0sec-cli 0.15.0 → 0.17.0

package/chunks/identity-6ZAIIWOR.js

@@ -0,0 +1,191 @@
+#!/usr/bin/env node
+import { createRequire as __0secCreateRequire } from "node:module";
+const require = __0secCreateRequire(import.meta.url);
+import {
+  AZ_EDGE_TECHNIQUES,
+  ENTRA_PATH_ANALYZERS,
+  ENTRA_PATH_ANALYZERS_BY_ID,
+  GRAPH_APP_ROLE_CATALOG,
+  GraphAuthError,
+  GraphClient,
+  GraphError,
+  GraphForbiddenError,
+  GraphNetworkError,
+  GraphRateLimitError,
+  GraphScopeError,
+  HIGH_IMPACT_GRAPH_PERMISSIONS,
+  HYBRID_EDGE_TECHNIQUES,
+  HYBRID_PATH_ANALYZERS,
+  HYBRID_PATH_ANALYZERS_BY_ID,
+  IDENTITY_CHECKS,
+  MICROSOFT_GRAPH_APP_ID,
+  MSA_TENANT_ID,
+  PRIVILEGED_ROLE_TEMPLATE_IDS,
+  PUBLIC_CLIENT_APP_IDS,
+  ROLE_TEMPLATE_IDS,
+  TIER0_GRAPH_PERMISSIONS,
+  TIER0_ROLE_TEMPLATE_IDS,
+  TOKEN_CHECKS,
+  adAnchors,
+  adNodeId,
+  analyzeAppRegistrations,
+  analyzeConditionalAccess,
+  analyzeFederation,
+  analyzeJwt,
+  analyzePrivilegedRoles,
+  analyzeSamlAssertion,
+  analyzeServicePrincipals,
+  analyzeToken,
+  boundaryCrossings,
+  buildEntraGraph,
+  buildEntraGraphFromAzureHound,
+  buildHybridGraph,
+  classifyEntraToken,
+  collectTenantSnapshot,
+  decodeImmutableId,
+  decodeJwtUnverified,
+  describeEntraEdge,
+  describeEntraEdgeTechnique,
+  describeHybridEdge,
+  describeHybridEdgeTechnique,
+  detectWriteback,
+  entraAnchors,
+  entraNodeId,
+  findCloudSyncAccounts,
+  findEntraConsentGrantEscalation,
+  findEntraGuestEscalation,
+  findEntraOwnerChainAbuse,
+  findEntraPathsToGlobalAdmin,
+  findEntraServicePrincipalEscalation,
+  findHybridCloudToOnPremWriteback,
+  findHybridCorrespondenceGaps,
+  findHybridMultiBoundaryCrossings,
+  findHybridOnPremToCloudAdmin,
+  findHybridSyncAccountCompromise,
+  findOnPremSyncAccounts,
+  grantedPermissionNames,
+  holdsHighImpactPermission,
+  holdsTier0Permission,
+  hybridCloudPrivilegedRoleIds,
+  hybridCloudTier0Ids,
+  hybridOnPremHighValueIds,
+  hybridPrincipalOf,
+  indexGraph,
+  indexHybridGraph,
+  ingestAzureHound,
+  joinDirectories,
+  normalizeGuid,
+  normalizeId,
+  pathJoinConfidence,
+  principalOf,
+  privilegedPrincipalIds,
+  privilegedRoleIds,
+  redactTokenValue,
+  roleNodeId,
+  runAllAnalyzers,
+  runEntraPathAnalysis,
+  runHybridPathAnalysis,
+  runIdentityAssessment,
+  sortFindings,
+  splitHybridId,
+  summarizeFindings,
+  tenantNodeId,
+  tier0TargetIds,
+  tokenFingerprint,
+  writebackEnabled
+} from "./chunk-SAFFWQW4.js";
+import "./chunk-VQG4FT5D.js";
+import "./chunk-IR537GON.js";
+export {
+  AZ_EDGE_TECHNIQUES,
+  ENTRA_PATH_ANALYZERS,
+  ENTRA_PATH_ANALYZERS_BY_ID,
+  GRAPH_APP_ROLE_CATALOG,
+  GraphAuthError,
+  GraphClient,
+  GraphError,
+  GraphForbiddenError,
+  GraphNetworkError,
+  GraphRateLimitError,
+  GraphScopeError,
+  HIGH_IMPACT_GRAPH_PERMISSIONS,
+  HYBRID_EDGE_TECHNIQUES,
+  HYBRID_PATH_ANALYZERS,
+  HYBRID_PATH_ANALYZERS_BY_ID,
+  IDENTITY_CHECKS,
+  MICROSOFT_GRAPH_APP_ID,
+  MSA_TENANT_ID,
+  PRIVILEGED_ROLE_TEMPLATE_IDS,
+  PUBLIC_CLIENT_APP_IDS,
+  ROLE_TEMPLATE_IDS,
+  TIER0_GRAPH_PERMISSIONS,
+  TIER0_ROLE_TEMPLATE_IDS,
+  TOKEN_CHECKS,
+  adAnchors,
+  adNodeId,
+  analyzeAppRegistrations,
+  analyzeConditionalAccess,
+  analyzeFederation,
+  analyzeJwt,
+  analyzePrivilegedRoles,
+  analyzeSamlAssertion,
+  analyzeServicePrincipals,
+  analyzeToken,
+  boundaryCrossings,
+  buildEntraGraph,
+  buildEntraGraphFromAzureHound,
+  buildHybridGraph,
+  classifyEntraToken,
+  collectTenantSnapshot,
+  decodeImmutableId,
+  decodeJwtUnverified,
+  describeEntraEdge,
+  describeEntraEdgeTechnique,
+  describeHybridEdge,
+  describeHybridEdgeTechnique,
+  detectWriteback,
+  entraAnchors,
+  entraNodeId,
+  findCloudSyncAccounts,
+  findEntraConsentGrantEscalation,
+  findEntraGuestEscalation,
+  findEntraOwnerChainAbuse,
+  findEntraPathsToGlobalAdmin,
+  findEntraServicePrincipalEscalation,
+  findHybridCloudToOnPremWriteback,
+  findHybridCorrespondenceGaps,
+  findHybridMultiBoundaryCrossings,
+  findHybridOnPremToCloudAdmin,
+  findHybridSyncAccountCompromise,
+  findOnPremSyncAccounts,
+  grantedPermissionNames,
+  holdsHighImpactPermission,
+  holdsTier0Permission,
+  hybridCloudPrivilegedRoleIds,
+  hybridCloudTier0Ids,
+  hybridOnPremHighValueIds,
+  hybridPrincipalOf,
+  indexGraph,
+  indexHybridGraph,
+  ingestAzureHound,
+  joinDirectories,
+  normalizeGuid,
+  normalizeId,
+  pathJoinConfidence,
+  principalOf,
+  privilegedPrincipalIds,
+  privilegedRoleIds,
+  redactTokenValue,
+  roleNodeId,
+  runAllAnalyzers,
+  runEntraPathAnalysis,
+  runHybridPathAnalysis,
+  runIdentityAssessment,
+  sortFindings,
+  splitHybridId,
+  summarizeFindings,
+  tenantNodeId,
+  tier0TargetIds,
+  tokenFingerprint,
+  writebackEnabled
+};

package/chunks/kernel-primitive-TENE3R7T.js

@@ -0,0 +1,44 @@
+#!/usr/bin/env node
+import { createRequire as __0secCreateRequire } from "node:module";
+const require = __0secCreateRequire(import.meta.url);
+import {
+  BENIGN_MAX_CLASS,
+  UPGRADE_MIN_CLASS,
+  attemptControlDemo,
+  buildControlDemo,
+  classifyDmesgDanger,
+  classifyKernelPrimitive,
+  classifyPrimitiveFromDmesg,
+  describeKernelPrimitive,
+  exploitabilityAdjustedSeverity,
+  isControlFlowCallSite,
+  isDangerUpgrade,
+  maxDangerClass,
+  maxSeverity,
+  parseFaultingPc,
+  parseSlabCache,
+  rankDanger,
+  sniffCrashType
+} from "./chunk-HE7LCA7G.js";
+import "./chunk-KKGE5RQE.js";
+import "./chunk-YLMN3N25.js";
+import "./chunk-IR537GON.js";
+export {
+  BENIGN_MAX_CLASS,
+  UPGRADE_MIN_CLASS,
+  attemptControlDemo,
+  buildControlDemo,
+  classifyDmesgDanger,
+  classifyKernelPrimitive,
+  classifyPrimitiveFromDmesg,
+  describeKernelPrimitive,
+  exploitabilityAdjustedSeverity,
+  isControlFlowCallSite,
+  isDangerUpgrade,
+  maxDangerClass,
+  maxSeverity,
+  parseFaultingPc,
+  parseSlabCache,
+  rankDanger,
+  sniffCrashType
+};

package/chunks/kernel-vm-runner-4F6QSNFY.js

@@ -0,0 +1,62 @@
+#!/usr/bin/env node
+import { createRequire as __0secCreateRequire } from "node:module";
+const require = __0secCreateRequire(import.meta.url);
+import {
+  RECOGNIZED_CONFIG_PROFILES,
+  assertBugAttribution,
+  bindKernelExecutionAttestation,
+  buildFlagsForProfile,
+  buildInitramfsKernelAppend,
+  buildInitramfsQemuCommand,
+  buildKernelAppend,
+  buildQemuCommand,
+  buildWeaponizeInitramfs,
+  collectRaceEnv,
+  defaultDmesgOutPath,
+  detectOutOfBandModuleLoad,
+  kcsanConfigSupported,
+  loadKernelVmConfigFromEnv,
+  parseCoveragePcs,
+  parseKernelExecutionAttestation,
+  prepareKernelVmArtifacts,
+  renderInitramfsInitScript,
+  renderKernelExecutionLauncherSource,
+  renderRaceWidenModuleSource,
+  renderRealIpiRaceHarness,
+  runReproducerInKernelVm,
+  scanHardcodedKernelAddresses,
+  verifyAcrossBoots,
+  verifyKernelFinding,
+  writeProofFileReadOnly
+} from "./chunk-SNKTC4BP.js";
+import "./chunk-KKGE5RQE.js";
+import "./chunk-YLMN3N25.js";
+import "./chunk-IR537GON.js";
+export {
+  RECOGNIZED_CONFIG_PROFILES,
+  assertBugAttribution,
+  bindKernelExecutionAttestation,
+  buildFlagsForProfile,
+  buildInitramfsKernelAppend,
+  buildInitramfsQemuCommand,
+  buildKernelAppend,
+  buildQemuCommand,
+  buildWeaponizeInitramfs,
+  collectRaceEnv,
+  defaultDmesgOutPath,
+  detectOutOfBandModuleLoad,
+  kcsanConfigSupported,
+  loadKernelVmConfigFromEnv,
+  parseCoveragePcs,
+  parseKernelExecutionAttestation,
+  prepareKernelVmArtifacts,
+  renderInitramfsInitScript,
+  renderKernelExecutionLauncherSource,
+  renderRaceWidenModuleSource,
+  renderRealIpiRaceHarness,
+  runReproducerInKernelVm,
+  scanHardcodedKernelAddresses,
+  verifyAcrossBoots,
+  verifyKernelFinding,
+  writeProofFileReadOnly
+};

package/chunks/memsafety-scan-J7SECV5W.js

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+import { createRequire as __0secCreateRequire } from "node:module";
+const require = __0secCreateRequire(import.meta.url);
+import {
+  crashArtifactToFinding,
+  memPrimitiveToCategory,
+  runMemSafetyScan
+} from "./chunk-WVTBZEQO.js";
+import "./chunk-P6WKNFWX.js";
+import "./chunk-KLTNTE2Z.js";
+import "./chunk-IR537GON.js";
+export {
+  crashArtifactToFinding,
+  memPrimitiveToCategory,
+  runMemSafetyScan
+};

package/chunks/native-loop-NTONUDP7.js

@@ -0,0 +1,54 @@
+#!/usr/bin/env node
+import { createRequire as __0secCreateRequire } from "node:module";
+const require = __0secCreateRequire(import.meta.url);
+import {
+  BUDGET_WARNING_HARD,
+  BUDGET_WARNING_SOFT,
+  CRITICAL_MESSAGE_PATTERNS,
+  DEFAULT_COMPACTION_REGROW,
+  DEFAULT_COMPACTION_THRESHOLD,
+  PLAYBOOK_MARKER,
+  SCAN_SUMMARIZER_INSTRUCTION,
+  compactMessagesWithLLM,
+  computeBudgetWarningTurns,
+  dropOldestMessages,
+  isContextWindowError,
+  isTransientLlmError,
+  resolveCompactionThresholds,
+  runNativeAgentLoop,
+  summarizeReasoning,
+  toolFailureText
+} from "./chunk-O462Y7P2.js";
+import "./chunk-LOHTE223.js";
+import "./chunk-3MOLBTLS.js";
+import "./chunk-P6WKNFWX.js";
+import "./chunk-SOG2U7B3.js";
+import "./chunk-LP3HHYQU.js";
+import "./chunk-KLTNTE2Z.js";
+import "./chunk-RRMJC3ZE.js";
+import "./chunk-H2FFLZNK.js";
+import "./chunk-UM3ZNQIM.js";
+import "./chunk-57ZENEX2.js";
+import "./chunk-2SANI5RH.js";
+import "./chunk-QOKTUOU2.js";
+import "./chunk-KKGE5RQE.js";
+import "./chunk-YLMN3N25.js";
+import "./chunk-IR537GON.js";
+export {
+  BUDGET_WARNING_HARD,
+  BUDGET_WARNING_SOFT,
+  CRITICAL_MESSAGE_PATTERNS,
+  DEFAULT_COMPACTION_REGROW,
+  DEFAULT_COMPACTION_THRESHOLD,
+  PLAYBOOK_MARKER,
+  SCAN_SUMMARIZER_INSTRUCTION,
+  compactMessagesWithLLM,
+  computeBudgetWarningTurns,
+  dropOldestMessages,
+  isContextWindowError,
+  isTransientLlmError,
+  resolveCompactionThresholds,
+  runNativeAgentLoop,
+  summarizeReasoning,
+  toolFailureText
+};

package/chunks/npm-detectors-KB5Y5ZFX.js

@@ -0,0 +1,69 @@
+#!/usr/bin/env node
+import { createRequire as __0secCreateRequire } from "node:module";
+const require = __0secCreateRequire(import.meta.url);
+import {
+  OsvLookupError,
+  createOsvAdvisoryLookup,
+  createSandboxPackageRunner,
+  deriveForkSiblings,
+  inProcessProbe,
+  localSandboxProvider,
+  staticProbe
+} from "./chunk-7DQEV5QI.js";
+import {
+  DETECTOR_REGISTRY,
+  DETECTOR_REGISTRY_BY_ID,
+  PARSER_DIFF_CORPUS,
+  classify,
+  confirmParserDiff,
+  confirmReadUnstable,
+  dedupConfirmation,
+  fuzzCandidate,
+  getDetectorById,
+  guardPackage,
+  inetAton,
+  isUnsafe,
+  listDetectorIds,
+  makePhasedField,
+  nameMatchesPpSink,
+  parserDiffDetector,
+  pollutionSnapshot,
+  readUnstableDetector,
+  resolveDetectors,
+  runDetectorOnPackage,
+  scanDivergences,
+  ssppFuzzDetector
+} from "./chunk-RWONANDA.js";
+import "./chunk-KLTNTE2Z.js";
+import "./chunk-IR537GON.js";
+export {
+  DETECTOR_REGISTRY,
+  DETECTOR_REGISTRY_BY_ID,
+  OsvLookupError,
+  PARSER_DIFF_CORPUS,
+  classify,
+  confirmParserDiff,
+  confirmReadUnstable,
+  createOsvAdvisoryLookup,
+  createSandboxPackageRunner,
+  dedupConfirmation,
+  deriveForkSiblings,
+  fuzzCandidate,
+  getDetectorById,
+  guardPackage,
+  inProcessProbe,
+  inetAton,
+  isUnsafe,
+  listDetectorIds,
+  localSandboxProvider,
+  makePhasedField,
+  nameMatchesPpSink,
+  parserDiffDetector,
+  pollutionSnapshot,
+  readUnstableDetector,
+  resolveDetectors,
+  runDetectorOnPackage,
+  scanDivergences,
+  ssppFuzzDetector,
+  staticProbe
+};

package/chunks/npm-dynamic-discovery-AHROOZDB.js

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+import { createRequire as __0secCreateRequire } from "node:module";
+const require = __0secCreateRequire(import.meta.url);
+import {
+  leadToFinding,
+  runNpmDynamicDiscovery
+} from "./chunk-5G3ZXFBW.js";
+import "./chunk-RWONANDA.js";
+import "./chunk-IR537GON.js";
+export {
+  leadToFinding,
+  runNpmDynamicDiscovery
+};

package/chunks/orchestrate-ZUWAUWBC.js

@@ -0,0 +1,62 @@
+#!/usr/bin/env node
+import { createRequire as __0secCreateRequire } from "node:module";
+const require = __0secCreateRequire(import.meta.url);
+import {
+  recoverStaleWorkers,
+  registerOrchestrateCommand
+} from "./chunk-4Y4KQJXE.js";
+import "./chunk-IORC6MQX.js";
+import "./chunk-QJQKHO7G.js";
+import "./chunk-SF4KZ4O3.js";
+import "./chunk-HDWV7PGI.js";
+import "./chunk-WVTBZEQO.js";
+import "./chunk-5G3ZXFBW.js";
+import "./chunk-7DQEV5QI.js";
+import "./chunk-RWONANDA.js";
+import "./chunk-KTQDLNSR.js";
+import "./chunk-HE7LCA7G.js";
+import "./chunk-D6S3IIPG.js";
+import "./chunk-A6CLR72I.js";
+import "./chunk-47TQJWDH.js";
+import "./chunk-SNKTC4BP.js";
+import "./chunk-F3WBKITT.js";
+import "./chunk-DN25OQQA.js";
+import "./chunk-IOL7D5YV.js";
+import "./chunk-2RMLOJVB.js";
+import "./chunk-BKZFDZ23.js";
+import "./chunk-53G27VPS.js";
+import "./chunk-K26SZ37E.js";
+import "./chunk-RJWOYEOG.js";
+import "./chunk-O462Y7P2.js";
+import "./chunk-LOHTE223.js";
+import "./chunk-3MOLBTLS.js";
+import "./chunk-P6WKNFWX.js";
+import "./chunk-SOG2U7B3.js";
+import "./chunk-LP3HHYQU.js";
+import "./chunk-KLTNTE2Z.js";
+import "./chunk-HT6P7RY3.js";
+import "./chunk-QI233I24.js";
+import "./chunk-SZJCPG2I.js";
+import "./chunk-WKNNZVJS.js";
+import "./chunk-RRMJC3ZE.js";
+import "./chunk-H2FFLZNK.js";
+import "./chunk-UJ4IK5PO.js";
+import "./chunk-UM3ZNQIM.js";
+import "./chunk-QKICO43A.js";
+import "./chunk-57ZENEX2.js";
+import "./chunk-MMLDQR4H.js";
+import "./chunk-2SANI5RH.js";
+import "./chunk-CLHCDHP4.js";
+import "./chunk-QOKTUOU2.js";
+import "./chunk-KKGE5RQE.js";
+import "./chunk-YLMN3N25.js";
+import "./chunk-6LKRLK2R.js";
+import "./chunk-SAFFWQW4.js";
+import "./chunk-VQG4FT5D.js";
+import "./chunk-WU6AFRAZ.js";
+import "./chunk-DW5UWPFY.js";
+import "./chunk-IR537GON.js";
+export {
+  recoverStaleWorkers,
+  registerOrchestrateCommand
+};

package/chunks/pipeline-FCARFZU3.js

@@ -0,0 +1,14 @@
+#!/usr/bin/env node
+import { createRequire as __0secCreateRequire } from "node:module";
+const require = __0secCreateRequire(import.meta.url);
+import {
+  runFileReviewPipeline
+} from "./chunk-WKNNZVJS.js";
+import "./chunk-RRMJC3ZE.js";
+import "./chunk-H2FFLZNK.js";
+import "./chunk-KKGE5RQE.js";
+import "./chunk-YLMN3N25.js";
+import "./chunk-IR537GON.js";
+export {
+  runFileReviewPipeline
+};