@kinosec/cli 0.10.1 → 0.10.3

package/dist/cli.js

@@ -8048,12 +8048,8 @@ import { join as join2, dirname as dirname2 } from "path";
 // src/lib/config.ts
 import { existsSync, mkdirSync, readFileSync, writeFileSync, openSync, writeSync, closeSync, unlinkSync, constants } from "fs";
 import { join, dirname } from "path";
-import { homedir, platform } from "os";
+import { homedir } from "os";
 function getConfigDir() {
-  const p = platform();
-  if (p === "win32") {
-    return join(process.env.APPDATA ?? join(homedir(), "AppData", "Roaming"), "kinosec");
-  }
   const xdg = process.env.XDG_CONFIG_HOME;
   if (xdg) return join(xdg, "kinosec");
   return join(homedir(), ".config", "kinosec");
@@ -8074,7 +8070,7 @@ function readJsonFile(path) {
 function writeJsonFile(path, data, restrictPermissions = false) {
   ensureDir(dirname(path));
   const content = JSON.stringify(data, null, 2) + "\n";
-  if (restrictPermissions && platform() !== "win32") {
+  if (restrictPermissions) {
     const fd = openSync(path, constants.O_WRONLY | constants.O_CREAT | constants.O_TRUNC, 384);
     writeSync(fd, content);
     closeSync(fd);
@@ -8439,13 +8435,10 @@ ${import_picocolors3.default.dim("use of its services.")}
 var import_picocolors4 = __toESM(require_picocolors(), 1);
 
 // src/lib/validate-mode.ts
+var VALID_SCAN_MODES = ["full", "quick", "htb", "defcon"];
 function validateScanMode(mode) {
-  if (mode === "quick") {
-    console.error("Quick mode is temporarily unavailable. Please use --mode full (the default).");
-    process.exit(2);
-  }
-  if (mode !== "full") {
-    console.error(`Invalid mode "${mode}". Must be: full`);
+  if (!VALID_SCAN_MODES.includes(mode)) {
+    console.error(`Invalid mode "${mode}". Must be one of: ${VALID_SCAN_MODES.join(", ")}.`);
     process.exit(2);
   }
 }
@@ -12019,10 +12012,9 @@ function extractPhase(entries) {
   return null;
 }
 function printActivityLines(entries, tty3) {
-  for (let i = 0; i < entries.length; i++) {
-    const isLastEntry = i === entries.length - 1;
-    const prompt = tty3 ? import_picocolors5.default.green(">") : ">";
-    const text = tty3 ? isLastEntry ? import_picocolors5.default.green(entries[i]) : import_picocolors5.default.dim(import_picocolors5.default.green(entries[i])) : entries[i];
+  for (const entry of entries) {
+    const prompt = tty3 ? import_picocolors5.default.dim(import_picocolors5.default.green(">")) : ">";
+    const text = tty3 ? import_picocolors5.default.dim(import_picocolors5.default.green(entry)) : entry;
     console.log(`${prompt} ${text}`);
   }
 }
@@ -12049,7 +12041,7 @@ async function watchPentest(client, profileId, options) {
     spinner.text = import_picocolors5.default.green(currentPhase ? `[${currentPhase}] ${buzz}...` : `${buzz}...`);
   }
   if (!useJson && tty3) {
-    spinner = ora({ text: "Fetching pentest status...", color: "green", isEnabled: true }).start();
+    spinner = ora({ text: "Fetching pentest status...", color: "green", isEnabled: true, discardStdin: false }).start();
     cycler = createBuzzwordCycler(SCAN_EXECUTION_PHRASES, 2500, () => {
       updateSpinnerText();
     });
@@ -12064,71 +12056,134 @@ async function watchPentest(client, profileId, options) {
     process.exit(0);
   });
   const showFullDetails = await resolveShowFullDetails(client);
-  while (true) {
-    const scanDetail = await client.scans.get(profileId);
-    const totalMs = Date.now() - loopStart;
-    if (useJson) {
-      const elapsed = Math.round(totalMs / 1e3);
-      process.stdout.write(
-        JSON.stringify({ ...scanDetail, elapsed_seconds: elapsed }) + "\n"
-      );
-    } else {
-      const normalized = normalizeActivityHistory(scanDetail.activity_history);
-      const filtered = filterActivityForTier(normalized, showFullDetails);
-      if (printedCount > filtered.length) printedCount = 0;
-      const newEntries = filtered.slice(printedCount);
-      if (newEntries.length > 0) {
-        if (spinner) spinner.stop();
-        printActivityLines(newEntries, tty3);
-        printedCount += newEntries.length;
-        if (spinner) spinner = ora({ color: "green", isEnabled: true }).start();
-      }
-      currentPhase = extractPhase(filtered);
-      updateSpinnerText();
-    }
-    const terminalStatuses = ["Completed", "Failed", "Stopped"];
-    if (terminalStatuses.some((s) => scanDetail.scan_status.includes(s))) {
-      cleanup();
+  let consecutiveErrors = 0;
+  const MAX_CONSECUTIVE_ERRORS = 2;
+  let deferredExitCode = null;
+  try {
+    while (true) {
+      let scanDetail;
+      try {
+        scanDetail = await client.scans.get(profileId);
+        consecutiveErrors = 0;
+      } catch (error2) {
+        if (error2 instanceof ApiError) {
+          if (error2.status === 401 || error2.status === 403) {
+            throw error2;
+          }
+          if (error2.status === 404) {
+            if (!useJson) {
+              const icon2 = tty3 ? import_picocolors5.default.yellow(sym.warn) : sym.warn;
+              console.log(`
+${icon2} Pentest is no longer available.`);
+              console.log(`  Check status: kinosec pentest get ${profileId}`);
+            }
+            break;
+          }
+        }
+        consecutiveErrors++;
+        if (consecutiveErrors >= MAX_CONSECUTIVE_ERRORS) {
+          if (!useJson) {
+            const icon2 = tty3 ? import_picocolors5.default.red(sym.fail) : sym.fail;
+            console.log(`
+${icon2} Lost connection to pentest.`);
+            console.log(`  Check status: kinosec pentest get ${profileId}`);
+          }
+          break;
+        }
+        if (spinner) {
+          spinner.text = import_picocolors5.default.yellow("Connection lost, retrying...");
+        }
+        await new Promise((resolve) => setTimeout(resolve, intervalMs));
+        continue;
+      }
+      const totalMs = Date.now() - loopStart;
+      if (useJson) {
+        const elapsed = Math.round(totalMs / 1e3);
+        process.stdout.write(
+          JSON.stringify({ ...scanDetail, elapsed_seconds: elapsed }) + "\n"
+        );
+      } else {
+        const normalized = normalizeActivityHistory(scanDetail.activity_history);
+        const filtered = filterActivityForTier(normalized, showFullDetails);
+        if (printedCount > filtered.length) printedCount = 0;
+        const newEntries = filtered.slice(printedCount);
+        if (newEntries.length > 0) {
+          if (spinner) spinner.stop();
+          printActivityLines(newEntries, tty3);
+          printedCount += newEntries.length;
+          if (spinner) spinner = ora({ color: "green", isEnabled: true, discardStdin: false }).start();
+        }
+        currentPhase = extractPhase(filtered);
+        updateSpinnerText();
+      }
+      const status = scanDetail.scan_status;
+      if (status === "Running...") {
+        if (Date.now() - loopStart > timeoutMs) {
+          const secs = Math.round(timeoutMs / 1e3);
+          console.error(`
+Timeout: pentest still running after ${secs}s.`);
+          console.error(`Check status: kinosec pentest get ${profileId}`);
+          deferredExitCode = 3;
+          break;
+        }
+        await new Promise((resolve) => setTimeout(resolve, intervalMs));
+        continue;
+      }
       if (useJson) break;
-      if (scanDetail.scan_status.includes("Failed")) {
+      if (status === "Completed") {
+        const totalDur = formatDuration(Date.now() - loopStart);
+        const domain = tty3 ? import_picocolors5.default.bold(scanDetail.domain_or_ip) : scanDetail.domain_or_ip;
+        const icon2 = tty3 ? import_picocolors5.default.green(sym.success) : sym.success;
+        const dur = tty3 ? import_picocolors5.default.dim(totalDur) : totalDur;
+        console.log(`
+${icon2} Pentest completed: ${domain}    ${dur}`);
+        if (showFindingsSummary) {
+          await printFindingsSummary(client, profileId, tty3);
+        }
+        const cmd = `kinosec finding list ${profileId}`;
+        const viewLabel = tty3 ? import_picocolors5.default.dim("View details:") : "View details:";
+        const viewCmd = tty3 ? import_picocolors5.default.cyan(cmd) : cmd;
+        console.log(`
+  ${viewLabel}  ${viewCmd}`);
+        console.log();
+        break;
+      }
+      if (status === "Failed") {
         const icon2 = tty3 ? import_picocolors5.default.red(sym.fail) : sym.fail;
         const reason = scanDetail.failure_reason || "unknown reason";
         console.log(`
 ${icon2} Pentest failed: ${reason}`);
-        process.exit(1);
+        deferredExitCode = 1;
+        break;
       }
-      if (scanDetail.scan_status.includes("Stopped")) {
+      if (status === "Stopping...") {
         const icon2 = tty3 ? import_picocolors5.default.yellow(sym.warn) : sym.warn;
         console.log(`
-${icon2} Pentest was cancelled.`);
+${icon2} Pentest is being stopped.`);
         break;
       }
-      const totalDur = formatDuration(Date.now() - loopStart);
-      const domain = tty3 ? import_picocolors5.default.bold(scanDetail.domain_or_ip) : scanDetail.domain_or_ip;
-      const icon = tty3 ? import_picocolors5.default.green(sym.success) : sym.success;
-      const dur = tty3 ? import_picocolors5.default.dim(totalDur) : totalDur;
-      console.log(`
-${icon} Pentest completed: ${domain}    ${dur}`);
-      if (showFindingsSummary) {
-        await printFindingsSummary(client, profileId, tty3);
+      if (status === "Not Yet Started") {
+        const icon2 = tty3 ? import_picocolors5.default.yellow(sym.warn) : sym.warn;
+        console.log(`
+${icon2} Pentest was stopped.`);
+        break;
       }
-      const cmd = `kinosec finding list ${profileId}`;
-      const viewLabel = tty3 ? import_picocolors5.default.dim("View details:") : "View details:";
-      const viewCmd = tty3 ? import_picocolors5.default.cyan(cmd) : cmd;
+      if (status === "Scheduled") {
+        const icon2 = tty3 ? import_picocolors5.default.yellow(sym.warn) : sym.warn;
+        console.log(`
+${icon2} Pentest is scheduled, not currently running.`);
+        break;
+      }
+      const icon = tty3 ? import_picocolors5.default.yellow(sym.warn) : sym.warn;
       console.log(`
-  ${viewLabel}  ${viewCmd}`);
-      console.log();
+${icon} Unexpected status: ${status}`);
       break;
     }
-    if (Date.now() - loopStart > timeoutMs) {
-      cleanup();
-      const secs = Math.round(timeoutMs / 1e3);
-      console.error(`
-Timeout: pentest still running after ${secs}s.`);
-      console.error(`Check status: kinosec pentest get ${profileId}`);
-      process.exit(3);
-    }
-    await new Promise((resolve) => setTimeout(resolve, intervalMs));
+  } finally {
+    cleanup();
+  }
+  if (deferredExitCode !== null) {
+    process.exit(deferredExitCode);
   }
 }
 async function printFindingsSummary(client, profileId, tty3) {
@@ -12508,7 +12563,7 @@ function parseTarget(input) {
 
 // src/commands/pentest.ts
 function registerPentestCommand(program3) {
-  const pentest = program3.command("pentest").description("Run and manage pentests").option("-t, --target <domain>", "Target domain to pentest").option("--profile <id>", "Pentest profile ID (alternative to --target)").option("--mode <mode>", "Pentest mode", "full").option("-y, --yes", "Accept authorization terms without prompting").option("--no-watch", "Skip auto-watch after starting the pentest").option("--deployment <type>", "Deployment type: cloud or on-prem", "cloud").option("--include <hosts>", "Include only these subdomains (comma-separated)").option("--exclude <hosts>", "Exclude these subdomains (comma-separated)").option("--scope <action>", "Scope action: clear").addHelpText("after", `
+  const pentest = program3.command("pentest").description("Run and manage pentests").option("-t, --target <domain>", "Target domain to pentest").option("--profile <id>", "Pentest profile ID (alternative to --target)").option("--mode <mode>", "Pentest mode: full, quick, htb, or defcon", "full").option("--flag <prefix>", "CTF flag prefix (defcon mode only, default HTB)").option("--context <text>", "CTF focus hint (defcon mode only)").option("-y, --yes", "Accept authorization terms without prompting").option("--no-watch", "Skip auto-watch after starting the pentest").option("--deployment <type>", "Deployment type: cloud or on-prem", "cloud").option("--include <hosts>", "Include only these subdomains (comma-separated)").option("--exclude <hosts>", "Exclude these subdomains (comma-separated)").option("--scope <action>", "Scope action: clear").addHelpText("after", `
 Examples:
   $ kinosec pentest -t delikado.org
   $ kinosec pentest --profile abc123
@@ -12584,6 +12639,12 @@ Examples:
           asset_id: asset.id,
           scan_mode: options.mode
         };
+        if (options.mode === "defcon") {
+          assetParams.flag_format = options.flag ?? "HTB";
+          if (options.context) assetParams.ctf_context = options.context;
+        } else if (options.flag || options.context) {
+          console.error("Warning: --flag/--context apply only to --mode defcon; ignoring.");
+        }
         if (options.deployment !== "cloud") {
           assetParams.deployment_type = options.deployment;
         }
@@ -13732,7 +13793,7 @@ Examples:
 
 // src/cli.ts
 var program2 = new Command();
-program2.name("kinosec").description("KinoSec CLI \u2014 run pentests from your terminal").version("0.10.1", "-v, --version").option("--token <pat>", "API token (overrides KINOSEC_TOKEN)").option("--output <format>", "Output format: text or json", "text").option("--json", "Shorthand for --output json").option("--no-color", "Disable colors");
+program2.name("kinosec").description("KinoSec CLI \u2014 run pentests from your terminal").version("0.10.3", "-v, --version").option("--token <pat>", "API token (overrides KINOSEC_TOKEN)").option("--output <format>", "Output format: text or json", "text").option("--json", "Shorthand for --output json").option("--no-color", "Disable colors");
 registerAuthCommand(program2);
 registerMeCommand(program2);
 registerCreditsCommand(program2);
@@ -13741,7 +13802,7 @@ registerAssetCommand(program2);
 registerFindingCommand(program2);
 registerReportCommand(program2);
 registerTokenCommand(program2);
-program2.parseAsync(process.argv).then(() => checkForUpdate("0.10.1")).catch(handleError);
+program2.parseAsync(process.argv).then(() => checkForUpdate("0.10.3")).catch(handleError);
 /*! Bundled license information:
 
 ky/distribution/index.js: