5 files changed, 166 insertions, 0 deletions
diff --git a/internal/client/moon.go b/internal/client/moon.go
new file mode 100644
index 0000000..daef57e
--- /dev/null
+++ b/internal/client/moon.go
@@ -0,0 +1,57 @@
+package client
+
+import (
+	"encoding/json"
+	"fmt"
+	"net/url"
+
+	"git.db.org.ai/dborg/internal/models"
+)
+
+func (c *Client) SearchMoonLogs(params *models.MoonParams) (*models.MoonResponse, error) {
+	queryParams := url.Values{}
+	queryParams.Add("query", params.Query)
+
+	if params.Filename != "" {
+		queryParams.Add("filename", params.Filename)
+	}
+	if params.MaxHits > 0 && params.MaxHits != 10 {
+		queryParams.Add("max_hits", fmt.Sprintf("%d", params.MaxHits))
+	}
+	if params.SortBy != "" {
+		queryParams.Add("sort_by", params.SortBy)
+	}
+	if params.IngestStartDate != "" {
+		queryParams.Add("ingest_start_date", params.IngestStartDate)
+	}
+	if params.IngestEndDate != "" {
+		queryParams.Add("ingest_end_date", params.IngestEndDate)
+	}
+	if params.PostedStartDate != "" {
+		queryParams.Add("posted_start_date", params.PostedStartDate)
+	}
+	if params.PostedEndDate != "" {
+		queryParams.Add("posted_end_date", params.PostedEndDate)
+	}
+	if params.Format != "" && params.Format != "json" {
+		queryParams.Add("format", params.Format)
+	}
+
+	data, err := c.Get("/moon/search", queryParams)
+	if err != nil {
+		return nil, err
+	}
+
+	if params.Format != "" && params.Format != "json" {
+		return &models.MoonResponse{
+			Message: string(data),
+		}, nil
+	}
+
+	var response models.MoonResponse
+	if err := json.Unmarshal(data, &response); err != nil {
+		return nil, fmt.Errorf("failed to parse moon logs response: %w", err)
+	}
+
+	return &response, nil
+}
diff --git a/internal/client/sl.go b/internal/client/sl.go
index c8754cf..e67bee1 100644
--- a/internal/client/sl.go
+++ b/internal/client/sl.go
@@ -11,6 +11,9 @@ func (c *Client) SearchStealerLogs(params *models.SLParams) (*models.SLResponse,
 	queryParams := url.Values{}
 	queryParams.Add("query", params.Query)
 
+	if params.Filename != "" {
+		queryParams.Add("filename", params.Filename)
+	}
 	if params.MaxHits > 0 && params.MaxHits != 10 {
 		queryParams.Add("max_hits", fmt.Sprintf("%d", params.MaxHits))
 	}
diff --git a/internal/formatter/moon.go b/internal/formatter/moon.go
new file mode 100644
index 0000000..e3930c7
--- /dev/null
+++ b/internal/formatter/moon.go
@@ -0,0 +1,85 @@
+package formatter
+
+import (
+	"encoding/json"
+	"fmt"
+	"strings"
+
+	"git.db.org.ai/dborg/internal/models"
+)
+
+func FormatMoonResults(resp *models.MoonResponse, asJSON bool) (string, error) {
+	if asJSON {
+		data, err := json.MarshalIndent(resp.Results, "", "  ")
+		if err != nil {
+			return "", fmt.Errorf("failed to marshal JSON: %w", err)
+		}
+		return string(data), nil
+	}
+
+	var sb strings.Builder
+
+	if resp.Results == nil {
+		sb.WriteString(fmt.Sprintf("\n%s\n\n", Gray("No results found")))
+		return sb.String(), nil
+	}
+
+	resultsMap, ok := resp.Results.(map[string]interface{})
+	if !ok {
+		resultsJSON, err := json.MarshalIndent(resp.Results, "", "  ")
+		if err != nil {
+			return "", fmt.Errorf("failed to format results: %w", err)
+		}
+		return string(resultsJSON), nil
+	}
+
+	hits, ok := resultsMap["hits"].([]interface{})
+	if !ok || len(hits) == 0 {
+		sb.WriteString(fmt.Sprintf("\n%s\n\n", Gray("No results found")))
+		return sb.String(), nil
+	}
+
+	numHits, _ := resultsMap["num_hits"].(float64)
+	elapsed, _ := resultsMap["elapsed_time_micros"].(float64)
+
+	sb.WriteString(fmt.Sprintf("%s %s %s\n",
+		Cyan("Found"),
+		Bold(Yellow(fmt.Sprintf("%d", int(numHits)))),
+		Cyan(fmt.Sprintf("moon log entries (%.2fms)", elapsed/1000))))
+	sb.WriteString("\n")
+
+	for i, hit := range hits {
+		hitMap, ok := hit.(map[string]interface{})
+		if !ok {
+			continue
+		}
+
+		if i > 0 {
+			sb.WriteString(Dim("───"))
+			sb.WriteString("\n")
+		}
+
+		username, _ := hitMap["username"].(string)
+		password, _ := hitMap["password"].(string)
+		url, _ := hitMap["url"].(string)
+		filename, _ := hitMap["filename"].(string)
+
+		sb.WriteString(fmt.Sprintf("%s %s\n", Dim("Username:"), Bold(username)))
+
+		if password != "" {
+			sb.WriteString(fmt.Sprintf("%s %s\n", Dim("Password:"), Yellow(password)))
+		}
+
+		if url != "" {
+			sb.WriteString(fmt.Sprintf("%s %s\n", Dim("URL:"), Blue(url)))
+		}
+
+		if filename != "" {
+			sb.WriteString(fmt.Sprintf("%s %s\n", Dim("Source:"), Magenta(filename)))
+		}
+
+		sb.WriteString("\n")
+	}
+
+	return sb.String(), nil
+}
diff --git a/internal/models/moon.go b/internal/models/moon.go
new file mode 100644
index 0000000..bedfc1c
--- /dev/null
+++ b/internal/models/moon.go
@@ -0,0 +1,20 @@
+package models
+
+type MoonParams struct {
+	Query           string `json:"query"`
+	Filename        string `json:"filename,omitempty"`
+	MaxHits         int    `json:"max_hits,omitempty"`
+	SortBy          string `json:"sort_by,omitempty"`
+	IngestStartDate string `json:"ingest_start_date,omitempty"`
+	IngestEndDate   string `json:"ingest_end_date,omitempty"`
+	PostedStartDate string `json:"posted_start_date,omitempty"`
+	PostedEndDate   string `json:"posted_end_date,omitempty"`
+	Format          string `json:"format,omitempty"`
+}
+
+type MoonResponse struct {
+	MaxHits int         `json:"max_hits"`
+	Results interface{} `json:"results"`
+	Message string      `json:"message,omitempty"`
+	Error   string      `json:"error,omitempty"`
+}
diff --git a/internal/models/sl.go b/internal/models/sl.go
index d55279f..f520450 100644
--- a/internal/models/sl.go
+++ b/internal/models/sl.go
@@ -2,6 +2,7 @@ package models
 
 type SLParams struct {
 	Query           string `json:"query"`
+	Filename        string `json:"filename,omitempty"`
 	MaxHits         int    `json:"max_hits,omitempty"`
 	SortBy          string `json:"sort_by,omitempty"`
 	IngestStartDate string `json:"ingest_start_date,omitempty"`