@vibgrate/cli 1.0.7 → 1.0.9

package/dist/{baseline-D4ATDVOG.js → baseline-VFKPGNDX.js}

@@ -1,8 +1,8 @@
 import {
   baselineCommand,
   runBaseline
-} from "./chunk-TQMVPV2O.js";
-import "./chunk-7AHASIDR.js";
+} from "./chunk-OF2BMMSF.js";
+import "./chunk-ZOSHRPMY.js";
 export {
   baselineCommand,
   runBaseline

package/dist/{chunk-TQMVPV2O.js → chunk-OF2BMMSF.js}

@@ -1,7 +1,7 @@
 import {
   runScan,
   writeJsonFile
-} from "./chunk-7AHASIDR.js";
+} from "./chunk-ZOSHRPMY.js";
 
 // src/commands/baseline.ts
 import * as path from "path";

package/dist/{chunk-7AHASIDR.js → chunk-ZOSHRPMY.js}

@@ -953,9 +953,6 @@ function parseDsn(dsn) {
     workspaceId: match[5]
   };
 }
-function computeHmac(body, secret) {
-  return crypto3.createHmac("sha256", secret).update(body).digest("base64");
-}
 var pushCommand = new Command2("push").description("Push scan results to Vibgrate API").option("--dsn <dsn>", "DSN token (or use VIBGRATE_DSN env)").option("--region <region>", "Override data residency region (us, eu)").option("--file <file>", "Scan artifact file", ".vibgrate/scan_result.json").option("--strict", "Fail on upload errors").action(async (opts) => {
   const dsn = opts.dsn || process.env.VIBGRATE_DSN;
   if (!dsn) {
@@ -980,7 +977,6 @@ var pushCommand = new Command2("push").description("Push scan results to Vibgrat
   }
   const body = await readTextFile(filePath);
   const timestamp = String(Date.now());
-  const hmac = computeHmac(body, parsed.secret);
   let host = parsed.host;
   if (opts.region) {
     try {
@@ -999,7 +995,7 @@ var pushCommand = new Command2("push").description("Push scan results to Vibgrat
       headers: {
         "Content-Type": "application/json",
         "X-Vibgrate-Timestamp": timestamp,
-        "Authorization": `VibgrateDSN ${parsed.keyId}:${hmac}`
+        "Authorization": `VibgrateDSN ${parsed.keyId}:${parsed.secret}`
       },
       body
     });
@@ -4203,7 +4199,6 @@ async function autoPush(artifact, rootDir, opts) {
   }
   const body = JSON.stringify(artifact);
   const timestamp = String(Date.now());
-  const hmac = computeHmac(body, parsed.secret);
   let host = parsed.host;
   if (opts.region) {
     try {
@@ -4222,7 +4217,7 @@ async function autoPush(artifact, rootDir, opts) {
       headers: {
         "Content-Type": "application/json",
         "X-Vibgrate-Timestamp": timestamp,
-        "Authorization": `VibgrateDSN ${parsed.keyId}:${hmac}`
+        "Authorization": `VibgrateDSN ${parsed.keyId}:${parsed.secret}`
       },
       body
     });

package/dist/cli.js

@@ -4,7 +4,7 @@ import {
 } from "./chunk-VXZT34Y5.js";
 import {
   baselineCommand
-} from "./chunk-TQMVPV2O.js";
+} from "./chunk-OF2BMMSF.js";
 import {
   VERSION,
   dsnCommand,
@@ -15,7 +15,7 @@ import {
   readJsonFile,
   scanCommand,
   writeDefaultConfig
-} from "./chunk-7AHASIDR.js";
+} from "./chunk-ZOSHRPMY.js";
 
 // src/cli.ts
 import { Command as Command4 } from "commander";
@@ -38,7 +38,7 @@ var initCommand = new Command("init").description("Initialize vibgrate in a proj
     console.log(chalk.green("\u2714") + ` Created ${chalk.bold("vibgrate.config.ts")}`);
   }
   if (opts.baseline) {
-    const { runBaseline } = await import("./baseline-D4ATDVOG.js");
+    const { runBaseline } = await import("./baseline-VFKPGNDX.js");
     await runBaseline(rootDir);
   }
   console.log("");

package/dist/index.js

@@ -7,7 +7,7 @@ import {
   formatText,
   generateFindings,
   runScan
-} from "./chunk-7AHASIDR.js";
+} from "./chunk-ZOSHRPMY.js";
 export {
   computeDriftScore,
   formatMarkdown,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibgrate/cli",
-  "version": "1.0.7",
+  "version": "1.0.9",
   "description": "CLI for measuring upgrade drift across Node & .NET projects",
   "type": "module",
   "bin": {