@pensar/apex 2.7.0-canary.9cda9a55 → 2.7.0-canary.c5791908

package/build/agent-htj3ww3e.js

@@ -0,0 +1,14 @@
+import {
+  CodeAgent2
+} from "./cli-m57v3wm9.js";
+import"./cli-jpjj10xv.js";
+import"./cli-qba2x69h.js";
+import"./cli-b3hef9fp.js";
+import"./cli-40gstjf7.js";
+import"./cli-6g5p7cfd.js";
+import"./cli-z41890cy.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-mfgsx6hc.js";
+export {
+  CodeAgent2 as CodeAgent
+};

package/build/agent-km3wss0b.js

@@ -0,0 +1,14 @@
+import {
+  runAuthenticationAgent2
+} from "./cli-am8b7hr4.js";
+import"./cli-jpjj10xv.js";
+import"./cli-qba2x69h.js";
+import"./cli-b3hef9fp.js";
+import"./cli-40gstjf7.js";
+import"./cli-6g5p7cfd.js";
+import"./cli-z41890cy.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-mfgsx6hc.js";
+export {
+  runAuthenticationAgent2 as runAuthenticationAgent
+};

package/build/{agent-gk12m3vr.js → agent-q85c8mrh.js}

@@ -1,16 +1,16 @@
-import"./cli-9cazf05s.js";
-import"./cli-bdkbh16k.js";
-import"./cli-23q0hfrp.js";
-import"./cli-9ckbsazj.js";
+import"./cli-40gstjf7.js";
+import"./cli-mfgsx6hc.js";
+import"./cli-z41890cy.js";
+import"./cli-b3hef9fp.js";
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-wk2nzxar.js";
+} from "./cli-jpjj10xv.js";
 import"./cli-qba2x69h.js";
 import {
   stepCountIs2,
   init_dist
-} from "./cli-dn1kme57.js";
+} from "./cli-6g5p7cfd.js";
 import"./cli-c2k4xxaw.js";
 import {
   init_zod

package/build/{agent-runs-00btf54k.js → agent-runs-cqa7xz7d.js}

@@ -1,12 +1,12 @@
 import {
   config2,
   init_config
-} from "./cli-bdkbh16k.js";
-import"./cli-23q0hfrp.js";
-import"./cli-9ckbsazj.js";
+} from "./cli-mfgsx6hc.js";
+import"./cli-z41890cy.js";
+import"./cli-b3hef9fp.js";
 import {
   AgentEventBus
-} from "./cli-9cazf05s.js";
+} from "./cli-40gstjf7.js";
 import {
   inspectSessionEvidence2,
   RecordedRunSpecSchema,
@@ -17,30 +17,31 @@ import {
   runRecordedAgent2,
   RunRecoveryBlockedError2,
   resumeRecordedAgent2
-} from "./cli-evf74q87.js";
-import"./cli-7f37bnqn.js";
-import"./cli-nkywk1ph.js";
-import"./cli-e4dnk8ep.js";
-import"./cli-q2hjt27m.js";
-import"./cli-5xzsxyge.js";
-import"./cli-x1zd3ycf.js";
-import"./cli-b3dr7d05.js";
+} from "./cli-ps5hmkhw.js";
+import"./cli-8wkays8e.js";
+import"./cli-m57v3wm9.js";
+import"./cli-ygcbxb1m.js";
+import"./cli-pepjaeek.js";
+import"./cli-am8b7hr4.js";
+import"./cli-xb0pqkbk.js";
+import"./cli-b8jmzd32.js";
+import"./cli-7nrpp1ks.js";
 import"./cli-xcy2vxj2.js";
 import {
   resolveWorkerExecutable,
   launchLocalWorker
-} from "./cli-xtdnc2xv.js";
-import"./cli-rdzq0z0e.js";
-import"./cli-wk2nzxar.js";
+} from "./cli-v084p264.js";
+import"./cli-jvhswf25.js";
+import"./cli-jpjj10xv.js";
 import"./cli-qba2x69h.js";
 import {
   buildAuthConfig,
-  init_ai
-} from "./cli-dn1kme57.js";
+  init_ai2
+} from "./cli-6g5p7cfd.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/agent-runs.ts
-init_ai();
+init_ai2();
 import { once } from "node:events";
 import { readFile } from "node:fs/promises";
 import { isAbsolute, resolve } from "node:path";
@@ -117,7 +118,7 @@ async function runAgentRunsCommand(args) {
     if (!isAbsolute(values.store)) {
       throw new Error("agent-runs worker requires --store <absolute database>");
     }
-    const { serveLocalRunWorker } = await import("./index-a20me9cg.js");
+    const { serveLocalRunWorker } = await import("./index-1j283k20.js");
     await serveLocalRunWorker({
       runId: values.run,
       databasePath: resolve(values.store)
@@ -131,7 +132,7 @@ async function runAgentRunsCommand(args) {
 ${HELP}`);
   }
   if (command === "attach") {
-    const { openRecordedRunClient } = await import("./recordedRunClient-gzbtbakv.js");
+    const { openRecordedRunClient } = await import("./recordedRunClient-gra1x1y6.js");
     const client = await openRecordedRunClient(values.store);
     const controller = new AbortController;
     const detach = () => controller.abort();

package/build/{agent-bsrymh4g.js → agent-x8nf3k1v.js}

@@ -1,15 +1,15 @@
 import {
   TargetedPentestAgent2,
   buildPentestSystemPrompt2
-} from "./cli-x1zd3ycf.js";
-import"./cli-wk2nzxar.js";
+} from "./cli-xb0pqkbk.js";
+import"./cli-jpjj10xv.js";
 import"./cli-qba2x69h.js";
-import"./cli-9ckbsazj.js";
-import"./cli-9cazf05s.js";
-import"./cli-dn1kme57.js";
-import"./cli-23q0hfrp.js";
+import"./cli-b3hef9fp.js";
+import"./cli-40gstjf7.js";
+import"./cli-6g5p7cfd.js";
+import"./cli-z41890cy.js";
 import"./cli-c2k4xxaw.js";
-import"./cli-bdkbh16k.js";
+import"./cli-mfgsx6hc.js";
 export {
   TargetedPentestAgent2 as TargetedPentestAgent,
   buildPentestSystemPrompt2 as buildPentestSystemPrompt

package/build/{apps-0m7kxc5n.js → apps-pxdathp4.js}

@@ -15,26 +15,27 @@ import {
   searchEndpoints2,
   listDomains2,
   createDomain2
-} from "./cli-9ckbsazj.js";
-import"./cli-9cazf05s.js";
-import"./cli-bdkbh16k.js";
-import"./cli-23q0hfrp.js";
-import"./cli-evf74q87.js";
-import"./cli-7f37bnqn.js";
-import"./cli-nkywk1ph.js";
-import"./cli-e4dnk8ep.js";
-import"./cli-q2hjt27m.js";
-import"./cli-5xzsxyge.js";
-import"./cli-x1zd3ycf.js";
-import"./cli-b3dr7d05.js";
+} from "./cli-b3hef9fp.js";
+import"./cli-40gstjf7.js";
+import"./cli-mfgsx6hc.js";
+import"./cli-z41890cy.js";
+import"./cli-ps5hmkhw.js";
+import"./cli-8wkays8e.js";
+import"./cli-m57v3wm9.js";
+import"./cli-ygcbxb1m.js";
+import"./cli-pepjaeek.js";
+import"./cli-am8b7hr4.js";
+import"./cli-xb0pqkbk.js";
+import"./cli-b8jmzd32.js";
+import"./cli-7nrpp1ks.js";
 import"./cli-xcy2vxj2.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-rdzq0z0e.js";
-import"./cli-wk2nzxar.js";
+import"./cli-jvhswf25.js";
+import"./cli-jpjj10xv.js";
 import"./cli-qba2x69h.js";
-import"./cli-dn1kme57.js";
+import"./cli-6g5p7cfd.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/apps.ts

package/build/{auth-qvw356xe.js → auth-dcmykx6e.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env bun
-import"./cli-9ckbsazj.js";
-import"./cli-9cazf05s.js";
+import"./cli-b3hef9fp.js";
+import"./cli-40gstjf7.js";
 import {
   config2,
   init_config
-} from "./cli-bdkbh16k.js";
+} from "./cli-mfgsx6hc.js";
 import {
   getPensarApiUrl2,
   getPensarConsoleUrl2,
@@ -20,23 +20,24 @@ import {
   createWorkspaceSelection2,
   pollWorkspaceSelection2,
   init_auth
-} from "./cli-23q0hfrp.js";
-import"./cli-evf74q87.js";
-import"./cli-7f37bnqn.js";
-import"./cli-nkywk1ph.js";
-import"./cli-e4dnk8ep.js";
-import"./cli-q2hjt27m.js";
-import"./cli-5xzsxyge.js";
-import"./cli-x1zd3ycf.js";
-import"./cli-b3dr7d05.js";
+} from "./cli-z41890cy.js";
+import"./cli-ps5hmkhw.js";
+import"./cli-8wkays8e.js";
+import"./cli-m57v3wm9.js";
+import"./cli-ygcbxb1m.js";
+import"./cli-pepjaeek.js";
+import"./cli-am8b7hr4.js";
+import"./cli-xb0pqkbk.js";
+import"./cli-b8jmzd32.js";
+import"./cli-7nrpp1ks.js";
 import"./cli-xcy2vxj2.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-rdzq0z0e.js";
-import"./cli-wk2nzxar.js";
+import"./cli-jvhswf25.js";
+import"./cli-jpjj10xv.js";
 import"./cli-qba2x69h.js";
-import"./cli-dn1kme57.js";
+import"./cli-6g5p7cfd.js";
 import"./cli-c2k4xxaw.js";
 import {
   __require

package/build/blackboxAgent-g18ps9hs.js

@@ -0,0 +1,14 @@
+import {
+  BlackboxAttackSurfaceAgent2
+} from "./cli-8wkays8e.js";
+import"./cli-jpjj10xv.js";
+import"./cli-qba2x69h.js";
+import"./cli-b3hef9fp.js";
+import"./cli-40gstjf7.js";
+import"./cli-6g5p7cfd.js";
+import"./cli-z41890cy.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-mfgsx6hc.js";
+export {
+  BlackboxAttackSurfaceAgent2 as BlackboxAttackSurfaceAgent
+};

package/build/{blackboxPentest-nckvdrjk.js → blackboxPentest-pbh960ms.js}

@@ -1,31 +1,31 @@
-import"./cli-bdkbh16k.js";
-import"./cli-23q0hfrp.js";
-import"./cli-9cazf05s.js";
-import"./cli-9ckbsazj.js";
-import"./cli-7f37bnqn.js";
-import"./cli-x1zd3ycf.js";
-import"./cli-b3dr7d05.js";
+import"./cli-mfgsx6hc.js";
+import"./cli-z41890cy.js";
+import"./cli-40gstjf7.js";
+import"./cli-b3hef9fp.js";
+import"./cli-8wkays8e.js";
+import"./cli-xb0pqkbk.js";
+import"./cli-b8jmzd32.js";
 import {
   readExecutionMetrics,
   writeExecutionMetrics,
   runPentestWorkflow2
-} from "./cli-q2hjt27m.js";
-import"./cli-nkywk1ph.js";
-import"./cli-e4dnk8ep.js";
+} from "./cli-pepjaeek.js";
+import"./cli-m57v3wm9.js";
+import"./cli-ygcbxb1m.js";
 import {
   EMPTY_SESSION_TOKEN_USAGE,
   accumulateSessionTokens
 } from "./cli-ag6jtndp.js";
-import"./cli-wk2nzxar.js";
+import"./cli-jpjj10xv.js";
 import"./cli-qba2x69h.js";
 import {
-  init_ai,
-  normalizeStepUsage
-} from "./cli-dn1kme57.js";
+  normalizeStepUsage,
+  init_ai2
+} from "./cli-6g5p7cfd.js";
 import"./cli-c2k4xxaw.js";
 
 // src/core/api/blackboxPentest.ts
-init_ai();
+init_ai2();
 async function runPentestAgent(input) {
   const persisted = readExecutionMetrics(input.session.rootPath)?.tokenUsage;
   let tokenUsage = persisted ?? EMPTY_SESSION_TOKEN_USAGE;

package/build/{cli-9cazf05s.js → cli-40gstjf7.js}

@@ -1,11 +1,12 @@
 import {
-  scopedLogger,
-  init_lazyLogger,
-  init_ai,
   createLogger,
   init_structured,
-  generateObjectResponse
-} from "./cli-dn1kme57.js";
+  scopedLogger,
+  init_lazyLogger,
+  getModelSettings,
+  generateObjectResponse,
+  init_ai2
+} from "./cli-6g5p7cfd.js";
 import {
   newSessionId,
   init_id,
@@ -193,7 +194,7 @@ class AgentEventBus {
 }
 
 // src/core/agents/offSecAgent/subagentSpawner.ts
-init_ai();
+init_ai2();
 
 // src/core/utils/concurrency.ts
 var import_api = __toESM(require_src6(), 1);
@@ -371,7 +372,7 @@ class AttackSurfaceRegistry {
 
 // src/core/findings/registry.ts
 init_zod();
-init_ai();
+init_ai2();
 init_structured();
 init_lazyLogger();
 import { existsSync as existsSync2, readdirSync as readdirSync2, readFileSync as readFileSync2 } from "node:fs";
@@ -545,6 +546,7 @@ class FindingsRegistry {
   appWideKeys = new Map;
   findings = [];
   model;
+  reasoning;
   authConfig;
   abortSignal;
   sessionId;
@@ -553,6 +555,7 @@ class FindingsRegistry {
   mutex = Promise.resolve();
   constructor(opts) {
     this.model = opts?.model;
+    this.reasoning = opts?.reasoning;
     this.authConfig = opts?.authConfig;
     this.abortSignal = opts?.abortSignal;
     this.sessionId = opts?.sessionId;
@@ -667,6 +670,7 @@ class FindingsRegistry {
     const prompt = buildSemanticDedupPrompt(finding, existingFindings);
     const result = await generateObjectResponse({
       model: this.model,
+      reasoning: this.reasoning,
       schema: SemanticDedupResultSchema,
       prompt,
       system: SEMANTIC_DEDUP_SYSTEM,
@@ -708,6 +712,7 @@ class FindingsRegistry {
     try {
       result = await generateObjectResponse({
         model: this.model,
+        reasoning: this.reasoning,
         schema: RootCauseGroupResultSchema,
         prompt,
         system: ROOT_CAUSE_GROUPING_SYSTEM,
@@ -904,7 +909,7 @@ async function spawnBatch2(spawner, requests, opts, limiter) {
   });
 }
 async function runSpawnedPentestWorker(spec, input) {
-  const { TargetedPentestAgent } = await import("./agent-bsrymh4g.js");
+  const { TargetedPentestAgent } = await import("./agent-x8nf3k1v.js");
   const hooks = resolveItemHooks(input.hooks, input.seams, spec, 0);
   const agent = new TargetedPentestAgent({
     target: spec.target,
@@ -915,9 +920,8 @@ async function runSpawnedPentestWorker(spec, input) {
     role: spec.role,
     findingsRegistry: input.findingsRegistry,
     browserSession: input.browserSession,
-    model: input.model,
+    ...getModelSettings(input),
     session: input.session,
-    authConfig: input.authConfig,
     onStepFinish: input.onStepFinish,
     onCacheMetrics: input.onCacheMetrics,
     eventBus: input.eventBus,
@@ -925,9 +929,6 @@ async function runSpawnedPentestWorker(spec, input) {
     subagentName: input.subagentName,
     environmentVariables: input.environmentVariables,
     secretValues: input.secretValues,
-    enableThinking: input.enableThinking,
-    thinkingEffort: input.thinkingEffort,
-    openAIReasoningEffort: input.openAIReasoningEffort,
     display: input.display,
     ...hooks,
     abortSignal: input.abortSignal && hooks.abortSignal ? AbortSignal.any([input.abortSignal, hooks.abortSignal]) : input.abortSignal ?? hooks.abortSignal
@@ -946,9 +947,8 @@ var runPentestChild = async (spec, ctx) => {
     role: spec.role
   };
   const workerInput = {
-    model: ctx.model,
+    ...getModelSettings(ctx),
     session: ctx.session,
-    authConfig: ctx.authConfig,
     abortSignal: ctx.abortSignal,
     onStepFinish: ctx.onStepFinish,
     onCacheMetrics: ctx.onCacheMetrics,
@@ -959,9 +959,6 @@ var runPentestChild = async (spec, ctx) => {
     browserSession: spec.browserSession,
     environmentVariables: ctx.environmentVariables,
     secretValues: ctx.secretValues,
-    enableThinking: ctx.enableThinking,
-    thinkingEffort: ctx.thinkingEffort,
-    openAIReasoningEffort: ctx.openAIReasoningEffort,
     display: ctx.display,
     hooks: {
       findingPolicy: ctx.findingPolicy,
@@ -983,7 +980,7 @@ var runPentestChild = async (spec, ctx) => {
   };
 };
 var runCodeChild = async (spec, ctx) => {
-  const { CodeAgent } = await import("./agent-0ar8je48.js");
+  const { CodeAgent } = await import("./agent-htj3ww3e.js");
   const agent = new CodeAgent({
     findingPolicy: ctx.findingPolicy,
     codebasePath: spec.codebasePath,
@@ -994,18 +991,14 @@ var runCodeChild = async (spec, ctx) => {
     excludeTools: spec.excludeTools,
     projectThreatModel: spec.projectThreatModel,
     attackSurfaceRegistry: spec.attackSurfaceRegistry,
-    model: ctx.model,
+    ...getModelSettings(ctx),
     session: ctx.session,
-    authConfig: ctx.authConfig,
     abortSignal: ctx.abortSignal,
     eventBus: ctx.eventBus,
     subagentId: ctx.subagentId,
     subagentName: ctx.subagentName,
     sandbox: ctx.sandbox,
     backends: ctx.backends,
-    enableThinking: ctx.enableThinking,
-    thinkingEffort: ctx.thinkingEffort,
-    openAIReasoningEffort: ctx.openAIReasoningEffort,
     display: ctx.display,
     onStepFinish: ctx.onStepFinish,
     onCacheMetrics: ctx.onCacheMetrics,
@@ -1017,14 +1010,13 @@ var runCodeChild = async (spec, ctx) => {
   return { run: () => agent.consume(), drained: () => agent.drained };
 };
 var runWhiteboxChild = async (spec, ctx) => {
-  const { WhiteboxAttackSurfaceAgent } = await import("./index-8255w7xs.js");
+  const { WhiteboxAttackSurfaceAgent } = await import("./index-vq0132nv.js");
   const agent = new WhiteboxAttackSurfaceAgent({
     findingPolicy: ctx.findingPolicy,
     codebasePath: spec.codebasePath,
     attackSurfaceRegistry: spec.attackSurfaceRegistry,
-    model: ctx.model,
+    ...getModelSettings(ctx),
     session: ctx.session,
-    authConfig: ctx.authConfig,
     abortSignal: ctx.abortSignal,
     eventBus: ctx.eventBus,
     subagentId: ctx.subagentId,
@@ -1039,14 +1031,13 @@ var runWhiteboxChild = async (spec, ctx) => {
   return { run: () => agent.consume(), drained: () => agent.drained };
 };
 var runBlackboxChild = async (spec, ctx) => {
-  const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-yyrrek3k.js");
+  const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-g18ps9hs.js");
   const agent = new BlackboxAttackSurfaceAgent({
     findingPolicy: ctx.findingPolicy,
     target: spec.target,
     attackSurfaceRegistry: spec.attackSurfaceRegistry,
-    model: ctx.model,
+    ...getModelSettings(ctx),
     session: ctx.session,
-    authConfig: ctx.authConfig,
     abortSignal: ctx.abortSignal,
     eventBus: ctx.eventBus,
     subagentId: ctx.subagentId,
@@ -1060,15 +1051,14 @@ var runBlackboxChild = async (spec, ctx) => {
   return { run: () => agent.consume(), drained: () => agent.drained };
 };
 var runAuthChild = async (spec, ctx) => {
-  const { runAuthenticationAgent } = await import("./agent-7htteemj.js");
+  const { runAuthenticationAgent } = await import("./agent-km3wss0b.js");
   return {
     run: () => runAuthenticationAgent({
       findingPolicy: ctx.findingPolicy,
       target: spec.target,
       authHints: spec.authHints,
       session: ctx.session,
-      model: ctx.model,
-      authConfig: ctx.authConfig,
+      ...getModelSettings(ctx),
       abortSignal: ctx.abortSignal,
       eventBus: ctx.eventBus,
       subagentId: ctx.subagentId,
@@ -1084,13 +1074,12 @@ var runAuthChild = async (spec, ctx) => {
   };
 };
 var runJudgeChild = async (spec, ctx) => {
-  const { judgeFinding } = await import("./index-ebycbhee.js");
+  const { judgeFinding } = await import("./index-cn1pgs79.js");
   return {
     run: () => judgeFinding(spec.judgeInput, {
       waitForDrain: spec.waitForDrain,
-      model: ctx.model,
+      ...getModelSettings(ctx),
       session: ctx.session,
-      authConfig: ctx.authConfig,
       abortSignal: ctx.abortSignal,
       eventBus: ctx.eventBus,
       subagentId: ctx.subagentId,
@@ -1098,9 +1087,6 @@ var runJudgeChild = async (spec, ctx) => {
       sandbox: ctx.sandbox,
       backends: ctx.backends,
       target: spec.target,
-      enableThinking: ctx.enableThinking,
-      thinkingEffort: ctx.thinkingEffort,
-      openAIReasoningEffort: ctx.openAIReasoningEffort,
       languageModelMiddleware: ctx.languageModelMiddleware,
       usageRecorder: ctx.usageRecorder,
       toolExecutionContext: ctx.toolExecutionContext,