@pensar/apex 2.7.0-canary.e18bef4d → 2.7.0-canary.f824ec48

package/README.md

@@ -114,6 +114,19 @@ discovered model in `/models`. Headless commands accept
 `--model-provider hoonify --model <catalog-model-id>`. See
 [Hoonify setup](docs/hoonify.md) for model discovery, token budgets, and live checks.
 
+### Inference.net
+
+Connect **Inference.net** in `/providers` or set `INFERENCE_API_KEY`, then select
+**DeepSeek V4.1 Flash 1017 Cyber** in `/models`. This is the only Inference.net model
+currently available in Apex. Headless commands accept
+`--model inference:deepseek-v4.1-flash-1017-cyber`.
+
+Your team needs [approved model access](https://inference.net/model-access/deepseek-v4.1-flash-1017-cyber)
+before inference will succeed; saving a valid API key does not grant model access.
+Apex uses the provider's default reasoning behavior and the
+[catalog](https://api.inference.net/v1/models) limits of 1,040,000 context tokens
+and 393,216 output tokens.
+
 ### Custom inference endpoints
 
 Bring an OpenAI-compatible endpoint and bearer token through `customProviders`

package/build/agent-e3p8n3fz.js

@@ -0,0 +1,14 @@
+import {
+  CodeAgent2
+} from "./cli-2j897vp5.js";
+import"./cli-yb35qfa6.js";
+import"./cli-qba2x69h.js";
+import"./cli-tznzhj3x.js";
+import"./cli-rne34jcb.js";
+import"./cli-mhnh5tpj.js";
+import"./cli-aa3p4z50.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-r6ymr25w.js";
+export {
+  CodeAgent2 as CodeAgent
+};

package/build/agent-g762vc3w.js

@@ -0,0 +1,14 @@
+import {
+  runAuthenticationAgent2
+} from "./cli-n8jbhkbn.js";
+import"./cli-yb35qfa6.js";
+import"./cli-qba2x69h.js";
+import"./cli-tznzhj3x.js";
+import"./cli-rne34jcb.js";
+import"./cli-mhnh5tpj.js";
+import"./cli-aa3p4z50.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-r6ymr25w.js";
+export {
+  runAuthenticationAgent2 as runAuthenticationAgent
+};

package/build/{agent-pdaya70z.js → agent-p698rv0j.js}

@@ -1,16 +1,16 @@
-import"./cli-7xf5h4pb.js";
-import"./cli-rv2d03xr.js";
-import"./cli-1h046yxp.js";
-import"./cli-z85qmtjd.js";
+import"./cli-rne34jcb.js";
+import"./cli-r6ymr25w.js";
+import"./cli-aa3p4z50.js";
+import"./cli-tznzhj3x.js";
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-gy5stwkg.js";
+} from "./cli-yb35qfa6.js";
 import"./cli-qba2x69h.js";
 import {
   stepCountIs2,
   init_dist
-} from "./cli-739g9qgd.js";
+} from "./cli-mhnh5tpj.js";
 import"./cli-c2k4xxaw.js";
 import {
   init_zod

package/build/{agent-runs-f0fpf651.js → agent-runs-wcx5w6ga.js}

@@ -1,12 +1,12 @@
 import {
   config2,
   init_config
-} from "./cli-rv2d03xr.js";
-import"./cli-1h046yxp.js";
-import"./cli-z85qmtjd.js";
+} from "./cli-r6ymr25w.js";
+import"./cli-aa3p4z50.js";
+import"./cli-tznzhj3x.js";
 import {
   AgentEventBus
-} from "./cli-7xf5h4pb.js";
+} from "./cli-rne34jcb.js";
 import {
   inspectSessionEvidence2,
   RecordedRunSpecSchema,
@@ -17,27 +17,27 @@ import {
   runRecordedAgent2,
   RunRecoveryBlockedError2,
   resumeRecordedAgent2
-} from "./cli-qp8413xr.js";
-import"./cli-67d2744b.js";
-import"./cli-9dka0an3.js";
-import"./cli-zs7rp1f6.js";
-import"./cli-gt29d4q6.js";
-import"./cli-1qyejhv5.js";
-import"./cli-qmt07txj.js";
-import"./cli-ssstde7z.js";
-import"./cli-tmr100n4.js";
-import"./cli-xcy2vxj2.js";
+} from "./cli-87b8h02f.js";
+import"./cli-kts4kmyb.js";
+import"./cli-2j897vp5.js";
+import"./cli-xsd5fkcj.js";
+import"./cli-2xnkxcyw.js";
+import"./cli-n8jbhkbn.js";
+import"./cli-v2zcnka1.js";
+import"./cli-2rbp66hx.js";
+import"./cli-yxptkzey.js";
+import"./cli-ak23knae.js";
 import {
   resolveWorkerExecutable,
   launchLocalWorker
-} from "./cli-y1z3vemx.js";
-import"./cli-c29xr0h0.js";
-import"./cli-gy5stwkg.js";
+} from "./cli-tfwjdxw6.js";
+import"./cli-1347c15k.js";
+import"./cli-yb35qfa6.js";
 import"./cli-qba2x69h.js";
 import {
   buildAuthConfig,
   init_ai2
-} from "./cli-739g9qgd.js";
+} from "./cli-mhnh5tpj.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/agent-runs.ts
@@ -118,7 +118,7 @@ async function runAgentRunsCommand(args) {
     if (!isAbsolute(values.store)) {
       throw new Error("agent-runs worker requires --store <absolute database>");
     }
-    const { serveLocalRunWorker } = await import("./index-m6graaat.js");
+    const { serveLocalRunWorker } = await import("./index-z09jjanp.js");
     await serveLocalRunWorker({
       runId: values.run,
       databasePath: resolve(values.store)
@@ -132,7 +132,7 @@ async function runAgentRunsCommand(args) {
 ${HELP}`);
   }
   if (command === "attach") {
-    const { openRecordedRunClient } = await import("./recordedRunClient-jv7ew35v.js");
+    const { openRecordedRunClient } = await import("./recordedRunClient-0pnft9r7.js");
     const client = await openRecordedRunClient(values.store);
     const controller = new AbortController;
     const detach = () => controller.abort();

package/build/{agent-y7w88qe9.js → agent-xgbw8eet.js}

@@ -1,15 +1,15 @@
 import {
   TargetedPentestAgent2,
   buildPentestSystemPrompt2
-} from "./cli-qmt07txj.js";
-import"./cli-gy5stwkg.js";
+} from "./cli-v2zcnka1.js";
+import"./cli-yb35qfa6.js";
 import"./cli-qba2x69h.js";
-import"./cli-z85qmtjd.js";
-import"./cli-7xf5h4pb.js";
-import"./cli-739g9qgd.js";
-import"./cli-1h046yxp.js";
+import"./cli-tznzhj3x.js";
+import"./cli-rne34jcb.js";
+import"./cli-mhnh5tpj.js";
+import"./cli-aa3p4z50.js";
 import"./cli-c2k4xxaw.js";
-import"./cli-rv2d03xr.js";
+import"./cli-r6ymr25w.js";
 export {
   TargetedPentestAgent2 as TargetedPentestAgent,
   buildPentestSystemPrompt2 as buildPentestSystemPrompt

package/build/{apps-6hstfsy5.js → apps-fkaa63g6.js}

@@ -15,27 +15,27 @@ import {
   searchEndpoints2,
   listDomains2,
   createDomain2
-} from "./cli-z85qmtjd.js";
-import"./cli-7xf5h4pb.js";
-import"./cli-rv2d03xr.js";
-import"./cli-1h046yxp.js";
-import"./cli-qp8413xr.js";
-import"./cli-67d2744b.js";
-import"./cli-9dka0an3.js";
-import"./cli-zs7rp1f6.js";
-import"./cli-gt29d4q6.js";
-import"./cli-1qyejhv5.js";
-import"./cli-qmt07txj.js";
-import"./cli-ssstde7z.js";
-import"./cli-tmr100n4.js";
-import"./cli-xcy2vxj2.js";
+} from "./cli-tznzhj3x.js";
+import"./cli-rne34jcb.js";
+import"./cli-r6ymr25w.js";
+import"./cli-aa3p4z50.js";
+import"./cli-87b8h02f.js";
+import"./cli-kts4kmyb.js";
+import"./cli-2j897vp5.js";
+import"./cli-xsd5fkcj.js";
+import"./cli-2xnkxcyw.js";
+import"./cli-n8jbhkbn.js";
+import"./cli-v2zcnka1.js";
+import"./cli-2rbp66hx.js";
+import"./cli-yxptkzey.js";
+import"./cli-ak23knae.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-c29xr0h0.js";
-import"./cli-gy5stwkg.js";
+import"./cli-1347c15k.js";
+import"./cli-yb35qfa6.js";
 import"./cli-qba2x69h.js";
-import"./cli-739g9qgd.js";
+import"./cli-mhnh5tpj.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/apps.ts

package/build/{auth-sdg0sqa0.js → auth-1h2kmby7.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env bun
-import"./cli-z85qmtjd.js";
-import"./cli-7xf5h4pb.js";
+import"./cli-tznzhj3x.js";
+import"./cli-rne34jcb.js";
 import {
   config2,
   init_config
-} from "./cli-rv2d03xr.js";
+} from "./cli-r6ymr25w.js";
 import {
   getPensarApiUrl2,
   getPensarConsoleUrl2,
@@ -20,24 +20,24 @@ import {
   createWorkspaceSelection2,
   pollWorkspaceSelection2,
   init_auth
-} from "./cli-1h046yxp.js";
-import"./cli-qp8413xr.js";
-import"./cli-67d2744b.js";
-import"./cli-9dka0an3.js";
-import"./cli-zs7rp1f6.js";
-import"./cli-gt29d4q6.js";
-import"./cli-1qyejhv5.js";
-import"./cli-qmt07txj.js";
-import"./cli-ssstde7z.js";
-import"./cli-tmr100n4.js";
-import"./cli-xcy2vxj2.js";
+} from "./cli-aa3p4z50.js";
+import"./cli-87b8h02f.js";
+import"./cli-kts4kmyb.js";
+import"./cli-2j897vp5.js";
+import"./cli-xsd5fkcj.js";
+import"./cli-2xnkxcyw.js";
+import"./cli-n8jbhkbn.js";
+import"./cli-v2zcnka1.js";
+import"./cli-2rbp66hx.js";
+import"./cli-yxptkzey.js";
+import"./cli-ak23knae.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-c29xr0h0.js";
-import"./cli-gy5stwkg.js";
+import"./cli-1347c15k.js";
+import"./cli-yb35qfa6.js";
 import"./cli-qba2x69h.js";
-import"./cli-739g9qgd.js";
+import"./cli-mhnh5tpj.js";
 import"./cli-c2k4xxaw.js";
 import {
   __require

package/build/blackboxAgent-jgaa05jj.js

@@ -0,0 +1,14 @@
+import {
+  BlackboxAttackSurfaceAgent2
+} from "./cli-kts4kmyb.js";
+import"./cli-yb35qfa6.js";
+import"./cli-qba2x69h.js";
+import"./cli-tznzhj3x.js";
+import"./cli-rne34jcb.js";
+import"./cli-mhnh5tpj.js";
+import"./cli-aa3p4z50.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-r6ymr25w.js";
+export {
+  BlackboxAttackSurfaceAgent2 as BlackboxAttackSurfaceAgent
+};

package/build/{blackboxPentest-1850fx09.js → blackboxPentest-5td70wbq.js}

@@ -1,27 +1,27 @@
-import"./cli-rv2d03xr.js";
-import"./cli-1h046yxp.js";
-import"./cli-7xf5h4pb.js";
-import"./cli-z85qmtjd.js";
-import"./cli-67d2744b.js";
-import"./cli-qmt07txj.js";
-import"./cli-ssstde7z.js";
+import"./cli-r6ymr25w.js";
+import"./cli-aa3p4z50.js";
+import"./cli-rne34jcb.js";
+import"./cli-tznzhj3x.js";
+import"./cli-kts4kmyb.js";
+import"./cli-v2zcnka1.js";
+import"./cli-2rbp66hx.js";
 import {
   readExecutionMetrics,
   writeExecutionMetrics,
   runPentestWorkflow2
-} from "./cli-gt29d4q6.js";
-import"./cli-9dka0an3.js";
-import"./cli-zs7rp1f6.js";
+} from "./cli-2xnkxcyw.js";
+import"./cli-2j897vp5.js";
+import"./cli-xsd5fkcj.js";
 import {
   EMPTY_SESSION_TOKEN_USAGE,
   accumulateSessionTokens
 } from "./cli-ag6jtndp.js";
-import"./cli-gy5stwkg.js";
+import"./cli-yb35qfa6.js";
 import"./cli-qba2x69h.js";
 import {
   normalizeStepUsage,
   init_ai2
-} from "./cli-739g9qgd.js";
+} from "./cli-mhnh5tpj.js";
 import"./cli-c2k4xxaw.js";
 
 // src/core/api/blackboxPentest.ts

package/build/{cli-se8ae8z3.js → cli-0rhfexax.js}

@@ -1,7 +1,7 @@
 import {
   APICallError,
-  init_dist3
-} from "./cli-gsaf4jk3.js";
+  init_dist4
+} from "./cli-7898kznf.js";
 import {
   init_zod
 } from "./cli-3qznjsnr.js";
@@ -2215,7 +2215,7 @@ function withNativeRolloutEvidenceModel(model, defaultContext) {
 }
 var DEFAULT_NATIVE_ROLLOUT_CAPTURE_LIMITS, captureStore, operationStore, sessionStore, RECORDER_ONLY_INPUT;
 var init_capture = __esm(() => {
-  init_dist3();
+  init_dist4();
   init_inference_attempt();
   init_content();
   init_provider_metadata();

package/build/{cli-c29xr0h0.js → cli-1347c15k.js}

@@ -1,11 +1,11 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-z85qmtjd.js";
+} from "./cli-tznzhj3x.js";
 import {
   startAgentExecution,
   resolveRootReasoning,
   persistRootReasoningOverride
-} from "./cli-tmr100n4.js";
+} from "./cli-yxptkzey.js";
 
 // src/core/api/offesecAgent.ts
 async function runOffensiveSecurityAgent2(input) {

package/build/{cli-9dka0an3.js → cli-2j897vp5.js}

@@ -1,11 +1,11 @@
 import {
   AgentRuntime,
   defineAgent
-} from "./cli-gy5stwkg.js";
+} from "./cli-yb35qfa6.js";
 import {
   stepCountIs2,
   init_dist
-} from "./cli-739g9qgd.js";
+} from "./cli-mhnh5tpj.js";
 
 // src/core/agents/specialized/codeAgent/agent.ts
 init_dist();

package/build/{cli-ssstde7z.js → cli-2rbp66hx.js}

@@ -4,7 +4,7 @@ import {
   ValidatedCweEntrySchema,
   hasCanonicalName,
   EvidenceFileEntrySchema
-} from "./cli-z85qmtjd.js";
+} from "./cli-tznzhj3x.js";
 import {
   init_zod
 } from "./cli-3qznjsnr.js";

package/build/{cli-gt29d4q6.js → cli-2xnkxcyw.js}

@@ -7,7 +7,7 @@ import {
   resolveItemHooks,
   spawnBatch2,
   inProcessSubagentSpawner2
-} from "./cli-7xf5h4pb.js";
+} from "./cli-rne34jcb.js";
 import {
   collectCommand,
   toGrpcPentestContext,
@@ -15,24 +15,24 @@ import {
   pLimit,
   PLAN_MODE_TOOL_NAMES,
   OffensiveSecurityAgent
-} from "./cli-z85qmtjd.js";
+} from "./cli-tznzhj3x.js";
 import {
   BlackboxAttackSurfaceAgent2
-} from "./cli-67d2744b.js";
+} from "./cli-kts4kmyb.js";
 import {
   TargetedPentestAgent2,
   buildPentestSystemPrompt2
-} from "./cli-qmt07txj.js";
+} from "./cli-v2zcnka1.js";
 import {
   buildPentestReport,
   renderJson,
   renderMarkdown,
   REPORT_FILENAME_MD,
   REPORT_FILENAME_JSON
-} from "./cli-ssstde7z.js";
+} from "./cli-2rbp66hx.js";
 import {
   CodeAgent2
-} from "./cli-9dka0an3.js";
+} from "./cli-2j897vp5.js";
 import {
   WHITEBOX_APPS_DISCOVERY_SYSTEM_PROMPT2,
   WHITEBOX_ENDPOINT_DOCUMENTATION_SYSTEM_PROMPT,
@@ -41,7 +41,7 @@ import {
   AppInfoSchema2,
   AppsDiscoveryResultSchema2,
   DiscoverySummarySchema2
-} from "./cli-zs7rp1f6.js";
+} from "./cli-xsd5fkcj.js";
 import {
   createThreatModelPrompt
 } from "./cli-q126f6ef.js";
@@ -53,11 +53,11 @@ import {
   init_structured,
   scopedLogger,
   init_lazyLogger
-} from "./cli-739g9qgd.js";
+} from "./cli-mhnh5tpj.js";
 import {
   newSessionId,
   init_id
-} from "./cli-se8ae8z3.js";
+} from "./cli-0rhfexax.js";
 import {
   init_zod
 } from "./cli-3qznjsnr.js";
@@ -8216,7 +8216,7 @@ async function runPentestSwarm2(input) {
 }
 async function runPentestWorkflow2(input) {
   if (input.fastStrike) {
-    const { runFastStrike } = await import("./fastStrike-65d7njyn.js");
+    const { runFastStrike } = await import("./fastStrike-d1yht29e.js");
     return runFastStrike(input);
   }
   const {