pwnkit-cli 0.1.7 → 0.1.9

package/dist/index.js

@@ -10429,21 +10429,56 @@ var init_process = __esm({
         return new Promise((resolve3) => {
           let stdout = "";
           let stderr = "";
+          let resultText = "";
           let timedOut = false;
+          const isStreamJson = args.includes("stream-json");
           const proc = spawn(this.command, args, {
             cwd: this.config.cwd ?? process.cwd(),
             env: { ...process.env, ...env2 },
             stdio: ["pipe", "pipe", "pipe"]
           });
           proc.stdout.on("data", (chunk) => {
-            stdout += chunk.toString();
+            const text2 = chunk.toString();
+            stdout += text2;
+            if (isStreamJson) {
+              for (const line of text2.split("\n")) {
+                if (!line.trim())
+                  continue;
+                try {
+                  const event = JSON.parse(line);
+                  if (event.type === "assistant" && event.message?.content) {
+                    for (const block of event.message.content) {
+                      if (block.type === "text") {
+                        resultText += block.text;
+                      } else if (block.type === "tool_use") {
+                        if (process.stderr.isTTY) {
+                          const name = block.name || "tool";
+                          const inp = block.input;
+                          let detail = "";
+                          if (inp?.file_path)
+                            detail = String(inp.file_path).split("/").slice(-2).join("/");
+                          else if (inp?.command)
+                            detail = String(inp.command).slice(0, 60);
+                          else if (inp?.pattern)
+                            detail = String(inp.pattern).slice(0, 40);
+                          else if (inp?.content)
+                            detail = "(writing file)";
+                          process.stderr.write(dim(`    ${name}${detail ? ": " + detail : ""}
+`));
+                        }
+                      }
+                    }
+                  } else if (event.type === "result") {
+                    resultText = event.result || resultText;
+                  }
+                } catch {
+                }
+              }
+            }
           });
           proc.stderr.on("data", (chunk) => {
             const text2 = chunk.toString();
             stderr += text2;
-            if (process.stderr.isTTY) {
-              process.stderr.write(dim(text2));
-            }
           });
           const timer = setTimeout(() => {
             timedOut = true;
@@ -10452,8 +10487,9 @@ var init_process = __esm({
           }, this.config.timeout);
           proc.on("close", (code) => {
             clearTimeout(timer);
+            const output = isStreamJson ? (resultText || stdout).trim() : stdout.trim();
             resolve3({
-              output: stdout.trim(),
+              output,
               exitCode: code,
               timedOut,
               durationMs: Date.now() - start,
@@ -10488,7 +10524,7 @@ var init_process = __esm({
       buildArgs(prompt, context) {
         switch (this.type) {
           case "claude": {
-            const args = ["-p", prompt, "--output-format", "text"];
+            const args = ["-p", prompt, "--verbose", "--output-format", "stream-json"];
             if (context?.systemPrompt) {
               args.push("--system-prompt", context.systemPrompt);
             }
@@ -14046,7 +14082,7 @@ var chalkStderr = createChalk({ level: stderrColor ? stderrColor.level : 0 });
 var source_default = chalk;
 
 // packages/shared/dist/constants.js
-var VERSION = "0.1.7";
+var VERSION = "0.1.9";
 var DEPTH_CONFIG = {
   quick: { maxTemplates: 5, maxPayloadsPerTemplate: 1, multiTurn: false },
   default: { maxTemplates: 20, maxPayloadsPerTemplate: 3, multiTurn: false },

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pwnkit-cli",
   "type": "module",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "description": "AI-powered agentic security scanner. Scan endpoints, audit packages, review source code. Autonomous agents discover, attack, verify, and report.",
   "bin": {
     "pwnkit": "dist/index.js"