@chain305/x-security 0.4.0 → 0.4.2

package/README.md

@@ -10,16 +10,16 @@ npx @chain305/x-security --help
 
 | Command | What it does |
 | --- | --- |
-| `xsecurity generate <spec> --target <t>` | Compile an annotated OpenAPI spec into gateway config (`kong`, `coraza`, `bunkerweb`, `openappsec`, `firewall`, `envoy`) |
-| `xsecurity validate <spec> --target kong --gateway <url\|file>` | Detect drift between the spec and a running/exported gateway config |
-| `xsecurity test <spec> --target <t>` | Closed-loop test: generate config, spin up Docker, send traffic, assert |
-| `xsecurity verify <spec> --target <t> --gateway <addr>` | Read-only post-deploy check that the gateway loaded the emitted artifacts |
-| `xsecurity report <spec>` | OWASP API Top 10 coverage and annotation reports |
-| `xsecurity diff <old> <new> --target <t>` | Diff the generated config for two spec versions |
-| `xsecurity init <spec>` | Add empty `x-security` blocks to operations missing them |
-| `xsecurity migrate <spec> --from 0.4 --to 0.5` | Rewrite a spec between schema versions |
-
-Run `xsecurity <command> --help` for full flags.
+| `x-security generate <spec> --target <t>` | Compile an annotated OpenAPI spec into gateway config (`kong`, `coraza`, `bunkerweb`, `openappsec`, `firewall`, `envoy`) |
+| `x-security validate <spec> --target kong --gateway <url\|file>` | Detect drift between the spec and a running/exported gateway config |
+| `x-security test <spec> --target <t>` | Closed-loop test: generate config, spin up Docker, send traffic, assert |
+| `x-security verify <spec> --target <t> --gateway <addr>` | Read-only post-deploy check that the gateway loaded the emitted artifacts |
+| `x-security report <spec>` | OWASP API Top 10 coverage and annotation reports |
+| `x-security diff <old> <new> --target <t>` | Diff the generated config for two spec versions |
+| `x-security init <spec>` | Add empty `x-security` blocks to operations missing them |
+| `x-security migrate <spec> --from 0.4 --to 0.5` | Rewrite a spec between schema versions |
+
+Run `x-security <command> --help` for full flags.
 
 ## Requirements
 

package/bin/x-security.mjs

@@ -30810,26 +30810,26 @@ var init_dist3 = __esm({
 });
 
 // ../core/dist/errors.js
-var WritError, SchemaValidationError, UnresolvedVariableError, UnsupportedDialectError, STRICT_EXIT_CODES, StrictnessViolation;
+var XSecurityError, SchemaValidationError, UnresolvedVariableError, UnsupportedDialectError, STRICT_EXIT_CODES, StrictnessViolation;
 var init_errors2 = __esm({
   "../core/dist/errors.js"() {
     "use strict";
-    WritError = class extends Error {
+    XSecurityError = class extends Error {
       code;
       details;
       constructor(message, code, details) {
         super(message);
         this.code = code;
         this.details = details;
-        this.name = "WritError";
+        this.name = "XSecurityError";
       }
     };
-    SchemaValidationError = class extends WritError {
+    SchemaValidationError = class extends XSecurityError {
       constructor(message, details) {
         super(message, "SCHEMA_VALIDATION", details);
       }
     };
-    UnresolvedVariableError = class _UnresolvedVariableError extends WritError {
+    UnresolvedVariableError = class _UnresolvedVariableError extends XSecurityError {
       variables;
       paths;
       constructor(variables, paths = {}) {
@@ -30858,7 +30858,7 @@ var init_errors2 = __esm({
         return lines.join("\n");
       }
     };
-    UnsupportedDialectError = class extends WritError {
+    UnsupportedDialectError = class extends XSecurityError {
       constructor(version) {
         super(`Unsupported OpenAPI version: ${version}`, "UNSUPPORTED_DIALECT");
       }
@@ -30869,7 +30869,7 @@ var init_errors2 = __esm({
       S3: 4,
       S4: 5
     };
-    StrictnessViolation = class extends WritError {
+    StrictnessViolation = class extends XSecurityError {
       gate;
       constructor(gate, message, details) {
         super(message, `STRICT_${gate}`, details);
@@ -62062,7 +62062,7 @@ ${plan.yaml}`,
         endpoint: "(gateway)",
         rule: "load-coverage",
         verdict: "FAIL",
-        message: "x-security-emitted artifacts are not loaded by the gateway (xsecurity verify reported <90%). Aborting traffic phase \u2014 the results would be unattributable.",
+        message: "x-security-emitted artifacts are not loaded by the gateway (x-security verify reported <90%). Aborting traffic phase \u2014 the results would be unattributable.",
         durationMs: 0
       });
     } else {
@@ -72137,7 +72137,7 @@ import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import yaml15 from "js-yaml";
 function resolveApiUrl(env2) {
-  const override = (env2.X_SECURITY_API_URL ?? env2.X_SECURITY_API_URL)?.trim();
+  const override = env2.X_SECURITY_API_URL?.trim();
   if (!override) return DEFAULT_API_URL2;
   let parsed;
   try {
@@ -72162,7 +72162,7 @@ function resolveApiUrl(env2) {
   return override.replace(/\/+$/, "");
 }
 function resolveToken(env2) {
-  const token = (env2.X_SECURITY_API_TOKEN ?? env2.X_SECURITY_API_TOKEN)?.trim();
+  const token = env2.X_SECURITY_API_TOKEN?.trim();
   if (!token) {
     throw new PushError(
       "X_SECURITY_API_TOKEN is not set. Export your x-security API key (X_SECURITY_API_TOKEN=...) \u2014 push reads it from the environment only, never from a flag."
@@ -73908,8 +73908,8 @@ function registerUpdateCheck(program2) {
     }
   });
   program2.hook("postAction", async () => {
-    if (!truthyEnv(process.env.XSECURITY_UPDATE_CHECK)) return;
-    if (truthyEnv(process.env.NO_UPDATE_NOTIFIER) || truthyEnv(process.env.XSECURITY_NO_UPDATE_CHECK)) return;
+    if (!truthyEnv(process.env.X_SECURITY_UPDATE_CHECK)) return;
+    if (truthyEnv(process.env.NO_UPDATE_NOTIFIER) || truthyEnv(process.env.X_SECURITY_NO_UPDATE_CHECK)) return;
     try {
       const { name, version } = resolvePackageMeta();
       const latest = await fetchLatestVersion(name);
@@ -73959,20 +73959,20 @@ function firstExisting(candidates) {
 }
 function loadConfig2(cwd = process.cwd(), home = os3.homedir()) {
   const homeFile = firstExisting([
-    path28.join(home, ".config", "xsecurity", "config.yaml"),
-    path28.join(home, ".config", "xsecurity", "config.yml"),
-    path28.join(home, ".config", "xsecurity", "config.json")
+    path28.join(home, ".config", "x-security", "config.yaml"),
+    path28.join(home, ".config", "x-security", "config.yml"),
+    path28.join(home, ".config", "x-security", "config.json")
   ]);
   const projectFile = firstExisting([
-    path28.join(cwd, ".xsecurityrc.yaml"),
-    path28.join(cwd, ".xsecurityrc.yml"),
-    path28.join(cwd, ".xsecurityrc.json"),
-    path28.join(cwd, ".xsecurityrc")
+    path28.join(cwd, ".x-securityrc.yaml"),
+    path28.join(cwd, ".x-securityrc.yml"),
+    path28.join(cwd, ".x-securityrc.json"),
+    path28.join(cwd, ".x-securityrc")
   ]);
   let merged = {};
   if (homeFile) merged = { ...merged, ...readConfigFile(homeFile) };
   if (projectFile) merged = { ...merged, ...readConfigFile(projectFile) };
-  const envPath = process.env.XSECURITY_CONFIG;
+  const envPath = process.env.X_SECURITY_CONFIG;
   if (envPath) merged = { ...merged, ...readConfigFile(envPath) };
   return merged;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chain305/x-security",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "description": "x-security CLI — generate/validate/test/report/diff/init against multiple gateway targets",
   "license": "Apache-2.0",
   "homepage": "https://usewaf.com",