kirograph 0.17.0 → 0.20.0

package/dist/bin/commands/help.js

@@ -19,121 +19,394 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var help_exports = {};
 __export(help_exports, {
   printColoredHelp: () => printColoredHelp,
+  printInteractiveHelp: () => printInteractiveHelp,
   register: () => register
 });
 module.exports = __toCommonJS(help_exports);
 var import_banner = require("../banner");
-function printColoredHelp() {
-  const c = {
-    reset: "\x1B[0m",
-    bold: "\x1B[1m",
-    dim: "\x1B[2m",
-    violet: "\x1B[38;5;99m",
-    purple: "\x1B[38;5;135m",
-    lavender: "\x1B[38;5;141m",
-    paleLavender: "\x1B[38;5;183m",
-    gray: "\x1B[90m",
-    brown: "\x1B[38;5;130m"
-  };
-  const groups = [
-    {
-      title: "\u{1F527} Workspace Setup",
-      commands: [
-        { name: "install", desc: "Wire up MCP/instructions for an agent workspace", opts: ["--target <t>  kiro | claude | codex"] },
-        { name: "init", args: "[path]", desc: "Initialize KiroGraph in a project", opts: ["-i, --index  Index immediately after init"] },
-        { name: "uninit", args: "[path]", desc: "Remove KiroGraph from a project", opts: ["--force      Skip confirmation", "--target <t>  kiro | claude | codex | all"] },
-        { name: "uninstall", args: "[path]", desc: "Alias for uninit", opts: ["--force      Skip confirmation", "--target <t>  kiro | claude | codex | all"] }
-      ]
-    },
-    {
-      title: "\u{1F4E6} Indexing",
-      commands: [
-        { name: "index", args: "[path]", desc: "Full re-index of a project", opts: ["--force     Force re-index all files"] },
-        { name: "sync", args: "[path]", desc: "Incremental sync of changed files", opts: ["--files <f> Specific files to sync"] },
-        { name: "sync-if-dirty", args: "[path]", desc: "Sync only if a dirty marker is present", opts: ["-q, --quiet  Suppress output"] },
-        { name: "mark-dirty", args: "[path]", desc: "Write a dirty marker for deferred sync" },
-        { name: "unlock", args: "[path]", desc: "Force-release a stale lock file" }
-      ]
-    },
-    {
-      title: "\u{1F50D} Search & Exploration",
-      commands: [
-        { name: "status", args: "[path]", desc: "Show index statistics and health" },
-        { name: "query", args: "<search>", desc: "Search for symbols by name", opts: ["--kind <k>      Filter by kind", "--limit <n>     Max results (default 10)"] },
-        { name: "context", args: "<task>", desc: "Build relevant code context for a task", opts: ["--max-nodes <n>  Max symbols (default 20)", "--no-code        Exclude code snippets", "--format <fmt>   markdown | json"] },
-        { name: "files", args: "[path]", desc: "Show project file structure from the index", opts: ["--format <fmt>   tree | flat | grouped", "--filter <path>  Filter by directory prefix", "--pattern <glob> Filter by glob", "--max-depth <n>  Limit tree depth", "--json           Output as JSON"] },
-        { name: "path", args: "<from> <to>", desc: "Find the shortest path between two symbols", opts: ["--format <fmt>   table | json"] },
-        { name: "export build", args: "[path]", desc: "Generate the interactive graph dashboard (.kirograph/export/)", opts: ["-o, --output <dir>  Custom output directory", "--include-contains  Include structural contains edges"] },
-        { name: "export start", args: "[path]", desc: "Generate and open the dashboard in the browser", opts: ["-o, --output <dir>  Custom output directory", "--include-contains  Include structural contains edges"] },
-        { name: "affected", args: "[files...]", desc: "Find test files affected by changed source files", opts: ["--stdin          Read file list from stdin", "-d, --depth <n>  Max traversal depth (default 5)", "-f, --filter <g> Custom test file glob", "-j, --json       Output as JSON", "-q, --quiet      File paths only"] }
-      ]
-    },
-    {
-      title: "\u{1F4CA} Graph Insights",
-      commands: [
-        { name: "hotspots", args: "[path]", desc: "Find most-connected symbols by edge degree", opts: ["--limit <n>    Max results (default 20)", "--format <f>  table | json"] },
-        { name: "surprising", args: "[path]", desc: "Find non-obvious cross-file connections", opts: ["--limit <n>    Max results (default 20)", "--format <f>  table | json"] },
-        { name: "dead-code", args: "[path]", desc: "Find unexported symbols with no incoming references", opts: ["--limit <n>    Max results (default 50)", "--format <f>  table | json"] },
-        { name: "snapshot", desc: "Save or list graph snapshots for structural diffing", opts: ["save [label]  Save current graph state", "list          List saved snapshots", "diff [label]  Diff current graph vs a snapshot  --format summary|full|json"] }
-      ]
-    },
-    {
-      title: "\u{1F3DB}\uFE0F Architecture Analysis",
-      commands: [
-        { name: "architecture", args: "[path]", desc: "Show package graph and layer map", opts: ["--packages     Show packages only", "--layers       Show layers only", "--format <f>   json"] },
-        { name: "coupling", args: "[path]", desc: "Show coupling metrics per package", opts: ["--sort <s>     instability | ca | ce | name", "--package <n>  Detail view for one package", "--format <f>   json"] },
-        { name: "package", args: "<name>", desc: "Inspect a package: deps, files, metrics", opts: ["--no-files     Omit file list", "--format <f>   json"] }
-      ]
-    },
-    {
-      title: "\u2699\uFE0F Agent & Configuration",
-      commands: [
-        { name: "caveman", args: "[mode]", desc: "Set agent communication style (off | lite | full | ultra)" },
-        { name: "compression", args: "[level]", desc: "Set shell compression level (off | normal | aggressive | ultra)" },
-        { name: "exec", args: "<command...>", desc: "Run a shell command with token-optimized output", opts: ["-l, --level <l>  normal | aggressive | ultra", "-t, --timeout <s> Timeout in seconds (default 60)", "--raw         Show raw + compressed for comparison", "--json        Output as JSON"] },
-        { name: "gain", desc: "Show token savings from compressed command outputs", opts: ["--graph       ASCII graph (last 30 days)", "--history     Recent command history", "--daily       Day-by-day breakdown", "--period <p>  session | today | week | all"] },
-        { name: "mem", args: "<command>", desc: "Persistent memory (search, store, timeline, status, prune, lint, reembed)" },
-        { name: "data", args: "<command>", desc: "Tabular data navigation (list, describe, query, aggregate, search, index, reindex)" },
-        { name: "serve", desc: "Start the MCP server", opts: ["--mcp        Run as MCP stdio server", "--path <p>   Project path"] },
-        { name: "dashboard", desc: "Manage the Qdrant or Typesense dashboard server", opts: ["start [path]  Start server and open dashboard", "stop [path]   Stop the running server"] }
-      ]
+const c = {
+  reset: "\x1B[0m",
+  bold: "\x1B[1m",
+  dim: "\x1B[2m",
+  violet: "\x1B[38;5;99m",
+  purple: "\x1B[38;5;135m",
+  lavender: "\x1B[38;5;141m",
+  paleLavender: "\x1B[38;5;183m",
+  gray: "\x1B[90m",
+  brown: "\x1B[38;5;130m",
+  green: "\x1B[32m",
+  cyan: "\x1B[36m",
+  underline: "\x1B[4m"
+};
+const GROUPS = [
+  {
+    icon: "\u{1F527}",
+    title: "Setup",
+    commands: [
+      { name: "install", desc: "Wire up MCP/instructions for an agent workspace", opts: ["--target <t>  kiro | cursor | claude | windsurf | ..."] },
+      { name: "init", args: "[path]", desc: "Initialize KiroGraph in a project", opts: ["-i, --index  Index immediately after init"] },
+      { name: "uninit", args: "[path]", desc: "Remove KiroGraph from a project", opts: ["--force      Skip confirmation", '--target <t>  Target to clean up (or "all")'] }
+    ],
+    examples: [
+      ["kirograph install", "Wire up Kiro MCP + hooks + steering"],
+      ["kirograph install --target cursor", "Wire up Cursor MCP + rules + hooks"],
+      ["kirograph init --index", "Init and immediately index"]
+    ]
+  },
+  {
+    icon: "\u{1F4E6}",
+    title: "Indexing",
+    commands: [
+      { name: "index", args: "[path]", desc: "Full re-index of a project", opts: ["--force     Force re-index all files"] },
+      { name: "sync", args: "[path]", desc: "Incremental sync of changed files", opts: ["--files <f> Specific files to sync"] },
+      { name: "sync-if-dirty", args: "[path]", desc: "Sync only if a dirty marker is present", opts: ["-q, --quiet  Suppress output"] },
+      { name: "mark-dirty", args: "[path]", desc: "Write a dirty marker for deferred sync" },
+      { name: "unlock", args: "[path]", desc: "Force-release a stale lock file" }
+    ],
+    examples: [
+      ["kirograph sync", "Incremental sync of changed files"],
+      ["kirograph index --force", "Force full re-index"]
+    ]
+  },
+  {
+    icon: "\u{1F50D}",
+    title: "Search",
+    commands: [
+      { name: "status", args: "[path]", desc: "Show index statistics and health" },
+      { name: "query", args: "<search>", desc: "Search for symbols by name", opts: ["--kind <k>   Filter by kind", "--limit <n>  Max results"] },
+      { name: "context", args: "<task>", desc: "Build relevant code context for a task", opts: ["--max-nodes <n>  Max symbols", "--no-code  Exclude code", "--format <f>  markdown | json"] },
+      { name: "files", args: "[path]", desc: "Show project file structure", opts: ["--format <f>  tree | flat | grouped | compact", "--filter <p>  Directory prefix", "--pattern <g>  Glob"] },
+      { name: "path", args: "<from> <to>", desc: "Shortest path between two symbols" },
+      { name: "affected", args: "[files...]", desc: "Find test files affected by changes", opts: ["--stdin  Read from stdin", "-d <n>  Depth", "-q  Quiet"] }
+    ],
+    examples: [
+      ["kirograph query useState", "Find symbols named useState"],
+      ['kirograph context "add dark mode"', "Get context for a task"],
+      ["kirograph path LoginController Pool", "How are these connected?"],
+      ["git diff --name-only | kirograph affected --stdin", "Affected tests from git diff"]
+    ]
+  },
+  {
+    icon: "\u{1F4CA}",
+    title: "Insights",
+    commands: [
+      { name: "hotspots", args: "[path]", desc: "Most-connected symbols by edge degree", opts: ["--limit <n>  Max results", "--format <f>  table | json"] },
+      { name: "surprising", args: "[path]", desc: "Non-obvious cross-file connections", opts: ["--limit <n>  Max results"] },
+      { name: "dead-code", args: "[path]", desc: "Unreferenced unexported symbols", opts: ["--limit <n>  Max results"] },
+      { name: "snapshot", desc: "Save/list/diff graph snapshots", opts: ["save [label]", "list", "diff [label]  --format summary|full|json"] },
+      { name: "export", desc: "Interactive graph dashboard", opts: ["build [path]  Generate HTML", "start [path]  Generate and open"] }
+    ],
+    examples: [
+      ["kirograph hotspots --limit 10", "Top 10 most-connected symbols"],
+      ["kirograph snapshot save pre-refactor", "Save before a refactor"],
+      ["kirograph snapshot diff pre-refactor", "See what changed"],
+      ["kirograph export start", "Open the graph dashboard"]
+    ]
+  },
+  {
+    icon: "\u{1F3DB}\uFE0F",
+    title: "Architecture",
+    commands: [
+      { name: "architecture", args: "[path]", desc: "Package graph and layer map", opts: ["--packages  Packages only", "--layers  Layers only"] },
+      { name: "coupling", args: "[path]", desc: "Coupling metrics per package", opts: ["--sort <s>  instability | ca | ce | name", "--package <n>  Detail view"] },
+      { name: "package", args: "<name>", desc: "Inspect a package", opts: ["--no-files  Omit file list"] }
+    ],
+    examples: [
+      ["kirograph architecture --packages", "List all detected packages"],
+      ["kirograph coupling --sort instability", "Packages ranked by instability"],
+      ["kirograph package src/auth", "Inspect the auth package"]
+    ]
+  },
+  {
+    icon: "\u{1F9E0}",
+    title: "Memory",
+    commands: [
+      { name: "mem search", args: "<query>", desc: "Search past observations", opts: ["--kind <k>  Filter by kind", "--limit <n>  Max results"] },
+      { name: "mem store", args: "<text>", desc: "Store an observation", opts: ["--kind <k>  decision | error | pattern | architecture | note"] },
+      { name: "mem timeline", desc: "List recent sessions and observations" },
+      { name: "mem status", desc: "Memory health dashboard" },
+      { name: "mem prune", desc: "Remove old observations", opts: ["--older-than <d>  Duration (e.g. 90d)"] },
+      { name: "mem export", desc: "Export observations", opts: ["--format <f>  jsonl | md"] },
+      { name: "mem reembed", desc: "Re-embed after model change" },
+      { name: "mem lint", desc: "Health check and auto-repair", opts: ["--fix  Auto-fix issues"] }
+    ],
+    examples: [
+      ['kirograph mem search "auth decision"', "Search for past decisions"],
+      ['kirograph mem store "use idempotency keys" --kind decision', "Store a decision"],
+      ["kirograph mem timeline", "See recent sessions"]
+    ]
+  },
+  {
+    icon: "\u{1F512}",
+    title: "Security",
+    commands: [
+      { name: "security", args: "[path]", desc: "Security overview: vulnerabilities, verdicts, stale-data warnings" },
+      {
+        name: "vulns",
+        args: "[path]",
+        desc: "List vulnerabilities with reachability verdicts and severity",
+        opts: [
+          "--severity <level>  Filter by severity: critical, high, medium, low",
+          "--verdict <verdict>  Filter by verdict: affected, not_affected, under_investigation",
+          "--refresh  Trigger fresh vulnerability enrichment before listing",
+          "--add <cveId>  Manually register a CVE (requires --package and --version)"
+        ]
+      },
+      { name: "reachability", args: "<target>", desc: "Check reachability for a CVE or dependency: verdict, call paths, impact" },
+      {
+        name: "vuln suppress",
+        args: "<cveId>",
+        desc: "Mark a CVE as suppressed (false positive or accepted risk)",
+        opts: [
+          "--reason <text>   Reason for suppression",
+          "--expires <date>  Expiry date (e.g. 2026-12-31)"
+        ]
+      },
+      { name: "vuln unsuppress", args: "<cveId>", desc: "Remove a suppression" },
+      { name: "vuln suppressions", desc: "List all active suppressions", opts: ["--format json  JSON output"] },
+      {
+        name: "licenses",
+        args: "[path]",
+        desc: "Show dependency licenses and check against policy (deny/warn lists)",
+        opts: [
+          "--policy             Show only policy violations",
+          "--deny <patterns>    Override deny list (comma-separated SPDX patterns)",
+          "--warn <patterns>    Override warn list (comma-separated SPDX patterns)",
+          "--format json        JSON output"
+        ]
+      },
+      { name: "vex", args: "[path]", desc: "Export a VEX document (Vulnerability Exploitability eXchange)", opts: ["--output <file>  Write to file instead of stdout"] },
+      { name: "sbom", args: "[path]", desc: "Export a Software Bill of Materials", opts: ["--output <file>  Write to file instead of stdout"] },
+      {
+        name: "staleness",
+        args: "[path]",
+        desc: "Check dependency freshness \u2014 packages behind their latest version",
+        opts: [
+          "--threshold <n>  Show only packages with staleness_score >= n (default: 0.3)",
+          "--refresh        Fetch latest version info from registries before listing",
+          "--format <fmt>   table | json"
+        ]
+      },
+      { name: "security export", args: "[path]", desc: "Generate HTML security dashboard", opts: ["--output <file>  Output path", "--open  Open in browser"] },
+      { name: "security secrets", args: "[path]", desc: "Scan for hardcoded secrets with call-graph blast radius", opts: ["--include-tests  Include test files", "--severity <s>  Filter level", "--format json"] },
+      { name: "security flows", args: "[path]", desc: "SAST-lite: detect dangerous data flows (SQL injection, eval, path traversal, etc.)", opts: ["--type sql|eval|deserialize|path|all", "--format json"] },
+      { name: "security ci-report", args: "[path]", desc: "Generate CI/CD security report (JSON, SARIF for GitHub, or text)", opts: ["--format json|sarif|text", "--fail-on affected|any|critical", "--output <file>"] },
+      { name: "attack-surface", args: "[path]", desc: "Map attack surface: routes \u2192 vulnerable deps with hop count and auth status", opts: ["--limit <n>", "--public-only", "--format json"] },
+      { name: "supply-chain", args: "[path]", desc: "Supply chain health: OpenSSF Scorecard, maintainer count, abandoned packages", opts: ["--threshold critical|high|medium", "--refresh", "--format json"] },
+      { name: "dep-confusion", args: "[path]", desc: "Detect dependency confusion: internal packages that exist in public registries", opts: ["--format json"] },
+      { name: "remediation", args: "[path]", desc: "Remediation SLA tracking: days open, fix available since, overdue alerts", opts: ["--overdue-only", "--format json"] },
+      {
+        name: "pattern",
+        args: "[pattern]",
+        desc: "AST structural search: live pattern search or library rule runner",
+        opts: [
+          "--list             Show all bundled SAST rules",
+          "--library <id>    Run a specific library rule",
+          "--lang <l>        Language filter (js, ts, python, go, ...)",
+          "--format json     JSON output"
+        ]
+      }
+    ],
+    examples: [
+      ["kirograph security", "Overview: dep count, vuln count, verdict breakdown"],
+      ["kirograph security --refresh-staleness", "Overview including stale dependency count"],
+      ["kirograph vulns", "List all vulnerabilities with severity and verdict"],
+      ["kirograph vulns --stale", "Show staleness score alongside each CVE"],
+      ["kirograph vulns --verdict under_investigation", "Show only vulnerabilities still being investigated"],
+      ["kirograph vulns --severity critical --verdict affected", "Critical confirmed vulnerabilities"],
+      ["kirograph vulns --refresh", "Re-query OSV before listing"],
+      ["kirograph staleness", "Show packages with staleness_score >= 0.3"],
+      ["kirograph staleness --refresh --threshold 0.5", "Fetch latest versions and show very stale packages"],
+      ["kirograph reachability CVE-2023-12345", "Check reachability for a specific CVE"],
+      ["kirograph reachability lodash", "Check reachability for a dependency by package name"],
+      ["kirograph licenses", "Show all dependency licenses"],
+      ["kirograph licenses --policy", "Show only license policy violations"],
+      ['kirograph licenses --deny "GPL-*,AGPL-*"', "Block all GPL/AGPL licenses"],
+      ["kirograph vex --output vex.json", "Export CycloneDX VEX document"],
+      ["kirograph sbom --output sbom.json", "Export SPDX SBOM"],
+      ["kirograph security export --open", "Generate and open HTML security dashboard"],
+      ["kirograph security secrets", "Scan for hardcoded secrets with call-graph blast radius"],
+      ["kirograph security flows", "Detect dangerous data flows (SQL injection, eval, etc.)"],
+      ["kirograph security ci-report --format sarif --output results.sarif", "SARIF report for GitHub Security tab"],
+      ["kirograph attack-surface --public-only", "Show public routes reaching vulnerable deps"],
+      ["kirograph supply-chain --threshold high", "Show high-risk supply chain findings"],
+      ["kirograph dep-confusion", "Detect dependency confusion attack vectors"],
+      ["kirograph remediation --overdue-only", "Show CVEs past their remediation SLA"],
+      ['kirograph vuln suppress CVE-2024-1234 --reason "not in code path"', "Suppress a false positive CVE"],
+      ["kirograph vuln unsuppress CVE-2024-1234", "Remove a suppression"],
+      ["kirograph vuln suppressions", "List all active suppressions"],
+      ['kirograph pattern "eval($X)"', "Find all eval() calls"],
+      ["kirograph pattern --list", "Show all bundled SAST rules"],
+      ["kirograph pattern --library dangerous-eval-js", "Run the dangerous-eval library rule"]
+    ]
+  },
+  {
+    icon: "\u2699\uFE0F",
+    title: "Agent",
+    commands: [
+      { name: "caveman", args: "[mode]", desc: "Communication style (off | lite | full | ultra)" },
+      { name: "compression", args: "[level]", desc: "Shell compression level (off | normal | aggressive | ultra)" },
+      { name: "exec", args: "<cmd>", desc: "Run command with token-optimized output", opts: ["-l <level>  Compression level", "-t <sec>  Timeout"] },
+      { name: "gain", desc: "Token savings statistics", opts: ["--graph  ASCII chart", "--history  Recent commands", "--daily  Day breakdown"] },
+      { name: "serve", desc: "Start the MCP server", opts: ["--mcp  Run as stdio MCP", "--path <p>  Project path"] }
+    ],
+    examples: [
+      ["kirograph caveman lite", "Enable lite caveman mode"],
+      ["kirograph exec git status", "Run git status with compression"],
+      ["kirograph gain --graph", "Show token savings graph"]
+    ]
+  }
+];
+function renderGroup(group, highlightIdx) {
+  const lines = [];
+  const nameWidth = Math.max(...group.commands.map((cmd) => (cmd.name + (cmd.args ? " " + cmd.args : "")).length)) + 2;
+  lines.push("");
+  lines.push(`  ${c.bold}${c.paleLavender}COMMANDS${c.reset}  ${c.dim}\u2191\u2193 select \xB7 enter to copy \xB7 q quit${c.reset}`);
+  lines.push("");
+  for (let i = 0; i < group.commands.length; i++) {
+    const cmd = group.commands[i];
+    const signature = cmd.name + (cmd.args ? " " + cmd.args : "");
+    const isHighlighted = i === highlightIdx;
+    const prefix = isHighlighted ? `${c.green}${c.bold}\u276F${c.reset} ` : "  ";
+    const namePart = isHighlighted ? `${c.bold}${c.lavender}${cmd.name}${c.reset}${cmd.args ? " " + c.bold + cmd.args + c.reset : ""}` : `${c.lavender}${cmd.name}${c.reset}${cmd.args ? " " + c.dim + cmd.args + c.reset : ""}`;
+    const pad = " ".repeat(Math.max(0, nameWidth - signature.length));
+    lines.push(`${prefix}${namePart}${pad}${c.gray}${cmd.desc}${c.reset}`);
+    if (cmd.opts) {
+      for (const opt of cmd.opts) {
+        const [flag, ...rest] = opt.split(/  +/);
+        lines.push(`    ${c.purple}${flag}${c.reset}${rest.length ? "  " + c.dim + rest.join("  ") + c.reset : ""}`);
+      }
     }
-  ];
+  }
+  if (group.examples.length > 0) {
+    lines.push("");
+    lines.push(`  ${c.bold}${c.paleLavender}EXAMPLES${c.reset}`);
+    lines.push("");
+    for (const [ex, desc] of group.examples) {
+      lines.push(`  ${c.violet}$${c.reset} ${c.lavender}${ex}${c.reset}`);
+      lines.push(`    ${c.dim}${desc}${c.reset}`);
+    }
+  }
+  return lines;
+}
+function renderTabs(selectedIdx) {
+  return GROUPS.map((g, i) => {
+    if (i === selectedIdx) {
+      return `${c.bold}${c.violet}${c.underline}${g.icon} ${g.title}${c.reset}`;
+    }
+    return `${c.dim}${g.icon} ${g.title}${c.reset}`;
+  }).join("  ");
+}
+function printInteractiveHelp() {
+  const CLEAR_LINE = "\x1B[2K\x1B[G";
+  let selectedTab = 0;
+  let selectedCmd = 0;
+  let prevLineCount = 0;
+  function render(first) {
+    if (!first && prevLineCount > 0) {
+      process.stdout.write(`\x1B[${prevLineCount}A`);
+      for (let i = 0; i < prevLineCount; i++) {
+        process.stdout.write(`${CLEAR_LINE}
+`);
+      }
+      process.stdout.write(`\x1B[${prevLineCount}A`);
+    }
+    const lines = [];
+    lines.push("");
+    lines.push(`  ${renderTabs(selectedTab)}`);
+    lines.push(`  ${c.dim}\u2190 \u2192 tabs \xB7 \u2191 \u2193 commands \xB7 enter to use \xB7 q quit${c.reset}`);
+    lines.push(...renderGroup(GROUPS[selectedTab], selectedCmd));
+    lines.push("");
+    for (const line of lines) {
+      process.stdout.write(`${CLEAR_LINE}${line}
+`);
+    }
+    prevLineCount = lines.length;
+  }
+  (0, import_banner.printBanner)();
+  console.log(`
+${c.bold}${c.paleLavender}USAGE${c.reset}  ${c.lavender}kirograph${c.reset} ${c.gray}<command>${c.reset} ${c.dim}[options]${c.reset}`);
+  render(true);
+  const stdin = process.stdin;
+  if (!stdin.isTTY) {
+    for (let i = 1; i < GROUPS.length; i++) {
+      const lines = renderGroup(GROUPS[i], -1);
+      for (const line of lines) console.log(line);
+    }
+    return;
+  }
+  stdin.setRawMode(true);
+  stdin.resume();
+  stdin.setEncoding("utf8");
+  function cleanup() {
+    stdin.removeListener("data", onData);
+    stdin.setRawMode(false);
+    stdin.pause();
+  }
+  function onData(key) {
+    if (key.startsWith("\x1B[")) {
+      if (key === "\x1B[C") {
+        selectedTab = (selectedTab + 1) % GROUPS.length;
+        selectedCmd = 0;
+        render(false);
+      } else if (key === "\x1B[D") {
+        selectedTab = (selectedTab - 1 + GROUPS.length) % GROUPS.length;
+        selectedCmd = 0;
+        render(false);
+      } else if (key === "\x1B[B") {
+        const maxCmd = GROUPS[selectedTab].commands.length - 1;
+        selectedCmd = Math.min(selectedCmd + 1, maxCmd);
+        render(false);
+      } else if (key === "\x1B[A") {
+        selectedCmd = Math.max(selectedCmd - 1, 0);
+        render(false);
+      }
+      return;
+    }
+    if (key === "\r" || key === "\n") {
+      cleanup();
+      const cmd = GROUPS[selectedTab].commands[selectedCmd];
+      const fullCmd = `kirograph ${cmd.name}${cmd.args ? " " + cmd.args : ""}`;
+      process.stdout.write(`\x1B[${prevLineCount}A`);
+      for (let i = 0; i < prevLineCount; i++) {
+        process.stdout.write(`${CLEAR_LINE}
+`);
+      }
+      process.stdout.write(`\x1B[${prevLineCount}A`);
+      console.log(`
+  ${c.green}${c.bold}$${c.reset} ${fullCmd}
+`);
+      process.exit(0);
+    } else if (key === "q" || key === "") {
+      cleanup();
+      console.log();
+      process.exit(0);
+    }
+  }
+  stdin.on("data", onData);
+}
+function printColoredHelp() {
   console.log(`
 ${c.bold}${c.paleLavender}USAGE${c.reset}`);
   console.log(`  ${c.lavender}kirograph${c.reset} ${c.gray}<command>${c.reset} ${c.dim}[options]${c.reset}
 `);
-  const allCmds = groups.flatMap((g) => g.commands);
-  const nameWidth = Math.max(...allCmds.map((cmd) => (cmd.name + (cmd.args ? " " + cmd.args : "")).length)) + 2;
-  for (const group of groups) {
-    console.log(`${c.bold}${c.paleLavender}${group.title.toUpperCase()}${c.reset}
+  for (const group of GROUPS) {
+    console.log(`${c.bold}${c.paleLavender}${group.icon} ${group.title.toUpperCase()}${c.reset}
 `);
+    const nameWidth = Math.max(...group.commands.map((cmd) => (cmd.name + (cmd.args ? " " + cmd.args : "")).length)) + 2;
     for (const cmd of group.commands) {
       const signature = cmd.name + (cmd.args ? " " + cmd.args : "");
-      const isCaveman = cmd.name === "caveman";
-      const nameColor = isCaveman ? c.brown : c.lavender;
-      const prefix = isCaveman ? "\u{1FAA8} " : "  ";
-      const namePart = `${nameColor}${cmd.name}${c.reset}${cmd.args ? " " + c.dim + cmd.args + c.reset : ""}`;
+      const namePart = `${c.lavender}${cmd.name}${c.reset}${cmd.args ? " " + c.dim + cmd.args + c.reset : ""}`;
       const pad = " ".repeat(Math.max(0, nameWidth - signature.length));
-      console.log(`${prefix}${namePart}${pad}${c.gray}${cmd.desc}${c.reset}`);
-      if (isCaveman) {
-        const inspiredPad = " ".repeat(3 + nameWidth);
-        console.log(`${inspiredPad}${c.dim}Inspired by Caveman , original idea by github.com/JuliusBrussee/caveman${c.reset}`);
-        console.log();
-      }
+      console.log(`  ${namePart}${pad}${c.gray}${cmd.desc}${c.reset}`);
       if (cmd.opts) {
         for (const opt of cmd.opts) {
           const [flag, ...rest] = opt.split(/  +/);
-          const optPad = " ".repeat(nameWidth + 2);
-          console.log(`  ${optPad}${c.purple}${flag}${c.reset}${rest.length ? "  " + c.dim + rest.join("  ") + c.reset : ""}`);
+          console.log(`    ${c.purple}${flag}${c.reset}${rest.length ? "  " + c.dim + rest.join("  ") + c.reset : ""}`);
         }
-        console.log();
       }
     }
-    if (!groups[groups.length - 1].commands.includes(group.commands[group.commands.length - 1])) {
-      const lastHasOpts = group.commands[group.commands.length - 1].opts;
-      if (!lastHasOpts) console.log();
-    }
+    console.log();
   }
   console.log(`${c.bold}${c.paleLavender}GLOBAL FLAGS${c.reset}
 `);
@@ -184,6 +457,34 @@ ${c.bold}${c.paleLavender}USAGE${c.reset}`);
         ["kirograph package src/auth", "Inspect the auth package"]
       ]
     },
+    {
+      title: "\u{1F512} Security",
+      examples: [
+        ["kirograph security", "Overview: dep count, vuln count, verdict breakdown"],
+        ["kirograph security --refresh-staleness", "Overview including stale dependency count"],
+        ["kirograph vulns", "List all vulnerabilities"],
+        ["kirograph vulns --stale", "Show staleness score alongside each CVE"],
+        ["kirograph vulns --verdict under_investigation", "Vulnerabilities still being investigated"],
+        ["kirograph vulns --severity critical --verdict affected", "Critical confirmed vulnerabilities"],
+        ["kirograph vulns --refresh", "Re-query OSV then list"],
+        ["kirograph staleness", "Show packages with staleness_score >= 0.3"],
+        ["kirograph staleness --refresh --threshold 0.5", "Fetch latest versions and show very stale packages"],
+        ["kirograph reachability CVE-2023-12345", "Check reachability for a specific CVE"],
+        ["kirograph reachability lodash", "Check reachability for a dependency by package name"],
+        ["kirograph licenses", "Show all dependency licenses"],
+        ["kirograph licenses --policy", "Show only license policy violations"],
+        ['kirograph licenses --deny "GPL-*,AGPL-*"', "Block all GPL/AGPL licenses"],
+        ["kirograph vex --output vex.json", "Export CycloneDX VEX document"],
+        ["kirograph sbom --output sbom.json", "Export SPDX SBOM"],
+        ['kirograph vuln suppress CVE-2024-1234 --reason "not in code path"', "Suppress a false positive CVE"],
+        ["kirograph vuln suppress CVE-2024-1234 --expires 2026-12-31", "Suppress with expiry date"],
+        ["kirograph vuln unsuppress CVE-2024-1234", "Remove a suppression"],
+        ["kirograph vuln suppressions", "List all active suppressions"],
+        ['kirograph pattern "eval($X)"', "Find all eval() calls (requires enablePatterns: true)"],
+        ["kirograph pattern --list", "Show all bundled SAST pattern rules"],
+        ["kirograph pattern --library dangerous-eval-js", "Run a specific library rule"]
+      ]
+    },
     {
       title: "\u2699\uFE0F Agent",
       examples: [
@@ -217,15 +518,12 @@ ${c.bold}${c.paleLavender}USAGE${c.reset}`);
 function register(program) {
   program.configureHelp({ formatHelp: () => "" });
   program.addHelpText("afterAll", "");
-  program.helpInformation = () => {
-    (0, import_banner.printBanner)();
-    printColoredHelp();
-    return "";
-  };
+  program.helpOption(false);
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   printColoredHelp,
+  printInteractiveHelp,
   register
 });
 //# sourceMappingURL=help.js.map