@pensar/apex 1.2.0 → 1.3.0-canary.f6d7a6d1

package/build/{cli-dvsj2p1x.js → cli-dj3jc5bq.js}

@@ -16,24 +16,29 @@ import {
   update,
   write,
   writeRaw
-} from "./cli-q43w92k5.js";
+} from "./cli-7bv8bdv6.js";
 import {
   parseTargetUrl
 } from "./cli-3y0dgy56.js";
 import {
   ToolsetStateSchema,
+  exports_toolset,
+  generateObjectResponse,
+  hasToolCall,
+  init_toolset,
+  require_tslib,
+  streamResponse,
+  toggleTool
+} from "./cli-7qr65rt6.js";
+import {
   _enum,
   _null,
   array,
   boolean,
   custom,
   discriminatedUnion,
-  exports_external,
+  exports_external1 as exports_external,
   exports_iso,
-  exports_toolset,
-  generateObjectResponse,
-  hasToolCall,
-  init_toolset,
   init_zod,
   intersection,
   literal,
@@ -43,27 +48,24 @@ import {
   optional,
   preprocess,
   record,
-  require_tslib,
   safeParse,
-  streamResponse,
   string,
-  toggleTool,
   tool,
   union,
   unknown,
   zod_default
-} from "./cli-s43zrc3b.js";
+} from "./cli-0ghkg3w6.js";
 import {
   signGatewayRequest
-} from "./cli-720fdbrk.js";
+} from "./cli-xv1d4cgj.js";
 import {
   config,
   ensureValidToken,
   getPensarApiUrl
-} from "./cli-2mnefwqh.js";
+} from "./cli-hxegwkcg.js";
 import {
   getCurrentVersion
-} from "./cli-qaaesy26.js";
+} from "./cli-942axn0y.js";
 import {
   __commonJS,
   __require,
@@ -91304,6 +91306,112 @@ var require_imap_commands = __commonJS((exports, module) => {
   ]);
 });
 
+// src/core/eventBus.ts
+import { EventEmitter } from "events";
+var CHILD_BUS_FORWARDED_EVENTS = [
+  "text-delta",
+  "tool-call-start",
+  "tool-call-delta",
+  "tool-call-complete",
+  "tool-result",
+  "subagent-spawn",
+  "subagent-complete",
+  "command-output",
+  "error",
+  "step-finish"
+];
+
+class AgentEventBus {
+  emitter = new EventEmitter;
+  constructor() {
+    this.emitter.setMaxListeners(50);
+  }
+  on(event, handler) {
+    this.emitter.on(event, handler);
+    return this;
+  }
+  once(event, handler) {
+    this.emitter.once(event, handler);
+    return this;
+  }
+  off(event, handler) {
+    this.emitter.off(event, handler);
+    return this;
+  }
+  emit(event, payload) {
+    return this.emitter.emit(event, payload);
+  }
+  removeAllListeners(event) {
+    if (event) {
+      this.emitter.removeAllListeners(event);
+    } else {
+      this.emitter.removeAllListeners();
+    }
+    return this;
+  }
+  static attachChild(child, parent, subagentId) {
+    for (const key of CHILD_BUS_FORWARDED_EVENTS) {
+      child.on(key, (payload) => {
+        if (!parent)
+          return;
+        const p = payload;
+        if (!p.subagentId) {
+          parent.emit(key, { ...p, subagentId });
+        } else {
+          parent.emit(key, payload);
+        }
+      });
+    }
+  }
+  emitStreamPart(chunk, subagentId) {
+    switch (chunk.type) {
+      case "text-delta":
+        this.emit("text-delta", { text: chunk.text, subagentId });
+        break;
+      case "tool-input-start":
+        this.emit("tool-call-start", {
+          toolCallId: chunk.id,
+          toolName: chunk.toolName,
+          subagentId
+        });
+        break;
+      case "tool-input-delta":
+        this.emit("tool-call-delta", {
+          toolCallId: chunk.id,
+          argsTextDelta: chunk.delta,
+          subagentId
+        });
+        break;
+      case "tool-call": {
+        const tc = chunk;
+        this.emit("tool-call-complete", {
+          toolCallId: tc.toolCallId,
+          toolName: tc.toolName,
+          args: tc.args ?? tc.input,
+          subagentId
+        });
+        break;
+      }
+      case "tool-result": {
+        const tr = chunk;
+        this.emit("tool-result", {
+          toolCallId: tr.toolCallId,
+          toolName: tr.toolName,
+          result: tr.result ?? tr.output,
+          subagentId
+        });
+        break;
+      }
+      case "error":
+        this.emit("error", {
+          error: chunk.error,
+          subagentId
+        });
+        break;
+    }
+  }
+}
+
 // src/core/findings/registry.ts
 init_zod();
 import { existsSync, readdirSync, readFileSync } from "fs";
@@ -91678,6 +91786,33 @@ class FindingsRegistry {
   }
 }
 
+// src/core/agents/offSecAgent/tools/askUserQuestions.ts
+init_zod();
+var ASK_USER_QUESTIONS_TOOL_NAME = "ask_user_questions";
+var AskUserQuestionSchema = exports_external.object({
+  id: exports_external.string().describe('Stable identifier for the question (e.g. "deployment-model"). Used to correlate the answer.'),
+  header: exports_external.string().describe('Very short tab label, ideally ≤20 chars. Examples: "Deployment", "Auth method", "Concerns".'),
+  question: exports_external.string(),
+  multiSelect: exports_external.boolean().optional().describe("True if the user can pick multiple options. Defaults to false."),
+  allowFreeform: exports_external.boolean().optional().describe("True if the user can supply a freeform answer in addition to the predefined options. Defaults to true."),
+  options: exports_external.array(exports_external.object({
+    id: exports_external.string(),
+    label: exports_external.string(),
+    description: exports_external.string().optional()
+  })).describe("2–3 predefined options for the user to choose from. Do NOT include " + '"Other" or "Type something" here — the UI renders a freeform input ' + "automatically when `allowFreeform` is true. Keep options short and " + "grounded in observed code.")
+});
+function askUserQuestions(_ctx) {
+  return tool({
+    description: "Stop the agent and ask the user a batch of grounded multi-choice questions. " + "Aim for 1–5 questions per call. Each question MUST include: a short `header` " + '(ideally ≤20 chars, used as the tab label, e.g. "Deployment", "Auth method", "Concerns"); ' + "the `question` text; and 2–3 predefined `options`. Option labels MUST reference something " + "observed in the codebase — not generic templates. " + "Do NOT include an extra 'Other' or 'Type something' option in the predefined list — the UI " + "renders a freeform input automatically when `allowFreeform` is true (the default). Keep " + "predefined options short (a few words each) so the user can scan them quickly. " + "The consumer of this agent collects answers and resumes with a tool-result in the message history.",
+    inputSchema: exports_external.object({
+      questions: exports_external.array(AskUserQuestionSchema).nonempty()
+    }),
+    execute: async ({ questions }) => {
+      return { ok: true, pendingQuestionCount: questions.length };
+    }
+  });
+}
+
 // node_modules/tldts/dist/cjs/index.js
 function shareSameDomainSuffix(hostname, vhost) {
   if (hostname.endsWith(vhost)) {
@@ -99798,114 +99933,6 @@ function validateConcurrency(concurrency) {
 
 // src/core/agents/offSecAgent/tools/threatModelGenerator.ts
 init_zod();
-
-// src/core/eventBus.ts
-import { EventEmitter } from "events";
-var CHILD_BUS_FORWARDED_EVENTS = [
-  "text-delta",
-  "tool-call-start",
-  "tool-call-delta",
-  "tool-call-complete",
-  "tool-result",
-  "subagent-spawn",
-  "subagent-complete",
-  "command-output",
-  "error",
-  "step-finish"
-];
-
-class AgentEventBus {
-  emitter = new EventEmitter;
-  constructor() {
-    this.emitter.setMaxListeners(50);
-  }
-  on(event, handler) {
-    this.emitter.on(event, handler);
-    return this;
-  }
-  once(event, handler) {
-    this.emitter.once(event, handler);
-    return this;
-  }
-  off(event, handler) {
-    this.emitter.off(event, handler);
-    return this;
-  }
-  emit(event, payload) {
-    return this.emitter.emit(event, payload);
-  }
-  removeAllListeners(event) {
-    if (event) {
-      this.emitter.removeAllListeners(event);
-    } else {
-      this.emitter.removeAllListeners();
-    }
-    return this;
-  }
-  static attachChild(child, parent, subagentId) {
-    for (const key of CHILD_BUS_FORWARDED_EVENTS) {
-      child.on(key, (payload) => {
-        if (!parent)
-          return;
-        const p = payload;
-        if (!p.subagentId) {
-          parent.emit(key, { ...p, subagentId });
-        } else {
-          parent.emit(key, payload);
-        }
-      });
-    }
-  }
-  emitStreamPart(chunk, subagentId) {
-    switch (chunk.type) {
-      case "text-delta":
-        this.emit("text-delta", { text: chunk.text, subagentId });
-        break;
-      case "tool-input-start":
-        this.emit("tool-call-start", {
-          toolCallId: chunk.id,
-          toolName: chunk.toolName,
-          subagentId
-        });
-        break;
-      case "tool-input-delta":
-        this.emit("tool-call-delta", {
-          toolCallId: chunk.id,
-          argsTextDelta: chunk.delta,
-          subagentId
-        });
-        break;
-      case "tool-call": {
-        const tc = chunk;
-        this.emit("tool-call-complete", {
-          toolCallId: tc.toolCallId,
-          toolName: tc.toolName,
-          args: tc.args ?? tc.input,
-          subagentId
-        });
-        break;
-      }
-      case "tool-result": {
-        const tr = chunk;
-        this.emit("tool-result", {
-          toolCallId: tr.toolCallId,
-          toolName: tr.toolName,
-          result: tr.result ?? tr.output,
-          subagentId
-        });
-        break;
-      }
-      case "error":
-        this.emit("error", {
-          error: chunk.error,
-          subagentId
-        });
-        break;
-    }
-  }
-}
-
-// src/core/agents/offSecAgent/tools/threatModelGenerator.ts
 var THREAT_MODEL_CONCURRENCY = 10;
 var threatModelLimiter = pLimit(THREAT_MODEL_CONCURRENCY);
 var PentestObjectiveSchema = exports_external.object({
@@ -99953,7 +99980,7 @@ async function generateThreatModelForEndpoint(ctx, input) {
   return threatModelLimiter(async () => {
     if (ctx.abortSignal?.aborted)
       return null;
-    const { CodeAgent } = await import("./agent-jkr50v3q.js");
+    const { CodeAgent } = await import("./agent-r885xt2p.js");
     const subagentId = `threat-model-${sanitize(input.appName)}-${sanitize(input.routePath)}`;
     ctx.eventBus?.emit("subagent-spawn", {
       subagentId,
@@ -100642,7 +100669,7 @@ When to use delegate_to_auth_subagent vs authenticate_session:
         if (credentials) {
           ctx.session.credentialManager.addFromAuthCredentials(credentials);
         }
-        const { runAuthenticationAgent } = await import("./authentication-90mvv4kd.js");
+        const { runAuthenticationAgent } = await import("./authentication-gkv5644m.js");
         const localBus = new AgentEventBus;
         AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
         const result = await runAuthenticationAgent({
@@ -101555,7 +101582,7 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
       });
       if (cwd) {
         try {
-          const { WhiteboxAttackSurfaceAgent } = await import("./agent-hv2vnw37.js");
+          const { WhiteboxAttackSurfaceAgent } = await import("./agent-2a7a9vkp.js");
           const localBus = new AgentEventBus;
           AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
           const agent = new WhiteboxAttackSurfaceAgent({
@@ -101604,7 +101631,7 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
         }
       }
       try {
-        const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-f2y66hex.js");
+        const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-pz1m2qgd.js");
         const localBus = new AgentEventBus;
         AgentEventBus.attachChild(localBus, ctx.eventBus, subagentId);
         const agent = new BlackboxAttackSurfaceAgent({
@@ -101680,7 +101707,7 @@ Pass every target you want tested — the swarm handles concurrency automaticall
       toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async ({ targets }) => {
-      const { runPentestSwarm, DEFAULT_CONCURRENCY } = await import("./pentest-5p1ahtr6.js");
+      const { runPentestSwarm, DEFAULT_CONCURRENCY } = await import("./pentest-663b978f.js");
       if (!ctx.model) {
         return {
           success: false,
@@ -101808,7 +101835,7 @@ Returns an array of results with the text output from each agent.`,
   });
 }
 async function runSingleCodingAgent(ctx, codebasePath, objective, agentIndex, name) {
-  const { CodeAgent } = await import("./agent-jkr50v3q.js");
+  const { CodeAgent } = await import("./agent-r885xt2p.js");
   const subagentId = `coding-agent-${agentIndex}`;
   ctx.eventBus?.emit("subagent-spawn", {
     subagentId,
@@ -101869,7 +101896,7 @@ Omit \`cwd\` for blackbox mode (live target probing only).`,
       toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async ({ target, cwd }) => {
-      const { runPentestWorkflow: workflow } = await import("./pentest-5p1ahtr6.js");
+      const { runPentestWorkflow: workflow } = await import("./pentest-663b978f.js");
       if (!ctx.model) {
         return {
           success: false,
@@ -105904,33 +105931,6 @@ Only call this when the plan is complete and ready for review.`,
     }
   });
 }
-// src/core/agents/offSecAgent/tools/askUserQuestions.ts
-init_zod();
-var ASK_USER_QUESTIONS_TOOL_NAME = "ask_user_questions";
-var AskUserQuestionSchema = exports_external.object({
-  id: exports_external.string().describe('Stable identifier for the question (e.g. "deployment-model"). Used to correlate the answer.'),
-  header: exports_external.string().describe('Very short tab label, ideally ≤20 chars. Examples: "Deployment", "Auth method", "Concerns".'),
-  question: exports_external.string(),
-  multiSelect: exports_external.boolean().optional().describe("True if the user can pick multiple options. Defaults to false."),
-  allowFreeform: exports_external.boolean().optional().describe("True if the user can supply a freeform answer in addition to the predefined options. Defaults to true."),
-  options: exports_external.array(exports_external.object({
-    id: exports_external.string(),
-    label: exports_external.string(),
-    description: exports_external.string().optional()
-  })).describe("2–3 predefined options for the user to choose from. Do NOT include " + '"Other" or "Type something" here — the UI renders a freeform input ' + "automatically when `allowFreeform` is true. Keep options short and " + "grounded in observed code.")
-});
-function askUserQuestions(_ctx) {
-  return tool({
-    description: "Stop the agent and ask the user a batch of grounded multi-choice questions. " + "Aim for 1–5 questions per call. Each question MUST include: a short `header` " + '(ideally ≤20 chars, used as the tab label, e.g. "Deployment", "Auth method", "Concerns"); ' + "the `question` text; and 2–3 predefined `options`. Option labels MUST reference something " + "observed in the codebase — not generic templates. " + "Do NOT include an extra 'Other' or 'Type something' option in the predefined list — the UI " + "renders a freeform input automatically when `allowFreeform` is true (the default). Keep " + "predefined options short (a few words each) so the user can scan them quickly. " + "The consumer of this agent collects answers and resumes with a tool-result in the message history.",
-    inputSchema: exports_external.object({
-      questions: exports_external.array(AskUserQuestionSchema).nonempty()
-    }),
-    execute: async ({ questions }) => {
-      return { ok: true, pendingQuestionCount: questions.length };
-    }
-  });
-}
-
 // src/core/agents/offSecAgent/tools/index.ts
 function createAllTools(ctx) {
   return {
@@ -106069,6 +106069,206 @@ var PLAN_MODE_TOOL_NAMES = [
 ];
 var SKILL_TOOL_NAMES = ["read_skill"];
 
+// src/core/agents/offSecAgent/trace.ts
+import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync11 } from "fs";
+import { createHash } from "crypto";
+import { dirname as dirname5 } from "path";
+var OUTPUT_PREVIEW_LIMIT = 2000;
+var INPUT_PREVIEW_LIMIT = 1000;
+var SYSTEM_PROMPT_HASH_PREFIX_LENGTH = 12;
+function stringifyOutput(output) {
+  if (output == null)
+    return { text: "", type: "text" };
+  if (typeof output === "object" && "type" in output) {
+    const typed = output;
+    switch (typed.type) {
+      case "text":
+      case "error-text":
+        return {
+          text: String(typed.value ?? ""),
+          type: typed.type
+        };
+      case "json":
+      case "error-json":
+        return {
+          text: JSON.stringify(typed.value ?? null),
+          type: typed.type
+        };
+      case "execution-denied":
+        return {
+          text: typed.reason ?? "execution denied",
+          type: typed.type
+        };
+      case "content":
+        return { text: JSON.stringify(typed.value ?? []), type: typed.type };
+      default:
+        return { text: JSON.stringify(output), type: "text" };
+    }
+  }
+  if (typeof output === "string")
+    return { text: output, type: "text" };
+  return { text: JSON.stringify(output), type: "json" };
+}
+function preview(str, maxLen) {
+  return str.length <= maxLen ? str : str.slice(0, maxLen);
+}
+
+class StepTraceWriter {
+  tracePath;
+  agentId;
+  eventBus;
+  stepIndex = 0;
+  cumulativeUsage = {
+    inputTokens: 0,
+    outputTokens: 0
+  };
+  lastStepTime;
+  agentStartTime;
+  summarized = false;
+  previousMessageCount = 0;
+  constructor(opts) {
+    this.tracePath = opts.tracePath;
+    this.agentId = opts.agentId;
+    this.eventBus = opts.eventBus;
+    const now = Date.now();
+    this.agentStartTime = now;
+    this.lastStepTime = now;
+    mkdirSync11(dirname5(this.tracePath), { recursive: true });
+  }
+  writeInit(data) {
+    const { systemPrompt, ...rest } = data;
+    const record3 = {
+      type: "init",
+      timestamp: new Date().toISOString(),
+      agentId: this.agentId,
+      systemPromptHash: createHash("sha256").update(systemPrompt).digest("hex").slice(0, SYSTEM_PROMPT_HASH_PREFIX_LENGTH),
+      systemPrompt,
+      ...rest
+    };
+    this.appendRecord(record3);
+  }
+  markSummarized() {
+    this.summarized = true;
+    this.previousMessageCount = 0;
+  }
+  recordStep(responseMessages, usage) {
+    const now = Date.now();
+    const newMessages = responseMessages.slice(this.previousMessageCount);
+    this.previousMessageCount = responseMessages.length;
+    const observations = [];
+    const reasoningParts = [];
+    const textParts = [];
+    const actions = [];
+    for (const msg of newMessages) {
+      if (!Array.isArray(msg.content)) {
+        if (typeof msg.content === "string" && msg.role === "assistant") {
+          textParts.push(msg.content);
+        }
+        continue;
+      }
+      for (const part of msg.content) {
+        switch (part.type) {
+          case "tool-result": {
+            const { text, type } = stringifyOutput(part.output);
+            observations.push({
+              toolCallId: part.toolCallId,
+              toolName: part.toolName,
+              outputType: type,
+              outputPreview: preview(text, OUTPUT_PREVIEW_LIMIT),
+              outputLength: Buffer.byteLength(text, "utf-8")
+            });
+            break;
+          }
+          case "reasoning": {
+            reasoningParts.push(part.text);
+            break;
+          }
+          case "text": {
+            textParts.push(part.text);
+            break;
+          }
+          case "tool-call": {
+            const serialized = JSON.stringify(part.input);
+            actions.push({
+              toolCallId: part.toolCallId,
+              toolName: part.toolName,
+              inputPreview: preview(serialized, INPUT_PREVIEW_LIMIT),
+              inputLength: Buffer.byteLength(serialized, "utf-8")
+            });
+            break;
+          }
+        }
+      }
+    }
+    const inputTokens = usage.inputTokens ?? 0;
+    const outputTokens = usage.outputTokens ?? 0;
+    const cacheReadTokens = usage.cacheReadTokens;
+    const cacheWriteTokens = usage.cacheWriteTokens;
+    this.cumulativeUsage.inputTokens += inputTokens;
+    this.cumulativeUsage.outputTokens += outputTokens;
+    if (cacheReadTokens != null) {
+      this.cumulativeUsage.cacheReadTokens = (this.cumulativeUsage.cacheReadTokens ?? 0) + cacheReadTokens;
+    }
+    if (cacheWriteTokens != null) {
+      this.cumulativeUsage.cacheWriteTokens = (this.cumulativeUsage.cacheWriteTokens ?? 0) + cacheWriteTokens;
+    }
+    const record3 = {
+      type: "step",
+      stepIndex: this.stepIndex,
+      timestamp: new Date(now).toISOString(),
+      agentId: this.agentId,
+      observations: this.stepIndex === 0 ? null : observations.length > 0 ? observations : null,
+      reasoning: reasoningParts.length > 0 ? reasoningParts.join("") : null,
+      text: textParts.length > 0 ? textParts.join("") : null,
+      actions,
+      usage: { inputTokens, outputTokens, cacheReadTokens, cacheWriteTokens },
+      cumulativeUsage: { ...this.cumulativeUsage },
+      stepDurationMs: now - this.lastStepTime,
+      elapsedMs: now - this.agentStartTime,
+      summarized: this.summarized
+    };
+    this.appendRecord(record3);
+    this.stepIndex++;
+    this.lastStepTime = now;
+    this.summarized = false;
+  }
+  get currentStepIndex() {
+    return this.stepIndex;
+  }
+  appendCheckpoint(data) {
+    const record3 = {
+      type: "checkpoint",
+      stepIndex: this.stepIndex,
+      timestamp: new Date().toISOString(),
+      agentId: this.agentId,
+      ...data
+    };
+    this.appendRecord(record3);
+  }
+  appendTaskRecord(data) {
+    const record3 = {
+      type: "task",
+      timestamp: new Date().toISOString(),
+      agentId: this.agentId,
+      stepIndex: this.stepIndex,
+      ...data
+    };
+    this.appendRecord(record3);
+  }
+  appendRecord(record3) {
+    try {
+      appendFileSync2(this.tracePath, JSON.stringify(record3) + `
+`);
+    } catch {}
+    try {
+      this.eventBus?.emit("trace-record", {
+        record: record3,
+        subagentId: this.agentId ?? undefined
+      });
+    } catch {}
+  }
+}
+
 // src/core/agents/offSecAgent/tools/response.ts
 init_zod();
 var RESPONSE_TOOL_NAME = "response";
@@ -106076,10 +106276,10 @@ function createResponseTool(responseSchema, onResult) {
   return tool({
     description: `Submit your final structured response. Call this ONCE when you have completed your task and assembled all results. This ends your run — make sure all data is included.`,
     inputSchema: exports_external.object({
-      response: responseSchema
+      result: responseSchema
     }),
-    execute: async ({ response }) => {
-      onResult(response);
+    execute: async ({ result }) => {
+      onResult(result);
       return { success: true, message: "Response submitted." };
     }
   });
@@ -106478,8 +106678,45 @@ function killDescendants(rootPid, signal) {
 }
 
 // src/core/agents/offSecAgent/prompt.ts
+import { existsSync as existsSync12, readdirSync as readdirSync3, statSync } from "fs";
+import { join as join18 } from "path";
+function buildProvidedFilesSection(sessionRootPath) {
+  const providedDir = join18(sessionRootPath, "provided_files");
+  if (!existsSync12(providedDir))
+    return "";
+  let entries;
+  try {
+    entries = readdirSync3(providedDir);
+  } catch {
+    return "";
+  }
+  const fileEntries = entries.filter((name) => name !== "README.md").map((name) => {
+    try {
+      const stat2 = statSync(join18(providedDir, name));
+      if (!stat2.isFile())
+        return null;
+      return { name, size: stat2.size };
+    } catch {
+      return null;
+    }
+  }).filter((e) => e !== null);
+  if (fileEntries.length === 0)
+    return "";
+  const lines = fileEntries.map((f) => `- \`provided_files/${f.name}\` (${f.size} bytes)`);
+  return `
+
+# Provided Files
+
+The user has uploaded the following files for this session. They are available at \`${providedDir}\` (relative path: \`provided_files/\`) and may include sample payloads, reference documentation, test data, or other context the agent should consult when planning and executing its work.
+
+${lines.join(`
+`)}
+
+Read these with \`read_file\` and list directory contents with \`list_files provided_files/\` as needed. A \`README.md\` inside \`provided_files/\` may include per-file descriptions supplied by the user — check it first before diving into individual files.`;
+}
 function buildSessionWorkspaceSection(session, agentCwd) {
   const sandboxMode = agentCwd === session.rootPath;
+  const providedFilesSection = buildProvidedFilesSection(session.rootPath);
   if (sandboxMode) {
     return `
 
@@ -106493,8 +106730,9 @@ The session directory (${session.rootPath}) contains these subdirectories:
 - **scratchpad/** — your scratch space for working notes, intermediate data, wordlists, temporary scripts. **Do NOT write reports, executive summaries, or finding compilations here** — reports are generated automatically from findings/.
 - **logs/** — execution logs
 - **evidence/** — screenshots and evidence (written by browser tools)
+- **provided_files/** — user-uploaded files (sample payloads, docs, test data); populated when the project has workspace files configured.
 
-Tools like \`document_vulnerability\` and browser evidence capture write to the correct subdirectories automatically.`;
+Tools like \`document_vulnerability\` and browser evidence capture write to the correct subdirectories automatically.${providedFilesSection}`;
   }
   return `
 
@@ -106509,8 +106747,9 @@ Session artifacts are stored separately at ${session.rootPath}:
 - **scratchpad/** — your scratch space
 - **logs/** — execution logs
 - **evidence/** — screenshots and evidence
+- **provided_files/** — user-uploaded files (sample payloads, docs, test data); populated when the project has workspace files configured.
 
-Tools like \`document_vulnerability\` and browser evidence capture write to the session directory automatically.`;
+Tools like \`document_vulnerability\` and browser evidence capture write to the session directory automatically.${providedFilesSection}`;
 }
 function buildBaseSystemPrompt(options) {
   const sandboxMode = options?.sandboxMode ?? true;
@@ -106874,7 +107113,7 @@ class ApprovalTimeoutError extends ApprovalDeniedError {
 init_zod();
 import path from "path";
 import os from "os";
-import { existsSync as existsSync12, readFileSync as readFileSync4 } from "fs";
+import { existsSync as existsSync13, readFileSync as readFileSync4 } from "fs";
 init_toolset();
 var DEFAULT_OUTCOME_GUIDANCE = "Prove the exploit can be run but do not exfiltrate data or cause any harm to the system. " + "Create proof-of-concept exploits that demonstrate the vulnerability exists without causing damage.";
 var EXFIL_OUTCOME_GUIDANCE = "Exfiltrate data to extract the flag value. " + "Create proof-of-concept exploits that successfully extract the flag from the target system.";
@@ -107090,7 +107329,6 @@ async function create(input) {
     scratchpadPath,
     findingsPath
   };
-  console.info("created session", result);
   const { _rateLimiter, credentialManager: _cm, ...sessionData } = result;
   await createSessionDirs({ session: result });
   await write(["sessions", result.id, "session"], sessionData);
@@ -107128,7 +107366,6 @@ async function update2(id, editor) {
     editor(draft);
     draft.time.updated = Date.now();
   });
-  console.info("updated session", result);
   return result;
 }
 async function* list2() {
@@ -107184,7 +107421,7 @@ async function loadOperatorState(sessionId) {
   try {
     const session = await get(sessionId);
     const statePath = path.join(session.rootPath, "messages.json");
-    if (!existsSync12(statePath))
+    if (!existsSync13(statePath))
       return null;
     const data = readFileSync4(statePath, "utf-8");
     const parsed = JSON.parse(data);
@@ -107213,7 +107450,7 @@ async function loadOperatorState(sessionId) {
 }
 function hasOperatorState(session) {
   const statePath = path.join(session.rootPath, "messages.json");
-  return existsSync12(statePath);
+  return existsSync13(statePath);
 }
 var MAX_RESUME_MESSAGES = 200;
 function getResumeMessages(messages, limit = MAX_RESUME_MESSAGES) {
@@ -107336,211 +107573,9 @@ var sessions = {
 };
 
 // src/core/agents/offSecAgent/offensiveSecurityAgent.ts
-import { join as join18 } from "path";
-import { mkdirSync as mkdirSync12, existsSync as existsSync13 } from "fs";
+import { join as join19 } from "path";
+import { mkdirSync as mkdirSync12, existsSync as existsSync14 } from "fs";
 import { writeFile as writeFile4 } from "fs/promises";
-
-// src/core/agents/offSecAgent/trace.ts
-import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync11 } from "fs";
-import { createHash } from "crypto";
-import { dirname as dirname5 } from "path";
-var OUTPUT_PREVIEW_LIMIT = 2000;
-var INPUT_PREVIEW_LIMIT = 1000;
-var SYSTEM_PROMPT_HASH_PREFIX_LENGTH = 12;
-function stringifyOutput(output) {
-  if (output == null)
-    return { text: "", type: "text" };
-  if (typeof output === "object" && "type" in output) {
-    const typed = output;
-    switch (typed.type) {
-      case "text":
-      case "error-text":
-        return {
-          text: String(typed.value ?? ""),
-          type: typed.type
-        };
-      case "json":
-      case "error-json":
-        return {
-          text: JSON.stringify(typed.value ?? null),
-          type: typed.type
-        };
-      case "execution-denied":
-        return {
-          text: typed.reason ?? "execution denied",
-          type: typed.type
-        };
-      case "content":
-        return { text: JSON.stringify(typed.value ?? []), type: typed.type };
-      default:
-        return { text: JSON.stringify(output), type: "text" };
-    }
-  }
-  if (typeof output === "string")
-    return { text: output, type: "text" };
-  return { text: JSON.stringify(output), type: "json" };
-}
-function preview(str, maxLen) {
-  return str.length <= maxLen ? str : str.slice(0, maxLen);
-}
-
-class StepTraceWriter {
-  tracePath;
-  agentId;
-  eventBus;
-  stepIndex = 0;
-  cumulativeUsage = {
-    inputTokens: 0,
-    outputTokens: 0
-  };
-  lastStepTime;
-  agentStartTime;
-  summarized = false;
-  previousMessageCount = 0;
-  constructor(opts) {
-    this.tracePath = opts.tracePath;
-    this.agentId = opts.agentId;
-    this.eventBus = opts.eventBus;
-    const now = Date.now();
-    this.agentStartTime = now;
-    this.lastStepTime = now;
-    mkdirSync11(dirname5(this.tracePath), { recursive: true });
-  }
-  writeInit(data) {
-    const { systemPrompt, ...rest } = data;
-    const record3 = {
-      type: "init",
-      timestamp: new Date().toISOString(),
-      agentId: this.agentId,
-      systemPromptHash: createHash("sha256").update(systemPrompt).digest("hex").slice(0, SYSTEM_PROMPT_HASH_PREFIX_LENGTH),
-      systemPrompt,
-      ...rest
-    };
-    this.appendRecord(record3);
-  }
-  markSummarized() {
-    this.summarized = true;
-    this.previousMessageCount = 0;
-  }
-  recordStep(responseMessages, usage) {
-    const now = Date.now();
-    const newMessages = responseMessages.slice(this.previousMessageCount);
-    this.previousMessageCount = responseMessages.length;
-    const observations = [];
-    const reasoningParts = [];
-    const textParts = [];
-    const actions = [];
-    for (const msg of newMessages) {
-      if (!Array.isArray(msg.content)) {
-        if (typeof msg.content === "string" && msg.role === "assistant") {
-          textParts.push(msg.content);
-        }
-        continue;
-      }
-      for (const part of msg.content) {
-        switch (part.type) {
-          case "tool-result": {
-            const { text, type } = stringifyOutput(part.output);
-            observations.push({
-              toolCallId: part.toolCallId,
-              toolName: part.toolName,
-              outputType: type,
-              outputPreview: preview(text, OUTPUT_PREVIEW_LIMIT),
-              outputLength: Buffer.byteLength(text, "utf-8")
-            });
-            break;
-          }
-          case "reasoning": {
-            reasoningParts.push(part.text);
-            break;
-          }
-          case "text": {
-            textParts.push(part.text);
-            break;
-          }
-          case "tool-call": {
-            const serialized = JSON.stringify(part.input);
-            actions.push({
-              toolCallId: part.toolCallId,
-              toolName: part.toolName,
-              inputPreview: preview(serialized, INPUT_PREVIEW_LIMIT),
-              inputLength: Buffer.byteLength(serialized, "utf-8")
-            });
-            break;
-          }
-        }
-      }
-    }
-    const inputTokens = usage.inputTokens ?? 0;
-    const outputTokens = usage.outputTokens ?? 0;
-    const cacheReadTokens = usage.cacheReadTokens;
-    const cacheWriteTokens = usage.cacheWriteTokens;
-    this.cumulativeUsage.inputTokens += inputTokens;
-    this.cumulativeUsage.outputTokens += outputTokens;
-    if (cacheReadTokens != null) {
-      this.cumulativeUsage.cacheReadTokens = (this.cumulativeUsage.cacheReadTokens ?? 0) + cacheReadTokens;
-    }
-    if (cacheWriteTokens != null) {
-      this.cumulativeUsage.cacheWriteTokens = (this.cumulativeUsage.cacheWriteTokens ?? 0) + cacheWriteTokens;
-    }
-    const record3 = {
-      type: "step",
-      stepIndex: this.stepIndex,
-      timestamp: new Date(now).toISOString(),
-      agentId: this.agentId,
-      observations: this.stepIndex === 0 ? null : observations.length > 0 ? observations : null,
-      reasoning: reasoningParts.length > 0 ? reasoningParts.join("") : null,
-      text: textParts.length > 0 ? textParts.join("") : null,
-      actions,
-      usage: { inputTokens, outputTokens, cacheReadTokens, cacheWriteTokens },
-      cumulativeUsage: { ...this.cumulativeUsage },
-      stepDurationMs: now - this.lastStepTime,
-      elapsedMs: now - this.agentStartTime,
-      summarized: this.summarized
-    };
-    this.appendRecord(record3);
-    this.stepIndex++;
-    this.lastStepTime = now;
-    this.summarized = false;
-  }
-  get currentStepIndex() {
-    return this.stepIndex;
-  }
-  appendCheckpoint(data) {
-    const record3 = {
-      type: "checkpoint",
-      stepIndex: this.stepIndex,
-      timestamp: new Date().toISOString(),
-      agentId: this.agentId,
-      ...data
-    };
-    this.appendRecord(record3);
-  }
-  appendTaskRecord(data) {
-    const record3 = {
-      type: "task",
-      timestamp: new Date().toISOString(),
-      agentId: this.agentId,
-      stepIndex: this.stepIndex,
-      ...data
-    };
-    this.appendRecord(record3);
-  }
-  appendRecord(record3) {
-    try {
-      appendFileSync2(this.tracePath, JSON.stringify(record3) + `
-`);
-    } catch {}
-    try {
-      this.eventBus?.emit("trace-record", {
-        record: record3,
-        subagentId: this.agentId ?? undefined
-      });
-    } catch {}
-  }
-}
-
-// src/core/agents/offSecAgent/offensiveSecurityAgent.ts
 class OffensiveSecurityAgent {
   streamResult;
   eventBus;
@@ -107584,15 +107619,15 @@ class OffensiveSecurityAgent {
         input.commandCancelHandle.cancel = () => shell.cancelCurrentCommand();
       }
     }
-    const messagesDir = input.messagesDir ?? (input.subagentId ? join18(input.session.rootPath, "subagents", input.subagentId) : input.session.rootPath);
-    const tracePath = input.subagentId ? join18(input.session.rootPath, "subagents", `${input.subagentId}.trace.jsonl`) : join18(messagesDir, "trace.jsonl");
+    const messagesDir = input.messagesDir ?? (input.subagentId ? join19(input.session.rootPath, "subagents", input.subagentId) : input.session.rootPath);
+    const tracePath = input.subagentId ? join19(input.session.rootPath, "subagents", `${input.subagentId}.trace.jsonl`) : join19(messagesDir, "trace.jsonl");
     const traceWriter = new StepTraceWriter({
       tracePath,
       agentId: input.subagentId ?? null,
       eventBus: this.eventBus
     });
     const taskDriven = input.session.config?.taskDriven ?? false;
-    const tasksDir = input.tasksDir ?? (taskDriven ? input.subagentId ? join18(input.session.rootPath, "subagents", `${input.subagentId}-tasks`) : join18(input.session.rootPath, "tasks") : undefined);
+    const tasksDir = input.tasksDir ?? (taskDriven ? input.subagentId ? join19(input.session.rootPath, "subagents", `${input.subagentId}-tasks`) : join19(input.session.rootPath, "tasks") : undefined);
     const credentialManager = input.credentialManager ?? input.session.credentialManager;
     const builtinTools = createAllTools({
       session: input.session,
@@ -107655,10 +107690,10 @@ class OffensiveSecurityAgent {
       const planSet = new Set(PLAN_MODE_TOOL_NAMES);
       activeTools = activeTools.filter((t) => planSet.has(t));
     }
-    if (!existsSync13(messagesDir)) {
+    if (!existsSync14(messagesDir)) {
       mkdirSync12(messagesDir, { recursive: true });
     }
-    const messagesPath = join18(messagesDir, "messages.json");
+    const messagesPath = join19(messagesDir, "messages.json");
     const initialMessagesRef = {
       current: input.messages ? [...input.messages] : [
         {
@@ -107816,4 +107851,4 @@ function wrapToolsWithApprovalGate(tools, gate, exemptToolNames) {
   return wrapped;
 }
 
-export { CweEntrySchema, ValidatedCweEntrySchema, hasCanonicalName, AgentEventBus, FindingsRegistry, planFilePath, readPlan, hasPlan, ASK_USER_QUESTIONS_TOOL_NAME, ALL_TOOL_NAMES, PLAN_MODE_TOOL_NAMES, SKILL_TOOL_NAMES, buildBaseSystemPrompt, OPERATOR_MODES, OPERATOR_MODE_CYCLE, createInitialOperatorState, ApprovalGate, normalizeMessages, sessions, OffensiveSecurityAgent };
+export { CweEntrySchema, ValidatedCweEntrySchema, hasCanonicalName, AgentEventBus, FindingsRegistry, planFilePath, readPlan, hasPlan, ASK_USER_QUESTIONS_TOOL_NAME, createAllTools, ALL_TOOL_NAMES, PLAN_MODE_TOOL_NAMES, SKILL_TOOL_NAMES, buildBaseSystemPrompt, OPERATOR_MODES, OPERATOR_MODE_CYCLE, createInitialOperatorState, ApprovalGate, normalizeMessages, sessions, StepTraceWriter, OffensiveSecurityAgent };