@cyanheads/pentest-mcp-server 0.1.2 → 0.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. package/AGENTS.md +6 -2
  2. package/CLAUDE.md +6 -2
  3. package/README.md +2 -2
  4. package/changelog/0.1.x/0.1.3.md +21 -0
  5. package/package.json +7 -6
  6. package/server.json +3 -3
package/AGENTS.md CHANGED
@@ -1,8 +1,8 @@
1
1
  # Developer Protocol
2
2
 
3
3
  **Server:** pentest-mcp-server
4
- **Version:** 0.1.2
5
- **Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.9.16`
4
+ **Version:** 0.1.3
5
+ **Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.9.21`
6
6
  **Engines:** Bun ≥1.3.0, Node ≥24.0.0
7
7
  **MCP SDK:** `@modelcontextprotocol/sdk` ^1.29.0
8
8
  **Zod:** ^4.4.3
@@ -228,6 +228,7 @@ Available skills:
228
228
  | `git-wrapup` | Land working-tree changes as a versioned commit + annotated tag — version bump, changelog, verify, tag. Local only. |
229
229
  | `release-and-publish` | Push + npm + MCP Registry + GH Release + Docker. Picks up from `git-wrapup` |
230
230
  | `maintenance` | Investigate changelogs, adopt upstream changes, sync skills to agent dirs |
231
+ | `orchestrations` | Chain task skills into a gated multi-phase pipeline — build-out, QA-fix, update-ship — when you can spawn sub-agents |
231
232
  | `report-issue-framework` | File a bug or feature request against `@cyanheads/mcp-ts-core` via `gh` CLI |
232
233
  | `report-issue-local` | File a bug or feature request against this server's own repo via `gh` CLI |
233
234
  | `api-auth` | Auth modes, scopes, JWT/OAuth |
@@ -242,6 +243,8 @@ Available skills:
242
243
  | `api-telemetry` | OTel catalog: spans, metrics, completion logs, env config, cardinality rules |
243
244
  | `api-workers` | Cloudflare Workers runtime |
244
245
 
246
+ **Chaining skills into pipelines.** When the user wants a multi-phase effort — build this server out, QA-and-fix the surface, update-and-ship — *and you can spawn sub-agents*, `skills/orchestrations/SKILL.md` sequences the task skills above into a gated pipeline with verification at each step. Read it to drive the run. Optional: skip it if you can't orchestrate sub-agents, and ignore it entirely if you were *spawned* as one — you've already been scoped to a single phase.
247
+
245
248
  When you complete a skill's checklist, check the boxes and add a completion timestamp at the end (e.g., `Completed: 2026-03-11`).
246
249
 
247
250
  ---
@@ -265,6 +268,7 @@ When you complete a skill's checklist, check the boxes and add a completion time
265
268
  | `npm run start:http` | Production mode (HTTP) |
266
269
  | `npm run changelog:build` | Regenerate `CHANGELOG.md` from `changelog/*.md` |
267
270
  | `npm run changelog:check` | Verify `CHANGELOG.md` is in sync (used by devcheck) |
271
+ | `npm run release:github` | Create GitHub Release from the current annotated tag |
268
272
  | `npm run bundle` | Build and pack as `.mcpb` for one-click Claude Desktop install |
269
273
 
270
274
  ---
package/CLAUDE.md CHANGED
@@ -1,8 +1,8 @@
1
1
  # Developer Protocol
2
2
 
3
3
  **Server:** pentest-mcp-server
4
- **Version:** 0.1.2
5
- **Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.9.16`
4
+ **Version:** 0.1.3
5
+ **Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.9.21`
6
6
  **Engines:** Bun ≥1.3.0, Node ≥24.0.0
7
7
  **MCP SDK:** `@modelcontextprotocol/sdk` ^1.29.0
8
8
  **Zod:** ^4.4.3
@@ -228,6 +228,7 @@ Available skills:
228
228
  | `git-wrapup` | Land working-tree changes as a versioned commit + annotated tag — version bump, changelog, verify, tag. Local only. |
229
229
  | `release-and-publish` | Push + npm + MCP Registry + GH Release + Docker. Picks up from `git-wrapup` |
230
230
  | `maintenance` | Investigate changelogs, adopt upstream changes, sync skills to agent dirs |
231
+ | `orchestrations` | Chain task skills into a gated multi-phase pipeline — build-out, QA-fix, update-ship — when you can spawn sub-agents |
231
232
  | `report-issue-framework` | File a bug or feature request against `@cyanheads/mcp-ts-core` via `gh` CLI |
232
233
  | `report-issue-local` | File a bug or feature request against this server's own repo via `gh` CLI |
233
234
  | `api-auth` | Auth modes, scopes, JWT/OAuth |
@@ -242,6 +243,8 @@ Available skills:
242
243
  | `api-telemetry` | OTel catalog: spans, metrics, completion logs, env config, cardinality rules |
243
244
  | `api-workers` | Cloudflare Workers runtime |
244
245
 
246
+ **Chaining skills into pipelines.** When the user wants a multi-phase effort — build this server out, QA-and-fix the surface, update-and-ship — *and you can spawn sub-agents*, `skills/orchestrations/SKILL.md` sequences the task skills above into a gated pipeline with verification at each step. Read it to drive the run. Optional: skip it if you can't orchestrate sub-agents, and ignore it entirely if you were *spawned* as one — you've already been scoped to a single phase.
247
+
245
248
  When you complete a skill's checklist, check the boxes and add a completion timestamp at the end (e.g., `Completed: 2026-03-11`).
246
249
 
247
250
  ---
@@ -265,6 +268,7 @@ When you complete a skill's checklist, check the boxes and add a completion time
265
268
  | `npm run start:http` | Production mode (HTTP) |
266
269
  | `npm run changelog:build` | Regenerate `CHANGELOG.md` from `changelog/*.md` |
267
270
  | `npm run changelog:check` | Verify `CHANGELOG.md` is in sync (used by devcheck) |
271
+ | `npm run release:github` | Create GitHub Release from the current annotated tag |
268
272
  | `npm run bundle` | Build and pack as `.mcpb` for one-click Claude Desktop install |
269
273
 
270
274
  ---
package/README.md CHANGED
@@ -7,7 +7,7 @@
7
7
 
8
8
  <div align="center">
9
9
 
10
- [![Version](https://img.shields.io/badge/Version-0.1.2-blue.svg?style=flat-square)](./CHANGELOG.md) [![License](https://img.shields.io/badge/License-Apache%202.0-orange.svg?style=flat-square)](./LICENSE) [![Docker](https://img.shields.io/badge/Docker-ghcr.io-2496ED?style=flat-square&logo=docker&logoColor=white)](https://github.com/users/cyanheads/packages/container/package/pentest-mcp-server) [![MCP SDK](https://img.shields.io/badge/MCP%20SDK-^1.29.0-green.svg?style=flat-square)](https://modelcontextprotocol.io/) [![npm](https://img.shields.io/npm/v/@cyanheads/pentest-mcp-server?style=flat-square&logo=npm&logoColor=white)](https://www.npmjs.com/package/@cyanheads/pentest-mcp-server) [![TypeScript](https://img.shields.io/badge/TypeScript-^5.9.3-3178C6.svg?style=flat-square)](https://www.typescriptlang.org/) [![Bun](https://img.shields.io/badge/Bun-v1.3.0-blueviolet.svg?style=flat-square)](https://bun.sh/)
10
+ [![Version](https://img.shields.io/badge/Version-0.1.3-blue.svg?style=flat-square)](./CHANGELOG.md) [![License](https://img.shields.io/badge/License-Apache%202.0-orange.svg?style=flat-square)](./LICENSE) [![Docker](https://img.shields.io/badge/Docker-ghcr.io-2496ED?style=flat-square&logo=docker&logoColor=white)](https://github.com/users/cyanheads/packages/container/package/pentest-mcp-server) [![MCP SDK](https://img.shields.io/badge/MCP%20SDK-^1.29.0-green.svg?style=flat-square)](https://modelcontextprotocol.io/) [![npm](https://img.shields.io/npm/v/@cyanheads/pentest-mcp-server?style=flat-square&logo=npm&logoColor=white)](https://www.npmjs.com/package/@cyanheads/pentest-mcp-server) [![TypeScript](https://img.shields.io/badge/TypeScript-^5.9.3-3178C6.svg?style=flat-square)](https://www.typescriptlang.org/) [![Bun](https://img.shields.io/badge/Bun-v1.3.0-blueviolet.svg?style=flat-square)](https://bun.sh/)
11
11
 
12
12
  </div>
13
13
 
@@ -179,7 +179,7 @@ A public instance is available at `https://pentest.caseyjhand.com/mcp` — no in
179
179
  ```json
180
180
  {
181
181
  "mcpServers": {
182
- "pentest": {
182
+ "pentest-mcp-server": {
183
183
  "type": "streamable-http",
184
184
  "url": "https://pentest.caseyjhand.com/mcp"
185
185
  }
package/changelog/0.1.x/0.1.3.md ADDED
@@ -0,0 +1,21 @@
1
+ ---
2
+ summary: "Adopt @cyanheads/mcp-ts-core 0.9.21: per-request log context fix, secret-stripping in error messages, withRetry fail-fast on non-retryable errors"
3
+ breaking: false
4
+ security: false
5
+ ---
6
+
7
+ # 0.1.3 — 2026-06-02
8
+
9
+ ## Changed
10
+
11
+ - **`@cyanheads/mcp-ts-core`** `^0.9.16` → `^0.9.21` — HTTP transport per-request log context fix (logs and traces carry fresh request + trace/span IDs instead of the frozen boot context); `fetchWithTimeout` strips query-string secrets (e.g. `?api_key=`) from error messages and logs; `withRetry` fails fast on non-retryable errors; `ctx.fail` auto-populates the `retryable` flag.
12
+
13
+ - **Skills** (`skills/`) — 8 updated + new `api-mirror` and `orchestrations` skills added from framework 0.9.21 sync; `devcheck.ts` and `scripts/check-skill-versions.ts`, `scripts/release-github.ts` added.
14
+
15
+ ## Dependencies
16
+
17
+ - `@cyanheads/mcp-ts-core` ^0.9.16 → ^0.9.21
18
+ - `@biomejs/biome` ^2.4.7 → ^2.4.16 (dev)
19
+ - `@types/node` ^25.6.0 → ^25.9.1 (dev)
20
+ - `tsc-alias` ^1.8.16 → ^1.8.17 (dev)
21
+ - `vitest` ^4.1.0 → ^4.1.8 (dev)
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@cyanheads/pentest-mcp-server",
3
- "version": "0.1.2",
3
+ "version": "0.1.3",
4
4
  "description": "Offline methodology engine and payload workshop for authorized penetration testing, CTF, security research, and education via MCP. STDIO or Streamable HTTP.",
5
5
  "mcpName": "io.github.cyanheads/pentest-mcp-server",
6
6
  "type": "module",
@@ -34,6 +34,7 @@
34
34
  "bundle": "bun run build && npx -y @anthropic-ai/mcpb pack . dist/pentest-mcp-server.mcpb",
35
35
  "changelog:build": "bun run scripts/build-changelog.ts",
36
36
  "changelog:check": "bun run scripts/build-changelog.ts --check",
37
+ "release:github": "bun run scripts/release-github.ts",
37
38
  "test": "bunx vitest run",
38
39
  "start": "bun ./dist/index.js",
39
40
  "start:stdio": "MCP_TRANSPORT_TYPE=stdio bun ./dist/index.js",
@@ -82,17 +83,17 @@
82
83
  "access": "public"
83
84
  },
84
85
  "dependencies": {
85
- "@cyanheads/mcp-ts-core": "^0.9.16",
86
+ "@cyanheads/mcp-ts-core": "^0.9.21",
86
87
  "pino-pretty": "^13.1.3",
87
88
  "zod": "^4.4.3"
88
89
  },
89
90
  "devDependencies": {
90
- "@biomejs/biome": "^2.4.7",
91
- "@types/node": "^25.6.0",
91
+ "@biomejs/biome": "^2.4.16",
92
+ "@types/node": "^25.9.1",
92
93
  "depcheck": "^1.4.7",
93
94
  "ignore": "^7.0.5",
94
- "tsc-alias": "^1.8.16",
95
+ "tsc-alias": "^1.8.17",
95
96
  "typescript": "^5.9.3",
96
- "vitest": "^4.1.0"
97
+ "vitest": "^4.1.8"
97
98
  }
98
99
  }
package/server.json CHANGED
@@ -6,7 +6,7 @@
6
6
  "url": "https://github.com/cyanheads/pentest-mcp-server",
7
7
  "source": "github"
8
8
  },
9
- "version": "0.1.2",
9
+ "version": "0.1.3",
10
10
  "remotes": [
11
11
  {
12
12
  "type": "streamable-http",
@@ -19,7 +19,7 @@
19
19
  "registryBaseUrl": "https://registry.npmjs.org",
20
20
  "identifier": "@cyanheads/pentest-mcp-server",
21
21
  "runtimeHint": "bun",
22
- "version": "0.1.2",
22
+ "version": "0.1.3",
23
23
  "packageArguments": [
24
24
  {
25
25
  "type": "positional",
@@ -48,7 +48,7 @@
48
48
  "registryBaseUrl": "https://registry.npmjs.org",
49
49
  "identifier": "@cyanheads/pentest-mcp-server",
50
50
  "runtimeHint": "bun",
51
- "version": "0.1.2",
51
+ "version": "0.1.3",
52
52
  "packageArguments": [
53
53
  {
54
54
  "type": "positional",