riciplay 1.8.81

package/README.md

@@ -0,0 +1,34 @@
+# Riciplay
+
+AI-powered bug bounty reconnaissance and penetration testing agent. This npm package is a launcher for the Python implementation ([`riciplay-cli` on PyPI](https://pypi.org/project/riciplay-cli/)) — postinstall installs it via pip, and the `riciplay` command behaves identically to a native pip install.
+
+## What it does
+
+- **Agent sessions** — an AI agent that plans and executes full investigations: recon → browsing → interception → findings
+- **Real browser control** — trusted-input mouse/keyboard (hover menus, slider drags, canvas clicks), form-state autosave/restore, Cloudflare handling
+- **MiniProxy v4 interception** — capture with TTFB/total timing, scope guard, Burp-style replay with response diffing, bounded payload sweeps
+- **Recon pipeline** — subdomain/endpoint/tech discovery with durable per-program storage
+- **Notebook + findings** — evidence-linked reporting across sessions
+
+## Install
+
+```bash
+npm install -g riciplay
+# or the native Python path:
+pip install riciplay-cli
+```
+
+Requires Python 3.10+ (installed automatically when possible). Chrome and mitmproxy integrations are pulled in as Python dependencies.
+
+## Usage
+
+```bash
+riciplay login        # interactive login with key
+riciplay chat         # start an agent session
+```
+
+## The npm wrapper
+
+`bin/riciplay` prefers the pip-installed console script on PATH and falls back to invoking `riciplay_cli.main:app` through `python3`. `scripts/postinstall.js` pip-installs `riciplay-cli` if the module isn't importable — and degrades to a printed manual instruction when it can't (no network, `--ignore-scripts`, managed Python).
+
+Repository: [Zaidux/Riciplay](https://github.com/Zaidux/Riciplay)

package/bin/riciplay

@@ -0,0 +1,50 @@
+#!/usr/bin/env node
+// Riciplay launcher — delegates to the Python package (riciplay-cli).
+//
+//   riciplay <args>  →  the pip-installed console script, else
+//                       python3 -c "from riciplay_cli.main import app; app()"
+//
+// The Python package is installed by scripts/postinstall.js (pip install
+// riciplay-cli). When the pip console script exists on PATH, exec it
+// directly (identical behavior to a native install); otherwise invoke
+// the app entry through python3 with argv[0] normalized so the CLI's
+// own help/version output stays correct.
+
+const { spawn } = require('child_process');
+const { existsSync } = require('fs');
+const path = require('path');
+const { EOL } = require('os');
+
+const args = process.argv.slice(2);
+
+function fail(msg) {
+  process.stderr.write(`Error: ${msg}${EOL}`);
+  process.exit(1);
+}
+
+function run(cmd, argv) {
+  const proc = spawn(cmd, argv, { stdio: 'inherit' });
+  proc.on('error', (err) => fail(err.code === 'ENOENT'
+    ? 'python3 not found. Riciplay is a Python tool — install Python 3.10+ first.'
+    : err.message));
+  proc.on('close', (code) => process.exit(code ?? 1));
+}
+
+// Prefer an installed console script (same PATH resolution pip used).
+const isWin = process.platform === 'win32';
+const exe = isWin ? 'riciplay.exe' : 'riciplay';
+for (const dir of ['/usr/local/bin', '/usr/bin', path.join(process.env.HOME || '', '.local', 'bin')]) {
+  const candidate = path.join(dir, exe);
+  if (existsSync(candidate)) {
+    run(candidate, args);
+    return;
+  }
+}
+
+// Module fallback — app() reads sys.argv; normalize argv[0] so usage
+// strings and version output match the real console script.
+run('python3', [
+  '-c',
+  "import sys; sys.argv[0] = 'riciplay'; from riciplay_cli.main import app; app()",
+  ...args,
+]);

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "riciplay",
+  "version": "1.8.81",
+  "description": "AI-powered bug bounty reconnaissance and penetration testing agent — browser, proxy interception, recon, and exploit workflows",
+  "main": "index.js",
+  "bin": {
+    "riciplay": "./bin/riciplay"
+  },
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "prepublishOnly": "echo \"Ensure riciplay-cli is published to PyPI first\"",
+    "postinstall": "node scripts/postinstall.js"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Zaidux/Riciplay.git"
+  },
+  "keywords": [
+    "bugbounty",
+    "pentesting",
+    "security",
+    "recon",
+    "osint",
+    "proxy",
+    "mitmproxy",
+    "ai-agent",
+    "riciplay"
+  ],
+  "author": "Zaidux <zaiduabubakar777@gmail.com>",
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/Zaidux/Riciplay/issues"
+  },
+  "homepage": "https://github.com/Zaidux/Riciplay#readme",
+  "engines": {
+    "node": ">=14.0.0"
+  },
+  "os": [
+    "darwin",
+    "linux"
+  ],
+  "files": [
+    "bin/",
+    "scripts/postinstall.js",
+    "README.md"
+  ],
+  "dependencies": {},
+  "peerDependencies": {}
+}

package/scripts/postinstall.js

@@ -0,0 +1,40 @@
+#!/usr/bin/env node
+// Riciplay npm postinstall — installs the Python package from PyPI.
+//
+// This npm package is a launcher; the implementation is the Python
+// package `riciplay-cli` (PyPI). If it is not importable, pip install
+// it. Failures are warnings, not errors: the user may be installing
+// with --ignore-scripts, without network, or managing Python manually —
+// print the manual command instead of failing the install.
+
+const { execSync, spawnSync } = require('child_process');
+const os = require('os');
+
+console.log('\n🕷️  Installing Riciplay (bug bounty AI agent)...\n');
+
+const isWin = os.platform() === 'win32';
+const python = isWin ? 'python' : 'python3';
+const pip = isWin ? 'pip' : 'pip3';
+
+function probe(module) {
+  const r = spawnSync(python, ['-c', `import ${module}`], { stdio: 'ignore' });
+  return r.status === 0;
+}
+
+try {
+  if (probe('riciplay_cli')) {
+    console.log('✓ Python package `riciplay_cli` already importable.');
+  } else {
+    console.log('Installing riciplay-cli from PyPI (this also pulls Chrome/mitmproxy deps)...');
+    execSync(`${pip} install --upgrade riciplay-cli`, { stdio: 'inherit' });
+    console.log('✓ Installed riciplay-cli.');
+  }
+} catch (err) {
+  console.warn(
+    `\n⚠ Could not install the Python package automatically (${err.message}).\n` +
+    '  Riciplay needs Python 3.10+. Install manually with:\n' +
+    '    pip install riciplay-cli\n'
+  );
+}
+
+console.log('\nUsage: riciplay chat   # start an agent session\n');