Quick Start

# Run a script — no permissions granted by default
3va run app.ts        # or: 3va r app.ts
 
# Grant specific capabilities
3va run app.ts --allow-net=api.example.com --allow-read=./data
 
# Install packages
3va install express --allow-net=registry.npmjs.org   # or: 3va i express …
 
# Audit the dependency tree
3va audit --secrets
 
# Start as a background daemon
3va start app.js --name my-api

3va permissions suggest          # static analysis of source files → suggested flags
3va permissions learn app.ts     # run with all permissions, report which were used