@pensar/apex 2.7.0-canary.65ea630f → 2.7.0-canary.89464e65

package/build/agent-0hqzqt56.js

@@ -0,0 +1,14 @@
+import {
+  runAuthenticationAgent2
+} from "./cli-kgsempyx.js";
+import"./cli-bfvp9zqk.js";
+import"./cli-qba2x69h.js";
+import"./cli-q6y3qj7s.js";
+import"./cli-kbs4zaye.js";
+import"./cli-e0pzprpf.js";
+import"./cli-jam99yar.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-mtg8qnv2.js";
+export {
+  runAuthenticationAgent2 as runAuthenticationAgent
+};

package/build/agent-2445x132.js

@@ -0,0 +1,14 @@
+import {
+  CodeAgent2
+} from "./cli-dkkfyzjw.js";
+import"./cli-bfvp9zqk.js";
+import"./cli-qba2x69h.js";
+import"./cli-q6y3qj7s.js";
+import"./cli-kbs4zaye.js";
+import"./cli-e0pzprpf.js";
+import"./cli-jam99yar.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-mtg8qnv2.js";
+export {
+  CodeAgent2 as CodeAgent
+};

package/build/{agent-apjfqhdy.js → agent-9wkhsvd6.js}

@@ -1,15 +1,15 @@
 import {
   TargetedPentestAgent2,
   buildPentestSystemPrompt2
-} from "./cli-4qbbnn6z.js";
-import"./cli-3baw38jr.js";
+} from "./cli-jezvey18.js";
+import"./cli-bfvp9zqk.js";
 import"./cli-qba2x69h.js";
-import"./cli-z9vvm3j3.js";
-import"./cli-vre3pncf.js";
-import"./cli-n4vfz69h.js";
-import"./cli-cb7f2wcw.js";
+import"./cli-q6y3qj7s.js";
+import"./cli-kbs4zaye.js";
+import"./cli-e0pzprpf.js";
+import"./cli-jam99yar.js";
 import"./cli-c2k4xxaw.js";
-import"./cli-9nk97s94.js";
+import"./cli-mtg8qnv2.js";
 export {
   TargetedPentestAgent2 as TargetedPentestAgent,
   buildPentestSystemPrompt2 as buildPentestSystemPrompt

package/build/{agent-runs-4fy6brty.js → agent-runs-gp8p07gh.js}

@@ -1,12 +1,12 @@
 import {
   config2,
   init_config
-} from "./cli-9nk97s94.js";
-import"./cli-cb7f2wcw.js";
-import"./cli-z9vvm3j3.js";
+} from "./cli-mtg8qnv2.js";
+import"./cli-jam99yar.js";
+import"./cli-q6y3qj7s.js";
 import {
   AgentEventBus
-} from "./cli-vre3pncf.js";
+} from "./cli-kbs4zaye.js";
 import {
   inspectSessionEvidence2,
   RecordedRunSpecSchema,
@@ -17,27 +17,27 @@ import {
   runRecordedAgent2,
   RunRecoveryBlockedError2,
   resumeRecordedAgent2
-} from "./cli-za8brr9s.js";
-import"./cli-egs0t450.js";
-import"./cli-8jmv4k35.js";
-import"./cli-8bkc7zc0.js";
-import"./cli-nc5thq90.js";
-import"./cli-bnegz51z.js";
-import"./cli-4qbbnn6z.js";
-import"./cli-n3e3vjwf.js";
-import"./cli-xxe3p6qp.js";
+} from "./cli-h738x46d.js";
+import"./cli-0yjapx5n.js";
+import"./cli-dkkfyzjw.js";
+import"./cli-g6bgndhs.js";
+import"./cli-cgwm7tnj.js";
+import"./cli-kgsempyx.js";
+import"./cli-jezvey18.js";
+import"./cli-c04tfjd5.js";
+import"./cli-p5qyq33j.js";
 import"./cli-xcy2vxj2.js";
 import {
   resolveWorkerExecutable,
   launchLocalWorker
-} from "./cli-3gep10fn.js";
-import"./cli-3ncpc0a4.js";
-import"./cli-3baw38jr.js";
+} from "./cli-djh5mphz.js";
+import"./cli-nfdc84d2.js";
+import"./cli-bfvp9zqk.js";
 import"./cli-qba2x69h.js";
 import {
   buildAuthConfig,
   init_ai2
-} from "./cli-n4vfz69h.js";
+} from "./cli-e0pzprpf.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/agent-runs.ts
@@ -118,7 +118,7 @@ async function runAgentRunsCommand(args) {
     if (!isAbsolute(values.store)) {
       throw new Error("agent-runs worker requires --store <absolute database>");
     }
-    const { serveLocalRunWorker } = await import("./index-2wr0xgt8.js");
+    const { serveLocalRunWorker } = await import("./index-k50nby3j.js");
     await serveLocalRunWorker({
       runId: values.run,
       databasePath: resolve(values.store)
@@ -132,7 +132,7 @@ async function runAgentRunsCommand(args) {
 ${HELP}`);
   }
   if (command === "attach") {
-    const { openRecordedRunClient } = await import("./recordedRunClient-n83gzjck.js");
+    const { openRecordedRunClient } = await import("./recordedRunClient-954nd7j6.js");
     const client = await openRecordedRunClient(values.store);
     const controller = new AbortController;
     const detach = () => controller.abort();

package/build/{agent-c5x0bmpj.js → agent-s3v1x1pf.js}

@@ -1,16 +1,16 @@
-import"./cli-vre3pncf.js";
-import"./cli-9nk97s94.js";
-import"./cli-cb7f2wcw.js";
-import"./cli-z9vvm3j3.js";
+import"./cli-kbs4zaye.js";
+import"./cli-mtg8qnv2.js";
+import"./cli-jam99yar.js";
+import"./cli-q6y3qj7s.js";
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-3baw38jr.js";
+} from "./cli-bfvp9zqk.js";
 import"./cli-qba2x69h.js";
 import {
   stepCountIs2,
   init_dist
-} from "./cli-n4vfz69h.js";
+} from "./cli-e0pzprpf.js";
 import"./cli-c2k4xxaw.js";
 import {
   init_zod

package/build/{apps-w3azg4hv.js → apps-2ftfakca.js}

@@ -15,27 +15,27 @@ import {
   searchEndpoints2,
   listDomains2,
   createDomain2
-} from "./cli-z9vvm3j3.js";
-import"./cli-vre3pncf.js";
-import"./cli-9nk97s94.js";
-import"./cli-cb7f2wcw.js";
-import"./cli-za8brr9s.js";
-import"./cli-egs0t450.js";
-import"./cli-8jmv4k35.js";
-import"./cli-8bkc7zc0.js";
-import"./cli-nc5thq90.js";
-import"./cli-bnegz51z.js";
-import"./cli-4qbbnn6z.js";
-import"./cli-n3e3vjwf.js";
-import"./cli-xxe3p6qp.js";
+} from "./cli-q6y3qj7s.js";
+import"./cli-kbs4zaye.js";
+import"./cli-mtg8qnv2.js";
+import"./cli-jam99yar.js";
+import"./cli-h738x46d.js";
+import"./cli-0yjapx5n.js";
+import"./cli-dkkfyzjw.js";
+import"./cli-g6bgndhs.js";
+import"./cli-cgwm7tnj.js";
+import"./cli-kgsempyx.js";
+import"./cli-jezvey18.js";
+import"./cli-c04tfjd5.js";
+import"./cli-p5qyq33j.js";
 import"./cli-xcy2vxj2.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-3ncpc0a4.js";
-import"./cli-3baw38jr.js";
+import"./cli-nfdc84d2.js";
+import"./cli-bfvp9zqk.js";
 import"./cli-qba2x69h.js";
-import"./cli-n4vfz69h.js";
+import"./cli-e0pzprpf.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/apps.ts

package/build/{auth-1n5zzpv3.js → auth-cn7606et.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env bun
-import"./cli-z9vvm3j3.js";
-import"./cli-vre3pncf.js";
+import"./cli-q6y3qj7s.js";
+import"./cli-kbs4zaye.js";
 import {
   config2,
   init_config
-} from "./cli-9nk97s94.js";
+} from "./cli-mtg8qnv2.js";
 import {
   getPensarApiUrl2,
   getPensarConsoleUrl2,
@@ -20,24 +20,24 @@ import {
   createWorkspaceSelection2,
   pollWorkspaceSelection2,
   init_auth
-} from "./cli-cb7f2wcw.js";
-import"./cli-za8brr9s.js";
-import"./cli-egs0t450.js";
-import"./cli-8jmv4k35.js";
-import"./cli-8bkc7zc0.js";
-import"./cli-nc5thq90.js";
-import"./cli-bnegz51z.js";
-import"./cli-4qbbnn6z.js";
-import"./cli-n3e3vjwf.js";
-import"./cli-xxe3p6qp.js";
+} from "./cli-jam99yar.js";
+import"./cli-h738x46d.js";
+import"./cli-0yjapx5n.js";
+import"./cli-dkkfyzjw.js";
+import"./cli-g6bgndhs.js";
+import"./cli-cgwm7tnj.js";
+import"./cli-kgsempyx.js";
+import"./cli-jezvey18.js";
+import"./cli-c04tfjd5.js";
+import"./cli-p5qyq33j.js";
 import"./cli-xcy2vxj2.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-3ncpc0a4.js";
-import"./cli-3baw38jr.js";
+import"./cli-nfdc84d2.js";
+import"./cli-bfvp9zqk.js";
 import"./cli-qba2x69h.js";
-import"./cli-n4vfz69h.js";
+import"./cli-e0pzprpf.js";
 import"./cli-c2k4xxaw.js";
 import {
   __require

package/build/blackboxAgent-zzhmqs0h.js

@@ -0,0 +1,14 @@
+import {
+  BlackboxAttackSurfaceAgent2
+} from "./cli-0yjapx5n.js";
+import"./cli-bfvp9zqk.js";
+import"./cli-qba2x69h.js";
+import"./cli-q6y3qj7s.js";
+import"./cli-kbs4zaye.js";
+import"./cli-e0pzprpf.js";
+import"./cli-jam99yar.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-mtg8qnv2.js";
+export {
+  BlackboxAttackSurfaceAgent2 as BlackboxAttackSurfaceAgent
+};

package/build/{blackboxPentest-13zy16b6.js → blackboxPentest-mm9w83s4.js}

@@ -1,27 +1,27 @@
-import"./cli-9nk97s94.js";
-import"./cli-cb7f2wcw.js";
-import"./cli-vre3pncf.js";
-import"./cli-z9vvm3j3.js";
-import"./cli-egs0t450.js";
-import"./cli-4qbbnn6z.js";
-import"./cli-n3e3vjwf.js";
+import"./cli-mtg8qnv2.js";
+import"./cli-jam99yar.js";
+import"./cli-kbs4zaye.js";
+import"./cli-q6y3qj7s.js";
+import"./cli-0yjapx5n.js";
+import"./cli-jezvey18.js";
+import"./cli-c04tfjd5.js";
 import {
   readExecutionMetrics,
   writeExecutionMetrics,
   runPentestWorkflow2
-} from "./cli-nc5thq90.js";
-import"./cli-8jmv4k35.js";
-import"./cli-8bkc7zc0.js";
+} from "./cli-cgwm7tnj.js";
+import"./cli-dkkfyzjw.js";
+import"./cli-g6bgndhs.js";
 import {
   EMPTY_SESSION_TOKEN_USAGE,
   accumulateSessionTokens
 } from "./cli-ag6jtndp.js";
-import"./cli-3baw38jr.js";
+import"./cli-bfvp9zqk.js";
 import"./cli-qba2x69h.js";
 import {
   normalizeStepUsage,
   init_ai2
-} from "./cli-n4vfz69h.js";
+} from "./cli-e0pzprpf.js";
 import"./cli-c2k4xxaw.js";
 
 // src/core/api/blackboxPentest.ts

package/build/{cli-pegw5ec1.js → cli-0gsr4hx2.js}

@@ -3,7 +3,7 @@ import {
   init_structured,
   scopedLogger,
   init_lazyLogger
-} from "./cli-n4vfz69h.js";
+} from "./cli-e0pzprpf.js";
 
 // src/core/integrations/wandb/client.ts
 init_structured();

package/build/{cli-egs0t450.js → cli-0yjapx5n.js}

@@ -4,12 +4,12 @@ import {
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-3baw38jr.js";
+} from "./cli-bfvp9zqk.js";
 import {
   stepCountIs2,
   hasToolCall,
   init_dist
-} from "./cli-n4vfz69h.js";
+} from "./cli-e0pzprpf.js";
 
 // src/core/agents/specialized/attackSurface/blackboxAgent.ts
 init_dist();
@@ -61,7 +61,7 @@ Every discovery MUST come from actual tool output:
 - NEVER report endpoints, subdomains, or status codes without running a command to verify them
 - NEVER infer technology stacks without direct evidence (headers, error pages, fingerprints)
 - If a command returns 404 or no results, do NOT fabricate findings
-- ALWAYS follow ALL redirects (HTTP and client-side) — document only final destinations
+- Follow a redirect only when its destination host is already present in the immutable run scope. Otherwise record the hostname as a candidate for a future approved run and do not connect.
 - If a page returns 200, check for client-side redirects (NEXT_REDIRECT, window.location, meta refresh) before documenting
 
 # PHASE 1 — AUTHENTICATION (MUST BE FIRST WHEN CREDENTIALS ARE PROVIDED)
@@ -108,50 +108,14 @@ If you start getting 401/403 on endpoints that previously returned 200, re-authe
 
 **This phase only runs if subdomain enumeration is ENABLED in the session config.** If disabled, skip entirely and move to Phase 3.
 
-**Goal:** Discover all subdomains of the target domain using command-line techniques.
+**Goal:** Collect candidate subdomains without widening this run.
 
-Use \`execute_command\` for each technique below:
-
-## 2a. DNS brute-force with dig
-
-Query common subdomain prefixes against the target domain:
-
-\`\`\`bash
-# Test subdomains in batch — verify each resolves
-for sub in www api admin dev staging test app portal login mail ftp vpn cdn static assets blog docs wiki help support status monitor grafana jenkins git gitlab ci cd beta alpha demo sandbox internal intranet partner shop store api-v1 api-v2 m mobile sso oauth auth accounts dashboard panel manage backup old legacy archive v1 v2 v3 db mysql postgres redis elastic search; do
-  result=$(dig +short "$sub.DOMAIN" A 2>/dev/null)
-  if [ -n "$result" ]; then
-    echo "[FOUND] $sub.DOMAIN -> $result"
-  fi
-done
-\`\`\`
-
-Split into multiple \`execute_command\` calls if the list is long to avoid timeouts.
-
-## 2b. Certificate transparency logs
-
-\`\`\`bash
-# Query crt.sh for certificate transparency records
-curl -s "https://crt.sh/?q=%25.DOMAIN&output=json" | jq -r '.[].name_value' 2>/dev/null | sort -u
-\`\`\`
-
-## 2c. Reverse DNS on discovered IPs
-
-\`\`\`bash
-dig -x IP_ADDRESS
-\`\`\`
-
-## 2d. DNS zone transfer attempt
-
-\`\`\`bash
-# Get nameservers then attempt zone transfer
-dig NS DOMAIN +short | while read ns; do dig axfr @"$ns" DOMAIN; done
-\`\`\`
-
-**For every discovered subdomain:**
-- Resolve it to an IP with \`dig +short SUBDOMAIN A\`
-- Check if it serves HTTP(S) with \`curl -L -I --max-time 5 https://SUBDOMAIN\` and \`curl -L -I --max-time 5 http://SUBDOMAIN\`
-- Document it using \`document_app\` (for the subdomain as an application)
+Use the brokered \`web_search\` capability and evidence already returned by the
+authorized application (links, CSP, scripts, certificates, API responses) to
+identify candidates. Do not query, resolve, scan, or request a candidate unless
+its exact hostname is already listed in the run scope. Record unapproved
+candidates in \`keyFindings\` for ownership verification and a future run; do
+not call \`document_app\` or \`document_endpoint\` for an unverified candidate.
 
 # PHASE 3 — ENDPOINT EXTRACTION FROM JAVASCRIPT
 
@@ -358,7 +322,7 @@ Submit the final structured report. Call this ONCE at the very end with complete
 
 1. **Act, don't ask.** Never say "Would you like me to..." — just do it.
 2. **Verify everything.** Every finding must have a command and output backing it.
-3. **Follow redirects.** Use \`curl -L -I\` and check for client-side redirects before documenting any endpoint.
+3. **Follow scoped redirects only.** Inspect each Location/client-side destination first. Follow it only when the exact host is already authorized; never use \`curl -L\` across an unreviewed redirect.
 4. **Breadth over depth.** Find everything; test nothing deeply.
 5. **Document as you go.** Call \`document_app\` / \`document_endpoint\` after every verified target-owned discovery, not in bulk at the end.
 6. **End with the report.** Your final action must be \`create_attack_surface_report\`.
@@ -490,8 +454,8 @@ ${authenticationInstructions}
     authBlock = `AUTHENTICATION: No credentials provided. Skip Phase 1 and proceed with unauthenticated discovery.
 Note any login pages you find as assets and flag them for pentest agents.`;
   }
-  const scopeRules = scopeConstraints?.strictScope ? `STRICT SCOPE — Only test URLs/endpoints within allowed hosts and ports. Do NOT scan outside the target.` : `OPEN SCOPE — You may discover and explore related/adjacent targets.`;
-  const subdomainBlock = enumerateSubdomains ? `SUBDOMAIN ENUMERATION: ENABLED — Execute Phase 2 fully (DNS brute-force, certificate transparency, zone transfers).` : `SUBDOMAIN ENUMERATION: DISABLED — Skip Phase 2 entirely. Focus only on the provided target URL.`;
+  const scopeRules = scopeConstraints?.strictScope ? `STRICT IMMUTABLE SCOPE — Connect only to exact allowed hosts and ports. Discovery and redirects never widen this run.` : `UNRESTRICTED LOCAL MODE — No host boundary was supplied by the caller.`;
+  const subdomainBlock = enumerateSubdomains ? `SUBDOMAIN CANDIDATE DISCOVERY: ENABLED — Use brokered/passive evidence only. Never connect to a candidate that is absent from the immutable scope.` : `SUBDOMAIN ENUMERATION: DISABLED — Skip Phase 2 entirely. Focus only on the provided target URL.`;
   const startDirective = credBlock || authenticationInstructions ? `Begin NOW by logging in. Your first tool call must be browser_navigate to ${loginTarget}. After login, continue with the remaining phases.` : `Begin attack surface analysis now. Follow the phases defined in your system prompt in order.`;
   const operatorGuidanceBlock = operatorPrompt ? `
 ## Operator Guidance

package/build/{cli-3baw38jr.js → cli-bfvp9zqk.js}

@@ -1,6 +1,6 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-z9vvm3j3.js";
+} from "./cli-q6y3qj7s.js";
 
 // src/core/agents/agentRuntime.ts
 function assembleAgentHooks(opts) {

package/build/{cli-n3e3vjwf.js → cli-c04tfjd5.js}

@@ -4,7 +4,7 @@ import {
   ValidatedCweEntrySchema,
   hasCanonicalName,
   EvidenceFileEntrySchema
-} from "./cli-z9vvm3j3.js";
+} from "./cli-q6y3qj7s.js";
 import {
   init_zod
 } from "./cli-3qznjsnr.js";

package/build/{cli-nc5thq90.js → cli-cgwm7tnj.js}

@@ -7,7 +7,7 @@ import {
   resolveItemHooks,
   spawnBatch2,
   inProcessSubagentSpawner2
-} from "./cli-vre3pncf.js";
+} from "./cli-kbs4zaye.js";
 import {
   collectCommand,
   toGrpcPentestContext,
@@ -15,24 +15,24 @@ import {
   pLimit,
   PLAN_MODE_TOOL_NAMES,
   OffensiveSecurityAgent
-} from "./cli-z9vvm3j3.js";
+} from "./cli-q6y3qj7s.js";
 import {
   BlackboxAttackSurfaceAgent2
-} from "./cli-egs0t450.js";
+} from "./cli-0yjapx5n.js";
 import {
   TargetedPentestAgent2,
   buildPentestSystemPrompt2
-} from "./cli-4qbbnn6z.js";
+} from "./cli-jezvey18.js";
 import {
   buildPentestReport,
   renderJson,
   renderMarkdown,
   REPORT_FILENAME_MD,
   REPORT_FILENAME_JSON
-} from "./cli-n3e3vjwf.js";
+} from "./cli-c04tfjd5.js";
 import {
   CodeAgent2
-} from "./cli-8jmv4k35.js";
+} from "./cli-dkkfyzjw.js";
 import {
   WHITEBOX_APPS_DISCOVERY_SYSTEM_PROMPT2,
   WHITEBOX_ENDPOINT_DOCUMENTATION_SYSTEM_PROMPT,
@@ -41,7 +41,7 @@ import {
   AppInfoSchema2,
   AppsDiscoveryResultSchema2,
   DiscoverySummarySchema2
-} from "./cli-8bkc7zc0.js";
+} from "./cli-g6bgndhs.js";
 import {
   createThreatModelPrompt
 } from "./cli-q126f6ef.js";
@@ -53,7 +53,7 @@ import {
   init_structured,
   scopedLogger,
   init_lazyLogger
-} from "./cli-n4vfz69h.js";
+} from "./cli-e0pzprpf.js";
 import {
   newSessionId,
   init_id
@@ -8216,7 +8216,7 @@ async function runPentestSwarm2(input) {
 }
 async function runPentestWorkflow2(input) {
   if (input.fastStrike) {
-    const { runFastStrike } = await import("./fastStrike-hnvt0h0d.js");
+    const { runFastStrike } = await import("./fastStrike-3ep09355.js");
     return runFastStrike(input);
   }
   const {

package/build/{cli-3gep10fn.js → cli-djh5mphz.js}

@@ -4,7 +4,7 @@ import {
   LocalWorkerTransportError,
   WorkerConnectionError,
   workerRequest
-} from "./cli-za8brr9s.js";
+} from "./cli-h738x46d.js";
 
 // src/core/runtime/launchLocalWorker.ts
 import { spawn } from "node:child_process";

package/build/{cli-8jmv4k35.js → cli-dkkfyzjw.js}

@@ -1,11 +1,11 @@
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-3baw38jr.js";
+} from "./cli-bfvp9zqk.js";
 import {
   stepCountIs2,
   init_dist
-} from "./cli-n4vfz69h.js";
+} from "./cli-e0pzprpf.js";
 
 // src/core/agents/specialized/codeAgent/agent.ts
 init_dist();

package/build/{cli-n4vfz69h.js → cli-e0pzprpf.js}

@@ -6,14 +6,14 @@ import {
 import {
   config2,
   init_config
-} from "./cli-9nk97s94.js";
+} from "./cli-mtg8qnv2.js";
 import {
   getPensarGatewayUrl,
   init_constants,
   ensureValidToken2,
   signGatewayRequest2,
   init_auth
-} from "./cli-cb7f2wcw.js";
+} from "./cli-jam99yar.js";
 import {
   init_v4,
   ZodFirstPartyTypeKind,
@@ -106,11 +106,11 @@ import {
   HOONIFY_BASE_URL,
   resolveHoonifyModel,
   init_hoonify
-} from "./cli-vzh6d08m.js";
+} from "./cli-q1xs3e43.js";
 import {
   getCurrentVersion,
   init_installation
-} from "./cli-25fa1zyr.js";
+} from "./cli-qgttmrdw.js";
 import {
   init_zod
 } from "./cli-3qznjsnr.js";
@@ -10592,7 +10592,7 @@ async function create(input) {
   } else if (input.inheritEnvironmentConfig === false) {
     snapshotHeaders = {};
   } else {
-    const { config: appConfig } = await import("./index-dxwq9egv.js");
+    const { config: appConfig } = await import("./index-nczwtn2v.js");
     const cfg = await appConfig.get();
     snapshotHeaders = cfg.defaultHeaders ? { ...cfg.defaultHeaders } : { ...DEFAULT_HEADER_RECORD };
   }
@@ -51262,9 +51262,10 @@ function parseResponsesSSE(sseStream, options) {
       let outputTokens = 0;
       let cacheReadTokens = 0;
       let noCacheInputTokens = 0;
-      let finishReasonUnified = "stop";
+      let finishReasonUnified = "other";
       let finishReasonRaw;
       let sawToolCall = false;
+      let sawRefusal = false;
       const openText = new Set;
       const openReasoning = new Set;
       const toolsByItemId = new Map;
@@ -51303,6 +51304,11 @@ function parseResponsesSSE(sseStream, options) {
               }
               break;
             }
+            case "response.refusal.delta":
+            case "response.refusal.done": {
+              sawRefusal = true;
+              break;
+            }
             case "response.output_text.delta": {
               const id = textKey(parsed);
               if (!openText.has(id)) {
@@ -51405,6 +51411,15 @@ function parseResponsesSSE(sseStream, options) {
               if (incomplete?.reason === "max_output_tokens") {
                 finishReasonUnified = "length";
                 finishReasonRaw = "max_output_tokens";
+              } else if (incomplete?.reason === "content_filter") {
+                finishReasonUnified = "content-filter";
+                finishReasonRaw = "content_filter";
+              } else if (type === "response.incomplete" || incomplete?.reason) {
+                finishReasonUnified = "other";
+                finishReasonRaw = typeof incomplete?.reason === "string" ? incomplete.reason : "incomplete";
+              } else if (sawRefusal) {
+                finishReasonUnified = "content-filter";
+                finishReasonRaw = "refusal";
               } else if (sawToolCall) {
                 finishReasonUnified = "tool-calls";
                 finishReasonRaw = "tool_calls";
@@ -52217,6 +52232,8 @@ async function summarizeConversation(messages, opts, {
         result.providerMetadata,
         result.toolCalls
       ]);
+      if (streamError !== undefined)
+        throw streamError;
       return { text, usage, finishReason, providerMetadata, toolCalls };
     } catch (error) {
       throw streamError ?? error;
@@ -52291,8 +52308,8 @@ async function summarizeConversation(messages, opts, {
     await reportSummaryUsage(summaryResult);
   }
   const { text: summary } = summaryResult;
-  if (!summary.trim() || (summaryResult.toolCalls?.length ?? 0) > 0) {
-    throw new CompactionRejectedError("Compaction returned no complete summary");
+  if (!summary.trim() || (summaryResult.toolCalls?.length ?? 0) > 0 || summaryResult.finishReason !== "stop") {
+    throw new CompactionRejectedError(`Compaction returned no complete summary (finishReason: ${summaryResult.finishReason})`);
   }
   const taskSummary = extractTaskSummaryFromMessages(messages);
   const summaryWithTasks = [

package/build/{cli-8bkc7zc0.js → cli-g6bgndhs.js}

@@ -1,15 +1,15 @@
 import {
   EndpointTransportEnum,
   GrpcEndpointMetadataSchema
-} from "./cli-z9vvm3j3.js";
+} from "./cli-q6y3qj7s.js";
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-3baw38jr.js";
+} from "./cli-bfvp9zqk.js";
 import {
   stepCountIs2,
   init_dist
-} from "./cli-n4vfz69h.js";
+} from "./cli-e0pzprpf.js";
 import {
   tool
 } from "./cli-pwm29ks7.js";