securewithtrace 0.22.0 → 0.24.0

package/README.md

@@ -66,7 +66,8 @@ tracecli vulnerabilities list --severity HIGH
 ```bash
 tracecli auth login
 tracecli auth status
-tracecli auth logout
+tracecli auth logout           # prompts for confirmation interactively
+tracecli auth logout --no-confirm  # skip prompt (for CI/scripts)
 ```
 
 ### Organization context
@@ -86,14 +87,23 @@ When your account belongs to multiple organizations, use `tracecli org switch` t
 # List org repositories known to Trace
 tracecli repo list
 
+# Show the next page of repositories
+tracecli repo list --page 2 --limit 30
+
+# Show all matching repositories
+tracecli repo list --all
+
 # List only connected GitHub repositories that match "trace"
 tracecli repo list --platform GITHUB --status CONNECTED --query trace
 
 # Advanced filtering syntax (repeatable)
 tracecli repo list --filter "platform=GITHUB" --filter "repo:trace" --filter "status!=DISCONNECTED"
 
-# Alias command for filtering
+# Alias command for filtering (all repo list flags are supported)
 tracecli repo filter --filter "language:typescript" --filter "branch=main"
+tracecli repo filter --language typescript --limit 10
+tracecli repo filter --output json | jq '.[].repositoryUrl'
+tracecli repo filter --output tsv | cut -f1
 
 # Find repositories that use a specific dependency
 tracecli repo list --dependency lodash
@@ -105,7 +115,7 @@ tracecli repo list --dependency lodash@4.17.21
 tracecli repo list --dependency @types/node@20
 
 # Dependency results as JSON
-tracecli repo list --dependency react --json | jq '.[].fullName'
+tracecli repo list --dependency react --output json | jq '.[].fullName'
 
 # Clone by owner/repo shorthand
 tracecli repo clone securewithtrace/trace
@@ -117,6 +127,16 @@ tracecli repo clone securewithtrace/trace --branch main --depth 1
 ### Vulnerabilities
 
 ```bash
+# Fetch a single vulnerability by display ID, numeric ID, or UUID
+tracecli vulnerabilities get TRACE-123
+
+# Open the vulnerability detail page in a browser
+tracecli vulnerabilities get TRACE-123 --web
+
+# JSON or TSV output for scripting
+tracecli vulnerabilities get TRACE-123 --output json
+tracecli vulnerabilities get TRACE-123 --output tsv | cut -f1,10
+
 # List vulnerabilities across your organization (default: 30 results)
 tracecli vulnerabilities list
 
@@ -173,6 +193,8 @@ Repository filter options:
   - Supported fields: `platform`, `status`, `url`, `repo`, `branch`, `language`
   - Supported operators: `=` (exact), `!=` (not exact), `:` (contains), `!:` (not contains)
 - `--dependency`: filter by dependency name with optional `@version` (e.g. `lodash`, `lodash@4.17`, `@types/node@20`)
+- `--page`: choose which page of results to display when using `--limit` (default: 1)
+- `--all`: display all matching repositories (disables pagination)
 
 ### Pentests
 
@@ -198,7 +220,7 @@ tracecli pentest findings list --pentest PT-3 --output json
 # Findings as TSV
 tracecli pentest findings list --pentest PT-3 --output tsv | cut -f1,4
 
-# Open pentests dashboard in browser
+# Open the pentest detail page in a browser
 tracecli pentest findings list --pentest PT-3 --web
 ```
 
@@ -216,7 +238,7 @@ Flags for `pentest findings list`:
 |------|-----------|-------------|
 | `--pentest <id>` | | Pentest display ID (e.g. `PT-3`) or UUID (required) |
 | `--output <format>` | `-o` | Output format: `table` (default), `json`, `tsv` |
-| `--web` | `-w` | Open pentests dashboard in browser |
+| `--web` | `-w` | Open the pentest detail page in a browser |
 
 ### Upgrades
 

package/dist/index.js

@@ -25063,7 +25063,7 @@ var WebhookEventTypeSchema = external_exports.enum([
 ]);
 var WebhookEndpointStatusSchema = external_exports.enum(["enabled", "disabled"]);
 var WebhookDeliveryStatusSchema = external_exports.enum(["succeeded", "failed"]);
-var WebhookDeliverySourceSchema = external_exports.enum(["test", "mock"]);
+var WebhookDeliverySourceSchema = external_exports.enum(["test", "mock", "event"]);
 var WebhookEndpointSchema = external_exports.object({
   webhookId: external_exports.uuid(),
   organizationId: external_exports.uuid(),
@@ -26536,6 +26536,75 @@ function tsvSafe(value) {
   return (value ?? "").replace(/[\t\r\n]/g, " ");
 }
 
+// src/pager.ts
+function isInteractiveEnvironment() {
+  if (process.env["NO_PAGER"] === "1" || process.env["TRACECLI_NO_PAGER"] === "1") {
+    return false;
+  }
+  return Boolean(process.stdout.isTTY && process.stdin.isTTY);
+}
+function resolvePagerCommand() {
+  const raw = process.env["PAGER"]?.trim();
+  if (raw && raw.length > 0) {
+    const parts = raw.split(/\s+/);
+    const [command, ...args] = parts;
+    if (command) return [command, ...args];
+  }
+  return ["less"];
+}
+function flattenItem(item, index, renderItem) {
+  const rendered = renderItem(item, index);
+  return typeof rendered === "string" ? [rendered] : rendered;
+}
+function printWithoutPager(options) {
+  const { items, header, renderItem } = options;
+  if (header !== void 0) {
+    console.log(header);
+  }
+  items.forEach((item, index) => {
+    for (const line of flattenItem(item, index, renderItem)) {
+      console.log(line);
+    }
+  });
+}
+async function runInteractivePager(options) {
+  const { items, header, renderItem, disabled } = options;
+  if (disabled || items.length === 0 || !isInteractiveEnvironment()) {
+    printWithoutPager({ items, header, renderItem });
+    return;
+  }
+  const command = resolvePagerCommand();
+  try {
+    const proc = Bun.spawn(command, {
+      stdin: "pipe",
+      stdout: "inherit",
+      stderr: "inherit",
+      env: { LESS: "FRX", ...process.env }
+    });
+    const writer = proc.stdin;
+    try {
+      if (header !== void 0) {
+        writer.write(`${header}
+`);
+      }
+      items.forEach((item, index) => {
+        for (const line of flattenItem(item, index, renderItem)) {
+          writer.write(`${line}
+`);
+        }
+      });
+    } catch {
+    }
+    try {
+      writer.end();
+    } catch {
+    }
+    await proc.exited;
+  } catch {
+    printWithoutPager({ items, header, renderItem });
+  }
+}
+
 // src/auth/commands.ts
 function getClientId() {
   const clientId = "client_01KEZ01W5Q3107GTBY51WQ67HT";
@@ -26547,6 +26616,44 @@ function getClientId() {
   );
 }
 var SAFE_ORGANIZATION_ID_PATTERN = /^[a-zA-Z0-9_-]+$/;
+var ORG_FILTER_FIELDS = ["name", "slug"];
+function parseOrgFilter(expression) {
+  const match = expression.match(/^([^=!:]+)(!=|!:|=|:)(.*)$/);
+  if (!match || !match[1] || !match[2] || match[3] === void 0) {
+    throw new Error(
+      `Invalid filter expression: '${expression}'. Format: <field><operator><value> (e.g. name:acme)`
+    );
+  }
+  const field = match[1].trim();
+  const operator = match[2];
+  const value = match[3].trim();
+  if (!ORG_FILTER_FIELDS.includes(field)) {
+    throw new Error(
+      `Unknown filter field '${field}'. Supported fields: ${ORG_FILTER_FIELDS.join(", ")}`
+    );
+  }
+  if (value.length === 0) {
+    throw new Error(
+      `Invalid filter expression: '${expression}'. Value cannot be empty after the operator.`
+    );
+  }
+  return { field, operator, value };
+}
+function matchesOrgFilter(item, filter) {
+  const raw = filter.field === "name" ? item.name : item.slug;
+  const cellLower = raw.toLowerCase();
+  const valueLower = filter.value.toLowerCase();
+  switch (filter.operator) {
+    case "=":
+      return cellLower === valueLower;
+    case "!=":
+      return cellLower !== valueLower;
+    case ":":
+      return cellLower.includes(valueLower);
+    case "!:":
+      return !cellLower.includes(valueLower);
+  }
+}
 function sanitizeForOutput(value) {
   return value.replace(/[\r\n\t]/g, " ").trim();
 }
@@ -26796,12 +26903,25 @@ ${colorSuccess(`Authenticated as ${displayName} (${tokenResponse.user.email})`)}
   });
 }
 function createLogoutCommand() {
-  return new Command("logout").description("Log out of Trace").addHelpText(
+  return new Command("logout").description("Log out of Trace").option("--no-confirm", "Skip confirmation prompt (for CI/scripts)").addHelpText(
     "after",
     `
 Examples:
-  tracecli auth logout`
-  ).action(() => {
+  tracecli auth logout
+  tracecli auth logout --no-confirm`
+  ).action(async (options) => {
+    if (options.confirm && process.stdin.isTTY && process.stdout.isTTY) {
+      const readline = createInterface2({ input: process.stdin, output: process.stdout });
+      try {
+        const answer = await readline.question("Are you sure you want to log out? [Y/n] ");
+        if (answer.trim().toLowerCase() === "n" || answer.trim().toLowerCase() === "no") {
+          console.log("Logout cancelled.");
+          return;
+        }
+      } finally {
+        readline.close();
+      }
+    }
     const removed = removeToken();
     if (removed) {
       console.log(
@@ -26857,6 +26977,9 @@ Examples:
     const info = buildAuthStatusInfo(token, refreshToken, selectedOrganizationId);
     if (options.output === "json") {
       console.log(JSON.stringify(info, null, 2));
+      if (!info.loggedIn) {
+        process.exit(1);
+      }
       return;
     }
     if (options.output === "tsv") {
@@ -26871,11 +26994,14 @@ Examples:
           info.activeOrg ?? ""
         ].join("	")
       );
+      if (!info.loggedIn) {
+        process.exit(1);
+      }
       return;
     }
     if (!info.loggedIn) {
-      console.log(colorError("Not logged in. Run `tracecli auth login` to authenticate."));
-      return;
+      console.error(colorError("Not logged in. Run `tracecli auth login` to authenticate."));
+      process.exit(1);
     }
     console.log("Logged in to Trace");
     if (info.userId) {
@@ -26915,7 +27041,12 @@ function createOrgListCommand() {
       throw new Error("--limit must be a positive integer");
     }
     return n;
-  }).option("-w, --web", "Open the organization settings in a browser").addHelpText(
+  }).option(
+    "-f, --filter <expression>",
+    "Filter expression (repeatable). Fields: name, slug. Operators: = exact, != not exact, : contains, !: not contains",
+    (val, prev) => [...prev, val],
+    []
+  ).option("-w, --web", "Open the organization settings in a browser").option("--no-pager", "Disable the interactive arrow-key pager for table output").addHelpText(
     "after",
     `
 Examples:
@@ -26923,70 +27054,95 @@ Examples:
   tracecli org list --output json
   tracecli org list --output tsv | cut -f1
   tracecli org list --limit 5
+  tracecli org list --filter "name:acme"
+  tracecli org list --filter "slug!=internal"
+  tracecli org list --no-pager
   tracecli org list --web`
-  ).action(async (options) => {
-    if (options.web) {
-      const slug = await resolveOrganizationSlug();
-      const url2 = `${getAppBaseUrl()}/dashboard/${slug}/settings`;
-      const opened = await openBrowser(url2);
-      if (!opened) {
-        console.log(`Open in browser: ${url2}`);
+  ).action(
+    async (options) => {
+      if (options.web) {
+        const slug = await resolveOrganizationSlug();
+        const url2 = `${getAppBaseUrl()}/dashboard/${slug}/settings`;
+        const opened = await openBrowser(url2);
+        if (!opened) {
+          console.log(`Open in browser: ${url2}`);
+        }
+        return;
       }
-      return;
-    }
-    const organizationContext = await fetchOrganizationContext();
-    const allItems = organizationContext.organizations.map(
-      (organization) => ({
-        ...organization,
-        active: organization.organizationId === organizationContext.activeOrganization.organizationId,
-        selected: organization.organizationId === organizationContext.selectedOrganizationId
-      })
-    );
-    const items = options.limit !== void 0 ? allItems.slice(0, options.limit) : allItems;
-    if (options.output === "json") {
-      console.log(JSON.stringify(items, null, 2));
-      return;
-    }
-    if (options.output === "tsv") {
-      console.log("name	slug	organizationId	active");
-      for (const item of items) {
+      const parsedFilters = [];
+      for (const expr of options.filter) {
+        try {
+          parsedFilters.push(parseOrgFilter(expr));
+        } catch (err) {
+          console.error(err instanceof Error ? err.message : String(err));
+          process.exit(1);
+        }
+      }
+      const organizationContext = await fetchOrganizationContext();
+      const allItems = organizationContext.organizations.map(
+        (organization) => ({
+          ...organization,
+          active: organization.organizationId === organizationContext.activeOrganization.organizationId,
+          selected: organization.organizationId === organizationContext.selectedOrganizationId
+        })
+      );
+      const filteredItems = allItems.filter(
+        (item) => parsedFilters.every((f) => matchesOrgFilter(item, f))
+      );
+      const items = options.limit !== void 0 ? filteredItems.slice(0, options.limit) : filteredItems;
+      if (options.output === "json") {
+        console.log(JSON.stringify(items, null, 2));
+        return;
+      }
+      if (options.output === "tsv") {
+        console.log("name	slug	organizationId	active");
+        for (const item of items) {
+          console.log(
+            [
+              tsvSafe(item.name),
+              tsvSafe(item.slug),
+              tsvSafe(item.organizationId),
+              item.active ? "true" : "false"
+            ].join("	")
+          );
+        }
+        return;
+      }
+      const headers = ["", "Name", "Slug", "Org ID"];
+      const rows = items.map((item) => {
+        const labels = [item.active ? "active" : null, item.selected ? "selected" : null].filter(
+          Boolean
+        );
+        const marker = item.active ? "*" : " ";
+        const nameSuffix = labels.length > 0 ? ` [${labels.join(", ")}]` : "";
+        return [
+          marker,
+          sanitizeForOutput(item.name) + nameSuffix,
+          sanitizeForOutput(item.slug),
+          item.organizationId
+        ];
+      });
+      const colWidths = headers.map(
+        (h, i) => Math.max(h.length, ...rows.map((r) => (r[i] ?? "").length))
+      );
+      const pad = (s, w3) => s.padEnd(w3);
+      const headerLine = headers.map((h, i) => pad(h, colWidths[i] ?? h.length)).join("  ");
+      const rowLines = rows.map(
+        (row) => row.map((cell, i) => pad(cell, colWidths[i] ?? 0)).join("  ")
+      );
+      await runInteractivePager({
+        items,
+        header: headerLine,
+        renderItem: (_item, i) => [rowLines[i] ?? ""],
+        disabled: options.pager === false
+      });
+      if (organizationContext.staleSelectionDetected) {
         console.log(
-          [
-            tsvSafe(item.name),
-            tsvSafe(item.slug),
-            tsvSafe(item.organizationId),
-            item.active ? "true" : "false"
-          ].join("	")
+          "\nYour previous organization selection is no longer available and was reset."
         );
       }
-      return;
-    }
-    const headers = ["", "Name", "Slug", "Org ID"];
-    const rows = items.map((item) => {
-      const labels = [item.active ? "active" : null, item.selected ? "selected" : null].filter(
-        Boolean
-      );
-      const marker = item.active ? "*" : " ";
-      const nameSuffix = labels.length > 0 ? ` [${labels.join(", ")}]` : "";
-      return [
-        marker,
-        sanitizeForOutput(item.name) + nameSuffix,
-        sanitizeForOutput(item.slug),
-        item.organizationId
-      ];
-    });
-    const colWidths = headers.map(
-      (h, i) => Math.max(h.length, ...rows.map((r) => (r[i] ?? "").length))
-    );
-    const pad = (s, w3) => s.padEnd(w3);
-    console.log(headers.map((h, i) => pad(h, colWidths[i] ?? h.length)).join("  "));
-    for (const row of rows) {
-      console.log(row.map((cell, i) => pad(cell, colWidths[i] ?? 0)).join("  "));
     }
-    if (organizationContext.staleSelectionDetected) {
-      console.log("\nYour previous organization selection is no longer available and was reset.");
-    }
-  });
+  );
 }
 function createOrgCurrentCommand() {
   return new Command("current").description("Show the active organization used by CLI commands").option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option("-w, --web", "Open the organization settings in a browser").addHelpText(
@@ -27043,15 +27199,42 @@ Examples:
   });
 }
 function createOrgSwitchCommand() {
-  return new Command("switch").description("Switch the active organization for subsequent CLI commands").argument("[organization]", "Organization ID, slug, name, or menu selection index").addHelpText(
+  return new Command("switch").description("Switch the active organization for subsequent CLI commands").argument("[organization]", "Organization ID, slug, name, or menu selection index").option("-w, --web", "Open the organization settings page in a browser instead of switching").addHelpText(
     "after",
     `
 Examples:
   tracecli org switch
   tracecli org switch engineering
-  tracecli org switch org_01KJTJFFG497Z1C54Z07AP6NA3`
-  ).action(async (organization) => {
+  tracecli org switch org_01KJTJFFG497Z1C54Z07AP6NA3
+  tracecli org switch engineering --web`
+  ).action(async (organization, options) => {
     const normalizedOrganizationInput = organization?.trim() ?? "";
+    if (options.web) {
+      if (normalizedOrganizationInput.length > 0) {
+        const organizationContext2 = await fetchOrganizationContext();
+        const selection = resolveOrganizationSelectionInput(
+          organizationContext2.organizations,
+          normalizedOrganizationInput
+        );
+        if ("error" in selection) {
+          console.error(selection.error);
+          process.exit(1);
+        }
+        const url2 = `${getAppBaseUrl()}/dashboard/${selection.organization.slug}/settings`;
+        const opened = await openBrowser(url2);
+        if (!opened) {
+          console.log(`Open in browser: ${url2}`);
+        }
+      } else {
+        const slug = await resolveOrganizationSlug();
+        const url2 = `${getAppBaseUrl()}/dashboard/${slug}/settings`;
+        const opened = await openBrowser(url2);
+        if (!opened) {
+          console.log(`Open in browser: ${url2}`);
+        }
+      }
+      return;
+    }
     if (normalizedOrganizationInput.length === 0 && (!process.stdin.isTTY || !process.stdout.isTTY)) {
       console.error(
         "Missing required argument 'organization'. Run `tracecli org switch <organization>` in non-interactive environments."
@@ -27610,7 +27793,7 @@ function createListCommand() {
       }
       return Math.min(n, MAX_LIMIT);
     }
-  ).option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option("-w, --web", "Open the pentests dashboard in a browser").addHelpText(
+  ).option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option("-w, --web", "Open the pentests dashboard in a browser").option("--no-pager", "Disable the interactive arrow-key pager for table output").addHelpText(
     "after",
     `
 Examples:
@@ -27619,84 +27802,95 @@ Examples:
   tracecli pentest list --limit 10
   tracecli pentest list --output json | jq '.[].title'
   tracecli pentest list --output tsv | cut -f1,2
+  tracecli pentest list --no-pager
   tracecli pentest list --web`
-  ).action(async (options) => {
-    if (options.web) {
-      const slug = await resolveOrganizationSlug();
-      const url2 = `${getAppBaseUrl()}/dashboard/${slug}/pentests`;
-      const opened = await openBrowser(url2);
-      if (!opened) {
-        console.log(`Open in browser: ${url2}`);
+  ).action(
+    async (options) => {
+      if (options.web) {
+        const slug = await resolveOrganizationSlug();
+        const url2 = `${getAppBaseUrl()}/dashboard/${slug}/pentests`;
+        const opened = await openBrowser(url2);
+        if (!opened) {
+          console.log(`Open in browser: ${url2}`);
+        }
+        return;
       }
-      return;
-    }
-    const organizationId = await resolveOrganizationId();
-    const result = await authenticatedRequest(
-      (client) => client.pentest.listPentests({
-        params: { organizationId }
-      })
-    );
-    if (result.status === 401) {
-      console.error("Authentication failed. Run `tracecli auth login` to re-authenticate.");
-      process.exit(1);
-    }
-    if (result.status !== 200) {
-      console.error(`Failed to list pentests (status ${result.status}).`);
-      process.exit(1);
-    }
-    let filteredPentests = result.body;
-    if (options.status) {
-      filteredPentests = filteredPentests.filter((p2) => p2.status === options.status);
-    }
-    const limit = options.limit ?? DEFAULT_LIMIT;
-    const pentests = filteredPentests.slice(0, limit);
-    const isJson = options.output === "json";
-    const isTsv = options.output === "tsv";
-    if (pentests.length === 0) {
-      if (isJson) {
-        console.log("[]");
-      } else if (isTsv) {
-        console.log("displayId	title	status	startedAt	endedAt	findingsTotal");
-      } else {
-        console.log("No pentests found.");
+      const organizationId = await resolveOrganizationId();
+      const result = await authenticatedRequest(
+        (client) => client.pentest.listPentests({
+          params: { organizationId }
+        })
+      );
+      if (result.status === 401) {
+        console.error("Authentication failed. Run `tracecli auth login` to re-authenticate.");
+        process.exit(1);
       }
-      return;
-    }
-    if (isJson) {
-      console.log(JSON.stringify(pentests, null, 2));
-      return;
-    }
-    if (isTsv) {
-      console.log("displayId	title	status	startedAt	endedAt	findingsTotal");
-      for (const pt of pentests) {
-        const cols = [
-          `PT-${pt.displayId}`,
-          tsvSafe2(pt.title),
-          pt.status,
-          pt.startedAt ? String(pt.startedAt) : "",
-          pt.endedAt ? String(pt.endedAt) : "",
-          String(pt.findingCounts.total)
-        ];
-        console.log(cols.join("	"));
+      if (result.status !== 200) {
+        console.error(`Failed to list pentests (status ${result.status}).`);
+        process.exit(1);
       }
-      return;
-    }
-    console.log(`Found ${pentests.length} pentest${pentests.length === 1 ? "" : "s"}:
-`);
-    for (const pt of pentests) {
-      const status = formatStatus(pt.status);
-      const started = formatDate(pt.startedAt);
-      const ended = formatDate(pt.endedAt);
-      const dateRange = pt.startedAt ? `${started} \u2013 ${ended}` : "Not started";
-      const findings = pt.findingCounts.total;
-      console.log(`  [PT-${pt.displayId}] ${pt.title}`);
-      console.log(`          Status: ${status} | Findings: ${findings} | ${dateRange}`);
-      if (pt.description) {
-        console.log(`          ${pt.description}`);
+      let filteredPentests = result.body;
+      if (options.status) {
+        filteredPentests = filteredPentests.filter((p2) => p2.status === options.status);
       }
-      console.log("");
+      const limit = options.limit ?? DEFAULT_LIMIT;
+      const pentests = filteredPentests.slice(0, limit);
+      const isJson = options.output === "json";
+      const isTsv = options.output === "tsv";
+      if (pentests.length === 0) {
+        if (isJson) {
+          console.log("[]");
+        } else if (isTsv) {
+          console.log("displayId	title	status	startedAt	endedAt	findingsTotal");
+        } else {
+          console.log("No pentests found.");
+        }
+        return;
+      }
+      if (isJson) {
+        console.log(JSON.stringify(pentests, null, 2));
+        return;
+      }
+      if (isTsv) {
+        console.log("displayId	title	status	startedAt	endedAt	findingsTotal");
+        for (const pt of pentests) {
+          const cols = [
+            `PT-${pt.displayId}`,
+            tsvSafe2(pt.title),
+            pt.status,
+            pt.startedAt ? String(pt.startedAt) : "",
+            pt.endedAt ? String(pt.endedAt) : "",
+            String(pt.findingCounts.total)
+          ];
+          console.log(cols.join("	"));
+        }
+        return;
+      }
+      const header = `Found ${pentests.length} pentest${pentests.length === 1 ? "" : "s"}:`;
+      await runInteractivePager({
+        items: pentests,
+        header,
+        renderItem: (pt) => renderPentestLines(pt),
+        disabled: options.pager === false
+      });
     }
-  });
+  );
+}
+function renderPentestLines(pt) {
+  const status = formatStatus(pt.status);
+  const started = formatDate(pt.startedAt);
+  const ended = formatDate(pt.endedAt);
+  const dateRange = pt.startedAt ? `${started} \u2013 ${ended}` : "Not started";
+  const findings = pt.findingCounts.total;
+  const lines = [
+    `  [PT-${pt.displayId}] ${pt.title}`,
+    `          Status: ${status} | Findings: ${findings} | ${dateRange}`
+  ];
+  if (pt.description) {
+    lines.push(`          ${pt.description}`);
+  }
+  lines.push("");
+  return lines;
 }
 function createFindingsListCommand() {
   return new Command("list").description("List findings for a pentest").requiredOption("--pentest <id>", "Pentest display ID (e.g. PT-3) or UUID").option(
@@ -27717,7 +27911,7 @@ function createFindingsListCommand() {
       }
       return Math.min(n, MAX_LIMIT);
     }
-  ).option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option("-w, --web", "Open the pentests dashboard in a browser").addHelpText(
+  ).option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option("-w, --web", "Open the pentest detail page in a browser").option("--no-pager", "Disable the interactive arrow-key pager for table output").addHelpText(
     "after",
     `
 Examples:
@@ -27726,12 +27920,15 @@ Examples:
   tracecli pentest findings list --pentest PT-3 --status OPEN --limit 20
   tracecli pentest findings list --pentest PT-3 --output json
   tracecli pentest findings list --pentest PT-3 --output tsv | cut -f1,4
+  tracecli pentest findings list --pentest PT-3 --no-pager
   tracecli pentest findings list --pentest PT-3 --web`
   ).action(
     async (options) => {
       if (options.web) {
         const slug = await resolveOrganizationSlug();
-        const url2 = `${getAppBaseUrl()}/dashboard/${slug}/pentests`;
+        const numericMatch = options.pentest.match(/^(?:PT-)?(\d+)$/i);
+        const pentestUrlId = numericMatch?.[1] ?? options.pentest;
+        const url2 = `${getAppBaseUrl()}/dashboard/${slug}/pentests/${pentestUrlId}`;
         const opened = await openBrowser(url2);
         if (!opened) {
           console.log(`Open in browser: ${url2}`);
@@ -27802,27 +27999,33 @@ Examples:
         }
         return;
       }
-      console.log(`Found ${findings.length} finding${findings.length === 1 ? "" : "s"}:
-`);
-      for (const finding of findings) {
-        const sev = formatFindingSeverity(finding.severity);
-        const severityLabel = colorSeverity(finding.severity, sev);
-        const status = formatStatus(finding.status);
-        const cwes = finding.cweIds.length > 0 ? ` | ${finding.cweIds.join(", ")}` : "";
-        const score = finding.cvssScore != null ? ` | CVSS ${finding.cvssScore.toFixed(1)}` : "";
-        console.log(`  [${severityLabel}] ${finding.title}`);
-        console.log(`         ${finding.category} \xB7 ${status}${cwes}${score}`);
-        if (finding.repositories.length > 0) {
-          for (const repo of finding.repositories) {
-            const location = repo.filePath ? `${repo.repositoryName} \xB7 ${repo.filePath}${repo.startLine != null ? `:${repo.startLine}` : ""}` : repo.repositoryName;
-            console.log(`         ${location}`);
-          }
-        }
-        console.log("");
-      }
+      const header = `Found ${findings.length} finding${findings.length === 1 ? "" : "s"}:`;
+      await runInteractivePager({
+        items: findings,
+        header,
+        renderItem: (finding) => renderPentestFindingLines(finding),
+        disabled: options.pager === false
+      });
     }
   );
 }
+function renderPentestFindingLines(finding) {
+  const sev = formatFindingSeverity(finding.severity);
+  const severityLabel = colorSeverity(finding.severity, sev);
+  const status = formatStatus(finding.status);
+  const cwes = finding.cweIds.length > 0 ? ` | ${finding.cweIds.join(", ")}` : "";
+  const score = finding.cvssScore != null ? ` | CVSS ${finding.cvssScore.toFixed(1)}` : "";
+  const lines = [
+    `  [${severityLabel}] ${finding.title}`,
+    `         ${finding.category} \xB7 ${status}${cwes}${score}`
+  ];
+  for (const repo of finding.repositories) {
+    const location = repo.filePath ? `${repo.repositoryName} \xB7 ${repo.filePath}${repo.startLine != null ? `:${repo.startLine}` : ""}` : repo.repositoryName;
+    lines.push(`         ${location}`);
+  }
+  lines.push("");
+  return lines;
+}
 function createFindingsCommand() {
   const findings = new Command("findings").description("Manage pentest findings");
   findings.addCommand(createFindingsListCommand());
@@ -27885,6 +28088,7 @@ function extractRepoName(input) {
 var BRANCH_NAME_PATTERN = /^[a-zA-Z0-9._/+-]+$/;
 var TRACE_GIT_ASKPASS_TOKEN_ENV = "TRACE_GIT_ASKPASS_TOKEN";
 var DEFAULT_LIMIT2 = 30;
+var DEFAULT_PAGE = 1;
 var MAX_LIMIT2 = 100;
 var REPOSITORY_PLATFORMS = ["GITHUB", "GITLAB", "BITBUCKET"];
 var REPOSITORY_STATUSES = ["CONNECTED", "DISCONNECTED"];
@@ -28102,6 +28306,44 @@ function parseListLimit(value) {
   }
   return n;
 }
+function parseListPage(value) {
+  const n = Number(value);
+  if (!Number.isInteger(n) || n < 1) {
+    throw new Error("--page must be a positive integer");
+  }
+  return n;
+}
+function paginateResults(items, options) {
+  if (options.all) {
+    return {
+      items: [...items],
+      pagination: null
+    };
+  }
+  const limit = options.limit ?? DEFAULT_LIMIT2;
+  const page = options.page ?? DEFAULT_PAGE;
+  const totalItems = items.length;
+  const totalPages = Math.max(1, Math.ceil(totalItems / limit));
+  if (page > totalPages) {
+    throw new Error(
+      `--page ${page} is out of range for ${totalItems} matching results with --limit ${limit}. Use --page between 1 and ${totalPages}, or pass --all.`
+    );
+  }
+  const startIndex = (page - 1) * limit;
+  const endIndex = Math.min(startIndex + limit, totalItems);
+  return {
+    items: items.slice(startIndex, endIndex),
+    pagination: {
+      totalItems,
+      totalPages,
+      page,
+      hasNextPage: page < totalPages,
+      hasPreviousPage: page > 1,
+      startIndex,
+      endIndex
+    }
+  };
+}
 function printRepositoriesTsv(repositories) {
   console.log("repositoryUrl	platform	status	defaultBranch	language");
   for (const repo of repositories) {
@@ -28116,7 +28358,7 @@ function printRepositoriesTsv(repositories) {
     );
   }
 }
-function printRepositoriesTable(repositories) {
+function buildRepositoriesTable(repositories) {
   const headers = ["Repository URL", "Platform", "Status"];
   const rows = repositories.map(
     (repo) => [
@@ -28129,15 +28371,27 @@ function printRepositoriesTable(repositories) {
     (h, i) => Math.max(h.length, ...rows.map((r) => (r[i] ?? "").length))
   );
   const pad = (s, w3) => s.padEnd(w3);
-  console.log(headers.map((h, i) => pad(h, colWidths[i] ?? h.length)).join("  "));
-  for (const row of rows) {
-    console.log(row.map((cell, i) => pad(cell, colWidths[i] ?? 0)).join("  "));
-  }
+  const headerLine = headers.map((h, i) => pad(h, colWidths[i] ?? h.length)).join("  ");
+  const rowLines = rows.map((row) => row.map((cell, i) => pad(cell, colWidths[i] ?? 0)).join("  "));
+  return { headerLine, rowLines };
 }
 function collectFilterExpression(value, previous) {
   previous.push(value);
   return previous;
 }
+function printPaginationHint(pagination, noun, nextPageFilterHint) {
+  if (!pagination || pagination.totalPages <= 1) {
+    return;
+  }
+  const shownStart = pagination.startIndex + 1;
+  const shownEnd = pagination.endIndex;
+  console.log(
+    `Showing ${shownStart}-${shownEnd} of ${pagination.totalItems} ${noun} (page ${pagination.page}/${pagination.totalPages}).`
+  );
+  if (pagination.hasNextPage) {
+    console.log(`Use --page ${pagination.page + 1}${nextPageFilterHint} (or --all) to see more.`);
+  }
+}
 function extractErrorMessage(body) {
   if (typeof body === "object" && body !== null && "message" in body && typeof body.message === "string") {
     const message = body.message.trim();
@@ -28263,9 +28517,14 @@ function addRepositoryFilterOptions(command) {
     parseListLimit,
     DEFAULT_LIMIT2
   ).option(
+    "--page <n>",
+    `Page number to display when results exceed --limit (default ${DEFAULT_PAGE})`,
+    parseListPage,
+    DEFAULT_PAGE
+  ).option("--all", "Display all matching repositories (disables pagination)").option(
     "--dependency <pkg>",
     "Filter repositories that use a dependency (e.g. lodash, lodash@4.17.21, @types/node@20)"
-  ).option("-w, --web", "Open the repositories dashboard in a browser");
+  ).option("-w, --web", "Open the repositories dashboard in a browser").option("--no-pager", "Disable the interactive arrow-key pager for table output");
 }
 async function runRepositoryListCommand(options) {
   if (options.web) {
@@ -28314,8 +28573,17 @@ async function runRepositoryListCommand(options) {
     console.log("No repositories found.");
     return;
   }
-  const limit = options.limit ?? DEFAULT_LIMIT2;
-  const displayedRepositories = filteredRepositories.slice(0, limit);
+  let displayedRepositories;
+  let pagination = null;
+  try {
+    const paginatedResult = paginateResults(filteredRepositories, options);
+    displayedRepositories = paginatedResult.items;
+    pagination = paginatedResult.pagination;
+  } catch (error48) {
+    const message = error48 instanceof Error ? error48.message : "Unknown pagination error.";
+    console.error(`Invalid pagination options: ${message}`);
+    process.exit(1);
+  }
   if (options.output === "json") {
     console.log(JSON.stringify(displayedRepositories, null, 2));
     return;
@@ -28324,7 +28592,18 @@ async function runRepositoryListCommand(options) {
     printRepositoriesTsv(displayedRepositories);
     return;
   }
-  printRepositoriesTable(displayedRepositories);
+  const { headerLine, rowLines } = buildRepositoriesTable(displayedRepositories);
+  await runInteractivePager({
+    items: displayedRepositories,
+    header: headerLine,
+    renderItem: (_repo, i) => [rowLines[i] ?? ""],
+    disabled: options.pager === false
+  });
+  printPaginationHint(
+    pagination,
+    "repositories",
+    options.filter.length > 0 ? " with the same --filter flags" : ""
+  );
 }
 async function runDependencyFilter(organizationId, options) {
   const dependency = options.dependency;
@@ -28378,8 +28657,17 @@ async function runDependencyFilter(organizationId, options) {
     console.log(`No repositories found using dependency '${label}'.`);
     return;
   }
-  const limit = options.limit ?? DEFAULT_LIMIT2;
-  const displayedRepos = repos.slice(0, limit);
+  let displayedRepos;
+  let pagination = null;
+  try {
+    const paginatedResult = paginateResults(repos, options);
+    displayedRepos = paginatedResult.items;
+    pagination = paginatedResult.pagination;
+  } catch (error48) {
+    const message = error48 instanceof Error ? error48.message : "Unknown pagination error.";
+    console.error(`Invalid pagination options: ${message}`);
+    process.exit(1);
+  }
   if (options.output === "json") {
     console.log(JSON.stringify(displayedRepos, null, 2));
     return;
@@ -28391,10 +28679,12 @@ async function runDependencyFilter(organizationId, options) {
     }
     return;
   }
-  for (const repo of displayedRepos) {
-    const versions = repo.versions.join(", ");
-    console.log(`${repo.fullName}  (${versions})`);
-  }
+  await runInteractivePager({
+    items: displayedRepos,
+    renderItem: (repo) => [`${repo.fullName}  (${repo.versions.join(", ")})`],
+    disabled: options.pager === false
+  });
+  printPaginationHint(pagination, "repositories", "");
 }
 function createListCommand2() {
   return addRepositoryFilterOptions(
@@ -28405,6 +28695,8 @@ function createListCommand2() {
 Examples:
   tracecli repo list
   tracecli repo list --platform GITHUB --status CONNECTED
+  tracecli repo list --page 2 --limit 30
+  tracecli repo list --all
   tracecli repo list --output json | jq '.[].repositoryUrl'
   tracecli repo list --output tsv | cut -f1
   tracecli repo list --filter "language:typescript" --limit 10
@@ -28422,7 +28714,11 @@ function createFilterCommand() {
     `
 Examples:
   tracecli repo filter --filter "platform=GITHUB" --filter "status=CONNECTED"
-  tracecli repo filter --language typescript --output json
+  tracecli repo filter --page 2 --limit 30
+  tracecli repo filter --all
+  tracecli repo filter --language typescript --limit 10
+  tracecli repo filter --output json | jq '.[].repositoryUrl'
+  tracecli repo filter --output tsv | cut -f1
   tracecli repo filter --web`
   ).action(async (options) => {
     await runRepositoryListCommand(options);
@@ -29093,22 +29389,24 @@ function formatSeverity(severity) {
       return severity;
   }
 }
-function printVulnerabilities(vulnerabilities) {
-  const sorted = [...vulnerabilities].sort(
+function renderVulnerabilityLines(vuln) {
+  const sev = formatSeverity(vuln.severity);
+  const displaySeverity = colorSeverity(vuln.severity, sev);
+  const status = formatStatus(vuln.status);
+  const repo = vuln.repositoryName;
+  const file2 = vuln.codeSnippet.filePath;
+  const line = vuln.codeSnippet.startLine;
+  return [
+    `  [${displaySeverity}] ${vuln.title}`,
+    `         ${repo} \xB7 ${file2}:${line} \xB7 ${status}`,
+    `         ${vuln.traceId}`,
+    ""
+  ];
+}
+function sortVulnerabilitiesBySeverity(vulnerabilities) {
+  return [...vulnerabilities].sort(
     (a, b) => (SEVERITY_ORDER[a.severity] ?? 99) - (SEVERITY_ORDER[b.severity] ?? 99)
   );
-  for (const vuln of sorted) {
-    const sev = formatSeverity(vuln.severity);
-    const displaySeverity = colorSeverity(vuln.severity, sev);
-    const status = formatStatus(vuln.status);
-    const repo = vuln.repositoryName;
-    const file2 = vuln.codeSnippet.filePath;
-    const line = vuln.codeSnippet.startLine;
-    console.log(`  [${displaySeverity}] ${vuln.title}`);
-    console.log(`         ${repo} \xB7 ${file2}:${line} \xB7 ${status}`);
-    console.log(`         ${vuln.traceId}`);
-    console.log("");
-  }
 }
 function sanitizeTsvField(value) {
   return value.replace(/[\t\n\r]/g, " ");
@@ -29177,7 +29475,7 @@ function printVulnerabilityDetailTsv(vulnerability) {
   console.log(cols.join("	"));
 }
 function createGetCommand() {
-  return new Command("get").description("Get a vulnerability by display ID or UUID").argument("<id>", "Vulnerability display ID (e.g. TRACE-123 or 123) or UUID").option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").addHelpText(
+  return new Command("get").description("Get a vulnerability by display ID or UUID").argument("<id>", "Vulnerability display ID (e.g. TRACE-123 or 123) or UUID").option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option("-w, --web", "Open the vulnerability detail page in a browser").addHelpText(
     "after",
     `
 Examples:
@@ -29185,8 +29483,18 @@ Examples:
   tracecli vulnerabilities get 123
   tracecli vulnerabilities get 00000000-0000-4000-8000-000000000123
   tracecli vulnerabilities get TRACE-123 --output json
-  tracecli vulnerabilities get TRACE-123 --output tsv`
+  tracecli vulnerabilities get TRACE-123 --output tsv
+  tracecli vulnerabilities get TRACE-123 --web`
   ).action(async (identifier, options) => {
+    if (options.web) {
+      const slug = await resolveOrganizationSlug();
+      const url2 = `${getAppBaseUrl()}/dashboard/${slug}/vulnerabilities/${identifier}`;
+      const opened = await openBrowser(url2);
+      if (!opened) {
+        console.log(`Open in browser: ${url2}`);
+      }
+      return;
+    }
     const organizationId = await resolveOrganizationId();
     const result = await authenticatedRequest(
       (client) => client.vulnerability.getVulnerability({
@@ -29249,7 +29557,7 @@ function createListCommand3() {
     "Additional filter expression: field=value or field!=value. Repeatable. Supported fields: vulnerabilityType, cweId, scanMode (and any other API-supported field).",
     (value, previous) => [...previous, value],
     []
-  ).option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option("-w, --web", "Open the vulnerabilities dashboard in a browser").addHelpText(
+  ).option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option("-w, --web", "Open the vulnerabilities dashboard in a browser").option("--no-pager", "Disable the interactive arrow-key pager for table output").addHelpText(
     "after",
     `
 Examples:
@@ -29260,6 +29568,7 @@ Examples:
   tracecli vulnerabilities list --filter vulnerabilityType=SAST --filter scanMode=sast
   tracecli vulnerabilities list --output json | jq '.[].title'
   tracecli vulnerabilities list --output tsv | cut -f1,7
+  tracecli vulnerabilities list --no-pager
   tracecli vulnerabilities list --web`
   ).action(
     async (options) => {
@@ -29342,10 +29651,15 @@ Examples:
       } else if (isTsv) {
         printVulnerabilitiesTsv(items);
       } else {
+        const sorted = sortVulnerabilitiesBySeverity(items);
         const total = collected.length;
-        console.log(`Found ${total} vulnerabilit${total === 1 ? "y" : "ies"}:
-`);
-        printVulnerabilities(items);
+        const header = `Found ${total} vulnerabilit${total === 1 ? "y" : "ies"}:`;
+        await runInteractivePager({
+          items: sorted,
+          header,
+          renderItem: (vuln) => renderVulnerabilityLines(vuln),
+          disabled: options.pager === false
+        });
       }
     }
   );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "securewithtrace",
-  "version": "0.22.0",
+  "version": "0.24.0",
   "description": "Official Trace CLI for vulnerability intelligence in your terminal",
   "type": "module",
   "bin": {