@pensar/apex 0.0.29-canary.0 → 0.0.30-canary.0

package/build/quicktest.js

@@ -39942,7 +39942,8 @@ function streamResponse(opts) {
     abortSignal,
     activeTools,
     silent,
-    authConfig
+    authConfig,
+    onFinish
   } = opts;
   const messagesContainer = { current: messages || [] };
   const providerModel = getProviderModel(model, authConfig);
@@ -39997,7 +39998,8 @@ function streamResponse(opts) {
           }
           throw repairError;
         }
-      }
+      },
+      onFinish
     });
     return wrapStreamWithErrorHandler(response, messagesContainer, opts, providerModel, silent);
   } catch (error46) {
@@ -45041,6 +45043,236 @@ Begin your analysis now.
   };
 }
 
+// src/core/messages/index.ts
+import fs from "fs";
+
+// src/core/messages/types.ts
+var ToolMessageObject = exports_external.object({
+  role: exports_external.literal("tool"),
+  status: exports_external.enum(["pending", "completed"]),
+  toolCallId: exports_external.string(),
+  content: exports_external.string(),
+  args: exports_external.record(exports_external.string(), exports_external.any()),
+  toolName: exports_external.string(),
+  createdAt: exports_external.coerce.date()
+});
+var SystemModelMessageObject = exports_external.object({
+  role: exports_external.literal("system"),
+  content: exports_external.string(),
+  createdAt: exports_external.coerce.date(),
+  providerOptions: exports_external.record(exports_external.string(), exports_external.any()).optional()
+});
+var TextPartObject = exports_external.object({
+  type: exports_external.literal("text"),
+  text: exports_external.string(),
+  providerOptions: exports_external.record(exports_external.string(), exports_external.any()).optional()
+});
+var FilePartObject = exports_external.object({
+  type: exports_external.literal("file"),
+  data: exports_external.union([
+    exports_external.string(),
+    exports_external.instanceof(Uint8Array),
+    exports_external.instanceof(ArrayBuffer),
+    exports_external.instanceof(Buffer),
+    exports_external.url()
+  ]),
+  filename: exports_external.string().optional(),
+  mediaType: exports_external.string(),
+  providerOptions: exports_external.record(exports_external.string(), exports_external.any()).optional()
+});
+var ReasoningPartObject = exports_external.object({
+  type: exports_external.literal("reasoning"),
+  text: exports_external.string(),
+  providerOptions: exports_external.record(exports_external.string(), exports_external.any()).optional()
+});
+var ToolCallPartObject = exports_external.object({
+  type: exports_external.literal("tool-call"),
+  toolCallId: exports_external.string(),
+  toolName: exports_external.string(),
+  input: exports_external.unknown(),
+  providerOptions: exports_external.record(exports_external.string(), exports_external.any()).optional(),
+  providerExecuted: exports_external.boolean().optional()
+});
+var ToolResultOutputObject = exports_external.discriminatedUnion("type", [
+  exports_external.object({
+    type: exports_external.literal("text"),
+    value: exports_external.string()
+  }),
+  exports_external.object({
+    type: exports_external.literal("json"),
+    value: exports_external.any()
+  }),
+  exports_external.object({
+    type: exports_external.literal("error-text"),
+    value: exports_external.string()
+  }),
+  exports_external.object({
+    type: exports_external.literal("error-json"),
+    value: exports_external.any()
+  }),
+  exports_external.object({
+    type: exports_external.literal("content"),
+    value: exports_external.array(exports_external.discriminatedUnion("type", [
+      exports_external.object({
+        type: exports_external.literal("text"),
+        text: exports_external.string()
+      }),
+      exports_external.object({
+        type: exports_external.literal("media"),
+        data: exports_external.string(),
+        mediaType: exports_external.string()
+      })
+    ]))
+  })
+]);
+var ToolResultPartObject = exports_external.object({
+  type: exports_external.literal("tool-result"),
+  toolCallId: exports_external.string(),
+  toolName: exports_external.string(),
+  output: ToolResultOutputObject,
+  providerOptions: exports_external.record(exports_external.string(), exports_external.any()).optional()
+});
+var AssistantModelMessageObject = exports_external.object({
+  role: exports_external.literal("assistant"),
+  content: exports_external.union([
+    exports_external.string(),
+    exports_external.array(exports_external.discriminatedUnion("type", [
+      TextPartObject,
+      FilePartObject,
+      ReasoningPartObject,
+      ToolCallPartObject,
+      ToolResultPartObject
+    ]))
+  ]),
+  createdAt: exports_external.coerce.date(),
+  providerOptions: exports_external.record(exports_external.string(), exports_external.any()).optional()
+});
+var UserModelMessageObject = exports_external.object({
+  role: exports_external.literal("user"),
+  content: exports_external.union([
+    exports_external.string(),
+    exports_external.array(exports_external.discriminatedUnion("type", [TextPartObject, FilePartObject]))
+  ]),
+  createdAt: exports_external.coerce.date(),
+  providerOptions: exports_external.record(exports_external.string(), exports_external.any()).optional()
+});
+var ModelMessageObject = exports_external.discriminatedUnion("role", [
+  SystemModelMessageObject,
+  UserModelMessageObject,
+  AssistantModelMessageObject,
+  ToolMessageObject
+]);
+
+// src/core/messages/index.ts
+function saveSubagentMessages(orchestratorSession, subagentId, messages) {
+  const subagentDir = `${orchestratorSession.rootPath}/subagents/${subagentId}`;
+  if (!fs.existsSync(`${orchestratorSession.rootPath}/subagents`)) {
+    fs.mkdirSync(`${orchestratorSession.rootPath}/subagents`, {
+      recursive: true
+    });
+  }
+  if (!fs.existsSync(subagentDir)) {
+    fs.mkdirSync(subagentDir, { recursive: true });
+  }
+  fs.writeFileSync(`${subagentDir}/messages.json`, JSON.stringify(messages, null, 2));
+}
+function mapMessages(messages) {
+  const result = [];
+  const toolResults = new Map;
+  for (const message of messages) {
+    if (message.role === "tool") {
+      const content = message.content;
+      if (Array.isArray(content)) {
+        for (const part of content) {
+          if (part.type === "tool-result") {
+            toolResults.set(part.toolCallId, part.output);
+          }
+        }
+      }
+    }
+  }
+  for (const message of messages) {
+    if (message.role === "system") {
+      result.push({
+        role: "system",
+        content: message.content,
+        createdAt: new Date,
+        ...message.providerOptions && {
+          providerOptions: message.providerOptions
+        }
+      });
+      continue;
+    }
+    if (message.role === "user") {
+      const content = typeof message.content === "string" ? message.content : message.content.map((part) => part.type === "text" ? part.text : "").join("");
+      result.push({
+        role: "user",
+        content,
+        createdAt: new Date,
+        ...message.providerOptions && {
+          providerOptions: message.providerOptions
+        }
+      });
+      continue;
+    }
+    if (message.role === "tool") {
+      continue;
+    }
+    if (message.role === "assistant") {
+      const content = message.content;
+      if (typeof content === "string") {
+        result.push({
+          role: "assistant",
+          content,
+          createdAt: new Date,
+          ...message.providerOptions && {
+            providerOptions: message.providerOptions
+          }
+        });
+        continue;
+      }
+      const textParts = [];
+      const toolCalls = [];
+      for (const part of content) {
+        if (part.type === "text") {
+          textParts.push(part.text);
+        } else if (part.type === "tool-call") {
+          toolCalls.push({
+            toolCallId: part.toolCallId,
+            toolName: part.toolName,
+            input: part.input
+          });
+        }
+      }
+      if (textParts.length > 0) {
+        result.push({
+          role: "assistant",
+          content: textParts.join(""),
+          createdAt: new Date,
+          ...message.providerOptions && {
+            providerOptions: message.providerOptions
+          }
+        });
+      }
+      for (const toolCall of toolCalls) {
+        const input = toolCall.input;
+        const toolCallDescription = input?.toolCallDescription || `Executing ${toolCall.toolName}`;
+        const hasResult = toolResults.has(toolCall.toolCallId);
+        result.push({
+          role: "tool",
+          status: hasResult ? "completed" : "pending",
+          toolCallId: toolCall.toolCallId,
+          content: hasResult ? `✓ ${toolCallDescription}` : toolCallDescription,
+          args: input || {},
+          toolName: toolCall.toolName,
+          createdAt: new Date
+        });
+      }
+    }
+  }
+  return result;
+}
+
 // src/core/agent/pentestAgent/agent.ts
 var execAsync3 = promisify3(exec3);
 function runAgent(opts) {
@@ -45057,6 +45289,7 @@ function runAgent(opts) {
     sessionConfig
   } = opts;
   const session = opts.session || createSession(target, objective, undefined, sessionConfig);
+  const subagentId = `pentest-${nanoid3(6)}`;
   const pocsPath = join4(session.rootPath, "pocs");
   if (!existsSync6(pocsPath)) {
     mkdirSync4(pocsPath, { recursive: true });
@@ -45212,10 +45445,13 @@ You are only authorized to perform testing against the specific target endpoint
     onStepFinish,
     abortSignal,
     silent,
-    authConfig
+    authConfig,
+    onFinish: ({ response }) => {
+      saveSubagentMessages(session, subagentId, mapMessages(response.messages));
+    }
   });
   streamResult.session = session;
-  return { streamResult, session };
+  return { streamResult, session, subagentId };
 }
 
 // scripts/quicktest.ts

package/build/swarm.js

@@ -39942,7 +39942,8 @@ function streamResponse(opts) {
     abortSignal,
     activeTools,
     silent,
-    authConfig
+    authConfig,
+    onFinish
   } = opts;
   const messagesContainer = { current: messages || [] };
   const providerModel = getProviderModel(model, authConfig);
@@ -39997,7 +39998,8 @@ function streamResponse(opts) {
           }
           throw repairError;
         }
-      }
+      },
+      onFinish
     });
     return wrapStreamWithErrorHandler(response, messagesContainer, opts, providerModel, silent);
   } catch (error46) {
@@ -45042,6 +45044,236 @@ Begin your analysis now.
   };
 }
 
+// src/core/messages/index.ts
+import fs from "fs";
+
+// src/core/messages/types.ts
+var ToolMessageObject = exports_external.object({
+  role: exports_external.literal("tool"),
+  status: exports_external.enum(["pending", "completed"]),
+  toolCallId: exports_external.string(),
+  content: exports_external.string(),
+  args: exports_external.record(exports_external.string(), exports_external.any()),
+  toolName: exports_external.string(),
+  createdAt: exports_external.coerce.date()
+});
+var SystemModelMessageObject = exports_external.object({
+  role: exports_external.literal("system"),
+  content: exports_external.string(),
+  createdAt: exports_external.coerce.date(),
+  providerOptions: exports_external.record(exports_external.string(), exports_external.any()).optional()
+});
+var TextPartObject = exports_external.object({
+  type: exports_external.literal("text"),
+  text: exports_external.string(),
+  providerOptions: exports_external.record(exports_external.string(), exports_external.any()).optional()
+});
+var FilePartObject = exports_external.object({
+  type: exports_external.literal("file"),
+  data: exports_external.union([
+    exports_external.string(),
+    exports_external.instanceof(Uint8Array),
+    exports_external.instanceof(ArrayBuffer),
+    exports_external.instanceof(Buffer),
+    exports_external.url()
+  ]),
+  filename: exports_external.string().optional(),
+  mediaType: exports_external.string(),
+  providerOptions: exports_external.record(exports_external.string(), exports_external.any()).optional()
+});
+var ReasoningPartObject = exports_external.object({
+  type: exports_external.literal("reasoning"),
+  text: exports_external.string(),
+  providerOptions: exports_external.record(exports_external.string(), exports_external.any()).optional()
+});
+var ToolCallPartObject = exports_external.object({
+  type: exports_external.literal("tool-call"),
+  toolCallId: exports_external.string(),
+  toolName: exports_external.string(),
+  input: exports_external.unknown(),
+  providerOptions: exports_external.record(exports_external.string(), exports_external.any()).optional(),
+  providerExecuted: exports_external.boolean().optional()
+});
+var ToolResultOutputObject = exports_external.discriminatedUnion("type", [
+  exports_external.object({
+    type: exports_external.literal("text"),
+    value: exports_external.string()
+  }),
+  exports_external.object({
+    type: exports_external.literal("json"),
+    value: exports_external.any()
+  }),
+  exports_external.object({
+    type: exports_external.literal("error-text"),
+    value: exports_external.string()
+  }),
+  exports_external.object({
+    type: exports_external.literal("error-json"),
+    value: exports_external.any()
+  }),
+  exports_external.object({
+    type: exports_external.literal("content"),
+    value: exports_external.array(exports_external.discriminatedUnion("type", [
+      exports_external.object({
+        type: exports_external.literal("text"),
+        text: exports_external.string()
+      }),
+      exports_external.object({
+        type: exports_external.literal("media"),
+        data: exports_external.string(),
+        mediaType: exports_external.string()
+      })
+    ]))
+  })
+]);
+var ToolResultPartObject = exports_external.object({
+  type: exports_external.literal("tool-result"),
+  toolCallId: exports_external.string(),
+  toolName: exports_external.string(),
+  output: ToolResultOutputObject,
+  providerOptions: exports_external.record(exports_external.string(), exports_external.any()).optional()
+});
+var AssistantModelMessageObject = exports_external.object({
+  role: exports_external.literal("assistant"),
+  content: exports_external.union([
+    exports_external.string(),
+    exports_external.array(exports_external.discriminatedUnion("type", [
+      TextPartObject,
+      FilePartObject,
+      ReasoningPartObject,
+      ToolCallPartObject,
+      ToolResultPartObject
+    ]))
+  ]),
+  createdAt: exports_external.coerce.date(),
+  providerOptions: exports_external.record(exports_external.string(), exports_external.any()).optional()
+});
+var UserModelMessageObject = exports_external.object({
+  role: exports_external.literal("user"),
+  content: exports_external.union([
+    exports_external.string(),
+    exports_external.array(exports_external.discriminatedUnion("type", [TextPartObject, FilePartObject]))
+  ]),
+  createdAt: exports_external.coerce.date(),
+  providerOptions: exports_external.record(exports_external.string(), exports_external.any()).optional()
+});
+var ModelMessageObject = exports_external.discriminatedUnion("role", [
+  SystemModelMessageObject,
+  UserModelMessageObject,
+  AssistantModelMessageObject,
+  ToolMessageObject
+]);
+
+// src/core/messages/index.ts
+function saveSubagentMessages(orchestratorSession, subagentId, messages) {
+  const subagentDir = `${orchestratorSession.rootPath}/subagents/${subagentId}`;
+  if (!fs.existsSync(`${orchestratorSession.rootPath}/subagents`)) {
+    fs.mkdirSync(`${orchestratorSession.rootPath}/subagents`, {
+      recursive: true
+    });
+  }
+  if (!fs.existsSync(subagentDir)) {
+    fs.mkdirSync(subagentDir, { recursive: true });
+  }
+  fs.writeFileSync(`${subagentDir}/messages.json`, JSON.stringify(messages, null, 2));
+}
+function mapMessages(messages) {
+  const result = [];
+  const toolResults = new Map;
+  for (const message of messages) {
+    if (message.role === "tool") {
+      const content = message.content;
+      if (Array.isArray(content)) {
+        for (const part of content) {
+          if (part.type === "tool-result") {
+            toolResults.set(part.toolCallId, part.output);
+          }
+        }
+      }
+    }
+  }
+  for (const message of messages) {
+    if (message.role === "system") {
+      result.push({
+        role: "system",
+        content: message.content,
+        createdAt: new Date,
+        ...message.providerOptions && {
+          providerOptions: message.providerOptions
+        }
+      });
+      continue;
+    }
+    if (message.role === "user") {
+      const content = typeof message.content === "string" ? message.content : message.content.map((part) => part.type === "text" ? part.text : "").join("");
+      result.push({
+        role: "user",
+        content,
+        createdAt: new Date,
+        ...message.providerOptions && {
+          providerOptions: message.providerOptions
+        }
+      });
+      continue;
+    }
+    if (message.role === "tool") {
+      continue;
+    }
+    if (message.role === "assistant") {
+      const content = message.content;
+      if (typeof content === "string") {
+        result.push({
+          role: "assistant",
+          content,
+          createdAt: new Date,
+          ...message.providerOptions && {
+            providerOptions: message.providerOptions
+          }
+        });
+        continue;
+      }
+      const textParts = [];
+      const toolCalls = [];
+      for (const part of content) {
+        if (part.type === "text") {
+          textParts.push(part.text);
+        } else if (part.type === "tool-call") {
+          toolCalls.push({
+            toolCallId: part.toolCallId,
+            toolName: part.toolName,
+            input: part.input
+          });
+        }
+      }
+      if (textParts.length > 0) {
+        result.push({
+          role: "assistant",
+          content: textParts.join(""),
+          createdAt: new Date,
+          ...message.providerOptions && {
+            providerOptions: message.providerOptions
+          }
+        });
+      }
+      for (const toolCall of toolCalls) {
+        const input = toolCall.input;
+        const toolCallDescription = input?.toolCallDescription || `Executing ${toolCall.toolName}`;
+        const hasResult = toolResults.has(toolCall.toolCallId);
+        result.push({
+          role: "tool",
+          status: hasResult ? "completed" : "pending",
+          toolCallId: toolCall.toolCallId,
+          content: hasResult ? `✓ ${toolCallDescription}` : toolCallDescription,
+          args: input || {},
+          toolName: toolCall.toolName,
+          createdAt: new Date
+        });
+      }
+    }
+  }
+  return result;
+}
+
 // src/core/agent/pentestAgent/agent.ts
 var execAsync3 = promisify3(exec3);
 function runAgent(opts) {
@@ -45058,6 +45290,7 @@ function runAgent(opts) {
     sessionConfig
   } = opts;
   const session = opts.session || createSession(target, objective, undefined, sessionConfig);
+  const subagentId = `pentest-${nanoid3(6)}`;
   const pocsPath = join4(session.rootPath, "pocs");
   if (!existsSync6(pocsPath)) {
     mkdirSync4(pocsPath, { recursive: true });
@@ -45213,10 +45446,13 @@ You are only authorized to perform testing against the specific target endpoint
     onStepFinish,
     abortSignal,
     silent,
-    authConfig
+    authConfig,
+    onFinish: ({ response }) => {
+      saveSubagentMessages(session, subagentId, mapMessages(response.messages));
+    }
   });
   streamResult.session = session;
-  return { streamResult, session };
+  return { streamResult, session, subagentId };
 }
 // scripts/swarm.ts
 import { readFileSync as readFileSync5 } from "fs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pensar/apex",
-  "version": "0.0.29-canary.0",
+  "version": "0.0.30-canary.0",
   "description": "AI-powered penetration testing CLI tool with terminal UI",
   "module": "src/tui/index.tsx",
   "main": "build/index.js",