securewithtrace 0.23.0 → 0.25.0

package/dist/index.js

@@ -26536,6 +26536,75 @@ function tsvSafe(value) {
   return (value ?? "").replace(/[\t\r\n]/g, " ");
 }
 
+// src/pager.ts
+function isInteractiveEnvironment() {
+  if (process.env["NO_PAGER"] === "1" || process.env["TRACECLI_NO_PAGER"] === "1") {
+    return false;
+  }
+  return Boolean(process.stdout.isTTY && process.stdin.isTTY);
+}
+function resolvePagerCommand() {
+  const raw = process.env["PAGER"]?.trim();
+  if (raw && raw.length > 0) {
+    const parts = raw.split(/\s+/);
+    const [command, ...args] = parts;
+    if (command) return [command, ...args];
+  }
+  return ["less"];
+}
+function flattenItem(item, index, renderItem) {
+  const rendered = renderItem(item, index);
+  return typeof rendered === "string" ? [rendered] : rendered;
+}
+function printWithoutPager(options) {
+  const { items, header, renderItem } = options;
+  if (header !== void 0) {
+    console.log(header);
+  }
+  items.forEach((item, index) => {
+    for (const line of flattenItem(item, index, renderItem)) {
+      console.log(line);
+    }
+  });
+}
+async function runInteractivePager(options) {
+  const { items, header, renderItem, disabled } = options;
+  if (disabled || items.length === 0 || !isInteractiveEnvironment()) {
+    printWithoutPager({ items, header, renderItem });
+    return;
+  }
+  const command = resolvePagerCommand();
+  try {
+    const proc = Bun.spawn(command, {
+      stdin: "pipe",
+      stdout: "inherit",
+      stderr: "inherit",
+      env: { LESS: "FRX", ...process.env }
+    });
+    const writer = proc.stdin;
+    try {
+      if (header !== void 0) {
+        writer.write(`${header}
+`);
+      }
+      items.forEach((item, index) => {
+        for (const line of flattenItem(item, index, renderItem)) {
+          writer.write(`${line}
+`);
+        }
+      });
+    } catch {
+    }
+    try {
+      writer.end();
+    } catch {
+    }
+    await proc.exited;
+  } catch {
+    printWithoutPager({ items, header, renderItem });
+  }
+}
+
 // src/auth/commands.ts
 function getClientId() {
   const clientId = "client_01KEZ01W5Q3107GTBY51WQ67HT";
@@ -26965,19 +27034,27 @@ Examples:
     }
   });
 }
+var ORG_LIST_MAX_LIMIT = 100;
 function createOrgListCommand() {
-  return new Command("list").description("List organizations available to your account").option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option("-L, --limit <n>", "Max organizations to display (default: all)", (v) => {
-    const n = Number.parseInt(v, 10);
-    if (Number.isNaN(n) || n < 1) {
-      throw new Error("--limit must be a positive integer");
+  return new Command("list").description("List organizations available to your account").option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option(
+    "-L, --limit <n>",
+    `Max organizations to display, max ${ORG_LIST_MAX_LIMIT} (default: all)`,
+    (v) => {
+      const n = Number.parseInt(v, 10);
+      if (Number.isNaN(n) || n < 1) {
+        throw new Error("--limit must be a positive integer");
+      }
+      if (n > ORG_LIST_MAX_LIMIT) {
+        throw new Error(`--limit cannot exceed ${ORG_LIST_MAX_LIMIT}`);
+      }
+      return n;
     }
-    return n;
-  }).option(
+  ).option(
     "-f, --filter <expression>",
     "Filter expression (repeatable). Fields: name, slug. Operators: = exact, != not exact, : contains, !: not contains",
     (val, prev) => [...prev, val],
     []
-  ).option("-w, --web", "Open the organization settings in a browser").addHelpText(
+  ).option("-w, --web", "Open the organization settings in a browser").option("--no-pager", "Disable the interactive arrow-key pager for table output").addHelpText(
     "after",
     `
 Examples:
@@ -26987,6 +27064,7 @@ Examples:
   tracecli org list --limit 5
   tracecli org list --filter "name:acme"
   tracecli org list --filter "slug!=internal"
+  tracecli org list --no-pager
   tracecli org list --web`
   ).action(
     async (options) => {
@@ -27056,10 +27134,16 @@ Examples:
         (h, i) => Math.max(h.length, ...rows.map((r) => (r[i] ?? "").length))
       );
       const pad = (s, w3) => s.padEnd(w3);
-      console.log(headers.map((h, i) => pad(h, colWidths[i] ?? h.length)).join("  "));
-      for (const row of rows) {
-        console.log(row.map((cell, i) => pad(cell, colWidths[i] ?? 0)).join("  "));
-      }
+      const headerLine = headers.map((h, i) => pad(h, colWidths[i] ?? h.length)).join("  ");
+      const rowLines = rows.map(
+        (row) => row.map((cell, i) => pad(cell, colWidths[i] ?? 0)).join("  ")
+      );
+      await runInteractivePager({
+        items,
+        header: headerLine,
+        renderItem: (_item, i) => [rowLines[i] ?? ""],
+        disabled: options.pager === false
+      });
       if (organizationContext.staleSelectionDetected) {
         console.log(
           "\nYour previous organization selection is no longer available and was reset."
@@ -27717,7 +27801,7 @@ function createListCommand() {
       }
       return Math.min(n, MAX_LIMIT);
     }
-  ).option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option("-w, --web", "Open the pentests dashboard in a browser").addHelpText(
+  ).option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option("-w, --web", "Open the pentests dashboard in a browser").option("--no-pager", "Disable the interactive arrow-key pager for table output").addHelpText(
     "after",
     `
 Examples:
@@ -27726,84 +27810,95 @@ Examples:
   tracecli pentest list --limit 10
   tracecli pentest list --output json | jq '.[].title'
   tracecli pentest list --output tsv | cut -f1,2
+  tracecli pentest list --no-pager
   tracecli pentest list --web`
-  ).action(async (options) => {
-    if (options.web) {
-      const slug = await resolveOrganizationSlug();
-      const url2 = `${getAppBaseUrl()}/dashboard/${slug}/pentests`;
-      const opened = await openBrowser(url2);
-      if (!opened) {
-        console.log(`Open in browser: ${url2}`);
+  ).action(
+    async (options) => {
+      if (options.web) {
+        const slug = await resolveOrganizationSlug();
+        const url2 = `${getAppBaseUrl()}/dashboard/${slug}/pentests`;
+        const opened = await openBrowser(url2);
+        if (!opened) {
+          console.log(`Open in browser: ${url2}`);
+        }
+        return;
       }
-      return;
-    }
-    const organizationId = await resolveOrganizationId();
-    const result = await authenticatedRequest(
-      (client) => client.pentest.listPentests({
-        params: { organizationId }
-      })
-    );
-    if (result.status === 401) {
-      console.error("Authentication failed. Run `tracecli auth login` to re-authenticate.");
-      process.exit(1);
-    }
-    if (result.status !== 200) {
-      console.error(`Failed to list pentests (status ${result.status}).`);
-      process.exit(1);
-    }
-    let filteredPentests = result.body;
-    if (options.status) {
-      filteredPentests = filteredPentests.filter((p2) => p2.status === options.status);
-    }
-    const limit = options.limit ?? DEFAULT_LIMIT;
-    const pentests = filteredPentests.slice(0, limit);
-    const isJson = options.output === "json";
-    const isTsv = options.output === "tsv";
-    if (pentests.length === 0) {
-      if (isJson) {
-        console.log("[]");
-      } else if (isTsv) {
-        console.log("displayId	title	status	startedAt	endedAt	findingsTotal");
-      } else {
-        console.log("No pentests found.");
+      const organizationId = await resolveOrganizationId();
+      const result = await authenticatedRequest(
+        (client) => client.pentest.listPentests({
+          params: { organizationId }
+        })
+      );
+      if (result.status === 401) {
+        console.error("Authentication failed. Run `tracecli auth login` to re-authenticate.");
+        process.exit(1);
       }
-      return;
-    }
-    if (isJson) {
-      console.log(JSON.stringify(pentests, null, 2));
-      return;
-    }
-    if (isTsv) {
-      console.log("displayId	title	status	startedAt	endedAt	findingsTotal");
-      for (const pt of pentests) {
-        const cols = [
-          `PT-${pt.displayId}`,
-          tsvSafe2(pt.title),
-          pt.status,
-          pt.startedAt ? String(pt.startedAt) : "",
-          pt.endedAt ? String(pt.endedAt) : "",
-          String(pt.findingCounts.total)
-        ];
-        console.log(cols.join("	"));
+      if (result.status !== 200) {
+        console.error(`Failed to list pentests (status ${result.status}).`);
+        process.exit(1);
       }
-      return;
-    }
-    console.log(`Found ${pentests.length} pentest${pentests.length === 1 ? "" : "s"}:
-`);
-    for (const pt of pentests) {
-      const status = formatStatus(pt.status);
-      const started = formatDate(pt.startedAt);
-      const ended = formatDate(pt.endedAt);
-      const dateRange = pt.startedAt ? `${started} \u2013 ${ended}` : "Not started";
-      const findings = pt.findingCounts.total;
-      console.log(`  [PT-${pt.displayId}] ${pt.title}`);
-      console.log(`          Status: ${status} | Findings: ${findings} | ${dateRange}`);
-      if (pt.description) {
-        console.log(`          ${pt.description}`);
+      let filteredPentests = result.body;
+      if (options.status) {
+        filteredPentests = filteredPentests.filter((p2) => p2.status === options.status);
+      }
+      const limit = options.limit ?? DEFAULT_LIMIT;
+      const pentests = filteredPentests.slice(0, limit);
+      const isJson = options.output === "json";
+      const isTsv = options.output === "tsv";
+      if (pentests.length === 0) {
+        if (isJson) {
+          console.log("[]");
+        } else if (isTsv) {
+          console.log("displayId	title	status	startedAt	endedAt	findingsTotal");
+        } else {
+          console.log("No pentests found.");
+        }
+        return;
       }
-      console.log("");
+      if (isJson) {
+        console.log(JSON.stringify(pentests, null, 2));
+        return;
+      }
+      if (isTsv) {
+        console.log("displayId	title	status	startedAt	endedAt	findingsTotal");
+        for (const pt of pentests) {
+          const cols = [
+            `PT-${pt.displayId}`,
+            tsvSafe2(pt.title),
+            pt.status,
+            pt.startedAt ? String(pt.startedAt) : "",
+            pt.endedAt ? String(pt.endedAt) : "",
+            String(pt.findingCounts.total)
+          ];
+          console.log(cols.join("	"));
+        }
+        return;
+      }
+      const header = `Found ${pentests.length} pentest${pentests.length === 1 ? "" : "s"}:`;
+      await runInteractivePager({
+        items: pentests,
+        header,
+        renderItem: (pt) => renderPentestLines(pt),
+        disabled: options.pager === false
+      });
     }
-  });
+  );
+}
+function renderPentestLines(pt) {
+  const status = formatStatus(pt.status);
+  const started = formatDate(pt.startedAt);
+  const ended = formatDate(pt.endedAt);
+  const dateRange = pt.startedAt ? `${started} \u2013 ${ended}` : "Not started";
+  const findings = pt.findingCounts.total;
+  const lines = [
+    `  [PT-${pt.displayId}] ${pt.title}`,
+    `          Status: ${status} | Findings: ${findings} | ${dateRange}`
+  ];
+  if (pt.description) {
+    lines.push(`          ${pt.description}`);
+  }
+  lines.push("");
+  return lines;
 }
 function createFindingsListCommand() {
   return new Command("list").description("List findings for a pentest").requiredOption("--pentest <id>", "Pentest display ID (e.g. PT-3) or UUID").option(
@@ -27824,7 +27919,7 @@ function createFindingsListCommand() {
       }
       return Math.min(n, MAX_LIMIT);
     }
-  ).option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option("-w, --web", "Open the pentest detail page in a browser").addHelpText(
+  ).option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option("-w, --web", "Open the pentest detail page in a browser").option("--no-pager", "Disable the interactive arrow-key pager for table output").addHelpText(
     "after",
     `
 Examples:
@@ -27833,6 +27928,7 @@ Examples:
   tracecli pentest findings list --pentest PT-3 --status OPEN --limit 20
   tracecli pentest findings list --pentest PT-3 --output json
   tracecli pentest findings list --pentest PT-3 --output tsv | cut -f1,4
+  tracecli pentest findings list --pentest PT-3 --no-pager
   tracecli pentest findings list --pentest PT-3 --web`
   ).action(
     async (options) => {
@@ -27911,27 +28007,33 @@ Examples:
         }
         return;
       }
-      console.log(`Found ${findings.length} finding${findings.length === 1 ? "" : "s"}:
-`);
-      for (const finding of findings) {
-        const sev = formatFindingSeverity(finding.severity);
-        const severityLabel = colorSeverity(finding.severity, sev);
-        const status = formatStatus(finding.status);
-        const cwes = finding.cweIds.length > 0 ? ` | ${finding.cweIds.join(", ")}` : "";
-        const score = finding.cvssScore != null ? ` | CVSS ${finding.cvssScore.toFixed(1)}` : "";
-        console.log(`  [${severityLabel}] ${finding.title}`);
-        console.log(`         ${finding.category} \xB7 ${status}${cwes}${score}`);
-        if (finding.repositories.length > 0) {
-          for (const repo of finding.repositories) {
-            const location = repo.filePath ? `${repo.repositoryName} \xB7 ${repo.filePath}${repo.startLine != null ? `:${repo.startLine}` : ""}` : repo.repositoryName;
-            console.log(`         ${location}`);
-          }
-        }
-        console.log("");
-      }
+      const header = `Found ${findings.length} finding${findings.length === 1 ? "" : "s"}:`;
+      await runInteractivePager({
+        items: findings,
+        header,
+        renderItem: (finding) => renderPentestFindingLines(finding),
+        disabled: options.pager === false
+      });
     }
   );
 }
+function renderPentestFindingLines(finding) {
+  const sev = formatFindingSeverity(finding.severity);
+  const severityLabel = colorSeverity(finding.severity, sev);
+  const status = formatStatus(finding.status);
+  const cwes = finding.cweIds.length > 0 ? ` | ${finding.cweIds.join(", ")}` : "";
+  const score = finding.cvssScore != null ? ` | CVSS ${finding.cvssScore.toFixed(1)}` : "";
+  const lines = [
+    `  [${severityLabel}] ${finding.title}`,
+    `         ${finding.category} \xB7 ${status}${cwes}${score}`
+  ];
+  for (const repo of finding.repositories) {
+    const location = repo.filePath ? `${repo.repositoryName} \xB7 ${repo.filePath}${repo.startLine != null ? `:${repo.startLine}` : ""}` : repo.repositoryName;
+    lines.push(`         ${location}`);
+  }
+  lines.push("");
+  return lines;
+}
 function createFindingsCommand() {
   const findings = new Command("findings").description("Manage pentest findings");
   findings.addCommand(createFindingsListCommand());
@@ -28264,7 +28366,7 @@ function printRepositoriesTsv(repositories) {
     );
   }
 }
-function printRepositoriesTable(repositories) {
+function buildRepositoriesTable(repositories) {
   const headers = ["Repository URL", "Platform", "Status"];
   const rows = repositories.map(
     (repo) => [
@@ -28277,10 +28379,9 @@ function printRepositoriesTable(repositories) {
     (h, i) => Math.max(h.length, ...rows.map((r) => (r[i] ?? "").length))
   );
   const pad = (s, w3) => s.padEnd(w3);
-  console.log(headers.map((h, i) => pad(h, colWidths[i] ?? h.length)).join("  "));
-  for (const row of rows) {
-    console.log(row.map((cell, i) => pad(cell, colWidths[i] ?? 0)).join("  "));
-  }
+  const headerLine = headers.map((h, i) => pad(h, colWidths[i] ?? h.length)).join("  ");
+  const rowLines = rows.map((row) => row.map((cell, i) => pad(cell, colWidths[i] ?? 0)).join("  "));
+  return { headerLine, rowLines };
 }
 function collectFilterExpression(value, previous) {
   previous.push(value);
@@ -28431,7 +28532,7 @@ function addRepositoryFilterOptions(command) {
   ).option("--all", "Display all matching repositories (disables pagination)").option(
     "--dependency <pkg>",
     "Filter repositories that use a dependency (e.g. lodash, lodash@4.17.21, @types/node@20)"
-  ).option("-w, --web", "Open the repositories dashboard in a browser");
+  ).option("-w, --web", "Open the repositories dashboard in a browser").option("--no-pager", "Disable the interactive arrow-key pager for table output");
 }
 async function runRepositoryListCommand(options) {
   if (options.web) {
@@ -28499,7 +28600,13 @@ async function runRepositoryListCommand(options) {
     printRepositoriesTsv(displayedRepositories);
     return;
   }
-  printRepositoriesTable(displayedRepositories);
+  const { headerLine, rowLines } = buildRepositoriesTable(displayedRepositories);
+  await runInteractivePager({
+    items: displayedRepositories,
+    header: headerLine,
+    renderItem: (_repo, i) => [rowLines[i] ?? ""],
+    disabled: options.pager === false
+  });
   printPaginationHint(
     pagination,
     "repositories",
@@ -28580,10 +28687,11 @@ async function runDependencyFilter(organizationId, options) {
     }
     return;
   }
-  for (const repo of displayedRepos) {
-    const versions = repo.versions.join(", ");
-    console.log(`${repo.fullName}  (${versions})`);
-  }
+  await runInteractivePager({
+    items: displayedRepos,
+    renderItem: (repo) => [`${repo.fullName}  (${repo.versions.join(", ")})`],
+    disabled: options.pager === false
+  });
   printPaginationHint(pagination, "repositories", "");
 }
 function createListCommand2() {
@@ -29289,22 +29397,24 @@ function formatSeverity(severity) {
       return severity;
   }
 }
-function printVulnerabilities(vulnerabilities) {
-  const sorted = [...vulnerabilities].sort(
+function renderVulnerabilityLines(vuln) {
+  const sev = formatSeverity(vuln.severity);
+  const displaySeverity = colorSeverity(vuln.severity, sev);
+  const status = formatStatus(vuln.status);
+  const repo = vuln.repositoryName;
+  const file2 = vuln.codeSnippet.filePath;
+  const line = vuln.codeSnippet.startLine;
+  return [
+    `  [${displaySeverity}] ${vuln.title}`,
+    `         ${repo} \xB7 ${file2}:${line} \xB7 ${status}`,
+    `         ${vuln.traceId}`,
+    ""
+  ];
+}
+function sortVulnerabilitiesBySeverity(vulnerabilities) {
+  return [...vulnerabilities].sort(
     (a, b) => (SEVERITY_ORDER[a.severity] ?? 99) - (SEVERITY_ORDER[b.severity] ?? 99)
   );
-  for (const vuln of sorted) {
-    const sev = formatSeverity(vuln.severity);
-    const displaySeverity = colorSeverity(vuln.severity, sev);
-    const status = formatStatus(vuln.status);
-    const repo = vuln.repositoryName;
-    const file2 = vuln.codeSnippet.filePath;
-    const line = vuln.codeSnippet.startLine;
-    console.log(`  [${displaySeverity}] ${vuln.title}`);
-    console.log(`         ${repo} \xB7 ${file2}:${line} \xB7 ${status}`);
-    console.log(`         ${vuln.traceId}`);
-    console.log("");
-  }
 }
 function sanitizeTsvField(value) {
   return value.replace(/[\t\n\r]/g, " ");
@@ -29455,7 +29565,7 @@ function createListCommand3() {
     "Additional filter expression: field=value or field!=value. Repeatable. Supported fields: vulnerabilityType, cweId, scanMode (and any other API-supported field).",
     (value, previous) => [...previous, value],
     []
-  ).option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option("-w, --web", "Open the vulnerabilities dashboard in a browser").addHelpText(
+  ).option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option("-w, --web", "Open the vulnerabilities dashboard in a browser").option("--no-pager", "Disable the interactive arrow-key pager for table output").addHelpText(
     "after",
     `
 Examples:
@@ -29466,6 +29576,7 @@ Examples:
   tracecli vulnerabilities list --filter vulnerabilityType=SAST --filter scanMode=sast
   tracecli vulnerabilities list --output json | jq '.[].title'
   tracecli vulnerabilities list --output tsv | cut -f1,7
+  tracecli vulnerabilities list --no-pager
   tracecli vulnerabilities list --web`
   ).action(
     async (options) => {
@@ -29548,10 +29659,15 @@ Examples:
       } else if (isTsv) {
         printVulnerabilitiesTsv(items);
       } else {
+        const sorted = sortVulnerabilitiesBySeverity(items);
         const total = collected.length;
-        console.log(`Found ${total} vulnerabilit${total === 1 ? "y" : "ies"}:
-`);
-        printVulnerabilities(items);
+        const header = `Found ${total} vulnerabilit${total === 1 ? "y" : "ies"}:`;
+        await runInteractivePager({
+          items: sorted,
+          header,
+          renderItem: (vuln) => renderVulnerabilityLines(vuln),
+          disabled: options.pager === false
+        });
       }
     }
   );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "securewithtrace",
-  "version": "0.23.0",
+  "version": "0.25.0",
   "description": "Official Trace CLI for vulnerability intelligence in your terminal",
   "type": "module",
   "bin": {