@pensar/apex 2.3.0 → 2.4.0-canary.09a8744f

package/build/{index-gq9h8j5j.js → index-5wh7gq37.js}

@@ -48,7 +48,6 @@ import {
   normalizeHeaders,
   parseJsonEventStream,
   readResponseWithSizeLimit,
-  require_src,
   resolve,
   safeParseJSON,
   safeValidateTypes,
@@ -56,11 +55,14 @@ import {
   validateTypes,
   withUserAgentSuffix,
   zodSchema
-} from "./cli-3k1x5rn3.js";
-import"./cli-gpnb45ck.js";
+} from "./cli-avmhkjtv.js";
+import"./cli-j54qa6tm.js";
+import {
+  require_src
+} from "./cli-knd276ed.js";
 import {
   __toESM
-} from "./cli-8rxa073f.js";
+} from "./cli-bc05qbss.js";
 
 // node_modules/ai/dist/index.mjs
 init_dist3();
@@ -12723,134 +12725,134 @@ var TextStreamChatTransport = class extends HttpChatTransport {
   }
 };
 export {
-  zodSchema,
-  wrapProvider,
-  wrapLanguageModel,
-  wrapImageModel,
-  wrapEmbeddingModel,
-  validateUIMessages,
-  userModelMessageSchema,
-  uiMessageChunkSchema,
-  toolModelMessageSchema,
-  tool,
-  systemModelMessageSchema,
-  streamText,
-  streamObject,
-  stepCountIs,
-  smoothStream,
-  simulateStreamingMiddleware,
-  simulateReadableStream,
-  safeValidateUIMessages,
-  rerank,
-  registerTelemetryIntegration,
-  readUIMessageStream,
-  pruneMessages,
-  pipeUIMessageStreamToResponse,
-  pipeTextStreamToResponse,
-  pipeAgentUIStreamToResponse,
-  parsePartialJson,
-  parseJsonEventStream,
-  modelMessageSchema,
-  lastAssistantMessageIsCompleteWithToolCalls,
-  lastAssistantMessageIsCompleteWithApprovalResponses,
-  jsonSchema,
-  isToolUIPart,
-  isToolOrDynamicToolUIPart,
-  isTextUIPart,
-  isStaticToolUIPart,
-  isReasoningUIPart,
-  isLoopFinished,
-  isFileUIPart,
-  isDeepEqualData,
-  isDataUIPart,
-  hasToolCall,
-  getToolOrDynamicToolName,
-  getToolName,
-  getTextFromDataUrl,
-  getStaticToolName,
-  generateText,
-  generateObject,
-  generateImage,
-  generateId,
-  gateway,
-  extractReasoningMiddleware,
-  extractJsonMiddleware,
-  transcribe as experimental_transcribe,
-  experimental_generateVideo,
-  generateSpeech as experimental_generateSpeech,
-  experimental_generateImage,
-  experimental_customProvider,
-  experimental_createProviderRegistry,
-  embedMany,
-  embed,
-  dynamicTool,
-  defaultSettingsMiddleware,
-  defaultEmbeddingSettingsMiddleware,
-  customProvider,
-  createUIMessageStreamResponse,
-  createUIMessageStream,
-  createTextStreamResponse,
-  createProviderRegistry,
-  createIdGenerator,
-  createGatewayProvider as createGateway,
-  createDownload,
-  createAgentUIStreamResponse,
-  createAgentUIStream,
-  cosineSimilarity,
-  convertToModelMessages,
-  convertFileListToFileUIParts,
-  consumeStream,
-  callCompletionApi,
-  bindTelemetryIntegration,
-  assistantModelMessageSchema,
-  asSchema,
-  addToolInputExamplesMiddleware,
-  UnsupportedModelVersionError,
-  UnsupportedFunctionalityError,
-  UI_MESSAGE_STREAM_HEADERS,
-  UIMessageStreamError,
-  TypeValidationError,
-  ToolLoopAgent,
-  ToolCallRepairError,
-  ToolCallNotFoundForApprovalError,
-  TooManyEmbeddingValuesForCallError,
-  TextStreamChatTransport,
-  SerialJobExecutor,
-  RetryError,
-  output_exports as Output,
-  NoVideoGeneratedError,
-  NoTranscriptGeneratedError,
-  NoSuchToolError,
-  NoSuchProviderError,
-  NoSuchModelError,
-  NoSpeechGeneratedError,
-  NoOutputGeneratedError,
-  NoObjectGeneratedError,
-  NoImageGeneratedError,
-  NoContentGeneratedError,
-  MissingToolResultsError,
-  MessageConversionError,
-  LoadSettingError,
-  LoadAPIKeyError,
-  JsonToSseTransformStream,
-  JSONParseError,
-  InvalidToolInputError,
-  InvalidToolApprovalSignatureError,
-  InvalidToolApprovalError,
-  InvalidStreamPartError,
-  InvalidResponseDataError,
-  InvalidPromptError,
-  InvalidMessageRoleError,
-  InvalidDataContentError,
-  InvalidArgumentError2 as InvalidArgumentError,
-  HttpChatTransport,
-  ToolLoopAgent as Experimental_Agent,
-  EmptyResponseBodyError,
-  DownloadError,
-  DirectChatTransport,
-  DefaultGeneratedFile,
-  DefaultChatTransport,
-  AbstractChat,
+  AISDKError,
   APICallError,
-  AISDKError
+  AbstractChat,
+  DefaultChatTransport,
+  DefaultGeneratedFile,
+  DirectChatTransport,
+  DownloadError,
+  EmptyResponseBodyError,
+  ToolLoopAgent as Experimental_Agent,
+  HttpChatTransport,
+  InvalidArgumentError2 as InvalidArgumentError,
+  InvalidDataContentError,
+  InvalidMessageRoleError,
+  InvalidPromptError,
+  InvalidResponseDataError,
+  InvalidStreamPartError,
+  InvalidToolApprovalError,
+  InvalidToolApprovalSignatureError,
+  InvalidToolInputError,
+  JSONParseError,
+  JsonToSseTransformStream,
+  LoadAPIKeyError,
+  LoadSettingError,
+  MessageConversionError,
+  MissingToolResultsError,
+  NoContentGeneratedError,
+  NoImageGeneratedError,
+  NoObjectGeneratedError,
+  NoOutputGeneratedError,
+  NoSpeechGeneratedError,
+  NoSuchModelError,
+  NoSuchProviderError,
+  NoSuchToolError,
+  NoTranscriptGeneratedError,
+  NoVideoGeneratedError,
+  output_exports as Output,
+  RetryError,
+  SerialJobExecutor,
+  TextStreamChatTransport,
+  TooManyEmbeddingValuesForCallError,
+  ToolCallNotFoundForApprovalError,
+  ToolCallRepairError,
+  ToolLoopAgent,
+  TypeValidationError,
+  UIMessageStreamError,
+  UI_MESSAGE_STREAM_HEADERS,
+  UnsupportedFunctionalityError,
+  UnsupportedModelVersionError,
+  addToolInputExamplesMiddleware,
+  asSchema,
+  assistantModelMessageSchema,
+  bindTelemetryIntegration,
+  callCompletionApi,
+  consumeStream,
+  convertFileListToFileUIParts,
+  convertToModelMessages,
+  cosineSimilarity,
+  createAgentUIStream,
+  createAgentUIStreamResponse,
+  createDownload,
+  createGatewayProvider as createGateway,
+  createIdGenerator,
+  createProviderRegistry,
+  createTextStreamResponse,
+  createUIMessageStream,
+  createUIMessageStreamResponse,
+  customProvider,
+  defaultEmbeddingSettingsMiddleware,
+  defaultSettingsMiddleware,
+  dynamicTool,
+  embed,
+  embedMany,
+  experimental_createProviderRegistry,
+  experimental_customProvider,
+  experimental_generateImage,
+  generateSpeech as experimental_generateSpeech,
+  experimental_generateVideo,
+  transcribe as experimental_transcribe,
+  extractJsonMiddleware,
+  extractReasoningMiddleware,
+  gateway,
+  generateId,
+  generateImage,
+  generateObject,
+  generateText,
+  getStaticToolName,
+  getTextFromDataUrl,
+  getToolName,
+  getToolOrDynamicToolName,
+  hasToolCall,
+  isDataUIPart,
+  isDeepEqualData,
+  isFileUIPart,
+  isLoopFinished,
+  isReasoningUIPart,
+  isStaticToolUIPart,
+  isTextUIPart,
+  isToolOrDynamicToolUIPart,
+  isToolUIPart,
+  jsonSchema,
+  lastAssistantMessageIsCompleteWithApprovalResponses,
+  lastAssistantMessageIsCompleteWithToolCalls,
+  modelMessageSchema,
+  parseJsonEventStream,
+  parsePartialJson,
+  pipeAgentUIStreamToResponse,
+  pipeTextStreamToResponse,
+  pipeUIMessageStreamToResponse,
+  pruneMessages,
+  readUIMessageStream,
+  registerTelemetryIntegration,
+  rerank,
+  safeValidateUIMessages,
+  simulateReadableStream,
+  simulateStreamingMiddleware,
+  smoothStream,
+  stepCountIs,
+  streamObject,
+  streamText,
+  systemModelMessageSchema,
+  tool,
+  toolModelMessageSchema,
+  uiMessageChunkSchema,
+  userModelMessageSchema,
+  validateUIMessages,
+  wrapEmbeddingModel,
+  wrapImageModel,
+  wrapLanguageModel,
+  wrapProvider,
+  zodSchema
 };

package/build/{index-468j74f3.js → index-6s313ddp.js}

@@ -1,6 +1,6 @@
 import {
   ApexFindingObject
-} from "./cli-jyp2c6th.js";
+} from "./cli-nvqny4ej.js";
 import {
   ALL_TOOL_NAMES,
   ASK_USER_QUESTIONS_TOOL_NAME,
@@ -20,6 +20,8 @@ import {
   ReportErrorReasonSchema,
   SEND_EMAIL_TOOL_NAME,
   SKILL_TOOL_NAMES,
+  SMS_LIST_MESSAGES_TOOL_NAME,
+  SMS_TOOL_NAMES,
   ScopeViolationError,
   StepTraceWriter,
   addMemory,
@@ -42,6 +44,9 @@ import {
   createResponseTool,
   createSandboxBrowserTools,
   createTask,
+  createWorkspaceApp,
+  createWorkspaceDomain,
+  createWorkspaceEndpoint,
   delegateAuth,
   detectAuthScheme,
   documentApp,
@@ -65,6 +70,9 @@ import {
   listFiles,
   listMemories,
   listTasksTool,
+  listWorkspaceApps,
+  listWorkspaceDomains,
+  listWorkspaceEndpoints,
   parseStorageStateResult,
   probeAuthEndpoints,
   provideComparisonResults,
@@ -73,6 +81,7 @@ import {
   readTempfileCapped,
   runAttackSurface,
   runPentestWorkflow,
+  sessionHasSmsPasswordless,
   setHeadlessMode,
   setUserAgent,
   setViewportSize,
@@ -84,106 +93,121 @@ import {
   transformScriptToFunction,
   updateFile,
   updateTask,
+  updateWorkspaceApp,
+  updateWorkspaceEndpoint,
   validateDiscovery,
   webSearch,
   writePlan
-} from "./cli-n2m2yy5b.js";
-import"./cli-7tw4xfnw.js";
+} from "./cli-hc4w41as.js";
+import"./cli-cdk877bx.js";
 import"./cli-c8131c4q.js";
-import"./cli-zx8gk8xv.js";
-import"./cli-vckbhnyk.js";
-import"./cli-3k1x5rn3.js";
-import"./cli-gpnb45ck.js";
-import"./cli-f7hanqbw.js";
-import"./cli-eveg9djy.js";
-import"./cli-barsn8br.js";
-import"./cli-8rxa073f.js";
+import"./cli-51503njj.js";
+import"./cli-b3d97zgc.js";
+import"./cli-avmhkjtv.js";
+import"./cli-j54qa6tm.js";
+import"./cli-9fds4ss0.js";
+import"./cli-5tbg4dyb.js";
+import"./cli-e1gmqsyh.js";
+import"./cli-knd276ed.js";
+import"./cli-bc05qbss.js";
 export {
-  writePlan,
-  webSearch,
-  validateDiscovery,
-  updateTask,
-  updateFile,
-  transformScriptToFunction,
-  testEndpointVariations,
-  submitPlan,
-  spawnPentestSwarm,
-  spawnPentestAgent,
-  spawnCodingAgent,
-  setViewportSize,
-  setUserAgent,
-  setHeadlessMode,
-  runPentestWorkflow,
-  runAttackSurface,
-  readTempfileCapped,
-  readSkill,
-  readFile,
-  provideComparisonResults,
-  probeAuthEndpoints,
-  parseStorageStateResult,
-  listTasksTool,
-  listMemories,
-  listFiles,
-  isHostAllowed,
-  installSandboxPlaywright,
-  httpRequest,
-  grep,
-  getPage,
-  getMemory,
-  getApexTmpRoot,
-  getAllowedHosts,
-  extractJsEndpoints,
-  extractHostsFromCommand,
-  extractHostname,
-  extractFallbackStdout,
-  executeCommand,
-  ensureSandboxPlaywright,
-  ensureSandboxBrowser,
-  documentVulnerability,
-  documentEndpoint,
-  documentApp,
-  detectAuthScheme,
-  delegateAuth,
-  createTask,
-  createSandboxBrowserTools,
-  createResponseTool,
-  createReportErrorTool,
-  createFile,
-  createEmailToolset,
-  createBrowserToolset,
-  createBrowserTools,
-  createAttackSurfaceReport,
-  createAllTools,
-  crawlAuthenticated,
-  completeAuthentication,
-  checkpointState,
-  checkSandboxPlaywright,
-  buildSessionWorkspaceSection,
-  buildProvidedFilesSection,
-  buildBaseSystemPrompt,
-  assertUrlInScope,
-  assertCommandInScope,
-  addMemory,
-  StepTraceWriter,
-  ScopeViolationError,
-  SKILL_TOOL_NAMES,
-  SEND_EMAIL_TOOL_NAME,
-  ReportErrorReasonSchema,
-  RESPONSE_TOOL_NAME,
-  REPORT_ERROR_TOOL_NAME,
-  PlaywrightMcpSession,
-  PersistentShell,
-  PentestReportedError,
-  PLAN_MODE_TOOL_NAMES,
-  OffensiveSecurityAgent,
-  FAST_STRIKE_EXCLUDED_TOOL_NAMES,
-  EMAIL_TOOL_NAMES as EMAIL_TOOL_NAMES_ACTIVE,
-  EMAIL_TOOL_NAMES,
-  BROWSER_TOOL_NAMES,
-  BASE_SYSTEM_PROMPT,
-  AskUserQuestionSchema,
-  ApexFindingObject,
-  AgentEventBus,
+  ALL_TOOL_NAMES,
   ASK_USER_QUESTIONS_TOOL_NAME,
-  ALL_TOOL_NAMES
+  AgentEventBus,
+  ApexFindingObject,
+  AskUserQuestionSchema,
+  BASE_SYSTEM_PROMPT,
+  BROWSER_TOOL_NAMES,
+  EMAIL_TOOL_NAMES,
+  EMAIL_TOOL_NAMES as EMAIL_TOOL_NAMES_ACTIVE,
+  FAST_STRIKE_EXCLUDED_TOOL_NAMES,
+  OffensiveSecurityAgent,
+  PLAN_MODE_TOOL_NAMES,
+  PentestReportedError,
+  PersistentShell,
+  PlaywrightMcpSession,
+  REPORT_ERROR_TOOL_NAME,
+  RESPONSE_TOOL_NAME,
+  ReportErrorReasonSchema,
+  SEND_EMAIL_TOOL_NAME,
+  SKILL_TOOL_NAMES,
+  SMS_LIST_MESSAGES_TOOL_NAME,
+  SMS_TOOL_NAMES,
+  SMS_TOOL_NAMES as SMS_TOOL_NAMES_ACTIVE,
+  ScopeViolationError,
+  StepTraceWriter,
+  addMemory,
+  assertCommandInScope,
+  assertUrlInScope,
+  buildBaseSystemPrompt,
+  buildProvidedFilesSection,
+  buildSessionWorkspaceSection,
+  checkSandboxPlaywright,
+  checkpointState,
+  completeAuthentication,
+  crawlAuthenticated,
+  createAllTools,
+  createAttackSurfaceReport,
+  createBrowserTools,
+  createBrowserToolset,
+  createEmailToolset,
+  createFile,
+  createReportErrorTool,
+  createResponseTool,
+  createSandboxBrowserTools,
+  createTask,
+  createWorkspaceApp,
+  createWorkspaceDomain,
+  createWorkspaceEndpoint,
+  delegateAuth,
+  detectAuthScheme,
+  documentApp,
+  documentEndpoint,
+  documentVulnerability,
+  ensureSandboxBrowser,
+  ensureSandboxPlaywright,
+  executeCommand,
+  extractFallbackStdout,
+  extractHostname,
+  extractHostsFromCommand,
+  extractJsEndpoints,
+  getAllowedHosts,
+  getApexTmpRoot,
+  getMemory,
+  getPage,
+  grep,
+  httpRequest,
+  installSandboxPlaywright,
+  isHostAllowed,
+  listFiles,
+  listMemories,
+  listTasksTool,
+  listWorkspaceApps,
+  listWorkspaceDomains,
+  listWorkspaceEndpoints,
+  parseStorageStateResult,
+  probeAuthEndpoints,
+  provideComparisonResults,
+  readFile,
+  readSkill,
+  readTempfileCapped,
+  runAttackSurface,
+  runPentestWorkflow,
+  sessionHasSmsPasswordless,
+  setHeadlessMode,
+  setUserAgent,
+  setViewportSize,
+  spawnCodingAgent,
+  spawnPentestAgent,
+  spawnPentestSwarm,
+  submitPlan,
+  testEndpointVariations,
+  transformScriptToFunction,
+  updateFile,
+  updateTask,
+  updateWorkspaceApp,
+  updateWorkspaceEndpoint,
+  validateDiscovery,
+  webSearch,
+  writePlan
 };

package/build/{index-e8c8zcrf.js → index-9j3pakz7.js}

@@ -17,22 +17,23 @@ import {
   update,
   write,
   writeRaw
-} from "./cli-zx8gk8xv.js";
-import"./cli-vckbhnyk.js";
+} from "./cli-51503njj.js";
+import"./cli-b3d97zgc.js";
 import {
   init_zod,
   zod_default
-} from "./cli-3k1x5rn3.js";
-import"./cli-gpnb45ck.js";
-import"./cli-f7hanqbw.js";
-import"./cli-eveg9djy.js";
+} from "./cli-avmhkjtv.js";
+import"./cli-j54qa6tm.js";
+import"./cli-9fds4ss0.js";
+import"./cli-5tbg4dyb.js";
 import {
   getCurrentVersion,
   init_installation
-} from "./cli-barsn8br.js";
+} from "./cli-e1gmqsyh.js";
+import"./cli-knd276ed.js";
 import {
   __require
-} from "./cli-8rxa073f.js";
+} from "./cli-bc05qbss.js";
 
 // src/core/session/index.ts
 init_zod();
@@ -178,6 +179,7 @@ var SessionConfigObject = zod_default.object({
   authenticationInstructions: zod_default.string().optional(),
   requestsPerSecond: zod_default.number().optional(),
   allowDestructiveActions: zod_default.boolean().optional(),
+  allowRateLimitTesting: zod_default.boolean().optional(),
   operatorSettings: OperatorSettingsObject.optional(),
   toolsetState: ToolsetStateSchema.optional(),
   enumerateSubdomains: zod_default.boolean().optional(),
@@ -313,7 +315,7 @@ async function create(input) {
   if (normalizedConfig?.headers !== undefined) {
     snapshotHeaders = { ...normalizedConfig.headers };
   } else {
-    const { config: appConfig } = await import("./index-ag14v3sg.js");
+    const { config: appConfig } = await import("./index-r4z6r7vf.js");
     const cfg = await appConfig.get();
     snapshotHeaders = cfg.defaultHeaders ? { ...cfg.defaultHeaders } : { ...DEFAULT_HEADER_RECORD };
   }
@@ -452,18 +454,22 @@ function hasOperatorState(session) {
   const statePath = path.join(session.rootPath, "messages.json");
   return existsSync(statePath);
 }
-var MAX_RESUME_MESSAGES = 200;
-function getResumeMessages(messages, limit = MAX_RESUME_MESSAGES) {
+var RESUME_MESSAGE_WINDOW = 200;
+function getResumeMessages(messages, limit = RESUME_MESSAGE_WINDOW) {
   if (messages.length <= limit)
     return messages;
-  let cutIndex = messages.length - limit;
+  const roughCutIndex = messages.length - limit;
+  let cutIndex = roughCutIndex;
   while (cutIndex < messages.length) {
     if (messages[cutIndex].role === "user")
       break;
     cutIndex++;
   }
   if (cutIndex >= messages.length) {
-    cutIndex = messages.length - limit;
+    cutIndex = roughCutIndex;
+    while (cutIndex > 0 && messages[cutIndex].role !== "user") {
+      cutIndex--;
+    }
   }
   return messages.slice(cutIndex);
 }
@@ -557,18 +563,18 @@ var sessions = {
   updateSessionHeaders
 };
 export {
-  updateSessionHeaders,
-  updateOperatorSettings,
-  sessions,
-  normalizeMessages,
-  migrateLegacySessionData,
-  loadOperatorState,
-  list,
-  hasOperatorState,
-  getSessionRoot,
-  getResumeMessages,
-  get,
-  create,
+  EXFIL_OUTCOME_GUIDANCE,
   SessionInfoObject,
-  EXFIL_OUTCOME_GUIDANCE
+  create,
+  get,
+  getResumeMessages,
+  getSessionRoot,
+  hasOperatorState,
+  list,
+  loadOperatorState,
+  migrateLegacySessionData,
+  normalizeMessages,
+  sessions,
+  updateOperatorSettings,
+  updateSessionHeaders
 };

package/build/{index-h2hj2hj9.js → index-cbwn03kz.js}

@@ -10,11 +10,11 @@ import {
   init_esm_min,
   init_fetch_blob,
   init_from
-} from "./cli-wszshs5e.js";
+} from "./cli-k71t434r.js";
 import {
   __esm,
   __require
-} from "./cli-8rxa073f.js";
+} from "./cli-bc05qbss.js";
 
 // node_modules/data-uri-to-buffer/dist/index.js
 function dataUriToBuffer(uri) {
@@ -176,7 +176,7 @@ class Body {
       }
       return formData;
     }
-    const { toFormData } = await import("./multipart-parser-6zd16497.js");
+    const { toFormData } = await import("./multipart-parser-g2xxkezz.js");
     return toFormData(this.body, ct);
   }
   async blob() {
@@ -1240,18 +1240,18 @@ var init_src = __esm(() => {
 init_src();
 
 export {
-  isRedirect,
-  fileFromSync,
-  fileFrom,
-  fetch as default,
-  blobFromSync,
-  blobFrom,
-  Response,
-  Request,
-  Headers,
-  FormData,
-  file_default as File,
-  FetchError,
+  AbortError,
   fetch_blob_default as Blob,
-  AbortError
+  FetchError,
+  file_default as File,
+  FormData,
+  Headers,
+  Request,
+  Response,
+  blobFrom,
+  blobFromSync,
+  fetch as default,
+  fileFrom,
+  fileFromSync,
+  isRedirect
 };