@vibefoundry/vibe-shield 1.1.0 → 2.0.0

package/dist/src/mcp-guard/skill-auditor.js

@@ -59,6 +59,9 @@ const path = __importStar(require("node:path"));
 const patterns_1 = require("../secrets/patterns");
 const context_1 = require("../scanner/context");
 const gitignore_1 = require("../scanner/gitignore");
+const attack_surface_1 = require("../scanner/attack-surface");
+const version_1 = require("../scanner/version");
+const redact_1 = require("../scanner/redact");
 const helpers_1 = require("../scanner/rules/helpers");
 const shared_1 = require("../scanner/rules/shared");
 const types_1 = require("../scanner/types");
@@ -1031,6 +1034,7 @@ async function auditSkills(rootDir, options = {}) {
     // auditor's own discovery rules so `audit-skills .claude` works as expected.
     const files = options.paths?.length ? await resolveAuditPaths(rootDir, options.paths) : await discoverAgentFiles(rootDir);
     const findings = [];
+    const attackSurface = (0, attack_surface_1.emptyAttackSurface)();
     const scanned = [];
     let bytesScanned = 0;
     for (const absolutePath of files) {
@@ -1042,6 +1046,7 @@ async function auditSkills(rootDir, options = {}) {
             continue;
         }
         const ctx = (0, context_1.createFileContext)(absolutePath, rootDir, content, project);
+        (0, attack_surface_1.inventoryFile)(ctx, attackSurface);
         if (ctx.flags.isLockfile || ctx.flags.isGenerated)
             continue;
         scanned.push(ctx.relativePath);
@@ -1069,12 +1074,14 @@ async function auditSkills(rootDir, options = {}) {
                     severity: hit.severity ?? rule.severity,
                     confidence: hit.confidence ?? rule.confidence,
                     cwe: rule.cwe,
+                    owasp: rule.owasp,
                     filePath: ctx.relativePath,
+                    file: ctx.relativePath,
                     absolutePath: ctx.absolutePath,
                     line: located.line,
                     column: located.column,
-                    snippet: ctx.lineText(located.line).trim().slice(0, 200),
-                    matched: hit.matched ?? ctx.lineText(located.line).trim().slice(0, 200),
+                    snippet: (0, redact_1.redactReportText)(ctx.lineText(located.line).trim()).slice(0, 200),
+                    matched: (0, redact_1.redactReportText)(hit.matched ?? ctx.lineText(located.line).trim()).slice(0, 200),
                     message: hit.message ?? rule.description,
                     remediation: rule.remediate ? rule.remediate(ctx, hit) : rule.remediation,
                     insecureExample: rule.insecureExample,
@@ -1101,6 +1108,7 @@ async function auditSkills(rootDir, options = {}) {
     return {
         rootDir,
         command: 'audit-skills',
+        attackSurface,
         findings: unique,
         score: scoreFindings(unique),
         stats: {
@@ -1118,7 +1126,7 @@ async function auditSkills(rootDir, options = {}) {
         scannedPaths: scanned,
         startedAt,
         finishedAt: new Date(finished).toISOString(),
-        version: options.version ?? process.env.npm_package_version ?? '1.0.0',
+        version: options.version ?? await (0, version_1.packageVersion)(),
         ruleCount: rules.length,
         suppressedCount: 0,
         notices: scanned.length ? [] : ['No agent instruction or MCP configuration files were found.'],

package/dist/src/reporter/console-reporter.js

@@ -216,9 +216,9 @@ function renderFooter(result, color) {
     if (critical > 0) {
         lines.push(color.red(`  ⚠  ${critical} critical finding${critical === 1 ? '' : 's'} — rotate any exposed credential before anything else.`));
     }
-    lines.push(`  ${color.bold('Fix it')}      npx github:avivgerz-hue/vibe-shield scan --fix-prompt    ${color.dim('# writes SECURITY_PATCH_PROMPT.md for your agent')}`);
-    lines.push(`  ${color.bold('Explain')}     npx github:avivgerz-hue/vibe-shield explain ${result.findings[0]?.ruleId ?? 'VSB-AI-001'}`);
-    lines.push(`  ${color.bold('Gate CI')}     npx github:avivgerz-hue/vibe-shield scan --fail-on ${worst} --format github`);
+    lines.push(`  ${color.bold('Fix it')}      npx -y @vibefoundry/vibe-shield scan --fix-prompt    ${color.dim('# writes SECURITY_PATCH_PROMPT.md for your agent')}`);
+    lines.push(`  ${color.bold('Explain')}     npx -y @vibefoundry/vibe-shield explain ${result.findings[0]?.ruleId ?? 'VSB-AI-001'}`);
+    lines.push(`  ${color.bold('Gate CI')}     npx -y @vibefoundry/vibe-shield scan --fail-on ${worst} --format github`);
     for (const notice of result.notices)
         lines.push(color.dim(`  ${notice}`));
     return lines;
@@ -235,6 +235,20 @@ function renderConsoleReport(result, options = {}) {
         lines.push(...bars);
     }
     lines.push(...renderCategories(result, color));
+    if (result.attackSurface) {
+        const surface = result.attackSurface;
+        lines.push('', color.bold('Attack surface (static signals; review required)'));
+        for (const route of surface.routes)
+            lines.push(`  route ${route.method} ${route.path} — ${route.file}:${route.line} (${route.auth})`);
+        for (const table of surface.tables)
+            lines.push(`  table ${table.table} — ${table.file}:${table.line} (${table.rls})`);
+        for (const ai of surface.aiEntrypoints)
+            lines.push(`  AI entrypoint ${ai.file}:${ai.line}`);
+        for (const agent of surface.agentFiles)
+            lines.push(`  ${agent.kind} ${agent.name ?? ''} — ${agent.file}`);
+        if (!surface.routes.length && !surface.tables.length && !surface.aiEntrypoints.length && !surface.agentFiles.length)
+            lines.push('  No inventory signals observed.');
+    }
     if (result.findings.length) {
         lines.push('');
         lines.push(color.bold('Findings'));

package/dist/src/reporter/executive.d.ts

@@ -0,0 +1,4 @@
+import { type ScanResult } from '../scanner/types';
+export declare function formatMarkdown(result: ScanResult): string;
+/** All project content is escaped. The only script is a fixed local filter. */
+export declare function formatHtml(result: ScanResult): string;

package/dist/src/reporter/executive.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatMarkdown = formatMarkdown;
+exports.formatHtml = formatHtml;
+const mappings_1 = require("../scanner/mappings");
+const engine_1 = require("../scanner/engine");
+const types_1 = require("../scanner/types");
+const clean = (s) => s.replace(/[\r\n]+/g, ' ').replace(/\|/g, '\\|');
+const fence = (s) => {
+    const marker = '`'.repeat(Math.max(3, ...Array.from(s.matchAll(/`+/g), m => m[0].length + 1)));
+    return `${marker}\n${s}\n${marker}`;
+};
+// The CWE mapping is based on OWASP's published 2025 category lists.
+function mappings(ruleId, cwe) {
+    const mapping = (0, mappings_1.owaspMappings)(ruleId, cwe);
+    const web = mapping.web ? `${mapping.web.id} ${mapping.web.name} (${mapping.web.basis})` : 'not mapped';
+    const llm = mapping.llm.length ? mapping.llm.map(m => `${m.id} ${m.name} (contextual)`).join(', ') : 'not applicable or not assigned';
+    return `OWASP Top 10 2025: ${web}; OWASP LLM Top 10 2025: ${llm}. Validate applicability in context.`;
+}
+function formatMarkdown(result) {
+    const lines = ['# Executive Security Report', '', `**Score: ${result.score.score}/100 (${result.score.grade})** · ${result.stats.filesScanned} files scanned · ${result.command}`, '',
+        'Static signals require manual validation. A clean score is not proof of security. Ignored, unavailable, and unscanned files are outside this report.', '',
+        '## Category scorecard', '', '| Vector | Score | Findings |', '| --- | --- | ---: |'];
+    for (const category of types_1.RULE_CATEGORIES) {
+        const subset = result.findings.filter(f => f.category === category);
+        const applicable = result.command === 'audit-skills' ? category === 'agent-integrity' : category !== 'agent-integrity';
+        lines.push(`| ${types_1.CATEGORY_TITLES[category]} | ${applicable ? `${(0, engine_1.scoreFindings)(subset).score}/100` : 'Not assessed'} | ${subset.length} |`);
+    }
+    lines.push('', '## Attack-surface inventory', '', 'Observed signals only; guard and RLS signals do not prove enforcement. Absence of a guard signal is not proof a route is unguarded.', '', '| Type | Location | Detail | Signal |', '| --- | --- | --- | --- |');
+    const surface = result.attackSurface;
+    if (surface) {
+        for (const r of surface.routes)
+            lines.push(`| Route | ${clean(r.file)}:${r.line} | ${clean(r.method)} ${clean(r.path)} | ${r.auth} |`);
+        for (const t of surface.tables)
+            lines.push(`| Table | ${clean(t.file)}:${t.line} | ${clean(t.table)} | ${t.rls} |`);
+        for (const a of surface.aiEntrypoints)
+            lines.push(`| AI entrypoint | ${clean(a.file)}:${a.line} | LLM reference | review |`);
+        for (const a of surface.agentFiles)
+            lines.push(`| Agent | ${clean(a.file)} | ${a.kind}${a.name ? ': ' + clean(a.name) : ''} | review |`);
+    }
+    else
+        lines.push('| — | — | Inventory not available for this command | — |');
+    lines.push('', '## Prioritized findings', '');
+    const rank = { critical: 0, high: 1, medium: 2, low: 3, info: 4 };
+    for (const f of [...result.findings].sort((a, b) => (rank[a.severity] ?? 5) - (rank[b.severity] ?? 5))) {
+        lines.push(`### ${clean(f.severity.toUpperCase())}: ${clean(f.title)}`, '', `**${f.ruleId} · ${clean(f.filePath)}:${f.line}:${f.column} · ${f.cwe.id} · confidence ${f.confidence}**`, '', f.message, '', mappings(f.ruleId, f.cwe.id), '', '**Observed code**', '', fence(f.snippet), '', '**Suggested remediation**', '', ...f.remediation.map(x => `- ${x}`), '', '**Illustrative before / after (adapt and validate; not an automatic patch)**', '', fence(f.insecureExample), '', fence(f.secureExample), '');
+    }
+    if (!result.findings.length)
+        lines.push('No findings reported for the selected rules and files.', '');
+    return lines.join('\n') + '\n';
+}
+const escapeHtml = (s) => s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;').replace(/'/g, '&#39;');
+/** All project content is escaped. The only script is a fixed local filter. */
+function formatHtml(result) {
+    const md = formatMarkdown(result);
+    const entries = result.findings.map(f => `<article data-severity="${escapeHtml(f.severity)}"><h3>${escapeHtml(f.severity.toUpperCase() + ': ' + f.title)}</h3><p>${escapeHtml(`${f.filePath}:${f.line}:${f.column} · ${f.ruleId} · ${f.cwe.id}`)}</p><pre>${escapeHtml(f.snippet)}</pre><p>${escapeHtml(f.message)}</p><ul>${f.remediation.map(s => `<li>${escapeHtml(s)}</li>`).join('')}</ul></article>`).join('\n');
+    return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Executive Security Report</title><style>body{background:#101722;color:#e8effa;font:16px system-ui;max-width:1000px;margin:auto;padding:2rem}pre{white-space:pre-wrap;overflow-wrap:anywhere;background:#1b2738;padding:1rem;border-radius:6px}article{border:1px solid #34455b;padding:1rem;margin:1rem 0;border-radius:8px}select{background:#1b2738;color:white;padding:.5rem}</style></head><body><h1>Executive Security Report</h1><label>Filter findings by severity <select id="severity"><option value="all">All</option><option>critical</option><option>high</option><option>medium</option><option>low</option><option>info</option></select></label><section>${entries}</section><details open><summary>Full report</summary><pre>${escapeHtml(md)}</pre></details><script>document.getElementById('severity').addEventListener('change',function(){document.querySelectorAll('article[data-severity]').forEach(function(e){e.hidden=this.value!=='all'&&e.dataset.severity!==this.value},this)})</script></body></html>\n`;
+}

package/dist/src/reporter/formatters.d.ts

@@ -11,7 +11,7 @@
  *  - `github`   GitHub Actions workflow commands (annotations in the diff)
  */
 import type { Finding, ScanResult } from '../scanner/types';
-export declare const OUTPUT_FORMATS: readonly ["console", "compact", "summary", "json", "sarif", "github"];
+export declare const OUTPUT_FORMATS: readonly ["console", "compact", "summary", "json", "sarif", "github", "markdown", "html"];
 export type OutputFormat = (typeof OUTPUT_FORMATS)[number];
 export declare const isOutputFormat: (value: unknown) => value is OutputFormat;
 /** Bump when the JSON shape changes in a breaking way. */

package/dist/src/reporter/formatters.js

@@ -20,7 +20,9 @@ exports.formatGithub = formatGithub;
 exports.formatSarif = formatSarif;
 exports.formatResult = formatResult;
 exports.groupByFile = groupByFile;
-exports.OUTPUT_FORMATS = ['console', 'compact', 'summary', 'json', 'sarif', 'github'];
+const node_url_1 = require("node:url");
+const executive_1 = require("./executive");
+exports.OUTPUT_FORMATS = ['console', 'compact', 'summary', 'json', 'sarif', 'github', 'markdown', 'html'];
 const isOutputFormat = (value) => typeof value === 'string' && exports.OUTPUT_FORMATS.includes(value);
 exports.isOutputFormat = isOutputFormat;
 /** Bump when the JSON shape changes in a breaking way. */
@@ -193,7 +195,7 @@ function formatSarif(result) {
                     },
                 ],
                 originalUriBaseIds: {
-                    '%SRCROOT%': { uri: `${result.rootDir.split('\\').join('/')}/` },
+                    '%SRCROOT%': { uri: (0, node_url_1.pathToFileURL)(result.rootDir.endsWith('/') ? result.rootDir : result.rootDir + '/').href },
                 },
                 results: result.findings.map((finding) => ({
                     ruleId: finding.ruleId,
@@ -203,7 +205,7 @@ function formatSarif(result) {
                     locations: [
                         {
                             physicalLocation: {
-                                artifactLocation: { uri: finding.filePath, uriBaseId: '%SRCROOT%' },
+                                artifactLocation: { uri: finding.filePath.split('/').map(encodeURIComponent).join('/'), uriBaseId: '%SRCROOT%' },
                                 region: {
                                     startLine: finding.line,
                                     startColumn: finding.column,
@@ -221,6 +223,7 @@ function formatSarif(result) {
                         severity: finding.severity,
                         confidence: finding.confidence,
                         cwe: finding.cwe.id,
+                        owasp: finding.owasp,
                         remediation: finding.remediation,
                         secureExample: finding.secureExample,
                     },
@@ -236,6 +239,10 @@ function formatSarif(result) {
 /** Render `result` in the requested format. */
 function formatResult(result, format) {
     switch (format) {
+        case 'markdown':
+            return (0, executive_1.formatMarkdown)(result);
+        case 'html':
+            return (0, executive_1.formatHtml)(result);
         case 'json':
             return formatJson(result);
         case 'summary':

package/dist/src/reporter/patch-prompt-writer.js

@@ -87,12 +87,12 @@ function buildPatchPrompt(result, options = {}) {
     lines.push('# Security patch prompt');
     lines.push('');
     lines.push('> Generated by [vibe-shield](https://github.com/avivgerz-hue/vibe-shield). Hand this file to your coding agent (Claude Code, Codex, Cursor, Windsurf).');
-    lines.push('> Every finding below was detected statically and cites the exact line that must change.');
+    lines.push('> Findings are static signals with source locations; validate each in context before making changes.');
     lines.push('');
     lines.push('## Mission');
     lines.push('');
     lines.push(`Fix the ${selected.length} security finding${selected.length === 1 ? '' : 's'} listed below in the repository at \`${result.rootDir}\`. ` +
-        'Apply every remediation exactly as written, then re-run the scanner to prove the finding is gone.');
+        'Review each finding, adapt the guidance to the project, then re-run the scanner and relevant tests.');
     lines.push('');
     lines.push('## Scanner verdict');
     lines.push('');
@@ -119,7 +119,7 @@ function buildPatchPrompt(result, options = {}) {
     lines.push('');
     lines.push('After each group of fixes run:');
     lines.push('');
-    lines.push(...fence('npx github:avivgerz-hue/vibe-shield scan --fail-on high', 'bash'));
+    lines.push(...fence('npx -y @vibefoundry/vibe-shield scan --fail-on high', 'bash'));
     lines.push('');
     lines.push('The task is complete only when this command exits `0` and every finding below is gone.');
     lines.push('');
@@ -175,7 +175,7 @@ function buildPatchPrompt(result, options = {}) {
                     lines.push(`${stepIndex + 1}. ${step}`);
                 });
                 lines.push('');
-                lines.push('**Target shape after the fix**');
+                lines.push('**Illustrative remediation example (adapt to the project)**');
                 lines.push('');
                 lines.push(...fence(finding.secureExample, languageFor(filePath)));
                 lines.push('');
@@ -195,7 +195,7 @@ function buildPatchPrompt(result, options = {}) {
     lines.push('## Final checklist');
     lines.push('');
     lines.push('- [ ] Every credential that appeared in this report has been rotated by the user.');
-    lines.push('- [ ] `npx github:avivgerz-hue/vibe-shield scan --fail-on high` exits `0`.');
+    lines.push('- [ ] `npx -y @vibefoundry/vibe-shield scan --fail-on high` exits `0`.');
     lines.push('- [ ] No `vibe-shield-disable` comments were added.');
     lines.push('- [ ] The application still builds and its tests still pass.');
     lines.push('');

package/dist/src/scanner/attack-surface.d.ts

@@ -0,0 +1,4 @@
+import type { AttackSurface, FileContext, ProjectContext } from './types';
+export declare const emptyAttackSurface: () => AttackSurface;
+export declare function inventoryFile(ctx: FileContext, surface: AttackSurface): void;
+export declare function inventoryTables(surface: AttackSurface, project: ProjectContext, scannedPaths: Set<string>): void;

package/dist/src/scanner/attack-surface.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.emptyAttackSurface = void 0;
+exports.inventoryFile = inventoryFile;
+exports.inventoryTables = inventoryTables;
+/** Heuristic inventory of observed surface, not evidence of effective protection. */
+const lexicon_1 = require("./lexicon");
+const emptyAttackSurface = () => ({ routes: [], tables: [], aiEntrypoints: [], agentFiles: [] });
+exports.emptyAttackSurface = emptyAttackSurface;
+function inventoryFile(ctx, surface) {
+    const { relativePath: file, code } = ctx;
+    if (ctx.flags.isMcpConfig) {
+        try {
+            const config = JSON.parse(ctx.content);
+            const servers = Object.keys(config.mcpServers ?? {});
+            if (servers.length)
+                for (const name of servers)
+                    surface.agentFiles.push({ file, kind: 'mcp', name });
+            else
+                surface.agentFiles.push({ file, kind: 'mcp' });
+        }
+        catch {
+            surface.agentFiles.push({ file, kind: 'mcp' });
+        }
+    }
+    else if (ctx.flags.isAgentInstructionFile)
+        surface.agentFiles.push({ file, kind: 'skill' });
+    if (ctx.flags.mentionsLlm && (ctx.flags.isAppRouterRoute || ctx.flags.isPagesApiRoute || ctx.flags.isServerFrameworkFile)) {
+        surface.aiEntrypoints.push({ file, line: 1 });
+    }
+    const auth = lexicon_1.AUTH_VERIFICATION_REGEX.test(code) ? 'guard-signal' : 'unknown';
+    const add = (method, route, offset) => {
+        surface.routes.push({ file, line: ctx.locate(offset).line, method: method.toUpperCase(), path: route, auth });
+    };
+    if (ctx.flags.isAppRouterRoute) {
+        const route = '/' + file.replace(/^.*?app\//, '').replace(/\/route\.[^.]+$/, '').replace(/\([^/]+\)\/?/g, '');
+        for (const match of code.matchAll(/\bexport\s+(?:async\s+function|const|function)\s+(GET|POST|PUT|PATCH|DELETE|HEAD|OPTIONS)\b/g))
+            add(match[1], route.replace(/\/$/, '') || '/', match.index);
+    }
+    else if (ctx.flags.isPagesApiRoute) {
+        add('ANY', '/' + file.replace(/^.*?pages\//, '').replace(/\.[^.]+$/, '').replace(/\/index$/, ''), 0);
+    }
+    for (const match of code.matchAll(/\b(?:app|router|server|fastify)\.(get|post|put|patch|delete|all)\s*\(\s*['"]([^'"]+)['"]/gi))
+        add(match[1], match[2], match.index);
+}
+function inventoryTables(surface, project, scannedPaths) {
+    surface.tables = project.sqlTables.filter(t => scannedPaths.has(t.file) && !t.internal).map(t => ({
+        file: t.file, line: t.line, table: t.table, rls: t.rlsEnabled ? 'enabled-signal' : 'not-observed',
+    }));
+}

package/dist/src/scanner/engine.d.ts

@@ -107,7 +107,7 @@ export declare function applySuppressions(findings: readonly Finding[], parsed:
 /** Turn a finding list into a 0-100 score with an A+ → F grade. */
 export declare function scoreFindings(findings: readonly Finding[]): SecurityScore;
 export declare const CACHE_FILE_NAME = ".vibe-shield-cache.json";
-export declare const CACHE_VERSION = 1;
+export declare const CACHE_VERSION = 2;
 /** Content hash used as the cache key for one file. */
 export declare const contentHash: (content: string) => string;
 /**
@@ -115,8 +115,7 @@ export declare const contentHash: (content: string) => string;
  * Exported because the MCP auditor reuses it: two scanners, one rule contract.
  */
 export declare function runRulesOnFile(ctx: FileContext, rules: readonly Rule[]): RuleHit[];
-/** Package version, resolved once from the nearest package.json. */
-export declare function packageVersion(): Promise<string>;
+export { packageVersion } from './version';
 /**
  * Scan a project. This is the one function the CLI, the tests and any embedding
  * application call; everything else in this module is an implementation detail.

package/dist/src/scanner/engine.js

@@ -47,14 +47,13 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.hasFindingsAtOrAbove = exports.contentHash = exports.CACHE_VERSION = exports.CACHE_FILE_NAME = exports.isDocPath = exports.isTestPath = exports.DEFAULT_CONCURRENCY = exports.MAX_FILE_SIZE_BYTES = exports.BINARY_EXTENSIONS = exports.DEFAULT_IGNORED_DIRS = void 0;
+exports.hasFindingsAtOrAbove = exports.packageVersion = exports.contentHash = exports.CACHE_VERSION = exports.CACHE_FILE_NAME = exports.isDocPath = exports.isTestPath = exports.DEFAULT_CONCURRENCY = exports.MAX_FILE_SIZE_BYTES = exports.BINARY_EXTENSIONS = exports.DEFAULT_IGNORED_DIRS = void 0;
 exports.discoverFiles = discoverFiles;
 exports.parseSuppressions = parseSuppressions;
 exports.suppressionFor = suppressionFor;
 exports.applySuppressions = applySuppressions;
 exports.scoreFindings = scoreFindings;
 exports.runRulesOnFile = runRulesOnFile;
-exports.packageVersion = packageVersion;
 exports.scanProject = scanProject;
 exports.dedupe = dedupe;
 exports.gitTrackedPaths = gitTrackedPaths;
@@ -63,6 +62,9 @@ const node_crypto_1 = require("node:crypto");
 const node_child_process_1 = require("node:child_process");
 const path = __importStar(require("node:path"));
 const context_1 = require("./context");
+const version_1 = require("./version");
+const redact_1 = require("./redact");
+const attack_surface_1 = require("./attack-surface");
 const gitignore_1 = require("./gitignore");
 const rules_1 = require("./rules");
 const types_1 = require("./types");
@@ -410,7 +412,7 @@ function scoreFindings(findings) {
 /* Cache                                                                      */
 /* -------------------------------------------------------------------------- */
 exports.CACHE_FILE_NAME = '.vibe-shield-cache.json';
-exports.CACHE_VERSION = 1;
+exports.CACHE_VERSION = 2;
 /** Content hash used as the cache key for one file. */
 const contentHash = (content) => (0, node_crypto_1.createHash)('sha1').update(content).digest('hex').slice(0, 20);
 exports.contentHash = contentHash;
@@ -482,7 +484,7 @@ function toFindings(ctx, rule, hits) {
     const findings = [];
     for (const hit of hits) {
         const located = hit.offset !== undefined ? ctx.locate(hit.offset) : { line: hit.line ?? 1, column: hit.column ?? 1 };
-        const snippet = ctx.lineText(located.line).trim().slice(0, 200);
+        const snippet = ['VSB-INFRA-003', 'VSB-AUTH-012'].includes(rule.id) ? '[secret value redacted]' : (0, redact_1.redactReportText)(ctx.lineText(located.line).trim()).slice(0, 200);
         findings.push({
             ruleId: rule.id,
             slug: rule.slug,
@@ -491,12 +493,14 @@ function toFindings(ctx, rule, hits) {
             severity: hit.severity ?? rule.severity,
             confidence: hit.confidence ?? rule.confidence,
             cwe: rule.cwe,
+            owasp: rule.owasp,
             filePath: ctx.relativePath,
+            file: ctx.relativePath,
             absolutePath: ctx.absolutePath,
             line: located.line,
             column: located.column,
             snippet,
-            matched: hit.matched ?? snippet,
+            matched: ['VSB-INFRA-003', 'VSB-AUTH-012'].includes(rule.id) ? '[secret value redacted]' : (0, redact_1.redactReportText)(hit.matched ?? snippet),
             message: hit.message ?? rule.description,
             remediation: rule.remediate ? rule.remediate(ctx, hit) : rule.remediation,
             insecureExample: rule.insecureExample,
@@ -510,33 +514,8 @@ function toFindings(ctx, rule, hits) {
 /* -------------------------------------------------------------------------- */
 /* Main scan                                                                  */
 /* -------------------------------------------------------------------------- */
-const VERSION = process.env.npm_package_version ?? '1.0.0';
-let cachedVersion = null;
-/** Package version, resolved once from the nearest package.json. */
-async function packageVersion() {
-    if (cachedVersion)
-        return cachedVersion;
-    let dir = __dirname;
-    for (let depth = 0; depth < 6; depth += 1) {
-        try {
-            const raw = await node_fs_1.promises.readFile(path.join(dir, 'package.json'), 'utf8');
-            const parsed = JSON.parse(raw);
-            if (parsed.name === 'vibe-shield' && parsed.version) {
-                cachedVersion = parsed.version;
-                return cachedVersion;
-            }
-        }
-        catch {
-            // Keep walking up.
-        }
-        const parent = path.dirname(dir);
-        if (parent === dir)
-            break;
-        dir = parent;
-    }
-    cachedVersion = VERSION;
-    return cachedVersion;
-}
+var version_2 = require("./version");
+Object.defineProperty(exports, "packageVersion", { enumerable: true, get: function () { return version_2.packageVersion; } });
 /**
  * Scan a project. This is the one function the CLI, the tests and any embedding
  * application call; everything else in this module is an implementation detail.
@@ -577,6 +556,7 @@ async function scanProject(options) {
     };
     const concurrency = Math.max(1, Math.min(256, options.concurrency ?? exports.DEFAULT_CONCURRENCY));
     const findings = [];
+    const attackSurface = (0, attack_surface_1.emptyAttackSurface)();
     let suppressedCount = 0;
     let cacheHits = 0;
     let bytesScanned = 0;
@@ -595,9 +575,11 @@ async function scanProject(options) {
         catch {
             return;
         }
+        const ctx = (0, context_1.createFileContext)(file.absolutePath, rootDir, content, project);
+        (0, attack_surface_1.inventoryFile)(ctx, attackSurface);
         const hash = (0, exports.contentHash)(content);
         const cached = existing?.files[file.relativePath];
-        if (cached && cached.hash === hash && existing?.project === cache.project && existing?.rules === rules_1.RULES_FINGERPRINT) {
+        if (file.relativePath !== 'package.json' && cached && cached.hash === hash && existing?.project === cache.project && existing?.rules === rules_1.RULES_FINGERPRINT) {
             cacheHits += 1;
             filesScanned += 1;
             bytesScanned += file.bytes;
@@ -606,7 +588,6 @@ async function scanProject(options) {
             options.onFile?.(file.relativePath, (index += 1), discovered.files.length);
             return;
         }
-        const ctx = (0, context_1.createFileContext)(file.absolutePath, rootDir, content, project);
         const applicable = rules.filter((rule) => (!rule.appliesTo || rule.appliesTo(ctx)) && !rule.skipFlags?.some((flag) => ctx.flags[flag] === true));
         ruleInvocations += applicable.length;
         const fileFindings = [];
@@ -646,6 +627,10 @@ async function scanProject(options) {
         }
     });
     await Promise.all(workers);
+    (0, attack_surface_1.inventoryTables)(attackSurface, project, new Set(discovered.files.map(f => f.relativePath)));
+    attackSurface.routes.sort((a, b) => a.file.localeCompare(b.file) || a.line - b.line || a.method.localeCompare(b.method));
+    attackSurface.aiEntrypoints.sort((a, b) => a.file.localeCompare(b.file));
+    attackSurface.agentFiles.sort((a, b) => a.file.localeCompare(b.file));
     const unique = dedupe(findings);
     unique.sort((a, b) => types_1.SEVERITY_WEIGHT[b.severity] - types_1.SEVERITY_WEIGHT[a.severity] ||
         a.filePath.localeCompare(b.filePath) ||
@@ -666,6 +651,7 @@ async function scanProject(options) {
     return {
         rootDir,
         command: 'scan',
+        attackSurface,
         findings: unique,
         score,
         stats: {
@@ -683,7 +669,7 @@ async function scanProject(options) {
         scannedPaths: discovered.files.map((file) => file.relativePath),
         startedAt: new Date(started).toISOString(),
         finishedAt: new Date(finished).toISOString(),
-        version: await packageVersion(),
+        version: await (0, version_1.packageVersion)(),
         ruleCount: rules.length,
         suppressedCount,
         notices,

package/dist/src/scanner/mappings.d.ts

@@ -0,0 +1,17 @@
+/**
+ * OWASP Top 10:2025 associations. CWE-based entries follow the "List of
+ * Mapped CWEs" in the official 2025 category pages; contextual associations
+ * are explicitly labelled and require review. LLM associations are rule-level
+ * judgements, not a claim that every finding involves an LLM.
+ */
+export interface OwaspMapping {
+    id: string;
+    name: string;
+    basis: 'owasp-cwe' | 'contextual';
+}
+export interface OwaspMappings {
+    web: OwaspMapping | null;
+    llm: OwaspMapping[];
+}
+/** A null web mapping or empty LLM list means no applicable association was assigned. */
+export declare function owaspMappings(ruleId: string, cweId: string): OwaspMappings;

package/dist/src/scanner/mappings.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.owaspMappings = owaspMappings;
+const names = {
+    A01: 'Broken Access Control', A02: 'Security Misconfiguration', A03: 'Software Supply Chain Failures',
+    A04: 'Cryptographic Failures', A05: 'Injection', A06: 'Insecure Design',
+    A07: 'Authentication Failures', A08: 'Software or Data Integrity Failures',
+};
+const webByCwe = {
+    'CWE-22': 'A01', 'CWE-200': 'A01', 'CWE-284': 'A01', 'CWE-352': 'A01', 'CWE-540': 'A01', 'CWE-601': 'A01',
+    'CWE-639': 'A01', 'CWE-732': 'A01', 'CWE-749': 'A01', 'CWE-862': 'A01', 'CWE-863': 'A01', 'CWE-918': 'A01', 'CWE-1275': 'A01',
+    'CWE-16': 'A02', 'CWE-526': 'A02', 'CWE-614': 'A02', 'CWE-942': 'A02', 'CWE-1004': 'A02',
+    'CWE-1104': 'A03', 'CWE-321': 'A04', 'CWE-327': 'A04', 'CWE-347': 'A04',
+    'CWE-74': 'A05', 'CWE-77': 'A05', 'CWE-78': 'A05', 'CWE-79': 'A05', 'CWE-89': 'A05', 'CWE-94': 'A05',
+    'CWE-434': 'A06', 'CWE-693': 'A06', 'CWE-287': 'A07', 'CWE-306': 'A07', 'CWE-798': 'A07', 'CWE-1392': 'A07',
+    'CWE-345': 'A08', 'CWE-502': 'A08', 'CWE-829': 'A08',
+};
+const contextualWeb = { 'CWE-250': 'A01', 'CWE-770': 'A06' };
+const llmNames = {
+    LLM01: 'Prompt Injection', LLM02: 'Sensitive Information Disclosure', LLM03: 'Supply Chain',
+    LLM05: 'Improper Output Handling', LLM06: 'Excessive Agency', LLM10: 'Unbounded Consumption',
+};
+const llmByRule = {
+    'VSB-AI-002': ['LLM05', 'LLM06'], 'VSB-AI-003': ['LLM05'], 'VSB-AI-004': ['LLM01'],
+    'VSB-AI-008': ['LLM05'], 'VSB-AI-014': ['LLM10'],
+    'VSB-AGENT-001': ['LLM01'], 'VSB-AGENT-002': ['LLM01', 'LLM02'], 'VSB-AGENT-003': ['LLM01', 'LLM02'],
+    'VSB-AGENT-004': ['LLM03'], 'VSB-AGENT-005': ['LLM02'], 'VSB-AGENT-006': ['LLM01'],
+    'VSB-AGENT-007': ['LLM06'], 'VSB-AGENT-008': ['LLM05', 'LLM06'], 'VSB-AGENT-009': ['LLM01', 'LLM03'],
+    'VSB-AGENT-010': ['LLM06'], 'VSB-AGENT-011': ['LLM02'], 'VSB-AGENT-012': ['LLM06'],
+};
+/** A null web mapping or empty LLM list means no applicable association was assigned. */
+function owaspMappings(ruleId, cweId) {
+    const official = webByCwe[cweId];
+    const webId = official ?? contextualWeb[cweId];
+    return {
+        web: webId ? { id: `${webId}:2025`, name: names[webId], basis: official ? 'owasp-cwe' : 'contextual' } : null,
+        llm: (llmByRule[ruleId] ?? []).map(id => ({ id: `${id}:2025`, name: llmNames[id], basis: 'contextual' })),
+    };
+}

package/dist/src/scanner/redact.d.ts

@@ -0,0 +1 @@
+export declare function redactReportText(text: string): string;

package/dist/src/scanner/redact.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.redactReportText = redactReportText;
+/** Best-effort removal of recognized credentials from report text. */
+const patterns_1 = require("../secrets/patterns");
+function redactReportText(text) {
+    let output = text;
+    for (const match of (0, patterns_1.findSecrets)(text)) {
+        output = output.split(match.value).join(match.display);
+    }
+    return output;
+}

package/dist/src/scanner/rules/database-exposure.js

@@ -60,7 +60,7 @@ const tableWithoutRls = (0, helpers_1.defineRule)({
         'Add `alter table public.<table> enable row level security;` to the migration that creates the table (never a later one).',
         'Add a policy that scopes rows to the caller, e.g. `using (auth.uid() = user_id)` for each of select/insert/update/delete.',
         'Use the service-role key only in server code, and only where bypassing RLS is genuinely required.',
-        'Run `npx github:avivgerz-hue/vibe-shield scan` again — the table should disappear from this report even if no policy was added yet (deny-all is safe).',
+        'Run `npx -y @vibefoundry/vibe-shield scan` again — the table should disappear from this report even if no policy was added yet (deny-all is safe).',
     ],
     references: [
         'https://supabase.com/docs/guides/database/postgres/row-level-security',

package/dist/src/scanner/rules/hardening.d.ts

@@ -0,0 +1,5 @@
+import type { Rule } from '../types';
+export declare const HARDENING_RULES: readonly Rule[];
+export declare const MISSING_LOCKFILE_RULE: Rule;
+/** Docker defaults to root when the final stage never selects a runtime user. */
+export declare const DOCKER_DEFAULT_ROOT_RULE: Rule;