@pensar/apex 2.3.0-canary.cb194acd → 2.3.0-canary.e295aafd

package/build/agent-1g0ybra6.js

@@ -0,0 +1,19 @@
+import {
+  CodeAgent
+} from "./cli-2zkpnnf3.js";
+import"./cli-9fsre5pt.js";
+import"./cli-m2dnpvbh.js";
+import"./cli-1n5jzdea.js";
+import"./cli-35qpdk8p.js";
+import"./cli-c8131c4q.js";
+import"./cli-rnk06jjs.js";
+import"./cli-5bydvb69.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-nzhgh691.js";
+import"./cli-ejwjmfrb.js";
+import"./cli-wkjn7rd4.js";
+import"./cli-8rxa073f.js";
+export {
+  CodeAgent
+};

package/build/{agent-x3q4w80s.js → agent-dx6g51wb.js}

@@ -4,19 +4,19 @@ import {
   buildPentestActiveTools,
   buildPentestPrompt,
   buildPentestSystemPrompt
-} from "./cli-r84aknzp.js";
+} from "./cli-y36yak7f.js";
 import"./cli-9fsre5pt.js";
-import"./cli-dgrnrppm.js";
-import"./cli-ypptqcdq.js";
-import"./cli-27hnycme.js";
+import"./cli-m2dnpvbh.js";
+import"./cli-1n5jzdea.js";
+import"./cli-35qpdk8p.js";
 import"./cli-c8131c4q.js";
-import"./cli-zwk2a002.js";
-import"./cli-q1j01gaw.js";
+import"./cli-rnk06jjs.js";
+import"./cli-5bydvb69.js";
 import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-dee8kmgx.js";
-import"./cli-vsjg927f.js";
-import"./cli-g4b3jdn4.js";
+import"./cli-nzhgh691.js";
+import"./cli-ejwjmfrb.js";
+import"./cli-wkjn7rd4.js";
 import"./cli-8rxa073f.js";
 export {
   buildPentestSystemPrompt,

package/build/{agent-f3azwp63.js → agent-g1at57gq.js}

@@ -1,23 +1,23 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-ypptqcdq.js";
+} from "./cli-1n5jzdea.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-27hnycme.js";
+} from "./cli-35qpdk8p.js";
 import"./cli-c8131c4q.js";
 import {
   init_dist,
   stepCountIs
-} from "./cli-zwk2a002.js";
-import"./cli-q1j01gaw.js";
+} from "./cli-rnk06jjs.js";
+import"./cli-5bydvb69.js";
 import {
   exports_external,
   init_zod
 } from "./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-dee8kmgx.js";
-import"./cli-vsjg927f.js";
-import"./cli-g4b3jdn4.js";
+import"./cli-nzhgh691.js";
+import"./cli-ejwjmfrb.js";
+import"./cli-wkjn7rd4.js";
 import"./cli-8rxa073f.js";
 
 // src/core/agents/specialized/findingJudge/agent.ts

package/build/{apps-13p1kmc9.js → apps-833hbd4v.js}

@@ -12,27 +12,27 @@ import {
   searchEndpoints,
   updateApp,
   updateEndpoint
-} from "./cli-mzd48t20.js";
-import"./cli-kt4xr54m.js";
-import"./cli-v0ngwfpv.js";
-import"./cli-x2h8bs1d.js";
-import"./cli-r84aknzp.js";
-import"./cli-7tknhrhy.js";
-import"./cli-5c5pae6q.js";
-import"./cli-y5b23d11.js";
+} from "./cli-xhgknfp8.js";
+import"./cli-cfztppkf.js";
+import"./cli-fvtf9668.js";
+import"./cli-drwkha83.js";
+import"./cli-y36yak7f.js";
+import"./cli-hss2gat8.js";
+import"./cli-2zkpnnf3.js";
+import"./cli-tx7rxdhp.js";
 import"./cli-9fsre5pt.js";
-import"./cli-dgrnrppm.js";
-import"./cli-ypptqcdq.js";
-import"./cli-27hnycme.js";
+import"./cli-m2dnpvbh.js";
+import"./cli-1n5jzdea.js";
+import"./cli-35qpdk8p.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-zwk2a002.js";
-import"./cli-q1j01gaw.js";
+import"./cli-rnk06jjs.js";
+import"./cli-5bydvb69.js";
 import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-dee8kmgx.js";
-import"./cli-vsjg927f.js";
-import"./cli-g4b3jdn4.js";
+import"./cli-nzhgh691.js";
+import"./cli-ejwjmfrb.js";
+import"./cli-wkjn7rd4.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/apps.ts

package/build/{auth-7mhvhnxd.js → auth-ezabkss8.js}

@@ -1,19 +1,19 @@
 #!/usr/bin/env bun
-import"./cli-mzd48t20.js";
-import"./cli-kt4xr54m.js";
-import"./cli-v0ngwfpv.js";
-import"./cli-x2h8bs1d.js";
-import"./cli-r84aknzp.js";
-import"./cli-7tknhrhy.js";
-import"./cli-5c5pae6q.js";
-import"./cli-y5b23d11.js";
+import"./cli-xhgknfp8.js";
+import"./cli-cfztppkf.js";
+import"./cli-fvtf9668.js";
+import"./cli-drwkha83.js";
+import"./cli-y36yak7f.js";
+import"./cli-hss2gat8.js";
+import"./cli-2zkpnnf3.js";
+import"./cli-tx7rxdhp.js";
 import"./cli-9fsre5pt.js";
-import"./cli-dgrnrppm.js";
-import"./cli-ypptqcdq.js";
-import"./cli-27hnycme.js";
+import"./cli-m2dnpvbh.js";
+import"./cli-1n5jzdea.js";
+import"./cli-35qpdk8p.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-zwk2a002.js";
+import"./cli-rnk06jjs.js";
 import {
   createWorkspaceSelection,
   disconnect,
@@ -28,15 +28,15 @@ import {
   pollWorkspaceSelection,
   selectWorkspace,
   startDeviceFlow
-} from "./cli-q1j01gaw.js";
+} from "./cli-5bydvb69.js";
 import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
 import {
   config,
   init_config
-} from "./cli-dee8kmgx.js";
-import"./cli-vsjg927f.js";
-import"./cli-g4b3jdn4.js";
+} from "./cli-nzhgh691.js";
+import"./cli-ejwjmfrb.js";
+import"./cli-wkjn7rd4.js";
 import {
   __require
 } from "./cli-8rxa073f.js";

package/build/authentication-h03dr1fh.js

@@ -0,0 +1,19 @@
+import {
+  runAuthenticationAgent
+} from "./cli-hss2gat8.js";
+import"./cli-9fsre5pt.js";
+import"./cli-m2dnpvbh.js";
+import"./cli-1n5jzdea.js";
+import"./cli-35qpdk8p.js";
+import"./cli-c8131c4q.js";
+import"./cli-rnk06jjs.js";
+import"./cli-5bydvb69.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-nzhgh691.js";
+import"./cli-ejwjmfrb.js";
+import"./cli-wkjn7rd4.js";
+import"./cli-8rxa073f.js";
+export {
+  runAuthenticationAgent
+};

package/build/blackboxAgent-yq8x25fx.js

@@ -0,0 +1,19 @@
+import {
+  BlackboxAttackSurfaceAgent
+} from "./cli-fvtf9668.js";
+import"./cli-9fsre5pt.js";
+import"./cli-m2dnpvbh.js";
+import"./cli-1n5jzdea.js";
+import"./cli-35qpdk8p.js";
+import"./cli-c8131c4q.js";
+import"./cli-rnk06jjs.js";
+import"./cli-5bydvb69.js";
+import"./cli-3k1x5rn3.js";
+import"./cli-gpnb45ck.js";
+import"./cli-nzhgh691.js";
+import"./cli-ejwjmfrb.js";
+import"./cli-wkjn7rd4.js";
+import"./cli-8rxa073f.js";
+export {
+  BlackboxAttackSurfaceAgent
+};

package/build/{blackboxPentest-6sqpyc1y.js → blackboxPentest-b1kp2gnb.js}

@@ -1,24 +1,24 @@
 import {
   runPentestWorkflow
-} from "./cli-kt4xr54m.js";
-import"./cli-v0ngwfpv.js";
-import"./cli-x2h8bs1d.js";
-import"./cli-r84aknzp.js";
-import"./cli-5c5pae6q.js";
-import"./cli-y5b23d11.js";
+} from "./cli-cfztppkf.js";
+import"./cli-fvtf9668.js";
+import"./cli-drwkha83.js";
+import"./cli-y36yak7f.js";
+import"./cli-2zkpnnf3.js";
+import"./cli-tx7rxdhp.js";
 import"./cli-9fsre5pt.js";
-import"./cli-dgrnrppm.js";
-import"./cli-ypptqcdq.js";
-import"./cli-27hnycme.js";
+import"./cli-m2dnpvbh.js";
+import"./cli-1n5jzdea.js";
+import"./cli-35qpdk8p.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-zwk2a002.js";
-import"./cli-q1j01gaw.js";
+import"./cli-rnk06jjs.js";
+import"./cli-5bydvb69.js";
 import"./cli-3k1x5rn3.js";
 import"./cli-gpnb45ck.js";
-import"./cli-dee8kmgx.js";
-import"./cli-vsjg927f.js";
-import"./cli-g4b3jdn4.js";
+import"./cli-nzhgh691.js";
+import"./cli-ejwjmfrb.js";
+import"./cli-wkjn7rd4.js";
 import"./cli-8rxa073f.js";
 
 // src/core/api/blackboxPentest.ts

package/build/{cli-ypptqcdq.js → cli-1n5jzdea.js}

@@ -1,6 +1,6 @@
 import {
   detectOSAndEnhancePrompt
-} from "./cli-27hnycme.js";
+} from "./cli-35qpdk8p.js";
 import {
   parseTargetUrl
 } from "./cli-c8131c4q.js";
@@ -32,14 +32,14 @@ import {
   streamResponse,
   withSubagentSessionBaggage,
   write
-} from "./cli-zwk2a002.js";
+} from "./cli-rnk06jjs.js";
 import {
   ensureValidToken,
   getPensarApiUrl,
   init_auth,
   init_constants,
   signGatewayRequest
-} from "./cli-q1j01gaw.js";
+} from "./cli-5bydvb69.js";
 import {
   _enum,
   _null,
@@ -70,7 +70,7 @@ import {
 import {
   config,
   init_config
-} from "./cli-dee8kmgx.js";
+} from "./cli-nzhgh691.js";
 import {
   __commonJS,
   __require,
@@ -102721,17 +102721,54 @@ var MEMORY_FIREFOX_PREFS = {
   "browser.cache.memory.enable": false,
   "browser.sessionhistory.max_total_viewers": 0
 };
-async function resolveCamoufoxLaunchOptions(headless) {
+var ENDPOINT_DISPLAY_BASE = 10;
+var COMPUTER_USE_VIEWPORT_SIZE = "1920,1080";
+var ENDPOINT_VIEWPORT_SIZE = "1280,720";
+function parseViewportSize(viewportSize) {
+  const match = /^(\d+),(\d+)$/.exec(viewportSize.trim());
+  if (!match)
+    return;
+  const width = Number(match[1]);
+  const height = Number(match[2]);
+  if (!Number.isFinite(width) || !Number.isFinite(height) || width <= 0 || height <= 0) {
+    return;
+  }
+  return [width, height];
+}
+function parseDisplayNumber(display) {
+  if (!display)
+    return;
+  const match = /^:(\d+)/.exec(display.trim());
+  if (!match)
+    return;
+  const num = Number(match[1]);
+  return Number.isFinite(num) ? num : undefined;
+}
+function camoufoxWindowOptions(window2) {
+  const [width, height] = window2;
+  return {
+    window: [width, height],
+    screen: {
+      minWidth: width,
+      maxWidth: width,
+      minHeight: height,
+      maxHeight: height
+    }
+  };
+}
+async function resolveCamoufoxLaunchOptions(headless, opts) {
   const { launchOptions: camoufoxLaunchOptions } = await import("camoufox-js");
-  const opts = await camoufoxLaunchOptions({
+  const windowOpts = opts?.window ? camoufoxWindowOptions(opts.window) : {};
+  const resolved = await camoufoxLaunchOptions({
     ...CAMOUFOX_OPTIONS,
-    headless
+    headless,
+    ...windowOpts
   });
-  opts.firefoxUserPrefs = {
-    ...opts.firefoxUserPrefs,
+  resolved.firefoxUserPrefs = {
+    ...resolved.firefoxUserPrefs,
     ...MEMORY_FIREFOX_PREFS
   };
-  return opts;
+  return resolved;
 }
 var ensurePromise = null;
 function ensureCamoufox(log) {
@@ -102922,7 +102959,7 @@ function collectPidsByEnvMarker(key, value) {
 }
 var defaultHeadless = true;
 var defaultUserAgent = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36";
-var HARDCODED_VIEWPORT_FALLBACK = "1920,1080";
+var HARDCODED_VIEWPORT_FALLBACK = COMPUTER_USE_VIEWPORT_SIZE;
 var defaultViewportSize = HARDCODED_VIEWPORT_FALLBACK;
 function setHeadlessMode(headless) {
   defaultHeadless = headless;
@@ -102953,7 +102990,14 @@ class PlaywrightMcpSession {
     this.display = display ?? process.env.DISPLAY ?? undefined;
     this.headless = headless ?? (this.display ? false : defaultHeadless);
     this.userAgent = userAgent === null ? undefined : userAgent ?? defaultUserAgent;
-    this.viewportSize = viewportSize === null ? undefined : viewportSize ?? defaultViewportSize ?? HARDCODED_VIEWPORT_FALLBACK;
+    if (viewportSize === null) {
+      this.viewportSize = undefined;
+    } else if (viewportSize !== undefined) {
+      this.viewportSize = viewportSize;
+    } else {
+      const displayNum = parseDisplayNumber(this.display);
+      this.viewportSize = displayNum !== undefined && displayNum >= ENDPOINT_DISPLAY_BASE ? ENDPOINT_VIEWPORT_SIZE : defaultViewportSize ?? HARDCODED_VIEWPORT_FALLBACK;
+    }
     const headerSource = extraHttpHeaders === null ? undefined : extraHttpHeaders;
     this.extraHttpHeaders = headerSource && Object.keys(headerSource).length > 0 ? { ...headerSource } : undefined;
   }
@@ -103036,7 +103080,8 @@ class PlaywrightMcpSession {
         const args = [cliPath, "--isolated"];
         await ensureCamoufox();
         if (!this.cachedCamouOptions) {
-          this.cachedCamouOptions = await resolveCamoufoxLaunchOptions(this.headless);
+          const window2 = this.viewportSize ? parseViewportSize(this.viewportSize) : undefined;
+          this.cachedCamouOptions = await resolveCamoufoxLaunchOptions(this.headless, window2 ? { window: window2 } : undefined);
         }
         const camou = this.cachedCamouOptions;
         const os = await import("node:os");
@@ -104973,13 +105018,35 @@ const fs = require('fs');
   // detectable headful. Falls back to plain headless, which is still fully
   // fingerprint-spoofed (just a weaker stealth posture, never vanilla Chromium).
   const __headless = process.env.DISPLAY ? false : true;
+  // Match Camoufox window to the bound Xvfb tier (Console desktopSession /
+  // Xvfb shim: :0–:9 → 1920x1080, :10+ → 1280x720). Constants are inlined
+  // from ./camoufox so host + sandbox stay lockstep.
+  const __ENDPOINT_DISPLAY_BASE = ${ENDPOINT_DISPLAY_BASE};
+  const __endpointWindow = ${JSON.stringify(parseViewportSize(ENDPOINT_VIEWPORT_SIZE))};
+  const __computerUseWindow = ${JSON.stringify(parseViewportSize(COMPUTER_USE_VIEWPORT_SIZE))};
+  const __displayMatch = /^:(\\d+)/.exec(process.env.DISPLAY || '');
+  const __displayNum = __displayMatch ? Number(__displayMatch[1]) : undefined;
+  const __window =
+    __displayNum !== undefined && __displayNum >= __ENDPOINT_DISPLAY_BASE
+      ? __endpointWindow
+      : __computerUseWindow;
   // Resolve Camoufox options once per sandbox session and cache to disk so
   // every tool call presents the same fingerprint on the shared profile dir.
   let __camou;
   try {
     __camou = JSON.parse(fs.readFileSync('${SANDBOX_CAMOU_CACHE}', 'utf-8'));
   } catch {
-    __camou = await launchOptions({ ...${JSON.stringify(CAMOUFOX_OPTIONS)}, headless: __headless });
+    __camou = await launchOptions({
+      ...${JSON.stringify(CAMOUFOX_OPTIONS)},
+      headless: __headless,
+      window: __window,
+      screen: {
+        minWidth: __window[0],
+        maxWidth: __window[0],
+        minHeight: __window[1],
+        maxHeight: __window[1],
+      },
+    });
     fs.writeFileSync('${SANDBOX_CAMOU_CACHE}', JSON.stringify(__camou));
   }
 
@@ -105761,14 +105828,7 @@ function createBrowserToolset(ctx) {
   }
   if (cm) {
     shape.credentialId = exports_external.string().optional().describe("ID of a stored credential. When provided with credentialField, the secret is resolved automatically.");
-    shape.credentialField = exports_external.enum([
-      "password",
-      "username",
-      "apiKey",
-      "bearerToken",
-      "cookies",
-      "sessionToken"
-    ]).optional().describe("Which field to extract from the credential (e.g. 'password'). Required when credentialId is set.");
+    shape.credentialField = exports_external.string().optional().describe("Which field to extract from the credential. One of: password, username, apiKey, " + "bearerToken, cookies, sessionToken — or the name of one of the credential's " + "extra secret fields. Required when credentialId is set.");
   }
   let description = originalFill.description ?? "";
   if (injectionEnabled) {
@@ -105831,8 +105891,10 @@ Credential mode: Instead of passing a raw secret as "value", you can ` + `pass "
         }
         if (credentialField === "bearerToken" || credentialField === "cookies" || credentialField === "sessionToken") {
           value = stored.tokens?.[credentialField] ?? "";
-        } else {
+        } else if (credentialField === "password" || credentialField === "username" || credentialField === "apiKey") {
           value = stored[credentialField] ?? "";
+        } else {
+          value = stored.additionalFields?.[credentialField] ?? "";
         }
         if (!value) {
           return {
@@ -106531,6 +106593,7 @@ function mergeAuthCredentials(sessionCreds, explicit) {
     password: sessionCreds?.password,
     apiKey: sessionCreds?.apiKey,
     loginUrl: sessionCreds?.loginUrl,
+    additionalFields: sessionCreds?.additionalFields,
     tokens: sessionCreds?.tokens ? {
       bearerToken: sessionCreds.tokens.bearerToken,
       cookies: sessionCreds.tokens.cookies,
@@ -106541,6 +106604,9 @@ function mergeAuthCredentials(sessionCreds, explicit) {
     ...explicit.password && { password: explicit.password },
     ...explicit.apiKey && { apiKey: explicit.apiKey },
     ...explicit.loginUrl && { loginUrl: explicit.loginUrl },
+    ...explicit.additionalFields && {
+      additionalFields: explicit.additionalFields
+    },
     ...explicit.tokens && {
       tokens: {
         bearerToken: explicit.tokens.bearerToken,
@@ -106603,6 +106669,7 @@ IMPORTANT: Pass protectedEndpoints in authHints when you've discovered 401/403 e
       authHints,
       reason
     }) => {
+      let additionalFields;
       const subagentId = newSessionId();
       const subagentName = "Authentication Agent";
       try {
@@ -106626,6 +106693,7 @@ IMPORTANT: Pass protectedEndpoints in authHints when you've discovered 401/403 e
           password = stored.password ?? password;
           apiKey = stored.apiKey ?? apiKey;
           loginUrl = stored.loginUrl ?? loginUrl;
+          additionalFields = stored.additionalFields;
           if (stored.tokens && !tokens) {
             tokens = { ...stored.tokens };
           }
@@ -106669,7 +106737,8 @@ IMPORTANT: Pass protectedEndpoints in authHints when you've discovered 401/403 e
           password,
           apiKey,
           loginUrl,
-          tokens
+          tokens,
+          additionalFields
         });
         if (!ctx.session.credentialManager) {
           ctx.session.credentialManager = new CredentialManager;
@@ -106677,7 +106746,7 @@ IMPORTANT: Pass protectedEndpoints in authHints when you've discovered 401/403 e
         if (credentials) {
           ctx.session.credentialManager.addFromAuthCredentials(credentials);
         }
-        const { runAuthenticationAgent } = await import("./authentication-ptj3a6rh.js");
+        const { runAuthenticationAgent } = await import("./authentication-h03dr1fh.js");
         const localBus = new AgentEventBus;
         AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
         const result = await runAuthenticationAgent({
@@ -106690,6 +106759,7 @@ IMPORTANT: Pass protectedEndpoints in authHints when you've discovered 401/403 e
           eventBus: localBus,
           subagentId,
           subagentName,
+          environmentVariables: ctx.environmentVariables,
           secretValues: ctx.secretValues
         });
         ctx.eventBus?.emit("subagent-complete", {
@@ -107468,7 +107538,7 @@ async function generateThreatModelForEndpoint(ctx, input) {
   return threatModelLimiter(async () => {
     if (ctx.abortSignal?.aborted)
       return null;
-    const { CodeAgent } = await import("./agent-ngypgryz.js");
+    const { CodeAgent } = await import("./agent-1g0ybra6.js");
     const subagentId = newSessionId();
     const subagentName = `Threat Model: ${input.routePath}`;
     ctx.eventBus?.emit("subagent-spawn", {
@@ -109391,7 +109461,7 @@ init_lazyLogger();
 var log6 = scopedLogger(() => createLogger("FindingJudge"));
 async function judgeFinding(input, ctx) {
   try {
-    const { FindingJudgeAgent } = await import("./agent-f3azwp63.js");
+    const { FindingJudgeAgent } = await import("./agent-g1at57gq.js");
     const agent = new FindingJudgeAgent({
       finding: input,
       model: ctx.model,
@@ -116017,7 +116087,7 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
       });
       if (cwd) {
         try {
-          const { WhiteboxAttackSurfaceAgent } = await import("./index-1ptjmcbv.js");
+          const { WhiteboxAttackSurfaceAgent } = await import("./index-e575ccsa.js");
           const localBus = new AgentEventBus;
           AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
           const agent = new WhiteboxAttackSurfaceAgent({
@@ -116072,7 +116142,7 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
         }
       }
       try {
-        const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-6v4tbj43.js");
+        const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-yq8x25fx.js");
         const localBus = new AgentEventBus;
         AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
         const agent = new BlackboxAttackSurfaceAgent({
@@ -116150,7 +116220,7 @@ Omit \`cwd\` for blackbox mode (live target probing only).`,
       toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async ({ target, cwd }) => {
-      const { runPentestWorkflow: workflow } = await import("./pentest-jk91q0k1.js");
+      const { runPentestWorkflow: workflow } = await import("./pentest-cczrs326.js");
       if (!ctx.model) {
         return {
           success: false,
@@ -117728,7 +117798,7 @@ Returns an array of results with the text output from each agent.`,
   });
 }
 async function runSingleCodingAgent(ctx, codebasePath, objective, agentIndex, name) {
-  const { CodeAgent } = await import("./agent-ngypgryz.js");
+  const { CodeAgent } = await import("./agent-1g0ybra6.js");
   const childSessionId = newSessionId();
   const subagentId = childSessionId;
   ctx.eventBus?.emit("subagent-spawn", {
@@ -118245,7 +118315,7 @@ Returns the worker's summary, objective results, and finding count — but NOT t
           message: "spawn_pentest_agent requires a model in the tool context."
         };
       }
-      const { TargetedPentestAgent } = await import("./agent-x3q4w80s.js");
+      const { TargetedPentestAgent } = await import("./agent-dx6g51wb.js");
       const findingsRegistry = ctx.findingsRegistry ?? FindingsRegistry.fromDirectory(ctx.session.findingsPath, {
         model: ctx.model,
         authConfig: ctx.authConfig,
@@ -118379,7 +118449,7 @@ Pass every target you want tested — the swarm handles concurrency automaticall
       toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async ({ targets }) => {
-      const { runPentestSwarm, DEFAULT_CONCURRENCY: DEFAULT_CONCURRENCY2 } = await import("./pentest-jk91q0k1.js");
+      const { runPentestSwarm, DEFAULT_CONCURRENCY: DEFAULT_CONCURRENCY2 } = await import("./pentest-cczrs326.js");
       if (!ctx.model) {
         return {
           success: false,
@@ -124611,6 +124681,7 @@ class OffensiveSecurityAgent {
       attackSurfaceRegistry: input.attackSurfaceRegistry,
       credentialManager,
       secretValues: input.secretValues,
+      environmentVariables: input.environmentVariables,
       persistentShell: this.persistentShell,
       skillsRegistry: input.skillsRegistry,
       promptInjectionLibrary: input.promptInjectionLibrary,

package/build/{cli-5c5pae6q.js → cli-2zkpnnf3.js}

@@ -1,10 +1,10 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-ypptqcdq.js";
+} from "./cli-1n5jzdea.js";
 import {
   init_dist,
   stepCountIs
-} from "./cli-zwk2a002.js";
+} from "./cli-rnk06jjs.js";
 
 // src/core/agents/specialized/codeAgent/agent.ts
 init_dist();

package/build/{cli-27hnycme.js → cli-35qpdk8p.js}

@@ -3,7 +3,7 @@ import {
   init_lazyLogger,
   init_structured,
   scopedLogger
-} from "./cli-zwk2a002.js";
+} from "./cli-rnk06jjs.js";
 
 // src/core/agents/specialized/utils.ts
 import { execSync } from "node:child_process";

package/build/{cli-q1j01gaw.js → cli-5bydvb69.js}

@@ -1,7 +1,7 @@
 import {
   config,
   init_config
-} from "./cli-dee8kmgx.js";
+} from "./cli-nzhgh691.js";
 import {
   __esm
 } from "./cli-8rxa073f.js";