@kinosec/cli 0.1.3 → 0.2.0

package/dist/cli.js

@@ -7771,6 +7771,7 @@ var KinoSecClient = class {
   api;
   assets;
   scans;
+  schedules;
   findings;
   reports;
   tokens;
@@ -7781,7 +7782,7 @@ var KinoSecClient = class {
     this.api = distribution_default.create({
       prefixUrl: config.apiUrl,
       headers: {
-        "user-agent": config.userAgent ?? `kns/0.1.0 (${process.platform})`
+        "user-agent": config.userAgent ?? `kinosec/0.1.0 (${process.platform})`
       },
       hooks: {
         beforeRequest: [
@@ -7819,6 +7820,7 @@ var KinoSecClient = class {
     });
     this.assets = new AssetsResource(this.api);
     this.scans = new ScansResource(this.api);
+    this.schedules = new SchedulesResource(this.api);
     this.findings = new FindingsResource(this.api);
     this.reports = new ReportsResource(this.api);
     this.tokens = new TokensResource(this.api);
@@ -7868,6 +7870,33 @@ var ScansResource = class {
     return this.api.post(`v1/scans/${id}/cancel`, { json: {} }).json();
   }
 };
+var SchedulesResource = class {
+  constructor(api) {
+    this.api = api;
+  }
+  api;
+  async list(params = {}) {
+    return this.api.get("v1/scans/schedules", { searchParams: buildSearchParams(params) }).json();
+  }
+  async get(id) {
+    return this.api.get(`v1/scans/schedules/${id}`).json();
+  }
+  async create(params) {
+    return this.api.post("v1/scans/schedules", { json: params }).json();
+  }
+  async update(id, params) {
+    return this.api.patch(`v1/scans/schedules/${id}`, { json: params }).json();
+  }
+  async delete(id) {
+    await this.api.delete(`v1/scans/schedules/${id}`);
+  }
+  async pause(id) {
+    return this.api.post(`v1/scans/schedules/${id}/pause`, { json: {} }).json();
+  }
+  async resume(id) {
+    return this.api.post(`v1/scans/schedules/${id}/resume`, { json: {} }).json();
+  }
+};
 var FindingsResource = class {
   constructor(api) {
     this.api = api;
@@ -8022,8 +8051,9 @@ function shouldUseJson() {
   return false;
 }
 
-// src/commands/auth.ts
-import { createInterface } from "readline";
+// src/lib/update-check.ts
+import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2 } from "fs";
+import { join as join2, dirname as dirname2 } from "path";
 
 // src/lib/config.ts
 import { existsSync, mkdirSync, readFileSync, writeFileSync, openSync, writeSync, closeSync, unlinkSync, constants } from "fs";
@@ -8097,17 +8127,92 @@ function deleteCredentials() {
   }
 }
 
+// src/lib/update-check.ts
+var CACHE_FILE = join2(configDir, "update-check.json");
+var CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
+var FETCH_TIMEOUT_MS = 3e3;
+var NPM_PACKAGE = "@kinosec/cli";
+var REGISTRY_URL = `https://registry.npmjs.org/${NPM_PACKAGE}/latest`;
+function isUpdateSuppressed() {
+  return !!(process.env.KINOSEC_NO_UPDATE_CHECK === "1" || process.env.CI || process.env.GITHUB_ACTIONS || process.env.GITLAB_CI || process.env.JENKINS_URL);
+}
+function isNewerVersion(current, latest) {
+  const c = current.split(".").map(Number);
+  const l = latest.split(".").map(Number);
+  for (let i = 0; i < 3; i++) {
+    if ((l[i] ?? 0) > (c[i] ?? 0)) return true;
+    if ((l[i] ?? 0) < (c[i] ?? 0)) return false;
+  }
+  return false;
+}
+function readCache() {
+  if (!existsSync2(CACHE_FILE)) return null;
+  try {
+    const data = JSON.parse(readFileSync2(CACHE_FILE, "utf-8"));
+    const age = Date.now() - new Date(data.checked_at).getTime();
+    if (age > CACHE_TTL_MS) return null;
+    return data;
+  } catch {
+    return null;
+  }
+}
+function writeCache(latest) {
+  try {
+    const dir = dirname2(CACHE_FILE);
+    if (!existsSync2(dir)) mkdirSync2(dir, { recursive: true });
+    writeFileSync2(
+      CACHE_FILE,
+      JSON.stringify({ latest, checked_at: (/* @__PURE__ */ new Date()).toISOString() }, null, 2) + "\n",
+      "utf-8"
+    );
+  } catch {
+  }
+}
+async function fetchLatestVersion() {
+  try {
+    const response = await fetch(REGISTRY_URL, {
+      signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+    });
+    if (!response.ok) return null;
+    const data = await response.json();
+    return data.version ?? null;
+  } catch {
+    return null;
+  }
+}
+async function checkForUpdate(currentVersion) {
+  if (isUpdateSuppressed()) return;
+  let latest = null;
+  const cached = readCache();
+  if (cached) {
+    latest = cached.latest;
+  } else {
+    latest = await fetchLatestVersion();
+    if (latest) writeCache(latest);
+  }
+  if (latest && isNewerVersion(currentVersion, latest)) {
+    console.error(
+      `
+A new version of KinoSec CLI is available: ${latest} (current: ${currentVersion})
+Update: npm update -g @kinosec/cli`
+    );
+  }
+}
+
+// src/commands/auth.ts
+import { createInterface } from "readline";
+
 // src/lib/auth.ts
 var DEFAULT_API_URL = "https://api.kinosec.ai/v1";
 function resolveToken(options) {
   const token = options.token ?? process.env.KINOSEC_TOKEN ?? readCredentials()?.token;
   if (!token) {
-    console.error('Not authenticated. Run "kns auth login" or set KINOSEC_TOKEN.');
+    console.error('Not authenticated. Run "kinosec auth login" or set KINOSEC_TOKEN.');
     process.exit(77);
   }
   if (options.token) {
     console.error(
-      "Warning: passing a token via --token exposes it in shell history. Prefer: kns auth login (interactive), KINOSEC_TOKEN env var, or stdin pipe."
+      "Warning: passing a token via --token exposes it in shell history. Prefer: kinosec auth login (interactive), KINOSEC_TOKEN env var, or stdin pipe."
     );
   }
   const apiUrl = options.apiUrl ?? process.env.KINOSEC_API_URL ?? getConfigValue("api_url") ?? DEFAULT_API_URL;
@@ -8132,14 +8237,14 @@ function registerAuthCommand(program3) {
   const auth = program3.command("auth").description("Manage authentication");
   auth.command("login").description("Authenticate with a KinoSec API token").addHelpText("after", `
 Examples:
-  $ kns auth login                    # interactive prompt
-  $ kns auth login --token kns_live_pat_...
-  $ echo $TOKEN | kns auth login      # pipe from stdin`).action(async () => {
+  $ kinosec auth login                    # interactive prompt
+  $ kinosec auth login --token kns_live_pat_...
+  $ echo $TOKEN | kinosec auth login      # pipe from stdin`).action(async () => {
     try {
       let token = program3.opts().token;
       if (token) {
         console.error(
-          "Warning: passing a token via --token exposes it in shell history. Prefer: kns auth login (interactive), KINOSEC_TOKEN env var, or stdin pipe."
+          "Warning: passing a token via --token exposes it in shell history. Prefer: kinosec auth login (interactive), KINOSEC_TOKEN env var, or stdin pipe."
         );
       }
       if (!token) {
@@ -8178,11 +8283,11 @@ Examples:
   });
   auth.command("status").description("Show current authentication status").addHelpText("after", `
 Examples:
-  $ kns auth status`).action(async () => {
+  $ kinosec auth status`).action(async () => {
     try {
       const creds = readCredentials();
       if (!creds) {
-        console.error('Not authenticated. Run "kns auth login" or set KINOSEC_TOKEN.');
+        console.error('Not authenticated. Run "kinosec auth login" or set KINOSEC_TOKEN.');
         process.exit(77);
       }
       const apiUrl = program3.opts().apiUrl ?? getConfigValue("api_url") ?? DEFAULT_API_URL;
@@ -8211,7 +8316,7 @@ Examples:
   });
   auth.command("logout").description("Remove stored credentials").addHelpText("after", `
 Examples:
-  $ kns auth logout`).action(() => {
+  $ kinosec auth logout`).action(() => {
     deleteCredentials();
     printSuccess("Logged out. Credentials removed.");
   });
@@ -8223,8 +8328,8 @@ function registerConfigCommand(program3) {
   const config = program3.command("config").description("Manage CLI configuration");
   config.command("set").description("Set a config value").argument("<key>", `Config key (${VALID_KEYS.join(", ")})`).argument("<value>", "Config value").addHelpText("after", `
 Examples:
-  $ kns config set api_url https://custom.api.url/v1
-  $ kns config set output json`).action((key, value) => {
+  $ kinosec config set api_url https://custom.api.url/v1
+  $ kinosec config set output json`).action((key, value) => {
     if (!VALID_KEYS.includes(key)) {
       console.error(`Invalid config key "${key}". Valid keys: ${VALID_KEYS.join(", ")}`);
       process.exit(2);
@@ -8234,7 +8339,7 @@ Examples:
   });
   config.command("get").description("Get a config value").argument("<key>", "Config key").addHelpText("after", `
 Examples:
-  $ kns config get api_url`).action((key) => {
+  $ kinosec config get api_url`).action((key) => {
     const value = getConfigValue(key);
     if (value === void 0) {
       console.error(`Config key "${key}" is not set.`);
@@ -8244,7 +8349,7 @@ Examples:
   });
   config.command("list").description("List all config values").addHelpText("after", `
 Examples:
-  $ kns config list`).action(() => {
+  $ kinosec config list`).action(() => {
     const cfg = readConfig();
     const opts = program3.opts();
     if (opts.json || opts.output === "json") {
@@ -8265,8 +8370,8 @@ Examples:
 function registerMeCommand(program3) {
   program3.command("me").description("Show authenticated user info").addHelpText("after", `
 Examples:
-  $ kns me
-  $ kns me --json`).action(async () => {
+  $ kinosec me
+  $ kinosec me --json`).action(async () => {
     try {
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -9713,13 +9818,278 @@ function ora(options) {
 }
 
 // src/commands/scan.ts
+var import_picocolors4 = __toESM(require_picocolors(), 1);
+
+// src/commands/schedule.ts
 var import_picocolors3 = __toESM(require_picocolors(), 1);
+
+// src/lib/confirm.ts
+import { createInterface as createInterface2 } from "readline";
+async function confirmDestructive(message, yes) {
+  if (yes) return;
+  if (!isTTY()) {
+    console.error("Use --yes to confirm destructive operations in non-interactive mode.");
+    process.exit(2);
+  }
+  const rl = createInterface2({ input: process.stdin, output: process.stderr });
+  const answer = await new Promise((resolve) => {
+    rl.question(`${message} (y/N) `, resolve);
+  });
+  rl.close();
+  if (answer.toLowerCase() !== "y") {
+    console.log("Cancelled.");
+    process.exit(0);
+  }
+}
+
+// src/commands/schedule.ts
+var VALID_PATTERNS = ["once", "daily", "weekly", "biweekly", "monthly"];
+var VALID_MODES = ["quick", "full"];
+var DAY_NAMES = ["Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"];
+function extractTime(scheduledAt) {
+  if (!scheduledAt) return "\u2014";
+  const d = new Date(scheduledAt);
+  return d.toLocaleTimeString([], { hour: "2-digit", minute: "2-digit", hour12: false });
+}
+function formatPattern(s) {
+  const time = extractTime(s.scheduled_at);
+  switch (s.recurrence_pattern) {
+    case "once":
+      return `Once at ${time}`;
+    case "daily":
+      return `Daily at ${time}`;
+    case "weekly":
+      return `Weekly ${s.day_of_week !== null ? DAY_NAMES[s.day_of_week] : ""} at ${time}`;
+    case "biweekly":
+      return `Every 2 weeks ${s.day_of_week !== null ? DAY_NAMES[s.day_of_week] : ""} at ${time}`;
+    case "monthly":
+      return `Monthly day ${s.day_of_month ?? "?"} at ${time}`;
+    default:
+      return s.recurrence_pattern;
+  }
+}
+function registerScheduleCommand(scanCmd) {
+  const schedule = scanCmd.command("schedule").description("Manage scheduled scans (continuous protection)");
+  schedule.command("list").description("List scheduled scans").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").option("--status <status>", "Filter: active, paused, or all", "all").addHelpText("after", `
+Examples:
+  $ kinosec scan schedule list
+  $ kinosec scan schedule list --status active --json`).action(async (options) => {
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const result = await client.schedules.list({
+        limit: parseInt(options.limit, 10),
+        cursor: options.cursor,
+        status: options.status
+      });
+      if (opts.json || opts.output === "json") {
+        printJson(result);
+        return;
+      }
+      if (result.items.length === 0) {
+        console.log("No scheduled scans found.");
+        return;
+      }
+      printTable(
+        ["ID", "Target", "Mode", "Schedule", "Status", "Next Run"],
+        result.items.map((s) => [
+          s.id,
+          truncate(s.domain_or_ip, 25),
+          s.scan_mode,
+          formatPattern(s),
+          s.is_active ? import_picocolors3.default.green("active") : import_picocolors3.default.yellow("paused"),
+          s.next_scheduled_run ? new Date(s.next_scheduled_run).toLocaleString() : "\u2014"
+        ])
+      );
+      if (result.next_cursor) {
+        console.log(import_picocolors3.default.dim(`
+More results available. Use --cursor ${result.next_cursor}`));
+      }
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("get").description("Get schedule details").argument("<id>", "Schedule ID").addHelpText("after", `
+Examples:
+  $ kinosec scan schedule get abc123
+  $ kinosec scan schedule get abc123 --json`).action(async (id) => {
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const s = await client.schedules.get(id);
+      if (opts.json || opts.output === "json") {
+        printJson(s);
+        return;
+      }
+      printTable(
+        ["Field", "Value"],
+        [
+          ["ID", s.id],
+          ["Target", s.domain_or_ip],
+          ["Name", s.name],
+          ["Mode", s.scan_mode],
+          ["Schedule", formatPattern(s)],
+          ["Timezone", s.timezone],
+          ["Status", s.is_active ? "Active" : "Paused"],
+          ["Next Run", s.next_scheduled_run ?? "\u2014"],
+          ["Last Run", s.last_scheduled_run ?? "Never"],
+          ["Created", s.created_at]
+        ]
+      );
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("create").description("Create a scheduled scan").requiredOption("--asset <id>", "Asset ID to scan").requiredOption("--pattern <pattern>", "Recurrence: once, daily, weekly, biweekly, monthly").option("--name <name>", "Schedule name").option("--mode <mode>", "Scan mode: quick or full", "full").option("--time <HH:MM>", "Time of day (24h format)", "09:00").option("--day-of-week <0-6>", "Day of week (0=Sun..6=Sat) for weekly/biweekly").option("--day-of-month <1-31>", "Day of month for monthly").option("--timezone <tz>", "Timezone (e.g. America/New_York)", Intl.DateTimeFormat().resolvedOptions().timeZone).addHelpText("after", `
+Examples:
+  $ kinosec scan schedule create --asset abc123 --pattern weekly --day-of-week 1 --time 09:00
+  $ kinosec scan schedule create --asset abc123 --pattern daily --mode quick --time 14:00
+  $ kinosec scan schedule create --asset abc123 --pattern monthly --day-of-month 15 --time 03:00 --timezone UTC`).action(async (options) => {
+    if (!VALID_PATTERNS.includes(options.pattern)) {
+      console.error(`Invalid pattern "${options.pattern}". Must be: ${VALID_PATTERNS.join(", ")}`);
+      process.exit(2);
+    }
+    if (!VALID_MODES.includes(options.mode)) {
+      console.error(`Invalid mode "${options.mode}". Must be: ${VALID_MODES.join(", ")}`);
+      process.exit(2);
+    }
+    if ((options.pattern === "weekly" || options.pattern === "biweekly") && options.dayOfWeek === void 0) {
+      console.error(`--day-of-week is required for ${options.pattern} schedules.`);
+      process.exit(2);
+    }
+    if (options.pattern === "monthly" && options.dayOfMonth === void 0) {
+      console.error("--day-of-month is required for monthly schedules.");
+      process.exit(2);
+    }
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const params = {
+        asset_id: options.domain_or_ip,
+        name: options.name ?? `${options.pattern} ${options.mode} scan`,
+        scan_mode: options.mode,
+        recurrence_pattern: options.pattern,
+        time_of_day: options.time,
+        timezone: options.timezone
+      };
+      if (options.dayOfWeek !== void 0) params.day_of_week = parseInt(options.dayOfWeek, 10);
+      if (options.dayOfMonth !== void 0) params.day_of_month = parseInt(options.dayOfMonth, 10);
+      const s = await client.schedules.create(params);
+      if (opts.json || opts.output === "json") {
+        printJson(s);
+        return;
+      }
+      printSuccess(`Schedule created: ${s.domain_or_ip}`);
+      console.log(`  ID: ${s.id}`);
+      console.log(`  Schedule: ${formatPattern(s)}`);
+      console.log(`  Next run: ${s.next_scheduled_run ?? "pending"}`);
+      console.log(`
+Manage: kinosec scan schedule get ${s.id}`);
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("update").description("Update a schedule").argument("<id>", "Schedule ID").option("--pattern <pattern>", "Recurrence: once, daily, weekly, biweekly, monthly").option("--name <name>", "Schedule name").option("--mode <mode>", "Scan mode: quick or full").option("--time <HH:MM>", "Time of day (24h format)").option("--day-of-week <0-6>", "Day of week (0=Sun..6=Sat)").option("--day-of-month <1-31>", "Day of month").option("--timezone <tz>", "Timezone").addHelpText("after", `
+Examples:
+  $ kinosec scan schedule update abc123 --pattern daily --time 14:00
+  $ kinosec scan schedule update abc123 --mode quick`).action(async (id, options) => {
+    const params = {};
+    if (options.pattern) params.recurrence_pattern = options.pattern;
+    if (options.name) params.name = options.name;
+    if (options.mode) params.scan_mode = options.mode;
+    if (options.time) params.time_of_day = options.time;
+    if (options.dayOfWeek !== void 0) params.day_of_week = parseInt(options.dayOfWeek, 10);
+    if (options.dayOfMonth !== void 0) params.day_of_month = parseInt(options.dayOfMonth, 10);
+    if (options.timezone) params.timezone = options.timezone;
+    if (Object.keys(params).length === 0) {
+      console.error("Provide at least one field to update.");
+      process.exit(2);
+    }
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const s = await client.schedules.update(id, params);
+      if (opts.json || opts.output === "json") {
+        printJson(s);
+        return;
+      }
+      printSuccess(`Schedule updated: ${s.domain_or_ip}`);
+      console.log(`  Schedule: ${formatPattern(s)}`);
+      console.log(`  Next run: ${s.next_scheduled_run ?? "pending"}`);
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("delete").description("Delete a schedule").argument("<id>", "Schedule ID").option("-y, --yes", "Skip confirmation prompt").addHelpText("after", `
+Examples:
+  $ kinosec scan schedule delete abc123
+  $ kinosec scan schedule delete abc123 --yes`).action(async (id, options) => {
+    try {
+      await confirmDestructive(`Delete schedule ${id}?`, Boolean(options.yes));
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      await client.schedules.delete(id);
+      if (opts.json || opts.output === "json") {
+        printJson({ deleted: true, id });
+        return;
+      }
+      printSuccess(`Schedule ${id} deleted.`);
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("pause").description("Pause a scheduled scan").argument("<id>", "Schedule ID").addHelpText("after", `
+Examples:
+  $ kinosec scan schedule pause abc123`).action(async (id) => {
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const result = await client.schedules.pause(id);
+      if (opts.json || opts.output === "json") {
+        printJson(result);
+        return;
+      }
+      printSuccess("Schedule paused.");
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("resume").description("Resume a paused schedule").argument("<id>", "Schedule ID").addHelpText("after", `
+Examples:
+  $ kinosec scan schedule resume abc123`).action(async (id) => {
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const result = await client.schedules.resume(id);
+      if (opts.json || opts.output === "json") {
+        printJson(result);
+        return;
+      }
+      printSuccess("Schedule resumed.");
+      if (result.next_scheduled_run) {
+        console.log(`  Next run: ${new Date(result.next_scheduled_run).toLocaleString()}`);
+      }
+    } catch (error) {
+      handleError(error);
+    }
+  });
+}
+
+// src/commands/scan.ts
 function registerScanCommand(program3) {
   const scan = program3.command("scan").description("Manage security scans");
+  registerScheduleCommand(scan);
   scan.command("list").description("List scans").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").addHelpText("after", `
 Examples:
-  $ kns scan list
-  $ kns scan list --limit 5 --json`).action(async (options) => {
+  $ kinosec scan list
+  $ kinosec scan list --limit 5 --json`).action(async (options) => {
     try {
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -9747,7 +10117,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors3.default.dim(`
+        console.log(import_picocolors4.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -9756,8 +10126,8 @@ More results available. Use --cursor ${result.next_cursor}`));
   });
   scan.command("get").description("Get scan details").argument("<id>", "Scan profile ID").addHelpText("after", `
 Examples:
-  $ kns scan get abc123
-  $ kns scan get abc123 --json`).action(async (id) => {
+  $ kinosec scan get abc123
+  $ kinosec scan get abc123 --json`).action(async (id) => {
     try {
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -9786,8 +10156,8 @@ Examples:
   });
   scan.command("create").description("Start a new scan").option("--asset <id>", "Asset ID to scan").option("--profile <id>", "Scan profile ID (alternative to --asset)").option("--mode <mode>", "Scan mode: quick or full", "quick").addHelpText("after", `
 Examples:
-  $ kns scan create --asset abc123 --mode quick
-  $ kns scan create --profile def456`).action(async (options) => {
+  $ kinosec scan create --asset abc123 --mode quick
+  $ kinosec scan create --profile def456`).action(async (options) => {
     if (!options.asset && !options.profile) {
       console.error("Provide --asset <id> or --profile <id>.");
       process.exit(2);
@@ -9797,7 +10167,7 @@ Examples:
     if (!uuidRe.test(idValue)) {
       console.error(`Invalid ID format: "${idValue}"`);
       console.error("IDs are UUIDs (e.g. 550e8400-e29b-41d4-a716-446655440000).");
-      console.error("Run kns asset list to find your asset ID.");
+      console.error("Run kinosec asset list to find your asset ID.");
       process.exit(2);
     }
     try {
@@ -9815,14 +10185,14 @@ Examples:
       console.log(`  Mode: ${result.scan_mode}`);
       console.log(`  Status: ${result.scan_status}`);
       console.log(`
-Watch progress: kns scan watch ${result.scan_profile_id}`);
+Watch progress: kinosec scan watch ${result.scan_profile_id}`);
     } catch (error) {
       handleError(error);
     }
   });
   scan.command("cancel").description("Cancel a running scan").argument("<id>", "Scan profile ID").addHelpText("after", `
 Examples:
-  $ kns scan cancel abc123`).action(async (id) => {
+  $ kinosec scan cancel abc123`).action(async (id) => {
     try {
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -9839,9 +10209,9 @@ Examples:
   });
   scan.command("watch").description("Watch scan progress in real-time").argument("<id>", "Scan profile ID").option("--timeout <seconds>", "Max time to watch", "1800").option("--interval <seconds>", "Poll interval", "5").addHelpText("after", `
 Examples:
-  $ kns scan watch abc123
-  $ kns scan watch abc123 --timeout 600
-  $ kns scan watch abc123 --json`).action(async (id, options) => {
+  $ kinosec scan watch abc123
+  $ kinosec scan watch abc123 --timeout 600
+  $ kinosec scan watch abc123 --json`).action(async (id, options) => {
     try {
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -9871,7 +10241,7 @@ Examples:
           process.stdout.write(JSON.stringify({ ...scanDetail, elapsed_seconds: elapsed }) + "\n");
         } else if (spinner) {
           if (activity && activity !== lastActivity && lastActivity) {
-            spinner.stopAndPersist({ symbol: import_picocolors3.default.green("\u2713"), text: lastActivity });
+            spinner.stopAndPersist({ symbol: import_picocolors4.default.green("\u2713"), text: lastActivity });
             spinner = ora().start();
           }
           lastActivity = activity || lastActivity;
@@ -9885,24 +10255,24 @@ Examples:
             break;
           }
           if (scanDetail.scan_status.includes("Failed")) {
-            console.log(import_picocolors3.default.red(`
+            console.log(import_picocolors4.default.red(`
 Scan failed: ${scanDetail.failure_reason || "unknown reason"}`));
             process.exit(1);
           }
           if (scanDetail.scan_status.includes("Stopped")) {
-            console.log(import_picocolors3.default.yellow("\nScan was cancelled."));
+            console.log(import_picocolors4.default.yellow("\nScan was cancelled."));
             break;
           }
-          console.log(import_picocolors3.default.green(`
+          console.log(import_picocolors4.default.green(`
 Scan completed: ${scanDetail.domain_or_ip}`));
-          console.log(`  View findings: kns finding list --scan ${id}`);
+          console.log(`  View findings: kinosec finding list --scan ${id}`);
           break;
         }
         if (Date.now() - startTime > timeoutMs) {
           cleanup();
           console.error(`
 Timeout: scan still running after ${options.timeout}s.`);
-          console.error(`Check status: kns scan get ${id}`);
+          console.error(`Check status: kinosec scan get ${id}`);
           process.exit(3);
         }
         await new Promise((resolve) => setTimeout(resolve, intervalMs));
@@ -9914,41 +10284,25 @@ Timeout: scan still running after ${options.timeout}s.`);
 }
 
 // src/commands/asset.ts
-var import_picocolors4 = __toESM(require_picocolors(), 1);
-
-// src/lib/confirm.ts
-import { createInterface as createInterface2 } from "readline";
-async function confirmDestructive(message, yes) {
-  if (yes) return;
-  if (!isTTY()) {
-    console.error("Use --yes to confirm destructive operations in non-interactive mode.");
-    process.exit(2);
-  }
-  const rl = createInterface2({ input: process.stdin, output: process.stderr });
-  const answer = await new Promise((resolve) => {
-    rl.question(`${message} (y/N) `, resolve);
-  });
-  rl.close();
-  if (answer.toLowerCase() !== "y") {
-    console.log("Cancelled.");
-    process.exit(0);
-  }
-}
-
-// src/commands/asset.ts
+var import_picocolors5 = __toESM(require_picocolors(), 1);
 function registerAssetCommand(program3) {
   const asset = program3.command("asset").description("Manage assets");
-  asset.command("list").description("List assets").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").addHelpText("after", `
+  asset.command("list").description("List assets").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").option("--search <term>", "Filter by asset value (substring match)").option("--status <status>", "Filter by status (verified, unverified)").option("--type <type>", "Filter by type (domain, subdomain, ip)").addHelpText("after", `
 Examples:
-  $ kns asset list
-  $ kns asset list --limit 50 --json`).action(async (options) => {
+  $ kinosec asset list
+  $ kinosec asset list --search example.com
+  $ kinosec asset list --type subdomain --status verified
+  $ kinosec asset list --limit 50 --json`).action(async (options) => {
     try {
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
       const client = new KinoSecClient({ apiUrl, token });
       const result = await client.assets.list({
         limit: parseInt(options.limit, 10),
-        cursor: options.cursor
+        cursor: options.cursor,
+        search: options.search,
+        status: options.status,
+        type: options.type
       });
       if (opts.json || opts.output === "json") {
         printJson(result);
@@ -9969,7 +10323,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors4.default.dim(`
+        console.log(import_picocolors5.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -9978,8 +10332,8 @@ More results available. Use --cursor ${result.next_cursor}`));
   });
   asset.command("get").description("Get asset details").argument("<id>", "Asset ID").addHelpText("after", `
 Examples:
-  $ kns asset get abc123
-  $ kns asset get abc123 --json`).action(async (id) => {
+  $ kinosec asset get abc123
+  $ kinosec asset get abc123 --json`).action(async (id) => {
     try {
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -10007,8 +10361,8 @@ Examples:
   });
   asset.command("create").description("Create a new asset").requiredOption("--type <type>", "Asset type (domain, subdomain, ip)").requiredOption("--value <value>", "Asset value (e.g. example.com)").requiredOption("--verify-method <method>", "Verification method: dns or file").option("--parent <domain>", "Parent domain (for subdomains)").addHelpText("after", `
 Examples:
-  $ kns asset create --type domain --value example.com --verify-method dns
-  $ kns asset create --type subdomain --value api.example.com --verify-method file --parent example.com`).action(async (options) => {
+  $ kinosec asset create --type domain --value example.com --verify-method dns
+  $ kinosec asset create --type subdomain --value api.example.com --verify-method file --parent example.com`).action(async (options) => {
     try {
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -10028,15 +10382,15 @@ Examples:
       console.log(`  Type: ${result.asset_type}`);
       console.log(`  Status: ${result.verification_status}`);
       console.log(`
-Verify: kns asset verify ${result.id}`);
+Verify: kinosec asset verify ${result.id}`);
     } catch (error) {
       handleError(error);
     }
   });
   asset.command("delete").description("Delete an asset").argument("<id>", "Asset ID").option("-y, --yes", "Skip confirmation prompt").addHelpText("after", `
 Examples:
-  $ kns asset delete abc123
-  $ kns asset delete abc123 --yes`).action(async (id, options) => {
+  $ kinosec asset delete abc123
+  $ kinosec asset delete abc123 --yes`).action(async (id, options) => {
     try {
       await confirmDestructive(`Delete asset ${id}?`, Boolean(options.yes));
       const opts = program3.opts();
@@ -10054,8 +10408,8 @@ Examples:
   });
   asset.command("verify").description("Trigger asset verification").argument("<id>", "Asset ID").addHelpText("after", `
 Examples:
-  $ kns asset verify abc123
-  $ kns asset verify abc123 --json`).action(async (id) => {
+  $ kinosec asset verify abc123
+  $ kinosec asset verify abc123 --json`).action(async (id) => {
     try {
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -10080,20 +10434,20 @@ Examples:
 }
 
 // src/commands/finding.ts
-var import_picocolors5 = __toESM(require_picocolors(), 1);
+var import_picocolors6 = __toESM(require_picocolors(), 1);
 function severityColor(level) {
   if (!isTTY()) return level;
   switch (level.toLowerCase()) {
     case "critical":
-      return import_picocolors5.default.red(import_picocolors5.default.bold(level));
+      return import_picocolors6.default.red(import_picocolors6.default.bold(level));
     case "high":
-      return import_picocolors5.default.red(level);
+      return import_picocolors6.default.red(level);
     case "medium":
-      return import_picocolors5.default.yellow(level);
+      return import_picocolors6.default.yellow(level);
     case "low":
-      return import_picocolors5.default.blue(level);
+      return import_picocolors6.default.blue(level);
     case "info":
-      return import_picocolors5.default.dim(level);
+      return import_picocolors6.default.dim(level);
     default:
       return level;
   }
@@ -10103,8 +10457,8 @@ function registerFindingCommand(program3) {
   const finding = program3.command("finding").description("Manage findings");
   finding.command("list").description("List findings").option("--scan <id>", "Filter by scan profile ID").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").addHelpText("after", `
 Examples:
-  $ kns finding list --scan abc123
-  $ kns finding list --limit 50 --json`).action(async (options) => {
+  $ kinosec finding list --scan abc123
+  $ kinosec finding list --limit 50 --json`).action(async (options) => {
     try {
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -10133,7 +10487,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors5.default.dim(`
+        console.log(import_picocolors6.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -10142,8 +10496,8 @@ More results available. Use --cursor ${result.next_cursor}`));
   });
   finding.command("get").description("Get finding details").argument("<id>", "Finding ID").addHelpText("after", `
 Examples:
-  $ kns finding get abc123
-  $ kns finding get abc123 --json`).action(async (id) => {
+  $ kinosec finding get abc123
+  $ kinosec finding get abc123 --json`).action(async (id) => {
     try {
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -10173,8 +10527,8 @@ Examples:
   });
   finding.command("update").description("Update finding status").argument("<id>", "Finding ID").requiredOption("--status <status>", "New status: open, fixed, false_positive, investigating, wont_fix").addHelpText("after", `
 Examples:
-  $ kns finding update abc123 --status false_positive
-  $ kns finding update abc123 --status fixed`).action(async (id, options) => {
+  $ kinosec finding update abc123 --status false_positive
+  $ kinosec finding update abc123 --status fixed`).action(async (id, options) => {
     if (!VALID_STATUSES.includes(options.status)) {
       console.error(`Invalid status "${options.status}". Valid: ${VALID_STATUSES.join(", ")}`);
       process.exit(2);
@@ -10197,8 +10551,8 @@ Examples:
   });
   finding.command("retest").description("Trigger a retest for a finding").argument("<id>", "Finding ID").addHelpText("after", `
 Examples:
-  $ kns finding retest abc123
-  $ kns finding retest abc123 --json`).action(async (id) => {
+  $ kinosec finding retest abc123
+  $ kinosec finding retest abc123 --json`).action(async (id) => {
     try {
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -10218,7 +10572,7 @@ Examples:
 }
 
 // src/commands/report.ts
-var import_picocolors6 = __toESM(require_picocolors(), 1);
+var import_picocolors7 = __toESM(require_picocolors(), 1);
 function renderMarkdown(data) {
   const { scan, findings } = data;
   const lines = [];
@@ -10266,8 +10620,8 @@ function registerReportCommand(program3) {
   const report = program3.command("report").description("Manage reports");
   report.command("list").description("List reports").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").addHelpText("after", `
 Examples:
-  $ kns report list
-  $ kns report list --limit 10 --json`).action(async (options) => {
+  $ kinosec report list
+  $ kinosec report list --limit 10 --json`).action(async (options) => {
     try {
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -10297,7 +10651,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors6.default.dim(`
+        console.log(import_picocolors7.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -10306,8 +10660,8 @@ More results available. Use --cursor ${result.next_cursor}`));
   });
   report.command("get").description("Get report details").argument("<id>", "Report ID").addHelpText("after", `
 Examples:
-  $ kns report get abc123
-  $ kns report get abc123 --json`).action(async (id) => {
+  $ kinosec report get abc123
+  $ kinosec report get abc123 --json`).action(async (id) => {
     try {
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -10341,8 +10695,8 @@ Examples:
   });
   report.command("export").description("Export a scan report").requiredOption("--scan <id>", "Scan report ID").option("--format <format>", "Export format: json or markdown", "json").addHelpText("after", `
 Examples:
-  $ kns report export --scan abc123 --format json > report.json
-  $ kns report export --scan abc123 --format markdown > report.md`).action(async (options) => {
+  $ kinosec report export --scan abc123 --format json > report.json
+  $ kinosec report export --scan abc123 --format markdown > report.md`).action(async (options) => {
     const validFormats = ["json", "markdown"];
     if (!validFormats.includes(options.format)) {
       console.error(`Invalid format "${options.format}". Valid: ${validFormats.join(", ")}`);
@@ -10368,13 +10722,13 @@ Examples:
 }
 
 // src/commands/token.ts
-var import_picocolors7 = __toESM(require_picocolors(), 1);
+var import_picocolors8 = __toESM(require_picocolors(), 1);
 function registerTokenCommand(program3) {
   const token = program3.command("token").description("Manage API tokens");
   token.command("list").description("List API tokens").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").addHelpText("after", `
 Examples:
-  $ kns token list
-  $ kns token list --json`).action(async (options) => {
+  $ kinosec token list
+  $ kinosec token list --json`).action(async (options) => {
     try {
       const opts = program3.opts();
       const { token: authToken, apiUrl } = resolveToken(opts);
@@ -10403,7 +10757,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors7.default.dim(`
+        console.log(import_picocolors8.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -10412,8 +10766,8 @@ More results available. Use --cursor ${result.next_cursor}`));
   });
   token.command("create").description("Create a new API token").requiredOption("--name <name>", "Token name").requiredOption("--scopes <scopes>", "Comma-separated scopes (e.g. assets:read,scans:create)").option("--expires <days>", "Days until expiry", "90").addHelpText("after", `
 Examples:
-  $ kns token create --name "CI" --scopes assets:read,scans:create
-  $ kns token create --name "Full" --scopes assets:read,scans:read --expires 30`).action(async (options) => {
+  $ kinosec token create --name "CI" --scopes assets:read,scans:create
+  $ kinosec token create --name "Full" --scopes assets:read,scans:read --expires 30`).action(async (options) => {
     try {
       const opts = program3.opts();
       const { token: authToken, apiUrl } = resolveToken(opts);
@@ -10430,7 +10784,7 @@ Examples:
       }
       printSuccess(`Token created: ${result.name}`);
       console.log("");
-      console.log(import_picocolors7.default.bold("  Token: ") + result.token);
+      console.log(import_picocolors8.default.bold("  Token: ") + result.token);
       console.log("");
       printWarning("Save this token \u2014 it will not be shown again.");
       console.log(`  ID: ${result.id}`);
@@ -10442,8 +10796,8 @@ Examples:
   });
   token.command("revoke").description("Revoke an API token").argument("<id>", "Token ID").option("-y, --yes", "Skip confirmation prompt").addHelpText("after", `
 Examples:
-  $ kns token revoke abc123
-  $ kns token revoke abc123 --yes`).action(async (id, options) => {
+  $ kinosec token revoke abc123
+  $ kinosec token revoke abc123 --yes`).action(async (id, options) => {
     try {
       await confirmDestructive(`Revoke token ${id}?`, Boolean(options.yes));
       const opts = program3.opts();
@@ -10462,9 +10816,8 @@ Examples:
 }
 
 // src/cli.ts
-var VERSION = "0.1.0";
 var program2 = new Command();
-program2.name("kns").description("KinoSec CLI \u2014 run pentests from your terminal").version(VERSION, "-v, --version").option("--token <pat>", "API token (overrides KINOSEC_TOKEN and config)").option("--api-url <url>", "API base URL (overrides config)").option("--output <format>", "Output format: text or json", "text").option("--json", "Shorthand for --output json").option("--no-color", "Disable colors");
+program2.name("kinosec").description("KinoSec CLI \u2014 run pentests from your terminal").version("0.2.0", "-v, --version").option("--token <pat>", "API token (overrides KINOSEC_TOKEN and config)").option("--api-url <url>", "API base URL (overrides config)").option("--output <format>", "Output format: text or json", "text").option("--json", "Shorthand for --output json").option("--no-color", "Disable colors");
 registerAuthCommand(program2);
 registerConfigCommand(program2);
 registerMeCommand(program2);
@@ -10473,7 +10826,7 @@ registerAssetCommand(program2);
 registerFindingCommand(program2);
 registerReportCommand(program2);
 registerTokenCommand(program2);
-program2.parseAsync(process.argv).catch(handleError);
+program2.parseAsync(process.argv).then(() => checkForUpdate("0.2.0")).catch(handleError);
 /*! Bundled license information:
 
 ky/distribution/index.js: