registry / @op0ai/cli / 0.1.3

@op0ai/cli@0.1.3

The op0 CLI — your account, cloud, and workbench for op0.ai (the governed runtime for agent work). op0 login · deploy · connect · make · list · status · logs · pull · eject · dev · push · wire. Proprietary — free to use WITH the op0 runtime.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 2 file(s), 28.0 KB of source, external domains: api.op0.dev, console.op0.ai, evlog.usectx.com, mcp.usectx.com, op0.ai

Source & flagged code

3 flagged

bin/op0.mjsView file

Lines 1-32javascript

1#!/usr/bin/env node

2// op0 — ONE CLI (op0.ai). Your account + cloud AND your workbench, one identity, one binary.

3// cloud: login · deploy · connect · whoami · logout

4// workbench: make · list · status · logs · pull · eject · dev · push · wire

5// Identity (D11): `op0 login` runs the device flow and stores the tenant-bound key in

6// $OP0_CONFIG_DIR/config.json (default ~/.op0, 0600). Every command rides that one session.

7// Self-host/CI escape hatch: `op0 login --key <usectx-key>` (most-specific, cord-local, wins).

8// Merged 2026-07-09 from the retired @op0-ai/cord-cli + @op0-ai/op0 — the op0.ai consolidation.

9import { parseArgs, loadConfig, saveConfig, loadSession, CONFIG_PATH, OP0_CONFIG_PATH, collectPushFiles, parseCordId } from "../lib/core.mjs";

10import { readFileSync, writeFileSync, mkdirSync, existsSync } from "node:fs";

11import { join, resolve } from "node:path";

12import { homedir } from "node:os";

13import { execSync, spawnSync } from "node:child_process";

14import * as p from "@clack/prompts";

High

Child Process

Package source references child process execution.

bin/op0.mjsView on unpkg · L12

15import color from "picocolors";

17// ── the op0 session (the device-flow key lives here; the workbench rides it via loadSession) ──

18const CONSOLE = process.env.OP0_CONSOLE ?? "https://console.op0.ai";

19const FACTORY_DEFAULT = process.env.OP0_FACTORY ?? "https://api.op0.dev";

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/op0.mjsView on unpkg · L12

20const DIR = process.env.OP0_CONFIG_DIR ?? join(homedir(), ".op0");

21const CFG = join(DIR, "config.json");

22const readCfg = () => (existsSync(CFG) ? JSON.parse(readFileSync(CFG, "utf8")) : {});

23const writeCfg = (c) => { mkdirSync(DIR, { recursive: true }); writeFileSync(CFG, JSON.stringify(c, null, 2), { mode: 0o600 }); };

24const bail = (m) => { p.cancel(m); process.exit(1); };

25const sleep = (ms) => new Promise((r) => setTimeout(r, ms));

27// Hosts for the workbench commands ride the active session; api.op0.dev is the live control plane.

28// (Host flips to op0.dev deployment routing are lane 2 — dual-served, so these stay correct today.)

29const session = loadSession();

30const HOSTS = {

31 factory: session?.hosts?.factory ?? FACTORY_DEFAULT,

32 evlog: session?.hosts?.evlog ?? "https://evlog.usectx.com",

Lines 347-387javascript

347 } catch { console.log(`✓ ejected → ${dir}/ (git init skipped — commit manually)`); }

348}

349

350async function push(dirArg, flags) {

351 const dir = resolve(dirArg ?? ".");

352 const

Source & flagged code

3 flagged · loading source

bin/op0.mjsView file

12import { homedir } from "node:os"; L13: import { execSync, spawnSync } from "node:child_process"; L14: import * as p from "@clack/prompts";

High

Child Process

Package source references child process execution.

bin/op0.mjsView on unpkg · L12

12import { homedir } from "node:os"; L13: import { execSync, spawnSync } from "node:child_process"; L14: import * as p from "@clack/prompts"; ... L17: // ── the op0 session (the device-flow key lives here; the workbench rides it via loadSession) ── L18: const CONSOLE = process.env.OP0_CONSOLE ?? "https://console.op0.ai"; L19: const FACTORY_DEFAULT = process.env.OP0_FACTORY ?? "https://api.op0.dev";

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/op0.mjsView on unpkg · L12

367console.log(`\nstarting wrangler dev in ${dir}/ (local only; ship with 'op0 make ${name}' or 'op0 push')`); L368: const r = spawnSync("npx", ["wrangler", "dev"], { cwd: dir, stdio: "inherit" }); L369: process.exit(r.status ?? 0);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/op0.mjsView on unpkg · L367

Findings

4 High3 Medium5 Low

HighChild Processbin/op0.mjs

HighShell

HighSame File Env Network Executionbin/op0.mjs

HighRuntime Package Installbin/op0.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

3 flagged

bin/op0.mjsView file

Lines 1-32javascript

1#!/usr/bin/env node

2// op0 — ONE CLI (op0.ai). Your account + cloud AND your workbench, one identity, one binary.

3// cloud: login · deploy · connect · whoami · logout

4// workbench: make · list · status · logs · pull · eject · dev · push · wire

5// Identity (D11): `op0 login` runs the device flow and stores the tenant-bound key in

6// $OP0_CONFIG_DIR/config.json (default ~/.op0, 0600). Every command rides that one session.

7// Self-host/CI escape hatch: `op0 login --key <usectx-key>` (most-specific, cord-local, wins).

8// Merged 2026-07-09 from the retired @op0-ai/cord-cli + @op0-ai/op0 — the op0.ai consolidation.

9import { parseArgs, loadConfig, saveConfig, loadSession, CONFIG_PATH, OP0_CONFIG_PATH, collectPushFiles, parseCordId } from "../lib/core.mjs";

10import { readFileSync, writeFileSync, mkdirSync, existsSync } from "node:fs";

11import { join, resolve } from "node:path";

12import { homedir } from "node:os";

13import { execSync, spawnSync } from "node:child_process";

14import * as p from "@clack/prompts";

High

Child Process

Package source references child process execution.

bin/op0.mjsView on unpkg · L12

15import color from "picocolors";

17// ── the op0 session (the device-flow key lives here; the workbench rides it via loadSession) ──

18const CONSOLE = process.env.OP0_CONSOLE ?? "https://console.op0.ai";

19const FACTORY_DEFAULT = process.env.OP0_FACTORY ?? "https://api.op0.dev";

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/op0.mjsView on unpkg · L12

20const DIR = process.env.OP0_CONFIG_DIR ?? join(homedir(), ".op0");

21const CFG = join(DIR, "config.json");

22const readCfg = () => (existsSync(CFG) ? JSON.parse(readFileSync(CFG, "utf8")) : {});

23const writeCfg = (c) => { mkdirSync(DIR, { recursive: true }); writeFileSync(CFG, JSON.stringify(c, null, 2), { mode: 0o600 }); };

24const bail = (m) => { p.cancel(m); process.exit(1); };

25const sleep = (ms) => new Promise((r) => setTimeout(r, ms));

27// Hosts for the workbench commands ride the active session; api.op0.dev is the live control plane.

28// (Host flips to op0.dev deployment routing are lane 2 — dual-served, so these stay correct today.)

29const session = loadSession();

30const HOSTS = {

31 factory: session?.hosts?.factory ?? FACTORY_DEFAULT,

32 evlog: session?.hosts?.evlog ?? "https://evlog.usectx.com",

Lines 347-387javascript

347 } catch { console.log(`✓ ejected → ${dir}/ (git init skipped — commit manually)`); }

348}

349

350async function push(dirArg, flags) {

351 const dir = resolve(dirArg ?? ".");

352 const