@westbayberry/dg 2.3.3 → 2.3.4

package/dist/commands/sbom.js

@@ -2,7 +2,9 @@ import { createHash, randomUUID } from "node:crypto";
 import { basename, resolve } from "node:path";
 import { writeReportAtomic } from "../util/report-writer.js";
 import { discoverScanProjects, SBOM_LOCKFILE_ECOSYSTEMS } from "../scan/collect.js";
-import { buildCycloneDxSbom, collectSbomComponents, readRootComponent } from "../sbom/cyclonedx.js";
+import { bomRefOf, buildCycloneDxSbom, collectSbomComponents, readRootComponent } from "../sbom/cyclonedx.js";
+import { buildDependencyGraph, SBOM_ROOT_REF } from "../sbom/graph.js";
+import { sanitizeLine } from "../security/sanitize.js";
 import { resolvePresentation } from "../presentation/mode.js";
 import { createTheme } from "../presentation/theme.js";
 import { buildSbomRows } from "../sbom-ui/inventory.js";
@@ -17,12 +19,12 @@ export const sbomCommand = {
     flags: [
         { flag: "--output", value: "<path>", summary: "Write the document to a file without opening the interactive view (alias -o)." },
         { flag: "--json", summary: "Print the raw CycloneDX document to stdout instead of the interactive view." },
-        { flag: "--reproducible", summary: "Byte-stable output: derive the serial number from the components and drop the timestamp (honors SOURCE_DATE_EPOCH)." }
+        { flag: "--reproducible", summary: "Byte-stable output: derive the serial number from the components and pin the timestamp to SOURCE_DATE_EPOCH (or drop it when that is unset)." }
     ],
     examples: ["dg sbom", "dg sbom -o sbom.cdx.json", "dg sbom --json | cyclonedx validate", "dg sbom --reproducible"],
     details: [
-        "Reads the project's lockfiles and inventories every resolved dependency as a CycloneDX 1.5 component with its purl, license, and integrity hash.",
-        "In a terminal it opens an interactive view: the inventory appears immediately, then dg's scanner runs over the npm and PyPI components and fills in a BLOCK/WARN/PASS verdict per package — malware, provenance downgrades, and cooldown — while cargo stays inventory only. Browse with the arrow keys, search with /, filter with f, and press w to write the document. Signing in unlocks verdicts; without it the view shows the inventory alone.",
+        "Reads the project's lockfiles and inventories each resolved dependency as a CycloneDX 1.5 component with its purl, plus the declared license and integrity hash when the lockfile records them. npm and Cargo lockfiles also yield the dependency graph (which package pulls in which); unpinned dependencies are reported on stderr and left out.",
+        "In a terminal it opens an interactive view: the inventory appears immediately, then dg's scanner runs over the npm and PyPI components and fills in a BLOCK/WARN/PASS verdict per package — malware, provenance downgrades, and cooldown — while cargo stays inventory only. Browse with the arrow keys, search with /, filter with f, and press e to export the document. Signing in unlocks verdicts; without it the view shows the inventory alone.",
         "Piped, with -o, or with --json it stays offline and prints the raw CycloneDX document so you can attach it to a release or feed any CycloneDX-aware tool — no scan, no account needed. Use --reproducible (or set SOURCE_DATE_EPOCH) for identical bytes across runs so a committed SBOM diffs cleanly."
     ],
     handler: (context) => runSbomCommand(context)
@@ -37,11 +39,24 @@ export function runSbomCommand(context, cwd = process.cwd(), now = new Date(), e
     const { components, dropped } = collectSbomComponents(projects);
     const rootComponent = readRootComponent(root);
     const reproducible = parsed.reproducible || env.SOURCE_DATE_EPOCH !== undefined;
+    const componentRefs = new Set(components.map((component) => bomRefOf(component)));
+    const dependencies = buildDependencyGraph(projects, componentRefs);
+    const graphable = projects.length > 0 &&
+        projects.every((project) => project.depFile === "package-lock.json" ||
+            project.depFile === "npm-shrinkwrap.json" ||
+            project.depFile === "Cargo.lock");
+    const completeness = dropped.length === 0 && graphable && dependencies.length > 0 ? "complete" : "incomplete";
+    const rootSubject = rootComponent.component ??
+        (dependencies.some((dependency) => dependency.ref === SBOM_ROOT_REF)
+            ? { name: sanitizeLine(basename(root)) || "root" }
+            : undefined);
     const bom = buildCycloneDxSbom(components, {
         ...timestampOption(reproducible, now, env),
         serialNumber: "urn:uuid:00000000-0000-0000-0000-000000000000",
         toolVersion: dgVersion(),
-        ...(rootComponent.component ? { rootComponent: rootComponent.component } : {})
+        dependencies,
+        completeness,
+        ...(rootSubject ? { rootComponent: rootSubject } : {})
     });
     const finalBom = {
         ...bom,

package/dist/commands/scan.js

@@ -2,18 +2,19 @@ import { runScanCommand } from "../scan/command.js";
 export const scanCommand = {
     name: "scan",
     summary: "Scan a project and show Dependency Guardian findings.",
-    usage: "dg scan [path] [--json|--sarif] [--output <path>]",
+    usage: "dg scan [path] [--json|--sarif] [--output <path>] [--fail-on <block|warn|never>]",
     args: [{ name: "[path]", summary: "Project directory or a package.json to scan (default: current directory)." }],
     flags: [
         { flag: "--json", summary: "Machine-readable JSON report." },
         { flag: "--sarif", summary: "SARIF report for code-scanning tools." },
         { flag: "--output", value: "<path>", summary: "Write the report to a file instead of stdout (alias -o)." },
-        { flag: "--staged", summary: "Scan only the git-staged lockfile changes (what dg guard-commit runs)." },
+        { flag: "--fail-on", value: "<block|warn|never>", summary: "Exit non-zero at or above this level (default: block; never suppresses block/warn exit codes, but analysis-incomplete still exits 4)." },
+        { flag: "--staged", summary: "Scan only the git-staged lockfile changes (what dg commit-guard runs)." },
         { flag: "--no-decisions", summary: "Ignore acceptances remembered in dg.json (see dg decisions)." }
     ],
-    examples: ["dg scan", "dg scan ./packages/api", "dg scan --json -o scan.json", "dg scan --staged"],
+    examples: ["dg scan", "dg scan ./packages/api", "dg scan --json -o scan.json", "dg scan --sarif -o scan.sarif --fail-on never"],
     details: [
-        "Reads lockfiles, scores each dependency through the scanner, and never changes project files. In a terminal it opens the full-screen results browser; piped or with --json/--sarif it prints machine output. Exit codes: 0 clean, 1 warn, 2 block, 4 analysis incomplete, 10 nothing to scan, 64 usage error."
+        "Reads lockfiles, scores each dependency through the scanner, and never changes project files. Requires sign-in — run dg login. In a terminal it opens the full-screen results browser; piped or with --json/--sarif it prints machine output. Exit codes: 0 clean (warn counts as clean under the default --fail-on block), 1 warn with --fail-on warn, 2 block, 4 analysis incomplete, 10 nothing to scan, 64 usage error. Use --fail-on never so a block or warn verdict exits 0; analysis-incomplete (4), nothing-to-scan (10), and a rejected key (64) still exit non-zero, so a broken scan fails loudly instead of uploading an empty report. Add if: always() to the SARIF-upload step so it runs even when dg exits non-zero."
     ],
     handler: runScanCommand
 };

package/dist/commands/service.js

@@ -497,7 +497,7 @@ function serviceDoctorChecks(state) {
         {
             name: "service-proxy",
             status: state.running && state.proxy ? "pass" : state.lastError?.startsWith("stale service runtime state") ? "fail" : "warn",
-            message: state.running && state.proxy ? `Persistent service proxy listening at ${state.proxy.proxyUrl}` : state.lastError ?? "Service proxy is not running"
+            message: state.running && state.proxy ? `Service proxy listening at ${state.proxy.proxyUrl} for this login session (not restarted after reboot or logout)` : state.lastError ?? "Service proxy is not running"
         },
         {
             name: "health-endpoint",

package/dist/commands/setup.js

@@ -15,19 +15,19 @@ import { markSecurityNotesShown, securityNotesShown } from "../setup-ui/gate.js"
 export const setupCommand = {
     name: "setup",
     summary: "Protect this machine — shell installs, AI-agent installs, and a repo's commits.",
-    usage: "dg setup [--print] [--yes] [--agents] [--guard-commit] [--shell <auto|zsh|bash|fish>] [--service]",
+    usage: "dg setup [--print] [--yes] [--agents] [--commit-guard] [--shell <auto|zsh|bash|fish>] [--service]",
     flags: [
         { flag: "--print", summary: "Preview the exact write plan and change nothing." },
-        { flag: "--yes", summary: "Apply the shell firewall only, without prompts (add --agents / --guard-commit to opt in the rest)." },
+        { flag: "--yes", summary: "Apply the shell firewall only, without prompts (add --agents / --commit-guard to opt in the rest)." },
         { flag: "--agents", summary: "With --yes: also route every detected AI agent's installs through dg." },
-        { flag: "--guard-commit", summary: "With --yes: also scan this repo's commits (per-repo)." },
+        { flag: "--commit-guard", summary: "With --yes: also scan this repo's commits (per-repo)." },
         { flag: "--shell", value: "<auto|zsh|bash|fish>", summary: "Target shell rc to write (default: auto-detect)." },
-        { flag: "--service", summary: "Set up service mode (Pro/Team; persistent proxy + managed CA)." }
+        { flag: "--service", summary: "Set up service mode (Pro/Team; long-running local proxy for this login session + managed CA)." }
     ],
     examples: ["dg setup", "dg setup --print", "dg setup --yes --agents", "dg setup --shell zsh --yes"],
     details: [
         "In a terminal it shows one consent screen listing everything it will protect — your shell's installs plus every detected AI agent, with the exact files it writes — and applies them on a single yes. Commits in the current repo are a separate per-repo question.",
-        "Non-interactively, --yes applies just the shell firewall; add --agents and/or --guard-commit to opt those in. --print previews. Writes only dg-owned reversible files; undo it all with dg uninstall."
+        "Non-interactively, --yes applies just the shell firewall; add --agents and/or --commit-guard to opt those in. --print previews. Writes only dg-owned reversible files; undo it all with dg uninstall."
     ],
     handler: (context) => setupHandler(context.args)
 };
@@ -234,7 +234,7 @@ async function applyRequestedSurfaces(parsed) {
             }
         }
     }
-    if (parsed.guardCommit) {
+    if (parsed.commitGuard) {
         const repo = commitGuardOffer();
         if (repo) {
             try {
@@ -254,7 +254,7 @@ function printableSurfaceOffers() {
         lines.push(`would offer: route ${offer.label} installs through dg (--agents)`);
     }
     if (commitGuardOffer()) {
-        lines.push("would offer: scan this repo's commits (--guard-commit)");
+        lines.push("would offer: scan this repo's commits (--commit-guard)");
     }
     return lines.length > 0 ? `\n${lines.join("\n")}\n` : "";
 }
@@ -335,7 +335,7 @@ function parseSetupArgs(args) {
     let shell = "auto";
     let service = false;
     let agents = false;
-    let guardCommit = false;
+    let commitGuard = false;
     for (let index = 0; index < args.length; index += 1) {
         const arg = args[index];
         if (arg === "--print") {
@@ -350,8 +350,8 @@ function parseSetupArgs(args) {
         else if (arg === "--agents") {
             agents = true;
         }
-        else if (arg === "--guard-commit") {
-            guardCommit = true;
+        else if (arg === "--commit-guard") {
+            commitGuard = true;
         }
         else if (arg === "--python-hook" || arg?.startsWith("--python-hook=")) {
             return {
@@ -362,7 +362,7 @@ function parseSetupArgs(args) {
         else if (arg === "--git-hooks") {
             return {
                 exitCode: EXIT_USAGE,
-                error: "dg setup --git-hooks moved — run 'dg guard-commit' inside the repo you want to protect.\n"
+                error: "dg setup --git-hooks moved — run 'dg commit-guard' inside the repo you want to protect.\n"
             };
         }
         else if (arg === "--shell") {
@@ -419,7 +419,7 @@ function parseSetupArgs(args) {
         shell,
         service,
         agents,
-        guardCommit
+        commitGuard
     };
 }
 function parseShell(value) {

package/dist/commands/status.js

@@ -64,7 +64,7 @@ async function buildStatusReport(io) {
 async function fetchStatusUsage(connected, io) {
     const token = connected ? resolveStatusToken() : undefined;
     if (!token) {
-        return { state: "anonymous" };
+        return { state: "signed-out" };
     }
     const account = await fetchAccountStatus(token, process.env, io.fetchImpl ?? fetch, io.usageTimeoutMs ?? STATUS_USAGE_TIMEOUT_MS);
     if (!account || account.scansUsed === null) {
@@ -131,7 +131,7 @@ function renderStatus(report, theme) {
     return `${lines.join("\n")}\n`;
 }
 function usageLine(report, theme) {
-    if (report.usage.state === "anonymous") {
+    if (report.usage.state === "signed-out") {
         return theme.paint("muted", "sign in to see usage");
     }
     if (report.usage.state === "unavailable") {
@@ -147,7 +147,7 @@ function commitGuardLine(state, theme) {
         return `${theme.paint("pass", "✓")} this repo's commits are scanned`;
     }
     if (state === "dead") {
-        return `${theme.paint("warn", "⚠")} installed but git isn't using it — run ${theme.paint("accent", "dg guard-commit --check")}`;
+        return `${theme.paint("warn", "⚠")} installed but git isn't using it — run ${theme.paint("accent", "dg commit-guard --check")}`;
     }
-    return `${theme.paint("warn", "⚠")} off — run ${theme.paint("accent", "dg guard-commit")}`;
+    return `${theme.paint("warn", "⚠")} off — run ${theme.paint("accent", "dg commit-guard")}`;
 }

package/dist/commands/uninstall.js

@@ -8,7 +8,7 @@ export const uninstallCommand = {
     usage: "dg uninstall [--yes] [--service] [--all] [--keep-config]",
     flags: [
         { flag: "--yes", summary: "Remove without the confirmation prompt." },
-        { flag: "--keep-config", summary: "Keep ~/.dg config and cache." },
+        { flag: "--keep-config", summary: "Keep the saved login too (the default removes it; config.json is kept either way unless --all)." },
         { flag: "--all", summary: "Also remove the config directory — a full wipe." },
         { flag: "--service", summary: "Reverse only service-mode writes." }
     ],

package/dist/commands/update.js

@@ -1,7 +1,24 @@
 import { spawnSync } from "node:child_process";
+import { mkdirSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
 import { toolInvocation } from "../util/external-tool.js";
+import { resolveDgPaths } from "../state/index.js";
 import { EXIT_USAGE } from "./types.js";
 import { dgVersion } from "./version.js";
+// `dg update` only prints the npm command; the user runs the upgrade manually,
+// during which dg is briefly unavailable. Drop a freshness-stamped sentinel the
+// shim's fail-open self-cleanup honors (15-min window) so a slow `npm install -g`
+// is not mistaken for an uninstall and self-cleaned mid-upgrade.
+function markUpgradeWindow() {
+    try {
+        const dgHome = join(resolveDgPaths().homeDir, ".dg");
+        mkdirSync(dgHome, { recursive: true, mode: 0o700 });
+        writeFileSync(join(dgHome, ".upgrading"), "", { encoding: "utf8", mode: 0o600 });
+    }
+    catch {
+        // best-effort: a missing sentinel only restores the prior 60s-debounce behavior
+    }
+}
 const PACKAGE_NAME = "@westbayberry/dg";
 const VERSION_PATTERN = /^\d+\.\d+\.\d+(-[0-9A-Za-z.-]+)?$/u;
 export const updateCommand = {
@@ -24,6 +41,9 @@ function runUpdateCommand(args, commandName) {
     }
     const latestVersion = readLatestVersion();
     const report = buildUpdateReport(latestVersion);
+    if (report.updateCommand) {
+        markUpgradeWindow();
+    }
     if (parsed.format === "json") {
         return {
             exitCode: report.status === "unknown" ? 1 : 0,

package/dist/commands/verify.js

@@ -1,4 +1,4 @@
-import { EXIT_ANALYSIS_INCOMPLETE, EXIT_UNAVAILABLE, EXIT_USAGE_VERDICT } from "./types.js";
+import { EXIT_ANALYSIS_INCOMPLETE, EXIT_TOOL_ERROR, EXIT_UNAVAILABLE, EXIT_USAGE_VERDICT } from "./types.js";
 import { writeFileSync } from "node:fs";
 import { existsSync } from "node:fs";
 import { resolve } from "node:path";
@@ -22,8 +22,8 @@ export const verifyCommand = {
     ],
     examples: ["dg verify npm:react", "dg verify pypi:requests@2.31.0", "dg verify ./pkg.tgz --verbose", "dg verify package-lock.json --json"],
     details: [
-        "dg verify npm:react (or pypi:requests, with an optional @version — defaults to latest) runs a real scanner check on a published package before you install it. Signed-out runs show the verdict and top reasons; dg login unlocks full findings, license info, --json, and --output.",
-        "Local paths, workspaces, tgz/zip/wheel artifacts, and lockfiles are verified offline as advisory preflight (free); proxy enforcement remains authoritative for network artifact fetches."
+        "dg verify npm:react (or pypi:requests, with an optional @version — defaults to latest) runs a real scanner check on a published package before you install it. Registry checks require sign-in — run dg login.",
+        "Local paths, workspaces, tgz/zip/wheel artifacts, and lockfiles are verified offline as advisory preflight (no account needed); proxy enforcement remains authoritative for network artifact fetches."
     ],
     handler: (context) => {
         const parsed = parseVerifyArgs(context.args);
@@ -52,7 +52,7 @@ export const verifyCommand = {
             }
             catch (error) {
                 return {
-                    exitCode: EXIT_ANALYSIS_INCOMPLETE,
+                    exitCode: EXIT_TOOL_ERROR,
                     stdout: "",
                     stderr: `dg verify could not write ${parsed.outputPath}: ${error instanceof Error ? error.message : "unknown write error"}\n`
                 };

package/dist/config/settings.js

@@ -11,8 +11,10 @@ export const CONFIG_KEYS = Object.freeze([
     "policy.scriptHardening",
     "policy.shimFailClosed",
     "policy.strictEgress",
+    "policy.allowNonVendorApiHost",
+    "policy.provenanceDowngrade",
     "scriptGate.mode",
-    "scriptGate.observe",
+    "scriptGate.persistObservations",
     "gitHook.onWarn",
     "gitHook.onIncomplete",
     "cooldown.age",
@@ -37,11 +39,13 @@ export const DEFAULT_CONFIG = Object.freeze({
         allowForceOverride: true,
         scriptHardening: false,
         shimFailClosed: false,
-        strictEgress: false
+        strictEgress: false,
+        allowNonVendorApiHost: false,
+        provenanceDowngrade: "off"
     },
     scriptGate: {
         mode: "observe",
-        observe: false
+        persistObservations: false
     },
     gitHook: {
         onWarn: "prompt",
@@ -146,11 +150,17 @@ export function getConfigValue(config, key) {
     if (key === "policy.strictEgress") {
         return String(config.policy.strictEgress);
     }
+    if (key === "policy.allowNonVendorApiHost") {
+        return String(config.policy.allowNonVendorApiHost);
+    }
+    if (key === "policy.provenanceDowngrade") {
+        return config.policy.provenanceDowngrade;
+    }
     if (key === "scriptGate.mode") {
         return config.scriptGate.mode;
     }
-    if (key === "scriptGate.observe") {
-        return String(config.scriptGate.observe);
+    if (key === "scriptGate.persistObservations") {
+        return String(config.scriptGate.persistObservations);
     }
     if (key === "gitHook.onWarn") {
         return config.gitHook.onWarn;
@@ -183,7 +193,8 @@ export const ADVANCED_CONFIG_KEYS = new Set([
     "policy.scriptHardening",
     "policy.shimFailClosed",
     "policy.strictEgress",
-    "scriptGate.observe",
+    "policy.provenanceDowngrade",
+    "scriptGate.persistObservations",
     "cooldown.npm.age",
     "cooldown.pypi.age",
     "cooldown.cargo.age"
@@ -199,7 +210,7 @@ export function setConfigValue(config, key, rawValue) {
         return {
             ...config,
             api: {
-                baseUrl: parseUrl(rawValue)
+                baseUrl: assertVendorApiBaseUrl(parseUrl(rawValue), config.policy.allowNonVendorApiHost)
             }
         };
     }
@@ -235,6 +246,25 @@ export function setConfigValue(config, key, rawValue) {
     if (key === "policy.strictEgress") {
         return withPolicyBoolean(config, "strictEgress", rawValue);
     }
+    if (key === "policy.allowNonVendorApiHost") {
+        const next = withPolicyBoolean(config, "allowNonVendorApiHost", rawValue);
+        if (!next.policy.allowNonVendorApiHost) {
+            const host = new URL(next.api.baseUrl).hostname;
+            if (!isVendorApiHost(host)) {
+                throw new ConfigError(`cannot disable policy.allowNonVendorApiHost while api.baseUrl points at the self-hosted host ${host}; reset api.baseUrl to a vendor host (or unset it) first`);
+            }
+        }
+        return next;
+    }
+    if (key === "policy.provenanceDowngrade") {
+        return {
+            ...config,
+            policy: {
+                ...config.policy,
+                provenanceDowngrade: parseProvenanceDowngradeMode(rawValue)
+            }
+        };
+    }
     if (key === "scriptGate.mode") {
         return {
             ...config,
@@ -244,12 +274,12 @@ export function setConfigValue(config, key, rawValue) {
             }
         };
     }
-    if (key === "scriptGate.observe") {
+    if (key === "scriptGate.persistObservations") {
         return {
             ...config,
             scriptGate: {
                 ...config.scriptGate,
-                observe: parseBoolean(rawValue, key)
+                persistObservations: parseBoolean(rawValue, key)
             }
         };
     }
@@ -317,7 +347,7 @@ function normalizeConfig(raw) {
     const cooldown = fieldObject(raw, "cooldown");
     const audit = fieldObject(raw, "audit");
     const scriptHardening = fieldBoolean(policy, "policy.scriptHardening", "scriptHardening") ?? DEFAULT_CONFIG.policy.scriptHardening;
-    return {
+    const normalized = {
         version: 1,
         api: {
             baseUrl: parseUrl(fieldString(api, "api.baseUrl", "baseUrl") ?? DEFAULT_CONFIG.api.baseUrl)
@@ -331,11 +361,15 @@ function normalizeConfig(raw) {
             allowForceOverride: fieldBoolean(policy, "policy.allowForceOverride", "allowForceOverride") ?? DEFAULT_CONFIG.policy.allowForceOverride,
             scriptHardening,
             shimFailClosed: fieldBoolean(policy, "policy.shimFailClosed", "shimFailClosed") ?? DEFAULT_CONFIG.policy.shimFailClosed,
-            strictEgress: fieldBoolean(policy, "policy.strictEgress", "strictEgress") ?? DEFAULT_CONFIG.policy.strictEgress
+            strictEgress: fieldBoolean(policy, "policy.strictEgress", "strictEgress") ?? DEFAULT_CONFIG.policy.strictEgress,
+            allowNonVendorApiHost: fieldBoolean(policy, "policy.allowNonVendorApiHost", "allowNonVendorApiHost") ?? DEFAULT_CONFIG.policy.allowNonVendorApiHost,
+            provenanceDowngrade: parseProvenanceDowngradeMode(fieldString(policy, "policy.provenanceDowngrade", "provenanceDowngrade") ?? DEFAULT_CONFIG.policy.provenanceDowngrade)
         },
         scriptGate: {
             mode: parseScriptGateMode(fieldString(scriptGate, "scriptGate.mode", "mode") ?? (scriptHardening ? "enforce" : DEFAULT_CONFIG.scriptGate.mode)),
-            observe: fieldBoolean(scriptGate, "scriptGate.observe", "observe") ?? DEFAULT_CONFIG.scriptGate.observe
+            persistObservations: fieldBoolean(scriptGate, "scriptGate.persistObservations", "persistObservations") ??
+                fieldBoolean(scriptGate, "scriptGate.observe", "observe") ??
+                DEFAULT_CONFIG.scriptGate.persistObservations
         },
         gitHook: {
             onWarn: parseOnWarn(fieldString(gitHook, "gitHook.onWarn", "onWarn") ?? DEFAULT_CONFIG.gitHook.onWarn),
@@ -353,6 +387,8 @@ function normalizeConfig(raw) {
             upload: fieldBoolean(audit, "audit.upload", "upload") ?? DEFAULT_CONFIG.audit.upload
         }
     };
+    assertVendorApiBaseUrl(normalized.api.baseUrl, normalized.policy.allowNonVendorApiHost);
+    return normalized;
 }
 function fieldObject(root, field) {
     const value = root[field];
@@ -417,6 +453,12 @@ function parsePolicyMode(value) {
     }
     throw new ConfigError("policy.mode must be one of: off, warn, block, strict");
 }
+function parseProvenanceDowngradeMode(value) {
+    if (value === "off" || value === "warn" || value === "block") {
+        return value;
+    }
+    throw new ConfigError("policy.provenanceDowngrade must be one of: off, warn, block");
+}
 function parseScriptGateMode(value) {
     if (value === "observe" || value === "enforce" || value === "off") {
         return value;
@@ -500,3 +542,30 @@ export function parseUrl(value) {
         throw new ConfigError("api.baseUrl must be an absolute URL");
     }
 }
+// The vendor API host the CLI ships to — derived from the default so there is one
+// source of truth, never a duplicated literal. localhost stays usable for dev.
+export const VENDOR_API_HOST = new URL(DEFAULT_CONFIG.api.baseUrl).hostname;
+export function isVendorApiHost(host) {
+    return host === VENDOR_API_HOST || host === "localhost" || host === "127.0.0.1";
+}
+// The CLI attaches a Bearer token to and trusts scan verdicts from this base URL,
+// so a non-vendor host (a tampered config / auth file, an env-set login base, an
+// unpinned MITM) would leak the token and could return action:pass for malware.
+// Refuse it unless the operator opted into a self-hosted API in their own global
+// config (policy.allowNonVendorApiHost) — a project/repo cannot set that field.
+export function assertVendorApiBaseUrl(baseUrl, allowNonVendor) {
+    if (allowNonVendor) {
+        return baseUrl;
+    }
+    let host;
+    try {
+        host = new URL(baseUrl).hostname;
+    }
+    catch {
+        throw new ConfigError("api.baseUrl must be an absolute URL");
+    }
+    if (!isVendorApiHost(host)) {
+        throw new ConfigError(`api.baseUrl host ${host} is not a Dependency Guardian vendor host; set policy.allowNonVendorApiHost=true to use a self-hosted API`);
+    }
+    return baseUrl;
+}

package/dist/export-ui/ExportDialog.js

@@ -6,7 +6,7 @@ import { existsSync, readdirSync } from "node:fs";
 import { basename, join, resolve, sep } from "node:path";
 import { exportDestinations, resolveExportPath, userHomeDir, writeReportAtomic } from "../util/report-writer.js";
 export function loginRequiredToast() {
-    return `${chalk.yellow("Sign in to export:")} ${chalk.cyan.bold("dg login")} ${chalk.dim("(free account)")}`;
+    return `${chalk.yellow("Sign in to export:")} ${chalk.cyan.bold("dg login")}`;
 }
 const PATH_DISPLAY_MAX = 48;
 function cursorBeforeExtension(name) {

package/dist/gate/cooldown-request.js

@@ -0,0 +1,22 @@
+import { cooldownRequestParam, isCooldownExemptByDgFile } from "../policy/cooldown.js";
+import { DEFAULT_CONFIG, loadUserConfig } from "../config/settings.js";
+export function resolveCooldownRequest(options, identity) {
+    if (identity.ecosystem === "unknown" || identity.version === "unknown") {
+        return undefined;
+    }
+    if (isCooldownExemptByDgFile(identity.name, identity.ecosystem, options.cooldownExemptions ?? [])) {
+        return undefined;
+    }
+    // A corrupt user config must not silently disable the cooldown gate — fall back
+    // to defaults (24h age + onUnknown=block) so the gate still applies, consistent
+    // with the rest of the policy stack. undefined stays reserved for the legitimate
+    // disabled/exempt cases cooldownRequestParam itself returns.
+    let config;
+    try {
+        config = loadUserConfig(options.env);
+    }
+    catch {
+        config = DEFAULT_CONFIG;
+    }
+    return cooldownRequestParam(config, options.env, identity.ecosystem, identity.name);
+}