@kinosec/cli 0.6.2 → 0.7.0

package/dist/cli.js

@@ -10894,16 +10894,89 @@ function ora(options) {
   return new Ora(options);
 }
 
+// src/lib/activity-filter.ts
+function normalizeActivityHistory(raw) {
+  if (!raw) return [];
+  return raw.map((entry) => {
+    if (typeof entry === "string") return entry;
+    if (entry && typeof entry === "object" && "message" in entry) {
+      return String(entry.message);
+    }
+    return JSON.stringify(entry);
+  });
+}
+function filterActivityForTier(entries, showFullDetails) {
+  if (showFullDetails) return entries;
+  return entries.filter((line) => !/^\s{4,}/.test(line)).map((line) => {
+    if (/\] Running:/.test(line)) {
+      return line.replace(
+        /Running:.*/,
+        "Running: [upgrade to Security Pro for full details]"
+      );
+    }
+    return line;
+  });
+}
+
+// src/lib/buzzwords.ts
+var SCAN_EXECUTION_PHRASES = [
+  "DEEP SCAN",
+  "PROBING",
+  "SWEEPING",
+  "SIGNAL LOCK",
+  "ENUMERATING",
+  "TRAVERSING",
+  "MAPPING",
+  "RECON",
+  "INTERCEPTING",
+  "CALIBRATING",
+  "FINGERPRINTING",
+  "NET SWEEP",
+  "FULL SPECTRUM",
+  "RESOLVING",
+  "HANDSHAKE",
+  "DISPATCHING",
+  "CORRELATING",
+  "DARK TRACE",
+  "ECHO RETURN",
+  "MULTIPLEXING",
+  "NODE ACTIVE",
+  "FLUX STATE",
+  "PARSING",
+  "BEACON ACTIVE"
+];
+function shuffle(arr) {
+  for (let i = arr.length - 1; i > 0; i--) {
+    const j = Math.floor(Math.random() * (i + 1));
+    [arr[i], arr[j]] = [arr[j], arr[i]];
+  }
+}
+function createBuzzwordCycler(phrases, intervalMs, onTick) {
+  const pool = [...phrases];
+  shuffle(pool);
+  let index = 0;
+  function advance() {
+    index++;
+    if (index >= pool.length) {
+      shuffle(pool);
+      index = 0;
+    }
+    onTick?.(pool[index]);
+  }
+  const timer = setInterval(advance, intervalMs);
+  return {
+    current: () => pool[index],
+    destroy: () => clearInterval(timer)
+  };
+}
+
 // src/lib/watch.ts
 var UNICODE = isUnicodeSupported();
 var sym = {
   success: UNICODE ? "\u2713" : "v",
   fail: UNICODE ? "\u2717" : "x",
-  warn: UNICODE ? "\u26A0" : "!",
-  rule: UNICODE ? "\u2500" : "-"
+  warn: UNICODE ? "\u26A0" : "!"
 };
-var LABEL_WIDTH = 40;
-var TIMING_WIDTH = 8;
 function formatDuration(ms) {
   if (ms < 1e4) return `${(ms / 1e3).toFixed(1)}s`;
   if (ms < 6e4) return `${Math.round(ms / 1e3)}s`;
@@ -10912,14 +10985,6 @@ function formatDuration(ms) {
   const r = totalSec % 60;
   return `${m}m ${r.toString().padStart(2, "0")}s`;
 }
-function completedStepLine(label, phaseMs, totalMs) {
-  const lbl = label.padEnd(LABEL_WIDTH);
-  const dur = formatDuration(phaseMs).padStart(TIMING_WIDTH);
-  const tty2 = isTTY();
-  const total = tty2 ? import_picocolors5.default.dim(`(total ${formatDuration(totalMs)})`) : `(total ${formatDuration(totalMs)})`;
-  const icon = tty2 ? import_picocolors5.default.green(sym.success) : sym.success;
-  return `${icon} ${lbl}${dur}  ${total}`;
-}
 function renderFindingsSummary(counts) {
   const levels = [
     { key: "critical", label: "critical", color: import_picocolors5.default.red },
@@ -10941,55 +11006,80 @@ function findCount(counts, level) {
   const key = Object.keys(counts).find((k) => k.toLowerCase() === level);
   return key ? counts[key] : 0;
 }
+function extractPhase(entries) {
+  for (let i = entries.length - 1; i >= 0; i--) {
+    const m = entries[i].match(/^\[([^\]]+)\]/);
+    if (m) return m[1].toUpperCase();
+  }
+  return null;
+}
+function printActivityLines(entries, tty2) {
+  for (let i = 0; i < entries.length; i++) {
+    const isLastEntry = i === entries.length - 1;
+    const prompt = tty2 ? import_picocolors5.default.green(">") : ">";
+    const text = tty2 ? isLastEntry ? import_picocolors5.default.green(entries[i]) : import_picocolors5.default.dim(import_picocolors5.default.green(entries[i])) : entries[i];
+    console.log(`${prompt} ${text}`);
+  }
+}
+async function resolveShowFullDetails(client) {
+  try {
+    const me = await client.me.get();
+    const slug = me.plan.slug;
+    return slug === "security_pro" || slug === "enterprise";
+  } catch {
+    return false;
+  }
+}
 async function watchPentest(client, profileId, options) {
   const { timeoutMs, intervalMs, useJson, showFindingsSummary } = options;
   const tty2 = isTTY();
   const loopStart = Date.now();
   let spinner = null;
-  let lastActivity = "";
-  let phaseStart = Date.now();
+  let printedCount = 0;
+  let currentPhase = null;
+  let cycler = null;
+  function updateSpinnerText() {
+    if (!spinner || !cycler) return;
+    const buzz = cycler.current();
+    spinner.text = import_picocolors5.default.green(currentPhase ? `[${currentPhase}] ${buzz}...` : `${buzz}...`);
+  }
   if (!useJson && tty2) {
-    spinner = ora({ text: "Fetching pentest status...", isEnabled: true }).start();
+    spinner = ora({ text: "Fetching pentest status...", color: "green", isEnabled: true }).start();
+    cycler = createBuzzwordCycler(SCAN_EXECUTION_PHRASES, 2500, () => {
+      updateSpinnerText();
+    });
   }
   const cleanup = () => {
     if (spinner) spinner.stop();
+    if (cycler) cycler.destroy();
   };
   process.once("SIGINT", () => {
     cleanup();
     console.log("\nWatch cancelled. Pentest is still running.");
     process.exit(0);
   });
+  const showFullDetails = await resolveShowFullDetails(client);
   while (true) {
     const scanDetail = await client.scans.get(profileId);
-    const activity = scanDetail.current_activity || "";
     const totalMs = Date.now() - loopStart;
-    const currentPhaseMs = Date.now() - phaseStart;
     if (useJson) {
       const elapsed = Math.round(totalMs / 1e3);
       process.stdout.write(
         JSON.stringify({ ...scanDetail, elapsed_seconds: elapsed }) + "\n"
       );
-    } else if (spinner) {
-      if (activity && activity !== lastActivity && lastActivity) {
-        const phaseDuration = Date.now() - phaseStart;
-        const line = completedStepLine(lastActivity, phaseDuration, totalMs);
-        spinner.stopAndPersist({ symbol: "", text: line });
-        spinner = ora({ isEnabled: true }).start();
-        phaseStart = Date.now();
-      }
-      lastActivity = activity || lastActivity;
-      const dur = formatDuration(currentPhaseMs);
-      spinner.text = `${activity || lastActivity}  ${import_picocolors5.default.dim(dur)}`;
-    } else if (!useJson) {
-      if (activity && activity !== lastActivity && lastActivity) {
-        const phaseDuration = Date.now() - phaseStart;
-        console.log(`${sym.success} ${lastActivity}  ${formatDuration(phaseDuration)}`);
-        phaseStart = Date.now();
-      }
-      if (activity && activity !== lastActivity) {
-        console.log(`\u2022 ${activity}`);
-      }
-      lastActivity = activity || lastActivity;
+    } else {
+      const normalized = normalizeActivityHistory(scanDetail.activity_history);
+      const filtered = filterActivityForTier(normalized, showFullDetails);
+      if (printedCount > filtered.length) printedCount = 0;
+      const newEntries = filtered.slice(printedCount);
+      if (newEntries.length > 0) {
+        if (spinner) spinner.stop();
+        printActivityLines(newEntries, tty2);
+        printedCount += newEntries.length;
+        if (spinner) spinner = ora({ color: "green", isEnabled: true }).start();
+      }
+      currentPhase = extractPhase(filtered);
+      updateSpinnerText();
     }
     const terminalStatuses = ["Completed", "Failed", "Stopped"];
     if (terminalStatuses.some((s) => scanDetail.scan_status.includes(s))) {
@@ -12162,7 +12252,7 @@ Examples:
 
 // src/cli.ts
 var program2 = new Command();
-program2.name("kinosec").description("KinoSec CLI \u2014 run pentests from your terminal").version("0.6.2", "-v, --version").option("--token <pat>", "API token (overrides KINOSEC_TOKEN and config)").option("--api-url <url>", "API base URL (overrides config)").option("--output <format>", "Output format: text or json", "text").option("--json", "Shorthand for --output json").option("--no-color", "Disable colors");
+program2.name("kinosec").description("KinoSec CLI \u2014 run pentests from your terminal").version("0.7.0", "-v, --version").option("--token <pat>", "API token (overrides KINOSEC_TOKEN and config)").option("--api-url <url>", "API base URL (overrides config)").option("--output <format>", "Output format: text or json", "text").option("--json", "Shorthand for --output json").option("--no-color", "Disable colors");
 registerAuthCommand(program2);
 registerConfigCommand(program2);
 registerMeCommand(program2);
@@ -12171,7 +12261,7 @@ registerAssetCommand(program2);
 registerFindingCommand(program2);
 registerReportCommand(program2);
 registerTokenCommand(program2);
-program2.parseAsync(process.argv).then(() => checkForUpdate("0.6.2")).catch(handleError);
+program2.parseAsync(process.argv).then(() => checkForUpdate("0.7.0")).catch(handleError);
 /*! Bundled license information:
 
 ky/distribution/index.js: