@chain305/x-security 0.1.0 → 0.1.2

package/bin/xsecurity.mjs

@@ -46718,12 +46718,12 @@ var require_dist_cjs15 = __commonJS({
       }
       return ["md/nodejs", node_process.versions.node];
     };
-    var getNodeModulesParentDirs = (dirname4) => {
+    var getNodeModulesParentDirs = (dirname5) => {
       const cwd = process.cwd();
-      if (!dirname4) {
+      if (!dirname5) {
         return [cwd];
       }
-      const normalizedPath = node_path.normalize(dirname4);
+      const normalizedPath = node_path.normalize(dirname5);
       const parts = normalizedPath.split(node_path.sep);
       const nodeModulesIndex = parts.indexOf("node_modules");
       const parentDir = nodeModulesIndex !== -1 ? parts.slice(0, nodeModulesIndex).join(node_path.sep) : normalizedPath;
@@ -46771,8 +46771,8 @@ var require_dist_cjs15 = __commonJS({
         tscVersion = null;
         return void 0;
       }
-      const dirname4 = typeof __dirname !== "undefined" ? __dirname : void 0;
-      const nodeModulesParentDirs = getNodeModulesParentDirs(dirname4);
+      const dirname5 = typeof __dirname !== "undefined" ? __dirname : void 0;
+      const nodeModulesParentDirs = getNodeModulesParentDirs(dirname5);
       let versionFromApp;
       for (const nodeModulesParentDir of nodeModulesParentDirs) {
         try {
@@ -74421,8 +74421,21 @@ var init_byo_commands = __esm({
 
 // src/bin/lazy.ts
 var lazy_exports = {};
-import { basename as basename2 } from "node:path";
+import { readFileSync as readFileSync4 } from "node:fs";
+import { basename as basename2, dirname as dirname4, join as join12 } from "node:path";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { Command as Command2 } from "commander";
+function resolveVersion() {
+  const here = dirname4(fileURLToPath2(import.meta.url));
+  for (const rel of ["../package.json", "../../package.json"]) {
+    try {
+      const v = JSON.parse(readFileSync4(join12(here, rel), "utf8")).version;
+      if (typeof v === "string") return v;
+    } catch {
+    }
+  }
+  return "0.0.0";
+}
 var program;
 var init_lazy = __esm({
   "src/bin/lazy.ts"() {
@@ -74441,7 +74454,7 @@ var init_lazy = __esm({
     init_byo_commands();
     init_dist4();
     program = new Command2();
-    program.name(basename2(process.argv[1] ?? "lazy").replace(/\.(mjs|cjs|js)$/, "")).description("Compile, validate, test, and report on x-security policies in OpenAPI specs.").version("0.1.0");
+    program.name(basename2(process.argv[1] ?? "lazy").replace(/\.(mjs|cjs|js)$/, "")).description("Compile, validate, test, and report on x-security policies in OpenAPI specs.").version(resolveVersion());
     program.command("generate <spec>").description("Compile an annotated OpenAPI spec into target-specific gateway config.").requiredOption("--target <name>", "Target: kong|coraza|bunkerweb|openappsec|firewall").option("--out <dir>", "Output directory (default: ./writ-out/<target>)").option("--dry-run", "Print planned artifacts without writing to disk").option("--no-strict", "Allow unresolved variables (default: strict)").option("--vault", "Resolve $vault.* refs via HashiCorp Vault (uses VAULT_ADDR + VAULT_TOKEN or AppRole)").option("--aws-secrets", "Resolve $aws.* refs via AWS Secrets Manager (uses default credential chain + AWS_REGION)").option("--vault-kv-version <v>", "Vault KV engine version: 1 or 2 (default 2)", (v) => v === "1" ? 1 : 2).option("--no-with-consumers", "Kong only: emit spec-only output (omit consumers + per-plugin credentials). Consumers are emitted by default so OSS Kong gateways actually authenticate; pass this for the spec-only baseline.").option("--kong-deployment <mode>", "Kong only: standalone|behind-proxy|with-coraza|with-istio. with-coraza rewrites all service URLs to http://coraza:8080.", "standalone").option("--kong-edition <edition>", "Kong only: oss|enterprise. enterprise emits openid-connect (real JWKS+RS256) instead of HS256 jwt_secrets downgrade.", "oss").option("--kong-dbless", "Kong only: deployment runs in DB-less mode (KONG_DATABASE=off). Per-identity rate-limits fall back to policy=local with a structured warning instead of policy=cluster.", false).option("--kong-policy <mode>", "Kong only: rate-limit policy. local|cluster. Default local (safe for OSS DB-less). Pass cluster only when Kong is running in database mode (postgres/cassandra); cluster is a boot error in DB-less Kong.", "local").option("--coraza-engine <name>", "Coraza only: modsec-nginx|modsec-apache|coraza-go|coraza-spoa (default modsec-nginx).", "modsec-nginx").option("--coraza-peers <list>", 'Coraza only (coraza-spoa|coraza-go): HAProxy peer-replication for stick-tables. Format: "name1:host1:port1,name2:host2:port2". When set, emitted haproxy-stick-tables.cfg includes a `peers writ` section so counters replicate across instances.').option("--strict-fidelity", "Exit 4 (S3) if any spec field cannot be enforced by the chosen target+engine. Independent of --strict.").action(async (spec, opts) => {
       try {
         if (opts.target === "kong") {

package/package.json

@@ -1,8 +1,13 @@
 {
   "name": "@chain305/x-security",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Writ CLI — generate/validate/test/report/diff/init against multiple gateway targets",
   "license": "Apache-2.0",
+  "homepage": "https://usewaf.com",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ZeeshanSultan/x-security.git"
+  },
   "type": "module",
   "bin": {
     "xsecurity": "./bin/xsecurity.mjs"