@pensar/apex 0.0.80 → 0.0.81-canary.5d4e2cba

package/build/index.js

@@ -31956,7 +31956,7 @@ var package_default2;
 var init_package = __esm(() => {
   package_default2 = {
     name: "@pensar/apex",
-    version: "0.0.80",
+    version: "0.0.81-canary.5d4e2cba",
     description: "AI-powered penetration testing CLI tool with terminal UI",
     module: "src/tui/index.tsx",
     main: "build/index.js",
@@ -36137,6 +36137,279 @@ var init_zod = __esm(() => {
   zod_default = exports_external;
 });
 
+// src/util/errors.ts
+var NamedError;
+var init_errors2 = __esm(() => {
+  init_zod();
+  NamedError = class NamedError extends Error {
+    static create(name, data) {
+      const schema2 = zod_default.object({
+        name: zod_default.literal(name),
+        data
+      });
+      const result = class extends NamedError {
+        data;
+        static Schema = schema2;
+        name = name;
+        constructor(data2, options) {
+          super(name, options);
+          this.data = data2;
+          this.name = name;
+        }
+        static isInstance(input) {
+          return typeof input === "object" && input !== null && "name" in input && input.name === name;
+        }
+        schema() {
+          return schema2;
+        }
+        toObject() {
+          return {
+            name,
+            data: this.data
+          };
+        }
+      };
+      Object.defineProperty(result, "name", { value: name });
+      return result;
+    }
+    static Unknown = NamedError.create("UnknownError", zod_default.object({
+      message: zod_default.string()
+    }));
+  };
+});
+
+// src/util/lock.ts
+function getLock(key) {
+  if (!locks.has(key)) {
+    locks.set(key, {
+      readers: 0,
+      writer: false,
+      waitingReaders: [],
+      waitingWriters: []
+    });
+  }
+  return locks.get(key);
+}
+function processQueue(key) {
+  const lock = locks.get(key);
+  if (!lock || lock.writer || lock.readers > 0)
+    return;
+  if (lock.waitingWriters.length > 0) {
+    const nextWriter = lock.waitingWriters.shift();
+    nextWriter();
+    return;
+  }
+  while (lock.waitingReaders.length > 0) {
+    const nextReader = lock.waitingReaders.shift();
+    nextReader();
+  }
+  if (lock.readers === 0 && !lock.writer && lock.waitingReaders.length === 0 && lock.waitingWriters.length === 0) {
+    locks.delete(key);
+  }
+}
+async function read(key) {
+  const lock = getLock(key);
+  return new Promise((resolve3) => {
+    if (!lock.writer && lock.waitingWriters.length === 0) {
+      lock.readers++;
+      resolve3({
+        [Symbol.dispose]: () => {
+          lock.readers--;
+          processQueue(key);
+        }
+      });
+    } else {
+      lock.waitingReaders.push(() => {
+        lock.readers++;
+        resolve3({
+          [Symbol.dispose]: () => {
+            lock.readers--;
+            processQueue(key);
+          }
+        });
+      });
+    }
+  });
+}
+async function write(key) {
+  const lock = getLock(key);
+  return new Promise((resolve3) => {
+    if (!lock.writer && lock.readers === 0) {
+      lock.writer = true;
+      resolve3({
+        [Symbol.dispose]: () => {
+          lock.writer = false;
+          processQueue(key);
+        }
+      });
+    } else {
+      lock.waitingWriters.push(() => {
+        lock.writer = true;
+        resolve3({
+          [Symbol.dispose]: () => {
+            lock.writer = false;
+            processQueue(key);
+          }
+        });
+      });
+    }
+  });
+}
+var locks;
+var init_lock = __esm(() => {
+  locks = new Map;
+});
+
+// src/core/storage/index.ts
+import os3 from "os";
+import path3 from "path";
+import fs3 from "fs/promises";
+import { readdir } from "fs/promises";
+function getBaseDir() {
+  return process.env.PENSAR_DATA_DIR ?? path3.join(os3.homedir(), ".pensar");
+}
+async function remove(key) {
+  const dir = getBaseDir();
+  const target = path3.join(dir, ...key) + ".json";
+  return withErrorHandling(async () => {
+    await fs3.unlink(target).catch(() => {});
+  });
+}
+async function write2(key, content, ext) {
+  const dir = getBaseDir();
+  const target = path3.join(dir, ...key) + (ext ? ext : ".json");
+  return withErrorHandling(async () => {
+    let __stack = [];
+    try {
+      const _2 = __using(__stack, await write(target), 0);
+      await fs3.mkdir(path3.dirname(target), { recursive: true });
+      await fs3.writeFile(target, JSON.stringify(content, null, 2), "utf-8");
+    } catch (_catch) {
+      var _err = _catch, _hasErr = 1;
+    } finally {
+      __callDispose(__stack, _err, _hasErr);
+    }
+  });
+}
+async function createDir(key) {
+  const dir = getBaseDir();
+  const target = path3.join(dir, ...key);
+  return withErrorHandling(async () => {
+    let __stack = [];
+    try {
+      const _2 = __using(__stack, await write(target), 0);
+      await fs3.mkdir(target, { recursive: true });
+    } catch (_catch) {
+      var _err = _catch, _hasErr = 1;
+    } finally {
+      __callDispose(__stack, _err, _hasErr);
+    }
+  });
+}
+async function writeRaw(key, content) {
+  const dir = getBaseDir();
+  const target = path3.join(dir, ...key);
+  return withErrorHandling(async () => {
+    let __stack = [];
+    try {
+      const _2 = __using(__stack, await write(target), 0);
+      const parentDir = path3.dirname(target);
+      await fs3.mkdir(parentDir, { recursive: true });
+      await fs3.writeFile(target, content, "utf-8");
+    } catch (_catch) {
+      var _err = _catch, _hasErr = 1;
+    } finally {
+      __callDispose(__stack, _err, _hasErr);
+    }
+  });
+}
+async function read2(key, ext) {
+  const dir = getBaseDir();
+  const target = path3.join(dir, ...key) + (ext ? ext : ".json");
+  return withErrorHandling(async () => {
+    let __stack = [];
+    try {
+      const _2 = __using(__stack, await read(target), 0);
+      const text = await fs3.readFile(target, "utf-8");
+      const result = ext ? text : JSON.parse(text);
+      return result;
+    } catch (_catch) {
+      var _err = _catch, _hasErr = 1;
+    } finally {
+      __callDispose(__stack, _err, _hasErr);
+    }
+  });
+}
+async function update2(key, fn, ext) {
+  const dir = getBaseDir();
+  const target = path3.join(dir, ...key) + (ext ? ext : ".json");
+  return withErrorHandling(async () => {
+    let __stack = [];
+    try {
+      const _2 = __using(__stack, await write(target), 0);
+      const text = await fs3.readFile(target, "utf-8");
+      const content = ext ? text : JSON.parse(text);
+      fn(content);
+      await fs3.writeFile(target, JSON.stringify(content, null, 2), "utf-8");
+      return content;
+    } catch (_catch) {
+      var _err = _catch, _hasErr = 1;
+    } finally {
+      __callDispose(__stack, _err, _hasErr);
+    }
+  });
+}
+async function withErrorHandling(body) {
+  return body().catch((e) => {
+    if (!(e instanceof Error))
+      throw e;
+    const errnoExcpetion = e;
+    if (errnoExcpetion.code === "ENOENT") {
+      throw new NotFoundError({
+        message: `Resource not found: ${errnoExcpetion.path}`
+      });
+    }
+    throw e;
+  });
+}
+async function listFilesRecursively(dir) {
+  const entries = await readdir(dir, { withFileTypes: true });
+  const files = [];
+  for (const entry of entries) {
+    const fullPath = path3.join(dir, entry.name);
+    if (entry.isDirectory()) {
+      files.push(...await listFilesRecursively(fullPath));
+    } else {
+      files.push(fullPath);
+    }
+  }
+  return files;
+}
+async function list(prefix) {
+  const dir = getBaseDir();
+  const targetDir = path3.join(dir, ...prefix);
+  try {
+    const files = await listFilesRecursively(targetDir);
+    const result = files.map((filePath) => {
+      const relativePath = path3.relative(targetDir, filePath);
+      return [...prefix, ...relativePath.slice(0, -5).split(path3.sep)];
+    });
+    result.sort();
+    return result;
+  } catch {
+    return [];
+  }
+}
+var NotFoundError;
+var init_storage = __esm(() => {
+  init_zod();
+  init_errors2();
+  init_lock();
+  NotFoundError = NamedError.create("NotFoundError", zod_default.object({
+    message: zod_default.string()
+  }));
+});
+
 // src/core/credentials/manager.ts
 import { randomBytes as randomBytes2 } from "crypto";
 function generateCredentialId() {
@@ -36615,6 +36888,30 @@ var init_toolset = __esm(() => {
       detail: "Validate that testing is complete by checking coverage against the original scope and identifying any gaps.",
       category: "utility",
       defaultEnabled: true
+    },
+    {
+      id: "add_memory",
+      name: "Add Memory",
+      description: "Save to memory",
+      detail: "Save a piece of knowledge to persistent memory. Memories survive across sessions and can store reusable techniques, target notes, credential patterns, useful payloads, or any information worth remembering.",
+      category: "utility",
+      defaultEnabled: true
+    },
+    {
+      id: "list_memories",
+      name: "List Memories",
+      description: "Browse saved memories",
+      detail: "List all saved memories with optional tag filtering. Returns summaries sorted by most recent first. Use the returned id with Get Memory to retrieve full content.",
+      category: "utility",
+      defaultEnabled: true
+    },
+    {
+      id: "get_memory",
+      name: "Get Memory",
+      description: "Retrieve a memory",
+      detail: "Retrieve the full content of a saved memory by its id. Use List Memories first to discover available memory ids.",
+      category: "utility",
+      defaultEnabled: true
     }
   ];
   TOOLSETS = [
@@ -37017,9 +37314,9 @@ function saveSubagentData(session, data) {
   const filename = `${data.agentName}-${ts}.json`;
   writeFileSync2(join4(subagentsDir, filename), JSON.stringify(savedData, null, 2));
 }
-function writeAgentManifest(session, entries) {
+function writeAgentManifest(session, entries2) {
   const manifestPath = join4(session.rootPath, MANIFEST_FILE);
-  writeFileSync2(manifestPath, JSON.stringify(entries, null, 2));
+  writeFileSync2(manifestPath, JSON.stringify(entries2, null, 2));
 }
 function buildManifestEntries(targets) {
   return targets.map((t2, i) => ({
@@ -37032,8 +37329,8 @@ function buildManifestEntries(targets) {
     spawnedAt: new Date().toISOString()
   }));
 }
-function finalizeManifest(session, entries, results) {
-  const finalManifest = entries.map((entry, i) => ({
+function finalizeManifest(session, entries2, results) {
+  const finalManifest = entries2.map((entry, i) => ({
     ...entry,
     status: results[i] != null ? "completed" : "failed",
     completedAt: new Date().toISOString()
@@ -37612,9 +37909,9 @@ function assertNever(_x) {
   throw new Error;
 }
 function assert(_2) {}
-function getEnumValues(entries) {
-  const numericValues = Object.values(entries).filter((v2) => typeof v2 === "number");
-  const values = Object.entries(entries).filter(([k2, _2]) => numericValues.indexOf(+k2) === -1).map(([_2, v2]) => v2);
+function getEnumValues(entries2) {
+  const numericValues = Object.values(entries2).filter((v2) => typeof v2 === "number");
+  const values = Object.entries(entries2).filter(([k2, _2]) => numericValues.indexOf(+k2) === -1).map(([_2, v2]) => v2);
   return values;
 }
 function joinValues(array, separator = "|") {
@@ -38208,7 +38505,7 @@ var initializer = (inst, def) => {
     enumerable: false
   });
 }, $ZodError, $ZodRealError;
-var init_errors2 = __esm(() => {
+var init_errors3 = __esm(() => {
   init_core();
   init_util2();
   $ZodError = $constructor("$ZodError", initializer);
@@ -38261,7 +38558,7 @@ var _parse = (_Err) => (schema2, value, _ctx, _params) => {
 }, safeParseAsync;
 var init_parse = __esm(() => {
   init_core();
-  init_errors2();
+  init_errors3();
   init_util2();
   parse2 = /* @__PURE__ */ _parse($ZodRealError);
   parseAsync = /* @__PURE__ */ _parseAsync($ZodRealError);
@@ -46216,17 +46513,17 @@ function _set(Class2, valueType, params) {
   });
 }
 function _enum(Class2, values, params) {
-  const entries = Array.isArray(values) ? Object.fromEntries(values.map((v2) => [v2, v2])) : values;
+  const entries2 = Array.isArray(values) ? Object.fromEntries(values.map((v2) => [v2, v2])) : values;
   return new Class2({
     type: "enum",
-    entries,
+    entries: entries2,
     ...normalizeParams(params)
   });
 }
-function _nativeEnum(Class2, entries, params) {
+function _nativeEnum(Class2, entries2, params) {
   return new Class2({
     type: "enum",
-    entries,
+    entries: entries2,
     ...normalizeParams(params)
   });
 }
@@ -47513,7 +47810,7 @@ var init_core2 = __esm(() => {
   init_json_schema();
   init_core();
   init_parse();
-  init_errors2();
+  init_errors3();
   init_schemas2();
   init_checks();
   init_versions();
@@ -47598,7 +47895,7 @@ var initializer2 = (inst, issues) => {
     }
   });
 }, ZodError3, ZodRealError;
-var init_errors3 = __esm(() => {
+var init_errors4 = __esm(() => {
   init_core2();
   init_core2();
   ZodError3 = $constructor("ZodError", initializer2);
@@ -47611,7 +47908,7 @@ var init_errors3 = __esm(() => {
 var parse4, parseAsync2, safeParse2, safeParseAsync2;
 var init_parse2 = __esm(() => {
   init_core2();
-  init_errors3();
+  init_errors4();
   parse4 = /* @__PURE__ */ _parse(ZodRealError);
   parseAsync2 = /* @__PURE__ */ _parseAsync(ZodRealError);
   safeParse2 = /* @__PURE__ */ _safeParse(ZodRealError);
@@ -47850,17 +48147,17 @@ function set(valueType, params) {
   });
 }
 function _enum2(values, params) {
-  const entries = Array.isArray(values) ? Object.fromEntries(values.map((v2) => [v2, v2])) : values;
+  const entries2 = Array.isArray(values) ? Object.fromEntries(values.map((v2) => [v2, v2])) : values;
   return new ZodEnum2({
     type: "enum",
-    entries,
+    entries: entries2,
     ...exports_util.normalizeParams(params)
   });
 }
-function nativeEnum(entries, params) {
+function nativeEnum(entries2, params) {
   return new ZodEnum2({
     type: "enum",
-    entries,
+    entries: entries2,
     ...exports_util.normalizeParams(params)
   });
 }
@@ -48835,7 +49132,7 @@ var init_external2 = __esm(() => {
   init_coerce();
   init_schemas3();
   init_checks2();
-  init_errors3();
+  init_errors4();
   init_parse2();
   init_compat();
   config2(en_default2());
@@ -53268,8 +53565,8 @@ var require_baggage_impl = __commonJS((exports) => {
   exports.BaggageImpl = undefined;
 
   class BaggageImpl {
-    constructor(entries) {
-      this._entries = entries ? new Map(entries) : new Map;
+    constructor(entries2) {
+      this._entries = entries2 ? new Map(entries2) : new Map;
     }
     getEntry(key) {
       const entry = this._entries.get(key);
@@ -53320,8 +53617,8 @@ var require_utils = __commonJS((exports) => {
   var baggage_impl_1 = require_baggage_impl();
   var symbol_1 = require_symbol();
   var diag = diag_1.DiagAPI.instance();
-  function createBaggage(entries = {}) {
-    return new baggage_impl_1.BaggageImpl(new Map(Object.entries(entries)));
+  function createBaggage(entries2 = {}) {
+    return new baggage_impl_1.BaggageImpl(new Map(Object.entries(entries2)));
   }
   exports.createBaggage = createBaggage;
   function baggageEntryMetadataFromString(str) {
@@ -99560,8 +99857,8 @@ var require_dist2 = __commonJS((exports, module2) => {
       return ajv;
     }
     const [formats, exportName] = opts.mode === "fast" ? [formats_1.fastFormats, fastName] : [formats_1.fullFormats, fullName];
-    const list2 = opts.formats || formats_1.formatNames;
-    addFormats(ajv, list2, formats, exportName);
+    const list3 = opts.formats || formats_1.formatNames;
+    addFormats(ajv, list3, formats, exportName);
     if (opts.keywords)
       (0, limit_1.default)(ajv);
     return ajv;
@@ -99573,11 +99870,11 @@ var require_dist2 = __commonJS((exports, module2) => {
       throw new Error(`Unknown format "${name26}"`);
     return f;
   };
-  function addFormats(ajv, list2, fs5, exportName) {
+  function addFormats(ajv, list3, fs5, exportName) {
     var _a26;
     var _b16;
     (_a26 = (_b16 = ajv.opts.code).formats) !== null && _a26 !== undefined || (_b16.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`);
-    for (const f of list2)
+    for (const f of list3)
       ajv.addFormat(f, fs5[f]);
   }
   module2.exports = exports = formatsPlugin;
@@ -103892,19 +104189,19 @@ var init_readFile = __esm(() => {
 });
 
 // src/core/agents/offSecAgent/tools/listFiles.ts
-import { readdir, stat } from "fs/promises";
+import { readdir as readdir2, stat } from "fs/promises";
 import { join as join12, relative } from "path";
 async function listRecursive(dir, maxEntries) {
   const results = [];
   let total = 0;
   async function walk(current) {
-    let entries;
+    let entries2;
     try {
-      entries = await readdir(current, { withFileTypes: true });
+      entries2 = await readdir2(current, { withFileTypes: true });
     } catch {
       return;
     }
-    for (const entry of entries) {
+    for (const entry of entries2) {
       total++;
       const fullPath = join12(current, entry.name);
       if (entry.isDirectory()) {
@@ -103967,8 +104264,8 @@ Each directory entry is suffixed with "/" for easy identification.`,
             totalFound: total > MAX_RECURSIVE ? total : undefined
           };
         }
-        const entries = await readdir(dir, { withFileTypes: true });
-        const fullPaths = entries.map((e) => {
+        const entries2 = await readdir2(dir, { withFileTypes: true });
+        const fullPaths = entries2.map((e) => {
           const name26 = join12(dir, e.name);
           return e.isDirectory() ? `${name26}/` : name26;
         });
@@ -103976,11 +104273,11 @@ Each directory entry is suffixed with "/" for easy identification.`,
         const relPaths = toRelative(dir, capped);
         return {
           success: true,
-          error: entries.length > MAX_NON_RECURSIVE ? `Showing ${MAX_NON_RECURSIVE} of ${entries.length} entries` : "",
+          error: entries2.length > MAX_NON_RECURSIVE ? `Showing ${MAX_NON_RECURSIVE} of ${entries2.length} entries` : "",
           files: relPaths,
           directory: dir,
           count: relPaths.length,
-          totalFound: entries.length > MAX_NON_RECURSIVE ? entries.length : undefined
+          totalFound: entries2.length > MAX_NON_RECURSIVE ? entries2.length : undefined
         };
       } catch (err) {
         return {
@@ -104982,6 +105279,13 @@ When to use delegate_to_auth_subagent vs authenticate_session:
             tokens = { ...stored.tokens };
           }
         }
+        const subagentId = "auth-agent";
+        const cbs = ctx4.subagentCallbacks;
+        cbs?.onSubagentSpawn?.({
+          subagentId,
+          input: { target, reason },
+          status: "pending"
+        });
         console.log(`
 \uD83D\uDD10 Delegating to authentication subagent...`);
         console.log(`   Target: ${target}`);
@@ -105033,6 +105337,12 @@ When to use delegate_to_auth_subagent vs authenticate_session:
           ctx4.session.credentialManager.addFromAuthCredentials(credentials);
         }
         const { runAuthenticationAgent: runAuthenticationAgent3 } = await Promise.resolve().then(() => (init_authentication(), exports_authentication));
+        const subagentCallbacks = cbs ? {
+          onTextDelta: (d2) => cbs.onTextDelta?.({ ...d2, subagentId }),
+          onToolCall: (d2) => cbs.onToolCall?.({ ...d2, subagentId }),
+          onToolResult: (d2) => cbs.onToolResult?.({ ...d2, subagentId }),
+          onError: (e) => cbs.onError?.(e)
+        } : undefined;
         const result = await runAuthenticationAgent3({
           target,
           session: ctx4.session,
@@ -105040,7 +105350,15 @@ When to use delegate_to_auth_subagent vs authenticate_session:
           model: ctx4.model,
           authConfig: ctx4.authConfig,
           abortSignal: ctx4.abortSignal,
-          callbacks: ctx4.callbacks
+          callbacks: {
+            ...ctx4.callbacks,
+            subagentCallbacks
+          }
+        });
+        cbs?.onSubagentComplete?.({
+          subagentId,
+          input: { target, reason },
+          status: result.success ? "completed" : "failed"
         });
         if (result.success) {
           const sessionInfoPath = join16(ctx4.session.rootPath, "session-info.json");
@@ -105088,6 +105406,11 @@ To make authenticated requests, use the returned values:
 Auth data saved to: ${result.authDataPath}` : ""}` : `Authentication subagent failed. ${result.summary}${result.authBarrier ? ` Barrier: ${result.authBarrier.type} - ${result.authBarrier.details}` : ""}`
         };
       } catch (error40) {
+        ctx4.subagentCallbacks?.onSubagentComplete?.({
+          subagentId: "auth-agent",
+          input: { target, reason },
+          status: "failed"
+        });
         const errorMessage = error40 instanceof Error ? error40.message : String(error40);
         return {
           success: false,
@@ -106170,6 +106493,11 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
         onToolResult: (d2) => cbs.onToolResult?.({ ...d2, subagentId }),
         onError: (e) => cbs.onError?.(e)
       } : undefined;
+      cbs?.onSubagentSpawn?.({
+        subagentId,
+        input: { target, cwd },
+        status: "pending"
+      });
       if (cwd) {
         try {
           const { WhiteboxAttackSurfaceAgent: WhiteboxAttackSurfaceAgent2 } = await Promise.resolve().then(() => (init_agent2(), exports_agent));
@@ -106193,6 +106521,11 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
           })));
           console.log(`
 ✓ Whitebox attack surface complete: ${targets.length} targets from ${result.apps.length} apps`);
+          cbs?.onSubagentComplete?.({
+            subagentId,
+            input: { target, cwd },
+            status: "completed"
+          });
           return {
             success: true,
             mode: "whitebox",
@@ -106204,6 +106537,11 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
         } catch (error40) {
           const errorMsg = error40 instanceof Error ? error40.message : String(error40);
           console.error(`✗ Whitebox attack surface agent failed: ${errorMsg}`);
+          cbs?.onSubagentComplete?.({
+            subagentId,
+            input: { target, cwd },
+            status: "failed"
+          });
           return {
             success: false,
             targets: [],
@@ -106230,6 +106568,11 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
         const targetCount = result.targets.length;
         console.log(`
 ✓ Blackbox attack surface complete: ${targetCount} targets identified`);
+        cbs?.onSubagentComplete?.({
+          subagentId,
+          input: { target },
+          status: "completed"
+        });
         return {
           success: true,
           mode: "blackbox",
@@ -106248,6 +106591,11 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
       } catch (error40) {
         const errorMsg = error40 instanceof Error ? error40.message : String(error40);
         console.error(`✗ Blackbox attack surface agent failed: ${errorMsg}`);
+        cbs?.onSubagentComplete?.({
+          subagentId,
+          input: { target },
+          status: "failed"
+        });
         return {
           success: false,
           targets: [],
@@ -106878,6 +107226,215 @@ var init_provideComparisonResults = __esm(() => {
   init_zod();
 });
 
+// src/core/memory/index.ts
+function storageKey(category, id) {
+  return [MEMORIES_PREFIX, category, id];
+}
+function slugify2(text2) {
+  return text2.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80);
+}
+function makeId(title) {
+  const slug = slugify2(title);
+  const ts = Date.now().toString(36);
+  return slug ? `${slug}-${ts}` : ts;
+}
+function validateId(id) {
+  if (id.includes("/") || id.includes("\\") || id.includes("..")) {
+    throw new Error("Invalid memory id: contains path traversal characters");
+  }
+}
+async function addMemory(input) {
+  const category = input.category ?? "general";
+  const id = makeId(input.title);
+  const now2 = new Date().toISOString();
+  const memory = {
+    id,
+    category,
+    title: input.title,
+    content: input.content,
+    tags: input.tags ?? [],
+    createdAt: now2,
+    updatedAt: now2
+  };
+  await write2(storageKey(category, id), memory);
+  return memory;
+}
+async function getMemory(category, id) {
+  validateId(id);
+  try {
+    return await read2(storageKey(category, id));
+  } catch (e) {
+    if (e instanceof NotFoundError)
+      return null;
+    throw e;
+  }
+}
+async function listMemories(opts) {
+  const prefix = opts?.category ? [MEMORIES_PREFIX, opts.category] : [MEMORIES_PREFIX];
+  const keys = await list(prefix);
+  const summaries = [];
+  for (const key of keys) {
+    try {
+      const memory = await read2(key);
+      if (opts?.tag && !memory.tags.includes(opts.tag))
+        continue;
+      summaries.push({
+        id: memory.id,
+        category: memory.category,
+        title: memory.title,
+        tags: memory.tags,
+        createdAt: memory.createdAt
+      });
+    } catch {}
+  }
+  summaries.sort((a, b2) => new Date(b2.createdAt).getTime() - new Date(a.createdAt).getTime());
+  return summaries;
+}
+var MEMORY_CATEGORIES, MEMORIES_PREFIX = "memories";
+var init_memory = __esm(() => {
+  init_storage();
+  MEMORY_CATEGORIES = ["app", "framework", "general"];
+});
+
+// src/core/agents/offSecAgent/tools/addMemory.ts
+function addMemory2(_ctx) {
+  return tool({
+    description: `Save a piece of knowledge to persistent memory.
+
+Memories are stored across sessions in ~/.pensar/memories/ and survive restarts.
+They are organised into categories:
+  - "app"       — application-specific notes (e.g. target quirks, endpoints)
+  - "framework" — framework-specific notes (e.g. Rails tricks, Django patterns)
+  - "general"   — catch-all (default when category is omitted)
+
+Use this to record reusable techniques, target-specific notes, credential
+patterns, useful payloads, or any information worth remembering for future
+engagements.`,
+    inputSchema: addMemoryInputSchema,
+    execute: async ({
+      title,
+      content,
+      category,
+      tags
+    }) => {
+      try {
+        const memory = await addMemory({ title, content, category, tags });
+        return {
+          success: true,
+          error: "",
+          id: memory.id,
+          category: memory.category,
+          title: memory.title
+        };
+      } catch (err) {
+        return {
+          success: false,
+          error: err instanceof Error ? err.message : String(err)
+        };
+      }
+    }
+  });
+}
+var addMemoryInputSchema;
+var init_addMemory = __esm(() => {
+  init_dist5();
+  init_zod();
+  init_memory();
+  addMemoryInputSchema = exports_external.object({
+    title: exports_external.string().describe("Short, descriptive title for the memory (used to generate id)"),
+    content: exports_external.string().describe("Free-form text content to persist as a memory"),
+    category: exports_external.enum(MEMORY_CATEGORIES).optional().describe('Storage category: "app" for application-specific knowledge, ' + '"framework" for framework-specific knowledge, or omit for the ' + '"general" catch-all'),
+    tags: exports_external.array(exports_external.string()).optional().describe("Optional tags for categorisation and filtering"),
+    toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing (e.g., 'Saving XSS payload pattern')")
+  });
+});
+
+// src/core/agents/offSecAgent/tools/listMemories.ts
+function listMemories2(_ctx) {
+  return tool({
+    description: `List saved memories, optionally filtered by category and/or tag.
+
+Returns lightweight summaries (id, category, title, tags, createdAt) sorted by
+most recent first. Use the returned category + id with get_memory to retrieve
+full content.`,
+    inputSchema: listMemoriesInputSchema,
+    execute: async ({ category, tag }) => {
+      try {
+        const memories = await listMemories({ category, tag });
+        return {
+          success: true,
+          error: "",
+          memories,
+          count: memories.length
+        };
+      } catch (err) {
+        return {
+          success: false,
+          error: err instanceof Error ? err.message : String(err),
+          memories: [],
+          count: 0
+        };
+      }
+    }
+  });
+}
+var listMemoriesInputSchema;
+var init_listMemories = __esm(() => {
+  init_dist5();
+  init_zod();
+  init_memory();
+  listMemoriesInputSchema = exports_external.object({
+    category: exports_external.enum(MEMORY_CATEGORIES).optional().describe('Filter by category: "app", "framework", or "general". ' + "Omit to list memories across all categories."),
+    tag: exports_external.string().optional().describe("Optional tag to filter memories by (exact match)"),
+    toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing (e.g., 'Listing stored recon notes')")
+  });
+});
+
+// src/core/agents/offSecAgent/tools/getMemory.ts
+function getMemory2(_ctx) {
+  return tool({
+    description: `Retrieve the full content of a memory by its category and id.
+
+Use list_memories first to discover available memories, then call this tool
+with the category and id from that listing to fetch full content.`,
+    inputSchema: getMemoryInputSchema,
+    execute: async ({ category, id }) => {
+      try {
+        const memory = await getMemory(category, id);
+        if (!memory) {
+          return {
+            success: false,
+            error: `Memory not found: ${category}/${id}`,
+            memory: null
+          };
+        }
+        return {
+          success: true,
+          error: "",
+          memory
+        };
+      } catch (err) {
+        return {
+          success: false,
+          error: err instanceof Error ? err.message : String(err),
+          memory: null
+        };
+      }
+    }
+  });
+}
+var getMemoryInputSchema;
+var init_getMemory = __esm(() => {
+  init_dist5();
+  init_zod();
+  init_memory();
+  getMemoryInputSchema = exports_external.object({
+    category: exports_external.enum(MEMORY_CATEGORIES).describe('The memory category: "app", "framework", or "general" (returned by list_memories)'),
+    id: exports_external.string().describe("The unique memory id (returned by list_memories)"),
+    toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing (e.g., 'Retrieving SQL injection cheatsheet')")
+  });
+});
+
 // src/core/agents/offSecAgent/tools/email/listInboxes.ts
 function emailListInboxes(ctx4) {
   return tool({
@@ -129707,7 +130264,7 @@ var require_libmime = __commonJS((exports, module2) => {
       return response;
     }
     buildHeaderParam(key, data, maxLength, fromCharset) {
-      let list2 = [];
+      let list3 = [];
       let encodedStr = typeof data === "string" ? data : this.decode(data, fromCharset);
       let encodedStrArr;
       let chr, ord;
@@ -129726,13 +130283,13 @@ var require_libmime = __commonJS((exports, module2) => {
           ];
         }
         encodedStr = encodedStr.replace(new RegExp(".{" + maxLength + "}", "g"), (str) => {
-          list2.push({
+          list3.push({
             line: str
           });
           return "";
         });
         if (encodedStr) {
-          list2.push({
+          list3.push({
             line: encodedStr
           });
         }
@@ -129763,7 +130320,7 @@ var require_libmime = __commonJS((exports, module2) => {
             chr = chr === " " ? chr : this.safeEncodeURIComponent(chr);
             if (chr !== encodedStr[i]) {
               if ((this.safeEncodeURIComponent(line) + chr).length >= maxLength) {
-                list2.push({
+                list3.push({
                   line,
                   encoded: isEncoded
                 });
@@ -129778,7 +130335,7 @@ var require_libmime = __commonJS((exports, module2) => {
             }
           }
           if ((line + chr).length >= maxLength) {
-            list2.push({
+            list3.push({
               line,
               encoded: isEncoded
             });
@@ -129794,13 +130351,13 @@ var require_libmime = __commonJS((exports, module2) => {
           }
         }
         if (line) {
-          list2.push({
+          list3.push({
             line,
             encoded: isEncoded
           });
         }
       }
-      return list2.map((item, i2) => ({
+      return list3.map((item, i2) => ({
         key: key + "*" + i2 + (item.encoded ? "*" : ""),
         value: item.line
       }));
@@ -131165,7 +131722,7 @@ var require_addressparser = __commonJS((exports, module2) => {
       };
     }
     tokenize() {
-      let list2 = [];
+      let list3 = [];
       for (let i = 0, len = this.str.length;i < len; i++) {
         let chr = this.str.charAt(i);
         let nextChr = i < len - 1 ? this.str.charAt(i + 1) : null;
@@ -131174,10 +131731,10 @@ var require_addressparser = __commonJS((exports, module2) => {
       this.list.forEach((node) => {
         node.value = (node.value || "").toString().trim();
         if (node.value) {
-          list2.push(node);
+          list3.push(node);
         }
       });
-      return list2;
+      return list3;
     }
     checkChar(chr, nextChr) {
       if (this.escaped) {} else if (chr === this.operatorExpecting) {
@@ -131258,8 +131815,8 @@ var require_addressparser = __commonJS((exports, module2) => {
     });
     if (options.flatten) {
       let addresses2 = [];
-      let walkAddressList = (list2) => {
-        list2.forEach((address2) => {
+      let walkAddressList = (list3) => {
+        list3.forEach((address2) => {
           if (address2.group) {
             return walkAddressList(address2.group);
           } else {
@@ -140602,30 +141159,30 @@ var require_html_to_text = __commonJS((exports) => {
       if (!(this._stackItem instanceof ListStackItem)) {
         throw new Error("Can't add a list item to something that is not a list! Check the formatter.");
       }
-      const list2 = this._stackItem;
-      const prefixLength = Math.max(prefix.length, list2.maxPrefixLength);
-      const maxLineLength = Math.max(20, list2.inlineTextBuilder.maxLineLength - prefixLength);
-      this._stackItem = new ListItemStackItem(this.options, list2, {
+      const list3 = this._stackItem;
+      const prefixLength = Math.max(prefix.length, list3.maxPrefixLength);
+      const maxLineLength = Math.max(20, list3.inlineTextBuilder.maxLineLength - prefixLength);
+      this._stackItem = new ListItemStackItem(this.options, list3, {
         prefix,
         maxLineLength,
-        leadingLineBreaks: list2.interRowLineBreaks
+        leadingLineBreaks: list3.interRowLineBreaks
       });
     }
     closeListItem() {
       const listItem = this._popStackItem();
-      const list2 = listItem.next;
-      const prefixLength = Math.max(listItem.prefix.length, list2.maxPrefixLength);
+      const list3 = listItem.next;
+      const prefixLength = Math.max(listItem.prefix.length, list3.maxPrefixLength);
       const spacing = `
 ` + " ".repeat(prefixLength);
-      const prefix = list2.prefixAlign === "right" ? listItem.prefix.padStart(prefixLength) : listItem.prefix.padEnd(prefixLength);
+      const prefix = list3.prefixAlign === "right" ? listItem.prefix.padStart(prefixLength) : listItem.prefix.padEnd(prefixLength);
       const text2 = prefix + getText(listItem).replace(/\n/g, spacing);
-      addText(list2, text2, listItem.leadingLineBreaks, Math.max(listItem.stashedLineBreaks, list2.interRowLineBreaks));
+      addText(list3, text2, listItem.leadingLineBreaks, Math.max(listItem.stashedLineBreaks, list3.interRowLineBreaks));
     }
     closeList({ trailingLineBreaks = 2 } = {}) {
-      const list2 = this._popStackItem();
-      const text2 = getText(list2);
+      const list3 = this._popStackItem();
+      const text2 = getText(list3);
       if (text2) {
-        addText(this._stackItem, text2, list2.leadingLineBreaks, trailingLineBreaks);
+        addText(this._stackItem, text2, list3.leadingLineBreaks, trailingLineBreaks);
       }
     }
     openTable() {
@@ -140780,9 +141337,9 @@ var require_html_to_text = __commonJS((exports) => {
     if (!dict || Object.keys(dict).length === 0) {
       return;
     }
-    const entries = Object.entries(dict).filter(([, v2]) => v2 !== false);
-    const regex = new RegExp(entries.map(([c]) => `(${unicodeEscape([...c][0])})`).join("|"), "g");
-    const values = entries.map(([, v2]) => v2);
+    const entries2 = Object.entries(dict).filter(([, v2]) => v2 !== false);
+    const regex = new RegExp(entries2.map(([c]) => `(${unicodeEscape([...c][0])})`).join("|"), "g");
+    const values = entries2.map(([, v2]) => v2);
     const replacer = (m2, ...cgs) => values[cgs.findIndex((cg) => cg)];
     return (str) => str.replace(regex, replacer);
   }
@@ -141967,15 +142524,15 @@ var require_index_cjs2 = __commonJS((exports, module2) => {
     this.__last_index__ = m2.index + m2[0].length + len;
     return createMatch(this, 0);
   };
-  LinkifyIt.prototype.tlds = function tlds(list2, keepOld) {
-    list2 = Array.isArray(list2) ? list2 : [list2];
+  LinkifyIt.prototype.tlds = function tlds(list3, keepOld) {
+    list3 = Array.isArray(list3) ? list3 : [list3];
     if (!keepOld) {
-      this.__tlds__ = list2.slice();
+      this.__tlds__ = list3.slice();
       this.__tlds_replaced__ = true;
       compile(this);
       return this;
     }
-    this.__tlds__ = this.__tlds__.concat(list2).sort().filter(function(el, idx, arr) {
+    this.__tlds__ = this.__tlds__.concat(list3).sort().filter(function(el, idx, arr) {
       return el !== arr[idx - 1];
     }).reverse();
     compile(this);
@@ -145295,7 +145852,7 @@ var require_common2 = __commonJS((exports, module2) => {
 var require_browser = __commonJS((exports, module2) => {
   exports.formatArgs = formatArgs;
   exports.save = save;
-  exports.load = load;
+  exports.load = load2;
   exports.useColors = useColors;
   exports.storage = localstorage();
   exports.destroy = (() => {
@@ -145425,7 +145982,7 @@ var require_browser = __commonJS((exports, module2) => {
       }
     } catch (error40) {}
   }
-  function load() {
+  function load2() {
     let r;
     try {
       r = exports.storage.getItem("debug") || exports.storage.getItem("DEBUG");
@@ -145459,7 +146016,7 @@ var require_node3 = __commonJS((exports, module2) => {
   exports.log = log2;
   exports.formatArgs = formatArgs;
   exports.save = save;
-  exports.load = load;
+  exports.load = load2;
   exports.useColors = useColors;
   exports.destroy = util4.deprecate(() => {}, "Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.");
   exports.colors = [6, 2, 3, 4, 5, 1];
@@ -145599,7 +146156,7 @@ var require_node3 = __commonJS((exports, module2) => {
       delete process.env.DEBUG;
     }
   }
-  function load() {
+  function load2() {
     return process.env.DEBUG;
   }
   function init2(debug) {
@@ -161065,8 +161622,8 @@ var require_object_inspect = __commonJS((exports, module2) => {
   function weakCollectionOf(type) {
     return type + " { ? }";
   }
-  function collectionOf(type, size, entries, indent) {
-    var joinedEntries = indent ? indentedJoin(entries, indent) : $join.call(entries, ", ");
+  function collectionOf(type, size, entries2, indent) {
+    var joinedEntries = indent ? indentedJoin(entries2, indent) : $join.call(entries2, ", ");
     return type + " (" + size + ") {" + joinedEntries + "}";
   }
   function singleLineValues(xs) {
@@ -161148,15 +161705,15 @@ var require_object_inspect = __commonJS((exports, module2) => {
 var require_side_channel_list = __commonJS((exports, module2) => {
   var inspect = require_object_inspect();
   var $TypeError = require_type();
-  var listGetNode = function(list2, key, isDelete) {
-    var prev = list2;
+  var listGetNode = function(list3, key, isDelete) {
+    var prev = list3;
     var curr;
     for (;(curr = prev.next) != null; prev = curr) {
       if (curr.key === key) {
         prev.next = curr.next;
         if (!isDelete) {
-          curr.next = list2.next;
-          list2.next = curr;
+          curr.next = list3.next;
+          list3.next = curr;
         }
         return curr;
       }
@@ -162375,9 +162932,9 @@ var require_stringify3 = __commonJS((exports, module2) => {
     }
   };
   var isArray = Array.isArray;
-  var push = Array.prototype.push;
+  var push2 = Array.prototype.push;
   var pushToArray = function(arr, valueOrArray) {
-    push.apply(arr, isArray(valueOrArray) ? valueOrArray : [valueOrArray]);
+    push2.apply(arr, isArray(valueOrArray) ? valueOrArray : [valueOrArray]);
   };
   var toISO = Date.prototype.toISOString;
   var defaultFormat = formats["default"];
@@ -170227,9 +170784,9 @@ var require_caller = __commonJS((exports, module2) => {
     if (!Array.isArray(stack)) {
       return;
     }
-    const entries = stack.slice(2);
+    const entries2 = stack.slice(2);
     const fileNames = [];
-    for (const entry of entries) {
+    for (const entry of entries2) {
       if (!entry) {
         continue;
       }
@@ -182143,10 +182700,10 @@ var require_tools2 = __commonJS((exports, module2) => {
       }
       return tools.normalizePath(connection, a) === tools.normalizePath(connection, b2);
     },
-    updateCapabilities(list2) {
+    updateCapabilities(list3) {
       let map3 = new Map;
-      if (list2 && Array.isArray(list2)) {
-        list2.forEach((val) => {
+      if (list3 && Array.isArray(list3)) {
+        list3.forEach((val) => {
           if (typeof val.value !== "string") {
             return false;
           }
@@ -182435,8 +182992,8 @@ var require_tools2 = __commonJS((exports, module2) => {
         }
         return obj.value;
       };
-      let processAddresses = function(list2) {
-        return [].concat(list2 || []).map((addr) => {
+      let processAddresses = function(list3) {
+        return [].concat(list3 || []).map((addr) => {
           let address = (getStrValue(addr[2]) || "") + "@" + (getStrValue(addr[3]) || "");
           if (address === "@") {
             address = "";
@@ -182705,17 +183262,17 @@ var require_tools2 = __commonJS((exports, module2) => {
         if (first === second) {
           return first;
         }
-        let list2 = [];
+        let list3 = [];
         if (first < second) {
           for (let i2 = first;i2 <= second; i2++) {
-            list2.push(i2);
+            list3.push(i2);
           }
         } else {
           for (let i2 = first;i2 >= second; i2--) {
-            list2.push(i2);
+            list3.push(i2);
           }
         }
-        return list2;
+        return list3;
       });
     },
     getDecoder(charset) {
@@ -182725,22 +183282,22 @@ var require_tools2 = __commonJS((exports, module2) => {
       }
       return iconv.decodeStream(charset);
     },
-    packMessageRange(list2) {
-      if (!Array.isArray(list2)) {
-        list2 = [].concat(list2 || []);
+    packMessageRange(list3) {
+      if (!Array.isArray(list3)) {
+        list3 = [].concat(list3 || []);
       }
-      if (!list2.length) {
+      if (!list3.length) {
         return "";
       }
-      list2.sort((a, b2) => a - b2);
-      let last = list2[list2.length - 1];
+      list3.sort((a, b2) => a - b2);
+      let last = list3[list3.length - 1];
       let result = [[last]];
-      for (let i2 = list2.length - 2;i2 >= 0; i2--) {
-        if (list2[i2] === list2[i2 + 1] - 1) {
-          result[0].unshift(list2[i2]);
+      for (let i2 = list3.length - 2;i2 >= 0; i2--) {
+        if (list3[i2] === list3[i2 + 1] - 1) {
+          result[0].unshift(list3[i2]);
           continue;
         }
-        result.unshift([list2[i2]]);
+        result.unshift([list3[i2]]);
       }
       result = result.map((item) => {
         if (item.length === 1) {
@@ -183296,7 +183853,7 @@ var require_list = __commonJS((exports, module2) => {
     let listCommand = connection.capabilities.has("XLIST") && !connection.capabilities.has("SPECIAL-USE") ? "XLIST" : "LIST";
     let response;
     try {
-      let entries = [];
+      let entries2 = [];
       let statusMap = new Map;
       let returnArgs = [];
       let statusQueryAttributes = [];
@@ -183382,7 +183939,7 @@ var require_list = __commonJS((exports, module2) => {
               if (specialUseFlag) {
                 addSpecialUseMatch(entry, specialUseFlag, flagSource);
               }
-              entries.push(entry);
+              entries2.push(entry);
             },
             STATUS: async (untagged) => {
               let statusPath = normalizePath(connection, decodePath(connection, untagged.attributes[0] && untagged.attributes[0].value || ""));
@@ -183427,13 +183984,13 @@ var require_list = __commonJS((exports, module2) => {
       let normalizedReference = normalizePath(connection, reference || "");
       await runList(normalizedReference, normalizePath(connection, mailbox || "", true));
       if (options.listOnly) {
-        return entries;
+        return entries2;
       }
       if (normalizedReference && !specialUseMatches["\\Inbox"]) {
         await runList("", "INBOX");
       }
       if (options.statusQuery) {
-        for (let entry of entries) {
+        for (let entry of entries2) {
           if (!entry.flags.has("\\Noselect") && !entry.flags.has("\\NonExistent")) {
             if (statusMap.has(entry.path)) {
               entry.status = statusMap.get(entry.path);
@@ -183469,7 +184026,7 @@ var require_list = __commonJS((exports, module2) => {
             entry.parentPath = entry.delimiter && entry.path ? entry.path.substr(0, entry.path.lastIndexOf(entry.delimiter)) : "";
             entry.parent = entry.delimiter ? entry.path.split(entry.delimiter) : [entry.path];
             entry.name = entry.parent.pop();
-            let existing = entries.find((existing2) => existing2.path === entry.path);
+            let existing = entries2.find((existing2) => existing2.path === entry.path);
             if (existing) {
               existing.subscribed = true;
               entry.flags.forEach((flag) => existing.flags.add(flag));
@@ -183492,11 +184049,11 @@ var require_list = __commonJS((exports, module2) => {
           sortedEntries[0].entry.specialUseSource = sortedEntries[0].source;
         }
       }
-      let inboxEntry = entries.find((entry) => entry.specialUse === "\\Inbox");
+      let inboxEntry = entries2.find((entry) => entry.specialUse === "\\Inbox");
       if (inboxEntry && !inboxEntry.subscribed) {
         inboxEntry.subscribed = true;
       }
-      return entries.sort((a, b2) => {
+      return entries2.sort((a, b2) => {
         if (a.specialUse && !b2.specialUse) {
           return -1;
         }
@@ -184346,10 +184903,10 @@ var require_search_compiler = __commonJS((exports, module2) => {
                 }
                 break;
               }
-              let genOrTree = (list2) => {
+              let genOrTree = (list3) => {
                 let group = false;
                 let groups = [];
-                list2.forEach((entry, i2) => {
+                list3.forEach((entry, i2) => {
                   if (i2 % 2 === 0) {
                     group = [entry];
                   } else {
@@ -184573,9 +185130,9 @@ var require_append = __commonJS((exports, module2) => {
         }
       }
       if (map3.seq && !map3.uid) {
-        let list2 = await connection.search({ seq: map3.seq }, { uid: true });
-        if (list2 && list2.length) {
-          map3.uid = list2[0];
+        let list3 = await connection.search({ seq: map3.seq }, { uid: true });
+        if (list3 && list3.length) {
+          map3.uid = list3[0];
         }
       }
       return map3;
@@ -184628,8 +185185,8 @@ var require_status2 = __commonJS((exports, module2) => {
         untagged: {
           STATUS: async (untagged) => {
             let updateCurrent = connection.state === connection.states.SELECTED && path6 === connection.mailbox.path;
-            let list2 = untagged.attributes && Array.isArray(untagged.attributes[1]) ? untagged.attributes[1] : false;
-            if (!list2) {
+            let list3 = untagged.attributes && Array.isArray(untagged.attributes[1]) ? untagged.attributes[1] : false;
+            if (!list3) {
               return;
             }
             const STATUS_FIELD_MAP = {
@@ -184663,7 +185220,7 @@ var require_status2 = __commonJS((exports, module2) => {
               }
             };
             let key;
-            list2.forEach((entry, i2) => {
+            list3.forEach((entry, i2) => {
               if (i2 % 2 === 0) {
                 key = entry && typeof entry.value === "string" ? entry.value : false;
                 return;
@@ -186612,7 +187169,7 @@ var init_imap_flow = __esm(() => {
         return false;
       }
       let finished = false;
-      let push = false;
+      let push2 = false;
       let rowQueue = [];
       let getNext = () => new Promise((resolve4, reject) => {
         let check2 = () => {
@@ -186627,8 +187184,8 @@ var init_imap_flow = __esm(() => {
           if (finished) {
             return resolve4(null);
           }
-          push = () => {
-            push = false;
+          push2 = () => {
+            push2 = false;
             check2();
           };
         };
@@ -186645,19 +187202,19 @@ var init_imap_flow = __esm(() => {
               next
             }
           });
-          if (typeof push === "function") {
-            push();
+          if (typeof push2 === "function") {
+            push2();
           }
         }
       }).then(() => {
         finished = true;
-        if (typeof push === "function") {
-          push();
+        if (typeof push2 === "function") {
+          push2();
         }
       }).catch((err) => {
         rowQueue.push({ err });
-        if (typeof push === "function") {
-          push();
+        if (typeof push2 === "function") {
+          push2();
         }
       });
       let res;
@@ -188182,6 +188739,9 @@ function createAllTools(ctx4) {
     spawn_pentest_swarm: spawnPentestSwarm(ctx4),
     spawn_coding_agent: spawnCodingAgent(ctx4),
     provide_comparison_results: provideComparisonResults(ctx4),
+    add_memory: addMemory2(ctx4),
+    list_memories: listMemories2(ctx4),
+    get_memory: getMemory2(ctx4),
     ...createEmailToolset(ctx4),
     email_list_inboxes: emailListInboxes(ctx4),
     email_list_messages: emailListMessages(ctx4),
@@ -188217,6 +188777,9 @@ var init_tools = __esm(() => {
   init_spawnPentestSwarm();
   init_spawnCodingAgent();
   init_provideComparisonResults();
+  init_addMemory();
+  init_listMemories();
+  init_getMemory();
   init_email();
   init_browserTools();
   init_executeCommand();
@@ -188243,6 +188806,9 @@ var init_tools = __esm(() => {
   init_spawnPentestSwarm();
   init_spawnCodingAgent();
   init_provideComparisonResults();
+  init_addMemory();
+  init_listMemories();
+  init_getMemory();
   init_email();
   init_listInboxes();
   init_listMessages();
@@ -188276,6 +188842,9 @@ var init_tools = __esm(() => {
     "spawn_pentest_swarm",
     "spawn_coding_agent",
     "provide_comparison_results",
+    "add_memory",
+    "list_memories",
+    "get_memory",
     "email_list_inboxes",
     "email_list_messages",
     "email_get_message",
@@ -191049,13 +191618,13 @@ https://github.com/highlightjs/highlight.js/issues/2277`);
         return origin.returnEnd ? 0 : lexeme.length;
       }
       function processContinuations() {
-        const list2 = [];
+        const list3 = [];
         for (let current = top;current !== language; current = current.parent) {
           if (current.scope) {
-            list2.unshift(current.scope);
+            list3.unshift(current.scope);
           }
         }
-        list2.forEach((item) => emitter.openNode(item));
+        list3.forEach((item) => emitter.openNode(item));
       }
       let lastMatch = {};
       function processLexeme(textBeforeMatch, match) {
@@ -196627,7 +197196,7 @@ var require_coffeescript = __commonJS((exports, module2) => {
       "function",
       "static"
     ];
-    const excluding = (list2) => (kw) => !list2.includes(kw);
+    const excluding = (list3) => (kw) => !list3.includes(kw);
     const KEYWORDS$1 = {
       keyword: KEYWORDS.concat(COFFEE_KEYWORDS).filter(excluding(NOT_VALID_KEYWORDS)),
       literal: LITERALS.concat(COFFEE_LITERALS),
@@ -210081,8 +210650,8 @@ var require_javascript = __commonJS((exports, module2) => {
       match: /\b[A-Z][A-Z_0-9]+\b/,
       className: "variable.constant"
     };
-    function noneOf(list2) {
-      return regex.concat("(?!", list2.join("|"), ")");
+    function noneOf(list3) {
+      return regex.concat("(?!", list3.join("|"), ")");
     }
     const FUNCTION_CALL = {
       match: regex.concat(/\b/, noneOf([
@@ -232685,8 +233254,8 @@ var require_sql = __commonJS((exports, module2) => {
       relevance: 0,
       keywords: { built_in: FUNCTIONS }
     };
-    function kws_to_regex(list2) {
-      return regex.concat(/\b/, regex.either(...list2.map((kw) => {
+    function kws_to_regex(list3) {
+      return regex.concat(/\b/, regex.either(...list3.map((kw) => {
         return kw.replace(/\s+/, "\\s+");
       })), /\b/);
     }
@@ -232695,13 +233264,13 @@ var require_sql = __commonJS((exports, module2) => {
       match: kws_to_regex(COMBOS),
       relevance: 0
     };
-    function reduceRelevancy(list2, {
+    function reduceRelevancy(list3, {
       exceptions,
       when
     } = {}) {
       const qualifyFn = when;
       exceptions = exceptions || [];
-      return list2.map((item) => {
+      return list3.map((item) => {
         if (item.match(/\|\d+$/) || exceptions.includes(item)) {
           return item;
         } else if (qualifyFn(item)) {
@@ -236386,8 +236955,8 @@ var require_typescript = __commonJS((exports, module2) => {
       match: /\b[A-Z][A-Z_0-9]+\b/,
       className: "variable.constant"
     };
-    function noneOf(list2) {
-      return regex.concat("(?!", list2.join("|"), ")");
+    function noneOf(list3) {
+      return regex.concat("(?!", list3.join("|"), ")");
     }
     const FUNCTION_CALL = {
       match: regex.concat(/\b/, noneOf([
@@ -266766,239 +267335,7 @@ function create(prefix, descending2, timestamp) {
 
 // src/core/session/index.ts
 init_installation();
-
-// src/core/storage/index.ts
-import os3 from "os";
-import path3 from "path";
-import fs3 from "fs/promises";
-init_zod();
-
-// src/util/errors.ts
-init_zod();
-
-class NamedError extends Error {
-  static create(name, data) {
-    const schema2 = zod_default.object({
-      name: zod_default.literal(name),
-      data
-    });
-    const result = class extends NamedError {
-      data;
-      static Schema = schema2;
-      name = name;
-      constructor(data2, options) {
-        super(name, options);
-        this.data = data2;
-        this.name = name;
-      }
-      static isInstance(input) {
-        return typeof input === "object" && input !== null && "name" in input && input.name === name;
-      }
-      schema() {
-        return schema2;
-      }
-      toObject() {
-        return {
-          name,
-          data: this.data
-        };
-      }
-    };
-    Object.defineProperty(result, "name", { value: name });
-    return result;
-  }
-  static Unknown = NamedError.create("UnknownError", zod_default.object({
-    message: zod_default.string()
-  }));
-}
-
-// src/util/lock.ts
-var locks = new Map;
-function getLock(key) {
-  if (!locks.has(key)) {
-    locks.set(key, {
-      readers: 0,
-      writer: false,
-      waitingReaders: [],
-      waitingWriters: []
-    });
-  }
-  return locks.get(key);
-}
-function processQueue(key) {
-  const lock = locks.get(key);
-  if (!lock || lock.writer || lock.readers > 0)
-    return;
-  if (lock.waitingWriters.length > 0) {
-    const nextWriter = lock.waitingWriters.shift();
-    nextWriter();
-    return;
-  }
-  while (lock.waitingReaders.length > 0) {
-    const nextReader = lock.waitingReaders.shift();
-    nextReader();
-  }
-  if (lock.readers === 0 && !lock.writer && lock.waitingReaders.length === 0 && lock.waitingWriters.length === 0) {
-    locks.delete(key);
-  }
-}
-async function read(key) {
-  const lock = getLock(key);
-  return new Promise((resolve3) => {
-    if (!lock.writer && lock.waitingWriters.length === 0) {
-      lock.readers++;
-      resolve3({
-        [Symbol.dispose]: () => {
-          lock.readers--;
-          processQueue(key);
-        }
-      });
-    } else {
-      lock.waitingReaders.push(() => {
-        lock.readers++;
-        resolve3({
-          [Symbol.dispose]: () => {
-            lock.readers--;
-            processQueue(key);
-          }
-        });
-      });
-    }
-  });
-}
-async function write(key) {
-  const lock = getLock(key);
-  return new Promise((resolve3) => {
-    if (!lock.writer && lock.readers === 0) {
-      lock.writer = true;
-      resolve3({
-        [Symbol.dispose]: () => {
-          lock.writer = false;
-          processQueue(key);
-        }
-      });
-    } else {
-      lock.waitingWriters.push(() => {
-        lock.writer = true;
-        resolve3({
-          [Symbol.dispose]: () => {
-            lock.writer = false;
-            processQueue(key);
-          }
-        });
-      });
-    }
-  });
-}
-
-// src/core/storage/index.ts
-var NotFoundError = NamedError.create("NotFoundError", zod_default.object({
-  message: zod_default.string()
-}));
-async function remove(key) {
-  const dir = path3.join(os3.homedir(), ".pensar");
-  const target = path3.join(dir, ...key) + ".json";
-  return withErrorHandling(async () => {
-    await fs3.unlink(target).catch(() => {});
-  });
-}
-async function write2(key, content, ext) {
-  const dir = path3.join(os3.homedir(), ".pensar");
-  const target = path3.join(dir, ...key) + (ext ? ext : ".json");
-  return withErrorHandling(async () => {
-    let __stack = [];
-    try {
-      const _2 = __using(__stack, await write(target), 0);
-      await fs3.mkdir(path3.dirname(target), { recursive: true });
-      await fs3.writeFile(target, JSON.stringify(content, null, 2), "utf-8");
-    } catch (_catch) {
-      var _err = _catch, _hasErr = 1;
-    } finally {
-      __callDispose(__stack, _err, _hasErr);
-    }
-  });
-}
-async function createDir(key) {
-  const dir = path3.join(os3.homedir(), ".pensar");
-  const target = path3.join(dir, ...key);
-  return withErrorHandling(async () => {
-    let __stack = [];
-    try {
-      const _2 = __using(__stack, await write(target), 0);
-      await fs3.mkdir(target, { recursive: true });
-    } catch (_catch) {
-      var _err = _catch, _hasErr = 1;
-    } finally {
-      __callDispose(__stack, _err, _hasErr);
-    }
-  });
-}
-async function writeRaw(key, content) {
-  const dir = path3.join(os3.homedir(), ".pensar");
-  const target = path3.join(dir, ...key);
-  return withErrorHandling(async () => {
-    let __stack = [];
-    try {
-      const _2 = __using(__stack, await write(target), 0);
-      const parentDir = path3.dirname(target);
-      await fs3.mkdir(parentDir, { recursive: true });
-      await fs3.writeFile(target, content, "utf-8");
-    } catch (_catch) {
-      var _err = _catch, _hasErr = 1;
-    } finally {
-      __callDispose(__stack, _err, _hasErr);
-    }
-  });
-}
-async function read2(key, ext) {
-  const dir = path3.join(os3.homedir(), ".pensar");
-  const target = path3.join(dir, ...key) + (ext ? ext : ".json");
-  return withErrorHandling(async () => {
-    let __stack = [];
-    try {
-      const _2 = __using(__stack, await read(target), 0);
-      const text = await fs3.readFile(target, "utf-8");
-      const result = ext ? text : JSON.parse(text);
-      return result;
-    } catch (_catch) {
-      var _err = _catch, _hasErr = 1;
-    } finally {
-      __callDispose(__stack, _err, _hasErr);
-    }
-  });
-}
-async function update2(key, fn, ext) {
-  const dir = path3.join(os3.homedir(), ".pensar");
-  const target = path3.join(dir, ...key) + (ext ? ext : ".json");
-  return withErrorHandling(async () => {
-    let __stack = [];
-    try {
-      const _2 = __using(__stack, await write(target), 0);
-      const text = await fs3.readFile(target, "utf-8");
-      const content = ext ? text : JSON.parse(text);
-      fn(content);
-      await fs3.writeFile(target, JSON.stringify(content, null, 2), "utf-8");
-      return content;
-    } catch (_catch) {
-      var _err = _catch, _hasErr = 1;
-    } finally {
-      __callDispose(__stack, _err, _hasErr);
-    }
-  });
-}
-async function withErrorHandling(body) {
-  return body().catch((e) => {
-    if (!(e instanceof Error))
-      throw e;
-    const errnoExcpetion = e;
-    if (errnoExcpetion.code === "ENOENT") {
-      throw new NotFoundError({
-        message: `Resource not found: ${errnoExcpetion.path}`
-      });
-    }
-    throw e;
-  });
-}
+init_storage();
 
 // src/core/services/rateLimiter/index.ts
 function sleep(ms) {
@@ -267293,7 +267630,7 @@ async function update3(id, editor) {
   console.info("updated session", result);
   return result;
 }
-async function* list() {
+async function* list2() {
   const sessionsDir = getSessionsDir();
   let entries;
   try {
@@ -267428,7 +267765,7 @@ var sessions = {
   create: create2,
   get: get2,
   update: update3,
-  list,
+  list: list2,
   remove: remove2,
   updateMessage,
   removeMessage,
@@ -267557,9 +267894,9 @@ function AgentProvider({ children }) {
       }
       const byProvider = new Map;
       for (const m2 of available) {
-        const list2 = byProvider.get(m2.provider) || [];
-        list2.push(m2);
-        byProvider.set(m2.provider, list2);
+        const list3 = byProvider.get(m2.provider) || [];
+        list3.push(m2);
+        byProvider.set(m2.provider, list3);
       }
       let selectedModel = null;
       for (const provider of PROVIDER_PREFERENCE) {
@@ -269044,10 +269381,10 @@ function useDialog() {
 }
 
 // src/tui/utils/scroll.ts
-function scrollToIndex(scrollBox, index, list2, getId) {
-  if (!scrollBox || list2.length === 0)
+function scrollToIndex(scrollBox, index, list3, getId) {
+  if (!scrollBox || list3.length === 0)
     return;
-  const item = list2[index];
+  const item = list3[index];
   if (!item)
     return;
   const target = findChildById(scrollBox, getId(item));
@@ -269057,7 +269394,7 @@ function scrollToIndex(scrollBox, index, list2, getId) {
     scrollBox.scrollTo(0);
     return;
   }
-  if (index === list2.length - 1) {
+  if (index === list3.length - 1) {
     scrollBox.scrollTo(Infinity);
     return;
   }
@@ -269903,6 +270240,7 @@ var PromptInput = import_react30.forwardRef(function PromptInput2({
   maxSuggestions = 10,
   enableCommands = false,
   onCommandExecute,
+  commandHistory = [],
   showPromptIndicator = false
 }, ref) {
   const { colors: colors2 } = useTheme();
@@ -269910,6 +270248,11 @@ var PromptInput = import_react30.forwardRef(function PromptInput2({
   const { registerPromptRef } = useFocus();
   const textareaRef = import_react30.useRef(null);
   const [selectedSuggestionIndex, setSelectedSuggestionIndex] = import_react30.useState(-1);
+  const [historyIndex, setHistoryIndex] = import_react30.useState(-1);
+  const savedInputRef = import_react30.useRef("");
+  const historyRef = import_react30.useRef(commandHistory);
+  historyRef.current = commandHistory;
+  const isNavigatingHistoryRef = import_react30.useRef(false);
   const selectedIndexRef = import_react30.useRef(selectedSuggestionIndex);
   const suggestionsRef = import_react30.useRef([]);
   const onCommandExecuteRef = import_react30.useRef(onCommandExecute);
@@ -269957,28 +270300,76 @@ var PromptInput = import_react30.forwardRef(function PromptInput2({
     return () => registerPromptRef(null);
   }, [registerPromptRef]);
   useKeyboard((key) => {
-    if (!focused || suggestions.length === 0)
+    if (!focused)
       return;
-    if (key.name === "up") {
-      setSelectedSuggestionIndex((prev) => prev <= 0 ? suggestions.length - 1 : prev - 1);
+    if (suggestions.length > 0) {
+      if (key.name === "up") {
+        setSelectedSuggestionIndex((prev) => prev <= 0 ? suggestions.length - 1 : prev - 1);
+        return;
+      }
+      if (key.name === "down") {
+        setSelectedSuggestionIndex((prev) => prev >= suggestions.length - 1 ? 0 : prev + 1);
+        return;
+      }
+      if (key.name === "tab") {
+        key.preventDefault?.();
+        const currentSelectedIndex = selectedIndexRef.current;
+        if (currentSelectedIndex >= 0 && currentSelectedIndex < suggestions.length) {
+          const selected = suggestions[currentSelectedIndex];
+          if (selected) {
+            textareaRef.current?.setText(selected.value);
+            setInputValue(selected.value);
+            setSelectedSuggestionIndex(-1);
+            textareaRef.current?.gotoLineEnd();
+          }
+        }
+        return;
+      }
       return;
     }
-    if (key.name === "down") {
-      setSelectedSuggestionIndex((prev) => prev >= suggestions.length - 1 ? 0 : prev + 1);
+    const history = historyRef.current;
+    if (history.length === 0)
+      return;
+    if (key.name === "up") {
+      setHistoryIndex((prev) => {
+        if (prev === -1) {
+          savedInputRef.current = textareaRef.current?.plainText ?? "";
+        }
+        const next = Math.min(prev + 1, history.length - 1);
+        const entry = history[history.length - 1 - next];
+        if (entry !== undefined) {
+          isNavigatingHistoryRef.current = true;
+          textareaRef.current?.setText(entry);
+          setInputValue(entry);
+          isNavigatingHistoryRef.current = false;
+          setTimeout(() => textareaRef.current?.gotoLineEnd(), 0);
+        }
+        return next;
+      });
       return;
     }
-    if (key.name === "tab") {
-      key.preventDefault?.();
-      const currentSelectedIndex = selectedIndexRef.current;
-      if (currentSelectedIndex >= 0 && currentSelectedIndex < suggestions.length) {
-        const selected = suggestions[currentSelectedIndex];
-        if (selected) {
-          textareaRef.current?.setText(selected.value);
-          setInputValue(selected.value);
-          setSelectedSuggestionIndex(-1);
-          textareaRef.current?.gotoLineEnd();
+    if (key.name === "down") {
+      setHistoryIndex((prev) => {
+        if (prev <= 0) {
+          const saved = savedInputRef.current;
+          isNavigatingHistoryRef.current = true;
+          textareaRef.current?.setText(saved);
+          setInputValue(saved);
+          isNavigatingHistoryRef.current = false;
+          setTimeout(() => textareaRef.current?.gotoLineEnd(), 0);
+          return -1;
         }
-      }
+        const next = prev - 1;
+        const entry = history[history.length - 1 - next];
+        if (entry !== undefined) {
+          isNavigatingHistoryRef.current = true;
+          textareaRef.current?.setText(entry);
+          setInputValue(entry);
+          isNavigatingHistoryRef.current = false;
+          setTimeout(() => textareaRef.current?.gotoLineEnd(), 0);
+        }
+        return next;
+      });
       return;
     }
   });
@@ -270004,13 +270395,18 @@ var PromptInput = import_react30.forwardRef(function PromptInput2({
       setInputValue("");
       textareaRef.current?.setText("");
       setSelectedSuggestionIndex(-1);
+      setHistoryIndex(-1);
       return;
     }
+    setHistoryIndex(-1);
     onSubmitRef.current?.(valueToSubmit);
   };
   const handleContentChange = () => {
     const text = textareaRef.current?.plainText ?? "";
     setInputValue(text);
+    if (historyIndex !== -1 && !isNavigatingHistoryRef.current) {
+      setHistoryIndex(-1);
+    }
   };
   return /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
     flexDirection: "column",
@@ -270092,6 +270488,45 @@ var PromptInput = import_react30.forwardRef(function PromptInput2({
   }, undefined, true, undefined, this);
 });
 
+// src/core/history.ts
+init_storage();
+var STORAGE_KEY = ["command-history"];
+var MAX_ENTRIES = 500;
+var entries = null;
+var loadPromise = null;
+async function ensureLoaded() {
+  if (entries !== null)
+    return entries;
+  if (!loadPromise) {
+    loadPromise = (async () => {
+      try {
+        const data = await read2(STORAGE_KEY);
+        entries = Array.isArray(data) ? data : [];
+      } catch {
+        entries = [];
+      }
+    })();
+  }
+  await loadPromise;
+  return entries;
+}
+async function load() {
+  return ensureLoaded();
+}
+async function push(entry) {
+  const history = await ensureLoaded();
+  if (history[history.length - 1] === entry)
+    return;
+  history.push(entry);
+  if (history.length > MAX_ENTRIES) {
+    history.splice(0, history.length - MAX_ENTRIES);
+  }
+  write2(STORAGE_KEY, history).catch(() => {});
+}
+function getEntries() {
+  return entries ?? [];
+}
+
 // src/tui/components/chat/home-view.tsx
 function HomeView({ onNavigate, onStartSession }) {
   const { colors: colors2 } = useTheme();
@@ -270102,6 +270537,10 @@ function HomeView({ onNavigate, onStartSession }) {
   const { setInputValue } = useInput();
   const { promptRef } = useFocus();
   const [hintMessage, setHintMessage] = import_react32.useState(null);
+  const [commandHistory, setCommandHistory] = import_react32.useState(getEntries);
+  import_react32.useEffect(() => {
+    load().then(setCommandHistory);
+  }, []);
   const launchOperator = import_react32.useCallback((message, options) => {
     route.navigate({
       type: "operator",
@@ -270109,11 +270548,15 @@ function HomeView({ onNavigate, onStartSession }) {
       initialConfig: { requireApproval: options?.requireApproval ?? true }
     });
   }, [route]);
+  const pushHistory = import_react32.useCallback((entry) => {
+    push(entry).then(() => setCommandHistory([...getEntries()]));
+  }, []);
   const handleSubmit = import_react32.useCallback((value) => {
     if (!value.trim())
       return;
+    pushHistory(value.trim());
     launchOperator(value.trim());
-  }, [launchOperator]);
+  }, [launchOperator, pushHistory]);
   import_react32.useEffect(() => {
     if (!hintMessage)
       return;
@@ -270121,7 +270564,9 @@ function HomeView({ onNavigate, onStartSession }) {
     return () => clearTimeout(timer);
   }, [hintMessage]);
   const handleCommandExecute = import_react32.useCallback(async (command) => {
-    const parts = command.trim().replace(/^\/+/, "").split(/\s+/);
+    const trimmed = command.trim();
+    pushHistory(trimmed);
+    const parts = trimmed.replace(/^\/+/, "").split(/\s+/);
     const slug = parts[0]?.toLowerCase() ?? "";
     const args = parts.slice(1);
     const autopilot = args.includes("--autopilot");
@@ -270131,7 +270576,7 @@ function HomeView({ onNavigate, onStartSession }) {
       return;
     }
     await executeCommand(command);
-  }, [resolveSkillContent, launchOperator, executeCommand]);
+  }, [resolveSkillContent, launchOperator, executeCommand, pushHistory]);
   const skillItems = skills.slice(0, 5).map((s) => ({
     cmd: `/${slugify(s.name)}`,
     desc: s.description || "skill"
@@ -270272,6 +270717,7 @@ function HomeView({ onNavigate, onStartSession }) {
             autocompleteOptions,
             enableCommands: true,
             onCommandExecute: handleCommandExecute,
+            commandHistory,
             showPromptIndicator: true
           }, undefined, false, undefined, this),
           hintMessage && /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("box", {
@@ -275044,7 +275490,6 @@ function KeybindingProvider({
   deps
 }) {
   const { promptRef, refocusPrompt } = useFocus();
-  const { isInputEmpty } = useInput();
   const { setExternalDialogOpen } = useDialog();
   const registry = createKeybindings({
     ...deps,
@@ -275060,7 +275505,9 @@ function KeybindingProvider({
           if (binding.combo.toLowerCase().startsWith("shift") || binding.combo.toLowerCase() === "?") {
             const textareaRef = promptRef.current?.getTextareaRef();
             const isInputFocused = textareaRef && !textareaRef.isDestroyed && textareaRef.focused;
-            if (!isInputFocused || !isInputEmpty) {
+            const actualValue = promptRef.current?.getValue() ?? "";
+            const isPromptEmpty = actualValue.trim().length === 0;
+            if (!isInputFocused || !isPromptEmpty) {
               continue;
             }
           }
@@ -276620,7 +277067,11 @@ var TOOL_SUMMARY_MAP = {
     return `${method} ${url2}`;
   },
   crawl: (args) => `crawl ${args.url || args.target || ""}`,
-  execute_command: (args) => `$ ${args.command || ""}`,
+  execute_command: (args) => {
+    const cmd = String(args.command || "").split(`
+`)[0];
+    return cmd.length > 80 ? `$ ${cmd.slice(0, 80)}…` : `$ ${cmd}`;
+  },
   read_file: (args) => `read ${args.path || ""}`,
   Read: (args) => `read ${args.path || args.file_path || ""}`,
   write_file: (args) => `write ${args.path || ""}`,
@@ -276656,6 +277107,7 @@ var TOOL_SUMMARY_MAP = {
     const targets = args.targets;
     return `pentest swarm ×${targets?.length ?? "?"}`;
   },
+  delegate_to_auth_subagent: (args) => `auth ${args.target || ""} — ${args.reason || ""}`,
   scratchpad: () => "note"
 };
 function getToolSummary(toolName, args) {
@@ -277367,7 +277819,8 @@ var TOOLS_WITH_LOG_WINDOW = new Set([
   "execute_command",
   "run_attack_surface",
   "spawn_coding_agent",
-  "spawn_pentest_swarm"
+  "spawn_pentest_swarm",
+  "delegate_to_auth_subagent"
 ]);
 var ToolRenderer = import_react68.memo(function ToolRenderer2({
   message,
@@ -277997,7 +278450,7 @@ function Pentest({ sessionId }) {
   const gridAvailableWidth = showOrchestratorPanel ? Math.floor((termWidth - 4) / 2) - 2 : termWidth - ORCHESTRATOR_PANEL_WIDTH - GRID_OUTER_PADDING;
   const gridColumns = Math.max(1, Math.floor((gridAvailableWidth + GRID_GAP) / (CARD_MIN_WIDTH + GRID_GAP)));
   import_react75.useEffect(() => {
-    async function load() {
+    async function load2() {
       try {
         const s2 = await sessions.get(sessionId);
         if (!s2) {
@@ -278041,7 +278494,7 @@ function Pentest({ sessionId }) {
         setPhase("error");
       }
     }
-    load();
+    load2();
   }, [sessionId]);
   import_react75.useEffect(() => {
     if (!session)
@@ -279640,7 +280093,8 @@ function NormalInputAreaInner({
   enableAutocomplete = false,
   autocompleteOptions = [],
   enableCommands = false,
-  onCommandExecute
+  onCommandExecute,
+  commandHistory = []
 }) {
   const { colors: colors2 } = useTheme();
   const { inputValue, setInputValue } = useInput();
@@ -279698,7 +280152,8 @@ function NormalInputAreaInner({
             enableAutocomplete,
             autocompleteOptions,
             enableCommands,
-            onCommandExecute
+            onCommandExecute,
+            commandHistory
           }, undefined, false, undefined, this)
         ]
       }, undefined, true, undefined, this),
@@ -279784,6 +280239,7 @@ function InputArea(props) {
     autocompleteOptions,
     enableCommands,
     onCommandExecute,
+    commandHistory,
     ...normalProps
   } = props;
   if (pendingApproval) {
@@ -279806,6 +280262,7 @@ function InputArea(props) {
       autocompleteOptions,
       enableCommands,
       onCommandExecute,
+      commandHistory,
       ...normalProps
     }, undefined, false, undefined, this)
   }, undefined, false, undefined, this);
@@ -279991,6 +280448,10 @@ function OperatorDashboard({
   const textRef = import_react80.useRef("");
   const conversationRef = import_react80.useRef([]);
   const [inputValue, setInputValue] = import_react80.useState("");
+  const [commandHistory, setCommandHistory] = import_react80.useState(getEntries);
+  import_react80.useEffect(() => {
+    load().then(setCommandHistory);
+  }, []);
   const [operatorState, setOperatorState] = import_react80.useState(() => createInitialOperatorState("manual", true));
   const approvalGateRef = import_react80.useRef(new ApprovalGate({ requireApproval: true }));
   const [pendingApprovals, setPendingApprovals] = import_react80.useState([]);
@@ -280365,8 +280826,10 @@ function OperatorDashboard({
     }
     if (status === "running")
       return;
+    const trimmed = value.trim();
+    push(trimmed).then(() => setCommandHistory([...getEntries()]));
     setInputValue("");
-    runAgent(value.trim());
+    runAgent(trimmed);
   }, [status, runAgent]);
   const initialMessageSentRef = import_react80.useRef(false);
   const runAgentRef = import_react80.useRef(runAgent);
@@ -280686,7 +281149,8 @@ function OperatorDashboard({
         enableAutocomplete: true,
         autocompleteOptions,
         enableCommands: true,
-        onCommandExecute: handleCommandExecute
+        onCommandExecute: handleCommandExecute,
+        commandHistory
       }, undefined, false, undefined, this)
     ]
   }, undefined, true, undefined, this);