infynon 0.2.0-beta.7.2 → 0.2.0-beta.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +45 -152
  2. package/package.json +23 -9
package/README.md CHANGED
@@ -1,193 +1,86 @@
1
1
  # INFYNON
2
2
 
3
- **Stop trusting installs, traffic, and API flows blindly.**
3
+ INFYNON is a CLI for:
4
4
 
5
- A security-first CLI — one binary, three shields:
6
-
7
- - 📦 **Dependency Firewall** — pre-install CVE scanner across 14 ecosystems
8
- - 🛡️ **Network Firewall** — reverse proxy WAF with real-time TUI dashboard
9
- - 🧪 **API Flow Tester** — node-based integration testing with security probes
5
+ - package intelligence with `infynon pkg`
6
+ - API flow testing with `infynon weave`
7
+ - shared coding memory with `infynon loom`
10
8
 
11
9
  [![npm](https://img.shields.io/npm/v/infynon?style=flat-square&logo=npm)](https://www.npmjs.com/package/infynon)
12
10
  [![License: MIT](https://img.shields.io/badge/license-MIT-blue?style=flat-square)](https://github.com/d4rkNinja/infynon-cli/blob/main/LICENSE)
13
11
  [![GitHub](https://img.shields.io/badge/source-GitHub-black?style=flat-square&logo=github)](https://github.com/d4rkNinja/infynon-cli)
14
12
 
15
- > ⚠️ AI installs packages. You don't verify them. That's the risk.
16
- > **INFYNON fixes that — blocks threats before they reach your system.**
17
- > Use `--agent` for structured JSON output inside AI agents or CI pipelines.
18
-
19
- ---
20
-
21
13
  ## Install
22
14
 
23
15
  ```bash
24
16
  npm install -g infynon
25
17
  ```
26
18
 
27
- Downloads the right pre-built native binary for your OS and architecture automatically. Requires Node.js 14+.
19
+ This package downloads the matching native binary for your OS and architecture.
28
20
 
29
- **Supported platforms:** Windows x64 · Linux x64 · Linux ARM64 · macOS x64 · macOS ARM64
21
+ ## Command Areas
30
22
 
31
- ```bash
32
- npm uninstall -g infynon # uninstall and clean up all config files
33
- ```
23
+ ### `infynon pkg`
34
24
 
35
- ---
36
-
37
- ## Module 1 — `infynon pkg` · Dependency Firewall
38
-
39
- Intercepts install commands across **14 ecosystems** and runs a 3-layer CVE check before anything touches your disk.
25
+ - scan lockfiles for vulnerable packages
26
+ - secure install wrapper for multiple ecosystems
27
+ - audit, why, outdated, diff, doctor, fix, clean, migrate
28
+ - Eagle Eye scheduled package monitoring
40
29
 
41
30
  ```bash
42
- # Scan your project's lock files for CVEs
43
31
  infynon pkg scan
44
-
45
- # Secure install — drop-in wrapper around your package manager
46
- infynon pkg npm install express
47
- infynon pkg cargo add serde
48
- infynon pkg pip install requests
49
- infynon pkg yarn add lodash
50
-
51
- # Auto-fix all vulnerable dependencies
52
- infynon pkg fix --auto
53
-
54
- # Deep audit with full dependency tree
55
32
  infynon pkg audit
56
-
57
- # CI / non-interactive flags
58
- infynon pkg npm install express --strict high # fail on critical/high (exit 3)
59
- infynon pkg npm install express --auto-fix # auto-upgrade to safe versions
60
- infynon pkg npm install express --skip-vulnerable # skip bad packages silently
61
- infynon pkg npm install express --yes # install everything (audit-only CI)
62
-
63
- # AI agent mode — structured JSON for AI tools and CI parsers
64
- infynon pkg scan --agent
65
- infynon pkg npm install express --agent --strict high
66
- infynon pkg uv add fastapi --agent --auto-fix
33
+ infynon pkg npm install express --strict high
67
34
  ```
68
35
 
69
- **Ecosystems:** npm · yarn · pnpm · bun · pip · uv · poetry · cargo · go · gem · composer · nuget · hex · pub
70
-
71
- ---
72
-
73
- ## Module 2 — `infynon` · Network Firewall
36
+ ### `infynon weave`
74
37
 
75
- A reverse proxy WAF with a real-time TUI dashboard. Sits between the internet and your backend.
38
+ - create API nodes and flows
39
+ - run connected request chains
40
+ - import OpenAPI
41
+ - prompt for runtime values
42
+ - run AI-assisted security probes
76
43
 
77
44
  ```bash
78
- # Initialize config
79
- infynon init --port 8080 --upstream-port 3000
80
-
81
- # Start firewall with TUI dashboard
82
- infynon start
83
-
84
- # Start headless (no TUI — for servers)
85
- infynon start --headless
86
-
87
- # Block an IP
88
- infynon block 203.0.113.50
89
-
90
- # View blocked requests
91
- infynon logs --verdict block
92
- ```
93
-
94
- **Protects against:** SQL injection · XSS · path traversal · command injection · header injection · rate abuse · bad IPs
95
-
96
- ---
97
-
98
- ## Module 3 — `infynon weave` · API Flow Testing
99
-
100
- Test your entire API as a connected flow. Model endpoints as a directed graph — authentication tokens and extracted values thread automatically between nodes.
101
-
102
- ```bash
103
- # Set your API base URL once
104
45
  infynon weave env set BASE_URL http://localhost:8001
105
-
106
- # Create nodes from natural language
107
- infynon weave node create --ai "POST /auth/login with email and password, extracts token"
108
- infynon weave node create --ai "POST /orders — creates order, extracts order_id"
109
-
110
- # Wire into a flow and run
111
46
  infynon weave flow create "checkout" --ai "login then create order"
112
47
  infynon weave flow run checkout
113
-
114
- # Run security probes (auth bypass, rate limit, SQL injection)
115
- infynon weave ai probe checkout
116
-
117
- # Open the 10-tab TUI dashboard
118
- infynon weave tui
119
48
  ```
120
49
 
121
- **Runtime prompt inputs** — pause and ask for OTPs, passwords, and dynamic values mid-flow:
50
+ ### `infynon loom`
51
+
52
+ - canonical, team, and user memory layers
53
+ - Redis or SQL backends
54
+ - package notes that can identify who introduced a compromised dependency
55
+ - sync, retrieve, compact, and TUI inspection
122
56
 
123
57
  ```bash
124
- infynon weave node prompt verify-otp add otp_code --label "OTP Code" --secret
125
- infynon weave node prompt create-order add env --type select --options "staging,production,dev"
126
- infynon weave node prompt confirm-delete add confirm --type boolean --default false
127
- infynon weave node prompt create-token add scopes --type multiselect --options "read,write,admin"
58
+ infynon loom init --owner team --user alien
59
+ infynon loom source add-sql team-db --engine sqlite --url sqlite://.infynon/loom/loom.db --user alien --default
60
+ infynon loom note add repo-handoff --title "Auth changed" --body "Refresh moved into middleware"
61
+ infynon loom sync --direction both
128
62
  ```
129
63
 
130
- **Prompt types:** `text · boolean · select · multiselect`
64
+ ## Backend Choice
131
65
 
132
- **CI ready** — use `--default` values or `--set KEY=val` for fully non-interactive runs:
66
+ Use Redis when you want:
133
67
 
134
- ```bash
135
- infynon weave flow run auth-flow --set email=ci@example.com --set password=Test@1234
136
- ```
68
+ - fast live retrieval
69
+ - active session state
70
+ - lower-latency coordination
71
+
72
+ Use SQL when you want:
73
+
74
+ - durable structured history
75
+ - stronger filtering and reports
76
+ - long-term canonical memory
77
+
78
+ ## Documentation
137
79
 
138
- ---
139
-
140
- ## Traditional Testing vs INFYNON Weave
141
-
142
- | | Traditional (Postman / pytest) | INFYNON Weave |
143
- |---|---|---|
144
- | **Token handling** | Manual copy-paste between requests | Automatic — extracted values thread forward |
145
- | **Dynamic inputs** | Hardcoded env vars | Runtime prompts (OTP, 2FA, password) |
146
- | **Security testing** | Separate tool (Burp, manual) | Built-in probes: auth bypass, rate limit, SQLi |
147
- | **Flow creation** | Manual configuration | AI-generated from natural language |
148
- | **CI integration** | Complex credential management | `--set KEY=val` or `--default` flags |
149
-
150
- ---
151
-
152
- ## Commands Reference
153
-
154
- ### Package Security
155
- | Command | Description |
156
- |---------|-------------|
157
- | `infynon pkg scan` | Scan lock files for CVEs |
158
- | `infynon pkg fix --auto` | Auto-upgrade all vulnerable deps |
159
- | `infynon pkg audit` | Full dependency tree with CVE annotations |
160
- | `infynon pkg why <pkg>` | Trace why a package is in your tree |
161
- | `infynon pkg outdated` | Find outdated deps across all ecosystems |
162
- | `infynon pkg diff <pkg> v1 v2` | Compare versions: size, deps, CVEs |
163
- | `infynon pkg doctor` | Health check: dupes, unused, phantoms |
164
- | `infynon pkg size <pkg>` | Install weight and transitive dep count |
165
- | `infynon pkg search <query>` | Cross-ecosystem package search |
166
- | `infynon pkg clean` | Remove unused dependencies |
167
- | `infynon pkg migrate <from> <to>` | Migrate between package managers |
168
- | `infynon pkg eagle-eye setup` | Set up scheduled CVE monitoring with email alerts |
169
-
170
- ### API Flow Testing (Weave)
171
- | Command | Description |
172
- |---------|-------------|
173
- | `infynon weave node create --ai "..."` | Create a node from natural language |
174
- | `infynon weave flow create "name" --ai "..."` | Build a flow from description |
175
- | `infynon weave flow run <id>` | Run a flow with live step output |
176
- | `infynon weave flow run <id> --set key=val` | Pre-seed context vars (skip prompts) |
177
- | `infynon weave ai probe <id>` | Run auth bypass / rate limit / SQLi probes |
178
- | `infynon weave ai explain <id>` | Diagnose the last failed run |
179
- | `infynon weave validate` | Validate all nodes and flows |
180
- | `infynon weave tui` | Open 10-tab TUI dashboard |
181
-
182
- ---
183
-
184
- ## Full Documentation
185
-
186
- **[cli.infynon.com/docs](https://cli.infynon.com/docs)**
187
-
188
- Source: [github.com/d4rkNinja/infynon-cli](https://github.com/d4rkNinja/infynon-cli)
189
-
190
- ---
80
+ - Root README: `README.md`
81
+ - Command reference: `docs/commands.md`
82
+ - Loom guide: `docs/loom.md`
83
+ - Weave guide: `docs/weave.md`
191
84
 
192
85
  ## License
193
86
 
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "infynon",
3
- "version": "0.2.0-beta.7.2",
4
- "description": "Universal package security manager, network WAF, and API flow tester — intercepts installs across 14 ecosystems with CVE verification, reverse proxy WAF with TUI, and node-based API integration testing with security probes.",
3
+ "version": "0.2.0-beta.8",
4
+ "description": "Security CLI for developers: scan npm/pip/cargo installs for CVEs before execution, self-hosted reverse proxy WAF with TUI, and API flow security testing across 14 ecosystems.",
5
5
  "bin": {
6
6
  "infynon": "./run.js",
7
7
  "infynon-pkg": "./run.js"
@@ -20,16 +20,30 @@
20
20
  },
21
21
  "keywords": [
22
22
  "security",
23
- "package-manager",
24
- "vulnerability",
25
- "firewall",
26
- "waf",
23
+ "cli",
24
+ "vulnerability-scanner",
27
25
  "cve",
28
- "pentest",
29
- "supply-chain",
26
+ "package-security",
27
+ "supply-chain-security",
28
+ "waf",
29
+ "web-application-firewall",
30
+ "reverse-proxy",
31
+ "firewall",
30
32
  "api-testing",
33
+ "devsecops",
34
+ "dependency-scanner",
35
+ "npm-security",
36
+ "pip-security",
37
+ "cargo-security",
38
+ "osv",
39
+ "audit",
40
+ "security-scanner",
31
41
  "integration-testing",
32
- "security-probes"
42
+ "rate-limiter",
43
+ "ip-filter",
44
+ "security-proxy",
45
+ "package-manager",
46
+ "developer-tools"
33
47
  ],
34
48
  "author": "d4rkNinja",
35
49
  "license": "MIT",