omen-sec-cli 1.0.16 → 1.0.18

package/core/state/state-manager.js

@@ -0,0 +1,43 @@
+import fs from 'fs/promises';
+import path from 'path';
+
+const STATE_FILE = path.join(process.cwd(), '.omen', 'context.json');
+
+export async function saveState(data) {
+  try {
+    await fs.mkdir(path.dirname(STATE_FILE), { recursive: true });
+    const currentState = await loadState();
+    const newState = { ...currentState, ...data, last_updated: new Date().toISOString() };
+    await fs.writeFile(STATE_FILE, JSON.stringify(newState, null, 2));
+    return newState;
+  } catch (err) {
+    console.error('Failed to save OMEN state:', err.message);
+    return null;
+  }
+}
+
+export async function loadState() {
+  try {
+    const data = await fs.readFile(STATE_FILE, 'utf-8');
+    return JSON.parse(data);
+  } catch (err) {
+    return {
+      schema_version: "1.0",
+      project: {},
+      discovery: {},
+      plan: {},
+      execution: {
+        static: [],
+        dynamic: [],
+        vulnerabilities: []
+      },
+      verification: {}
+    };
+  }
+}
+
+export async function clearState() {
+  try {
+    await fs.unlink(STATE_FILE);
+  } catch (err) {}
+}

package/core/ui-server.js

@@ -13,17 +13,25 @@ export async function startUIServer() {
       const data = await fs.readFile(reportPath, 'utf-8');
       const report = JSON.parse(data);
 
-      const getSeverityClass = (severity) => {
-        if (severity === 'Critical') return 'text-red-500';
-        if (severity === 'High') return 'text-orange-500';
-        if (severity === 'Medium') return 'text-yellow-500';
+      const historyDir = path.join(process.cwd(), '.omen', 'history');
+      let historyFiles = [];
+      try {
+        historyFiles = await fs.readdir(historyDir);
+      } catch (e) {}
+
+      const getSeverityClass = (severity = '') => {
+        const s = severity.toLowerCase();
+        if (s === 'critical') return 'text-red-500';
+        if (s === 'high') return 'text-orange-500';
+        if (s === 'medium') return 'text-yellow-500';
         return 'text-green-500';
       };
 
-      const getCategoryBadge = (category) => {
-        if (category === 'Confirmed') return 'bg-red-900/50 text-red-400 border-red-800';
-        if (category === 'Probable') return 'bg-orange-900/50 text-orange-400 border-orange-800';
-        if (category === 'Hardening') return 'bg-blue-900/50 text-blue-400 border-blue-800';
+      const getCategoryBadge = (category = '') => {
+        const c = category.toLowerCase();
+        if (c === 'confirmed') return 'bg-red-900/50 text-red-400 border-red-800';
+        if (c === 'probable') return 'bg-orange-900/50 text-orange-400 border-orange-800';
+        if (c === 'hardening') return 'bg-blue-900/50 text-blue-400 border-blue-800';
         return 'bg-gray-800 text-gray-400 border-gray-700';
       };
 
@@ -68,6 +76,7 @@ export async function startUIServer() {
               <div class="flex border-b border-gray-800 mb-8 bg-[#111116] rounded-t-xl overflow-hidden">
                   <div class="tab-btn active" data-target="dashboard">Dashboard</div>
                   <div class="tab-btn" data-target="findings">Findings</div>
+                  <div class="tab-btn" data-target="fixplan">Fix Plan</div>
                   <div class="tab-btn" data-target="surface">Attack Surface</div>
                   <div class="tab-btn" data-target="history">History</div>
               </div>
@@ -77,19 +86,19 @@ export async function startUIServer() {
                   <div class="grid grid-cols-1 md:grid-cols-4 gap-6 mb-10">
                       <div class="card p-6 rounded-xl shadow-2xl">
                           <h3 class="text-gray-500 uppercase text-xs font-bold tracking-widest mb-2">Security Score</h3>
-                          <p class="text-5xl font-black ${getSeverityClass(report.riskLevel)}">${report.score}/100</p>
+                          <p class="text-5xl font-black ${getSeverityClass(report.riskLevel)}">${report.score || 0}/100</p>
                       </div>
                       <div class="card p-6 rounded-xl shadow-2xl">
                           <h3 class="text-gray-500 uppercase text-xs font-bold tracking-widest mb-2">Risk Level</h3>
-                          <p class="text-5xl font-black ${getSeverityClass(report.riskLevel)}">${report.riskLevel}</p>
+                          <p class="text-5xl font-black ${getSeverityClass(report.riskLevel)}">${report.riskLevel || 'N/A'}</p>
                       </div>
                       <div class="card p-6 rounded-xl shadow-2xl">
                           <h3 class="text-gray-500 uppercase text-xs font-bold tracking-widest mb-2">Confirmed Issues</h3>
-                          <p class="text-5xl font-black text-white">${report.vulnerabilities.filter(v => v.category === 'Confirmed').length}</p>
+                          <p class="text-5xl font-black text-white">${(report.vulnerabilities || []).filter(v => v.category?.toLowerCase() === 'confirmed').length}</p>
                       </div>
                       <div class="card p-6 rounded-xl shadow-2xl">
                           <h3 class="text-gray-500 uppercase text-xs font-bold tracking-widest mb-2">Probable Issues</h3>
-                          <p class="text-5xl font-black text-white">${report.vulnerabilities.filter(v => v.category === 'Probable').length}</p>
+                          <p class="text-5xl font-black text-white">${(report.vulnerabilities || []).filter(v => v.category?.toLowerCase() === 'probable').length}</p>
                       </div>
                   </div>
 
@@ -99,31 +108,70 @@ export async function startUIServer() {
                               <span class="w-2 h-2 bg-red-500 rounded-full mr-2"></span> Top Critical Findings
                           </h2>
                           <div class="space-y-4">
-                              ${report.vulnerabilities.filter(v => v.severity === 'Critical' || v.severity === 'High').slice(0, 5).map(v => `
+                              ${(report.vulnerabilities || []).filter(v => v.severity?.toLowerCase() === 'critical' || v.severity?.toLowerCase() === 'high').slice(0, 5).map(v => `
                                   <div class="p-4 bg-[#1c1c22] rounded-lg border border-gray-800">
                                       <div class="flex justify-between items-start mb-2">
-                                          <span class="font-bold ${getSeverityClass(v.severity)} text-sm">${v.severity}</span>
+                                          <span class="font-bold ${getSeverityClass(v.severity)} text-sm uppercase">${v.severity}</span>
                                           <span class="px-2 py-0.5 rounded border text-[10px] uppercase font-bold ${getCategoryBadge(v.category)}">${v.category}</span>
                                       </div>
-                                      <p class="text-sm font-medium text-gray-300">${v.description}</p>
+                                      <p class="text-sm font-medium text-gray-300">${v.title || v.description}</p>
                                   </div>
                               `).join('') || '<p class="text-gray-500 italic">No critical findings discovered.</p>'}
                           </div>
                       </div>
                       <div class="card p-6 rounded-xl">
                           <h2 class="text-xl font-bold mb-6 flex items-center">
-                              <span class="w-2 h-2 bg-blue-500 rounded-full mr-2"></span> Scan Intelligence
+                              <span class="w-2 h-2 bg-blue-500 rounded-full mr-2"></span> Phase Intelligence
                           </h2>
                           <div class="space-y-4 text-sm">
-                              <div class="flex justify-between border-b border-gray-800 pb-2"> <span class="text-gray-500">Target URL</span> <span class="mono text-gray-300">${report.target}</span> </div>
-                              <div class="flex justify-between border-b border-gray-800 pb-2"> <span class="text-gray-500">Tech Stack</span> <span class="text-gray-300">${(report.attack_surface.tech_stack || []).join(', ') || 'N/A'}</span> </div>
-                              <div class="flex justify-between border-b border-gray-800 pb-2"> <span class="text-gray-500">Endpoints Discovered</span> <span class="text-gray-300">${(report.attack_surface.endpoints || []).length}</span> </div>
-                              <div class="flex justify-between border-b border-gray-800 pb-2"> <span class="text-gray-500">Forms Detected</span> <span class="text-gray-300">${(report.attack_surface.forms || []).length}</span> </div>
+                              <div class="flex justify-between border-b border-gray-800 pb-2"> <span class="text-gray-500">Stack Detected</span> <span class="text-gray-300 font-bold">${report.discovery?.stack || 'N/A'}</span> </div>
+                              <div class="flex justify-between border-b border-gray-800 pb-2"> <span class="text-gray-500">Boot Strategy</span> <span class="mono text-gray-300">${report.discovery?.boot_strategy || 'None'}</span> </div>
+                              <div class="flex justify-between border-b border-gray-800 pb-2"> <span class="text-gray-500">Execution Steps</span> <span class="text-gray-300">${(report.plan?.steps || []).length} steps</span> </div>
+                              <div class="flex justify-between border-b border-gray-800 pb-2"> <span class="text-gray-500">Last Scan Status</span> <span class="text-green-500 font-bold uppercase">${report.execution?.status || 'N/A'}</span> </div>
                           </div>
                       </div>
                   </div>
               </div>
 
+              <!-- Findings Tab (already good) -->
+
+              <!-- Fix Plan Tab -->
+              <div id="fixplan" class="content-area">
+                  <div class="card p-6 rounded-xl mb-8 border-l-4 border-blue-500 bg-blue-900/10">
+                      <h2 class="text-2xl font-black mb-2 tracking-tight">REMEDIATION CHECKLIST</h2>
+                      <p class="text-gray-400">Step-by-step guide to secure your application. These findings are prioritized by risk level.</p>
+                  </div>
+                  <div class="space-y-6">
+                      ${(report.vulnerabilities || []).sort((a,b) => {
+                          const w = {critical:4, high:3, medium:2, low:1, info:0};
+                          return (w[b.severity?.toLowerCase()] || 0) - (w[a.severity?.toLowerCase()] || 0);
+                      }).map((v, i) => `
+                          <div class="card p-6 rounded-xl border-l-4 ${v.severity?.toLowerCase() === 'critical' ? 'border-red-500' : 'border-gray-700'}">
+                              <div class="flex justify-between items-start mb-4">
+                                  <div>
+                                      <h3 class="text-lg font-bold text-white mb-1">${v.title || v.description}</h3>
+                                      <span class="text-[10px] mono text-gray-500 uppercase tracking-widest">ID: ${v.id}</span>
+                                  </div>
+                                  <div class="text-right">
+                                      <span class="block text-xs font-black ${getSeverityClass(v.severity)} uppercase">${v.severity}</span>
+                                      <span class="block text-[10px] text-gray-500 mono">${v.cwe || 'CWE-N/A'}</span>
+                                  </div>
+                              </div>
+                              <div class="grid grid-cols-1 md:grid-cols-2 gap-6 mt-4">
+                                  <div class="bg-black/50 p-4 rounded-lg border border-gray-800">
+                                      <h4 class="text-[10px] font-bold text-gray-500 uppercase mb-2">How to Fix</h4>
+                                      <p class="text-sm text-gray-300 leading-relaxed">${v.remediation || 'No remediation provided.'}</p>
+                                  </div>
+                                  <div class="bg-black/50 p-4 rounded-lg border border-gray-800">
+                                      <h4 class="text-[10px] font-bold text-gray-500 uppercase mb-2">Verification Command</h4>
+                                      <code class="block text-xs text-blue-400 mono mt-2">npx omen-sec-cli verify --id ${v.id}</code>
+                                  </div>
+                              </div>
+                          </div>
+                      `).join('') || '<p class="text-center py-20 text-gray-500 italic">No vulnerabilities to fix. You are secure!</p>'}
+                  </div>
+              </div>
+
               <!-- Findings Tab -->
               <div id="findings" class="content-area">
                   <div class="card rounded-xl overflow-hidden">
@@ -134,26 +182,30 @@ export async function startUIServer() {
                           </div>
                       </div>
                       <div class="divide-y divide-gray-800">
-                          ${report.vulnerabilities.map((v, i) => `
+                          ${(report.vulnerabilities || []).map((v, i) => `
                               <div class="finding-row">
                                   <div class="p-4 flex items-center cursor-pointer gap-4" onclick="toggleEvidence(${i})">
                                       <div class="w-24 text-xs font-black uppercase ${getSeverityClass(v.severity)}">${v.severity}</div>
-                                      <div class="flex-1 text-sm font-semibold text-gray-300">${v.description}</div>
+                                      <div class="flex-1 text-sm font-semibold text-gray-300">${v.title || v.description}</div>
                                       <div class="px-2 py-1 rounded border text-[10px] uppercase font-bold ${getCategoryBadge(v.category)}">${v.category}</div>
-                                      <div class="text-[10px] mono text-gray-600">${v.id}</div>
+                                      <div class="text-[10px] mono text-gray-600">${v.kind || 'N/A'}</div>
                                   </div>
                                   <div id="evidence-${i}" class="evidence-panel p-6 bg-black border-t border-gray-800">
                                       <div class="grid grid-cols-1 md:grid-cols-2 gap-6">
                                           <div>
                                               <h4 class="text-xs font-bold uppercase text-gray-500 mb-3 tracking-widest">Discovery Evidence</h4>
-                                              <pre class="mono">${JSON.stringify(v.evidence, null, 2)}</pre>
+                                              <pre class="mono">${JSON.stringify(v.evidence || {}, null, 2)}</pre>
                                           </div>
                                           <div>
                                               <h4 class="text-xs font-bold uppercase text-gray-500 mb-3 tracking-widest">Technical Details</h4>
                                               <div class="space-y-3 text-sm">
-                                                  <p><span class="text-gray-500">CWE:</span> <span class="text-blue-400 mono">${v.cwe}</span></p>
-                                                  <p><span class="text-gray-500">Confidence:</span> <span class="font-bold text-gray-300">${v.confidence}</span></p>
-                                                  <p><span class="text-gray-500">Remediation:</span> <span class="text-gray-400 italic">Consult OMEN AI Protocol for detailed fix.</span></p>
+                                                  <p><span class="text-gray-500 font-bold uppercase text-[10px]">CWE:</span> <span class="text-blue-400 mono">${v.cwe || 'N/A'}</span></p>
+                                                  <p><span class="text-gray-500 font-bold uppercase text-[10px]">Confidence:</span> <span class="font-bold text-gray-300 uppercase">${v.confidence || 'N/A'}</span></p>
+                                                  <p><span class="text-gray-500 font-bold uppercase text-[10px]">Description:</span> <span class="text-gray-300">${v.description || 'N/A'}</span></p>
+                                                  <div class="mt-4 p-3 bg-blue-900/20 border border-blue-800 rounded">
+                                                      <h5 class="text-[10px] font-bold text-blue-400 uppercase mb-1">Remediation</h5>
+                                                      <p class="text-xs text-gray-300">${v.remediation || 'Consult OMEN AI Protocol for detailed fix.'}</p>
+                                                  </div>
                                               </div>
                                           </div>
                                       </div>
@@ -170,18 +222,18 @@ export async function startUIServer() {
                       <div class="lg:col-span-2 space-y-8">
                           <div class="card p-6 rounded-xl">
                               <h3 class="text-xl font-bold mb-4">Discovered Assets</h3>
-                              <pre class="mono max-h-[600px]">${(report.attack_surface.endpoints || []).join('\n') || 'No endpoints discovered.'}</pre>
+                              <pre class="mono max-h-[600px]">${(report.discovery?.entrypoints || []).concat(report.discovery?.critical_files || []).join('\n') || 'No assets discovered.'}</pre>
                           </div>
                       </div>
                       <div class="space-y-8">
                           <div class="card p-6 rounded-xl">
-                              <h3 class="text-xl font-bold mb-4">Forms & Inputs</h3>
-                              <pre class="mono">${JSON.stringify(report.attack_surface.forms || [], null, 2)}</pre>
+                              <h3 class="text-xl font-bold mb-4">Phase Log</h3>
+                              <pre class="mono text-[10px]">${(report.execution?.logs || []).join('\n') || 'No execution logs.'}</pre>
                           </div>
                           <div class="card p-6 rounded-xl">
                               <h3 class="text-xl font-bold mb-4">Tech Fingerprint</h3>
                               <div class="flex flex-wrap gap-2">
-                                  ${(report.attack_surface.tech_stack || []).map(t => `<span class="px-3 py-1 bg-gray-800 rounded-full text-xs font-bold text-blue-400 border border-gray-700">${t}</span>`).join('') || '<span class="text-gray-500 italic">No stack identified.</span>'}
+                                  ${(report.attack_surface?.tech_stack || report.discovery?.stack ? [report.discovery.stack] : []).map(t => `<span class="px-3 py-1 bg-gray-800 rounded-full text-xs font-bold text-blue-400 border border-gray-700">${t}</span>`).join('') || '<span class="text-gray-500 italic">No stack identified.</span>'}
                               </div>
                           </div>
                       </div>
@@ -189,16 +241,28 @@ export async function startUIServer() {
               </div>
 
               <!-- History Tab -->
-              <div id="history" class="content-area text-center py-20">
-                  <div class="card p-10 rounded-2xl max-w-lg mx-auto border-dashed border-gray-700 bg-transparent">
-                      <h2 class="text-2xl font-bold mb-4 text-gray-400">Scan Timeline</h2>
-                      <p class="text-gray-500 mb-6">OMEN is currently tracking your security posture. Historical data is being indexed in <code class="mono text-red-400 bg-red-950/30 px-2 py-1 rounded">.omen/history/</code></p>
-                      <div class="inline-block px-4 py-2 bg-gray-800 rounded-full text-xs font-bold uppercase tracking-widest text-gray-400">Feature arriving in v1.0.17</div>
+              <div id="history" class="content-area">
+                  <div class="card rounded-xl overflow-hidden">
+                      <div class="p-6 border-b border-gray-800 bg-[#111116]">
+                          <h2 class="text-xl font-bold">Scan History</h2>
+                          <p class="text-sm text-gray-500">Historical snapshots saved in .omen/history/</p>
+                      </div>
+                      <div class="divide-y divide-gray-800">
+                          ${historyFiles.reverse().map(file => `
+                              <div class="p-4 flex justify-between items-center hover:bg-[#1c1c22]">
+                                  <div class="flex items-center gap-3">
+                                      <div class="w-2 h-2 bg-green-500 rounded-full"></div>
+                                      <span class="text-sm font-medium text-gray-300">${file}</span>
+                                  </div>
+                                  <span class="text-[10px] mono text-gray-600">${new Date(parseInt(file.split('-').pop()) || Date.now()).toLocaleString()}</span>
+                              </div>
+                          `).join('') || '<div class="p-20 text-center text-gray-500 italic">No historical scans found yet.</div>'}
+                      </div>
                   </div>
               </div>
 
               <footer class="text-center text-gray-600 mt-16 border-t border-gray-900 pt-8 mb-10">
-                  <p class="text-xs uppercase tracking-widest font-bold mb-2">OMEN Security Framework - v1.0.16</p>
+                  <p class="text-xs uppercase tracking-widest font-bold mb-2">OMEN Security Framework - v1.0.17</p>
                   <p class="text-[10px] text-gray-700 italic">"The eye that never sleeps, the code that never fails."</p>
               </footer>
           </div>

package/package.json

@@ -1,7 +1,10 @@
 {
   "name": "omen-sec-cli",
-  "version": "1.0.16",
+  "version": "1.0.18",
   "description": "OMEN — AI Security Engine",
+  "engines": {
+    "node": ">=20.0.0"
+  },
   "main": "bin/index.js",
   "type": "module",
   "bin": {
@@ -15,7 +18,9 @@
     "axios": "^1.13.6",
     "chalk": "^5.3.0",
     "cheerio": "^1.1.0",
+    "commander": "^13.1.0",
     "dotenv": "^17.3.1",
+    "execa": "^9.6.1",
     "express": "^5.2.1",
     "glob": "^13.0.6",
     "js-yaml": "^4.1.1",

package/ui/banner.js

@@ -9,7 +9,7 @@ export function showBanner() {
  ╚██████╔╝██║ ╚═╝ ██║███████╗██║ ╚████║ 
  `));
   console.log(chalk.cyan.bold(' OMEN — AI Security Engine '));
-  console.log(chalk.gray(' Version: 1.0.16 \n'));
+  console.log(chalk.gray(' Version: 1.0.17 \n'));
 }
 
 export function showHelp() {