0sec-cli 0.22.4 → 0.23.0

package/0.js

@@ -4,7 +4,7 @@ const require = __0CreateRequire(import.meta.url);
 import {
   Command,
   runStartupUpdate
-} from "./chunks/chunk-RTBZ36BD.js";
+} from "./chunks/chunk-OLSKXTQZ.js";
 import {
   setHerdrSink
 } from "./chunks/chunk-VDOWARMJ.js";
@@ -13,74 +13,78 @@ import {
   installConsolePresentationBridge,
   installProcessPresentationStreamBridge,
   maybeLoadCodexAuth,
-  presentationEventBus,
+  presentationEventBus
+} from "./chunks/chunk-3P3XXSIJ.js";
+import {
   resolveEngagement
-} from "./chunks/chunk-FFHRANYC.js";
+} from "./chunks/chunk-R35KKJA4.js";
 import {
   source_default
 } from "./chunks/chunk-HLFS6WV2.js";
 import {
-  launchConfiguredWorkbench
-} from "./chunks/chunk-XODDLNBI.js";
+  launchConfiguredWorkbench,
+  remoteBackendClientId
+} from "./chunks/chunk-HFDSIHTE.js";
 import {
   createHerdrEventSink,
   maybeSubscribeOperationalEventSink
-} from "./chunks/chunk-OAS5SAVZ.js";
-import "./chunks/chunk-E3OOBVOK.js";
+} from "./chunks/chunk-4HGGNBKK.js";
+import "./chunks/chunk-QMICC5O2.js";
+import "./chunks/chunk-TPUJZ74W.js";
 import "./chunks/chunk-QCUFBVIZ.js";
-import "./chunks/chunk-5JNTMWPK.js";
-import "./chunks/chunk-TM74SSHC.js";
+import "./chunks/chunk-NX4H6L4M.js";
+import "./chunks/chunk-62ENS6XO.js";
 import "./chunks/chunk-2WNCI664.js";
 import "./chunks/chunk-23DG5YKS.js";
 import "./chunks/chunk-DQTNI3KY.js";
-import "./chunks/chunk-IHPTOTLL.js";
-import "./chunks/chunk-DPUXXMJW.js";
-import "./chunks/chunk-5WAJGLCW.js";
-import "./chunks/chunk-E74LXQFY.js";
+import "./chunks/chunk-XORZUR2H.js";
+import "./chunks/chunk-LVGZGG63.js";
+import "./chunks/chunk-3ZNI7F42.js";
+import "./chunks/chunk-WIYNYNL2.js";
 import "./chunks/chunk-AZ7L3HFD.js";
-import "./chunks/chunk-ELI3BVIK.js";
-import "./chunks/chunk-H4DH7COV.js";
-import "./chunks/chunk-H6Q2QAIY.js";
+import "./chunks/chunk-EJH2TNVH.js";
+import "./chunks/chunk-P7KDN5PK.js";
+import "./chunks/chunk-EH2WTNY7.js";
 import "./chunks/chunk-K2PWUPUI.js";
-import "./chunks/chunk-SCWWLABR.js";
-import "./chunks/chunk-2OQOQ2FZ.js";
+import "./chunks/chunk-JEYIWMGL.js";
+import "./chunks/chunk-Y4HJRUFE.js";
 import "./chunks/chunk-UEX7PFSE.js";
-import "./chunks/chunk-YED25PA4.js";
-import "./chunks/chunk-RCRTSKQN.js";
-import "./chunks/chunk-6WQDXWQC.js";
-import "./chunks/chunk-CF3MNS3O.js";
+import "./chunks/chunk-3E54JYS4.js";
+import "./chunks/chunk-F344NYUN.js";
+import "./chunks/chunk-YYS2H33A.js";
+import "./chunks/chunk-AAA4PRWK.js";
 import "./chunks/chunk-SQCBHFWN.js";
 import "./chunks/chunk-GVD6SJGH.js";
-import "./chunks/chunk-WBRGXCU2.js";
+import "./chunks/chunk-UZUELPFW.js";
 import "./chunks/chunk-O6KPVYOI.js";
 import "./chunks/chunk-FHC2B7LN.js";
 import "./chunks/chunk-DKSCN2AB.js";
 import "./chunks/chunk-UFHN6RIU.js";
-import "./chunks/chunk-L2CCO4KE.js";
+import "./chunks/chunk-T7ZEVY5G.js";
 import "./chunks/chunk-TO35Y326.js";
 import "./chunks/chunk-IXT64DV5.js";
-import "./chunks/chunk-3BPX75OR.js";
-import "./chunks/chunk-GVY3S5E5.js";
-import "./chunks/chunk-CPCHLL6A.js";
-import "./chunks/chunk-YAZARMJY.js";
+import "./chunks/chunk-W5VNCB57.js";
+import "./chunks/chunk-YAEJAZYW.js";
+import "./chunks/chunk-65H3MRBF.js";
+import "./chunks/chunk-CP6HANBE.js";
 import "./chunks/chunk-NJLKFC66.js";
-import "./chunks/chunk-G2BE2FC7.js";
-import "./chunks/chunk-QVIRWJ45.js";
+import "./chunks/chunk-K55B4OH4.js";
+import "./chunks/chunk-BF5FIK7H.js";
 import {
   analyticsPipeline,
   configureRunContributionsFromEnvironment
-} from "./chunks/chunk-2WWAPKAW.js";
+} from "./chunks/chunk-NI6QYQSK.js";
 import "./chunks/chunk-RS4MAN3Q.js";
 import "./chunks/chunk-UELXHK2Y.js";
 import {
   eventBus,
   presentationEventSink
-} from "./chunks/chunk-4ZYYX5GY.js";
-import "./chunks/chunk-C6JPA32H.js";
+} from "./chunks/chunk-A5QO7N3S.js";
+import "./chunks/chunk-ITES7BCY.js";
 import "./chunks/chunk-5IBCBQEH.js";
 import {
   VERSION
-} from "./chunks/chunk-6KFB6AYN.js";
+} from "./chunks/chunk-LTEE2JWK.js";
 import "./chunks/chunk-VIT5ALXF.js";
 import "./chunks/chunk-VCSFCHAJ.js";
 
@@ -106,7 +110,7 @@ import { fileURLToPath } from "node:url";
 var BYPASS_ENV = "ZERO_ALLOW_STALE_SOURCE_DIST";
 function currentBuildCommit() {
   if (true) {
-    return "531d93617a529a487a9d94e6c20886903ffc40ec";
+    return "8f4d9ec0535d64def1bc2c3fc9c917d4ec220cb4";
   }
   return void 0;
 }
@@ -203,10 +207,11 @@ try {
 `);
   process.exit(125);
 }
+var isRemoteBackendClient = Boolean(remoteBackendClientId(process.argv.slice(2)));
 var isWorkbenchManagement = process.argv[2] === "workbench" || process.argv[2] === "config";
 installConsolePresentationBridge();
 installProcessPresentationStreamBridge();
-if (!isWorkbenchManagement) maybeLoadCodexAuth();
+if (!isWorkbenchManagement && !isRemoteBackendClient) maybeLoadCodexAuth();
 try {
   getSettings();
 } catch {
@@ -223,9 +228,9 @@ var herdrSink = createHerdrEventSink();
 if (herdrSink) eventBus.subscribe(herdrSink);
 setHerdrSink(herdrSink);
 enforceSourceDistFreshness({ entryUrl: import.meta.url });
-if (!isWorkbenchManagement) await runStartupUpdate(VERSION);
+if (!isWorkbenchManagement && !isRemoteBackendClient) await runStartupUpdate(VERSION);
 async function buildProgram() {
-  const c = await import("./chunks/commands-EUGF4FUZ.js");
+  const c = await import("./chunks/commands-PBDAOZKA.js");
   const program = new Command();
   program.name("0").description("Open-source multi-model security research harness").version(VERSION).enablePositionalOptions();
   c.registerScanCommand(program);
@@ -243,6 +248,7 @@ async function buildProgram() {
   c.registerOrchestrateCommand(program);
   c.registerDbCommand(program);
   c.registerMcpServerCommand(program);
+  c.registerWorkflowCommand(program);
   c.registerTriageCommand(program);
   c.registerEvalCommand(program);
   c.registerBenchCommand(program);
@@ -288,9 +294,9 @@ async function buildProgram() {
   return program;
 }
 async function showInteractiveMenu() {
-  const { isBunRuntime } = await import("./chunks/runtime-LCJ4XSKE.js");
+  const { isBunRuntime } = await import("./chunks/runtime-4TAJFVF7.js");
   if (isBunRuntime()) {
-    const { showOpenTuiHome } = await import("./chunks/run-WTJCZZHV.js");
+    const { showOpenTuiHome } = await import("./chunks/run-VH4OIDKF.js");
     await showOpenTuiHome();
     return;
   }
@@ -313,7 +319,7 @@ process.once("beforeExit", () => {
   });
 });
 var userArgs = process.argv.slice(2);
-var knownCommands = ["scan", "resume", "replay", "history", "findings", "secure", "review", "fix", "audit", "deps", "doctor", "dashboard", "web", "tui", "watch", "orchestrate", "db", "mcp-server", "triage", "eval", "bench", "ingest", "kernel", "disclose", "verify", "exploit", "hunt", "recency-hunt", "deep-review", "lens-synth", "memsafety", "assumption-hunt", "specdrift", "protocol-check", "cve", "upgrade", "update", "h1", "intel", "recon", "js-recon", "npm-discovery", "identity", "adgraph", "entragraph", "cloud", "xnu-fuzz", "research", "radar", "timeline", "console", "agent-assure", "binary", "plugin", "theme", "config", "workbench", "checks", "evolve", "hackstore", "hack", "store", "help"];
+var knownCommands = ["scan", "resume", "replay", "history", "findings", "secure", "review", "fix", "audit", "deps", "doctor", "dashboard", "web", "tui", "watch", "orchestrate", "db", "mcp-server", "workflow", "runs", "triage", "eval", "bench", "ingest", "kernel", "disclose", "verify", "exploit", "hunt", "recency-hunt", "deep-review", "lens-synth", "memsafety", "assumption-hunt", "specdrift", "protocol-check", "cve", "upgrade", "update", "h1", "intel", "recon", "js-recon", "npm-discovery", "identity", "adgraph", "entragraph", "cloud", "xnu-fuzz", "research", "radar", "timeline", "console", "agent-assure", "binary", "plugin", "theme", "config", "workbench", "checks", "evolve", "hackstore", "hack", "store", "help"];
 if (userArgs.length === 0) {
   showInteractiveMenu().catch((err) => {
     console.error(source_default.red(err instanceof Error ? err.message : String(err)));

package/README.md

@@ -12,7 +12,7 @@
 </p>
 
 <p align="center">
-  <strong>The open-source, self-evolving, multi-model harness for security research.</strong><br/>
+  <strong>Open-source security workflows in your browser, terminal, or coding agent.</strong><br/>
   <sub>Backed by Y Combinator · The Swiss Applied AI &amp; Cybersecurity Research Lab</sub><br/>
   <a href="https://0.security/">0.security</a> ·
   <a href="https://docs.0.security/">Documentation</a> ·
@@ -21,94 +21,102 @@
 
 <p align="center">
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT%20OR%20Apache--2.0-1A1815?style=flat-square&labelColor=1A1815" alt="License: MIT OR Apache-2.0"></a>
-  <a href="https://github.com/0sec-labs/0/releases/latest"><img src="https://img.shields.io/github/v/release/0sec-labs/0?style=flat-square&labelColor=1A1815&color=1A1815" alt="Latest release"></a>
-  <a href="#status"><img src="https://img.shields.io/badge/status-research%20preview-FD802E?style=flat-square&labelColor=1A1815" alt="Status: research preview"></a>
+  <a href="https://github.com/0sec-labs/0/releases/latest">Latest release</a>
+  <a href="#status-and-safety"><img src="https://img.shields.io/badge/status-research%20preview-FD802E?style=flat-square&labelColor=1A1815" alt="Status: research preview"></a>
 </p>
 
 <p align="center">
-  <img src="assets/security-cycle-diagram.webp" alt="Zero studies, finds, fixes, reports, and improves." width="100%">
+  <img src="assets/zero-manifesto-movement.webp" alt="Zero manifesto movement" width="100%">
 </p>
 
-## Security research, in your workspace
-
-0 is an open-source, multi-model harness for investigating software security:
-read code, run tools, investigate findings and review proposed fixes.
-Built by the Swiss Applied AI & Cybersecurity Research Lab, it supports our
-[public disclosures and upstream fixes](https://0.security/research/#disclosures).
-
 ## Get started
 
-Install on Apple Silicon macOS or x64/ARM64 Linux, then open 0:
+Install on Apple Silicon macOS or x64/ARM64 Linux:
 
 ```bash
 curl -fsSL https://raw.githubusercontent.com/0sec-labs/0/main/install.sh | bash
 export PATH="$HOME/.0/bin:$PATH"
-0
+0 web
 ```
 
+**Browser:** `0 web` · **Terminal:** `0`
+
+Configure a [model provider](https://docs.0.security/api-keys/) before running AI workflows.
+
+## Workflows
 
-### Local web app development
+Browser, CLI, and MCP share one workflow runner with retained results.
 
-From a source checkout with dependencies installed, run:
+| Work | Built-in templates |
+| --- | --- |
+| Assess | Repositories, dependencies, APIs, web configuration, scoped penetration tests, package behavior, smart contracts, native code |
+| Verify | Findings with replay evidence |
+| Fix | Candidates with regression tests |
+| Research | Security research, deep source investigation |
+
+Start from 12 templates, customize steps, and run manually or with browser triggers and schedules.
+**Template:** starting point · **Workflow:** reusable steps · **Run:** one execution.
 
 ```bash
-npm run dev
+0 workflow list --templates
+0 workflow run --template security-research \
+  --target /absolute/path/to/repo --workspace /absolute/path/to/repo \
+  --format json > run.json
+0 runs list
 ```
 
-Open the local browser address printed by the launcher. The web app connects
-to the local engine and supports onboarding, provider connections, conversations,
-and approvals in the browser. Frontend changes reload automatically. The terminal
-console remains available separately through `0`.
+[Workflow guide: inputs, limits, and results](https://docs.0.security/workflow/).
 
-## Work locally, extend deliberately
+<details>
+  <summary>Preview the web app</summary>
 
-- Describe an authorized repository and investigation goal in chat, or use
-  `0 review ./authorized-repo` for a source review.
-- Review findings and proposed changes.
-  Follow the [research workflows](https://docs.0.security/research-workflows/)
-  for deeper investigations.
-- Connect your tools through [MCP and integrations](https://docs.0.security/integrations/).
-  Browse `/hackstore`, or [build and locally install an extension](https://docs.0.security/hackstore/).
-  Community plugins run as local processes; review them before enabling.
+![Customer API security review in the Zero web app](assets/screenshots/web-chat.jpg)
 
-## Why 0?
+![Customer API security workflow in the Zero web app](assets/screenshots/web-workflow.jpg)
 
-Use the models you want. Bring the tools you need. Make the workflow your own.
-0 brings security investigations and fixes into one terminal workspace, with
-focused agents and an extensible toolchain. The harness is open source and
-runs under your control.
+</details>
 
-## Guides
+## Use 0 from another agent
 
-- [Quick start and installation](https://docs.0.security/getting-started/)
-- [Models and provider connections](https://docs.0.security/api-keys/)
-- [Console, sessions and agents](https://docs.0.security/console/)
-- [Plugins and Hackstore publishing](https://docs.0.security/hackstore/)
-- [Scope and authorization](https://docs.0.security/scope/)
-- [GitHub Actions](https://docs.0.security/ci/github-action/)
-- [Troubleshooting](https://docs.0.security/troubleshooting/)
+Use the CLI commands above, or **MCP** to discover templates, create workflows, and manage runs:
 
-## Status and safety
+```bash
+0 mcp-server --workflows --workspace /absolute/path/to/repo
+```
 
-This is a **research preview**, not a guarantee of coverage or correctness.
-Review results and generated fixes before applying them. Tool making and
-[evaluated self-improvement](https://docs.0.security/improvement-plane/) are research workflows.
+Local MCP requires an explicitly selected host-local execution profile.
+For a registered remote engine, use `0 mcp-server --workflows --backend production`.
+0's model provider is separate from the connecting agent's session.
 
-Only test systems you own or are authorized to assess. The optional
-[scope plugin](https://docs.0.security/scope/) is disabled by default:
-enable it explicitly with `0 plugin enable scope` and configure your boundaries.
-The default console uses YOLO mode; use `0 console --mode standard` for
+Browser chat's **Connect an external agent** copies a setup prompt.
+See [MCP setup and individual tools](https://docs.0.security/integrations/) or
+[local and remote engines](https://docs.0.security/engine-connections/).
 
-## Contributing and license
+## Plugins
 
-Build and extend the harness with [CONTRIBUTING.md](CONTRIBUTING.md).
-Report security issues through [SECURITY.md](SECURITY.md).
-Licensed under [MIT](LICENSE-MIT) OR [Apache-2.0](LICENSE).
+Connect GitHub, Elastic, Semgrep, Snyk, Linear, Jira, Cloudflare, Slack, and Teams
+through [plugins and MCP](https://docs.0.security/integrations/).
+
+More guides: [installation](https://docs.0.security/getting-started/) ·
+[GitHub Actions](https://docs.0.security/ci/github-action/) ·
+[plugin development](https://docs.0.security/hackstore/) ·
+[troubleshooting](https://docs.0.security/troubleshooting/).
+
+## Development
+
+Install dependencies, run `npm run dev`, and open the printed browser address.
+See [CONTRIBUTING.md](CONTRIBUTING.md).
 
-## Acknowledgments
+## Status and safety
+
+**Research preview.** Assess authorized systems and review findings and fixes.
+The terminal defaults to YOLO; use `0 console --mode standard` for confirmations.
+The optional [scope plugin](https://docs.0.security/scope/) enforces target boundaries.
+
+Report vulnerabilities through [SECURITY.md](SECURITY.md).
+Licensed under [MIT](LICENSE-MIT) OR [Apache-2.0](LICENSE).
 
-Thanks to the teams behind [OpenTUI](https://github.com/anomalyco/opentui),
-[Bun](https://bun.sh/) and [React](https://react.dev/) for the interface stack,
-and [Models.dev](https://models.dev/) and [LiteLLM](https://github.com/BerriAI/litellm)
-for model metadata and pricing estimates. Thank you to everyone contributing
-code, reporting bugs and sharing ideas.
+[Public disclosures and upstream fixes](https://0.security/research/#disclosures).
+Thanks to [OpenTUI](https://github.com/anomalyco/opentui), [Bun](https://bun.sh/),
+[React](https://react.dev/), [Models.dev](https://models.dev/),
+[LiteLLM](https://github.com/BerriAI/litellm), and our contributors.

package/chunks/{adapt-loop-3CCOWE43.js → adapt-loop-V3JFWOKC.js}

@@ -5,10 +5,10 @@ import {
   adaptAndVerify,
   applyUnifiedDiff,
   renderAdaptationPrompt
-} from "./chunk-5WAJGLCW.js";
-import "./chunk-YED25PA4.js";
-import "./chunk-RCRTSKQN.js";
-import "./chunk-6KFB6AYN.js";
+} from "./chunk-3ZNI7F42.js";
+import "./chunk-3E54JYS4.js";
+import "./chunk-F344NYUN.js";
+import "./chunk-LTEE2JWK.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {

package/chunks/{artifact-scraper-Z4UUIOH3.js → artifact-scraper-NYKUF2M5.js}

@@ -14,8 +14,8 @@ import {
   parseUbuntuTracker,
   scoreCodeCandidate,
   scoreRepoCandidate
-} from "./chunk-3BPX75OR.js";
-import "./chunk-6KFB6AYN.js";
+} from "./chunk-W5VNCB57.js";
+import "./chunk-LTEE2JWK.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {

package/chunks/{assumption-mining-2UAKQB6V.js → assumption-mining-ZX3YVWEH.js}

@@ -24,33 +24,33 @@ import {
   scoreDualViewWeaponizability,
   storeAssumptionModel,
   subjectSelfEnforces
-} from "./chunk-ELI3BVIK.js";
+} from "./chunk-EJH2TNVH.js";
 import {
   composeGate,
   makeSkepticVerifier
-} from "./chunk-H4DH7COV.js";
-import "./chunk-H6Q2QAIY.js";
+} from "./chunk-P7KDN5PK.js";
+import "./chunk-EH2WTNY7.js";
 import "./chunk-K2PWUPUI.js";
-import "./chunk-SCWWLABR.js";
-import "./chunk-2OQOQ2FZ.js";
+import "./chunk-JEYIWMGL.js";
+import "./chunk-Y4HJRUFE.js";
 import "./chunk-UEX7PFSE.js";
-import "./chunk-YED25PA4.js";
-import "./chunk-RCRTSKQN.js";
-import "./chunk-CF3MNS3O.js";
-import "./chunk-WBRGXCU2.js";
+import "./chunk-3E54JYS4.js";
+import "./chunk-F344NYUN.js";
+import "./chunk-AAA4PRWK.js";
+import "./chunk-UZUELPFW.js";
 import "./chunk-O6KPVYOI.js";
-import "./chunk-L2CCO4KE.js";
+import "./chunk-T7ZEVY5G.js";
 import "./chunk-IXT64DV5.js";
-import "./chunk-CPCHLL6A.js";
-import "./chunk-YAZARMJY.js";
-import "./chunk-QVIRWJ45.js";
-import "./chunk-2WWAPKAW.js";
+import "./chunk-65H3MRBF.js";
+import "./chunk-CP6HANBE.js";
+import "./chunk-BF5FIK7H.js";
+import "./chunk-NI6QYQSK.js";
 import "./chunk-RS4MAN3Q.js";
 import "./chunk-UELXHK2Y.js";
-import "./chunk-4ZYYX5GY.js";
-import "./chunk-C6JPA32H.js";
+import "./chunk-A5QO7N3S.js";
+import "./chunk-ITES7BCY.js";
 import "./chunk-5IBCBQEH.js";
-import "./chunk-6KFB6AYN.js";
+import "./chunk-LTEE2JWK.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {

package/chunks/backend-connections-H52NIVH2.js

@@ -0,0 +1,23 @@
+#!/usr/bin/env node
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
+import {
+  BackendConnectionError,
+  BackendConnectionRegistry,
+  backendBearerFromEnv,
+  createBackendHandshake,
+  handleBackendConnectionRequest,
+  loadBackendConnectionConfig
+} from "./chunk-WYNZFNMF.js";
+import "./chunk-T7ZEVY5G.js";
+import "./chunk-LTEE2JWK.js";
+import "./chunk-VIT5ALXF.js";
+import "./chunk-VCSFCHAJ.js";
+export {
+  BackendConnectionError,
+  BackendConnectionRegistry,
+  backendBearerFromEnv,
+  createBackendHandshake,
+  handleBackendConnectionRequest,
+  loadBackendConnectionConfig
+};

package/chunks/{chunk-YED25PA4.js → chunk-3E54JYS4.js}

@@ -3,7 +3,7 @@ import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
   homeStateDir
-} from "./chunk-6KFB6AYN.js";
+} from "./chunk-LTEE2JWK.js";
 
 // packages/core/dist/agent/journal/types.js
 var JOURNAL_SCHEMA_VERSION = 1;

package/chunks/{chunk-FFHRANYC.js → chunk-3P3XXSIJ.js}

@@ -12,22 +12,17 @@ import {
   resolveLayeredSettings,
   saveProjectOverrides,
   saveSettings
-} from "./chunk-XODDLNBI.js";
-import {
-  expandHomePath,
-  isExistingLocalTargetPath,
-  isExplicitLocalTargetPath
-} from "./chunk-GVY3S5E5.js";
+} from "./chunk-HFDSIHTE.js";
 import {
   ANALYTICS_LEVEL_ENV,
   analyticsOptedOut,
   analyticsPipeline,
   levelAtLeast,
   resolveAnalyticsLevel
-} from "./chunk-2WWAPKAW.js";
+} from "./chunk-NI6QYQSK.js";
 import {
   createPresentationEvent
-} from "./chunk-6KFB6AYN.js";
+} from "./chunk-LTEE2JWK.js";
 
 // packages/cli/src/tui/settings-store.ts
 import { useSyncExternalStore } from "react";
@@ -443,84 +438,6 @@ function writePresentationLine(text, eventType = "output.stdout") {
 `, eventType);
 }
 
-// packages/cli/src/engagement-plan.ts
-var PACKAGE_PREFIXES = {
-  "npm:": { ecosystem: "npm", targetType: "npm-package" },
-  "pypi:": { ecosystem: "pypi", targetType: "pypi-package" },
-  "cargo:": { ecosystem: "cargo", targetType: "cargo-package" },
-  "oci:": { ecosystem: "oci", targetType: "oci-image" }
-};
-function resolveEngagement(rawTarget) {
-  const raw = rawTarget.trim();
-  if (raw.length === 0) return { ok: false, message: "Enter a URL, source path, git URL, or ecosystem-prefixed package." };
-  for (const [prefix, packagePlan] of Object.entries(PACKAGE_PREFIXES)) {
-    if (!raw.startsWith(prefix)) continue;
-    const target = raw.slice(prefix.length).trim();
-    if (target.length === 0) return { ok: false, message: `${prefix} requires a package name.` };
-    return {
-      ok: true,
-      plan: {
-        kind: "package",
-        target,
-        targetType: packagePlan.targetType,
-        ecosystem: packagePlan.ecosystem,
-        label: `${packagePlan.ecosystem} package ${target}`
-      }
-    };
-  }
-  if (raw.startsWith("source:")) {
-    const target = raw.slice("source:".length).trim();
-    if (target.length === 0) return { ok: false, message: "source: requires a local path or git URL." };
-    return {
-      ok: true,
-      plan: {
-        kind: "source",
-        target: expandHomePath(target),
-        targetType: "source-code",
-        label: `source review ${target}`
-      }
-    };
-  }
-  if (raw.startsWith("git@") || raw.startsWith("git://") || raw.endsWith(".git") || raw.startsWith("https://github.com/")) {
-    return {
-      ok: true,
-      plan: {
-        kind: "source",
-        target: raw,
-        targetType: "source-code",
-        label: `source review ${raw}`
-      }
-    };
-  }
-  if (raw.startsWith("mcp://") || raw.startsWith("http://") || raw.startsWith("https://")) {
-    return {
-      ok: true,
-      plan: {
-        kind: "web",
-        target: raw,
-        targetType: "url",
-        label: `web target ${raw}`
-      }
-    };
-  }
-  if (isExplicitLocalTargetPath(raw) || isExistingLocalTargetPath(raw)) {
-    const target = expandHomePath(raw);
-    return {
-      ok: true,
-      plan: {
-        kind: "source",
-        target,
-        targetType: "source-code",
-        label: `source review ${target}`
-      }
-    };
-  }
-  return {
-    ok: false,
-    message: "Ambiguous target. Use https://\u2026, ./path, source:\u2026, npm:\u2026, pypi:\u2026, cargo:\u2026, or oci:\u2026."
-  };
-}
-
 export {
   getSettings,
   getSettingSources,
@@ -542,6 +459,5 @@ export {
   suspendProcessPresentationStreamBridge,
   resumeProcessPresentationStreamBridge,
   processPresentationOutput,
-  writePresentationLine,
-  resolveEngagement
+  writePresentationLine
 };

package/chunks/{chunk-5WAJGLCW.js → chunk-3ZNI7F42.js}

@@ -3,13 +3,13 @@ import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
   createJournalWriter
-} from "./chunk-YED25PA4.js";
+} from "./chunk-3E54JYS4.js";
 import {
   verifyKernelFinding
-} from "./chunk-RCRTSKQN.js";
+} from "./chunk-F344NYUN.js";
 import {
   homeStateDir
-} from "./chunk-6KFB6AYN.js";
+} from "./chunk-LTEE2JWK.js";
 
 // packages/core/dist/cve/adapt-loop.js
 import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";