0sec-cli 0.18.0 → 0.21.4

package/chunks/{runtime-G7YWIO3B.js → runtime-PXO5G6UV.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { createRequire as __0secCreateRequire } from "node:module";
-const require = __0secCreateRequire(import.meta.url);
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
 import {
   CliNativeRuntime,
   DEFAULT_ENSEMBLE_MODELS,
@@ -11,20 +11,20 @@ import {
   detectAvailableRuntimes,
   getRuntimeInfo,
   pickRuntimeForStage
-} from "./chunk-N7BOUYEV.js";
+} from "./chunk-NDJU5ZZ7.js";
+import {
+  ProcessRuntime
+} from "./chunk-ER3SUMYJ.js";
+import "./chunk-CXKDWFNO.js";
 import {
   LlmApiRuntime,
   OperatorAbortError,
   QuotaExhaustedError,
   parseUsageLimitReached
-} from "./chunk-UR4ELX2Y.js";
-import {
-  ProcessRuntime
-} from "./chunk-ATATQACO.js";
-import "./chunk-ADOLI6DT.js";
-import "./chunk-6L26OBWI.js";
-import "./chunk-YLMN3N25.js";
-import "./chunk-IR537GON.js";
+} from "./chunk-BACXRTQ4.js";
+import "./chunk-PC6RCKQV.js";
+import "./chunk-VIT5ALXF.js";
+import "./chunk-VCSFCHAJ.js";
 export {
   CliNativeRuntime,
   DEFAULT_ENSEMBLE_MODELS,

package/chunks/runtime-XFWJTBUO.js

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
+import {
+  canUseOpenTui,
+  isBunRuntime
+} from "./chunk-GHWODZMR.js";
+import "./chunk-VCSFCHAJ.js";
+export {
+  canUseOpenTui,
+  isBunRuntime
+};

package/chunks/{scan-stream-FHI2FYZE.js → scan-stream-BMOCPKQX.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { createRequire as __0secCreateRequire } from "node:module";
-const require = __0secCreateRequire(import.meta.url);
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
 import {
   source_default
-} from "./chunk-SF4KZ4O3.js";
-import "./chunk-IR537GON.js";
+} from "./chunk-HLFS6WV2.js";
+import "./chunk-VCSFCHAJ.js";
 
 // packages/cli/src/ui/scan-stream.ts
 var STAGE_TAG = {
@@ -15,7 +15,7 @@ var STAGE_TAG = {
   report: source_default.gray
 };
 function tagFor(stage) {
-  if (!stage) return source_default.gray("[0sec]");
+  if (!stage) return source_default.gray("[0]");
   const colour = STAGE_TAG[stage] ?? source_default.gray;
   return colour(`[${stage}]`);
 }
@@ -36,7 +36,7 @@ function severityColour(sev) {
 function renderScanStream(opts) {
   const { version, target, depth, mode } = opts;
   console.log("");
-  console.log(`  ${source_default.bold("0sec")} ${source_default.dim(`v${version}`)}`);
+  console.log(`  ${source_default.bold("0")} ${source_default.dim(`v${version}`)}`);
   console.log(`    ${source_default.dim(`${mode}ing target ${target} \xB7 depth ${depth}`)}`);
   console.log("");
   const onEvent = (event) => {
@@ -63,7 +63,7 @@ function renderScanStream(opts) {
         if (event.message) console.log(`${tag} ${event.message}`);
         return;
       case "thinking":
-        if (process.env["0SEC_VERBOSE"] && event.message) {
+        if (process.env["ZERO_VERBOSE"] && event.message) {
           console.log(`${source_default.gray("  \u2026")} ${source_default.dim(event.message.slice(0, 200))}`);
         }
         return;

package/chunks/{scope-BI7BF4ZY.js → scope-NJHIDDTN.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
-import { createRequire as __0secCreateRequire } from "node:module";
-const require = __0secCreateRequire(import.meta.url);
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
 import {
   ScopePolicy,
   extractUrls,
   loadScope,
   matchUrl,
   normalizeScopeHostname
-} from "./chunk-57ZENEX2.js";
-import "./chunk-IR537GON.js";
+} from "./chunk-CGHCEN7W.js";
+import "./chunk-VCSFCHAJ.js";
 export {
   ScopePolicy,
   extractUrls,

package/chunks/{session-store-GZ4A4KYT.js → session-store-46WBZM22.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { createRequire as __0secCreateRequire } from "node:module";
-const require = __0secCreateRequire(import.meta.url);
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
 import {
   DEFAULT_PRUNE_KEEP,
   deleteSession,
@@ -11,10 +11,10 @@ import {
   relativeAge,
   saveSession,
   sessionsDir
-} from "./chunk-BVAZO4WA.js";
-import "./chunk-6L26OBWI.js";
-import "./chunk-YLMN3N25.js";
-import "./chunk-IR537GON.js";
+} from "./chunk-NOPBXZUV.js";
+import "./chunk-PC6RCKQV.js";
+import "./chunk-VIT5ALXF.js";
+import "./chunk-VCSFCHAJ.js";
 export {
   DEFAULT_PRUNE_KEEP,
   deleteSession,

package/chunks/source-files-REHOM44I.js

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
+import {
+  collectScopeFiles,
+  countScopeFilesUpTo
+} from "./chunk-AZ7L3HFD.js";
+import "./chunk-VCSFCHAJ.js";
+export {
+  collectScopeFiles,
+  countScopeFilesUpTo
+};

package/chunks/{specdrift-WCLH6TTQ.js → specdrift-AFS54WEJ.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
-import { createRequire as __0secCreateRequire } from "node:module";
-const require = __0secCreateRequire(import.meta.url);
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
 import {
   extractSpecInvariants,
   mapInvariantsToImplementation,
   planSpecdriftHypotheses,
   runSpecdriftPlan,
   runSpecdriftScan
-} from "./chunk-BKZFDZ23.js";
-import "./chunk-53G27VPS.js";
-import "./chunk-IR537GON.js";
+} from "./chunk-QCUFBVIZ.js";
+import "./chunk-AZ7L3HFD.js";
+import "./chunk-VCSFCHAJ.js";
 export {
   extractSpecInvariants,
   mapInvariantsToImplementation,

package/chunks/token-KRWP5JYA.js

@@ -0,0 +1,72 @@
+#!/usr/bin/env node
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
+import {
+  require_token_error,
+  require_token_util
+} from "./chunk-TRH2PJSN.js";
+import {
+  __commonJS
+} from "./chunk-VCSFCHAJ.js";
+
+// node_modules/.pnpm/@vercel+oidc@3.2.0/node_modules/@vercel/oidc/dist/token.js
+var require_token = __commonJS({
+  "node_modules/.pnpm/@vercel+oidc@3.2.0/node_modules/@vercel/oidc/dist/token.js"(exports, module) {
+    var __defProp = Object.defineProperty;
+    var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+    var __getOwnPropNames = Object.getOwnPropertyNames;
+    var __hasOwnProp = Object.prototype.hasOwnProperty;
+    var __export = (target, all) => {
+      for (var name in all)
+        __defProp(target, name, { get: all[name], enumerable: true });
+    };
+    var __copyProps = (to, from, except, desc) => {
+      if (from && typeof from === "object" || typeof from === "function") {
+        for (let key of __getOwnPropNames(from))
+          if (!__hasOwnProp.call(to, key) && key !== except)
+            __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+      }
+      return to;
+    };
+    var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+    var token_exports = {};
+    __export(token_exports, {
+      refreshToken: () => refreshToken
+    });
+    module.exports = __toCommonJS(token_exports);
+    var import_token_error = require_token_error();
+    var import_token_util = require_token_util();
+    async function refreshToken(options) {
+      let projectId = options?.project;
+      let teamId = options?.team;
+      if (!projectId && !teamId) {
+        const projectInfo = (0, import_token_util.findProjectInfo)();
+        projectId = projectInfo.projectId;
+        teamId = projectInfo.teamId;
+      } else if (!projectId || !teamId) {
+        const projectInfo = (0, import_token_util.findProjectInfo)();
+        projectId = projectId ?? projectInfo.projectId;
+        teamId = teamId ?? projectInfo.teamId;
+      }
+      if (!projectId) {
+        throw new import_token_error.VercelOidcTokenError(
+          "Failed to refresh OIDC token: No project specified. Try re-linking your project with `vc link`"
+        );
+      }
+      let maybeToken = (0, import_token_util.loadToken)(projectId);
+      if (!maybeToken || (0, import_token_util.isExpired)((0, import_token_util.getTokenPayload)(maybeToken.token), options?.expirationBufferMs)) {
+        const authToken = await (0, import_token_util.getVercelToken)({
+          expirationBufferMs: options?.expirationBufferMs
+        });
+        maybeToken = await (0, import_token_util.getVercelOidcToken)(authToken, projectId, teamId);
+        if (!maybeToken) {
+          throw new import_token_error.VercelOidcTokenError("Failed to refresh OIDC token");
+        }
+        (0, import_token_util.saveToken)(maybeToken, projectId);
+      }
+      process.env.VERCEL_OIDC_TOKEN = maybeToken.token;
+      return;
+    }
+  }
+});
+export default require_token();

package/chunks/token-util-DWTL33S3.js

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
+import {
+  require_token_util
+} from "./chunk-TRH2PJSN.js";
+import "./chunk-VCSFCHAJ.js";
+export default require_token_util();

package/chunks/variant-candidates-UH2WC2HA.js

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
+import {
+  generateVariantCandidates
+} from "./chunk-TF46UWFU.js";
+import "./chunk-BACXRTQ4.js";
+import "./chunk-PC6RCKQV.js";
+import "./chunk-VIT5ALXF.js";
+import "./chunk-VCSFCHAJ.js";
+export {
+  generateVariantCandidates
+};

package/chunks/{web-recon-prepass-JJGPEOLE.js → web-recon-prepass-SFXU44SS.js}

@@ -1,20 +1,20 @@
 #!/usr/bin/env node
-import { createRequire as __0secCreateRequire } from "node:module";
-const require = __0secCreateRequire(import.meta.url);
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
 import {
   enumerateJsChunkUrls,
   fingerprintWebStack,
   runBaselineWebChecks,
   summarizeWebStackFingerprint
-} from "./chunk-CMKXP5RR.js";
+} from "./chunk-Y5H6E24H.js";
 import {
   enumerateSubdomains,
   scanJsArtifacts,
   searchAdvisories
-} from "./chunk-YYRBQVFE.js";
-import "./chunk-6L26OBWI.js";
-import "./chunk-YLMN3N25.js";
-import "./chunk-IR537GON.js";
+} from "./chunk-SBMB4OL3.js";
+import "./chunk-PC6RCKQV.js";
+import "./chunk-VIT5ALXF.js";
+import "./chunk-VCSFCHAJ.js";
 
 // packages/core/dist/stages/web-recon-prepass.js
 import { randomUUID } from "node:crypto";
@@ -459,7 +459,7 @@ async function checkRscBypass(opts) {
 }
 var DJANGO_DEBUG_ID = "DJANGO-DEBUG-TRUE-INFO-DISCLOSURE";
 var DJANGO_DEBUG_TITLE = "Django DEBUG=True exposes traceback / settings on error pages";
-var DJANGO_DEBUG_PROBE_PATH = "/0sec-debug-probe-0nonexistent-9z/?__0sec_debug_check__=1";
+var DJANGO_DEBUG_PROBE_PATH = "/0-debug-probe-0nonexistent-9z/?__0_debug_check__=1";
 var DJANGO_DEBUG_PROOF_RE = /You'?re seeing this error because you have\s+DEBUG\s*=\s*True/i;
 var DJANGO_DEBUG_CORROBORATING_RES = [
   /Django Version/i,
@@ -801,7 +801,7 @@ async function runWebReconPrePass(config, options = {}) {
   const resetEndpoint = baseline?.body ? findPasswordResetEndpoint(base, baseline.body) : void 0;
   if (resetBurstProbeAllowed && resetEndpoint && isInScopeUrl(resetEndpoint, targetHost, domain)) {
     try {
-      const invalidEmail = `0sec-noreply-${randomUUID().slice(0, 8)}@invalid.example`;
+      const invalidEmail = `0-noreply-${randomUUID().slice(0, 8)}@invalid.example`;
       const probe = await probeRateLimit({
         request: async () => {
           if (limiter)