@topy-ai/maggie 0.7.55 → 0.7.56

package/README-zh-TW.md

@@ -29,7 +29,9 @@ npx @topy-ai/maggie init --scope project --agent all
 npx @topy-ai/maggie doctor --scope project --project .
 ```
 
-目前 npm 版本為 `0.7.55`：完成 feedback batch 31，共 16 條，來自一個以排程 AI agent 操作自家行銷產品、同時維護 PHP 主機的團隊，並同步發布 MaggieDash 0.2.15。
+目前 npm 版本為 `0.7.56`：新增 Maggie Security（`maggie-security` skill 與 `maggie security` 指令，共 46 個指令、29 個 MCP 工具），涵蓋套件、runtime、資料庫、Web server、Linux 發行版與 WordPress 的漏洞公告與 end-of-life 日期，以及 secrets、程式碼、網站與主機檢查、報告、CI gate 與每日監控。
+
+0.7.55 完成 feedback batch 31，共 16 條，來自一個以排程 AI agent 操作自家行銷產品、同時維護 PHP 主機的團隊，並同步發布 MaggieDash 0.2.15。
 
 - **排程 agent（`maggie-ops`）**：
   - Skill 的「Routine mode」範本：何時執行、讀什麼、可確認哪些寫入與每日上限、失敗時怎麼辦，最後一定存一份報告。排程規則：排在伺服器自己的工作之後、避開整點，並留在平台每日執行次數上限內。
@@ -137,7 +139,7 @@ structure drift 或重複 treatment product 時 fail closed。
 deployment、memory、feedback 和 MaggieDash。內容先 draft/review，外部寫入、
 publish 與 production deployment 需要明確確認。
 
-目前 npm 版本為 `0.7.55`，包含 batch 31 排程 agent routines、報告收件匣與無人值守 agent 限制、PHP runtime 盤點與主機鎖、pull 網站改寫、query 點子與社群佇列檢查，batch 30 MaggieDash 先裝核心、release privacy gate、feedback 備援、社群連結與圖片檢查、大量頁面產生與 app 檢查，batch 29 預約規則、部署、app QA、助理與社群功能，以及 batch 28 產品 app、assistant tools、mobile、product release、skills catalog 與 bridge host 功能、batch 26、27 feedback 修正與 idempotent `maggie update`與 Booking email-template 合約/CLI validator 同步。本版完成 2026-09-24 booking feedback batch：Calendar grid/free-slot entry 與 host modal focus-restoration evidence。本版新增 Starter marketplace provisioning plan；本版完成 feedback batches 22、23：加入 declarative browser interaction evidence、design markup/style/content-key gate、compiler source anchoring、entity double-escape protection、`update --help` read-only、noindex hypothetical indexability、可過期 baseline acknowledgement、DOM-only link extraction regression，以及 MaggieDash 0.2.10 的 content override、短期 browser session、CDN-safe public-session cache contracts。authentication 和 isolated dev server 仍由 host 負責。`maggie-booking` workflow、傳統 email/password、Stripe、Resend、public booking flow 及既有安全邊界維持不變；provider-bound video generation 與 transactional delivery 仍記錄在 issue #39，前一批延後功能仍在 issue #38，不會直接成為 active memory。0.7.33 記錄並審查一筆更正回饋；確認 0.7.32 已正確處理 batch index，沒有修改已驗證的 shared behavior。0.7.32 加入 feedback 一基索引支援、MaggieDash panel 的 source/freshness/error evidence、Consent Mode 與實際 write/no-op reconciliation、SEO baseline recapture、sitemap origin rebasing、content-diff scope、migration ledger reconciliation、deployment credential preflight、release provenance/runtime preflight、icon release gate、opt-in blog auto-publish gate，以及 least-privilege VPS deployer。也修復 top-level `maggie feedback` dispatcher parity。0.7.31 加入 update 差異摘要、atomic installer copy、subset install manifest merge，以及 inventory drift 時 doctor non-zero。0.7.30 補上 feedback tracking issue closeout gate 與 batch 14/15 audit ledger。0.7.29 修正 npm package landing page 使用英文 README；0.7.28 加入 versioned Gemini model policy、明確 fallback 與 provenance、bundled-first CLI
+目前 npm 版本為 `0.7.56`，包含 Maggie Security、batch 31 排程 agent routines、報告收件匣與無人值守 agent 限制、PHP runtime 盤點與主機鎖、pull 網站改寫、query 點子與社群佇列檢查，batch 30 MaggieDash 先裝核心、release privacy gate、feedback 備援、社群連結與圖片檢查、大量頁面產生與 app 檢查，batch 29 預約規則、部署、app QA、助理與社群功能，以及 batch 28 產品 app、assistant tools、mobile、product release、skills catalog 與 bridge host 功能、batch 26、27 feedback 修正與 idempotent `maggie update`與 Booking email-template 合約/CLI validator 同步。本版完成 2026-09-24 booking feedback batch：Calendar grid/free-slot entry 與 host modal focus-restoration evidence。本版新增 Starter marketplace provisioning plan；本版完成 feedback batches 22、23：加入 declarative browser interaction evidence、design markup/style/content-key gate、compiler source anchoring、entity double-escape protection、`update --help` read-only、noindex hypothetical indexability、可過期 baseline acknowledgement、DOM-only link extraction regression，以及 MaggieDash 0.2.10 的 content override、短期 browser session、CDN-safe public-session cache contracts。authentication 和 isolated dev server 仍由 host 負責。`maggie-booking` workflow、傳統 email/password、Stripe、Resend、public booking flow 及既有安全邊界維持不變；provider-bound video generation 與 transactional delivery 仍記錄在 issue #39，前一批延後功能仍在 issue #38，不會直接成為 active memory。0.7.33 記錄並審查一筆更正回饋；確認 0.7.32 已正確處理 batch index，沒有修改已驗證的 shared behavior。0.7.32 加入 feedback 一基索引支援、MaggieDash panel 的 source/freshness/error evidence、Consent Mode 與實際 write/no-op reconciliation、SEO baseline recapture、sitemap origin rebasing、content-diff scope、migration ledger reconciliation、deployment credential preflight、release provenance/runtime preflight、icon release gate、opt-in blog auto-publish gate，以及 least-privilege VPS deployer。也修復 top-level `maggie feedback` dispatcher parity。0.7.31 加入 update 差異摘要、atomic installer copy、subset install manifest merge，以及 inventory drift 時 doctor non-zero。0.7.30 補上 feedback tracking issue closeout gate 與 batch 14/15 audit ledger。0.7.29 修正 npm package landing page 使用英文 README；0.7.28 加入 versioned Gemini model policy、明確 fallback 與 provenance、bundled-first CLI
 dispatch、`maggie --version`、feedback batch review 聚合與重複偵測、marketplace enrichment evidence、booking
 worker/resolver evidence，以及 read-only migration preflight。它也包含 host-owned mobile app surface contract、signed-in
 camera-state QA、直接 Astro route resolution、correlated feedback batch，以及
@@ -289,6 +291,6 @@ maggie service retirement-audit --project . \
   --evidence .maggie/booking/retirement-evidence.json
 ```
 
-完整中文說明、22 個 skills 清單和 roadmap：
+完整中文說明、23 個 skills 清單和 roadmap：
 [繁體中文 README](https://github.com/TOPY-AI-LTD/ai-cmo-skills/blob/main/README.zh-TW.md)
 · [Roadmap](https://github.com/TOPY-AI-LTD/ai-cmo-skills/blob/main/ROADMAP.md)

package/README.md

@@ -87,11 +87,38 @@ Then invoke the installed skills from your coding agent, for example:
 
 Maggie keeps the existing project foundation and asks for decisions before
 shared routes, analytics, or publishing boundaries change. The current
-package ships 22 installable skills and a local-first MaggieDash foundation.
-
-This package is `0.7.55`. It closes feedback batch 31: 16 records from a team that runs scheduled AI
+package ships 23 installable skills and a local-first MaggieDash foundation.
+
+This package is `0.7.56`. It adds Maggie Security, a new
+`maggie-security` skill and `maggie security` command family (46 commands, 29
+MCP tools, 7 contracts under `contracts/maggie-security/`).
+
+- **Advisories for the whole stack.** Packages (npm, pnpm, Yarn, Bun,
+  Composer, pip/Poetry/Pipenv/uv/pdm, Maven/Gradle, Go, RubyGems, Cargo,
+  NuGet), runtimes (Node, PHP, Python, Java, Go, Ruby, .NET), databases
+  (MySQL, MariaDB, PostgreSQL, Redis, MongoDB), web servers, Debian, Ubuntu,
+  Alpine, Rocky and Alma packages, and WordPress core, plugins and themes.
+  Sources: OSV, the CVE list, CISA KEV, EPSS, WPVulnerability and
+  endoflife.date, cached with an offline mode and a mirror option.
+- **Findings with a ledger.** Each result is a `maggie-security-finding.v1`
+  with a stable id, a priority (p0–p4), a status (new, open, fixed, accepted
+  risk, false positive) and a fix. Secret values are never stored.
+- **Code and supply chain.** `deps`, `sbom`, `secrets` (gitleaks rules),
+  `code-scan` (Semgrep, 22 bundled rules), `preinstall` and `image` checks;
+  pinned external tools are refused when their checksum does not match.
+- **Websites and hosts.** Domain ownership by DNS TXT before any scan;
+  `headers`, `tls`, `web-scan`, `zap-baseline`; a read-only host collector
+  (Linux hardening checks), log review with Sigma rules and threat lists,
+  `protect-plan` and `waf-replay` (Coraza + OWASP CRS), uptime checks.
+- **Reports and gates.** Plain-language reports, CVE response plans,
+  `incident`, a CI `gate` (template in `templates/ci/`) and a `securityGate`
+  check in `maggie deployment readiness`.
+- **Agents.** `skills-scan`, `mcp-self-check`, `github-alerts`, and
+  `hosted-job` for a hosted daily watch.
+
+0.7.55 closed feedback batch 31: 16 records from a team that runs scheduled AI
 agents against its own marketing product and maintains PHP hosts, plus
-MaggieDash 0.2.15.
+MaggieDash 0.2.15:
 
 - **Scheduled agents (`maggie-ops`).**
   - A "Routine mode" template for skills: when it runs, what it reads, which
@@ -810,8 +837,8 @@ artifact schemas.
 Recommended upgrade sequence for the current release:
 
 ```bash
-npx @topy-ai/maggie@0.7.55 update --scope project --project . --force
-npx @topy-ai/maggie@0.7.55 cleanup --scope project --project .
+npx @topy-ai/maggie@0.7.56 update --scope project --project . --force
+npx @topy-ai/maggie@0.7.56 cleanup --scope project --project .
 ```
 
 Maintainers should pass npm credentials through the repository helper, never
@@ -1322,13 +1349,13 @@ repairs with `maggie dash sections validate`, `fanout-validate`,
 `maggie dash inventory` to classify published pages once into disjoint kinds.
 See the [quality contract examples](https://github.com/TOPY-AI-LTD/ai-cmo-skills/blob/main/contracts/maggiedash/quality-contracts.md).
 
-The package includes all 22 installable skills: `maggie-blog-bootstrap`,
+The package includes all 23 installable skills: `maggie-blog-bootstrap`,
 `maggie-dash`, `maggie-clone`, `maggie-clone-to-template`, `maggie-marketplace`,
 `maggie-template`, `maggie-design`, `maggie-ops`, `maggie-deployment`,
 `maggie-project-context`, `maggie-seo-geo`, `maggie-social-share`,
 `maggie-service-booking`, `maggie-memory`, `maggie-content-localization`,
 `maggie-feedback`, `maggie-qa-workflow`, `maggie-auth-reference`,
-`maggie-blog`, `maggie-mobile-app`, and `maggie-assistant-tools`. Use the stable
+`maggie-blog`, `maggie-mobile-app`, `maggie-assistant-tools`, and `maggie-security`. Use the stable
 commands below after installation:
 
 ```bash

package/bin/maggie.js

@@ -227,6 +227,8 @@ Usage:
   maggie ops preflight --project PATH --write
   maggie ops routines-check routines.json [--server-jobs FILE] [--plan pro|max|team|enterprise]
   maggie ops routines-payload routines.json --repo OWNER/NAME [--commit SHA] [--output FILE]
+  maggie security doctor|tools|feeds|ledger [--project PATH] [--format json|sarif|md|text] [--offline] [--explain-egress]
+  maggie security <command> --help   (vuln watch, dependencies, secrets, web surface, logs, host audit, uptime, report, mcp; docs/maggie-security)
 
 Examples:
   npx @topy-ai/maggie init
@@ -865,6 +867,8 @@ try {
   else if (command === "deployment" && ["runtime-inventory", "host-lock"].includes(args[0])) workflowCli("maggie_host_runtime.py", args);
   else if (command === "deployment" && args[0] === "runtime-preflight") workflowCli("maggie_runtime_preflight.py", args.slice(1));
   else if (command === "deployment") workflowCli("maggie_deployment.py", args);
+  // The CLI runs with cwd = --project, so pass that path absolute or Python would resolve it twice.
+  else if (command === "security") workflowCli("maggie_security.py", args.map((value, index) => (args[index - 1] === "--project" ? resolve(value) : value)));
   else if (command === "migration") workflowCli("maggie_migration.py", args);
   else if (command === "schedule") workflowCli("maggie_schedule.py", args);
   else if (command === "analytics") workflowCli("maggie_analytics.py", args);

package/bundled-contracts/maggie-deployment/readiness-v1.schema.json

@@ -22,7 +22,8 @@
         "hostHealth": {"$ref": "#/$defs/check"},
         "releaseIdentity": {"$ref": "#/$defs/check"},
         "rollbackEvidence": {"$ref": "#/$defs/check"},
-        "authenticatedCanary": {"$ref": "#/$defs/check"}
+        "authenticatedCanary": {"$ref": "#/$defs/check"},
+        "securityGate": {"$ref": "#/$defs/check"}
       }
     }
   },

package/bundled-contracts/maggie-security/finding-example-v1.json

@@ -0,0 +1,89 @@
+{
+  "schema": "maggie-security-finding.v1",
+  "id": "msf_a6f3541c959e767b53b29ad6",
+  "kind": "vulnerability",
+  "title": "next 14.2.10: authorization bypass in middleware",
+  "severity": "critical",
+  "severity_source": "cvss",
+  "priority": "p0",
+  "confidence": "likely",
+  "aliases": [
+    "CVE-2025-29927",
+    "GHSA-f82v-jwr5-mffw"
+  ],
+  "cvss": {
+    "version": "3.1",
+    "score": 9.1,
+    "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
+  },
+  "epss": {
+    "score": 0.93,
+    "percentile": 0.99,
+    "date": "2026-10-23"
+  },
+  "kev": {
+    "listed": true,
+    "date_added": "2025-04-02",
+    "ransomware": "unknown"
+  },
+  "cwe_ids": [
+    "CWE-285"
+  ],
+  "asvs_ids": [
+    "V8.2.1"
+  ],
+  "affected": {
+    "purl": "pkg:npm/next@14.2.10",
+    "ecosystem": "npm",
+    "name": "next",
+    "version": "14.2.10",
+    "component_type": "library",
+    "direct": true,
+    "scope": "runtime"
+  },
+  "fix": {
+    "fixed_versions": [
+      "14.2.25"
+    ],
+    "recommended": "14.2.25",
+    "available": true
+  },
+  "target": {
+    "site": "example-site",
+    "host": null,
+    "url": null,
+    "path": "package-lock.json",
+    "image": null
+  },
+  "evidence": [
+    {
+      "path": "package-lock.json",
+      "line": 812,
+      "excerpt": "\"next\": \"14.2.10\""
+    }
+  ],
+  "source": {
+    "command": "deps",
+    "tool": "osv-scanner",
+    "tool_version": "2.2.3",
+    "rule_id": "GHSA-f82v-jwr5-mffw",
+    "feed": "osv",
+    "fetched_at": "2026-10-24T06:17:09Z"
+  },
+  "remediation": {
+    "summary": "Upgrade next to 14.2.25 or later.",
+    "steps": [
+      "npm install next@14.2.25",
+      "rebuild and redeploy"
+    ],
+    "snippets": [],
+    "references": [
+      "https://osv.dev/vulnerability/GHSA-f82v-jwr5-mffw"
+    ],
+    "cheat_sheet": null
+  },
+  "signal": null,
+  "status": "new",
+  "first_seen": "2026-10-24T06:17:41Z",
+  "last_seen": "2026-10-24T06:17:41Z"
+}

package/bundled-contracts/maggie-security/finding-v1.schema.json

@@ -0,0 +1,63 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://maggie.noblox.app/contracts/maggie-security/finding-v1.json",
+  "title": "Maggie security finding",
+  "description": "One result from any maggie security command. OSV-shaped vulnerability core plus target, evidence, remediation and ledger status. See docs/maggie-security/00-foundation-prd.md section 7.",
+  "type": "object",
+  "required": ["schema", "id", "kind", "title", "severity", "severity_source", "priority", "confidence", "target", "source", "status"],
+  "properties": {
+    "schema": {"const": "maggie-security-finding.v1"},
+    "id": {"type": "string", "pattern": "^msf_[0-9a-f]{24}$"},
+    "kind": {"enum": ["vulnerability", "eol", "malicious-package", "misconfiguration", "exposure", "secret", "code", "tls", "header", "attack-signal", "host-hardening", "availability", "agent-skill", "checklist"]},
+    "title": {"type": "string", "minLength": 1, "maxLength": 300},
+    "severity": {"$ref": "#/$defs/severity"},
+    "severity_source": {"enum": ["cvss", "vendor", "tool", "maggie"]},
+    "priority": {"enum": ["p0", "p1", "p2", "p3", "p4"]},
+    "confidence": {"enum": ["confirmed", "likely", "possible"]},
+    "aliases": {"type": "array", "items": {"type": "string"}},
+    "cvss": {"type": ["object", "null"], "properties": {"version": {"type": "string"}, "score": {"type": "number", "minimum": 0, "maximum": 10}, "vector": {"type": "string"}}},
+    "epss": {"type": ["object", "null"], "properties": {"score": {"type": "number", "minimum": 0, "maximum": 1}, "percentile": {"type": "number", "minimum": 0, "maximum": 1}, "date": {"type": "string"}}},
+    "kev": {"type": ["object", "null"], "properties": {"listed": {"type": "boolean"}, "date_added": {"type": "string"}, "ransomware": {"type": "string"}, "due_date": {"type": "string"}}},
+    "cwe_ids": {"type": "array", "items": {"type": "string", "pattern": "^CWE-[0-9]+$"}},
+    "asvs_ids": {"type": "array", "items": {"type": "string", "pattern": "^V[0-9]+\\.[0-9]+\\.[0-9]+$"}},
+    "affected": {"type": ["object", "null"], "properties": {
+      "purl": {"type": ["string", "null"]},
+      "ecosystem": {"type": ["string", "null"]},
+      "name": {"type": "string"},
+      "version": {"type": ["string", "null"]},
+      "component_type": {"enum": ["library", "runtime", "os", "service", "wordpress-core", "wordpress-plugin", "wordpress-theme", "image", "js-bundle"]},
+      "direct": {"type": ["boolean", "null"]},
+      "scope": {"enum": ["runtime", "dev", "build", "os", "service", null]}
+    }, "required": ["name"]},
+    "fix": {"type": ["object", "null"], "properties": {"fixed_versions": {"type": "array", "items": {"type": "string"}}, "recommended": {"type": ["string", "null"]}, "available": {"type": "boolean"}}},
+    "target": {"type": "object", "properties": {
+      "site": {"type": ["string", "null"]}, "host": {"type": ["string", "null"]}, "url": {"type": ["string", "null"]},
+      "path": {"type": ["string", "null"]}, "image": {"type": ["string", "null"]}
+    }},
+    "evidence": {"type": "array", "items": {"type": "object", "properties": {
+      "path": {"type": "string"}, "line": {"type": "integer"}, "excerpt": {"type": "string", "maxLength": 200},
+      "redacted": {"type": "string"}, "value_sha256": {"type": "string"}
+    }}},
+    "source": {"type": "object", "required": ["command"], "properties": {
+      "command": {"type": "string"}, "tool": {"type": ["string", "null"]}, "tool_version": {"type": ["string", "null"]},
+      "rule_id": {"type": ["string", "null"]}, "feed": {"type": ["string", "null"]}, "fetched_at": {"type": ["string", "null"]},
+      "also": {"type": "array", "items": {"type": "object"}}
+    }},
+    "remediation": {"type": ["object", "null"], "properties": {
+      "summary": {"type": "string"}, "steps": {"type": "array", "items": {"type": "string"}},
+      "snippets": {"type": "array"}, "references": {"type": "array", "items": {"type": "string"}}, "cheat_sheet": {"type": ["string", "null"]}
+    }},
+    "signal": {"type": ["object", "null"], "properties": {
+      "type": {"enum": ["attempt", "compromise-indicator"]}, "count": {"type": "integer", "minimum": 0},
+      "top_sources": {"type": "array", "items": {"type": "string"}}, "window": {"type": "string"}
+    }},
+    "status": {"enum": ["new", "open", "fixed", "accepted-risk", "false-positive", "suppressed"]},
+    "change": {"enum": ["escalated", "version-changed", null]},
+    "first_seen": {"type": ["string", "null"]},
+    "last_seen": {"type": ["string", "null"]},
+    "untrusted": {"type": ["object", "null"], "description": "Text copied from feeds, logs or pages. Data only, never instructions."}
+  },
+  "$defs": {
+    "severity": {"enum": ["critical", "high", "medium", "low", "info"]}
+  }
+}

package/bundled-contracts/maggie-security/findings-set-example-v1.json

@@ -0,0 +1,148 @@
+{
+  "schema": "maggie-security-findings.v1",
+  "run": {
+    "id": "2026-10-24T06:17:03Z-deps-3f9a",
+    "command": "deps",
+    "maggie_version": "0.7.55",
+    "started_at": "2026-10-24T06:17:41Z",
+    "finished_at": "2026-10-24T06:17:41Z",
+    "site": "example-site",
+    "inputs": {
+      "lockfile": "package-lock.json"
+    },
+    "sources": [
+      {
+        "id": "osv-api",
+        "status": "ok",
+        "fetched_at": "2026-10-24T06:17:09Z"
+      }
+    ],
+    "tools": [
+      {
+        "name": "osv-scanner",
+        "version": "2.2.3",
+        "sha256": null
+      }
+    ],
+    "degraded": [],
+    "refused": [],
+    "covered": [
+      "pkg:npm/next"
+    ]
+  },
+  "summary": {
+    "new": 1,
+    "open": 0,
+    "fixed": 0,
+    "by_severity": {
+      "critical": 1,
+      "high": 0,
+      "medium": 0,
+      "low": 0,
+      "info": 0
+    },
+    "by_priority": {
+      "p0": 1,
+      "p1": 0,
+      "p2": 0,
+      "p3": 0,
+      "p4": 0
+    }
+  },
+  "clipped": {
+    "findings": false,
+    "total": 1
+  },
+  "findings": [
+    {
+      "schema": "maggie-security-finding.v1",
+      "id": "msf_a6f3541c959e767b53b29ad6",
+      "kind": "vulnerability",
+      "title": "next 14.2.10: authorization bypass in middleware",
+      "severity": "critical",
+      "severity_source": "cvss",
+      "priority": "p0",
+      "confidence": "likely",
+      "aliases": [
+        "CVE-2025-29927",
+        "GHSA-f82v-jwr5-mffw"
+      ],
+      "cvss": {
+        "version": "3.1",
+        "score": 9.1,
+        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
+      },
+      "epss": {
+        "score": 0.93,
+        "percentile": 0.99,
+        "date": "2026-10-23"
+      },
+      "kev": {
+        "listed": true,
+        "date_added": "2025-04-02",
+        "ransomware": "unknown"
+      },
+      "cwe_ids": [
+        "CWE-285"
+      ],
+      "asvs_ids": [
+        "V8.2.1"
+      ],
+      "affected": {
+        "purl": "pkg:npm/next@14.2.10",
+        "ecosystem": "npm",
+        "name": "next",
+        "version": "14.2.10",
+        "component_type": "library",
+        "direct": true,
+        "scope": "runtime"
+      },
+      "fix": {
+        "fixed_versions": [
+          "14.2.25"
+        ],
+        "recommended": "14.2.25",
+        "available": true
+      },
+      "target": {
+        "site": "example-site",
+        "host": null,
+        "url": null,
+        "path": "package-lock.json",
+        "image": null
+      },
+      "evidence": [
+        {
+          "path": "package-lock.json",
+          "line": 812,
+          "excerpt": "\"next\": \"14.2.10\""
+        }
+      ],
+      "source": {
+        "command": "deps",
+        "tool": "osv-scanner",
+        "tool_version": "2.2.3",
+        "rule_id": "GHSA-f82v-jwr5-mffw",
+        "feed": "osv",
+        "fetched_at": "2026-10-24T06:17:09Z"
+      },
+      "remediation": {
+        "summary": "Upgrade next to 14.2.25 or later.",
+        "steps": [
+          "npm install next@14.2.25",
+          "rebuild and redeploy"
+        ],
+        "snippets": [],
+        "references": [
+          "https://osv.dev/vulnerability/GHSA-f82v-jwr5-mffw"
+        ],
+        "cheat_sheet": null
+      },
+      "signal": null,
+      "status": "new",
+      "first_seen": "2026-10-24T06:17:41Z",
+      "last_seen": "2026-10-24T06:17:41Z"
+    }
+  ],
+  "fixed": []
+}

package/bundled-contracts/maggie-security/findings-set-v1.schema.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://maggie.noblox.app/contracts/maggie-security/findings-set-v1.json",
+  "title": "Maggie security findings set",
+  "description": "One run of a maggie security command. findings[] items follow finding-v1.schema.json.",
+  "type": "object",
+  "required": ["schema", "run", "summary", "clipped", "findings"],
+  "properties": {
+    "schema": {"const": "maggie-security-findings.v1"},
+    "run": {"type": "object", "required": ["id", "command", "started_at", "finished_at", "sources", "tools", "degraded", "refused"], "properties": {
+      "id": {"type": "string"}, "command": {"type": "string"}, "maggie_version": {"type": "string"},
+      "started_at": {"type": "string"}, "finished_at": {"type": "string"}, "site": {"type": ["string", "null"]},
+      "inputs": {"type": "object"},
+      "sources": {"type": "array", "items": {"type": "object", "required": ["id", "status"], "properties": {
+        "id": {"type": "string"}, "status": {"enum": ["ok", "cached", "degraded", "skipped"]}, "fetched_at": {"type": ["string", "null"]},
+        "version": {"type": ["string", "null"]}, "cursor": {"type": ["string", "null"]}, "error": {"type": ["string", "null"]}
+      }}},
+      "tools": {"type": "array", "items": {"type": "object", "required": ["name"], "properties": {"name": {"type": "string"}, "version": {"type": ["string", "null"]}, "sha256": {"type": ["string", "null"]}}}},
+      "degraded": {"type": "array", "items": {"type": "string"}},
+      "refused": {"type": "array", "items": {"type": "string"}},
+      "covered": {"type": "array", "items": {"type": "string"}, "description": "Targets this run fully covered; the ledger only marks findings on these targets fixed."}
+    }},
+    "summary": {"type": "object", "required": ["new", "open", "fixed", "by_severity"], "properties": {
+      "new": {"type": "integer"}, "open": {"type": "integer"}, "fixed": {"type": "integer"},
+      "by_severity": {"type": "object", "properties": {"critical": {"type": "integer"}, "high": {"type": "integer"}, "medium": {"type": "integer"}, "low": {"type": "integer"}, "info": {"type": "integer"}}},
+      "by_priority": {"type": "object"}
+    }},
+    "clipped": {"type": "object", "required": ["findings", "total"], "properties": {"findings": {"type": "boolean"}, "total": {"type": "integer"}}},
+    "findings": {"type": "array", "items": {"type": "object"}},
+    "fixed": {"type": "array", "items": {"type": "string"}, "description": "Finding ids the ledger marked fixed in this run."}
+  }
+}

package/bundled-contracts/maggie-security/protect-plan-v1.schema.json

@@ -0,0 +1,28 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://maggie.noblox.app/contracts/maggie-security/protect-plan-v1.json",
+  "title": "Maggie security protection plan",
+  "description": "A reviewed, never auto-applied plan from `maggie security protect-plan`. See docs/maggie-security/05-protection-waf-prd.md section 6.2.",
+  "type": "object",
+  "required": ["schema", "id", "host", "created_at", "engine", "egress", "data_sharing", "requires", "risk_notes", "steps", "verify", "rollback"],
+  "properties": {
+    "schema": {"const": "maggie-security-protect-plan.v1"},
+    "id": {"type": "string", "pattern": "^pp_"},
+    "host": {"type": "string"},
+    "created_at": {"type": "string"},
+    "engine": {"enum": ["crowdsec", "fail2ban", "cloudflare"]},
+    "waf": {"type": "object"},
+    "inputs": {"type": "object"},
+    "egress": {"type": "array", "items": {"type": "object", "required": ["host", "why"]}},
+    "data_sharing": {"type": "object", "required": ["crowdsec_capi", "console"], "properties": {"crowdsec_capi": {"type": "boolean"}, "console": {"const": false}}},
+    "requires": {"type": "object", "required": ["consent"], "properties": {"consent": {"const": "host-change"}}},
+    "risk_notes": {"type": "array", "items": {"type": "string"}},
+    "advice": {"type": "array", "items": {"type": "string"}},
+    "steps": {"type": "array", "items": {"type": "object", "required": ["n", "title", "run", "kind", "reversible"], "properties": {
+      "n": {"type": "integer"}, "title": {"type": "string"}, "run": {"type": "string"}, "kind": {"enum": ["local", "host"]},
+      "reversible": {"type": "boolean"}, "rollback": {"type": "string"}}}},
+    "verify": {"type": "array", "items": {"type": "object", "required": ["check", "expect"]}},
+    "rollback": {"type": "array", "items": {"type": "string"}},
+    "allowlist": {"type": "object"}
+  }
+}

package/bundled-contracts/maggie-security/report-v1.schema.json

@@ -0,0 +1,29 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://maggie.noblox.app/contracts/maggie-security/report-v1.json",
+  "title": "Maggie security report",
+  "description": "Per-site report built by `maggie security report`; references finding ids, full findings stay in .maggie/security/runs/. See docs/maggie-security/09-risk-report-standards-prd.md section 8.2.",
+  "type": "object",
+  "required": ["schema", "id", "site", "kind", "period", "verdict", "counts", "actions", "checked", "degraded_sources", "runs", "findings"],
+  "properties": {
+    "schema": {"const": "maggie-security-report.v1"},
+    "id": {"type": "string"},
+    "site": {"type": "string"},
+    "kind": {"enum": ["weekly", "daily_ops", "incident", "gate"]},
+    "audience": {"enum": ["owner", "technical"]},
+    "period": {"type": "object", "required": ["from", "to"], "properties": {"from": {"type": "string"}, "to": {"type": "string"}}},
+    "verdict": {"type": "object", "required": ["code", "text"], "properties": {"code": {"enum": ["possible-break-in", "act-today", "act-this-week", "nothing-urgent"]}, "text": {"type": "string"}}},
+    "counts": {"type": "object", "required": ["new", "open", "fixed", "by_priority"]},
+    "actions": {"type": "array", "items": {"type": "object", "required": ["finding_id", "priority", "title"]}},
+    "coverage": {"type": ["object", "null"]},
+    "checked": {"type": "array", "items": {"type": "object", "required": ["command", "last_run", "degraded"]}},
+    "not_checked": {"type": "array", "items": {"type": "string"}},
+    "degraded_sources": {"type": "array", "items": {"type": "string"}},
+    "runs": {"type": "array", "items": {"type": "string"}},
+    "findings": {"type": "array", "items": {"type": "string", "pattern": "^msf_[0-9a-f]{24}$"}},
+    "fixed": {"type": "array", "items": {"type": "string"}},
+    "maggie_version": {"type": "string"},
+    "incident": {"type": "object", "required": ["id", "title", "status", "timeline"]},
+    "gate": {"type": "object", "required": ["decision", "block", "warn"], "properties": {"decision": {"enum": ["pass", "warn", "block"]}, "block": {"type": "array"}, "warn": {"type": "array"}, "checked": {"type": "array"}}}
+  }
+}

package/bundled-contracts/maggie-security/stack-example-v1.json

@@ -0,0 +1,66 @@
+{
+  "schema": "maggie-security-stack.v1",
+  "site": {
+    "id": "example-site",
+    "type": "node-app",
+    "domains": [
+      "example.com"
+    ],
+    "hosting": "vps-with-cloudflare-dns"
+  },
+  "collected_at": "2026-10-24T06:00:00Z",
+  "hash": "sha256:73a805dca6155476f3cdc7f91b1954517325abcda06ecbb381d550c4732cc497",
+  "sources": [
+    {
+      "kind": "lockfile",
+      "path": "package-lock.json"
+    },
+    {
+      "kind": "runtime-inventory",
+      "path": ".maggie/security/inventory/host-web1.json"
+    }
+  ],
+  "components": [
+    {
+      "purl": "pkg:npm/next@14.2.10",
+      "ecosystem": "npm",
+      "name": "next",
+      "version": "14.2.10",
+      "scope": "runtime",
+      "direct": true,
+      "location": "package-lock.json"
+    }
+  ],
+  "runtimes": [
+    {
+      "name": "node",
+      "version": "20.11.1",
+      "cycle": "20",
+      "host": "web1",
+      "source": "runtime-inventory"
+    },
+    {
+      "name": "nginx",
+      "version": "1.24.0",
+      "cycle": "1.24",
+      "host": "web1",
+      "source": "runtime-inventory"
+    }
+  ],
+  "wordpress": null,
+  "images": [],
+  "hosts": [
+    {
+      "id": "web1",
+      "os": "ubuntu 22.04",
+      "public": true
+    }
+  ],
+  "watch": {
+    "products": [
+      "nginx",
+      "node",
+      "next"
+    ]
+  }
+}

package/bundled-contracts/maggie-security/stack-upload-v1.schema.json

@@ -0,0 +1,22 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://maggie.noblox.app/contracts/maggie-security/stack-upload-v1.json",
+  "title": "Maggie security stack upload",
+  "description": "What `maggie security inventory --export-upload` sends to CMO.so for the hosted daily watch: package and runtime names and versions only. No file paths, host names, lockfile contents, logs or secrets. See docs/maggie-security/11-mcp-tools-prd.md section 9.",
+  "type": "object",
+  "required": ["schema", "workspace", "site_type", "created_at", "hash", "components", "runtimes"],
+  "additionalProperties": false,
+  "properties": {
+    "schema": {"const": "maggie-security-stack-upload.v1"},
+    "workspace": {"type": "string", "maxLength": 253},
+    "site_type": {"type": "string"},
+    "created_at": {"type": "string"},
+    "hash": {"type": "string", "pattern": "^sha256:[0-9a-f]{64}$"},
+    "components": {"type": "array", "maxItems": 20000, "items": {"type": "object", "required": ["ecosystem", "name", "version"], "additionalProperties": false,
+      "properties": {"ecosystem": {"type": "string"}, "name": {"type": "string"}, "version": {"type": "string"}, "scope": {"type": "string"}, "direct": {"type": ["boolean", "null"]}}}},
+    "runtimes": {"type": "array", "items": {"type": "object", "required": ["name", "version"], "additionalProperties": false,
+      "properties": {"name": {"type": "string"}, "version": {"type": "string"}, "host": {"type": ["string", "null"], "description": "opaque alias such as web1, never a hostname"}}}},
+    "wordpress": {"type": ["object", "null"]},
+    "watch": {"type": "array", "items": {"type": "string"}}
+  }
+}