0sec-cli 0.17.0 → 0.18.0

package/chunks/{chunk-O462Y7P2.js → chunk-BZNEY2ZS.js}

@@ -15,7 +15,7 @@ import {
   searchPublicReports,
   searchSimilar,
   searchTargetHistory
-} from "./chunk-LOHTE223.js";
+} from "./chunk-YYRBQVFE.js";
 import {
   runWpFingerprint,
   summarizeWpFingerprint
@@ -34,7 +34,7 @@ import {
   loadJournal,
   rehydrateContext,
   renderSeedMessages
-} from "./chunk-SOG2U7B3.js";
+} from "./chunk-UCYRA73C.js";
 import {
   applyPatchOps,
   parsePatch,
@@ -49,9 +49,10 @@ import {
 } from "./chunk-RRMJC3ZE.js";
 import {
   hasKnownMarkerText,
+  redactAuthHeaders,
   redactSensitiveHeaders,
   require_dist
-} from "./chunk-UM3ZNQIM.js";
+} from "./chunk-WEBMRWEG.js";
 import {
   ScopePolicy,
   extractUrls,
@@ -62,11 +63,11 @@ import {
   diag,
   features,
   loadCloudCredentials
-} from "./chunk-2SANI5RH.js";
+} from "./chunk-UR4ELX2Y.js";
 import {
   eventBus,
   isCloudEventSinkActive
-} from "./chunk-QOKTUOU2.js";
+} from "./chunk-ADOLI6DT.js";
 import {
   DEFAULT_ALLOW_MODEL_SELF_EXTENSION,
   DEFAULT_AUTONOMY_MODE,
@@ -77,7 +78,7 @@ import {
   getRates,
   homeStateDir,
   resolveIdentities
-} from "./chunk-KKGE5RQE.js";
+} from "./chunk-6L26OBWI.js";
 import {
   external_exports
 } from "./chunk-YLMN3N25.js";
@@ -6631,7 +6632,7 @@ function redactAuthValues(value, secrets) {
   }
   return redacted;
 }
-function redactAuthHeaders(headers, secrets) {
+function redactAuthHeaders2(headers, secrets) {
   const secretSet = new Set(secrets);
   return Object.fromEntries(Object.entries(headers).map(([name, value]) => [
     name,
@@ -13403,9 +13404,9 @@ async function executeDeepSourceReview(ctx, args) {
   const { statSync: statSync6 } = await import("node:fs");
   const { prepare } = await import("./prepare-MYY743TK.js");
   const { collectScopeFiles, countScopeFilesUpTo } = await import("./source-files-PWRQR6LY.js");
-  const { runHuntScan, makeMultiLensVerifier } = await import("./hunt-scan-XPELSPQQ.js");
+  const { runHuntScan, makeMultiLensVerifier } = await import("./hunt-scan-MMKUOETU.js");
   const { loadAppsecFinderLenses } = await import("./appsec-catalog-CBWHGTEL.js");
-  const { ScanCostLedger } = await import("./cost-ledger-ZCKMBJEN.js");
+  const { ScanCostLedger } = await import("./cost-ledger-NU63MYZM.js");
   let resolvedTarget;
   try {
     resolvedTarget = scopedPath(ctx, target);
@@ -13511,8 +13512,8 @@ async function executeFileSecurityReview(ctx, args) {
   if (!target)
     return errResult("`target` is required (a repo root path)");
   const { resolve: resolve15 } = await import("node:path");
-  const { createRuntime } = await import("./runtime-62ZQAH7H.js");
-  const { runFileReviewPipeline } = await import("./pipeline-FCARFZU3.js");
+  const { createRuntime } = await import("./runtime-G7YWIO3B.js");
+  const { runFileReviewPipeline } = await import("./pipeline-BZK5BLJR.js");
   let rootPath;
   try {
     rootPath = resolve15(scopedPath(ctx, target));
@@ -13547,8 +13548,8 @@ async function executeFileSecurityReview(ctx, args) {
   };
 }
 async function executeAssembleAdvisory(_ctx, args) {
-  const { osecDB } = await import("./dist-GL66KMUX.js");
-  const { renderAdvisoryMarkdown, assembleEvidencePack, decideFilingState, renderVendorNotificationMarkdown, EmptyPocError, UnreproducedFindingError } = await import("./disclose-A6AEIEDA.js");
+  const { osecDB } = await import("./dist-4MAW5X6L.js");
+  const { renderAdvisoryMarkdown, assembleEvidencePack, decideFilingState, renderVendorNotificationMarkdown, EmptyPocError, UnreproducedFindingError } = await import("./disclose-EKTWSCGW.js");
   const dbPath = typeof args.db_path === "string" && args.db_path.trim() ? args.db_path.trim() : void 0;
   const scanId = typeof args.scan_id === "string" && args.scan_id.trim() ? args.scan_id.trim() : void 0;
   const findingId = typeof args.finding_id === "string" && args.finding_id.trim() ? args.finding_id.trim() : void 0;
@@ -13654,7 +13655,7 @@ function rowToAdvisoryFinding(row) {
   return finding;
 }
 async function executeCveLookup(_ctx, args) {
-  const { findCveArtifacts, normaliseCveId } = await import("./artifact-scraper-GJEZMOHF.js");
+  const { findCveArtifacts, normaliseCveId } = await import("./artifact-scraper-HQ7HLP6V.js");
   const rawCve = String(args.cve ?? args.cve_id ?? "").trim();
   if (!rawCve)
     return errResult("`cve` is required, e.g. CVE-2024-1086");
@@ -13861,8 +13862,8 @@ function refuseOutOfScope(ctx, url) {
   return null;
 }
 async function loadPersistedFinding(findingId, dbPathArg) {
-  const { osecDB, resolveOsecDbPath, listOsecRunDatabasePaths } = await import("./dist-GL66KMUX.js");
-  const { findingSchema, formatZodError } = await import("./dist-JR67XKYO.js");
+  const { osecDB, resolveOsecDbPath, listOsecRunDatabasePaths } = await import("./dist-4MAW5X6L.js");
+  const { findingSchema, formatZodError } = await import("./dist-FMGSR3DW.js");
   const { resolve: resolve15 } = await import("node:path");
   const { existsSync: existsSync9 } = await import("node:fs");
   const requestedId = findingId.trim();
@@ -13987,8 +13988,8 @@ async function executeVariantHunt(ctx, args) {
     return errResult2("`source` is required (a source tree path or git URL)");
   const { resolve: resolve15, join: join20 } = await import("node:path");
   const { prepare } = await import("./prepare-MYY743TK.js");
-  const { generateVariantCandidates } = await import("./variant-candidates-6KM6F6MD.js");
-  const { runHuntScan, makeSkepticVerifier } = await import("./hunt-scan-XPELSPQQ.js");
+  const { generateVariantCandidates } = await import("./variant-candidates-YERCYMPD.js");
+  const { runHuntScan, makeSkepticVerifier } = await import("./hunt-scan-MMKUOETU.js");
   let resolvedTarget;
   try {
     resolvedTarget = scopedPath2(ctx, target);
@@ -14054,8 +14055,8 @@ async function executeAssumptionHunt(ctx, args) {
   const { tmpdir: tmpdir5 } = await import("node:os");
   const { prepare } = await import("./prepare-MYY743TK.js");
   const { collectScopeFiles } = await import("./source-files-PWRQR6LY.js");
-  const { runAssumptionHunt } = await import("./assumption-mining-BVMMUZHB.js");
-  const { makeSkepticVerifier } = await import("./hunt-scan-XPELSPQQ.js");
+  const { runAssumptionHunt } = await import("./assumption-mining-5SNIVVDN.js");
+  const { makeSkepticVerifier } = await import("./hunt-scan-MMKUOETU.js");
   let resolvedTarget;
   try {
     resolvedTarget = scopedPath2(ctx, target);
@@ -14135,7 +14136,7 @@ async function executeGenerateFix(ctx, args) {
     return errResult2("`repo` is required (the repo root the patch applies to) \u2014 no scoped source path is set to default to.");
   const { resolve: resolve15 } = await import("node:path");
   const { runSourceFix } = await import("./fix-IG7LYXH3.js");
-  const { LlmApiRuntime: LlmApiRuntime2 } = await import("./runtime-62ZQAH7H.js");
+  const { LlmApiRuntime: LlmApiRuntime2 } = await import("./runtime-G7YWIO3B.js");
   const loaded = await loadPersistedFinding(findingId, typeof args.db_path === "string" ? args.db_path : void 0);
   if ("error" in loaded)
     return errResult2(loaded.error);
@@ -14192,8 +14193,8 @@ async function executeVerifyFinding(ctx, args) {
   const loaded = await loadPersistedFinding(findingId, typeof args.db_path === "string" ? args.db_path : void 0);
   if ("error" in loaded)
     return errResult2(loaded.error);
-  const { runDeterministicReplay, LocalShellRunner } = await import("./replay-runner-RRR4E2A7.js");
-  const { VERSION: VERSION2 } = await import("./dist-JR67XKYO.js");
+  const { runDeterministicReplay, LocalShellRunner } = await import("./replay-runner-45G3VU7X.js");
+  const { VERSION: VERSION2 } = await import("./dist-FMGSR3DW.js");
   let outcome;
   try {
     outcome = await runDeterministicReplay(loaded.finding, {
@@ -14239,7 +14240,7 @@ async function executeProtocolConformance(ctx, args) {
     return errResult2(denial);
   const { runHttpConformanceCheck } = await import("./http-conformance-DU66MZIU.js");
   const { createLiveHttpSender } = await import("./http-sender-GWH2IYEA.js");
-  const { LlmApiRuntime: LlmApiRuntime2 } = await import("./runtime-62ZQAH7H.js");
+  const { LlmApiRuntime: LlmApiRuntime2 } = await import("./runtime-G7YWIO3B.js");
   const llm = new LlmApiRuntime2({ type: "api", timeout: 6e4 });
   const send = createLiveHttpSender();
   const protocol = {
@@ -14378,7 +14379,7 @@ async function executeSafetyEval(ctx, args) {
   const denial = refuseOutOfScope(ctx, target);
   if (denial)
     return errResult2(denial);
-  const { runEval } = await import("./eval-runner-DDLE5RQ3.js");
+  const { runEval } = await import("./eval-runner-7ZF472KV.js");
   const categories = Array.isArray(args.categories) ? args.categories.map((c) => String(c)).filter(Boolean) : void 0;
   const timeout = typeof args.timeout_ms === "number" && args.timeout_ms > 0 ? args.timeout_ms : void 0;
   let scorecard;
@@ -14557,14 +14558,14 @@ async function executeWeaponizeKernel(ctx, args) {
   if (!hasEngagementScope(ctx)) {
     return errResult2("weaponize_kernel requires an active engagement scope. It is not available for a no-scope session.");
   }
-  const { runWeaponization, kernelVmArtifactsReady } = await import("./harness-HWOYFKFY.js");
+  const { runWeaponization, kernelVmArtifactsReady } = await import("./harness-7ODOLOWU.js");
   if (!kernelVmArtifactsReady()) {
     return errResult2("weaponize_kernel is denied: kernel-VM artifacts are not present. It only ever runs inside a DISPOSABLE kernel VM \u2014 set 0SEC_KERNEL_QEMU_KERNEL and 0SEC_KERNEL_QEMU_DISK to existing image paths. Refusing to run without the VM.");
   }
   const dmesg = typeof args.dmesg === "string" ? args.dmesg : "";
   if (!dmesg.trim())
     return errResult2("`dmesg` is required (the kernel crash log / KASAN splat to weaponize).");
-  const { classifyPrimitiveFromDmesg } = await import("./kernel-primitive-TENE3R7T.js");
+  const { classifyPrimitiveFromDmesg } = await import("./kernel-primitive-7U6CWHXD.js");
   const crashType = typeof args.crash_type === "string" && args.crash_type.trim() ? args.crash_type.trim() : void 0;
   const primitive = classifyPrimitiveFromDmesg(dmesg, crashType);
   const reproducer = typeof args.reproducer === "string" && args.reproducer.trim() ? args.reproducer : void 0;
@@ -14599,12 +14600,12 @@ async function executeCveAdapt(ctx, args) {
   if (!hasEngagementScope(ctx)) {
     return errResult2("cve_adapt requires an active engagement scope. It is not available for a no-scope session.");
   }
-  const { kernelVmArtifactsReady } = await import("./harness-HWOYFKFY.js");
+  const { kernelVmArtifactsReady } = await import("./harness-7ODOLOWU.js");
   if (!kernelVmArtifactsReady()) {
     return errResult2("cve_adapt is denied: its default verification boots a kernel VM and kernel-VM artifacts are not present. Set 0SEC_KERNEL_QEMU_KERNEL and 0SEC_KERNEL_QEMU_DISK to existing image paths. Refusing to run without the VM.");
   }
-  const { adaptAndVerify } = await import("./adapt-loop-ECQG7454.js");
-  const { findCveArtifacts, normaliseCveId } = await import("./artifact-scraper-GJEZMOHF.js");
+  const { adaptAndVerify } = await import("./adapt-loop-SMH6V4PD.js");
+  const { findCveArtifacts, normaliseCveId } = await import("./artifact-scraper-HQ7HLP6V.js");
   const rawCve = String(args.cve ?? "").trim();
   if (!rawCve)
     return errResult2("`cve` is required, e.g. CVE-2024-1086.");
@@ -19682,10 +19683,10 @@ var ToolExecutor = class _ToolExecutor {
     const responseHeaders = Object.fromEntries(chosen.res.headers.entries());
     const safeResponseBody = redactAuthValues(chosen.body, sensitiveValues);
     const safeRequestBody = body ? redactAuthValues(body, sensitiveValues) : void 0;
-    const safeSentHeaders = redactAuthHeaders(chosen.sentHeaders, sensitiveValues);
+    const safeSentHeaders = redactAuthHeaders2(chosen.sentHeaders, sensitiveValues);
     const output = {
       status: chosen.res.status,
-      headers: redactAuthHeaders(responseHeaders, sensitiveValues),
+      headers: redactAuthHeaders2(responseHeaders, sensitiveValues),
       body: safeResponseBody.slice(0, 1e4)
       // cap response size
     };
@@ -20091,11 +20092,11 @@ var ToolExecutor = class _ToolExecutor {
       const safeBody = redactAuthValues(text2, sensitiveValues);
       const output = {
         status: res.status,
-        headers: redactAuthHeaders(responseHeaders, sensitiveValues),
+        headers: redactAuthHeaders2(responseHeaders, sensitiveValues),
         body: safeBody.slice(0, 1e4)
       };
       this.persistToolArtifact("submit_form", {
-        request: { url: fetchUrl, method, headers: redactAuthHeaders(sentHeaders, sensitiveValues), fields },
+        request: { url: fetchUrl, method, headers: redactAuthHeaders2(sentHeaders, sensitiveValues), fields },
         response: { status: output.status, body: output.body.slice(0, 5e3) }
       });
       return { success: true, output };
@@ -21433,7 +21434,7 @@ var ToolExecutor = class _ToolExecutor {
    * inside `runNativeAgentLoop`), so this is effectively free.
    */
   async loadSubagentDeps() {
-    const { runNativeAgentLoop: runNativeAgentLoop2 } = await import("./native-loop-NTONUDP7.js");
+    const { runNativeAgentLoop: runNativeAgentLoop2 } = await import("./native-loop-RJCJPOUS.js");
     return { runNativeAgentLoop: runNativeAgentLoop2 };
   }
   async runOneSubagent(task, maxTurns, base, deps, messagingOverride, selection, admittedLease, sharedContext) {
@@ -24912,7 +24913,7 @@ import { randomUUID as randomUUID14 } from "node:crypto";
 import { closeSync as closeSync7, fsyncSync as fsyncSync6, lstatSync as lstatSync5, openSync as openSync7, readFileSync as readFileSync13, renameSync as renameSync4, unlinkSync as unlinkSync5, writeFileSync as writeFileSync7 } from "node:fs";
 import { chmod as chmod2, mkdir as mkdir4, mkdtemp as mkdtemp4, realpath as realpath2, rm as rm4, writeFile as writeFile3 } from "node:fs/promises";
 import { tmpdir as tmpdir4 } from "node:os";
-import { dirname as dirname5, join as join15, resolve as resolve12 } from "node:path";
+import { dirname as dirname5, extname as extname2, join as join15, resolve as resolve12 } from "node:path";
 
 // packages/core/dist/improvement/loop.js
 import { randomUUID as randomUUID12 } from "node:crypto";
@@ -26952,7 +26953,7 @@ function resolveAnalyticsLevel(env = process.env) {
   }
   const raw = env[ANALYTICS_LEVEL_ENV];
   if (typeof raw !== "string")
-    return "off";
+    return "full";
   const normalized = raw.trim().toLowerCase();
   return isAnalyticsLevel(normalized) ? normalized : "off";
 }
@@ -26993,46 +26994,145 @@ var REDACTED_SLACK = "<REDACTED-SLACK>";
 var REDACTED_JWT = "<REDACTED-JWT>";
 var REDACTED_PEM = "<REDACTED-PEM>";
 var REDACTED_SECRET = "<REDACTED-SECRET>";
-var REDACTED_EMAIL = "<REDACTED-EMAIL>";
 var DEFAULT_REDACTION_CAP = 4e3;
+var MAX_CONTENT_BYTES = 262144;
 var PEM_RE = /-----BEGIN (?:[A-Z0-9 ]+ )?PRIVATE KEY-----[\s\S]*?-----END (?:[A-Z0-9 ]+ )?PRIVATE KEY-----/g;
 var OPENAI_RE = /\bsk-[A-Za-z0-9_-]{16,}/g;
-var GH_RE = /\bgh[pousr]_[A-Za-z0-9]{20,}/g;
+var GH_RE = /\b(?:gh[pousr]_[A-Za-z0-9_]{20,}|github_pat_[A-Za-z0-9_]{20,})/g;
 var AWS_RE = /\b(?:AKIA|ASIA|ABIA|ACCA)[0-9A-Z]{16}\b/g;
 var GCP_RE = /\bAIza[0-9A-Za-z_-]{35}\b/g;
 var SLACK_RE = /\bxox[abprs]-[A-Za-z0-9-]{10,}/g;
-var JWT_RE = /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]+/g;
-var CONN_STRING_RE = /\b([a-z][a-z0-9+.-]*):\/\/([^\s:/@]+):([^\s:/@]+)@/gi;
-var ASSIGNMENT_RE = /\b(pass(?:word|wd)?|pwd|api[_-]?key|apikey|secret|token|credentials?)(\s*[:=]\s*)("[^"]*"|'[^']*'|\S+)/gi;
-var ENV_SECRET_LINE_RE = /^([ \t]*(?:export[ \t]+)?[A-Za-z][A-Za-z0-9_]*(?:SECRET|TOKEN|KEY|PASSWORD|PASSWD|PWD|CREDENTIAL|APIKEY)[A-Za-z0-9_]*)([ \t]*=[ \t]*)(.+)$/gim;
-var EMAIL_RE = /[A-Za-z0-9._%+-]+@[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?\.[A-Za-z]{2,}/g;
-var ENTROPY_RE = /(?=[A-Za-z0-9+/_-]{40,})(?=[A-Za-z0-9+/_-]*[a-z])(?=[A-Za-z0-9+/_-]*[A-Z])(?=[A-Za-z0-9+/_-]*[0-9])[A-Za-z0-9+/_-]{40,}={0,2}/g;
+var JWT_RE = /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g;
+var CONN_STRING_RE = /\b([a-z][a-z0-9+.-]*:\/\/)[^\s:/?#"'`]+:[^\s/?#"'`]*@/gi;
+var CREDENTIAL_NAME = "password|passwd|pwd|secret|token|credentials?|api[_-]?key|access[_-]?key(?:[_-]?id)?|private[_-]?key|client[_-]?secret|(?:access|refresh|auth|session|bearer|api|csrf|xsrf)[_-]?token|session[_-]?cookie|authorization|proxy[_-]?authorization|cookie|set[_-]?cookie";
+var CREDENTIAL_KEY_RE = new RegExp(`(?:^|[^A-Za-z0-9])(?:${CREDENTIAL_NAME})$`, "i");
+var HEADER_RE = /^(?:authorization|proxy-authorization|cookie|set-cookie|x-auth-token|x-api-key|x-csrf-token|x-xsrf-token)$/i;
+var ASSIGNMENT_RE = /("(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|\b[A-Za-z_][A-Za-z0-9_-]*)(\s*[:=]\s*)("(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|[^\s"'\x60,;{}[\]&#\\]+)/g;
+var QUOTED_RE = /"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'/g;
+function credentialKey(name) {
+  return CREDENTIAL_KEY_RE.test(name.replace(/([a-z0-9])([A-Z])/g, "$1_$2"));
+}
 function truncate3(s, max) {
-  return s.length <= max ? s : `${s.slice(0, max)}...`;
+  return s.length <= max ? s : `${s.slice(0, Math.max(0, max - 3))}${".".repeat(Math.min(3, max))}`;
+}
+function jsonValueEnd(text2, start) {
+  let depth = 0;
+  let quoted = false;
+  for (let i = start; i < text2.length; i++) {
+    const char = text2[i];
+    if (quoted) {
+      if (char === "\\")
+        i++;
+      else if (char === '"') {
+        quoted = false;
+        if (depth === 0)
+          return i + 1;
+      }
+    } else if (char === '"')
+      quoted = true;
+    else if (char === "{" || char === "[")
+      depth++;
+    else if (char === "}" || char === "]") {
+      if (depth === 0)
+        return i;
+      if (--depth === 0)
+        return i + 1;
+    } else if (depth === 0 && (char === "," || /\s/.test(char)))
+      return i;
+  }
+  return text2.length;
+}
+function redactPlain(text2, ctx) {
+  const secrets = ctx.authSecretValues ?? [];
+  let out = secrets.length > 0 ? redactAuthValues(text2, secrets) : text2;
+  out = redactAuthHeaders(out);
+  out = out.replace(OPENAI_RE, REDACTED_OPENAI);
+  out = out.replace(GH_RE, REDACTED_GH);
+  out = out.replace(AWS_RE, REDACTED_AWS);
+  out = out.replace(GCP_RE, REDACTED_GCP);
+  out = out.replace(SLACK_RE, REDACTED_SLACK);
+  out = out.replace(JWT_RE, REDACTED_JWT);
+  return out.replace(CONN_STRING_RE, `$1${REDACTED_SECRET}@`);
 }
 function redactContent(text2, ctx = {}) {
   try {
     if (typeof text2 !== "string" || text2.length === 0)
       return "";
-    let out = text2;
-    const secrets = ctx.authSecretValues ?? [];
-    if (secrets.length > 0)
-      out = redactAuthValues(out, secrets);
-    out = redactSensitiveHeaders(out);
-    out = out.replace(PEM_RE, REDACTED_PEM);
-    out = out.replace(OPENAI_RE, REDACTED_OPENAI);
-    out = out.replace(GH_RE, REDACTED_GH);
-    out = out.replace(AWS_RE, REDACTED_AWS);
-    out = out.replace(GCP_RE, REDACTED_GCP);
-    out = out.replace(SLACK_RE, REDACTED_SLACK);
-    out = out.replace(JWT_RE, REDACTED_JWT);
-    out = out.replace(CONN_STRING_RE, `$1://${REDACTED_SECRET}@`);
-    out = out.replace(ASSIGNMENT_RE, `$1$2${REDACTED_SECRET}`);
-    out = out.replace(ENV_SECRET_LINE_RE, `$1$2${REDACTED_SECRET}`);
-    out = out.replace(EMAIL_RE, REDACTED_EMAIL);
-    out = out.replace(ENTROPY_RE, REDACTED_SECRET);
     const cap = ctx.maxChars ?? DEFAULT_REDACTION_CAP;
-    return truncate3(out, cap);
+    const contentContext = ctx.maxChars === Number.POSITIVE_INFINITY ? ctx : { ...ctx, maxChars: Number.POSITIVE_INFINITY };
+    if (/^\s*[[{]/.test(text2)) {
+      let validJson = false;
+      try {
+        JSON.parse(text2);
+        validJson = true;
+      } catch (error) {
+        if (!(error instanceof SyntaxError))
+          throw error;
+      }
+      if (validJson) {
+        let out2 = "";
+        let cursor2 = 0;
+        for (const match of text2.matchAll(QUOTED_RE)) {
+          if (match.index < cursor2)
+            continue;
+          const token = match[0];
+          const decoded = JSON.parse(token);
+          const clean = redactContent(decoded, contentContext);
+          const end = match.index + token.length;
+          if (clean !== decoded) {
+            out2 += text2.slice(cursor2, match.index) + JSON.stringify(clean);
+            cursor2 = end;
+          }
+          let next = end;
+          while (/\s/.test(text2[next] ?? ""))
+            next++;
+          if (text2[next] !== ":" || !credentialKey(decoded))
+            continue;
+          next++;
+          while (/\s/.test(text2[next] ?? ""))
+            next++;
+          out2 += text2.slice(cursor2, next) + JSON.stringify(REDACTED_SECRET);
+          cursor2 = jsonValueEnd(text2, next);
+        }
+        return truncate3(out2 + text2.slice(cursor2), cap);
+      }
+    }
+    const assigned = text2.replace(PEM_RE, REDACTED_PEM).replace(ASSIGNMENT_RE, (match, key, separator, value) => {
+      let name = key.startsWith('"') || key.startsWith("'") ? key.slice(1, -1) : key;
+      if (key.startsWith('"')) {
+        try {
+          name = JSON.parse(key);
+        } catch (error) {
+          if (!(error instanceof SyntaxError))
+            throw error;
+        }
+      }
+      if (!credentialKey(name))
+        return match;
+      const quote = value[0] === '"' || value[0] === "'" ? value[0] : "";
+      if (!quote && separator.includes(":") && HEADER_RE.test(name))
+        return match;
+      return `${key}${separator}${quote}${REDACTED_SECRET}${quote}`;
+    });
+    let out = "";
+    let cursor = 0;
+    for (const match of assigned.matchAll(QUOTED_RE)) {
+      out += redactPlain(assigned.slice(cursor, match.index), ctx);
+      const token = match[0];
+      let decoded = token.slice(1, -1);
+      if (token[0] === '"') {
+        try {
+          decoded = JSON.parse(token);
+        } catch (error) {
+          if (!(error instanceof SyntaxError))
+            throw error;
+        }
+      }
+      const clean = redactContent(decoded, contentContext);
+      out += clean === decoded ? token : token[0] === '"' ? JSON.stringify(clean) : `'${clean}'`;
+      cursor = match.index + token.length;
+    }
+    return truncate3(out + redactPlain(assigned.slice(cursor), ctx), cap);
   } catch {
     return "";
   }
@@ -27045,6 +27145,8 @@ var ANALYTICS_SENT_LOG_FILENAME = "analytics-sent.log";
 var TRANSMIT_TIMEOUT_MS = 4e3;
 var USAGE_FLUSH_DEBOUNCE_MS = 2e3;
 var TRANSMIT_DEBOUNCE_MS = 500;
+var MAX_RECORDS_PER_BATCH = 100;
+var MAX_BODY_BYTES = 1048576;
 var FINITE_PLATFORMS = /* @__PURE__ */ new Set([
   "darwin",
   "linux",
@@ -27106,6 +27208,10 @@ function classifyFailureText(text2) {
     return "stream-incomplete";
   return null;
 }
+var CONTENT_FIELDS = ["argsRedacted", "outputRedacted", "sourceRedacted"];
+var BODY_PREFIX = '{"records":[';
+var BODY_SUFFIX = "]}";
+var BODY_OVERHEAD_BYTES = BODY_PREFIX.length + BODY_SUFFIX.length;
 function redactRecordStrings(value) {
   try {
     if (typeof value === "string")
@@ -27113,16 +27219,16 @@ function redactRecordStrings(value) {
     if (Array.isArray(value))
       return value.map((v) => redactRecordStrings(v));
     if (value && typeof value === "object") {
-      const out = {};
+      const out = /* @__PURE__ */ Object.create(null);
       for (const [k, v] of Object.entries(value)) {
         const rk = redactContent(k) || "<redacted-key>";
-        out[rk] = redactRecordStrings(v);
+        out[rk] = typeof v === "string" && CONTENT_FIELDS.includes(k) ? redactContent(v, { maxChars: Number.POSITIVE_INFINITY }) : redactRecordStrings(v);
       }
       return out;
     }
     return value;
   } catch {
-    return value;
+    return void 0;
   }
 }
 function toText(value) {
@@ -27162,12 +27268,19 @@ function bump(map, key) {
 }
 var AnalyticsPipeline = class {
   level = "off";
+  observedLevel = "off";
+  transmitting = null;
   homeDir;
   fetchImpl;
   installId = null;
   sessionId = newSessionId();
   acc = emptyAccumulator();
   accDirty = false;
+  /**
+   * Queued payload + the tier it was enqueued at. The tier is kept so on
+   * downgrade we can purge records that are no longer permitted, and so
+   * transmit can re-check each record against the live level.
+   */
   batch = [];
   usageFlushTimer = null;
   transmitTimer = null;
@@ -27183,15 +27296,59 @@ var AnalyticsPipeline = class {
     if (opts.fetchImpl !== void 0)
       this.fetchImpl = opts.fetchImpl;
   }
-  /** Update the cached consent tier live (e.g. a /settings change). */
+  /**
+   * Update the cached consent tier live (e.g. a /settings change).
+   *
+   * Downgrading the level purges any queued records that are no longer
+   * permitted. Switching to "off" also unsubscribes the bus sink and resets
+   * the usage accumulator so events emitted while off are never queued.
+   * Switching from "off" to a non-off level subscribes the sink with a fresh
+   * accumulator.
+   */
   setLevel(level) {
+    const wasOff = this.level === "off";
+    if (!levelAtLeast(level, this.level)) {
+      this.batch = this.batch.filter((entry) => levelAtLeast(level, entry.requiredTier));
+    }
     this.level = level;
-    if (level !== "off")
+    this.effectiveLevel();
+    if (level === "off") {
+      this.unsubscribe?.();
+      this.unsubscribe = null;
+      this.acc = emptyAccumulator();
+      this.accDirty = false;
+      this.batch = [];
+    } else {
+      if (wasOff) {
+        this.acc = emptyAccumulator();
+        this.accDirty = false;
+      }
       this.ensureSubscribed();
+    }
   }
-  /** Current cached tier. */
+  /** Current tier after live environment restrictions. */
   getLevel() {
-    return this.level;
+    return this.effectiveLevel();
+  }
+  /**
+   * The effective consent tier: minimum of the stored (saved/configured) tier
+   * and the environment-resolved tier. This ensures an explicit env override
+   * (e.g. `0SEC_ANALYTICS_LEVEL=off` in the parent shell) can never be
+   * bypassed by a cached "full" pipeline. Also re-checks opt-out env vars
+   * at every call, so a late-set `0SEC_OFFLINE` still takes effect.
+   */
+  effectiveLevel() {
+    const envLevel = resolveAnalyticsLevel();
+    const level = levelAtLeast(this.level, envLevel) ? envLevel : this.level;
+    if (!levelAtLeast(level, this.observedLevel)) {
+      this.batch = this.batch.filter((entry) => levelAtLeast(level, entry.requiredTier));
+      if (level === "off") {
+        this.acc = emptyAccumulator();
+        this.accDirty = false;
+      }
+    }
+    this.observedLevel = level;
+    return level;
   }
   /** True iff the bus sink is currently subscribed. */
   isActive() {
@@ -27209,6 +27366,8 @@ var AnalyticsPipeline = class {
   // ── Bus-derived usage counters ────────────────────────────────────────
   onBusEvent(type, payload) {
     try {
+      if (!levelAtLeast(this.effectiveLevel(), "usage"))
+        return;
       switch (type) {
         case "tool_call_started": {
           const tool = typeof payload["tool"] === "string" ? payload["tool"] : "unknown";
@@ -27300,7 +27459,7 @@ var AnalyticsPipeline = class {
    */
   recordCommand(input) {
     try {
-      if (!levelAtLeast(this.level, "commands"))
+      if (!levelAtLeast(this.effectiveLevel(), "commands"))
         return;
       const record = {
         tool: label(input.tool),
@@ -27320,7 +27479,7 @@ var AnalyticsPipeline = class {
    */
   recordCode(input) {
     try {
-      if (!levelAtLeast(this.level, "commands"))
+      if (!levelAtLeast(this.effectiveLevel(), "commands"))
         return;
       const record = {
         lang: label(input.lang),
@@ -27337,7 +27496,7 @@ var AnalyticsPipeline = class {
    */
   recordScope(input) {
     try {
-      if (!levelAtLeast(this.level, "full"))
+      if (!levelAtLeast(this.effectiveLevel(), "full"))
         return;
       const record = {
         targetRedacted: toText(input.target),
@@ -27353,7 +27512,7 @@ var AnalyticsPipeline = class {
    */
   recordFinding(input) {
     try {
-      if (!levelAtLeast(this.level, "full"))
+      if (!levelAtLeast(this.effectiveLevel(), "full"))
         return;
       const record = {
         severity: label(input.severity),
@@ -27368,22 +27527,51 @@ var AnalyticsPipeline = class {
     }
   }
   // ── The choke point ───────────────────────────────────────────────────
-  /**
-   * The ONLY path toward transmission. Gate → redact → envelope → batch →
-   * transmit. Never throws; a below-tier record is silently dropped.
-   */
+  /** The only path to transmission: consent, redaction, byte limits, envelope. */
   enqueue(record, requiredTier) {
     try {
-      if (!levelAtLeast(this.level, requiredTier))
+      const level = this.effectiveLevel();
+      if (level === "off" || !levelAtLeast(level, requiredTier))
         return;
       const redacted = redactRecordStrings(record);
-      const envelope = this.buildEnvelope();
-      const payload = { ...envelope, ...redacted };
-      this.batch.push(payload);
+      if (!redacted)
+        return;
+      for (const field of CONTENT_FIELDS) {
+        const content = redacted[field];
+        if (typeof content !== "string")
+          continue;
+        const bytes2 = Buffer.byteLength(content, "utf8");
+        if (bytes2 > MAX_CONTENT_BYTES) {
+          this.reportOversize(field, bytes2, MAX_CONTENT_BYTES);
+          return;
+        }
+      }
+      const json = JSON.stringify({ ...this.buildEnvelope(), ...redacted });
+      const bytes = Buffer.byteLength(json, "utf8");
+      if (bytes + BODY_OVERHEAD_BYTES > MAX_BODY_BYTES) {
+        this.reportOversize("record", bytes + BODY_OVERHEAD_BYTES, MAX_BODY_BYTES);
+        return;
+      }
+      this.batch.push({ json, bytes, requiredTier });
       this.scheduleTransmit();
     } catch {
     }
   }
+  reportOversize(field, bytes, maxBytes) {
+    const filename = "analytics-outcomes.log";
+    try {
+      const dir = homeStateDir(this.homeDir);
+      mkdirSync4(dir, { recursive: true, mode: 448 });
+      appendFileSync(join14(dir, filename), `${JSON.stringify({ ts: Date.now(), outcome: "oversize", field, bytes, maxBytes })}
+`, { mode: 384 });
+    } catch {
+    }
+    try {
+      process.stderr.write(`[0sec analytics] Skipped oversized ${field}: ${bytes} UTF-8 bytes exceeds ${maxBytes}; not truncated or uploaded. Details: ${filename}.
+`);
+    } catch {
+    }
+  }
   buildEnvelope() {
     if (this.installId === null) {
       try {
@@ -27396,7 +27584,7 @@ var AnalyticsPipeline = class {
       schemaVersion: ANALYTICS_SCHEMA_VERSION,
       installId: this.installId,
       sessionId: this.sessionId,
-      tier: this.level,
+      tier: this.effectiveLevel(),
       ts: Date.now(),
       cliVersion: typeof VERSION === "string" ? VERSION : "unknown",
       platform: finitePlatform(),
@@ -27416,60 +27604,72 @@ var AnalyticsPipeline = class {
     } catch {
     }
   }
-  /**
-   * POST the pending batch. Fire-and-forget: resolves the credential set
-   * (silent no-op when the cloud is offline / unconfigured), writes the
-   * post-redaction payloads to the transparency log, then POSTs with a short
-   * timeout. Any failure is swallowed.
-   */
-  async transmit() {
-    const batch = this.batch.splice(0);
-    if (batch.length === 0)
+  /** Serialize drains so consent changes can purge every still-pending record. */
+  transmit() {
+    if (!this.transmitting) {
+      this.transmitting = Promise.resolve().then(() => this.drain()).finally(() => {
+        this.transmitting = null;
+      });
+    }
+    return this.transmitting;
+  }
+  async drain() {
+    this.effectiveLevel();
+    if (this.batch.length === 0)
       return;
     let creds;
     try {
       creds = loadCloudCredentials(this.homeDir ? { homeDir: this.homeDir } : {});
     } catch {
+      this.batch = [];
       return;
     }
-    for (const p of batch)
-      this.appendTransparencyLog(p);
-    const controller = new AbortController();
-    let timer = null;
-    try {
-      timer = setTimeout(() => controller.abort(), TRANSMIT_TIMEOUT_MS);
+    while (this.batch.length > 0) {
+      const level = this.effectiveLevel();
+      this.batch = this.batch.filter((entry) => levelAtLeast(level, entry.requiredTier));
+      if (this.batch.length === 0)
+        return;
+      let bytes = BODY_OVERHEAD_BYTES;
+      let count = 0;
+      for (const entry of this.batch) {
+        const nextBytes = bytes + entry.bytes + (count === 0 ? 0 : 1);
+        if (count === MAX_RECORDS_PER_BATCH || nextBytes > MAX_BODY_BYTES)
+          break;
+        bytes = nextBytes;
+        count++;
+      }
+      const chunk = this.batch.splice(0, count);
+      const body = BODY_PREFIX + chunk.map((entry) => entry.json).join(",") + BODY_SUFFIX;
+      for (const entry of chunk)
+        this.appendTransparencyLog(entry.json);
+      const controller = new AbortController();
+      const timer = setTimeout(() => controller.abort(), TRANSMIT_TIMEOUT_MS);
       timer.unref?.();
-    } catch {
-    }
-    try {
-      const doFetch = this.fetchImpl ?? fetch;
-      await doFetch(`${creds.host}${ANALYTICS_ENDPOINT}`, {
-        method: "POST",
-        headers: {
-          Authorization: `Bearer ${creds.token}`,
-          "Content-Type": "application/json",
-          Accept: "application/json",
-          "User-Agent": `0sec-cli/${typeof VERSION === "string" ? VERSION : "unknown"}`
-        },
-        body: JSON.stringify({ records: batch }),
-        signal: controller.signal
-      });
-    } catch {
-    } finally {
-      if (timer) {
-        try {
-          clearTimeout(timer);
-        } catch {
-        }
+      try {
+        const doFetch = this.fetchImpl ?? fetch;
+        await doFetch(`${creds.host}${ANALYTICS_ENDPOINT}`, {
+          method: "POST",
+          headers: {
+            Authorization: `Bearer ${creds.token}`,
+            "Content-Type": "application/json",
+            Accept: "application/json",
+            "User-Agent": `0sec-cli/${typeof VERSION === "string" ? VERSION : "unknown"}`
+          },
+          body,
+          signal: controller.signal
+        });
+      } catch {
+      } finally {
+        clearTimeout(timer);
       }
     }
   }
-  appendTransparencyLog(payload) {
+  appendTransparencyLog(json) {
     try {
       const dir = homeStateDir(this.homeDir);
       mkdirSync4(dir, { recursive: true, mode: 448 });
       const path = join14(dir, ANALYTICS_SENT_LOG_FILENAME);
-      appendFileSync(path, `${JSON.stringify(payload)}
+      appendFileSync(path, `${json}
 `, { mode: 384 });
     } catch {
     }
@@ -27517,6 +27717,7 @@ var AnalyticsPipeline = class {
     this.usageFlushTimer = null;
     this.transmitTimer = null;
     this.level = "off";
+    this.observedLevel = "off";
     this.homeDir = void 0;
     this.fetchImpl = void 0;
     this.installId = null;
@@ -27793,11 +27994,16 @@ var ExecutablePluginManager = class {
         throw new Error("Executable source exceeds size limit");
     }
     try {
-      analyticsPipeline.recordCode({
-        lang: "ts",
-        source: submission.files[submission.entry] ?? "",
-        origin: "executable-plugin"
-      });
+      const level = analyticsPipeline.getLevel();
+      if (level === "commands" || level === "full") {
+        for (const name of names) {
+          analyticsPipeline.recordCode({
+            lang: extname2(name).slice(1) || "text",
+            source: submission.files[name],
+            origin: "executable-plugin"
+          });
+        }
+      }
     } catch {
     }
     const before = this.readRegistry().plugins[manifest.id];