pentesting 0.90.8 → 0.90.9

package/lib/runtime.mjs

@@ -11,44 +11,23 @@ const PACKAGE_JSON = JSON.parse(
   readFileSync(new URL("../package.json", import.meta.url), "utf8"),
 );
 const MANAGED_BINARY_DIR = path.join(PACKAGE_ROOT, "vendor");
-const MANAGED_BINARY_MANIFEST = path.join(MANAGED_BINARY_DIR, "builder-manifest.json");
+const MANAGED_BINARY_MANIFEST = path.join(MANAGED_BINARY_DIR, "pentesting-manifest.json");
 
 const RELEASE_TARGETS = {
+  // Native binaries published as release assets. Linux uses musl (static, covers
+  // x64/arm64); android is the cross-built target. macOS/Windows are not
+  // cross-buildable from the Linux release host, so they are served by the
+  // Docker image (see the Unsupported-platform error below).
   "android:arm64": {
-    assetName: "builder-aarch64-linux-android",
+    assetName: "pentesting-aarch64-linux-android",
     binaryFileName: "builder",
     label: "android-arm64",
   },
-  "darwin:arm64": {
-    assetName: "builder-aarch64-apple-darwin",
-    binaryFileName: "builder",
-    label: "macos-arm64",
-  },
-  "darwin:x64": {
-    assetName: "builder-x86_64-apple-darwin",
-    binaryFileName: "builder",
-    label: "macos-x64",
-  },
-  "linux:arm64": {
-    assetName: "builder-aarch64-unknown-linux-musl",
-    binaryFileName: "builder",
-    label: "linux-arm64",
-  },
   "linux:x64": {
-    assetName: "builder-x86_64-unknown-linux-musl",
+    assetName: "pentesting-x86_64-unknown-linux-musl",
     binaryFileName: "builder",
     label: "linux-x64",
   },
-  "win32:arm64": {
-    assetName: "builder-aarch64-pc-windows-msvc.exe",
-    binaryFileName: "builder.exe",
-    label: "windows-arm64",
-  },
-  "win32:x64": {
-    assetName: "builder-x86_64-pc-windows-msvc.exe",
-    binaryFileName: "builder.exe",
-    label: "windows-x64",
-  },
 };
 
 export function packageVersion() {
@@ -79,7 +58,10 @@ export function resolveReleaseAsset(platform = process.platform, arch = process.
   if (!target) {
     const supported = Object.keys(RELEASE_TARGETS).join(", ");
     throw new Error(
-      `Unsupported platform '${platform}/${arch}'. Supported builder targets: ${supported}.`,
+      `No native pentesting binary for '${platform}/${arch}'. ` +
+        `Native targets: ${supported}. ` +
+        `On macOS/Windows run it via Docker instead: ` +
+        `docker run -it --rm -v "$(pwd):/workspace" agnusdei1207/pentesting`,
     );
   }
   return target;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pentesting",
-  "version": "0.90.8",
-  "builderReleaseTag": "v0.1.4",
+  "version": "0.90.9",
+  "builderReleaseTag": "v0.1.8",
   "description": "pentesting — security-focused agent runtime (internal engine: builder). Thin npm facade that downloads the managed Builder binary and forwards arguments.",
   "license": "MIT",
   "author": "agnusdei1207",
@@ -51,9 +51,7 @@
     "verify": "npm run preflight:local && npm run test",
     "build": "CARGO_TARGET_DIR=${CARGO_TARGET_DIR:-$HOME/.cache/builder-target} $HOME/.cargo/bin/cargo build --bin pentesting",
     "check": "sh -c 'npm run docker:builder:build && docker run -it --rm -v builder-workspace:/workspace -e ANTHROPIC_BASE_URL -e ANTHROPIC_AUTH_TOKEN -e ANTHROPIC_MODEL -e ANTHROPIC_API_KEY -e MINIMAX_API_KEY -e OPENAI_API_KEY -e OPENAI_BASE_URL -e GEMINI_API_KEY -e DEEPSEEK_API_KEY agnusdei1207/pentesting:latest'",
-    "check:interactive": "npm run check",
     "check:smoke": "sh -c 'npm run docker:builder:build && docker run --rm -v builder-workspace:/workspace agnusdei1207/pentesting:latest --version'",
-    "check:clean": "npm run docker:clean && npm run check",
     "eval": "tsx benchmarks/cli.ts",
     "eval:all": "npm run build && find benchmarks/evals -name task.yml -exec dirname {} \\; | sort | while read -r d; do echo \"\\n=== Running $(basename $d) ===\"; tsx benchmarks/cli.ts \"$d\" || true; done",
     "pentesting:help": "./scripts/pentesting-release-help.sh",
@@ -64,8 +62,6 @@
     "pentesting:check": "./scripts/check-pentesting-package.sh",
     "pentesting:publish": "./scripts/publish-pentesting-package.sh",
     "pentesting:publish:dry-run": "DRY_RUN=true ./scripts/publish-pentesting-package.sh",
-    "pentesting:release": "npm run pentesting:release:patch",
-    "pentesting:release:dry-run": "npm run pentesting:release:patch:dry-run",
     "pentesting:release:patch": "npm run pentesting:check && AUTO_PUSH=true ./scripts/publish-pentesting-package.sh patch",
     "pentesting:release:patch:dry-run": "npm run pentesting:check && DRY_RUN=true ./scripts/publish-pentesting-package.sh patch",
     "pentesting:release:minor": "npm run pentesting:check && AUTO_PUSH=true ./scripts/publish-pentesting-package.sh minor",
@@ -77,9 +73,6 @@
     "public:pull": "git submodule update --remote --merge public",
     "public:publish": "AUTO_PUSH=true ./scripts/sync-public-repo.sh && git add public && git commit -m 'chore: bump public facade pointer' && git push origin main",
     "public:mirror-release": "./scripts/mirror-public-release.sh",
-    "public:ci:sync": "gh workflow run 'Sync Builder Repo' --ref main",
-    "public:ci:mirror": "gh workflow run 'Mirror Builder Release' --ref main -f version_tag=$(git describe --tags --abbrev=0)",
-    "public:ci:status": "gh run list --workflow=sync-public.yml --limit=3 && echo '---' && gh run list --workflow=mirror-release.yml --limit=3",
     "docker:builder:build": "(docker image inspect agnusdei1207/pentesting-build-base:1.95 >/dev/null 2>&1 && docker image inspect agnusdei1207/pentesting-runtime-base:26.04 >/dev/null 2>&1 || npm run docker:base:build) && docker build --build-arg APP_VERSION=$(git describe --tags --abbrev=0 2>/dev/null || echo dev) -t agnusdei1207/pentesting:latest .",
     "docker:builder:push": "if [ -n \"$DOCKER_PASSWORD\" ]; then echo \"$DOCKER_PASSWORD\" | docker login -u \"${DOCKER_USERNAME:-agnusdei1207}\" --password-stdin; fi && npm run docker:builder:build && docker push agnusdei1207/pentesting:latest",
     "docker:builder:tag": "docker tag agnusdei1207/pentesting:latest agnusdei1207/pentesting:$(git describe --tags --abbrev=0) && docker push agnusdei1207/pentesting:$(git describe --tags --abbrev=0)",
@@ -90,12 +83,8 @@
     "release:dry": "DRY_RUN=true ./scripts/release-all.sh patch",
     "release:local": "./scripts/run-release-in-docker.sh ./scripts/build-release-local.sh",
     "release:local:dry": "DRY_RUN=true ./scripts/run-release-in-docker.sh ./scripts/build-release-local.sh",
-    "release:local:host": "./scripts/build-release-local.sh",
-    "release:local:host:dry": "DRY_RUN=true ./scripts/build-release-local.sh",
     "release:backfill": "./scripts/run-release-in-docker.sh ./scripts/backfill-release-local.sh",
-    "release:backfill:dry": "DRY_RUN=true ./scripts/run-release-in-docker.sh ./scripts/backfill-release-local.sh",
-    "release:backfill:host": "./scripts/backfill-release-local.sh",
-    "release:backfill:host:dry": "DRY_RUN=true ./scripts/backfill-release-local.sh"
+    "release:backfill:dry": "DRY_RUN=true ./scripts/run-release-in-docker.sh ./scripts/backfill-release-local.sh"
   },
   "devDependencies": {
     "@ai-sdk/google-vertex": "^4.0.47",