0sec-cli 0.21.4 → 0.22.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/0.js +56 -56
- package/README.md +48 -63
- package/chunks/{adapt-loop-IGBRQAXO.js → adapt-loop-7I57LXXR.js} +4 -4
- package/chunks/{artifact-scraper-LNQJUORS.js → artifact-scraper-PYZ3RU3O.js} +2 -2
- package/chunks/{assumption-mining-4MJTP6H5.js → assumption-mining-MFLF43IR.js} +16 -16
- package/chunks/{chunk-Z3IKZX3X.js → chunk-23DG5YKS.js} +1 -1
- package/chunks/{chunk-BACXRTQ4.js → chunk-2GV4HQKE.js} +87 -767
- package/chunks/{chunk-QZVG3BG4.js → chunk-5IBCBQEH.js} +1 -2
- package/chunks/{chunk-NDJU5ZZ7.js → chunk-5MWAG3FT.js} +3 -3
- package/chunks/{chunk-PC6RCKQV.js → chunk-76KSBWOQ.js} +59 -26
- package/chunks/chunk-7DEHG7YT.js +2143 -0
- package/chunks/{chunk-CL5KAUM6.js → chunk-7UFUALR2.js} +274 -8
- package/chunks/{chunk-IMGWPNQM.js → chunk-CAYANSH6.js} +67 -574
- package/chunks/{chunk-P6YG6TEZ.js → chunk-DKSCN2AB.js} +1 -1
- package/chunks/{chunk-O6SD4A36.js → chunk-DM5C5L5D.js} +1 -1
- package/chunks/{chunk-FAH6V4QM.js → chunk-EGZGZFAH.js} +1116 -2291
- package/chunks/chunk-HR2TU42B.js +1228 -0
- package/chunks/{chunk-TF46UWFU.js → chunk-HUNAPTKV.js} +1 -1
- package/chunks/chunk-IO7R7WBM.js +114 -0
- package/chunks/{chunk-W4JOXE4N.js → chunk-IXT64DV5.js} +709 -1929
- package/chunks/{chunk-HBKCGJAV.js → chunk-LCRTAQN2.js} +1 -1
- package/chunks/{chunk-WPQLBN4S.js → chunk-LPTRPRZR.js} +1 -1
- package/chunks/{chunk-Y5H6E24H.js → chunk-LYUAM3TG.js} +1 -1
- package/chunks/{chunk-NOPBXZUV.js → chunk-MICHDTBK.js} +1 -1
- package/chunks/{chunk-CAJJRUTV.js → chunk-OAYUPGF6.js} +1 -1
- package/chunks/{chunk-FWAYJ2IV.js → chunk-OWLJYJ5O.js} +8 -8
- package/chunks/chunk-RE5EZDG2.js +5523 -0
- package/chunks/{chunk-RF5QGKLR.js → chunk-RRD4XXPU.js} +3 -3
- package/chunks/{chunk-2WSXFFJZ.js → chunk-RSIUX3RW.js} +2 -2
- package/chunks/{chunk-ANDKY54G.js → chunk-SJBCK2EI.js} +4019 -7299
- package/chunks/{chunk-G34QP2XW.js → chunk-TM74SSHC.js} +1 -1
- package/chunks/{chunk-VOAXLO4A.js → chunk-TO35Y326.js} +5 -721
- package/chunks/{chunk-SBMB4OL3.js → chunk-TZFIAMWZ.js} +62 -8
- package/chunks/chunk-UELXHK2Y.js +1950 -0
- package/chunks/{chunk-YHWWF4QY.js → chunk-UU7PQP6N.js} +3 -3
- package/chunks/{chunk-E2UOY5PJ.js → chunk-UV5QWZGE.js} +12 -70
- package/chunks/{chunk-YA4PUM4H.js → chunk-VMRRNRMR.js} +1 -1
- package/chunks/{chunk-WZISK5VC.js → chunk-VNRY6AWF.js} +53 -7
- package/chunks/{chunk-ER3SUMYJ.js → chunk-W6UWZFKL.js} +0 -195
- package/chunks/{chunk-5T6D5BVY.js → chunk-XFCTUKXR.js} +1 -1
- package/chunks/{chunk-YPOA3W4O.js → chunk-YIQSGNAA.js} +875 -108
- package/chunks/{codex-models-TYYV4JNN.js → codex-models-7TLJSY3L.js} +5 -3
- package/chunks/{commands-WF5RG4I2.js → commands-NEI7L3QA.js} +2151 -3642
- package/chunks/{db-U3WQZVAO.js → db-5AP3JB4W.js} +3 -3
- package/chunks/{disclose-67GZCDBO.js → disclose-LDNKAVRH.js} +10 -8
- package/chunks/{dist-F6X62TQK.js → dist-3FNZIBB4.js} +223 -192
- package/chunks/{dist-EVTN3UTT.js → dist-5YHYNLI3.js} +2 -2
- package/chunks/{dist-ACC3DZUZ.js → dist-DD4H6HMQ.js} +3 -1
- package/chunks/{eval-runner-SA6OUGHZ.js → eval-runner-43BO2C4T.js} +11 -11
- package/chunks/{exploit-agent-36Q7XQFP.js → exploit-agent-N4A5ELBK.js} +1 -1
- package/chunks/{exploit-autoclimb-J4OTSTZ6.js → exploit-autoclimb-N7P6KIF5.js} +1 -1
- package/chunks/{exploit-climb-PYEJDIC4.js → exploit-climb-WNEJUB5W.js} +2 -2
- package/chunks/fix-Z452M4EC.js +26 -0
- package/chunks/{harness-GDUMKGSE.js → harness-QJJJVSG4.js} +3 -3
- package/chunks/{hunt-scan-UDJSCISU.js → hunt-scan-K6D2V3PX.js} +14 -14
- package/chunks/{identity-JTIVJSV7.js → identity-62SVRW4H.js} +1 -1
- package/chunks/{kernel-primitive-F2IXUFAX.js → kernel-primitive-TKUACPKD.js} +2 -2
- package/chunks/{kernel-vm-runner-276LHIOV.js → kernel-vm-runner-RAAO2PGT.js} +2 -2
- package/chunks/{memsafety-scan-NHUOGTEX.js → memsafety-scan-FCPAXIZE.js} +2 -2
- package/chunks/{native-loop-3BSYVDUI.js → native-loop-2ZRJENZ3.js} +10 -10
- package/chunks/{npm-detectors-VIYJXKFQ.js → npm-detectors-Z2ZIQCN4.js} +2 -2
- package/chunks/orchestrate-2GWGNTBF.js +58 -0
- package/chunks/{process-PNMC36JI.js → process-N245QIQG.js} +1 -4
- package/chunks/{run-CBGE6DRQ.js → run-U3XU4CTC.js} +9940 -12572
- package/chunks/{runtime-PXO5G6UV.js → runtime-G75TEWQY.js} +4 -5
- package/chunks/{scope-NJHIDDTN.js → scope-WXI46UHJ.js} +4 -1
- package/chunks/{session-store-46WBZM22.js → session-store-27L3ZU73.js} +2 -2
- package/chunks/{variant-candidates-UH2WC2HA.js → variant-candidates-YWZORZMK.js} +3 -3
- package/chunks/{web-recon-prepass-SFXU44SS.js → web-recon-prepass-YVMFXCIK.js} +3 -3
- package/cli-path-traversal-fixture.js +352 -0
- package/dashboard/assets/bot-Bg1Tp9_d.js +1 -0
- package/dashboard/assets/dist-B_dDCPbu.js +1 -0
- package/dashboard/assets/findings-page-mayGhNx6.js +5 -0
- package/dashboard/assets/format--susmHX7.js +1 -0
- package/dashboard/assets/input-TuVPR3Zl.js +1 -0
- package/dashboard/assets/jsx-runtime-MGseXjj5.js +3 -0
- package/dashboard/assets/live-page-HWWHX99U.js +1 -0
- package/dashboard/assets/meta-tile-ckHo-w7k.js +1 -0
- package/dashboard/assets/operations-BxZ0OoXO.js +10 -0
- package/dashboard/assets/operations-app-D3d35rgo.js +46 -0
- package/dashboard/assets/overview-page-W_4IteEr.js +1 -0
- package/dashboard/assets/page-header-Bw9AJgBV.js +1 -0
- package/dashboard/assets/scans-page-CgzVXHnn.js +1 -0
- package/dashboard/assets/siren-KQj8QAnJ.js +1 -0
- package/dashboard/assets/table-8EDklulN.js +1 -0
- package/dashboard/assets/tabs-CFHPOwg8.js +1 -0
- package/dashboard/index.html +2 -3
- package/node_modules/node-addon-api/LICENSE.md +9 -0
- package/node_modules/node-addon-api/README.md +95 -0
- package/node_modules/node-addon-api/common.gypi +21 -0
- package/node_modules/node-addon-api/except.gypi +25 -0
- package/node_modules/node-addon-api/index.js +14 -0
- package/node_modules/node-addon-api/napi-inl.deprecated.h +186 -0
- package/node_modules/node-addon-api/napi-inl.h +7250 -0
- package/node_modules/node-addon-api/napi.h +3463 -0
- package/node_modules/node-addon-api/node_addon_api.gyp +42 -0
- package/node_modules/node-addon-api/node_api.gyp +9 -0
- package/node_modules/node-addon-api/noexcept.gypi +26 -0
- package/node_modules/node-addon-api/nothing.c +0 -0
- package/node_modules/node-addon-api/package-support.json +21 -0
- package/node_modules/node-addon-api/package.json +481 -0
- package/node_modules/node-addon-api/tools/README.md +73 -0
- package/node_modules/node-addon-api/tools/check-napi.js +99 -0
- package/node_modules/node-addon-api/tools/clang-format.js +71 -0
- package/node_modules/node-addon-api/tools/conversion.js +301 -0
- package/node_modules/node-gyp-build/LICENSE +21 -0
- package/node_modules/node-gyp-build/README.md +58 -0
- package/node_modules/node-gyp-build/SECURITY.md +5 -0
- package/node_modules/node-gyp-build/bin.js +84 -0
- package/node_modules/node-gyp-build/build-test.js +19 -0
- package/node_modules/node-gyp-build/index.js +6 -0
- package/node_modules/node-gyp-build/node-gyp-build.js +207 -0
- package/node_modules/node-gyp-build/optional.js +7 -0
- package/node_modules/node-gyp-build/package.json +43 -0
- package/node_modules/tree-sitter/LICENSE +21 -0
- package/node_modules/tree-sitter/README.md +90 -0
- package/node_modules/tree-sitter/binding.gyp +76 -0
- package/node_modules/tree-sitter/index.js +895 -0
- package/node_modules/tree-sitter/package.json +62 -0
- package/node_modules/tree-sitter/prebuilds/darwin-arm64/tree-sitter.node +0 -0
- package/node_modules/tree-sitter/prebuilds/darwin-x64/tree-sitter.node +0 -0
- package/node_modules/tree-sitter/prebuilds/linux-x64/tree-sitter.node +0 -0
- package/node_modules/tree-sitter/prebuilds/win32-x64/tree-sitter.node +0 -0
- package/node_modules/tree-sitter/src/addon_data.h +47 -0
- package/node_modules/tree-sitter/src/binding.cc +35 -0
- package/node_modules/tree-sitter/src/conversions.cc +140 -0
- package/node_modules/tree-sitter/src/conversions.h +22 -0
- package/node_modules/tree-sitter/src/language.cc +106 -0
- package/node_modules/tree-sitter/src/language.h +17 -0
- package/node_modules/tree-sitter/src/logger.cc +70 -0
- package/node_modules/tree-sitter/src/logger.h +19 -0
- package/node_modules/tree-sitter/src/lookaheaditerator.cc +122 -0
- package/node_modules/tree-sitter/src/lookaheaditerator.h +33 -0
- package/node_modules/tree-sitter/src/node.cc +1056 -0
- package/node_modules/tree-sitter/src/node.h +30 -0
- package/node_modules/tree-sitter/src/parser.cc +298 -0
- package/node_modules/tree-sitter/src/parser.h +35 -0
- package/node_modules/tree-sitter/src/query.cc +383 -0
- package/node_modules/tree-sitter/src/query.h +39 -0
- package/node_modules/tree-sitter/src/tree.cc +307 -0
- package/node_modules/tree-sitter/src/tree.h +45 -0
- package/node_modules/tree-sitter/src/tree_cursor.cc +213 -0
- package/node_modules/tree-sitter/src/tree_cursor.h +52 -0
- package/node_modules/tree-sitter/tree-sitter.d.ts +211 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/LICENSE +21 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/README.md +21 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/README.md +6 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/include/tree_sitter/api.h +1266 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/alloc.c +48 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/alloc.h +41 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/array.h +290 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/atomic.h +68 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/clock.h +146 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/error_costs.h +11 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/get_changed_ranges.c +501 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/get_changed_ranges.h +36 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/host.h +21 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/language.c +221 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/language.h +299 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/length.h +52 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/lexer.c +419 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/lexer.h +49 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/lib.c +14 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/node.c +774 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/parser.c +2151 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/parser.h +230 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/point.h +62 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/query.c +4134 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/reduce_action.h +34 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/reusable_node.h +95 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/stack.c +899 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/stack.h +133 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/subtree.c +1060 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/subtree.h +382 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/tree.c +165 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/tree.h +31 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/tree_cursor.c +714 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/tree_cursor.h +48 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/unicode/ICU_SHA +1 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/unicode/LICENSE +414 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/unicode/README.md +29 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/unicode/ptypes.h +1 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/unicode/umachine.h +448 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/unicode/urename.h +1 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/unicode/utf.h +1 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/unicode/utf16.h +733 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/unicode/utf8.h +881 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/unicode.h +50 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/wasm/stdlib-symbols.txt +23 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/wasm/stdlib.c +109 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/wasm/wasm-stdlib.h +1294 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/wasm_store.c +1823 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/lib/src/wasm_store.h +31 -0
- package/node_modules/tree-sitter/vendor/tree-sitter/test/fixtures/grammars/.gitkeep +0 -0
- package/node_modules/tree-sitter-c/LICENSE +21 -0
- package/node_modules/tree-sitter-c/README.md +18 -0
- package/node_modules/tree-sitter-c/binding.gyp +20 -0
- package/node_modules/tree-sitter-c/bindings/node/binding.cc +20 -0
- package/node_modules/tree-sitter-c/bindings/node/index.d.ts +28 -0
- package/node_modules/tree-sitter-c/bindings/node/index.js +7 -0
- package/node_modules/tree-sitter-c/grammar.js +1463 -0
- package/node_modules/tree-sitter-c/package.json +108 -0
- package/node_modules/tree-sitter-c/prebuilds/darwin-arm64/tree-sitter-c.node +0 -0
- package/node_modules/tree-sitter-c/prebuilds/darwin-x64/tree-sitter-c.node +0 -0
- package/node_modules/tree-sitter-c/prebuilds/linux-x64/tree-sitter-c.node +0 -0
- package/node_modules/tree-sitter-c/prebuilds/win32-x64/tree-sitter-c.node +0 -0
- package/node_modules/tree-sitter-c/queries/highlights.scm +81 -0
- package/node_modules/tree-sitter-c/queries/tags.scm +9 -0
- package/node_modules/tree-sitter-c/src/grammar.json +9682 -0
- package/node_modules/tree-sitter-c/src/node-types.json +4556 -0
- package/node_modules/tree-sitter-c/src/parser.c +113852 -0
- package/node_modules/tree-sitter-c/src/tree_sitter/alloc.h +54 -0
- package/node_modules/tree-sitter-c/src/tree_sitter/array.h +290 -0
- package/node_modules/tree-sitter-c/src/tree_sitter/parser.h +265 -0
- package/package.json +10 -3
- package/vendor/tree-sitter-0.21.1-node24.json +16 -0
- package/vendor/tree-sitter-0.21.1-node24.tgz +0 -0
- package/chunks/chunk-CGHCEN7W.js +0 -169
- package/chunks/chunk-CXKDWFNO.js +0 -102
- package/chunks/chunk-GIQKESMN.js +0 -687
- package/chunks/chunk-HPQZHOIU.js +0 -67
- package/chunks/chunk-PD2BBBKT.js +0 -245
- package/chunks/chunk-WF5W75WY.js +0 -1070
- package/chunks/fix-J2KBRJDV.js +0 -12
- package/chunks/orchestrate-DHBFRTSI.js +0 -59
- package/chunks/replay-runner-LK2XFIVG.js +0 -39
- package/dashboard/assets/bot-yILPnRgD.js +0 -1
- package/dashboard/assets/chevron-down-BeDJ-Vka.js +0 -1
- package/dashboard/assets/circle-alert-BEnMBMT-.js +0 -1
- package/dashboard/assets/client-DRYsuOGl.js +0 -9
- package/dashboard/assets/copy-Bi5vzoF9.js +0 -1
- package/dashboard/assets/desktop-BT7RkC4q.js +0 -32
- package/dashboard/assets/desktop-OaBI0E0e.css +0 -1
- package/dashboard/assets/dist-CmX-h7a4.js +0 -1
- package/dashboard/assets/dist-DAwYQmf_.js +0 -45
- package/dashboard/assets/findings-page-B4rwF6fZ.js +0 -5
- package/dashboard/assets/format-LNQSSpn6.js +0 -1
- package/dashboard/assets/jsx-runtime-C7oxC63R.js +0 -1
- package/dashboard/assets/live-page-DoNwpPAO.js +0 -1
- package/dashboard/assets/meta-tile-BMtBC-Qq.js +0 -1
- package/dashboard/assets/operations-app-ER0gg7GN.js +0 -2
- package/dashboard/assets/operations-e2CGYKB1.js +0 -4
- package/dashboard/assets/overview-page-CmeWH17A.js +0 -1
- package/dashboard/assets/page-header-CIJyycfz.js +0 -1
- package/dashboard/assets/play-Dwo-9xt6.js +0 -1
- package/dashboard/assets/scans-page-CuhzWhHx.js +0 -1
- package/dashboard/assets/search-CiooTLck.js +0 -1
- package/dashboard/assets/siren-CCBwTSuk.js +0 -1
- package/dashboard/assets/table-BgsSBdke.js +0 -1
- package/dashboard/assets/tabs-vn6v7Bk6.js +0 -1
- package/dashboard/desktop.html +0 -21
|
@@ -96,8 +96,7 @@ var CHILD_ENV_ALLOWLIST = [
|
|
|
96
96
|
"AUTH_CURL_FLAG",
|
|
97
97
|
// Existing child-runtime configuration contract; each name is non-secret.
|
|
98
98
|
"ZERO_FEATURE_JIT_SKILLS",
|
|
99
|
-
"ZERO_BASH_TIMEOUT_MS"
|
|
100
|
-
"ZERO_CLOUD_SCAN_ID"
|
|
99
|
+
"ZERO_BASH_TIMEOUT_MS"
|
|
101
100
|
];
|
|
102
101
|
function allowlistedChildEnv(extras = {}, env = process.env) {
|
|
103
102
|
const out = {};
|
|
@@ -3,10 +3,10 @@ import { createRequire as __0CreateRequire } from "node:module";
|
|
|
3
3
|
const require = __0CreateRequire(import.meta.url);
|
|
4
4
|
import {
|
|
5
5
|
ProcessRuntime
|
|
6
|
-
} from "./chunk-
|
|
6
|
+
} from "./chunk-W6UWZFKL.js";
|
|
7
7
|
import {
|
|
8
8
|
LlmApiRuntime
|
|
9
|
-
} from "./chunk-
|
|
9
|
+
} from "./chunk-2GV4HQKE.js";
|
|
10
10
|
|
|
11
11
|
// packages/core/dist/runtime/cli-native.js
|
|
12
12
|
import { spawn } from "node:child_process";
|
|
@@ -806,7 +806,7 @@ function pickRuntimeForStage(stage, availableRuntimes) {
|
|
|
806
806
|
return first.done ? "claude" : first.value;
|
|
807
807
|
}
|
|
808
808
|
async function detectAvailableRuntimes() {
|
|
809
|
-
const { ProcessRuntime: ProcessRuntime2 } = await import("./process-
|
|
809
|
+
const { ProcessRuntime: ProcessRuntime2 } = await import("./process-N245QIQG.js");
|
|
810
810
|
const available = /* @__PURE__ */ new Set();
|
|
811
811
|
const checks = RUNTIME_REGISTRY.map(async (info) => {
|
|
812
812
|
const rt = new ProcessRuntime2({ type: info.type, timeout: 5e3 });
|
|
@@ -45,7 +45,7 @@ import { fileURLToPath } from "node:url";
|
|
|
45
45
|
import { dirname, join } from "node:path";
|
|
46
46
|
function loadVersion() {
|
|
47
47
|
if (true) {
|
|
48
|
-
return "0.
|
|
48
|
+
return "0.22.0";
|
|
49
49
|
}
|
|
50
50
|
try {
|
|
51
51
|
const here = dirname(fileURLToPath(import.meta.url));
|
|
@@ -89,6 +89,9 @@ function meetsSeverityFloor(severity, floor = DEFAULT_SEVERITY_FLOOR) {
|
|
|
89
89
|
// packages/shared/dist/pricing.oss.generated.js
|
|
90
90
|
var OSS_PRICING = {
|
|
91
91
|
"gpt-6-astra": { input: 10, output: 50, cachedInput: 1 },
|
|
92
|
+
"gpt-6-sol": { input: 2, output: 10, cachedInput: 0.2 },
|
|
93
|
+
"gpt-6.1-sol": { input: 2, output: 10, cachedInput: 0.1 },
|
|
94
|
+
"gpt-6-luna": { input: 0.1, output: 0.5, cachedInput: 0.01 },
|
|
92
95
|
"claude-fable-5-1": { input: 10, output: 50, cachedInput: 0.25 },
|
|
93
96
|
"claude-opus-5": { input: 5, output: 25, cachedInput: 0.5 },
|
|
94
97
|
"claude-sonnet-5": { input: 2, output: 10, cachedInput: 0.2 },
|
|
@@ -111,13 +114,12 @@ var OSS_PRICING = {
|
|
|
111
114
|
"o4-mini": { input: 1.1, output: 4.4, cachedInput: 0.275 },
|
|
112
115
|
"gemini-2.5-pro": { input: 1.25, output: 10, cachedInput: 0.125 },
|
|
113
116
|
"gemini-2.5-flash": { input: 0.3, output: 2.5, cachedInput: 0.03 },
|
|
114
|
-
"gemini-2.0-flash": { input: 0.1, output: 0.4, cachedInput: 0.025 },
|
|
115
117
|
"deepseek-chat": { input: 0.28, output: 0.42, cachedInput: 0.028 },
|
|
116
118
|
"deepseek-reasoner": { input: 0.28, output: 0.42, cachedInput: 0.028 }
|
|
117
119
|
};
|
|
118
120
|
|
|
119
121
|
// packages/shared/dist/pricing.js
|
|
120
|
-
var PRICING_SNAPSHOT_DATE = "2026-09-
|
|
122
|
+
var PRICING_SNAPSHOT_DATE = "2026-09-29";
|
|
121
123
|
var MANUAL_PRICING = {
|
|
122
124
|
// Anthropic (versioned; LiteLLM keys use different suffixes → keep manual)
|
|
123
125
|
"claude-opus-4-7": { input: 5, output: 25, cachedInput: 0.5 },
|
|
@@ -126,6 +128,8 @@ var MANUAL_PRICING = {
|
|
|
126
128
|
"claude-haiku-4-5": { input: 0.8, output: 4, cachedInput: 0.08 },
|
|
127
129
|
// OpenAI codex alias — mirrors gpt-5.5 (OSS feed has only the bare key)
|
|
128
130
|
"gpt-5.5-codex": { input: 5, output: 30 },
|
|
131
|
+
// LiteLLM no longer carries this exact key; retain its last published rate.
|
|
132
|
+
"gemini-2.0-flash": { input: 0.1, output: 0.4, cachedInput: 0.025 },
|
|
129
133
|
// Meta (hosted) — not in the OSS feed
|
|
130
134
|
"llama-4-maverick": { input: 0.5, output: 0.77 },
|
|
131
135
|
"llama-4-scout": { input: 0.2, output: 0.35 },
|
|
@@ -218,6 +222,18 @@ var MODEL_PRICING = {
|
|
|
218
222
|
...MANUAL_PRICING,
|
|
219
223
|
...OSS_PRICING
|
|
220
224
|
};
|
|
225
|
+
var DISCOVERED_PRICING = /* @__PURE__ */ new Map();
|
|
226
|
+
function registerModelPricing(model, rates) {
|
|
227
|
+
if (!model || model !== model.trim() || /[\s\x00-\x1f\x7f]/.test(model) || Object.hasOwn(MODEL_PRICING, model) || !Number.isFinite(rates.input) || rates.input < 0 || !Number.isFinite(rates.output) || rates.output < 0 || rates.cachedInput !== void 0 && (!Number.isFinite(rates.cachedInput) || rates.cachedInput < 0)) {
|
|
228
|
+
return false;
|
|
229
|
+
}
|
|
230
|
+
DISCOVERED_PRICING.set(model, Object.freeze({
|
|
231
|
+
input: rates.input,
|
|
232
|
+
output: rates.output,
|
|
233
|
+
...rates.cachedInput !== void 0 ? { cachedInput: rates.cachedInput } : {}
|
|
234
|
+
}));
|
|
235
|
+
return true;
|
|
236
|
+
}
|
|
221
237
|
var AZURE_DEPLOYMENT_PRICE_ALIASES = /* @__PURE__ */ new Map([
|
|
222
238
|
["deepseek-v4-pro", "DeepSeek-V4-Pro"],
|
|
223
239
|
["deepseek-v4-flash", "DeepSeek-V4-Flash"],
|
|
@@ -238,31 +254,43 @@ function azureDeploymentPriceKey(model) {
|
|
|
238
254
|
}
|
|
239
255
|
return null;
|
|
240
256
|
}
|
|
257
|
+
var MODEL_VENDOR_PREFIXES = [
|
|
258
|
+
"openai/",
|
|
259
|
+
"azure/",
|
|
260
|
+
"anthropic/",
|
|
261
|
+
"google/",
|
|
262
|
+
"deepseek/",
|
|
263
|
+
"meta/",
|
|
264
|
+
"mistral/",
|
|
265
|
+
"z-ai/",
|
|
266
|
+
"zai/",
|
|
267
|
+
"kimi/",
|
|
268
|
+
"moonshot/",
|
|
269
|
+
"qwen/",
|
|
270
|
+
"openrouter/",
|
|
271
|
+
"opencode/",
|
|
272
|
+
"xai/",
|
|
273
|
+
"x-ai/"
|
|
274
|
+
];
|
|
241
275
|
function normalizeModel(model) {
|
|
242
|
-
|
|
243
|
-
|
|
244
|
-
|
|
245
|
-
|
|
246
|
-
|
|
247
|
-
|
|
248
|
-
|
|
249
|
-
|
|
250
|
-
|
|
251
|
-
|
|
252
|
-
|
|
253
|
-
|
|
254
|
-
"opencode/"
|
|
255
|
-
];
|
|
256
|
-
for (const prefix of prefixes) {
|
|
257
|
-
if (model.startsWith(prefix))
|
|
258
|
-
return model.slice(prefix.length);
|
|
276
|
+
let key = model;
|
|
277
|
+
for (; ; ) {
|
|
278
|
+
let stripped = false;
|
|
279
|
+
for (const prefix of MODEL_VENDOR_PREFIXES) {
|
|
280
|
+
if (!key.startsWith(prefix))
|
|
281
|
+
continue;
|
|
282
|
+
key = key.slice(prefix.length);
|
|
283
|
+
stripped = true;
|
|
284
|
+
break;
|
|
285
|
+
}
|
|
286
|
+
if (!stripped)
|
|
287
|
+
return key;
|
|
259
288
|
}
|
|
260
|
-
return model;
|
|
261
289
|
}
|
|
262
290
|
function getRates(model) {
|
|
263
291
|
const key = model ? normalizeModel(model) : "";
|
|
264
292
|
const aliasKey = azureDeploymentPriceKey(key);
|
|
265
|
-
const rates = MODEL_PRICING[key] ?? (aliasKey ? MODEL_PRICING[aliasKey] : void 0);
|
|
293
|
+
const rates = (model && Object.hasOwn(MODEL_PRICING, model) ? MODEL_PRICING[model] : void 0) ?? (model ? DISCOVERED_PRICING.get(model) : void 0) ?? (Object.hasOwn(MODEL_PRICING, key) ? MODEL_PRICING[key] : void 0) ?? (aliasKey ? MODEL_PRICING[aliasKey] : void 0) ?? DISCOVERED_PRICING.get(key);
|
|
266
294
|
if (!rates) {
|
|
267
295
|
if (model)
|
|
268
296
|
console.warn(`[0] Unknown model for cost estimation: ${model}`);
|
|
@@ -286,6 +314,8 @@ function modelProvider(model) {
|
|
|
286
314
|
const lowered = model.toLowerCase();
|
|
287
315
|
if (lowered.startsWith("openai/"))
|
|
288
316
|
return "openai";
|
|
317
|
+
if (lowered.startsWith("azure/"))
|
|
318
|
+
return "azure";
|
|
289
319
|
if (lowered.startsWith("anthropic/"))
|
|
290
320
|
return "anthropic";
|
|
291
321
|
if (lowered.startsWith("google/"))
|
|
@@ -359,7 +389,7 @@ var VerificationModeSchema = external_exports.enum([
|
|
|
359
389
|
"deterministic_replay",
|
|
360
390
|
"agent_assisted"
|
|
361
391
|
]);
|
|
362
|
-
var RunnerKindSchema = external_exports.enum(["local", "docker", "qemu"]);
|
|
392
|
+
var RunnerKindSchema = external_exports.enum(["local", "smolvm", "docker", "qemu"]);
|
|
363
393
|
var EngineMetadataSchema = external_exports.object({
|
|
364
394
|
os: external_exports.string(),
|
|
365
395
|
arch: external_exports.string(),
|
|
@@ -370,7 +400,9 @@ var VerificationCommandSchema = external_exports.object({
|
|
|
370
400
|
exit_code: external_exports.number().int().nullable(),
|
|
371
401
|
stdout_excerpt: external_exports.string().optional(),
|
|
372
402
|
stderr_excerpt: external_exports.string().optional(),
|
|
373
|
-
duration_ms: external_exports.number().nonnegative()
|
|
403
|
+
duration_ms: external_exports.number().nonnegative(),
|
|
404
|
+
timed_out: external_exports.boolean().optional(),
|
|
405
|
+
cancelled: external_exports.boolean().optional()
|
|
374
406
|
});
|
|
375
407
|
var AssertionKindSchema = external_exports.enum([
|
|
376
408
|
"file_exists",
|
|
@@ -841,10 +873,10 @@ function researchPlatformLpeDisclosureReady(envelope, platform) {
|
|
|
841
873
|
// packages/shared/dist/paths.js
|
|
842
874
|
import { homedir } from "node:os";
|
|
843
875
|
import { join as join2 } from "node:path";
|
|
844
|
-
function homeStateDir(home = homedir()) {
|
|
876
|
+
function homeStateDir(home = process.env.HOME || homedir()) {
|
|
845
877
|
return join2(home, ".0");
|
|
846
878
|
}
|
|
847
|
-
function cloudStateDir(home = homedir(), env = process.env) {
|
|
879
|
+
function cloudStateDir(home = process.env.HOME || homedir(), env = process.env) {
|
|
848
880
|
const state = homeStateDir(home);
|
|
849
881
|
return env["ZERO_DEV_SOURCE_ROOT"]?.trim() ? join2(state, "dev") : state;
|
|
850
882
|
}
|
|
@@ -1217,6 +1249,7 @@ export {
|
|
|
1217
1249
|
PRICING_SNAPSHOT_DATE,
|
|
1218
1250
|
MANUAL_PRICING,
|
|
1219
1251
|
MODEL_PRICING,
|
|
1252
|
+
registerModelPricing,
|
|
1220
1253
|
getRates,
|
|
1221
1254
|
estimateCost,
|
|
1222
1255
|
priceRun,
|