0sec-cli 0.22.0 → 0.22.1

package/0.js

@@ -5,7 +5,7 @@ import {
   Command,
   launchConfiguredWorkbench,
   runStartupUpdate
-} from "./chunks/chunk-7UFUALR2.js";
+} from "./chunks/chunk-V6GHX34G.js";
 import {
   resolveEngagement,
   setHerdrSink
@@ -16,64 +16,64 @@ import {
   installProcessPresentationStreamBridge,
   maybeLoadCodexAuth,
   presentationEventBus
-} from "./chunks/chunk-YIQSGNAA.js";
+} from "./chunks/chunk-GOEA3NW6.js";
 import {
   createHerdrEventSink,
   maybeSubscribeOperationalEventSink
-} from "./chunks/chunk-EGZGZFAH.js";
-import "./chunks/chunk-LYUAM3TG.js";
+} from "./chunks/chunk-LGCASF2C.js";
+import "./chunks/chunk-XCISCI4T.js";
 import {
   source_default
 } from "./chunks/chunk-HLFS6WV2.js";
 import "./chunks/chunk-QCUFBVIZ.js";
-import "./chunks/chunk-RSIUX3RW.js";
+import "./chunks/chunk-3E2KALZ5.js";
 import "./chunks/chunk-TM74SSHC.js";
 import "./chunks/chunk-2WNCI664.js";
 import "./chunks/chunk-23DG5YKS.js";
 import "./chunks/chunk-DQTNI3KY.js";
-import "./chunks/chunk-VMRRNRMR.js";
-import "./chunks/chunk-DM5C5L5D.js";
-import "./chunks/chunk-RRD4XXPU.js";
-import "./chunks/chunk-HUNAPTKV.js";
+import "./chunks/chunk-7XCKYNLO.js";
+import "./chunks/chunk-ZKQ2I3S2.js";
+import "./chunks/chunk-CPWA6RWE.js";
+import "./chunks/chunk-4G7OVYJX.js";
 import "./chunks/chunk-AZ7L3HFD.js";
-import "./chunks/chunk-UU7PQP6N.js";
-import "./chunks/chunk-UV5QWZGE.js";
-import "./chunks/chunk-SJBCK2EI.js";
+import "./chunks/chunk-OSBPGWTE.js";
+import "./chunks/chunk-5BTJMINS.js";
+import "./chunks/chunk-HHPWRY2M.js";
 import "./chunks/chunk-K2PWUPUI.js";
-import "./chunks/chunk-TZFIAMWZ.js";
+import "./chunks/chunk-YL6YAGLL.js";
 import "./chunks/chunk-2OQOQ2FZ.js";
 import "./chunks/chunk-UEX7PFSE.js";
-import "./chunks/chunk-OAYUPGF6.js";
-import "./chunks/chunk-XFCTUKXR.js";
-import "./chunks/chunk-HR2TU42B.js";
+import "./chunks/chunk-NLH4LMWH.js";
+import "./chunks/chunk-WZRVS7SB.js";
+import "./chunks/chunk-XA2O4WXA.js";
 import {
   analyticsPipeline,
   configureRunContributionsFromEnvironment,
   eventBus,
   presentationEventSink
-} from "./chunks/chunk-RE5EZDG2.js";
+} from "./chunks/chunk-OHHCGDJ2.js";
 import "./chunks/chunk-SQCBHFWN.js";
 import "./chunks/chunk-GVD6SJGH.js";
-import "./chunks/chunk-5MWAG3FT.js";
+import "./chunks/chunk-IFME676H.js";
 import "./chunks/chunk-W6UWZFKL.js";
 import "./chunks/chunk-FHC2B7LN.js";
 import "./chunks/chunk-DKSCN2AB.js";
 import "./chunks/chunk-UFHN6RIU.js";
-import "./chunks/chunk-VNRY6AWF.js";
+import "./chunks/chunk-VWITLWXB.js";
 import "./chunks/chunk-TO35Y326.js";
 import "./chunks/chunk-IXT64DV5.js";
 import "./chunks/chunk-UELXHK2Y.js";
-import "./chunks/chunk-LPTRPRZR.js";
+import "./chunks/chunk-XDKB2P5X.js";
 import "./chunks/chunk-V36HVTUL.js";
 import "./chunks/chunk-4VGLO2YS.js";
 import "./chunks/chunk-6YNKRUMC.js";
-import "./chunks/chunk-7DEHG7YT.js";
+import "./chunks/chunk-X7LAEEUW.js";
 import "./chunks/chunk-5IBCBQEH.js";
-import "./chunks/chunk-IO7R7WBM.js";
-import "./chunks/chunk-2GV4HQKE.js";
+import "./chunks/chunk-WSDDGFA6.js";
+import "./chunks/chunk-AV2LG2L7.js";
 import {
   VERSION
-} from "./chunks/chunk-76KSBWOQ.js";
+} from "./chunks/chunk-KAU6NLGP.js";
 import "./chunks/chunk-VIT5ALXF.js";
 import "./chunks/chunk-VCSFCHAJ.js";
 
@@ -99,7 +99,7 @@ import { fileURLToPath } from "node:url";
 var BYPASS_ENV = "ZERO_ALLOW_STALE_SOURCE_DIST";
 function currentBuildCommit() {
   if (true) {
-    return "b6570dfd5d65a2c97a14cfb1432c4f7b975fb411";
+    return "d29fd0b05ad8414024f6f030e31a8155c467ef96";
   }
   return void 0;
 }
@@ -215,7 +215,7 @@ setHerdrSink(herdrSink);
 enforceSourceDistFreshness({ entryUrl: import.meta.url });
 if (!isWorkbenchManagement) await runStartupUpdate(VERSION);
 async function buildProgram() {
-  const c = await import("./chunks/commands-NEI7L3QA.js");
+  const c = await import("./chunks/commands-N6GN5SBF.js");
   const program = new Command();
   program.name("0").description("Open-source multi-model security research harness").version(VERSION).enablePositionalOptions();
   c.registerScanCommand(program);
@@ -279,7 +279,7 @@ async function buildProgram() {
 async function showInteractiveMenu() {
   const { isBunRuntime } = await import("./chunks/runtime-XFWJTBUO.js");
   if (isBunRuntime()) {
-    const { showOpenTuiHome } = await import("./chunks/run-U3XU4CTC.js");
+    const { showOpenTuiHome } = await import("./chunks/run-GAFKBCTN.js");
     await showOpenTuiHome();
     return;
   }

package/chunks/{adapt-loop-7I57LXXR.js → adapt-loop-J6QCZZTB.js}

@@ -5,10 +5,10 @@ import {
   adaptAndVerify,
   applyUnifiedDiff,
   renderAdaptationPrompt
-} from "./chunk-RRD4XXPU.js";
-import "./chunk-OAYUPGF6.js";
-import "./chunk-XFCTUKXR.js";
-import "./chunk-76KSBWOQ.js";
+} from "./chunk-CPWA6RWE.js";
+import "./chunk-NLH4LMWH.js";
+import "./chunk-WZRVS7SB.js";
+import "./chunk-KAU6NLGP.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {

package/chunks/{artifact-scraper-PYZ3RU3O.js → artifact-scraper-MFKT6OI4.js}

@@ -14,8 +14,8 @@ import {
   parseUbuntuTracker,
   scoreCodeCandidate,
   scoreRepoCandidate
-} from "./chunk-LPTRPRZR.js";
-import "./chunk-76KSBWOQ.js";
+} from "./chunk-XDKB2P5X.js";
+import "./chunk-KAU6NLGP.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {

package/chunks/{assumption-mining-MFLF43IR.js → assumption-mining-646LYSJY.js}

@@ -24,29 +24,29 @@ import {
   scoreDualViewWeaponizability,
   storeAssumptionModel,
   subjectSelfEnforces
-} from "./chunk-UU7PQP6N.js";
+} from "./chunk-OSBPGWTE.js";
 import {
   composeGate,
   makeSkepticVerifier
-} from "./chunk-UV5QWZGE.js";
-import "./chunk-SJBCK2EI.js";
+} from "./chunk-5BTJMINS.js";
+import "./chunk-HHPWRY2M.js";
 import "./chunk-K2PWUPUI.js";
-import "./chunk-TZFIAMWZ.js";
+import "./chunk-YL6YAGLL.js";
 import "./chunk-2OQOQ2FZ.js";
 import "./chunk-UEX7PFSE.js";
-import "./chunk-OAYUPGF6.js";
-import "./chunk-XFCTUKXR.js";
-import "./chunk-RE5EZDG2.js";
-import "./chunk-5MWAG3FT.js";
+import "./chunk-NLH4LMWH.js";
+import "./chunk-WZRVS7SB.js";
+import "./chunk-OHHCGDJ2.js";
+import "./chunk-IFME676H.js";
 import "./chunk-W6UWZFKL.js";
-import "./chunk-VNRY6AWF.js";
+import "./chunk-VWITLWXB.js";
 import "./chunk-IXT64DV5.js";
 import "./chunk-UELXHK2Y.js";
 import "./chunk-4VGLO2YS.js";
-import "./chunk-7DEHG7YT.js";
+import "./chunk-X7LAEEUW.js";
 import "./chunk-5IBCBQEH.js";
-import "./chunk-2GV4HQKE.js";
-import "./chunk-76KSBWOQ.js";
+import "./chunk-AV2LG2L7.js";
+import "./chunk-KAU6NLGP.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {

package/chunks/{chunk-RSIUX3RW.js → chunk-3E2KALZ5.js}

@@ -4,10 +4,10 @@ const require = __0CreateRequire(import.meta.url);
 import {
   getToolsForRole,
   runNativeAgentLoop
-} from "./chunk-SJBCK2EI.js";
+} from "./chunk-HHPWRY2M.js";
 import {
   LlmApiRuntime
-} from "./chunk-2GV4HQKE.js";
+} from "./chunk-AV2LG2L7.js";
 
 // packages/core/dist/eval-runner.js
 import { randomUUID } from "node:crypto";

package/chunks/{chunk-HUNAPTKV.js → chunk-4G7OVYJX.js}

@@ -3,7 +3,7 @@ import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
   LlmApiRuntime
-} from "./chunk-2GV4HQKE.js";
+} from "./chunk-AV2LG2L7.js";
 
 // packages/core/dist/stages/variant-candidates.js
 import { execFileSync } from "node:child_process";

package/chunks/{chunk-UV5QWZGE.js → chunk-5BTJMINS.js}

@@ -15,36 +15,36 @@ import {
   registerSignalCleanup,
   runNativeAgentLoop,
   toolCallPreview
-} from "./chunk-SJBCK2EI.js";
+} from "./chunk-HHPWRY2M.js";
 import {
   WafDetector
-} from "./chunk-TZFIAMWZ.js";
+} from "./chunk-YL6YAGLL.js";
 import {
   RECIPE_LIBRARY
 } from "./chunk-UEX7PFSE.js";
 import {
   analyticsPipeline,
   reportUnsupportedContributionMode
-} from "./chunk-RE5EZDG2.js";
+} from "./chunk-OHHCGDJ2.js";
 import {
   createRuntime,
   detectAvailableRuntimes,
   pickRuntimeForStage
-} from "./chunk-5MWAG3FT.js";
+} from "./chunk-IFME676H.js";
 import {
   osecDB
-} from "./chunk-VNRY6AWF.js";
+} from "./chunk-VWITLWXB.js";
 import {
   CLI_RUNTIME_TYPES
 } from "./chunk-4VGLO2YS.js";
 import {
   LlmApiRuntime,
   features
-} from "./chunk-2GV4HQKE.js";
+} from "./chunk-AV2LG2L7.js";
 import {
   estimateCost,
   modelProvider
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-KAU6NLGP.js";
 import {
   external_exports
 } from "./chunk-VIT5ALXF.js";

package/chunks/{chunk-VMRRNRMR.js → chunk-7XCKYNLO.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-UEX7PFSE.js";
 import {
   runReproducerInKernelVm
-} from "./chunk-XFCTUKXR.js";
+} from "./chunk-WZRVS7SB.js";
 
 // packages/core/dist/kernel/exploit/harness.js
 import { existsSync } from "node:fs";

package/chunks/{chunk-2GV4HQKE.js → chunk-AV2LG2L7.js}

@@ -3,7 +3,7 @@ import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
   VERSION
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-KAU6NLGP.js";
 
 // packages/core/dist/agent/feature-presets.js
 var FP_MOAT_FLAGS = [
@@ -2666,7 +2666,7 @@ var LlmApiRuntime = class _LlmApiRuntime {
     const state = this.codexAuthState;
     if (this.provider !== "chatgpt-codex" || !state)
       throw new Error("No active Codex subscription");
-    const { loadCodexModelCatalog } = await import("./codex-models-7TLJSY3L.js");
+    const { loadCodexModelCatalog } = await import("./codex-models-NHQW45SO.js");
     return loadCodexModelCatalog({ signal, resolveCredentials: () => refreshChatGptCodexAuthState(state) });
   }
   /**

package/chunks/{chunk-CAYANSH6.js → chunk-BCSRRQG5.js}

@@ -5,11 +5,11 @@ import {
   isValidSessionId,
   listSessions,
   loadSession
-} from "./chunk-MICHDTBK.js";
+} from "./chunk-BOUGKEKA.js";
 import {
   getSettings,
   maybeLoadCodexAuth
-} from "./chunk-YIQSGNAA.js";
+} from "./chunk-GOEA3NW6.js";
 import {
   createConsoleJevRuntime,
   createConsoleSession,
@@ -21,22 +21,22 @@ import {
   retireArchetype,
   runLensSynthesisLoop,
   toToolContextJevRuntime
-} from "./chunk-EGZGZFAH.js";
+} from "./chunk-LGCASF2C.js";
 import {
   source_default
 } from "./chunk-HLFS6WV2.js";
 import {
   harvestMissesFromLedgerEntry,
   mergeHarvestedMisses
-} from "./chunk-SJBCK2EI.js";
+} from "./chunk-HHPWRY2M.js";
 import {
   eventBus
-} from "./chunk-RE5EZDG2.js";
+} from "./chunk-OHHCGDJ2.js";
 import {
   listOsecRunDatabasePaths,
   osecDB,
   resolveOsecDbPath
-} from "./chunk-VNRY6AWF.js";
+} from "./chunk-VWITLWXB.js";
 import {
   redactSensitiveHeaders
 } from "./chunk-UELXHK2Y.js";
@@ -49,12 +49,12 @@ import {
   findingSchema,
   formatZodError,
   severityRank
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-KAU6NLGP.js";
 
 // packages/cli/src/utils.ts
 import { gzipSync } from "zlib";
 async function getRuntimeAvailability() {
-  const { detectAvailableRuntimes, LlmApiRuntime } = await import("./dist-3FNZIBB4.js");
+  const { detectAvailableRuntimes, LlmApiRuntime } = await import("./dist-L3XJWWZ6.js");
   const apiRuntimeDiagnostics = new LlmApiRuntime({ type: "api", timeout: 5e3 }).getConfigurationDiagnostics();
   const hasApiKey = apiRuntimeDiagnostics.valid;
   const availableRuntimes = [...await detectAvailableRuntimes()];
@@ -2140,7 +2140,7 @@ async function loadCoreModule() {
   if (!coreModulePromise) {
     const srcUrl = new URL("../../../core/src/index.ts", import.meta.url);
     const srcExists = process.versions.bun && existsSync2(fileURLToPath(srcUrl));
-    coreModulePromise = srcExists ? import(srcUrl.href) : import("./dist-3FNZIBB4.js");
+    coreModulePromise = srcExists ? import(srcUrl.href) : import("./dist-L3XJWWZ6.js");
   }
   return coreModulePromise;
 }
@@ -2267,7 +2267,7 @@ async function runUnified(opts) {
       console.error(source_default.red("--branch-from requires --resume <run-id>"));
       process.exit(2);
     }
-    const { branchJournal } = await import("./dist-3FNZIBB4.js");
+    const { branchJournal } = await import("./dist-L3XJWWZ6.js");
     const result = branchJournal({
       runId: effectiveResumeScanId,
       fromEntry: opts.branchFromEntry
@@ -2324,7 +2324,7 @@ async function runUnified(opts) {
     } else {
       const { isBunRuntime } = await import("./runtime-XFWJTBUO.js");
       if (isBunRuntime()) {
-        const { createOpenTuiSession } = await import("./run-U3XU4CTC.js");
+        const { createOpenTuiSession } = await import("./run-GAFKBCTN.js");
         const availability = await getRuntimeAvailability();
         inkUI = await createOpenTuiSession({
           target,
@@ -2702,7 +2702,8 @@ var SLASH_COMMANDS = [
     aliases: ["caps"],
     category: "info",
     description: "Show the harness capability map and its safety gates",
-    usage: "/capabilities"
+    usage: "/capabilities",
+    tuiOnly: true
   },
   {
     name: "status",
@@ -2759,14 +2760,6 @@ var SLASH_COMMANDS = [
     usage: "/fix [finding-id] | /fix publish <finding-id> | /fix cancel",
     tuiOnly: true
   },
-  {
-    name: "impact",
-    aliases: [],
-    category: "session",
-    description: "Explain a finding's business impact and evidence-qualified potential chains",
-    usage: "/impact [finding-id]",
-    tuiOnly: true
-  },
   {
     name: "copy",
     aliases: ["export", "dump"],
@@ -2788,21 +2781,24 @@ var SLASH_COMMANDS = [
     aliases: ["eli5"],
     category: "session",
     description: "Explain like I'm five: short sentences and everyday words",
-    usage: "/explain [topic]"
+    usage: "/explain [topic]",
+    tuiOnly: true
   },
   {
     name: "feedback",
     aliases: [],
     category: "system",
     description: "Record feedback about 0 to a local file you control, with optional HTTPS submission",
-    usage: "/feedback <message> | /feedback submit <message> | /feedback send | /feedback cancel"
+    usage: "/feedback <message> | /feedback submit <message> | /feedback send | /feedback cancel",
+    tuiOnly: true
   },
   {
     name: "settings",
     aliases: ["config", "prefs"],
     category: "system",
     description: "Open settings; changes persist between sessions",
-    usage: "/settings"
+    usage: "/settings",
+    tuiOnly: true
   },
   {
     name: "keybindings",
@@ -2825,7 +2821,8 @@ var SLASH_COMMANDS = [
     aliases: ["models"],
     category: "session",
     description: "Show or select a model (TUI: applies to New chat)",
-    usage: "/model [id]"
+    usage: "/model [id]",
+    tuiOnly: true
   },
   // ── navigation ──────────────────────────────────────────────────────────
   {
@@ -2849,13 +2846,6 @@ var SLASH_COMMANDS = [
     description: "View active and recent operations",
     tuiOnly: true
   },
-  {
-    name: "comms",
-    aliases: ["messages"],
-    category: "navigation",
-    description: "Watch the agent fleet and the messages flowing between agents",
-    tuiOnly: true
-  },
   {
     name: "hackstore",
     aliases: ["store", "market", "marketplace"],

package/chunks/{chunk-MICHDTBK.js → chunk-BOUGKEKA.js}

@@ -3,7 +3,7 @@ import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
   homeStateDir
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-KAU6NLGP.js";
 
 // packages/cli/src/tui/session-store.ts
 import { chmodSync, mkdirSync, readdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";

package/chunks/{chunk-RRD4XXPU.js → chunk-CPWA6RWE.js}

@@ -3,13 +3,13 @@ import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
   createJournalWriter
-} from "./chunk-OAYUPGF6.js";
+} from "./chunk-NLH4LMWH.js";
 import {
   verifyKernelFinding
-} from "./chunk-XFCTUKXR.js";
+} from "./chunk-WZRVS7SB.js";
 import {
   homeStateDir
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-KAU6NLGP.js";
 
 // packages/core/dist/cve/adapt-loop.js
 import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";

package/chunks/{chunk-YIQSGNAA.js → chunk-GOEA3NW6.js}

@@ -7,12 +7,12 @@ import {
   levelAtLeast,
   loadCloudCredentials,
   resolveAnalyticsLevel
-} from "./chunk-RE5EZDG2.js";
+} from "./chunk-OHHCGDJ2.js";
 import {
   DEFAULT_ALLOW_MODEL_SELF_EXTENSION,
   createPresentationEvent,
   homeStateDir
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-KAU6NLGP.js";
 
 // packages/cli/src/tui/settings-store.ts
 import { useSyncExternalStore } from "react";
@@ -209,7 +209,7 @@ var KEYBINDINGS = [
     keys: "Ctrl+R",
     defaultChords: ["ctrl+r"],
     rebindable: true,
-    description: "Toggle the whole transcript between collapsed and expanded tool/reasoning detail (persists across the session).",
+    description: "Toggle folded tool/reasoning detail; output previews stay bounded until explicitly disclosed.",
     category: "View",
     handler: 'if (matchesBinding(key, "view.transcript-detail", \u2026)) updateSetting("transcriptDetail", \u2026)'
   },
@@ -1476,7 +1476,7 @@ var DEFS = [
   {
     key: "transcriptDetail",
     label: "Transcript detail",
-    description: "Collapsed folds successful tool/reasoning steps and caps output previews at 20 lines; Ctrl+R toggles between that preview and expanded retained detail. Failures always show.",
+    description: "Fold tool and reasoning steps. Output previews stay within 20 lines; click a card for retained detail.",
     kind: "enum",
     default: "collapsed",
     choices: ["collapsed", "expanded"],
@@ -1485,7 +1485,7 @@ var DEFS = [
   {
     key: "autoCompaction",
     label: "Auto-compaction",
-    description: "Automatically summarise older turns when the conversation nears the model's context window (the recap stays viewable with Ctrl+O).",
+    description: "Automatically summarise older turns when the conversation nears the model's context window.",
     kind: "boolean",
     default: true,
     group: "Context"