@chain305/x-security 0.4.0 → 0.4.1

package/README.md

@@ -10,16 +10,16 @@ npx @chain305/x-security --help
 
 | Command | What it does |
 | --- | --- |
-| `xsecurity generate <spec> --target <t>` | Compile an annotated OpenAPI spec into gateway config (`kong`, `coraza`, `bunkerweb`, `openappsec`, `firewall`, `envoy`) |
-| `xsecurity validate <spec> --target kong --gateway <url\|file>` | Detect drift between the spec and a running/exported gateway config |
-| `xsecurity test <spec> --target <t>` | Closed-loop test: generate config, spin up Docker, send traffic, assert |
-| `xsecurity verify <spec> --target <t> --gateway <addr>` | Read-only post-deploy check that the gateway loaded the emitted artifacts |
-| `xsecurity report <spec>` | OWASP API Top 10 coverage and annotation reports |
-| `xsecurity diff <old> <new> --target <t>` | Diff the generated config for two spec versions |
-| `xsecurity init <spec>` | Add empty `x-security` blocks to operations missing them |
-| `xsecurity migrate <spec> --from 0.4 --to 0.5` | Rewrite a spec between schema versions |
-
-Run `xsecurity <command> --help` for full flags.
+| `x-security generate <spec> --target <t>` | Compile an annotated OpenAPI spec into gateway config (`kong`, `coraza`, `bunkerweb`, `openappsec`, `firewall`, `envoy`) |
+| `x-security validate <spec> --target kong --gateway <url\|file>` | Detect drift between the spec and a running/exported gateway config |
+| `x-security test <spec> --target <t>` | Closed-loop test: generate config, spin up Docker, send traffic, assert |
+| `x-security verify <spec> --target <t> --gateway <addr>` | Read-only post-deploy check that the gateway loaded the emitted artifacts |
+| `x-security report <spec>` | OWASP API Top 10 coverage and annotation reports |
+| `x-security diff <old> <new> --target <t>` | Diff the generated config for two spec versions |
+| `x-security init <spec>` | Add empty `x-security` blocks to operations missing them |
+| `x-security migrate <spec> --from 0.4 --to 0.5` | Rewrite a spec between schema versions |
+
+Run `x-security <command> --help` for full flags.
 
 ## Requirements
 

package/bin/x-security.mjs

@@ -62062,7 +62062,7 @@ ${plan.yaml}`,
         endpoint: "(gateway)",
         rule: "load-coverage",
         verdict: "FAIL",
-        message: "x-security-emitted artifacts are not loaded by the gateway (xsecurity verify reported <90%). Aborting traffic phase \u2014 the results would be unattributable.",
+        message: "x-security-emitted artifacts are not loaded by the gateway (x-security verify reported <90%). Aborting traffic phase \u2014 the results would be unattributable.",
         durationMs: 0
       });
     } else {
@@ -73959,11 +73959,18 @@ function firstExisting(candidates) {
 }
 function loadConfig2(cwd = process.cwd(), home = os3.homedir()) {
   const homeFile = firstExisting([
+    path28.join(home, ".config", "x-security", "config.yaml"),
+    path28.join(home, ".config", "x-security", "config.yml"),
+    path28.join(home, ".config", "x-security", "config.json"),
     path28.join(home, ".config", "xsecurity", "config.yaml"),
     path28.join(home, ".config", "xsecurity", "config.yml"),
     path28.join(home, ".config", "xsecurity", "config.json")
   ]);
   const projectFile = firstExisting([
+    path28.join(cwd, ".x-securityrc.yaml"),
+    path28.join(cwd, ".x-securityrc.yml"),
+    path28.join(cwd, ".x-securityrc.json"),
+    path28.join(cwd, ".x-securityrc"),
     path28.join(cwd, ".xsecurityrc.yaml"),
     path28.join(cwd, ".xsecurityrc.yml"),
     path28.join(cwd, ".xsecurityrc.json"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chain305/x-security",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "x-security CLI — generate/validate/test/report/diff/init against multiple gateway targets",
   "license": "Apache-2.0",
   "homepage": "https://usewaf.com",