0sec-cli 0.17.0 → 0.21.4

package/chunks/{chunk-2CJ776PV.js → chunk-YPOA3W4O.js}

@@ -1,16 +1,17 @@
 #!/usr/bin/env node
-import { createRequire as __0secCreateRequire } from "node:module";
-const require = __0secCreateRequire(import.meta.url);
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
 import {
   ANALYTICS_LEVEL_ENV,
   analyticsPipeline,
+  levelAtLeast,
   resolveAnalyticsLevel
-} from "./chunk-O462Y7P2.js";
+} from "./chunk-ANDKY54G.js";
 import {
   DEFAULT_ALLOW_MODEL_SELF_EXTENSION,
   createPresentationEvent,
   homeStateDir
-} from "./chunk-KKGE5RQE.js";
+} from "./chunk-PC6RCKQV.js";
 
 // packages/cli/src/tui/settings-store.ts
 import { useSyncExternalStore } from "react";
@@ -266,7 +267,7 @@ var KEYBINDINGS = [
     description: "Cycle the autonomy mode: Standard \u2192 Co-pilot \u2192 YOLO \u2192 Recon; no preconfigured scope is required.",
     category: "Autonomy",
     lockReason: "mode-cycle",
-    handler: "if (isAutonomyCycleKey(key)) routeSlashCommand(`/mode ${next}`)"
+    handler: "if (isAutonomyCycleKey(key)) session.setAutonomyMode(nextAutonomyMode(modeRef.current))"
   }
 ];
 var KEYBINDING_CATEGORIES = [
@@ -889,7 +890,7 @@ var OSEC_THEME = {
   surfaceAlt: "#35302A",
   overlay: "#403D39",
   // the #403D39 graphite anchor itself, as the topmost raised surface tier
-  // Code palette HARMONIZED to the 0sec warm palette (oh-my-pi dark-volcanic
+  // Code palette HARMONIZED to the 0 warm palette (oh-my-pi dark-volcanic
   // philosophy: draw the syntax hues from the theme's OWN colours rather than a
   // foreign rainbow, so code reads as part of the brand, not confetti). A warm
   // family carries the meaningful tokens — keyword=amber (ACCENT), function=soft
@@ -923,7 +924,7 @@ var OSEC_THEME = {
   // teal (INFO)
 };
 var THEME_NAMES = [
-  "0sec",
+  "0",
   "midnight",
   "dark",
   "light",
@@ -940,14 +941,14 @@ var THEME_ALIASES = {
   opencode: "golden-gate",
   golden: "golden-gate",
   "oh-my-pi": "blue-team",
-  ember: "0sec"
+  ember: "0"
 };
-var DEFAULT_THEME_NAME = "0sec";
+var DEFAULT_THEME_NAME = "0";
 var THEMES = {
-  "0sec": {
-    name: "0sec",
-    label: "0sec",
-    description: "The flagship 0sec look: signature orange on warm graphite, with an amber accent.",
+  "0": {
+    name: "0",
+    label: "0",
+    description: "The flagship 0 look: signature orange on warm graphite, with an amber accent.",
     mode: "dark",
     palette: OSEC_THEME
   },
@@ -1010,7 +1011,7 @@ var THEMES = {
   swiss: {
     name: "swiss",
     label: "Swiss",
-    description: "Swiss-flag red on near-black, crisp white text. For the Swiss Applied AI Cybersecurity Research Lab.",
+    description: "Swiss-flag red on near-black, crisp white text. For the Swiss Applied AI & Cybersecurity Research Lab.",
     mode: "dark",
     palette: SWISS
   },
@@ -1386,7 +1387,7 @@ var DEFS = [
   {
     key: "showLogo",
     label: "Logo",
-    description: 'Block "0SEC" mark shown on an empty transcript.',
+    description: 'Block "ZEROSECURITY" wordmark shown on an empty transcript.',
     kind: "boolean",
     default: true,
     group: "Display"
@@ -1510,7 +1511,7 @@ var DEFS = [
   {
     key: "roleLabelStyle",
     label: "Role label",
-    description: 'Speaker name on each message: "You" for your turns, "0sec" for answers. Full and short add the elapsed age when one is known; glyph shows the name alone; off omits the label entirely. Bubble cards carry it top-left on the card border, with your messages right-aligned and answers left.',
+    description: 'Speaker name on each message: "You" for your turns, "0" for answers. Full and short add the elapsed age when one is known; glyph shows the name alone; off omits the label entirely. Bubble cards carry it top-left on the card border, with your messages right-aligned and answers left.',
     kind: "enum",
     default: "full",
     choices: ["full", "short", "glyph", "off"],
@@ -1562,7 +1563,7 @@ var DEFS = [
   {
     key: "theme",
     label: "Theme",
-    description: "Colour palette. Slate (neutral grey, default) and Midnight (deep blue-black) and Carbon (warm dark), Standard/Paper (light), plus Contrast, Mono Dim and ANSI 16 for 16-colour terminals. Drop validated palettes in ~/.0sec/themes to add your own.",
+    description: "Colour palette. Slate (neutral grey, default) and Midnight (deep blue-black) and Carbon (warm dark), Standard/Paper (light), plus Contrast, Mono Dim and ANSI 16 for 16-colour terminals. Drop validated palettes in ~/.0/themes to add your own.",
     kind: "enum",
     default: DEFAULT_THEME_NAME,
     choices: THEME_CHOICES,
@@ -1587,7 +1588,7 @@ var DEFS = [
   {
     key: "autoEvolveFinderLenses",
     label: "Auto-evolve finder lenses",
-    description: "Start the TUI watcher for ~/.0sec/lens-synthesis/miss-input.json (or OSEC_TUI_LENS_SYNTH_INPUT) so each new curated revision can invoke the configured model.",
+    description: "Start the TUI watcher for ~/.0/lens-synthesis/miss-input.json (or OSEC_TUI_LENS_SYNTH_INPUT) so each new curated revision can invoke the configured model.",
     kind: "boolean",
     default: false,
     group: "Security"
@@ -1645,7 +1646,7 @@ var DEFS = [
   {
     key: "logoAnimation",
     label: "Logo animation",
-    description: 'Intro animation for the "0SEC" logo: glitch (a neon-flecked scramble that resolves \u2014 the default), rainbow (a looping hue sweep), matrix (a green matrix-rain cascade), wave (a rippling cyan wavefront), neon (a neon-sign warm-up flicker), shimmer (a bright comet with a gradient tail), pulse (the slash breathes), strike (an orange slash strikes through the 0), draw (letters draw in behind a pen tip), fade (a centre-out bloom), typein (per-cell reveal), sweep (a bright bar wipes across) or off (static).',
+    description: 'Intro animation for the "ZEROSECURITY" wordmark: glitch (a neon-flecked scramble that resolves \u2014 the default), rainbow (a looping hue sweep), matrix (a green matrix-rain cascade), wave (a rippling cyan wavefront), neon (a neon-sign warm-up flicker), shimmer (a bright comet with a gradient tail), pulse (the slash breathes), strike (an orange slash strikes through the 0), draw (letters draw in behind a pen tip), fade (a centre-out bloom), typein (per-cell reveal), sweep (a bright bar wipes across) or off (static).',
     kind: "enum",
     default: "glitch",
     choices: [
@@ -1676,10 +1677,10 @@ var DEFS = [
   },
   {
     key: "analyticsLevel",
-    label: "Research analytics",
-    description: "How much anonymous data you share to advance open AI-cybersecurity research. Off shares nothing. Usage shares how features are used and the category of errors (no commands, code, targets or findings) \u2014 all that is transmitted today. Commands additionally authorizes anonymized commands and code; Full additionally authorizes targets and findings for open research. The richer tiers are a consent grant for future, privacy-reviewed collection, not extra data on the wire yet. Applies to this computer, not this project.",
+    label: "Analytics and training data",
+    description: "Full is the new-install default. Usage shares feature counters and error categories, not tool content. Commands adds tool arguments/results and submitted code for model training and security research; Full also adds scope and findings. Recognized credentials are scrubbed; emails, URLs, identifiers and other content are retained. Sending uses authenticated Cloud storage and is not anonymous. Each tool/code content field is limited to 256 KiB after credential scrubbing; oversized records are reported locally, not silently truncated. Explicit ZERO_ANALYTICS_LEVEL and offline/no-telemetry/DO_NOT_TRACK restrictions win over broader settings. Problem reports are separate. Applies to this computer, not this project.",
     kind: "enum",
-    default: "off",
+    default: "full",
     choices: ["off", "usage", "commands", "full"],
     group: "Privacy"
   },
@@ -1770,7 +1771,7 @@ var DEFAULT_SETTINGS = {
   elapsedTimer: "left",
   logoAnimation: "glitch",
   reduceMotion: false,
-  analyticsLevel: "off",
+  analyticsLevel: "full",
   diagnosticReporting: "automatic",
   diagnosticReportingPrompted: false,
   updatePolicy: "automatic",
@@ -1784,7 +1785,7 @@ function settingsFilePath(homeDir2) {
   return join3(homeStateDir(homeDir2), SETTINGS_FILENAME);
 }
 function projectStateDir(projectDir2 = process.cwd()) {
-  return join3(projectDir2, ".0sec");
+  return join3(projectDir2, ".0");
 }
 function projectSettingsFilePath(projectDir2 = process.cwd()) {
   return join3(projectStateDir(projectDir2), SETTINGS_FILENAME);
@@ -1983,6 +1984,7 @@ var homeDir;
 var projectDir;
 var subscribers = /* @__PURE__ */ new Set();
 function notify(settings) {
+  bridgeAnalyticsLevel(settings);
   for (const fn of [...subscribers]) {
     try {
       fn(settings);
@@ -1994,7 +1996,10 @@ function loadLayered() {
   return globalDraft === null && projectDraft === null ? loadLayeredSettings({ homeDir, projectDir }) : resolveLayeredSettings(globalDraft ?? loadGlobalSettings(homeDir), projectDraft ?? readProjectOverrides(projectDir));
 }
 function getSettings() {
-  if (cached === null) cached = loadLayered();
+  if (cached === null) {
+    cached = loadLayered();
+    bridgeAnalyticsLevel(cached.settings);
+  }
   return cached.settings;
 }
 function setSettings(next) {
@@ -2055,17 +2060,21 @@ function subscribeSettings(fn) {
     subscribers.delete(fn);
   };
 }
-var lastBridgedLevel;
+var bridgedAnalyticsEnv;
 function bridgeAnalyticsLevel(settings) {
   try {
-    if (settings.analyticsLevel === lastBridgedLevel) return;
-    lastBridgedLevel = settings.analyticsLevel;
-    process.env[ANALYTICS_LEVEL_ENV] = settings.analyticsLevel;
-    analyticsPipeline.setLevel(resolveAnalyticsLevel());
+    const current = process.env[ANALYTICS_LEVEL_ENV];
+    if (current === void 0 || current === bridgedAnalyticsEnv) {
+      process.env[ANALYTICS_LEVEL_ENV] = settings.analyticsLevel;
+      bridgedAnalyticsEnv = settings.analyticsLevel;
+    } else {
+      bridgedAnalyticsEnv = void 0;
+    }
+    const environmentLevel = resolveAnalyticsLevel();
+    analyticsPipeline.setLevel(levelAtLeast(environmentLevel, settings.analyticsLevel) ? settings.analyticsLevel : environmentLevel);
   } catch {
   }
 }
-subscribeSettings(bridgeAnalyticsLevel);
 function reloadSettings() {
   globalDraft = null;
   projectDraft = null;
@@ -2086,11 +2095,11 @@ function useSettings() {
 import { readFileSync as readFileSync3, existsSync } from "node:fs";
 import { homedir } from "node:os";
 import { join as join4 } from "node:path";
-var AUTH_FILE_ENV = "0SEC_CHATGPT_AUTH_FILE";
-var LEGACY_AUTH_FILE_ENV = "0SEC_CODEX_AUTH_JSON_PATH";
+var AUTH_FILE_ENV = "ZERO_CHATGPT_AUTH_FILE";
+var LEGACY_AUTH_FILE_ENV = "ZERO_CODEX_AUTH_JSON_PATH";
 function maybeLoadCodexAuth(options = {}) {
   const env = options.env ?? process.env;
-  if (!options.force && (env["0SEC_CHATGPT_ACCESS_TOKEN"] || env["0SEC_CHATGPT_OAUTH_REFRESH_TOKEN"])) {
+  if (!options.force && (env["ZERO_CHATGPT_ACCESS_TOKEN"] || env["ZERO_CHATGPT_OAUTH_REFRESH_TOKEN"])) {
     return;
   }
   const home = options.home ?? homedir();
@@ -2103,14 +2112,14 @@ function maybeLoadCodexAuth(options = {}) {
     const refreshToken = nonEmpty(asString(raw.tokens?.refresh_token));
     if (!accessToken && !refreshToken) return;
     if (options.force) {
-      delete env["0SEC_CHATGPT_ACCESS_TOKEN"];
-      delete env["0SEC_CHATGPT_OAUTH_REFRESH_TOKEN"];
+      delete env["ZERO_CHATGPT_ACCESS_TOKEN"];
+      delete env["ZERO_CHATGPT_OAUTH_REFRESH_TOKEN"];
     }
     if (accessToken) {
-      env["0SEC_CHATGPT_ACCESS_TOKEN"] = accessToken;
+      env["ZERO_CHATGPT_ACCESS_TOKEN"] = accessToken;
     }
     if (refreshToken) {
-      env["0SEC_CHATGPT_OAUTH_REFRESH_TOKEN"] = refreshToken;
+      env["ZERO_CHATGPT_OAUTH_REFRESH_TOKEN"] = refreshToken;
     }
   } catch {
   }
@@ -2304,7 +2313,7 @@ function installProcessPresentationStreamBridge(options = {}) {
   const streams = [];
   const emit = (channel, chunk, encoding) => {
     const text = typeof chunk === "string" ? chunk : chunk instanceof Uint8Array ? Buffer.from(chunk).toString(typeof encoding === "string" ? encoding : "utf8") : String(chunk ?? "");
-    if (channel === "stdout" && text.startsWith("0SEC_EVENT_")) return;
+    if (channel === "stdout" && text.startsWith("ZERO_EVENT_")) return;
     const event = createPresentationEvent({
       source,
       sequence: ++sequence,

package/chunks/{chunk-7DQEV5QI.js → chunk-Z3IKZX3X.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
-import { createRequire as __0secCreateRequire } from "node:module";
-const require = __0secCreateRequire(import.meta.url);
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
 import {
   allowlistedChildEnv
-} from "./chunk-KLTNTE2Z.js";
+} from "./chunk-QZVG3BG4.js";
 
 // packages/core/dist/stages/npm-detectors/osv-lookup.js
 var DEFAULT_ENDPOINT = "https://api.osv.dev/v1/querybatch";
@@ -160,7 +160,7 @@ function defaultHarnessPath() {
 function localSandboxProvider() {
   return {
     async create() {
-      const workdir = await mkdtemp(join(tmpdir(), "0sec-npm-dyn-"));
+      const workdir = await mkdtemp(join(tmpdir(), "0-npm-dyn-"));
       return {
         workdir,
         run(cmd, args, runOpts) {

package/chunks/codex-models-TYYV4JNN.js

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
+import {
+  loadCodexModelCatalog,
+  parseCodexModels
+} from "./chunk-HPQZHOIU.js";
+import "./chunk-BACXRTQ4.js";
+import "./chunk-PC6RCKQV.js";
+import "./chunk-VIT5ALXF.js";
+import "./chunk-VCSFCHAJ.js";
+export {
+  loadCodexModelCatalog,
+  parseCodexModels
+};