@vibgrate/cli 1.0.68 → 1.0.70

package/dist/{baseline-ZTTNU7WC.js → baseline-MRLWTPFD.js}

@@ -1,8 +1,8 @@
 import {
   baselineCommand,
   runBaseline
-} from "./chunk-DGQCRO6X.js";
-import "./chunk-5DTDDZHE.js";
+} from "./chunk-L37LOGK2.js";
+import "./chunk-RTKLZCLZ.js";
 import "./chunk-TBE6NQ5Z.js";
 export {
   baselineCommand,

package/dist/{chunk-DGQCRO6X.js → chunk-L37LOGK2.js}

@@ -1,6 +1,6 @@
 import {
   runScan
-} from "./chunk-5DTDDZHE.js";
+} from "./chunk-RTKLZCLZ.js";
 import {
   writeJsonFile
 } from "./chunk-TBE6NQ5Z.js";

package/dist/{chunk-5DTDDZHE.js → chunk-RTKLZCLZ.js}

@@ -7714,6 +7714,30 @@ function extract(content, pattern, sourceFile) {
   }
   return out;
 }
+function isValidCronExpression(expr) {
+  const trimmed = expr.trim();
+  if (/^@(?:yearly|monthly|weekly|daily|hourly|reboot)$/.test(trimmed)) return true;
+  const FIELD = /^(?:\*(?:\/\d+)?|\d+(?:[,\-]\d+)*(?:\/\d+)?|[?LW]|[\dLW]#\d)$/;
+  const fields = trimmed.split(/\s+/);
+  if (fields.length !== 5 && fields.length !== 6) return false;
+  return fields.every((f) => FIELD.test(f));
+}
+function extractValidCronLines(content, sourceFile) {
+  const out = [];
+  const RE = /['"`]((?:[\d*\/,\-?LW#@A-Za-z]+[ \t]+){4,5}[\d*\/,\-?LW#@A-Za-z]+)['"`]/g;
+  let m;
+  while ((m = RE.exec(content)) !== null) {
+    const candidate = m[1].trim();
+    if (isValidCronExpression(candidate)) out.push(`${candidate} (${sourceFile})`);
+  }
+  return out;
+}
+function deriveProjectFromPath(relPath) {
+  const parts = relPath.split("/");
+  if (parts.length === 1) return "root";
+  if (parts[0] === "packages" && parts.length >= 2) return parts[1];
+  return parts[0];
+}
 var LOCKFILE_NAMES = /* @__PURE__ */ new Set([
   "package-lock.json",
   "pnpm-lock.yaml",
@@ -7959,7 +7983,7 @@ async function scanApiSurface(rootDir, fileCache) {
       });
     }
   }
-  result.integrations = [...integrationMap.values()].sort((a, b) => a.provider.localeCompare(b.provider));
+  result.integrations = [...integrationMap.values()].filter((i) => i.files.some((f) => !NON_CODE_EXTENSIONS.has(path23.extname(f).toLowerCase()))).sort((a, b) => a.provider.localeCompare(b.provider));
   result.openApiSpecifications = [...new Map(result.openApiSpecifications.map((spec) => [spec.path, spec])).values()].sort((a, b) => a.path.localeCompare(b.path));
   result.webhookUrls = uniq(result.webhookUrls);
   result.callbackEndpoints = uniq(result.callbackEndpoints);
@@ -8033,7 +8057,10 @@ async function scanOperationalResilience(rootDir, fileCache) {
     result.defaultCharacterEncoding.push(...extract(file.content, /\b(?:charset|encoding|UTF-?8|ISO-8859-1)\b[^\n]*/gi, file.relPath));
     result.sessionStores.push(...extract(file.content, /\b(?:sessionStore|redisStore|memoryStore)\b[^\n]*/gi, file.relPath));
     result.distributedLocks.push(...extract(file.content, /\b(?:distributed[_-]?lock|redlock|mutex)\b[^\n]*/gi, file.relPath));
-    result.jobSchedulers.push(...extract(file.content, /\b(?:cron|schedule|bullmq|agenda|job[_-]?scheduler)\b[^\n]*/gi, file.relPath));
+    for (const cronLine of extractValidCronLines(file.content, file.relPath)) {
+      const project = deriveProjectFromPath(file.relPath);
+      result.jobSchedulers.push(`[${project}] ${cronLine}`);
+    }
     result.idempotencyKeys.push(...extract(file.content, /\b(?:idempotency[_-]?key|Idempotency-Key)\b[^\n]*/gi, file.relPath));
     result.rateLimitingCounters.push(...extract(file.content, /\b(?:rate[_-]?limit|throttle|quota)\b[^\n]*/gi, file.relPath));
     result.circuitBreakerState.push(...extract(file.content, /\b(?:circuit[_-]?breaker|half[_-]?open|open[_-]?state)\b[^\n]*/gi, file.relPath));
@@ -8050,7 +8077,7 @@ async function scanOperationalResilience(rootDir, fileCache) {
     result.dataMaskingRules.push(...extract(file.content, /\b(?:data[_-]?mask|redact|pii[_-]?mask)\b[^\n]*/gi, file.relPath));
     result.transformationLogic.push(...extract(file.content, /\b(?:transform|mapper|normaliz(?:e|ation))\b[^\n]*/gi, file.relPath));
     result.timezoneHandling.push(...extract(file.content, /\b(?:convertTimezone|tz\(|moment\.tz|DateTimeZone)\b[^\n]*/gi, file.relPath));
-    result.encryptionSettings.push(...extract(file.content, /\b(?:kms|encrypt(?:ion)?|cipher|tls|minTlsVersion)\b[^\n]*/gi, file.relPath));
+    result.encryptionSettings.push(...extract(file.content, /(aes-(?:128|192|256)-(?:gcm|cbc|ctr|cfb8?|ofb|ecb|ccm|ocb|wrap(?:-pad)?)|chacha20-poly1305|des-ede3?(?:-(?:cbc|cfb8?|ofb))?|bf-(?:cbc|cfb|ecb|ofb)|aria-(?:128|192|256)-(?:gcm|cbc|ctr|cfb8?|ofb|ecb|ccm)|camellia-(?:128|192|256)-(?:cbc|cfb8?|ofb|ecb)|seed-cbc|rc4(?:-(?:40|hmac-md5))?|rc2-(?:(?:40|64|128)-)?cbc)/gi, file.relPath));
     result.hardcodedSecretSignals.push(...extract(file.content, /\b(?:password|passwd|connectionString|api[_-]?key|secret)\b\s*[:=]\s*['"][^'"]{4,}['"]/gi, file.relPath));
   }
   Object.keys(result).forEach((key) => {

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   baselineCommand
-} from "./chunk-DGQCRO6X.js";
+} from "./chunk-L37LOGK2.js";
 import {
   VERSION,
   dsnCommand,
@@ -10,7 +10,7 @@ import {
   pushCommand,
   scanCommand,
   writeDefaultConfig
-} from "./chunk-5DTDDZHE.js";
+} from "./chunk-RTKLZCLZ.js";
 import {
   ensureDir,
   pathExists,
@@ -39,7 +39,7 @@ var initCommand = new Command("init").description("Initialize vibgrate in a proj
     console.log(chalk.green("\u2714") + ` Created ${chalk.bold("vibgrate.config.ts")}`);
   }
   if (opts.baseline) {
-    const { runBaseline } = await import("./baseline-ZTTNU7WC.js");
+    const { runBaseline } = await import("./baseline-MRLWTPFD.js");
     await runBaseline(rootDir);
   }
   console.log("");

package/dist/index.js

@@ -5,7 +5,7 @@ import {
   formatText,
   generateFindings,
   runScan
-} from "./chunk-5DTDDZHE.js";
+} from "./chunk-RTKLZCLZ.js";
 import "./chunk-TBE6NQ5Z.js";
 export {
   computeDriftScore,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibgrate/cli",
-  "version": "1.0.68",
+  "version": "1.0.70",
   "description": "CLI for measuring upgrade drift across Node, .NET, Python & Java projects",
   "type": "module",
   "bin": {