pwnkit-cli 0.1.6 → 0.1.8

package/dist/index.js

@@ -10429,21 +10429,47 @@ var init_process = __esm({
         return new Promise((resolve3) => {
           let stdout = "";
           let stderr = "";
+          let resultText = "";
           let timedOut = false;
+          const isStreamJson = args.includes("stream-json");
           const proc = spawn(this.command, args, {
             cwd: this.config.cwd ?? process.cwd(),
             env: { ...process.env, ...env2 },
             stdio: ["pipe", "pipe", "pipe"]
           });
           proc.stdout.on("data", (chunk) => {
-            stdout += chunk.toString();
+            const text2 = chunk.toString();
+            stdout += text2;
+            if (isStreamJson) {
+              for (const line of text2.split("\n")) {
+                if (!line.trim())
+                  continue;
+                try {
+                  const event = JSON.parse(line);
+                  if (event.type === "assistant" && event.message?.content) {
+                    for (const block of event.message.content) {
+                      if (block.type === "text") {
+                        resultText += block.text;
+                      } else if (block.type === "tool_use") {
+                        if (process.stderr.isTTY) {
+                          const name = block.name || "tool";
+                          const input = typeof block.input === "object" ? JSON.stringify(block.input).slice(0, 80) : "";
+                          process.stderr.write(dim(`    \u2192 ${name} ${input}
+`));
+                        }
+                      }
+                    }
+                  } else if (event.type === "result") {
+                    resultText = event.result || resultText;
+                  }
+                } catch {
+                }
+              }
+            }
           });
           proc.stderr.on("data", (chunk) => {
             const text2 = chunk.toString();
             stderr += text2;
-            if (process.stderr.isTTY) {
-              process.stderr.write(dim(text2));
-            }
           });
           const timer = setTimeout(() => {
             timedOut = true;
@@ -10452,8 +10478,9 @@ var init_process = __esm({
           }, this.config.timeout);
           proc.on("close", (code) => {
             clearTimeout(timer);
+            const output = isStreamJson ? (resultText || stdout).trim() : stdout.trim();
             resolve3({
-              output: stdout.trim(),
+              output,
               exitCode: code,
               timedOut,
               durationMs: Date.now() - start,
@@ -10488,7 +10515,7 @@ var init_process = __esm({
       buildArgs(prompt, context) {
         switch (this.type) {
           case "claude": {
-            const args = ["-p", prompt, "--output-format", "text"];
+            const args = ["-p", prompt, "--verbose", "--output-format", "stream-json"];
             if (context?.systemPrompt) {
               args.push("--system-prompt", context.systemPrompt);
             }
@@ -14046,7 +14073,7 @@ var chalkStderr = createChalk({ level: stderrColor ? stderrColor.level : 0 });
 var source_default = chalk;
 
 // packages/shared/dist/constants.js
-var VERSION = "0.1.6";
+var VERSION = "0.1.8";
 var DEPTH_CONFIG = {
   quick: { maxTemplates: 5, maxPayloadsPerTemplate: 1, multiTurn: false },
   default: { maxTemplates: 20, maxPayloadsPerTemplate: 3, multiTurn: false },
@@ -18452,11 +18479,11 @@ program2.command("review").description("Deep source code security review of a re
     switch (event.type) {
       case "stage:start": {
         const msg = event.message;
-        if (verbose && msg.startsWith("Reading ")) {
+        if (msg.startsWith("Reading ")) {
           spinner?.stop();
           console.log(`    ${source_default.cyan("\u2192")} ${source_default.cyan("read")} ${source_default.gray(msg.replace("Reading ", ""))}`);
           spinner?.start();
-        } else if (verbose && msg.startsWith("Running: ")) {
+        } else if (msg.startsWith("Running: ")) {
           spinner?.stop();
           console.log(`    ${source_default.magenta("\u2192")} ${source_default.magenta("exec")} ${source_default.gray(msg.replace("Running: ", ""))}`);
           spinner?.start();
@@ -18470,10 +18497,12 @@ program2.command("review").description("Deep source code security review of a re
         spinner?.succeed(event.message);
         break;
       case "finding":
-        if (verbose) {
+        {
+          spinner?.stop();
           console.log(
             `    ${source_default.yellow("\u26A1")} ${source_default.yellow(event.message)}`
           );
+          spinner?.start();
         }
         break;
       case "error":
@@ -18568,11 +18597,11 @@ program2.command("audit").description("Audit an npm package for security vulnera
     switch (event.type) {
       case "stage:start": {
         const msg = event.message;
-        if (verbose && msg.startsWith("Reading ")) {
+        if (msg.startsWith("Reading ")) {
           spinner?.stop();
           console.log(`    ${source_default.cyan("\u2192")} ${source_default.cyan("read")} ${source_default.gray(msg.replace("Reading ", ""))}`);
           spinner?.start();
-        } else if (verbose && msg.startsWith("Running: ")) {
+        } else if (msg.startsWith("Running: ")) {
           spinner?.stop();
           console.log(`    ${source_default.magenta("\u2192")} ${source_default.magenta("exec")} ${source_default.gray(msg.replace("Running: ", ""))}`);
           spinner?.start();
@@ -18586,10 +18615,12 @@ program2.command("audit").description("Audit an npm package for security vulnera
         spinner?.succeed(event.message);
         break;
       case "finding":
-        if (verbose) {
+        {
+          spinner?.stop();
           console.log(
             `    ${source_default.yellow("\u26A1")} ${source_default.yellow(event.message)}`
           );
+          spinner?.start();
         }
         break;
       case "error":

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pwnkit-cli",
   "type": "module",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "AI-powered agentic security scanner. Scan endpoints, audit packages, review source code. Autonomous agents discover, attack, verify, and report.",
   "bin": {
     "pwnkit": "dist/index.js"