securenow 8.14.0 → 8.14.1

package/cli/automation.js

@@ -82,7 +82,7 @@ async function list(args, flags) {
 
     console.log('');
     const rows = rules.map((rule) => [
-      ui.c.dim(ui.truncate(rule._id || rule.id, 12)),
+      ui.c.dim(rule.id || rule._id || ''),
       rule.name || '-',
       ui.statusBadge(rule.status || 'active'),
       formatApplications(rule),

package/cli/challenges.js

@@ -64,7 +64,7 @@ async function list(args, flags) {
 
     console.log('');
     const rows = rules.map((r) => [
-      ui.c.dim(ui.truncate(r.id || r._id, 12)),
+      ui.c.dim(r.id || r._id || ''),
       r.status === 'active' ? ui.statusBadge('active') : ui.statusBadge(r.status || 'unknown'),
       describeTarget(r),
       `pow:${r.difficulty}`,

package/cli/fp.js

@@ -76,7 +76,7 @@ async function list(args, flags) {
     const rows = exclusions.map(e => {
       const scope = e.type === 'global' ? ui.c.cyan('All Rules') : `Rule: ${ui.truncate(e.ruleName || '?', 18)}`;
       return [
-        ui.c.dim(ui.truncate(e._id, 12)),
+        ui.c.dim(e.id || e._id || ''),
         scope,
         ui.truncate(conditionsSummary(e.conditions, e.matchMode), 40),
         (e.matchMode || 'all').toUpperCase(),

package/cli/monitor.js

@@ -351,7 +351,7 @@ async function notificationsList(args, flags) {
 
     console.log('');
     const rows = notifications.map(n => [
-      ui.c.dim(ui.truncate(n._id, 12)),
+      ui.c.dim(n.id || n._id || ''),
       ui.statusBadge(n.read ? 'read' : 'unread'),
       ui.truncate(n.title || n.message || n.type || '', 50),
       n.ip || '—',

package/cli/rateLimits.js

@@ -47,6 +47,16 @@ function describeTarget(rule) {
   return parts.join(' ') || 'all traffic';
 }
 
+// The bucket each request counts against: "ip", "global", "header x-api-key", "cookie session".
+function describeKey(rule) {
+  const keyBy = rule.keyBy || 'ip';
+  return rule.keyName && (keyBy === 'header' || keyBy === 'cookie') ? `${keyBy} ${rule.keyName}` : keyBy;
+}
+
+function isExpired(rule) {
+  return Boolean(rule.expiresAt) && new Date(rule.expiresAt).getTime() <= Date.now();
+}
+
 function naturalText(args, flags) {
   return String(flags.text || flags.prompt || flags.query || args.join(' ') || '').trim();
 }
@@ -62,6 +72,11 @@ function draftFromFlags(flags) {
   if (flags.mode || flags['path-mode']) draft.pathMatchMode = flags.mode || flags['path-mode'];
   if (flags.method) draft.method = flags.method;
   if (flags['key-by'] || flags.keyBy) draft.keyBy = flags['key-by'] || flags.keyBy;
+  else if (flags.header) draft.keyBy = 'header';
+  else if (flags.cookie) draft.keyBy = 'cookie';
+  if (flags['key-name'] || flags.keyName || flags.header || flags.cookie) {
+    draft.keyName = flags['key-name'] || flags.keyName || flags.header || flags.cookie;
+  }
   if (flags.limit) draft.limit = Number(flags.limit);
   if (flags.window || flags['window-seconds']) draft.windowSeconds = parseWindow(flags.window || flags['window-seconds']);
   if (flags.duration) draft.duration = flags.duration;
@@ -76,7 +91,7 @@ function printParsedDraft(data) {
     ['Name', draft.name || '-'],
     ['Target', describeTarget(draft)],
     ['Limit', `${draft.limit || '-'} / ${draft.windowSeconds || '-'}s`],
-    ['Key by', draft.keyBy || 'ip'],
+    ['Key by', describeKey(draft)],
     ['App', draft.appKey || 'all'],
     ['Environment', draft.environment || 'all'],
     ['Duration', draft.duration || 'none'],
@@ -107,16 +122,17 @@ async function list(args, flags) {
 
     console.log('');
     const rows = rules.map((r) => [
-      ui.c.dim(ui.truncate(r.id || r._id, 12)),
-      r.status === 'active' ? ui.statusBadge('active') : ui.statusBadge(r.status || 'unknown'),
+      ui.c.dim(r.id || r._id || ''),
+      ui.statusBadge(r.status === 'active' && isExpired(r) ? 'expired' : (r.status || 'unknown')),
       describeTarget(r),
       `${r.limit}/${r.windowSeconds}s`,
+      describeKey(r),
       r.applicationKey || ui.c.dim('all apps'),
       r.environment || ui.c.dim('all envs'),
       r.expiresAt ? new Date(r.expiresAt).toLocaleString() : ui.c.dim('permanent'),
       ui.timeAgo(r.createdAt),
     ]);
-    ui.table(['ID', 'Status', 'Target', 'Limit', 'App', 'Env', 'Expires', 'Created'], rows);
+    ui.table(['ID', 'Status', 'Target', 'Limit', 'Per', 'App', 'Env', 'Expires', 'Created'], rows);
     console.log('');
   } catch (err) {
     s.fail('Failed to fetch rate limits');
@@ -167,7 +183,7 @@ async function fromText(args, flags) {
     if (flags.json) { ui.json(data); return; }
     const r = data.rateLimit;
     console.log('');
-    console.log(`  ${ui.c.green('ACTIVE')} ${describeTarget(r)} at ${r.limit}/${r.windowSeconds}s`);
+    console.log(`  ${ui.c.green('ACTIVE')} ${describeTarget(r)} at ${r.limit}/${r.windowSeconds}s per ${describeKey(r)}`);
     console.log(`  ${ui.c.dim('ID:')} ${r.id || r._id}`);
     console.log('');
   } catch (err) {
@@ -197,7 +213,7 @@ async function show(args, flags) {
       ['Status', r.status || '-'],
       ['Target', describeTarget(r)],
       ['Limit', `${r.limit}/${r.windowSeconds}s`],
-      ['Key by', r.keyName ? `${r.keyBy} ${r.keyName}` : (r.keyBy || 'ip')],
+      ['Key by', describeKey(r)],
       ['App', r.applicationKey || 'all apps'],
       ['Environment', r.environment || 'all envs'],
       ['Reason', r.reason || '-'],
@@ -251,7 +267,7 @@ async function add(args, flags) {
     if (flags.json) { ui.json(data); return; }
     const r = data.rateLimit;
     console.log('');
-    console.log(`  ${ui.c.green('ACTIVE')} ${describeTarget(r)} at ${r.limit}/${r.windowSeconds}s`);
+    console.log(`  ${ui.c.green('ACTIVE')} ${describeTarget(r)} at ${r.limit}/${r.windowSeconds}s per ${describeKey(r)}`);
     console.log(`  ${ui.c.dim('ID:')} ${r.id || r._id}`);
     console.log('');
   } catch (err) {
@@ -330,7 +346,7 @@ async function test(args, flags) {
     if (data.limited) {
       console.log(`  ${ui.c.bold(ui.c.yellow('RATE LIMITED'))} - ${data.matches.length} matching rule${data.matches.length !== 1 ? 's' : ''}`);
       for (const r of data.matches.slice(0, 5)) {
-        console.log(`  ${ui.c.dim(r.id || r._id)}  ${describeTarget(r)}  ${r.limit}/${r.windowSeconds}s`);
+        console.log(`  ${ui.c.dim(r.id || r._id)}  ${describeTarget(r)}  ${r.limit}/${r.windowSeconds}s per ${describeKey(r)}`);
       }
     } else {
       console.log(`  ${ui.c.bold(ui.c.green('NOT LIMITED'))} - no matching rate-limit rules`);

package/cli/security.js

@@ -190,7 +190,7 @@ async function alertRulesList(args, flags) {
 
     console.log('');
     const rows = rules.map((r) => [
-      ui.c.dim(ui.truncate(r._id || r.id, 12)),
+      ui.c.dim(r.id || r._id || ''),
       r.name || '—',
       ruleStatusBadge(r),
       r.mode === 'test' ? ui.c.yellow('test') : ui.c.dim('prod'),
@@ -836,7 +836,7 @@ async function alertRuleExclusions(args, flags) {
     if (flags.json) { ui.json(data); return; }
     console.log('');
     const rows = exclusions.map((e) => [
-      ui.c.dim(ui.truncate(e._id, 12)),
+      ui.c.dim(e.id || e._id || ''),
       e.isActive === false ? ui.statusBadge('disabled') : ui.statusBadge('active'),
       e.matchMode || 'all',
       ui.truncate(e.reason || e.pathPattern || JSON.stringify(e.conditions || []), 72),
@@ -862,7 +862,7 @@ async function alertChannelsList(args, flags) {
 
     console.log('');
     const rows = channels.map(ch => [
-      ui.c.dim(ui.truncate(ch._id, 12)),
+      ui.c.dim(ch.id || ch._id || ''),
       ch.name || '—',
       ch.type || '—',
       ui.statusBadge(ch.enabled !== false ? 'enabled' : 'disabled'),
@@ -891,7 +891,7 @@ async function alertHistoryList(args, flags) {
 
     console.log('');
     const rows = history.map(h => [
-      ui.c.dim(ui.truncate(h._id, 12)),
+      ui.c.dim(h.id || h._id || ''),
       h.ruleName || h.type || '—',
       h.severity ? ui.statusBadge(h.severity) : '—',
       ui.truncate(h.message || h.description || '', 40),
@@ -938,7 +938,7 @@ async function blocklistList(args, flags) {
 
     console.log('');
     const rows = items.map(b => [
-      ui.c.dim(ui.truncate(b._id, 12)),
+      ui.c.dim(b.id || b._id || ''),
       ui.c.red(describeBlockTarget(b)),
       ui.truncate(b.reason || '', 40),
       b.source || '—',
@@ -1011,7 +1011,7 @@ async function revokeList(args, flags) {
     if (flags.json) { ui.json(entries); return; }
     console.log('');
     ui.table(['ID', 'Type', 'Value', 'Scope', 'Expires'], entries.map((r) => [
-      ui.c.dim(ui.truncate(r._id || r.id, 12)),
+      ui.c.dim(r.id || r._id || ''),
       r.type,
       ui.truncate(r.value, 28),
       r.applicationKey || ui.c.dim('all'),
@@ -1191,7 +1191,7 @@ async function allowlistList(args, flags) {
 
     console.log('');
     const rows = items.map(a => [
-      ui.c.dim(ui.truncate(a._id, 12)),
+      ui.c.dim(a.id || a._id || ''),
       ui.c.green(a.ip || '—'),
       a.label || ui.c.dim('—'),
       ui.truncate(a.reason || '', 40),
@@ -1307,7 +1307,7 @@ async function trustedList(args, flags) {
 
     console.log('');
     const rows = items.map(t => [
-      ui.c.dim(ui.truncate(t._id, 12)),
+      ui.c.dim(t.id || t._id || ''),
       ui.c.green(t.ip || t.cidr || '—'),
       t.label || t.description || ui.c.dim('—'),
       t.applicationKey || ui.c.dim('all apps'),
@@ -1494,7 +1494,7 @@ async function forensicsLibrary(args, flags) {
 
     console.log('');
     const rows = queries.map(q => [
-      ui.c.dim(ui.truncate(q._id, 12)),
+      ui.c.dim(q.id || q._id || ''),
       q.name || q.title || '—',
       ui.truncate(q.description || q.query || '', 50),
       ui.timeAgo(q.createdAt),
@@ -1756,7 +1756,7 @@ async function instancesList(args, flags) {
 
     console.log('');
     const rows = instances.map(inst => [
-      ui.c.dim(ui.truncate(inst._id, 12)),
+      ui.c.dim(inst.id || inst._id || ''),
       inst.name || inst.host || '—',
       inst.host || '—',
       inst.port != null ? String(inst.port) : '—',

package/cli/ui.js

@@ -354,6 +354,7 @@ function statusBadge(status) {
     trusted: c.green('■ trusted'),
     enabled: c.green('● enabled'),
     disabled: c.dim('○ disabled'),
+    expired: c.dim('○ expired'),
     paused: c.yellow('◆ paused'),
     critical: c.red('▲ critical'),
     high: c.red('▲ high'),

package/firewall.js

@@ -1478,7 +1478,7 @@ function init(options) {
       _rateLimitStore = require('./rate-limit-store').createRateLimitStore(storeSpec, {
         log: (...args) => { if (_options.log) fwLog(...args); },
       });
-      if (_options.log && _rateLimitStore) fwLog('[securenow] Firewall: shared rate-limit counters → %s', _rateLimitStore.describe());
+      if (_options.log && _rateLimitStore) fwLog('[securenow] Firewall: shared rate-limit counters: connecting to %s', _rateLimitStore.describe());
     } catch (e) {
       _rateLimitStore = null;
       if (_options.log) fwWarn('[securenow] Firewall: rate-limit store disabled (%s); counting in-process', e.message);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "securenow",
-  "version": "8.14.0",
+  "version": "8.14.1",
   "mcpName": "ai.securenow/securenow",
   "description": "OpenTelemetry instrumentation for Node.js, Next.js, and Nuxt - Send traces and logs to any OTLP-compatible backend",
   "type": "commonjs",