infracensus-collector 1.6.13 → 1.6.14

package/dist/{chunk-ICHSZE34.js → chunk-ETBBYFNQ.js}

@@ -3,7 +3,7 @@ import {
   collectorVersion,
   findModule,
   restartNeededNotice
-} from "./chunk-YIMZFP5U.js";
+} from "./chunk-US6GOYDU.js";
 import {
   redactLocal
 } from "./chunk-DIS3S4SY.js";
@@ -312,4 +312,4 @@ export {
   condenseLogTail,
   buildUiStatus
 };
-//# sourceMappingURL=chunk-ICHSZE34.js.map
+//# sourceMappingURL=chunk-ETBBYFNQ.js.map

package/dist/{chunk-YIMZFP5U.js → chunk-US6GOYDU.js}

@@ -161,8 +161,8 @@ function findModule(key) {
 import { readFileSync } from "node:fs";
 import { join } from "node:path";
 function collectorVersion() {
-  if ("1.6.13".length > 0) {
-    return "1.6.13";
+  if ("1.6.14".length > 0) {
+    return "1.6.14";
   }
   return installedVersion();
 }
@@ -188,4 +188,4 @@ export {
   installedVersion,
   restartNeededNotice
 };
-//# sourceMappingURL=chunk-YIMZFP5U.js.map
+//# sourceMappingURL=chunk-US6GOYDU.js.map

package/dist/cli.js

@@ -10,7 +10,7 @@ import {
   COLLECTOR_MODULES,
   collectorVersion,
   findModule
-} from "./chunk-YIMZFP5U.js";
+} from "./chunk-US6GOYDU.js";
 import "./chunk-VQAXWSBA.js";
 import "./chunk-DIS3S4SY.js";
 import "./chunk-A5WDSTPU.js";
@@ -129,7 +129,7 @@ async function printStatus() {
     }
   }
   lines.push(`daemon       : ${daemonLine}`);
-  const { moduleStatusesFromLedger } = await import("./status-XO6RJFD5.js");
+  const { moduleStatusesFromLedger } = await import("./status-UQJVWTBT.js");
   const rows = moduleStatusesFromLedger();
   lines.push(`modules      :`);
   for (const m of rows) {

package/dist/index.js

@@ -9,7 +9,7 @@ import {
   readDisabledModules,
   readTail,
   setModuleEnabled
-} from "./chunk-ICHSZE34.js";
+} from "./chunk-ETBBYFNQ.js";
 import {
   ArmClient,
   buildAzureInventory,
@@ -28,7 +28,7 @@ import {
   findModule,
   installedVersion,
   restartNeededNotice
-} from "./chunk-YIMZFP5U.js";
+} from "./chunk-US6GOYDU.js";
 import {
   CREDENTIAL_KIND_SHAPE,
   CreateLocalCredentialSetBody,
@@ -6214,6 +6214,20 @@ function sddEntryCommand() {
   }
   return { file: process.execPath, args: [tsxCli, source] };
 }
+function runOnlyLogins(set) {
+  if (!set) return [];
+  if (set.kind === "smb") {
+    return (set.secret.domain?.credentials ?? []).map((c) => ({ username: c.username, password: c.password }));
+  }
+  if (set.kind === "network") {
+    return (set.secret.network?.windowsCredentials ?? []).map((c) => ({
+      username: c.username,
+      password: c.password,
+      ...c.domain ? { domain: c.domain } : {}
+    }));
+  }
+  return [];
+}
 function runSddJob(opts) {
   const { cfg, job, log, signal } = opts;
   const hosts = sddHostsFromTargets(job.targets, cfg.allowLargeScans);
@@ -6224,6 +6238,7 @@ function runSddJob(opts) {
     });
   }
   const cmd = sddEntryCommand();
+  const runOnly = runOnlyLogins(opts.ephemeral ?? null);
   return new Promise((resolve) => {
     if (signal.aborted) return resolve({ status: "cancelled", message: "cancelled before it started" });
     let lastLine = "";
@@ -6248,6 +6263,7 @@ function runSddJob(opts) {
         // The parent reports this run's status; the child must not announce a
         // second job for the same walk (sensitive-data-index.ts checks this).
         SDD_JOB_ID: job.id,
+        ...runOnly.length > 0 ? { SDD_RUN_CREDENTIALS_JSON: JSON.stringify(runOnly) } : {},
         // The child is a job, not a shell session: no colour, no prompts.
         NO_COLOR: "1"
       },
@@ -10334,7 +10350,16 @@ async function runJob(cfg, job, log, signal, ctxIn) {
     `claimed job ${job.id} (site ${job.siteId}, tenant ${job.tenantId}, domain ${domain}, ${job.targets.length} target(s))`
   );
   const con = useLog ? createLocalConsole({ log, useLog }) : void 0;
-  ctx.scanProgress?.begin({ jobId: job.id, domain, siteId: job.siteId });
+  ctx.scanProgress?.begin({
+    jobId: job.id,
+    domain,
+    siteId: job.siteId,
+    // The console's Cancel button: the same abort the plane's cancel takes.
+    cancel: () => {
+      cancelled = true;
+      controller.abort();
+    }
+  });
   con?.started({
     mode: `daemon:${domain}`,
     controlPlaneUrl: cfg.controlPlaneUrl,
@@ -10444,6 +10469,7 @@ async function runJob(cfg, job, log, signal, ctxIn) {
         job,
         log,
         signal: controller.signal,
+        ephemeral: ctx.ephemeralCredentials ?? null,
         onLine: (line) => {
           const update = {
             phase: "sensitive-data",
@@ -16642,7 +16668,9 @@ ${tokenCss()}
              these phases; they went to the use log and the control plane and
              never to the screen on the host being scanned from. -->
         <div class="section" id="liveWrap" hidden>
-          <div class="shead">Scan in progress <span class="stag" id="liveWhat"></span></div>
+          <div class="shead">Scan in progress <span class="stag" id="liveWhat"></span>
+            <button type="button" id="liveCancel" class="secondary" style="margin-left:auto">Cancel Scan</button>
+          </div>
           <div class="sbody">
             <div id="livePhases"></div>
             <div class="hint" id="liveTarget"></div>
@@ -18844,6 +18872,17 @@ ${tokenCss()}
     return site && site.orgId ? site.orgId : "";
   }
 
+  $("liveCancel").addEventListener("click", async () => {
+    const btn = $("liveCancel");
+    btn.disabled = true;
+    btn.textContent = "Cancelling\u2026";
+    try {
+      const res = await fetch("/ui/api/scan/cancel", { method: "POST" });
+      if (!res.ok) { const b = await res.json().catch(() => ({})); $("liveTarget").textContent = b.error || "could not cancel"; }
+    } catch (e) { $("liveTarget").textContent = "could not reach the collector"; }
+    finally { setTimeout(() => { btn.disabled = false; btn.textContent = "Cancel Scan"; }, 3000); }
+  });
+
   function clearRunCredentials() {
     $("runCredWrap").open = false;
     renderRunCredFields();
@@ -19640,8 +19679,15 @@ function createManualRunQueue() {
 var MAX_PHASES = 32;
 function createScanProgressStore(now = () => /* @__PURE__ */ new Date()) {
   let live = null;
+  let cancelLive = null;
   return {
+    cancel() {
+      if (!live || !cancelLive) return false;
+      cancelLive();
+      return true;
+    },
     begin(run2) {
+      cancelLive = run2.cancel ?? null;
       live = {
         jobId: run2.jobId,
         domain: run2.domain,
@@ -19673,6 +19719,7 @@ function createScanProgressStore(now = () => /* @__PURE__ */ new Date()) {
     },
     finish() {
       live = null;
+      cancelLive = null;
     },
     state() {
       if (!live) return null;
@@ -20599,6 +20646,11 @@ async function startUiServer(deps, port = resolveUiPort()) {
       }
       return;
     }
+    if (url === "/ui/api/scan/cancel" && method === "POST") {
+      const stopped = deps.cancelScan?.() ?? false;
+      json(res, stopped ? 202 : 409, stopped ? { ok: true } : { error: "no scan is running on this collector" });
+      return;
+    }
     if (url === "/ui/api/restart" && method === "POST") {
       json(res, 202, { ok: true });
       deps.restart();
@@ -20731,6 +20783,7 @@ async function startCollectorUi(opts) {
       defaults: { siteId: config.siteId, scanTargets: config.scanTargets }
     }),
     restart: createRestart(log),
+    cancelScan: () => scanProgress.cancel(),
     credentials,
     schedules,
     sites,