@pensar/apex 2.7.0-canary.e18bef4d → 2.7.0-canary.f6cdf7be

package/README.md

@@ -114,6 +114,19 @@ discovered model in `/models`. Headless commands accept
 `--model-provider hoonify --model <catalog-model-id>`. See
 [Hoonify setup](docs/hoonify.md) for model discovery, token budgets, and live checks.
 
+### Inference.net
+
+Connect **Inference.net** in `/providers` or set `INFERENCE_API_KEY`, then select
+**DeepSeek V4.1 Flash 1017 Cyber** in `/models`. This is the only Inference.net model
+currently available in Apex. Headless commands accept
+`--model inference:deepseek-v4.1-flash-1017-cyber`.
+
+Your team needs [approved model access](https://inference.net/model-access/deepseek-v4.1-flash-1017-cyber)
+before inference will succeed; saving a valid API key does not grant model access.
+Apex uses the provider's default reasoning behavior and the
+[catalog](https://api.inference.net/v1/models) limits of 1,040,000 context tokens
+and 393,216 output tokens.
+
 ### Custom inference endpoints
 
 Bring an OpenAI-compatible endpoint and bearer token through `customProviders`

package/build/agent-34gmbmct.js

@@ -0,0 +1,14 @@
+import {
+  CodeAgent2
+} from "./cli-16jm0s8q.js";
+import"./cli-q9rsfw2a.js";
+import"./cli-qba2x69h.js";
+import"./cli-nrz17r1p.js";
+import"./cli-15df7cy4.js";
+import"./cli-3ne35gxp.js";
+import"./cli-xc4jc5g8.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-rsdhzyxc.js";
+export {
+  CodeAgent2 as CodeAgent
+};

package/build/{agent-y7w88qe9.js → agent-3nyddsj2.js}

@@ -1,15 +1,15 @@
 import {
   TargetedPentestAgent2,
   buildPentestSystemPrompt2
-} from "./cli-qmt07txj.js";
-import"./cli-gy5stwkg.js";
+} from "./cli-cwmkbq45.js";
+import"./cli-q9rsfw2a.js";
 import"./cli-qba2x69h.js";
-import"./cli-z85qmtjd.js";
-import"./cli-7xf5h4pb.js";
-import"./cli-739g9qgd.js";
-import"./cli-1h046yxp.js";
+import"./cli-nrz17r1p.js";
+import"./cli-15df7cy4.js";
+import"./cli-3ne35gxp.js";
+import"./cli-xc4jc5g8.js";
 import"./cli-c2k4xxaw.js";
-import"./cli-rv2d03xr.js";
+import"./cli-rsdhzyxc.js";
 export {
   TargetedPentestAgent2 as TargetedPentestAgent,
   buildPentestSystemPrompt2 as buildPentestSystemPrompt

package/build/agent-jdcbh4s0.js

@@ -0,0 +1,14 @@
+import {
+  runAuthenticationAgent2
+} from "./cli-5nsn1vpx.js";
+import"./cli-q9rsfw2a.js";
+import"./cli-qba2x69h.js";
+import"./cli-nrz17r1p.js";
+import"./cli-15df7cy4.js";
+import"./cli-3ne35gxp.js";
+import"./cli-xc4jc5g8.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-rsdhzyxc.js";
+export {
+  runAuthenticationAgent2 as runAuthenticationAgent
+};

package/build/{agent-pdaya70z.js → agent-rjyfyw0g.js}

@@ -1,16 +1,16 @@
-import"./cli-7xf5h4pb.js";
-import"./cli-rv2d03xr.js";
-import"./cli-1h046yxp.js";
-import"./cli-z85qmtjd.js";
+import"./cli-15df7cy4.js";
+import"./cli-rsdhzyxc.js";
+import"./cli-xc4jc5g8.js";
+import"./cli-nrz17r1p.js";
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-gy5stwkg.js";
+} from "./cli-q9rsfw2a.js";
 import"./cli-qba2x69h.js";
 import {
   stepCountIs2,
   init_dist
-} from "./cli-739g9qgd.js";
+} from "./cli-3ne35gxp.js";
 import"./cli-c2k4xxaw.js";
 import {
   init_zod

package/build/{agent-runs-f0fpf651.js → agent-runs-dhvj9n11.js}

@@ -1,12 +1,12 @@
 import {
   config2,
   init_config
-} from "./cli-rv2d03xr.js";
-import"./cli-1h046yxp.js";
-import"./cli-z85qmtjd.js";
+} from "./cli-rsdhzyxc.js";
+import"./cli-xc4jc5g8.js";
+import"./cli-nrz17r1p.js";
 import {
   AgentEventBus
-} from "./cli-7xf5h4pb.js";
+} from "./cli-15df7cy4.js";
 import {
   inspectSessionEvidence2,
   RecordedRunSpecSchema,
@@ -17,27 +17,27 @@ import {
   runRecordedAgent2,
   RunRecoveryBlockedError2,
   resumeRecordedAgent2
-} from "./cli-qp8413xr.js";
-import"./cli-67d2744b.js";
-import"./cli-9dka0an3.js";
-import"./cli-zs7rp1f6.js";
-import"./cli-gt29d4q6.js";
-import"./cli-1qyejhv5.js";
-import"./cli-qmt07txj.js";
-import"./cli-ssstde7z.js";
-import"./cli-tmr100n4.js";
-import"./cli-xcy2vxj2.js";
+} from "./cli-jqf27aw9.js";
+import"./cli-ebx3j3c5.js";
+import"./cli-16jm0s8q.js";
+import"./cli-veyqzxra.js";
+import"./cli-h2r33z2v.js";
+import"./cli-5nsn1vpx.js";
+import"./cli-cwmkbq45.js";
+import"./cli-f7v0fgc0.js";
+import"./cli-1k414c58.js";
+import"./cli-ak23knae.js";
 import {
   resolveWorkerExecutable,
   launchLocalWorker
-} from "./cli-y1z3vemx.js";
-import"./cli-c29xr0h0.js";
-import"./cli-gy5stwkg.js";
+} from "./cli-730f1622.js";
+import"./cli-d13d67ym.js";
+import"./cli-q9rsfw2a.js";
 import"./cli-qba2x69h.js";
 import {
   buildAuthConfig,
   init_ai2
-} from "./cli-739g9qgd.js";
+} from "./cli-3ne35gxp.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/agent-runs.ts
@@ -118,7 +118,7 @@ async function runAgentRunsCommand(args) {
     if (!isAbsolute(values.store)) {
       throw new Error("agent-runs worker requires --store <absolute database>");
     }
-    const { serveLocalRunWorker } = await import("./index-m6graaat.js");
+    const { serveLocalRunWorker } = await import("./index-th12cq1c.js");
     await serveLocalRunWorker({
       runId: values.run,
       databasePath: resolve(values.store)
@@ -132,7 +132,7 @@ async function runAgentRunsCommand(args) {
 ${HELP}`);
   }
   if (command === "attach") {
-    const { openRecordedRunClient } = await import("./recordedRunClient-jv7ew35v.js");
+    const { openRecordedRunClient } = await import("./recordedRunClient-jrasfd3h.js");
     const client = await openRecordedRunClient(values.store);
     const controller = new AbortController;
     const detach = () => controller.abort();

package/build/{apps-6hstfsy5.js → apps-xb4dwm8m.js}

@@ -15,27 +15,27 @@ import {
   searchEndpoints2,
   listDomains2,
   createDomain2
-} from "./cli-z85qmtjd.js";
-import"./cli-7xf5h4pb.js";
-import"./cli-rv2d03xr.js";
-import"./cli-1h046yxp.js";
-import"./cli-qp8413xr.js";
-import"./cli-67d2744b.js";
-import"./cli-9dka0an3.js";
-import"./cli-zs7rp1f6.js";
-import"./cli-gt29d4q6.js";
-import"./cli-1qyejhv5.js";
-import"./cli-qmt07txj.js";
-import"./cli-ssstde7z.js";
-import"./cli-tmr100n4.js";
-import"./cli-xcy2vxj2.js";
+} from "./cli-nrz17r1p.js";
+import"./cli-15df7cy4.js";
+import"./cli-rsdhzyxc.js";
+import"./cli-xc4jc5g8.js";
+import"./cli-jqf27aw9.js";
+import"./cli-ebx3j3c5.js";
+import"./cli-16jm0s8q.js";
+import"./cli-veyqzxra.js";
+import"./cli-h2r33z2v.js";
+import"./cli-5nsn1vpx.js";
+import"./cli-cwmkbq45.js";
+import"./cli-f7v0fgc0.js";
+import"./cli-1k414c58.js";
+import"./cli-ak23knae.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-c29xr0h0.js";
-import"./cli-gy5stwkg.js";
+import"./cli-d13d67ym.js";
+import"./cli-q9rsfw2a.js";
 import"./cli-qba2x69h.js";
-import"./cli-739g9qgd.js";
+import"./cli-3ne35gxp.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/apps.ts

package/build/{auth-sdg0sqa0.js → auth-3herxns4.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env bun
-import"./cli-z85qmtjd.js";
-import"./cli-7xf5h4pb.js";
+import"./cli-nrz17r1p.js";
+import"./cli-15df7cy4.js";
 import {
   config2,
   init_config
-} from "./cli-rv2d03xr.js";
+} from "./cli-rsdhzyxc.js";
 import {
   getPensarApiUrl2,
   getPensarConsoleUrl2,
@@ -20,24 +20,24 @@ import {
   createWorkspaceSelection2,
   pollWorkspaceSelection2,
   init_auth
-} from "./cli-1h046yxp.js";
-import"./cli-qp8413xr.js";
-import"./cli-67d2744b.js";
-import"./cli-9dka0an3.js";
-import"./cli-zs7rp1f6.js";
-import"./cli-gt29d4q6.js";
-import"./cli-1qyejhv5.js";
-import"./cli-qmt07txj.js";
-import"./cli-ssstde7z.js";
-import"./cli-tmr100n4.js";
-import"./cli-xcy2vxj2.js";
+} from "./cli-xc4jc5g8.js";
+import"./cli-jqf27aw9.js";
+import"./cli-ebx3j3c5.js";
+import"./cli-16jm0s8q.js";
+import"./cli-veyqzxra.js";
+import"./cli-h2r33z2v.js";
+import"./cli-5nsn1vpx.js";
+import"./cli-cwmkbq45.js";
+import"./cli-f7v0fgc0.js";
+import"./cli-1k414c58.js";
+import"./cli-ak23knae.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-c29xr0h0.js";
-import"./cli-gy5stwkg.js";
+import"./cli-d13d67ym.js";
+import"./cli-q9rsfw2a.js";
 import"./cli-qba2x69h.js";
-import"./cli-739g9qgd.js";
+import"./cli-3ne35gxp.js";
 import"./cli-c2k4xxaw.js";
 import {
   __require

package/build/blackboxAgent-d7xv0thk.js

@@ -0,0 +1,14 @@
+import {
+  BlackboxAttackSurfaceAgent2
+} from "./cli-ebx3j3c5.js";
+import"./cli-q9rsfw2a.js";
+import"./cli-qba2x69h.js";
+import"./cli-nrz17r1p.js";
+import"./cli-15df7cy4.js";
+import"./cli-3ne35gxp.js";
+import"./cli-xc4jc5g8.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-rsdhzyxc.js";
+export {
+  BlackboxAttackSurfaceAgent2 as BlackboxAttackSurfaceAgent
+};

package/build/{blackboxPentest-1850fx09.js → blackboxPentest-n73frjae.js}

@@ -1,27 +1,27 @@
-import"./cli-rv2d03xr.js";
-import"./cli-1h046yxp.js";
-import"./cli-7xf5h4pb.js";
-import"./cli-z85qmtjd.js";
-import"./cli-67d2744b.js";
-import"./cli-qmt07txj.js";
-import"./cli-ssstde7z.js";
+import"./cli-rsdhzyxc.js";
+import"./cli-xc4jc5g8.js";
+import"./cli-15df7cy4.js";
+import"./cli-nrz17r1p.js";
+import"./cli-ebx3j3c5.js";
+import"./cli-cwmkbq45.js";
+import"./cli-f7v0fgc0.js";
 import {
   readExecutionMetrics,
   writeExecutionMetrics,
   runPentestWorkflow2
-} from "./cli-gt29d4q6.js";
-import"./cli-9dka0an3.js";
-import"./cli-zs7rp1f6.js";
+} from "./cli-h2r33z2v.js";
+import"./cli-16jm0s8q.js";
+import"./cli-veyqzxra.js";
 import {
   EMPTY_SESSION_TOKEN_USAGE,
   accumulateSessionTokens
 } from "./cli-ag6jtndp.js";
-import"./cli-gy5stwkg.js";
+import"./cli-q9rsfw2a.js";
 import"./cli-qba2x69h.js";
 import {
   normalizeStepUsage,
   init_ai2
-} from "./cli-739g9qgd.js";
+} from "./cli-3ne35gxp.js";
 import"./cli-c2k4xxaw.js";
 
 // src/core/api/blackboxPentest.ts

package/build/{cli-se8ae8z3.js → cli-0rhfexax.js}

@@ -1,7 +1,7 @@
 import {
   APICallError,
-  init_dist3
-} from "./cli-gsaf4jk3.js";
+  init_dist4
+} from "./cli-7898kznf.js";
 import {
   init_zod
 } from "./cli-3qznjsnr.js";
@@ -2215,7 +2215,7 @@ function withNativeRolloutEvidenceModel(model, defaultContext) {
 }
 var DEFAULT_NATIVE_ROLLOUT_CAPTURE_LIMITS, captureStore, operationStore, sessionStore, RECORDER_ONLY_INPUT;
 var init_capture = __esm(() => {
-  init_dist3();
+  init_dist4();
   init_inference_attempt();
   init_content();
   init_provider_metadata();

package/build/{cli-vfkmdrkb.js → cli-0xvrtsac.js}

@@ -1,10 +1,10 @@
-import {
-  getCurrentVersion,
-  init_installation
-} from "./cli-k46jmzbs.js";
 import {
   init_zod
 } from "./cli-3qznjsnr.js";
+import {
+  getCurrentVersion,
+  init_installation
+} from "./cli-sy52tg90.js";
 import {
   NEVER,
   string,
@@ -300,6 +300,7 @@ function applyEnvFallbacks(parsedConfig) {
     googleAPIKey: parsedConfig.googleAPIKey ?? process.env.GOOGLE_GENERATIVE_AI_API_KEY,
     openRouterAPIKey: parsedConfig.openRouterAPIKey ?? process.env.OPENROUTER_API_KEY,
     concentrateAPIKey: parsedConfig.concentrateAPIKey ?? process.env.CONCENTRATE_API_KEY,
+    inferenceAPIKey: parsedConfig.inferenceAPIKey ?? process.env.INFERENCE_API_KEY,
     inceptionAPIKey: parsedConfig.inceptionAPIKey ?? process.env.INCEPTION_API_KEY,
     hoonifyAPIKey: parsedConfig.hoonifyAPIKey ?? process.env.HOONIFY_API_KEY,
     hoonifyModels: undefined,

package/build/{cli-7xf5h4pb.js → cli-15df7cy4.js}

@@ -6,12 +6,12 @@ import {
   getModelSettings,
   generateObjectResponse,
   init_ai2
-} from "./cli-739g9qgd.js";
+} from "./cli-3ne35gxp.js";
 import {
   newSessionId,
   init_id,
   runWithNativeRolloutSession
-} from "./cli-se8ae8z3.js";
+} from "./cli-0rhfexax.js";
 import {
   init_zod
 } from "./cli-3qznjsnr.js";
@@ -909,7 +909,7 @@ async function spawnBatch2(spawner, requests, opts, limiter) {
   });
 }
 async function runSpawnedPentestWorker(spec, input) {
-  const { TargetedPentestAgent } = await import("./agent-y7w88qe9.js");
+  const { TargetedPentestAgent } = await import("./agent-3nyddsj2.js");
   const hooks = resolveItemHooks(input.hooks, input.seams, spec, 0);
   const agent = new TargetedPentestAgent({
     target: spec.target,
@@ -965,6 +965,7 @@ var runPentestChild = async (spec, ctx) => {
       backends: ctx.backends,
       sandbox: ctx.sandbox,
       languageModelMiddleware: ctx.languageModelMiddleware,
+      toolProtocol: ctx.toolProtocol,
       usageRecorder: ctx.usageRecorder,
       toolExecutionContext: ctx.toolExecutionContext,
       streamIdFactory: ctx.streamIdFactory
@@ -980,7 +981,7 @@ var runPentestChild = async (spec, ctx) => {
   };
 };
 var runCodeChild = async (spec, ctx) => {
-  const { CodeAgent } = await import("./agent-ks4dc1q5.js");
+  const { CodeAgent } = await import("./agent-34gmbmct.js");
   const agent = new CodeAgent({
     findingPolicy: ctx.findingPolicy,
     codebasePath: spec.codebasePath,
@@ -1003,6 +1004,7 @@ var runCodeChild = async (spec, ctx) => {
     onStepFinish: ctx.onStepFinish,
     onCacheMetrics: ctx.onCacheMetrics,
     languageModelMiddleware: ctx.languageModelMiddleware,
+    toolProtocol: ctx.toolProtocol,
     usageRecorder: ctx.usageRecorder,
     toolExecutionContext: ctx.toolExecutionContext,
     streamIdFactory: ctx.streamIdFactory
@@ -1010,7 +1012,7 @@ var runCodeChild = async (spec, ctx) => {
   return { run: () => agent.consume(), drained: () => agent.drained };
 };
 var runWhiteboxChild = async (spec, ctx) => {
-  const { WhiteboxAttackSurfaceAgent } = await import("./index-1z234ygf.js");
+  const { WhiteboxAttackSurfaceAgent } = await import("./index-f1a9x9ez.js");
   const agent = new WhiteboxAttackSurfaceAgent({
     findingPolicy: ctx.findingPolicy,
     codebasePath: spec.codebasePath,
@@ -1024,6 +1026,7 @@ var runWhiteboxChild = async (spec, ctx) => {
     sandbox: ctx.sandbox,
     backends: ctx.backends,
     languageModelMiddleware: ctx.languageModelMiddleware,
+    toolProtocol: ctx.toolProtocol,
     usageRecorder: ctx.usageRecorder,
     toolExecutionContext: ctx.toolExecutionContext,
     streamIdFactory: ctx.streamIdFactory
@@ -1031,7 +1034,7 @@ var runWhiteboxChild = async (spec, ctx) => {
   return { run: () => agent.consume(), drained: () => agent.drained };
 };
 var runBlackboxChild = async (spec, ctx) => {
-  const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-pe5y5hxr.js");
+  const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-d7xv0thk.js");
   const agent = new BlackboxAttackSurfaceAgent({
     findingPolicy: ctx.findingPolicy,
     target: spec.target,
@@ -1044,6 +1047,7 @@ var runBlackboxChild = async (spec, ctx) => {
     sandbox: ctx.sandbox,
     backends: ctx.backends,
     languageModelMiddleware: ctx.languageModelMiddleware,
+    toolProtocol: ctx.toolProtocol,
     usageRecorder: ctx.usageRecorder,
     toolExecutionContext: ctx.toolExecutionContext,
     streamIdFactory: ctx.streamIdFactory
@@ -1051,7 +1055,7 @@ var runBlackboxChild = async (spec, ctx) => {
   return { run: () => agent.consume(), drained: () => agent.drained };
 };
 var runAuthChild = async (spec, ctx) => {
-  const { runAuthenticationAgent } = await import("./agent-q6ckrtd2.js");
+  const { runAuthenticationAgent } = await import("./agent-jdcbh4s0.js");
   return {
     run: () => runAuthenticationAgent({
       findingPolicy: ctx.findingPolicy,
@@ -1067,6 +1071,7 @@ var runAuthChild = async (spec, ctx) => {
       secretValues: ctx.secretValues,
       backends: ctx.backends,
       languageModelMiddleware: ctx.languageModelMiddleware,
+      toolProtocol: ctx.toolProtocol,
       usageRecorder: ctx.usageRecorder,
       toolExecutionContext: ctx.toolExecutionContext,
       streamIdFactory: ctx.streamIdFactory
@@ -1074,7 +1079,7 @@ var runAuthChild = async (spec, ctx) => {
   };
 };
 var runJudgeChild = async (spec, ctx) => {
-  const { judgeFinding } = await import("./index-hx133hms.js");
+  const { judgeFinding } = await import("./index-mgq7hqhw.js");
   return {
     run: () => judgeFinding(spec.judgeInput, {
       waitForDrain: spec.waitForDrain,
@@ -1088,6 +1093,7 @@ var runJudgeChild = async (spec, ctx) => {
       backends: ctx.backends,
       target: spec.target,
       languageModelMiddleware: ctx.languageModelMiddleware,
+      toolProtocol: ctx.toolProtocol,
       usageRecorder: ctx.usageRecorder,
       toolExecutionContext: ctx.toolExecutionContext,
       streamIdFactory: ctx.streamIdFactory

package/build/{cli-9dka0an3.js → cli-16jm0s8q.js}

@@ -1,11 +1,11 @@
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-gy5stwkg.js";
+} from "./cli-q9rsfw2a.js";
 import {
   stepCountIs2,
   init_dist
-} from "./cli-739g9qgd.js";
+} from "./cli-3ne35gxp.js";
 
 // src/core/agents/specialized/codeAgent/agent.ts
 init_dist();

package/build/{cli-tmr100n4.js → cli-1k414c58.js}

@@ -3,7 +3,7 @@ import {
   init_session,
   getModelSettings,
   init_ai2
-} from "./cli-739g9qgd.js";
+} from "./cli-3ne35gxp.js";
 
 // src/core/runtime/agentExecution.ts
 function startAgentExecution(agent) {

package/build/{cli-fnth71q3.js → cli-2r2agtre.js}

@@ -4,10 +4,10 @@ import {
   openSqliteRunStore,
   resolveWorkerEndpoint,
   workerRequest
-} from "./cli-qp8413xr.js";
+} from "./cli-jqf27aw9.js";
 import {
   launchLocalWorker
-} from "./cli-y1z3vemx.js";
+} from "./cli-730f1622.js";
 
 // src/core/runtime/recordedRunClient.ts
 import { setTimeout as delay } from "node:timers/promises";