cloudburn 0.14.1 → 0.16.0

package/README.md

@@ -99,6 +99,12 @@ cloudburn discover
 cloudburn discover --region eu-central-1
 cloudburn discover --config .cloudburn.yml --enabled-rules CLDBRN-AWS-EBS-1
 cloudburn discover --enabled-rules CLDBRN-AWS-LAMBDA-4
+cloudburn discover --enabled-rules CLDBRN-AWS-COSTOPTIMIZATIONHUB-1
+cloudburn discover --enabled-rules CLDBRN-AWS-COSTOPTIMIZATIONHUB-2
+cloudburn discover --enabled-rules CLDBRN-AWS-COSTOPTIMIZATIONHUB-3
+cloudburn discover --enabled-rules CLDBRN-AWS-COSTOPTIMIZATIONHUB-4
+cloudburn discover --enabled-rules CLDBRN-AWS-COSTOPTIMIZATIONHUB-5
+cloudburn discover --enabled-rules CLDBRN-AWS-COSTOPTIMIZATIONHUB-6
 cloudburn discover --enabled-rules CLDBRN-AWS-TAGGING-1
 cloudburn discover --service ec2,s3
 cloudburn discover --fail-on high
@@ -112,6 +118,24 @@ The discovery config equivalent is `discovery.fail-on`.
 The CLI targets one region per run. Multi-region discovery remains available through the SDK and still needs an AWS Resource Explorer aggregator plus an unfiltered default view in the aggregator region.
 `CLDBRN-AWS-TAGGING-1` is opt-in and requires an accessible aggregator; a local-only setup cannot run account-wide tagging discovery.
 `CLDBRN-AWS-LAMBDA-4` is opt-in and requires AWS Compute Optimizer enrollment.
+`CLDBRN-AWS-COSTOPTIMIZATIONHUB-1` through `CLDBRN-AWS-COSTOPTIMIZATIONHUB-6` are opt-in and require AWS Cost Optimization Hub enrollment. CloudBurn checks enrollment but never changes it. These rules use `cost-optimization-hub:ListEnrollmentStatuses`, `cost-optimization-hub:ListRecommendations`, and `cost-optimization-hub:GetRecommendation`, with `Resource: "*"`, plus `sts:GetCallerIdentity` for account scoping.
+
+Rule 3 reports idle-capacity Stop, Delete, and ScaleIn recommendations. It never executes them. Missing enrollment,
+denied access, and malformed evidence produce diagnostics. Review the exact action and rollback capability before acting.
+Table output includes an Action column for these findings. Regional discovery limits recommendations to the selected Region.
+
+`CLDBRN-AWS-COSTOPTIMIZATIONHUB-5` reviews AWS `Upgrade` recommendations for standalone EC2 instances, Auto Scaling groups, EBS volumes, RDS DB instances, and RDS DB instance storage. It preserves both configurations for generation review; rightsizing and Graviton migration use separate AWS actions. Unenrolled accounts, access denial, and incomplete required details produce unavailable diagnostics.
+
+Rule 6 reports Graviton migration candidates for standalone EC2 instances, Auto Scaling groups, and RDS DB instances.
+Review workload compatibility and rollback requirements before migrating. Unclassified workloads are not confirmed
+compatible; unavailable evidence produces diagnostics. See the [SDK evidence contract](../sdk/README.md) for details.
+Reservation findings include their AWS resource namespace in JSON and in the default table output.
+`CLDBRN-AWS-COSTOPTIMIZATIONHUB-4` is also opt-in and uses the same Hub IAM actions for rightsizing recommendations
+across EC2 instances and Auto Scaling groups, EBS, Lambda, ECS, RDS instances and storage, and Aurora cluster storage.
+It reads recommendations across Regions for the current account through `us-east-1`. Missing enrollment, denied
+access, or incomplete configurations produce diagnostics. The SDK exposes both typed configurations with
+`includeEvaluationResources: true`; the CLI prints finding identities and diagnostics.
+`CLDBRN-AWS-SAGEMAKER-3` uses Cost Explorer coverage data and remains available when Cost Optimization Hub is unavailable.
 Use `--debug` to print SDK and provider execution tracing to `stderr` without changing the normal `stdout` format.
 
 ## Shell Completion

package/dist/cli.js

@@ -551,7 +551,9 @@ var scanColumns = [
   { key: "severity", header: "Severity" },
   { key: "source", header: "Source" },
   { key: "service", header: "Service" },
+  { key: "resourceType", header: "ResourceType" },
   { key: "resourceId", header: "ResourceId" },
+  { key: "actionType", header: "Action" },
   { key: "accountId", header: "AccountId" },
   { key: "region", header: "Region" },
   { key: "path", header: "Path" },
@@ -689,11 +691,13 @@ ${renderAsciiTable(diagnosticRows, diagnosticColumns)}`
 };
 var projectFindingRows = (result) => flattenScanResult(result).map(({ finding, message, provider, ruleId, service, severity, source }) => ({
   accountId: finding.accountId ?? "",
+  actionType: finding.actionType ?? "",
   message,
   path: finding.location?.path ?? "",
   provider,
   region: finding.region ?? "",
   resourceId: finding.resourceId,
+  resourceType: finding.resourceType ?? "",
   ruleId,
   service,
   severity,
@@ -1552,7 +1556,7 @@ var isCliEntrypoint = (moduleUrl, argvEntry = process.argv[1]) => {
 };
 var createProgram = () => {
   const program = createCliCommand();
-  program.name("cloudburn").usage("[command]").description("Know what you spend. Fix what you waste.").version("0.14.1").option("--debug", "Write execution trace messages to stderr").option("--format <format>", OUTPUT_FORMAT_OPTION_DESCRIPTION, parseOutputFormat);
+  program.name("cloudburn").usage("[command]").description("Know what you spend. Fix what you waste.").version("0.16.0").option("--debug", "Write execution trace messages to stderr").option("--format <format>", OUTPUT_FORMAT_OPTION_DESCRIPTION, parseOutputFormat);
   configureCliHelp(program);
   program.exitOverride();
   registerCompletionCommand(program);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cloudburn",
-  "version": "0.14.1",
+  "version": "0.16.0",
   "description": "Cloudburn CLI for cloud cost optimization",
   "homepage": "https://cloudburn.io/docs",
   "bugs": {
@@ -20,7 +20,7 @@
   ],
   "dependencies": {
     "commander": "^13.1.0",
-    "@cloudburn/sdk": "0.30.1"
+    "@cloudburn/sdk": "0.32.0"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.5.3",