@kinosec/cli 0.3.3 → 0.5.0

package/dist/cli.js

@@ -7750,6 +7750,27 @@ function parseApiError(body, status) {
     requestId: typeof b.request_id === "string" ? b.request_id : "unknown"
   });
 }
+var CredentialsResource = class {
+  constructor(api) {
+    this.api = api;
+  }
+  api;
+  async set(assetId, params) {
+    return this.api.put(`v1/assets/${assetId}/credentials`, { json: params }).json();
+  }
+  async get(assetId) {
+    return this.api.get(`v1/assets/${assetId}/credentials`).json();
+  }
+  async remove(assetId) {
+    return this.api.delete(`v1/assets/${assetId}/credentials`).json();
+  }
+  async setTarget(assetId, params) {
+    return this.api.put(`v1/assets/${assetId}/credentials/target`, { json: params }).json();
+  }
+  async removeTarget(assetId) {
+    return this.api.delete(`v1/assets/${assetId}/credentials/target`).json();
+  }
+};
 var IDEMPOTENT_EXACT_PATHS = ["/v1/scans", "/v1/tokens"];
 var IDEMPOTENT_SUFFIXES = ["/cancel", "/retest"];
 function needsIdempotencyKey(method, path) {
@@ -7831,8 +7852,10 @@ var KinoSecClient = class {
 var AssetsResource = class {
   constructor(api) {
     this.api = api;
+    this.credentials = new CredentialsResource(api);
   }
   api;
+  credentials;
   async list(params = {}) {
     return this.api.get("v1/assets", { searchParams: buildSearchParams(params) }).json();
   }
@@ -9260,238 +9283,552 @@ Examples:
   });
 }
 
-// ../../node_modules/.pnpm/ora@8.2.0/node_modules/ora/index.js
-import process9 from "process";
+// src/commands/pentest.ts
+var import_picocolors6 = __toESM(require_picocolors(), 1);
 
-// ../../node_modules/.pnpm/chalk@5.6.2/node_modules/chalk/source/vendor/ansi-styles/index.js
-var ANSI_BACKGROUND_OFFSET2 = 10;
-var wrapAnsi162 = (offset = 0) => (code) => `\x1B[${code + offset}m`;
-var wrapAnsi2562 = (offset = 0) => (code) => `\x1B[${38 + offset};5;${code}m`;
-var wrapAnsi16m2 = (offset = 0) => (red, green, blue) => `\x1B[${38 + offset};2;${red};${green};${blue}m`;
-var styles2 = {
-  modifier: {
-    reset: [0, 0],
-    // 21 isn't widely supported and 22 does the same thing
-    bold: [1, 22],
-    dim: [2, 22],
-    italic: [3, 23],
-    underline: [4, 24],
-    overline: [53, 55],
-    inverse: [7, 27],
-    hidden: [8, 28],
-    strikethrough: [9, 29]
-  },
-  color: {
-    black: [30, 39],
-    red: [31, 39],
-    green: [32, 39],
-    yellow: [33, 39],
-    blue: [34, 39],
-    magenta: [35, 39],
-    cyan: [36, 39],
-    white: [37, 39],
-    // Bright color
-    blackBright: [90, 39],
-    gray: [90, 39],
-    // Alias of `blackBright`
-    grey: [90, 39],
-    // Alias of `blackBright`
-    redBright: [91, 39],
-    greenBright: [92, 39],
-    yellowBright: [93, 39],
-    blueBright: [94, 39],
-    magentaBright: [95, 39],
-    cyanBright: [96, 39],
-    whiteBright: [97, 39]
-  },
-  bgColor: {
-    bgBlack: [40, 49],
-    bgRed: [41, 49],
-    bgGreen: [42, 49],
-    bgYellow: [43, 49],
-    bgBlue: [44, 49],
-    bgMagenta: [45, 49],
-    bgCyan: [46, 49],
-    bgWhite: [47, 49],
-    // Bright color
-    bgBlackBright: [100, 49],
-    bgGray: [100, 49],
-    // Alias of `bgBlackBright`
-    bgGrey: [100, 49],
-    // Alias of `bgBlackBright`
-    bgRedBright: [101, 49],
-    bgGreenBright: [102, 49],
-    bgYellowBright: [103, 49],
-    bgBlueBright: [104, 49],
-    bgMagentaBright: [105, 49],
-    bgCyanBright: [106, 49],
-    bgWhiteBright: [107, 49]
-  }
-};
-var modifierNames2 = Object.keys(styles2.modifier);
-var foregroundColorNames2 = Object.keys(styles2.color);
-var backgroundColorNames2 = Object.keys(styles2.bgColor);
-var colorNames2 = [...foregroundColorNames2, ...backgroundColorNames2];
-function assembleStyles2() {
-  const codes = /* @__PURE__ */ new Map();
-  for (const [groupName, group] of Object.entries(styles2)) {
-    for (const [styleName, style] of Object.entries(group)) {
-      styles2[styleName] = {
-        open: `\x1B[${style[0]}m`,
-        close: `\x1B[${style[1]}m`
-      };
-      group[styleName] = styles2[styleName];
-      codes.set(style[0], style[1]);
-    }
-    Object.defineProperty(styles2, groupName, {
-      value: group,
-      enumerable: false
-    });
+// src/lib/confirm.ts
+var import_picocolors3 = __toESM(require_picocolors(), 1);
+import { createInterface } from "readline";
+async function confirmDestructive(message, yes) {
+  if (yes) return;
+  if (!isTTY()) {
+    console.error("Use --yes to confirm destructive operations in non-interactive mode.");
+    process.exit(2);
   }
-  Object.defineProperty(styles2, "codes", {
-    value: codes,
-    enumerable: false
-  });
-  styles2.color.close = "\x1B[39m";
-  styles2.bgColor.close = "\x1B[49m";
-  styles2.color.ansi = wrapAnsi162();
-  styles2.color.ansi256 = wrapAnsi2562();
-  styles2.color.ansi16m = wrapAnsi16m2();
-  styles2.bgColor.ansi = wrapAnsi162(ANSI_BACKGROUND_OFFSET2);
-  styles2.bgColor.ansi256 = wrapAnsi2562(ANSI_BACKGROUND_OFFSET2);
-  styles2.bgColor.ansi16m = wrapAnsi16m2(ANSI_BACKGROUND_OFFSET2);
-  Object.defineProperties(styles2, {
-    rgbToAnsi256: {
-      value(red, green, blue) {
-        if (red === green && green === blue) {
-          if (red < 8) {
-            return 16;
-          }
-          if (red > 248) {
-            return 231;
-          }
-          return Math.round((red - 8) / 247 * 24) + 232;
-        }
-        return 16 + 36 * Math.round(red / 255 * 5) + 6 * Math.round(green / 255 * 5) + Math.round(blue / 255 * 5);
-      },
-      enumerable: false
-    },
-    hexToRgb: {
-      value(hex) {
-        const matches = /[a-f\d]{6}|[a-f\d]{3}/i.exec(hex.toString(16));
-        if (!matches) {
-          return [0, 0, 0];
-        }
-        let [colorString] = matches;
-        if (colorString.length === 3) {
-          colorString = [...colorString].map((character) => character + character).join("");
-        }
-        const integer = Number.parseInt(colorString, 16);
-        return [
-          /* eslint-disable no-bitwise */
-          integer >> 16 & 255,
-          integer >> 8 & 255,
-          integer & 255
-          /* eslint-enable no-bitwise */
-        ];
-      },
-      enumerable: false
-    },
-    hexToAnsi256: {
-      value: (hex) => styles2.rgbToAnsi256(...styles2.hexToRgb(hex)),
-      enumerable: false
-    },
-    ansi256ToAnsi: {
-      value(code) {
-        if (code < 8) {
-          return 30 + code;
-        }
-        if (code < 16) {
-          return 90 + (code - 8);
-        }
-        let red;
-        let green;
-        let blue;
-        if (code >= 232) {
-          red = ((code - 232) * 10 + 8) / 255;
-          green = red;
-          blue = red;
-        } else {
-          code -= 16;
-          const remainder = code % 36;
-          red = Math.floor(code / 36) / 5;
-          green = Math.floor(remainder / 6) / 5;
-          blue = remainder % 6 / 5;
-        }
-        const value = Math.max(red, green, blue) * 2;
-        if (value === 0) {
-          return 30;
-        }
-        let result = 30 + (Math.round(blue) << 2 | Math.round(green) << 1 | Math.round(red));
-        if (value === 2) {
-          result += 60;
-        }
-        return result;
-      },
-      enumerable: false
-    },
-    rgbToAnsi: {
-      value: (red, green, blue) => styles2.ansi256ToAnsi(styles2.rgbToAnsi256(red, green, blue)),
-      enumerable: false
-    },
-    hexToAnsi: {
-      value: (hex) => styles2.ansi256ToAnsi(styles2.hexToAnsi256(hex)),
-      enumerable: false
-    }
+  const rl = createInterface({ input: process.stdin, output: process.stderr });
+  const answer = await new Promise((resolve) => {
+    rl.question(`${message} (y/N) `, resolve);
   });
-  return styles2;
-}
-var ansiStyles2 = assembleStyles2();
-var ansi_styles_default2 = ansiStyles2;
-
-// ../../node_modules/.pnpm/chalk@5.6.2/node_modules/chalk/source/vendor/supports-color/index.js
-import process2 from "process";
-import os from "os";
-import tty from "tty";
-function hasFlag(flag, argv = globalThis.Deno ? globalThis.Deno.args : process2.argv) {
-  const prefix = flag.startsWith("-") ? "" : flag.length === 1 ? "-" : "--";
-  const position = argv.indexOf(prefix + flag);
-  const terminatorPosition = argv.indexOf("--");
-  return position !== -1 && (terminatorPosition === -1 || position < terminatorPosition);
-}
-var { env } = process2;
-var flagForceColor;
-if (hasFlag("no-color") || hasFlag("no-colors") || hasFlag("color=false") || hasFlag("color=never")) {
-  flagForceColor = 0;
-} else if (hasFlag("color") || hasFlag("colors") || hasFlag("color=true") || hasFlag("color=always")) {
-  flagForceColor = 1;
-}
-function envForceColor() {
-  if ("FORCE_COLOR" in env) {
-    if (env.FORCE_COLOR === "true") {
-      return 1;
-    }
-    if (env.FORCE_COLOR === "false") {
-      return 0;
-    }
-    return env.FORCE_COLOR.length === 0 ? 1 : Math.min(Number.parseInt(env.FORCE_COLOR, 10), 3);
+  rl.close();
+  if (answer.toLowerCase() !== "y") {
+    console.log("Cancelled.");
+    process.exit(0);
   }
 }
-function translateLevel(level) {
-  if (level === 0) {
-    return false;
+async function confirmAuthorization(target, yes) {
+  if (yes) return;
+  if (!isTTY()) {
+    console.error("Use --yes to accept authorization terms in non-interactive mode.");
+    process.exit(2);
   }
-  return {
-    level,
-    hasBasic: true,
-    has256: level >= 2,
-    has16m: level >= 3
-  };
-}
-function _supportsColor(haveStream, { streamIsTTY, sniffFlags = true } = {}) {
-  const noFlagForceColor = envForceColor();
-  if (noFlagForceColor !== void 0) {
-    flagForceColor = noFlagForceColor;
+  const warning = import_picocolors3.default.yellow("\u26A0");
+  console.error(`
+${warning}  ${import_picocolors3.default.bold("Authorization Required")}
+
+Penetration testing without proper authorization is illegal
+and may result in criminal prosecution.
+
+${import_picocolors3.default.bold("Target:")} ${target}
+
+By proceeding, you confirm that:
+  ${import_picocolors3.default.dim("\u2022")} You own or have explicit written authorization to test this target
+  ${import_picocolors3.default.dim("\u2022")} You will comply with all applicable laws and regulations
+  ${import_picocolors3.default.dim("\u2022")} You will not use the results for illegal or malicious purposes
+  ${import_picocolors3.default.dim("\u2022")} You accept full legal responsibility for this pentest
+
+${import_picocolors3.default.dim("Unauthorized access to computer systems is a criminal offense under")}
+${import_picocolors3.default.dim("laws such as the CFAA (US), Computer Misuse Act (UK), and similar")}
+${import_picocolors3.default.dim("legislation worldwide. KinoSec bears no liability for unauthorized")}
+${import_picocolors3.default.dim("use of its services.")}
+`);
+  const rl = createInterface({ input: process.stdin, output: process.stderr });
+  const answer = await new Promise((resolve) => {
+    rl.question("Agree and continue? (y/N) ", resolve);
+  });
+  rl.close();
+  if (answer.toLowerCase() !== "y") {
+    console.log("Cancelled.");
+    process.exit(0);
+  }
+}
+
+// src/commands/schedule.ts
+var import_picocolors4 = __toESM(require_picocolors(), 1);
+var VALID_PATTERNS = ["once", "daily", "weekly", "biweekly", "monthly"];
+var VALID_MODES = ["quick", "full"];
+var DAY_NAMES = ["Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"];
+function extractTime(scheduledAt) {
+  if (!scheduledAt) return "\u2014";
+  const d = new Date(scheduledAt);
+  return d.toLocaleTimeString([], { hour: "2-digit", minute: "2-digit", hour12: false });
+}
+function formatPattern(s) {
+  const time = extractTime(s.scheduled_at);
+  switch (s.recurrence_pattern) {
+    case "once":
+      return `Once at ${time}`;
+    case "daily":
+      return `Daily at ${time}`;
+    case "weekly":
+      return `Weekly ${s.day_of_week !== null ? DAY_NAMES[s.day_of_week] : ""} at ${time}`;
+    case "biweekly":
+      return `Every 2 weeks ${s.day_of_week !== null ? DAY_NAMES[s.day_of_week] : ""} at ${time}`;
+    case "monthly":
+      return `Monthly day ${s.day_of_month ?? "?"} at ${time}`;
+    default:
+      return s.recurrence_pattern;
+  }
+}
+function registerScheduleCommand(pentestCmd) {
+  const schedule = pentestCmd.command("schedule").description("Manage scheduled pentests");
+  schedule.command("list").description("List scheduled pentests").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").option("--status <status>", "Filter: active, paused, or all", "all").addHelpText("after", `
+Examples:
+  $ kinosec pentest schedule list
+  $ kinosec pentest schedule list --status active --json`).action(async (options) => {
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const result = await client.schedules.list({
+        limit: parseInt(options.limit, 10),
+        cursor: options.cursor,
+        status: options.status
+      });
+      if (opts.json || opts.output === "json") {
+        printJson(result);
+        return;
+      }
+      if (result.items.length === 0) {
+        console.log("No scheduled pentests found.");
+        return;
+      }
+      printTable(
+        ["ID", "Target", "Mode", "Schedule", "Status", "Next Run"],
+        result.items.map((s) => [
+          s.id,
+          truncate(s.domain_or_ip, 25),
+          s.scan_mode,
+          formatPattern(s),
+          s.is_active ? import_picocolors4.default.green("active") : import_picocolors4.default.yellow("paused"),
+          s.next_scheduled_run ? new Date(s.next_scheduled_run).toLocaleString() : "\u2014"
+        ])
+      );
+      if (result.next_cursor) {
+        console.log(import_picocolors4.default.dim(`
+More results available. Use --cursor ${result.next_cursor}`));
+      }
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("get").description("Get schedule details").argument("<id>", "Schedule ID").addHelpText("after", `
+Examples:
+  $ kinosec pentest schedule get abc123
+  $ kinosec pentest schedule get abc123 --json`).action(async (id) => {
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const s = await client.schedules.get(id);
+      if (opts.json || opts.output === "json") {
+        printJson(s);
+        return;
+      }
+      printTable(
+        ["Field", "Value"],
+        [
+          ["ID", s.id],
+          ["Target", s.domain_or_ip],
+          ["Name", s.name],
+          ["Mode", s.scan_mode],
+          ["Schedule", formatPattern(s)],
+          ["Timezone", s.timezone],
+          ["Status", s.is_active ? "Active" : "Paused"],
+          ["Next Run", s.next_scheduled_run ?? "\u2014"],
+          ["Last Run", s.last_scheduled_run ?? "Never"],
+          ["Created", s.created_at]
+        ]
+      );
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("create").description("Create a scheduled pentest").requiredOption("--asset <id>", "Asset ID to scan").requiredOption("--pattern <pattern>", "Recurrence: once, daily, weekly, biweekly, monthly").option("--name <name>", "Schedule name").option("--mode <mode>", "Scan mode: quick or full", "full").option("--time <HH:MM>", "Time of day (24h format)", "09:00").option("--day-of-week <0-6>", "Day of week (0=Sun..6=Sat) for weekly/biweekly").option("--day-of-month <1-31>", "Day of month for monthly").option("--timezone <tz>", "Timezone (e.g. America/New_York)", Intl.DateTimeFormat().resolvedOptions().timeZone).addHelpText("after", `
+Examples:
+  $ kinosec pentest schedule create --asset abc123 --pattern weekly --day-of-week 1 --time 09:00
+  $ kinosec pentest schedule create --asset abc123 --pattern daily --mode quick --time 14:00
+  $ kinosec pentest schedule create --asset abc123 --pattern monthly --day-of-month 15 --time 03:00 --timezone UTC`).action(async (options) => {
+    if (!VALID_PATTERNS.includes(options.pattern)) {
+      console.error(`Invalid pattern "${options.pattern}". Must be: ${VALID_PATTERNS.join(", ")}`);
+      process.exit(2);
+    }
+    if (!VALID_MODES.includes(options.mode)) {
+      console.error(`Invalid mode "${options.mode}". Must be: ${VALID_MODES.join(", ")}`);
+      process.exit(2);
+    }
+    if ((options.pattern === "weekly" || options.pattern === "biweekly") && options.dayOfWeek === void 0) {
+      console.error(`--day-of-week is required for ${options.pattern} schedules.`);
+      process.exit(2);
+    }
+    if (options.pattern === "monthly" && options.dayOfMonth === void 0) {
+      console.error("--day-of-month is required for monthly schedules.");
+      process.exit(2);
+    }
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const params = {
+        asset_id: options.domain_or_ip,
+        name: options.name ?? `${options.pattern} ${options.mode} pentest`,
+        scan_mode: options.mode,
+        recurrence_pattern: options.pattern,
+        time_of_day: options.time,
+        timezone: options.timezone
+      };
+      if (options.dayOfWeek !== void 0) params.day_of_week = parseInt(options.dayOfWeek, 10);
+      if (options.dayOfMonth !== void 0) params.day_of_month = parseInt(options.dayOfMonth, 10);
+      const s = await client.schedules.create(params);
+      if (opts.json || opts.output === "json") {
+        printJson(s);
+        return;
+      }
+      printSuccess(`Schedule created: ${s.domain_or_ip}`);
+      console.log(`  ID: ${s.id}`);
+      console.log(`  Schedule: ${formatPattern(s)}`);
+      console.log(`  Next run: ${s.next_scheduled_run ?? "pending"}`);
+      console.log(`
+Manage: kinosec pentest schedule get ${s.id}`);
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("update").description("Update a schedule").argument("<id>", "Schedule ID").option("--pattern <pattern>", "Recurrence: once, daily, weekly, biweekly, monthly").option("--name <name>", "Schedule name").option("--mode <mode>", "Scan mode: quick or full").option("--time <HH:MM>", "Time of day (24h format)").option("--day-of-week <0-6>", "Day of week (0=Sun..6=Sat)").option("--day-of-month <1-31>", "Day of month").option("--timezone <tz>", "Timezone").addHelpText("after", `
+Examples:
+  $ kinosec pentest schedule update abc123 --pattern daily --time 14:00
+  $ kinosec pentest schedule update abc123 --mode quick`).action(async (id, options) => {
+    const params = {};
+    if (options.pattern) params.recurrence_pattern = options.pattern;
+    if (options.name) params.name = options.name;
+    if (options.mode) params.scan_mode = options.mode;
+    if (options.time) params.time_of_day = options.time;
+    if (options.dayOfWeek !== void 0) params.day_of_week = parseInt(options.dayOfWeek, 10);
+    if (options.dayOfMonth !== void 0) params.day_of_month = parseInt(options.dayOfMonth, 10);
+    if (options.timezone) params.timezone = options.timezone;
+    if (Object.keys(params).length === 0) {
+      console.error("Provide at least one field to update.");
+      process.exit(2);
+    }
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const s = await client.schedules.update(id, params);
+      if (opts.json || opts.output === "json") {
+        printJson(s);
+        return;
+      }
+      printSuccess(`Schedule updated: ${s.domain_or_ip}`);
+      console.log(`  Schedule: ${formatPattern(s)}`);
+      console.log(`  Next run: ${s.next_scheduled_run ?? "pending"}`);
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("delete").description("Delete a schedule").argument("<id>", "Schedule ID").option("-y, --yes", "Skip confirmation prompt").addHelpText("after", `
+Examples:
+  $ kinosec pentest schedule delete abc123
+  $ kinosec pentest schedule delete abc123 --yes`).action(async (id, options) => {
+    try {
+      await confirmDestructive(`Delete schedule ${id}?`, Boolean(options.yes));
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      await client.schedules.delete(id);
+      if (opts.json || opts.output === "json") {
+        printJson({ deleted: true, id });
+        return;
+      }
+      printSuccess(`Schedule ${id} deleted.`);
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("pause").description("Pause a scheduled pentest").argument("<id>", "Schedule ID").addHelpText("after", `
+Examples:
+  $ kinosec pentest schedule pause abc123`).action(async (id) => {
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const result = await client.schedules.pause(id);
+      if (opts.json || opts.output === "json") {
+        printJson(result);
+        return;
+      }
+      printSuccess("Schedule paused.");
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("resume").description("Resume a paused schedule").argument("<id>", "Schedule ID").addHelpText("after", `
+Examples:
+  $ kinosec pentest schedule resume abc123`).action(async (id) => {
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const result = await client.schedules.resume(id);
+      if (opts.json || opts.output === "json") {
+        printJson(result);
+        return;
+      }
+      printSuccess("Schedule resumed.");
+      if (result.next_scheduled_run) {
+        console.log(`  Next run: ${new Date(result.next_scheduled_run).toLocaleString()}`);
+      }
+    } catch (error) {
+      handleError(error);
+    }
+  });
+}
+
+// src/lib/watch.ts
+var import_picocolors5 = __toESM(require_picocolors(), 1);
+
+// ../../node_modules/.pnpm/is-unicode-supported@2.1.0/node_modules/is-unicode-supported/index.js
+import process2 from "process";
+function isUnicodeSupported() {
+  const { env: env2 } = process2;
+  const { TERM, TERM_PROGRAM } = env2;
+  if (process2.platform !== "win32") {
+    return TERM !== "linux";
+  }
+  return Boolean(env2.WT_SESSION) || Boolean(env2.TERMINUS_SUBLIME) || env2.ConEmuTask === "{cmd::Cmder}" || TERM_PROGRAM === "Terminus-Sublime" || TERM_PROGRAM === "vscode" || TERM === "xterm-256color" || TERM === "alacritty" || TERM === "rxvt-unicode" || TERM === "rxvt-unicode-256color" || env2.TERMINAL_EMULATOR === "JetBrains-JediTerm";
+}
+
+// ../../node_modules/.pnpm/ora@8.2.0/node_modules/ora/index.js
+import process9 from "process";
+
+// ../../node_modules/.pnpm/chalk@5.6.2/node_modules/chalk/source/vendor/ansi-styles/index.js
+var ANSI_BACKGROUND_OFFSET2 = 10;
+var wrapAnsi162 = (offset = 0) => (code) => `\x1B[${code + offset}m`;
+var wrapAnsi2562 = (offset = 0) => (code) => `\x1B[${38 + offset};5;${code}m`;
+var wrapAnsi16m2 = (offset = 0) => (red, green, blue) => `\x1B[${38 + offset};2;${red};${green};${blue}m`;
+var styles2 = {
+  modifier: {
+    reset: [0, 0],
+    // 21 isn't widely supported and 22 does the same thing
+    bold: [1, 22],
+    dim: [2, 22],
+    italic: [3, 23],
+    underline: [4, 24],
+    overline: [53, 55],
+    inverse: [7, 27],
+    hidden: [8, 28],
+    strikethrough: [9, 29]
+  },
+  color: {
+    black: [30, 39],
+    red: [31, 39],
+    green: [32, 39],
+    yellow: [33, 39],
+    blue: [34, 39],
+    magenta: [35, 39],
+    cyan: [36, 39],
+    white: [37, 39],
+    // Bright color
+    blackBright: [90, 39],
+    gray: [90, 39],
+    // Alias of `blackBright`
+    grey: [90, 39],
+    // Alias of `blackBright`
+    redBright: [91, 39],
+    greenBright: [92, 39],
+    yellowBright: [93, 39],
+    blueBright: [94, 39],
+    magentaBright: [95, 39],
+    cyanBright: [96, 39],
+    whiteBright: [97, 39]
+  },
+  bgColor: {
+    bgBlack: [40, 49],
+    bgRed: [41, 49],
+    bgGreen: [42, 49],
+    bgYellow: [43, 49],
+    bgBlue: [44, 49],
+    bgMagenta: [45, 49],
+    bgCyan: [46, 49],
+    bgWhite: [47, 49],
+    // Bright color
+    bgBlackBright: [100, 49],
+    bgGray: [100, 49],
+    // Alias of `bgBlackBright`
+    bgGrey: [100, 49],
+    // Alias of `bgBlackBright`
+    bgRedBright: [101, 49],
+    bgGreenBright: [102, 49],
+    bgYellowBright: [103, 49],
+    bgBlueBright: [104, 49],
+    bgMagentaBright: [105, 49],
+    bgCyanBright: [106, 49],
+    bgWhiteBright: [107, 49]
+  }
+};
+var modifierNames2 = Object.keys(styles2.modifier);
+var foregroundColorNames2 = Object.keys(styles2.color);
+var backgroundColorNames2 = Object.keys(styles2.bgColor);
+var colorNames2 = [...foregroundColorNames2, ...backgroundColorNames2];
+function assembleStyles2() {
+  const codes = /* @__PURE__ */ new Map();
+  for (const [groupName, group] of Object.entries(styles2)) {
+    for (const [styleName, style] of Object.entries(group)) {
+      styles2[styleName] = {
+        open: `\x1B[${style[0]}m`,
+        close: `\x1B[${style[1]}m`
+      };
+      group[styleName] = styles2[styleName];
+      codes.set(style[0], style[1]);
+    }
+    Object.defineProperty(styles2, groupName, {
+      value: group,
+      enumerable: false
+    });
+  }
+  Object.defineProperty(styles2, "codes", {
+    value: codes,
+    enumerable: false
+  });
+  styles2.color.close = "\x1B[39m";
+  styles2.bgColor.close = "\x1B[49m";
+  styles2.color.ansi = wrapAnsi162();
+  styles2.color.ansi256 = wrapAnsi2562();
+  styles2.color.ansi16m = wrapAnsi16m2();
+  styles2.bgColor.ansi = wrapAnsi162(ANSI_BACKGROUND_OFFSET2);
+  styles2.bgColor.ansi256 = wrapAnsi2562(ANSI_BACKGROUND_OFFSET2);
+  styles2.bgColor.ansi16m = wrapAnsi16m2(ANSI_BACKGROUND_OFFSET2);
+  Object.defineProperties(styles2, {
+    rgbToAnsi256: {
+      value(red, green, blue) {
+        if (red === green && green === blue) {
+          if (red < 8) {
+            return 16;
+          }
+          if (red > 248) {
+            return 231;
+          }
+          return Math.round((red - 8) / 247 * 24) + 232;
+        }
+        return 16 + 36 * Math.round(red / 255 * 5) + 6 * Math.round(green / 255 * 5) + Math.round(blue / 255 * 5);
+      },
+      enumerable: false
+    },
+    hexToRgb: {
+      value(hex) {
+        const matches = /[a-f\d]{6}|[a-f\d]{3}/i.exec(hex.toString(16));
+        if (!matches) {
+          return [0, 0, 0];
+        }
+        let [colorString] = matches;
+        if (colorString.length === 3) {
+          colorString = [...colorString].map((character) => character + character).join("");
+        }
+        const integer = Number.parseInt(colorString, 16);
+        return [
+          /* eslint-disable no-bitwise */
+          integer >> 16 & 255,
+          integer >> 8 & 255,
+          integer & 255
+          /* eslint-enable no-bitwise */
+        ];
+      },
+      enumerable: false
+    },
+    hexToAnsi256: {
+      value: (hex) => styles2.rgbToAnsi256(...styles2.hexToRgb(hex)),
+      enumerable: false
+    },
+    ansi256ToAnsi: {
+      value(code) {
+        if (code < 8) {
+          return 30 + code;
+        }
+        if (code < 16) {
+          return 90 + (code - 8);
+        }
+        let red;
+        let green;
+        let blue;
+        if (code >= 232) {
+          red = ((code - 232) * 10 + 8) / 255;
+          green = red;
+          blue = red;
+        } else {
+          code -= 16;
+          const remainder = code % 36;
+          red = Math.floor(code / 36) / 5;
+          green = Math.floor(remainder / 6) / 5;
+          blue = remainder % 6 / 5;
+        }
+        const value = Math.max(red, green, blue) * 2;
+        if (value === 0) {
+          return 30;
+        }
+        let result = 30 + (Math.round(blue) << 2 | Math.round(green) << 1 | Math.round(red));
+        if (value === 2) {
+          result += 60;
+        }
+        return result;
+      },
+      enumerable: false
+    },
+    rgbToAnsi: {
+      value: (red, green, blue) => styles2.ansi256ToAnsi(styles2.rgbToAnsi256(red, green, blue)),
+      enumerable: false
+    },
+    hexToAnsi: {
+      value: (hex) => styles2.ansi256ToAnsi(styles2.hexToAnsi256(hex)),
+      enumerable: false
+    }
+  });
+  return styles2;
+}
+var ansiStyles2 = assembleStyles2();
+var ansi_styles_default2 = ansiStyles2;
+
+// ../../node_modules/.pnpm/chalk@5.6.2/node_modules/chalk/source/vendor/supports-color/index.js
+import process3 from "process";
+import os from "os";
+import tty from "tty";
+function hasFlag(flag, argv = globalThis.Deno ? globalThis.Deno.args : process3.argv) {
+  const prefix = flag.startsWith("-") ? "" : flag.length === 1 ? "-" : "--";
+  const position = argv.indexOf(prefix + flag);
+  const terminatorPosition = argv.indexOf("--");
+  return position !== -1 && (terminatorPosition === -1 || position < terminatorPosition);
+}
+var { env } = process3;
+var flagForceColor;
+if (hasFlag("no-color") || hasFlag("no-colors") || hasFlag("color=false") || hasFlag("color=never")) {
+  flagForceColor = 0;
+} else if (hasFlag("color") || hasFlag("colors") || hasFlag("color=true") || hasFlag("color=always")) {
+  flagForceColor = 1;
+}
+function envForceColor() {
+  if ("FORCE_COLOR" in env) {
+    if (env.FORCE_COLOR === "true") {
+      return 1;
+    }
+    if (env.FORCE_COLOR === "false") {
+      return 0;
+    }
+    return env.FORCE_COLOR.length === 0 ? 1 : Math.min(Number.parseInt(env.FORCE_COLOR, 10), 3);
+  }
+}
+function translateLevel(level) {
+  if (level === 0) {
+    return false;
+  }
+  return {
+    level,
+    hasBasic: true,
+    has256: level >= 2,
+    has16m: level >= 3
+  };
+}
+function _supportsColor(haveStream, { streamIsTTY, sniffFlags = true } = {}) {
+  const noFlagForceColor = envForceColor();
+  if (noFlagForceColor !== void 0) {
+    flagForceColor = noFlagForceColor;
   }
   const forceColor = sniffFlags ? flagForceColor : noFlagForceColor;
   if (forceColor === 0) {
@@ -9515,7 +9852,7 @@ function _supportsColor(haveStream, { streamIsTTY, sniffFlags = true } = {}) {
   if (env.TERM === "dumb") {
     return min;
   }
-  if (process2.platform === "win32") {
+  if (process3.platform === "win32") {
     const osRelease = os.release().split(".");
     if (Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) {
       return Number(osRelease[2]) >= 14931 ? 3 : 2;
@@ -9759,10 +10096,10 @@ var chalkStderr = createChalk({ level: stderrColor ? stderrColor.level : 0 });
 var source_default = chalk;
 
 // ../../node_modules/.pnpm/cli-cursor@5.0.0/node_modules/cli-cursor/index.js
-import process5 from "process";
+import process6 from "process";
 
 // ../../node_modules/.pnpm/restore-cursor@5.1.0/node_modules/restore-cursor/index.js
-import process4 from "process";
+import process5 from "process";
 
 // ../../node_modules/.pnpm/mimic-function@5.0.1/node_modules/mimic-function/index.js
 var copyProperty = (to, from, property, ignoreNonConfigurable) => {
@@ -9951,7 +10288,7 @@ var SignalExit = class extends SignalExitBase {
   // "SIGHUP" throws an `ENOSYS` error on Windows,
   // so use a supported signal instead
   /* c8 ignore start */
-  #hupSig = process3.platform === "win32" ? "SIGINT" : "SIGHUP";
+  #hupSig = process4.platform === "win32" ? "SIGINT" : "SIGHUP";
   /* c8 ignore stop */
   #emitter = new Emitter();
   #process;
@@ -10062,7 +10399,7 @@ var SignalExit = class extends SignalExitBase {
     }
   }
 };
-var process3 = globalThis.process;
+var process4 = globalThis.process;
 var {
   /**
    * Called when the process is exiting, whether via signal, explicit
@@ -10090,10 +10427,10 @@ var {
    * @internal
    */
   unload
-} = signalExitWrap(processOk(process3) ? new SignalExit(process3) : new SignalExitFallback());
+} = signalExitWrap(processOk(process4) ? new SignalExit(process4) : new SignalExitFallback());
 
 // ../../node_modules/.pnpm/restore-cursor@5.1.0/node_modules/restore-cursor/index.js
-var terminal = process4.stderr.isTTY ? process4.stderr : process4.stdout.isTTY ? process4.stdout : void 0;
+var terminal = process5.stderr.isTTY ? process5.stderr : process5.stdout.isTTY ? process5.stdout : void 0;
 var restoreCursor = terminal ? onetime_default(() => {
   onExit(() => {
     terminal.write("\x1B[?25h");
@@ -10105,14 +10442,14 @@ var restore_cursor_default = restoreCursor;
 // ../../node_modules/.pnpm/cli-cursor@5.0.0/node_modules/cli-cursor/index.js
 var isHidden = false;
 var cliCursor = {};
-cliCursor.show = (writableStream = process5.stderr) => {
+cliCursor.show = (writableStream = process6.stderr) => {
   if (!writableStream.isTTY) {
     return;
   }
   isHidden = false;
   writableStream.write("\x1B[?25h");
 };
-cliCursor.hide = (writableStream = process5.stderr) => {
+cliCursor.hide = (writableStream = process6.stderr) => {
   if (!writableStream.isTTY) {
     return;
   }
@@ -10136,12 +10473,12 @@ var cli_cursor_default = cliCursor;
 var import_cli_spinners = __toESM(require_cli_spinners(), 1);
 
 // ../../node_modules/.pnpm/is-unicode-supported@1.3.0/node_modules/is-unicode-supported/index.js
-import process6 from "process";
-function isUnicodeSupported() {
-  if (process6.platform !== "win32") {
-    return process6.env.TERM !== "linux";
+import process7 from "process";
+function isUnicodeSupported2() {
+  if (process7.platform !== "win32") {
+    return process7.env.TERM !== "linux";
   }
-  return Boolean(process6.env.CI) || Boolean(process6.env.WT_SESSION) || Boolean(process6.env.TERMINUS_SUBLIME) || process6.env.ConEmuTask === "{cmd::Cmder}" || process6.env.TERM_PROGRAM === "Terminus-Sublime" || process6.env.TERM_PROGRAM === "vscode" || process6.env.TERM === "xterm-256color" || process6.env.TERM === "alacritty" || process6.env.TERMINAL_EMULATOR === "JetBrains-JediTerm";
+  return Boolean(process7.env.CI) || Boolean(process7.env.WT_SESSION) || Boolean(process7.env.TERMINUS_SUBLIME) || process7.env.ConEmuTask === "{cmd::Cmder}" || process7.env.TERM_PROGRAM === "Terminus-Sublime" || process7.env.TERM_PROGRAM === "vscode" || process7.env.TERM === "xterm-256color" || process7.env.TERM === "alacritty" || process7.env.TERMINAL_EMULATOR === "JetBrains-JediTerm";
 }
 
 // ../../node_modules/.pnpm/log-symbols@6.0.0/node_modules/log-symbols/index.js
@@ -10157,7 +10494,7 @@ var fallback = {
   warning: source_default.yellow("\u203C"),
   error: source_default.red("\xD7")
 };
-var logSymbols = isUnicodeSupported() ? main : fallback;
+var logSymbols = isUnicodeSupported2() ? main : fallback;
 var log_symbols_default = logSymbols;
 
 // ../../node_modules/.pnpm/emoji-regex@10.6.0/node_modules/emoji-regex/index.mjs
@@ -10220,17 +10557,6 @@ function isInteractive({ stream = process.stdout } = {}) {
   );
 }
 
-// ../../node_modules/.pnpm/is-unicode-supported@2.1.0/node_modules/is-unicode-supported/index.js
-import process7 from "process";
-function isUnicodeSupported2() {
-  const { env: env2 } = process7;
-  const { TERM, TERM_PROGRAM } = env2;
-  if (process7.platform !== "win32") {
-    return TERM !== "linux";
-  }
-  return Boolean(env2.WT_SESSION) || Boolean(env2.TERMINUS_SUBLIME) || env2.ConEmuTask === "{cmd::Cmder}" || TERM_PROGRAM === "Terminus-Sublime" || TERM_PROGRAM === "vscode" || TERM === "xterm-256color" || TERM === "alacritty" || TERM === "rxvt-unicode" || TERM === "rxvt-unicode-256color" || env2.TERMINAL_EMULATOR === "JetBrains-JediTerm";
-}
-
 // ../../node_modules/.pnpm/stdin-discarder@0.2.2/node_modules/stdin-discarder/index.js
 import process8 from "process";
 var ASCII_ETX_CODE = 3;
@@ -10324,548 +10650,404 @@ var Ora = class {
       this._isEnabled = this.#isEnabled;
       Object.defineProperty(this, "_linesToClear", {
         get() {
-          return this.#linesToClear;
-        },
-        set(newValue) {
-          this.#linesToClear = newValue;
-        }
-      });
-      Object.defineProperty(this, "_frameIndex", {
-        get() {
-          return this.#frameIndex;
-        }
-      });
-      Object.defineProperty(this, "_lineCount", {
-        get() {
-          return this.#lineCount;
-        }
-      });
-    }
-  }
-  get indent() {
-    return this.#indent;
-  }
-  set indent(indent = 0) {
-    if (!(indent >= 0 && Number.isInteger(indent))) {
-      throw new Error("The `indent` option must be an integer from 0 and up");
-    }
-    this.#indent = indent;
-    this.#updateLineCount();
-  }
-  get interval() {
-    return this.#initialInterval ?? this.#spinner.interval ?? 100;
-  }
-  get spinner() {
-    return this.#spinner;
-  }
-  set spinner(spinner) {
-    this.#frameIndex = -1;
-    this.#initialInterval = void 0;
-    if (typeof spinner === "object") {
-      if (spinner.frames === void 0) {
-        throw new Error("The given spinner must have a `frames` property");
-      }
-      this.#spinner = spinner;
-    } else if (!isUnicodeSupported2()) {
-      this.#spinner = import_cli_spinners.default.line;
-    } else if (spinner === void 0) {
-      this.#spinner = import_cli_spinners.default.dots;
-    } else if (spinner !== "default" && import_cli_spinners.default[spinner]) {
-      this.#spinner = import_cli_spinners.default[spinner];
-    } else {
-      throw new Error(`There is no built-in spinner named '${spinner}'. See https://github.com/sindresorhus/cli-spinners/blob/main/spinners.json for a full list.`);
-    }
-  }
-  get text() {
-    return this.#text;
-  }
-  set text(value = "") {
-    this.#text = value;
-    this.#updateLineCount();
-  }
-  get prefixText() {
-    return this.#prefixText;
-  }
-  set prefixText(value = "") {
-    this.#prefixText = value;
-    this.#updateLineCount();
-  }
-  get suffixText() {
-    return this.#suffixText;
-  }
-  set suffixText(value = "") {
-    this.#suffixText = value;
-    this.#updateLineCount();
-  }
-  get isSpinning() {
-    return this.#id !== void 0;
-  }
-  #getFullPrefixText(prefixText = this.#prefixText, postfix = " ") {
-    if (typeof prefixText === "string" && prefixText !== "") {
-      return prefixText + postfix;
-    }
-    if (typeof prefixText === "function") {
-      return prefixText() + postfix;
-    }
-    return "";
-  }
-  #getFullSuffixText(suffixText = this.#suffixText, prefix = " ") {
-    if (typeof suffixText === "string" && suffixText !== "") {
-      return prefix + suffixText;
-    }
-    if (typeof suffixText === "function") {
-      return prefix + suffixText();
-    }
-    return "";
-  }
-  #updateLineCount() {
-    const columns = this.#stream.columns ?? 80;
-    const fullPrefixText = this.#getFullPrefixText(this.#prefixText, "-");
-    const fullSuffixText = this.#getFullSuffixText(this.#suffixText, "-");
-    const fullText = " ".repeat(this.#indent) + fullPrefixText + "--" + this.#text + "--" + fullSuffixText;
-    this.#lineCount = 0;
-    for (const line of stripAnsi(fullText).split("\n")) {
-      this.#lineCount += Math.max(1, Math.ceil(stringWidth2(line, { countAnsiEscapeCodes: true }) / columns));
-    }
-  }
-  get isEnabled() {
-    return this.#isEnabled && !this.#isSilent;
-  }
-  set isEnabled(value) {
-    if (typeof value !== "boolean") {
-      throw new TypeError("The `isEnabled` option must be a boolean");
-    }
-    this.#isEnabled = value;
-  }
-  get isSilent() {
-    return this.#isSilent;
-  }
-  set isSilent(value) {
-    if (typeof value !== "boolean") {
-      throw new TypeError("The `isSilent` option must be a boolean");
-    }
-    this.#isSilent = value;
-  }
-  frame() {
-    const now = Date.now();
-    if (this.#frameIndex === -1 || now - this.#lastSpinnerFrameTime >= this.interval) {
-      this.#frameIndex = ++this.#frameIndex % this.#spinner.frames.length;
-      this.#lastSpinnerFrameTime = now;
-    }
-    const { frames } = this.#spinner;
-    let frame = frames[this.#frameIndex];
-    if (this.color) {
-      frame = source_default[this.color](frame);
-    }
-    const fullPrefixText = typeof this.#prefixText === "string" && this.#prefixText !== "" ? this.#prefixText + " " : "";
-    const fullText = typeof this.text === "string" ? " " + this.text : "";
-    const fullSuffixText = typeof this.#suffixText === "string" && this.#suffixText !== "" ? " " + this.#suffixText : "";
-    return fullPrefixText + frame + fullText + fullSuffixText;
-  }
-  clear() {
-    if (!this.#isEnabled || !this.#stream.isTTY) {
-      return this;
-    }
-    this.#stream.cursorTo(0);
-    for (let index = 0; index < this.#linesToClear; index++) {
-      if (index > 0) {
-        this.#stream.moveCursor(0, -1);
-      }
-      this.#stream.clearLine(1);
-    }
-    if (this.#indent || this.lastIndent !== this.#indent) {
-      this.#stream.cursorTo(this.#indent);
-    }
-    this.lastIndent = this.#indent;
-    this.#linesToClear = 0;
-    return this;
-  }
-  render() {
-    if (this.#isSilent) {
-      return this;
-    }
-    this.clear();
-    this.#stream.write(this.frame());
-    this.#linesToClear = this.#lineCount;
-    return this;
-  }
-  start(text) {
-    if (text) {
-      this.text = text;
-    }
-    if (this.#isSilent) {
-      return this;
-    }
-    if (!this.#isEnabled) {
-      if (this.text) {
-        this.#stream.write(`- ${this.text}
-`);
-      }
-      return this;
-    }
-    if (this.isSpinning) {
-      return this;
-    }
-    if (this.#options.hideCursor) {
-      cli_cursor_default.hide(this.#stream);
-    }
-    if (this.#options.discardStdin && process9.stdin.isTTY) {
-      this.#isDiscardingStdin = true;
-      stdin_discarder_default.start();
+          return this.#linesToClear;
+        },
+        set(newValue) {
+          this.#linesToClear = newValue;
+        }
+      });
+      Object.defineProperty(this, "_frameIndex", {
+        get() {
+          return this.#frameIndex;
+        }
+      });
+      Object.defineProperty(this, "_lineCount", {
+        get() {
+          return this.#lineCount;
+        }
+      });
     }
-    this.render();
-    this.#id = setInterval(this.render.bind(this), this.interval);
-    return this;
   }
-  stop() {
-    if (!this.#isEnabled) {
-      return this;
-    }
-    clearInterval(this.#id);
-    this.#id = void 0;
-    this.#frameIndex = 0;
-    this.clear();
-    if (this.#options.hideCursor) {
-      cli_cursor_default.show(this.#stream);
+  get indent() {
+    return this.#indent;
+  }
+  set indent(indent = 0) {
+    if (!(indent >= 0 && Number.isInteger(indent))) {
+      throw new Error("The `indent` option must be an integer from 0 and up");
     }
-    if (this.#options.discardStdin && process9.stdin.isTTY && this.#isDiscardingStdin) {
-      stdin_discarder_default.stop();
-      this.#isDiscardingStdin = false;
+    this.#indent = indent;
+    this.#updateLineCount();
+  }
+  get interval() {
+    return this.#initialInterval ?? this.#spinner.interval ?? 100;
+  }
+  get spinner() {
+    return this.#spinner;
+  }
+  set spinner(spinner) {
+    this.#frameIndex = -1;
+    this.#initialInterval = void 0;
+    if (typeof spinner === "object") {
+      if (spinner.frames === void 0) {
+        throw new Error("The given spinner must have a `frames` property");
+      }
+      this.#spinner = spinner;
+    } else if (!isUnicodeSupported()) {
+      this.#spinner = import_cli_spinners.default.line;
+    } else if (spinner === void 0) {
+      this.#spinner = import_cli_spinners.default.dots;
+    } else if (spinner !== "default" && import_cli_spinners.default[spinner]) {
+      this.#spinner = import_cli_spinners.default[spinner];
+    } else {
+      throw new Error(`There is no built-in spinner named '${spinner}'. See https://github.com/sindresorhus/cli-spinners/blob/main/spinners.json for a full list.`);
     }
-    return this;
   }
-  succeed(text) {
-    return this.stopAndPersist({ symbol: log_symbols_default.success, text });
+  get text() {
+    return this.#text;
   }
-  fail(text) {
-    return this.stopAndPersist({ symbol: log_symbols_default.error, text });
+  set text(value = "") {
+    this.#text = value;
+    this.#updateLineCount();
   }
-  warn(text) {
-    return this.stopAndPersist({ symbol: log_symbols_default.warning, text });
+  get prefixText() {
+    return this.#prefixText;
   }
-  info(text) {
-    return this.stopAndPersist({ symbol: log_symbols_default.info, text });
+  set prefixText(value = "") {
+    this.#prefixText = value;
+    this.#updateLineCount();
   }
-  stopAndPersist(options = {}) {
-    if (this.#isSilent) {
-      return this;
-    }
-    const prefixText = options.prefixText ?? this.#prefixText;
-    const fullPrefixText = this.#getFullPrefixText(prefixText, " ");
-    const symbolText = options.symbol ?? " ";
-    const text = options.text ?? this.text;
-    const separatorText = symbolText ? " " : "";
-    const fullText = typeof text === "string" ? separatorText + text : "";
-    const suffixText = options.suffixText ?? this.#suffixText;
-    const fullSuffixText = this.#getFullSuffixText(suffixText, " ");
-    const textToWrite = fullPrefixText + symbolText + fullText + fullSuffixText + "\n";
-    this.stop();
-    this.#stream.write(textToWrite);
-    return this;
+  get suffixText() {
+    return this.#suffixText;
   }
-};
-function ora(options) {
-  return new Ora(options);
-}
-
-// src/commands/pentest.ts
-var import_picocolors5 = __toESM(require_picocolors(), 1);
-
-// src/lib/confirm.ts
-var import_picocolors3 = __toESM(require_picocolors(), 1);
-import { createInterface } from "readline";
-async function confirmDestructive(message, yes) {
-  if (yes) return;
-  if (!isTTY()) {
-    console.error("Use --yes to confirm destructive operations in non-interactive mode.");
-    process.exit(2);
+  set suffixText(value = "") {
+    this.#suffixText = value;
+    this.#updateLineCount();
   }
-  const rl = createInterface({ input: process.stdin, output: process.stderr });
-  const answer = await new Promise((resolve) => {
-    rl.question(`${message} (y/N) `, resolve);
-  });
-  rl.close();
-  if (answer.toLowerCase() !== "y") {
-    console.log("Cancelled.");
-    process.exit(0);
+  get isSpinning() {
+    return this.#id !== void 0;
   }
-}
-async function confirmAuthorization(target, yes) {
-  if (yes) return;
-  if (!isTTY()) {
-    console.error("Use --yes to accept authorization terms in non-interactive mode.");
-    process.exit(2);
+  #getFullPrefixText(prefixText = this.#prefixText, postfix = " ") {
+    if (typeof prefixText === "string" && prefixText !== "") {
+      return prefixText + postfix;
+    }
+    if (typeof prefixText === "function") {
+      return prefixText() + postfix;
+    }
+    return "";
   }
-  const warning = import_picocolors3.default.yellow("\u26A0");
-  console.error(`
-${warning}  ${import_picocolors3.default.bold("Authorization Required")}
-
-Penetration testing without proper authorization is illegal
-and may result in criminal prosecution.
-
-${import_picocolors3.default.bold("Target:")} ${target}
-
-By proceeding, you confirm that:
-  ${import_picocolors3.default.dim("\u2022")} You own or have explicit written authorization to test this target
-  ${import_picocolors3.default.dim("\u2022")} You will comply with all applicable laws and regulations
-  ${import_picocolors3.default.dim("\u2022")} You will not use the results for illegal or malicious purposes
-  ${import_picocolors3.default.dim("\u2022")} You accept full legal responsibility for this pentest
-
-${import_picocolors3.default.dim("Unauthorized access to computer systems is a criminal offense under")}
-${import_picocolors3.default.dim("laws such as the CFAA (US), Computer Misuse Act (UK), and similar")}
-${import_picocolors3.default.dim("legislation worldwide. KinoSec bears no liability for unauthorized")}
-${import_picocolors3.default.dim("use of its services.")}
-`);
-  const rl = createInterface({ input: process.stdin, output: process.stderr });
-  const answer = await new Promise((resolve) => {
-    rl.question("Agree and continue? (y/N) ", resolve);
-  });
-  rl.close();
-  if (answer.toLowerCase() !== "y") {
-    console.log("Cancelled.");
-    process.exit(0);
+  #getFullSuffixText(suffixText = this.#suffixText, prefix = " ") {
+    if (typeof suffixText === "string" && suffixText !== "") {
+      return prefix + suffixText;
+    }
+    if (typeof suffixText === "function") {
+      return prefix + suffixText();
+    }
+    return "";
   }
-}
-
-// src/commands/schedule.ts
-var import_picocolors4 = __toESM(require_picocolors(), 1);
-var VALID_PATTERNS = ["once", "daily", "weekly", "biweekly", "monthly"];
-var VALID_MODES = ["quick", "full"];
-var DAY_NAMES = ["Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"];
-function extractTime(scheduledAt) {
-  if (!scheduledAt) return "\u2014";
-  const d = new Date(scheduledAt);
-  return d.toLocaleTimeString([], { hour: "2-digit", minute: "2-digit", hour12: false });
-}
-function formatPattern(s) {
-  const time = extractTime(s.scheduled_at);
-  switch (s.recurrence_pattern) {
-    case "once":
-      return `Once at ${time}`;
-    case "daily":
-      return `Daily at ${time}`;
-    case "weekly":
-      return `Weekly ${s.day_of_week !== null ? DAY_NAMES[s.day_of_week] : ""} at ${time}`;
-    case "biweekly":
-      return `Every 2 weeks ${s.day_of_week !== null ? DAY_NAMES[s.day_of_week] : ""} at ${time}`;
-    case "monthly":
-      return `Monthly day ${s.day_of_month ?? "?"} at ${time}`;
-    default:
-      return s.recurrence_pattern;
+  #updateLineCount() {
+    const columns = this.#stream.columns ?? 80;
+    const fullPrefixText = this.#getFullPrefixText(this.#prefixText, "-");
+    const fullSuffixText = this.#getFullSuffixText(this.#suffixText, "-");
+    const fullText = " ".repeat(this.#indent) + fullPrefixText + "--" + this.#text + "--" + fullSuffixText;
+    this.#lineCount = 0;
+    for (const line of stripAnsi(fullText).split("\n")) {
+      this.#lineCount += Math.max(1, Math.ceil(stringWidth2(line, { countAnsiEscapeCodes: true }) / columns));
+    }
   }
-}
-function registerScheduleCommand(pentestCmd) {
-  const schedule = pentestCmd.command("schedule").description("Manage scheduled pentests");
-  schedule.command("list").description("List scheduled pentests").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").option("--status <status>", "Filter: active, paused, or all", "all").addHelpText("after", `
-Examples:
-  $ kinosec pentest schedule list
-  $ kinosec pentest schedule list --status active --json`).action(async (options) => {
-    try {
-      const opts = schedule.parent.parent.opts();
-      const { token, apiUrl } = resolveToken(opts);
-      const client = new KinoSecClient({ apiUrl, token });
-      const result = await client.schedules.list({
-        limit: parseInt(options.limit, 10),
-        cursor: options.cursor,
-        status: options.status
-      });
-      if (opts.json || opts.output === "json") {
-        printJson(result);
-        return;
-      }
-      if (result.items.length === 0) {
-        console.log("No scheduled pentests found.");
-        return;
-      }
-      printTable(
-        ["ID", "Target", "Mode", "Schedule", "Status", "Next Run"],
-        result.items.map((s) => [
-          s.id,
-          truncate(s.domain_or_ip, 25),
-          s.scan_mode,
-          formatPattern(s),
-          s.is_active ? import_picocolors4.default.green("active") : import_picocolors4.default.yellow("paused"),
-          s.next_scheduled_run ? new Date(s.next_scheduled_run).toLocaleString() : "\u2014"
-        ])
-      );
-      if (result.next_cursor) {
-        console.log(import_picocolors4.default.dim(`
-More results available. Use --cursor ${result.next_cursor}`));
-      }
-    } catch (error) {
-      handleError(error);
+  get isEnabled() {
+    return this.#isEnabled && !this.#isSilent;
+  }
+  set isEnabled(value) {
+    if (typeof value !== "boolean") {
+      throw new TypeError("The `isEnabled` option must be a boolean");
     }
-  });
-  schedule.command("get").description("Get schedule details").argument("<id>", "Schedule ID").addHelpText("after", `
-Examples:
-  $ kinosec pentest schedule get abc123
-  $ kinosec pentest schedule get abc123 --json`).action(async (id) => {
-    try {
-      const opts = schedule.parent.parent.opts();
-      const { token, apiUrl } = resolveToken(opts);
-      const client = new KinoSecClient({ apiUrl, token });
-      const s = await client.schedules.get(id);
-      if (opts.json || opts.output === "json") {
-        printJson(s);
-        return;
+    this.#isEnabled = value;
+  }
+  get isSilent() {
+    return this.#isSilent;
+  }
+  set isSilent(value) {
+    if (typeof value !== "boolean") {
+      throw new TypeError("The `isSilent` option must be a boolean");
+    }
+    this.#isSilent = value;
+  }
+  frame() {
+    const now = Date.now();
+    if (this.#frameIndex === -1 || now - this.#lastSpinnerFrameTime >= this.interval) {
+      this.#frameIndex = ++this.#frameIndex % this.#spinner.frames.length;
+      this.#lastSpinnerFrameTime = now;
+    }
+    const { frames } = this.#spinner;
+    let frame = frames[this.#frameIndex];
+    if (this.color) {
+      frame = source_default[this.color](frame);
+    }
+    const fullPrefixText = typeof this.#prefixText === "string" && this.#prefixText !== "" ? this.#prefixText + " " : "";
+    const fullText = typeof this.text === "string" ? " " + this.text : "";
+    const fullSuffixText = typeof this.#suffixText === "string" && this.#suffixText !== "" ? " " + this.#suffixText : "";
+    return fullPrefixText + frame + fullText + fullSuffixText;
+  }
+  clear() {
+    if (!this.#isEnabled || !this.#stream.isTTY) {
+      return this;
+    }
+    this.#stream.cursorTo(0);
+    for (let index = 0; index < this.#linesToClear; index++) {
+      if (index > 0) {
+        this.#stream.moveCursor(0, -1);
       }
-      printTable(
-        ["Field", "Value"],
-        [
-          ["ID", s.id],
-          ["Target", s.domain_or_ip],
-          ["Name", s.name],
-          ["Mode", s.scan_mode],
-          ["Schedule", formatPattern(s)],
-          ["Timezone", s.timezone],
-          ["Status", s.is_active ? "Active" : "Paused"],
-          ["Next Run", s.next_scheduled_run ?? "\u2014"],
-          ["Last Run", s.last_scheduled_run ?? "Never"],
-          ["Created", s.created_at]
-        ]
-      );
-    } catch (error) {
-      handleError(error);
+      this.#stream.clearLine(1);
     }
-  });
-  schedule.command("create").description("Create a scheduled pentest").requiredOption("--asset <id>", "Asset ID to scan").requiredOption("--pattern <pattern>", "Recurrence: once, daily, weekly, biweekly, monthly").option("--name <name>", "Schedule name").option("--mode <mode>", "Scan mode: quick or full", "full").option("--time <HH:MM>", "Time of day (24h format)", "09:00").option("--day-of-week <0-6>", "Day of week (0=Sun..6=Sat) for weekly/biweekly").option("--day-of-month <1-31>", "Day of month for monthly").option("--timezone <tz>", "Timezone (e.g. America/New_York)", Intl.DateTimeFormat().resolvedOptions().timeZone).addHelpText("after", `
-Examples:
-  $ kinosec pentest schedule create --asset abc123 --pattern weekly --day-of-week 1 --time 09:00
-  $ kinosec pentest schedule create --asset abc123 --pattern daily --mode quick --time 14:00
-  $ kinosec pentest schedule create --asset abc123 --pattern monthly --day-of-month 15 --time 03:00 --timezone UTC`).action(async (options) => {
-    if (!VALID_PATTERNS.includes(options.pattern)) {
-      console.error(`Invalid pattern "${options.pattern}". Must be: ${VALID_PATTERNS.join(", ")}`);
-      process.exit(2);
+    if (this.#indent || this.lastIndent !== this.#indent) {
+      this.#stream.cursorTo(this.#indent);
     }
-    if (!VALID_MODES.includes(options.mode)) {
-      console.error(`Invalid mode "${options.mode}". Must be: ${VALID_MODES.join(", ")}`);
-      process.exit(2);
+    this.lastIndent = this.#indent;
+    this.#linesToClear = 0;
+    return this;
+  }
+  render() {
+    if (this.#isSilent) {
+      return this;
     }
-    if ((options.pattern === "weekly" || options.pattern === "biweekly") && options.dayOfWeek === void 0) {
-      console.error(`--day-of-week is required for ${options.pattern} schedules.`);
-      process.exit(2);
+    this.clear();
+    this.#stream.write(this.frame());
+    this.#linesToClear = this.#lineCount;
+    return this;
+  }
+  start(text) {
+    if (text) {
+      this.text = text;
     }
-    if (options.pattern === "monthly" && options.dayOfMonth === void 0) {
-      console.error("--day-of-month is required for monthly schedules.");
-      process.exit(2);
+    if (this.#isSilent) {
+      return this;
     }
-    try {
-      const opts = schedule.parent.parent.opts();
-      const { token, apiUrl } = resolveToken(opts);
-      const client = new KinoSecClient({ apiUrl, token });
-      const params = {
-        asset_id: options.domain_or_ip,
-        name: options.name ?? `${options.pattern} ${options.mode} pentest`,
-        scan_mode: options.mode,
-        recurrence_pattern: options.pattern,
-        time_of_day: options.time,
-        timezone: options.timezone
-      };
-      if (options.dayOfWeek !== void 0) params.day_of_week = parseInt(options.dayOfWeek, 10);
-      if (options.dayOfMonth !== void 0) params.day_of_month = parseInt(options.dayOfMonth, 10);
-      const s = await client.schedules.create(params);
-      if (opts.json || opts.output === "json") {
-        printJson(s);
-        return;
+    if (!this.#isEnabled) {
+      if (this.text) {
+        this.#stream.write(`- ${this.text}
+`);
       }
-      printSuccess(`Schedule created: ${s.domain_or_ip}`);
-      console.log(`  ID: ${s.id}`);
-      console.log(`  Schedule: ${formatPattern(s)}`);
-      console.log(`  Next run: ${s.next_scheduled_run ?? "pending"}`);
-      console.log(`
-Manage: kinosec pentest schedule get ${s.id}`);
-    } catch (error) {
-      handleError(error);
+      return this;
     }
-  });
-  schedule.command("update").description("Update a schedule").argument("<id>", "Schedule ID").option("--pattern <pattern>", "Recurrence: once, daily, weekly, biweekly, monthly").option("--name <name>", "Schedule name").option("--mode <mode>", "Scan mode: quick or full").option("--time <HH:MM>", "Time of day (24h format)").option("--day-of-week <0-6>", "Day of week (0=Sun..6=Sat)").option("--day-of-month <1-31>", "Day of month").option("--timezone <tz>", "Timezone").addHelpText("after", `
-Examples:
-  $ kinosec pentest schedule update abc123 --pattern daily --time 14:00
-  $ kinosec pentest schedule update abc123 --mode quick`).action(async (id, options) => {
-    const params = {};
-    if (options.pattern) params.recurrence_pattern = options.pattern;
-    if (options.name) params.name = options.name;
-    if (options.mode) params.scan_mode = options.mode;
-    if (options.time) params.time_of_day = options.time;
-    if (options.dayOfWeek !== void 0) params.day_of_week = parseInt(options.dayOfWeek, 10);
-    if (options.dayOfMonth !== void 0) params.day_of_month = parseInt(options.dayOfMonth, 10);
-    if (options.timezone) params.timezone = options.timezone;
-    if (Object.keys(params).length === 0) {
-      console.error("Provide at least one field to update.");
-      process.exit(2);
+    if (this.isSpinning) {
+      return this;
     }
-    try {
-      const opts = schedule.parent.parent.opts();
-      const { token, apiUrl } = resolveToken(opts);
-      const client = new KinoSecClient({ apiUrl, token });
-      const s = await client.schedules.update(id, params);
-      if (opts.json || opts.output === "json") {
-        printJson(s);
-        return;
-      }
-      printSuccess(`Schedule updated: ${s.domain_or_ip}`);
-      console.log(`  Schedule: ${formatPattern(s)}`);
-      console.log(`  Next run: ${s.next_scheduled_run ?? "pending"}`);
-    } catch (error) {
-      handleError(error);
+    if (this.#options.hideCursor) {
+      cli_cursor_default.hide(this.#stream);
     }
-  });
-  schedule.command("delete").description("Delete a schedule").argument("<id>", "Schedule ID").option("-y, --yes", "Skip confirmation prompt").addHelpText("after", `
-Examples:
-  $ kinosec pentest schedule delete abc123
-  $ kinosec pentest schedule delete abc123 --yes`).action(async (id, options) => {
-    try {
-      await confirmDestructive(`Delete schedule ${id}?`, Boolean(options.yes));
-      const opts = schedule.parent.parent.opts();
-      const { token, apiUrl } = resolveToken(opts);
-      const client = new KinoSecClient({ apiUrl, token });
-      await client.schedules.delete(id);
-      if (opts.json || opts.output === "json") {
-        printJson({ deleted: true, id });
-        return;
-      }
-      printSuccess(`Schedule ${id} deleted.`);
-    } catch (error) {
-      handleError(error);
+    if (this.#options.discardStdin && process9.stdin.isTTY) {
+      this.#isDiscardingStdin = true;
+      stdin_discarder_default.start();
     }
-  });
-  schedule.command("pause").description("Pause a scheduled pentest").argument("<id>", "Schedule ID").addHelpText("after", `
-Examples:
-  $ kinosec pentest schedule pause abc123`).action(async (id) => {
-    try {
-      const opts = schedule.parent.parent.opts();
-      const { token, apiUrl } = resolveToken(opts);
-      const client = new KinoSecClient({ apiUrl, token });
-      const result = await client.schedules.pause(id);
-      if (opts.json || opts.output === "json") {
-        printJson(result);
-        return;
-      }
-      printSuccess("Schedule paused.");
-    } catch (error) {
-      handleError(error);
+    this.render();
+    this.#id = setInterval(this.render.bind(this), this.interval);
+    return this;
+  }
+  stop() {
+    if (!this.#isEnabled) {
+      return this;
+    }
+    clearInterval(this.#id);
+    this.#id = void 0;
+    this.#frameIndex = 0;
+    this.clear();
+    if (this.#options.hideCursor) {
+      cli_cursor_default.show(this.#stream);
     }
+    if (this.#options.discardStdin && process9.stdin.isTTY && this.#isDiscardingStdin) {
+      stdin_discarder_default.stop();
+      this.#isDiscardingStdin = false;
+    }
+    return this;
+  }
+  succeed(text) {
+    return this.stopAndPersist({ symbol: log_symbols_default.success, text });
+  }
+  fail(text) {
+    return this.stopAndPersist({ symbol: log_symbols_default.error, text });
+  }
+  warn(text) {
+    return this.stopAndPersist({ symbol: log_symbols_default.warning, text });
+  }
+  info(text) {
+    return this.stopAndPersist({ symbol: log_symbols_default.info, text });
+  }
+  stopAndPersist(options = {}) {
+    if (this.#isSilent) {
+      return this;
+    }
+    const prefixText = options.prefixText ?? this.#prefixText;
+    const fullPrefixText = this.#getFullPrefixText(prefixText, " ");
+    const symbolText = options.symbol ?? " ";
+    const text = options.text ?? this.text;
+    const separatorText = symbolText ? " " : "";
+    const fullText = typeof text === "string" ? separatorText + text : "";
+    const suffixText = options.suffixText ?? this.#suffixText;
+    const fullSuffixText = this.#getFullSuffixText(suffixText, " ");
+    const textToWrite = fullPrefixText + symbolText + fullText + fullSuffixText + "\n";
+    this.stop();
+    this.#stream.write(textToWrite);
+    return this;
+  }
+};
+function ora(options) {
+  return new Ora(options);
+}
+
+// src/lib/watch.ts
+var UNICODE = isUnicodeSupported();
+var sym = {
+  success: UNICODE ? "\u2713" : "v",
+  fail: UNICODE ? "\u2717" : "x",
+  warn: UNICODE ? "\u26A0" : "!",
+  rule: UNICODE ? "\u2500" : "-"
+};
+var LABEL_WIDTH = 40;
+var TIMING_WIDTH = 8;
+function formatDuration(ms) {
+  if (ms < 1e4) return `${(ms / 1e3).toFixed(1)}s`;
+  if (ms < 6e4) return `${Math.round(ms / 1e3)}s`;
+  const totalSec = Math.round(ms / 1e3);
+  const m = Math.floor(totalSec / 60);
+  const r = totalSec % 60;
+  return `${m}m ${r.toString().padStart(2, "0")}s`;
+}
+function completedStepLine(label, phaseMs, totalMs) {
+  const lbl = label.padEnd(LABEL_WIDTH);
+  const dur = formatDuration(phaseMs).padStart(TIMING_WIDTH);
+  const tty2 = isTTY();
+  const total = tty2 ? import_picocolors5.default.dim(`(total ${formatDuration(totalMs)})`) : `(total ${formatDuration(totalMs)})`;
+  const icon = tty2 ? import_picocolors5.default.green(sym.success) : sym.success;
+  return `${icon} ${lbl}${dur}  ${total}`;
+}
+function renderFindingsSummary(counts) {
+  const levels = [
+    { key: "critical", label: "critical", color: import_picocolors5.default.red },
+    { key: "high", label: "high", color: import_picocolors5.default.yellow },
+    { key: "medium", label: "medium", color: (s) => import_picocolors5.default.dim(import_picocolors5.default.yellow(s)) },
+    { key: "low", label: "low", color: import_picocolors5.default.green },
+    { key: "info", label: "info", color: import_picocolors5.default.cyan }
+  ];
+  const tty2 = isTTY();
+  const parts = levels.map(({ key, label, color }) => {
+    const count = findCount(counts, key);
+    const text = `${count} ${label}`;
+    if (!tty2) return text;
+    return count === 0 ? import_picocolors5.default.dim(text) : color(text);
   });
-  schedule.command("resume").description("Resume a paused schedule").argument("<id>", "Schedule ID").addHelpText("after", `
-Examples:
-  $ kinosec pentest schedule resume abc123`).action(async (id) => {
-    try {
-      const opts = schedule.parent.parent.opts();
-      const { token, apiUrl } = resolveToken(opts);
-      const client = new KinoSecClient({ apiUrl, token });
-      const result = await client.schedules.resume(id);
-      if (opts.json || opts.output === "json") {
-        printJson(result);
-        return;
+  return parts.join("   ");
+}
+function findCount(counts, level) {
+  const key = Object.keys(counts).find((k) => k.toLowerCase() === level);
+  return key ? counts[key] : 0;
+}
+async function watchPentest(client, profileId, options) {
+  const { timeoutMs, intervalMs, useJson, showFindingsSummary } = options;
+  const tty2 = isTTY();
+  const loopStart = Date.now();
+  let spinner = null;
+  let lastActivity = "";
+  let phaseStart = Date.now();
+  if (!useJson && tty2) {
+    spinner = ora({ text: "Fetching pentest status...", isEnabled: true }).start();
+  }
+  const cleanup = () => {
+    if (spinner) spinner.stop();
+  };
+  process.once("SIGINT", () => {
+    cleanup();
+    console.log("\nWatch cancelled. Pentest is still running.");
+    process.exit(0);
+  });
+  while (true) {
+    const scanDetail = await client.scans.get(profileId);
+    const activity = scanDetail.current_activity || "";
+    const totalMs = Date.now() - loopStart;
+    const currentPhaseMs = Date.now() - phaseStart;
+    if (useJson) {
+      const elapsed = Math.round(totalMs / 1e3);
+      process.stdout.write(
+        JSON.stringify({ ...scanDetail, elapsed_seconds: elapsed }) + "\n"
+      );
+    } else if (spinner) {
+      if (activity && activity !== lastActivity && lastActivity) {
+        const phaseDuration = Date.now() - phaseStart;
+        const line = completedStepLine(lastActivity, phaseDuration, totalMs);
+        spinner.stopAndPersist({ symbol: "", text: line });
+        spinner = ora({ isEnabled: true }).start();
+        phaseStart = Date.now();
+      }
+      lastActivity = activity || lastActivity;
+      const dur = formatDuration(currentPhaseMs);
+      spinner.text = `${activity || lastActivity}  ${import_picocolors5.default.dim(dur)}`;
+    } else if (!useJson) {
+      if (activity && activity !== lastActivity && lastActivity) {
+        const phaseDuration = Date.now() - phaseStart;
+        console.log(`${sym.success} ${lastActivity}  ${formatDuration(phaseDuration)}`);
+        phaseStart = Date.now();
+      }
+      if (activity && activity !== lastActivity) {
+        console.log(`\u2022 ${activity}`);
+      }
+      lastActivity = activity || lastActivity;
+    }
+    const terminalStatuses = ["Completed", "Failed", "Stopped"];
+    if (terminalStatuses.some((s) => scanDetail.scan_status.includes(s))) {
+      cleanup();
+      if (useJson) break;
+      if (scanDetail.scan_status.includes("Failed")) {
+        const icon2 = tty2 ? import_picocolors5.default.red(sym.fail) : sym.fail;
+        const reason = scanDetail.failure_reason || "unknown reason";
+        console.log(`
+${icon2} Pentest failed: ${reason}`);
+        process.exit(1);
+      }
+      if (scanDetail.scan_status.includes("Stopped")) {
+        const icon2 = tty2 ? import_picocolors5.default.yellow(sym.warn) : sym.warn;
+        console.log(`
+${icon2} Pentest was cancelled.`);
+        break;
       }
-      printSuccess("Schedule resumed.");
-      if (result.next_scheduled_run) {
-        console.log(`  Next run: ${new Date(result.next_scheduled_run).toLocaleString()}`);
+      const totalDur = formatDuration(Date.now() - loopStart);
+      const domain = tty2 ? import_picocolors5.default.bold(scanDetail.domain_or_ip) : scanDetail.domain_or_ip;
+      const icon = tty2 ? import_picocolors5.default.green(sym.success) : sym.success;
+      const dur = tty2 ? import_picocolors5.default.dim(totalDur) : totalDur;
+      console.log(`
+${icon} Pentest completed: ${domain}    ${dur}`);
+      if (showFindingsSummary) {
+        await printFindingsSummary(client, profileId, tty2);
       }
-    } catch (error) {
-      handleError(error);
+      const cmd = `kinosec finding list ${profileId}`;
+      const viewLabel = tty2 ? import_picocolors5.default.dim("View details:") : "View details:";
+      const viewCmd = tty2 ? import_picocolors5.default.cyan(cmd) : cmd;
+      console.log(`
+  ${viewLabel}  ${viewCmd}`);
+      console.log();
+      break;
     }
-  });
+    if (Date.now() - loopStart > timeoutMs) {
+      cleanup();
+      const secs = Math.round(timeoutMs / 1e3);
+      console.error(`
+Timeout: pentest still running after ${secs}s.`);
+      console.error(`Check status: kinosec pentest get ${profileId}`);
+      process.exit(3);
+    }
+    await new Promise((resolve) => setTimeout(resolve, intervalMs));
+  }
+}
+async function printFindingsSummary(client, profileId, tty2) {
+  try {
+    const reports = await client.reports.list({ limit: 20 });
+    const report = reports.items.find((r) => r.scan_profile_id === profileId);
+    if (report?.severity_counts) {
+      const label = tty2 ? import_picocolors5.default.dim("Findings:") : "Findings:";
+      const summary = renderFindingsSummary(report.severity_counts);
+      console.log(`
+  ${label}  ${summary}`);
+    }
+  } catch {
+  }
 }
 
 // src/commands/pentest.ts
@@ -10878,7 +11060,7 @@ function isValidDomain(value) {
   return value.includes(".") && !/\s/.test(value);
 }
 function registerPentestCommand(program3) {
-  const pentest = program3.command("pentest").description("Run and manage pentests").option("-t, --target <domain>", "Target domain to pentest").option("--profile <id>", "Pentest profile ID (alternative to --target)").option("--mode <mode>", "Pentest mode: quick or full", "full").option("-y, --yes", "Accept authorization terms without prompting").addHelpText("after", `
+  const pentest = program3.command("pentest").description("Run and manage pentests").option("-t, --target <domain>", "Target domain to pentest").option("--profile <id>", "Pentest profile ID (alternative to --target)").option("--mode <mode>", "Pentest mode: quick or full", "full").option("-y, --yes", "Accept authorization terms without prompting").option("--no-watch", "Skip auto-watch after starting the pentest").addHelpText("after", `
 Examples:
   $ kinosec pentest -t delikado.org
   $ kinosec pentest --target delikado.org --mode quick
@@ -10912,10 +11094,15 @@ Examples:
           asset = await client.assets.lookup(domain);
         } catch (err) {
           if (err instanceof ApiError && err.status === 404) {
-            console.error(`No asset found for '${domain}'. Run kinosec asset list to see your assets.`);
-            process.exit(1);
+            asset = await client.assets.create({
+              asset_type: "domain",
+              asset_value: domain,
+              verification_method: "dns"
+            });
+            console.error(`Asset created for ${domain}.`);
+          } else {
+            throw err;
           }
-          throw err;
         }
         targetDisplay = domain;
         params = { asset_id: asset.id, scan_mode: options.mode };
@@ -10929,9 +11116,22 @@ Examples:
       printSuccess(`Pentest started: ${result.domain_or_ip}`);
       console.log(`  Profile ID: ${result.scan_profile_id}`);
       console.log(`  Mode: ${result.scan_mode}`);
-      console.log(`  Status: ${result.scan_status}`);
-      console.log(`
+      if (!options.watch || !isTTY()) {
+        console.log(`  Status: ${result.scan_status}`);
+        console.log(`
 Watch progress: kinosec pentest watch ${result.scan_profile_id}`);
+        return;
+      }
+      const divider = isTTY() ? import_picocolors6.default.dim("\u2500".repeat(37)) : "-".repeat(37);
+      console.log(`
+${divider}
+`);
+      await watchPentest(client, result.scan_profile_id, {
+        timeoutMs: 1800 * 1e3,
+        intervalMs: 5 * 1e3,
+        useJson: false,
+        showFindingsSummary: true
+      });
     } catch (error) {
       handleError(error);
     }
@@ -10968,7 +11168,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors5.default.dim(`
+        console.log(import_picocolors6.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -11031,67 +11231,408 @@ Examples:
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
       const client = new KinoSecClient({ apiUrl, token });
-      const useJson = opts.json || opts.output === "json";
-      const timeoutMs = parseInt(options.timeout, 10) * 1e3;
-      const intervalMs = parseInt(options.interval, 10) * 1e3;
-      const startTime = Date.now();
-      let spinner = null;
-      let lastActivity = "";
-      if (!useJson && isTTY()) {
-        spinner = ora("Fetching pentest status...").start();
-      }
-      const cleanup = () => {
-        if (spinner) spinner.stop();
-      };
-      process.once("SIGINT", () => {
-        cleanup();
-        console.log("\nWatch cancelled. Pentest is still running.");
-        process.exit(0);
+      await watchPentest(client, id, {
+        timeoutMs: parseInt(options.timeout, 10) * 1e3,
+        intervalMs: parseInt(options.interval, 10) * 1e3,
+        useJson: Boolean(opts.json || opts.output === "json"),
+        showFindingsSummary: true
       });
-      while (true) {
-        const scanDetail = await client.scans.get(id);
-        const elapsed = Math.round((Date.now() - startTime) / 1e3);
-        const activity = scanDetail.current_activity || "";
-        if (useJson) {
-          process.stdout.write(JSON.stringify({ ...scanDetail, elapsed_seconds: elapsed }) + "\n");
-        } else if (spinner) {
-          if (activity && activity !== lastActivity && lastActivity) {
-            spinner.stopAndPersist({ symbol: import_picocolors5.default.green("\u2713"), text: lastActivity });
-            spinner = ora().start();
-          }
-          lastActivity = activity || lastActivity;
-          const activitySuffix = activity ? ` \u2014 ${activity}` : "";
-          spinner.text = `${scanDetail.domain_or_ip}${activitySuffix} \u2014 ${elapsed}s elapsed`;
-        }
-        const terminalStatuses = ["Completed", "Failed", "Stopped"];
-        if (terminalStatuses.some((s) => scanDetail.scan_status.includes(s))) {
-          cleanup();
-          if (useJson) {
-            break;
+    } catch (error) {
+      handleError(error);
+    }
+  });
+}
+
+// src/commands/asset.ts
+var import_picocolors8 = __toESM(require_picocolors(), 1);
+
+// src/commands/asset-auth.ts
+var import_picocolors7 = __toESM(require_picocolors(), 1);
+
+// src/lib/resolve-asset.ts
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-/i;
+async function resolveAsset(client, identifier) {
+  try {
+    if (UUID_RE.test(identifier)) {
+      return await client.assets.get(identifier);
+    }
+    return await client.assets.lookup(identifier);
+  } catch (error) {
+    if (error instanceof ApiError && error.status === 404) {
+      throw new ApiError({
+        status: 404,
+        code: error.code,
+        detail: `Asset "${identifier}" not found. Create it with:
+  kinosec asset create --type domain --value ${identifier} --verify-method dns
+or use pentest which auto-creates the asset:
+  kinosec pentest -t ${identifier}`,
+        requestId: error.requestId
+      });
+    }
+    throw error;
+  }
+}
+
+// src/lib/prompt.ts
+import { createInterface as createInterface2 } from "readline";
+async function promptMasked(label) {
+  if (!isTTY() || !process.stdin.isTTY) {
+    console.error(`Cannot prompt for ${label} in non-interactive mode. Use flags instead.`);
+    process.exit(2);
+  }
+  process.stderr.write(`${label}: `);
+  return new Promise((resolve, reject) => {
+    const chars = [];
+    process.stdin.setRawMode(true);
+    process.stdin.resume();
+    process.stdin.setEncoding("utf-8");
+    const onData = (chunk) => {
+      for (const ch of chunk) {
+        if (ch === "\r" || ch === "\n") {
+          process.stdin.setRawMode(false);
+          process.stdin.pause();
+          process.stdin.removeListener("data", onData);
+          process.stderr.write("\n");
+          resolve(chars.join(""));
+          return;
+        } else if (ch === "") {
+          process.stdin.setRawMode(false);
+          process.stdin.pause();
+          process.stdin.removeListener("data", onData);
+          process.stderr.write("\n");
+          reject(new Error("Cancelled"));
+          return;
+        } else if (ch === "\x7F" || ch === "\b") {
+          if (chars.length > 0) {
+            chars.pop();
+            process.stderr.write("\b \b");
           }
-          if (scanDetail.scan_status.includes("Failed")) {
-            console.log(import_picocolors5.default.red(`
-Pentest failed: ${scanDetail.failure_reason || "unknown reason"}`));
-            process.exit(1);
+        } else if (ch >= " ") {
+          chars.push(ch);
+          process.stderr.write("*");
+        }
+      }
+    };
+    process.stdin.on("data", onData);
+  });
+}
+async function promptText(label) {
+  if (!isTTY() || !process.stdin.isTTY) {
+    console.error(`Cannot prompt for ${label} in non-interactive mode. Use flags instead.`);
+    process.exit(2);
+  }
+  const rl = createInterface2({ input: process.stdin, output: process.stderr });
+  const answer = await new Promise((resolve) => {
+    rl.question(`${label}: `, resolve);
+  });
+  rl.close();
+  return answer;
+}
+async function promptSelect(message, options) {
+  if (!isTTY() || !process.stdin.isTTY) {
+    console.error("Cannot show interactive menu in non-interactive mode. Use flags instead.");
+    process.exit(2);
+  }
+  console.error(`
+${message}`);
+  for (let i = 0; i < options.length; i++) {
+    console.error(`  ${i + 1}. ${options[i].label} \u2014 ${options[i].description}`);
+  }
+  const rl = createInterface2({ input: process.stdin, output: process.stderr });
+  const answer = await new Promise((resolve) => {
+    rl.question("> ", resolve);
+  });
+  rl.close();
+  const index = parseInt(answer, 10) - 1;
+  if (isNaN(index) || index < 0 || index >= options.length) {
+    console.error("Invalid selection.");
+    process.exit(2);
+  }
+  return options[index].value;
+}
+
+// src/commands/asset-auth.ts
+var VALID_AUTH_TYPES = ["bearer", "basic", "apikey", "session", "cookie"];
+var AUTH_TYPE_OPTIONS = [
+  { value: "bearer", label: "Bearer Token", description: "Authorization header with token" },
+  { value: "apikey", label: "API Key", description: "Custom header (e.g. X-API-Key)" },
+  { value: "basic", label: "Basic Auth", description: "Username + password" },
+  { value: "session", label: "Session Login", description: "Replays login form POST" },
+  { value: "cookie", label: "Cookie / Session", description: "Inject browser cookies" }
+];
+async function collectCredentialsInteractive(authType) {
+  const params = { auth_type: authType, credentials: {} };
+  switch (authType) {
+    case "bearer": {
+      params.credentials = { token: await promptMasked("Bearer token") };
+      break;
+    }
+    case "basic": {
+      const username = await promptText("Username");
+      const password = await promptMasked("Password");
+      params.credentials = { username, password };
+      break;
+    }
+    case "apikey": {
+      const key = await promptMasked("API key");
+      const headerName = await promptText("Header name (e.g. X-API-Key)");
+      params.credentials = { key };
+      params.auth_header_name = headerName;
+      break;
+    }
+    case "session": {
+      const username = await promptText("Username or email");
+      const password = await promptMasked("Password");
+      const endpoint = await promptText("Login endpoint URL");
+      params.credentials = { email: username, password };
+      params.auth_endpoint_url = endpoint;
+      break;
+    }
+    case "cookie": {
+      params.credentials = { cookie: await promptMasked("Cookie string") };
+      break;
+    }
+  }
+  return params;
+}
+function collectCredentialsFromFlags(options) {
+  const authType = options.type;
+  const params = { auth_type: authType, credentials: {} };
+  switch (authType) {
+    case "bearer": {
+      if (!options.bearerToken) {
+        console.error("--bearer-token is required for bearer auth type.");
+        process.exit(2);
+      }
+      params.credentials = { token: options.bearerToken };
+      break;
+    }
+    case "basic": {
+      if (!options.username || !options.password) {
+        console.error("--username and --password are required for basic auth type.");
+        process.exit(2);
+      }
+      params.credentials = { username: options.username, password: options.password };
+      break;
+    }
+    case "apikey": {
+      if (!options.key || !options.headerName) {
+        console.error("--key and --header-name are required for apikey auth type.");
+        process.exit(2);
+      }
+      params.credentials = { key: options.key };
+      params.auth_header_name = options.headerName;
+      break;
+    }
+    case "session": {
+      if (!options.username || !options.password || !options.authEndpoint) {
+        console.error("--username, --password, and --auth-endpoint are required for session auth type.");
+        process.exit(2);
+      }
+      params.credentials = { email: options.username, password: options.password };
+      params.auth_endpoint_url = options.authEndpoint;
+      break;
+    }
+    case "cookie": {
+      if (!options.cookie) {
+        console.error("--cookie is required for cookie auth type.");
+        process.exit(2);
+      }
+      params.credentials = { cookie: options.cookie };
+      break;
+    }
+  }
+  if (options.context) {
+    params.context_text = options.context;
+  }
+  return params;
+}
+function registerAssetAuthCommand(assetCmd) {
+  const auth = assetCmd.command("auth").description("Manage asset authentication credentials");
+  auth.command("set").description("Configure authentication credentials for an asset").argument("<asset>", "Asset domain name or UUID").option("--type <type>", "Auth type: bearer, basic, apikey, session, cookie").option("--bearer-token <value>", "Bearer token (bearer type)").option("--username <value>", "Username or email (basic, session types)").option("--password <value>", "Password (basic, session types)").option("--key <value>", "API key value (apikey type)").option("--header-name <name>", "Custom header name (apikey type, e.g. X-API-Key)").option("--cookie <value>", "Cookie string (cookie type)").option("--auth-endpoint <url>", "Login endpoint URL (session type)").option("--context <text>", "Optional notes about the auth configuration").addHelpText("after", `
+Examples:
+  $ kinosec asset auth set example.com                                      # interactive
+  $ kinosec asset auth set example.com --type bearer --bearer-token "$TOKEN"
+  $ kinosec asset auth set example.com --type basic --username admin --password "$PASS"
+  $ kinosec asset auth set example.com --type apikey --key "$KEY" --header-name "X-API-Key"
+  $ kinosec asset auth set example.com --type session --username admin@example.com --password "$PASS" --auth-endpoint "https://example.com/api/login"
+  $ kinosec asset auth set example.com --type cookie --cookie "session_id=abc123"
+
+Security: Pass credentials via environment variables to avoid shell history exposure.`).action(async (assetIdentifier, options) => {
+    try {
+      const opts = auth.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const asset = await resolveAsset(client, assetIdentifier);
+      let params;
+      if (options.type) {
+        if (!VALID_AUTH_TYPES.includes(options.type)) {
+          console.error(`Invalid auth type "${options.type}". Must be: ${VALID_AUTH_TYPES.join(", ")}`);
+          process.exit(2);
+        }
+        params = collectCredentialsFromFlags(options);
+      } else {
+        const authType = await promptSelect("Authentication type:", AUTH_TYPE_OPTIONS);
+        params = await collectCredentialsInteractive(authType);
+        if (options.context) {
+          params.context_text = options.context;
+        }
+      }
+      const result = await client.assets.credentials.set(asset.id, params);
+      if (opts.json || opts.output === "json") {
+        printJson({ ...result, asset: asset.asset_value });
+        return;
+      }
+      printSuccess(`Credentials saved for ${asset.asset_value} (${result.auth_type})`);
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  auth.command("show").description("Show authentication configuration for an asset").argument("<asset>", "Asset domain name or UUID").addHelpText("after", `
+Examples:
+  $ kinosec asset auth show example.com
+  $ kinosec asset auth show example.com --json`).action(async (assetIdentifier) => {
+    try {
+      const opts = auth.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const asset = await resolveAsset(client, assetIdentifier);
+      const creds = await client.assets.credentials.get(asset.id);
+      if (opts.json || opts.output === "json") {
+        printJson({ asset: asset.asset_value, ...creds });
+        return;
+      }
+      if (!creds.has_credentials) {
+        console.log(`Asset:           ${asset.asset_value}`);
+        console.log(`Auth Type:       ${import_picocolors7.default.dim("(none)")}`);
+        console.log(`Has Credentials: no`);
+        return;
+      }
+      console.log(`Asset:           ${asset.asset_value}`);
+      console.log(`Auth Type:       ${creds.auth_type}`);
+      console.log(`Has Credentials: yes`);
+      if (creds.auth_header_name) {
+        console.log(`Header Name:     ${creds.auth_header_name}`);
+      }
+      if (creds.auth_endpoint_url) {
+        console.log(`Auth Endpoint:   ${creds.auth_endpoint_url}`);
+      }
+      if (creds.context_text) {
+        console.log(`Notes:           ${creds.context_text}`);
+      }
+      if (creds.target_account) {
+        const ta = creds.target_account;
+        const hasAny = ta.has_username || ta.has_cookie || ta.has_bearer_token || ta.has_apikey;
+        if (hasAny) {
+          const detail = ta.has_username ? "username" : ta.has_bearer_token ? "bearer token" : ta.has_cookie ? "cookie" : "API key";
+          console.log(`Target Account:  ${import_picocolors7.default.green("configured")} (${detail})`);
+        } else {
+          console.log(`Target Account:  ${import_picocolors7.default.dim("not configured")}`);
+        }
+      }
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  auth.command("remove").description("Remove all credentials for an asset").argument("<asset>", "Asset domain name or UUID").option("-y, --yes", "Skip confirmation prompt").addHelpText("after", `
+Examples:
+  $ kinosec asset auth remove example.com
+  $ kinosec asset auth remove example.com --yes`).action(async (assetIdentifier, options) => {
+    try {
+      const opts = auth.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const asset = await resolveAsset(client, assetIdentifier);
+      await confirmDestructive(`Remove all credentials for ${asset.asset_value}?`, Boolean(options.yes));
+      await client.assets.credentials.remove(asset.id);
+      if (opts.json || opts.output === "json") {
+        printJson({ deleted: true, asset: asset.asset_value });
+        return;
+      }
+      printSuccess(`Credentials removed for ${asset.asset_value}`);
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  auth.command("set-target").description("Configure IDOR target account credentials").argument("<asset>", "Asset domain name or UUID").option("--target-username <value>", "Target account username or email").option("--target-password <value>", "Target account password").option("--target-totp-secret <value>", "Target account TOTP secret").option("--target-token <value>", "Target bearer token").option("--target-cookie <value>", "Target cookie string").option("--target-key <value>", "Target API key").addHelpText("after", `
+Examples:
+  $ kinosec asset auth set-target example.com                                          # interactive
+  $ kinosec asset auth set-target example.com --target-username victim@example.com --target-password "$PASS"
+  $ kinosec asset auth set-target example.com --target-token "$VICTIM_TOKEN"
+  $ kinosec asset auth set-target example.com --target-cookie "session_id=victim_abc"`).action(async (assetIdentifier, options) => {
+    try {
+      const opts = auth.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const asset = await resolveAsset(client, assetIdentifier);
+      const creds = await client.assets.credentials.get(asset.id);
+      if (!creds.has_credentials || !creds.auth_type) {
+        console.error(`No primary credentials configured for ${asset.asset_value}. Run 'kinosec asset auth set' first.`);
+        process.exit(2);
+      }
+      const isTokenBased = creds.auth_type === "bearer" || creds.auth_type === "apikey" || creds.auth_type === "cookie";
+      const hasAnyFlag = options.targetUsername || options.targetPassword || options.targetTotpSecret || options.targetToken || options.targetCookie || options.targetKey;
+      let targetParams;
+      if (hasAnyFlag) {
+        targetParams = {
+          username: options.targetUsername,
+          password: options.targetPassword,
+          totp_secret: options.targetTotpSecret,
+          bearer_token: options.targetToken,
+          cookie: options.targetCookie,
+          apikey: options.targetKey
+        };
+      } else {
+        console.error(`
+Primary auth type: ${creds.auth_type}
+`);
+        if (isTokenBased) {
+          if (creds.auth_type === "bearer") {
+            const targetToken = await promptMasked("Target bearer token");
+            targetParams = { bearer_token: targetToken };
+          } else if (creds.auth_type === "cookie") {
+            const targetCookie = await promptMasked("Target cookie string");
+            targetParams = { cookie: targetCookie };
+          } else {
+            const targetKey = await promptMasked("Target API key");
+            targetParams = { apikey: targetKey };
           }
-          if (scanDetail.scan_status.includes("Stopped")) {
-            console.log(import_picocolors5.default.yellow("\nPentest was cancelled."));
-            break;
+        } else {
+          const username = await promptText("Target account username");
+          const password = await promptMasked("Target account password");
+          targetParams = { username, password };
+          const totp = await promptText("Target TOTP secret (optional, Enter to skip)");
+          if (totp) {
+            targetParams.totp_secret = totp;
           }
-          console.log(import_picocolors5.default.green(`
-Pentest completed: ${scanDetail.domain_or_ip}`));
-          console.log(`  View findings: kinosec finding list ${id}`);
-          break;
-        }
-        if (Date.now() - startTime > timeoutMs) {
-          cleanup();
-          console.error(`
-Timeout: pentest still running after ${options.timeout}s.`);
-          console.error(`Check status: kinosec pentest get ${id}`);
-          process.exit(3);
         }
-        await new Promise((resolve) => setTimeout(resolve, intervalMs));
       }
+      await client.assets.credentials.setTarget(asset.id, targetParams);
+      if (opts.json || opts.output === "json") {
+        printJson({ saved: true, asset: asset.asset_value });
+        return;
+      }
+      printSuccess(`Target account saved for ${asset.asset_value} (IDOR testing)`);
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  auth.command("remove-target").description("Remove target account credentials (keeps primary credentials)").argument("<asset>", "Asset domain name or UUID").option("-y, --yes", "Skip confirmation prompt").addHelpText("after", `
+Examples:
+  $ kinosec asset auth remove-target example.com
+  $ kinosec asset auth remove-target example.com --yes`).action(async (assetIdentifier, options) => {
+    try {
+      const opts = auth.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const asset = await resolveAsset(client, assetIdentifier);
+      await confirmDestructive(`Remove target account for ${asset.asset_value}?`, Boolean(options.yes));
+      await client.assets.credentials.removeTarget(asset.id);
+      if (opts.json || opts.output === "json") {
+        printJson({ deleted: true, asset: asset.asset_value });
+        return;
+      }
+      printSuccess(`Target account removed for ${asset.asset_value}`);
     } catch (error) {
       handleError(error);
     }
@@ -11099,7 +11640,6 @@ Timeout: pentest still running after ${options.timeout}s.`);
 }
 
 // src/commands/asset.ts
-var import_picocolors6 = __toESM(require_picocolors(), 1);
 function registerAssetCommand(program3) {
   const asset = program3.command("asset").description("Manage assets");
   asset.command("list").description("List assets").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").option("--search <term>", "Filter by asset value (substring match)").option("--status <status>", "Filter by status (verified, unverified)").option("--type <type>", "Filter by type (domain, subdomain, ip)").addHelpText("after", `
@@ -11138,7 +11678,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors6.default.dim(`
+        console.log(import_picocolors8.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -11246,10 +11786,11 @@ Examples:
       handleError(error);
     }
   });
+  registerAssetAuthCommand(asset);
 }
 
 // src/commands/finding.ts
-var import_picocolors7 = __toESM(require_picocolors(), 1);
+var import_picocolors9 = __toESM(require_picocolors(), 1);
 function formatPoc(poc) {
   if (poc == null) return null;
   if (typeof poc === "string") return poc.trim() || null;
@@ -11290,7 +11831,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors7.default.dim(`
+        console.log(import_picocolors9.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -11378,7 +11919,7 @@ Examples:
 }
 
 // src/commands/report.ts
-var import_picocolors8 = __toESM(require_picocolors(), 1);
+var import_picocolors10 = __toESM(require_picocolors(), 1);
 function renderMarkdown(data) {
   const { scan, findings } = data;
   const lines = [];
@@ -11455,7 +11996,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors8.default.dim(`
+        console.log(import_picocolors10.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -11526,7 +12067,7 @@ Examples:
 }
 
 // src/commands/token.ts
-var import_picocolors9 = __toESM(require_picocolors(), 1);
+var import_picocolors11 = __toESM(require_picocolors(), 1);
 function registerTokenCommand(program3) {
   const token = program3.command("token").description("Manage API tokens");
   token.command("list").description("List API tokens").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").addHelpText("after", `
@@ -11561,7 +12102,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors9.default.dim(`
+        console.log(import_picocolors11.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -11588,7 +12129,7 @@ Examples:
       }
       printSuccess(`Token created: ${result.name}`);
       console.log("");
-      console.log(import_picocolors9.default.bold("  Token: ") + result.token);
+      console.log(import_picocolors11.default.bold("  Token: ") + result.token);
       console.log("");
       printWarning("Save this token \u2014 it will not be shown again.");
       console.log(`  ID: ${result.id}`);
@@ -11621,7 +12162,7 @@ Examples:
 
 // src/cli.ts
 var program2 = new Command();
-program2.name("kinosec").description("KinoSec CLI \u2014 run pentests from your terminal").version("0.3.3", "-v, --version").option("--token <pat>", "API token (overrides KINOSEC_TOKEN and config)").option("--api-url <url>", "API base URL (overrides config)").option("--output <format>", "Output format: text or json", "text").option("--json", "Shorthand for --output json").option("--no-color", "Disable colors");
+program2.name("kinosec").description("KinoSec CLI \u2014 run pentests from your terminal").version("0.5.0", "-v, --version").option("--token <pat>", "API token (overrides KINOSEC_TOKEN and config)").option("--api-url <url>", "API base URL (overrides config)").option("--output <format>", "Output format: text or json", "text").option("--json", "Shorthand for --output json").option("--no-color", "Disable colors");
 registerAuthCommand(program2);
 registerConfigCommand(program2);
 registerMeCommand(program2);
@@ -11630,7 +12171,7 @@ registerAssetCommand(program2);
 registerFindingCommand(program2);
 registerReportCommand(program2);
 registerTokenCommand(program2);
-program2.parseAsync(process.argv).then(() => checkForUpdate("0.3.3")).catch(handleError);
+program2.parseAsync(process.argv).then(() => checkForUpdate("0.5.0")).catch(handleError);
 /*! Bundled license information:
 
 ky/distribution/index.js: