chore: release v0.2.8

- feat: file upload through agent channel
- feat: --tavily-key flag for web search configuration
- feat: scan tools (gogo/spray) emit real-time DataBus events
- fix: external API tools (passive/web_search/cyberhub) always register,
  return clear error with configuration hints when keys are missing
- fix: remove go.mod tui replace directives, use published versions
- deps: upgrade zombie to v1.3.0, all chainreactors deps to latest master
- deps: migrate tui/console and tui/readline to chainreactors/tui
- docs: add v0.2.8 changelog

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: release v0.2.8

- feat: file upload through agent channel
- feat: --tavily-key flag for web search configuration
- feat: scan tools (gogo/spray) emit real-time DataBus events
- fix: external API tools (passive/web_search/cyberhub) always register,
  return clear error with configuration hints when keys are missing
- fix: remove go.mod tui replace directives, use published versions
- deps: upgrade zombie to v1.3.0, all chainreactors deps to latest master
- deps: migrate tui/console and tui/readline to chainreactors/tui
- docs: add v0.2.8 changelog

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: file upload through agent channel

Frontend:
- ChatPanel enables attachments, handles CTX mode (inject text
  into LLM context) and UP mode (upload to remote agent)
- api.ts: uploadChatFile() POST multipart to /api/chat/sessions/{id}/upload
- Update cyber-ui submodule for ChatInput attachment UI

Backend:
- POST /api/chat/sessions/{id}/upload — multipart endpoint
- Service.HandleFileUpload: base64-encodes file, dispatches through
  WebSocket as {type:"upload", data_b64, payload:{filename,size,mime}}
- AgentPool.dispatchMessage: sends pre-built WSMessage with task tracking

Agent:
- handleFileUpload: decodes base64, writes to $TMPDIR/aiscan-uploads/,
  responds with {type:"complete", payload:{path,size}}

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: file upload through agent channel

Frontend:
- ChatPanel enables attachments, handles CTX mode (inject text
  into LLM context) and UP mode (upload to remote agent)
- api.ts: uploadChatFile() POST multipart to /api/chat/sessions/{id}/upload
- Update cyber-ui submodule for ChatInput attachment UI

Backend:
- POST /api/chat/sessions/{id}/upload — multipart endpoint
- Service.HandleFileUpload: base64-encodes file, dispatches through
  WebSocket as {type:"upload", data_b64, payload:{filename,size,mime}}
- AgentPool.dispatchMessage: sends pre-built WSMessage with task tracking

Agent:
- handleFileUpload: decodes base64, writes to $TMPDIR/aiscan-uploads/,
  responds with {type:"complete", payload:{path,size}}

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: file upload through agent channel

Frontend:
- ChatPanel enables attachments, handles CTX mode (inject text
  into LLM context) and UP mode (upload to remote agent)
- api.ts: uploadChatFile() POST multipart to /api/chat/sessions/{id}/upload
- Update cyber-ui submodule for ChatInput attachment UI

Backend:
- POST /api/chat/sessions/{id}/upload — multipart endpoint
- Service.HandleFileUpload: base64-encodes file, dispatches through
  WebSocket as {type:"upload", data_b64, payload:{filename,size,mime}}
- AgentPool.dispatchMessage: sends pre-built WSMessage with task tracking

Agent:
- handleFileUpload: decodes base64, writes to $TMPDIR/aiscan-uploads/,
  responds with {type:"complete", payload:{path,size}}

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

refactor: migrate from reeflective/readline,console to chainreactors/…

…tui sub-modules

Update import paths and go.mod replace directives:
- github.com/reeflective/console -> github.com/chainreactors/tui/console
- github.com/reeflective/readline -> github.com/chainreactors/tui/readline

readline and console now live as sub-modules in the tui repo.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: update v0.2.7 changelog, fix MITM lint and flaky test

- Add MITM traffic capture section to v0.2.7 changelog
- Fix 3 errcheck lint issues in mitm.go (Shutdown return, type assertions)
- Widen SSH banner test timeouts to prevent flaky failures under load
- Update README/README_CN taglines

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

chore: go mod tidy

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

release: v0.2.4 — arsenal tool manager, TUI redesign, agent retry fix…

…, remote PTY

release: v0.2.4 — arsenal tool manager, TUI redesign, agent retry fix

fix(test): eliminate data race in DirectScanner tests

The tests used captureStdoutForTest (os.Stdout replacement) while
RunDirectScannerMode spawns concurrent goroutines that write to
stdout, triggering race detector failures in CI (-race flag).

Fix: verify log buffer content directly instead of capturing stdout.
The log buffer already contains the init info we want to assert on.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>