pentesting 0.90.2 → 0.90.3

package/README.md

@@ -3,26 +3,106 @@
 `pentesting` is the public npm facade for the Builder runtime.
 
 - Installs the `pentesting` CLI.
-- Keeps `builder` as a temporary compatibility alias.
-- Downloads the matching Builder binary from `agnusdei1207/builder` releases for the current OS/CPU.
-- Performs only minimal wrapping before delegating execution to the Rust Builder binary.
+- Downloads the matching Builder binary from `agnusdei1207/builder-public` releases for the current OS/CPU.
+- Performs only binary resolution and direct argument forwarding before delegating execution to the Rust Builder binary.
+- Launches the same runtime with a `pentesting` banner while keeping Builder as the single internal engine.
 - Does not ship a second JavaScript or TypeScript runtime.
 
+<div align="center">
+
+<div style="background-color: #050a09; border: 1px solid rgba(0, 200, 160, 0.2); border-radius: 12px; max-width: 560px; font-family: 'JetBrains Mono', monospace; overflow: hidden; box-shadow: 0 20px 40px rgba(0,0,0,0.65); margin: 24px auto; text-align: left;">
+
+  <!-- Title bar -->
+  <div style="background-color: #0d1c18; border-bottom: 1px solid rgba(0, 200, 160, 0.1); padding: 10px 16px; display: flex; align-items: center; justify-content: space-between;">
+    <div style="display: flex; gap: 6px;">
+      <span style="width: 10px; height: 10px; border-radius: 50%; background-color: #ff5f56; display: inline-block;"></span>
+      <span style="width: 10px; height: 10px; border-radius: 50%; background-color: #ffbd2e; display: inline-block;"></span>
+      <span style="width: 10px; height: 10px; border-radius: 50%; background-color: #27c93f; display: inline-block;"></span>
+    </div>
+    <span style="font-size: 11px; color: #537a6c;">pentesting-tui · wsl</span>
+  </div>
+
+  <!-- Card header -->
+  <div style="background-color: rgba(0, 200, 160, 0.05); border-bottom: 1px solid rgba(0, 200, 160, 0.1); padding: 6px 16px; color: #00c8a0; font-size: 12px; font-weight: bold;">pentesting latest</div>
+
+  <!-- Card body -->
+  <table style="width: 100%; border-collapse: collapse; border: none; background: transparent; margin: 0;">
+    <tr style="border: none; background: transparent;">
+      <!-- Left Side: Status & Logo -->
+      <td style="width: 45%; padding: 20px; text-align: center; border-right: 1px solid rgba(0, 200, 160, 0.1); vertical-align: top; border-left: none; border-top: none; border-bottom: none; background: transparent;">
+        <div style="color: #e8fff8; font-weight: 700; font-size: 13px; margin-bottom: 16px;">Welcome back!</div>
+        <div style="margin: 0 auto; width: 64px; height: 58px; display: block; filter: drop-shadow(0 0 8px rgba(0, 200, 160, 0.35));">
+          <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 90" width="100%" height="100%">
+            <defs>
+              <mask id="headMask">
+                <rect x="0" y="0" width="100" height="100" fill="#ffffff" />
+                <rect x="33.25" y="59.5" width="5.5" height="5" fill="#000000" />
+                <rect x="61.25" y="59.5" width="5.5" height="5" fill="#000000" />
+              </mask>
+            </defs>
+            <rect x="15" y="10" width="70" height="52" rx="10" fill="none" stroke="#00c8a0" stroke-width="4.5" mask="url(#headMask)" />
+            <line x1="36" y1="59.75" x2="36" y2="78" stroke="#00c8a0" stroke-width="5.5" stroke-linecap="butt" />
+            <line x1="64" y1="59.75" x2="64" y2="78" stroke="#00c8a0" stroke-width="5.5" stroke-linecap="butt" />
+            <circle cx="36" cy="36" r="9.5" fill="none" stroke="#00c8a0" stroke-width="3" />
+            <circle cx="38.5" cy="33.5" r="2.8" fill="#00c8a0" />
+            <circle cx="64" cy="36" r="9.5" fill="none" stroke="#00c8a0" stroke-width="3" />
+            <circle cx="66.5" cy="33.5" r="2.8" fill="#00c8a0" />
+          </svg>
+        </div>
+        <div style="color: #a0cfbf; font-size: 11px; margin-top: 16px; font-weight: 600;">your-model · your-provider</div>
+        <div style="color: #537a6c; font-size: 10px; margin-top: 4px; word-break: break-all;">...orkspace/builder-private</div>
+      </td>
+      <!-- Right Side: Quick Commands -->
+      <td style="padding: 20px; vertical-align: top; text-align: left; border-left: none; border-top: none; border-bottom: none; border-right: none; background: transparent;">
+        <div style="color: #e8fff8; font-weight: 700; font-size: 13px; margin-bottom: 12px;">Quick commands</div>
+        <table style="width: 100%; border-collapse: collapse; font-size: 11px; text-align: left; border: none; background: transparent; margin: 0;">
+          <tr style="border: none; background: transparent;"><td style="color: #00c8a0; font-weight: 700; padding: 3px 12px 3px 0; white-space: nowrap; border: none; background: transparent;">/new</td><td style="color: #a0cfbf; padding: 3px 0; border: none; background: transparent;">New conversation</td></tr>
+          <tr style="border: none; background: transparent;"><td style="color: #00c8a0; font-weight: 700; padding: 3px 12px 3px 0; white-space: nowrap; border: none; background: transparent;">/model</td><td style="color: #a0cfbf; padding: 3px 0; border: none; background: transparent;">Switch model</td></tr>
+          <tr style="border: none; background: transparent;"><td style="color: #00c8a0; font-weight: 700; padding: 3px 12px 3px 0; white-space: nowrap; border: none; background: transparent;">/goal &lt;task&gt;</td><td style="color: #a0cfbf; padding: 3px 0; border: none; background: transparent;">Set active goal</td></tr>
+          <tr style="border: none; background: transparent;"><td style="color: #00c8a0; font-weight: 700; padding: 3px 12px 3px 0; white-space: nowrap; border: none; background: transparent;">/goal</td><td style="color: #a0cfbf; padding: 3px 0; border: none; background: transparent;">Clear goal</td></tr>
+          <tr style="border: none; background: transparent;"><td style="color: #00c8a0; font-weight: 700; padding: 3px 12px 3px 0; white-space: nowrap; border: none; background: transparent;">/auto</td><td style="color: #a0cfbf; padding: 3px 0; border: none; background: transparent;">Toggle goal auto</td></tr>
+          <tr style="border: none; background: transparent;"><td style="color: #00c8a0; font-weight: 700; padding: 3px 12px 3px 0; white-space: nowrap; border: none; background: transparent;">/config</td><td style="color: #a0cfbf; padding: 3px 0; border: none; background: transparent;">Edit configuration</td></tr>
+          <tr style="border: none; background: transparent;"><td style="color: #00c8a0; font-weight: 700; padding: 3px 12px 3px 0; white-space: nowrap; border: none; background: transparent;">/help</td><td style="color: #a0cfbf; padding: 3px 0; border: none; background: transparent;">Show all commands</td></tr>
+          <tr style="border: none; background: transparent;"><td style="color: #00c8a0; font-weight: 700; padding: 3px 12px 3px 0; white-space: nowrap; border: none; background: transparent;">/exit</td><td style="color: #a0cfbf; padding: 3px 0; border: none; background: transparent;">Quit</td></tr>
+        </table>
+      </td>
+    </tr>
+  </table>
+
+  <!-- Bottom prompt bar -->
+  <div style="border-top: 1px solid rgba(0, 200, 160, 0.1); padding: 12px 16px; font-size: 11px;">
+    <div style="color: #a0cfbf; display: flex; align-items: center; gap: 8px;">
+      <span style="color: #00c8a0;">⠸</span> Processing · analyzing workspace structure
+    </div>
+    <div style="height: 1px; background-color: rgba(0, 200, 160, 0.08); margin: 8px 0;"></div>
+    <div style="font-size: 12px; color: #e8fff8;">
+      <span style="color: #00c8a0; font-weight: bold;">❯ </span>pentesting<span style="background-color: #00c8a0; color: #020504; display: inline-block; width: 8px; height: 15px; vertical-align: middle; margin-left: 2px;"></span>
+    </div>
+    <div style="height: 1px; background-color: rgba(0, 200, 160, 0.08); margin: 8px 0;"></div>
+    <div style="color: #537a6c; font-size: 10px;">Esc to interrupt</div>
+  </div>
+
+</div>
+
+</div>
+
+---
+
 ## Install
 
 ```bash
 npm install -g pentesting
 pentesting
-builder --version
+pentesting --version
 ```
 
 ## Quick commands
 
 ```bash
 pentesting
-pentesting run "Enumerate the target web application and summarize the next actions."
-pentesting scan 10.10.10.10
-builder --version
+pentesting --prompt "Enumerate the target web application and summarize the next actions."
+pentesting shell-listener --bind 127.0.0.1 --port 4444
+pentesting --version
 ```
 
 Inside the interactive TUI:
@@ -50,12 +130,12 @@ This means the outside package name is `pentesting`, but the actual runtime engi
 
 ## Thin-wrapper design
 
-The npm package is intentionally narrow.
+The npm package is intentionally narrow and does not keep legacy command translators.
 
 - it installs a launcher, not a second agent runtime
 - it resolves or downloads the correct Builder release asset
-- it forwards execution into the Rust Builder binary
-- it keeps only minimal compatibility translation for legacy `interactive`, `run`, and `scan` entrypoints
+- it forwards arguments directly into the Rust Builder binary
+- it does not translate `interactive`, `run`, `scan`, old target flags, or permission-bypass flags
 
 If a change would add orchestration, memory, monitoring, or prompt-management logic directly into the npm layer, that change belongs upstream in Builder instead.
 
@@ -69,6 +149,7 @@ Because `pentesting` delegates to the Rust Builder runtime, it inherits the same
 - context compression for long-running sessions
 - workflow status, budget, proof, and verification signals in the TUI
 - Docker and npm entrypoints that share one runtime instead of diverging implementations
+- the explicit `shell-listener` command for authorized lab multi-session TCP handling with per-session routing, output buffering, and PTY-upgrade helpers
 
 ## Docker and compose alternative
 
@@ -104,20 +185,19 @@ PENTESTING_PROJECT_DIR=/path/to/project docker compose run pentesting
 | Variable | Description |
 | --- | --- |
 | `BUILDER_BIN` | Use an already-installed Builder binary instead of the managed download. |
-| `BUILDER_REPO` | Override the public release repo used for binary downloads. Defaults to `agnusdei1207/builder`. |
+| `BUILDER_PRODUCT_NAME` | Runtime banner label. The `pentesting` launcher sets this to `pentesting` automatically. |
+| `BUILDER_REPO` | Override the public release repo used for binary downloads. Defaults to `agnusdei1207/builder-public`. |
 | `BUILDER_SKIP_DOWNLOAD` | Skip the postinstall binary download. Useful in CI or when `BUILDER_BIN` will be provided later. |
 
-## Compatibility wrappers
+## Command behavior
 
-- `pentesting` / `pentesting interactive` starts Builder interactive mode.
-- `pentesting run "<objective>"` becomes a Builder prompt tailored for the objective.
-- `pentesting scan <target>` becomes a Builder prompt tailored for recon and pentest scanning.
-- `builder` remains available as a compatibility alias during the naming transition.
+- `pentesting` with no extra arguments starts the Builder interactive/default flow.
+- `pentesting --prompt "<objective>"` runs a direct Builder prompt.
+- `pentesting shell-listener --bind 127.0.0.1 --port 4444` starts the explicit listener command.
+- Arguments are passed through exactly; removed legacy commands are not translated.
 
 ## Runtime behavior notes
 
-- `pentesting` with no extra arguments starts the Builder interactive/default flow.
-- `builder` and `pentesting` share the same wrapper entrypoint in the public package.
 - Docker and npm both end up delegating to the same upstream Builder runtime, so differences are usually install/configuration problems rather than different products.
 
 ## Runtime cautions
@@ -141,7 +221,7 @@ NPM_TOKEN=... npm run pentesting:publish -- 0.90.1
 
 ## Further reading
 
-- public Builder runtime docs and Docker guidance
+- public Builder runtime docs and Docker guidance at `https://agnusdei1207.github.io/builder-public/`
 - the mirrored public `compose.yaml` facade for Docker sessions
 - the Builder release asset matching your OS/CPU target
 

package/bin/pentesting.mjs

@@ -2,7 +2,11 @@
 
 import { spawnSync } from "node:child_process";
 
-import { resolveBuilderBinary, translateBuilderInvocation } from "../lib/runtime.mjs";
+import {
+  pentestingEnvironment,
+  resolveBuilderBinary,
+  translateBuilderInvocation,
+} from "../lib/runtime.mjs";
 
 async function main() {
   const invocation = translateBuilderInvocation(process.argv.slice(2));
@@ -13,7 +17,7 @@ async function main() {
   const builderBinary = await resolveBuilderBinary({ downloadIfMissing: true });
   const result = spawnSync(builderBinary, invocation.builderArgs, {
     stdio: "inherit",
-    env: process.env,
+    env: pentestingEnvironment(process.env),
   });
 
   if (result.error) {

package/lib/runtime.mjs

@@ -12,26 +12,6 @@ const PACKAGE_JSON = JSON.parse(
 );
 const MANAGED_BINARY_DIR = path.join(PACKAGE_ROOT, "vendor");
 const MANAGED_BINARY_MANIFEST = path.join(MANAGED_BINARY_DIR, "builder-manifest.json");
-const BUILDER_COMMANDS = new Set([
-  "agent",
-  "banner",
-  "cmd",
-  "commit",
-  "config",
-  "conversation",
-  "data",
-  "doctor",
-  "info",
-  "list",
-  "mcp",
-  "provider",
-  "setup",
-  "suggest",
-  "update",
-  "vscode",
-  "workspace",
-  "zsh",
-]);
 
 const RELEASE_TARGETS = {
   "android:arm64": {
@@ -71,194 +51,27 @@ const RELEASE_TARGETS = {
   },
 };
 
-function parseLegacyFlags(argv) {
-  const passthrough = [];
-  const warnings = [];
-
-  for (let index = 0; index < argv.length; index += 1) {
-    const current = argv[index];
-
-    if (current === "--dangerously-skip-permissions") {
-      warnings.push(
-        "Legacy '--dangerously-skip-permissions' is ignored. Builder owns approval handling inside its runtime.",
-      );
-      continue;
-    }
-
-    if (current === "--target" || current === "-t") {
-      const target = argv[index + 1];
-      if (target) {
-        warnings.push(
-          `Legacy target '${target}' is not auto-injected into Builder interactive mode. Paste it as your first prompt after startup.`,
-        );
-        index += 1;
-      } else {
-        warnings.push("Legacy '--target' was provided without a value and was ignored.");
-      }
-      continue;
-    }
-
-    passthrough.push(current);
-  }
-
-  return { passthrough, warnings };
-}
-
-function parseOptionValue(argv, index, option) {
-  if (index + 1 >= argv.length) {
-    throw new Error(`Missing value for ${option}.`);
-  }
-  return argv[index + 1];
-}
-
-function buildRunPrompt(objective, options) {
-  const lines = [`Objective: ${objective}`];
-
-  if (options.target) {
-    lines.push(`Primary target: ${options.target}`);
-  }
-
-  lines.push("");
-  lines.push("Use Builder to execute the task.");
-
-  if (options.maxSteps) {
-    lines.push(
-      `Keep the workflow within roughly ${options.maxSteps} meaningful tool steps when it does not reduce quality.`,
-    );
-  }
-
-  if (options.output) {
-    lines.push(`Write the final deliverable to ${options.output}.`);
-  }
-
-  return lines.join("\n");
-}
-
-function buildScanPrompt(target, options) {
-  const lines = [`Perform a reconnaissance scan against ${target}.`];
-  lines.push(`Focus mode: ${options.scanType}.`);
-
-  if (options.ports) {
-    lines.push(`Prioritize ports: ${options.ports}.`);
-  }
-
-  if (options.output) {
-    lines.push(`Write the final deliverable to ${options.output}.`);
-  }
-
-  lines.push("Prefer Builder-native tool selection and summarize the most actionable findings first.");
-  return lines.join("\n");
-}
-
-function translateRun(argv) {
-  const warnings = [];
-  const options = {};
-  const objectiveParts = [];
-
-  for (let index = 0; index < argv.length; index += 1) {
-    const current = argv[index];
-
-    if (current === "--output" || current === "-o") {
-      options.output = parseOptionValue(argv, index, current);
-      index += 1;
-      continue;
-    }
-
-    if (current === "--max-steps") {
-      options.maxSteps = parseOptionValue(argv, index, current);
-      index += 1;
-      continue;
-    }
-
-    if (current === "--target" || current === "-t") {
-      options.target = parseOptionValue(argv, index, current);
-      index += 1;
-      continue;
-    }
-
-    if (current === "--dangerously-skip-permissions") {
-      warnings.push(
-        "Legacy '--dangerously-skip-permissions' is ignored. Builder owns approval handling inside its runtime.",
-      );
-      continue;
-    }
-
-    objectiveParts.push(current);
-  }
-
-  const objective = objectiveParts.join(" ").trim();
-  if (!objective) {
-    throw new Error("pentesting run requires an objective.");
-  }
-
-  return {
-    builderArgs: ["--prompt", buildRunPrompt(objective, options)],
-    warnings,
-  };
-}
-
-function translateScan(argv) {
-  const warnings = [];
-  const options = { scanType: "service" };
-  let target = "";
-
-  for (let index = 0; index < argv.length; index += 1) {
-    const current = argv[index];
-
-    if (current === "--scan-type" || current === "-s") {
-      options.scanType = parseOptionValue(argv, index, current);
-      index += 1;
-      continue;
-    }
-
-    if (current === "--ports" || current === "-p") {
-      options.ports = parseOptionValue(argv, index, current);
-      index += 1;
-      continue;
-    }
-
-    if (current === "--output" || current === "-o") {
-      options.output = parseOptionValue(argv, index, current);
-      index += 1;
-      continue;
-    }
-
-    if (current === "--dangerously-skip-permissions") {
-      warnings.push(
-        "Legacy '--dangerously-skip-permissions' is ignored. Builder owns approval handling inside its runtime.",
-      );
-      continue;
-    }
-
-    if (!target) {
-      target = current;
-      continue;
-    }
-
-    warnings.push(`Extra scan argument '${current}' was folded into the Builder prompt.`);
-    target = `${target} ${current}`;
-  }
-
-  if (!target) {
-    throw new Error("pentesting scan requires a target.");
-  }
-
-  return {
-    builderArgs: ["--prompt", buildScanPrompt(target, options)],
-    warnings,
-  };
-}
-
 export function packageVersion() {
   return PACKAGE_JSON.version;
 }
 
+export function configuredBuilderReleaseTag() {
+  const releaseTag = PACKAGE_JSON.builderReleaseTag;
+  return typeof releaseTag === "string" && releaseTag.trim() ? releaseTag.trim() : undefined;
+}
+
 export function releaseRepository() {
-  return process.env.BUILDER_REPO || "agnusdei1207/builder";
+  return process.env.BUILDER_REPO || "agnusdei1207/builder-public";
 }
 
-export function defaultReleaseTag(version = packageVersion()) {
-  return /^\d+\.\d+\.\d+(?:[-+].+)?$/.test(version) ? `v${version}` : "latest";
+export function defaultReleaseTag(version = undefined) {
+  const resolvedVersion = version ?? configuredBuilderReleaseTag() ?? packageVersion();
+  if (resolvedVersion.startsWith("v")) {
+    return resolvedVersion;
+  }
+  return /^\d+\.\d+\.\d+(?:[-+].+)?$/.test(resolvedVersion)
+    ? `v${resolvedVersion}`
+    : "latest";
 }
 
 export function resolveReleaseAsset(platform = process.platform, arch = process.arch) {
@@ -387,33 +200,12 @@ export async function resolveBuilderBinary(options = {}) {
 }
 
 export function translateBuilderInvocation(argv) {
-  if (argv.length === 0) {
-    return { builderArgs: [], warnings: [] };
-  }
-
-  const [command, ...rest] = argv;
-
-  if (command === "interactive" || command === "i") {
-    const parsed = parseLegacyFlags(rest);
-    return { builderArgs: parsed.passthrough, warnings: parsed.warnings };
-  }
-
-  if (command === "run" || command === "r") {
-    return translateRun(rest);
-  }
-
-  if (command === "scan") {
-    return translateScan(rest);
-  }
-
-  if (command.startsWith("-")) {
-    const parsed = parseLegacyFlags(argv);
-    return { builderArgs: parsed.passthrough, warnings: parsed.warnings };
-  }
-
-  if (BUILDER_COMMANDS.has(command)) {
-    return { builderArgs: argv, warnings: [] };
-  }
-
   return { builderArgs: argv, warnings: [] };
 }
+
+export function pentestingEnvironment(baseEnv = process.env) {
+  return {
+    ...baseEnv,
+    BUILDER_PRODUCT_NAME: "pentesting",
+  };
+}

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "pentesting",
-  "version": "0.90.2",
+  "version": "0.90.3",
+  "builderReleaseTag": "v0.1.1",
   "description": "Public pentesting facade for Builder",
   "type": "module",
   "bin": {
-    "pentesting": "bin/pentesting.mjs",
-    "builder": "bin/pentesting.mjs"
+    "pentesting": "bin/pentesting.mjs"
   },
   "files": [
     "bin",
@@ -28,11 +28,11 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/agnusdei1207"
+    "url": "git+https://github.com/agnusdei1207/builder-public.git"
   },
-  "homepage": "https://agnusdei1207.github.io/brainscience/pentesting",
+  "homepage": "https://agnusdei1207.github.io/builder-public/",
   "bugs": {
-    "url": "https://github.com/agnusdei1207"
+    "url": "https://github.com/agnusdei1207/builder-public/issues"
   },
   "keywords": [
     "penetration-testing",