64ToUint8Array, convertUint8ArrayToBase64, convertToBase64, convertToFormData, cancelResponseBody, DownloadError, fetchWithValidatedRedirects, DEFAULT_MAX_DOWNLOAD_SIZE, readResponseWithSizeLimit, downloadBlob, createIdGenerator, generateId, getErrorMessage2 as getErrorMessage1, isAbortError, getRuntimeEnvironmentUserAgent, normalizeHeaders, withUserAgentSuffix, getFromApi, isNonNullable, isSameOrigin, isUrlSupported, loadApiKey, loadOptionalSetting, loadSetting, lazySchema, jsonSchema, asSchema, zodSchema, validateTypes, safeValidateTypes, safeParseJSON, isParsableJson, parseJsonEventStream, parseProviderOptions, postJsonToApi, postFormDataToApi, tool, dynamicTool, createProviderToolFactory, createProviderToolFactoryWithOutputSchema, resolve, createJsonErrorResponseHandler, createEventSourceResponseHandler, createJsonResponseHandler, stripFileExtension, withoutTrailingSlash, executeTool, init_dist3 as init_dist1, zod_default, init_zod, GatewayError, GatewayAuthenticationError, createGatewayProvider, gateway, init_dist4 as init_dist2, require_src };
+export { AISDKError, APICallError, EmptyResponseBodyError, getErrorMessage, InvalidArgumentError, InvalidPromptError, InvalidResponseDataError, JSONParseError, LoadAPIKeyError, LoadSettingError, NoContentGeneratedError, NoSuchModelError, TooManyEmbeddingValuesForCallError, TypeValidationError, UnsupportedFunctionalityError, isJSONArray, isJSONObject, init_dist, safeParse, toJSONSchema, init_core2 as init_core, exports_iso, safeParseAsync2 as safeParseAsync, string2 as string, number2 as number, boolean2 as boolean, _null3 as _null, unknown, array, object, looseObject, union, discriminatedUnion, intersection, record, _enum2 as _enum, literal, optional, custom, preprocess, exports_external, init_v4, ZodFirstPartyTypeKind2 as ZodFirstPartyTypeKind, init_v3, EventSourceParserStream, init_stream, combineHeaders, createToolNameMapping, delay, DelayedPromise, extractResponseHeaders, convertBase64ToUint8Array, convertUint8ArrayToBase64, convertToBase64, convertToFormData, cancelResponseBody, DownloadError, fetchWithValidatedRedirects, DEFAULT_MAX_DOWNLOAD_SIZE, readResponseWithSizeLimit, downloadBlob, createIdGenerator, generateId, getErrorMessage2 as getErrorMessage1, isAbortError, getRuntimeEnvironmentUserAgent, normalizeHeaders, withUserAgentSuffix, getFromApi, isNonNullable, isSameOrigin, isUrlSupported, loadApiKey, loadOptionalSetting, loadSetting, lazySchema, jsonSchema, asSchema, zodSchema, validateTypes, safeValidateTypes, parseJSON, safeParseJSON, isParsableJson, parseJsonEventStream, parseProviderOptions, postJsonToApi, postFormDataToApi, tool, dynamicTool, createProviderToolFactory, createProviderToolFactoryWithOutputSchema, resolve, createJsonErrorResponseHandler, createEventSourceResponseHandler, createJsonResponseHandler, stripFileExtension, withoutTrailingSlash, executeTool, init_dist3 as init_dist1, zod_default, init_zod, GatewayError, GatewayAuthenticationError, createGatewayProvider, gateway, init_dist4 as init_dist2, require_src };

package/build/{cli-pgsqvjqw.js → cli-7bzzjw1f.js}

@@ -3,7 +3,7 @@ import {
   init,
   init_config,
   update
-} from "./cli-h28cfavt.js";
+} from "./cli-bp7f8nyk.js";
 import {
   __esm
 } from "./cli-8rxa073f.js";

package/build/{cli-r2z98y59.js → cli-7g8n2kkk.js}

@@ -1,11 +1,11 @@
 import {
   CweEntrySchema,
   ValidatedCweEntrySchema
-} from "./cli-99a9aq3w.js";
+} from "./cli-w5vt3svr.js";
 import {
   exports_external,
   init_zod
-} from "./cli-29yqhrjq.js";
+} from "./cli-3k1x5rn3.js";
 
 // src/core/agents/offSecAgent/types.ts
 init_zod();

package/build/{cli-952bzt8m.js → cli-8256tzw9.js}

@@ -1,20 +1,26 @@
 import {
   OffensiveSecurityAgent,
+  PentestReportedError,
+  REPORT_ERROR_TOOL_NAME,
+  createReportErrorTool,
   isMemoryEnabled,
   readPlan
-} from "./cli-99a9aq3w.js";
+} from "./cli-w5vt3svr.js";
 import {
   createLogger,
+  hasToolCall,
+  init_dist,
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-ja43jscc.js";
+} from "./cli-d28z7z1b.js";
 import {
   exports_external,
   init_zod
-} from "./cli-29yqhrjq.js";
+} from "./cli-3k1x5rn3.js";
 
 // src/core/agents/specialized/pentest/agent.ts
+init_dist();
 init_zod();
 init_structured();
 import { existsSync, readdirSync, readFileSync } from "node:fs";
@@ -31,6 +37,7 @@ var PentestResponseSchema = exports_external.object({
   findingsDocumented: exports_external.number().describe("Number of vulnerabilities documented via document_vulnerability"),
   objectivesCovered: exports_external.array(exports_external.string()).describe("Which objectives were tested"),
   objectiveResults: exports_external.array(ObjectiveResultSchema).describe("Status of each objective: mark as completed if thoroughly tested (vulnerability confirmed and documented, OR conclusively not vulnerable), or incomplete if further testing is warranted. Include new objectives discovered during testing that should be added for future runs."),
+  newObjectives: exports_external.array(exports_external.string()).optional().describe("Objectives for the NEXT run of this endpoint. Populate this directly from everything you observed: worker outcomes, what was confirmed or conclusively ruled out, recon anomalies nobody investigated, and the technology you fingerprinted. Each entry must be a focused, self-contained objective the next run can act on directly — name a concrete attack class against a concrete parameter, header, or flow. Do NOT restate anything tested this run or already marked completed in your assignment context; find the coverage gaps. Emit a small, high-signal set (typically 2-6), preferring breadth across distinct untested attack classes over payload variants. Empty/omitted when the endpoint is genuinely exhausted."),
   noFindingsReason: exports_external.string().optional().describe("If no findings were documented, explain why (e.g., target not vulnerable, endpoint unreachable)")
 });
 
@@ -53,14 +60,16 @@ class TargetedPentestAgent extends OffensiveSecurityAgent {
       context,
       environmentVariables,
       enableThinking,
+      thinkingEffort,
       openAIReasoningEffort,
       role = "orchestrator",
       browserSession,
       display
     } = opts;
+    let reportedError = null;
     super({
       system: buildPentestSystemPrompt(session, role),
-      prompt: buildPentestPrompt(target, objectives, session, findingsRegistry, context, environmentVariables ? Object.keys(environmentVariables) : undefined, subagentId, role),
+      prompt: buildPentestPrompt(target, objectives, session, findingsRegistry, context, environmentVariables ? Object.keys(environmentVariables) : undefined, subagentId, role, session.credentialManager?.formatForPrompt()),
       model,
       session,
       target,
@@ -75,13 +84,24 @@ class TargetedPentestAgent extends OffensiveSecurityAgent {
       messages,
       environmentVariables,
       enableThinking,
+      thinkingEffort,
       openAIReasoningEffort,
       browserSession,
       display,
       activeTools: buildPentestActiveTools(role, session),
       responseSchema: PentestResponseSchema,
+      extraTools: {
+        [REPORT_ERROR_TOOL_NAME]: createReportErrorTool((err) => {
+          reportedError = err;
+        })
+      },
+      stopWhen: hasToolCall(REPORT_ERROR_TOOL_NAME),
       resolveResult: async (streamResult) => {
+        if (reportedError) {
+          throw new PentestReportedError(reportedError);
+        }
         let objectiveResults;
+        let newObjectives;
         try {
           const response = await streamResult.response;
           for (const msg of response.messages ?? []) {
@@ -90,8 +110,11 @@ class TargetedPentestAgent extends OffensiveSecurityAgent {
             for (const part of msg.content) {
               if (part.type === "tool-call" && part.toolName === "response" && part.input) {
                 const input = part.input;
-                if (input.response?.objectiveResults) {
-                  objectiveResults = input.response.objectiveResults;
+                if (input.result?.objectiveResults) {
+                  objectiveResults = input.result.objectiveResults;
+                }
+                if (input.result?.newObjectives) {
+                  newObjectives = input.result.newObjectives;
                 }
               }
             }
@@ -102,7 +125,8 @@ class TargetedPentestAgent extends OffensiveSecurityAgent {
           findings,
           findingsPath: session.findingsPath,
           pocsPath: session.pocsPath,
-          objectiveResults
+          objectiveResults,
+          newObjectives
         };
       }
     });
@@ -148,6 +172,7 @@ var SECTION_POC_PORTABILITY = `POC Script Portability Requirements:
 - Prefer built-in shell features over external commands when possible
 - If a PoC requires a specific non-standard tool, check for it at the start and exit with a clear error message if missing`;
 var SECTION_BROWSER_INTERACTION = `Browser Interaction:
+- Lean on the browser for testing wherever it applies. For anything interactive, stateful, client-side, or auth-gated — login flows, multi-step forms, SPA/JavaScript-driven behavior, DOM-based XSS, CSRF, and any page that only behaves correctly with a rendered, logged-in session — drive the test through the browser (browser_navigate / browser_click / browser_fill / browser_snapshot) rather than raw requests. The browser preserves your authenticated session and executes client-side logic that http_request / curl cannot see. Fall back to http_request / execute_command (curl) for stateless API-level checks, header inspection, and high-volume payload fuzzing.
 - Use browser_navigate to load pages, browser_snapshot to inspect the DOM, and browser_screenshot for visual evidence
 - Use browser_click and browser_fill to interact with forms, buttons, and input fields — essential for testing login flows, search fields, and other interactive elements
 - Screenshot liberally so the user can follow along. Whenever you are driving a browser, treat screenshots as the primary way the user watches your work. Err heavily on the side of more screenshots rather than fewer.
@@ -159,10 +184,14 @@ var SECTION_BROWSER_INTERACTION = `Browser Interaction:
 - Screenshots are cheap — prefer taking one and not needing it over skipping one and losing visibility. Do NOT attempt to conserve tokens by skipping screenshots during browser-driven testing.
 - Screenshots are automatically stored and displayed alongside your tool call logs, so each one directly improves the user's ability to follow the test in real time.`;
 var SECTION_AUTHENTICATION = `Authentication:
-- If the prompt includes an "Existing Authentication Session" section, USE those cookies/headers on every request. Do NOT attempt to re-authenticate.
-- For http_request: include the provided Cookie and Authorization headers in every call.
-- For execute_command (curl): include -H "Cookie: ..." and/or -H "Authorization: ..." flags.
-- If a request returns 401/403, the session may have expired — note it in your findings but do not try to log in again.`;
+- If the prompt includes an "Existing Authentication Session" section, USE those cookies/headers on every request and do NOT re-authenticate up front. If such a request returns 401/403, that provided session has expired — note it in your findings (and call report_error if it blocks all further testing). Only log in yourself (following any "Available Credentials" instructions) if that provided session expires mid-run.
+- Otherwise, if the target requires authentication, log in yourself. When an "Available Credentials" section is present, follow the authentication instructions in each credential's Context exactly — use the method it describes (for example, a token/API exchange driven with execute_command or http_request) instead of defaulting to a browser login. Only fall back to driving the login flow in the browser with browser_navigate + browser_fill when the Context does not specify how to authenticate. Prefer credentialId + credentialField so secrets are resolved securely; injected credential environment variables are also available inside execute_command.
+- After a successful login, capture the resulting session credentials and reuse them for raw requests. For a browser login, call browser_get_cookies to extract the session cookies (including httpOnly ones) — pass them as the Cookie header to http_request, or as -H "Cookie: ..." / -b flags to execute_command (curl). Any worker you spawn automatically inherits a snapshot of your authenticated browser session.
+- For http_request: include the captured Cookie and any Authorization headers on every call. For execute_command (curl): include -H "Cookie: ..." and/or -H "Authorization: ..." flags.
+- If a request returns 401/403 after you logged in yourself, your captured session may have expired — re-authenticate the same way you did originally and refresh your session cookies/tokens.
+- Do NOT spin your wheels on authentication. If you have followed the credential Context instructions and still cannot authenticate, do NOT try to work around it — do NOT register a new account, self-sign-up, or fabricate credentials. Those are not the credentials under test and only pollute results. Make at most a couple of genuine attempts, then call report_error with reason "authentication_failed" and a specific message describing exactly what you tried and how it failed.
+- If you cannot authenticate with the available credentials, or another runtime condition blocks all testing, call report_error with a clear, specific message instead of giving up silently or documenting a non-finding.
+- Do NOT complete destructive or state-changing account actions. When testing a password-reset, account-recovery, email-change, or account-deletion flow, demonstrate the flaw (e.g. a predictable/guessable reset token, a reset that can be triggered for another user, or a flow missing authorization) WITHOUT actually finishing the action on the real account under test — never set a new password, consume a real reset token, change the account email, or delete the account. Doing so can lock you or the operator out and invalidate the credentials. Stop at the point that proves impact and document that instead.`;
 var SECTION_CREDENTIAL_DISCOVERY = `Credential & Secret Discovery:
 - When you find exposed configuration in client-side code (JS bundles, HTML source, config files), distinguish between:
   - SENSITIVE SECRETS (API keys granting backend access, database credentials, JWT signing keys, private keys, service account tokens) — document as a HIGH/CRITICAL finding
@@ -432,14 +461,20 @@ ${SECTION_SOURCE_CODE_PROHIBITION}
 Your methodology:
 1. ORIENT — Call list_memories to review any existing knowledge from previous engagements (target-specific notes, successful techniques, false positive patterns, technology context). Use what you find to shape your plan.
 2. PLAN — State the objectives you have been given and outline your high-level orchestration plan in plain text BEFORE any tool calls. For each objective, briefly state what attack class the worker should focus on (e.g. "Objective 1 → SQL injection, focus on /api/users id parameter"). Output this plan as a text message — not as a tool call.
-3. RECON — Perform LIGHT initial reconnaissance to confirm the target is reachable and understand baseline behavior. Use http_request for a handful of probes, browser_navigate + browser_snapshot to see the surface, and execute_command sparingly. Do NOT begin exploitation here — that is the workers' job. Note any anomalies (unusual error responses, exposed headers, framework fingerprints, surprising endpoint behavior) for the final exploratory worker.
+3. RECON & AUTHENTICATE — Perform LIGHT initial reconnaissance to confirm the target is reachable and understand baseline behavior. Use http_request for a handful of probes, browser_navigate + browser_snapshot to see the surface, and execute_command sparingly. Do NOT begin exploitation here — that is the workers' job. Note any anomalies (unusual error responses, exposed headers, framework fingerprints, surprising endpoint behavior) for the final exploratory worker.
+   - If authentication is required (an "Existing Authentication Session" section is absent and the target / objectives need a logged-in session), you MUST authenticate NOW, in YOUR browser, BEFORE any fan-out. Follow the "Available Credentials" instructions exactly — use the method each credential's Context describes (e.g. a token/API exchange via execute_command or http_request) rather than defaulting to a browser login; only drive the browser login flow (browser_navigate + browser_fill with credentialId/credentialField) when the Context does not specify how.
+   - VERIFY the session before fanning out: request a protected resource and confirm it does NOT return 401/403. Use browser_get_cookies to capture the session cookies for reuse in raw http_request / curl calls.
+   - Authenticating HERE (not in the workers) is critical: each worker you spawn inherits a snapshot of YOUR browser's authenticated cookies + localStorage at spawn time, so ONE successful login up front propagates to every worker. Do NOT instruct workers to re-authenticate.
+   - If you cannot authenticate and the objectives require it, call report_error with reason "authentication_failed" and a specific message BEFORE spawning any workers — do not fan out unauthenticated workers that will all fail, and do not report non-findings.
 4. FAN OUT — For EACH objective, call spawn_pentest_agent EXACTLY ONCE. Each spawn dispatches a focused worker that will perform the full PLAN → VERIFY → PREPARE → TEST → EXPLOIT → DOCUMENT loop on its objective. Workers write findings to the shared findings registry — you do NOT need to forward findings between them.
 5. CHAIN & EXPLORE — After all per-objective workers complete, call spawn_pentest_agent ONE FINAL TIME with a synthesized objective that:
    a. Summarizes what earlier workers confirmed or ruled out (so the exploratory worker doesn't re-do their work).
    b. Calls out any anomalies you noticed during recon that nobody investigated.
    c. Directs the worker to chain confirmed findings into higher-impact attack chains AND probe for additional vulnerabilities outside the original objective list (e.g. business logic flaws, race conditions, secondary injection points).
 6. LEARN — Use add_memory to persist reusable learnings from this engagement (target behaviors, effective techniques, false positive patterns, technology fingerprints).
-7. FINISH — Call the response tool with your final summary. Compile objectiveResults from what each worker reported: mark each objective as completed (vulnerability confirmed and documented by a worker, OR conclusively ruled out by a worker), or incomplete (worker failed or could not finish). Include any new objectives discovered by the exploratory worker.
+7. FINISH — Call the response tool with your final summary. Compile objectiveResults from what each worker reported: mark each objective as completed (vulnerability confirmed and documented by a worker, OR conclusively ruled out by a worker), or incomplete (worker failed or could not finish). Also populate newObjectives directly: using the coverage you just orchestrated (worker outcomes, what was confirmed or ruled out, recon anomalies nobody investigated, technology fingerprints), propose a small focused set of objectives for the NEXT run that are not already tested this run or marked completed in your context — so subsequent runs stay productive instead of re-testing finished work. Return an empty newObjectives array only when the endpoint is genuinely exhausted.
+
+Empty open-objective assignments: if your assignment lists ZERO open objectives to test (every objective in your context is already marked completed), skip the per-objective fan-out and the chain & explore worker, do LIGHT recon only, then go to FINISH and still populate newObjectives so the run produces fresh objectives for next time rather than wasting the run.
 
 ${SECTION_ORCHESTRATOR_DELEGATION}
 
@@ -450,7 +485,7 @@ ${SECTION_MATERIALITY_GUIDANCE}
 ${SECTION_BROWSER_INTERACTION}
 
 ${SECTION_STATE_CHECKPOINTING}`;
-function buildPentestPrompt(target, objectives, session, findingsRegistry, context, envVarNames, subagentId, role = "orchestrator") {
+function buildPentestPrompt(target, objectives, session, findingsRegistry, context, envVarNames, subagentId, role = "orchestrator", credentialContext) {
   const sessionRootPath = session.rootPath;
   const exfilMode = session.config?.exfilMode ?? false;
   const taskDriven = role === "orchestrator" ? false : session.config?.taskDriven ?? false;
@@ -569,13 +604,16 @@ Do NOT discover or enumerate other endpoints or services. Focus exclusively on t
 1. Call list_memories to review any prior knowledge relevant to this target or engagement.
 2. State the objectives and outline your orchestration plan in plain text BEFORE any tool calls — one bullet per objective, briefly naming the attack class each worker should focus on.
 3. Perform LIGHT initial recon (a handful of http_request probes, browser_navigate + browser_snapshot to see the surface). Do NOT begin exploitation here — that is the workers' job. Note any anomalies you observe for the final exploratory worker.
+   - AUTHENTICATE FIRST if the target/objectives need a logged-in session and no "Existing Authentication Session" is provided: log in ONCE in YOUR browser during this recon step, following the "Available Credentials" instructions exactly (prefer the credential Context's method; use credentialId/credentialField so secrets resolve securely). Verify the session with a protected request (expect NOT 401/403) and capture cookies via browser_get_cookies. Every worker inherits your authenticated browser snapshot, so do this BEFORE fan-out and do NOT have workers re-authenticate. If you cannot authenticate and the objectives require it, call report_error with reason "authentication_failed" instead of fanning out.
 4. Call spawn_pentest_agent EXACTLY ONCE PER OBJECTIVE. For every spawn:
    - Set \`target\` to the FULL URL from the assignment above (domain + endpoint path) — pass it through verbatim. Do not strip the path or rewrite the host. Workers do not perform endpoint discovery; they deeply test the path you hand them.
    - Pass the matching objective in the \`objectives\` array (a single-element array).
    - Use the \`context\` field to forward any recon insights specific to that objective. If your earlier browser actions left state the worker should know about (already logged in as X, certain modal already dismissed), call that out in \`context\` — each worker is seeded with a snapshot of YOUR browser's cookies and localStorage at the moment of the spawn call.
 5. After all per-objective workers complete, call spawn_pentest_agent ONE FINAL TIME with a synthesized "chain & explore" objective: summarize what earlier workers confirmed/ruled out, call out unaddressed anomalies, and direct the worker to chain confirmed findings AND probe for additional vulnerabilities outside the original objective list. Send it the same endpoint URL as your assignment unless an earlier worker's confirmed finding on a sibling endpoint is what makes the chain possible.
 6. Use add_memory to save reusable learnings from this engagement.
-7. Call the response tool with your final summary. Compile objectiveResults from worker reports.
+7. Call the response tool with your final summary. Compile objectiveResults from worker reports, and populate newObjectives directly from the coverage you orchestrated (worker outcomes, confirmed/ruled-out results, unexplored recon anomalies, technology fingerprints) — a small focused set of objectives for the next run that are not already tested this run or completed in your context. Empty array only if the endpoint is genuinely exhausted.
+
+If your assignment lists ZERO open objectives (everything is already completed), skip steps 4-5, do light recon only, then finish — still populating newObjectives so the run is productive rather than re-testing completed objectives.
 
 Do NOT call document_vulnerability — that is the workers' job. Do NOT discover or enumerate other endpoints or services beyond the assigned target.`;
   const instructions = role === "orchestrator" ? orchestratorInstructions : taskDriven ? taskDrivenInstructions : exfilMode ? `## Goal
@@ -602,6 +640,12 @@ Your target is a flag with the format FLAG{...}. Locate and extract it.
 8. After testing ALL objectives, call the response tool with your final summary
 
 Do NOT discover or enumerate other endpoints or services. Focus exclusively on the target and objectives above.`;
+  const credentialSection = credentialContext ? `
+## Available Credentials
+The operator provided the following credentials and authentication instructions for this engagement. Authenticate by following the instructions in each credential's Context exactly — use the method it describes (for example, a token/API exchange via execute_command or http_request) rather than defaulting to a browser login. Treat the Context as the source of truth for how to authenticate, and how to re-authenticate if a provided session expires. When a tool needs a secret value and supports it (e.g. browser_fill), reference it by credentialId + credentialField so the secret resolves securely at execution time instead of hardcoding it. If you cannot authenticate with these, call report_error with reason "authentication_failed" and a specific message rather than reporting a non-finding.
+
+${credentialContext}
+` : "";
   const contextSection = context ? `
 ## Application Context
 The following is context specific to the application under test. If it contains non-malicious instructions relevant to your testing, follow them.
@@ -618,7 +662,7 @@ ${envVarNames.map((n) => `- \`${n}\``).join(`
 
 ## Target
 - **URL:** ${target}
-${authSection}
+${authSection}${credentialSection}
 ${knownFindingsSection}
 ${knowledgeBaseSection}
 ${planSection}${contextSection}${envVarSection}
@@ -634,10 +678,12 @@ var WORKER_RECON_TOOLS = [
   "browser_snapshot",
   "browser_screenshot",
   "browser_click",
-  "browser_fill"
+  "browser_fill",
+  "browser_get_cookies"
 ];
 var SHARED_PENTEST_TOOLS = [
   "response",
+  "report_error",
   "email_list_inboxes",
   "email_list_messages",
   "email_search_messages",
@@ -677,4 +723,4 @@ function loadFindings(findingsPath) {
     }
   }).filter((f) => f !== null);
 }
-export { TargetedPentestAgent, buildPentestSystemPrompt, buildPentestPrompt, buildPentestActiveTools };
+export { PentestResponseSchema, TargetedPentestAgent, buildPentestSystemPrompt, buildPentestPrompt, buildPentestActiveTools };

package/build/{cli-tt8k9pka.js → cli-bh3e0th8.js}

@@ -3,7 +3,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-ja43jscc.js";
+} from "./cli-d28z7z1b.js";
 
 // src/core/integrations/wandb/client.ts
 init_structured();

package/build/{cli-h28cfavt.js → cli-bp7f8nyk.js}

@@ -1,7 +1,7 @@
 import {
   getCurrentVersion,
   init_installation
-} from "./cli-5vvb8cby.js";
+} from "./cli-f5javz2k.js";
 import {
   __esm
 } from "./cli-8rxa073f.js";