Z3r0

Highlights

• Added LightRAG-backed knowledge management with Markdown and PDF ingestion,
  document processing, vector and knowledge-graph exploration, and contextual
  retrieval for Agent tasks.
• Added graph-driven WorkProject orchestration with target-scoped WorkItems,
  immutable Evidence, coverage tracking, lead review, retesting, and richer
  Asset, Finding, Attack Path, and Activity records.
• Added downloadable Markdown report exports for Agent sessions with
  configurable retention and automatic cleanup.
• Expanded the default sandbox with reconnaissance, DNS, web discovery,
  credential testing, binary analysis, debugging, Python, browser automation,
  and wordlist tooling backed by dedicated skills.

Improvements

• Reworked runtime lifecycle, conversation persistence, context budgeting,
  API contracts, recovery, replay, and long-running task execution.
• Consolidated backend domain packages and centralized OpenAPI/frontend
  contract generation.
• Refined the operator workbench, responsive WorkProject layouts, session and
  transcript views, shared resource components, and bilingual documentation.
• Updated sandbox permissions and project binding and renamed the default
  sandbox image to penetration-runtime:latest.

Fixes

• Fixed knowledge-graph tag retrieval and graph exploration behavior.
• Fixed loopback Docker host connections by falling back to the local Unix socket.
• Fixed Mermaid fallback rendering, nested transcript list spacing, and
  playground container window render loops.
• Fixed WorkProject sandbox selection rendering.
• Fixed the PostgreSQL data directory mount path.