0sec-cli 0.22.4 → 0.24.0

package/chunks/{dist-27BNG6WD.js → dist-AJU25UXA.js}

@@ -27,7 +27,12 @@ import {
   DEFAULT_WORKBENCH_PROVIDER_LIMITS,
   DISPATCH2022,
   DISTRO_DEFAULTS,
+  ENGINE_OPERATIONS,
   EnforcementTracker,
+  EngineAssessmentPlanSchema,
+  EngineAssessmentSchema,
+  EngineService,
+  EngineStartRunSchema,
   FEATURE_NAMES,
   FindingMatchObjectiveSchema,
   FlagCaptureObjectiveSchema,
@@ -75,6 +80,7 @@ import {
   RECENCY_DETECTORS_ALL,
   RECENCY_DETECTORS_FULL,
   RECENCY_REACHABLE_ALLOWLIST,
+  REPORT_EXPORT_FORMATS,
   ResearchAdapterRegistry,
   SEMANTIC_COSMETIC_RUBRIC,
   STAGE_ACTION_HISTORY_CAP,
@@ -87,6 +93,7 @@ import {
   TartVmLane,
   UNINSTRUMENTED_LAYERS,
   UnifiedPipelineResearchAdapter,
+  UserspaceCounterexampleResearchAdapter,
   UserspaceMemSafetyResearchAdapter,
   VARIABLE_SIZE,
   VERBOSE_ACTIONS_RENDER_CAP,
@@ -97,6 +104,7 @@ import {
   WindowsEvidenceWorkerTransportError,
   WindowsHyperVImportAdapter,
   WindowsVariantResearchAdapter,
+  WorkflowService,
   XNU_RECEIPT_SCHEMA_VERSION,
   XnuIokitResearchAdapter,
   XnuReceiptReplayer,
@@ -252,7 +260,11 @@ import {
   evmFinderLenses,
   evmVerifyLenses,
   exampleManifestPath,
+  executeAssessment,
+  executeAssessmentRun,
   executeKernelRun,
+  executeWorkflow,
+  exportReport,
   extractCorpus,
   extractCraftCpgTargets,
   extractDupeSignature,
@@ -269,6 +281,8 @@ import {
   fnv1a64,
   foldExploitabilityIntoSeverity,
   foldWeaponizationIntoVerdict,
+  formalArtifactDigest,
+  formalChallengeDigest,
   formatAttackSurfaceForPrompt,
   formatGraphSlicePromptBlock,
   formatInvariantPromptBlock,
@@ -314,6 +328,7 @@ import {
   isHypothesisOnly,
   isPlannable,
   isReachablePath,
+  isReportExportFormat,
   isVariable,
   judgeCraftCandidatesWithLlm,
   kcsanRaceToBrief,
@@ -377,6 +392,7 @@ import {
   objectiveOracleEvaluatorConfigJson,
   observationDigest,
   observationQueueSummary,
+  orderWorkflowNodes,
   packageAudit,
   pairwiseDeltas,
   parseApprovedObservationShape,
@@ -475,6 +491,7 @@ import {
   runEGATSWithDefaults,
   runEnsembleCraft,
   runExploitScan,
+  runFormalResearchCampaign,
   runKernelExploitChain,
   runKernelSourceJevPrepass,
   runKernelVariantHunt,
@@ -548,6 +565,7 @@ import {
   techniquesForEvent,
   testServicePluginConnection,
   timerfdInterruptGadget,
+  toAssessmentReport,
   toCrossValidatedLeads,
   toHuntCandidate,
   toHuntCandidates,
@@ -571,6 +589,7 @@ import {
   validateXnuFuzzReceipt,
   variableLengthSchedule,
   verify,
+  verifyFormalArtifact,
   verifyKernelCrash,
   verifyRootProof,
   verifyStandaloneKernelReproducer,
@@ -582,14 +601,27 @@ import {
   withEnvOverrides,
   withVariantFeatureFlags,
   xnuArtifactDigest
-} from "./chunk-OAS5SAVZ.js";
+} from "./chunk-V5I5GAQH.js";
+import "./chunk-5FHFG5P2.js";
+import {
+  MAX_POC_BYTES,
+  PocFetchError,
+  adaptAndVerify,
+  applyUnifiedDiff,
+  extractInlineCodeBlock,
+  fetchPoc,
+  renderAdaptationPrompt
+} from "./chunk-4YRXIVPZ.js";
 import {
   RateLimiter,
   TokenBucket,
   enumerateJsChunkUrls,
   parseRateLimitFlag,
   parseRetryAfter
-} from "./chunk-E3OOBVOK.js";
+} from "./chunk-TOAAYJVN.js";
+import {
+  createLiveHttpSender
+} from "./chunk-GVD6SJGH.js";
 import {
   extractSpecInvariants,
   mapInvariantsToImplementation,
@@ -600,7 +632,7 @@ import {
 import {
   getEvalCategories,
   runEval
-} from "./chunk-5JNTMWPK.js";
+} from "./chunk-V4BD7GSP.js";
 import {
   classifyUserspacePrimitive,
   crashArtifactToFinding,
@@ -616,7 +648,7 @@ import {
   runMemSafetyScan,
   runUserspaceFuzzLoop,
   sniffMemPrimitive
-} from "./chunk-TM74SSHC.js";
+} from "./chunk-IIBNQTOK.js";
 import {
   leadToFinding,
   runNpmDynamicDiscovery
@@ -658,7 +690,7 @@ import {
   runStrategy,
   runWeaponization,
   selectStrategies
-} from "./chunk-IHPTOTLL.js";
+} from "./chunk-FKGFHLLS.js";
 import {
   BENIGN_MAX_CLASS,
   UPGRADE_MIN_CLASS,
@@ -669,21 +701,20 @@ import {
   isDangerUpgrade,
   maxDangerClass,
   rankDanger
-} from "./chunk-DPUXXMJW.js";
+} from "./chunk-RPTO5FY2.js";
 import {
-  MAX_POC_BYTES,
-  PocFetchError,
-  adaptAndVerify,
-  applyUnifiedDiff,
-  extractInlineCodeBlock,
-  fetchPoc,
-  renderAdaptationPrompt
-} from "./chunk-5WAJGLCW.js";
+  detectTargetType,
+  expandHomePath,
+  isExistingLocalTargetPath,
+  isExplicitLocalTargetPath,
+  prepare,
+  resolveLocalTargetPath
+} from "./chunk-E42XEJTK.js";
 import {
   applyReachabilityGate,
   classifyPathReachability,
   generateVariantCandidates
-} from "./chunk-E74LXQFY.js";
+} from "./chunk-HRBOZBMC.js";
 import {
   collectScopeFiles,
   countScopeFilesUpTo
@@ -728,7 +759,7 @@ import {
   violationsToHuntPlan,
   witnessAssumptionViolation,
   witnessDualViewContexts
-} from "./chunk-ELI3BVIK.js";
+} from "./chunk-H76JYUPE.js";
 import {
   CHROMIUM_BARE_WORDS,
   FREEBSD_BARE_KERNEL_WORDS,
@@ -813,7 +844,7 @@ import {
   unresolvedHuntClaims,
   validateHuntClaimRecord,
   validateResearchProposal
-} from "./chunk-H4DH7COV.js";
+} from "./chunk-CSPF47S3.js";
 import {
   ACTION_LOG_ARGS_MAX,
   ACTION_LOG_ARG_VALUE_MAX,
@@ -833,6 +864,7 @@ import {
   HUNT_MEMORY_SCHEMA_VERSION,
   HUNT_REDACTED,
   HuntMemoryStore,
+  LearningService,
   LiveHarnessHost,
   LocalShellRunner,
   MAX_BODY_CHARS,
@@ -895,6 +927,7 @@ import {
   dedupeAssets,
   describeEngagementPosture,
   describeScopeGuards,
+  discoverAgentSkills,
   discoveryPrompt,
   drainInbox,
   effectiveFallbackRps,
@@ -937,6 +970,7 @@ import {
   isWafEvasionLadderEnabled,
   isWorkflowAgentToolAllowed,
   listSkillSummaries,
+  loadAgentSkill,
   loadEvolutionCampaign,
   loadEvolutionRegistry,
   loadSkillRegistry,
@@ -992,6 +1026,7 @@ import {
   targetRequiresScope,
   toolCallPreview,
   tryRecoverPreviousFeedback,
+  validateAgentSkillContent,
   validateAwsCredentials,
   validateUpdateTodosArgs,
   verifyEvolutionSnapshot,
@@ -1000,7 +1035,19 @@ import {
   withWorkflowAuditExecutionPolicy,
   workflowPhasePrompt,
   workflowPolicyRuntime
-} from "./chunk-H6Q2QAIY.js";
+} from "./chunk-A3EKBUEM.js";
+import {
+  DEFAULT_JOURNAL_SIDECAR_THRESHOLD_BYTES,
+  JOURNAL_SCHEMA_VERSION,
+  branchJournal,
+  createJournalWriter,
+  defaultJournalRootDir,
+  loadJournal,
+  migrateJournalEntry,
+  rehydrateContext,
+  resolveJournalPaths,
+  streamJournal
+} from "./chunk-YORL5S5V.js";
 import "./chunk-K2PWUPUI.js";
 import {
   IntelCache,
@@ -1033,11 +1080,11 @@ import {
   searchTargetHistory,
   toGraphSnapshot,
   toOsvEcosystem
-} from "./chunk-SCWWLABR.js";
+} from "./chunk-CIMN2AO6.js";
 import {
   parseSanitizerLog,
   renderSanitizerVerdict
-} from "./chunk-2OQOQ2FZ.js";
+} from "./chunk-YERUDEXT.js";
 import {
   ESCALATION_LADDER,
   ladderUpTo,
@@ -1046,18 +1093,11 @@ import {
   rungAtLeast,
   rungRank
 } from "./chunk-UEX7PFSE.js";
+import "./chunk-YJU7QACE.js";
 import {
-  DEFAULT_JOURNAL_SIDECAR_THRESHOLD_BYTES,
-  JOURNAL_SCHEMA_VERSION,
-  branchJournal,
-  createJournalWriter,
-  defaultJournalRootDir,
-  loadJournal,
-  migrateJournalEntry,
-  rehydrateContext,
-  resolveJournalPaths,
-  streamJournal
-} from "./chunk-YED25PA4.js";
+  ScanCostLedger,
+  budgetNativeRuntime
+} from "./chunk-YYOQADBB.js";
 import {
   defaultDmesgOutPath,
   detectOutOfBandModuleLoad,
@@ -1065,7 +1105,7 @@ import {
   prepareKernelVmArtifacts,
   verifyKernelFinding,
   writeProofFileReadOnly
-} from "./chunk-RCRTSKQN.js";
+} from "./chunk-DNV3ZMPX.js";
 import {
   FixTemplateRegistry,
   applySourceFixCandidate,
@@ -1089,7 +1129,7 @@ import {
   saveSourceFixProjectInputs,
   templateIdForCategory,
   verifySourceFixCandidate
-} from "./chunk-6WQDXWQC.js";
+} from "./chunk-A6AZZ6XX.js";
 import {
   DEFAULT_IMPROVEMENT_PROMOTION_POLICY,
   appendImprovementLedgerEntry,
@@ -1099,16 +1139,13 @@ import {
   loadEvolutionConfigFile,
   parseEvolutionConfig,
   verifyImprovementLedger
-} from "./chunk-CF3MNS3O.js";
+} from "./chunk-Y7KV7WV6.js";
 import {
   generateConformanceModel,
   judgeHttpDivergence,
   runHttpConformanceCheck,
   structurallyValidateConformanceModel
 } from "./chunk-SQCBHFWN.js";
-import {
-  createLiveHttpSender
-} from "./chunk-GVD6SJGH.js";
 import {
   DEFAULT_ENSEMBLE_MODELS,
   OpenRouterRuntime,
@@ -1117,7 +1154,7 @@ import {
   detectAvailableRuntimes,
   getRuntimeInfo,
   pickRuntimeForStage
-} from "./chunk-WBRGXCU2.js";
+} from "./chunk-EXTN4SQV.js";
 import {
   ProcessRuntime
 } from "./chunk-O6KPVYOI.js";
@@ -1240,7 +1277,7 @@ import {
   reachableTo,
   shortestPaths
 } from "./chunk-UFHN6RIU.js";
-import "./chunk-L2CCO4KE.js";
+import "./chunk-RCHAFSWS.js";
 import {
   DISCLOSURE_STATUSES,
   IllegalTransitionError,
@@ -1270,7 +1307,7 @@ import {
   renderReproducibilityManifest,
   renderVendorNotificationMarkdown,
   transition
-} from "./chunk-TO35Y326.js";
+} from "./chunk-554D4AYM.js";
 import {
   DEFAULT_STEP_TIMEOUT_MS,
   MAX_CAPTURE_BYTES,
@@ -1290,24 +1327,12 @@ import {
   parseUbuntuTracker,
   scoreCodeCandidate,
   scoreRepoCandidate
-} from "./chunk-3BPX75OR.js";
-import {
-  detectTargetType,
-  expandHomePath,
-  isExistingLocalTargetPath,
-  isExplicitLocalTargetPath,
-  prepare,
-  resolveLocalTargetPath
-} from "./chunk-GVY3S5E5.js";
-import "./chunk-CPCHLL6A.js";
-import {
-  ScanCostLedger
-} from "./chunk-YAZARMJY.js";
+} from "./chunk-RD4FKFWR.js";
 import "./chunk-NJLKFC66.js";
 import {
   CodexCatalogRefreshError,
   loadCodexModelCatalog
-} from "./chunk-G2BE2FC7.js";
+} from "./chunk-O3ADFN2A.js";
 import {
   FEATURE_PRESETS,
   LlmApiRuntime,
@@ -1331,7 +1356,7 @@ import {
   resolveFeaturePreset,
   stderrDiagnosticSink,
   subscribeDiagnostics
-} from "./chunk-QVIRWJ45.js";
+} from "./chunk-EYBMTELO.js";
 import {
   ANALYTICS_ENDPOINT,
   ANALYTICS_LEVEL_ENV,
@@ -1370,7 +1395,11 @@ import {
   runWorkbenchBrokerProgram,
   startWorkbenchBroker,
   withRunContribution
-} from "./chunk-2WWAPKAW.js";
+} from "./chunk-BIJPMYFA.js";
+import {
+  eventBus,
+  presentationEventSink
+} from "./chunk-52AWIBCT.js";
 import "./chunk-RS4MAN3Q.js";
 import {
   Cvss4ParseError,
@@ -1395,11 +1424,7 @@ import {
   suggestCvss4,
   suggestCwesForCategory,
   verifyAgainstRef
-} from "./chunk-UELXHK2Y.js";
-import {
-  eventBus,
-  presentationEventSink
-} from "./chunk-4ZYYX5GY.js";
+} from "./chunk-IK27KMVV.js";
 import {
   BUILTIN_PLUGINS,
   DEFAULT_CALL_TIMEOUT_MS,
@@ -1461,11 +1486,11 @@ import {
   validatePluginManifest,
   withScopeEnforcement,
   writeEnablement
-} from "./chunk-C6JPA32H.js";
+} from "./chunk-RBOMXUYL.js";
 import "./chunk-5IBCBQEH.js";
 import {
   estimateCost
-} from "./chunk-6KFB6AYN.js";
+} from "./chunk-RZR2XXAK.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {
@@ -1539,11 +1564,16 @@ export {
   ENABLEMENT_FILE_MODE,
   ENABLEMENT_SCHEMA_VERSION,
   ENGAGEMENT_PROFILE_NAMES,
+  ENGINE_OPERATIONS,
   ENTRA_PATH_ANALYZERS,
   ENTRA_PATH_ANALYZERS_BY_ID,
   ESCALATION_LADDER,
   EmptyPocError,
   EnforcementTracker,
+  EngineAssessmentPlanSchema,
+  EngineAssessmentSchema,
+  EngineService,
+  EngineStartRunSchema,
   ExecutablePluginManager,
   FEATURE_NAMES,
   FEATURE_PRESETS,
@@ -1601,6 +1631,7 @@ export {
   KERNEL_RUN_TOOL_DEFINITION,
   KNOWN_ATTACK_SURFACES,
   LIFETIME_SINKS,
+  LearningService,
   LinuxBootMatrixImportAdapter,
   LinuxKernelResearchAdapter,
   LiveAgenticScanResearchAdapter,
@@ -1672,6 +1703,7 @@ export {
   RECENCY_DETECTORS_ALL,
   RECENCY_DETECTORS_FULL,
   RECENCY_REACHABLE_ALLOWLIST,
+  REPORT_EXPORT_FORMATS,
   REPORT_PLATFORMS,
   RESULT_TRUNCATION_MARKER,
   ROLE_TEMPLATE_IDS,
@@ -1713,6 +1745,7 @@ export {
   UnifiedPipelineResearchAdapter,
   UnreproducedFindingError,
   UnverifiedFindingError,
+  UserspaceCounterexampleResearchAdapter,
   UserspaceMemSafetyResearchAdapter,
   VARIABLE_SIZE,
   VERBOSE_ACTIONS_RENDER_CAP,
@@ -1727,6 +1760,7 @@ export {
   WindowsEvidenceWorkerTransportError,
   WindowsHyperVImportAdapter,
   WindowsVariantResearchAdapter,
+  WorkflowService,
   XNU_RECEIPT_SCHEMA_VERSION,
   XnuIokitResearchAdapter,
   XnuReceiptReplayer,
@@ -1813,6 +1847,7 @@ export {
   breakRecordToFinding,
   bucketEndpoint,
   bucketInScope,
+  budgetNativeRuntime,
   buildAdGraph,
   buildAttackPath,
   buildBranchName,
@@ -2039,6 +2074,7 @@ export {
   digestBenchManifest,
   digestTargetSnapshot,
   disable,
+  discoverAgentSkills,
   discoverEpochs,
   discoverMcpTarget,
   discoverObjectSubset,
@@ -2091,10 +2127,14 @@ export {
   evolutionCorpusIdentity,
   evolutionDigest,
   exampleManifestPath,
+  executeAssessment,
+  executeAssessmentRun,
   executeEvolutionVersion,
   executeKernelRun,
   executePocSteps,
+  executeWorkflow,
   expandHomePath,
+  exportReport,
   extractAttributionFromScopeJson,
   extractCFromLlmOutput,
   extractCorpus,
@@ -2152,6 +2192,8 @@ export {
   fnv1a64,
   foldExploitabilityIntoSeverity,
   foldWeaponizationIntoVerdict,
+  formalArtifactDigest,
+  formalChallengeDigest,
   formatAttackSurfaceForPrompt,
   formatCvss4Vector,
   formatCweSection,
@@ -2272,6 +2314,7 @@ export {
   isPlannable,
   isPubliclyDisclosed,
   isReachablePath,
+  isReportExportFormat,
   isReproduced,
   isReproducedMemCorruption,
   isSafePluginId,
@@ -2306,6 +2349,7 @@ export {
   listProjectReviewChecks,
   listSkillSummaries,
   liveGit,
+  loadAgentSkill,
   loadAppsecArchetypes,
   loadAppsecFinderLenses,
   loadAssumptionModel,
@@ -2426,6 +2470,7 @@ export {
   observationDigest,
   observationQueueSummary,
   oracleForCategory,
+  orderWorkflowNodes,
   packageAudit,
   pairwiseDeltas,
   parseApiSpec,
@@ -2632,6 +2677,7 @@ export {
   runEval,
   runEvolution,
   runExploitScan,
+  runFormalResearchCampaign,
   runHttpConformanceCheck,
   runHuntScan,
   runHybridPathAnalysis,
@@ -2779,6 +2825,7 @@ export {
   testServicePluginConnection,
   tier0TargetIds,
   timerfdInterruptGadget,
+  toAssessmentReport,
   toCrossValidatedLeads,
   toGraphSnapshot,
   toHuntCandidate,
@@ -2800,6 +2847,7 @@ export {
   unconfiguredVerifier,
   unresolvedHuntClaims,
   updateProjectReviewChecks,
+  validateAgentSkillContent,
   validateAwsCredentials,
   validateBundlePlan,
   validateCandidateLens,
@@ -2818,6 +2866,7 @@ export {
   argvForStep as verifyArgvForStep,
   verifyEvolutionSnapshot,
   excerpt as verifyExcerpt,
+  verifyFormalArtifact,
   verifyImprovementLedger,
   verifyKernelCrash,
   verifyKernelFinding,