@pensar/apex 2.5.0 → 2.6.1-canary.0cc77dcc

package/build/{index-cbwn03kz.js → index-a2xycbjs.js}

@@ -1,20 +1,14 @@
 import {
-  FormData,
-  blobFrom,
-  blobFromSync,
   fetch_blob_default,
-  fileFrom,
-  fileFromSync,
-  file_default,
+  init_fetch_blob,
+  FormData2,
   formDataToBlob,
   init_esm_min,
-  init_fetch_blob,
   init_from
-} from "./cli-k71t434r.js";
+} from "./cli-ec2hwkv3.js";
 import {
-  __esm,
-  __require
-} from "./cli-bc05qbss.js";
+  __esm
+} from "./cli-h6y3bt60.js";
 
 // node_modules/data-uri-to-buffer/dist/index.js
 function dataUriToBuffer(uri) {
@@ -129,7 +123,7 @@ class Body {
       body = Buffer2.from(body);
     } else if (ArrayBuffer.isView(body)) {
       body = Buffer2.from(body.buffer, body.byteOffset, body.byteLength);
-    } else if (body instanceof Stream) {} else if (body instanceof FormData) {
+    } else if (body instanceof Stream) {} else if (body instanceof FormData2) {
       body = formDataToBlob(body);
       boundary = body.type.split("=")[1];
     } else {
@@ -169,14 +163,14 @@ class Body {
   async formData() {
     const ct = this.headers.get("content-type");
     if (ct.startsWith("application/x-www-form-urlencoded")) {
-      const formData = new FormData;
+      const formData = new FormData2;
       const parameters = new URLSearchParams(await this.text());
       for (const [name, value] of parameters) {
         formData.append(name, value);
       }
       return formData;
     }
-    const { toFormData } = await import("./multipart-parser-g2xxkezz.js");
+    const { toFormData } = await import("./multipart-parser-vjjdbpd1.js");
     return toFormData(this.body, ct);
   }
   async blob() {
@@ -274,7 +268,7 @@ var pipeline, INTERNALS, clone = (instance, highWaterMark) => {
   if (Buffer2.isBuffer(body) || types.isAnyArrayBuffer(body) || ArrayBuffer.isView(body)) {
     return null;
   }
-  if (body instanceof FormData) {
+  if (body instanceof FormData2) {
     return `multipart/form-data; boundary=${request[INTERNALS].boundary}`;
   }
   if (body && typeof body.getBoundary === "function") {
@@ -967,8 +961,8 @@ async function fetch(url, options_) {
     }
     if (parsedURL.protocol === "data:") {
       const data = dist_default(request.url);
-      const response2 = new Response(data, { headers: { "Content-Type": data.typeFull } });
-      resolve(response2);
+      const response = new Response(data, { headers: { "Content-Type": data.typeFull } });
+      resolve(response);
       return;
     }
     const send = (parsedURL.protocol === "https:" ? https : http2).request;
@@ -1240,18 +1234,5 @@ var init_src = __esm(() => {
 init_src();
 
 export {
-  AbortError,
-  fetch_blob_default as Blob,
-  FetchError,
-  file_default as File,
-  FormData,
-  Headers,
-  Request,
-  Response,
-  blobFrom,
-  blobFromSync,
-  fetch as default,
-  fileFrom,
-  fileFromSync,
-  isRedirect
+  fetch as default
 };

package/build/{index-psqjpw5m.js → index-c1h0g35p.js}

@@ -1,7 +1,7 @@
 import {
   __commonJS,
   __require
-} from "./cli-bc05qbss.js";
+} from "./cli-h6y3bt60.js";
 
 // node_modules/ms/index.js
 var require_ms = __commonJS(function(exports, module) {
@@ -566,8 +566,8 @@ var require_node = __commonJS(function(exports, module) {
     return "colors" in exports.inspectOpts ? Boolean(exports.inspectOpts.colors) : tty.isatty(process.stderr.fd);
   }
   function formatArgs(args) {
-    const { namespace: name, useColors: useColors2 } = this;
-    if (useColors2) {
+    const { namespace: name, useColors } = this;
+    if (useColors) {
       const c = this.color;
       const colorCode = "\x1B[3" + (c < 8 ? c : "8;5;" + c);
       const prefix = `  ${colorCode};1m${name} \x1B[0m`;
@@ -628,7 +628,7 @@ var require_src = __commonJS(function(exports, module) {
   }
 });
 
-// node_modules/agent-base/dist/helpers.js
+// node_modules/gaxios/node_modules/https-proxy-agent/node_modules/agent-base/dist/helpers.js
 var require_helpers = __commonJS(function(exports) {
   var __createBinding = exports && exports.__createBinding || (Object.create ? function(o, m, k, k2) {
     if (k2 === undefined)
@@ -690,17 +690,17 @@ var require_helpers = __commonJS(function(exports) {
   exports.json = json;
   function req(url, opts = {}) {
     const href = typeof url === "string" ? url : url.href;
-    const req2 = (href.startsWith("https:") ? https : http).request(url, opts);
+    const req = (href.startsWith("https:") ? https : http).request(url, opts);
     const promise = new Promise((resolve, reject) => {
-      req2.once("response", resolve).once("error", reject).end();
+      req.once("response", resolve).once("error", reject).end();
     });
-    req2.then = promise.then.bind(promise);
-    return req2;
+    req.then = promise.then.bind(promise);
+    return req;
   }
   exports.req = req;
 });
 
-// node_modules/agent-base/dist/index.js
+// node_modules/gaxios/node_modules/https-proxy-agent/node_modules/agent-base/dist/index.js
 var require_dist = __commonJS(function(exports) {
   var __createBinding = exports && exports.__createBinding || (Object.create ? function(o, m, k, k2) {
     if (k2 === undefined)
@@ -851,7 +851,7 @@ var require_dist = __commonJS(function(exports) {
   exports.Agent = Agent;
 });
 
-// node_modules/https-proxy-agent/dist/parse-proxy-response.js
+// node_modules/gaxios/node_modules/https-proxy-agent/dist/parse-proxy-response.js
 var require_parse_proxy_response = __commonJS(function(exports) {
   var __importDefault = exports && exports.__importDefault || function(mod) {
     return mod && mod.__esModule ? mod : { default: mod };
@@ -947,7 +947,7 @@ var require_parse_proxy_response = __commonJS(function(exports) {
   exports.parseProxyResponse = parseProxyResponse;
 });
 
-// node_modules/https-proxy-agent/dist/index.js
+// node_modules/gaxios/node_modules/https-proxy-agent/dist/index.js
 var require_dist2 = __commonJS(function(exports) {
   var __createBinding = exports && exports.__createBinding || (Object.create ? function(o, m, k, k2) {
     if (k2 === undefined)

package/build/index-cfbd4zej.js

@@ -0,0 +1,17 @@
+import {
+  init,
+  get2,
+  update2,
+  init_config2
+} from "./cli-5ppxe6qz.js";
+
+// src/core/config/index.ts
+init_config2();
+var config = {
+  get: get2,
+  init,
+  update: update2
+};
+export {
+  config
+};

package/build/index-mqaw1ac6.js

@@ -0,0 +1,9 @@
+import {
+  config2,
+  init_config
+} from "./cli-pckpvwbd.js";
+init_config();
+
+export {
+  config2 as config
+};

package/build/{index-kyd1jm89.js → index-nfhetcq8.js}

@@ -1,39 +1,47 @@
+import"./cli-pckpvwbd.js";
+import"./cli-nmg32cfd.js";
 import {
-  CredentialManager,
-  RateLimiter,
-  ToolsetStateSchema,
-  createDir,
-  descending,
   generateRandomName,
   generateSessionName,
-  init_credentials,
-  init_id,
   init_name,
+  CredentialManager,
+  init_credentials,
+  RateLimiter,
   init_rateLimiter,
-  init_storage,
-  init_toolset,
+  write,
+  createDir,
+  writeRaw,
   read,
-  schema,
   update,
-  write,
-  writeRaw
-} from "./cli-p4r7q012.js";
-import"./cli-kff2bbq7.js";
+  init_storage,
+  ToolsetStateSchema,
+  init_toolset
+} from "./cli-c0ha5wh1.js";
+import {
+  schema,
+  descending,
+  init_id
+} from "./cli-se8ae8z3.js";
+import"./cli-c2k4xxaw.js";
+import {
+  init_zod
+} from "./cli-3qznjsnr.js";
 import {
-  init_zod,
-  zod_default
-} from "./cli-avmhkjtv.js";
-import"./cli-j54qa6tm.js";
-import"./cli-7s062hr6.js";
-import"./cli-ww7hbazg.js";
+  string,
+  number,
+  boolean,
+  array,
+  object,
+  union,
+  discriminatedUnion,
+  record,
+  _enum,
+  literal
+} from "./cli-mz5pk30x.js";
 import {
   getCurrentVersion,
   init_installation
-} from "./cli-g3czc3jz.js";
-import"./cli-knd276ed.js";
-import {
-  __require
-} from "./cli-bc05qbss.js";
+} from "./cli-v9rrvh12.js";
 
 // src/core/session/index.ts
 init_zod();
@@ -52,90 +60,98 @@ var EXFIL_OUTCOME_GUIDANCE = "Exfiltrate data to extract the flag value. " + "Cr
 var DEFAULT_HEADER_RECORD = {
   "User-Agent": "pensar-apex"
 };
-var AuthCredentialsObject = zod_default.object({
-  username: zod_default.string().optional(),
-  password: zod_default.string().optional(),
-  loginUrl: zod_default.string().optional(),
-  additionalFields: zod_default.record(zod_default.string(), zod_default.string()).optional(),
-  apiKey: zod_default.string().optional(),
-  role: zod_default.string().optional(),
-  context: zod_default.string().optional(),
-  tokens: zod_default.object({
-    bearerToken: zod_default.string().optional(),
-    cookies: zod_default.string().optional(),
-    sessionToken: zod_default.string().optional(),
-    customHeaders: zod_default.record(zod_default.string(), zod_default.string()).optional()
-  }).optional()
+var AuthCredentialsObject = object({
+  id: string().min(1).optional(),
+  username: string().optional(),
+  password: string().optional(),
+  loginUrl: string().optional(),
+  additionalFields: record(string(), string()).optional(),
+  apiKey: string().optional(),
+  role: string().optional(),
+  context: string().optional(),
+  tokens: object({
+    bearerToken: string().optional(),
+    cookies: string().optional(),
+    sessionToken: string().optional(),
+    customHeaders: record(string(), string()).optional()
+  }).optional(),
+  googleSignIn: boolean().optional()
 });
-var ScopeConstraintsObject = zod_default.object({
-  allowedHosts: zod_default.string().array().optional(),
-  allowedPorts: zod_default.number().array().optional(),
-  strictScope: zod_default.boolean().optional()
+var ScopeConstraintsObject = object({
+  allowedHosts: string().array().optional(),
+  allowedPorts: number().array().optional(),
+  strictScope: boolean().optional()
 });
-var SessionHeadersRecord = zod_default.record(zod_default.string(), zod_default.string());
-var OffensiveHeadersConfigObject = zod_default.object({
-  mode: zod_default.enum(["none", "default", "custom"]).optional(),
+var SessionHeadersRecord = record(string(), string());
+var OffensiveHeadersConfigObject = object({
+  mode: _enum(["none", "default", "custom"]).optional(),
   headers: SessionHeadersRecord.optional()
 });
-var OperatorSettingsObject = zod_default.object({
-  initialMode: zod_default.enum(["plan", "manual", "auto"]).default("manual"),
-  requireApproval: zod_default.boolean().default(true),
-  enableSuggestions: zod_default.boolean().default(true),
-  strikeMode: zod_default.boolean().optional()
+var OperatorSettingsObject = object({
+  initialMode: _enum(["plan", "manual", "auto"]).default("manual"),
+  requireApproval: boolean().default(true),
+  enableSuggestions: boolean().default(true),
+  strikeMode: boolean().optional()
 });
-var EmailInboxConfigObject = zod_default.discriminatedUnion("provider", [
-  zod_default.object({
-    provider: zod_default.literal("gmail"),
-    id: zod_default.string(),
-    name: zod_default.string(),
-    emailAddress: zod_default.string(),
-    accessToken: zod_default.string(),
-    refreshToken: zod_default.string(),
-    clientId: zod_default.string().optional(),
-    clientSecret: zod_default.string().optional(),
-    tokenExpiry: zod_default.number().optional()
+var EmailInboxConfigObject = discriminatedUnion("provider", [
+  object({
+    provider: literal("gmail"),
+    id: string(),
+    name: string(),
+    emailAddress: string(),
+    accessToken: string(),
+    refreshToken: string(),
+    clientId: string().optional(),
+    clientSecret: string().optional(),
+    tokenExpiry: number().optional()
+  }),
+  object({
+    provider: literal("outlook"),
+    id: string(),
+    name: string(),
+    emailAddress: string(),
+    accessToken: string(),
+    refreshToken: string(),
+    clientId: string().optional(),
+    clientSecret: string().optional(),
+    tokenExpiry: number().optional()
   }),
-  zod_default.object({
-    provider: zod_default.literal("outlook"),
-    id: zod_default.string(),
-    name: zod_default.string(),
-    emailAddress: zod_default.string(),
-    accessToken: zod_default.string(),
-    refreshToken: zod_default.string(),
-    clientId: zod_default.string().optional(),
-    clientSecret: zod_default.string().optional(),
-    tokenExpiry: zod_default.number().optional()
+  object({
+    provider: literal("imap"),
+    id: string(),
+    name: string(),
+    emailAddress: string(),
+    imapHost: string(),
+    imapPort: number(),
+    username: string(),
+    password: string(),
+    tls: boolean()
   }),
-  zod_default.object({
-    provider: zod_default.literal("imap"),
-    id: zod_default.string(),
-    name: zod_default.string(),
-    emailAddress: zod_default.string(),
-    imapHost: zod_default.string(),
-    imapPort: zod_default.number(),
-    username: zod_default.string(),
-    password: zod_default.string(),
-    tls: zod_default.boolean()
+  object({
+    provider: literal("http"),
+    id: string(),
+    name: string(),
+    emailAddress: string(),
+    endpoint: string(),
+    token: string()
   }),
-  zod_default.object({
-    provider: zod_default.literal("http"),
-    id: zod_default.string(),
-    name: zod_default.string(),
-    emailAddress: zod_default.string(),
-    endpoint: zod_default.string(),
-    token: zod_default.string()
+  object({
+    provider: literal("pensar-managed"),
+    id: string(),
+    name: string(),
+    emailAddress: string()
   })
 ]);
-var EmailIntegrationConfigObject = zod_default.object({
-  inboxes: zod_default.array(EmailInboxConfigObject)
+var EmailIntegrationConfigObject = object({
+  inboxes: array(EmailInboxConfigObject)
 });
-var SmtpConfigObject = zod_default.object({
-  host: zod_default.string(),
-  port: zod_default.number(),
-  username: zod_default.string(),
-  password: zod_default.string(),
-  tls: zod_default.boolean().default(true),
-  fromAddress: zod_default.string().optional()
+var SmtpConfigObject = object({
+  host: string(),
+  port: number(),
+  username: string(),
+  password: string(),
+  tls: boolean().default(true),
+  fromAddress: string().optional()
 });
 function resolveSmtpConfig(explicit) {
   if (explicit)
@@ -168,31 +184,33 @@ function resolveSmtpConfig(explicit) {
   }
   return;
 }
-var SessionConfigObject = zod_default.object({
+var SessionConfigObject = object({
   headers: SessionHeadersRecord.optional(),
   offensiveHeaders: OffensiveHeadersConfigObject.optional(),
-  sessionType: zod_default.enum(["web-app"]).optional(),
-  mode: zod_default.enum(["auto", "driver", "operator"]).optional(),
-  outcomeGuidance: zod_default.string().optional(),
+  sessionType: _enum(["web-app"]).optional(),
+  mode: _enum(["auto", "driver", "operator"]).optional(),
+  outcomeGuidance: string().optional(),
   scopeConstraints: ScopeConstraintsObject.optional(),
-  authCredentials: zod_default.union([AuthCredentialsObject, zod_default.array(AuthCredentialsObject)]).optional(),
-  authenticationInstructions: zod_default.string().optional(),
-  requestsPerSecond: zod_default.number().optional(),
-  allowDestructiveActions: zod_default.boolean().optional(),
-  allowRateLimitTesting: zod_default.boolean().optional(),
+  authCredentials: union([AuthCredentialsObject, array(AuthCredentialsObject)]).optional(),
+  authenticationInstructions: string().optional(),
+  requestsPerSecond: number().optional(),
+  allowDestructiveActions: boolean().optional(),
+  allowRateLimitTesting: boolean().optional(),
   operatorSettings: OperatorSettingsObject.optional(),
   toolsetState: ToolsetStateSchema.optional(),
-  enumerateSubdomains: zod_default.boolean().optional(),
-  codebasePath: zod_default.string().optional(),
+  enumerateSubdomains: boolean().optional(),
+  codebasePath: string().optional(),
   emailIntegration: EmailIntegrationConfigObject.optional(),
   smtpConfig: SmtpConfigObject.optional(),
-  exfilMode: zod_default.boolean().optional(),
-  agentCwd: zod_default.string().optional(),
-  prompt: zod_default.string().optional(),
-  taskDriven: zod_default.boolean().optional(),
-  requirePlan: zod_default.boolean().optional(),
-  disableSubagents: zod_default.boolean().optional(),
-  promptInjectionLibrarySource: zod_default.string().optional()
+  exfilMode: boolean().optional(),
+  agentCwd: string().optional(),
+  remoteFileWorkspaceRoot: string().optional(),
+  prompt: string().optional(),
+  taskDriven: boolean().optional(),
+  nativeRolloutEvidence: object({ outputDirectory: string().min(1) }).optional(),
+  requirePlan: boolean().optional(),
+  disableSubagents: boolean().optional(),
+  promptInjectionLibrarySource: string().optional()
 });
 function getPensarDir() {
   return path.join(os.homedir(), ".pensar");
@@ -244,8 +262,8 @@ function normalizeDeprecatedHeaders(config) {
   if (!config)
     return config;
   if (config.offensiveHeaders == null) {
-    const { offensiveHeaders: _drop, ...rest2 } = config;
-    return rest2;
+    const { offensiveHeaders: _drop, ...rest } = config;
+    return rest;
   }
   const { offensiveHeaders, ...rest } = config;
   const restWithHeaders = rest;
@@ -275,21 +293,21 @@ function migrateLegacySessionData(input) {
     return input;
   return { ...root, config: normalizeDeprecatedHeaders(cfg) };
 }
-var SessionInfoObject = zod_default.object({
+var SessionInfoObject = object({
   id: schema("session"),
-  name: zod_default.string().optional(),
-  version: zod_default.string(),
-  targets: zod_default.array(zod_default.string()),
+  name: string().optional(),
+  version: string(),
+  targets: array(string()),
   config: SessionConfigObject.optional(),
-  time: zod_default.object({
-    created: zod_default.number(),
-    updated: zod_default.number()
+  time: object({
+    created: number(),
+    updated: number()
   }),
-  rootPath: zod_default.string(),
-  logsPath: zod_default.string(),
-  findingsPath: zod_default.string(),
-  scratchpadPath: zod_default.string(),
-  pocsPath: zod_default.string()
+  rootPath: string(),
+  logsPath: string(),
+  findingsPath: string(),
+  scratchpadPath: string(),
+  pocsPath: string()
 });
 async function create(input) {
   const name = input.name ?? generateRandomName();
@@ -311,12 +329,14 @@ async function create(input) {
       credentialManager.addFromAuthCredentials(cred);
     }
   }
-  const smtpConfig = resolveSmtpConfig(normalizedConfig?.smtpConfig);
+  const smtpConfig = input.inheritEnvironmentConfig === false ? normalizedConfig?.smtpConfig : resolveSmtpConfig(normalizedConfig?.smtpConfig);
   let snapshotHeaders;
   if (normalizedConfig?.headers !== undefined) {
     snapshotHeaders = { ...normalizedConfig.headers };
+  } else if (input.inheritEnvironmentConfig === false) {
+    snapshotHeaders = {};
   } else {
-    const { config: appConfig } = await import("./index-ywmfnd30.js");
+    const { config: appConfig } = await import("./index-mqaw1ac6.js");
     const cfg = await appConfig.get();
     snapshotHeaders = cfg.defaultHeaders ? { ...cfg.defaultHeaders } : { ...DEFAULT_HEADER_RECORD };
   }
@@ -352,7 +372,8 @@ async function create(input) {
       targets: input.targets,
       userMessage: input.userMessage,
       model: input.model,
-      authConfig: input.authConfig
+      authConfig: input.authConfig,
+      sessionId: result.id
     }).then((aiName) => {
       if (aiName) {
         result.name = aiName;
@@ -384,30 +405,10 @@ async function update2(id, editor) {
   });
   return result;
 }
-async function* list() {
-  const sessionsDir = getSessionsDir();
-  let entries;
-  try {
-    entries = await import("node:fs/promises").then((fsp) => fsp.readdir(sessionsDir, { withFileTypes: true }));
-  } catch {
-    return;
-  }
-  for (const entry of entries) {
-    if (!entry.isDirectory())
-      continue;
-    try {
-      yield await read([
-        "sessions",
-        entry.name,
-        "session"
-      ]);
-    } catch {}
-  }
-}
-var RemoveInput = zod_default.object({
+var RemoveInput = object({
   sessionId: schema("session")
 });
-var remove2 = async (input) => {
+var remove = async (input) => {
   try {
     const sessionDir = getSessionRoot(input.sessionId);
     const fsp = await import("node:fs/promises");
@@ -416,7 +417,7 @@ var remove2 = async (input) => {
     console.error(e);
   }
 };
-var RemoveMsgInput = zod_default.object({
+var RemoveMsgInput = object({
   sessionId: schema("session"),
   messageId: schema("message")
 });
@@ -556,7 +557,7 @@ var sessions = {
   EXFIL_OUTCOME_GUIDANCE,
   create,
   get,
-  remove: remove2,
+  remove,
   loadOperatorState,
   hasOperatorState,
   getResumeMessages,
@@ -564,18 +565,7 @@ var sessions = {
   updateSessionHeaders
 };
 export {
-  EXFIL_OUTCOME_GUIDANCE,
-  SessionInfoObject,
-  create,
-  get,
   getResumeMessages,
-  getSessionRoot,
-  hasOperatorState,
-  list,
-  loadOperatorState,
-  migrateLegacySessionData,
   normalizeMessages,
-  sessions,
-  updateOperatorSettings,
-  updateSessionHeaders
+  sessions
 };