@visulima/vis 1.0.0-alpha.19 → 1.0.0-alpha.20

package/schemas/vis-config.schema.json

@@ -882,70 +882,379 @@
         "security": {
             "type": "object",
             "properties": {
-                "allowBuilds": {
+                "acceptedRisks": {
+                    "type": "object",
+                    "additionalProperties": {
+                        "type": "object",
+                        "properties": {
+                            "acceptedAt": {
+                                "type": "string",
+                                "description": "ISO 8601 timestamp when the risk was accepted."
+                            },
+                            "acceptedScore": {
+                                "type": "number",
+                                "description": "The overall Socket.dev score at the time of acceptance, in the range `[0, 1]` (mirrors `policies.score.minimum`). Only relevant for the `score` policy; ignored elsewhere."
+                            },
+                            "expiresAt": {
+                                "type": "string",
+                                "description": "ISO 8601 date (or datetime). After this point the acceptance stops applying and vis emits a warning. Leave undefined for non-expiring entries. Values that fail to parse as a Date are rejected by the loader rather than silently treated as \"always expired\"."
+                            },
+                            "policies": {
+                                "type": "array",
+                                "items": {
+                                    "$ref": "#/$defs/PolicyName"
+                                },
+                                "description": "Which policies this acceptance covers. When undefined the acceptance applies to every policy finding on this package."
+                            },
+                            "reason": {
+                                "type": "string",
+                                "description": "User-provided reason for accepting the risk."
+                            }
+                        },
+                        "required": [
+                            "acceptedAt",
+                            "reason"
+                        ],
+                        "additionalProperties": false
+                    },
+                    "description": "Packages whose policy findings have been reviewed and explicitly accepted. Matched against every policy unless `policies` narrows the scope. Replaces the legacy `security.socket.acceptedRisks` map.\n\nKey format: package name (`\"lodash\"`), name@version (`\"lodash@4.17.21\"`), or glob (`\"@myorg/*\"`). Unversioned keys match all versions of that package."
+                },
+                "audit": {
+                    "type": "object",
+                    "properties": {
+                        "advisories": {
+                            "type": "object",
+                            "properties": {
+                                "allowedHosts": {
+                                    "type": "array",
+                                    "items": {
+                                        "type": "string"
+                                    },
+                                    "description": "Extra hosts permitted as `audit.advisories.source`. The built-in allowlist is enforced even if this field is omitted; entries here add to it.",
+                                    "examples": [
+                                        [
+                                            "mirror.corp.example.com"
+                                        ]
+                                    ]
+                                },
+                                "refreshIntervalHours": {
+                                    "type": "number",
+                                    "description": "Number of hours after `lastSyncIso` before `vis audit` prints a \"your advisory cache may be stale\" notice. `vis audit` never auto-syncs — the user runs `vis advisories sync` themselves.",
+                                    "default": 24
+                                },
+                                "source": {
+                                    "type": "string",
+                                    "description": "OSV mirror base URL (no trailing slash). Defaults to the public Google Cloud Storage bucket. Override to point at a corporate mirror; the hostname must appear in `allowedHosts` (or one of the built-in defaults) and the scheme must be `https://`.",
+                                    "default": "https://osv-vulnerabilities.storage.googleapis.com"
+                                },
+                                "verify": {
+                                    "type": "object",
+                                    "properties": {
+                                        "enabled": {
+                                            "type": "boolean",
+                                            "description": "Enable signature verification. The sync flow downloads `<eco>/all.zip.sig` next to the zip and aborts if it cannot verify against `expectedIssuer` / `expectedSubject`.",
+                                            "default": false
+                                        },
+                                        "expectedIssuer": {
+                                            "type": "string",
+                                            "description": "OIDC issuer that signed the bundle."
+                                        },
+                                        "expectedSubject": {
+                                            "type": "string",
+                                            "description": "OIDC subject (workload identity) that signed the bundle."
+                                        }
+                                    },
+                                    "additionalProperties": false,
+                                    "description": "Sigstore signature verification for the OSV dump. Requires the native binding to be built with the `verify-signatures` Cargo feature (default in the release build). Off by default — the upstream OSV bucket does not ship signatures today."
+                                }
+                            },
+                            "additionalProperties": false,
+                            "description": "Offline advisory cache settings."
+                        },
+                        "apply": {
+                            "type": "object",
+                            "properties": {
+                                "transitive": {
+                                    "type": "object",
+                                    "properties": {
+                                        "enabled": {
+                                            "type": "boolean",
+                                            "description": "When true, allows `--fix-transitive` to run in CI environments. Defaults to false because rewriting overrides is a higher blast radius than bumping a direct dep.",
+                                            "default": false
+                                        }
+                                    },
+                                    "additionalProperties": false,
+                                    "description": "Gates for `vis audit --fix-transitive`. Two-lock: the CLI requires `--yes` AND this flag set to `true` before it will rewrite override entries in CI."
+                                }
+                            },
+                            "additionalProperties": false,
+                            "description": "Gates for the auto-fix flow (`vis audit --fix` / `--fix-transitive`). The CLI prompts outside CI; inside CI the flags refuse to run unless `--yes` is set and, for transitives, `apply.transitive.enabled = true`."
+                        },
+                        "offlineByDefault": {
+                            "type": "boolean",
+                            "description": "When true, `vis audit` skips network calls and queries the offline cache. Equivalent to the CLI `--offline` flag.",
+                            "default": false
+                        }
+                    },
+                    "additionalProperties": false,
+                    "description": "Offline OSV advisory + `vis audit` configuration.\n\nControls `vis audit --offline` and `vis advisories sync` behavior:\n- `audit.advisories.source` is the OSV mirror to download from. It   must be `https://` and resolve to a host in `allowedHosts` (or one   of the built-in defaults).\n- `audit.offlineByDefault` flips the default of `--offline`.\n\nVulnerability severity gating and reachability filtering live under `policies.vulnerability` (see below)."
+                },
+                "allowBins": {
                     "type": "object",
                     "additionalProperties": {
                         "type": "boolean"
                     },
-                    "description": "Map of package names/patterns to allow (true) or deny (false) build scripts. Packages not listed are denied by default. Equivalent to pnpm's `allowBuilds` setting."
+                    "description": "Map of bin names (or `pkg#bin` qualifiers) blessed for shadowing. When two installed packages expose the same bin name, vis flags the collision in `vis security list` and the post-install drift report — set the bin (or `pkg#bin`) to `true` here to suppress the warning once you've reviewed the conflict.\n\nPort of LavaMoat allow-scripts' experimental `allowBins`. Bare names match any conflicting bin with that name; the `pkg#bin` form scopes the approval to a single package's bin."
                 },
                 "blockExoticSubdeps": {
                     "type": "boolean",
                     "description": "When true, prevents transitive dependencies from using exotic sources (git repositories, direct tarball URLs). Only direct dependencies may use such sources. Equivalent to pnpm's `blockExoticSubdeps`.",
                     "default": false
                 },
-                "minimumReleaseAge": {
-                    "type": "number",
-                    "description": "Minimum number of minutes that must pass after a version is published before vis will allow installation. Reduces risk of installing compromised packages that are typically discovered within hours. Equivalent to pnpm's `minimumReleaseAge`.",
-                    "examples": [
-                        1440
-                    ],
-                    "default": 0
-                },
-                "minimumReleaseAgeExclude": {
-                    "type": "array",
-                    "items": {
-                        "type": "string"
-                    },
-                    "description": "Package names/patterns excluded from minimumReleaseAge check. Equivalent to pnpm's `minimumReleaseAgeExclude`.",
-                    "examples": [
-                        [
-                            "webpack",
-                            "react",
-                            "@myorg/*"
-                        ]
-                    ]
+                "pinVersions": {
+                    "type": "boolean",
+                    "description": "When true, `security.policies.installScripts.allow` keys are matched as `name@version`. A version bump on an approved package drops it from the allowlist until the new version is explicitly re-approved (port of LavaMoat allow-scripts' version-aware policy matcher).\n\nAfter a version bump, run `vis approve-builds` or `vis security list` — both surface a \"Version drift\" block with the suggested new key (`old-key  →  new-key`) so you can update `vis.config.ts` by hand.",
+                    "default": false
                 },
-                "socket": {
+                "policies": {
                     "type": "object",
                     "properties": {
-                        "acceptedRisks": {
+                        "firstSeen": {
                             "type": "object",
-                            "additionalProperties": {
-                                "type": "object",
-                                "properties": {
-                                    "acceptedAt": {
-                                        "type": "string",
-                                        "description": "ISO 8601 timestamp when the risk was accepted."
+                            "properties": {
+                                "exclude": {
+                                    "type": "array",
+                                    "items": {
+                                        "type": "string"
                                     },
-                                    "acceptedScore": {
-                                        "type": "number",
-                                        "description": "The overall Socket.dev score at the time of acceptance."
+                                    "description": "Package names/patterns excluded from the firstSeen check. Equivalent to pnpm's `minimumReleaseAgeExclude`.",
+                                    "examples": [
+                                        [
+                                            "webpack",
+                                            "react",
+                                            "@myorg/*"
+                                        ]
+                                    ]
+                                },
+                                "minutes": {
+                                    "type": "number",
+                                    "description": "Minutes after publish before install is allowed."
+                                }
+                            },
+                            "additionalProperties": false,
+                            "description": "Minimum number of minutes that must pass after a version is published before vis will allow installation. Migrated from the legacy `security.minimumReleaseAge` field. Equivalent to pnpm's `minimumReleaseAge`.",
+                            "examples": [
+                                {
+                                    "minutes": 1440,
+                                    "exclude": [
+                                        "@myorg/*"
+                                    ]
+                                }
+                            ],
+                            "default": 0
+                        },
+                        "installScripts": {
+                            "type": "object",
+                            "properties": {
+                                "allow": {
+                                    "type": "object",
+                                    "additionalProperties": {
+                                        "type": "boolean"
                                     },
-                                    "reason": {
-                                        "type": "string",
-                                        "description": "User-provided reason for accepting the risk."
-                                    }
+                                    "description": "Map of package names/patterns to allow (true) or deny (false) build scripts. Packages not listed are denied by default. Equivalent to pnpm's `allowBuilds`."
                                 },
-                                "required": [
-                                    "acceptedAt",
-                                    "acceptedScore",
-                                    "reason"
-                                ],
-                                "additionalProperties": false
+                                "strict": {
+                                    "type": "boolean",
+                                    "description": "When true, installation will fail (exit non-zero) if any dependencies have unreviewed build scripts. Equivalent to pnpm's `strictDepBuilds`.",
+                                    "default": false
+                                }
+                            },
+                            "additionalProperties": false,
+                            "description": "Build-script (pre/install/postinstall/prepare) controls. Migrated from the legacy `security.allowBuilds` / `security.strictDepBuilds` fields.",
+                            "examples": [
+                                {
+                                    "allow": {
+                                        "esbuild": true
+                                    },
+                                    "strict": true
+                                }
+                            ]
+                        },
+                        "license": {
+                            "type": "object",
+                            "properties": {
+                                "allow": {
+                                    "type": "array",
+                                    "items": {
+                                        "type": "string"
+                                    },
+                                    "description": "SPDX identifiers that are explicitly permitted. When set, any package whose declared license is not on this list is blocked."
+                                },
+                                "deny": {
+                                    "type": "array",
+                                    "items": {
+                                        "type": "string"
+                                    },
+                                    "description": "SPDX identifiers that are explicitly forbidden. Always wins over `allow` when both reference the same identifier."
+                                }
+                            },
+                            "additionalProperties": false,
+                            "description": "SPDX license allow / deny lists. Deny wins on any sub-license match in SPDX expressions (`(MIT OR GPL-3.0)` against `deny: [\"GPL-3.0\"]` is blocked). Packages with no declared license are flagged when `allow` is set."
+                        },
+                        "malware": {
+                            "type": "object",
+                            "properties": {
+                                "mode": {
+                                    "type": "string",
+                                    "enum": [
+                                        "block",
+                                        "off",
+                                        "warn"
+                                    ],
+                                    "description": "- `\"block\"` — emit a block decision.\n- `\"warn\"`  — surface as a warning; do not gate exit code.\n- `\"off\"`   — disable the policy entirely."
+                                }
+                            },
+                            "additionalProperties": false,
+                            "description": "Behavior when the Socket.dev feed flags a package as malicious (`alerts[].type === \"Malware\"`).\n\nThe default is cross-field: `{ mode: \"block\" }` whenever `security.socket.enabled !== false` (the engine cannot evaluate malware without Socket data), and `\"off\"` otherwise. Consumers resolve this default at evaluation time."
+                        },
+                        "publisherChange": {
+                            "type": "object",
+                            "properties": {
+                                "exclude": {
+                                    "type": "array",
+                                    "items": {
+                                        "type": "string"
+                                    },
+                                    "description": "Package selectors excluded from the check. Equivalent to pnpm's `trustPolicyExclude`.",
+                                    "examples": [
+                                        [
+                                            "chokidar@4.0.3"
+                                        ]
+                                    ]
+                                },
+                                "ignoreAfter": {
+                                    "type": "number",
+                                    "description": "Ignore packages published more than N minutes ago. Useful for older packages that pre-date provenance support. Equivalent to pnpm's `trustPolicyIgnoreAfter`."
+                                },
+                                "mode": {
+                                    "type": "string",
+                                    "enum": [
+                                        "no-downgrade",
+                                        "off"
+                                    ],
+                                    "description": "- `\"off\"`           — no trust checking (default).\n- `\"no-downgrade\"`  — block when a package's trust level   has decreased compared to previous releases (e.g., was   published by trusted publisher, now only has provenance)."
+                                }
+                            },
+                            "additionalProperties": false,
+                            "description": "Trust-level checking for package publishing. Migrated from the legacy `security.trustPolicy*` fields. Equivalent to pnpm's `trustPolicy`.",
+                            "examples": [
+                                {
+                                    "mode": "no-downgrade",
+                                    "ignoreAfter": 43200
+                                }
+                            ]
+                        },
+                        "score": {
+                            "type": "object",
+                            "properties": {
+                                "minimum": {
+                                    "type": "number",
+                                    "description": "Minimum overall Socket.dev score (0–1). Set to 0 to disable the gate while keeping Socket data fetched.\n\nConsulted by `vis add`, `audit`, `doctor`, `check`, and `update`; resolved once in `buildSocketOptions`, then threaded through every consumer. Falls back to `DEFAULT_LOW_SCORE_THRESHOLD` (`0.4`) when unset."
+                                }
                             },
-                            "description": "Packages whose low Socket.dev scores or alerts have been reviewed and explicitly accepted. These packages skip the confirmation prompt during `vis add` and show as \"acknowledged\" in `vis audit`.\n\nKey format: package name (`\"lodash\"`), name@version (`\"lodash@4.17.21\"`), or glob (`\"@myorg/*\"`). Unversioned keys match all versions of that package."
+                            "additionalProperties": false,
+                            "description": "Socket.dev overall-score threshold. Packages scoring below `minimum` trigger a block decision (or interactive prompt during `vis add`). Migrated from the legacy `security.socket.minimumScore` field.",
+                            "examples": [
+                                {
+                                    "minimum": 0.4
+                                }
+                            ]
                         },
+                        "unexpectedDeps": {
+                            "type": "object",
+                            "properties": {
+                                "allow": {
+                                    "type": "array",
+                                    "items": {
+                                        "type": "string"
+                                    },
+                                    "description": "Allow-list of dependency names that may appear in the resolved package set. Glob patterns are supported.",
+                                    "examples": [
+                                        [
+                                            "lodash",
+                                            "axios",
+                                            "@myorg/*"
+                                        ]
+                                    ]
+                                },
+                                "baselineLockfile": {
+                                    "type": "string",
+                                    "description": "Path (absolute or relative to the workspace root) to a baseline lockfile snapshot. The policy diffs the current lockfile against this baseline and flags any package that didn't exist before.",
+                                    "examples": [
+                                        "./security/lockfile.baseline.yaml"
+                                    ]
+                                }
+                            },
+                            "additionalProperties": false,
+                            "description": "Net-new transitive dependency detection. Either provide a static allow-list, a baseline lockfile path (recommended), or both — the intersection is enforced.",
+                            "examples": [
+                                {
+                                    "baselineLockfile": "./security/lockfile.baseline.yaml"
+                                }
+                            ]
+                        },
+                        "vulnerability": {
+                            "type": "object",
+                            "properties": {
+                                "failOn": {
+                                    "type": "string",
+                                    "enum": [
+                                        "critical",
+                                        "high",
+                                        "low",
+                                        "medium"
+                                    ],
+                                    "description": "Severity threshold that makes `vis audit` exit non-zero. Equivalent to the CLI `--fail-on` flag.",
+                                    "examples": [
+                                        "high"
+                                    ]
+                                },
+                                "usage": {
+                                    "type": "object",
+                                    "properties": {
+                                        "alwaysAssumeUsed": {
+                                            "type": "array",
+                                            "items": {
+                                                "type": "string"
+                                            },
+                                            "description": "Packages to always treat as reachable even if no static import is found.",
+                                            "examples": [
+                                                [
+                                                    "esbuild",
+                                                    "webpack-cli"
+                                                ]
+                                            ]
+                                        },
+                                        "enabled": {
+                                            "type": "boolean",
+                                            "description": "Enable the reachability filter by default. Equivalent to `--usage` on the CLI; `--no-usage` disables.",
+                                            "default": false
+                                        }
+                                    },
+                                    "additionalProperties": false,
+                                    "description": "Reachability filter — only report vulnerabilities in packages the workspace statically imports."
+                                }
+                            },
+                            "additionalProperties": false,
+                            "description": "OSV vulnerability gating. Migrated from the legacy `security.audit.failOn` + `security.audit.usage` fields."
+                        }
+                    },
+                    "additionalProperties": false,
+                    "description": "Supply-chain policy gates. Each sub-block enables one policy and configures its behavior. When a sub-block is omitted the policy is inactive. `acceptedRisks` (above) silences specific packages without disabling a policy globally.\n\nThe 8 policies are inspired by Socket.dev's classification:\n- `malware`            — Socket-flagged malicious packages\n- `firstSeen`         — packages published less than N minutes ago\n- `unexpectedDeps`    — packages outside an allow-list / baseline\n- `publisherChange`   — maintainer set changed between installs\n- `installScripts`    — preinstall/install/postinstall scripts\n- `score`              — Socket overall score below threshold\n- `vulnerability`      — OSV vulnerability findings\n- `license`            — SPDX allow / deny lists"
+                },
+                "socket": {
+                    "type": "object",
+                    "properties": {
                         "apiToken": {
                             "type": "string",
                             "description": "Custom Socket.dev API token. Falls back to the public API token. Set via VIS_SOCKET_TOKEN environment variable or here."
@@ -960,11 +1269,6 @@
                             "description": "Enable Socket.dev security scanning on install/update/check commands.",
                             "default": false
                         },
-                        "minimumScore": {
-                            "type": "number",
-                            "description": "Minimum overall Socket.dev score (0–1) for a package to be accepted without a confirmation prompt during `vis add`. Packages scoring below this threshold trigger an interactive prompt asking the user to confirm. Set to 0 to disable.",
-                            "default": 0.4
-                        },
                         "timeoutMs": {
                             "type": "number",
                             "description": "Request timeout in milliseconds for the Socket.dev API.",
@@ -972,41 +1276,219 @@
                         }
                     },
                     "additionalProperties": false,
-                    "description": "Socket.dev security intelligence configuration. When enabled, vis fetches package security scores, alerts, and report data from the Socket.dev API during install, update, and check commands."
-                },
-                "strictDepBuilds": {
-                    "type": "boolean",
-                    "description": "When true, installation will fail (exit non-zero) if any dependencies have unreviewed build scripts. Equivalent to pnpm's `strictDepBuilds`.",
-                    "default": false
-                },
-                "trustPolicy": {
-                    "type": "string",
-                    "enum": [
-                        "no-downgrade",
-                        "off"
-                    ],
-                    "description": "Trust level checking for package publishing.\n- \"off\": No trust checking (default)\n- \"no-downgrade\": Fail if a package's trust level has decreased   compared to previous releases (e.g., was published by trusted   publisher, now only has provenance). Equivalent to pnpm's `trustPolicy`.",
-                    "default": "off"
+                    "description": "Socket.dev data-source configuration. Connection knobs only — score thresholds and accepted-risk overrides moved to `policies.score` and `security.acceptedRisks` respectively."
                 },
-                "trustPolicyExclude": {
-                    "type": "array",
-                    "items": {
-                        "type": "string"
+                "marshalls": {
+                    "type": "object",
+                    "properties": {
+                        "archivedRepo": {
+                            "type": "object",
+                            "properties": {
+                                "allowlist": {
+                                    "type": "array",
+                                    "items": {
+                                        "type": "string"
+                                    },
+                                    "description": "Package names to skip."
+                                },
+                                "enabled": {
+                                    "type": "boolean",
+                                    "description": "Default: marshall is on. Set false to disable."
+                                },
+                                "githubToken": {
+                                    "type": "string",
+                                    "description": "GitHub PAT for the API call (5k/hr vs 60/hr)."
+                                }
+                            },
+                            "additionalProperties": false,
+                            "description": "Archived-repo marshall (GitHub repository status)."
+                        },
+                        "author": {
+                            "type": "object",
+                            "properties": {
+                                "allowlist": {
+                                    "type": "array",
+                                    "items": {
+                                        "type": "string"
+                                    }
+                                },
+                                "dormantErrorDays": {
+                                    "type": "number",
+                                    "description": "Days since the publisher's last release before flagging as error."
+                                },
+                                "dormantWarnDays": {
+                                    "type": "number",
+                                    "description": "Days since the publisher's last release before flagging as warning."
+                                },
+                                "enabled": {
+                                    "type": "boolean"
+                                },
+                                "newPublisherWindowDays": {
+                                    "type": "number",
+                                    "description": "Window for the \"new publisher on an established package\" check."
+                                },
+                                "recentVersionErrorDays": {
+                                    "type": "number",
+                                    "description": "Days since the resolved version was published — error threshold."
+                                },
+                                "recentVersionWarnDays": {
+                                    "type": "number",
+                                    "description": "Days since the resolved version was published — warning threshold."
+                                }
+                            },
+                            "additionalProperties": false,
+                            "description": "Author / publisher heuristics."
+                        },
+                        "downloads": {
+                            "type": "object",
+                            "properties": {
+                                "allowlist": {
+                                    "type": "array",
+                                    "items": {
+                                        "type": "string"
+                                    }
+                                },
+                                "enabled": {
+                                    "type": "boolean"
+                                },
+                                "errorThreshold": {
+                                    "type": "number",
+                                    "description": "Below this monthly count → error (default: 20)."
+                                },
+                                "warnThreshold": {
+                                    "type": "number",
+                                    "description": "Below this monthly count → warning (default: 1000)."
+                                }
+                            },
+                            "additionalProperties": false,
+                            "description": "Monthly download-count floor."
+                        },
+                        "expiredDomains": {
+                            "type": "object",
+                            "properties": {
+                                "allowDomains": {
+                                    "type": "array",
+                                    "items": {
+                                        "type": "string"
+                                    },
+                                    "description": "Domains exempted from the check (legacy / internal)."
+                                },
+                                "allowlist": {
+                                    "type": "array",
+                                    "items": {
+                                        "type": "string"
+                                    }
+                                },
+                                "dnsServers": {
+                                    "type": "array",
+                                    "items": {
+                                        "type": "string"
+                                    },
+                                    "description": "DNS resolvers to query (default: system)."
+                                },
+                                "enabled": {
+                                    "type": "boolean"
+                                },
+                                "timeoutMs": {
+                                    "type": "number",
+                                    "description": "Per-domain DNS timeout (default: 5000)."
+                                }
+                            },
+                            "additionalProperties": false,
+                            "description": "Maintainer-email-domain NS lookup."
+                        },
+                        "metadata": {
+                            "type": "object",
+                            "properties": {
+                                "allowlist": {
+                                    "type": "array",
+                                    "items": {
+                                        "type": "string"
+                                    }
+                                },
+                                "checks": {
+                                    "type": "array",
+                                    "items": {
+                                        "type": "string",
+                                        "enum": [
+                                            "license",
+                                            "readme",
+                                            "repo"
+                                        ]
+                                    },
+                                    "description": "Subset of checks to run. Default: all three."
+                                },
+                                "enabled": {
+                                    "type": "boolean"
+                                }
+                            },
+                            "additionalProperties": false,
+                            "description": "README / license / repository presence checks."
+                        },
+                        "newBin": {
+                            "type": "object",
+                            "properties": {
+                                "allowlist": {
+                                    "type": "array",
+                                    "items": {
+                                        "type": "string"
+                                    }
+                                },
+                                "enabled": {
+                                    "type": "boolean"
+                                }
+                            },
+                            "additionalProperties": false,
+                            "description": "New CLI-bin script introduced in this version."
+                        },
+                        "provenance": {
+                            "type": "object",
+                            "properties": {
+                                "allowlist": {
+                                    "type": "array",
+                                    "items": {
+                                        "type": "string"
+                                    }
+                                },
+                                "enabled": {
+                                    "type": "boolean"
+                                }
+                            },
+                            "additionalProperties": false,
+                            "description": "Provenance regression check."
+                        },
+                        "signatures": {
+                            "type": "object",
+                            "properties": {
+                                "allowlist": {
+                                    "type": "array",
+                                    "items": {
+                                        "type": "string"
+                                    }
+                                },
+                                "enabled": {
+                                    "type": "boolean",
+                                    "description": "Default: marshall is *off*. Set true to enable."
+                                },
+                                "keysUrl": {
+                                    "type": "string",
+                                    "description": "Override the keys endpoint (default: npm registry)."
+                                },
+                                "treatExpiredAs": {
+                                    "type": "string",
+                                    "enum": [
+                                        "error",
+                                        "warning"
+                                    ],
+                                    "description": "How to treat an expired-but-known key. Default: \"warning\"."
+                                }
+                            },
+                            "additionalProperties": false,
+                            "description": "ECDSA P-256 verification against npm's signing keys. Disabled by default because npm coverage still has gaps that produce noisy warnings on legitimate packages."
+                        }
                     },
-                    "description": "Package selectors excluded from trust policy checks. Equivalent to pnpm's `trustPolicyExclude`.",
-                    "examples": [
-                        [
-                            "chokidar@4.0.3",
-                            "@babel/core@7.28.5"
-                        ]
-                    ]
-                },
-                "trustPolicyIgnoreAfter": {
-                    "type": "number",
-                    "description": "Ignore the trust policy check for packages published more than the specified number of minutes ago. Useful for older packages that pre-date provenance support. Equivalent to pnpm's `trustPolicyIgnoreAfter` (10.27+).",
-                    "examples": [
-                        43200
-                    ]
+                    "additionalProperties": false,
+                    "description": "Pre-install marshall pipeline — packument-derived supply-chain gates (author, provenance, new-bin, metadata, downloads, expired-domains, signatures, archived-repo) that run before `vis add` / `vis install <pkg>` / `vis update <pkg>` hand off to the underlying package manager. Every entry is optional; omit a key and the marshall runs with defaults. Set `enabled: false` on a specific marshall to skip it without touching env vars."
                 },
                 "typosquatAllowlist": {
                     "type": "array",
@@ -1078,7 +1560,7 @@
             "description": "When `true`, every task command is scanned for `${VAR}` / `$VAR` references before spawn. If a referenced var is unset in the task's effective env (envFile + service env + per-task `env` + `process.env`), the task fails with an actionable error naming the missing variable, instead of letting the shell silently substitute an empty string.\n\nOverride per run with `--strict-env` / `--no-strict-env`. Override per target with `options.strictEnv`.",
             "default": false
         },
-        "targetDefaults": {
+        "tasks": {
             "type": "object",
             "additionalProperties": {
                 "type": "object",
@@ -1589,14 +2071,14 @@
                 },
                 "additionalProperties": false
             },
-            "description": "Target default configurations"
+            "description": "Workspace-wide task defaults keyed by target name. Applied universally to every project that exposes a matching target. Use `scopedTasks` when defaults should only apply to a subset of projects."
         },
-        "taskDefaults": {
+        "scopedTasks": {
             "type": "array",
             "items": {
-                "$ref": "#/$defs/TaskDefaultsBlock"
+                "$ref": "#/$defs/ScopedTasksBlock"
             },
-            "description": "Cascading task-default blocks. Each block may scope its targets to a subset of projects via `scope`. Blocks are evaluated in order; later blocks override earlier ones when the same field is set.\n\nScope matching is additive — if `scope` is omitted, the block applies to every project."
+            "description": "Cascading scoped-task blocks. Each block may narrow its tasks to a subset of projects via `match`. Blocks are evaluated in order; later blocks override earlier ones when the same field is set.\n\nMatch predicates are additive — if `match` is omitted, the block applies to every project."
         },
         "taskGroups": {
             "type": "object",
@@ -1652,7 +2134,7 @@
             },
             "description": "Named bundles of target dependencies, referenceable from any task's `dependsOn`. `dependsOn: [{ group: \"lint\" }]` expands to every entry in the named group; nested groups are resolved recursively and a cycle raises during discovery."
         },
-        "taskRunnerOptions": {
+        "taskRunner": {
             "type": "object",
             "properties": {
                 "autoEnvVars": {
@@ -2456,7 +2938,7 @@
                 }
             },
             "additionalProperties": false,
-            "description": "Task runner options forwarded verbatim to `defaultTaskRunner`.\n\nIncludes `remoteCache` (HTTP or REAPI gRPC backend), `cacheDirectory`, `parallel`, `globalEnv`, `globalInputs`, `targetDefaults`, etc. See `TaskRunnerOptions` for the full surface."
+            "description": "Task runner options forwarded verbatim to `defaultTaskRunner`.\n\nIncludes `remoteCache` (HTTP or REAPI gRPC backend), `cacheDirectory`, `parallel`, `globalEnv`, `globalInputs`, etc. See `TaskRunnerOptions` for the full surface."
         },
         "toolchain": {
             "type": "object",
@@ -2890,6 +3372,19 @@
             "additionalProperties": false,
             "description": "One family of upstream-coupled packages.\n\n`members` is an exact-match list. `prefixes` accept any dep whose name starts with the prefix — useful for monorepos that ship many subpackages under one scope (e.g. `@babel/`, `@storybook/`, `@nx/`). A family can use either or both; a dep matching either list belongs to the family."
         },
+        "PolicyName": {
+            "type": "string",
+            "enum": [
+                "firstSeen",
+                "installScripts",
+                "license",
+                "malware",
+                "publisherChange",
+                "score",
+                "unexpectedDeps",
+                "vulnerability"
+            ]
+        },
         "StagedConfig": {
             "type": "object",
             "additionalProperties": {
@@ -3143,14 +3638,14 @@
             ],
             "description": "Semantic classification for a target.\n- `build`: Generates one or more artifacts; cached by default.\n- `test`: Validation task (lint, typecheck, unit test). Default type.\n- `run`: One-off or long-running process. Not cached by default."
         },
-        "TaskDefaultsBlock": {
+        "ScopedTasksBlock": {
             "type": "object",
             "properties": {
-                "scope": {
-                    "$ref": "#/$defs/TaskDefaultsScope",
-                    "description": "Optional scope predicate; if omitted, the block applies universally."
+                "match": {
+                    "$ref": "#/$defs/ScopedTasksMatch",
+                    "description": "Optional match predicate; if omitted, the block applies universally."
                 },
-                "targets": {
+                "tasks": {
                     "type": "object",
                     "additionalProperties": {
                         "type": "object",
@@ -3661,16 +4156,16 @@
                         },
                         "additionalProperties": false
                     },
-                    "description": "Target default configurations."
+                    "description": "Task default configurations, keyed by target name."
                 }
             },
             "required": [
-                "targets"
+                "tasks"
             ],
             "additionalProperties": false,
-            "description": "A single task-defaults block — a set of target defaults gated by an optional scope predicate."
+            "description": "A single scoped-tasks block — a set of task defaults gated by an optional match predicate."
         },
-        "TaskDefaultsScope": {
+        "ScopedTasksMatch": {
             "type": "object",
             "properties": {
                 "language": {
@@ -3805,7 +4300,7 @@
                 }
             },
             "additionalProperties": false,
-            "description": "A scope predicate used by  {@link  VisConfig.taskDefaults } . All listed constraints must match for the block to apply."
+            "description": "A predicate used by  {@link  VisConfig.scopedTasks } . All listed constraints must match for the block to apply."
         }
     }
 }