pentesting 0.5.1 → 0.5.4

package/dist/index.js

@@ -1723,9 +1723,27 @@ var ApprovalManager = class extends EventEmitter3 {
           this.removeListener(APPROVAL_EVENT.RESPONSE, responseHandler);
           if (response.decision === "approve_always") {
             this.autoApprovedTools.add(toolName);
+            const pendingForSameTool = Array.from(this.pendingRequests.entries()).filter(([_, req]) => req.toolName === toolName);
+            for (const [pendingId, _] of pendingForSameTool) {
+              this.pendingRequests.delete(pendingId);
+              this.emit(APPROVAL_EVENT.RESPONSE, {
+                requestId: pendingId,
+                decision: "approve",
+                respondedAt: (/* @__PURE__ */ new Date()).toISOString()
+              });
+            }
             resolve("approve");
           } else if (response.decision === "deny_always") {
             this.autoDeniedTools.add(toolName);
+            const pendingForSameTool = Array.from(this.pendingRequests.entries()).filter(([_, req]) => req.toolName === toolName);
+            for (const [pendingId, _] of pendingForSameTool) {
+              this.pendingRequests.delete(pendingId);
+              this.emit(APPROVAL_EVENT.RESPONSE, {
+                requestId: pendingId,
+                decision: "deny",
+                respondedAt: (/* @__PURE__ */ new Date()).toISOString()
+              });
+            }
             resolve("deny");
           } else {
             resolve(response.decision);
@@ -3298,6 +3316,14 @@ ${prompt}`
     this.state.lastProgressTime = /* @__PURE__ */ new Date();
     this.state.repeatedActions.clear();
   }
+  /**
+   * Check if the main loop should stop (due to pause, completion, etc.)
+   * Uses string comparison to avoid TypeScript narrowing issues with const enums
+   */
+  shouldStopLoop() {
+    const status = this.state.status;
+    return status === AGENT_STATUS.PAUSED || status === AGENT_STATUS.COMPLETED || status === AGENT_STATUS.IDLE;
+  }
   trackAction(action) {
     const count = this.state.repeatedActions.get(action) || 0;
     this.state.repeatedActions.set(action, count + 1);
@@ -3399,7 +3425,7 @@ Goal: Deep penetration to obtain root/system privileges, extract internal data,
     });
     let iteration = 0;
     const maxIterations = this.config.maxIterations;
-    while (iteration < maxIterations && this.state.status === AGENT_STATUS.RUNNING) {
+    while (iteration < maxIterations && !this.shouldStopLoop()) {
       iteration++;
       this.state.iteration = iteration;
       this.getCurrentPhase().attempts++;
@@ -3422,7 +3448,15 @@ Goal: Deep penetration to obtain root/system privileges, extract internal data,
           continue;
         }
         const response = await this.executeStep();
+        if (this.shouldStopLoop()) {
+          this.think(THOUGHT_TYPE.OBSERVATION, "Execution paused by user");
+          break;
+        }
         await this.analyzeResponse(response);
+        if (this.shouldStopLoop()) {
+          this.think(THOUGHT_TYPE.OBSERVATION, "Execution paused by user");
+          break;
+        }
         if (this.shouldAdvancePhase()) {
           if (!this.advanceToNextPhase()) {
             this.think(THOUGHT_TYPE.OBSERVATION, "[done] All phases completed!");
@@ -3436,9 +3470,14 @@ Goal: Deep penetration to obtain root/system privileges, extract internal data,
         await this.attemptRecovery(error);
       }
     }
-    this.state.status = AGENT_STATUS.COMPLETED;
-    await this.generateFinalReport();
-    this.emit(AGENT_EVENT.COMPLETE, this.getSummary());
+    const finalStatus = this.state.status;
+    if (finalStatus !== AGENT_STATUS.PAUSED && finalStatus !== AGENT_STATUS.COMPLETED) {
+      this.state.status = AGENT_STATUS.COMPLETED;
+      await this.generateFinalReport();
+      this.emit(AGENT_EVENT.COMPLETE, this.getSummary());
+    } else if (finalStatus === AGENT_STATUS.PAUSED) {
+      this.emit(AGENT_EVENT.PAUSED);
+    }
   }
   // ===== Step Execution =====
   async executeStep() {
@@ -4936,6 +4975,235 @@ var FindingDisplay = ({ block }) => {
 // src/cli/app.tsx
 import { homedir } from "os";
 import { join as join6 } from "path";
+
+// src/cli/utils/keyboard-listener.ts
+import { EventEmitter as EventEmitter7 } from "events";
+import * as readline2 from "readline";
+var KeyboardListener = class extends EventEmitter7 {
+  isListening = false;
+  isPaused = false;
+  stdin = process.stdin;
+  originalRawMode;
+  preInputBuffer = "";
+  constructor() {
+    super();
+    this.handleKeypress = this.handleKeypress.bind(this);
+    this.handleData = this.handleData.bind(this);
+  }
+  /**
+   * Start listening for keyboard input in raw mode
+   */
+  start() {
+    if (this.isListening) return;
+    try {
+      if (this.stdin.isTTY) {
+        this.originalRawMode = this.stdin.isRaw;
+        this.stdin.setRawMode(true);
+        readline2.emitKeypressEvents(this.stdin);
+        this.stdin.on("keypress", this.handleKeypress);
+        this.stdin.resume();
+        this.isListening = true;
+      }
+    } catch {
+      this.stdin.on("data", this.handleData);
+      this.isListening = true;
+    }
+  }
+  /**
+   * Stop listening and restore terminal state
+   */
+  stop() {
+    if (!this.isListening) return;
+    try {
+      this.stdin.off("keypress", this.handleKeypress);
+      this.stdin.off("data", this.handleData);
+      if (this.stdin.isTTY && this.originalRawMode !== void 0) {
+        this.stdin.setRawMode(this.originalRawMode);
+      }
+    } catch {
+    }
+    this.isListening = false;
+  }
+  /**
+   * Pause listening (for when Ink needs control)
+   */
+  pause() {
+    if (!this.isListening || this.isPaused) return;
+    try {
+      if (this.stdin.isTTY && this.originalRawMode !== void 0) {
+        this.stdin.setRawMode(this.originalRawMode);
+      }
+      this.isPaused = true;
+    } catch {
+    }
+  }
+  /**
+   * Resume listening (after Ink releases control)
+   */
+  resume() {
+    if (!this.isListening || !this.isPaused) return;
+    try {
+      if (this.stdin.isTTY) {
+        this.stdin.setRawMode(true);
+      }
+      this.isPaused = false;
+    } catch {
+    }
+  }
+  /**
+   * Get the current pre-input buffer
+   */
+  getPreInputBuffer() {
+    return this.preInputBuffer;
+  }
+  /**
+   * Clear the pre-input buffer
+   */
+  clearPreInputBuffer() {
+    this.preInputBuffer = "";
+  }
+  /**
+   * Get and clear the pre-input buffer
+   */
+  consumePreInputBuffer() {
+    const buffer = this.preInputBuffer;
+    this.preInputBuffer = "";
+    return buffer;
+  }
+  /**
+   * Handle keypress events (readline mode)
+   */
+  handleKeypress(_str, key) {
+    if (this.isPaused) return;
+    if (key.name === "escape") {
+      this.emit("escape" /* ESCAPE */);
+      return;
+    }
+    if (key.ctrl && key.name === "c") {
+      this.emit("ctrl_c" /* CTRL_C */);
+      return;
+    }
+    if (key.name === "return" || key.name === "enter") {
+      if (this.preInputBuffer) {
+        this.emit("line", this.preInputBuffer);
+      }
+      this.emit("enter" /* ENTER */);
+      return;
+    }
+    if (key.name === "backspace") {
+      if (this.preInputBuffer.length > 0) {
+        this.preInputBuffer = this.preInputBuffer.slice(0, -1);
+      }
+      this.emit("backspace" /* BACKSPACE */);
+      return;
+    }
+    if (key.name === "up") {
+      this.emit("up" /* UP */);
+      return;
+    }
+    if (key.name === "down") {
+      this.emit("down" /* DOWN */);
+      return;
+    }
+    if (key.name === "left") {
+      this.emit("left" /* LEFT */);
+      return;
+    }
+    if (key.name === "right") {
+      this.emit("right" /* RIGHT */);
+      return;
+    }
+    if (key.name === "tab") {
+      this.emit("tab" /* TAB */);
+      return;
+    }
+    if (_str && !key.ctrl && !key.meta && _str.length === 1) {
+      const charCode = _str.charCodeAt(0);
+      if (charCode >= 32 && charCode <= 126) {
+        this.preInputBuffer += _str;
+        this.emit("char", _str);
+      }
+    }
+  }
+  /**
+   * Handle raw data events (fallback mode)
+   */
+  handleData(data) {
+    if (this.isPaused) return;
+    const str = data.toString();
+    for (let i = 0; i < str.length; i++) {
+      const char = str[i];
+      const code = char.charCodeAt(0);
+      if (code === 27) {
+        if (i + 1 < str.length && str[i + 1] === "[") {
+          if (i + 2 < str.length) {
+            const arrow = str[i + 2];
+            switch (arrow) {
+              case "A":
+                this.emit("up" /* UP */);
+                break;
+              case "B":
+                this.emit("down" /* DOWN */);
+                break;
+              case "C":
+                this.emit("right" /* RIGHT */);
+                break;
+              case "D":
+                this.emit("left" /* LEFT */);
+                break;
+            }
+            i += 2;
+            continue;
+          }
+        } else {
+          this.emit("escape" /* ESCAPE */);
+          continue;
+        }
+      }
+      if (code === 3) {
+        this.emit("ctrl_c" /* CTRL_C */);
+        continue;
+      }
+      if (code === 13 || code === 10) {
+        if (this.preInputBuffer) {
+          this.emit("line", this.preInputBuffer);
+        }
+        this.emit("enter" /* ENTER */);
+        continue;
+      }
+      if (code === 127 || code === 8) {
+        if (this.preInputBuffer.length > 0) {
+          this.preInputBuffer = this.preInputBuffer.slice(0, -1);
+        }
+        this.emit("backspace" /* BACKSPACE */);
+        continue;
+      }
+      if (code === 9) {
+        this.emit("tab" /* TAB */);
+        continue;
+      }
+      if (code >= 32 && code <= 126) {
+        this.preInputBuffer += char;
+        this.emit("char", char);
+      }
+    }
+  }
+  /**
+   * Check if currently listening
+   */
+  isActive() {
+    return this.isListening && !this.isPaused;
+  }
+};
+var keyboardListenerInstance = null;
+function getKeyboardListener() {
+  if (!keyboardListenerInstance) {
+    keyboardListenerInstance = new KeyboardListener();
+  }
+  return keyboardListenerInstance;
+}
+
+// src/cli/app.tsx
 import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
 var App = ({ autoApprove = false, target }) => {
   const { exit } = useApp();
@@ -4950,12 +5218,19 @@ var App = ({ autoApprove = false, target }) => {
   const [showCommandHints, setShowCommandHints] = useState(false);
   const [mode, setMode] = useState("agent");
   const [checkpointCount, setCheckpointCount] = useState(0);
+  const [preInputBuffer, setPreInputBuffer] = useState("");
+  const [wasInterrupted, setWasInterrupted] = useState(false);
   const [agent] = useState(() => new AutonomousHackingAgent(void 0, { autoApprove }));
   const sessionManager2 = getSessionManager();
   const approvalManager2 = getApprovalManager({ yoloMode: autoApprove });
   const sessionDirRef = useRef(join6(homedir(), ".pentest", "sessions", `session-${Date.now()}`));
   const contextManagerRef = useRef(null);
   const wireLoggerRef = useRef(null);
+  const keyboardListenerRef = useRef(getKeyboardListener());
+  const isProcessingRef = useRef(false);
+  useEffect(() => {
+    isProcessingRef.current = isProcessing;
+  }, [isProcessing]);
   useEffect(() => {
     const sessionId = `session-${Date.now()}`;
     contextManagerRef.current = new ContextManager2(sessionDirRef.current);
@@ -5008,14 +5283,60 @@ var App = ({ autoApprove = false, target }) => {
     return duration;
   }, []);
   useEffect(() => {
-    const banner = `
-   \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2557   \u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557
-   \u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2551\u255A\u2550\u2550\u2588\u2588\u2554\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u2550\u2588\u2588\u2554\u2550\u2550\u255D
-   \u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2554\u2588\u2588\u2557 \u2588\u2588\u2551   \u2588\u2588\u2551   \u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557   \u2588\u2588\u2551   
-   \u2588\u2588\u2554\u2550\u2550\u2550\u255D \u2588\u2588\u2554\u2550\u2550\u255D  \u2588\u2588\u2551\u255A\u2588\u2588\u2557\u2588\u2588\u2551   \u2588\u2588\u2551   \u2588\u2588\u2554\u2550\u2550\u255D  \u255A\u2550\u2550\u2550\u2550\u2588\u2588\u2551   \u2588\u2588\u2551   
-   \u2588\u2588\u2551     \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2551 \u255A\u2588\u2588\u2588\u2588\u2551   \u2588\u2588\u2551   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551   \u2588\u2588\u2551   
-   \u255A\u2550\u255D     \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u255D  \u255A\u2550\u2550\u2550\u255D   \u255A\u2550\u255D   \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D   \u255A\u2550\u255D   `;
-    addMessage(MESSAGE_TYPE.SYSTEM, banner);
+    const listener = keyboardListenerRef.current;
+    const handleEscape = () => {
+      if (isProcessingRef.current && !pendingApproval) {
+        agent.pause();
+        stopTimer();
+        setIsProcessing(false);
+        setCurrentStatus("");
+        setWasInterrupted(true);
+        addMessage(MESSAGE_TYPE.SYSTEM, "\u23F8 Interrupted by ESC - Ready for input");
+        const buffered = listener.consumePreInputBuffer();
+        if (buffered) {
+          setInput(buffered);
+        }
+        listener.pause();
+      }
+    };
+    const handleChar = () => {
+      setPreInputBuffer(listener.getPreInputBuffer());
+    };
+    const handleBackspace = () => {
+      setPreInputBuffer(listener.getPreInputBuffer());
+    };
+    listener.on("escape" /* ESCAPE */, handleEscape);
+    listener.on("char", handleChar);
+    listener.on("backspace" /* BACKSPACE */, handleBackspace);
+    return () => {
+      listener.off("escape" /* ESCAPE */, handleEscape);
+      listener.off("char", handleChar);
+      listener.off("backspace" /* BACKSPACE */, handleBackspace);
+    };
+  }, [agent, addMessage, stopTimer, pendingApproval]);
+  useEffect(() => {
+    const listener = keyboardListenerRef.current;
+    if (isProcessing && !pendingApproval) {
+      listener.clearPreInputBuffer();
+      setPreInputBuffer("");
+      listener.start();
+      listener.resume();
+    } else {
+      const buffered = listener.consumePreInputBuffer();
+      if (buffered && !wasInterrupted) {
+        setInput((prev) => prev + buffered);
+      }
+      setPreInputBuffer("");
+      setWasInterrupted(false);
+      listener.pause();
+    }
+  }, [isProcessing, pendingApproval, wasInterrupted]);
+  useEffect(() => {
+    return () => {
+      keyboardListenerRef.current.stop();
+    };
+  }, []);
+  useEffect(() => {
     addMessage(MESSAGE_TYPE.SYSTEM, `
 \u{1F680} /target <ip> \u2192 /start [goal] | /help for commands
 \u26A0\uFE0F  For authorized penetration testing only. Unauthorized use is illegal.`);
@@ -5612,17 +5933,27 @@ pentesting v${APP_VERSION}`
       ] }, opt.decision)) }),
       /* @__PURE__ */ jsx2(Box2, { marginTop: 1, children: /* @__PURE__ */ jsx2(Text2, { dimColor: true, children: "\u2191\u2193 to select, Enter to confirm, or type /y /n /ya" }) })
     ] }),
-    isProcessing ? /* @__PURE__ */ jsxs2(Box2, { children: [
-      /* @__PURE__ */ jsx2(Text2, { color: THEME.status.running, children: /* @__PURE__ */ jsx2(Spinner, { type: "dots" }) }),
-      /* @__PURE__ */ jsxs2(Text2, { color: THEME.text.muted, children: [
-        " ",
-        currentStatus,
-        elapsedTime > 0 && /* @__PURE__ */ jsxs2(Text2, { dimColor: true, children: [
-          " (",
-          elapsedTime,
-          "s)"
+    isProcessing ? /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs2(Box2, { children: [
+        /* @__PURE__ */ jsx2(Text2, { color: THEME.status.running, children: /* @__PURE__ */ jsx2(Spinner, { type: "dots" }) }),
+        /* @__PURE__ */ jsxs2(Text2, { color: THEME.text.muted, children: [
+          " ",
+          currentStatus,
+          elapsedTime > 0 && /* @__PURE__ */ jsxs2(Text2, { dimColor: true, children: [
+            " (",
+            elapsedTime,
+            "s)"
+          ] })
         ] })
-      ] })
+      ] }),
+      preInputBuffer && /* @__PURE__ */ jsxs2(Box2, { marginTop: 1, children: [
+        /* @__PURE__ */ jsxs2(Text2, { color: THEME.text.accent, children: [
+          "\u2728 ",
+          preInputBuffer
+        ] }),
+        /* @__PURE__ */ jsx2(Text2, { color: THEME.text.muted, children: "\u258C" })
+      ] }),
+      /* @__PURE__ */ jsx2(Box2, { marginTop: 1, children: /* @__PURE__ */ jsx2(Text2, { dimColor: true, children: "ESC to interrupt \u2502 Type ahead to queue input" }) })
     ] }) : /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", children: [
       showCommandHints && input.startsWith("/") && /* @__PURE__ */ jsx2(Box2, { flexDirection: "column", marginBottom: 1, children: /* @__PURE__ */ jsx2(Text2, { dimColor: true, children: [
         "/target <ip>",
@@ -5667,7 +5998,9 @@ pentesting v${APP_VERSION}`
       /* @__PURE__ */ jsxs2(Text2, { dimColor: true, children: [
         "v",
         APP_VERSION,
-        " \u2502 Ctrl+X mode \u2502 /help \u2502 Ctrl+C ",
+        " \u2502 Ctrl+X mode \u2502 /help \u2502 ",
+        isProcessing ? "ESC interrupt \u2502 " : "",
+        "Ctrl+C ",
         isProcessing ? "stop" : "exit"
       ] })
     ] })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pentesting",
-  "version": "0.5.1",
+  "version": "0.5.4",
   "description": "Autonomous Penetration Testing AI Agent",
   "type": "module",
   "main": "dist/index.js",
@@ -78,4 +78,4 @@
     "tsx": "^4.19.2",
     "typescript": "^5.7.3"
   }
-}
+}