diff --git a/vite.config.js b/vite.config.js
index 4956fe7..ecb4e60 100644
--- a/vite.config.js
+++ b/vite.config.js
@@ -33,7 +33,15 @@ export default defineConfig({
         index: path.resolve(__dirname, 'src/index.js'),
         'ui/components/index': path.resolve(__dirname, 'src/ui/components/index.js'),
         'ui/route-loading': path.resolve(__dirname, 'src/ui/route-loading.js'),
-        'ui/pages/SettingsPage': path.resolve(__dirname, 'src/ui/pages/SettingsPage.jsx')
+        'ui/pages/SettingsPage': path.resolve(__dirname, 'src/ui/pages/SettingsPage.jsx'),
+        // Barrel entries: these are pure re-export modules that internal code never
+        // imports (it imports the concrete files directly), so under preserveModules
+        // they are otherwise omitted from dist (only .d.ts emitted), breaking consumer
+        // imports like `@reliancy/bface/security/model/index.js`.
+        'security/index': path.resolve(__dirname, 'src/security/index.js'),
+        'security/model/index': path.resolve(__dirname, 'src/security/model/index.js'),
+        'security/policy/index': path.resolve(__dirname, 'src/security/policy/index.js'),
+        'security/pages/index': path.resolve(__dirname, 'src/security/pages/index.js')
       },
       formats: ['es']
     },