@memrov2/pentcloud-service 0.0.0-stage → 0.1.1-dev.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 PentCloud contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,20 @@
-# Temporary Holding Version
+# PentCloud service
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Nmap, Naabu and Masscan in a separate native Cloudflare runtime. **Version 0.1.0 SDK.** The npm package contains adapter code only. Nmap image redistribution terms still apply.
+
+```sh
+npm install @memrov2/pentcloud-service@0.1.0
+```
+
+```js
+export { ServiceRunner } from '@memrov2/pentcloud-service/worker';
+const runner = env.TOOL.getByName(runId);
+try {
+  const result = await runner.run({tool:'nmap',target:'192.0.2.1',ports:[443]});
+  // Save the result in your existing private assessment store.
+} finally {
+  await runner.stop();
+}
+```
+
+Configure the matching named Container image. See [interfaces, build instructions, verification and limits](https://github.com/Memrov/PentCloud-tools/blob/main/docs/remaining-bundles.md) before integration. This package does not deploy or modify PentCloud.

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,9 @@
+# Third-party notices
+
+The original PentCloud adapter source and type declarations in this npm SDK are MIT licensed. The tarball includes pin metadata, but no third-party tool executables, source archives, datasets or container images.
+
+- Nmap 7.95: [Nmap Public Source License 0.95](https://svn.nmap.org/nmap-releases/nmap-7.95/LICENSE). The selected Debian distribution also carries its package copyright metadata; image redistribution requires review of the applicable terms.
+- Naabu 2.7.0: [MIT](https://github.com/projectdiscovery/naabu/blob/v2.7.0/LICENSE.md).
+- Masscan 1.3.2: [AGPLv3](https://github.com/robertdavidgraham/masscan/blob/1.3.2/LICENSE).
+
+Upstream programs, data and image dependencies retain their own licenses and notices. Image builders preserve those notices. Building or distributing a separate image requires compliance with its components' terms; this adapter SDK grants no additional rights to them. Image-specific cautions in `tools.lock.json` remain in effect.

package/package.json

@@ -1,6 +1,38 @@
 {
   "name": "@memrov2/pentcloud-service",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.1-dev.0",
+  "type": "module",
+  "license": "MIT",
+  "description": "Cloudflare-native service tool pack",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Memrov/PentCloud-tools.git",
+    "directory": "packages/service"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "exports": {
+    ".": {
+      "types": "./src/index.d.mts",
+      "import": "./src/index.mjs"
+    },
+    "./worker": {
+      "types": "./src/worker.d.mts",
+      "import": "./src/worker.mjs"
+    },
+    "./tools.lock.json": "./tools.lock.json"
+  },
+  "files": [
+    "src",
+    "tools.lock.json",
+    "LICENSE",
+    "THIRD_PARTY_NOTICES.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@memrov2/pentcloud-tool-runtime": "0.1.1-dev.0"
+  }
+}

package/src/index.d.mts

@@ -0,0 +1,12 @@
+import type { ToolCommand, PackLock } from "@memrov2/pentcloud-tool-runtime";
+export type PackRequest =
+  | { tool: "nmap" | "naabu"; target: string; ports: number[] }
+  | {
+      tool: "masscan";
+      target: string;
+      ports: number[];
+      adapter?: string;
+      routerMac?: string;
+    };
+export declare const lock: PackLock;
+export declare function buildCommand(input: PackRequest): ToolCommand;

package/src/index.mjs

@@ -0,0 +1,108 @@
+import lock from "../tools.lock.json" with { type: "json" };
+export { lock };
+export function buildCommand(input) {
+  if (
+    !input ||
+    Object.keys(input).some(
+      (k) => !["tool", "target", "ports", "adapter", "routerMac"].includes(k),
+    ) ||
+    !["nmap", "naabu", "masscan"].includes(input.tool)
+  )
+    throw new TypeError("Unsupported service request");
+  const host = input.target;
+  if (
+    typeof host !== "string" ||
+    !/^\d{1,3}(?:\.\d{1,3}){3}$/.test(host) ||
+    host.split(".").some((n) => Number(n) > 255 || String(Number(n)) !== n)
+  )
+    throw new TypeError("Select one explicit IPv4 address from recon results");
+  if (
+    !Array.isArray(input.ports) ||
+    !input.ports.length ||
+    input.ports.length > 16 ||
+    input.ports.some((p) => !Number.isInteger(p) || p < 1 || p > 65535)
+  )
+    throw new TypeError("Select one to sixteen explicit ports");
+  if (
+    input.tool !== "masscan" &&
+    (input.adapter !== undefined || input.routerMac !== undefined)
+  )
+    throw new TypeError("Adapter settings belong to Masscan");
+  if (
+    input.adapter !== undefined &&
+    (typeof input.adapter !== "string" ||
+      !/^[a-zA-Z0-9_.-]{1,15}$/.test(input.adapter))
+  )
+    throw new TypeError("Invalid network interface");
+  if (
+    input.routerMac !== undefined &&
+    (typeof input.routerMac !== "string" ||
+      !/^(?:[a-f0-9]{2}:){5}[a-f0-9]{2}$/i.test(input.routerMac))
+  )
+    throw new TypeError("Invalid router MAC");
+  const ports = [...new Set(input.ports)].sort((a, b) => a - b).join(",");
+  let args;
+  if (input.tool === "nmap")
+    args = [
+      "-sT",
+      "-Pn",
+      "-n",
+      "--max-retries",
+      "0",
+      "--max-rate",
+      "2",
+      "--host-timeout",
+      "30s",
+      "--open",
+      "-oX",
+      "-",
+      "-p",
+      ports,
+      host,
+    ];
+  else if (input.tool === "naabu")
+    args = [
+      "-host",
+      host,
+      "-p",
+      ports,
+      "-s",
+      "CONNECT",
+      "-rate",
+      "2",
+      "-c",
+      "1",
+      "-retries",
+      "1",
+      "-timeout",
+      "1000",
+      "-verify",
+      "-json",
+      "-silent",
+      "-duc",
+      "-no-stdin",
+    ];
+  else {
+    if (!/^\d+\.\d+\.\d+\.\d+$/.test(host))
+      throw new TypeError("Masscan requires one IPv4 address");
+    args = [
+      host + "/32",
+      "-p" + ports,
+      "--rate",
+      "2",
+      "--wait",
+      "2",
+      "--retries",
+      "0",
+      "-oJ",
+      "-",
+    ];
+    if (input.adapter) args.push("--adapter", input.adapter);
+    if (input.routerMac) args.push("--router-mac", input.routerMac);
+  }
+  return {
+    argv: ["/opt/pentcloud-service/bin/" + input.tool, ...args],
+    stdin: "",
+    timeoutMs: 75000,
+  };
+}

package/src/worker.d.mts

@@ -0,0 +1,14 @@
+import { DurableObject } from "cloudflare:workers";
+import type { ToolResult } from "@memrov2/pentcloud-tool-runtime";
+import type { PackRequest } from "./index.mjs";
+export declare class ServiceRunner extends DurableObject {
+  ready(): Promise<{ image: string; instance: "lite"; readyMs: number }>;
+  run(input: PackRequest): Promise<ToolResult>;
+  retire(): Promise<{ stopped: boolean; retired: true }>;
+  stop(): Promise<{ stopped: boolean }>;
+  capabilities(): Promise<{
+    platform: string;
+    architecture: string;
+    rawPacketSocket: boolean;
+  }>;
+}

package/src/worker.mjs

@@ -0,0 +1,3 @@
+import { createRunner } from "@memrov2/pentcloud-tool-runtime/worker";
+import { lock, buildCommand } from "./index.mjs";
+export const ServiceRunner = createRunner(lock, buildCommand);

package/tools.lock.json

@@ -0,0 +1,114 @@
+{
+  "schemaVersion": 1,
+  "packId": "service",
+  "packVersion": "0.1.0",
+  "platform": "linux/amd64",
+  "baseImage": "docker.io/library/debian@sha256:a72b4433de1cf7d6bae0c4cee74d0547f58601a643b3375f070c51600d63b6b2",
+  "tools": [
+    {
+      "tool": "nmap",
+      "version": "7.95"
+    },
+    {
+      "tool": "masscan",
+      "version": "1.3.2"
+    },
+    {
+      "tool": "naabu",
+      "version": "v2.7.0",
+      "url": "https://github.com/projectdiscovery/naabu/releases/download/v2.7.0/naabu_2.7.0_linux_amd64.zip",
+      "format": "zip",
+      "member": "naabu",
+      "sha256": "0cc77c0ca32d2f519ffbaa7665bb0e7c88c40753ab22f03551d453a1a823e9f0",
+      "binarySha256": "34b22eb195238380947792e9c83f4276d2182871df1842d2eb927db0659e6276"
+    }
+  ],
+  "assets": [],
+  "debs": [
+    {
+      "package": "libblas3",
+      "version": "3.12.1-6",
+      "url": "https://deb.debian.org/debian/pool/main/l/lapack/libblas3_3.12.1-6_amd64.deb",
+      "sha256": "4af245ecafc30bfa1de9d20af02fec96654ead2f06b1dac40cb03fc9eb0bfbe6",
+      "format": "deb"
+    },
+    {
+      "package": "libdbus-1-3",
+      "version": "1.16.2-2",
+      "url": "https://deb.debian.org/debian/pool/main/d/dbus/libdbus-1-3_1.16.2-2_amd64.deb",
+      "sha256": "bbcb711daff7e104b5f80f9b05475b6142674bfe65518a36a56e96a91068a3f5",
+      "format": "deb"
+    },
+    {
+      "package": "liblinear4",
+      "version": "2.3.0+dfsg-5+b2",
+      "url": "https://deb.debian.org/debian/pool/main/libl/liblinear/liblinear4_2.3.0%2bdfsg-5%2bb2_amd64.deb",
+      "sha256": "10a58649cab30f1671ea605372db284d1e0d67929c45568f2a6a8d52b805b643",
+      "format": "deb"
+    },
+    {
+      "package": "liblua5.4-0",
+      "version": "5.4.7-1+b2",
+      "url": "https://deb.debian.org/debian/pool/main/l/lua5.4/liblua5.4-0_5.4.7-1%2bb2_amd64.deb",
+      "sha256": "3456e23667f21a5bea4f2182ec878621bf4c47fbc9819fdaad8835d6d1ee6247",
+      "format": "deb"
+    },
+    {
+      "package": "libpcap0.8t64",
+      "version": "1.10.5-2",
+      "url": "https://deb.debian.org/debian/pool/main/libp/libpcap/libpcap0.8t64_1.10.5-2_amd64.deb",
+      "sha256": "6a756d536a5b0cd3ef92f19ff9f22ed80c66baadbc0fe55d599f4aa0c27d3f86",
+      "format": "deb"
+    },
+    {
+      "package": "libssh2-1t64",
+      "version": "1.11.1-1+deb13u2",
+      "url": "https://deb.debian.org/debian/pool/main/libs/libssh2/libssh2-1t64_1.11.1-1%2bdeb13u2_amd64.deb",
+      "sha256": "dbb1024c192d4d292b7cfa902b96076cfe81b56a5eed4fb28da36e8bf543e49a",
+      "format": "deb"
+    },
+    {
+      "package": "nmap-common",
+      "version": "7.95+dfsg-3",
+      "url": "https://deb.debian.org/debian/pool/main/n/nmap/nmap-common_7.95%2bdfsg-3_all.deb",
+      "sha256": "a24ae027e9f819fa11bf04224d09da0a3a5686ba8af347432a19657e89af42b4",
+      "format": "deb"
+    },
+    {
+      "package": "nmap",
+      "version": "7.95+dfsg-3",
+      "url": "https://deb.debian.org/debian/pool/main/n/nmap/nmap_7.95%2bdfsg-3_amd64.deb",
+      "sha256": "517b1c7558b7c1e7bc095fc7ed73432a26bff46e527a8fde9fea9289c9c1ee98",
+      "format": "deb"
+    },
+    {
+      "package": "masscan",
+      "version": "2:1.3.2+ds1-2",
+      "url": "https://deb.debian.org/debian/pool/main/m/masscan/masscan_1.3.2%2bds1-2_amd64.deb",
+      "sha256": "860f0d0175ca4b3b3ae8fc34aa7a873bcde34c1a0ceec1e4651cb9241d58850f",
+      "format": "deb"
+    }
+  ],
+  "executables": [
+    "nmap",
+    "masscan",
+    "naabu"
+  ],
+  "runtime": {
+    "enableInternet": true,
+    "vcpu": 1,
+    "memoryMib": 512,
+    "diskMb": 3000
+  },
+  "files": false,
+  "links": {
+    "nmap": "/usr/bin/nmap",
+    "masscan": "/usr/bin/masscan"
+  },
+  "filesystemLinks": {
+    "usr/lib/x86_64-linux-gnu/libblas.so.3": "blas/libblas.so.3"
+  },
+  "privateOnlyReasons": [
+    "Nmap NPSL redistribution requires review before public image publication"
+  ]
+}