infynon 0.2.0-beta.7 → 0.2.0-beta.7.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +64 -57
  2. package/package.json +1 -1
package/README.md CHANGED
@@ -1,8 +1,12 @@
1
1
  # INFYNON
2
2
 
3
- **🔥 Stop installing vulnerable dependencies blindly**
3
+ **Stop trusting installs, traffic, and API flows blindly.**
4
4
 
5
- A security-first CLI: pre-install CVE scanner for 14 ecosystems + reverse proxy WAF + node-based API flow tester with security probes.
5
+ A security-first CLI — one binary, three shields:
6
+
7
+ - 📦 **Dependency Firewall** — pre-install CVE scanner across 14 ecosystems
8
+ - 🛡️ **Network Firewall** — reverse proxy WAF with real-time TUI dashboard
9
+ - 🧪 **API Flow Tester** — node-based integration testing with security probes
6
10
 
7
11
  [![npm](https://img.shields.io/npm/v/infynon?style=flat-square&logo=npm)](https://www.npmjs.com/package/infynon)
8
12
  [![License: MIT](https://img.shields.io/badge/license-MIT-blue?style=flat-square)](https://github.com/d4rkNinja/infynon-cli/blob/main/LICENSE)
@@ -10,7 +14,7 @@ A security-first CLI: pre-install CVE scanner for 14 ecosystems + reverse proxy
10
14
 
11
15
  > ⚠️ AI installs packages. You don't verify them. That's the risk.
12
16
  > **INFYNON fixes that — blocks threats before they reach your system.**
13
- > Use `--agent` for structured JSON output when running inside AI agents or CI pipelines.
17
+ > Use `--agent` for structured JSON output inside AI agents or CI pipelines.
14
18
 
15
19
  ---
16
20
 
@@ -24,19 +28,13 @@ Downloads the right pre-built native binary for your OS and architecture automat
24
28
 
25
29
  **Supported platforms:** Windows x64 · Linux x64 · Linux ARM64 · macOS x64 · macOS ARM64
26
30
 
27
- To uninstall and clean up all config files:
28
-
29
31
  ```bash
30
- npm uninstall -g infynon
32
+ npm uninstall -g infynon # uninstall and clean up all config files
31
33
  ```
32
34
 
33
35
  ---
34
36
 
35
- ## What is INFYNON?
36
-
37
- A single binary with three modes:
38
-
39
- ### 1. `infynon pkg` — Package Security
37
+ ## Module 1 — `infynon pkg` · Dependency Firewall
40
38
 
41
39
  Intercepts install commands across **14 ecosystems** and runs a 3-layer CVE check before anything touches your disk.
42
40
 
@@ -44,10 +42,8 @@ Intercepts install commands across **14 ecosystems** and runs a 3-layer CVE chec
44
42
  # Scan your project's lock files for CVEs
45
43
  infynon pkg scan
46
44
 
47
- # Secure install — intercepts and checks before running npm
45
+ # Secure install — drop-in wrapper around your package manager
48
46
  infynon pkg npm install express
49
-
50
- # Works with any ecosystem
51
47
  infynon pkg cargo add serde
52
48
  infynon pkg pip install requests
53
49
  infynon pkg yarn add lodash
@@ -58,21 +54,48 @@ infynon pkg fix --auto
58
54
  # Deep audit with full dependency tree
59
55
  infynon pkg audit
60
56
 
61
- # CI / non-interactive flags (no prompts)
62
- infynon pkg npm install express --strict high # fail build on critical/high (exit 3)
63
- infynon pkg npm install express --auto-fix # auto-upgrade to safe versions
64
- infynon pkg npm install express --skip-vulnerable # skip bad packages silently
65
- infynon pkg npm install express --yes # install everything (audit-only CI)
57
+ # CI / non-interactive flags
58
+ infynon pkg npm install express --strict high # fail on critical/high (exit 3)
59
+ infynon pkg npm install express --auto-fix # auto-upgrade to safe versions
60
+ infynon pkg npm install express --skip-vulnerable # skip bad packages silently
61
+ infynon pkg npm install express --yes # install everything (audit-only CI)
66
62
 
67
- # AI agent mode — structured JSON output for AI tools and CI parsers
68
- infynon pkg scan --agent # JSON: status/vulnerabilities/summary
69
- infynon pkg npm install express --agent --strict high # JSON: installed/blocked/vulns
70
- infynon pkg uv add fastapi --agent --auto-fix # any ecosystem, machine-readable
63
+ # AI agent mode — structured JSON for AI tools and CI parsers
64
+ infynon pkg scan --agent
65
+ infynon pkg npm install express --agent --strict high
66
+ infynon pkg uv add fastapi --agent --auto-fix
71
67
  ```
72
68
 
73
69
  **Ecosystems:** npm · yarn · pnpm · bun · pip · uv · poetry · cargo · go · gem · composer · nuget · hex · pub
74
70
 
75
- ### 2. `infynon weave` — API Flow Testing
71
+ ---
72
+
73
+ ## Module 2 — `infynon` · Network Firewall
74
+
75
+ A reverse proxy WAF with a real-time TUI dashboard. Sits between the internet and your backend.
76
+
77
+ ```bash
78
+ # Initialize config
79
+ infynon init --port 8080 --upstream-port 3000
80
+
81
+ # Start firewall with TUI dashboard
82
+ infynon start
83
+
84
+ # Start headless (no TUI — for servers)
85
+ infynon start --headless
86
+
87
+ # Block an IP
88
+ infynon block 203.0.113.50
89
+
90
+ # View blocked requests
91
+ infynon logs --verdict block
92
+ ```
93
+
94
+ **Protects against:** SQL injection · XSS · path traversal · command injection · header injection · rate abuse · bad IPs
95
+
96
+ ---
97
+
98
+ ## Module 3 — `infynon weave` · API Flow Testing
76
99
 
77
100
  Test your entire API as a connected flow. Model endpoints as a directed graph — authentication tokens and extracted values thread automatically between nodes.
78
101
 
@@ -95,54 +118,38 @@ infynon weave ai probe checkout
95
118
  infynon weave tui
96
119
  ```
97
120
 
98
- **Runtime prompt inputs** — pause and ask for OTPs, passwords, and dynamic values mid-flow, with 4 types:
121
+ **Runtime prompt inputs** — pause and ask for OTPs, passwords, and dynamic values mid-flow:
122
+
99
123
  ```bash
100
124
  infynon weave node prompt verify-otp add otp_code --label "OTP Code" --secret
101
125
  infynon weave node prompt create-order add env --type select --options "staging,production,dev"
102
126
  infynon weave node prompt confirm-delete add confirm --type boolean --default false
127
+ infynon weave node prompt create-token add scopes --type multiselect --options "read,write,admin"
103
128
  ```
104
129
 
105
- **CI ready** — use `--default` values or `--set KEY=val` for fully non-interactive runs.
130
+ **Prompt types:** `text · boolean · select · multiselect`
106
131
 
107
- ---
108
-
109
- ### 3. `infynon` — Network Firewall
110
-
111
- A reverse proxy WAF with a real-time TUI dashboard. Sits between the internet and your backend.
132
+ **CI ready** — use `--default` values or `--set KEY=val` for fully non-interactive runs:
112
133
 
113
134
  ```bash
114
- # Initialize config
115
- infynon init --port 8080 --upstream-port 3000
116
-
117
- # Start firewall with TUI dashboard
118
- infynon start
119
-
120
- # Start headless (no TUI — for servers)
121
- infynon start --headless
122
-
123
- # Block an IP
124
- infynon block 203.0.113.50
125
-
126
- # View blocked requests
127
- infynon logs --verdict block
135
+ infynon weave flow run auth-flow --set email=ci@example.com --set password=Test@1234
128
136
  ```
129
137
 
130
- **Protects against:** SQL injection · XSS · path traversal · command injection · header injection · rate abuse · bad IPs
131
-
132
138
  ---
133
139
 
134
- ## How It Works (Package Security)
140
+ ## Traditional Testing vs INFYNON Weave
135
141
 
136
- 1. You (or an AI agent) runs `infynon pkg npm install express`
137
- 2. INFYNON resolves the latest version and queries **OSV.dev** for CVEs
138
- 3. With `--agent`: emits JSON + structured exit code — AI agents parse and react
139
- 4. With `--strict high`: blocks installation if critical/high CVEs are found (exit `3`)
140
- 5. With `--auto-fix`: silently upgrades to the nearest safe version
141
- 6. Only approved packages get installed
142
+ | | Traditional (Postman / pytest) | INFYNON Weave |
143
+ |---|---|---|
144
+ | **Token handling** | Manual copy-paste between requests | Automatic — extracted values thread forward |
145
+ | **Dynamic inputs** | Hardcoded env vars | Runtime prompts (OTP, 2FA, password) |
146
+ | **Security testing** | Separate tool (Burp, manual) | Built-in probes: auth bypass, rate limit, SQLi |
147
+ | **Flow creation** | Manual configuration | AI-generated from natural language |
148
+ | **CI integration** | Complex credential management | `--set KEY=val` or `--default` flags |
142
149
 
143
150
  ---
144
151
 
145
- ## More Commands
152
+ ## Commands Reference
146
153
 
147
154
  ### Package Security
148
155
  | Command | Description |
@@ -163,11 +170,11 @@ infynon logs --verdict block
163
170
  ### API Flow Testing (Weave)
164
171
  | Command | Description |
165
172
  |---------|-------------|
166
- | `infynon weave node create --ai "..."` | Create a node from a natural language description |
173
+ | `infynon weave node create --ai "..."` | Create a node from natural language |
167
174
  | `infynon weave flow create "name" --ai "..."` | Build a flow from description |
168
175
  | `infynon weave flow run <id>` | Run a flow with live step output |
169
176
  | `infynon weave flow run <id> --set key=val` | Pre-seed context vars (skip prompts) |
170
- | `infynon weave ai probe <id>` | Run auth bypass / rate limit / SQLi security probes |
177
+ | `infynon weave ai probe <id>` | Run auth bypass / rate limit / SQLi probes |
171
178
  | `infynon weave ai explain <id>` | Diagnose the last failed run |
172
179
  | `infynon weave validate` | Validate all nodes and flows |
173
180
  | `infynon weave tui` | Open 10-tab TUI dashboard |
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "infynon",
3
- "version": "0.2.0-beta.7",
3
+ "version": "0.2.0-beta.7.2",
4
4
  "description": "Universal package security manager, network WAF, and API flow tester — intercepts installs across 14 ecosystems with CVE verification, reverse proxy WAF with TUI, and node-based API integration testing with security probes.",
5
5
  "bin": {
6
6
  "infynon": "./run.js",