v3.4.1: harness intelligence — router, ReAct, dedup, token-trim, configurable MCP, +54 code agents, credits

- Task-based model ROUTER (recon/select prefer a fast model; exploit prefers primary; validate uses a different model than the finder)
- ReAct doctrine injected into exploit prompts (Thought→Action→Observation, token-efficient)
- Dedup: unique agents per run + findings deduped by CWE/endpoint/title (highest confidence kept)
- Token economy: recon blob capped for selector + per-agent context
- Configurable MCP: merge user mcp.servers.json into the pipeline's .mcp.json
- +54 white-box/code-analysis agents (NoSQLi, LDAP/XPath, JWT-none, Java/.NET/PHP/Go/Node/Python
  specifics, SSTI, ReDoS, deserialization, etc.) → 303 agents total (78 code)
- Credits: Joas A Santos & Red Team Leaders (CLI banner, interactive header, HTML+Typst report)
- README: GitHub stars/forks badges, 60-second quick start, full API config steps, intuitive layout

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

README.md

@@ -1,10 +1,27 @@
-# NeuroSploit v3.4.1 🦀
+<h1 align="center">NeuroSploit v3.4.1 🦀</h1>
 
-![Version](https://img.shields.io/badge/Version-3.4.1-blue)
-![Harness](https://img.shields.io/badge/Harness-Rust%20%7C%20tokio-e6b673)
-![License](https://img.shields.io/badge/License-MIT-green)
-![Agents](https://img.shields.io/badge/MD%20Agents-249-red)
-![Models](https://img.shields.io/badge/Models-12%20providers-success)
+<p align="center">
+  <a href="https://github.com/JoasASantos/NeuroSploit/stargazers"><img src="https://img.shields.io/github/stars/JoasASantos/NeuroSploit?style=for-the-badge&logo=github&color=8b5cf6" alt="Stars"></a>
+  <a href="https://github.com/JoasASantos/NeuroSploit/network/members"><img src="https://img.shields.io/github/forks/JoasASantos/NeuroSploit?style=for-the-badge&logo=github&color=a855f7" alt="Forks"></a>
+  <a href="https://github.com/JoasASantos/NeuroSploit/issues"><img src="https://img.shields.io/github/issues/JoasASantos/NeuroSploit?style=for-the-badge&color=22d3ee" alt="Issues"></a>
+  <img src="https://img.shields.io/github/last-commit/JoasASantos/NeuroSploit?style=for-the-badge&color=34d399" alt="Last commit">
+</p>
+
+<p align="center">
+  <img src="https://img.shields.io/badge/Version-3.4.1-blue?style=flat-square">
+  <img src="https://img.shields.io/badge/Harness-Rust%20%7C%20tokio-e6b673?style=flat-square">
+  <img src="https://img.shields.io/badge/License-MIT-green?style=flat-square">
+  <img src="https://img.shields.io/badge/MD%20Agents-303-red?style=flat-square">
+  <img src="https://img.shields.io/badge/Models-12%20providers-success?style=flat-square">
+  <img src="https://img.shields.io/badge/Auth-API%20key%20%7C%20Subscription-orange?style=flat-square">
+</p>
+
+<p align="center"><b>Autonomous, multi-model penetration-testing harness — Rust, CLI-only.</b><br>
+<i>by Joas A Santos &amp; Red Team Leaders</i></p>
+
+> ⭐ If this is useful, **star the repo** — it helps a lot.
+
+---
 
 **Autonomous, multi-model penetration-testing harness — Rust, CLI-only.**
 
@@ -20,6 +37,23 @@ discovered surface**, runs them in parallel, then validates every finding by
 
 ---
 
+## ⚡ Quick start (60 seconds)
+
+```bash
+# 1. build
+cd neurosploit-rs && cargo build --release
+
+# 2. easiest path — just run it, the wizard asks everything:
+./target/release/neurosploit
+
+# 3. or one-liner (subscription login, no API key needed):
+./target/release/neurosploit run http://testphp.vulnweb.com/ --subscription --model anthropic:claude-opus-4-8 -v
+```
+
+No login? Use an **API key** instead — see [Authentication](#authentication--run-via-api-key-or-subscription).
+
+---
+
 ## Build
 
 ```bash
@@ -181,13 +215,13 @@ Every run writes a self-contained folder `runs/ns-<ts>-<target>/`:
 A reinforcement-learning reward store (`data/rl_state_rs.json`) biases agent
 selection on future runs.
 
-## Agent library — `agents_md/` (249)
+## Agent library — `agents_md/` (303)
 
 | Category | Count | Purpose |
 |----------|-------|---------|
 | `vulns/` | 196 | Exploit a specific vulnerability class |
 | `recon/` | 12 | Information gathering / attack surface |
-| `code/` | 24 | White-box source-code (SAST) review |
+| `code/` | 78 | White-box source-code (SAST) review |
 | `meta/` | 17 | Orchestrator, validator, scorers, reporter, RL |
 
 Each agent is a self-contained markdown playbook (`## User Prompt` methodology +
@@ -202,6 +236,10 @@ For **authorized** testing only. Agents are instructed to stay in scope, never r
 destructive/DoS actions, and require proof-of-exploitation. You are responsible for
 having permission for any target.
 
+## Credits
+
+**Joas A Santos** & **Red Team Leaders**.
+
 ## License
 
 MIT.