0sec-cli 0.24.0 → 0.25.0

package/chunks/{chunk-H76JYUPE.js → chunk-76CLUI54.js}

@@ -5,13 +5,13 @@ import {
   makeSkepticVerifier,
   runHuntScan,
   scoreGeometry
-} from "./chunk-CSPF47S3.js";
+} from "./chunk-HFUOUT2B.js";
 import {
   runReproducerInKernelVm
-} from "./chunk-DNV3ZMPX.js";
+} from "./chunk-FOLTHXRH.js";
 import {
   LlmApiRuntime
-} from "./chunk-EYBMTELO.js";
+} from "./chunk-EIONVEFN.js";
 import {
   __commonJS,
   __require,

package/chunks/{chunk-KCA35IL3.js → chunk-7PUJI64A.js}

@@ -2,7 +2,14 @@
 import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
-  EventSourceParserStream,
+  EventSourceParserStream
+} from "./chunk-ABKUI3QB.js";
+import {
+  require_auth_errors,
+  require_token_error,
+  require_token_util
+} from "./chunk-TRH2PJSN.js";
+import {
   _enum,
   any,
   array,
@@ -17,12 +24,7 @@ import {
   toJSONSchema,
   union,
   unknown
-} from "./chunk-NJLKFC66.js";
-import {
-  require_auth_errors,
-  require_token_error,
-  require_token_util
-} from "./chunk-TRH2PJSN.js";
+} from "./chunk-36J5ZLFE.js";
 import {
   __commonJS,
   __toESM
@@ -588,7 +590,7 @@ function isJSONObject(value) {
 var WORKFLOW_SERIALIZE = /* @__PURE__ */ Symbol.for("workflow-serialize");
 var WORKFLOW_DESERIALIZE = /* @__PURE__ */ Symbol.for("workflow-deserialize");
 
-// node_modules/.pnpm/@ai-sdk+provider-utils@5.0.45_zod@3.25.76/node_modules/@ai-sdk/provider-utils/dist/index.js
+// node_modules/.pnpm/@ai-sdk+provider-utils@5.0.45_zod@4.6.6/node_modules/@ai-sdk/provider-utils/dist/index.js
 function asArray(value) {
   return value === void 0 ? [] : Array.isArray(value) ? value : [value];
 }
@@ -3868,7 +3870,7 @@ function getToolCaller(tool2) {
   return tool2 == null ? void 0 : tool2.experimental_toolCaller;
 }
 
-// node_modules/.pnpm/@ai-sdk+gateway@4.0.87_zod@3.25.76/node_modules/@ai-sdk/gateway/dist/index.js
+// node_modules/.pnpm/@ai-sdk+gateway@4.0.87_zod@4.6.6/node_modules/@ai-sdk/gateway/dist/index.js
 var import_oidc = __toESM(require_dist(), 1);
 var import_oidc2 = __toESM(require_dist(), 1);
 var GATEWAY_REALTIME_SUBPROTOCOL = "ai-gateway-realtime.v1";

package/chunks/{chunk-W6IYTSZH.js → chunk-7TIWL6E5.js}

@@ -10,28 +10,28 @@ import {
   validateWorkbenchSourceLesson,
   workbenchConfigPath,
   workbenchNetworkEnabled
-} from "./chunk-QEA2VHBD.js";
+} from "./chunk-6TA3CWND.js";
 import {
   createWorkbenchProviderBroker
-} from "./chunk-V5I5GAQH.js";
+} from "./chunk-EEP6GBUO.js";
 import {
   HuntMemoryStore,
   LearningService
-} from "./chunk-A3EKBUEM.js";
+} from "./chunk-HFUOUT2B.js";
 import {
   LearningStore,
   learningArtifactDigest,
   learningProjectId,
   osecDB
-} from "./chunk-RCHAFSWS.js";
+} from "./chunk-YXTV2FRE.js";
 import {
   isAdmittedSmolvmWorkbench
-} from "./chunk-BIJPMYFA.js";
+} from "./chunk-3T5R7P4T.js";
 import {
   SERVICE_PLUGIN_CATALOG,
   findingSchema,
   homeStateDir
-} from "./chunk-RZR2XXAK.js";
+} from "./chunk-S3B6HFSM.js";
 
 // packages/cli/src/web/service-plugins.ts
 import { constants, closeSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, renameSync, rmSync, writeFileSync, chmodSync } from "node:fs";
@@ -103,10 +103,8 @@ function createIsolatedConsoleSession(config, options = {}) {
         if (realpathSync(context.workspaceRoot) !== approvedWorkspace) return [];
         const memory2 = hostMemory();
         return withLearning((service) => {
-          const entries = service.importCodebaseNotes(learningProjectId(context.scopePath), context.scopePath, memory2, 8);
-          return memory2.recallCodebase(context.scopePath, 6).flatMap((note) => {
+          return service.recallCodebaseNotes(learningProjectId(context.scopePath), context.scopePath, memory2, 6).flatMap((note) => {
             const sourceLinks = note.codebase.files.map((file) => ({ path: file.path, hash: file.digest }));
-            if (!entries.some((entry) => entry.status === "current" && entry.summary === note.summary && JSON.stringify(entry.sourceLinks) === JSON.stringify(sourceLinks))) return [];
             const lesson = { title: note.title, summary: note.summary, sourceLinks: sourceLinks.map((link) => ({ ...link, path: relative(context.workspaceRoot, resolve(context.scopePath, link.path)).split(sep).join("/") })) };
             try {
               return [validateWorkbenchSourceLesson(lesson, context.workspaceRoot, context.scopePath)];
@@ -287,7 +285,7 @@ var ServicePluginServices = class {
   }
   async #probe(connection) {
     try {
-      const probe = this.#options.probe ?? (await import("./dist-AJU25UXA.js")).testServicePluginConnection;
+      const probe = this.#options.probe ?? (await import("./dist-6RNAVFAY.js")).testServicePluginConnection;
       const result = await probe(connection);
       if (!Array.isArray(result.tools) || result.tools.length > 512 || result.tools.some((tool) => typeof tool.name !== "string" || tool.name.length > 256 || typeof tool.description !== "string" || tool.description.length > 16384)) throw new Error("Invalid tool catalog.");
       const configurations = [...readStore(this.#options.homeDir), connection];

package/chunks/chunk-ABKUI3QB.js

@@ -0,0 +1,196 @@
+#!/usr/bin/env node
+import { createRequire as __0CreateRequire } from "node:module";
+const require = __0CreateRequire(import.meta.url);
+
+// node_modules/.pnpm/eventsource-parser@3.0.8/node_modules/eventsource-parser/dist/index.js
+var ParseError = class extends Error {
+  constructor(message, options) {
+    super(message), this.name = "ParseError", this.type = options.type, this.field = options.field, this.value = options.value, this.line = options.line;
+  }
+};
+var LF = 10;
+var CR = 13;
+var SPACE = 32;
+function noop(_arg) {
+}
+function createParser(callbacks) {
+  if (typeof callbacks == "function")
+    throw new TypeError(
+      "`callbacks` must be an object, got a function instead. Did you mean `{onEvent: fn}`?"
+    );
+  const { onEvent = noop, onError = noop, onRetry = noop, onComment } = callbacks, pendingFragments = [];
+  let isFirstChunk = true, id, data = "", dataLines = 0, eventType;
+  function feed(chunk) {
+    if (isFirstChunk && (isFirstChunk = false, chunk.charCodeAt(0) === 239 && chunk.charCodeAt(1) === 187 && chunk.charCodeAt(2) === 191 && (chunk = chunk.slice(3))), pendingFragments.length === 0) {
+      const trailing2 = processLines(chunk);
+      trailing2 !== "" && pendingFragments.push(trailing2);
+      return;
+    }
+    if (chunk.indexOf(`
+`) === -1 && chunk.indexOf("\r") === -1) {
+      pendingFragments.push(chunk);
+      return;
+    }
+    pendingFragments.push(chunk);
+    const input = pendingFragments.join("");
+    pendingFragments.length = 0;
+    const trailing = processLines(input);
+    trailing !== "" && pendingFragments.push(trailing);
+  }
+  function processLines(chunk) {
+    let searchIndex = 0;
+    if (chunk.indexOf("\r") === -1) {
+      let lfIndex = chunk.indexOf(`
+`, searchIndex);
+      for (; lfIndex !== -1; ) {
+        if (searchIndex === lfIndex) {
+          dataLines > 0 && onEvent({ id, event: eventType, data }), id = void 0, data = "", dataLines = 0, eventType = void 0, searchIndex = lfIndex + 1, lfIndex = chunk.indexOf(`
+`, searchIndex);
+          continue;
+        }
+        const firstCharCode = chunk.charCodeAt(searchIndex);
+        if (isDataPrefix(chunk, searchIndex, firstCharCode)) {
+          const valueStart = chunk.charCodeAt(searchIndex + 5) === SPACE ? searchIndex + 6 : searchIndex + 5, value = chunk.slice(valueStart, lfIndex);
+          if (dataLines === 0 && chunk.charCodeAt(lfIndex + 1) === LF) {
+            onEvent({ id, event: eventType, data: value }), id = void 0, data = "", eventType = void 0, searchIndex = lfIndex + 2, lfIndex = chunk.indexOf(`
+`, searchIndex);
+            continue;
+          }
+          data = dataLines === 0 ? value : `${data}
+${value}`, dataLines++;
+        } else isEventPrefix(chunk, searchIndex, firstCharCode) ? eventType = chunk.slice(
+          chunk.charCodeAt(searchIndex + 6) === SPACE ? searchIndex + 7 : searchIndex + 6,
+          lfIndex
+        ) || void 0 : parseLine(chunk, searchIndex, lfIndex);
+        searchIndex = lfIndex + 1, lfIndex = chunk.indexOf(`
+`, searchIndex);
+      }
+      return chunk.slice(searchIndex);
+    }
+    for (; searchIndex < chunk.length; ) {
+      const crIndex = chunk.indexOf("\r", searchIndex), lfIndex = chunk.indexOf(`
+`, searchIndex);
+      let lineEnd = -1;
+      if (crIndex !== -1 && lfIndex !== -1 ? lineEnd = crIndex < lfIndex ? crIndex : lfIndex : crIndex !== -1 ? crIndex === chunk.length - 1 ? lineEnd = -1 : lineEnd = crIndex : lfIndex !== -1 && (lineEnd = lfIndex), lineEnd === -1)
+        break;
+      parseLine(chunk, searchIndex, lineEnd), searchIndex = lineEnd + 1, chunk.charCodeAt(searchIndex - 1) === CR && chunk.charCodeAt(searchIndex) === LF && searchIndex++;
+    }
+    return chunk.slice(searchIndex);
+  }
+  function parseLine(chunk, start, end) {
+    if (start === end) {
+      dispatchEvent();
+      return;
+    }
+    const firstCharCode = chunk.charCodeAt(start);
+    if (isDataPrefix(chunk, start, firstCharCode)) {
+      const valueStart = chunk.charCodeAt(start + 5) === SPACE ? start + 6 : start + 5, value2 = chunk.slice(valueStart, end);
+      data = dataLines === 0 ? value2 : `${data}
+${value2}`, dataLines++;
+      return;
+    }
+    if (isEventPrefix(chunk, start, firstCharCode)) {
+      eventType = chunk.slice(chunk.charCodeAt(start + 6) === SPACE ? start + 7 : start + 6, end) || void 0;
+      return;
+    }
+    if (firstCharCode === 105 && chunk.charCodeAt(start + 1) === 100 && chunk.charCodeAt(start + 2) === 58) {
+      const value2 = chunk.slice(chunk.charCodeAt(start + 3) === SPACE ? start + 4 : start + 3, end);
+      id = value2.includes("\0") ? void 0 : value2;
+      return;
+    }
+    if (firstCharCode === 58) {
+      if (onComment) {
+        const line2 = chunk.slice(start, end);
+        onComment(line2.slice(chunk.charCodeAt(start + 1) === SPACE ? 2 : 1));
+      }
+      return;
+    }
+    const line = chunk.slice(start, end), fieldSeparatorIndex = line.indexOf(":");
+    if (fieldSeparatorIndex === -1) {
+      processField(line, "", line);
+      return;
+    }
+    const field = line.slice(0, fieldSeparatorIndex), offset = line.charCodeAt(fieldSeparatorIndex + 1) === SPACE ? 2 : 1, value = line.slice(fieldSeparatorIndex + offset);
+    processField(field, value, line);
+  }
+  function processField(field, value, line) {
+    switch (field) {
+      case "event":
+        eventType = value || void 0;
+        break;
+      case "data":
+        data = dataLines === 0 ? value : `${data}
+${value}`, dataLines++;
+        break;
+      case "id":
+        id = value.includes("\0") ? void 0 : value;
+        break;
+      case "retry":
+        /^\d+$/.test(value) ? onRetry(parseInt(value, 10)) : onError(
+          new ParseError(`Invalid \`retry\` value: "${value}"`, {
+            type: "invalid-retry",
+            value,
+            line
+          })
+        );
+        break;
+      default:
+        onError(
+          new ParseError(
+            `Unknown field "${field.length > 20 ? `${field.slice(0, 20)}\u2026` : field}"`,
+            { type: "unknown-field", field, value, line }
+          )
+        );
+        break;
+    }
+  }
+  function dispatchEvent() {
+    dataLines > 0 && onEvent({
+      id,
+      event: eventType,
+      data
+    }), id = void 0, data = "", dataLines = 0, eventType = void 0;
+  }
+  function reset(options = {}) {
+    if (options.consume && pendingFragments.length > 0) {
+      const incompleteLine = pendingFragments.join("");
+      parseLine(incompleteLine, 0, incompleteLine.length);
+    }
+    isFirstChunk = true, id = void 0, data = "", dataLines = 0, eventType = void 0, pendingFragments.length = 0;
+  }
+  return { feed, reset };
+}
+function isDataPrefix(chunk, i, firstCharCode) {
+  return firstCharCode === 100 && chunk.charCodeAt(i + 1) === 97 && chunk.charCodeAt(i + 2) === 116 && chunk.charCodeAt(i + 3) === 97 && chunk.charCodeAt(i + 4) === 58;
+}
+function isEventPrefix(chunk, i, firstCharCode) {
+  return firstCharCode === 101 && chunk.charCodeAt(i + 1) === 118 && chunk.charCodeAt(i + 2) === 101 && chunk.charCodeAt(i + 3) === 110 && chunk.charCodeAt(i + 4) === 116 && chunk.charCodeAt(i + 5) === 58;
+}
+
+// node_modules/.pnpm/eventsource-parser@3.0.8/node_modules/eventsource-parser/dist/stream.js
+var EventSourceParserStream = class extends TransformStream {
+  constructor({ onError, onRetry, onComment } = {}) {
+    let parser;
+    super({
+      start(controller) {
+        parser = createParser({
+          onEvent: (event) => {
+            controller.enqueue(event);
+          },
+          onError(error) {
+            onError === "terminate" ? controller.error(error) : typeof onError == "function" && onError(error);
+          },
+          onRetry,
+          onComment
+        });
+      },
+      transform(chunk) {
+        parser.feed(chunk);
+      }
+    });
+  }
+};
+
+export {
+  EventSourceParserStream
+};

package/chunks/{chunk-YORL5S5V.js → chunk-ACYZMJHC.js}

@@ -3,7 +3,7 @@ import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
   homeStateDir
-} from "./chunk-RZR2XXAK.js";
+} from "./chunk-S3B6HFSM.js";
 
 // packages/core/dist/agent/journal/types.js
 var JOURNAL_SCHEMA_VERSION = 1;

package/chunks/{chunk-5FHFG5P2.js → chunk-AL32F74R.js}

@@ -6,7 +6,7 @@ import {
   VERSION,
   compareFindingsByBusinessPriority,
   getFindingPriority
-} from "./chunk-RZR2XXAK.js";
+} from "./chunk-S3B6HFSM.js";
 
 // packages/core/dist/report-formatters/markdown.js
 var EVIDENCE_BLOCK_LIMIT = 4e3;

package/chunks/{chunk-J6G73WYF.js → chunk-B5TIXHCO.js}

@@ -8,7 +8,7 @@ import {
   osecDB,
   repairOsecDatabase,
   resetOsecDatabase
-} from "./chunk-RCHAFSWS.js";
+} from "./chunk-YXTV2FRE.js";
 
 // packages/cli/src/commands/db.ts
 import { randomUUID } from "node:crypto";