flecto 1.0.1 → 1.0.2

package/index.js

@@ -2,7 +2,8 @@
 
 import { program } from 'commander';
 import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'fs';
-import { resolve, relative } from 'path';
+import { resolve, relative, dirname, join } from 'path';
+import { fileURLToPath } from 'url';
 import { createHash } from 'crypto';
 import { execFileSync } from 'child_process';
 import chalk from 'chalk';
@@ -16,6 +17,10 @@ import { createEnvelope } from './src/envelope.js';
 import { evaluatePolicies, highestSeverity } from './src/policy.js';
 import { loadRcConfig, resolveEffectiveOptions, resolveFiles, initRcFile } from './src/config.js';
 
+const PKG = JSON.parse(
+  readFileSync(join(dirname(fileURLToPath(import.meta.url)), 'package.json'), 'utf8'),
+);
+
 const SNAPSHOT_DIR = '.flecto-snapshots';
 
 function snapshotIdForPath(absPath) {
@@ -151,7 +156,7 @@ function printCiOutput(results, format) {
 program
   .name('flecto')
   .description('Flecto — semantic config watcher for meaningful structured file changes')
-  .version('1.0.0');
+  .version(PKG.version);
 
 program
   .command('watch [files...]')

package/package.json

@@ -4,8 +4,9 @@
     "access": "public",
     "provenance": true
   },
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "Flecto — semantic config watcher that reports meaningful changes in plain English",
+  "license": "MIT",
   "keywords": [
     "flecto",
     "cli",
@@ -35,7 +36,7 @@
     "index.js",
     "src/**/*",
     "README.md",
-    "README_RECRUITERS.md"
+    "LICENSE"
   ],
   "scripts": {
     "test": "node --test test/*.test.js",

package/src/policy.js

@@ -19,12 +19,14 @@ export function evaluatePolicies(changes) {
     const path = change.path ?? '';
     const pathLower = path.toLowerCase();
 
-    if (SECRET_KEY_RE.test(pathLower) && change.type === 'changed') {
+    if (SECRET_KEY_RE.test(pathLower) && (change.type === 'changed' || change.type === 'added')) {
       findings.push({
         id: 'secret-key-changed',
         severity: 'error',
         path,
-        message: 'Sensitive-looking key changed. Confirm secret rotation and access controls.',
+        message: change.type === 'added'
+          ? 'Sensitive-looking key added. Confirm secret storage and access controls.'
+          : 'Sensitive-looking key changed. Confirm secret rotation and access controls.',
       });
     }