0sec-cli 0.24.1 → 0.25.0

package/0.js

@@ -1,99 +1,103 @@
 #!/usr/bin/env node
 import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
-import {
-  runStartupUpdate
-} from "./chunks/chunk-7UHAXEOV.js";
-import {
-  Command
-} from "./chunks/chunk-WUPN3D37.js";
-import {
-  savedConnectionEnvPatch,
-  setHerdrSink
-} from "./chunks/chunk-BPU6M42R.js";
 import {
   installConsolePresentationBridge,
-  installProcessPresentationStreamBridge
-} from "./chunks/chunk-OOMBOLAF.js";
+  installProcessPresentationStreamBridge,
+  runStartupUpdate
+} from "./chunks/chunk-NBLKIQCW.js";
 import {
+  Command,
   presentationEventBus
-} from "./chunks/chunk-56UTQKXO.js";
+} from "./chunks/chunk-S4DFH2FJ.js";
 import {
-  getSettings,
-  maybeLoadCodexAuth,
   resolveEngagement
-} from "./chunks/chunk-LMP2T4G2.js";
+} from "./chunks/chunk-NO543ZBU.js";
+import {
+  connectionConfigEnvPatch,
+  credentialEnvPatch,
+  getSettings,
+  loadCredentials,
+  maybeLoadCodexAuth
+} from "./chunks/chunk-RBTJYREN.js";
 import {
   source_default
 } from "./chunks/chunk-HLFS6WV2.js";
 import {
   launchConfiguredWorkbench,
   remoteBackendClientId
-} from "./chunks/chunk-X2IPO5JO.js";
+} from "./chunks/chunk-6TA3CWND.js";
 import {
   createHerdrEventSink,
   maybeSubscribeOperationalEventSink
-} from "./chunks/chunk-ZM6ANQZJ.js";
-import "./chunks/chunk-H5QURBBK.js";
-import "./chunks/chunk-5NFIY2SJ.js";
-import "./chunks/chunk-BOBIAHKA.js";
-import "./chunks/chunk-ILRMLA6J.js";
+} from "./chunks/chunk-EEP6GBUO.js";
+import "./chunks/chunk-AL32F74R.js";
+import "./chunks/chunk-FI5YL4R2.js";
+import "./chunks/chunk-WK6VUCKK.js";
+import "./chunks/chunk-D4IBEO2K.js";
 import "./chunks/chunk-GVD6SJGH.js";
 import "./chunks/chunk-QCUFBVIZ.js";
-import "./chunks/chunk-S2GITRD5.js";
-import "./chunks/chunk-IIBNQTOK.js";
+import "./chunks/chunk-PMAKX6KP.js";
 import "./chunks/chunk-2WNCI664.js";
 import "./chunks/chunk-23DG5YKS.js";
 import "./chunks/chunk-DQTNI3KY.js";
-import "./chunks/chunk-3WUPCZGF.js";
-import "./chunks/chunk-UJE4WOQS.js";
-import "./chunks/chunk-PJU24AKR.js";
-import "./chunks/chunk-6XMFCVJS.js";
-import "./chunks/chunk-AZ7L3HFD.js";
-import "./chunks/chunk-TVS6WVSK.js";
-import "./chunks/chunk-YSQWZ67M.js";
-import "./chunks/chunk-5WAHHZBF.js";
-import "./chunks/chunk-3LPBJMHB.js";
+import "./chunks/chunk-FI2H6HV2.js";
+import "./chunks/chunk-HJKJ4NQP.js";
+import "./chunks/chunk-TFKY6D7O.js";
+import "./chunks/chunk-76CLUI54.js";
+import "./chunks/chunk-HFUOUT2B.js";
+import "./chunks/chunk-ACYZMJHC.js";
 import "./chunks/chunk-K2PWUPUI.js";
-import "./chunks/chunk-X2ZMSRTP.js";
-import "./chunks/chunk-YERUDEXT.js";
+import "./chunks/chunk-OFPF26WL.js";
+import "./chunks/chunk-PAE7ZAV6.js";
 import "./chunks/chunk-UEX7PFSE.js";
-import "./chunks/chunk-4ROZFLSR.js";
-import "./chunks/chunk-BD7WULFS.js";
-import "./chunks/chunk-XA2IBHPB.js";
-import "./chunks/chunk-5ETI27Q3.js";
-import "./chunks/chunk-YKWARO3T.js";
-import "./chunks/chunk-SQCBHFWN.js";
-import "./chunks/chunk-K74DRDC5.js";
+import "./chunks/chunk-I4VIAQHM.js";
+import "./chunks/chunk-2J3STRJT.js";
+import "./chunks/chunk-HDJSHLRM.js";
+import "./chunks/chunk-AZ7L3HFD.js";
+import "./chunks/chunk-FOLTHXRH.js";
+import "./chunks/chunk-ITEMDJAB.js";
+import "./chunks/chunk-DJGJECBV.js";
+import "./chunks/chunk-LWMEJYCP.js";
+import "./chunks/chunk-DHNYJ2ML.js";
 import "./chunks/chunk-O6KPVYOI.js";
 import "./chunks/chunk-FHC2B7LN.js";
 import "./chunks/chunk-DKSCN2AB.js";
 import "./chunks/chunk-UFHN6RIU.js";
-import "./chunks/chunk-BMDG6T7D.js";
-import "./chunks/chunk-GTED3FSZ.js";
-import "./chunks/chunk-IXT64DV5.js";
-import "./chunks/chunk-SU4IHQQI.js";
-import "./chunks/chunk-NJLKFC66.js";
-import "./chunks/chunk-NBV4I237.js";
-import "./chunks/chunk-IJ6UPW3H.js";
+import "./chunks/chunk-YXTV2FRE.js";
+import "./chunks/chunk-S2WCYEK2.js";
+import "./chunks/chunk-XPDJE537.js";
+import "./chunks/chunk-5H2PXZ7Q.js";
+import "./chunks/chunk-ABKUI3QB.js";
+import "./chunks/chunk-GXSECFUE.js";
+import "./chunks/chunk-EIONVEFN.js";
 import {
   analyticsPipeline,
   configureRunContributionsFromEnvironment
-} from "./chunks/chunk-PVJUPIQG.js";
+} from "./chunks/chunk-3T5R7P4T.js";
 import {
   eventBus,
   presentationEventSink
-} from "./chunks/chunk-5PFRE522.js";
+} from "./chunks/chunk-MY44EZKD.js";
 import "./chunks/chunk-RS4MAN3Q.js";
-import "./chunks/chunk-CGBDEST2.js";
-import "./chunks/chunk-QNRYOJEB.js";
+import "./chunks/chunk-RFK5F45W.js";
+import "./chunks/chunk-27SXCYWH.js";
 import "./chunks/chunk-5IBCBQEH.js";
 import {
   VERSION
-} from "./chunks/chunk-GXXX7AGH.js";
-import "./chunks/chunk-VIT5ALXF.js";
+} from "./chunks/chunk-S3B6HFSM.js";
+import "./chunks/chunk-5XOYTAOK.js";
+import "./chunks/chunk-36J5ZLFE.js";
 import "./chunks/chunk-VCSFCHAJ.js";
 
+// packages/cli/src/connection-env.ts
+function savedConnectionEnvPatch(env, homeDir) {
+  return {
+    ...connectionConfigEnvPatch(env, homeDir),
+    ...credentialEnvPatch(loadCredentials(homeDir), env)
+  };
+}
+
 // packages/cli/src/routing.ts
 function detectAndRoute(target) {
   const resolution = resolveEngagement(target);
@@ -116,7 +120,7 @@ import { fileURLToPath } from "node:url";
 var BYPASS_ENV = "ZERO_ALLOW_STALE_SOURCE_DIST";
 function currentBuildCommit() {
   if (true) {
-    return "42ab1fa74044b79edd6b8f0990b2afa7ccfd824b";
+    return "9a5ac5ae02d8046aedb23583d6ac135dd22dea83";
   }
   return void 0;
 }
@@ -232,11 +236,10 @@ maybeSubscribeOperationalEventSink();
 eventBus.subscribe(presentationEventSink(presentationEventBus));
 var herdrSink = createHerdrEventSink();
 if (herdrSink) eventBus.subscribe(herdrSink);
-setHerdrSink(herdrSink);
 enforceSourceDistFreshness({ entryUrl: import.meta.url });
 if (!isWorkbenchManagement && !isRemoteBackendClient) await runStartupUpdate(VERSION);
 async function buildProgram() {
-  const c = await import("./chunks/commands-FRPOFIO4.js");
+  const c = await import("./chunks/commands-MPPAADGY.js");
   const program = new Command();
   program.name("0").description("Open-source multi-model security research harness").version(VERSION).enablePositionalOptions();
   program.hook("preAction", (_command, action) => {
@@ -245,6 +248,7 @@ async function buildProgram() {
     }
   });
   c.registerScanCommand(program);
+  c.registerRoutingCommand(program);
   c.registerResumeCommand(program);
   c.registerReplayCommand(program);
   c.registerHistoryCommand(program);
@@ -308,7 +312,7 @@ async function buildProgram() {
   return program;
 }
 async function showWebConsole() {
-  const { registerDashboardCommand } = await import("./chunks/dashboard-5HDSNBAU.js");
+  const { registerDashboardCommand } = await import("./chunks/dashboard-MN7GZLLX.js");
   const program = new Command();
   registerDashboardCommand(program);
   await program.parseAsync(["web"], { from: "user" });
@@ -318,7 +322,7 @@ process.once("beforeExit", () => {
   });
 });
 var userArgs = process.argv.slice(2);
-var knownCommands = ["scan", "resume", "replay", "history", "findings", "secure", "review", "fix", "audit", "deps", "doctor", "dashboard", "web", "chat", "team", "tui", "watch", "orchestrate", "db", "mcp-server", "workflow", "runs", "sessions", "triage", "eval", "bench", "ingest", "kernel", "disclose", "verify", "exploit", "hunt", "recency-hunt", "deep-review", "lens-synth", "memsafety", "assumption-hunt", "specdrift", "protocol-check", "cve", "upgrade", "update", "h1", "intel", "recon", "js-recon", "npm-discovery", "identity", "adgraph", "entragraph", "cloud", "xnu-fuzz", "research", "worker", "radar", "timeline", "console", "agent-assure", "binary", "plugin", "theme", "config", "workbench", "checks", "evolve", "learning", "hackstore", "hack", "store", "help"];
+var knownCommands = ["routing-qualify", "scan", "resume", "replay", "history", "findings", "secure", "review", "fix", "audit", "deps", "doctor", "dashboard", "web", "chat", "team", "tui", "watch", "orchestrate", "db", "mcp-server", "workflow", "runs", "sessions", "triage", "eval", "bench", "ingest", "kernel", "disclose", "verify", "exploit", "hunt", "recency-hunt", "deep-review", "lens-synth", "memsafety", "assumption-hunt", "specdrift", "protocol-check", "cve", "upgrade", "update", "h1", "intel", "recon", "js-recon", "npm-discovery", "identity", "adgraph", "entragraph", "cloud", "xnu-fuzz", "research", "worker", "radar", "timeline", "console", "agent-assure", "binary", "plugin", "theme", "config", "workbench", "checks", "evolve", "learning", "hackstore", "hack", "store", "help"];
 if (userArgs.length === 0) {
   showWebConsole().catch((err) => {
     console.error(source_default.red(err instanceof Error ? err.message : String(err)));

package/README.md

@@ -1,148 +1,187 @@
 <p align="center">
   <a href="https://0.security/">
-    <img src="assets/readme-cover.png" alt="0security landscape with Zero and the security research mission" width="100%">
+    <picture>
+      <source media="(prefers-color-scheme: dark)" srcset="assets/0-aperture-white.svg">
+      <img src="assets/0-aperture-ink.svg" alt="0security" width="280">
+    </picture>
   </a>
 </p>
 
+<h1 align="center">The open-source AI security harness</h1>
+
 <p align="center">
-  <picture>
-    <source media="(prefers-color-scheme: dark)" srcset="assets/0-aperture-white.svg">
-    <img src="assets/0-aperture-ink.svg" alt="0security" width="280">
-  </picture>
+  Investigate vulnerabilities, review findings, and work on fixes in your browser.<br/>
+  Use your own model provider. Connect coding agents through CLI or MCP.
 </p>
 
 <p align="center">
-  <strong>Open-source security workflows in your browser or coding agent.</strong><br/>
-  <sub>Backed by Y Combinator · The Swiss Applied AI &amp; Cybersecurity Research Lab</sub><br/>
-  <a href="https://0.security/">0.security</a> ·
-  <a href="https://docs.0.security/">Documentation</a> ·
-  <a href="https://github.com/0sec-labs/foxguard">FoxGuard</a>
+  <a href="#get-started">Get started</a> ·
+  <a href="assets/readme-ui-demo.mp4">Demo</a> ·
+  <a href="https://docs.0.security/">Docs</a> ·
+  <a href="https://0.security/research/">Research</a> ·
+  <a href="https://github.com/0sec-labs/0/releases">Releases</a> ·
+  <a href="#0cloud">0cloud</a>
 </p>
 
 <p align="center">
-  <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT%20OR%20Apache--2.0-1A1815?style=flat-square&labelColor=1A1815" alt="License: MIT OR Apache-2.0"></a>
-  <a href="https://github.com/0sec-labs/0/releases/latest">Latest release</a>
-  <a href="#status-and-safety"><img src="https://img.shields.io/badge/status-research%20preview-FD802E?style=flat-square&labelColor=1A1815" alt="Status: research preview"></a>
+  <a href="assets/readme-ui-demo.mp4">
+    <picture>
+      <source media="(prefers-reduced-motion: reduce)" srcset="assets/readme-ui-demo.jpg">
+      <img src="assets/readme-ui-demo.gif" alt="0 web UI: submit a demo API source review, follow the investigation, and inspect findings with suggested fixes" width="100%">
+    </picture>
+  </a>
 </p>
 
 <p align="center">
-  <img src="assets/zero-manifesto-movement.webp" alt="Zero manifesto movement" width="100%">
+  <sub>Backed by Y Combinator · The Swiss Applied AI &amp; Cybersecurity Research Lab</sub>
 </p>
 
 ## Get started
 
-Install on Apple Silicon macOS or x64/ARM64 Linux:
+Install on Apple Silicon macOS or x64/ARM64 Linux, then run `0`:
 
 ```bash
 curl -fsSL https://raw.githubusercontent.com/0sec-labs/0/main/install.sh | bash
 export PATH="$HOME/.0/bin:$PATH"
-0 web
+0
 ```
 
-**Command Center (browser):** `0 web` · **Terminal:** `0`
+`0` opens the local browser console without an account. `0 web` remains a
+compatibility alias. The interactive terminal UI is retired; headless CLI commands
+and MCP remain available.
+
+Configure a [model provider](https://docs.0.security/api-keys/) to run AI workflows.
+See [installation](https://docs.0.security/getting-started/) and
+[troubleshooting](https://docs.0.security/troubleshooting/).
 
-Configure a [model provider](https://docs.0.security/api-keys/) before running AI workflows.
+## Findings
 
-## Workflows
+Review source evidence and organize findings in a queue or on the board.
 
-Browser, CLI, and MCP share one workflow runner with retained results.
+<p align="center">
+  <a href="assets/readme-findings.mp4">
+    <picture>
+      <source media="(prefers-reduced-motion: reduce)" srcset="assets/readme-findings.jpg">
+      <img src="assets/readme-findings.gif" alt="0 findings: review the queue, organize the board, and inspect source evidence" width="100%">
+    </picture>
+  </a>
+</p>
 
-Findings are prioritized by business impact: affected customers and data, fraud,
-critical services, and disruption. Each priority includes a rationale; missing
-context stays **Not assessed**. CVSS remains available as technical severity.
+## Security workflows
 
-| Work | Built-in templates |
-| --- | --- |
-| Assess | Repositories, dependencies, APIs, web configuration, scoped penetration tests, package behavior, smart contracts, native code |
-| Verify | Findings with replay evidence |
-| Fix | Candidates with regression tests |
-| Research | Security research, deep source investigation |
+Chat with 0 in the web UI, investigate findings, and use built-in templates for
+assessment, verification, fixes, and research. Runs retain results; Learning
+keeps local activity and source-grounded notes.
 
-Start from 12 templates, customize steps, and run manually or with browser triggers and schedules.
-**Template:** starting point · **Workflow:** reusable steps · **Run:** one execution.
+<p align="center">
+  <a href="assets/readme-workflows.mp4">
+    <picture>
+      <source media="(prefers-reduced-motion: reduce)" srcset="assets/readme-workflows.jpg">
+      <img src="assets/readme-workflows.gif" alt="0 workflows: choose a template, inspect the workflow graph, and edit a review step" width="100%">
+    </picture>
+  </a>
+</p>
 
-**Learning** retains local run activity, source-grounded notes and evaluated
-improvement history. Saved workflows keep immutable revisions and support restore.
-Use `0 learning status` or open Learning in the browser.
-[Learning documentation](https://docs.0.security/learning/).
+For automation and coding agents, the CLI exposes the same workflow runner:
 
 ```bash
 0 workflow list --templates
 0 workflow run --template security-research \
-  --target /absolute/path/to/repo --workspace /absolute/path/to/repo \
-  --format json > run.json
+  --target /absolute/path/to/repo --workspace /absolute/path/to/repo
 0 runs list
+0 chat --prompt "your request"
 ```
 
-[Workflow guide: inputs, limits, and results](https://docs.0.security/workflow/).
+[Workflow guide](https://docs.0.security/workflow/) ·
+[Learning](https://docs.0.security/learning/) ·
+[GitHub Actions](https://docs.0.security/ci/github-action/)
+
+## Hosts and plugins
 
-## See Zero at work
+Choose a host for your work. Connect service integrations and manage extensions.
+Use ⌘K / Ctrl+K to jump between tools.
 
-A source review of the included [demo API](assets/examples/demo-api/), with code locations and suggested fixes.
+<p align="center">
+  <a href="assets/readme-tools.mp4">
+    <picture>
+      <source media="(prefers-reduced-motion: reduce)" srcset="assets/readme-tools.jpg">
+      <img src="assets/readme-tools.gif" alt="0 hosts and plugins: jump with keyboard search, choose a host, and browse integrations and extensions" width="100%">
+    </picture>
+  </a>
+</p>
 
-![Demo API source review in Zero](assets/screenshots/web-chat.jpg)
+## Skills and memory
 
-Start a workflow from a template and edit its steps.
+Reuse security instructions and retain lessons linked to the source.
 
-![Workflow editor in Zero](assets/screenshots/web-workflow.jpg)
+<p align="center">
+  <a href="assets/readme-memory.mp4">
+    <picture>
+      <source media="(prefers-reduced-motion: reduce)" srcset="assets/readme-memory.jpg">
+      <img src="assets/readme-memory.gif" alt="0 skills and memory: browse built-in skills and inspect saved lessons with source references" width="100%">
+    </picture>
+  </a>
+</p>
 
-## Use 0 from another agent
+## 0cloud
 
-Use the CLI commands above, or **MCP** to discover templates, create workflows, and manage runs:
+The hosted version of 0, for managed security workflows on your team's repositories.
+Access is currently through the **[0cloud waitlist](https://0.security/waitlist/)**.
+Local use does not require a cloud account.
 
-```bash
-0 mcp-server --workflows --workspace /absolute/path/to/repo
-```
+<p align="center">
+  <a href="https://0.security/waitlist/">
+    <img src="assets/readme-infrastructure.webp" alt="Orange and violet cloudscape from the 0.security website" width="100%">
+  </a>
+</p>
 
-Local MCP requires an explicitly selected host-local execution profile.
-For a registered remote engine, use `0 mcp-server --workflows --backend production`.
-0's model provider is separate from the connecting agent's session.
+## Connect another agent
 
-Browser chat's **Connect an external agent** copies a setup prompt.
-CLI and MCP workflow clients automatically attach to a running local web engine
-for the same workspace and control database. To attach explicitly to the sessions
-and runs already open in an engine:
+Use CLI commands or expose workflows through MCP:
 
 ```bash
-0 mcp-server --workflows --engine-url http://127.0.0.1:3000 \
-  --engine-token-env ENGINE_TOKEN --session SESSION_ID
-0 sessions list --engine-url http://127.0.0.1:3000 --engine-token-env ENGINE_TOKEN
+0 mcp-server --workflows --workspace /absolute/path/to/repo
 ```
 
-Set `ENGINE_TOKEN` to the engine's configured bearer credential. Attached clients
-share the browser's session and run lifecycle; disconnecting leaves the engine
-running. Omit `--session` to create a session under the engine's admission grants.
+Local MCP requires an explicitly selected host-local execution profile. Browser
+chat's **Connect an external agent** provides a setup prompt. CLI and MCP workflow
+clients can share a running local engine's sessions and runs.
 
-See [MCP setup and individual tools](https://docs.0.security/integrations/) or
-[local and remote engines](https://docs.0.security/engine-connections/).
+[Plugins and MCP setup](https://docs.0.security/integrations/) ·
+[Local and remote engines](https://docs.0.security/engine-connections/) ·
+[Plugin development](https://docs.0.security/hackstore/)
 
-## Plugins
+For AI agents: [product index](https://0.security/llms.txt) ·
+[command reference](https://docs.0.security/commands/).
 
-Connect GitHub, Elastic, Semgrep, Snyk, Linear, Jira, Cloudflare, Slack, and Teams
-through [plugins and MCP](https://docs.0.security/integrations/).
+## Development
 
-More guides: [installation](https://docs.0.security/getting-started/) ·
-[GitHub Actions](https://docs.0.security/ci/github-action/) ·
-[plugin development](https://docs.0.security/hackstore/) ·
-[troubleshooting](https://docs.0.security/troubleshooting/).
+Install dependencies with `pnpm install`, run `npm run dev`, and open the printed
+browser address. The dashboard updates with hot reload.
+See [CONTRIBUTING.md](.github/CONTRIBUTING.md).
 
-## Development
+For local binary analysis, run `npm run setup:0verse` once. It discovers a local
+Ghidra and Java installation, installs the Python analysis/MCP dependencies
+without removing existing engines, and verifies the decompiler. In this source
+checkout, web and terminal chats automatically connect the local 0verse MCP
+server. Nine tools cover scanning, triage, preflight, bug classes, findings,
+PoVs, reports, memory recall, and capability discovery. The capability catalog
+also lists research CLI commands with their MCP-supported or CLI-only status.
+Each chat has its own scan state. `0 binary ./target --mode scan --format ndjson` uses the same runtime.
+
+This does not install every platform executor or fuzzing environment. Inspect
+0verse's capability report before requesting confirmation; unavailable analysis
+is not a clean scan. An explicit `ZERO_MCP` configuration takes precedence, and
+`ZERO_0VERSE_MCP=0` disables automatic connection.
 
-Install dependencies, run `npm run dev`, and open the printed browser address.
-See [CONTRIBUTING.md](https://github.com/0sec-labs/0/blob/main/.github/CONTRIBUTING.md).
 
 ## Status and safety
 
-**Research preview.** Assess authorized systems and review findings and fixes.
-Run `0` or `0 web` to open the browser console without an account.
-The interactive terminal UI is retired; headless CLI, automation, MCP and binary commands remain available.
-Use `0 chat --prompt "your request"` for one-shot automation; set `--mode standard` for explicit scope checks.
-The optional [scope plugin](https://docs.0.security/scope/) enforces target boundaries.
+**Research preview.** Assess only authorized systems and review findings and fixes.
+Use `--mode standard` with headless chat for explicit scope checks. The optional
+[scope plugin](https://docs.0.security/scope/) enforces target boundaries.
 
-Report vulnerabilities through [SECURITY.md](https://github.com/0sec-labs/0/blob/main/.github/SECURITY.md).
+Report vulnerabilities through [SECURITY.md](.github/SECURITY.md).
 Licensed under [MIT](LICENSE-MIT) OR [Apache-2.0](LICENSE).
 
 [Public disclosures and upstream fixes](https://0.security/research/#disclosures).
-Thanks to [OpenTUI](https://github.com/anomalyco/opentui), [Bun](https://bun.sh/),
-[React](https://react.dev/), [Models.dev](https://models.dev/),
-[LiteLLM](https://github.com/BerriAI/litellm), and our contributors.

package/chunks/{adapt-loop-L77BWMNE.js → adapt-loop-L2PXCD4J.js}

@@ -5,11 +5,12 @@ import {
   adaptAndVerify,
   applyUnifiedDiff,
   renderAdaptationPrompt
-} from "./chunk-5NFIY2SJ.js";
-import "./chunk-3LPBJMHB.js";
-import "./chunk-XA2IBHPB.js";
-import "./chunk-GXXX7AGH.js";
-import "./chunk-VIT5ALXF.js";
+} from "./chunk-FI5YL4R2.js";
+import "./chunk-ACYZMJHC.js";
+import "./chunk-FOLTHXRH.js";
+import "./chunk-S3B6HFSM.js";
+import "./chunk-5XOYTAOK.js";
+import "./chunk-36J5ZLFE.js";
 import "./chunk-VCSFCHAJ.js";
 export {
   adaptAndVerify,

package/chunks/{artifact-scraper-BV67RAP5.js → artifact-scraper-W3LGLXBM.js}

@@ -14,9 +14,10 @@ import {
   parseUbuntuTracker,
   scoreCodeCandidate,
   scoreRepoCandidate
-} from "./chunk-SU4IHQQI.js";
-import "./chunk-GXXX7AGH.js";
-import "./chunk-VIT5ALXF.js";
+} from "./chunk-5H2PXZ7Q.js";
+import "./chunk-S3B6HFSM.js";
+import "./chunk-5XOYTAOK.js";
+import "./chunk-36J5ZLFE.js";
 import "./chunk-VCSFCHAJ.js";
 export {
   classifyReferences,

package/chunks/{assumption-mining-RPVR77A3.js → assumption-mining-7IJ6ZWZE.js}

@@ -24,34 +24,36 @@ import {
   scoreDualViewWeaponizability,
   storeAssumptionModel,
   subjectSelfEnforces
-} from "./chunk-TVS6WVSK.js";
+} from "./chunk-76CLUI54.js";
 import {
   composeGate,
   makeSkepticVerifier
-} from "./chunk-YSQWZ67M.js";
-import "./chunk-5WAHHZBF.js";
-import "./chunk-3LPBJMHB.js";
+} from "./chunk-HFUOUT2B.js";
+import "./chunk-ACYZMJHC.js";
 import "./chunk-K2PWUPUI.js";
-import "./chunk-X2ZMSRTP.js";
-import "./chunk-YERUDEXT.js";
+import "./chunk-OFPF26WL.js";
+import "./chunk-PAE7ZAV6.js";
 import "./chunk-UEX7PFSE.js";
-import "./chunk-4ROZFLSR.js";
-import "./chunk-BD7WULFS.js";
-import "./chunk-XA2IBHPB.js";
-import "./chunk-YKWARO3T.js";
-import "./chunk-K74DRDC5.js";
+import "./chunk-I4VIAQHM.js";
+import "./chunk-2J3STRJT.js";
+import "./chunk-HDJSHLRM.js";
+import "./chunk-AZ7L3HFD.js";
+import "./chunk-FOLTHXRH.js";
+import "./chunk-DJGJECBV.js";
+import "./chunk-DHNYJ2ML.js";
 import "./chunk-O6KPVYOI.js";
-import "./chunk-BMDG6T7D.js";
-import "./chunk-IXT64DV5.js";
-import "./chunk-IJ6UPW3H.js";
-import "./chunk-PVJUPIQG.js";
-import "./chunk-5PFRE522.js";
+import "./chunk-YXTV2FRE.js";
+import "./chunk-XPDJE537.js";
+import "./chunk-EIONVEFN.js";
+import "./chunk-3T5R7P4T.js";
+import "./chunk-MY44EZKD.js";
 import "./chunk-RS4MAN3Q.js";
-import "./chunk-CGBDEST2.js";
-import "./chunk-QNRYOJEB.js";
+import "./chunk-RFK5F45W.js";
+import "./chunk-27SXCYWH.js";
 import "./chunk-5IBCBQEH.js";
-import "./chunk-GXXX7AGH.js";
-import "./chunk-VIT5ALXF.js";
+import "./chunk-S3B6HFSM.js";
+import "./chunk-5XOYTAOK.js";
+import "./chunk-36J5ZLFE.js";
 import "./chunk-VCSFCHAJ.js";
 export {
   ASSUMPTION_MODEL_VERSION,

package/chunks/{backend-connections-ACIXNYZN.js → backend-connections-MYH4QRQG.js}

@@ -8,10 +8,11 @@ import {
   createBackendHandshake,
   handleBackendConnectionRequest,
   loadBackendConnectionConfig
-} from "./chunk-Q7JKIKKF.js";
-import "./chunk-BMDG6T7D.js";
-import "./chunk-GXXX7AGH.js";
-import "./chunk-VIT5ALXF.js";
+} from "./chunk-SEWZ76MN.js";
+import "./chunk-YXTV2FRE.js";
+import "./chunk-S3B6HFSM.js";
+import "./chunk-5XOYTAOK.js";
+import "./chunk-36J5ZLFE.js";
 import "./chunk-VCSFCHAJ.js";
 export {
   BackendConnectionError,

package/chunks/{chunk-QNRYOJEB.js → chunk-27SXCYWH.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-5IBCBQEH.js";
 import {
   homeStateDir
-} from "./chunk-GXXX7AGH.js";
+} from "./chunk-S3B6HFSM.js";
 
 // packages/core/dist/scope/scope.js
 import { readFileSync as readFileSync3 } from "node:fs";