@xaccefy/pi-casefile 0.1.8 → 0.2.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xaccefy/pi-casefile",
-  "version": "0.1.8",
+  "version": "0.2.0",
   "description": "Offensive security case tracker for Pi Agent — bug bounties, CTFs, security audits",
   "keywords": [
     "pi-package",

package/src/index.ts

@@ -241,15 +241,15 @@ function renderCaseResult(
   theme: Theme,
   successPrefix = "✓ ",
   failPrefix = "✗ ",
-): Text {
+): string {
   const details = result.details as { record?: CaseRecord; changed?: boolean } | undefined;
   if (!details?.record) {
-    return new Text(theme.fg("error", "✗ Failed"), 0, 0);
+    return theme.fg("error", "✗ Failed");
   }
   const success = details.changed !== false;
   const prefix = success ? successPrefix : failPrefix;
   const color = success ? "success" : "warning";
-  return new Text(theme.fg(color, prefix) + renderOneLine(details.record, theme), 0, 0);
+  return theme.fg(color, prefix) + renderOneLine(details.record, theme);
 }
 
 // ── Dashboard component ──────────────────────────────────────────────
@@ -409,7 +409,7 @@ function buildCaseContext(records: CaseRecord[]): string {
   if (records.length === 0) return "";
 
   const safe = (v?: string, max = 160) => {
-    const controlChars = new RegExp("[\r\n\t\\u0000-\\u001F\\u007F\\u2028\\u2029]+", "g");
+    const controlChars = /[\r\n\t\u0000-\u001F\u007F\u2028\u2029]+/g;
     const s = v
       ?.replace(controlChars, " ")
       .replace(/[<>]/g, (c) => (c === "<" ? "‹" : "›"))
@@ -547,8 +547,7 @@ export default function casefileExtension(pi: ExtensionAPI) {
     renderResult(result, { expanded }, theme) {
       const details = result.details as { created?: boolean; record?: CaseRecord };
       const created = details?.created;
-      const baseText = renderCaseResult(result, theme, created === false ? "↻ " : "✓ ");
-      let line = baseText.toString();
+      let line = renderCaseResult(result, theme, created === false ? "↻ " : "✓ ");
       if (expanded && details?.record) {
         line += `\n${theme.fg("dim", `  ${details.record.id} → ${details.record.nextStep ?? "no next step"}`)}`;
       }
@@ -603,8 +602,7 @@ export default function casefileExtension(pi: ExtensionAPI) {
     renderResult(result, { expanded }, theme) {
       const details = result.details as { changed?: boolean; record?: CaseRecord; reason?: string };
       const unchanged = details?.changed === false;
-      const baseText = renderCaseResult(result, theme, unchanged ? "↷ " : "✓ ");
-      let line = baseText.toString();
+      let line = renderCaseResult(result, theme, unchanged ? "↷ " : "✓ ");
       if (expanded && details?.record) {
         line +=
           "\n" +
@@ -672,7 +670,7 @@ export default function casefileExtension(pi: ExtensionAPI) {
     renderResult(result, _options, theme) {
       const details = result.details as { run?: { exitCode: number } } | undefined;
       const success = details?.run?.exitCode === 0;
-      return renderCaseResult(result, theme, success ? "✓ " : "✗ ", "✗ ");
+      return new Text(renderCaseResult(result, theme, success ? "✓ " : "✗ ", "✗ "), 0, 0);
     },
   });
 
@@ -705,7 +703,7 @@ export default function casefileExtension(pi: ExtensionAPI) {
     },
 
     renderResult(result, _options, theme) {
-      return renderCaseResult(result, theme, "", "");
+      return new Text(renderCaseResult(result, theme, "", ""), 0, 0);
     },
   });
 

package/src/ledger.ts

@@ -724,10 +724,18 @@ export function promoteFindingResult(id: string, verification: PocVerification):
     );
   }
 
+  const newEvidence =
+    (current.evidence ? current.evidence + "\n\n" : "") +
+    `### PoC Execution Capture (${verification.ranAt})\n` +
+    `- **Exit Code:** ${verification.exitCode}\n` +
+    `- **Sandbox:** ${verification.sandbox ? "yes" : "no"}\n` +
+    `#### Execution Output\n\`\`\`\n${verification.output ?? ""}\n\`\`\``;
+
   const next = buildRecord(
     {
       status: "confirmed",
       pocVerified: verification,
+      evidence: newEvidence,
     },
     current,
   );
@@ -958,6 +966,12 @@ export function writeCaseReport(id: string): { path: string; record: CaseRecord
     mdSection("Summary", current.summary),
     mdSection("Steps to Reproduce / Evidence", current.evidence),
     mdSection("Proof of Concept", current.poc),
+    current.pocVerified
+      ? mdSection(
+          "PoC Verification Log",
+          `### PoC Run Verification\n- **Timestamp:** ${current.pocVerified.ranAt}\n- **Path:** \`${current.pocVerified.path}\`\n- **Sandbox:** ${current.pocVerified.sandbox ? "yes" : "no"}\n- **Exit Code:** ${current.pocVerified.exitCode}\n\n#### Output\n\`\`\`\n${current.pocVerified.output ?? ""}\n\`\`\``,
+        )
+      : undefined,
     mdSection("Impact", current.impact),
     mdSection("Remediation", current.remediation),
     mdSection("Assumptions and Uncertainty", assumptions),

package/src/sqlite-compat/index.ts

@@ -1,5 +1,30 @@
-// ponytail: thin re-export with any cast to match node:sqlite API
-import { Database } from "bun:sqlite";
-const instance = Database as any;
-export { instance as DatabaseSync };
-export type DatabaseSync = any;
+import { createRequire } from "node:module";
+
+const _require = createRequire(import.meta.url);
+
+// biome-ignore lint/suspicious/noExplicitAny: Runtime module swappability requires any casting
+let DatabaseSyncConstructor: any;
+try {
+  // biome-ignore lint/suspicious/noExplicitAny: Runtime module swappability
+  DatabaseSyncConstructor = _require("bun:sqlite").Database as any;
+} catch {
+  // biome-ignore lint/suspicious/noExplicitAny: Runtime module swappability
+  DatabaseSyncConstructor = (_require("node:sqlite") as any).DatabaseSync;
+}
+
+// biome-ignore lint/suspicious/noExplicitAny: Standard SQLite API returns any
+export interface StatementSync {
+  run(...args: unknown[]): { lastInsertRowid: number; changes: number };
+  // biome-ignore lint/suspicious/noExplicitAny: Standard SQLite API returns any
+  get(...args: unknown[]): any;
+  // biome-ignore lint/suspicious/noExplicitAny: Standard SQLite API returns any
+  all(...args: unknown[]): any[];
+}
+
+export interface DatabaseSync {
+  prepare(sql: string): StatementSync;
+  exec(sql: string): void;
+  close(): void;
+}
+
+export const DatabaseSync: new (path: string) => DatabaseSync = DatabaseSyncConstructor;