cloudburn 0.15.0 → 0.16.1

package/README.md

@@ -99,6 +99,12 @@ cloudburn discover
 cloudburn discover --region eu-central-1
 cloudburn discover --config .cloudburn.yml --enabled-rules CLDBRN-AWS-EBS-1
 cloudburn discover --enabled-rules CLDBRN-AWS-LAMBDA-4
+cloudburn discover --enabled-rules CLDBRN-AWS-COSTOPTIMIZATIONHUB-1
+cloudburn discover --enabled-rules CLDBRN-AWS-COSTOPTIMIZATIONHUB-2
+cloudburn discover --enabled-rules CLDBRN-AWS-COSTOPTIMIZATIONHUB-3
+cloudburn discover --enabled-rules CLDBRN-AWS-COSTOPTIMIZATIONHUB-4
+cloudburn discover --enabled-rules CLDBRN-AWS-COSTOPTIMIZATIONHUB-5
+cloudburn discover --enabled-rules CLDBRN-AWS-COSTOPTIMIZATIONHUB-6
 cloudburn discover --enabled-rules CLDBRN-AWS-TAGGING-1
 cloudburn discover --service ec2,s3
 cloudburn discover --fail-on high
@@ -109,9 +115,29 @@ cloudburn rules list --service ec2 --source discovery --severity high
 
 The discovery config equivalent is `discovery.fail-on`.
 
+Discovery has a five-minute deadline. Use `--timeout <seconds>` to change it, for example `cloudburn discover --timeout 600`. If the deadline expires, the command exits with code 2 and reports the timeout.
+
 The CLI targets one region per run. Multi-region discovery remains available through the SDK and still needs an AWS Resource Explorer aggregator plus an unfiltered default view in the aggregator region.
 `CLDBRN-AWS-TAGGING-1` is opt-in and requires an accessible aggregator; a local-only setup cannot run account-wide tagging discovery.
 `CLDBRN-AWS-LAMBDA-4` is opt-in and requires AWS Compute Optimizer enrollment.
+`CLDBRN-AWS-COSTOPTIMIZATIONHUB-1` through `CLDBRN-AWS-COSTOPTIMIZATIONHUB-6` are opt-in and require AWS Cost Optimization Hub enrollment. CloudBurn checks enrollment but never changes it. These rules use `cost-optimization-hub:ListEnrollmentStatuses`, `cost-optimization-hub:ListRecommendations`, and `cost-optimization-hub:GetRecommendation`, with `Resource: "*"`, plus `sts:GetCallerIdentity` for account scoping.
+
+Rule 3 reports idle-capacity Stop, Delete, and ScaleIn recommendations. It never executes them. Missing enrollment,
+denied access, and malformed evidence produce diagnostics. Review the exact action and rollback capability before acting.
+Table output includes an Action column for these findings. Regional discovery limits recommendations to the selected Region.
+
+`CLDBRN-AWS-COSTOPTIMIZATIONHUB-5` reviews AWS `Upgrade` recommendations for standalone EC2 instances, Auto Scaling groups, EBS volumes, RDS DB instances, and RDS DB instance storage. It preserves both configurations for generation review; rightsizing and Graviton migration use separate AWS actions. Unenrolled accounts, access denial, and incomplete required details produce unavailable diagnostics.
+
+Rule 6 reports Graviton migration candidates for standalone EC2 instances, Auto Scaling groups, and RDS DB instances.
+Review workload compatibility and rollback requirements before migrating. Unclassified workloads are not confirmed
+compatible; unavailable evidence produces diagnostics. See the [SDK evidence contract](../sdk/README.md) for details.
+Reservation findings include their AWS resource namespace in JSON and in the default table output.
+`CLDBRN-AWS-COSTOPTIMIZATIONHUB-4` is also opt-in and uses the same Hub IAM actions for rightsizing recommendations
+across EC2 instances and Auto Scaling groups, EBS, Lambda, ECS, RDS instances and storage, and Aurora cluster storage.
+It reads recommendations across Regions for the current account through `us-east-1`. Missing enrollment, denied
+access, or incomplete configurations produce diagnostics. The SDK exposes both typed configurations with
+`includeEvaluationResources: true`; the CLI prints finding identities and diagnostics.
+`CLDBRN-AWS-SAGEMAKER-3` uses Cost Explorer coverage data and remains available when Cost Optimization Hub is unavailable.
 Use `--debug` to print SDK and provider execution tracing to `stderr` without changing the normal `stdout` format.
 
 ## Shell Completion

package/dist/cli.js

@@ -551,7 +551,9 @@ var scanColumns = [
   { key: "severity", header: "Severity" },
   { key: "source", header: "Source" },
   { key: "service", header: "Service" },
+  { key: "resourceType", header: "ResourceType" },
   { key: "resourceId", header: "ResourceId" },
+  { key: "actionType", header: "Action" },
   { key: "accountId", header: "AccountId" },
   { key: "region", header: "Region" },
   { key: "path", header: "Path" },
@@ -689,11 +691,13 @@ ${renderAsciiTable(diagnosticRows, diagnosticColumns)}`
 };
 var projectFindingRows = (result) => flattenScanResult(result).map(({ finding, message, provider, ruleId, service, severity, source }) => ({
   accountId: finding.accountId ?? "",
+  actionType: finding.actionType ?? "",
   message,
   path: finding.location?.path ?? "",
   provider,
   region: finding.region ?? "",
   resourceId: finding.resourceId,
+  resourceType: finding.resourceType ?? "",
   ruleId,
   service,
   severity,
@@ -1138,6 +1142,13 @@ var validateServiceList = (mode, services) => {
 };
 
 // src/commands/discover.ts
+var parseDiscoveryTimeout = (value) => {
+  const seconds = Number(value);
+  if (!Number.isInteger(seconds) || seconds < 1 || seconds > 2147483) {
+    throw new InvalidArgumentError3("Timeout must be a whole number of seconds between 1 and 2147483.");
+  }
+  return seconds;
+};
 var parseDiscoveryServiceList = (value) => validateServiceList("discovery", parseServiceList(value)) ?? [];
 var describeInitializationMessage = (result) => {
   const baseMessage = result.indexType === "aggregator" ? result.aggregatorAction === "promoted" ? `Promoted the existing local Resource Explorer index in ${result.aggregatorRegion} to the aggregator.` : result.aggregatorAction === "created" ? `Configured ${result.aggregatorRegion} as the Resource Explorer aggregator.` : result.coverage === "full" ? `Resource Explorer aggregator already exists in ${result.aggregatorRegion}.` : `Resource Explorer aggregator already exists in ${result.aggregatorRegion}, but only ${result.observedStatus.indexedRegionCount} of ${result.observedStatus.totalRegionCount} regions are indexed.` : result.status === "EXISTING" ? `Local Resource Explorer setup already exists in ${result.aggregatorRegion}.` : `Local Resource Explorer setup created in ${result.aggregatorRegion}.`;
@@ -1245,7 +1256,7 @@ var registerDiscoverCommand = (program) => {
       "--region <region>",
       "AWS region to discover. Defaults to the current AWS region from AWS_REGION when omitted.",
       parseAwsRegion
-    ).option("--config <path>", "Explicit CloudBurn config file to load (required for config files in CI)").option(
+    ).option("--config <path>", "Explicit CloudBurn config file to load (required for config files in CI)").option("--timeout <seconds>", "Maximum discovery duration in seconds (default: 300).", parseDiscoveryTimeout).option(
       "--enabled-rules <ruleIds>",
       "Comma-separated rule IDs to enable. When set, CloudBurn checks only these rules. By default, AWS Core preset rules are enabled.",
       parseRuleIdList
@@ -1276,6 +1287,9 @@ var registerDiscoverCommand = (program) => {
         if (onProgress !== void 0) {
           discoveryOptions.onProgress = onProgress;
         }
+        if (options.timeout !== void 0) {
+          discoveryOptions.timeoutMs = options.timeout * 1e3;
+        }
         const result = await scanner.discover(discoveryOptions);
         const format = resolveOutputFormat(command, void 0, loadedConfig.discovery.format ?? "table");
         const output = renderResponse({ kind: "scan-result", result }, format);
@@ -1552,7 +1566,7 @@ var isCliEntrypoint = (moduleUrl, argvEntry = process.argv[1]) => {
 };
 var createProgram = () => {
   const program = createCliCommand();
-  program.name("cloudburn").usage("[command]").description("Know what you spend. Fix what you waste.").version("0.15.0").option("--debug", "Write execution trace messages to stderr").option("--format <format>", OUTPUT_FORMAT_OPTION_DESCRIPTION, parseOutputFormat);
+  program.name("cloudburn").usage("[command]").description("Know what you spend. Fix what you waste.").version("0.16.1").option("--debug", "Write execution trace messages to stderr").option("--format <format>", OUTPUT_FORMAT_OPTION_DESCRIPTION, parseOutputFormat);
   configureCliHelp(program);
   program.exitOverride();
   registerCompletionCommand(program);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cloudburn",
-  "version": "0.15.0",
+  "version": "0.16.1",
   "description": "Cloudburn CLI for cloud cost optimization",
   "homepage": "https://cloudburn.io/docs",
   "bugs": {
@@ -20,7 +20,7 @@
   ],
   "dependencies": {
     "commander": "^13.1.0",
-    "@cloudburn/sdk": "0.31.0"
+    "@cloudburn/sdk": "0.32.1"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.5.3",
@@ -51,6 +51,8 @@
     "build": "tsup",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
+    "test:e2e": "node --test test/e2e/*.test.mjs",
+    "test:package": "node --test test/package/*.test.mjs",
     "lint": "biome check --error-on-warnings .",
     "lint:fix": "biome check --write .",
     "clean": "rm -rf dist",