xploitscan 1.0.0 → 1.0.2

package/README.md

@@ -130,7 +130,7 @@ Scan via the web at [xploitscan.com](https://xploitscan.com):
 - SOC2/ISO27001 compliance mapping
 - Slack and Discord webhook notifications
 
-**Free**: 5 scans/day, 30 core rules. **Pro** ($29/mo): unlimited scans, all 131 rules, and all dashboard features.
+**Free**: 5 scans/day, 30 core rules. **Pro** ($29/mo): unlimited scans, all 131 rules, and all dashboard features. **Team** ($99/mo): everything in Pro plus 5 seats, shared scan history, RBAC, and portfolio reports. Annual plans save 20%.
 
 ## Supported Languages
 

package/dist/{api-Z7VNGPT2.js → api-ZNWEMMEL.js}

@@ -1,24 +1,30 @@
 #!/usr/bin/env node
 import {
   checkUsage,
+  clearProRulesCache,
   clearToken,
+  downloadProRulesBundle,
   getCheckoutUrl,
   getStoredToken,
   incrementUsage,
   isAuthenticated,
+  loadCachedProRules,
   storeToken,
   syncUser,
   uploadScanResults
-} from "./chunk-CBDFSACC.js";
+} from "./chunk-IHRV7UHG.js";
 export {
   checkUsage,
+  clearProRulesCache,
   clearToken,
+  downloadProRulesBundle,
   getCheckoutUrl,
   getStoredToken,
   incrementUsage,
   isAuthenticated,
+  loadCachedProRules,
   storeToken,
   syncUser,
   uploadScanResults
 };
-//# sourceMappingURL=api-Z7VNGPT2.js.map
+//# sourceMappingURL=api-ZNWEMMEL.js.map

package/dist/{chunk-CBDFSACC.js → chunk-IHRV7UHG.js}

@@ -1,4 +1,10 @@
 #!/usr/bin/env node
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
 
 // src/utils/api.ts
 import { readFileSync, writeFileSync, mkdirSync, existsSync, unlinkSync } from "fs";
@@ -6,7 +12,10 @@ import { join } from "path";
 import { homedir } from "os";
 var CONFIG_DIR = join(homedir(), ".xploitscan");
 var TOKEN_FILE = join(CONFIG_DIR, "token.json");
+var PRO_RULES_FILE = join(CONFIG_DIR, "pro-rules.cjs");
+var PRO_RULES_META = join(CONFIG_DIR, "pro-rules-meta.json");
 var API_BASE = process.env.XPLOITSCAN_API_URL ?? "https://api.xploitscan.com";
+var WEB_BASE = process.env.XPLOITSCAN_WEB_URL ?? "https://xploitscan.com";
 if (API_BASE.startsWith("http://") && !API_BASE.includes("localhost") && !API_BASE.includes("127.0.0.1")) {
   console.warn("WARNING: API URL is not using HTTPS. This is insecure.");
 }
@@ -106,6 +115,49 @@ async function getCheckoutUrl() {
     return null;
   }
 }
+var PRO_RULES_CACHE_HOURS = 24;
+async function downloadProRulesBundle() {
+  const token = getStoredToken();
+  if (!token) return false;
+  try {
+    const res = await fetch(`${WEB_BASE}/api/cli/rules-bundle`, {
+      headers: { Authorization: `Bearer ${token.token}` }
+    });
+    if (!res.ok) return false;
+    const bundle = await res.text();
+    if (!bundle || bundle.length < 100) return false;
+    mkdirSync(CONFIG_DIR, { recursive: true, mode: 448 });
+    writeFileSync(PRO_RULES_FILE, bundle, { mode: 384 });
+    writeFileSync(PRO_RULES_META, JSON.stringify({
+      cachedAt: Date.now(),
+      expiresAt: Date.now() + PRO_RULES_CACHE_HOURS * 60 * 60 * 1e3
+    }), { mode: 384 });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function loadCachedProRules() {
+  try {
+    if (!existsSync(PRO_RULES_FILE) || !existsSync(PRO_RULES_META)) return null;
+    const meta = JSON.parse(readFileSync(PRO_RULES_META, "utf-8"));
+    if (Date.now() > meta.expiresAt) {
+      clearProRulesCache();
+      return null;
+    }
+    const mod = __require(PRO_RULES_FILE);
+    return mod.proOnlyRules || null;
+  } catch {
+    return null;
+  }
+}
+function clearProRulesCache() {
+  try {
+    if (existsSync(PRO_RULES_FILE)) unlinkSync(PRO_RULES_FILE);
+    if (existsSync(PRO_RULES_META)) unlinkSync(PRO_RULES_META);
+  } catch {
+  }
+}
 
 export {
   getStoredToken,
@@ -116,6 +168,9 @@ export {
   incrementUsage,
   uploadScanResults,
   syncUser,
-  getCheckoutUrl
+  getCheckoutUrl,
+  downloadProRulesBundle,
+  loadCachedProRules,
+  clearProRulesCache
 };
-//# sourceMappingURL=chunk-CBDFSACC.js.map
+//# sourceMappingURL=chunk-IHRV7UHG.js.map

package/dist/chunk-IHRV7UHG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/api.ts"],"sourcesContent":["import { readFileSync, writeFileSync, mkdirSync, existsSync, unlinkSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { homedir } from \"node:os\";\n\nconst CONFIG_DIR = join(homedir(), \".xploitscan\");\nconst TOKEN_FILE = join(CONFIG_DIR, \"token.json\");\nconst PRO_RULES_FILE = join(CONFIG_DIR, \"pro-rules.cjs\");\nconst PRO_RULES_META = join(CONFIG_DIR, \"pro-rules-meta.json\");\n\nconst API_BASE = process.env.XPLOITSCAN_API_URL ?? \"https://api.xploitscan.com\";\nconst WEB_BASE = process.env.XPLOITSCAN_WEB_URL ?? \"https://xploitscan.com\";\n\nif (API_BASE.startsWith(\"http://\") && !API_BASE.includes(\"localhost\") && !API_BASE.includes(\"127.0.0.1\")) {\n  console.warn(\"WARNING: API URL is not using HTTPS. This is insecure.\");\n}\n\ninterface TokenData {\n  token: string;\n  userId: string;\n  email: string;\n  expiresAt?: number;\n}\n\nexport function getStoredToken(): TokenData | null {\n  try {\n    if (!existsSync(TOKEN_FILE)) return null;\n    const data = JSON.parse(readFileSync(TOKEN_FILE, \"utf-8\"));\n    if (data.expiresAt && Date.now() > data.expiresAt) {\n      // Token expired\n      unlinkSync(TOKEN_FILE);\n      return null;\n    }\n    return data;\n  } catch {\n    return null;\n  }\n}\n\nexport function storeToken(data: TokenData): void {\n  mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });\n  writeFileSync(TOKEN_FILE, JSON.stringify(data, null, 2), { mode: 0o600 });\n}\n\nexport function clearToken(): void {\n  try {\n    if (existsSync(TOKEN_FILE)) {\n      unlinkSync(TOKEN_FILE);\n    }\n  } catch {\n    // ignore\n  }\n}\n\nexport function isAuthenticated(): boolean {\n  return getStoredToken() !== null;\n}\n\nasync function apiRequest(\n  path: string,\n  options: RequestInit = {},\n): Promise<Response> {\n  const token = getStoredToken();\n  const headers: Record<string, string> = {\n    \"Content-Type\": \"application/json\",\n    ...(options.headers as Record<string, string>),\n  };\n\n  if (token) {\n    headers.Authorization = `Bearer ${token.token}`;\n  }\n\n  return fetch(`${API_BASE}${path}`, {\n    ...options,\n    headers,\n  });\n}\n\nexport async function checkUsage(): Promise<{\n  allowed: boolean;\n  plan: string;\n  remaining: number;\n  limit: number;\n}> {\n  const token = getStoredToken();\n  if (!token) {\n    // Unauthenticated users get limited local scans\n    return { allowed: true, plan: \"anonymous\", remaining: -1, limit: -1 };\n  }\n\n  try {\n    const res = await apiRequest(\"/api/usage/check\");\n    if (!res.ok) {\n      // API error — allow scan to proceed locally\n      return { allowed: true, plan: \"unknown\", remaining: -1, limit: -1 };\n    }\n    return await res.json();\n  } catch {\n    // Network error — allow local scan\n    return { allowed: true, plan: \"offline\", remaining: -1, limit: -1 };\n  }\n}\n\nexport async function incrementUsage(): Promise<void> {\n  const token = getStoredToken();\n  if (!token) return;\n\n  try {\n    await apiRequest(\"/api/usage/increment\", { method: \"POST\" });\n  } catch {\n    // Silent fail — don't block scan\n  }\n}\n\nexport async function uploadScanResults(result: {\n  directory: string;\n  filesScanned: number;\n  findings: unknown[];\n  duration: number;\n}): Promise<void> {\n  const token = getStoredToken();\n  if (!token) return;\n\n  try {\n    await apiRequest(\"/api/scans\", {\n      method: \"POST\",\n      body: JSON.stringify(result),\n    });\n  } catch {\n    // Silent fail\n  }\n}\n\nexport async function syncUser(): Promise<{ plan: string; email: string } | null> {\n  try {\n    const res = await apiRequest(\"/api/users/sync\", { method: \"POST\" });\n    if (!res.ok) return null;\n    const data = await res.json();\n    return data.user;\n  } catch {\n    return null;\n  }\n}\n\nexport async function getCheckoutUrl(): Promise<string | null> {\n  try {\n    const res = await apiRequest(\"/api/billing/checkout\", { method: \"POST\" });\n    if (!res.ok) return null;\n    const data = await res.json();\n    return data.url;\n  } catch {\n    return null;\n  }\n}\n\n// ── Pro Rules Bundle (Server-Side Delivery) ──────────────────────────────\n\nconst PRO_RULES_CACHE_HOURS = 24;\n\nexport async function downloadProRulesBundle(): Promise<boolean> {\n  const token = getStoredToken();\n  if (!token) return false;\n\n  try {\n    const res = await fetch(`${WEB_BASE}/api/cli/rules-bundle`, {\n      headers: { Authorization: `Bearer ${token.token}` },\n    });\n    if (!res.ok) return false;\n\n    const bundle = await res.text();\n    if (!bundle || bundle.length < 100) return false;\n\n    mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });\n    writeFileSync(PRO_RULES_FILE, bundle, { mode: 0o600 });\n    writeFileSync(PRO_RULES_META, JSON.stringify({\n      cachedAt: Date.now(),\n      expiresAt: Date.now() + PRO_RULES_CACHE_HOURS * 60 * 60 * 1000,\n    }), { mode: 0o600 });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nexport function loadCachedProRules(): unknown[] | null {\n  try {\n    if (!existsSync(PRO_RULES_FILE) || !existsSync(PRO_RULES_META)) return null;\n\n    const meta = JSON.parse(readFileSync(PRO_RULES_META, \"utf-8\"));\n    if (Date.now() > meta.expiresAt) {\n      clearProRulesCache();\n      return null;\n    }\n\n    // Dynamic require of the cached CJS bundle\n    const mod = require(PRO_RULES_FILE);\n    return mod.proOnlyRules || null;\n  } catch {\n    return null;\n  }\n}\n\nexport function clearProRulesCache(): void {\n  try {\n    if (existsSync(PRO_RULES_FILE)) unlinkSync(PRO_RULES_FILE);\n    if (existsSync(PRO_RULES_META)) unlinkSync(PRO_RULES_META);\n  } catch { /* ignore */ }\n}\n"],"mappings":";;;;;;;;;AAAA,SAAS,cAAc,eAAe,WAAW,YAAY,kBAAkB;AAC/E,SAAS,YAAY;AACrB,SAAS,eAAe;AAExB,IAAM,aAAa,KAAK,QAAQ,GAAG,aAAa;AAChD,IAAM,aAAa,KAAK,YAAY,YAAY;AAChD,IAAM,iBAAiB,KAAK,YAAY,eAAe;AACvD,IAAM,iBAAiB,KAAK,YAAY,qBAAqB;AAE7D,IAAM,WAAW,QAAQ,IAAI,sBAAsB;AACnD,IAAM,WAAW,QAAQ,IAAI,sBAAsB;AAEnD,IAAI,SAAS,WAAW,SAAS,KAAK,CAAC,SAAS,SAAS,WAAW,KAAK,CAAC,SAAS,SAAS,WAAW,GAAG;AACxG,UAAQ,KAAK,wDAAwD;AACvE;AASO,SAAS,iBAAmC;AACjD,MAAI;AACF,QAAI,CAAC,WAAW,UAAU,EAAG,QAAO;AACpC,UAAM,OAAO,KAAK,MAAM,aAAa,YAAY,OAAO,CAAC;AACzD,QAAI,KAAK,aAAa,KAAK,IAAI,IAAI,KAAK,WAAW;AAEjD,iBAAW,UAAU;AACrB,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,WAAW,MAAuB;AAChD,YAAU,YAAY,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACtD,gBAAc,YAAY,KAAK,UAAU,MAAM,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AAC1E;AAEO,SAAS,aAAmB;AACjC,MAAI;AACF,QAAI,WAAW,UAAU,GAAG;AAC1B,iBAAW,UAAU;AAAA,IACvB;AAAA,EACF,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,kBAA2B;AACzC,SAAO,eAAe,MAAM;AAC9B;AAEA,eAAe,WACb,MACA,UAAuB,CAAC,GACL;AACnB,QAAM,QAAQ,eAAe;AAC7B,QAAM,UAAkC;AAAA,IACtC,gBAAgB;AAAA,IAChB,GAAI,QAAQ;AAAA,EACd;AAEA,MAAI,OAAO;AACT,YAAQ,gBAAgB,UAAU,MAAM,KAAK;AAAA,EAC/C;AAEA,SAAO,MAAM,GAAG,QAAQ,GAAG,IAAI,IAAI;AAAA,IACjC,GAAG;AAAA,IACH;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,aAKnB;AACD,QAAM,QAAQ,eAAe;AAC7B,MAAI,CAAC,OAAO;AAEV,WAAO,EAAE,SAAS,MAAM,MAAM,aAAa,WAAW,IAAI,OAAO,GAAG;AAAA,EACtE;AAEA,MAAI;AACF,UAAM,MAAM,MAAM,WAAW,kBAAkB;AAC/C,QAAI,CAAC,IAAI,IAAI;AAEX,aAAO,EAAE,SAAS,MAAM,MAAM,WAAW,WAAW,IAAI,OAAO,GAAG;AAAA,IACpE;AACA,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AAEN,WAAO,EAAE,SAAS,MAAM,MAAM,WAAW,WAAW,IAAI,OAAO,GAAG;AAAA,EACpE;AACF;AAEA,eAAsB,iBAAgC;AACpD,QAAM,QAAQ,eAAe;AAC7B,MAAI,CAAC,MAAO;AAEZ,MAAI;AACF,UAAM,WAAW,wBAAwB,EAAE,QAAQ,OAAO,CAAC;AAAA,EAC7D,QAAQ;AAAA,EAER;AACF;AAEA,eAAsB,kBAAkB,QAKtB;AAChB,QAAM,QAAQ,eAAe;AAC7B,MAAI,CAAC,MAAO;AAEZ,MAAI;AACF,UAAM,WAAW,cAAc;AAAA,MAC7B,QAAQ;AAAA,MACR,MAAM,KAAK,UAAU,MAAM;AAAA,IAC7B,CAAC;AAAA,EACH,QAAQ;AAAA,EAER;AACF;AAEA,eAAsB,WAA4D;AAChF,MAAI;AACF,UAAM,MAAM,MAAM,WAAW,mBAAmB,EAAE,QAAQ,OAAO,CAAC;AAClE,QAAI,CAAC,IAAI,GAAI,QAAO;AACpB,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,WAAO,KAAK;AAAA,EACd,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,iBAAyC;AAC7D,MAAI;AACF,UAAM,MAAM,MAAM,WAAW,yBAAyB,EAAE,QAAQ,OAAO,CAAC;AACxE,QAAI,CAAC,IAAI,GAAI,QAAO;AACpB,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,WAAO,KAAK;AAAA,EACd,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,IAAM,wBAAwB;AAE9B,eAAsB,yBAA2C;AAC/D,QAAM,QAAQ,eAAe;AAC7B,MAAI,CAAC,MAAO,QAAO;AAEnB,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,GAAG,QAAQ,yBAAyB;AAAA,MAC1D,SAAS,EAAE,eAAe,UAAU,MAAM,KAAK,GAAG;AAAA,IACpD,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,QAAO;AAEpB,UAAM,SAAS,MAAM,IAAI,KAAK;AAC9B,QAAI,CAAC,UAAU,OAAO,SAAS,IAAK,QAAO;AAE3C,cAAU,YAAY,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACtD,kBAAc,gBAAgB,QAAQ,EAAE,MAAM,IAAM,CAAC;AACrD,kBAAc,gBAAgB,KAAK,UAAU;AAAA,MAC3C,UAAU,KAAK,IAAI;AAAA,MACnB,WAAW,KAAK,IAAI,IAAI,wBAAwB,KAAK,KAAK;AAAA,IAC5D,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AACnB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,qBAAuC;AACrD,MAAI;AACF,QAAI,CAAC,WAAW,cAAc,KAAK,CAAC,WAAW,cAAc,EAAG,QAAO;AAEvE,UAAM,OAAO,KAAK,MAAM,aAAa,gBAAgB,OAAO,CAAC;AAC7D,QAAI,KAAK,IAAI,IAAI,KAAK,WAAW;AAC/B,yBAAmB;AACnB,aAAO;AAAA,IACT;AAGA,UAAM,MAAM,UAAQ,cAAc;AAClC,WAAO,IAAI,gBAAgB;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,qBAA2B;AACzC,MAAI;AACF,QAAI,WAAW,cAAc,EAAG,YAAW,cAAc;AACzD,QAAI,WAAW,cAAc,EAAG,YAAW,cAAc;AAAA,EAC3D,QAAQ;AAAA,EAAe;AACzB;","names":[]}