0sec-cli 0.17.0 → 0.18.0

package/chunks/{chunk-DN25OQQA.js → chunk-C2WXWFBB.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-KLTNTE2Z.js";
 import {
   VERSION
-} from "./chunk-KKGE5RQE.js";
+} from "./chunk-6L26OBWI.js";
 
 // packages/core/dist/verify/replay-runner.js
 import { spawn } from "node:child_process";

package/chunks/{chunk-QJQKHO7G.js → chunk-CMKXP5RR.js}

@@ -3,7 +3,7 @@ import { createRequire as __0secCreateRequire } from "node:module";
 const require = __0secCreateRequire(import.meta.url);
 import {
   jitterFor
-} from "./chunk-LOHTE223.js";
+} from "./chunk-YYRBQVFE.js";
 
 // packages/core/dist/scope/rate-limit.js
 var TokenBucket = class {

package/chunks/{chunk-2CJ776PV.js → chunk-GMT2AZKM.js}

@@ -4,13 +4,14 @@ const require = __0secCreateRequire(import.meta.url);
 import {
   ANALYTICS_LEVEL_ENV,
   analyticsPipeline,
+  levelAtLeast,
   resolveAnalyticsLevel
-} from "./chunk-O462Y7P2.js";
+} from "./chunk-BZNEY2ZS.js";
 import {
   DEFAULT_ALLOW_MODEL_SELF_EXTENSION,
   createPresentationEvent,
   homeStateDir
-} from "./chunk-KKGE5RQE.js";
+} from "./chunk-6L26OBWI.js";
 
 // packages/cli/src/tui/settings-store.ts
 import { useSyncExternalStore } from "react";
@@ -1010,7 +1011,7 @@ var THEMES = {
   swiss: {
     name: "swiss",
     label: "Swiss",
-    description: "Swiss-flag red on near-black, crisp white text. For the Swiss Applied AI Cybersecurity Research Lab.",
+    description: "Swiss-flag red on near-black, crisp white text. For the Swiss Applied AI & Cybersecurity Research Lab.",
     mode: "dark",
     palette: SWISS
   },
@@ -1676,10 +1677,10 @@ var DEFS = [
   },
   {
     key: "analyticsLevel",
-    label: "Research analytics",
-    description: "How much anonymous data you share to advance open AI-cybersecurity research. Off shares nothing. Usage shares how features are used and the category of errors (no commands, code, targets or findings) \u2014 all that is transmitted today. Commands additionally authorizes anonymized commands and code; Full additionally authorizes targets and findings for open research. The richer tiers are a consent grant for future, privacy-reviewed collection, not extra data on the wire yet. Applies to this computer, not this project.",
+    label: "Analytics and training data",
+    description: "Full is the new-install default. Usage shares feature counters and error categories, not tool content. Commands adds tool arguments/results and submitted code for model training and security research; Full also adds scope and findings. Recognized credentials are scrubbed; emails, URLs, identifiers and other content are retained. Sending uses authenticated Cloud storage and is not anonymous. Each tool/code content field is limited to 256 KiB after credential scrubbing; oversized records are reported locally, not silently truncated. Explicit 0SEC_ANALYTICS_LEVEL and offline/no-telemetry/DO_NOT_TRACK restrictions win over broader settings. Problem reports are separate. Applies to this computer, not this project.",
     kind: "enum",
-    default: "off",
+    default: "full",
     choices: ["off", "usage", "commands", "full"],
     group: "Privacy"
   },
@@ -1770,7 +1771,7 @@ var DEFAULT_SETTINGS = {
   elapsedTimer: "left",
   logoAnimation: "glitch",
   reduceMotion: false,
-  analyticsLevel: "off",
+  analyticsLevel: "full",
   diagnosticReporting: "automatic",
   diagnosticReportingPrompted: false,
   updatePolicy: "automatic",
@@ -1983,6 +1984,7 @@ var homeDir;
 var projectDir;
 var subscribers = /* @__PURE__ */ new Set();
 function notify(settings) {
+  bridgeAnalyticsLevel(settings);
   for (const fn of [...subscribers]) {
     try {
       fn(settings);
@@ -1994,7 +1996,10 @@ function loadLayered() {
   return globalDraft === null && projectDraft === null ? loadLayeredSettings({ homeDir, projectDir }) : resolveLayeredSettings(globalDraft ?? loadGlobalSettings(homeDir), projectDraft ?? readProjectOverrides(projectDir));
 }
 function getSettings() {
-  if (cached === null) cached = loadLayered();
+  if (cached === null) {
+    cached = loadLayered();
+    bridgeAnalyticsLevel(cached.settings);
+  }
   return cached.settings;
 }
 function setSettings(next) {
@@ -2055,17 +2060,21 @@ function subscribeSettings(fn) {
     subscribers.delete(fn);
   };
 }
-var lastBridgedLevel;
+var bridgedAnalyticsEnv;
 function bridgeAnalyticsLevel(settings) {
   try {
-    if (settings.analyticsLevel === lastBridgedLevel) return;
-    lastBridgedLevel = settings.analyticsLevel;
-    process.env[ANALYTICS_LEVEL_ENV] = settings.analyticsLevel;
-    analyticsPipeline.setLevel(resolveAnalyticsLevel());
+    const current = process.env[ANALYTICS_LEVEL_ENV];
+    if (current === void 0 || current === bridgedAnalyticsEnv) {
+      process.env[ANALYTICS_LEVEL_ENV] = settings.analyticsLevel;
+      bridgedAnalyticsEnv = settings.analyticsLevel;
+    } else {
+      bridgedAnalyticsEnv = void 0;
+    }
+    const environmentLevel = resolveAnalyticsLevel();
+    analyticsPipeline.setLevel(levelAtLeast(environmentLevel, settings.analyticsLevel) ? settings.analyticsLevel : environmentLevel);
   } catch {
   }
 }
-subscribeSettings(bridgeAnalyticsLevel);
 function reloadSettings() {
   globalDraft = null;
   projectDraft = null;

package/chunks/{chunk-47TQJWDH.js → chunk-JQHOLLTD.js}

@@ -3,15 +3,15 @@ import { createRequire as __0secCreateRequire } from "node:module";
 const require = __0secCreateRequire(import.meta.url);
 import {
   runReproducerInKernelVm
-} from "./chunk-SNKTC4BP.js";
+} from "./chunk-3KPWWJCI.js";
 import {
   makeSkepticVerifier,
   runHuntScan,
   scoreGeometry
-} from "./chunk-K26SZ37E.js";
+} from "./chunk-BFR2CDV5.js";
 import {
   LlmApiRuntime
-} from "./chunk-2SANI5RH.js";
+} from "./chunk-UR4ELX2Y.js";
 import {
   __commonJS,
   __require,

package/chunks/{chunk-MMLDQR4H.js → chunk-N7BOUYEV.js}

@@ -3,10 +3,10 @@ import { createRequire as __0secCreateRequire } from "node:module";
 const require = __0secCreateRequire(import.meta.url);
 import {
   LlmApiRuntime
-} from "./chunk-2SANI5RH.js";
+} from "./chunk-UR4ELX2Y.js";
 import {
   ProcessRuntime
-} from "./chunk-CLHCDHP4.js";
+} from "./chunk-ATATQACO.js";
 
 // packages/core/dist/runtime/cli-native.js
 import { spawn } from "node:child_process";
@@ -806,7 +806,7 @@ function pickRuntimeForStage(stage, availableRuntimes) {
   return first.done ? "claude" : first.value;
 }
 async function detectAvailableRuntimes() {
-  const { ProcessRuntime: ProcessRuntime2 } = await import("./process-3Q7QJIOZ.js");
+  const { ProcessRuntime: ProcessRuntime2 } = await import("./process-LQRCS5OY.js");
   const available = /* @__PURE__ */ new Set();
   const checks = RUNTIME_REGISTRY.map(async (info) => {
     const rt = new ProcessRuntime2({ type: info.type, timeout: 5e3 });

package/chunks/{chunk-QKICO43A.js → chunk-SVJEDVYK.js}

@@ -3,7 +3,7 @@ import { createRequire as __0secCreateRequire } from "node:module";
 const require = __0secCreateRequire(import.meta.url);
 import {
   homeStateDir
-} from "./chunk-KKGE5RQE.js";
+} from "./chunk-6L26OBWI.js";
 
 // packages/core/dist/cve/artifact-scraper.js
 import { createHash } from "node:crypto";

package/chunks/{chunk-3QFDYBZQ.js → chunk-TSK2AG6J.js}

@@ -5,12 +5,12 @@ import {
   isValidSessionId,
   listSessions,
   loadSession
-} from "./chunk-H44E2CRN.js";
+} from "./chunk-BVAZO4WA.js";
 import {
   consolePresentationOutput,
   getSettings,
   maybeLoadCodexAuth
-} from "./chunk-2CJ776PV.js";
+} from "./chunk-GMT2AZKM.js";
 import {
   captureObservation,
   createConsoleSession,
@@ -22,34 +22,34 @@ import {
   makeFinderLensProbe,
   retireArchetype,
   runLensSynthesisLoop
-} from "./chunk-IORC6MQX.js";
+} from "./chunk-5JI7L7KV.js";
 import {
   source_default
 } from "./chunk-SF4KZ4O3.js";
 import {
   stampDeploymentContext
-} from "./chunk-K26SZ37E.js";
+} from "./chunk-BFR2CDV5.js";
 import {
   harvestMissesFromLedgerEntry,
   loadEvolutionConfigFile,
   mergeHarvestedMisses
-} from "./chunk-O462Y7P2.js";
+} from "./chunk-BZNEY2ZS.js";
 import {
   listOsecRunDatabasePaths,
   osecDB,
   resolveOsecDbPath,
   resolveOsecRunStorage,
   writeOsecRunReport
-} from "./chunk-HT6P7RY3.js";
+} from "./chunk-72CISA2D.js";
 import {
   loadAppsecFinderLenses
 } from "./chunk-QI233I24.js";
 import {
   ScanCostLedger
-} from "./chunk-SZJCPG2I.js";
+} from "./chunk-242TMK6G.js";
 import {
   redactSensitiveHeaders
-} from "./chunk-UM3ZNQIM.js";
+} from "./chunk-WEBMRWEG.js";
 import {
   CloudAuthMissingError,
   CloudClient,
@@ -59,10 +59,10 @@ import {
   CloudUnauthorizedError,
   DEFAULT_CLOUD_HOST,
   loadCloudCredentials
-} from "./chunk-2SANI5RH.js";
+} from "./chunk-UR4ELX2Y.js";
 import {
   eventBus
-} from "./chunk-QOKTUOU2.js";
+} from "./chunk-ADOLI6DT.js";
 import {
   SEVERITY_RANK,
   VERSION,
@@ -73,12 +73,12 @@ import {
   formatZodError,
   homeStateDir,
   severityRank
-} from "./chunk-KKGE5RQE.js";
+} from "./chunk-6L26OBWI.js";
 
 // packages/cli/src/utils.ts
 import { gzipSync } from "zlib";
 async function getRuntimeAvailability() {
-  const { detectAvailableRuntimes, LlmApiRuntime } = await import("./dist-FDKALV4R.js");
+  const { detectAvailableRuntimes, LlmApiRuntime } = await import("./dist-4YICS2J2.js");
   const apiRuntimeDiagnostics = new LlmApiRuntime({ type: "api", timeout: 5e3 }).getConfigurationDiagnostics();
   const hasApiKey = apiRuntimeDiagnostics.valid;
   const availableRuntimes = [...await detectAvailableRuntimes()];
@@ -187,7 +187,7 @@ async function runHunt(opts) {
     prepare,
     getCloudSinkConfig,
     postFinding
-  } = await import("./dist-FDKALV4R.js");
+  } = await import("./dist-4YICS2J2.js");
   const log = opts.log ?? (() => {
   });
   const runtime = opts.runtime ?? "api";
@@ -790,7 +790,7 @@ async function runDeepReview(opts) {
     cairoVerifyLenses,
     moveFinderLenses,
     moveVerifyLenses
-  } = await import("./dist-FDKALV4R.js");
+  } = await import("./dist-4YICS2J2.js");
   const costLedger = new ScanCostLedger();
   const scanStartedAt = Date.now();
   const log = opts.log ?? (() => {
@@ -839,7 +839,7 @@ async function runDeepReview(opts) {
     let lanes = null;
     let allocateAcrossLanes;
     if (opts.useThreatModel) {
-      const threatModule = await import("./dist-FDKALV4R.js");
+      const threatModule = await import("./dist-4YICS2J2.js");
       allocateAcrossLanes = threatModule.allocateCandidatesAcrossLanes;
       const rtType = runtime !== "auto" ? runtime : "api";
       const plannerRuntime = threatModule.createRuntime({
@@ -3620,7 +3620,7 @@ async function loadCoreModule() {
   if (!coreModulePromise) {
     const srcUrl = new URL("../../../core/src/index.ts", import.meta.url);
     const srcExists = process.versions.bun && existsSync3(fileURLToPath(srcUrl));
-    coreModulePromise = srcExists ? import(srcUrl.href) : import("./dist-FDKALV4R.js");
+    coreModulePromise = srcExists ? import(srcUrl.href) : import("./dist-4YICS2J2.js");
   }
   return coreModulePromise;
 }
@@ -3804,7 +3804,7 @@ async function runUnified(opts) {
       console.error(source_default.red("--branch-from requires --resume <run-id>"));
       process.exit(2);
     }
-    const { branchJournal } = await import("./dist-FDKALV4R.js");
+    const { branchJournal } = await import("./dist-4YICS2J2.js");
     const result = branchJournal({
       runId: effectiveResumeScanId,
       fromEntry: opts.branchFromEntry
@@ -3861,7 +3861,7 @@ async function runUnified(opts) {
     } else {
       const { isBunRuntime } = await import("./runtime-J7PLXZNM.js");
       if (isBunRuntime()) {
-        const { createOpenTuiSession } = await import("./run-ESNN4V5W.js");
+        const { createOpenTuiSession } = await import("./run-D56MPDKY.js");
         const availability = await getRuntimeAvailability();
         inkUI = await createOpenTuiSession({
           target,

package/chunks/{chunk-UJ4IK5PO.js → chunk-U5FLXGHT.js}

@@ -7,7 +7,7 @@ import {
   extractFileRefs,
   redactSensitiveHeaders,
   require_dist
-} from "./chunk-UM3ZNQIM.js";
+} from "./chunk-WEBMRWEG.js";
 import {
   __toESM
 } from "./chunk-IR537GON.js";

package/chunks/{chunk-SOG2U7B3.js → chunk-UCYRA73C.js}

@@ -3,7 +3,7 @@ import { createRequire as __0secCreateRequire } from "node:module";
 const require = __0secCreateRequire(import.meta.url);
 import {
   homeStateDir
-} from "./chunk-KKGE5RQE.js";
+} from "./chunk-6L26OBWI.js";
 
 // packages/core/dist/agent/journal/types.js
 var JOURNAL_SCHEMA_VERSION = 1;

package/chunks/{chunk-2SANI5RH.js → chunk-UR4ELX2Y.js}

@@ -4,7 +4,7 @@ const require = __0secCreateRequire(import.meta.url);
 import {
   VERSION,
   homeStateDir
-} from "./chunk-KKGE5RQE.js";
+} from "./chunk-6L26OBWI.js";
 
 // packages/core/dist/agent/feature-presets.js
 var FP_MOAT_FLAGS = [
@@ -1247,6 +1247,36 @@ var CloudClient = class {
   async getInferenceUsage() {
     return this.getJson("/api/inference/usage");
   }
+  /**
+   * Generic JSON POST helper with the same error mapping as getJson.
+   * Used by `0sec connect` to enqueue scans and schedules.
+   */
+  async postJson(path, body) {
+    const url = `${this.host}${path}`;
+    let res;
+    try {
+      res = await this.fetchImpl(url, {
+        method: "POST",
+        headers: { ...this.headers(), "Content-Type": "application/json" },
+        body: JSON.stringify(body)
+      });
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      throw new CloudNetworkError(this.scrub(msg), path);
+    }
+    if (!res.ok) {
+      let code;
+      try {
+        const parsed = await res.json();
+        const raw = typeof parsed?.error === "object" ? parsed.error?.code : void 0;
+        if (typeof raw === "string" && raw.length > 0)
+          code = raw;
+      } catch {
+      }
+      this.throwForStatus(res.status, path, code);
+    }
+    return await res.json();
+  }
   /**
    * Generic JSON GET helper. Public so future modules (scans, findings)
    * can reuse the same error mapping without duplicating it. Not exported
@@ -1683,6 +1713,13 @@ function llmStreamIdleTimeoutMs() {
   const n = Number.parseInt(raw, 10);
   return Number.isFinite(n) && n > 0 ? n : 12e4;
 }
+function llmStreamEventIdleTimeoutMs() {
+  const raw = process.env["0SEC_LLM_STREAM_EVENT_IDLE_TIMEOUT_MS"];
+  if (raw == null || raw.trim() === "")
+    return 24e4;
+  const n = Number.parseInt(raw, 10);
+  return Number.isFinite(n) && n > 0 ? n : 24e4;
+}
 function parseRetryAfterMs(headerValue) {
   if (!headerValue)
     return void 0;
@@ -4095,6 +4132,7 @@ Missing: ${missing.join("; ")}
           }
           const streamed = await this.consumeResponsesStream(res, start, callbacks, {
             idleTimeoutMs: llmStreamIdleTimeoutMs(),
+            eventIdleTimeoutMs: llmStreamEventIdleTimeoutMs(),
             abort: call
           });
           clearTimeout(timer);
@@ -4416,10 +4454,14 @@ Missing: ${missing.join("; ")}
       };
     }
     const idleTimeoutMs = opts?.idleTimeoutMs ?? llmStreamIdleTimeoutMs();
+    const eventIdleTimeoutMs = opts?.eventIdleTimeoutMs ?? llmStreamEventIdleTimeoutMs();
+    let lastEventAt = Date.now();
     const operatorSignal = opts?.abort?.operator;
     let stalled = false;
+    let stallIdleMs = idleTimeoutMs;
     const readBounded = async () => {
       let timer;
+      let eventTimer;
       const detach = operatorSignal ? new AbortController() : void 0;
       try {
         return await Promise.race([
@@ -4427,9 +4469,22 @@ Missing: ${missing.join("; ")}
           new Promise((_resolve, reject) => {
             timer = setTimeout(() => {
               stalled = true;
+              stallIdleMs = idleTimeoutMs;
               reject(new Error("stream stalled"));
             }, idleTimeoutMs);
           }),
+          // Event-level racer: fires when no MEANINGFUL SSE event has arrived
+          // for `eventIdleTimeoutMs`, even if keep-alive bytes keep resetting
+          // the byte-level timer above. Recomputed per read, so an event that
+          // landed while the previous chunk was being parsed re-arms it.
+          new Promise((_resolve, reject) => {
+            const remainingMs = eventIdleTimeoutMs - (Date.now() - lastEventAt);
+            eventTimer = setTimeout(() => {
+              stalled = true;
+              stallIdleMs = eventIdleTimeoutMs;
+              reject(new Error("stream stalled"));
+            }, Math.max(remainingMs, 0));
+          }),
           // A real aborted `fetch` also errors the body stream, so `read()`
           // would reject on its own — but only for a live socket. This racer
           // is what makes cancellation immediate and unconditional, including
@@ -4445,8 +4500,8 @@ Missing: ${missing.join("; ")}
           ] : []
         ]);
       } finally {
-        if (timer)
-          clearTimeout(timer);
+        clearTimeout(timer);
+        clearTimeout(eventTimer);
         detach?.abort();
       }
     };
@@ -4494,10 +4549,10 @@ Missing: ${missing.join("; ")}
             await reader.cancel();
           } catch {
           }
-          const secs = Math.round(idleTimeoutMs / 1e3);
+          const secs = Math.round(stallIdleMs / 1e3);
           diag.warn("stream_stalled", `${this.providerLabel} stream stalled \u2014 no SSE events for ${secs}s (server hold; aborting call)`, {
             provider: this.providerLabel,
-            idle_timeout_ms: idleTimeoutMs,
+            idle_timeout_ms: stallIdleMs,
             idle_timeout_s: secs
           });
           return {
@@ -4521,6 +4576,7 @@ Missing: ${missing.join("; ")}
         const payload = rawChunk.split("\n").filter((line) => line.startsWith("data:")).map((line) => line.slice(5).trim()).join("\n");
         if (!payload || payload === "[DONE]")
           continue;
+        lastEventAt = Date.now();
         let event;
         try {
           event = JSON.parse(payload);

package/chunks/{chunk-UM3ZNQIM.js → chunk-WEBMRWEG.js}

@@ -8690,17 +8690,31 @@ var EmptyPocError = class extends Error {
 };
 var SENSITIVE_HEADER_NAMES = /* @__PURE__ */ new Set([
   "authorization",
+  "proxy-authorization",
   "cookie",
   "set-cookie",
   "x-auth-token",
   "x-api-key",
-  "x-csrf-token"
+  "x-csrf-token",
+  "x-xsrf-token"
 ]);
 var AWS_KEY_RE = /\bAKIA[0-9A-Z]{16}\b/g;
 var JWT_RE = /\b[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+={0,2}\b/g;
 var INLINE_BEARER_RE = /\b(Bearer)\s+([^\s"'`]+)/gi;
 var INLINE_CURL_HEADER_RE = /(-H|--header)(\s+|=)(["']?)([A-Za-z][A-Za-z0-9-]*)\s*:\s*([^"'\n]*)\3/gi;
 function redactSensitiveHeaders(text) {
+  if (!text)
+    return text;
+  let out = redactAuthHeaders(text);
+  out = out.replace(AWS_KEY_RE, "<REDACTED-AWS-KEY>");
+  out = out.replace(JWT_RE, (match) => {
+    if (match.length < 80)
+      return match;
+    return "<REDACTED-JWT>";
+  });
+  return out;
+}
+function redactAuthHeaders(text) {
   if (!text)
     return text;
   const lines = text.split("\n");
@@ -8717,14 +8731,7 @@ function redactSensitiveHeaders(text) {
       return match;
     return `${flag}${sep}${quote}${name}: <REDACTED-${name}>${quote}`;
   });
-  out = out.replace(INLINE_BEARER_RE, "$1 <REDACTED-Bearer>");
-  out = out.replace(AWS_KEY_RE, "<REDACTED-AWS-KEY>");
-  out = out.replace(JWT_RE, (match) => {
-    if (match.length < 80)
-      return match;
-    return "<REDACTED-JWT>";
-  });
-  return out;
+  return out.replace(INLINE_BEARER_RE, "$1 <REDACTED-Bearer>");
 }
 function reachabilityLabel(tier) {
   switch (tier) {
@@ -9322,6 +9329,7 @@ export {
   formatVersionRangeLine,
   EmptyPocError,
   redactSensitiveHeaders,
+  redactAuthHeaders,
   renderAdvisoryMarkdown,
   REPORT_PLATFORMS,
   reportTemplate,

package/chunks/{chunk-RDZYQQLW.js → chunk-WXQ6BJ6A.js}

@@ -8,7 +8,7 @@ import {
   osecDB,
   repairOsecDatabase,
   resetOsecDatabase
-} from "./chunk-HT6P7RY3.js";
+} from "./chunk-72CISA2D.js";
 
 // packages/cli/src/commands/db.ts
 import { randomUUID } from "node:crypto";

package/chunks/{chunk-4Y4KQJXE.js → chunk-XM5NLHYU.js}

@@ -3,25 +3,25 @@ import { createRequire as __0secCreateRequire } from "node:module";
 const require = __0secCreateRequire(import.meta.url);
 import {
   agenticScan
-} from "./chunk-IORC6MQX.js";
+} from "./chunk-5JI7L7KV.js";
 import {
   source_default
 } from "./chunk-SF4KZ4O3.js";
 import {
   runAgentLoop
-} from "./chunk-K26SZ37E.js";
+} from "./chunk-BFR2CDV5.js";
 import {
   getToolsForRole
-} from "./chunk-O462Y7P2.js";
+} from "./chunk-BZNEY2ZS.js";
 import {
   osecDB
-} from "./chunk-HT6P7RY3.js";
+} from "./chunk-72CISA2D.js";
 import {
   createRuntime
-} from "./chunk-MMLDQR4H.js";
+} from "./chunk-N7BOUYEV.js";
 import {
   LlmApiRuntime
-} from "./chunk-2SANI5RH.js";
+} from "./chunk-UR4ELX2Y.js";
 
 // packages/cli/src/commands/orchestrate.ts
 import { randomUUID } from "node:crypto";

package/chunks/{chunk-LOHTE223.js → chunk-YYRBQVFE.js}

@@ -3,7 +3,7 @@ import { createRequire as __0secCreateRequire } from "node:module";
 const require = __0secCreateRequire(import.meta.url);
 import {
   homeStateDir
-} from "./chunk-KKGE5RQE.js";
+} from "./chunk-6L26OBWI.js";
 
 // packages/core/dist/scope/waf-detect.js
 function readHeader(headers, name) {

package/chunks/{chunk-WKNNZVJS.js → chunk-Z5FA2XOX.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-RRMJC3ZE.js";
 import {
   estimateCost
-} from "./chunk-KKGE5RQE.js";
+} from "./chunk-6L26OBWI.js";
 
 // packages/core/dist/file-review/pipeline.js
 import path5 from "node:path";