@pensar/apex 2.6.1 → 2.7.0-canary.21cb83dc

package/build/{index-je6hcsqr.js → index-6nejymsc.js}

@@ -3,7 +3,7 @@ import {
   get2,
   update2,
   init_config2
-} from "./cli-709rvekb.js";
+} from "./cli-zbbtr4sb.js";
 
 // src/core/config/index.ts
 init_config2();

package/build/{index-fv64eb32.js → index-asm4y7e4.js}

@@ -14,8 +14,8 @@ import {
   createWorkspaceSelection2,
   pollWorkspaceSelection2,
   init_auth
-} from "./cli-c05y640n.js";
-import"./cli-fy6vh2a7.js";
+} from "./cli-9jscnhtg.js";
+import"./cli-98wmmphf.js";
 init_auth();
 
 export {

package/build/{index-n65z6v7b.js → index-bfmn52za.js}

@@ -6,14 +6,14 @@ import {
   AppsDiscoveryResultSchema2,
   DiscoverySummarySchema2,
   WhiteboxAttackSurfaceAgent2
-} from "./cli-ngq9dr8n.js";
-import"./cli-1ve18npr.js";
+} from "./cli-fdrrbb9p.js";
+import"./cli-72y76bpg.js";
 import"./cli-qba2x69h.js";
-import"./cli-qgz1q9g5.js";
-import"./cli-dpsw2fe6.js";
-import"./cli-c05y640n.js";
+import"./cli-t4q4t4dx.js";
+import"./cli-a6x4jm5a.js";
+import"./cli-9jscnhtg.js";
 import"./cli-c2k4xxaw.js";
-import"./cli-fy6vh2a7.js";
+import"./cli-98wmmphf.js";
 export {
   AppInfoSchema2 as AppInfoSchema,
   AppsDiscoveryResultSchema2 as AppsDiscoveryResultSchema,

package/build/{index-qv4cc65p.js → index-bt4r13q7.js}

@@ -32,16 +32,16 @@ import {
   RunRecoveryBlockedError2,
   resumeRecordedAgent2,
   serveLocalRunWorker2
-} from "./cli-7eea4e2y.js";
+} from "./cli-5ab346kd.js";
 import"./cli-xcy2vxj2.js";
-import"./cli-d37a42dc.js";
-import"./cli-n2en7j5b.js";
-import"./cli-ngq9dr8n.js";
-import"./cli-k2nwxta0.js";
-import"./cli-3sp6nd8d.js";
-import"./cli-xtc2t6me.js";
-import"./cli-kb21qhvm.js";
-import"./cli-1ve18npr.js";
+import"./cli-9pz9wjt2.js";
+import"./cli-z7ysyrr4.js";
+import"./cli-fdrrbb9p.js";
+import"./cli-t09zj814.js";
+import"./cli-9kk9tm58.js";
+import"./cli-vdd1s3x9.js";
+import"./cli-1pmfnz1a.js";
+import"./cli-72y76bpg.js";
 import"./cli-qba2x69h.js";
 import {
   ENDPOINT_TRANSPORTS2,
@@ -59,14 +59,14 @@ import {
   searchEndpoints2,
   listDomains2,
   createDomain2
-} from "./cli-qgz1q9g5.js";
-import"./cli-dpsw2fe6.js";
+} from "./cli-t4q4t4dx.js";
+import"./cli-a6x4jm5a.js";
 import {
   getPensarApiUrl2,
   getPensarConsoleUrl2
-} from "./cli-c05y640n.js";
+} from "./cli-9jscnhtg.js";
 import"./cli-c2k4xxaw.js";
-import"./cli-fy6vh2a7.js";
+import"./cli-98wmmphf.js";
 export {
   CLOSED_DISPOSITIONS2 as CLOSED_DISPOSITIONS,
   ENDPOINT_TRANSPORTS2 as ENDPOINT_TRANSPORTS,

package/build/{index-dr3tg1w3.js → index-gfq1rp1q.js}

@@ -1,7 +1,7 @@
 import {
   config2,
   init_config
-} from "./cli-fy6vh2a7.js";
+} from "./cli-98wmmphf.js";
 init_config();
 
 export {

package/build/{index-wqetp6gq.js → index-j9pxgrzd.js}

@@ -1,5 +1,5 @@
-import"./cli-fy6vh2a7.js";
-import"./cli-c05y640n.js";
+import"./cli-98wmmphf.js";
+import"./cli-9jscnhtg.js";
 import {
   generateRandomName,
   generateSessionName,
@@ -16,7 +16,7 @@ import {
   init_storage,
   ToolsetStateSchema,
   init_toolset
-} from "./cli-dpsw2fe6.js";
+} from "./cli-a6x4jm5a.js";
 import {
   schema,
   descending,
@@ -41,7 +41,7 @@ import {
 import {
   getCurrentVersion,
   init_installation
-} from "./cli-65g6rcat.js";
+} from "./cli-w9nw2a4z.js";
 
 // src/core/session/index.ts
 init_zod();
@@ -91,7 +91,8 @@ var OperatorSettingsObject = object({
   initialMode: _enum(["plan", "manual", "auto"]).default("manual"),
   requireApproval: boolean().default(true),
   enableSuggestions: boolean().default(true),
-  strikeMode: boolean().optional()
+  strikeMode: boolean().optional(),
+  findingPolicy: _enum(["native", "external"]).optional()
 });
 var EmailInboxConfigObject = discriminatedUnion("provider", [
   object({
@@ -336,7 +337,7 @@ async function create(input) {
   } else if (input.inheritEnvironmentConfig === false) {
     snapshotHeaders = {};
   } else {
-    const { config: appConfig } = await import("./index-dr3tg1w3.js");
+    const { config: appConfig } = await import("./index-gfq1rp1q.js");
     const cfg = await appConfig.get();
     snapshotHeaders = cfg.defaultHeaders ? { ...cfg.defaultHeaders } : { ...DEFAULT_HEADER_RECORD };
   }
@@ -527,7 +528,8 @@ async function updateOperatorSettings(sessionId, settings) {
         initialMode: "manual",
         requireApproval: true,
         enableSuggestions: true,
-        strikeMode: false
+        strikeMode: false,
+        findingPolicy: "native"
       };
     }
     if (settings.initialMode !== undefined) {
@@ -542,6 +544,9 @@ async function updateOperatorSettings(sessionId, settings) {
     if (settings.strikeMode !== undefined) {
       session.config.operatorSettings.strikeMode = settings.strikeMode;
     }
+    if (settings.findingPolicy !== undefined) {
+      session.config.operatorSettings.findingPolicy = settings.findingPolicy;
+    }
   });
 }
 async function updateSessionHeaders(sessionId, headers) {

package/build/{index-r9yjkfrv.js → index-n9kapn1x.js}

@@ -1,10 +1,10 @@
 import {
   ALL_TOOL_NAMES2,
   SKILL_TOOL_NAMES2
-} from "./cli-qgz1q9g5.js";
-import"./cli-fy6vh2a7.js";
-import"./cli-c05y640n.js";
-import"./cli-dpsw2fe6.js";
+} from "./cli-t4q4t4dx.js";
+import"./cli-98wmmphf.js";
+import"./cli-9jscnhtg.js";
+import"./cli-a6x4jm5a.js";
 import"./cli-c2k4xxaw.js";
 export {
   ALL_TOOL_NAMES2 as ALL_TOOL_NAMES,

package/build/{index-ns4m4s01.js → index-tr6evhyg.js}

@@ -1,11 +1,11 @@
-import"./cli-fy6vh2a7.js";
-import"./cli-c05y640n.js";
+import"./cli-98wmmphf.js";
+import"./cli-9jscnhtg.js";
 import {
   scopedLogger,
   init_lazyLogger,
   createLogger,
   init_structured
-} from "./cli-dpsw2fe6.js";
+} from "./cli-a6x4jm5a.js";
 import"./cli-c2k4xxaw.js";
 
 // src/core/agents/specialized/findingJudge/index.ts
@@ -14,7 +14,7 @@ init_lazyLogger();
 var log = scopedLogger(() => createLogger("FindingJudge"));
 async function judgeFinding(input, ctx) {
   try {
-    const { FindingJudgeAgent } = await import("./agent-ayreaj6z.js");
+    const { FindingJudgeAgent } = await import("./agent-qvreg8a4.js");
     const agent = new FindingJudgeAgent({
       finding: input,
       model: ctx.model,

package/build/{issues-eb3q9d3a.js → issues-7rmf4ker.js}

@@ -1,6 +1,7 @@
 #!/usr/bin/env bun
-import"./cli-fy6vh2a7.js";
-import"./cli-c05y640n.js";
+import"./cli-t4q4t4dx.js";
+import"./cli-98wmmphf.js";
+import"./cli-9jscnhtg.js";
 import {
   CLOSED_DISPOSITIONS2,
   listIssues2,
@@ -11,22 +12,21 @@ import {
   retestIssue2,
   linkPullRequest2,
   listIssuePullRequests2
-} from "./cli-7eea4e2y.js";
-import"./cli-qgz1q9g5.js";
-import"./cli-k2nwxta0.js";
-import"./cli-kb21qhvm.js";
-import"./cli-ngq9dr8n.js";
-import"./cli-d37a42dc.js";
-import"./cli-3sp6nd8d.js";
-import"./cli-xtc2t6me.js";
-import"./cli-n2en7j5b.js";
+} from "./cli-5ab346kd.js";
+import"./cli-t09zj814.js";
+import"./cli-1pmfnz1a.js";
+import"./cli-fdrrbb9p.js";
+import"./cli-9pz9wjt2.js";
+import"./cli-9kk9tm58.js";
+import"./cli-vdd1s3x9.js";
+import"./cli-z7ysyrr4.js";
 import"./cli-xcy2vxj2.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-1ve18npr.js";
+import"./cli-72y76bpg.js";
 import"./cli-qba2x69h.js";
-import"./cli-dpsw2fe6.js";
+import"./cli-a6x4jm5a.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/issues.ts

package/build/{knowledge-fqsvtx0f.js → knowledge-s2sxh8nb.js}

@@ -1,6 +1,7 @@
 #!/usr/bin/env bun
-import"./cli-fy6vh2a7.js";
-import"./cli-c05y640n.js";
+import"./cli-t4q4t4dx.js";
+import"./cli-98wmmphf.js";
+import"./cli-9jscnhtg.js";
 import {
   KNOWLEDGE_CATEGORIES2,
   KNOWLEDGE_STATUSES2,
@@ -9,22 +10,21 @@ import {
   createKnowledge2,
   updateKnowledge2,
   archiveKnowledge2
-} from "./cli-7eea4e2y.js";
-import"./cli-qgz1q9g5.js";
-import"./cli-k2nwxta0.js";
-import"./cli-kb21qhvm.js";
-import"./cli-ngq9dr8n.js";
-import"./cli-d37a42dc.js";
-import"./cli-3sp6nd8d.js";
-import"./cli-xtc2t6me.js";
-import"./cli-n2en7j5b.js";
+} from "./cli-5ab346kd.js";
+import"./cli-t09zj814.js";
+import"./cli-1pmfnz1a.js";
+import"./cli-fdrrbb9p.js";
+import"./cli-9pz9wjt2.js";
+import"./cli-9kk9tm58.js";
+import"./cli-vdd1s3x9.js";
+import"./cli-z7ysyrr4.js";
 import"./cli-xcy2vxj2.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-1ve18npr.js";
+import"./cli-72y76bpg.js";
 import"./cli-qba2x69h.js";
-import"./cli-dpsw2fe6.js";
+import"./cli-a6x4jm5a.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/knowledge.ts

package/build/lib/{chunk-1azdancq.js → chunk-0dnx79b1.js}

@@ -2,7 +2,7 @@ import {
   createLogger,
   scopedLogger,
   generateObjectResponse2
-} from "./chunk-ba41jh41.js";
+} from "./chunk-kcw4cpr3.js";
 import {
   __export
 } from "./chunk-n0ba7khr.js";

package/build/lib/{chunk-4hwzqthr.js → chunk-161ak2am.js}

@@ -1,7 +1,7 @@
 import {
   AgentRuntime,
   defineAgent
-} from "./chunk-acgbyf5h.js";
+} from "./chunk-ydxhkgjw.js";
 
 // src/core/agents/specialized/codeAgent/agent.ts
 import { stepCountIs } from "ai";
@@ -55,6 +55,7 @@ Prefer catalog + code_query for sink-first work; use candidates to separate unve
 4. **Stay focused** — stick to your objective. Don't wander into unrelated areas of the codebase.
 5. **Be thorough** — don't stop at the first match. Make sure you've covered everything relevant to the objective.
 `;
+var CODE_AGENT_EXTERNAL_SYSTEM_PROMPT = CODE_AGENT_SYSTEM_PROMPT.replace("use candidates to separate unverified ideas from `document_vulnerability`", "use candidates to separate unverified ideas from evidence-backed findings returned to the caller");
 
 // src/core/agents/specialized/codeAgent/agent.ts
 var CODE_AGENT_TOOLS = [
@@ -83,7 +84,7 @@ function codeAgentDefinition2() {
   return defineAgent({
     name: "code-agent",
     role: "worker",
-    system: (opts) => opts.system ?? CODE_AGENT_SYSTEM_PROMPT,
+    system: (opts) => opts.system ?? (opts.findingPolicy === "external" ? CODE_AGENT_EXTERNAL_SYSTEM_PROMPT : CODE_AGENT_SYSTEM_PROMPT),
     activeTools: (opts) => {
       let activeTools = [...CODE_AGENT_TOOLS];
       if (opts.excludeTools?.length) {

package/build/lib/{chunk-z137x08b.js → chunk-1rqbhx4b.js}

@@ -4,26 +4,26 @@ import {
 import {
   createLogger,
   scopedLogger
-} from "./chunk-ba41jh41.js";
+} from "./chunk-kcw4cpr3.js";
 import {
   assertDepth2,
   inProcessSeams2,
   resolveItemHooks2
-} from "./chunk-yrnrbjes.js";
+} from "./chunk-7tft4b8b.js";
 import {
   inProcessSubagentSpawner2
-} from "./chunk-3c00n0cy.js";
+} from "./chunk-77se1d35.js";
 import {
   collectCommand
 } from "./chunk-fy3bbbqy.js";
 import {
   CodeAgent2
-} from "./chunk-4hwzqthr.js";
+} from "./chunk-161ak2am.js";
 import {
   WHITEBOX_APPS_DISCOVERY_SYSTEM_PROMPT2,
   WHITEBOX_ENDPOINT_DOCUMENTATION_SYSTEM_PROMPT,
   WHITEBOX_DISCOVERY_SYSTEM_PROMPT2
-} from "./chunk-r2dkp4tb.js";
+} from "./chunk-5j8pp0xf.js";
 import {
   EndpointSchema2,
   AppInfoSchema2,
@@ -168,6 +168,7 @@ async function runEndpointDocumentationAgent(opts) {
       attackSurfaceRegistry
     },
     runtime: {
+      findingPolicy: hooks?.findingPolicy,
       model,
       session,
       authConfig,
@@ -427,6 +428,7 @@ async function runWhiteboxAttackSurfaceApp2(app, appIndex, input) {
           attackSurfaceRegistry
         },
         runtime: {
+          findingPolicy: hooksForApp.findingPolicy,
           model,
           session,
           authConfig,

package/build/lib/{chunk-1yct6cra.js → chunk-3hjvdf67.js}

@@ -1,7 +1,7 @@
 import {
   AgentRuntime,
   defineAgent
-} from "./chunk-acgbyf5h.js";
+} from "./chunk-ydxhkgjw.js";
 
 // src/core/agents/specialized/patching/agent.ts
 import { readFileSync } from "node:fs";

package/build/lib/{chunk-r2dkp4tb.js → chunk-5j8pp0xf.js}

@@ -10,7 +10,7 @@ import {
 import {
   AgentRuntime,
   defineAgent
-} from "./chunk-acgbyf5h.js";
+} from "./chunk-ydxhkgjw.js";
 import {
   __export
 } from "./chunk-n0ba7khr.js";

package/build/lib/{chunk-3c00n0cy.js → chunk-77se1d35.js}

@@ -1,6 +1,6 @@
 import {
   runWithNativeRolloutSession2
-} from "./chunk-ba41jh41.js";
+} from "./chunk-kcw4cpr3.js";
 import {
   AgentEventBus2
 } from "./chunk-7gjdygcx.js";
@@ -9,7 +9,7 @@ import {
   randomSessionIdFactory2,
   inProcessSeams2,
   resolveItemHooks2
-} from "./chunk-yrnrbjes.js";
+} from "./chunk-7tft4b8b.js";
 import {
   __export
 } from "./chunk-n0ba7khr.js";
@@ -82,6 +82,7 @@ var runPentestChild = async (spec, ctx) => {
     openAIReasoningEffort: ctx.openAIReasoningEffort,
     display: ctx.display,
     hooks: {
+      findingPolicy: ctx.findingPolicy,
       backends: ctx.backends,
       sandbox: ctx.sandbox,
       languageModelMiddleware: ctx.languageModelMiddleware,
@@ -101,6 +102,7 @@ var runPentestChild = async (spec, ctx) => {
 var runCodeChild = async (spec, ctx) => {
   const { CodeAgent } = await import("./core/agents/specialized/codeAgent/agent.js");
   const agent = new CodeAgent({
+    findingPolicy: ctx.findingPolicy,
     codebasePath: spec.codebasePath,
     objective: spec.objective,
     system: spec.system,
@@ -133,6 +135,7 @@ var runCodeChild = async (spec, ctx) => {
 var runWhiteboxChild = async (spec, ctx) => {
   const { WhiteboxAttackSurfaceAgent } = await import("./core/agents/specialized/whiteboxAttackSurface/index.js");
   const agent = new WhiteboxAttackSurfaceAgent({
+    findingPolicy: ctx.findingPolicy,
     codebasePath: spec.codebasePath,
     attackSurfaceRegistry: spec.attackSurfaceRegistry,
     model: ctx.model,
@@ -153,6 +156,7 @@ var runWhiteboxChild = async (spec, ctx) => {
 var runBlackboxChild = async (spec, ctx) => {
   const { BlackboxAttackSurfaceAgent } = await import("./core/agents/specialized/attackSurface/blackboxAgent.js");
   const agent = new BlackboxAttackSurfaceAgent({
+    findingPolicy: ctx.findingPolicy,
     target: spec.target,
     attackSurfaceRegistry: spec.attackSurfaceRegistry,
     model: ctx.model,
@@ -170,9 +174,10 @@ var runBlackboxChild = async (spec, ctx) => {
   return { run: () => agent.consume(), drained: () => agent.drained };
 };
 var runAuthChild = async (spec, ctx) => {
-  const { runAuthenticationAgent } = await import("./chunk-9tt2021m.js");
+  const { runAuthenticationAgent } = await import("./chunk-d05cvnv8.js");
   return {
     run: () => runAuthenticationAgent({
+      findingPolicy: ctx.findingPolicy,
       target: spec.target,
       authHints: spec.authHints,
       session: ctx.session,

package/build/lib/{chunk-yrnrbjes.js → chunk-7tft4b8b.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-jdjagvgr.js";
 import {
   FindingsRegistry2
-} from "./chunk-1azdancq.js";
+} from "./chunk-0dnx79b1.js";
 
 // src/core/utils/concurrency.ts
 import { context } from "@opentelemetry/api";
@@ -131,12 +131,14 @@ function inProcessSeams2(overrides) {
   };
 }
 function resolveItemHooks2(hooks, seams, item, index) {
+  const itemHooks = seams.hooksForItem?.(item, index);
   return {
     ...hooks,
     contextRecorder: undefined,
     inferenceRecorder: undefined,
     toolExecutionRecorder: undefined,
-    ...seams.hooksForItem?.(item, index)
+    ...itemHooks,
+    ...hooks?.findingPolicy === "external" ? { findingPolicy: "external" } : {}
   };
 }
 

package/build/lib/{chunk-w66ce82a.js → chunk-8njjwwcw.js}

@@ -575,7 +575,7 @@ var package_default = {
     tsc: "tsc --noEmit"
   },
   type: "module",
-  version: "2.6.1"
+  version: "2.7.0-canary.21cb83dc"
 };
 
 // src/core/installation/index.ts
@@ -590,7 +590,8 @@ import path from "node:path";
 var DEFAULT_CONFIG = {
   responsibleUseAccepted: false,
   defaultHeaders: { "User-Agent": "pensar-apex" },
-  strikeMode: false
+  strikeMode: false,
+  findingPolicy: "native"
 };
 async function init() {
   const folder = path.join(os.homedir(), ".pensar");
@@ -621,6 +622,7 @@ function applyEnvFallbacks(parsedConfig) {
     responsibleUseAccepted: parsedConfig.responsibleUseAccepted ?? false,
     defaultHeaders: parsedConfig.defaultHeaders ?? DEFAULT_CONFIG.defaultHeaders,
     strikeMode: parsedConfig.strikeMode ?? DEFAULT_CONFIG.strikeMode,
+    findingPolicy: parsedConfig.findingPolicy === "external" ? "external" : "native",
     surfaceIntegrationEnabled: parsedConfig.surfaceIntegrationEnabled ?? parseBoolEnv(process.env.PENSAR_SURFACE_INTEGRATION),
     version,
     customProviders: loadCustomProviders(parsedConfig.customProviders),