pentool 0.2.5__tar.gz → 0.2.7__tar.gz

{pentool-0.2.5 → pentool-0.2.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pentool
-Version: 0.2.5
+Version: 0.2.7
 Summary: Modern Web Pentesting TUI - Professional security testing tool
 Author-email: Pentool Team <dev@pentool.pro>
 License: AGPL-3.0

{pentool-0.2.5 → pentool-0.2.7}/pentool/__init__.py

@@ -1,6 +1,6 @@
 """Pentool — professional web security testing toolkit with Textual TUI."""
 
-__version__ = "0.2.5"
+__version__ = "0.2.7"
 __author__ = "pentool"
 
 

{pentool-0.2.5 → pentool-0.2.7}/pentool/core/license.py

@@ -648,6 +648,7 @@ async def download_pro_package(key: str, machine_id: str) -> bool:
     plat = _current_platform()
     try:
         import aiohttp
+        build_id: str | None = None
         async with aiohttp.ClientSession(
             timeout=aiohttp.ClientTimeout(total=60)
         ) as session:
@@ -659,6 +660,13 @@ async def download_pro_package(key: str, machine_id: str) -> bool:
                 if resp.status != 200:
                     return False
                 archive_bytes = await resp.read()
+                # The Worker resolves the release/asset to serve this archive
+                # and knows its build_id at that point — it now echoes it back
+                # in this same response (see pentool-backend's /api/download
+                # handler) so we don't need a separate follow-up request just
+                # to learn it. Falls back to _fetch_pro_build_id() below if
+                # an older Worker deploy doesn't send the header yet.
+                build_id = resp.headers.get("X-Pro-Build-Id")
 
             async with session.post(
                 f"{_LICENSE_API_BASE}/api/download",
@@ -685,12 +693,25 @@ async def download_pro_package(key: str, machine_id: str) -> bool:
         # check_and_update_pro_package() can tell "nothing changed" from "a
         # new build was published" without re-downloading the archive just
         # to compare it.
-        try:
-            build_id = await _fetch_pro_build_id(plat)
-            if build_id:
-                _write_pro_meta(build_id)
-        except Exception:
-            pass  # non-fatal — worst case, next check just re-downloads once more
+        #
+        # Writing this is what makes the extracted package "trusted" —
+        # is_pro_package_compatible() refuses to load it otherwise. Getting
+        # here means the archive already extracted successfully, so this
+        # must not silently no-op: if the Worker didn't send the header
+        # (old deploy) AND the fallback /api/pro/version call also fails
+        # (flaky network), fall back to recording the current FREE version
+        # with a synthetic build_id rather than leaving .build_meta.json
+        # unwritten — a fully-installed, working PRO package should never be
+        # stuck showing "doesn't record which version" just because one
+        # extra network round-trip hiccupped after the real work was done.
+        if not build_id:
+            try:
+                build_id = await _fetch_pro_build_id(plat)
+            except Exception:
+                build_id = None
+        if not build_id:
+            build_id = f"unknown:{time.time()}"
+        _write_pro_meta(build_id)
 
         return True
     except Exception:
@@ -771,15 +792,24 @@ async def check_and_update_pro_package() -> "ProSyncResult":
 
     meta = _read_pro_meta()
     local_build_id = meta.get("build_id", "")
-
-    if local_build_id == remote_build_id:
-        _compatible, warning = is_pro_package_compatible()
-        return ProSyncResult(updated=False, warning=warning)
+    _compatible, _warning = is_pro_package_compatible()
+
+    # Even if the build_id hasn't changed (no new release published since),
+    # a package already marked incompatible (e.g. free_version never got
+    # recorded, from before the /api/download build_id-header fix) must
+    # still be re-downloaded — otherwise this function forever reports the
+    # same "doesn't record which version" warning and never actually heals
+    # it, since download_pro_package() is only reached below when the
+    # build_id differs. A once-broken install with a matching build_id
+    # would never take that path without this check.
+    if local_build_id == remote_build_id and _compatible:
+        return ProSyncResult(updated=False, warning="")
 
     updated = await download_pro_package(info.license_key, info.machine_id)
     if updated:
         return ProSyncResult(updated=True, warning="")
 
-    # Download of the newer build failed — warn if what's left on disk is stale.
+    # Download of the newer/repaired build failed — warn if what's left on
+    # disk is stale.
     _compatible, warning = is_pro_package_compatible()
     return ProSyncResult(updated=False, warning=warning)

{pentool-0.2.5 → pentool-0.2.7}/pentool/tui/app.py

@@ -681,7 +681,7 @@ class PentoolApp(App):
             pass
 
     def action_repeater_send(self) -> None:
-        """Ctrl+Space / ctrl-at — отправить запрос в Repeater независимо от глубины фокуса."""
+        """Ctrl+Space / ctrl-at — send the request to Repeater regardless of focus depth."""
         if self._active_module != "repeater":
             return
         try:
@@ -725,8 +725,8 @@ class PentoolApp(App):
                 lic = get_session_license()
                 if not (lic.valid and lic.has_feature("scanner_pro")):
                     self.notify(
-                        "🔒 Scanner — платная функция.\n"
-                        "Активируйте: pentool license trial",
+                        "🔒 Scanner — paid feature.\n"
+                        "Activate: pentool license trial",
                         severity="warning",
                         timeout=5,
                     )
@@ -751,7 +751,7 @@ class PentoolApp(App):
         return self._proxy_api
 
     def flash(self, message: str, severity: str = "information", timeout: float = 2.5) -> None:
-        """Краткое сообщение справа в строке модулей (tooltip2)."""
+        """Short message on the right side of the module bar (tooltip2)."""
         try:
             self.query_one("#module-tabs", ModuleTabs).flash(message, severity, timeout)
         except Exception:
@@ -810,7 +810,7 @@ class PentoolApp(App):
                 # ProjectManager._do_switch) — the other screens may still be
                 # reloading, but that's independent of Proxy.
                 self.notify(
-                    "Проект ещё открывается — подождите пару секунд перед запуском Proxy",
+                    "Project is still opening — wait a couple of seconds before starting Proxy",
                     severity="warning",
                     timeout=4,
                 )

{pentool-0.2.5 → pentool-0.2.7}/pentool/tui/screens/proxy/screen.py

@@ -1860,7 +1860,6 @@ class ProxyScreen(RequestContextMenuMixin, AppMixin, Widget):
             ("send_repeater",  "Send to Repeater"),
             ("send_intruder",  "Send to Intruder"),
             ("send_scanner",   "Send to Scanner"),
-            ("send_target",    "Send to Target"),
             ("-", ""),
             ("mark_req", "Mark color"),
             ("edit_comment", "View/Edit Comment"),
@@ -1923,8 +1922,6 @@ class ProxyScreen(RequestContextMenuMixin, AppMixin, Widget):
             if host:
                 from pentool.tui.messages import SendHostToScanner
                 self.app.post_message(SendHostToScanner(host))
-        elif action == "send_target":
-            self._send_to_target()
         elif action == "mark_req":
             self._mark_dialog()
         elif action == "edit_comment":
@@ -1990,27 +1987,6 @@ class ProxyScreen(RequestContextMenuMixin, AppMixin, Widget):
     def _sync_target_host_scope(self, host: str, in_scope: bool) -> None:
         self.app.post_message(SyncScopeToTarget(host, in_scope))  # type: ignore[attr-defined]
 
-    def _send_to_target(self) -> None:
-        if self._selected_req_id is None:
-            return
-        self.run_worker(self._do_send_to_target())
-
-    async def _do_send_to_target(self) -> None:
-        if self._proxy_service is None or not self._proxy_service.is_storage_ready() or self._selected_req_id is None:
-            return
-        entry = await self._proxy_service.get_full_entry(self._selected_req_id)
-        if entry is None:
-            return
-        from pentool.utils.parser import ParsedRequest
-        parsed = ParsedRequest(
-            method=entry.get("method", "GET"),
-            url=entry.get("url", ""),
-            headers=entry.get("request_headers") or {},
-            body=entry.get("request_body", "") or "",
-        )
-        self.app.post_message(SendToTarget(parsed))
-        self.app.notify("Added to Target", severity="information", timeout=2)
-
     # ── Colors available for marking requests ─────────────────────────────────
 
     _COLOR_OPTIONS: list[tuple[str, str]] = [

{pentool-0.2.5 → pentool-0.2.7}/pentool.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pentool
-Version: 0.2.5
+Version: 0.2.7
 Summary: Modern Web Pentesting TUI - Professional security testing tool
 Author-email: Pentool Team <dev@pentool.pro>
 License: AGPL-3.0

{pentool-0.2.5 → pentool-0.2.7}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "pentool"
-version = "0.2.5"
+version = "0.2.7"
 description = "Modern Web Pentesting TUI - Professional security testing tool"
 authors = [
     {name = "Pentool Team", email = "dev@pentool.pro"}