a ctfer on the load

1
import type { ExtensionFactory } from "@mariozechner/pi-coding-agent"
2

3
const WORKSPACE_DIRS = {
4
    auth: "auth",
5
    evidence: "evidence",
6
    subAgents: "sub-agents",
7
} as const
8

9
const WORKSPACE_FILES = {
10
    scope: "scope.md",
11
    findingsNdjson: "findings.ndjson",
12
} as const
13

14
export function pentestCompactionExtension(): ExtensionFactory {
15
    return (pi) => {
16
        pi.on("session_compact", async (event) => {
17
            const timestamp = new Date().toISOString()
18
            console.error(
19
                `[${timestamp}] COMPACTION: fromExtension=${event.fromExtension}, summary length=${event.compactionEntry.summary.length}`,
20
            )
21
        })
22
    }
23
}
24

25
export function getPentestCompactionInstructions(): string {
26
    return `When summarizing this conversation for compaction, you MUST preserve:
27

28
1. Scope: All in-scope and out-of-scope targets from ${WORKSPACE_FILES.scope}
29
2. Known Assets: All discovered assets, endpoints, parameters, technologies
30
3. Active Hypotheses: All current vulnerability hypotheses and their status
31
4. Confirmed Findings: All verified or candidate findings with evidence references from ${WORKSPACE_FILES.findingsNdjson}
32
5. Auth State: Any authentication tokens, cookies, or session information in ${WORKSPACE_DIRS.auth}/
33
6. Evidence Paths: All file paths in ${WORKSPACE_DIRS.evidence}/ and ${WORKSPACE_DIRS.subAgents}/
34
7. Current Phase: What methodology phase we are in (SCOPE/RECON/HYPOTHESIZE/TEST/DOCUMENT/REPORT)
35
8. Next Actions: What should be done next
36

37
You may discard:
38
- Verbose HTTP response bodies
39
- Failed/dead-end exploration details
40
- Redundant tool output
41
- Intermediate reasoning that led to already-documented conclusions
42

43
Format the summary as structured sections, not prose.`
44
}

1
┌─────────────────────────────────────────────────────────┐
2
│前端层(呈现)Web指挥台(Next.js)/TUI(Textual)              │
3
│哑订阅者：只订阅事件流(SSE)+POST命令，从不直调核心       │
4
├─────────────────────────────────────────────────────────┤
5
│控制平面层FastAPI server.py+RunManager                   │
6
│事件总线EventBus(唯一对外契约：有序·带类型·单调序号)     │
7
├─────────────────────────────────────────────────────────┤
8
│调度大脑层(Coordinator Swarm)                            │
9
│协调器OODA循环(2s/拍)+Reason规划器(deepseek)             │
10
│SharedGraph共享黑板(SQLite,事件溯源)+InsightBus          │
11
│Gate闸门(唯一硬编码的flag接受函数)                       │
12
├─────────────────────────────────────────────────────────┤
13
│执行层(Workers)异构CLI Agent+blackboard skill            │
14
│local:宿主子进程container:Kali容器+Go反向连接            │
15
└─────────────────────────────────────────────────────────┘