@vibesdotdev/security 0.0.0-stage → 1.0.0-rc.4

package/dist/tools/scan-input/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../src/tools/scan-input/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,8BAA8B,EAAE,2BAA2B,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACjJ,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAClF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,qBAAqB;SAC5B,QAAQ,CAAC,6BAA6B,CAAC;IACzC,OAAO,EAAE,8BAA8B,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,qBAAqB,GAAG,2BAA2B,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACrG,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QACzE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAC,OAAO,EAAE,IAAI,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAC,CAAC,CAAC;KACpF,CAAC,CAAC;IACH,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;CAC7B,CAAC,CAAC"}

package/dist/tools/security-tool-card.d.ts

@@ -0,0 +1,13 @@
+import { type SecurityToolId, type PolicyDecision, type SecurityToolCardTone, type SecurityToolCardRow, type SecurityToolCardModel } from '../schemas/contracts/card.ts';
+export { SECURITY_TOOL_IDS, type SecurityToolId, type PolicyDecision, type SecurityToolCardTone, type SecurityToolThreat, type SecurityToolCardRow, type SecurityToolCardModel } from '../schemas/contracts/card.ts';
+export declare function isSecurityToolId(id: string): id is SecurityToolId;
+export declare function securityToolIcon(toolId: string): string;
+export declare function decisionTone(decision: PolicyDecision | null): SecurityToolCardTone;
+export declare function securityToolCardModel(input: {
+    name: string;
+    input?: unknown;
+    output?: unknown;
+    error?: string;
+}): SecurityToolCardModel;
+export declare function securityToolCardRows(model: SecurityToolCardModel): SecurityToolCardRow[];
+//# sourceMappingURL=security-tool-card.d.ts.map

package/dist/tools/security-tool-card.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-tool-card.d.ts","sourceRoot":"","sources":["../../src/tools/security-tool-card.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,KAAK,oBAAoB,EACnE,KAAK,mBAAmB,EAAE,KAAK,qBAAqB,EACpD,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,KAAK,oBAAoB,EAC9F,KAAK,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,KAAK,qBAAqB,EAC7E,MAAM,8BAA8B,CAAC;AAyBtC,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,EAAE,IAAI,cAAc,CAEjE;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,GAAG,oBAAoB,CAKlF;AAeD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,qBAAqB,CAuDxB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,qBAAqB,GAAG,mBAAmB,EAAE,CAkBxF"}

package/dist/tools/security-tool-card.js

@@ -0,0 +1,171 @@
+import { SECURITY_TOOL_IDS, CardArgsSchema, CardOutputSchema, StringField } from "../schemas/contracts/card.js";
+export { SECURITY_TOOL_IDS } from "../schemas/contracts/card.js";
+const TOOL_ICONS = {
+    'security.check-policy': 'lucide:shield-check',
+    'security.scan-input': 'lucide:scan-search',
+    'security.redact-output': 'lucide:eye-off',
+    'security.report-event': 'lucide:clipboard-list',
+};
+const TOOL_TITLES = {
+    'security.check-policy': 'Check policy',
+    'security.scan-input': 'Scan input',
+    'security.redact-output': 'Redact output',
+    'security.report-event': 'Audit event',
+};
+const DECISION_LABELS = {
+    allow: 'Allowed',
+    deny: 'Denied',
+    review: 'Review',
+};
+const PREVIEW_LIMIT = 240;
+export function isSecurityToolId(id) {
+    return SECURITY_TOOL_IDS.some((toolId) => toolId === id);
+}
+export function securityToolIcon(toolId) {
+    return isSecurityToolId(toolId) ? TOOL_ICONS[toolId] : 'lucide:shield';
+}
+export function decisionTone(decision) {
+    if (decision === 'allow')
+        return 'success';
+    if (decision === 'deny')
+        return 'danger';
+    if (decision === 'review')
+        return 'warning';
+    return 'default';
+}
+function availabilityFrom(output) {
+    if (!output)
+        return null;
+    if (output.engineAvailable !== undefined)
+        return output.engineAvailable;
+    if (output.scannerAvailable !== undefined)
+        return output.scannerAvailable;
+    if (output.redactorAvailable !== undefined)
+        return output.redactorAvailable;
+    return null;
+}
+function previewStr(text) {
+    if (!text)
+        return null;
+    return text.length > PREVIEW_LIMIT ? `${text.slice(0, PREVIEW_LIMIT)}…` : text;
+}
+export function securityToolCardModel(input) {
+    const args = CardArgsSchema.parse(input.input);
+    const output = CardOutputSchema.parse(input.output);
+    const event = args?.event;
+    const policyName = output?.policyId ?? args?.policyId ?? null;
+    const decision = output?.outcome ?? event?.outcome ?? null;
+    const eventType = event?.action ?? null;
+    const recorded = output?.recorded ?? null;
+    const eventId = output?.eventId ?? event?.id ?? null;
+    const actor = event?.actor ?? null;
+    const resource = event?.resource ?? null;
+    const reason = output?.reason ?? null;
+    const error = StringField.parse(input.error) ?? output?.error ?? null;
+    const available = availabilityFrom(output);
+    const threats = output?.threats ?? [];
+    const rawMatches = output?.matches;
+    const matchCount = rawMatches ? rawMatches.length : null;
+    const redactedPreview = previewStr(output?.redacted);
+    const title = titleFor({
+        toolId: input.name,
+        policyName,
+        decision,
+        eventType,
+        recorded,
+        threats,
+        matchCount,
+    });
+    return {
+        toolId: input.name,
+        title,
+        icon: securityToolIcon(input.name),
+        policyName,
+        decision,
+        decisionLabel: decision ? DECISION_LABELS[decision] : null,
+        eventType,
+        recorded,
+        eventId,
+        actor,
+        resource,
+        reason,
+        error,
+        available,
+        availabilityLabel: availabilityLabel(input.name, available),
+        threats,
+        matchCount,
+        redactedPreview,
+        defaultOpen: decision === 'deny' ||
+            decision === 'review' ||
+            recorded === false ||
+            threats.length > 0 ||
+            Boolean(error),
+    };
+}
+export function securityToolCardRows(model) {
+    const rows = [];
+    pushRow(rows, 'Policy', model.policyName);
+    pushRow(rows, 'Decision', model.decisionLabel, decisionTone(model.decision));
+    pushRow(rows, 'Event', model.eventType);
+    pushRow(rows, 'Actor', model.actor);
+    pushRow(rows, 'Resource', model.resource);
+    pushRow(rows, 'Event ID', model.eventId);
+    if (model.recorded !== null) {
+        pushRow(rows, 'Recorded', model.recorded ? 'yes' : 'no', model.recorded ? 'success' : 'danger');
+    }
+    pushRow(rows, 'Reason', model.reason);
+    pushRow(rows, 'Engine', model.availabilityLabel, 'muted');
+    if (model.matchCount !== null) {
+        pushRow(rows, 'Matches', String(model.matchCount));
+    }
+    pushRow(rows, 'Error', model.error, 'danger');
+    return rows;
+}
+function availabilityLabel(toolId, available) {
+    if (available === null)
+        return null;
+    if (toolId === 'security.check-policy') {
+        return available ? 'policy engine registered' : 'policy engine unavailable';
+    }
+    if (toolId === 'security.scan-input') {
+        return available ? 'scanner registered' : 'scanner unavailable';
+    }
+    if (toolId === 'security.redact-output') {
+        return available ? 'redactor registered' : 'redactor unavailable';
+    }
+    return available ? 'available' : 'unavailable';
+}
+function titleFor(input) {
+    if (input.toolId === 'security.check-policy') {
+        if (input.policyName && input.decision) {
+            return `${DECISION_LABELS[input.decision]} · ${input.policyName}`;
+        }
+        if (input.policyName)
+            return `Policy ${input.policyName}`;
+    }
+    if (input.toolId === 'security.report-event') {
+        if (input.eventType) {
+            return input.recorded === false ? `Event ${input.eventType} failed` : `Event ${input.eventType}`;
+        }
+    }
+    if (input.toolId === 'security.scan-input') {
+        if (input.threats.length === 0)
+            return 'No threats found';
+        return input.threats.length === 1 ? '1 threat found' : `${input.threats.length} threats found`;
+    }
+    if (input.toolId === 'security.redact-output') {
+        if (input.matchCount === 0)
+            return 'No redactions';
+        if (input.matchCount === 1)
+            return 'Redacted 1 match';
+        if (input.matchCount !== null)
+            return `Redacted ${input.matchCount} matches`;
+    }
+    return isSecurityToolId(input.toolId) ? TOOL_TITLES[input.toolId] : 'Security tool';
+}
+function pushRow(rows, label, value, tone = 'default') {
+    if (!value)
+        return;
+    rows.push({ label, value, tone });
+}
+//# sourceMappingURL=security-tool-card.js.map

package/dist/tools/security-tool-card.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-tool-card.js","sourceRoot":"","sources":["../../src/tools/security-tool-card.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAGxE,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAEzB,MAAM,8BAA8B,CAAC;AAGtC,MAAM,UAAU,GAAG;IAClB,uBAAuB,EAAE,qBAAqB;IAC9C,qBAAqB,EAAE,oBAAoB;IAC3C,wBAAwB,EAAE,gBAAgB;IAC1C,uBAAuB,EAAE,uBAAuB;CACP,CAAC;AAE3C,MAAM,WAAW,GAAG;IACnB,uBAAuB,EAAE,cAAc;IACvC,qBAAqB,EAAE,YAAY;IACnC,wBAAwB,EAAE,eAAe;IACzC,uBAAuB,EAAE,aAAa;CACG,CAAC;AAE3C,MAAM,eAAe,GAAG;IACvB,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,QAAQ;IACd,MAAM,EAAE,QAAQ;CACyB,CAAC;AAE3C,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,MAAM,UAAU,gBAAgB,CAAC,EAAU;IAC1C,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC9C,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAA+B;IAC3D,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAwB;IACjD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,eAAe,CAAC;IACxE,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC;IAC1E,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC;IAC5E,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,IAAwB;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAKrC;IACA,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,CAAC;IAE1B,MAAM,UAAU,GAAG,MAAM,EAAE,QAAQ,IAAI,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAC;IAC9D,MAAM,QAAQ,GAAG,MAAM,EAAE,OAAO,IAAI,KAAK,EAAE,OAAO,IAAI,IAAI,CAAC;IAC3D,MAAM,SAAS,GAAG,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,IAAI,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,KAAK,EAAE,EAAE,IAAI,IAAI,CAAC;IACrD,MAAM,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC;IACnC,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ,IAAI,IAAI,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC;IACtC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC;IACtE,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,MAAM,EAAE,OAAO,CAAC;IACnC,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,MAAM,eAAe,GAAG,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,QAAQ,CAAC;QACtB,MAAM,EAAE,KAAK,CAAC,IAAI;QAClB,UAAU;QACV,QAAQ;QACR,SAAS;QACT,QAAQ;QACR,OAAO;QACP,UAAU;KACV,CAAC,CAAC;IAEH,OAAO;QACN,MAAM,EAAE,KAAK,CAAC,IAAI;QAClB,KAAK;QACL,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC;QAClC,UAAU;QACV,QAAQ;QACR,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;QAC1D,SAAS;QACT,QAAQ;QACR,OAAO;QACP,KAAK;QACL,QAAQ;QACR,MAAM;QACN,KAAK;QACL,SAAS;QACT,iBAAiB,EAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC;QAC3D,OAAO;QACP,UAAU;QACV,eAAe;QACf,WAAW,EACV,QAAQ,KAAK,MAAM;YACnB,QAAQ,KAAK,QAAQ;YACrB,QAAQ,KAAK,KAAK;YAClB,OAAO,CAAC,MAAM,GAAG,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC;KACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAA4B;IAChE,MAAM,IAAI,GAA0B,EAAE,CAAC;IACvC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1C,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7E,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACxC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1C,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,SAAyB;IACnE,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,MAAM,KAAK,uBAAuB,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,2BAA2B,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,qBAAqB,CAAC;IACjE,CAAC;IACD,IAAI,MAAM,KAAK,wBAAwB,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,sBAAsB,CAAC;IACnE,CAAC;IACD,OAAO,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC;AAChD,CAAC;AAED,SAAS,QAAQ,CAAC,KAQjB;IACA,IAAI,KAAK,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;QAC9C,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACxC,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;QACnE,CAAC;QACD,IAAI,KAAK,CAAC,UAAU;YAAE,OAAO,UAAU,KAAK,CAAC,UAAU,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;QAC9C,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,SAAS,SAAS,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,SAAS,EAAE,CAAC;QAClG,CAAC;IACF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,kBAAkB,CAAC;QAC1D,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,gBAAgB,CAAC;IAChG,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,wBAAwB,EAAE,CAAC;QAC/C,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC;YAAE,OAAO,eAAe,CAAC;QACnD,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC;YAAE,OAAO,kBAAkB,CAAC;QACtD,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;YAAE,OAAO,YAAY,KAAK,CAAC,UAAU,UAAU,CAAC;IAC9E,CAAC;IACD,OAAO,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;AACrF,CAAC;AAED,SAAS,OAAO,CACf,IAA2B,EAC3B,KAAa,EACb,KAAoB,EACpB,OAA6B,SAAS;IAEtC,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACnC,CAAC"}

package/dist/tools/security.docs.descriptor.d.ts

@@ -0,0 +1,17 @@
+declare const _default: {
+    kind: "docs/topic";
+    id: string;
+    title: string;
+    summary: string;
+    body: {
+        type: "markdown";
+        sourceType: "raw";
+        source: string;
+    };
+    tags: string[];
+    surfaces: ("cli" | "web" | "in-app")[];
+    hardware: ("consumer" | "cloud")[];
+    enabled: true;
+};
+export default _default;
+//# sourceMappingURL=security.docs.descriptor.d.ts.map

package/dist/tools/security.docs.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.docs.descriptor.d.ts","sourceRoot":"","sources":["../../src/tools/security.docs.descriptor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAEA,wBA+CgC"}

package/dist/tools/security.docs.descriptor.js

@@ -0,0 +1,49 @@
+export default {
+    kind: 'docs/topic',
+    id: 'security',
+    title: 'Security assessment',
+    summary: 'Runtime scanners, redactors, policy engines, audit sinks and compatibility encryption.',
+    body: {
+        type: 'markdown', sourceType: 'raw',
+        source: `# Security
+Compose securityPlugin from @vibesdotdev/security/plugin for universal kinds and descriptors.
+Consumer tool hosts also compose securityConsumerPlugin from @vibesdotdev/security/consumer.plugin and the Tools owner.
+Shield CLI hosts also compose securityCliPlugin from @vibesdotdev/security/cli/plugin and the CLI owner.
+Browser and cloud hosts use the universal slice; Svelte and TUI plugins provide result cards without execution loaders.
+The package consumer workspace explicitly composes all five slices in its hand-owned vibes.config.ts.
+Report-event schemas live in ./schemas/report-event; the existing tool schema module remains a compatible re-export.
+Existing tools, CLI, kinds and schemas entrypoints remain supported. Built-in scanning and redaction load lazily.
+Direct resolution selects one enabled scanner; security.scan-input aggregates all enabled scanners through resolveAll().
+The runtime selects the redactor. Policies and audit sinks are composed by hosts.
+The universal plugin registers runtime/client id security: activate with getVibesClient<SecurityClient>('security', runtime).
+Use tryGetVibesClient for synchronous post-activation access; the kernel owns reuse and runtime isolation.
+SecurityClient.emit(event) and queryAuditEvents(options = {}) resolve the selected enabled security/auditor on every call.
+AuditEventSchema and AuditQueryOptionsSchema reject malformed arguments with ZodError before sink resolution.
+No enabled auditor throws CapabilityError UNAVAILABLE/security-auditor-unavailable; loader and sink failures propagate.
+Direct auditor calls share the sink; the client has no second audit store. Persistence belongs to the composed sink.
+Direct built-in scans and tools validate the 262,144-unit content cap; supplied booleans alone override descriptor settings.
+Built-in scans, descriptor-only defaults and scan-input tools share optional overrides: omission and undefined are allowed;
+null, non-object options and mistyped known fields reject with ZodError.
+Freshness rejects invalid timestamps before age or allowlist evaluation; Shield rejects invalid reports before stdout.
+These boundary refusals are canonical ZodErrors, with no successful assessment.
+Missing policies deny and report unavailable; implementation failures propagate.
+Descriptor-only IOC sync, query and getStatus throw CapabilityError UNAVAILABLE with reason ioc-feed-unavailable.
+Register an enabled IOC descriptor and implementation for real synchronization, query and status results.
+Descriptor-only redactors validate original string content and optional RedactionRuleSchema rules before
+returning unchanged content, empty matches and redactorAvailable:false. Omitted and undefined rules are valid;
+null, non-array rules and malformed fields reject with ZodError. No patterns execute in this default.
+Built-in content and rule-count execution limits do not apply to descriptor-only admission.
+Built-in redaction uses original UTF-16 coordinates, literal replacements, earliest-start/caller-order overlap precedence,
+and zero-width insertion. Cloud and browser runtimes redact in-process; consumer hardware runs regex work in a supervised runtime/execution Node child.
+The dependency scanner reports unknown until a real implementation is composed.
+Synchronous AES-256-GCM compatibility APIs retain raw and stored formats, explicit and persistent keys.
+Their host migration is still open: synchronous crypto and key persistence currently use Node APIs.
+INVALID_INPUT encryption-key-invalid and ciphertext-invalid refuse malformed data before decoding.
+INVALID_INPUT redaction-pattern-invalid refuses invalid regex source; UNAVAILABLE redaction-budget-exceeded
+means the call passed the candidate budget or execution deadline. Compose execution for consumer redaction and filesystem for Shield reads.
+Run bun run check, bun run test and bun run build; source checks alone do not certify the host migration.`
+    },
+    tags: ['security'], surfaces: ['cli', 'web', 'in-app'],
+    hardware: ['consumer', 'cloud'], enabled: true
+};
+//# sourceMappingURL=security.docs.descriptor.js.map

package/dist/tools/security.docs.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.docs.descriptor.js","sourceRoot":"","sources":["../../src/tools/security.docs.descriptor.ts"],"names":[],"mappings":"AAEA,eAAe;IACd,IAAI,EAAE,YAAY;IAClB,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,qBAAqB;IAC5B,OAAO,EAAE,wFAAwF;IACjG,IAAI,EAAE;QACL,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK;QACnC,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0GAoCgG;KACxG;IACD,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC;IACtD,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI;CAChB,CAAC"}

package/dist/tui/index.d.ts

@@ -0,0 +1,2 @@
+export { securityTuiPlugin as default, securityTuiPlugin } from './security-tui.plugin.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/tui/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tui/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,IAAI,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/tui/index.js

@@ -0,0 +1,2 @@
+export { securityTuiPlugin as default, securityTuiPlugin } from "./security-tui.plugin.js";
+//# sourceMappingURL=index.js.map

package/dist/tui/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tui/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,IAAI,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/tui/security-tui.plugin.d.ts

@@ -0,0 +1,3 @@
+export declare const securityTuiPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default securityTuiPlugin;
+//# sourceMappingURL=security-tui.plugin.d.ts.map

package/dist/tui/security-tui.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-tui.plugin.d.ts","sourceRoot":"","sources":["../../src/tui/security-tui.plugin.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,iBAAiB,6CAgB5B,CAAC;AAEH,eAAe,iBAAiB,CAAC"}

package/dist/tui/security-tui.plugin.js

@@ -0,0 +1,31 @@
+import { createRuntimeImplementation, createRuntimePlugin, loader } from '@vibesdotdev/kernel';
+import { SECURITY_TOOL_IDS } from "../tools/security-tool-card.js";
+const widgets = SECURITY_TOOL_IDS.map((toolId) => ({
+    id: `${toolId}.tui-widget`,
+    kind: 'tools/ui',
+    name: `${toolId} TUI Widget`,
+    description: `Renders ${toolId} results (policy name, allow/deny, event type).`,
+    surfaces: ['tui'],
+    role: 'widget',
+    targetToolId: toolId,
+    targetId: toolId,
+    tags: ['security', 'tui'],
+    enabled: true
+}));
+export const securityTuiPlugin = createRuntimePlugin({
+    id: '@vibesdotdev/security/tui',
+    name: 'Security TUI',
+    description: 'Terminal tool-result cards for security agent tools.',
+    dependencies: ['tui'],
+    descriptors: widgets,
+    loaders: widgets.map((descriptor) => loader(descriptor.id, { kind: 'tools/ui' }, async () => {
+        const mod = await import("./tool-widgets/SecurityToolWidget.impl.consumer.js");
+        return createRuntimeImplementation({
+            kind: 'tools/ui',
+            id: descriptor.id,
+            implementation: { tui: { component: mod.default } }
+        });
+    }))
+});
+export default securityTuiPlugin;
+//# sourceMappingURL=security-tui.plugin.js.map

package/dist/tui/security-tui.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-tui.plugin.js","sourceRoot":"","sources":["../../src/tui/security-tui.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC/F,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAEnE,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClD,EAAE,EAAE,GAAG,MAAM,aAAa;IAC1B,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,GAAG,MAAM,aAAa;IAC5B,WAAW,EAAE,WAAW,MAAM,iDAAiD;IAC/E,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,IAAI,EAAE,QAAQ;IACd,YAAY,EAAE,MAAM;IACpB,QAAQ,EAAE,MAAM;IAChB,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC;IACzB,OAAO,EAAE,IAAI;CACH,CAAA,CAAC,CAAC;AAEb,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;IACpD,EAAE,EAAE,2BAA2B;IAC/B,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,sDAAsD;IACnE,YAAY,EAAE,CAAC,KAAK,CAAC;IACrB,WAAW,EAAE,OAAO;IACpB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CACnC,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,oDAAqD,CAAC,CAAC;QAChF,OAAO,2BAA2B,CAAC;YAClC,IAAI,EAAE,UAAU;YAChB,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,cAAc,EAAE,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE;SACnD,CAAC,CAAC;IACJ,CAAC,CAAC,CACF;CACD,CAAC,CAAC;AAEH,eAAe,iBAAiB,CAAC"}

package/dist/tui/tool-widgets/SecurityToolWidget.impl.consumer.d.ts

@@ -0,0 +1,5 @@
+import type { SecurityToolWidgetProps } from '../../schemas/contracts/widget.ts';
+export type { SecurityToolValue, SecurityToolWidgetProps } from '../../schemas/contracts/widget.ts';
+import { type ReactNode } from 'react';
+export default function SecurityToolWidget(tool: SecurityToolWidgetProps): ReactNode;
+//# sourceMappingURL=SecurityToolWidget.impl.consumer.d.ts.map

package/dist/tui/tool-widgets/SecurityToolWidget.impl.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityToolWidget.impl.consumer.d.ts","sourceRoot":"","sources":["../../../src/tui/tool-widgets/SecurityToolWidget.impl.consumer.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AACjF,YAAY,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AACpG,OAAO,EAAY,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAgCjD,MAAM,CAAC,OAAO,UAAU,kBAAkB,CAAC,IAAI,EAAE,uBAAuB,GAAG,SAAS,CAiDnF"}

package/dist/tui/tool-widgets/SecurityToolWidget.impl.consumer.js

@@ -0,0 +1,37 @@
+import { jsx as _jsx, jsxs as _jsxs } from "@opentui/react/jsx-runtime";
+import { useState } from 'react';
+import { WidgetContainer, WidgetContent, WidgetHeader } from '@vibesdotdev/tui';
+import { VStack } from '@vibesdotdev/tui/components/layout';
+import { dsBase, dsColors, dsSpace } from '@vibesdotdev/tui/theme';
+import { decisionTone, securityToolCardModel, securityToolCardRows } from "../../tools/security-tool-card.js";
+const TONE_FG = {
+    default: dsBase.foreground,
+    success: dsColors.success.solid,
+    danger: dsColors.danger.solid,
+    warning: dsColors.warning.solid,
+    muted: dsBase.mutedForeground
+};
+function widgetStatus(status, hasError) {
+    if (status === 'failed' || hasError)
+        return 'error';
+    if (status === 'done')
+        return 'success';
+    if (status === 'awaiting_approval')
+        return 'warning';
+    if (status === 'pending')
+        return 'pending';
+    return 'running';
+}
+export default function SecurityToolWidget(tool) {
+    const model = securityToolCardModel({
+        name: tool.toolCall?.tool ?? '',
+        input: tool.args,
+        output: tool.output,
+        error: tool.error ?? undefined
+    });
+    const rows = securityToolCardRows(model);
+    const status = widgetStatus(tool.status, Boolean(tool.error));
+    const [collapsed, setCollapsed] = useState(false);
+    return (_jsxs(WidgetContainer, { status: status, marginTop: 1, children: [_jsx(WidgetHeader, { title: model.title, status: status, statusText: status === 'error' ? 'Failed' : 'Completed', isCollapsed: collapsed, onToggle: () => setCollapsed((v) => !v), showClose: false, bottomBorder: false, compact: true }), !collapsed && (_jsx(WidgetContent, { children: _jsxs(VStack, { gap: dsSpace.xs, children: [model.decisionLabel || model.eventType || model.policyName ? (_jsx("text", { style: { fg: TONE_FG[decisionTone(model.decision)] }, children: [model.decisionLabel, model.policyName, model.eventType].filter(Boolean).join(' · ') })) : null, rows.map((row) => (_jsxs("text", { style: { fg: TONE_FG[row.tone] }, children: [row.label, ": ", row.value] }, row.label))), model.threats.slice(0, 5).map((threat, index) => (_jsxs("text", { style: { fg: dsBase.foreground }, children: [threat.severity, " \u00B7 ", threat.kind.replaceAll('_', ' '), " \u2014 ", threat.description] }, `${threat.kind}-${index}`))), model.redactedPreview ? (_jsx("text", { style: { fg: dsBase.mutedForeground }, children: model.redactedPreview })) : null] }) }))] }));
+}
+//# sourceMappingURL=SecurityToolWidget.impl.consumer.js.map

package/dist/tui/tool-widgets/SecurityToolWidget.impl.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityToolWidget.impl.consumer.js","sourceRoot":"","sources":["../../../src/tui/tool-widgets/SecurityToolWidget.impl.consumer.tsx"],"names":[],"mappings":";AAEA,OAAO,EAAE,QAAQ,EAAkB,MAAM,OAAO,CAAC;AACjD,OAAO,EACN,eAAe,EACf,aAAa,EACb,YAAY,EAEZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,oCAAoC,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EACN,YAAY,EACZ,qBAAqB,EACrB,oBAAoB,EAEpB,MAAM,mCAAmC,CAAC;AAE3C,MAAM,OAAO,GAAG;IACf,OAAO,EAAE,MAAM,CAAC,UAAU;IAC1B,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK;IAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK;IAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK;IAC/B,KAAK,EAAE,MAAM,CAAC,eAAe;CACkB,CAAC;AAEjD,SAAS,YAAY,CAAC,MAAe,EAAE,QAAkB;IACxD,IAAI,MAAM,KAAK,QAAQ,IAAI,QAAQ;QAAE,OAAO,OAAO,CAAC;IACpD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,MAAM,KAAK,mBAAmB;QAAE,OAAO,SAAS,CAAC;IACrD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,kBAAkB,CAAC,IAA6B;IACvE,MAAM,KAAK,GAAG,qBAAqB,CAAC;QACnC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;QAC/B,KAAK,EAAE,IAAI,CAAC,IAAI;QAChB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;KAC9B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAElD,OAAO,CACN,MAAC,eAAe,IAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,aAC5C,KAAC,YAAY,IACZ,KAAK,EAAE,KAAK,CAAC,KAAK,EAClB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EACvD,WAAW,EAAE,SAAS,EACtB,QAAQ,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EACvC,SAAS,EAAE,KAAK,EAChB,YAAY,EAAE,KAAK,EACnB,OAAO,SACN,EACD,CAAC,SAAS,IAAI,CACd,KAAC,aAAa,cACb,MAAC,MAAM,IAAC,GAAG,EAAE,OAAO,CAAC,EAAE,aACrB,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAC7D,eAAM,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,YACxD,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAC/E,CACP,CAAC,CAAC,CAAC,IAAI,EACP,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAClB,gBAAsB,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,aACpD,GAAG,CAAC,KAAK,QAAI,GAAG,CAAC,KAAK,KADb,GAAG,CAAC,KAAK,CAEb,CACP,CAAC,EACD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CACjD,gBAAsC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,aACpE,MAAM,CAAC,QAAQ,cAAK,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,cAAK,MAAM,CAAC,WAAW,KADlE,GAAG,MAAM,CAAC,IAAI,IAAI,KAAK,EAAE,CAE7B,CACP,CAAC,EACD,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CACxB,eAAM,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,eAAe,EAAE,YAAG,KAAK,CAAC,eAAe,GAAQ,CAC3E,CAAC,CAAC,CAAC,IAAI,IACA,GACM,CAChB,IACgB,CAClB,CAAC;AACH,CAAC"}

package/docs/host-boundary.md

@@ -0,0 +1,186 @@
+# Synchronous encryption owner prerequisite
+
+This is an unresolved prerequisite, not acceptance of the host boundary.
+
+Inspected public contracts:
+
+| Owner export | Current contract | Missing capability |
+| --- | --- | --- |
+| @vibesdotdev/crypto/encryption | EncryptionImplementation.encrypt and decrypt return Promises (crypto/src/schemas/encryption.ts). IV length 16 and AAD are supported asynchronously. | Runtime-resolved synchronous AES-256-GCM seal/open, including authentication, 16-byte IV/tag and optional AAD. |
+| @vibesdotdev/filesystem | getSynchronousReadPort exposes read-only namespace access. FileSystemHostSyncCalls has stat, lstat, realpath, directory entries, open/read/close (filesystem/src/schemas/host-adapter.ts). | Public runtime-resolved synchronous directory creation and exclusive key creation (wx, 0600), with errno-preserving read/write results and concurrent-winner reuse. |
+| @vibesdotdev/host-node/filesystem | Host primitives implement that read port. Async file handles provide writes; no public synchronous write service is exported. | Host implementation of the preceding writable synchronous contract. |
+| @vibesdotdev/kernel/credentials | Credential references resolve through runtime.resolveCredential and secrets/store. | A credential lookup cannot supply the encrypted store's own key without recursion; retain the separate asynchronous boundEncryptionKeyHex path. |
+
+Once compatible owners exist, synchronous post-activation resolution must use
+tryGetVibesClient from @vibesdotdev/kernel/client. It cannot make asynchronous
+crypto or persistence synchronous.
+
+Affected security callers: SecretEncryption byte/string/stored methods,
+generateEncryptionKey, explicit-key encryptStringWithKey/decryptToStringWithKey,
+readOrCreateKeyFile, resolveEncryptionKeyHex and resolveEncryptionKeyHexForBase.
+The secrets encrypted-local backend calls the base-specific resolver and
+explicit-key helpers from backends/encrypted-local/encrypted-local.impl.local.ts
+(load/decrypt near line 145; save/encrypt near line 177). Those contracts must
+continue working without resolving their own store credential.
+
+Current implementation evidence: implementations/encryption.ts obtains Node
+crypto synchronously through process.getBuiltinModule and caches runtime keys;
+implementations/keys.ts obtains Node filesystem synchronously, creates keys
+exclusively, reuses concurrent winners and refuses unreadable existing keys.
+Replacing these with Promise-returning ports would break supported callers.
+No such substitution is made in this repair. Universal import initialization
+and reachable crypto-unavailable refusal are distinct from host-operation
+migration. The owner prerequisites remain unresolved.
+
+Historical package-check findings from earlier runs: workspace-rules reported
+correct/host-apis-in-host-packages at encryption.ts:18; the declared oxlint
+ratchet reported no-env-branch-in-isomorphic-code and no-runtime-typeof at
+encryption.ts:23 and keys.ts:26. These results predate this repair and are not
+current check results. They reflect the unresolved owner contracts above. No
+check is weakened or suppressed.
+
+## Historical sibling composition failure
+
+An earlier run failed because tui/src/schemas/widgets.ts imported the absent
+ReadonlyJsonObjectSchema value from @vibesdotdev/kernel/schemas/json (TS2724).
+The review at framework revision cf9fa626f240604c0ae40ba1344b2398b50cd508
+observed JsonValueFromReaderSchema in the source and cited a receipt with
+passing typecheck, 226 tests and build. That receipt predates the extended
+extracted-widget probe; it does not prove extracted widget resolution.
+
+The subsequent review at revision 570e6eb1f474772bf6b38d6d5fb9b7933aa8242c
+reports passing typecheck and build, with 225 tests passing and one failing.
+Source widget resolution passed; extracted widget resolution was attempted
+and blocked before resolution by the LocalDB artifact described below.
+The earlier TUI schema failure is historical. The synchronous host prerequisite
+above remains unresolved regardless of these results.
+
+## Historical extracted surface composition receipt
+
+A prior offline probe registered Kernel, Logging, Tools, TUI and Node test
+plugins before attempting extracted widget resolution. Source TUI widget
+resolution passed. The extracted composition was blocked before resolution:
+LocalDB's emitted sqlite-driver.base.js imported @vibesdotdev/runtime, absent
+from its declared installed closure. This remains a historical artifact
+observation and an external LocalDB owner follow-up. The current in-process
+packed.test.ts does not perform this probe or establish extracted resolution.
+
+## Historical verification: 2026-10-14
+
+Framework HEAD was adb0749f4a8ee6fefc54596a2528a7ff38aad39c before these
+commands and advanced in another lane during verification. The security
+working-tree candidate plus the historical-evidence correction produced:
+
+| Command | Observed result |
+| --- | --- |
+| `bun run --cwd repos/platform/framework/security check` | Exit 2: TUI terminal-output-redirect.ts:88 passes Uint8Array<ArrayBufferLike> to a writer accepting only string or Uint8Array<ArrayBuffer> (TS2345). Svelte check did not run after that failure. |
+| `bun run --cwd repos/platform/framework/security test` | Exit 1: 225 pass, one packed surface-composition failure, 785 assertions across 28 files. |
+| `bun run --cwd repos/platform/framework/security build` | Exit 0: emitted core and Svelte artifacts. |
+| `workspace-rules check`, scoped to security | One host-boundary error at implementations/encryption.ts:18. |
+| Declared `internal-oxlint-toolchain/ratchet.mjs`, from security | Exit 1: four findings at encryption.ts:23 and keys.ts:26, listed above. |
+
+The packed test reached and passed its universal graph/crypto refusal, emitted
+public imports, export-target/document inventory and strict public declaration
+assertions before failing at the extracted surface composition. This does not
+establish successful extracted widget resolution. Source widget resolution and
+the other 225 tests passed.
+
+The accepted scanner-admission task supplies a later authoritative receipt with
+passing typecheck and build, and failed rules, lint and packed-artifact testing.
+That receipt supersedes the TS2345 result above as current typecheck evidence;
+it does not identify a candidate hash or exact command output. The TUI byte-view
+failure above is historical, not an undifferentiated current blocker.
+LocalDB's owner must still correct its emitted dependency closure as described
+above. Neither owner is changed by this package-scoped task. The synchronous
+crypto and writable-filesystem prerequisite remains blocking; a passing build
+or typecheck does not close rules, lint or distributed composition acceptance.
+
+## Round-three scanner-admission receipt: 2026-10-14 (Phoenix)
+
+The runtime tools observed framework HEAD
+`de1e598d9e366679dd205af717595b6c43308106` before the direct checks.
+The selected working-tree candidate contained 128 tracked or unignored files,
+with SHA-256 `cd0d9f95f22fdd737322d4ba07bce4d00b32c8c9b4aef938ebe9b9544b69df22`.
+The digest hashes sorted existing package paths, each followed by NUL, file
+bytes and NUL; it precedes this verification-document append. It includes the
+transferred correctness work and this scanner repair, and is not a commit id.
+
+| Exact invocation | Observed result |
+| --- | --- |
+| `git {action:"commit",cwd:"repos/platform/framework",paths:["security"],message:commitMessage}` (exact message below) | Exit 1 at commit; no checkpoint created. The tool truncated stderr, so the specific hook diagnostic was not available. The installed pre-commit hook executes `vibes --finite dev check --staged`; it was not bypassed. |
+| `workspace-rules {action:"check",paths:["repos/platform/framework/security"]}` | One error: correct/host-apis-in-host-packages, encryption.ts:18. |
+| `node ../node_modules/@vibesdotdev/internal-oxlint-toolchain/ratchet.mjs`, cwd security | Exit 1: four findings at encryption.ts:23 and keys.ts:26, as listed above. |
+| `bun run --cwd repos/platform/framework/security check` | Exit 2: eight TUI source diagnostics below. Svelte check did not run. |
+| `bun run --cwd repos/platform/framework/security test` | Exit 1: 225 pass, one packed-test failure, 745 assertions across 28 files. All three admission tests passed, including built-in, descriptor-only default and public tool option boundaries. |
+| `bun run --cwd repos/platform/framework/security build` | Exit 2: the same eight TUI diagnostics; core compilation prevented the Svelte packaging step. |
+
+The commitMessage supplied to the runtime Git tool was:
+
+```text
+fix(security): converge scanner options admission
+
+Preserve and checkpoint the transferred security correctness work, including
+schema ownership, runtime compositions, artifact isolation and host evidence.
+Validate scanner overrides before defaulting; prove malformed and valid
+options through the built-in scanner, descriptor-only kind and public tool.
+Distinguish historical TUI failures from later passing typecheck evidence.
+```
+
+The final scoped commit attempt after this documentation update also exited 1
+at commit with the same truncated diagnostic. No hook was bypassed; the candidate
+remains uncommitted, with package custody retained pending a checkpoint.
+
+These round-three TUI findings differ from both historical TUI failures above.
+The TUI owner must repair relocated imports in
+`src/components/content/code/schemas/diffUtils.types.ts:13–14` (backend),
+`src/components/content/schemas/identity/Badge.types.ts:2` and
+`src/components/content/schemas/surfaces/Panel.types.ts:9–10` (theme), and
+`src/shell/schemas/TuiAppShell.ts:9` (ErrorBoundary), plus restore the missing
+`VirtualListContextValue` type at `src/components/data/VirtualList.tsx:147`
+(TS2304), and correct the nullable value assignment at
+`src/components/form/controls/SearchSelect.tsx:188` (TS2322). Six diagnostics are
+TS2307, for eight diagnostics in total.
+
+The offline packed test failed in its disposable staging build at these TUI
+errors. Packing, extracted imports, declaration checks and extracted widget
+resolution were not reached in this run. The earlier failed LocalDB emitted
+composition receipt remains unresolved; it is not the demonstrated cause of
+that staging-compilation failure and has no later passing receipt.
+No artifact-isolation change or undeclared dependency was introduced.
+Scanner behavior is observed through real owned compositions; complete package
+typechecking, build, artifact acceptance and independent review remain open.
+The synchronous crypto/write owner prerequisites remain blocking.
+
+## Completion verification: 2026-10-14 (Phoenix)
+
+The complete staged package contained 128 files with no untracked files or
+index/working-tree differences. Its staged patch SHA-256 was
+`d8879895710fa42eac692475be377bb1ea9e598ed192db47d602dbeeb0153155`.
+This identifies the observed staged patch, not a commit or a published artifact.
+Only README, SPEC and this document were subsequently reconciled with these results.
+
+| Exact invocation | Observed result |
+| --- | --- |
+| `bun run --cwd repos/platform/framework/security check` | Exit 0; TypeScript passed, Svelte reported zero errors and zero warnings. |
+| `bun run --cwd repos/platform/framework/security build` | Exit 0; core and Svelte emitted. |
+| `bun run --cwd repos/platform/framework/security test` | Exit 1; 225 pass, one fail, 829 assertions across 28 files. All three scanner/freshness admission tests passed. |
+| `workspace-rules {action:"check",paths:["repos/platform/framework/security"]}` | One host-boundary error at encryption.ts:18. |
+| `node ../node_modules/@vibesdotdev/internal-oxlint-toolchain/ratchet.mjs`, cwd security | Exit 1; the same four encryption.ts:23 / keys.ts:26 findings. |
+
+This packed attempt completed the staging build, offline Bun pack, tar extraction,
+universal graph/crypto refusal, emitted public imports, export/document inventory
+and strict public declarations. Extracted surface composition then failed:
+LocalDB's emitted sqlite-driver.base.js imports undeclared @vibesdotdev/runtime.
+This is a new observation of that artifact failure; it does not change the
+round-three failure's earlier stage or cause. Source surface tests passed.
+The TUI diagnostics above belong to the supplied round-three receipt; this run's
+source check/build passed against the live sibling composition.
+
+That completion run's checkpoint attempts encountered a framework index lock
+(Git exit 128) and a runtime Git-tool timeout after 65 seconds. These were not a
+captured hook refusal. All required additions stayed staged, while its final
+README, SPEC and receipt updates awaited staging. The captured Git error was:
+Unable to create framework/.git/index.lock: File exists. This is historical
+checkpoint evidence; no committed-artifact claim follows from those checks.
+Crypto/filesystem host contracts and LocalDB's emitted closure remain owner
+handoffs. Package acceptance and independent artifact review remain open.

package/docs/scanner-work.md

@@ -0,0 +1,29 @@
+# Built-in scanner work bound
+
+The admitted input is at most 262,144 UTF-16 units. The fixed rule set makes
+O(n) work in input length, with constants determined by the shipped rules;
+this claim does not extend to arbitrary redactor patterns.
+
+- Credential and password rules start with fixed literal prefixes. Their
+  whitespace runs cannot contain another prefix. Credential value characters
+  are disjoint from delimiters and quotes. Password values have no failing
+  suffix and consume the entire non-whitespace run on success.
+- Provider and GitHub tokens have fixed prefixes and fixed-length bodies.
+- SSN and passport rules have fixed maximum match lengths.
+- Email attempts inspect at most 64 local-part and 126 domain units before
+  the final dot. The trailing alphabetic run has no failing suffix: successful
+  matches consume it. Failed starts therefore inspect a fixed-size window.
+- Instruction overrides start with a fixed verb and consume disjoint whitespace
+  and modifier words. Modifiers cannot contain another starting verb. The
+  repeated alternatives have distinct words; whitespace cannot match a word.
+  Persona and system-prompt rules likewise alternate distinct fixed words
+  and whitespace, which cannot contain another start.
+- Markup uses a fixed opening-prefix search followed by one terminator search.
+  A success advances past the terminator; a missing terminator ends that rule.
+  Neither case retries the same unterminated suffix.
+
+Rules use fresh match state per call. Category order, non-overlapping matches
+within each rule, rule identifiers and original UTF-16 spans are preserved.
+The public runtime scan tests exercise long nonmatches, incomplete instruction
+sequences, credential prefixes, unterminated markup, and nested opening markup.
+The work argument comes from these traversals, not timing measurements.