@pensar/apex 2.7.0-canary.c5791908 → 2.7.0-canary.c763a48b

package/build/{agent-q85c8mrh.js → agent-8p8p45dg.js}

@@ -1,16 +1,16 @@
-import"./cli-40gstjf7.js";
-import"./cli-mfgsx6hc.js";
-import"./cli-z41890cy.js";
-import"./cli-b3hef9fp.js";
+import"./cli-t6jjemz3.js";
+import"./cli-rb7669sc.js";
+import"./cli-j1jcp1ma.js";
+import"./cli-rm6chd07.js";
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-jpjj10xv.js";
+} from "./cli-3qac6b95.js";
 import"./cli-qba2x69h.js";
 import {
   stepCountIs2,
   init_dist
-} from "./cli-6g5p7cfd.js";
+} from "./cli-ty55px8v.js";
 import"./cli-c2k4xxaw.js";
 import {
   init_zod

package/build/{agent-x8nf3k1v.js → agent-j79hpm2v.js}

@@ -1,15 +1,15 @@
 import {
   TargetedPentestAgent2,
   buildPentestSystemPrompt2
-} from "./cli-xb0pqkbk.js";
-import"./cli-jpjj10xv.js";
+} from "./cli-hqt03hyz.js";
+import"./cli-3qac6b95.js";
 import"./cli-qba2x69h.js";
-import"./cli-b3hef9fp.js";
-import"./cli-40gstjf7.js";
-import"./cli-6g5p7cfd.js";
-import"./cli-z41890cy.js";
+import"./cli-rm6chd07.js";
+import"./cli-t6jjemz3.js";
+import"./cli-ty55px8v.js";
+import"./cli-j1jcp1ma.js";
 import"./cli-c2k4xxaw.js";
-import"./cli-mfgsx6hc.js";
+import"./cli-rb7669sc.js";
 export {
   TargetedPentestAgent2 as TargetedPentestAgent,
   buildPentestSystemPrompt2 as buildPentestSystemPrompt

package/build/agent-k1whwehz.js

@@ -0,0 +1,14 @@
+import {
+  runAuthenticationAgent2
+} from "./cli-2f2682d8.js";
+import"./cli-3qac6b95.js";
+import"./cli-qba2x69h.js";
+import"./cli-rm6chd07.js";
+import"./cli-t6jjemz3.js";
+import"./cli-ty55px8v.js";
+import"./cli-j1jcp1ma.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-rb7669sc.js";
+export {
+  runAuthenticationAgent2 as runAuthenticationAgent
+};

package/build/{agent-runs-cqa7xz7d.js → agent-runs-7bses37q.js}

@@ -1,12 +1,12 @@
 import {
   config2,
   init_config
-} from "./cli-mfgsx6hc.js";
-import"./cli-z41890cy.js";
-import"./cli-b3hef9fp.js";
+} from "./cli-rb7669sc.js";
+import"./cli-j1jcp1ma.js";
+import"./cli-rm6chd07.js";
 import {
   AgentEventBus
-} from "./cli-40gstjf7.js";
+} from "./cli-t6jjemz3.js";
 import {
   inspectSessionEvidence2,
   RecordedRunSpecSchema,
@@ -17,27 +17,27 @@ import {
   runRecordedAgent2,
   RunRecoveryBlockedError2,
   resumeRecordedAgent2
-} from "./cli-ps5hmkhw.js";
-import"./cli-8wkays8e.js";
-import"./cli-m57v3wm9.js";
-import"./cli-ygcbxb1m.js";
-import"./cli-pepjaeek.js";
-import"./cli-am8b7hr4.js";
-import"./cli-xb0pqkbk.js";
-import"./cli-b8jmzd32.js";
-import"./cli-7nrpp1ks.js";
-import"./cli-xcy2vxj2.js";
+} from "./cli-3ysp9qdp.js";
+import"./cli-dm2fc4v9.js";
+import"./cli-jvekn5fm.js";
+import"./cli-hfm4szxe.js";
+import"./cli-qsrqeqts.js";
+import"./cli-2f2682d8.js";
+import"./cli-hqt03hyz.js";
+import"./cli-sbxx1mx3.js";
+import"./cli-83kfkdv1.js";
+import"./cli-ak23knae.js";
 import {
   resolveWorkerExecutable,
   launchLocalWorker
-} from "./cli-v084p264.js";
-import"./cli-jvhswf25.js";
-import"./cli-jpjj10xv.js";
+} from "./cli-2smp6vy3.js";
+import"./cli-hx0erkgq.js";
+import"./cli-3qac6b95.js";
 import"./cli-qba2x69h.js";
 import {
   buildAuthConfig,
   init_ai2
-} from "./cli-6g5p7cfd.js";
+} from "./cli-ty55px8v.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/agent-runs.ts
@@ -118,7 +118,7 @@ async function runAgentRunsCommand(args) {
     if (!isAbsolute(values.store)) {
       throw new Error("agent-runs worker requires --store <absolute database>");
     }
-    const { serveLocalRunWorker } = await import("./index-1j283k20.js");
+    const { serveLocalRunWorker } = await import("./index-xc2trj7g.js");
     await serveLocalRunWorker({
       runId: values.run,
       databasePath: resolve(values.store)
@@ -132,7 +132,7 @@ async function runAgentRunsCommand(args) {
 ${HELP}`);
   }
   if (command === "attach") {
-    const { openRecordedRunClient } = await import("./recordedRunClient-gra1x1y6.js");
+    const { openRecordedRunClient } = await import("./recordedRunClient-x5q05e99.js");
     const client = await openRecordedRunClient(values.store);
     const controller = new AbortController;
     const detach = () => controller.abort();

package/build/agent-z2ax8k9e.js

@@ -0,0 +1,14 @@
+import {
+  CodeAgent2
+} from "./cli-jvekn5fm.js";
+import"./cli-3qac6b95.js";
+import"./cli-qba2x69h.js";
+import"./cli-rm6chd07.js";
+import"./cli-t6jjemz3.js";
+import"./cli-ty55px8v.js";
+import"./cli-j1jcp1ma.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-rb7669sc.js";
+export {
+  CodeAgent2 as CodeAgent
+};

package/build/{apps-pxdathp4.js → apps-8yvrx9qq.js}

@@ -15,27 +15,27 @@ import {
   searchEndpoints2,
   listDomains2,
   createDomain2
-} from "./cli-b3hef9fp.js";
-import"./cli-40gstjf7.js";
-import"./cli-mfgsx6hc.js";
-import"./cli-z41890cy.js";
-import"./cli-ps5hmkhw.js";
-import"./cli-8wkays8e.js";
-import"./cli-m57v3wm9.js";
-import"./cli-ygcbxb1m.js";
-import"./cli-pepjaeek.js";
-import"./cli-am8b7hr4.js";
-import"./cli-xb0pqkbk.js";
-import"./cli-b8jmzd32.js";
-import"./cli-7nrpp1ks.js";
-import"./cli-xcy2vxj2.js";
+} from "./cli-rm6chd07.js";
+import"./cli-t6jjemz3.js";
+import"./cli-rb7669sc.js";
+import"./cli-j1jcp1ma.js";
+import"./cli-3ysp9qdp.js";
+import"./cli-dm2fc4v9.js";
+import"./cli-jvekn5fm.js";
+import"./cli-hfm4szxe.js";
+import"./cli-qsrqeqts.js";
+import"./cli-2f2682d8.js";
+import"./cli-hqt03hyz.js";
+import"./cli-sbxx1mx3.js";
+import"./cli-83kfkdv1.js";
+import"./cli-ak23knae.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-jvhswf25.js";
-import"./cli-jpjj10xv.js";
+import"./cli-hx0erkgq.js";
+import"./cli-3qac6b95.js";
 import"./cli-qba2x69h.js";
-import"./cli-6g5p7cfd.js";
+import"./cli-ty55px8v.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/apps.ts

package/build/{auth-dcmykx6e.js → auth-9cg6a24n.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env bun
-import"./cli-b3hef9fp.js";
-import"./cli-40gstjf7.js";
+import"./cli-rm6chd07.js";
+import"./cli-t6jjemz3.js";
 import {
   config2,
   init_config
-} from "./cli-mfgsx6hc.js";
+} from "./cli-rb7669sc.js";
 import {
   getPensarApiUrl2,
   getPensarConsoleUrl2,
@@ -20,24 +20,24 @@ import {
   createWorkspaceSelection2,
   pollWorkspaceSelection2,
   init_auth
-} from "./cli-z41890cy.js";
-import"./cli-ps5hmkhw.js";
-import"./cli-8wkays8e.js";
-import"./cli-m57v3wm9.js";
-import"./cli-ygcbxb1m.js";
-import"./cli-pepjaeek.js";
-import"./cli-am8b7hr4.js";
-import"./cli-xb0pqkbk.js";
-import"./cli-b8jmzd32.js";
-import"./cli-7nrpp1ks.js";
-import"./cli-xcy2vxj2.js";
+} from "./cli-j1jcp1ma.js";
+import"./cli-3ysp9qdp.js";
+import"./cli-dm2fc4v9.js";
+import"./cli-jvekn5fm.js";
+import"./cli-hfm4szxe.js";
+import"./cli-qsrqeqts.js";
+import"./cli-2f2682d8.js";
+import"./cli-hqt03hyz.js";
+import"./cli-sbxx1mx3.js";
+import"./cli-83kfkdv1.js";
+import"./cli-ak23knae.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-jvhswf25.js";
-import"./cli-jpjj10xv.js";
+import"./cli-hx0erkgq.js";
+import"./cli-3qac6b95.js";
 import"./cli-qba2x69h.js";
-import"./cli-6g5p7cfd.js";
+import"./cli-ty55px8v.js";
 import"./cli-c2k4xxaw.js";
 import {
   __require

package/build/blackboxAgent-mt7ynwgw.js

@@ -0,0 +1,14 @@
+import {
+  BlackboxAttackSurfaceAgent2
+} from "./cli-dm2fc4v9.js";
+import"./cli-3qac6b95.js";
+import"./cli-qba2x69h.js";
+import"./cli-rm6chd07.js";
+import"./cli-t6jjemz3.js";
+import"./cli-ty55px8v.js";
+import"./cli-j1jcp1ma.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-rb7669sc.js";
+export {
+  BlackboxAttackSurfaceAgent2 as BlackboxAttackSurfaceAgent
+};

package/build/{blackboxPentest-pbh960ms.js → blackboxPentest-nt3k5an4.js}

@@ -1,27 +1,27 @@
-import"./cli-mfgsx6hc.js";
-import"./cli-z41890cy.js";
-import"./cli-40gstjf7.js";
-import"./cli-b3hef9fp.js";
-import"./cli-8wkays8e.js";
-import"./cli-xb0pqkbk.js";
-import"./cli-b8jmzd32.js";
+import"./cli-rb7669sc.js";
+import"./cli-j1jcp1ma.js";
+import"./cli-t6jjemz3.js";
+import"./cli-rm6chd07.js";
+import"./cli-dm2fc4v9.js";
+import"./cli-hqt03hyz.js";
+import"./cli-sbxx1mx3.js";
 import {
   readExecutionMetrics,
   writeExecutionMetrics,
   runPentestWorkflow2
-} from "./cli-pepjaeek.js";
-import"./cli-m57v3wm9.js";
-import"./cli-ygcbxb1m.js";
+} from "./cli-qsrqeqts.js";
+import"./cli-jvekn5fm.js";
+import"./cli-hfm4szxe.js";
 import {
   EMPTY_SESSION_TOKEN_USAGE,
   accumulateSessionTokens
 } from "./cli-ag6jtndp.js";
-import"./cli-jpjj10xv.js";
+import"./cli-3qac6b95.js";
 import"./cli-qba2x69h.js";
 import {
   normalizeStepUsage,
   init_ai2
-} from "./cli-6g5p7cfd.js";
+} from "./cli-ty55px8v.js";
 import"./cli-c2k4xxaw.js";
 
 // src/core/api/blackboxPentest.ts

package/build/{cli-se8ae8z3.js → cli-0rhfexax.js}

@@ -1,7 +1,7 @@
 import {
   APICallError,
-  init_dist3
-} from "./cli-gsaf4jk3.js";
+  init_dist4
+} from "./cli-7898kznf.js";
 import {
   init_zod
 } from "./cli-3qznjsnr.js";
@@ -2215,7 +2215,7 @@ function withNativeRolloutEvidenceModel(model, defaultContext) {
 }
 var DEFAULT_NATIVE_ROLLOUT_CAPTURE_LIMITS, captureStore, operationStore, sessionStore, RECORDER_ONLY_INPUT;
 var init_capture = __esm(() => {
-  init_dist3();
+  init_dist4();
   init_inference_attempt();
   init_content();
   init_provider_metadata();

package/build/{cli-am8b7hr4.js → cli-2f2682d8.js}

@@ -8,7 +8,7 @@ import {
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-jpjj10xv.js";
+} from "./cli-3qac6b95.js";
 import {
   hasToolCall,
   init_dist,
@@ -16,7 +16,7 @@ import {
   init_structured,
   scopedLogger,
   init_lazyLogger
-} from "./cli-6g5p7cfd.js";
+} from "./cli-ty55px8v.js";
 
 // src/core/agents/specialized/authenticationAgent/agent.ts
 init_dist();

package/build/{cli-v084p264.js → cli-2smp6vy3.js}

@@ -4,7 +4,7 @@ import {
   LocalWorkerTransportError,
   WorkerConnectionError,
   workerRequest
-} from "./cli-ps5hmkhw.js";
+} from "./cli-3ysp9qdp.js";
 
 // src/core/runtime/launchLocalWorker.ts
 import { spawn } from "node:child_process";

package/build/{cli-jpjj10xv.js → cli-3qac6b95.js}

@@ -1,12 +1,16 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-b3hef9fp.js";
+} from "./cli-rm6chd07.js";
 
 // src/core/agents/agentRuntime.ts
 function assembleAgentHooks(opts) {
   return {
     findingPolicy: opts.findingPolicy,
     toolExecutionContext: opts.toolExecutionContext,
+    toolProtocol: opts.toolProtocol,
+    directTools: opts.directTools,
+    nestedTools: opts.nestedTools,
+    onCodeCellComplete: opts.onCodeCellComplete,
     backends: opts.backends,
     subagentSpawner: opts.subagentSpawner,
     languageModelMiddleware: opts.languageModelMiddleware,

package/build/{cli-ps5hmkhw.js → cli-3ysp9qdp.js}

@@ -1,10 +1,10 @@
 import {
   config2,
   init_config
-} from "./cli-mfgsx6hc.js";
+} from "./cli-rb7669sc.js";
 import {
   init_constants
-} from "./cli-z41890cy.js";
+} from "./cli-j1jcp1ma.js";
 import {
   buildSessionWorkspaceSection,
   buildBaseSystemPrompt,
@@ -12,13 +12,13 @@ import {
   apiRequest,
   ALL_TOOL_NAMES2,
   SKILL_TOOL_NAMES2
-} from "./cli-b3hef9fp.js";
+} from "./cli-rm6chd07.js";
 import {
   runOffensiveSecurityAgent2
-} from "./cli-jvhswf25.js";
+} from "./cli-hx0erkgq.js";
 import {
   defineAgent
-} from "./cli-jpjj10xv.js";
+} from "./cli-3qac6b95.js";
 import {
   toolModelMessageSchema,
   modelMessageSchema,
@@ -41,7 +41,7 @@ import {
   getModelInfo,
   buildAuthConfig,
   init_ai2
-} from "./cli-6g5p7cfd.js";
+} from "./cli-ty55px8v.js";
 import {
   newSessionId,
   isSessionId,
@@ -49,14 +49,14 @@ import {
   InferenceAttemptSchema,
   parseInferenceAttempt,
   runWithInferenceRecorder
-} from "./cli-se8ae8z3.js";
-import {
-  getCurrentVersion,
-  init_installation
-} from "./cli-vb4den7a.js";
+} from "./cli-0rhfexax.js";
 import {
   init_zod
 } from "./cli-3qznjsnr.js";
+import {
+  getCurrentVersion,
+  init_installation
+} from "./cli-54ej646m.js";
 import {
   exports_iso,
   string,
@@ -7691,7 +7691,7 @@ function createSqliteControlStore(input) {
   const assertToolApproved = (runId, toolName, toolCallId, candidateInput) => {
     assertDispatchAllowed(runId);
     const run = input.getRun(runId);
-    if (!run.spec.activeTools.some((name) => name === toolName)) {
+    if (toolName !== "exec" && toolName !== "wait" && !run.spec.activeTools.some((name) => name === toolName)) {
       throw new Error(`Tool is not in the run's active tool allowlist: ${toolName}`);
     }
     const required = run.spec.approval?.requiredTools ?? [];
@@ -10754,6 +10754,9 @@ function planRunRecovery(input) {
     if (op.toolName === "execute_command") {
       blockers.push("execute_command was used by this run; shell/background state cannot be reconciled");
     }
+    if (op.toolName === "exec" || op.toolName === "wait") {
+      blockers.push("Code-mode cells and stored state cannot be restored after a process restart");
+    }
     if (op.context.epoch > context.epoch || op.context.revision > context.revision) {
       blockers.push(`tool operation ${op.toolCallId} references a future context (${op.context.epoch}/${op.context.revision})`);
     }
@@ -10948,6 +10951,8 @@ function buildExchange(input) {
 init_persistenceError();
 init_runControlStore();
 var TOOL_POLICIES = {
+  exec: "shell_state",
+  wait: "shell_state",
   read_file: "read_only",
   list_files: "read_only",
   grep: "read_only",