pentesting 0.56.1 → 0.56.3

package/dist/main.js

@@ -711,7 +711,7 @@ var INPUT_PROMPT_PATTERNS = [
 
 // src/shared/constants/agent.ts
 var APP_NAME = "Pentest AI";
-var APP_VERSION = "0.56.1";
+var APP_VERSION = "0.56.3";
 var APP_DESCRIPTION = "Autonomous Penetration Testing AI Agent";
 var LLM_ROLES = {
   SYSTEM: "system",
@@ -768,7 +768,7 @@ import gradient from "gradient-string";
 
 // src/platform/tui/app.tsx
 import { useState as useState8, useCallback as useCallback11, useRef as useRef10 } from "react";
-import { Box as Box18, useApp, useStdout as useStdout2 } from "ink";
+import { Box as Box18, useApp, useStdout as useStdout4 } from "ink";
 
 // src/platform/tui/hooks/useAgent.ts
 import { useState as useState2, useEffect as useEffect2, useCallback as useCallback2, useRef as useRef3 } from "react";
@@ -14911,7 +14911,10 @@ var formatFlags = (flags) => {
   if (!flags.length) return "";
   const lines = [];
   const total = flags.length;
-  lines.push(`\u2500\u2500\u2500 Captured (${total}) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`);
+  const label = `\u2500\u2500\u2500 Captured (${total}) `;
+  const cols = process.stdout?.columns ?? 80;
+  const fillWidth = Math.max(3, cols - 2 - label.length);
+  lines.push(`${label}${"\u2500".repeat(fillWidth)}`);
   lines.push("");
   flags.forEach((flag, i) => {
     lines.push(`  ${(i + 1).toString().padStart(2, " ")}. ${flag}`);
@@ -14920,6 +14923,21 @@ var formatFlags = (flags) => {
 };
 
 // src/platform/tui/hooks/commands/formatters/graph-summary.ts
+var getBoxWidth = () => Math.max(30, (process.stdout?.columns ?? 80) - 2);
+var boxLine = (content, width) => {
+  const inner = width - 2;
+  const truncated = content.length > inner ? content.slice(0, inner - 1) + "\u2026" : content;
+  return `\u2502 ${truncated.padEnd(inner - 1)}`;
+};
+var formatTargetLine = (target) => {
+  if (target.ports.length === 0) return target.ip;
+  const portList = target.ports.map((p) => `${p.port}`).join(", ");
+  return `${target.ip} \u2192 ${target.ip}:${portList}`;
+};
+var formatServiceLabel = (target, port) => {
+  const svc = port.version ? `${port.service}/${port.version}` : port.service;
+  return `${target.ip}:${port.port} (${svc})`;
+};
 var formatFindingsWithFlags = (findings, flags) => {
   const findingsOutput = formatFindings(findings);
   const flagsOutput = formatFlags(flags);
@@ -14929,40 +14947,109 @@ ${flagsOutput}`;
   }
   return findingsOutput;
 };
-var formatGraphWithSummary = (_graphASCII, findings, flags) => {
+var formatGraphWithSummary = (state, findings, flags) => {
   const lines = [];
-  lines.push("\u250C\u2500\u2500\u2500 Attack Graph \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
-  lines.push(`\u2502 \u{1F5A5} 1  \u26A0 ${findings.length}  \u2699 1`);
-  lines.push("\u2502");
-  lines.push("\u2502 \u{1F5A5} HOST (1)");
-  lines.push(`\u2502   \u25CB 138.2.89.94 \u2192 138.2.89.94:443`);
-  lines.push("\u2502");
-  lines.push(`\u2502 \u26A0 VULNERABILITY (${findings.length})`);
-  const sortedFindings = [...findings].sort((a, b) => b.confidence - a.confidence).slice(0, 5);
-  for (const f of sortedFindings) {
-    const icon = confIcon(f.confidence);
-    const cat = f.category ? ` \u2502 ${f.category}` : "";
-    lines.push(`\u2502   \u25CB ${icon} ${f.title.slice(0, 60)}${f.title.length > 60 ? "..." : ""}`);
-    lines.push(`\u2502       ${confLabel(f.confidence).toUpperCase()} \u2502 ${f.severity.toUpperCase()}${cat}`);
+  const w = getBoxWidth();
+  const innerDash = w - 2;
+  const targets = state.getAllTargets();
+  const graphStats = state.attackGraph.getStats();
+  const allNodes = state.attackGraph.getAllNodes();
+  const hostNodes = allNodes.filter((n) => n.type === NODE_TYPE.HOST);
+  const serviceNodes = allNodes.filter((n) => n.type === NODE_TYPE.SERVICE);
+  const vulnNodes = allNodes.filter((n) => n.type === NODE_TYPE.VULNERABILITY);
+  const hostCount = hostNodes.length || targets.length;
+  const serviceCount = serviceNodes.length || targets.reduce((sum, t) => sum + t.ports.length, 0);
+  const vulnCount = findings.length;
+  const topTitle = "\u2500\u2500\u2500 Attack Graph ";
+  lines.push(`\u250C${topTitle}${"\u2500".repeat(Math.max(0, innerDash - topTitle.length))}\u2510`);
+  lines.push(boxLine(`\u{1F5A5} ${hostCount}  \u26A0 ${vulnCount}  \u2699 ${serviceCount}`, w));
+  lines.push(boxLine("", w));
+  lines.push(boxLine(`\u{1F5A5} HOST (${hostCount})`, w));
+  if (targets.length > 0) {
+    for (const t of targets.slice(0, 5)) {
+      lines.push(boxLine(`  \u25CB ${formatTargetLine(t)}`, w));
+    }
+    if (targets.length > 5) {
+      lines.push(boxLine(`  ... and ${targets.length - 5} more hosts`, w));
+    }
+  } else if (hostNodes.length > 0) {
+    for (const node of hostNodes.slice(0, 5)) {
+      lines.push(boxLine(`  \u25CB ${node.label}`, w));
+    }
+    if (hostNodes.length > 5) {
+      lines.push(boxLine(`  ... and ${hostNodes.length - 5} more hosts`, w));
+    }
+  } else {
+    lines.push(boxLine("  (no hosts discovered)", w));
   }
-  if (findings.length > 5) {
-    lines.push(`\u2502   ... and ${findings.length - 5} more findings`);
+  lines.push(boxLine("", w));
+  lines.push(boxLine(`\u26A0 VULNERABILITY (${vulnCount})`, w));
+  if (findings.length > 0) {
+    const sortedFindings = [...findings].sort((a, b) => b.confidence - a.confidence).slice(0, 5);
+    for (const f of sortedFindings) {
+      const icon = confIcon(f.confidence);
+      const cat = f.category ? ` \u2502 ${f.category}` : "";
+      lines.push(boxLine(`  \u25CB ${icon} ${f.title.slice(0, 60)}${f.title.length > 60 ? "..." : ""}`, w));
+      lines.push(boxLine(`      ${confLabel(f.confidence).toUpperCase()} \u2502 ${f.severity.toUpperCase()}${cat}`, w));
+    }
+    if (findings.length > 5) {
+      lines.push(boxLine(`  ... and ${findings.length - 5} more findings`, w));
+    }
+  } else if (vulnNodes.length > 0) {
+    for (const node of vulnNodes.slice(0, 5)) {
+      lines.push(boxLine(`  \u25CB ${node.label}`, w));
+    }
+    if (vulnNodes.length > 5) {
+      lines.push(boxLine(`  ... and ${vulnNodes.length - 5} more`, w));
+    }
+  } else {
+    lines.push(boxLine("  (no vulnerabilities found)", w));
   }
   const cveFindings = findings.filter((f) => f.title.includes("CVE"));
   if (cveFindings.length > 0) {
-    lines.push(`\u2502   \u25CB CVE search: https nginx/1.24.0 (Ubuntu) -> Apache CouchDB 3.5.1`);
+    const cveList = cveFindings.slice(0, 3).map((f) => f.title.match(/CVE-\d{4}-\d+/)?.[0] ?? f.title).join(", ");
+    const suffix = cveFindings.length > 3 ? ` (+${cveFindings.length - 3} more)` : "";
+    lines.push(boxLine(`  \u25CB CVE found: ${cveList}${suffix}`, w));
+  }
+  lines.push(boxLine("", w));
+  lines.push(boxLine(`\u2699 SERVICE (${serviceCount})`, w));
+  if (targets.length > 0) {
+    let shownServices = 0;
+    const maxShow = 5;
+    for (const t of targets) {
+      for (const p of t.ports) {
+        if (shownServices >= maxShow) break;
+        lines.push(boxLine(`  \u25CB ${formatServiceLabel(t, p)}`, w));
+        shownServices++;
+      }
+      if (shownServices >= maxShow) break;
+    }
+    const totalServices = targets.reduce((sum, t) => sum + t.ports.length, 0);
+    if (totalServices > maxShow) {
+      lines.push(boxLine(`  ... and ${totalServices - maxShow} more services`, w));
+    }
+  } else if (serviceNodes.length > 0) {
+    for (const node of serviceNodes.slice(0, 5)) {
+      lines.push(boxLine(`  \u25CB ${node.label}`, w));
+    }
+    if (serviceNodes.length > 5) {
+      lines.push(boxLine(`  ... and ${serviceNodes.length - 5} more`, w));
+    }
+  } else {
+    lines.push(boxLine("  (no services discovered)", w));
   }
-  lines.push("\u2502");
-  lines.push("\u2502 \u2699 SERVICE (1)");
-  lines.push(`\u2502   \u25CB 138.2.89.94:443 (nginx/1.24.0 (Ubuntu) -> Apache CouchDB 3.5.1) \u2192 CVE search: https nginx/1.24.0 (Ubuntu) -> Apache CouchDB 3.5.1`);
   if (flags.length > 0) {
-    lines.push("\u2502");
-    lines.push(`\u2502 \u{1F3F4} Captured: ${flags.length}`);
-  }
-  lines.push("\u2502");
-  lines.push("\u251C\u2500\u2500\u2500 Summary \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524");
-  lines.push(`\u2502 Nodes: ${findings.length + 2} | Edges: 2 | Succeeded: 0 | Failed: 0 | Chains: 0`);
-  lines.push("\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518");
+    lines.push(boxLine("", w));
+    lines.push(boxLine(`\u{1F3F4} Captured: ${flags.length}`, w));
+  }
+  lines.push(boxLine("", w));
+  const midTitle = "\u2500\u2500\u2500 Summary ";
+  lines.push(`\u251C${midTitle}${"\u2500".repeat(Math.max(0, innerDash - midTitle.length))}\u2524`);
+  lines.push(boxLine(
+    `Nodes: ${graphStats.nodes} | Edges: ${graphStats.edges} | Succeeded: ${graphStats.succeeded} | Failed: ${graphStats.failed} | Chains: ${graphStats.chains}`,
+    w
+  ));
+  lines.push(`\u2514${"\u2500".repeat(innerDash)}\u2518`);
   return lines.join("\n");
 };
 
@@ -15020,7 +15107,7 @@ ${procData.stdout || "(no output)"}
     const flags = state.getFlags();
     const graphASCII = state.attackGraph.toASCII();
     if (state.attackGraph.isEmpty() && (findings.length > 0 || flags.length > 0)) {
-      ctx.showModal("graph", formatGraphWithSummary(graphASCII, findings, flags));
+      ctx.showModal("graph", formatGraphWithSummary(state, findings, flags));
     } else {
       let output = graphASCII;
       if (flags.length > 0) {
@@ -15035,7 +15122,7 @@ ${procData.stdout || "(no output)"}
     const flags = state.getFlags();
     const graphASCII = state.attackGraph.toASCII();
     if (state.attackGraph.isEmpty() && (findings.length > 0 || flags.length > 0)) {
-      ctx.showModal("graph", formatGraphWithSummary(graphASCII, findings, flags));
+      ctx.showModal("graph", formatGraphWithSummary(state, findings, flags));
     } else {
       let output = graphASCII;
       if (flags.length > 0) {
@@ -16160,17 +16247,21 @@ var AutocompletePreview = ({
 };
 
 // src/platform/tui/components/input/SecretInputArea.tsx
-import { Box as Box12, Text as Text14 } from "ink";
+import { Box as Box12, Text as Text14, useStdout } from "ink";
 import TextInput from "ink-text-input";
 import { jsx as jsx14, jsxs as jsxs12 } from "react/jsx-runtime";
+var OUTER_PADDING = 2;
 var SecretInputArea = ({
   inputRequest,
   secretInput,
   setSecretInput,
   onSecretSubmit
 }) => {
+  const { stdout } = useStdout();
+  const borderWidth = Math.max(10, (stdout?.columns ?? 80) - OUTER_PADDING);
+  const borderLine = "\u2501".repeat(borderWidth);
   return /* @__PURE__ */ jsxs12(Box12, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx14(Box12, { children: /* @__PURE__ */ jsx14(Text14, { color: THEME.yellow, children: "\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501" }) }),
+    /* @__PURE__ */ jsx14(Box12, { children: /* @__PURE__ */ jsx14(Text14, { color: THEME.yellow, children: borderLine }) }),
     /* @__PURE__ */ jsxs12(Box12, { flexDirection: "column", paddingX: 1, children: [
       /* @__PURE__ */ jsxs12(Box12, { children: [
         /* @__PURE__ */ jsx14(Text14, { color: THEME.yellow, bold: true, children: "\u{1F512} " }),
@@ -16190,14 +16281,15 @@ var SecretInputArea = ({
         )
       ] })
     ] }),
-    /* @__PURE__ */ jsx14(Box12, { children: /* @__PURE__ */ jsx14(Text14, { color: THEME.yellow, children: "\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501" }) })
+    /* @__PURE__ */ jsx14(Box12, { children: /* @__PURE__ */ jsx14(Text14, { color: THEME.yellow, children: borderLine }) })
   ] });
 };
 
 // src/platform/tui/components/input/NormalInputArea.tsx
-import { Box as Box13, Text as Text15 } from "ink";
+import { Box as Box13, Text as Text15, useStdout as useStdout2 } from "ink";
 import TextInput2 from "ink-text-input";
 import { jsx as jsx15, jsxs as jsxs13 } from "react/jsx-runtime";
+var OUTER_PADDING2 = 2;
 var NormalInputArea = ({
   inputKey,
   value,
@@ -16205,8 +16297,11 @@ var NormalInputArea = ({
   onSubmit,
   placeholder
 }) => {
+  const { stdout } = useStdout2();
+  const borderWidth = Math.max(10, (stdout?.columns ?? 80) - OUTER_PADDING2);
+  const borderLine = "\u2500".repeat(borderWidth);
   return /* @__PURE__ */ jsxs13(Box13, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx15(Box13, { children: /* @__PURE__ */ jsx15(Text15, { dimColor: true, color: THEME.dimGray, children: "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500" }) }),
+    /* @__PURE__ */ jsx15(Box13, { children: /* @__PURE__ */ jsx15(Text15, { dimColor: true, color: THEME.dimGray, children: borderLine }) }),
     /* @__PURE__ */ jsxs13(Box13, { paddingX: 1, children: [
       /* @__PURE__ */ jsx15(Text15, { color: THEME.primary, children: "\u276F " }),
       /* @__PURE__ */ jsx15(
@@ -16220,7 +16315,7 @@ var NormalInputArea = ({
         inputKey
       )
     ] }),
-    /* @__PURE__ */ jsx15(Box13, { children: /* @__PURE__ */ jsx15(Text15, { dimColor: true, color: THEME.dimGray, children: "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500" }) })
+    /* @__PURE__ */ jsx15(Box13, { children: /* @__PURE__ */ jsx15(Text15, { dimColor: true, color: THEME.dimGray, children: borderLine }) })
   ] });
 };
 
@@ -16287,6 +16382,27 @@ var ChatInput = memo10(({
     setSelectedIdx(0);
     setInputKey((k) => k + 1);
   }, []);
+  const onSubmitRef = useRef8(onSubmit);
+  onSubmitRef.current = onSubmit;
+  const wrappedOnSubmit = useCallback9((val) => {
+    if (showPreviewRef.current) {
+      const sug = suggestionsRef.current;
+      if (!sug.length) {
+        onSubmitRef.current(val);
+        return;
+      }
+      const best = sug[Math.min(selectedIdxRef.current, sug.length - 1)];
+      if (best.args) {
+        completeCommand(selectedIdxRef.current);
+      } else {
+        const completed = `/${best.name}`;
+        onChangeRef.current(completed);
+        onSubmitRef.current(completed);
+      }
+      return;
+    }
+    onSubmitRef.current(val);
+  }, [completeCommand]);
   useInput3(useCallback9((_input, key) => {
     if (inputRequestRef.current.status === "active") return;
     const sug = suggestionsRef.current;
@@ -16330,7 +16446,7 @@ var ChatInput = memo10(({
           inputKey,
           value,
           onChange,
-          onSubmit,
+          onSubmit: wrappedOnSubmit,
           placeholder
         }
       )
@@ -16361,6 +16477,7 @@ var Footer = memo11(({ phase, targets, findings, todo, elapsedTime, isProcessing
   return /* @__PURE__ */ jsxs15(
     Box15,
     {
+      width: "100%",
       paddingX: 1,
       justifyContent: "space-between",
       overflow: "hidden",
@@ -16412,7 +16529,7 @@ var footer_default = Footer;
 
 // src/platform/tui/components/Modal.tsx
 import { useMemo as useMemo2, memo as memo12, useCallback as useCallback10, useRef as useRef9 } from "react";
-import { Box as Box16, Text as Text18, useStdout, useInput as useInput4 } from "ink";
+import { Box as Box16, Text as Text18, useStdout as useStdout3, useInput as useInput4 } from "ink";
 import { jsx as jsx18, jsxs as jsxs16 } from "react/jsx-runtime";
 var MODAL_TITLES = {
   findings: "\u25C8 FINDINGS \u25C8",
@@ -16430,7 +16547,7 @@ var Modal = memo12(({
   onScrollRef.current = onScroll;
   const onCloseRef = useRef9(onClose);
   onCloseRef.current = onClose;
-  const { stdout } = useStdout();
+  const { stdout } = useStdout3();
   const terminalHeight = stdout?.rows ?? 24;
   const terminalWidth = (stdout?.columns ?? 80) - 4;
   const maxHeight = Math.max(1, terminalHeight - 6);
@@ -16464,13 +16581,11 @@ var Modal = memo12(({
       width: terminalWidth,
       height: terminalHeight,
       children: [
-        /* @__PURE__ */ jsx18(Box16, { justifyContent: "center", marginBottom: 0, children: /* @__PURE__ */ jsxs16(Text18, { color: THEME.cyan, bold: true, children: [
-          "\u2500".repeat(10),
-          " ",
-          MODAL_TITLES[type],
-          " ",
-          "\u2500".repeat(10)
-        ] }) }),
+        /* @__PURE__ */ jsx18(Box16, { justifyContent: "center", marginBottom: 0, children: /* @__PURE__ */ jsx18(Text18, { color: THEME.cyan, bold: true, children: (() => {
+          const title = MODAL_TITLES[type];
+          const sideWidth = Math.max(3, Math.floor((terminalWidth - title.length - 2) / 2));
+          return `${"\u2500".repeat(sideWidth)} ${title} ${"\u2500".repeat(sideWidth)}`;
+        })() }) }),
         /* @__PURE__ */ jsx18(
           Box16,
           {
@@ -16575,7 +16690,7 @@ import { jsx as jsx20, jsxs as jsxs18 } from "react/jsx-runtime";
 var MODEL_NAME = getModel() || DEFAULT_MODEL;
 var App = ({ autoApprove = false, target }) => {
   const { exit } = useApp();
-  const { stdout } = useStdout2();
+  const { stdout } = useStdout4();
   const terminalWidth = stdout?.columns ?? 80;
   const [input, setInput] = useState8("");
   const [secretInput, setSecretInput] = useState8("");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pentesting",
-  "version": "0.56.1",
+  "version": "0.56.3",
   "description": "Autonomous Penetration Testing AI Agent",
   "type": "module",
   "main": "dist/main.js",