@pensar/apex 2.6.1-canary.4c944004 → 2.6.1

package/build/lib/{chunk-vzc51c4z.js → chunk-9tt2021m.js}

@@ -1,26 +1,26 @@
 import {
   AuthenticationAgent2,
   runAuthenticationAgent3
-} from "./chunk-ed0hqes9.js";
-import"./chunk-fxx0c7he.js";
-import"./chunk-f09y54py.js";
-import"./chunk-vrnhexdm.js";
-import"./chunk-3haymsms.js";
+} from "./chunk-xhdpgpkm.js";
+import"./chunk-acgbyf5h.js";
+import"./chunk-r4j8ybn9.js";
+import"./chunk-3c00n0cy.js";
+import"./chunk-yrnrbjes.js";
 import"./chunk-7gjdygcx.js";
 import"./chunk-b8eq85d2.js";
-import"./chunk-yy87a24g.js";
+import"./chunk-2qsq76xq.js";
 import"./chunk-ja7j565c.js";
 import"./chunk-3q89v4xv.js";
 import"./chunk-fy3bbbqy.js";
-import"./chunk-dmznt6r6.js";
+import"./chunk-1azdancq.js";
 import"./chunk-t5bt5vn1.js";
 import"./chunk-eb4h4k1f.js";
 import"./chunk-vx228eeq.js";
-import"./chunk-7zkv27tc.js";
+import"./chunk-ba41jh41.js";
 import"./chunk-8vhr65w3.js";
 import"./chunk-2njv7wz3.js";
 import"./chunk-jdjagvgr.js";
-import"./chunk-qt87ty01.js";
+import"./chunk-w66ce82a.js";
 import"./chunk-zrbqn62x.js";
 import"./chunk-mv74mq5n.js";
 import"./chunk-q5e23acz.js";

package/build/lib/{chunk-nb0pppn2.js → chunk-9yksqgzr.js}

@@ -1,7 +1,7 @@
 import {
   getCurrentVersion,
   config2
-} from "./chunk-qt87ty01.js";
+} from "./chunk-w66ce82a.js";
 import {
   newSessionId2,
   isSessionId2
@@ -34,12 +34,12 @@ import {
   getPensarConsoleUrl2,
   buildAuthConfig2,
   normalizeStepUsage2
-} from "./chunk-7zkv27tc.js";
+} from "./chunk-ba41jh41.js";
 import {
   buildSessionWorkspaceSection2,
   buildBaseSystemPrompt2,
   OffensiveSecurityAgent2
-} from "./chunk-f09y54py.js";
+} from "./chunk-r4j8ybn9.js";
 import {
   ASK_USER_QUESTIONS_TOOL_NAME2,
   apiRequest,
@@ -62,32 +62,32 @@ import {
   createDomain2,
   ALL_TOOL_NAMES2,
   SKILL_TOOL_NAMES2
-} from "./chunk-yy87a24g.js";
+} from "./chunk-2qsq76xq.js";
 import {
   BlackboxAttackSurfaceAgent2
-} from "./chunk-kqgnc8g9.js";
+} from "./chunk-1fy8azee.js";
 import {
   runWhiteboxAttackSurfaceWorkflow2
-} from "./chunk-1090qz7m.js";
+} from "./chunk-z137x08b.js";
 import {
   runAuthenticationAgent3
-} from "./chunk-ed0hqes9.js";
+} from "./chunk-xhdpgpkm.js";
 import {
   readExecutionMetrics,
   writeExecutionMetrics,
   runPentestWorkflow2
-} from "./chunk-11w6wa26.js";
+} from "./chunk-v3dk9j7k.js";
 import {
   PatchingAgent2
-} from "./chunk-2p92hj2m.js";
+} from "./chunk-1yct6cra.js";
 import {
   startAgentExecution,
   runTargetedPentestAgent2
-} from "./chunk-s0egavst.js";
+} from "./chunk-z96pbjhd.js";
 import {
   AgentRuntime,
   defineAgent
-} from "./chunk-fxx0c7he.js";
+} from "./chunk-acgbyf5h.js";
 import {
   __export
 } from "./chunk-n0ba7khr.js";
@@ -98,6 +98,8 @@ __export(exports_api, {
   CLOSED_DISPOSITIONS: () => CLOSED_DISPOSITIONS2,
   DEFAULT_NATIVE_ROLLOUT_CAPTURE_LIMITS: () => DEFAULT_NATIVE_ROLLOUT_CAPTURE_LIMITS2,
   ENDPOINT_TRANSPORTS: () => ENDPOINT_TRANSPORTS2,
+  KNOWLEDGE_CATEGORIES: () => KNOWLEDGE_CATEGORIES2,
+  KNOWLEDGE_STATUSES: () => KNOWLEDGE_STATUSES2,
   PENSAR_API_BASE_URL: () => PENSAR_API_BASE_URL2,
   PENSAR_CONSOLE_BASE_URL: () => PENSAR_CONSOLE_BASE_URL2,
   RunRecoveryBlockedError: () => RunRecoveryBlockedError2,
@@ -105,10 +107,12 @@ __export(exports_api, {
   VulnerabilityReproductionResultSchema: () => VulnerabilityReproductionResultSchema2,
   VulnerabilityReproductionStepSchema: () => VulnerabilityReproductionStepSchema2,
   VulnerabilityReproductionVerdictSchema: () => VulnerabilityReproductionVerdictSchema2,
+  archiveKnowledge: () => archiveKnowledge2,
   createApp: () => createApp2,
   createDomain: () => createDomain2,
   createEndpoint: () => createEndpoint2,
   createIssueComment: () => createIssueComment2,
+  createKnowledge: () => createKnowledge2,
   createNativeRolloutEvidenceCapture: () => createNativeRolloutEvidenceCapture2,
   createOffensiveSecurityAgentClient: () => createOffensiveSecurityAgentClient2,
   deleteApp: () => deleteApp2,
@@ -119,6 +123,7 @@ __export(exports_api, {
   getEndpoint: () => getEndpoint2,
   getFix: () => getFix2,
   getIssue: () => getIssue2,
+  getKnowledge: () => getKnowledge2,
   getPensarApiUrl: () => getPensarApiUrl2,
   getPensarConsoleUrl: () => getPensarConsoleUrl2,
   getPensarGatewayUrl: () => getPensarGatewayUrl2,
@@ -135,6 +140,7 @@ __export(exports_api, {
   listIssueComments: () => listIssueComments2,
   listIssuePullRequests: () => listIssuePullRequests2,
   listIssues: () => listIssues2,
+  listKnowledge: () => listKnowledge2,
   listPentestTargets: () => listPentestTargets2,
   listScans: () => listScans2,
   listTargetLogs: () => listTargetLogs2,
@@ -160,7 +166,8 @@ __export(exports_api, {
   startVulnerabilityReproductionAgent: () => startVulnerabilityReproductionAgent2,
   updateApp: () => updateApp2,
   updateEndpoint: () => updateEndpoint2,
-  updateIssue: () => updateIssue2
+  updateIssue: () => updateIssue2,
+  updateKnowledge: () => updateKnowledge2
 });
 // src/core/runtime/runEvidence.ts
 import { createHash } from "node:crypto";
@@ -2552,6 +2559,38 @@ async function listTargetLogs2(targetId, opts) {
 async function searchTargetLogs2(targetId, query, opts) {
   return apiRequest("POST", `/targets/${targetId}/logs/search`, { query, ...opts });
 }
+// src/core/api/knowledge.ts
+var KNOWLEDGE_CATEGORIES2 = [
+  "false_positive_pattern",
+  "technology_context",
+  "testing_history",
+  "user_note",
+  "agent_learning"
+];
+var KNOWLEDGE_STATUSES2 = ["active", "stale", "archived"];
+async function listKnowledge2(filters) {
+  const params = new URLSearchParams;
+  if (filters?.category)
+    params.set("category", filters.category);
+  if (filters?.status)
+    params.set("status", filters.status);
+  if (filters?.tags?.length)
+    params.set("tags", filters.tags.join(","));
+  const qs = params.toString();
+  return apiRequest("GET", `/knowledge${qs ? `?${qs}` : ""}`);
+}
+async function getKnowledge2(id) {
+  return apiRequest("GET", `/knowledge/${id}`);
+}
+async function createKnowledge2(input) {
+  return apiRequest("POST", "/knowledge", input);
+}
+async function updateKnowledge2(id, input) {
+  return apiRequest("PATCH", `/knowledge/${id}`, input);
+}
+async function archiveKnowledge2(id) {
+  return apiRequest("DELETE", `/knowledge/${id}`);
+}
 // src/core/runtime/localRunWorker.ts
 import { randomUUID as randomUUID5 } from "node:crypto";
 import { unlink as unlink2 } from "node:fs/promises";
@@ -7108,4 +7147,4 @@ function startVulnerabilityReproductionAgent2(input) {
 async function runVulnerabilityReproductionAgent2(input) {
   return startVulnerabilityReproductionAgent2(input).result;
 }
-export { inspectSessionEvidence2, openSqliteRunStore2, runAttackSurfaceAgent2, runAuthenticationAgent2, runBenchmarkComparisonAgent2, runPentestAgent2, runEnvironmentAgent2, CLOSED_DISPOSITIONS2, listScans2, getScan2, listPentestTargets2, dispatchPentest2, listIssues2, getIssue2, updateIssue2, listIssueComments2, createIssueComment2, retestIssue2, linkPullRequest2, listIssuePullRequests2, listFixes2, getFix2, listAgentLogs2, searchAgentLogs2, listTargetLogs2, searchTargetLogs2, runOffensiveSecurityAgent2, createOffensiveSecurityAgentClient2, runRecordedAgent2, RunRecoveryBlockedError2, resumeRecordedAgent2, serveLocalRunWorker2, runPatchingAgent2, runThreatModelWorkflow2, TrajectoryExportError2, exportTrajectoryBundle2, VulnerabilityReproductionVerdictSchema2, VulnerabilityReproductionStepSchema2, VulnerabilityReproductionResultSchema2, startVulnerabilityReproductionAgent2, runVulnerabilityReproductionAgent2, exports_api };
+export { inspectSessionEvidence2, openSqliteRunStore2, runAttackSurfaceAgent2, runAuthenticationAgent2, runBenchmarkComparisonAgent2, runPentestAgent2, runEnvironmentAgent2, CLOSED_DISPOSITIONS2, listScans2, getScan2, listPentestTargets2, dispatchPentest2, listIssues2, getIssue2, updateIssue2, listIssueComments2, createIssueComment2, retestIssue2, linkPullRequest2, listIssuePullRequests2, listFixes2, getFix2, listAgentLogs2, searchAgentLogs2, listTargetLogs2, searchTargetLogs2, KNOWLEDGE_CATEGORIES2, KNOWLEDGE_STATUSES2, listKnowledge2, getKnowledge2, createKnowledge2, updateKnowledge2, archiveKnowledge2, runOffensiveSecurityAgent2, createOffensiveSecurityAgentClient2, runRecordedAgent2, RunRecoveryBlockedError2, resumeRecordedAgent2, serveLocalRunWorker2, runPatchingAgent2, runThreatModelWorkflow2, TrajectoryExportError2, exportTrajectoryBundle2, VulnerabilityReproductionVerdictSchema2, VulnerabilityReproductionStepSchema2, VulnerabilityReproductionResultSchema2, startVulnerabilityReproductionAgent2, runVulnerabilityReproductionAgent2, exports_api };

package/build/lib/{chunk-fxx0c7he.js → chunk-acgbyf5h.js}

@@ -1,6 +1,6 @@
 import {
   OffensiveSecurityAgent2
-} from "./chunk-f09y54py.js";
+} from "./chunk-r4j8ybn9.js";
 
 // src/core/agents/agentRuntime.ts
 function assembleAgentHooks(opts) {

package/build/lib/{chunk-7zkv27tc.js → chunk-ba41jh41.js}

@@ -6,7 +6,7 @@ import {
   resolveHoonifyModel,
   getCurrentVersion,
   config2
-} from "./chunk-qt87ty01.js";
+} from "./chunk-w66ce82a.js";
 import {
   schema2,
   descending2,
@@ -118,7 +118,7 @@ import {
   generateText as generateText2,
   Output,
   streamText,
-  wrapLanguageModel as wrapLanguageModel3
+  wrapLanguageModel as wrapLanguageModel4
 } from "ai";
 
 // src/core/logger/index.ts
@@ -5399,14 +5399,14 @@ import { createAmazonBedrock } from "@ai-sdk/amazon-bedrock";
 import { createBedrockMantle } from "@ai-sdk/amazon-bedrock/mantle";
 import { createAnthropic as createAnthropic2 } from "@ai-sdk/anthropic";
 import { createGoogleGenerativeAI } from "@ai-sdk/google";
-import { createOpenAI as createOpenAI2 } from "@ai-sdk/openai";
+import { createOpenAI as createOpenAI3 } from "@ai-sdk/openai";
 import { createOpenAICompatible as createOpenAICompatible3 } from "@ai-sdk/openai-compatible";
 import { createOpenRouter } from "@openrouter/ai-sdk-provider";
 import {
   defaultSettingsMiddleware,
   generateText,
   simulateStreamingMiddleware,
-  wrapLanguageModel as wrapLanguageModel2
+  wrapLanguageModel as wrapLanguageModel3
 } from "ai";
 
 // src/core/api/constants.ts
@@ -5573,9 +5573,45 @@ function createAnthropicModel(modelId, apiKey) {
 }
 
 // src/core/ai/providers/custom.ts
+import { createOpenAI as createOpenAI2 } from "@ai-sdk/openai";
 import { createOpenAICompatible } from "@ai-sdk/openai-compatible";
+import { wrapLanguageModel as wrapLanguageModel2 } from "ai";
 function createCustomModel(id, providers) {
   const { providerId, provider, model } = resolveCustomModel(id, providers);
+  if (provider.apiType === "responses") {
+    if (!provider.apiKeyEnv)
+      throw new Error("Responses custom providers require apiKeyEnv.");
+    if (provider.requestBody)
+      throw new Error("requestBody is only supported for Chat Completions.");
+    const responsesModel = createOpenAI2({
+      name: `custom-${providerId}`,
+      baseURL: provider.baseUrl,
+      apiKey: resolveCustomApiKey(provider),
+      headers: provider.headers
+    }).responses(model.id);
+    return wrapLanguageModel2({
+      model: responsesModel,
+      middleware: {
+        specificationVersion: "v3",
+        transformParams: async ({ params }) => ({
+          ...params,
+          maxOutputTokens: Math.min(params.maxOutputTokens ?? model.maxOutputTokens, model.maxOutputTokens),
+          ...model.reasoningEffort && {
+            providerOptions: {
+              ...params.providerOptions,
+              openai: {
+                ...params.providerOptions?.openai,
+                forceReasoning: true,
+                reasoningEffort: model.reasoningEffort
+              }
+            }
+          }
+        })
+      }
+    });
+  }
+  if (model.reasoningEffort)
+    throw new Error("reasoningEffort requires the Responses API.");
   return createOpenAICompatible({
     name: `custom-${providerId}`,
     baseURL: provider.baseUrl,
@@ -6719,13 +6755,13 @@ function getProviderModel2(model, authConfig) {
         models: authConfig?.hoonifyModels
       });
     case "openai": {
-      const openai = createOpenAI2({
+      const openai = createOpenAI3({
         apiKey: openAiAPIKey,
         fetch: /^gpt-5\.5-pro(?:-|$)/.test(model) ? fetchOpenAIPro : undefined
       });
       providerModel = openai.responses(model);
       if (/^gpt-6[.-]/.test(model)) {
-        providerModel = wrapLanguageModel2({
+        providerModel = wrapLanguageModel3({
           model: providerModel,
           middleware: defaultSettingsMiddleware({
             settings: {
@@ -6737,7 +6773,7 @@ function getProviderModel2(model, authConfig) {
         });
       }
       if (/^gpt-5\.5-pro(?:-|$)/.test(model)) {
-        providerModel = wrapLanguageModel2({
+        providerModel = wrapLanguageModel3({
           model: providerModel,
           middleware: simulateStreamingMiddleware()
         });
@@ -6846,7 +6882,7 @@ function getProviderModel2(model, authConfig) {
       break;
     }
     case "local":
-      providerModel = createOpenAI2({
+      providerModel = createOpenAI3({
         baseURL: localBaseURL,
         apiKey: ""
       }).chat(model);
@@ -7818,7 +7854,7 @@ function streamResponseWithinOperation(opts, nativeRecovery) {
       operationKind: "agent.stream",
       sessionId
     });
-    return languageModelMiddleware ? wrapLanguageModel3({
+    return languageModelMiddleware ? wrapLanguageModel4({
       model: baseProviderModel,
       middleware: languageModelMiddleware
     }) : baseProviderModel;
@@ -8109,7 +8145,7 @@ async function generateObjectResponseWithinRecorder(opts) {
     operationKind: nativeRolloutOperation(opts.operation),
     sessionId
   });
-  const providerModel = languageModelMiddleware ? wrapLanguageModel3({
+  const providerModel = languageModelMiddleware ? wrapLanguageModel4({
     model: baseProviderModel,
     middleware: languageModelMiddleware
   }) : baseProviderModel;

package/build/lib/{chunk-wtht1nmq.js → chunk-bb0ekhkw.js}

@@ -1,12 +1,12 @@
 import"./chunk-7gjdygcx.js";
-import"./chunk-qt87ty01.js";
+import"./chunk-w66ce82a.js";
 import"./chunk-jdjagvgr.js";
 import"./chunk-2njv7wz3.js";
-import"./chunk-7zkv27tc.js";
+import"./chunk-ba41jh41.js";
 import"./chunk-8vhr65w3.js";
 import {
   OffensiveSecurityAgent2
-} from "./chunk-f09y54py.js";
+} from "./chunk-r4j8ybn9.js";
 import"./chunk-fy3bbbqy.js";
 import"./chunk-mv74mq5n.js";
 import {
@@ -14,14 +14,14 @@ import {
   withFindingPersistedHook2,
   assertDepth2,
   inProcessSeams2
-} from "./chunk-3haymsms.js";
+} from "./chunk-yrnrbjes.js";
 import"./chunk-b8eq85d2.js";
 import {
   FindingsRegistry2
-} from "./chunk-dmznt6r6.js";
-import"./chunk-vrnhexdm.js";
+} from "./chunk-1azdancq.js";
+import"./chunk-3c00n0cy.js";
 import"./chunk-t5bt5vn1.js";
-import"./chunk-yy87a24g.js";
+import"./chunk-2qsq76xq.js";
 import"./chunk-eb4h4k1f.js";
 import"./chunk-vx228eeq.js";
 import"./chunk-bx94rwt5.js";
@@ -36,7 +36,7 @@ import {
   REPORT_FILENAME_MD,
   REPORT_FILENAME_JSON,
   createThreatModelPrompt
-} from "./chunk-11w6wa26.js";
+} from "./chunk-v3dk9j7k.js";
 
 // src/core/workflows/fastStrike.ts
 import { writeFileSync } from "node:fs";

package/build/lib/{chunk-4vsr549z.js → chunk-e8yy2k73.js}

@@ -6,7 +6,7 @@ import {
   normalizeMessages2,
   createLogger,
   scopedLogger
-} from "./chunk-7zkv27tc.js";
+} from "./chunk-ba41jh41.js";
 import {
   __export
 } from "./chunk-n0ba7khr.js";

package/build/lib/{chunk-ahtg1ytr.js → chunk-mg03jdmt.js}

@@ -7,7 +7,7 @@ import {
   PATCHING_ACTIVE_TOOLS2,
   readAgentsMd2,
   PatchingAgent2
-} from "./chunk-2p92hj2m.js";
+} from "./chunk-1yct6cra.js";
 import {
   __export
 } from "./chunk-n0ba7khr.js";

package/build/lib/{chunk-mtbmjfys.js → chunk-nhfax4gb.js}

@@ -1,7 +1,7 @@
 import {
   createLogger,
   scopedLogger
-} from "./chunk-7zkv27tc.js";
+} from "./chunk-ba41jh41.js";
 import {
   __export
 } from "./chunk-n0ba7khr.js";

package/build/lib/{chunk-ss77exdk.js → chunk-r2dkp4tb.js}

@@ -10,7 +10,7 @@ import {
 import {
   AgentRuntime,
   defineAgent
-} from "./chunk-fxx0c7he.js";
+} from "./chunk-acgbyf5h.js";
 import {
   __export
 } from "./chunk-n0ba7khr.js";

package/build/lib/{chunk-f09y54py.js → chunk-r4j8ybn9.js}

@@ -19,7 +19,7 @@ import {
   scopedLogger,
   normalizeStepUsage2,
   streamResponse2
-} from "./chunk-7zkv27tc.js";
+} from "./chunk-ba41jh41.js";
 import {
   PerCommandShell2,
   resolveBrowserHeaderPolicy2,
@@ -47,7 +47,7 @@ import {
 } from "./chunk-fy3bbbqy.js";
 import {
   inProcessSubagentSpawner2
-} from "./chunk-vrnhexdm.js";
+} from "./chunk-3c00n0cy.js";
 import {
   addMemory2,
   ASK_USER_QUESTIONS_TOOL_NAME2,
@@ -120,7 +120,7 @@ import {
   FAST_STRIKE_EXCLUDED_TOOL_NAMES2,
   PLAN_MODE_TOOL_NAMES2,
   SKILL_TOOL_NAMES2
-} from "./chunk-yy87a24g.js";
+} from "./chunk-2qsq76xq.js";
 import {
   ApexFindingObject2
 } from "./chunk-q5e23acz.js";

package/build/lib/{chunk-11w6wa26.js → chunk-v3dk9j7k.js}

@@ -1,26 +1,26 @@
 import {
   createLogger,
   scopedLogger
-} from "./chunk-7zkv27tc.js";
+} from "./chunk-ba41jh41.js";
 import {
   OffensiveSecurityAgent2
-} from "./chunk-f09y54py.js";
+} from "./chunk-r4j8ybn9.js";
 import {
   inMemoryRegistryProvider2,
   withFindingPersistedHook2,
   assertDepth2,
   inProcessSeams2,
   resolveItemHooks2
-} from "./chunk-3haymsms.js";
+} from "./chunk-yrnrbjes.js";
 import {
   FindingsRegistry2
-} from "./chunk-dmznt6r6.js";
+} from "./chunk-1azdancq.js";
 import {
   inProcessSubagentSpawner2
-} from "./chunk-vrnhexdm.js";
+} from "./chunk-3c00n0cy.js";
 import {
   PLAN_MODE_TOOL_NAMES2
-} from "./chunk-yy87a24g.js";
+} from "./chunk-2qsq76xq.js";
 import {
   toGrpcPentestContext,
   grpcAuthorityTarget
@@ -36,11 +36,11 @@ import {
 } from "./chunk-q5e23acz.js";
 import {
   BlackboxAttackSurfaceAgent2
-} from "./chunk-kqgnc8g9.js";
+} from "./chunk-1fy8azee.js";
 import {
   TargetedPentestAgent2,
   buildPentestSystemPrompt2
-} from "./chunk-jmxdxsm8.js";
+} from "./chunk-1jvwqnem.js";
 import {
   loadSubagentMessages2,
   saveSubagentData2,
@@ -51,10 +51,10 @@ import {
   finalizeManifest2,
   updateManifestEntryStatus2,
   getCompletedAgentIds2
-} from "./chunk-4vsr549z.js";
+} from "./chunk-e8yy2k73.js";
 import {
   runWhiteboxAttackSurfaceWorkflow2
-} from "./chunk-1090qz7m.js";
+} from "./chunk-z137x08b.js";
 
 // src/core/session/execution-metrics.ts
 import { existsSync, readFileSync, writeFileSync } from "node:fs";
@@ -672,7 +672,7 @@ async function runPentestSwarm2(input) {
 }
 async function runPentestWorkflow2(input) {
   if (input.fastStrike) {
-    const { runFastStrike } = await import("./chunk-wtht1nmq.js");
+    const { runFastStrike } = await import("./chunk-bb0ekhkw.js");
     return runFastStrike(input);
   }
   const {

package/build/lib/{chunk-qt87ty01.js → chunk-w66ce82a.js}

@@ -16,12 +16,14 @@ var customModelSchema = z.strictObject({
   id: z.string().trim().min(1),
   name: z.string().trim().min(1).optional(),
   contextLength: z.number().int().positive(),
-  maxOutputTokens: z.number().int().positive()
+  maxOutputTokens: z.number().int().positive(),
+  reasoningEffort: z.enum(["none", "minimal", "low", "medium", "high", "xhigh", "max"]).optional()
 }).refine((model) => model.maxOutputTokens < model.contextLength, {
   message: "maxOutputTokens must be smaller than contextLength"
 });
-var customProviderSchema = z.strictObject({
+var customProviderBaseSchema = z.strictObject({
   name: z.string().trim().min(1).optional(),
+  apiType: z.enum(["chat-completions", "responses"]).optional(),
   baseUrl: z.string().transform((value, ctx) => {
     try {
       const url = new URL(value);
@@ -44,6 +46,28 @@ var customProviderSchema = z.strictObject({
   }).optional(),
   models: z.array(customModelSchema).min(1).refine((models) => new Set(models.map((model) => model.id)).size === models.length, { message: "Model IDs must be unique within a provider" })
 });
+var customProviderSchema = customProviderBaseSchema.superRefine((provider, ctx) => {
+  if (provider.apiType === "responses") {
+    if (!provider.apiKeyEnv)
+      ctx.addIssue({
+        code: "custom",
+        path: ["apiKeyEnv"],
+        message: "Responses requires apiKeyEnv"
+      });
+    if (provider.requestBody)
+      ctx.addIssue({
+        code: "custom",
+        path: ["requestBody"],
+        message: "requestBody is only supported for Chat Completions"
+      });
+  } else if (provider.models.some((model) => model.reasoningEffort)) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["models"],
+      message: "reasoningEffort requires the Responses API"
+    });
+  }
+});
 var customProvidersSchema = z.record(providerIdSchema, customProviderSchema);
 function parseCustomProviders(value) {
   const parsed = customProvidersSchema.safeParse(value);
@@ -217,6 +241,8 @@ var package_default = {
     "@ai-sdk/openai": "3.0.46",
     "@ai-sdk/openai-compatible": "^2.0.51",
     "@ai-sdk/provider": "^3.0.10",
+    "@aws-sdk/client-s3": "3.1146.0",
+    "@aws-sdk/lib-storage": "3.1146.0",
     "@daytona/sdk": "0.222.0",
     "@googleapis/gmail": "^16.1.2",
     "@microsoft/microsoft-graph-client": "^3.0.7",
@@ -549,7 +575,7 @@ var package_default = {
     tsc: "tsc --noEmit"
   },
   type: "module",
-  version: "2.6.1-canary.4c944004"
+  version: "2.6.1"
 };
 
 // src/core/installation/index.ts

package/build/lib/{chunk-ed0hqes9.js → chunk-xhdpgpkm.js}

@@ -1,7 +1,7 @@
 import {
   createLogger,
   scopedLogger
-} from "./chunk-7zkv27tc.js";
+} from "./chunk-ba41jh41.js";
 import {
   GOOGLE_SIGNIN_PROMPT_GUIDANCE,
   browserEngineForGoogleSignIn
@@ -12,7 +12,7 @@ import {
 import {
   AgentRuntime,
   defineAgent
-} from "./chunk-fxx0c7he.js";
+} from "./chunk-acgbyf5h.js";
 
 // src/core/agents/specialized/authenticationAgent/agent.ts
 import { existsSync, readFileSync } from "node:fs";

package/build/lib/{chunk-3haymsms.js → chunk-yrnrbjes.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-jdjagvgr.js";
 import {
   FindingsRegistry2
-} from "./chunk-dmznt6r6.js";
+} from "./chunk-1azdancq.js";
 
 // src/core/utils/concurrency.ts
 import { context } from "@opentelemetry/api";

package/build/lib/{chunk-1090qz7m.js → chunk-z137x08b.js}

@@ -4,26 +4,26 @@ import {
 import {
   createLogger,
   scopedLogger
-} from "./chunk-7zkv27tc.js";
+} from "./chunk-ba41jh41.js";
 import {
   assertDepth2,
   inProcessSeams2,
   resolveItemHooks2
-} from "./chunk-3haymsms.js";
+} from "./chunk-yrnrbjes.js";
 import {
   inProcessSubagentSpawner2
-} from "./chunk-vrnhexdm.js";
+} from "./chunk-3c00n0cy.js";
 import {
   collectCommand
 } from "./chunk-fy3bbbqy.js";
 import {
   CodeAgent2
-} from "./chunk-gmw7vx6r.js";
+} from "./chunk-4hwzqthr.js";
 import {
   WHITEBOX_APPS_DISCOVERY_SYSTEM_PROMPT2,
   WHITEBOX_ENDPOINT_DOCUMENTATION_SYSTEM_PROMPT,
   WHITEBOX_DISCOVERY_SYSTEM_PROMPT2
-} from "./chunk-ss77exdk.js";
+} from "./chunk-r2dkp4tb.js";
 import {
   EndpointSchema2,
   AppInfoSchema2,

package/build/lib/{chunk-s0egavst.js → chunk-z96pbjhd.js}

@@ -1,6 +1,6 @@
 import {
   TargetedPentestAgent2
-} from "./chunk-jmxdxsm8.js";
+} from "./chunk-1jvwqnem.js";
 
 // src/core/runtime/agentExecution.ts
 function startAgentExecution(agent) {