mirror of
https://github.com/CyberSecurityUP/NeuroSploit.git
synced 2026-08-25 10:52:31 +02:00
/only <agent,...> (app/src/repl.rs): the REPL had no way to pin an exact agent set the way the CLI's --only flag does - Session gained a `pinned` field, wired into RunConfig in both start_background() (the live background-run path) and the blocking run() fallback. Needed so the web console's exploitation jobs can drive a real interactive REPL session (for live input while a run streams) without losing lead-pinning, which only existed as a CLI flag until now. Also usable directly from a terminal REPL session. HTML report (crates/harness/src/report.rs, html()): rebuilt to match the Typst PDF template's design (templates/report.typ) instead of its own inconsistent styling - violet brand accent, an asset table, a 5-box executive-summary grid (all severities, zero-count included, matching Typst's grid exactly), a Vulnerability Summary table, and severity- left-bordered finding cards with a compact field grid (Criticality / Status / OWASP-CWE / Confidence / Location / Agent / Auth context) before Description-Impact / Proof of Concept / Evidence / Remediation - same field order and labels as the Typst template. Dropped the Mermaid attack-path/kill-chain section entirely (the web console's live Generative Attack Path Chaining graph covers that now, interactively). Also tidied two pre-existing formatting quirks while in there: OWASP/CWE left a dangling " · " when CWE was empty, and the confidence cell said "<votes-string> votes" even when the votes field already contained a compound descriptor like "1/1 · receipt_missing". Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0129WdYHccPsH27k5GGuwijd