@pensar/apex 2.4.0 → 2.5.0-canary.0af37eb0

package/build/{cli-xshasbwe.js → cli-jzcsaygf.js}

@@ -1,17 +1,20 @@
+import {
+  hasToolCall,
+  init_dist,
+  scopedLogger,
+  init_lazyLogger,
+  createLogger,
+  init_structured
+} from "./cli-q8pr0zqg.js";
 import {
   OffensiveSecurityAgent
-} from "./cli-repbyhkk.js";
+} from "./cli-y212s0r8.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-tznv8pf1.js";
+} from "./cli-6hrf9z35.js";
 import {
-  createLogger,
-  hasToolCall,
-  init_dist,
-  init_lazyLogger,
-  init_structured,
-  scopedLogger
-} from "./cli-tkc598ey.js";
+  MOBILE_OTP_PROMPT_GUIDANCE
+} from "./cli-retw3rw5.js";
 
 // src/core/agents/specialized/authenticationAgent/agent.ts
 init_dist();
@@ -141,6 +144,11 @@ every 30 seconds, so run this immediately before filling the field. If the code
 retry once (you may have crossed a period boundary). Only report an MFA barrier if no seed is available
 or two fresh codes are both rejected.
 
+${MOBILE_OTP_PROMPT_GUIDANCE}
+
+TOTP-via-environment-variable above is unchanged and still applies when the login asks for an authenticator
+app code.
+
 # Error Recovery
 
 If authentication fails, try these mechanical fixes (they are login mechanics, not credential changes):
@@ -191,42 +199,12 @@ var log = scopedLogger(() => createLogger("authentication-agent"));
 
 class AuthenticationAgent extends OffensiveSecurityAgent {
   constructor(opts) {
-    const {
-      model,
-      target,
-      session,
-      authHints,
-      authConfig,
-      onStepFinish,
-      abortSignal,
-      eventBus,
-      subagentId,
-      context,
-      environmentVariables,
-      secretValues,
-      enableThinking,
-      thinkingEffort,
-      openAIReasoningEffort
-    } = opts;
+    const { target, authHints, context, ...base } = opts;
+    const { session } = base;
     const cm = session.credentialManager;
     super({
+      ...base,
       system: detectOSAndEnhancePrompt(AUTH_SUBAGENT_SYSTEM_PROMPT),
-      prompt: buildAuthPrompt(target, authHints, cm, context, environmentVariables ? Object.keys(environmentVariables) : undefined),
-      model,
-      session,
-      target,
-      authConfig,
-      onStepFinish,
-      abortSignal,
-      eventBus,
-      subagentId,
-      subagentName: opts.subagentName,
-      environmentVariables,
-      secretValues,
-      enableThinking,
-      thinkingEffort,
-      openAIReasoningEffort,
-      toolChoice: "auto",
       activeTools: [
         "execute_command",
         "complete_authentication",
@@ -243,14 +221,14 @@ class AuthenticationAgent extends OffensiveSecurityAgent {
         "email_search_messages",
         "email_get_message",
         "send_email",
+        "sms_list_messages",
         "web_search",
         "get_page"
       ],
       stopWhen: hasToolCall("complete_authentication"),
-      resolveResult: () => {
-        const authDataPath = join(session.rootPath, "auth", "auth-data.json");
-        return loadAuthResult(authDataPath);
-      }
+      resolveResult: () => loadAuthResult(join(session.rootPath, "auth", "auth-data.json")),
+      target,
+      prompt: buildAuthPrompt(target, authHints, cm, context, base.environmentVariables ? Object.keys(base.environmentVariables) : undefined)
     });
   }
 }
@@ -328,6 +306,10 @@ function buildAuthPrompt(target, authHints, credentialManager, context, envVarNa
     parts.push("");
   }
   if (credBlock) {
+    const hasMobileOtp = credentialManager?.listReferences().some((ref) => ref.additionalFieldKeys?.includes("phoneNumber"));
+    const smsInstructions = hasMobileOtp ? `
+${MOBILE_OTP_PROMPT_GUIDANCE}
+` : "";
     parts.push(`INSTRUCTIONS:
 You have credentials available via credential IDs — authenticate immediately.
 1. For API/form logins, use execute_command (curl) to submit credentials and capture the Set-Cookie / token response
@@ -335,7 +317,7 @@ You have credentials available via credential IDs — authenticate immediately.
    pass credentialId + credentialField (e.g. credentialField="password") instead of the raw value —
    the secret is resolved securely at execution time. NEVER type a password directly.
 3. Call complete_authentication with exported cookies/headers to persist credentials and end the run
-
+${smsInstructions}
 The credentials above were provided to you and have already been verified — they are SHARED across runs, so
 do not modify them or their account settings. NEVER change the password, complete a password reset /
 forced-password-change / account-recovery flow, or modify MFA/2FA settings (enrolling, disabling, or
@@ -354,14 +336,11 @@ and only pollutes results — fail fast with success=false instead.`);
   return parts.join(`
 `);
 }
-async function runAuthenticationAgent(input) {
+async function runAuthenticationAgent2(input) {
   const agent = new AuthenticationAgent(input);
   const result = await agent.consume();
   log.info(`Authentication ${result.success ? "succeeded" : "failed"}: ${result.summary}`);
   return result;
 }
 
-// src/core/api/authentication.ts
-var runAuthenticationAgent2 = runAuthenticationAgent;
-
-export { runAuthenticationAgent2 as runAuthenticationAgent };
+export { runAuthenticationAgent2 };

package/build/{cli-vnynf0js.js → cli-k8hgxz61.js}

@@ -1,9 +1,9 @@
 import {
   __esm
-} from "./cli-bc05qbss.js";
+} from "./cli-h6y3bt60.js";
 
 // package.json
-var package_default;
+var version = "2.5.0-canary.0af37eb0", package_default;
 var init_package = __esm(() => {
   package_default = {
     author: "Pensar",
@@ -23,6 +23,10 @@ var init_package = __esm(() => {
       "@modelcontextprotocol/sdk": "^1.29.0",
       "@openrouter/ai-sdk-provider": "^2.9.1",
       "@opentelemetry/api": "^1.9.1",
+      "@opentelemetry/exporter-trace-otlp-http": "^0.221.0",
+      "@opentelemetry/otlp-exporter-base": "^0.221.0",
+      "@opentelemetry/otlp-transformer": "^0.221.0",
+      "@opentelemetry/resources": "^2.10.0",
       "@opentui/core": "^0.1.107",
       "@opentui/react": "^0.1.107",
       "@pensar/surface": "0.3.0",
@@ -46,6 +50,8 @@ var init_package = __esm(() => {
     description: "AI-powered penetration testing CLI tool with terminal UI",
     devDependencies: {
       "@biomejs/biome": "2.4.14",
+      "@opentelemetry/context-async-hooks": "^2.10.0",
+      "@opentelemetry/sdk-trace-base": "^2.10.0",
       "@types/bun": "^1.3.14",
       "@types/mailparser": "^3.4.6",
       "@types/mime-types": "^3.0.1",
@@ -92,7 +98,7 @@ var init_package = __esm(() => {
       url: "https://github.com/pensarai/apex.git"
     },
     scripts: {
-      build: "bun build src/cli.ts --outdir build --target node --format esm --splitting --external @opentui/core --external @opentui/react --external @opentui/react/* --external react --external react/jsx-runtime --external react/jsx-dev-runtime --external react-reconciler --external weave --external electron --external chromium-bidi --external camoufox-js",
+      build: "rm -rf build && bun build src/cli.ts --outdir build --target node --format esm --splitting --external @opentui/core --external @opentui/react --external @opentui/react/* --external react --external react/jsx-runtime --external react/jsx-dev-runtime --external react-reconciler --external weave --external electron --external chromium-bidi --external camoufox-js",
       "build:binaries": "bun run generate:ascii && mkdir -p dist && bun run build:binary:macos-arm64 && bun run build:binary:macos-x64 && bun run build:binary:linux-x64 && bun run build:binary:linux-arm64",
       "build:binary": "bun run generate:ascii && bun build src/cli.ts --compile --external electron --external chromium-bidi --external camoufox-js --outfile pensar",
       "build:binary:linux-arm64": "bun build src/cli.ts --compile --external electron --external chromium-bidi --external camoufox-js --target=bun-linux-arm64 --outfile dist/pensar-linux-arm64",
@@ -120,7 +126,7 @@ var init_package = __esm(() => {
       tsc: "tsc --noEmit"
     },
     type: "module",
-    version: "2.4.0"
+    version
   };
 });
 
@@ -195,4 +201,4 @@ var init_installation = __esm(() => {
   init_package();
 });
 
-export { init_package, package_default, getCurrentVersion, detectInstallMethod, checkForUpdate, init_installation };
+export { init_package, version, package_default, getCurrentVersion, detectInstallMethod, checkForUpdate, init_installation };

package/build/{cli-32z0017y.js → cli-kn55pk78.js}

@@ -1,10 +1,10 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-repbyhkk.js";
+} from "./cli-y212s0r8.js";
 import {
-  init_dist,
-  stepCountIs
-} from "./cli-tkc598ey.js";
+  stepCountIs2,
+  init_dist
+} from "./cli-q8pr0zqg.js";
 
 // src/core/agents/specialized/codeAgent/agent.ts
 init_dist();
@@ -60,51 +60,40 @@ Prefer catalog + code_query for sink-first work; use candidates to separate unve
 `;
 
 // src/core/agents/specialized/codeAgent/agent.ts
-class CodeAgent extends OffensiveSecurityAgent {
+var CODE_AGENT_TOOLS = [
+  "read_file",
+  "list_files",
+  "grep",
+  "execute_command",
+  "profile_codebase",
+  "query_whitebox_catalog",
+  "run_code_query",
+  "run_whitebox_scan",
+  "create_whitebox_candidate",
+  "update_whitebox_candidate",
+  "list_whitebox_candidates",
+  "start_whitebox_job",
+  "poll_whitebox_job",
+  "stop_whitebox_job",
+  "read_whitebox_artifact",
+  "http_request",
+  "document_app",
+  "document_endpoint",
+  "web_search",
+  "get_page"
+];
+
+class CodeAgent2 extends OffensiveSecurityAgent {
   constructor(opts) {
     const {
-      model,
       codebasePath,
       objective,
-      session,
-      authConfig,
-      onStepFinish,
-      onCacheMetrics,
-      abortSignal,
-      eventBus,
-      subagentId,
-      stopWhen,
-      responseSchema,
       system,
-      attackSurfaceRegistry,
+      responseSchema,
       excludeTools,
-      enableThinking,
-      thinkingEffort,
-      openAIReasoningEffort,
-      projectThreatModel
+      ...base
     } = opts;
-    let activeTools = [
-      "read_file",
-      "list_files",
-      "grep",
-      "execute_command",
-      "profile_codebase",
-      "query_whitebox_catalog",
-      "run_code_query",
-      "run_whitebox_scan",
-      "create_whitebox_candidate",
-      "update_whitebox_candidate",
-      "list_whitebox_candidates",
-      "start_whitebox_job",
-      "poll_whitebox_job",
-      "stop_whitebox_job",
-      "read_whitebox_artifact",
-      "http_request",
-      "document_app",
-      "document_endpoint",
-      "web_search",
-      "get_page"
-    ];
+    let activeTools = [...CODE_AGENT_TOOLS];
     if (excludeTools?.length) {
       const excluded = new Set(excludeTools);
       activeTools = activeTools.filter((t) => !excluded.has(t));
@@ -113,25 +102,12 @@ class CodeAgent extends OffensiveSecurityAgent {
       activeTools.push("response");
     }
     super({
-      system: system ?? CODE_AGENT_SYSTEM_PROMPT,
+      ...base,
       prompt: buildPrompt(codebasePath, objective),
-      model,
-      session,
-      authConfig,
-      onStepFinish,
-      onCacheMetrics,
-      abortSignal,
-      eventBus,
-      subagentId,
-      subagentName: opts.subagentName,
-      attackSurfaceRegistry,
-      enableThinking,
-      thinkingEffort,
-      openAIReasoningEffort,
-      projectThreatModel,
-      stopWhen: stopWhen ?? stepCountIs(1e4),
+      system: system ?? CODE_AGENT_SYSTEM_PROMPT,
       activeTools,
-      responseSchema
+      responseSchema,
+      stopWhen: base.stopWhen ?? stepCountIs2(1e4)
     });
   }
 }
@@ -146,4 +122,4 @@ ${objective}
 Begin now. Orient yourself in the codebase, then accomplish the objective.`;
 }
 
-export { CodeAgent };
+export { CodeAgent2 };