0sec-cli 0.17.0 → 0.21.4

package/chunks/{chunk-SOG2U7B3.js → chunk-CAJJRUTV.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
-import { createRequire as __0secCreateRequire } from "node:module";
-const require = __0secCreateRequire(import.meta.url);
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
 import {
   homeStateDir
-} from "./chunk-KKGE5RQE.js";
+} from "./chunk-PC6RCKQV.js";
 
 // packages/core/dist/agent/journal/types.js
 var JOURNAL_SCHEMA_VERSION = 1;
@@ -579,7 +579,7 @@ function atomicAppendJsonLine(path, entry) {
   const line = JSON.stringify(entry) + "\n";
   const bytes = Buffer.from(line, "utf8");
   if (bytes.byteLength > LINUX_PIPE_BUF) {
-    process.emitWarning(`journal line ${bytes.byteLength}B exceeds PIPE_BUF (${LINUX_PIPE_BUF}B); concurrent writers may interleave. Consider forcing the artifact to a sidecar.`, { code: "0SEC_JOURNAL_LINE_TOO_LARGE", type: "Warning" });
+    process.emitWarning(`journal line ${bytes.byteLength}B exceeds PIPE_BUF (${LINUX_PIPE_BUF}B); concurrent writers may interleave. Consider forcing the artifact to a sidecar.`, { code: "ZERO_JOURNAL_LINE_TOO_LARGE", type: "Warning" });
   }
   const fd = openSync(path, "a", 384);
   try {

package/chunks/{chunk-57ZENEX2.js → chunk-CGHCEN7W.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { createRequire as __0secCreateRequire } from "node:module";
-const require = __0secCreateRequire(import.meta.url);
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
 
 // packages/core/dist/scope/scope.js
 import { readFileSync } from "node:fs";
@@ -10,7 +10,7 @@ var ScopePolicy = class _ScopePolicy {
   outOfScope;
   /**
    * Original JSON the policy was constructed from. Exposed read-only so
-   * downstream features (0sec#216 attribution headers) can pull their
+   * downstream features (0#216 attribution headers) can pull their
    * own optional blocks out of the same file without re-reading it.
    */
   raw;

package/chunks/{chunk-VGRDNSHA.js → chunk-CL5KAUM6.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
-import { createRequire as __0secCreateRequire } from "node:module";
-const require = __0secCreateRequire(import.meta.url);
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
 import {
   loadLayeredSettings
-} from "./chunk-2CJ776PV.js";
+} from "./chunk-YPOA3W4O.js";
 import {
   homeStateDir
-} from "./chunk-KKGE5RQE.js";
+} from "./chunk-PC6RCKQV.js";
 import {
   __commonJS,
   __require,
   __toESM
-} from "./chunk-IR537GON.js";
+} from "./chunk-VCSFCHAJ.js";
 
 // node_modules/.pnpm/commander@12.1.0/node_modules/commander/lib/error.js
 var require_error = __commonJS({
@@ -3027,7 +3027,7 @@ var {
 import { readFileSync, writeFileSync, mkdirSync } from "node:fs";
 import { join } from "node:path";
 import { spawn } from "node:child_process";
-var REPO = "0sec-labs/0sec";
+var REPO = "0sec-labs/0";
 var INSTALL_URL = `https://raw.githubusercontent.com/${REPO}/main/install.sh`;
 var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
 var FETCH_TIMEOUT_MS = 4e3;
@@ -3070,9 +3070,9 @@ function disabled(value) {
   return value !== void 0 && value !== "" && value !== "0" && value.toLowerCase() !== "false";
 }
 function shouldRunCheck(env = process.env, isTty = Boolean(process.stdout.isTTY), policy) {
-  if (!isTty || disabled(env.CI) || disabled(env["0SEC_OFFLINE"]) || disabled(env["0SEC_NO_UPDATE_CHECK"])) return false;
+  if (!isTty || disabled(env.CI) || disabled(env["ZERO_OFFLINE"]) || disabled(env["ZERO_NO_UPDATE_CHECK"])) return false;
   if (policy !== void 0) return policy !== "off";
-  return env["0SEC_UPDATE_CHECK"] === "1";
+  return env["ZERO_UPDATE_CHECK"] === "1";
 }
 function recent(timestamp, now) {
   const age = now - Date.parse(timestamp ?? "");
@@ -3106,7 +3106,7 @@ async function fetchLatestTag() {
   const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
   try {
     const response = await fetch(`https://api.github.com/repos/${REPO}/releases/latest`, {
-      headers: { Accept: "application/vnd.github+json", "User-Agent": "0sec-cli/update-check" },
+      headers: { Accept: "application/vnd.github+json", "User-Agent": "@0/cli/update-check" },
       signal: controller.signal
     });
     if (!response.ok) return null;
@@ -3123,8 +3123,8 @@ async function fetchLatestTag() {
 var installInProgress = false;
 var attemptedAutomaticTags = /* @__PURE__ */ new Set();
 async function performAutoUpdate(options = {}) {
-  if (process.platform === "win32") return { success: false, installed: false, error: "Automatic installation is unavailable on Windows; download a release from https://github.com/0sec-labs/0sec/releases/latest." };
-  if (disabled(process.env["0SEC_OFFLINE"]) || disabled(process.env["0SEC_NO_UPDATE_CHECK"])) {
+  if (process.platform === "win32") return { success: false, installed: false, error: "Automatic installation is unavailable on Windows; download a release from https://github.com/0sec-labs/0/releases/latest." };
+  if (disabled(process.env["ZERO_OFFLINE"]) || disabled(process.env["ZERO_NO_UPDATE_CHECK"])) {
     return { success: false, installed: false, error: "Updates are disabled by the current offline/update policy." };
   }
   if (installInProgress) return { success: false, installed: false, error: "An update is already in progress." };
@@ -3135,7 +3135,7 @@ async function performAutoUpdate(options = {}) {
     if (!tag || !version?.complete) return { success: false, installed: false, error: "Could not resolve a valid release tag." };
     const normalizedTag = tag.startsWith("v") ? tag : `v${tag}`;
     const env = { ...process.env, RELEASE_BASE_URL: `https://github.com/${REPO}/releases/download/${normalizedTag}` };
-    const installDir = options.installDir ?? process.env["0SEC_INSTALL_DIR"];
+    const installDir = options.installDir ?? process.env["ZERO_INSTALL_DIR"];
     if (installDir !== void 0) env.INSTALL_DIR = installDir;
     const timeoutMs = Number.isFinite(options.timeoutMs) && options.timeoutMs > 0 ? Math.min(options.timeoutMs, INSTALL_TIMEOUT_MS) : INSTALL_TIMEOUT_MS;
     return await new Promise((resolve) => {
@@ -3215,22 +3215,22 @@ async function maybeNotifyUpdate(currentVersion, options = {}) {
   const candidate = tag ? parseVersion(tag) : null;
   if (!tag || !candidate?.complete || candidate.prerelease.length > 0 || compareVersions(tag, currentVersion) <= 0) return;
   if (policy !== "automatic") {
-    process.stderr.write(`[0sec] Update available: ${currentVersion} \u2192 ${tag}. Run 0sec upgrade.
+    process.stderr.write(`[0] Update available: ${currentVersion} \u2192 ${tag}. Run 0 upgrade.
 `);
     return;
   }
   if (attemptedAutomaticTags.has(tag) || cache.lastInstallTag === tag && recent(cache.lastInstallAttemptAt, now)) return;
   attemptedAutomaticTags.add(tag);
   writeCache({ ...cache, lastInstallTag: tag, lastInstallAttemptAt: new Date(now).toISOString() });
-  process.stderr.write(`[0sec] Updating to ${tag} before starting the console\u2026
+  process.stderr.write(`[0] Updating to ${tag} before starting the console\u2026
 `);
   const result = await performAutoUpdate({ version: tag });
   if (result.signal) {
     process.kill(process.pid, result.signal);
     return;
   }
-  process.stderr.write(result.success ? `[0sec] Installed ${result.installedVersion}. This process is still ${currentVersion}; restart to use the update.
-` : `[0sec] Update not installed: ${result.error ?? "unknown error"} Continuing with ${currentVersion}.
+  process.stderr.write(result.success ? `[0] Installed ${result.installedVersion}. This process is still ${currentVersion}; restart to use the update.
+` : `[0] Update not installed: ${result.error ?? "unknown error"} Continuing with ${currentVersion}.
 `);
 }
 async function runStartupUpdate(version) {
@@ -3242,6 +3242,7 @@ async function runStartupUpdate(version) {
 }
 
 export {
+  InvalidArgumentError,
   Command,
   Option,
   performAutoUpdate,

package/chunks/{chunk-QOKTUOU2.js → chunk-CXKDWFNO.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
-import { createRequire as __0secCreateRequire } from "node:module";
-const require = __0secCreateRequire(import.meta.url);
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
 import {
   createPresentationEvent
-} from "./chunk-KKGE5RQE.js";
+} from "./chunk-PC6RCKQV.js";
 
 // packages/core/dist/events/bus.js
 function presentationEventSink(sink, options = {}) {
@@ -58,7 +58,7 @@ var EventBus = class {
       } catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
         try {
-          process.stderr.write(`[0sec event-bus] sink threw on ${type}: ${msg}
+          process.stderr.write(`[0 event-bus] sink threw on ${type}: ${msg}
 `);
         } catch {
         }
@@ -69,7 +69,7 @@ var EventBus = class {
 var eventBus = new EventBus();
 var cloudEventSink = {
   emit(type, payload) {
-    const prefix = `0SEC_EVENT_${type.toUpperCase()}`;
+    const prefix = `ZERO_EVENT_${type.toUpperCase()}`;
     let line;
     try {
       line = `${prefix} ${JSON.stringify(payload)}`;
@@ -83,7 +83,7 @@ var cloudSinkSubscribed = false;
 function maybeSubscribeCloudEventSink() {
   if (cloudSinkSubscribed)
     return;
-  const flag = process.env["0SEC_CLOUD_EVENTS"];
+  const flag = process.env["ZERO_CLOUD_EVENTS"];
   if (flag && flag !== "0" && flag.toLowerCase() !== "false") {
     eventBus.subscribe(cloudEventSink);
     cloudSinkSubscribed = true;

package/chunks/{chunk-RWONANDA.js → chunk-DQTNI3KY.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { createRequire as __0secCreateRequire } from "node:module";
-const require = __0secCreateRequire(import.meta.url);
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
 
 // packages/core/dist/stages/npm-detectors/dedup.js
 function forkTwinFor(hints, name) {
@@ -12,7 +12,7 @@ async function dedupConfirmation(args) {
     return {
       novel: false,
       source: "prior-report",
-      advisories: [`${name}: previously reported by 0sec for this class`]
+      advisories: [`${name}: previously reported by 0 for this class`]
     };
   }
   const twin = forkTwinFor(hints, name);
@@ -360,7 +360,7 @@ var ssppFuzzDetector = {
     };
   },
   dedupHints: {
-    // 0sec prior filing for this exact class.
+    // 0 prior filing for this exact class.
     priorReports: ["es-toolkit"],
     // Fork-twin the prototype learned the hard way: npm audit gave a false
     // all-clear because the advisory lives under the maintained fork's name.
@@ -371,7 +371,7 @@ var ssppFuzzDetector = {
 };
 
 // packages/core/dist/stages/npm-detectors/read-unstable.js
-var EVIL = "__0sec_toctou_forbidden__";
+var EVIL = "__0_toctou_forbidden__";
 function makePhasedField(clean, evil = EVIL) {
   let phase = "validate";
   return {