@pensar/apex 2.6.1-canary.4c944004 → 2.6.1

package/build/agent-6w7egcf1.js

@@ -0,0 +1,13 @@
+import {
+  runAuthenticationAgent2
+} from "./cli-3sp6nd8d.js";
+import"./cli-1ve18npr.js";
+import"./cli-qba2x69h.js";
+import"./cli-qgz1q9g5.js";
+import"./cli-dpsw2fe6.js";
+import"./cli-c05y640n.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-fy6vh2a7.js";
+export {
+  runAuthenticationAgent2 as runAuthenticationAgent
+};

package/build/agent-9zx75feh.js

@@ -0,0 +1,13 @@
+import {
+  CodeAgent2
+} from "./cli-kb21qhvm.js";
+import"./cli-1ve18npr.js";
+import"./cli-qba2x69h.js";
+import"./cli-qgz1q9g5.js";
+import"./cli-dpsw2fe6.js";
+import"./cli-c05y640n.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-fy6vh2a7.js";
+export {
+  CodeAgent2 as CodeAgent
+};

package/build/{agent-b2z45j1b.js → agent-ayreaj6z.js}

@@ -1,15 +1,15 @@
-import"./cli-v0d1n2j3.js";
-import"./cli-905nmz0b.js";
-import"./cli-5t6n4a8w.js";
+import"./cli-qgz1q9g5.js";
+import"./cli-fy6vh2a7.js";
+import"./cli-c05y640n.js";
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-s82mq645.js";
+} from "./cli-1ve18npr.js";
 import"./cli-qba2x69h.js";
 import {
   stepCountIs2,
   init_dist
-} from "./cli-a9j339n2.js";
+} from "./cli-dpsw2fe6.js";
 import"./cli-c2k4xxaw.js";
 import {
   init_zod

package/build/{agent-runs-mztyf3qm.js → agent-runs-g37vkrjr.js}

@@ -1,8 +1,8 @@
 import {
   config2,
   init_config
-} from "./cli-905nmz0b.js";
-import"./cli-5t6n4a8w.js";
+} from "./cli-fy6vh2a7.js";
+import"./cli-c05y640n.js";
 import {
   inspectSessionEvidence2,
   RecordedRunSpecSchema,
@@ -13,28 +13,28 @@ import {
   runRecordedAgent2,
   RunRecoveryBlockedError2,
   resumeRecordedAgent2
-} from "./cli-jsvm7qaa.js";
+} from "./cli-7eea4e2y.js";
 import {
   AgentEventBus
-} from "./cli-v0d1n2j3.js";
-import"./cli-xaxr74bm.js";
-import"./cli-t368gv8p.js";
-import"./cli-x0rrhg57.js";
-import"./cli-wqhbwkbc.js";
-import"./cli-d8x165mf.js";
-import"./cli-021yxmh5.js";
-import"./cli-da57pbjb.js";
+} from "./cli-qgz1q9g5.js";
+import"./cli-k2nwxta0.js";
+import"./cli-kb21qhvm.js";
+import"./cli-ngq9dr8n.js";
+import"./cli-d37a42dc.js";
+import"./cli-3sp6nd8d.js";
+import"./cli-xtc2t6me.js";
+import"./cli-n2en7j5b.js";
 import"./cli-xcy2vxj2.js";
 import {
   resolveWorkerExecutable,
   launchLocalWorker
-} from "./cli-rvqwpdjg.js";
-import"./cli-s82mq645.js";
+} from "./cli-gx71jcke.js";
+import"./cli-1ve18npr.js";
 import"./cli-qba2x69h.js";
 import {
   buildAuthConfig,
   init_ai
-} from "./cli-a9j339n2.js";
+} from "./cli-dpsw2fe6.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/agent-runs.ts
@@ -115,7 +115,7 @@ async function runAgentRunsCommand(args) {
     if (!isAbsolute(values.store)) {
       throw new Error("agent-runs worker requires --store <absolute database>");
     }
-    const { serveLocalRunWorker } = await import("./index-00n0zrdn.js");
+    const { serveLocalRunWorker } = await import("./index-qv4cc65p.js");
     await serveLocalRunWorker({
       runId: values.run,
       databasePath: resolve(values.store)
@@ -129,7 +129,7 @@ async function runAgentRunsCommand(args) {
 ${HELP}`);
   }
   if (command === "attach") {
-    const { openRecordedRunClient } = await import("./recordedRunClient-35dp6wng.js");
+    const { openRecordedRunClient } = await import("./recordedRunClient-dp032c32.js");
     const client = await openRecordedRunClient(values.store);
     const controller = new AbortController;
     const detach = () => controller.abort();

package/build/{agent-kddx1vez.js → agent-yby11zaq.js}

@@ -1,14 +1,14 @@
 import {
   TargetedPentestAgent2,
   buildPentestSystemPrompt2
-} from "./cli-021yxmh5.js";
-import"./cli-s82mq645.js";
+} from "./cli-xtc2t6me.js";
+import"./cli-1ve18npr.js";
 import"./cli-qba2x69h.js";
-import"./cli-v0d1n2j3.js";
-import"./cli-a9j339n2.js";
-import"./cli-5t6n4a8w.js";
+import"./cli-qgz1q9g5.js";
+import"./cli-dpsw2fe6.js";
+import"./cli-c05y640n.js";
 import"./cli-c2k4xxaw.js";
-import"./cli-905nmz0b.js";
+import"./cli-fy6vh2a7.js";
 export {
   TargetedPentestAgent2 as TargetedPentestAgent,
   buildPentestSystemPrompt2 as buildPentestSystemPrompt

package/build/{apps-h48ah1wf.js → apps-xn6km9yn.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env bun
-import"./cli-905nmz0b.js";
-import"./cli-5t6n4a8w.js";
-import"./cli-jsvm7qaa.js";
+import"./cli-fy6vh2a7.js";
+import"./cli-c05y640n.js";
+import"./cli-7eea4e2y.js";
 import {
   ENDPOINT_TRANSPORTS2,
   listApps2,
@@ -18,21 +18,21 @@ import {
   searchEndpoints2,
   listDomains2,
   createDomain2
-} from "./cli-v0d1n2j3.js";
-import"./cli-xaxr74bm.js";
-import"./cli-t368gv8p.js";
-import"./cli-x0rrhg57.js";
-import"./cli-wqhbwkbc.js";
-import"./cli-d8x165mf.js";
-import"./cli-021yxmh5.js";
-import"./cli-da57pbjb.js";
+} from "./cli-qgz1q9g5.js";
+import"./cli-k2nwxta0.js";
+import"./cli-kb21qhvm.js";
+import"./cli-ngq9dr8n.js";
+import"./cli-d37a42dc.js";
+import"./cli-3sp6nd8d.js";
+import"./cli-xtc2t6me.js";
+import"./cli-n2en7j5b.js";
 import"./cli-xcy2vxj2.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-s82mq645.js";
+import"./cli-1ve18npr.js";
 import"./cli-qba2x69h.js";
-import"./cli-a9j339n2.js";
+import"./cli-dpsw2fe6.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/apps.ts

package/build/{auth-v65mvfbf.js → auth-d105wc64.js}

@@ -2,7 +2,7 @@
 import {
   config2,
   init_config
-} from "./cli-905nmz0b.js";
+} from "./cli-fy6vh2a7.js";
 import {
   getPensarApiUrl2,
   getPensarConsoleUrl2,
@@ -18,23 +18,23 @@ import {
   createWorkspaceSelection2,
   pollWorkspaceSelection2,
   init_auth
-} from "./cli-5t6n4a8w.js";
-import"./cli-jsvm7qaa.js";
-import"./cli-v0d1n2j3.js";
-import"./cli-xaxr74bm.js";
-import"./cli-t368gv8p.js";
-import"./cli-x0rrhg57.js";
-import"./cli-wqhbwkbc.js";
-import"./cli-d8x165mf.js";
-import"./cli-021yxmh5.js";
-import"./cli-da57pbjb.js";
+} from "./cli-c05y640n.js";
+import"./cli-7eea4e2y.js";
+import"./cli-qgz1q9g5.js";
+import"./cli-k2nwxta0.js";
+import"./cli-kb21qhvm.js";
+import"./cli-ngq9dr8n.js";
+import"./cli-d37a42dc.js";
+import"./cli-3sp6nd8d.js";
+import"./cli-xtc2t6me.js";
+import"./cli-n2en7j5b.js";
 import"./cli-xcy2vxj2.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-s82mq645.js";
+import"./cli-1ve18npr.js";
 import"./cli-qba2x69h.js";
-import"./cli-a9j339n2.js";
+import"./cli-dpsw2fe6.js";
 import"./cli-c2k4xxaw.js";
 import {
   __require

package/build/{blackboxAgent-pzyz81z9.js → blackboxAgent-s56sgx9b.js}

@@ -1,13 +1,13 @@
 import {
   BlackboxAttackSurfaceAgent2
-} from "./cli-xaxr74bm.js";
-import"./cli-s82mq645.js";
+} from "./cli-k2nwxta0.js";
+import"./cli-1ve18npr.js";
 import"./cli-qba2x69h.js";
-import"./cli-v0d1n2j3.js";
-import"./cli-a9j339n2.js";
-import"./cli-5t6n4a8w.js";
+import"./cli-qgz1q9g5.js";
+import"./cli-dpsw2fe6.js";
+import"./cli-c05y640n.js";
 import"./cli-c2k4xxaw.js";
-import"./cli-905nmz0b.js";
+import"./cli-fy6vh2a7.js";
 export {
   BlackboxAttackSurfaceAgent2 as BlackboxAttackSurfaceAgent
 };

package/build/{blackboxPentest-3pzzgzm5.js → blackboxPentest-ps78v3w7.js}

@@ -1,26 +1,26 @@
-import"./cli-905nmz0b.js";
-import"./cli-5t6n4a8w.js";
-import"./cli-v0d1n2j3.js";
-import"./cli-xaxr74bm.js";
-import"./cli-021yxmh5.js";
-import"./cli-da57pbjb.js";
+import"./cli-fy6vh2a7.js";
+import"./cli-c05y640n.js";
+import"./cli-qgz1q9g5.js";
+import"./cli-k2nwxta0.js";
+import"./cli-xtc2t6me.js";
+import"./cli-n2en7j5b.js";
 import {
   readExecutionMetrics,
   writeExecutionMetrics,
   runPentestWorkflow2
-} from "./cli-wqhbwkbc.js";
-import"./cli-t368gv8p.js";
-import"./cli-x0rrhg57.js";
+} from "./cli-d37a42dc.js";
+import"./cli-kb21qhvm.js";
+import"./cli-ngq9dr8n.js";
 import {
   EMPTY_SESSION_TOKEN_USAGE,
   accumulateSessionTokens
 } from "./cli-ag6jtndp.js";
-import"./cli-s82mq645.js";
+import"./cli-1ve18npr.js";
 import"./cli-qba2x69h.js";
 import {
   init_ai,
   normalizeStepUsage
-} from "./cli-a9j339n2.js";
+} from "./cli-dpsw2fe6.js";
 import"./cli-c2k4xxaw.js";
 
 // src/core/api/blackboxPentest.ts

package/build/{cli-s82mq645.js → cli-1ve18npr.js}

@@ -1,6 +1,6 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-v0d1n2j3.js";
+} from "./cli-qgz1q9g5.js";
 
 // src/core/agents/agentRuntime.ts
 function assembleAgentHooks(opts) {

package/build/{cli-d8x165mf.js → cli-3sp6nd8d.js}

@@ -8,7 +8,7 @@ import {
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-s82mq645.js";
+} from "./cli-1ve18npr.js";
 import {
   hasToolCall,
   init_dist,
@@ -16,7 +16,7 @@ import {
   init_lazyLogger,
   createLogger,
   init_structured
-} from "./cli-a9j339n2.js";
+} from "./cli-dpsw2fe6.js";
 
 // src/core/agents/specialized/authenticationAgent/agent.ts
 init_dist();

package/build/{cli-gh5c6sf9.js → cli-65g6rcat.js}

@@ -3,7 +3,7 @@ import {
 } from "./cli-h6y3bt60.js";
 
 // package.json
-var version = "2.6.1-canary.4c944004", package_default;
+var version = "2.6.1", package_default;
 var init_package = __esm(() => {
   package_default = {
     author: "Pensar",
@@ -17,6 +17,8 @@ var init_package = __esm(() => {
       "@ai-sdk/openai": "3.0.46",
       "@ai-sdk/openai-compatible": "^2.0.51",
       "@ai-sdk/provider": "^3.0.10",
+      "@aws-sdk/client-s3": "3.1146.0",
+      "@aws-sdk/lib-storage": "3.1146.0",
       "@daytona/sdk": "0.222.0",
       "@googleapis/gmail": "^16.1.2",
       "@microsoft/microsoft-graph-client": "^3.0.7",

package/build/{cli-wxkae592.js → cli-709rvekb.js}

@@ -9,12 +9,13 @@ import {
   object,
   strictObject,
   record,
+  _enum,
   json
 } from "./cli-mz5pk30x.js";
 import {
   getCurrentVersion,
   init_installation
-} from "./cli-gh5c6sf9.js";
+} from "./cli-65g6rcat.js";
 import {
   __esm
 } from "./cli-h6y3bt60.js";
@@ -71,7 +72,7 @@ function resolveCustomApiKey(provider) {
     throw new Error(`Set ${provider.apiKeyEnv} before using this custom provider.`);
   return key;
 }
-var providerIdSchema, reservedRequestFields, customModelSchema, customProviderSchema, customProvidersSchema;
+var providerIdSchema, reservedRequestFields, customModelSchema, customProviderBaseSchema, customProviderSchema, customProvidersSchema;
 var init_customProviders = __esm(() => {
   init_zod();
   providerIdSchema = string().regex(/^[a-zA-Z0-9_-]+$/);
@@ -90,12 +91,14 @@ var init_customProviders = __esm(() => {
     id: string().trim().min(1),
     name: string().trim().min(1).optional(),
     contextLength: number().int().positive(),
-    maxOutputTokens: number().int().positive()
+    maxOutputTokens: number().int().positive(),
+    reasoningEffort: _enum(["none", "minimal", "low", "medium", "high", "xhigh", "max"]).optional()
   }).refine((model) => model.maxOutputTokens < model.contextLength, {
     message: "maxOutputTokens must be smaller than contextLength"
   });
-  customProviderSchema = strictObject({
+  customProviderBaseSchema = strictObject({
     name: string().trim().min(1).optional(),
+    apiType: _enum(["chat-completions", "responses"]).optional(),
     baseUrl: string().transform((value, ctx) => {
       try {
         const url = new URL(value);
@@ -118,6 +121,28 @@ var init_customProviders = __esm(() => {
     }).optional(),
     models: array(customModelSchema).min(1).refine((models) => new Set(models.map((model) => model.id)).size === models.length, { message: "Model IDs must be unique within a provider" })
   });
+  customProviderSchema = customProviderBaseSchema.superRefine((provider, ctx) => {
+    if (provider.apiType === "responses") {
+      if (!provider.apiKeyEnv)
+        ctx.addIssue({
+          code: "custom",
+          path: ["apiKeyEnv"],
+          message: "Responses requires apiKeyEnv"
+        });
+      if (provider.requestBody)
+        ctx.addIssue({
+          code: "custom",
+          path: ["requestBody"],
+          message: "requestBody is only supported for Chat Completions"
+        });
+    } else if (provider.models.some((model) => model.reasoningEffort)) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["models"],
+        message: "reasoningEffort requires the Responses API"
+      });
+    }
+  });
   customProvidersSchema = record(providerIdSchema, customProviderSchema);
 });
 

package/build/{cli-jsvm7qaa.js → cli-7eea4e2y.js}

@@ -6,20 +6,20 @@ import {
   ALL_TOOL_NAMES2,
   SKILL_TOOL_NAMES2,
   OffensiveSecurityAgent
-} from "./cli-v0d1n2j3.js";
+} from "./cli-qgz1q9g5.js";
 import {
   config2,
   init_config
-} from "./cli-905nmz0b.js";
+} from "./cli-fy6vh2a7.js";
 import {
   init_constants
-} from "./cli-5t6n4a8w.js";
+} from "./cli-c05y640n.js";
 import {
   startAgentExecution
 } from "./cli-g06s7edq.js";
 import {
   defineAgent
-} from "./cli-s82mq645.js";
+} from "./cli-1ve18npr.js";
 import {
   toolModelMessageSchema,
   modelMessageSchema,
@@ -42,7 +42,7 @@ import {
   init_runControlStore,
   RunLimitError,
   init_runModelStore
-} from "./cli-a9j339n2.js";
+} from "./cli-dpsw2fe6.js";
 import {
   newSessionId,
   isSessionId,
@@ -71,7 +71,7 @@ import {
 import {
   getCurrentVersion,
   init_installation
-} from "./cli-gh5c6sf9.js";
+} from "./cli-65g6rcat.js";
 import {
   __commonJS,
   __require
@@ -9286,6 +9286,38 @@ async function listTargetLogs2(targetId, opts) {
 async function searchTargetLogs2(targetId, query, opts) {
   return apiRequest("POST", `/targets/${targetId}/logs/search`, { query, ...opts });
 }
+// src/core/api/knowledge.ts
+var KNOWLEDGE_CATEGORIES2 = [
+  "false_positive_pattern",
+  "technology_context",
+  "testing_history",
+  "user_note",
+  "agent_learning"
+];
+var KNOWLEDGE_STATUSES2 = ["active", "stale", "archived"];
+async function listKnowledge2(filters) {
+  const params = new URLSearchParams;
+  if (filters?.category)
+    params.set("category", filters.category);
+  if (filters?.status)
+    params.set("status", filters.status);
+  if (filters?.tags?.length)
+    params.set("tags", filters.tags.join(","));
+  const qs = params.toString();
+  return apiRequest("GET", `/knowledge${qs ? `?${qs}` : ""}`);
+}
+async function getKnowledge2(id) {
+  return apiRequest("GET", `/knowledge/${id}`);
+}
+async function createKnowledge2(input) {
+  return apiRequest("POST", "/knowledge", input);
+}
+async function updateKnowledge2(id, input) {
+  return apiRequest("PATCH", `/knowledge/${id}`, input);
+}
+async function archiveKnowledge2(id) {
+  return apiRequest("DELETE", `/knowledge/${id}`);
+}
 // src/core/api/localWorker.ts
 init_ai();
 init_config();
@@ -12654,4 +12686,4 @@ Working directory: ${input.codebasePath}`;
   return { session, outputPath: input.outputPath };
 }
 
-export { inspectSessionEvidence2, RecordedRunSpecSchema, acquireLocalRunLock, resolveRunDatabasePath, openSqliteRunStore, CLOSED_DISPOSITIONS2, listScans2, getScan2, listPentestTargets2, dispatchPentest2, listIssues2, getIssue2, updateIssue2, listIssueComments2, createIssueComment2, retestIssue2, linkPullRequest2, listIssuePullRequests2, listFixes2, getFix2, listAgentLogs2, searchAgentLogs2, listTargetLogs2, searchTargetLogs2, resolveWorkerEndpoint, LocalWorkerTransportError, WorkerConnectionError, workerRequest, runOffensiveSecurityAgent2, createOffensiveSecurityAgentClient2, runRecordedAgent2, RunRecoveryBlockedError2, resumeRecordedAgent2, serveLocalRunWorker2, buildPentestPrompt, buildThreatModelPrompt, createSkillsRegistry, runThreatModelWorkflow2 };
+export { inspectSessionEvidence2, RecordedRunSpecSchema, acquireLocalRunLock, resolveRunDatabasePath, openSqliteRunStore, CLOSED_DISPOSITIONS2, listScans2, getScan2, listPentestTargets2, dispatchPentest2, listIssues2, getIssue2, updateIssue2, listIssueComments2, createIssueComment2, retestIssue2, linkPullRequest2, listIssuePullRequests2, listFixes2, getFix2, listAgentLogs2, searchAgentLogs2, listTargetLogs2, searchTargetLogs2, KNOWLEDGE_CATEGORIES2, KNOWLEDGE_STATUSES2, listKnowledge2, getKnowledge2, createKnowledge2, updateKnowledge2, archiveKnowledge2, resolveWorkerEndpoint, LocalWorkerTransportError, WorkerConnectionError, workerRequest, runOffensiveSecurityAgent2, createOffensiveSecurityAgentClient2, runRecordedAgent2, RunRecoveryBlockedError2, resumeRecordedAgent2, serveLocalRunWorker2, buildPentestPrompt, buildThreatModelPrompt, createSkillsRegistry, runThreatModelWorkflow2 };

package/build/{cli-s4k4fxqm.js → cli-ae8jqxqr.js}

@@ -4,10 +4,10 @@ import {
   openSqliteRunStore,
   resolveWorkerEndpoint,
   workerRequest
-} from "./cli-jsvm7qaa.js";
+} from "./cli-7eea4e2y.js";
 import {
   launchLocalWorker
-} from "./cli-rvqwpdjg.js";
+} from "./cli-gx71jcke.js";
 
 // src/core/runtime/recordedRunClient.ts
 import { setTimeout as delay } from "node:timers/promises";

package/build/{cli-kw5wxxth.js → cli-az3xq70v.js}

@@ -3,7 +3,7 @@ import {
   init_lazyLogger,
   createLogger,
   init_structured
-} from "./cli-a9j339n2.js";
+} from "./cli-dpsw2fe6.js";
 
 // src/core/integrations/wandb/client.ts
 init_structured();

package/build/{cli-5t6n4a8w.js → cli-c05y640n.js}

@@ -1,7 +1,7 @@
 import {
   config2,
   init_config
-} from "./cli-905nmz0b.js";
+} from "./cli-fy6vh2a7.js";
 import {
   __esm
 } from "./cli-h6y3bt60.js";

package/build/{cli-wqhbwkbc.js → cli-d37a42dc.js}

@@ -12,24 +12,24 @@ import {
   pLimit,
   PLAN_MODE_TOOL_NAMES,
   OffensiveSecurityAgent
-} from "./cli-v0d1n2j3.js";
+} from "./cli-qgz1q9g5.js";
 import {
   BlackboxAttackSurfaceAgent2
-} from "./cli-xaxr74bm.js";
+} from "./cli-k2nwxta0.js";
 import {
   TargetedPentestAgent2,
   buildPentestSystemPrompt2
-} from "./cli-021yxmh5.js";
+} from "./cli-xtc2t6me.js";
 import {
   buildPentestReport,
   renderJson,
   renderMarkdown,
   REPORT_FILENAME_MD,
   REPORT_FILENAME_JSON
-} from "./cli-da57pbjb.js";
+} from "./cli-n2en7j5b.js";
 import {
   CodeAgent2
-} from "./cli-t368gv8p.js";
+} from "./cli-kb21qhvm.js";
 import {
   WHITEBOX_APPS_DISCOVERY_SYSTEM_PROMPT2,
   WHITEBOX_ENDPOINT_DOCUMENTATION_SYSTEM_PROMPT,
@@ -38,7 +38,7 @@ import {
   AppInfoSchema2,
   AppsDiscoveryResultSchema2,
   DiscoverySummarySchema2
-} from "./cli-x0rrhg57.js";
+} from "./cli-ngq9dr8n.js";
 import {
   createThreatModelPrompt
 } from "./cli-q126f6ef.js";
@@ -50,7 +50,7 @@ import {
   init_session,
   createLogger,
   init_structured
-} from "./cli-a9j339n2.js";
+} from "./cli-dpsw2fe6.js";
 import {
   newSessionId,
   init_id
@@ -8139,7 +8139,7 @@ async function runPentestSwarm2(input) {
 }
 async function runPentestWorkflow2(input) {
   if (input.fastStrike) {
-    const { runFastStrike } = await import("./fastStrike-xs5ny137.js");
+    const { runFastStrike } = await import("./fastStrike-mcjdvwez.js");
     return runFastStrike(input);
   }
   const {