@pensar/apex 2.4.0-canary.fbb66e97 → 2.5.0-canary.22f2eb52

package/build/agent-7qtpem5z.js

@@ -0,0 +1,12 @@
+import {
+  runAuthenticationAgent2
+} from "./cli-3v9zs5wm.js";
+import"./cli-qba2x69h.js";
+import"./cli-qkb3v2nw.js";
+import"./cli-n4h7ygp5.js";
+import"./cli-j1916nvj.js";
+import"./cli-qktcyj48.js";
+import"./cli-wfb4gde1.js";
+export {
+  runAuthenticationAgent2 as runAuthenticationAgent
+};

package/build/agent-9khcyh5t.js

@@ -0,0 +1,14 @@
+import {
+  TargetedPentestAgent2,
+  buildPentestSystemPrompt2
+} from "./cli-4z46kyrk.js";
+import"./cli-qba2x69h.js";
+import"./cli-qkb3v2nw.js";
+import"./cli-n4h7ygp5.js";
+import"./cli-j1916nvj.js";
+import"./cli-qktcyj48.js";
+import"./cli-wfb4gde1.js";
+export {
+  TargetedPentestAgent2 as TargetedPentestAgent,
+  buildPentestSystemPrompt2 as buildPentestSystemPrompt
+};

package/build/agent-bsyhck0a.js

@@ -0,0 +1,12 @@
+import {
+  CodeAgent2
+} from "./cli-gq5sk2j3.js";
+import"./cli-qba2x69h.js";
+import"./cli-qkb3v2nw.js";
+import"./cli-n4h7ygp5.js";
+import"./cli-j1916nvj.js";
+import"./cli-qktcyj48.js";
+import"./cli-wfb4gde1.js";
+export {
+  CodeAgent2 as CodeAgent
+};

package/build/{agent-4ts7armt.js → agent-ywewzc2h.js}

@@ -1,24 +1,25 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-9w6kmefp.js";
+} from "./cli-qkb3v2nw.js";
+import"./cli-wfb4gde1.js";
 import {
-  detectOSAndEnhancePrompt
-} from "./cli-3ezbs9mw.js";
-import"./cli-c8131c4q.js";
+  init_zod,
+  stepCountIs2,
+  init_dist
+} from "./cli-j1916nvj.js";
 import {
-  init_dist,
-  stepCountIs
-} from "./cli-7n5666p8.js";
-import"./cli-vphjaj1e.js";
+  detectOSAndEnhancePrompt
+} from "./cli-n4h7ygp5.js";
+import"./cli-qba2x69h.js";
 import {
-  exports_external,
-  init_zod
-} from "./cli-swpbx60z.js";
-import"./cli-j54qa6tm.js";
-import"./cli-mkgfykpq.js";
-import"./cli-x96bafe8.js";
-import"./cli-s5ky796g.js";
-import"./cli-bc05qbss.js";
+  string,
+  number,
+  boolean,
+  array,
+  object,
+  _enum
+} from "./cli-tjm77pmx.js";
+import"./cli-qktcyj48.js";
 
 // src/core/agents/specialized/findingJudge/agent.ts
 init_dist();
@@ -168,17 +169,17 @@ var FINDING_TYPES = [
   "informational",
   "expected-behavior"
 ];
-var FindingJudgeOutputSchema = exports_external.object({
-  valid: exports_external.boolean().describe("Whether the POC demonstrates a currently exploitable vulnerability that should be persisted"),
-  findingType: exports_external.enum(FINDING_TYPES).describe("Classification: 'vulnerability' for genuine security issues, 'informational' for low-risk observations worth noting, 'expected-behavior' for findings that describe intentional design decisions"),
-  confidence: exports_external.number().min(0).max(1).describe("Confidence in the judgment, a decimal between 0.0 (no confidence) and 1.0 (certain)"),
-  reasoning: exports_external.string().describe("Brief explanation of the key tool observations and analysis that led to this judgment"),
-  concerns: exports_external.array(exports_external.string()).describe("Specific concerns identified. Empty array only when the finding is a valid high-confidence vulnerability."),
-  verificationSteps: exports_external.array(exports_external.string()).describe("Concrete verification actions performed before deciding."),
-  toolEvidence: exports_external.array(exports_external.string()).describe("Specific observations from tool output or provided artifacts."),
-  reproducedPoc: exports_external.boolean().describe("Whether the judge reran or independently reproduced the POC."),
-  webResearchUsed: exports_external.boolean().describe("Whether web_search/get_page materially informed the judgment."),
-  limitations: exports_external.array(exports_external.string()).describe("Remaining verification gaps or environmental limitations.")
+var FindingJudgeOutputSchema = object({
+  valid: boolean().describe("Whether the POC demonstrates a currently exploitable vulnerability that should be persisted"),
+  findingType: _enum(FINDING_TYPES).describe("Classification: 'vulnerability' for genuine security issues, 'informational' for low-risk observations worth noting, 'expected-behavior' for findings that describe intentional design decisions"),
+  confidence: number().min(0).max(1).describe("Confidence in the judgment, a decimal between 0.0 (no confidence) and 1.0 (certain)"),
+  reasoning: string().describe("Brief explanation of the key tool observations and analysis that led to this judgment"),
+  concerns: array(string()).describe("Specific concerns identified. Empty array only when the finding is a valid high-confidence vulnerability."),
+  verificationSteps: array(string()).describe("Concrete verification actions performed before deciding."),
+  toolEvidence: array(string()).describe("Specific observations from tool output or provided artifacts."),
+  reproducedPoc: boolean().describe("Whether the judge reran or independently reproduced the POC."),
+  webResearchUsed: boolean().describe("Whether web_search/get_page materially informed the judgment."),
+  limitations: array(string()).describe("Remaining verification gaps or environmental limitations.")
 });
 
 // src/core/agents/specialized/findingJudge/agent.ts
@@ -195,25 +196,24 @@ var FINDING_JUDGE_ACTIVE_TOOLS = [
 
 class FindingJudgeAgent extends OffensiveSecurityAgent {
   constructor(opts) {
-    const target = opts.finding.target ?? opts.target ?? opts.session.targets[0];
+    const {
+      finding,
+      target: targetOpt,
+      subagentId,
+      subagentName,
+      ...base
+    } = opts;
+    const target = finding.target ?? targetOpt ?? base.session.targets[0];
     super({
+      ...base,
       system: detectOSAndEnhancePrompt(FINDING_JUDGE_SYSTEM_PROMPT),
-      prompt: buildFindingJudgePrompt({ ...opts.finding, target }),
-      model: opts.model,
-      session: opts.session,
-      target,
-      authConfig: opts.authConfig,
-      abortSignal: opts.abortSignal,
-      eventBus: opts.eventBus,
-      sandbox: opts.sandbox,
-      enableThinking: opts.enableThinking,
-      thinkingEffort: opts.thinkingEffort,
-      openAIReasoningEffort: opts.openAIReasoningEffort,
-      subagentId: opts.subagentId ?? "finding-judge",
-      subagentName: opts.subagentName ?? "Finding Judge",
       activeTools: [...FINDING_JUDGE_ACTIVE_TOOLS],
       responseSchema: FindingJudgeOutputSchema,
-      stopWhen: stepCountIs(60)
+      stopWhen: stepCountIs2(60),
+      target,
+      prompt: buildFindingJudgePrompt({ ...finding, target }),
+      subagentId: subagentId ?? "finding-judge",
+      subagentName: subagentName ?? "Finding Judge"
     });
   }
 }

package/build/{apps-yfm59wch.js → apps-11akynyv.js}

@@ -1,42 +1,37 @@
 #!/usr/bin/env bun
-import"./cli-sms0a70d.js";
-import"./cli-n8c6cdwe.js";
-import"./cli-wdnf5jvs.js";
-import"./cli-tdm8vj3v.js";
-import"./cli-n2dv2jxn.js";
-import"./cli-s7bkeg8d.js";
-import"./cli-a4vxda8s.js";
-import"./cli-q2pshbky.js";
-import"./cli-9fsre5pt.js";
-import"./cli-ba9a23ap.js";
+import"./cli-wfb4gde1.js";
+import"./cli-j1916nvj.js";
 import {
   ENDPOINT_TRANSPORTS,
+  listApps,
+  getApp,
   createApp,
-  createDomain,
-  createEndpoint,
+  updateApp,
   deleteApp,
-  deleteEndpoint,
-  getApp,
-  getEndpoint,
-  listApps,
-  listDomains,
   listEndpoints,
+  getEndpoint,
+  createEndpoint,
+  updateEndpoint,
+  deleteEndpoint,
   searchApps,
   searchEndpoints,
-  updateApp,
-  updateEndpoint
-} from "./cli-9w6kmefp.js";
-import"./cli-3ezbs9mw.js";
-import"./cli-fw5r7pfj.js";
-import"./cli-c8131c4q.js";
-import"./cli-7n5666p8.js";
-import"./cli-vphjaj1e.js";
-import"./cli-swpbx60z.js";
-import"./cli-j54qa6tm.js";
-import"./cli-mkgfykpq.js";
-import"./cli-x96bafe8.js";
-import"./cli-s5ky796g.js";
-import"./cli-bc05qbss.js";
+  listDomains,
+  createDomain
+} from "./cli-qkb3v2nw.js";
+import"./cli-n4h7ygp5.js";
+import"./cli-8kkaeb70.js";
+import"./cli-gq5sk2j3.js";
+import"./cli-gamfs2yq.js";
+import"./cli-jw1xftqm.js";
+import"./cli-3v9zs5wm.js";
+import"./cli-4z46kyrk.js";
+import"./cli-q45hcq3f.js";
+import"./cli-vkxx4jzv.js";
+import {
+  markCommandFailed
+} from "./cli-z82n3qk1.js";
+import"./cli-qba2x69h.js";
+import"./cli-qktcyj48.js";
 
 // src/cli/apps.ts
 var APPLICATION_TYPES = [
@@ -329,7 +324,7 @@ async function main() {
       if (!appId) {
         console.error("Error: app ID is required");
         console.error("Usage: pensar apps get <appId>");
-        process.exit(1);
+        return markCommandFailed();
       }
       const app = await getApp(appId);
       console.log(JSON.stringify(app, null, 2));
@@ -342,7 +337,7 @@ async function main() {
       if (!appId) {
         console.error("Error: app ID is required");
         console.error("Usage: pensar apps update <appId> [options]");
-        process.exit(1);
+        return markCommandFailed();
       }
       const opts = parseAppUpdateOptions(args);
       const result = await updateApp(appId, opts);
@@ -352,7 +347,7 @@ async function main() {
       if (!appId) {
         console.error("Error: app ID is required");
         console.error("Usage: pensar apps delete <appId>");
-        process.exit(1);
+        return markCommandFailed();
       }
       const result = await deleteApp(appId);
       console.log(JSON.stringify(result, null, 2));
@@ -364,7 +359,7 @@ async function main() {
       if (!url) {
         console.error("Error: domain is required");
         console.error("Usage: pensar apps domain-create <domain>");
-        process.exit(1);
+        return markCommandFailed();
       }
       const result = await createDomain({ url });
       console.log(JSON.stringify(result, null, 2));
@@ -373,7 +368,7 @@ async function main() {
       if (!appId) {
         console.error("Error: app ID is required");
         console.error("Usage: pensar apps endpoints <appId> [filters]");
-        process.exit(1);
+        return markCommandFailed();
       }
       const type = parseEndpointType(getFlag("--type", args));
       const minRiskScore = parseNumber("--min-risk", getFlag("--min-risk", args));
@@ -392,7 +387,7 @@ async function main() {
       if (!endpointId) {
         console.error("Error: endpoint ID is required");
         console.error("Usage: pensar apps endpoint <endpointId>");
-        process.exit(1);
+        return markCommandFailed();
       }
       const result = await getEndpoint(endpointId);
       console.log(JSON.stringify(result, null, 2));
@@ -401,7 +396,7 @@ async function main() {
       if (!appId) {
         console.error("Error: app ID is required");
         console.error("Usage: pensar apps endpoint-create <appId> --endpoint E --description D");
-        process.exit(1);
+        return markCommandFailed();
       }
       const opts = parseEndpointCreateOptions(args);
       const result = await createEndpoint(appId, opts);
@@ -411,7 +406,7 @@ async function main() {
       if (!endpointId) {
         console.error("Error: endpoint ID is required");
         console.error("Usage: pensar apps endpoint-update <endpointId> [options]");
-        process.exit(1);
+        return markCommandFailed();
       }
       const opts = parseEndpointUpdateOptions(args);
       const result = await updateEndpoint(endpointId, opts);
@@ -421,7 +416,7 @@ async function main() {
       if (!endpointId) {
         console.error("Error: endpoint ID is required");
         console.error("Usage: pensar apps endpoint-delete <endpointId>");
-        process.exit(1);
+        return markCommandFailed();
       }
       const result = await deleteEndpoint(endpointId);
       console.log(JSON.stringify(result, null, 2));
@@ -430,7 +425,7 @@ async function main() {
       if (!query || query.startsWith("--")) {
         console.error("Error: search query is required");
         console.error("Usage: pensar apps search <query> [options]");
-        process.exit(1);
+        return markCommandFailed();
       }
       const type = parseAppType(getFlag("--type", args));
       const limit = parseInteger("--limit", getFlag("--limit", args));
@@ -446,7 +441,7 @@ async function main() {
       if (!query || query.startsWith("--")) {
         console.error("Error: search query is required");
         console.error("Usage: pensar apps search-endpoints <query> [options]");
-        process.exit(1);
+        return markCommandFailed();
       }
       const applicationId = getFlag("--app", args);
       const type = parseEndpointType(getFlag("--type", args));
@@ -474,12 +469,12 @@ async function main() {
     } else {
       console.error(`Error: Unknown subcommand "${sub}"`);
       showHelp();
-      process.exit(1);
+      return markCommandFailed();
     }
   } catch (err) {
     console.error(`
 Error: ${err instanceof Error ? err.message : String(err)}`);
-    process.exit(1);
+    return markCommandFailed();
   }
 }
-main();
+await main();

package/build/{auth-1dct9tqf.js → auth-dd6r9mk4.js}

@@ -1,46 +1,42 @@
 #!/usr/bin/env bun
-import"./cli-sms0a70d.js";
-import"./cli-n8c6cdwe.js";
-import"./cli-wdnf5jvs.js";
-import"./cli-tdm8vj3v.js";
-import"./cli-n2dv2jxn.js";
-import"./cli-s7bkeg8d.js";
-import"./cli-a4vxda8s.js";
-import"./cli-q2pshbky.js";
-import"./cli-9fsre5pt.js";
-import"./cli-ba9a23ap.js";
-import"./cli-9w6kmefp.js";
-import"./cli-3ezbs9mw.js";
-import"./cli-fw5r7pfj.js";
-import"./cli-c8131c4q.js";
-import"./cli-7n5666p8.js";
 import {
-  createWorkspaceSelection,
-  disconnect,
-  ensureValidToken,
-  fetchWorkspaces,
+  config2,
+  init_config
+} from "./cli-wfb4gde1.js";
+import {
   getPensarApiUrl,
   getPensarConsoleUrl,
-  init_auth,
-  isConnected,
-  pollForWorkspaceCreation,
-  pollLegacyToken,
-  pollWorkOSToken,
-  pollWorkspaceSelection,
-  selectWorkspace,
-  startDeviceFlow
-} from "./cli-vphjaj1e.js";
-import"./cli-swpbx60z.js";
-import"./cli-j54qa6tm.js";
+  isConnected2,
+  disconnect2,
+  startDeviceFlow2,
+  pollWorkOSToken2,
+  pollLegacyToken2,
+  ensureValidToken2,
+  fetchWorkspaces2,
+  pollForWorkspaceCreation2,
+  selectWorkspace2,
+  createWorkspaceSelection2,
+  pollWorkspaceSelection2,
+  init_auth
+} from "./cli-j1916nvj.js";
+import"./cli-qkb3v2nw.js";
+import"./cli-n4h7ygp5.js";
+import"./cli-8kkaeb70.js";
+import"./cli-gq5sk2j3.js";
+import"./cli-gamfs2yq.js";
+import"./cli-jw1xftqm.js";
+import"./cli-3v9zs5wm.js";
+import"./cli-4z46kyrk.js";
+import"./cli-q45hcq3f.js";
+import"./cli-vkxx4jzv.js";
 import {
-  config,
-  init_config
-} from "./cli-mkgfykpq.js";
-import"./cli-x96bafe8.js";
-import"./cli-s5ky796g.js";
+  markCommandFailed
+} from "./cli-z82n3qk1.js";
+import"./cli-qba2x69h.js";
+import"./cli-qktcyj48.js";
 import {
   __require
-} from "./cli-bc05qbss.js";
+} from "./cli-h6y3bt60.js";
 
 // src/cli/auth.ts
 import * as readline from "node:readline";
@@ -74,7 +70,7 @@ function prompt(question) {
   });
 }
 async function selectWorkspaceInBrowser(apiUrl, accessToken) {
-  const selection = await createWorkspaceSelection(apiUrl, accessToken);
+  const selection = await createWorkspaceSelection2(apiUrl, accessToken);
   openUrl(selection.selectionUrl);
   console.log(`
 You have multiple workspaces. Choose one in your browser to continue.
@@ -82,12 +78,12 @@ If the browser didn't open, visit:
   ${selection.selectionUrl}
 
 Waiting for workspace selection...`);
-  return pollWorkspaceSelection(apiUrl, accessToken, selection.selectionId);
+  return pollWorkspaceSelection2(apiUrl, accessToken, selection.selectionId);
 }
 async function login() {
-  const appConfig = await config.get();
-  const hasStoredCredentials = isConnected(appConfig);
-  const validToken = hasStoredCredentials ? await ensureValidToken({
+  const appConfig = await config2.get();
+  const hasStoredCredentials = isConnected2(appConfig);
+  const validToken = hasStoredCredentials ? await ensureValidToken2({
     accessToken: appConfig.accessToken,
     refreshToken: appConfig.refreshToken,
     pensarAPIKey: appConfig.pensarAPIKey
@@ -110,7 +106,7 @@ Pensar Console — Managed Inference
 Connect for usage-based AI inference. No API keys needed.
 `);
   const apiUrl = getPensarApiUrl();
-  const flowInfo = await startDeviceFlow(apiUrl);
+  const flowInfo = await startDeviceFlow2(apiUrl);
   if (flowInfo.mode === "workos") {
     const { clientId, deviceInfo } = flowInfo;
     openUrl(deviceInfo.verification_uri_complete);
@@ -121,13 +117,13 @@ If not, open this URL:
 Your code: ${deviceInfo.user_code}
 
 Waiting for browser authorization...`);
-    const tokens = await pollWorkOSToken({
+    const tokens = await pollWorkOSToken2({
       clientId,
       deviceCode: deviceInfo.device_code,
       interval: deviceInfo.interval,
       expiresIn: deviceInfo.expires_in
     });
-    await config.update({
+    await config2.update({
       accessToken: tokens.accessToken,
       refreshToken: tokens.refreshToken
     });
@@ -144,7 +140,7 @@ If not, open this URL:
 Your code: ${deviceInfo.userCode}
 
 Waiting for browser authorization...`);
-    const data = await pollLegacyToken({
+    const data = await pollLegacyToken2({
       apiUrl,
       deviceCode: deviceInfo.deviceCode,
       interval: deviceInfo.interval,
@@ -155,12 +151,12 @@ Waiting for browser authorization...`);
     if (!apiKey) {
       throw new Error("Pensar Console did not return an API key");
     }
-    await config.update({
+    await config2.update({
       pensarAPIKey: apiKey,
       gatewaySigningKey: data.signingKey ?? null
     });
     if (data.workspace) {
-      await config.update({
+      await config2.update({
         workspaceId: data.workspace.id,
         workspaceSlug: data.workspace.slug
       });
@@ -176,7 +172,7 @@ Waiting for browser authorization...`);
   }
 }
 async function handleWorkspaces(apiUrl, accessToken) {
-  const wsResult = await fetchWorkspaces(apiUrl, accessToken);
+  const wsResult = await fetchWorkspaces2(apiUrl, accessToken);
   let workspaces = wsResult.workspaces;
   const consoleUrl = wsResult.consoleUrl ?? getPensarConsoleUrl();
   if (workspaces.length === 0) {
@@ -186,7 +182,7 @@ If the browser didn't open, visit: ${consoleUrl}/create-workspace?redirect=/cred
 `);
     openUrl(`${consoleUrl}/create-workspace?redirect=/credits`);
     console.log("Waiting for workspace creation...");
-    workspaces = await pollForWorkspaceCreation(apiUrl, accessToken);
+    workspaces = await pollForWorkspaceCreation2(apiUrl, accessToken);
   }
   let workspaceId;
   if (workspaces.length === 1) {
@@ -198,9 +194,9 @@ If the browser didn't open, visit: ${consoleUrl}/create-workspace?redirect=/cred
   } else {
     workspaceId = await selectWorkspaceInBrowser(apiUrl, accessToken);
   }
-  const result = await selectWorkspace(apiUrl, accessToken, workspaceId);
+  const result = await selectWorkspace2(apiUrl, accessToken, workspaceId);
   const workspace = result.workspace;
-  await config.update({
+  await config2.update({
     workspaceId: workspace.id,
     workspaceSlug: workspace.slug,
     gatewaySigningKey: result.signingKey ?? null
@@ -223,21 +219,21 @@ If the browser didn't open, visit: ${consoleUrl}/create-workspace?redirect=/cred
   console.log("\nPensar models are now available. Run `pensar` to get started.");
 }
 async function logout() {
-  const appConfig = await config.get();
-  if (!isConnected(appConfig)) {
+  const appConfig = await config2.get();
+  if (!isConnected2(appConfig)) {
     console.log("Not currently connected to Pensar Console.");
     return;
   }
-  await disconnect();
+  await disconnect2();
   console.log("✓ Disconnected from Pensar Console.");
 }
 async function status() {
-  const appConfig = await config.get();
-  if (!isConnected(appConfig)) {
+  const appConfig = await config2.get();
+  if (!isConnected2(appConfig)) {
     console.log("Not connected to Pensar Console.\n\nRun `pensar login` to connect.");
     return;
   }
-  const validToken = await ensureValidToken({
+  const validToken = await ensureValidToken2({
     accessToken: appConfig.accessToken,
     refreshToken: appConfig.refreshToken,
     pensarAPIKey: appConfig.pensarAPIKey
@@ -255,7 +251,7 @@ async function status() {
       if (res.ok) {
         const data = await res.json();
         if (data.workspace) {
-          await config.update({
+          await config2.update({
             workspaceId: data.workspace.id,
             workspaceSlug: data.workspace.slug
           });
@@ -300,12 +296,12 @@ async function main() {
     } else {
       console.error(`Unknown auth subcommand: ${subcommand}`);
       console.error("Run 'pensar login --help' for usage information");
-      process.exit(1);
+      return markCommandFailed();
     }
   } catch (err) {
     console.error(`
 Error: ${err instanceof Error ? err.message : String(err)}`);
-    process.exit(1);
+    return markCommandFailed();
   }
 }
-main();
+await main();

package/build/blackboxAgent-hbra4k00.js

@@ -0,0 +1,12 @@
+import {
+  BlackboxAttackSurfaceAgent2
+} from "./cli-8kkaeb70.js";
+import"./cli-qba2x69h.js";
+import"./cli-qkb3v2nw.js";
+import"./cli-n4h7ygp5.js";
+import"./cli-j1916nvj.js";
+import"./cli-qktcyj48.js";
+import"./cli-wfb4gde1.js";
+export {
+  BlackboxAttackSurfaceAgent2 as BlackboxAttackSurfaceAgent
+};

package/build/blackboxPentest-bn5evs2z.js

@@ -0,0 +1,61 @@
+import"./cli-qkb3v2nw.js";
+import"./cli-wfb4gde1.js";
+import"./cli-j1916nvj.js";
+import"./cli-n4h7ygp5.js";
+import"./cli-8kkaeb70.js";
+import"./cli-4z46kyrk.js";
+import"./cli-q45hcq3f.js";
+import {
+  readExecutionMetrics,
+  writeExecutionMetrics,
+  runPentestWorkflow2
+} from "./cli-jw1xftqm.js";
+import"./cli-gq5sk2j3.js";
+import"./cli-gamfs2yq.js";
+import {
+  EMPTY_SESSION_TOKEN_USAGE,
+  accumulateSessionTokens
+} from "./cli-ag6jtndp.js";
+import"./cli-qba2x69h.js";
+import"./cli-qktcyj48.js";
+
+// src/core/api/blackboxPentest.ts
+async function runPentestAgent(input) {
+  const persisted = readExecutionMetrics(input.session.rootPath)?.tokenUsage;
+  let tokenUsage = persisted ?? EMPTY_SESSION_TOKEN_USAGE;
+  const onStepFinish = async (event) => {
+    tokenUsage = accumulateSessionTokens(tokenUsage, event.usage ?? {});
+    await input.onStepFinish?.(event);
+  };
+  const onCacheMetrics = (metrics) => {
+    tokenUsage = accumulateSessionTokens(tokenUsage, {
+      cacheReadTokens: metrics.cacheReadInputTokens,
+      cacheWriteTokens: metrics.cacheCreationInputTokens
+    });
+    input.onCacheMetrics?.(metrics);
+  };
+  let result;
+  try {
+    result = await runPentestWorkflow2({
+      ...input,
+      onStepFinish,
+      onCacheMetrics
+    });
+  } finally {
+    writeExecutionMetrics({
+      sessionRootPath: input.session.rootPath,
+      tokenUsage
+    });
+  }
+  const { findings, findingsPath, pocsPath, reportPath } = result;
+  console.log(`
+Found ${findings.length} vulnerabilities`);
+  console.log(`Findings: ${findingsPath}`);
+  console.log(`POCs: ${pocsPath}`);
+  if (reportPath)
+    console.log(`Report: ${reportPath}`);
+  return { findings, findingsPath, pocsPath, reportPath };
+}
+export {
+  runPentestAgent
+};