blitzstrike 1.0.9 → 1.0.11

package/dist/index.js

@@ -1,5 +1,4 @@
-#!/usr/bin/env bun
-// @bun
+#!/usr/bin/env node
 var __create = Object.create;
 var __getProtoOf = Object.getPrototypeOf;
 var __defProp = Object.defineProperty;
@@ -6932,11 +6931,11 @@ var require_dist = __commonJS(function(exports, module) {
 });
 
 // src/sync.ts
-import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync2, readFileSync as readFileSync8, readdirSync as readdirSync4, statSync as statSync3, rmSync } from "fs";
-import { join as join8 } from "path";
-import { homedir as homedir4 } from "os";
-import { fileURLToPath as fileURLToPath6 } from "url";
-import { spawnSync as spawnSync3 } from "child_process";
+import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync2, readFileSync as readFileSync8, readdirSync as readdirSync4, statSync as statSync3, rmSync } from "node:fs";
+import { join as join8 } from "node:path";
+import { homedir as homedir4 } from "node:os";
+import { fileURLToPath as fileURLToPath6 } from "node:url";
+import { spawnSync as spawnSync3 } from "node:child_process";
 function dirExists(p) {
   try {
     return statSync3(p).isDirectory();
@@ -21565,7 +21564,7 @@ var EMPTY_COMPLETION_RESULT = {
 };
 
 // node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
-import process2 from "process";
+import process2 from "node:process";
 
 // node_modules/@modelcontextprotocol/sdk/dist/esm/shared/stdio.js
 var STDIO_DEFAULT_MAX_BUFFER_SIZE = 10 * 1024 * 1024;
@@ -21671,8 +21670,8 @@ class StdioServerTransport {
 }
 
 // src/scanner.ts
-import { readFileSync, readdirSync, statSync } from "fs";
-import { join } from "path";
+import { readFileSync, readdirSync, statSync } from "node:fs";
+import { join } from "node:path";
 var NOPRIV_HOOKS = [
   "wp_ajax_nopriv_",
   "admin_post_nopriv_",
@@ -22003,15 +22002,15 @@ async function nvdLookup(cveId) {
 }
 
 // src/orchestrator.ts
-import { readFileSync as readFileSync4, existsSync as existsSync3, statSync as statSync2 } from "fs";
-import { join as join4 } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
+import { readFileSync as readFileSync4, existsSync as existsSync3, statSync as statSync2 } from "node:fs";
+import { join as join4 } from "node:path";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/memory.ts
-import { readFileSync as readFileSync2, appendFileSync, mkdirSync, existsSync } from "fs";
-import { join as join2 } from "path";
-import { createHash } from "crypto";
-import { homedir } from "os";
+import { readFileSync as readFileSync2, appendFileSync, mkdirSync, existsSync } from "node:fs";
+import { join as join2 } from "node:path";
+import { createHash } from "node:crypto";
+import { homedir } from "node:os";
 var HOME_DIR = process.env.BLITZSTRIKE_HOME ?? join2(homedir(), ".blitzstrike");
 var MEMORY_PATH = join2(HOME_DIR, "memory.jsonl");
 function ensureDir() {
@@ -22126,9 +22125,9 @@ function rememberIfAbsent(topic, content, type, tags, source, verified) {
 }
 
 // src/manuals.ts
-import { readFileSync as readFileSync3, existsSync as existsSync2 } from "fs";
-import { join as join3 } from "path";
-import { fileURLToPath } from "url";
+import { readFileSync as readFileSync3, existsSync as existsSync2 } from "node:fs";
+import { join as join3 } from "node:path";
+import { fileURLToPath } from "node:url";
 var ROOT = join3(fileURLToPath(new URL(".", import.meta.url)), "..");
 var _indexCache = null;
 function loadManualIndex() {
@@ -22346,7 +22345,7 @@ function runEngagement(target, scope = "", mode = "bug-bounty", maxFiles = 2000,
     }
   })();
   if (isPath) {
-    report.scope = { target, allowed: true, enforcement: "source-audit", reason: "local source path \u2014 no network scope gate" };
+    report.scope = { target, allowed: true, enforcement: "source-audit", reason: "local source path — no network scope gate" };
   } else {
     const sc = scopeCheck(target, scope, mode);
     report.scope = sc;
@@ -22431,10 +22430,10 @@ function listChains() {
 }
 
 // src/catalog.ts
-import { readFileSync as readFileSync5, readdirSync as readdirSync2 } from "fs";
-import { join as join5 } from "path";
-import { fileURLToPath as fileURLToPath3 } from "url";
-import { spawnSync } from "child_process";
+import { readFileSync as readFileSync5, readdirSync as readdirSync2 } from "node:fs";
+import { join as join5 } from "node:path";
+import { fileURLToPath as fileURLToPath3 } from "node:url";
+import { spawnSync } from "node:child_process";
 var ROOT2 = join5(fileURLToPath3(new URL(".", import.meta.url)), "..");
 var _toolsCache = null;
 var _skillsCache = null;
@@ -22565,11 +22564,11 @@ function ensureTool(name) {
 }
 
 // src/intel.ts
-import { readFileSync as readFileSync6, existsSync as existsSync5 } from "fs";
-import { join as join6 } from "path";
-import { fileURLToPath as fileURLToPath4 } from "url";
-import { readdirSync as readdirSync3 } from "fs";
-import { homedir as homedir2 } from "os";
+import { readFileSync as readFileSync6, existsSync as existsSync5 } from "node:fs";
+import { join as join6 } from "node:path";
+import { fileURLToPath as fileURLToPath4 } from "node:url";
+import { readdirSync as readdirSync3 } from "node:fs";
+import { homedir as homedir2 } from "node:os";
 var ROOT3 = join6(fileURLToPath4(new URL(".", import.meta.url)), "..");
 var INTEL = join6(ROOT3, "intelligence");
 function loadJson(name) {
@@ -22956,10 +22955,10 @@ async function activeScan(target, scope = "", mode = "bug-bounty", allowed = und
   result.endpoints = await probeCommonPaths(base);
   const recs = [];
   if (result.waf?.detected)
-    recs.push(`WAF detected (${result.waf.wafs?.map((w) => w.waf).join(", ")}) \u2014 apply WAF bypass before exploitation.`);
+    recs.push(`WAF detected (${result.waf.wafs?.map((w) => w.waf).join(", ")}) — apply WAF bypass before exploitation.`);
   const interesting = result.endpoints?.filter((e) => e.status >= 200 && e.status < 400 && !e.path.includes(".well-known"));
   if (interesting && interesting.length > 0) {
-    recs.push(`Live endpoints found: ${interesting.map((e) => e.path).join(", ")} \u2014 trace these with EAGLE-EYE / verify with STRIKE.`);
+    recs.push(`Live endpoints found: ${interesting.map((e) => e.path).join(", ")} — trace these with EAGLE-EYE / verify with STRIKE.`);
   }
   for (const c of result.tech?.correlations ?? []) {
     recs.push(`Tech '${c.tech}' maps to known vuln classes: ${(c.vulns ?? []).slice(0, 3).join(", ")}`);
@@ -22987,7 +22986,7 @@ function createServer() {
 ` + `- read_playbook/read_tool_manual: 270 tool manuals + 17 engagement playbooks.
 ` + `- remember/memory_lookup: persist + recall verified knowledge across runs.
 ` + `- scope_check: enforce scope before active testing (bug-bounty/red-team = strict).
-` + `- active_scan: live black-box scan (fingerprint/WAF/tech/endpoints) \u2014 GATED by scope_check;
+` + `- active_scan: live black-box scan (fingerprint/WAF/tech/endpoints) — GATED by scope_check;
 ` + `  it only probes after scope authorizes the target or the caller sets authorize=true.
 ` + `- nvd_lookup/fofa_search: CVE + asset recon.
 
@@ -23138,7 +23137,7 @@ function createServer() {
   });
   server.registerTool("active_scan", {
     title: "STRIKE live black-box scan",
-    description: "STRIKE: live black-box scan of a URL \u2014 fingerprint, WAF detection, tech correlation, endpoint discovery. GATED: runs only after scope_check authorizes the target (approval gate).",
+    description: "STRIKE: live black-box scan of a URL — fingerprint, WAF detection, tech correlation, endpoint discovery. GATED: runs only after scope_check authorizes the target (approval gate).",
     inputSchema: {
       target: string2().describe("Target URL/host to scan"),
       scope: string2().optional().describe("In-scope patterns (required for strict modes)"),
@@ -23434,11 +23433,11 @@ async function serve() {
 }
 
 // src/cli.ts
-import { readFileSync as readFileSync7, existsSync as existsSync6, writeFileSync, mkdirSync as mkdirSync2 } from "fs";
-import { join as join7, dirname } from "path";
-import { homedir as homedir3 } from "os";
-import { fileURLToPath as fileURLToPath5 } from "url";
-import { spawnSync as spawnSync2 } from "child_process";
+import { readFileSync as readFileSync7, existsSync as existsSync6, writeFileSync, mkdirSync as mkdirSync2 } from "node:fs";
+import { join as join7, dirname } from "node:path";
+import { homedir as homedir3 } from "node:os";
+import { fileURLToPath as fileURLToPath5 } from "node:url";
+import { spawnSync as spawnSync2 } from "node:child_process";
 var ROOT4 = join7(fileURLToPath5(new URL(".", import.meta.url)), "..");
 function which(cmd) {
   return spawnSync2(`command -v ${cmd}`, { shell: true }).status === 0;
@@ -23449,7 +23448,7 @@ function installedCount() {
   return { total: tools.length, installed, missing: tools.map((t) => t.name).filter((n) => !installed.includes(n)) };
 }
 function runDoctor() {
-  console.log(`BlitzStrike doctor \u2014 environment health check
+  console.log(`BlitzStrike doctor — environment health check
 `);
   const issues = [];
   const bunOk = which("bun") || which("node");
@@ -23489,13 +23488,13 @@ function runDoctor() {
   }
   if (installed.length > 0) {
     console.log(`
-Installed tools (${installed.length}): ${installed.slice(0, 15).join(", ")}${installed.length > 15 ? ", \u2026" : ""}`);
+Installed tools (${installed.length}): ${installed.slice(0, 15).join(", ")}${installed.length > 15 ? ", …" : ""}`);
   }
   const fails = issues.filter((i) => i.status === "fail").length;
   const warns = issues.filter((i) => i.status === "warn").length;
   const verdict = fails > 0 ? "degraded" : warns > 0 ? "ready (some warnings)" : "healthy";
   console.log(`
-BlitzStrike \u2014 ${verdict}`);
+BlitzStrike — ${verdict}`);
   if (fails > 0)
     process.exitCode = 1;
 }
@@ -23505,10 +23504,14 @@ function resolveCommand() {
   const src = join7(ROOT4, "src", "index.ts");
   if (which("bun") && existsSync6(src))
     return { command: "bun", args: ["run", src, "serve", "--mcp"] };
+  if (which("npx"))
+    return { command: "npx", args: ["-y", "blitzstrike", "serve", "--mcp"] };
+  if (which("bunx"))
+    return { command: "bunx", args: ["blitzstrike", "serve", "--mcp"] };
   const dist = join7(ROOT4, "dist", "index.js");
   if (existsSync6(dist))
     return { command: "bun", args: [dist, "serve", "--mcp"] };
-  return { command: "blitzstrike", args: ["serve", "--mcp"] };
+  return { command: "npx", args: ["-y", "blitzstrike", "serve", "--mcp"] };
 }
 function readJson(p) {
   try {
@@ -23531,14 +23534,14 @@ function jsonMcpServersWrite(p) {
   };
 }
 function opencodeWrite(p) {
-  return (command, args) => {
+  return (_command, _args) => {
     const dir = dirname(p);
     if (!existsSync6(dir))
       mkdirSync2(dir, { recursive: true });
     const existing = readJson(p) ?? {};
     existing.mcp = {
       ...existing.mcp ?? {},
-      blitzstrike: { type: "local", command: [command, ...args], enabled: true }
+      blitzstrike: { type: "local", command: ["npx", "-y", "blitzstrike", "serve", "--mcp"], enabled: true }
     };
     writeFileSync(p, JSON.stringify(existing, null, 2));
     copyOpenCodeAgents();
@@ -23686,7 +23689,7 @@ function runInstall(dryRun = false) {
   const { command, args } = resolveCommand();
   const agents = detectAgents();
   const installed = agents.filter((a) => a.installed());
-  console.log(`Blitz Strike install \u2014 register with every detected agent CLI
+  console.log(`Blitz Strike install — register with every detected agent CLI
 `);
   console.log(`Resolved command: ${command} ${args.join(" ")}
 `);
@@ -23700,7 +23703,7 @@ Agent-specific formats: see docs/installation.md`);
   console.log(`Detected ${installed.length} agent(s): ${installed.map((a) => a.name).join(", ")}
 `);
   if (dryRun) {
-    console.log("Dry run \u2014 would write to each config (no changes made):");
+    console.log("Dry run — would write to each config (no changes made):");
     for (const a of installed)
       console.log(`  - ${a.name}  ->  ${a.detectPath}`);
     return;
@@ -23721,9 +23724,21 @@ Registered with ${ok}/${installed.length} agent(s).`);
 }
 
 // src/index.ts
-var VERSION = "1.0.0";
+import { readFileSync as readFileSync9, existsSync as existsSync8 } from "node:fs";
+import { join as join9 } from "node:path";
+import { fileURLToPath as fileURLToPath7 } from "node:url";
+var ROOT6 = join9(fileURLToPath7(new URL(".", import.meta.url)), "..");
+function readVersion() {
+  try {
+    const p = join9(ROOT6, "package.json");
+    if (existsSync8(p))
+      return JSON.parse(readFileSync9(p, "utf8")).version ?? "1.0.0";
+  } catch {}
+  return "1.0.0";
+}
+var VERSION = readVersion();
 function usage() {
-  return `BlitzStrike ${VERSION} \u2014 MCP security-audit toolbelt
+  return `BlitzStrike ${VERSION} — MCP security-audit toolbelt
 
 Usage:
   blitzstrike serve --mcp       Start the MCP server over stdio (default transport)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blitzstrike",
-  "version": "1.0.9",
+  "version": "1.0.11",
   "description": "Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data layer. One server, every agent.",
   "type": "module",
   "bin": {
@@ -24,7 +24,7 @@
     "docs"
   ],
   "scripts": {
-    "build": "bun build src/index.ts --outdir dist --target bun --format esm",
+    "build": "bun build src/index.ts --outdir dist --target node --format esm",
     "typecheck": "tsc --noEmit",
     "serve": "bun run src/index.ts serve",
     "doctor": "bun run src/index.ts doctor",