@vibesdotdev/security 0.0.0-stage → 1.0.0-rc.5

package/docs/scanner-work.md

@@ -0,0 +1,29 @@
+# Built-in scanner work bound
+
+The admitted input is at most 262,144 UTF-16 units. The fixed rule set makes
+O(n) work in input length, with constants determined by the shipped rules;
+this claim does not extend to arbitrary redactor patterns.
+
+- Credential and password rules start with fixed literal prefixes. Their
+  whitespace runs cannot contain another prefix. Credential value characters
+  are disjoint from delimiters and quotes. Password values have no failing
+  suffix and consume the entire non-whitespace run on success.
+- Provider and GitHub tokens have fixed prefixes and fixed-length bodies.
+- SSN and passport rules have fixed maximum match lengths.
+- Email attempts inspect at most 64 local-part and 126 domain units before
+  the final dot. The trailing alphabetic run has no failing suffix: successful
+  matches consume it. Failed starts therefore inspect a fixed-size window.
+- Instruction overrides start with a fixed verb and consume disjoint whitespace
+  and modifier words. Modifiers cannot contain another starting verb. The
+  repeated alternatives have distinct words; whitespace cannot match a word.
+  Persona and system-prompt rules likewise alternate distinct fixed words
+  and whitespace, which cannot contain another start.
+- Markup uses a fixed opening-prefix search followed by one terminator search.
+  A success advances past the terminator; a missing terminator ends that rule.
+  Neither case retries the same unterminated suffix.
+
+Rules use fresh match state per call. Category order, non-overlapping matches
+within each rule, rule identifiers and original UTF-16 spans are preserved.
+The public runtime scan tests exercise long nonmatches, incomplete instruction
+sequences, credential prefixes, unterminated markup, and nested opening markup.
+The work argument comes from these traversals, not timing measurements.

package/package.json

@@ -1,6 +1,247 @@
 {
   "name": "@vibesdotdev/security",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.0-rc.5",
+  "dependencies": {
+    "@vibesdotdev/logging": "^1.0.0-rc.5",
+    "zod": "^4.6.7",
+    "@vibesdotdev/crypto": "^1.0.0-rc.3"
+  },
+  "peerDependencies": {
+    "@opentui/react": "^0.5.17",
+    "@types/bun": "^1.4.3",
+    "@types/react": "^19.3.0",
+    "@vibesdotdev/cli": "^1.0.0-rc.0",
+    "@vibesdotdev/kit": "^1.0.0-rc.0",
+    "@vibesdotdev/paths": "^1.0.0-rc.0",
+    "@vibesdotdev/kernel": "^1.0.0-rc.0",
+    "@vibesdotdev/testing": "^1.0.0-rc.0",
+    "@vibesdotdev/tui": "^1.0.0-rc.0",
+    "react": "^19.3.1",
+    "svelte": "^5.57.2",
+    "typescript": "^6.0.3",
+    "@vibesdotdev/filesystem": "^1.0.0-rc.0"
+  },
+  "main": "./dist/index.js",
+  "exports": {
+    ".": {
+      "bun": "./dist/index.js",
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./encryption": {
+      "bun": "./dist/implementations/encryption.js",
+      "types": "./dist/implementations/encryption.d.ts",
+      "import": "./dist/implementations/encryption.js",
+      "default": "./dist/implementations/encryption.js"
+    },
+    "./schemas/encryption": {
+      "bun": "./dist/schemas/encryption.js",
+      "types": "./dist/schemas/encryption.d.ts",
+      "import": "./dist/schemas/encryption.js",
+      "default": "./dist/schemas/encryption.js"
+    },
+    "./plugin": {
+      "bun": "./dist/security.plugin.js",
+      "types": "./dist/security.plugin.d.ts",
+      "import": "./dist/security.plugin.js",
+      "default": "./dist/security.plugin.js"
+    },
+    "./consumer.plugin": {
+      "bun": "./dist/security.consumer.plugin.js",
+      "types": "./dist/security.consumer.plugin.d.ts",
+      "import": "./dist/security.consumer.plugin.js",
+      "default": "./dist/security.consumer.plugin.js"
+    },
+    "./client": {
+      "bun": "./dist/security-client/index.js",
+      "types": "./dist/security-client/index.d.ts",
+      "import": "./dist/security-client/index.js",
+      "default": "./dist/security-client/index.js"
+    },
+    "./client/*": {
+      "bun": "./dist/security-client/*.js",
+      "types": "./dist/security-client/*.d.ts",
+      "import": "./dist/security-client/*.js",
+      "default": "./dist/security-client/*.js"
+    },
+    "./schemas": {
+      "bun": "./dist/schemas/index.js",
+      "types": "./dist/schemas/index.d.ts",
+      "import": "./dist/schemas/index.js",
+      "default": "./dist/schemas/index.js"
+    },
+    "./schemas/*": {
+      "bun": "./dist/schemas/*.js",
+      "types": "./dist/schemas/*.d.ts",
+      "import": "./dist/schemas/*.js",
+      "default": "./dist/schemas/*.js"
+    },
+    "./helpers": {
+      "bun": "./dist/helpers/index.js",
+      "types": "./dist/helpers/index.d.ts",
+      "import": "./dist/helpers/index.js",
+      "default": "./dist/helpers/index.js"
+    },
+    "./helpers/*": {
+      "bun": "./dist/helpers/*.js",
+      "types": "./dist/helpers/*.d.ts",
+      "import": "./dist/helpers/*.js",
+      "default": "./dist/helpers/*.js"
+    },
+    "./tools": {
+      "bun": "./dist/tools/index.js",
+      "types": "./dist/tools/index.d.ts",
+      "import": "./dist/tools/index.js",
+      "default": "./dist/tools/index.js"
+    },
+    "./tools/*": {
+      "bun": "./dist/tools/*/index.js",
+      "types": "./dist/tools/*/index.d.ts",
+      "import": "./dist/tools/*/index.js",
+      "default": "./dist/tools/*/index.js"
+    },
+    "./cli": {
+      "bun": "./dist/cli/index.js",
+      "types": "./dist/cli/index.d.ts",
+      "import": "./dist/cli/index.js",
+      "default": "./dist/cli/index.js"
+    },
+    "./cli/plugin": {
+      "bun": "./dist/cli/plugin.js",
+      "types": "./dist/cli/plugin.d.ts",
+      "import": "./dist/cli/plugin.js",
+      "default": "./dist/cli/plugin.js"
+    },
+    "./svelte": {
+      "bun": "./dist/svelte/index.js",
+      "types": "./dist/svelte/index.d.ts",
+      "svelte": "./dist/svelte/index.js",
+      "import": "./dist/svelte/index.js",
+      "default": "./dist/svelte/index.js"
+    },
+    "./svelte/plugin": {
+      "bun": "./dist/svelte/security-svelte.plugin.js",
+      "types": "./dist/svelte/security-svelte.plugin.d.ts",
+      "import": "./dist/svelte/security-svelte.plugin.js",
+      "default": "./dist/svelte/security-svelte.plugin.js"
+    },
+    "./svelte/styles.css": {
+      "style": "./dist/svelte/styles.css",
+      "bun": "./dist/svelte/styles.css",
+      "default": "./dist/svelte/styles.css"
+    },
+    "./svelte/tool-widgets": {
+      "bun": "./dist/svelte/tool-widgets/index.js",
+      "types": "./dist/svelte/tool-widgets/index.d.ts",
+      "svelte": "./dist/svelte/tool-widgets/index.js",
+      "import": "./dist/svelte/tool-widgets/index.js",
+      "default": "./dist/svelte/tool-widgets/index.js"
+    },
+    "./tui": {
+      "bun": "./dist/tui/index.js",
+      "types": "./dist/tui/index.d.ts",
+      "import": "./dist/tui/index.js",
+      "default": "./dist/tui/index.js"
+    },
+    "./tui/plugin": {
+      "bun": "./dist/tui/security-tui.plugin.js",
+      "types": "./dist/tui/security-tui.plugin.d.ts",
+      "import": "./dist/tui/security-tui.plugin.js",
+      "default": "./dist/tui/security-tui.plugin.js"
+    },
+    "./kinds": {
+      "bun": "./dist/kinds/index.js",
+      "types": "./dist/kinds/index.d.ts",
+      "import": "./dist/kinds/index.js",
+      "default": "./dist/kinds/index.js"
+    },
+    "./kinds/*": {
+      "bun": "./dist/kinds/*.js",
+      "types": "./dist/kinds/*.d.ts",
+      "import": "./dist/kinds/*.js",
+      "default": "./dist/kinds/*.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "docs/host-boundary.md",
+    "docs/scanner-work.md",
+    "!dist/**/__tests__/**",
+    "!dist/**/__stubs__/**",
+    "!dist/**/*.test.js",
+    "!dist/**/*.test.js.map",
+    "!dist/**/*.test.d.ts",
+    "!dist/**/*.test.d.ts.map",
+    "!dist/**/*.spec.js",
+    "!dist/**/*.spec.js.map",
+    "!dist/**/*.spec.d.ts",
+    "!dist/**/*.spec.d.ts.map",
+    "!dist/**/*.tsbuildinfo"
+  ],
+  "scripts": {
+    "lint": "node ../node_modules/@vibesdotdev/internal-oxlint-toolchain/ratchet.mjs .",
+    "test": "${BUN:-bun} test src",
+    "check": "${BUN:-bun} --bun tsc -p config/tsconfig.check.json --noEmit && ${BUN:-bun} --bun svelte-check --tsconfig ./config/tsconfig.svelte.check.json",
+    "build": "rm -rf dist && tsc -p config/tsconfig.core.json && ${BUN:-bun} --bun svelte-package --input ./src/svelte --output ./dist/svelte --tsconfig ./tsconfig.json && rm -rf dist/svelte/__tests__ && find dist/svelte -name '*.test.*' -delete && find dist/svelte -name '*.spec.*' -delete"
+  },
+  "repository": {
+    "type": "git",
+    "url": "ssh://git@git.vibes.dev/vibesdotdev/framework.git",
+    "directory": "security"
+  },
+  "publishConfig": {
+    "registry": "https://packages.vibes.dev",
+    "access": "public"
+  },
+  "vibes": {
+    "visibility": "public",
+    "registry": {
+      "repositoryId": "4b1374d4-6830-4bfd-98e3-de66416368a8",
+      "directory": "security"
+    }
+  },
+  "type": "module",
+  "types": "./dist/index.d.ts",
+  "peerDependenciesMeta": {
+    "@opentui/react": {
+      "optional": true
+    },
+    "@types/bun": {
+      "optional": true
+    },
+    "@types/react": {
+      "optional": true
+    },
+    "@vibesdotdev/cli": {
+      "optional": true
+    },
+    "@vibesdotdev/kit": {
+      "optional": true
+    },
+    "@vibesdotdev/testing": {
+      "optional": true
+    },
+    "@vibesdotdev/tui": {
+      "optional": true
+    },
+    "react": {
+      "optional": true
+    },
+    "svelte": {
+      "optional": true
+    },
+    "typescript": {
+      "optional": true
+    }
+  },
+  "license": "MIT",
+  "gitHead": "f1ff526c235b10c970497738beb16b0651c428c8",
+  "_vibes_source": {
+    "repo": "ssh://git@git.vibes.dev/vibesdotdev/framework.git",
+    "sha": "f1ff526c235b10c970497738beb16b0651c428c8",
+    "workspaceDigest": "sha256:a2386350963b841ec3821fc30caf13e0d0e846005949f33223eb0994f4187997"
+  }
+}