@kinosec/cli 0.2.1 → 0.3.1

package/dist/cli.js

@@ -7851,6 +7851,9 @@ var AssetsResource = class {
   async verify(id) {
     return this.api.post(`v1/assets/${id}/verify`, { json: {} }).json();
   }
+  async lookup(domain) {
+    return this.api.get("v1/assets/lookup", { searchParams: { domain } }).json();
+  }
 };
 var ScansResource = class {
   constructor(api) {
@@ -8199,9 +8202,6 @@ Update: npm update -g @kinosec/cli`
   }
 }
 
-// src/commands/auth.ts
-import { createInterface } from "readline";
-
 // src/lib/auth.ts
 var DEFAULT_API_URL = "https://api.kinosec.ai/v1";
 function resolveToken(options) {
@@ -8225,12 +8225,40 @@ function maskToken(token) {
   return token.slice(0, 16) + "\u2026" + token.slice(-4);
 }
 async function promptForToken() {
-  const rl = createInterface({ input: process.stdin, output: process.stderr });
-  return new Promise((resolve) => {
-    rl.question("Paste your API token: ", (answer) => {
-      rl.close();
-      resolve(answer.trim());
-    });
+  process.stderr.write("API token: ");
+  return new Promise((resolve, reject) => {
+    const chars = [];
+    process.stdin.setRawMode(true);
+    process.stdin.resume();
+    process.stdin.setEncoding("utf-8");
+    const onData = (chunk) => {
+      for (const ch of chunk) {
+        if (ch === "\r" || ch === "\n") {
+          process.stdin.setRawMode(false);
+          process.stdin.pause();
+          process.stdin.removeListener("data", onData);
+          process.stderr.write("\n");
+          resolve(chars.join(""));
+          return;
+        } else if (ch === "") {
+          process.stdin.setRawMode(false);
+          process.stdin.pause();
+          process.stdin.removeListener("data", onData);
+          process.stderr.write("\n");
+          reject(new Error("Cancelled"));
+          return;
+        } else if (ch === "\x7F" || ch === "\b") {
+          if (chars.length > 0) {
+            chars.pop();
+            process.stderr.write("\b \b");
+          }
+        } else if (ch >= " ") {
+          chars.push(ch);
+          process.stderr.write("*");
+        }
+      }
+    };
+    process.stdin.on("data", onData);
   });
 }
 function registerAuthCommand(program3) {
@@ -8248,7 +8276,7 @@ Examples:
         );
       }
       if (!token) {
-        if (isTTY()) {
+        if (isTTY() && process.stdin.isTTY) {
           token = await promptForToken();
         } else {
           const chunks = [];
@@ -9817,21 +9845,19 @@ function ora(options) {
   return new Ora(options);
 }
 
-// src/commands/scan.ts
-var import_picocolors4 = __toESM(require_picocolors(), 1);
-
-// src/commands/schedule.ts
-var import_picocolors3 = __toESM(require_picocolors(), 1);
+// src/commands/pentest.ts
+var import_picocolors5 = __toESM(require_picocolors(), 1);
 
 // src/lib/confirm.ts
-import { createInterface as createInterface2 } from "readline";
+var import_picocolors3 = __toESM(require_picocolors(), 1);
+import { createInterface } from "readline";
 async function confirmDestructive(message, yes) {
   if (yes) return;
   if (!isTTY()) {
     console.error("Use --yes to confirm destructive operations in non-interactive mode.");
     process.exit(2);
   }
-  const rl = createInterface2({ input: process.stdin, output: process.stderr });
+  const rl = createInterface({ input: process.stdin, output: process.stderr });
   const answer = await new Promise((resolve) => {
     rl.question(`${message} (y/N) `, resolve);
   });
@@ -9841,8 +9867,45 @@ async function confirmDestructive(message, yes) {
     process.exit(0);
   }
 }
+async function confirmAuthorization(target, yes) {
+  if (yes) return;
+  if (!isTTY()) {
+    console.error("Use --yes to accept authorization terms in non-interactive mode.");
+    process.exit(2);
+  }
+  const warning = import_picocolors3.default.yellow("\u26A0");
+  console.error(`
+${warning}  ${import_picocolors3.default.bold("Authorization Required")}
+
+Penetration testing without proper authorization is illegal
+and may result in criminal prosecution.
+
+${import_picocolors3.default.bold("Target:")} ${target}
+
+By proceeding, you confirm that:
+  ${import_picocolors3.default.dim("\u2022")} You own or have explicit written authorization to test this target
+  ${import_picocolors3.default.dim("\u2022")} You will comply with all applicable laws and regulations
+  ${import_picocolors3.default.dim("\u2022")} You will not use the results for illegal or malicious purposes
+  ${import_picocolors3.default.dim("\u2022")} You accept full legal responsibility for this pentest
+
+${import_picocolors3.default.dim("Unauthorized access to computer systems is a criminal offense under")}
+${import_picocolors3.default.dim("laws such as the CFAA (US), Computer Misuse Act (UK), and similar")}
+${import_picocolors3.default.dim("legislation worldwide. KinoSec bears no liability for unauthorized")}
+${import_picocolors3.default.dim("use of its services.")}
+`);
+  const rl = createInterface({ input: process.stdin, output: process.stderr });
+  const answer = await new Promise((resolve) => {
+    rl.question("Agree and continue? (y/N) ", resolve);
+  });
+  rl.close();
+  if (answer.toLowerCase() !== "y") {
+    console.log("Cancelled.");
+    process.exit(0);
+  }
+}
 
 // src/commands/schedule.ts
+var import_picocolors4 = __toESM(require_picocolors(), 1);
 var VALID_PATTERNS = ["once", "daily", "weekly", "biweekly", "monthly"];
 var VALID_MODES = ["quick", "full"];
 var DAY_NAMES = ["Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"];
@@ -9868,12 +9931,12 @@ function formatPattern(s) {
       return s.recurrence_pattern;
   }
 }
-function registerScheduleCommand(scanCmd) {
-  const schedule = scanCmd.command("schedule").description("Manage scheduled scans (continuous protection)");
-  schedule.command("list").description("List scheduled scans").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").option("--status <status>", "Filter: active, paused, or all", "all").addHelpText("after", `
+function registerScheduleCommand(pentestCmd) {
+  const schedule = pentestCmd.command("schedule").description("Manage scheduled pentests");
+  schedule.command("list").description("List scheduled pentests").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").option("--status <status>", "Filter: active, paused, or all", "all").addHelpText("after", `
 Examples:
-  $ kinosec scan schedule list
-  $ kinosec scan schedule list --status active --json`).action(async (options) => {
+  $ kinosec pentest schedule list
+  $ kinosec pentest schedule list --status active --json`).action(async (options) => {
     try {
       const opts = schedule.parent.parent.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -9888,7 +9951,7 @@ Examples:
         return;
       }
       if (result.items.length === 0) {
-        console.log("No scheduled scans found.");
+        console.log("No scheduled pentests found.");
         return;
       }
       printTable(
@@ -9898,12 +9961,12 @@ Examples:
           truncate(s.domain_or_ip, 25),
           s.scan_mode,
           formatPattern(s),
-          s.is_active ? import_picocolors3.default.green("active") : import_picocolors3.default.yellow("paused"),
+          s.is_active ? import_picocolors4.default.green("active") : import_picocolors4.default.yellow("paused"),
           s.next_scheduled_run ? new Date(s.next_scheduled_run).toLocaleString() : "\u2014"
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors3.default.dim(`
+        console.log(import_picocolors4.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -9912,8 +9975,8 @@ More results available. Use --cursor ${result.next_cursor}`));
   });
   schedule.command("get").description("Get schedule details").argument("<id>", "Schedule ID").addHelpText("after", `
 Examples:
-  $ kinosec scan schedule get abc123
-  $ kinosec scan schedule get abc123 --json`).action(async (id) => {
+  $ kinosec pentest schedule get abc123
+  $ kinosec pentest schedule get abc123 --json`).action(async (id) => {
     try {
       const opts = schedule.parent.parent.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -9942,11 +10005,11 @@ Examples:
       handleError(error);
     }
   });
-  schedule.command("create").description("Create a scheduled scan").requiredOption("--asset <id>", "Asset ID to scan").requiredOption("--pattern <pattern>", "Recurrence: once, daily, weekly, biweekly, monthly").option("--name <name>", "Schedule name").option("--mode <mode>", "Scan mode: quick or full", "full").option("--time <HH:MM>", "Time of day (24h format)", "09:00").option("--day-of-week <0-6>", "Day of week (0=Sun..6=Sat) for weekly/biweekly").option("--day-of-month <1-31>", "Day of month for monthly").option("--timezone <tz>", "Timezone (e.g. America/New_York)", Intl.DateTimeFormat().resolvedOptions().timeZone).addHelpText("after", `
+  schedule.command("create").description("Create a scheduled pentest").requiredOption("--asset <id>", "Asset ID to scan").requiredOption("--pattern <pattern>", "Recurrence: once, daily, weekly, biweekly, monthly").option("--name <name>", "Schedule name").option("--mode <mode>", "Scan mode: quick or full", "full").option("--time <HH:MM>", "Time of day (24h format)", "09:00").option("--day-of-week <0-6>", "Day of week (0=Sun..6=Sat) for weekly/biweekly").option("--day-of-month <1-31>", "Day of month for monthly").option("--timezone <tz>", "Timezone (e.g. America/New_York)", Intl.DateTimeFormat().resolvedOptions().timeZone).addHelpText("after", `
 Examples:
-  $ kinosec scan schedule create --asset abc123 --pattern weekly --day-of-week 1 --time 09:00
-  $ kinosec scan schedule create --asset abc123 --pattern daily --mode quick --time 14:00
-  $ kinosec scan schedule create --asset abc123 --pattern monthly --day-of-month 15 --time 03:00 --timezone UTC`).action(async (options) => {
+  $ kinosec pentest schedule create --asset abc123 --pattern weekly --day-of-week 1 --time 09:00
+  $ kinosec pentest schedule create --asset abc123 --pattern daily --mode quick --time 14:00
+  $ kinosec pentest schedule create --asset abc123 --pattern monthly --day-of-month 15 --time 03:00 --timezone UTC`).action(async (options) => {
     if (!VALID_PATTERNS.includes(options.pattern)) {
       console.error(`Invalid pattern "${options.pattern}". Must be: ${VALID_PATTERNS.join(", ")}`);
       process.exit(2);
@@ -9969,7 +10032,7 @@ Examples:
       const client = new KinoSecClient({ apiUrl, token });
       const params = {
         asset_id: options.domain_or_ip,
-        name: options.name ?? `${options.pattern} ${options.mode} scan`,
+        name: options.name ?? `${options.pattern} ${options.mode} pentest`,
         scan_mode: options.mode,
         recurrence_pattern: options.pattern,
         time_of_day: options.time,
@@ -9987,15 +10050,15 @@ Examples:
       console.log(`  Schedule: ${formatPattern(s)}`);
       console.log(`  Next run: ${s.next_scheduled_run ?? "pending"}`);
       console.log(`
-Manage: kinosec scan schedule get ${s.id}`);
+Manage: kinosec pentest schedule get ${s.id}`);
     } catch (error) {
       handleError(error);
     }
   });
   schedule.command("update").description("Update a schedule").argument("<id>", "Schedule ID").option("--pattern <pattern>", "Recurrence: once, daily, weekly, biweekly, monthly").option("--name <name>", "Schedule name").option("--mode <mode>", "Scan mode: quick or full").option("--time <HH:MM>", "Time of day (24h format)").option("--day-of-week <0-6>", "Day of week (0=Sun..6=Sat)").option("--day-of-month <1-31>", "Day of month").option("--timezone <tz>", "Timezone").addHelpText("after", `
 Examples:
-  $ kinosec scan schedule update abc123 --pattern daily --time 14:00
-  $ kinosec scan schedule update abc123 --mode quick`).action(async (id, options) => {
+  $ kinosec pentest schedule update abc123 --pattern daily --time 14:00
+  $ kinosec pentest schedule update abc123 --mode quick`).action(async (id, options) => {
     const params = {};
     if (options.pattern) params.recurrence_pattern = options.pattern;
     if (options.name) params.name = options.name;
@@ -10026,8 +10089,8 @@ Examples:
   });
   schedule.command("delete").description("Delete a schedule").argument("<id>", "Schedule ID").option("-y, --yes", "Skip confirmation prompt").addHelpText("after", `
 Examples:
-  $ kinosec scan schedule delete abc123
-  $ kinosec scan schedule delete abc123 --yes`).action(async (id, options) => {
+  $ kinosec pentest schedule delete abc123
+  $ kinosec pentest schedule delete abc123 --yes`).action(async (id, options) => {
     try {
       await confirmDestructive(`Delete schedule ${id}?`, Boolean(options.yes));
       const opts = schedule.parent.parent.opts();
@@ -10043,9 +10106,9 @@ Examples:
       handleError(error);
     }
   });
-  schedule.command("pause").description("Pause a scheduled scan").argument("<id>", "Schedule ID").addHelpText("after", `
+  schedule.command("pause").description("Pause a scheduled pentest").argument("<id>", "Schedule ID").addHelpText("after", `
 Examples:
-  $ kinosec scan schedule pause abc123`).action(async (id) => {
+  $ kinosec pentest schedule pause abc123`).action(async (id) => {
     try {
       const opts = schedule.parent.parent.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -10062,7 +10125,7 @@ Examples:
   });
   schedule.command("resume").description("Resume a paused schedule").argument("<id>", "Schedule ID").addHelpText("after", `
 Examples:
-  $ kinosec scan schedule resume abc123`).action(async (id) => {
+  $ kinosec pentest schedule resume abc123`).action(async (id) => {
     try {
       const opts = schedule.parent.parent.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -10082,14 +10145,79 @@ Examples:
   });
 }
 
-// src/commands/scan.ts
-function registerScanCommand(program3) {
-  const scan = program3.command("scan").description("Manage security scans");
-  registerScheduleCommand(scan);
-  scan.command("list").description("List scans").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").addHelpText("after", `
+// src/commands/pentest.ts
+function stripProtocol(input) {
+  const match = input.match(/^https?:\/\/(.+)/i);
+  if (match) return { domain: match[1].replace(/\/+$/, ""), warned: true };
+  return { domain: input, warned: false };
+}
+function isValidDomain(value) {
+  return value.includes(".") && !/\s/.test(value);
+}
+function registerPentestCommand(program3) {
+  const pentest = program3.command("pentest").description("Run and manage pentests").option("-t, --target <domain>", "Target domain to pentest").option("--profile <id>", "Pentest profile ID (alternative to --target)").option("--mode <mode>", "Pentest mode: quick or full", "full").option("-y, --yes", "Accept authorization terms without prompting").addHelpText("after", `
 Examples:
-  $ kinosec scan list
-  $ kinosec scan list --limit 5 --json`).action(async (options) => {
+  $ kinosec pentest -t delikado.org
+  $ kinosec pentest --target delikado.org --mode quick
+  $ kinosec pentest --profile abc123`).action(async (options) => {
+    if (!options.target && !options.profile) {
+      console.error("Provide --target <domain> or --profile <id>.");
+      process.exit(2);
+    }
+    try {
+      const opts = program3.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      let targetDisplay;
+      let params;
+      if (options.profile) {
+        const detail = await client.scans.get(options.profile);
+        targetDisplay = detail.domain_or_ip;
+        params = { scan_profile_id: options.profile };
+      } else {
+        const { domain, warned } = stripProtocol(options.target);
+        if (warned) {
+          console.error(`Warning: protocol stripped. Using "${domain}".`);
+        }
+        if (!isValidDomain(domain)) {
+          console.error(`Invalid domain format: "${domain}"`);
+          console.error("Provide a domain like delikado.org or juice.delikado.org.");
+          process.exit(2);
+        }
+        let asset;
+        try {
+          asset = await client.assets.lookup(domain);
+        } catch (err) {
+          if (err instanceof ApiError && err.status === 404) {
+            console.error(`No asset found for '${domain}'. Run kinosec asset list to see your assets.`);
+            process.exit(1);
+          }
+          throw err;
+        }
+        targetDisplay = domain;
+        params = { asset_id: asset.id, scan_mode: options.mode };
+      }
+      await confirmAuthorization(targetDisplay, Boolean(options.yes));
+      const result = await client.scans.create(params);
+      if (opts.json || opts.output === "json") {
+        printJson(result);
+        return;
+      }
+      printSuccess(`Pentest started: ${result.domain_or_ip}`);
+      console.log(`  Profile ID: ${result.scan_profile_id}`);
+      console.log(`  Mode: ${result.scan_mode}`);
+      console.log(`  Status: ${result.scan_status}`);
+      console.log(`
+Watch progress: kinosec pentest watch ${result.scan_profile_id}`);
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  registerScheduleCommand(pentest);
+  pentest.command("list").description("List pentests").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").addHelpText("after", `
+Examples:
+  $ kinosec pentest list
+  $ kinosec pentest list --limit 5 --json`).action(async (options) => {
     try {
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -10103,7 +10231,7 @@ Examples:
         return;
       }
       if (result.items.length === 0) {
-        console.log("No scans found.");
+        console.log("No pentests found.");
         return;
       }
       printTable(
@@ -10117,17 +10245,17 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors4.default.dim(`
+        console.log(import_picocolors5.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
       handleError(error);
     }
   });
-  scan.command("get").description("Get scan details").argument("<id>", "Scan profile ID").addHelpText("after", `
+  pentest.command("get").description("Get pentest details").argument("<profile-id>", "Pentest profile ID").showHelpAfterError().addHelpText("after", `
 Examples:
-  $ kinosec scan get abc123
-  $ kinosec scan get abc123 --json`).action(async (id) => {
+  $ kinosec pentest get abc123
+  $ kinosec pentest get abc123 --json`).action(async (id) => {
     try {
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -10154,45 +10282,9 @@ Examples:
       handleError(error);
     }
   });
-  scan.command("create").description("Start a new scan").option("--asset <id>", "Asset ID to scan").option("--profile <id>", "Scan profile ID (alternative to --asset)").option("--mode <mode>", "Scan mode: quick or full", "quick").addHelpText("after", `
+  pentest.command("cancel").description("Cancel a running pentest").argument("<profile-id>", "Pentest profile ID").showHelpAfterError().addHelpText("after", `
 Examples:
-  $ kinosec scan create --asset abc123 --mode quick
-  $ kinosec scan create --profile def456`).action(async (options) => {
-    if (!options.asset && !options.profile) {
-      console.error("Provide --asset <id> or --profile <id>.");
-      process.exit(2);
-    }
-    const uuidRe = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-    const idValue = options.asset ?? options.profile;
-    if (!uuidRe.test(idValue)) {
-      console.error(`Invalid ID format: "${idValue}"`);
-      console.error("IDs are UUIDs (e.g. 550e8400-e29b-41d4-a716-446655440000).");
-      console.error("Run kinosec asset list to find your asset ID.");
-      process.exit(2);
-    }
-    try {
-      const opts = program3.opts();
-      const { token, apiUrl } = resolveToken(opts);
-      const client = new KinoSecClient({ apiUrl, token });
-      const params = options.profile ? { scan_profile_id: options.profile } : { asset_id: options.asset, scan_mode: options.mode };
-      const result = await client.scans.create(params);
-      if (opts.json || opts.output === "json") {
-        printJson(result);
-        return;
-      }
-      printSuccess(`Scan started: ${result.domain_or_ip}`);
-      console.log(`  Profile ID: ${result.scan_profile_id}`);
-      console.log(`  Mode: ${result.scan_mode}`);
-      console.log(`  Status: ${result.scan_status}`);
-      console.log(`
-Watch progress: kinosec scan watch ${result.scan_profile_id}`);
-    } catch (error) {
-      handleError(error);
-    }
-  });
-  scan.command("cancel").description("Cancel a running scan").argument("<id>", "Scan profile ID").addHelpText("after", `
-Examples:
-  $ kinosec scan cancel abc123`).action(async (id) => {
+  $ kinosec pentest cancel abc123`).action(async (id) => {
     try {
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -10202,16 +10294,16 @@ Examples:
         printJson(result);
         return;
       }
-      printSuccess(`Scan cancel requested: ${result.scan_status}`);
+      printSuccess(`Pentest cancel requested: ${result.scan_status}`);
     } catch (error) {
       handleError(error);
     }
   });
-  scan.command("watch").description("Watch scan progress in real-time").argument("<id>", "Scan profile ID").option("--timeout <seconds>", "Max time to watch", "1800").option("--interval <seconds>", "Poll interval", "5").addHelpText("after", `
+  pentest.command("watch").description("Watch pentest progress in real-time").argument("<profile-id>", "Pentest profile ID").showHelpAfterError().option("--timeout <seconds>", "Max time to watch", "1800").option("--interval <seconds>", "Poll interval", "5").addHelpText("after", `
 Examples:
-  $ kinosec scan watch abc123
-  $ kinosec scan watch abc123 --timeout 600
-  $ kinosec scan watch abc123 --json`).action(async (id, options) => {
+  $ kinosec pentest watch abc123
+  $ kinosec pentest watch abc123 --timeout 600
+  $ kinosec pentest watch abc123 --json`).action(async (id, options) => {
     try {
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -10223,14 +10315,14 @@ Examples:
       let spinner = null;
       let lastActivity = "";
       if (!useJson && isTTY()) {
-        spinner = ora("Fetching scan status...").start();
+        spinner = ora("Fetching pentest status...").start();
       }
       const cleanup = () => {
         if (spinner) spinner.stop();
       };
       process.once("SIGINT", () => {
         cleanup();
-        console.log("\nWatch cancelled. Scan is still running.");
+        console.log("\nWatch cancelled. Pentest is still running.");
         process.exit(0);
       });
       while (true) {
@@ -10241,7 +10333,7 @@ Examples:
           process.stdout.write(JSON.stringify({ ...scanDetail, elapsed_seconds: elapsed }) + "\n");
         } else if (spinner) {
           if (activity && activity !== lastActivity && lastActivity) {
-            spinner.stopAndPersist({ symbol: import_picocolors4.default.green("\u2713"), text: lastActivity });
+            spinner.stopAndPersist({ symbol: import_picocolors5.default.green("\u2713"), text: lastActivity });
             spinner = ora().start();
           }
           lastActivity = activity || lastActivity;
@@ -10255,24 +10347,24 @@ Examples:
             break;
           }
           if (scanDetail.scan_status.includes("Failed")) {
-            console.log(import_picocolors4.default.red(`
-Scan failed: ${scanDetail.failure_reason || "unknown reason"}`));
+            console.log(import_picocolors5.default.red(`
+Pentest failed: ${scanDetail.failure_reason || "unknown reason"}`));
             process.exit(1);
           }
           if (scanDetail.scan_status.includes("Stopped")) {
-            console.log(import_picocolors4.default.yellow("\nScan was cancelled."));
+            console.log(import_picocolors5.default.yellow("\nPentest was cancelled."));
             break;
           }
-          console.log(import_picocolors4.default.green(`
-Scan completed: ${scanDetail.domain_or_ip}`));
-          console.log(`  View findings: kinosec finding list --scan ${id}`);
+          console.log(import_picocolors5.default.green(`
+Pentest completed: ${scanDetail.domain_or_ip}`));
+          console.log(`  View findings: kinosec finding list ${id}`);
           break;
         }
         if (Date.now() - startTime > timeoutMs) {
           cleanup();
           console.error(`
-Timeout: scan still running after ${options.timeout}s.`);
-          console.error(`Check status: kinosec scan get ${id}`);
+Timeout: pentest still running after ${options.timeout}s.`);
+          console.error(`Check status: kinosec pentest get ${id}`);
           process.exit(3);
         }
         await new Promise((resolve) => setTimeout(resolve, intervalMs));
@@ -10284,7 +10376,7 @@ Timeout: scan still running after ${options.timeout}s.`);
 }
 
 // src/commands/asset.ts
-var import_picocolors5 = __toESM(require_picocolors(), 1);
+var import_picocolors6 = __toESM(require_picocolors(), 1);
 function registerAssetCommand(program3) {
   const asset = program3.command("asset").description("Manage assets");
   asset.command("list").description("List assets").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").option("--search <term>", "Filter by asset value (substring match)").option("--status <status>", "Filter by status (verified, unverified)").option("--type <type>", "Filter by type (domain, subdomain, ip)").addHelpText("after", `
@@ -10323,7 +10415,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors5.default.dim(`
+        console.log(import_picocolors6.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -10434,31 +10526,31 @@ Examples:
 }
 
 // src/commands/finding.ts
-var import_picocolors6 = __toESM(require_picocolors(), 1);
+var import_picocolors7 = __toESM(require_picocolors(), 1);
 function severityColor(level) {
   if (!isTTY()) return level;
   switch (level.toLowerCase()) {
     case "critical":
-      return import_picocolors6.default.red(import_picocolors6.default.bold(level));
+      return import_picocolors7.default.red(import_picocolors7.default.bold(level));
     case "high":
-      return import_picocolors6.default.red(level);
+      return import_picocolors7.default.red(level);
     case "medium":
-      return import_picocolors6.default.yellow(level);
+      return import_picocolors7.default.yellow(level);
     case "low":
-      return import_picocolors6.default.blue(level);
+      return import_picocolors7.default.blue(level);
     case "info":
-      return import_picocolors6.default.dim(level);
+      return import_picocolors7.default.dim(level);
     default:
       return level;
   }
 }
-var VALID_STATUSES = ["open", "fixed", "false_positive", "investigating", "wont_fix"];
+var VALID_STATUSES = ["open", "fixed", "false_positive", "accepted_risk", "resolved"];
 function registerFindingCommand(program3) {
   const finding = program3.command("finding").description("Manage findings");
-  finding.command("list").description("List findings").option("--scan <id>", "Filter by scan profile ID").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").addHelpText("after", `
+  finding.command("list").description("List findings").argument("[profile-id]", "Pentest profile ID").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").addHelpText("after", `
 Examples:
-  $ kinosec finding list --scan abc123
-  $ kinosec finding list --limit 50 --json`).action(async (options) => {
+  $ kinosec finding list abc123
+  $ kinosec finding list --limit 50 --json`).action(async (profileId, options) => {
     try {
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
@@ -10466,7 +10558,7 @@ Examples:
       const result = await client.findings.list({
         limit: parseInt(options.limit, 10),
         cursor: options.cursor,
-        scan: options.scan
+        scan: profileId
       });
       if (opts.json || opts.output === "json") {
         printJson(result);
@@ -10477,17 +10569,16 @@ Examples:
         return;
       }
       printTable(
-        ["ID", "Name", "Severity", "Status", "Phase"],
+        ["ID", "Name", "Severity", "Status"],
         result.items.map((f) => [
           f.id,
           truncate(f.finding_name, 40),
           severityColor(f.impact_level),
-          f.status,
-          f.scan_phase
+          f.status
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors6.default.dim(`
+        console.log(import_picocolors7.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -10515,7 +10606,6 @@ Examples:
           ["Severity", severityColor(detail.impact_level)],
           ["Status", detail.status],
           ["Verification", detail.verification_status],
-          ["Phase", detail.scan_phase],
           ["Description", truncate(detail.finding_description, 60)],
           ["Solution", truncate(detail.finding_solution, 60)],
           ["Created", detail.created_at]
@@ -10525,7 +10615,7 @@ Examples:
       handleError(error);
     }
   });
-  finding.command("update").description("Update finding status").argument("<id>", "Finding ID").requiredOption("--status <status>", "New status: open, fixed, false_positive, investigating, wont_fix").addHelpText("after", `
+  finding.command("update").description("Update finding status").argument("<id>", "Finding ID").requiredOption("--status <status>", "New status: open, fixed, false_positive, accepted_risk, resolved").addHelpText("after", `
 Examples:
   $ kinosec finding update abc123 --status false_positive
   $ kinosec finding update abc123 --status fixed`).action(async (id, options) => {
@@ -10572,7 +10662,7 @@ Examples:
 }
 
 // src/commands/report.ts
-var import_picocolors7 = __toESM(require_picocolors(), 1);
+var import_picocolors8 = __toESM(require_picocolors(), 1);
 function renderMarkdown(data) {
   const { scan, findings } = data;
   const lines = [];
@@ -10651,7 +10741,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors7.default.dim(`
+        console.log(import_picocolors8.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -10693,10 +10783,10 @@ Examples:
       handleError(error);
     }
   });
-  report.command("export").description("Export a scan report").requiredOption("--scan <id>", "Scan report ID").option("--format <format>", "Export format: json or markdown", "json").addHelpText("after", `
+  report.command("export").description("Export a report").argument("<id>", "Report ID").option("--format <format>", "Export format: json or markdown", "json").addHelpText("after", `
 Examples:
-  $ kinosec report export --scan abc123 --format json > report.json
-  $ kinosec report export --scan abc123 --format markdown > report.md`).action(async (options) => {
+  $ kinosec report export abc123 --format json > report.json
+  $ kinosec report export abc123 --format markdown > report.md`).action(async (id, options) => {
     const validFormats = ["json", "markdown"];
     if (!validFormats.includes(options.format)) {
       console.error(`Invalid format "${options.format}". Valid: ${validFormats.join(", ")}`);
@@ -10707,7 +10797,7 @@ Examples:
       const { token, apiUrl } = resolveToken(opts);
       const client = new KinoSecClient({ apiUrl, token });
       const result = await client.reports.export({
-        scan_report_id: options.scan,
+        scan_report_id: id,
         format: "json"
       });
       if (options.format === "markdown" && !(opts.json || opts.output === "json")) {
@@ -10722,7 +10812,7 @@ Examples:
 }
 
 // src/commands/token.ts
-var import_picocolors8 = __toESM(require_picocolors(), 1);
+var import_picocolors9 = __toESM(require_picocolors(), 1);
 function registerTokenCommand(program3) {
   const token = program3.command("token").description("Manage API tokens");
   token.command("list").description("List API tokens").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").addHelpText("after", `
@@ -10757,7 +10847,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors8.default.dim(`
+        console.log(import_picocolors9.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -10784,7 +10874,7 @@ Examples:
       }
       printSuccess(`Token created: ${result.name}`);
       console.log("");
-      console.log(import_picocolors8.default.bold("  Token: ") + result.token);
+      console.log(import_picocolors9.default.bold("  Token: ") + result.token);
       console.log("");
       printWarning("Save this token \u2014 it will not be shown again.");
       console.log(`  ID: ${result.id}`);
@@ -10817,16 +10907,16 @@ Examples:
 
 // src/cli.ts
 var program2 = new Command();
-program2.name("kinosec").description("KinoSec CLI \u2014 run pentests from your terminal").version("0.2.1", "-v, --version").option("--token <pat>", "API token (overrides KINOSEC_TOKEN and config)").option("--api-url <url>", "API base URL (overrides config)").option("--output <format>", "Output format: text or json", "text").option("--json", "Shorthand for --output json").option("--no-color", "Disable colors");
+program2.name("kinosec").description("KinoSec CLI \u2014 run pentests from your terminal").version("0.3.1", "-v, --version").option("--token <pat>", "API token (overrides KINOSEC_TOKEN and config)").option("--api-url <url>", "API base URL (overrides config)").option("--output <format>", "Output format: text or json", "text").option("--json", "Shorthand for --output json").option("--no-color", "Disable colors");
 registerAuthCommand(program2);
 registerConfigCommand(program2);
 registerMeCommand(program2);
-registerScanCommand(program2);
+registerPentestCommand(program2);
 registerAssetCommand(program2);
 registerFindingCommand(program2);
 registerReportCommand(program2);
 registerTokenCommand(program2);
-program2.parseAsync(process.argv).then(() => checkForUpdate("0.2.1")).catch(handleError);
+program2.parseAsync(process.argv).then(() => checkForUpdate("0.3.1")).catch(handleError);
 /*! Bundled license information:
 
 ky/distribution/index.js: