> ## Documentation Index
> Fetch the complete documentation index at: https://docs.attaxr.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Hackbot

> The chat copilot: threads, messages, goals, approvals, and hand-offs.

Hackbot is Aquila's chat copilot. It plans hunts, runs tools through MCP,
and opens vulnerabilities as it works. The chat API drives the copilot from
your own interface.

## Capabilities

`GET /api/chat/capabilities?agent=hackbot` reports what a chat agent can do.
The `agent` query accepts `classification` (default) or `hackbot`.

## Threads

A thread is one chat session.

* `GET /api/chat` — list threads.
* `POST /api/chat` — create a thread. Pick the agent in the body.
* `GET /api/chat/{id}` — one thread.
* `PATCH /api/chat/{id}` — rename or update.
* `DELETE /api/chat/{id}` — delete.

## Messages and turns

`POST /api/chat/{id}/messages` appends a user message and starts a turn:

```json theme={"theme":{"light":"github-light","dark":"one-dark-pro"}}
{ "role": "user", "content": "Hunt the staging host for auth bugs" }
```

The turn streams over the timeline. Aquila returns `409` while a session is
paused. Resume the session first.

## Goals, plans, and approvals

Hackbot works goal-first. It sets a goal, submits a plan, and asks for
approval before risky steps.

* `POST /api/chat/{id}/goal` — set or update the session goal.
* `POST /api/chat/{id}/approve` — approve a pending action.

## Hand-off from a lead

`POST /api/leads/{id}/hackbot` opens a Hackbot thread scoped to one lead.
The call returns `202` while the session starts, and `502` if the hand-off
event fails to publish.