scan-now 0.0.0-stage → 1.0.0

package/README.md

@@ -1,3 +1,15 @@
-# Temporary Holding Version
+# Scan
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Run Scan.now checks from your terminal.
+
+```sh
+npm install --global scan-now
+scan website example.com
+scan seo example.com --pages 25
+scan technology example.com
+scan phishing https://example.com/login
+scan file download.zip
+scan extension addon.zip
+```
+
+Use `--json` for the full API response. Scan limits and account access rules are the same as on <https://scan.now>.

package/bin/scan.js

@@ -0,0 +1,131 @@
+#!/usr/bin/env node
+'use strict';
+
+const fs = require('node:fs');
+const path = require('node:path');
+const pkg = require('../package.json');
+
+const base = (process.env.SCAN_NOW_URL || 'https://scan.now').replace(/\/$/, '');
+const commands = new Set(['website', 'seo', 'technology', 'wordpress', 'phishing', 'file', 'extension']);
+
+function help() {
+  return `Scan ${pkg.version}
+
+Usage:
+  scan <url>
+  scan website <url> [--scope full|tls|headers|email|js]
+  scan seo <url> [--pages 25]
+  scan technology <url>
+  scan wordpress <url>
+  scan phishing <url>
+  scan file <path>
+  scan extension <path>
+
+Options:
+  --json       Print JSON
+  --pages N    SEO/website page budget
+  --scope NAME Website scan scope`;
+}
+
+function parse(argv) {
+  const args = [...argv];
+  if (!args.length || args.includes('--help') || args.includes('-h')) return { help: true };
+  if (args.includes('--version') || args.includes('-v')) return { version: true };
+  const json = args.includes('--json');
+  if (json) args.splice(args.indexOf('--json'), 1);
+  const option = (name, fallback) => {
+    const index = args.indexOf(name);
+    if (index < 0) return fallback;
+    const value = args[index + 1];
+    if (!value) throw new Error(`${name} requires a value.`);
+    args.splice(index, 2);
+    return value;
+  };
+  const pages = Number(option('--pages', '25'));
+  const scope = option('--scope', 'full');
+  if (!Number.isInteger(pages) || pages < 1 || pages > 5000) throw new Error('--pages must be an integer from 1 to 5000.');
+  const command = commands.has(args[0]) ? args.shift() : 'website';
+  return { command, target: args.join(' ').trim(), pages, scope, json };
+}
+
+class Session {
+  constructor() { this.cookie = ''; this.csrf = ''; }
+  capture(response) {
+    const values = response.headers.getSetCookie?.() || [response.headers.get('set-cookie')].filter(Boolean);
+    if (values.length) this.cookie = values.map((value) => value.split(';', 1)[0]).join('; ');
+  }
+  async start() {
+    const response = await fetch(`${base}/api/csrf`, { headers: { Accept: 'application/json', 'User-Agent': `scan-now/${pkg.version}` } });
+    this.capture(response);
+    const data = await response.json().catch(() => ({}));
+    if (!response.ok || !data.csrf_token) throw new Error(data.error || `Scan.now session failed with HTTP ${response.status}.`);
+    this.csrf = data.csrf_token;
+  }
+  async post(endpoint, body, multipart = false) {
+    const response = await fetch(`${base}${endpoint}`, {
+      method: 'POST',
+      headers: {
+        'X-CSRFToken': this.csrf,
+        Cookie: this.cookie,
+        Referer: `${base}/`,
+        'User-Agent': `scan-now/${pkg.version}`,
+        ...(multipart ? {} : { 'Content-Type': 'application/json' }),
+      },
+      body: multipart ? body : JSON.stringify(body),
+      signal: AbortSignal.timeout(180_000),
+    });
+    const data = await response.json().catch(() => ({}));
+    if (!response.ok) throw new Error(data.error || `Scan.now returned HTTP ${response.status}.`);
+    return data;
+  }
+}
+
+function clean(data) {
+  const output = { ...data };
+  for (const key of ['html', 'next_html', 'ai_prompt']) delete output[key];
+  return output;
+}
+
+function summary(data) {
+  const lines = [];
+  if (data.host || data.target) lines.push(`Target: ${data.host || data.target}`);
+  if (data.grade) lines.push(`Grade: ${data.grade}`);
+  if (data.score != null) lines.push(`Score: ${data.score}`);
+  if (data.verdict) lines.push(`Verdict: ${typeof data.verdict === 'string' ? data.verdict : data.verdict.label || 'complete'}`);
+  if (data.risk != null) lines.push(`Risk: ${data.risk}`);
+  if (Array.isArray(data.technologies)) lines.push(`Technologies: ${data.technologies.map((item) => item.name).filter(Boolean).join(', ') || 'none detected'}`);
+  if (data.report_url) lines.push(`Report: ${new URL(data.report_url, base)}`);
+  if (data.locked) lines.push(data.message || 'Results require an account upgrade.');
+  return lines.join('\n') || 'Scan complete.';
+}
+
+async function main() {
+  const options = parse(process.argv.slice(2));
+  if (options.help) return process.stdout.write(`${help()}\n`);
+  if (options.version) return process.stdout.write(`${pkg.version}\n`);
+  if (!options.target) throw new Error(`${options.command} requires a URL or file path.`);
+  const session = new Session();
+  await session.start();
+  let data;
+  if (options.command === 'file' || options.command === 'extension') {
+    const filename = path.resolve(options.target);
+    if (!fs.existsSync(filename)) throw new Error(`File not found: ${options.target}`);
+    const form = new FormData();
+    form.append('file', await fs.openAsBlob(filename), path.basename(filename));
+    data = await session.post(`/api/scan/${options.command}`, form, true);
+  } else {
+    const payload = { url: options.target };
+    if (options.command === 'website') Object.assign(payload, { scope: options.scope, pages: options.pages });
+    if (options.command === 'seo') payload.pages = options.pages;
+    data = await session.post(`/api/scan/${options.command}`, payload);
+  }
+  const output = clean(data);
+  process.stdout.write(options.json ? `${JSON.stringify(output, null, 2)}\n` : `${summary(output)}\n`);
+}
+
+if (require.main === module) main().catch((error) => {
+  process.stderr.write(`scan: ${error.name === 'TimeoutError' ? 'The scan timed out.' : error.message}\n`);
+  process.exitCode = 1;
+});
+
+module.exports = { parse, clean };

package/package.json

@@ -1,6 +1,14 @@
 {
   "name": "scan-now",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.0",
+  "description": "Run website, SEO, technology, phishing, file, and extension security scans from your terminal.",
+  "bin": { "scan": "bin/scan.js" },
+  "files": ["bin", "README.md"],
+  "scripts": { "test": "node --check bin/scan.js && node bin/scan.js --version", "prepublishOnly": "npm test" },
+  "engines": { "node": ">=20" },
+  "keywords": ["security", "scanner", "website-scan", "seo-audit", "phishing", "cli", "scan-now"],
+  "homepage": "https://scan.now",
+  "license": "UNLICENSED",
+  "author": "Scan.now",
+  "publishConfig": { "access": "public" }
+}