docs(docs): add README to every project directory \n\n Version: release/0.2.119 \n\n create 21 new READMEs and update 3 existing ones; covers cli, core, modules, templates, sessions, tools, parquets, tests, static, lazyscripts, playbooks, lazyadversaries, scripts, lazyown-docker, lazygui, vpn, docs, lazyc2, modules_ext, modules/backdoor, modules/integrations, modules/rootkit, modules/win_rootkit, cli/commands; remove emojis from lazyaddons and plugins READMEs; update skills README with 95 tool count and collab note \n\n LazyOwn on HackTheBox: https://app.hackthebox.com/teams/overview/6429 \n\n LazyOwn/ https://grisuno.github.io/LazyOwn/ \n\n \n\n Fecha: vie 15 may 2026 19:02:47 -04 \n\n Hora: 1778886167

Author: grisuno

CHANGELOG.md

@@ -2,6 +2,13 @@
 # Changelog
 
 
+### Documentación
+
+### Otros
+
+  *   * docs(docs): add README to every project directory \n\n Version: release/0.2.119 \n\n create 21 new READMEs and update 3 existing ones; covers cli, core, modules, templates, sessions, tools, parquets, tests, static, lazyscripts, playbooks, lazyadversaries, scripts, lazyown-docker, lazygui, vpn, docs, lazyc2, modules_ext, modules/backdoor, modules/integrations, modules/rootkit, modules/win_rootkit, cli/commands; remove emojis from lazyaddons and plugins READMEs; update skills README with 95 tool count and collab note \n\n   LazyOwn on HackTheBox: https://app.hackthebox.com/teams/overview/6429 \n\n  LazyOwn/   https://grisuno.github.io/LazyOwn/ \n\n \n\n Fecha: vie 15 may 2026 19:02:47 -04 \n\n Hora: 1778886167
+
+
 ### Documentación
 
 ### Otros

README.md

@@ -12971,6 +12971,13 @@ No description available.
 # Changelog
 
 
+### Documentación
+
+### Otros
+
+  *   * docs(docs): CLAUDE.md update with beacon family, collab, and onboarding \n\n Version: release/0.2.118 \n\n add sections 15c-15e covering blacksandbeacon Linux BOF, collab_bp team server, and QUICKSTART onboarding; update repository map, C2 surface, sessions table, and cheatsheet \n\n   LazyOwn on HackTheBox: https://app.hackthebox.com/teams/overview/6429 \n\n  LazyOwn/   https://grisuno.github.io/LazyOwn/ \n\n \n\n Fecha: vie 15 may 2026 16:11:13 -04 \n\n Hora: 1778875873
+
+
 ### Nuevas características
 
 ### Otros

cli/README.md

@@ -0,0 +1,53 @@
+# cli
+
+Shell-layer extensions for the LazyOwn cmd2 CLI. Every file here plugs into
+`LazyOwnShell` without touching the 27k-line `lazyown.py` core directly. The
+layer follows strict Dependency Inversion: each module depends on small
+`typing.Protocol` interfaces rather than on the concrete shell class.
+
+## Files
+
+| File | Purpose |
+|------|---------|
+| `wizard.py` | Guided first-run setup. Walks the operator through rhost, lhost, domain, device, os_id, api_key, and SecLists paths. Auto-detects lhost from the routing table. Zero imports from `lazyown.py` or `lazyc2.py`. |
+| `aliases.py` | Dynamic alias resolver. Alias templates keep `{rhost}` / `{lhost}` placeholders and are rendered against `self.params` at execution time. `DynamicAliasResolver` + `cli/aliases.yaml` drive this. |
+| `aliases.yaml` | Declarative alias definitions consumed by `aliases.py`. |
+| `graph_advisor.py` | Reads `graphify-out/graph_lazyown.json` and answers three queries: fuzzy node search, graph neighbour walk, and next-step recommendation weighted by recent activity. Caches by `(path, mtime)`. |
+| `reactive_hints.py` | `register_postcmd_hook` callback. After every `do_*` fires, prints one dim line of graph-driven next-step suggestions. Controlled by `enable_inline_hints` in `payload.json`. |
+| `dashboard_tui.py` | Full-screen Textual TUI dashboard. Launched by the `dashboard` CLI command. Refreshes every 5 seconds. Reads `payload.json`, `sessions/world_model.json`, `sessions/tasks.json`, session CSV, and credential files. |
+| `cli_enhancements.py` | Fuzzy command finder (`fz`), interactive parameter form (`form`), live scan tail (`status_tail`), log grep (`grep_log`), hot addon reloader (`reload_addons`), and payload-aware Tab completer. |
+| `fuzzy_picker.py` | Curses-driven fuzzy dropdown anchored at the bottom of the terminal. Opens on Tab when two or more completions exist. Navigation: arrow keys, Page Up/Down, Backspace to refine, Enter or Tab to insert. |
+| `palette.py` | Phase-aware command palette. Reads the command index and filters by engagement phase. |
+| `palette_command.py` | cmd2 command and Tab-completer for the `palette` verb. |
+| `palette_graph.py` | Graph-backed palette scoring. Merges fuzzy text rank with graph centrality. |
+| `palette_telemetry.py` | Records palette usage to improve future ranking. |
+| `banner_config.py` | Powerlevel10k-style prompt segment wizard. Manages the neon-box prompt configuration stored in `payload.json`. |
+| `exploit_advisor.py` | Suggests exploits based on discovered service versions. Backed by the parquet knowledge bases. |
+| `engagement_hooks.py` | Pre/post-command hooks that update `sessions/world_model.json` after each command. |
+| `ops_commands.py` | Operational commands loaded as a cmd2 `CommandSet`. |
+| `protips.py` | Context-sensitive tips printed below the prompt. |
+| `registry.py` | Central registry of CLI extensions. Used by `lazyown.py` to auto-discover and wire command sets. |
+| `show.py` | Display helpers for tabular output inside the shell. |
+| `assign.py` | `assign` and `set` command logic extracted for reuse. |
+| `command_index.json` | Pre-built index of every `do_*` command, alias, addon, and plugin. Rebuilt by `scripts/build_command_index.py`. |
+| `commands/` | cmd2 `CommandSet` subpackage. See `commands/README.md`. |
+
+## Design rules
+
+- No file in `cli/` may import `lazyown.py` or `lazyc2.py`.
+- Output goes through `rich.console.Console`, never raw `print()`, so ANSI
+  handling is correct on all terminals and piped output.
+- Graph-dependent features (`reactive_hints`, `graph_advisor`, `palette_graph`)
+  degrade silently when `graphify-out/graph_lazyown.json` is absent — no
+  error, no output.
+- `wizard.py` takes a `params: dict` and a `save: Callable` injected by the
+  caller. It never reads `payload.json` directly.
+
+## Rebuild the command index
+
+```bash
+python scripts/build_command_index.py
+```
+
+Run this after adding a new `do_*` command, alias, addon, or plugin so Tab
+completion and `fz` reflect the change immediately.

cli/commands/README.md

@@ -0,0 +1,27 @@
+# cli/commands
+
+cmd2 `CommandSet` subpackage. Each file here defines a `CommandSet` class
+that is auto-discovered by `cli/registry.py` and wired into `LazyOwnShell`
+at startup. This keeps the main `lazyown.py` free of audit-specific command
+logic while still surfacing the commands in the same CLI namespace.
+
+## Files
+
+| File | CommandSet | Commands provided |
+|------|-----------|-------------------|
+| `audit.py` | `AuditCommandSet` | `fz`, `form`, `status_tail`, `grep_log`, `reload_addons`, `audit_complete_keys` |
+| `diagnostics.py` | `DiagnosticsCommandSet` | Framework health checks, version info |
+| `_base.py` | `BaseCommandSet` | Shared helpers inherited by all command sets |
+| `__init__.py` | — | Package marker; exports the `CommandSet` classes for auto-discovery |
+
+## Adding a command set
+
+1. Create `cli/commands/<name>.py`.
+2. Define a class that subclasses `cmd2.CommandSet`.
+3. Add `do_*` methods following the same conventions as `lazyown.py` commands.
+4. Import and register it in `cli/commands/__init__.py`.
+5. `cli/registry.py` picks it up on the next shell start.
+
+Do not place commands here that need `self.params` write-back — those belong
+in `lazyown.py` because `CommandSet` instances do not own the params dict.
+Read-only inspection and display commands are the right fit for this package.

core/README.md

@@ -0,0 +1,41 @@
+# core
+
+Shared foundation layer imported by both `lazyown.py` and `lazyc2.py`. Contains
+the canonical `Config` class, cryptographic utilities, validation helpers, and
+low-level protocol constants. Nothing in `core/` imports from `lazyown.py`,
+`lazyc2.py`, or `modules/`.
+
+## Files
+
+| File | Purpose |
+|------|---------|
+| `config.py` | Canonical `Config` class. Wraps the `payload.json` dict and exposes keys as attributes (`cfg.rhost`) and via `__getitem__` (`cfg["rhost"]`). Returns `None` for missing keys. **This is the single definition** — `utils.py` re-exports it for backwards compatibility but must not redefine it. |
+| `crypto.py` | Cryptographic primitives: XOR encrypt/decrypt for beacon encoding, AES-256 helpers, and key/IV generation. |
+| `validators.py` | Input validation functions: IP address format check, port range check, safe path validation. Used by CLI commands before they touch `payload.json` or the filesystem. |
+| `protocols.py` | `typing.Protocol` definitions shared across `cli/`, `modules/`, and `skills/`: `PayloadProvider`, `CommandLister`, `TerminalIO`, `LLMBackend`, `MemoryStore`, `Selector`. Enables Dependency Inversion without circular imports. |
+| `console.py` | Rich console singleton and ANSI colour helpers used by `print_msg`, `print_warn`, `print_error`. |
+| `__init__.py` | Re-exports `Config`, `load_payload`, and the validators so callers can do `from core import Config`. |
+
+## Usage
+
+```python
+from core import Config
+from core.validators import check_rhost, check_lhost
+
+cfg = Config({"rhost": "10.10.11.5", "lhost": "10.10.14.3"})
+print(cfg.rhost)          # "10.10.11.5"
+print(cfg["nonexistent"]) # None
+
+if not check_rhost(cfg.rhost):
+    print("rhost is not set")
+```
+
+## Rules
+
+- `core/` has no runtime dependencies beyond the Python standard library and
+  `rich`. Never add `flask`, `cmd2`, or any framework import here.
+- `Config` is defined exactly once in `core/config.py`. The `utils.py`
+  re-export exists for backwards compatibility with the large existing codebase
+  but adds no new logic.
+- All validators return `bool` — they never raise, never print, never log.
+  Callers decide what to do on failure.