docs: list Node.js 22+ as the one requirement

Replaces the 18+ (npx), 20.19+ (source build) and 22.19+ (Pi subscription
login) notes with a single Node.js 22+.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

README.md

@@ -130,7 +130,7 @@ These reports are from Shannon OSS scans of Photoview 2.4.0, one of the applicat
 ### Prerequisites
 
 - **Docker**: required for the worker container.
-- **Node.js 18+**: required for the recommended `npx` workflow. For ChatGPT or Grok subscription logins, Pi requires Node.js 22.19+.
+- **Node.js 22+**: required for the recommended `npx` workflow.
 - **AI provider credentials**: Shannon runs on Anthropic, OpenAI, xAI, AWS Bedrock, and [any other provider](docs/ai-providers.md#any-other-provider) in the harness catalogue — each of which you can point at a proxy or LLM gateway through a [custom base URL](docs/ai-providers.md#custom-base-url), and a model the catalogue does not carry can be described with a [custom model configuration](docs/ai-providers.md#custom-model-configuration). You bring your own key, and Keygraph never proxies your model traffic. Shannon is provider-agnostic. See [AI providers](docs/ai-providers.md#suggested-models) for suggested model IDs.
 - **Cyber safeguards cleared with your provider**: Anthropic and OpenAI apply real-time safeguards to cyber-security workloads, which can interrupt a scan mid-run. Complete their guidance for legitimate security testers before your first run - see [AI providers](docs/ai-providers.md#cyber-safeguards-do-this-before-your-first-scan) and the [cyber verification announcement](https://github.com/KeygraphHQ/shannon/discussions/483).
 

apps/cli/README.md

@@ -21,7 +21,7 @@ It analyzes your source code, identifies attack paths, and executes real exploit
 ### Prerequisites
 
 - **Docker**: required for the worker container.
-- **Node.js 18+**: required for the recommended `npx` workflow. For ChatGPT or Grok subscription logins, Pi requires Node.js 22.19+.
+- **Node.js 22+**: required for the recommended `npx` workflow.
 - **AI provider credentials**: Shannon runs on Anthropic, OpenAI, xAI, AWS Bedrock, and any other provider in the harness catalogue — each of which you can point at a proxy or LLM gateway through a custom base URL. You bring your own key, and Keygraph never proxies your model traffic. Shannon is provider-agnostic.
 - **Cyber safeguards cleared with your provider**: Anthropic and OpenAI apply real-time safeguards to cyber-security workloads, which can interrupt a scan mid-run. Complete their guidance for legitimate security testers before your first run.
 

docs/development.md

@@ -5,7 +5,7 @@ This guide covers the source-build workflow, common CLI commands, repository pat
 ## Prerequisites
 
 - Docker
-- Node.js 20.19+
+- Node.js 22+
 - pnpm
 - AI provider credentials
 

llms-full.txt

@@ -140,7 +140,7 @@ These reports are from Shannon OSS scans of Photoview 2.4.0, one of the applicat
 ### Prerequisites
 
 - **Docker**: required for the worker container.
-- **Node.js 18+**: required for the recommended `npx` workflow. For ChatGPT or Grok subscription logins, Pi requires Node.js 22.19+.
+- **Node.js 22+**: required for the recommended `npx` workflow.
 - **AI provider credentials**: Shannon runs on Anthropic, OpenAI, xAI, AWS Bedrock, and [any other provider](docs/ai-providers.md#any-other-provider) in the harness catalogue — each of which you can point at a proxy or LLM gateway through a [custom base URL](docs/ai-providers.md#custom-base-url), and a model the catalogue does not carry can be described with a [custom model configuration](docs/ai-providers.md#custom-model-configuration). You bring your own key, and Keygraph never proxies your model traffic. Shannon is provider-agnostic. See [AI providers](docs/ai-providers.md#suggested-models) for suggested model IDs.
 - **Cyber safeguards cleared with your provider**: Anthropic and OpenAI apply real-time safeguards to cyber-security workloads, which can interrupt a scan mid-run. Complete their guidance for legitimate security testers before your first run - see [AI providers](docs/ai-providers.md#cyber-safeguards-do-this-before-your-first-scan) and the [cyber verification announcement](https://github.com/KeygraphHQ/shannon/discussions/483).
 
@@ -423,7 +423,7 @@ This guide covers the source-build workflow, common CLI commands, repository pat
 ## Prerequisites
 
 - Docker
-- Node.js 20.19+
+- Node.js 22+
 - pnpm
 - AI provider credentials