@pensar/apex 2.6.1 → 2.7.0-canary.21cb83dc

package/build/lib/core/agents/specialized/authenticationAgent/index.js

@@ -18,30 +18,30 @@ import {
   ProbeAuthEndpointsInputSchema2,
   ProbeRegistrationInputSchema2,
   AttemptRegistrationInputSchema2
-} from "../../../../chunk-7pwa92rn.js";
+} from "../../../../chunk-j9668h16.js";
 import {
   AuthenticationAgent2,
   runAuthenticationAgent3
-} from "../../../../chunk-xhdpgpkm.js";
-import"../../../../chunk-acgbyf5h.js";
-import"../../../../chunk-r4j8ybn9.js";
-import"../../../../chunk-3c00n0cy.js";
-import"../../../../chunk-yrnrbjes.js";
+} from "../../../../chunk-mbsde9d0.js";
+import"../../../../chunk-ydxhkgjw.js";
+import"../../../../chunk-hys7nemr.js";
+import"../../../../chunk-77se1d35.js";
+import"../../../../chunk-7tft4b8b.js";
 import"../../../../chunk-7gjdygcx.js";
 import"../../../../chunk-b8eq85d2.js";
-import"../../../../chunk-2qsq76xq.js";
+import"../../../../chunk-qkz5sm0d.js";
 import"../../../../chunk-ja7j565c.js";
 import"../../../../chunk-3q89v4xv.js";
 import"../../../../chunk-fy3bbbqy.js";
-import"../../../../chunk-1azdancq.js";
+import"../../../../chunk-0dnx79b1.js";
 import"../../../../chunk-t5bt5vn1.js";
 import"../../../../chunk-eb4h4k1f.js";
 import"../../../../chunk-vx228eeq.js";
-import"../../../../chunk-ba41jh41.js";
+import"../../../../chunk-kcw4cpr3.js";
 import"../../../../chunk-8vhr65w3.js";
 import"../../../../chunk-2njv7wz3.js";
 import"../../../../chunk-jdjagvgr.js";
-import"../../../../chunk-w66ce82a.js";
+import"../../../../chunk-8njjwwcw.js";
 import"../../../../chunk-zrbqn62x.js";
 import"../../../../chunk-mv74mq5n.js";
 import"../../../../chunk-q5e23acz.js";

package/build/lib/core/agents/specialized/codeAgent/agent.js

@@ -1,26 +1,26 @@
 import {
   codeAgentDefinition2,
   CodeAgent2
-} from "../../../../chunk-4hwzqthr.js";
-import"../../../../chunk-acgbyf5h.js";
-import"../../../../chunk-r4j8ybn9.js";
-import"../../../../chunk-3c00n0cy.js";
-import"../../../../chunk-yrnrbjes.js";
+} from "../../../../chunk-161ak2am.js";
+import"../../../../chunk-ydxhkgjw.js";
+import"../../../../chunk-hys7nemr.js";
+import"../../../../chunk-77se1d35.js";
+import"../../../../chunk-7tft4b8b.js";
 import"../../../../chunk-7gjdygcx.js";
 import"../../../../chunk-b8eq85d2.js";
-import"../../../../chunk-2qsq76xq.js";
+import"../../../../chunk-qkz5sm0d.js";
 import"../../../../chunk-ja7j565c.js";
 import"../../../../chunk-3q89v4xv.js";
 import"../../../../chunk-fy3bbbqy.js";
-import"../../../../chunk-1azdancq.js";
+import"../../../../chunk-0dnx79b1.js";
 import"../../../../chunk-t5bt5vn1.js";
 import"../../../../chunk-eb4h4k1f.js";
 import"../../../../chunk-vx228eeq.js";
-import"../../../../chunk-ba41jh41.js";
+import"../../../../chunk-kcw4cpr3.js";
 import"../../../../chunk-8vhr65w3.js";
 import"../../../../chunk-2njv7wz3.js";
 import"../../../../chunk-jdjagvgr.js";
-import"../../../../chunk-w66ce82a.js";
+import"../../../../chunk-8njjwwcw.js";
 import"../../../../chunk-zrbqn62x.js";
 import"../../../../chunk-mv74mq5n.js";
 import"../../../../chunk-q5e23acz.js";

package/build/lib/core/agents/specialized/codeAgent/prompts.d.ts

@@ -1 +1,2 @@
 export declare const CODE_AGENT_SYSTEM_PROMPT = "You are an expert coding agent with direct filesystem access. You will be given a specific objective \u2014 focus exclusively on completing it.\n\n# Tool Usage Guide\n\nYou have the following tools. Use them strategically to accomplish your objective:\n\n## read_file\nRead the contents of any file. You can read the whole file or a specific line range.\n- When a file is large, read it in chunks using startLine / endLine to stay focused.\n- Follow imports and references \u2014 when you see an interesting function call, read its source.\n\n## list_files\nList files and directories. Use this to orient yourself in the codebase.\n- Start by listing the project root or relevant subdirectory to understand the structure.\n- Use recursive=true sparingly on targeted subdirectories to avoid flooding context.\n\n## grep\nSearch file contents by pattern. This is your most powerful navigation tool.\n- Use it to find function definitions, usages, imports, and references.\n- Use -i for case-insensitive searches.\n- Use --include=\"*.ext\" to narrow to relevant file types.\n- Use -C 3 or -C 5 to get context around matches.\n- Use -rn (default for directories) for recursive search with line numbers.\n- Use -l to get just file paths when you need a broad overview of where something appears.\n\n## execute_command\nRun shell commands when needed.\n- Use for any task that benefits from shell access: build tools, git operations, package managers, linters, etc.\n- Useful for running scripts, checking dependencies, inspecting git history, or any CLI tool.\n\n## Whitebox security tools (when investigating vulnerabilities)\n- **profile_codebase** \u2014 summarize languages, manifests, scanners, and repo shape; full JSON is written as a session artifact.\n- **query_whitebox_catalog** \u2014 pull focused methodology slices (sinks, scanners, review passes) instead of loading a whole playbook into context.\n- **run_code_query** \u2014 batched rg / ast-grep / comby searches with bounded output and artifact logs.\n- **run_whitebox_scan** \u2014 run installed scanners when available; triage results before treating them as confirmed issues.\n- **create_whitebox_candidate / update_whitebox_candidate / list_whitebox_candidates** \u2014 track hypotheses with explicit state and evidence.\n- **start_whitebox_job / poll_whitebox_job / stop_whitebox_job** \u2014 bounded long-running jobs (builds, fuzzers) with logs under the session.\n- **read_whitebox_artifact** \u2014 read `logs/whitebox/` or `scratchpad/whitebox/` artifact paths returned by other tools (or legacy job logs by id).\n\nPrefer catalog + code_query for sink-first work; use candidates to separate unverified ideas from `document_vulnerability`. Do not modify the target repo unless the operator asked you to \u2014 keep harnesses and scratch output in the session scratchpad.\n\n# Working Approach\n1. **Orient first** \u2014 list files and read key entry points to understand the structure before diving in.\n2. **Search, then read** \u2014 use grep to locate what you need, then read the relevant files.\n3. **Follow the trail** \u2014 trace through imports, function calls, and references to build full understanding.\n4. **Stay focused** \u2014 stick to your objective. Don't wander into unrelated areas of the codebase.\n5. **Be thorough** \u2014 don't stop at the first match. Make sure you've covered everything relevant to the objective.\n";
+export declare const CODE_AGENT_EXTERNAL_SYSTEM_PROMPT: string;

package/build/lib/core/agents/specialized/findingJudge/agent.js

@@ -1,18 +1,18 @@
 import"../../../../chunk-7gjdygcx.js";
-import"../../../../chunk-w66ce82a.js";
+import"../../../../chunk-8njjwwcw.js";
 import"../../../../chunk-jdjagvgr.js";
 import"../../../../chunk-2njv7wz3.js";
-import"../../../../chunk-ba41jh41.js";
+import"../../../../chunk-kcw4cpr3.js";
 import"../../../../chunk-8vhr65w3.js";
-import"../../../../chunk-r4j8ybn9.js";
+import"../../../../chunk-hys7nemr.js";
 import"../../../../chunk-fy3bbbqy.js";
 import"../../../../chunk-mv74mq5n.js";
-import"../../../../chunk-yrnrbjes.js";
+import"../../../../chunk-7tft4b8b.js";
 import"../../../../chunk-b8eq85d2.js";
-import"../../../../chunk-1azdancq.js";
-import"../../../../chunk-3c00n0cy.js";
+import"../../../../chunk-0dnx79b1.js";
+import"../../../../chunk-77se1d35.js";
 import"../../../../chunk-t5bt5vn1.js";
-import"../../../../chunk-2qsq76xq.js";
+import"../../../../chunk-qkz5sm0d.js";
 import"../../../../chunk-eb4h4k1f.js";
 import"../../../../chunk-vx228eeq.js";
 import"../../../../chunk-bx94rwt5.js";
@@ -23,7 +23,7 @@ import"../../../../chunk-q5e23acz.js";
 import {
   AgentRuntime,
   defineAgent
-} from "../../../../chunk-acgbyf5h.js";
+} from "../../../../chunk-ydxhkgjw.js";
 
 // src/core/agents/specialized/findingJudge/agent.ts
 import { stepCountIs } from "ai";

package/build/lib/core/agents/specialized/findingJudge/index.js

@@ -1,12 +1,12 @@
 import {
   judgeFinding2,
   createJudgeFailureResult2
-} from "../../../../chunk-nhfax4gb.js";
-import"../../../../chunk-ba41jh41.js";
+} from "../../../../chunk-rfyjqybp.js";
+import"../../../../chunk-kcw4cpr3.js";
 import"../../../../chunk-8vhr65w3.js";
 import"../../../../chunk-2njv7wz3.js";
 import"../../../../chunk-jdjagvgr.js";
-import"../../../../chunk-w66ce82a.js";
+import"../../../../chunk-8njjwwcw.js";
 export {
   createJudgeFailureResult2 as createJudgeFailureResult,
   judgeFinding2 as judgeFinding

package/build/lib/core/agents/specialized/patching/index.js

@@ -1,4 +1,4 @@
-import"../../../../chunk-mg03jdmt.js";
+import"../../../../chunk-vsnwzne5.js";
 import {
   buildSystemPrompt2,
   PATCHING_SYSTEM_PROMPT2,
@@ -8,26 +8,26 @@ import {
   PATCHING_ACTIVE_TOOLS2,
   readAgentsMd2,
   PatchingAgent2
-} from "../../../../chunk-1yct6cra.js";
-import"../../../../chunk-acgbyf5h.js";
-import"../../../../chunk-r4j8ybn9.js";
-import"../../../../chunk-3c00n0cy.js";
-import"../../../../chunk-yrnrbjes.js";
+} from "../../../../chunk-3hjvdf67.js";
+import"../../../../chunk-ydxhkgjw.js";
+import"../../../../chunk-hys7nemr.js";
+import"../../../../chunk-77se1d35.js";
+import"../../../../chunk-7tft4b8b.js";
 import"../../../../chunk-7gjdygcx.js";
 import"../../../../chunk-b8eq85d2.js";
-import"../../../../chunk-2qsq76xq.js";
+import"../../../../chunk-qkz5sm0d.js";
 import"../../../../chunk-ja7j565c.js";
 import"../../../../chunk-3q89v4xv.js";
 import"../../../../chunk-fy3bbbqy.js";
-import"../../../../chunk-1azdancq.js";
+import"../../../../chunk-0dnx79b1.js";
 import"../../../../chunk-t5bt5vn1.js";
 import"../../../../chunk-eb4h4k1f.js";
 import"../../../../chunk-vx228eeq.js";
-import"../../../../chunk-ba41jh41.js";
+import"../../../../chunk-kcw4cpr3.js";
 import"../../../../chunk-8vhr65w3.js";
 import"../../../../chunk-2njv7wz3.js";
 import"../../../../chunk-jdjagvgr.js";
-import"../../../../chunk-w66ce82a.js";
+import"../../../../chunk-8njjwwcw.js";
 import"../../../../chunk-zrbqn62x.js";
 import"../../../../chunk-mv74mq5n.js";
 import"../../../../chunk-q5e23acz.js";

package/build/lib/core/agents/specialized/pentest/agent.d.ts

@@ -1,7 +1,7 @@
 import { z } from "zod";
 import type { FindingsRegistry } from "../../../findings/registry";
 import { AgentRuntime } from "../../agentRuntime";
-import { type AgentMode, type Finding, type ReportedError, type SpecializedAgentInput, type SystemPentestScope } from "../../offSecAgent";
+import { type AgentMode, type Finding, type FindingPolicy, type ReportedError, type SpecializedAgentInput, type SystemPentestScope } from "../../offSecAgent";
 import type { GrpcPentestContext } from "../attackSurface/grpcSchema";
 /**
  * Operating role for a {@link TargetedPentestAgent} instance.
@@ -73,6 +73,8 @@ export interface PentestAgentInput extends SpecializedAgentInput {
 export interface PentestResult {
     /** All findings discovered during the run */
     findings: Finding[];
+    /** Concise findings handed to an external evaluator, without native judging. */
+    reportedFindings?: string[];
     /** Absolute path to the session's findings directory */
     findingsPath: string;
     /** Absolute path to the session's POC scripts directory */
@@ -100,6 +102,18 @@ export declare const PentestResponseSchema: z.ZodObject<{
     newObjectives: z.ZodOptional<z.ZodArray<z.ZodString>>;
     noFindingsReason: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+export declare const PentestExternalResponseSchema: z.ZodObject<{
+    summary: z.ZodString;
+    objectivesCovered: z.ZodArray<z.ZodString>;
+    newObjectives: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    objectiveResults: z.ZodArray<z.ZodObject<{
+        objective: z.ZodString;
+        completed: z.ZodBoolean;
+        result: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    reportedFindings: z.ZodArray<z.ZodString>;
+    noFindingsReason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
 /** Per-construction scratch state: the resolved role/mode (defaulted once)
  * and the terminal blocking-error escape hatch shared between `extraTools`'
  * `report_error` callback and `resolveResult`. */
@@ -155,7 +169,7 @@ export declare function buildPentestSystemPrompt(session: {
         allowRateLimitTesting?: boolean;
         codebasePath?: string;
     };
-}, role?: PentestAgentRole, mode?: TargetedPentestMode, systemScope?: SystemPentestScope, helperWorkspaceRoot?: string): string;
+}, role?: PentestAgentRole, mode?: TargetedPentestMode, systemScope?: SystemPentestScope, helperWorkspaceRoot?: string, findingPolicy?: FindingPolicy): string;
 export declare function buildPentestPrompt(target: string, objectives: string[], session: {
     rootPath: string;
     config?: {
@@ -163,10 +177,10 @@ export declare function buildPentestPrompt(target: string, objectives: string[],
         outcomeGuidance?: string;
         taskDriven?: boolean;
     };
-}, findingsRegistry?: FindingsRegistry, context?: string, envVarNames?: string[], subagentId?: string, role?: PentestAgentRole, credentialContext?: string, grpc?: GrpcPentestContext, mode?: TargetedPentestMode): string;
+}, findingsRegistry?: FindingsRegistry, context?: string, envVarNames?: string[], subagentId?: string, role?: PentestAgentRole, credentialContext?: string, grpc?: GrpcPentestContext, mode?: TargetedPentestMode, findingPolicy?: FindingPolicy): string;
 export declare function buildPentestActiveTools(role: PentestAgentRole, session: {
     config?: {
         taskDriven?: boolean;
         promptInjectionLibrarySource?: string;
     };
-}): string[];
+}, findingPolicy?: FindingPolicy): string[];

package/build/lib/core/agents/specialized/pentest/agent.js

@@ -1,37 +1,39 @@
 import {
   resolvePentestAgentRole2,
   PentestResponseSchema2,
+  PentestExternalResponseSchema2,
   resolvePentestBrowserEngine2,
   targetedPentestWorker2,
   TargetedPentestAgent2,
   buildPentestSystemPrompt2,
   buildPentestPrompt2,
   buildPentestActiveTools2
-} from "../../../../chunk-1jvwqnem.js";
-import"../../../../chunk-acgbyf5h.js";
-import"../../../../chunk-r4j8ybn9.js";
-import"../../../../chunk-3c00n0cy.js";
-import"../../../../chunk-yrnrbjes.js";
+} from "../../../../chunk-gm3b9j4y.js";
+import"../../../../chunk-ydxhkgjw.js";
+import"../../../../chunk-hys7nemr.js";
+import"../../../../chunk-77se1d35.js";
+import"../../../../chunk-7tft4b8b.js";
 import"../../../../chunk-7gjdygcx.js";
 import"../../../../chunk-b8eq85d2.js";
-import"../../../../chunk-2qsq76xq.js";
+import"../../../../chunk-qkz5sm0d.js";
 import"../../../../chunk-ja7j565c.js";
 import"../../../../chunk-3q89v4xv.js";
 import"../../../../chunk-fy3bbbqy.js";
-import"../../../../chunk-1azdancq.js";
+import"../../../../chunk-0dnx79b1.js";
 import"../../../../chunk-t5bt5vn1.js";
 import"../../../../chunk-eb4h4k1f.js";
 import"../../../../chunk-vx228eeq.js";
-import"../../../../chunk-ba41jh41.js";
+import"../../../../chunk-kcw4cpr3.js";
 import"../../../../chunk-8vhr65w3.js";
 import"../../../../chunk-2njv7wz3.js";
 import"../../../../chunk-jdjagvgr.js";
-import"../../../../chunk-w66ce82a.js";
+import"../../../../chunk-8njjwwcw.js";
 import"../../../../chunk-zrbqn62x.js";
 import"../../../../chunk-mv74mq5n.js";
 import"../../../../chunk-q5e23acz.js";
 import"../../../../chunk-bx94rwt5.js";
 export {
+  PentestExternalResponseSchema2 as PentestExternalResponseSchema,
   PentestResponseSchema2 as PentestResponseSchema,
   TargetedPentestAgent2 as TargetedPentestAgent,
   buildPentestActiveTools2 as buildPentestActiveTools,

package/build/lib/core/agents/specialized/whiteboxAttackSurface/index.js

@@ -2,7 +2,7 @@ import {
   WHITEBOX_APPS_DISCOVERY_SYSTEM_PROMPT2,
   WHITEBOX_DISCOVERY_SYSTEM_PROMPT2,
   WhiteboxAttackSurfaceAgent2
-} from "../../../../chunk-r2dkp4tb.js";
+} from "../../../../chunk-5j8pp0xf.js";
 import {
   RiskScoreBreakdownSchema2,
   RiskScoreSchema2,
@@ -11,25 +11,25 @@ import {
   AppsDiscoveryResultSchema2,
   DiscoverySummarySchema2
 } from "../../../../chunk-xpfg2fbk.js";
-import"../../../../chunk-acgbyf5h.js";
-import"../../../../chunk-r4j8ybn9.js";
-import"../../../../chunk-3c00n0cy.js";
-import"../../../../chunk-yrnrbjes.js";
+import"../../../../chunk-ydxhkgjw.js";
+import"../../../../chunk-hys7nemr.js";
+import"../../../../chunk-77se1d35.js";
+import"../../../../chunk-7tft4b8b.js";
 import"../../../../chunk-7gjdygcx.js";
 import"../../../../chunk-b8eq85d2.js";
-import"../../../../chunk-2qsq76xq.js";
+import"../../../../chunk-qkz5sm0d.js";
 import"../../../../chunk-ja7j565c.js";
 import"../../../../chunk-3q89v4xv.js";
 import"../../../../chunk-fy3bbbqy.js";
-import"../../../../chunk-1azdancq.js";
+import"../../../../chunk-0dnx79b1.js";
 import"../../../../chunk-t5bt5vn1.js";
 import"../../../../chunk-eb4h4k1f.js";
 import"../../../../chunk-vx228eeq.js";
-import"../../../../chunk-ba41jh41.js";
+import"../../../../chunk-kcw4cpr3.js";
 import"../../../../chunk-8vhr65w3.js";
 import"../../../../chunk-2njv7wz3.js";
 import"../../../../chunk-jdjagvgr.js";
-import"../../../../chunk-w66ce82a.js";
+import"../../../../chunk-8njjwwcw.js";
 import"../../../../chunk-zrbqn62x.js";
 import"../../../../chunk-mv74mq5n.js";
 import"../../../../chunk-q5e23acz.js";

package/build/lib/core/ai/ai.d.ts

@@ -9,6 +9,7 @@ import { type AiTelemetryOperation } from "../observability";
 import type { RunContextRecorder } from "../runtime/runContext";
 import { type CompactionLink, type CompactionTrigger } from "./compactionTelemetry";
 import { type InferenceRecorder } from "./inference-attempt";
+import { type ClaudeThinkingEffort } from "./models";
 import { type AIAuthConfig } from "./utils";
 /**
  * Whether tool-call repair must fail closed (no argument synthesis) for a tool.
@@ -20,11 +21,11 @@ export type OpenAIReasoningEffort = "none" | "low" | "medium" | "high" | "xhigh"
 export declare const DEFAULT_OPENAI_REASONING_EFFORT: OpenAIReasoningEffort;
 /**
  * Anthropic adaptive-thinking effort hint. Soft guidance for how much the model
- * reasons (see AWS "adaptive thinking"): `low` minimizes thinking, `max`
- * reasons hardest (`high` is the model default). Only meaningful for models that
- * support adaptive thinking (Claude Opus/Sonnet 4.6+); ignored elsewhere.
+ * reasons (see AWS "adaptive thinking"): `low` minimizes thinking while
+ * `xhigh` and `max` allow progressively deeper work. Only meaningful for
+ * models that support adaptive thinking; ignored elsewhere.
  */
-export type ThinkingEffort = "low" | "medium" | "high" | "xhigh" | "max";
+export type ThinkingEffort = ClaudeThinkingEffort;
 /** Per-step billing context attached to a usage report, attributing cost to a specific `(sessionId, stepSeq)`. */
 export interface UsageStepContext {
     sessionId?: string;
@@ -186,6 +187,15 @@ export type ReasoningProviderOptions = {
             type: "adaptive";
             display: "summarized";
             maxReasoningEffort?: ThinkingEffort;
+        } | {
+            type: "disabled";
+        };
+        /** Explicitly forwarded for Anthropic because the Bedrock SDK currently
+         * drops reasoningConfig.type="disabled" instead of sending it. */
+        additionalModelRequestFields?: {
+            thinking: {
+                type: "disabled";
+            };
         };
     };
     openai?: OpenAIResponsesProviderOptions;
@@ -224,8 +234,8 @@ export declare function buildReasoningProviderOptions(model: AIModel, opts: {
     enableThinking?: boolean;
     /**
      * Adaptive-thinking effort hint for Anthropic models that support it
-     * (Opus/Sonnet 4.6+). Ignored on models without adaptive support. When
-     * omitted the model uses its own default (`high`).
+     * Ignored on models without adaptive support. When omitted, models in the
+     * Claude capability registry use their documented provider default.
      */
     thinkingEffort?: ThinkingEffort | null;
     openAIReasoningEffort?: OpenAIReasoningEffort | null;
@@ -262,6 +272,11 @@ export interface StreamResponseOpts {
      * new messages (not the full pre-summarization history).
      */
     onSummarized?: (summary: string) => void;
+    /** The fitted context and prior generated-message count for transcript writers. */
+    onContextPrepared?: (context: {
+        messages: ModelMessage[];
+        responseMessageOffset: number;
+    }) => void;
     /**
      * Deprecated host shim: fires only when a cache counter is `> 0`.
      * Apex internals read cache from {@link normalizeStepUsage} on the step.
@@ -296,6 +311,8 @@ export interface StreamResponseOpts {
         last?: CompactionLink;
     };
     _compactionTrigger?: CompactionTrigger;
+    _proactiveSummaryMayFit?: boolean;
+    _proactiveSummaryFailures?: number;
 }
 export declare function streamResponse(opts: StreamResponseOpts): StreamTextResult<ToolSet, never>;
 export interface GenerateObjectOpts<T extends z.ZodType> {

package/build/lib/core/ai/ai.js

@@ -29,11 +29,11 @@ import {
   streamResponse2,
   generateObjectResponse2,
   ContextLengthExhaustedError2
-} from "../../chunk-ba41jh41.js";
+} from "../../chunk-kcw4cpr3.js";
 import"../../chunk-8vhr65w3.js";
 import"../../chunk-2njv7wz3.js";
 import"../../chunk-jdjagvgr.js";
-import"../../chunk-w66ce82a.js";
+import"../../chunk-8njjwwcw.js";
 export {
   ContextLengthExhaustedError2 as ContextLengthExhaustedError,
   DEFAULT_OPENAI_REASONING_EFFORT2 as DEFAULT_OPENAI_REASONING_EFFORT,

package/build/lib/core/ai/index.js

@@ -31,11 +31,11 @@ import {
   MAX_RECENT_MODELS2,
   addRecentModelId2,
   getRecentModels2
-} from "../../chunk-ba41jh41.js";
+} from "../../chunk-kcw4cpr3.js";
 import"../../chunk-8vhr65w3.js";
 import"../../chunk-2njv7wz3.js";
 import"../../chunk-jdjagvgr.js";
-import"../../chunk-w66ce82a.js";
+import"../../chunk-8njjwwcw.js";
 export {
   AVAILABLE_MODELS2 as AVAILABLE_MODELS,
   DEFAULT_NATIVE_ROLLOUT_CAPTURE_LIMITS2 as DEFAULT_NATIVE_ROLLOUT_CAPTURE_LIMITS,

package/build/lib/core/ai/models/claude-capabilities.d.ts

@@ -1,6 +1,7 @@
-type ClaudeCapabilities = {
+export type ClaudeThinkingEffort = "low" | "medium" | "high" | "xhigh" | "max";
+export type ClaudeCapabilities = {
     alwaysOnThinking: boolean;
     bindsThinking?: boolean;
+    defaultEffort: ClaudeThinkingEffort;
 };
 export declare function getClaudeCapabilities(modelId: string): ClaudeCapabilities | undefined;
-export {};

package/build/lib/core/ai/models/concentrate.d.ts

@@ -1,2 +1,3 @@
 import type { ModelInfo } from "../ai";
+export declare const CONCENTRATE_MAX_OUTPUT_TOKENS: Readonly<Record<string, number>>;
 export declare const CONCENTRATE_MODELS: ModelInfo[];

package/build/lib/core/ai/models/index.d.ts

@@ -1,7 +1,7 @@
 import { type CustomProviders } from "../../config/customProviders";
 import { type HoonifyModel } from "../../hoonify";
 import type { AIModel, ModelInfo } from "../ai";
-export { getClaudeCapabilities } from "./claude-capabilities";
+export { type ClaudeThinkingEffort, getClaudeCapabilities, } from "./claude-capabilities";
 export declare const AVAILABLE_MODELS: ModelInfo[];
 export declare function getModelInfo(model: AIModel): ModelInfo;
 /**

package/build/lib/core/ai/providers/concentrate.d.ts

@@ -1,6 +1,7 @@
 import { type LanguageModelV3 } from "@ai-sdk/provider";
 export declare const CONCENTRATE_BASE_URL = "https://api.concentrate.ai/v1";
 export declare const CONCENTRATE_GLM_5_3_MODEL_ID = "concentrate:glm-5.3";
+export declare const CONCENTRATE_REASONING_MODEL_IDS: ReadonlySet<string>;
 export type ConcentrateFetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
 export declare function createConcentrateFetch(fetchFn?: ConcentrateFetch): ConcentrateFetch;
 export declare function createConcentrateModel(modelId: string, options: {

package/build/lib/core/ai/utils.d.ts

@@ -3,6 +3,8 @@ import { type LanguageModel, type ModelMessage, type StreamTextResult, type Text
 import type { CustomProviders } from "../config/customProviders";
 import type { HoonifyModel } from "../hoonify";
 import { type AIModel, type StreamResponseOpts } from "./ai";
+export declare class CompactionRejectedError extends Error {
+}
 /**
  * Check if a model is served by a provider that speaks Anthropic's thinking
  * options — direct Anthropic, AWS Bedrock, and the Pensar gateway (which routes

package/build/lib/core/ai/utils.js

@@ -1,4 +1,5 @@
 import {
+  CompactionRejectedError2,
   isAnthropicProvider2,
   buildStreamingFetchSignal2,
   buildAuthConfig2,
@@ -6,12 +7,13 @@ import {
   checkIfContextLengthError2,
   createSummarizationStream2,
   consumeStream2
-} from "../../chunk-ba41jh41.js";
+} from "../../chunk-kcw4cpr3.js";
 import"../../chunk-8vhr65w3.js";
 import"../../chunk-2njv7wz3.js";
 import"../../chunk-jdjagvgr.js";
-import"../../chunk-w66ce82a.js";
+import"../../chunk-8njjwwcw.js";
 export {
+  CompactionRejectedError2 as CompactionRejectedError,
   buildAuthConfig2 as buildAuthConfig,
   buildStreamingFetchSignal2 as buildStreamingFetchSignal,
   checkIfContextLengthError2 as checkIfContextLengthError,

package/build/lib/core/api/index.d.ts

@@ -1,3 +1,5 @@
+export type { FindingPolicy, OffensiveSecurityAgentInput, } from "../agents/offSecAgent";
+export { EXTERNAL_FINDING_POLICY_CAPABILITY } from "../agents/offSecAgent";
 export type { CreateNativeRolloutEvidenceCaptureInput, NativeRolloutCaptureLimits, NativeRolloutCaptureReportV1, NativeRolloutEvidenceCapture, NativeRolloutEvidenceEnvelopeV1, NativeRolloutEvidenceSink, NativeRolloutModelContext, } from "../ai";
 export { createNativeRolloutEvidenceCapture, DEFAULT_NATIVE_ROLLOUT_CAPTURE_LIMITS, } from "../ai";
 export type { RunCheckpointStore, SessionEvidence, } from "../runtime/runCheckpointStore";
@@ -8,6 +10,7 @@ export type { RecordedModelAttempt, RecordedRetry, RunModelStore, } from "../run
 export type { RecordedRunSpec, RunRecord, RunStore } from "../runtime/runStore";
 export type { RecordedToolInput, RecordedToolOperation, RecordedToolPolicy, RunToolStore, } from "../runtime/runToolStore";
 export { openSqliteRunStore } from "../runtime/sqliteRunStore";
+export type { PentestWorkflowInput, PentestWorkflowResult, } from "../workflows/pentest";
 export type { AppDetail, ApplicationType, AppSummary, CreateAppInput, CreateEndpointInput, DeleteResult, EndpointDetail, EndpointSummary, EndpointTransport, EndpointType, ListAppsOptions, ListAppsPage, ListEndpointsFilters, ListEndpointsPage, SearchAppsOptions, SearchAppsResult, SearchEndpointsOptions, SearchEndpointsResult, UpdateAppInput, UpdateEndpointInput, } from "./apps";
 export { createApp, createEndpoint, deleteApp, deleteEndpoint, ENDPOINT_TRANSPORTS, getApp, getEndpoint, listApps, listAppsAll, listEndpoints, listEndpointsAll, searchApps, searchEndpoints, updateApp, updateEndpoint, } from "./apps";
 export type { AttackSurfaceInput } from "./attackSurface";

package/build/lib/core/api/index.js

@@ -47,24 +47,26 @@ import {
   VulnerabilityReproductionResultSchema2,
   startVulnerabilityReproductionAgent2,
   runVulnerabilityReproductionAgent2
-} from "../../chunk-9yksqgzr.js";
-import"../../chunk-v3dk9j7k.js";
-import"../../chunk-z137x08b.js";
-import"../../chunk-e8yy2k73.js";
+} from "../../chunk-mpvjfvz0.js";
+import"../../chunk-aq9eyxas.js";
+import"../../chunk-1rqbhx4b.js";
+import"../../chunk-f3sq4896.js";
 import {
   runTargetedPentestAgent2
-} from "../../chunk-z96pbjhd.js";
-import"../../chunk-r2dkp4tb.js";
+} from "../../chunk-m4swxy5r.js";
+import"../../chunk-5j8pp0xf.js";
 import"../../chunk-xpfg2fbk.js";
-import"../../chunk-xhdpgpkm.js";
-import"../../chunk-4hwzqthr.js";
-import"../../chunk-1yct6cra.js";
-import"../../chunk-1jvwqnem.js";
-import"../../chunk-1fy8azee.js";
-import"../../chunk-acgbyf5h.js";
-import"../../chunk-r4j8ybn9.js";
-import"../../chunk-3c00n0cy.js";
-import"../../chunk-yrnrbjes.js";
+import"../../chunk-mbsde9d0.js";
+import"../../chunk-161ak2am.js";
+import"../../chunk-3hjvdf67.js";
+import"../../chunk-gm3b9j4y.js";
+import"../../chunk-fasqtjq1.js";
+import"../../chunk-ydxhkgjw.js";
+import {
+  EXTERNAL_FINDING_POLICY_CAPABILITY2
+} from "../../chunk-hys7nemr.js";
+import"../../chunk-77se1d35.js";
+import"../../chunk-7tft4b8b.js";
 import"../../chunk-7gjdygcx.js";
 import"../../chunk-b8eq85d2.js";
 import {
@@ -85,11 +87,11 @@ import {
   searchEndpoints2,
   listDomains2,
   createDomain2
-} from "../../chunk-2qsq76xq.js";
+} from "../../chunk-qkz5sm0d.js";
 import"../../chunk-ja7j565c.js";
 import"../../chunk-3q89v4xv.js";
 import"../../chunk-fy3bbbqy.js";
-import"../../chunk-1azdancq.js";
+import"../../chunk-0dnx79b1.js";
 import"../../chunk-t5bt5vn1.js";
 import"../../chunk-eb4h4k1f.js";
 import"../../chunk-vx228eeq.js";
@@ -101,11 +103,11 @@ import {
   getPensarApiUrl2,
   getPensarGatewayUrl2,
   getPensarConsoleUrl2
-} from "../../chunk-ba41jh41.js";
+} from "../../chunk-kcw4cpr3.js";
 import"../../chunk-8vhr65w3.js";
 import"../../chunk-2njv7wz3.js";
 import"../../chunk-jdjagvgr.js";
-import"../../chunk-w66ce82a.js";
+import"../../chunk-8njjwwcw.js";
 import"../../chunk-zrbqn62x.js";
 import"../../chunk-mv74mq5n.js";
 import"../../chunk-q5e23acz.js";
@@ -114,6 +116,7 @@ export {
   CLOSED_DISPOSITIONS2 as CLOSED_DISPOSITIONS,
   DEFAULT_NATIVE_ROLLOUT_CAPTURE_LIMITS2 as DEFAULT_NATIVE_ROLLOUT_CAPTURE_LIMITS,
   ENDPOINT_TRANSPORTS2 as ENDPOINT_TRANSPORTS,
+  EXTERNAL_FINDING_POLICY_CAPABILITY2 as EXTERNAL_FINDING_POLICY_CAPABILITY,
   KNOWLEDGE_CATEGORIES2 as KNOWLEDGE_CATEGORIES,
   KNOWLEDGE_STATUSES2 as KNOWLEDGE_STATUSES,
   PENSAR_API_BASE_URL2 as PENSAR_API_BASE_URL,

package/build/lib/core/api/targetedPentest.d.ts

@@ -2,6 +2,7 @@ import { type PentestAgentInput, type PentestResult } from "../agents/specialize
 import { type AgentExecutionHandle } from "../runtime/agentExecution";
 export type TargetedPentestResult = {
     findings: PentestResult["findings"];
+    reportedFindings?: string[];
     findingsPath?: string;
     pocsPath?: string;
     objectiveResults?: PentestResult["objectiveResults"];