securewithtrace 0.30.0 → 0.31.0

package/dist/index.js

@@ -35495,6 +35495,15 @@ function exitAuthFailed() {
   console.error(colorError("Authentication failed. Run `tracecli auth login` to re-authenticate."));
   process.exit(1);
 }
+function resolveClearableOption(value, clear, flag) {
+  if (value !== void 0 && clear) {
+    return { error: `Pass only one of --${flag} / --clear-${flag}.` };
+  }
+  if (clear) {
+    return { value: null };
+  }
+  return { value };
+}
 function formatDate(value) {
   if (!value) {
     return "\u2014";
@@ -39540,9 +39549,225 @@ function createFindingsCommand() {
   findings.addCommand(createFindingsListCommand());
   return findings;
 }
+var PRIORITY_SET = new Set(CustomerPriorityCategoryValues);
+var PRIORITY_LIST = CustomerPriorityCategoryValues.join(", ");
+function isPriorityCategory(value) {
+  return PRIORITY_SET.has(value);
+}
+function buildUpdatePentestBody(input) {
+  return {
+    ...input.title !== void 0 ? { title: input.title } : {},
+    ...input.description !== void 0 ? { description: input.description } : {},
+    ...input.customerConcernsContext !== void 0 ? { customerConcernsContext: input.customerConcernsContext } : {},
+    ...input.customerPriorityCategories !== void 0 ? { customerPriorityCategories: input.customerPriorityCategories } : {}
+  };
+}
+function isEmptyPentestUpdate(body) {
+  return Object.keys(body).length === 0;
+}
+function collectPriority(value, previous) {
+  return [...previous ?? [], value];
+}
+function parsePriorityCategories(values) {
+  if (values.length > 20) {
+    return { error: "Pass at most 20 --priority values." };
+  }
+  const categories = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const raw of values) {
+    const normalized = raw.trim().toUpperCase();
+    if (!isPriorityCategory(normalized)) {
+      return {
+        error: `Invalid priority '${raw}'. Expected one of: ${PRIORITY_LIST}.`
+      };
+    }
+    if (seen.has(normalized)) {
+      continue;
+    }
+    seen.add(normalized);
+    categories.push(normalized);
+  }
+  return { categories };
+}
+function resolvePrioritiesOption(priorities, clear) {
+  if (priorities !== void 0 && clear) {
+    return { error: "Pass only one of --priority / --clear-priorities." };
+  }
+  if (clear) {
+    return { value: [] };
+  }
+  if (priorities === void 0) {
+    return { value: void 0 };
+  }
+  const parsed = parsePriorityCategories(priorities);
+  if ("error" in parsed) {
+    return parsed;
+  }
+  return { value: parsed.categories };
+}
+function failPentestUpdate(status, body, notFoundLabel) {
+  const { message, errorCode } = readErrorFields(body);
+  if (status === UNAUTHORIZED_STATUS2) {
+    exitAuthFailed();
+  }
+  if (status === 403) {
+    console.error(
+      colorError(
+        "Only Trace staff can update pentests. Sign in with a staff account via `tracecli auth login`."
+      )
+    );
+    process.exit(1);
+  }
+  if (status === 404) {
+    console.error(
+      colorError(notFoundLabel ? `Pentest not found: ${notFoundLabel}.` : message ?? "Not found.")
+    );
+    process.exit(1);
+  }
+  if (status === 400) {
+    console.error(colorError(message ?? "Invalid request (status 400)."));
+    process.exit(1);
+  }
+  if (status === 409) {
+    if (errorCode === "PENTEST_CLOSED") {
+      console.error(colorError(message ?? "Closed pentests must be reopened before editing."));
+    } else {
+      console.error(colorError(message ?? "Conflict (status 409)."));
+    }
+    process.exit(1);
+  }
+  console.error(
+    colorError(`Failed to update pentest (status ${status})${message ? `: ${message}` : "."}`)
+  );
+  process.exit(1);
+}
+function formatPriorities(categories) {
+  return categories.length > 0 ? categories.join(", ") : "\u2014";
+}
+function truncateForDisplay(value, max = 120) {
+  if (value.length <= max) {
+    return value;
+  }
+  return `${value.slice(0, max - 1)}\u2026`;
+}
+function printPentestUpdateDetail(pt2) {
+  const pad = 14;
+  console.log(
+    [
+      `${"ID:".padEnd(pad)} PT-${pt2.displayId}`,
+      `${"Title:".padEnd(pad)} ${sanitizeDisplay(pt2.title)}`,
+      `${"Status:".padEnd(pad)} ${sanitizeDisplay(pt2.status)}`,
+      `${"Stage:".padEnd(pad)} ${sanitizeDisplay(pt2.currentStage)}`,
+      `${"Description:".padEnd(pad)} ${pt2.description ? sanitizeDisplay(truncateForDisplay(pt2.description)) : "\u2014"}`,
+      `${"Priorities:".padEnd(pad)} ${sanitizeDisplay(formatPriorities(pt2.customerPriorityCategories))}`,
+      `${"Concerns:".padEnd(pad)} ${pt2.customerConcernsContext ? sanitizeDisplay(truncateForDisplay(pt2.customerConcernsContext)) : "\u2014"}`,
+      `${"Updated:".padEnd(pad)} ${toIso(pt2.updatedAt)}`
+    ].join("\n")
+  );
+}
+function printPentestUpdateTsv(pt2) {
+  console.log("displayId	title	status	stage	description	priorities	concerns	updatedAt");
+  console.log(
+    [
+      `PT-${pt2.displayId}`,
+      tsvSafe2(sanitizeDisplay(pt2.title)),
+      tsvSafe2(sanitizeDisplay(pt2.status)),
+      tsvSafe2(sanitizeDisplay(pt2.currentStage)),
+      tsvSafe2(sanitizeDisplay(pt2.description ?? "")),
+      tsvSafe2(sanitizeDisplay(pt2.customerPriorityCategories.join(","))),
+      tsvSafe2(sanitizeDisplay(pt2.customerConcernsContext ?? "")),
+      toIso(pt2.updatedAt)
+    ].join("	")
+  );
+}
+function outputPentestUpdate(pt2, output) {
+  if (output === "json") {
+    console.log(JSON.stringify(pt2, null, 2));
+    return;
+  }
+  if (output === "tsv") {
+    printPentestUpdateTsv(pt2);
+    return;
+  }
+  printPentestUpdateDetail(pt2);
+}
+async function runUpdate4(pentestIdentifier, options) {
+  const output = parseOutput(options.output);
+  const description = resolveClearableOption(
+    options.description,
+    options.clearDescription,
+    "description"
+  );
+  if ("error" in description) {
+    console.error(colorError(description.error));
+    process.exit(1);
+  }
+  const concerns = resolveClearableOption(options.concerns, options.clearConcerns, "concerns");
+  if ("error" in concerns) {
+    console.error(colorError(concerns.error));
+    process.exit(1);
+  }
+  const priorities = resolvePrioritiesOption(options.priority, options.clearPriorities);
+  if ("error" in priorities) {
+    console.error(colorError(priorities.error));
+    process.exit(1);
+  }
+  const body = buildUpdatePentestBody({
+    title: options.title,
+    description: description.value,
+    customerConcernsContext: concerns.value,
+    customerPriorityCategories: priorities.value
+  });
+  if (isEmptyPentestUpdate(body)) {
+    console.error(
+      colorError(
+        "Nothing to update. Pass at least one of --title, --description, --clear-description, --concerns, --clear-concerns, --priority, --clear-priorities."
+      )
+    );
+    process.exit(1);
+  }
+  const organizationId = await resolveOrganizationId();
+  const pentestId = await resolvePentestId(organizationId, pentestIdentifier);
+  const result = await authenticatedRequest(
+    (client) => client.pentest.updatePentest({ params: { organizationId, pentestId }, body })
+  );
+  if (result.status !== SUCCESS_STATUS) {
+    failPentestUpdate(result.status, result.body, pentestIdentifier);
+  }
+  if (output === "table") {
+    console.log(colorSuccess(`Updated pentest PT-${result.body.displayId}`));
+  }
+  outputPentestUpdate(result.body, output);
+}
+function createUpdateCommand4() {
+  return new Command("update").description(
+    "Update pentest details and agent brief (staff-only: title, description, priorities, concerns)"
+  ).argument("<pentestId>", "Pentest display ID (e.g. PT-3) or UUID").option("--title <title>", "Engagement title").option("--description <text>", "Engagement description").option("--clear-description", "Clear the engagement description").option("--concerns <text>", "Agent-brief concerns (threat-model context)").option("--clear-concerns", "Clear agent-brief concerns").option(
+    "--priority <category>",
+    `Agent-brief priority category (repeatable). One of: ${PRIORITY_LIST}`,
+    collectPriority
+  ).option("--clear-priorities", "Clear all agent-brief priority categories").option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").addHelpText(
+    "after",
+    `
+Staff-only. Requires a browser session from \`tracecli auth login\` with a Trace
+staff account \u2014 API keys are rejected. Edits to the agent brief apply to sessions
+launched after this change (already-running sessions keep their snapshot).
+
+Examples:
+  tracecli pentest update PT-3 --title "Acme Q3 engagement"
+  tracecli pentest update PT-3 --description "Focus on the billing API"
+  tracecli pentest update PT-3 --priority AUTHN_BYPASS --priority AUTHZ_IDOR
+  tracecli pentest update PT-3 --concerns "Worried about IDOR on invoice IDs"
+  tracecli pentest update PT-3 --clear-concerns --clear-priorities
+  tracecli pentest update PT-3 --title "Acme Q3" -o json`
+  ).action(async (pentestId, options) => {
+    await runUpdate4(pentestId, options);
+  });
+}
 function createPentestCommand() {
   const pentest = new Command("pentest").description("Manage pentests");
   pentest.addCommand(createListCommand5());
+  pentest.addCommand(createUpdateCommand4());
   pentest.addCommand(createFindingsCommand());
   return pentest;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "securewithtrace",
-  "version": "0.30.0",
+  "version": "0.31.0",
   "description": "Official Trace CLI for vulnerability intelligence in your terminal",
   "type": "module",
   "bin": {