farhoodlabs/trebuchet
8
0
Fork 0
Code Issues Pull Requests 5 Actions Packages Projects Releases Wiki Activity

feat: backport Opus 4.7 + adaptive thinking, remove scan tools, add --help to scripts #4

Merged
Hugh Commit merged 2 commits from far-136/backport-phase-1 into main 2026-05-20 00:41:20 +00:00
Conversation 0 Commits 2 Files Changed 20
+239 -275
Hugh Commit commented 2026-05-20 00:27:22 +00:00
Member
Copy Link
Copy Source

Summary

Backport upstream Shannon PRs #325, #327, #328 into Hightower.

PR #325 — Opus 4.7 + adaptive thinking

  • Update large model default from claude-opus-4-6 → claude-opus-4-7
  • Add adaptive thinking configuration (auto-enabled on Opus 4.6/4.7, opt-out via CLAUDE_ADAPTIVE_THINKING=false)
  • Filter thinking/redacted_thinking blocks from message content extraction
  • Add thinking and data fields to ContentBlock type
  • Bump @anthropic-ai/claude-agent-sdk catalog from ^0.2.38 → ^0.2.114

PR #327 — Remove unused scan tools + dead error type

  • Remove nmap, subfinder, whatweb, schemathesis, Go, Ruby from Dockerfile (builder + runtime)
  • Remove tool from PentestErrorType union (dead type)
  • Redact URLs in preflight info logs (custom base URL + target URL)
  • Update all prompts, docs, and CLAUDE.md to remove scan tool references

PR #328 — --help for scripts

  • Add --help / -h flag to save-deliverable CLI script
  • Add --help / -h flag to generate-totp CLI script

Verification

  • pnpm run check — all 4 tasks pass (type-check + build)
  • pnpm biome — 108 files checked, no issues

Parent issue: FAR-136 | Parent plan: FAR-135

## Summary Backport upstream Shannon PRs [#325](https://github.com/KeygraphHQ/shannon/pull/325), [#327](https://github.com/KeygraphHQ/shannon/pull/327), [#328](https://github.com/KeygraphHQ/shannon/pull/328) into Hightower. ### PR #325 — Opus 4.7 + adaptive thinking - Update large model default from `claude-opus-4-6` → `claude-opus-4-7` - Add adaptive thinking configuration (auto-enabled on Opus 4.6/4.7, opt-out via `CLAUDE_ADAPTIVE_THINKING=false`) - Filter thinking/redacted_thinking blocks from message content extraction - Add `thinking` and `data` fields to `ContentBlock` type - Bump `@anthropic-ai/claude-agent-sdk` catalog from `^0.2.38` → `^0.2.114` ### PR #327 — Remove unused scan tools + dead error type - Remove nmap, subfinder, whatweb, schemathesis, Go, Ruby from Dockerfile (builder + runtime) - Remove `tool` from `PentestErrorType` union (dead type) - Redact URLs in preflight info logs (custom base URL + target URL) - Update all prompts, docs, and CLAUDE.md to remove scan tool references ### PR #328 — --help for scripts - Add `--help` / `-h` flag to `save-deliverable` CLI script - Add `--help` / `-h` flag to `generate-totp` CLI script ## Verification - `pnpm run check` — all 4 tasks pass (type-check + build) - `pnpm biome` — 108 files checked, no issues Parent issue: [FAR-136](/FAR/issues/FAR-136) | Parent plan: [FAR-135](/FAR/issues/FAR-135)
Hugh Commit added 1 commit 2026-05-20 00:27:23 +00:00
feat: backport Opus 4.7 + adaptive thinking, remove scan tools, add --help to scripts
CI / Build & push API image (pull_request) Has been skipped
Details
CI / Type-check & lint (pull_request) Successful in 18s
Details
CI / Build & push worker image (pull_request) Has been skipped
Details
085624b287 
Backport upstream Shannon PRs #325, #327, #328:

- Update large model default to claude-opus-4-7, add adaptive thinking
  configuration (auto-enabled on Opus 4.6/4.7, opt-out via
  CLAUDE_ADAPTIVE_THINKING=false), filter thinking blocks from message
  content, bump claude-agent-sdk to ^0.2.114
- Remove unused scan tools (nmap, subfinder, whatweb, schemathesis) from
  Dockerfile, prompts, and docs; remove dead 'tool' error type from
  PentestErrorType; redact URLs in preflight info logs
- Add --help flag to save-deliverable and generate-totp CLI scripts

Co-Authored-By: Paperclip <noreply@paperclip.ing>
Hugh Commit added 1 commit 2026-05-20 00:31:32 +00:00
feat(cli): block running with sudo or as root
CI / Type-check & lint (pull_request) Successful in 16s
Details
CI / Build & push API image (pull_request) Has been skipped
Details
CI / Build & push worker image (pull_request) Has been skipped
Details
800afbfefb 
Backport upstream Shannon PR #323. Adds privilege check at CLI startup
that prevents execution via sudo or as the root user.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
Hugh Commit merged commit 70af2b12db into main 2026-05-20 00:41:20 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
bug
Something isn't working
 documentation
Improvements or additions to documentation
 duplicate
This issue or pull request already exists
 enhancement
New feature or request
 good first issue
Good for newcomers
 help wanted
Extra attention is needed
 invalid
This doesn't seem right
 question
Further information is requested
 wontfix
This will not be worked on
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
fl_blake (Blake MIddleware) cpfarhood (Chris Farhood) ci (Continuous Integration [bot]) flux (Flux CD) admin (Gitea Admin) fl_hugh (Hugh Commit) renovate (Mend Renovate) fl_warren (Warren Bufferpool)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: farhoodlabs/trebuchet#4
Delete Branch "far-136/backport-phase-1"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?