pentesting 0.101.5 → 0.101.6

package/ARCHITECTURE.md

@@ -235,7 +235,7 @@ tool reachability. Delegated subagent contracts stay intact. Defined in
 | --- | --- |
 | `general-agent` | Broad autonomous local orchestration for mixed tasks |
 | `local-builder` | Hands-on implementation with fresh evidence retrieval |
-| `ctf-competition` | Competition/lab workflow; the profile references `ctf-competition` and `pentesting-methodology`, while built-in `write-report` remains explicitly selectable |
+| `ctf-competition` | Competition/lab workflow; the profile references `ctf-competition` and `pentesting-methodology`, while built-in `write-report` remains explicitly selectable |
 | `enterprise-review` | Strict, review-heavy profile with read-only dynamic scope |
 
 ## Engagement Metadata
@@ -383,8 +383,8 @@ trusted verifier with explicit provenance is the only mission-promotion path;
 
 ## Diagnostic UI boundary
 
-The default TUI renders the response stream and deterministic input queue. It
-does not maintain a second workflow engine. `/status` consumes one immutable
+The default TUI renders the response stream and deterministic input queue. It
+does not maintain a second workflow engine. `/status` consumes one immutable
 `RunStatusProjection`; `/workflow report` is the explicit offline export. The
 former bare `/workflow` alias has been removed. For an active run the projection
 adds exactly one optional canonical Lead-ledger read and immediately reduces it
@@ -396,39 +396,63 @@ usage without an evidence read. Recorded `TurnExit` and typed `MissionState` are
 shown separately so model Stop or run completion cannot appear as verified
 mission completion. The live status row deliberately remains limited to
 actionable progress/wait state: there is no frontier parsing, background refresh,
-write, dispatch shortcut, or hidden chrome state.
-
-Completed type-ahead inputs carry an explicit active-turn behavior. Safe
-inspection commands (`/info`, `/usage`, `/context`, `/memory`, `/status`,
-`/help`, `/skill`, and `/tools`) are atomically extracted and
-rendered without cancelling the response stream. State-changing and modal
-commands, including `/log` and `/model`, remain in FIFO order until the next safe turn
-boundary. `/new`, `/retry`, `/exit`, and explicit `/replace` retain interrupt
-semantics and take priority over active-turn query extraction. The input buffer
-rebuilds replay events after extraction so queued messages and the current draft
-preserve their original order and cursor. Esc cancellation preserves submitted
-queued input and starts its FIFO replay after stream cleanup; Ctrl+C remains the
-explicit clear-buffer interrupt. A conversation reset consumes `/new` but retains
-its FIFO tail for the new conversation. Modal prompts isolate that pre-existing
-tail from widget input and expose it again only after modal ownership ends.
-Commands that eventually open a modal keep the outer interrupt listener during
-their asynchronous prefetch and persistence phases. Before the widget starts,
-the terminal session requests a reader pause and waits for its acknowledgement;
-the reader resumes after modal ownership ends. Type-ahead is therefore buffered
-FIFO instead of racing or leaking into a later model, agent, or configuration
-field. Service-layer approval, secret, selection, and follow-up prompts acquire
-the same lifetime-bound modal handoff through the prompt-entry hook, and
+write, dispatch shortcut, or hidden chrome state.
+
+Completed type-ahead inputs carry an explicit active-turn behavior. Safe
+inspection commands (`/info`, `/usage`, `/context`, `/memory`, `/status`,
+`/help`, `/skill`, and `/tools`) are atomically extracted and
+rendered without cancelling the response stream. State-changing and modal
+commands, including `/log` and `/model`, remain in FIFO order until the next safe turn
+boundary. `/new`, `/retry`, `/exit`, and explicit `/replace` retain interrupt
+semantics and take priority over active-turn query extraction. The input buffer
+rebuilds replay events after extraction so queued messages and the current draft
+preserve their original order and cursor. Esc cancellation preserves submitted
+queued input and starts its FIFO replay after stream cleanup; Ctrl+C remains the
+explicit clear-buffer interrupt. A conversation reset consumes `/new` but retains
+its FIFO tail for the new conversation. Modal prompts isolate that pre-existing
+tail from widget input and expose it again only after modal ownership ends.
+Commands that eventually open a modal keep the outer interrupt listener during
+their asynchronous prefetch and persistence phases. Before the widget starts,
+the terminal session requests a reader pause and waits for its acknowledgement;
+the reader resumes after modal ownership ends. Type-ahead is therefore buffered
+FIFO instead of racing or leaking into a later model, agent, or configuration
+field. Service-layer approval, secret, selection, and follow-up prompts acquire
+the same lifetime-bound modal handoff through the prompt-entry hook, and
 concurrent service prompts are serialized so two widgets never read stdin at
 once.
 
-Typing `/` opens the complete registered command catalog. Search includes
-canonical names and aliases; Up/Down changes the selection, and Enter inserts
-the selected template into the editor for partial matches and commands that
-require arguments. A later Enter submits that populated input; a fully typed
-exact command that needs no expansion submits normally. Palette descriptions
-expose `[now]`, `[queued]`, and `[interrupt]` so the queue behavior is visible
-before submission. The selected entry is rendered as the first hint row so it
-remains visible when the terminal can show only a constrained input viewport.
+`/resume` is the canonical saved-session selector; `/conversation` and
+`/conversations` remain compatibility aliases. The selector includes every
+conversation with persisted context, even when it has no title. Resuming a
+different conversation clears the process-local goal and forces auto mode off,
+so state from the previous session cannot drive the resumed one accidentally.
+`/new` applies the same process-local goal/auto reset at the fresh-session
+boundary while preserving the queued FIFO tail. Persisted titles are reduced to
+one bounded control-free selector row before that row is bound to its typed
+conversation ID. Local upserts stamp the activity time used by `/resume`,
+`--continue`, and `conversation resume <id>` ordering. The command remains
+FIFO-queued while a turn is active because its selector is a modal terminal
+owner.
+
+Normal `/exit` and empty-prompt Ctrl+D termination are serialized through the
+output actor. It rejects new writes, completes its current render batch, resets
+styles and terminal modes, restores the full scroll region, clears the tracked
+multiline footer, shows the cursor, disables raw mode, and drops the terminal
+surface before printing one plain saved-session message. The shutdown
+acknowledgement and actor join occur after that message, so no detached redraw
+can overwrite terminal cleanup. The generic `restore_terminal` function is a
+best-effort fallback for failures outside this coordinated path. An empty
+session reports that no resumable messages were created instead of promising a
+session that the repository intentionally excludes from the resume list.
+
+Typing `/` opens the complete registered command catalog. Search includes
+canonical names and aliases; Up/Down changes the selection, and Enter inserts
+the selected template into the editor for partial matches and commands that
+require arguments. A later Enter submits that populated input; a fully typed
+exact command that needs no expansion submits normally. Palette descriptions
+expose `[now]`, `[queued]`, and `[interrupt]` so the queue behavior is visible
+before submission. The selected entry is rendered as the first hint row so it
+remains visible when the terminal can show only a constrained input viewport.
 
 ## Distribution — single source, two surfaces
 
@@ -536,23 +560,23 @@ Inside an interactive session, these commands inspect and drive runtime state
 /memory        Show stored conversation memories for the current conversation
 /tools         List the currently available tools and schemas
 /agent         Switch the active agent
-/conversation  Browse conversations for the active workspace
+/resume        Resume a saved session for the active workspace
 /goal <task>   Set the active goal without enabling autonomous mode
 /auto          Toggle autonomous mode for the current goal (default: off; Esc stops it)
 /update        Download and apply the latest public release asset for supported native targets
 /help          Show all commands
-/exit          Quit
+/exit          Save the session, restore the terminal, and quit
 ```
 
-## Security Domain Skills
-
-Six built-in skills ship with the runtime: `create-skill`, `execute-plan`,
-`github-pr-description`, `ctf-competition`, `pentesting-methodology`, and
-`write-report`. For authorized security work, `ctf-competition` covers callback
-delivery agility, reliable payload/tool delivery, and interpreter-aware
-execution; `pentesting-methodology` maps assessments to standard frameworks;
-and `write-report` turns preserved evidence into reproducible CTF and
-penetration-test writeups.
+## Security Domain Skills
+
+Six built-in skills ship with the runtime: `create-skill`, `execute-plan`,
+`github-pr-description`, `ctf-competition`, `pentesting-methodology`, and
+`write-report`. For authorized security work, `ctf-competition` covers callback
+delivery agility, reliable payload/tool delivery, and interpreter-aware
+execution; `pentesting-methodology` maps assessments to standard frameworks;
+and `write-report` turns preserved evidence into reproducible CTF and
+penetration-test writeups.
 
 - **PTES** (Penetration Testing Execution Standard)
 - **MITRE ATT&CK** tactics and techniques
@@ -562,26 +586,26 @@ penetration-test writeups.
 
 ### Shell listener for authorized labs
 
-```bash
-pentesting shell-listener --bind 127.0.0.1 --port 4444 --extra-ports 8443,9001
-```
-
-Up to 32 unique primary/additional ports bind concurrently and share one monotonic
-session-id sequence; an unavailable port is skipped as long as at least one
-requested port binds. `shell-session --json health` reports the active bound
-endpoints so callback selection can be evidence-based. The remote-bind safety
-gate remains unchanged.
-
-Manages multiple accepted TCP sessions with per-session routing, buffered
-output, raw byte logging, full-duplex transcripts, command history, attach /
-detach events, replay, and evidence manifests. `probe` records the remote's
-current shell interpreter in `shell`, detected only from `/proc/$$/exe` and
-`$0`, so a BusyBox `sh` target is not confused with an installed Bash. This
-interpreter axis is separate from TTY/`pty_state`; it is stored in session state,
-the `shell-session --json` projection, session snapshots, and evidence manifests,
-and is restored after a listener restart. `pty-upgrade` sends one concrete
-helper only; `upgrade` runs a helper plus a probe and records `pty_state` as
-verified or failed. Explicit `technique=auto` adds a bounded listener-side state
+```bash
+pentesting shell-listener --bind 127.0.0.1 --port 4444 --extra-ports 8443,9001
+```
+
+Up to 32 unique primary/additional ports bind concurrently and share one monotonic
+session-id sequence; an unavailable port is skipped as long as at least one
+requested port binds. `shell-session --json health` reports the active bound
+endpoints so callback selection can be evidence-based. The remote-bind safety
+gate remains unchanged.
+
+Manages multiple accepted TCP sessions with per-session routing, buffered
+output, raw byte logging, full-duplex transcripts, command history, attach /
+detach events, replay, and evidence manifests. `probe` records the remote's
+current shell interpreter in `shell`, detected only from `/proc/$$/exe` and
+`$0`, so a BusyBox `sh` target is not confused with an installed Bash. This
+interpreter axis is separate from TTY/`pty_state`; it is stored in session state,
+the `shell-session --json` projection, session snapshots, and evidence manifests,
+and is restored after a listener restart. `pty-upgrade` sends one concrete
+helper only; `upgrade` runs a helper plus a probe and records `pty_state` as
+verified or failed. Explicit `technique=auto` adds a bounded listener-side state
 machine: framed capability recon, allowlisted `bash`/`sh` selection, ordered
 helper attempts (`python3`, `python`, `python2`, `script`, `expect`), generic
 prompt observation, and phase-local probe verification. Only unavailable,

package/README.md

@@ -1,9 +1,9 @@
 # Pentesting 🔓
 
-<div align="center">
-  <img src="https://api.iconify.design/hugeicons:bash.svg" alt="pentesting bash icon" width="120" />
-  <h1>A High-Efficiency Penetration-Testing Agent</h1>
-  <p>Designed to achieve strong results with low-cost models. Powered by Rust.</p>
+<div align="center">
+  <img src="https://api.iconify.design/hugeicons:bash.svg" alt="pentesting bash icon" width="120" />
+  <h1>A High-Efficiency Penetration-Testing Agent</h1>
+  <p>Designed to achieve strong results with low-cost models. Powered by Rust.</p>
 
 [![MIT License](https://img.shields.io/badge/license-MIT-green.svg)](LICENSE)
 [![npm](https://img.shields.io/npm/v/pentesting.svg)](https://www.npmjs.com/package/pentesting)
@@ -49,61 +49,62 @@ Provider variables are optional — the TUI launches without them and lets you l
 
 ## ✅ Capabilities
 
-| Area | What it does |
-| --- | --- |
-| Verified agent loop | Streams actions and observations; a model Stop ends only the turn, evidence-backed verification closes the mission, and the full trajectory is persisted |
-| Unified tool boundary | Built-in, delegated, and MCP calls share schema validation, provenance, permissions, policy, and resource limits |
-| Context economy | Automatic micro-pruning and model-triggered summaries preserve useful context for low-cost models |
-| Deterministic steering | Esc stops the current turn and auto loop, while submitted input resumes in FIFO order at safe turn boundaries |
-| Reverse-shell & PTY lifecycle | One control plane manages authorized callbacks and local PTY/pipe sessions, from tagging, probing, and verified upgrades to transcripts, evidence, FD accounting, and deterministic reclamation |
-| Bounded battlefield | A persistent Lead ledger produces a compact on-demand attention brief and read-only `/status` view; dispatch stays explicit and is capped at four branches |
-| Adversarial pathfinding | A localized AlphaGo-inspired minimax technique models an opponent's best defensive move and improves the ability to find viable bypass paths |
-| Dynamic fan-out / fan-in | The model sizes each specialist batch to the task, runs up to four delegated branches concurrently, then returns their results to the parent with bounded depth and recorded lineage |
-| Extensible skills & tools | Discovers MCP tools dynamically and layers Markdown skills onto the same guarded runtime surface |
-| Forgetting-aware memory | Ebbinghaus-style decaying notes combine with lexical, semantic, and graph retrieval |
-
----
-
-## 🧭 Philosophy
-
-| Principle | What it means here |
-| --- | --- |
-| Simplicity is best | Prefer the smallest design that preserves the capability, makes ownership clear, and remains easy to verify |
-| If it cannot be measured, it cannot be improved | Instrument outcomes, compare them under repeatable conditions, and let evidence drive the next change |
-| The best design blueprint is the human being | Better systems begin with better self-observation: understand how we perceive, decide, learn, and recover, then make those loops observable |
-| The agent is the bottleneck | As AI models advance, the agent framework and the surrounding system must evolve with them |
-
-### Capability record
-
-| Date | Result | Test setup | Note |
-| --- | --- | --- | --- |
-| 2026-04 | Project work began | Initial implementation and baseline work | — |
-| 2026-07-15 | ~40% higher pentesting score | Pentesting (MiniMax M3) vs. Claude Code v2.1.210 (Sonnet 5); same prompts, easy-to-hard CTFs, 60 minutes each | Time-bound internal test; both agents continue to evolve |
-
----
-
-## ⌨️ Slash commands
-
-| Command | Purpose |
-| --- | --- |
-| `/help` | Show commands |
-| `/model [query]` | Switch provider, model, or custom endpoint |
-| `/goal <objective>` | Set or clear the active goal |
-| `/auto` | Run the active goal automatically; Esc stops it |
+| Area | What it does |
+| --- | --- |
+| Verified agent loop | Streams actions and observations; a model Stop ends only the turn, evidence-backed verification closes the mission, and the full trajectory is persisted |
+| Unified tool boundary | Built-in, delegated, and MCP calls share schema validation, provenance, permissions, policy, and resource limits |
+| Context economy | Automatic micro-pruning and model-triggered summaries preserve useful context for low-cost models |
+| Deterministic steering | Esc stops the current turn and auto loop, while submitted input resumes in FIFO order at safe turn boundaries |
+| Reverse-shell & PTY lifecycle | One control plane manages authorized callbacks and local PTY/pipe sessions, from tagging, probing, and verified upgrades to transcripts, evidence, FD accounting, and deterministic reclamation |
+| Bounded battlefield | A persistent Lead ledger produces a compact on-demand attention brief and read-only `/status` view; dispatch stays explicit and is capped at four branches |
+| Adversarial pathfinding | A localized AlphaGo-inspired minimax technique models an opponent's best defensive move and improves the ability to find viable bypass paths |
+| Dynamic fan-out / fan-in | The model sizes each specialist batch to the task, runs up to four delegated branches concurrently, then returns their results to the parent with bounded depth and recorded lineage |
+| Extensible skills & tools | Discovers MCP tools dynamically and layers Markdown skills onto the same guarded runtime surface |
+| Forgetting-aware memory | Ebbinghaus-style decaying notes combine with lexical, semantic, and graph retrieval |
+
+---
+
+## 🧭 Philosophy
+
+| Principle | What it means here |
+| --- | --- |
+| Simplicity is best | Prefer the smallest design that preserves the capability, makes ownership clear, and remains easy to verify |
+| If it cannot be measured, it cannot be improved | Instrument outcomes, compare them under repeatable conditions, and let evidence drive the next change |
+| The best design blueprint is the human being | Better systems begin with better self-observation: understand how we perceive, decide, learn, and recover, then make those loops observable |
+| The agent is the bottleneck | As AI models advance, the agent framework and the surrounding system must evolve with them |
+
+### Capability record
+
+| Date | Result | Test setup | Note |
+| --- | --- | --- | --- |
+| 2026-04 | Project work began | Initial implementation and baseline work | — |
+| 2026-07-15 | ~40% higher pentesting score | Pentesting (MiniMax M3) vs. Claude Code v2.1.210 (Sonnet 5); same prompts, easy-to-hard CTFs, 60 minutes each | Time-bound internal test; both agents continue to evolve |
+
+---
+
+## ⌨️ Slash commands
+
+| Command | Purpose |
+| --- | --- |
+| `/help` | Show commands |
+| `/model [query]` | Switch provider, model, or custom endpoint |
+| `/goal <objective>` | Set or clear the active goal |
+| `/auto` | Run the active goal automatically; Esc stops it |
 | `/status` | Show the current run and verified mission status |
 | `/new` · `/retry` | Start a new conversation or retry the last turn |
+| `/resume` | Resume a saved session from the current workspace |
 | `/config` | Edit runtime configuration |
-| `/exit` | Quit |
+| `/exit` | Save the session, restore the terminal, and quit |
 
 > The command you run is always **`pentesting`**. The internal engine is **`builder`** — `pentesting` runs it under the hood; the engine name never surfaces in normal use.
 
 ---
 
-## 🎹 From the Developer
-
-<div align="center">
-  <img src="https://github.com/user-attachments/assets/abe73474-f27b-4536-b358-fedef1e461f0" alt="Chopin Ballade No.4" width="600" />
-</div>
+## 🎹 From the Developer
+
+<div align="center">
+  <img src="https://github.com/user-attachments/assets/abe73474-f27b-4536-b358-fedef1e461f0" alt="Chopin Ballade No.4" width="600" />
+</div>
 
 <br/>
 
@@ -111,6 +112,6 @@ Provider variables are optional — the TUI launches without them and lets you l
 >
 > The harmony of polyphony — multiple voices — and homophony — a single melodic line.
 >
-> Each voice sings its most beautiful song from its own place, yet when combined, they create one grand, beautiful melody. I believe this structure is no different from AI agents.
->
-> — *agnusdei1207*
+> Each voice sings its most beautiful song from its own place, yet when combined, they create one grand, beautiful melody. I believe this structure is no different from AI agents.
+>
+> — *agnusdei1207*

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pentesting",
-  "version": "0.101.5",
-  "builderReleaseTag": "v0.101.5",
+  "version": "0.101.6",
+  "builderReleaseTag": "v0.101.6",
   "description": "Penetration testing AI agent powered by Rust, with audited reverse-shell capture, verified PTY upgrades, and evidence-first orchestration.",
   "license": "MIT",
   "author": "agnusdei1207",