0sec-cli 0.22.0 → 0.22.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/0.js +56 -45
- package/README.md +12 -0
- package/chunks/{adapt-loop-7I57LXXR.js → adapt-loop-3CCOWE43.js} +4 -4
- package/chunks/{artifact-scraper-PYZ3RU3O.js → artifact-scraper-Z4UUIOH3.js} +2 -2
- package/chunks/{assumption-mining-MFLF43IR.js → assumption-mining-2UAKQB6V.js} +18 -14
- package/chunks/{chunk-RE5EZDG2.js → chunk-2WWAPKAW.js} +126 -1089
- package/chunks/{chunk-LPTRPRZR.js → chunk-3BPX75OR.js} +1 -1
- package/chunks/chunk-4ZYYX5GY.js +74 -0
- package/chunks/{chunk-RSIUX3RW.js → chunk-5JNTMWPK.js} +2 -2
- package/chunks/{chunk-RRD4XXPU.js → chunk-5WAJGLCW.js} +3 -3
- package/chunks/{chunk-76KSBWOQ.js → chunk-6KFB6AYN.js} +515 -20
- package/chunks/{chunk-HR2TU42B.js → chunk-6WQDXWQC.js} +169 -15
- package/chunks/chunk-6YZE552K.js +5603 -0
- package/chunks/chunk-BGX53365.js +309 -0
- package/chunks/{chunk-7DEHG7YT.js → chunk-C6JPA32H.js} +1 -1
- package/chunks/chunk-CF3MNS3O.js +990 -0
- package/chunks/{chunk-4VGLO2YS.js → chunk-CPCHLL6A.js} +5 -2
- package/chunks/{chunk-DM5C5L5D.js → chunk-DPUXXMJW.js} +1 -1
- package/chunks/{chunk-LYUAM3TG.js → chunk-E3OOBVOK.js} +30 -12
- package/chunks/{chunk-HUNAPTKV.js → chunk-E74LXQFY.js} +1 -1
- package/chunks/{chunk-UU7PQP6N.js → chunk-ELI3BVIK.js} +3 -3
- package/chunks/chunk-FFHRANYC.js +547 -0
- package/chunks/{chunk-IO7R7WBM.js → chunk-G2BE2FC7.js} +1 -1
- package/chunks/chunk-GQ3DGHWE.js +1659 -0
- package/chunks/{chunk-V36HVTUL.js → chunk-GVY3S5E5.js} +21 -18
- package/chunks/{chunk-UV5QWZGE.js → chunk-H4DH7COV.js} +192 -40
- package/chunks/{chunk-SJBCK2EI.js → chunk-H6Q2QAIY.js} +23475 -22747
- package/chunks/{chunk-VMRRNRMR.js → chunk-IHPTOTLL.js} +1 -1
- package/chunks/chunk-IXAHQICR.js +31 -0
- package/chunks/{chunk-TH2LW437.js → chunk-KCA35IL3.js} +2 -190
- package/chunks/{chunk-VNRY6AWF.js → chunk-L2CCO4KE.js} +282 -34
- package/chunks/{chunk-6YNKRUMC.js → chunk-NJLKFC66.js} +321 -5
- package/chunks/{chunk-W6UWZFKL.js → chunk-O6KPVYOI.js} +100 -5
- package/chunks/{chunk-EGZGZFAH.js → chunk-OAS5SAVZ.js} +6768 -2100
- package/chunks/chunk-PS5E7LUQ.js +277 -0
- package/chunks/{chunk-2GV4HQKE.js → chunk-QVIRWJ45.js} +257 -145
- package/chunks/{chunk-OWLJYJ5O.js → chunk-QWK4R3DB.js} +9 -9
- package/chunks/{chunk-XFCTUKXR.js → chunk-RCRTSKQN.js} +1 -1
- package/chunks/chunk-RS4MAN3Q.js +73 -0
- package/chunks/{chunk-7UFUALR2.js → chunk-RTBZ36BD.js} +8 -274
- package/chunks/{chunk-TZFIAMWZ.js → chunk-SCWWLABR.js} +1 -1
- package/chunks/chunk-VDOWARMJ.js +63 -0
- package/chunks/{chunk-5MWAG3FT.js → chunk-WBRGXCU2.js} +79 -18
- package/chunks/{chunk-LCRTAQN2.js → chunk-WHUAUFSX.js} +1 -1
- package/chunks/{chunk-YIQSGNAA.js → chunk-XODDLNBI.js} +1535 -1306
- package/chunks/chunk-YAZARMJY.js +355 -0
- package/chunks/{chunk-OAYUPGF6.js → chunk-YED25PA4.js} +1 -1
- package/chunks/{codex-models-7TLJSY3L.js → codex-models-Z43V3427.js} +9 -3
- package/chunks/{commands-NEI7L3QA.js → commands-EUGF4FUZ.js} +5844 -4095
- package/chunks/{db-5AP3JB4W.js → db-NVAW4WWR.js} +3 -3
- package/chunks/{dist-3FNZIBB4.js → dist-27BNG6WD.js} +195 -112
- package/chunks/{dist-5YHYNLI3.js → dist-7RUOKPRJ.js} +12 -2
- package/chunks/{dist-KEULE5IQ.js → dist-LNXGATR2.js} +2 -2
- package/chunks/{dist-XZB53PS5.js → dist-M2X367VW.js} +2 -2
- package/chunks/{dist-DD4H6HMQ.js → dist-NG2HT5XU.js} +27 -1
- package/chunks/{eval-runner-43BO2C4T.js → eval-runner-6Q3H52SP.js} +13 -9
- package/chunks/{exploit-agent-N4A5ELBK.js → exploit-agent-FCCR2HYX.js} +1 -1
- package/chunks/{exploit-autoclimb-N7P6KIF5.js → exploit-autoclimb-X5ZS5FAO.js} +1 -1
- package/chunks/{exploit-climb-WNEJUB5W.js → exploit-climb-3JHGEO36.js} +2 -2
- package/chunks/{fix-Z452M4EC.js → fix-NSNPU33B.js} +12 -6
- package/chunks/{harness-QJJJVSG4.js → harness-KXQOVIDQ.js} +3 -3
- package/chunks/{hunt-scan-K6D2V3PX.js → hunt-scan-ELTKGKC4.js} +16 -12
- package/chunks/{kernel-primitive-TKUACPKD.js → kernel-primitive-MT7YZSIG.js} +2 -2
- package/chunks/{kernel-vm-runner-RAAO2PGT.js → kernel-vm-runner-YFRHYC6G.js} +2 -2
- package/chunks/{native-loop-2ZRJENZ3.js → native-loop-OFJDRHPI.js} +18 -8
- package/chunks/orchestrate-DRZ2SVCP.js +62 -0
- package/chunks/{prepare-KYHGFWCJ.js → prepare-72GWTRVI.js} +6 -2
- package/chunks/{process-N245QIQG.js → process-MJYJ2K5E.js} +2 -1
- package/chunks/{run-U3XU4CTC.js → run-WTJCZZHV.js} +3091 -6037
- package/chunks/{runtime-G75TEWQY.js → runtime-FCKOUB7V.js} +10 -4
- package/chunks/{runtime-XFWJTBUO.js → runtime-LCJ4XSKE.js} +5 -1
- package/chunks/{scan-stream-BMOCPKQX.js → scan-stream-GT6GKQ3U.js} +7 -1
- package/chunks/{scope-WXI46UHJ.js → scope-E5QZUOOH.js} +2 -2
- package/chunks/service-plugins-MSK2EQP6.js +62 -0
- package/chunks/{session-store-27L3ZU73.js → session-store-H3Q7KCYG.js} +6 -4
- package/chunks/{variant-candidates-YWZORZMK.js → variant-candidates-SZKDCOLK.js} +9 -3
- package/chunks/{web-recon-prepass-YVMFXCIK.js → web-recon-prepass-IO3GXQMW.js} +11 -6
- package/dashboard/apple-touch-icon.png +0 -0
- package/dashboard/assets/operations-BvB5Qpmk.css +1 -0
- package/dashboard/assets/operations-D8Ii01SV.js +114 -0
- package/dashboard/assets/zero-peek-Dzm3MT3X.png +0 -0
- package/dashboard/favicon.ico +0 -0
- package/dashboard/favicon.svg +10 -0
- package/dashboard/index.html +5 -3
- package/package.json +1 -1
- package/chunks/chunk-6GHSR47F.js +0 -147
- package/chunks/chunk-CAYANSH6.js +0 -3524
- package/chunks/chunk-GHWODZMR.js +0 -16
- package/chunks/chunk-MICHDTBK.js +0 -193
- package/chunks/orchestrate-2GWGNTBF.js +0 -58
- package/dashboard/assets/bot-Bg1Tp9_d.js +0 -1
- package/dashboard/assets/dist-B_dDCPbu.js +0 -1
- package/dashboard/assets/findings-page-mayGhNx6.js +0 -5
- package/dashboard/assets/format--susmHX7.js +0 -1
- package/dashboard/assets/input-TuVPR3Zl.js +0 -1
- package/dashboard/assets/jsx-runtime-MGseXjj5.js +0 -3
- package/dashboard/assets/live-page-HWWHX99U.js +0 -1
- package/dashboard/assets/meta-tile-ckHo-w7k.js +0 -1
- package/dashboard/assets/operations-BxZ0OoXO.js +0 -10
- package/dashboard/assets/operations-CMFVrXEe.css +0 -2
- package/dashboard/assets/operations-app-D3d35rgo.js +0 -46
- package/dashboard/assets/overview-page-W_4IteEr.js +0 -1
- package/dashboard/assets/page-header-Bw9AJgBV.js +0 -1
- package/dashboard/assets/scans-page-CgzVXHnn.js +0 -1
- package/dashboard/assets/siren-KQj8QAnJ.js +0 -1
- package/dashboard/assets/table-8EDklulN.js +0 -1
- package/dashboard/assets/tabs-CFHPOwg8.js +0 -1
|
Binary file
|
|
Binary file
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32" role="img" aria-label="0">
|
|
2
|
+
<!-- Brand-dark tile so the off-white mark stays legible on any tab. -->
|
|
3
|
+
<rect width="32" height="32" rx="6" fill="#403D39"/>
|
|
4
|
+
<!-- The aperture 0: an orange "/" slash behind the chamfered-octagon ring,
|
|
5
|
+
so the orange only shows through the 0's window (null-set ∅ mark). -->
|
|
6
|
+
<g transform="translate(4 4) scale(1.2)">
|
|
7
|
+
<path fill="#FD802E" d="M12.5 2 H17.5 L7.5 18 H2.5 Z"/>
|
|
8
|
+
<path fill="#FCFAF6" fill-rule="evenodd" d="M4 0 H16 L20 4 V16 L16 20 H4 L0 16 V4 Z M4 5 V15 L5 16 H15 L16 15 V5 L15 4 H5 Z"/>
|
|
9
|
+
</g>
|
|
10
|
+
</svg>
|
package/dashboard/index.html
CHANGED
|
@@ -3,10 +3,12 @@
|
|
|
3
3
|
<head>
|
|
4
4
|
<meta charset="UTF-8" />
|
|
5
5
|
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
|
6
|
+
<link rel="icon" href="/favicon.svg" type="image/svg+xml" />
|
|
7
|
+
<link rel="icon" href="/favicon.ico" sizes="32x32" />
|
|
8
|
+
<link rel="apple-touch-icon" href="/apple-touch-icon.png" />
|
|
6
9
|
<title>0.security</title>
|
|
7
|
-
<script type="module" crossorigin src="/assets/operations-
|
|
8
|
-
<link rel="
|
|
9
|
-
<link rel="stylesheet" crossorigin href="/assets/operations-CMFVrXEe.css">
|
|
10
|
+
<script type="module" crossorigin src="/assets/operations-D8Ii01SV.js"></script>
|
|
11
|
+
<link rel="stylesheet" crossorigin href="/assets/operations-BvB5Qpmk.css">
|
|
10
12
|
</head>
|
|
11
13
|
<body>
|
|
12
14
|
<div id="root"></div>
|
package/package.json
CHANGED
package/chunks/chunk-6GHSR47F.js
DELETED
|
@@ -1,147 +0,0 @@
|
|
|
1
|
-
#!/usr/bin/env node
|
|
2
|
-
import { createRequire as __0CreateRequire } from "node:module";
|
|
3
|
-
const require = __0CreateRequire(import.meta.url);
|
|
4
|
-
import {
|
|
5
|
-
expandHomePath,
|
|
6
|
-
isExistingLocalTargetPath,
|
|
7
|
-
isExplicitLocalTargetPath
|
|
8
|
-
} from "./chunk-V36HVTUL.js";
|
|
9
|
-
|
|
10
|
-
// packages/cli/src/herdr-state.ts
|
|
11
|
-
var sink = null;
|
|
12
|
-
function setHerdrSink(next) {
|
|
13
|
-
sink = next;
|
|
14
|
-
}
|
|
15
|
-
function reportOperatorGate(blocked) {
|
|
16
|
-
if (!sink) return;
|
|
17
|
-
try {
|
|
18
|
-
if (blocked) sink.reportBlocked();
|
|
19
|
-
else sink.reportWorking();
|
|
20
|
-
} catch {
|
|
21
|
-
}
|
|
22
|
-
}
|
|
23
|
-
function withSink(fn) {
|
|
24
|
-
if (!sink) return;
|
|
25
|
-
try {
|
|
26
|
-
fn(sink);
|
|
27
|
-
} catch {
|
|
28
|
-
}
|
|
29
|
-
}
|
|
30
|
-
function reportHerdrModel(model, provider) {
|
|
31
|
-
withSink((s) => s.setModel(model, provider));
|
|
32
|
-
}
|
|
33
|
-
function reportHerdrContextPercent(percent) {
|
|
34
|
-
withSink((s) => s.setContextPercent(percent));
|
|
35
|
-
}
|
|
36
|
-
function reportHerdrTarget(target) {
|
|
37
|
-
withSink((s) => s.setTarget(target));
|
|
38
|
-
}
|
|
39
|
-
function reportHerdrObjective(objective) {
|
|
40
|
-
withSink((s) => s.setObjective(objective));
|
|
41
|
-
}
|
|
42
|
-
function reportHerdrActivity(activity) {
|
|
43
|
-
withSink((s) => s.setActivity(activity));
|
|
44
|
-
}
|
|
45
|
-
function reportHerdrCompaction() {
|
|
46
|
-
withSink((s) => s.reportCompacting());
|
|
47
|
-
}
|
|
48
|
-
function reportHerdrSession(ref) {
|
|
49
|
-
withSink((s) => s.reportSession(ref));
|
|
50
|
-
}
|
|
51
|
-
function reportHerdrSessionClose() {
|
|
52
|
-
withSink((s) => {
|
|
53
|
-
void s.release();
|
|
54
|
-
});
|
|
55
|
-
}
|
|
56
|
-
|
|
57
|
-
// packages/cli/src/engagement-plan.ts
|
|
58
|
-
var PACKAGE_PREFIXES = {
|
|
59
|
-
"npm:": { ecosystem: "npm", targetType: "npm-package" },
|
|
60
|
-
"pypi:": { ecosystem: "pypi", targetType: "pypi-package" },
|
|
61
|
-
"cargo:": { ecosystem: "cargo", targetType: "cargo-package" },
|
|
62
|
-
"oci:": { ecosystem: "oci", targetType: "oci-image" }
|
|
63
|
-
};
|
|
64
|
-
function resolveEngagement(rawTarget) {
|
|
65
|
-
const raw = rawTarget.trim();
|
|
66
|
-
if (raw.length === 0) return { ok: false, message: "Enter a URL, source path, git URL, or ecosystem-prefixed package." };
|
|
67
|
-
for (const [prefix, packagePlan] of Object.entries(PACKAGE_PREFIXES)) {
|
|
68
|
-
if (!raw.startsWith(prefix)) continue;
|
|
69
|
-
const target = raw.slice(prefix.length).trim();
|
|
70
|
-
if (target.length === 0) return { ok: false, message: `${prefix} requires a package name.` };
|
|
71
|
-
return {
|
|
72
|
-
ok: true,
|
|
73
|
-
plan: {
|
|
74
|
-
kind: "package",
|
|
75
|
-
target,
|
|
76
|
-
targetType: packagePlan.targetType,
|
|
77
|
-
ecosystem: packagePlan.ecosystem,
|
|
78
|
-
label: `${packagePlan.ecosystem} package ${target}`
|
|
79
|
-
}
|
|
80
|
-
};
|
|
81
|
-
}
|
|
82
|
-
if (raw.startsWith("source:")) {
|
|
83
|
-
const target = raw.slice("source:".length).trim();
|
|
84
|
-
if (target.length === 0) return { ok: false, message: "source: requires a local path or git URL." };
|
|
85
|
-
return {
|
|
86
|
-
ok: true,
|
|
87
|
-
plan: {
|
|
88
|
-
kind: "source",
|
|
89
|
-
target: expandHomePath(target),
|
|
90
|
-
targetType: "source-code",
|
|
91
|
-
label: `source review ${target}`
|
|
92
|
-
}
|
|
93
|
-
};
|
|
94
|
-
}
|
|
95
|
-
if (raw.startsWith("git@") || raw.startsWith("git://") || raw.endsWith(".git") || raw.startsWith("https://github.com/")) {
|
|
96
|
-
return {
|
|
97
|
-
ok: true,
|
|
98
|
-
plan: {
|
|
99
|
-
kind: "source",
|
|
100
|
-
target: raw,
|
|
101
|
-
targetType: "source-code",
|
|
102
|
-
label: `source review ${raw}`
|
|
103
|
-
}
|
|
104
|
-
};
|
|
105
|
-
}
|
|
106
|
-
if (raw.startsWith("mcp://") || raw.startsWith("http://") || raw.startsWith("https://")) {
|
|
107
|
-
return {
|
|
108
|
-
ok: true,
|
|
109
|
-
plan: {
|
|
110
|
-
kind: "web",
|
|
111
|
-
target: raw,
|
|
112
|
-
targetType: "url",
|
|
113
|
-
label: `web target ${raw}`
|
|
114
|
-
}
|
|
115
|
-
};
|
|
116
|
-
}
|
|
117
|
-
if (isExplicitLocalTargetPath(raw) || isExistingLocalTargetPath(raw)) {
|
|
118
|
-
const target = expandHomePath(raw);
|
|
119
|
-
return {
|
|
120
|
-
ok: true,
|
|
121
|
-
plan: {
|
|
122
|
-
kind: "source",
|
|
123
|
-
target,
|
|
124
|
-
targetType: "source-code",
|
|
125
|
-
label: `source review ${target}`
|
|
126
|
-
}
|
|
127
|
-
};
|
|
128
|
-
}
|
|
129
|
-
return {
|
|
130
|
-
ok: false,
|
|
131
|
-
message: "Ambiguous target. Use https://\u2026, ./path, source:\u2026, npm:\u2026, pypi:\u2026, cargo:\u2026, or oci:\u2026."
|
|
132
|
-
};
|
|
133
|
-
}
|
|
134
|
-
|
|
135
|
-
export {
|
|
136
|
-
setHerdrSink,
|
|
137
|
-
reportOperatorGate,
|
|
138
|
-
reportHerdrModel,
|
|
139
|
-
reportHerdrContextPercent,
|
|
140
|
-
reportHerdrTarget,
|
|
141
|
-
reportHerdrObjective,
|
|
142
|
-
reportHerdrActivity,
|
|
143
|
-
reportHerdrCompaction,
|
|
144
|
-
reportHerdrSession,
|
|
145
|
-
reportHerdrSessionClose,
|
|
146
|
-
resolveEngagement
|
|
147
|
-
};
|