@pensar/apex 2.6.1 → 2.7.0-canary.21cb83dc

package/src/tui/components/operator-dashboard/logic.ts

@@ -1,6 +1,7 @@
 import {
   type AgentMode,
   buildBaseSystemPrompt,
+  type FindingPolicy,
 } from "../../../core/agents/offSecAgent";
 import type {
   OperatorMode,
@@ -39,6 +40,17 @@ export function filterOperatorAutocomplete(
 
 export type DashboardStatus = "idle" | "running" | "waiting" | "done";
 
+export function shouldHandleQueuedMessageKey(
+  status: DashboardStatus,
+  queuedCount: number,
+  inputValue: string,
+  dialogOpen: boolean,
+): boolean {
+  return (
+    !dialogOpen && status === "running" && queuedCount > 0 && !inputValue.trim()
+  );
+}
+
 export function resolveOperatorAgentMode(
   operatorMode: OperatorMode,
   strikeMode: boolean,
@@ -64,6 +76,33 @@ export function resolveOperatorStrikeMode({
   return routeOverride ?? persistedDefault ?? false;
 }
 
+interface FindingPolicyResolutionInput {
+  resuming: boolean;
+  strikeMode: boolean;
+  savedSessionValue?: FindingPolicy;
+  routeOverride?: FindingPolicy;
+  persistedDefault?: FindingPolicy;
+}
+
+export function resolveOperatorFindingPolicy({
+  resuming,
+  strikeMode,
+  savedSessionValue,
+  routeOverride,
+  persistedDefault,
+}: FindingPolicyResolutionInput): FindingPolicy {
+  if (!strikeMode) return "native";
+  if (resuming) return savedSessionValue ?? "native";
+  return routeOverride ?? persistedDefault ?? "native";
+}
+
+export function resolveActiveFindingPolicy(
+  agentMode: AgentMode,
+  findingPolicy: FindingPolicy,
+): FindingPolicy {
+  return agentMode === "fast-strike" ? findingPolicy : "native";
+}
+
 export interface SubmitResult {
   action: "run" | "blocked" | "empty";
   prompt?: string;
@@ -286,6 +325,7 @@ export function buildOperatorSystemPrompt(
     existingPlanContent?: string | null;
     approvedPlanContent?: string | null;
     taskDriven?: boolean;
+    findingPolicy?: FindingPolicy;
   },
 ): string {
   const { skillsCatalog, activeSkillInstructions } = opts ?? {};
@@ -313,7 +353,7 @@ For each directive, run a tight loop:
 2. HYPOTHESIZE — choose the single most likely vulnerability or next pivot.
 3. ACT — use direct tools for quick probes, but treat the shell as a working environment rather than merely a way to issue one-off commands. When the work becomes stateful, repetitive, concurrent, protocol-heavy, or multi-stage, externalize it into an editable script in the session scratchpad directory identified in the Session Workspace or Working Directory section. Never create a scratchpad/ directory inside the target repository. Run the script, inspect the results, modify it, and rerun it as the attack develops.
 4. PRUNE — drop disproven leads instead of repeating them.
-5. EXPLOIT — preserve viable primitives and build on them. Prefer extending a working script into an end-to-end exploit over rebuilding the chain with repeated one-off tool calls or stopping at the next network or protocol boundary. Prove impact and document confirmed vulnerabilities.
+5. EXPLOIT — preserve viable primitives and build on them. Prefer extending a working script into an end-to-end exploit over rebuilding the chain with repeated one-off tool calls or stopping at the next network or protocol boundary. ${opts?.findingPolicy === "external" ? "Pursue the assigned objective and submit concise findings in the requested output format." : "Prove impact and document confirmed vulnerabilities."}
 
 Spend your reasoning on choosing techniques and interpreting evidence; use scripts for deterministic mechanics, iteration, and chain execution. Before stopping with the objective unmet, account for each viable primitive and pursue any concrete path that could still close it. Stop and summarize when the objective is met, credible leads are genuinely exhausted, or human input is needed. Stay in scope and never trade verification for speed.`;
     }
@@ -334,7 +374,7 @@ ${opts.approvedPlanContent}
   // Runtime execution facts and bundled assets are appended by the agent
   // harness after this persona (OffensiveSecurityAgent assembles the final
   // system prompt) — embedding them here would duplicate the blocks.
-  let prompt = `${buildBaseSystemPrompt({ sandboxMode: opts?.sandboxMode })}
+  let prompt = `${buildBaseSystemPrompt({ sandboxMode: opts?.sandboxMode, findingPolicy: opts?.findingPolicy })}
 
 # Operator Mode
 

package/src/tui/components/operator-dashboard/run-events.test.ts

@@ -567,7 +567,9 @@ describe("createDisplayEventHandlers", () => {
           (callback, delay = 0, ...args) =>
             schedule(() => {
               timerCallbacks++;
-              callback(...args);
+              if (typeof callback === "function") {
+                Reflect.apply(callback, undefined, args);
+              }
             }, delay),
         );
       }

package/src/tui/components/shared/__tests__/tool-renderer-lifecycle.tsx

@@ -64,6 +64,24 @@ try {
       ),
     );
   }
+
+  const compacting = applyToolCall([], "compact-1", "summarize_conversation", {
+    reason: "Compacting context to continue",
+    messageCount: 20,
+  });
+  const pendingFrame = await frame(compacting);
+  assert.ok(pendingFrame.includes("⠁ Compacting"));
+  assert.ok(!pendingFrame.includes("summarize_conversation"));
+
+  const completedFrame = await frame(
+    applyToolResult(
+      compacting,
+      "compact-1",
+      "Conversation summarized successfully. Resuming with condensed context...",
+    ),
+  );
+  assert.ok(completedFrame.includes("Context compacted"));
+  assert.ok(!completedFrame.includes("summarized"));
 } finally {
   await act(() => setup.renderer.destroy());
 }

package/src/tui/components/shared/action-label.test.ts

@@ -127,6 +127,15 @@ describe("deriveActionLabel", () => {
     expect(deriveActionLabel("scratchpad", undefined)).toBe("note");
   });
 
+  it("labels context compaction without exposing the synthetic tool name", () => {
+    expect(
+      deriveActionLabel("summarize_conversation", {
+        reason: "Compacting context to continue",
+        messageCount: 20,
+      }),
+    ).toBe("Compacting");
+  });
+
   it("handles empty args gracefully (returns the tool name itself)", () => {
     expect(deriveActionLabel("custom_tool", {})).toBe("custom_tool");
   });

package/src/tui/components/shared/compacting-icon.tsx

@@ -0,0 +1,18 @@
+import type { RGBA } from "@opentui/core";
+import { useEffect, useState } from "react";
+
+// From throbber-widgets FALLING_SAND (MIT); local to avoid its react-dom peer.
+const FRAMES = [..."⠁⠂⠄⡀⡈⡐⡠⣀⣁⣂⣄⣌⣔⣤⣥⣦⣮⣶⣷⣿⡿⠿⢟⠟⡛⠛⠫⢋⠋⠍⡉⠉⠑⠡⢁"];
+
+export function CompactingIcon({ fg }: { fg: RGBA }) {
+  const [frame, setFrame] = useState(0);
+
+  useEffect(() => {
+    const interval = setInterval(() => {
+      setFrame((current) => (current + 1) % FRAMES.length);
+    }, 80);
+    return () => clearInterval(interval);
+  }, []);
+
+  return <text fg={fg}>{FRAMES[frame]}</text>;
+}

package/src/tui/components/shared/index.ts

@@ -7,6 +7,7 @@
 // Action labels
 export { deriveActionLabel, deriveApprovedActionLabel } from "./action-label";
 export { AsciiSpinner } from "./ascii-spinner";
+export { CompactingIcon } from "./compacting-icon";
 // Components
 export {
   type ControlItem,

package/src/tui/components/shared/tool-registry.ts

@@ -150,6 +150,7 @@ const TOOL_SUMMARY_MAP: Record<string, ToolSummaryFn> = {
 
   // Utility tools
   scratchpad: () => "note",
+  summarize_conversation: () => "Compacting",
 };
 
 /**

package/src/tui/components/shared/tool-renderer.tsx

@@ -10,6 +10,7 @@ import { useObfuscation } from "../../context/obfuscation";
 import { useTheme } from "../../theme";
 import type { DisplayMessage } from "../agent-display";
 import { ShiningText } from "../loaders";
+import { CompactingIcon } from "./compacting-icon";
 import { PentestWorkflowDisplay } from "./pentest-workflow-display";
 import { getResultSummary, type ResultSummary } from "./result-registry";
 import { getToolDisplayLabel } from "./tool-registry";
@@ -74,10 +75,14 @@ export const ToolRenderer = memo(function ToolRenderer({
   const isError = message.status === "error";
   const { toolName, result, logs } = message;
   const args = message.args ?? {};
+  const isCompacting = toolName === "summarize_conversation";
 
-  const summary = getToolDisplayLabel(toolName, args, {
-    preferDescription: isPending,
-  });
+  const summary =
+    isCompacting && isCompleted
+      ? "Context compacted"
+      : getToolDisplayLabel(toolName, args, {
+          preferDescription: isPending,
+        });
 
   // For execute_command, extract both description and command so we can show
   // both. Strings flow into `<text>` children, so the centralised
@@ -101,9 +106,11 @@ export const ToolRenderer = memo(function ToolRenderer({
 
   // Get result summary for completed tools
   const resultDisplay: ResultSummary | null =
-    isCompleted || isError
-      ? getResultSummary(result, toolName, args, colors)
-      : null;
+    isCompleted && isCompacting
+      ? null
+      : isCompleted || isError
+        ? getResultSummary(result, toolName, args, colors)
+        : null;
 
   // Determine border color based on status
   const borderColor = isError
@@ -121,7 +128,14 @@ export const ToolRenderer = memo(function ToolRenderer({
         {/* Tool header line */}
         <box flexDirection="row" gap={1}>
           {isPending ? (
-            <ShiningText text={summary} fg={colors.warning} />
+            isCompacting ? (
+              <>
+                <CompactingIcon fg={colors.primary} />
+                <text fg={colors.info}>{summary}</text>
+              </>
+            ) : (
+              <ShiningText text={summary} fg={colors.warning} />
+            )
           ) : (
             <>
               <text fg={isError ? colors.error : colors.success}>

package/src/tui/context/route.tsx

@@ -70,6 +70,7 @@ export type Route =
         operatorMode?: import("../../core/operator").OperatorMode;
         /** Overrides the persisted Strike Mode preference for this new session. */
         strikeMode?: boolean;
+        findingPolicy?: import("../../core/agents/offSecAgent").FindingPolicy;
         sandbox?: boolean;
         taskDriven?: boolean;
         /** Headers from wizard/CLI; replace the snapshotted global defaults. */

package/src/tui/keybindings/registry.ts

@@ -120,6 +120,7 @@ export function createKeybindings(
       combo: "tab",
       description: "Next focusable item",
       fn: async () => {
+        if (stack.length > 0 || externalDialogOpen) return;
         setFocusIndex((prev) => (prev + 1) % navigableItems.length);
       },
     },
@@ -127,6 +128,7 @@ export function createKeybindings(
       combo: "shift+tab",
       description: "Previous focusable item",
       fn: async () => {
+        if (stack.length > 0 || externalDialogOpen) return;
         setFocusIndex(
           (prev) => (prev - 1 + navigableItems.length) % navigableItems.length,
         );

package/build/agent-6w7egcf1.js

@@ -1,13 +0,0 @@
-import {
-  runAuthenticationAgent2
-} from "./cli-3sp6nd8d.js";
-import"./cli-1ve18npr.js";
-import"./cli-qba2x69h.js";
-import"./cli-qgz1q9g5.js";
-import"./cli-dpsw2fe6.js";
-import"./cli-c05y640n.js";
-import"./cli-c2k4xxaw.js";
-import"./cli-fy6vh2a7.js";
-export {
-  runAuthenticationAgent2 as runAuthenticationAgent
-};

package/build/agent-9zx75feh.js

@@ -1,13 +0,0 @@
-import {
-  CodeAgent2
-} from "./cli-kb21qhvm.js";
-import"./cli-1ve18npr.js";
-import"./cli-qba2x69h.js";
-import"./cli-qgz1q9g5.js";
-import"./cli-dpsw2fe6.js";
-import"./cli-c05y640n.js";
-import"./cli-c2k4xxaw.js";
-import"./cli-fy6vh2a7.js";
-export {
-  CodeAgent2 as CodeAgent
-};

package/build/pentest-e61hc38s.js

@@ -1,22 +0,0 @@
-import {
-  DEFAULT_CONCURRENCY2,
-  runPentestSwarm2,
-  runPentestWorkflow2
-} from "./cli-d37a42dc.js";
-import"./cli-n2en7j5b.js";
-import"./cli-ngq9dr8n.js";
-import"./cli-k2nwxta0.js";
-import"./cli-xtc2t6me.js";
-import"./cli-kb21qhvm.js";
-import"./cli-1ve18npr.js";
-import"./cli-qba2x69h.js";
-import"./cli-qgz1q9g5.js";
-import"./cli-dpsw2fe6.js";
-import"./cli-c05y640n.js";
-import"./cli-c2k4xxaw.js";
-import"./cli-fy6vh2a7.js";
-export {
-  DEFAULT_CONCURRENCY2 as DEFAULT_CONCURRENCY,
-  runPentestSwarm2 as runPentestSwarm,
-  runPentestWorkflow2 as runPentestWorkflow
-};

package/build/recordedRunClient-dp032c32.js

@@ -1,11 +0,0 @@
-import {
-  openRecordedRunClient2
-} from "./cli-ae8jqxqr.js";
-import"./cli-gx71jcke.js";
-import"./cli-dpsw2fe6.js";
-import"./cli-c05y640n.js";
-import"./cli-c2k4xxaw.js";
-import"./cli-fy6vh2a7.js";
-export {
-  openRecordedRunClient2 as openRecordedRunClient
-};

package/build/threatModel-jkxfa40s.js

@@ -1,21 +0,0 @@
-import"./cli-qgz1q9g5.js";
-import"./cli-fy6vh2a7.js";
-import"./cli-c05y640n.js";
-import {
-  runThreatModelWorkflow2
-} from "./cli-7eea4e2y.js";
-import"./cli-k2nwxta0.js";
-import"./cli-kb21qhvm.js";
-import"./cli-ngq9dr8n.js";
-import"./cli-d37a42dc.js";
-import"./cli-3sp6nd8d.js";
-import"./cli-xtc2t6me.js";
-import"./cli-n2en7j5b.js";
-import"./cli-xcy2vxj2.js";
-import"./cli-1ve18npr.js";
-import"./cli-qba2x69h.js";
-import"./cli-dpsw2fe6.js";
-import"./cli-c2k4xxaw.js";
-export {
-  runThreatModelWorkflow2 as runThreatModelWorkflow
-};