@hy-sde-org/dsh-av 0.1.2-rc.1

package/LICENSE

@@ -0,0 +1,32 @@
+MIT License
+
+Copyright (c) 2026 hy-sde
+
+This repository ports the fork-only Automic Vault surface
+(@deepseek-ai/dsh-av host service + @deepseek-ai/dsh-tool-av model tools)
+onto the DeepSeek Harness service seam as standalone packages
+(@hy-sde-org/dsh-av + @hy-sde-org/dsh-tool-av). The ported portions are
+distributed under the same MIT license as their origin:
+
+  Copyright (c) 2026 DeepSeek
+
+Parts of this repository are derived from DeepSeek Harness
+(https://github.com/deepseek-ai/deepseek-harness), MIT License.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,55 @@
+# @hy-sde-org/dsh-av
+
+The host-plane, **read-only** Automic Vault (`av`) CLI wrapper for DeepSeek
+Harness: `ctx.av` resolves the `av` executable (config → `DSH_AV_PATH` →
+PATH), probes it with `av --version`, and parses the JSON surfaces
+`av scan --json`, `av doctor [tool] --json`, `av detectors --json`,
+`av hardeners --json`, plus `av list` (secret **names only**). The
+model-facing tools in `@hy-sde-org/dsh-tool-av` resolve this exact service.
+Ported standalone from the fork-only `@deepseek-ai/dsh-av` — no upstream
+harness changes required.
+
+## Executed commands
+
+| Method | CLI invocation | Purpose |
+|---|---|---|
+| `probe` | `av --version` | reachability + version, never throws |
+| `scan` | `av scan --json [detectors…]` | audit the Mac for credential exposures and hazards |
+| `doctor` | `av doctor [tool] --json` | verify installed hardening |
+| `detectors` | `av detectors --json` | detector catalog (feed `scan` filters) |
+| `hardeners` | `av hardeners --json` | hardener catalog with hardened/applicable status |
+| `list` | `av list` | saved secret names only |
+
+All commands run through `ctx.subprocess` with bounded stdout/stderr
+collection, a wall-clock timeout, and SIGTERM→SIGKILL grace. A non-zero exit
+is returned as data on the run; only launch failure, signal kill, or timeout
+throws `AvCommandError`.
+
+## Security boundary
+
+Never invoked from this service: `av inject` / `av proxy` / `av save` /
+`av harden`. No stored Secret Value ever reaches model context or an argv
+here — the value-touching verbs stay human-in-the-loop in a terminal the
+user controls. `list` is a hard limit to secret **names**.
+
+## Configuration
+
+| config | env fallback | default | meaning |
+|---|---|---|---|
+| `avPath` | `DSH_AV_PATH` | `av` (PATH) | executable name or absolute path |
+| `timeoutMs` | — | `120000` | per-command wall-clock budget |
+| `maxStdoutBytes` | — | `8 MiB` | in-memory cap on collected stdout |
+| `maxStderrBytes` | — | `64 KiB` | retained stderr tail |
+| `graceMs` | — | `5000` | SIGTERM→SIGKILL grace |
+
+## Install
+
+Service row ships as `cordis.patch.yml` (stock `insert` form); `dsh plugin
+add @hy-sde-org/dsh-av @hy-sde-org/dsh-tool-av` inserts it into the profile's
+base composition. The tool row mounts at the agent plane from the ready-made
+preset in `examples/agent-preset/`.
+
+```bash
+pnpm --filter @hy-sde-org/dsh-av test    # fake-av-CLI service tests
+pnpm --filter @hy-sde-org/dsh-av build   # tsc -> dist
+```

package/cordis.patch.yml

@@ -0,0 +1,23 @@
+# @hy-sde-org/dsh-av — install surface for the read-only Automic Vault
+# service.
+#
+# The `ctx.av` SERVICE is host-plane: it is a stateless, read-only wrapper
+# around the `av` CLI (scan / doctor / detectors / hardeners / list over the
+# subprocess seam) with no durable state and no value-releasing verbs, so one
+# instance across sessions is correct — this bundle inserts one row into the
+# profile's base composition. The model-facing av_scan / av_doctor /
+# av_catalog / av_list tools live in @hy-sde-org/dsh-tool-av and mount at the
+# AGENT plane from a user agent preset (they resolve this host instance) —
+# see examples/agent-preset/ in the package for the ready-to-copy preset.
+#
+# `insert` is the stock harness patch form for rows that don't exist in the
+# deployment's composition (a plain `id:`+`name:` entry is a modification of
+# an existing row). This patch INSERTS a new row only — it touches no existing
+# row, so `dsh plugin add @hy-sde-org/dsh-av` never breaks boot on a stock
+# DeepSeek Harness (0.1.1-rc.2 and later). Without the preset row you get the
+# service but no tools; without this row the preset tools fail loudly
+# ("av: no av service") the first time they run.
+
+- insert:
+    - id: av
+      name: '@hy-sde-org/dsh-av'

package/dist/index.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Agentic Automic Vault plumbing for the DeepSeek Harness: `ctx.av`, a
+ * host-plane, read-only Automic Vault CLI service (scan / doctor / detectors /
+ * hardeners / list over the subprocess seam) that the vault tools in
+ * `@hy-sde-org/dsh-tool-av` resolve.
+ *
+ * The service is stateless per call, so it lives in the base bundle like
+ * `ctx.git` / `ctx.browser`. It never releases stored Secret Values: the
+ * value-touching verbs (`av inject` / `av proxy` / `av save` / `av harden`)
+ * stay human-in-the-loop in a terminal the user controls.
+ * @module @hy-sde-org/dsh-av
+ */
+import { Context } from '@deepseek-ai/cordis';
+import { AvService } from './service.ts';
+import type { Config } from './service.ts';
+export * from './types.ts';
+export * from './service.ts';
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        /** The av service: read-only Automic Vault CLI queries over subprocess. */
+        av: AvService;
+    }
+}
+export { AvCommandError } from './service.ts';
+/**
+ * Register `ctx.av`. Host-plane row: the service owns no durable state and
+ * shells out per call, so one instance across sessions is correct.
+ * @param ctx - the host or agent-plane context (needs the `subprocess` seam).
+ * @param config - service configuration (av path, timeouts, caps).
+ */
+export declare function apply(ctx: Context, config?: Config): void;
+/** Cordis plugin name for loader diagnostics. */
+export declare const name = "av";
+/**
+ * The plugin core: registers the av services.
+ *
+ */
+declare const _default: {
+    name: string;
+    apply: typeof apply;
+};
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAE1C,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA;AAE5B,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,2EAA2E;QAC3E,EAAE,EAAE,SAAS,CAAA;KACd;CACF;AAED,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAE7C;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,MAAW,GAAG,IAAI,CAE7D;AAED,iDAAiD;AACjD,eAAO,MAAM,IAAI,OAAO,CAAA;AAExB;;;GAGG;;;;;AACH,wBAA8B"}

package/dist/index.js

@@ -0,0 +1,33 @@
+/**
+ * Agentic Automic Vault plumbing for the DeepSeek Harness: `ctx.av`, a
+ * host-plane, read-only Automic Vault CLI service (scan / doctor / detectors /
+ * hardeners / list over the subprocess seam) that the vault tools in
+ * `@hy-sde-org/dsh-tool-av` resolve.
+ *
+ * The service is stateless per call, so it lives in the base bundle like
+ * `ctx.git` / `ctx.browser`. It never releases stored Secret Values: the
+ * value-touching verbs (`av inject` / `av proxy` / `av save` / `av harden`)
+ * stay human-in-the-loop in a terminal the user controls.
+ * @module @hy-sde-org/dsh-av
+ */
+import { AvService } from "./service.js";
+export * from "./types.js";
+export * from "./service.js";
+export { AvCommandError } from "./service.js";
+/**
+ * Register `ctx.av`. Host-plane row: the service owns no durable state and
+ * shells out per call, so one instance across sessions is correct.
+ * @param ctx - the host or agent-plane context (needs the `subprocess` seam).
+ * @param config - service configuration (av path, timeouts, caps).
+ */
+export function apply(ctx, config = {}) {
+    new AvService(ctx, config);
+}
+/** Cordis plugin name for loader diagnostics. */
+export const name = 'av';
+/**
+ * The plugin core: registers the av services.
+ *
+ */
+export default { name, apply };
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAGxC,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA;AAS5B,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAE7C;;;;;GAKG;AACH,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,SAAiB,EAAE;IACrD,IAAI,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AAC5B,CAAC;AAED,iDAAiD;AACjD,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,CAAA;AAExB;;;GAGG;AACH,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA"}

package/dist/service.d.ts

@@ -0,0 +1,119 @@
+/**
+ * The `ctx.av` service: a thin, read-only wrapper around the Automic Vault CLI
+ * via the `ctx.subprocess` seam. Host-plane — the service holds no durable
+ * state and shells out per call, so one instance serves every session; the
+ * model-facing tools live in `@hy-sde-org/dsh-tool-av` and resolve this host
+ * instance.
+ *
+ * The service resolves the `av` executable (config → `DSH_AV_PATH` → PATH),
+ * probes it once per call with `av --version`, and parses the JSON surfaces
+ * `av scan --json`, `av doctor [tool] --json`, `av detectors --json` and
+ * `av hardeners --json`, plus `av list` (secret NAMES only — a hard limit).
+ * It never invokes the value-releasing verbs (`av inject` / `av proxy` /
+ * `av save` / `av harden`): those stay human-in-the-loop in a terminal the
+ * user controls.
+ * @module @hy-sde-org/dsh-av/service
+ */
+import { Service, type Context } from '@deepseek-ai/cordis';
+import type { AvProbe, DetectorsReport, DoctorReport, HardenersReport, ScanReport } from './types.ts';
+/** Plugin configuration for the av service. */
+export interface Config {
+    /** `av` executable name or path (default `av`, resolved through PATH). */
+    avPath?: string;
+    /** Per-command wall-clock budget in ms (default 120000). */
+    timeoutMs?: number;
+    /** In-memory cap on one collected stdout (default 8 MiB). */
+    maxStdoutBytes?: number;
+    /** Retained stderr tail bytes (default 64 KiB). */
+    maxStderrBytes?: number;
+    /** SIGTERM→SIGKILL grace in ms (default 5000). */
+    graceMs?: number;
+}
+/** A failed `av` invocation: exit status plus stderr retained for the agent. */
+export declare class AvCommandError extends Error {
+    /** Process exit code of the failed av command (null when the process never exited). */
+    readonly exitCode: number | null;
+    /** Captured stderr of the failed av command. */
+    readonly stderr: string;
+    constructor(message: string, options: {
+        exitCode: number | null;
+        stderr: string;
+        cause?: unknown;
+    });
+}
+/** One completed subprocess run. */
+export interface CommandRun {
+    stdout: string;
+    exitCode: number;
+    killed: boolean;
+    stderr: string;
+}
+/** Default per-command timeout. */
+export declare const DEFAULT_TIMEOUT_MS = 120000;
+/** Default stdout collection cap. */
+export declare const DEFAULT_MAX_STDOUT_BYTES: number;
+/** The `ctx.av` service. */
+export declare class AvService extends Service {
+    private readonly avPath;
+    private readonly timeoutMs;
+    private readonly maxStdoutBytes;
+    private readonly maxStderrBytes;
+    private readonly graceMs;
+    constructor(ctx: Context, config?: Config);
+    /**
+     * Check whether the `av` CLI is reachable and answering `av --version`.
+     * Never throws: an unavailable binary, launch failure, or timeout surfaces
+     * as `{ available: false, reason }`.
+     * @returns reachability, CLI version when present, and a human reason on failure.
+     */
+    probe(): Promise<AvProbe>;
+    /**
+     * Audit the Mac for supported credential exposures and hazards
+     * (`av scan --json`).
+     * @param detectors - optional detector-name filter (from `detectors()`); empty means all.
+     * @returns the parsed `av scan --json` report.
+     */
+    scan(detectors?: readonly string[]): Promise<ScanReport>;
+    /**
+     * Verify installed hardening (`av doctor [tool] --json`).
+     * @param selector - optional tool name (e.g. `gh`); empty means all.
+     * @returns the parsed `av doctor [tool] --json` report.
+     */
+    doctor(selector?: string): Promise<DoctorReport>;
+    /**
+     * Print detector metadata (`av detectors --json`).
+     * @returns the parsed report.
+     */
+    detectors(): Promise<DetectorsReport>;
+    /**
+     * Print hardener metadata (`av hardeners --json`).
+     * @returns the parsed report.
+     */
+    hardeners(): Promise<HardenersReport>;
+    /**
+     * List saved secret names (`av list`). NAMES only — never values; the
+     * value-releasing verbs are deliberately out of this service's surface.
+     * @returns sorted saved secret names (only names, never values).
+     */
+    list(): Promise<string[]>;
+    private subprocess;
+    /**
+     * Run one `av` command. A non-zero exit code is returned as data on the run
+     * (callers decide whether it is an error); only a launch failure, a signal
+     * kill, or a timeout throws {@link AvCommandError}.
+     * @param argv - av arguments (never shell-interpreted).
+     * @param options - cwd (required), abort signal, stdin text, timeout override.
+     * @returns exit code, collected stdout/stderr, and killed flag; throws {@link AvCommandError} on launch/timeout/signal failures.
+     */
+    run(argv: readonly string[], options: {
+        cwd: string;
+        signal?: AbortSignal | undefined;
+        stdin?: string | undefined;
+        timeoutMs?: number;
+    }): Promise<CommandRun>;
+    /** Run one `av` command and require a clean exit (exit 0). */
+    private runChecked;
+    /** Parse one JSON surface; keep the report shape terse on failure. */
+    private parseJson;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAO3D,OAAO,KAAK,EACV,OAAO,EACP,eAAe,EACf,YAAY,EACZ,eAAe,EACf,UAAU,EACX,MAAM,YAAY,CAAA;AAEnB,+CAA+C;AAC/C,MAAM,WAAW,MAAM;IACrB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,gFAAgF;AAChF,qBAAa,cAAe,SAAQ,KAAK;IACvC,uFAAuF;IACvF,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,gDAAgD;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;gBAEX,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAKnG;AAED,oCAAoC;AACpC,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf;AAED,mCAAmC;AACnC,eAAO,MAAM,kBAAkB,SAAU,CAAA;AAEzC,qCAAqC;AACrC,eAAO,MAAM,wBAAwB,QAAkB,CAAA;AAMvD,4BAA4B;AAC5B,qBAAa,SAAU,SAAQ,OAAO;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAQ;IACvC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAQ;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;gBAEpB,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,MAAW;IAW7C;;;;;OAKG;IACG,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC;IAmB/B;;;;;OAKG;IACG,IAAI,CAAC,SAAS,GAAE,SAAS,MAAM,EAAO,GAAG,OAAO,CAAC,UAAU,CAAC;IAMlE;;;;OAIG;IACG,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAMtD;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC;IAK3C;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC;IAK3C;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAO/B,OAAO,CAAC,UAAU;IAQlB;;;;;;;OAOG;IACG,GAAG,CACP,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GACzG,OAAO,CAAC,UAAU,CAAC;IAuFtB,8DAA8D;YAChD,UAAU;IAcxB,sEAAsE;IACtE,OAAO,CAAC,SAAS;CAUlB"}

package/dist/service.js

@@ -0,0 +1,254 @@
+/**
+ * The `ctx.av` service: a thin, read-only wrapper around the Automic Vault CLI
+ * via the `ctx.subprocess` seam. Host-plane — the service holds no durable
+ * state and shells out per call, so one instance serves every session; the
+ * model-facing tools live in `@hy-sde-org/dsh-tool-av` and resolve this host
+ * instance.
+ *
+ * The service resolves the `av` executable (config → `DSH_AV_PATH` → PATH),
+ * probes it once per call with `av --version`, and parses the JSON surfaces
+ * `av scan --json`, `av doctor [tool] --json`, `av detectors --json` and
+ * `av hardeners --json`, plus `av list` (secret NAMES only — a hard limit).
+ * It never invokes the value-releasing verbs (`av inject` / `av proxy` /
+ * `av save` / `av harden`): those stay human-in-the-loop in a terminal the
+ * user controls.
+ * @module @hy-sde-org/dsh-av/service
+ */
+import { Service } from '@deepseek-ai/cordis';
+/** A failed `av` invocation: exit status plus stderr retained for the agent. */
+export class AvCommandError extends Error {
+    /** Process exit code of the failed av command (null when the process never exited). */
+    exitCode;
+    /** Captured stderr of the failed av command. */
+    stderr;
+    constructor(message, options) {
+        super(message, options.cause !== undefined ? { cause: options.cause } : undefined);
+        this.exitCode = options.exitCode;
+        this.stderr = options.stderr;
+    }
+}
+/** Default per-command timeout. */
+export const DEFAULT_TIMEOUT_MS = 120_000;
+/** Default stdout collection cap. */
+export const DEFAULT_MAX_STDOUT_BYTES = 8 * 1024 * 1024;
+const DEFAULT_MAX_STDERR_BYTES = 64 * 1024;
+const DEFAULT_GRACE_MS = 5_000;
+const VERSION_PREFIX = 'av ';
+/** The `ctx.av` service. */
+export class AvService extends Service {
+    avPath;
+    timeoutMs;
+    maxStdoutBytes;
+    maxStderrBytes;
+    graceMs;
+    constructor(ctx, config = {}) {
+        super(ctx, 'av');
+        this.avPath = config.avPath ?? process.env.DSH_AV_PATH ?? 'av';
+        this.timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        this.maxStdoutBytes = config.maxStdoutBytes ?? DEFAULT_MAX_STDOUT_BYTES;
+        this.maxStderrBytes = config.maxStderrBytes ?? DEFAULT_MAX_STDERR_BYTES;
+        this.graceMs = config.graceMs ?? DEFAULT_GRACE_MS;
+    }
+    /* ── availability probe ──────────────────────────────────────────────── */
+    /**
+     * Check whether the `av` CLI is reachable and answering `av --version`.
+     * Never throws: an unavailable binary, launch failure, or timeout surfaces
+     * as `{ available: false, reason }`.
+     * @returns reachability, CLI version when present, and a human reason on failure.
+     */
+    async probe() {
+        try {
+            const run = await this.run(['--version'], { cwd: process.cwd() });
+            if (run.exitCode !== 0) {
+                return { available: false, reason: `av --version exited ${run.exitCode}: ${run.stderr.trim()}` };
+            }
+            const firstLine = run.stdout.split('\n', 1)[0] ?? '';
+            const version = firstLine.startsWith(VERSION_PREFIX) ? firstLine.slice(VERSION_PREFIX.length).trim() : firstLine.trim();
+            return { available: true, ...version.length > 0 ? { version } : {} };
+        }
+        catch (error) {
+            return {
+                available: false,
+                reason: error instanceof Error ? error.message : String(error),
+            };
+        }
+    }
+    /* ── read-only surfaces ──────────────────────────────────────────────── */
+    /**
+     * Audit the Mac for supported credential exposures and hazards
+     * (`av scan --json`).
+     * @param detectors - optional detector-name filter (from `detectors()`); empty means all.
+     * @returns the parsed `av scan --json` report.
+     */
+    async scan(detectors = []) {
+        const argv = detectors.length > 0 ? ['scan', '--json', ...detectors] : ['scan', '--json'];
+        const run = await this.runChecked(argv, { cwd: process.cwd() });
+        return this.parseJson(run.stdout, 'av scan');
+    }
+    /**
+     * Verify installed hardening (`av doctor [tool] --json`).
+     * @param selector - optional tool name (e.g. `gh`); empty means all.
+     * @returns the parsed `av doctor [tool] --json` report.
+     */
+    async doctor(selector) {
+        const argv = selector === undefined || selector.length === 0 ? ['doctor', '--json'] : ['doctor', selector, '--json'];
+        const run = await this.runChecked(argv, { cwd: process.cwd() });
+        return this.parseJson(run.stdout, 'av doctor');
+    }
+    /**
+     * Print detector metadata (`av detectors --json`).
+     * @returns the parsed report.
+     */
+    async detectors() {
+        const run = await this.runChecked(['detectors', '--json'], { cwd: process.cwd() });
+        return this.parseJson(run.stdout, 'av detectors');
+    }
+    /**
+     * Print hardener metadata (`av hardeners --json`).
+     * @returns the parsed report.
+     */
+    async hardeners() {
+        const run = await this.runChecked(['hardeners', '--json'], { cwd: process.cwd() });
+        return this.parseJson(run.stdout, 'av hardeners');
+    }
+    /**
+     * List saved secret names (`av list`). NAMES only — never values; the
+     * value-releasing verbs are deliberately out of this service's surface.
+     * @returns sorted saved secret names (only names, never values).
+     */
+    async list() {
+        const run = await this.runChecked(['list'], { cwd: process.cwd() });
+        return run.stdout.split('\n').map(line => line.trim()).filter(line => line.length > 0);
+    }
+    /* ── low-level runner ─────────────────────────────────────────────────── */
+    subprocess() {
+        const subprocess = this.ctx.get('subprocess');
+        if (subprocess === undefined) {
+            throw new Error('av service requires the subprocess seam: load @deepseek-ai/dsh-subprocess-local');
+        }
+        return subprocess;
+    }
+    /**
+     * Run one `av` command. A non-zero exit code is returned as data on the run
+     * (callers decide whether it is an error); only a launch failure, a signal
+     * kill, or a timeout throws {@link AvCommandError}.
+     * @param argv - av arguments (never shell-interpreted).
+     * @param options - cwd (required), abort signal, stdin text, timeout override.
+     * @returns exit code, collected stdout/stderr, and killed flag; throws {@link AvCommandError} on launch/timeout/signal failures.
+     */
+    async run(argv, options) {
+        const { cwd, signal, stdin } = options;
+        if (signal?.aborted) {
+            throw new AvCommandError('av command was aborted before it could start', { exitCode: null, stderr: '' });
+        }
+        const limit = options.timeoutMs ?? this.timeoutMs;
+        const controller = new AbortController();
+        // Mutable through the timeout closure; a record keeps the flag out of TS's
+        // synchronous narrowing so the concurrent timer branch stays reachable.
+        const state = { timedOut: false };
+        const timer = setTimeout(() => {
+            state.timedOut = true;
+            controller.abort();
+        }, limit);
+        const forward = () => {
+            controller.abort();
+        };
+        if (signal !== undefined) {
+            signal.addEventListener('abort', forward, { once: true });
+        }
+        let handle;
+        try {
+            handle = this.subprocess().spawn({
+                argv: [this.avPath, ...argv],
+                cwd,
+                graceMs: this.graceMs,
+                stdio: {
+                    stdin: stdin === undefined ? 'ignore' : { data: stdin },
+                    stdout: { maxBytes: this.maxStdoutBytes },
+                    stderr: { maxBytes: this.maxStderrBytes },
+                },
+                signal: controller.signal,
+            });
+        }
+        catch (error) {
+            clearTimeout(timer);
+            if (signal !== undefined)
+                signal.removeEventListener('abort', forward);
+            if (signal?.aborted) {
+                throw new AvCommandError('av command was aborted before completion', { exitCode: null, stderr: '', cause: error });
+            }
+            if (state.timedOut) {
+                throw new AvCommandError(`av ${argv[0] ?? ''} timed out after ${limit}ms`, { exitCode: null, stderr: '', cause: error });
+            }
+            throw new AvCommandError(`av ${argv[0] ?? ''} could not start (launch failed)`, {
+                exitCode: null,
+                stderr: '',
+                cause: error,
+            });
+        }
+        let outcome;
+        try {
+            outcome = await handle.done;
+        }
+        catch (error) {
+            clearTimeout(timer);
+            if (signal !== undefined)
+                signal.removeEventListener('abort', forward);
+            if (state.timedOut) {
+                throw new AvCommandError(`av ${argv[0] ?? ''} timed out after ${limit}ms`, { exitCode: null, stderr: '', cause: error });
+            }
+            throw new AvCommandError(`av ${argv[0] ?? ''} could not start (launch failed)`, {
+                exitCode: null,
+                stderr: '',
+                cause: error,
+            });
+        }
+        clearTimeout(timer);
+        if (signal !== undefined)
+            signal.removeEventListener('abort', forward);
+        const stdout = handle.collected.stdout?.readFrom(0);
+        const stderr = handle.collected.stderr?.readFrom(0);
+        if (stdout === undefined || stderr === undefined) {
+            throw new AvCommandError(`av ${argv[0] ?? ''} produced no collected output streams`, {
+                exitCode: null,
+                stderr: '',
+            });
+        }
+        if (state.timedOut) {
+            throw new AvCommandError(`av ${argv[0] ?? ''} timed out after ${limit}ms`, { exitCode: null, stderr: stderr.text });
+        }
+        if (outcome.signal !== null) {
+            throw new AvCommandError(`av ${argv[0] ?? ''} was killed by signal ${outcome.signal}`, {
+                exitCode: outcome.exitCode,
+                stderr: stderr.text,
+            });
+        }
+        // After the signal-kill branch above, the process exited on its own:
+        // the signal is null and the exit code is a real number.
+        return { stdout: stdout.text, exitCode: outcome.exitCode ?? 0, killed: false, stderr: stderr.text };
+    }
+    /** Run one `av` command and require a clean exit (exit 0). */
+    async runChecked(argv, options) {
+        const run = await this.run(argv, options);
+        if (run.exitCode !== 0) {
+            throw new AvCommandError(`av ${argv[0] ?? ''} exited ${run.exitCode}: ${run.stderr.trim() || run.stdout.trim()}`, {
+                exitCode: run.exitCode,
+                stderr: run.stderr,
+            });
+        }
+        return run;
+    }
+    /** Parse one JSON surface; keep the report shape terse on failure. */
+    parseJson(stdout, surface) {
+        try {
+            return JSON.parse(stdout);
+        }
+        catch (error) {
+            throw new AvCommandError(`${surface} produced unparseable output`, {
+                exitCode: null,
+                stderr: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,OAAO,EAAgB,MAAM,qBAAqB,CAAA;AA6B3D,gFAAgF;AAChF,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,uFAAuF;IAC9E,QAAQ,CAAe;IAChC,gDAAgD;IACvC,MAAM,CAAQ;IAEvB,YAAY,OAAe,EAAE,OAAqE;QAChG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAClF,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;QAChC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAC9B,CAAC;CACF;AAUD,mCAAmC;AACnC,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAA;AAEzC,qCAAqC;AACrC,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AAEvD,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAA;AAC1C,MAAM,gBAAgB,GAAG,KAAK,CAAA;AAC9B,MAAM,cAAc,GAAG,KAAK,CAAA;AAE5B,4BAA4B;AAC5B,MAAM,OAAO,SAAU,SAAQ,OAAO;IACnB,MAAM,CAAQ;IACd,SAAS,CAAQ;IACjB,cAAc,CAAQ;IACtB,cAAc,CAAQ;IACtB,OAAO,CAAQ;IAEhC,YAAY,GAAY,EAAE,SAAiB,EAAE;QAC3C,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAChB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAA;QAC9D,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAA;QACvD,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,wBAAwB,CAAA;QACvE,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,wBAAwB,CAAA;QACvE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAA;IACnD,CAAC;IAED,4EAA4E;IAE5E;;;;;OAKG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;YACjE,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAA;YAClG,CAAC;YACD,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YACpD,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAA;YACvH,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC/D,CAAA;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAE5E;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,YAA+B,EAAE;QAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QACzF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAC/D,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAe,CAAA;IAC5D,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,QAAiB;QAC5B,MAAM,IAAI,GAAG,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;QACpH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAC/D,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAiB,CAAA;IAChE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS;QACb,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAClF,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAoB,CAAA;IACtE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS;QACb,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAClF,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAoB,CAAA;IACtE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QACnE,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACxF,CAAC;IAED,6EAA6E;IAErE,UAAU;QAChB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QAC7C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAA;QACpG,CAAC;QACD,OAAO,UAAU,CAAA;IACnB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,GAAG,CACP,IAAuB,EACvB,OAA0G;QAE1G,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;QACtC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,cAAc,CAAC,8CAA8C,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;QAC1G,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAA;QACjD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,2EAA2E;QAC3E,wEAAwE;QACxE,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;QACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAA;YACrB,UAAU,CAAC,KAAK,EAAE,CAAA;QACpB,CAAC,EAAE,KAAK,CAAC,CAAA;QACT,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,UAAU,CAAC,KAAK,EAAE,CAAA;QACpB,CAAC,CAAA;QACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3D,CAAC;QACD,IAAI,MAAwB,CAAA;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC;gBAC/B,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;gBAC5B,GAAG;gBACH,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,KAAK,EAAE;oBACL,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE;oBACvD,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE;oBACzC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE;iBAC1C;gBACD,MAAM,EAAE,UAAU,CAAC,MAAM;aACI,CAAC,CAAA;QAClC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YACtE,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,cAAc,CAAC,0CAA0C,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;YACpH,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,IAAI,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,oBAAoB,KAAK,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;YAC1H,CAAC;YACD,MAAM,IAAI,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,kCAAkC,EAAE;gBAC9E,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,KAAK;aACb,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,OAA0B,CAAA;QAC9B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAA;QAC7B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YACtE,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,IAAI,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,oBAAoB,KAAK,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;YAC1H,CAAC;YACD,MAAM,IAAI,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,kCAAkC,EAAE;gBAC9E,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,KAAK;aACb,CAAC,CAAA;QACJ,CAAC;QACD,YAAY,CAAC,KAAK,CAAC,CAAA;QACnB,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACtE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;QACnD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;QACnD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACjD,MAAM,IAAI,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,uCAAuC,EAAE;gBACnF,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,EAAE;aACX,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,oBAAoB,KAAK,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;QACrH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,yBAAyB,OAAO,CAAC,MAAM,EAAE,EAAE;gBACrF,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,MAAM,CAAC,IAAI;aACpB,CAAC,CAAA;QACJ,CAAC;QACD,qEAAqE;QACrE,yDAAyD;QACzD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;IACrG,CAAC;IAED,8DAA8D;IACtD,KAAK,CAAC,UAAU,CACtB,IAAuB,EACvB,OAA8E;QAE9E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACzC,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE;gBAChH,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,sEAAsE;IAC9D,SAAS,CAAC,MAAc,EAAE,OAAe;QAC/C,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,cAAc,CAAC,GAAG,OAAO,8BAA8B,EAAE;gBACjE,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC/D,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/types.d.ts

@@ -0,0 +1,120 @@
+/**
+ * Type shapes for the `ctx.av` service, mirroring the JSON payloads of the
+ * Automic Vault CLI (`av scan --json`, `av doctor [tool] --json`,
+ * `av detectors --json`, `av hardeners --json`, `av list`). Field names are
+ * kept 1:1 with the CLI contract so a newer `av` release shows up as parsing
+ * data rather than a schema drift.
+ * @module @hy-sde-org/dsh-av/types
+ */
+/** One credential exposure or hazard found by `av scan`. */
+export interface AvFinding {
+    /** Detector / tool name that produced the finding (e.g. `gh_cli`). */
+    source: string;
+    /** `high`, `medium` or `low`. */
+    severity: string;
+    /** Upstream project homepage (may be absent). */
+    homepage?: string;
+    /** Why this is a problem. */
+    explanation: string;
+    /** Remediation steps. */
+    solution: string;
+    /** Files and lines the finding touches (line may be absent). */
+    affected: {
+        path: string;
+        line?: number | null;
+    }[];
+    /** Automic Vault docs URL for the finding (may be absent). */
+    docs_url?: string;
+    /** Detector names that independently produced the finding. */
+    detectors: string[];
+}
+/** `av scan --json` payload. */
+export interface ScanReport {
+    findings: AvFinding[];
+}
+/** One hardening-verification outcome from `av doctor`. */
+export interface AvDoctorIssue {
+    kind: string;
+    command?: string;
+    message: string;
+    remediation?: string;
+    stub_path?: string;
+    target_path?: string;
+    resolved_path?: string;
+}
+/** One hardener's doctor result. */
+export interface AvDoctorResult {
+    name: string;
+    commands: string[];
+    issues: AvDoctorIssue[];
+}
+/** `av doctor [tool] --json` payload. */
+export interface DoctorReport {
+    results: AvDoctorResult[];
+}
+/** Watch scope a detector uses. */
+export interface AvWatchScope {
+    path: string;
+    recursive: boolean;
+}
+/** `av detectors --json` entry. */
+export interface AvDetector {
+    name: string;
+    homepage?: string;
+    docs_url?: string;
+    documentation?: string;
+    watch_scopes: AvWatchScope[];
+}
+/** `av detectors --json` payload. */
+export interface DetectorsReport {
+    detectors: AvDetector[];
+}
+/** A command managed by a hardener. */
+export interface AvHardenedCommand {
+    name: string;
+    hardened: boolean;
+    stub_path?: string;
+    target_path?: string;
+    required_paths: string[];
+}
+/** Route descriptor of a Secret Gate. */
+export interface AvSecretGateRoute {
+    operation: string;
+    script_path?: string;
+    target_path?: string;
+    caller_identifiers?: string[];
+    key_patterns: string[];
+    replace_existing_env?: boolean;
+    allow_missing_keys?: boolean;
+}
+/** Secret Gate descriptor. */
+export interface AvSecretGate {
+    id: string;
+    key_patterns: string[];
+    routes: AvSecretGateRoute[];
+}
+/** `av hardeners --json` entry. */
+export interface AvHardener {
+    name: string;
+    documentation?: string;
+    hardened: boolean;
+    applicable: boolean;
+    stub_path?: string;
+    target_path?: string;
+    commands: AvHardenedCommand[];
+    secret_gate?: AvSecretGate;
+}
+/** `av hardeners --json` payload. */
+export interface HardenersReport {
+    hardeners: AvHardener[];
+}
+/** Capabilities present when the service was reached. */
+export interface AvProbe {
+    /** Whether the `av` CLI is reachable and answers `av --version`. */
+    available: boolean;
+    /** CLI-reported version (e.g. `3.16.0`) when available. */
+    version?: string;
+    /** Human-readable failure reason when unavailable. */
+    reason?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,4DAA4D;AAC5D,MAAM,WAAW,SAAS;IACxB,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAA;IACd,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAA;IAChB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,6BAA6B;IAC7B,WAAW,EAAE,MAAM,CAAA;IACnB,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,gEAAgE;IAChE,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,EAAE,CAAA;IAClD,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,8DAA8D;IAC9D,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,gCAAgC;AAChC,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,SAAS,EAAE,CAAA;CACtB;AAED,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,oCAAoC;AACpC,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,MAAM,EAAE,aAAa,EAAE,CAAA;CACxB;AAED,yCAAyC;AACzC,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,cAAc,EAAE,CAAA;CAC1B;AAED,mCAAmC;AACnC,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,OAAO,CAAA;CACnB;AAED,mCAAmC;AACnC,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,YAAY,EAAE,CAAA;CAC7B;AAED,qCAAqC;AACrC,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,UAAU,EAAE,CAAA;CACxB;AAED,uCAAuC;AACvC,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,MAAM,EAAE,CAAA;CACzB;AAED,yCAAyC;AACzC,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAC7B;AAED,8BAA8B;AAC9B,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,MAAM,EAAE,iBAAiB,EAAE,CAAA;CAC5B;AAED,mCAAmC;AACnC,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,OAAO,CAAA;IACjB,UAAU,EAAE,OAAO,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,iBAAiB,EAAE,CAAA;IAC7B,WAAW,CAAC,EAAE,YAAY,CAAA;CAC3B;AAED,qCAAqC;AACrC,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,UAAU,EAAE,CAAA;CACxB;AAED,yDAAyD;AACzD,MAAM,WAAW,OAAO;IACtB,oEAAoE;IACpE,SAAS,EAAE,OAAO,CAAA;IAClB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB"}

package/dist/types.js

@@ -0,0 +1,10 @@
+/**
+ * Type shapes for the `ctx.av` service, mirroring the JSON payloads of the
+ * Automic Vault CLI (`av scan --json`, `av doctor [tool] --json`,
+ * `av detectors --json`, `av hardeners --json`, `av list`). Field names are
+ * kept 1:1 with the CLI contract so a newer `av` release shows up as parsing
+ * data rather than a schema drift.
+ * @module @hy-sde-org/dsh-av/types
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/examples/agent-preset/agent.cordis.yml

@@ -0,0 +1,19 @@
+# User agent preset for @hy-sde-org/dsh-av on OFFICIAL DeepSeek Harness
+# releases (dsh-v0.1.2-rc.1 and later).
+#
+# Install: copy this directory to ~/.dsh/.agent-presets/<id>/ (pick any id),
+# then select the preset in the Web UI preset picker (or `dsh agent` CLI).
+#
+# The `av` SERVICE row is added host-wide by the plugin's own
+# cordis.patch.yml when you run `dsh plugin add`; this preset contributes
+# ONLY the model-facing tool row. `@hy-sde-org/dsh-tool-av` registers no
+# service of its own — it resolves the host instance across the plane
+# boundary, so no realm/isolate is needed here.
+#
+# Copy any other rows from the preset you normally use (persona, bash, todo,
+# ask-user, skills, ...) next to these; only the tool-av row is special. If
+# the package isn't installed, the loader reports the missing plugin on boot.
+
+- id: tool-av
+  name: '@hy-sde-org/dsh-tool-av'
+  config: {}

package/examples/agent-preset/preset.yml

@@ -0,0 +1,3 @@
+name: Automic Vault Auditor
+description: Coding agent with read-only Automic Vault tools — av_scan / av_doctor / av_catalog / av_list over the host ctx.av service (audits for exposed credentials, verifies hardening, never releases secret values). For stock DeepSeek Harness releases (0.1.2-rc.1+).
+order: 9

package/package.json

@@ -0,0 +1,79 @@
+{
+  "name": "@hy-sde-org/dsh-av",
+  "version": "0.1.2-rc.1",
+  "description": "Read-only Automic Vault plumbing for DeepSeek Harness: the host ctx.av service (av CLI resolution + probe, scan/doctor/detectors/hardeners/list over the subprocess seam) backing the read-only vault tools in @hy-sde-org/dsh-tool-av — a standalone plugin with no upstream harness changes required.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./types": {
+      "types": "./dist/types.d.ts",
+      "default": "./dist/types.js"
+    },
+    "./service": {
+      "types": "./dist/service.d.ts",
+      "default": "./dist/service.js"
+    },
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "cordis.patch.yml",
+    "examples/agent-preset/agent.cordis.yml",
+    "examples/agent-preset/preset.yml",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=22.19.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/hy-sde/dsh-av.git"
+  },
+  "license": "MIT",
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  },
+  "dependencies": {
+    "@deepseek-ai/cordis": "^4.0.2"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-subprocess": "^0.1.2-rc.1"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-subprocess": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-subprocess-local": "^0.1.2-rc.1",
+    "@types/node": "^24.0.0",
+    "typescript": "^5.9.3",
+    "vitest": "^3.2.7"
+  },
+  "keywords": [
+    "deepseek",
+    "agent",
+    "harness",
+    "dsh-plugin",
+    "automic-vault",
+    "secrets",
+    "hardening",
+    "audit"
+  ],
+  "scripts": {
+    "clean": "rm -rf dist",
+    "build": "tsc -p tsconfig.build.json",
+    "check": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run"
+  }
+}