cipher-security 5.1.0 → 5.2.0

package/bin/cipher.js

@@ -23,61 +23,81 @@ import { spawn } from 'node:child_process';
 // ---------------------------------------------------------------------------
 
 const args = process.argv.slice(2);
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const pkg = JSON.parse(readFileSync(resolve(__dirname, '..', 'package.json'), 'utf8'));
 
 if (args[0] === '--version' || args[0] === '-V') {
-  const __dirname = dirname(fileURLToPath(import.meta.url));
-  const pkg = JSON.parse(readFileSync(resolve(__dirname, '..', 'package.json'), 'utf8'));
   console.log(pkg.version);
   process.exit(0);
 }
 
 if (args[0] === '--help' || args[0] === '-h') {
-  console.log(`CIPHER — AI Security Engineering Platform
-
-Usage: cipher [command] [options]
-       cipher <query>          Freeform security query
-
-Commands:
-  query             Run a security query
-  ingest            Ingest security data
-  status            Show system status
-  doctor            Diagnose installation health
-  setup             Run setup wizard
-  setup-signal      Configure Signal integration
-  dashboard         Open the dashboard
-  web               Start the web interface
-  version           Print version information
-  plugin            Manage plugins
-  scan              Run a security scan
-  search            Search security data
-  store             Manage data stores
-  diff              Compare security states
-  workflow          Manage workflows
-  stats             Show statistics
-  domains           Manage domains
-  skills            Manage skills
-  score             Show security score
-  marketplace       Browse marketplace
-  compliance        Run compliance checks
-  leaderboard       Show leaderboard
-  feedback          Submit feedback
-  memory-export     Export memory
-  memory-import     Import memory
-  sarif             SARIF report tools
-  osint             OSINT intelligence tools
-  update            Update CIPHER to latest version
-  bot               Manage bot integrations
-  mcp               MCP server tools
-  api               API management
-
-Options:
+  const CYN = '\x1b[36m';
+  const B = '\x1b[1m';
+  const D = '\x1b[2m';
+  const R = '\x1b[0m';
+  const GRN = '\x1b[32m';
+
+  console.log(`${CYN}${B}
+   ██████╗██╗██████╗ ██╗  ██╗███████╗██████╗
+  ██╔════╝██║██╔══██╗██║  ██║██╔════╝██╔══██╗
+  ██║     ██║██████╔╝███████║█████╗  ██████╔╝
+  ██║     ██║██╔═══╝ ██╔══██║██╔══╝  ██╔══██╗
+  ╚██████╗██║██║     ██║  ██║███████╗██║  ██║
+   ╚═════╝╚═╝╚═╝     ╚═╝  ╚═╝╚══════╝╚═╝  ╚═╝${R}
+  ${D}Claude Integrated Privacy & Hardening Expert Resource${R}  ${D}v${pkg.version}${R}
+
+${B}Usage:${R} cipher [command] [options]
+       cipher <query>          ${D}Freeform security query${R}
+
+${B}Commands:${R}
+  ${GRN}query${R}             Run a security query
+  ${GRN}scan${R}              Run a security scan
+  ${GRN}compliance${R}        Run compliance checks (39 frameworks)
+  ${GRN}search${R}            Search security data
+  ${GRN}osint${R}             OSINT intelligence tools
+  ${GRN}diff${R}              Analyze git diff for security issues
+  ${GRN}sarif${R}             SARIF report tools
+
+  ${GRN}status${R}            Show system status
+  ${GRN}doctor${R}            Diagnose installation health
+  ${GRN}version${R}           Print version information
+  ${GRN}setup${R}             Run setup wizard
+  ${GRN}update${R}            Update CIPHER to latest version
+
+  ${GRN}domains${R}           List skill domains
+  ${GRN}skills${R}            Search skills
+  ${GRN}store${R}             Store findings in memory
+  ${GRN}stats${R}             Show statistics
+  ${GRN}leaderboard${R}       Skill effectiveness metrics
+  ${GRN}marketplace${R}       Browse skill marketplace
+
+  ${GRN}api${R}               Start REST API server
+  ${GRN}mcp${R}               Start MCP server (stdio)
+  ${GRN}bot${R}               Start Signal bot
+
+  ${GRN}workflow${R}           Generate CI/CD security workflow
+  ${GRN}memory-export${R}     Export memory to JSON
+  ${GRN}memory-import${R}     Import memory from JSON
+  ${GRN}feedback${R}          Run skill improvement loop
+  ${GRN}ingest${R}            Re-index knowledge base
+  ${GRN}plugin${R}            Manage plugins
+  ${GRN}setup-signal${R}      Configure Signal integration
+  ${GRN}score${R}             Score response quality
+  ${GRN}dashboard${R}         System dashboard
+  ${GRN}web${R}               Web interface (use cipher api)
+
+${B}Options:${R}
   --version, -V     Print version and exit
   --help, -h        Print this help and exit
+  --autonomous      Run in autonomous mode (cipher blue --autonomous "task")
+  --backend         Override LLM backend (ollama, claude, litellm)
+  --no-stream       Disable streaming output
 
-Environment:
+${B}Environment:${R}
   CIPHER_DEBUG=1    Enable verbose debug logging
 
-Documentation: https://github.com/defconxt/CIPHER`);
+${D}Documentation: https://github.com/defconxt/CIPHER${R}`);
   process.exit(0);
 }
 
@@ -274,7 +294,7 @@ async function formatBridgeResult(result, commandName = '') {
 
     if (commandName === 'doctor' && result.checks) {
       const { header, formatDoctorChecks, divider, success, warn } = await import('../lib/brand.js');
-      header('Health Check', result.checks.find(c => c.name === 'Node.js')?.detail || '');
+      header('Health Check');
       divider();
       process.stderr.write(formatDoctorChecks(result.checks) + '\n');
       divider();
@@ -287,6 +307,20 @@ async function formatBridgeResult(result, commandName = '') {
       return;
     }
 
+    if (commandName === 'status' && result.status) {
+      const { header, status: statusDot, divider } = await import('../lib/brand.js');
+      header('Status');
+      divider();
+      statusDot('Backend', result.backend ? 'ok' : 'warn', result.backend || 'not configured');
+      statusDot('Config', result.config?.valid ? 'ok' : 'fail', result.config?.valid ? 'valid' : 'invalid or missing');
+      if (result.memory) {
+        statusDot('Memory', 'ok', `${result.memory.total} entries (${result.memory.active} active)`);
+      }
+      divider();
+      console.log(JSON.stringify(result, null, 2));
+      return;
+    }
+
     // Text-mode result — print output directly (pre-formatted from CliRunner)
     if ('output' in result) {
       if (result.output) {
@@ -298,8 +332,10 @@ async function formatBridgeResult(result, commandName = '') {
       return;
     }
 
-    // Structured JSON result — pretty-print
-    console.log(JSON.stringify(result, null, 2));
+    // Structured JSON result — pretty-print (skip empty objects from branded commands)
+    if (Object.keys(result).length > 0) {
+      console.log(JSON.stringify(result, null, 2));
+    }
     return;
   }
 
@@ -430,11 +466,28 @@ if (mode === 'native') {
       mcp.startStdio();
     // ── Bot command: Signal bot ──────────────────────────────────────────
     } else if (command === 'bot') {
+      const { banner, header, info, warn, divider } = await import('../lib/brand.js');
+      const svc = commandArgs.find((a, i) => commandArgs[i - 1] === '--service') || process.env.SIGNAL_SERVICE || '';
+      const phone = commandArgs.find((a, i) => commandArgs[i - 1] === '--phone') || process.env.SIGNAL_PHONE_NUMBER || '';
+
+      banner(pkg.version);
+      header('Signal Bot');
+
+      if (!svc || !phone) {
+        divider();
+        warn('Signal is not configured.');
+        info('Run: cipher setup-signal');
+        divider();
+        process.exit(1);
+      }
+
+      info(`Service: ${svc}`);
+      info(`Phone:   ${phone}`);
+      divider();
+      info('Starting bot...');
+
       const { runBot } = await import('../lib/bot/bot.js');
-      runBot({
-        signalService: commandArgs.find((a, i) => commandArgs[i - 1] === '--service') || '',
-        phoneNumber: commandArgs.find((a, i) => commandArgs[i - 1] === '--phone') || '',
-      });
+      runBot({ signalService: svc, phoneNumber: phone });
     // ── Query command: streaming via Gateway or non-streaming via handler ──
     } else if (command === 'query') {
       const queryText = commandArgs.filter(a => !a.startsWith('-')).join(' ');

package/lib/gateway/commands.js

@@ -821,12 +821,18 @@ export async function handleWeb(args = {}) {
 // ---------------------------------------------------------------------------
 
 export async function handleSetupSignal() {
-  return {
-    output: JSON.stringify({
-      status: 'info',
-      message: 'Signal setup: Set SIGNAL_SERVICE, SIGNAL_PHONE_NUMBER, and SIGNAL_WHITELIST environment variables, then run `cipher bot`.',
-    }, null, 2),
-  };
+  const brand = await import('../brand.js');
+  brand.header('Signal Setup');
+  brand.divider();
+  brand.info('Set the following environment variables:');
+  process.stderr.write('\n');
+  process.stderr.write('  SIGNAL_SERVICE        Signal API service URL\n');
+  process.stderr.write('  SIGNAL_PHONE_NUMBER   Bot phone number (E.164 format)\n');
+  process.stderr.write('  SIGNAL_WHITELIST      Comma-separated allowed numbers\n');
+  process.stderr.write('\n');
+  brand.info('Then run: cipher bot');
+  brand.divider();
+  return {};
 }
 
 // ---------------------------------------------------------------------------
@@ -857,7 +863,7 @@ export async function handleUpdate(args = {}) {
 
     if (latest === currentVersion) {
       brand.success(`Already up to date (${currentVersion})`);
-      return { output: JSON.stringify({ current: currentVersion, latest, upToDate: true }, null, 2) };
+      return {};
     }
 
     brand.warn(`New version available: ${latest}`);
@@ -870,7 +876,7 @@ export async function handleUpdate(args = {}) {
     });
 
     brand.success(`Updated ${currentVersion} → ${latest}`);
-    return { output: JSON.stringify({ previous: currentVersion, updated: latest, success: true }, null, 2) };
+    return {};
   } catch (err) {
     brand.error(`Update failed: ${err.message}`);
     return { error: true, message: `Update failed: ${err.message}` };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cipher-security",
-  "version": "5.1.0",
+  "version": "5.2.0",
   "description": "CIPHER — AI Security Engineering Platform CLI",
   "type": "module",
   "engines": {