1# deepsec23This directory holds the [deepsec](https://www.npmjs.com/package/deepsec)4config for the parent repo. Checked into git so teammates inherit5project context (auth shape, threat model, custom matchers); generated6scan output is gitignored.78Currently configured project: `peach-browser` (target: `..`).910## Setup11121. `pnpm install` — installs deepsec.132. Add an AI Gateway / Anthropic / OpenAI token to `.env.local`. If14 you already have `claude` or `codex` CLI logged in on this15 machine, you can skip the token for non-sandbox runs (`process` /16 `revalidate` / `triage`); deepsec auto-detects and reuses the17 subscription. See18 `node_modules/deepsec/dist/docs/vercel-setup.md` after install.193. Open the parent repo in your coding agent (Claude Code, Cursor, …)20 and have it follow `data/peach-browser/SETUP.md` to fill in21 `data/peach-browser/INFO.md`.2223## Daily commands2425```bash26pnpm deepsec scan27pnpm deepsec process --concurrency 528pnpm deepsec revalidate --concurrency 5 29pnpm deepsec export --format md-dir --out ./findings30```3132`--project-id` is auto-resolved while there's only one project in33`deepsec.config.ts`. Once you've added a second project, pass34`--project-id peach-browser` (or whichever id you want) explicitly.3536`scan` is free (regex only). `process` is the AI stage (≈$0.30/file37on Opus by default). Run state goes to `data/peach-browser/`.3839## Adding another project4041To scan another codebase from this same `.deepsec/`:4243```bash44pnpm deepsec init-project ../some-other-package 45```4647Appends an entry to `deepsec.config.ts` and writes48`data/<id>/{INFO.md,SETUP.md,project.json}`. Open the new SETUP.md49in your agent to fill in INFO.md.5051## Layout5253```54deepsec.config.ts Project list (one entry per scanned repo)55data/peach-browser/56 INFO.md Repo context — checked into git, hand-curated57 SETUP.md Agent setup prompt — checked in, deletable58 project.json Generated (gitignored)59 files/ One JSON per scanned source file (gitignored)60 runs/ Run metadata (gitignored)61 reports/ Generated markdown reports (gitignored)62AGENTS.md Pointer for coding agents63.env.local Tokens (gitignored)64```6566## Docs6768After `pnpm install`:6970- Skill: `node_modules/deepsec/SKILL.md`71- Full docs: `node_modules/deepsec/dist/docs/{getting-started,configuration,models,writing-matchers,plugins,architecture,data-layout,vercel-setup,faq}.md`7273Or browse on74[GitHub](https://github.com/vercel/deepsec/tree/main/docs).