@kinosec/cli 0.4.0 → 0.6.0

package/dist/cli.js

@@ -9283,6 +9283,320 @@ Examples:
   });
 }
 
+// src/commands/pentest.ts
+var import_picocolors6 = __toESM(require_picocolors(), 1);
+
+// src/lib/confirm.ts
+var import_picocolors3 = __toESM(require_picocolors(), 1);
+import { createInterface } from "readline";
+async function confirmDestructive(message, yes) {
+  if (yes) return;
+  if (!isTTY()) {
+    console.error("Use --yes to confirm destructive operations in non-interactive mode.");
+    process.exit(2);
+  }
+  const rl = createInterface({ input: process.stdin, output: process.stderr });
+  const answer = await new Promise((resolve) => {
+    rl.question(`${message} (y/N) `, resolve);
+  });
+  rl.close();
+  if (answer.toLowerCase() !== "y") {
+    console.log("Cancelled.");
+    process.exit(0);
+  }
+}
+async function confirmAuthorization(target, yes) {
+  if (yes) return;
+  if (!isTTY()) {
+    console.error("Use --yes to accept authorization terms in non-interactive mode.");
+    process.exit(2);
+  }
+  const warning = import_picocolors3.default.yellow("\u26A0");
+  console.error(`
+${warning}  ${import_picocolors3.default.bold("Authorization Required")}
+
+Penetration testing without proper authorization is illegal
+and may result in criminal prosecution.
+
+${import_picocolors3.default.bold("Target:")} ${target}
+
+By proceeding, you confirm that:
+  ${import_picocolors3.default.dim("\u2022")} You own or have explicit written authorization to test this target
+  ${import_picocolors3.default.dim("\u2022")} You will comply with all applicable laws and regulations
+  ${import_picocolors3.default.dim("\u2022")} You will not use the results for illegal or malicious purposes
+  ${import_picocolors3.default.dim("\u2022")} You accept full legal responsibility for this pentest
+
+${import_picocolors3.default.dim("Unauthorized access to computer systems is a criminal offense under")}
+${import_picocolors3.default.dim("laws such as the CFAA (US), Computer Misuse Act (UK), and similar")}
+${import_picocolors3.default.dim("legislation worldwide. KinoSec bears no liability for unauthorized")}
+${import_picocolors3.default.dim("use of its services.")}
+`);
+  const rl = createInterface({ input: process.stdin, output: process.stderr });
+  const answer = await new Promise((resolve) => {
+    rl.question("Agree and continue? (y/N) ", resolve);
+  });
+  rl.close();
+  if (answer.toLowerCase() !== "y") {
+    console.log("Cancelled.");
+    process.exit(0);
+  }
+}
+
+// src/commands/schedule.ts
+var import_picocolors4 = __toESM(require_picocolors(), 1);
+var VALID_PATTERNS = ["once", "daily", "weekly", "biweekly", "monthly"];
+var VALID_MODES = ["quick", "full"];
+var DAY_NAMES = ["Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"];
+function extractTime(scheduledAt) {
+  if (!scheduledAt) return "\u2014";
+  const d = new Date(scheduledAt);
+  return d.toLocaleTimeString([], { hour: "2-digit", minute: "2-digit", hour12: false });
+}
+function formatPattern(s) {
+  const time = extractTime(s.scheduled_at);
+  switch (s.recurrence_pattern) {
+    case "once":
+      return `Once at ${time}`;
+    case "daily":
+      return `Daily at ${time}`;
+    case "weekly":
+      return `Weekly ${s.day_of_week !== null ? DAY_NAMES[s.day_of_week] : ""} at ${time}`;
+    case "biweekly":
+      return `Every 2 weeks ${s.day_of_week !== null ? DAY_NAMES[s.day_of_week] : ""} at ${time}`;
+    case "monthly":
+      return `Monthly day ${s.day_of_month ?? "?"} at ${time}`;
+    default:
+      return s.recurrence_pattern;
+  }
+}
+function registerScheduleCommand(pentestCmd) {
+  const schedule = pentestCmd.command("schedule").description("Manage scheduled pentests");
+  schedule.command("list").description("List scheduled pentests").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").option("--status <status>", "Filter: active, paused, or all", "all").addHelpText("after", `
+Examples:
+  $ kinosec pentest schedule list
+  $ kinosec pentest schedule list --status active --json`).action(async (options) => {
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const result = await client.schedules.list({
+        limit: parseInt(options.limit, 10),
+        cursor: options.cursor,
+        status: options.status
+      });
+      if (opts.json || opts.output === "json") {
+        printJson(result);
+        return;
+      }
+      if (result.items.length === 0) {
+        console.log("No scheduled pentests found.");
+        return;
+      }
+      printTable(
+        ["ID", "Target", "Mode", "Schedule", "Status", "Next Run"],
+        result.items.map((s) => [
+          s.id,
+          truncate(s.domain_or_ip, 25),
+          s.scan_mode,
+          formatPattern(s),
+          s.is_active ? import_picocolors4.default.green("active") : import_picocolors4.default.yellow("paused"),
+          s.next_scheduled_run ? new Date(s.next_scheduled_run).toLocaleString() : "\u2014"
+        ])
+      );
+      if (result.next_cursor) {
+        console.log(import_picocolors4.default.dim(`
+More results available. Use --cursor ${result.next_cursor}`));
+      }
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("get").description("Get schedule details").argument("<id>", "Schedule ID").addHelpText("after", `
+Examples:
+  $ kinosec pentest schedule get abc123
+  $ kinosec pentest schedule get abc123 --json`).action(async (id) => {
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const s = await client.schedules.get(id);
+      if (opts.json || opts.output === "json") {
+        printJson(s);
+        return;
+      }
+      printTable(
+        ["Field", "Value"],
+        [
+          ["ID", s.id],
+          ["Target", s.domain_or_ip],
+          ["Name", s.name],
+          ["Mode", s.scan_mode],
+          ["Schedule", formatPattern(s)],
+          ["Timezone", s.timezone],
+          ["Status", s.is_active ? "Active" : "Paused"],
+          ["Next Run", s.next_scheduled_run ?? "\u2014"],
+          ["Last Run", s.last_scheduled_run ?? "Never"],
+          ["Created", s.created_at]
+        ]
+      );
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("create").description("Create a scheduled pentest").requiredOption("--asset <id>", "Asset ID to scan").requiredOption("--pattern <pattern>", "Recurrence: once, daily, weekly, biweekly, monthly").option("--name <name>", "Schedule name").option("--mode <mode>", "Scan mode: quick or full", "full").option("--time <HH:MM>", "Time of day (24h format)", "09:00").option("--day-of-week <0-6>", "Day of week (0=Sun..6=Sat) for weekly/biweekly").option("--day-of-month <1-31>", "Day of month for monthly").option("--timezone <tz>", "Timezone (e.g. America/New_York)", Intl.DateTimeFormat().resolvedOptions().timeZone).addHelpText("after", `
+Examples:
+  $ kinosec pentest schedule create --asset abc123 --pattern weekly --day-of-week 1 --time 09:00
+  $ kinosec pentest schedule create --asset abc123 --pattern daily --mode quick --time 14:00
+  $ kinosec pentest schedule create --asset abc123 --pattern monthly --day-of-month 15 --time 03:00 --timezone UTC`).action(async (options) => {
+    if (!VALID_PATTERNS.includes(options.pattern)) {
+      console.error(`Invalid pattern "${options.pattern}". Must be: ${VALID_PATTERNS.join(", ")}`);
+      process.exit(2);
+    }
+    if (!VALID_MODES.includes(options.mode)) {
+      console.error(`Invalid mode "${options.mode}". Must be: ${VALID_MODES.join(", ")}`);
+      process.exit(2);
+    }
+    if ((options.pattern === "weekly" || options.pattern === "biweekly") && options.dayOfWeek === void 0) {
+      console.error(`--day-of-week is required for ${options.pattern} schedules.`);
+      process.exit(2);
+    }
+    if (options.pattern === "monthly" && options.dayOfMonth === void 0) {
+      console.error("--day-of-month is required for monthly schedules.");
+      process.exit(2);
+    }
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const params = {
+        asset_id: options.domain_or_ip,
+        name: options.name ?? `${options.pattern} ${options.mode} pentest`,
+        scan_mode: options.mode,
+        recurrence_pattern: options.pattern,
+        time_of_day: options.time,
+        timezone: options.timezone
+      };
+      if (options.dayOfWeek !== void 0) params.day_of_week = parseInt(options.dayOfWeek, 10);
+      if (options.dayOfMonth !== void 0) params.day_of_month = parseInt(options.dayOfMonth, 10);
+      const s = await client.schedules.create(params);
+      if (opts.json || opts.output === "json") {
+        printJson(s);
+        return;
+      }
+      printSuccess(`Schedule created: ${s.domain_or_ip}`);
+      console.log(`  ID: ${s.id}`);
+      console.log(`  Schedule: ${formatPattern(s)}`);
+      console.log(`  Next run: ${s.next_scheduled_run ?? "pending"}`);
+      console.log(`
+Manage: kinosec pentest schedule get ${s.id}`);
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("update").description("Update a schedule").argument("<id>", "Schedule ID").option("--pattern <pattern>", "Recurrence: once, daily, weekly, biweekly, monthly").option("--name <name>", "Schedule name").option("--mode <mode>", "Scan mode: quick or full").option("--time <HH:MM>", "Time of day (24h format)").option("--day-of-week <0-6>", "Day of week (0=Sun..6=Sat)").option("--day-of-month <1-31>", "Day of month").option("--timezone <tz>", "Timezone").addHelpText("after", `
+Examples:
+  $ kinosec pentest schedule update abc123 --pattern daily --time 14:00
+  $ kinosec pentest schedule update abc123 --mode quick`).action(async (id, options) => {
+    const params = {};
+    if (options.pattern) params.recurrence_pattern = options.pattern;
+    if (options.name) params.name = options.name;
+    if (options.mode) params.scan_mode = options.mode;
+    if (options.time) params.time_of_day = options.time;
+    if (options.dayOfWeek !== void 0) params.day_of_week = parseInt(options.dayOfWeek, 10);
+    if (options.dayOfMonth !== void 0) params.day_of_month = parseInt(options.dayOfMonth, 10);
+    if (options.timezone) params.timezone = options.timezone;
+    if (Object.keys(params).length === 0) {
+      console.error("Provide at least one field to update.");
+      process.exit(2);
+    }
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const s = await client.schedules.update(id, params);
+      if (opts.json || opts.output === "json") {
+        printJson(s);
+        return;
+      }
+      printSuccess(`Schedule updated: ${s.domain_or_ip}`);
+      console.log(`  Schedule: ${formatPattern(s)}`);
+      console.log(`  Next run: ${s.next_scheduled_run ?? "pending"}`);
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("delete").description("Delete a schedule").argument("<id>", "Schedule ID").option("-y, --yes", "Skip confirmation prompt").addHelpText("after", `
+Examples:
+  $ kinosec pentest schedule delete abc123
+  $ kinosec pentest schedule delete abc123 --yes`).action(async (id, options) => {
+    try {
+      await confirmDestructive(`Delete schedule ${id}?`, Boolean(options.yes));
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      await client.schedules.delete(id);
+      if (opts.json || opts.output === "json") {
+        printJson({ deleted: true, id });
+        return;
+      }
+      printSuccess(`Schedule ${id} deleted.`);
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("pause").description("Pause a scheduled pentest").argument("<id>", "Schedule ID").addHelpText("after", `
+Examples:
+  $ kinosec pentest schedule pause abc123`).action(async (id) => {
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const result = await client.schedules.pause(id);
+      if (opts.json || opts.output === "json") {
+        printJson(result);
+        return;
+      }
+      printSuccess("Schedule paused.");
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  schedule.command("resume").description("Resume a paused schedule").argument("<id>", "Schedule ID").addHelpText("after", `
+Examples:
+  $ kinosec pentest schedule resume abc123`).action(async (id) => {
+    try {
+      const opts = schedule.parent.parent.opts();
+      const { token, apiUrl } = resolveToken(opts);
+      const client = new KinoSecClient({ apiUrl, token });
+      const result = await client.schedules.resume(id);
+      if (opts.json || opts.output === "json") {
+        printJson(result);
+        return;
+      }
+      printSuccess("Schedule resumed.");
+      if (result.next_scheduled_run) {
+        console.log(`  Next run: ${new Date(result.next_scheduled_run).toLocaleString()}`);
+      }
+    } catch (error) {
+      handleError(error);
+    }
+  });
+}
+
+// src/lib/watch.ts
+var import_picocolors5 = __toESM(require_picocolors(), 1);
+
+// ../../node_modules/.pnpm/is-unicode-supported@2.1.0/node_modules/is-unicode-supported/index.js
+import process2 from "process";
+function isUnicodeSupported() {
+  const { env: env2 } = process2;
+  const { TERM, TERM_PROGRAM } = env2;
+  if (process2.platform !== "win32") {
+    return TERM !== "linux";
+  }
+  return Boolean(env2.WT_SESSION) || Boolean(env2.TERMINUS_SUBLIME) || env2.ConEmuTask === "{cmd::Cmder}" || TERM_PROGRAM === "Terminus-Sublime" || TERM_PROGRAM === "vscode" || TERM === "xterm-256color" || TERM === "alacritty" || TERM === "rxvt-unicode" || TERM === "rxvt-unicode-256color" || env2.TERMINAL_EMULATOR === "JetBrains-JediTerm";
+}
+
 // ../../node_modules/.pnpm/ora@8.2.0/node_modules/ora/index.js
 import process9 from "process";
 
@@ -9473,16 +9787,16 @@ var ansiStyles2 = assembleStyles2();
 var ansi_styles_default2 = ansiStyles2;
 
 // ../../node_modules/.pnpm/chalk@5.6.2/node_modules/chalk/source/vendor/supports-color/index.js
-import process2 from "process";
+import process3 from "process";
 import os from "os";
 import tty from "tty";
-function hasFlag(flag, argv = globalThis.Deno ? globalThis.Deno.args : process2.argv) {
+function hasFlag(flag, argv = globalThis.Deno ? globalThis.Deno.args : process3.argv) {
   const prefix = flag.startsWith("-") ? "" : flag.length === 1 ? "-" : "--";
   const position = argv.indexOf(prefix + flag);
   const terminatorPosition = argv.indexOf("--");
   return position !== -1 && (terminatorPosition === -1 || position < terminatorPosition);
 }
-var { env } = process2;
+var { env } = process3;
 var flagForceColor;
 if (hasFlag("no-color") || hasFlag("no-colors") || hasFlag("color=false") || hasFlag("color=never")) {
   flagForceColor = 0;
@@ -9538,7 +9852,7 @@ function _supportsColor(haveStream, { streamIsTTY, sniffFlags = true } = {}) {
   if (env.TERM === "dumb") {
     return min;
   }
-  if (process2.platform === "win32") {
+  if (process3.platform === "win32") {
     const osRelease = os.release().split(".");
     if (Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) {
       return Number(osRelease[2]) >= 14931 ? 3 : 2;
@@ -9782,10 +10096,10 @@ var chalkStderr = createChalk({ level: stderrColor ? stderrColor.level : 0 });
 var source_default = chalk;
 
 // ../../node_modules/.pnpm/cli-cursor@5.0.0/node_modules/cli-cursor/index.js
-import process5 from "process";
+import process6 from "process";
 
 // ../../node_modules/.pnpm/restore-cursor@5.1.0/node_modules/restore-cursor/index.js
-import process4 from "process";
+import process5 from "process";
 
 // ../../node_modules/.pnpm/mimic-function@5.0.1/node_modules/mimic-function/index.js
 var copyProperty = (to, from, property, ignoreNonConfigurable) => {
@@ -9974,7 +10288,7 @@ var SignalExit = class extends SignalExitBase {
   // "SIGHUP" throws an `ENOSYS` error on Windows,
   // so use a supported signal instead
   /* c8 ignore start */
-  #hupSig = process3.platform === "win32" ? "SIGINT" : "SIGHUP";
+  #hupSig = process4.platform === "win32" ? "SIGINT" : "SIGHUP";
   /* c8 ignore stop */
   #emitter = new Emitter();
   #process;
@@ -10085,7 +10399,7 @@ var SignalExit = class extends SignalExitBase {
     }
   }
 };
-var process3 = globalThis.process;
+var process4 = globalThis.process;
 var {
   /**
    * Called when the process is exiting, whether via signal, explicit
@@ -10113,10 +10427,10 @@ var {
    * @internal
    */
   unload
-} = signalExitWrap(processOk(process3) ? new SignalExit(process3) : new SignalExitFallback());
+} = signalExitWrap(processOk(process4) ? new SignalExit(process4) : new SignalExitFallback());
 
 // ../../node_modules/.pnpm/restore-cursor@5.1.0/node_modules/restore-cursor/index.js
-var terminal = process4.stderr.isTTY ? process4.stderr : process4.stdout.isTTY ? process4.stdout : void 0;
+var terminal = process5.stderr.isTTY ? process5.stderr : process5.stdout.isTTY ? process5.stdout : void 0;
 var restoreCursor = terminal ? onetime_default(() => {
   onExit(() => {
     terminal.write("\x1B[?25h");
@@ -10128,14 +10442,14 @@ var restore_cursor_default = restoreCursor;
 // ../../node_modules/.pnpm/cli-cursor@5.0.0/node_modules/cli-cursor/index.js
 var isHidden = false;
 var cliCursor = {};
-cliCursor.show = (writableStream = process5.stderr) => {
+cliCursor.show = (writableStream = process6.stderr) => {
   if (!writableStream.isTTY) {
     return;
   }
   isHidden = false;
   writableStream.write("\x1B[?25h");
 };
-cliCursor.hide = (writableStream = process5.stderr) => {
+cliCursor.hide = (writableStream = process6.stderr) => {
   if (!writableStream.isTTY) {
     return;
   }
@@ -10159,12 +10473,12 @@ var cli_cursor_default = cliCursor;
 var import_cli_spinners = __toESM(require_cli_spinners(), 1);
 
 // ../../node_modules/.pnpm/is-unicode-supported@1.3.0/node_modules/is-unicode-supported/index.js
-import process6 from "process";
-function isUnicodeSupported() {
-  if (process6.platform !== "win32") {
-    return process6.env.TERM !== "linux";
+import process7 from "process";
+function isUnicodeSupported2() {
+  if (process7.platform !== "win32") {
+    return process7.env.TERM !== "linux";
   }
-  return Boolean(process6.env.CI) || Boolean(process6.env.WT_SESSION) || Boolean(process6.env.TERMINUS_SUBLIME) || process6.env.ConEmuTask === "{cmd::Cmder}" || process6.env.TERM_PROGRAM === "Terminus-Sublime" || process6.env.TERM_PROGRAM === "vscode" || process6.env.TERM === "xterm-256color" || process6.env.TERM === "alacritty" || process6.env.TERMINAL_EMULATOR === "JetBrains-JediTerm";
+  return Boolean(process7.env.CI) || Boolean(process7.env.WT_SESSION) || Boolean(process7.env.TERMINUS_SUBLIME) || process7.env.ConEmuTask === "{cmd::Cmder}" || process7.env.TERM_PROGRAM === "Terminus-Sublime" || process7.env.TERM_PROGRAM === "vscode" || process7.env.TERM === "xterm-256color" || process7.env.TERM === "alacritty" || process7.env.TERMINAL_EMULATOR === "JetBrains-JediTerm";
 }
 
 // ../../node_modules/.pnpm/log-symbols@6.0.0/node_modules/log-symbols/index.js
@@ -10180,7 +10494,7 @@ var fallback = {
   warning: source_default.yellow("\u203C"),
   error: source_default.red("\xD7")
 };
-var logSymbols = isUnicodeSupported() ? main : fallback;
+var logSymbols = isUnicodeSupported2() ? main : fallback;
 var log_symbols_default = logSymbols;
 
 // ../../node_modules/.pnpm/emoji-regex@10.6.0/node_modules/emoji-regex/index.mjs
@@ -10243,17 +10557,6 @@ function isInteractive({ stream = process.stdout } = {}) {
   );
 }
 
-// ../../node_modules/.pnpm/is-unicode-supported@2.1.0/node_modules/is-unicode-supported/index.js
-import process7 from "process";
-function isUnicodeSupported2() {
-  const { env: env2 } = process7;
-  const { TERM, TERM_PROGRAM } = env2;
-  if (process7.platform !== "win32") {
-    return TERM !== "linux";
-  }
-  return Boolean(env2.WT_SESSION) || Boolean(env2.TERMINUS_SUBLIME) || env2.ConEmuTask === "{cmd::Cmder}" || TERM_PROGRAM === "Terminus-Sublime" || TERM_PROGRAM === "vscode" || TERM === "xterm-256color" || TERM === "alacritty" || TERM === "rxvt-unicode" || TERM === "rxvt-unicode-256color" || env2.TERMINAL_EMULATOR === "JetBrains-JediTerm";
-}
-
 // ../../node_modules/.pnpm/stdin-discarder@0.2.2/node_modules/stdin-discarder/index.js
 import process8 from "process";
 var ASCII_ETX_CODE = 3;
@@ -10389,7 +10692,7 @@ var Ora = class {
         throw new Error("The given spinner must have a `frames` property");
       }
       this.#spinner = spinner;
-    } else if (!isUnicodeSupported2()) {
+    } else if (!isUnicodeSupported()) {
       this.#spinner = import_cli_spinners.default.line;
     } else if (spinner === void 0) {
       this.#spinner = import_cli_spinners.default.dots;
@@ -10509,386 +10812,242 @@ var Ora = class {
     }
     this.clear();
     this.#stream.write(this.frame());
-    this.#linesToClear = this.#lineCount;
-    return this;
-  }
-  start(text) {
-    if (text) {
-      this.text = text;
-    }
-    if (this.#isSilent) {
-      return this;
-    }
-    if (!this.#isEnabled) {
-      if (this.text) {
-        this.#stream.write(`- ${this.text}
-`);
-      }
-      return this;
-    }
-    if (this.isSpinning) {
-      return this;
-    }
-    if (this.#options.hideCursor) {
-      cli_cursor_default.hide(this.#stream);
-    }
-    if (this.#options.discardStdin && process9.stdin.isTTY) {
-      this.#isDiscardingStdin = true;
-      stdin_discarder_default.start();
-    }
-    this.render();
-    this.#id = setInterval(this.render.bind(this), this.interval);
-    return this;
-  }
-  stop() {
-    if (!this.#isEnabled) {
-      return this;
-    }
-    clearInterval(this.#id);
-    this.#id = void 0;
-    this.#frameIndex = 0;
-    this.clear();
-    if (this.#options.hideCursor) {
-      cli_cursor_default.show(this.#stream);
-    }
-    if (this.#options.discardStdin && process9.stdin.isTTY && this.#isDiscardingStdin) {
-      stdin_discarder_default.stop();
-      this.#isDiscardingStdin = false;
-    }
-    return this;
-  }
-  succeed(text) {
-    return this.stopAndPersist({ symbol: log_symbols_default.success, text });
-  }
-  fail(text) {
-    return this.stopAndPersist({ symbol: log_symbols_default.error, text });
-  }
-  warn(text) {
-    return this.stopAndPersist({ symbol: log_symbols_default.warning, text });
-  }
-  info(text) {
-    return this.stopAndPersist({ symbol: log_symbols_default.info, text });
-  }
-  stopAndPersist(options = {}) {
-    if (this.#isSilent) {
-      return this;
-    }
-    const prefixText = options.prefixText ?? this.#prefixText;
-    const fullPrefixText = this.#getFullPrefixText(prefixText, " ");
-    const symbolText = options.symbol ?? " ";
-    const text = options.text ?? this.text;
-    const separatorText = symbolText ? " " : "";
-    const fullText = typeof text === "string" ? separatorText + text : "";
-    const suffixText = options.suffixText ?? this.#suffixText;
-    const fullSuffixText = this.#getFullSuffixText(suffixText, " ");
-    const textToWrite = fullPrefixText + symbolText + fullText + fullSuffixText + "\n";
-    this.stop();
-    this.#stream.write(textToWrite);
-    return this;
-  }
-};
-function ora(options) {
-  return new Ora(options);
-}
-
-// src/commands/pentest.ts
-var import_picocolors5 = __toESM(require_picocolors(), 1);
-
-// src/lib/confirm.ts
-var import_picocolors3 = __toESM(require_picocolors(), 1);
-import { createInterface } from "readline";
-async function confirmDestructive(message, yes) {
-  if (yes) return;
-  if (!isTTY()) {
-    console.error("Use --yes to confirm destructive operations in non-interactive mode.");
-    process.exit(2);
-  }
-  const rl = createInterface({ input: process.stdin, output: process.stderr });
-  const answer = await new Promise((resolve) => {
-    rl.question(`${message} (y/N) `, resolve);
-  });
-  rl.close();
-  if (answer.toLowerCase() !== "y") {
-    console.log("Cancelled.");
-    process.exit(0);
-  }
-}
-async function confirmAuthorization(target, yes) {
-  if (yes) return;
-  if (!isTTY()) {
-    console.error("Use --yes to accept authorization terms in non-interactive mode.");
-    process.exit(2);
-  }
-  const warning = import_picocolors3.default.yellow("\u26A0");
-  console.error(`
-${warning}  ${import_picocolors3.default.bold("Authorization Required")}
-
-Penetration testing without proper authorization is illegal
-and may result in criminal prosecution.
-
-${import_picocolors3.default.bold("Target:")} ${target}
-
-By proceeding, you confirm that:
-  ${import_picocolors3.default.dim("\u2022")} You own or have explicit written authorization to test this target
-  ${import_picocolors3.default.dim("\u2022")} You will comply with all applicable laws and regulations
-  ${import_picocolors3.default.dim("\u2022")} You will not use the results for illegal or malicious purposes
-  ${import_picocolors3.default.dim("\u2022")} You accept full legal responsibility for this pentest
-
-${import_picocolors3.default.dim("Unauthorized access to computer systems is a criminal offense under")}
-${import_picocolors3.default.dim("laws such as the CFAA (US), Computer Misuse Act (UK), and similar")}
-${import_picocolors3.default.dim("legislation worldwide. KinoSec bears no liability for unauthorized")}
-${import_picocolors3.default.dim("use of its services.")}
-`);
-  const rl = createInterface({ input: process.stdin, output: process.stderr });
-  const answer = await new Promise((resolve) => {
-    rl.question("Agree and continue? (y/N) ", resolve);
-  });
-  rl.close();
-  if (answer.toLowerCase() !== "y") {
-    console.log("Cancelled.");
-    process.exit(0);
-  }
-}
-
-// src/commands/schedule.ts
-var import_picocolors4 = __toESM(require_picocolors(), 1);
-var VALID_PATTERNS = ["once", "daily", "weekly", "biweekly", "monthly"];
-var VALID_MODES = ["quick", "full"];
-var DAY_NAMES = ["Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"];
-function extractTime(scheduledAt) {
-  if (!scheduledAt) return "\u2014";
-  const d = new Date(scheduledAt);
-  return d.toLocaleTimeString([], { hour: "2-digit", minute: "2-digit", hour12: false });
-}
-function formatPattern(s) {
-  const time = extractTime(s.scheduled_at);
-  switch (s.recurrence_pattern) {
-    case "once":
-      return `Once at ${time}`;
-    case "daily":
-      return `Daily at ${time}`;
-    case "weekly":
-      return `Weekly ${s.day_of_week !== null ? DAY_NAMES[s.day_of_week] : ""} at ${time}`;
-    case "biweekly":
-      return `Every 2 weeks ${s.day_of_week !== null ? DAY_NAMES[s.day_of_week] : ""} at ${time}`;
-    case "monthly":
-      return `Monthly day ${s.day_of_month ?? "?"} at ${time}`;
-    default:
-      return s.recurrence_pattern;
-  }
-}
-function registerScheduleCommand(pentestCmd) {
-  const schedule = pentestCmd.command("schedule").description("Manage scheduled pentests");
-  schedule.command("list").description("List scheduled pentests").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").option("--status <status>", "Filter: active, paused, or all", "all").addHelpText("after", `
-Examples:
-  $ kinosec pentest schedule list
-  $ kinosec pentest schedule list --status active --json`).action(async (options) => {
-    try {
-      const opts = schedule.parent.parent.opts();
-      const { token, apiUrl } = resolveToken(opts);
-      const client = new KinoSecClient({ apiUrl, token });
-      const result = await client.schedules.list({
-        limit: parseInt(options.limit, 10),
-        cursor: options.cursor,
-        status: options.status
-      });
-      if (opts.json || opts.output === "json") {
-        printJson(result);
-        return;
-      }
-      if (result.items.length === 0) {
-        console.log("No scheduled pentests found.");
-        return;
-      }
-      printTable(
-        ["ID", "Target", "Mode", "Schedule", "Status", "Next Run"],
-        result.items.map((s) => [
-          s.id,
-          truncate(s.domain_or_ip, 25),
-          s.scan_mode,
-          formatPattern(s),
-          s.is_active ? import_picocolors4.default.green("active") : import_picocolors4.default.yellow("paused"),
-          s.next_scheduled_run ? new Date(s.next_scheduled_run).toLocaleString() : "\u2014"
-        ])
-      );
-      if (result.next_cursor) {
-        console.log(import_picocolors4.default.dim(`
-More results available. Use --cursor ${result.next_cursor}`));
-      }
-    } catch (error) {
-      handleError(error);
-    }
-  });
-  schedule.command("get").description("Get schedule details").argument("<id>", "Schedule ID").addHelpText("after", `
-Examples:
-  $ kinosec pentest schedule get abc123
-  $ kinosec pentest schedule get abc123 --json`).action(async (id) => {
-    try {
-      const opts = schedule.parent.parent.opts();
-      const { token, apiUrl } = resolveToken(opts);
-      const client = new KinoSecClient({ apiUrl, token });
-      const s = await client.schedules.get(id);
-      if (opts.json || opts.output === "json") {
-        printJson(s);
-        return;
-      }
-      printTable(
-        ["Field", "Value"],
-        [
-          ["ID", s.id],
-          ["Target", s.domain_or_ip],
-          ["Name", s.name],
-          ["Mode", s.scan_mode],
-          ["Schedule", formatPattern(s)],
-          ["Timezone", s.timezone],
-          ["Status", s.is_active ? "Active" : "Paused"],
-          ["Next Run", s.next_scheduled_run ?? "\u2014"],
-          ["Last Run", s.last_scheduled_run ?? "Never"],
-          ["Created", s.created_at]
-        ]
-      );
-    } catch (error) {
-      handleError(error);
+    this.#linesToClear = this.#lineCount;
+    return this;
+  }
+  start(text) {
+    if (text) {
+      this.text = text;
     }
-  });
-  schedule.command("create").description("Create a scheduled pentest").requiredOption("--asset <id>", "Asset ID to scan").requiredOption("--pattern <pattern>", "Recurrence: once, daily, weekly, biweekly, monthly").option("--name <name>", "Schedule name").option("--mode <mode>", "Scan mode: quick or full", "full").option("--time <HH:MM>", "Time of day (24h format)", "09:00").option("--day-of-week <0-6>", "Day of week (0=Sun..6=Sat) for weekly/biweekly").option("--day-of-month <1-31>", "Day of month for monthly").option("--timezone <tz>", "Timezone (e.g. America/New_York)", Intl.DateTimeFormat().resolvedOptions().timeZone).addHelpText("after", `
-Examples:
-  $ kinosec pentest schedule create --asset abc123 --pattern weekly --day-of-week 1 --time 09:00
-  $ kinosec pentest schedule create --asset abc123 --pattern daily --mode quick --time 14:00
-  $ kinosec pentest schedule create --asset abc123 --pattern monthly --day-of-month 15 --time 03:00 --timezone UTC`).action(async (options) => {
-    if (!VALID_PATTERNS.includes(options.pattern)) {
-      console.error(`Invalid pattern "${options.pattern}". Must be: ${VALID_PATTERNS.join(", ")}`);
-      process.exit(2);
+    if (this.#isSilent) {
+      return this;
     }
-    if (!VALID_MODES.includes(options.mode)) {
-      console.error(`Invalid mode "${options.mode}". Must be: ${VALID_MODES.join(", ")}`);
-      process.exit(2);
+    if (!this.#isEnabled) {
+      if (this.text) {
+        this.#stream.write(`- ${this.text}
+`);
+      }
+      return this;
     }
-    if ((options.pattern === "weekly" || options.pattern === "biweekly") && options.dayOfWeek === void 0) {
-      console.error(`--day-of-week is required for ${options.pattern} schedules.`);
-      process.exit(2);
+    if (this.isSpinning) {
+      return this;
     }
-    if (options.pattern === "monthly" && options.dayOfMonth === void 0) {
-      console.error("--day-of-month is required for monthly schedules.");
-      process.exit(2);
+    if (this.#options.hideCursor) {
+      cli_cursor_default.hide(this.#stream);
     }
-    try {
-      const opts = schedule.parent.parent.opts();
-      const { token, apiUrl } = resolveToken(opts);
-      const client = new KinoSecClient({ apiUrl, token });
-      const params = {
-        asset_id: options.domain_or_ip,
-        name: options.name ?? `${options.pattern} ${options.mode} pentest`,
-        scan_mode: options.mode,
-        recurrence_pattern: options.pattern,
-        time_of_day: options.time,
-        timezone: options.timezone
-      };
-      if (options.dayOfWeek !== void 0) params.day_of_week = parseInt(options.dayOfWeek, 10);
-      if (options.dayOfMonth !== void 0) params.day_of_month = parseInt(options.dayOfMonth, 10);
-      const s = await client.schedules.create(params);
-      if (opts.json || opts.output === "json") {
-        printJson(s);
-        return;
-      }
-      printSuccess(`Schedule created: ${s.domain_or_ip}`);
-      console.log(`  ID: ${s.id}`);
-      console.log(`  Schedule: ${formatPattern(s)}`);
-      console.log(`  Next run: ${s.next_scheduled_run ?? "pending"}`);
-      console.log(`
-Manage: kinosec pentest schedule get ${s.id}`);
-    } catch (error) {
-      handleError(error);
+    if (this.#options.discardStdin && process9.stdin.isTTY) {
+      this.#isDiscardingStdin = true;
+      stdin_discarder_default.start();
     }
-  });
-  schedule.command("update").description("Update a schedule").argument("<id>", "Schedule ID").option("--pattern <pattern>", "Recurrence: once, daily, weekly, biweekly, monthly").option("--name <name>", "Schedule name").option("--mode <mode>", "Scan mode: quick or full").option("--time <HH:MM>", "Time of day (24h format)").option("--day-of-week <0-6>", "Day of week (0=Sun..6=Sat)").option("--day-of-month <1-31>", "Day of month").option("--timezone <tz>", "Timezone").addHelpText("after", `
-Examples:
-  $ kinosec pentest schedule update abc123 --pattern daily --time 14:00
-  $ kinosec pentest schedule update abc123 --mode quick`).action(async (id, options) => {
-    const params = {};
-    if (options.pattern) params.recurrence_pattern = options.pattern;
-    if (options.name) params.name = options.name;
-    if (options.mode) params.scan_mode = options.mode;
-    if (options.time) params.time_of_day = options.time;
-    if (options.dayOfWeek !== void 0) params.day_of_week = parseInt(options.dayOfWeek, 10);
-    if (options.dayOfMonth !== void 0) params.day_of_month = parseInt(options.dayOfMonth, 10);
-    if (options.timezone) params.timezone = options.timezone;
-    if (Object.keys(params).length === 0) {
-      console.error("Provide at least one field to update.");
-      process.exit(2);
+    this.render();
+    this.#id = setInterval(this.render.bind(this), this.interval);
+    return this;
+  }
+  stop() {
+    if (!this.#isEnabled) {
+      return this;
     }
-    try {
-      const opts = schedule.parent.parent.opts();
-      const { token, apiUrl } = resolveToken(opts);
-      const client = new KinoSecClient({ apiUrl, token });
-      const s = await client.schedules.update(id, params);
-      if (opts.json || opts.output === "json") {
-        printJson(s);
-        return;
-      }
-      printSuccess(`Schedule updated: ${s.domain_or_ip}`);
-      console.log(`  Schedule: ${formatPattern(s)}`);
-      console.log(`  Next run: ${s.next_scheduled_run ?? "pending"}`);
-    } catch (error) {
-      handleError(error);
+    clearInterval(this.#id);
+    this.#id = void 0;
+    this.#frameIndex = 0;
+    this.clear();
+    if (this.#options.hideCursor) {
+      cli_cursor_default.show(this.#stream);
     }
-  });
-  schedule.command("delete").description("Delete a schedule").argument("<id>", "Schedule ID").option("-y, --yes", "Skip confirmation prompt").addHelpText("after", `
-Examples:
-  $ kinosec pentest schedule delete abc123
-  $ kinosec pentest schedule delete abc123 --yes`).action(async (id, options) => {
-    try {
-      await confirmDestructive(`Delete schedule ${id}?`, Boolean(options.yes));
-      const opts = schedule.parent.parent.opts();
-      const { token, apiUrl } = resolveToken(opts);
-      const client = new KinoSecClient({ apiUrl, token });
-      await client.schedules.delete(id);
-      if (opts.json || opts.output === "json") {
-        printJson({ deleted: true, id });
-        return;
-      }
-      printSuccess(`Schedule ${id} deleted.`);
-    } catch (error) {
-      handleError(error);
+    if (this.#options.discardStdin && process9.stdin.isTTY && this.#isDiscardingStdin) {
+      stdin_discarder_default.stop();
+      this.#isDiscardingStdin = false;
     }
-  });
-  schedule.command("pause").description("Pause a scheduled pentest").argument("<id>", "Schedule ID").addHelpText("after", `
-Examples:
-  $ kinosec pentest schedule pause abc123`).action(async (id) => {
-    try {
-      const opts = schedule.parent.parent.opts();
-      const { token, apiUrl } = resolveToken(opts);
-      const client = new KinoSecClient({ apiUrl, token });
-      const result = await client.schedules.pause(id);
-      if (opts.json || opts.output === "json") {
-        printJson(result);
-        return;
-      }
-      printSuccess("Schedule paused.");
-    } catch (error) {
-      handleError(error);
+    return this;
+  }
+  succeed(text) {
+    return this.stopAndPersist({ symbol: log_symbols_default.success, text });
+  }
+  fail(text) {
+    return this.stopAndPersist({ symbol: log_symbols_default.error, text });
+  }
+  warn(text) {
+    return this.stopAndPersist({ symbol: log_symbols_default.warning, text });
+  }
+  info(text) {
+    return this.stopAndPersist({ symbol: log_symbols_default.info, text });
+  }
+  stopAndPersist(options = {}) {
+    if (this.#isSilent) {
+      return this;
     }
+    const prefixText = options.prefixText ?? this.#prefixText;
+    const fullPrefixText = this.#getFullPrefixText(prefixText, " ");
+    const symbolText = options.symbol ?? " ";
+    const text = options.text ?? this.text;
+    const separatorText = symbolText ? " " : "";
+    const fullText = typeof text === "string" ? separatorText + text : "";
+    const suffixText = options.suffixText ?? this.#suffixText;
+    const fullSuffixText = this.#getFullSuffixText(suffixText, " ");
+    const textToWrite = fullPrefixText + symbolText + fullText + fullSuffixText + "\n";
+    this.stop();
+    this.#stream.write(textToWrite);
+    return this;
+  }
+};
+function ora(options) {
+  return new Ora(options);
+}
+
+// src/lib/watch.ts
+var UNICODE = isUnicodeSupported();
+var sym = {
+  success: UNICODE ? "\u2713" : "v",
+  fail: UNICODE ? "\u2717" : "x",
+  warn: UNICODE ? "\u26A0" : "!",
+  rule: UNICODE ? "\u2500" : "-"
+};
+var LABEL_WIDTH = 40;
+var TIMING_WIDTH = 8;
+function formatDuration(ms) {
+  if (ms < 1e4) return `${(ms / 1e3).toFixed(1)}s`;
+  if (ms < 6e4) return `${Math.round(ms / 1e3)}s`;
+  const totalSec = Math.round(ms / 1e3);
+  const m = Math.floor(totalSec / 60);
+  const r = totalSec % 60;
+  return `${m}m ${r.toString().padStart(2, "0")}s`;
+}
+function completedStepLine(label, phaseMs, totalMs) {
+  const lbl = label.padEnd(LABEL_WIDTH);
+  const dur = formatDuration(phaseMs).padStart(TIMING_WIDTH);
+  const tty2 = isTTY();
+  const total = tty2 ? import_picocolors5.default.dim(`(total ${formatDuration(totalMs)})`) : `(total ${formatDuration(totalMs)})`;
+  const icon = tty2 ? import_picocolors5.default.green(sym.success) : sym.success;
+  return `${icon} ${lbl}${dur}  ${total}`;
+}
+function renderFindingsSummary(counts) {
+  const levels = [
+    { key: "critical", label: "critical", color: import_picocolors5.default.red },
+    { key: "high", label: "high", color: import_picocolors5.default.yellow },
+    { key: "medium", label: "medium", color: (s) => import_picocolors5.default.dim(import_picocolors5.default.yellow(s)) },
+    { key: "low", label: "low", color: import_picocolors5.default.green },
+    { key: "info", label: "info", color: import_picocolors5.default.cyan }
+  ];
+  const tty2 = isTTY();
+  const parts = levels.map(({ key, label, color }) => {
+    const count = findCount(counts, key);
+    const text = `${count} ${label}`;
+    if (!tty2) return text;
+    return count === 0 ? import_picocolors5.default.dim(text) : color(text);
   });
-  schedule.command("resume").description("Resume a paused schedule").argument("<id>", "Schedule ID").addHelpText("after", `
-Examples:
-  $ kinosec pentest schedule resume abc123`).action(async (id) => {
-    try {
-      const opts = schedule.parent.parent.opts();
-      const { token, apiUrl } = resolveToken(opts);
-      const client = new KinoSecClient({ apiUrl, token });
-      const result = await client.schedules.resume(id);
-      if (opts.json || opts.output === "json") {
-        printJson(result);
-        return;
+  return parts.join("   ");
+}
+function findCount(counts, level) {
+  const key = Object.keys(counts).find((k) => k.toLowerCase() === level);
+  return key ? counts[key] : 0;
+}
+async function watchPentest(client, profileId, options) {
+  const { timeoutMs, intervalMs, useJson, showFindingsSummary } = options;
+  const tty2 = isTTY();
+  const loopStart = Date.now();
+  let spinner = null;
+  let lastActivity = "";
+  let phaseStart = Date.now();
+  if (!useJson && tty2) {
+    spinner = ora({ text: "Fetching pentest status...", isEnabled: true }).start();
+  }
+  const cleanup = () => {
+    if (spinner) spinner.stop();
+  };
+  process.once("SIGINT", () => {
+    cleanup();
+    console.log("\nWatch cancelled. Pentest is still running.");
+    process.exit(0);
+  });
+  while (true) {
+    const scanDetail = await client.scans.get(profileId);
+    const activity = scanDetail.current_activity || "";
+    const totalMs = Date.now() - loopStart;
+    const currentPhaseMs = Date.now() - phaseStart;
+    if (useJson) {
+      const elapsed = Math.round(totalMs / 1e3);
+      process.stdout.write(
+        JSON.stringify({ ...scanDetail, elapsed_seconds: elapsed }) + "\n"
+      );
+    } else if (spinner) {
+      if (activity && activity !== lastActivity && lastActivity) {
+        const phaseDuration = Date.now() - phaseStart;
+        const line = completedStepLine(lastActivity, phaseDuration, totalMs);
+        spinner.stopAndPersist({ symbol: "", text: line });
+        spinner = ora({ isEnabled: true }).start();
+        phaseStart = Date.now();
+      }
+      lastActivity = activity || lastActivity;
+      const dur = formatDuration(currentPhaseMs);
+      spinner.text = `${activity || lastActivity}  ${import_picocolors5.default.dim(dur)}`;
+    } else if (!useJson) {
+      if (activity && activity !== lastActivity && lastActivity) {
+        const phaseDuration = Date.now() - phaseStart;
+        console.log(`${sym.success} ${lastActivity}  ${formatDuration(phaseDuration)}`);
+        phaseStart = Date.now();
+      }
+      if (activity && activity !== lastActivity) {
+        console.log(`\u2022 ${activity}`);
+      }
+      lastActivity = activity || lastActivity;
+    }
+    const terminalStatuses = ["Completed", "Failed", "Stopped"];
+    if (terminalStatuses.some((s) => scanDetail.scan_status.includes(s))) {
+      cleanup();
+      if (useJson) break;
+      if (scanDetail.scan_status.includes("Failed")) {
+        const icon2 = tty2 ? import_picocolors5.default.red(sym.fail) : sym.fail;
+        const reason = scanDetail.failure_reason || "unknown reason";
+        console.log(`
+${icon2} Pentest failed: ${reason}`);
+        process.exit(1);
+      }
+      if (scanDetail.scan_status.includes("Stopped")) {
+        const icon2 = tty2 ? import_picocolors5.default.yellow(sym.warn) : sym.warn;
+        console.log(`
+${icon2} Pentest was cancelled.`);
+        break;
       }
-      printSuccess("Schedule resumed.");
-      if (result.next_scheduled_run) {
-        console.log(`  Next run: ${new Date(result.next_scheduled_run).toLocaleString()}`);
+      const totalDur = formatDuration(Date.now() - loopStart);
+      const domain = tty2 ? import_picocolors5.default.bold(scanDetail.domain_or_ip) : scanDetail.domain_or_ip;
+      const icon = tty2 ? import_picocolors5.default.green(sym.success) : sym.success;
+      const dur = tty2 ? import_picocolors5.default.dim(totalDur) : totalDur;
+      console.log(`
+${icon} Pentest completed: ${domain}    ${dur}`);
+      if (showFindingsSummary) {
+        await printFindingsSummary(client, profileId, tty2);
       }
-    } catch (error) {
-      handleError(error);
+      const cmd = `kinosec finding list ${profileId}`;
+      const viewLabel = tty2 ? import_picocolors5.default.dim("View details:") : "View details:";
+      const viewCmd = tty2 ? import_picocolors5.default.cyan(cmd) : cmd;
+      console.log(`
+  ${viewLabel}  ${viewCmd}`);
+      console.log();
+      break;
     }
-  });
+    if (Date.now() - loopStart > timeoutMs) {
+      cleanup();
+      const secs = Math.round(timeoutMs / 1e3);
+      console.error(`
+Timeout: pentest still running after ${secs}s.`);
+      console.error(`Check status: kinosec pentest get ${profileId}`);
+      process.exit(3);
+    }
+    await new Promise((resolve) => setTimeout(resolve, intervalMs));
+  }
+}
+async function printFindingsSummary(client, profileId, tty2) {
+  try {
+    const reports = await client.reports.list({ limit: 20 });
+    const report = reports.items.find((r) => r.scan_profile_id === profileId);
+    if (report?.severity_counts) {
+      const label = tty2 ? import_picocolors5.default.dim("Findings:") : "Findings:";
+      const summary = renderFindingsSummary(report.severity_counts);
+      console.log(`
+  ${label}  ${summary}`);
+    }
+  } catch {
+  }
 }
 
 // src/commands/pentest.ts
@@ -10901,7 +11060,7 @@ function isValidDomain(value) {
   return value.includes(".") && !/\s/.test(value);
 }
 function registerPentestCommand(program3) {
-  const pentest = program3.command("pentest").description("Run and manage pentests").option("-t, --target <domain>", "Target domain to pentest").option("--profile <id>", "Pentest profile ID (alternative to --target)").option("--mode <mode>", "Pentest mode: quick or full", "full").option("-y, --yes", "Accept authorization terms without prompting").addHelpText("after", `
+  const pentest = program3.command("pentest").description("Run and manage pentests").option("-t, --target <domain>", "Target domain to pentest").option("--profile <id>", "Pentest profile ID (alternative to --target)").option("--mode <mode>", "Pentest mode: quick or full", "full").option("-y, --yes", "Accept authorization terms without prompting").option("--no-watch", "Skip auto-watch after starting the pentest").addHelpText("after", `
 Examples:
   $ kinosec pentest -t delikado.org
   $ kinosec pentest --target delikado.org --mode quick
@@ -10957,9 +11116,22 @@ Examples:
       printSuccess(`Pentest started: ${result.domain_or_ip}`);
       console.log(`  Profile ID: ${result.scan_profile_id}`);
       console.log(`  Mode: ${result.scan_mode}`);
-      console.log(`  Status: ${result.scan_status}`);
-      console.log(`
+      if (!options.watch || !isTTY()) {
+        console.log(`  Status: ${result.scan_status}`);
+        console.log(`
 Watch progress: kinosec pentest watch ${result.scan_profile_id}`);
+        return;
+      }
+      const divider = isTTY() ? import_picocolors6.default.dim("\u2500".repeat(37)) : "-".repeat(37);
+      console.log(`
+${divider}
+`);
+      await watchPentest(client, result.scan_profile_id, {
+        timeoutMs: 1800 * 1e3,
+        intervalMs: 5 * 1e3,
+        useJson: false,
+        showFindingsSummary: true
+      });
     } catch (error) {
       handleError(error);
     }
@@ -10996,7 +11168,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors5.default.dim(`
+        console.log(import_picocolors6.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -11059,67 +11231,12 @@ Examples:
       const opts = program3.opts();
       const { token, apiUrl } = resolveToken(opts);
       const client = new KinoSecClient({ apiUrl, token });
-      const useJson = opts.json || opts.output === "json";
-      const timeoutMs = parseInt(options.timeout, 10) * 1e3;
-      const intervalMs = parseInt(options.interval, 10) * 1e3;
-      const startTime = Date.now();
-      let spinner = null;
-      let lastActivity = "";
-      if (!useJson && isTTY()) {
-        spinner = ora("Fetching pentest status...").start();
-      }
-      const cleanup = () => {
-        if (spinner) spinner.stop();
-      };
-      process.once("SIGINT", () => {
-        cleanup();
-        console.log("\nWatch cancelled. Pentest is still running.");
-        process.exit(0);
+      await watchPentest(client, id, {
+        timeoutMs: parseInt(options.timeout, 10) * 1e3,
+        intervalMs: parseInt(options.interval, 10) * 1e3,
+        useJson: Boolean(opts.json || opts.output === "json"),
+        showFindingsSummary: true
       });
-      while (true) {
-        const scanDetail = await client.scans.get(id);
-        const elapsed = Math.round((Date.now() - startTime) / 1e3);
-        const activity = scanDetail.current_activity || "";
-        if (useJson) {
-          process.stdout.write(JSON.stringify({ ...scanDetail, elapsed_seconds: elapsed }) + "\n");
-        } else if (spinner) {
-          if (activity && activity !== lastActivity && lastActivity) {
-            spinner.stopAndPersist({ symbol: import_picocolors5.default.green("\u2713"), text: lastActivity });
-            spinner = ora().start();
-          }
-          lastActivity = activity || lastActivity;
-          const activitySuffix = activity ? ` \u2014 ${activity}` : "";
-          spinner.text = `${scanDetail.domain_or_ip}${activitySuffix} \u2014 ${elapsed}s elapsed`;
-        }
-        const terminalStatuses = ["Completed", "Failed", "Stopped"];
-        if (terminalStatuses.some((s) => scanDetail.scan_status.includes(s))) {
-          cleanup();
-          if (useJson) {
-            break;
-          }
-          if (scanDetail.scan_status.includes("Failed")) {
-            console.log(import_picocolors5.default.red(`
-Pentest failed: ${scanDetail.failure_reason || "unknown reason"}`));
-            process.exit(1);
-          }
-          if (scanDetail.scan_status.includes("Stopped")) {
-            console.log(import_picocolors5.default.yellow("\nPentest was cancelled."));
-            break;
-          }
-          console.log(import_picocolors5.default.green(`
-Pentest completed: ${scanDetail.domain_or_ip}`));
-          console.log(`  View findings: kinosec finding list ${id}`);
-          break;
-        }
-        if (Date.now() - startTime > timeoutMs) {
-          cleanup();
-          console.error(`
-Timeout: pentest still running after ${options.timeout}s.`);
-          console.error(`Check status: kinosec pentest get ${id}`);
-          process.exit(3);
-        }
-        await new Promise((resolve) => setTimeout(resolve, intervalMs));
-      }
     } catch (error) {
       handleError(error);
     }
@@ -11127,10 +11244,10 @@ Timeout: pentest still running after ${options.timeout}s.`);
 }
 
 // src/commands/asset.ts
-var import_picocolors7 = __toESM(require_picocolors(), 1);
+var import_picocolors8 = __toESM(require_picocolors(), 1);
 
 // src/commands/asset-auth.ts
-var import_picocolors6 = __toESM(require_picocolors(), 1);
+var import_picocolors7 = __toESM(require_picocolors(), 1);
 
 // src/lib/resolve-asset.ts
 var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-/i;
@@ -11387,7 +11504,7 @@ Examples:
       }
       if (!creds.has_credentials) {
         console.log(`Asset:           ${asset.asset_value}`);
-        console.log(`Auth Type:       ${import_picocolors6.default.dim("(none)")}`);
+        console.log(`Auth Type:       ${import_picocolors7.default.dim("(none)")}`);
         console.log(`Has Credentials: no`);
         return;
       }
@@ -11408,9 +11525,9 @@ Examples:
         const hasAny = ta.has_username || ta.has_cookie || ta.has_bearer_token || ta.has_apikey;
         if (hasAny) {
           const detail = ta.has_username ? "username" : ta.has_bearer_token ? "bearer token" : ta.has_cookie ? "cookie" : "API key";
-          console.log(`Target Account:  ${import_picocolors6.default.green("configured")} (${detail})`);
+          console.log(`Target Account:  ${import_picocolors7.default.green("configured")} (${detail})`);
         } else {
-          console.log(`Target Account:  ${import_picocolors6.default.dim("not configured")}`);
+          console.log(`Target Account:  ${import_picocolors7.default.dim("not configured")}`);
         }
       }
     } catch (error) {
@@ -11561,7 +11678,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors7.default.dim(`
+        console.log(import_picocolors8.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -11673,7 +11790,7 @@ Examples:
 }
 
 // src/commands/finding.ts
-var import_picocolors8 = __toESM(require_picocolors(), 1);
+var import_picocolors9 = __toESM(require_picocolors(), 1);
 function formatPoc(poc) {
   if (poc == null) return null;
   if (typeof poc === "string") return poc.trim() || null;
@@ -11714,7 +11831,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors8.default.dim(`
+        console.log(import_picocolors9.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -11802,7 +11919,7 @@ Examples:
 }
 
 // src/commands/report.ts
-var import_picocolors9 = __toESM(require_picocolors(), 1);
+var import_picocolors10 = __toESM(require_picocolors(), 1);
 function renderMarkdown(data) {
   const { scan, findings } = data;
   const lines = [];
@@ -11879,7 +11996,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors9.default.dim(`
+        console.log(import_picocolors10.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -11950,7 +12067,7 @@ Examples:
 }
 
 // src/commands/token.ts
-var import_picocolors10 = __toESM(require_picocolors(), 1);
+var import_picocolors11 = __toESM(require_picocolors(), 1);
 function registerTokenCommand(program3) {
   const token = program3.command("token").description("Manage API tokens");
   token.command("list").description("List API tokens").option("--limit <n>", "Max results per page", "20").option("--cursor <cursor>", "Pagination cursor").addHelpText("after", `
@@ -11985,7 +12102,7 @@ Examples:
         ])
       );
       if (result.next_cursor) {
-        console.log(import_picocolors10.default.dim(`
+        console.log(import_picocolors11.default.dim(`
 More results available. Use --cursor ${result.next_cursor}`));
       }
     } catch (error) {
@@ -12012,7 +12129,7 @@ Examples:
       }
       printSuccess(`Token created: ${result.name}`);
       console.log("");
-      console.log(import_picocolors10.default.bold("  Token: ") + result.token);
+      console.log(import_picocolors11.default.bold("  Token: ") + result.token);
       console.log("");
       printWarning("Save this token \u2014 it will not be shown again.");
       console.log(`  ID: ${result.id}`);
@@ -12045,7 +12162,7 @@ Examples:
 
 // src/cli.ts
 var program2 = new Command();
-program2.name("kinosec").description("KinoSec CLI \u2014 run pentests from your terminal").version("0.4.0", "-v, --version").option("--token <pat>", "API token (overrides KINOSEC_TOKEN and config)").option("--api-url <url>", "API base URL (overrides config)").option("--output <format>", "Output format: text or json", "text").option("--json", "Shorthand for --output json").option("--no-color", "Disable colors");
+program2.name("kinosec").description("KinoSec CLI \u2014 run pentests from your terminal").version("0.6.0", "-v, --version").option("--token <pat>", "API token (overrides KINOSEC_TOKEN and config)").option("--api-url <url>", "API base URL (overrides config)").option("--output <format>", "Output format: text or json", "text").option("--json", "Shorthand for --output json").option("--no-color", "Disable colors");
 registerAuthCommand(program2);
 registerConfigCommand(program2);
 registerMeCommand(program2);
@@ -12054,7 +12171,7 @@ registerAssetCommand(program2);
 registerFindingCommand(program2);
 registerReportCommand(program2);
 registerTokenCommand(program2);
-program2.parseAsync(process.argv).then(() => checkForUpdate("0.4.0")).catch(handleError);
+program2.parseAsync(process.argv).then(() => checkForUpdate("0.6.0")).catch(handleError);
 /*! Bundled license information:
 
 ky/distribution/index.js: