@pensar/apex 2.4.0 → 2.5.0-canary.22f2eb52

package/build/{cli-gq40s5b3.js → cli-8kkaeb70.js}

@@ -1,14 +1,17 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-repbyhkk.js";
+} from "./cli-qkb3v2nw.js";
+import {
+  stepCountIs2,
+  hasToolCall,
+  init_dist
+} from "./cli-j1916nvj.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-tznv8pf1.js";
+} from "./cli-n4h7ygp5.js";
 import {
-  hasToolCall,
-  init_dist,
-  stepCountIs
-} from "./cli-tkc598ey.js";
+  MOBILE_OTP_PROMPT_GUIDANCE
+} from "./cli-retw3rw5.js";
 
 // src/core/agents/specialized/attackSurface/blackboxAgent.ts
 init_dist();
@@ -374,52 +377,25 @@ function loadAttackSurfaceResults(resultsPath) {
 }
 
 // src/core/agents/specialized/attackSurface/blackboxAgent.ts
-class BlackboxAttackSurfaceAgent extends OffensiveSecurityAgent {
+class BlackboxAttackSurfaceAgent2 extends OffensiveSecurityAgent {
   constructor(opts) {
     const {
-      model,
-      session,
-      authConfig,
+      target: targetOpt,
+      cwd,
+      surfaceIntegrationEnabled: _surfaceIntegrationEnabled,
       onStepFinish,
-      onCacheMetrics,
-      abortSignal,
-      attackSurfaceRegistry,
-      eventBus,
-      subagentId,
-      enableThinking,
-      thinkingEffort,
-      openAIReasoningEffort
+      ...base
     } = opts;
-    const target = opts.target ?? opts.cwd;
-    const resultsPath = join(session.rootPath, "attack-surface-results.json");
-    const assetsPath = join(session.rootPath, "assets");
+    const target = targetOpt ?? cwd;
+    const { session } = base;
     const subagentFolder = join(session.rootPath, "subagents", "attack-surface-agent");
     if (!existsSync(subagentFolder)) {
       mkdirSync(subagentFolder, { recursive: true });
     }
     super({
-      system: detectOSAndEnhancePrompt(SYSTEM),
-      prompt: buildPrompt(target, session),
-      model,
-      session,
+      ...base,
       target,
-      authConfig,
-      onStepFinish: (e) => {
-        onStepFinish?.(e);
-        const messages = e.response.messages;
-        if (messages !== undefined) {
-          writeFileSync(join(subagentFolder, "attack-surface-agent.log"), JSON.stringify(messages, null, 2));
-        }
-      },
-      onCacheMetrics,
-      abortSignal,
-      attackSurfaceRegistry,
-      eventBus,
-      subagentId,
-      enableThinking,
-      thinkingEffort,
-      openAIReasoningEffort,
-      messages: opts.messages,
+      system: detectOSAndEnhancePrompt(SYSTEM),
       activeTools: [
         "execute_command",
         "document_app",
@@ -438,15 +414,17 @@ class BlackboxAttackSurfaceAgent extends OffensiveSecurityAgent {
         "email_search_messages",
         "email_get_message",
         "send_email",
+        "sms_list_messages",
         "web_search",
         "get_page"
       ],
       stopWhen: [
         hasToolCall("create_attack_surface_report"),
-        stepCountIs(1e4)
+        stepCountIs2(1e4)
       ],
-      toolChoice: "auto",
       resolveResult: () => {
+        const resultsPath = join(session.rootPath, "attack-surface-results.json");
+        const assetsPath = join(session.rootPath, "assets");
         let results = null;
         let targets = [];
         if (existsSync(resultsPath)) {
@@ -456,11 +434,19 @@ class BlackboxAttackSurfaceAgent extends OffensiveSecurityAgent {
           } catch {}
         }
         return { results, targets, resultsPath, assetsPath };
+      },
+      prompt: buildBlackboxPrompt(target, session),
+      onStepFinish: (e) => {
+        onStepFinish?.(e);
+        const messages = e.response.messages;
+        if (messages !== undefined) {
+          writeFileSync(join(subagentFolder, "attack-surface-agent.log"), JSON.stringify(messages, null, 2));
+        }
       }
     });
   }
 }
-function buildPrompt(target, session) {
+function buildBlackboxPrompt(target, session) {
   const scopeConstraints = session.config?.scopeConstraints;
   const authenticationInstructions = session.config?.authenticationInstructions;
   const enumerateSubdomains = session.config?.enumerateSubdomains ?? false;
@@ -483,6 +469,7 @@ ${authenticationInstructions}
 Your FIRST tool call must be: browser_navigate to ${loginTarget}
 Then use browser tools to authenticate. Pass the credentialId to delegate_to_auth_subagent — secrets are resolved automatically.
 For browser_fill on password/secret fields, use credentialId + credentialField instead of raw values.
+${MOBILE_OTP_PROMPT_GUIDANCE}
 
 Do NOT run curl, nmap, dig, or any other command before completing login.
 Include authentication information with EVERY target that requires it in your final report.
@@ -527,4 +514,4 @@ ${operatorGuidanceBlock}
 ${startDirective}`;
 }
 
-export { BlackboxAttackSurfaceAgent };
+export { BlackboxAttackSurfaceAgent2 };

package/build/cli-8w8k4dph.js

@@ -0,0 +1,15 @@
+import {
+  __commonJS,
+  __require
+} from "./cli-h6y3bt60.js";
+
+// node_modules/@opentelemetry/resources/build/src/detectors/platform/node/machine-id/execAsync.js
+var require_execAsync = __commonJS(function(exports) {
+  Object.defineProperty(exports, "__esModule", { value: true });
+  exports.execAsync = undefined;
+  var child_process = __require("child_process");
+  var util = __require("util");
+  exports.execAsync = util.promisify(child_process.exec);
+});
+
+export { require_execAsync };

package/build/cli-ag6jtndp.js

@@ -0,0 +1,32 @@
+// src/core/session/usage.ts
+var EMPTY_SESSION_TOKEN_USAGE = {
+  inputTokens: 0,
+  outputTokens: 0,
+  cacheReadTokens: 0,
+  cacheWriteTokens: 0
+};
+function accumulateSessionTokens(current, step) {
+  const inputTokens = step.inputTokens ?? 0;
+  const outputTokens = step.outputTokens ?? 0;
+  const cacheReadTokens = step.cacheReadTokens ?? 0;
+  const cacheWriteTokens = step.cacheWriteTokens ?? 0;
+  if (inputTokens === 0 && outputTokens === 0 && cacheReadTokens === 0 && cacheWriteTokens === 0) {
+    return current;
+  }
+  return {
+    inputTokens: current.inputTokens + inputTokens,
+    outputTokens: current.outputTokens + outputTokens,
+    cacheReadTokens: current.cacheReadTokens + cacheReadTokens,
+    cacheWriteTokens: current.cacheWriteTokens + cacheWriteTokens
+  };
+}
+function contextPercentage(context) {
+  if (!context)
+    return null;
+  if (context.contextLimit <= 0)
+    return null;
+  const raw = context.usedTokens / context.contextLimit * 100;
+  return Math.min(100, Math.max(0, raw));
+}
+
+export { EMPTY_SESSION_TOKEN_USAGE, accumulateSessionTokens, contextPercentage };

package/build/{cli-2cbwdk78.js → cli-ak78mweh.js}

@@ -1,9 +1,9 @@
 import {
-  createLogger,
+  scopedLogger,
   init_lazyLogger,
-  init_structured,
-  scopedLogger
-} from "./cli-tkc598ey.js";
+  createLogger,
+  init_structured
+} from "./cli-j1916nvj.js";
 
 // src/core/integrations/wandb/client.ts
 init_structured();