@kinosec/cli 0.10.2 → 0.10.3

package/dist/cli.js

@@ -8435,13 +8435,10 @@ ${import_picocolors3.default.dim("use of its services.")}
 var import_picocolors4 = __toESM(require_picocolors(), 1);
 
 // src/lib/validate-mode.ts
+var VALID_SCAN_MODES = ["full", "quick", "htb", "defcon"];
 function validateScanMode(mode) {
-  if (mode === "quick") {
-    console.error("Quick mode is temporarily unavailable. Please use --mode full (the default).");
-    process.exit(2);
-  }
-  if (mode !== "full") {
-    console.error(`Invalid mode "${mode}". Must be: full`);
+  if (!VALID_SCAN_MODES.includes(mode)) {
+    console.error(`Invalid mode "${mode}". Must be one of: ${VALID_SCAN_MODES.join(", ")}.`);
     process.exit(2);
   }
 }
@@ -12566,7 +12563,7 @@ function parseTarget(input) {
 
 // src/commands/pentest.ts
 function registerPentestCommand(program3) {
-  const pentest = program3.command("pentest").description("Run and manage pentests").option("-t, --target <domain>", "Target domain to pentest").option("--profile <id>", "Pentest profile ID (alternative to --target)").option("--mode <mode>", "Pentest mode", "full").option("-y, --yes", "Accept authorization terms without prompting").option("--no-watch", "Skip auto-watch after starting the pentest").option("--deployment <type>", "Deployment type: cloud or on-prem", "cloud").option("--include <hosts>", "Include only these subdomains (comma-separated)").option("--exclude <hosts>", "Exclude these subdomains (comma-separated)").option("--scope <action>", "Scope action: clear").addHelpText("after", `
+  const pentest = program3.command("pentest").description("Run and manage pentests").option("-t, --target <domain>", "Target domain to pentest").option("--profile <id>", "Pentest profile ID (alternative to --target)").option("--mode <mode>", "Pentest mode: full, quick, htb, or defcon", "full").option("--flag <prefix>", "CTF flag prefix (defcon mode only, default HTB)").option("--context <text>", "CTF focus hint (defcon mode only)").option("-y, --yes", "Accept authorization terms without prompting").option("--no-watch", "Skip auto-watch after starting the pentest").option("--deployment <type>", "Deployment type: cloud or on-prem", "cloud").option("--include <hosts>", "Include only these subdomains (comma-separated)").option("--exclude <hosts>", "Exclude these subdomains (comma-separated)").option("--scope <action>", "Scope action: clear").addHelpText("after", `
 Examples:
   $ kinosec pentest -t delikado.org
   $ kinosec pentest --profile abc123
@@ -12642,6 +12639,12 @@ Examples:
           asset_id: asset.id,
           scan_mode: options.mode
         };
+        if (options.mode === "defcon") {
+          assetParams.flag_format = options.flag ?? "HTB";
+          if (options.context) assetParams.ctf_context = options.context;
+        } else if (options.flag || options.context) {
+          console.error("Warning: --flag/--context apply only to --mode defcon; ignoring.");
+        }
         if (options.deployment !== "cloud") {
           assetParams.deployment_type = options.deployment;
         }
@@ -13790,7 +13793,7 @@ Examples:
 
 // src/cli.ts
 var program2 = new Command();
-program2.name("kinosec").description("KinoSec CLI \u2014 run pentests from your terminal").version("0.10.2", "-v, --version").option("--token <pat>", "API token (overrides KINOSEC_TOKEN)").option("--output <format>", "Output format: text or json", "text").option("--json", "Shorthand for --output json").option("--no-color", "Disable colors");
+program2.name("kinosec").description("KinoSec CLI \u2014 run pentests from your terminal").version("0.10.3", "-v, --version").option("--token <pat>", "API token (overrides KINOSEC_TOKEN)").option("--output <format>", "Output format: text or json", "text").option("--json", "Shorthand for --output json").option("--no-color", "Disable colors");
 registerAuthCommand(program2);
 registerMeCommand(program2);
 registerCreditsCommand(program2);
@@ -13799,7 +13802,7 @@ registerAssetCommand(program2);
 registerFindingCommand(program2);
 registerReportCommand(program2);
 registerTokenCommand(program2);
-program2.parseAsync(process.argv).then(() => checkForUpdate("0.10.2")).catch(handleError);
+program2.parseAsync(process.argv).then(() => checkForUpdate("0.10.3")).catch(handleError);
 /*! Bundled license information:
 
 ky/distribution/index.js: