@pensar/apex 2.3.0 → 2.4.0-canary.01e519de

package/build/cli.js

@@ -1,6 +1,15 @@
 #!/usr/bin/env bun
 // @bun
-import"./cli-q24twygk.js";
+import {
+  require_index_node_http,
+  require_index_shim,
+  require_src as require_src2,
+  require_src1 as require_src3,
+  require_src2 as require_src4,
+  require_src3 as require_src5,
+  require_src4 as require_src6
+} from "./cli-68260ckj.js";
+import"./cli-dm0fc0bm.js";
 import {
   createThreatModelPrompt
 } from "./cli-fw5r7pfj.js";
@@ -8,26 +17,354 @@ import"./cli-c8131c4q.js";
 import {
   buildAuthConfig,
   init_ai1 as init_ai,
+  init_model_history,
   init_models,
   init_session,
   init_structured,
   init_toolset,
   init_utils,
   logger
-} from "./cli-zx8gk8xv.js";
-import"./cli-vckbhnyk.js";
-import"./cli-3k1x5rn3.js";
-import"./cli-gpnb45ck.js";
-import"./cli-f7hanqbw.js";
-import"./cli-eveg9djy.js";
+} from "./cli-er8qc2y9.js";
+import"./cli-tam9trnb.js";
+import"./cli-avmhkjtv.js";
+import"./cli-j54qa6tm.js";
+import"./cli-r4z9n4q4.js";
+import"./cli-rnwxtghc.js";
 import {
   init_package,
-  package_default
-} from "./cli-barsn8br.js";
+  package_default,
+  version
+} from "./cli-g106a565.js";
+import {
+  require_src
+} from "./cli-knd276ed.js";
 import {
+  __commonJS,
   __require,
   __toESM
-} from "./cli-8rxa073f.js";
+} from "./cli-bc05qbss.js";
+
+// node_modules/dotenv/lib/main.js
+var require_main = __commonJS(function(exports, module) {
+  var fs = __require("fs");
+  var path = __require("path");
+  var os = __require("os");
+  var crypto = __require("crypto");
+  var TIPS = [
+    "◈ encrypted .env [www.dotenvx.com]",
+    "◈ secrets for agents [www.dotenvx.com]",
+    "⌁ auth for agents [www.vestauth.com]",
+    "⌘ custom filepath { path: '/custom/path/.env' }",
+    "⌘ enable debugging { debug: true }",
+    "⌘ override existing { override: true }",
+    "⌘ suppress logs { quiet: true }",
+    "⌘ multiple files { path: ['.env.local', '.env'] }"
+  ];
+  function _getRandomTip() {
+    return TIPS[Math.floor(Math.random() * TIPS.length)];
+  }
+  function parseBoolean(value) {
+    if (typeof value === "string") {
+      return !["false", "0", "no", "off", ""].includes(value.toLowerCase());
+    }
+    return Boolean(value);
+  }
+  function supportsAnsi() {
+    return process.stdout.isTTY;
+  }
+  function dim(text) {
+    return supportsAnsi() ? `\x1B[2m${text}\x1B[0m` : text;
+  }
+  var LINE = /(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/mg;
+  function parse(src) {
+    const obj = {};
+    let lines = src.toString();
+    lines = lines.replace(/\r\n?/mg, `
+`);
+    let match;
+    while ((match = LINE.exec(lines)) != null) {
+      const key = match[1];
+      let value = match[2] || "";
+      value = value.trim();
+      const maybeQuote = value[0];
+      value = value.replace(/^(['"`])([\s\S]*)\1$/mg, "$2");
+      if (maybeQuote === '"') {
+        value = value.replace(/\\n/g, `
+`);
+        value = value.replace(/\\r/g, "\r");
+      }
+      obj[key] = value;
+    }
+    return obj;
+  }
+  function _parseVault(options) {
+    options = options || {};
+    const vaultPath = _vaultPath(options);
+    options.path = vaultPath;
+    const result = DotenvModule.configDotenv(options);
+    if (!result.parsed) {
+      const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
+      err.code = "MISSING_DATA";
+      throw err;
+    }
+    const keys = _dotenvKey(options).split(",");
+    const length = keys.length;
+    let decrypted;
+    for (let i = 0;i < length; i++) {
+      try {
+        const key = keys[i].trim();
+        const attrs = _instructions(result, key);
+        decrypted = DotenvModule.decrypt(attrs.ciphertext, attrs.key);
+        break;
+      } catch (error) {
+        if (i + 1 >= length) {
+          throw error;
+        }
+      }
+    }
+    return DotenvModule.parse(decrypted);
+  }
+  function _warn(message) {
+    console.error(`⚠ ${message}`);
+  }
+  function _debug(message) {
+    console.log(`┆ ${message}`);
+  }
+  function _log(message) {
+    console.log(`◇ ${message}`);
+  }
+  function _dotenvKey(options) {
+    if (options && options.DOTENV_KEY && options.DOTENV_KEY.length > 0) {
+      return options.DOTENV_KEY;
+    }
+    if (process.env.DOTENV_KEY && process.env.DOTENV_KEY.length > 0) {
+      return process.env.DOTENV_KEY;
+    }
+    return "";
+  }
+  function _instructions(result, dotenvKey) {
+    let uri;
+    try {
+      uri = new URL(dotenvKey);
+    } catch (error) {
+      if (error.code === "ERR_INVALID_URL") {
+        const err = new Error("INVALID_DOTENV_KEY: Wrong format. Must be in valid uri format like dotenv://:key_1234@dotenvx.com/vault/.env.vault?environment=development");
+        err.code = "INVALID_DOTENV_KEY";
+        throw err;
+      }
+      throw error;
+    }
+    const key = uri.password;
+    if (!key) {
+      const err = new Error("INVALID_DOTENV_KEY: Missing key part");
+      err.code = "INVALID_DOTENV_KEY";
+      throw err;
+    }
+    const environment = uri.searchParams.get("environment");
+    if (!environment) {
+      const err = new Error("INVALID_DOTENV_KEY: Missing environment part");
+      err.code = "INVALID_DOTENV_KEY";
+      throw err;
+    }
+    const environmentKey = `DOTENV_VAULT_${environment.toUpperCase()}`;
+    const ciphertext = result.parsed[environmentKey];
+    if (!ciphertext) {
+      const err = new Error(`NOT_FOUND_DOTENV_ENVIRONMENT: Cannot locate environment ${environmentKey} in your .env.vault file.`);
+      err.code = "NOT_FOUND_DOTENV_ENVIRONMENT";
+      throw err;
+    }
+    return { ciphertext, key };
+  }
+  function _vaultPath(options) {
+    let possibleVaultPath = null;
+    if (options && options.path && options.path.length > 0) {
+      if (Array.isArray(options.path)) {
+        for (const filepath of options.path) {
+          if (fs.existsSync(filepath)) {
+            possibleVaultPath = filepath.endsWith(".vault") ? filepath : `${filepath}.vault`;
+          }
+        }
+      } else {
+        possibleVaultPath = options.path.endsWith(".vault") ? options.path : `${options.path}.vault`;
+      }
+    } else {
+      possibleVaultPath = path.resolve(process.cwd(), ".env.vault");
+    }
+    if (fs.existsSync(possibleVaultPath)) {
+      return possibleVaultPath;
+    }
+    return null;
+  }
+  function _resolveHome(envPath) {
+    return envPath[0] === "~" ? path.join(os.homedir(), envPath.slice(1)) : envPath;
+  }
+  function _configVault(options) {
+    const debug = parseBoolean(process.env.DOTENV_CONFIG_DEBUG || options && options.debug);
+    const quiet = parseBoolean(process.env.DOTENV_CONFIG_QUIET || options && options.quiet);
+    if (debug || !quiet) {
+      _log("loading env from encrypted .env.vault");
+    }
+    const parsed = DotenvModule._parseVault(options);
+    let processEnv = process.env;
+    if (options && options.processEnv != null) {
+      processEnv = options.processEnv;
+    }
+    DotenvModule.populate(processEnv, parsed, options);
+    return { parsed };
+  }
+  function configDotenv(options) {
+    const dotenvPath = path.resolve(process.cwd(), ".env");
+    let encoding = "utf8";
+    let processEnv = process.env;
+    if (options && options.processEnv != null) {
+      processEnv = options.processEnv;
+    }
+    let debug = parseBoolean(processEnv.DOTENV_CONFIG_DEBUG || options && options.debug);
+    let quiet = parseBoolean(processEnv.DOTENV_CONFIG_QUIET || options && options.quiet);
+    if (options && options.encoding) {
+      encoding = options.encoding;
+    } else {
+      if (debug) {
+        _debug("no encoding is specified (UTF-8 is used by default)");
+      }
+    }
+    let optionPaths = [dotenvPath];
+    if (options && options.path) {
+      if (!Array.isArray(options.path)) {
+        optionPaths = [_resolveHome(options.path)];
+      } else {
+        optionPaths = [];
+        for (const filepath of options.path) {
+          optionPaths.push(_resolveHome(filepath));
+        }
+      }
+    }
+    let lastError;
+    const parsedAll = {};
+    for (const path2 of optionPaths) {
+      try {
+        const parsed = DotenvModule.parse(fs.readFileSync(path2, { encoding }));
+        DotenvModule.populate(parsedAll, parsed, options);
+      } catch (e) {
+        if (debug) {
+          _debug(`failed to load ${path2} ${e.message}`);
+        }
+        lastError = e;
+      }
+    }
+    const populated = DotenvModule.populate(processEnv, parsedAll, options);
+    debug = parseBoolean(processEnv.DOTENV_CONFIG_DEBUG || debug);
+    quiet = parseBoolean(processEnv.DOTENV_CONFIG_QUIET || quiet);
+    if (debug || !quiet) {
+      const keysCount = Object.keys(populated).length;
+      const shortPaths = [];
+      for (const filePath of optionPaths) {
+        try {
+          const relative = path.relative(process.cwd(), filePath);
+          shortPaths.push(relative);
+        } catch (e) {
+          if (debug) {
+            _debug(`failed to load ${filePath} ${e.message}`);
+          }
+          lastError = e;
+        }
+      }
+      _log(`injected env (${keysCount}) from ${shortPaths.join(",")} ${dim(`// tip: ${_getRandomTip()}`)}`);
+    }
+    if (lastError) {
+      return { parsed: parsedAll, error: lastError };
+    } else {
+      return { parsed: parsedAll };
+    }
+  }
+  function config(options) {
+    if (_dotenvKey(options).length === 0) {
+      return DotenvModule.configDotenv(options);
+    }
+    const vaultPath = _vaultPath(options);
+    if (!vaultPath) {
+      _warn(`you set DOTENV_KEY but you are missing a .env.vault file at ${vaultPath}`);
+      return DotenvModule.configDotenv(options);
+    }
+    return DotenvModule._configVault(options);
+  }
+  function decrypt(encrypted, keyStr) {
+    const key = Buffer.from(keyStr.slice(-64), "hex");
+    let ciphertext = Buffer.from(encrypted, "base64");
+    const nonce = ciphertext.subarray(0, 12);
+    const authTag = ciphertext.subarray(-16);
+    ciphertext = ciphertext.subarray(12, -16);
+    try {
+      const aesgcm = crypto.createDecipheriv("aes-256-gcm", key, nonce);
+      aesgcm.setAuthTag(authTag);
+      return `${aesgcm.update(ciphertext)}${aesgcm.final()}`;
+    } catch (error) {
+      const isRange = error instanceof RangeError;
+      const invalidKeyLength = error.message === "Invalid key length";
+      const decryptionFailed = error.message === "Unsupported state or unable to authenticate data";
+      if (isRange || invalidKeyLength) {
+        const err = new Error("INVALID_DOTENV_KEY: It must be 64 characters long (or more)");
+        err.code = "INVALID_DOTENV_KEY";
+        throw err;
+      } else if (decryptionFailed) {
+        const err = new Error("DECRYPTION_FAILED: Please check your DOTENV_KEY");
+        err.code = "DECRYPTION_FAILED";
+        throw err;
+      } else {
+        throw error;
+      }
+    }
+  }
+  function populate(processEnv, parsed, options = {}) {
+    const debug = Boolean(options && options.debug);
+    const override = Boolean(options && options.override);
+    const populated = {};
+    if (typeof parsed !== "object") {
+      const err = new Error("OBJECT_REQUIRED: Please check the processEnv argument being passed to populate");
+      err.code = "OBJECT_REQUIRED";
+      throw err;
+    }
+    for (const key of Object.keys(parsed)) {
+      if (Object.prototype.hasOwnProperty.call(processEnv, key)) {
+        if (override === true) {
+          processEnv[key] = parsed[key];
+          populated[key] = parsed[key];
+        }
+        if (debug) {
+          if (override === true) {
+            _debug(`"${key}" is already defined and WAS overwritten`);
+          } else {
+            _debug(`"${key}" is already defined and was NOT overwritten`);
+          }
+        }
+      } else {
+        processEnv[key] = parsed[key];
+        populated[key] = parsed[key];
+      }
+    }
+    return populated;
+  }
+  var DotenvModule = {
+    configDotenv,
+    _configVault,
+    _parseVault,
+    config,
+    decrypt,
+    parse,
+    populate
+  };
+  module.exports.configDotenv = DotenvModule.configDotenv;
+  module.exports._configVault = DotenvModule._configVault;
+  module.exports._parseVault = DotenvModule._parseVault;
+  module.exports.config = DotenvModule.config;
+  module.exports.decrypt = DotenvModule.decrypt;
+  module.exports.parse = DotenvModule.parse;
+  module.exports.populate = DotenvModule.populate;
+  module.exports = DotenvModule;
+});
+
+// src/cli.ts
+var import_dotenv = __toESM(require_main(), 1);
 // package.json
 var package_default2 = {
   author: "Pensar",
@@ -47,6 +384,10 @@ var package_default2 = {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@openrouter/ai-sdk-provider": "^2.9.1",
     "@opentelemetry/api": "^1.9.1",
+    "@opentelemetry/exporter-trace-otlp-http": "^0.221.0",
+    "@opentelemetry/otlp-exporter-base": "^0.221.0",
+    "@opentelemetry/otlp-transformer": "^0.221.0",
+    "@opentelemetry/resources": "^2.10.0",
     "@opentui/core": "^0.1.107",
     "@opentui/react": "^0.1.107",
     "@pensar/surface": "0.3.0",
@@ -70,6 +411,8 @@ var package_default2 = {
   description: "AI-powered penetration testing CLI tool with terminal UI",
   devDependencies: {
     "@biomejs/biome": "2.4.14",
+    "@opentelemetry/context-async-hooks": "^2.10.0",
+    "@opentelemetry/sdk-trace-base": "^2.10.0",
     "@types/bun": "^1.3.14",
     "@types/mailparser": "^3.4.6",
     "@types/mime-types": "^3.0.1",
@@ -116,7 +459,7 @@ var package_default2 = {
     url: "https://github.com/pensarai/apex.git"
   },
   scripts: {
-    build: "bun build src/cli.ts --outdir build --target node --format esm --splitting --external @opentui/core --external @opentui/react --external @opentui/react/* --external react --external react/jsx-runtime --external react/jsx-dev-runtime --external react-reconciler --external weave --external electron --external chromium-bidi --external camoufox-js",
+    build: "rm -rf build && bun build src/cli.ts --outdir build --target node --format esm --splitting --external @opentui/core --external @opentui/react --external @opentui/react/* --external react --external react/jsx-runtime --external react/jsx-dev-runtime --external react-reconciler --external weave --external electron --external chromium-bidi --external camoufox-js",
     "build:binaries": "bun run generate:ascii && mkdir -p dist && bun run build:binary:macos-arm64 && bun run build:binary:macos-x64 && bun run build:binary:linux-x64 && bun run build:binary:linux-arm64",
     "build:binary": "bun run generate:ascii && bun build src/cli.ts --compile --external electron --external chromium-bidi --external camoufox-js --outfile pensar",
     "build:binary:linux-arm64": "bun build src/cli.ts --compile --external electron --external chromium-bidi --external camoufox-js --target=bun-linux-arm64 --outfile dist/pensar-linux-arm64",
@@ -144,11 +487,12 @@ var package_default2 = {
     tsc: "tsc --noEmit"
   },
   type: "module",
-  version: "2.3.0"
+  version: "2.4.0-canary.01e519de"
 };
 
 // src/core/ai/index.ts
 init_ai();
+init_model_history();
 init_models();
 init_utils();
 
@@ -299,13 +643,18 @@ class AgentEventBus {
         });
         break;
       case "reasoning-start":
-        this.emit("reasoning-start", { subagentId });
+        this.emit("reasoning-start", { subagentId, sessionId, messageId });
         break;
       case "reasoning-delta":
-        this.emit("reasoning-delta", { text: chunk.text, subagentId });
+        this.emit("reasoning-delta", {
+          text: chunk.text,
+          subagentId,
+          sessionId,
+          messageId
+        });
         break;
       case "reasoning-end":
-        this.emit("reasoning-end", { subagentId });
+        this.emit("reasoning-end", { subagentId, sessionId, messageId });
         break;
       case "tool-input-start":
         this.emit("tool-call-start", {
@@ -503,6 +852,103 @@ import os from "node:os";
 import path from "node:path";
 var ERROR_LOG_PATH = path.join(os.homedir(), ".pensar", "error.log");
 
+// src/core/observability/runtime.ts
+init_package();
+var import_api = __toESM(require_src(), 1);
+var import_context_async_hooks = __toESM(require_src2(), 1);
+var import_exporter_trace_otlp_http = __toESM(require_src6(), 1);
+var import_otlp_exporter_base = __toESM(require_src3(), 1);
+var import_node_http = __toESM(require_index_node_http(), 1);
+var import_otlp_transformer = __toESM(require_src5(), 1);
+var import_resources = __toESM(require_src4(), 1);
+var import_sdk_trace_base = __toESM(require_index_shim(), 1);
+import { randomUUID } from "node:crypto";
+var NOOP_RUNTIME = {
+  async forceFlush() {},
+  async shutdown() {}
+};
+function isOtelSdkDisabled(env) {
+  return env.OTEL_SDK_DISABLED === "true";
+}
+function resolveTracesEndpoint(env) {
+  const specific = env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT?.trim();
+  if (specific)
+    return specific;
+  const generic = env.OTEL_EXPORTER_OTLP_ENDPOINT?.trim();
+  if (!generic)
+    return null;
+  return `${generic.endsWith("/") ? generic : `${generic}/`}v1/traces`;
+}
+function resolveTracesProtocol(env) {
+  const raw = (env.OTEL_EXPORTER_OTLP_TRACES_PROTOCOL ?? env.OTEL_EXPORTER_OTLP_PROTOCOL ?? "").trim();
+  return raw === "http/protobuf" ? "http/protobuf" : "http/json";
+}
+function parseResourceAttributes(env) {
+  const raw = env.OTEL_RESOURCE_ATTRIBUTES;
+  if (!raw)
+    return {};
+  const attrs = {};
+  for (const pair of raw.split(",")) {
+    const eq = pair.indexOf("=");
+    if (eq <= 0)
+      continue;
+    const key = pair.slice(0, eq).trim();
+    const value = pair.slice(eq + 1).trim();
+    if (key && value)
+      attrs[key] = value;
+  }
+  return attrs;
+}
+function buildResource(env) {
+  const resourceAttributes = parseResourceAttributes(env);
+  return import_resources.resourceFromAttributes({
+    "service.version": version,
+    "service.instance.id": randomUUID(),
+    ...resourceAttributes,
+    "service.name": env.OTEL_SERVICE_NAME?.trim() || resourceAttributes["service.name"] || "apex"
+  });
+}
+function createTraceExporter(protocol) {
+  if (protocol === "http/json") {
+    return new import_exporter_trace_otlp_http.OTLPTraceExporter;
+  }
+  return new import_otlp_exporter_base.OTLPExporterBase(import_node_http.createOtlpHttpExportDelegate(import_node_http.convertLegacyHttpOptions({}, "TRACES", "v1/traces", {
+    "Content-Type": "application/x-protobuf"
+  }), import_otlp_transformer.ProtobufTraceSerializer, "otlp_http_span_exporter", import_otlp_transformer.TraceExporterMetricsHelper, undefined));
+}
+var activeRuntime = null;
+function startObservabilityRuntime(env = process.env) {
+  if (activeRuntime)
+    return activeRuntime;
+  if (isOtelSdkDisabled(env))
+    return NOOP_RUNTIME;
+  if (!resolveTracesEndpoint(env))
+    return NOOP_RUNTIME;
+  const exporter = createTraceExporter(resolveTracesProtocol(env));
+  const provider = new import_sdk_trace_base.BasicTracerProvider({
+    resource: buildResource(env),
+    spanProcessors: [new import_sdk_trace_base.BatchSpanProcessor(exporter)]
+  });
+  const contextManager = new import_context_async_hooks.AsyncLocalStorageContextManager;
+  contextManager.enable();
+  import_api.trace.setGlobalTracerProvider(provider);
+  import_api.context.setGlobalContextManager(contextManager);
+  const runtime = {
+    async forceFlush() {
+      await provider.forceFlush();
+    },
+    async shutdown() {
+      activeRuntime = null;
+      await provider.shutdown();
+      contextManager.disable();
+      import_api.trace.disable();
+      import_api.context.disable();
+    }
+  };
+  activeRuntime = runtime;
+  return runtime;
+}
+
 // src/tui/utils/command-flags.ts
 import { readFileSync } from "node:fs";
 import { isAbsolute, resolve } from "node:path";
@@ -532,7 +978,8 @@ function resolveThreatModelPrompt(value) {
 
 // src/cli.ts
 var args = process.argv.slice(2);
-var version = package_default2.version;
+var version2 = package_default2.version;
+import_dotenv.config();
 var OBFUSCATE_FLAGS = new Set(["--obfuscate", "--redact", "-O"]);
 var obfuscateRequested = args.some((a) => OBFUSCATE_FLAGS.has(a));
 if (obfuscateRequested) {
@@ -587,7 +1034,7 @@ function attachCliAgentStreamListeners(bus) {
 async function createInstrumentedBus(session) {
   const bus = new AgentEventBus;
   attachCliAgentStreamListeners(bus);
-  const { attachWandbToEventBus } = await import("./upload-krd8bnex.js");
+  const { attachWandbToEventBus } = await import("./upload-vwnzgrh6.js");
   const wandbCleanup = await attachWandbToEventBus(session, bus).catch((e) => {
     console.warn("[wandb] Tracing disabled:", e.message);
     return null;
@@ -601,10 +1048,10 @@ async function resolveCliHeaders() {
   if (headerArgs.length === 0 && !headersFromArg && !noGlobal) {
     return;
   }
-  const { parseHeaderLine: parseHeaderLine2, parseHeadersFromFile, formatParseError: formatParseError2 } = await import("./parse-7djk9jyf.js");
+  const { parseHeaderLine: parseHeaderLine2, parseHeadersFromFile, formatParseError: formatParseError2 } = await import("./parse-rtccymzn.js");
   const merged = {};
   if (!noGlobal) {
-    const { config: appConfig } = await import("./index-32hn8rrw.js");
+    const { config: appConfig } = await import("./index-cf1rrakg.js");
     const cfg = await appConfig.get();
     if (cfg.defaultHeaders) {
       Object.assign(merged, cfg.defaultHeaders);
@@ -638,8 +1085,8 @@ async function resolveCliModel() {
   const explicit = getArg("--model");
   if (explicit)
     return explicit;
-  const { config: appConfig } = await import("./index-32hn8rrw.js");
-  const { getDefaultModelForConfig } = await import("./utils-skmqhyfg.js");
+  const { config: appConfig } = await import("./index-cf1rrakg.js");
+  const { getDefaultModelForConfig } = await import("./utils-132nk1dd.js");
   const pensarConfig = await appConfig.get();
   const defaultModel = getDefaultModelForConfig(pensarConfig);
   if (!defaultModel) {
@@ -648,6 +1095,7 @@ async function resolveCliModel() {
 ` + `  ANTHROPIC_API_KEY  \u2014 Anthropic direct
 ` + `  OPENAI_API_KEY     \u2014 OpenAI
 ` + `  OPENROUTER_API_KEY \u2014 OpenRouter
+` + `  CONCENTRATE_API_KEY \u2014 Concentrate
 ` + `
 Or run 'pensar login' to connect to Pensar Console.`);
     process.exit(1);
@@ -725,11 +1173,9 @@ Global options:
 `);
 }
 async function runPentest() {
-  const { config } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
-  config();
-  const { runPentestAgent } = await import("./blackboxPentest-tgc2t3y6.js");
-  const { sessions: sessions2 } = await import("./index-e8c8zcrf.js");
-  const { config: appConfig } = await import("./index-32hn8rrw.js");
+  const { runPentestAgent } = await import("./blackboxPentest-3nass7dk.js");
+  const { sessions: sessions2 } = await import("./index-t9q6d8ff.js");
+  const { config: appConfig } = await import("./index-cf1rrakg.js");
   const target = getArgRequired("--target");
   const cwd = getArg("--cwd");
   const mode = getArg("--mode");
@@ -800,14 +1246,11 @@ Report:    ${reportPath}` : ""}`);
   } finally {
     await wandbCleanup();
   }
-  process.exit(0);
 }
 async function runTargetedPentest() {
-  const { config } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
-  config();
-  const { runTargetedPentestAgent } = await import("./targetedPentest-me4jnr3z.js");
-  const { sessions: sessions2 } = await import("./index-e8c8zcrf.js");
-  const { config: appConfig } = await import("./index-32hn8rrw.js");
+  const { runTargetedPentestAgent } = await import("./targetedPentest-n33mm8bp.js");
+  const { sessions: sessions2 } = await import("./index-t9q6d8ff.js");
+  const { config: appConfig } = await import("./index-cf1rrakg.js");
   const target = getArgRequired("--target");
   const objectives = getAllArgs("--objective");
   const pensarConfig = await appConfig.get();
@@ -854,13 +1297,10 @@ POCs:      ${pocsPath}`);
   } finally {
     await wandbCleanup();
   }
-  process.exit(0);
 }
 async function runThreatModel() {
-  const { config } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
-  config();
-  const { runThreatModelWorkflow } = await import("./threatModel-k4f3zgqd.js");
-  const { config: appConfig } = await import("./index-32hn8rrw.js");
+  const { runThreatModelWorkflow } = await import("./threatModel-wmp658sv.js");
+  const { config: appConfig } = await import("./index-cf1rrakg.js");
   const path2 = await import("path");
   const pensarConfig = await appConfig.get();
   const model = await resolveCliModel();
@@ -894,16 +1334,14 @@ ${sep}
 Threat model written to: ${resolvedPath}`);
 }
 async function runOperator() {
-  const { config } = await import("./main-3d7dfdvs.js").then((m)=>__toESM(m.default,1));
-  config();
-  const { runOffensiveSecurityAgent } = await import("./offesecAgent-8ky7gccp.js");
-  const { sessions: sessions2, normalizeMessages, getResumeMessages } = await import("./index-e8c8zcrf.js");
-  const { ALL_TOOL_NAMES, SKILL_TOOL_NAMES } = await import("./index-468j74f3.js");
-  const { config: appConfig } = await import("./index-32hn8rrw.js");
+  const { runOffensiveSecurityAgent } = await import("./offesecAgent-cvjy788j.js");
+  const { sessions: sessions2, normalizeMessages, getResumeMessages } = await import("./index-t9q6d8ff.js");
+  const { ALL_TOOL_NAMES, SKILL_TOOL_NAMES } = await import("./index-50aysats.js");
+  const { config: appConfig } = await import("./index-cf1rrakg.js");
   const { createInterface } = await import("readline");
   const { readFileSync: readFileSync2, existsSync } = await import("fs");
   const path2 = await import("path");
-  const { stepCountIs } = await import("./index-gq9h8j5j.js");
+  const { stepCountIs } = await import("./index-5wh7gq37.js");
   const promptRaw = getArg("-p") ?? getArg("--prompt");
   if (!promptRaw) {
     console.error("Error: -p <prompt> is required");
@@ -999,60 +1437,70 @@ Checking for updates...`);
 ${result.message}`);
   process.exit(result.success ? 0 : 1);
 }
-if (hasFlag("-p") || command === "--prompt") {
-  await runOperator();
-} else if (command === "version" || command === "--version" || command === "-v") {
-  console.log(`v${version}`);
-} else if (command === "help" || command === "--help" || command === "-h") {
-  showHelp();
-} else if (command === "upgrade" || command === "update") {
-  await runUpgrade2();
-} else if (command === "pentest") {
-  await runPentest();
-} else if (command === "targeted-pentest") {
-  await runTargetedPentest();
-} else if (command === "login" || command === "auth") {
-  process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./auth-c1z670rx.js");
-} else if (command === "uninstall") {
-  process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./uninstall-jt1bca2p.js");
-} else if (command === "apps") {
-  process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./apps-43pqbz7r.js");
-} else if (command === "pentests") {
-  process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./pentests-62d6zw6p.js");
-} else if (command === "targets") {
-  process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./targets-e5k1mrky.js");
-} else if (command === "issues") {
-  process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./issues-kh4wg8c5.js");
-} else if (command === "fixes") {
-  process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./fixes-86yebsj0.js");
-} else if (command === "logs") {
-  process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./logs-bj28xmbf.js");
-} else if (command === "config") {
-  process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
-  await import("./config-jzqjz606.js");
-} else if (command === "threat-model") {
-  await runThreatModel();
-} else if (command === "doctor") {
-  const { runDoctor } = await import("./doctor-q3qws68e.js");
-  await runDoctor();
-} else if (args.length === 0) {
-  if (process.env.PENSAR_NO_TUI === "1") {
-    console.error("TUI mode requires Bun. Install Bun (https://bun.sh) or use a standalone binary release for interactive mode.");
-    console.error("All other commands work with Node \u2014 run 'pensar --help'.");
+var observabilityRuntime = startObservabilityRuntime();
+try {
+  if (hasFlag("-p") || command === "--prompt") {
+    await runOperator();
+  } else if (command === "version" || command === "--version" || command === "-v") {
+    console.log(`v${version2}`);
+  } else if (command === "help" || command === "--help" || command === "-h") {
+    showHelp();
+  } else if (command === "upgrade" || command === "update") {
+    await runUpgrade2();
+  } else if (command === "pentest") {
+    await runPentest();
+  } else if (command === "targeted-pentest") {
+    await runTargetedPentest();
+  } else if (command === "login" || command === "auth") {
+    process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
+    await import("./auth-3k12kd2j.js");
+  } else if (command === "uninstall") {
+    process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
+    await import("./uninstall-jvk3gtnx.js");
+  } else if (command === "apps") {
+    process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
+    await import("./apps-6595cxzf.js");
+  } else if (command === "pentests") {
+    process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
+    await import("./pentests-cs7km4sy.js");
+  } else if (command === "targets") {
+    process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
+    await import("./targets-8nq8d33w.js");
+  } else if (command === "issues") {
+    process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
+    await import("./issues-015zf705.js");
+  } else if (command === "fixes") {
+    process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
+    await import("./fixes-3rvsps8m.js");
+  } else if (command === "logs") {
+    process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
+    await import("./logs-ra7c7my0.js");
+  } else if (command === "config") {
+    process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
+    await import("./config-52zkpmx4.js");
+  } else if (command === "threat-model") {
+    await runThreatModel();
+  } else if (command === "doctor") {
+    const { runDoctor } = await import("./doctor-5eyfxzvy.js");
+    await runDoctor();
+  } else if (args.length === 0) {
+    if (process.env.PENSAR_NO_TUI === "1") {
+      console.error("TUI mode requires Bun. Install Bun (https://bun.sh) or use a standalone binary release for interactive mode.");
+      console.error("All other commands work with Node \u2014 run 'pensar --help'.");
+      process.exit(1);
+    }
+    await import("./index-zhscmpd1.js");
+  } else {
+    console.error(`Error: Unknown command '${command}'`);
+    console.error();
+    console.error("Run 'pensar --help' for usage information");
     process.exit(1);
   }
-  await import("./index-97vx1a24.js");
-} else {
-  console.error(`Error: Unknown command '${command}'`);
-  console.error();
-  console.error("Run 'pensar --help' for usage information");
-  process.exit(1);
+} finally {
+  if (args.length !== 0) {
+    await observabilityRuntime.shutdown().catch(() => {});
+  }
+}
+if (command === "pentest" || command === "targeted-pentest") {
+  process.exit(0);
 }