@kinosec/cli 0.1.4 → 0.2.1

package/README.md

@@ -17,10 +17,6 @@ Or run without installing:
 npx @kinosec/cli scan list
 ```
 
-Or download a standalone binary from [GitHub Releases](https://github.com/kinosec-ai/cli/releases) — no Node.js required.
-
-See [docs/install.md](docs/install.md) for all installation methods.
-
 ## Quick Start
 
 ```bash
@@ -36,6 +32,9 @@ kinosec scan create --asset <id> --mode quick
 # Watch progress in real-time
 kinosec scan watch <scan-id>
 
+# Schedule a weekly scan
+kinosec scan schedule create --asset <id> --pattern weekly --day-of-week 1 --time 09:00
+
 # View findings
 kinosec finding list --scan <scan-id>
 
@@ -43,8 +42,6 @@ kinosec finding list --scan <scan-id>
 kinosec report export --scan <report-id> --format markdown > report.md
 ```
 
-See [docs/quickstart.md](docs/quickstart.md) for a full walkthrough.
-
 ## Commands
 
 ```
@@ -54,6 +51,7 @@ kinosec me                              Show authenticated user info
 
 kinosec asset list|get|create|delete|verify   Manage assets
 kinosec scan list|get|create|cancel|watch     Manage security scans
+kinosec scan schedule create|list|get|...     Schedule recurring scans
 kinosec finding list|get|update|retest        Manage findings
 kinosec report list|get|export                Manage reports
 kinosec token list|create|revoke              Manage API tokens
@@ -61,8 +59,6 @@ kinosec token list|create|revoke              Manage API tokens
 
 Every command supports `--json` for machine-readable output and `--help` for usage details.
 
-See [docs/commands.md](docs/commands.md) for the full command reference.
-
 ## Authentication
 
 The CLI authenticates via Personal Access Tokens (PATs). Tokens are resolved in this order:
@@ -71,8 +67,6 @@ The CLI authenticates via Personal Access Tokens (PATs). Tokens are resolved in
 2. `KINOSEC_TOKEN` environment variable
 3. `~/.config/kinosec/credentials.json` (saved by `kinosec auth login`)
 
-See [docs/authentication.md](docs/authentication.md) for details.
-
 ## Example
 
 ```bash
@@ -93,12 +87,11 @@ f1a2b3c4-...                         SQL Injection     Critical  open    active_
 
 ## Requirements
 
-- Node.js >= 20.0.0 (for npm install)
-- No requirements for standalone binaries
+- Node.js >= 20.0.0
 
 ## Contributing
 
-This CLI is maintained by [KinoSec](https://kinosec.ai). External contributions are not accepted at this time. Bug reports via Issues are welcome.
+This CLI is maintained by [KinoSec](https://kinosec.ai). External contributions are not accepted at this time.
 
 ## License
 

package/dist/cli.js

@@ -7771,6 +7771,7 @@ var KinoSecClient = class {
   api;
   assets;
   scans;
+  schedules;
   findings;
   reports;
   tokens;
@@ -7819,6 +7820,7 @@ var KinoSecClient = class {
     });
     this.assets = new AssetsResource(this.api);
     this.scans = new ScansResource(this.api);
+    this.schedules = new SchedulesResource(this.api);
     this.findings = new FindingsResource(this.api);
     this.reports = new ReportsResource(this.api);
     this.tokens = new TokensResource(this.api);
@@ -7868,6 +7870,33 @@ var ScansResource = class {
     return this.api.post(`v1/scans/${id}/cancel`, { json: {} }).json();
   }
 };
+var SchedulesResource = class {
+  constructor(api) {
+    this.api = api;
+  }
+  api;
+  async list(params = {}) {
+    return this.api.get("v1/scans/schedules", { searchParams: buildSearchParams(params) }).json();
+  }
+  async get(id) {
+    return this.api.get(`v1/scans/schedules/${id}`).json();
+  }
+  async create(params) {
+    return this.api.post("v1/scans/schedules", { json: params }).json();
+  }
+  async update(id, params) {
+    return this.api.patch(`v1/scans/schedules/${id}`, { json: params }).json();
+  }
+  async delete(id) {
+    await this.api.delete(`v1/scans/schedules/${id}`);
+  }
+  async pause(id) {
+    return this.api.post(`v1/scans/schedules/${id}/pause`, { json: {} }).json();
+  }
+  async resume(id) {
+    return this.api.post(`v1/scans/schedules/${id}/resume`, { json: {} }).json();
+  }
+};
 var FindingsResource = class {
   constructor(api) {
     this.api = api;
@@ -8022,8 +8051,9 @@ function shouldUseJson() {
   return false;
 }
 
-// src/commands/auth.ts
-import { createInterface } from "readline";
+// src/lib/update-check.ts
+import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2 } from "fs";
+import { join as join2, dirname as dirname2 } from "path";
 
 // src/lib/config.ts
 import { existsSync, mkdirSync, readFileSync, writeFileSync, openSync, writeSync, closeSync, unlinkSync, constants } from "fs";
@@ -8097,6 +8127,81 @@ function deleteCredentials() {
   }
 }
 
+// src/lib/update-check.ts
+var CACHE_FILE = join2(configDir, "update-check.json");
+var CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
+var FETCH_TIMEOUT_MS = 3e3;
+var NPM_PACKAGE = "@kinosec/cli";
+var REGISTRY_URL = `https://registry.npmjs.org/${NPM_PACKAGE}/latest`;
+function isUpdateSuppressed() {
+  return !!(process.env.KINOSEC_NO_UPDATE_CHECK === "1" || process.env.CI || process.env.GITHUB_ACTIONS || process.env.GITLAB_CI || process.env.JENKINS_URL);
+}
+function isNewerVersion(current, latest) {
+  const c = current.split(".").map(Number);
+  const l = latest.split(".").map(Number);
+  for (let i = 0; i < 3; i++) {
+    if ((l[i] ?? 0) > (c[i] ?? 0)) return true;
+    if ((l[i] ?? 0) < (c[i] ?? 0)) return false;
+  }
+  return false;
+}
+function readCache() {
+  if (!existsSync2(CACHE_FILE)) return null;
+  try {
+    const data = JSON.parse(readFileSync2(CACHE_FILE, "utf-8"));
+    const age = Date.now() - new Date(data.checked_at).getTime();
+    if (age > CACHE_TTL_MS) return null;
+    return data;
+  } catch {
+    return null;
+  }
+}
+function writeCache(latest) {
+  try {
+    const dir = dirname2(CACHE_FILE);
+    if (!existsSync2(dir)) mkdirSync2(dir, { recursive: true });
+    writeFileSync2(
+      CACHE_FILE,
+      JSON.stringify({ latest, checked_at: (/* @__PURE__ */ new Date()).toISOString() }, null, 2) + "\n",
+      "utf-8"
+    );
+  } catch {
+  }
+}
+async function fetchLatestVersion() {
+  try {
+    const response = await fetch(REGISTRY_URL, {
+      signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+    });
+    if (!response.ok) return null;
+    const data = await response.json();
+    return data.version ?? null;
+  } catch {
+    return null;
+  }
+}
+async function checkForUpdate(currentVersion) {
+  if (isUpdateSuppressed()) return;
+  let latest = null;
+  const cached = readCache();
+  if (cached) {
+    latest = cached.latest;
+  } else {
+    latest = await fetchLatestVersion();
+    if (latest) writeCache(latest);
+  }
+  if (latest && isNewerVersion(currentVersion, latest)) {
+    console.error(
+      `
+A new version of KinoSec CLI is available: ${latest} (current: ${currentVersion})
+Update: npm update -g @kinosec/cli`
+    );
+  }
+}
+
+// src/commands/auth.ts
+import { createInterface } from "readline";
+
 // src/lib/auth.ts
 var DEFAULT_API_URL = "https://api.kinosec.ai/v1";
 function resolveToken(options) {
@@ -9713,9 +9818,274 @@ function ora(options) {
 }
 
 // src/commands/scan.ts
+var import_picocolors4 = __toESM(require_picocolors(), 1);
+
+// src/commands/schedule.ts
 var import_picocolors3 = __toESM(require_picocolors(), 1);
+
+// src/lib/confirm.ts
+import { createInterface as createInterface2 } from "readline";
+async function confirmDestructive(message, yes) {
+  if (yes) return;
+  if (!isTTY()) {
+    console.error("Use --yes to confirm destructive operations in non-interactive mode.");
+    process.exit(2);
+  }
+  const rl = createInterface2({ input: process.stdin, output: process.stderr });
+  const answer = await new Promise((resolve) => {
+    rl.question(`${message} (y/N) `, resolve);
+  });
+  rl.close();
+  if (answer.toLowerCase() !== "y") {
+    console.log("Cancelled.");
+    process.exit(0);
+  }
+}
+
+// src/commands/schedule.ts
+var VALID_PATTERNS = ["once", "daily", "weekly", "biweekly", "monthly"];
+var VALID_MODES = ["quick", "full"];
+var DAY_NAMES = ["Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"];
+function extractTime(scheduledAt) {
+  if (!scheduledAt) return "\u2014";
+  const d = new Date(scheduledAt);
+  return d.toLocaleTimeString([], { hour: "2-digit", minute: "2-digit", hour12: false });
+}
+function formatPattern(s) {
+  const time = extractTime(s.scheduled_at);
+  switch (s.recurrence_pattern) {
+    case "once":
+      return `Once at ${time}`;
+    case "daily":
+      return `Daily at ${time}`;
+    case "weekly":
+      return `Weekly ${s.day_of_week !== null ? DAY_NAMES[s.day_of_week] : ""} at ${time}`;
+    case "biweekly":
+      return `Every 2 weeks ${s.day_of_week !== null ? DAY_NAMES[s.day_of_week] : ""} at ${time}`;
+    case "monthly":
+      return `Monthly day ${s.day_of_month ?? "?"} at ${time}`;
+    default:
+      return s.recurrence_pattern;
+  }
+}
+function registerScheduleCommand(scanCmd) {
+  const schedule = scanCmd.command("schedule").description("Manage scheduled scans (continuous protection)");
+  schedule.command("list").description("List scheduled scans").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").option("--status <status>", "Filter: active, paused, or all", "all").addHelpText("after", `
+Examples:
+  $ kinosec scan schedule list
+  $ kinosec scan schedule list --status active --json`).action(async (options) => {
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const result = await client.schedules.list({
+        limit: parseInt(options.limit, 10),
+        cursor: options.cursor,
+        status: options.status
+      });
+      if (opts.json || opts.output === "json") {
+        printJson(result);
+        return;
+      }
+      if (result.items.length === 0) {
+        console.log("No scheduled scans found.");
+        return;
+      }
+      printTable(
+        ["ID", "Target", "Mode", "Schedule", "Status", "Next Run"],
+        result.items.map((s) => [
+          s.id,
+          truncate(s.domain_or_ip, 25),
+          s.scan_mode,
+          formatPattern(s),
+          s.is_active ? import_picocolors3.default.green("active") : import_picocolors3.default.yellow("paused"),
+          s.next_scheduled_run ? new Date(s.next_scheduled_run).toLocaleString() : "\u2014"
+        ])
+      );
+      if (result.next_cursor) {
+        console.log(import_picocolors3.default.dim(`
+More results available. Use --cursor ${result.next_cursor}`));
+      }
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("get").description("Get schedule details").argument("<id>", "Schedule ID").addHelpText("after", `
+Examples:
+  $ kinosec scan schedule get abc123
+  $ kinosec scan schedule get abc123 --json`).action(async (id) => {
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const s = await client.schedules.get(id);
+      if (opts.json || opts.output === "json") {
+        printJson(s);
+        return;
+      }
+      printTable(
+        ["Field", "Value"],
+        [
+          ["ID", s.id],
+          ["Target", s.domain_or_ip],
+          ["Name", s.name],
+          ["Mode", s.scan_mode],
+          ["Schedule", formatPattern(s)],
+          ["Timezone", s.timezone],
+          ["Status", s.is_active ? "Active" : "Paused"],
+          ["Next Run", s.next_scheduled_run ?? "\u2014"],
+          ["Last Run", s.last_scheduled_run ?? "Never"],
+          ["Created", s.created_at]
+        ]
+      );
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("create").description("Create a scheduled scan").requiredOption("--asset <id>", "Asset ID to scan").requiredOption("--pattern <pattern>", "Recurrence: once, daily, weekly, biweekly, monthly").option("--name <name>", "Schedule name").option("--mode <mode>", "Scan mode: quick or full", "full").option("--time <HH:MM>", "Time of day (24h format)", "09:00").option("--day-of-week <0-6>", "Day of week (0=Sun..6=Sat) for weekly/biweekly").option("--day-of-month <1-31>", "Day of month for monthly").option("--timezone <tz>", "Timezone (e.g. America/New_York)", Intl.DateTimeFormat().resolvedOptions().timeZone).addHelpText("after", `
+Examples:
+  $ kinosec scan schedule create --asset abc123 --pattern weekly --day-of-week 1 --time 09:00
+  $ kinosec scan schedule create --asset abc123 --pattern daily --mode quick --time 14:00
+  $ kinosec scan schedule create --asset abc123 --pattern monthly --day-of-month 15 --time 03:00 --timezone UTC`).action(async (options) => {
+    if (!VALID_PATTERNS.includes(options.pattern)) {
+      console.error(`Invalid pattern "${options.pattern}". Must be: ${VALID_PATTERNS.join(", ")}`);
+      process.exit(2);
+    }
+    if (!VALID_MODES.includes(options.mode)) {
+      console.error(`Invalid mode "${options.mode}". Must be: ${VALID_MODES.join(", ")}`);
+      process.exit(2);
+    }
+    if ((options.pattern === "weekly" || options.pattern === "biweekly") && options.dayOfWeek === void 0) {
+      console.error(`--day-of-week is required for ${options.pattern} schedules.`);
+      process.exit(2);
+    }
+    if (options.pattern === "monthly" && options.dayOfMonth === void 0) {
+      console.error("--day-of-month is required for monthly schedules.");
+      process.exit(2);
+    }
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const params = {
+        asset_id: options.domain_or_ip,
+        name: options.name ?? `${options.pattern} ${options.mode} scan`,
+        scan_mode: options.mode,
+        recurrence_pattern: options.pattern,
+        time_of_day: options.time,
+        timezone: options.timezone
+      };
+      if (options.dayOfWeek !== void 0) params.day_of_week = parseInt(options.dayOfWeek, 10);
+      if (options.dayOfMonth !== void 0) params.day_of_month = parseInt(options.dayOfMonth, 10);
+      const s = await client.schedules.create(params);
+      if (opts.json || opts.output === "json") {
+        printJson(s);
+        return;
+      }
+      printSuccess(`Schedule created: ${s.domain_or_ip}`);
+      console.log(`  ID: ${s.id}`);
+      console.log(`  Schedule: ${formatPattern(s)}`);
+      console.log(`  Next run: ${s.next_scheduled_run ?? "pending"}`);
+      console.log(`
+Manage: kinosec scan schedule get ${s.id}`);
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("update").description("Update a schedule").argument("<id>", "Schedule ID").option("--pattern <pattern>", "Recurrence: once, daily, weekly, biweekly, monthly").option("--name <name>", "Schedule name").option("--mode <mode>", "Scan mode: quick or full").option("--time <HH:MM>", "Time of day (24h format)").option("--day-of-week <0-6>", "Day of week (0=Sun..6=Sat)").option("--day-of-month <1-31>", "Day of month").option("--timezone <tz>", "Timezone").addHelpText("after", `
+Examples:
+  $ kinosec scan schedule update abc123 --pattern daily --time 14:00
+  $ kinosec scan schedule update abc123 --mode quick`).action(async (id, options) => {
+    const params = {};
+    if (options.pattern) params.recurrence_pattern = options.pattern;
+    if (options.name) params.name = options.name;
+    if (options.mode) params.scan_mode = options.mode;
+    if (options.time) params.time_of_day = options.time;
+    if (options.dayOfWeek !== void 0) params.day_of_week = parseInt(options.dayOfWeek, 10);
+    if (options.dayOfMonth !== void 0) params.day_of_month = parseInt(options.dayOfMonth, 10);
+    if (options.timezone) params.timezone = options.timezone;
+    if (Object.keys(params).length === 0) {
+      console.error("Provide at least one field to update.");
+      process.exit(2);
+    }
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const s = await client.schedules.update(id, params);
+      if (opts.json || opts.output === "json") {
+        printJson(s);
+        return;
+      }
+      printSuccess(`Schedule updated: ${s.domain_or_ip}`);
+      console.log(`  Schedule: ${formatPattern(s)}`);
+      console.log(`  Next run: ${s.next_scheduled_run ?? "pending"}`);
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("delete").description("Delete a schedule").argument("<id>", "Schedule ID").option("-y, --yes", "Skip confirmation prompt").addHelpText("after", `
+Examples:
+  $ kinosec scan schedule delete abc123
+  $ kinosec scan schedule delete abc123 --yes`).action(async (id, options) => {
+    try {
+      await confirmDestructive(`Delete schedule ${id}?`, Boolean(options.yes));
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      await client.schedules.delete(id);
+      if (opts.json || opts.output === "json") {
+        printJson({ deleted: true, id });
+        return;
+      }
+      printSuccess(`Schedule ${id} deleted.`);
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("pause").description("Pause a scheduled scan").argument("<id>", "Schedule ID").addHelpText("after", `
+Examples:
+  $ kinosec scan schedule pause abc123`).action(async (id) => {
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const result = await client.schedules.pause(id);
+      if (opts.json || opts.output === "json") {
+        printJson(result);
+        return;
+      }
+      printSuccess("Schedule paused.");
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("resume").description("Resume a paused schedule").argument("<id>", "Schedule ID").addHelpText("after", `
+Examples:
+  $ kinosec scan schedule resume abc123`).action(async (id) => {
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const result = await client.schedules.resume(id);
+      if (opts.json || opts.output === "json") {
+        printJson(result);
+        return;
+      }
+      printSuccess("Schedule resumed.");
+      if (result.next_scheduled_run) {
+        console.log(`  Next run: ${new Date(result.next_scheduled_run).toLocaleString()}`);
+      }
+    } catch (error) {
+      handleError(error);
+    }
+  });
+}
+
+// src/commands/scan.ts
 function registerScanCommand(program3) {
   const scan = program3.command("scan").description("Manage security scans");
+  registerScheduleCommand(scan);
   scan.command("list").description("List scans").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").addHelpText("after", `
 Examples:
   $ kinosec scan list
@@ -9747,7 +10117,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors3.default.dim(`
+        console.log(import_picocolors4.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -9871,7 +10241,7 @@ Examples:
           process.stdout.write(JSON.stringify({ ...scanDetail, elapsed_seconds: elapsed }) + "\n");
         } else if (spinner) {
           if (activity && activity !== lastActivity && lastActivity) {
-            spinner.stopAndPersist({ symbol: import_picocolors3.default.green("\u2713"), text: lastActivity });
+            spinner.stopAndPersist({ symbol: import_picocolors4.default.green("\u2713"), text: lastActivity });
             spinner = ora().start();
           }
           lastActivity = activity || lastActivity;
@@ -9885,15 +10255,15 @@ Examples:
             break;
           }
           if (scanDetail.scan_status.includes("Failed")) {
-            console.log(import_picocolors3.default.red(`
+            console.log(import_picocolors4.default.red(`
 Scan failed: ${scanDetail.failure_reason || "unknown reason"}`));
             process.exit(1);
           }
           if (scanDetail.scan_status.includes("Stopped")) {
-            console.log(import_picocolors3.default.yellow("\nScan was cancelled."));
+            console.log(import_picocolors4.default.yellow("\nScan was cancelled."));
             break;
           }
-          console.log(import_picocolors3.default.green(`
+          console.log(import_picocolors4.default.green(`
 Scan completed: ${scanDetail.domain_or_ip}`));
           console.log(`  View findings: kinosec finding list --scan ${id}`);
           break;
@@ -9914,33 +10284,14 @@ Timeout: scan still running after ${options.timeout}s.`);
 }
 
 // src/commands/asset.ts
-var import_picocolors4 = __toESM(require_picocolors(), 1);
-
-// src/lib/confirm.ts
-import { createInterface as createInterface2 } from "readline";
-async function confirmDestructive(message, yes) {
-  if (yes) return;
-  if (!isTTY()) {
-    console.error("Use --yes to confirm destructive operations in non-interactive mode.");
-    process.exit(2);
-  }
-  const rl = createInterface2({ input: process.stdin, output: process.stderr });
-  const answer = await new Promise((resolve) => {
-    rl.question(`${message} (y/N) `, resolve);
-  });
-  rl.close();
-  if (answer.toLowerCase() !== "y") {
-    console.log("Cancelled.");
-    process.exit(0);
-  }
-}
-
-// src/commands/asset.ts
+var import_picocolors5 = __toESM(require_picocolors(), 1);
 function registerAssetCommand(program3) {
   const asset = program3.command("asset").description("Manage assets");
-  asset.command("list").description("List assets").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").addHelpText("after", `
+  asset.command("list").description("List assets").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").option("--search <term>", "Filter by asset value (substring match)").option("--status <status>", "Filter by status (verified, unverified)").option("--type <type>", "Filter by type (domain, subdomain, ip)").addHelpText("after", `
 Examples:
   $ kinosec asset list
+  $ kinosec asset list --search example.com
+  $ kinosec asset list --type subdomain --status verified
   $ kinosec asset list --limit 50 --json`).action(async (options) => {
     try {
       const opts = program3.opts();
@@ -9948,7 +10299,10 @@ Examples:
       const client = new KinoSecClient({ apiUrl, token });
       const result = await client.assets.list({
         limit: parseInt(options.limit, 10),
-        cursor: options.cursor
+        cursor: options.cursor,
+        search: options.search,
+        status: options.status,
+        type: options.type
       });
       if (opts.json || opts.output === "json") {
         printJson(result);
@@ -9969,7 +10323,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors4.default.dim(`
+        console.log(import_picocolors5.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -10080,20 +10434,20 @@ Examples:
 }
 
 // src/commands/finding.ts
-var import_picocolors5 = __toESM(require_picocolors(), 1);
+var import_picocolors6 = __toESM(require_picocolors(), 1);
 function severityColor(level) {
   if (!isTTY()) return level;
   switch (level.toLowerCase()) {
     case "critical":
-      return import_picocolors5.default.red(import_picocolors5.default.bold(level));
+      return import_picocolors6.default.red(import_picocolors6.default.bold(level));
     case "high":
-      return import_picocolors5.default.red(level);
+      return import_picocolors6.default.red(level);
     case "medium":
-      return import_picocolors5.default.yellow(level);
+      return import_picocolors6.default.yellow(level);
     case "low":
-      return import_picocolors5.default.blue(level);
+      return import_picocolors6.default.blue(level);
     case "info":
-      return import_picocolors5.default.dim(level);
+      return import_picocolors6.default.dim(level);
     default:
       return level;
   }
@@ -10133,7 +10487,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors5.default.dim(`
+        console.log(import_picocolors6.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -10218,7 +10572,7 @@ Examples:
 }
 
 // src/commands/report.ts
-var import_picocolors6 = __toESM(require_picocolors(), 1);
+var import_picocolors7 = __toESM(require_picocolors(), 1);
 function renderMarkdown(data) {
   const { scan, findings } = data;
   const lines = [];
@@ -10297,7 +10651,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors6.default.dim(`
+        console.log(import_picocolors7.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -10368,7 +10722,7 @@ Examples:
 }
 
 // src/commands/token.ts
-var import_picocolors7 = __toESM(require_picocolors(), 1);
+var import_picocolors8 = __toESM(require_picocolors(), 1);
 function registerTokenCommand(program3) {
   const token = program3.command("token").description("Manage API tokens");
   token.command("list").description("List API tokens").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").addHelpText("after", `
@@ -10403,7 +10757,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors7.default.dim(`
+        console.log(import_picocolors8.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -10430,7 +10784,7 @@ Examples:
       }
       printSuccess(`Token created: ${result.name}`);
       console.log("");
-      console.log(import_picocolors7.default.bold("  Token: ") + result.token);
+      console.log(import_picocolors8.default.bold("  Token: ") + result.token);
       console.log("");
       printWarning("Save this token \u2014 it will not be shown again.");
       console.log(`  ID: ${result.id}`);
@@ -10462,9 +10816,8 @@ Examples:
 }
 
 // src/cli.ts
-var VERSION = "0.1.0";
 var program2 = new Command();
-program2.name("kinosec").description("KinoSec CLI \u2014 run pentests from your terminal").version(VERSION, "-v, --version").option("--token <pat>", "API token (overrides KINOSEC_TOKEN and config)").option("--api-url <url>", "API base URL (overrides config)").option("--output <format>", "Output format: text or json", "text").option("--json", "Shorthand for --output json").option("--no-color", "Disable colors");
+program2.name("kinosec").description("KinoSec CLI \u2014 run pentests from your terminal").version("0.2.1", "-v, --version").option("--token <pat>", "API token (overrides KINOSEC_TOKEN and config)").option("--api-url <url>", "API base URL (overrides config)").option("--output <format>", "Output format: text or json", "text").option("--json", "Shorthand for --output json").option("--no-color", "Disable colors");
 registerAuthCommand(program2);
 registerConfigCommand(program2);
 registerMeCommand(program2);
@@ -10473,7 +10826,7 @@ registerAssetCommand(program2);
 registerFindingCommand(program2);
 registerReportCommand(program2);
 registerTokenCommand(program2);
-program2.parseAsync(process.argv).catch(handleError);
+program2.parseAsync(process.argv).then(() => checkForUpdate("0.2.1")).catch(handleError);
 /*! Bundled license information:
 
 ky/distribution/index.js: