@cyanheads/pentest-mcp-server 0.1.5 → 0.1.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. package/AGENTS.md +2 -2
  2. package/CLAUDE.md +2 -2
  3. package/README.md +1 -1
  4. package/changelog/0.1.x/0.1.6.md +26 -0
  5. package/package.json +4 -4
  6. package/server.json +3 -3
package/AGENTS.md CHANGED
@@ -1,8 +1,8 @@
1
1
  # Developer Protocol
2
2
 
3
3
  **Server:** pentest-mcp-server
4
- **Version:** 0.1.5
5
- **Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.10.6`
4
+ **Version:** 0.1.6
5
+ **Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.10.9`
6
6
  **Engines:** Bun ≥1.3.0, Node ≥24.0.0
7
7
  **MCP SDK:** `@modelcontextprotocol/sdk` ^1.29.0
8
8
  **Zod:** ^4.4.3
package/CLAUDE.md CHANGED
@@ -1,8 +1,8 @@
1
1
  # Developer Protocol
2
2
 
3
3
  **Server:** pentest-mcp-server
4
- **Version:** 0.1.5
5
- **Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.10.6`
4
+ **Version:** 0.1.6
5
+ **Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.10.9`
6
6
  **Engines:** Bun ≥1.3.0, Node ≥24.0.0
7
7
  **MCP SDK:** `@modelcontextprotocol/sdk` ^1.29.0
8
8
  **Zod:** ^4.4.3
package/README.md CHANGED
@@ -7,7 +7,7 @@
7
7
 
8
8
  <div align="center">
9
9
 
10
- [![Version](https://img.shields.io/badge/Version-0.1.5-blue.svg?style=flat-square)](./CHANGELOG.md) [![License](https://img.shields.io/badge/License-Apache%202.0-orange.svg?style=flat-square)](./LICENSE) [![Docker](https://img.shields.io/badge/Docker-ghcr.io-2496ED?style=flat-square&logo=docker&logoColor=white)](https://github.com/users/cyanheads/packages/container/package/pentest-mcp-server) [![MCP SDK](https://img.shields.io/badge/MCP%20SDK-^1.29.0-green.svg?style=flat-square)](https://modelcontextprotocol.io/) [![npm](https://img.shields.io/npm/v/@cyanheads/pentest-mcp-server?style=flat-square&logo=npm&logoColor=white)](https://www.npmjs.com/package/@cyanheads/pentest-mcp-server) [![TypeScript](https://img.shields.io/badge/TypeScript-^6.0.3-3178C6.svg?style=flat-square)](https://www.typescriptlang.org/) [![Bun](https://img.shields.io/badge/Bun-v1.3.0-blueviolet.svg?style=flat-square)](https://bun.sh/)
10
+ [![Version](https://img.shields.io/badge/Version-0.1.6-blue.svg?style=flat-square)](./CHANGELOG.md) [![License](https://img.shields.io/badge/License-Apache%202.0-orange.svg?style=flat-square)](./LICENSE) [![Docker](https://img.shields.io/badge/Docker-ghcr.io-2496ED?style=flat-square&logo=docker&logoColor=white)](https://github.com/users/cyanheads/packages/container/package/pentest-mcp-server) [![MCP SDK](https://img.shields.io/badge/MCP%20SDK-^1.29.0-green.svg?style=flat-square)](https://modelcontextprotocol.io/) [![npm](https://img.shields.io/npm/v/@cyanheads/pentest-mcp-server?style=flat-square&logo=npm&logoColor=white)](https://www.npmjs.com/package/@cyanheads/pentest-mcp-server) [![TypeScript](https://img.shields.io/badge/TypeScript-^6.0.3-3178C6.svg?style=flat-square)](https://www.typescriptlang.org/) [![Bun](https://img.shields.io/badge/Bun-v1.3.0-blueviolet.svg?style=flat-square)](https://bun.sh/)
11
11
 
12
12
  </div>
13
13
 
package/changelog/0.1.x/0.1.6.md ADDED
@@ -0,0 +1,26 @@
1
+ ---
2
+ summary: "Adopt @cyanheads/mcp-ts-core 0.10.9 — check-dependency-specifiers devcheck guard, plugin-manifest packaging checks, fresh-scaffold and worktree-deletion guards; re-sync six vendored scripts and fourteen skills; dependency refresh"
3
+ breaking: false
4
+ security: false
5
+ ---
6
+
7
+ # 0.1.6 — 2026-06-20
8
+
9
+ ## Added
10
+
11
+ - **`scripts/check-dependency-specifiers.ts`** (vendored) — new `Dependency Specifiers` devcheck step (`--no-dep-specifiers`) that hard-fails on floating specifiers (`latest`, `*`, pre-release dist-tags `next`/`beta`/`canary`/`rc`) in `package.json`'s dependency sections and `bun.lock`'s `workspaces` map. Catches `bun update --latest` writing a literal `latest` dist-tag into the lock's workspace map, which clears every other gate then lets the next `bun install` re-resolve past the `package.json` range. Static and local — runs in the default and `--fast` passes. ([cyanheads/mcp-ts-core#246](https://github.com/cyanheads/mcp-ts-core/issues/246))
12
+ - **Plugin marketplace manifest checks in `scripts/lint-packaging.ts`** (vendored) — check 10 validates `.claude-plugin/plugin.json` and `.codex-plugin/plugin.json`: non-empty descriptions, display fields (`name`, server key, `interface.displayName`) carrying the unscoped `pentest-mcp-server`, and the `npx -y` install arg carrying the full `@cyanheads/pentest-mcp-server`. Gated by the new `devcheck.config.json` `packaging.pluginManifests` flag (set to `true`); each manifest is skipped cleanly when absent. ([cyanheads/mcp-ts-core#240](https://github.com/cyanheads/mcp-ts-core/issues/240))
13
+
14
+ ## Changed
15
+
16
+ - **`@cyanheads/mcp-ts-core`** `^0.10.6 → ^0.10.9`.
17
+ - **`devcheck.config.json`** — added `packaging.pluginManifests: true`, enabling check 10 above.
18
+ - **Vendored devcheck scripts re-synced to mcp-ts-core 0.10.9** — `scripts/devcheck.ts` registers the `Dependency Specifiers` step and skips git-dependent checks (TODOs/FIXMEs, Tracked Secrets, Framework Antipatterns) via a shared `isGitRepo()` guard on a fresh scaffold; `scripts/build-changelog.ts` exits cleanly under `--check` when no `<major.minor>.x/` version files exist; `scripts/check-framework-antipatterns.ts` self-guards outside a git repo; `scripts/check-skill-versions.ts` skips a `SKILL.md` deleted from the worktree instead of crashing with ENOENT. ([cyanheads/mcp-ts-core#237](https://github.com/cyanheads/mcp-ts-core/issues/237), [#242](https://github.com/cyanheads/mcp-ts-core/issues/242), [#243](https://github.com/cyanheads/mcp-ts-core/issues/243), [#246](https://github.com/cyanheads/mcp-ts-core/issues/246))
19
+ - **Vendored skills re-synced to mcp-ts-core 0.10.9** — fourteen `skills/<name>/SKILL.md` files updated with body refreshes and `metadata.version` bumps: `add-tool`, `api-auth`, `api-canvas`, `api-config`, `api-context`, `api-errors`, `api-services`, `api-telemetry`, `field-test`, `git-wrapup`, `orchestrations`, `polish-docs-meta`, `report-issue-local`, `tool-defs-analysis`. Mirrored into `.claude/skills/`. ([cyanheads/mcp-ts-core#238](https://github.com/cyanheads/mcp-ts-core/issues/238))
20
+
21
+ ### Dependency bumps
22
+
23
+ - `@types/node` `^25.9.3 → ^26.0.0`
24
+ - `vitest` `^4.1.8 → ^4.1.9`
25
+ </content>
26
+ </invoke>
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@cyanheads/pentest-mcp-server",
3
- "version": "0.1.5",
3
+ "version": "0.1.6",
4
4
  "description": "Offline methodology engine and payload workshop for authorized penetration testing, CTF, security research, and education via MCP. STDIO or Streamable HTTP.",
5
5
  "mcpName": "io.github.cyanheads/pentest-mcp-server",
6
6
  "type": "module",
@@ -83,17 +83,17 @@
83
83
  "access": "public"
84
84
  },
85
85
  "dependencies": {
86
- "@cyanheads/mcp-ts-core": "^0.10.6",
86
+ "@cyanheads/mcp-ts-core": "^0.10.9",
87
87
  "pino-pretty": "^13.1.3",
88
88
  "zod": "^4.4.3"
89
89
  },
90
90
  "devDependencies": {
91
91
  "@biomejs/biome": "^2.5.0",
92
- "@types/node": "^25.9.3",
92
+ "@types/node": "^26.0.0",
93
93
  "depcheck": "^1.4.7",
94
94
  "ignore": "^7.0.5",
95
95
  "tsc-alias": "^1.8.17",
96
96
  "typescript": "^6.0.3",
97
- "vitest": "^4.1.8"
97
+ "vitest": "^4.1.9"
98
98
  }
99
99
  }
package/server.json CHANGED
@@ -6,7 +6,7 @@
6
6
  "url": "https://github.com/cyanheads/pentest-mcp-server",
7
7
  "source": "github"
8
8
  },
9
- "version": "0.1.5",
9
+ "version": "0.1.6",
10
10
  "remotes": [
11
11
  {
12
12
  "type": "streamable-http",
@@ -19,7 +19,7 @@
19
19
  "registryBaseUrl": "https://registry.npmjs.org",
20
20
  "identifier": "@cyanheads/pentest-mcp-server",
21
21
  "runtimeHint": "bun",
22
- "version": "0.1.5",
22
+ "version": "0.1.6",
23
23
  "packageArguments": [
24
24
  {
25
25
  "type": "positional",
@@ -48,7 +48,7 @@
48
48
  "registryBaseUrl": "https://registry.npmjs.org",
49
49
  "identifier": "@cyanheads/pentest-mcp-server",
50
50
  "runtimeHint": "bun",
51
- "version": "0.1.5",
51
+ "version": "0.1.6",
52
52
  "packageArguments": [
53
53
  {
54
54
  "type": "positional",