@integsec/agentic-pentest-proxy 0.2.5 → 0.2.7

package/package.json

@@ -1,26 +1,37 @@
 {
   "name": "@integsec/agentic-pentest-proxy",
-  "version": "0.2.5",
+  "version": "0.2.7",
   "description": "IntegSec Agentic Pentest MCP Proxy — enforce penetration testing engagement scope for AI agents",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/IntegSec/agentic-pentest-proxy.git"
+  },
   "type": "module",
   "bin": {
+    "agentic-pentest-proxy": "dist/bin/integsec-agentic-pentest-proxy.js",
     "integsec-agentic-pentest-proxy": "dist/bin/integsec-agentic-pentest-proxy.js",
-    "integsec-agentic-pentest-tui": "dist/bin/integsec-agentic-pentest-tui.js"
+    "integsec-agentic-pentest-setup": "dist/bin/integsec-agentic-pentest-setup.js",
+    "integsec-agentic-pentest-tui": "dist/bin/integsec-agentic-pentest-tui.js",
+    "integsec-agentic-pentest-manifest": "dist/bin/integsec-agentic-pentest-manifest.js"
   },
   "files": [
     "dist/",
     "examples/",
-    "README.md"
+    "scripts/postinstall.cjs",
+    "README.md",
+    "LICENSE"
   ],
   "main": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",
   "scripts": {
-    "build": "tsc",
+    "build": "tsc && node -e \"const fs=require('fs'),path=require('path');const src='src/builder/web/client-form.html',dst='dist/src/builder/web/client-form.html';fs.mkdirSync(path.dirname(dst),{recursive:true});fs.copyFileSync(src,dst);console.log('Copied',src,'->',dst);\"",
     "dev": "tsc --watch",
     "test": "vitest run",
     "test:watch": "vitest",
+    "driver": "vitest run --config vitest.driver.config.ts",
     "lint": "tsc --noEmit",
-    "start": "node dist/bin/integsec-agentic-pentest-proxy.js"
+    "start": "node dist/bin/integsec-agentic-pentest-proxy.js",
+    "postinstall": "node scripts/postinstall.cjs"
   },
   "keywords": [
     "mcp",
@@ -35,29 +46,38 @@
     "offensive-security"
   ],
   "author": "IntegSec",
-  "license": "MIT",
+  "license": "Apache-2.0",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.0",
     "dotenv": "^16.4.0",
     "ink": "^5.2.1",
     "ink-spinner": "^5.0.0",
-    "ip-cidr": "^4.0.1",
+    "ipaddr.js": "^2.5.0",
     "react": "^18.3.1",
-    "zod": "^3.24.0"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
-    "@types/node": "^20.0.0",
+    "@types/node": "^22.20.5",
     "@types/react": "^18.3.28",
     "typescript": "^5.7.0",
-    "vitest": "^3.0.0"
+    "vitest": "^5.1.0"
   },
   "optionalDependencies": {
     "@aws-sdk/client-cloudwatch-logs": "^3.700.0",
+    "@aws-sdk/client-secrets-manager": "^3.1164.0",
     "@azure/identity": "^4.5.0",
-    "@azure/monitor-ingestion": "^1.1.0",
-    "@google-cloud/logging": "^11.0.0"
+    "@azure/keyvault-secrets": "^4.12.0",
+    "@azure/monitor-ingestion": "^1.1.0"
+  },
+  "peerDependencies": {
+    "@google-cloud/logging": "^12.3.0",
+    "@google-cloud/secret-manager": "^7.2.0"
+  },
+  "peerDependenciesMeta": {
+    "@google-cloud/logging": { "optional": true },
+    "@google-cloud/secret-manager": { "optional": true }
   },
   "engines": {
-    "node": ">=20.0.0"
+    "node": ">=22.0.0"
   }
 }

package/scripts/postinstall.cjs

@@ -0,0 +1,14 @@
+// This optional welcome note performs no network requests or file writes.
+if (!process.env.CI && process.env.INTEGSEC_NO_INSTALL_MESSAGE !== "1") {
+  const version = require("../package.json").version;
+  console.log(`
+  ┌─────────────────────────────────────────────────────┐
+  │  IntegSec Agentic Pentest Proxy v${version.padEnd(19)}│
+  │  Scope first. Tools second. Audit every decision.   │
+  └─────────────────────────────────────────────────────┘
+
+  Next: integsec-agentic-pentest-manifest new
+  Add an MCP tool: integsec-agentic-pentest-setup --help
+  Watch decisions: integsec-agentic-pentest-tui
+`);
+}

package/examples/scope-test-integsec.json

@@ -1,32 +0,0 @@
-{
-  "engagement_id": "ENG-2026-TEST-001",
-  "client": "IntegSec Internal",
-  "operator": "security@integsec.com",
-  "authorized_targets": {
-    "ip_ranges": [],
-    "domains": [
-      "turbopentest.com",
-      "*.turbopentest.com",
-      "integsec.com",
-      "*.integsec.com",
-      "lfo.pw",
-      "*.lfo.pw",
-      "pentestprepper.com",
-      "*.pentestprepper.com"
-    ],
-    "urls": [
-      "https://turbopentest.com",
-      "https://integsec.com",
-      "https://lfo.pw",
-      "https://pentestprepper.com"
-    ],
-    "cloud_accounts": []
-  },
-  "excluded_targets": [],
-  "authorized_techniques": ["recon", "web_app", "api_testing", "ssl_tls"],
-  "excluded_techniques": ["dos", "destructive", "social_engineering"],
-  "engagement_window": {
-    "start": "2026-03-27T00:00:00Z",
-    "end": "2026-04-27T23:59:59Z"
-  }
-}