@pensar/apex 2.6.1 → 2.7.0-canary.6d9d1e0d

package/build/lib/index.js

@@ -1,7 +1,7 @@
 import {
   exports_eventBus
 } from "./chunk-7gjdygcx.js";
-import"./chunk-w66ce82a.js";
+import"./chunk-66t5k77r.js";
 import {
   exports_id
 } from "./chunk-jdjagvgr.js";
@@ -11,27 +11,27 @@ import {
 import {
   exports_session,
   exports_ai
-} from "./chunk-ba41jh41.js";
+} from "./chunk-bdbd8d8q.js";
 import"./chunk-8vhr65w3.js";
 import {
   exports_offSecAgent
-} from "./chunk-r4j8ybn9.js";
+} from "./chunk-74ddy2e7.js";
 import {
   exports_backends
 } from "./chunk-fy3bbbqy.js";
 import"./chunk-mv74mq5n.js";
-import"./chunk-yrnrbjes.js";
+import"./chunk-fytt5jz7.js";
 import {
   exports_attackSurfaceRegistry
 } from "./chunk-b8eq85d2.js";
 import {
   exports_registry
-} from "./chunk-1azdancq.js";
+} from "./chunk-0ec46jyd.js";
 import {
   exports_subagentSpawner
-} from "./chunk-3c00n0cy.js";
+} from "./chunk-gv1p302b.js";
 import"./chunk-t5bt5vn1.js";
-import"./chunk-2qsq76xq.js";
+import"./chunk-wa0q3smh.js";
 import {
   exports_prompt_injections
 } from "./chunk-eb4h4k1f.js";
@@ -43,36 +43,36 @@ import {
 import"./chunk-3q89v4xv.js";
 import"./chunk-zrbqn62x.js";
 import"./chunk-q5e23acz.js";
-import"./chunk-xhdpgpkm.js";
+import"./chunk-acfewabw.js";
 import {
   exports_authenticationAgent
-} from "./chunk-7pwa92rn.js";
+} from "./chunk-9etzp9n2.js";
 import {
   exports_findingJudge
-} from "./chunk-nhfax4gb.js";
-import"./chunk-1yct6cra.js";
+} from "./chunk-mepzy07f.js";
+import"./chunk-j1ftnbgr.js";
 import {
   exports_patching
-} from "./chunk-mg03jdmt.js";
+} from "./chunk-xw8d7pv7.js";
 import {
   exports_whiteboxAttackSurface2
-} from "./chunk-r2dkp4tb.js";
+} from "./chunk-y9m8yw7k.js";
 import"./chunk-xpfg2fbk.js";
 import {
   exports_api
-} from "./chunk-9yksqgzr.js";
-import"./chunk-1fy8azee.js";
-import"./chunk-4hwzqthr.js";
+} from "./chunk-29bvrw6m.js";
+import"./chunk-8m15nv6s.js";
+import"./chunk-851r7zp8.js";
 import {
   exports_whiteboxAttackSurface
-} from "./chunk-z137x08b.js";
-import"./chunk-1jvwqnem.js";
-import"./chunk-v3dk9j7k.js";
+} from "./chunk-3ac8kcj9.js";
+import"./chunk-rchnq1ez.js";
+import"./chunk-n3kr09mb.js";
 import {
   exports_persistence
-} from "./chunk-e8yy2k73.js";
-import"./chunk-z96pbjhd.js";
-import"./chunk-acgbyf5h.js";
+} from "./chunk-mqcwxrnh.js";
+import"./chunk-c6gj39ew.js";
+import"./chunk-pd487tpr.js";
 export {
   exports_ai as ai,
   exports_api as api,

package/build/{logs-x62b7hk1.js → logs-mvrvrkfa.js}

@@ -1,25 +1,25 @@
 #!/usr/bin/env bun
-import"./cli-fy6vh2a7.js";
-import"./cli-c05y640n.js";
+import"./cli-0ry9v2cb.js";
+import"./cli-0cwdrrq7.js";
 import {
   listAgentLogs2,
   searchAgentLogs2
-} from "./cli-7eea4e2y.js";
-import"./cli-qgz1q9g5.js";
-import"./cli-k2nwxta0.js";
-import"./cli-kb21qhvm.js";
-import"./cli-ngq9dr8n.js";
-import"./cli-d37a42dc.js";
-import"./cli-3sp6nd8d.js";
-import"./cli-xtc2t6me.js";
-import"./cli-n2en7j5b.js";
+} from "./cli-4mar7kvr.js";
+import"./cli-tfaqp0ty.js";
+import"./cli-5gaxk6hd.js";
+import"./cli-m5ryqeav.js";
+import"./cli-zmeb85er.js";
+import"./cli-8hxrn15h.js";
+import"./cli-t3m0e9t2.js";
+import"./cli-metec8r8.js";
+import"./cli-ge8q6nxr.js";
 import"./cli-xcy2vxj2.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-1ve18npr.js";
+import"./cli-gr4az5sf.js";
 import"./cli-qba2x69h.js";
-import"./cli-dpsw2fe6.js";
+import"./cli-nj73990n.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/logs.ts

package/build/{native-rollout-evidence-c9yhfqcs.js → native-rollout-evidence-h2za8fyf.js}

@@ -1,8 +1,8 @@
-import"./cli-fy6vh2a7.js";
-import"./cli-c05y640n.js";
+import"./cli-0ry9v2cb.js";
+import"./cli-0cwdrrq7.js";
 import {
   init_ai
-} from "./cli-dpsw2fe6.js";
+} from "./cli-nj73990n.js";
 import {
   toJsonValue,
   stringifyCanonicalJson,

package/build/{offesecAgent-5whnpeta.js → offesecAgent-r4hz607z.js}

@@ -1,13 +1,13 @@
 import {
   OffensiveSecurityAgent
-} from "./cli-qgz1q9g5.js";
-import"./cli-fy6vh2a7.js";
-import"./cli-c05y640n.js";
+} from "./cli-tfaqp0ty.js";
+import"./cli-0ry9v2cb.js";
+import"./cli-0cwdrrq7.js";
 import {
   startAgentExecution
 } from "./cli-g06s7edq.js";
 import"./cli-qba2x69h.js";
-import"./cli-dpsw2fe6.js";
+import"./cli-nj73990n.js";
 import"./cli-c2k4xxaw.js";
 
 // src/core/api/offesecAgent.ts

package/build/pentest-52s2dn28.js

@@ -0,0 +1,22 @@
+import {
+  DEFAULT_CONCURRENCY2,
+  runPentestSwarm2,
+  runPentestWorkflow2
+} from "./cli-8hxrn15h.js";
+import"./cli-ge8q6nxr.js";
+import"./cli-zmeb85er.js";
+import"./cli-5gaxk6hd.js";
+import"./cli-metec8r8.js";
+import"./cli-m5ryqeav.js";
+import"./cli-gr4az5sf.js";
+import"./cli-qba2x69h.js";
+import"./cli-tfaqp0ty.js";
+import"./cli-nj73990n.js";
+import"./cli-0cwdrrq7.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-0ry9v2cb.js";
+export {
+  DEFAULT_CONCURRENCY2 as DEFAULT_CONCURRENCY,
+  runPentestSwarm2 as runPentestSwarm,
+  runPentestWorkflow2 as runPentestWorkflow
+};

package/build/{pentests-e0f32aqx.js → pentests-yvt9wvxd.js}

@@ -1,26 +1,26 @@
 #!/usr/bin/env bun
-import"./cli-fy6vh2a7.js";
-import"./cli-c05y640n.js";
+import"./cli-0ry9v2cb.js";
+import"./cli-0cwdrrq7.js";
 import {
   listScans2,
   getScan2,
   dispatchPentest2
-} from "./cli-7eea4e2y.js";
-import"./cli-qgz1q9g5.js";
-import"./cli-k2nwxta0.js";
-import"./cli-kb21qhvm.js";
-import"./cli-ngq9dr8n.js";
-import"./cli-d37a42dc.js";
-import"./cli-3sp6nd8d.js";
-import"./cli-xtc2t6me.js";
-import"./cli-n2en7j5b.js";
+} from "./cli-4mar7kvr.js";
+import"./cli-tfaqp0ty.js";
+import"./cli-5gaxk6hd.js";
+import"./cli-m5ryqeav.js";
+import"./cli-zmeb85er.js";
+import"./cli-8hxrn15h.js";
+import"./cli-t3m0e9t2.js";
+import"./cli-metec8r8.js";
+import"./cli-ge8q6nxr.js";
 import"./cli-xcy2vxj2.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-1ve18npr.js";
+import"./cli-gr4az5sf.js";
 import"./cli-qba2x69h.js";
-import"./cli-dpsw2fe6.js";
+import"./cli-nj73990n.js";
 import"./cli-c2k4xxaw.js";
 import {
   init_zod

package/build/recordedRunClient-6z78az3b.js

@@ -0,0 +1,11 @@
+import {
+  openRecordedRunClient2
+} from "./cli-pchzt5f7.js";
+import"./cli-xpspbhqs.js";
+import"./cli-nj73990n.js";
+import"./cli-0cwdrrq7.js";
+import"./cli-c2k4xxaw.js";
+import"./cli-0ry9v2cb.js";
+export {
+  openRecordedRunClient2 as openRecordedRunClient
+};

package/build/{targetedPentest-rcbs4nvp.js → targetedPentest-6aeg3nxd.js}

@@ -1,15 +1,15 @@
-import"./cli-fy6vh2a7.js";
-import"./cli-c05y640n.js";
-import"./cli-qgz1q9g5.js";
+import"./cli-0ry9v2cb.js";
+import"./cli-0cwdrrq7.js";
+import"./cli-tfaqp0ty.js";
 import {
   TargetedPentestAgent2
-} from "./cli-xtc2t6me.js";
+} from "./cli-metec8r8.js";
 import {
   startAgentExecution
 } from "./cli-g06s7edq.js";
-import"./cli-1ve18npr.js";
+import"./cli-gr4az5sf.js";
 import"./cli-qba2x69h.js";
-import"./cli-dpsw2fe6.js";
+import"./cli-nj73990n.js";
 import"./cli-c2k4xxaw.js";
 
 // src/core/api/targetedPentest.ts

package/build/{targets-xj9g3q0z.js → targets-a38xnsgm.js}

@@ -1,26 +1,26 @@
 #!/usr/bin/env bun
-import"./cli-fy6vh2a7.js";
-import"./cli-c05y640n.js";
+import"./cli-0ry9v2cb.js";
+import"./cli-0cwdrrq7.js";
 import {
   listPentestTargets2,
   listTargetLogs2,
   searchTargetLogs2
-} from "./cli-7eea4e2y.js";
-import"./cli-qgz1q9g5.js";
-import"./cli-k2nwxta0.js";
-import"./cli-kb21qhvm.js";
-import"./cli-ngq9dr8n.js";
-import"./cli-d37a42dc.js";
-import"./cli-3sp6nd8d.js";
-import"./cli-xtc2t6me.js";
-import"./cli-n2en7j5b.js";
+} from "./cli-4mar7kvr.js";
+import"./cli-tfaqp0ty.js";
+import"./cli-5gaxk6hd.js";
+import"./cli-m5ryqeav.js";
+import"./cli-zmeb85er.js";
+import"./cli-8hxrn15h.js";
+import"./cli-t3m0e9t2.js";
+import"./cli-metec8r8.js";
+import"./cli-ge8q6nxr.js";
 import"./cli-xcy2vxj2.js";
 import {
   markCommandFailed
 } from "./cli-z82n3qk1.js";
-import"./cli-1ve18npr.js";
+import"./cli-gr4az5sf.js";
 import"./cli-qba2x69h.js";
-import"./cli-dpsw2fe6.js";
+import"./cli-nj73990n.js";
 import"./cli-c2k4xxaw.js";
 
 // src/cli/targets.ts

package/build/threatModel-1gsb7ytk.js

@@ -0,0 +1,21 @@
+import"./cli-tfaqp0ty.js";
+import"./cli-0ry9v2cb.js";
+import"./cli-0cwdrrq7.js";
+import {
+  runThreatModelWorkflow2
+} from "./cli-4mar7kvr.js";
+import"./cli-5gaxk6hd.js";
+import"./cli-m5ryqeav.js";
+import"./cli-zmeb85er.js";
+import"./cli-8hxrn15h.js";
+import"./cli-t3m0e9t2.js";
+import"./cli-metec8r8.js";
+import"./cli-ge8q6nxr.js";
+import"./cli-xcy2vxj2.js";
+import"./cli-gr4az5sf.js";
+import"./cli-qba2x69h.js";
+import"./cli-nj73990n.js";
+import"./cli-c2k4xxaw.js";
+export {
+  runThreatModelWorkflow2 as runThreatModelWorkflow
+};

package/build/{uninstall-7s784q4a.js → uninstall-kt485ay4.js}

@@ -5,7 +5,7 @@ import {
 import {
   detectInstallMethod,
   init_installation
-} from "./cli-65g6rcat.js";
+} from "./cli-hprqe9j2.js";
 import {
   __require
 } from "./cli-h6y3bt60.js";

package/build/{upload-4gvhwmvr.js → upload-ahw3are7.js}

@@ -1,10 +1,10 @@
-import"./cli-fy6vh2a7.js";
-import"./cli-c05y640n.js";
+import"./cli-0ry9v2cb.js";
+import"./cli-0cwdrrq7.js";
 import {
   resolveConfig,
   createWeaveTracer
-} from "./cli-az3xq70v.js";
-import"./cli-dpsw2fe6.js";
+} from "./cli-arxx5hbs.js";
+import"./cli-nj73990n.js";
 import"./cli-c2k4xxaw.js";
 
 // src/core/integrations/wandb/upload.ts

package/build/{utils-cjrz64pc.js → utils-yqdepzr3.js}

@@ -1,12 +1,12 @@
-import"./cli-fy6vh2a7.js";
-import"./cli-c05y640n.js";
+import"./cli-0ry9v2cb.js";
+import"./cli-0cwdrrq7.js";
 import {
   init_types
 } from "./cli-3gt761d2.js";
 import {
   AVAILABLE_MODELS,
   init_ai
-} from "./cli-dpsw2fe6.js";
+} from "./cli-nj73990n.js";
 import"./cli-c2k4xxaw.js";
 
 // src/core/providers/utils.ts

package/package.json

@@ -344,5 +344,5 @@
     "tsc": "tsc --noEmit"
   },
   "type": "module",
-  "version": "2.6.1"
+  "version": "2.7.0-canary.6d9d1e0d"
 }

package/src/core/agents/offSecAgent/offensiveSecurityAgent.test.ts

@@ -361,6 +361,86 @@ describe("spawned-agent usage callbacks", () => {
 });
 
 describe("auxiliary model events", () => {
+  it("persists prepared context instead of restoring a fitted-away prefix", async () => {
+    streamResponseCalls.length = 0;
+    const rootPath = mkdtempSync(join(tmpdir(), "apex-fitted-history-"));
+    try {
+      const agent = new OffensiveSecurityAgent({
+        prompt: "test",
+        model: "test-model",
+        messages: [{ role: "user", content: "old large prefix" }],
+        session: { id: "ses_fitted_history", rootPath },
+        activeTools: [],
+        sandbox: {},
+      } as never);
+      void agent.streamResult;
+      const call = streamResponseCalls[0] as {
+        onContextPrepared: (context: {
+          messages: Array<{ role: string; content: unknown }>;
+          responseMessageOffset: number;
+        }) => void;
+        onStepFinish: (event: unknown) => Promise<void>;
+      };
+      const firstStep = [
+        { role: "assistant", content: "first call" },
+        { role: "tool", content: "full first result" },
+      ];
+      const cachedSystem = {
+        role: "system",
+        content: "cached effective system prompt",
+        providerOptions: {
+          anthropic: { cacheControl: { type: "ephemeral" } },
+        },
+      };
+      const historySystem = {
+        role: "system",
+        content: "caller-supplied history instruction",
+      };
+      call.onContextPrepared({
+        messages: [
+          cachedSystem,
+          cachedSystem,
+          historySystem,
+          { role: "user", content: "fitted prefix" },
+        ],
+        responseMessageOffset: 0,
+      });
+      await call.onStepFinish({
+        response: { id: "step-1", messages: firstStep },
+        usage: { inputTokens: 10, outputTokens: 2 },
+      });
+
+      const compacted = [
+        historySystem,
+        { role: "user", content: "fitted prefix" },
+        { role: "assistant", content: "first call" },
+        { role: "tool", content: "short first result" },
+      ];
+      call.onContextPrepared({
+        messages: [cachedSystem, cachedSystem, ...compacted],
+        responseMessageOffset: 2,
+      });
+      const secondStep = [
+        { role: "assistant", content: "second call" },
+        { role: "tool", content: "second result" },
+      ];
+      await call.onStepFinish({
+        response: {
+          id: "step-2",
+          messages: [...firstStep, ...secondStep],
+        },
+        usage: { inputTokens: 10, outputTokens: 2 },
+      });
+
+      const writer = (agent as unknown as { writer: AgentMessageWriter })
+        .writer;
+      expect(writer.latest).toEqual([...compacted, ...secondStep]);
+      writer.cancelTimer();
+    } finally {
+      rmSync(rootPath, { recursive: true, force: true });
+    }
+  });
+
   it("keeps the last complete message snapshot while forwarding usage", async () => {
     streamResponseCalls.length = 0;
     traceRecordStepCalls.length = 0;
@@ -2806,6 +2886,11 @@ describe("trace identity and root IO", () => {
 describe("contextRecorder integration", () => {
   const streamTextChunk = { type: "text-delta", id: "t1", delta: "hi" };
   const CANONICAL = [
+    {
+      role: "system",
+      content: "cached effective system prompt",
+      providerOptions: { anthropic: { cacheControl: { type: "ephemeral" } } },
+    },
     { role: "user", content: "recorded prompt" },
     { role: "assistant", content: "recorded answer" },
   ] as never[];
@@ -2874,14 +2959,13 @@ describe("contextRecorder integration", () => {
     expect(streamResponseCalls[0]?.inferenceRecorder).toBe(inferenceRecorder);
 
     const stepEvent = {
-      response: { id: "resp_1", messages: CANONICAL.slice(1) },
+      response: { id: "resp_1", messages: CANONICAL.slice(2) },
       usage: {},
     };
     await streamOpts.onStepFinish(stepEvent);
 
-    // Writer snapshot equals canonical latest() exactly — the step's
-    // response.messages are already part of the committed context, so the
-    // projection must not re-prepend a base or duplicate them.
+    // The cached system message is transport-only; it must not enter the
+    // transcript reloaded with a fresh system prompt on the next turn.
     const writer = agent["writer" as keyof typeof agent] as unknown as {
       waitForPendingWrites: () => Promise<void>;
       latest: unknown[] | null;
@@ -2894,6 +2978,9 @@ describe("contextRecorder integration", () => {
     await streamOpts.onFinish(finishEvent);
 
     expect(recorder.latest).toHaveBeenCalled();
-    expect((captured as unknown[]).length).toBe(CANONICAL.length);
+    expect(captured).toEqual(CANONICAL.slice(1));
+    expect(
+      JSON.parse(readFileSync(join(rootPath, "messages.json"), "utf8")),
+    ).toEqual(CANONICAL.slice(1));
   });
 });

package/src/core/agents/offSecAgent/offensiveSecurityAgent.ts

@@ -759,16 +759,36 @@ export class OffensiveSecurityAgent<TResult = void> {
     }
     this.messagesPath = join(messagesDir, "messages.json");
 
-    // Mutable so that summarization can clear stale history.
-    const initialMessagesRef: { current: ModelMessage[] } = {
-      current: input.messages
-        ? [...input.messages]
-        : [
-            {
-              role: "user" as const,
-              content: [{ type: "text", text: input.prompt }],
-            },
-          ],
+    const preparedContextRef = {
+      current: {
+        messages: input.messages
+          ? [...input.messages]
+          : [
+              {
+                role: "user" as const,
+                content: [{ type: "text" as const, text: input.prompt }],
+              },
+            ],
+        responseMessageOffset: 0,
+      },
+    };
+    const legacyMessages = (responseMessages: ModelMessage[]) => [
+      ...preparedContextRef.current.messages,
+      ...responseMessages.slice(
+        preparedContextRef.current.responseMessageOffset,
+      ),
+    ];
+    const persistedMessages = (messages: ModelMessage[]) => {
+      // Cache-marked system messages are transport context; the next turn
+      // supplies a fresh system prompt and must not replay saved copies.
+      let first = 0;
+      while (
+        messages[first]?.role === "system" &&
+        messages[first]?.providerOptions
+      ) {
+        first++;
+      }
+      return first === 0 ? messages : messages.slice(first);
     };
 
     // Agent-local persistence: debounce, latest snapshot, and the
@@ -861,6 +881,12 @@ export class OffensiveSecurityAgent<TResult = void> {
         usageRecorder: input.usageRecorder,
         contextRecorder: input.contextRecorder,
         inferenceRecorder: input.inferenceRecorder,
+        onContextPrepared: (context) => {
+          preparedContextRef.current = {
+            messages: [...context.messages],
+            responseMessageOffset: context.responseMessageOffset,
+          };
+        },
         // Per-subagent so the overflow tool-result dumps land next to this
         // agent's messages.json (`subagents/{id}/tool-results/`) and a host
         // can reclaim them when the subagent finishes, instead of piling up
@@ -880,16 +906,10 @@ export class OffensiveSecurityAgent<TResult = void> {
             return;
           }
 
-          // Recorded runs project the canonical committed context; the
-          // legacy path reconstructs from the (possibly stale after a fit)
-          // initial prefix. Canonical latest() already includes this step's
-          // messages — committing happens upstream in the ai layer's
-          // onStepFinish wrapper, before this user callback runs.
-          const canonical = input.contextRecorder?.latest() ?? [
-            ...initialMessagesRef.current,
-            ...event.response.messages,
-          ];
-          this.writer.setLatest(canonical);
+          const canonical =
+            input.contextRecorder?.latest() ??
+            legacyMessages(event.response.messages);
+          this.writer.setLatest(persistedMessages(canonical));
           schedulePersist();
           traceWriter.recordStep(
             event.response.messages as ModelMessage[],
@@ -905,9 +925,10 @@ export class OffensiveSecurityAgent<TResult = void> {
           await input.onStepFinish?.(event);
         },
         onSummarized: () => {
-          // Context was reset by summarization — discard the old history so
-          // subsequent onStepFinish writes only persist post-summary messages.
-          initialMessagesRef.current = [];
+          preparedContextRef.current = {
+            messages: [],
+            responseMessageOffset: 0,
+          };
           traceWriter.markSummarized();
         },
         onFinish: async (event) => {
@@ -915,11 +936,11 @@ export class OffensiveSecurityAgent<TResult = void> {
           this.writer.cancelTimer();
           // Skip if the interrupted-step finalizer already wrote the abort snapshot.
           if (!this.writer.syntheticsPersisted) {
-            const finalMessages = input.contextRecorder?.latest() ??
-              this.writer.latest ?? [
-                ...initialMessagesRef.current,
-                ...event.response.messages,
-              ];
+            const finalMessages = persistedMessages(
+              input.contextRecorder?.latest() ??
+                this.writer.latest ??
+                legacyMessages(event.response.messages),
+            );
             this.writer.setLatest(finalMessages);
             await this.writer.enqueueWrite(finalMessages).catch(() => {});
           }