@pensar/apex 0.0.57 → 0.0.58-canary.8d44eb90

package/build/index.js

@@ -69284,7 +69284,7 @@ function createRoot(renderer) {
 }
 
 // src/tui/index.tsx
-var import_react87 = __toESM(require_react(), 1);
+var import_react88 = __toESM(require_react(), 1);
 
 // src/tui/components/footer.tsx
 import os5 from "os";
@@ -70114,13 +70114,13 @@ async function get() {
   return {
     ...parsedConfig,
     version,
-    openAiAPIKey: process.env.OPENAI_API_KEY,
-    anthropicAPIKey: process.env.ANTHROPIC_API_KEY,
-    openRouterAPIKey: process.env.OPENROUTER_API_KEY,
-    bedrockAPIKey: process.env.BEDROCK_API_KEY,
-    daytonaAPIKey: process.env.DAYTONA_API_KEY,
-    daytonaOrgId: process.env.DAYTONA_ORG_ID,
-    runloopAPIKey: process.env.RUNLOOP_API_KEY
+    openAiAPIKey: process.env.OPENAI_API_KEY ?? parsedConfig.openAiAPIKey,
+    anthropicAPIKey: process.env.ANTHROPIC_API_KEY ?? parsedConfig.anthropicAPIKey,
+    openRouterAPIKey: process.env.OPENROUTER_API_KEY ?? parsedConfig.openRouterAPIKey,
+    bedrockAPIKey: process.env.BEDROCK_API_KEY ?? parsedConfig.bedrockAPIKey,
+    daytonaAPIKey: process.env.DAYTONA_API_KEY ?? parsedConfig.daytonaAPIKey,
+    daytonaOrgId: process.env.DAYTONA_ORG_ID ?? parsedConfig.daytonaOrgId,
+    runloopAPIKey: process.env.RUNLOOP_API_KEY ?? parsedConfig.runloopAPIKey
   };
 }
 async function update(config) {
@@ -71905,14 +71905,14 @@ var commands = [
     }
   },
   {
-    name: "resume",
-    aliases: ["r"],
-    description: "Resume a previous pentest session",
+    name: "sessions",
+    aliases: ["s"],
+    description: "Browse previous sessions",
     category: "Pentesting",
     handler: async (args, ctx3) => {
       ctx3.navigate({
         type: "base",
-        path: "resume"
+        path: "sessions"
       });
     }
   },
@@ -71921,6 +71921,7 @@ var commands = [
     aliases: ["c"],
     description: "Open the Chat TUI interface",
     category: "General",
+    hidden: true,
     handler: async (args, ctx3) => {
       ctx3.navigate({
         type: "base",
@@ -71933,6 +71934,7 @@ var commands = [
     aliases: ["t"],
     description: "View and manage active tools (session only)",
     category: "Session",
+    hidden: true,
     handler: async (args, ctx3) => {
       if (ctx3.route.type !== "session") {
         return;
@@ -71979,6 +71981,8 @@ function CommandProvider({ children }) {
     const options = [];
     for (const cmd of routerCommands) {
       const cmdConfig = commands.find((c) => c.name === cmd.name);
+      if (cmdConfig?.hidden)
+        continue;
       let description = cmd.description || "";
       options.push({
         value: `/${cmd.name}`,
@@ -74216,7 +74220,7 @@ var PromptInput = import_react25.forwardRef(function PromptInput2({
   onSubmit,
   enableAutocomplete = false,
   autocompleteOptions = [],
-  maxSuggestions = 6,
+  maxSuggestions = 10,
   enableCommands = false,
   onCommandExecute,
   showPromptIndicator = false
@@ -74502,6 +74506,13 @@ var SubAgentDisplay = import_react27.memo(function SubAgentDisplay2({
               subagent.name
             ]
           }, undefined, true, undefined, this),
+          subagent.status === "paused" && /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+            fg: colors.orangeText,
+            children: [
+              "⏸ ",
+              subagent.name
+            ]
+          }, undefined, true, undefined, this),
           /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
             fg: "gray",
             children: open ? "▼" : "▶"
@@ -74837,15 +74848,31 @@ function SwarmDashboard({
   isCompleted,
   onBack,
   onViewReport,
-  onKillAgent
+  onKillAgent,
+  onResumeAgent
 }) {
   const [currentView, setCurrentView] = import_react31.useState("overview");
   const [selectedAgentId, setSelectedAgentId] = import_react31.useState(null);
   const [focusedIndex, setFocusedIndex] = import_react31.useState(0);
   const [showDiscoveryLogs, setShowDiscoveryLogs] = import_react31.useState(false);
   const { stack, externalDialogOpen } = useDialog();
-  const discoveryAgent = import_react31.useMemo(() => subagents.find((s) => s.type === "attack-surface") || null, [subagents]);
+  const discoveryAgent = import_react31.useMemo(() => subagents.find((s) => s.type === "attack-surface" && s.status === "pending") || subagents.find((s) => s.type === "attack-surface") || null, [subagents]);
   const pentestAgents = import_react31.useMemo(() => subagents.filter((s) => s.type === "pentest"), [subagents]);
+  const allEndpoints = import_react31.useMemo(() => {
+    const endpointSet = new Set;
+    const attackSurfaceAgents = subagents.filter((s) => s.type === "attack-surface");
+    for (const agent of attackSurfaceAgents) {
+      for (const msg of agent.messages) {
+        if (msg.role === "assistant" && typeof msg.content === "string") {
+          const urlMatches = msg.content.match(/\/[a-zA-Z0-9\/_.-]+/g);
+          if (urlMatches) {
+            urlMatches.forEach((u) => endpointSet.add(u));
+          }
+        }
+      }
+    }
+    return Array.from(endpointSet).slice(0, 50);
+  }, [subagents]);
   const metrics = import_react31.useMemo(() => {
     const findingsCount = subagents.reduce((sum, s) => {
       return sum + s.messages.filter((m2) => m2.role === "assistant" && typeof m2.content === "string" && (m2.content.includes("finding") || m2.content.includes("vulnerability"))).length;
@@ -74868,6 +74895,10 @@ function SwarmDashboard({
         setShowDiscoveryLogs((prev) => !prev);
         return;
       }
+      if ((key.name === "r" || key.name === "R") && discoveryAgent?.status === "paused") {
+        onResumeAgent?.(discoveryAgent.id);
+        return;
+      }
       const agentCount = pentestAgents.length;
       if (key.name === "escape") {
         if (showDiscoveryLogs) {
@@ -74922,6 +74953,10 @@ function SwarmDashboard({
         setSelectedAgentId(null);
         return;
       }
+      if ((key.name === "r" || key.name === "R") && selectedAgent?.status === "paused") {
+        onResumeAgent?.(selectedAgent.id);
+        return;
+      }
     }
   });
   if (currentView === "detail" && selectedAgent) {
@@ -74930,7 +74965,8 @@ function SwarmDashboard({
       onBack: () => {
         setCurrentView("overview");
         setSelectedAgentId(null);
-      }
+      },
+      onResume: selectedAgent.status === "paused" ? () => onResumeAgent?.(selectedAgent.id) : undefined
     }, undefined, false, undefined, this);
   }
   return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
@@ -74947,6 +74983,7 @@ function SwarmDashboard({
         children: [
           /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(DiscoveryPanel, {
             agent: discoveryAgent,
+            endpoints: allEndpoints,
             showLogs: showDiscoveryLogs,
             onToggleLogs: () => setShowDiscoveryLogs((prev) => !prev)
           }, undefined, false, undefined, this),
@@ -74962,7 +74999,28 @@ function SwarmDashboard({
               borderColor: dimText,
               backgroundColor: darkBg,
               padding: 2,
-              children: discoveryAgent?.status === "pending" ? /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
+              children: discoveryAgent?.status === "paused" ? /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
+                flexDirection: "column",
+                alignItems: "center",
+                gap: 1,
+                children: [
+                  /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+                    fg: colors.orangeText,
+                    children: "⏸ Discovery was interrupted"
+                  }, undefined, false, undefined, this),
+                  /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+                    fg: dimText,
+                    children: [
+                      "Press ",
+                      /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("span", {
+                        fg: colors.orangeText,
+                        children: "[R]"
+                      }, undefined, false, undefined, this),
+                      " to resume"
+                    ]
+                  }, undefined, true, undefined, this)
+                ]
+              }, undefined, true, undefined, this) : discoveryAgent?.status === "pending" ? /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
                 flexDirection: "column",
                 alignItems: "center",
                 gap: 1,
@@ -75051,30 +75109,18 @@ function SwarmDashboard({
         canceledAgents: metrics.canceledAgents,
         duration: metrics.duration,
         isExecuting,
-        showKillHint: !!onKillAgent
+        showKillHint: !!onKillAgent,
+        discoveryPaused: discoveryAgent?.status === "paused"
       }, undefined, false, undefined, this)
     ]
   }, undefined, true, undefined, this);
 }
 function DiscoveryPanel({
   agent,
+  endpoints,
   showLogs,
   onToggleLogs
 }) {
-  const endpoints = import_react31.useMemo(() => {
-    if (!agent)
-      return [];
-    const endpointSet = new Set;
-    for (const msg of agent.messages) {
-      if (msg.role === "assistant" && typeof msg.content === "string") {
-        const urlMatches = msg.content.match(/\/[a-zA-Z0-9\/_-]+/g);
-        if (urlMatches) {
-          urlMatches.forEach((u) => endpointSet.add(u));
-        }
-      }
-    }
-    return Array.from(endpointSet).slice(0, 50);
-  }, [agent?.messages]);
   if (showLogs && agent) {
     return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
       flexGrow: 1,
@@ -75106,6 +75152,10 @@ function DiscoveryPanel({
                 agent.status === "failed" && /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
                   fg: "red",
                   children: "✗ Attack Surface Discovery"
+                }, undefined, false, undefined, this),
+                agent.status === "paused" && /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+                  fg: colors.orangeText,
+                  children: "⏸ Attack Surface Discovery (Paused)"
                 }, undefined, false, undefined, this)
               ]
             }, undefined, true, undefined, this),
@@ -75196,6 +75246,10 @@ function DiscoveryPanel({
               agent?.status === "failed" && /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
                 fg: "red",
                 children: "✗ Discovery"
+              }, undefined, false, undefined, this),
+              agent?.status === "paused" && /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+                fg: colors.orangeText,
+                children: "⏸ Discovery"
               }, undefined, false, undefined, this)
             ]
           }, undefined, true, undefined, this),
@@ -75217,7 +75271,7 @@ function DiscoveryPanel({
                 children: "Status: "
               }, undefined, false, undefined, this),
               /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("span", {
-                fg: agent.status === "pending" ? greenBullet : creamText,
+                fg: agent.status === "pending" ? greenBullet : agent.status === "paused" ? colors.orangeText : creamText,
                 children: agent.status
               }, undefined, false, undefined, this)
             ]
@@ -75245,6 +75299,18 @@ function DiscoveryPanel({
                 children: endpoints.length
               }, undefined, false, undefined, this)
             ]
+          }, undefined, true, undefined, this),
+          agent.status === "paused" && /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+            children: [
+              /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("span", {
+                fg: colors.orangeText,
+                children: "[R]"
+              }, undefined, false, undefined, this),
+              /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("span", {
+                fg: dimText,
+                children: " Resume"
+              }, undefined, false, undefined, this)
+            ]
           }, undefined, true, undefined, this)
         ]
       }, undefined, true, undefined, this),
@@ -75280,12 +75346,14 @@ function AgentCard({ agent, focused, onSelect }) {
     pending: "◐",
     completed: "✓",
     failed: "✗",
+    paused: "⏸",
     canceled: "⊘"
   }[agent.status];
   const statusColor = {
     pending: greenBullet,
     completed: greenBullet,
     failed: RGBA.fromInts(244, 67, 54, 255),
+    paused: colors.orangeText,
     canceled: dimText
   }[agent.status];
   const lastActivity = import_react31.useMemo(() => {
@@ -75377,6 +75445,9 @@ function AgentCard({ agent, focused, onSelect }) {
         }, undefined, false, undefined, this) : agent.status === "pending" ? /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(SpinnerDots, {
           label: lastActivity,
           fg: "green"
+        }, undefined, false, undefined, this) : agent.status === "paused" ? /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+          fg: colors.orangeText,
+          children: "⏸ Paused — press Enter then R to resume"
         }, undefined, false, undefined, this) : /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
           fg: agent.status === "completed" ? greenBullet : dimText,
           children: agent.status === "completed" ? "✓ Complete" : lastActivity
@@ -75433,7 +75504,8 @@ function MetricsBar({
   canceledAgents,
   duration,
   isExecuting,
-  showKillHint
+  showKillHint,
+  discoveryPaused
 }) {
   const formattedDuration = import_react31.useMemo(() => {
     const mins = Math.floor(duration / 60);
@@ -75518,6 +75590,18 @@ function MetricsBar({
         flexDirection: "row",
         gap: 2,
         children: [
+          discoveryPaused && /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+            children: [
+              /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("span", {
+                fg: colors.orangeText,
+                children: "[R]"
+              }, undefined, false, undefined, this),
+              /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("span", {
+                fg: dimText,
+                children: " Resume"
+              }, undefined, false, undefined, this)
+            ]
+          }, undefined, true, undefined, this),
           showKillHint && /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
             children: [
               /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("span", {
@@ -75583,11 +75667,12 @@ function MetricsBar({
     ]
   }, undefined, true, undefined, this);
 }
-function AgentDetailView({ agent, onBack }) {
+function AgentDetailView({ agent, onBack, onResume }) {
   const statusColor = {
     pending: greenBullet,
     completed: greenBullet,
     failed: RGBA.fromInts(244, 67, 54, 255),
+    paused: colors.orangeText,
     canceled: dimText
   }[agent.status];
   return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
@@ -75670,6 +75755,18 @@ function AgentDetailView({ agent, onBack }) {
             flexDirection: "row",
             gap: 2,
             children: [
+              agent.status === "paused" && onResume && /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+                children: [
+                  /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("span", {
+                    fg: colors.orangeText,
+                    children: "[R]"
+                  }, undefined, false, undefined, this),
+                  /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("span", {
+                    fg: dimText,
+                    children: " Resume"
+                  }, undefined, false, undefined, this)
+                ]
+              }, undefined, true, undefined, this),
               /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
                 children: [
                   /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("span", {
@@ -125562,7 +125659,7 @@ Example workflow:
     execute: async (params) => recordTestResultCore(session, params)
   });
 }
-async function generateTestStrategy(params, model, onTokenUsage) {
+async function generateTestStrategy(params, model, onTokenUsage, authConfig) {
   const prompt = `You are a penetration testing expert. Generate a concise testing strategy:
 
 Attack Type: ${params.knowledge.name}
@@ -125583,7 +125680,7 @@ Generate a 2-3 sentence testing strategy:
 
 Be tactical and specific.`;
   try {
-    const providerModel = getProviderModel(model);
+    const providerModel = getProviderModel(model, authConfig);
     const result = await generateText({
       model: providerModel,
       prompt
@@ -125596,7 +125693,7 @@ Be tactical and specific.`;
     return params.knowledge.adaptiveStrategy;
   }
 }
-async function generatePayload(params, model, onTokenUsage) {
+async function generatePayload(params, model, onTokenUsage, authConfig) {
   const prompt = `Generate ONE ${params.knowledge.name} payload for testing.
 
 Techniques:
@@ -125621,7 +125718,8 @@ Generate ONE specific payload. Return ONLY JSON:
       model,
       schema: PayloadSchema,
       prompt,
-      onTokenUsage
+      onTokenUsage,
+      authConfig
     });
     return result;
   } catch (error40) {
@@ -125634,7 +125732,7 @@ Generate ONE specific payload. Return ONLY JSON:
     technique: technique.name
   };
 }
-async function analyzeResponse(params, model, onTokenUsage) {
+async function analyzeResponse(params, model, onTokenUsage, authConfig) {
   const prompt = `Analyze this security test response:
 
 Attack: ${params.knowledge.name}
@@ -125663,7 +125761,8 @@ Analyze: Is this vulnerable? Return ONLY JSON:
       model,
       schema: AnalysisSchema,
       prompt,
-      onTokenUsage
+      onTokenUsage,
+      authConfig
     });
     return result;
   } catch (error40) {
@@ -125682,7 +125781,7 @@ Analyze: Is this vulnerable? Return ONLY JSON:
     suggestedNextTest: "Try alternative payload or technique"
   };
 }
-function createSmartTestTool(session, model, onTokenUsage) {
+function createSmartTestTool(session, model, onTokenUsage, authConfig) {
   return tool2({
     description: `Intelligently test a parameter for a vulnerability using AI-powered adaptive testing.
 
@@ -125751,7 +125850,7 @@ test_parameter({
           parameter,
           endpoint,
           context: context2
-        }, model, onTokenUsage);
+        }, model, onTokenUsage, authConfig);
         console.log(`Strategy: ${strategy}`);
         const results = [];
         let vulnerable = false;
@@ -125764,7 +125863,7 @@ test_parameter({
             context: { ...context2, parameter, endpoint },
             previousResults: results,
             round
-          }, model, onTokenUsage);
+          }, model, onTokenUsage, authConfig);
           console.log(`  Payload: ${payloadData.payload}`);
           console.log(`  Reasoning: ${payloadData.reasoning}`);
           let response;
@@ -125793,7 +125892,7 @@ test_parameter({
             attackType,
             knowledge,
             previousResults: results
-          }, model, onTokenUsage);
+          }, model, onTokenUsage, authConfig);
           console.log(`  Analysis: ${analysis.reasoning}`);
           console.log(`  Vulnerable: ${analysis.vulnerable} (confidence: ${analysis.confidence})`);
           results.push({
@@ -126237,7 +126336,7 @@ function wrapCommandWithHeaders(command, headers) {
   }
   return wrapped;
 }
-function createPentestTools(session, model, toolOverride, onTokenUsage, abortSignal, operatorMode) {
+function createPentestTools(session, model, toolOverride, onTokenUsage, abortSignal, operatorMode, authConfig) {
   const offensiveHeaders = Session.getOffensiveHeaders(session);
   const fuzzEndpoint = tool2({
     description: "Fuzz an endpoint with values between a given range to test for IDOR vulnerabilities. Only try to fuzz at most 50 values with each call of this tool.",
@@ -126793,7 +126892,7 @@ Example flow:
     cve_lookup: createCVELookupTool(),
     document_finding: createDocumentFindingTool(session),
     record_test_result: createRecordTestResultTool(session),
-    test_parameter: createSmartTestTool(session, model || "claude-sonnet-4-20250514", onTokenUsage),
+    test_parameter: createSmartTestTool(session, model || "claude-sonnet-4-20250514", onTokenUsage, authConfig),
     check_testing_coverage: createCheckTestingCoverageTool(session),
     validate_completeness: createValidateCompletenessTool(session),
     enumerate_endpoints: createEnumerateEndpointsTool(session),
@@ -136760,7 +136859,7 @@ async function runAgent(opts) {
     http_request,
     cve_lookup,
     smart_enumerate
-  } = createPentestTools(session, model, toolOverride, onToolTokenUsage, abortSignal);
+  } = createPentestTools(session, model, toolOverride, onToolTokenUsage, abortSignal, undefined, authConfig);
   const evidenceDir = join7(session.rootPath, "evidence");
   const browserTools = createBrowserTools(target, evidenceDir, "operator", undefined, abortSignal);
   const document_asset = tool2({
@@ -138385,13 +138484,14 @@ var CVSS_SCORER_SYSTEM_PROMPT = `You are a CVSS 4.0 scoring specialist. Your tas
 7. Since a POC exists and confirmed the vulnerability, E should typically be 'A'
 
 Always provide brief reasoning explaining your key decisions.`;
-async function scoreFindingWithCVSS(input, model) {
+async function scoreFindingWithCVSS(input, model, authConfig) {
   const prompt = buildScoringPrompt(input);
   const assessment = await generateObjectResponse({
     model,
     schema: CVSSMetricsOutputSchema,
     prompt,
-    system: CVSS_SCORER_SYSTEM_PROMPT
+    system: CVSS_SCORER_SYSTEM_PROMPT,
+    authConfig
   });
   const cvssResult = calculateCVSS4Score({
     ...assessment.metrics
@@ -138785,7 +138885,7 @@ Continue testing for OTHER vulnerabilities at different endpoints.`
                 remediation: finding.remediation
               },
               agentMessages: messages
-            }, cvssModel);
+            }, cvssModel, cvssOptions?.authConfig);
             cvssData = {
               score: cvssResult.score,
               severity: cvssResult.severity,
@@ -141988,7 +142088,7 @@ async function runAuthBypassAgent(opts) {
   }, "auth-bypass-agent.log");
   logger.info(`Starting AuthBypassAgent for ${input.baseUrl}`);
   logger.info(`Auth endpoints: ${input.authContext.endpoints.join(", ")}`);
-  const { document_finding, findingPaths } = createDocumentFindingTool2(session, logger, input.baseUrl);
+  const { document_finding, findingPaths } = createDocumentFindingTool2(session, logger, input.baseUrl, { authConfig });
   const httpRequest = tool2({
     description: "Make HTTP requests to test authorization",
     inputSchema: exports_external.object({
@@ -142369,12 +142469,13 @@ async function runMetaVulnerabilityTestAgent(opts) {
     smart_enumerate,
     cve_lookup,
     mutate_payload
-  } = createPentestTools(sessionForTools, undefined, toolOverride, undefined, abortSignal);
+  } = createPentestTools(sessionForTools, undefined, toolOverride, undefined, abortSignal, undefined, authConfig);
   const { create_poc, pocPaths } = createPocTool(sessionInfo, logger, toolOverride);
   const { document_finding, findingPaths } = createDocumentFindingTool2(sessionInfo, logger, target, {
     enableCvssScoring: sessionConfig?.enableCvssScoring,
     cvssModel: sessionConfig?.cvssModel,
-    getMessages: () => messagesRef.current
+    getMessages: () => messagesRef.current,
+    authConfig
   });
   const { store_plan, get_plan, store_adaptation } = createPlanMemoryTools(sessionInfo, logger);
   const { optimize_prompt } = createPromptOptimizerTool(sessionInfo, logger);
@@ -142869,7 +142970,7 @@ function findEndpoint(mention, endpoints) {
   return;
 }
 async function extractPentestTarget(input) {
-  const { userMessage, discoveredEndpoints, model, onTokenUsage } = input;
+  const { userMessage, discoveredEndpoints, model, onTokenUsage, authConfig } = input;
   const mentions = parseAtMentions(userMessage);
   if (mentions.length > 0) {
     for (const mention of mentions) {
@@ -142910,7 +143011,8 @@ Return a JSON object with:
       prompt,
       maxTokens: 500,
       temperature: 0.3,
-      onTokenUsage
+      onTokenUsage,
+      authConfig
     });
     return {
       target: result.target,
@@ -144704,12 +144806,20 @@ class OperatorAgent extends EventEmitter15 {
   }
   approve(approvalId) {
     const pending = this.approvalGate.getPendingApprovals().find((p) => p.id === approvalId);
-    this.log("action_approved", { approvalId, toolName: pending?.toolName, args: pending?.args });
+    this.log("action_approved", {
+      approvalId,
+      toolName: pending?.toolName,
+      args: pending?.args
+    });
     this.approvalGate.approve(approvalId);
   }
   deny(approvalId) {
     const pending = this.approvalGate.getPendingApprovals().find((p) => p.id === approvalId);
-    this.log("action_denied", { approvalId, toolName: pending?.toolName, args: pending?.args });
+    this.log("action_denied", {
+      approvalId,
+      toolName: pending?.toolName,
+      args: pending?.args
+    });
     this.approvalGate.deny(approvalId);
   }
   batchApprove(approvalIds) {
@@ -144745,7 +144855,11 @@ class OperatorAgent extends EventEmitter15 {
       if (this.abortController?.signal.aborted) {
         this.log("agent_stopped", { reason: "user_abort" });
         this.setStatus("idle");
-        return { findingsCount: 0, pocPaths: [], summary: "Agent stopped by user" };
+        return {
+          findingsCount: 0,
+          pocPaths: [],
+          summary: "Agent stopped by user"
+        };
       }
       this.log("agent_error", { error: error41?.message || String(error41) });
       this.setStatus("failed");
@@ -144960,9 +145074,7 @@ Document significant findings using the document_finding tool.`;
   }
   async runAgentLoop(systemMessage, initialUserMessage) {
     const session = this.config.session;
-    const messages = [
-      { role: "system", content: systemMessage }
-    ];
+    const messages = [{ role: "system", content: systemMessage }];
     if (this.isResume && this.messages.length > 0) {
       const recentMessages = this.messages.slice(-20);
       for (const msg of recentMessages) {
@@ -144972,7 +145084,7 @@ Document significant findings using the document_finding tool.`;
       }
     }
     messages.push({ role: "user", content: initialUserMessage });
-    const baseTools = createPentestTools(session, this.config.model, undefined, undefined, this.abortController?.signal, true);
+    const baseTools = createPentestTools(session, this.config.model, undefined, undefined, this.abortController?.signal, true, this.config.authConfig);
     const evidenceDir = join14(session.rootPath, "evidence");
     const browserTools = createBrowserTools(session.targets[0] || "", evidenceDir, "operator", undefined, this.abortController?.signal);
     let pocTools = {};
@@ -145008,9 +145120,18 @@ and probe for self-registration if available.
 
 This tool requires user approval (T3 tier - Probing).`,
       inputSchema: RunAuthSubagentInput,
-      execute: async ({ target, username, password, reason }) => {
+      execute: async ({
+        target,
+        username,
+        password,
+        reason
+      }) => {
         this.emit("operator-event", { type: "auth-subagent-started", target });
-        this.log("auth_subagent_started", { target, reason, hasCredentials: !!(username || password) });
+        this.log("auth_subagent_started", {
+          target,
+          reason,
+          hasCredentials: !!(username || password)
+        });
         try {
           const result2 = await runAuthenticationSubagent({
             input: {
@@ -145057,7 +145178,12 @@ This tool requires user approval (T3 tier - Probing).`,
       }
     });
     const authTools = { run_auth_subagent };
-    const allTools = { ...baseTools, ...browserTools, ...pocTools, ...authTools };
+    const allTools = {
+      ...baseTools,
+      ...browserTools,
+      ...pocTools,
+      ...authTools
+    };
     const activeToolNames = getActiveToolNames(session.config?.toolsetState);
     const filteredTools = {};
     for (const [toolName, tool6] of Object.entries(allTools)) {
@@ -145225,7 +145351,11 @@ This tool requires user approval (T3 tier - Probing).`,
       pocPaths,
       summary: `Completed ${iterations} iterations in ${this.currentStage} stage`
     };
-    this.log("agent_loop_completed", { iterations, stage: this.currentStage, result });
+    this.log("agent_loop_completed", {
+      iterations,
+      stage: this.currentStage,
+      result
+    });
     return result;
   }
   static STREAMING_TOOLS = new Set(["execute_command"]);
@@ -145902,6 +146032,319 @@ function ToolsPanel({
   }, undefined, false, undefined, this);
 }
 
+// src/core/session/loader.ts
+import { join as join15 } from "path";
+import { existsSync as existsSync20, readdirSync as readdirSync5, readFileSync as readFileSync11 } from "fs";
+function convertMessagesToUI(messages, baseTime) {
+  const uiMessages = [];
+  let messageIndex = 0;
+  const toolResults = new Map;
+  for (const msg of messages) {
+    if (Array.isArray(msg.content)) {
+      for (const part of msg.content) {
+        if (part.type === "tool-result" && part.toolCallId) {
+          toolResults.set(part.toolCallId, part.output);
+        }
+      }
+    }
+  }
+  for (const msg of messages) {
+    const createdAt = new Date(baseTime.getTime() + messageIndex * 1000);
+    messageIndex++;
+    if (typeof msg.content === "string") {
+      uiMessages.push({
+        role: msg.role,
+        content: msg.content,
+        createdAt
+      });
+    } else if (Array.isArray(msg.content)) {
+      for (const part of msg.content) {
+        if (part.type === "text" && part.text) {
+          uiMessages.push({
+            role: "assistant",
+            content: part.text,
+            createdAt
+          });
+        } else if (part.type === "tool-call") {
+          const toolDescription = typeof part.input?.toolCallDescription === "string" ? part.input.toolCallDescription : part.toolName || "tool";
+          const result = part.toolCallId ? toolResults.get(part.toolCallId) : undefined;
+          uiMessages.push({
+            role: "tool",
+            content: toolDescription,
+            createdAt,
+            toolCallId: part.toolCallId,
+            toolName: part.toolName,
+            args: part.input,
+            result,
+            status: "completed"
+          });
+        }
+      }
+    }
+  }
+  return uiMessages;
+}
+function parseSubagentFilename(filename) {
+  if (filename.startsWith("attack-surface-agent")) {
+    return { agentType: "attack-surface", name: "Attack Surface Discovery" };
+  }
+  if (filename.startsWith("vuln-test-")) {
+    const parts = filename.replace("vuln-test-", "").split("-");
+    const vulnClass = parts[0] || "generic";
+    const vulnClassFormatted = vulnClass.replace(/-/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
+    return {
+      agentType: "pentest",
+      name: `${vulnClassFormatted} Test`
+    };
+  }
+  if (filename.startsWith("orchestrator-")) {
+    return { agentType: "pentest", name: "Orchestrator Summary" };
+  }
+  return { agentType: "pentest", name: filename.split("-")[0] || "Unknown" };
+}
+function loadSubagents(rootPath) {
+  const subagentsPath = join15(rootPath, "subagents");
+  if (!existsSync20(subagentsPath)) {
+    return [];
+  }
+  const subagents = [];
+  const files = readdirSync5(subagentsPath).filter((f) => f.endsWith(".json"));
+  files.sort((a, b2) => {
+    const timeA = a.match(/\d{4}-\d{2}-\d{2}T\d{2}-\d{2}-\d{2}/)?.[0] || "";
+    const timeB = b2.match(/\d{4}-\d{2}-\d{2}T\d{2}-\d{2}-\d{2}/)?.[0] || "";
+    return timeA.localeCompare(timeB);
+  });
+  for (const file2 of files) {
+    try {
+      const filePath = join15(subagentsPath, file2);
+      const data = JSON.parse(readFileSync11(filePath, "utf-8"));
+      const { agentType, name: name39 } = parseSubagentFilename(file2);
+      const timestamp = new Date(data.timestamp);
+      if (file2.startsWith("orchestrator-")) {
+        continue;
+      }
+      const messages = convertMessagesToUI(data.messages, timestamp);
+      let status = "completed";
+      switch (data.status) {
+        case "canceled":
+        case "failed":
+        case "completed":
+        case "pending":
+          status = data.status;
+          break;
+        default:
+          if (typeof data.findingsCount === "number" && data.findingsCount < 0) {
+            status = "failed";
+          }
+          break;
+      }
+      subagents.push({
+        id: `loaded-${file2.replace(".json", "")}`,
+        name: data.agentName === "attack-surface-agent" ? "Attack Surface Discovery" : name39,
+        type: agentType,
+        target: data.target || "Unknown",
+        messages,
+        createdAt: timestamp,
+        status
+      });
+    } catch (e) {
+      console.error(`Failed to load subagent file ${file2}:`, e);
+    }
+  }
+  return subagents;
+}
+function loadAttackSurfaceResults2(rootPath) {
+  const resultsPath = join15(rootPath, "attack-surface-results.json");
+  if (!existsSync20(resultsPath)) {
+    return null;
+  }
+  try {
+    return JSON.parse(readFileSync11(resultsPath, "utf-8"));
+  } catch (e) {
+    console.error("Failed to load attack surface results:", e);
+    return null;
+  }
+}
+function hasReport(rootPath) {
+  const reportPath = join15(rootPath, "comprehensive-pentest-report.md");
+  return existsSync20(reportPath);
+}
+function createDiscoveryFromLogs(rootPath, session) {
+  const logPath = join15(rootPath, "logs", "streamlined-pentest.log");
+  if (!existsSync20(logPath)) {
+    return null;
+  }
+  try {
+    const logContent = readFileSync11(logPath, "utf-8");
+    const lines = logContent.split(`
+`).filter(Boolean);
+    const messages = [];
+    let stepBuffer = "";
+    for (const line of lines) {
+      const match = line.match(/^(\d{4}-\d{2}-\d{2}T[\d:.]+Z) - \[(\w+)\] (.+)$/);
+      if (!match)
+        continue;
+      const [, timestamp, level, content] = match;
+      const createdAt = new Date(timestamp);
+      if (content.startsWith("[Tool]")) {
+        const toolMatch = content.match(/\[Tool\] (\w+): (.+)/);
+        if (toolMatch) {
+          messages.push({
+            role: "tool",
+            content: `✓ ${toolMatch[2]}`,
+            createdAt,
+            toolName: toolMatch[1],
+            status: "completed"
+          });
+        }
+      } else if (content.startsWith("[Step")) {
+        const stepMatch = content.match(/\[Step \d+\] (.+)/);
+        if (stepMatch) {
+          messages.push({
+            role: "assistant",
+            content: stepMatch[1],
+            createdAt
+          });
+        }
+      }
+    }
+    if (messages.length === 0) {
+      return null;
+    }
+    return {
+      id: "discovery-from-logs",
+      name: "Attack Surface Discovery",
+      type: "attack-surface",
+      target: session.targets[0] || "Unknown",
+      messages,
+      createdAt: new Date(session.time.created),
+      status: "completed"
+    };
+  } catch (e) {
+    console.error("Failed to parse logs:", e);
+    return null;
+  }
+}
+async function loadSessionState(session) {
+  const rootPath = session.rootPath;
+  let subagents = loadSubagents(rootPath);
+  const hasAttackSurfaceAgent = subagents.some((s) => s.type === "attack-surface");
+  if (!hasAttackSurfaceAgent) {
+    const discoveryAgent = createDiscoveryFromLogs(rootPath, session);
+    if (discoveryAgent) {
+      subagents = [discoveryAgent, ...subagents];
+    }
+  }
+  const manifestPath = join15(rootPath, "agent-manifest.json");
+  if (existsSync20(manifestPath)) {
+    try {
+      const manifest = JSON.parse(readFileSync11(manifestPath, "utf-8"));
+      for (const entry of manifest) {
+        if (entry.status !== "running")
+          continue;
+        const resumeInfo = {
+          target: entry.target,
+          objective: entry.objective,
+          vulnerabilityClass: entry.vulnerabilityClass,
+          authenticationInfo: entry.authInfo
+        };
+        const vulnSlug = entry.vulnerabilityClass.toLowerCase().replace(/\s+/g, "-");
+        const existingIndex = subagents.findIndex((s) => s.type === "pentest" && s.id.includes(`-${vulnSlug}-`) && s.target === entry.target);
+        if (existingIndex >= 0) {
+          subagents[existingIndex] = {
+            ...subagents[existingIndex],
+            status: "paused",
+            resumeInfo
+          };
+        } else {
+          let messages = [];
+          const subagentsPath = join15(rootPath, "subagents");
+          if (existsSync20(subagentsPath)) {
+            try {
+              const files = readdirSync5(subagentsPath).filter((f) => f.endsWith(".json"));
+              const matchingFile = files.find((f) => {
+                if (vulnSlug && f.includes(vulnSlug))
+                  return true;
+                return false;
+              });
+              if (matchingFile) {
+                const data = JSON.parse(readFileSync11(join15(subagentsPath, matchingFile), "utf-8"));
+                messages = convertMessagesToUI(data.messages, new Date(entry.spawnedAt));
+              }
+            } catch {}
+          }
+          subagents.push({
+            id: entry.id,
+            name: entry.name,
+            type: "pentest",
+            target: entry.target,
+            messages,
+            createdAt: new Date(entry.spawnedAt),
+            status: "paused",
+            resumeInfo
+          });
+        }
+      }
+    } catch (e) {
+      console.error("Failed to load agent manifest:", e);
+    }
+  }
+  const attackSurfaceResults = loadAttackSurfaceResults2(rootPath);
+  const hasReportFile = hasReport(rootPath);
+  const hasDiscoverySubagent = subagents.some((s) => s.type === "attack-surface");
+  const interruptedDuringDiscovery = !attackSurfaceResults && !hasReportFile && hasDiscoverySubagent;
+  if (interruptedDuringDiscovery) {
+    for (let i = 0;i < subagents.length; i++) {
+      if (subagents[i].type === "attack-surface" && subagents[i].status === "completed") {
+        subagents[i] = { ...subagents[i], status: "paused" };
+      }
+    }
+  }
+  const isComplete = hasReportFile || attackSurfaceResults?.summary?.analysisComplete === true && subagents.length > 1;
+  return {
+    session,
+    subagents,
+    attackSurfaceResults,
+    isComplete,
+    hasReport: hasReportFile,
+    interruptedDuringDiscovery
+  };
+}
+
+// src/tui/session/swarm-to-operator-adapter.ts
+function adaptSwarmStateForOperator(state) {
+  const messages = [];
+  messages.push({
+    role: "system",
+    content: `Resuming from auto-mode session. ${state.subagents.length} subagent(s) ran. ${state.hasReport ? "Report available." : ""}`,
+    createdAt: new Date
+  });
+  for (const sub of state.subagents) {
+    const assistantMsgs = sub.messages.filter((m2) => m2.role === "assistant" && typeof m2.content === "string" && m2.content.trim());
+    const lastSummary = assistantMsgs[assistantMsgs.length - 1];
+    if (lastSummary) {
+      messages.push({
+        role: "assistant",
+        content: `[${sub.name}] ${lastSummary.content}`,
+        createdAt: lastSummary.createdAt
+      });
+    }
+  }
+  const attackSurface = [];
+  if (state.attackSurfaceResults?.targets) {
+    for (const target of state.attackSurfaceResults.targets) {
+      attackSurface.push({
+        id: `synth-${attackSurface.length}`,
+        method: "GET",
+        path: target.target,
+        status: "discovered",
+        category: target.objective || "unknown"
+      });
+    }
+  }
+  return { messages, attackSurface };
+}
+
 // src/tui/components/chat/header.tsx
 function Header({
   mode,
@@ -147220,6 +147663,7 @@ function SessionComponent({
   mode,
   model: propModel,
   isResume = false,
+  openAsOperator = false,
   initialDirective,
   onExit
 }) {
@@ -147301,7 +147745,7 @@ function SessionComponent({
   import_react46.useEffect(() => {
     if (!isResume || resumeLoaded)
       return;
-    Session.loadOperatorState(session.id).then((savedState) => {
+    Session.loadOperatorState(session.id).then(async (savedState) => {
       if (savedState) {
         setOperatorMode(savedState.mode);
         setAutoApproveTier(savedState.autoApproveTier);
@@ -147322,10 +147766,15 @@ function SessionComponent({
         const history = savedState.actionHistory || [];
         setApprovedCount(history.filter((a) => a.decision === "approved" || a.decision === "auto-approved").length);
         setDeniedCount(history.filter((a) => a.decision === "denied").length);
+      } else if (openAsOperator) {
+        const swarmState = await loadSessionState(session);
+        const { messages: synthMessages, attackSurface } = adaptSwarmStateForOperator(swarmState);
+        setMessages(synthMessages);
+        sidebar.updateState({ attackSurface });
       }
       setResumeLoaded(true);
     });
-  }, [isResume, session.id, resumeLoaded, setMessages, sidebar]);
+  }, [isResume, session.id, resumeLoaded, setMessages, sidebar, openAsOperator]);
   import_react46.useEffect(() => {
     if (agent2)
       return;
@@ -147800,228 +148249,14 @@ Usage: /tier <1-5>`,
 }
 
 // src/tui/components/operator-dashboard/index.tsx
-function OperatorDashboard({ session, isResume = false }) {
+function OperatorDashboard({ session, isResume = false, openAsOperator }) {
   return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(SessionComponent, {
     session,
     mode: "operator",
-    isResume
+    isResume,
+    openAsOperator
   }, undefined, false, undefined, this);
 }
-
-// src/core/session/loader.ts
-import { join as join15 } from "path";
-import { existsSync as existsSync20, readdirSync as readdirSync5, readFileSync as readFileSync11 } from "fs";
-function convertMessagesToUI(messages, baseTime) {
-  const uiMessages = [];
-  let messageIndex = 0;
-  const toolResults = new Map;
-  for (const msg of messages) {
-    if (Array.isArray(msg.content)) {
-      for (const part of msg.content) {
-        if (part.type === "tool-result" && part.toolCallId) {
-          toolResults.set(part.toolCallId, part.output);
-        }
-      }
-    }
-  }
-  for (const msg of messages) {
-    const createdAt = new Date(baseTime.getTime() + messageIndex * 1000);
-    messageIndex++;
-    if (typeof msg.content === "string") {
-      uiMessages.push({
-        role: msg.role,
-        content: msg.content,
-        createdAt
-      });
-    } else if (Array.isArray(msg.content)) {
-      for (const part of msg.content) {
-        if (part.type === "text" && part.text) {
-          uiMessages.push({
-            role: "assistant",
-            content: part.text,
-            createdAt
-          });
-        } else if (part.type === "tool-call") {
-          const toolDescription = typeof part.input?.toolCallDescription === "string" ? part.input.toolCallDescription : part.toolName || "tool";
-          const result = part.toolCallId ? toolResults.get(part.toolCallId) : undefined;
-          uiMessages.push({
-            role: "tool",
-            content: `✓ ${toolDescription}`,
-            createdAt,
-            toolCallId: part.toolCallId,
-            toolName: part.toolName,
-            args: part.input,
-            result,
-            status: "completed"
-          });
-        }
-      }
-    }
-  }
-  return uiMessages;
-}
-function parseSubagentFilename(filename) {
-  if (filename.startsWith("attack-surface-agent")) {
-    return { agentType: "attack-surface", name: "Attack Surface Discovery" };
-  }
-  if (filename.startsWith("vuln-test-")) {
-    const parts = filename.replace("vuln-test-", "").split("-");
-    const vulnClass = parts[0] || "generic";
-    const vulnClassFormatted = vulnClass.replace(/-/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
-    return {
-      agentType: "pentest",
-      name: `${vulnClassFormatted} Test`
-    };
-  }
-  if (filename.startsWith("orchestrator-")) {
-    return { agentType: "pentest", name: "Orchestrator Summary" };
-  }
-  return { agentType: "pentest", name: filename.split("-")[0] || "Unknown" };
-}
-function loadSubagents(rootPath) {
-  const subagentsPath = join15(rootPath, "subagents");
-  if (!existsSync20(subagentsPath)) {
-    return [];
-  }
-  const subagents = [];
-  const files = readdirSync5(subagentsPath).filter((f) => f.endsWith(".json"));
-  files.sort((a, b2) => {
-    const timeA = a.match(/\d{4}-\d{2}-\d{2}T\d{2}-\d{2}-\d{2}/)?.[0] || "";
-    const timeB = b2.match(/\d{4}-\d{2}-\d{2}T\d{2}-\d{2}-\d{2}/)?.[0] || "";
-    return timeA.localeCompare(timeB);
-  });
-  for (const file2 of files) {
-    try {
-      const filePath = join15(subagentsPath, file2);
-      const data = JSON.parse(readFileSync11(filePath, "utf-8"));
-      const { agentType, name: name39 } = parseSubagentFilename(file2);
-      const timestamp = new Date(data.timestamp);
-      if (file2.startsWith("orchestrator-")) {
-        continue;
-      }
-      const messages = convertMessagesToUI(data.messages, timestamp);
-      let status = "completed";
-      switch (data.status) {
-        case "canceled":
-        case "failed":
-        case "completed":
-        case "pending":
-          status = data.status;
-          break;
-        default:
-          if (typeof data.findingsCount === "number" && data.findingsCount < 0) {
-            status = "failed";
-          }
-          break;
-      }
-      subagents.push({
-        id: `loaded-${file2.replace(".json", "")}`,
-        name: data.agentName === "attack-surface-agent" ? "Attack Surface Discovery" : name39,
-        type: agentType,
-        target: data.target || "Unknown",
-        messages,
-        createdAt: timestamp,
-        status
-      });
-    } catch (e) {
-      console.error(`Failed to load subagent file ${file2}:`, e);
-    }
-  }
-  return subagents;
-}
-function loadAttackSurfaceResults2(rootPath) {
-  const resultsPath = join15(rootPath, "attack-surface-results.json");
-  if (!existsSync20(resultsPath)) {
-    return null;
-  }
-  try {
-    return JSON.parse(readFileSync11(resultsPath, "utf-8"));
-  } catch (e) {
-    console.error("Failed to load attack surface results:", e);
-    return null;
-  }
-}
-function hasReport(rootPath) {
-  const reportPath = join15(rootPath, "comprehensive-pentest-report.md");
-  return existsSync20(reportPath);
-}
-function createDiscoveryFromLogs(rootPath, session) {
-  const logPath = join15(rootPath, "logs", "streamlined-pentest.log");
-  if (!existsSync20(logPath)) {
-    return null;
-  }
-  try {
-    const logContent = readFileSync11(logPath, "utf-8");
-    const lines = logContent.split(`
-`).filter(Boolean);
-    const messages = [];
-    let stepBuffer = "";
-    for (const line of lines) {
-      const match = line.match(/^(\d{4}-\d{2}-\d{2}T[\d:.]+Z) - \[(\w+)\] (.+)$/);
-      if (!match)
-        continue;
-      const [, timestamp, level, content] = match;
-      const createdAt = new Date(timestamp);
-      if (content.startsWith("[Tool]")) {
-        const toolMatch = content.match(/\[Tool\] (\w+): (.+)/);
-        if (toolMatch) {
-          messages.push({
-            role: "tool",
-            content: `✓ ${toolMatch[2]}`,
-            createdAt,
-            toolName: toolMatch[1],
-            status: "completed"
-          });
-        }
-      } else if (content.startsWith("[Step")) {
-        const stepMatch = content.match(/\[Step \d+\] (.+)/);
-        if (stepMatch) {
-          messages.push({
-            role: "assistant",
-            content: stepMatch[1],
-            createdAt
-          });
-        }
-      }
-    }
-    if (messages.length === 0) {
-      return null;
-    }
-    return {
-      id: "discovery-from-logs",
-      name: "Attack Surface Discovery",
-      type: "attack-surface",
-      target: session.targets[0] || "Unknown",
-      messages,
-      createdAt: new Date(session.time.created),
-      status: "completed"
-    };
-  } catch (e) {
-    console.error("Failed to parse logs:", e);
-    return null;
-  }
-}
-async function loadSessionState(session) {
-  const rootPath = session.rootPath;
-  let subagents = loadSubagents(rootPath);
-  const hasAttackSurfaceAgent = subagents.some((s) => s.type === "attack-surface");
-  if (!hasAttackSurfaceAgent) {
-    const discoveryAgent = createDiscoveryFromLogs(rootPath, session);
-    if (discoveryAgent) {
-      subagents = [discoveryAgent, ...subagents];
-    }
-  }
-  const attackSurfaceResults = loadAttackSurfaceResults2(rootPath);
-  const hasReportFile = hasReport(rootPath);
-  const isComplete = hasReportFile || attackSurfaceResults?.summary?.analysisComplete === true && subagents.length > 1;
-  return {
-    session,
-    subagents,
-    attackSurfaceResults,
-    isComplete,
-    hasReport: hasReportFile
-  };
-}
 // src/core/agent/metaTestingAgent/prompts/execution.ts
 var OUTCOME_GUIDANCE_TEMPLATE2 = `{{OUTCOME_GUIDANCE}}`;
 var META_TESTING_SYSTEM_PROMPT = `# Meta Testing Agent
@@ -148473,7 +148708,9 @@ async function runPentestOrchestrator(input) {
         id: agentId,
         name: `${getVulnerabilityClassName(task.vulnClass)} on ${task.target}`,
         target: task.target,
-        vulnerabilityClass: task.vulnClass
+        vulnerabilityClass: task.vulnClass,
+        objective: task.objective,
+        authenticationInfo: task.authenticationInfo
       });
       try {
         const result = await runMetaVulnerabilityTestAgent({
@@ -149154,7 +149391,8 @@ async function runStreamlinedPentest(input) {
     onPentestAgentComplete,
     onAgentAbortControllerCreated,
     abortSignal,
-    toolOverride
+    toolOverride,
+    previousDiscoveryResults
   } = input;
   const session = input.session || await Session.create({
     targets: [target],
@@ -149162,36 +149400,62 @@ async function runStreamlinedPentest(input) {
     ...sessionConfig
   });
   const logger = new Logger(session, "streamlined-pentest.log");
+  const manifestPath = join18(session.rootPath, "agent-manifest.json");
+  const manifest = (() => {
+    if (!existsSync23(manifestPath))
+      return [];
+    try {
+      return JSON.parse(readFileSync13(manifestPath, "utf-8"));
+    } catch (e) {
+      logger.warn(`Failed to read agent manifest at ${manifestPath}: ${e}`);
+      return [];
+    }
+  })();
+  function flushManifest() {
+    writeFileSync15(manifestPath, JSON.stringify(manifest, null, 2));
+  }
   logger.info(`Starting streamlined pentest for ${target}`);
   const reportProgress = (status) => {
     logger.info(`[${status.phase}] ${status.message}`);
     onProgress?.(status);
   };
   try {
-    reportProgress({
-      phase: "discovery",
-      message: `Discovering attack surface for ${target}`
-    });
-    const { targets, discoveryError } = await runDiscoveryPhase({
-      target,
-      model,
-      session,
-      authConfig,
-      abortSignal,
-      toolOverride,
-      logger,
-      onProgress: reportProgress,
-      onStepFinish: onDiscoveryStepFinish,
-      onStream: onDiscoveryStream
-    });
-    if (discoveryError) {
-      return {
-        success: false,
+    let targets;
+    if (previousDiscoveryResults) {
+      logger.info(`Resuming with ${previousDiscoveryResults.targets?.length || 0} previously discovered targets`);
+      targets = previousDiscoveryResults.targets || [];
+      reportProgress({
+        phase: "discovery",
+        message: `Resuming with ${targets.length} previously discovered targets`,
+        targetsDiscovered: targets.length
+      });
+    } else {
+      reportProgress({
+        phase: "discovery",
+        message: `Discovering attack surface for ${target}`
+      });
+      const discoveryResult = await runDiscoveryPhase({
+        target,
+        model,
         session,
-        targets: [],
-        totalFindings: 0,
-        error: discoveryError
-      };
+        authConfig,
+        abortSignal,
+        toolOverride,
+        logger,
+        onProgress: reportProgress,
+        onStepFinish: onDiscoveryStepFinish,
+        onStream: onDiscoveryStream
+      });
+      if (discoveryResult.discoveryError) {
+        return {
+          success: false,
+          session,
+          targets: [],
+          totalFindings: 0,
+          error: discoveryResult.discoveryError
+        };
+      }
+      targets = discoveryResult.targets;
     }
     if (targets.length === 0) {
       reportProgress({
@@ -149236,7 +149500,20 @@ async function runStreamlinedPentest(input) {
           findingsCount: status.findingsCount
         });
       },
-      onAgentSpawn: onPentestAgentSpawn,
+      onAgentSpawn: (info) => {
+        manifest.push({
+          id: info.id,
+          name: info.name,
+          target: info.target,
+          vulnerabilityClass: info.vulnerabilityClass,
+          objective: info.objective,
+          authInfo: info.authenticationInfo,
+          status: "running",
+          spawnedAt: new Date().toISOString()
+        });
+        flushManifest();
+        onPentestAgentSpawn?.(info);
+      },
       onAgentStream: onPentestAgentStream,
       onAgentComplete: onPentestAgentComplete,
       onAgentAbortControllerCreated
@@ -149462,14 +149739,16 @@ async function runDiscoveryPhase(params) {
 }
 
 // src/tui/components/session-view/index.tsx
-import { existsSync as existsSync24 } from "fs";
+import { existsSync as existsSync24, readFileSync as readFileSync14 } from "fs";
 import { exec as exec3 } from "child_process";
+import { join as join19 } from "path";
 var greenBullet6 = RGBA.fromInts(76, 175, 80, 255);
 var creamText6 = RGBA.fromInts(255, 248, 220, 255);
 var dimText7 = RGBA.fromInts(120, 120, 120, 255);
 function SessionView({
   sessionId,
-  isResume = false
+  isResume = false,
+  openAsOperator = false
 }) {
   const route = useRoute();
   const { model, setThinking, isExecuting, addTokenUsage, setIsExecuting } = useAgent();
@@ -149482,6 +149761,8 @@ function SessionView({
   const [startTime, setStartTime] = import_react48.useState(null);
   const [hasStarted, setHasStarted] = import_react48.useState(false);
   const agentAbortControllers = import_react48.useRef(new Map);
+  const subagentsRef = import_react48.useRef(subagents);
+  subagentsRef.current = subagents;
   const killAgent = import_react48.useCallback((agentId) => {
     const controller = agentAbortControllers.current.get(agentId);
     if (controller) {
@@ -149524,12 +149805,19 @@ function SessionView({
               target: s.target,
               messages: s.messages,
               createdAt: s.createdAt,
-              status: s.status
+              status: s.status,
+              resumeInfo: s.resumeInfo
             }));
             setSubagents(loadedSubagents);
-            setIsCompleted(state.hasReport);
             setStartTime(new Date(loadedSession.time.created));
-            setHasStarted(true);
+            if (state.hasReport) {
+              setIsCompleted(true);
+              setHasStarted(true);
+            } else if (state.attackSurfaceResults) {
+              setHasStarted(true);
+            } else if (state.interruptedDuringDiscovery) {
+              setHasStarted(true);
+            }
           } catch (e) {
             console.error("Failed to load session state:", e);
           }
@@ -149543,15 +149831,14 @@ function SessionView({
     loadSession();
   }, [sessionId, isResume]);
   import_react48.useEffect(() => {
-    if (session && !hasStarted && !loading && !isResume) {
+    if (session && !hasStarted && !loading) {
       const mode = session.config?.mode;
-      if (mode === "operator" || mode === "driver") {
+      if (mode === "operator" || mode === "driver" || openAsOperator)
         return;
-      }
       setHasStarted(true);
       startPentest(session);
     }
-  }, [session, hasStarted, loading, isResume]);
+  }, [session, hasStarted, loading, openAsOperator]);
   import_react48.useEffect(() => {
     return () => {
       if (abortController) {
@@ -149559,7 +149846,7 @@ function SessionView({
       }
     };
   }, [abortController]);
-  const startPentest = import_react48.useCallback(async (execSession) => {
+  const startPentest = import_react48.useCallback(async (execSession, previousDiscoveryResults) => {
     setIsExecuting(true);
     setThinking(true);
     setStartTime(new Date);
@@ -149568,23 +149855,36 @@ function SessionView({
     let currentDiscoveryText = "";
     const pentestAgentTexts = new Map;
     try {
-      setSubagents([
-        {
-          id: "attack-surface-discovery",
-          name: "Attack Surface Discovery",
-          type: "attack-surface",
-          target: execSession.targets[0],
-          messages: [],
-          status: "pending",
-          createdAt: new Date
+      setSubagents((prev) => {
+        const existingIdx = prev.findIndex((s) => s.id === "attack-surface-discovery");
+        if (existingIdx !== -1) {
+          const updated = [...prev];
+          updated[existingIdx] = {
+            ...updated[existingIdx],
+            status: previousDiscoveryResults ? "completed" : "pending"
+          };
+          return updated;
         }
-      ]);
+        return [
+          ...prev,
+          {
+            id: "attack-surface-discovery",
+            name: "Attack Surface Discovery",
+            type: "attack-surface",
+            target: execSession.targets[0],
+            messages: [],
+            status: "pending",
+            createdAt: new Date
+          }
+        ];
+      });
       const result = await runStreamlinedPentest({
         target: execSession.targets[0],
         model: model.id,
         session: execSession,
         sessionConfig: execSession.config,
         abortSignal: controller.signal,
+        previousDiscoveryResults,
         onAgentAbortControllerCreated: (agentId, abortCtrl) => {
           agentAbortControllers.current.set(agentId, abortCtrl);
         },
@@ -149645,7 +149945,7 @@ function SessionView({
                   newMessages[msgIdx] = {
                     ...existingMsg,
                     status: "completed",
-                    content: `+ ${description}`,
+                    content: description,
                     result: tr.output
                   };
                 } else {
@@ -149749,7 +150049,7 @@ function SessionView({
                 newMessages[msgIdx] = {
                   ...existingMsg,
                   status: "completed",
-                  content: `+ ${description}`,
+                  content: description,
                   result: result2
                 };
               } else {
@@ -149852,11 +150152,200 @@ function SessionView({
               updated[idx] = { ...subagent, messages: newMessages };
               return updated;
             });
-          } else if (event.type === "tool-result") {
-            const tr = event.data;
+          } else if (event.type === "tool-result") {
+            const tr = event.data;
+            const toolCallId = tr.toolCallId;
+            const toolName = tr.toolName || "tool";
+            const result2 = tr.output ?? tr.result;
+            setSubagents((prev) => {
+              const idx = prev.findIndex((s) => s.id === agentId);
+              if (idx === -1)
+                return prev;
+              const updated = [...prev];
+              const subagent = updated[idx];
+              const newMessages = [...subagent.messages];
+              const msgIdx = newMessages.findIndex((m2) => m2.role === "tool" && m2.toolCallId === toolCallId);
+              if (msgIdx !== -1) {
+                const existingMsg = newMessages[msgIdx];
+                const description = typeof existingMsg.content === "string" && existingMsg.content !== existingMsg.toolName ? existingMsg.content : existingMsg.toolName || "tool";
+                newMessages[msgIdx] = {
+                  ...existingMsg,
+                  status: "completed",
+                  content: description,
+                  result: result2
+                };
+              } else {
+                newMessages.push({
+                  role: "tool",
+                  status: "completed",
+                  toolCallId,
+                  toolName,
+                  content: `+ ${toolName}`,
+                  result: result2,
+                  createdAt: new Date
+                });
+              }
+              updated[idx] = { ...subagent, messages: newMessages };
+              return updated;
+            });
+          } else if (event.type === "step-finish" && event.data) {
+            const { usage } = event.data;
+            if (usage) {
+              const stepTokens = (usage.inputTokens ?? 0) + (usage.outputTokens ?? 0);
+              if (stepTokens > 0)
+                addTokenUsage(usage.inputTokens ?? 0, usage.outputTokens ?? 0);
+            }
+            pentestAgentTexts.set(agentId, "");
+          }
+        },
+        onPentestAgentComplete: (agentId, agentResult) => {
+          setSubagents((prev) => prev.map((sub) => sub.id === agentId && sub.status !== "canceled" ? {
+            ...sub,
+            status: agentResult.error ? "failed" : "completed",
+            messages: [
+              ...sub.messages,
+              {
+                role: "assistant",
+                content: `${agentResult.findingsCount > 0 ? "✅" : "⚪"} ${agentResult.summary}`,
+                createdAt: new Date
+              }
+            ]
+          } : sub));
+        },
+        onProgress: (status) => {}
+      });
+      if (result.success) {
+        if (result.reportPath && existsSync24(result.reportPath) || existsSync24(result.session.rootPath + "/comprehensive-pentest-report.md")) {
+          setIsCompleted(true);
+        }
+      }
+      setThinking(false);
+      setIsExecuting(false);
+    } catch (error42) {
+      setThinking(false);
+      setIsExecuting(false);
+      if (error42 instanceof Error && error42.name === "AbortError") {} else {
+        setError(error42 instanceof Error ? error42.message : "Unknown error occurred");
+      }
+    }
+  }, [model.id, addTokenUsage, setThinking, setIsExecuting]);
+  const resumeAgent = import_react48.useCallback(async (agentId) => {
+    if (!session)
+      return;
+    const paused = subagentsRef.current.find((s) => s.id === agentId && s.status === "paused");
+    if (!paused)
+      return;
+    if (paused.type === "attack-surface") {
+      let previousResults;
+      const resultsPath = join19(session.rootPath, "attack-surface-results.json");
+      if (existsSync24(resultsPath)) {
+        try {
+          previousResults = JSON.parse(readFileSync14(resultsPath, "utf-8"));
+        } catch {}
+      }
+      await startPentest(session, previousResults);
+      return;
+    }
+    if (!paused.resumeInfo)
+      return;
+    const { target, objective, vulnerabilityClass, authenticationInfo } = paused.resumeInfo;
+    setSubagents((prev) => prev.map((s) => s.id === agentId ? { ...s, status: "pending" } : s));
+    setIsExecuting(true);
+    setThinking(true);
+    let accumulatedText = "";
+    try {
+      const result = await runMetaVulnerabilityTestAgent({
+        input: {
+          target,
+          objective,
+          vulnerabilityClass,
+          authenticationInfo,
+          authenticationInstructions: session.config?.authenticationInstructions,
+          outcomeGuidance: session.config?.outcomeGuidance || "Find and document vulnerabilities",
+          session: {
+            id: session.id,
+            rootPath: session.rootPath,
+            findingsPath: session.findingsPath,
+            logsPath: session.logsPath,
+            pocsPath: session.rootPath + "/pocs"
+          },
+          sessionConfig: {
+            enableCvssScoring: session.config?.enableCvssScoring,
+            cvssModel: session.config?.cvssModel
+          }
+        },
+        model: model.id,
+        abortSignal: abortController?.signal,
+        onChunk: (chunk) => {
+          if (chunk.type === "text-delta" && chunk.text) {
+            accumulatedText += chunk.text;
+            setThinking(false);
+            if (accumulatedText.trim()) {
+              setSubagents((prev) => {
+                const idx = prev.findIndex((s) => s.id === agentId);
+                if (idx === -1)
+                  return prev;
+                const updated = [...prev];
+                const subagent = updated[idx];
+                const lastMsg = subagent.messages[subagent.messages.length - 1];
+                if (lastMsg && lastMsg.role === "assistant") {
+                  const newMessages = [...subagent.messages];
+                  newMessages[newMessages.length - 1] = {
+                    ...lastMsg,
+                    content: accumulatedText
+                  };
+                  updated[idx] = { ...subagent, messages: newMessages };
+                } else {
+                  updated[idx] = {
+                    ...subagent,
+                    messages: [
+                      ...subagent.messages,
+                      {
+                        role: "assistant",
+                        content: accumulatedText,
+                        createdAt: new Date
+                      }
+                    ]
+                  };
+                }
+                return updated;
+              });
+            }
+          } else if (chunk.type === "tool-call") {
+            setThinking(false);
+            const tc = chunk;
+            const toolCallId = tc.toolCallId;
+            const toolName = tc.toolName || "tool";
+            const args = tc.input ?? tc.args;
+            const toolDescription = typeof args?.toolCallDescription === "string" ? args.toolCallDescription : toolName;
+            setSubagents((prev) => {
+              const idx = prev.findIndex((s) => s.id === agentId);
+              if (idx === -1)
+                return prev;
+              const updated = [...prev];
+              const subagent = updated[idx];
+              const newMessages = [...subagent.messages];
+              const exists = newMessages.some((m2) => m2.role === "tool" && m2.toolCallId === toolCallId);
+              if (!exists) {
+                newMessages.push({
+                  role: "tool",
+                  status: "pending",
+                  toolCallId,
+                  toolName,
+                  content: toolDescription,
+                  args,
+                  createdAt: new Date
+                });
+              }
+              updated[idx] = { ...subagent, messages: newMessages };
+              return updated;
+            });
+          } else if (chunk.type === "tool-result") {
+            setThinking(true);
+            const tr = chunk;
             const toolCallId = tr.toolCallId;
             const toolName = tr.toolName || "tool";
-            const result2 = tr.output ?? tr.result;
+            const resultData = tr.output ?? tr.result;
             setSubagents((prev) => {
               const idx = prev.findIndex((s) => s.id === agentId);
               if (idx === -1)
@@ -149871,8 +150360,8 @@ function SessionView({
                 newMessages[msgIdx] = {
                   ...existingMsg,
                   status: "completed",
-                  content: `+ ${description}`,
-                  result: result2
+                  content: description,
+                  result: resultData
                 };
               } else {
                 newMessages.push({
@@ -149881,54 +150370,47 @@ function SessionView({
                   toolCallId,
                   toolName,
                   content: `+ ${toolName}`,
-                  result: result2,
+                  result: resultData,
                   createdAt: new Date
                 });
               }
               updated[idx] = { ...subagent, messages: newMessages };
               return updated;
             });
-          } else if (event.type === "step-finish" && event.data) {
-            const { usage } = event.data;
-            if (usage) {
-              const stepTokens = (usage.inputTokens ?? 0) + (usage.outputTokens ?? 0);
-              if (stepTokens > 0)
-                addTokenUsage(usage.inputTokens ?? 0, usage.outputTokens ?? 0);
-            }
-            pentestAgentTexts.set(agentId, "");
           }
         },
-        onPentestAgentComplete: (agentId, agentResult) => {
-          setSubagents((prev) => prev.map((sub) => sub.id === agentId && sub.status !== "canceled" ? {
-            ...sub,
-            status: agentResult.error ? "failed" : "completed",
-            messages: [
-              ...sub.messages,
-              {
-                role: "assistant",
-                content: `${agentResult.findingsCount > 0 ? "✅" : "⚪"} ${agentResult.summary}`,
-                createdAt: new Date
-              }
-            ]
-          } : sub));
-        },
-        onProgress: (status) => {}
-      });
-      if (result.success) {
-        if (result.reportPath && existsSync24(result.reportPath) || existsSync24(result.session.rootPath + "/comprehensive-pentest-report.md")) {
-          setIsCompleted(true);
+        onStepFinish: (step) => {
+          const usage = step.usage;
+          if (usage) {
+            const stepTokens = (usage.inputTokens ?? 0) + (usage.outputTokens ?? 0);
+            if (stepTokens > 0)
+              addTokenUsage(usage.inputTokens ?? 0, usage.outputTokens ?? 0);
+          }
+          accumulatedText = "";
         }
-      }
-      setThinking(false);
-      setIsExecuting(false);
+      });
+      setSubagents((prev) => prev.map((s) => s.id === agentId ? {
+        ...s,
+        status: result.error ? "failed" : "completed",
+        resumeInfo: undefined,
+        messages: [
+          ...s.messages,
+          {
+            role: "assistant",
+            content: `${result.findingsCount > 0 ? "✅" : "⚪"} ${result.summary}`,
+            createdAt: new Date
+          }
+        ]
+      } : s));
     } catch (error42) {
-      setThinking(false);
+      setSubagents((prev) => prev.map((s) => s.id === agentId ? { ...s, status: "failed", resumeInfo: undefined } : s));
+    }
+    setThinking(false);
+    const stillRunning = subagentsRef.current.some((s) => s.status === "pending" && s.id !== agentId);
+    if (!stillRunning) {
       setIsExecuting(false);
-      if (error42 instanceof Error && error42.name === "AbortError") {} else {
-        setError(error42 instanceof Error ? error42.message : "Unknown error occurred");
-      }
     }
-  }, [model.id, addTokenUsage, setThinking, setIsExecuting]);
+  }, [session, model.id, abortController, addTokenUsage, setThinking, setIsExecuting, startPentest]);
   const openReport = import_react48.useCallback(() => {
     if (session?.rootPath) {
       const reportPath = `${session.rootPath}/comprehensive-pentest-report.md`;
@@ -149989,10 +150471,11 @@ function SessionView({
       session
     }, undefined, false, undefined, this);
   }
-  if (session.config?.mode === "operator") {
+  if (session.config?.mode === "operator" || openAsOperator) {
     return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(OperatorDashboard, {
       session,
-      isResume
+      isResume,
+      openAsOperator
     }, undefined, false, undefined, this);
   }
   return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(SwarmDashboard, {
@@ -150003,7 +150486,8 @@ function SessionView({
     isCompleted,
     onBack: handleBack,
     onViewReport: openReport,
-    onKillAgent: killAgent
+    onKillAgent: killAgent,
+    onResumeAgent: resumeAgent
   }, undefined, false, undefined, this);
 }
 
@@ -150752,10 +151236,17 @@ function HomeView({ onNavigate, onStartSession }) {
   const { executeCommand, autocompleteOptions } = useCommand();
   const { setInputValue } = useInput();
   const { promptRef } = useFocus();
+  const [hintMessage, setHintMessage] = import_react56.useState(null);
   const handleSubmit = import_react56.useCallback((value) => {
-    onStartSession(value);
+    setHintMessage("Type /help to get started");
     setInputValue("");
-  }, [onStartSession, setInputValue]);
+  }, [setInputValue]);
+  import_react56.useEffect(() => {
+    if (!hintMessage)
+      return;
+    const timer = setTimeout(() => setHintMessage(null), 3000);
+    return () => clearTimeout(timer);
+  }, [hintMessage]);
   const handleCommandExecute = import_react56.useCallback(async (command) => {
     await executeCommand(command);
   }, [executeCommand]);
@@ -150825,6 +151316,13 @@ function HomeView({ onNavigate, onStartSession }) {
             onCommandExecute: handleCommandExecute,
             showPromptIndicator: true
           }, undefined, false, undefined, this),
+          hintMessage && /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
+            marginTop: 1,
+            children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+              fg: creamText7,
+              children: hintMessage
+            }, undefined, false, undefined, this)
+          }, undefined, false, undefined, this),
           /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
             marginTop: 1,
             children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
@@ -153021,13 +153519,27 @@ function WebWizard({
   }, undefined, true, undefined, this);
 }
 
-// src/tui/components/commands/resume-wizard.tsx
+// src/tui/components/commands/sessions-browser.tsx
+var import_react69 = __toESM(require_react(), 1);
+import { exec as exec5 } from "child_process";
+import { existsSync as existsSync27 } from "fs";
+
+// src/tui/hooks/use-sessions-list.ts
 var import_react68 = __toESM(require_react(), 1);
 import { existsSync as existsSync26, readdirSync as readdirSync7 } from "fs";
-import { join as join19 } from "path";
-var greenAccent5 = RGBA.fromInts(76, 175, 80, 255);
-var creamText12 = RGBA.fromInts(255, 248, 220, 255);
-var dimText13 = RGBA.fromInts(120, 120, 120, 255);
+import { join as join20 } from "path";
+function countFindings(findingsPath) {
+  try {
+    if (!existsSync26(findingsPath))
+      return 0;
+    return readdirSync7(findingsPath).filter((f) => f.endsWith(".json")).length;
+  } catch {
+    return 0;
+  }
+}
+function checkHasReport(rootPath) {
+  return existsSync26(join20(rootPath, "comprehensive-pentest-report.md"));
+}
 function formatRelativeTime(timestamp) {
   const now2 = Date.now();
   const diff = now2 - timestamp;
@@ -153046,89 +153558,177 @@ function formatRelativeTime(timestamp) {
     return `${days}d ago`;
   return new Date(timestamp).toLocaleDateString();
 }
-function countFindings(findingsPath) {
-  try {
-    if (!existsSync26(findingsPath))
-      return 0;
-    return readdirSync7(findingsPath).filter((f) => f.endsWith(".json")).length;
-  } catch {
-    return 0;
-  }
-}
-function ResumeWizard() {
+function useSessionsList() {
   const [sessions, setSessions] = import_react68.useState([]);
-  const [selectedIndex, setSelectedIndex] = import_react68.useState(0);
   const [loading, setLoading] = import_react68.useState(true);
-  const [statusMessage, setStatusMessage] = import_react68.useState("");
+  const [searchTerm, setSearchTerm] = import_react68.useState("");
+  const loadSessions = import_react68.useCallback(async () => {
+    setLoading(true);
+    try {
+      const enriched = [];
+      for await (const session of Session.list()) {
+        const hasOperatorState = existsSync26(join20(session.rootPath, "operator-state.json"));
+        const findingsCount = countFindings(session.findingsPath);
+        const hasReport2 = checkHasReport(session.rootPath);
+        enriched.push({ ...session, findingsCount, hasOperatorState, hasReport: hasReport2 });
+      }
+      enriched.sort((a, b2) => b2.time.updated - a.time.updated);
+      setSessions(enriched);
+    } catch (error41) {
+      console.error("Error loading sessions:", error41);
+    } finally {
+      setLoading(false);
+    }
+  }, []);
+  import_react68.useEffect(() => {
+    loadSessions();
+  }, [loadSessions]);
+  const deleteSession = import_react68.useCallback(async (id) => {
+    await Session.remove({ sessionId: id });
+    await loadSessions();
+  }, [loadSessions]);
+  const filtered = searchTerm ? sessions.filter((s) => s.name.toLowerCase().includes(searchTerm.toLowerCase())) : sessions;
+  const groupsMap = new Map;
+  for (const session of filtered) {
+    const d2 = new Date(session.time.created);
+    const dateStr = d2.toLocaleDateString("en-US", {
+      weekday: "short",
+      month: "short",
+      day: "numeric",
+      year: "numeric"
+    });
+    let group = groupsMap.get(dateStr);
+    if (!group) {
+      group = { date: dateStr, timestamp: d2.getTime(), sessions: [] };
+      groupsMap.set(dateStr, group);
+    }
+    group.sessions.push(session);
+  }
+  const rawGroups = Array.from(groupsMap.values());
+  rawGroups.sort((a, b2) => b2.timestamp - a.timestamp);
+  for (const g2 of rawGroups) {
+    g2.sessions.sort((a, b2) => new Date(b2.time.created).getTime() - new Date(a.time.created).getTime());
+  }
+  const visualOrderSessions = [];
+  const groupedSessions = [];
+  let idx = 0;
+  for (const raw of rawGroups) {
+    const group = { date: raw.date, timestamp: raw.timestamp, sessions: [] };
+    for (const s of raw.sessions) {
+      visualOrderSessions.push(s);
+      group.sessions.push({ ...s, index: idx });
+      idx++;
+    }
+    groupedSessions.push(group);
+  }
+  return {
+    sessions: filtered,
+    groupedSessions,
+    visualOrderSessions,
+    loading,
+    searchTerm,
+    setSearchTerm,
+    deleteSession,
+    reload: loadSessions
+  };
+}
+
+// src/tui/components/commands/sessions-browser.tsx
+var greenAccent5 = RGBA.fromInts(76, 175, 80, 255);
+var creamText12 = RGBA.fromInts(255, 248, 220, 255);
+var dimText13 = RGBA.fromInts(120, 120, 120, 255);
+function SessionsBrowser() {
   const route = useRoute();
   const { load: loadSession } = useSession();
   const { refocusPrompt } = useFocus();
-  import_react68.useEffect(() => {
-    async function loadOperatorSessions() {
-      setLoading(true);
-      try {
-        const enrichedSessions = [];
-        for await (const session of Session.list()) {
-          const statePath = join19(session.rootPath, "operator-state.json");
-          const hasOperatorState = existsSync26(statePath);
-          const findingsCount = countFindings(session.findingsPath);
-          enrichedSessions.push({
-            ...session,
-            findingsCount,
-            hasOperatorState
-          });
-        }
-        enrichedSessions.sort((a, b2) => b2.time.updated - a.time.updated);
-        setSessions(enrichedSessions.slice(0, 20));
-      } catch (error41) {
-        console.error("Error loading sessions:", error41);
-        setStatusMessage("Error loading sessions");
-      } finally {
-        setLoading(false);
-      }
+  const {
+    groupedSessions,
+    visualOrderSessions,
+    loading,
+    searchTerm,
+    setSearchTerm,
+    deleteSession,
+    reload
+  } = useSessionsList();
+  const [selectedIndex, setSelectedIndex] = import_react69.useState(0);
+  const [statusMessage, setStatusMessage] = import_react69.useState("");
+  const scroll = import_react69.useRef(null);
+  import_react69.useEffect(() => {
+    if (visualOrderSessions.length > 0 && selectedIndex >= visualOrderSessions.length) {
+      setSelectedIndex(visualOrderSessions.length - 1);
+    } else if (visualOrderSessions.length === 0) {
+      setSelectedIndex(0);
     }
-    loadOperatorSessions();
+  }, [visualOrderSessions.length, selectedIndex]);
+  const showStatus = import_react69.useCallback((msg) => {
+    setStatusMessage(msg);
+    setTimeout(() => setStatusMessage(""), 2000);
   }, []);
-  const resumeSession = async (session) => {
-    try {
-      const loaded = await loadSession(session.id);
-      if (!loaded) {
-        setStatusMessage("Error loading session");
-        setTimeout(() => setStatusMessage(""), 2000);
-        return;
-      }
-      route.navigate({
-        type: "session",
-        sessionId: session.id,
-        isResume: true
-      });
-    } catch (error41) {
-      console.error("Error resuming session:", error41);
-      setStatusMessage("Error resuming session");
-      setTimeout(() => setStatusMessage(""), 2000);
+  const openSession = import_react69.useCallback(async (session, asOperator) => {
+    const loaded = await loadSession(session.id);
+    if (!loaded) {
+      showStatus("Error loading session");
+      return;
     }
-  };
-  useKeyboard((key) => {
+    route.navigate({
+      type: "session",
+      sessionId: session.id,
+      isResume: true,
+      openAsOperator: asOperator || undefined
+    });
+  }, [loadSession, route, showStatus]);
+  const openReport = import_react69.useCallback(async (session) => {
+    const reportPath = await Storage.locate([session.id, "pentest-report"], ".md");
+    if (!existsSync27(reportPath)) {
+      showStatus("Report not found");
+      return;
+    }
+    exec5(`open "${reportPath}"`, (error41) => {
+      if (error41)
+        showStatus("Error opening report");
+    });
+  }, [showStatus]);
+  useKeyboard(async (key) => {
     if (key.name === "escape") {
       refocusPrompt();
       route.navigate({ type: "base", path: "home" });
       return;
     }
-    if (key.name === "up" && sessions.length > 0) {
-      setSelectedIndex((i) => i > 0 ? i - 1 : sessions.length - 1);
+    if (key.name === "return" && visualOrderSessions.length > 0) {
+      key.preventDefault();
+      const selected = visualOrderSessions[selectedIndex];
+      if (selected)
+        await openSession(selected, false);
+      return;
+    }
+    if ((key.name === "o" || key.name === "O") && !key.ctrl && !key.meta && visualOrderSessions.length > 0) {
+      const selected = visualOrderSessions[selectedIndex];
+      if (selected)
+        await openSession(selected, true);
       return;
     }
-    if (key.name === "down" && sessions.length > 0) {
-      setSelectedIndex((i) => i < sessions.length - 1 ? i + 1 : 0);
+    if ((key.name === "r" || key.name === "R") && !key.ctrl && !key.meta && visualOrderSessions.length > 0) {
+      const selected = visualOrderSessions[selectedIndex];
+      if (selected)
+        await openReport(selected);
       return;
     }
-    if (key.name === "return" && sessions.length > 0) {
-      const selected = sessions[selectedIndex];
+    if (key.ctrl && key.name === "d" && visualOrderSessions.length > 0) {
+      const selected = visualOrderSessions[selectedIndex];
       if (selected) {
-        resumeSession(selected);
+        await deleteSession(selected.id);
+        showStatus("Session deleted");
       }
       return;
     }
+    if (key.name === "up" && visualOrderSessions.length > 0) {
+      setSelectedIndex((i) => i > 0 ? i - 1 : visualOrderSessions.length - 1);
+      return;
+    }
+    if (key.name === "down" && visualOrderSessions.length > 0) {
+      setSelectedIndex((i) => i < visualOrderSessions.length - 1 ? i + 1 : 0);
+      return;
+    }
   });
   if (loading) {
     return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
@@ -153141,7 +153741,7 @@ function ResumeWizard() {
       }, undefined, false, undefined, this)
     }, undefined, false, undefined, this);
   }
-  if (sessions.length === 0) {
+  if (visualOrderSessions.length === 0) {
     return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
       flexDirection: "column",
       padding: 2,
@@ -153150,15 +153750,15 @@ function ResumeWizard() {
       children: [
         /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
           fg: creamText12,
-          children: "Resume Pentest Session"
+          children: "Sessions"
         }, undefined, false, undefined, this),
         /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
           fg: dimText13,
-          children: "No sessions found to resume."
+          children: "No sessions found."
         }, undefined, false, undefined, this),
         /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
           fg: dimText13,
-          children: "Start a new session with /web or /operator"
+          children: "Start a new session with /pentest or /operator"
         }, undefined, false, undefined, this),
         /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
           fg: dimText13,
@@ -153172,98 +153772,142 @@ function ResumeWizard() {
     padding: 2,
     gap: 1,
     width: "100%",
+    flexGrow: 1,
     children: [
       /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
         fg: creamText12,
-        children: "Resume Pentest Session"
+        children: "Sessions"
       }, undefined, false, undefined, this),
       /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
         fg: dimText13,
-        children: "Select a session to continue where you left off"
+        children: "Browse and reopen previous pentest sessions"
       }, undefined, false, undefined, this),
       /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
-        flexDirection: "column",
-        marginTop: 1,
-        children: sessions.map((session, index) => {
-          const isSelected = index === selectedIndex;
-          const age = formatRelativeTime(session.time.updated);
-          const target = session.targets[0] || "No target";
-          const findingsText = session.findingsCount > 0 ? `${session.findingsCount} finding${session.findingsCount > 1 ? "s" : ""}` : "No findings";
-          return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
-            flexDirection: "row",
-            justifyContent: "space-between",
-            width: "100%",
-            border: isSelected ? ["left"] : undefined,
-            borderColor: isSelected ? greenAccent5 : undefined,
-            paddingLeft: isSelected ? 1 : 2,
-            children: [
-              /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
-                flexDirection: "row",
-                gap: 1,
-                children: [
-                  /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
-                    fg: isSelected ? greenAccent5 : creamText12,
-                    children: [
-                      isSelected ? "▸ " : "  ",
-                      session.name
-                    ]
-                  }, undefined, true, undefined, this),
-                  session.hasOperatorState && /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
-                    fg: greenAccent5,
-                    children: "●"
-                  }, undefined, false, undefined, this)
-                ]
-              }, undefined, true, undefined, this),
-              /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
-                fg: dimText13,
-                children: [
-                  target,
-                  " · ",
-                  findingsText,
-                  " · ",
-                  age
-                ]
-              }, undefined, true, undefined, this)
-            ]
-          }, session.id, true, undefined, this);
-        })
+        width: "100%",
+        border: ["left"],
+        borderColor: greenAccent5,
+        backgroundColor: "transparent",
+        children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("input", {
+          paddingLeft: 1,
+          backgroundColor: "transparent",
+          placeholder: "Search sessions...",
+          value: searchTerm,
+          onInput: setSearchTerm,
+          focused: true
+        }, undefined, false, undefined, this)
       }, undefined, false, undefined, this),
       /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
-        marginTop: 2,
         flexDirection: "column",
-        children: [
-          /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
-            fg: dimText13,
-            children: [
-              /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("span", {
-                fg: greenAccent5,
-                children: "↑↓"
-              }, undefined, false, undefined, this),
-              " Navigate  ",
-              /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("span", {
-                fg: greenAccent5,
-                children: "Enter"
-              }, undefined, false, undefined, this),
-              " Resume  ",
-              /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("span", {
-                fg: greenAccent5,
-                children: "Esc"
-              }, undefined, false, undefined, this),
-              " Cancel"
-            ]
-          }, undefined, true, undefined, this),
-          /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
-            fg: dimText13,
+        gap: 1,
+        flexGrow: 1,
+        overflow: "hidden",
+        children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("scrollbox", {
+          ref: scroll,
+          scrollbarOptions: { visible: false },
+          style: {
+            rootOptions: {
+              width: "100%",
+              flexGrow: 1,
+              flexShrink: 1,
+              overflow: "hidden"
+            },
+            wrapperOptions: { overflow: "hidden" },
+            contentOptions: { gap: 2, flexDirection: "column" }
+          },
+          children: groupedSessions.map((group) => /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
+            flexDirection: "column",
+            gap: 1,
             children: [
-              /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("span", {
+              /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
                 fg: greenAccent5,
-                children: "●"
+                children: group.date
               }, undefined, false, undefined, this),
-              " = Has saved state (full context restore)"
+              group.sessions.map((session) => {
+                const isSelected = session.index === selectedIndex;
+                const age = formatRelativeTime(session.time.updated);
+                const mode = session.config?.mode || "auto";
+                const modeBadge = mode === "operator" ? "[operator]" : "[auto]";
+                const findingsText = session.findingsCount > 0 ? `${session.findingsCount} finding${session.findingsCount > 1 ? "s" : ""}` : "";
+                return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
+                  id: session.id,
+                  backgroundColor: "transparent",
+                  border: isSelected ? ["left"] : undefined,
+                  borderColor: isSelected ? greenAccent5 : undefined,
+                  paddingLeft: isSelected ? 1 : 2,
+                  flexDirection: "row",
+                  justifyContent: "space-between",
+                  width: "100%",
+                  children: [
+                    /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
+                      flexDirection: "row",
+                      gap: 1,
+                      children: [
+                        /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+                          fg: isSelected ? greenAccent5 : creamText12,
+                          children: [
+                            isSelected ? "▸ " : "  ",
+                            session.name
+                          ]
+                        }, undefined, true, undefined, this),
+                        /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+                          fg: mode === "operator" ? greenAccent5 : dimText13,
+                          children: modeBadge
+                        }, undefined, false, undefined, this),
+                        findingsText ? /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+                          fg: dimText13,
+                          children: findingsText
+                        }, undefined, false, undefined, this) : null
+                      ]
+                    }, undefined, true, undefined, this),
+                    /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+                      fg: dimText13,
+                      children: age
+                    }, undefined, false, undefined, this)
+                  ]
+                }, session.id, true, undefined, this);
+              })
             ]
-          }, undefined, true, undefined, this)
-        ]
-      }, undefined, true, undefined, this),
+          }, group.date, true, undefined, this))
+        }, undefined, false, undefined, this)
+      }, undefined, false, undefined, this),
+      /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
+        flexDirection: "row",
+        gap: 1,
+        children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
+          fg: dimText13,
+          children: [
+            /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("span", {
+              fg: greenAccent5,
+              children: "[Enter]"
+            }, undefined, false, undefined, this),
+            " Open",
+            "  ",
+            /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("span", {
+              fg: greenAccent5,
+              children: "[O]"
+            }, undefined, false, undefined, this),
+            " Operator",
+            "  ",
+            /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("span", {
+              fg: greenAccent5,
+              children: "[R]"
+            }, undefined, false, undefined, this),
+            " Report",
+            "  ",
+            /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("span", {
+              fg: greenAccent5,
+              children: "[Ctrl+D]"
+            }, undefined, false, undefined, this),
+            " Delete",
+            "  ",
+            /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("span", {
+              fg: greenAccent5,
+              children: "[Esc]"
+            }, undefined, false, undefined, this),
+            " Back"
+          ]
+        }, undefined, true, undefined, this)
+      }, undefined, false, undefined, this),
       statusMessage && /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
         fg: greenAccent5,
         children: statusMessage
@@ -153273,16 +153917,16 @@ function ResumeWizard() {
 }
 
 // src/tui/components/commands/provider-manager.tsx
-var import_react74 = __toESM(require_react(), 1);
+var import_react75 = __toESM(require_react(), 1);
 // src/tui/components/commands/provider-selection.tsx
-var import_react71 = __toESM(require_react(), 1);
+var import_react72 = __toESM(require_react(), 1);
 function ProviderSelection({
   onProviderSelected,
   onClose
 }) {
   const route = useRoute();
   const _config = useConfig();
-  const [highlightedIndex, setHighlightedIndex] = import_react71.useState(0);
+  const [highlightedIndex, setHighlightedIndex] = import_react72.useState(0);
   const configuredProviders = getConfiguredProviders(_config.data);
   useKeyboard((key) => {
     if (key.name === "escape") {
@@ -153435,14 +154079,14 @@ function ProviderSelection({
 }
 
 // src/tui/components/commands/api-key-input.tsx
-var import_react73 = __toESM(require_react(), 1);
+var import_react74 = __toESM(require_react(), 1);
 function APIKeyInput({
   provider,
   providerName,
   onSubmit,
   onCancel
 }) {
-  const [apiKey, setApiKey] = import_react73.useState("");
+  const [apiKey, setApiKey] = import_react74.useState("");
   useKeyboard((key) => {
     if (key.name === "escape") {
       onCancel();
@@ -153554,8 +154198,8 @@ function APIKeyInput({
 function ProviderManager() {
   const route = useRoute();
   const _config = useConfig();
-  const [flowState, setFlowState] = import_react74.useState("selecting");
-  const [selectedProvider, setSelectedProvider] = import_react74.useState(null);
+  const [flowState, setFlowState] = import_react75.useState("selecting");
+  const [selectedProvider, setSelectedProvider] = import_react75.useState(null);
   const handleProviderSelected = (providerId) => {
     setSelectedProvider(providerId);
     setFlowState("inputting");
@@ -153613,7 +154257,7 @@ function ProviderManager() {
 }
 
 // src/tui/components/switch.tsx
-var import_react75 = __toESM(require_react(), 1);
+var import_react76 = __toESM(require_react(), 1);
 var CaseSymbol = Symbol("Switch.Case");
 var DefaultSymbol = Symbol("Switch.Default");
 function CaseComponent({ children }) {
@@ -153634,8 +154278,8 @@ function SwitchComponent({
 }) {
   let matchedChild = null;
   let defaultChild = null;
-  import_react75.default.Children.forEach(children, (child) => {
-    if (import_react75.default.isValidElement(child)) {
+  import_react76.default.Children.forEach(children, (child) => {
+    if (import_react76.default.isValidElement(child)) {
       if (child.type[CaseSymbol]) {
         const caseChild = child;
         if (caseChild.props.when === condition) {
@@ -153847,7 +154491,7 @@ function ShortcutsDialog({ open, onClose }) {
 }
 
 // src/tui/components/commands/help-dialog.tsx
-var import_react78 = __toESM(require_react(), 1);
+var import_react79 = __toESM(require_react(), 1);
 var bgOverlay2 = RGBA.fromInts(0, 0, 0, 200);
 var bgPanel2 = RGBA.fromInts(20, 20, 20, 255);
 var borderColor3 = RGBA.fromInts(60, 60, 60, 255);
@@ -153859,10 +154503,10 @@ function HelpDialog() {
   const { commands: commands2 } = useCommand();
   const route = useRoute();
   const dimensions = useTerminalDimensions();
-  const [selectedIndex, setSelectedIndex] = import_react78.useState(0);
-  const [showDetail, setShowDetail] = import_react78.useState(false);
-  const scrollboxRef = import_react78.useRef(null);
-  const commandsByCategory = import_react78.useMemo(() => {
+  const [selectedIndex, setSelectedIndex] = import_react79.useState(0);
+  const [showDetail, setShowDetail] = import_react79.useState(false);
+  const scrollboxRef = import_react79.useRef(null);
+  const commandsByCategory = import_react79.useMemo(() => {
     const grouped = {};
     for (const cmd of commands2) {
       const category = cmd.category || "Other";
@@ -153873,15 +154517,15 @@ function HelpDialog() {
     }
     return grouped;
   }, [commands2]);
-  const flatCommands = import_react78.useMemo(() => {
+  const flatCommands = import_react79.useMemo(() => {
     return commands2;
   }, [commands2]);
-  import_react78.useEffect(() => {
+  import_react79.useEffect(() => {
     if (selectedIndex >= flatCommands.length) {
       setSelectedIndex(Math.max(0, flatCommands.length - 1));
     }
   }, [flatCommands.length, selectedIndex]);
-  import_react78.useEffect(() => {
+  import_react79.useEffect(() => {
     if (!scrollboxRef.current || flatCommands.length === 0)
       return;
     const scroll = scrollboxRef.current;
@@ -154333,10 +154977,10 @@ function ModelsDisplay() {
 }
 
 // src/tui/context/keybinding.tsx
-var import_react85 = __toESM(require_react(), 1);
+var import_react86 = __toESM(require_react(), 1);
 
 // src/tui/keybindings/keybind.tsx
-var import_react81 = __toESM(require_react(), 1);
+var import_react82 = __toESM(require_react(), 1);
 
 // src/tui/keybindings/actions.ts
 var movementActions = [
@@ -154588,7 +155232,7 @@ var allActions = [
 var actionsByKey = new Map(allActions.map((action) => [action.key, action]));
 var actionsById = new Map(allActions.map((action) => [action.id, action]));
 // src/tui/keybindings/keybind.tsx
-var LeaderKeyContext = import_react81.createContext(null);
+var LeaderKeyContext = import_react82.createContext(null);
 // src/tui/keybindings/registry.ts
 function createKeybindings(deps) {
   const {
@@ -154794,7 +155438,7 @@ var Keybind;
 })(Keybind ||= {});
 
 // src/tui/context/keybinding.tsx
-var KeybindingContext = import_react85.createContext(undefined);
+var KeybindingContext = import_react86.createContext(undefined);
 function KeybindingProvider({
   children,
   deps
@@ -154835,13 +155479,13 @@ function KeybindingProvider({
 // src/tui/index.tsx
 function App(props) {
   const { appConfig } = props;
-  const [focusIndex, setFocusIndex] = import_react87.useState(0);
-  const [cwd, setCwd] = import_react87.useState(process.cwd());
-  const [ctrlCPressTime, setCtrlCPressTime] = import_react87.useState(null);
-  const [showExitWarning, setShowExitWarning] = import_react87.useState(false);
-  const [inputKey, setInputKey] = import_react87.useState(0);
-  const [showSessionsDialog, setShowSessionsDialog] = import_react87.useState(false);
-  const [showShortcutsDialog, setShowShortcutsDialog] = import_react87.useState(false);
+  const [focusIndex, setFocusIndex] = import_react88.useState(0);
+  const [cwd, setCwd] = import_react88.useState(process.cwd());
+  const [ctrlCPressTime, setCtrlCPressTime] = import_react88.useState(null);
+  const [showExitWarning, setShowExitWarning] = import_react88.useState(false);
+  const [inputKey, setInputKey] = import_react88.useState(0);
+  const [showSessionsDialog, setShowSessionsDialog] = import_react88.useState(false);
+  const [showShortcutsDialog, setShowShortcutsDialog] = import_react88.useState(false);
   const navigableItems = ["command-input"];
   return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ConfigProvider, {
     config: appConfig,
@@ -154915,7 +155559,7 @@ function AppContent({
       path: "providers"
     });
   }
-  import_react87.useEffect(() => {
+  import_react88.useEffect(() => {
     if (showExitWarning) {
       const timer = setTimeout(() => {
         setShowExitWarning(false);
@@ -155037,13 +155681,17 @@ function CommandDisplay({
               initialModel: route.data.options?.model
             }, undefined, false, undefined, this)
           }, undefined, false, undefined, this),
+          /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(RouteSwitch.Case, {
+            when: "models",
+            children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ModelsDisplay, {}, undefined, false, undefined, this)
+          }, undefined, false, undefined, this),
           /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(RouteSwitch.Case, {
             when: "providers",
             children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ProviderManager, {}, undefined, false, undefined, this)
           }, undefined, false, undefined, this),
           /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(RouteSwitch.Case, {
-            when: "resume",
-            children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(ResumeWizard, {}, undefined, false, undefined, this)
+            when: "sessions",
+            children: /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(SessionsBrowser, {}, undefined, false, undefined, this)
           }, undefined, false, undefined, this),
           /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(RouteSwitch.Case, {
             when: "help",
@@ -155060,7 +155708,8 @@ function CommandDisplay({
   if (route.data.type === "session") {
     return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV(SessionView, {
       sessionId: route.data.sessionId,
-      isResume: route.data.isResume
+      isResume: route.data.isResume,
+      openAsOperator: route.data.openAsOperator
     }, undefined, false, undefined, this);
   }
   return null;