Engine is built per-invocation (not a package global) to keep source registration explicit and testable
ExampleSource is registered inline in buildReconEngine rather than via init() side-effect so Phases 10-16 have one obvious place to add real sources
Dedup runs on the caller side (per engine.go comment) — Phase 05 calls recon.Dedup after SweepAll
duration
completed
tasks
files-changed
~5m
2026-04-05
2
2
Phase 09 Plan 05: Recon CLI Command Tree Summary
Wired pkg/recon into the Cobra CLI with keyhunter recon full and keyhunter recon list, replacing the Phase 9 stub so the recon pipeline is demonstrable end-to-end on a fresh clone.
What Shipped
cmd/recon.go — new file declaring reconCmd, reconFullCmd, reconListCmd, and the buildReconEngine() factory. Flags --stealth (default false), --respect-robots (default true), and --query (default "") are registered on reconFullCmd. buildReconEngine constructs a fresh recon.Engine, registers recon.ExampleSource{}, and returns it.
recon full — calls Engine.SweepAll(ctx, Config{...}), pipes results through recon.Dedup, then prints a header line (recon: swept N sources, M findings (K after dedup)) followed by one line per deduped finding.
recon list — prints registered source names one per line (sorted by Engine.List).
cmd/stubs.go — var reconCmd stub removed; a comment points at cmd/recon.go. rootCmd.AddCommand(reconCmd) in cmd/root.go now resolves to the real declaration (same package).
Verification Run
$ go run . recon list
example
$ go run . recon full
recon: swept 1 sources, 2 findings (2 after dedup)
[recon:example] openai sk-examp...AAAA https://example.invalid/a
[recon:example] anthropic sk-ant-e...BBBB https://example.invalid/b
$ go run . recon full --stealth --query=test
recon: swept 1 sources, 2 findings (2 after dedup)
...
go build ./... clean. go test ./... green across all packages (cmd, pkg/recon, pkg/dorks, pkg/engine, etc.).
Deviations from Plan
Auto-fixed Issues
1. [Rule 3 - Blocker] Merged wave-1 dependencies into worktree
Found during: Task 2 build verification
Issue: The worktree branch was behind master and missing commits from plans 09-01, 09-02, 09-04 (pkg/recon/engine.go, source.go, example.go, limiter.go, robots.go). go build ./... failed with undefined: recon.Engine / recon.Config / recon.NewEngine / recon.ExampleSource.
Fix: Ran git merge master --no-edit --no-verify — fast-forward from 1eb86ca to c2137ed pulling in the four dependent plans' artifacts. No conflicts (my Task 1 edit to cmd/stubs.go and new cmd/recon.go were untouched by the merge).
Files modified: merge brought in pkg/recon/{engine,source,example,limiter,robots,engine_test,limiter_test,robots_test}.go, go.mod, go.sum, and the 09-01/02/04 SUMMARY files.
Commit: merge commit via fast-forward (no new hash)
Known Stubs
pkg/recon.ExampleSource — intentional per plan 09-01 / Phase 9 CONTEXT. It emits two deterministic fake findings (openai/anthropic with recon:example SourceType) so the CLI has visible output before Phases 10-16 land real sources. Will be superseded as Shodan/GitHub/Pastebin/etc. sources are added in Phases 10-16 via additional e.Register(...) calls in buildReconEngine.
Commits
86a6bb8 — feat(09-05): add recon full/list commands and remove stub
