@pensar/apex 2.0.0 → 2.0.1

package/README.md

@@ -84,6 +84,26 @@ pensar targeted-pentest --target https://example.com --objective "Test authentic
 | `--threat-model <text\|@file>` | pentest                   | Threat model to guide testing                  |
 | `--objective <text>`           | targeted-pentest          | Testing objective (repeatable)                 |
 
+### Logging
+
+Apex routes diagnostic/operational logging through a centralized structured logger
+(`src/core/logger`). It writes one-line JSON to **stderr** when output is not a TTY — keeping
+it separate from the program's stdout and easy to ship to a log pipeline (e.g. CloudWatch) —
+and pretty, colorized output in an interactive terminal. User-facing CLI/TUI output stays on
+stdout.
+
+Set the level (most → least verbose: `debug` < `info` < `warn` < `error`, default `info`):
+
+```bash
+pensar pentest --target https://example.com --log-level debug   # or --verbose / --quiet
+PENSAR_LOG_LEVEL=debug pensar ...                                # via environment
+PENSAR_DEBUG=1 pensar ...                                        # back-compat alias for debug
+```
+
+Resolution order: CLI flag → `PENSAR_LOG_LEVEL` → `PENSAR_DEBUG` → default `info`.
+`PENSAR_LOG_FORMAT=json|pretty` forces the output format. When Apex runs as a managed agent,
+`PENSAR_LOG_LEVEL` is supplied by the host environment.
+
 ### W&B Weave Tracing
 
 Stream step-level agent traces to Weights & Biases Weave for analysis and fine-tuning:

package/build/agent-4g69jwmq.js

@@ -0,0 +1,19 @@
+import {
+  CodeAgent
+} from "./cli-f93g10xk.js";
+import"./cli-9fsre5pt.js";
+import"./cli-hk03x6fq.js";
+import"./cli-zpdmnz8c.js";
+import"./cli-cc13ydyx.js";
+import"./cli-c8131c4q.js";
+import"./cli-z1dapp7v.js";
+import"./cli-8g5cwvbm.js";
+import"./cli-e6rgwtpb.js";
+import"./cli-gpnb45ck.js";
+import"./cli-eptabm2j.js";
+import"./cli-88bhxzr1.js";
+import"./cli-0yptvbbm.js";
+import"./cli-8rxa073f.js";
+export {
+  CodeAgent
+};

package/build/{agent-x1tnsg7n.js → agent-6nhperp2.js}

@@ -1,26 +1,23 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-k8mvghe1.js";
+} from "./cli-zpdmnz8c.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-mswm4k81.js";
-import"./cli-3knnkdps.js";
+} from "./cli-cc13ydyx.js";
 import"./cli-c8131c4q.js";
-import"./cli-s1nckt4k.js";
-import"./cli-1yavz2pb.js";
 import {
   init_dist,
   stepCountIs
-} from "./cli-h825qzmd.js";
-import"./cli-948dk60p.js";
+} from "./cli-z1dapp7v.js";
+import"./cli-8g5cwvbm.js";
 import {
   exports_external1 as exports_external,
   init_zod
 } from "./cli-e6rgwtpb.js";
-import"./cli-h6nw89zf.js";
 import"./cli-gpnb45ck.js";
-import"./cli-0v9x0eby.js";
-import"./cli-a20jcpmp.js";
+import"./cli-eptabm2j.js";
+import"./cli-88bhxzr1.js";
+import"./cli-0yptvbbm.js";
 import"./cli-8rxa073f.js";
 
 // src/core/agents/specialized/findingJudge/agent.ts

package/build/{agent-z8043nrm.js → agent-x7n47c84.js}

@@ -3,22 +3,19 @@ import {
   buildPentestActiveTools,
   buildPentestPrompt,
   buildPentestSystemPrompt
-} from "./cli-cb5va0cs.js";
+} from "./cli-w2st266h.js";
 import"./cli-9fsre5pt.js";
-import"./cli-ntd42071.js";
-import"./cli-k8mvghe1.js";
-import"./cli-mswm4k81.js";
-import"./cli-3knnkdps.js";
+import"./cli-hk03x6fq.js";
+import"./cli-zpdmnz8c.js";
+import"./cli-cc13ydyx.js";
 import"./cli-c8131c4q.js";
-import"./cli-s1nckt4k.js";
-import"./cli-1yavz2pb.js";
-import"./cli-h825qzmd.js";
-import"./cli-948dk60p.js";
+import"./cli-z1dapp7v.js";
+import"./cli-8g5cwvbm.js";
 import"./cli-e6rgwtpb.js";
-import"./cli-h6nw89zf.js";
 import"./cli-gpnb45ck.js";
-import"./cli-0v9x0eby.js";
-import"./cli-a20jcpmp.js";
+import"./cli-eptabm2j.js";
+import"./cli-88bhxzr1.js";
+import"./cli-0yptvbbm.js";
 import"./cli-8rxa073f.js";
 export {
   buildPentestSystemPrompt,

package/build/{apps-gdze0s68.js → apps-2ac4vt09.js}

@@ -12,29 +12,26 @@ import {
   searchEndpoints,
   updateApp,
   updateEndpoint
-} from "./cli-31cara07.js";
-import"./cli-5fr9k6m4.js";
-import"./cli-sw5swz40.js";
-import"./cli-cb5va0cs.js";
-import"./cli-zvq4gy61.js";
-import"./cli-zpvmaxem.js";
-import"./cli-wdmqkshz.js";
+} from "./cli-pyzw545d.js";
+import"./cli-mfzkhttr.js";
+import"./cli-fxtbkw2f.js";
+import"./cli-w2st266h.js";
+import"./cli-fa7nrded.js";
+import"./cli-f93g10xk.js";
+import"./cli-ddtmgbqv.js";
 import"./cli-9fsre5pt.js";
-import"./cli-ntd42071.js";
-import"./cli-k8mvghe1.js";
-import"./cli-mswm4k81.js";
-import"./cli-3knnkdps.js";
+import"./cli-hk03x6fq.js";
+import"./cli-zpdmnz8c.js";
+import"./cli-cc13ydyx.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-s1nckt4k.js";
-import"./cli-1yavz2pb.js";
-import"./cli-h825qzmd.js";
-import"./cli-948dk60p.js";
+import"./cli-z1dapp7v.js";
+import"./cli-8g5cwvbm.js";
 import"./cli-e6rgwtpb.js";
-import"./cli-h6nw89zf.js";
 import"./cli-gpnb45ck.js";
-import"./cli-0v9x0eby.js";
-import"./cli-a20jcpmp.js";
+import"./cli-eptabm2j.js";
+import"./cli-88bhxzr1.js";
+import"./cli-0yptvbbm.js";
 import"./cli-8rxa073f.js";
 
 // src/cli/apps.ts

package/build/{auth-24ca1qwx.js → auth-bmt98hz0.js}

@@ -1,21 +1,18 @@
 #!/usr/bin/env bun
-import"./cli-31cara07.js";
-import"./cli-5fr9k6m4.js";
-import"./cli-sw5swz40.js";
-import"./cli-cb5va0cs.js";
-import"./cli-zvq4gy61.js";
-import"./cli-zpvmaxem.js";
-import"./cli-wdmqkshz.js";
+import"./cli-pyzw545d.js";
+import"./cli-mfzkhttr.js";
+import"./cli-fxtbkw2f.js";
+import"./cli-w2st266h.js";
+import"./cli-fa7nrded.js";
+import"./cli-f93g10xk.js";
+import"./cli-ddtmgbqv.js";
 import"./cli-9fsre5pt.js";
-import"./cli-ntd42071.js";
-import"./cli-k8mvghe1.js";
-import"./cli-mswm4k81.js";
-import"./cli-3knnkdps.js";
+import"./cli-hk03x6fq.js";
+import"./cli-zpdmnz8c.js";
+import"./cli-cc13ydyx.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-s1nckt4k.js";
-import"./cli-1yavz2pb.js";
-import"./cli-h825qzmd.js";
+import"./cli-z1dapp7v.js";
 import {
   disconnect,
   fetchWorkspaces,
@@ -28,15 +25,15 @@ import {
   pollWorkOSToken,
   selectWorkspace,
   startDeviceFlow
-} from "./cli-948dk60p.js";
+} from "./cli-8g5cwvbm.js";
 import"./cli-e6rgwtpb.js";
+import"./cli-gpnb45ck.js";
 import {
   config,
   init_config
-} from "./cli-h6nw89zf.js";
-import"./cli-gpnb45ck.js";
-import"./cli-0v9x0eby.js";
-import"./cli-a20jcpmp.js";
+} from "./cli-eptabm2j.js";
+import"./cli-88bhxzr1.js";
+import"./cli-0yptvbbm.js";
 import {
   __require
 } from "./cli-8rxa073f.js";

package/build/authentication-c0aj9zaz.js

@@ -0,0 +1,19 @@
+import {
+  runAuthenticationAgent
+} from "./cli-fa7nrded.js";
+import"./cli-9fsre5pt.js";
+import"./cli-hk03x6fq.js";
+import"./cli-zpdmnz8c.js";
+import"./cli-cc13ydyx.js";
+import"./cli-c8131c4q.js";
+import"./cli-z1dapp7v.js";
+import"./cli-8g5cwvbm.js";
+import"./cli-e6rgwtpb.js";
+import"./cli-gpnb45ck.js";
+import"./cli-eptabm2j.js";
+import"./cli-88bhxzr1.js";
+import"./cli-0yptvbbm.js";
+import"./cli-8rxa073f.js";
+export {
+  runAuthenticationAgent
+};

package/build/blackboxAgent-sgph70e4.js

@@ -0,0 +1,19 @@
+import {
+  BlackboxAttackSurfaceAgent
+} from "./cli-fxtbkw2f.js";
+import"./cli-9fsre5pt.js";
+import"./cli-hk03x6fq.js";
+import"./cli-zpdmnz8c.js";
+import"./cli-cc13ydyx.js";
+import"./cli-c8131c4q.js";
+import"./cli-z1dapp7v.js";
+import"./cli-8g5cwvbm.js";
+import"./cli-e6rgwtpb.js";
+import"./cli-gpnb45ck.js";
+import"./cli-eptabm2j.js";
+import"./cli-88bhxzr1.js";
+import"./cli-0yptvbbm.js";
+import"./cli-8rxa073f.js";
+export {
+  BlackboxAttackSurfaceAgent
+};

package/build/{blackboxPentest-xwc031xm.js → blackboxPentest-xngbtdxb.js}

@@ -1,26 +1,23 @@
 import {
   runPentestWorkflow
-} from "./cli-5fr9k6m4.js";
-import"./cli-sw5swz40.js";
-import"./cli-cb5va0cs.js";
-import"./cli-zpvmaxem.js";
-import"./cli-wdmqkshz.js";
+} from "./cli-mfzkhttr.js";
+import"./cli-fxtbkw2f.js";
+import"./cli-w2st266h.js";
+import"./cli-f93g10xk.js";
+import"./cli-ddtmgbqv.js";
 import"./cli-9fsre5pt.js";
-import"./cli-ntd42071.js";
-import"./cli-k8mvghe1.js";
-import"./cli-mswm4k81.js";
-import"./cli-3knnkdps.js";
+import"./cli-hk03x6fq.js";
+import"./cli-zpdmnz8c.js";
+import"./cli-cc13ydyx.js";
 import"./cli-fw5r7pfj.js";
 import"./cli-c8131c4q.js";
-import"./cli-s1nckt4k.js";
-import"./cli-1yavz2pb.js";
-import"./cli-h825qzmd.js";
-import"./cli-948dk60p.js";
+import"./cli-z1dapp7v.js";
+import"./cli-8g5cwvbm.js";
 import"./cli-e6rgwtpb.js";
-import"./cli-h6nw89zf.js";
 import"./cli-gpnb45ck.js";
-import"./cli-0v9x0eby.js";
-import"./cli-a20jcpmp.js";
+import"./cli-eptabm2j.js";
+import"./cli-88bhxzr1.js";
+import"./cli-0yptvbbm.js";
 import"./cli-8rxa073f.js";
 
 // src/core/api/blackboxPentest.ts

package/build/{cli-a20jcpmp.js → cli-0yptvbbm.js}

@@ -119,7 +119,7 @@ var init_package = __esm(() => {
       tsc: "tsc --noEmit"
     },
     type: "module",
-    version: "2.0.0"
+    version: "2.0.1"
   };
 });
 

package/build/{cli-pkdjamer.js → cli-1f5zzrxj.js}

@@ -1,4 +1,14 @@
+import {
+  createLogger,
+  init_lazyLogger,
+  init_structured,
+  scopedLogger
+} from "./cli-z1dapp7v.js";
+
 // src/core/integrations/wandb/client.ts
+init_structured();
+init_lazyLogger();
+var log = scopedLogger(() => createLogger("wandb"));
 function resolveConfig(overrides) {
   const apiKey = overrides?.apiKey ?? process.env.WANDB_API_KEY;
   const entity = overrides?.entity ?? process.env.WANDB_ENTITY;
@@ -13,7 +23,7 @@ async function initWeave(config) {
   const configKey = `${config.entity}/${config.project}`;
   if (weaveReady) {
     if (cachedConfigKey && cachedConfigKey !== configKey) {
-      console.warn(`[wandb] initWeave called with ${configKey} but already initialized with ${cachedConfigKey}. Weave supports one project per process.`);
+      log.warn(`initWeave called with ${configKey} but already initialized with ${cachedConfigKey}. Weave supports one project per process.`);
     }
     return weaveReady;
   }
@@ -33,7 +43,7 @@ async function initWeave(config) {
       await weave.init(configKey);
       return weave;
     } catch (e) {
-      console.error("[wandb] Weave init failed:", e);
+      log.warn("Weave init failed", { error: String(e) });
       weaveReady = null;
       cachedConfigKey = null;
       return null;
@@ -74,7 +84,7 @@ async function createWeaveTracer(config) {
     logRecord: (record, sessionId) => {
       logTraceRecord({ record, sessionId }).catch((e) => {
         if (!logErrorLogged) {
-          console.error("[wandb] Record upload failed (suppressing future warnings):", e);
+          log.error("Record upload failed (suppressing future warnings)", e instanceof Error ? e : undefined, { error: String(e) });
           logErrorLogged = true;
         }
       });
@@ -83,7 +93,7 @@ async function createWeaveTracer(config) {
       try {
         const getClient = weave.getGlobalClient;
         if (!getClient) {
-          console.warn("[wandb] getGlobalClient not found — flush skipped. Check weave SDK version.");
+          log.warn("getGlobalClient not found — flush skipped. Check weave SDK version.");
           return;
         }
         const client = getClient();
@@ -91,7 +101,7 @@ async function createWeaveTracer(config) {
           await client.waitForBatchProcessing();
         }
       } catch (e) {
-        console.error("[wandb] Flush failed:", e);
+        log.warn("Flush failed", { error: String(e) });
       }
     }
   };

package/build/{cli-0v9x0eby.js → cli-88bhxzr1.js}

@@ -1,7 +1,7 @@
 import {
   getCurrentVersion,
   init_installation
-} from "./cli-a20jcpmp.js";
+} from "./cli-0yptvbbm.js";
 import {
   __esm
 } from "./cli-8rxa073f.js";

package/build/{cli-948dk60p.js → cli-8g5cwvbm.js}

@@ -1,7 +1,7 @@
 import {
   config,
   init_config
-} from "./cli-h6nw89zf.js";
+} from "./cli-eptabm2j.js";
 import {
   __esm
 } from "./cli-8rxa073f.js";

package/build/{cli-mswm4k81.js → cli-cc13ydyx.js}

@@ -1,3 +1,10 @@
+import {
+  createLogger,
+  init_lazyLogger,
+  init_structured,
+  scopedLogger
+} from "./cli-z1dapp7v.js";
+
 // src/core/agents/specialized/utils.ts
 import { execSync } from "child_process";
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
@@ -55,6 +62,9 @@ function getBundledWordlists() {
 }
 
 // src/core/agents/specialized/utils.ts
+init_structured();
+init_lazyLogger();
+var log = scopedLogger(() => createLogger("specialized:utils"));
 function readOsRelease() {
   try {
     const content = readFileSync2("/etc/os-release", "utf8");
@@ -176,7 +186,7 @@ function detectOSAndEnhancePrompt(prompt) {
 `)}
 ${prompt}`;
   } catch (error) {
-    console.error("Error detecting environment:", error);
+    log.error("Error detecting environment", error instanceof Error ? error : undefined, { error: String(error) });
     return prompt;
   }
 }

package/build/{cli-wdmqkshz.js → cli-ddtmgbqv.js}

@@ -1,10 +1,10 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-k8mvghe1.js";
+} from "./cli-zpdmnz8c.js";
 import {
   hasToolCall,
   init_dist
-} from "./cli-h825qzmd.js";
+} from "./cli-z1dapp7v.js";
 import {
   exports_external1 as exports_external,
   init_zod,

package/build/{cli-h6nw89zf.js → cli-eptabm2j.js}

@@ -3,7 +3,7 @@ import {
   init,
   init_config,
   update
-} from "./cli-0v9x0eby.js";
+} from "./cli-88bhxzr1.js";
 import {
   __esm
 } from "./cli-8rxa073f.js";

package/build/{cli-zpvmaxem.js → cli-f93g10xk.js}

@@ -1,10 +1,10 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-k8mvghe1.js";
+} from "./cli-zpdmnz8c.js";
 import {
   init_dist,
   stepCountIs
-} from "./cli-h825qzmd.js";
+} from "./cli-z1dapp7v.js";
 
 // src/core/agents/specialized/codeAgent/agent.ts
 init_dist();

package/build/{cli-zvq4gy61.js → cli-fa7nrded.js}

@@ -1,16 +1,22 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-k8mvghe1.js";
+} from "./cli-zpdmnz8c.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-mswm4k81.js";
+} from "./cli-cc13ydyx.js";
 import {
+  createLogger,
   hasToolCall,
-  init_dist
-} from "./cli-h825qzmd.js";
+  init_dist,
+  init_lazyLogger,
+  init_structured,
+  scopedLogger
+} from "./cli-z1dapp7v.js";
 
 // src/core/agents/specialized/authenticationAgent/agent.ts
 init_dist();
+init_structured();
+init_lazyLogger();
 import { existsSync, readFileSync } from "fs";
 import { join } from "path";
 
@@ -156,6 +162,8 @@ If you encounter rate-limiting errors (e.g. "Rate limit exceeded", HTTP 429, "to
 `;
 
 // src/core/agents/specialized/authenticationAgent/agent.ts
+var log = scopedLogger(() => createLogger("authentication-agent"));
+
 class AuthenticationAgent extends OffensiveSecurityAgent {
   constructor(opts) {
     const {
@@ -304,8 +312,7 @@ You have credentials available via credential IDs — authenticate immediately.
 async function runAuthenticationAgent(input) {
   const agent = new AuthenticationAgent(input);
   const result = await agent.consume();
-  console.log(`
-Authentication ${result.success ? "succeeded" : "failed"}: ${result.summary}`);
+  log.info(`Authentication ${result.success ? "succeeded" : "failed"}: ${result.summary}`);
   return result;
 }
 

package/build/{cli-sw5swz40.js → cli-fxtbkw2f.js}

@@ -1,14 +1,14 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-k8mvghe1.js";
+} from "./cli-zpdmnz8c.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-mswm4k81.js";
+} from "./cli-cc13ydyx.js";
 import {
   hasToolCall,
   init_dist,
   stepCountIs
-} from "./cli-h825qzmd.js";
+} from "./cli-z1dapp7v.js";
 
 // src/core/agents/specialized/attackSurface/blackboxAgent.ts
 init_dist();

package/build/{cli-ntd42071.js → cli-hk03x6fq.js}

@@ -1,7 +1,7 @@
 import {
   CweEntrySchema,
   ValidatedCweEntrySchema
-} from "./cli-k8mvghe1.js";
+} from "./cli-zpdmnz8c.js";
 import {
   exports_external1 as exports_external,
   init_zod