@phishnoo/cli 0.0.0-stage → 0.1.0

package/README.md

@@ -1,3 +1,5 @@
-# Temporary Holding Version
+# Phishnoo Sandbox CLI
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Use Node.js 20 or newer. Run `phishnoo login` and enter the sandbox key at the hidden prompt. Try `phishnoo score` and `phishnoo report "Example notice" https://example.invalid/notice`. Use synthetic data only. Run `phishnoo logout` to remove the local key.
+
+[Phishnoo](https://phishnoo.com) · [Developer guide](https://api.phishnoo.nl/docs)

package/cli.mjs

@@ -0,0 +1,68 @@
+#!/usr/bin/env node
+import {mkdir, readFile, writeFile, rm} from 'node:fs/promises';
+import {homedir} from 'node:os';
+import {join} from 'node:path';
+import {createInterface} from 'node:readline/promises';
+import {Writable} from 'node:stream';
+
+const dir = join(homedir(), '.phishnoo');
+const file = join(dir, 'sandbox.key');
+const [command, title, url] = process.argv.slice(2);
+const keyPattern = /^phn_sandbox_[A-Za-z0-9_-]{43}$/;
+const origin = new URL(process.env.PHISHNOO_ORIGIN || 'https://api.phishnoo.nl');
+if (origin.origin !== 'https://api.phishnoo.nl' &&
+    !(origin.protocol === 'http:' && origin.hostname === '127.0.0.1')) {
+  console.error('Unsupported service origin.');
+  process.exit(1);
+}
+async function request(endpoint, key, report) {
+  const response = await fetch(new URL('/v1/' + endpoint, origin), {
+    headers: {Authorization: 'Bearer ' + key, ...(report && {'Content-Type':'application/json'})},
+    method: report ? 'POST' : 'GET', body: report && JSON.stringify(report),
+    redirect: 'error', signal: AbortSignal.timeout(10000)
+  });
+  if (!response.ok) throw Error(`Request failed (HTTP ${response.status}).`);
+  return response.json();
+}
+try {
+  if (command === 'logout') {
+    await rm(file, {force:true});
+    console.log('Saved key removed.');
+  } else if (command === 'login') {
+    let key = process.env.PHISHNOO_KEY;
+    if (!key && process.stdin.isTTY) {
+      process.stderr.write('Sandbox key (hidden): ');
+      const sink = new Writable({write(_chunk, _encoding, done) {done();}});
+      const rl = createInterface({input:process.stdin, output:sink, terminal:true, historySize:0});
+      try { key = await rl.question(''); } finally { rl.close(); process.stderr.write('\n'); }
+    } else if (!key) {
+      const chunks = [];
+      let length = 0;
+      for await (const chunk of process.stdin) {
+        length += chunk.length;
+        if (length > 256) throw Error('Invalid sandbox key.');
+        chunks.push(chunk);
+      }
+      key = Buffer.concat(chunks).toString().trim();
+    }
+    if (!keyPattern.test(key ?? '')) throw Error('Invalid sandbox key.');
+    const tenant = await request('me', key);
+    await mkdir(dir, {recursive:true, mode:0o700});
+    await rm(file, {force:true});
+    await writeFile(file, key, {flag:'wx', mode:0o600});
+    console.log('Connected to ' + tenant.company);
+  } else if (['me','score','campaigns','progress','threats','report'].includes(command)) {
+    const key = process.env.PHISHNOO_KEY || await readFile(file, 'utf8').catch(() => '');
+    if (!keyPattern.test(key)) throw Error('Run phishnoo login first.');
+    if (command === 'report' && !title) throw Error('Usage: phishnoo report "Example notice" [URL]');
+    const result = await request(({score:'scores', report:'threats'})[command] || command, key,
+      command === 'report' ? {title, ...(url && {url})} : undefined);
+    console.log(JSON.stringify(result, null, 2));
+  } else {
+    console.log('Usage: phishnoo <login|logout|me|score|campaigns|progress|threats|report>');
+    process.exitCode = command ? 1 : 0;
+  }
+} catch (error) {
+  console.error(error.message);
+  process.exitCode = 1;
+}

package/package.json

@@ -1,6 +1 @@
-{
-  "name": "@phishnoo/cli",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+{"name":"@phishnoo/cli","version":"0.1.0","description":"Command-line client for the Phishnoo sandbox","homepage":"https://phishnoo.com","author":"Pieter","bin":{"phishnoo":"cli.mjs"},"engines":{"node":">=20"},"files":["cli.mjs","README.md"]}