@vibesdotdev/security 0.0.0-stage → 1.0.0-rc.5

package/LICENSE

@@ -0,0 +1,18 @@
+MIT License
+
+Copyright (c) 2026 VIBES DEV LLC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and
+associated documentation files (the "Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the
+following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial
+portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT
+LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO
+EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
+USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -1,3 +1,110 @@
-# Temporary Holding Version
+# @vibesdotdev/security
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Runtime security assessment: secret, PII and prompt-injection scanning, output
+redaction, policy evaluation, audit emission, and Shield dependency reports.
+Licensed under MIT.
+
+Install `@vibesdotdev/security` with its Kernel, CLI, Paths, and Filesystem peers.
+Hosts compose the universal plugin for security kinds and descriptors, then add
+only the slices their scope supports:
+
+- Consumer tool hosts: compose `securityPlugin` from `./plugin`,
+  `securityConsumerPlugin` from `./consumer.plugin`, and the Tools owner.
+- Shield CLI hosts: compose `securityPlugin`, `securityCliPlugin` from
+  `./cli/plugin`, and the CLI owner. The CLI slice supplies both dependency
+  commands without requiring the consumer tool slice.
+- Browser and cloud hosts: compose `./plugin`; tool execution belongs to a
+  consumer host. Svelte and TUI result cards use `./svelte/plugin` and
+  `./tui/plugin` respectively and do not compose tool or CLI execution.
+
+The package's hand-owned `vibes.config.ts` composes all five slices for its
+consumer workspace; browser and cloud hosts still select only their supported
+slices. The unit-config generator preserves that explicit workspace block.
+
+All paths above are subpaths of `@vibesdotdev/security`. Existing `./tools`,
+`./cli`, kind, schema and surface imports remain available.
+
+```ts
+import { securityPlugin } from '@vibesdotdev/security/plugin';
+
+await runtime.registerPlugin(securityPlugin);
+const scanner = await runtime.query('security/scanner').resolve();
+const report = await scanner.scan('ignore previous instructions');
+```
+
+The plugin lazily registers built-in scanning and redaction. Direct scanner
+resolution, as above, selects one enabled implementation. The `security.scan-input`
+tool aggregates all enabled scanners through `resolveAll()`. Runtime selection
+chooses the redactor. Policy and auditor descriptors come from the host. An absent policy denies and reports
+that no engine is available. Dependency scanning currently returns an honest
+`unknown` verdict; it has no shipped advisory feed.
+
+The universal plugin registers the semantic `SecurityClient` as
+`runtime/client` id `security`. Activate it through the kernel client owner:
+
+```ts
+import { getVibesClient, tryGetVibesClient } from '@vibesdotdev/kernel/client';
+import type { SecurityClient } from '@vibesdotdev/security';
+
+const security = await getVibesClient<SecurityClient>('security', runtime);
+await security.emit(event);
+const events = await security.queryAuditEvents({ actor: 'agent', limit: 20 });
+const active = tryGetVibesClient<SecurityClient>('security', runtime);
+```
+
+The kernel reuses the client within its runtime. Synchronous access returns
+undefined before activation. Each operation resolves the enabled auditor using
+the kind's selection contract; direct `security/auditor` calls share that sink.
+The client owns no audit store. Host-composed sinks own persistence; the
+descriptor-only auditor keeps state within its runtime.
+
+Events and query options use `AuditEventSchema` and `AuditQueryOptionsSchema`.
+Malformed arguments reject with ZodError before auditor resolution. With no
+enabled auditor, both operations throw CapabilityError code `UNAVAILABLE`,
+reason `security-auditor-unavailable`. Loader and sink failures propagate.
+The report-event tool retains its separate operational `recorded:false` contract.
+Its canonical input/output schemas live in `./schemas/report-event`; the existing
+tool schema module re-exports the same contracts. Malformed envelopes reject
+before sink resolution or failure logging.
+
+Direct built-in scans and tools cap content at 262,144 UTF-16 units. Omitted,
+empty and partial call options preserve configured categories; explicit undefined
+also preserves omission. Built-in scans, descriptor-only defaults and scan-input
+tools reject null, non-object options and mistyped known fields with the canonical
+ZodError. Invalid content, freshness timestamps and dependency reports reject
+through their owning schemas.
+Freshness allowlists apply only after timestamp validation.
+
+Descriptor-only IOC feeds reject sync, query and getStatus with CapabilityError
+code UNAVAILABLE and reason ioc-feed-unavailable. Compose a real IOC feed
+implementation; the default cannot establish synchronization, status or absence
+of indicators.
+
+Descriptor-only redactors validate string content and optional RedactionRuleSchema
+rules before returning unchanged content, empty matches and redactorAvailable:false.
+Omitted and undefined rules are valid; null, non-array rules and malformed fields
+reject with ZodError. This admission does not execute patterns or require an
+execution host; built-in content and rule-count limits belong to built-in matching.
+
+Built-in redaction preserves literal replacements and original match
+coordinates. Cloud and browser runtimes redact in-process with a candidate-span
+budget; consumer hardware selects the subprocess implementation, which needs the
+runtime's supervised execution provider and Node command discovery to enforce a
+one-second deadline for arbitrary regex patterns.
+
+Synchronous AES-256-GCM compatibility APIs remain at the root and
+`@vibesdotdev/security/encryption`. Their names, formats, storage AAD, explicit
+keys, base-specific keys and persistent-key behavior are retained. Their host
+migration remains unfinished: crypto and synchronous key-file access still use
+the established Node APIs. The current packed.test.ts is an in-process source
+contract test: it checks selected export-map keys, docs presence, a key round
+trip, helper behavior and plugin ids. It does not build, pack, extract,
+install, inspect Node/type export conditions or resolve extracted widgets.
+Historical artifact receipts and failures are identified in
+[host boundary evidence](docs/host-boundary.md). Passing source tests do not
+close the host migration or prove distributed-artifact correctness.
+
+See [SPEC.md](SPEC.md) for composition, span ordering, entrypoints, typed
+refusals and the outstanding owner boundary. Run `bun run check`,
+`bun run test`, and `bun run build` from this package. Tests are included in
+typechecking; emitted packages exclude test code.

package/dist/cli/index.d.ts

@@ -0,0 +1,2 @@
+export type { CLIGroupAssetDescriptor, CLICommandAssetDescriptor } from '../implementations/cli-types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC"}

package/dist/cli/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":""}

package/dist/cli/plugin.d.ts

@@ -0,0 +1,15 @@
+/**
+ * The security CLI plugin: the Shield dependency command implementations
+ * (`shield.deps.scan`, `shield.deps.gate`).
+ *
+ * Compose this beside `securityPlugin` (from `@vibesdotdev/security/plugin`)
+ * on CLI hosts. The descriptors stay in the universal plugin so command
+ * discovery works from any scope; the `*.impl.consumer.ts` implementations
+ * (which read host disks and lockfiles) live only here, because a runtime
+ * `scope` tag stops runtime resolution but not static bundler traversal —
+ * inline loaders would ship the CLI implementations into Worker/browser
+ * bundles.
+ */
+export declare const securityCliPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default securityCliPlugin;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/cli/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/cli/plugin.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iBAAiB,6CAc5B,CAAC;AAEH,eAAe,iBAAiB,CAAC"}

package/dist/cli/plugin.js

@@ -0,0 +1,25 @@
+import { createRuntimePlugin, loader } from '@vibesdotdev/kernel/factory';
+/**
+ * The security CLI plugin: the Shield dependency command implementations
+ * (`shield.deps.scan`, `shield.deps.gate`).
+ *
+ * Compose this beside `securityPlugin` (from `@vibesdotdev/security/plugin`)
+ * on CLI hosts. The descriptors stay in the universal plugin so command
+ * discovery works from any scope; the `*.impl.consumer.ts` implementations
+ * (which read host disks and lockfiles) live only here, because a runtime
+ * `scope` tag stops runtime resolution but not static bundler traversal —
+ * inline loaders would ship the CLI implementations into Worker/browser
+ * bundles.
+ */
+export const securityCliPlugin = createRuntimePlugin({
+    id: 'security.cli',
+    name: 'Security — Shield CLI',
+    description: 'Shield dependency command implementations (shield.deps.scan, shield.deps.gate). Compose beside the universal security plugin on CLI hosts; Worker and browser bundles never import this slice.',
+    dependencies: ['security'],
+    loaders: [
+        loader('shield.deps.scan', { kind: 'cli/command', scope: 'consumer' }, () => import("./shield.deps.scan.impl.consumer.js")),
+        loader('shield.deps.gate', { kind: 'cli/command', scope: 'consumer' }, () => import("./shield.deps.gate.impl.consumer.js")),
+    ],
+});
+export default securityCliPlugin;
+//# sourceMappingURL=plugin.js.map

package/dist/cli/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/cli/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAE1E;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;IACpD,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EACV,gMAAgM;IACjM,YAAY,EAAE,CAAC,UAAU,CAAC;IAC1B,OAAO,EAAE;QACR,MAAM,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,CAC3E,MAAM,CAAC,qCAAqC,CAAC,CAC7C;QACD,MAAM,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,CAC3E,MAAM,CAAC,qCAAqC,CAAC,CAC7C;KACD;CACD,CAAC,CAAC;AAEH,eAAe,iBAAiB,CAAC"}

package/dist/cli/read-lockfile.d.ts

@@ -0,0 +1,4 @@
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+/** The text of the lockfile at `path`, read through the runtime's host-disk adapter. */
+export declare function readLockfile(runtime: RuntimeRef, path: string): Promise<string>;
+//# sourceMappingURL=read-lockfile.d.ts.map

package/dist/cli/read-lockfile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-lockfile.d.ts","sourceRoot":"","sources":["../../src/cli/read-lockfile.ts"],"names":[],"mappings":"AAkBA,OAAO,EAIN,KAAK,UAAU,EACf,MAAM,qBAAqB,CAAC;AA+B7B,wFAAwF;AACxF,wBAAsB,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAsBrF"}

package/dist/cli/read-lockfile.js

@@ -0,0 +1,74 @@
+import { FileSystemAdapterDescriptorSchema } from '@vibesdotdev/filesystem';
+/**
+ * Read the lockfile a `shield deps` command was pointed at, through the
+ * runtime's host-disk `filesystem/adapter`.
+ *
+ * The filesystem owner validates its descriptors and resolves the adapter. The
+ * adapter chosen is an enabled, non-cloud adapter that can read: the disk the
+ * user's path lives on. A relative path resolves as the host resolves it.
+ *
+ * Every failure is a typed `CapabilityError` carrying its cause:
+ * - no such adapter, or one that does not load:
+ *   UNAVAILABLE `shield-filesystem-unavailable`;
+ * - the file is absent: NOT_FOUND `shield-lockfile-missing`;
+ * - any other read failure (an adapter without `readFile` included):
+ *   UNAVAILABLE `shield-lockfile-unreadable`.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError, CaughtFailureSchema } from '@vibesdotdev/kernel';
+const ErrnoSchema = z.object({ code: z.string() });
+/** A caught failure that carries an errno code (`ENOENT`, `EACCES`, …). */
+function hasErrnoCode(failure) {
+    return failure instanceof Error && ErrnoSchema.safeParse(failure).success;
+}
+function filesystemUnavailable(message, cause) {
+    return new CapabilityError(message, 'UNAVAILABLE', {
+        reason: 'shield-filesystem-unavailable',
+        retryable: false,
+        cause
+    });
+}
+async function resolveReader(runtime) {
+    if (!runtime.hasKind('filesystem/adapter'))
+        throw filesystemUnavailable('No filesystem adapter is registered.');
+    const query = runtime.query('filesystem/adapter')
+        .enabled()
+        .filter(descriptor => {
+        const parsed = FileSystemAdapterDescriptorSchema.parse(descriptor);
+        return parsed.cloudNative !== true && parsed.capabilities.includes('read');
+    });
+    if (query.descriptors().length === 0)
+        throw filesystemUnavailable('No readable host-disk filesystem adapter is registered.');
+    try {
+        return await query.resolve();
+    }
+    catch (error) {
+        throw filesystemUnavailable('The host-disk filesystem adapter did not load.', CaughtFailureSchema.parse(error));
+    }
+}
+/** The text of the lockfile at `path`, read through the runtime's host-disk adapter. */
+export async function readLockfile(runtime, path) {
+    const reader = await resolveReader(runtime);
+    let content;
+    try {
+        content = await reader.readFile(path, 'utf8');
+    }
+    catch (error) {
+        const failure = CaughtFailureSchema.parse(error);
+        if (hasErrnoCode(failure) && failure.code === 'ENOENT') {
+            throw new CapabilityError(`The lockfile ${path} does not exist.`, 'NOT_FOUND', {
+                reason: 'shield-lockfile-missing',
+                details: { path },
+                cause: failure
+            });
+        }
+        throw new CapabilityError(`The lockfile ${path} could not be read.`, 'UNAVAILABLE', {
+            reason: 'shield-lockfile-unreadable',
+            retryable: false,
+            details: { path, code: hasErrnoCode(failure) ? failure.code : null },
+            cause: failure
+        });
+    }
+    return content instanceof Uint8Array ? new TextDecoder().decode(content) : content;
+}
+//# sourceMappingURL=read-lockfile.js.map

package/dist/cli/read-lockfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-lockfile.js","sourceRoot":"","sources":["../../src/cli/read-lockfile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iCAAiC,EAAqE,MAAM,yBAAyB,CAAC;AAC/I;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACN,eAAe,EACf,mBAAmB,EAGnB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEnD,2EAA2E;AAC3E,SAAS,YAAY,CAAC,OAAsB;IAC3C,OAAO,OAAO,YAAY,KAAK,IAAI,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;AAC3E,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe,EAAE,KAAqB;IACpE,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;QAClD,MAAM,EAAE,+BAA+B;QACvC,SAAS,EAAE,KAAK;QAChB,KAAK;KACL,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAAmB;IAC/C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC;QAAE,MAAM,qBAAqB,CAAC,sCAAsC,CAAC,CAAC;IAChH,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAA0D,oBAAoB,CAAC;SACxG,OAAO,EAAE;SACT,MAAM,CAAC,UAAU,CAAC,EAAE;QACpB,MAAM,MAAM,GAAG,iCAAiC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACnE,OAAO,MAAM,CAAC,WAAW,KAAK,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IACJ,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,qBAAqB,CAAC,yDAAyD,CAAC,CAAC;IAC7H,IAAI,CAAC;QAAC,OAAO,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACpD,MAAM,qBAAqB,CAAC,gDAAgD,EAAE,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACjH,CAAC;AACF,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAmB,EAAE,IAAY;IACnE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,OAA4B,CAAC;IACjC,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxD,MAAM,IAAI,eAAe,CAAC,gBAAgB,IAAI,kBAAkB,EAAE,WAAW,EAAE;gBAC9E,MAAM,EAAE,yBAAyB;gBACjC,OAAO,EAAE,EAAE,IAAI,EAAE;gBACjB,KAAK,EAAE,OAAO;aACd,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,gBAAgB,IAAI,qBAAqB,EAAE,aAAa,EAAE;YACnF,MAAM,EAAE,4BAA4B;YACpC,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;YACpE,KAAK,EAAE,OAAO;SACd,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACpF,CAAC"}

package/dist/cli/report-output.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Where `shield deps` puts its output.
+ *
+ * Both the report and the diagnostics go through the runtime's host text
+ * output (`runtime/stdio`), so a command run under a host that captures or
+ * redirects output gets all of it, and the command impls carry no `process.*`
+ * of their own. The report is the invocation's one JSON document, written with
+ * `writeJson` so the CLI surface can tell that it has been emitted.
+ *
+ * A host that offers no text output refuses `UNAVAILABLE` `stdio-unavailable`,
+ * and that refusal is allowed to surface: a command that cannot report anything
+ * has not succeeded quietly, it has failed where it can be seen.
+ */
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import { type DepScanReport } from '../kinds/dep-scanner.kind.ts';
+/** Write the `DepScanReport` as the invocation's JSON document on stdout. */
+export declare function writeDepScanReport(runtime: RuntimeRef, report: DepScanReport): Promise<DepScanReport>;
+/** Write one diagnostic line on the runtime's stderr. */
+export declare function writeDiagnostic(runtime: RuntimeRef, message: string): Promise<void>;
+//# sourceMappingURL=report-output.d.ts.map

package/dist/cli/report-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report-output.d.ts","sourceRoot":"","sources":["../../src/cli/report-output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEvE,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAEvF,6EAA6E;AAC7E,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAI3G;AAED,yDAAyD;AACzD,wBAAsB,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzF"}

package/dist/cli/report-output.js

@@ -0,0 +1,27 @@
+/**
+ * Where `shield deps` puts its output.
+ *
+ * Both the report and the diagnostics go through the runtime's host text
+ * output (`runtime/stdio`), so a command run under a host that captures or
+ * redirects output gets all of it, and the command impls carry no `process.*`
+ * of their own. The report is the invocation's one JSON document, written with
+ * `writeJson` so the CLI surface can tell that it has been emitted.
+ *
+ * A host that offers no text output refuses `UNAVAILABLE` `stdio-unavailable`,
+ * and that refusal is allowed to surface: a command that cannot report anything
+ * has not succeeded quietly, it has failed where it can be seen.
+ */
+import { getRuntimeStdio } from '@vibesdotdev/kernel';
+import { writeJson } from '@vibesdotdev/cli/output';
+import { DepScanReportSchema } from "../kinds/dep-scanner.kind.js";
+/** Write the `DepScanReport` as the invocation's JSON document on stdout. */
+export async function writeDepScanReport(runtime, report) {
+    const parsed = DepScanReportSchema.parse(report);
+    await writeJson(runtime, parsed, { pretty: true });
+    return parsed;
+}
+/** Write one diagnostic line on the runtime's stderr. */
+export async function writeDiagnostic(runtime, message) {
+    (await getRuntimeStdio(runtime)).write('stderr', `${message}\n`);
+}
+//# sourceMappingURL=report-output.js.map

package/dist/cli/report-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report-output.js","sourceRoot":"","sources":["../../src/cli/report-output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,eAAe,EAAmB,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAsB,MAAM,8BAA8B,CAAC;AAEvF,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAmB,EAAE,MAAqB;IAClF,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAmB,EAAE,OAAe;IACzE,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;AAClE,CAAC"}

package/dist/cli/shield.cli-group.descriptor.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Shield CLI Group Descriptor
+ *
+ * Root group for the `shield` command suite bundled by apps/shield-cli.
+ */
+import type { CLIGroupAssetDescriptor } from '../implementations/cli-types.ts';
+declare const descriptor: CLIGroupAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=shield.cli-group.descriptor.d.ts.map

package/dist/cli/shield.cli-group.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield.cli-group.descriptor.d.ts","sourceRoot":"","sources":["../../src/cli/shield.cli-group.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE/E,QAAA,MAAM,UAAU,EAAE,uBAQjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/shield.cli-group.descriptor.js

@@ -0,0 +1,16 @@
+/**
+ * Shield CLI Group Descriptor
+ *
+ * Root group for the `shield` command suite bundled by apps/shield-cli.
+ */
+const descriptor = {
+    kind: 'cli/group',
+    id: 'shield',
+    name: 'shield',
+    description: 'Security shield — dependency scanning and policy gates',
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true,
+};
+export default descriptor;
+//# sourceMappingURL=shield.cli-group.descriptor.js.map

package/dist/cli/shield.cli-group.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield.cli-group.descriptor.js","sourceRoot":"","sources":["../../src/cli/shield.cli-group.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,UAAU,GAA4B;IAC3C,IAAI,EAAE,WAAW;IACjB,EAAE,EAAE,QAAQ;IACZ,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,wDAAwD;IACrE,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/shield.deps.cli-group.descriptor.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Shield Deps CLI Group Descriptor
+ *
+ * Subgroup for dependency-scanning commands (`shield deps scan|gate`).
+ */
+import type { CLIGroupAssetDescriptor } from '../implementations/cli-types.ts';
+declare const descriptor: CLIGroupAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=shield.deps.cli-group.descriptor.d.ts.map

package/dist/cli/shield.deps.cli-group.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield.deps.cli-group.descriptor.d.ts","sourceRoot":"","sources":["../../src/cli/shield.deps.cli-group.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE/E,QAAA,MAAM,UAAU,EAAE,uBASjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/shield.deps.cli-group.descriptor.js

@@ -0,0 +1,17 @@
+/**
+ * Shield Deps CLI Group Descriptor
+ *
+ * Subgroup for dependency-scanning commands (`shield deps scan|gate`).
+ */
+const descriptor = {
+    kind: 'cli/group',
+    id: 'shield.deps',
+    name: 'deps',
+    description: 'Scan and gate dependencies against known compromises',
+    parent: 'shield',
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true,
+};
+export default descriptor;
+//# sourceMappingURL=shield.deps.cli-group.descriptor.js.map

package/dist/cli/shield.deps.cli-group.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield.deps.cli-group.descriptor.js","sourceRoot":"","sources":["../../src/cli/shield.deps.cli-group.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,UAAU,GAA4B;IAC3C,IAAI,EAAE,WAAW;IACjB,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,sDAAsD;IACnE,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/shield.deps.gate.descriptor.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Shield Deps Gate CLI Command Descriptor
+ *
+ * `shield deps gate <path>` — scan a lockfile and exit non-zero unless the
+ * verdict is `clean` (for use in CI gates).
+ */
+import type { CLICommandAssetDescriptor } from '../implementations/cli-types.ts';
+declare const descriptor: CLICommandAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=shield.deps.gate.descriptor.d.ts.map

package/dist/cli/shield.deps.gate.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield.deps.gate.descriptor.d.ts","sourceRoot":"","sources":["../../src/cli/shield.deps.gate.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAEjF,QAAA,MAAM,UAAU,EAAE,yBAkBjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/shield.deps.gate.descriptor.js

@@ -0,0 +1,25 @@
+/**
+ * Shield Deps Gate CLI Command Descriptor
+ *
+ * `shield deps gate <path>` — scan a lockfile and exit non-zero unless the
+ * verdict is `clean` (for use in CI gates).
+ */
+const descriptor = {
+    kind: 'cli/command',
+    id: 'shield.deps.gate',
+    name: 'gate',
+    description: 'Exit non-zero if a scan finds compromise or stale versions',
+    group: 'shield.deps',
+    arguments: [
+        {
+            name: 'path',
+            description: 'Path to the lockfile / dependency manifest to scan',
+            required: true,
+        },
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true,
+};
+export default descriptor;
+//# sourceMappingURL=shield.deps.gate.descriptor.js.map

package/dist/cli/shield.deps.gate.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield.deps.gate.descriptor.js","sourceRoot":"","sources":["../../src/cli/shield.deps.gate.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,UAAU,GAA8B;IAC7C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,4DAA4D;IACzE,KAAK,EAAE,aAAa;IAEpB,SAAS,EAAE;QACV;YACC,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,oDAAoD;YACjE,QAAQ,EAAE,IAAI;SACd;KACD;IAED,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/shield.deps.gate.impl.consumer.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Shield Deps Gate CLI Command Implementation (consumer)
+ *
+ * Resolves the registered `security/dep-scanner` service, scans the given
+ * lockfile, and exits non-zero unless the verdict is `clean`. Suitable as a
+ * CI gate — a `compromised` or `unknown` verdict fails the build.
+ *
+ * The JSON report is always written before the exit is requested, so the CLI
+ * surface can drain it: a hard `process.exit` truncated reports in CI. Output
+ * goes through the handed runtime's host text output (see
+ * `./report-output.ts`).
+ */
+import type { CommandContext } from '@vibesdotdev/cli';
+declare const _default: {
+    execute(args: Record<string, string | boolean | undefined>, opts: Record<string, string | boolean | undefined>, context: Pick<CommandContext, "runtime">): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=shield.deps.gate.impl.consumer.d.ts.map

package/dist/cli/shield.deps.gate.impl.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield.deps.gate.impl.consumer.d.ts","sourceRoot":"","sources":["../../src/cli/shield.deps.gate.impl.consumer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;;kBAMlC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,QAAQ,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,WAAW,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;;AAD/K,wBA2BE"}

package/dist/cli/shield.deps.gate.impl.consumer.js

@@ -0,0 +1,42 @@
+/**
+ * Shield Deps Gate CLI Command Implementation (consumer)
+ *
+ * Resolves the registered `security/dep-scanner` service, scans the given
+ * lockfile, and exits non-zero unless the verdict is `clean`. Suitable as a
+ * CI gate — a `compromised` or `unknown` verdict fails the build.
+ *
+ * The JSON report is always written before the exit is requested, so the CLI
+ * surface can drain it: a hard `process.exit` truncated reports in CI. Output
+ * goes through the handed runtime's host text output (see
+ * `./report-output.ts`).
+ */
+import * as z from 'zod/v4';
+import { requestCLIExit } from '@vibesdotdev/cli/providers';
+import { readLockfile } from "./read-lockfile.js";
+import { writeDepScanReport, writeDiagnostic } from "./report-output.js";
+export default {
+    async execute(args, opts, context) {
+        const parsedPath = z.string().min(1).safeParse(args.path);
+        const { runtime } = context;
+        if (!parsedPath.success) {
+            await writeDiagnostic(runtime, 'shield deps gate: missing required <path> argument');
+            requestCLIExit(2);
+            return;
+        }
+        const path = parsedPath.data;
+        if (!runtime.hasKind('security/dep-scanner') || runtime.query('security/dep-scanner').enabled().descriptors().length === 0) {
+            await writeDiagnostic(runtime, 'shield deps gate: no dep scanner registered');
+            requestCLIExit(2);
+            return;
+        }
+        const scanner = await runtime.query('security/dep-scanner').enabled().resolve();
+        const manifest = await readLockfile(runtime, path);
+        const report = await writeDepScanReport(runtime, await scanner.scan(manifest));
+        if (report.verdict !== 'clean') {
+            await writeDiagnostic(runtime, `shield deps gate: verdict='${report.verdict}' — gate failed`);
+            requestCLIExit(1);
+        }
+        // Clean: return normally (exit 0) so the JSON report fully drains.
+    },
+};
+//# sourceMappingURL=shield.deps.gate.impl.consumer.js.map

package/dist/cli/shield.deps.gate.impl.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield.deps.gate.impl.consumer.js","sourceRoot":"","sources":["../../src/cli/shield.deps.gate.impl.consumer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGzE,eAAe;IACd,KAAK,CAAC,OAAO,CAAC,IAAkD,EAAE,IAAkD,EAAE,OAAwC;QAC7J,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,eAAe,CAAC,OAAO,EAAE,oDAAoD,CAAC,CAAC;YACrF,cAAc,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO;QACR,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAE7B,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5H,MAAM,eAAe,CAAC,OAAO,EAAE,6CAA6C,CAAC,CAAC;YAC9E,cAAc,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAA0C,sBAAsB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;QACzH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE/E,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAChC,MAAM,eAAe,CAAC,OAAO,EAAE,8BAA8B,MAAM,CAAC,OAAO,iBAAiB,CAAC,CAAC;YAC9F,cAAc,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QACD,mEAAmE;IACpE,CAAC;CACD,CAAC"}

package/dist/cli/shield.deps.scan.descriptor.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Shield Deps Scan CLI Command Descriptor
+ *
+ * `shield deps scan <path>` — scan a lockfile for compromised dependencies
+ * and emit the DepScanReport as JSON.
+ */
+import type { CLICommandAssetDescriptor } from '../implementations/cli-types.ts';
+declare const descriptor: CLICommandAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=shield.deps.scan.descriptor.d.ts.map

package/dist/cli/shield.deps.scan.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield.deps.scan.descriptor.d.ts","sourceRoot":"","sources":["../../src/cli/shield.deps.scan.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAEjF,QAAA,MAAM,UAAU,EAAE,yBAkBjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/shield.deps.scan.descriptor.js

@@ -0,0 +1,25 @@
+/**
+ * Shield Deps Scan CLI Command Descriptor
+ *
+ * `shield deps scan <path>` — scan a lockfile for compromised dependencies
+ * and emit the DepScanReport as JSON.
+ */
+const descriptor = {
+    kind: 'cli/command',
+    id: 'shield.deps.scan',
+    name: 'scan',
+    description: 'Scan a lockfile for compromised dependencies',
+    group: 'shield.deps',
+    arguments: [
+        {
+            name: 'path',
+            description: 'Path to the lockfile / dependency manifest to scan',
+            required: true,
+        },
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true,
+};
+export default descriptor;
+//# sourceMappingURL=shield.deps.scan.descriptor.js.map

package/dist/cli/shield.deps.scan.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield.deps.scan.descriptor.js","sourceRoot":"","sources":["../../src/cli/shield.deps.scan.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,UAAU,GAA8B;IAC7C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,8CAA8C;IAC3D,KAAK,EAAE,aAAa;IAEpB,SAAS,EAAE;QACV;YACC,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,oDAAoD;YACjE,QAAQ,EAAE,IAAI;SACd;KACD;IAED,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/shield.deps.scan.impl.consumer.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Shield Deps Scan CLI Command Implementation (consumer)
+ *
+ * Resolves the registered `security/dep-scanner` service, scans the given
+ * lockfile, and prints the DepScanReport as JSON.
+ *
+ * Output and diagnostics go through the handed runtime's host text output (see
+ * `./report-output.ts`), and the exit code is requested rather than taken, so a
+ * CI gate's stdout is never truncated.
+ */
+import type { CommandContext } from '@vibesdotdev/cli';
+declare const _default: {
+    execute(args: Record<string, string | boolean | undefined>, opts: Record<string, string | boolean | undefined>, context: Pick<CommandContext, "runtime">): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=shield.deps.scan.impl.consumer.d.ts.map

package/dist/cli/shield.deps.scan.impl.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield.deps.scan.impl.consumer.d.ts","sourceRoot":"","sources":["../../src/cli/shield.deps.scan.impl.consumer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;;kBAMlC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,QAAQ,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,WAAW,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;;AAD/K,wBAqBE"}