@pensar/apex 0.0.101 → 0.0.103-canary.29795a63

package/README.md

@@ -18,14 +18,6 @@
 
 ## Installation
 
-### Prerequisites
-
-- **API Key** for your chosen AI provider
-
-After installing, run `pensar doctor` to check for optional dependencies (like nmap) and install them.
-
-### Install Apex
-
 #### macOS / Linux (Quick Install)
 
 ```bash
@@ -42,7 +34,7 @@ brew install apex
 #### Windows (PowerShell)
 
 ```powershell
-irm https://pensarai.com/apex.ps1 | iex
+irm https://www.pensarai.com/apex.ps1 | iex
 ```
 
 #### npm
@@ -51,27 +43,6 @@ irm https://pensarai.com/apex.ps1 | iex
 npm install -g @pensar/apex
 ```
 
-### Configuration
-
-Set your AI provider API key as an environment variable:
-
-```bash
-export ANTHROPIC_API_KEY="your-api-key-here"
-# or for other providers:
-export OPENAI_API_KEY="your-api-key-here"
-export OPENROUTER_API_KEY="your-api-key-here"
-
-# AWS Bedrock (bearer token auth):
-export BEDROCK_API_KEY="your-bearer-token"
-export AWS_REGION="us-east-1"
-
-# AWS Bedrock (IAM credentials):
-export AWS_ACCESS_KEY_ID="..."
-export AWS_SECRET_ACCESS_KEY="..."
-export AWS_SESSION_TOKEN="..."  # optional, for temporary credentials
-export AWS_REGION="us-east-1"
-```
-
 ## Usage
 
 Run Apex:

package/bin/pensar.js

@@ -73,6 +73,26 @@ if (command === "benchmark") {
   process.argv = [process.argv[0], uninstallPath, ...args.slice(1)];
 
   await import(uninstallPath);
+} else if (command === "projects") {
+  const p = join(__dirname, "..", "build", "projects.js");
+  process.argv = [process.argv[0], p, ...args.slice(1)];
+  await import(p);
+} else if (command === "pentests") {
+  const p = join(__dirname, "..", "build", "pentests.js");
+  process.argv = [process.argv[0], p, ...args.slice(1)];
+  await import(p);
+} else if (command === "issues") {
+  const p = join(__dirname, "..", "build", "issues.js");
+  process.argv = [process.argv[0], p, ...args.slice(1)];
+  await import(p);
+} else if (command === "fixes") {
+  const p = join(__dirname, "..", "build", "fixes.js");
+  process.argv = [process.argv[0], p, ...args.slice(1)];
+  await import(p);
+} else if (command === "logs") {
+  const p = join(__dirname, "..", "build", "logs.js");
+  process.argv = [process.argv[0], p, ...args.slice(1)];
+  await import(p);
 } else if (command === "upgrade" || command === "update") {
   const currentVersion = getCurrentVersion();
   console.log(`Current version: v${currentVersion}`);
@@ -109,6 +129,21 @@ if (command === "benchmark") {
   console.log(
     "  pensar auth         Connect to Pensar Console for managed inference"
   );
+  console.log(
+    "  pensar projects     List workspace projects"
+  );
+  console.log(
+    "  pensar pentests     List and manage pentests"
+  );
+  console.log(
+    "  pensar issues       List and manage security issues"
+  );
+  console.log(
+    "  pensar fixes        View security fixes"
+  );
+  console.log(
+    "  pensar logs         View agent execution logs"
+  );
   console.log();
   console.log("Options:");
   console.log("  -h, --help         Show this help message");
@@ -226,6 +261,14 @@ if (command === "benchmark") {
   console.log("  pensar auth");
   console.log("  pensar auth status");
   console.log("  pensar auth logout");
+  console.log();
+  console.log("Console API:");
+  console.log("  pensar projects");
+  console.log("  pensar pentests <projectId>");
+  console.log("  pensar issues <projectId>");
+  console.log("  pensar issues get <issueId>");
+  console.log("  pensar fixes <issueId>");
+  console.log("  pensar logs <issueId>");
 } else if (args.length === 0) {
   // No command specified, run the TUI
   const appPath = join(__dirname, "..", "build", "index.js");

package/build/auth.js

@@ -8,7 +8,7 @@ import fs from "fs/promises";
 // package.json
 var package_default = {
   name: "@pensar/apex",
-  version: "0.0.101",
+  version: "0.0.103-canary.29795a63",
   description: "AI-powered penetration testing CLI tool with terminal UI",
   module: "src/tui/index.tsx",
   main: "build/index.js",

package/build/index.js

@@ -31880,12 +31880,6 @@ var init_openrouter = __esm(() => {
 var PENSAR_MODELS;
 var init_pensar = __esm(() => {
   PENSAR_MODELS = [
-    {
-      id: "pensar:anthropic.claude-opus-4-6-v1",
-      name: "Claude Opus 4.6 (Pensar)",
-      provider: "pensar",
-      contextLength: 200000
-    },
     {
       id: "pensar:anthropic.claude-sonnet-4-5-20250929-v1:0",
       name: "Claude Sonnet 4.5 (Pensar)",
@@ -31977,7 +31971,7 @@ var package_default2;
 var init_package = __esm(() => {
   package_default2 = {
     name: "@pensar/apex",
-    version: "0.0.101",
+    version: "0.0.103-canary.29795a63",
     description: "AI-powered penetration testing CLI tool with terminal UI",
     module: "src/tui/index.tsx",
     main: "build/index.js",
@@ -89913,6 +89907,7 @@ function convertMessagesToUI(messages, baseTime) {
           const input = part.input;
           const toolDescription = typeof input?.toolCallDescription === "string" ? input.toolCallDescription : part.toolName || "tool";
           const result = part.toolCallId ? toolResults.get(part.toolCallId) : undefined;
+          const cancelled = typeof result === "string" && result.toLowerCase().includes("cancelled");
           uiMessages.push({
             role: "tool",
             content: toolDescription,
@@ -89921,7 +89916,7 @@ function convertMessagesToUI(messages, baseTime) {
             toolName: part.toolName,
             args: input,
             result,
-            status: "completed"
+            status: cancelled ? "error" : "completed"
           });
         }
       }
@@ -107298,9 +107293,9 @@ var init_executeCommand = __esm(() => {
   init_dist5();
   init_zod();
   executeCommandInputSchema = exports_external.object({
+    toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing (e.g., 'Scanning for open ports on target')"),
     command: exports_external.string().describe("The shell command to execute"),
-    timeout: exports_external.number().optional().describe("Timeout in seconds. If omitted, the command runs until completion or abort."),
-    toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing (e.g., 'Scanning for open ports on target')")
+    timeout: exports_external.number().optional().describe("Timeout in seconds. If omitted, the command runs until completion or abort.")
   });
 });
 
@@ -194814,7 +194809,8 @@ var init_operator = __esm(() => {
 
 // src/core/agents/offSecAgent/offensiveSecurityAgent.ts
 import { join as join22 } from "path";
-import { writeFileSync as writeFileSync15, mkdirSync as mkdirSync10, existsSync as existsSync21 } from "fs";
+import { mkdirSync as mkdirSync10, existsSync as existsSync21 } from "fs";
+import { writeFile as writeFile3 } from "fs/promises";
 function wrapToolsWithApprovalGate(tools, gate) {
   const wrapped = {};
   for (const [name26, coreTool] of Object.entries(tools)) {
@@ -194968,13 +194964,11 @@ var init_offensiveSecurityAgent = __esm(() => {
         stopWhen,
         toolChoice: "auto",
         onStepFinish: (event) => {
-          try {
-            const allMessages = [
-              ...initialMessagesRef.current,
-              ...event.response.messages
-            ];
-            writeFileSync15(messagesPath, JSON.stringify(allMessages, null, 2));
-          } catch {}
+          const allMessages = [
+            ...initialMessagesRef.current,
+            ...event.response.messages
+          ];
+          writeFile3(messagesPath, JSON.stringify(allMessages, null, 2)).catch(() => {});
           input.onStepFinish?.(event);
         },
         onSummarized: () => {
@@ -195498,7 +195492,7 @@ var init_agent4 = __esm(() => {
 });
 
 // src/core/session/execution-metrics.ts
-import { existsSync as existsSync24, readFileSync as readFileSync11, writeFileSync as writeFileSync16 } from "fs";
+import { existsSync as existsSync24, readFileSync as readFileSync11, writeFileSync as writeFileSync15 } from "fs";
 import { join as join25 } from "path";
 function toNonNegativeInteger(value) {
   const n = Number(value);
@@ -195544,7 +195538,7 @@ function writeSessionJsonTokenTotals(sessionRootPath, tokenUsage) {
     const parsed = JSON.parse(readFileSync11(path6, "utf-8"));
     parsed.tokensIn = tokenUsage.inputTokens;
     parsed.tokensOut = tokenUsage.outputTokens;
-    writeFileSync16(path6, JSON.stringify(parsed, null, 2));
+    writeFileSync15(path6, JSON.stringify(parsed, null, 2));
   } catch {}
 }
 function writeExecutionMetrics(input) {
@@ -195559,7 +195553,7 @@ function writeExecutionMetrics(input) {
     runtime: input.runtime ?? existing?.runtime,
     updatedAt: new Date().toISOString()
   };
-  writeFileSync16(metricsPath(input.sessionRootPath), JSON.stringify(next, null, 2), "utf-8");
+  writeFileSync15(metricsPath(input.sessionRootPath), JSON.stringify(next, null, 2), "utf-8");
   writeSessionJsonTokenTotals(input.sessionRootPath, next.tokenUsage);
   return next;
 }
@@ -196154,7 +196148,7 @@ __export(exports_pentest, {
   runPentestSwarm: () => runPentestSwarm,
   DEFAULT_CONCURRENCY: () => DEFAULT_CONCURRENCY4
 });
-import { existsSync as existsSync25, readdirSync as readdirSync5, readFileSync as readFileSync12, writeFileSync as writeFileSync17 } from "fs";
+import { existsSync as existsSync25, readdirSync as readdirSync5, readFileSync as readFileSync12, writeFileSync as writeFileSync16 } from "fs";
 import { join as join26 } from "path";
 function addUsageTotals(totals, usage) {
   if (!usage)
@@ -196324,8 +196318,8 @@ async function runPentestWorkflow(input) {
       });
       const mdPath2 = join26(session.rootPath, REPORT_FILENAME_MD);
       const jsonPath2 = join26(session.rootPath, REPORT_FILENAME_JSON);
-      writeFileSync17(mdPath2, renderMarkdown(report2));
-      writeFileSync17(jsonPath2, renderJson(report2));
+      writeFileSync16(mdPath2, renderMarkdown(report2));
+      writeFileSync16(jsonPath2, renderJson(report2));
       return {
         findings: [],
         findingsPath: session.findingsPath,
@@ -196364,8 +196358,8 @@ async function runPentestWorkflow(input) {
     });
     const mdPath = join26(session.rootPath, REPORT_FILENAME_MD);
     const jsonPath = join26(session.rootPath, REPORT_FILENAME_JSON);
-    writeFileSync17(mdPath, renderMarkdown(report));
-    writeFileSync17(jsonPath, renderJson(report));
+    writeFileSync16(mdPath, renderMarkdown(report));
+    writeFileSync16(jsonPath, renderJson(report));
     return {
       findings,
       findingsPath: session.findingsPath,
@@ -273074,7 +273068,7 @@ var useTerminalDimensions = () => {
 };
 
 // src/tui/index.tsx
-var import_react88 = __toESM(require_react(), 1);
+var import_react90 = __toESM(require_react(), 1);
 
 // src/tui/components/footer.tsx
 import os6 from "os";
@@ -274517,7 +274511,27 @@ function CommandProvider({
         description: skill.description || "Skill"
       });
     }
-    return options;
+    const priorityOrder = [
+      "/pentest",
+      "/operator",
+      "/auth",
+      "/models",
+      "/sessions",
+      "/themes",
+      "/help"
+    ];
+    return options.sort((a, b2) => {
+      const aIndex = priorityOrder.indexOf(a.value);
+      const bIndex = priorityOrder.indexOf(b2.value);
+      if (aIndex !== -1 && bIndex !== -1) {
+        return aIndex - bIndex;
+      }
+      if (aIndex !== -1)
+        return -1;
+      if (bIndex !== -1)
+        return 1;
+      return a.value.localeCompare(b2.value);
+    });
   }, [router, skills]);
   const executeCommand = import_react17.useCallback(async (input) => {
     return await router.execute(input, ctx3);
@@ -275734,6 +275748,40 @@ function computeTab(suggestions, selectedIndex) {
 function shouldResetHistory(historyIndex, isNavigatingHistory) {
   return historyIndex !== -1 && !isNavigatingHistory;
 }
+function computeVisibleWindow(suggestions, selectedIndex, maxVisible) {
+  if (suggestions.length === 0) {
+    return {
+      start: 0,
+      end: 0,
+      visibleSuggestions: [],
+      hasMore: false,
+      hasMoreBelow: false
+    };
+  }
+  if (suggestions.length <= maxVisible) {
+    return {
+      start: 0,
+      end: suggestions.length,
+      visibleSuggestions: suggestions,
+      hasMore: false,
+      hasMoreBelow: false
+    };
+  }
+  const safeSelectedIndex = Math.max(0, selectedIndex);
+  let start = Math.max(0, safeSelectedIndex - Math.floor(maxVisible / 2));
+  let end = start + maxVisible;
+  if (end > suggestions.length) {
+    end = suggestions.length;
+    start = Math.max(0, end - maxVisible);
+  }
+  return {
+    start,
+    end,
+    visibleSuggestions: suggestions.slice(start, end),
+    hasMore: start > 0,
+    hasMoreBelow: end < suggestions.length
+  };
+}
 
 // src/tui/components/shared/use-paste-extmarks.ts
 var import_react30 = __toESM(require_react(), 1);
@@ -275827,6 +275875,7 @@ var PromptInput = import_react31.forwardRef(function PromptInput2({
   enableAutocomplete = false,
   autocompleteOptions = [],
   maxSuggestions = 10,
+  maxVisibleSuggestions = 6,
   enableCommands = false,
   onCommandExecute,
   commandHistory = [],
@@ -275992,34 +276041,72 @@ var PromptInput = import_react31.forwardRef(function PromptInput2({
       setHistoryIndex(-1);
     }
   };
+  const windowedView = import_react31.useMemo(() => computeVisibleWindow(suggestions, selectedSuggestionIndex, maxVisibleSuggestions), [suggestions, selectedSuggestionIndex, maxVisibleSuggestions]);
   const suggestionsBox = suggestions.length > 0 && /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
     flexDirection: "column",
     ...autocompletePlacement === "above" ? { marginBottom: 1 } : { marginTop: 1 },
-    children: suggestions.map((suggestion, index) => {
-      const isSelected = index === selectedSuggestionIndex;
-      return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
+    children: [
+      windowedView.hasMore && /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
         flexDirection: "row",
         gap: 1,
         children: [
           /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
-            fg: isSelected ? colors2.primary : colors2.textMuted,
-            children: isSelected ? " ▸" : "  "
+            fg: colors2.textMuted,
+            children: "  ↑"
           }, undefined, false, undefined, this),
           /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
-            fg: isSelected ? colors2.text : colors2.textMuted,
-            children: suggestion.label
+            fg: colors2.textMuted,
+            children: [
+              windowedView.start,
+              " more above..."
+            ]
+          }, undefined, true, undefined, this)
+        ]
+      }, undefined, true, undefined, this),
+      windowedView.visibleSuggestions.map((suggestion, windowIndex) => {
+        const actualIndex = windowedView.start + windowIndex;
+        const isSelected = actualIndex === selectedSuggestionIndex;
+        return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
+          flexDirection: "row",
+          gap: 1,
+          children: [
+            /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+              fg: isSelected ? colors2.primary : colors2.textMuted,
+              children: isSelected ? " ▸" : "  "
+            }, undefined, false, undefined, this),
+            /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+              fg: isSelected ? colors2.text : colors2.textMuted,
+              children: suggestion.label
+            }, undefined, false, undefined, this),
+            suggestion.description && /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+              fg: colors2.textMuted,
+              children: [
+                " ",
+                suggestion.description
+              ]
+            }, undefined, true, undefined, this)
+          ]
+        }, suggestion.value, true, undefined, this);
+      }),
+      windowedView.hasMoreBelow && /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
+        flexDirection: "row",
+        gap: 1,
+        children: [
+          /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+            fg: colors2.textMuted,
+            children: "  ↓"
           }, undefined, false, undefined, this),
-          suggestion.description && /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+          /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
             fg: colors2.textMuted,
             children: [
-              " ",
-              suggestion.description
+              suggestions.length - windowedView.end,
+              " more below..."
             ]
           }, undefined, true, undefined, this)
         ]
-      }, suggestion.value, true, undefined, this);
-    })
-  }, undefined, false, undefined, this);
+      }, undefined, true, undefined, this)
+    ]
+  }, undefined, true, undefined, this);
   return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
     flexDirection: "column",
     children: [
@@ -279763,7 +279850,7 @@ function ResponsibleUseDisclosure({
       }, undefined, false, undefined, this),
       /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
         fg: colors2.text,
-        children: "This penetration testing tool is designedfor AUTHORIZED security testing only."
+        children: "This penetration testing tool is designed for AUTHORIZED security testing only."
       }, undefined, false, undefined, this),
       /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
         flexDirection: "column",
@@ -279806,7 +279893,7 @@ function ResponsibleUseDisclosure({
         flexDirection: "column",
         children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
           fg: colors2.error,
-          children: "Unauthorized access to computer systems is illegaland may result in criminal prosecution."
+          children: "Unauthorized access to computer systems is illegal and may result in criminal prosecution."
         }, undefined, false, undefined, this)
       }, undefined, false, undefined, this),
       /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
@@ -280113,18 +280200,23 @@ function HelpDialog() {
     });
   };
   useKeyboard((evt) => {
+    if (evt.name === "escape") {
+      evt.preventDefault();
+      if (showDetail) {
+        setShowDetail(false);
+      } else {
+        handleClose();
+      }
+      return;
+    }
     if (showDetail) {
-      if (evt.name === "escape" || evt.name === "return") {
+      if (evt.name === "return") {
         evt.preventDefault();
         setShowDetail(false);
       }
       return;
     }
     switch (evt.name) {
-      case "escape":
-        evt.preventDefault();
-        handleClose();
-        break;
       case "up":
       case "k":
         evt.preventDefault();
@@ -281127,6 +281219,98 @@ var actionsByKey = new Map(allActions.map((action) => [action.key, action]));
 var actionsById = new Map(allActions.map((action) => [action.id, action]));
 // src/tui/keybindings/keybind.tsx
 var LeaderKeyContext = import_react62.createContext(null);
+// src/tui/terminal-focus.ts
+var bracketedFocusModeEnabled = false;
+function setupTerminalFocusHandling(renderer, options = {}) {
+  const { onTerminalFocus, debug = false } = options;
+  const log2 = (...args) => {
+    if (debug)
+      console.error("[TerminalFocus]", ...args);
+  };
+  const enableBracketedFocus = () => {
+    if (process.stdout.isTTY) {
+      process.stdout.write("\x1B[?1004h");
+      bracketedFocusModeEnabled = true;
+      log2("Enabled bracketed focus mode");
+    }
+  };
+  const disableBracketedFocus = () => {
+    if (process.stdout.isTTY && bracketedFocusModeEnabled) {
+      process.stdout.write("\x1B[?1004l");
+      bracketedFocusModeEnabled = false;
+      log2("Disabled bracketed focus mode");
+    }
+  };
+  const showCursor = () => {
+    if (process.stdout.isTTY) {
+      process.stdout.write("\x1B[?25h");
+      log2("Showed cursor");
+    }
+  };
+  const handleFocusIn = () => {
+    log2("Terminal gained focus");
+    showCursor();
+    renderer.requestRender();
+    if (onTerminalFocus) {
+      setTimeout(() => {
+        onTerminalFocus();
+        log2("Re-focused prompt input");
+      }, 10);
+    }
+  };
+  const handleFocusOut = () => {
+    log2("Terminal lost focus");
+  };
+  const handleSigCont = () => {
+    log2("Received SIGCONT (terminal resumed)");
+    showCursor();
+    renderer.requestRender();
+    if (onTerminalFocus) {
+      setTimeout(() => {
+        onTerminalFocus();
+        log2("Re-focused prompt input after SIGCONT");
+      }, 10);
+    }
+  };
+  let stdinListenerActive = false;
+  const handleStdinData = (data) => {
+    const str = data.toString();
+    if (str.includes("\x1B[I")) {
+      handleFocusIn();
+    }
+    if (str.includes("\x1B[O")) {
+      handleFocusOut();
+    }
+  };
+  const setupListeners = () => {
+    enableBracketedFocus();
+    showCursor();
+    process.on("SIGCONT", handleSigCont);
+    if (process.stdin.isTTY && !stdinListenerActive) {
+      process.stdin.on("data", handleStdinData);
+      stdinListenerActive = true;
+      log2("Set up stdin listener for bracketed focus events");
+    }
+  };
+  const cleanup = () => {
+    log2("Cleaning up terminal focus handling");
+    disableBracketedFocus();
+    process.off("SIGCONT", handleSigCont);
+    if (stdinListenerActive) {
+      process.stdin.off("data", handleStdinData);
+      stdinListenerActive = false;
+    }
+  };
+  setupListeners();
+  return cleanup;
+}
+function cleanupTerminalFocusMode() {
+  if (process.stdout.isTTY && bracketedFocusModeEnabled) {
+    process.stdout.write("\x1B[?1004l");
+    bracketedFocusModeEnabled = false;
+  }
+}
+
 // src/tui/keybindings/registry.ts
 function createKeybindings(deps) {
   const {
@@ -281155,6 +281339,7 @@ function createKeybindings(deps) {
         const now2 = Date.now();
         const lastPress = ctrlCPressTime;
         if (lastPress && now2 - lastPress < 1000) {
+          cleanupTerminalFocusMode();
           renderer.destroy();
           process.exit(0);
         } else {
@@ -281179,9 +281364,10 @@ function createKeybindings(deps) {
           return;
         }
         const isHome = route.data.type === "base" && route.data.path === "home";
+        const isHelp = route.data.type === "base" && route.data.path === "help";
         const isOperator = route.data.type === "base" && route.data.path === "operator";
         const isSession = route.data.type === "pentest" || route.data.type === "operator";
-        if (!isHome && !isOperator && !isSession) {
+        if (!isHome && !isHelp && !isOperator && !isSession) {
           route.navigate({
             type: "base",
             path: "home"
@@ -282925,6 +283111,15 @@ function getToolSummary(toolName, args) {
   const firstArg = Object.entries(args).filter(([k3]) => k3 !== "toolCallDescription").map(([, v3]) => typeof v3 === "string" ? v3 : JSON.stringify(v3)).find((v3) => v3 && v3.length > 0);
   return firstArg ? `${toolName} ${String(firstArg).slice(0, 50)}` : toolName;
 }
+function getToolDisplayLabel(toolName, args, options = {}) {
+  if (options.preferDescription && toolName === "execute_command") {
+    const description = args.toolCallDescription;
+    if (typeof description === "string" && description.trim().length > 0) {
+      return description.trim();
+    }
+  }
+  return getToolSummary(toolName, args);
+}
 function getArgsPreview(toolName, args, maxLength = 60) {
   const filteredArgs = Object.entries(args).filter(([k3]) => !k3.toLowerCase().includes("description"));
   if (filteredArgs.length === 0)
@@ -283758,7 +283953,9 @@ var ToolRenderer = import_react68.memo(function ToolRenderer2({
   const isCompleted = message.status === "completed";
   const isError = message.status === "error";
   const { toolName, args, result, logs, subagentLogs } = message;
-  const summary = getToolSummary(toolName, args);
+  const summary = getToolDisplayLabel(toolName, args, {
+    preferDescription: isPending
+  });
   const resultDisplay = isCompleted || isError ? getResultSummary(result, toolName, args) : null;
   const borderColor = isError ? colors2.error : isPending ? colors2.warning : colors2.info;
   const hasSubagentLogs = subagentLogs && Object.keys(subagentLogs).length > 0;
@@ -286146,7 +286343,7 @@ function MessageList({
                   }, undefined, false, undefined, this),
                   /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
                     fg: colors2.textMuted,
-                    children: " - Cycle approval on/off"
+                    children: " - Switch between Plan or Default mode"
                   }, undefined, false, undefined, this)
                 ]
               }, undefined, true, undefined, this)
@@ -286749,7 +286946,7 @@ function navigateDown(selectedIndex, queueLength) {
 }
 
 // src/tui/components/operator-dashboard/index.tsx
-import { existsSync as existsSync27, readFileSync as readFileSync14 } from "fs";
+import { existsSync as existsSync27, readFileSync as readFileSync14, writeFileSync as writeFileSync17 } from "fs";
 import { join as join28 } from "path";
 function OperatorDashboard({
   sessionId,
@@ -286789,6 +286986,8 @@ function OperatorDashboard({
     return filterOperatorAutocomplete(allAutocompleteOptions, skillSlugs);
   }, [allAutocompleteOptions, skills]);
   const [session, setSession] = import_react79.useState(null);
+  const sessionRef = import_react79.useRef(null);
+  sessionRef.current = session;
   const [loading, setLoading] = import_react79.useState(true);
   const [error40, setError] = import_react79.useState(null);
   const pendingNameRef = import_react79.useRef(null);
@@ -286800,6 +286999,8 @@ function OperatorDashboard({
   });
   const commandCancelledRef = import_react79.useRef(false);
   const [messages, setMessages] = import_react79.useState([]);
+  const displayMessagesRef = import_react79.useRef([]);
+  displayMessagesRef.current = messages;
   const textRef = import_react79.useRef("");
   const conversationRef = import_react79.useRef([]);
   const [inputValue, setInputValue] = import_react79.useState("");
@@ -287183,6 +287384,12 @@ function OperatorDashboard({
       { role: "user", content: prompt }
     ];
     conversationRef.current = nextMessages;
+    if (sessionRef.current) {
+      try {
+        const mp = join28(sessionRef.current.rootPath, "messages.json");
+        writeFileSync17(mp, JSON.stringify(nextMessages, null, 2));
+      } catch {}
+    }
     const onStepFinish = (event) => {
       const nextUsage = accumulateTokenUsage(tokenUsageRef.current, event.usage?.inputTokens ?? 0, event.usage?.outputTokens ?? 0);
       if (!nextUsage)
@@ -287200,22 +287407,32 @@ function OperatorDashboard({
     };
     const callbacks = {
       onTextDelta: (d3) => {
+        if (gen !== generationRef.current)
+          return;
         setThinking(false);
         appendText(d3.text);
       },
       onToolCallStreaming: (d3) => {
+        if (gen !== generationRef.current)
+          return;
         setThinking(false);
         addStreamingToolCall(d3.toolCallId, d3.toolName);
       },
       onToolCallDelta: (d3) => {
+        if (gen !== generationRef.current)
+          return;
         appendToolCallDelta(d3.toolCallId, d3.argsTextDelta);
       },
       onToolCall: (d3) => {
+        if (gen !== generationRef.current)
+          return;
         setThinking(false);
         commandCancelledRef.current = false;
         addToolCall(d3.toolCallId, d3.toolName, d3.input);
       },
       onToolResult: (d3) => {
+        if (gen !== generationRef.current)
+          return;
         flushCommandOutput();
         if (cmdFlushTimerRef.current) {
           clearInterval(cmdFlushTimerRef.current);
@@ -287275,6 +287492,8 @@ function OperatorDashboard({
       callbacks,
       onSessionReady: (s2) => {
         setSessionCwd(s2.rootPath);
+        sessionRef.current = s2;
+        setSession((prev) => prev ?? s2);
       }
     };
     try {
@@ -287520,19 +287739,61 @@ function OperatorDashboard({
     setQueuedMessages([]);
     queuedMessagesRef.current = [];
     setSelectedQueueIndex(-1);
+    approvalGateRef.current.denyAll();
     setStatus("idle");
     setThinking(false);
     setIsExecuting(false);
-    approvalGateRef.current.denyAll();
-    if (session) {
+    const activeSession = sessionRef.current;
+    if (activeSession) {
       try {
-        const messagesPath = join28(session.rootPath, "messages.json");
+        const messagesPath = join28(activeSession.rootPath, "messages.json");
         if (existsSync27(messagesPath)) {
           const raw = JSON.parse(readFileSync14(messagesPath, "utf-8"));
           if (Array.isArray(raw) && raw.length > 0) {
             conversationRef.current = sessions.getResumeMessages(raw);
           }
         }
+        const last = conversationRef.current[conversationRef.current.length - 1];
+        if (last?.role === "user") {
+          const partial2 = textRef.current.trim();
+          const pendingTools = displayMessagesRef.current.filter((m4) => isToolMessage(m4) && (m4.status === "pending" || m4.status === "streaming"));
+          const assistantContent = [
+            {
+              type: "text",
+              text: partial2 || "[Response interrupted by user.]"
+            }
+          ];
+          for (const t3 of pendingTools) {
+            assistantContent.push({
+              type: "tool-call",
+              toolCallId: t3.toolCallId,
+              toolName: t3.toolName,
+              input: t3.args ?? {}
+            });
+          }
+          conversationRef.current = [
+            ...conversationRef.current,
+            {
+              role: "assistant",
+              content: assistantContent
+            }
+          ];
+          if (pendingTools.length > 0) {
+            conversationRef.current = [
+              ...conversationRef.current,
+              {
+                role: "tool",
+                content: pendingTools.map((t3) => ({
+                  type: "tool-result",
+                  toolCallId: t3.toolCallId,
+                  toolName: t3.toolName ?? "unknown",
+                  output: "Cancelled by user."
+                }))
+              }
+            ];
+          }
+          writeFileSync17(join28(activeSession.rootPath, "messages.json"), JSON.stringify(conversationRef.current, null, 2));
+        }
       } catch {}
     }
     setMessages((prev) => {
@@ -287546,7 +287807,7 @@ function OperatorDashboard({
         }
       ];
     });
-  }, [session, setThinking, setIsExecuting]);
+  }, [setThinking, setIsExecuting]);
   const toggleApproval = import_react79.useCallback(() => {
     setOperatorState((prev) => {
       const newVal = !prev.requireApproval;
@@ -290935,74 +291196,92 @@ function setupAutoCopy(renderer, copyToClipboard) {
   });
 }
 
+// src/tui/components/terminal-focus-handler.tsx
+var import_react87 = __toESM(require_react(), 1);
+function TerminalFocusHandler() {
+  const { refocusPrompt } = useFocus();
+  const renderer = useRenderer();
+  import_react87.useEffect(() => {
+    const cleanup = setupTerminalFocusHandling(renderer, {
+      onTerminalFocus: refocusPrompt,
+      debug: false
+    });
+    return cleanup;
+  }, [renderer, refocusPrompt]);
+  return null;
+}
+
 // src/tui/index.tsx
 function App({ appConfig }) {
-  const [focusIndex, setFocusIndex] = import_react88.useState(0);
-  const [cwd, setCwd] = import_react88.useState(process.cwd());
-  const [ctrlCPressTime, setCtrlCPressTime] = import_react88.useState(null);
-  const [showExitWarning, setShowExitWarning] = import_react88.useState(false);
-  const [inputKey, setInputKey] = import_react88.useState(0);
-  const [showSessionsDialog, setShowSessionsDialog] = import_react88.useState(false);
-  const [showShortcutsDialog, setShowShortcutsDialog] = import_react88.useState(false);
-  const [showThemeDialog, setShowThemeDialog] = import_react88.useState(false);
-  const [showAuthDialog, setShowAuthDialog] = import_react88.useState(false);
-  const [showPentestDialog, setShowPentestDialog] = import_react88.useState(false);
-  const [pendingPentestFlags, setPendingPentestFlags] = import_react88.useState(undefined);
+  const [focusIndex, setFocusIndex] = import_react90.useState(0);
+  const [cwd, setCwd] = import_react90.useState(process.cwd());
+  const [ctrlCPressTime, setCtrlCPressTime] = import_react90.useState(null);
+  const [showExitWarning, setShowExitWarning] = import_react90.useState(false);
+  const [inputKey, setInputKey] = import_react90.useState(0);
+  const [showSessionsDialog, setShowSessionsDialog] = import_react90.useState(false);
+  const [showShortcutsDialog, setShowShortcutsDialog] = import_react90.useState(false);
+  const [showThemeDialog, setShowThemeDialog] = import_react90.useState(false);
+  const [showAuthDialog, setShowAuthDialog] = import_react90.useState(false);
+  const [showPentestDialog, setShowPentestDialog] = import_react90.useState(false);
+  const [pendingPentestFlags, setPendingPentestFlags] = import_react90.useState(undefined);
   const navigableItems = ["command-input"];
   return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ConfigProvider, {
     config: appConfig,
     children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(SessionProvider, {
       children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(RouteProvider, {
         children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(FocusProvider, {
-          children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(InputProvider, {
-            children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(DialogProvider, {
-              children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(AgentProvider, {
-                children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(CommandProvider, {
-                  onOpenSessionsDialog: () => setShowSessionsDialog(true),
-                  onOpenThemeDialog: () => setShowThemeDialog(true),
-                  onOpenAuthDialog: () => setShowAuthDialog(true),
-                  onOpenPentestDialog: (flags) => {
-                    setPendingPentestFlags(flags);
-                    setShowPentestDialog(true);
-                  },
-                  children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(KeybindingProvider, {
-                    deps: {
-                      ctrlCPressTime,
-                      setCtrlCPressTime,
-                      setShowExitWarning,
-                      setInputKey,
-                      setShowSessionsDialog,
-                      setShowShortcutsDialog,
-                      setFocusIndex,
-                      navigableItems
+          children: [
+            /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(TerminalFocusHandler, {}, undefined, false, undefined, this),
+            /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(InputProvider, {
+              children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(DialogProvider, {
+                children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(AgentProvider, {
+                  children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(CommandProvider, {
+                    onOpenSessionsDialog: () => setShowSessionsDialog(true),
+                    onOpenThemeDialog: () => setShowThemeDialog(true),
+                    onOpenAuthDialog: () => setShowAuthDialog(true),
+                    onOpenPentestDialog: (flags) => {
+                      setPendingPentestFlags(flags);
+                      setShowPentestDialog(true);
                     },
-                    children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(AppContent, {
-                      focusIndex,
-                      showSessionsDialog,
-                      setShowSessionsDialog,
-                      showShortcutsDialog,
-                      setShowShortcutsDialog,
-                      showThemeDialog,
-                      setShowThemeDialog,
-                      showAuthDialog,
-                      setShowAuthDialog,
-                      showPentestDialog,
-                      setShowPentestDialog,
-                      pendingPentestFlags,
-                      setPendingPentestFlags,
-                      cwd,
-                      setCtrlCPressTime,
-                      showExitWarning,
-                      setShowExitWarning,
-                      inputKey,
-                      setInputKey
+                    children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(KeybindingProvider, {
+                      deps: {
+                        ctrlCPressTime,
+                        setCtrlCPressTime,
+                        setShowExitWarning,
+                        setInputKey,
+                        setShowSessionsDialog,
+                        setShowShortcutsDialog,
+                        setFocusIndex,
+                        navigableItems
+                      },
+                      children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(AppContent, {
+                        focusIndex,
+                        showSessionsDialog,
+                        setShowSessionsDialog,
+                        showShortcutsDialog,
+                        setShowShortcutsDialog,
+                        showThemeDialog,
+                        setShowThemeDialog,
+                        showAuthDialog,
+                        setShowAuthDialog,
+                        showPentestDialog,
+                        setShowPentestDialog,
+                        pendingPentestFlags,
+                        setPendingPentestFlags,
+                        cwd,
+                        setCtrlCPressTime,
+                        showExitWarning,
+                        setShowExitWarning,
+                        inputKey,
+                        setInputKey
+                      }, undefined, false, undefined, this)
                     }, undefined, false, undefined, this)
                   }, undefined, false, undefined, this)
                 }, undefined, false, undefined, this)
               }, undefined, false, undefined, this)
             }, undefined, false, undefined, this)
-          }, undefined, false, undefined, this)
-        }, undefined, false, undefined, this)
+          ]
+        }, undefined, true, undefined, this)
       }, undefined, false, undefined, this)
     }, undefined, false, undefined, this)
   }, undefined, false, undefined, this);
@@ -291034,14 +291313,14 @@ function AppContent({
   const { toast } = useToast();
   const { refocusPrompt } = useFocus();
   const { setExternalDialogOpen } = useDialog();
-  import_react88.useEffect(() => {
+  import_react90.useEffect(() => {
     checkForUpdate().then(({ updateAvailable, currentVersion, latestVersion }) => {
       if (!updateAvailable)
         return;
       toast(`Update available: v${currentVersion} → v${latestVersion}. Run: pensar upgrade`, "warn", 8000);
     });
   }, []);
-  import_react88.useEffect(() => {
+  import_react90.useEffect(() => {
     if (route.data.type !== "base")
       return;
     if (!config3.data.responsibleUseAccepted && route.data.path !== "disclosure") {
@@ -291050,12 +291329,12 @@ function AppContent({
       route.navigate({ type: "base", path: "providers" });
     }
   }, [config3.data.responsibleUseAccepted, route.data]);
-  import_react88.useEffect(() => {
+  import_react90.useEffect(() => {
     if (showThemeDialog || showAuthDialog || showPentestDialog) {
       setExternalDialogOpen(true);
     }
   }, [showThemeDialog, showAuthDialog, showPentestDialog]);
-  import_react88.useEffect(() => {
+  import_react90.useEffect(() => {
     if (showExitWarning) {
       const timer = setTimeout(() => {
         setShowExitWarning(false);
@@ -291287,18 +291566,21 @@ async function main2() {
   const { copyToClipboard } = createClipboardManager(renderer);
   setupAutoCopy(renderer, copyToClipboard);
   const cleanup = () => {
+    cleanupTerminalFocusMode();
     renderer.destroy();
     process.exit(0);
   };
   process.on("SIGINT", cleanup);
   process.on("SIGTERM", cleanup);
   process.on("uncaughtException", (err) => {
+    cleanupTerminalFocusMode();
     renderer.destroy();
     console.error("Uncaught exception:", err);
     writeErrorLog(err, "UNCAUGHT");
     process.exit(1);
   });
   process.on("unhandledRejection", (reason) => {
+    cleanupTerminalFocusMode();
     renderer.destroy();
     console.error("Unhandled rejection:", reason);
     writeErrorLog(reason, "UNHANDLED_REJECTION");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pensar/apex",
-  "version": "0.0.101",
+  "version": "0.0.103-canary.29795a63",
   "description": "AI-powered penetration testing CLI tool with terminal UI",
   "module": "src/tui/index.tsx",
   "main": "build/index.js",

package/src/core/installation/index.ts

@@ -66,6 +66,18 @@ export function detectInstallMethod(): InstallMethod {
     return "npm";
   }
 
+  // Determine if we're running as a compiled binary vs via an interpreter.
+  // Compiled Bun binaries have process.execPath pointing to the binary itself
+  // (e.g. ~/.local/bin/pensar), while interpreted scripts have it pointing to
+  // the runtime (e.g. ~/.bun/bin/bun or /usr/local/bin/node).
+  const execName = execPath.split("/").pop()?.replace(/\.exe$/, "") ?? "";
+  const isInterpreter =
+    execName === "bun" || execName === "node" || execName === "bun-debug";
+
+  if (!isInterpreter) {
+    return "binary";
+  }
+
   const npmCheck = spawnSync(
     "npm",
     ["list", "-g", "@pensar/apex", "--depth=0"],

package/src/core/installation/installation.test.ts

@@ -177,7 +177,7 @@ describe("detectInstallMethod", () => {
     expect(detectInstallMethod()).toBe("npm");
   });
 
-  it("detects npm via spawnSync fallback when path heuristics miss", async () => {
+  it("detects npm via spawnSync fallback when running under interpreter", async () => {
     Object.defineProperty(process, "execPath", {
       value: "/usr/local/bin/node",
       writable: true,
@@ -203,7 +203,7 @@ describe("detectInstallMethod", () => {
     );
   });
 
-  it("returns binary when all heuristics fail", async () => {
+  it("returns binary when all heuristics fail under interpreter", async () => {
     Object.defineProperty(process, "execPath", {
       value: "/usr/local/bin/node",
       writable: true,
@@ -223,6 +223,38 @@ describe("detectInstallMethod", () => {
 
     expect(detectInstallMethod()).toBe("binary");
   });
+
+  it("returns binary for compiled binary even when npm global package exists", async () => {
+    Object.defineProperty(process, "execPath", {
+      value: "/home/user/.local/bin/pensar",
+      writable: true,
+    });
+    process.argv[1] = "upgrade";
+
+    const { spawnSync } = await import("child_process");
+    const mockedSpawnSync = vi.mocked(spawnSync);
+    mockedSpawnSync.mockReturnValue({
+      status: 0,
+      stdout: "└── @pensar/apex@0.1.0",
+      stderr: "",
+      pid: 0,
+      output: [],
+      signal: null,
+    });
+
+    expect(detectInstallMethod()).toBe("binary");
+    expect(mockedSpawnSync).not.toHaveBeenCalled();
+  });
+
+  it("returns binary for compiled binary without npm fallback", () => {
+    Object.defineProperty(process, "execPath", {
+      value: "/usr/local/bin/pensar",
+      writable: true,
+    });
+    process.argv[1] = "uninstall";
+
+    expect(detectInstallMethod()).toBe("binary");
+  });
 });
 
 // ---------------------------------------------------------------------------