@vibgrate/cli 1.0.69 → 1.0.71

package/dist/{baseline-ZTTNU7WC.js → baseline-FBU3K6U7.js}

@@ -1,8 +1,8 @@
 import {
   baselineCommand,
   runBaseline
-} from "./chunk-DGQCRO6X.js";
-import "./chunk-5DTDDZHE.js";
+} from "./chunk-SEMFRCWZ.js";
+import "./chunk-AOCAJJFK.js";
 import "./chunk-TBE6NQ5Z.js";
 export {
   baselineCommand,

package/dist/{chunk-5DTDDZHE.js → chunk-AOCAJJFK.js}

@@ -2125,15 +2125,47 @@ var KNOWN_DOTNET_FRAMEWORKS = {
   "LiteDB": "LiteDB",
   "RavenDB.Client": "RavenDB",
   // ── Hosting & Configuration ──
+  // All Microsoft.Extensions.* and System.* packages that ship as part of the
+  // .NET SDK release train are prefixed with '.NET ' so that the dashboard can
+  // group them under a single '.NET X.Y.Z → A.B.C' header when they all move
+  // together (e.g. .NET 8 → 10 upgrade).
   "Microsoft.Extensions.Hosting": ".NET Hosting",
+  "Microsoft.Extensions.Hosting.Abstractions": ".NET Hosting Abstractions",
   "Microsoft.Extensions.DependencyInjection": ".NET DI",
+  "Microsoft.Extensions.DependencyInjection.Abstractions": ".NET DI Abstractions",
   "Microsoft.Extensions.Configuration": ".NET Configuration",
+  "Microsoft.Extensions.Configuration.Abstractions": ".NET Configuration Abstractions",
+  "Microsoft.Extensions.Configuration.Binder": ".NET Configuration Binder",
+  "Microsoft.Extensions.Configuration.EnvironmentVariables": ".NET Configuration EnvVars",
+  "Microsoft.Extensions.Configuration.Json": ".NET Configuration JSON",
+  "Microsoft.Extensions.Configuration.UserSecrets": ".NET Configuration UserSecrets",
   "Microsoft.Extensions.Logging": ".NET Logging",
+  "Microsoft.Extensions.Logging.Abstractions": ".NET Logging Abstractions",
+  "Microsoft.Extensions.Logging.Console": ".NET Logging Console",
+  "Microsoft.Extensions.Logging.Debug": ".NET Logging Debug",
+  "Microsoft.Extensions.Logging.EventSource": ".NET Logging EventSource",
   "Microsoft.Extensions.Options": ".NET Options",
+  "Microsoft.Extensions.Options.ConfigurationExtensions": ".NET Options Configuration",
+  "Microsoft.Extensions.Options.DataAnnotations": ".NET Options DataAnnotations",
   "Microsoft.Extensions.Caching.Memory": ".NET Memory Cache",
+  "Microsoft.Extensions.Caching.Abstractions": ".NET Caching Abstractions",
   "Microsoft.Extensions.Caching.StackExchangeRedis": ".NET Redis Cache",
   "Microsoft.Extensions.Http": ".NET HttpClientFactory",
+  "Microsoft.Extensions.Http.Resilience": ".NET HttpClient Resilience",
   "Microsoft.Extensions.Resilience": ".NET Resilience",
+  "Microsoft.Extensions.Diagnostics": ".NET Diagnostics",
+  "Microsoft.Extensions.Diagnostics.HealthChecks": ".NET Health Checks (Extensions)",
+  "Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions": ".NET Health Checks Abstractions",
+  "Microsoft.Extensions.FileProviders.Abstractions": ".NET File Providers",
+  "Microsoft.Extensions.FileProviders.Physical": ".NET File Providers Physical",
+  "Microsoft.Extensions.Localization": ".NET Localization",
+  "Microsoft.Extensions.Localization.Abstractions": ".NET Localization Abstractions",
+  "Microsoft.Extensions.Primitives": ".NET Primitives",
+  // System.* packages that ship with the .NET SDK
+  "System.Text.Json": ".NET System.Text.Json",
+  "System.Text.Encodings.Web": ".NET System.Text.Encodings.Web",
+  "System.Net.Http.Json": ".NET System.Net.Http.Json",
+  "System.ComponentModel.Annotations": ".NET ComponentModel Annotations",
   // ── CQRS & Mediator ──
   "MediatR": "MediatR",
   "Wolverine": "Wolverine",
@@ -2147,7 +2179,8 @@ var KNOWN_DOTNET_FRAMEWORKS = {
   "FluentValidation.AspNetCore": "FluentValidation ASP.NET",
   // ── Serialization ──
   "Newtonsoft.Json": "Newtonsoft.Json",
-  "System.Text.Json": "System.Text.Json",
+  // Note: System.Text.Json is defined above under '── Hosting & Configuration ──'
+  // as a .NET platform package so it groups with other .NET SDK packages.
   "MessagePack": "MessagePack",
   "protobuf-net": "protobuf-net",
   "CsvHelper": "CsvHelper",
@@ -2269,6 +2302,9 @@ var KNOWN_DOTNET_FRAMEWORKS = {
   "Microsoft.AspNetCore.SignalR.Client": "SignalR Client"
 };
 var LATEST_DOTNET_MAJOR = 9;
+function normalizePath(p) {
+  return p.replace(/\\/g, "/");
+}
 function parseTfmMajor(tfm) {
   const match = tfm.match(/^net(\d+)\.\d+$/);
   if (match?.[1]) return parseInt(match[1], 10);
@@ -2352,7 +2388,7 @@ async function scanDotnetProjects(rootDir, nugetCache, cache) {
       if (result.ok) {
         results.push(result.value);
       } else {
-        const relPath = path5.relative(rootDir, path5.dirname(csprojPath));
+        const relPath = normalizePath(path5.relative(rootDir, path5.dirname(csprojPath)));
         if (cache) {
           cache.addStuckPath(relPath || ".");
         }
@@ -2447,7 +2483,7 @@ async function scanOneCsproj(csprojPath, rootDir, nugetCache, cache) {
   }
   const projectReferences = data.projectReferences.map((refPath) => {
     const absRefPath = path5.resolve(csprojDir, refPath);
-    const relRefPath = path5.relative(rootDir, path5.dirname(absRefPath));
+    const relRefPath = normalizePath(path5.relative(rootDir, path5.dirname(absRefPath)));
     const refName = path5.basename(absRefPath, ".csproj");
     return {
       path: relRefPath || ".",
@@ -2469,7 +2505,7 @@ async function scanOneCsproj(csprojPath, rootDir, nugetCache, cache) {
   const buckets = bucketsMut;
   return {
     type: "dotnet",
-    path: path5.relative(rootDir, csprojDir) || ".",
+    path: normalizePath(path5.relative(rootDir, csprojDir)) || ".",
     name: data.projectName,
     targetFramework,
     runtime: primaryTfm,
@@ -7714,6 +7750,30 @@ function extract(content, pattern, sourceFile) {
   }
   return out;
 }
+function isValidCronExpression(expr) {
+  const trimmed = expr.trim();
+  if (/^@(?:yearly|monthly|weekly|daily|hourly|reboot)$/.test(trimmed)) return true;
+  const FIELD = /^(?:\*(?:\/\d+)?|\d+(?:[,\-]\d+)*(?:\/\d+)?|[?LW]|[\dLW]#\d)$/;
+  const fields = trimmed.split(/\s+/);
+  if (fields.length !== 5 && fields.length !== 6) return false;
+  return fields.every((f) => FIELD.test(f));
+}
+function extractValidCronLines(content, sourceFile) {
+  const out = [];
+  const RE = /['"`]((?:[\d*\/,\-?LW#@A-Za-z]+[ \t]+){4,5}[\d*\/,\-?LW#@A-Za-z]+)['"`]/g;
+  let m;
+  while ((m = RE.exec(content)) !== null) {
+    const candidate = m[1].trim();
+    if (isValidCronExpression(candidate)) out.push(`${candidate} (${sourceFile})`);
+  }
+  return out;
+}
+function deriveProjectFromPath(relPath) {
+  const parts = relPath.split("/");
+  if (parts.length === 1) return "root";
+  if (parts[0] === "packages" && parts.length >= 2) return parts[1];
+  return parts[0];
+}
 var LOCKFILE_NAMES = /* @__PURE__ */ new Set([
   "package-lock.json",
   "pnpm-lock.yaml",
@@ -7959,7 +8019,7 @@ async function scanApiSurface(rootDir, fileCache) {
       });
     }
   }
-  result.integrations = [...integrationMap.values()].sort((a, b) => a.provider.localeCompare(b.provider));
+  result.integrations = [...integrationMap.values()].filter((i) => i.files.some((f) => !NON_CODE_EXTENSIONS.has(path23.extname(f).toLowerCase()))).sort((a, b) => a.provider.localeCompare(b.provider));
   result.openApiSpecifications = [...new Map(result.openApiSpecifications.map((spec) => [spec.path, spec])).values()].sort((a, b) => a.path.localeCompare(b.path));
   result.webhookUrls = uniq(result.webhookUrls);
   result.callbackEndpoints = uniq(result.callbackEndpoints);
@@ -8033,7 +8093,10 @@ async function scanOperationalResilience(rootDir, fileCache) {
     result.defaultCharacterEncoding.push(...extract(file.content, /\b(?:charset|encoding|UTF-?8|ISO-8859-1)\b[^\n]*/gi, file.relPath));
     result.sessionStores.push(...extract(file.content, /\b(?:sessionStore|redisStore|memoryStore)\b[^\n]*/gi, file.relPath));
     result.distributedLocks.push(...extract(file.content, /\b(?:distributed[_-]?lock|redlock|mutex)\b[^\n]*/gi, file.relPath));
-    result.jobSchedulers.push(...extract(file.content, /\b(?:cron|schedule|bullmq|agenda|job[_-]?scheduler)\b[^\n]*/gi, file.relPath));
+    for (const cronLine of extractValidCronLines(file.content, file.relPath)) {
+      const project = deriveProjectFromPath(file.relPath);
+      result.jobSchedulers.push(`[${project}] ${cronLine}`);
+    }
     result.idempotencyKeys.push(...extract(file.content, /\b(?:idempotency[_-]?key|Idempotency-Key)\b[^\n]*/gi, file.relPath));
     result.rateLimitingCounters.push(...extract(file.content, /\b(?:rate[_-]?limit|throttle|quota)\b[^\n]*/gi, file.relPath));
     result.circuitBreakerState.push(...extract(file.content, /\b(?:circuit[_-]?breaker|half[_-]?open|open[_-]?state)\b[^\n]*/gi, file.relPath));
@@ -8050,7 +8113,7 @@ async function scanOperationalResilience(rootDir, fileCache) {
     result.dataMaskingRules.push(...extract(file.content, /\b(?:data[_-]?mask|redact|pii[_-]?mask)\b[^\n]*/gi, file.relPath));
     result.transformationLogic.push(...extract(file.content, /\b(?:transform|mapper|normaliz(?:e|ation))\b[^\n]*/gi, file.relPath));
     result.timezoneHandling.push(...extract(file.content, /\b(?:convertTimezone|tz\(|moment\.tz|DateTimeZone)\b[^\n]*/gi, file.relPath));
-    result.encryptionSettings.push(...extract(file.content, /\b(?:kms|encrypt(?:ion)?|cipher|tls|minTlsVersion)\b[^\n]*/gi, file.relPath));
+    result.encryptionSettings.push(...extract(file.content, /(aes-(?:128|192|256)-(?:gcm|cbc|ctr|cfb8?|ofb|ecb|ccm|ocb|wrap(?:-pad)?)|chacha20-poly1305|des-ede3?(?:-(?:cbc|cfb8?|ofb))?|bf-(?:cbc|cfb|ecb|ofb)|aria-(?:128|192|256)-(?:gcm|cbc|ctr|cfb8?|ofb|ecb|ccm)|camellia-(?:128|192|256)-(?:cbc|cfb8?|ofb|ecb)|seed-cbc|rc4(?:-(?:40|hmac-md5))?|rc2-(?:(?:40|64|128)-)?cbc)/gi, file.relPath));
     result.hardcodedSecretSignals.push(...extract(file.content, /\b(?:password|passwd|connectionString|api[_-]?key|secret)\b\s*[:=]\s*['"][^'"]{4,}['"]/gi, file.relPath));
   }
   Object.keys(result).forEach((key) => {

package/dist/{chunk-DGQCRO6X.js → chunk-SEMFRCWZ.js}

@@ -1,6 +1,6 @@
 import {
   runScan
-} from "./chunk-5DTDDZHE.js";
+} from "./chunk-AOCAJJFK.js";
 import {
   writeJsonFile
 } from "./chunk-TBE6NQ5Z.js";

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   baselineCommand
-} from "./chunk-DGQCRO6X.js";
+} from "./chunk-SEMFRCWZ.js";
 import {
   VERSION,
   dsnCommand,
@@ -10,7 +10,7 @@ import {
   pushCommand,
   scanCommand,
   writeDefaultConfig
-} from "./chunk-5DTDDZHE.js";
+} from "./chunk-AOCAJJFK.js";
 import {
   ensureDir,
   pathExists,
@@ -39,7 +39,7 @@ var initCommand = new Command("init").description("Initialize vibgrate in a proj
     console.log(chalk.green("\u2714") + ` Created ${chalk.bold("vibgrate.config.ts")}`);
   }
   if (opts.baseline) {
-    const { runBaseline } = await import("./baseline-ZTTNU7WC.js");
+    const { runBaseline } = await import("./baseline-FBU3K6U7.js");
     await runBaseline(rootDir);
   }
   console.log("");

package/dist/index.js

@@ -5,7 +5,7 @@ import {
   formatText,
   generateFindings,
   runScan
-} from "./chunk-5DTDDZHE.js";
+} from "./chunk-AOCAJJFK.js";
 import "./chunk-TBE6NQ5Z.js";
 export {
   computeDriftScore,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibgrate/cli",
-  "version": "1.0.69",
+  "version": "1.0.71",
   "description": "CLI for measuring upgrade drift across Node, .NET, Python & Java projects",
   "type": "module",
   "bin": {