xploitscan 1.0.1 → 1.0.2

package/package.json

@@ -1,13 +1,18 @@
 {
   "name": "xploitscan",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "AI security scanner for vibe-coded apps. Find vulnerabilities before attackers do.",
   "type": "module",
   "bin": {
-    "xploitscan": "./dist/index.js"
+    "xploitscan": "dist/index.js"
   },
   "files": [
-    "dist",
+    "dist/index.js",
+    "dist/index.js.map",
+    "dist/chunk-*.js",
+    "dist/chunk-*.js.map",
+    "dist/api-*.js",
+    "dist/api-*.js.map",
     "README.md",
     "LICENSE"
   ],
@@ -39,7 +44,7 @@
   "homepage": "https://xploitscan.com",
   "repository": {
     "type": "git",
-    "url": "https://github.com/bgage72590/xploitscan"
+    "url": "git+https://github.com/bgage72590/xploitscan.git"
   },
   "bugs": {
     "url": "https://github.com/bgage72590/xploitscan/issues"

package/dist/chunk-CBDFSACC.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/utils/api.ts"],"sourcesContent":["import { readFileSync, writeFileSync, mkdirSync, existsSync, unlinkSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { homedir } from \"node:os\";\n\nconst CONFIG_DIR = join(homedir(), \".xploitscan\");\nconst TOKEN_FILE = join(CONFIG_DIR, \"token.json\");\n\nconst API_BASE = process.env.XPLOITSCAN_API_URL ?? \"https://api.xploitscan.com\";\n\nif (API_BASE.startsWith(\"http://\") && !API_BASE.includes(\"localhost\") && !API_BASE.includes(\"127.0.0.1\")) {\n  console.warn(\"WARNING: API URL is not using HTTPS. This is insecure.\");\n}\n\ninterface TokenData {\n  token: string;\n  userId: string;\n  email: string;\n  expiresAt?: number;\n}\n\nexport function getStoredToken(): TokenData | null {\n  try {\n    if (!existsSync(TOKEN_FILE)) return null;\n    const data = JSON.parse(readFileSync(TOKEN_FILE, \"utf-8\"));\n    if (data.expiresAt && Date.now() > data.expiresAt) {\n      // Token expired\n      unlinkSync(TOKEN_FILE);\n      return null;\n    }\n    return data;\n  } catch {\n    return null;\n  }\n}\n\nexport function storeToken(data: TokenData): void {\n  mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });\n  writeFileSync(TOKEN_FILE, JSON.stringify(data, null, 2), { mode: 0o600 });\n}\n\nexport function clearToken(): void {\n  try {\n    if (existsSync(TOKEN_FILE)) {\n      unlinkSync(TOKEN_FILE);\n    }\n  } catch {\n    // ignore\n  }\n}\n\nexport function isAuthenticated(): boolean {\n  return getStoredToken() !== null;\n}\n\nasync function apiRequest(\n  path: string,\n  options: RequestInit = {},\n): Promise<Response> {\n  const token = getStoredToken();\n  const headers: Record<string, string> = {\n    \"Content-Type\": \"application/json\",\n    ...(options.headers as Record<string, string>),\n  };\n\n  if (token) {\n    headers.Authorization = `Bearer ${token.token}`;\n  }\n\n  return fetch(`${API_BASE}${path}`, {\n    ...options,\n    headers,\n  });\n}\n\nexport async function checkUsage(): Promise<{\n  allowed: boolean;\n  plan: string;\n  remaining: number;\n  limit: number;\n}> {\n  const token = getStoredToken();\n  if (!token) {\n    // Unauthenticated users get limited local scans\n    return { allowed: true, plan: \"anonymous\", remaining: -1, limit: -1 };\n  }\n\n  try {\n    const res = await apiRequest(\"/api/usage/check\");\n    if (!res.ok) {\n      // API error — allow scan to proceed locally\n      return { allowed: true, plan: \"unknown\", remaining: -1, limit: -1 };\n    }\n    return await res.json();\n  } catch {\n    // Network error — allow local scan\n    return { allowed: true, plan: \"offline\", remaining: -1, limit: -1 };\n  }\n}\n\nexport async function incrementUsage(): Promise<void> {\n  const token = getStoredToken();\n  if (!token) return;\n\n  try {\n    await apiRequest(\"/api/usage/increment\", { method: \"POST\" });\n  } catch {\n    // Silent fail — don't block scan\n  }\n}\n\nexport async function uploadScanResults(result: {\n  directory: string;\n  filesScanned: number;\n  findings: unknown[];\n  duration: number;\n}): Promise<void> {\n  const token = getStoredToken();\n  if (!token) return;\n\n  try {\n    await apiRequest(\"/api/scans\", {\n      method: \"POST\",\n      body: JSON.stringify(result),\n    });\n  } catch {\n    // Silent fail\n  }\n}\n\nexport async function syncUser(): Promise<{ plan: string; email: string } | null> {\n  try {\n    const res = await apiRequest(\"/api/users/sync\", { method: \"POST\" });\n    if (!res.ok) return null;\n    const data = await res.json();\n    return data.user;\n  } catch {\n    return null;\n  }\n}\n\nexport async function getCheckoutUrl(): Promise<string | null> {\n  try {\n    const res = await apiRequest(\"/api/billing/checkout\", { method: \"POST\" });\n    if (!res.ok) return null;\n    const data = await res.json();\n    return data.url;\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;;AAAA,SAAS,cAAc,eAAe,WAAW,YAAY,kBAAkB;AAC/E,SAAS,YAAY;AACrB,SAAS,eAAe;AAExB,IAAM,aAAa,KAAK,QAAQ,GAAG,aAAa;AAChD,IAAM,aAAa,KAAK,YAAY,YAAY;AAEhD,IAAM,WAAW,QAAQ,IAAI,sBAAsB;AAEnD,IAAI,SAAS,WAAW,SAAS,KAAK,CAAC,SAAS,SAAS,WAAW,KAAK,CAAC,SAAS,SAAS,WAAW,GAAG;AACxG,UAAQ,KAAK,wDAAwD;AACvE;AASO,SAAS,iBAAmC;AACjD,MAAI;AACF,QAAI,CAAC,WAAW,UAAU,EAAG,QAAO;AACpC,UAAM,OAAO,KAAK,MAAM,aAAa,YAAY,OAAO,CAAC;AACzD,QAAI,KAAK,aAAa,KAAK,IAAI,IAAI,KAAK,WAAW;AAEjD,iBAAW,UAAU;AACrB,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,WAAW,MAAuB;AAChD,YAAU,YAAY,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACtD,gBAAc,YAAY,KAAK,UAAU,MAAM,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AAC1E;AAEO,SAAS,aAAmB;AACjC,MAAI;AACF,QAAI,WAAW,UAAU,GAAG;AAC1B,iBAAW,UAAU;AAAA,IACvB;AAAA,EACF,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,kBAA2B;AACzC,SAAO,eAAe,MAAM;AAC9B;AAEA,eAAe,WACb,MACA,UAAuB,CAAC,GACL;AACnB,QAAM,QAAQ,eAAe;AAC7B,QAAM,UAAkC;AAAA,IACtC,gBAAgB;AAAA,IAChB,GAAI,QAAQ;AAAA,EACd;AAEA,MAAI,OAAO;AACT,YAAQ,gBAAgB,UAAU,MAAM,KAAK;AAAA,EAC/C;AAEA,SAAO,MAAM,GAAG,QAAQ,GAAG,IAAI,IAAI;AAAA,IACjC,GAAG;AAAA,IACH;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,aAKnB;AACD,QAAM,QAAQ,eAAe;AAC7B,MAAI,CAAC,OAAO;AAEV,WAAO,EAAE,SAAS,MAAM,MAAM,aAAa,WAAW,IAAI,OAAO,GAAG;AAAA,EACtE;AAEA,MAAI;AACF,UAAM,MAAM,MAAM,WAAW,kBAAkB;AAC/C,QAAI,CAAC,IAAI,IAAI;AAEX,aAAO,EAAE,SAAS,MAAM,MAAM,WAAW,WAAW,IAAI,OAAO,GAAG;AAAA,IACpE;AACA,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AAEN,WAAO,EAAE,SAAS,MAAM,MAAM,WAAW,WAAW,IAAI,OAAO,GAAG;AAAA,EACpE;AACF;AAEA,eAAsB,iBAAgC;AACpD,QAAM,QAAQ,eAAe;AAC7B,MAAI,CAAC,MAAO;AAEZ,MAAI;AACF,UAAM,WAAW,wBAAwB,EAAE,QAAQ,OAAO,CAAC;AAAA,EAC7D,QAAQ;AAAA,EAER;AACF;AAEA,eAAsB,kBAAkB,QAKtB;AAChB,QAAM,QAAQ,eAAe;AAC7B,MAAI,CAAC,MAAO;AAEZ,MAAI;AACF,UAAM,WAAW,cAAc;AAAA,MAC7B,QAAQ;AAAA,MACR,MAAM,KAAK,UAAU,MAAM;AAAA,IAC7B,CAAC;AAAA,EACH,QAAQ;AAAA,EAER;AACF;AAEA,eAAsB,WAA4D;AAChF,MAAI;AACF,UAAM,MAAM,MAAM,WAAW,mBAAmB,EAAE,QAAQ,OAAO,CAAC;AAClE,QAAI,CAAC,IAAI,GAAI,QAAO;AACpB,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,WAAO,KAAK;AAAA,EACd,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,iBAAyC;AAC7D,MAAI;AACF,UAAM,MAAM,MAAM,WAAW,yBAAyB,EAAE,QAAQ,OAAO,CAAC;AACxE,QAAI,CAAC,IAAI,GAAI,QAAO;AACpB,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,WAAO,KAAK;AAAA,EACd,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}