create-vellaveto 4.0.2 → 4.0.4

package/dist/generators/helm.js

@@ -47,12 +47,12 @@ function generateValues(state) {
     yaml += "  strictMode: true\n\n";
     yaml += "  injection:\n";
     yaml += `    enabled: ${state.injectionEnabled}\n`;
-    yaml += `    blocking: ${state.injectionBlocking}\n\n`;
+    yaml += `    blockOnInjection: ${state.injectionBlocking}\n\n`;
     yaml += "  dlp:\n";
     yaml += `    enabled: ${state.dlpEnabled}\n`;
-    yaml += `    blocking: ${state.dlpBlocking}\n\n`;
+    yaml += `    blockOnFinding: ${state.dlpBlocking}\n\n`;
     yaml += "  audit:\n";
-    yaml += `    redactionLevel: "${capitalize(state.redactionLevel)}"\n\n`;
+    yaml += `    redactionLevel: "${mapRedactionLevel(state.redactionLevel)}"\n\n`;
     yaml += "  # API key should be provided via Kubernetes Secret:\n";
     yaml += "  #   kubectl create secret generic vellaveto-api-key --from-literal=api-key=<YOUR_KEY>\n";
     yaml += "  extraEnv:\n";
@@ -95,6 +95,15 @@ function generateConfigMap(state) {
     yaml += "\n";
     return yaml;
 }
-function capitalize(s) {
-    return s.charAt(0).toUpperCase() + s.slice(1);
+function mapRedactionLevel(level) {
+    switch (level) {
+        case "off":
+            return "Off";
+        case "low":
+            return "KeysOnly";
+        case "high":
+            return "KeysAndPatterns";
+        default:
+            return level;
+    }
 }

package/dist/generators/toml.js

@@ -6,6 +6,19 @@
  * this CLI wizard.
  */
 import { escapeTomlString } from "../utils.js";
+/** Map wizard redaction level names to server-accepted values. */
+function mapRedactionLevel(level) {
+    switch (level) {
+        case "off":
+            return "Off";
+        case "low":
+            return "KeysOnly";
+        case "high":
+            return "KeysAndPatterns";
+        default:
+            return level;
+    }
+}
 export function generateToml(state) {
     let toml = "";
     // Header
@@ -36,13 +49,13 @@ export function generateToml(state) {
     toml += "[injection]\n";
     toml += `enabled = ${state.injectionEnabled}\n`;
     if (state.injectionEnabled) {
-        toml += `blocking = ${state.injectionBlocking}\n`;
+        toml += `block_on_injection = ${state.injectionBlocking}\n`;
     }
     toml += "\n";
     toml += "[dlp]\n";
     toml += `enabled = ${state.dlpEnabled}\n`;
     if (state.dlpEnabled) {
-        toml += `blocking = ${state.dlpBlocking}\n`;
+        toml += `block_on_finding = ${state.dlpBlocking}\n`;
     }
     toml += "\n";
     if (state.behavioralEnabled) {
@@ -52,17 +65,23 @@ export function generateToml(state) {
     // Audit
     toml += "# ─── Audit ──────────────────────────────────────────────────\n\n";
     toml += "[audit]\n";
-    toml += `redaction_level = "${escapeTomlString(state.redactionLevel)}"\n`;
+    toml += `redaction_level = "${escapeTomlString(mapRedactionLevel(state.redactionLevel))}"\n`;
     toml += "\n";
     if (state.checkpointInterval > 0) {
         toml += `# Checkpoint interval: set VELLAVETO_CHECKPOINT_INTERVAL=${state.checkpointInterval} env var\n\n`;
     }
     // Audit export
     if (state.auditExportFormat !== "none") {
+        // Map "webhook" format to "jsonl" (webhook is delivery, not format)
+        const exportFormat = state.auditExportFormat === "webhook" ? "jsonl" : state.auditExportFormat;
         toml += "[audit_export]\n";
-        toml += `format = "${escapeTomlString(state.auditExportFormat)}"\n`;
-        if (state.auditExportTarget) {
-            toml += `target = "${escapeTomlString(state.auditExportTarget)}"\n`;
+        toml += `format = "${escapeTomlString(exportFormat)}"\n`;
+        // webhook_url is only valid for webhook delivery (must be https://)
+        if (state.auditExportFormat === "webhook" && state.auditExportTarget) {
+            toml += `webhook_url = "${escapeTomlString(state.auditExportTarget)}"\n`;
+        }
+        else if (state.auditExportTarget && state.auditExportFormat !== "webhook") {
+            toml += `# Export file: ${escapeTomlString(state.auditExportTarget)}\n`;
         }
         toml += "\n";
     }
@@ -117,16 +136,16 @@ function generateStrictPreset() {
     toml += 'name = "Default deny all"\n';
     toml += 'policy_type = "Deny"\n';
     toml += "priority = 0\n";
-    toml += 'tool = "*"\n';
-    toml += 'function = "*"\n\n';
+    toml += 'tool_pattern = "*"\n';
+    toml += 'function_pattern = "*"\n\n';
     // Block credentials
     toml += "[[policies]]\n";
     toml += 'id = "block-credentials"\n';
     toml += 'name = "Block credential access"\n';
     toml += 'policy_type = "Deny"\n';
     toml += "priority = 100\n";
-    toml += 'tool = "*"\n';
-    toml += 'function = "*"\n\n';
+    toml += 'tool_pattern = "*"\n';
+    toml += 'function_pattern = "*"\n\n';
     toml += "[policies.path_rules]\n";
     toml +=
         'blocked_patterns = ["**/.env", "**/*.key", "**/*.pem", "**/credentials*", "**/.ssh/**", "**/.aws/**"]\n\n';
@@ -136,8 +155,8 @@ function generateStrictPreset() {
     toml += 'name = "Block data exfiltration"\n';
     toml += 'policy_type = "Deny"\n';
     toml += "priority = 100\n";
-    toml += 'tool = "*"\n';
-    toml += 'function = "*"\n\n';
+    toml += 'tool_pattern = "*"\n';
+    toml += 'function_pattern = "*"\n\n';
     toml += "[policies.network_rules]\n";
     toml +=
         'blocked_domains = ["*.pastebin.com", "*.transfer.sh", "*.ngrok.io"]\n\n';
@@ -147,8 +166,8 @@ function generateStrictPreset() {
     toml += 'name = "Require approval for destructive operations"\n';
     toml += 'policy_type = "RequireApproval"\n';
     toml += "priority = 50\n";
-    toml += 'tool = "*"\n';
-    toml += 'function = "*"\n\n';
+    toml += 'tool_pattern = "*"\n';
+    toml += 'function_pattern = "*"\n\n';
     toml += "[policies.path_rules]\n";
     toml += 'write_patterns = ["**/*"]\n\n';
     return toml;
@@ -163,16 +182,16 @@ function generateBalancedPreset() {
     toml += 'name = "Default deny all"\n';
     toml += 'policy_type = "Deny"\n';
     toml += "priority = 0\n";
-    toml += 'tool = "*"\n';
-    toml += 'function = "*"\n\n';
+    toml += 'tool_pattern = "*"\n';
+    toml += 'function_pattern = "*"\n\n';
     // Block credentials
     toml += "[[policies]]\n";
     toml += 'id = "block-credentials"\n';
     toml += 'name = "Block credential access"\n';
     toml += 'policy_type = "Deny"\n';
     toml += "priority = 100\n";
-    toml += 'tool = "*"\n';
-    toml += 'function = "*"\n\n';
+    toml += 'tool_pattern = "*"\n';
+    toml += 'function_pattern = "*"\n\n';
     toml += "[policies.path_rules]\n";
     toml +=
         'blocked_patterns = ["**/.env", "**/*.key", "**/*.pem", "**/credentials*", "**/.ssh/**", "**/.aws/**"]\n\n';
@@ -183,7 +202,7 @@ function generateBalancedPreset() {
     toml += 'policy_type = "Allow"\n';
     toml += "priority = 50\n";
     toml += 'tool = "*"\n';
-    toml += 'function = "read*"\n\n';
+    toml += 'function_pattern = "read*"\n\n';
     // Require approval for writes
     toml += "[[policies]]\n";
     toml += 'id = "approve-writes"\n';
@@ -191,7 +210,7 @@ function generateBalancedPreset() {
     toml += 'policy_type = "RequireApproval"\n';
     toml += "priority = 50\n";
     toml += 'tool = "*"\n';
-    toml += 'function = "write*"\n\n';
+    toml += 'function_pattern = "write*"\n\n';
     return toml;
 }
 function generatePermissivePreset() {
@@ -204,16 +223,16 @@ function generatePermissivePreset() {
     toml += 'name = "Default allow all"\n';
     toml += 'policy_type = "Allow"\n';
     toml += "priority = 0\n";
-    toml += 'tool = "*"\n';
-    toml += 'function = "*"\n\n';
+    toml += 'tool_pattern = "*"\n';
+    toml += 'function_pattern = "*"\n\n';
     // Block credentials
     toml += "[[policies]]\n";
     toml += 'id = "block-credentials"\n';
     toml += 'name = "Block credential access"\n';
     toml += 'policy_type = "Deny"\n';
     toml += "priority = 100\n";
-    toml += 'tool = "*"\n';
-    toml += 'function = "*"\n\n';
+    toml += 'tool_pattern = "*"\n';
+    toml += 'function_pattern = "*"\n\n';
     toml += "[policies.path_rules]\n";
     toml +=
         'blocked_patterns = ["**/.env", "**/*.key", "**/*.pem", "**/credentials*", "**/.ssh/**", "**/.aws/**"]\n\n';
@@ -223,8 +242,8 @@ function generatePermissivePreset() {
     toml += 'name = "Block data exfiltration"\n';
     toml += 'policy_type = "Deny"\n';
     toml += "priority = 100\n";
-    toml += 'tool = "*"\n';
-    toml += 'function = "*"\n\n';
+    toml += 'tool_pattern = "*"\n';
+    toml += 'function_pattern = "*"\n\n';
     toml += "[policies.network_rules]\n";
     toml +=
         'blocked_domains = ["*.pastebin.com", "*.transfer.sh", "*.ngrok.io"]\n\n';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-vellaveto",
-  "version": "4.0.2",
+  "version": "4.0.4",
   "description": "Setup wizard for Vellaveto — MCP Tool Firewall",
   "type": "module",
   "bin": {