@chainpatrol/cli 0.19.0 → 0.20.0

package/CHANGELOG.md

@@ -1,5 +1,28 @@
 # @chainpatrol/cli
 
+## 0.20.0
+
+### Minor Changes
+
+- e63d269: Add `chainpatrol asset types` — list every supported `AssetType` enum
+  value with its human-readable label and a short description.
+
+  The mapping (e.g. `ARCHIVE_ORG` → "Archive.org" / Wayback snapshot,
+  `PAGE` → "Page" / standalone web page tracked independently of its
+  parent URL, `FIVE_HUNDRED_PX` → "500px") ships bundled with the CLI as
+  a static map, so the command works without auth or a network round
+  trip. Output is available in human, JSON, markdown, and CSV formats —
+  useful when an agent or script needs to translate enum ↔ display name,
+  validate a user-supplied `--asset-type` value, or enumerate the
+  available types before constructing a filter for `asset list`,
+  `threats list`, `takedowns list`, `detections list`, `reports list`,
+  or `orgs assets list`.
+
+  The Claude Code skill is updated to point at the new command whenever
+  a user asks "what is `ARCHIVE_ORG`?", "what does `PAGE` mean?", or
+  "what asset types does ChainPatrol support?". Shell completions and
+  top-level/per-command help text are updated accordingly.
+
 ## 0.19.0
 
 ### Minor Changes

package/dist/{chunk-UDGJEN4M.js → chunk-3LJTWYT6.js}

@@ -1,7 +1,7 @@
 import {
   installCompletions,
   uninstallCompletions
-} from "./chunk-NQT77IB7.js";
+} from "./chunk-6VTWWGNV.js";
 
 // src/commands/setup-skill.ts
 import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync2, existsSync as existsSync2, readFileSync as readFileSync3, rmSync } from "fs";
@@ -201,6 +201,9 @@ description: |
   "which customers have X enabled", "service toggles by org",
   "is this URL blocked", "is this domain blocked", "is this address blocked",
   "check this asset", "asset check", "lookup asset status",
+  "what is ARCHIVE_ORG", "what does PAGE mean", "list asset types",
+  "supported asset types", "asset type mapping", "asset type enum",
+  "what asset types are there", "human readable asset type",
   "how many takedowns", "takedowns in the last", "threats taken down",
   "across all clients", "across all customers", "across all orgs",
   "across all brands", "company-wide", "total takedowns", "total threats",
@@ -383,6 +386,29 @@ If any individual lookup fails, the CLI still prints results for the
 successful ones, then exits non-zero so failures aren't silently
 swallowed.
 
+### \`asset types\` \u2014 List every supported asset type and what it means
+
+When a user asks "what is \`ARCHIVE_ORG\`?", "what does \`PAGE\` mean?",
+or "what asset types does ChainPatrol support?" \u2014 don't guess. Run:
+
+\`\`\`bash
+chainpatrol asset types
+chainpatrol --json asset types
+\`\`\`
+
+The mapping is bundled with the CLI (no API or auth required), so this
+is safe to run anywhere. Each row is \`{ type, label, description }\`:
+\`type\` is the canonical enum value used by every \`--asset-type\` flag
+(\`asset list\`, \`threats list\`, \`takedowns list\`, \`detections list\`,
+\`reports list\`, \`orgs assets list\`); \`label\` is the human-friendly
+display name (\`ARCHIVE_ORG\` \u2192 \`Archive.org\`, \`PAGE\` \u2192 \`Page\`,
+\`FIVE_HUNDRED_PX\` \u2192 \`500px\`); \`description\` is a one-line note for
+unobvious entries.
+
+Use this whenever you need to translate between enum and display name,
+validate that a type the user mentioned is real, or enumerate options
+before constructing a filter.
+
 ### \`configs list\` \u2014 List detection configurations
 
 Requires authentication and an organization slug.

package/dist/{chunk-NQT77IB7.js → chunk-6VTWWGNV.js}

@@ -66,6 +66,7 @@ _chainpatrol() {
         asset_subcommands=(
           'check:Check asset status against ChainPatrol'
           'list:List assets in the global ChainPatrol blocklist'
+          'types:List supported asset types and their human-readable labels'
         )
         _describe 'subcommand' asset_subcommands
         ;;
@@ -161,7 +162,7 @@ var BASH_COMPLETION = `_chainpatrol() {
       return 0
       ;;
     asset)
-      COMPREPLY=( $(compgen -W "check list" -- "\${cur}") )
+      COMPREPLY=( $(compgen -W "check list types" -- "\${cur}") )
       return 0
       ;;
     configs)

package/dist/cli.js

@@ -13,8 +13,8 @@ import {
   getCliVersion,
   isSkillInstalled,
   readInstalledSkillVersion
-} from "./chunk-UDGJEN4M.js";
-import "./chunk-NQT77IB7.js";
+} from "./chunk-3LJTWYT6.js";
+import "./chunk-6VTWWGNV.js";
 import {
   DateTime
 } from "./chunk-TFCNKBRC.js";
@@ -92,14 +92,25 @@ var HELP = {
     usage: "chainpatrol logout"
   },
   asset: {
-    description: "Check asset status or list blocked/allowed assets across the global ChainPatrol blocklist.",
-    usage: "chainpatrol asset <check|list>",
+    description: "Check asset status, list blocked/allowed assets across the global ChainPatrol blocklist, or list every supported asset type.",
+    usage: "chainpatrol asset <check|list|types>",
     examples: [
       "chainpatrol asset check https://phish.example",
       "chainpatrol asset list --asset-type URL --from 2026-05-01",
+      "chainpatrol asset types",
       "chainpatrol --json asset check 0xabc123\u2026"
     ]
   },
+  "asset types": {
+    description: "List every asset type supported by ChainPatrol and what each enum value means (e.g. ARCHIVE_ORG \u2192 Archive.org Wayback snapshot, PAGE \u2192 standalone web page). Reads from a static map bundled with the CLI \u2014 no API or auth required. Useful for picking the right --asset-type value for `asset list`, `threats list`, `takedowns list`, etc.",
+    usage: "chainpatrol asset types",
+    examples: [
+      "chainpatrol asset types",
+      "chainpatrol --json asset types",
+      "chainpatrol asset types --output markdown",
+      "chainpatrol asset types --output csv > asset-types.csv"
+    ]
+  },
   "asset list": {
     description: "List assets in the global ChainPatrol blocklist for a given asset type. Defaults to BLOCKED assets updated in the last day. Use --from and --to to widen the window.",
     usage: "chainpatrol asset list --asset-type <type> [--from ISO --to ISO] [filters]",
@@ -636,7 +647,7 @@ function getTopLevelHelp() {
     "    login         Authenticate with ChainPatrol",
     "    logout        Clear stored credentials",
     "    whoami        Show the current authenticated identity",
-    "    asset         Check or list assets in the global ChainPatrol blocklist",
+    "    asset         Check or list assets, or list supported asset types",
     "    configs       Manage detection configs",
     "    detections    Validate, run, list, update detection configs and results",
     "    healthchecks  List and run organization healthchecks",
@@ -1183,9 +1194,17 @@ async function main() {
         });
         break;
       }
-      const hint = subcommand ? suggest(subcommand, ["check", "list"]) : null;
+      if (subcommand === "types") {
+        const { runAssetTypes } = await import("./types-PTMFLYUV.js");
+        runAssetTypes({
+          json: jsonMode,
+          outputFormat: cliContext.outputFormat
+        });
+        break;
+      }
+      const hint = subcommand ? suggest(subcommand, ["check", "list", "types"]) : null;
       throw new Error(
-        subcommand ? `Unknown subcommand: asset ${subcommand}${hint ? `. Did you mean "asset ${hint}"?` : ""}` : "Usage: chainpatrol asset <check|list>"
+        subcommand ? `Unknown subcommand: asset ${subcommand}${hint ? `. Did you mean "asset ${hint}"?` : ""}` : "Usage: chainpatrol asset <check|list|types>"
       );
     }
     case "detections": {
@@ -1686,17 +1705,17 @@ async function main() {
     case "setup":
     case "install":
     case "i": {
-      const { setupSkill } = await import("./setup-skill-F7437RT3.js");
+      const { setupSkill } = await import("./setup-skill-A36WQLMU.js");
       setupSkill({ json: jsonMode, cloud: cli.flags.cloud });
       break;
     }
     case "uninstall": {
-      const { uninstallSkill } = await import("./setup-skill-F7437RT3.js");
+      const { uninstallSkill } = await import("./setup-skill-A36WQLMU.js");
       uninstallSkill({ json: jsonMode });
       break;
     }
     case "completions": {
-      const { printCompletions } = await import("./completions-6C6KG5DH.js");
+      const { printCompletions } = await import("./completions-ILC76OX5.js");
       printCompletions(subcommand);
       break;
     }

package/dist/{completions-6C6KG5DH.js → completions-ILC76OX5.js}

@@ -3,7 +3,7 @@ import {
   installCompletions,
   printCompletions,
   uninstallCompletions
-} from "./chunk-NQT77IB7.js";
+} from "./chunk-6VTWWGNV.js";
 export {
   getCompletionScript,
   installCompletions,

package/dist/{setup-skill-F7437RT3.js → setup-skill-A36WQLMU.js}

@@ -6,8 +6,8 @@ import {
   readInstalledSkillVersion,
   setupSkill,
   uninstallSkill
-} from "./chunk-UDGJEN4M.js";
-import "./chunk-NQT77IB7.js";
+} from "./chunk-3LJTWYT6.js";
+import "./chunk-6VTWWGNV.js";
 export {
   getBundledSkillContent,
   getBundledSkillVersion,

package/dist/types-PTMFLYUV.js

@@ -0,0 +1,271 @@
+import {
+  printOutput,
+  toCsvRows
+} from "./chunk-VFT3TD3E.js";
+
+// src/lib/asset-types.ts
+var ASSET_TYPES = [
+  {
+    type: "URL",
+    label: "URL",
+    description: "A full URL or domain (web page). The most common asset type for phishing sites."
+  },
+  {
+    type: "PAGE",
+    label: "Page",
+    description: "A standalone web page tracked independently of its parent URL (e.g. a hosted phishing kit deployed on a shared platform)."
+  },
+  {
+    type: "ADDRESS",
+    label: "Address",
+    description: "A blockchain address (EVM, Bitcoin, Solana, etc.) used by a threat."
+  },
+  {
+    type: "DISCORD",
+    label: "Discord",
+    description: "A Discord server invite or guild."
+  },
+  { type: "LINKEDIN", label: "LinkedIn", description: "A LinkedIn profile or page." },
+  { type: "TWITTER", label: "Twitter", description: "An X (formerly Twitter) account." },
+  { type: "FACEBOOK", label: "Facebook", description: "A Facebook page or profile." },
+  { type: "YOUTUBE", label: "YouTube", description: "A YouTube channel or video." },
+  { type: "REDDIT", label: "Reddit", description: "A Reddit user or subreddit." },
+  {
+    type: "TELEGRAM",
+    label: "Telegram",
+    description: "A Telegram channel, group, or user."
+  },
+  {
+    type: "GOOGLE_APP_STORE",
+    label: "Google Play Store",
+    description: "An Android app on Google Play."
+  },
+  {
+    type: "APPLE_APP_STORE",
+    label: "Apple App Store",
+    description: "An iOS app on the Apple App Store."
+  },
+  {
+    type: "AMAZON_APP_STORE",
+    label: "Amazon App Store",
+    description: "An Android app on the Amazon Appstore."
+  },
+  {
+    type: "MICROSOFT_APP_STORE",
+    label: "Microsoft App Store",
+    description: "An app in the Microsoft Store."
+  },
+  { type: "TIKTOK", label: "TikTok", description: "A TikTok account or video." },
+  { type: "INSTAGRAM", label: "Instagram", description: "An Instagram account." },
+  { type: "THREADS", label: "Threads", description: "A Threads (Meta) account." },
+  { type: "MEDIUM", label: "Medium", description: "A Medium blog or post." },
+  {
+    type: "CHROME_WEB_STORE",
+    label: "Chrome Web Store",
+    description: "A Chrome browser extension."
+  },
+  {
+    type: "MOZILLA_ADDONS",
+    label: "Mozilla Firefox Addons",
+    description: "A Firefox browser add-on."
+  },
+  {
+    type: "OPERA_ADDONS",
+    label: "Opera Addons",
+    description: "An Opera browser add-on."
+  },
+  { type: "EMAIL", label: "Email", description: "An email address." },
+  { type: "PATREON", label: "Patreon", description: "A Patreon page." },
+  { type: "OPENSEA", label: "OpenSea", description: "An OpenSea collection or account." },
+  { type: "FARCASTER", label: "Farcaster", description: "A Farcaster account." },
+  {
+    type: "IPFS",
+    label: "IPFS",
+    description: "An IPFS-hosted resource (CID or gateway URL)."
+  },
+  { type: "GOOGLE_FORM", label: "Google Form", description: "A Google Forms form." },
+  {
+    type: "WHATSAPP",
+    label: "WhatsApp",
+    description: "A WhatsApp number, group, or channel."
+  },
+  { type: "DISCORD_USER", label: "Discord User", description: "A Discord user account." },
+  { type: "QUORA", label: "Quora", description: "A Quora user or space." },
+  {
+    type: "GITHUB",
+    label: "GitHub",
+    description: "A GitHub account, repository, or page."
+  },
+  { type: "TEACHABLE", label: "Teachable", description: "A Teachable course or school." },
+  { type: "SUBSTACK", label: "Substack", description: "A Substack publication." },
+  { type: "DEBANK", label: "Debank", description: "A Debank profile." },
+  { type: "TAWK_TO", label: "Tawk.to Chat", description: "A Tawk.to live-chat widget." },
+  { type: "JOTFORM", label: "Jotform", description: "A Jotform form." },
+  { type: "PRIMAL", label: "Primal", description: "A Primal (Nostr) profile." },
+  { type: "BLUESKY", label: "Bluesky", description: "A Bluesky account." },
+  { type: "SNAPCHAT", label: "Snapchat", description: "A Snapchat account." },
+  { type: "DESO", label: "DeSo", description: "A DeSo profile." },
+  { type: "PINTEREST", label: "Pinterest", description: "A Pinterest account or board." },
+  { type: "FLICKR", label: "Flickr", description: "A Flickr account." },
+  { type: "GALXE", label: "Galxe", description: "A Galxe campaign or space." },
+  { type: "VELOG", label: "Velog", description: "A Velog blog or post." },
+  { type: "NPM", label: "npm", description: "An npm package." },
+  { type: "PYPI", label: "PyPI", description: "A PyPI Python package." },
+  { type: "HEX", label: "Hex", description: "A Hex Erlang/Elixir package." },
+  { type: "DOCKER_HUB", label: "Docker Hub", description: "A Docker Hub image." },
+  {
+    type: "VOCAL_MEDIA",
+    label: "Vocal Media",
+    description: "A Vocal Media profile or story."
+  },
+  { type: "TECKFINE", label: "Teckfine", description: "A Teckfine listing." },
+  {
+    type: "TENDERLY",
+    label: "Tenderly",
+    description: "A Tenderly dashboard or simulation."
+  },
+  { type: "HACKMD", label: "HackMD", description: "A HackMD note." },
+  { type: "ETSY", label: "Etsy", description: "An Etsy shop or listing." },
+  { type: "ZAZZLE", label: "Zazzle", description: "A Zazzle shop or product." },
+  { type: "BASENAME", label: "Basename", description: "A Base ENS (basename) record." },
+  {
+    type: "BILIBILI_TV",
+    label: "Bilibili TV",
+    description: "A Bilibili TV channel or video."
+  },
+  { type: "VIMEO", label: "Vimeo", description: "A Vimeo video or channel." },
+  {
+    type: "DAILYMOTION",
+    label: "Dailymotion",
+    description: "A Dailymotion video or channel."
+  },
+  { type: "PHONE_NUMBER", label: "Phone Number", description: "A phone number." },
+  { type: "SLACK", label: "Slack", description: "A Slack workspace invite." },
+  { type: "CALENDLY", label: "Calendly", description: "A Calendly scheduling page." },
+  {
+    type: "NGROK",
+    label: "Ngrok",
+    description: "An ngrok tunnel (often used to host short-lived phishing endpoints)."
+  },
+  { type: "RARIBLE", label: "Rarible", description: "A Rarible collection or profile." },
+  {
+    type: "RUST_PACKAGE",
+    label: "Rust Package",
+    description: "A crates.io Rust package."
+  },
+  { type: "FLATHUB", label: "Flathub", description: "A Flathub Linux app listing." },
+  { type: "VIDLII", label: "VidLii", description: "A VidLii video or channel." },
+  { type: "VEVIOZ", label: "Vevioz", description: "A Vevioz listing." },
+  { type: "ISSUU", label: "Issuu", description: "An Issuu publication." },
+  {
+    type: "SOUNDCLOUD",
+    label: "SoundCloud",
+    description: "A SoundCloud account or track."
+  },
+  { type: "ZAPPER", label: "Zapper", description: "A Zapper profile or bundle." },
+  { type: "REDNOTE", label: "RedNote", description: "A RedNote (Xiaohongshu) account." },
+  {
+    type: "SAMSUNG_APP_STORE",
+    label: "Samsung Galaxy Store",
+    description: "An app on Samsung Galaxy Store."
+  },
+  {
+    type: "HUAWEI_APP_STORE",
+    label: "Huawei AppGallery",
+    description: "An app on Huawei AppGallery."
+  },
+  {
+    type: "XIAOMI_APP_STORE",
+    label: "Xiaomi GetApps",
+    description: "An app on Xiaomi GetApps."
+  },
+  {
+    type: "TENCENT_APP_STORE",
+    label: "Tencent App Store",
+    description: "An app on the Tencent App Store."
+  },
+  {
+    type: "OPPO_APP_STORE",
+    label: "OPPO App Market",
+    description: "An app on OPPO App Market."
+  },
+  {
+    type: "VIVO_APP_STORE",
+    label: "Vivo App Store",
+    description: "An app on Vivo App Store."
+  },
+  { type: "F_DROID", label: "F-Droid", description: "An app on F-Droid." },
+  { type: "GOOGLE_AD", label: "Google Ad", description: "A Google Ads advertisement." },
+  { type: "BING_AD", label: "Bing Ad", description: "A Microsoft Bing advertisement." },
+  { type: "TWITCH", label: "Twitch", description: "A Twitch channel." },
+  { type: "BEHANCE", label: "Behance", description: "A Behance profile or project." },
+  { type: "ZORA", label: "Zora", description: "A Zora collection or profile." },
+  {
+    type: "META_AD",
+    label: "Meta Ad",
+    description: "A Facebook/Instagram (Meta) advertisement."
+  },
+  { type: "SIGNAL", label: "Signal", description: "A Signal group invite or contact." },
+  { type: "DEVIANTART", label: "DeviantArt", description: "A DeviantArt profile." },
+  { type: "BANDCAMP", label: "Bandcamp", description: "A Bandcamp page." },
+  {
+    type: "ARCHIVE_ORG",
+    label: "Archive.org",
+    description: "An Internet Archive (archive.org) snapshot \u2014 typically a Wayback Machine URL preserving a phishing page."
+  },
+  {
+    type: "FIVE_HUNDRED_PX",
+    label: "500px",
+    description: "A 500px photographer profile."
+  }
+];
+var ASSET_TYPE_LABELS = Object.freeze(
+  Object.fromEntries(ASSET_TYPES.map((entry) => [entry.type, entry.label]))
+);
+
+// src/commands/asset/types.ts
+function toRow(entry) {
+  return {
+    type: entry.type,
+    label: entry.label,
+    description: entry.description ?? ""
+  };
+}
+function runAssetTypes(options) {
+  const outputFormat = options.outputFormat ?? (options.json ? "json" : "human");
+  const rows = ASSET_TYPES.map(toRow);
+  const escapeMarkdownCell = (value) => value.replaceAll("|", "\\|");
+  printOutput({
+    outputFormat,
+    json: { assetTypes: ASSET_TYPES, count: ASSET_TYPES.length },
+    markdown: [
+      "# ChainPatrol asset types",
+      "",
+      `Total: ${ASSET_TYPES.length}`,
+      "",
+      "| Type | Label | Description |",
+      "| --- | --- | --- |",
+      ...rows.map(
+        (row) => `| \`${row.type}\` | ${escapeMarkdownCell(row.label)} | ${escapeMarkdownCell(row.description)} |`
+      )
+    ].join("\n"),
+    csv: toCsvRows(rows),
+    human: () => {
+      const typeColumnWidth = Math.max(...ASSET_TYPES.map((entry) => entry.type.length));
+      const labelColumnWidth = Math.max(
+        ...ASSET_TYPES.map((entry) => entry.label.length)
+      );
+      console.log(`ChainPatrol asset types (${ASSET_TYPES.length})`);
+      console.log("");
+      for (const entry of ASSET_TYPES) {
+        const type = entry.type.padEnd(typeColumnWidth);
+        const label = entry.label.padEnd(labelColumnWidth);
+        const description = entry.description ? `  ${entry.description}` : "";
+        console.log(`${type}  ${label}${description}`);
+      }
+    }
+  });
+}
+export {
+  runAssetTypes
+};

package/package.json

@@ -2,7 +2,7 @@
   "name": "@chainpatrol/cli",
   "description": "The official ChainPatrol CLI — terminal interface for threat detection",
   "author": "Umar Ahmed <umar@chainpatrol.io>",
-  "version": "0.19.0",
+  "version": "0.20.0",
   "license": "UNLICENSED",
   "homepage": "https://chainpatrol.com/docs/cli",
   "keywords": [