@pensar/apex 2.5.0-canary.ed17e75d → 2.5.0-canary.f6422df7

package/build/agent-ggkrtp29.js

@@ -0,0 +1,12 @@
+import {
+  CodeAgent2
+} from "./cli-z1v01hjt.js";
+import"./cli-qba2x69h.js";
+import"./cli-b43gkt62.js";
+import"./cli-9vvrk0jh.js";
+import"./cli-ddb03mt2.js";
+import"./cli-qktcyj48.js";
+import"./cli-1epshqbe.js";
+export {
+  CodeAgent2 as CodeAgent
+};

package/build/{agent-avczsr68.js → agent-gq2rc4dr.js}

@@ -1,12 +1,12 @@
 import {
   runAuthenticationAgent2
-} from "./cli-5zkb889f.js";
+} from "./cli-y56ht6ah.js";
 import"./cli-qba2x69h.js";
-import"./cli-04vyq3p4.js";
-import"./cli-gdg11crm.js";
-import"./cli-jk34t4wj.js";
+import"./cli-b43gkt62.js";
+import"./cli-9vvrk0jh.js";
+import"./cli-ddb03mt2.js";
 import"./cli-qktcyj48.js";
-import"./cli-x34ddhpg.js";
+import"./cli-1epshqbe.js";
 export {
   runAuthenticationAgent2 as runAuthenticationAgent
 };

package/build/{agent-a6bxtbfy.js → agent-p6ga9jbq.js}

@@ -1,15 +1,15 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-04vyq3p4.js";
-import"./cli-x34ddhpg.js";
+} from "./cli-b43gkt62.js";
+import"./cli-1epshqbe.js";
 import {
   init_zod,
   stepCountIs2,
   init_dist
-} from "./cli-jk34t4wj.js";
+} from "./cli-ddb03mt2.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-gdg11crm.js";
+} from "./cli-9vvrk0jh.js";
 import"./cli-qba2x69h.js";
 import {
   string,

package/build/{agent-5s352akj.js → agent-rx8df4x3.js}

@@ -1,13 +1,13 @@
 import {
   TargetedPentestAgent2,
   buildPentestSystemPrompt2
-} from "./cli-9z9h5j53.js";
+} from "./cli-20qw5zdb.js";
 import"./cli-qba2x69h.js";
-import"./cli-04vyq3p4.js";
-import"./cli-gdg11crm.js";
-import"./cli-jk34t4wj.js";
+import"./cli-b43gkt62.js";
+import"./cli-9vvrk0jh.js";
+import"./cli-ddb03mt2.js";
 import"./cli-qktcyj48.js";
-import"./cli-x34ddhpg.js";
+import"./cli-1epshqbe.js";
 export {
   TargetedPentestAgent2 as TargetedPentestAgent,
   buildPentestSystemPrompt2 as buildPentestSystemPrompt

package/build/{apps-0vc4q8e3.js → apps-p49t71pt.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env bun
-import"./cli-x34ddhpg.js";
-import"./cli-jk34t4wj.js";
+import"./cli-1epshqbe.js";
+import"./cli-ddb03mt2.js";
 import {
   ENDPOINT_TRANSPORTS,
   listApps,
@@ -17,16 +17,16 @@ import {
   searchEndpoints,
   listDomains,
   createDomain
-} from "./cli-04vyq3p4.js";
-import"./cli-gdg11crm.js";
-import"./cli-97523caw.js";
-import"./cli-xjbwt7v8.js";
-import"./cli-rm2tsm83.js";
-import"./cli-8r3wej3n.js";
-import"./cli-5zkb889f.js";
-import"./cli-9z9h5j53.js";
-import"./cli-e64w7a41.js";
-import"./cli-njt9ajx6.js";
+} from "./cli-b43gkt62.js";
+import"./cli-9vvrk0jh.js";
+import"./cli-w31m4gw0.js";
+import"./cli-z1v01hjt.js";
+import"./cli-hxq1fc33.js";
+import"./cli-0fhrs6em.js";
+import"./cli-y56ht6ah.js";
+import"./cli-20qw5zdb.js";
+import"./cli-mj2nwrx6.js";
+import"./cli-aczvzy4v.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";

package/build/{auth-jgb4x41d.js → auth-0cb5wvg6.js}

@@ -2,7 +2,7 @@
 import {
   config2,
   init_config
-} from "./cli-x34ddhpg.js";
+} from "./cli-1epshqbe.js";
 import {
   getPensarApiUrl,
   getPensarConsoleUrl,
@@ -18,17 +18,17 @@ import {
   createWorkspaceSelection2,
   pollWorkspaceSelection2,
   init_auth
-} from "./cli-jk34t4wj.js";
-import"./cli-04vyq3p4.js";
-import"./cli-gdg11crm.js";
-import"./cli-97523caw.js";
-import"./cli-xjbwt7v8.js";
-import"./cli-rm2tsm83.js";
-import"./cli-8r3wej3n.js";
-import"./cli-5zkb889f.js";
-import"./cli-9z9h5j53.js";
-import"./cli-e64w7a41.js";
-import"./cli-njt9ajx6.js";
+} from "./cli-ddb03mt2.js";
+import"./cli-b43gkt62.js";
+import"./cli-9vvrk0jh.js";
+import"./cli-w31m4gw0.js";
+import"./cli-z1v01hjt.js";
+import"./cli-hxq1fc33.js";
+import"./cli-0fhrs6em.js";
+import"./cli-y56ht6ah.js";
+import"./cli-20qw5zdb.js";
+import"./cli-mj2nwrx6.js";
+import"./cli-aczvzy4v.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";

package/build/{blackboxAgent-na50er6j.js → blackboxAgent-h2cjhkqp.js}

@@ -1,12 +1,12 @@
 import {
   BlackboxAttackSurfaceAgent2
-} from "./cli-97523caw.js";
+} from "./cli-w31m4gw0.js";
 import"./cli-qba2x69h.js";
-import"./cli-04vyq3p4.js";
-import"./cli-gdg11crm.js";
-import"./cli-jk34t4wj.js";
+import"./cli-b43gkt62.js";
+import"./cli-9vvrk0jh.js";
+import"./cli-ddb03mt2.js";
 import"./cli-qktcyj48.js";
-import"./cli-x34ddhpg.js";
+import"./cli-1epshqbe.js";
 export {
   BlackboxAttackSurfaceAgent2 as BlackboxAttackSurfaceAgent
 };

package/build/{blackboxPentest-s1a1dtt6.js → blackboxPentest-6zwn4hwy.js}

@@ -1,17 +1,20 @@
-import"./cli-04vyq3p4.js";
-import"./cli-x34ddhpg.js";
-import"./cli-jk34t4wj.js";
-import"./cli-gdg11crm.js";
-import"./cli-97523caw.js";
-import"./cli-9z9h5j53.js";
-import"./cli-e64w7a41.js";
+import"./cli-1epshqbe.js";
+import {
+  init_ai,
+  normalizeStepUsage
+} from "./cli-ddb03mt2.js";
+import"./cli-b43gkt62.js";
+import"./cli-9vvrk0jh.js";
+import"./cli-w31m4gw0.js";
+import"./cli-20qw5zdb.js";
+import"./cli-mj2nwrx6.js";
 import {
   readExecutionMetrics,
   writeExecutionMetrics,
   runPentestWorkflow2
-} from "./cli-8r3wej3n.js";
-import"./cli-xjbwt7v8.js";
-import"./cli-rm2tsm83.js";
+} from "./cli-0fhrs6em.js";
+import"./cli-z1v01hjt.js";
+import"./cli-hxq1fc33.js";
 import {
   EMPTY_SESSION_TOKEN_USAGE,
   accumulateSessionTokens
@@ -20,26 +23,20 @@ import"./cli-qba2x69h.js";
 import"./cli-qktcyj48.js";
 
 // src/core/api/blackboxPentest.ts
+init_ai();
 async function runPentestAgent(input) {
   const persisted = readExecutionMetrics(input.session.rootPath)?.tokenUsage;
   let tokenUsage = persisted ?? EMPTY_SESSION_TOKEN_USAGE;
   const onStepFinish = async (event) => {
-    tokenUsage = accumulateSessionTokens(tokenUsage, event.usage ?? {});
+    tokenUsage = accumulateSessionTokens(tokenUsage, normalizeStepUsage(event));
     await input.onStepFinish?.(event);
   };
-  const onCacheMetrics = (metrics) => {
-    tokenUsage = accumulateSessionTokens(tokenUsage, {
-      cacheReadTokens: metrics.cacheReadInputTokens,
-      cacheWriteTokens: metrics.cacheCreationInputTokens
-    });
-    input.onCacheMetrics?.(metrics);
-  };
   let result;
   try {
     result = await runPentestWorkflow2({
       ...input,
       onStepFinish,
-      onCacheMetrics
+      onCacheMetrics: input.onCacheMetrics
     });
   } finally {
     writeExecutionMetrics({

package/build/{cli-8r3wej3n.js → cli-0fhrs6em.js}

@@ -6,7 +6,7 @@ import {
   FindingsRegistry,
   PLAN_MODE_TOOL_NAMES,
   OffensiveSecurityAgent
-} from "./cli-04vyq3p4.js";
+} from "./cli-b43gkt62.js";
 import {
   hasToolCall,
   init_dist,
@@ -17,24 +17,24 @@ import {
   init_session,
   createLogger,
   init_structured
-} from "./cli-jk34t4wj.js";
+} from "./cli-ddb03mt2.js";
 import {
   BlackboxAttackSurfaceAgent2
-} from "./cli-97523caw.js";
+} from "./cli-w31m4gw0.js";
 import {
   TargetedPentestAgent2,
   buildPentestSystemPrompt2
-} from "./cli-9z9h5j53.js";
+} from "./cli-20qw5zdb.js";
 import {
   buildPentestReport,
   renderJson,
   renderMarkdown,
   REPORT_FILENAME_MD,
   REPORT_FILENAME_JSON
-} from "./cli-e64w7a41.js";
+} from "./cli-mj2nwrx6.js";
 import {
   CodeAgent2
-} from "./cli-xjbwt7v8.js";
+} from "./cli-z1v01hjt.js";
 import {
   WHITEBOX_APPS_DISCOVERY_SYSTEM_PROMPT2,
   WHITEBOX_ENDPOINT_DOCUMENTATION_SYSTEM_PROMPT,
@@ -42,7 +42,7 @@ import {
   EndpointSchema2,
   AppsDiscoveryResultSchema2,
   DiscoverySummarySchema2
-} from "./cli-rm2tsm83.js";
+} from "./cli-hxq1fc33.js";
 import {
   createThreatModelPrompt
 } from "./cli-q126f6ef.js";
@@ -7829,7 +7829,7 @@ async function runPentestSwarm2(input) {
 }
 async function runPentestWorkflow2(input) {
   if (input.fastStrike) {
-    const { runFastStrike } = await import("./fastStrike-wvdpae0b.js");
+    const { runFastStrike } = await import("./fastStrike-6dte80nx.js");
     return runFastStrike(input);
   }
   const {

package/build/{cli-x34ddhpg.js → cli-1epshqbe.js}

@@ -3,7 +3,7 @@ import {
   get,
   update2,
   init_config2
-} from "./cli-d2drez23.js";
+} from "./cli-5j464wrj.js";
 import {
   __esm
 } from "./cli-h6y3bt60.js";

package/build/{cli-9z9h5j53.js → cli-20qw5zdb.js}

@@ -6,7 +6,7 @@ import {
   init_lazyLogger,
   createLogger,
   init_structured
-} from "./cli-jk34t4wj.js";
+} from "./cli-ddb03mt2.js";
 import {
   isMemoryEnabled,
   readPlan,
@@ -14,7 +14,7 @@ import {
   createReportErrorTool,
   PentestReportedError,
   OffensiveSecurityAgent
-} from "./cli-04vyq3p4.js";
+} from "./cli-b43gkt62.js";
 import {
   MOBILE_OTP_PROMPT_GUIDANCE
 } from "./cli-retw3rw5.js";

package/build/{cli-7vby0hk6.js → cli-4ptm7wgt.js}

@@ -12133,4 +12133,56 @@ var require_index_shim = __commonJS(function(exports) {
   } });
 });
 
-export { require_src, require_src2, require_src3, require_src4, require_index_node_http, require_src5, require_index_shim };
+// src/core/observability/active-spans.ts
+var import_api = __toESM(require_src6(), 1);
+var INTERRUPTED_SPAN_ATTRIBUTE = "pensar.telemetry.interrupted";
+var INTERRUPTED_ERROR_TYPE = "ApexProcessInterrupted";
+var INTERRUPTED_SPAN_REASON = "Apex shut down before this span completed";
+var MAX_TRACKED_ACTIVE_SPANS = 1e4;
+function spanKey(span) {
+  const context = span.spanContext();
+  return `${context.traceId}:${context.spanId}`;
+}
+
+class ActiveSpanProcessor {
+  active = new Map;
+  overflowWarned = false;
+  onStart(span) {
+    if (this.active.size >= MAX_TRACKED_ACTIVE_SPANS) {
+      if (!this.overflowWarned) {
+        this.overflowWarned = true;
+        import_api.diag.warn(`Apex active-span shutdown tracking reached ${MAX_TRACKED_ACTIVE_SPANS} spans; newer spans will not be retained`);
+      }
+      return;
+    }
+    this.active.set(spanKey(span), span);
+  }
+  onEnd(span) {
+    this.active.delete(spanKey(span));
+  }
+  endAll(reason = INTERRUPTED_SPAN_REASON) {
+    const spans = [...this.active.entries()].reverse();
+    for (const [key, span] of spans) {
+      try {
+        if (span.isRecording()) {
+          span.setAttribute(INTERRUPTED_SPAN_ATTRIBUTE, true);
+          if (span.attributes["error.type"] === undefined) {
+            span.setAttribute("error.type", INTERRUPTED_ERROR_TYPE);
+          }
+          if (span.status.code !== import_api.SpanStatusCode.ERROR) {
+            span.setStatus({ code: import_api.SpanStatusCode.ERROR, message: reason });
+          }
+          span.end();
+        }
+      } catch {} finally {
+        this.active.delete(key);
+      }
+    }
+  }
+  async forceFlush() {}
+  async shutdown() {
+    this.endAll();
+  }
+}
+
+export { require_src, require_src2, require_src3, require_src4, require_index_node_http, require_src5, require_index_shim, ActiveSpanProcessor };

package/build/{cli-d2drez23.js → cli-5j464wrj.js}

@@ -1,7 +1,7 @@
 import {
   getCurrentVersion,
   init_installation
-} from "./cli-p44jq8zs.js";
+} from "./cli-gvnncqb9.js";
 import {
   __esm
 } from "./cli-h6y3bt60.js";

package/build/{cli-68erc0pw.js → cli-6dgqvnng.js}

@@ -3,7 +3,7 @@ import {
   init_lazyLogger,
   createLogger,
   init_structured
-} from "./cli-jk34t4wj.js";
+} from "./cli-ddb03mt2.js";
 
 // src/core/integrations/wandb/client.ts
 init_structured();

package/build/{cli-gdg11crm.js → cli-9vvrk0jh.js}

@@ -3,7 +3,7 @@ import {
   init_lazyLogger,
   createLogger,
   init_structured
-} from "./cli-jk34t4wj.js";
+} from "./cli-ddb03mt2.js";
 
 // src/core/agents/specialized/utils.ts
 import { execSync } from "node:child_process";

package/build/{cli-njt9ajx6.js → cli-aczvzy4v.js}

@@ -3,9 +3,10 @@ import {
   stepCountIs2,
   init_dist,
   init_constants,
+  init_ai,
   sessions2,
   init_session
-} from "./cli-jk34t4wj.js";
+} from "./cli-ddb03mt2.js";
 import {
   buildBaseSystemPrompt,
   ASK_USER_QUESTIONS_TOOL_NAME,
@@ -13,7 +14,7 @@ import {
   ALL_TOOL_NAMES2,
   SKILL_TOOL_NAMES2,
   OffensiveSecurityAgent
-} from "./cli-04vyq3p4.js";
+} from "./cli-b43gkt62.js";
 import {
   string,
   array,
@@ -7062,6 +7063,8 @@ async function listTargetLogs(targetId, opts) {
 async function searchTargetLogs(targetId, query, opts) {
   return apiRequest("POST", `/targets/${targetId}/logs/search`, { query, ...opts });
 }
+// src/core/api/blackboxPentest.ts
+init_ai();
 
 // src/core/api/index.ts
 init_constants();

package/build/{cli-04vyq3p4.js → cli-b43gkt62.js}

@@ -1,7 +1,7 @@
 import {
   config2,
   init_config
-} from "./cli-x34ddhpg.js";
+} from "./cli-1epshqbe.js";
 import {
   init_zod,
   stepCountIs2,
@@ -38,12 +38,13 @@ import {
   init_session,
   createLogger,
   init_structured,
+  normalizeStepUsage,
   streamResponse,
   generateObjectResponse
-} from "./cli-jk34t4wj.js";
+} from "./cli-ddb03mt2.js";
 import {
   detectOSAndEnhancePrompt
-} from "./cli-gdg11crm.js";
+} from "./cli-9vvrk0jh.js";
 import {
   parseTargetUrl
 } from "./cli-0wsh8j2t.js";
@@ -74,7 +75,7 @@ import {
 import {
   getCurrentVersion,
   init_installation
-} from "./cli-p44jq8zs.js";
+} from "./cli-gvnncqb9.js";
 import {
   require_src6
 } from "./cli-bb02pjt0.js";
@@ -100215,7 +100216,7 @@ async function runWithBoundedConcurrency(items, concurrency, fn, abortSignal) {
 
 // src/core/agents/offSecAgent/subagentSpawner.ts
 var runPentestChild = async (spec, ctx) => {
-  const { TargetedPentestAgent } = await import("./agent-5s352akj.js");
+  const { TargetedPentestAgent } = await import("./agent-rx8df4x3.js");
   const agent = new TargetedPentestAgent({
     target: spec.target,
     grpc: spec.grpc,
@@ -100248,7 +100249,7 @@ var runPentestChild = async (spec, ctx) => {
   return { run: () => agent.consume(), drained: () => agent.drained };
 };
 var runCodeChild = async (spec, ctx) => {
-  const { CodeAgent } = await import("./agent-d0s4vmry.js");
+  const { CodeAgent } = await import("./agent-ggkrtp29.js");
   const agent = new CodeAgent({
     codebasePath: spec.codebasePath,
     objective: spec.objective,
@@ -100275,7 +100276,7 @@ var runCodeChild = async (spec, ctx) => {
   return { run: () => agent.consume(), drained: () => agent.drained };
 };
 var runWhiteboxChild = async (spec, ctx) => {
-  const { WhiteboxAttackSurfaceAgent } = await import("./index-4gndz27q.js");
+  const { WhiteboxAttackSurfaceAgent } = await import("./index-x8040y0s.js");
   const agent = new WhiteboxAttackSurfaceAgent({
     codebasePath: spec.codebasePath,
     attackSurfaceRegistry: spec.attackSurfaceRegistry,
@@ -100294,7 +100295,7 @@ var runWhiteboxChild = async (spec, ctx) => {
   return { run: () => agent.consume(), drained: () => agent.drained };
 };
 var runBlackboxChild = async (spec, ctx) => {
-  const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-na50er6j.js");
+  const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-h2cjhkqp.js");
   const agent = new BlackboxAttackSurfaceAgent({
     target: spec.target,
     attackSurfaceRegistry: spec.attackSurfaceRegistry,
@@ -100312,7 +100313,7 @@ var runBlackboxChild = async (spec, ctx) => {
   return { run: () => agent.consume(), drained: () => agent.drained };
 };
 var runAuthChild = async (spec, ctx) => {
-  const { runAuthenticationAgent } = await import("./agent-avczsr68.js");
+  const { runAuthenticationAgent } = await import("./agent-gq2rc4dr.js");
   return {
     run: () => runAuthenticationAgent({
       target: spec.target,
@@ -100333,7 +100334,7 @@ var runAuthChild = async (spec, ctx) => {
   };
 };
 var runJudgeChild = async (spec, ctx) => {
-  const { judgeFinding } = await import("./index-7wgjqw44.js");
+  const { judgeFinding } = await import("./index-9ezh2dr8.js");
   return {
     run: () => judgeFinding(spec.judgeInput, {
       model: ctx.model,
@@ -122680,7 +122681,7 @@ Omit \`cwd\` for blackbox mode (live target probing only).`,
       toolCallDescription: string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async ({ target, cwd }) => {
-      const { runPentestWorkflow: workflow } = await import("./pentest-9e4brpjh.js");
+      const { runPentestWorkflow: workflow } = await import("./pentest-trx5r5cb.js");
       if (!ctx.model) {
         return {
           success: false,
@@ -123287,7 +123288,7 @@ Pass every target you want tested — the swarm handles concurrency automaticall
       toolCallDescription: string().describe("A concise, human-readable description of what this tool call is doing")
     }),
     execute: async ({ targets }) => {
-      const { runPentestSwarm, DEFAULT_CONCURRENCY } = await import("./pentest-9e4brpjh.js");
+      const { runPentestSwarm, DEFAULT_CONCURRENCY } = await import("./pentest-trx5r5cb.js");
       if (!ctx.model) {
         return {
           success: false,
@@ -126131,7 +126132,6 @@ class OffensiveSecurityAgent {
       sessionId: input.session.id,
       target: input.target
     });
-    let lastCacheMetrics = null;
     this.createStream = () => streamResponse({
       prompt: input.prompt,
       system: systemPrompt,
@@ -126147,15 +126147,9 @@ class OffensiveSecurityAgent {
       sessionId: this.busSessionId,
       onStepFinish: async (event) => {
         const auxiliaryModelEvent = event.response.id === "summarization" || event.response.id === "tool-repair";
+        const stepUsage = normalizeStepUsage(event);
         if (auxiliaryModelEvent) {
-          const cacheDetails = event.usage.inputTokenDetails;
-          traceWriter.recordStep([], {
-            inputTokens: event.usage.inputTokens ?? 0,
-            outputTokens: event.usage.outputTokens ?? 0,
-            cacheReadTokens: lastCacheMetrics?.cacheReadTokens ?? cacheDetails?.cacheReadTokens,
-            cacheWriteTokens: lastCacheMetrics?.cacheWriteTokens ?? cacheDetails?.cacheWriteTokens
-          }, { usageOnly: true });
-          lastCacheMetrics = null;
+          traceWriter.recordStep([], stepUsage, { usageOnly: true });
           await input.onStepFinish?.(event);
           return;
         }
@@ -126164,12 +126158,7 @@ class OffensiveSecurityAgent {
           ...event.response.messages
         ]);
         schedulePersist();
-        traceWriter.recordStep(event.response.messages, {
-          inputTokens: event.usage.inputTokens ?? 0,
-          outputTokens: event.usage.outputTokens ?? 0,
-          ...lastCacheMetrics
-        });
-        lastCacheMetrics = null;
+        traceWriter.recordStep(event.response.messages, stepUsage);
         this.eventBus.emit("step-finish", {
           messages: event.response.messages,
           subagentId: this.subagentId,
@@ -126197,13 +126186,7 @@ class OffensiveSecurityAgent {
       },
       abortSignal: input.abortSignal,
       authConfig: input.authConfig,
-      onCacheMetrics: (metrics) => {
-        lastCacheMetrics = {
-          cacheReadTokens: metrics.cacheReadInputTokens,
-          cacheWriteTokens: metrics.cacheCreationInputTokens
-        };
-        input.onCacheMetrics?.(metrics);
-      },
+      onCacheMetrics: input.onCacheMetrics,
       enableThinking: input.enableThinking,
       thinkingEffort: input.thinkingEffort,
       openAIReasoningEffort: input.openAIReasoningEffort,
@@ -126326,7 +126309,8 @@ class OffensiveSecurityAgent {
         throw err;
       } finally {
         unregisterActiveRootSpan(span);
-        span.end();
+        if (span.isRecording())
+          span.end();
       }
     });
     const drain = !isSubagent ? runInSpan() : withSubagentSessionBaggage(sid, runInSpan);