@pensar/apex 2.7.0-canary.21cb83dc → 2.7.0-canary.65ea630f

package/build/{agent-68t2wzmc.js → agent-apjfqhdy.js}

@@ -1,14 +1,15 @@
 import {
   TargetedPentestAgent2,
   buildPentestSystemPrompt2
-} from "./cli-vdd1s3x9.js";
-import"./cli-72y76bpg.js";
+} from "./cli-4qbbnn6z.js";
+import"./cli-3baw38jr.js";
 import"./cli-qba2x69h.js";
-import"./cli-t4q4t4dx.js";
-import"./cli-a6x4jm5a.js";
-import"./cli-9jscnhtg.js";
+import"./cli-z9vvm3j3.js";
+import"./cli-vre3pncf.js";
+import"./cli-n4vfz69h.js";
+import"./cli-cb7f2wcw.js";
 import"./cli-c2k4xxaw.js";
-import"./cli-98wmmphf.js";
+import"./cli-9nk97s94.js";
 export {
   TargetedPentestAgent2 as TargetedPentestAgent,
   buildPentestSystemPrompt2 as buildPentestSystemPrompt

package/build/{agent-qvreg8a4.js → agent-c5x0bmpj.js}

@@ -1,15 +1,16 @@
-import"./cli-t4q4t4dx.js";
-import"./cli-98wmmphf.js";
-import"./cli-9jscnhtg.js";
+import"./cli-vre3pncf.js";
+import"./cli-9nk97s94.js";
+import"./cli-cb7f2wcw.js";
+import"./cli-z9vvm3j3.js";
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-72y76bpg.js";
+} from "./cli-3baw38jr.js";
 import"./cli-qba2x69h.js";
 import {
   stepCountIs2,
   init_dist
-} from "./cli-a6x4jm5a.js";
+} from "./cli-n4vfz69h.js";
 import"./cli-c2k4xxaw.js";
 import {
   init_zod

package/build/agent-g0j0y0nj.js

@@ -0,0 +1,14 @@
+import {
+  runAuthenticationAgent2
+} from "./cli-bnegz51z.js";
+import"./cli-3baw38jr.js";
+import"./cli-qba2x69h.js";
+import"./cli-z9vvm3j3.js";
+import"./cli-vre3pncf.js";
+import"./cli-n4vfz69h.js";
+import"./cli-cb7f2wcw.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-9nk97s94.js";
+export {
+  runAuthenticationAgent2 as runAuthenticationAgent
+};

package/build/{agent-runs-30dvbvmm.js → agent-runs-4fy6brty.js}

@@ -1,11 +1,12 @@
 import {
   config2,
   init_config
-} from "./cli-98wmmphf.js";
-import"./cli-9jscnhtg.js";
+} from "./cli-9nk97s94.js";
+import"./cli-cb7f2wcw.js";
+import"./cli-z9vvm3j3.js";
 import {
   AgentEventBus
-} from "./cli-t4q4t4dx.js";
+} from "./cli-vre3pncf.js";
 import {
   inspectSessionEvidence2,
   RecordedRunSpecSchema,
@@ -16,29 +17,31 @@ import {
   runRecordedAgent2,
   RunRecoveryBlockedError2,
   resumeRecordedAgent2
-} from "./cli-5ab346kd.js";
-import"./cli-t09zj814.js";
-import"./cli-1pmfnz1a.js";
-import"./cli-fdrrbb9p.js";
-import"./cli-9pz9wjt2.js";
-import"./cli-9kk9tm58.js";
-import"./cli-vdd1s3x9.js";
-import"./cli-z7ysyrr4.js";
+} from "./cli-za8brr9s.js";
+import"./cli-egs0t450.js";
+import"./cli-8jmv4k35.js";
+import"./cli-8bkc7zc0.js";
+import"./cli-nc5thq90.js";
+import"./cli-bnegz51z.js";
+import"./cli-4qbbnn6z.js";
+import"./cli-n3e3vjwf.js";
+import"./cli-xxe3p6qp.js";
 import"./cli-xcy2vxj2.js";
 import {
   resolveWorkerExecutable,
   launchLocalWorker
-} from "./cli-vn4cwac3.js";
-import"./cli-72y76bpg.js";
+} from "./cli-3gep10fn.js";
+import"./cli-3ncpc0a4.js";
+import"./cli-3baw38jr.js";
 import"./cli-qba2x69h.js";
 import {
   buildAuthConfig,
-  init_ai
-} from "./cli-a6x4jm5a.js";
+  init_ai2
+} from "./cli-n4vfz69h.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/agent-runs.ts
-init_ai();
+init_ai2();
 import { once } from "node:events";
 import { readFile } from "node:fs/promises";
 import { isAbsolute, resolve } from "node:path";
@@ -115,7 +118,7 @@ async function runAgentRunsCommand(args) {
     if (!isAbsolute(values.store)) {
       throw new Error("agent-runs worker requires --store <absolute database>");
     }
-    const { serveLocalRunWorker } = await import("./index-bt4r13q7.js");
+    const { serveLocalRunWorker } = await import("./index-2wr0xgt8.js");
     await serveLocalRunWorker({
       runId: values.run,
       databasePath: resolve(values.store)
@@ -129,7 +132,7 @@ async function runAgentRunsCommand(args) {
 ${HELP}`);
   }
   if (command === "attach") {
-    const { openRecordedRunClient } = await import("./recordedRunClient-w34kcch1.js");
+    const { openRecordedRunClient } = await import("./recordedRunClient-n83gzjck.js");
     const client = await openRecordedRunClient(values.store);
     const controller = new AbortController;
     const detach = () => controller.abort();

package/build/agent-w390p7pf.js

@@ -0,0 +1,14 @@
+import {
+  CodeAgent2
+} from "./cli-8jmv4k35.js";
+import"./cli-3baw38jr.js";
+import"./cli-qba2x69h.js";
+import"./cli-z9vvm3j3.js";
+import"./cli-vre3pncf.js";
+import"./cli-n4vfz69h.js";
+import"./cli-cb7f2wcw.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-9nk97s94.js";
+export {
+  CodeAgent2 as CodeAgent
+};

package/build/{apps-na0y0992.js → apps-w3azg4hv.js}

@@ -15,24 +15,27 @@ import {
   searchEndpoints2,
   listDomains2,
   createDomain2
-} from "./cli-t4q4t4dx.js";
-import"./cli-98wmmphf.js";
-import"./cli-9jscnhtg.js";
-import"./cli-5ab346kd.js";
-import"./cli-t09zj814.js";
-import"./cli-1pmfnz1a.js";
-import"./cli-fdrrbb9p.js";
-import"./cli-9pz9wjt2.js";
-import"./cli-9kk9tm58.js";
-import"./cli-vdd1s3x9.js";
-import"./cli-z7ysyrr4.js";
+} from "./cli-z9vvm3j3.js";
+import"./cli-vre3pncf.js";
+import"./cli-9nk97s94.js";
+import"./cli-cb7f2wcw.js";
+import"./cli-za8brr9s.js";
+import"./cli-egs0t450.js";
+import"./cli-8jmv4k35.js";
+import"./cli-8bkc7zc0.js";
+import"./cli-nc5thq90.js";
+import"./cli-bnegz51z.js";
+import"./cli-4qbbnn6z.js";
+import"./cli-n3e3vjwf.js";
+import"./cli-xxe3p6qp.js";
 import"./cli-xcy2vxj2.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-72y76bpg.js";
+import"./cli-3ncpc0a4.js";
+import"./cli-3baw38jr.js";
 import"./cli-qba2x69h.js";
-import"./cli-a6x4jm5a.js";
+import"./cli-n4vfz69h.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/apps.ts

package/build/{auth-dz2c5thx.js → auth-1n5zzpv3.js}

@@ -1,9 +1,10 @@
 #!/usr/bin/env bun
-import"./cli-t4q4t4dx.js";
+import"./cli-z9vvm3j3.js";
+import"./cli-vre3pncf.js";
 import {
   config2,
   init_config
-} from "./cli-98wmmphf.js";
+} from "./cli-9nk97s94.js";
 import {
   getPensarApiUrl2,
   getPensarConsoleUrl2,
@@ -19,22 +20,24 @@ import {
   createWorkspaceSelection2,
   pollWorkspaceSelection2,
   init_auth
-} from "./cli-9jscnhtg.js";
-import"./cli-5ab346kd.js";
-import"./cli-t09zj814.js";
-import"./cli-1pmfnz1a.js";
-import"./cli-fdrrbb9p.js";
-import"./cli-9pz9wjt2.js";
-import"./cli-9kk9tm58.js";
-import"./cli-vdd1s3x9.js";
-import"./cli-z7ysyrr4.js";
+} from "./cli-cb7f2wcw.js";
+import"./cli-za8brr9s.js";
+import"./cli-egs0t450.js";
+import"./cli-8jmv4k35.js";
+import"./cli-8bkc7zc0.js";
+import"./cli-nc5thq90.js";
+import"./cli-bnegz51z.js";
+import"./cli-4qbbnn6z.js";
+import"./cli-n3e3vjwf.js";
+import"./cli-xxe3p6qp.js";
 import"./cli-xcy2vxj2.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-72y76bpg.js";
+import"./cli-3ncpc0a4.js";
+import"./cli-3baw38jr.js";
 import"./cli-qba2x69h.js";
-import"./cli-a6x4jm5a.js";
+import"./cli-n4vfz69h.js";
 import"./cli-c2k4xxaw.js";
 import {
   __require

package/build/blackboxAgent-qy1ghjdv.js

@@ -0,0 +1,14 @@
+import {
+  BlackboxAttackSurfaceAgent2
+} from "./cli-egs0t450.js";
+import"./cli-3baw38jr.js";
+import"./cli-qba2x69h.js";
+import"./cli-z9vvm3j3.js";
+import"./cli-vre3pncf.js";
+import"./cli-n4vfz69h.js";
+import"./cli-cb7f2wcw.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-9nk97s94.js";
+export {
+  BlackboxAttackSurfaceAgent2 as BlackboxAttackSurfaceAgent
+};

package/build/{blackboxPentest-s2mfze9p.js → blackboxPentest-13zy16b6.js}

@@ -1,30 +1,31 @@
-import"./cli-98wmmphf.js";
-import"./cli-9jscnhtg.js";
-import"./cli-t4q4t4dx.js";
-import"./cli-t09zj814.js";
-import"./cli-vdd1s3x9.js";
-import"./cli-z7ysyrr4.js";
+import"./cli-9nk97s94.js";
+import"./cli-cb7f2wcw.js";
+import"./cli-vre3pncf.js";
+import"./cli-z9vvm3j3.js";
+import"./cli-egs0t450.js";
+import"./cli-4qbbnn6z.js";
+import"./cli-n3e3vjwf.js";
 import {
   readExecutionMetrics,
   writeExecutionMetrics,
   runPentestWorkflow2
-} from "./cli-9pz9wjt2.js";
-import"./cli-1pmfnz1a.js";
-import"./cli-fdrrbb9p.js";
+} from "./cli-nc5thq90.js";
+import"./cli-8jmv4k35.js";
+import"./cli-8bkc7zc0.js";
 import {
   EMPTY_SESSION_TOKEN_USAGE,
   accumulateSessionTokens
 } from "./cli-ag6jtndp.js";
-import"./cli-72y76bpg.js";
+import"./cli-3baw38jr.js";
 import"./cli-qba2x69h.js";
 import {
-  init_ai,
-  normalizeStepUsage
-} from "./cli-a6x4jm5a.js";
+  normalizeStepUsage,
+  init_ai2
+} from "./cli-n4vfz69h.js";
 import"./cli-c2k4xxaw.js";
 
 // src/core/api/blackboxPentest.ts
-init_ai();
+init_ai2();
 async function runPentestAgent(input) {
   const persisted = readExecutionMetrics(input.session.rootPath)?.tokenUsage;
   let tokenUsage = persisted ?? EMPTY_SESSION_TOKEN_USAGE;

package/build/{cli-w9nw2a4z.js → cli-25fa1zyr.js}

@@ -3,7 +3,7 @@ import {
 } from "./cli-h6y3bt60.js";
 
 // package.json
-var version = "2.7.0-canary.21cb83dc", package_default;
+var version = "2.7.0-canary.65ea630f", package_default;
 var init_package = __esm(() => {
   package_default = {
     author: "Pensar",
@@ -336,6 +336,7 @@ var init_package = __esm(() => {
       "format:check": 'biome check && prettier --check "**/*.{md,yml,yaml}"',
       "generate:ascii": "bun run scripts/generate-ascii-art.ts",
       "generate:models": "bun run scripts/generate-models.ts",
+      "generate:reasoning": "bun run scripts/sync-reasoning-capabilities.ts",
       knip: "knip",
       lint: "biome lint src/",
       "lint:fix": "biome lint --write src/",

package/build/{cli-72y76bpg.js → cli-3baw38jr.js}

@@ -1,11 +1,12 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-t4q4t4dx.js";
+} from "./cli-z9vvm3j3.js";
 
 // src/core/agents/agentRuntime.ts
 function assembleAgentHooks(opts) {
   return {
     findingPolicy: opts.findingPolicy,
+    toolExecutionContext: opts.toolExecutionContext,
     backends: opts.backends,
     subagentSpawner: opts.subagentSpawner,
     languageModelMiddleware: opts.languageModelMiddleware,

package/build/{cli-vn4cwac3.js → cli-3gep10fn.js}

@@ -4,7 +4,7 @@ import {
   LocalWorkerTransportError,
   WorkerConnectionError,
   workerRequest
-} from "./cli-5ab346kd.js";
+} from "./cli-za8brr9s.js";
 
 // src/core/runtime/launchLocalWorker.ts
 import { spawn } from "node:child_process";

package/build/cli-3ncpc0a4.js

@@ -0,0 +1,54 @@
+import {
+  OffensiveSecurityAgent
+} from "./cli-z9vvm3j3.js";
+import {
+  startAgentExecution,
+  resolveRootReasoning,
+  persistRootReasoningOverride
+} from "./cli-xxe3p6qp.js";
+
+// src/core/api/offesecAgent.ts
+async function runOffensiveSecurityAgent2(input) {
+  const resolved = resolveRootReasoning(input);
+  const persisted = persistRootReasoningOverride(input);
+  input = persisted ? { ...resolved, session: await persisted } : resolved;
+  const agent = input.session ? new OffensiveSecurityAgent(input) : await OffensiveSecurityAgent.create(input);
+  input.onSessionReady?.(agent.session);
+  await startAgentExecution(agent).result;
+  return {
+    streamResult: agent.streamResult,
+    session: agent.session,
+    ...agent.lanceRuntime ? { lance: agent.lanceRuntime.metrics(input.model) } : {}
+  };
+}
+function createOffensiveSecurityAgentClient2() {
+  const controller = new AbortController;
+  let started = false;
+  return {
+    run(input) {
+      if (started) {
+        throw new Error("Offensive security agent client already started a run — create a new client per run");
+      }
+      started = true;
+      return runOffensiveSecurityAgent2({
+        ...input,
+        abortSignal: controller.signal
+      });
+    },
+    abort() {
+      controller.abort();
+    }
+  };
+}
+
+// src/core/api/lance.ts
+async function runLance(input) {
+  const result = await runOffensiveSecurityAgent2({
+    ...input,
+    mode: "lance",
+    activeTools: []
+  });
+  return { session: result.session, result: result.lance };
+}
+
+export { runOffensiveSecurityAgent2, createOffensiveSecurityAgentClient2, runLance };

package/build/{cli-vdd1s3x9.js → cli-4qbbnn6z.js}

@@ -1,13 +1,13 @@
 import {
-  collectCommand,
-  windowsProgramInvocation,
-  SANDBOX_ARTIFACTS_ROOT,
   isMemoryEnabled,
   readPlan,
+  collectCommand,
+  windowsProgramInvocation,
+  sandboxArtifactsRoot,
   REPORT_ERROR_TOOL_NAME,
   createReportErrorTool,
   PentestReportedError
-} from "./cli-t4q4t4dx.js";
+} from "./cli-z9vvm3j3.js";
 import {
   GOOGLE_SIGNIN_PROMPT_GUIDANCE,
   browserEngineForGoogleSignIn
@@ -18,15 +18,15 @@ import {
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-72y76bpg.js";
+} from "./cli-3baw38jr.js";
 import {
   hasToolCall,
   init_dist,
-  scopedLogger,
-  init_lazyLogger,
   createLogger,
-  init_structured
-} from "./cli-a6x4jm5a.js";
+  init_structured,
+  scopedLogger,
+  init_lazyLogger
+} from "./cli-n4vfz69h.js";
 import {
   init_zod
 } from "./cli-3qznjsnr.js";
@@ -154,12 +154,12 @@ var targetedPentestWorker = defineAgent({
       } catch {}
     }
     const sandboxed = opts.backends?.sandboxed === true;
-    const findingsPath = sandboxed ? `${SANDBOX_ARTIFACTS_ROOT}/findings` : opts.session.findingsPath;
+    const findingsPath = sandboxed ? `${sandboxArtifactsRoot(opts.session)}/findings` : opts.session.findingsPath;
     const findings = opts.findingPolicy === "external" ? [] : sandboxed && opts.backends ? await loadSandboxFindings(opts.backends, findingsPath, opts.abortSignal) : loadFindings(findingsPath);
     return {
       findings,
       findingsPath,
-      pocsPath: sandboxed ? `${SANDBOX_ARTIFACTS_ROOT}/pocs` : opts.session.pocsPath,
+      pocsPath: sandboxed ? `${sandboxArtifactsRoot(opts.session)}/pocs` : opts.session.pocsPath,
       objectiveResults,
       newObjectives,
       reportedFindings

package/build/{cli-fdrrbb9p.js → cli-8bkc7zc0.js}

@@ -1,15 +1,15 @@
 import {
   EndpointTransportEnum,
   GrpcEndpointMetadataSchema
-} from "./cli-t4q4t4dx.js";
+} from "./cli-z9vvm3j3.js";
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-72y76bpg.js";
+} from "./cli-3baw38jr.js";
 import {
   stepCountIs2,
   init_dist
-} from "./cli-a6x4jm5a.js";
+} from "./cli-n4vfz69h.js";
 import {
   tool
 } from "./cli-pwm29ks7.js";

package/build/{cli-1pmfnz1a.js → cli-8jmv4k35.js}

@@ -1,11 +1,11 @@
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-72y76bpg.js";
+} from "./cli-3baw38jr.js";
 import {
   stepCountIs2,
   init_dist
-} from "./cli-a6x4jm5a.js";
+} from "./cli-n4vfz69h.js";
 
 // src/core/agents/specialized/codeAgent/agent.ts
 init_dist();

package/build/{cli-98wmmphf.js → cli-9nk97s94.js}

@@ -3,7 +3,7 @@ import {
   get2,
   update2,
   init_config2
-} from "./cli-zbbtr4sb.js";
+} from "./cli-vzh6d08m.js";
 import {
   __esm
 } from "./cli-h6y3bt60.js";

package/build/{cli-9kk9tm58.js → cli-bnegz51z.js}

@@ -8,15 +8,15 @@ import {
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-72y76bpg.js";
+} from "./cli-3baw38jr.js";
 import {
   hasToolCall,
   init_dist,
-  scopedLogger,
-  init_lazyLogger,
   createLogger,
-  init_structured
-} from "./cli-a6x4jm5a.js";
+  init_structured,
+  scopedLogger,
+  init_lazyLogger
+} from "./cli-n4vfz69h.js";
 
 // src/core/agents/specialized/authenticationAgent/agent.ts
 init_dist();

package/build/{cli-9jscnhtg.js → cli-cb7f2wcw.js}

@@ -1,7 +1,7 @@
 import {
   config2,
   init_config
-} from "./cli-98wmmphf.js";
+} from "./cli-9nk97s94.js";
 import {
   __esm
 } from "./cli-h6y3bt60.js";

package/build/{cli-t09zj814.js → cli-egs0t450.js}

@@ -4,12 +4,12 @@ import {
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-72y76bpg.js";
+} from "./cli-3baw38jr.js";
 import {
   stepCountIs2,
   hasToolCall,
   init_dist
-} from "./cli-a6x4jm5a.js";
+} from "./cli-n4vfz69h.js";
 
 // src/core/agents/specialized/attackSurface/blackboxAgent.ts
 init_dist();

package/build/{cli-563yntrb.js → cli-h14pdgzz.js}

@@ -4,10 +4,10 @@ import {
   openSqliteRunStore,
   resolveWorkerEndpoint,
   workerRequest
-} from "./cli-5ab346kd.js";
+} from "./cli-za8brr9s.js";
 import {
   launchLocalWorker
-} from "./cli-vn4cwac3.js";
+} from "./cli-3gep10fn.js";
 
 // src/core/runtime/recordedRunClient.ts
 import { setTimeout as delay } from "node:timers/promises";

package/build/{cli-z7ysyrr4.js → cli-n3e3vjwf.js}

@@ -4,7 +4,7 @@ import {
   ValidatedCweEntrySchema,
   hasCanonicalName,
   EvidenceFileEntrySchema
-} from "./cli-t4q4t4dx.js";
+} from "./cli-z9vvm3j3.js";
 import {
   init_zod
 } from "./cli-3qznjsnr.js";