0sec-cli 0.17.0 → 0.21.4

package/chunks/chunk-TRH2PJSN.js

@@ -0,0 +1,547 @@
+#!/usr/bin/env node
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
+import {
+  __commonJS,
+  __require
+} from "./chunk-VCSFCHAJ.js";
+
+// node_modules/.pnpm/@vercel+oidc@3.2.0/node_modules/@vercel/oidc/dist/token-error.js
+var require_token_error = __commonJS({
+  "node_modules/.pnpm/@vercel+oidc@3.2.0/node_modules/@vercel/oidc/dist/token-error.js"(exports, module) {
+    "use strict";
+    var __defProp = Object.defineProperty;
+    var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+    var __getOwnPropNames = Object.getOwnPropertyNames;
+    var __hasOwnProp = Object.prototype.hasOwnProperty;
+    var __export = (target, all) => {
+      for (var name in all)
+        __defProp(target, name, { get: all[name], enumerable: true });
+    };
+    var __copyProps = (to, from, except, desc) => {
+      if (from && typeof from === "object" || typeof from === "function") {
+        for (let key of __getOwnPropNames(from))
+          if (!__hasOwnProp.call(to, key) && key !== except)
+            __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+      }
+      return to;
+    };
+    var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+    var token_error_exports = {};
+    __export(token_error_exports, {
+      VercelOidcTokenError: () => VercelOidcTokenError
+    });
+    module.exports = __toCommonJS(token_error_exports);
+    var VercelOidcTokenError = class extends Error {
+      constructor(message, cause) {
+        super(message);
+        this.name = "VercelOidcTokenError";
+        this.cause = cause;
+      }
+      toString() {
+        if (this.cause) {
+          return `${this.name}: ${this.message}: ${this.cause}`;
+        }
+        return `${this.name}: ${this.message}`;
+      }
+    };
+  }
+});
+
+// node_modules/.pnpm/@vercel+oidc@3.2.0/node_modules/@vercel/oidc/dist/token-io.js
+var require_token_io = __commonJS({
+  "node_modules/.pnpm/@vercel+oidc@3.2.0/node_modules/@vercel/oidc/dist/token-io.js"(exports, module) {
+    "use strict";
+    var __create = Object.create;
+    var __defProp = Object.defineProperty;
+    var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+    var __getOwnPropNames = Object.getOwnPropertyNames;
+    var __getProtoOf = Object.getPrototypeOf;
+    var __hasOwnProp = Object.prototype.hasOwnProperty;
+    var __export = (target, all) => {
+      for (var name in all)
+        __defProp(target, name, { get: all[name], enumerable: true });
+    };
+    var __copyProps = (to, from, except, desc) => {
+      if (from && typeof from === "object" || typeof from === "function") {
+        for (let key of __getOwnPropNames(from))
+          if (!__hasOwnProp.call(to, key) && key !== except)
+            __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+      }
+      return to;
+    };
+    var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+      // If the importer is in node compatibility mode or this is not an ESM
+      // file that has been converted to a CommonJS file using a Babel-
+      // compatible transform (i.e. "__esModule" has not been set), then set
+      // "default" to the CommonJS "module.exports" for node compatibility.
+      isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+      mod
+    ));
+    var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+    var token_io_exports = {};
+    __export(token_io_exports, {
+      findRootDir: () => findRootDir,
+      getUserDataDir: () => getUserDataDir
+    });
+    module.exports = __toCommonJS(token_io_exports);
+    var import_path = __toESM(__require("path"));
+    var import_fs = __toESM(__require("fs"));
+    var import_os = __toESM(__require("os"));
+    var import_token_error = require_token_error();
+    function findRootDir() {
+      try {
+        let dir = process.cwd();
+        while (dir !== import_path.default.dirname(dir)) {
+          const pkgPath = import_path.default.join(dir, ".vercel");
+          if (import_fs.default.existsSync(pkgPath)) {
+            return dir;
+          }
+          dir = import_path.default.dirname(dir);
+        }
+      } catch (e) {
+        throw new import_token_error.VercelOidcTokenError(
+          "Token refresh only supported in node server environments"
+        );
+      }
+      return null;
+    }
+    function getUserDataDir() {
+      if (process.env.XDG_DATA_HOME) {
+        return process.env.XDG_DATA_HOME;
+      }
+      switch (import_os.default.platform()) {
+        case "darwin":
+          return import_path.default.join(import_os.default.homedir(), "Library/Application Support");
+        case "linux":
+          return import_path.default.join(import_os.default.homedir(), ".local/share");
+        case "win32":
+          if (process.env.LOCALAPPDATA) {
+            return process.env.LOCALAPPDATA;
+          }
+          return null;
+        default:
+          return null;
+      }
+    }
+  }
+});
+
+// node_modules/.pnpm/@vercel+oidc@3.2.0/node_modules/@vercel/oidc/dist/auth-config.js
+var require_auth_config = __commonJS({
+  "node_modules/.pnpm/@vercel+oidc@3.2.0/node_modules/@vercel/oidc/dist/auth-config.js"(exports, module) {
+    "use strict";
+    var __create = Object.create;
+    var __defProp = Object.defineProperty;
+    var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+    var __getOwnPropNames = Object.getOwnPropertyNames;
+    var __getProtoOf = Object.getPrototypeOf;
+    var __hasOwnProp = Object.prototype.hasOwnProperty;
+    var __export = (target, all) => {
+      for (var name in all)
+        __defProp(target, name, { get: all[name], enumerable: true });
+    };
+    var __copyProps = (to, from, except, desc) => {
+      if (from && typeof from === "object" || typeof from === "function") {
+        for (let key of __getOwnPropNames(from))
+          if (!__hasOwnProp.call(to, key) && key !== except)
+            __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+      }
+      return to;
+    };
+    var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+      // If the importer is in node compatibility mode or this is not an ESM
+      // file that has been converted to a CommonJS file using a Babel-
+      // compatible transform (i.e. "__esModule" has not been set), then set
+      // "default" to the CommonJS "module.exports" for node compatibility.
+      isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+      mod
+    ));
+    var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+    var auth_config_exports = {};
+    __export(auth_config_exports, {
+      isValidAccessToken: () => isValidAccessToken,
+      readAuthConfig: () => readAuthConfig,
+      writeAuthConfig: () => writeAuthConfig
+    });
+    module.exports = __toCommonJS(auth_config_exports);
+    var fs = __toESM(__require("fs"));
+    var path = __toESM(__require("path"));
+    var import_token_util = require_token_util();
+    function getAuthConfigPath() {
+      const dataDir = (0, import_token_util.getVercelDataDir)();
+      if (!dataDir) {
+        throw new Error(
+          `Unable to find Vercel CLI data directory. Your platform: ${process.platform}. Supported: darwin, linux, win32.`
+        );
+      }
+      return path.join(dataDir, "auth.json");
+    }
+    function readAuthConfig() {
+      try {
+        const authPath = getAuthConfigPath();
+        if (!fs.existsSync(authPath)) {
+          return null;
+        }
+        const content = fs.readFileSync(authPath, "utf8");
+        if (!content) {
+          return null;
+        }
+        return JSON.parse(content);
+      } catch (error) {
+        return null;
+      }
+    }
+    function writeAuthConfig(config) {
+      const authPath = getAuthConfigPath();
+      const authDir = path.dirname(authPath);
+      if (!fs.existsSync(authDir)) {
+        fs.mkdirSync(authDir, { mode: 504, recursive: true });
+      }
+      fs.writeFileSync(authPath, JSON.stringify(config, null, 2), { mode: 384 });
+    }
+    function isValidAccessToken(authConfig, expirationBufferMs = 0) {
+      if (!authConfig.token)
+        return false;
+      if (typeof authConfig.expiresAt !== "number")
+        return true;
+      const nowInSeconds = Math.floor(Date.now() / 1e3);
+      const bufferInSeconds = expirationBufferMs / 1e3;
+      return authConfig.expiresAt >= nowInSeconds + bufferInSeconds;
+    }
+  }
+});
+
+// node_modules/.pnpm/@vercel+oidc@3.2.0/node_modules/@vercel/oidc/dist/oauth.js
+var require_oauth = __commonJS({
+  "node_modules/.pnpm/@vercel+oidc@3.2.0/node_modules/@vercel/oidc/dist/oauth.js"(exports, module) {
+    "use strict";
+    var __defProp = Object.defineProperty;
+    var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+    var __getOwnPropNames = Object.getOwnPropertyNames;
+    var __hasOwnProp = Object.prototype.hasOwnProperty;
+    var __export = (target, all) => {
+      for (var name in all)
+        __defProp(target, name, { get: all[name], enumerable: true });
+    };
+    var __copyProps = (to, from, except, desc) => {
+      if (from && typeof from === "object" || typeof from === "function") {
+        for (let key of __getOwnPropNames(from))
+          if (!__hasOwnProp.call(to, key) && key !== except)
+            __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+      }
+      return to;
+    };
+    var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+    var oauth_exports = {};
+    __export(oauth_exports, {
+      processTokenResponse: () => processTokenResponse,
+      refreshTokenRequest: () => refreshTokenRequest
+    });
+    module.exports = __toCommonJS(oauth_exports);
+    var import_os = __require("os");
+    var VERCEL_ISSUER = "https://vercel.com";
+    var VERCEL_CLI_CLIENT_ID = "cl_HYyOPBNtFMfHhaUn9L4QPfTZz6TP47bp";
+    var userAgent = `@vercel/oidc node-${process.version} ${(0, import_os.platform)()} (${(0, import_os.arch)()}) ${(0, import_os.hostname)()}`;
+    var _tokenEndpoint = null;
+    async function getTokenEndpoint() {
+      if (_tokenEndpoint) {
+        return _tokenEndpoint;
+      }
+      const discoveryUrl = `${VERCEL_ISSUER}/.well-known/openid-configuration`;
+      const response = await fetch(discoveryUrl, {
+        headers: { "user-agent": userAgent }
+      });
+      if (!response.ok) {
+        throw new Error("Failed to discover OAuth endpoints");
+      }
+      const metadata = await response.json();
+      if (!metadata || typeof metadata.token_endpoint !== "string") {
+        throw new Error("Invalid OAuth discovery response");
+      }
+      const endpoint = metadata.token_endpoint;
+      _tokenEndpoint = endpoint;
+      return endpoint;
+    }
+    async function refreshTokenRequest(options) {
+      const tokenEndpoint = await getTokenEndpoint();
+      return await fetch(tokenEndpoint, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/x-www-form-urlencoded",
+          "user-agent": userAgent
+        },
+        body: new URLSearchParams({
+          client_id: VERCEL_CLI_CLIENT_ID,
+          grant_type: "refresh_token",
+          ...options
+        })
+      });
+    }
+    async function processTokenResponse(response) {
+      const json = await response.json();
+      if (!response.ok) {
+        const errorMsg = typeof json === "object" && json && "error" in json ? String(json.error) : "Token refresh failed";
+        return [new Error(errorMsg)];
+      }
+      if (typeof json !== "object" || json === null) {
+        return [new Error("Invalid token response")];
+      }
+      if (typeof json.access_token !== "string") {
+        return [new Error("Missing access_token in response")];
+      }
+      if (json.token_type !== "Bearer") {
+        return [new Error("Invalid token_type in response")];
+      }
+      if (typeof json.expires_in !== "number") {
+        return [new Error("Missing expires_in in response")];
+      }
+      return [null, json];
+    }
+  }
+});
+
+// node_modules/.pnpm/@vercel+oidc@3.2.0/node_modules/@vercel/oidc/dist/auth-errors.js
+var require_auth_errors = __commonJS({
+  "node_modules/.pnpm/@vercel+oidc@3.2.0/node_modules/@vercel/oidc/dist/auth-errors.js"(exports, module) {
+    "use strict";
+    var __defProp = Object.defineProperty;
+    var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+    var __getOwnPropNames = Object.getOwnPropertyNames;
+    var __hasOwnProp = Object.prototype.hasOwnProperty;
+    var __export = (target, all) => {
+      for (var name in all)
+        __defProp(target, name, { get: all[name], enumerable: true });
+    };
+    var __copyProps = (to, from, except, desc) => {
+      if (from && typeof from === "object" || typeof from === "function") {
+        for (let key of __getOwnPropNames(from))
+          if (!__hasOwnProp.call(to, key) && key !== except)
+            __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+      }
+      return to;
+    };
+    var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+    var auth_errors_exports = {};
+    __export(auth_errors_exports, {
+      AccessTokenMissingError: () => AccessTokenMissingError,
+      RefreshAccessTokenFailedError: () => RefreshAccessTokenFailedError
+    });
+    module.exports = __toCommonJS(auth_errors_exports);
+    var AccessTokenMissingError = class extends Error {
+      constructor() {
+        super(
+          "No authentication found. Please log in with the Vercel CLI (vercel login)."
+        );
+        this.name = "AccessTokenMissingError";
+      }
+    };
+    var RefreshAccessTokenFailedError = class extends Error {
+      constructor(cause) {
+        super("Failed to refresh authentication token.", { cause });
+        this.name = "RefreshAccessTokenFailedError";
+      }
+    };
+  }
+});
+
+// node_modules/.pnpm/@vercel+oidc@3.2.0/node_modules/@vercel/oidc/dist/token-util.js
+var require_token_util = __commonJS({
+  "node_modules/.pnpm/@vercel+oidc@3.2.0/node_modules/@vercel/oidc/dist/token-util.js"(exports, module) {
+    var __create = Object.create;
+    var __defProp = Object.defineProperty;
+    var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+    var __getOwnPropNames = Object.getOwnPropertyNames;
+    var __getProtoOf = Object.getPrototypeOf;
+    var __hasOwnProp = Object.prototype.hasOwnProperty;
+    var __export = (target, all) => {
+      for (var name in all)
+        __defProp(target, name, { get: all[name], enumerable: true });
+    };
+    var __copyProps = (to, from, except, desc) => {
+      if (from && typeof from === "object" || typeof from === "function") {
+        for (let key of __getOwnPropNames(from))
+          if (!__hasOwnProp.call(to, key) && key !== except)
+            __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+      }
+      return to;
+    };
+    var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+      // If the importer is in node compatibility mode or this is not an ESM
+      // file that has been converted to a CommonJS file using a Babel-
+      // compatible transform (i.e. "__esModule" has not been set), then set
+      // "default" to the CommonJS "module.exports" for node compatibility.
+      isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+      mod
+    ));
+    var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+    var token_util_exports = {};
+    __export(token_util_exports, {
+      assertVercelOidcTokenResponse: () => assertVercelOidcTokenResponse,
+      findProjectInfo: () => findProjectInfo,
+      getTokenPayload: () => getTokenPayload,
+      getVercelDataDir: () => getVercelDataDir,
+      getVercelOidcToken: () => getVercelOidcToken,
+      getVercelToken: () => getVercelToken,
+      isExpired: () => isExpired,
+      loadToken: () => loadToken,
+      saveToken: () => saveToken
+    });
+    module.exports = __toCommonJS(token_util_exports);
+    var path = __toESM(__require("path"));
+    var fs = __toESM(__require("fs"));
+    var import_token_error = require_token_error();
+    var import_token_io = require_token_io();
+    var import_auth_config = require_auth_config();
+    var import_oauth = require_oauth();
+    var import_auth_errors = require_auth_errors();
+    function getVercelDataDir() {
+      const vercelFolder = "com.vercel.cli";
+      const dataDir = (0, import_token_io.getUserDataDir)();
+      if (!dataDir) {
+        return null;
+      }
+      return path.join(dataDir, vercelFolder);
+    }
+    async function getVercelToken(options) {
+      const authConfig = (0, import_auth_config.readAuthConfig)();
+      if (!authConfig?.token) {
+        throw new import_auth_errors.AccessTokenMissingError();
+      }
+      if ((0, import_auth_config.isValidAccessToken)(authConfig, options?.expirationBufferMs)) {
+        return authConfig.token;
+      }
+      if (!authConfig.refreshToken) {
+        (0, import_auth_config.writeAuthConfig)({});
+        throw new import_auth_errors.RefreshAccessTokenFailedError("No refresh token available");
+      }
+      try {
+        const tokenResponse = await (0, import_oauth.refreshTokenRequest)({
+          refresh_token: authConfig.refreshToken
+        });
+        const [tokensError, tokens] = await (0, import_oauth.processTokenResponse)(tokenResponse);
+        if (tokensError || !tokens) {
+          (0, import_auth_config.writeAuthConfig)({});
+          throw new import_auth_errors.RefreshAccessTokenFailedError(tokensError);
+        }
+        const updatedConfig = {
+          token: tokens.access_token,
+          expiresAt: Math.floor(Date.now() / 1e3) + tokens.expires_in
+        };
+        if (tokens.refresh_token) {
+          updatedConfig.refreshToken = tokens.refresh_token;
+        }
+        (0, import_auth_config.writeAuthConfig)(updatedConfig);
+        return updatedConfig.token;
+      } catch (error) {
+        (0, import_auth_config.writeAuthConfig)({});
+        if (error instanceof import_auth_errors.AccessTokenMissingError || error instanceof import_auth_errors.RefreshAccessTokenFailedError) {
+          throw error;
+        }
+        throw new import_auth_errors.RefreshAccessTokenFailedError(error);
+      }
+    }
+    async function getVercelOidcToken(authToken, projectId, teamId) {
+      const url = `https://api.vercel.com/v1/projects/${projectId}/token?source=vercel-oidc-refresh${teamId ? `&teamId=${teamId}` : ""}`;
+      const res = await fetch(url, {
+        method: "POST",
+        headers: {
+          Authorization: `Bearer ${authToken}`
+        }
+      });
+      if (!res.ok) {
+        throw new import_token_error.VercelOidcTokenError(
+          `Failed to refresh OIDC token: ${res.statusText}`
+        );
+      }
+      const tokenRes = await res.json();
+      assertVercelOidcTokenResponse(tokenRes);
+      return tokenRes;
+    }
+    function assertVercelOidcTokenResponse(res) {
+      if (!res || typeof res !== "object") {
+        throw new TypeError(
+          "Vercel OIDC token is malformed. Expected an object. Please run `vc env pull` and try again"
+        );
+      }
+      if (!("token" in res) || typeof res.token !== "string") {
+        throw new TypeError(
+          "Vercel OIDC token is malformed. Expected a string-valued token property. Please run `vc env pull` and try again"
+        );
+      }
+    }
+    function findProjectInfo() {
+      const dir = (0, import_token_io.findRootDir)();
+      if (!dir) {
+        throw new import_token_error.VercelOidcTokenError(
+          "Unable to find project root directory. Have you linked your project with `vc link?`"
+        );
+      }
+      const prjPath = path.join(dir, ".vercel", "project.json");
+      if (!fs.existsSync(prjPath)) {
+        throw new import_token_error.VercelOidcTokenError(
+          "project.json not found, have you linked your project with `vc link?`"
+        );
+      }
+      const prj = JSON.parse(fs.readFileSync(prjPath, "utf8"));
+      if (typeof prj.projectId !== "string" && typeof prj.orgId !== "string") {
+        throw new TypeError(
+          "Expected a string-valued projectId property. Try running `vc link` to re-link your project."
+        );
+      }
+      return { projectId: prj.projectId, teamId: prj.orgId };
+    }
+    function saveToken(token, projectId) {
+      const dir = (0, import_token_io.getUserDataDir)();
+      if (!dir) {
+        throw new import_token_error.VercelOidcTokenError(
+          "Unable to find user data directory. Please reach out to Vercel support."
+        );
+      }
+      const tokenPath = path.join(dir, "com.vercel.token", `${projectId}.json`);
+      const tokenJson = JSON.stringify(token);
+      fs.mkdirSync(path.dirname(tokenPath), { mode: 504, recursive: true });
+      fs.writeFileSync(tokenPath, tokenJson);
+      fs.chmodSync(tokenPath, 432);
+      return;
+    }
+    function loadToken(projectId) {
+      const dir = (0, import_token_io.getUserDataDir)();
+      if (!dir) {
+        throw new import_token_error.VercelOidcTokenError(
+          "Unable to find user data directory. Please reach out to Vercel support."
+        );
+      }
+      const tokenPath = path.join(dir, "com.vercel.token", `${projectId}.json`);
+      if (!fs.existsSync(tokenPath)) {
+        return null;
+      }
+      const token = JSON.parse(fs.readFileSync(tokenPath, "utf8"));
+      assertVercelOidcTokenResponse(token);
+      return token;
+    }
+    function getTokenPayload(token) {
+      const tokenParts = token.split(".");
+      if (tokenParts.length !== 3) {
+        throw new import_token_error.VercelOidcTokenError(
+          "Invalid token. Please run `vc env pull` and try again"
+        );
+      }
+      const base64 = tokenParts[1].replace(/-/g, "+").replace(/_/g, "/");
+      const padded = base64.padEnd(
+        base64.length + (4 - base64.length % 4) % 4,
+        "="
+      );
+      return JSON.parse(Buffer.from(padded, "base64").toString("utf8"));
+    }
+    function isExpired(token, bufferMs = 0) {
+      return token.exp * 1e3 < Date.now() + bufferMs;
+    }
+  }
+});
+
+export {
+  require_token_error,
+  require_auth_errors,
+  require_token_util
+};

package/chunks/{chunk-RJWOYEOG.js → chunk-UEX7PFSE.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { createRequire as __0secCreateRequire } from "node:module";
-const require = __0secCreateRequire(import.meta.url);
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
 
 // packages/core/dist/kernel/exploit/recipes.js
 var RECIPE_LIBRARY = [
@@ -160,12 +160,12 @@ var RECIPE_LIBRARY = [
       "hardened / KASLR-ON root needs a companion kernel-TEXT infoleak: the physmap leak (MODE_LEAK) recovers page_offset_base (defeats RANDOMIZE_MEMORY) but NOT .text, so commit_creds's slid address is still unknown without a paired text leak",
       "needs the spray to share a cache with the victim (MEMCG off, or an accounted spray for a -cg- victim) \u2014 verify the bucket match"
     ],
-    citation: "0sec hid-sony ghl_poke_timer UAF \u2192 LPE (fake-cred one-shot, 9/9 root); DirtyCred-family credential forge without arbitrary R/W"
+    citation: "0 hid-sony ghl_poke_timer UAF \u2192 LPE (fake-cred one-shot, 9/9 root); DirtyCred-family credential forge without arbitrary R/W"
   },
   {
     id: "workqueueBounceRoot",
     title: "timer-UAF \u2192 forge-pwq \u2192 kworker process-context bounce \u2192 WWW \u2192 modprobe_path",
-    // The GuitarZero full clean chain (0sec#1215): the poison-tolerant, no-arb-
+    // The GuitarZero full clean chain (0#1215): the poison-tolerant, no-arb-
     // read sibling of fakeCredOneShot. Where the one-shot fires commit_creds in a
     // softirq (fatal-fault on any miss), this bounces into PROCESS context via a
     // real kworker, so a survivable WWW gadget can overwrite modprobe_path and a
@@ -193,7 +193,7 @@ var RECIPE_LIBRARY = [
       "EntryBleed (CVE-2022-4543) supplies the text base bare-metal; it is marginal on a virtualized-TSC (KVM) box (rdtscp buries the prefetch delta) \u2014 supply the base via a companion leak there",
       "one probabilistic reoccupy race per boot (~2/3; ~96% within 3 boots); a miss bakes clockevents_handle_noop (endbr64;ret) so the box stays ALIVE for retry"
     ],
-    citation: "0sec hid-sony ghl_poke_timer UAF \u2192 clean unprivileged LPE (/root/ghl-clean/ghl_lpe_clean.c, uid=0 5/7 boots; /root/ghl-full FULL-ROOT); EntryBleed CVE-2022-4543"
+    citation: "0 hid-sony ghl_poke_timer UAF \u2192 clean unprivileged LPE (/root/ghl-clean/ghl_lpe_clean.c, uid=0 5/7 boots; /root/ghl-full FULL-ROOT); EntryBleed CVE-2022-4543"
   },
   {
     id: "fileOpsVtableConfusion",

package/chunks/{chunk-VQG4FT5D.js → chunk-UFHN6RIU.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { createRequire as __0secCreateRequire } from "node:module";
-const require = __0secCreateRequire(import.meta.url);
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
 
 // packages/core/dist/adgraph/paths.js
 var AD_EDGE_TECHNIQUES = {

package/chunks/{chunk-WU6AFRAZ.js → chunk-V36HVTUL.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
-import { createRequire as __0secCreateRequire } from "node:module";
-const require = __0secCreateRequire(import.meta.url);
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
 import {
   bufferToString
-} from "./chunk-DW5UWPFY.js";
+} from "./chunk-4VGLO2YS.js";
 
 // packages/core/dist/prepare.js
 import { execFileSync as execFileSync2 } from "node:child_process";
@@ -326,7 +326,7 @@ function restoreNpmFixtureOrThrow(packageName, tempDir, msg, emit) {
   throw new Error(msg);
 }
 function installNpmPackage(packageName, requestedVersion, emit) {
-  const tempDir = join2(tmpdir(), `0sec-audit-${randomUUID().slice(0, 8)}`);
+  const tempDir = join2(tmpdir(), `0-audit-${randomUUID().slice(0, 8)}`);
   mkdirSync2(tempDir, { recursive: true });
   const spec = requestedVersion ? `${packageName}@${requestedVersion}` : `${packageName}@latest`;
   emit({ type: "stage:start", stage: "discovery", message: `Installing ${spec}...` });
@@ -493,7 +493,7 @@ if not choices:
 choice = choices[0]
 filename = choice.get("filename") or pathlib.PurePosixPath(urllib.parse.urlparse(choice["url"]).path).name
 archive_path = download_dir / filename
-request = urllib.request.Request(choice["url"], headers={"User-Agent": "0sec-ci/0.1 (+https://github.com/0sec-labs/0sec)"})
+request = urllib.request.Request(choice["url"], headers={"User-Agent": "0-ci/0.1 (+https://github.com/0sec-labs/0)"})
 with urllib.request.urlopen(request, timeout=120) as response, archive_path.open("wb") as handle:
     handle.write(response.read())
 
@@ -507,7 +507,7 @@ print(json.dumps({"archivePath": str(archive_path), "resolvedVersion": metadata.
   return JSON.parse(rawOutput);
 }
 function installPypiPackage(packageName, requestedVersion, emit) {
-  const tempDir = join2(tmpdir(), `0sec-audit-${randomUUID().slice(0, 8)}`);
+  const tempDir = join2(tmpdir(), `0-audit-${randomUUID().slice(0, 8)}`);
   const downloadDir = join2(tempDir, "downloads");
   const extractDir = join2(tempDir, "src");
   mkdirSync2(downloadDir, { recursive: true });
@@ -569,7 +569,7 @@ function resolveCargoVersion(packageName, requestedVersion) {
   return parsed.crate?.max_stable_version ?? parsed.crate?.max_version ?? parsed.crate?.newest_version ?? "latest";
 }
 function installCargoPackage(packageName, requestedVersion, emit) {
-  const tempDir = join2(tmpdir(), `0sec-audit-${randomUUID().slice(0, 8)}`);
+  const tempDir = join2(tmpdir(), `0-audit-${randomUUID().slice(0, 8)}`);
   const downloadDir = join2(tempDir, "downloads");
   const extractDir = join2(tempDir, "src");
   mkdirSync2(downloadDir, { recursive: true });
@@ -602,7 +602,7 @@ function installCargoPackage(packageName, requestedVersion, emit) {
     resolvedVersion = match?.[1] ?? version;
   }
   writeFileSync2(join2(tempDir, "Cargo.toml"), `[package]
-name = "0sec-cargo-audit"
+name = "0-cargo-audit"
 version = "0.1.0"
 edition = "2021"
 
@@ -639,7 +639,7 @@ function buildCratesIoCurlArgs(url) {
     "--connect-timeout",
     "20",
     "-H",
-    "User-Agent: 0sec-ci/0.1 (+https://github.com/0sec-labs/0sec)",
+    "User-Agent: 0-ci/0.1 (+https://github.com/0sec-labs/0)",
     url
   ];
 }
@@ -736,7 +736,7 @@ for layer in layers:
   });
 }
 function installOciImage(rawImageRef, requestedVersion, emit) {
-  const tempDir = join2(tmpdir(), `0sec-audit-${randomUUID().slice(0, 8)}`);
+  const tempDir = join2(tmpdir(), `0-audit-${randomUUID().slice(0, 8)}`);
   const rootfsDir = join2(tempDir, "rootfs");
   const exportTar = join2(tempDir, "image.tar");
   mkdirSync2(rootfsDir, { recursive: true });
@@ -926,7 +926,7 @@ async function probePublicNpmRegistry(packageName, opts = {}) {
   const timer = setTimeout(() => controller.abort(), opts.timeoutMs ?? 15e3);
   try {
     const res = await fetchImpl(url, {
-      headers: { Accept: "application/json", "User-Agent": "0sec-supply-chain/0.1" },
+      headers: { Accept: "application/json", "User-Agent": "0-supply-chain/0.1" },
       signal: controller.signal
     });
     if (res.status === 404)
@@ -1003,7 +1003,7 @@ function resolveRepo(repo, emit) {
     }
     return { repoPath: absPath, cloned: false };
   }
-  const tempDir = join3(tmpdir2(), `0sec-review-${randomUUID2().slice(0, 8)}`);
+  const tempDir = join3(tmpdir2(), `0-review-${randomUUID2().slice(0, 8)}`);
   mkdirSync3(tempDir, { recursive: true });
   emit({
     type: "stage:start",