@pensar/apex 2.6.1 → 2.7.0-canary.21cb83dc

package/build/lib/{chunk-bb0ekhkw.js → chunk-z8kej0sp.js}

@@ -1,12 +1,12 @@
 import"./chunk-7gjdygcx.js";
-import"./chunk-w66ce82a.js";
+import"./chunk-8njjwwcw.js";
 import"./chunk-jdjagvgr.js";
 import"./chunk-2njv7wz3.js";
-import"./chunk-ba41jh41.js";
+import"./chunk-kcw4cpr3.js";
 import"./chunk-8vhr65w3.js";
 import {
   OffensiveSecurityAgent2
-} from "./chunk-r4j8ybn9.js";
+} from "./chunk-hys7nemr.js";
 import"./chunk-fy3bbbqy.js";
 import"./chunk-mv74mq5n.js";
 import {
@@ -14,14 +14,14 @@ import {
   withFindingPersistedHook2,
   assertDepth2,
   inProcessSeams2
-} from "./chunk-yrnrbjes.js";
+} from "./chunk-7tft4b8b.js";
 import"./chunk-b8eq85d2.js";
 import {
   FindingsRegistry2
-} from "./chunk-1azdancq.js";
-import"./chunk-3c00n0cy.js";
+} from "./chunk-0dnx79b1.js";
+import"./chunk-77se1d35.js";
 import"./chunk-t5bt5vn1.js";
-import"./chunk-2qsq76xq.js";
+import"./chunk-qkz5sm0d.js";
 import"./chunk-eb4h4k1f.js";
 import"./chunk-vx228eeq.js";
 import"./chunk-bx94rwt5.js";
@@ -36,7 +36,7 @@ import {
   REPORT_FILENAME_MD,
   REPORT_FILENAME_JSON,
   createThreatModelPrompt
-} from "./chunk-v3dk9j7k.js";
+} from "./chunk-aq9eyxas.js";
 
 // src/core/workflows/fastStrike.ts
 import { writeFileSync } from "node:fs";
@@ -46,7 +46,18 @@ var FastStrikeResult = z.object({
   solved: z.boolean().describe("True if the objective was achieved — a vulnerability was confirmed and, where applicable, the flag or sensitive data was extracted."),
   summary: z.string().describe("Concise account of the vulnerability exploited, the exact steps that worked, and any flag or sensitive data recovered.")
 });
-var FAST_STRIKE_SYSTEM_PROMPT = `You are an elite offensive security operator running a fast strike against a single target. You work ALONE and finish the job yourself — there is no team to hand off to, no swarm to spawn, no plan to file. Your edge is discipline and observation, not volume.
+var FastStrikeExternalResult = z.object({
+  solved: z.boolean().describe("True if the supplied objective was met."),
+  summary: z.string().describe("Concise account of security findings and the evidence observed, including any flag or sensitive data extracted for an exfiltration objective."),
+  reportedFindings: z.array(z.string()).describe("One concise evidence-backed description per discovered vulnerability."),
+  submissionJson: z.string().describe("The exact task-defined JSON submission as a string, or an empty string when no JSON submission was requested. Do not invent fields.")
+});
+function buildFastStrikeSystemPrompt(findingPolicy = "native") {
+  const external = findingPolicy === "external";
+  const objectiveStep = external ? "5. FOLLOW THE OBJECTIVE — Determine whether the observed behavior establishes a security weakness. For a detection-only objective, stop once the requested evidence is sufficient; develop an exploit or pivot only when the objective requires it." : "5. EXPLOIT — When a vulnerability is confirmed, exploit it: capture the flag, extract the sensitive data, and pivot through it if the objective requires more. Preserve viable primitives and build on them. Prefer extending a working script into an end-to-end exploit over rebuilding the chain with repeated one-off tool calls or stopping at the next network or protocol boundary.";
+  const finishStep = external ? "6. REPORT & FINISH — Include each credible finding and its supporting observations in the caller's requested output. If the caller requested a JSON submission, include the exact JSON text in the response tool's submissionJson field as well; otherwise use an empty string. The caller evaluates findings after the run. Once the objective is met or credible leads are exhausted, call the response tool with the correct solved value and a concise summary." : "6. DOCUMENT & FINISH — Record each confirmed vulnerability with the document_vulnerability tool as you go. Before concluding that every credible lead is exhausted, account for each viable primitive and pursue any concrete path that could still close the objective. After this check, whether the objective was met or every credible lead was genuinely exhausted, call the response tool with the correct solved value and a concise summary.";
+  const evidenceRule = external ? "- Bias toward the shortest path that satisfies the assigned objective. Distinguish observed evidence from hypotheses, and avoid separate in-run finding review." : "- Bias toward the shortest path that proves impact. Speed comes from picking the right lead, not from skipping verification — always confirm a finding before you claim it.";
+  return `You are an elite offensive security operator running a fast strike against a single target. You work ALONE and finish the job yourself — there is no team to hand off to, no swarm to spawn, no plan to file. Your edge is discipline and observation, not volume.
 
 Run this loop, tightly:
 
@@ -54,15 +65,17 @@ Run this loop, tightly:
 2. HYPOTHESIZE — From that signal and your deep knowledge of web/app vulnerability classes, name the single most likely vulnerability and why the evidence points to it. Rank leads by signal strength and go for the strongest first. A disabled form field, an ID in a URL or JWT, advertised demo creds, an exposed schema — these are tells; read them.
 3. ACT — Test that one hypothesis with the strongest available technique. Use direct tools for quick probes, but treat the shell as a working environment rather than merely a way to issue one-off commands. When the work becomes stateful, repetitive, concurrent, protocol-heavy, or multi-stage, externalize it into an editable script in the session scratchpad directory identified in the workspace instructions. Never create a scratchpad/ directory inside the target repository. Run the script, inspect the results, modify it, and rerun it as the attack develops. For blind/out-of-band testing (SSRF, blind RCE, XSS callbacks), start_callback_listener gives you a nonce-correlated listener that survives intervening commands: embed the returned callback URL (only an address you know the target can reach — never a guessed one) in the payload, then poll_callback_listener for hits. Listener readiness and the tool's own self-test never count as target evidence; stop_callback_listener when done.
 4. PRUNE — If the evidence disproves a lead, drop it and move to the next-strongest. Do NOT re-run a disproven approach or grind a dead end. Do NOT enumerate, brute-force, or run wordlists unless a specific signal demands it — choose techniques from evidence, not from a checklist.
-5. EXPLOIT — When a vulnerability is confirmed, exploit it: capture the flag, extract the sensitive data, and pivot through it if the objective requires more. Preserve viable primitives and build on them. Prefer extending a working script into an end-to-end exploit over rebuilding the chain with repeated one-off tool calls or stopping at the next network or protocol boundary.
-6. DOCUMENT & FINISH — Record each confirmed vulnerability with the document_vulnerability tool as you go. Before concluding that every credible lead is exhausted, account for each viable primitive and pursue any concrete path that could still close the objective. After this check, whether the objective was met or every credible lead was genuinely exhausted, call the response tool with the correct solved value and a concise summary.
+${objectiveStep}
+${finishStep}
 
 Rules:
 - You are one operator. Plan in your head and in short text notes — never via planning tools, task lists, or sub-agents.
 - Recon and exploitation are the same loop. Do just enough recon to form the first hypothesis, then start testing. Do not map the entire surface before acting.
 - Spend your reasoning on choosing techniques and interpreting evidence; use scripts for deterministic mechanics, iteration, and chain execution.
-- Bias toward the shortest path that proves impact. Speed comes from picking the right lead, not from skipping verification — always confirm a finding before you claim it.
+${evidenceRule}
 - Stay in scope. Only touch the target you were given and hosts it legitimately depends on.`;
+}
+var FAST_STRIKE_SYSTEM_PROMPT = buildFastStrikeSystemPrompt();
 async function runFastStrike(input) {
   const {
     target,
@@ -75,6 +88,7 @@ async function runFastStrike(input) {
     onStepFinish,
     onCacheMetrics,
     enableThinking,
+    thinkingEffort,
     openAIReasoningEffort,
     prompt,
     threatModel,
@@ -115,6 +129,7 @@ async function runFastStrike(input) {
 ${combined}` : combined;
   }
   const operatorGuidance = session.config?.prompt;
+  const findingPolicy = input.hooks?.findingPolicy ?? input.findingPolicy;
   const mode = cwd ? "whitebox" : "blackbox";
   eventBus?.emit("workflow-phase-start", {
     phase: "pentesting",
@@ -125,14 +140,17 @@ ${combined}` : combined;
   const promptParts = [`Target: ${target}`];
   if (operatorGuidance)
     promptParts.push(operatorGuidance);
-  promptParts.push("Run the fast strike: find and exploit the vulnerability, complete the objective, and report what worked.");
+  promptParts.push(findingPolicy === "external" ? "Run the fast strike: investigate the target, identify security weaknesses, and submit the findings in the requested output. Stop when the supplied objective is met." : "Run the fast strike: find and exploit the vulnerability, complete the objective, and report what worked.");
+  if (findingPolicy === "external" && session.config?.exfilMode) {
+    promptParts.push("Exfiltration goal: locate and extract FLAG{...} or the assigned sensitive data through a confirmed weakness. Do not stop at discovery; include the extraction result in the final summary.");
+  }
   const agent = new OffensiveSecurityAgent2({
     subagentSpawner: input.subagentSpawner,
     languageModelMiddleware: input.languageModelMiddleware,
     usageRecorder: input.usageRecorder,
     streamIdFactory: input.streamIdFactory,
     ...input.hooks,
-    system: FAST_STRIKE_SYSTEM_PROMPT,
+    system: buildFastStrikeSystemPrompt(findingPolicy),
     prompt: promptParts.join(`
 
 `),
@@ -140,8 +158,9 @@ ${combined}` : combined;
     session,
     target,
     mode: "fast-strike",
+    findingPolicy,
     activeTools: [],
-    responseSchema: FastStrikeResult,
+    responseSchema: findingPolicy === "external" ? FastStrikeExternalResult : FastStrikeResult,
     findingsRegistry,
     subagentId: "fast-strike",
     authConfig,
@@ -150,6 +169,7 @@ ${combined}` : combined;
     onStepFinish,
     onCacheMetrics,
     enableThinking,
+    thinkingEffort,
     openAIReasoningEffort
   });
   eventBus?.emit("subagent-spawn", {
@@ -162,14 +182,23 @@ ${combined}` : combined;
     subagentName: "Fast Strike",
     target
   });
-  let strikeResult;
+  let completed;
   try {
-    strikeResult = await agent.consume();
+    const strikeResult = await agent.consume();
+    if (findingPolicy === "external") {
+      const parsed = FastStrikeExternalResult.safeParse(strikeResult);
+      if (!parsed.success) {
+        throw new Error("Externally graded Fast Strike ended without a structured findings response");
+      }
+      completed = { policy: "external", outcome: parsed.data };
+    } else {
+      completed = { policy: "native", outcome: strikeResult };
+    }
     eventBus?.emit("subagent-complete", {
       subagentId: "fast-strike",
       status: "completed"
     });
-    await seams.hooks.onEndpointDone?.({ subagentId: "fast-strike", subagentName: "Fast Strike", target }, strikeResult);
+    await seams.hooks.onEndpointDone?.({ subagentId: "fast-strike", subagentName: "Fast Strike", target }, completed.outcome);
   } catch (e) {
     eventBus?.emit("subagent-complete", {
       subagentId: "fast-strike",
@@ -181,8 +210,30 @@ ${combined}` : combined;
   if (abortSignal?.aborted) {
     throw new DOMException("Pentest aborted by user", "AbortError");
   }
+  if (completed.policy === "external") {
+    const strikeResult = completed.outcome;
+    eventBus?.emit("workflow-phase-complete", {
+      phase: "pentesting",
+      summary: {
+        findingsCount: strikeResult.reportedFindings.length,
+        solved: strikeResult.solved,
+        operatorSummary: strikeResult.summary
+      }
+    });
+    return {
+      findings: [],
+      findingsPath: session.findingsPath,
+      pocsPath: session.pocsPath,
+      reportPath: null,
+      reportedFindings: strikeResult.reportedFindings,
+      submissionJson: strikeResult.submissionJson,
+      solved: strikeResult.solved,
+      summary: strikeResult.summary
+    };
+  }
   await findingsRegistry.groupByRootCause();
   const findings = [...findingsRegistry.getFindings()];
+  const strikeResult = completed.outcome;
   const report = buildPentestReport(findings, {
     target,
     model,

package/build/lib/core/agents/agentRuntime.d.ts

@@ -9,7 +9,7 @@ import type { SubagentSpawner } from "./offSecAgent/subagentSpawner";
 import type { EmailAdapterResolver } from "./offSecAgent/tools/email/adapters";
 import type { UnifiedSandbox } from "./offSecAgent/tools/sandbox";
 import type { SmsInbox } from "./offSecAgent/tools/smsInbox";
-import type { StreamIdFactory } from "./offSecAgent/types";
+import type { FindingPolicy, StreamIdFactory } from "./offSecAgent/types";
 /**
  * {@link AgentHooks} with every key required (value types keep their
  * `| undefined`). Hand-listed, not mapped from {@link AgentHooks}, so that
@@ -18,6 +18,7 @@ import type { StreamIdFactory } from "./offSecAgent/types";
  * "dropping a hook is a type error".
  */
 export interface RequiredAgentHooks {
+    findingPolicy: FindingPolicy | undefined;
     backends: ToolBackends | undefined;
     subagentSpawner: SubagentSpawner | undefined;
     languageModelMiddleware: LanguageModelMiddleware | LanguageModelMiddleware[] | undefined;

package/build/lib/core/agents/defineAgent.d.ts

@@ -37,8 +37,9 @@ export interface AgentDefinition<TOpts extends SpecializedAgentInput, TResult =
     stopWhen?: (opts: TOpts, state: TState) => StopCondition<ToolSet> | StopCondition<ToolSet>[] | undefined;
     /** Extra tools this definition injects, merged on top of `opts.extraTools`. */
     extraTools?: (opts: TOpts, state: TState) => ToolSet | undefined;
-    /** Produces `consume()`'s typed result from the finished stream. */
-    resolveResult?: (opts: TOpts, state: TState, streamResult: StreamTextResult<ToolSet, never>) => TResult | Promise<TResult>;
+    /** Produces `consume()`'s typed result from the finished stream and, when
+     * the response tool executes, its schema-validated result. */
+    resolveResult?: (opts: TOpts, state: TState, streamResult: StreamTextResult<ToolSet, never>, validatedResponse?: unknown) => TResult | Promise<TResult>;
     /** Target URL/host, when this definition derives one instead of taking it verbatim from `opts`. */
     target?: (opts: TOpts, state: TState) => string | undefined;
     /** gRPC context forwarded to `spawn_pentest_agent` workers. */

package/build/lib/core/agents/offSecAgent/index.d.ts

@@ -1,9 +1,11 @@
 export type { AgentEventMap } from "../../eventBus";
 export { AgentEventBus } from "../../eventBus";
 export { OffensiveSecurityAgent } from "./offensiveSecurityAgent";
+/** Runtime marker for hosts that require Apex's externally graded finding policy. */
+export declare const EXTERNAL_FINDING_POLICY_CAPABILITY: "v1";
 export { BASE_SYSTEM_PROMPT, type BaseSystemPromptOptions, buildBaseSystemPrompt, buildProvidedFilesSection, buildSessionWorkspaceSection, } from "./prompt";
 export type { AskUserQuestion, AskUserQuestionAnswer, AskUserQuestionsResult, BrowserClickResult, BrowserConsoleResult, BrowserEngine, BrowserEvaluateResult, BrowserFillResult, BrowserNavigateResult, BrowserScreenshotResult, BrowserStorageState, BrowserToolMode, ReportedError, SandboxExecuteOptions, SandboxExecutionResult, SandboxType, ShellExecuteResult, ToolContext, ToolName, UnifiedSandbox, } from "./tools";
 export { ALL_TOOL_NAMES, ASK_USER_QUESTIONS_TOOL_NAME, AskUserQuestionSchema, addMemory, assertCommandInScope, assertUrlInScope, BROWSER_TOOL_NAMES, checkpointState, checkSandboxPlaywright, completeAuthentication, crawlAuthenticated, createAllTools, createAttackSurfaceReport, createBrowserTools, createBrowserToolset, createEmailToolset, createFile, createReportErrorTool, createResponseTool, createSandboxBrowserTools, createTask, createToolsForNames, createWorkspaceApp, createWorkspaceDomain, createWorkspaceEndpoint, delegateAuth, detectAuthScheme, documentApp, documentEndpoint, documentVulnerability, EMAIL_TOOL_NAMES, EMAIL_TOOL_NAMES_ACTIVE, ensureSandboxBrowser, ensureSandboxPlaywright, executeCommand, extractHostname, extractHostsFromCommand, extractJsEndpoints, FAST_STRIKE_EXCLUDED_TOOL_NAMES, getAllowedHosts, getMemory, getPage, grep, httpRequest, installSandboxPlaywright, isHostAllowed, listFiles, listMemories, listTasksTool, listToolRegistryNames, listWorkspaceApps, listWorkspaceDomains, listWorkspaceEndpoints, PentestReportedError, PerCommandShell, PLAN_MODE_TOOL_NAMES, PlaywrightMcpSession, parseStorageStateResult, probeAuthEndpoints, provideComparisonResults, REPORT_ERROR_TOOL_NAME, RESPONSE_TOOL_NAME, ReportErrorReasonSchema, readFile, readSkill, runAttackSurface, runPentestWorkflow, SandboxBrowserBackend, ScopeViolationError, SEND_EMAIL_TOOL_NAME, SKILL_TOOL_NAMES, SMS_LIST_MESSAGES_TOOL_NAME, SMS_TOOL_NAMES, SMS_TOOL_NAMES_ACTIVE, sessionHasSmsPasswordless, setHeadlessMode, setUserAgent, setViewportSize, spawnCodingAgent, spawnPentestAgent, spawnPentestSwarm, submitPlan, testEndpointVariations, transformScriptToFunction, updateFile, updateTask, updateWorkspaceApp, updateWorkspaceEndpoint, validateDiscovery, webSearch, writePlan, } from "./tools";
 export type { CheckpointInput, InitRecord, StateCheckpoint, StepRecord, StepTraceWriterOpts, ToolOutputType, TraceRecord, } from "./trace";
 export { StepTraceWriter } from "./trace";
-export { type AgentHooks, type AgentMode, ApexFindingObject, type CommandCancelHandle, type CreateAgentInput, type Finding, type OffensiveSecurityAgentInput, type SpecializedAgentInput, type SystemPentestScope, } from "./types";
+export { type AgentHooks, type AgentMode, ApexFindingObject, type CommandCancelHandle, type CreateAgentInput, type Finding, type FindingPolicy, type OffensiveSecurityAgentInput, type SpecializedAgentInput, type SystemPentestScope, } from "./types";

package/build/lib/core/agents/offSecAgent/index.js

@@ -4,10 +4,11 @@ import {
   buildBaseSystemPrompt2,
   BASE_SYSTEM_PROMPT2,
   StepTraceWriter2,
-  OffensiveSecurityAgent2
-} from "../../../chunk-r4j8ybn9.js";
-import"../../../chunk-3c00n0cy.js";
-import"../../../chunk-yrnrbjes.js";
+  OffensiveSecurityAgent2,
+  EXTERNAL_FINDING_POLICY_CAPABILITY2
+} from "../../../chunk-hys7nemr.js";
+import"../../../chunk-77se1d35.js";
+import"../../../chunk-7tft4b8b.js";
 import {
   AgentEventBus2
 } from "../../../chunk-7gjdygcx.js";
@@ -81,7 +82,7 @@ import {
   FAST_STRIKE_EXCLUDED_TOOL_NAMES2,
   PLAN_MODE_TOOL_NAMES2,
   SKILL_TOOL_NAMES2
-} from "../../../chunk-2qsq76xq.js";
+} from "../../../chunk-qkz5sm0d.js";
 import"../../../chunk-ja7j565c.js";
 import"../../../chunk-3q89v4xv.js";
 import {
@@ -107,15 +108,15 @@ import {
   SandboxBrowserBackend2,
   createSandboxBrowserTools2
 } from "../../../chunk-fy3bbbqy.js";
-import"../../../chunk-1azdancq.js";
+import"../../../chunk-0dnx79b1.js";
 import"../../../chunk-t5bt5vn1.js";
 import"../../../chunk-eb4h4k1f.js";
 import"../../../chunk-vx228eeq.js";
-import"../../../chunk-ba41jh41.js";
+import"../../../chunk-kcw4cpr3.js";
 import"../../../chunk-8vhr65w3.js";
 import"../../../chunk-2njv7wz3.js";
 import"../../../chunk-jdjagvgr.js";
-import"../../../chunk-w66ce82a.js";
+import"../../../chunk-8njjwwcw.js";
 import"../../../chunk-zrbqn62x.js";
 import"../../../chunk-mv74mq5n.js";
 import {
@@ -132,6 +133,7 @@ export {
   BROWSER_TOOL_NAMES2 as BROWSER_TOOL_NAMES,
   EMAIL_TOOL_NAMES2 as EMAIL_TOOL_NAMES,
   EMAIL_TOOL_NAMES2 as EMAIL_TOOL_NAMES_ACTIVE,
+  EXTERNAL_FINDING_POLICY_CAPABILITY2 as EXTERNAL_FINDING_POLICY_CAPABILITY,
   FAST_STRIKE_EXCLUDED_TOOL_NAMES2 as FAST_STRIKE_EXCLUDED_TOOL_NAMES,
   OffensiveSecurityAgent2 as OffensiveSecurityAgent,
   PLAN_MODE_TOOL_NAMES2 as PLAN_MODE_TOOL_NAMES,

package/build/lib/core/agents/offSecAgent/prompt.d.ts

@@ -1,3 +1,4 @@
+import type { FindingPolicy } from "./types";
 interface SessionPaths {
     rootPath: string;
     findingsPath: string;
@@ -20,11 +21,12 @@ interface SessionPaths {
  * `README.md` manifest.
  */
 export declare function buildProvidedFilesSection(sessionRootPath: string, fileWorkspaceRoot?: string): string;
-export declare function buildSessionWorkspaceSection(session: SessionPaths, agentCwd: string, activeTools?: readonly string[], fileWorkspaceRoot?: string): string;
+export declare function buildSessionWorkspaceSection(session: SessionPaths, agentCwd: string, activeTools?: readonly string[], fileWorkspaceRoot?: string, findingPolicy?: FindingPolicy): string;
 /** Options for building the base system prompt. */
 export interface BaseSystemPromptOptions {
     /** When true, include the "Stay in the session folder" instruction. Defaults to true. */
     sandboxMode?: boolean;
+    findingPolicy?: FindingPolicy;
 }
 export declare function buildBaseSystemPrompt(options?: BaseSystemPromptOptions): string;
 /**

package/build/lib/core/agents/offSecAgent/subagentSpawner.d.ts

@@ -13,7 +13,7 @@ import type { AuthenticationAgentInput } from "../specialized/authenticationAgen
 import type { FindingJudgeInput } from "../specialized/findingJudge";
 import type { PentestResult, TargetedPentestAgent } from "../specialized/pentest/agent";
 import type { PlaywrightMcpSession, UnifiedSandbox } from "./tools";
-import type { AgentHooks, StreamIdFactory, SystemPentestScope } from "./types";
+import type { AgentHooks, FindingPolicy, StreamIdFactory, SystemPentestScope } from "./types";
 /** Registry key selecting which child agent {@link SubagentSpawner.spawn} builds. */
 export type SubagentType = "pentest" | "code" | "whitebox-attack-surface" | "blackbox-attack-surface" | "authentication" | "finding-judge";
 /** Type-specific construction fields; the `type` also selects the registry entry. */
@@ -61,6 +61,7 @@ export type SubagentSpec = {
  * @public Consumed by Console's durable subagent runtime.
  */
 export interface SpawnRuntime {
+    findingPolicy?: FindingPolicy;
     session: SessionInfo;
     model: AIModel;
     authConfig?: AIAuthConfig;

package/build/lib/core/agents/offSecAgent/subagentSpawner.js

@@ -2,16 +2,16 @@ import {
   runSpawnedPentestWorker2,
   inProcessSubagentSpawner2,
   createInProcessSubagentSpawner2
-} from "../../../chunk-3c00n0cy.js";
-import"../../../chunk-yrnrbjes.js";
+} from "../../../chunk-77se1d35.js";
+import"../../../chunk-7tft4b8b.js";
 import"../../../chunk-7gjdygcx.js";
 import"../../../chunk-b8eq85d2.js";
-import"../../../chunk-1azdancq.js";
-import"../../../chunk-ba41jh41.js";
+import"../../../chunk-0dnx79b1.js";
+import"../../../chunk-kcw4cpr3.js";
 import"../../../chunk-8vhr65w3.js";
 import"../../../chunk-2njv7wz3.js";
 import"../../../chunk-jdjagvgr.js";
-import"../../../chunk-w66ce82a.js";
+import"../../../chunk-8njjwwcw.js";
 export {
   createInProcessSubagentSpawner2 as createInProcessSubagentSpawner,
   inProcessSubagentSpawner2 as inProcessSubagentSpawner,

package/build/lib/core/agents/offSecAgent/tools/index.js

@@ -92,7 +92,7 @@ import {
   FAST_STRIKE_EXCLUDED_TOOL_NAMES2,
   PLAN_MODE_TOOL_NAMES2,
   SKILL_TOOL_NAMES2
-} from "../../../../chunk-2qsq76xq.js";
+} from "../../../../chunk-qkz5sm0d.js";
 import"../../../../chunk-ja7j565c.js";
 import"../../../../chunk-3q89v4xv.js";
 import {
@@ -124,15 +124,15 @@ import {
   SandboxBrowserBackend2,
   createSandboxBrowserTools2
 } from "../../../../chunk-fy3bbbqy.js";
-import"../../../../chunk-1azdancq.js";
+import"../../../../chunk-0dnx79b1.js";
 import"../../../../chunk-t5bt5vn1.js";
 import"../../../../chunk-eb4h4k1f.js";
 import"../../../../chunk-vx228eeq.js";
-import"../../../../chunk-ba41jh41.js";
+import"../../../../chunk-kcw4cpr3.js";
 import"../../../../chunk-8vhr65w3.js";
 import"../../../../chunk-2njv7wz3.js";
 import"../../../../chunk-jdjagvgr.js";
-import"../../../../chunk-w66ce82a.js";
+import"../../../../chunk-8njjwwcw.js";
 import"../../../../chunk-zrbqn62x.js";
 import"../../../../chunk-mv74mq5n.js";
 import"../../../../chunk-bx94rwt5.js";

package/build/lib/core/agents/offSecAgent/tools/listMemories.d.ts

@@ -1,13 +1,23 @@
 import { type MemorySummary } from "../../../memory";
 import type { ToolContext } from "./types";
+type MemoryCursor = Pick<MemorySummary, "createdAt" | "category" | "id">;
 export type ListMemoriesResult = {
     success: boolean;
     error: string;
-    memories: MemorySummary[];
+    memories: Array<MemorySummary & {
+        truncated?: true;
+    }>;
     count: number;
+    nextCursor: MemoryCursor | null;
 };
 export declare function listMemories(ctx: ToolContext): import("ai").Tool<{
     toolCallDescription: string;
     category?: "framework" | "app" | "general" | undefined;
     tag?: string | undefined;
+    cursor?: {
+        createdAt: string;
+        category: "framework" | "app" | "general";
+        id: string;
+    } | undefined;
 }, ListMemoriesResult>;
+export {};

package/build/lib/core/agents/offSecAgent/tools/reportError.d.ts

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import type { FindingPolicy } from "../types";
 export declare const REPORT_ERROR_TOOL_NAME: "report_error";
 /** Coarse classification of why the agent cannot proceed. */
 export declare const ReportErrorReasonSchema: z.ZodEnum<{
@@ -17,7 +18,7 @@ export type ReportedError = {
  * of a successful result it surfaces a blocking error so the caller can turn
  * the run into a failure (e.g. mark a scan endpoint failed with this message).
  */
-export declare function createReportErrorTool(onError: (error: ReportedError) => void): import("ai").Tool<{
+export declare function createReportErrorTool(onError: (error: ReportedError) => void, findingPolicy?: FindingPolicy): import("ai").Tool<{
     reason: "other" | "blocked" | "authentication_failed" | "target_unreachable";
     message: string;
 }, {

package/build/lib/core/agents/offSecAgent/tools/runPentestWorkflow.d.ts

@@ -15,10 +15,27 @@ export declare function runPentestWorkflow(ctx: ToolContext): import("ai").Tool<
     success: boolean;
     message: string;
     totalFindings?: undefined;
+    reportedFindings?: undefined;
+    objectiveResults?: undefined;
+    duration?: undefined;
+    findingsPath?: undefined;
+    pocsPath?: undefined;
+    reportPath?: undefined;
+    findingsBySeverity?: undefined;
+} | {
+    success: boolean;
+    totalFindings: number;
+    reportedFindings: string[];
+    objectiveResults: {
+        objective: string;
+        completed: boolean;
+        result?: string | undefined;
+    }[];
+    duration: string;
+    message: string;
     findingsPath?: undefined;
     pocsPath?: undefined;
     reportPath?: undefined;
-    duration?: undefined;
     findingsBySeverity?: undefined;
 } | {
     success: boolean;
@@ -29,4 +46,6 @@ export declare function runPentestWorkflow(ctx: ToolContext): import("ai").Tool<
     duration: string;
     findingsBySeverity: Record<string, number>;
     message: string;
+    reportedFindings?: undefined;
+    objectiveResults?: undefined;
 }>;

package/build/lib/core/agents/offSecAgent/tools/spawnPentestAgent.d.ts

@@ -30,22 +30,19 @@ export declare function spawnPentestAgent(ctx: ToolContext): import("ai").Tool<{
     success: boolean;
     message: string;
     subagentId?: undefined;
-    findingsCount?: undefined;
-    objectiveResults?: undefined;
 } | {
-    success: boolean;
-    subagentId: string;
-    findingsCount: number;
     objectiveResults: {
         objective: string;
         completed: boolean;
         result?: string | undefined;
     }[] | undefined;
     message: string;
+    reportedFindings?: string[] | undefined;
+    success: boolean;
+    subagentId: string;
+    findingsCount: number;
 } | {
     success: boolean;
     subagentId: string;
     message: string;
-    findingsCount?: undefined;
-    objectiveResults?: undefined;
 }>;

package/build/lib/core/agents/offSecAgent/tools/spawnPentestSwarm.d.ts

@@ -44,9 +44,15 @@ export declare function spawnPentestSwarm(ctx: ToolContext): import("ai").Tool<{
     totalFindings: number;
     failedTargets: number;
     results: {
+        error: string | undefined;
+        reportedFindings?: string[] | undefined;
+        objectiveResults?: {
+            objective: string;
+            completed: boolean;
+            result?: string | undefined;
+        }[] | undefined;
         target: string;
         findingsCount: number;
-        error: string | undefined;
     }[];
     message: string;
 }>;

package/build/lib/core/agents/offSecAgent/tools/types.d.ts

@@ -11,7 +11,7 @@ import type { ToolBackends } from "../../../tools/backends/types";
 import type { GrpcPentestContext } from "../../specialized/attackSurface/grpcSchema";
 import type { SubagentSpawner } from "../subagentSpawner";
 import type { StepTraceWriter } from "../trace";
-import type { StreamIdFactory, SystemPentestScope } from "../types";
+import type { FindingPolicy, StreamIdFactory, SystemPentestScope } from "../types";
 import type { CallbackListenerRegistry } from "./callbackListener";
 import type { EmailAdapterResolver } from "./email/adapters";
 import type { PerCommandShell } from "./perCommandShell";
@@ -26,6 +26,7 @@ import type { SmsInbox } from "./smsInbox";
  * session or agent internals directly.
  */
 export type ToolContext = {
+    findingPolicy?: FindingPolicy;
     attackSurfaceArtifactsPath?: string;
     /** Session providing paths for findings, POCs, logs, scratchpad, etc. */
     session: SessionInfo;

package/build/lib/core/agents/offSecAgent/types.d.ts

@@ -76,6 +76,8 @@ export type Finding = Omit<z.infer<typeof ApexFindingObject>, "credentialIds"> &
  */
 /** Agent operating mode that controls which tools are available. */
 export type AgentMode = "default" | "plan" | "fast-strike";
+/** Selects Apex's native finding judge or a caller-owned evaluation boundary. */
+export type FindingPolicy = "native" | "external";
 /** Structured authorization envelope for a multi-application System pentest. */
 export type SystemPentestScope = {
     systemId: string;
@@ -108,6 +110,8 @@ export type StreamIdFactory = (context: StreamIdFactoryContext) => string;
  * by forgetting to list it in a hand-written constructor.
  */
 export interface AgentHooks {
+    /** External grading omits Apex's finding tool and leaves acceptance to the caller. */
+    findingPolicy?: FindingPolicy;
     /** Opt-in shared backend directory for incremental recon endpoint artifacts. */
     attackSurfaceArtifactsPath?: string;
     /** Execution backends for fs / command / http / browser / inbox. Unset means local execution. */
@@ -276,10 +280,12 @@ export type OffensiveSecurityAgentInput<TResult = void> = AgentHooks & {
      *
      * Receives the completed `StreamTextResult` — at this point all lazy
      * properties (`.steps`, `.text`, `.response`, etc.) are resolved.
+     * When the response tool executes, the optional second argument is its
+     * schema-validated result. It is absent if no response was submitted.
      *
      * If omitted, `consume()` returns `void`.
      */
-    resolveResult?: (streamResult: StreamTextResult<ToolSet, never>) => TResult | Promise<TResult>;
+    resolveResult?: (streamResult: StreamTextResult<ToolSet, never>, validatedResponse?: unknown) => TResult | Promise<TResult>;
     /** The subagent ID if this agent is a subagent */
     subagentId?: string;
     /** Display label for the OTel span name / `gen_ai.agent.name`. */

package/build/lib/core/agents/specialized/attackSurface/blackboxAgent.js

@@ -2,26 +2,26 @@ import {
   blackboxAttackSurfaceDefinition2,
   BlackboxAttackSurfaceAgent2,
   buildBlackboxPrompt2
-} from "../../../../chunk-1fy8azee.js";
-import"../../../../chunk-acgbyf5h.js";
-import"../../../../chunk-r4j8ybn9.js";
-import"../../../../chunk-3c00n0cy.js";
-import"../../../../chunk-yrnrbjes.js";
+} from "../../../../chunk-fasqtjq1.js";
+import"../../../../chunk-ydxhkgjw.js";
+import"../../../../chunk-hys7nemr.js";
+import"../../../../chunk-77se1d35.js";
+import"../../../../chunk-7tft4b8b.js";
 import"../../../../chunk-7gjdygcx.js";
 import"../../../../chunk-b8eq85d2.js";
-import"../../../../chunk-2qsq76xq.js";
+import"../../../../chunk-qkz5sm0d.js";
 import"../../../../chunk-ja7j565c.js";
 import"../../../../chunk-3q89v4xv.js";
 import"../../../../chunk-fy3bbbqy.js";
-import"../../../../chunk-1azdancq.js";
+import"../../../../chunk-0dnx79b1.js";
 import"../../../../chunk-t5bt5vn1.js";
 import"../../../../chunk-eb4h4k1f.js";
 import"../../../../chunk-vx228eeq.js";
-import"../../../../chunk-ba41jh41.js";
+import"../../../../chunk-kcw4cpr3.js";
 import"../../../../chunk-8vhr65w3.js";
 import"../../../../chunk-2njv7wz3.js";
 import"../../../../chunk-jdjagvgr.js";
-import"../../../../chunk-w66ce82a.js";
+import"../../../../chunk-8njjwwcw.js";
 import"../../../../chunk-zrbqn62x.js";
 import"../../../../chunk-mv74mq5n.js";
 import"../../../../chunk-q5e23acz.js";

package/build/lib/core/agents/specialized/attackSurface/schemas.js

@@ -1,18 +1,18 @@
 import"../../../../chunk-7gjdygcx.js";
-import"../../../../chunk-w66ce82a.js";
+import"../../../../chunk-8njjwwcw.js";
 import"../../../../chunk-jdjagvgr.js";
 import"../../../../chunk-2njv7wz3.js";
-import"../../../../chunk-ba41jh41.js";
+import"../../../../chunk-kcw4cpr3.js";
 import"../../../../chunk-8vhr65w3.js";
-import"../../../../chunk-r4j8ybn9.js";
+import"../../../../chunk-hys7nemr.js";
 import"../../../../chunk-fy3bbbqy.js";
 import"../../../../chunk-mv74mq5n.js";
-import"../../../../chunk-yrnrbjes.js";
+import"../../../../chunk-7tft4b8b.js";
 import"../../../../chunk-b8eq85d2.js";
-import"../../../../chunk-1azdancq.js";
-import"../../../../chunk-3c00n0cy.js";
+import"../../../../chunk-0dnx79b1.js";
+import"../../../../chunk-77se1d35.js";
 import"../../../../chunk-t5bt5vn1.js";
-import"../../../../chunk-2qsq76xq.js";
+import"../../../../chunk-qkz5sm0d.js";
 import"../../../../chunk-eb4h4k1f.js";
 import {
   EndpointTransportEnum2,
@@ -24,12 +24,12 @@ import"../../../../chunk-ja7j565c.js";
 import"../../../../chunk-3q89v4xv.js";
 import"../../../../chunk-zrbqn62x.js";
 import"../../../../chunk-q5e23acz.js";
-import"../../../../chunk-r2dkp4tb.js";
+import"../../../../chunk-5j8pp0xf.js";
 import {
   RiskScoreBreakdownSchema2,
   RiskScoreSchema2
 } from "../../../../chunk-xpfg2fbk.js";
-import"../../../../chunk-acgbyf5h.js";
+import"../../../../chunk-ydxhkgjw.js";
 
 // src/core/agents/specialized/attackSurface/schemas.ts
 import { z } from "zod";