@pensar/apex 2.7.0-canary.21cb83dc → 2.7.0-canary.2245acbd

package/build/{agent-68t2wzmc.js → agent-2mbyqr0n.js}

@@ -1,14 +1,15 @@
 import {
   TargetedPentestAgent2,
   buildPentestSystemPrompt2
-} from "./cli-vdd1s3x9.js";
-import"./cli-72y76bpg.js";
+} from "./cli-eb2jzax2.js";
+import"./cli-f967pp1y.js";
 import"./cli-qba2x69h.js";
-import"./cli-t4q4t4dx.js";
-import"./cli-a6x4jm5a.js";
-import"./cli-9jscnhtg.js";
+import"./cli-b9c9kgge.js";
+import"./cli-47fpwa1j.js";
+import"./cli-5yjwhpkw.js";
+import"./cli-rnf3zcrx.js";
 import"./cli-c2k4xxaw.js";
-import"./cli-98wmmphf.js";
+import"./cli-qr6mnr22.js";
 export {
   TargetedPentestAgent2 as TargetedPentestAgent,
   buildPentestSystemPrompt2 as buildPentestSystemPrompt

package/build/agent-88cxq4rw.js

@@ -0,0 +1,14 @@
+import {
+  runAuthenticationAgent2
+} from "./cli-sq894ffd.js";
+import"./cli-f967pp1y.js";
+import"./cli-qba2x69h.js";
+import"./cli-b9c9kgge.js";
+import"./cli-47fpwa1j.js";
+import"./cli-5yjwhpkw.js";
+import"./cli-rnf3zcrx.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-qr6mnr22.js";
+export {
+  runAuthenticationAgent2 as runAuthenticationAgent
+};

package/build/agent-bp0s9m26.js

@@ -0,0 +1,14 @@
+import {
+  CodeAgent2
+} from "./cli-yxp55r84.js";
+import"./cli-f967pp1y.js";
+import"./cli-qba2x69h.js";
+import"./cli-b9c9kgge.js";
+import"./cli-47fpwa1j.js";
+import"./cli-5yjwhpkw.js";
+import"./cli-rnf3zcrx.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-qr6mnr22.js";
+export {
+  CodeAgent2 as CodeAgent
+};

package/build/{agent-qvreg8a4.js → agent-fr60kr30.js}

@@ -1,15 +1,16 @@
-import"./cli-t4q4t4dx.js";
-import"./cli-98wmmphf.js";
-import"./cli-9jscnhtg.js";
+import"./cli-47fpwa1j.js";
+import"./cli-qr6mnr22.js";
+import"./cli-rnf3zcrx.js";
+import"./cli-b9c9kgge.js";
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-72y76bpg.js";
+} from "./cli-f967pp1y.js";
 import"./cli-qba2x69h.js";
 import {
   stepCountIs2,
   init_dist
-} from "./cli-a6x4jm5a.js";
+} from "./cli-5yjwhpkw.js";
 import"./cli-c2k4xxaw.js";
 import {
   init_zod

package/build/{agent-runs-30dvbvmm.js → agent-runs-v77njejp.js}

@@ -1,11 +1,12 @@
 import {
   config2,
   init_config
-} from "./cli-98wmmphf.js";
-import"./cli-9jscnhtg.js";
+} from "./cli-qr6mnr22.js";
+import"./cli-rnf3zcrx.js";
+import"./cli-b9c9kgge.js";
 import {
   AgentEventBus
-} from "./cli-t4q4t4dx.js";
+} from "./cli-47fpwa1j.js";
 import {
   inspectSessionEvidence2,
   RecordedRunSpecSchema,
@@ -16,29 +17,31 @@ import {
   runRecordedAgent2,
   RunRecoveryBlockedError2,
   resumeRecordedAgent2
-} from "./cli-5ab346kd.js";
-import"./cli-t09zj814.js";
-import"./cli-1pmfnz1a.js";
-import"./cli-fdrrbb9p.js";
-import"./cli-9pz9wjt2.js";
-import"./cli-9kk9tm58.js";
-import"./cli-vdd1s3x9.js";
-import"./cli-z7ysyrr4.js";
+} from "./cli-338p1kjj.js";
+import"./cli-hjqs6983.js";
+import"./cli-yxp55r84.js";
+import"./cli-c819gbky.js";
+import"./cli-j5cx4cbe.js";
+import"./cli-sq894ffd.js";
+import"./cli-eb2jzax2.js";
+import"./cli-3jjwy74s.js";
+import"./cli-gv1v3myg.js";
 import"./cli-xcy2vxj2.js";
 import {
   resolveWorkerExecutable,
   launchLocalWorker
-} from "./cli-vn4cwac3.js";
-import"./cli-72y76bpg.js";
+} from "./cli-ekv21ejw.js";
+import"./cli-ny923ch6.js";
+import"./cli-f967pp1y.js";
 import"./cli-qba2x69h.js";
 import {
   buildAuthConfig,
-  init_ai
-} from "./cli-a6x4jm5a.js";
+  init_ai2
+} from "./cli-5yjwhpkw.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/agent-runs.ts
-init_ai();
+init_ai2();
 import { once } from "node:events";
 import { readFile } from "node:fs/promises";
 import { isAbsolute, resolve } from "node:path";
@@ -115,7 +118,7 @@ async function runAgentRunsCommand(args) {
     if (!isAbsolute(values.store)) {
       throw new Error("agent-runs worker requires --store <absolute database>");
     }
-    const { serveLocalRunWorker } = await import("./index-bt4r13q7.js");
+    const { serveLocalRunWorker } = await import("./index-k2kgmegh.js");
     await serveLocalRunWorker({
       runId: values.run,
       databasePath: resolve(values.store)
@@ -129,7 +132,7 @@ async function runAgentRunsCommand(args) {
 ${HELP}`);
   }
   if (command === "attach") {
-    const { openRecordedRunClient } = await import("./recordedRunClient-w34kcch1.js");
+    const { openRecordedRunClient } = await import("./recordedRunClient-y4khnzh2.js");
     const client = await openRecordedRunClient(values.store);
     const controller = new AbortController;
     const detach = () => controller.abort();

package/build/{apps-na0y0992.js → apps-ya5a3z9z.js}

@@ -15,24 +15,27 @@ import {
   searchEndpoints2,
   listDomains2,
   createDomain2
-} from "./cli-t4q4t4dx.js";
-import"./cli-98wmmphf.js";
-import"./cli-9jscnhtg.js";
-import"./cli-5ab346kd.js";
-import"./cli-t09zj814.js";
-import"./cli-1pmfnz1a.js";
-import"./cli-fdrrbb9p.js";
-import"./cli-9pz9wjt2.js";
-import"./cli-9kk9tm58.js";
-import"./cli-vdd1s3x9.js";
-import"./cli-z7ysyrr4.js";
+} from "./cli-b9c9kgge.js";
+import"./cli-47fpwa1j.js";
+import"./cli-qr6mnr22.js";
+import"./cli-rnf3zcrx.js";
+import"./cli-338p1kjj.js";
+import"./cli-hjqs6983.js";
+import"./cli-yxp55r84.js";
+import"./cli-c819gbky.js";
+import"./cli-j5cx4cbe.js";
+import"./cli-sq894ffd.js";
+import"./cli-eb2jzax2.js";
+import"./cli-3jjwy74s.js";
+import"./cli-gv1v3myg.js";
 import"./cli-xcy2vxj2.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-72y76bpg.js";
+import"./cli-ny923ch6.js";
+import"./cli-f967pp1y.js";
 import"./cli-qba2x69h.js";
-import"./cli-a6x4jm5a.js";
+import"./cli-5yjwhpkw.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/apps.ts

package/build/{auth-dz2c5thx.js → auth-adj5k5rp.js}

@@ -1,9 +1,10 @@
 #!/usr/bin/env bun
-import"./cli-t4q4t4dx.js";
+import"./cli-b9c9kgge.js";
+import"./cli-47fpwa1j.js";
 import {
   config2,
   init_config
-} from "./cli-98wmmphf.js";
+} from "./cli-qr6mnr22.js";
 import {
   getPensarApiUrl2,
   getPensarConsoleUrl2,
@@ -19,22 +20,24 @@ import {
   createWorkspaceSelection2,
   pollWorkspaceSelection2,
   init_auth
-} from "./cli-9jscnhtg.js";
-import"./cli-5ab346kd.js";
-import"./cli-t09zj814.js";
-import"./cli-1pmfnz1a.js";
-import"./cli-fdrrbb9p.js";
-import"./cli-9pz9wjt2.js";
-import"./cli-9kk9tm58.js";
-import"./cli-vdd1s3x9.js";
-import"./cli-z7ysyrr4.js";
+} from "./cli-rnf3zcrx.js";
+import"./cli-338p1kjj.js";
+import"./cli-hjqs6983.js";
+import"./cli-yxp55r84.js";
+import"./cli-c819gbky.js";
+import"./cli-j5cx4cbe.js";
+import"./cli-sq894ffd.js";
+import"./cli-eb2jzax2.js";
+import"./cli-3jjwy74s.js";
+import"./cli-gv1v3myg.js";
 import"./cli-xcy2vxj2.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-72y76bpg.js";
+import"./cli-ny923ch6.js";
+import"./cli-f967pp1y.js";
 import"./cli-qba2x69h.js";
-import"./cli-a6x4jm5a.js";
+import"./cli-5yjwhpkw.js";
 import"./cli-c2k4xxaw.js";
 import {
   __require

package/build/blackboxAgent-gsv15wd5.js

@@ -0,0 +1,14 @@
+import {
+  BlackboxAttackSurfaceAgent2
+} from "./cli-hjqs6983.js";
+import"./cli-f967pp1y.js";
+import"./cli-qba2x69h.js";
+import"./cli-b9c9kgge.js";
+import"./cli-47fpwa1j.js";
+import"./cli-5yjwhpkw.js";
+import"./cli-rnf3zcrx.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-qr6mnr22.js";
+export {
+  BlackboxAttackSurfaceAgent2 as BlackboxAttackSurfaceAgent
+};

package/build/{blackboxPentest-s2mfze9p.js → blackboxPentest-4q3aay6e.js}

@@ -1,30 +1,31 @@
-import"./cli-98wmmphf.js";
-import"./cli-9jscnhtg.js";
-import"./cli-t4q4t4dx.js";
-import"./cli-t09zj814.js";
-import"./cli-vdd1s3x9.js";
-import"./cli-z7ysyrr4.js";
+import"./cli-qr6mnr22.js";
+import"./cli-rnf3zcrx.js";
+import"./cli-47fpwa1j.js";
+import"./cli-b9c9kgge.js";
+import"./cli-hjqs6983.js";
+import"./cli-eb2jzax2.js";
+import"./cli-3jjwy74s.js";
 import {
   readExecutionMetrics,
   writeExecutionMetrics,
   runPentestWorkflow2
-} from "./cli-9pz9wjt2.js";
-import"./cli-1pmfnz1a.js";
-import"./cli-fdrrbb9p.js";
+} from "./cli-j5cx4cbe.js";
+import"./cli-yxp55r84.js";
+import"./cli-c819gbky.js";
 import {
   EMPTY_SESSION_TOKEN_USAGE,
   accumulateSessionTokens
 } from "./cli-ag6jtndp.js";
-import"./cli-72y76bpg.js";
+import"./cli-f967pp1y.js";
 import"./cli-qba2x69h.js";
 import {
-  init_ai,
-  normalizeStepUsage
-} from "./cli-a6x4jm5a.js";
+  normalizeStepUsage,
+  init_ai2
+} from "./cli-5yjwhpkw.js";
 import"./cli-c2k4xxaw.js";
 
 // src/core/api/blackboxPentest.ts
-init_ai();
+init_ai2();
 async function runPentestAgent(input) {
   const persisted = readExecutionMetrics(input.session.rootPath)?.tokenUsage;
   let tokenUsage = persisted ?? EMPTY_SESSION_TOKEN_USAGE;

package/build/{cli-zbbtr4sb.js → cli-278wp1w5.js}

@@ -1,3 +1,7 @@
+import {
+  getCurrentVersion,
+  init_installation
+} from "./cli-dqpdgmfm.js";
 import {
   init_zod
 } from "./cli-3qznjsnr.js";
@@ -12,10 +16,6 @@ import {
   _enum,
   json
 } from "./cli-mz5pk30x.js";
-import {
-  getCurrentVersion,
-  init_installation
-} from "./cli-w9nw2a4z.js";
 import {
   __esm
 } from "./cli-h6y3bt60.js";
@@ -92,9 +92,12 @@ var init_customProviders = __esm(() => {
     name: string().trim().min(1).optional(),
     contextLength: number().int().positive(),
     maxOutputTokens: number().int().positive(),
-    reasoningEffort: _enum(["none", "minimal", "low", "medium", "high", "xhigh", "max"]).optional()
+    reasoningEffort: _enum(["none", "minimal", "low", "medium", "high", "xhigh", "max"]).optional(),
+    supportedReasoningEfforts: array(_enum(["none", "minimal", "low", "medium", "high", "xhigh", "max"])).nonempty().optional()
   }).refine((model) => model.maxOutputTokens < model.contextLength, {
     message: "maxOutputTokens must be smaller than contextLength"
+  }).refine((model) => !model.supportedReasoningEfforts || !model.reasoningEffort || model.supportedReasoningEfforts.includes(model.reasoningEffort), {
+    message: "reasoningEffort must be one of supportedReasoningEfforts"
   });
   customProviderBaseSchema = strictObject({
     name: string().trim().min(1).optional(),
@@ -135,7 +138,7 @@ var init_customProviders = __esm(() => {
           path: ["requestBody"],
           message: "requestBody is only supported for Chat Completions"
         });
-    } else if (provider.models.some((model) => model.reasoningEffort)) {
+    } else if (provider.models.some((model) => model.reasoningEffort || model.supportedReasoningEfforts)) {
       ctx.addIssue({
         code: "custom",
         path: ["models"],
@@ -287,6 +290,7 @@ function applyEnvFallbacks(parsedConfig) {
     responsibleUseAccepted: parsedConfig.responsibleUseAccepted ?? false,
     defaultHeaders: parsedConfig.defaultHeaders ?? DEFAULT_CONFIG.defaultHeaders,
     strikeMode: parsedConfig.strikeMode ?? DEFAULT_CONFIG.strikeMode,
+    lanceMode: parsedConfig.lanceMode === true,
     findingPolicy: parsedConfig.findingPolicy === "external" ? "external" : "native",
     surfaceIntegrationEnabled: parsedConfig.surfaceIntegrationEnabled ?? parseBoolEnv(process.env.PENSAR_SURFACE_INTEGRATION),
     version,
@@ -350,6 +354,7 @@ var init_config2 = __esm(() => {
     responsibleUseAccepted: false,
     defaultHeaders: { "User-Agent": "pensar-apex" },
     strikeMode: false,
+    lanceMode: false,
     findingPolicy: "native"
   };
 });

package/build/{cli-5ab346kd.js → cli-338p1kjj.js}

@@ -1,36 +1,30 @@
+import {
+  config2,
+  init_config
+} from "./cli-qr6mnr22.js";
+import {
+  init_constants
+} from "./cli-rnf3zcrx.js";
 import {
   buildSessionWorkspaceSection,
   buildBaseSystemPrompt,
   ASK_USER_QUESTIONS_TOOL_NAME,
   apiRequest,
   ALL_TOOL_NAMES2,
-  SKILL_TOOL_NAMES2,
-  OffensiveSecurityAgent
-} from "./cli-t4q4t4dx.js";
-import {
-  config2,
-  init_config
-} from "./cli-98wmmphf.js";
-import {
-  init_constants
-} from "./cli-9jscnhtg.js";
+  SKILL_TOOL_NAMES2
+} from "./cli-b9c9kgge.js";
 import {
-  startAgentExecution
-} from "./cli-g06s7edq.js";
+  runOffensiveSecurityAgent2
+} from "./cli-ny923ch6.js";
 import {
   defineAgent
-} from "./cli-72y76bpg.js";
+} from "./cli-f967pp1y.js";
 import {
   toolModelMessageSchema,
   modelMessageSchema,
   stepCountIs2,
   hasToolCall,
   init_dist,
-  getClaudeCapabilities,
-  AVAILABLE_MODELS,
-  getModelInfo,
-  buildAuthConfig,
-  init_ai,
   create,
   get,
   sessions2,
@@ -41,8 +35,13 @@ import {
   RunControlInterruption,
   init_runControlStore,
   RunLimitError,
-  init_runModelStore
-} from "./cli-a6x4jm5a.js";
+  init_runModelStore,
+  getClaudeCapabilities,
+  AVAILABLE_MODELS,
+  getModelInfo,
+  buildAuthConfig,
+  init_ai2
+} from "./cli-5yjwhpkw.js";
 import {
   newSessionId,
   isSessionId,
@@ -51,6 +50,10 @@ import {
   parseInferenceAttempt,
   runWithInferenceRecorder
 } from "./cli-se8ae8z3.js";
+import {
+  getCurrentVersion,
+  init_installation
+} from "./cli-dqpdgmfm.js";
 import {
   init_zod
 } from "./cli-3qznjsnr.js";
@@ -68,10 +71,6 @@ import {
   literal,
   custom
 } from "./cli-mz5pk30x.js";
-import {
-  getCurrentVersion,
-  init_installation
-} from "./cli-w9nw2a4z.js";
 import {
   __commonJS,
   __require
@@ -7022,7 +7021,7 @@ var require_public_api = __commonJS(function(exports) {
 init_dist();
 
 // src/core/api/index.ts
-init_ai();
+init_ai2();
 
 // src/core/runtime/runEvidence.ts
 import { createHash } from "node:crypto";
@@ -7735,7 +7734,7 @@ function createSqliteControlStore(input) {
 
 // src/core/runtime/sqliteModelStore.ts
 init_zod();
-init_ai();
+init_ai2();
 init_runModelStore();
 import { isDeepStrictEqual as isDeepStrictEqual2 } from "node:util";
 var MODEL_STORE_SCHEMA_SQL = `
@@ -8997,7 +8996,7 @@ function loadActualFindings(sessionPath) {
 `) : "No findings were documented.";
 }
 // src/core/api/blackboxPentest.ts
-init_ai();
+init_ai2();
 
 // src/core/api/index.ts
 init_constants();
@@ -9319,7 +9318,7 @@ async function archiveKnowledge2(id) {
   return apiRequest("DELETE", `/knowledge/${id}`);
 }
 // src/core/api/localWorker.ts
-init_ai();
+init_ai2();
 init_config();
 
 // src/core/runtime/localRunWorker.ts
@@ -10015,7 +10014,7 @@ async function serveLocalRunWorker(options) {
 }
 
 // src/core/api/recordedRun.ts
-init_ai();
+init_ai2();
 init_persistenceError();
 import { realpath as realpath5, stat as stat4 } from "node:fs/promises";
 
@@ -10645,7 +10644,7 @@ function restoreRunContext(input) {
 }
 
 // src/core/runtime/runRecoveryPlan.ts
-init_ai();
+init_ai2();
 import { createHash as createHash4 } from "node:crypto";
 import { isDeepStrictEqual as isDeepStrictEqual7 } from "node:util";
 var DENIED_BY_OPERATOR2 = {
@@ -11076,35 +11075,6 @@ function createRunToolRecorder(options) {
 
 // src/core/api/recordedRun.ts
 init_session();
-
-// src/core/api/offesecAgent.ts
-async function runOffensiveSecurityAgent2(input) {
-  const agent = input.session ? new OffensiveSecurityAgent(input) : await OffensiveSecurityAgent.create(input);
-  input.onSessionReady?.(agent.session);
-  await startAgentExecution(agent).result;
-  return { streamResult: agent.streamResult, session: agent.session };
-}
-function createOffensiveSecurityAgentClient2() {
-  const controller = new AbortController;
-  let started = false;
-  return {
-    run(input) {
-      if (started) {
-        throw new Error("Offensive security agent client already started a run — create a new client per run");
-      }
-      started = true;
-      return runOffensiveSecurityAgent2({
-        ...input,
-        abortSignal: controller.signal
-      });
-    },
-    abort() {
-      controller.abort();
-    }
-  };
-}
-
-// src/core/api/recordedRun.ts
 var TASK_TOOL_NAMES2 = new Set(["create_task", "update_task", "list_tasks"]);
 function assertCredentialsDeclared(spec, manager) {
   for (const credentialId of spec.credentialRefs) {
@@ -12675,6 +12645,7 @@ Working directory: ${input.codebasePath}`;
     system,
     prompt,
     model,
+    reasoning: input.reasoning,
     session,
     activeTools: [...HEADLESS_TOOL_NAMES, ...SKILL_TOOL_NAMES2],
     authConfig: input.authConfig,
@@ -12686,4 +12657,4 @@ Working directory: ${input.codebasePath}`;
   return { session, outputPath: input.outputPath };
 }
 
-export { inspectSessionEvidence2, RecordedRunSpecSchema, acquireLocalRunLock, resolveRunDatabasePath, openSqliteRunStore, CLOSED_DISPOSITIONS2, listScans2, getScan2, listPentestTargets2, dispatchPentest2, listIssues2, getIssue2, updateIssue2, listIssueComments2, createIssueComment2, retestIssue2, linkPullRequest2, listIssuePullRequests2, listFixes2, getFix2, listAgentLogs2, searchAgentLogs2, listTargetLogs2, searchTargetLogs2, KNOWLEDGE_CATEGORIES2, KNOWLEDGE_STATUSES2, listKnowledge2, getKnowledge2, createKnowledge2, updateKnowledge2, archiveKnowledge2, resolveWorkerEndpoint, LocalWorkerTransportError, WorkerConnectionError, workerRequest, runOffensiveSecurityAgent2, createOffensiveSecurityAgentClient2, runRecordedAgent2, RunRecoveryBlockedError2, resumeRecordedAgent2, serveLocalRunWorker2, buildPentestPrompt, buildThreatModelPrompt, createSkillsRegistry, runThreatModelWorkflow2 };
+export { inspectSessionEvidence2, RecordedRunSpecSchema, acquireLocalRunLock, resolveRunDatabasePath, openSqliteRunStore, CLOSED_DISPOSITIONS2, listScans2, getScan2, listPentestTargets2, dispatchPentest2, listIssues2, getIssue2, updateIssue2, listIssueComments2, createIssueComment2, retestIssue2, linkPullRequest2, listIssuePullRequests2, listFixes2, getFix2, listAgentLogs2, searchAgentLogs2, listTargetLogs2, searchTargetLogs2, KNOWLEDGE_CATEGORIES2, KNOWLEDGE_STATUSES2, listKnowledge2, getKnowledge2, createKnowledge2, updateKnowledge2, archiveKnowledge2, resolveWorkerEndpoint, LocalWorkerTransportError, WorkerConnectionError, workerRequest, runRecordedAgent2, RunRecoveryBlockedError2, resumeRecordedAgent2, serveLocalRunWorker2, buildPentestPrompt, buildThreatModelPrompt, createSkillsRegistry, runThreatModelWorkflow2 };

package/build/{cli-z7ysyrr4.js → cli-3jjwy74s.js}

@@ -4,7 +4,7 @@ import {
   ValidatedCweEntrySchema,
   hasCanonicalName,
   EvidenceFileEntrySchema
-} from "./cli-t4q4t4dx.js";
+} from "./cli-b9c9kgge.js";
 import {
   init_zod
 } from "./cli-3qznjsnr.js";