0sec-cli 0.17.0 → 0.18.0

package/0sec.js

@@ -4,7 +4,7 @@ const require = __0secCreateRequire(import.meta.url);
 import {
   Command,
   runStartupUpdate
-} from "./chunks/chunk-VGRDNSHA.js";
+} from "./chunks/chunk-AD7WXDH6.js";
 import {
   resolveEngagement,
   setHerdrSink
@@ -15,65 +15,64 @@ import {
   installProcessPresentationStreamBridge,
   maybeLoadCodexAuth,
   presentationEventBus
-} from "./chunks/chunk-2CJ776PV.js";
+} from "./chunks/chunk-GMT2AZKM.js";
 import {
   createHerdrEventSink,
   maybeSubscribeOperationalEventSink
-} from "./chunks/chunk-IORC6MQX.js";
-import "./chunks/chunk-QJQKHO7G.js";
+} from "./chunks/chunk-5JI7L7KV.js";
+import "./chunks/chunk-CMKXP5RR.js";
 import {
   source_default
 } from "./chunks/chunk-SF4KZ4O3.js";
-import "./chunks/chunk-HDWV7PGI.js";
+import "./chunks/chunk-AHTBZC3E.js";
 import "./chunks/chunk-WVTBZEQO.js";
 import "./chunks/chunk-5G3ZXFBW.js";
 import "./chunks/chunk-7DQEV5QI.js";
 import "./chunks/chunk-RWONANDA.js";
-import "./chunks/chunk-KTQDLNSR.js";
-import "./chunks/chunk-HE7LCA7G.js";
-import "./chunks/chunk-D6S3IIPG.js";
-import "./chunks/chunk-A6CLR72I.js";
-import "./chunks/chunk-47TQJWDH.js";
-import "./chunks/chunk-SNKTC4BP.js";
+import "./chunks/chunk-BATRQBOR.js";
+import "./chunks/chunk-2JCCA2JL.js";
+import "./chunks/chunk-ASUR522M.js";
+import "./chunks/chunk-BFRB6HB2.js";
+import "./chunks/chunk-JQHOLLTD.js";
+import "./chunks/chunk-3KPWWJCI.js";
 import "./chunks/chunk-F3WBKITT.js";
-import "./chunks/chunk-DN25OQQA.js";
+import "./chunks/chunk-C2WXWFBB.js";
 import "./chunks/chunk-IOL7D5YV.js";
 import "./chunks/chunk-2RMLOJVB.js";
 import "./chunks/chunk-BKZFDZ23.js";
 import "./chunks/chunk-53G27VPS.js";
-import "./chunks/chunk-K26SZ37E.js";
+import "./chunks/chunk-BFR2CDV5.js";
 import "./chunks/chunk-RJWOYEOG.js";
 import {
-  ANALYTICS_LEVEL_ENV,
-  maybeSubscribeAnalyticsPipeline
-} from "./chunks/chunk-O462Y7P2.js";
-import "./chunks/chunk-LOHTE223.js";
+  analyticsPipeline
+} from "./chunks/chunk-BZNEY2ZS.js";
+import "./chunks/chunk-YYRBQVFE.js";
 import "./chunks/chunk-3MOLBTLS.js";
 import "./chunks/chunk-P6WKNFWX.js";
-import "./chunks/chunk-SOG2U7B3.js";
+import "./chunks/chunk-UCYRA73C.js";
 import "./chunks/chunk-LP3HHYQU.js";
 import "./chunks/chunk-KLTNTE2Z.js";
-import "./chunks/chunk-HT6P7RY3.js";
+import "./chunks/chunk-72CISA2D.js";
 import "./chunks/chunk-QI233I24.js";
-import "./chunks/chunk-SZJCPG2I.js";
-import "./chunks/chunk-WKNNZVJS.js";
+import "./chunks/chunk-242TMK6G.js";
+import "./chunks/chunk-Z5FA2XOX.js";
 import "./chunks/chunk-RRMJC3ZE.js";
 import "./chunks/chunk-H2FFLZNK.js";
-import "./chunks/chunk-UJ4IK5PO.js";
-import "./chunks/chunk-UM3ZNQIM.js";
-import "./chunks/chunk-QKICO43A.js";
+import "./chunks/chunk-U5FLXGHT.js";
+import "./chunks/chunk-WEBMRWEG.js";
+import "./chunks/chunk-SVJEDVYK.js";
 import "./chunks/chunk-57ZENEX2.js";
-import "./chunks/chunk-MMLDQR4H.js";
-import "./chunks/chunk-2SANI5RH.js";
-import "./chunks/chunk-CLHCDHP4.js";
+import "./chunks/chunk-N7BOUYEV.js";
+import "./chunks/chunk-UR4ELX2Y.js";
+import "./chunks/chunk-ATATQACO.js";
 import {
   eventBus,
   maybeSubscribeCloudEventSink,
   presentationEventSink
-} from "./chunks/chunk-QOKTUOU2.js";
+} from "./chunks/chunk-ADOLI6DT.js";
 import {
   VERSION
-} from "./chunks/chunk-KKGE5RQE.js";
+} from "./chunks/chunk-6L26OBWI.js";
 import "./chunks/chunk-YLMN3N25.js";
 import "./chunks/chunk-6LKRLK2R.js";
 import "./chunks/chunk-SAFFWQW4.js";
@@ -104,7 +103,7 @@ import { fileURLToPath } from "node:url";
 var BYPASS_ENV = "0SEC_ALLOW_STALE_SOURCE_DIST";
 function currentBuildCommit() {
   if (true) {
-    return "6a34d78085f2d3edfe8c42c85f5261f1bf6f39f6";
+    return "12ad05beb38c5d132aacce95ed4236900be2a6dd";
   }
   return void 0;
 }
@@ -195,10 +194,10 @@ installProcessPresentationStreamBridge();
 maybeLoadCodexAuth();
 maybeSubscribeCloudEventSink();
 try {
-  process.env[ANALYTICS_LEVEL_ENV] = getSettings().analyticsLevel;
+  getSettings();
 } catch {
+  analyticsPipeline.setLevel("off");
 }
-maybeSubscribeAnalyticsPipeline();
 maybeSubscribeOperationalEventSink();
 eventBus.subscribe(presentationEventSink(presentationEventBus));
 var herdrSink = createHerdrEventSink();
@@ -207,7 +206,7 @@ setHerdrSink(herdrSink);
 enforceSourceDistFreshness({ entryUrl: import.meta.url });
 await runStartupUpdate(VERSION);
 async function buildProgram() {
-  const c = await import("./chunks/commands-U3AMV5ZU.js");
+  const c = await import("./chunks/commands-TBC2F5CE.js");
   const program = new Command();
   program.name("0sec").description("Open-source multi-model security research harness").version(VERSION).enablePositionalOptions();
   c.registerScanCommand(program);
@@ -215,8 +214,10 @@ async function buildProgram() {
   c.registerReplayCommand(program);
   c.registerHistoryCommand(program);
   c.registerFindingsCommand(program);
+  c.registerSecureCommand(program);
   c.registerReviewCommand(program);
   c.registerFixCommand(program);
+  c.registerConnectCommand(program);
   c.registerAuditCommand(program);
   c.registerDoctorCommand(program);
   c.registerDashboardCommand(program);
@@ -270,7 +271,7 @@ async function buildProgram() {
 async function showInteractiveMenu() {
   const { isBunRuntime } = await import("./chunks/runtime-J7PLXZNM.js");
   if (isBunRuntime()) {
-    const { showOpenTuiHome } = await import("./chunks/run-ESNN4V5W.js");
+    const { showOpenTuiHome } = await import("./chunks/run-D56MPDKY.js");
     await showOpenTuiHome();
     return;
   }
@@ -288,8 +289,12 @@ async function showInteractiveMenu() {
   console.log(`    0sec --help`);
   console.log("");
 }
+process.once("beforeExit", () => {
+  void analyticsPipeline.flushNow().catch(() => {
+  });
+});
 var userArgs = process.argv.slice(2);
-var knownCommands = ["scan", "resume", "replay", "history", "findings", "review", "fix", "file-review", "audit", "doctor", "dashboard", "tui", "watch", "orchestrate", "db", "mcp-server", "eval", "bench", "ingest", "kernel", "disclose", "verify", "exploit", "hunt", "recency-hunt", "deep-review", "lens-synth", "memsafety", "assumption-hunt", "specdrift", "protocol-check", "cve", "upgrade", "h1", "auth", "login", "models", "balance", "intel", "recon", "js-recon", "npm-discovery", "identity", "adgraph", "entragraph", "cloud", "xnu-fuzz", "research", "timeline", "console", "agent-assure", "binary", "plugin", "theme", "config", "evolve", "hackstore", "hack", "store", "help"];
+var knownCommands = ["scan", "resume", "replay", "history", "findings", "secure", "connect", "review", "fix", "file-review", "audit", "doctor", "dashboard", "tui", "watch", "orchestrate", "db", "mcp-server", "eval", "bench", "ingest", "kernel", "disclose", "verify", "exploit", "hunt", "recency-hunt", "deep-review", "lens-synth", "memsafety", "assumption-hunt", "specdrift", "protocol-check", "cve", "upgrade", "update", "h1", "auth", "login", "models", "balance", "intel", "recon", "js-recon", "npm-discovery", "identity", "adgraph", "entragraph", "cloud", "xnu-fuzz", "research", "timeline", "console", "agent-assure", "binary", "plugin", "theme", "config", "evolve", "hackstore", "hack", "store", "help"];
 if (userArgs.length === 0) {
   showInteractiveMenu().catch((err) => {
     console.error(source_default.red(err instanceof Error ? err.message : String(err)));

package/README.md

@@ -47,6 +47,15 @@ export PATH="$HOME/.0sec/bin:$PATH"
 Add the `export` line to your shell profile. Run `0` to open the interactive
 console, or `0 --help` for commands. Only test systems you own or have permission to assess.
 
+Alternatively, with Node.js 24 or newer:
+
+```bash
+npm install -g 0sec-cli
+0sec --help
+```
+
+The npm package is `0sec-cli`; its commands are `0sec` and `0`.
+
 ## Documentation
 
 - [Getting started](https://docs.0.security/getting-started/): installation, source builds and your first scan.

package/chunks/{adapt-loop-ECQG7454.js → adapt-loop-SMH6V4PD.js}

@@ -5,10 +5,10 @@ import {
   adaptAndVerify,
   applyUnifiedDiff,
   renderAdaptationPrompt
-} from "./chunk-D6S3IIPG.js";
-import "./chunk-SNKTC4BP.js";
-import "./chunk-SOG2U7B3.js";
-import "./chunk-KKGE5RQE.js";
+} from "./chunk-ASUR522M.js";
+import "./chunk-3KPWWJCI.js";
+import "./chunk-UCYRA73C.js";
+import "./chunk-6L26OBWI.js";
 import "./chunk-YLMN3N25.js";
 import "./chunk-IR537GON.js";
 export {

package/chunks/{artifact-scraper-GJEZMOHF.js → artifact-scraper-HQ7HLP6V.js}

@@ -14,8 +14,8 @@ import {
   parseUbuntuTracker,
   scoreCodeCandidate,
   scoreRepoCandidate
-} from "./chunk-QKICO43A.js";
-import "./chunk-KKGE5RQE.js";
+} from "./chunk-SVJEDVYK.js";
+import "./chunk-6L26OBWI.js";
 import "./chunk-YLMN3N25.js";
 import "./chunk-IR537GON.js";
 export {

package/chunks/{assumption-mining-BVMMUZHB.js → assumption-mining-5SNIVVDN.js}

@@ -24,30 +24,30 @@ import {
   scoreDualViewWeaponizability,
   storeAssumptionModel,
   subjectSelfEnforces
-} from "./chunk-47TQJWDH.js";
-import "./chunk-SNKTC4BP.js";
+} from "./chunk-JQHOLLTD.js";
+import "./chunk-3KPWWJCI.js";
 import {
   composeGate,
   makeSkepticVerifier
-} from "./chunk-K26SZ37E.js";
+} from "./chunk-BFR2CDV5.js";
 import "./chunk-RJWOYEOG.js";
-import "./chunk-O462Y7P2.js";
-import "./chunk-LOHTE223.js";
+import "./chunk-BZNEY2ZS.js";
+import "./chunk-YYRBQVFE.js";
 import "./chunk-3MOLBTLS.js";
 import "./chunk-P6WKNFWX.js";
-import "./chunk-SOG2U7B3.js";
+import "./chunk-UCYRA73C.js";
 import "./chunk-LP3HHYQU.js";
 import "./chunk-KLTNTE2Z.js";
-import "./chunk-HT6P7RY3.js";
+import "./chunk-72CISA2D.js";
 import "./chunk-RRMJC3ZE.js";
 import "./chunk-H2FFLZNK.js";
-import "./chunk-UM3ZNQIM.js";
+import "./chunk-WEBMRWEG.js";
 import "./chunk-57ZENEX2.js";
-import "./chunk-MMLDQR4H.js";
-import "./chunk-2SANI5RH.js";
-import "./chunk-CLHCDHP4.js";
-import "./chunk-QOKTUOU2.js";
-import "./chunk-KKGE5RQE.js";
+import "./chunk-N7BOUYEV.js";
+import "./chunk-UR4ELX2Y.js";
+import "./chunk-ATATQACO.js";
+import "./chunk-ADOLI6DT.js";
+import "./chunk-6L26OBWI.js";
 import "./chunk-YLMN3N25.js";
 import "./chunk-DW5UWPFY.js";
 import "./chunk-IR537GON.js";

package/chunks/{chunk-SZJCPG2I.js → chunk-242TMK6G.js}

@@ -5,7 +5,7 @@ import {
   estimateCost,
   modelProvider,
   splitCost
-} from "./chunk-KKGE5RQE.js";
+} from "./chunk-6L26OBWI.js";
 
 // packages/core/dist/agent/cost-ledger.js
 var ScanCostLedger = class {

package/chunks/{chunk-HE7LCA7G.js → chunk-2JCCA2JL.js}

@@ -3,7 +3,7 @@ import { createRequire as __0secCreateRequire } from "node:module";
 const require = __0secCreateRequire(import.meta.url);
 import {
   severityRank
-} from "./chunk-KKGE5RQE.js";
+} from "./chunk-6L26OBWI.js";
 
 // packages/core/dist/triage/kernel-primitive.js
 function maxSeverity(a, b) {

package/chunks/{chunk-SNKTC4BP.js → chunk-3KPWWJCI.js}

@@ -3,7 +3,7 @@ import { createRequire as __0secCreateRequire } from "node:module";
 const require = __0secCreateRequire(import.meta.url);
 import {
   homeStateDir
-} from "./chunk-KKGE5RQE.js";
+} from "./chunk-6L26OBWI.js";
 
 // packages/core/dist/triage/kernel-vm-runner.js
 import { execFileSync, spawn } from "node:child_process";