@vigilbase/cli 0.1.0

package/dist/lib/format.js

@@ -0,0 +1,289 @@
+export function createWriter(stdout = process.stdout, stderr = process.stderr) {
+    return {
+        stdout: (line = '') => {
+            stdout.write(line.endsWith('\n') ? line : `${line}\n`);
+        },
+        stderr: (line = '') => {
+            stderr.write(line.endsWith('\n') ? line : `${line}\n`);
+        },
+    };
+}
+function printJson(writer, value) {
+    writer.stdout(JSON.stringify(value, null, 2));
+}
+function asRecord(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return null;
+    return value;
+}
+function findingFromUnknown(value) {
+    const item = asRecord(value);
+    if (!item)
+        return null;
+    const title = (typeof item.title === 'string' && item.title) ||
+        (typeof item.name === 'string' && item.name) ||
+        (typeof item.header === 'string' && item.header) ||
+        (typeof item.category === 'string' && item.category) ||
+        null;
+    if (!title)
+        return null;
+    const recommendation = (typeof item.recommendation === 'string' && item.recommendation) ||
+        (typeof item.suggestion === 'string' && item.suggestion) ||
+        (Array.isArray(item.recommendations) &&
+            typeof item.recommendations[0] === 'string'
+            ? item.recommendations[0]
+            : null) ||
+        undefined;
+    return {
+        title,
+        severity: typeof item.severity === 'string' ? item.severity : undefined,
+        recommendation: recommendation || undefined,
+    };
+}
+const CHECK_FAIL_STATUSES = new Set(['fail', 'failed', 'error', 'warning', 'warn']);
+function pushCheckFindings(buckets, checks) {
+    for (const raw of checks) {
+        const item = asRecord(raw);
+        if (!item)
+            continue;
+        const status = typeof item.status === 'string' ? item.status.trim().toLowerCase() : '';
+        if (!CHECK_FAIL_STATUSES.has(status))
+            continue;
+        const title = (typeof item.name === 'string' && item.name) ||
+            (typeof item.title === 'string' && item.title) ||
+            null;
+        if (!title)
+            continue;
+        const recommendation = (typeof item.recommendation === 'string' && item.recommendation) ||
+            (typeof item.description === 'string' && item.description) ||
+            (typeof item.details === 'string' && item.details) ||
+            undefined;
+        buckets.push({
+            title,
+            severity: (typeof item.severity === 'string' && item.severity) ||
+                (status === 'warning' || status === 'warn' ? 'medium' : undefined),
+            recommendation,
+        });
+    }
+}
+function summarizeCounts(result) {
+    const details = asRecord(result.details);
+    const summary = asRecord(result.summary) || (details ? asRecord(details.summary) : null);
+    if (!summary)
+        return null;
+    const count = (n, singular, plural = `${singular}s`) => `${n} ${n === 1 ? singular : plural}`;
+    const parts = [];
+    if (typeof summary.failed === 'number') {
+        parts.push(count(summary.failed, 'failed', 'failed'));
+    }
+    if (typeof summary.warnings === 'number') {
+        parts.push(count(summary.warnings, 'warning'));
+    }
+    if (typeof summary.passed === 'number') {
+        parts.push(count(summary.passed, 'passed', 'passed'));
+    }
+    if (typeof summary.missing === 'number') {
+        parts.push(count(summary.missing, 'missing', 'missing'));
+    }
+    if (typeof summary.misconfigured === 'number' && summary.misconfigured > 0) {
+        parts.push(count(summary.misconfigured, 'misconfigured', 'misconfigured'));
+    }
+    if (typeof summary.configured === 'number') {
+        parts.push(count(summary.configured, 'configured', 'configured'));
+    }
+    if (parts.length === 0 && typeof summary.total === 'number') {
+        parts.push(count(summary.total, 'check'));
+    }
+    return parts.length > 0 ? parts.join(' · ') : null;
+}
+function collectFindings(result) {
+    const details = asRecord(result.details);
+    const buckets = [];
+    for (const key of ['issues', 'findings', 'recommendations']) {
+        if (Array.isArray(result[key]))
+            buckets.push(...result[key]);
+        if (details && Array.isArray(details[key])) {
+            buckets.push(...details[key]);
+        }
+    }
+    // website-security / cloudflare-checkup style: details.checks[]
+    if (Array.isArray(result.checks)) {
+        pushCheckFindings(buckets, result.checks);
+    }
+    if (details && Array.isArray(details.checks)) {
+        pushCheckFindings(buckets, details.checks);
+    }
+    // Prefer structured issues/checks; synthesize from records/headers only if needed.
+    if (buckets.length === 0) {
+        const records = details ? asRecord(details.records) : null;
+        if (records) {
+            for (const [name, value] of Object.entries(records)) {
+                const record = asRecord(value);
+                if (!record)
+                    continue;
+                const status = typeof record.status === 'string' ? record.status : '';
+                if (status !== 'missing' && status !== 'misconfigured' && status !== 'fail') {
+                    continue;
+                }
+                buckets.push({
+                    title: `${name.toUpperCase()} ${status === 'missing' ? 'not configured' : status}`,
+                    severity: status === 'missing' ? 'high' : 'medium',
+                    recommendation: (typeof record.recommendation === 'string' && record.recommendation) ||
+                        (status === 'missing' ? `Configure ${name.toUpperCase()}` : undefined),
+                });
+            }
+        }
+        const headers = details ? asRecord(details.headers) : null;
+        if (headers) {
+            for (const [name, value] of Object.entries(headers)) {
+                const header = asRecord(value);
+                if (!header)
+                    continue;
+                const status = typeof header.status === 'string' ? header.status : '';
+                if (status !== 'missing' && status !== 'misconfigured' && header.present !== false) {
+                    continue;
+                }
+                const pretty = name
+                    .replace(/([A-Z])/g, '-$1')
+                    .replace(/^-/, '')
+                    .replace(/^./, (c) => c.toUpperCase());
+                const recs = Array.isArray(header.recommendations)
+                    ? header.recommendations.filter((item) => typeof item === 'string')
+                    : [];
+                buckets.push({
+                    title: (typeof header.analysis === 'string' && header.analysis) ||
+                        `${pretty} ${status || 'missing'}`,
+                    severity: status === 'missing' || header.present === false ? 'high' : 'low',
+                    recommendation: recs[0] ||
+                        (typeof header.recommendation === 'string' ? header.recommendation : undefined),
+                });
+            }
+        }
+    }
+    const findings = [];
+    const seen = new Set();
+    for (const raw of buckets) {
+        const finding = findingFromUnknown(raw);
+        if (!finding)
+            continue;
+        const key = `${finding.title.toLowerCase()}|${(finding.recommendation ?? '').toLowerCase()}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        findings.push(finding);
+    }
+    return findings;
+}
+const MAX_FINDING_LINES = 12;
+/** Compact human lines for a scan result (no UI/skill links, no summary dump). */
+function summarizeResultCompact(result) {
+    if (!result)
+        return [];
+    const lines = [];
+    const message = typeof result.message === 'string' ? result.message : null;
+    if (message)
+        lines.push(message);
+    const counts = summarizeCounts(result);
+    if (counts)
+        lines.push(counts);
+    const findings = collectFindings(result);
+    for (const finding of findings.slice(0, MAX_FINDING_LINES)) {
+        const sev = finding.severity ? ` ${finding.severity}` : '';
+        if (finding.recommendation) {
+            lines.push(`✗${sev}  ${finding.title} — ${finding.recommendation}`);
+        }
+        else {
+            lines.push(`✗${sev}  ${finding.title}`);
+        }
+    }
+    if (findings.length > MAX_FINDING_LINES) {
+        lines.push(`… +${findings.length - MAX_FINDING_LINES} more (use --json)`);
+    }
+    return lines;
+}
+export function formatToolsList(catalog, mode, writer, options) {
+    if (mode === 'json') {
+        printJson(writer, catalog);
+        return;
+    }
+    const publicNames = catalog.tools.map((tool) => tool.toolName).join('  ');
+    writer.stdout(`public     ${publicNames || '(none)'}`);
+    if (options?.sensitiveTools?.length) {
+        writer.stdout(`sensitive  ${options.sensitiveTools.join('  ')}`);
+    }
+    if (typeof options?.isAuthenticated === 'boolean') {
+        writer.stdout(options.isAuthenticated ? 'auth       signed in' : 'auth       signed out');
+    }
+}
+export function formatToolDescription(tool, mode, writer, skillMarkdown) {
+    if (mode === 'json') {
+        printJson(writer, { ...tool, skillMarkdown: skillMarkdown ?? null });
+        return;
+    }
+    writer.stdout(`${tool.toolName}  ${tool.name}`);
+    const blurb = tool.description.length > 100
+        ? `${tool.description.slice(0, 97).trimEnd()}…`
+        : tool.description;
+    writer.stdout(blurb);
+    writer.stdout(`vigilbase run ${tool.toolName} <target>`);
+    if (skillMarkdown) {
+        writer.stdout();
+        writer.stdout(skillMarkdown.trimEnd());
+    }
+}
+export function formatExecuteResult(result, mode, writer) {
+    if (mode === 'json') {
+        printJson(writer, result);
+        return;
+    }
+    const tool = result.toolName ?? 'tool';
+    const target = result.target ?? '';
+    const grade = result.grade != null
+        ? `${result.grade}${result.gradeScore != null ? ` ${result.gradeScore}` : ''}`
+        : 'n/a';
+    const head = result.success
+        ? `✓ ${tool} · ${target} · ${grade}`
+        : `✗ ${tool} · ${target} · ${grade}`;
+    if (result.success)
+        writer.stdout(head);
+    else
+        writer.stderr(head);
+    if (result.error) {
+        writer.stderr(`  ${result.error}`);
+    }
+    for (const line of summarizeResultCompact(result.result)) {
+        writer.stdout(`  ${line}`);
+    }
+}
+export function formatError(error, mode, writer) {
+    const message = error instanceof Error ? error.message : String(error);
+    const payload = {
+        success: false,
+        error: message,
+    };
+    if (error && typeof error === 'object') {
+        if ('status' in error && typeof error.status === 'number') {
+            payload.status = error.status;
+        }
+        if ('code' in error &&
+            typeof error.code === 'string') {
+            payload.code = error.code;
+        }
+        if ('retryAfterSec' in error &&
+            typeof error.retryAfterSec === 'number') {
+            payload.retryAfterSec = error.retryAfterSec;
+        }
+        if ('body' in error && error.body != null) {
+            payload.body = error.body;
+        }
+    }
+    if (mode === 'json') {
+        printJson(writer, payload);
+        return;
+    }
+    writer.stderr(`Error: ${message}`);
+    if (typeof payload.retryAfterSec === 'number') {
+        writer.stderr(`Retry after ${payload.retryAfterSec}s`);
+    }
+}
+//# sourceMappingURL=format.js.map

package/dist/lib/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../../src/lib/format.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,YAAY,CAC1B,SAAgC,OAAO,CAAC,MAAM,EAC9C,SAAgC,OAAO,CAAC,MAAM;IAE9C,OAAO;QACL,MAAM,EAAE,CAAC,IAAI,GAAG,EAAE,EAAE,EAAE;YACpB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAA;QACxD,CAAC;QACD,MAAM,EAAE,CAAC,IAAI,GAAG,EAAE,EAAE,EAAE;YACpB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAA;QACxD,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,KAAc;IAC/C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;AAC/C,CAAC;AAQD,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5E,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC5B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAEtB,MAAM,KAAK,GACT,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC;QAC9C,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC;QAC5C,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC;QAChD,CAAC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC;QACpD,IAAI,CAAA;IACN,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IAEvB,MAAM,cAAc,GAClB,CAAC,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC;QAChE,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC;QACxD,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC;YACpC,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,QAAQ;YACzC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;YACzB,CAAC,CAAC,IAAI,CAAC;QACT,SAAS,CAAA;IAEX,OAAO;QACL,KAAK;QACL,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACvE,cAAc,EAAE,cAAc,IAAI,SAAS;KAC5C,CAAA;AACH,CAAC;AAED,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;AAEnF,SAAS,iBAAiB,CAAC,OAAkB,EAAE,MAAiB;IAC9D,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;QAC1B,IAAI,CAAC,IAAI;YAAE,SAAQ;QACnB,MAAM,MAAM,GACV,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACzE,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAQ;QAE9C,MAAM,KAAK,GACT,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC;YAC5C,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC;YAC9C,IAAI,CAAA;QACN,IAAI,CAAC,KAAK;YAAE,SAAQ;QAEpB,MAAM,cAAc,GAClB,CAAC,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC;YAChE,CAAC,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC;YAC1D,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC;YAClD,SAAS,CAAA;QAEX,OAAO,CAAC,IAAI,CAAC;YACX,KAAK;YACL,QAAQ,EACN,CAAC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC;gBACpD,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc;SACf,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAA+B;IACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACxC,MAAM,OAAO,GACX,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC1E,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IAEzB,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,QAAgB,EAAE,MAAM,GAAG,GAAG,QAAQ,GAAG,EAAE,EAAE,CACrE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;IAEvC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;IACvD,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAA;IAChD,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;IACvD,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;IAC1D,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QAC3E,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC,CAAA;IAC5E,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAA;IACnE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5D,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACpD,CAAC;AAED,SAAS,eAAe,CAAC,MAA+B;IACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACxC,MAAM,OAAO,GAAc,EAAE,CAAA;IAE7B,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,iBAAiB,CAAU,EAAE,CAAC;QACrE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAI,MAAM,CAAC,GAAG,CAAe,CAAC,CAAA;QAC3E,IAAI,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC,GAAI,OAAO,CAAC,GAAG,CAAe,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAmB,CAAC,CAAA;IACxD,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAmB,CAAC,CAAA;IACzD,CAAC;IAED,mFAAmF;IACnF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC1D,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;gBAC9B,IAAI,CAAC,MAAM;oBAAE,SAAQ;gBACrB,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;gBACrE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,eAAe,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC5E,SAAQ;gBACV,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,EAAE;oBAClF,QAAQ,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;oBAClD,cAAc,EACZ,CAAC,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,CAAC;wBACpE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;iBACzE,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC1D,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;gBAC9B,IAAI,CAAC,MAAM;oBAAE,SAAQ;gBACrB,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;gBACrE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,eAAe,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;oBACnF,SAAQ;gBACV,CAAC;gBACD,MAAM,MAAM,GAAG,IAAI;qBAChB,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC;qBAC1B,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;qBACjB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;gBACxC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;oBAChD,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;oBACnF,CAAC,CAAC,EAAE,CAAA;gBACN,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EACH,CAAC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;wBACxD,GAAG,MAAM,IAAI,MAAM,IAAI,SAAS,EAAE;oBACpC,QAAQ,EAAE,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;oBAC3E,cAAc,EACZ,IAAI,CAAC,CAAC,CAAC;wBACP,CAAC,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;iBAClF,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAc,EAAE,CAAA;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;QACvC,IAAI,CAAC,OAAO;YAAE,SAAQ;QACtB,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAA;QAC5F,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACb,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACxB,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAE5B,kFAAkF;AAClF,SAAS,sBAAsB,CAC7B,MAAkD;IAElD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IAEtB,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1E,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAEhC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;IACtC,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAE9B,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;IACxC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1D,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,OAAO,CAAC,KAAK,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;QACrE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,GAAG,iBAAiB,oBAAoB,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,OAAkC,EAClC,IAAmB,EACnB,MAAc,EACd,OAGC;IAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC1B,OAAM;IACR,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzE,MAAM,CAAC,MAAM,CAAC,cAAc,WAAW,IAAI,QAAQ,EAAE,CAAC,CAAA;IACtD,IAAI,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,cAAc,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAClE,CAAC;IACD,IAAI,OAAO,OAAO,EAAE,eAAe,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAA;IAC3F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,IAAyB,EACzB,IAAmB,EACnB,MAAc,EACd,aAAsB;IAEtB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,aAAa,IAAI,IAAI,EAAE,CAAC,CAAA;QACpE,OAAM;IACR,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IAC/C,MAAM,KAAK,GACT,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG;QAC3B,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG;QAC/C,CAAC,CAAC,IAAI,CAAC,WAAW,CAAA;IACtB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACpB,MAAM,CAAC,MAAM,CAAC,iBAAiB,IAAI,CAAC,QAAQ,WAAW,CAAC,CAAA;IAExD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,CAAC,MAAM,EAAE,CAAA;QACf,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAA;IACxC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAAgC,EAChC,IAAmB,EACnB,MAAc;IAEd,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QACzB,OAAM;IACR,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAA;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAA;IAClC,MAAM,KAAK,GACT,MAAM,CAAC,KAAK,IAAI,IAAI;QAClB,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9E,CAAC,CAAC,KAAK,CAAA;IAEX,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO;QACzB,CAAC,CAAC,KAAK,IAAI,MAAM,MAAM,MAAM,KAAK,EAAE;QACpC,CAAC,CAAC,KAAK,IAAI,MAAM,MAAM,MAAM,KAAK,EAAE,CAAA;IAEtC,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAExB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;IACpC,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;IAC5B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAAc,EACd,IAAmB,EACnB,MAAc;IAEd,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtE,MAAM,OAAO,GAA4B;QACvC,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,OAAO;KACf,CAAA;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,IAAI,QAAQ,IAAI,KAAK,IAAI,OAAQ,KAA6B,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnF,OAAO,CAAC,MAAM,GAAI,KAA4B,CAAC,MAAM,CAAA;QACvD,CAAC;QACD,IACE,MAAM,IAAI,KAAK;YACf,OAAQ,KAA2B,CAAC,IAAI,KAAK,QAAQ,EACrD,CAAC;YACD,OAAO,CAAC,IAAI,GAAI,KAA0B,CAAC,IAAI,CAAA;QACjD,CAAC;QACD,IACE,eAAe,IAAI,KAAK;YACxB,OAAQ,KAAoC,CAAC,aAAa,KAAK,QAAQ,EACvE,CAAC;YACD,OAAO,CAAC,aAAa,GAAI,KAAmC,CAAC,aAAa,CAAA;QAC5E,CAAC;QACD,IAAI,MAAM,IAAI,KAAK,IAAK,KAA2B,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;YACjE,OAAO,CAAC,IAAI,GAAI,KAA2B,CAAC,IAAI,CAAA;QAClD,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC1B,OAAM;IACR,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,UAAU,OAAO,EAAE,CAAC,CAAA;IAClC,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,eAAe,OAAO,CAAC,aAAa,GAAG,CAAC,CAAA;IACxD,CAAC;AACH,CAAC"}

package/dist/lib/help.d.ts

@@ -0,0 +1,4 @@
+export declare const HELP_TAGLINE = "one \u00B7 tools";
+export declare const HELP_TEXT = "Usage: vigilbase <command>\n\nCommands\n  list                         List available tools\n  run <tool> <target>          Run a scan\n  headers <url>                Check security headers\n  email <domain>               Check email security (SPF/DKIM/DMARC)\n  describe <tool>              Show tool details\n  login                        Sign in (unlocks sensitive tools)\n  logout \u00B7 whoami              Session\n  badge <domain> \u00B7 doctor      Badge URL \u00B7 connectivity check\n\nSensitive tools (after login)\n  website-security \u00B7 react2shell \u00B7 fortibleed-check\n\nOptions\n  -j, --json                   JSON output\n  -h, --help \u00B7 -V, --version\n\nExamples\n  vigilbase headers https://vigilbase.com\n  vigilbase email vigilbase.com\n  vigilbase login\n  vigilbase run website-security vigilbase.com\n";
+export declare function helpForCommand(command: string): string | null;
+//# sourceMappingURL=help.d.ts.map

package/dist/lib/help.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../../src/lib/help.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,qBAAgB,CAAA;AAEzC,eAAO,MAAM,SAAS,y0BAwBrB,CAAA;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA8B7D"}

package/dist/lib/help.js

@@ -0,0 +1,58 @@
+export const HELP_TAGLINE = 'one · tools';
+export const HELP_TEXT = `Usage: vigilbase <command>
+
+Commands
+  list                         List available tools
+  run <tool> <target>          Run a scan
+  headers <url>                Check security headers
+  email <domain>               Check email security (SPF/DKIM/DMARC)
+  describe <tool>              Show tool details
+  login                        Sign in (unlocks sensitive tools)
+  logout · whoami              Session
+  badge <domain> · doctor      Badge URL · connectivity check
+
+Sensitive tools (after login)
+  website-security · react2shell · fortibleed-check
+
+Options
+  -j, --json                   JSON output
+  -h, --help · -V, --version
+
+Examples
+  vigilbase headers https://vigilbase.com
+  vigilbase email vigilbase.com
+  vigilbase login
+  vigilbase run website-security vigilbase.com
+`;
+export function helpForCommand(command) {
+    switch (command) {
+        case 'list':
+            return `Usage: vigilbase list [--json]`;
+        case 'run':
+            return `Usage: vigilbase run <tool> <target> [--json]
+
+Public: security-headers, email-security
+Login:  website-security, react2shell, fortibleed-check`;
+        case 'describe':
+            return `Usage: vigilbase describe <tool> [--json] [--no-skill]`;
+        case 'skill':
+            return `Usage: vigilbase skill <tool> [--json]`;
+        case 'badge':
+            return `Usage: vigilbase badge <domain> [--style default|compact|mini] [--json]`;
+        case 'doctor':
+            return `Usage: vigilbase doctor [--json]`;
+        case 'login':
+            return `Usage: vigilbase login [--json] [--no-open] [--token <bearer>]`;
+        case 'logout':
+            return `Usage: vigilbase logout [--json]`;
+        case 'whoami':
+            return `Usage: vigilbase whoami [--json]`;
+        case 'headers':
+            return `Usage: vigilbase headers <url> [--json]`;
+        case 'email':
+            return `Usage: vigilbase email <domain> [--json]`;
+        default:
+            return null;
+    }
+}
+//# sourceMappingURL=help.js.map

package/dist/lib/help.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.js","sourceRoot":"","sources":["../../src/lib/help.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG,aAAa,CAAA;AAEzC,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;;;;CAwBxB,CAAA;AAED,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,gCAAgC,CAAA;QACzC,KAAK,KAAK;YACR,OAAO;;;wDAG2C,CAAA;QACpD,KAAK,UAAU;YACb,OAAO,wDAAwD,CAAA;QACjE,KAAK,OAAO;YACV,OAAO,wCAAwC,CAAA;QACjD,KAAK,OAAO;YACV,OAAO,yEAAyE,CAAA;QAClF,KAAK,QAAQ;YACX,OAAO,kCAAkC,CAAA;QAC3C,KAAK,OAAO;YACV,OAAO,gEAAgE,CAAA;QACzE,KAAK,QAAQ;YACX,OAAO,kCAAkC,CAAA;QAC3C,KAAK,QAAQ;YACX,OAAO,kCAAkC,CAAA;QAC3C,KAAK,SAAS;YACZ,OAAO,yCAAyC,CAAA;QAClD,KAAK,OAAO;YACV,OAAO,0CAA0C,CAAA;QACnD;YACE,OAAO,IAAI,CAAA;IACf,CAAC;AACH,CAAC"}

package/dist/lib/one-client.d.ts

@@ -0,0 +1,43 @@
+import type { AgentToolDefinition } from '../types.js';
+import type { CliConfig } from './config.js';
+export type OneToolExecuteResponse = {
+    success: boolean;
+    error?: string;
+    data?: {
+        toolRunId?: string;
+        status?: string;
+        grade?: string | null;
+        gradeScore?: number | null;
+        result?: Record<string, unknown> | null;
+    };
+};
+export type OneSessionResponse = {
+    session?: Record<string, unknown> | null;
+    user?: {
+        id?: string;
+        email?: string | null;
+        name?: string | null;
+    } | null;
+};
+/**
+ * Tools that require Vigilbase One authentication (sensitive / gated scanners).
+ * Public agent tools remain available without login via vigilbase.com.
+ */
+export declare const ONE_AUTH_REQUIRED_TOOLS: readonly ["website-security", "react2shell", "fortibleed-check"];
+export type OneAuthRequiredTool = (typeof ONE_AUTH_REQUIRED_TOOLS)[number];
+export declare function isOneAuthRequiredTool(toolName: string): toolName is OneAuthRequiredTool;
+/** Static catalog entries for sensitive tools (not listed on the public agent API). */
+export declare const ONE_SENSITIVE_TOOL_DEFINITIONS: Record<OneAuthRequiredTool, AgentToolDefinition>;
+export declare function resolveToolDefinition(toolName: string, publicTools: AgentToolDefinition[], oneBaseUrl: string): AgentToolDefinition | null;
+/** Tools executable through One's authenticated `/api/tools/{tool}/execute` bridge. */
+export declare const ONE_EXECUTABLE_TOOLS: readonly ["security-headers", "email-security", "website-security", "react2shell", "fortibleed-check"];
+export declare function isOneExecutableTool(toolName: string): boolean;
+export declare class VigilbaseOneClient {
+    private readonly config;
+    private readonly accessToken;
+    constructor(config: CliConfig, accessToken: string);
+    private request;
+    getSession(): Promise<OneSessionResponse>;
+    executeTool(toolName: string, target: string): Promise<OneToolExecuteResponse>;
+}
+//# sourceMappingURL=one-client.d.ts.map

package/dist/lib/one-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"one-client.d.ts","sourceRoot":"","sources":["../../src/lib/one-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAG5C,MAAM,MAAM,sBAAsB,GAAG;IAEnC,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE;QACL,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;KACxC,CAAA;CACF,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACxC,IAAI,CAAC,EAAE;QACL,EAAE,CAAC,EAAE,MAAM,CAAA;QACX,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KACrB,GAAG,IAAI,CAAA;CACT,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,uBAAuB,kEAI1B,CAAA;AAEV,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE1E,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,IAAI,mBAAmB,CAEvF;AAED,uFAAuF;AACvF,eAAO,MAAM,8BAA8B,EAAE,MAAM,CACjD,mBAAmB,EACnB,mBAAmB,CAgCpB,CAAA;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,mBAAmB,EAAE,EAClC,UAAU,EAAE,MAAM,GACjB,mBAAmB,GAAG,IAAI,CAe5B;AAED,uFAAuF;AACvF,eAAO,MAAM,oBAAoB,wGAMvB,CAAA;AAEV,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED,qBAAa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,WAAW;gBADX,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM;YAGxB,OAAO;IAyCf,UAAU,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAWzC,WAAW,CACf,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,sBAAsB,CAAC;CAgCnC"}

package/dist/lib/one-client.js

@@ -0,0 +1,147 @@
+import { VigilbaseApiError } from './client.js';
+/**
+ * Tools that require Vigilbase One authentication (sensitive / gated scanners).
+ * Public agent tools remain available without login via vigilbase.com.
+ */
+export const ONE_AUTH_REQUIRED_TOOLS = [
+    'website-security',
+    'react2shell',
+    'fortibleed-check',
+];
+export function isOneAuthRequiredTool(toolName) {
+    return ONE_AUTH_REQUIRED_TOOLS.includes(toolName);
+}
+/** Static catalog entries for sensitive tools (not listed on the public agent API). */
+export const ONE_SENSITIVE_TOOL_DEFINITIONS = {
+    'website-security': {
+        toolName: 'website-security',
+        name: 'Website Security Scanner',
+        description: 'Intrusive website posture scan (requires Vigilbase One login).',
+        targetDescription: 'Domain or URL to scan.',
+        uiUrl: '/dashboard/tools/website-security',
+        skillUrl: 'https://vigilbase.com/agent-skills/website-security.md',
+        executeUrl: '/api/tools/website-security/execute',
+    },
+    react2shell: {
+        toolName: 'react2shell',
+        name: 'React2Shell Probe',
+        description: 'React Server Components RCE probe (requires Vigilbase One login).',
+        targetDescription: 'URL of a React Server Components app.',
+        uiUrl: '/dashboard/tools/react2shell',
+        skillUrl: 'https://vigilbase.com/agent-skills/react2shell.md',
+        executeUrl: '/api/tools/react2shell/execute',
+    },
+    'fortibleed-check': {
+        toolName: 'fortibleed-check',
+        name: 'FortiBleed Check',
+        description: 'FortiBleed domain dataset lookup (requires Vigilbase One login).',
+        targetDescription: 'Domain to look up.',
+        uiUrl: '/dashboard/tools/fortibleed-check',
+        skillUrl: 'https://vigilbase.com/agent-skills/fortibleed-check.md',
+        executeUrl: '/api/tools/fortibleed-check/execute',
+    },
+};
+export function resolveToolDefinition(toolName, publicTools, oneBaseUrl) {
+    const fromPublic = publicTools.find((tool) => tool.toolName === toolName);
+    if (fromPublic)
+        return fromPublic;
+    if (!isOneAuthRequiredTool(toolName))
+        return null;
+    const sensitive = ONE_SENSITIVE_TOOL_DEFINITIONS[toolName];
+    const origin = oneBaseUrl.replace(/\/+$/, '');
+    return {
+        ...sensitive,
+        uiUrl: sensitive.uiUrl.startsWith('http')
+            ? sensitive.uiUrl
+            : `${origin}${sensitive.uiUrl}`,
+        executeUrl: sensitive.executeUrl.startsWith('http')
+            ? sensitive.executeUrl
+            : `${origin}${sensitive.executeUrl}`,
+    };
+}
+/** Tools executable through One's authenticated `/api/tools/{tool}/execute` bridge. */
+export const ONE_EXECUTABLE_TOOLS = [
+    'security-headers',
+    'email-security',
+    'website-security',
+    'react2shell',
+    'fortibleed-check',
+];
+export function isOneExecutableTool(toolName) {
+    return ONE_EXECUTABLE_TOOLS.includes(toolName);
+}
+export class VigilbaseOneClient {
+    config;
+    accessToken;
+    constructor(config, accessToken) {
+        this.config = config;
+        this.accessToken = accessToken;
+    }
+    async request(path, init) {
+        const url = `${this.config.oneBaseUrl}${path.startsWith('/') ? path : `/${path}`}`;
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.config.timeoutMs);
+        try {
+            const response = await fetch(url, {
+                ...init,
+                signal: controller.signal,
+                headers: {
+                    Accept: 'application/json',
+                    Authorization: `Bearer ${this.accessToken}`,
+                    'User-Agent': this.config.userAgent,
+                    ...(init?.headers ?? {}),
+                },
+            });
+            const text = await response.text();
+            let body = null;
+            if (text) {
+                try {
+                    body = JSON.parse(text);
+                }
+                catch {
+                    body = { raw: text };
+                }
+            }
+            return { response, body };
+        }
+        catch (error) {
+            if (error instanceof Error && error.name === 'AbortError') {
+                throw new VigilbaseApiError(`Request timed out after ${this.config.timeoutMs}ms: ${url}`, { status: 0 });
+            }
+            throw error;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    async getSession() {
+        const { response, body } = await this.request('/api/auth/get-session');
+        if (!response.ok) {
+            throw new VigilbaseApiError(`Failed to load One session (HTTP ${response.status})`, { status: response.status, body });
+        }
+        return (body ?? {});
+    }
+    async executeTool(toolName, target) {
+        const { response, body } = await this.request(`/api/tools/${encodeURIComponent(toolName)}/execute`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ target }),
+        });
+        const parsed = (body ?? {});
+        if (response.status === 401 || response.status === 403) {
+            throw new VigilbaseApiError(parsed.error ||
+                'Authentication required. Run `vigilbase login` and ensure your account can write services.', { status: response.status, body: parsed });
+        }
+        if (response.status === 429) {
+            throw new VigilbaseApiError(parsed.error || 'Rate limit exceeded.', {
+                status: 429,
+                body: parsed,
+            });
+        }
+        if (!response.ok && response.status !== 422) {
+            throw new VigilbaseApiError(parsed.error || `One tool execution failed (HTTP ${response.status})`, { status: response.status, body: parsed });
+        }
+        return parsed;
+    }
+}
+//# sourceMappingURL=one-client.js.map

package/dist/lib/one-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"one-client.js","sourceRoot":"","sources":["../../src/lib/one-client.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAwB/C;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,kBAAkB;IAClB,aAAa;IACb,kBAAkB;CACV,CAAA;AAIV,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAQ,uBAA6C,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AAC1E,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,8BAA8B,GAGvC;IACF,kBAAkB,EAAE;QAClB,QAAQ,EAAE,kBAAkB;QAC5B,IAAI,EAAE,0BAA0B;QAChC,WAAW,EACT,gEAAgE;QAClE,iBAAiB,EAAE,wBAAwB;QAC3C,KAAK,EAAE,mCAAmC;QAC1C,QAAQ,EAAE,wDAAwD;QAClE,UAAU,EAAE,qCAAqC;KAClD;IACD,WAAW,EAAE;QACX,QAAQ,EAAE,aAAa;QACvB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,mEAAmE;QACrE,iBAAiB,EAAE,uCAAuC;QAC1D,KAAK,EAAE,8BAA8B;QACrC,QAAQ,EAAE,mDAAmD;QAC7D,UAAU,EAAE,gCAAgC;KAC7C;IACD,kBAAkB,EAAE;QAClB,QAAQ,EAAE,kBAAkB;QAC5B,IAAI,EAAE,kBAAkB;QACxB,WAAW,EACT,kEAAkE;QACpE,iBAAiB,EAAE,oBAAoB;QACvC,KAAK,EAAE,mCAAmC;QAC1C,QAAQ,EAAE,wDAAwD;QAClE,UAAU,EAAE,qCAAqC;KAClD;CACF,CAAA;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,WAAkC,EAClC,UAAkB;IAElB,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAA;IACzE,IAAI,UAAU;QAAE,OAAO,UAAU,CAAA;IACjC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAA;IACjD,MAAM,SAAS,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAA;IAC1D,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC7C,OAAO;QACL,GAAG,SAAS;QACZ,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;YACvC,CAAC,CAAC,SAAS,CAAC,KAAK;YACjB,CAAC,CAAC,GAAG,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE;QACjC,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;YACjD,CAAC,CAAC,SAAS,CAAC,UAAU;YACtB,CAAC,CAAC,GAAG,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE;KACvC,CAAA;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,kBAAkB;IAClB,gBAAgB;IAChB,kBAAkB;IAClB,aAAa;IACb,kBAAkB;CACV,CAAA;AAEV,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,OAAQ,oBAA0C,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AACvE,CAAC;AAED,MAAM,OAAO,kBAAkB;IAEV;IACA;IAFnB,YACmB,MAAiB,EACjB,WAAmB;QADnB,WAAM,GAAN,MAAM,CAAW;QACjB,gBAAW,GAAX,WAAW,CAAQ;IACnC,CAAC;IAEI,KAAK,CAAC,OAAO,CACnB,IAAY,EACZ,IAAkB;QAElB,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAA;QAClF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QACzE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,GAAG,IAAI;gBACP,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,aAAa,EAAE,UAAU,IAAI,CAAC,WAAW,EAAE;oBAC3C,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;oBACnC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;iBACzB;aACF,CAAC,CAAA;YACF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YAClC,IAAI,IAAI,GAAY,IAAI,CAAA;YACxB,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAA;gBACpC,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAA;gBACtB,CAAC;YACH,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,MAAM,IAAI,iBAAiB,CACzB,2BAA2B,IAAI,CAAC,MAAM,CAAC,SAAS,OAAO,GAAG,EAAE,EAC5D,EAAE,MAAM,EAAE,CAAC,EAAE,CACd,CAAA;YACH,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAA;QACtE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,iBAAiB,CACzB,oCAAoC,QAAQ,CAAC,MAAM,GAAG,EACtD,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAClC,CAAA;QACH,CAAC;QACD,OAAO,CAAC,IAAI,IAAI,EAAE,CAAuB,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,WAAW,CACf,QAAgB,EAChB,MAAc;QAEd,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAC3C,cAAc,kBAAkB,CAAC,QAAQ,CAAC,UAAU,EACpD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;SACjC,CACF,CAAA;QAED,MAAM,MAAM,GAAG,CAAC,IAAI,IAAI,EAAE,CAA2B,CAAA;QACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,MAAM,IAAI,iBAAiB,CACzB,MAAM,CAAC,KAAK;gBACV,4FAA4F,EAC9F,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAC1C,CAAA;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,KAAK,IAAI,sBAAsB,EAAE;gBAClE,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,MAAM;aACb,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5C,MAAM,IAAI,iBAAiB,CACzB,MAAM,CAAC,KAAK,IAAI,mCAAmC,QAAQ,CAAC,MAAM,GAAG,EACrE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAC1C,CAAA;QACH,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;CACF"}

package/dist/lib/open-url.d.ts

@@ -0,0 +1,25 @@
+export type OpenBrowserResult = {
+    isOpened: boolean;
+    /** Why a browser was not opened (headless / explicit / failed). */
+    reason?: 'headless' | 'disabled' | 'failed' | 'unsupported';
+};
+/**
+ * Detect environments where opening a GUI browser is impossible/undesirable.
+ */
+export declare function isHeadlessEnvironment(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * Best-effort open of a URL in the user's default browser.
+ */
+export declare function openUrlInBrowser(url: string, env?: NodeJS.ProcessEnv): OpenBrowserResult;
+/**
+ * Build the device-auth verification URL on the configured One origin.
+ * Ignores a mis-reported host so `vigilbase login` always opens Vigilbase One.
+ */
+/** Format user codes like ABCD-EFGH for easier reading aloud. */
+export declare function formatUserCode(code: string): string;
+export declare function resolveDeviceVerificationUrl(oneBaseUrl: string, device: {
+    user_code: string;
+    verification_uri?: string;
+    verification_uri_complete?: string;
+}): string;
+//# sourceMappingURL=open-url.d.ts.map

package/dist/lib/open-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-url.d.ts","sourceRoot":"","sources":["../../src/lib/open-url.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,OAAO,CAAA;IACjB,mEAAmE;IACnE,MAAM,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,QAAQ,GAAG,aAAa,CAAA;CAC5D,CAAA;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAQT;AAyBD;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,iBAAiB,CA+BnB;AAED;;;GAGG;AACH,iEAAiE;AACjE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMnD;AAED,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE;IACN,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,yBAAyB,CAAC,EAAE,MAAM,CAAA;CACnC,GACA,MAAM,CAyBR"}