@pensar/apex 0.0.88 → 0.0.89-canary.4677df83

package/build/index.js

@@ -31971,7 +31971,7 @@ var package_default2;
 var init_package = __esm(() => {
   package_default2 = {
     name: "@pensar/apex",
-    version: "0.0.88",
+    version: "0.0.89-canary.4677df83",
     description: "AI-powered penetration testing CLI tool with terminal UI",
     module: "src/tui/index.tsx",
     main: "build/index.js",
@@ -88441,7 +88441,8 @@ async function summarizeConversation(messages, opts, model) {
   const { text: summary, usage: summaryUsage } = await generateText({
     model,
     system: `You are a helpful assistant that summarizes conversations to pass to another agent. Review the conversation and system prompt at the end provided by the user.`,
-    messages: summarizedMessages
+    messages: summarizedMessages,
+    abortSignal: opts.abortSignal
   });
   if (opts.onStepFinish && summaryUsage) {
     opts.onStepFinish({
@@ -88719,7 +88720,8 @@ function streamResponse(opts) {
               "IMPORTANT: For enum fields like 'severity' or 'riskLevel', use ONLY the exact values from the enum (e.g., 'HIGH', 'CRITICAL', 'MEDIUM', 'LOW').",
               "Do not add prefixes, suffixes, or formatting characters like '>', '-', '!', etc."
             ].join(`
-`)
+`),
+            abortSignal
           });
           if (onStepFinish && repairUsage) {
             onStepFinish({
@@ -88787,6 +88789,7 @@ async function generateObjectResponse(opts) {
     maxTokens,
     temperature,
     authConfig,
+    abortSignal,
     onTokenUsage
   } = opts;
   const providerModel = getProviderModel(model, authConfig);
@@ -88802,7 +88805,8 @@ async function generateObjectResponse(opts) {
         system,
         maxOutputTokens: maxTokens,
         temperature,
-        maxRetries: 0
+        maxRetries: 0,
+        abortSignal
       });
       if (onTokenUsage && usage) {
         onTokenUsage(usage.inputTokens ?? 0, usage.outputTokens ?? 0);
@@ -88849,7 +88853,7 @@ function generateRandomName() {
   return `${adj}-${noun}`;
 }
 async function generateSessionName(opts) {
-  const { targets, userMessage, model, authConfig } = opts;
+  const { targets, userMessage, model, authConfig, abortSignal } = opts;
   const contextParts = [];
   if (targets.length > 0) {
     contextParts.push(`Target(s): ${targets.join(", ")}`);
@@ -88874,7 +88878,8 @@ async function generateSessionName(opts) {
       prompt,
       maxTokens: 50,
       temperature: 0.7,
-      authConfig
+      authConfig,
+      abortSignal
     });
     if (!result?.name)
       return null;
@@ -106937,7 +106942,7 @@ IMPORTANT: Always analyze results and adjust your approach based on findings.`,
       }
       if (ctx4.persistentShell) {
         try {
-          const result = await ctx4.persistentShell.execute(command, timeout, ctx4.onCommandOutput);
+          const result = await ctx4.persistentShell.execute(command, timeout, ctx4.onCommandOutput, ctx4.abortSignal);
           const { text: stdout, file: outputFile } = maybeSaveFullOutput(result.stdout, ctx4);
           return {
             success: result.exitCode === 0,
@@ -107845,14 +107850,15 @@ var init_cvss = __esm(() => {
 });
 
 // src/core/agents/specialized/cvssScorer/index.ts
-async function scoreFindingWithCVSS(input, model, authConfig) {
+async function scoreFindingWithCVSS(input, model, authConfig, abortSignal) {
   const prompt = buildScoringPrompt(input);
   const assessment = await generateObjectResponse({
     model,
     schema: CVSSMetricsOutputSchema,
     prompt,
     system: CVSS_SCORER_SYSTEM_PROMPT,
-    authConfig
+    authConfig,
+    abortSignal
   });
   const cvssResult = calculateCVSS4Score({
     ...assessment.metrics
@@ -108120,7 +108126,7 @@ FINDING STRUCTURE:
               remediation: input.remediation
             },
             agentMessages: []
-          }, ctx4.model, ctx4.authConfig);
+          }, ctx4.model, ctx4.authConfig, ctx4.abortSignal);
         } catch (cvssError) {
           const msg = cvssError instanceof Error ? cvssError.message : String(cvssError);
           cvssWarning = `CVSS scoring failed (${msg}), using fallback severity.`;
@@ -111302,10 +111308,12 @@ class FindingsRegistry {
   findings = [];
   model;
   authConfig;
+  abortSignal;
   mutex = Promise.resolve();
   constructor(opts) {
     this.model = opts?.model;
     this.authConfig = opts?.authConfig;
+    this.abortSignal = opts?.abortSignal;
   }
   get size() {
     return this.findings.length;
@@ -111402,7 +111410,8 @@ class FindingsRegistry {
       schema: SemanticDedupResultSchema,
       prompt,
       system: SEMANTIC_DEDUP_SYSTEM,
-      authConfig: this.authConfig
+      authConfig: this.authConfig,
+      abortSignal: this.abortSignal
     });
     if (result.isDuplicate && result.matchedIndex != null) {
       const idx = result.matchedIndex - 1;
@@ -111526,7 +111535,8 @@ Pass every target you want tested — the swarm handles concurrency automaticall
       }
       const findingsRegistry = ctx4.findingsRegistry ?? FindingsRegistry.fromDirectory(ctx4.session.findingsPath, {
         model: ctx4.model,
-        authConfig: ctx4.authConfig
+        authConfig: ctx4.authConfig,
+        abortSignal: ctx4.abortSignal
       });
       const total = targets.length;
       console.log(`
@@ -193567,10 +193577,17 @@ class PersistentShell {
       this.spawn();
     }
   }
-  async execute(command, timeoutSeconds, onData) {
+  async execute(command, timeoutSeconds, onData, abortSignal) {
     if (this.disposed) {
       return { stdout: "", stderr: "Shell has been disposed", exitCode: 1 };
     }
+    if (abortSignal?.aborted) {
+      return {
+        stdout: "",
+        stderr: "Command aborted",
+        exitCode: 130
+      };
+    }
     this.ensureAlive();
     const proc = this.proc;
     if (!proc || !proc.stdin || !proc.stdout || !proc.stderr) {
@@ -193595,11 +193612,38 @@ class PersistentShell {
         this.pendingStderr = null;
         if (timeoutTimer)
           clearTimeout(timeoutTimer);
+        if (abortCleanup)
+          abortCleanup();
         proc.stdout.removeListener("data", onStdout);
         proc.stderr.removeListener("data", onStderr);
         resolve4(result);
       };
       this.pendingCancel = safeResolve;
+      let abortCleanup;
+      if (abortSignal) {
+        const onAbort = () => {
+          if (resolved)
+            return;
+          const pid = proc.pid;
+          if (pid && process.platform !== "win32") {
+            try {
+              spawnSync("pkill", ["-TERM", "-P", pid.toString()], {
+                stdio: "ignore"
+              });
+            } catch {}
+          }
+          setTimeout(() => {
+            safeResolve({
+              stdout: stdout || "(no output)",
+              stderr: stderr ? stderr + `
+(aborted)` : "(aborted)",
+              exitCode: 130
+            });
+          }, 500);
+        };
+        abortSignal.addEventListener("abort", onAbort, { once: true });
+        abortCleanup = () => abortSignal.removeEventListener("abort", onAbort);
+      }
       const onStdout = (data) => {
         const chunk = data.toString();
         if (onData && !chunk.includes(exitMarkerPrefix)) {
@@ -194504,6 +194548,35 @@ For \`http_request\`, pass these as the \`headers\` parameter.`, `For \`execute_
 The following vulnerabilities have already been documented. Do NOT re-test or re-document these — the system will automatically reject duplicates.
 ${existing}`;
   }
+  let knowledgeBaseSection = "";
+  const markerPath = join24(sessionRootPath, "scratchpad", ".knowledge-populated");
+  if (existsSync23(markerPath)) {
+    try {
+      const count = parseInt(readFileSync9(markerPath, "utf-8").trim(), 10) || 0;
+      if (count > 0) {
+        knowledgeBaseSection = `
+
+## Project Knowledge Available
+There are ${count} project knowledge entries in the memory system from previous scans, user notes, and resolved issues. Before beginning your testing plan, call \`list_memories\` with tag \`"project-knowledge"\` to check for relevant context. Pay special attention to false positive patterns and technology context that may affect your testing.`;
+      }
+    } catch {}
+  }
+  if (!knowledgeBaseSection) {
+    const knowledgePath = join24(sessionRootPath, "scratchpad", "knowledge-base.md");
+    if (existsSync23(knowledgePath)) {
+      try {
+        const knowledgeContent = readFileSync9(knowledgePath, "utf-8").trim();
+        if (knowledgeContent) {
+          knowledgeBaseSection = `
+
+## Project Knowledge Base
+The following is accumulated knowledge about this project from previous scans, user notes, and resolved issues. Use this context to avoid false positives and make better testing decisions.
+
+${knowledgeContent}`;
+        }
+      } catch {}
+    }
+  }
   const outcomeSection = outcomeGuidance ? `
 ## Outcome Guidance
 ${outcomeGuidance}
@@ -194535,6 +194608,7 @@ Do NOT discover or enumerate other endpoints or services. Focus exclusively on t
 - **URL:** ${target}
 ${authSection}
 ${knownFindingsSection}
+${knowledgeBaseSection}
 
 ## Objectives
 ${objectiveList}
@@ -194685,7 +194759,9 @@ var init_agent4 = __esm(() => {
           "email_list_inboxes",
           "email_list_messages",
           "email_search_messages",
-          "email_get_message"
+          "email_get_message",
+          "list_memories",
+          "get_memory"
         ],
         responseSchema: PentestResponseSchema,
         resolveResult: () => {
@@ -195516,7 +195592,8 @@ async function runPentestWorkflow(input) {
     }
     const findingsRegistry = FindingsRegistry.fromDirectory(session.findingsPath, {
       model,
-      authConfig
+      authConfig,
+      abortSignal
     });
     await runPentestSwarm({
       targets: swarmTargets,
@@ -272247,7 +272324,7 @@ var useTerminalDimensions = () => {
 };
 
 // src/tui/index.tsx
-var import_react86 = __toESM(require_react(), 1);
+var import_react88 = __toESM(require_react(), 1);
 
 // src/tui/components/footer.tsx
 import os6 from "os";
@@ -274866,6 +274943,12 @@ function shouldResetHistory(historyIndex, isNavigatingHistory) {
 }
 
 // src/tui/components/shared/prompt-input.tsx
+var chatKeyBindings = [
+  { name: "return", action: "submit" },
+  { name: "linefeed", action: "newline" },
+  { name: "return", shift: true, action: "newline" },
+  { name: "linefeed", shift: true, action: "newline" }
+];
 var PromptInput = import_react29.forwardRef(function PromptInput2({
   width,
   minHeight = 1,
@@ -275058,26 +275141,7 @@ var PromptInput = import_react29.forwardRef(function PromptInput2({
             backgroundColor,
             focusedBackgroundColor,
             cursorColor: cursorColor ?? colors2.textMuted,
-            keyBindings: [
-              {
-                action: "submit",
-                name: "return"
-              },
-              {
-                action: "submit",
-                name: "linefeed"
-              },
-              {
-                action: "newline",
-                shift: true,
-                name: "return"
-              },
-              {
-                action: "newline",
-                shift: true,
-                name: "linefeed"
-              }
-            ],
+            keyBindings: chatKeyBindings,
             onContentChange: handleContentChange,
             onSubmit: handleSubmit
           }, undefined, false, undefined, this)
@@ -285101,13 +285165,16 @@ function NormalInputAreaInner({
   const { inputValue, setInputValue } = useInput();
   const promptRef = import_react77.useRef(null);
   const isExternalUpdate = import_react77.useRef(false);
+  const prevValueRef = import_react77.useRef(value);
   import_react77.useEffect(() => {
-    if (value !== inputValue) {
+    const prevValue = prevValueRef.current;
+    prevValueRef.current = value;
+    if (value !== prevValue && value !== inputValue) {
       isExternalUpdate.current = true;
       setInputValue(value);
       promptRef.current?.setValue(value);
     }
-  }, [value]);
+  }, [value, inputValue, setInputValue]);
   import_react77.useEffect(() => {
     if (isExternalUpdate.current) {
       isExternalUpdate.current = false;
@@ -285116,7 +285183,7 @@ function NormalInputAreaInner({
     if (inputValue !== value) {
       onChange(inputValue);
     }
-  }, [inputValue]);
+  }, [inputValue, value, onChange]);
   const handleSubmit = (val) => {
     if (val.trim()) {
       onSubmit(val.trim());
@@ -289634,15 +289701,125 @@ async function detectTerminalMode(timeoutMs = 1000) {
   });
 }
 
+// src/tui/console-theme.ts
+var import_react85 = __toESM(require_react(), 1);
+var withAlpha = (rgba, a) => RGBA.fromValues(rgba.r, rgba.g, rgba.b, a);
+var overlayThemeRef = {
+  current: null
+};
+function buildConsoleOptions(themeColors) {
+  return {
+    backgroundColor: withAlpha(themeColors.backgroundPanel, 0.85),
+    titleBarColor: withAlpha(themeColors.backgroundElement, 0.9),
+    titleBarTextColor: themeColors.text,
+    colorDefault: themeColors.textMuted,
+    colorInfo: themeColors.info,
+    colorWarn: themeColors.warning,
+    colorError: themeColors.error,
+    colorDebug: themeColors.textMuted,
+    selectionColor: withAlpha(themeColors.primary, 0.35),
+    cursorColor: themeColors.primary,
+    copyButtonColor: themeColors.primary
+  };
+}
+function ConsoleThemeSync() {
+  const { colors: colors2 } = useTheme();
+  const renderer = useRenderer();
+  import_react85.useEffect(() => {
+    overlayThemeRef.current = colors2;
+    const c = renderer.console;
+    c.backgroundColor = withAlpha(colors2.backgroundPanel, 0.85);
+    c._rgbaTitleBar = withAlpha(colors2.backgroundElement, 0.9);
+    c._rgbaTitleBarText = colors2.text;
+    c._rgbaDefault = colors2.textMuted;
+    c._rgbaInfo = colors2.info;
+    c._rgbaWarn = colors2.warning;
+    c._rgbaError = colors2.error;
+    c._rgbaDebug = colors2.textMuted;
+    c._rgbaSelection = withAlpha(colors2.primary, 0.35);
+    c._rgbaCursor = colors2.primary;
+    c._rgbaCopyButton = colors2.primary;
+    c.markNeedsRerender();
+  }, [colors2]);
+  return null;
+}
+
+// src/tui/clipboard.ts
+function createClipboardManager(renderer) {
+  let clipboardNotifExpiry = 0;
+  const copyToClipboard = (text2) => {
+    renderer.copyToClipboardOSC52(text2);
+    try {
+      const proc = Bun.spawn(process.platform === "darwin" ? ["pbcopy"] : ["xclip", "-selection", "clipboard"], { stdin: "pipe" });
+      proc.stdin.write(text2);
+      proc.stdin.end();
+    } catch {}
+    clipboardNotifExpiry = Date.now() + 2000;
+    renderer.requestRender();
+    setTimeout(() => renderer.requestRender(), 2010);
+  };
+  const notifLabel = "Copied to clipboard";
+  const notifPadX = 1;
+  const notifBoxWidth = 1 + notifPadX + notifLabel.length + notifPadX + 1;
+  const notifBoxHeight = 3;
+  const notifMargin = 1;
+  renderer.addPostProcessFn((buffer) => {
+    if (Date.now() < clipboardNotifExpiry && overlayThemeRef.current) {
+      const c = overlayThemeRef.current;
+      const x4 = buffer.width - notifBoxWidth - notifMargin;
+      const y3 = notifMargin;
+      buffer.fillRect(x4, y3, notifBoxWidth, notifBoxHeight, c.backgroundElement);
+      buffer.drawBox({
+        x: x4,
+        y: y3,
+        width: notifBoxWidth,
+        height: notifBoxHeight,
+        border: true,
+        borderColor: c.border,
+        backgroundColor: c.backgroundElement,
+        shouldFill: false
+      });
+      buffer.drawText(notifLabel, x4 + 1 + notifPadX, y3 + 1, c.text, c.backgroundElement);
+    }
+  });
+  renderer.console.onCopySelection = copyToClipboard;
+  return { copyToClipboard };
+}
+
+// src/tui/auto-copy.ts
+function setupAutoCopy(renderer, copyToClipboard) {
+  renderer.console.getCopyButtonLabel = () => "Select to copy";
+  const originalHandleMouse = renderer.console.handleMouse.bind(renderer.console);
+  renderer.console.handleMouse = (event) => {
+    const result = originalHandleMouse(event);
+    if (event.type === "up") {
+      const c = renderer.console;
+      if (typeof c.hasSelection === "function" && c.hasSelection()) {
+        c.triggerCopy();
+      }
+    }
+    return result;
+  };
+  renderer.on("selection", (selection) => {
+    if (selection && !selection.isDragging) {
+      const text2 = selection.getSelectedText();
+      if (text2) {
+        copyToClipboard(text2);
+      }
+      process.nextTick(() => renderer.clearSelection());
+    }
+  });
+}
+
 // src/tui/index.tsx
 function App({ appConfig }) {
-  const [focusIndex, setFocusIndex] = import_react86.useState(0);
-  const [cwd, setCwd] = import_react86.useState(process.cwd());
-  const [ctrlCPressTime, setCtrlCPressTime] = import_react86.useState(null);
-  const [showExitWarning, setShowExitWarning] = import_react86.useState(false);
-  const [inputKey, setInputKey] = import_react86.useState(0);
-  const [showSessionsDialog, setShowSessionsDialog] = import_react86.useState(false);
-  const [showShortcutsDialog, setShowShortcutsDialog] = import_react86.useState(false);
+  const [focusIndex, setFocusIndex] = import_react88.useState(0);
+  const [cwd, setCwd] = import_react88.useState(process.cwd());
+  const [ctrlCPressTime, setCtrlCPressTime] = import_react88.useState(null);
+  const [showExitWarning, setShowExitWarning] = import_react88.useState(false);
+  const [inputKey, setInputKey] = import_react88.useState(0);
+  const [showSessionsDialog, setShowSessionsDialog] = import_react88.useState(false);
+  const [showShortcutsDialog, setShowShortcutsDialog] = import_react88.useState(false);
   const navigableItems = ["command-input"];
   return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ConfigProvider, {
     config: appConfig,
@@ -289707,14 +289884,14 @@ function AppContent({
   const { toast } = useToast();
   const { refocusPrompt } = useFocus();
   const { setExternalDialogOpen } = useDialog();
-  import_react86.useEffect(() => {
+  import_react88.useEffect(() => {
     checkForUpdate().then(({ updateAvailable, currentVersion, latestVersion }) => {
       if (!updateAvailable)
         return;
       toast(`Update available: v${currentVersion} → v${latestVersion}. Run: pensar upgrade`, "warn", 8000);
     });
   }, []);
-  import_react86.useEffect(() => {
+  import_react88.useEffect(() => {
     if (route.data.type !== "base")
       return;
     if (!config3.data.responsibleUseAccepted && route.data.path !== "disclosure") {
@@ -289723,7 +289900,7 @@ function AppContent({
       route.navigate({ type: "base", path: "providers" });
     }
   }, [config3.data.responsibleUseAccepted, route.data]);
-  import_react86.useEffect(() => {
+  import_react88.useEffect(() => {
     if (showExitWarning) {
       const timer = setTimeout(() => {
         setShowExitWarning(false);
@@ -289912,7 +290089,14 @@ async function main2() {
   } else {
     mode = await detectTerminalMode();
   }
-  const renderer = await createCliRenderer({ exitOnCtrlC: false });
+  const themeColors = resolveThemeColors(getTheme(themeName), mode);
+  overlayThemeRef.current = themeColors;
+  const renderer = await createCliRenderer({
+    exitOnCtrlC: false,
+    consoleOptions: buildConsoleOptions(themeColors)
+  });
+  const { copyToClipboard } = createClipboardManager(renderer);
+  setupAutoCopy(renderer, copyToClipboard);
   const cleanup = () => {
     renderer.destroy();
     process.exit(0);
@@ -289934,16 +290118,19 @@ async function main2() {
   createRoot(renderer).render(/* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ThemeProvider, {
     initialTheme: themeName,
     initialMode: mode,
-    children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ToastProvider, {
-      children: [
-        /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ErrorBoundary2, {
-          children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(App, {
-            appConfig
-          }, undefined, false, undefined, this)
-        }, undefined, false, undefined, this),
-        /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ToastContainer, {}, undefined, false, undefined, this)
-      ]
-    }, undefined, true, undefined, this)
-  }, undefined, false, undefined, this));
+    children: [
+      /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ConsoleThemeSync, {}, undefined, false, undefined, this),
+      /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ToastProvider, {
+        children: [
+          /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ErrorBoundary2, {
+            children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(App, {
+              appConfig
+            }, undefined, false, undefined, this)
+          }, undefined, false, undefined, this),
+          /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ToastContainer, {}, undefined, false, undefined, this)
+        ]
+      }, undefined, true, undefined, this)
+    ]
+  }, undefined, true, undefined, this));
 }
 main2();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pensar/apex",
-  "version": "0.0.88",
+  "version": "0.0.89-canary.4677df83",
   "description": "AI-powered penetration testing CLI tool with terminal UI",
   "module": "src/tui/index.tsx",
   "main": "build/index.js",