@pensar/apex 2.1.3-canary.fde9cfe4 → 2.2.0-canary.1ae41959

package/build/agent-54gr8249.js

@@ -0,0 +1,19 @@
+import {
+  CodeAgent
+} from "./cli-rzdd876e.js";
+import"./cli-9fsre5pt.js";
+import"./cli-tcm18x3m.js";
+import"./cli-xvgsycgz.js";
+import"./cli-221r604x.js";
+import"./cli-c8131c4q.js";
+import"./cli-4z24gndv.js";
+import"./cli-8178m9nm.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-mp5rfvv0.js";
+import"./cli-raphm7yk.js";
+import"./cli-yh8j4ryf.js";
+import"./cli-8rxa073f.js";
+export {
+  CodeAgent
+};

package/build/{agent-jnxzjsc4.js → agent-mbtfcpky.js}

@@ -1,23 +1,23 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-de5j66pm.js";
+} from "./cli-xvgsycgz.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-jk8wkkhn.js";
+} from "./cli-221r604x.js";
 import"./cli-c8131c4q.js";
 import {
   init_dist,
   stepCountIs
-} from "./cli-3r0m9ee1.js";
-import"./cli-bhj09mhe.js";
+} from "./cli-4z24gndv.js";
+import"./cli-8178m9nm.js";
 import {
   exports_external,
   init_zod
 } from "./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-7dez82r2.js";
-import"./cli-pd7vxk53.js";
-import"./cli-f4659etd.js";
+import"./cli-mp5rfvv0.js";
+import"./cli-raphm7yk.js";
+import"./cli-yh8j4ryf.js";
 import"./cli-8rxa073f.js";
 
 // src/core/agents/specialized/findingJudge/agent.ts

package/build/{agent-zsx42kpx.js → agent-me43tz5h.js}

@@ -4,19 +4,19 @@ import {
   buildPentestActiveTools,
   buildPentestPrompt,
   buildPentestSystemPrompt
-} from "./cli-hhh6f02f.js";
+} from "./cli-3b4thz7t.js";
 import"./cli-9fsre5pt.js";
-import"./cli-ed3v8kz3.js";
-import"./cli-de5j66pm.js";
-import"./cli-jk8wkkhn.js";
+import"./cli-tcm18x3m.js";
+import"./cli-xvgsycgz.js";
+import"./cli-221r604x.js";
 import"./cli-c8131c4q.js";
-import"./cli-3r0m9ee1.js";
-import"./cli-bhj09mhe.js";
+import"./cli-4z24gndv.js";
+import"./cli-8178m9nm.js";
 import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-7dez82r2.js";
-import"./cli-pd7vxk53.js";
-import"./cli-f4659etd.js";
+import"./cli-mp5rfvv0.js";
+import"./cli-raphm7yk.js";
+import"./cli-yh8j4ryf.js";
 import"./cli-8rxa073f.js";
 export {
   buildPentestSystemPrompt,

package/build/{apps-mz3tb1z1.js → apps-dp34j8n5.js}

@@ -12,27 +12,27 @@ import {
   searchEndpoints,
   updateApp,
   updateEndpoint
-} from "./cli-7xrww2qg.js";
-import"./cli-s5c6p1ys.js";
-import"./cli-ycz3005y.js";
-import"./cli-102g5mnd.js";
-import"./cli-hhh6f02f.js";
-import"./cli-9gr8h1nv.js";
-import"./cli-5wgfrsqt.js";
-import"./cli-3spypd58.js";
+} from "./cli-6sd5m21c.js";
+import"./cli-b8sa1p9c.js";
+import"./cli-98mvjf5z.js";
+import"./cli-0127pcvj.js";
+import"./cli-3b4thz7t.js";
+import"./cli-nqkhs46w.js";
+import"./cli-rzdd876e.js";
+import"./cli-k0phtdvs.js";
 import"./cli-9fsre5pt.js";
-import"./cli-ed3v8kz3.js";
-import"./cli-de5j66pm.js";
-import"./cli-jk8wkkhn.js";
+import"./cli-tcm18x3m.js";
+import"./cli-xvgsycgz.js";
+import"./cli-221r604x.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-3r0m9ee1.js";
-import"./cli-bhj09mhe.js";
+import"./cli-4z24gndv.js";
+import"./cli-8178m9nm.js";
 import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-7dez82r2.js";
-import"./cli-pd7vxk53.js";
-import"./cli-f4659etd.js";
+import"./cli-mp5rfvv0.js";
+import"./cli-raphm7yk.js";
+import"./cli-yh8j4ryf.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/apps.ts

package/build/{auth-9xfhgqx5.js → auth-j5azkmn5.js}

@@ -1,19 +1,19 @@
 #!/usr/bin/env bun
-import"./cli-7xrww2qg.js";
-import"./cli-s5c6p1ys.js";
-import"./cli-ycz3005y.js";
-import"./cli-102g5mnd.js";
-import"./cli-hhh6f02f.js";
-import"./cli-9gr8h1nv.js";
-import"./cli-5wgfrsqt.js";
-import"./cli-3spypd58.js";
+import"./cli-6sd5m21c.js";
+import"./cli-b8sa1p9c.js";
+import"./cli-98mvjf5z.js";
+import"./cli-0127pcvj.js";
+import"./cli-3b4thz7t.js";
+import"./cli-nqkhs46w.js";
+import"./cli-rzdd876e.js";
+import"./cli-k0phtdvs.js";
 import"./cli-9fsre5pt.js";
-import"./cli-ed3v8kz3.js";
-import"./cli-de5j66pm.js";
-import"./cli-jk8wkkhn.js";
+import"./cli-tcm18x3m.js";
+import"./cli-xvgsycgz.js";
+import"./cli-221r604x.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-3r0m9ee1.js";
+import"./cli-4z24gndv.js";
 import {
   disconnect,
   fetchWorkspaces,
@@ -26,15 +26,15 @@ import {
   pollWorkOSToken,
   selectWorkspace,
   startDeviceFlow
-} from "./cli-bhj09mhe.js";
+} from "./cli-8178m9nm.js";
 import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
 import {
   config,
   init_config
-} from "./cli-7dez82r2.js";
-import"./cli-pd7vxk53.js";
-import"./cli-f4659etd.js";
+} from "./cli-mp5rfvv0.js";
+import"./cli-raphm7yk.js";
+import"./cli-yh8j4ryf.js";
 import {
   __require
 } from "./cli-8rxa073f.js";

package/build/authentication-6vtagz1j.js

@@ -0,0 +1,19 @@
+import {
+  runAuthenticationAgent
+} from "./cli-nqkhs46w.js";
+import"./cli-9fsre5pt.js";
+import"./cli-tcm18x3m.js";
+import"./cli-xvgsycgz.js";
+import"./cli-221r604x.js";
+import"./cli-c8131c4q.js";
+import"./cli-4z24gndv.js";
+import"./cli-8178m9nm.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-mp5rfvv0.js";
+import"./cli-raphm7yk.js";
+import"./cli-yh8j4ryf.js";
+import"./cli-8rxa073f.js";
+export {
+  runAuthenticationAgent
+};

package/build/blackboxAgent-2aa6hx1y.js

@@ -0,0 +1,19 @@
+import {
+  BlackboxAttackSurfaceAgent
+} from "./cli-98mvjf5z.js";
+import"./cli-9fsre5pt.js";
+import"./cli-tcm18x3m.js";
+import"./cli-xvgsycgz.js";
+import"./cli-221r604x.js";
+import"./cli-c8131c4q.js";
+import"./cli-4z24gndv.js";
+import"./cli-8178m9nm.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-mp5rfvv0.js";
+import"./cli-raphm7yk.js";
+import"./cli-yh8j4ryf.js";
+import"./cli-8rxa073f.js";
+export {
+  BlackboxAttackSurfaceAgent
+};

package/build/{blackboxPentest-93te1j1w.js → blackboxPentest-hs8dj0a2.js}

@@ -1,24 +1,24 @@
 import {
   runPentestWorkflow
-} from "./cli-s5c6p1ys.js";
-import"./cli-ycz3005y.js";
-import"./cli-102g5mnd.js";
-import"./cli-hhh6f02f.js";
-import"./cli-5wgfrsqt.js";
-import"./cli-3spypd58.js";
+} from "./cli-b8sa1p9c.js";
+import"./cli-98mvjf5z.js";
+import"./cli-0127pcvj.js";
+import"./cli-3b4thz7t.js";
+import"./cli-rzdd876e.js";
+import"./cli-k0phtdvs.js";
 import"./cli-9fsre5pt.js";
-import"./cli-ed3v8kz3.js";
-import"./cli-de5j66pm.js";
-import"./cli-jk8wkkhn.js";
+import"./cli-tcm18x3m.js";
+import"./cli-xvgsycgz.js";
+import"./cli-221r604x.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-3r0m9ee1.js";
-import"./cli-bhj09mhe.js";
+import"./cli-4z24gndv.js";
+import"./cli-8178m9nm.js";
 import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-7dez82r2.js";
-import"./cli-pd7vxk53.js";
-import"./cli-f4659etd.js";
+import"./cli-mp5rfvv0.js";
+import"./cli-raphm7yk.js";
+import"./cli-yh8j4ryf.js";
 import"./cli-8rxa073f.js";
 
 // src/core/api/blackboxPentest.ts

package/build/{cli-102g5mnd.js → cli-0127pcvj.js}

@@ -1,11 +1,11 @@
 import {
   EvidenceFileEntrySchema
-} from "./cli-ed3v8kz3.js";
+} from "./cli-tcm18x3m.js";
 import {
   CweEntrySchema,
   ValidatedCweEntrySchema,
   hasCanonicalName
-} from "./cli-de5j66pm.js";
+} from "./cli-xvgsycgz.js";
 import {
   exports_external,
   init_zod

package/build/{cli-jk8wkkhn.js → cli-221r604x.js}

@@ -3,7 +3,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-3r0m9ee1.js";
+} from "./cli-4z24gndv.js";
 
 // src/core/agents/specialized/utils.ts
 import { execSync } from "node:child_process";

package/build/{cli-hhh6f02f.js → cli-3b4thz7t.js}

@@ -5,7 +5,7 @@ import {
   createReportErrorTool,
   isMemoryEnabled,
   readPlan
-} from "./cli-de5j66pm.js";
+} from "./cli-xvgsycgz.js";
 import {
   createLogger,
   hasToolCall,
@@ -13,7 +13,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-3r0m9ee1.js";
+} from "./cli-4z24gndv.js";
 import {
   exports_external,
   init_zod
@@ -46,6 +46,7 @@ class TargetedPentestAgent extends OffensiveSecurityAgent {
     const {
       model,
       target,
+      grpc,
       objectives,
       session,
       authConfig,
@@ -59,6 +60,7 @@ class TargetedPentestAgent extends OffensiveSecurityAgent {
       messages,
       context,
       environmentVariables,
+      secretValues,
       enableThinking,
       thinkingEffort,
       openAIReasoningEffort,
@@ -69,10 +71,11 @@ class TargetedPentestAgent extends OffensiveSecurityAgent {
     let reportedError = null;
     super({
       system: buildPentestSystemPrompt(session, role),
-      prompt: buildPentestPrompt(target, objectives, session, findingsRegistry, context, environmentVariables ? Object.keys(environmentVariables) : undefined, subagentId, role, session.credentialManager?.formatForPrompt()),
+      prompt: buildPentestPrompt(target, objectives, session, findingsRegistry, context, environmentVariables ? Object.keys(environmentVariables) : undefined, subagentId, role, session.credentialManager?.formatForPrompt(), grpc),
       model,
       session,
       target,
+      grpc,
       authConfig,
       onStepFinish,
       onCacheMetrics,
@@ -84,6 +87,7 @@ class TargetedPentestAgent extends OffensiveSecurityAgent {
       findingsRegistry,
       messages,
       environmentVariables,
+      secretValues,
       enableThinking,
       thinkingEffort,
       openAIReasoningEffort,
@@ -196,6 +200,13 @@ var SECTION_AUTHENTICATION = `Authentication:
   1. Prove a broken-authorization / privileged-role / IDOR boundary with a READ, or with a benign, reversible write to a low-impact field (e.g. your own display name). That a privileged call is accepted against an object you should not be able to reach is usually the finding — prefer this over disabling security controls, changing quotas/limits, or mutating another user.
   2. If a reversible state-changing write is the only convincing proof, capture the current value, make the change, capture evidence (response/screenshot), then immediately restore the original value — and prefer your own account or a throwaway account you registered for this test over a shared or provided account. Do NOT rely on end-of-run cleanup alone; a crash mid-run can strip it before it runs.
   3. NEVER complete an irreversible or security-weakening mutation against a shared or provided account, against any other user's account reached via broken authorization / IDOR, or against an org- or tenant-wide security setting (e.g. disabling MFA for an entire team): overwriting/resetting, disabling, or otherwise weakening an MFA/TOTP device or any second factor / security control, consuming a single-use reset token, changing the account email, rotating the password, or deleting the account. This hard ban is not limited to the identity you authenticated as — an IDOR or org-level authz flaw does not make it acceptable to actually disable or weaken another user's or the whole team's protections; prove the boundary is crossed without completing the weakening step. Irreversible changes cannot be undone (you never hold the original TOTP secret to restore), and locking an account out, disabling protections for other users, or weakening an org-wide control invalidates or endangers the credentials for every other agent — even a "reversible" toggle like disabling MFA leaves the account or team exposed if a crash strips the restore step. Demonstrate reachability/authorization instead, or perform the destructive step only against a throwaway account you registered for this test.`;
+var SECTION_DESTRUCTIVE_ALLOWED = `Destructive Testing (AUTHORIZED):
+- The client has authorized destructive testing for this engagement. You MAY perform DB deletes/drops/truncates, API write-deletes (HTTP DELETE), and other destructive operations when they are necessary to prove impact.
+- Still prefer the least-invasive proof that convincingly demonstrates the flaw, and follow the blast-radius rungs in the Authentication section — authorization to be destructive is not license to be reckless with shared or provided accounts.`;
+var SECTION_DESTRUCTIVE_BLOCKED = `Destructive Testing (OUT OF SCOPE):
+- The client has NOT authorized destructive testing for this engagement. Destructive operations are BLOCKED at the tool boundary and will return an error, so do not attempt them — they only waste turns.
+- Blocked operations include: destructive SQL (DROP / TRUNCATE / DELETE FROM / ALTER … DROP), destructive NoSQL/cache operations (collection/database drops, deleteMany, FLUSHALL/FLUSHDB), API write-deletes (HTTP DELETE, or writes overriding to DELETE / targeting a delete/destroy/purge route), and catastrophic host operations (rm -rf of a root/home, mkfs, dd to a device, fork bombs, power-state changes).
+- Prove destructive-class flaws WITHOUT completing the destructive step: demonstrate that the authorization boundary is crossed (e.g. the DELETE endpoint accepts your request / returns a pre-flight that would delete) with a read or a benign, reversible action, and describe the impact rather than actually deleting or dropping data.`;
 var SECTION_CREDENTIAL_DISCOVERY = `Credential & Secret Discovery:
 - When you find exposed configuration in client-side code (JS bundles, HTML source, config files), distinguish between:
   - SENSITIVE SECRETS (API keys granting backend access, database credentials, JWT signing keys, private keys, service account tokens) — document as a HIGH/CRITICAL finding
@@ -433,16 +444,25 @@ ${SECTION_SECURITY_HEADERS_CORS}
 ${SECTION_FINDING_QUALITY}
 
 ${SECTION_STATE_CHECKPOINTING}`;
+function destructiveSection(allow) {
+  return allow ? SECTION_DESTRUCTIVE_ALLOWED : SECTION_DESTRUCTIVE_BLOCKED;
+}
 function buildPentestSystemPrompt(session, role = "orchestrator") {
+  const destructive = destructiveSection(session.config?.allowDestructiveActions);
   if (role === "orchestrator") {
-    return PENTEST_SYSTEM_PROMPT_ORCHESTRATOR;
+    return `${PENTEST_SYSTEM_PROMPT_ORCHESTRATOR}
+
+${destructive}`;
   }
   const taskDriven = session.config?.taskDriven ?? false;
   const exfilMode = session.config?.exfilMode ?? false;
   const base = taskDriven ? exfilMode ? PENTEST_SYSTEM_PROMPT_TASK_DRIVEN_EXFIL : PENTEST_SYSTEM_PROMPT_TASK_DRIVEN : exfilMode ? PENTEST_SYSTEM_PROMPT_EXFIL : PENTEST_SYSTEM_PROMPT_BASE;
-  return session.config?.promptInjectionLibrarySource ? `${base}
+  const withDestructive = `${base}
 
-${SECTION_PROMPT_INJECTION}` : base;
+${destructive}`;
+  return session.config?.promptInjectionLibrarySource ? `${withDestructive}
+
+${SECTION_PROMPT_INJECTION}` : withDestructive;
 }
 var SECTION_ORCHESTRATOR_DELEGATION = `Sub-Agent Delegation Rules:
 - You DO NOT call document_vulnerability directly. Findings are documented by the workers you spawn.
@@ -489,7 +509,7 @@ ${SECTION_MATERIALITY_GUIDANCE}
 ${SECTION_BROWSER_INTERACTION}
 
 ${SECTION_STATE_CHECKPOINTING}`;
-function buildPentestPrompt(target, objectives, session, findingsRegistry, context, envVarNames, subagentId, role = "orchestrator", credentialContext) {
+function buildPentestPrompt(target, objectives, session, findingsRegistry, context, envVarNames, subagentId, role = "orchestrator", credentialContext, grpc) {
   const sessionRootPath = session.rootPath;
   const exfilMode = session.config?.exfilMode ?? false;
   const taskDriven = role === "orchestrator" ? false : session.config?.taskDriven ?? false;
@@ -656,6 +676,37 @@ The following is context specific to the application under test. If it contains
 
 ${context}
 ` : "";
+  let grpcSection = "";
+  if (grpc) {
+    const lines = [
+      `
+## gRPC Target`,
+      `This target is a gRPC method, not a plain HTTP endpoint. It rides HTTP/2 with binary protobuf and uses the path \`/package.Service/Method\`.`,
+      `- **Transport:** ${grpc.transport}`,
+      `- **Service:** ${grpc.serviceFqn}`,
+      `- **Method:** ${grpc.method}`
+    ];
+    if (grpc.host)
+      lines.push(`- **Authority (host):** \`${grpc.host}\` — the method's gRPC authority; it differs from the app domain, so use this host directly as \`<authority>\` in the commands below.`);
+    if (grpc.streamingType)
+      lines.push(`- **Streaming:** ${grpc.streamingType}`);
+    if (grpc.schemaSource)
+      lines.push(`- **Schema source:** ${grpc.schemaSource}`);
+    if (grpc.reflectionAvailable !== undefined) {
+      lines.push(`- **Reflection available:** ${grpc.reflectionAvailable}`);
+    }
+    if (grpc.frontingGatewayOperation) {
+      lines.push(`- **Fronting gateway:** ${grpc.frontingGatewayOperation.gatewayType} operation \`${grpc.frontingGatewayOperation.operation}\` — if the direct gRPC authority is unreachable, test through this gateway operation instead.`);
+    } else {
+      lines.push(`- **Fronting gateway:** none — this method is reachable directly but is NOT exposed through the REST/GraphQL gateway. Treat it as a PRIME missing-authorization target: gateway-fronted methods usually get their authz enforced at the gateway, so a shadow method that bypasses the gateway may bypass that authz entirely.`);
+    }
+    lines.push(`
+### gRPC Test Battery (OWASP gRPC Security Cheat Sheet)`, `Use \`grpcurl\`, \`buf\`, and \`protoc\` via \`execute_command\`. Work through this battery for the method above:`, `1. **Schema recovery.** Try reflection first: \`grpcurl -plaintext <authority> list\` / \`describe <service>\`. If reflection is disabled, recover the schema from a \`.proto\` file or protoset (e.g. via \`buf\` or \`protoc\`) before giving up on schema-dependent tests.`, `2. **Transport/content-type fallback.** Native gRPC, grpc-web, and Connect use different content-types over the same or adjacent paths. If one transport looks dead, retry as grpc-web (\`application/grpc-web\`) and Connect (\`application/connect+...\` or JSON) before declaring the endpoint unreachable.`, `3. **Status-code oracle.** Treat gRPC status codes as signal, not noise: 16 UNAUTHENTICATED, 7 PERMISSION_DENIED, 3 INVALID_ARGUMENT, 12 UNIMPLEMENTED. A flip from UNAUTHENTICATED to a data response after adding/removing metadata is a finding.`, `4. **Missing auth per method.** Call the method with valid credentials/metadata, then again with none and with garbage metadata. A successful response without auth is a critical finding.`, `5. **BOLA / IDOR.** Manipulate ID fields inside the request message (account/user/resource IDs) to access another principal's data.`, `6. **Metadata trust.** Test whether the service trusts client-supplied metadata it shouldn't (e.g. \`x-user-id\`, forwarded auth headers) instead of deriving identity server-side.`, `7. **Non-canonical \`:path\` authz bypass.** If authz is enforced by a proxy matching on \`:path\`, try case variants, trailing slashes, or alternate casing of the service/method path to see if the gRPC path parsing bypasses it.`, `8. **Protobuf/message fuzzing.** Send malformed, truncated, and type-mismatched field values; unknown field numbers; and deeply nested/repeated fields to probe deserialization handling.`, `9. **Streaming IDOR.** For client/server/bidi streaming methods, probe whether a stream opened for one principal's resource can be redirected mid-stream to another's.`, `10. **Decompression / size DoS.** Send oversized or highly compressible payloads to check for missing message-size limits or decompression bombs.`, `11. **Transport security.** Confirm whether the channel is plaintext or TLS/mTLS-enforced; plaintext gRPC in production is a finding on its own.`, `
+If the method is unreachable from your network position (common for internal/in-cluster services), a finding is still valid via whitebox reasoning — schema plus routing/config evidence — even without an executed POC.`);
+    grpcSection = `${lines.join(`
+`)}
+`;
+  }
   const envVarSection = envVarNames && envVarNames.length > 0 ? `
 ## Environment Variables
 The following environment variables are pre-loaded in your shell and available in every \`execute_command\` call. Use them in scripts or commands (e.g. \`$${envVarNames[0]}\`) — do NOT hardcode their values.
@@ -666,7 +717,7 @@ ${envVarNames.map((n) => `- \`${n}\``).join(`
 
 ## Target
 - **URL:** ${target}
-${authSection}${credentialSection}
+${grpcSection}${authSection}${credentialSection}
 ${knownFindingsSection}
 ${knowledgeBaseSection}
 ${planSection}${contextSection}${envVarSection}

package/build/{cli-3r0m9ee1.js → cli-4z24gndv.js}

@@ -4,7 +4,7 @@ import {
   init_auth,
   init_constants,
   signGatewayRequest
-} from "./cli-bhj09mhe.js";
+} from "./cli-8178m9nm.js";
 import {
   AISDKError,
   APICallError,
@@ -87,11 +87,11 @@ import {
 import {
   config,
   init_config
-} from "./cli-7dez82r2.js";
+} from "./cli-mp5rfvv0.js";
 import {
   getCurrentVersion,
   init_installation
-} from "./cli-f4659etd.js";
+} from "./cli-yh8j4ryf.js";
 import {
   __callDispose,
   __commonJS,
@@ -8583,6 +8583,24 @@ var init_mantle2 = __esm(() => {
 var OPENAI_MODELS;
 var init_openai = __esm(() => {
   OPENAI_MODELS = [
+    {
+      id: "gpt-5.6-sol",
+      name: "GPT-5.6-sol",
+      provider: "openai",
+      contextLength: 1050000
+    },
+    {
+      id: "gpt-5.6-terra",
+      name: "GPT-5.6-terra",
+      provider: "openai",
+      contextLength: 1050000
+    },
+    {
+      id: "gpt-5.6-luna",
+      name: "GPT-5.6-luna",
+      provider: "openai",
+      contextLength: 1050000
+    },
     {
       id: "gpt-5.5",
       name: "GPT-5.5",
@@ -9034,6 +9052,12 @@ var init_openrouter = __esm(() => {
       provider: "openrouter",
       contextLength: 262144
     },
+    {
+      id: "moonshotai/kimi-k3",
+      name: "Kimi K3",
+      provider: "openrouter",
+      contextLength: 1e6
+    },
     {
       id: "moonshot/kimi-k2-turbo",
       name: "Kimi K2 Turbo",
@@ -45853,6 +45877,9 @@ function modelSupportsOpenAIReasoning(modelId) {
 function getOpenAIReasoningEfforts(modelId) {
   if (!modelSupportsOpenAIReasoning(modelId))
     return [];
+  if (/^gpt-5\.6(?:\b|-)/.test(modelId)) {
+    return ["low", "medium", "high", "xhigh", "max", "ultra"];
+  }
   if (/^gpt-5\.5(?:\b|-)/.test(modelId)) {
     return ["none", "low", "medium", "high", "xhigh"];
   }
@@ -45862,8 +45889,9 @@ function normalizeOpenAIReasoningEffort(modelId, effort) {
   const efforts = getOpenAIReasoningEfforts(modelId);
   if (efforts.length === 0)
     return;
-  if (effort && efforts.includes(effort))
-    return effort;
+  if (effort && efforts.includes(effort)) {
+    return effort === "ultra" ? "max" : effort;
+  }
   return DEFAULT_OPENAI_REASONING_EFFORT;
 }
 function buildReasoningProviderOptions(model, opts) {
@@ -46243,7 +46271,10 @@ var init_ai = __esm(() => {
     "gpt-5.4-pro",
     "gpt-5.4-pro-2026-03-05",
     "gpt-5.5",
-    "gpt-5.5-2026-04-23"
+    "gpt-5.5-2026-04-23",
+    "gpt-5.6-sol",
+    "gpt-5.6-terra",
+    "gpt-5.6-luna"
   ]);
   stepContextStore = new AsyncLocalStorage;
   SEQUENTIAL_TOOL_CALL_INSTRUCTION = "CRITICAL TOOL-CALLING RULE: Emit EXACTLY ONE tool call per response. " + "Never emit more than one tool call in a single turn. After each tool call, " + "wait for its result before making the next one. Emitting multiple tool " + "calls in one turn corrupts their arguments.";
@@ -47096,7 +47127,7 @@ async function create2(input) {
   if (normalizedConfig?.headers !== undefined) {
     snapshotHeaders = { ...normalizedConfig.headers };
   } else {
-    const { config: appConfig } = await import("./index-t6981tw0.js");
+    const { config: appConfig } = await import("./index-1gnn6wsw.js");
     const cfg = await appConfig.get();
     snapshotHeaders = cfg.defaultHeaders ? { ...cfg.defaultHeaders } : { ...DEFAULT_HEADER_RECORD };
   }
@@ -47272,7 +47303,8 @@ async function updateOperatorSettings(sessionId, settings) {
       session.config.operatorSettings = {
         initialMode: "manual",
         requireApproval: true,
-        enableSuggestions: true
+        enableSuggestions: true,
+        strikeMode: false
       };
     }
     if (settings.initialMode !== undefined) {
@@ -47284,6 +47316,9 @@ async function updateOperatorSettings(sessionId, settings) {
     if (settings.enableSuggestions !== undefined) {
       session.config.operatorSettings.enableSuggestions = settings.enableSuggestions;
     }
+    if (settings.strikeMode !== undefined) {
+      session.config.operatorSettings.strikeMode = settings.strikeMode;
+    }
   });
 }
 async function updateSessionHeaders(sessionId, headers) {
@@ -47356,7 +47391,8 @@ var init_session = __esm(() => {
   OperatorSettingsObject = zod_default.object({
     initialMode: zod_default.enum(["plan", "manual", "auto"]).default("manual"),
     requireApproval: zod_default.boolean().default(true),
-    enableSuggestions: zod_default.boolean().default(true)
+    enableSuggestions: zod_default.boolean().default(true),
+    strikeMode: zod_default.boolean().optional()
   });
   EmailInboxConfigObject = zod_default.discriminatedUnion("provider", [
     zod_default.object({
@@ -47391,6 +47427,14 @@ var init_session = __esm(() => {
       username: zod_default.string(),
       password: zod_default.string(),
       tls: zod_default.boolean()
+    }),
+    zod_default.object({
+      provider: zod_default.literal("http"),
+      id: zod_default.string(),
+      name: zod_default.string(),
+      emailAddress: zod_default.string(),
+      endpoint: zod_default.string(),
+      token: zod_default.string()
     })
   ]);
   EmailIntegrationConfigObject = zod_default.object({
@@ -47414,6 +47458,7 @@ var init_session = __esm(() => {
     authCredentials: zod_default.union([AuthCredentialsObject, zod_default.array(AuthCredentialsObject)]).optional(),
     authenticationInstructions: zod_default.string().optional(),
     requestsPerSecond: zod_default.number().optional(),
+    allowDestructiveActions: zod_default.boolean().optional(),
     operatorSettings: OperatorSettingsObject.optional(),
     toolsetState: ToolsetStateSchema.optional(),
     enumerateSubdomains: zod_default.boolean().optional(),