@vibgrate/cli 1.0.70 → 1.0.72

package/dist/{chunk-TBE6NQ5Z.js → chunk-JQHUH6A3.js}

@@ -220,12 +220,16 @@ var FileCache = class _FileCache {
   existsCache = /* @__PURE__ */ new Map();
   /** User-configured exclude predicate (compiled from glob patterns) */
   excludePredicate = null;
-  /** Directories that were auto-skipped because they were stuck (>60s) */
+  /** Directories that were auto-skipped because they were stuck */
   _stuckPaths = [];
   /** Files skipped because they exceed maxFileSizeToScan */
   _skippedLargeFiles = [];
   /** Maximum file size (bytes) we will read. 0 = unlimited. */
   _maxFileSize = 0;
+  /** Per-project / per-directory scan timeout in ms. */
+  _projectScanTimeout = 18e4;
+  /** Whether we have already shown the "increase projectScanTimeout" hint */
+  _timeoutHintShown = false;
   /** Root dir for relative-path computation (set by the first walkDir call) */
   _rootDir = null;
   /** Cached tree summary captured during the shared walk */
@@ -240,10 +244,29 @@ var FileCache = class _FileCache {
   setMaxFileSize(bytes) {
     this._maxFileSize = bytes;
   }
+  /** Set the per-project scan timeout (milliseconds). Scanners use this
+   *  instead of a hard-coded constant so the user can override it via config. */
+  setProjectScanTimeout(ms) {
+    this._projectScanTimeout = ms;
+  }
+  /** Current per-project scan timeout in milliseconds */
+  get projectScanTimeout() {
+    return this._projectScanTimeout;
+  }
   /** Record a path that timed out or was stuck during scanning */
   addStuckPath(relPath) {
     this._stuckPaths.push(relPath);
   }
+  /**
+   * Returns true the first time it is called, false thereafter.
+   * Used by scanners to print the "increase projectScanTimeout" hint
+   * only once per scan run.
+   */
+  shouldShowTimeoutHint() {
+    if (this._timeoutHintShown) return false;
+    this._timeoutHintShown = true;
+    return true;
+  }
   /** Get all paths that were auto-skipped due to being stuck (dirs + scanner files) */
   get stuckPaths() {
     return this._stuckPaths;
@@ -287,7 +310,7 @@ var FileCache = class _FileCache {
     let lastReported = 0;
     const REPORT_INTERVAL = 50;
     const sem = new Semaphore(maxConcurrentReads);
-    const STUCK_TIMEOUT_MS = 6e4;
+    const STUCK_TIMEOUT_MS = this._projectScanTimeout;
     const extraSkip = _FileCache.EXTRA_SKIP;
     const isExcluded = this.excludePredicate;
     const stuckDirs = this._stuckPaths;
@@ -300,12 +323,15 @@ var FileCache = class _FileCache {
       try {
         entries = await sem.run(async () => {
           const readPromise = fs.readdir(dir, { withFileTypes: true });
+          let stuckTimer;
           const result = await Promise.race([
             readPromise.then((e) => ({ ok: true, entries: e })),
-            new Promise(
-              (resolve2) => setTimeout(() => resolve2({ ok: false }), STUCK_TIMEOUT_MS)
-            )
+            new Promise((resolve2) => {
+              stuckTimer = setTimeout(() => resolve2({ ok: false }), STUCK_TIMEOUT_MS);
+              stuckTimer.unref();
+            })
           ]);
+          clearTimeout(stuckTimer);
           if (!result.ok) {
             stuckDirs.push(relDir || dir);
             return null;
@@ -378,6 +404,29 @@ var FileCache = class _FileCache {
     const entries = await this.walkDir(rootDir);
     return entries.filter((e) => e.isFile && e.name.endsWith(".sln")).map((e) => e.absPath);
   }
+  /**
+   * Count files under a given directory using the cached walk data.
+   * Avoids a redundant recursive readdir that can be slow on large
+   * project trees (the main cause of per-project timeout hits).
+   * Falls back to the standalone `countFilesInDir` if the walk hasn't
+   * been populated yet.
+   */
+  async countFilesUnder(rootDir, dir) {
+    const entries = this.walkCache.get(rootDir);
+    if (!entries) {
+      return countFilesInDir(dir);
+    }
+    const resolved = await entries;
+    const prefix = dir.endsWith(path2.sep) ? dir : dir + path2.sep;
+    let count = 0;
+    for (const e of resolved) {
+      if (!e.isFile) continue;
+      if (e.absPath === dir || e.absPath.startsWith(prefix)) {
+        count++;
+      }
+    }
+    return count;
+  }
   // ── File content reading ──
   /**
    * Read a text file. Files ≤ 1 MB are cached so subsequent calls from

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   baselineCommand
-} from "./chunk-L37LOGK2.js";
+} from "./chunk-7MXWH3XU.js";
 import {
   VERSION,
   dsnCommand,
@@ -10,13 +10,13 @@ import {
   pushCommand,
   scanCommand,
   writeDefaultConfig
-} from "./chunk-RTKLZCLZ.js";
+} from "./chunk-DSKISXFM.js";
 import {
   ensureDir,
   pathExists,
   readJsonFile,
   writeTextFile
-} from "./chunk-TBE6NQ5Z.js";
+} from "./chunk-JQHUH6A3.js";
 
 // src/cli.ts
 import { Command as Command6 } from "commander";
@@ -39,7 +39,7 @@ var initCommand = new Command("init").description("Initialize vibgrate in a proj
     console.log(chalk.green("\u2714") + ` Created ${chalk.bold("vibgrate.config.ts")}`);
   }
   if (opts.baseline) {
-    const { runBaseline } = await import("./baseline-MRLWTPFD.js");
+    const { runBaseline } = await import("./baseline-DXFJEV4M.js");
     await runBaseline(rootDir);
   }
   console.log("");

package/dist/{fs-B2ZS4NOP.js → fs-D24ONFXR.js}

@@ -13,7 +13,7 @@ import {
   readTextFile,
   writeJsonFile,
   writeTextFile
-} from "./chunk-TBE6NQ5Z.js";
+} from "./chunk-JQHUH6A3.js";
 export {
   FileCache,
   countFilesInDir,

package/dist/index.d.ts

@@ -55,6 +55,8 @@ interface ProjectScan {
     fileCount?: number;
     /** Project-level architecture layer diagram (Mermaid flowchart) */
     architectureMermaid?: string;
+    /** Project-level architecture detection result (layers, archetype, file counts) */
+    architecture?: ArchitectureResult;
     /** Project-level relationship diagram (first-level parents + children) */
     relationshipDiagram?: MermaidDiagram;
     /** Compacted UI purpose evidence for this project */
@@ -75,6 +77,8 @@ interface SolutionScan {
     projectPaths: string[];
     /** Aggregate drift score for all resolved projects in this solution */
     drift?: DriftScore;
+    /** Aggregate architecture result for all projects in this solution */
+    architecture?: ArchitectureResult;
     /** Solution relationship diagram with top-level solution node and project links */
     relationshipDiagram?: MermaidDiagram;
 }
@@ -158,8 +162,6 @@ interface ScanOptions {
     region?: string;
     /** Fail on push errors (like --strict on push command) */
     strict?: boolean;
-    /** Auto-install missing security tools via Homebrew */
-    installTools?: boolean;
     /** Enable optional UI-purpose evidence extraction (slower, richer context for dashboard) */
     uiPurpose?: boolean;
     /** Prevent writing .vibgrate JSON artifacts to disk */
@@ -174,14 +176,12 @@ interface ScanOptions {
     driftBudget?: number;
     /** Fail when drift worsens by more than this percentage vs baseline */
     driftWorseningPercent?: number;
+    /** Per-project scan timeout override (seconds). Takes precedence over config file. */
+    projectScanTimeout?: number;
 }
 interface ScannerToggle {
     enabled: boolean;
 }
-type OwaspScannerMode = 'fast' | 'cache-input';
-interface OwaspScannerConfig extends ScannerToggle {
-    mode?: OwaspScannerMode;
-}
 interface ScannersConfig {
     platformMatrix?: ScannerToggle;
     dependencyRisk?: ScannerToggle;
@@ -192,11 +192,9 @@ interface ScannersConfig {
     breakingChangeExposure?: ScannerToggle;
     fileHotspots?: ScannerToggle;
     securityPosture?: ScannerToggle;
-    securityScanners?: ScannerToggle;
     serviceDependencies?: ScannerToggle;
     architecture?: ScannerToggle;
     codeQuality?: ScannerToggle;
-    owaspCategoryMapping?: OwaspScannerConfig;
     uiPurpose?: ScannerToggle;
     runtimeConfiguration?: ScannerToggle;
     dataStores?: ScannerToggle;
@@ -211,6 +209,10 @@ interface VibgrateConfig {
     /** Maximum file size (bytes) the CLI will read during a scan. Files larger
      *  than this are silently skipped.  Default: 5 242 880 (5 MB). */
     maxFileSizeToScan?: number;
+    /** Per-project scan timeout in seconds.  If a single project takes
+     *  longer than this the project is skipped and the path auto-excluded on
+     *  the next run.  Increase for very large mono-repos.  Default: 180 (3 min). */
+    projectScanTimeout?: number;
     scanners?: ScannersConfig | false;
     thresholds?: {
         failOnError?: {
@@ -378,32 +380,6 @@ interface ServiceDependenciesResult {
     storage: ServiceDependencyItem[];
     search: ServiceDependencyItem[];
 }
-type SecurityScannerStatus = 'up-to-date' | 'review-needed' | 'unknown' | 'unavailable';
-interface SecurityToolAssessment {
-    name: 'semgrep' | 'gitleaks' | 'trufflehog';
-    category: 'sast' | 'secrets';
-    command: string;
-    available: boolean;
-    version: string | null;
-    minRecommendedVersion: string;
-    status: SecurityScannerStatus;
-    risks: string[];
-}
-interface SecretHeuristicFinding {
-    file: string;
-    detector: string;
-    sample: string;
-}
-interface SecurityScannersResult {
-    semgrep: SecurityToolAssessment;
-    secretScanners: SecurityToolAssessment[];
-    configFiles: {
-        semgrep: boolean;
-        gitleaks: boolean;
-        trufflehog: boolean;
-    };
-    heuristicFindings: SecretHeuristicFinding[];
-}
 /** Detected project archetype (fingerprint) */
 type ProjectArchetype = 'nextjs' | 'remix' | 'sveltekit' | 'nuxt' | 'nestjs' | 'express' | 'fastify' | 'hono' | 'koa' | 'serverless' | 'library' | 'cli' | 'monorepo' | 'unknown';
 /** Architectural layer classification */
@@ -611,11 +587,9 @@ interface ExtendedScanResults {
     breakingChangeExposure?: BreakingChangeExposureResult;
     fileHotspots?: FileHotspotsResult;
     securityPosture?: SecurityPostureResult;
-    securityScanners?: SecurityScannersResult;
     serviceDependencies?: ServiceDependenciesResult;
     architecture?: ArchitectureResult;
     codeQuality?: CodeQualityResult;
-    owaspCategoryMapping?: OwaspCategoryMappingResult;
     uiPurpose?: UiPurposeResult;
     runtimeConfiguration?: RuntimeConfigurationResult;
     dataStores?: DataStoresResult;
@@ -624,25 +598,6 @@ interface ExtendedScanResults {
     assetBranding?: AssetBrandingResult;
     ossGovernance?: OssGovernanceResult;
 }
-interface OwaspFinding {
-    ruleId: string;
-    path: string;
-    line: number;
-    endLine?: number;
-    message: string;
-    severity: 'low' | 'medium' | 'high';
-    categories: string[];
-    cwe: string | null;
-}
-interface OwaspCategoryMappingResult {
-    scanner: 'semgrep';
-    available: boolean;
-    mode: OwaspScannerMode;
-    scannedFiles: number;
-    findings: OwaspFinding[];
-    categoryCounts: Record<string, number>;
-    errors: string[];
-}
 
 declare function runScan(rootDir: string, opts: ScanOptions): Promise<ScanArtifact>;
 

package/dist/index.js

@@ -5,8 +5,8 @@ import {
   formatText,
   generateFindings,
   runScan
-} from "./chunk-RTKLZCLZ.js";
-import "./chunk-TBE6NQ5Z.js";
+} from "./chunk-DSKISXFM.js";
+import "./chunk-JQHUH6A3.js";
 export {
   computeDriftScore,
   formatMarkdown,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibgrate/cli",
-  "version": "1.0.70",
+  "version": "1.0.72",
   "description": "CLI for measuring upgrade drift across Node, .NET, Python & Java projects",
   "type": "module",
   "bin": {

package/dist/baseline-MRLWTPFD.js

@@ -1,10 +0,0 @@
-import {
-  baselineCommand,
-  runBaseline
-} from "./chunk-L37LOGK2.js";
-import "./chunk-RTKLZCLZ.js";
-import "./chunk-TBE6NQ5Z.js";
-export {
-  baselineCommand,
-  runBaseline
-};