0sec-cli 0.18.0 → 0.21.4

package/chunks/{chunk-ATATQACO.js → chunk-ER3SUMYJ.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { createRequire as __0secCreateRequire } from "node:module";
-const require = __0secCreateRequire(import.meta.url);
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
 import {
   eventBus,
   isCloudEventSinkActive
-} from "./chunk-ADOLI6DT.js";
+} from "./chunk-CXKDWFNO.js";
 
 // packages/core/dist/runtime/process.js
 import { spawn } from "node:child_process";
@@ -94,13 +94,22 @@ function safeJsonStringify(v) {
 function buildClaudeMcpConfig(context) {
   return JSON.stringify({
     mcpServers: {
-      "0sec": {
+      "0": {
         command: process.execPath,
         args: buildOsecMcpCommandArgs(context)
       }
     }
   });
 }
+function describeSpawnFailure(err, command, argv) {
+  const code = err?.code;
+  const message = err instanceof Error ? err.message : String(err);
+  if (code === "E2BIG" || message.includes("E2BIG")) {
+    const bytes = argv.reduce((total, arg) => total + Buffer.byteLength(arg, "utf8") + 1, 0);
+    return `${command} could not be started: the prompt is too large for one command line (${bytes} bytes of arguments, over this system's limit). Narrow the run \u2014 a smaller --subsystem or scope, or a lower --batch-size \u2014 so less content is sent in a single request.`;
+  }
+  return message;
+}
 var ProcessRuntime = class {
   type;
   config;
@@ -295,11 +304,23 @@ var ProcessRuntime = class {
       let resultText = "";
       let timedOut = false;
       const isJsonStream = args.includes("stream-json") || args.includes("--json");
-      const proc = spawn(this.command, args, {
-        cwd: this.config.cwd ?? process.cwd(),
-        env: { ...process.env, ...env },
-        stdio: ["ignore", "pipe", "pipe"]
-      });
+      let proc;
+      try {
+        proc = spawn(this.command, args, {
+          cwd: this.config.cwd ?? process.cwd(),
+          env: { ...process.env, ...env },
+          stdio: ["ignore", "pipe", "pipe"]
+        });
+      } catch (err) {
+        resolve2({
+          output: "",
+          exitCode: 1,
+          timedOut: false,
+          durationMs: Date.now() - start,
+          error: describeSpawnFailure(err, this.command, args)
+        });
+        return;
+      }
       proc.stdout.on("data", (chunk) => {
         const text = chunk.toString();
         stdout += text;
@@ -343,7 +364,7 @@ var ProcessRuntime = class {
         stderr += text;
         if (/permission|approve|allow.*tool/i.test(stderr) && stderr.length > 500) {
           proc.kill("SIGTERM");
-          stderr += "\n[0sec] Subprocess killed: MCP tools require interactive approval. Use --runtime api instead.";
+          stderr += "\n[0] Subprocess killed: MCP tools require interactive approval. Use --runtime api instead.";
         }
       });
       const timer = setTimeout(() => {
@@ -369,7 +390,7 @@ var ProcessRuntime = class {
           exitCode: 1,
           timedOut: false,
           durationMs: Date.now() - start,
-          error: err.message
+          error: describeSpawnFailure(err, this.command, args)
         });
       });
     });
@@ -425,7 +446,7 @@ var ProcessRuntime = class {
           throw new Error("Codex CLI MCP target tools are not supported. Use the direct ChatGPT Codex provider for live target scans.");
         }
         if (this.config.outputSchema) {
-          const schemaPath = join(tmpdir(), `0sec-schema-${Date.now()}.json`);
+          const schemaPath = join(tmpdir(), `0-schema-${Date.now()}.json`);
           writeFileSync(schemaPath, JSON.stringify(this.config.outputSchema));
           args.push("--output-schema", schemaPath);
         }
@@ -445,27 +466,28 @@ var ProcessRuntime = class {
       ...this.config.env
     };
     if (context?.target) {
-      env["0SEC_TARGET"] = context.target;
+      env["ZERO_TARGET"] = context.target;
     }
     if (context?.findings) {
-      env["0SEC_FINDINGS"] = context.findings;
+      env["ZERO_FINDINGS"] = context.findings;
     }
     if (context?.templateId) {
-      env["0SEC_TEMPLATE_ID"] = context.templateId;
+      env["ZERO_TEMPLATE_ID"] = context.templateId;
     }
     if (context?.mcp?.auth) {
-      env["0SEC_MCP_AUTH_JSON"] = JSON.stringify(context.mcp.auth);
+      env["ZERO_MCP_AUTH_JSON"] = JSON.stringify(context.mcp.auth);
     }
     if (context?.mcp?.attributionHeaders) {
-      env["0SEC_MCP_ATTRIBUTION_HEADERS_JSON"] = JSON.stringify(context.mcp.attributionHeaders);
+      env["ZERO_MCP_ATTRIBUTION_HEADERS_JSON"] = JSON.stringify(context.mcp.attributionHeaders);
     }
     if (context?.mcp?.attributionUaToken) {
-      env["0SEC_MCP_ATTRIBUTION_UA_TOKEN"] = context.mcp.attributionUaToken;
+      env["ZERO_MCP_ATTRIBUTION_UA_TOKEN"] = context.mcp.attributionUaToken;
     }
     return env;
   }
 };
 
 export {
+  describeSpawnFailure,
   ProcessRuntime
 };