0sec-cli 0.22.0 → 0.22.4

package/chunks/{dist-5YHYNLI3.js → dist-7RUOKPRJ.js}

@@ -2,6 +2,10 @@
 import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
+  SecurityWorkflowStore,
+  SecurityWorkflowStoreError,
+  TRIGGER_INTERVAL_MS,
+  WorkflowTriggerStore,
   agentSessions,
   artifactKinds,
   artifacts,
@@ -13,6 +17,7 @@ import {
   findingTriageStatuses,
   findings,
   listOsecRunDatabasePaths,
+  nextWorkflowTriggerFire,
   osecDB,
   parseFindingReviewAnnotation,
   parseFindingVerificationResult,
@@ -34,11 +39,15 @@ import {
   workerStatuses,
   workers,
   writeOsecRunReport
-} from "./chunk-VNRY6AWF.js";
-import "./chunk-76KSBWOQ.js";
+} from "./chunk-L2CCO4KE.js";
+import "./chunk-6KFB6AYN.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {
+  SecurityWorkflowStore,
+  SecurityWorkflowStoreError,
+  TRIGGER_INTERVAL_MS,
+  WorkflowTriggerStore,
   agentSessions,
   artifactKinds,
   artifacts,
@@ -50,6 +59,7 @@ export {
   findingTriageStatuses,
   findings,
   listOsecRunDatabasePaths,
+  nextWorkflowTriggerFire,
   osecDB,
   parseFindingReviewAnnotation,
   parseFindingVerificationResult,

package/chunks/{dist-KEULE5IQ.js → dist-LNXGATR2.js}

@@ -66,7 +66,7 @@ import {
   validateTypes,
   withUserAgentSuffix,
   zodSchema
-} from "./chunk-TH2LW437.js";
+} from "./chunk-KCA35IL3.js";
 import {
   _enum,
   _instanceof,
@@ -85,7 +85,7 @@ import {
   string,
   union,
   unknown
-} from "./chunk-6YNKRUMC.js";
+} from "./chunk-NJLKFC66.js";
 import "./chunk-TRH2PJSN.js";
 import "./chunk-VCSFCHAJ.js";
 

package/chunks/{dist-XZB53PS5.js → dist-M2X367VW.js}

@@ -23,8 +23,8 @@ import {
   getGatewayRealtimeProtocols,
   getGatewayRealtimeTeamIdOrSlug,
   getGatewayTranscriptionProtocols
-} from "./chunk-TH2LW437.js";
-import "./chunk-6YNKRUMC.js";
+} from "./chunk-KCA35IL3.js";
+import "./chunk-NJLKFC66.js";
 import "./chunk-TRH2PJSN.js";
 import "./chunk-VCSFCHAJ.js";
 export {

package/chunks/{dist-DD4H6HMQ.js → dist-NG2HT5XU.js}

@@ -13,6 +13,7 @@ import {
   DEFAULT_AUTONOMY_MODE,
   DEFAULT_MAX_CONCURRENCY,
   DEFAULT_MODEL,
+  DEFAULT_SECURITY_WORKFLOW_PLAN,
   DEFAULT_SEVERITY_FLOOR,
   DEFAULT_TIMEOUT_MS,
   DEPTH_CONFIG,
@@ -25,8 +26,12 @@ import {
   PRESENTATION_PROTOCOL,
   PRICING_SNAPSHOT_DATE,
   RunnerKindSchema,
+  SECURITY_WORKFLOW_TEMPLATES,
+  SERVICE_PLUGIN_CATALOG,
   SEVERITY_ORDER,
   SEVERITY_RANK,
+  SLASH_COMMANDS,
+  SecurityWorkflowInputSchema,
   VERSION,
   VerificationAssertionSchema,
   VerificationCommandSchema,
@@ -45,11 +50,16 @@ import {
   createPresentationEvent,
   createReviewReportDocument,
   createScanReportDocument,
+  createSecurityWorkflowTemplate,
   createTranscriptDocument,
   defaultRoleFor,
   estimateCost,
+  exportSecurityWorkflowCode,
+  filterCommands,
+  findCommand,
   findingSchema,
   formatZodError,
+  getCommandByName,
   getRates,
   hasMultipleIdentities,
   homeStateDir,
@@ -59,6 +69,8 @@ import {
   modelProvider,
   normalizeResearchNovelty,
   parseAgentActionEvidenceManifest,
+  parseSecurityWorkflowCode,
+  parseSecurityWorkflowInput,
   pocStepArraySchema,
   pocStepSchema,
   priceRun,
@@ -80,8 +92,9 @@ import {
   transitionRefSchema,
   transitionRuleSchema,
   transitionTargetSchema,
+  validateScanPlan,
   workflowDefinitionSchema
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-6KFB6AYN.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {
@@ -96,6 +109,7 @@ export {
   DEFAULT_AUTONOMY_MODE,
   DEFAULT_MAX_CONCURRENCY,
   DEFAULT_MODEL,
+  DEFAULT_SECURITY_WORKFLOW_PLAN,
   DEFAULT_SEVERITY_FLOOR,
   DEFAULT_TIMEOUT_MS,
   DEPTH_CONFIG,
@@ -108,8 +122,12 @@ export {
   PRESENTATION_PROTOCOL,
   PRICING_SNAPSHOT_DATE,
   RunnerKindSchema,
+  SECURITY_WORKFLOW_TEMPLATES,
+  SERVICE_PLUGIN_CATALOG,
   SEVERITY_ORDER,
   SEVERITY_RANK,
+  SLASH_COMMANDS,
+  SecurityWorkflowInputSchema,
   VERSION,
   VerificationAssertionSchema,
   VerificationCommandSchema,
@@ -128,11 +146,16 @@ export {
   createPresentationEvent,
   createReviewReportDocument,
   createScanReportDocument,
+  createSecurityWorkflowTemplate,
   createTranscriptDocument,
   defaultRoleFor,
   estimateCost,
+  exportSecurityWorkflowCode,
+  filterCommands,
+  findCommand,
   findingSchema,
   formatZodError,
+  getCommandByName,
   getRates,
   hasMultipleIdentities,
   homeStateDir,
@@ -142,6 +165,8 @@ export {
   modelProvider,
   normalizeResearchNovelty,
   parseAgentActionEvidenceManifest,
+  parseSecurityWorkflowCode,
+  parseSecurityWorkflowInput,
   pocStepArraySchema,
   pocStepSchema,
   priceRun,
@@ -163,5 +188,6 @@ export {
   transitionRefSchema,
   transitionRuleSchema,
   transitionTargetSchema,
+  validateScanPlan,
   workflowDefinitionSchema
 };

package/chunks/{eval-runner-43BO2C4T.js → eval-runner-6Q3H52SP.js}

@@ -4,20 +4,24 @@ const require = __0CreateRequire(import.meta.url);
 import {
   getEvalCategories,
   runEval
-} from "./chunk-RSIUX3RW.js";
-import "./chunk-SJBCK2EI.js";
+} from "./chunk-5JNTMWPK.js";
+import "./chunk-H6Q2QAIY.js";
 import "./chunk-K2PWUPUI.js";
-import "./chunk-TZFIAMWZ.js";
+import "./chunk-SCWWLABR.js";
 import "./chunk-2OQOQ2FZ.js";
-import "./chunk-OAYUPGF6.js";
-import "./chunk-RE5EZDG2.js";
+import "./chunk-YED25PA4.js";
+import "./chunk-CF3MNS3O.js";
 import "./chunk-IXT64DV5.js";
+import "./chunk-CPCHLL6A.js";
+import "./chunk-YAZARMJY.js";
+import "./chunk-QVIRWJ45.js";
+import "./chunk-2WWAPKAW.js";
+import "./chunk-RS4MAN3Q.js";
 import "./chunk-UELXHK2Y.js";
-import "./chunk-4VGLO2YS.js";
-import "./chunk-7DEHG7YT.js";
+import "./chunk-4ZYYX5GY.js";
+import "./chunk-C6JPA32H.js";
 import "./chunk-5IBCBQEH.js";
-import "./chunk-2GV4HQKE.js";
-import "./chunk-76KSBWOQ.js";
+import "./chunk-6KFB6AYN.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {

package/chunks/{exploit-agent-N4A5ELBK.js → exploit-agent-FCCR2HYX.js}

@@ -23,7 +23,7 @@ function makeScriptExecutor(scriptPath, timeoutMs = 3e5) {
   });
 }
 async function runExploitAgent(opts) {
-  const { runExploitScan } = await import("./dist-3FNZIBB4.js");
+  const { runExploitScan } = await import("./dist-27BNG6WD.js");
   const log = opts.log ?? ((m) => process.stderr.write(m + "\n"));
   const result = await runExploitScan({
     target: {

package/chunks/{exploit-autoclimb-N7P6KIF5.js → exploit-autoclimb-X5ZS5FAO.js}

@@ -39,7 +39,7 @@ function makeShellBootRunner(opts) {
 }
 async function runAutoclimbCli(opts) {
   const log = opts.logger ?? ((l) => process.stderr.write(l + "\n"));
-  const { autonomousClimb } = await import("./dist-3FNZIBB4.js");
+  const { autonomousClimb } = await import("./dist-27BNG6WD.js");
   const bug = JSON.parse(readFileSync(opts.bugSpecPath, "utf8"));
   const runner = makeShellBootRunner({
     bootScript: opts.bootScript,

package/chunks/{exploit-climb-WNEJUB5W.js → exploit-climb-3JHGEO36.js}

@@ -4,7 +4,7 @@ const require = __0CreateRequire(import.meta.url);
 import {
   findingSchema,
   formatZodError
-} from "./chunk-76KSBWOQ.js";
+} from "./chunk-6KFB6AYN.js";
 import {
   external_exports
 } from "./chunk-VIT5ALXF.js";
@@ -232,7 +232,7 @@ async function runClimb(opts) {
     bootedCacheKey,
     writeProofFileReadOnly,
     defaultDmesgOutPath
-  } = await import("./dist-3FNZIBB4.js");
+  } = await import("./dist-27BNG6WD.js");
   const finding = readFinding(opts.findingPath);
   const reproducer = opts.reproducerPath ? readFileSync2(resolve(opts.reproducerPath), "utf8") : void 0;
   const kernelConfigText = opts.kernelConfigPath ? readFileSync2(resolve(opts.kernelConfigPath), "utf8") : void 0;

package/chunks/{fix-Z452M4EC.js → fix-NSNPU33B.js}

@@ -2,25 +2,31 @@
 import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
+  applySourceFixCandidate,
   loadSourceFixProjectInputs,
   planSourceFixPublication,
   publishSourceFixDraftPR,
   resolveSourceFixRepository,
   runSourceFix,
-  saveSourceFixProjectInputs
-} from "./chunk-HR2TU42B.js";
-import "./chunk-RE5EZDG2.js";
+  saveSourceFixProjectInputs,
+  verifySourceFixCandidate
+} from "./chunk-6WQDXWQC.js";
+import "./chunk-CF3MNS3O.js";
+import "./chunk-2WWAPKAW.js";
 import "./chunk-UELXHK2Y.js";
-import "./chunk-7DEHG7YT.js";
+import "./chunk-4ZYYX5GY.js";
+import "./chunk-C6JPA32H.js";
 import "./chunk-5IBCBQEH.js";
-import "./chunk-76KSBWOQ.js";
+import "./chunk-6KFB6AYN.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {
+  applySourceFixCandidate,
   loadSourceFixProjectInputs,
   planSourceFixPublication,
   publishSourceFixDraftPR,
   resolveSourceFixRepository,
   runSourceFix,
-  saveSourceFixProjectInputs
+  saveSourceFixProjectInputs,
+  verifySourceFixCandidate
 };

package/chunks/{harness-QJJJVSG4.js → harness-KXQOVIDQ.js}

@@ -7,10 +7,10 @@ import {
   mintCanary,
   runStrategy,
   runWeaponization
-} from "./chunk-VMRRNRMR.js";
+} from "./chunk-IHPTOTLL.js";
 import "./chunk-UEX7PFSE.js";
-import "./chunk-XFCTUKXR.js";
-import "./chunk-76KSBWOQ.js";
+import "./chunk-RCRTSKQN.js";
+import "./chunk-6KFB6AYN.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {

package/chunks/{hunt-scan-K6D2V3PX.js → hunt-scan-ELTKGKC4.js}

@@ -7,24 +7,28 @@ import {
   makeMultiLensVerifier,
   makeSkepticVerifier,
   runHuntScan
-} from "./chunk-UV5QWZGE.js";
-import "./chunk-SJBCK2EI.js";
+} from "./chunk-H4DH7COV.js";
+import "./chunk-H6Q2QAIY.js";
 import "./chunk-K2PWUPUI.js";
-import "./chunk-TZFIAMWZ.js";
+import "./chunk-SCWWLABR.js";
 import "./chunk-2OQOQ2FZ.js";
 import "./chunk-UEX7PFSE.js";
-import "./chunk-OAYUPGF6.js";
-import "./chunk-RE5EZDG2.js";
-import "./chunk-5MWAG3FT.js";
-import "./chunk-W6UWZFKL.js";
-import "./chunk-VNRY6AWF.js";
+import "./chunk-YED25PA4.js";
+import "./chunk-CF3MNS3O.js";
+import "./chunk-WBRGXCU2.js";
+import "./chunk-O6KPVYOI.js";
+import "./chunk-L2CCO4KE.js";
 import "./chunk-IXT64DV5.js";
+import "./chunk-CPCHLL6A.js";
+import "./chunk-YAZARMJY.js";
+import "./chunk-QVIRWJ45.js";
+import "./chunk-2WWAPKAW.js";
+import "./chunk-RS4MAN3Q.js";
 import "./chunk-UELXHK2Y.js";
-import "./chunk-4VGLO2YS.js";
-import "./chunk-7DEHG7YT.js";
+import "./chunk-4ZYYX5GY.js";
+import "./chunk-C6JPA32H.js";
 import "./chunk-5IBCBQEH.js";
-import "./chunk-2GV4HQKE.js";
-import "./chunk-76KSBWOQ.js";
+import "./chunk-6KFB6AYN.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {

package/chunks/{kernel-primitive-TKUACPKD.js → kernel-primitive-MT7YZSIG.js}

@@ -19,8 +19,8 @@ import {
   parseSlabCache,
   rankDanger,
   sniffCrashType
-} from "./chunk-DM5C5L5D.js";
-import "./chunk-76KSBWOQ.js";
+} from "./chunk-DPUXXMJW.js";
+import "./chunk-6KFB6AYN.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {

package/chunks/{kernel-vm-runner-RAAO2PGT.js → kernel-vm-runner-YFRHYC6G.js}

@@ -28,8 +28,8 @@ import {
   verifyAcrossBoots,
   verifyKernelFinding,
   writeProofFileReadOnly
-} from "./chunk-XFCTUKXR.js";
-import "./chunk-76KSBWOQ.js";
+} from "./chunk-RCRTSKQN.js";
+import "./chunk-6KFB6AYN.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {

package/chunks/{native-loop-2ZRJENZ3.js → native-loop-OFJDRHPI.js}

@@ -7,30 +7,37 @@ import {
   CRITICAL_MESSAGE_PATTERNS,
   DEFAULT_COMPACTION_REGROW,
   DEFAULT_COMPACTION_THRESHOLD,
+  MAX_OUTPUT_CAP_CONTINUATIONS,
+  OUTPUT_CAP_CONTINUATION_PROMPT,
   PLAYBOOK_MARKER,
   SCAN_SUMMARIZER_INSTRUCTION,
   compactMessagesWithLLM,
   computeBudgetWarningTurns,
   dropOldestMessages,
   isContextWindowError,
+  isRecoverableOutputCap,
   isTransientLlmError,
   resolveCompactionThresholds,
   runNativeAgentLoop,
   summarizeReasoning,
   toolFailureText
-} from "./chunk-SJBCK2EI.js";
+} from "./chunk-H6Q2QAIY.js";
 import "./chunk-K2PWUPUI.js";
-import "./chunk-TZFIAMWZ.js";
+import "./chunk-SCWWLABR.js";
 import "./chunk-2OQOQ2FZ.js";
-import "./chunk-OAYUPGF6.js";
-import "./chunk-RE5EZDG2.js";
+import "./chunk-YED25PA4.js";
+import "./chunk-CF3MNS3O.js";
 import "./chunk-IXT64DV5.js";
+import "./chunk-CPCHLL6A.js";
+import "./chunk-YAZARMJY.js";
+import "./chunk-QVIRWJ45.js";
+import "./chunk-2WWAPKAW.js";
+import "./chunk-RS4MAN3Q.js";
 import "./chunk-UELXHK2Y.js";
-import "./chunk-4VGLO2YS.js";
-import "./chunk-7DEHG7YT.js";
+import "./chunk-4ZYYX5GY.js";
+import "./chunk-C6JPA32H.js";
 import "./chunk-5IBCBQEH.js";
-import "./chunk-2GV4HQKE.js";
-import "./chunk-76KSBWOQ.js";
+import "./chunk-6KFB6AYN.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {
@@ -39,12 +46,15 @@ export {
   CRITICAL_MESSAGE_PATTERNS,
   DEFAULT_COMPACTION_REGROW,
   DEFAULT_COMPACTION_THRESHOLD,
+  MAX_OUTPUT_CAP_CONTINUATIONS,
+  OUTPUT_CAP_CONTINUATION_PROMPT,
   PLAYBOOK_MARKER,
   SCAN_SUMMARIZER_INSTRUCTION,
   compactMessagesWithLLM,
   computeBudgetWarningTurns,
   dropOldestMessages,
   isContextWindowError,
+  isRecoverableOutputCap,
   isTransientLlmError,
   resolveCompactionThresholds,
   runNativeAgentLoop,

package/chunks/orchestrate-DRZ2SVCP.js

@@ -0,0 +1,62 @@
+#!/usr/bin/env node
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
+import {
+  recoverStaleWorkers,
+  registerOrchestrateCommand
+} from "./chunk-QWK4R3DB.js";
+import "./chunk-HLFS6WV2.js";
+import "./chunk-OAS5SAVZ.js";
+import "./chunk-E3OOBVOK.js";
+import "./chunk-QCUFBVIZ.js";
+import "./chunk-5JNTMWPK.js";
+import "./chunk-TM74SSHC.js";
+import "./chunk-2WNCI664.js";
+import "./chunk-23DG5YKS.js";
+import "./chunk-DQTNI3KY.js";
+import "./chunk-IHPTOTLL.js";
+import "./chunk-DPUXXMJW.js";
+import "./chunk-5WAJGLCW.js";
+import "./chunk-E74LXQFY.js";
+import "./chunk-AZ7L3HFD.js";
+import "./chunk-ELI3BVIK.js";
+import "./chunk-H4DH7COV.js";
+import "./chunk-H6Q2QAIY.js";
+import "./chunk-K2PWUPUI.js";
+import "./chunk-SCWWLABR.js";
+import "./chunk-2OQOQ2FZ.js";
+import "./chunk-UEX7PFSE.js";
+import "./chunk-YED25PA4.js";
+import "./chunk-RCRTSKQN.js";
+import "./chunk-6WQDXWQC.js";
+import "./chunk-CF3MNS3O.js";
+import "./chunk-SQCBHFWN.js";
+import "./chunk-GVD6SJGH.js";
+import "./chunk-WBRGXCU2.js";
+import "./chunk-O6KPVYOI.js";
+import "./chunk-FHC2B7LN.js";
+import "./chunk-DKSCN2AB.js";
+import "./chunk-UFHN6RIU.js";
+import "./chunk-L2CCO4KE.js";
+import "./chunk-TO35Y326.js";
+import "./chunk-IXT64DV5.js";
+import "./chunk-3BPX75OR.js";
+import "./chunk-GVY3S5E5.js";
+import "./chunk-CPCHLL6A.js";
+import "./chunk-YAZARMJY.js";
+import "./chunk-NJLKFC66.js";
+import "./chunk-G2BE2FC7.js";
+import "./chunk-QVIRWJ45.js";
+import "./chunk-2WWAPKAW.js";
+import "./chunk-RS4MAN3Q.js";
+import "./chunk-UELXHK2Y.js";
+import "./chunk-4ZYYX5GY.js";
+import "./chunk-C6JPA32H.js";
+import "./chunk-5IBCBQEH.js";
+import "./chunk-6KFB6AYN.js";
+import "./chunk-VIT5ALXF.js";
+import "./chunk-VCSFCHAJ.js";
+export {
+  recoverStaleWorkers,
+  registerOrchestrateCommand
+};

package/chunks/{prepare-KYHGFWCJ.js → prepare-72GWTRVI.js}

@@ -4,8 +4,12 @@ const require = __0CreateRequire(import.meta.url);
 import {
   detectTargetType,
   prepare
-} from "./chunk-V36HVTUL.js";
-import "./chunk-4VGLO2YS.js";
+} from "./chunk-GVY3S5E5.js";
+import "./chunk-CPCHLL6A.js";
+import "./chunk-YAZARMJY.js";
+import "./chunk-4ZYYX5GY.js";
+import "./chunk-6KFB6AYN.js";
+import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {
   detectTargetType,

package/chunks/{process-N245QIQG.js → process-MJYJ2K5E.js}

@@ -4,7 +4,8 @@ const require = __0CreateRequire(import.meta.url);
 import {
   ProcessRuntime,
   describeSpawnFailure
-} from "./chunk-W6UWZFKL.js";
+} from "./chunk-O6KPVYOI.js";
+import "./chunk-RS4MAN3Q.js";
 import "./chunk-VCSFCHAJ.js";
 export {
   ProcessRuntime,